Skip to content

Wildcard permits more than often intended in argument lists #15

@edneville

Description

@edneville

Users often expect glob-like behaviour from sudoers rules and are surprised when arguments don't behave that way. PR #10 adds regex matching to argument lists. The only work around I know of to prevent * matching other arguments adds complexity and is awkward and doesn't work well with path traversal, that requires a second negation, like so:

user ALL=ALL /bin/cat /var/log/*
user ALL=ALL !/bin/cat /var/log/* *
user ALL=ALL !/bin/cat /var/log/*..*

I feel overall that the problem would be lessened greatly with this patch.

This will close bug 578.

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions