Bug 424 - carat truncation problem with sudo 1.7.2p5
carat truncation problem with sudo 1.7.2p5
Status: RESOLVED INVALID
Product: Sudo
Classification: Unclassified
Component: Sudo
1.7.2
IBM AIX
: low normal
Assigned To: Todd C. Miller
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2010-07-30 16:15 MDT by Don
Modified: 2011-01-28 16:17 MST (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Don 2010-07-30 16:15:17 MDT
I have upgraded from 1.6.7p5 to 1.7.2p5 and now have a problem with a script that executes a command with several parameters.
Specifically this command is truncated at the carat:

winstsp -f -D LPinputVAR=$2 @EncoreWSUpdate-WkAllRb_NO^19 $1

If I put double-quotes around "@....19" it executes properly.  The problem is that I have hundreds of these files that are generated by Tivoli Software Distribution.

The 1.6.7p5 version worked.  
Thanks
Comment 1 Todd C. Miller 2010-07-30 16:59:21 MDT
Is the @....19 part listed in the sudoers file or only in your script?  I'm guessing that it is only in the script since "^" is not a special character in the sudoers file.

The way the environment is handled has changed between sudo 1.6.7 and 1.7.2 so that might be causing you problems.  Beginning with sudo 1.6.9 sudo runs commands with a minimal environment, plus the environment variables that were explicitly allowed.  You can go back to the old behavior with a line like the following in sudoers:

Defaults !env_reset

You might try that and see if it changes the behavior. If so, you can either leave things this way (but note that there are security implications) or try to determine which environment variable it is that you need an explicitly allow it with an env_keep line in sudoers.
Comment 2 Todd C. Miller 2011-01-28 16:17:36 MST
No additional feedback from submitter.