Attachment 120352 Details for Bug 163149 – file.diff

[patch] file.diff

file.diff (text/plain), 28.60 KB, created by Chris on 2011-12-09 13:20:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Chris

Created: 2011-12-09 13:20:06 UTC

Size: 28.60 KB

patch

obsolete

>--- sudo_redhat_i386_9.cgi	2011-12-08 22:00:17.000000000 +0000
>+++ sudo_redhat_i386_9_new.cgi	2011-12-08 22:50:48.000000000 +0000
>@@ -451,133 +451,133 @@
> <pre>
> sudo(8) 		 MAINTENANCE COMMANDS		 sudo(8)
> 
>-<a name="N%3c%2fbNA%3c%2fbAM%3c%2fbME%3c%2fbE" href="#end">N</bNA</bAM</bME</bE</a>
>+<a name="NAME" href="#end">NAME</a>
> sudo - execute a command as another user
> 
>-<a name="S%3c%2fbSY%3c%2fbYN%3c%2fbNO%3c%2fbOP%3c%2fbPS%3c%2fbSI%3c%2fbIS%3c%2fbS" href="#end">S</bSY</bYN</bNO</bOP</bPS</bSI</bIS</bS</a>
>- s</bsu</bud</bdo</bo -</b-V</bV | -</b-h</bh | -</b-l</bl | -</b-L</bL | -</b-v</bv | -</b-k</bk | -</b-K</bK | -</b-s</bs | [ -</b-H</bH ] [-</b-P</bP ] [-</b-S</bS ] [ -</b-b</bb ]
>- | [ -</b-p</bp prompt ] [ -</b-c</bc class|- ] [ -</b-a</ba auth_type ] [ -</b-u</bu username|#uid ]
>+<a name="SYNOPSIS" href="#end">SYNOPSIS</a>
>+ sudo -V | -h | -l | -L | -v | -k | -K | -s | [ -H ] [-P ] [-S ] [ -b ]
>+ | [ -p prompt ] [ -c class|- ] [ -a auth_type ] [ -u username|#uid ]
> command
> 
>-<a name="D%3c%2fbDE%3c%2fbES%3c%2fbSC%3c%2fbCR%3c%2fbRI%3c%2fbIP%3c%2fbPT%3c%2fbTI%3c%2fbIO%3c%2fbON%3c%2fbN" href="#end">D</bDE</bES</bSC</bCR</bRI</bIP</bPT</bTI</bIO</bON</bN</a>
>- s</bsu</bud</bdo</bo allows a permitted user to execute a command as the superuser or
>+<a name="DESCRIPTION" href="#end">DESCRIPTION</a>
>+ sudo allows a permitted user to execute a command as the superuser or
> another user, as specified in the sudoers file.	The real and effective
> uid and gid are set to match those of the target user as specified in
> the passwd file (the group vector is also initialized when the target
>- user is not root). By default, s</bsu</bud</bdo</bo requires that users authenticate
>+ user is not root). By default, sudo requires that users authenticate
> themselves with a password (NOTE: by default this is the user's pass-
> word, not the root password). Once a user has been authenticated, a
> timestamp is updated and the user may then use sudo without a password
> for a short period of time (5 minutes unless overridden in sudoers).
> 
>- s</bsu</bud</bdo</bo determines who is an authorized user by consulting the file
>- /etc/sudoers. By giving s</bsu</bud</bdo</bo the -</b-v</bv flag a user can update the time
>+ sudo determines who is an authorized user by consulting the file
>+ /etc/sudoers. By giving sudo the -</b-v</bv flag a user can update the time
> stamp without running a command. The password prompt itself will also
> time out if the user's password is not entered within 5 minutes (unless
> overridden via sudoers).
> 
> If a user who is not listed in the sudoers file tries to run a command
>- via s</bsu</bud</bdo</bo, mail is sent to the proper authorities, as defined at config-
>+ via sudo, mail is sent to the proper authorities, as defined at config-
> ure time or the sudoers file (defaults to root). Note that the mail
> will not be sent if an unauthorized user tries to run sudo with the -</b-l</bl
> or -</b-v</bv flags. This allows users to determine for themselves whether or
>- not they are allowed to use s</bsu</bud</bdo</bo.
>+ not they are allowed to use sudo.
> 
>- s</bsu</bud</bdo</bo can log both successful and unsuccessful attempts (as well as
>- errors) to <a href="/cgi/man.cgi?query=syslog&amp;sektion=3&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">syslog(3)</a>, a log file, or both. By default s</bsu</bud</bdo</bo will log
>+ sudo can log both successful and unsuccessful attempts (as well as
>+ errors) to <a href="/cgi/man.cgi?query=syslog&amp;sektion=3&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">syslog(3)</a>, a log file, or both. By default sudo will log
> via <a href="/cgi/man.cgi?query=syslog&amp;sektion=3&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">syslog(3)</a> but this is changeable at configure time or via the sudo-
> ers file.
> 
>-<a name="O%3c%2fbOP%3c%2fbPT%3c%2fbTI%3c%2fbIO%3c%2fbON%3c%2fbNS%3c%2fbS" href="#end">O</bOP</bPT</bTI</bIO</bON</bNS</bS</a>
>- s</bsu</bud</bdo</bo accepts the following command line options:
>+<a name="OPTIONS" href="#end">OPTIONS</a>
>+ sudo accepts the following command line options:
> 
>- -V The -</b-V</bV (version) option causes s</bsu</bud</bdo</bo to print the version number and
>-	 exit. If the invoking user is already root the -</b-V</bV option will
>-	 print out a list of the defaults s</bsu</bud</bdo</bo was compiled with as well as
>+ -V The -V (version) option causes sudo to print the version number and
>+	 exit. If the invoking user is already root the -V option will
>+	 print out a list of the defaults sudo was compiled with as well as
> 	 the machine's local network addresses.
> 
>- -l The -</b-l</bl (list) option will list out the allowed (and forbidden) com-
>+ -l The -l (list) option will list out the allowed (and forbidden) com-
> 	 mands for the user on the current host.
> 
>- -L The -</b-L</bL (list defaults) option will list out the parameters that may
>+ -L The -L (list defaults) option will list out the parameters that may
> 	 be set in a Defaults line along with a short description for each.
> 	 This option is useful in conjunction with <a href="/cgi/man.cgi?query=grep&amp;sektion=1&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">grep(1)</a>.
> 
>- -h The -</b-h</bh (help) option causes s</bsu</bud</bdo</bo to print a usage message and exit.
>+ -h The -h (help) option causes sudo to print a usage message and exit.
> 
>- -v If given the -</b-v</bv (validate) option, s</bsu</bud</bdo</bo will update the user's
>+ -v If given the -v (validate) option, sudo will update the user's
> 	 timestamp, prompting for the user's password if necessary. This
>-	 extends the s</bsu</bud</bdo</bo timeout for another 5 minutes (or whatever the
>+	 extends the sudo timeout for another 5 minutes (or whatever the
> 	 timeout is set to in sudoers) but does not run a command.
> 
>- -k The -</b-k</bk (kill) option to s</bsu</bud</bdo</bo invalidates the user's timestamp by
>-	 setting the time on it to the epoch. The next time s</bsu</bud</bdo</bo is run a
>+ -k The -k (kill) option to sudo invalidates the user's timestamp by
>+	 setting the time on it to the epoch. The next time sudo is run a
> 	 password will be required. This option does not require a password
>-	 and was added to allow a user to revoke s</bsu</bud</bdo</bo permissions from a
>+	 and was added to allow a user to revoke sudo permissions from a
> 	 .logout file.
> 
>- -K The -</b-K</bK (sure kill) option to s</bsu</bud</bdo</bo removes the user's timestamp
>+ -K The -K (sure kill) option to sudo removes the user's timestamp
> 	 entirely. Likewise, this option does not require a password.
> 
>- -b The -</b-b</bb (background) option tells s</bsu</bud</bdo</bo to run the given command in
>-	 the background. Note that if you use the -</b-b</bb option you cannot use
>+ -b The -b (background) option tells sudo to run the given command in
>+	 the background. Note that if you use the -b option you cannot use
> 	 shell job control to manipulate the process.
> 
>- -p The -</b-p</bp (prompt) option allows you to override the default password
>+ -p The -p (prompt) option allows you to override the default password
> 	 prompt and use a custom one. If the password prompt contains the
> 	 %u escape, %u will be replaced with the user's login name. Simi-
> 	 larly, %h will be replaced with the local hostname.
> 
>- -c The -</b-c</bc (class) option causes s</bsu</bud</bdo</bo to run the specified command with
>+ -c The -c (class) option causes sudo to run the specified command with
> 	 resources limited by the specified login class. The class argument
> 	 can be either a class name as defined in /etc/login.conf, or a sin-
> 	 gle '-' character. Specifying a class of - indicates that the com-
> 	 mand should be run restricted by the default login capabilities for
> 	 the user the command is run as. If the class argument specifies an
>-	 existing user class, the command must be run as root, or the s</bsu</bud</bdo</bo
>+	 existing user class, the command must be run as root, or the sudo
> 	 command must be run from a shell that is already root. This option
>-	 is only available on systems with BSD login classes where s</bsu</bud</bdo</bo has
>+	 is only available on systems with BSD login classes where sudo has
> 	 been configured with the --with-logincap option.
> 
>- -a The -</b-a</ba (authentication type) option causes s</bsu</bud</bdo</bo to use the speci-
>+ -a The -a (authentication type) option causes sudo to use the speci-
> 	 fied authentication type when validating the user, as allowed by
> 	 /etc/login.conf. The system administrator may specify a list of
> 	 sudo-specific authentication methods by adding an "auth-sudo" entry
> 	 in /etc/login.conf.	This option is only available on systems that
>-	 support BSD authentication where s</bsu</bud</bdo</bo has been configured with the
>+	 support BSD authentication where sudo has been configured with the
> 	 --with-bsdauth option.
> 
>- -u The -</b-u</bu (user) option causes s</bsu</bud</bdo</bo to run the specified command as a
>+ -u The -u (user) option causes sudo to run the specified command as a
> 	 user other than root. To specify a uid instead of a username, use
> 	 #uid.
> 
>- -s The -</b-s</bs (shell) option runs the shell specified by the SHELL envi-
>+ -s The -s (shell) option runs the shell specified by the SHELL envi-
> 	 ronment variable if it is set or the shell as specified in
> 	 <a href="/cgi/man.cgi?query=passwd&amp;sektion=5&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">passwd(5)</a>.
> 
>- -H The -</b-H</bH (HOME) option sets the HOME environment variable to the
>+ -H The -H (HOME) option sets the HOME environment variable to the
> 	 homedir of the target user (root by default) as specified in
>-	 <a href="/cgi/man.cgi?query=passwd&amp;sektion=5&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">passwd(5)</a>. By default, s</bsu</bud</bdo</bo does not modify HOME.
>+	 <a href="/cgi/man.cgi?query=passwd&amp;sektion=5&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">passwd(5)</a>. By default, sudo does not modify HOME.
> 
>- -P The -</b-P</bP (preserve group vector) option causes s</bsu</bud</bdo</bo to preserve the
>-	 user's group vector unaltered. By default, s</bsu</bud</bdo</bo will initialize
>+ -P The -P (preserve group vector) option causes sudo to preserve the
>+	 user's group vector unaltered. By default, sudo will initialize
> 	 the group vector to the list of groups the target user is in. The
> 	 real and effective group IDs, however, are still set to match the
> 	 target user.
