Attached is a patch to fix the sudo compat plugin.

Ticket# 742:

The sudo compat plugin should allow for the presence of:
Command Category: ALL
sudoCommand: !/usr/bin/less

Currently the plugin is set to overwrite any other sudoCommand attribute
in favor of just 'ALL'
The plugin should continue to supersede 'permit' commands, but it should
not override 'deny' commands.

Ticket updated with the attached patch.

Please ack and push.

Attachment: bin4QAHBCowWE.bin
Description: freeipa-jraquino-0014-bugfix-for-sudo-compat-cmdcat-and-deny-commands.patch

Freeipa-devel mailing list

Reply via email to