]>
granicus.if.org Git - sudo/log
Todd C. Miller [Tue, 30 Nov 2010 20:22:07 +0000 (15:22 -0500)]
Use %u to print uid/gid, not %lu and adjust casts to match.
--HG--
branch : 1.7
Todd C. Miller [Tue, 30 Nov 2010 20:06:22 +0000 (15:06 -0500)]
Update with latest changes
--HG--
branch : 1.7
Todd C. Miller [Tue, 30 Nov 2010 20:05:56 +0000 (15:05 -0500)]
Clarify ordering of entries and attributes
--HG--
branch : 1.7
Todd C. Miller [Tue, 30 Nov 2010 18:40:45 +0000 (13:40 -0500)]
Fix typo and editing goof.
--HG--
branch : 1.7
Todd C. Miller [Tue, 30 Nov 2010 16:59:49 +0000 (11:59 -0500)]
Make sure we don't dereference a NULL handle.
--HG--
branch : 1.7
Todd C. Miller [Wed, 24 Nov 2010 16:23:44 +0000 (11:23 -0500)]
Add support for RHEL 6 file modes that include a trailing dot on files with an SELinux security context
--HG--
branch : 1.7
Todd C. Miller [Mon, 22 Nov 2010 20:45:01 +0000 (15:45 -0500)]
fix typo; from Michael T Hunter
--HG--
branch : 1.7
Todd C. Miller [Mon, 22 Nov 2010 15:28:07 +0000 (10:28 -0500)]
In sudoedit mode, assume command line arguments are paths and
pass FNM_PATHNAME to fnmatch().
--HG--
branch : 1.7
Todd C. Miller [Sat, 20 Nov 2010 21:27:04 +0000 (16:27 -0500)]
Add workaround for an error in sys/types.h on HP-UX 11.23 when
large file support is enabled. Defining _XOPEN_SOURCE_EXTENDED
avoids the broken bits of the header file.
--HG--
branch : 1.7
Todd C. Miller [Sat, 20 Nov 2010 21:23:56 +0000 (16:23 -0500)]
Fix SUDO_MAILDIR usage of AC_LANG_PROGRAM
--HG--
branch : 1.7
Todd C. Miller [Sat, 20 Nov 2010 15:46:38 +0000 (10:46 -0500)]
Avoid conflicts with system definitions in grp.h and pwd.h
--HG--
branch : 1.7
Todd C. Miller [Sat, 20 Nov 2010 15:37:11 +0000 (10:37 -0500)]
For Tru64, strip off beta version.
--HG--
branch : 1.7
Todd C. Miller [Sat, 20 Nov 2010 14:59:52 +0000 (09:59 -0500)]
Include stdio.h after zlib.h, not before. We need the large file defines
to come first.
--HG--
branch : 1.7
Todd C. Miller [Wed, 17 Nov 2010 23:55:09 +0000 (18:55 -0500)]
Enlarge the array of entry wrappers int blocks of 100 entries to
save on allocation time. From Andreas Mueller
--HG--
branch : 1.7
Todd C. Miller [Wed, 17 Nov 2010 12:30:55 +0000 (07:30 -0500)]
Add back call to sudo_ldap_timefilter() in sudo_ldap_build_pass2()
that was mistakenly dropped.
--HG--
branch : 1.7
Todd C. Miller [Tue, 16 Nov 2010 15:08:00 +0000 (10:08 -0500)]
Mention that sudo needs "ar" to build.
--HG--
branch : 1.7
Todd C. Miller [Tue, 16 Nov 2010 15:02:26 +0000 (10:02 -0500)]
Fail with a more useful error if "ar" is not found.
--HG--
branch : 1.7
Todd C. Miller [Sun, 14 Nov 2010 16:00:52 +0000 (11:00 -0500)]
Reorder things to avoid most of the extra prototypes.
