[sudo-users] New SUDO Schema Expantion
Todd C. Miller
Todd.Miller at courtesan.com
Mon Jan 31 16:19:36 EST 2011
That is correct.
- todd
On Mon, 31 Jan 2011 16:12:51 GMT, JR Aquino wrote:
> Ack, I should have given a better example:
>
> #Deny object
> sudoUser: jaquino
> deny: ALL
> sudoOrder: 1
>
> #Permit Object
> sudoUser: jaquino
> Permit: reboot/halt/shutdown
> sudoOrder: 0 <- or with no sudoOrder Attribute set at all, which should
> also == 0.0 I believe.
>
> In cases where the higher ordered rule matches, it will match stop and
> won't ever see that there is a different more permissive rule...
More information about the sudo-users
mailing list