Re: Bdale Garbee 2010-04-21 <87bpdcpprd....@gag.com>
> > What does this mean for the lenny version of sudo?
> 
> It certainly seems that there's a bug in the version in question.

We have the same problem in a customer installation.

root    ALL=(ALL) ALL
hobbit      ALL=(ALL)  NOPASSWD: /usr/local/lib/bb-sudo/*
%adm    ALL=(ALL) ALL

The problem was sudo -u postfix
/usr/local/lib/bb-sudo/postfix-queue-list as user hobbit.

I tried to debug it, and could track it down to that calling the
script with a tty present worked, while it didn't when called from a
daemon (say cron).

The same setup works flawlessly on most other lenny boxes. (The
sudoers file is not 100% identical, but as this monitoring check runs
on dozens of boxes, I am positive that there is a bug in sudo.)

On other boxes, the symptons are different, but adding a specific rule
for that script fixes it.

Christoph
-- 
c...@df7cb.de | http://www.df7cb.de/



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to