]>
granicus.if.org Git - sudo/log
Todd C. Miller [Fri, 18 Jun 2010 13:53:46 +0000 (09:53 -0400)]
Do not rely on BSD make's $>
--HG--
branch : 1.7
Todd C. Miller [Fri, 18 Jun 2010 13:52:08 +0000 (09:52 -0400)]
Set timedir to /var/db/sudo for darwin to match Apple sudo's location
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 23:59:37 +0000 (19:59 -0400)]
Move aix.o from SUDO_OBJS to COMMON_OBJS
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:40:02 +0000 (16:40 -0400)]
Check for zlib.h in addition to libz.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:38:16 +0000 (16:38 -0400)]
Move functions and symbols shared between exec.c and exec_pty.c
into sudo_exec.h.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:21:20 +0000 (16:21 -0400)]
Add missing prototypes for aix_setauthdb and aix_restoreauthdb
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 20:06:05 +0000 (16:06 -0400)]
Comment out rules to build .man.in and .cat files unless --with-devel
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 19:35:28 +0000 (15:35 -0400)]
Fix AIX compilation problems.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 19:28:45 +0000 (15:28 -0400)]
Cast isalnum() arg to unsigned char.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 19:28:21 +0000 (15:28 -0400)]
Add Linux audit support.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 18:35:42 +0000 (14:35 -0400)]
Quote any non-alphanumeric characters other than '_' or '-' when passing
a command to be run via the shell for the -s and -i options.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 18:09:07 +0000 (14:09 -0400)]
Add missing braces that broke -i mode.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 14:44:37 +0000 (10:44 -0400)]
Fix linux_audit_command() return value
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 10:50:37 +0000 (06:50 -0400)]
Add Linux audit support.
--HG--
branch : 1.7
Todd C. Miller [Wed, 16 Jun 2010 14:04:24 +0000 (10:04 -0400)]
Add Linux audit support.
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 20:28:28 +0000 (16:28 -0400)]
Sync sudoreplay with trunk
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 20:27:33 +0000 (16:27 -0400)]
Remove an XXX
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 16:55:28 +0000 (12:55 -0400)]
Set usrinfo for AIX
Set adminstrative domain for the process when looking up user's
password info and when preparing for execve().
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 14:32:05 +0000 (10:32 -0400)]
Better prefix determination now that we can't rely on len==0 to
tell the beginning on an entry.
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 14:05:08 +0000 (10:05 -0400)]
Add support for multiple sudoers_base entries in ldap.conf.
From Joachim Henke
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 13:24:10 +0000 (09:24 -0400)]
Remove duplicate setsid check
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 13:22:44 +0000 (09:22 -0400)]
Move setsid emulation into setsid.c
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 13:05:19 +0000 (09:05 -0400)]
Check for dup2() failure.
--HG--
branch : 1.7
Todd C. Miller [Tue, 15 Jun 2010 12:43:24 +0000 (08:43 -0400)]
Remove dup2 check, it is not optional.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 22:30:12 +0000 (18:30 -0400)]
Add mbr_check_membership support and SELinux fixes
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 20:27:21 +0000 (16:27 -0400)]
Sync SRCS and DISTFILES with reality
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 20:15:39 +0000 (16:15 -0400)]
Update OS specific notes. Delete some really ancient ones and move
older ones to the end of the list.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 19:17:15 +0000 (15:17 -0400)]
Bump for sudo 1.7.3
Merge some changes from trunk
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 19:06:39 +0000 (15:06 -0400)]
Call selinux_restore_tty() as part of cleanup() so it gets called
from error()/errorx()
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 18:59:26 +0000 (14:59 -0400)]
No longer use SA_NOCLDSTOP
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 18:53:34 +0000 (14:53 -0400)]
Move union sudo_in_addr_un into interfaces.h
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:53:18 +0000 (11:53 -0400)]
Update copyright year
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:50:06 +0000 (11:50 -0400)]
Update copyright year
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:31:44 +0000 (11:31 -0400)]
Remove varsub as part of clean
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 15:18:23 +0000 (11:18 -0400)]
Quiet a compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:57:23 +0000 (10:57 -0400)]
Quiet a compiler warning.
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:37:25 +0000 (10:37 -0400)]
Make the remaining functions in ldap.c static
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:23:33 +0000 (10:23 -0400)]
Make private functions static. Diff from Joachim Henke
--HG--
branch : 1.7
Todd C. Miller [Mon, 14 Jun 2010 14:20:15 +0000 (10:20 -0400)]
Updates from Alain Roy to provide better examples for importing the
schema and to fix problems caused by Windows validating attributes
which have not yet been added before committing the changes.
--HG--
branch : 1.7
Todd C. Miller [Sat, 12 Jun 2010 13:32:03 +0000 (09:32 -0400)]
Generate .cat files directly from .man.in instead of .man using default
values in configure.in
--HG--
branch : 1.7
Todd C. Miller [Fri, 11 Jun 2010 14:33:13 +0000 (10:33 -0400)]
Print configure args with verbose version information.
--HG--
branch : 1.7
Todd C. Miller [Fri, 11 Jun 2010 13:54:48 +0000 (09:54 -0400)]
Remove tfd from struct sudoersfile; it is not used.
Add prev pointer to struct sudoersfile.
Declare list of sudoersfile using TQ_DECLARE.
Use tq_append to append sudoers entries to the tail queue.
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 22:03:16 +0000 (18:03 -0400)]
Describe tty timestamp improvements
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:53:27 +0000 (17:53 -0400)]
A comment character may not be part of a command line argument
unless it is quoted with a backslash. Fixes parsing of:
testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar
closes bz #441
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:41:55 +0000 (17:41 -0400)]
regen
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:39:06 +0000 (17:39 -0400)]
Make this read a little bit better when passwd_timeout is 0.
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:29:47 +0000 (17:29 -0400)]
Use the --file argument to config.status instead of setting CONFIG_FILES
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 21:19:45 +0000 (17:19 -0400)]
Attempt to handle a default password prompt timeout of zero more gracefully.
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 20:37:52 +0000 (16:37 -0400)]
Do not override value of keepopen global, instead restore it to the
value we pushed onto the stack when popping.
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 19:19:38 +0000 (15:19 -0400)]
Use SA_INTERRUPT in sa_flags
--HG--
branch : 1.7
Todd C. Miller [Thu, 10 Jun 2010 16:28:05 +0000 (12:28 -0400)]
Silence some compiler warnings
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Jun 2010 20:20:04 +0000 (16:20 -0400)]
Implement background mode. If I/O logging we use pipes instead of a pty.
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Jun 2010 18:01:06 +0000 (14:01 -0400)]
Move compat definition of NSIG to compat.h
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Jun 2010 15:00:12 +0000 (11:00 -0400)]
Ignore SIGPIPE for "sudo -S"
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Jun 2010 14:52:53 +0000 (10:52 -0400)]
Properly handle TGP_ECHO again.
Print a newline if the user interrupted password input.
--HG--
branch : 1.7
Todd C. Miller [Wed, 9 Jun 2010 13:57:41 +0000 (09:57 -0400)]
Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 22:12:59 +0000 (18:12 -0400)]
Return an error from selinux_setup() instead of exiting.
Call selinux_setup() from exec_setup().
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 22:51:20 +0000 (18:51 -0400)]
Add definition of WCOREDUMP for systems without it. This is known
to work on AIX and SunOS 4, but may be incorrect on other systems
that lack WCOREDUMP.
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 22:50:10 +0000 (18:50 -0400)]
Replace timerfoo macros with timevalfoo since the timer macros are known
to be busted on some systems.
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 20:52:21 +0000 (16:52 -0400)]
If a file in a #includedir has improper permissions or owner just
skip it. This prevents packages that incorrectly install a file
into /etc/sudoers.d from breaking sudo so easily. Syntax errors
in #includedir files still result in a parse error (for now).
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 19:56:49 +0000 (15:56 -0400)]
Defer call to pam_close_session() until after the command finishes
if there is a monitor process.
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 15:20:11 +0000 (11:20 -0400)]
Add use_pty sudoers option to force use of a pty even when not
logging I/O.
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 14:26:15 +0000 (10:26 -0400)]
Instead of trying to keep the global environment in sync with our
private copy, provide our own getenv() that returns values from the
private environment and use env_get() to pass the environment in
to run_command().
--HG--
branch : 1.7
Todd C. Miller [Tue, 8 Jun 2010 14:11:18 +0000 (10:11 -0400)]
Fix typo
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Jun 2010 22:54:45 +0000 (18:54 -0400)]
Rename pty.c -> get_pty.c
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Jun 2010 22:53:28 +0000 (18:53 -0400)]
Add #define for maximum session id
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Jun 2010 21:28:05 +0000 (17:28 -0400)]
Split exec.c into exec.c and exec_pty.c
Pass a flag in to sudo_execve to indicate whether we need to
wait for the command to finish (fork + execve vs. execve).
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Jun 2010 15:25:03 +0000 (11:25 -0400)]
Rename pty.c -> get_pty.c
--HG--
branch : 1.7
Todd C. Miller [Mon, 7 Jun 2010 15:21:23 +0000 (11:21 -0400)]
Fix --without-iologdir
--HG--
branch : 1.7
Todd C. Miller [Sun, 6 Jun 2010 15:44:55 +0000 (11:44 -0400)]
Only use I/O input log file if def_log_input is set and output file
if def_log_output is set.
