mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 09:57:41 +00:00
Code Issues Releases Wiki Activity

Document side-effects of enabling the use_pty option.

Browse Source
This commit is contained in:
Todd C. Miller 2024-01-08 14:28:58 -07:00
parent ff3dbe60b1
commit b39dc7c5f1
2 changed files with 18 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
docs/sudoers.man.in
View File

@ -2,7 +2,7 @@
.\" .\"
.\" SPDX-License-Identifier: ISC .\" SPDX-License-Identifier: ISC
.\" .\"
.\" Copyright (c) 1994-1996, 1998-2005, 2007-2023 .\" Copyright (c) 1994-1996, 1998-2005, 2007-2024
.\" Todd C. Miller <Todd.Miller@sudo.ws> .\" Todd C. Miller <Todd.Miller@sudo.ws>
.\" .\"
.\" Permission to use, copy, modify, and distribute this software for any .\" Permission to use, copy, modify, and distribute this software for any
@ -4288,6 +4288,14 @@ user's terminal device even after the main program has finished
executing. executing.
By running the command in a separate pseudo-terminal, this attack is By running the command in a separate pseudo-terminal, this attack is
no longer possible. no longer possible.
.sp
A side effect of running the command in a new pseudo-terminal is
that input will be passed to the command even if it is non-interactive.
This means that, for example, keys pressed while a non-interactive
command is running will be consumed by
\fBsudo\fR
instead of being passed to the shell after the command exits.
.sp
This flag is This flag is
\fIon\fR \fIon\fR
by default for by default for

10
docs/sudoers.mdoc.in
View File

@ -1,7 +1,7 @@
.\" .\"
.\" SPDX-License-Identifier: ISC .\" SPDX-License-Identifier: ISC
.\" .\"
.\" Copyright (c) 1994-1996, 1998-2005, 2007-2023 .\" Copyright (c) 1994-1996, 1998-2005, 2007-2024
.\" Todd C. Miller <Todd.Miller@sudo.ws> .\" Todd C. Miller <Todd.Miller@sudo.ws>
.\" .\"
.\" Permission to use, copy, modify, and distribute this software for any .\" Permission to use, copy, modify, and distribute this software for any
@ -4060,6 +4060,14 @@ user's terminal device even after the main program has finished
executing. executing.
By running the command in a separate pseudo-terminal, this attack is By running the command in a separate pseudo-terminal, this attack is
no longer possible. no longer possible.
.Pp
A side effect of running the command in a new pseudo-terminal is
that input will be passed to the command even if it is non-interactive.
This means that, for example, keys pressed while a non-interactive
command is running will be consumed by
.Nm sudo
instead of being passed to the shell after the command exits.
.Pp
This flag is This flag is
.Em on .Em on
by default for by default for