]>
granicus.if.org Git - sudo/log
Todd C. Miller [Wed, 4 Aug 2010 13:58:50 +0000 (09:58 -0400)]
Reference count cached passwd and group structs. The cache holds
one reference itself and another is added by sudo_getgr{gid,nam}
and sudo_getpw{uid,nam}. The final ref on the runas and user passwd
and group structs are persistent for now.
Todd C. Miller [Wed, 4 Aug 2010 12:42:05 +0000 (08:42 -0400)]
fix typo
Todd C. Miller [Tue, 3 Aug 2010 19:16:57 +0000 (15:16 -0400)]
Do not produce a warning for "sudo -k" if the ticket file does not
exist.
Todd C. Miller [Tue, 3 Aug 2010 19:15:45 +0000 (15:15 -0400)]
Instead of caching struct passwd and struct group in the red-black
tree, store a struct cache_item which includes both the key and
datum. This allows us to user the actual name that was looked up
as the key instead of the contents of struct passwd or struct group.
This matters because the name in the database may not match what
we looked up, due either to case folding or truncation (historically
at 8 characters). Also mark the disabled calls to sudo_freepwcache()
and sudo_freegrcache() as broken since we use cached data for things
like set_perms() and the logging functions. Fixing this would
require making a copy of the structs for user and runas or adding
a reference count (better).
Todd C. Miller [Tue, 3 Aug 2010 19:10:56 +0000 (15:10 -0400)]
Fix path to mkinstalldirs
Todd C. Miller [Tue, 3 Aug 2010 15:17:56 +0000 (11:17 -0400)]
Quiet gcc warnings on glibc systems that use warn_unused_result for
write(2) and others.
Todd C. Miller [Mon, 2 Aug 2010 22:17:51 +0000 (18:17 -0400)]
Add %option noinput
Todd C. Miller [Mon, 2 Aug 2010 19:32:06 +0000 (15:32 -0400)]
Add cross-compile defaults for remaining AC_TRY_RUN usage.
Also add back getgroups() check since AC_FUNC_GETGROUPS defaults
to "no" when cross-compiling.
Todd C. Miller [Sun, 1 Aug 2010 01:19:46 +0000 (21:19 -0400)]
Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN
Use AC_TYPE_LONG_LONG_INT and AC_CHECK_SIZEOF([long int]) instead
of rolling our own.
Todd C. Miller [Thu, 29 Jul 2010 14:25:08 +0000 (10:25 -0400)]
Update to latest version
Todd C. Miller [Wed, 28 Jul 2010 21:52:54 +0000 (17:52 -0400)]
Let pp determine pp_aix_version itself.
Todd C. Miller [Wed, 28 Jul 2010 20:34:11 +0000 (16:34 -0400)]
Add support for Ubuntu admin flag file and enable it when building
Ubuntu packages.
Todd C. Miller [Wed, 28 Jul 2010 20:28:14 +0000 (16:28 -0400)]
Add commented out SuSE-like targetpw settings
Todd C. Miller [Wed, 28 Jul 2010 20:27:45 +0000 (16:27 -0400)]
Only try to use +DAportable for non-GCC on hppa
Todd C. Miller [Wed, 28 Jul 2010 13:24:55 +0000 (09:24 -0400)]
Prevent configure from adding the -g flag unless in devel mode
Todd C. Miller [Tue, 27 Jul 2010 22:22:47 +0000 (18:22 -0400)]
Go back to sudo-flavor to match existing packages and only use an
underscore for those that need it.
Todd C. Miller [Tue, 27 Jul 2010 22:17:36 +0000 (18:17 -0400)]
Use sudo_$flavor instead of sudo-$flavor since that causes the
least amount of trouble for the various package managers.
Todd C. Miller [Tue, 27 Jul 2010 22:10:34 +0000 (18:10 -0400)]
Fix handling of the ldap flavor
Remove destdir unless --debug was specified
Make distclean before running configure if there is a Makefile present
Todd C. Miller [Tue, 27 Jul 2010 18:51:15 +0000 (14:51 -0400)]
Add back include file.
Todd C. Miller [Tue, 27 Jul 2010 18:49:53 +0000 (14:49 -0400)]
Pass extra args on to configure
on HP-UX, if we don't have the HP C compiler, disable zlib to
prevent gcc from finding it in /usr/local/lib.
Todd C. Miller [Tue, 27 Jul 2010 18:26:59 +0000 (14:26 -0400)]
Use the HP ANSI C compiler on HP-UX if possible
Todd C. Miller [Tue, 27 Jul 2010 14:48:35 +0000 (10:48 -0400)]
Some getline() implementations (FreeBSD 8.0) do not ignore the
length pointer when the line pointer is NULL as they should.
