Bug 709 - allow full Runas_Spec to be used for runas_default
allow full Runas_Spec to be used for runas_default
Status: NEW
Product: Sudo
Classification: Unclassified
Component: Sudoers
1.8.14
All All
: low enhancement
Assigned To: Todd C. Miller
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2015-07-24 16:14 MDT by Christoph Anton Mitterer
Modified: 2015-07-24 16:14 MDT (History)
0 users

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Christoph Anton Mitterer 2015-07-24 16:14:00 MDT
Hi.

Right now it seems that for the option runas_default only a username can be specified.
I.e. it doesn't work to set e.g.
runas_default=:root   (and have just the group changed to root)
or
runas_default=foo:bar

instead would e.g. complain that there's no user ":root".


The native meaning of runas_default would/should IMHO imply that one can actually set a true Runas_Spec, i.e. completely control the default of both -u and -g if neither of them is specified.

Could this possibly implemented? :-)


Best wishes,
Chris.