Attached is a patch to fix the sudo compat plugin. Ticket# 742: https://fedorahosted.org/freeipa/ticket/742
The sudo compat plugin should allow for the presence of: Command Category: ALL AND sudoCommand: !/usr/bin/less Currently the plugin is set to overwrite any other sudoCommand attribute in favor of just 'ALL' The plugin should continue to supersede 'permit' commands, but it should not override 'deny' commands. Ticket updated with the attached patch. Please ack and push.
_______________________________________________ Freeipa-devel mailing list Freeipaemail@example.com https://www.redhat.com/mailman/listinfo/freeipa-devel