Todd C. Miller [Wed, 25 May 2011 17:04:13 +0000 (13:04 -0400)]
When checking aliases, also check the contents of the alias in case there
are problems with an alias that is referenced inside another.
Replace the self reference check with real alias cycle detection.
Todd C. Miller [Wed, 25 May 2011 15:31:11 +0000 (11:31 -0400)]
Increment alias_seqno before calls to alias_remove_recursive() to
avoid false positives with the alias loop detection. Fixes spurious
warnings about unused aliases when they are nested.
Todd C. Miller [Mon, 23 May 2011 18:00:54 +0000 (14:00 -0400)]
If the user specifies a runas group via sudo's -g option that matches
the runas user's group in the passwd database and that group is not
denied in the Runas_Spec, allow it. Thus, if user root's gid in
/etc/passwd is 0, then "sudo -u root -g root id" is allow even if
no groups are present in the Runas_Spec.
Todd C. Miller [Tue, 17 May 2011 20:38:40 +0000 (16:38 -0400)]
Add calls to bindtextdomain() and textdomain()
Currently there are two domains, one for the sudo front-end and
one for the sudoers plugin and its associated utilities.
Todd C. Miller [Mon, 9 May 2011 14:02:16 +0000 (10:02 -0400)]
When building with gcc on HP-UX, use -march=1.1 to produce portable
binaries on a pa-risc2 host. Previously, the +Dportable option was
used for the HP-UX C compiler but gcc always produced native binaries.
Todd C. Miller [Tue, 3 May 2011 17:45:56 +0000 (13:45 -0400)]
Resolve namespace collisions on HP-UX ia64 and possibly others by
adding a rpl_ prefix to our fnmatch and glob replacements and
#defining rpl_foo to foo in the header files.
Todd C. Miller [Fri, 29 Apr 2011 20:05:50 +0000 (16:05 -0400)]
Split ALL, ROLE and TYPE into their own actions. Since you can
only have #ifdefs inside of braces, ROLE and TYPE use a naughty
goto in the non-SELinux case. This is safe because the actions are
in one big switch() statement.
Todd C. Miller [Wed, 27 Apr 2011 15:42:46 +0000 (11:42 -0400)]
Remove obsolete warning about runas_default and ordering.
Move syslog facility and priority lists into the section where
the relevant options are described.
Todd C. Miller [Tue, 26 Apr 2011 13:51:34 +0000 (09:51 -0400)]
Fix SIA support; we no longer have access to the real argc and argv
so allocate space for a fake one and use the argv passed to the
plugin with "sudo" for argv[0].
Todd C. Miller [Mon, 18 Apr 2011 13:22:26 +0000 (09:22 -0400)]
Need to do checks for krb5_verify_user, krb5_init_secure_context
and krb5_get_init_creds_opt_alloc regardless of whether or not
krb5-config is present.
Todd C. Miller [Wed, 6 Apr 2011 21:51:36 +0000 (17:51 -0400)]
Load plugins after parsing arguments and potentially printing the
version. That way, an error loading or initializing a plugin doesn't
break "sudo -h" or "sudo -V".
Todd C. Miller [Wed, 6 Apr 2011 14:57:39 +0000 (10:57 -0400)]
Fix fnmatch and glob tests to not use hard-coded flag values in the
input file. Link test programs with libreplace so we get our
replacement verions as needed.
Todd C. Miller [Wed, 6 Apr 2011 11:01:17 +0000 (07:01 -0400)]
Back out the --with-libpath addition to SUDOERS_LDFLAGS since that
now include LDFLAGS in the sudoers Makefile.in.
Add missing settng of @LDFLAGS@ in plugin Makefile.in files.
Todd C. Miller [Tue, 5 Apr 2011 13:42:59 +0000 (09:42 -0400)]
The --with-libpath option now adds to SUDOERS_LDFLAGS as well as LDFLAGS.
Remove old -static hack for HP-UX < 9.
Add LTLDFLAGS and set it to -Wc,-static-libgcc if not using GNU ld so we
don't have a dependency on the shared libgcc in sudoers.so.
Todd C. Miller [Wed, 30 Mar 2011 14:14:25 +0000 (10:14 -0400)]
We need to include OSDEFS in CFLAGS when doing the utmp/utmpx
structure checks for glibc which only has __e_termination visible
when _GNU_SOURCE is *not* defined.