--HG--
branch : 1.7
Todd C. Miller [Sun, 14 Nov 2010 15:52:17 +0000 (10:52 -0500)]
Inline sudo_ldap_result_get_entry(), it is always called in situations
where the bounds are already checked.
--HG--
branch : 1.7
Todd C. Miller [Sun, 14 Nov 2010 15:50:16 +0000 (10:50 -0500)]
Add user_matches and host_matches to struct ldap_result and set them
in sudo_ldap_result_get() which is where the user and host checks live.
When iterating through the ordered results, take the first match.
Remove allowed flag from struct ldap_entry_wrapper, we just use first match.
--HG--
branch : 1.7
Todd C. Miller [Sat, 13 Nov 2010 18:56:49 +0000 (13:56 -0500)]
Bump version and regen man pages
--HG--
branch : 1.7
Todd C. Miller [Sat, 13 Nov 2010 18:53:37 +0000 (13:53 -0500)]
Merge in ordered LDAP entry support from Andreas Mueller.
--HG--
branch : 1.7
Todd C. Miller [Thu, 11 Nov 2010 21:54:45 +0000 (16:54 -0500)]
Add timed entry support from Andreas Mueller.
--HG--
branch : 1.7
Todd C. Miller [Thu, 11 Nov 2010 21:09:34 +0000 (16:09 -0500)]
Use efree() not free() and remove malloc.h include since we never
directly call malloc() or free().
--HG--
branch : 1.7
Todd C. Miller [Wed, 10 Nov 2010 14:10:16 +0000 (09:10 -0500)]
Include config.h before any other includes to make sure we get the
right value for _FILE_OFFSET_BITS.
--HG--
branch : 1.7
Todd C. Miller [Tue, 9 Nov 2010 16:13:24 +0000 (11:13 -0500)]
set PSTAMP for Solaris and move the backend-specific bits to their
own %if [xxx] %endif blocks in %set.
--HG--
branch : 1.7
Todd C. Miller [Tue, 9 Nov 2010 15:56:11 +0000 (10:56 -0500)]
sync with git repo
--HG--
branch : 1.7
Todd C. Miller [Wed, 3 Nov 2010 17:17:29 +0000 (13:17 -0400)]
remove zlib/zconf.h for distclean
--HG--
branch : 1.7
Todd C. Miller [Wed, 3 Nov 2010 15:13:31 +0000 (11:13 -0400)]
regen man pages for 1.7.5
--HG--
branch : 1.7
Todd C. Miller [Wed, 3 Nov 2010 15:13:00 +0000 (11:13 -0400)]
regen
--HG--
branch : 1.7
Todd C. Miller [Wed, 3 Nov 2010 14:03:02 +0000 (10:03 -0400)]
Update 1.7.5 entries.
--HG--
branch : 1.7
Todd C. Miller [Tue, 2 Nov 2010 21:11:09 +0000 (17:11 -0400)]
Include zlib in the tar file.
--HG--
branch : 1.7
Todd C. Miller [Thu, 28 Oct 2010 18:29:42 +0000 (14:29 -0400)]
Better --enable-zlib description
--HG--
branch : 1.7
Todd C. Miller [Thu, 28 Oct 2010 16:24:51 +0000 (12:24 -0400)]
Use system zlib on Linux
Let configure decide on Solaris
For all others, use builtin zlib
--HG--
branch : 1.7
Todd C. Miller [Thu, 28 Oct 2010 16:21:24 +0000 (12:21 -0400)]
Add local copy of zlib for systems that lack it.
