]>
granicus.if.org Git - sudo/log
Todd C. Miller [Mon, 9 Jan 2012 16:11:05 +0000 (11:11 -0500)]
Initialize the debug framework from the I/O plugin too.
--HG--
branch : 1.8
Todd C. Miller [Mon, 9 Jan 2012 16:10:53 +0000 (11:10 -0500)]
Enable debugging via sudo.conf.
--HG--
branch : 1.8
Todd C. Miller [Mon, 9 Jan 2012 16:10:41 +0000 (11:10 -0500)]
Use SUDO_DEBUG_ALIAS for alias checking functions.
--HG--
branch : 1.8
Todd C. Miller [Mon, 9 Jan 2012 16:10:19 +0000 (11:10 -0500)]
More complete test for getaddrinfo() that doesn't rely on the network
libraries already being added to LIBS.
--HG--
branch : 1.8
Todd C. Miller [Mon, 9 Jan 2012 16:00:59 +0000 (11:00 -0500)]
Initialize the debug framework from the I/O plugin too.
Todd C. Miller [Sun, 8 Jan 2012 17:11:14 +0000 (12:11 -0500)]
Enable debugging via sudo.conf.
Todd C. Miller [Sat, 7 Jan 2012 17:24:43 +0000 (12:24 -0500)]
Use SUDO_DEBUG_ALIAS for alias checking functions.
Todd C. Miller [Sat, 7 Jan 2012 17:22:43 +0000 (12:22 -0500)]
More complete test for getaddrinfo() that doesn't rely on the network
libraries already being added to LIBS.
Todd C. Miller [Sat, 7 Jan 2012 01:15:25 +0000 (20:15 -0500)]
Add debug support.
--HG--
branch : 1.8
Todd C. Miller [Sat, 7 Jan 2012 01:10:41 +0000 (20:10 -0500)]
Add debug support.
Todd C. Miller [Sat, 7 Jan 2012 01:09:59 +0000 (20:09 -0500)]
Need -lsocket -lnsl for getaddrinfo(3) on Solaris at least.
--HG--
branch : 1.8
Todd C. Miller [Sat, 7 Jan 2012 01:09:44 +0000 (20:09 -0500)]
Include errno.h and missing.h
--HG--
branch : 1.8
Todd C. Miller [Sat, 7 Jan 2012 01:02:12 +0000 (20:02 -0500)]
Need -lsocket -lnsl for getaddrinfo(3) on Solaris at least.
Todd C. Miller [Sat, 7 Jan 2012 00:28:08 +0000 (19:28 -0500)]
Include errno.h and missing.h
Todd C. Miller [Fri, 6 Jan 2012 20:29:05 +0000 (15:29 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 20:28:05 +0000 (15:28 -0500)]
ignore doc/varsub
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 20:27:30 +0000 (15:27 -0500)]
ignore doc/varsub
Todd C. Miller [Fri, 6 Jan 2012 20:15:26 +0000 (15:15 -0500)]
regen pot files
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 19:24:31 +0000 (14:24 -0500)]
Update copyright year.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 19:24:22 +0000 (14:24 -0500)]
Update for sudo 1.8.4
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 19:23:55 +0000 (14:23 -0500)]
Update copyright year.
Todd C. Miller [Fri, 6 Jan 2012 19:19:53 +0000 (14:19 -0500)]
Update for sudo 1.8.4
Todd C. Miller [Fri, 6 Jan 2012 18:49:39 +0000 (13:49 -0500)]
regen pot files
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:49:16 +0000 (13:49 -0500)]
regen pot files
Todd C. Miller [Fri, 6 Jan 2012 18:26:56 +0000 (13:26 -0500)]
Enable debugging via sudo.conf.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:26:43 +0000 (13:26 -0500)]
Allow "visudo -c" to work when we only have read-only access to the
sudoers include files.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:26:36 +0000 (13:26 -0500)]
Mention the CONTRIBUTORS file, not HISTORY in AUTHOR section. Add
HISTORY section in sudo that points to HISTORY file.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:26:22 +0000 (13:26 -0500)]
Document Debug setting in sudo.conf and debug_flags in plugin.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:26:10 +0000 (13:26 -0500)]
Do not include GLOB_MARK in the flags we pass to glob(3). Fixes a
bug where a pattern like "/usr/*" include /usr/bin/ in the results,
which would be incorrectly be interpreted as if the sudoers file
had specified a directory. From Vitezslav Cizek.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:25:57 +0000 (13:25 -0500)]
Add --enable-kerb5-instance configure option to allow people using
Kerberos V authentication to use a custom instance. Adapted from
a diff by Michael E Burr.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:25:46 +0000 (13:25 -0500)]
Remove -D debug_level option.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:25:32 +0000 (13:25 -0500)]
Update copyright year.
--HG--
branch : 1.8
Todd C. Miller [Fri, 6 Jan 2012 18:13:04 +0000 (13:13 -0500)]
Enable debugging via sudo.conf.
