[sudo-users] sudoHost matches regardless of netgroup membership

[Todd C. Miller]

The problem is that you have your host netgroups setup incorrectly.

[swick at swtest-5864p ~]$ getent netgroup Test_hosts
Test_hosts            ( , swtest-5864p, )

That should display:

Test_hosts            ( swtest-5864p, , )

As you have it, swtest-5864p is interpreted as a user and the host
portion, being empty, is treated as a wildcard that matches any
host.

I had to stare at this for quite some time before I noticed that :-)

 - todd