]>
granicus.if.org Git - sudo/log
Todd C. Miller [Wed, 9 Jun 2010 14:45:07 +0000 (10:45 -0400)]
Make TGP_ECHO override TGP_MASK and don't try to restore the terminal
if we didn't modify it.
Todd C. Miller [Wed, 9 Jun 2010 14:31:05 +0000 (10:31 -0400)]
Add SUDO_CONV_PROMPT_MASK define which corresponds to the "pwfeedback"
sudoers option. Do not disable echo if TGP_ECHO is set.
Todd C. Miller [Wed, 9 Jun 2010 13:54:58 +0000 (09:54 -0400)]
Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
Todd C. Miller [Tue, 8 Jun 2010 21:59:18 +0000 (17:59 -0400)]
Add selinux_enabled flag into struct command_details and
set it in command_info_to_details().
Return an error from selinux_setup() instead of exiting.
Call selinux_setup() from exec_setup().
Todd C. Miller [Wed, 9 Jun 2010 13:22:44 +0000 (09:22 -0400)]
Remove commented out copy of old sudo_execve() function.
Todd C. Miller [Tue, 8 Jun 2010 21:10:27 +0000 (17:10 -0400)]
Fix setting selinux type on command line.
Todd C. Miller [Tue, 8 Jun 2010 20:57:18 +0000 (16:57 -0400)]
In sudoers_io_close(), skip NULL io_fds[] elements.
Todd C. Miller [Tue, 8 Jun 2010 22:42:36 +0000 (18:42 -0400)]
No longer need NGROUPS_MAX define
Todd C. Miller [Tue, 8 Jun 2010 22:38:23 +0000 (18:38 -0400)]
Replace timerfoo macros with timevalfoo since the timer macros are known
to be busted on some systems.
Todd C. Miller [Tue, 8 Jun 2010 20:16:08 +0000 (16:16 -0400)]
Remove duplicate call to selinux_setup().
Todd C. Miller [Tue, 8 Jun 2010 20:54:04 +0000 (16:54 -0400)]
If pam_open_session() fails, pass its status to pam_end.
Todd C. Miller [Tue, 8 Jun 2010 20:53:38 +0000 (16:53 -0400)]
If a file in a #includedir has improper permissions or owner just
skip it. This prevents packages that incorrectly install a file
into /etc/sudoers.d from breaking sudo so easily. Syntax errors
in #includedir files still result in a parse error (for now).
Todd C. Miller [Tue, 8 Jun 2010 15:25:33 +0000 (11:25 -0400)]
Add use_pty sudoers option to force use of a pty even when not logging I/O.
Todd C. Miller [Tue, 8 Jun 2010 14:23:35 +0000 (10:23 -0400)]
Make env_init() void as it never fails.
Todd C. Miller [Tue, 8 Jun 2010 13:55:36 +0000 (09:55 -0400)]
No longer use _NSGetEnviron so don't need crt_externs.h
Todd C. Miller [Tue, 8 Jun 2010 13:44:19 +0000 (09:44 -0400)]
Remove unused VNULL define
Todd C. Miller [Mon, 7 Jun 2010 22:53:58 +0000 (18:53 -0400)]
Add #define for maximum session id
Todd C. Miller [Mon, 7 Jun 2010 22:06:22 +0000 (18:06 -0400)]
Split exec.c into exec.c and exec_pty.c
Todd C. Miller [Mon, 7 Jun 2010 15:20:31 +0000 (11:20 -0400)]
Sync with source file moves.
Todd C. Miller [Mon, 7 Jun 2010 15:13:03 +0000 (11:13 -0400)]
Rename pty.c -> get_pty.c
Todd C. Miller [Sun, 6 Jun 2010 15:54:46 +0000 (11:54 -0400)]
Only use I/O input log file if def_log_input is set and output file
if def_log_output is set.
Todd C. Miller [Fri, 4 Jun 2010 19:37:24 +0000 (15:37 -0400)]
Update copyright year
Todd C. Miller [Fri, 4 Jun 2010 18:20:03 +0000 (14:20 -0400)]
uid -> ttyuid
Todd C. Miller [Fri, 4 Jun 2010 16:17:19 +0000 (12:17 -0400)]
For sudoedit, make a local copy of editor string si become part of
argv. If no editor environment variable, split def_editor on ':'
since it may be a colon-delimited path.
Todd C. Miller [Fri, 4 Jun 2010 16:11:02 +0000 (12:11 -0400)]
Remove unneeded endpwent()/endgrent()
Todd C. Miller [Fri, 4 Jun 2010 13:40:01 +0000 (09:40 -0400)]
Use value of nroff from configure
Todd C. Miller [Fri, 4 Jun 2010 13:10:05 +0000 (09:10 -0400)]
Add missing const to I/O log action function
Todd C. Miller [Fri, 4 Jun 2010 13:09:39 +0000 (09:09 -0400)]
Update copyright year and fix whitespace
Todd C. Miller [Fri, 4 Jun 2010 13:09:19 +0000 (09:09 -0400)]
Fix typo
Todd C. Miller [Fri, 4 Jun 2010 12:56:39 +0000 (08:56 -0400)]
Remove redundant tty signal blocking in log function.
Todd C. Miller [Thu, 3 Jun 2010 17:13:42 +0000 (13:13 -0400)]
Place static keyword where it belongs
Todd C. Miller [Thu, 3 Jun 2010 13:48:39 +0000 (09:48 -0400)]
Always use a printf format string for send_mail()
Todd C. Miller [Thu, 3 Jun 2010 12:50:02 +0000 (08:50 -0400)]
Extend atobool() so we can use it in the LDAP code.
Todd C. Miller [Thu, 3 Jun 2010 12:32:53 +0000 (08:32 -0400)]
Sudo now stashes tty ctime for tty_tickets on Solaris too.
Todd C. Miller [Thu, 3 Jun 2010 11:40:15 +0000 (07:40 -0400)]
Fix dummy version of get_boottime()
Todd C. Miller [Wed, 2 Jun 2010 18:30:13 +0000 (14:30 -0400)]
Enable tty_is_devpts() support for Solaris with the "devices" filesystem.
Todd C. Miller [Wed, 2 Jun 2010 18:23:38 +0000 (14:23 -0400)]
Unbreak the non-io logging case.
Todd C. Miller [Wed, 2 Jun 2010 15:10:04 +0000 (11:10 -0400)]
Fix symbol name conflict with sudo_printf.
Todd C. Miller [Wed, 2 Jun 2010 14:33:02 +0000 (10:33 -0400)]
Fix OpenPAM detection for newer versions.
Todd C. Miller [Wed, 2 Jun 2010 14:32:31 +0000 (10:32 -0400)]
Sync with Quest sudo git repo
Todd C. Miller [Wed, 2 Jun 2010 14:30:34 +0000 (10:30 -0400)]
HP-UX ld uses +b instead or -R or -rpath
Fix typo in libvas check
Add missing template for ENV_DEBUG
Adapted from Quest sudo
Todd C. Miller [Wed, 2 Jun 2010 14:27:57 +0000 (10:27 -0400)]
Fix typos; from Quest Sudo
Todd C. Miller [Tue, 1 Jun 2010 16:35:19 +0000 (12:35 -0400)]
Add back -I$(top_srcdir); we need it for including compat/foo.h
since we cannot rely on "foo.h" being found relative to the
source file when the cwd is different.
Todd C. Miller [Tue, 1 Jun 2010 14:58:11 +0000 (10:58 -0400)]
Fix a bug where we could treat EAGAIN as a permanent error.
Also set cstat if perform_io() returns an error.
Todd C. Miller [Tue, 1 Jun 2010 13:54:03 +0000 (09:54 -0400)]
Add casts to quiet compiler warnings.
Todd C. Miller [Tue, 1 Jun 2010 13:44:54 +0000 (09:44 -0400)]
Fix typo in ternary operator usage.
Todd C. Miller [Sun, 30 May 2010 15:16:31 +0000 (11:16 -0400)]
Add --enable-warnings and fix typo in SUDO_IO_LOGDIR
Todd C. Miller [Sun, 30 May 2010 14:57:14 +0000 (10:57 -0400)]
Update docs to match sudoers I/O logging changes
Todd C. Miller [Sun, 30 May 2010 14:31:38 +0000 (10:31 -0400)]
Break sudoers transcript feature up into log_input and log_output.
Todd C. Miller [Sun, 30 May 2010 10:35:21 +0000 (06:35 -0400)]
Use setprogname() as needed.
Todd C. Miller [Sun, 30 May 2010 10:29:41 +0000 (06:29 -0400)]
Adapt sudoreplay to iolog changes.
Todd C. Miller [Sat, 29 May 2010 23:44:33 +0000 (19:44 -0400)]
Log all input and output into separate files and store a number on
each timing file line to indicate which file the data is in.
Todd C. Miller [Sat, 29 May 2010 14:43:34 +0000 (10:43 -0400)]
Make sudoers_io functions static to iolog.c
Todd C. Miller [Fri, 28 May 2010 21:37:36 +0000 (17:37 -0400)]
Completely remove the -L flag from the sudo front end.
Todd C. Miller [Fri, 28 May 2010 17:24:07 +0000 (13:24 -0400)]
Fix EAGAIN handling when writing to stdout.
Todd C. Miller [Fri, 28 May 2010 17:21:56 +0000 (13:21 -0400)]
Eliminate unused variables
Todd C. Miller [Fri, 28 May 2010 16:15:14 +0000 (12:15 -0400)]
Re-enable cleanup functions in sudoers plugin and sudo driver
for error()/errorx().
Todd C. Miller [Fri, 28 May 2010 16:01:06 +0000 (12:01 -0400)]
Use sudo_printf to display verbose version information.
Todd C. Miller [Fri, 28 May 2010 14:41:58 +0000 (10:41 -0400)]
Minor Makefile cleanup: fix a typo, change the removal order in
the clean targets, and remove a superfluous include path for
the sudoers plugin.
Todd C. Miller [Fri, 28 May 2010 13:42:50 +0000 (09:42 -0400)]
Handle duplicate variables in the environment. For unsetenv(),
keep looking even after remove the first instance. For sudo_putenv(),
check for and remove dupes after we replace an existing value.
Todd C. Miller [Thu, 27 May 2010 22:11:51 +0000 (18:11 -0400)]
Use explicit path to source file instead of $< for files that live
in devdir and top_srcdir.
Todd C. Miller [Thu, 27 May 2010 22:00:08 +0000 (18:00 -0400)]
Add explicit rules to compile gram.c and toke.c for HP-UX
Pevent ending LIBSUDOERS_OBJS with a backslash
Todd C. Miller [Thu, 27 May 2010 21:48:17 +0000 (17:48 -0400)]
Link libcommon before libreplace since libcommon may use functions
only present in libreplace.
Todd C. Miller [Thu, 27 May 2010 21:29:09 +0000 (17:29 -0400)]
Move code common to sudo and the sudoers plugin to a convenience library,
libcommon. Removes the need to make links in the sudoers plugin dir
and reduces re-compilation of duplicate object files.
Todd C. Miller [Thu, 27 May 2010 21:27:36 +0000 (17:27 -0400)]
Move code common to sudo and the sudoers plugin to a convenience library,
libcommon. Removes the need to make links in the sudoers plugin dir
and reduces re-compilation of duplicate object files.
Todd C. Miller [Thu, 27 May 2010 20:46:31 +0000 (16:46 -0400)]
Rename script_execve to sudo_execve and rename script_foo in exec.c
Todd C. Miller [Thu, 27 May 2010 20:32:41 +0000 (16:32 -0400)]
rename script.c exec.c and fix up the MANIFEST file
Todd C. Miller [Thu, 27 May 2010 20:29:48 +0000 (16:29 -0400)]
Rename script_setup() to pty_setup() and call from script_execve()
directly.
Todd C. Miller [Thu, 27 May 2010 19:09:05 +0000 (15:09 -0400)]
bump version to 1.8.0a2
Todd C. Miller [Thu, 27 May 2010 19:07:43 +0000 (15:07 -0400)]
Document init_session
Todd C. Miller [Thu, 27 May 2010 18:53:11 +0000 (14:53 -0400)]
Clean up the sudoers auth API a bit and update the docs.
Todd C. Miller [Thu, 27 May 2010 18:46:39 +0000 (14:46 -0400)]
Add init_session function to struct policy_plugin that gets called
before the uid/gid/etc changes. A struct passwd pointer is passed in,which may be NULL if the user does not exist in the passwd database.The sudoers module uses init_session to open the pam session as needed.
Todd C. Miller [Wed, 26 May 2010 21:57:47 +0000 (17:57 -0400)]
Add open/close session to sudo auth, only used by PAM.
This allows us to open (and close) the PAM session from sudoers.
Todd C. Miller [Wed, 26 May 2010 21:20:21 +0000 (17:20 -0400)]
Add explicit rule to build getdate.o for HP-UX make.
