lp:~vorlon/ubuntu/quantal/sudo/lp.982684

Branch merges

Propose for merging

No branches dependent on this one.

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #982684: sudo, pkexec don't apply global environment settings from /etc/environment

Medium

Fix Released

Link a bug report

Related blueprints

57. By Steve Langasek on 2012-05-15

debian/patches/pam_env_export.patch: preliminary patch to try to support
exporting the pam_getenvlist() environment to the session. Doesn't work
yet, presumably because sudo's own env cleaning support is clobbering it
afterwards.

56. By Steve Langasek on 2012-05-07

debian/sudo.pam: call pam_env to pull /etc/environment and
/etc/default/locale settings by default; there's no reason sudo should
be excluded from these. But we take care not to read from
~/.pam_environment, as that could be a security problem. LP: #982684.

55. By TJ (Ubuntu Contributions) on 2012-04-30

Fix Abort in some PAM modules when timestamp is valid. (LP: #927828)

54. By Marc Deslauriers on 2012-01-31

* SECURITY UPDATE: permissions bypass via format string
  - debian/patches/CVE-2012-0809.patch: fix format string vulnerability
    in src/sudo.c.
  - CVE-2012-0809

53. By Marc Deslauriers on 2011-11-24

* debian/sudo.preinst:
  - updated to avoid conffile prompt by migrating to the new sudoers file
    changes in Precise. (LP: #894410)

52. By Marc Deslauriers on 2011-11-20

* Merge from debian/testing, remaining changes:
  - debian/patches/keep_home_by_default.patch:
    + Set HOME in initial_keepenv_table. (rebased for 1.8.3p1)
  - debian/patches/enable_badpass.patch: turn on "mail_badpass" by default:
    + attempting sudo without knowing a login password is as bad as not
      being listed in the sudoers file, especially if getting the password
      wrong means doing the access-check-email-notification never happens
      (rebased for 1.8.3p1)
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets (Ubuntu specific)
    + install man/man8/sudo_root.8 (Ubuntu specific)
    + install apport hooks
    + The ubuntu-sudo-as-admin-successful.patch was taken upstream by
      Debian however it requires a --enable-admin-flag configure flag to
      actually enable it.
  - debian/sudoers:
    + grant admin group sudo access
  - debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
  - debian/sudo.preinst:
    + avoid conffile prompt by checking for known default /etc/sudoers
      and if found installing the correct default /etc/sudoers file

51. By Kees Cook on 2011-09-11

* debian/patches/enable_badpass.patch: turn on "mail_badpass" by default:
  - attempting sudo without knowing a login password is as bad as not
    being listed in the sudoers file, especially if getting the password
    wrong means doing the access-check-email-notification never happens
    (Closes: 641218).

50. By Michael Vogt on 2011-05-23

* Merge from debian/unstable, remaining changes:
  - debian/patches/keep_home_by_default.patch:
    + Set HOME in initial_keepenv_table.
  - debian/rules:
    + compile with --without-lecture --with-tty-tickets (Ubuntu specific)
    + install man/man8/sudo_root.8 (Ubuntu specific)
    + install apport hooks
  - debian/sudoers:
    + grant admin group sudo access
  - debian/sudo-ldap.dirs, debian/sudo.dirs:
    + add usr/share/apport/package-hooks
* drop debian/patches/CVE-2011-0010.patch, applied upstream now

49. By Scott Moser on 2011-04-21

* debian/sudo.preinst:
  - if well-known ec2 vmbuilder file is found, write a file in
    sudoers.d for the 'ubuntu' user (LP: #768625)

48. By Michael Vogt on 2011-04-15

* debian/sudo.preinst:
  - do not consider the ec2 vmbuilder default sudoers file
    verbatim as its actually customized (LP: #761689)