3 ms·
That is documented. Since the mercurial web interface isn't very nice to use I picked a random version. sudo 1.8.6 from 2012 writes in the man page "The sudoers
by Calzifer 3y ago
That is documented. Since the mercurial web interface isn't very nice to use I picked a random version. sudo 1.8.6 from 2012 writes in the man page "The sudoers file must not be world-writable,".
https://www.sudo.ws/repos/sudo/file/SUDO_1_8_6/doc/sudoers.man.in#l3270 https://www.sudo.ws/repos/sudo/file/SUDO_1_8_6/doc/sudoers.m...
This is also a very common behaviour for security sensitive applications to check config file permissions. Another example I remember are ssh private keys.
I might be to harsh but it is not so trustworthy they still made this error and still miss the documentation.
- jrmg 3y agoI’m not sure why people are downvoting you. I suspect they may be clicking the link and thinking ‘that’s not documentation it’s source code’, not realizing it actually _is_ documentation. The language it’s in is ‘mdoc’ - a markup format for man pages: https://man.freebsd.org/cgi/man.cgi?mdoc https://man.freebsd.org/cgi/man.cgi?mdoc It’s the source code for the man page, which is about as documentationey as you can get.
- deleted 3y ago[deleted]
- sgerenser 3y agoInteresting, the posting I linked to indicated this behavior wasn’t documented. It’s certainly not surprising and as you mentioned, it’s equivalent to openssh requiring specific permissions on private key files.
- slikrick 3y agoI might be too harsh, but it is not so trustworthy that they found bugs within the original sudo after less than a year of effort. those other devs had over 40 years to find it