mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-28 12:57:50 +00:00
Code Issues Releases Wiki Activity

Only check SUDO_USER if euid is 0

Browse Source
This commit is contained in:
Todd C. Miller 2016-07-31 18:47:36 -06:00
parent f85e95329f
commit 54efa54c0e
1 changed files with 6 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
plugins/sudoers/visudo.c
View File

@ -134,7 +134,7 @@ int
main(int argc, char *argv[]) main(int argc, char *argv[])
{ {
struct sudoersfile *sp; struct sudoersfile *sp;
char *user, *editor, **editor_argv; char *editor, **editor_argv;
int ch, oldlocale, editor_argc, exitcode = 0; int ch, oldlocale, editor_argc, exitcode = 0;
bool quiet, strict, oldperms; bool quiet, strict, oldperms;
const char *export_path; const char *export_path;
@ -215,9 +215,11 @@ main(int argc, char *argv[])
/* Mock up a fake sudo_user struct. */ /* Mock up a fake sudo_user struct. */
user_cmnd = user_base = ""; user_cmnd = user_base = "";
user = getenv("SUDO_USER"); if (geteuid() == 0) {
if (user != NULL && *user != '\0') const char *user = getenv("SUDO_USER");
sudo_user.pw = sudo_getpwnam(user); if (user != NULL && *user != '\0')
sudo_user.pw = sudo_getpwnam(user);
}
if (sudo_user.pw == NULL) { if (sudo_user.pw == NULL) {
if ((sudo_user.pw = sudo_getpwuid(getuid())) == NULL) if ((sudo_user.pw = sudo_getpwuid(getuid())) == NULL)
sudo_fatalx(U_("you do not exist in the %s database"), "passwd"); sudo_fatalx(U_("you do not exist in the %s database"), "passwd");