[sudo-workers] Replace (ALL) with (ALL:ALL) in sudoers file

Todd C. Miller Todd.Miller at sudo.ws
Sat Dec 4 16:27:59 MST 2021


On Sat, 04 Dec 2021 17:49:41 -0500, Justin Spencer wrote:

> Justification: Allow "sudo -g anyone" and "sudo -u anyone -g anytwo"
>
> When only the user (ALL) is specified explicitly, and the group is 
> implied, only sudo -u works. Specifying both the user and group, like 
> (ALL:ALL), is required to:
>
> 1. Use sudo -g by itself (with no -u user)
> 2. Use sudo -u and -g together, with a -g group that is different from 
> the -u user's primary group

Sure, there's really no reason not to.  Merged now.

 - todd


More information about the sudo-workers mailing list