Todd C. Miller [Tue, 27 Jul 2010 14:12:24 +0000 (10:12 -0400)]
Don't need to check for *cp being non-zero, isdigit() will do that.
Todd C. Miller [Tue, 27 Jul 2010 13:49:54 +0000 (09:49 -0400)]
Add setlocale() so the command line arguments that use floating
point work in different locales. Since sudo now logs the timing
data in the C locale we must Parse the seconds in the timing file
manually instead of using strtod(). Furthermore, sudo 1.7.3 logged
the number of seconds with the user's locale so if the decimal point
is not '.' try using the locale-specific version.
Todd C. Miller [Tue, 27 Jul 2010 13:45:20 +0000 (09:45 -0400)]
Do I/O logging in the C locale so the floating point numbers in the
timing file are not locale-dependent.
Todd C. Miller [Tue, 27 Jul 2010 11:50:43 +0000 (07:50 -0400)]
Use errorx() not error() for thingsthat don't set errno.
Todd C. Miller [Mon, 26 Jul 2010 19:30:42 +0000 (15:30 -0400)]
Better support for 1.2.3 style versions in Tru64 kits
Todd C. Miller [Mon, 26 Jul 2010 19:30:36 +0000 (15:30 -0400)]
Add Tru64 kit support
Todd C. Miller [Mon, 26 Jul 2010 19:00:34 +0000 (15:00 -0400)]
Remove apparently unnecessary use of sudo
Todd C. Miller [Mon, 26 Jul 2010 18:26:54 +0000 (14:26 -0400)]
Create timedir as part of install-dirs target.
Todd C. Miller [Mon, 26 Jul 2010 17:04:11 +0000 (13:04 -0400)]
Handle ENXIO from read/write which can occur when reading/writing
a pty that has gone away.
Todd C. Miller [Mon, 26 Jul 2010 16:34:42 +0000 (12:34 -0400)]
sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
Todd C. Miller [Mon, 26 Jul 2010 15:34:56 +0000 (11:34 -0400)]
platform is a pp flag not a variable
Todd C. Miller [Mon, 26 Jul 2010 15:15:50 +0000 (11:15 -0400)]
Add simple arg parsing for mkpkg so we can set debug, flavor or platform.
Todd C. Miller [Mon, 26 Jul 2010 15:14:04 +0000 (11:14 -0400)]
Make rpm backend work on AIX 5.x
Todd C. Miller [Sun, 25 Jul 2010 17:12:49 +0000 (13:12 -0400)]
Add commented out Defaults entry for log_output
Todd C. Miller [Fri, 23 Jul 2010 16:22:10 +0000 (12:22 -0400)]
Remove sudo docdir completely
Todd C. Miller [Fri, 23 Jul 2010 16:21:22 +0000 (12:21 -0400)]
Add sample sudo.conf
Todd C. Miller [Thu, 22 Jul 2010 11:58:02 +0000 (07:58 -0400)]
Add PACKAGE_TARNAME for docdir
Todd C. Miller [Fri, 23 Jul 2010 15:26:18 +0000 (11:26 -0400)]
Pass install-sh -b~ here too.
Todd C. Miller [Fri, 23 Jul 2010 15:23:53 +0000 (11:23 -0400)]
Install binary files with -b~ to make a backup.
Fixes "text file busy" error on HP-UX during install.
Todd C. Miller [Fri, 23 Jul 2010 15:22:44 +0000 (11:22 -0400)]
"mv -f" on HP-UX doesn't unlink the destination first so add
an explicit rm before moving the temporary into place.
Todd C. Miller [Fri, 23 Jul 2010 13:33:19 +0000 (09:33 -0400)]
Some more ${foo} -> $(foo) conversion for consistent Makefiles.
Todd C. Miller [Fri, 23 Jul 2010 13:12:03 +0000 (09:12 -0400)]
Install sudoers2ldif in the doc dir
Todd C. Miller [Thu, 22 Jul 2010 22:44:48 +0000 (18:44 -0400)]
Add missing include of maillock.h for Solaris
Todd C. Miller [Thu, 22 Jul 2010 21:50:21 +0000 (17:50 -0400)]
Change the default syslog facility from local2 to authpriv (or auth
if the operating system doesn't support authpriv).
Todd C. Miller [Thu, 22 Jul 2010 17:47:32 +0000 (13:47 -0400)]
Install sudoers as /etc/sudoers on RPM and debian systems where the
package manager will not replace a user-modified configuration file.
This fixes upgrades from the vendor sudo packages.
Todd C. Miller [Thu, 22 Jul 2010 17:42:59 +0000 (13:42 -0400)]
RPM: use %config(noreplace) instead of %config for volatile This
results in the new file being installed with a .rpmnew suffix instead
of the file being replaced and the old one renamed with a .rpmsave
suffix.
Todd C. Miller [Wed, 21 Jul 2010 20:01:16 +0000 (16:01 -0400)]
Include time.h for struct timeval
Todd C. Miller [Wed, 21 Jul 2010 19:57:37 +0000 (15:57 -0400)]
The return value of strsignal() may be const and should be treated
as const regardless.
Todd C. Miller [Wed, 21 Jul 2010 19:19:56 +0000 (15:19 -0400)]
Mention that 127.0.0.1 will not match, nor will localhost unless
that is the actual host name.
Todd C. Miller [Wed, 21 Jul 2010 19:00:14 +0000 (15:00 -0400)]
Rename WHATSNEW -> NEWS
Todd C. Miller [Wed, 21 Jul 2010 18:54:46 +0000 (14:54 -0400)]
Updated pp with latest patches
Todd C. Miller [Wed, 21 Jul 2010 14:17:57 +0000 (10:17 -0400)]
Sync with 1.7.4
Todd C. Miller [Wed, 21 Jul 2010 13:51:43 +0000 (09:51 -0400)]
Add commented out line to add HOME to env_keep and add a warning
to the note about the HOME change in UPGRADE.
Todd C. Miller [Tue, 20 Jul 2010 19:34:30 +0000 (15:34 -0400)]
Add LINE_MAX define for those without it.
Todd C. Miller [Tue, 20 Jul 2010 17:20:53 +0000 (13:20 -0400)]
The tty_tickets option is now on by default.
Todd C. Miller [Tue, 20 Jul 2010 16:44:52 +0000 (12:44 -0400)]
Mention that AIX authdb support has been fixed.
Todd C. Miller [Tue, 20 Jul 2010 16:40:37 +0000 (12:40 -0400)]
setauthdb() only sets the "old" registry if it was set by a previous
call to setauthdb(). To restore the original value, passing NULL
(or an empty string) to setauthdb() is sufficient.
Todd C. Miller [Mon, 19 Jul 2010 19:35:47 +0000 (15:35 -0400)]
Reset HOME when env_reset is enabled unless it is in env_keep
Todd C. Miller [Mon, 19 Jul 2010 18:12:03 +0000 (14:12 -0400)]
The default for set_logname has been "true" for some time now.
Todd C. Miller [Mon, 19 Jul 2010 16:55:27 +0000 (12:55 -0400)]
Add missing include of time.h
Todd C. Miller [Mon, 19 Jul 2010 16:54:30 +0000 (12:54 -0400)]
Fix check for dup2() return value.
Todd C. Miller [Mon, 19 Jul 2010 16:54:01 +0000 (12:54 -0400)]
Add PYTHONUSERBASE to initial_badenv_table
Todd C. Miller [Mon, 19 Jul 2010 16:53:45 +0000 (12:53 -0400)]
Treat an unknown defaults entry as a parse error.
Todd C. Miller [Mon, 19 Jul 2010 16:53:25 +0000 (12:53 -0400)]
Check return value of setdefs() but don't stop setting defaults if
we hit an unknown one.
Todd C. Miller [Mon, 19 Jul 2010 16:50:59 +0000 (12:50 -0400)]
If env_reset is enabled, set the MAIL environment variable based
on the target user unless MAIL is explicitly preserved in sudoers.
Todd C. Miller [Sat, 17 Jul 2010 22:29:45 +0000 (18:29 -0400)]
decode debian code names
Todd C. Miller [Sat, 17 Jul 2010 17:27:38 +0000 (13:27 -0400)]
fix typo
Todd C. Miller [Fri, 16 Jul 2010 18:38:59 +0000 (14:38 -0400)]
Merge with 1.7.4
Todd C. Miller [Fri, 16 Jul 2010 18:05:03 +0000 (14:05 -0400)]
Restore RLIMIT_NPROC after the uid switch if it appears that runas_setup()
did not do it for us. Fixes a bash script problem on SuSE with RLIMIT_NPROC
set to RLIM_INFINITY.
Todd C. Miller [Fri, 16 Jul 2010 02:19:13 +0000 (22:19 -0400)]
Restore the dot removal in the os version reported by polypkg.
Adapt mkpkg and sudo.pp to the change.
