Bug 166 – listpw=always does _not_ always prompt for password

Bug 166 - listpw=always does _not_ always prompt for password


Summary:	listpw=always does _not_ always prompt for password

Status:	RESOLVED FIXED

Product:	Sudo
Classification:	Unclassified
Component:	Sudo
Version:	1.6.8
Hardware:	PC Linux

Importance:	normal normal
Assigned To:	Todd C. Miller

URL:

Depends on:
Blocks:
	Show dependency tree / graph

Reported:	2005-01-27 13:51 MST by Mark Kirchner
Modified:	2005-02-08 11:04 MST (History)
CC List:	0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Mark Kirchner 2005-01-27 13:51:44 MST

When calling "sudo -l" with -"u yourownuser", you don't need to enter a
password. That seems to defeat the purpose of "listpw=always"

sudoers (excerpt):
  Defaults:mark listpw=always

call:
 (sudo -K -u mark) <-- doen't make much sense, just to be sure
  sudo -l -u mark

BTW: It's the same with "listpw=all".

Comment 1 Todd C. Miller 2005-01-27 14:09:55 MST

Fixed in the current cvs sources, fix will be present in the next major release (1.7).

Comment 2 Todd C. Miller 2005-02-08 07:04:38 MST

FYI, the fix is also included in sudo 1.6.8p7 (out now).