Why is the python plugin for the sudo 1.9+ package disabled by default?

Asked by Rodney Lott

The sudo packages for Ubuntu Groovy and newer are part of the sudo 1.9 release. According to the package contents, there is a man page describing the availability to use the Python3 sudo plugin (i.e. /usr/share/man/man8/sudo_plugin_python.8.gz). Unfortunately, the configure option in debian/rules is by default disabled (i.e. the configure step of building the package does not include the --enable-python flag). I know that I can download the package and do a custom build myself. Unfortunately, my company requires the ability to upgrade security-related binary packages like sudo automatically. So, I am wondering why the sudo package doesn't have the python plugins built by default. As long as no one enables a plugin in /etc/sudo.conf, then there shouldn't be any concern about plugins being accidentally enabled.

Question information

Language:
English Edit question
Status:
Solved
For:
Ubuntu sudo Edit question
Assignee:
No assignee Edit question
Solved by:
Manfred Hampl
Solved:
Last query:
Last reply:
Revision history for this message
Best Manfred Hampl (m-hampl) said (last edit ):
#1

Ubuntu is copying packages from Debian, and Debian doesn't have that setting either.
See also https://bugs.debian.org/990855

Revision history for this message
Rodney Lott (rlott-evertz) said :
#2

Thanks Manfred Hampl, that solved my question.