[sudo-workers] double-quoted sudoOption values in LDAP sudoers

Todd C. Miller Todd.Miller at courtesan.com
Tue Jul 7 11:30:53 MDT 2015


On Tue, 07 Jul 2015 11:06:36 -0600, "Todd C. Miller" wrote:

> I consider this a bug since the documentation says that a sudoOption
> is handled the same as Defaults entries in sudoers.  I'm testing
> a fix now.

I've committed a fix:
    http://www.sudo.ws/repos/sudo/rev/fe8291414179

Note that you don't really need double quotes in a sudoOption.
For example, the following is valid:

    sudoOption: group_plugin=sample_group.so /etc/sudo-group

With the fix you can now also do:

    sudoOption: group_plugin="sample_group.so /etc/sudo-group"

 - todd


More information about the sudo-workers mailing list