version 1.9, 2003/02/14 17:18:29 |
version 1.10, 2003/03/15 21:23:54 |
|
|
.\" Automatically generated by Pod::Man version 1.15 |
.\" Copyright (c) 1996,1998-2003 Todd C. Miller <Todd.Miller@courtesan.com> |
.\" Thu Apr 25 09:34:54 2002 |
|
.\" |
|
.\" Copyright (c) 1996,1998-2002 Todd C. Miller <Todd.Miller@courtesan.com> |
|
.\" All rights reserved. |
.\" All rights reserved. |
.\" |
.\" |
.\" Redistribution and use in source and binary forms, with or without |
.\" Redistribution and use in source and binary forms, with or without |
|
|
.\" WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR |
.\" WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR |
.\" OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF |
.\" OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF |
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
.\" ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. |
|
.\" |
|
.\" $Sudo: visudo.man.in,v 1.14 2003/03/15 20:33:31 millert Exp $ |
|
.\" Automatically generated by Pod::Man v1.34, Pod::Parser v1.13 |
.\" |
.\" |
.\" Standard preamble: |
.\" Standard preamble: |
.\" ====================================================================== |
.\" ======================================================================== |
.de Sh \" Subsection heading |
.de Sh \" Subsection heading |
.br |
.br |
.if t .Sp |
.if t .Sp |
|
|
.if t .sp .5v |
.if t .sp .5v |
.if n .sp |
.if n .sp |
.. |
.. |
.de Ip \" List item |
|
.br |
|
.ie \\n(.$>=3 .ne \\$3 |
|
.el .ne 3 |
|
.IP "\\$1" \\$2 |
|
.. |
|
.de Vb \" Begin verbatim text |
.de Vb \" Begin verbatim text |
.ft CW |
.ft CW |
.nf |
.nf |
|
|
.. |
.. |
.de Ve \" End verbatim text |
.de Ve \" End verbatim text |
.ft R |
.ft R |
|
|
.fi |
.fi |
.. |
.. |
.\" Set up some character translations and predefined strings. \*(-- will |
.\" Set up some character translations and predefined strings. \*(-- will |
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left |
.\" give an unbreakable dash, \*(PI will give pi, \*(L" will give a left |
.\" double quote, and \*(R" will give a right double quote. | will give a |
.\" double quote, and \*(R" will give a right double quote. | will give a |
.\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used |
.\" real vertical bar. \*(C+ will give a nicer C++. Capital omega is used to |
.\" to do unbreakable dashes and therefore won't be available. \*(C` and |
.\" do unbreakable dashes and therefore won't be available. \*(C` and \*(C' |
.\" \*(C' expand to `' in nroff, nothing in troff, for use with C<> |
.\" expand to `' in nroff, nothing in troff, for use with C<>. |
.tr \(*W-|\(bv\*(Tr |
.tr \(*W-|\(bv\*(Tr |
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' |
.ds C+ C\v'-.1v'\h'-1p'\s-2+\h'-1p'+\s0\v'.1v'\h'-1p' |
.ie n \{\ |
.ie n \{\ |
|
|
. ds R" '' |
. ds R" '' |
'br\} |
'br\} |
.\" |
.\" |
.\" If the F register is turned on, we'll generate index entries on stderr |
.\" If the F register is turned on, we'll generate index entries on stderr for |
.\" for titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and |
.\" titles (.TH), headers (.SH), subsections (.Sh), items (.Ip), and index |
.\" index entries marked with X<> in POD. Of course, you'll have to process |
.\" entries marked with X<> in POD. Of course, you'll have to process the |
.\" the output yourself in some meaningful fashion. |
.\" output yourself in some meaningful fashion. |
.if \nF \{\ |
.if \nF \{\ |
. de IX |
. de IX |
. tm Index:\\$1\t\\n%\t"\\$2" |
. tm Index:\\$1\t\\n%\t"\\$2" |
|
|
. rr F |
. rr F |
.\} |
.\} |
.\" |
.\" |
.\" For nroff, turn off justification. Always turn off hyphenation; it |
.\" For nroff, turn off justification. Always turn off hyphenation; it makes |
.\" makes way too many mistakes in technical documents. |
.\" way too many mistakes in technical documents. |
.hy 0 |
.hy 0 |
.if n .na |
.if n .na |
.\" |
.\" |
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). |
.\" Accent mark definitions (@(#)ms.acc 1.5 88/02/08 SMI; from UCB 4.2). |
.\" Fear. Run. Save yourself. No user-serviceable parts. |
.\" Fear. Run. Save yourself. No user-serviceable parts. |
