]>
granicus.if.org Git - sudo/log
Todd C. Miller [Wed, 16 Mar 2011 17:44:48 +0000 (13:44 -0400)]
Add support for ut_exit
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:44:37 +0000 (13:44 -0400)]
Add support for controlling whether utmp is updated and which user is
listed in the entry.
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:44:20 +0000 (13:44 -0400)]
Fix typo; tupple vs. tuple
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:44:03 +0000 (13:44 -0400)]
For legacy utmp, strip the /dev/ prefix before trying to determine
slot since the ttys file does not include the /dev/ prefix.
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:43:47 +0000 (13:43 -0400)]
Add check for _PATH_UTMP
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:43:24 +0000 (13:43 -0400)]
Adapt check_iolog_path to sessid changes
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:43:11 +0000 (13:43 -0400)]
Redo utmp handling. If no getutent()/getutxent() is available,
assume a ttyslot-based utmp. If getttyent() is available, use
that directly instead of ttyslot() so we don't have to do the
stdin dup2 dance.
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:43:03 +0000 (13:43 -0400)]
Move utmp handling into utmp.c
--HG--
branch : 1.8
Todd C. Miller [Wed, 16 Mar 2011 17:41:14 +0000 (13:41 -0400)]
Update copyright years.
--HG--
branch : 1.8
Todd C. Miller [Tue, 15 Mar 2011 20:18:33 +0000 (16:18 -0400)]
Add support for ut_exit
Todd C. Miller [Tue, 15 Mar 2011 19:53:49 +0000 (15:53 -0400)]
Add support for controlling whether utmp is updated and which user is
listed in the entry.
Todd C. Miller [Tue, 15 Mar 2011 19:52:18 +0000 (15:52 -0400)]
Fix typo; tupple vs. tuple
Todd C. Miller [Tue, 15 Mar 2011 19:51:44 +0000 (15:51 -0400)]
For legacy utmp, strip the /dev/ prefix before trying to determine
slot since the ttys file does not include the /dev/ prefix.
Todd C. Miller [Tue, 15 Mar 2011 15:56:49 +0000 (11:56 -0400)]
Add check for _PATH_UTMP
Todd C. Miller [Mon, 14 Mar 2011 15:30:32 +0000 (11:30 -0400)]
Adapt check_iolog_path to sessid changes
Todd C. Miller [Mon, 14 Mar 2011 14:20:47 +0000 (10:20 -0400)]
Redo utmp handling. If no getutent()/getutxent() is available,
assume a ttyslot-based utmp. If getttyent() is available, use
that directly instead of ttyslot() so we don't have to do the
stdin dup2 dance.
Todd C. Miller [Fri, 11 Mar 2011 20:54:12 +0000 (15:54 -0500)]
Move utmp handling into utmp.c
Todd C. Miller [Fri, 11 Mar 2011 20:34:35 +0000 (15:34 -0500)]
Update copyright years.
Todd C. Miller [Fri, 11 Mar 2011 20:02:42 +0000 (15:02 -0500)]
Add "user_shell" boolean as a way to indicate to the plugin that
the -s flag was given.
--HG--
branch : 1.8
Todd C. Miller [Fri, 11 Mar 2011 20:02:13 +0000 (15:02 -0500)]
Add "user_shell" boolean as a way to indicate to the plugin that
the -s flag was given.
Todd C. Miller [Fri, 11 Mar 2011 19:08:22 +0000 (14:08 -0500)]
Move sessid out of sudo_user.
--HG--
branch : 1.8
Todd C. Miller [Fri, 11 Mar 2011 19:07:26 +0000 (14:07 -0500)]
Move sessid out of sudo_user.
Todd C. Miller [Fri, 11 Mar 2011 17:12:00 +0000 (12:12 -0500)]
Log the TSID even if it is not a simple session ID.
--HG--
branch : 1.8
Todd C. Miller [Fri, 11 Mar 2011 17:11:05 +0000 (12:11 -0500)]
Log the TSID even if it is not a simple session ID.
Todd C. Miller [Fri, 11 Mar 2011 16:34:39 +0000 (11:34 -0500)]
Document noexec in sample.sudo.conf and add back noexec_file section
in sudoers with a note that it is deprecated.
--HG--
branch : 1.8
Todd C. Miller [Fri, 11 Mar 2011 16:34:11 +0000 (11:34 -0500)]
Document noexec in sample.sudo.conf and add back noexec_file section
in sudoers with a note that it is deprecated.
Todd C. Miller [Fri, 11 Mar 2011 15:48:53 +0000 (10:48 -0500)]
Fix running commands as non-root on systems where setreuid() changes
the saved uid based on the effective uid we are changing to.
