Todd C. Miller [Sun, 17 Jul 2011 14:41:37 +0000 (10:41 -0400)]
bash 2.x doesd not support the -l flag and exits with an error if
it is specified so use --login instead. This causes an error with
bash 1.x (which uses -login instead) but this version is hopefully
less used than 2.x.
Todd C. Miller [Sun, 17 Jul 2011 14:37:15 +0000 (10:37 -0400)]
bash 2.x doesd not support the -l flag and exits with an error if
it is specified so use --login instead. This causes an error with
bash 1.x (which uses -login instead) but this version is hopefully
less used than 2.x.
Todd C. Miller [Mon, 11 Jul 2011 19:40:47 +0000 (15:40 -0400)]
Split out log file word wrap code into its own file and add unit
tests. Fixes an off-by one in the word wrap when the log line
length matches loglinelen.
Todd C. Miller [Mon, 11 Jul 2011 19:22:25 +0000 (15:22 -0400)]
Split out log file word wrap code into its own file and add unit
tests. Fixes an off-by one in the word wrap when the log line
length matches loglinelen.
Todd C. Miller [Fri, 1 Jul 2011 18:21:06 +0000 (14:21 -0400)]
Resolve the list of gids passed in from the sudo frontend (the
result of getgroups()) to names and store both the group names and
ids in the sudo_user struct. When matching groups in the sudoers
file, match based on the names in the groups list first and
only do a gid-based match when we absolutely have to. By matching
on the group name (as it is listed in sudoers) instead of id
(which we would have to resolve) we save a lot of group lookups
for sudoers files with a lot of groups in them.
Todd C. Miller [Fri, 1 Jul 2011 18:13:47 +0000 (14:13 -0400)]
Resolve the list of gids passed in from the sudo frontend (the
result of getgroups()) to names and store both the group names and
ids in the sudo_user struct. When matching groups in the sudoers
file, match based on the names in the groups list first and
only do a gid-based match when we absolutely have to. By matching
on the group name (as it is listed in sudoers) instead of id
(which we would have to resolve) we save a lot of group lookups
for sudoers files with a lot of groups in them.
Todd C. Miller [Thu, 16 Jun 2011 15:57:57 +0000 (11:57 -0400)]
Add a CONTRIBUTORS file with the names of folks who have contributed
code or patches to sudo since I started maintaining it (plus the
original authors).
Todd C. Miller [Tue, 14 Jun 2011 20:53:26 +0000 (16:53 -0400)]
Add a CONTRIBUTORS file with the names of folks who have contributed
code or patches to sudo since I started maintaining it (plus the
original authors).
Todd C. Miller [Fri, 10 Jun 2011 19:34:13 +0000 (15:34 -0400)]
Explicitly set mode and owner of /etc/sudoers instead of relying
on "cp -p" to work in the postinstall script. On AIX 6.1 at least
the postinstall script runs before the final file permissions are set.
Todd C. Miller [Fri, 10 Jun 2011 19:26:35 +0000 (15:26 -0400)]
Explicitly set mode and owner of /etc/sudoers instead of relying
on "cp -p" to work in the postinstall script. On AIX 6.1 at least
the postinstall script runs before the final file permissions are set.
Todd C. Miller [Mon, 6 Jun 2011 15:07:22 +0000 (11:07 -0400)]
Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes
problems with pam modules not having access to symbols provided by
libpam on some platforms. Affects FreeBSD and SLES 10 at least.
Todd C. Miller [Mon, 6 Jun 2011 14:53:58 +0000 (10:53 -0400)]
Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes
problems with pam modules not having access to symbols provided by
libpam on some platforms. Affects FreeBSD and SLES 10 at least.
Todd C. Miller [Sat, 4 Jun 2011 14:01:39 +0000 (10:01 -0400)]
Fix compressed io log corruption in background mode by using _exit()
instead of exit() to avoid flushing buffers twice.
Improved background mode support. When not allocating a pty, the
command is run in its own process group. This prevents write access
to the tty. When running in a pty, stdin is not hooked up and we
never read from /dev/tty, which results in similar behavior.
Todd C. Miller [Tue, 31 May 2011 16:49:22 +0000 (12:49 -0400)]
Fix compressed io log corruption in background mode by using _exit()
instead of exit() to avoid flushing buffers twice.
Improved background mode support. When not allocating a pty, the
command is run in its own process group. This prevents write access
to the tty. When running in a pty, stdin is not hooked up and we
never read from /dev/tty, which results in similar behavior.
projects / sudo / log