--HG--
branch : 1.7
Todd C. Miller [Tue, 12 Oct 2010 13:36:19 +0000 (09:36 -0400)]
Don't overwrite ChangeLog if we can't run hg
--HG--
branch : 1.7
Todd C. Miller [Tue, 12 Oct 2010 13:24:03 +0000 (09:24 -0400)]
HP-UX 10.20 libc has an incompatible getline()
--HG--
branch : 1.7
Todd C. Miller [Tue, 12 Oct 2010 13:23:29 +0000 (09:23 -0400)]
Quiet an HP-UX compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Mon, 11 Oct 2010 20:14:52 +0000 (16:14 -0400)]
Don't use run_as_superuser=false on HP-UX
--HG--
branch : 1.7
Todd C. Miller [Mon, 11 Oct 2010 18:23:58 +0000 (14:23 -0400)]
Update from git repo.
Debian: version numbers now compliant with policy section 5.6.12
HP-UX: minimal changes needed to work on HP-UX 10.20
--HG--
branch : 1.7
Todd C. Miller [Mon, 11 Oct 2010 16:11:23 +0000 (12:11 -0400)]
Go back to checking whether the compiler is ANSI C when detecting
the HP-UX bundled C compiler.
--HG--
branch : 1.7
Todd C. Miller [Mon, 11 Oct 2010 15:51:20 +0000 (11:51 -0400)]
Fix syntax error
--HG--
branch : 1.7
Todd C. Miller [Mon, 11 Oct 2010 12:55:31 +0000 (08:55 -0400)]
If pam_acct_mgmt() returns PAM_AUTH_ERR print a (hopefully) more useful
message and return AUTH_FATAL so sudo does not keep trying to validate
the user.
--HG--
branch : 1.7
Todd C. Miller [Thu, 7 Oct 2010 18:08:44 +0000 (14:08 -0400)]
don't need ws_col here
--HG--
branch : 1.7
Todd C. Miller [Thu, 7 Oct 2010 18:08:16 +0000 (14:08 -0400)]
Having a timestamp file defined is no longer indicative of tty tickets
being enabled. Check def_tty_tickets directly.
--HG--
branch : 1.7
Todd C. Miller [Thu, 7 Oct 2010 17:59:39 +0000 (13:59 -0400)]
Fix TCGETWINSZ compat.
--HG--
branch : 1.7
Todd C. Miller [Sat, 2 Oct 2010 21:07:27 +0000 (17:07 -0400)]
Prefer newer TIOCGWINSZ ioctl to old TIOCGSIZE
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 17:52:59 +0000 (13:52 -0400)]
Sync set_project() with trunk.
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 16:12:54 +0000 (12:12 -0400)]
When iterating over returned LDAP entries, keep looking at remaining
matches even if we have a positive match. This catches negative
matches that may exist in other entries and more closely match the
sudoers file behavior.
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 16:07:45 +0000 (12:07 -0400)]
Add support for multiple package instances on Solaris.
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 16:05:14 +0000 (12:05 -0400)]
Move set_project() into runas_setup(). Fixes a NULL deref when
project support is enabled and sudo's -g flag is used without the
-u flag.
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 16:03:55 +0000 (12:03 -0400)]
Add missing signal_pipe[0] to fdsr for the non-pty case.
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 15:35:51 +0000 (11:35 -0400)]
Add --with-project for Solaris
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Oct 2010 13:38:33 +0000 (09:38 -0400)]
Need ar and ranlib too
--HG--
branch : 1.7
Todd C. Miller [Mon, 27 Sep 2010 18:09:34 +0000 (14:09 -0400)]
Preserve ODMDIR environment variable by default on AIX.
--HG--
branch : 1.7
Todd C. Miller [Tue, 21 Sep 2010 11:56:36 +0000 (07:56 -0400)]
Ignore ECONNREFUSED from audit_log_user_command() which will
occur if auditd is not running.
