In command_info it is "runas_groups" not "groups".
This commit is contained in:
@@ -543,7 +543,7 @@ sudoers_policy_main(int argc, char * const argv[], char *env_add[],
|
|||||||
/* XXX - what about when runas user has no passwd entry? */
|
/* XXX - what about when runas user has no passwd entry? */
|
||||||
#ifdef HAVE_GETGRSET
|
#ifdef HAVE_GETGRSET
|
||||||
char *gid_list = getgrset(runas_pw->pw_name);
|
char *gid_list = getgrset(runas_pw->pw_name);
|
||||||
easprintf(&command_info[info_len++], "groups=%s", gid_list);
|
easprintf(&command_info[info_len++], "runas_groups=%s", gid_list);
|
||||||
efree(gid_list);
|
efree(gid_list);
|
||||||
#else
|
#else
|
||||||
gid_t groups[NGROUPS_MAX * 2]; /* should use sysconf */
|
gid_t groups[NGROUPS_MAX * 2]; /* should use sysconf */
|
||||||
@@ -553,10 +553,10 @@ sudoers_policy_main(int argc, char * const argv[], char *env_add[],
|
|||||||
|
|
||||||
/* XXX - rval */
|
/* XXX - rval */
|
||||||
getgrouplist(runas_pw->pw_name, runas_pw->pw_gid, groups, &ngroups);
|
getgrouplist(runas_pw->pw_name, runas_pw->pw_gid, groups, &ngroups);
|
||||||
glsize = sizeof("groups=") - 1 + (user_ngroups * (MAX_UID_T_LEN + 1));
|
glsize = sizeof("runas_groups=") - 1 + (user_ngroups * (MAX_UID_T_LEN + 1));
|
||||||
gid_list = emalloc(glsize);
|
gid_list = emalloc(glsize);
|
||||||
memcpy(gid_list, "groups=", sizeof("groups=") - 1);
|
memcpy(gid_list, "runas_groups=", sizeof("runas_groups=") - 1);
|
||||||
cp = gid_list + sizeof("groups=") - 1;
|
cp = gid_list + sizeof("runas_groups=") - 1;
|
||||||
for (i = 0; i < ngroups; i++) {
|
for (i = 0; i < ngroups; i++) {
|
||||||
/* XXX - check rval */
|
/* XXX - check rval */
|
||||||
len = snprintf(cp, glsize - (cp - gid_list), "%s%lu",
|
len = snprintf(cp, glsize - (cp - gid_list), "%s%lu",
|
||||||
|
Reference in New Issue
Block a user