Re: sudo -h localhost

On Tue, Jul 01, 2025 at 07:08:48AM -0600, Todd C. Miller wrote:
>I think this is entirely due to Debian setting the "fqdn" option
>in sudoers.  Sudo tries to avoid doing DNS lookups but if you set
>"fqdn" it will try to resolve the local host name.

We have --with-fqdn set in configure. I think it has always been that 
way. The string "fqdn" does not show up in the sudoers that Debian 
installs with the package.

Do I see correctly that sudo upstream recommends removing the 
--with-fqdn option from our configure call?

What I see is that removing the --with-fqdn message from configure will 
probably break existing configurations. Right?

Would it make sense to special-case localhost in the FQDN lookup, and/or 
to not be so loud when a lookup fails?

Greetings
Marc

-- 
-----------------------------------------------------------------------------
Marc Haber         | "I don't trust Computers. They | Mailadresse im Header
Leimen, Germany    |  lose things."    Winona Ryder | Fon: *49 6224 1600402
Nordisch by Nature |  How to make an American Quilt | Fax: *49 6224 1600421
____________________________________________________________
sudo-users mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-users