mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-09-05 00:35:14 +00:00
Code Issues Releases Wiki Activity

Add case_insensitive_group and case_insensitive_user sudoers options,

Browse Source 
which are enabled by default.
This commit is contained in:
Todd C. Miller
2018-03-05 10:42:02 -07:00
parent 6014b4075c
commit e26ef96a65
11 changed files with 90 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
plugins/sudoers/sssd.c
View File

@@ -455,7 +455,7 @@ sudo_sss_open(struct sudo_nss *nss)
* If runhost is the same as the local host, check for ipa_hostname
* in sssd.conf and use it in preference to user_runhost.
*/
if (strcmp(user_runhost, user_host) == 0) {
if (strcasecmp(user_runhost, user_host) == 0) {
if (get_ipa_hostname(&handle->ipa_shost, &handle->ipa_host) == -1) {
free(handle);
debug_return_int(ENOMEM);
@@ -607,7 +607,7 @@ sudo_sss_check_runas_user(struct sudo_sss_handle *handle, struct sss_sudo_rule *
* If trying to run as the invoking user, allow it.
*/
sudo_debug_printf(SUDO_DEBUG_INFO, "Matching against user_name");
if (strcmp(user_name, runas_pw->pw_name) == 0)
if (userpw_matches(user_name, runas_pw->pw_name, runas_pw))
ret = true;
break;
}
@@ -660,7 +660,7 @@ sudo_sss_check_runas_user(struct sudo_sss_handle *handle, struct sss_sudo_rule *
case '\0':
/* Empty RunAsUser means run as the invoking user. */
if (ISSET(sudo_user.flags, RUNAS_USER_SPECIFIED) &&
strcmp(user_name, runas_pw->pw_name) == 0)
userpw_matches(user_name, runas_pw->pw_name, runas_pw))
ret = true;
break;
case 'A':