Bug 653 – When setting the group_plugin in sudoers to system_group.so, sudo produces seg fault

Bug 653 - When setting the group_plugin in sudoers to system_group.so, sudo produces seg fault


Summary:	When setting the group_plugin in sudoers to system_group.so, sudo produces se...

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.8.10
Hardware:	PC Linux

Importance:	low high
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2014-07-18 11:45 MDT by Kevin
Modified:	2014-09-24 09:32 MDT (History)
CC List:	0 users

See Also:

Attachments
sudo strace output (22.95 KB, text/plain) 2014-07-18 11:45 MDT, Kevin	Details
Fix for undefined symbol in system_group.so (1.35 KB, patch) 2014-07-18 13:15 MDT, Todd C. Miller	Details \| Diff
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Kevin 2014-07-18 11:45:12 MDT

Created attachment 413 [details]
sudo strace output

This has been tested on RedHat 7.0, 6.2 and CentOS 6.2.

compiling sudo with just ./configure, and no options
Update the sudoers file with

Defaults group_plugin=system_group.so

results in 

$ sudo -V
Sudo version 1.8.10p3
Segmentation fault

This line is produced in a dmesg output,

sudo[19078] general protection ip:7f0e48984088 sp:71d19e43204b79d0 error:0 in ld-2.12.so[7f0e4896d000+20000]

I have attached an strace run as the root user if that helps.

Thanx

Comment 1 Todd C. Miller 2014-07-18 13:15:59 MDT

Created attachment 414 [details]
Fix for undefined symbol in system_group.so

I don't get a crash but I do see an undefined symbol.  The attached patch exports sudo_dso_findsym() which fixes the problem for me on CentOS 7.

Comment 2 Kevin 2014-07-18 13:31:28 MDT

That fixed it for me as well.
Thanx for the speedy reply and fix.

Comment 3 Todd C. Miller 2014-09-24 09:32:25 MDT

Fixed in sudo 1.8.11.