From 8bf6d6711f70fd723c5dbd3b8237e3f4ee03204a Mon Sep 17 00:00:00 2001
From: Andrew Vant <andrew.vant@rackspace.com>
Date: Wed, 1 Oct 2014 11:03:54 -0400
Subject: [PATCH] Fixed default permissions for Debian-based distributions.

The code around lines 84 and 91 expects 'specs' to be a list,
but the defaults provide a single string value. This causes
wrong behavior if sudoers:users or sudoers:groups are not
specified in pillar.
---
 sudoers/files/sudoers | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/sudoers/files/sudoers b/sudoers/files/sudoers
index 0b036f9..4bdd546 100644
--- a/sudoers/files/sudoers
+++ b/sudoers/files/sudoers
@@ -11,8 +11,8 @@
     {%- set host_list_defaults = defaults.get('host_list', {}) %}
     {%- set command_list_defaults = defaults.get('command_list', {}) %}
     {%- set runas_list_defaults = defaults.get('runas_list', {}) %}
-    {%- set users = sudoers.get('users', {'root': 'ALL=(ALL:ALL) ALL'}) %}
-    {%- set groups = sudoers.get('groups', {'sudo': 'ALL=(ALL:ALL) ALL'}) %}
+    {%- set users = sudoers.get('users', {'root': ['ALL=(ALL:ALL) ALL']}) %}
+    {%- set groups = sudoers.get('groups', {'sudo': ['ALL=(ALL:ALL) ALL']}) %}
   {%- else %}
     {%- set defaults = sudoers.get('defaults', {}) %}
     {%- set generic_defaults = defaults.get('generic', []) %}