]> granicus.if.org Git - sudo/log
sudo
13 years agoAdd simplified chinese translation
Todd C. Miller [Fri, 27 May 2011 11:54:52 +0000 (07:54 -0400)]
Add simplified chinese translation

13 years agoAdd ukranian translation
Todd C. Miller [Thu, 26 May 2011 19:23:55 +0000 (15:23 -0400)]
Add ukranian translation

13 years agorefer to siglist.c, not ./siglist.c since not all makes will
Todd C. Miller [Thu, 26 May 2011 19:18:11 +0000 (15:18 -0400)]
refer to siglist.c, not ./siglist.c since not all makes will
treat foo and ./foo the same.

13 years agoSet def_preserve_groups before searching for the command when the -P
Todd C. Miller [Thu, 26 May 2011 16:52:59 +0000 (12:52 -0400)]
Set def_preserve_groups before searching for the command when the -P
flag is specified.

13 years agoAdd dependency for siglist.lo in compat. This is a generated file so
Todd C. Miller [Thu, 26 May 2011 16:12:43 +0000 (12:12 -0400)]
Add dependency for siglist.lo in compat.  This is a generated file so
"make depend" needs to depend on it.

13 years agoMore dependency fixes.
Todd C. Miller [Thu, 26 May 2011 15:46:11 +0000 (11:46 -0400)]
More dependency fixes.

13 years agoFix a few dependencies.
Todd C. Miller [Thu, 26 May 2011 15:41:13 +0000 (11:41 -0400)]
Fix a few dependencies.

13 years agoPlace compiled mo files in the src dir, not the build dir.
Todd C. Miller [Thu, 26 May 2011 15:12:54 +0000 (11:12 -0400)]
Place compiled mo files in the src dir, not the build dir.
When installing compiled mo files, display a status message.

13 years agoTivoli Directory Server requires that seconds be present in a
Todd C. Miller [Wed, 25 May 2011 19:04:34 +0000 (15:04 -0400)]
Tivoli Directory Server requires that seconds be present in a
timestamp, even though RFC 4517 states that they are optional.

13 years agoAdd missing bit of copyright
Todd C. Miller [Wed, 25 May 2011 18:15:37 +0000 (14:15 -0400)]
Add missing bit of copyright

13 years agoMention cycle detection warnings
Todd C. Miller [Wed, 25 May 2011 17:07:43 +0000 (13:07 -0400)]
Mention cycle detection warnings

13 years agoWhen checking aliases, also check the contents of the alias in case there
Todd C. Miller [Wed, 25 May 2011 17:04:13 +0000 (13:04 -0400)]
When checking aliases, also check the contents of the alias in case there
are problems with an alias that is referenced inside another.
Replace the self reference check with real alias cycle detection.

13 years agoSet errno to ELOOP in alias_find() if there is a cycle.
Todd C. Miller [Wed, 25 May 2011 16:54:15 +0000 (12:54 -0400)]
Set errno to ELOOP in alias_find() if there is a cycle.
Set errno to ENOENT in alias_find() and alias_remove() if the
entry could not be found.

13 years agoIncrement alias_seqno before calls to alias_remove_recursive() to
Todd C. Miller [Wed, 25 May 2011 15:31:11 +0000 (11:31 -0400)]
Increment alias_seqno before calls to alias_remove_recursive() to
avoid false positives with the alias loop detection.  Fixes spurious
warnings about unused aliases when they are nested.

13 years agoadd mkdep.pl
Todd C. Miller [Wed, 25 May 2011 14:20:07 +0000 (10:20 -0400)]
add mkdep.pl

13 years agoAdd dependency on convenience libs to binaries
Todd C. Miller [Wed, 25 May 2011 14:19:29 +0000 (10:19 -0400)]
Add dependency on convenience libs to binaries

13 years agomkdep.pl only works when run from the src dir
Todd C. Miller [Wed, 25 May 2011 14:07:20 +0000 (10:07 -0400)]
mkdep.pl only works when run from the src dir

13 years agoAuto-generate Makefile dependencies with a perl script.
Todd C. Miller [Wed, 25 May 2011 13:02:25 +0000 (09:02 -0400)]
Auto-generate Makefile dependencies with a perl script.

