Bug#945366: sudoers permits arguments beyond what is normally expected

2021-02-25 Thread Ed Neville
On 2021-02-25 17:43+0100, Marc Haber wrote: > ... > I am removing the patch tag since Debian is not going to take this > patch if upstream doesn't. The functionality will be included in > Debian when upstream makes a release with the functionality included. > > The patch has been forwarded to up

Bug#945366: sudoers permits arguments beyond what is normally expected

2021-02-25 Thread Marc Haber
tags #945366 - patch thanks On Sat, Nov 23, 2019 at 06:01:51PM +, Edward Neville wrote: > Entries in sudoers files that include * do not behave like shell globs. > When mistakenly used in the argument list it can expand to protected > content, such as /etc/shadow. Most users do not expect this

Bug#945366: sudoers permits arguments beyond what is normally expected

2019-11-23 Thread Edward Neville
Package: sudo Version: 1.8.27-1+deb10u1 Severity: important Tags: patch upstream Dear Maintainer, Entries in sudoers files that include * do not behave like shell globs. When mistakenly used in the argument list it can expand to protected content, such as /etc/shadow. Most users do not expect thi