[sudo-commits] sudo changeset 11905:5cdcfd9a6c33

[Todd C. Miller]

changeset:	11905:5cdcfd9a6c33 in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/5cdcfd9a6c33
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Tue Nov 05 15:18:34 2019 -0700

Log Message:
	Transparently handle the "sudo sudoedit" problem.
	Some admin are confused about how to give users sudoedit permission
	and many users try to run sudoedit via sudo instead of directly.
	If the user runs "sudo sudoedit" sudo will now treat it as plain
	"sudoedit" after issuing a warning.  If the admin has specified a
	fully-qualified path for sudoedit in sudoers, sudo will treat it
	as just "sudoedit" and match accordingly.  In visudo (but not sudo),
	a fully-qualified path for sudoedit is now treated as an error.

diffstat:

 doc/sudoers.man.in                          |   14 +-
 doc/sudoers.mdoc.in                         |   14 +-
 plugins/sudoers/cvtsudoers.c                |    2 +-
 plugins/sudoers/gram.c                      |  210 ++++++++++++++-------------
 plugins/sudoers/gram.y                      |    4 +-
 plugins/sudoers/parse.h                     |    2 +-
 plugins/sudoers/regress/parser/check_fill.c |    1 +
 plugins/sudoers/sudoers.c                   |   12 +-
 plugins/sudoers/sudoers.h                   |    1 +
 plugins/sudoers/testsudoers.c               |    2 +-
 plugins/sudoers/toke_util.c                 |   16 ++
 plugins/sudoers/visudo.c                    |    6 +-
 12 files changed, 167 insertions(+), 117 deletions(-)