[Bug 2125507] Re: sudo --non-interactive is interactive

[Julian Andres Klode]

I have

auth       sufficient pam_u2f.so cue

before the common-auth in sudo/sudo-i


I wonder if it matters though, presumably sudo should not consult PAM in the first place in non-interactive mode - I cannot tell because I don't know off the top of my head how to strace sudo.ws

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to rust-sudo-rs in Ubuntu.
https://bugs.launchpad.net/bugs/2125507

Title:
  sudo --non-interactive is interactive

Status in rust-sudo-rs package in Ubuntu:
  New

Bug description:
  The --non-interactive flag does not work, it will try to do PAM auth,
  which then blocks because my PAM is configured to do FIDO2:

  jak at jak-t14-g3 ~/P/U/rust-coreutils-0.2.2 (ubuntu/devel)> sudo --non-interactive echo x
  [sudo] Please touch the FIDO authenticator.
  x
  jak at jak-t14-g3 ~/P/U/rust-coreutils-0.2.2 (ubuntu/devel)> sudo.ws --non-interactive echo x
  sudo: a password is required

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/rust-sudo-rs/+bug/2125507/+subscriptions