search

sudo-project / sudo

Utility to execute a command as another user
https://www.sudo.ws
Other
1.14k stars 209 forks source link

After upgrade, sudo suddenly shows lecture again #342

Closed haarp closed 6 months ago

haarp commented 6 months ago

Hello,

using sudo on Gentoo Linux. After upgrading from 1.9.14_p3 to 1.9.15_p2, sudo suddenly for the first time in a long time, shows the lecture when run.

I know this can be controlled with the lecture setting. The problem is the sudden appearance of the lecture. It made me wary, thinking I was on the wrong server, or somebody was MITMing my sudo prompt. This caused a thorough investigation of my security.

The lecture option is not defined in any config. My user does have a file in /var/db/sudo/lectured. After confirming the lecture again, there is now a file with my user ID in that dir.

Please don't change any defaults this way :)

Thanks!

haarp commented 6 months ago

Ah, finally tracked this down to commit 7363ad7b3230b7b03a83f6. I guess that makes sense. Still, there should've been a migration to prevent admin panic :)

millert commented 6 months ago

This is mentioned both in the release notes and upgrade notes.

haarp commented 5 months ago

Whoops! So few projects bother to maintain release/upgrade notes that it didn't even cross my mind. I thought it was some kind of bug at first. Thanks for maintaining such notes tho!

I also see you added a migration now. Thanks a lot!