[BACK]Return to visudo.cat CVS log [TXT] [DIR] Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo / doc

Diff for /embedaddon/sudo/doc/visudo.cat between versions 1.1.1.2 and 1.1.1.5

version 1.1.1.2, 2012/05/29 12:26:49 version 1.1.1.5, 2013/10/14 07:56:34
Line 1 Line 1
VISUDO(1m)                   MAINTENANCE COMMANDS                   VISUDO(1m)VISUDO(1m)                   System Manager's Manual                  VISUDO(1m)
   
   
   
 NNAAMMEE  NNAAMMEE
       visudo - edit the sudoers file     vviissuuddoo - edit the sudoers file
   
 SSYYNNOOPPSSIISS  SSYYNNOOPPSSIISS
       vviissuuddoo [--cchhqqssVV] [--ff _s_u_d_o_e_r_s]     vviissuuddoo [--cchhqqssVV] [--ff _s_u_d_o_e_r_s]
   
 DDEESSCCRRIIPPTTIIOONN  DDEESSCCRRIIPPTTIIOONN
       vviissuuddoo edits the _s_u_d_o_e_r_s file in a safe fashion, analogous to _v_i_p_w(1m).     vviissuuddoo edits the _s_u_d_o_e_r_s file in a safe fashion, analogous to vipw(1m).
       vviissuuddoo locks the _s_u_d_o_e_r_s file against multiple simultaneous edits,     vviissuuddoo locks the _s_u_d_o_e_r_s file against multiple simultaneous edits,
       provides basic sanity checks, and checks for parse errors.  If the     provides basic sanity checks, and checks for parse errors.  If the
       _s_u_d_o_e_r_s file is currently being edited you will receive a message to     _s_u_d_o_e_r_s file is currently being edited you will receive a message to try
       try again later.     again later.
   
       There is a hard-coded list of one or more editors that vviissuuddoo will use     There is a hard-coded list of one or more editors that vviissuuddoo will use
       set at compile-time that may be overridden via the _e_d_i_t_o_r _s_u_d_o_e_r_s     set at compile-time that may be overridden via the _e_d_i_t_o_r _s_u_d_o_e_r_s Default
       Default variable.  This list defaults to "vi".  Normally, vviissuuddoo does     variable.  This list defaults to vi.  Normally, vviissuuddoo does not honor the
       not honor the VISUAL or EDITOR environment variables unless they     VISUAL or EDITOR environment variables unless they contain an editor in
       contain an editor in the aforementioned editors list.  However, if     the aforementioned editors list.  However, if vviissuuddoo is configured with
       vviissuuddoo is configured with the _-_-_w_i_t_h_-_e_n_v_-_e_d_i_t_o_r option or the     the --with-env-editor option or the _e_n_v___e_d_i_t_o_r Default variable is set in
       _e_n_v___e_d_i_t_o_r Default variable is set in _s_u_d_o_e_r_s, vviissuuddoo will use any the     _s_u_d_o_e_r_s, vviissuuddoo will use any the editor defines by VISUAL or EDITOR.
       editor defines by VISUAL or EDITOR.  Note that this can be a security     Note that this can be a security hole since it allows the user to execute
       hole since it allows the user to execute any program they wish simply     any program they wish simply by setting VISUAL or EDITOR.
       by setting VISUAL or EDITOR. 
   
       vviissuuddoo parses the _s_u_d_o_e_r_s file after the edit and will not save the     vviissuuddoo parses the _s_u_d_o_e_r_s file after the edit and will not save the
       changes if there is a syntax error.  Upon finding an error, vviissuuddoo will     changes if there is a syntax error.  Upon finding an error, vviissuuddoo will
       print a message stating the line number(s) where the error occurred and     print a message stating the line number(s) where the error occurred and
       the user will receive the "What now?" prompt.  At this point the user     the user will receive the ``What now?''  prompt.  At this point the user
       may enter "e" to re-edit the _s_u_d_o_e_r_s file, "x" to exit without saving     may enter `e' to re-edit the _s_u_d_o_e_r_s file, `x' to exit without saving the
       the changes, or "Q" to quit and save changes.  The "Q" option should be     changes, or `Q' to quit and save changes.  The `Q' option should be used
       used with extreme care because if vviissuuddoo believes there to be a parse     with extreme care because if vviissuuddoo believes there to be a parse error,
       error, so will ssuuddoo and no one will be able to ssuuddoo again until the     so will ssuuddoo and no one will be able to ssuuddoo again until the error is
       error is fixed.  If "e" is typed to edit the  _s_u_d_o_e_r_s file after a     fixed.  If `e' is typed to edit the _s_u_d_o_e_r_s file after a parse error has
       parse error has been detected, the cursor will be placed on the line     been detected, the cursor will be placed on the line where the error
       where the error occurred (if the editor supports this feature).     occurred (if the editor supports this feature).
   
OOPPTTIIOONNSS     The options are as follows:
       vviissuuddoo accepts the following command line options: 
   
       -c          Enable cchheecckk--oonnllyy mode.  The existing _s_u_d_o_e_r_s file will be     --cc, ----cchheecckk
                   checked for syntax errors, owner and mode.  A message will                 Enable _c_h_e_c_k_-_o_n_l_y mode.  The existing _s_u_d_o_e_r_s file will be
                   be printed to the standard output describing the status of                 checked for syntax errors, owner and mode.  A message will be
                   _s_u_d_o_e_r_s unless the --qq option was specified.  If the check                 printed to the standard output describing the status of
                   completes successfully, vviissuuddoo will exit with a value of 0.                 _s_u_d_o_e_r_s unless the --qq option was specified.  If the check
                   If an error is encountered, vviissuuddoo will exit with a value                 completes successfully, vviissuuddoo will exit with a value of 0.
                   of 1.                 If an error is encountered, vviissuuddoo will exit with a value of
                  1.
   
       -f _s_u_d_o_e_r_s  Specify and alternate _s_u_d_o_e_r_s file location.  With this     --ff _s_u_d_o_e_r_s, ----ffiillee=_s_u_d_o_e_r_s
                   option vviissuuddoo will edit (or check) the _s_u_d_o_e_r_s file of your                 Specify an alternate _s_u_d_o_e_r_s file location.  With this
                   choice, instead of the default, _/_e_t_c_/_s_u_d_o_e_r_s.  The lock                 option, vviissuuddoo will edit (or check) the _s_u_d_o_e_r_s file of your
                   file used is the specified _s_u_d_o_e_r_s file with ".tmp"                 choice, instead of the default, _/_e_t_c_/_s_u_d_o_e_r_s.  The lock file
                   appended to it.  In cchheecckk--oonnllyy mode only, the argument to                 used is the specified _s_u_d_o_e_r_s file with ``.tmp'' appended to
                   --ff may be "-", indicating that _s_u_d_o_e_r_s will be read from                 it.  In _c_h_e_c_k_-_o_n_l_y mode only, the argument to --ff may be `-',
                   the standard input.                 indicating that _s_u_d_o_e_r_s will be read from the standard input.
   
       -h          The --hh (_h_e_l_p) option causes vviissuuddoo to print a short help     --hh, ----hheellpp  Display a short help message to the standard output and exit.
                   message to the standard output and exit. 
   
       -q          Enable qquuiieett mode.  In this mode details about syntax     --qq, ----qquuiieett
                   errors are not printed.  This option is only useful when                 Enable _q_u_i_e_t mode.  In this mode details about syntax errors
                   combined with the --cc option.                 are not printed.  This option is only useful when combined
                  with the --cc option.
   
       -s          Enable ssttrriicctt checking of the _s_u_d_o_e_r_s file.  If an alias is     --ss, ----ssttrriicctt
                   used before it is defined, vviissuuddoo will consider this a                 Enable _s_t_r_i_c_t checking of the _s_u_d_o_e_r_s file.  If an alias is
                   parse error.  Note that it is not possible to differentiate                 used before it is defined, vviissuuddoo will consider this a parse
                   between an alias and a host name or user name that consists                 error.  Note that it is not possible to differentiate between
                   solely of uppercase letters, digits, and the underscore                 an alias and a host name or user name that consists solely of
                   ('_') character.                 uppercase letters, digits, and the underscore (`_')
                  character.
   
       -V          The --VV (version) option causes vviissuuddoo to print its version     --VV, ----vveerrssiioonn
                   number and exit.                 Print the vviissuuddoo and _s_u_d_o_e_r_s grammar versions and exit.
   
 EENNVVIIRROONNMMEENNTT  EENNVVIIRROONNMMEENNTT
       The following environment variables may be consulted depending on the     The following environment variables may be consulted depending on the
       value of the _e_d_i_t_o_r and _e_n_v___e_d_i_t_o_r _s_u_d_o_e_r_s variables:     value of the _e_d_i_t_o_r and _e_n_v___e_d_i_t_o_r _s_u_d_o_e_r_s settings:
   
       VISUAL          Invoked by visudo as the editor to use     VISUAL           Invoked by vviissuuddoo as the editor to use
   
       EDITOR          Used by visudo if VISUAL is not set     EDITOR           Used by vviissuuddoo if VISUAL is not set
   
 FFIILLEESS  FFIILLEESS
       _/_e_t_c_/_s_u_d_o_e_r_s            List of who can run what     _/_e_t_c_/_s_u_d_o_e_r_s              List of who can run what
   
       _/_e_t_c_/_s_u_d_o_e_r_s_._t_m_p        Lock file for visudo     _/_e_t_c_/_s_u_d_o_e_r_s_._t_m_p          Lock file for visudo
   
 DDIIAAGGNNOOSSTTIICCSS  DDIIAAGGNNOOSSTTIICCSS
       sudoers file busy, try again later.     sudoers file busy, try again later.
            Someone else is currently editing the _s_u_d_o_e_r_s file.             Someone else is currently editing the _s_u_d_o_e_r_s file.
   
       /etc/sudoers.tmp: Permission denied     /etc/sudoers.tmp: Permission denied
            You didn't run vviissuuddoo as root.             You didn't run vviissuuddoo as root.
   
