Sudosh version 1.3.4 is now available

Doug Hanks <[email protected]> Sun, 24 Oct 2004 22:33:36 -0700

Newsgroups	gmane.comp.tools.sudo.announce
Message-ID	<82a71f8a04102422331734d8c1__31319.7452495389$1098716376$gmane$org@mail.gmail.com>

Sudosh version 1.3.4 is now available.

http://freshmeat.net/projects/sudosh/
http://sourceforge.net/projects/sudosh/

(freshmeat is slow on file releases; sf is always current)

Major changes since Sudosh version 1.3.2:
 o Corrected major security hole in the SHELL environment variable. 
   I correctly set the (char *) shell that was cross-referenced with 
   /etc/shells, but during the prepchild I was still using the old 
   SHELL environment variable. 
 
   I went a further step and used the execle() syscall with an empty 
   (char *) so that shell doesn't inherit any environment variables 
   from the calling user.

-- 
- Doug Hanks = dhanks(at)gmail(dot)com
____________________________________________________________
sudo-announce mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
http://www.sudo.ws/mailman/listinfo/sudo-announce