Add missing support for converting LOG_INPUT/LOG_OUTPUT tags and

expand support for NOMAIL tags.

diff --git a/plugins/sudoers/ldap_util.c b/plugins/sudoers/ldap_util.c
index 196b0bff3b8b6cca7a4501f38e7c069fd04a52d8..e7ace94690417b82cdd91f5e439cc05134492bac 100644 (file)
--- a/plugins/sudoers/ldap_util.c
+++ b/plugins/sudoers/ldap_util.c
@@ -442,12 +442,17 @@ sudo_ldap_role_to_priv(const char *cn, void *hosts, void *runasusers,
                                cmndspec->tags.nopasswd = op == false;
                            } else if (strcmp(var, "sudoedit_follow") == 0) {
                                cmndspec->tags.follow = op == true;
+                           } else if (strcmp(var, "log_input") == 0) {
+                               cmndspec->tags.log_input = op == true;
+                           } else if (strcmp(var, "log_output") == 0) {
+                               cmndspec->tags.log_output = op == true;
                            } else if (strcmp(var, "noexec") == 0) {
                                cmndspec->tags.noexec = op == true;
                            } else if (strcmp(var, "setenv") == 0) {
                                cmndspec->tags.setenv = op == true;
                            } else if (strcmp(var, "mail_all_cmnds") == 0 ||
-                               strcmp(var, "mail_always") == 0) {
+                               strcmp(var, "mail_always") == 0 ||
+                               strcmp(var, "mail_no_perms") == 0) {
                                cmndspec->tags.send_mail = op == true;
                            } else {
                                handled = false;