[arch-devops] restricting sudoers PATH

Jelle van der Waa jelle at vdwaa.nl
Tue Sep 3 14:35:36 UTC 2019


Hi all,

Thanks to anthraxx, we now restrict the PATH which `sudo
extra-x86_64-build` and other sudoers specific infra uses using
restrict_path. To circumvent users overridding their own PATH with tools
which are used in our build scripts which basically allows privilege
escalation. [1]

This shouldn't cause any issues, if they do contact me or anthraxx.

[1] https://git.archlinux.org/infrastructure.git/commit/?id=1eb1dd41f8c734380a38609f2ae3cb2d37ea1dce

Greetings,

Jelle


More information about the arch-devops mailing list