Bug 545684 - sudoers: add user not validate input values for 'host', 'commnads' and 'user'
Summary: sudoers: add user not validate input values for 'host', 'commnads' and 'user'
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: RHQ Project
Classification: Other
Component: Configuration
Version: 1.4
Hardware: All
OS: Linux
low
low
Target Milestone: ---
: ---
Assignee: RHQ Project Maintainer
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks: rhq_triage
TreeView+ depends on / blocked
 
Reported: 2009-12-09 05:04 UTC by Rajan Timaniya
Modified: 2014-05-16 20:12 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2014-05-16 20:12:22 UTC
Embargoed:


Attachments (Terms of Use)

Description Rajan Timaniya 2009-12-09 05:04:26 UTC
Description of problem:
sudoers: add user not validate input values for 'host', 'commnads' and 'user'

Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1. Log into iManage platform with appropriate credential
2. Select appropriate agent and  its sudoers service
3. Click on 'CONFIGURE' tab
4. Click on 'EDIT' and then 'Add New'
5. Input following details:
	User/Group: testboy
	Hosts Alias: all
	Command: all
	Run as User: all
	Tag Specification: No (select 'No')
6. Click on 'OK' button
7. Click on 'SAVE' button
  
Actual results:
The given below line append to /etc/sudoers
testboy all = (all) NOPASSWD : all

Log in as 'testboy' and try to access some command using sudo
	su – testboy
	sudo ls /lost+found
It give the the sudoers file: syntax error
>>> sudoers file: syntax error, line 99 <<<

sudo: parse error in /etc/sudoers near line 99   

Expected results:
Verify that iManage sudoers plugin should validate input values before write to configuration file and give user error/alert message if require

Additional info:

Comment 1 wes hayutin 2010-02-16 16:59:14 UTC
Temporarily adding the keyword "SubBug" so we can be sure we have accounted for all the bugs.

keyword:
new = Tracking + FutureFeature + SubBug

Comment 2 wes hayutin 2010-02-16 17:04:04 UTC
making sure we're not missing any bugs in rhq_triage

Comment 3 Corey Welton 2010-10-05 13:08:25 UTC
Lowering severity/priority - not an enterprise plugin


Note You need to log in before you can comment on or make changes to this bug.