[sudo-commits] sudo changeset 14771:d80e907efe77

[Todd C. Miller]

changeset:	14771:d80e907efe77 in /raid/repos/sudo
details:	https://www.sudo.ws/repos/sudo/rev/d80e907efe77
user:		Todd C. Miller <Todd.Miller at sudo.ws>
date:		Tue Jun 13 16:03:25 2023 -0600

Log Message:
	runaslist_matches: remove special case to handle "sudo -g group"

	Now that we are guaranteed to have a runas user list for all sudoers
	rules that contain a runas list, we can remove support for the
	special case where user_matched is set in the runas group matching
	conditional.  This fixes a bug where "sudo -u myuser -g mygroup"
	was permitted by a rule like "myuser ALL = (root) ALL".

diffstat:

 plugins/sudoers/match.c |  94 ++++++++++++++++++++++--------------------------
 1 files changed, 44 insertions(+), 50 deletions(-)