how sudo handles $HOME

[Dan Streetman]

Good question.

I've cc'ed sudo-users, so the question to the upstream sudo list can
be summarized as:
How likely would it be for upstream sudo to add HOME to env_keep by default?

We ask because Ubuntu carries a patch that adds HOME to env_keep,
unlike the default upstream, or any other Linux/Unix.  We are
considering removing that patch, to match upstream defaults, of *not*
including HOME in env_keep.

More details are in this bug:
https://bugs.launchpad.net/ubuntu/+source/sudo/+bug/1556302

On Thu, May 16, 2019 at 5:10 AM Robie Basak <robie.basak at ubuntu.com> wrote:
>
> On Tue, May 14, 2019 at 01:12:56PM -0400, Dan Streetman wrote:
> > in Ubuntu, sudo retains the calling user's $HOME
> >
> > this is different from upstream sudo as well as all other UNIXes and
> > even the sudo documentation we provide.  Should we remove our custom
> > patch that adds this behavior?
>
> Does upstream have a position on this question, apart from our
> observation of their current default?
>
> For example: what if we changed it back, then someone persuaded upstream
> to flip the default? That would cause disruption to our users twice. Can
> we ensure, before reverting to their default, that upstream have no
> intention of changing it?
>
> Robie