--HG--
branch : 1.7
Todd C. Miller [Sat, 5 Jun 2010 17:53:50 +0000 (13:53 -0400)]
Include sudo_usage.h after sudo.h now that it has function prototypes
to guarantee that __P is defined.
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 21:44:43 +0000 (17:44 -0400)]
Do signal setup after turning off echo, not before. If we are using
a tty but are not the foreground pgrp this will generate SIGTTOU
so we want the default action to be taken (suspend process).
Use an array for signals received instead of a single variable so
we don't lose any when there are multiple different signals.
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 21:01:42 +0000 (17:01 -0400)]
Reorg function prototypes a bit
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 20:31:11 +0000 (16:31 -0400)]
Move argument parsing into parse_args.c
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 20:06:24 +0000 (16:06 -0400)]
Build our own sys_siglist for systems that lack it.
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 19:35:13 +0000 (15:35 -0400)]
K&R fixes
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 18:23:59 +0000 (14:23 -0400)]
Log sudoedit sessions as well; adapted from trunk
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 15:34:51 +0000 (11:34 -0400)]
regen
--HG--
branch : 1.7
Todd C. Miller [Fri, 4 Jun 2010 13:41:08 +0000 (09:41 -0400)]
Merge I/O logging changes from trunk. Disabling I/O log support
at compile time does not currently work.
Sudoedit is not yet hooked up to I/O logging.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 16:00:54 +0000 (12:00 -0400)]
Add --enable-warnings configure option
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 15:57:40 +0000 (11:57 -0400)]
Fix K&R compilation issues on HP-UX.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 15:31:22 +0000 (11:31 -0400)]
Pass in output function to lbuf_init() instead of writing to stdout.
A side effect is that the usage info can now go to stderr as it
should. Add support for embedded newlines in lbuf and use that
instead of multiple calls to lbuf_print.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 14:26:42 +0000 (10:26 -0400)]
Use numeric registers to handle conditionals instead of trying
to do it all with text processing.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 14:26:21 +0000 (10:26 -0400)]
Document per-command SELinux settings
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 14:25:44 +0000 (10:25 -0400)]
timestamp -> time stamp
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 14:06:49 +0000 (10:06 -0400)]
Set close on exec flag in private versions of setpwent() and setgrent().
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 13:55:58 +0000 (09:55 -0400)]
Make send_mail() take a printf-style argument list
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 13:34:49 +0000 (09:34 -0400)]
Update to autoconf 2.65 and libtool 2.2.6b
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 12:38:30 +0000 (08:38 -0400)]
Don't use TRUE/FALSE which may not be defined.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 12:35:02 +0000 (08:35 -0400)]
Document new tty_ticket behavior
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 12:27:54 +0000 (08:27 -0400)]
Make find_path() a little more generic by not checking def_foo
variables inside it. Instead, pass in ignore_dot as a function
argument.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 12:00:31 +0000 (08:00 -0400)]
Store info from stat(2)ing the tty in the tty ticket when tty tickets
are in use. If the tty lives on a devpts (Linux) or devices (Solaris)
filesystem, stash the ctime in the tty ticket file, as it is not
updated when the tty is written to. This helps us determine when
a tty has been reused without the user authenticating again with
sudo.
--HG--
branch : 1.7
Todd C. Miller [Thu, 3 Jun 2010 11:41:04 +0000 (07:41 -0400)]
get_boottime() now fills in a timeval struct
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Jun 2010 22:54:33 +0000 (18:54 -0400)]
Use timeval directly instead of converting to timespec when dealing
with file times and time of day.
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Jun 2010 14:25:59 +0000 (10:25 -0400)]
Fix OpenPAM detection for newer versions.
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Jun 2010 14:25:40 +0000 (10:25 -0400)]
Sync with Quest sudo git repo
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Jun 2010 14:25:20 +0000 (10:25 -0400)]
HP-UX ld uses +b instead or -R or -rpath
Fix typo in libvas check
libvas may need libdl for dlopen()
Add missing template for ENV_DEBUG
Adapted from Quest sudo
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Jun 2010 14:24:05 +0000 (10:24 -0400)]
Fix typos; from Quest Sudo
--HG--
branch : 1.7
Todd C. Miller [Wed, 2 Jun 2010 14:23:47 +0000 (10:23 -0400)]
Use value of SHELL from configure in Makefile
--HG--
branch : 1.7
Todd C. Miller [Fri, 28 May 2010 13:45:01 +0000 (09:45 -0400)]
Handle duplicate variables in the environment. For unsetenv(),
keep looking even after remove the first instance. For sudo_putenv(),
check for and remove dupes after we replace an existing value.
--HG--
branch : 1.7