On Mon, Mar 06, 2006 at 04:21:05AM -0600, Hugo Vanwoerkom
wrote:
1.6.8p7-1.3 does not set some ENV variables because it was
deemed this was a security risk. As a result it functions
differently than previous versions and you have to fiddle
with sudoers to get it to behave as it did before.
More precicely, 1.6.8p7-1.3 moves from a blacklist model
(where known-dangerous environment variables were stripped)
to a whitelist model (where you have to explicitly name the
environment variables to retain in the sudoers file).