add FLAG_NO_CHECK

logging.c

@@ -298,6 +298,9 @@ log_auth(status, inform_user)
 	else if (status & FLAG_NO_HOST)
 	    (void) fprintf(stderr, "%s is not allowed to run sudo on %s.  %s",
 		user_name, user_shost, "This incident will be reported.\n");
+	else if (status & FLAG_NO_CHECK)
+	    (void) fprintf(stderr, "Sorry, user %s may not run sudo on %s.\n",
+		user_name, user_shost);
 	else
 	    (void) fprintf(stderr,
 		"Sorry, user %s is not allowed to execute '%s%s%s' as %s on %s.\n",

parse.c

@@ -147,7 +147,8 @@ sudoers_lookup(check_cmnd)
 	error |= FLAG_NO_HOST;
 	if (!top)
 	    error |= FLAG_NO_USER;
-    }
+    } else
+	error |= FLAG_NO_CHECK;
 
     /*
      * Only check the actual command if the check_cmnd flag is set.

sudo.h

@@ -68,6 +68,7 @@ struct sudo_user {
 #define FLAG_NOPASS		0x10
 #define FLAG_NO_USER		0x20
 #define FLAG_NO_HOST		0x40
+#define FLAG_NO_CHECK		0x80
 
 /*
  * Boolean values