changeset 13686:4f7035d6b921

In SECURITY NOTES, clarify that PATH may be overridden by the policy. Bug #1014
author Todd C. Miller <Todd.Miller@sudo.ws>
date Sat, 11 Dec 2021 09:08:03 -0700
parents 46db77e4afb8
children 75c23aaa9fca
files docs/sudo.man.in docs/sudo.mdoc.in
diffstat 2 files changed, 8 insertions(+), 10 deletions(-) [+]
line wrap: on
line diff
--- a/docs/sudo.man.in	Sat Dec 11 08:35:18 2021 -0700
+++ b/docs/sudo.man.in	Sat Dec 11 09:08:03 2021 -0700
@@ -25,7 +25,7 @@
 .nr BA @BAMAN@
 .nr LC @LCMAN@
 .nr PS @PSMAN@
-.TH "SUDO" "@mansectsu@" "September 17, 2021" "Sudo @PACKAGE_VERSION@" "System Manager's Manual"
+.TH "SUDO" "@mansectsu@" "December 11, 2021" "Sudo @PACKAGE_VERSION@" "System Manager's Manual"
 .nh
 .if n .ad l
 .SH "NAME"
@@ -1034,11 +1034,10 @@
 \fRPATH\fR
 (if one or both are in the
 \fRPATH\fR).
-Note, however, that the actual
+Depending on the security policy, the user's
 \fRPATH\fR
-environment variable is
-\fInot\fR
-modified and is passed unchanged to the program that
+environment variable may be modified, replaced,
+or passed unchanged to the program that
 \fBsudo\fR
 executes.
 .PP
--- a/docs/sudo.mdoc.in	Sat Dec 11 08:35:18 2021 -0700
+++ b/docs/sudo.mdoc.in	Sat Dec 11 09:08:03 2021 -0700
@@ -24,7 +24,7 @@
 .nr BA @BAMAN@
 .nr LC @LCMAN@
 .nr PS @PSMAN@
-.Dd September 17, 2021
+.Dd December 11, 2021
 .Dt SUDO @mansectsu@
 .Os Sudo @PACKAGE_VERSION@
 .Sh NAME
@@ -975,11 +975,10 @@
 .Ev PATH
 (if one or both are in the
 .Ev PATH ) .
-Note, however, that the actual
+Depending on the security policy, the user's
 .Ev PATH
-environment variable is
-.Em not
-modified and is passed unchanged to the program that
+environment variable may be modified, replaced,
+or passed unchanged to the program that
 .Nm
 executes.
 .Pp