From: Todd C. Miller <Todd.Miller@sudo.ws>
Date: Fri, 2 Mar 2018 18:12:14 +0000 (-0700)
Subject: Add missing support for converting LOG_INPUT/LOG_OUTPUT tags and
X-Git-Tag: SUDO_1_8_23^2~96
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=8c7f3e791ca2ba86cef977b17a9943509ae49c77;p=sudo

Add missing support for converting LOG_INPUT/LOG_OUTPUT tags and
expand support for NOMAIL tags.
---

diff --git a/plugins/sudoers/ldap_util.c b/plugins/sudoers/ldap_util.c
index 196b0bff3..e7ace9469 100644
--- a/plugins/sudoers/ldap_util.c
+++ b/plugins/sudoers/ldap_util.c
@@ -442,12 +442,17 @@ sudo_ldap_role_to_priv(const char *cn, void *hosts, void *runasusers,
 				cmndspec->tags.nopasswd = op == false;
 			    } else if (strcmp(var, "sudoedit_follow") == 0) {
 				cmndspec->tags.follow = op == true;
+			    } else if (strcmp(var, "log_input") == 0) {
+				cmndspec->tags.log_input = op == true;
+			    } else if (strcmp(var, "log_output") == 0) {
+				cmndspec->tags.log_output = op == true;
 			    } else if (strcmp(var, "noexec") == 0) {
 				cmndspec->tags.noexec = op == true;
 			    } else if (strcmp(var, "setenv") == 0) {
 				cmndspec->tags.setenv = op == true;
 			    } else if (strcmp(var, "mail_all_cmnds") == 0 ||
-				strcmp(var, "mail_always") == 0) {
+				strcmp(var, "mail_always") == 0 ||
+				strcmp(var, "mail_no_perms") == 0) {
 				cmndspec->tags.send_mail = op == true;
 			    } else {
 				handled = false;