From 96f1ea47014770fc10574fc8c04d5855f8d4f758 Mon Sep 17 00:00:00 2001
From: "Todd C. Miller" <Todd.Miller@courtesan.com>
Date: Mon, 8 Dec 2008 15:02:07 +0000
Subject: [PATCH] Do not short circuit pseudo commands when we get a match
 since, depending on the settings, we may need to examine all commands for
 tags.

---
 parse.c | 3 ---
 1 file changed, 3 deletions(-)

diff --git a/parse.c b/parse.c
index 0d48e4d90..49c8f04f0 100644
--- a/parse.c
+++ b/parse.c
@@ -192,12 +192,9 @@ sudo_file_lookup(nss, validated, pwflag)
 		    if ((pwcheck == any && nopass != TRUE) ||
 			(pwcheck == all && nopass != FALSE))
 			nopass = cs->tags.nopasswd;
-		    if (match == ALLOW)
-			goto matched_pseudo;
 		}
 	    }
 	}
-	matched_pseudo:
 	if (match == ALLOW || user_uid == 0) {
 	    /* User has an entry for this host. */
 	    SET(validated, VALIDATE_OK);
-- 
2.40.0