--HG--
branch : 1.7
Todd C. Miller [Fri, 17 Sep 2010 16:13:17 +0000 (12:13 -0400)]
Sync with git version
--HG--
branch : 1.7
Todd C. Miller [Thu, 16 Sep 2010 14:40:34 +0000 (10:40 -0400)]
Cast isblank argument to unsigned char.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 21:12:33 +0000 (17:12 -0400)]
Implement --with-umask-override configure flag.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 15:44:39 +0000 (11:44 -0400)]
Take MODE_LOGIN_SHELL into account when initially setting reset_home
instead of special-casing it later.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 15:30:20 +0000 (11:30 -0400)]
In login mode, make a copy of the runas user's pw_shell for NewArgv[0]
because 1) we modify it and 2) it will runas_pw gets freed before exec.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 15:28:41 +0000 (11:28 -0400)]
Reset HOME for "sudo -i" even if HOME was listed in env_keep.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 13:25:58 +0000 (09:25 -0400)]
Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 13:23:28 +0000 (09:23 -0400)]
Reset signal mask at sudo startup time; we need to be able to rely on
normal signal delivery to control the child process.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 13:21:59 +0000 (09:21 -0400)]
Fix SIG_UNBLOCK emulation
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 20:34:16 +0000 (16:34 -0400)]
Use sed instead of expr to split a flag from its argument.
Fixes a problem with expr interpreting its arguments as a flag
when they start with a dash.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 17:20:20 +0000 (13:20 -0400)]
Back out rev
e165f67d3127
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 17:16:59 +0000 (13:16 -0400)]
Include sys/time.h for utimes() and struct timeval.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 16:19:03 +0000 (12:19 -0400)]
Quiet bogus compiler warnings.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 15:53:01 +0000 (11:53 -0400)]
Declare innetgr() for HP-UX which is missing a declaration.
Declare domainname() for HP-UX and Solaris which are missing a declaration.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 15:48:51 +0000 (11:48 -0400)]
Use __sun for consistency with the rest of the sources.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 15:08:27 +0000 (11:08 -0400)]
Don't try to delref a NULL group.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 14:40:37 +0000 (10:40 -0400)]
Include memory.h on systems that need it.
--HG--
branch : 1.7
Todd C. Miller [Sat, 11 Sep 2010 13:26:20 +0000 (09:26 -0400)]
Quiet gcc warnings on glibc systems that use warn_unused_result for
write(2).
--HG--
branch : 1.7
Todd C. Miller [Fri, 10 Sep 2010 17:56:20 +0000 (13:56 -0400)]
Update for sudo 1.7.5
--HG--
branch : 1.7
Todd C. Miller [Fri, 10 Sep 2010 17:19:26 +0000 (13:19 -0400)]
Instead of using a array to store received signals, open a pipe and
have the signal handler write the signal number to one end and
select() on the other end. This makes it possible to handle signals
similar to I/O without race conditions.
--HG--
branch : 1.7
Todd C. Miller [Fri, 10 Sep 2010 17:16:52 +0000 (13:16 -0400)]
--with-iologdir not --enable-iologdir
--HG--
branch : 1.7
Todd C. Miller [Thu, 9 Sep 2010 21:09:54 +0000 (17:09 -0400)]
Make "visudo -c -f -" check the standard input.
--HG--
branch : 1.7
Todd C. Miller [Thu, 9 Sep 2010 20:22:08 +0000 (16:22 -0400)]
set_home and always_set_home have an effect if HOME is present in
the env_keep list.
--HG--
branch : 1.7
Todd C. Miller [Thu, 9 Sep 2010 20:16:19 +0000 (16:16 -0400)]
Make -H flag work when HOME is listed in env_keep. Also makes
"set_home" and "always_set_home" override override HOME in env_keep.
--HG--
branch : 1.7
Todd C. Miller [Wed, 8 Sep 2010 13:46:49 +0000 (09:46 -0400)]
Solaris BSM audit return EINVAL when auditing is not enabled, whereas
OpenBSM returns ENOSYS.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 21:15:43 +0000 (17:15 -0400)]
Add missing LOG_INPUT/LOG_OUTPUT support in the lexer.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 21:00:32 +0000 (17:00 -0400)]
Set NewArgv[0] to the name of the pseudo-command we are running.
