Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 286014 - app-admin/sudo: secure_path is set while documentations claims not to be
Summary: app-admin/sudo: secure_path is set while documentations claims not to be
Status: RESOLVED UPSTREAM
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Diego Elio Pettenò (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2009-09-22 19:29 UTC by Arthur D.
Modified: 2009-09-29 17:36 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arthur D. 2009-09-22 19:29:39 UTC
I recently added /opt/scripts/sbin and /opt/scripts/bin in PATH using env-update.
I tried to run "sudo NAME_OF_SCRIPT_FROM_opt_scripts_sbin" and got "command not found" from sudo.
Then I run "sudo env | grep -i path" and found that PATH variable differed from one set by /etc/profile (/etc/profile.env)
I checked manpage of sudoers and found an options called "secure_path" which was claimed not to be set by default. I checked ebuild of sudo and found that it's not true. It was set by configure script in compile time.
So that option is compiled-in and the documentation should be changed appropriately.

Reproducible: Always

Steps to Reproduce:




I use current stable sudo-1.7.2_p1 in my system.
Comment 1 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-09-24 22:04:34 UTC
Working on a patch.
Comment 2 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-09-24 22:08:25 UTC
Fixed without revbump, sending patch upstream.
Comment 3 Arthur D. 2009-09-28 19:54:18 UTC
Hello, Diego. Good job, but...
Noting that secure_path is set by default is far not enough. It's not a flag.
That's a variable with default value set during compile time.

Please consider pointing, what default value is, in the man page.
Comment 4 Diego Elio Pettenò (RETIRED) gentoo-dev 2009-09-28 19:56:01 UTC
Uhm you should probably ask upstream about that then, since I wouldn't be sure how to document that properly.
Comment 5 Arthur D. 2009-09-29 17:12:56 UTC
(In reply to comment #4)
> Uhm you should probably ask upstream about that then, since I wouldn't be sure
> how to document that properly.
> 

Ok.
Comment 6 Arthur D. 2009-09-29 17:36:37 UTC
The bug report is here:

http://www.sudo.ws/bugs/show_bug.cgi?id=370