mirror of
https://github.com/sudo-project/sudo.git
synced 2025-09-02 23:35:36 +00:00
unset the KRB_CONF envariable if using kerberos so we don't get
spoofed into using a bogus server
This commit is contained in:
3
sudo.c
3
sudo.c
@@ -158,6 +158,9 @@ struct env_table badenv_table[] = {
|
|||||||
#if defined (__osf__) && defined(__alpha)
|
#if defined (__osf__) && defined(__alpha)
|
||||||
{ "_RLD_", 5 },
|
{ "_RLD_", 5 },
|
||||||
#endif /* __alpha && __alpha */
|
#endif /* __alpha && __alpha */
|
||||||
|
#ifdef HAVE_KERB4
|
||||||
|
{ "KRB_CONF", 8 },
|
||||||
|
#endif
|
||||||
{ "IFS=", 4 },
|
{ "IFS=", 4 },
|
||||||
{ (char *) NULL, 0 }
|
{ (char *) NULL, 0 }
|
||||||
};
|
};
|
||||||
|
Reference in New Issue
Block a user