Todd C. Miller [Fri, 6 Jan 2012 15:58:13 +0000 (10:58 -0500)]
Enable debugging via sudo.conf.
Todd C. Miller [Fri, 6 Jan 2012 15:54:30 +0000 (10:54 -0500)]
Allow "visudo -c" to work when we only have read-only access to the
sudoers include files.
Todd C. Miller [Fri, 6 Jan 2012 15:05:47 +0000 (10:05 -0500)]
Mention the CONTRIBUTORS file, not HISTORY in AUTHOR section. Add
HISTORY section in sudo that points to HISTORY file.
Todd C. Miller [Fri, 6 Jan 2012 14:44:41 +0000 (09:44 -0500)]
Document Debug setting in sudo.conf and debug_flags in plugin.
Todd C. Miller [Thu, 5 Jan 2012 20:54:00 +0000 (15:54 -0500)]
Do not include GLOB_MARK in the flags we pass to glob(3). Fixes a
bug where a pattern like "/usr/*" include /usr/bin/ in the results,
which would be incorrectly be interpreted as if the sudoers file
had specified a directory. From Vitezslav Cizek.
Todd C. Miller [Thu, 5 Jan 2012 20:39:05 +0000 (15:39 -0500)]
Add --enable-kerb5-instance configure option to allow people using
Kerberos V authentication to use a custom instance. Adapted from
a diff by Michael E Burr.
Todd C. Miller [Thu, 5 Jan 2012 16:48:24 +0000 (11:48 -0500)]
Remove -D debug_level option.
Todd C. Miller [Thu, 5 Jan 2012 16:47:22 +0000 (11:47 -0500)]
Update copyright year.
Todd C. Miller [Wed, 4 Jan 2012 20:46:28 +0000 (15:46 -0500)]
parse_error is now bool, not int
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 20:46:16 +0000 (15:46 -0500)]
Print a more sensible error if yyparse() returns non-zero but
yyerror() was not called.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 20:46:03 +0000 (15:46 -0500)]
Replace y.tab.c with the correct filename in #line directives.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 20:45:27 +0000 (15:45 -0500)]
parse_error is now bool, not int
Todd C. Miller [Wed, 4 Jan 2012 20:45:03 +0000 (15:45 -0500)]
Print a more sensible error if yyparse() returns non-zero but
yyerror() was not called.
Todd C. Miller [Wed, 4 Jan 2012 20:35:49 +0000 (15:35 -0500)]
Replace y.tab.c with the correct filename in #line directives.
Todd C. Miller [Wed, 4 Jan 2012 18:04:34 +0000 (13:04 -0500)]
Bump version to 1.8.4
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:03:37 +0000 (13:03 -0500)]
When trying to determine the tty, fall back on /proc/ppid/fd/{0,1,2}
if the main process's fds 0-2 are not hooked up to a tty. Adapted
from a diff by Zdenek Behan.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:03:23 +0000 (13:03 -0500)]
When not logging I/O, put command in its own pgrp and make that the
controlling pgrp if the command is in the foreground. Fixes a race
in the non-I/O logging path where the command may receive two
keyboard-generated signals; one from the kernel and one from the
sudo process.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:03:09 +0000 (13:03 -0500)]
Quiet a bogus gcc warning.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:03:01 +0000 (13:03 -0500)]
Fix warnings related to sudo.conf accessors.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:02:51 +0000 (13:02 -0500)]
Separate sudo.conf parsing from plugin loading and move the parse
functions into the common lib so that visudo, etc. can use them.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:02:24 +0000 (13:02 -0500)]
Remove support for noexec_file in sudoers and the plugin API
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:02:16 +0000 (13:02 -0500)]
Don't dump interfaces if there are none.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:02:05 +0000 (13:02 -0500)]
Add missing %s printf escape to the group_plugin, iolog_dir and
iolog_file descriptions.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:01:55 +0000 (13:01 -0500)]
Fix typo in visiblepw description; from Joel Pickett
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:01:41 +0000 (13:01 -0500)]
When running a login shell with a login_class specified, use
LOGIN_SETENV instead of rolling our own login.conf setenv support
since FreeBSD's login.conf has more than just setenv capabilities.
This requires us to swap the plugin-provided envp for the global
environ before calling setusercontext() and then stash the resulting
environ pointer back into the command details, which is kind of a
hack.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 18:01:11 +0000 (13:01 -0500)]
If srcdir is "." just use the basename of the yacc/lex file when
generating the C version. This matches the generated files currently
in the repo.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:57:25 +0000 (12:57 -0500)]
Clean up the DEVEL noise
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:57:06 +0000 (12:57 -0500)]
Handle different Unix domain socket (actually socketpair) semantics
in BSD vs. Linux. In BSD if one end of the socketpair goes away
select() returns the fd as readable and the read will fail with
ECONNRESET. This doesn't appear to happen on Linux so if we notice
that the monitor process has died when I/O logging is enabled,
behave like the command has exited. This means we log the wait
status of the monitor, not the command, but there is nothing else
we can do at that point. This should only be an issue if SIGKILL
is sent to the monitor process.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:56:54 +0000 (12:56 -0500)]
Catch common signals in the monitor process so they get passed to
the command. Fixes a problem when the entire login session is
killed when ssh is disconnected or the terminal window is closed.