> 
>- -S The -</b-S</bS (stdin) option causes s</bsu</bud</bdo</bo to read the password from stan-
>+ -S The -S (stdin) option causes sudo to read the password from stan-
> 	 dard input instead of the terminal device.
> 
>- -- The -</b--</b- flag indicates that s</bsu</bud</bdo</bo should stop processing command line
>-	 arguments. It is most useful in conjunction with the -</b-s</bs flag.
>+ -- The -- flag indicates that sudo should stop processing command line
>+	 arguments. It is most useful in conjunction with the -s flag.
> 
>-<a name="R%3c%2fbRE%3c%2fbET%3c%2fbTU%3c%2fbUR%3c%2fbRN%3c%2fbN_V%3c%2fbVA%3c%2fbAL%3c%2fbLU%3c%2fbUE%3c%2fbES%3c%2fbS" href="#end">R</bRE</bET</bTU</bUR</bRN</bN V</bVA</bAL</bLU</bUE</bES</bS</a>
>- Upon successful execution of a program, the return value from s</bsu</bud</bdo</bo will
>+<a name="RETURN VALUES" href="#end">RETURN VALUES</a>
>+ Upon successful execution of a program, the return value from sudo will
> simply be the return value of the program that was executed.
> 
>- Otherwise, s</bsu</bud</bdo</bo quits with an exit value of 1 if there is a configura-
>- tion/permission problem or if s</bsu</bud</bdo</bo cannot execute the given command.
>- In the latter case the error string is printed to stderr. If s</bsu</bud</bdo</bo can-
>+ Otherwise, sudo quits with an exit value of 1 if there is a configura-
>+ tion/permission problem or if sudo cannot execute the given command.
>+ In the latter case the error string is printed to stderr. If sudo can-
> not <a href="/cgi/man.cgi?query=stat&amp;sektion=2&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">stat(2)</a> one or more entries in the user's PATH an error is printed
> on stderr. (If the directory does not exist or if it is not really a
> directory, the entry is ignored and no error is printed.) This should
>@@ -586,40 +586,40 @@
> mounter and one of the directories in your PATH is on a machine that is
> currently unreachable.
> 
>-<a name="S%3c%2fbSE%3c%2fbEC%3c%2fbCU%3c%2fbUR%3c%2fbRI%3c%2fbIT%3c%2fbTY%3c%2fbY_N%3c%2fbNO%3c%2fbOT%3c%2fbTE%3c%2fbES%3c%2fbS" href="#end">S</bSE</bEC</bCU</bUR</bRI</bIT</bTY</bY N</bNO</bOT</bTE</bES</bS</a>
>- s</bsu</bud</bdo</bo tries to be safe when executing external commands.	Variables that
>+<a name="SECURITY NOTES" href="#end">SECURITY NOTES</a>
>+ sudo tries to be safe when executing external commands.	Variables that
> control how dynamic loading and binding is done can be used to subvert
>- the program that s</bsu</bud</bdo</bo runs. To combat this the LD_*, _RLD_*,
>+ the program that sudo runs. To combat this the LD_*, _RLD_*,
> SHLIB_PATH (HP-UX only), and LIBPATH (AIX only) environment variables
> are removed from the environment passed on to all commands executed.
>- s</bsu</bud</bdo</bo will also remove the IFS, ENV, BASH_ENV, KRB_CONF, KRBCONFDIR,
>+ sudo will also remove the IFS, ENV, BASH_ENV, KRB_CONF, KRBCONFDIR,
> KRBTKFILE, KRB5_CONFIG, LOCALDOMAIN, RES_OPTIONS, HOSTALIASES, NLSPATH,
> PATH_LOCALE, TERMINFO, TERMINFO_DIRS and TERMPATH variables as they too
> can pose a threat. If the TERMCAP variable is set and is a pathname,
> it too is ignored. Additionally, if the LC_* or LANGUAGE variables
>- contain the / or % characters, they are ignored. If s</bsu</bud</bdo</bo has been com-
>+ contain the / or % characters, they are ignored. If sudo has been com-
> piled with SecurID support, the VAR_ACE, USR_ACE and DLC_ACE variables
>- are cleared as well. The list of environment variables that s</bsu</bud</bdo</bo
>+ are cleared as well. The list of environment variables that sudo
> clears is contained in the output of sudo -V when run as root.