--HG--
branch : 1.8
Todd C. Miller [Fri, 11 Mar 2011 15:48:12 +0000 (10:48 -0500)]
Fix running commands as non-root on systems where setreuid() changes
the saved uid based on the effective uid we are changing to.
Todd C. Miller [Thu, 10 Mar 2011 21:14:24 +0000 (16:14 -0500)]
Move noexec path into sudo.conf now that sudo itself handles noexec.
Currently can be configured in sudoers too but is now undocumented
and will be removed in a future release.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 21:14:11 +0000 (16:14 -0500)]
Document "Path noexec ..." in sudo.conf.
No longer document noexec_file in sudoers, it will be removed in a future
release.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 21:13:54 +0000 (16:13 -0500)]
Move noexec handling to sudo front-end where it is documented as being.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 21:13:27 +0000 (16:13 -0500)]
Add support for disabling exec via solaris privileges.
Includes preparation for moving noexec support out of sudoers
and into front end as documented.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 21:12:33 +0000 (16:12 -0500)]
Move noexec path into sudo.conf now that sudo itself handles noexec.
Currently can be configured in sudoers too but is now undocumented
and will be removed in a future release.
Todd C. Miller [Thu, 10 Mar 2011 21:06:16 +0000 (16:06 -0500)]
Document "Path noexec ..." in sudo.conf.
No longer document noexec_file in sudoers, it will be removed in a future
release.
Todd C. Miller [Thu, 10 Mar 2011 20:11:49 +0000 (15:11 -0500)]
Move noexec handling to sudo front-end where it is documented as being.
Todd C. Miller [Thu, 10 Mar 2011 19:24:10 +0000 (14:24 -0500)]
Add support for disabling exec via solaris privileges.
Includes preparation for moving noexec support out of sudoers
and into front end as documented.
Todd C. Miller [Thu, 10 Mar 2011 17:12:55 +0000 (12:12 -0500)]
Only export the symbols corresponding to the plugin structs.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 17:12:14 +0000 (12:12 -0500)]
Only export the symbols corresponding to the plugin structs.
Todd C. Miller [Thu, 10 Mar 2011 16:00:11 +0000 (11:00 -0500)]
Install plugins manually instead of using libtool. This works
around a problem on AIX where libtool will install a .a file
containing the .so file instead of the .so file itself.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 15:59:56 +0000 (10:59 -0500)]
Move check into its own rule since some versions of make will run
both targets as the default rule.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 15:59:42 +0000 (10:59 -0500)]
Update to libtool 2.2.10
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 15:59:27 +0000 (10:59 -0500)]
In handle_signals(), restart the read() on EINTR to make sure we keep up
with the signal pipe. Don't return -1 on EAGAIN, it just means we have
emptied the pipe.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 15:59:15 +0000 (10:59 -0500)]
Reorder functions to quiet a compiler warning.
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 15:59:00 +0000 (10:59 -0500)]
Use the Sun Studio C compiler on Solaris if possible
--HG--
branch : 1.8
Todd C. Miller [Thu, 10 Mar 2011 15:57:56 +0000 (10:57 -0500)]
Install plugins manually instead of using libtool. This works
around a problem on AIX where libtool will install a .a file
containing the .so file instead of the .so file itself.
Todd C. Miller [Thu, 10 Mar 2011 15:32:23 +0000 (10:32 -0500)]
Move check into its own rule since some versions of make will run
both targets as the default rule.
Todd C. Miller [Thu, 10 Mar 2011 15:31:27 +0000 (10:31 -0500)]
Update to libtool 2.2.10
Todd C. Miller [Wed, 9 Mar 2011 16:28:51 +0000 (11:28 -0500)]
In handle_signals(), restart the read() on EINTR to make sure we keep up
with the signal pipe. Don't return -1 on EAGAIN, it just means we have
emptied the pipe.
Todd C. Miller [Wed, 9 Mar 2011 16:22:34 +0000 (11:22 -0500)]
Reorder functions to quiet a compiler warning.
Todd C. Miller [Wed, 9 Mar 2011 16:22:09 +0000 (11:22 -0500)]
Use the Sun Studio C compiler on Solaris if possible
Todd C. Miller [Tue, 8 Mar 2011 21:10:13 +0000 (16:10 -0500)]
Fix default setting of osversion variable.
--HG--
branch : 1.8
Todd C. Miller [Tue, 8 Mar 2011 21:09:48 +0000 (16:09 -0500)]
Fix default setting of osversion variable.
Todd C. Miller [Tue, 8 Mar 2011 20:58:34 +0000 (15:58 -0500)]
Make two login_class entris consistent.
--HG--
branch : 1.8
Todd C. Miller [Tue, 8 Mar 2011 20:58:20 +0000 (15:58 -0500)]
Add support for adding a utmp entry when allocating a new pty.
Requires the BSD login(3) or SYSV/POSIX getutent()/getutxent().
Currently only creates a new entry if the existing tty has
a utmp entry.
--HG--
branch : 1.8
Todd C. Miller [Tue, 8 Mar 2011 20:56:33 +0000 (15:56 -0500)]
Avoid pulling in headers we don't need on Linux
For getutx?id(), call setutx?ent() first and always call endutx?ent().
--HG--
branch : 1.8
Todd C. Miller [Tue, 8 Mar 2011 20:38:06 +0000 (15:38 -0500)]
Make two login_class entris consistent.
Todd C. Miller [Tue, 8 Mar 2011 20:37:40 +0000 (15:37 -0500)]
Add support for adding a utmp entry when allocating a new pty.
Requires the BSD login(3) or SYSV/POSIX getutent()/getutxent().
Currently only creates a new entry if the existing tty has
a utmp entry.
Todd C. Miller [Tue, 8 Mar 2011 20:34:34 +0000 (15:34 -0500)]
Avoid pulling in headers we don't need on Linux
For getutx?id(), call setutx?ent() first and always call endutx?ent().
Todd C. Miller [Tue, 8 Mar 2011 14:47:34 +0000 (09:47 -0500)]
Add some more libs to SUDOERS_LIBS instead of relying on them to be
pulled in by SUDO_LIBS.
--HG--
branch : 1.8
Todd C. Miller [Tue, 8 Mar 2011 14:46:35 +0000 (09:46 -0500)]
Add some more libs to SUDOERS_LIBS instead of relying on them to be
pulled in by SUDO_LIBS.
Todd C. Miller [Tue, 8 Mar 2011 14:39:12 +0000 (09:39 -0500)]
Fix return value of "sudo -l command" when command is not allowed, broken
in [
c7097ea22111 ]. The default return value is now TRUE and a bad:
label is used when permission is denied. Also fixed missing permissions
restoration on certain errors. On error()/errorx(), the password and
group files are now closed before returning.
--HG--
branch : 1.8
Todd C. Miller [Tue, 8 Mar 2011 14:38:21 +0000 (09:38 -0500)]
Fix return value of "sudo -l command" when command is not allowed, broken
in [
c7097ea22111 ]. The default return value is now TRUE and a bad:
label is used when permission is denied. Also fixed missing permissions
restoration on certain errors. On error()/errorx(), the password and
group files are now closed before returning.
Todd C. Miller [Mon, 7 Mar 2011 21:55:51 +0000 (16:55 -0500)]
Fix passing of login class back to sudo front end.
--HG--
branch : 1.8
Todd C. Miller [Mon, 7 Mar 2011 21:55:08 +0000 (16:55 -0500)]
Fix passing of login class back to sudo front end.
Todd C. Miller [Mon, 7 Mar 2011 15:36:20 +0000 (10:36 -0500)]
Add --osversion flag to specify OS instead of running "pp --probeonly"
--HG--
branch : 1.8
Todd C. Miller [Mon, 7 Mar 2011 15:34:47 +0000 (10:34 -0500)]
Add --osversion flag to specify OS instead of running "pp --probeonly"
Todd C. Miller [Mon, 7 Mar 2011 15:08:47 +0000 (10:08 -0500)]
Fix expr usage w/ GNU expr
--HG--
branch : 1.8
Todd C. Miller [Mon, 7 Mar 2011 15:08:21 +0000 (10:08 -0500)]
Fix expr usage w/ GNU expr
Todd C. Miller [Sun, 6 Mar 2011 20:53:06 +0000 (15:53 -0500)]
Fix exit value for validate and list mode.
--HG--
branch : 1.8
Todd C. Miller [Sun, 6 Mar 2011 20:52:40 +0000 (15:52 -0500)]
Fix exit value for validate and list mode.
Todd C. Miller [Sun, 6 Mar 2011 20:38:31 +0000 (15:38 -0500)]
Fix non-interactive mode with sudoers plugin.
--HG--
branch : 1.8
Todd C. Miller [Sun, 6 Mar 2011 20:38:02 +0000 (15:38 -0500)]
Fix non-interactive mode with sudoers plugin.
Todd C. Miller [Sat, 5 Mar 2011 20:35:35 +0000 (15:35 -0500)]
sudoreplay can now find IDs other than %{seq} and display the session.
--HG--
branch : 1.8
Todd C. Miller [Sat, 5 Mar 2011 20:35:23 +0000 (15:35 -0500)]
Add support for replaying sessions when iolog_file is set to something
other than %{seq}.
--HG--
branch : 1.8
Todd C. Miller [Sat, 5 Mar 2011 20:34:30 +0000 (15:34 -0500)]
sudoreplay can now find IDs other than %{seq} and display the session.
Todd C. Miller [Sat, 5 Mar 2011 01:10:44 +0000 (20:10 -0500)]
Add support for replaying sessions when iolog_file is set to something
other than %{seq}.
Todd C. Miller [Fri, 4 Mar 2011 21:13:10 +0000 (16:13 -0500)]
If we are killed by a signal, display the name of the signal that got us.
--HG--
branch : 1.8
Todd C. Miller [Fri, 4 Mar 2011 21:12:40 +0000 (16:12 -0500)]
If we are killed by a signal, display the name of the signal that got us.
Todd C. Miller [Fri, 4 Mar 2011 13:29:45 +0000 (08:29 -0500)]
Move libs used for authentication from SUDO_LIBS to SUDOERS_LIBS
where they belong.
--HG--
branch : 1.8
Todd C. Miller [Fri, 4 Mar 2011 13:29:21 +0000 (08:29 -0500)]
Fix bug in skey/opie check that could cause a shell warning.
--HG--
branch : 1.8
Todd C. Miller [Fri, 4 Mar 2011 13:29:09 +0000 (08:29 -0500)]
No longer need sudo_getepw() stubs.
--HG--
branch : 1.8
Todd C. Miller [Fri, 4 Mar 2011 13:26:48 +0000 (08:26 -0500)]
Move libs used for authentication from SUDO_LIBS to SUDOERS_LIBS
where they belong.
Todd C. Miller [Fri, 4 Mar 2011 13:22:35 +0000 (08:22 -0500)]
Fix bug in skey/opie check that could cause a shell warning.
Todd C. Miller [Fri, 4 Mar 2011 13:08:22 +0000 (08:08 -0500)]
No longer need sudo_getepw() stubs.
Todd C. Miller [Thu, 3 Mar 2011 14:38:46 +0000 (09:38 -0500)]
Fix exit value of "sudo -l command" in sudoers module.
--HG--
branch : 1.8
Todd C. Miller [Thu, 3 Mar 2011 14:38:15 +0000 (09:38 -0500)]
Fix exit value of "sudo -l command" in sudoers module.
Todd C. Miller [Wed, 2 Mar 2011 17:39:46 +0000 (12:39 -0500)]
Use fgets() not fgetln() for portability.
--HG--
branch : 1.8
Todd C. Miller [Wed, 2 Mar 2011 17:39:11 +0000 (12:39 -0500)]
Use fgets() not fgetln() for portability.
Todd C. Miller [Wed, 2 Mar 2011 17:29:57 +0000 (12:29 -0500)]
Don't use the beta or release candidate version as the rpm release.
--HG--
branch : 1.8
Todd C. Miller [Wed, 2 Mar 2011 17:28:05 +0000 (12:28 -0500)]
Don't use the beta or release candidate version as the rpm release.
Todd C. Miller [Fri, 25 Feb 2011 21:44:30 +0000 (16:44 -0500)]
Adjust ChangeLog rule now that 1.8 is branched
--HG--
branch : 1.8
Todd C. Miller [Fri, 25 Feb 2011 21:24:24 +0000 (16:24 -0500)]
Added tag SUDO_1_8_0 for changeset
f6530d56f6ae
--HG--
branch : 1.8
Todd C. Miller [Fri, 25 Feb 2011 19:57:18 +0000 (14:57 -0500)]
version 1.8.0
Todd C. Miller [Fri, 25 Feb 2011 18:39:28 +0000 (13:39 -0500)]
update sudo 1.8 section
Todd C. Miller [Wed, 23 Feb 2011 20:39:24 +0000 (15:39 -0500)]
fix test description
Todd C. Miller [Wed, 23 Feb 2011 20:26:13 +0000 (15:26 -0500)]
convert test2 to use testsudoers
Todd C. Miller [Wed, 23 Feb 2011 20:12:04 +0000 (15:12 -0500)]
Move struct generic_plugin to sudo_plugin_int.h
Todd C. Miller [Wed, 23 Feb 2011 18:38:52 +0000 (13:38 -0500)]
Allow sudoers file name, mode, uid and gid to be specified in the
settings list. The sudo front end does not currently set these
but may in the future.
Todd C. Miller [Mon, 21 Feb 2011 18:36:24 +0000 (13:36 -0500)]
1.8.0rc1
Todd C. Miller [Mon, 21 Feb 2011 16:33:36 +0000 (11:33 -0500)]
add help text to sudo, visudo and sudoreplay for the -h option