[sudo-users] New SUDO Schema Expantion

Todd C. Miller Todd.Miller at courtesan.com
Mon Jan 31 16:19:36 EST 2011


That is correct.

 - todd

On Mon, 31 Jan 2011 16:12:51 GMT, JR Aquino wrote:

> Ack, I should have given a better example:
> 
> #Deny object
> sudoUser: jaquino
> deny: ALL
> sudoOrder: 1
> 
> #Permit Object
> sudoUser: jaquino
> Permit: reboot/halt/shutdown
> sudoOrder: 0 <- or with no sudoOrder Attribute set at all, which should
> also == 0.0 I believe.
> 
> In cases where the higher ordered rule matches, it will match stop and
> won't ever see that there is a different more permissive rule...



More information about the sudo-users mailing list