sudo_pair
sudo_pair copied to clipboard
Wishlist: resolve group names
For maintainability I'd love to be able to specify group names in addition to GIDs for gids_exempted.
My rust-foo is superficial at best but I'm thinking this should be doable by extending is_sudoing_from_exempted_gid() , what do you think?
I would name this groups_exempted, since gids_exempted is a Vec<gid_t>. In the options parser, you could just do groupname => gid lookups and add them to gids_exempted.
If a groupname is not found, it should not error out.
Is this still something you guys are interested in? I have a PR open, but I'd like feedback from you on use before I merge it.
Sorry for completely missing these updates! We're working around this now by resolving group -> gid at deployment time, but from a maintainability perspective this would still be good to have. Thanks!