Comment 1 for bug 75031

Revision history for this message
Kees Cook (kees) wrote :

Thanks for the report!

Anyone with the access to start/stop system services generally has a very large ability to disrupt the operation of the system, so I'm going to unflag this as a security issue.

Currently sudo will preserve the environment if you can have full privs, otherwise the environment is cleaned. If you want to force a clean env at all times, you can add:

Defaults env_reset

to your /etc/sudoers.