Bug 166

Summary:	listpw=always does _not_ always prompt for password
Product:	Sudo	Reporter:	Mark Kirchner <sudo-bugs>
Component:	Sudo	Assignee:	Todd C. Miller <Todd.Miller>
Status:	RESOLVED FIXED
Severity:	normal
Priority:	normal
Version:	1.6.8
Hardware:	PC
OS:	Linux

Description Mark Kirchner 2005-01-27 13:51:44 MST

When calling "sudo -l" with -"u yourownuser", you don't need to enter a
password. That seems to defeat the purpose of "listpw=always"

sudoers (excerpt):
  Defaults:mark listpw=always

call:
 (sudo -K -u mark) <-- doen't make much sense, just to be sure
  sudo -l -u mark

BTW: It's the same with "listpw=all".

Comment 1 Todd C. Miller 2005-01-27 14:09:55 MST

Fixed in the current cvs sources, fix will be present in the next major release (1.7).

Comment 2 Todd C. Miller 2005-02-08 07:04:38 MST

FYI, the fix is also included in sudo 1.6.8p7 (out now).