Re: allow _proxy variables in sudoers

2012-01-16 Thread Todd C. Miller
On Sun, 15 Jan 2012 22:30:31 MST, Theo de Raadt wrote: > > you forgot https_proxy and no_proxy... > > > > however, im against this change since it allows a user to redirect a progra > m > > they need privileges to use to an arbitrary proxy they specify, something > > there is no good mitigation a

Re: allow _proxy variables in sudoers

2012-01-15 Thread Theo de Raadt
> you forgot https_proxy and no_proxy... > > however, im against this change since it allows a user to redirect a program > they need privileges to use to an arbitrary proxy they specify, something > there is no good mitigation against. Indeed. That's right, isn't it Todd? The whole idea here w

Re: allow _proxy variables in sudoers

2012-01-15 Thread David Gwynne
you forgot https_proxy and no_proxy... however, im against this change since it allows a user to redirect a program they need privileges to use to an arbitrary proxy they specify, something there is no good mitigation against. dlg On 16/01/2012, at 12:15 AM, Peter Hessler wrote: > When you are

Re: allow _proxy variables in sudoers

2012-01-15 Thread Loganaden Velvindron
I need this @ work. On Sun, Jan 15, 2012 at 6:15 PM, Peter Hessler wrote: > When you are in a place that requires proxy configs to reach the > internet, it would be very nice if you could then use pkg_add. > > So, add ftp_proxy and http_proxy to the default env_keep variable. > > OK? > > Index:

allow _proxy variables in sudoers

2012-01-15 Thread Peter Hessler
When you are in a place that requires proxy configs to reach the internet, it would be very nice if you could then use pkg_add. So, add ftp_proxy and http_proxy to the default env_keep variable. OK? Index: usr.bin/sudo/sudoers === R