13 years agoIf the user specifies a runas group via sudo's -g option that matches
Todd C. Miller [Mon, 23 May 2011 18:00:54 +0000 (14:00 -0400)]
If the user specifies a runas group via sudo's -g option that matches
the runas user's group in the passwd database and that group is not
denied in the Runas_Spec, allow it.  Thus, if user root's gid in
/etc/passwd is 0, then "sudo -u root -g root id" is allow even if
no groups are present in the Runas_Spec.

13 years agoAdd dependencies on gettext.h
Todd C. Miller [Sun, 22 May 2011 17:31:48 +0000 (13:31 -0400)]
Add dependencies on gettext.h

13 years agoFix install-nls target with HP-UX sh when gettext is not present.
Todd C. Miller [Sun, 22 May 2011 14:10:43 +0000 (10:10 -0400)]
Fix install-nls target with HP-UX sh when gettext is not present.

13 years agoregenerate .pot files for lbuf changes
Todd C. Miller [Fri, 20 May 2011 19:33:34 +0000 (15:33 -0400)]
regenerate .pot files for lbuf changes

13 years agoAdd missing "checking" message for gettext when using the cache.
Todd C. Miller [Fri, 20 May 2011 19:27:45 +0000 (15:27 -0400)]
Add missing "checking" message for gettext when using the cache.

13 years agoAdd primitive format string support to the lbuf code to make translations
Todd C. Miller [Fri, 20 May 2011 19:25:03 +0000 (15:25 -0400)]
Add primitive format string support to the lbuf code to make translations
simpler.

13 years agoAdd message catalog template files for sudo and the sudoers module.
Todd C. Miller [Fri, 20 May 2011 17:20:14 +0000 (13:20 -0400)]
Add message catalog template files for sudo and the sudoers module.

13 years agoAdd gettext.h convenience header. This is similar to but distinct from
Todd C. Miller [Fri, 20 May 2011 15:48:17 +0000 (11:48 -0400)]
Add gettext.h convenience header.  This is similar to but distinct from
the one included with the gettext package.

13 years agoAdd checks for nroff -c and -Tascii flags
Todd C. Miller [Thu, 19 May 2011 22:00:31 +0000 (18:00 -0400)]
Add checks for nroff -c and -Tascii flags

13 years agoAdd check for HP bundled C Compiler (which cannot create shared libs)
Todd C. Miller [Thu, 19 May 2011 21:34:38 +0000 (17:34 -0400)]
Add check for HP bundled C Compiler (which cannot create shared libs)

13 years agoFix C format warnings.
Todd C. Miller [Thu, 19 May 2011 20:21:59 +0000 (16:21 -0400)]
Fix C format warnings.

13 years agoAdd __printflike
Todd C. Miller [Thu, 19 May 2011 20:21:41 +0000 (16:21 -0400)]
Add __printflike

13 years agoTranslate help / usage strings.
Todd C. Miller [Thu, 19 May 2011 20:07:14 +0000 (16:07 -0400)]
Translate help / usage strings.

13 years agoSet --msgid-bugs-address to the bugzilla url
Todd C. Miller [Thu, 19 May 2011 20:06:53 +0000 (16:06 -0400)]
Set --msgid-bugs-address to the bugzilla url

13 years agoAdd scaffolding to update .po files and install .mo files.
Todd C. Miller [Thu, 19 May 2011 19:25:29 +0000 (15:25 -0400)]
Add scaffolding to update .po files and install .mo files.

13 years agoupdate copyright year
Todd C. Miller [Thu, 19 May 2011 17:21:08 +0000 (13:21 -0400)]
update copyright year

13 years agoNo need to include version number at the top of these files.
Todd C. Miller [Thu, 19 May 2011 17:17:31 +0000 (13:17 -0400)]
No need to include version number at the top of these files.

13 years agoMinor warning/error cleanup
Todd C. Miller [Wed, 18 May 2011 17:44:36 +0000 (13:44 -0400)]
Minor warning/error cleanup

13 years agoEmulate ngettext for the non-nls case
Todd C. Miller [Wed, 18 May 2011 17:44:07 +0000 (13:44 -0400)]
Emulate ngettext for the non-nls case

13 years agoDo not mark untranslatable strings for translation
Todd C. Miller [Wed, 18 May 2011 17:16:32 +0000 (13:16 -0400)]
Do not mark untranslatable strings for translation

13 years agoUse ROOT_UID not 0.
Todd C. Miller [Wed, 18 May 2011 17:07:35 +0000 (13:07 -0400)]
Use ROOT_UID not 0.

13 years agoMinor warning/error message cleanup
Todd C. Miller [Wed, 18 May 2011 17:04:24 +0000 (13:04 -0400)]
Minor warning/error message cleanup

13 years agocannot -> "unable to" in warning/error messages
Todd C. Miller [Wed, 18 May 2011 16:41:06 +0000 (12:41 -0400)]
cannot -> "unable to" in warning/error messages

13 years agocan't -> "unable to" in warning/error messages
Todd C. Miller [Wed, 18 May 2011 16:36:26 +0000 (12:36 -0400)]
can't -> "unable to" in warning/error messages

13 years agoFreeBSD needs the main sudo executable to link with -lpam when
Todd C. Miller [Wed, 18 May 2011 15:18:44 +0000 (11:18 -0400)]
FreeBSD needs the main sudo executable to link with -lpam when
loading dynaic pam modules for some reason.

13 years agoWe don't want to translate debugging messages.
Todd C. Miller [Tue, 17 May 2011 22:37:18 +0000 (18:37 -0400)]
We don't want to translate debugging messages.

13 years agoAdd calls to bindtextdomain() and textdomain()
Todd C. Miller [Tue, 17 May 2011 20:38:40 +0000 (16:38 -0400)]
Add calls to bindtextdomain() and textdomain()
Currently there are two domains, one for the sudo front-end and
one for the sudoers plugin and its associated utilities.

13 years agoFix caching of libc gettext check.
Todd C. Miller [Tue, 17 May 2011 19:55:23 +0000 (15:55 -0400)]
Fix caching of libc gettext check.

13 years agoMark defaults descriptions for translation
Todd C. Miller [Tue, 17 May 2011 16:52:20 +0000 (12:52 -0400)]
Mark defaults descriptions for translation

13 years agoUpdate for sudo 1.8.1p2
Todd C. Miller [Tue, 17 May 2011 15:59:40 +0000 (11:59 -0400)]
Update for sudo 1.8.1p2

13 years agoQuiet compiler warning when SELinux is enabled.
Todd C. Miller [Mon, 16 May 2011 20:52:34 +0000 (16:52 -0400)]
Quiet compiler warning when SELinux is enabled.

13 years agoAdd missing includes of libintl.h.
Todd C. Miller [Mon, 16 May 2011 20:50:09 +0000 (16:50 -0400)]
Add missing includes of libintl.h.

13 years agoFix gettext marker.
Todd C. Miller [Mon, 16 May 2011 20:44:11 +0000 (16:44 -0400)]
Fix gettext marker.

13 years agoInclude libint.h where needed.
Todd C. Miller [Mon, 16 May 2011 20:37:11 +0000 (16:37 -0400)]
Include libint.h where needed.

13 years agoPrepare sudoers module messages for translation.
Todd C. Miller [Mon, 16 May 2011 20:32:05 +0000 (16:32 -0400)]
Prepare sudoers module messages for translation.

13 years agoOnly check gid of sudoers file if it is group-readable.
Todd C. Miller [Mon, 16 May 2011 16:19:07 +0000 (12:19 -0400)]
Only check gid of sudoers file if it is group-readable.

13 years agoFor AIX, keep calling authenticate() until reenter reaches 0.
Todd C. Miller [Mon, 16 May 2011 16:17:49 +0000 (12:17 -0400)]
For AIX, keep calling authenticate() until reenter reaches 0.

13 years agoCache the status of the initial gettext() check.
Todd C. Miller [Mon, 9 May 2011 15:04:19 +0000 (11:04 -0400)]
Cache the status of the initial gettext() check.

13 years agoAdd --disable-nls flag and improve checks for gettext.
Todd C. Miller [Mon, 9 May 2011 14:58:52 +0000 (10:58 -0400)]
Add --disable-nls flag and improve checks for gettext.

13 years agoWhen building with gcc on HP-UX, use -march=1.1 to produce portable
Todd C. Miller [Mon, 9 May 2011 14:02:16 +0000 (10:02 -0400)]
When building with gcc on HP-UX, use -march=1.1 to produce portable
binaries on a pa-risc2 host.  Previously, the +Dportable option was
used for the HP-UX C compiler but gcc always produced native binaries.

13 years agoPrepare sudo front end messages for translation.
Todd C. Miller [Fri, 6 May 2011 21:47:51 +0000 (17:47 -0400)]
Prepare sudo front end messages for translation.

13 years agoAdd initial scaffolding to support localization via gettext()
Todd C. Miller [Wed, 4 May 2011 19:26:31 +0000 (15:26 -0400)]
Add initial scaffolding to support localization via gettext()

13 years agoDon't let the fnmatch/glob macros expand the function prototype.
Todd C. Miller [Wed, 4 May 2011 15:21:03 +0000 (11:21 -0400)]
Don't let the fnmatch/glob macros expand the function prototype.

13 years agoResolve namespace collisions on HP-UX ia64 and possibly others by
Todd C. Miller [Tue, 3 May 2011 17:45:56 +0000 (13:45 -0400)]
Resolve namespace collisions on HP-UX ia64 and possibly others by
adding a rpl_ prefix to our fnmatch and glob replacements and
#defining rpl_foo to foo in the header files.

13 years agoSplit ALL, ROLE and TYPE into their own actions. Since you can
Todd C. Miller [Fri, 29 Apr 2011 20:05:50 +0000 (16:05 -0400)]
Split ALL, ROLE and TYPE into their own actions.  Since you can
only have #ifdefs inside of braces, ROLE and TYPE use a naughty
goto in the non-SELinux case.  This is safe because the actions are
in one big switch() statement.

13 years agoFix regexp for matching a CIDR-style IPv4 netmask. From Marc Espie.
Todd C. Miller [Fri, 29 Apr 2011 15:22:49 +0000 (11:22 -0400)]
Fix regexp for matching a CIDR-style IPv4 netmask.  From Marc Espie.

13 years agoaskpass moved from sudoers to sudo.conf in sudo 1.8.0
Todd C. Miller [Wed, 27 Apr 2011 15:48:46 +0000 (11:48 -0400)]
askpass moved from sudoers to sudo.conf in sudo 1.8.0

13 years agoRemove obsolete warning about runas_default and ordering.
Todd C. Miller [Wed, 27 Apr 2011 15:42:46 +0000 (11:42 -0400)]
Remove obsolete warning about runas_default and ordering.
Move syslog facility and priority lists into the section where
the relevant options are described.

13 years agoFix SIA support; we no longer have access to the real argc and argv
Todd C. Miller [Tue, 26 Apr 2011 13:51:34 +0000 (09:51 -0400)]
Fix SIA support; we no longer have access to the real argc and argv
so allocate space for a fake one and use the argv passed to the
plugin with "sudo" for argv[0].

13 years agoRemove useless realloc when trying to get the buffer size right.
Todd C. Miller [Sat, 23 Apr 2011 10:14:36 +0000 (06:14 -0400)]
Remove useless realloc when trying to get the buffer size right.

13 years agoBe explicit when setting euid to 0 before call to setreuid(0, 0)
Todd C. Miller [Sat, 23 Apr 2011 10:13:48 +0000 (06:13 -0400)]
Be explicit when setting euid to 0 before call to setreuid(0, 0)

13 years agoNeed to do checks for krb5_verify_user, krb5_init_secure_context
Todd C. Miller [Mon, 18 Apr 2011 13:22:26 +0000 (09:22 -0400)]
Need to do checks for krb5_verify_user, krb5_init_secure_context
and krb5_get_init_creds_opt_alloc regardless of whether or not
krb5-config is present.

