Re: Supporting sudoUser:!foo in sudo.ldap

Simon Lees <[email protected]> Wed, 15 Dec 2021 14:07:14 +1030
Newsgroups gmane.comp.tools.sudo.devel
Message-ID <[email protected]>
This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--===============6694551061648708802==
Content-Language: en-US
Content-Type: multipart/signed; micalg=pgp-sha256;
 protocol="application/pgp-signature";
 boundary="------------VSa5SwfWR7xDuX0e4Bwia6qy"

This is an OpenPGP/MIME signed message (RFC 4880 and 3156)
--------------VSa5SwfWR7xDuX0e4Bwia6qy
Content-Type: multipart/mixed; boundary="------------1R09Z3x4OYnLWqv6z0sftZSx";
 protected-headers="v1"
From: Simon Lees <[email protected]>
To: "Todd C. Miller" <[email protected]>
Cc: [email protected]
Message-ID: <[email protected]>
Subject: Re: [sudo-workers] Supporting sudoUser:!foo in sudo.ldap
References: <[email protected]>
 <[email protected]>
In-Reply-To: <[email protected]>

--------------1R09Z3x4OYnLWqv6z0sftZSx
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable



On 12/15/21 02:25, Todd C. Miller wrote:
> I think this is worth pursuing.  The question I have is whether
> supporting !username is sufficient.  If we are going to support
> this kind of construct, it should probably mirror the existing query
> that contains uid, groups, gids and netgroups.
>=20
> Does that make sense?

Yep, i'll go back and work on that, Thanks for the feedback.

--=20
Simon Lees (Simotek)                            http://simotek.net

Emergency Update Team                           keybase.io/simotek
SUSE Linux                           Adelaide Australia, UTC+10:30
GPG Fingerprint: 5B87 DB9D 88DC F606 E489 CEC5 0922 C246 02F0 014B

--------------1R09Z3x4OYnLWqv6z0sftZSx--

--------------VSa5SwfWR7xDuX0e4Bwia6qy
Content-Type: application/pgp-signature; name="OpenPGP_signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="OpenPGP_signature"

-----BEGIN PGP SIGNATURE-----

wsB5BAABCAAjFiEED0hBIYMo9ADHKtZgEdQumr4Y/JEFAmG5YuoFAwAAAAAACgkQEdQumr4Y/JHh
pAgAhEGHxkmtyQ2T4TyzaNmQ8P+y2GZyczFdMPolH0c2su67f1Zifpuy5mFMarv0S9t4ls+Tp9MM
lI5/7ghatw1mLBaxCFQPA9IFUveXWnQZ/EYq2Anwggul5BQK60UgvOIp1toJJggSz+aiBNFRf7N2
n1kBJA3gnyAQJHdm6Fo9qhiQQDoIJiBti6NAULMpKGnhLAyByh5gNKVYzC521J1XKEcWL4RjA9Q8
OEjQ9DPvM50lAhZUD72DNnuHQ/TksWf/8E0fwVH+/6EbKLsD3uaXslWJli4aQuuCjfCp4aCgt5zx
NHUJ5f7HyOWWQovVp+4v0jzNu2tHeZ4q7IPNM25tlg==
=P9c5
-----END PGP SIGNATURE-----

--------------VSa5SwfWR7xDuX0e4Bwia6qy--

--===============6694551061648708802==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

____________________________________________________________
sudo-workers mailing list <[email protected]>
For list information, options, or to unsubscribe, visit:
https://www.sudo.ws/mailman/listinfo/sudo-workers

--===============6694551061648708802==--