Do not short circuit pseudo commands when we get a match since, depending

on the settings, we may need to examine all commands for tags.

diff --git a/parse.c b/parse.c
index 0d48e4d902b59c112422a65656ddf86ade7a9d06..49c8f04f0e103430ce6dc1090db4ac8a19810ead 100644 (file)
--- a/parse.c
+++ b/parse.c
@@ -192,12 +192,9 @@ sudo_file_lookup(nss, validated, pwflag)
                    if ((pwcheck == any && nopass != TRUE) ||
                        (pwcheck == all && nopass != FALSE))
                        nopass = cs->tags.nopasswd;
-                   if (match == ALLOW)
-                       goto matched_pseudo;
                }
            }
        }
-       matched_pseudo:
        if (match == ALLOW || user_uid == 0) {
            /* User has an entry for this host. */
            SET(validated, VALIDATE_OK);