[sudo-workers] hooking of getenv broke SUDO_ASKPASS in 1.8.5
Mike Frysinger
vapier at gentoo.org
Sat May 26 14:08:54 EDT 2012
the new sudo code base exports the getenv symbol allowing it to hook all calls
to the environment. this broke the SUDO_ASKPASS functionality as the initial
env setup in plugins/sudoers/env.c:rebuild_env() removed it, and the hooked
getenv call in src/tgetpass.c returns NULL.
not sure how people want to fix it. maybe whitelist the variable in
initial_keepenv_table ? extract it earlier and save it into the askpass
variable (overriding the config settings) ?
-mike
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: This is a digitally signed message part.
URL: </pipermail/sudo-workers/attachments/20120526/a4f221f1/attachment.bin>
More information about the sudo-workers
mailing list