[Bug 889936] Re: sudo(8) incorrectly says HOME is reset if env_reset is set

Dan Streetman dan.streetman at canonical.com
Wed Jun 19 21:16:02 UTC 2019


*** This bug is a duplicate of bug 1556302 ***
    https://bugs.launchpad.net/bugs/1556302

** This bug has been marked a duplicate of bug 1556302
   Ubuntu patch to add HOME to env_keep makes custom commands vulnerable by default

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/889936

Title:
  sudo(8) incorrectly says HOME is reset if env_reset is set

Status in sudo package in Ubuntu:
  Confirmed

Bug description:
  Version: 1.7.4p6-1ubuntu2 on Ubuntu 11.10

  What happens:
  sudo(8) contains "By default, sudo will set HOME if env_reset or always_set_home are set" and "Set to the home directory of the target user if -i or -H are specified, env_reset or always_set_home are set in sudoers"

  What I expect to happen:
  sudo(8) should not claim that HOME is set if env_reset is set.

  I believe sudo(8) should not claim this because sudo does /not/ set
  HOME if env_reset is set, which is the expected behaviour according to
  https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/760140 .

  This behaviour is what happens when env_reset is set (I have attached my /etc/sudoers, which is the default Ubuntu /etc/sudoers):
  $ sudo env | grep HOME
  HOME=/home/tom
  $ sudo -H env | grep HOME
  HOME=/root

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/889936/+subscriptions



More information about the foundations-bugs mailing list