From ede7c75fd01889b9a6b965f689e1f1d525c45042 Mon Sep 17 00:00:00 2001 From: "Todd C. Miller" Date: Mon, 8 Dec 2008 16:50:06 +0000 Subject: Do not short circuit pseudo commands when we get a match since, depending on the settings, we may need to examine all commands for tags. --- usr.bin/sudo/parse.c | 3 --- 1 file changed, 3 deletions(-) diff --git a/usr.bin/sudo/parse.c b/usr.bin/sudo/parse.c index c955097c1f9..7452bcdf442 100644 --- a/usr.bin/sudo/parse.c +++ b/usr.bin/sudo/parse.c @@ -192,12 +192,9 @@ sudo_file_lookup(nss, validated, pwflag) if ((pwcheck == any && nopass != TRUE) || (pwcheck == all && nopass != FALSE)) nopass = cs->tags.nopasswd; - if (match == ALLOW) - goto matched_pseudo; } } } - matched_pseudo: if (match == ALLOW || user_uid == 0) { /* User has an entry for this host. */ SET(validated, VALIDATE_OK); -- cgit v1.2.3