.bd B 3 |
|
. \" fudge factors for nroff and troff |
. \" fudge factors for nroff and troff |
.if n \{\ |
.if n \{\ |
. ds #H 0 |
. ds #H 0 |
|
|
. ds Ae AE |
. ds Ae AE |
.\} |
.\} |
.rm #[ #] #H #V #F C |
.rm #[ #] #H #V #F C |
.\" ====================================================================== |
.\" ======================================================================== |
.\" |
.\" |
.IX Title "visudo 8" |
.IX Title "VISUDO 8" |
.TH visudo 8 "1.6.6" "April 25, 2002" "MAINTENANCE COMMANDS" |
.TH VISUDO 8 "March 13, 2003" "1.6.7" "MAINTENANCE COMMANDS" |
.UC |
|
.SH "NAME" |
.SH "NAME" |
visudo \- edit the sudoers file |
visudo \- edit the sudoers file |
.SH "SYNOPSIS" |
.SH "SYNOPSIS" |
|
|
your system, as determined by the \fIconfigure\fR script. Normally, |
your system, as determined by the \fIconfigure\fR script. Normally, |
\&\fBvisudo\fR does not honor the \f(CW\*(C`EDITOR\*(C'\fR or \f(CW\*(C`VISUAL\*(C'\fR environment |
\&\fBvisudo\fR does not honor the \f(CW\*(C`EDITOR\*(C'\fR or \f(CW\*(C`VISUAL\*(C'\fR environment |
variables unless they contain an editor in the aforementioned editors |
variables unless they contain an editor in the aforementioned editors |
list. However, if \fBvisudo\fR is configured with the \fI\*(--with-enveditor\fR |
list. However, if \fBvisudo\fR is configured with the \fI\-\-with\-enveditor\fR |
flag or the \fIenveditor\fR \f(CW\*(C`Default\*(C'\fR variable is set in \fIsudoers\fR, |
flag or the \fIenveditor\fR \f(CW\*(C`Default\*(C'\fR variable is set in \fIsudoers\fR, |
\&\fBvisudo\fR will use any the editor defines by \f(CW\*(C`EDITOR\*(C'\fR or \f(CW\*(C`VISUAL\*(C'\fR. |
\&\fBvisudo\fR will use any the editor defines by \f(CW\*(C`EDITOR\*(C'\fR or \f(CW\*(C`VISUAL\*(C'\fR. |
Note that this can be a security hole since it allows the user to |
Note that this can be a security hole since it allows the user to |
|
|
.PP |
.PP |
\&\fBvisudo\fR parses the \fIsudoers\fR file after the edit and will |
\&\fBvisudo\fR parses the \fIsudoers\fR file after the edit and will |
not save the changes if there is a syntax error. Upon finding |
not save the changes if there is a syntax error. Upon finding |
an error, \fBvisudo\fR will print a message stating the line \fInumber\fR\|(s) |
an error, \fBvisudo\fR will print a message stating the line number(s) |
where the error occurred and the user will receive the |
where the error occurred and the user will receive the |
\&\*(L"What now?\*(R" prompt. At this point the user may enter \*(L"e\*(R" |
\&\*(L"What now?\*(R" prompt. At this point the user may enter \*(L"e\*(R" |
to re-edit the \fIsudoers\fR file, \*(L"x\*(R" to exit without |
to re-edit the \fIsudoers\fR file, \*(L"x\*(R" to exit without |
|
|
.SH "OPTIONS" |
.SH "OPTIONS" |
.IX Header "OPTIONS" |
.IX Header "OPTIONS" |
\&\fBvisudo\fR accepts the following command line options: |
\&\fBvisudo\fR accepts the following command line options: |
.Ip "\-c" 4 |
.IP "\-c" 4 |
.IX Item "-c" |
.IX Item "-c" |
Enable \fBcheck-only\fR mode. The existing \fIsudoers\fR file will be |
Enable \fBcheck-only\fR mode. The existing \fIsudoers\fR file will be |
checked for syntax and a message will be printed to the |
checked for syntax and a message will be printed to the |
|
|
If the syntax check completes successfully, \fBvisudo\fR will |
If the syntax check completes successfully, \fBvisudo\fR will |
exit with a value of 0. If a syntax error is encountered, |
exit with a value of 0. If a syntax error is encountered, |
\&\fBvisudo\fR will exit with a value of 1. |
\&\fBvisudo\fR will exit with a value of 1. |
.Ip "\-f" 4 |
.IP "\-f" 4 |
.IX Item "-f" |
.IX Item "-f" |
Specify and alternate \fIsudoers\fR file location. With this option |
Specify and alternate \fIsudoers\fR file location. With this option |
\&\fBvisudo\fR will edit (or check) the \fIsudoers\fR file of your choice, |
\&\fBvisudo\fR will edit (or check) the \fIsudoers\fR file of your choice, |
instead of the default, \f(CW@sysconfdir\fR@/sudoers. The lock file used |
instead of the default, \f(CW@sysconfdir\fR@/sudoers. The lock file used |
is the specified \fIsudoers\fR file with \*(L".tmp\*(R" appended to it. |
is the specified \fIsudoers\fR file with \*(L".tmp\*(R" appended to it. |
.Ip "\-q" 4 |
.IP "\-q" 4 |
.IX Item "-q" |
.IX Item "-q" |
Enable \fBquiet\fR mode. In this mode details about syntax errors |
Enable \fBquiet\fR mode. In this mode details about syntax errors |
are not printed. This option is only useful when combined with |
are not printed. This option is only useful when combined with |
the \fB\-c\fR flag. |
the \fB\-c\fR flag. |
.Ip "\-s" 4 |
.IP "\-s" 4 |
.IX Item "-s" |
.IX Item "-s" |
Enable \fBstrict\fR checking of the \fIsudoers\fR file. If an alias is |
Enable \fBstrict\fR checking of the \fIsudoers\fR file. If an alias is |
used before it is defined, \fBvisudo\fR will consider this a parse |
used before it is defined, \fBvisudo\fR will consider this a parse |
error. Note that it is not possible to differentiate between an |
error. Note that it is not possible to differentiate between an |
alias and a hostname or username that consists solely of uppercase |
alias and a hostname or username that consists solely of uppercase |
letters, digits, and the underscore ('_') character. |
letters, digits, and the underscore ('_') character. |
.Ip "\-V" 4 |
.IP "\-V" 4 |
.IX Item "-V" |
.IX Item "-V" |
The \fB\-V\fR (version) option causes \fBvisudo\fR to print its version number |
The \fB\-V\fR (version) option causes \fBvisudo\fR to print its version number |
and exit. |
and exit. |
.SH "ERRORS" |
.SH "ERRORS" |
.IX Header "ERRORS" |
.IX Header "ERRORS" |
.Ip "sudoers file busy, try again later." 4 |
.IP "sudoers file busy, try again later." 4 |
.IX Item "sudoers file busy, try again later." |
.IX Item "sudoers file busy, try again later." |
Someone else is currently editing the \fIsudoers\fR file. |
Someone else is currently editing the \fIsudoers\fR file. |
.Ip "/etc/sudoers.tmp: Permission denied" 4 |
.IP "/etc/sudoers.tmp: Permission denied" 4 |
.IX Item "/etc/sudoers.tmp: Permission denied" |
.IX Item "/etc/sudoers.tmp: Permission denied" |
You didn't run \fBvisudo\fR as root. |
You didn't run \fBvisudo\fR as root. |
.Ip "Can't find you in the passwd database" 4 |
.IP "Can't find you in the passwd database" 4 |
.IX Item "Can't find you in the passwd database" |
.IX Item "Can't find you in the passwd database" |
Your userid does not appear in the system passwd file. |
Your userid does not appear in the system passwd file. |
.Ip "Warning: undeclared Alias referenced near ..." 4 |
.IP "Warning: undeclared Alias referenced near ..." 4 |
.IX Item "Warning: undeclared Alias referenced near ..." |
.IX Item "Warning: undeclared Alias referenced near ..." |
Either you are using a {User,Runas,Host,Cmnd}_Alias before |
Either you are using a {User,Runas,Host,Cmnd}_Alias before |
defining it or you have a user or hostname listed that |
defining it or you have a user or hostname listed that |
|
|
.SH "ENVIRONMENT" |
.SH "ENVIRONMENT" |
.IX Header "ENVIRONMENT" |
.IX Header "ENVIRONMENT" |
The following environment variables are used only if \fBvisudo\fR |
The following environment variables are used only if \fBvisudo\fR |
was configured with the \fI\*(--with-env-editor\fR option: |
was configured with the \fI\-\-with\-env\-editor\fR option: |
.PP |
.PP |
.Vb 2 |
.Vb 2 |
\& EDITOR Invoked by visudo as the editor to use |
\& EDITOR Invoked by visudo as the editor to use |
|
|
.Vb 1 |
.Vb 1 |
\& Todd Miller <Todd.Miller@courtesan.com> |
\& Todd Miller <Todd.Miller@courtesan.com> |
.Ve |
.Ve |
|
.PP |
See the \s-1HISTORY\s0 file in the sudo distribution or visit |
See the \s-1HISTORY\s0 file in the sudo distribution or visit |
http://www.sudo.ws/sudo/history.html for more details. |
http://www.sudo.ws/sudo/history.html for more details. |
.SH "BUGS" |
.SH "BUGS" |
|
|
the editor used by \fBvisudo\fR allows shell escapes. |
the editor used by \fBvisudo\fR allows shell escapes. |
.SH "SEE ALSO" |
.SH "SEE ALSO" |
.IX Header "SEE ALSO" |
.IX Header "SEE ALSO" |
\&\fIvi\fR\|(1), \fIsudo\fR\|(8), \fIvipw\fR\|(8). |
\&\fIvi\fR\|(1), \fIsudoers\fR\|(5), \fIsudo\fR\|(8), \fIvipw\fR\|(8) |