[Bug 192651] Re: hardy sudo path is always reset

[Bug Watch Updater]

Launchpad has imported 5 comments from the remote bug at
https://bugzilla.redhat.com/show_bug.cgi?id=489744.

If you reply to an imported comment from within Launchpad, your comment
will be sent to the remote bug automatically. Read more about
Launchpad's inter-bugtracker facilities at
https://help.launchpad.net/InterBugTracking.

------------------------------------------------------------------------
On 2009-03-11T16:28:08+00:00 Jeff wrote:

Description of problem:
Our users have a pretty scary PATH variable and they have a script named runasrelease that does:
sudo -u release bash -c "$*"

Since upgrading to fedora10+, the PATH variable is cleared and set to
whatever was builtin with --secure-path. This breaks our expected usage
of sudo as it removes PATH which we want set.

Adding:
!env_reset

or env_reset
env_keep = "HOME PATH"

does not work.

Version-Release number of selected component (if applicable):
sudo-1.6.9p17-6

How reproducible:
PATH=$PATH:/tmp/pathtest
sudo -u anyotheruser bash -c 'echo $PATH'

Steps to Reproduce:
jschroeder at ops2.fra03: ~ $ echo $PATH
/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin:/usr/java/bin:/home/release:/home/release/scripts:/opt/mysql/5.1.30/bin:/home/jschroeder/bin
jschroeder at ops2.fra03: ~ $ sudo -u release bash -c 'echo $PATH'
[sudo] password for jschroeder: 
/sbin:/bin:/usr/sbin:/usr/bin:/usr/local/bin

Actual results:
PATH is cleared due to the --secure-path option

Expected results:
There should be a way for PATH to not be cleared. !env_reset or adding PATH to env_keep should work. This is fixed in 1.7.0 according to upstream.

Additional info:

* Wed May 14 2008 Peter Vrabec <pvrabec at redhat.com> 1.6.9p13-6
- compiled with secure path (#80215)

https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/192651 ubuntu bug
http://www.gratisoft.us/bugzilla/show_bug.cgi?id=284 upstream bug

Reply at:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/192651/comments/5

------------------------------------------------------------------------
On 2009-05-12T12:07:41+00:00 Fedora wrote:

sudo-1.7.1-1.fc11 has been submitted as an update for Fedora 11.
http://admin.fedoraproject.org/updates/sudo-1.7.1-1.fc11

Reply at:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/192651/comments/6

------------------------------------------------------------------------
On 2009-05-13T00:23:37+00:00 Fedora wrote:

sudo-1.7.1-1.fc11 has been pushed to the Fedora 11 testing repository.  If problems still persist, please make note of it in this bug report.
 If you want to test the update, you can install it with 
 su -c 'yum --enablerepo=updates-testing update sudo'.  You can provide feedback for this update here: http://admin.fedoraproject.org/updates/F11/FEDORA-2009-4879

Reply at:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/192651/comments/8

------------------------------------------------------------------------
On 2009-06-09T12:08:45+00:00 Bug wrote:


This bug appears to have been reported against 'rawhide' during the Fedora 11 development cycle.
Changing version to '11'.

More information and reason for this action is here:
http://fedoraproject.org/wiki/BugZappers/HouseKeeping

Reply at:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/192651/comments/10

------------------------------------------------------------------------
On 2009-06-16T01:57:40+00:00 Fedora wrote:

sudo-1.7.1-1.fc11 has been pushed to the Fedora 11 stable repository.
If problems still persist, please make note of it in this bug report.

Reply at:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/192651/comments/11


** Changed in: sudo (Fedora)
   Importance: Unknown => Medium

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to sudo in Ubuntu.
https://bugs.launchpad.net/bugs/192651

Title:
  hardy sudo path is always reset

Status in sudo:
  Fix Released
Status in sudo package in Ubuntu:
  Fix Released
Status in sudo package in Fedora:
  Fix Released

Bug description:
  Binary package hint: sudo

  According to /usr/share/doc/sudo/OPTIONS, sudo is bulit with

  --with-secure-
  path="/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/usr/X11R6/bin"

  This is basically ok, but you should be able to change the default
  PATH for sudo.

  I tried in sudoers:

  Defaults        env_reset
  Defaults        env_keep="HOME"

  and

  Defaults        !env_reset

  But PATH is always reset to the configured one.

To manage notifications about this bug go to:
https://bugs.launchpad.net/sudo/+bug/192651/+subscriptions