From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Fri, 30 Mar 2001 13:54:27 +0000 (+0000)
Subject: Use stashed user_gid when checking against exempt gid since sudo
X-Git-Tag: SUDO_1_6_4~201
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=4f690695339b14499ce80a43326f6ef4c6032e50;p=sudo

Use stashed user_gid when checking against exempt gid since sudo
sets its gid to a a value that makes sudoers readable.  Previously
if you used gid 0 as the exempt group everyone would be exempt.
From Paul Kranenburg <pk@cs.few.eur.nl>
---

diff --git a/check.c b/check.c
index 8e6071d08..b28cb524f 100644
--- a/check.c
+++ b/check.c
@@ -232,7 +232,7 @@ user_is_exempt()
     if (!(grp = getgrnam(def_str(I_EXEMPT_GROUP))))
 	return(FALSE);
 
-    if (getgid() == grp->gr_gid)
+    if (user_gid == grp->gr_gid)
 	return(TRUE);
 
     for (gr_mem = grp->gr_mem; *gr_mem; gr_mem++) {