reassign 462445 sudo
found 462445 1.6.9p11-1
thanks

This is a sudo bug.  The issue is the following code in
auth/pam.c:sudo_conv():

    /* Is the sudo prompt standard? (If so, we'l just use PAM's) */
    std_prompt =  strncmp(def_prompt, "Password:", 9) == 0 &&
        (def_prompt[9] == '\0' ||
        (def_prompt[9] == ' ' && def_prompt[10] == '\0'));

This assumes that def_prompt has been initialized before this point, but
this is a static variable which is only initialized in the pam_verify()
function which is only called when authentication is needed.

It's perfectly valid for session modules to call the PAM conversation
function, so that function needs to work whenever pam_open_session() is
called -- not just when PAM is being used for authentication.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
[EMAIL PROTECTED]                                     [EMAIL PROTECTED]



-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to