]>
granicus.if.org Git - sudo/log
Todd C. Miller [Sat, 9 Apr 2011 14:48:33 +0000 (10:48 -0400)]
regen man pages for 1.7.6
--HG--
branch : 1.7
Todd C. Miller [Wed, 6 Apr 2011 13:46:02 +0000 (09:46 -0400)]
Fix warnings when -without-skey, --without-opie, --without-kerb4,
--without-kerb5 or --without-SecurID were specified.
--HG--
branch : 1.7
Todd C. Miller [Tue, 5 Apr 2011 22:15:10 +0000 (18:15 -0400)]
Mention %#gid support in User_List and Runas_List
--HG--
branch : 1.7
Todd C. Miller [Tue, 5 Apr 2011 13:18:13 +0000 (09:18 -0400)]
Merge SETENV and NOSETENV description from 1.8
--HG--
branch : 1.7
Todd C. Miller [Fri, 1 Apr 2011 17:56:20 +0000 (13:56 -0400)]
In dump-only mode, use "root" as the default username instead of
"nobody" as the latter may not be available on all systems.
--HG--
branch : 1.7
Todd C. Miller [Thu, 31 Mar 2011 17:59:44 +0000 (13:59 -0400)]
Fix setting of user_args
--HG--
branch : 1.7
Todd C. Miller [Thu, 31 Mar 2011 17:59:26 +0000 (13:59 -0400)]
Add '!' token to lex tracing
--HG--
branch : 1.7
Todd C. Miller [Thu, 31 Mar 2011 16:49:13 +0000 (12:49 -0400)]
Avoid using pre or post increment in a parameter to a ctype(3)
function as it might be a macro that causes the increment to happen
more than once.
--HG--
branch : 1.7
Todd C. Miller [Wed, 30 Mar 2011 16:28:10 +0000 (12:28 -0400)]
Strip off the beta or release candidate version when building AIX
packages.
--HG--
branch : 1.7
Todd C. Miller [Wed, 30 Mar 2011 12:54:56 +0000 (08:54 -0400)]
getuserattr(user, ...) will fall back to the "default" entry
automatically, there's no need to check "default" manually.
--HG--
branch : 1.7
Todd C. Miller [Wed, 30 Mar 2011 00:32:12 +0000 (20:32 -0400)]
Document parser changes.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Mar 2011 21:53:25 +0000 (17:53 -0400)]
Add runasgroup support to testsudoers
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Mar 2011 21:53:02 +0000 (17:53 -0400)]
More useful exit codes:
* 0 - parsed OK and command matched.
* 1 - parse error
* 2 - command not matched
* 3 - command denied
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Mar 2011 19:26:25 +0000 (15:26 -0400)]
If there is an existing sudoers file, only install if it passes a
syntax check.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Mar 2011 16:57:12 +0000 (12:57 -0400)]
Document %#gid, and %:#nonunix_gid syntax.
--HG--
branch : 1.7
Todd C. Miller [Tue, 29 Mar 2011 16:37:56 +0000 (12:37 -0400)]
Add support to user_in_group() for treating group names that begin with
a '#' as gids.
--HG--
branch : 1.7
Todd C. Miller [Mon, 28 Mar 2011 13:36:17 +0000 (09:36 -0400)]
Quote first argument to AC_DEFUN(); from Elan Ruusamae
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 21:16:15 +0000 (17:16 -0400)]
Use bitwise AND instead of modulus to check for length being odd.
A newline in the middle of a string is an error unless a line
continuation character is used.
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:07:04 +0000 (11:07 -0400)]
Add missing include of config.h
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:05:22 +0000 (11:05 -0400)]
Move lexer globals initialization into init_lexer.
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:02:18 +0000 (11:02 -0400)]
Fix a potential crash when a non-regular file is present in an
includedir. Fixes bz #452
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:01:33 +0000 (11:01 -0400)]
On some Linux systems, "uname -p" contains detailed processor info
so check "uname -m" first and then "uname -p" if needed.
Recognize PLD Linux.
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:01:03 +0000 (11:01 -0400)]
Make an empty group or netgroup a syntax error.
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:00:38 +0000 (11:00 -0400)]
Allow a group ID in the User_Spec.
--HG--
branch : 1.7
Todd C. Miller [Sun, 27 Mar 2011 15:00:17 +0000 (11:00 -0400)]
Return an error for the empty string when a word is expected.
Allow an ID for per-user or per-runas Defaults.
--HG--
branch : 1.7
Todd C. Miller [Wed, 23 Mar 2011 20:04:17 +0000 (16:04 -0400)]
Fix printing "User_Alias FOO = ALL"
--HG--
branch : 1.7
Todd C. Miller [Tue, 22 Mar 2011 14:19:37 +0000 (10:19 -0400)]
Better error message about invalid -C argument
--HG--
branch : 1.7
Todd C. Miller [Tue, 22 Mar 2011 14:08:30 +0000 (10:08 -0400)]
fix typo
--HG--
branch : 1.7
Todd C. Miller [Tue, 22 Mar 2011 13:40:43 +0000 (09:40 -0400)]
Fix placement of equal size ('=') in user specification summary.
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Mar 2011 21:49:16 +0000 (17:49 -0400)]
If we match a rule anchored to the beginning of a line after parsing
a line continuation character, return an ERROR token. It would be
nicer to use REJECT instead but that substantially slows down the
lexer.
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Mar 2011 19:28:07 +0000 (15:28 -0400)]
Allow whitespace after the modifier in a Defaults entry.
E.g. "Defaults: username set_home"
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Mar 2011 21:54:47 +0000 (17:54 -0400)]
Don't set CC when cross-compiling.
Use the Sun Studio C compiler on Solaris if possible.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Mar 2011 17:06:14 +0000 (13:06 -0400)]
Credit Matthew Thomas for the sudoers_search_filter changes.
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Mar 2011 14:24:54 +0000 (10:24 -0400)]
Update for sudo 1.7.6 beta
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Mar 2011 14:07:51 +0000 (10:07 -0400)]
Save the controlling tty process group before suspending in pty
mode. Previously, we assumed that the child pgrp == child pid
(which is usually, but not always, the case).
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Mar 2011 13:39:03 +0000 (09:39 -0400)]
Add support for sudoers_search_filter setting in ldap.conf. This
can be used to restrict the set of records returned by the LDAP
query.
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Mar 2011 22:44:22 +0000 (18:44 -0400)]
Remove the hack to disable -g in CFLAGS unless --with-devel
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Mar 2011 20:44:41 +0000 (16:44 -0400)]
The '@' character does not normally need to be quoted.
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Mar 2011 20:42:28 +0000 (16:42 -0400)]
We normaly transition from GOTDEFS to STARTDEFS on whitespace, but
if that whitespace is followed by a comma, we want to treat it as
part of a list and not transition.
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Mar 2011 20:41:11 +0000 (16:41 -0400)]
toke_util.c lives in $(srcdir) not $(devdir)
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Mar 2011 19:08:32 +0000 (15:08 -0400)]
Fix parsing of double-quoted names in Defaults and Aliases which was
broken in
c2b486b12951 .
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 20:10:44 +0000 (16:10 -0400)]
Document major changes for sudo 1.7.6
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 20:10:35 +0000 (16:10 -0400)]
Update version to 1.7.6
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 19:59:50 +0000 (15:59 -0400)]
Be careful not to deref user_stat if it is NULL. This cannot currently
happen in sudo but might in other programs using the parser.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 17:38:48 +0000 (13:38 -0400)]
configure will not add -O2 to CFLAGS if it is already defined to
add -O2 to the CFLAGS we pass in when PIE is being used.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 17:27:05 +0000 (13:27 -0400)]
Warn about the dangers of log_input and mention iolog_dir in the
log_input and log_output descriptions.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 17:07:18 +0000 (13:07 -0400)]
Back out
2b81d57de4a4 and sync with git version
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 16:02:42 +0000 (12:02 -0400)]
Save the controlling tty process group before suspending so we can
restore it when we resume. Fixes job control problems on Linux
caused by the previous attemp to fix resuming a shell when I/O
logging not enabled.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 15:55:54 +0000 (11:55 -0400)]
In handle_signals(), restart the read() on EINTR to make sure we keep up
with the signal pipe. Don't return -1 on EAGAIN, it just means we have
emptied the pipe.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Mar 2011 14:26:19 +0000 (10:26 -0400)]
Fix printing of the remainder after a newline. Fixes "sudo -l" output
corruption that could occur in some cases.
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Mar 2011 21:10:24 +0000 (16:10 -0500)]
Fix default setting of osversion variable.
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Mar 2011 15:36:46 +0000 (10:36 -0500)]
Add --osversion flag to specify OS instead of running "pp --probeonly"
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Mar 2011 15:09:02 +0000 (10:09 -0500)]
Fix expr usage w/ GNU expr
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Mar 2011 17:29:25 +0000 (12:29 -0500)]
Don't use the beta or release candidate version as the rpm release.
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Feb 2011 21:24:53 +0000 (16:24 -0500)]
Added tag SUDO_1_7_5 for changeset
9314212577c3
--HG--
branch : 1.7
Todd C. Miller [Fri, 25 Feb 2011 19:57:25 +0000 (14:57 -0500)]
version 1.7.5
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Feb 2011 18:11:41 +0000 (13:11 -0500)]
1.7.5rc1
--HG--
branch : 1.7
Todd C. Miller [Mon, 21 Feb 2011 16:34:23 +0000 (11:34 -0500)]
add help text to sudo, visudo and sudoreplay for the -h option
--HG--
branch : 1.7
Todd C. Miller [Sat, 19 Feb 2011 23:53:14 +0000 (18:53 -0500)]
avoid using "howmany" for a parameter name since it is a select-related macro
--HG--
branch : 1.7
Todd C. Miller [Sat, 19 Feb 2011 13:26:22 +0000 (08:26 -0500)]
add localstatedir; closes bug 471
--HG--
branch : 1.7
Todd C. Miller [Sat, 19 Feb 2011 13:19:35 +0000 (08:19 -0500)]
The howmany macro lives in sys/sysmacros.h on SVR5 systems
Closes Bug 470
--HG--
branch : 1.7
Todd C. Miller [Sat, 19 Feb 2011 13:12:46 +0000 (08:12 -0500)]
SVR5 systems return non-zero for success on socketpair(),
check for -1 instead. Closes Bug 469
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Feb 2011 16:58:26 +0000 (11:58 -0500)]
Move afs includes to be before sudo ones
--HG--
branch : 1.7
Todd C. Miller [Thu, 17 Feb 2011 16:04:13 +0000 (11:04 -0500)]
No longer use vhangup
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Feb 2011 16:29:25 +0000 (11:29 -0500)]
Avoid printing empty "Runas and Command-specific defaults for user"
line.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Feb 2011 16:28:50 +0000 (11:28 -0500)]
Truncate the buffer at buf.len before printing in the non-wordwrap case.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Feb 2011 16:04:44 +0000 (11:04 -0500)]
Remove extra newline when the tty width is very small or unavailable
--HG--
branch : 1.7
Todd C. Miller [Sun, 13 Feb 2011 15:18:04 +0000 (10:18 -0500)]
1.7.5b5
--HG--
branch : 1.7
Todd C. Miller [Sun, 13 Feb 2011 15:17:32 +0000 (10:17 -0500)]
don't remap numeric uids/gids to names; if the user specified and id instead of a name, they probably mean it
--HG--
branch : 1.7
Todd C. Miller [Fri, 11 Feb 2011 14:47:39 +0000 (09:47 -0500)]
Remove unneeded variable.
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Feb 2011 20:11:00 +0000 (15:11 -0500)]
Prefer getutxid over getutid
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Feb 2011 20:09:03 +0000 (15:09 -0500)]
Include utmp.h / utmpx.h before missing.h as apparently including it
afterwards causes a compilation problem on GNU Hurd.
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 21:22:52 +0000 (16:22 -0500)]
1.7.5b4
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 15:50:44 +0000 (10:50 -0500)]
fix K&R compilation
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 15:39:47 +0000 (10:39 -0500)]
Fix typo
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 15:29:34 +0000 (10:29 -0500)]
Split tokenizer utility functions out into toke_util.c
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 14:45:25 +0000 (09:45 -0500)]
Cosmetic changes to make diffing against trunk easier.
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 14:44:36 +0000 (09:44 -0500)]
Use RETSIGTYPE for signal handlers.
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 14:43:14 +0000 (09:43 -0500)]
Use special values SIGCONT_FG and SIGCONT_BG instead of SIGUSR1 and
SIGUSR2 to indicate whether the child should be continued in the
foreground or background.
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 01:50:01 +0000 (20:50 -0500)]
Merge trunk version
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Feb 2011 01:38:09 +0000 (20:38 -0500)]
Use special values SIGCONT_FG and SIGCONT_BG instead of SIGUSR1 and
SIGUSR2 to indicate whether the child should be continued in the
foreground or background.
--HG--
branch : 1.7
Todd C. Miller [Sun, 6 Feb 2011 22:27:58 +0000 (17:27 -0500)]
If perform_io() fails, kill the child before exiting so it doesn't
complain about connection reset. We can get an I/O error if, for
example, and we get EIO reading from stdin.
--HG--
branch : 1.7
Todd C. Miller [Sat, 5 Feb 2011 20:04:02 +0000 (15:04 -0500)]
Make local includes consistent; use double quotes for local includes
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Feb 2011 23:02:11 +0000 (18:02 -0500)]
Must include config.h before any other headers.
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Feb 2011 19:44:10 +0000 (14:44 -0500)]
fix --with-iologdir=no
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Feb 2011 19:33:37 +0000 (14:33 -0500)]
fix typo that broke --with-iologdir
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 19:23:17 +0000 (14:23 -0500)]
sync for 1.7.5b3
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 19:12:21 +0000 (14:12 -0500)]
1.7.5b3
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 18:20:26 +0000 (13:20 -0500)]
Attempt to clarify how users and groups interact in Runas_Specs
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 15:36:23 +0000 (10:36 -0500)]
Do not handle SIGARLM specially, just pass it through.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 15:34:33 +0000 (10:34 -0500)]
Pass SIGUSR1/SIGUSR2 through to the child.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 14:52:28 +0000 (09:52 -0500)]
Made tcsetpgrp() bits conditional on HAVE_TCSETPGRP
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Feb 2011 14:51:07 +0000 (09:51 -0500)]
Use pid_t not int and check the return value of kill()
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Feb 2011 19:26:41 +0000 (14:26 -0500)]
In non-pty mode before continuing the child, make it the foreground
pgrp if possible. Fixes resuming a shell.
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Feb 2011 19:24:58 +0000 (14:24 -0500)]
If we get a signal other than SIGCHLD in the monitor, pass it directly
to the child.
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Feb 2011 19:22:41 +0000 (14:22 -0500)]
Save signal state before changing handlers and restore before
we execute the command.
--HG--
branch : 1.7
Todd C. Miller [Tue, 1 Feb 2011 20:01:54 +0000 (15:01 -0500)]
match quoted strings the same way whether in a Defaults line or as
a user/group/netgroup name. Fixes escaped double quotes in quoted
user/group/netgroup names.
--HG--
branch : 1.7
Todd C. Miller [Tue, 1 Feb 2011 19:55:28 +0000 (14:55 -0500)]
Use a char array to map a number to a base36 digit.
--HG--
branch : 1.7
Todd C. Miller [Tue, 1 Feb 2011 19:30:57 +0000 (14:30 -0500)]
Be clear about what versions of sudo support new LDAP attributes.
Fix up some formatting of attribute names. Minor other tweaks.
--HG--
branch : 1.7
Todd C. Miller [Mon, 31 Jan 2011 14:46:54 +0000 (09:46 -0500)]
Add sudoOrder attribute to each entry
Parse LOG_{INPUT,OUTPUT} tags
--HG--
branch : 1.7