[sudo-workers] NOPASSWD sudo and PAM

Todd C. Miller Todd.Miller at sudo.ws
Tue Jan 16 10:37:53 MST 2018


This should be resolved by the following commit:
    https://www.sudo.ws/repos/sudo/rev/cab448ac8633

which decouples the call to pam_acct_mgmt() from user authentication.

With the pam_time restriction in place, I see the following, even
when no password is required:

testuser at linux-build$ sudo id
sudo: PAM authentication error: Permission denied

 - todd


More information about the sudo-workers mailing list