> 
>- To prevent command spoofing, s</bsu</bud</bdo</bo checks "." and "" (both denoting cur-
>+ To prevent command spoofing, sudo checks "." and "" (both denoting cur-
> rent directory) last when searching for a command in the user's PATH
> (if one or both are in the PATH). Note, however, that the actual PATH
> environment variable is not modified and is passed unchanged to the
>- program that s</bsu</bud</bdo</bo executes.
>+ program that sudo executes.
> 
> For security reasons, if your OS supports shared libraries and does not
> disable user-defined library search paths for setuid programs (most
> do), you should either use a linker option that disables this behavior
>- or link s</bsu</bud</bdo</bo statically.
>+ or link sudo statically.
> 
>- s</bsu</bud</bdo</bo will check the ownership of its timestamp directory (/var/run/sudo
>+ sudo will check the ownership of its timestamp directory (/var/run/sudo
> by default) and ignore the directory's contents if it is not owned by
> root and only writable by root.	On systems that allow non-root users
> to give away files via <a href="/cgi/man.cgi?query=chown&amp;sektion=2&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">chown(2)</a>, if the timestamp directory is located
> in a directory writable by anyone (e.g.: /tmp), it is possible for a
>- user to create the timestamp directory before s</bsu</bud</bdo</bo is run. However,
>- because s</bsu</bud</bdo</bo checks the ownership and mode of the directory and its
>+ user to create the timestamp directory before sudo is run. However,
>+ because sudo checks the ownership and mode of the directory and its
> contents, the only damage that can be done is to "hide" files by
> putting them in the timestamp dir. This is unlikely to happen since
> once the timestamp dir is owned by root and inaccessible by any other
>@@ -629,21 +629,21 @@
> /var/run/sudo with the appropriate owner (root) and permissions (0700)
> in the system startup files.
> 
>- s</bsu</bud</bdo</bo will not honor timestamps set far in the future. Timestamps with
>+ sudo will not honor timestamps set far in the future. Timestamps with
> a date greater than current_time + 2 * TIMEOUT will be ignored and sudo
> will log and complain. This is done to keep a user from creating
> his/her own timestamp with a bogus date on systems that allow users to
> give away files.
> 
>- Please note that s</bsu</bud</bdo</bo will only log the command it explicitly runs. If
>+ Please note that sudo will only log the command it explicitly runs. If
> a user runs a command such as sudo su or sudo sh, subsequent commands
>- run from that shell will not be logged, nor will s</bsu</bud</bdo</bo's access control
>+ run from that shell will not be logged, nor will sudo's access control
> affect them. The same is true for commands that offer shell escapes
> (including most editors). Because of this, care must be taken when
>- giving users access to commands via s</bsu</bud</bdo</bo to verify that the command
>+ giving users access to commands via sudo to verify that the command
> does not inadvertantly give the user an effective root shell.
> 
>-<a name="E%3c%2fbEX%3c%2fbXA%3c%2fbAM%3c%2fbMP%3c%2fbPL%3c%2fbLE%3c%2fbES%3c%2fbS" href="#end">E</bEX</bXA</bAM</bMP</bPL</bLE</bES</bS</a>
>+<a name="EXAMPLES" href="#end">EXAMPLES</a>
> Note: the following examples assume suitable <a href="/cgi/man.cgi?query=sudoers&amp;sektion=5&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">sudoers(5)</a> entries.
> 
> To get a file listing of an unreadable directory:
>@@ -669,8 +669,8 @@
> 
> 	% sudo sh -c "cd /home ; du -s * | sort -rn &gt; USAGE"
> 
>-<a name="E%3c%2fbEN%3c%2fbNV%3c%2fbVI%3c%2fbIR%3c%2fbRO%3c%2fbON%3c%2fbNM%3c%2fbME%3c%2fbEN%3c%2fbNT%3c%2fbT" href="#end">E</bEN</bNV</bVI</bIR</bRO</bON</bNM</bME</bEN</bNT</bT</a>
>- s</bsu</bud</bdo</bo utilizes the following environment variables:
>+<a name="ENVIRONMENT" href="#end">ENVIRONMENT</a>
>+ sudo utilizes the following environment variables:
> 
> 	PATH		 Set to a sane value if SECURE_PATH is set
> 	SHELL		 Used to determine shell to run with -s option
>@@ -686,31 +686,31 @@
> 	SUDO_GID	 Set to the gid of the user who invoked sudo
> 	SUDO_PS1	 If set, PS1 will be set to its value
> 
>-<a name="F%3c%2fbFI%3c%2fbIL%3c%2fbLE%3c%2fbES%3c%2fbS" href="#end">F</bFI</bIL</bLE</bES</bS</a>
>+<a name="FILES" href="#end">FILES</a>
> 	/etc/sudoers	 List of who can run what
> 	/var/run/sudo		 Directory containing timestamps
> 
>-<a name="A%3c%2fbAU%3c%2fbUT%3c%2fbTH%3c%2fbHO%3c%2fbOR%3c%2fbRS%3c%2fbS" href="#end">A</bAU</bUT</bTH</bHO</bOR</bRS</bS</a>
>- Many people have worked on s</bsu</bud</bdo</bo over the years; this version consists
>+<a name="AUTHORS" href="#end">AUTHORS</a>
>+ Many people have worked on sudo over the years; this version consists
> of code written primarily by:
> 
> 	 Todd Miller
> 	 Chris Jepeway
> 
>- See the HISTORY file in the s</bsu</bud</bdo</bo distribution or visit
>- <a href="http://www.sudo.ws/sudo/history.html">http://www.sudo.ws/sudo/history.html</a> for a short history of s</bsu</bud</bdo</bo.
>+ See the HISTORY file in the sudo distribution or visit
>+ <a href="http://www.sudo.ws/sudo/history.html">http://www.sudo.ws/sudo/history.html</a> for a short history of sudo.
> 
>-<a name="B%3c%2fbBU%3c%2fbUG%3c%2fbGS%3c%2fbS" href="#end">B</bBU</bUG</bGS</bS</a>
>+<a name="BUGS" href="#end">BUGS</a>
> If you feel you have found a bug in sudo, please submit a bug report at
> <a href="http://www.sudo.ws/sudo/bugs/">http://www.sudo.ws/sudo/bugs/</a>
> 
>-<a name="D%3c%2fbDI%3c%2fbIS%3c%2fbSC%3c%2fbCL%3c%2fbLA%3c%2fbAI%3c%2fbIM%3c%2fbME%3c%2fbER%3c%2fbR" href="#end">D</bDI</bIS</bSC</bCL</bLA</bAI</bIM</bME</bER</bR</a>
>- S</bSu</bud</bdo</bo is provided ``AS IS'' and any express or implied warranties,
>+<a name="DISCLAIMER" href="#end">DISCLAIMER</a>
>+ Sudo is provided ``AS IS'' and any express or implied warranties,
> including, but not limited to, the implied warranties of merchantabil-
> ity and fitness for a particular purpose are disclaimed. See the
>- LICENSE file distributed with s</bsu</bud</bdo</bo for complete details.
>+ LICENSE file distributed with sudo for complete details.
