[Bug 720181] New: sudo -i unsets $DISPLAY - but manpage says it doesn't - openSUSE Bugs

[Bug 720181] New: sudo -i unsets $DISPLAY - but manpage says it doesn't

older
[Bug 669774] New: Installation DVD...

bugzilla_noreply＠novell.com

23 Sep 2011 23 Sep '11

23:35

https://bugzilla.novell.com/show_bug.cgi?id=720181 https://bugzilla.novell.com/show_bug.cgi?id=720181#c0 Summary: sudo -i unsets $DISPLAY - but manpage says it doesn't Classification: openSUSE Product: openSUSE 11.4 Version: Final Platform: x86-64 OS/Version: Other Status: NEW Severity: Normal Priority: P5 - None Component: Security AssignedTo: vcizek@suse.com ReportedBy: suse-beta@cboltz.de QAContact: qa@suse.de CC: puzel@suse.com Found By: Beta-Customer Blocker: ---

...

From man sudo(8):

-i [command] [...] It also initializes the environment, leaving DISPLAY and TERM unchanged, ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ setting HOME, MAIL, SHELL, USER, LOGNAME, and PATH, as well as the contents of /etc/environment on Linux and AIX systems. All other environment variables are removed. That's the theory. Now see what happens in practise: # env |grep DISPLAY DISPLAY=:0 # sudo -i env | grep DISPLAY root's password: # (nothing) This might be an openSUSE only problem - John Johansen told me that Sudo 1.7.4p6 on Ubuntu keeps the DISPLAY env variable. Yes, the version he uses is newer than what 11.4 has, but the upstream sudo changelog doesn't include anything that would match this bug. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

Show replies by date

bugzilla_noreply＠novell.com

26 Sep 26 Sep

14:11

New subject: [Bug 720181] sudo -i unsets $DISPLAY - but manpage says it doesn't

https://bugzilla.novell.com/show_bug.cgi?id=720181 https://bugzilla.novell.com/show_bug.cgi?id=720181#c1 Ludwig Nussel changed: What |Removed |Added ---------------------------------------------------------------------------- CC| |lnussel@suse.com --- Comment #1 from Ludwig Nussel 2011-09-26 16:11:15 CEST --- bug in man page. Keeping DISPLAY alone won't work anyways. You also need to handle display cookies etc. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

18:04

New subject: [Bug 720181] sudo -i unsets $DISPLAY - but manpage says it doesn't

https://bugzilla.novell.com/show_bug.cgi?id=720181 https://bugzilla.novell.com/show_bug.cgi?id=720181#c2 --- Comment #2 from Christian Boltz 2011-09-26 20:04:54 CEST --- (In reply to comment #1)

...

bug in man page. Keeping DISPLAY alone won't work anyways. You also need to handle display cookies etc.

I'm not sure about that ;-) I stumbled over this because aa-notify didn't display any notifications when started with sudo, and calling it with sudo DISPLAY="$DISPLAY" HOME="$HOME" aa-notify -p (which hands over the user's $DISPLAY and $HOME) works... For the records: - aa-notify uses /usr/bin/notify-send which uses DBUS. - you'll need the latest packages from security:apparmor:factory (or chmod 750 /var/log/audit/) if you want to test it - aa-notify was buggy in 11.4 -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

bugzilla_noreply＠novell.com

4 Oct 4 Oct