src/usr.bin/sudo/sudoers.5 - diff

Return to sudoers.5 CVS log

Up to [local] / src / usr.bin / sudo

version 1.9, 2002/01/03 03:49:16

version 1.10, 2002/01/14 00:11:44

Line 1

.\" Automatically generated by Pod::Man version 1.15

.\" Sun Dec 30 12:24:30 2001

.\" Sun Jan 13 11:37:06 2002

.\"

.\" Standard preamble:

.\" ======================================================================

Line 138

.\" ======================================================================

.\"

.IX Title "sudoers 5"

.TH sudoers 5 "1.6.4" "December 30, 2001" "MAINTENANCE COMMANDS"

.TH sudoers 5 "1.6.4" "January 13, 2002" "MAINTENANCE COMMANDS"

.UC

.SH "NAME"

sudoers \- list of which users may execute what

Line 513

changes that behavior such that the real \s-1UID\s0 is left as the invoking

user's \s-1UID\s0. In other words, this makes \fBsudo\fR act as a setuid

wrapper. This can be useful on systems that disable some potentially

dangerous functionality when a program is run setuid.

dangerous functionality when a program is run setuid. Note, however,

that this means that sudo will run with the real uid of the invoking

user which may allow that user to kill \fBsudo\fR before it can log a

failure, depending on how your \s-1OS\s0 defines the interaction between

signals and setuid processes.

.Ip "env_reset" 12

.IX Item "env_reset"

If set, \fBsudo\fR will reset the environment to only contain the