Bugzilla – Bug 312
cmd alias matching is very slow
Last modified: 2009-07-28 14:19:28 MDT
With the following cmd_alias in the sudoers file, sudo is very slow. 1.6.9 changed from previous release that it search the entire file system to look for the commands. Cmd_Alias SUDO_NOCRUN = ALL, \ !/*/visudo, !/*/*/visudo, !/*/*/*/visudo, !/*/*/*/*/visudo, \ !/*/vi *sudoers*, !/*/*/vi*sudoers*, !/*/*/*/vi *sudoers*, \ !/*/*/*/*/vi *sudoers*, \ !/*/su "", !/*/*/su "", !/*/*/*/su "", \ !/*/su -, !/*/*/su -, !/*/*/*/su-, \ !/*/su *root*, !/*/*/su *root*, !/*/*/*/su *root*, \ !/*/sh, !/*/*/sh, !/*/*/*/sh, \ !/*/ksh, !/*/*/ksh, !/*/*/*/ksh,\ !/*/zsh, !/*/*/zsh, !/*/*/*/zsh,\ !/*/tcsh, !/*/*/tcsh, !/*/*/*/tcsh \ !/*/csh, !/*/*/csh, !/*/*/*/csh \ !/*/nsh, !/*/*/nsh, !/*/*/*/nsh
Please try this 1.6.9p18 pre-release: ftp://ftp.sudo.ws/pub/millert/sudo/sudo-1.6.9p18.tar.gz
sudo 1.6.9p18 has been released and addresses this issue.
Looks like the problem came back on 1.7.0. Which file was the fix in? Maybe I could go look and see if the changes are still there?
You need to add a line like this to sudoers: Defaults fast_glob
Actually, you'll need to upgrade to sudo 1.7.1 or higher to get the fast_glob option.