$ nohup sudo touch foo
nohup: ignoring input and appending output to `nohup.out'
[sudo] password for martin: 

sudo uses direct tty input instead of reading from stdin. So if the user
doesn't already have a TTY ticket, this works as expected.

If I already have a TTY ticket, this still works, because nohup creates
a new PTY:

$ sudo true
[sudo] password for martin: 
$ sudo true
0 [EMAIL PROTECTED]:~
$ nohup sudo touch foo
nohup: ignoring input and appending output to `nohup.out'
[sudo] password for martin: 

And once the next PTY (the "nohup" terminal) has a ticket, it works
without password as well:

$ rm foo
rm: remove write-protected regular empty file `foo'? y
$ nohup sudo touch foo
nohup: ignoring input and appending output to `nohup.out'

This seems to work as expected. So what is actually unexpected here?
(Sorry, I might be too narrow-minded to see the quirk here).

-- 
Local privilege escalation when executed with nohup
https://bugs.launchpad.net/bugs/285805
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to