sudo-rs
sudo-rs copied to clipboard
Add use_pty support
Do something with the use_pty flag (this runs the spawned process in a seperate pty)
use_pty should not just be implemented, but also be enabled by default, otherwise on Linux there are privilege escalations with TIOCSTI and TIOCLINUX ioctls. See also https://github.com/sudo-project/sudo/issues/258
I even wonder if we should keep the nopty behavior for any reason
@pvdrz you mean allowing explicit execution without a PTY versus not supporting that at all? I think it could allow bypassing any potential bugs for known trusted code while the PTY support code is still young?
EDIT: Note to self that pull request #235 and issue #245 are related.