Bug 239 – "Defaults requiretty" requires the process have a tty even if it does not prompt for a password

Bug 239 - "Defaults requiretty" requires the process have a tty even if it does not prompt for a password


Summary:	"Defaults requiretty" requires the process have a tty even if it does not pro...

Status:	RESOLVED WONTFIX

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.6.8
Hardware:	PC Linux

Importance:	normal normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2007-03-28 12:33 MDT by Dale R. Worley
Modified:	2007-04-24 14:50 MDT (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Dale R. Worley 2007-03-28 12:33:25 MDT

When "Defaults requiretty" is present in /etc/sudoers, sudo refuses to run if the process does not have a tty even if sudo will not prompt the user for a password.  This can be problematic in various circumstances, so the user removes "requiretty" from /etc/sudoers.  But that negates the additional security that "requiretty" provides.

Comment 1 Todd C. Miller 2007-04-24 14:50:31 MDT

The option behaves as intended.  Part of the reason for requiretty is to prevent users without a real login session from running sudo.  For example, cgi scripts.