Todd C. Miller [Fri, 16 Jul 2010 11:10:22 +0000 (07:10 -0400)]
document --with-pam-login
Todd C. Miller [Fri, 16 Jul 2010 09:58:01 +0000 (05:58 -0400)]
The tag is NOSETENV, not UNSETENV. From Petr Uzel.
Todd C. Miller [Thu, 15 Jul 2010 20:51:48 +0000 (16:51 -0400)]
Include flavor in solaris package name
Todd C. Miller [Thu, 15 Jul 2010 20:35:38 +0000 (16:35 -0400)]
Older shells don't support IFS= so set explictly to space, tab, newline.
Todd C. Miller [Thu, 15 Jul 2010 19:44:36 +0000 (15:44 -0400)]
Use '=' not '==' in test
Todd C. Miller [Thu, 15 Jul 2010 19:23:12 +0000 (15:23 -0400)]
Fix typo that prevented debian from matching
Todd C. Miller [Thu, 15 Jul 2010 19:19:37 +0000 (15:19 -0400)]
Add missing prefix setting for debian
Todd C. Miller [Thu, 15 Jul 2010 19:12:34 +0000 (15:12 -0400)]
Use tab indents to reduce the chance of problem with <<-
Fix the debian %set section, pp does not set pp_deb_distro
Uncomment %sudo line in sudoers for debian
Uncomment some env_keep lines for RHEL, SLES and debian to more
closely match the vendor sudoers files.
Add /etc/pam.d to %files
Remove the /etc/sudo-ldap.conf symlink on debian for ldap flavor
Todd C. Miller [Thu, 15 Jul 2010 19:09:54 +0000 (15:09 -0400)]
Add commented out env_keep entries, sample Aliases and a %sudo line
for debian.
Todd C. Miller [Thu, 15 Jul 2010 13:49:32 +0000 (09:49 -0400)]
Move zlib check later on in the script to avoid a strange shell problem
on SLES11.
Todd C. Miller [Thu, 15 Jul 2010 13:38:15 +0000 (09:38 -0400)]
Remove check for egrep; configure has its own
Todd C. Miller [Wed, 14 Jul 2010 20:03:59 +0000 (16:03 -0400)]
Enable zlib for linux distros
Todd C. Miller [Wed, 14 Jul 2010 19:56:37 +0000 (15:56 -0400)]
Add ldap flavor to default build
Todd C. Miller [Wed, 14 Jul 2010 19:54:09 +0000 (15:54 -0400)]
Simplify rpm linux distro settings
Todd C. Miller [Wed, 14 Jul 2010 18:57:32 +0000 (14:57 -0400)]
Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo.
Todd C. Miller [Wed, 14 Jul 2010 18:23:43 +0000 (14:23 -0400)]
Fix ChangeLog creation from build dir
Todd C. Miller [Wed, 14 Jul 2010 18:17:56 +0000 (14:17 -0400)]
Handle getcwd() failure.
Todd C. Miller [Wed, 14 Jul 2010 18:09:34 +0000 (14:09 -0400)]
Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR environment
variable.
Todd C. Miller [Wed, 14 Jul 2010 18:07:38 +0000 (14:07 -0400)]
Create sudo group on debian
Todd C. Miller [Wed, 14 Jul 2010 13:36:05 +0000 (09:36 -0400)]
Add debian 4/5/6 and use the dot when doing version matches
Todd C. Miller [Wed, 14 Jul 2010 13:35:26 +0000 (09:35 -0400)]
Use a loop when searching for mv, sendmail and sh
Todd C. Miller [Wed, 14 Jul 2010 13:34:39 +0000 (09:34 -0400)]
Remove spurious "and"; from debian
Todd C. Miller [Wed, 14 Jul 2010 13:33:53 +0000 (09:33 -0400)]
Substitute the value of EDITOR into the sudoers and visudo manuals.
Todd C. Miller [Tue, 13 Jul 2010 21:52:50 +0000 (17:52 -0400)]
Initial support for debian 4.0
Todd C. Miller [Tue, 13 Jul 2010 14:17:51 +0000 (10:17 -0400)]
Some platforms need -fPIE instead of -fpie
Todd C. Miller [Tue, 13 Jul 2010 12:56:31 +0000 (08:56 -0400)]
Only set PAM_RHOST for Solaris, where it is needed to avoid a bug.
On Linux it causes a DNS lookup via libaudit.
Todd C. Miller [Tue, 13 Jul 2010 12:52:50 +0000 (08:52 -0400)]
Update MANIFEST to match packaging changes
Todd C. Miller [Tue, 13 Jul 2010 12:38:35 +0000 (08:38 -0400)]
We now use pp to generate HP-UX packages