From: Todd C. Miller <Todd.Miller@courtesan.com>
Date: Mon, 8 Dec 2008 15:02:07 +0000 (+0000)
Subject: Do not short circuit pseudo commands when we get a match since, depending
X-Git-Tag: SUDO_1_7_0~6
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=96f1ea47014770fc10574fc8c04d5855f8d4f758;p=sudo

Do not short circuit pseudo commands when we get a match since, depending
on the settings, we may need to examine all commands for tags.
---

diff --git a/parse.c b/parse.c
index 0d48e4d90..49c8f04f0 100644
--- a/parse.c
+++ b/parse.c
@@ -192,12 +192,9 @@ sudo_file_lookup(nss, validated, pwflag)
 		    if ((pwcheck == any && nopass != TRUE) ||
 			(pwcheck == all && nopass != FALSE))
 			nopass = cs->tags.nopasswd;
-		    if (match == ALLOW)
-			goto matched_pseudo;
 		}
 	    }
 	}
-	matched_pseudo:
 	if (match == ALLOW || user_uid == 0) {
 	    /* User has an entry for this host. */
 	    SET(validated, VALIDATE_OK);