-Known bugs in sudo version 1.5.7
+Known bugs in sudo version 1.5.8
================================
1) "make install-man" should substitute correct paths into the
-Installation instructions for CU sudo 1.5.7
+Installation instructions for CU sudo 1.5.8
===========================================
Sudo uses a `configure' script to probe the capabilities and type
now set via the configure script. See below for a list of all the
configure options and their meanings.
-By default, sudo 1.5.7 expects the sudoers file to be mode 0440 and
+By default, sudo 1.5.8 expects the sudoers file to be mode 0440 and
to be owned by user and group 0. This differs from version 1.4 and
below which expected the sudoers file to be mode 0400 and to be
owned by root. Doing a `make install' will set the sudoers file
-to the new mode and group. If sudo 1.5.7 encounters a sudoers file
+to the new mode and group. If sudo 1.5.8 encounters a sudoers file
with the old permissions it will attempt to update it to the new
scheme. You cannot, however, use a sudoers file with the new
permissions with an old sudo binary. It is suggested that if have
#*
-#* CU sudo version 1.5.7 (based on Root Group sudo version 1.1)
+#* CU sudo version 1.5.8 (based on Root Group sudo version 1.1)
#*
#* This software comes with no waranty whatsoever, use at your own risk.
#*
HDRS = sudo.h compat.h version.h insults.h \
ins_2001.h ins_classic.h ins_goons.h ins_csops.h sudo.tab.h
-VERSION = 1.5.7
+VERSION = 1.5.8
DISTFILES = $(SRCS) $(HDRS) BUGS CHANGES COPYING HISTORY INSTALL \
INSTALL.configure TODO PORTING README RUNSON \
-This is the CU version of sudo, release 1.5.7
+This is the CU version of sudo, release 1.5.8
The sudo philosophy
===================
/*
- * CU sudo version 1.5.7 (based on Root Group sudo version 1.1)
+ * CU sudo version 1.5.8 (based on Root Group sudo version 1.1)
*
* This software comes with no waranty whatsoever, use at your own risk.
*
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
-echo "Configuring CU Sudo version 1.5.7"
+echo "Configuring CU Sudo version 1.5.8"
PROGS="sudo visudo"
SUDO_LDFLAGS=""
VISUDO_LDFLAGS=""
dnl
dnl This won't work before AC_INIT()
dnl
-echo "Configuring CU Sudo version 1.5.7"
+echo "Configuring CU Sudo version 1.5.8"
dnl
dnl Variables that get substituted in the Makefile
dnl
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
#define INITIAL 0
#line 2 "parse.lex"
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7 (based on Root Group sudo version 1.1)
+ * CU sudo version 1.5.8 (based on Root Group sudo version 1.1)
*
* This software comes with no waranty whatsoever, use at your own risk.
*
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
%{
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
%{
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7 (based on Root Group sudo version 1.1)
+ * CU sudo version 1.5.8 (based on Root Group sudo version 1.1)
*
* This software comes with no waranty whatsoever, use at your own risk.
*
/*
- * CU sudo version 1.5.7 (based on Root Group sudo version 1.1)
+ * CU sudo version 1.5.8 (based on Root Group sudo version 1.1)
*
* This software comes with no waranty whatsoever, use at your own risk.
*
sudo - execute a command as the superuser
S\bS\bS\bSY\bY\bY\bYN\bN\bN\bNO\bO\bO\bOP\bP\bP\bPS\bS\bS\bSI\bI\bI\bIS\bS\bS\bS
- s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo -\b-\b-\b-V\bV\bV\bV | -\b-\b-\b-h\bh\bh\bh | -\b-\b-\b-l\bl\bl\bl | -\b-\b-\b-v\bv\bv\bv | -\b-\b-\b-k\bk\bk\bk | -\b-\b-\b-s\bs\bs\bs | -\b-\b-\b-H\bH\bH\bH | [ -\b-\b-\b-b\bb\bb\bb ] | [ -\b-\b-\b-p\bp\bp\bp
- prompt ] [ -\b-\b-\b-u\bu\bu\bu username/#uid] _\bc_\bo_\bm_\bm_\ba_\bn_\bd
+ s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo -\b-\b-\b-V\bV\bV\bV | -\b-\b-\b-h\bh\bh\bh | -\b-\b-\b-l\bl\bl\bl | -\b-\b-\b-v\bv\bv\bv | -\b-\b-\b-k\bk\bk\bk | -\b-\b-\b-s\bs\bs\bs | -\b-\b-\b-H\bH\bH\bH | [ -\b-\b-\b-b\bb\bb\bb ] | [ -\b-\b-\b-r\br\br\br
+ realm ] | [ -\b-\b-\b-p\bp\bp\bp prompt ] [ -\b-\b-\b-u\bu\bu\bu username/#uid] _\bc_\bo_\bm_\bm_\ba_\bn_\bd
D\bD\bD\bDE\bE\bE\bES\bS\bS\bSC\bC\bC\bCR\bR\bR\bRI\bI\bI\bIP\bP\bP\bPT\bT\bT\bTI\bI\bI\bIO\bO\bO\bON\bN\bN\bN
s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo allows a permitted user to execute a _\bc_\bo_\bm_\bm_\ba_\bn_\bd as the
-5/Nov/98 1.5.7 1
+17/Jan/99 1.5.8 1
-b option you cannot use shell job control to
manipulate the command.
