[sudo-commits] sudo changeset 15135:b07b8fcff911

[Todd C. Miller]

changeset:	15135:b07b8fcff911 in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/b07b8fcff911
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Thu Nov 02 13:44:17 2023 -0600
files:		plugins/sudoers/logging.c plugins/sudoers/lookup.c plugins/sudoers/match_command.c plugins/sudoers/parse.h plugins/sudoers/sudoers.c plugins/sudoers/sudoers.h

Log Message:
	Move the check for running setid commands in intercept mode to later.

	Checking for setid commands in intercept mode after command matching
	allows us to log a proper error message.  Previously, we simply
	ignored setid commands when matching and the only indication of why
	was in the debug logs.


diffstat:

 plugins/sudoers/logging.c       |   5 ++
 plugins/sudoers/lookup.c        |  12 +-----
 plugins/sudoers/match_command.c |  73 ++++++++++------------------------------
 plugins/sudoers/parse.h         |   1 -
 plugins/sudoers/sudoers.c       |  17 +++++++++
 plugins/sudoers/sudoers.h       |   1 +
 6 files changed, 43 insertions(+), 66 deletions(-)