Re: Comparing -k and -K

On Tue, Dec 27, 2022 at 03:35:18PM -0700, Todd C. Miller wrote:
> On Tue, 27 Dec 2022 16:33:11 -0500, Jason Franklin wrote:
> > If I want to revoke permissions in my ~/.bash_logout file, which one of
> > these options is recommended?
> >
> > Is "-K" better/stronger than "-k"?
> 
> It depends what you want to achieve.  The cached credential file
> generally holds multiple credentials.  For example, there is a
> seperate entry for each terminal the user logged in to.  Running
> "sudo -k" will invalidate the credentials for the current terminal
> session but will not affect other sessions.  Running "sudo -K" will
> remove the entire credential file so it affects all sessions.

Aha! That does explain the difference.

Now I understand why people use "-k" in their logout scripts.

Thank you!

-- 
Jason Franklin
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users