Bug 1309976

Summary: closefrom_override sudo option not working
Product: Red Hat Enterprise Linux 6 Reporter: Karel Srot <ksrot>
Component: sudoAssignee: Daniel Kopeček <dkopecek>
Status: CLOSED ERRATA QA Contact: Dalibor Pospíšil <dapospis>
Severity: medium Docs Contact:
Priority: medium    
Version: 6.6CC: dapospis, dkopecek, pkis, pvrabec
Target Milestone: rcKeywords: Patch
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: sudo-1.8.6p3-23.el6 Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1297062 Environment:
Last Closed: 2016-05-10 21:44:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Attachments:
Description Flags
proposed patch none

Description Karel Srot 2016-02-19 06:41:55 UTC 
This is actually present also on RHEL-6, confirmed with sudo-1.8.6p3-20.el6_7.

+++ This bug was initially created as a clone of Bug #1297062 +++

Description of problem:
We have following defined in /etc/sudoers file 

Cmnd_Alias CMDS0 = /bb/sys/package/c/console/current/bb/bin/console
Defaults!CMDS0 closefrom_override

But it seems closefrom_override is not being respected in rhel7.2 (3.10.0-327.3.1.el7.x86_64). The same sudoers file work fine in rhel6.x.

Following error comes when user tries to run the command

sudo: you are not permitted to use the -C option
sudo: you are not permitted to use the -C option

Version of sudo

pny-comdb2lnx4 /root # rpm -qa|grep sudo
sudo-1.8.6p7-16.el7.x86_64

Version-Release number of selected component (if applicable):
sudo-1.8.6p7-16.el7.x86_64

How reproducible:
Works on RHEL 6, but not on RHEL 7.2


Steps to Reproduce:
1.
2.
3.

Actual results:
sudo: you are not permitted to use the -C option
sudo: you are not permitted to use the -C option
Comment 3 Daniel Kopeček 2016-02-25 13:16:23 UTC 
Created attachment 1130534 [details]
proposed patch
Comment 8 errata-xmlrpc 2016-05-10 21:44:32 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-0853.html