Re: sudo doesn't set HOME

[Jon Dowland <lists@alcopop.org>]

On Mon, Mar 06, 2006 at 04:21:05AM -0600, Hugo Vanwoerkom
wrote:
> 1.6.8p7-1.3 does not set some ENV variables because it was
> deemed this was a security risk. As a result it functions
> differently than previous versions and you have to fiddle
> with sudoers to get it to behave as it did before.

More precicely, 1.6.8p7-1.3 moves from a blacklist model
(where known-dangerous environment variables were stripped)
to a whitelist model (where you have to explicitly name the
environment variables to retain in the sudoers file).

-- 
Jon Dowland
http://alcopop.org/