isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Don't check the username when matching a host netgroup unless

Browse Source 
def_netgroup_tuple is enabled.
This commit is contained in:
Todd C. Miller
2016-09-13 09:12:42 -06:00
parent c73dec723c
commit ca2a1f3109
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
plugins/sudoers/match.c
View File

@@ -279,7 +279,7 @@ hostlist_matches(const struct passwd *pw, const struct member_list *list)
break; break;
case NETGROUP: case NETGROUP:
if (netgr_matches(m->name, user_runhost, user_srunhost, if (netgr_matches(m->name, user_runhost, user_srunhost,
pw->pw_name)) def_netgroup_tuple ? pw->pw_name : NULL))
matched = !m->negated; matched = !m->negated;
break; break;
case NTWKADDR: case NTWKADDR: