disable-common.inc: blacklist sudo/doas paths in /etc

Commands used to find the relevant paths in /etc:

    $ pacman -Qo /etc/* 2>/dev/null | grep sudo | LC_ALL=C sort
    /etc/pam.d/ is owned by sudo 1.9.14.p1-1
    /etc/sudo.conf is owned by sudo 1.9.14.p1-1
    /etc/sudo_logsrvd.conf is owned by sudo 1.9.14.p1-1
    /etc/sudoers is owned by sudo 1.9.14.p1-1
    /etc/sudoers.d/ is owned by sudo 1.9.14.p1-1

Environment: Artix Linux.

Also, add missing paths sudo/doas to etc/ids.config and jailcheck.

See also commit dbebd71db ("disable-common.inc: blacklist doas binary",
2022-10-05).

Relates to #5385.

Reported-by: Dieter Plaetinck <dieter@plaetinck.be>

1 files changed, 1 insertions, 0 deletions

diff --git a/src/jailcheck/main.c b/src/jailcheck/main.c
index 27da309ea..93d334c7a 100644
--- a/src/jailcheck/main.c
+++ b/src/jailcheck/main.c
@@ -120,6 +120,7 @@ int main(int argc, char **argv) {
         // basic sysfiles
         sysfiles_setup("/etc/shadow");
         sysfiles_setup("/etc/gshadow");
+        sysfiles_setup("/usr/bin/doas");
         sysfiles_setup("/usr/bin/mount");
         sysfiles_setup("/usr/bin/su");
         sysfiles_setup("/usr/bin/ksu");