Ryan Nowakowski wrote:
> There was a security hole found in sudo and the fix was to disallow most
> environment variables:
> http://www.debian.org/security/2006/dsa-946
> 
> - Ryan
Fix it adding env_keep = var_name to your Defaults line in /etc/sudoers.
Notice that var_name doesn't have a dollar sign. Otherwise you can remove
the env_reset, but that is apparently not recommended. Example from
my /etc/sudoers:
Defaults        env_reset, env_keep = DISPLAY
Here I keep the DISPLAY variable which allows me to launch X based apps
under sudo.
-- 

Felipe Sateler


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED] 
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to