Check preserve_groups and ignore_ticket args with atobool instead

of assuming they are true if present.

diff --git a/plugins/sudoers/sudoers.c b/plugins/sudoers/sudoers.c
index 6a5645fa9ba1399d12237ea78027f557ab5ea25c..b2862c8f644e9ee3e7a9ce4c64a9a8962ca97227 100644 (file)
--- a/plugins/sudoers/sudoers.c
+++ b/plugins/sudoers/sudoers.c
@@ -1153,11 +1153,13 @@ deserialize_info(char * const settings[], char * const user_info[])
            continue;
        }
        if (MATCHES(*cur, "preserve_groups=")) {
-           SET(flags, MODE_PRESERVE_GROUPS);
+           if (atobool(*cur + sizeof("preserve_groups=") - 1) == TRUE)
+               SET(flags, MODE_PRESERVE_GROUPS);
            continue;
        }
        if (MATCHES(*cur, "ignore_ticket=")) {
-           SET(flags, MODE_IGNORE_TICKET);
+           if (atobool(*cur + sizeof("ignore_ticket=") - 1) == TRUE)
+               SET(flags, MODE_IGNORE_TICKET);
            continue;
        }
        if (MATCHES(*cur, "login_class=")) {