Bug 709

Summary: allow full Runas_Spec to be used for runas_default
Product: Sudo Reporter: Christoph Anton Mitterer <calestyo>
Component: SudoersAssignee: Todd C. Miller <Todd.Miller>
Status: NEW ---    
Severity: enhancement    
Priority: low    
Version: 1.8.14   
Hardware: All   
OS: All   

Description Christoph Anton Mitterer 2015-07-24 16:14:00 MDT
Hi.

Right now it seems that for the option runas_default only a username can be specified.
I.e. it doesn't work to set e.g.
runas_default=:root   (and have just the group changed to root)
or
runas_default=foo:bar

instead would e.g. complain that there's no user ":root".


The native meaning of runas_default would/should IMHO imply that one can actually set a true Runas_Spec, i.e. completely control the default of both -u and -g if neither of them is specified.

Could this possibly implemented? :-)


Best wishes,
Chris.