Bug 1309976 - closefrom_override sudo option not working
Summary: closefrom_override sudo option not working
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: sudo
Version: 6.6
Hardware: All
OS: Linux
medium
medium
Target Milestone: rc
: ---
Assignee: Daniel Kopeček
QA Contact: Dalibor Pospíšil
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2016-02-19 06:41 UTC by Karel Srot
Modified: 2016-05-10 21:44 UTC (History)
4 users (show)

Fixed In Version: sudo-1.8.6p3-23.el6
Doc Type: Bug Fix
Doc Text:
Clone Of: 1297062
Environment:
Last Closed: 2016-05-10 21:44:32 UTC
Target Upstream Version:


Attachments (Terms of Use)
proposed patch (1.35 KB, patch)
2016-02-25 13:16 UTC, Daniel Kopeček
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2016:0853 0 normal SHIPPED_LIVE sudo bug fix and enhancement update 2016-05-10 22:43:44 UTC

Description Karel Srot 2016-02-19 06:41:55 UTC
This is actually present also on RHEL-6, confirmed with sudo-1.8.6p3-20.el6_7.

+++ This bug was initially created as a clone of Bug #1297062 +++

Description of problem:
We have following defined in /etc/sudoers file 

Cmnd_Alias CMDS0 = /bb/sys/package/c/console/current/bb/bin/console
Defaults!CMDS0 closefrom_override

But it seems closefrom_override is not being respected in rhel7.2 (3.10.0-327.3.1.el7.x86_64). The same sudoers file work fine in rhel6.x.

Following error comes when user tries to run the command

sudo: you are not permitted to use the -C option
sudo: you are not permitted to use the -C option

Version of sudo

pny-comdb2lnx4 /root # rpm -qa|grep sudo
sudo-1.8.6p7-16.el7.x86_64

Version-Release number of selected component (if applicable):
sudo-1.8.6p7-16.el7.x86_64

How reproducible:
Works on RHEL 6, but not on RHEL 7.2


Steps to Reproduce:
1.
2.
3.

Actual results:
sudo: you are not permitted to use the -C option
sudo: you are not permitted to use the -C option

Comment 3 Daniel Kopeček 2016-02-25 13:16:23 UTC
Created attachment 1130534 [details]
proposed patch

Comment 8 errata-xmlrpc 2016-05-10 21:44:32 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2016-0853.html


Note You need to log in before you can comment on or make changes to this bug.