diff options
| author | Pavel Březina <pbrezina@redhat.com> | 2012-05-11 10:25:54 +0200 |
|---|---|---|
| committer | Stephen Gallagher <sgallagh@redhat.com> | 2012-06-29 11:37:18 -0400 |
| commit | f7af8c5b369938725e47585c641ae5b017d442a1 (patch) | |
| tree | f3cea8ab98f94ad4b10500ece93c25a94abda727 /src/db | |
| parent | 76db25eab9010a33657f35e5afc8477c996df7a3 (diff) | |
| download | sssd_unused-f7af8c5b369938725e47585c641ae5b017d442a1.tar.gz sssd_unused-f7af8c5b369938725e47585c641ae5b017d442a1.tar.xz sssd_unused-f7af8c5b369938725e47585c641ae5b017d442a1.zip | |
sudo sysdb: add expiration time to the filter
Diffstat (limited to 'src/db')
| -rw-r--r-- | src/db/sysdb_sudo.c | 8 | ||||
| -rw-r--r-- | src/db/sysdb_sudo.h | 1 |
2 files changed, 9 insertions, 0 deletions
diff --git a/src/db/sysdb_sudo.c b/src/db/sysdb_sudo.c index 586e9588..0f9d9994 100644 --- a/src/db/sysdb_sudo.c +++ b/src/db/sysdb_sudo.c @@ -201,6 +201,7 @@ sysdb_get_sudo_filter(TALLOC_CTX *mem_ctx, const char *username, TALLOC_CTX *tmp_ctx = NULL; char *filter = NULL; char *specific_filter = NULL; + time_t now; errno_t ret; int i; @@ -264,6 +265,13 @@ sysdb_get_sudo_filter(TALLOC_CTX *mem_ctx, const char *username, NULL_CHECK(filter, ret, done); } + if (flags & SYSDB_SUDO_FILTER_ONLY_EXPIRED) { + now = time(NULL); + filter = talloc_asprintf_append(filter, "(&(%s<=%lld))", + SYSDB_CACHE_EXPIRE, (long long)now); + NULL_CHECK(filter, ret, done); + } + filter = talloc_strdup_append(filter, ")"); NULL_CHECK(filter, ret, done); diff --git a/src/db/sysdb_sudo.h b/src/db/sysdb_sudo.h index 4a392675..b8ed2bc4 100644 --- a/src/db/sysdb_sudo.h +++ b/src/db/sysdb_sudo.h @@ -53,6 +53,7 @@ #define SYSDB_SUDO_FILTER_UID 0x02 /* uid */ #define SYSDB_SUDO_FILTER_GROUPS 0x04 /* groups */ #define SYSDB_SUDO_FILTER_NGRS 0x08 /* netgroups */ +#define SYSDB_SUDO_FILTER_ONLY_EXPIRED 0x10 /* only expired */ #define SYSDB_SUDO_FILTER_INCLUDE_ALL 0x20 /* ALL */ #define SYSDB_SUDO_FILTER_INCLUDE_DFL 0x40 /* include cn=default */ #define SYSDB_SUDO_FILTER_USERINFO SYSDB_SUDO_FILTER_USERNAME \ |