From: Todd C. Miller Date: Thu, 12 Jan 2012 15:20:08 +0000 (-0500) Subject: Add missing word in HOME security note. X-Git-Tag: SUDO_1_7_9~56 X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=988c4539297a3986750403eeebefa50a3ad36d08;p=sudo Add missing word in HOME security note. --HG-- branch : 1.7 --- diff --git a/UPGRADE b/UPGRADE index 8b7da22fb..e77dba8c8 100644 --- a/UPGRADE +++ b/UPGRADE @@ -77,7 +77,7 @@ o Upgrading from a version prior to 1.7.4: to preserve the old value of MAIL. NOTE: preserving HOME has security implications since many programs - use when searching for configuration files. Adding HOME to env_keep + use it when searching for configuration files. Adding HOME to env_keep may enable a user to run unrestricted commands via sudo. The default syslog facility has changed from "local2" to "authpriv"