For sudo, only allow "sudo" or "sudoedit" as the program name.
The program name is also used when matching Debug lines in sudo.conf. We don't want the user to be able to influence sudo.conf Debug matching. The string "sudoedit" is treated the same as "sudo" in sudo.conf. Problem reported by Matthias Gerstner of SUSE.
This commit is contained in:
@@ -244,6 +244,7 @@ sudo_dso_public ssize_t sudo_parseln_v2(char **buf, size_t *bufsize, unsigned in
|
||||
|
||||
/* progname.c */
|
||||
sudo_dso_public void initprogname(const char *);
|
||||
sudo_dso_public void initprogname2(const char *, const char * const *);
|
||||
|
||||
/* roundup.c */
|
||||
sudo_dso_public unsigned int sudo_pow2_roundup_v1(unsigned int len);
|
||||
|
Reference in New Issue
Block a user