CVSROOT: /cvs Module name: src Changes by: t...@cvs.openbsd.org 2019/06/16 12:16:34
Modified files:
usr.bin/doas : doas.c doas.conf.5 doas.h env.c
Log message:
redo the environment inheritance to not inherit. it was intended to make
life easier, but it can be surprising or even unsafe. instead, reset just
about everything to the target user's values.
ok deraadt martijn
Thanks to Sander Bos in particular for pointing out some nasty edge cases.
