Bug 583911 - Add comment about the visiblepw option into sudoers
Summary: Add comment about the visiblepw option into sudoers
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Enterprise Linux 5
Classification: Red Hat
Component: sudo
Version: 5.5
Hardware: All
OS: Linux
low
medium
Target Milestone: rc
: ---
Assignee: Daniel Kopeček
QA Contact: BaseOS QE Security Team
URL:
Whiteboard:
Depends On:
Blocks: 688640
TreeView+ depends on / blocked
 
Reported: 2010-04-20 07:58 UTC by Daniel Kopeček
Modified: 2011-03-17 15:59 UTC (History)
3 users (show)

Fixed In Version: sudo-1.7.2p1-10.el5
Doc Type: Bug Fix
Doc Text:
A comment regarding the "visiblepw" option of the "Defaults" directive has been added to the default /etc/sudoers file to clarify its usage.
Clone Of:
: 688640 (view as bug list)
Environment:
Last Closed: 2011-01-13 23:08:22 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)
Patch for sudoers (1.63 KB, patch)
2010-04-20 07:58 UTC, Daniel Kopeček
no flags Details | Diff
Patch for sudoers (530 bytes, patch)
2010-05-13 11:26 UTC, Daniel Kopeček
no flags Details | Diff


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHBA-2011:0079 0 normal SHIPPED_LIVE sudo bug fix update 2011-01-12 17:21:55 UTC

Description Daniel Kopeček 2010-04-20 07:58:50 UTC
Created attachment 407750 [details]
Patch for sudoers

Description of problem:
The 1.7.0 release of sudo introduced a new option, visiblepw, which is now needed to be enabled in order to allow remote command execution using sudo, e.g.:

 ssh foo@bar sudo baz

Although this can be found in upstream documentation or worked around using ssh's -t option, the sudoers that is shipped with sudo in RHEL 5 mentions only the requiretty option. The visiblepw option should be added to sudoers either commented out (default is off) or not commented out but set to off using negation, i.e.:

Defaults !visiblepw

I'm proposing the later option as that will ensure that this flag is off even when the default value changes.

Version-Release number of selected component (if applicable):
1.7.2p1-6

Patch for sudoers attached.

Comment 3 Daniel Kopeček 2010-05-13 11:26:36 UTC
Created attachment 413721 [details]
Patch for sudoers

Comment 7 Jaromir Hradilek 2010-11-29 12:57:43 UTC
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
A comment regarding the "visiblepw" option of the "Defaults" directive has been added to the default /etc/sudoers file to clarify its usage.

Comment 9 errata-xmlrpc 2011-01-13 23:08:22 UTC
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on therefore solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.

http://rhn.redhat.com/errata/RHBA-2011-0079.html


Note You need to log in before you can comment on or make changes to this bug.