1
0
mirror of https://git.FreeBSD.org/ports.git synced 2025-01-28 10:08:24 +00:00

security/sudo: Fix listpw=never

When listpw=never is set, 'sudo -l' is expected to run without asking for a
password.

PR:		234756
Reported by:	vas@mpeks.tomsk.su
Obtained from:	https://bugzilla.sudo.ws/show_bug.cgi?id=869
Sponsored by:	Rubicon Communications, LLC (Netgate)
This commit is contained in:
Renato Botelho 2019-01-22 13:51:16 +00:00
parent d00cc0b714
commit ad971af443
Notes: svn2git 2021-03-31 03:12:20 +00:00
svn path=/head/; revision=490951
2 changed files with 12 additions and 0 deletions

View File

@ -3,6 +3,7 @@
PORTNAME= sudo
PORTVERSION= 1.8.27
PORTREVISION= 1
CATEGORIES= security
MASTER_SITES= SUDO

View File

@ -0,0 +1,11 @@
--- plugins/sudoers/parse.c.orig 2019-01-22 13:45:48 UTC
+++ plugins/sudoers/parse.c
@@ -60,7 +60,7 @@ sudoers_lookup_pseudo(struct sudo_nss_list *snl, struc
debug_decl(sudoers_lookup_pseudo, SUDOERS_DEBUG_PARSER)
pwcheck = (pwflag == -1) ? never : sudo_defs_table[pwflag].sd_un.tuple;
- nopass = (pwcheck == all) ? true : false;
+ nopass = (pwcheck == never) ? true : false;
if (list_pw == NULL)
SET(validated, FLAG_NO_CHECK);