summaryrefslogtreecommitdiff
path: root/usr.bin/sudo/sudoers.pod
diff options
context:
space:
mode:
authorTodd C. Miller <millert@cvs.openbsd.org>2007-12-03 15:09:49 +0000
committerTodd C. Miller <millert@cvs.openbsd.org>2007-12-03 15:09:49 +0000
commite13a45b4924436ca148adef026b9720c372786a9 (patch)
treea1bcc5d921771603e1758c3699703839063ff965 /usr.bin/sudo/sudoers.pod
parent1a3b3a6368a160285258f3e55f46e99aa22db27a (diff)
update to sudo 1.6.9p9
Diffstat (limited to 'usr.bin/sudo/sudoers.pod')
-rw-r--r--usr.bin/sudo/sudoers.pod13
1 files changed, 11 insertions, 2 deletions
diff --git a/usr.bin/sudo/sudoers.pod b/usr.bin/sudo/sudoers.pod
index f40d2a15752..d8af57fd58e 100644
--- a/usr.bin/sudo/sudoers.pod
+++ b/usr.bin/sudo/sudoers.pod
@@ -19,7 +19,7 @@ Sponsored in part by the Defense Advanced Research Projects
Agency (DARPA) and Air Force Research Laboratory, Air Force
Materiel Command, USAF, under agreement number F39502-99-1-0512.
-$Sudo: sudoers.pod,v 1.95.2.20 2007/08/27 19:52:28 millert Exp $
+$Sudo: sudoers.pod,v 1.95.2.22 2007/12/02 17:13:52 millert Exp $
=pod
=head1 NAME
@@ -336,7 +336,9 @@ basis. Note that if C<SETENV> has been set for a command, any
environment variables set on the command line way are not subject
to the restrictions imposed by I<env_check>, I<env_delete>, or
I<env_keep>. As such, only trusted users should be allowed to set
-variables in this manner.
+variables in this manner. If the command matched is B<ALL>, the
+C<SETENV> tag is implied for that command; this default may
+be overridden by use of the C<UNSETENV> tag.
=head2 Wildcards
@@ -577,6 +579,13 @@ the user's C<PATH>, B<sudo> will tell the user that they are not
allowed to run it, which can be confusing. This flag is I<@path_info@>
by default.
+=item passprompt_override
+
+The password prompt specified by I<passprompt> will normally only
+be used if the passwod prompt provided by systems such as PAM matches
+the string "Password:". If I<passprompt_override> is set, I<passprompt>
+will always be used. This flag is I<off> by default.
+
=item preserve_groups
By default B<sudo> will initialize the group vector to the list of