Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 71664 - app-admin/sudo should add econf option --with-secure-path
Summary: app-admin/sudo should add econf option --with-secure-path
Status: RESOLVED FIXED
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: Current packages (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Tavis Ormandy (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-11-18 06:16 UTC by John N. Laliberte (RETIRED)
Modified: 2005-06-06 02:19 UTC (History)
2 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments
patch for sudo-1.6.8_p2.ebuild (sudo.patch,380 bytes, patch)
2004-11-18 06:21 UTC, John N. Laliberte (RETIRED)
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description John N. Laliberte (RETIRED) gentoo-dev 2004-11-18 06:16:43 UTC
Heres an example:
--with-secure-path=/usr/local/sbin:/usr/sbin:/sbin:/usr/local/bin:/usr/bin:/bin:/usr/X11R6/bin

without this, you have to specify the full path! (sudo /usr/local/sbin/blah)
attached is a modified sudo-1.6.8_p2.ebuild with this in there.

Thanks!
Comment 1 John N. Laliberte (RETIRED) gentoo-dev 2004-11-18 06:21:17 UTC
Created attachment 44223 [details, diff]
patch for sudo-1.6.8_p2.ebuild

patch for sudo-1.6.8_p2.ebuild
Comment 2 Seemant Kulleen (RETIRED) gentoo-dev 2004-11-18 09:58:41 UTC
missing metadata.xml
Comment 3 Tavis Ormandy (RETIRED) gentoo-dev 2004-11-20 02:39:18 UTC
yep, it was on my todo list :)

I'll commit an update later today.
Comment 4 Tavis Ormandy (RETIRED) gentoo-dev 2004-11-25 10:35:24 UTC
Sorry, I didnt commit an update after all. the problem is, i'm going to get a lot of bugs about this from people who are used to having the PATH carried over. (I've already had a a few complaints from people used to the env being kept since I changed that behaviour).

I'm looking at ways to use the path from /etc/profile, which should be sanitised  (ie, users can't use it to break out of shell scripts), and convenient. I'll work on it.
Comment 5 John N. Laliberte (RETIRED) gentoo-dev 2004-11-26 11:36:57 UTC
what if you added a use flag for including this default path? ("path")
Comment 6 Rune Schjellerup 2005-05-16 04:55:29 UTC
I would very much like it if you created a use flag for including
--with-secure-path
in the configuration of sudo.
Comment 7 Tavis Ormandy (RETIRED) gentoo-dev 2005-06-06 02:19:04 UTC
secure_path is enabled in 1.6.8_p8-r2, the mechanism is not perfect, but the 
benefits outweigh that i think.

Please all test it out and file a bug if it doesnt work for you. Any suggestions 
for impovement welcome.