Todd C. Miller 42117a1ce2 Move intercept setid check out of do_stat() and into its own function. ...

For command_matches_all() we should only perform the setid check
if the file exists and intercept is enabled.  Otherwise, we can end
up returning an error if the fully-qualified command does not exist.
Fixes a regression introduced in sudo 1.9.0 with the support for
digests in conjunction with "sudo ALL".

2022-05-02 18:14:30 -06:00

..

audit_json

Rename SSP_(C|LD)FLAGS -> HARDENING_(C|LD)FLAGS

2022-04-01 11:14:59 -06:00

group_file

Rename SSP_(C|LD)FLAGS -> HARDENING_(C|LD)FLAGS

2022-04-01 11:14:59 -06:00

python

clean_output: prune lines that consisting of '^' characters and whitespace.

2022-04-11 19:05:06 -06:00

sample

Rename SSP_(C|LD)FLAGS -> HARDENING_(C|LD)FLAGS

2022-04-01 11:14:59 -06:00

sample_approval

Rename SSP_(C|LD)FLAGS -> HARDENING_(C|LD)FLAGS

2022-04-01 11:14:59 -06:00

sudoers

Move intercept setid check out of do_stat() and into its own function.

2022-05-02 18:14:30 -06:00

system_group

Rename SSP_(C|LD)FLAGS -> HARDENING_(C|LD)FLAGS

2022-04-01 11:14:59 -06:00