[arch-devops] restricting sudoers PATH
Jelle van der Waa
jelle at vdwaa.nl
Tue Sep 3 14:35:36 UTC 2019
Hi all,
Thanks to anthraxx, we now restrict the PATH which `sudo
extra-x86_64-build` and other sudoers specific infra uses using
restrict_path. To circumvent users overridding their own PATH with tools
which are used in our build scripts which basically allows privilege
escalation. [1]
This shouldn't cause any issues, if they do contact me or anthraxx.
[1] https://git.archlinux.org/infrastructure.git/commit/?id=1eb1dd41f8c734380a38609f2ae3cb2d37ea1dce
Greetings,
Jelle
More information about the arch-devops
mailing list