Mark code that escapes/unescapes "sudo -s cmd args..." for removal.
A future version of the plugin API will defer any such escaping to the policy plugin so it can be configurable.
This commit is contained in:
@@ -1047,6 +1047,7 @@ set_cmnd(void)
|
||||
* When running a command via a shell, the sudo front-end
|
||||
* escapes potential meta chars. We unescape non-spaces
|
||||
* for sudoers matching and logging purposes.
|
||||
* TODO: move escaping to the policy plugin instead
|
||||
*/
|
||||
user_args = strvec_join(NewArgv + 1, ' ', strlcpy_unescape);
|
||||
} else {
|
||||
|
Reference in New Issue
Block a user