From 7c9580971916c08286543d7f7ead0c07ff145d17 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@courtesan.com>
Date: Sun, 28 Apr 1996 21:12:45 +0000
Subject: [PATCH] runas_matches is now set to false if we get a negative match

---
 parse.yacc | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

diff --git a/parse.yacc b/parse.yacc
index bc3c78d45..0c2514dc7 100644
--- a/parse.yacc
+++ b/parse.yacc
@@ -156,7 +156,7 @@ void yyerror(s)
 %token <tok>	 ':' '=' ',' '!' '.'	/* union member tokens */
 %token <tok>	 ERROR
 
-%type <BOOLEAN>	  cmnd
+%type <BOOLEAN>	 cmnd
 %type <BOOLEAN>	 runasspec
 %type <BOOLEAN>	 runaslist 
 %type <BOOLEAN>	 runasuser
@@ -252,13 +252,15 @@ opcmnd		:  cmnd { ; }
 			    else if (cmnd_matched == FALSE)
 				cmnd_matches = TRUE;
 			}
-		|	runasspec {;}
-		|	nopassreq {;}
+		|	runasspec { ; }
+		|	nopassreq { ; }
 		;
 
 runasspec	: 	RUNAS runaslist chkcmnd {
 			    if ($2 > 0 && $3 == TRUE) 
 				runas_matches = TRUE;
+			    else
+				runas_matches = FALSE;
 			}
 
 runaslist	:	runasuser {
-- 
2.40.0