On Mon, Mar 06, 2006 at 04:21:05AM -0600, Hugo Vanwoerkom wrote: > 1.6.8p7-1.3 does not set some ENV variables because it was > deemed this was a security risk. As a result it functions > differently than previous versions and you have to fiddle > with sudoers to get it to behave as it did before.
More precicely, 1.6.8p7-1.3 moves from a blacklist model (where known-dangerous environment variables were stripped) to a whitelist model (where you have to explicitly name the environment variables to retain in the sudoers file). -- Jon Dowland http://alcopop.org/ -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