+ -r The -r (_\br_\be_\ba_\bl_\bm) option is only available if s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo was
+ configured with K\bK\bK\bKe\be\be\ber\br\br\brb\bb\bb\bbe\be\be\ber\br\br\bro\bo\bo\bos\bs\bs\bs version 5 support. It allows
+ the user to specify a K\bK\bK\bKe\be\be\ber\br\br\brb\bb\bb\bbe\be\be\ber\br\br\bro\bo\bo\bos\bs\bs\bs realm other than the
+ system default to use when authenticating the user via
+ K\bK\bK\bKe\be\be\ber\br\br\brb\bb\bb\bbe\be\be\ber\br\br\bro\bo\bo\bos\bs\bs\bs.
+
-p The -p (_\bp_\br_\bo_\bm_\bp_\bt) option allows you to override the
default password prompt and use a custom one. If the
password prompt contains the %u escape, %u will be
s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo will also remove the IFS, ENV, BASH_ENV and KRB_CONF
variables as they too can pose a threat.
- To prevent command spoofing, s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo checks "." and "" (both
- denoting current directory) last when searching for a
- command in the user's PATH (if one or both are in the
- PATH). Note, however, that the actual PATH environment
- variable is _\bn_\bo_\bt modified and is passed unchanged to the
-
-5/Nov/98 1.5.7 2
+17/Jan/99 1.5.8 2
sudo(8) MAINTENANCE COMMANDS sudo(8)
+ To prevent command spoofing, s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo checks "." and "" (both
+ denoting current directory) last when searching for a
+ command in the user's PATH (if one or both are in the
+ PATH). Note, however, that the actual PATH environment
+ variable is _\bn_\bo_\bt modified and is passed unchanged to the
program that s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo executes.
For security reasons, if your OS supports shared
SUDO_PS1 If set, PS1 will be set to its value
-A\bA\bA\bAU\bU\bU\bUT\bT\bT\bTH\bH\bH\bHO\bO\bO\bOR\bR\bR\bRS\bS\bS\bS
- Many people have worked on s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo over the years, this
- version consists of code written primarily by:
-
-
-5/Nov/98 1.5.7 3
+17/Jan/99 1.5.8 3
sudo(8) MAINTENANCE COMMANDS sudo(8)
+A\bA\bA\bAU\bU\bU\bUT\bT\bT\bTH\bH\bH\bHO\bO\bO\bOR\bR\bR\bRS\bS\bS\bS
+ Many people have worked on s\bs\bs\bsu\bu\bu\bud\bd\bd\bdo\bo\bo\bo over the years, this
+ version consists of code written primarily by:
+
Jeff Nieusma
David Hieb
Todd Miller
-
-
-
-
-5/Nov/98 1.5.7 4
+17/Jan/99 1.5.8 4
-5/Nov/98 1.5.7 5
+17/Jan/99 1.5.8 5
/*
- * CU sudo version 1.5.7 (based on Root Group sudo version 1.1)
+ * CU sudo version 1.5.8 (based on Root Group sudo version 1.1)
*
* This software comes with no waranty whatsoever, use at your own risk.
