Sudo and environment variables - Revision history

Hutch at 16:56, 5 March 2008

2008-03-05T16:56:52Z

←Older revision		Revision as of 16:56, 5 March 2008
Line 25:		Line 25:
	may be preserved with the env_keep option.		may be preserved with the env_keep option.

-	If you want to execute a command in '''sudoers''' with environment variables preserved, add the SETENV tag to the command, and execute the command with '''sudo -E'''.	+	If you want to execute a command in '''sudoers''' with environment variables preserved (while '''env_reset''' is set), add the SETENV tag to the command, and execute the command with '''sudo -E'''.
	From ''sudo''(1m):		From ''sudo''(1m):
	-E The -E (preserve environment) option will override the		-E The -E (preserve environment) option will override the

Hutch at 16:55, 5 March 2008

2008-03-05T16:55:50Z

Hutch at 16:55, 5 March 2008

2008-03-05T16:55:13Z

←Older revision		Revision as of 16:55, 5 March 2008
Line 1:		Line 1:
	* If '''env_reset''' is set in '''sudoers''', sudo will reset most environment variables.		* If '''env_reset''' is set in '''sudoers''', sudo will reset most environment variables.
-	** If you want to preserve one or more environment variables for all commands in '''sudoers''', add it to '''env_keep'''.	+	If you want to preserve one or more environment variables for all commands in '''sudoers''', add it to '''env_keep'''.
	From ''sudoers''(4):		From ''sudoers''(4):
	env_keep Environment variables to be preserved in the		env_keep Environment variables to be preserved in the
Line 25:		Line 25:
	may be preserved with the env_keep option.		may be preserved with the env_keep option.

-	** If you want to execute a command in '''sudoers''' with environment variables preserved, add the SETENV tag to the command, and execute the command with '''sudo -E'''.	+	If you want to execute a command in '''sudoers''' with environment variables preserved, add the SETENV tag to the command, and execute the command with '''sudo -E'''.
	From ''sudo''(1m):		From ''sudo''(1m):
	-E The -E (preserve environment) option will override the		-E The -E (preserve environment) option will override the

Hutch at 16:54, 5 March 2008

2008-03-05T16:54:48Z

←Older revision		Revision as of 16:54, 5 March 2008
Line 14:		Line 14:
	list of variables to keep is displayed when		list of variables to keep is displayed when
	sudo is run by root with the -V option.		sudo is run by root with the -V option.
-		+
	env_reset If set, sudo will reset the environment to only contain the		env_reset If set, sudo will reset the environment to only contain the
	following variables: HOME, LOGNAME, PATH, SHELL, TERM, and		following variables: HOME, LOGNAME, PATH, SHELL, TERM, and

Hutch at 16:54, 5 March 2008

2008-03-05T16:54:37Z

←Older revision		Revision as of 16:54, 5 March 2008
Line 1:		Line 1:
-	* If '''env_reset''' is set in '''sudoers''', sudo will reset most environment variables. To preserve an environment ~~variable during a sudo execution~~, add it to '''env_keep''' ~~in '~~''sudoers'''.	+	* If '''env_reset''' is set in '''sudoers''', sudo will reset most environment variables.
		+	** If you want to preserve one or more environment variables for all commands in '''sudoers''', add it to '''env_keep'''.
		+	From ''sudoers''(4):
		+	env_keep Environment variables to be preserved in the
		+	user's environment when the env_reset option
		+	is in effect. This allows fine-grained
		+	control over the environment sudo-spawned
		+	processes will receive. The argument may be
		+	a double-quoted, space-separated list or a
		+	single value without double-quotes. The
		+	list can be replaced, added to, deleted
		+	from, or disabled by using the =, +=, -=,
		+	and ! operators respectively. The default
		+	list of variables to keep is displayed when
		+	sudo is run by root with the -V option.

