[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: apt-get, sudo and proxies



Ryan Nowakowski wrote:
> There was a security hole found in sudo and the fix was to disallow most
> environment variables:
> http://www.debian.org/security/2006/dsa-946
> 
> - Ryan
Fix it adding env_keep = var_name to your Defaults line in /etc/sudoers.
Notice that var_name doesn't have a dollar sign. Otherwise you can remove
the env_reset, but that is apparently not recommended. Example from
my /etc/sudoers:
Defaults        env_reset, env_keep = DISPLAY
Here I keep the DISPLAY variable which allows me to launch X based apps
under sudo.
-- 

Felipe Sateler



Reply to: