Re: [SECURITY] [DSA 946-1] New sudo packages fix privilege escalation
Le vendredi 20 janvier 2006 à 11:24 +0100, Martin Schulze a écrit :
> This update alters the former behaviour of sudo and limits the number
> of supported environment variables to LC_*, LANG, LANGUAGE and TERM.
> Additional variables are only passed through when set as env_check in
> /etc/sudoers, which might be required for some scripts to continue to
> work.
How about the XAUTHORITY environment variable ? Isn't it necessary to
run X11 applications?
Regards,
--
.''`. Josselin Mouette /\./\
: :' : josselin.mouette@ens-lyon.org
`. `' joss@debian.org
`- Debian GNU/Linux -- The power of freedom
Reply to: