[sudo-commits] sudo changeset 11907:e571ee6e950b

[Todd C. Miller]

changeset:	11907:e571ee6e950b in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/e571ee6e950b
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Tue Nov 05 15:18:34 2019 -0700

Log Message:
	Transparently handle the "sudo sudoedit" problem.
	Some admin are confused about how to give users sudoedit permission
	and many users try to run sudoedit via sudo instead of directly.
	If the user runs "sudo sudoedit" sudo will now treat it as plain
	"sudoedit" after issuing a warning.  If the admin has specified a
	fully-qualified path for sudoedit in sudoers, sudo will treat it
	as just "sudoedit" and match accordingly.  In visudo (but not sudo),
	a fully-qualified path for sudoedit is now treated as an error.

diffstat:

 doc/sudoers.man.in                          |   14 +-
 doc/sudoers.mdoc.in                         |   14 +-
 plugins/sudoers/cvtsudoers.c                |    2 +-
 plugins/sudoers/gram.c                      |  210 ++++++++++++++-------------
 plugins/sudoers/gram.y                      |    4 +-
 plugins/sudoers/parse.h                     |    2 +-
 plugins/sudoers/regress/parser/check_fill.c |    1 +
 plugins/sudoers/sudoers.c                   |   12 +-
 plugins/sudoers/sudoers.h                   |    1 +
 plugins/sudoers/testsudoers.c               |    2 +-
 plugins/sudoers/toke_util.c                 |   16 ++
 plugins/sudoers/visudo.c                    |    6 +-
 12 files changed, 167 insertions(+), 117 deletions(-)