diff --git a/docs/sudoers.man.in b/docs/sudoers.man.in index c5844ad6bb..34da19e412 100644 --- a/docs/sudoers.man.in +++ b/docs/sudoers.man.in @@ -25,7 +25,7 @@ .nr BA @BAMAN@ .nr LC @LCMAN@ .nr PS @PSMAN@ -.TH "SUDOERS" "@mansectform@" "July 14, 2024" "Sudo @PACKAGE_VERSION@" "File Formats Manual" +.TH "SUDOERS" "@mansectform@" "November 11, 2024" "Sudo @PACKAGE_VERSION@" "File Formats Manual" .nh .if n .ad l .SH "NAME" @@ -5570,11 +5570,16 @@ The \fIrestricted_env_file\fR option specifies the fully qualified path to a file containing variables to be set in the environment of the program being run. -Entries in this file should either be of the form +Entries in this file should be assignments in the form \(oqVARIABLE=value\(cq or -\(oqexport VARIABLE=value\(cq. +\(oqexport VARIABLE=value\(cq, +separated by newline characters. The value may optionally be enclosed in single or double quotes. +Shell-style variable substitution is not supported. +Empty lines and comments starting with a pound sign +(\(oq#\(cq) +are ignored. Variables in this file are only added if the variable does not already exist in the environment. Unlike diff --git a/docs/sudoers.mdoc.in b/docs/sudoers.mdoc.in index 591c9b7ba5..810a407705 100644 --- a/docs/sudoers.mdoc.in +++ b/docs/sudoers.mdoc.in @@ -25,7 +25,7 @@ .nr BA @BAMAN@ .nr LC @LCMAN@ .nr PS @PSMAN@ -.Dd July 14, 2024 +.Dd November 11, 2024 .Dt SUDOERS @mansectform@ .Os Sudo @PACKAGE_VERSION@ .Sh NAME @@ -5220,11 +5220,16 @@ The .Em restricted_env_file option specifies the fully qualified path to a file containing variables to be set in the environment of the program being run. -Entries in this file should either be of the form +Entries in this file should be assignments in the form .Ql VARIABLE=value or -.Ql export VARIABLE=value . +.Ql export VARIABLE=value , +separated by newline characters. The value may optionally be enclosed in single or double quotes. +Shell-style variable substitution is not supported. +Empty lines and comments starting with a pound sign +.Pq Ql # +are ignored. Variables in this file are only added if the variable does not already exist in the environment. Unlike