Bug 1014 – sudo manpage incorrectly claims PATH is passed unchanged

Bug 1014 - sudo manpage incorrectly claims PATH is passed unchanged


Summary:	sudo manpage incorrectly claims PATH is passed unchanged

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Documentation
Version:	1.9.8
Hardware:	PC Linux

Importance:	low normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2021-12-11 01:10 MST by Marc Haber
Modified:	2022-01-27 19:48 MST (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Marc Haber 2021-12-11 01:10:44 MST

Hi,

this is Debian Bug #659101, https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=659101, filed by Arnout Engelen

------
The sudo manpage, in the SECURITY NOTES section, mentions that:

  the actual PATH environment variable is not modified and is passed unchanged
  to the program that sudo executes

Whether this is true, however, depends on the configuration (i.e. 'secure 
path'). The docs should mention that.

See also http://stackoverflow.com/questions/257616/sudo-changes-path-why
------

Greetings
Marc

Comment 1 Todd C. Miller 2021-12-11 09:08:42 MST

I've updated the SECURITY NOTES section in commit https://www.sudo.ws/repos/sudo/rev/4f7035d6b921

Comment 2 Todd C. Miller 2022-01-27 19:48:50 MST

The changes are present in the 1.9.9 release.