From d0eb3ae6a0b16de89e8c21ebf43916ea99b89b67 Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Mon, 7 Nov 2011 15:52:29 -0500 Subject: [PATCH] Add missing word in HOME security note. --- doc/UPGRADE | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/UPGRADE b/doc/UPGRADE index 9ecab1227..8c83aafe3 100644 --- a/doc/UPGRADE +++ b/doc/UPGRADE @@ -140,7 +140,7 @@ o Upgrading from a version prior to 1.7.4: to preserve the old value of MAIL. NOTE: preserving HOME has security implications since many programs - use when searching for configuration files. Adding HOME to env_keep + use it when searching for configuration files. Adding HOME to env_keep may enable a user to run unrestricted commands via sudo. The default syslog facility has changed from "local2" to "authpriv"