isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use same check for intercepted commands as log_server_accept().

Browse Source 
Previously, log_server_reject() and log_server_alert() just
checked whether client_closure has been set.
This commit is contained in:
Todd C. Miller
2021-08-11 14:10:05 -06:00
parent 0e2094471b
commit f327a19f34
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
plugins/sudoers/logging.c
View File

@@ -127,7 +127,7 @@ log_server_reject(struct eventlog *evlog, const char *message,
if (SLIST_EMPTY(&def_log_servers))
debug_return_bool(true);
if (client_closure != NULL) {
if (ISSET(sudo_mode, MODE_POLICY_INTERCEPTED)) {
/* Older servers don't support multiple commands per session. */
if (!client_closure->subcommands)
debug_return_bool(true);
@@ -183,7 +183,7 @@ log_server_alert(struct eventlog *evlog, struct timespec *now,
}
}
if (client_closure != NULL) {
if (ISSET(sudo_mode, MODE_POLICY_INTERCEPTED)) {
/* Older servers don't support multiple commands per session. */
if (!client_closure->subcommands)
debug_return_bool(true);