Use stashed user_gid when checking against exempt gid since sudo

sets its gid to a a value that makes sudoers readable.  Previously
if you used gid 0 as the exempt group everyone would be exempt.
From Paul Kranenburg <pk@cs.few.eur.nl>

diff --git a/check.c b/check.c
index 8e6071d0848fe056c0a7b0dc52d32cc0abc63543..b28cb524f3ba195a4c542dbe88451d52ffc6d274 100644 (file)
--- a/check.c
+++ b/check.c
@@ -232,7 +232,7 @@ user_is_exempt()
     if (!(grp = getgrnam(def_str(I_EXEMPT_GROUP))))
        return(FALSE);
 
-    if (getgid() == grp->gr_gid)
+    if (user_gid == grp->gr_gid)
        return(TRUE);
 
     for (gr_mem = grp->gr_mem; *gr_mem; gr_mem++) {