fesco

#1646 No appropriate sudo directory for user scripts
Closed: Invalid Opened by srakitnican.

Closed: Invalid
Reopen Issue

Hi,

On Fedora, sudo is configured with a very limited set of paths which limits to files only installed by distribution. It doesn't include any path that can be used by administrator to include custom scripts for example. As noted in a bug report [1], Ubuntu includes /usr/local/bin and /usr/local/sbin which does make sense.

I am proposing to change default secure_path for sudo to add two new directories:
/usr/local/bin
/usr/local/sbin

[1] https://bugzilla.redhat.com/show_bug.cgi?id=1166185

Best regards,
Samuel Rakitničan

2016-12-09 FESCo Meeting: AGREED: Defer decision of Issue #1646 until 2016-12-16

For what it's worth, with my former-sysadmin hat on and not my FPL one, I am mildly opposed. I think it's better for the default secure_path to include only system binaries, requiring explicit paths for other situations including /usr/local/sbin. Sites which use such directories heavily can easily change the secure_path value.

In the 2016-Dec-16 FESCo meeting, it was decided to push a vote on this issue to our first meeting in January, in order to have a better idea of the pros and cons of making this change.

From today's meeting:

agreed FESCo does not support extending the set of paths to include a custom script path (+7: 0: -0)

@jwboyer changed the status to Closed

But the current behavior is inconsistent with how the regular PATH for root (as in "su -") is set up. Fedora should have consistent defaults.

https://pagure.io/fesco/issue/1788
Metadata
None
None
None
None
None
Static archive. pagure.io was sunset in 2026; this is a read-only snapshot.
Red Hat Logo

Fedora is sponsored by Red Hat. Learn more about the relationship between Red Hat and Fedora »

© Red Hat, Inc. and others.