[sudo-commits] sudo changeset 11994:c571f211f131

[Todd C. Miller]

changeset:	11994:c571f211f131 in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/c571f211f131
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Mon Dec 09 17:14:06 2019 -0700

Log Message:
	Add a new flag "allow_unknown_runas_id" to control matching of unknown IDs.
	Previous, sudo would always allow unknown user or group IDs if the
	sudoers entry permitted it.  This included the "ALL" alias.
	With this change, the admin must explicitly enable support for unknown IDs.

diffstat:

 doc/sudoers.man.in          |  19 ++++++++++++++++++-
 doc/sudoers.mdoc.in         |  18 +++++++++++++++++-
 plugins/sudoers/def_data.c  |   4 ++++
 plugins/sudoers/def_data.h  |   2 ++
 plugins/sudoers/def_data.in |   3 +++
 plugins/sudoers/defaults.c  |   1 +
 plugins/sudoers/sudoers.c   |  28 ++++++++++++++++++++++++++--
 7 files changed, 71 insertions(+), 4 deletions(-)