From c5558ce3e06cea655c6d835f487c9648009a8165 Mon Sep 17 00:00:00 2001
From: kzak <kzak@fedoraproject.org>
Date: Feb 08 2006 16:19:20 +0000
Subject: reset env. by default


---

diff --git a/sudo-1.6.8p12-env-reset.patch b/sudo-1.6.8p12-env-reset.patch
new file mode 100644
index 0000000..2bf6195
--- /dev/null
+++ b/sudo-1.6.8p12-env-reset.patch
@@ -0,0 +1,17 @@
+--- sudo-1.6.8p12/sudoers.env_reset	2006-02-08 16:58:15.000000000 +0100
++++ sudo-1.6.8p12/sudoers	2006-02-08 16:59:02.000000000 +0100
+@@ -13,6 +13,14 @@
+ 
+ # Defaults specification
+ 
++Defaults    env_reset
++Defaults    env_keep = "COLORS DISPLAY HOSTNAME HISTSIZE INPUTRC KDEDIR \
++                        LS_COLORS MAIL PS1 PS2 QTDIR USERNAME \
++                        LANG LC_ADDRESS LC_CTYPE LC_COLLATE LC_IDENTIFICATION \
++                        LC_MEASUREMENT LC_MESSAGES LC_MONETARY LC_NAME LC_NUMERIC \
++                        LC_PAPER LC_TELEPHONE LC_TIME LC_ALL LANGUAGE LINGUAS \
++                        _XKB_CHARSET"
++
+ # Runas alias specification
+ 
+ # User privilege specification
diff --git a/sudo.spec b/sudo.spec
index 0a832d6..21f8c4f 100644
--- a/sudo.spec
+++ b/sudo.spec
@@ -1,7 +1,7 @@
 Summary: Allows restricted root access for specified users.
 Name: sudo
 Version: 1.6.8p12
-Release: 3.1
+Release: 4
 License: BSD
 Group: Applications/System
 Source: http://www.courtesan.com/sudo/dist/sudo-%{version}.tar.gz
@@ -14,6 +14,8 @@ BuildRequires: pam-devel, groff
 Patch2: sudo-1.6.8p8-pam-sess.patch
 # don't strip
 Patch3: sudo-1.6.7p5-strip.patch
+# Default sudoers
+Patch4: sudo-1.6.8p12-env-reset.patch
 
 %description
 Sudo (superuser do) allows a system administrator to give certain
@@ -30,6 +32,7 @@ on many different machines.
 %setup -q
 %patch2 -p1 -b .sess
 %patch3 -p1 -b .strip
+%patch4 -p1 -b .env_reset
 
 %build
 %ifarch s390 s390x
@@ -92,6 +95,9 @@ rm -rf $RPM_BUILD_ROOT
 /bin/chmod 0440 /etc/sudoers || :
 
 %changelog
+* Wed Feb  8 2006 Karel Zak <kzak@redhat.com> 1.6.8p12-4
+- reset env. by default
+
 * Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 1.6.8p12-3.1
 - rebuilt for new gcc4.1 snapshot and glibc changes