       Can't find you in the passwd database     Can't find you in the passwd database
           Your userid does not appear in the system passwd file.           Your user ID does not appear in the system passwd file.
   
       Warning: {User,Runas,Host,Cmnd}_Alias referenced but not defined     Warning: {User,Runas,Host,Cmnd}_Alias referenced but not defined
           Either you are trying to use an undeclare           Either you are trying to use an undeclared
            {User,Runas,Host,Cmnd}_Alias or you have a user or host name listed             {User,Runas,Host,Cmnd}_Alias or you have a user or host name listed
            that consists solely of uppercase letters, digits, and the             that consists solely of uppercase letters, digits, and the
           underscore ('_') character.  In the latter case, you can ignore the           underscore (`_') character.  In the latter case, you can ignore the
            warnings (ssuuddoo will not complain).  In --ss (strict) mode these are             warnings (ssuuddoo will not complain).  In --ss (strict) mode these are
            errors, not warnings.             errors, not warnings.
   
       Warning: unused {User,Runas,Host,Cmnd}_Alias     Warning: unused {User,Runas,Host,Cmnd}_Alias
            The specified {User,Runas,Host,Cmnd}_Alias was defined but never             The specified {User,Runas,Host,Cmnd}_Alias was defined but never
            used.  You may wish to comment out or remove the unused alias.  In             used.  You may wish to comment out or remove the unused alias.  In
            --ss (strict) mode this is an error, not a warning.             --ss (strict) mode this is an error, not a warning.
   
       Warning: cycle in {User,Runas,Host,Cmnd}_Alias     Warning: cycle in {User,Runas,Host,Cmnd}_Alias
            The specified {User,Runas,Host,Cmnd}_Alias includes a reference to             The specified {User,Runas,Host,Cmnd}_Alias includes a reference to
            itself, either directly or through an alias it includes.  This is             itself, either directly or through an alias it includes.  This is
            only a warning by default as ssuuddoo will ignore cycles when parsing             only a warning by default as ssuuddoo will ignore cycles when parsing
            the _s_u_d_o_e_r_s file.             the _s_u_d_o_e_r_s file.
   
 SSEEEE AALLSSOO  SSEEEE AALLSSOO
       _v_i(1), _s_u_d_o_e_r_s(4), _s_u_d_o(1m), _v_i_p_w(1m)     vi(1), sudoers(4), sudo(1m), vipw(1m)
   
AAUUTTHHOORRAAUUTTHHOORRSS
       Many people have worked on ssuuddoo over the years; this version of vviissuuddoo     Many people have worked on ssuuddoo over the years; this version consists of
       was written by:     code written primarily by:
   
        Todd Miller           Todd C. Miller
   
       See the CONTRIBUTORS file in the ssuuddoo distribution     See the CONTRIBUTORS file in the ssuuddoo distribution
       (http://www.sudo.ws/sudo/contributors.html) for a list of people who     (http://www.sudo.ws/sudo/contributors.html) for an exhaustive list of
       have contributed to ssuuddoo.     people who have contributed to ssuuddoo.
   
 CCAAVVEEAATTSS  CCAAVVEEAATTSS
       There is no easy way to prevent a user from gaining a root shell if the     There is no easy way to prevent a user from gaining a root shell if the
       editor used by vviissuuddoo allows shell escapes.     editor used by vviissuuddoo allows shell escapes.
   
 BBUUGGSS  BBUUGGSS
       If you feel you have found a bug in vviissuuddoo, please submit a bug report     If you feel you have found a bug in vviissuuddoo, please submit a bug report at
       at http://www.sudo.ws/sudo/bugs/     http://www.sudo.ws/sudo/bugs/
   
 SSUUPPPPOORRTT  SSUUPPPPOORRTT
       Limited free support is available via the sudo-users mailing list, see     Limited free support is available via the sudo-users mailing list, see
       http://www.sudo.ws/mailman/listinfo/sudo-users to subscribe or search     http://www.sudo.ws/mailman/listinfo/sudo-users to subscribe or search the
       the archives.     archives.
   
 DDIISSCCLLAAIIMMEERR  DDIISSCCLLAAIIMMEERR
       vviissuuddoo is provided ``AS IS'' and any express or implied warranties,     vviissuuddoo is provided ``AS IS'' and any express or implied warranties,
       including, but not limited to, the implied warranties of     including, but not limited to, the implied warranties of merchantability
       merchantability and fitness for a particular purpose are disclaimed.     and fitness for a particular purpose are disclaimed.  See the LICENSE
       See the LICENSE file distributed with ssuuddoo or     file distributed with ssuuddoo or http://www.sudo.ws/sudo/license.html for
       http://www.sudo.ws/sudo/license.html for complete details.     complete details.
   
Sudo 1.8.8                      August 14, 2013                     Sudo 1.8.8
 
1.8.5                           March 14, 2012                      VISUDO(1m) 
Removed from v.1.1.1.2  
changed lines
  Added in v.1.1.1.5

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>