summaryrefslogtreecommitdiff
path: root/usr.bin/sudo/PORTING
diff options
context:
space:
mode:
authorTodd C. Miller <millert@cvs.openbsd.org>2007-07-26 16:10:17 +0000
committerTodd C. Miller <millert@cvs.openbsd.org>2007-07-26 16:10:17 +0000
commit828fe35b0dee0a24eae19e816e9f6bc05c720bc0 (patch)
tree2adb27efde016e50eadcf2e74892e19861268a25 /usr.bin/sudo/PORTING
parenteb13f7f0aa17caa3bf79e5518751b3f095fb2445 (diff)
Update to sudo 1.6.9p1. Note that the environment handling in sudo
1.6.9 has changed relative to older versions. Sudo now starts commands with a minimal environment containing the variables in the env_keep and env_check lists. This behavior is configurable in the sudoers file. Please see the "SECURITY NOTES" section in the sudo manual.
Diffstat (limited to 'usr.bin/sudo/PORTING')
-rw-r--r--usr.bin/sudo/PORTING6
1 files changed, 0 insertions, 6 deletions
diff --git a/usr.bin/sudo/PORTING b/usr.bin/sudo/PORTING
index 1d42ebd6bac..861e0c03ea7 100644
--- a/usr.bin/sudo/PORTING
+++ b/usr.bin/sudo/PORTING
@@ -21,12 +21,6 @@ the POSIX sysconf(2) it will be used instead of getdtablesize(2).
ulimit(2) or getrlimit(2) can also be used on some OS's. If all
else fails you can use the value of NOFILE in <sys/param.h>.
-Also, some operating systems have a broken implementation of POSIX
-saved IDs. If sudo prints the error message "seteuid(0) failed,
-your operating system may have broken POSIX saved ID support" this
-means saved IDs are not implemented properly. You should run
-configure with the "--disable-saved-ids" option and rebuild sudo.
-
Sudo tries to clear the environment of dangerous environment variables
such as LD_* to prevent shared library spoofing. If you are porting
sudo to a new OS that has shared libraries you'll want to mask out