Don't check the username when matching a host netgroup unless

def_netgroup_tuple is enabled.
2016-09-13 09:12:42 -06:00
parent c73dec723c
commit ca2a1f3109
1 changed files with 1 additions and 1 deletions
--- a/plugins/sudoers/match.c
+++ b/plugins/sudoers/match.c
@@ -279,7 +279,7 @@ hostlist_matches(const struct passwd *pw, const struct member_list *list)
 		break;
 	    case NETGROUP:
 		if (netgr_matches(m->name, user_runhost, user_srunhost,
-		    pw->pw_name))
+		    def_netgroup_tuple ? pw->pw_name : NULL))
 		    matched = !m->negated;
 		break;
 	    case NTWKADDR: