Bug 1318374 - sudo parses sudoers config with user's locale
Summary: sudo parses sudoers config with user's locale
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 6
Classification: Red Hat
Component: sudo
Version: 6.8
Hardware: Unspecified
OS: Unspecified
medium
high
Target Milestone: rc
: ---
Assignee: Tomas Sykora
QA Contact: Patrik Kis
URL:
Whiteboard:
Depends On:
Blocks: 1348504 1348533
TreeView+ depends on / blocked
 
Reported: 2016-03-16 16:50 UTC by Dalibor Pospíšil
Modified: 2017-03-21 11:01 UTC (History)
4 users (show)

Fixed In Version: sudo-1.8.6p3-25.el6
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
: 1348504 1348533 (view as bug list)
Environment:
Last Closed: 2017-03-21 11:01:56 UTC
Target Upstream Version:


Attachments (Terms of Use)
Sudoers-locale patch (1.45 KB, patch)
2016-07-19 08:12 UTC, Tomas Sykora
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2017:0704 0 normal SHIPPED_LIVE sudo bug fix update 2017-03-21 12:40:12 UTC

Description Dalibor Pospíšil 2016-03-16 16:50:34 UTC
Description of problem:
If user uses locale like cs_CZ.UTF-8 and sudo is configred to use passwd_timeout to seconds, like 0.1 = 6s. sudo command uses user's locale to parse this number and prints error message.

Version-Release number of selected component (if applicable):
sudo-1.8.6p3-19.el6

How reproducible:
100%

Steps to Reproduce:
1. # echo "Defaults passwd_timeout = 0.1" >> /etc/sudoers
2. $ LANG=cs_CZ.UTF-8 sudo bash

Actual results:
$ LANG=cs_CZ.UTF-8 sudo bash
sudo: value `0.1' is invalid for option `passwd_timeout'
[sudo] password for test:

Expected results:
$ LANG=cs_CZ.UTF-8 sudo bash
[sudo] password for test:

Comment 4 Tomas Sykora 2016-07-19 08:12:49 UTC
Created attachment 1181472 [details]
Sudoers-locale patch

The patch for rhel is diffrent from the upstream version.

Comment 10 errata-xmlrpc 2017-03-21 11:01:56 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://rhn.redhat.com/errata/RHBA-2017-0704.html


Note You need to log in before you can comment on or make changes to this bug.