13 years agoWork around weird AIX saved uid semantics on setuid() and setreuid().
Todd C. Miller [Fri, 15 Apr 2011 16:30:08 +0000 (12:30 -0400)]
Work around weird AIX saved uid semantics on setuid() and setreuid().
On AIX, setuid() will only set the saved uid if the euid is already 0.

13 years agoupdate copyright year
Todd C. Miller [Thu, 14 Apr 2011 20:41:38 +0000 (16:41 -0400)]
update copyright year

13 years agoTreat a missing includedir like an empty one and do not return an error.
Todd C. Miller [Thu, 14 Apr 2011 18:27:11 +0000 (14:27 -0400)]
Treat a missing includedir like an empty one and do not return an error.

13 years agoFix ARCH setting in cross-compile Solaris packages.
Todd C. Miller [Tue, 12 Apr 2011 15:52:41 +0000 (11:52 -0400)]
Fix ARCH setting in cross-compile Solaris packages.

13 years agoFix aix version setting.
Todd C. Miller [Tue, 12 Apr 2011 15:50:20 +0000 (11:50 -0400)]
Fix aix version setting.

13 years agoRemove extraneous parens in LDAP filter when sudoers_search_filter
Todd C. Miller [Tue, 12 Apr 2011 15:48:04 +0000 (11:48 -0400)]
Remove extraneous parens in LDAP filter when sudoers_search_filter
is enabled that causes a search error.  From Matthew Thomas.

13 years agoCorrect sizeof() to fix test failure.
Todd C. Miller [Mon, 11 Apr 2011 15:41:38 +0000 (11:41 -0400)]
Correct sizeof() to fix test failure.

13 years ago"install" target should depend on "install-dirs".
Todd C. Miller [Mon, 11 Apr 2011 12:27:59 +0000 (08:27 -0400)]
"install" target should depend on "install-dirs".
Fixes "make -j" problem and closes bz #487.  From Chris Coleman.

13 years agoAdd HAVE_RFC1938_SKEYCHALLENGE
Todd C. Miller [Thu, 7 Apr 2011 11:04:26 +0000 (07:04 -0400)]
Add HAVE_RFC1938_SKEYCHALLENGE

13 years agoMention plugin loading and libgcc changes
Todd C. Miller [Wed, 6 Apr 2011 21:57:10 +0000 (17:57 -0400)]
Mention plugin loading and libgcc changes

13 years agoLoad plugins after parsing arguments and potentially printing the
Todd C. Miller [Wed, 6 Apr 2011 21:51:36 +0000 (17:51 -0400)]
Load plugins after parsing arguments and potentially printing the
version.  That way, an error loading or initializing a plugin doesn't
break "sudo -h" or "sudo -V".

13 years agoWhen using a sub-shell to invoke the sub-make, exec make instead of
Todd C. Miller [Wed, 6 Apr 2011 19:32:04 +0000 (15:32 -0400)]
When using a sub-shell to invoke the sub-make, exec make instead of
running it inside the shell to avoid an extra process.

13 years agoStop testing unspecified behavior in fnmatch
Todd C. Miller [Wed, 6 Apr 2011 19:13:23 +0000 (15:13 -0400)]
Stop testing unspecified behavior in fnmatch
Make glob test more portable

13 years agoNo need to add current dir to include path and having it breaks the
Todd C. Miller [Wed, 6 Apr 2011 19:12:34 +0000 (15:12 -0400)]
No need to add current dir to include path and having it breaks the
test programs that expect to get the system glob.h and fnmatch.h

13 years agoFix and document --with-plugindir; partially from Diego Elio Petteno
Todd C. Miller [Wed, 6 Apr 2011 16:02:49 +0000 (12:02 -0400)]
Fix and document --with-plugindir; partially from Diego Elio Petteno

13 years agoFix fnmatch and glob tests to not use hard-coded flag values in the
Todd C. Miller [Wed, 6 Apr 2011 14:57:39 +0000 (10:57 -0400)]
Fix fnmatch and glob tests to not use hard-coded flag values in the
input file.  Link test programs with libreplace so we get our
replacement verions as needed.

