Honor NOPASSWD tag for denied commands too.

2011-09-09 09:57:39 -04:00
parent b3b268c3a4
commit dacb1e47f3
1 changed files with 2 additions and 0 deletions
--- a/plugins/sudoers/parse.c
+++ b/plugins/sudoers/parse.c
@@ -250,6 +250,8 @@ sudo_file_lookup(struct sudo_nss *nss, int validated, int pwflag)
    } else if (match == DENY) {
 	SET(validated, VALIDATE_NOT_OK);
 	CLR(validated, VALIDATE_OK);
+	if (tags != NULL && tags->nopasswd != UNSPEC)
+	    def_authenticate = !tags->nopasswd;
    }
    restore_perms();
    return validated;