Add runas_check_shell flag to require a runas user to have a valid shell.

Not enabled by default.
2019-12-09 19:29:45 -07:00
parent df8f06609c
commit b14d633ec6
16 changed files with 285 additions and 5 deletions
--- a/plugins/sudoers/sudoers.h
+++ b/plugins/sudoers/sudoers.h
@@ -256,6 +256,7 @@ int find_path(const char *infile, char **outfile, struct stat *sbp,

 /* check.c */
 int check_user(int validate, int mode);
+bool check_user_shell(const struct passwd *pw);
 bool user_is_exempt(void);

 /* prompt.c */