You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
use_pty should not just be implemented, but also be enabled by default, otherwise on Linux there are privilege escalations with TIOCSTI and TIOCLINUX ioctls. See also sudo-project/sudo#258
@pvdrz you mean allowing explicit execution without a PTY versus not supporting that at all?
I think it could allow bypassing any potential bugs for known trusted code while the PTY support code is still young?
EDIT: Note to self that pull request #235 and issue #245 are related.
Do something with the
use_pty
flag (this runs the spawned process in a seperate pty)The text was updated successfully, but these errors were encountered: