Public bug reported: sshuttle --sudoers-no-modify --sudoers-user %sudo
outputs ``` # WARNING: If you intend to restrict a user to only running the # sshuttle command as root, THIS CONFIGURATION IS INSECURE. # When a user can run sshuttle as root (with or without a password), # they can also run other commands as root because sshuttle itself # can run a command specified by the user with the --ssh-cmd option. # INSTRUCTIONS: Add this text to your sudo configuration to run # sshuttle without needing to enter a sudo password. To use this # configuration, run 'visudo /etc/sudoers.d/sshuttle_auto' as root and # paste this text into the editor that it opens. If you want to give # multiple users these privileges, you may wish to use different # filenames for each one (i.e., /etc/sudoers.d/sshuttle_auto_john). # This configuration was initially generated by the # 'sshuttle --sudoers-no-modify' command. Cmnd_Alias SSHUTTLE9FB = /usr/bin/env PYTHONPATH=/usr/lib/python3/dist- packages/sshuttle /usr/bin/sshuttle * %sudo ALL=NOPASSWD: SSHUTTLE9FB ``` which, when pasted to /etc/sudoers.d/sshuttle_auto, results in me being prompted for the sudo password. If I change the PYTHONPATH in the command alias as follows by removing the trailing /sshuttle: ``` Cmnd_Alias SSHUTTLE9FB = /usr/bin/env PYTHONPATH=/usr/lib/python3/dist-packages /usr/bin/sshuttle * ``` I can use SSHuttle without having to enter a sudo password. It's reasonable to expect that a tool's own config generator will produce working output. Ubuntu 24.04's version of SSHuttle produced working output, this defect is new. About my system: $ apt show sshuttle Package: sshuttle Version: 1.3.2-1 Priority: extra Section: universe/net Origin: Ubuntu Maintainer: Ubuntu Developers <[email protected]> Original-Maintainer: Brian May <[email protected]> Bugs: https://bugs.launchpad.net/ubuntu/+filebug Installed-Size: 878 kB Depends: iptables | nftables, openssh-client | lsh-client | dropbear | ssh-client, python3:any, libjs-sphinxdoc (>= 8.2) Recommends: sudo Suggests: autossh Homepage: https://github.com/sshuttle/sshuttle Download-Size: 123 kB APT-Manual-Installed: yes APT-Sources: https://www.mirrorservice.org/sites/archive.ubuntu.com/ubuntu resolute/universe amd64 Packages Description: Transparent proxy server for VPN over SSH Sshuttle makes it possible to access remote networks using SSH. It creates a transparent proxy server, using iptables, that will forward all the traffic through an SSH tunnel to a remote copy of sshuttle. . It does not require installation on the remote server, which just needs to have Python installed. $ hostnamectl Static hostname: mypc Icon name: computer-laptop Chassis: laptop 💻 Machine ID: 04e74980dff64982964e651ac3f7b1db Boot ID: a1a20fd0914440a288d663ae286a2d3f Operating System: Ubuntu 26.04.1 LTS Kernel: Linux 7.0.0-30-generic Architecture: x86-64 Hardware Vendor: Dell Inc. Hardware Model: Latitude 5410 Hardware SKU: 09A0 Hardware Version: A00 Firmware Version: 1.42.0 Firmware Date: Tue 2026-06-30 Firmware Age: 3month 2w 6d ** Affects: sshuttle (Ubuntu) Importance: Undecided Status: New ** Tags: regression-proposed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/2171428 Title: SSHuttle generates incorrect sudoers.d rule on Ubuntu 26.04 To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/sshuttle/+bug/2171428/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