Previously, the monitor would exit and plugin's close method would
not be called.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:56:43 +0000 (12:56 -0500)]
Mention how to configure pam_hpsec on HP-UX to play nicely with sudo.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:56:34 +0000 (12:56 -0500)]
Escape values in the search expression as per RFC 4515.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:56:25 +0000 (12:56 -0500)]
No need for install target to depend explicitly on install-dirs,
the install-foo targets all depend on it.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:56:17 +0000 (12:56 -0500)]
ignore src/sesh
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:56:09 +0000 (12:56 -0500)]
Add support for setenv entries in login.conf. We can't use LOGIN_SETENV
since the plugin sets up the envp the command is executed with.
Also regen the Makefile.in files while here. Fixes bug #527
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:55:48 +0000 (12:55 -0500)]
Add getaddrinfo() for those without it, written by Russ Allbery
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:55:31 +0000 (12:55 -0500)]
Restore PACKAGE_TARNAME, it is used in docdir
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:55:23 +0000 (12:55 -0500)]
SunPro C Compiler also has a _Bool builtin.
Also add stdbool.h to the MANIFEST
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:55:14 +0000 (12:55 -0500)]
Remove duplicate return statements.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:55:05 +0000 (12:55 -0500)]
emove inaccurate comment
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:54 +0000 (12:54 -0500)]
Fetch the login class for the user we authenticate specifically when
using BSD authentication. That user may have a different login class
than what we will use to run the command. When setting the login
class for the command, use the target user's struct passwd, not
the invoking user's. Fixes bug 526
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:43 +0000 (12:54 -0500)]
Replace @DEV@ prefix with DEVEL variable so we can do "make DEVEL=1"
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:32 +0000 (12:54 -0500)]
Fix "make check" fallout from the sudo_conv changes in sudo_debug.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:23 +0000 (12:54 -0500)]
Use stdbool.h instead of rolling our own TRUE/FALSE macros.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:08 +0000 (12:54 -0500)]
Add stdbool.h for systems without it.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:53 +0000 (12:53 -0500)]
No longer need SUDO_CHECK_TYPE and SUDO_TYPE_* now that the default
includes have unistd.h in them. Add check for socklen_t for upcoming
getaddrinfo compat.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:41 +0000 (12:53 -0500)]
Use HAVE_STRUCT_TIMESPEC and HAVE_STRUCT_IN6_ADDR instead of
HAVE_TIMESPEC and HAVE_IN6_ADDR respectively.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:28 +0000 (12:53 -0500)]
No longer need to include time.h here as missing.h does not use
time_t.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:19 +0000 (12:53 -0500)]
Fix mode on sudoers as needed when the -f option is not specified.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:09 +0000 (12:53 -0500)]
Add Serbian translation for sudo from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:01 +0000 (12:53 -0500)]
No longer pass debug_file to plugin, plugins must now use CONV_DEBUG_MSG
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:53 +0000 (12:52 -0500)]
Build PIE executables for newer Debian and Ubuntu
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:44 +0000 (12:52 -0500)]
Include time.h for ctime() prototype.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:36 +0000 (12:52 -0500)]
Do not close error pipe or debug fd via closefrom() as we need them
to report an exec error should one occur.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:24 +0000 (12:52 -0500)]
Document that a sudoUser may now be a group ID.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:14 +0000 (12:52 -0500)]
Add support for permitting access by group ID in addition to group name.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:03 +0000 (12:52 -0500)]
Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:48 +0000 (12:51 -0500)]
Replace UCB fnmatch.c with a non-recursive version written by
William A. Rowe Jr.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:34 +0000 (12:51 -0500)]
Fix typo, return_debug vs. debug_return
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:25 +0000 (12:51 -0500)]
Update Japanese sudoers translation from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:09 +0000 (12:51 -0500)]
Make the env_reset descriptions consistent.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:58 +0000 (12:50 -0500)]
Do multiple expansion when expanding paths to the noexec file, sesh
and the plugin directory. Adapted from a diff by Mike Frysinger
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:44 +0000 (12:50 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:35 +0000 (12:50 -0500)]
Add ignore file; from Mike Frysinger
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:27 +0000 (12:50 -0500)]
no longer save old Makefile.in to .old
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:19 +0000 (12:50 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:54 +0000 (12:49 -0500)]
Update to libtool 2.4.2
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:46 +0000 (12:49 -0500)]
Bump grammar version for #include and #includedir relative path support.
--HG--
branch : 1.8