summaryrefslogtreecommitdiff
path: root/usr.bin/sudo/BUGS
blob: 2eb4338e81d7f2833ef6ac264b8bf865096a6e57 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
Known bugs in sudo version 1.6.7
================================

1) Sudo should have an option to log when removing "dangerous"
   environment variables.

2) On DUNIX in sia mode, hitting return at the prompt does not quit.

3) In parse.lex, '@' should not need to be a special character.
   However, because lex does greedy matching, {WORD} will match
   instead of the "^Defaults[:@]?" line.

4) In list mode (sudo -l), characters escaped with a backslash
   are shown verbatim with the backslash.

5) Because the parser only does a single pass it is possible to
   make a sudoers file where the "defaults" options are set after
   a user's entry has been validated, changing the permissions for
   the user.  The work-around is to put all 'defaults' entries
   before the "User privilege specification" section but after all
   the "alias specifications".  In the future the parser will
   converted to a two-pass parser.

For a list of things that are not bugs but that I would like to
add / fix, please see the TODO file.