File tree Expand file tree Collapse file tree 1 file changed +5
-0
lines changed Expand file tree Collapse file tree 1 file changed +5
-0
lines changed Original file line number Diff line number Diff line change @@ -70,6 +70,11 @@ Some other notable restrictions to be aware of:
70
70
the sudoers file.
71
71
* sudo-rs will not include the sendmail support of original sudo.
72
72
* The sudoers file must be valid UTF-8.
73
+ * To prevent a common configuration mistake in the sudoers file, wildcards
74
+ are not supported in * argument positions* for a command.
75
+ E.g., ` %sudoers ALL = /sbin/fsck* ` will allow ` sudo fsck ` and ` sudo fsck_exfat ` as expected,
76
+ but ` %sudoers ALL = /bin/rm *.txt ` will not allow an operator to run ` sudo rm README.txt ` ,
77
+ nor ` sudo rm -rf /home .txt ` , as with original sudo.
73
78
74
79
If you find a common use case for original sudo missing, please create a feature
75
80
request for it in our issue tracker.
You can’t perform that action at this time.
0 commit comments