[sudo-workers] hooking of getenv broke SUDO_ASKPASS in 1.8.5
vapier at gentoo.org
Sat May 26 14:08:54 EDT 2012
the new sudo code base exports the getenv symbol allowing it to hook all calls
to the environment. this broke the SUDO_ASKPASS functionality as the initial
env setup in plugins/sudoers/env.c:rebuild_env() removed it, and the hooked
getenv call in src/tgetpass.c returns NULL.
not sure how people want to fix it. maybe whitelist the variable in
initial_keepenv_table ? extract it earlier and save it into the askpass
variable (overriding the config settings) ?
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 836 bytes
Desc: This is a digitally signed message part.
More information about the sudo-workers