13 years agoIf make in a subdir fails, fail the target in the upper level Makefile too.
Todd C. Miller [Wed, 6 Apr 2011 14:15:54 +0000 (10:15 -0400)]
If make in a subdir fails, fail the target in the upper level Makefile too.
Adapted from a patch from Diego Elio Petteno

13 years agoAdd check for NetBSD-style 4-argument skeychallenge() as Gentoo also
Todd C. Miller [Wed, 6 Apr 2011 14:08:57 +0000 (10:08 -0400)]
Add check for NetBSD-style 4-argument skeychallenge() as Gentoo also
has this.  Adapted from a patch from Diego Elio Petteno

13 years agoMake SUDOERS_LDFLAGS reference $(LDFLAGS) instead of using @LDFLAGS@
Todd C. Miller [Wed, 6 Apr 2011 14:06:51 +0000 (10:06 -0400)]
Make SUDOERS_LDFLAGS reference $(LDFLAGS) instead of using @LDFLAGS@
directly.

13 years agoFix warnings when -without-skey, --without-opie, --without-kerb4,
Todd C. Miller [Wed, 6 Apr 2011 13:33:07 +0000 (09:33 -0400)]
Fix warnings when -without-skey, --without-opie, --without-kerb4,
--without-kerb5 or --without-SecurID were specified.

13 years agoAdd plugins/sudoers/sudoers_version.h
Todd C. Miller [Wed, 6 Apr 2011 12:34:39 +0000 (08:34 -0400)]
Add plugins/sudoers/sudoers_version.h

13 years agoBack out the --with-libpath addition to SUDOERS_LDFLAGS since that
Todd C. Miller [Wed, 6 Apr 2011 11:01:17 +0000 (07:01 -0400)]
Back out the --with-libpath addition to SUDOERS_LDFLAGS since that
now include LDFLAGS in the sudoers Makefile.in.
Add missing settng of @LDFLAGS@ in plugin Makefile.in files.

13 years agoMention %#gid support in User_List and Runas_List
Todd C. Miller [Tue, 5 Apr 2011 22:15:05 +0000 (18:15 -0400)]
Mention %#gid support in User_List and Runas_List

13 years agoKeep track of sudoers grammar version and report it in the -V output.
Todd C. Miller [Tue, 5 Apr 2011 15:47:31 +0000 (11:47 -0400)]
Keep track of sudoers grammar version and report it in the -V output.

13 years agoAdd multiple inclusion guard
Todd C. Miller [Tue, 5 Apr 2011 15:42:53 +0000 (11:42 -0400)]
Add multiple inclusion guard

13 years agoThe --with-libpath option now adds to SUDOERS_LDFLAGS as well as LDFLAGS.
Todd C. Miller [Tue, 5 Apr 2011 13:42:59 +0000 (09:42 -0400)]
The --with-libpath option now adds to SUDOERS_LDFLAGS as well as LDFLAGS.
Remove old -static hack for HP-UX < 9.
Add LTLDFLAGS and set it to -Wc,-static-libgcc if not using GNU ld so we
    don't have a dependency on the shared libgcc in sudoers.so.

13 years agoFix typo; from Petr Uzel
Todd C. Miller [Tue, 5 Apr 2011 13:13:18 +0000 (09:13 -0400)]
Fix typo; from Petr Uzel

13 years agoIn dump-only mode, use "root" as the default username instead of
Todd C. Miller [Fri, 1 Apr 2011 17:54:30 +0000 (13:54 -0400)]
In dump-only mode, use "root" as the default username instead of
"nobody" as the latter may not be available on all systems.

13 years agoRemove NewArgv/NewArgc, they are no longer needed.
Todd C. Miller [Thu, 31 Mar 2011 18:06:11 +0000 (14:06 -0400)]
Remove NewArgv/NewArgc, they are no longer needed.

13 years agoFix setting of user_args
Todd C. Miller [Thu, 31 Mar 2011 17:57:05 +0000 (13:57 -0400)]
Fix setting of user_args