> 
>-<a name="C%3c%2fbCA%3c%2fbAV%3c%2fbVE%3c%2fbEA%3c%2fbAT%3c%2fbTS%3c%2fbS" href="#end">C</bCA</bAV</bVE</bEA</bAT</bTS</bS</a>
>+<a name="CAVEATS" href="#end">CAVEATS</a>
> There is no easy way to prevent a user from gaining a root shell if
> that user has access to commands allowing shell escapes.
> 
>@@ -718,12 +718,12 @@
> their own program that gives them a root shell regardless of any '!'
> elements in the user specification.
> 
>- Running shell scripts via s</bsu</bud</bdo</bo can expose the same kernel bugs that
>+ Running shell scripts via sudo can expose the same kernel bugs that
> make setuid shell scripts unsafe on some operating systems (if your OS
> supports the /dev/fd/ directory, setuid shell scripts are generally
> safe).
> 
>-<a name="S%3c%2fbSE%3c%2fbEE%3c%2fbE_A%3c%2fbAL%3c%2fbLS%3c%2fbSO%3c%2fbO" href="#end">S</bSE</bEE</bE A</bAL</bLS</bSO</bO</a>
>+<a name="SEE_ALSO" href="#end">SEE_ALSO</a>
> <a href="/cgi/man.cgi?query=stat&amp;sektion=2&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">stat(2)</a>, login_<a href="/cgi/man.cgi?query=cap&amp;sektion=3&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">cap(3)</a>, <a href="/cgi/man.cgi?query=sudoers&amp;sektion=5&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">sudoers(5)</a>, <a href="/cgi/man.cgi?query=passwd&amp;sektion=5&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">passwd(5)</a>, <a href="/cgi/man.cgi?query=visudo&amp;sektion=8&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">visudo(8)</a>, <a href="/cgi/man.cgi?query=grep&amp;sektion=1&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">grep(1)</a>,
> <a href="/cgi/man.cgi?query=su&amp;sektion=1&amp;apropos=0&amp;manpath=Red+Hat+Linux%2fi386+9">su(1)</a>.
> 
>@@ -731,20 +731,21 @@
> </pre>
> <a name="end" />
> <hr />
>-<a href="#N%3c%2fbNA%3c%2fbAM%3c%2fbME%3c%2fbE">N</bNA</bAM</bME</bE</a> |
>-<a href="#S%3c%2fbSY%3c%2fbYN%3c%2fbNO%3c%2fbOP%3c%2fbPS%3c%2fbSI%3c%2fbIS%3c%2fbS">S</bSY</bYN</bNO</bOP</bPS</bSI</bIS</bS</a> |
>-<a href="#D%3c%2fbDE%3c%2fbES%3c%2fbSC%3c%2fbCR%3c%2fbRI%3c%2fbIP%3c%2fbPT%3c%2fbTI%3c%2fbIO%3c%2fbON%3c%2fbN">D</bDE</bES</bSC</bCR</bRI</bIP</bPT</bTI</bIO</bON</bN</a> |
>-<a href="#O%3c%2fbOP%3c%2fbPT%3c%2fbTI%3c%2fbIO%3c%2fbON%3c%2fbNS%3c%2fbS">O</bOP</bPT</bTI</bIO</bON</bNS</bS</a> |
