diff options
author | Todd C. Miller <millert@cvs.openbsd.org> | 2007-07-26 16:10:17 +0000 |
---|---|---|
committer | Todd C. Miller <millert@cvs.openbsd.org> | 2007-07-26 16:10:17 +0000 |
commit | 828fe35b0dee0a24eae19e816e9f6bc05c720bc0 (patch) | |
tree | 2adb27efde016e50eadcf2e74892e19861268a25 /usr.bin/sudo/PORTING | |
parent | eb13f7f0aa17caa3bf79e5518751b3f095fb2445 (diff) |
Update to sudo 1.6.9p1. Note that the environment handling in sudo
1.6.9 has changed relative to older versions. Sudo now starts
commands with a minimal environment containing the variables in the
env_keep and env_check lists. This behavior is configurable in the
sudoers file. Please see the "SECURITY NOTES" section in the sudo
manual.
Diffstat (limited to 'usr.bin/sudo/PORTING')
-rw-r--r-- | usr.bin/sudo/PORTING | 6 |
1 files changed, 0 insertions, 6 deletions
diff --git a/usr.bin/sudo/PORTING b/usr.bin/sudo/PORTING index 1d42ebd6bac..861e0c03ea7 100644 --- a/usr.bin/sudo/PORTING +++ b/usr.bin/sudo/PORTING @@ -21,12 +21,6 @@ the POSIX sysconf(2) it will be used instead of getdtablesize(2). ulimit(2) or getrlimit(2) can also be used on some OS's. If all else fails you can use the value of NOFILE in <sys/param.h>. -Also, some operating systems have a broken implementation of POSIX -saved IDs. If sudo prints the error message "seteuid(0) failed, -your operating system may have broken POSIX saved ID support" this -means saved IDs are not implemented properly. You should run -configure with the "--disable-saved-ids" option and rebuild sudo. - Sudo tries to clear the environment of dangerous environment variables such as LD_* to prevent shared library spoofing. If you are porting sudo to a new OS that has shared libraries you'll want to mask out |