Apple uses a different variant of the BASH_FUNC prefix for bash

functions.

diff --git a/plugins/sudoers/env.c b/plugins/sudoers/env.c
index 718398b3892485106b86601c41813db512557c46..17b02da3017a5c4addf953d1d406d4761fb56a22 100644 (file)
--- a/plugins/sudoers/env.c
+++ b/plugins/sudoers/env.c
@@ -171,6 +171,7 @@ static const char *initial_badenv_table[] = {
     "RUBYLIB",                 /* ruby, library load path */
     "RUBYOPT",                 /* ruby, extra command line options */
     "BASH_FUNC_*",             /* new-style bash functions */
+    "__BASH_FUNC<*",           /* new-style bash functions (Apple) */
     NULL
 };