[sudo-commits] sudo changeset 11992:ebdbb5c7f60b

[Todd C. Miller]

changeset:	11992:ebdbb5c7f60b in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/ebdbb5c7f60b
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Mon Dec 09 17:14:06 2019 -0700

Log Message:
	Add a new flag "allow_unknown_runas_id" to control matching of unknown IDs.
	Previous, sudo would always allow unknown user or group IDs if the
	sudoers entry permitted it.  This included the "ALL" alias.
	With this change, the admin must explicitly enable support for unknown IDs.

diffstat:

 doc/sudoers.man.in          |  19 ++++++++++++++++++-
 doc/sudoers.mdoc.in         |  18 +++++++++++++++++-
 plugins/sudoers/def_data.c  |   4 ++++
 plugins/sudoers/def_data.h  |   2 ++
 plugins/sudoers/def_data.in |   3 +++
 plugins/sudoers/defaults.c  |   1 +
 plugins/sudoers/sudoers.c   |  28 ++++++++++++++++++++++++++--
 7 files changed, 71 insertions(+), 4 deletions(-)