I've just checked in a change that replaces the alias sequence number with a "used" flag that is set by alias_get (formerly alias_find) and cleared by alias_put. http://www.sudo.ws/repos/sudo/rev/0bdbac1b3b39 I've added your false positive example as a regression test. - todd