In open_cmnd(), return true, not false, if we the /dev/fd/N pathname

is not present.  We don't want to fail a match because of this.

diff --git a/plugins/sudoers/match.c b/plugins/sudoers/match.c
index a1202ea0e2fb9878637093e6df9454b80634daf3..a5a6a5d5540c4e5565055afc8bb680e95881e78c 100644 (file)
--- a/plugins/sudoers/match.c
+++ b/plugins/sudoers/match.c
@@ -539,7 +539,7 @@ open_cmnd(const char *path, const struct sudo_digest *digest, int *fdp)
        snprintf(fdpath, sizeof(fdpath), "/dev/fd/%d", fd);
        if (stat(fdpath, &sb) != 0) {
            close(fd);
-           debug_return_bool(false);
+           debug_return_bool(true);
        }
 
        /*