From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Fri, 31 Aug 2007 00:46:43 +0000 (+0000)
Subject: Propagate the runasspec from one command to the next in a cmndspec.
X-Git-Tag: SUDO_1_7_0~394
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=470a710c3c549681db2339f7557293c4f083a86c;p=sudo

Propagate the runasspec from one command to the next in a cmndspec.
---

diff --git a/gram.y b/gram.y
index 3178ed559..0d965a3a8 100644
--- a/gram.y
+++ b/gram.y
@@ -242,11 +242,15 @@ privilege	:	hostlist '=' cmndspeclist {
 			    struct cmndtag tags;
 			    struct privilege *p = emalloc(sizeof(*p));
 			    struct cmndspec *cs;
-			    LIST2HEAD(p->hostlist, $1);
-			    LIST2HEAD(p->cmndlist, $3);
+
+			    /* propagate tags and runas lists */
 			    tags.nopasswd = tags.noexec = tags.setenv = UNSPEC;
-			    /* propagate tags */
 			    for (cs = $3; cs != NULL; cs = cs->next) {
+				if (LH_EMPTY(cs->runaslist) &&
+				    !LH_EMPTY(cs->prev->runaslist)) {
+				    memcpy(&cs->runaslist, &cs->prev->runaslist,
+					sizeof(cs->runaslist));
+				}
 				if (cs->tags.nopasswd == UNSPEC)
 				    cs->tags.nopasswd = tags.nopasswd;
 				if (cs->tags.noexec == UNSPEC)
@@ -255,6 +259,8 @@ privilege	:	hostlist '=' cmndspeclist {
 				    cs->tags.setenv = tags.setenv;
 				memcpy(&tags, &cs->tags, sizeof(tags));
 			    }
+			    LIST2HEAD(p->hostlist, $1);
+			    LIST2HEAD(p->cmndlist, $3);
 			    p->prev = p;
 			    p->next = NULL;
 			    $$ = p;