From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Tue, 25 Oct 2011 14:34:31 +0000 (-0400)
Subject: When matching a RunasAlias for a runas group, pass the alias in as
X-Git-Tag: SUDO_1_8_4~179^2
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=6973ed5eb4ff038a5bf2b67357f71c0ee77163bd;p=sudo

When matching a RunasAlias for a runas group, pass the alias in as
the group_list, not the user_list.  From Daniel Kopecek.
---

diff --git a/plugins/sudoers/match.c b/plugins/sudoers/match.c
index 269180011..618c70ad0 100644
--- a/plugins/sudoers/match.c
+++ b/plugins/sudoers/match.c
@@ -211,7 +211,7 @@ _runaslist_matches(struct member_list *user_list, struct member_list *group_list
 		    break;
 		case ALIAS:
 		    if ((a = alias_find(m->name, RUNASALIAS)) != NULL) {
-			rval = _runaslist_matches(&a->members, &empty);
+			rval = _runaslist_matches(&empty, &a->members);
 			if (rval != UNSPEC)
 			    group_matched = m->negated ? !rval : rval;
 			break;