User can always specify a login class if he/she is already root.

diff --git a/sudo.c b/sudo.c
index 224f6a2d7406060b076ff30d71b96ebf9a411bd9..faee77df4423ee2cf4eb3bdf9d339cdc1a90f5e5 100644 (file)
--- a/sudo.c
+++ b/sudo.c
@@ -1085,7 +1085,7 @@ set_loginclass(pw)
     login_cap_t *lc;
 
     if (login_class && strcmp(login_class, "-") != 0) {
-       if (strcmp(*user_runas, "root") != 0) {
+       if (strcmp(*user_runas, "root") != 0 && user_uid != 0) {
            (void) fprintf(stderr, "%s: only root can use -c %s\n",
                Argv[0], login_class);
            exit(1);