-	From ''sudoers''(5):
	env_reset If set, sudo will reset the environment to only contain the		env_reset If set, sudo will reset the environment to only contain the
	following variables: HOME, LOGNAME, PATH, SHELL, TERM, and		following variables: HOME, LOGNAME, PATH, SHELL, TERM, and
Line 11:		Line 24:
	used for the PATH environment variable. Other variables		used for the PATH environment variable. Other variables
	may be preserved with the env_keep option.		may be preserved with the env_keep option.
		+
		+	** If you want to execute a command in '''sudoers''' with environment variables preserved, add the SETENV tag to the command, and execute the command with '''sudo -E'''.
		+	From ''sudo''(1m):
		+	-E The -E (preserve environment) option will override the
		+	env_reset option in sudoers(4)). It is only available
		+	when either the matching command has the SETENV tag or
		+	the setenv option is set in sudoers(4).

	* Run '''sudo -V''' as root to list the environment variables sudo clears.		* Run '''sudo -V''' as root to list the environment variables sudo clears.

Hutch at 15:19, 13 February 2008

2008-02-13T15:19:04Z

←Older revision		Revision as of 15:19, 13 February 2008
Line 2:		Line 2:

	From ''sudoers''(5):		From ''sudoers''(5):
-	env_reset If set, sudo will reset the environment to only contain the	+	env_reset If set, sudo will reset the environment to only contain the
	following variables: HOME, LOGNAME, PATH, SHELL, TERM, and		following variables: HOME, LOGNAME, PATH, SHELL, TERM, and
	USER (in addition to the SUDO_* variables). Of these, only		USER (in addition to the SUDO_* variables). Of these, only

Hutch at 23:35, 11 January 2008

2008-01-11T23:35:43Z

←Older revision		Revision as of 23:35, 11 January 2008
Line 1:		Line 1:
-	Run '''sudo -V''' as root to list the environment variables sudo clears.	+	* If '''env_reset''' is set in '''sudoers''', sudo will reset most environment variables. To preserve an environment variable during a sudo execution, add it to '''env_keep''' in '''sudoers'''.
		+
		+	From ''sudoers''(5):
		+	env_reset If set, sudo will reset the environment to only contain the
		+	following variables: HOME, LOGNAME, PATH, SHELL, TERM, and
		+	USER (in addition to the SUDO_* variables). Of these, only
		+	TERM is copied unaltered from the old environment. The
		+	other variables are set to default values (possibly modi-
		+	fied by the value of the set_logname option). If sudo was
		+	compiled with the SECURE_PATH option, its value will be
		+	used for the PATH environment variable. Other variables
		+	may be preserved with the env_keep option.
		+
		+	* Run '''sudo -V''' as root to list the environment variables sudo clears.

	e.g.,		e.g.,
Line 27:		Line 40:
	CDPATH		CDPATH
	IFS		IFS
-
-	To preserve an environment variable during a sudo execution, add it to '''env_keep''' in '''sudoers'''.

Hutch: New page: Run '''sudo -V''' as root to list the environment variables sudo clears. e.g., # '''sudo -V''' Environment variables to remove: PERL5OPT PERL5LIB PERLLIB ...

2008-01-11T23:30:21Z

New page: Run '''sudo -V''' as root to list the environment variables sudo clears. e.g., # '''sudo -V''' Environment variables to remove: PERL5OPT PERL5LIB PERLLIB ...

New page

Run '''sudo -V''' as root to list the environment variables sudo clears.

e.g.,
# '''sudo -V'''
Environment variables to remove:
PERL5OPT
PERL5LIB
PERLLIB
JAVA_TOOL_OPTIONS
SHELLOPTS
PS4
BASH_ENV
ENV
TERMCAP
TERMPATH
TERMINFO_DIRS
TERMINFO
_RLD*
LD_*
PATH_LOCALE
NLSPATH
HOSTALIASES
RES_OPTIONS
LOCALDOMAIN
PS4
SHELLOPTS
CDPATH
IFS

To preserve an environment variable during a sudo execution, add it to '''env_keep''' in '''sudoers'''.