[Freeipa-devel] [PATCH 14] Bugfix for sudo compat cmdcat and deny commands

JR Aquino JR.Aquino at citrix.com
Mon Jan 10 23:11:51 UTC 2011


Attached is a patch to fix the sudo compat plugin.

Ticket# 742: https://fedorahosted.org/freeipa/ticket/742

The sudo compat plugin should allow for the presence of:
Command Category: ALL
AND
sudoCommand: !/usr/bin/less

Currently the plugin is set to overwrite any other sudoCommand attribute
in favor of just 'ALL'
The plugin should continue to supersede 'permit' commands, but it should
not override 'deny' commands.


Ticket updated with the attached patch.

Please ack and push.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: freeipa-jraquino-0014-bugfix-for-sudo-compat-cmdcat-and-deny-commands.patch
Type: application/octet-stream
Size: 2148 bytes
Desc: freeipa-jraquino-0014-bugfix-for-sudo-compat-cmdcat-and-deny-commands.patch
URL: <http://listman.redhat.com/archives/freeipa-devel/attachments/20110110/a11788d8/attachment.obj>


More information about the Freeipa-devel mailing list