restrict sudo args

bin/epm-check_updated_repo

@@ -36,7 +36,7 @@ __is_repo_info_uptodate()
     case $PMTYPE in
         apt-rpm)
             # apt-deb do not update lock file date
-            if $SUDO [ -r /var/lib/apt/lists ] ; then
+            if $SUDO test -r /var/lib/apt/lists ; then
                 local LOCKFILE=/var/lib/apt/lists/lock
                 $SUDO test -r $LOCKFILE || return
                 # if repo older than 1 day, return false

bin/epm-sh-functions

@@ -261,7 +261,7 @@ set_sudo()
 	[ $EFFUID = "0" ] && return
 
 	# use sudo if possible
-	which sudo >/dev/null 2>/dev/null && SUDO="sudo" && return
+	which sudo >/dev/null 2>/dev/null && SUDO="sudo --" && return
 
 	SUDO="fatal 'Can't find sudo. Please install sudo or run epm under root.'"
 }