Note: This is a beta release of Red Hat Bugzilla 5.0. The data contained within is a snapshot of the live data so any changes you make will not be reflected in the production Bugzilla. Also email is disabled so feel free to test any aspect of the site that you want. File any problems you find or give feedback here.
Bug 85967 - Sudo timestamps survive a system reboot
Summary: Sudo timestamps survive a system reboot
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: sudo
Version: 8.0
Hardware: All
OS: Linux
Target Milestone: ---
Assignee: Thomas Woerner
QA Contact: Ben Levenson
Depends On:
TreeView+ depends on / blocked
Reported: 2003-03-11 17:38 UTC by Randall Wood
Modified: 2007-04-18 16:51 UTC (History)
0 users

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Last Closed: 2003-04-23 10:31:28 UTC

Attachments (Terms of Use)

Description Randall Wood 2003-03-11 17:38:15 UTC
From Bugzilla Helper:
User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.0.1) Gecko/20020830

Description of problem:
sudo timestamp files survive a system reboot. A workstation restarted using
"shutdown -rf now" can reboot within the 5 minute life of a sudo authentication
ticket. If a user logs in on the same terminal, sudo's ticket remains valid.

Version-Release number of selected component (if applicable):

How reproducible:

Steps to Reproduce:
1.valid sudo user enters sudo /sbin/shutdown -rf now with valid password
2.if user logins to same terminal immediately after reboot, sudo -v does not
require authentication.

Actual Results:  I was required to authenticate myself

Expected Results:  I should have be required to authenticate

Additional info:

This bug has been submited to

Comment 1 Mark J. Cox 2003-04-23 10:31:28 UTC
Sudo timestamp files are kept in /var/tmp/sudo.  The /etc/rc.d/rc.sysinit file
as part of the initscripts package shipped with 8.0 does not clean out the
/var/tmp/sudo directory.  The initscripts package shipped with Red Hat Linux 9
has been updated to clear out the /var/tmp/sudo directory.

Note You need to log in before you can comment on or make changes to this bug.