remove $ENV and $BASH_ENV (dangerous in ksh, posix sh, and bash)

diff --git a/sudo.c b/sudo.c
index 9b19507e1c34829fd1d55e1279067f4551bcd6b8..efc72fcacb0bf215a56039bde518c7ff1088bbfa 100644 (file)
--- a/sudo.c
+++ b/sudo.c
@@ -169,6 +169,8 @@ struct env_table badenv_table[] = {
 #ifdef HAVE_KERB4
     { "KRB_CONF", 8 },
 #endif
+    { "ENV=", 4 },
+    { "BASH_ENV=", 9 },
     { (char *) NULL, 0 }
 };