Activity log for bug #1373495

Date Who What changed Old value New value Message
2014-09-24 16:29:00 V字龍(Vdragon) bug added bug
2014-09-24 16:29:17 V字龍(Vdragon) description Currently Ubuntu hard-coded preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when user run the same program using it's account and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tell that graphical application shouldn't launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck: /etc/sudoers: parsed OK /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when user run the same program using it's account and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2014-09-24 16:33:10 V字龍(Vdragon) description Currently Ubuntu hard-coded preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when user run the same program using it's account and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2014-09-24 17:04:17 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to generic users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2014-09-24 17:04:30 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to generic users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2014-09-24 17:16:36 V字龍(Vdragon) summary sudo shouldn't preserve HOME environment variable by default sudo shouldn't preserve caller's HOME environment variable by default
2014-09-24 18:15:39 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue is in this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2014-09-24 18:45:59 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch) that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2014-09-25 01:50:20 Launchpad Janitor sudo (Ubuntu): status New Confirmed
2014-09-25 05:44:57 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into the HOME directory **AS ROOT** which, will cause issue when users run the same program as themselves and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch) that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch) that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2015-10-02 12:19:24 Allenplay sudo (Ubuntu): status Confirmed Incomplete
2015-10-02 12:19:30 Allenplay sudo (Ubuntu): status Incomplete Confirmed
2016-02-18 15:36:55 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch) that make $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. RootSudo - Community Help Wiki(https://help.ubuntu.com/community/RootSudo ) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch)(no, Debian is NOT affected by this issue) that makes $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. [RootSudo - Community Help Wiki](https://help.ubuntu.com/community/RootSudo) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2016-02-18 15:39:48 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch)(no, Debian is NOT affected by this issue) that makes $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. [RootSudo - Community Help Wiki](https://help.ubuntu.com/community/RootSudo) wrongly tells that graphical application shouldn't be launch by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch)(no, Debian is NOT affected by this issue) that makes $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. [RootSudo - Community Help Wiki](https://help.ubuntu.com/community/RootSudo) wrongly tells that graphical application shouldn't be launched by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2016-02-18 15:40:14 V字龍(Vdragon) description Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may write files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch)(no, Debian is NOT affected by this issue) that makes $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. [RootSudo - Community Help Wiki](https://help.ubuntu.com/community/RootSudo) wrongly tells that graphical application shouldn't be launched by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703 Currently Ubuntu hard-coded sudo to preserve HOME environment variable to point to sudo caller's home directory by default(refer bug #760140) however this is dangerous and error-prone because the program run by root may create files (e.g. $HOME/.Xauthority , program config files) into caller's HOME directory **AS ROOT** which, will cause issue when users run the same program as their normal users' account again and even make the user failed to login(due to .Xauthority file owner is incorrect) In my opinion the Ubuntu patch(keep_home_by_default.patch)(no, Debian is NOT affected by this issue) that makes $HOME variable keep in sudo is INSANE and should be reverted(Ubuntu should use the safest configuration to general users by default), any user wish to run command as root using their HOME directory should set env_keep in /etc/sudoers themselves and acknowledging the consequences. [RootSudo - Community Help Wiki](https://help.ubuntu.com/community/RootSudo) wrongly tells that graphical application shouldn't be launched by sudo, but in fact the real issue falls into this bug. ProblemType: Bug DistroRelease: Ubuntu 14.04 Package: sudo 1.8.9p5-1ubuntu1 ProcVersionSignature: Ubuntu 3.16.0-17.23-lowlatency 3.16.3 Uname: Linux 3.16.0-17-lowlatency i686 ApportVersion: 2.14.1-0ubuntu3.4 Architecture: i386 CurrentDesktop: KDE Date: Thu Sep 25 00:08:44 2014 InstallationDate: Installed on 2013-03-08 (564 days ago) InstallationMedia: Ubuntu 12.10 "Quantal Quetzal" - Release i386 (20121017.2) SourcePackage: sudo UpgradeStatus: Upgraded to trusty on 2014-04-19 (158 days ago) VisudoCheck:  /etc/sudoers: parsed OK  /etc/sudoers.d/Preserve_input_method_required_environmental_variables: parsed OK  /etc/sudoers.d/README: parsed OK modified.conffile..etc.sudoers.d.README: [modified] mtime.conffile..etc.sudoers.d.README: 2014-09-24T22:26:35.734703
2016-02-18 16:45:14 V字龍(Vdragon) tags apport-bug i386 trusty apport-bug i386 trusty wily xenial
2016-02-21 17:22:53 Alberto Salvia Novella sudo (Ubuntu): importance Undecided High
2016-02-21 17:23:05 Alberto Salvia Novella bug task added hundredpapercuts
2016-02-21 17:23:10 Alberto Salvia Novella hundredpapercuts: status New Confirmed
2016-02-21 17:23:11 Alberto Salvia Novella hundredpapercuts: importance Undecided High
2016-02-21 17:24:26 Alberto Salvia Novella sudo (Ubuntu): importance High Critical
2016-02-21 17:24:28 Alberto Salvia Novella hundredpapercuts: importance High Critical
2016-03-07 14:09:30 Alberto Salvia Novella nominated for series Ubuntu Xenial
2016-03-07 14:09:30 Alberto Salvia Novella nominated for series Ubuntu Wily
2016-03-07 14:09:30 Alberto Salvia Novella nominated for series Ubuntu Trusty
2016-03-07 14:10:05 Alberto Salvia Novella sudo (Ubuntu): status Confirmed Triaged
2016-03-07 14:10:08 Alberto Salvia Novella hundredpapercuts: status Confirmed Triaged
2016-05-11 19:30:26 Brian Murray sudo (Ubuntu): importance Critical Medium
2016-06-01 09:47:48 Rolf Leggewie bug added subscriber Rolf Leggewie
2019-02-11 14:40:08 Simon May bug added subscriber Simon May
2019-05-14 15:44:02 Dan Streetman marked as duplicate 1556302