]>
granicus.if.org Git - sudo/log
Todd C. Miller [Mon, 26 Jul 2010 18:25:33 +0000 (14:25 -0400)]
Create timedir as part of install-dirs target.
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 17:03:44 +0000 (13:03 -0400)]
Handle ENXIO from read/write which can occur when reading/writing
a pty that has gone away. Fixes bugzilla 422
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 16:34:27 +0000 (12:34 -0400)]
sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 15:34:41 +0000 (11:34 -0400)]
platform is a pp flag not a variable
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 15:15:19 +0000 (11:15 -0400)]
Add simple arg parsing for mkpkg so we can set debug, flavor or platform.
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 15:13:54 +0000 (11:13 -0400)]
Make rpm backend work on AIX 5.x
--HG--
branch : 1.7
Todd C. Miller [Sun, 25 Jul 2010 17:12:30 +0000 (13:12 -0400)]
Add commented out Defaults entry for log_output
--HG--
branch : 1.7
Todd C. Miller [Fri, 23 Jul 2010 15:26:00 +0000 (11:26 -0400)]
Install binary files with -b~ to make a backup.
Fixes "text file busy" error on HP-UX during install.
--HG--
branch : 1.7
Todd C. Miller [Fri, 23 Jul 2010 15:23:04 +0000 (11:23 -0400)]
"mv -f" on HP-UX doesn't unlink the destination first so add
an explicit rm before moving the temporary into place.
--HG--
branch : 1.7
Todd C. Miller [Fri, 23 Jul 2010 13:35:52 +0000 (09:35 -0400)]
Some more ${foo} -> $(foo) conversion for consistent Makefiles.
--HG--
branch : 1.7
Todd C. Miller [Thu, 22 Jul 2010 22:44:35 +0000 (18:44 -0400)]
Add missing include of maillock.h for Solaris
--HG--
branch : 1.7
Todd C. Miller [Thu, 22 Jul 2010 21:47:36 +0000 (17:47 -0400)]
Change the default syslog facility from local2 to authpriv (or auth
if the operating system doesn't support authpriv).
--HG--
branch : 1.7
Todd C. Miller [Thu, 22 Jul 2010 17:45:53 +0000 (13:45 -0400)]
Install sudoers as /etc/sudoers on RPM and debian systems where the
package manager will not replace a user-modified configuration file.
This fixes upgrades from the vendor sudo packages.
--HG--
branch : 1.7
Todd C. Miller [Thu, 22 Jul 2010 17:42:50 +0000 (13:42 -0400)]
RPM: use %config(noreplace) instead of %config for volatile This
results in the new file being installed with a .rpmnew suffix instead
of the file being replaced and the old one renamed with a .rpmsave
suffix.
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 20:00:26 +0000 (16:00 -0400)]
Include time.h for struct timeval.
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 19:57:21 +0000 (15:57 -0400)]
The return value of strsignal() may be const and should be treated
as const regardless.
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 19:18:05 +0000 (15:18 -0400)]
Mention that 127.0.0.1 will not match, nor will localhost unless
that is the actual host name.
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 19:02:41 +0000 (15:02 -0400)]
fix typo
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 18:57:41 +0000 (14:57 -0400)]
Rename WHATSNEW -> NEWS
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 18:54:36 +0000 (14:54 -0400)]
Updated pp with latest patches
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 14:17:22 +0000 (10:17 -0400)]
If pam is in use, wait until the process has finished before calling
pam_close_session().
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 13:50:31 +0000 (09:50 -0400)]
regen sudoers manual
--HG--
branch : 1.7
Todd C. Miller [Wed, 21 Jul 2010 13:49:27 +0000 (09:49 -0400)]
Add commented out line to add HOME to env_keep and add a warning
to the note about the HOME change in UPGRADE.
--HG--
branch : 1.7
Todd C. Miller [Tue, 20 Jul 2010 19:33:29 +0000 (15:33 -0400)]
Add LINE_MAX define for those without it.
--HG--
branch : 1.7
Todd C. Miller [Tue, 20 Jul 2010 17:19:54 +0000 (13:19 -0400)]
Mention that tty_tickets is now the default.
--HG--
branch : 1.7
Todd C. Miller [Tue, 20 Jul 2010 17:12:28 +0000 (13:12 -0400)]
The tty_tickets option is now on by default.
--HG--
branch : 1.7
Todd C. Miller [Tue, 20 Jul 2010 16:44:07 +0000 (12:44 -0400)]
Mention that AIX authdb support has been fixed.
--HG--
branch : 1.7
Todd C. Miller [Tue, 20 Jul 2010 16:40:47 +0000 (12:40 -0400)]
setauthdb() only sets the "old" registry if it was set by a previous
call to setauthdb(). To restore the original value, passing NULL
(or an empty string) to setauthdb() is sufficient.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 19:31:33 +0000 (15:31 -0400)]
Mention new handling of HOME in always_set_home and set_home descriptions.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 19:14:27 +0000 (15:14 -0400)]
fix typo
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 19:08:04 +0000 (15:08 -0400)]
Reset HOME when env_reset is enabled unless it is in env_keep
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 18:11:06 +0000 (14:11 -0400)]
The default for set_logname has been "true" for some time now.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 16:48:47 +0000 (12:48 -0400)]
Document that MAIL it set in env_reset mode.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 16:42:15 +0000 (12:42 -0400)]
Add missing include of time.h
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 16:39:41 +0000 (12:39 -0400)]
Check return value of setdefs() but don't stop setting defaults if
we hit an unknown one.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 16:37:39 +0000 (12:37 -0400)]
Fix check for dup2() return value.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 16:28:14 +0000 (12:28 -0400)]
Treat an unknown defaults entry as a parse error.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 16:12:03 +0000 (12:12 -0400)]
Check KEPT_MAIL not DID_MAIL when determining whether to set MAIL
in -i and env_reset mode.
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 15:15:32 +0000 (11:15 -0400)]
Add PYTHONUSERBASE to initial_badenv_table
--HG--
branch : 1.7
Todd C. Miller [Mon, 19 Jul 2010 15:08:09 +0000 (11:08 -0400)]
If env_reset is enabled, set the MAIL environment variable based
on the target user unless MAIL is explicitly preserved in sudoers.
--HG--
branch : 1.7
Todd C. Miller [Sat, 17 Jul 2010 22:29:29 +0000 (18:29 -0400)]
decode debian code names
--HG--
branch : 1.7
Todd C. Miller [Sat, 17 Jul 2010 17:27:26 +0000 (13:27 -0400)]
fix typo
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 18:36:10 +0000 (14:36 -0400)]
Add entry about SuSE bash script fix.
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 17:59:44 +0000 (13:59 -0400)]
Restore RLIMIT_NPROC after the uid switch if it appears that runas_setup()
did not do it for us. Fixes a bash script problem on SuSE with RLIMIT_NPROC
set to RLIM_INFINITY.
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 02:18:27 +0000 (22:18 -0400)]
Restore the dot removal in the os version reported by polypkg.
Adapt mkpkg and sudo.pp to the change.
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 12:26:29 +0000 (08:26 -0400)]
Mention polypkg
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 12:22:49 +0000 (08:22 -0400)]
Update for sudo 1.7.4
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 11:09:49 +0000 (07:09 -0400)]
document --with-pam-login
--HG--
branch : 1.7
Todd C. Miller [Fri, 16 Jul 2010 09:57:18 +0000 (05:57 -0400)]
The tag is NOSETENV, not UNSETENV. From Petr Uzel.
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 20:52:03 +0000 (16:52 -0400)]
Include flavor in solaris package name
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 20:36:02 +0000 (16:36 -0400)]
Older shells don't support IFS= so set explictly to space, tab, newline.
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 19:44:47 +0000 (15:44 -0400)]
Use '=' not '==' in test
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 19:22:57 +0000 (15:22 -0400)]
Fix typo that prevented debian from matching
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 19:20:13 +0000 (15:20 -0400)]
Add missing prefix setting for debian
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 18:58:00 +0000 (14:58 -0400)]
Use tab indents to reduce the chance of problem with <<-
Uncomment some env_keep lines for RHEL, SLES and Debian to more
closely match the vendor sudoers files.
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 17:06:12 +0000 (13:06 -0400)]
Fix indentation
Fix the debian %set section, pp does not set pp_deb_distro
Uncomment %sudo line in sudoers for debian
Add pam.d to %files for debian
Remove the /etc/sudo-ldap.conf symlink on debian for ldap flavor
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 16:14:51 +0000 (12:14 -0400)]
Add commented out env_keep entries, sample Aliases and a %sudo line
for debian.
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 13:50:40 +0000 (09:50 -0400)]
Remove check for egrep; configure has its own
--HG--
branch : 1.7
Todd C. Miller [Thu, 15 Jul 2010 13:50:07 +0000 (09:50 -0400)]
Use enable_zlib instead of enableval for consistency
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 20:03:23 +0000 (16:03 -0400)]
Enable zlib for linux distros
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 19:55:59 +0000 (15:55 -0400)]
Add ldap flavor to default build
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 19:53:32 +0000 (15:53 -0400)]
Simplify rpm linux distro settings
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 19:00:52 +0000 (15:00 -0400)]
Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo.
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 16:37:00 +0000 (12:37 -0400)]
Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR environment
variable.
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 14:56:52 +0000 (10:56 -0400)]
Create sudo group on debian
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 13:29:32 +0000 (09:29 -0400)]
Add debian 4/5/6 and use the dot when doing version matches
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 13:09:23 +0000 (09:09 -0400)]
Remove spurious "and"; from debian
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 13:06:37 +0000 (09:06 -0400)]
Use a loop when searching for mv, sendmail and sh
--HG--
branch : 1.7
Todd C. Miller [Wed, 14 Jul 2010 12:56:06 +0000 (08:56 -0400)]
Substitute the value of EDITOR into the sudoers and visudo manuals.
--HG--
branch : 1.7
Todd C. Miller [Tue, 13 Jul 2010 21:52:09 +0000 (17:52 -0400)]
Initial debian 4.0 support
--HG--
branch : 1.7
Todd C. Miller [Tue, 13 Jul 2010 14:17:23 +0000 (10:17 -0400)]
Some platforms need -fPIE instead of -fpie
--HG--
branch : 1.7
Todd C. Miller [Tue, 13 Jul 2010 13:54:59 +0000 (09:54 -0400)]
Add packaging bits to DISTFILES
--HG--
branch : 1.7
Todd C. Miller [Tue, 13 Jul 2010 12:56:08 +0000 (08:56 -0400)]
Only set PAM_RHOST for Solaris, where it is needed to avoid a bug.
On Linux it causes a DNS lookup via libaudit.
--HG--
branch : 1.7
Todd C. Miller [Tue, 13 Jul 2010 12:41:07 +0000 (08:41 -0400)]
We now use pp to generate HP-UX packages
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:55:27 +0000 (17:55 -0400)]
Fix indentation
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:43:26 +0000 (17:43 -0400)]
isntall-man -> install-doc
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:15:43 +0000 (17:15 -0400)]
Bump version to 1.7.4
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:12:02 +0000 (17:12 -0400)]
Remove remaining bits of the old binary package
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:10:07 +0000 (17:10 -0400)]
Use http://rc.quest.com/topics/polypkg/ for packaging
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:07:36 +0000 (17:07 -0400)]
Use http://rc.quest.com/topics/polypkg/ for packaging
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 21:04:47 +0000 (17:04 -0400)]
Just ignore the -c option, it is the default
Add support for -d option
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 19:49:08 +0000 (15:49 -0400)]
Use _PATH_STDPATH instead of _PATH_DEFPATH
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 14:38:59 +0000 (10:38 -0400)]
Do not strip binaries.
--HG--
branch : 1.7
Todd C. Miller [Mon, 12 Jul 2010 14:38:07 +0000 (10:38 -0400)]
Add --insults=disabled configure option to allow people to build
in insult support but have the insults disabled unless explicitly
enabled in sudoers.
--HG--
branch : 1.7
Todd C. Miller [Sat, 10 Jul 2010 21:12:20 +0000 (17:12 -0400)]
Fix K&R compilation
--HG--
branch : 1.7
Todd C. Miller [Fri, 9 Jul 2010 21:08:58 +0000 (17:08 -0400)]
Add support for a sudo-i pam.d file to be used for "sudo -i".
Adapted from a RedHat patch.
--HG--
branch : 1.7
Todd C. Miller [Fri, 9 Jul 2010 15:06:21 +0000 (11:06 -0400)]
Fix installation of sudo_noexec.so
--HG--
branch : 1.7
Todd C. Miller [Fri, 9 Jul 2010 13:49:33 +0000 (09:49 -0400)]
Use mkstemps() instead of mkstemp() in sudoedit. This allows sudoedit
to preserve the file extension (if any) which may be used by the editor
(like emacs) to choose the editing mode.
--HG--
branch : 1.7
Todd C. Miller [Thu, 8 Jul 2010 13:00:13 +0000 (09:00 -0400)]
TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses TLS_CACERT,
not TLS_CACERTFILE in its ldap.conf. Other LDAP client code, such as
nss_ldap, uses TLS_CACERTFILE. Also document why you should avoid
disabling TLS_CHECKPEER is possible.
--HG--
branch : 1.7
Todd C. Miller [Wed, 7 Jul 2010 18:33:06 +0000 (14:33 -0400)]
Add suport for negated user/host/command lists in a Defaults entry.
E.g. Defaults:!baduser noexec
--HG--
branch : 1.7
Todd C. Miller [Thu, 1 Jul 2010 17:32:59 +0000 (13:32 -0400)]
fix typo.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 22:29:19 +0000 (18:29 -0400)]
Added tag SUDO_1_7_3 for changeset
72fd1f510a08
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 21:55:55 +0000 (17:55 -0400)]
Sudo 1.7.3 GA
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 16:45:11 +0000 (12:45 -0400)]
Include strings.h even if string.h exists since they may define
different things. Fixes warnings on AIX and others.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 13:26:21 +0000 (09:26 -0400)]
Do not rely on env.env_len when unsetting a variable, just use the
NULL terminator.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Jun 2010 13:09:20 +0000 (09:09 -0400)]
In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008
--HG--
branch : 1.7
Todd C. Miller [Mon, 28 Jun 2010 13:08:34 +0000 (09:08 -0400)]
Mention that multiple URI lines are merged into a single one.
--HG--
branch : 1.7
Todd C. Miller [Mon, 28 Jun 2010 13:08:10 +0000 (09:08 -0400)]
Document AIX fixes
--HG--
branch : 1.7
Todd C. Miller [Sat, 26 Jun 2010 17:09:05 +0000 (13:09 -0400)]
For env_init() just use environ not the envp from main().
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Jun 2010 17:50:15 +0000 (13:50 -0400)]
Update version to 1.7.3rc1
--HG--
branch : 1.7