Fixes a problem with "sudo -l" when auditing is enabled and the
user is not allowed to run any commands on the host.
Adapted from a patch from Daniel Kopecek.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 14:27:45 +0000 (10:27 -0400)]
Update comment to reality.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 14:24:51 +0000 (10:24 -0400)]
Need stdio.h for FILE *, not just NULL.
--HG--
branch : 1.7
Todd C. Miller [Mon, 6 Sep 2010 11:56:25 +0000 (07:56 -0400)]
When matching the runas user and runas group (-u and -g command
line options), keep track of runas group and runas user matches
separately. Only return a positive match if we have a match for
both runas user and runas group (if specified).
--HG--
branch : 1.7
Todd C. Miller [Sat, 4 Sep 2010 12:33:45 +0000 (08:33 -0400)]
Do not return -1 on error from the display functions; the call expects
a return value >= 0.
--HG--
branch : 1.7
Todd C. Miller [Sat, 4 Sep 2010 11:47:27 +0000 (07:47 -0400)]
display_bound_defaults now returns a count so make the stub
return 0, not 1.
--HG--
branch : 1.7
Todd C. Miller [Sat, 4 Sep 2010 11:22:31 +0000 (07:22 -0400)]
Add #include of sys/types.h for .c files that include missing.h to
be sure that size_t and ssize_t are defined.
--HG--
branch : 1.7
Todd C. Miller [Fri, 3 Sep 2010 21:30:28 +0000 (17:30 -0400)]
It looks like AIX doesn't need to push STREAMS modules for ptys.
--HG--
branch : 1.7
Todd C. Miller [Mon, 30 Aug 2010 13:08:16 +0000 (09:08 -0400)]
Add #include of sys/types.h for .c files that include missing.h to
be sure that size_t and ssize_t are defined.
--HG--
branch : 1.7
Todd C. Miller [Mon, 30 Aug 2010 13:06:04 +0000 (09:06 -0400)]
Install sudoers file from the build dir not hte src dir.
--HG--
branch : 1.7
Todd C. Miller [Thu, 26 Aug 2010 15:36:47 +0000 (11:36 -0400)]
If runas_pw changes, reset the stashed runas aux group vector.
Otherwise, if runas_default is set in a per-command Defaults statement,
the command runs with root's aux group vector (i.e. the one that
was used when locating the command).
--HG--
branch : 1.7
Todd C. Miller [Thu, 26 Aug 2010 15:10:00 +0000 (11:10 -0400)]
Add target to generate sudoers file
Remove generated sudoers file as part of distclean
--HG--
branch : 1.7
millert@rh4-x86.home.courtesan.com [Tue, 24 Aug 2010 01:01:00 +0000 (21:01 -0400)]
When not logging I/O install a handler for SIGCONT and deliver it
to the command upon resume. Fixes bugzilla #431
--HG--
branch : 1.7
Todd C. Miller [Sat, 21 Aug 2010 14:02:29 +0000 (10:02 -0400)]
g/c unused auth_pw global
--HG--
branch : 1.7
Todd C. Miller [Sat, 21 Aug 2010 12:48:13 +0000 (08:48 -0400)]
Move get_auth() into check.c where it is actually used.
--HG--
branch : 1.7
Todd C. Miller [Sat, 21 Aug 2010 12:31:21 +0000 (08:31 -0400)]
Don't need to fork and wait when compiled with --disable-pam-session
--HG--
branch : 1.7
Todd C. Miller [Fri, 20 Aug 2010 20:54:57 +0000 (16:54 -0400)]
Convert a remaining puts() and putchar() to use the output function.
--HG--
branch : 1.7
Todd C. Miller [Wed, 18 Aug 2010 19:32:30 +0000 (15:32 -0400)]
Replace sudoers with sudoers.in in DISTFILES
--HG--
branch : 1.7