[sudo-workers] hooking of getenv broke SUDO_ASKPASS in 1.8.5

Mike Frysinger vapier at gentoo.org
Sat May 26 14:08:54 EDT 2012


the new sudo code base exports the getenv symbol allowing it to hook all calls 
to the environment.  this broke the SUDO_ASKPASS functionality as the initial 
env setup in plugins/sudoers/env.c:rebuild_env() removed it, and the hooked 
getenv call in src/tgetpass.c returns NULL.

not sure how people want to fix it.  maybe whitelist the variable in 
initial_keepenv_table ?  extract it earlier and save it into the askpass 
variable (overriding the config settings) ?
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: </pipermail/sudo-workers/attachments/20120526/a4f221f1/attachment.bin>


More information about the sudo-workers mailing list