uid match not working in sudoers file

Bug #1319403 reported by Dani Ametller
24
This bug affects 3 people
Affects Status Importance Assigned to Milestone
sudo
Unknown
Unknown
sudo (Ubuntu)
Fix Released
Medium
Unassigned
Trusty
Fix Released
Medium
Brian Murray
Utopic
Won't Fix
Medium
Unassigned

Bug Description

[Impact]

sudo 1.8.9p5 had a bug which caused any rule added to sudoers to be ignored if the user was stated by user id (with the username works just fine).

[Test Case]

* Rules using user id should work after the fix.

#33 ALL = NOPASSWD: /usr/bin/whatever

* Also make sure that rules using username still work.

myusername ALL = NOPASSWD: /usr/bin/whatever

[Regression Potential]

This bug has been fixed in the current stable release of sudo (1.8.10p3).

You can check the original bug report (and patch) here: http://www.sudo.ws/bugs/show_bug.cgi?id=640

Revision history for this message
Launchpad Janitor (janitor) wrote :

Status changed to 'Confirmed' because the bug affects multiple users.

Changed in sudo (Ubuntu):
status: New → Confirmed
tags: added: trusty
tags: added: utopic
Revision history for this message
Marc Deslauriers (mdeslaur) wrote :
Changed in sudo (Ubuntu Trusty):
status: New → Confirmed
summary: - add sudoer rule by userid (#uid)
+ uid match not working in sudoers file
Changed in sudo (Ubuntu Trusty):
milestone: none → ubuntu-14.04.1
Changed in sudo (Ubuntu Trusty):
milestone: ubuntu-14.04.1 → ubuntu-14.04.2
Changed in sudo (Ubuntu):
importance: Undecided → Medium
Changed in sudo (Ubuntu Trusty):
importance: Undecided → Medium
Changed in sudo (Ubuntu Utopic):
importance: Undecided → Medium
Mathew Hodson (mhodson)
Changed in sudo (Ubuntu Trusty):
milestone: ubuntu-14.04.2 → none
Changed in sudo (Ubuntu):
status: Confirmed → Triaged
Changed in sudo (Ubuntu Trusty):
status: Confirmed → Triaged
Changed in sudo (Ubuntu Utopic):
status: Confirmed → Triaged
Mathew Hodson (mhodson)
description: updated
Changed in sudo (Ubuntu Utopic):
status: Triaged → Won't Fix
Changed in sudo (Ubuntu Trusty):
milestone: none → trusty-updates
Changed in sudo (Ubuntu):
status: Triaged → Fix Released
Changed in sudo (Ubuntu Trusty):
status: Triaged → In Progress
assignee: nobody → Brian Murray (brian-murray)
Revision history for this message
Brian Murray (brian-murray) wrote :

I've uploaded this to the trusty queue for review by the SRU team.

Revision history for this message
Brian Murray (brian-murray) wrote : Please test proposed package

Hello Dani, or anyone else affected,

Accepted sudo into trusty-proposed. The package will build now and be available at https://launchpad.net/ubuntu/+source/sudo/1.8.9p5-1ubuntu1.2 in a few hours, and then in the -proposed repository.

Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users.

If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision.

Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance!

Changed in sudo (Ubuntu Trusty):
status: In Progress → Fix Committed
tags: added: verification-needed
Revision history for this message
Simon Déziel (sdeziel) wrote :

UID confirmed to work now, thanks.

tags: added: verification-done
removed: verification-needed
Revision history for this message
Mark Huijgen (mark-sf-net) wrote :

New version sudo 1.8.9p5-1ubuntu1.2 fixes the UID problem for me as well on Trusty.

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package sudo - 1.8.9p5-1ubuntu1.2

---------------
sudo (1.8.9p5-1ubuntu1.2) trusty-proposed; urgency=medium

  * Ensure uid matching works in the sudoers file. (LP: #1319403)

 -- Brian Murray <email address hidden> Wed, 26 Aug 2015 16:59:47 -0700

Changed in sudo (Ubuntu Trusty):
status: Fix Committed → Fix Released
Revision history for this message
Chris Halse Rogers (raof) wrote : Update Released

The verification of the Stable Release Update for sudo has completed successfully and the package has now been released to -updates. Subsequently, the Ubuntu Stable Release Updates Team is being unsubscribed and will not receive messages about this bug report. In the event that you encounter a regression using the package from -updates please report a new bug using ubuntu-bug and tag the bug report regression-update so we can easily find any regressions.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.