isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions 1 Packages Projects Releases Wiki Activity

Initial cut at a hooks implementation. The plugin can register

Browse Source 
hooks for getenv, putenv, setenv and unsetenv.  This makes it
possible for the plugin to trap changes to the environment made by
authentication methods such as PAM or BSD auth so that such changes
are reflected in the environment passed back to sudo for execve().
This commit is contained in:
Todd C. Miller
2012-03-07 16:35:42 -05:00
parent 1504256134
commit 37770ecf1e
24 changed files with 1086 additions and 282 deletions
Download Patch File Download Diff File Expand all files Collapse all files

16
src/sudo.c
View File

@@ -844,6 +844,13 @@ exec_setup(struct command_details *details, const char *ptyname, int ptyfd)
aix_restoreauthdb();
#endif
/*
* Swap in the plugin-supplied environment in case session init
* modifies the environment. Also needed for LOGIN_SETENV.
* This is kind of a hack.
*/
environ = details->envp;
/*
* Call policy plugin's session init before other setup occurs.
* The session init code is expected to print an error as needed.
@@ -886,8 +893,6 @@ exec_setup(struct command_details *details, const char *ptyname, int ptyfd)
flags = LOGIN_SETALL;
CLR(flags, LOGIN_SETGROUP|LOGIN_SETLOGIN|LOGIN_SETUSER);
CLR(details->flags, CD_SET_UMASK); /* LOGIN_UMASK instead */
/* Swap in the plugin-supplied environment for LOGIN_SETENV */
environ = details->envp;
} else {
flags = LOGIN_SETRESOURCES|LOGIN_SETPRIORITY;
}
@@ -898,14 +903,13 @@ exec_setup(struct command_details *details, const char *ptyname, int ptyfd)
} else
warning(_("unable to set user context"));
}
if (ISSET(sudo_mode, MODE_LOGIN_SHELL)) {
/* Stash the updated environment pointer in command details */
details->envp = environ;
}
}
#endif /* HAVE_LOGIN_CAP_H */
}
/* Update the environment pointer in command details */
details->envp = environ;
/*
* Set groups, including supplementary group vector.
*/