Todd C. Miller [Wed, 26 May 2010 21:01:00 +0000 (17:01 -0400)]
Back out most of change
45e406ebdea2 . Create dummy .l.c and .y.c
rules as an alternate way to prevent HP-UX make (and others) from
trying to rebuild the parser in non-dev mode.
Todd C. Miller [Wed, 26 May 2010 20:33:35 +0000 (16:33 -0400)]
Re-enable PATH_MAX check for command
Todd C. Miller [Wed, 26 May 2010 20:10:24 +0000 (16:10 -0400)]
For distclean, clean the main directory last since the subdirs
need to be able to run libtool to clean things.
Todd C. Miller [Wed, 26 May 2010 19:43:46 +0000 (15:43 -0400)]
Fix generation of mksiglist.h
Todd C. Miller [Wed, 26 May 2010 15:19:17 +0000 (11:19 -0400)]
Now that we defer sending cstat until the end of script_child()
we cannot reuse cstat when reading command status from parent.
Todd C. Miller [Tue, 25 May 2010 20:13:04 +0000 (16:13 -0400)]
Use numeric registers to handle conditionals instead of trying
to do it all with text processing.
Todd C. Miller [Tue, 25 May 2010 18:43:39 +0000 (14:43 -0400)]
Document per-command SELinux settings
Todd C. Miller [Tue, 25 May 2010 18:21:21 +0000 (14:21 -0400)]
Repair "sudo -l -U username"
Todd C. Miller [Tue, 25 May 2010 17:58:16 +0000 (13:58 -0400)]
Set selinux role and type in command details.
Todd C. Miller [Tue, 25 May 2010 15:00:39 +0000 (11:00 -0400)]
Rework SELinux support.
Todd C. Miller [Mon, 24 May 2010 22:18:50 +0000 (18:18 -0400)]
Make SELinux support compile again. Needs more work to be complete.
Todd C. Miller [Mon, 24 May 2010 19:40:36 +0000 (15:40 -0400)]
Bring back closefrom settings.
Todd C. Miller [Mon, 24 May 2010 18:30:54 +0000 (14:30 -0400)]
If running a command or sudoedit in transcript mode, call io_nextid()
before log_allowed() so the session id is logged.
Todd C. Miller [Mon, 24 May 2010 16:35:43 +0000 (12:35 -0400)]
Use mandoc(1) if nroff(1) is not present.
Todd C. Miller [Mon, 24 May 2010 16:25:20 +0000 (12:25 -0400)]
Use the --file argument to config.status instead of setting CONFIG_FILES
in the environment.
Todd C. Miller [Mon, 24 May 2010 16:10:05 +0000 (12:10 -0400)]
We cannot conditionally update gram.h or the dependency ordering gets
messed up in devel mode.
Todd C. Miller [Sat, 22 May 2010 01:29:44 +0000 (21:29 -0400)]
Substitute @SHELL@ into Makefiles
Todd C. Miller [Sat, 22 May 2010 01:05:44 +0000 (21:05 -0400)]
Fix typo
Todd C. Miller [Fri, 21 May 2010 23:25:17 +0000 (19:25 -0400)]
Update to autoconf 2.65
Todd C. Miller [Fri, 21 May 2010 22:41:18 +0000 (18:41 -0400)]
Fix libtool target (space vs. tabs)
Todd C. Miller [Fri, 21 May 2010 22:40:04 +0000 (18:40 -0400)]
Remove use of RETSIGTYPE; all modern systems have signal handlers that
return void.
Todd C. Miller [Fri, 21 May 2010 21:59:47 +0000 (17:59 -0400)]
Update to libtool-2.2.6b. I haven't made any local modifications
this time, which should be OK since we install sudo_noexec.so by
hand now.
Todd C. Miller [Fri, 21 May 2010 20:53:21 +0000 (16:53 -0400)]
Use libtool to clean objects
Todd C. Miller [Fri, 21 May 2010 20:52:31 +0000 (16:52 -0400)]
Install sudo_plugin.h as part of "make install" and make other install
targets callable from the top-level Makefile
Todd C. Miller [Fri, 21 May 2010 19:53:39 +0000 (15:53 -0400)]
regen with autoupdate to eliminate AC_TRY_LINK
Todd C. Miller [Fri, 21 May 2010 19:31:36 +0000 (15:31 -0400)]
Install sudo_plugin.h as part of "make install" and make other install
targets callable from the top-level Makefile