GNU bug report logs - #28618
Emacs respects $HOME, even when user is root

Previous Next

Full log

View this message in rfc822 format

From: Glenn Morris <rgm <at> gnu.org>
To: Noam Postavsky <npostavs <at> users.sourceforge.net>
Cc: 28618 <at> debbugs.gnu.org, Dor Azouri <dor.azouri <at> safebreach.com>
Subject: bug#28618: Emacs Security Issue
Date: Fri, 29 Sep 2017 12:41:26 -0400

On some systems, sudo may preserve HOME by default. Or it may be
optional behaviour with "sudo -E" (eg on Debian 8, it seems).
(Of course, the attacker who has complete control of your user account
could alias "sudo" to "sudo -E".)

Ref eg

https://security.stackexchange.com/questions/18369/issues-with-preserving-home-on-sudo

As it stands, I don't think this is an Emacs issue.

Previous Next

GNU bug tracking system
Copyright (C) 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson.