There is an invalid condition in sysdb_sudo_check_time() which results in all rules having been filtered out if sudo_timed is on. This patch fixes it.
On Mon, Feb 06, 2012 at 10:48:37AM +0100, Pavel Březina wrote:
There is an invalid condition in sysdb_sudo_check_time() which results in all rules having been filtered out if sudo_timed is on. This patch fixes it.
They would be incorrectly filtered out if sudo_timed was on AND the rules had no timestamps - sudo considers "no timestamp" an "allow" condition.
Ack
On Mon, 2012-02-06 at 12:08 +0100, Jakub Hrozek wrote:
On Mon, Feb 06, 2012 at 10:48:37AM +0100, Pavel Březina wrote:
There is an invalid condition in sysdb_sudo_check_time() which results in all rules having been filtered out if sudo_timed is on. This patch fixes it.
They would be incorrectly filtered out if sudo_timed was on AND the rules had no timestamps - sudo considers "no timestamp" an "allow" condition.
Ack
Pushed to master.
sssd-devel@lists.fedorahosted.org
-
Jakub Hrozek -
Pavel Březina -
Stephen Gallagher