*
''' $RCSfile$$Revision$$Date$
'''
''' $Log$
-''' Revision 1.26 1999/01/17 21:31:37 millert
-''' regen based on sudo.pod, sudoers.pod, and visudo.pod
+''' Revision 1.27 1999/01/17 22:40:53 millert
+''' crank version and regen files
'''
'''
.de Sh
.nr % 0
.rr F
.\}
-.TH sudo 8 "1.5.7" "5/Nov/98" "MAINTENANCE COMMANDS"
+.TH sudo 8 "1.5.8" "17/Jan/99" "MAINTENANCE COMMANDS"
.UC
.if n .hy 0
.if n .na
sudo \- execute a command as the superuser
.SH "SYNOPSIS"
\fBsudo\fR \fB\-V\fR | \fB\-h\fR | \fB\-l\fR | \fB\-v\fR | \fB\-k\fR | \fB\-s\fR | \fB\-H\fR |
-[ \fB\-b\fR ] | [ \fB\-p\fR prompt ] [ \fB\-u\fR username/#uid] \fIcommand\fR
+[ \fB\-b\fR ] | [ \fB\-r\fR realm ] | [ \fB\-p\fR prompt ] [ \fB\-u\fR username/#uid] \fIcommand\fR
.SH "DESCRIPTION"
\fBsudo\fR allows a permitted user to execute a \fIcommand\fR
as the superuser (real and effective uid and gid are set
The \f(CW-b\fR (\fIbackground\fR) option tells \fBsudo\fR to run the given
command in the background. Note that if you use the \f(CW-b\fR
option you cannot use shell job control to manipulate the command.
+.Ip "-r" 4
+The \f(CW-r\fR (\fIrealm\fR) option is only available if \fBsudo\fR was configured
+with \fBKerberos\fR version 5 support. It allows the user to specify a
+\fBKerberos\fR realm other than the system default to use when authenticating
+the user via \fBKerberos\fR.
.Ip "-p" 4
The \f(CW-p\fR (\fIprompt\fR) option allows you to override the default
password prompt and use a custom one. If the password prompt
.IX Item "-b"
+.IX Item "-r"
+
.IX Item "-p"
.IX Item "-u"
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
-17/Oct/98 1.5.7 1
+6/Feb/98 1.5.8 1
-17/Oct/98 1.5.7 2
+6/Feb/98 1.5.8 2
-17/Oct/98 1.5.7 3
+6/Feb/98 1.5.8 3
-17/Oct/98 1.5.7 4
+6/Feb/98 1.5.8 4
-17/Oct/98 1.5.7 5
+6/Feb/98 1.5.8 5
-17/Oct/98 1.5.7 6
+6/Feb/98 1.5.8 6
''' $RCSfile$$Revision$$Date$
'''
''' $Log$
-''' Revision 1.4 1999/01/17 21:31:37 millert
-''' regen based on sudo.pod, sudoers.pod, and visudo.pod
+''' Revision 1.5 1999/01/17 22:40:53 millert
+''' crank version and regen files
'''
'''
.de Sh
.nr % 0
.rr F
.\}
-.TH sudoers 5 "1.5.7" "17/Oct/98" "FILE FORMATS"
+.TH sudoers 5 "1.5.8" "6/Feb/98" "FILE FORMATS"
.UC
.if n .hy 0
.if n .na
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
#ifndef _SUDO_VERSION_H
#define _SUDO_VERSION_H
-static const char version[] = "1.5.7";
+static const char version[] = "1.5.8";
#endif /* _SUDO_VERSION_H */
/*
- * CU sudo version 1.5.7
+ * CU sudo version 1.5.8
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
-17/Oct/98 1.5.7 1
+17/Oct/98 1.5.8 1
-17/Oct/98 1.5.7 2
+17/Oct/98 1.5.8 2
-17/Oct/98 1.5.7 3
+17/Oct/98 1.5.8 3
''' $RCSfile$$Revision$$Date$
'''
''' $Log$
-''' Revision 1.3 1999/01/17 21:31:37 millert
-''' regen based on sudo.pod, sudoers.pod, and visudo.pod
+''' Revision 1.4 1999/01/17 22:40:55 millert
+''' crank version and regen files
'''
'''
.de Sh
.nr % 0
.rr F
.\}
-.TH visudo 8 "1.5.7" "17/Oct/98" "MAINTENANCE COMMANDS"
+.TH visudo 8 "1.5.8" "17/Oct/98" "MAINTENANCE COMMANDS"
.UC
.if n .hy 0
.if n .na