On Wed, May 16, 2012 at 12:59:35AM -0000, Marc Deslauriers wrote:
> Sudo already parses /etc/environment when used with the -i option. If
> our goal is to have it always parse /etc/environment, how about simply
> doing the following?
Because there may be other pam modules that also need to set environment
variables for proper operation. pam_krb5 or pam_afs, perhaps?
> I still need to think about the security ramifications in doing so though.
Sure, understood.
--
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://www.debian.org/
<email address hidden> <email address hidden>
On Wed, May 16, 2012 at 12:59:35AM -0000, Marc Deslauriers wrote:
> Sudo already parses /etc/environment when used with the -i option. If
> our goal is to have it always parse /etc/environment, how about simply
> doing the following?
Because there may be other pam modules that also need to set environment
variables for proper operation. pam_krb5 or pam_afs, perhaps?
> I still need to think about the security ramifications in doing so though.
Sure, understood.
-- www.debian. org/
Steve Langasek Give me a lever long enough and a Free OS
Debian Developer to set it on, and I can move the world.
Ubuntu Developer http://
<email address hidden> <email address hidden>