unset the KRB_CONF envariable if using kerberos so we don't get

spoofed into using a bogus server

diff --git a/sudo.c b/sudo.c
index 328ece17c31a9e5ebd150041c5d1ad870ad089ef..04ee06a60ad158edab5ee07242fadd26ec7d05e8 100644 (file)
--- a/sudo.c
+++ b/sudo.c
@@ -158,6 +158,9 @@ struct env_table badenv_table[] = {
 #if defined (__osf__) && defined(__alpha)
     { "_RLD_", 5 },
 #endif /* __alpha && __alpha */
+#ifdef HAVE_KERB4
+    { "KRB_CONF", 8 },
+#endif
     { "IFS=", 4 },
     { (char *) NULL, 0 }
 };