>-<a href="#R%3c%2fbRE%3c%2fbET%3c%2fbTU%3c%2fbUR%3c%2fbRN%3c%2fbN_V%3c%2fbVA%3c%2fbAL%3c%2fbLU%3c%2fbUE%3c%2fbES%3c%2fbS">R</bRE</bET</bTU</bUR</bRN</bN V</bVA</bAL</bLU</bUE</bES</bS</a> |
>-<a href="#S%3c%2fbSE%3c%2fbEC%3c%2fbCU%3c%2fbUR%3c%2fbRI%3c%2fbIT%3c%2fbTY%3c%2fbY_N%3c%2fbNO%3c%2fbOT%3c%2fbTE%3c%2fbES%3c%2fbS">S</bSE</bEC</bCU</bUR</bRI</bIT</bTY</bY N</bNO</bOT</bTE</bES</bS</a> |
>-<a href="#E%3c%2fbEX%3c%2fbXA%3c%2fbAM%3c%2fbMP%3c%2fbPL%3c%2fbLE%3c%2fbES%3c%2fbS">E</bEX</bXA</bAM</bMP</bPL</bLE</bES</bS</a> |
>-<a href="#E%3c%2fbEN%3c%2fbNV%3c%2fbVI%3c%2fbIR%3c%2fbRO%3c%2fbON%3c%2fbNM%3c%2fbME%3c%2fbEN%3c%2fbNT%3c%2fbT">E</bEN</bNV</bVI</bIR</bRO</bON</bNM</bME</bEN</bNT</bT</a> |
>-<a href="#F%3c%2fbFI%3c%2fbIL%3c%2fbLE%3c%2fbES%3c%2fbS">F</bFI</bIL</bLE</bES</bS</a> |
>-<a href="#A%3c%2fbAU%3c%2fbUT%3c%2fbTH%3c%2fbHO%3c%2fbOR%3c%2fbRS%3c%2fbS">A</bAU</bUT</bTH</bHO</bOR</bRS</bS</a> |
>-<a href="#B%3c%2fbBU%3c%2fbUG%3c%2fbGS%3c%2fbS">B</bBU</bUG</bGS</bS</a> |
>-<a href="#D%3c%2fbDI%3c%2fbIS%3c%2fbSC%3c%2fbCL%3c%2fbLA%3c%2fbAI%3c%2fbIM%3c%2fbME%3c%2fbER%3c%2fbR">D</bDI</bIS</bSC</bCL</bLA</bAI</bIM</bME</bER</bR</a> |
>-<a href="#C%3c%2fbCA%3c%2fbAV%3c%2fbVE%3c%2fbEA%3c%2fbAT%3c%2fbTS%3c%2fbS">C</bCA</bAV</bVE</bEA</bAT</bTS</bS</a> |
>-<a href="#S%3c%2fbSE%3c%2fbEE%3c%2fbE_A%3c%2fbAL%3c%2fbLS%3c%2fbSO%3c%2fbO">S</bSE</bEE</bE A</bAL</bLS</bSO</bO</a>
>+<a href="#NAME">NAME</a> |
>+<a href="#SYNOPSIS">SYNOPSIS</a> |
>+<a href="#DESCRIPTION">DESCRIPTION</a> |
>+<a href="#OPTIONS">OPTIONS</a> |
>+<a href="#RETURN_VALUES">RETURN VALUES</a> |
>+<a href="#SECURITY_NOTES">SECURITY NOTES</a> |
>+<a href="#ENVIRONMENT">ENVIRONMENT</a> |
>+<a href="#FILES">FILES</a> |
>+<a href="#EXAMPLES">EXAMPLES</a> |
>+<a href="#SEE_ALSO">SEE ALSO</a> |
>+<a href="#AUTHORS">AUTHORS</a> |
>+<a href="#CAVEATS">CAVEATS</a> |
>+<a href="#BUGS">BUGS</a> |
>+<a href="#SUPPORT">SUPPORT</a> |
>+<a href="#DISCLAIMER">DISCLAIMER</a>
> Want to link to this manual page? Use this URL: &lt;<a href="http://www.freebsd.org/cgi/man.cgi?query=sudo&amp;manpath=Red+Hat+Linux%2fi386+9">http://www.freebsd.org/cgi/man.cgi?query=sudo&amp;manpath=Red+Hat+Linux%2fi386+9</a>&gt;
> <a href="/cgi/man.cgi?manpath=">home</a> | <a href="/cgi/man.cgi/help.html">help</a> 
> <hr noshade="noshade" />

Actions: View | Diff

Attachments on bug 163149: 120352