]>
granicus.if.org Git - sudo/log
Todd C. Miller [Mon, 12 Jul 2010 21:04:47 +0000 (17:04 -0400)]
Just ignore the -c option, it is the default
Add support for -d option
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 19:49:08 +0000 (15:49 -0400)]
Use _PATH_STDPATH instead of _PATH_DEFPATH
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 14:38:59 +0000 (10:38 -0400)]
Do not strip binaries.
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 14:38:07 +0000 (10:38 -0400)]
Add --insults=disabled configure option to allow people to build
in insult support but have the insults disabled unless explicitly
enabled in sudoers.
--HG--
branch : 1.7
Todd C. Miller [Sat, 10 Jul 2010 21:12:20 +0000 (17:12 -0400)]
Fix K&R compilation
--HG--
branch : 1.7
Todd C. Miller [Fri, 9 Jul 2010 21:08:58 +0000 (17:08 -0400)]
Add support for a sudo-i pam.d file to be used for "sudo -i".
Adapted from a RedHat patch.
--HG--
branch : 1.7
Todd C. Miller [Fri, 9 Jul 2010 15:06:21 +0000 (11:06 -0400)]
Fix installation of sudo_noexec.so
--HG--
branch : 1.7
Todd C. Miller [Fri, 9 Jul 2010 13:49:33 +0000 (09:49 -0400)]
Use mkstemps() instead of mkstemp() in sudoedit. This allows sudoedit
to preserve the file extension (if any) which may be used by the editor
(like emacs) to choose the editing mode.
--HG--
branch : 1.7
Todd C. Miller [Thu, 8 Jul 2010 13:00:13 +0000 (09:00 -0400)]
TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses TLS_CACERT,
not TLS_CACERTFILE in its ldap.conf. Other LDAP client code, such as
nss_ldap, uses TLS_CACERTFILE. Also document why you should avoid
disabling TLS_CHECKPEER is possible.
--HG--
branch : 1.7
Todd C. Miller [Wed, 7 Jul 2010 18:33:06 +0000 (14:33 -0400)]
Add suport for negated user/host/command lists in a Defaults entry.
E.g. Defaults:!baduser noexec
--HG--
branch : 1.7
Todd C. Miller [Thu, 1 Jul 2010 17:32:59 +0000 (13:32 -0400)]
fix typo.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 22:29:19 +0000 (18:29 -0400)]
Added tag SUDO_1_7_3 for changeset
72fd1f510a08
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 21:55:55 +0000 (17:55 -0400)]
Sudo 1.7.3 GA
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 16:45:11 +0000 (12:45 -0400)]
Include strings.h even if string.h exists since they may define
different things. Fixes warnings on AIX and others.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 13:26:21 +0000 (09:26 -0400)]
Do not rely on env.env_len when unsetting a variable, just use the
NULL terminator.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 13:09:20 +0000 (09:09 -0400)]
In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008
--HG--
branch : 1.7
Todd C. Miller [Mon, 28 Jun 2010 13:08:34 +0000 (09:08 -0400)]
Mention that multiple URI lines are merged into a single one.
--HG--
branch : 1.7
Todd C. Miller [Mon, 28 Jun 2010 13:08:10 +0000 (09:08 -0400)]
Document AIX fixes
--HG--
branch : 1.7
Todd C. Miller [Sat, 26 Jun 2010 17:09:05 +0000 (13:09 -0400)]
For env_init() just use environ not the envp from main().
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 17:50:15 +0000 (13:50 -0400)]
Update version to 1.7.3rc1
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 17:44:45 +0000 (13:44 -0400)]
fqdn issue is resolved
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 17:42:50 +0000 (13:42 -0400)]
In unsetenv(), assign ep in the for loop instead of doing it earlier.
This version of the code does not change env.envp in between when
ep is assigned and when it is used but older versions (e.g. 1.7.2) do.
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 17:17:59 +0000 (13:17 -0400)]
Use S_REGISTRY instead of S_AUTHSYSTEM as the argument to getuserattr()
when fetching the administrative domain to be used by setauthdb().
This was suggested by AIX support and is consistent with what OpenSSH does.
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 13:58:59 +0000 (09:58 -0400)]
Use warningx() instead of log_error() since the latter is not available
to visudo or testsudoers. This does mean that they don't end up in syslog.
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 13:57:58 +0000 (09:57 -0400)]
Defer call to sudo_nonunix_groupcheck_cleanup() until after we have
closed the sudoers sources. From Quest sudo.
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 13:57:29 +0000 (09:57 -0400)]
Ignore case when matching user/group names in the cache. From Quest sudo.
--HG--
branch : 1.7
Todd C. Miller [Thu, 24 Jun 2010 18:34:53 +0000 (14:34 -0400)]
Add check for setkeycreatecon() when --with-selinux is specified.
--HG--
branch : 1.7
Todd C. Miller [Thu, 24 Jun 2010 18:16:45 +0000 (14:16 -0400)]
Bump version to 1.7.3b5
Error out if libaudit.h is missing or ununable when --with-linux-audit
was specified
--HG--
branch : 1.7
Todd C. Miller [Thu, 24 Jun 2010 17:22:51 +0000 (13:22 -0400)]
K&R function declaration for aix_setauthdb()
--HG--
branch : 1.7
Todd C. Miller [Thu, 24 Jun 2010 11:42:29 +0000 (07:42 -0400)]
If env_init() was called implicitly via getenv(), setenv() or putenv()
just use the specified envp instead of mallocing a new copy. This
prevents an infinite loop on OpenBSD which calls getenv() from malloc()
to get MALLOC_OPTIONS.
--HG--
branch : 1.7
Todd C. Miller [Thu, 24 Jun 2010 11:39:34 +0000 (07:39 -0400)]
Add support for multiple URI lines by joining the contents and passing
the result to ldap_initialize.
--HG--
branch : 1.7
Todd C. Miller [Wed, 23 Jun 2010 22:56:44 +0000 (18:56 -0400)]
Bracket initgroups with calls to aix_setauthdb() and aix_restoreauthdb()
--HG--
branch : 1.7
Todd C. Miller [Wed, 23 Jun 2010 15:40:20 +0000 (11:40 -0400)]
Include compat.h before alloc.h to get __P
--HG--
branch : 1.7
Todd C. Miller [Wed, 23 Jun 2010 15:08:54 +0000 (11:08 -0400)]
Include usersec.h for authenticate() prototype
--HG--
branch : 1.7
Todd C. Miller [Wed, 23 Jun 2010 15:07:42 +0000 (11:07 -0400)]
Add missing includes
Add missing trailing NUL in userinfo string
--HG--
branch : 1.7
Todd C. Miller [Tue, 22 Jun 2010 17:39:14 +0000 (13:39 -0400)]
Mention when LDAP was incorporated.
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Jun 2010 20:20:10 +0000 (16:20 -0400)]
Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it
is not covered by _ALL_SOURCE.
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Jun 2010 20:19:41 +0000 (16:19 -0400)]
Include usersec.h on AIX to get IDtouser() prototype.
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Jun 2010 20:18:46 +0000 (16:18 -0400)]
Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it
is not covered by _ALL_SOURCE.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 22:45:22 +0000 (18:45 -0400)]
Add a cast to quiet a compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 22:44:05 +0000 (18:44 -0400)]
Use memset() instead of zero_bytes() since we don't include sudo.h
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 22:41:54 +0000 (18:41 -0400)]
getline.o is already in LIB_OBJS, do not need it in COMMON_OBJS
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 22:38:28 +0000 (18:38 -0400)]
Quiet a compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 21:47:17 +0000 (17:47 -0400)]
Call set_fqdn() after sudoers has parsed instead of inline as a callback.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 21:23:37 +0000 (17:23 -0400)]
Do not call set_fqdn() until sudoers parses (where is gets run as a callback).
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 21:21:10 +0000 (17:21 -0400)]
Do not call set_fqdn() until sudoers parses (where is gets run as a callback).
Otherwise, if sudo is built --with-fqdn the fqdn will be set even if
!fqdn is set in sudoers.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 19:51:26 +0000 (15:51 -0400)]
Bump version to 1.7.3b4
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 19:43:00 +0000 (15:43 -0400)]
mention the change in tty ticket behavior when there is no tty
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 19:37:27 +0000 (15:37 -0400)]
remove done items
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 19:37:00 +0000 (15:37 -0400)]
Remove comment; NAME in usrinfo should be user name.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 14:08:01 +0000 (08:08 -0600)]
Do not update tty ticket if there is no tty.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 14:05:44 +0000 (10:05 -0400)]
No longer need to use -- with the -s flag
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 14:04:52 +0000 (10:04 -0400)]
Add missing $(srcdir) to sudo.man.in target
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 13:53:46 +0000 (09:53 -0400)]
Do not rely on BSD make's $>
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 13:52:08 +0000 (09:52 -0400)]
Set timedir to /var/db/sudo for darwin to match Apple sudo's location
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 23:59:37 +0000 (19:59 -0400)]
Move aix.o from SUDO_OBJS to COMMON_OBJS
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:40:02 +0000 (16:40 -0400)]
Check for zlib.h in addition to libz.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:38:16 +0000 (16:38 -0400)]
Move functions and symbols shared between exec.c and exec_pty.c
into sudo_exec.h.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:21:20 +0000 (16:21 -0400)]
Add missing prototypes for aix_setauthdb and aix_restoreauthdb
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:06:05 +0000 (16:06 -0400)]
Comment out rules to build .man.in and .cat files unless --with-devel
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 19:35:28 +0000 (15:35 -0400)]
Fix AIX compilation problems.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 19:28:45 +0000 (15:28 -0400)]
Cast isalnum() arg to unsigned char.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 19:28:21 +0000 (15:28 -0400)]
Add Linux audit support.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 18:35:42 +0000 (14:35 -0400)]
Quote any non-alphanumeric characters other than '_' or '-' when passing
a command to be run via the shell for the -s and -i options.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 18:09:07 +0000 (14:09 -0400)]
Add missing braces that broke -i mode.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 14:44:37 +0000 (10:44 -0400)]
Fix linux_audit_command() return value
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 10:50:37 +0000 (06:50 -0400)]
Add Linux audit support.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 14:04:24 +0000 (10:04 -0400)]
Add Linux audit support.
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 20:28:28 +0000 (16:28 -0400)]
Sync sudoreplay with trunk
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 20:27:33 +0000 (16:27 -0400)]
Remove an XXX
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 16:55:28 +0000 (12:55 -0400)]
Set usrinfo for AIX
Set adminstrative domain for the process when looking up user's
password info and when preparing for execve().
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 14:32:05 +0000 (10:32 -0400)]
Better prefix determination now that we can't rely on len==0 to
tell the beginning on an entry.
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 14:05:08 +0000 (10:05 -0400)]
Add support for multiple sudoers_base entries in ldap.conf.
From Joachim Henke
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 13:24:10 +0000 (09:24 -0400)]
Remove duplicate setsid check
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 13:22:44 +0000 (09:22 -0400)]
Move setsid emulation into setsid.c
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 13:05:19 +0000 (09:05 -0400)]
Check for dup2() failure.
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 12:43:24 +0000 (08:43 -0400)]
Remove dup2 check, it is not optional.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 22:30:12 +0000 (18:30 -0400)]
Add mbr_check_membership support and SELinux fixes
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 20:27:21 +0000 (16:27 -0400)]
Sync SRCS and DISTFILES with reality
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 20:15:39 +0000 (16:15 -0400)]
Update OS specific notes. Delete some really ancient ones and move
older ones to the end of the list.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 19:17:15 +0000 (15:17 -0400)]
Bump for sudo 1.7.3
Merge some changes from trunk
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 19:06:39 +0000 (15:06 -0400)]
Call selinux_restore_tty() as part of cleanup() so it gets called
from error()/errorx()
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 18:59:26 +0000 (14:59 -0400)]
No longer use SA_NOCLDSTOP
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 18:53:34 +0000 (14:53 -0400)]
Move union sudo_in_addr_un into interfaces.h
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:53:18 +0000 (11:53 -0400)]
Update copyright year
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:50:06 +0000 (11:50 -0400)]
Update copyright year
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:31:44 +0000 (11:31 -0400)]
Remove varsub as part of clean
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:18:23 +0000 (11:18 -0400)]
Quiet a compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:57:23 +0000 (10:57 -0400)]
Quiet a compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:37:25 +0000 (10:37 -0400)]
Make the remaining functions in ldap.c static
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:23:33 +0000 (10:23 -0400)]
Make private functions static. Diff from Joachim Henke
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:20:15 +0000 (10:20 -0400)]
Updates from Alain Roy to provide better examples for importing the
schema and to fix problems caused by Windows validating attributes
which have not yet been added before committing the changes.
--HG--
branch : 1.7
Todd C. Miller [Sat, 12 Jun 2010 13:32:03 +0000 (09:32 -0400)]
Generate .cat files directly from .man.in instead of .man using default
values in configure.in
--HG--
branch : 1.7
Todd C. Miller [Fri, 11 Jun 2010 14:33:13 +0000 (10:33 -0400)]
Print configure args with verbose version information.
--HG--
branch : 1.7
Todd C. Miller [Fri, 11 Jun 2010 13:54:48 +0000 (09:54 -0400)]
Remove tfd from struct sudoersfile; it is not used.
Add prev pointer to struct sudoersfile.
Declare list of sudoersfile using TQ_DECLARE.
Use tq_append to append sudoers entries to the tail queue.
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 22:03:16 +0000 (18:03 -0400)]
Describe tty timestamp improvements
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:53:27 +0000 (17:53 -0400)]
A comment character may not be part of a command line argument
unless it is quoted with a backslash. Fixes parsing of:
testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar
closes bz #441
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:41:55 +0000 (17:41 -0400)]
regen
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:39:06 +0000 (17:39 -0400)]
Make this read a little bit better when passwd_timeout is 0.
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:29:47 +0000 (17:29 -0400)]
Use the --file argument to config.status instead of setting CONFIG_FILES
--HG--
branch : 1.7