FS#29163 - [sudo] env_reset not Default in /etc/sudoers

Attached to Project: Arch Linux
Opened by Ted Pavlic (tpavlic) - Thursday, 29 March 2012, 04:47 GMT
Last edited by Allan McRae (Allan) - Thursday, 29 March 2012, 05:49 GMT
Task Type Bug Report
Category Packages: Core
Status Closed
Assigned To No-one
Architecture All
Severity Low
Priority Normal
Reported Version
Due in Version Undecided
Due Date Undecided
Percent Complete 100%
Votes 0
Private No

Details

Description: The /etc/sudoers file has the comment:

## Defaults specification
##
## You may wish to keep some of the following environment variables
## when running commands via sudo.

which is then followed by several commented-out

## Defaults env_keep += ...

lines. However, nowhere in the sudoers is env_reset. Consequently, ALL environment is presently kept in the sudoers. Other distributions make env_reset by default, and I think that's the intent here (based on the comment).

So

Defaults env_reset

should be added.

Additional info:
* sudo-1.8.4-1


Steps to reproduce:

1. sudo env # shows inherited environment
2. sudo visudo # shows env_reset is missing
This task depends upon

Closed by  Allan McRae (Allan)
Thursday, 29 March 2012, 05:49 GMT
Reason for closing:  Not a bug
Additional comments about closing:  This file is the default provided in the source tarball.

Loading...