Remove developer mode from sudo.conf, it is no longer used.

This commit is contained in:
Todd C. Miller
2022-12-26 07:43:55 -07:00
parent fa1b86fca6
commit 50958a05da
23 changed files with 10 additions and 200 deletions

View File

@@ -1533,30 +1533,13 @@ file,
.Nm sudo
will not load the Python interpreter or the Python libraries.
.Pp
By default, a Python plugin can only import Python modules which are
owned by
.Sy root
and are only writable by the owner.
The reason for this is to prevent a file getting imported accidentally
which is modifiable by a non-root user.
As
.Nm sudo
plugins run as
runs plugins as
.Sy root ,
accidentally importing such file would make it possible for any user
(having write access) to execute any code with administrative rights.
.Pp
However, during development of a plugin this might not be very convenient.
The
.Xr sudo.conf @mansectform@
.Em developer_mode
option can be used to disable it.
For example:
.Dl Set developer_mode true
.Pp
This creates a security risk and is not recommended for production systems,
it is intended to be used in a development environment (VM, container, etc).
Before enabling developer mode, be sure that you understand the implications.
care must be taken when writing Python plugins to avoid creating
security vulnerabilities, just as one would when writing plugins
in C.
.Sh SUPPORT
Limited free support is available via the sudo-users mailing list,
see https://www.sudo.ws/mailman/listinfo/sudo-users to subscribe or