opendoas

commit 8fcb0f4187e02ff1c2cd4fcf2b92cb79c6251a54
parent e634f2b4be7a088bede88873ca0b51e5995d47b0
Author: Ted Unangst <tedu@openbsd.org>
Date:   Mon, 20 Jul 2015 01:04:37 +0000

sf points out sudo doesn't allow SHELL in children

Diffstat:
M
doas.c
 | 
4
++--

1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/doas.c b/doas.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: doas.c,v 1.12 2015/07/20 00:57:53 tedu Exp $ */
+/* $OpenBSD: doas.c,v 1.13 2015/07/20 01:00:48 tedu Exp $ */
 /*
  * Copyright (c) 2015 Ted Unangst <tedu@openbsd.org>
  *
@@ -188,7 +188,7 @@ static char **
 copyenv(const char **oldenvp, struct rule *rule)
 {
 	const char *safeset[] = {
-		"DISPLAY", "HOME", "LOGNAME", "MAIL", "SHELL",
+		"DISPLAY", "HOME", "LOGNAME", "MAIL",
 		"PATH", "TERM", "USER", "USERNAME",
 		NULL
 	};