Bug 709

Summary:	allow full Runas_Spec to be used for runas_default
Product:	Sudo	Reporter:	Christoph Anton Mitterer <calestyo>
Component:	Sudoers	Assignee:	Todd C. Miller <Todd.Miller>
Status:	NEW ---
Severity:	enhancement
Priority:	low
Version:	1.8.14
Hardware:	All
OS:	All

Description Christoph Anton Mitterer 2015-07-24 16:14:00 MDT

Hi.

Right now it seems that for the option runas_default only a username can be specified.
I.e. it doesn't work to set e.g.
runas_default=:root   (and have just the group changed to root)
or
runas_default=foo:bar

instead would e.g. complain that there's no user ":root".


The native meaning of runas_default would/should IMHO imply that one can actually set a true Runas_Spec, i.e. completely control the default of both -u and -g if neither of them is specified.

Could this possibly implemented? :-)


Best wishes,
Chris.