summaryrefslogtreecommitdiffstats
path: root/src/db/sysdb_sudo.c
diff options
context:
space:
mode:
authorPavel Březina <pbrezina@redhat.com>2012-05-11 10:25:54 +0200
committerStephen Gallagher <sgallagh@redhat.com>2012-06-29 11:37:18 -0400
commitf7af8c5b369938725e47585c641ae5b017d442a1 (patch)
treef3cea8ab98f94ad4b10500ece93c25a94abda727 /src/db/sysdb_sudo.c
parent76db25eab9010a33657f35e5afc8477c996df7a3 (diff)
downloadsssd_unused-f7af8c5b369938725e47585c641ae5b017d442a1.tar.gz
sssd_unused-f7af8c5b369938725e47585c641ae5b017d442a1.tar.xz
sssd_unused-f7af8c5b369938725e47585c641ae5b017d442a1.zip
sudo sysdb: add expiration time to the filter
Diffstat (limited to 'src/db/sysdb_sudo.c')
-rw-r--r--src/db/sysdb_sudo.c8
1 files changed, 8 insertions, 0 deletions
diff --git a/src/db/sysdb_sudo.c b/src/db/sysdb_sudo.c
index 586e9588..0f9d9994 100644
--- a/src/db/sysdb_sudo.c
+++ b/src/db/sysdb_sudo.c
@@ -201,6 +201,7 @@ sysdb_get_sudo_filter(TALLOC_CTX *mem_ctx, const char *username,
TALLOC_CTX *tmp_ctx = NULL;
char *filter = NULL;
char *specific_filter = NULL;
+ time_t now;
errno_t ret;
int i;
@@ -264,6 +265,13 @@ sysdb_get_sudo_filter(TALLOC_CTX *mem_ctx, const char *username,
NULL_CHECK(filter, ret, done);
}
+ if (flags & SYSDB_SUDO_FILTER_ONLY_EXPIRED) {
+ now = time(NULL);
+ filter = talloc_asprintf_append(filter, "(&(%s<=%lld))",
+ SYSDB_CACHE_EXPIRE, (long long)now);
+ NULL_CHECK(filter, ret, done);
+ }
+
filter = talloc_strdup_append(filter, ")");
NULL_CHECK(filter, ret, done);