Do not short circuit pseudo commands when we get a match since, depending
on the settings, we may need to examine all commands for tags.
This commit is contained in:
3
parse.c
3
parse.c
@@ -192,12 +192,9 @@ sudo_file_lookup(nss, validated, pwflag)
|
||||
if ((pwcheck == any && nopass != TRUE) ||
|
||||
(pwcheck == all && nopass != FALSE))
|
||||
nopass = cs->tags.nopasswd;
|
||||
if (match == ALLOW)
|
||||
goto matched_pseudo;
|
||||
}
|
||||
}
|
||||
}
|
||||
matched_pseudo:
|
||||
if (match == ALLOW || user_uid == 0) {
|
||||
/* User has an entry for this host. */
|
||||
SET(validated, VALIDATE_OK);
|
||||
|
Reference in New Issue
Block a user