]> granicus.if.org Git - sudo/log
sudo
14 years agotq_remove not list_remove
Todd C. Miller [Sat, 6 Mar 2010 19:28:26 +0000 (14:28 -0500)]
tq_remove not list_remove

14 years agoAUTH_OBJS should contain .lo files not .o files.
Todd C. Miller [Sat, 6 Mar 2010 12:36:02 +0000 (07:36 -0500)]
AUTH_OBJS should contain .lo files not .o files.

14 years agoSimplify conversion of command line args to name=value pairs.
Todd C. Miller [Fri, 5 Mar 2010 22:14:19 +0000 (17:14 -0500)]
Simplify conversion of command line args to name=value pairs.

14 years agoHandle NULL reply from conversation function
Todd C. Miller [Fri, 5 Mar 2010 22:13:42 +0000 (17:13 -0500)]
Handle NULL reply from conversation function

14 years agoDon't depend on emalloc/erealloc
Todd C. Miller [Fri, 5 Mar 2010 21:52:04 +0000 (16:52 -0500)]
Don't depend on emalloc/erealloc

14 years agoUse $(OBJS) instead of sample_plugin.lo
Todd C. Miller [Fri, 5 Mar 2010 19:44:04 +0000 (14:44 -0500)]
Use $(OBJS) instead of sample_plugin.lo

14 years agorunas_user is in settings not user_info
Todd C. Miller [Fri, 5 Mar 2010 19:39:13 +0000 (14:39 -0500)]
runas_user is in settings not user_info

14 years agoFix a mismatch between sudo_settings and settings_pairs that causes
Todd C. Miller [Fri, 5 Mar 2010 19:38:42 +0000 (14:38 -0500)]
Fix a mismatch between sudo_settings and settings_pairs that causes
some settings to get the wrong values.

14 years agoConvert to ANSI C
Todd C. Miller [Fri, 5 Mar 2010 01:18:22 +0000 (20:18 -0500)]
Convert to ANSI C

14 years agoFix strlcpy() return value check.
Todd C. Miller [Thu, 4 Mar 2010 17:06:42 +0000 (12:06 -0500)]
Fix strlcpy() return value check.

14 years agoNo longer need to substitute in script.o and pty.o; I/O logging support
Todd C. Miller [Thu, 4 Mar 2010 13:12:36 +0000 (08:12 -0500)]
No longer need to substitute in script.o and pty.o; I/O logging support
is always built.

14 years agoAdd fallback to /bin/sh when execve() fails with ENOEXEC.
Todd C. Miller [Sun, 28 Feb 2010 20:10:18 +0000 (15:10 -0500)]
Add fallback to /bin/sh when execve() fails with ENOEXEC.

14 years agoAdd estrndup()
Todd C. Miller [Sun, 28 Feb 2010 20:09:50 +0000 (15:09 -0500)]
Add estrndup()

14 years agoRefactor script_execve() a bit so that it can be used in non-script
Todd C. Miller [Sat, 27 Feb 2010 21:53:56 +0000 (16:53 -0500)]
Refactor script_execve() a bit so that it can be used in non-script
mode.  Needs more cleanup.

14 years agoIgnore empty entries in command_info list
Todd C. Miller [Sat, 27 Feb 2010 18:36:30 +0000 (13:36 -0500)]
Ignore empty entries in command_info list

14 years agoAdd tq_remove
Todd C. Miller [Sat, 27 Feb 2010 18:17:58 +0000 (13:17 -0500)]
Add tq_remove

14 years agoPass timeout to tgetpass()
Todd C. Miller [Sat, 27 Feb 2010 17:39:18 +0000 (12:39 -0500)]
Pass timeout to tgetpass()

14 years agoAdd ChangeLog target
Todd C. Miller [Sat, 27 Feb 2010 17:37:49 +0000 (12:37 -0500)]
Add ChangeLog target

14 years agoBump version and update things slightly for sudo 1.8.0
Todd C. Miller [Sat, 27 Feb 2010 15:05:04 +0000 (10:05 -0500)]
Bump version and update things slightly for sudo 1.8.0

14 years agoSudo now requires an ANSI/ISO C compiler
Todd C. Miller [Sat, 27 Feb 2010 15:04:39 +0000 (10:04 -0500)]
Sudo now requires an ANSI/ISO C compiler

14 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:29:59 +0000 (09:29 -0500)]
Convert to ANSI C

14 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:26:43 +0000 (09:26 -0500)]
Convert to ANSI C

14 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:23:25 +0000 (09:23 -0500)]
Convert to ANSI C

14 years agoMake user_details extern so tgetpass can get at the uid and gid.
Todd C. Miller [Thu, 25 Feb 2010 00:53:45 +0000 (19:53 -0500)]
Make user_details extern so tgetpass can get at the uid and gid.
Set uid/gid to user before executing askpass program.
Check environment for SUDO_ASKPASS and use that if set.
TODO: a way for the policy to set the askpass program itself

14 years agoNo longer need sudo_usage.h in sudo.c
Todd C. Miller [Wed, 24 Feb 2010 12:49:16 +0000 (07:49 -0500)]
No longer need sudo_usage.h in sudo.c

14 years agoDocument -D level command line flag which maps to the debug_level setting.
Todd C. Miller [Wed, 24 Feb 2010 12:48:53 +0000 (07:48 -0500)]
Document -D level command line flag which maps to the debug_level setting.

14 years agoDocument debug_level in plugin doc. Still need to document the -D
Todd C. Miller [Wed, 24 Feb 2010 11:35:45 +0000 (06:35 -0500)]
Document debug_level in plugin doc.  Still need to document the -D
flag in sudo itself.

14 years agoinclude missing,h for vasprintf
Todd C. Miller [Mon, 22 Feb 2010 02:27:57 +0000 (21:27 -0500)]
include missing,h for vasprintf

14 years agoRename plugin.pod -> sudo_plugin.pod and wire into Makefile
Todd C. Miller [Mon, 22 Feb 2010 02:24:20 +0000 (21:24 -0500)]
Rename plugin.pod -> sudo_plugin.pod and wire into Makefile

14 years agoNeed to include limits.h
Todd C. Miller [Mon, 22 Feb 2010 02:19:07 +0000 (21:19 -0500)]
Need to include limits.h

14 years agoNo more sudo_getpw*
Todd C. Miller [Mon, 22 Feb 2010 02:18:52 +0000 (21:18 -0500)]
No more sudo_getpw*

14 years agoAdd missing compat bits
Todd C. Miller [Mon, 22 Feb 2010 02:15:38 +0000 (21:15 -0500)]
Add missing compat bits

14 years agocompat files should not include sudo.h
Todd C. Miller [Sun, 21 Feb 2010 21:41:19 +0000 (16:41 -0500)]
compat files should not include sudo.h
wire up compat in sample plugin

14 years agoFix up compat dependencies.
Todd C. Miller [Sun, 21 Feb 2010 21:12:01 +0000 (16:12 -0500)]
Fix up compat dependencies.
Fix distclean target in doc/Makefile.in

14 years agoFix typo
Todd C. Miller [Sun, 21 Feb 2010 20:32:59 +0000 (15:32 -0500)]
Fix typo

14 years agoLog input and output to temp files for proof of concept.
Todd C. Miller [Sun, 21 Feb 2010 19:19:22 +0000 (14:19 -0500)]
Log input and output to temp files for proof of concept.

14 years agoAdd doc Makefile.in and wire it up
Todd C. Miller [Sun, 21 Feb 2010 18:37:52 +0000 (13:37 -0500)]
Add doc Makefile.in and wire it up

14 years agoHandle SIGSTOP in addition to SIGTSTP. Fixes a problem with suspending
Todd C. Miller [Sun, 21 Feb 2010 15:36:50 +0000 (10:36 -0500)]
Handle SIGSTOP in addition to SIGTSTP.  Fixes a problem with suspending
a shell with the "suspend" builtint.

14 years agoIn child, handle parent side of the pipe going away.
Todd C. Miller [Sun, 21 Feb 2010 15:30:43 +0000 (10:30 -0500)]
In child, handle parent side of the pipe going away.

14 years agoNo longer need to check for explicit death of the child (process #2)
Todd C. Miller [Sun, 21 Feb 2010 15:26:30 +0000 (10:26 -0500)]
No longer need to check for explicit death of the child (process #2)
since if it dies we will get EPIPE from the socketpair.
Fix a sizeof() that was causing a spurious error.
Convert SCRIPT_DEBUG to sudo_debug.

14 years agoMake sudo_debug do a single vfprintf() which will result in a single
Todd C. Miller [Sun, 21 Feb 2010 15:24:27 +0000 (10:24 -0500)]
Make sudo_debug do a single vfprintf() which will result in a single
write call on most systems.  Avoids problems with interleaved debug
printf from different processes.  Also remove an extraneous error case
since recv() can't return a short read and add some more XXX.

14 years agoFix uninitialized variable.
Todd C. Miller [Sat, 20 Feb 2010 20:13:11 +0000 (15:13 -0500)]
Fix uninitialized variable.

14 years agoFix sudo install target
Todd C. Miller [Sat, 20 Feb 2010 19:47:43 +0000 (14:47 -0500)]
Fix sudo install target

14 years agoWire up debug_level
Todd C. Miller [Sat, 20 Feb 2010 18:25:10 +0000 (13:25 -0500)]
Wire up debug_level

14 years agoFix dependencies
Todd C. Miller [Sat, 20 Feb 2010 18:24:50 +0000 (13:24 -0500)]
Fix dependencies

14 years agoFix setting of plugin dir
Todd C. Miller [Sat, 20 Feb 2010 18:20:57 +0000 (13:20 -0500)]
Fix setting of plugin dir

14 years agoadd clean targets
Todd C. Miller [Sat, 20 Feb 2010 14:53:05 +0000 (09:53 -0500)]
add clean targets

14 years agoAdd missing source for sudo front end
Todd C. Miller [Sat, 20 Feb 2010 14:47:46 +0000 (09:47 -0500)]
Add missing source for sudo front end

14 years agoSample plugin demonstrating the sudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:42:16 +0000 (09:42 -0500)]
Sample plugin demonstrating the sudo plugin API

14 years agoModular sudo front-end which loads policy and I/O plugins that do
Todd C. Miller [Sat, 20 Feb 2010 14:41:49 +0000 (09:41 -0500)]
Modular sudo front-end which loads policy and I/O plugins that do
most the actual work.  Currently relies on dynamic loading using
dlopen().  See doc/plugin.pod for the plugin API.

14 years agoSudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:30:27 +0000 (09:30 -0500)]
Sudo plugin API

14 years agoReplace emul/include.h with compat/include.h to match new source
Todd C. Miller [Sat, 20 Feb 2010 14:22:30 +0000 (09:22 -0500)]
Replace emul/include.h with compat/include.h to match new source
tree layout.

14 years agoInclude missing.h for memrchr() proto
Todd C. Miller [Sat, 20 Feb 2010 14:17:54 +0000 (09:17 -0500)]
Include missing.h for memrchr() proto

14 years agoRework source layout in preparation for modular sudo.
Todd C. Miller [Sat, 20 Feb 2010 14:14:01 +0000 (09:14 -0500)]
Rework source layout in preparation for modular sudo.

14 years agoAvoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Sat, 13 Feb 2010 12:32:05 +0000 (07:32 -0500)]
Avoid a duplicate fclose() of the sudoers file.

14 years agoFix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Sat, 13 Feb 2010 12:31:38 +0000 (07:31 -0500)]
Fix size arg when realloc()ing include stack.  From Daniel Kopecek

14 years agoUse setrlimit64(), if available, instead of setrlimit() when setting
Todd C. Miller [Sat, 13 Feb 2010 12:30:56 +0000 (07:30 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.

14 years agoFix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 13 Feb 2010 12:30:31 +0000 (07:30 -0500)]
Fix use after free when sending error messages.  From Timo Juhani Lindfors

14 years agoGenerate the ChangeLog as part of "make dist" instead of having it
Todd C. Miller [Sat, 13 Feb 2010 12:29:36 +0000 (07:29 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.

14 years agoAvoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Tue, 9 Feb 2010 15:43:20 +0000 (10:43 -0500)]
Avoid a duplicate fclose() of the sudoers file.

--HG--
branch : 1.7

14 years agoFix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Tue, 9 Feb 2010 13:28:03 +0000 (08:28 -0500)]
Fix size arg when realloc()ing include stack.  From Daniel Kopecek

--HG--
branch : 1.7

14 years agoUse setrlimit64(), if available, instead of setrlimit() when setting
Todd C. Miller [Sat, 6 Feb 2010 20:16:04 +0000 (15:16 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.

--HG--
branch : 1.7

14 years agoFix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 6 Feb 2010 17:43:26 +0000 (12:43 -0500)]
Fix use after free when sending error messages.  From Timo Juhani Lindfors

--HG--
branch : 1.7

15 years agoGenerate the ChangeLog as part of "make dist" instead of having it
Todd C. Miller [Mon, 18 Jan 2010 12:12:06 +0000 (07:12 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.

--HG--
branch : 1.7

15 years agoGenerate correct ChangeLog for 1.7 branch.
Todd C. Miller [Mon, 18 Jan 2010 00:55:11 +0000 (19:55 -0500)]
Generate correct ChangeLog for 1.7 branch.

--HG--
branch : 1.7

15 years agoRemove CVS $Sudo$ tags.
Todd C. Miller [Mon, 18 Jan 2010 00:51:28 +0000 (19:51 -0500)]
Remove CVS $Sudo$ tags.

15 years agoupdate tags
convert-repo [Mon, 18 Jan 2010 05:45:25 +0000 (05:45 +0000)]
update tags

15 years agomake this match sudoers SYNOPSIS
Todd C. Miller [Sat, 26 Dec 2009 23:48:09 +0000 (23:48 +0000)]
make this match sudoers SYNOPSIS

15 years agoPrint a newline between Runas and Command-specific defaults in
Todd C. Miller [Sat, 26 Dec 2009 17:25:49 +0000 (17:25 +0000)]
Print a newline between Runas and Command-specific defaults in
sudo -l.

15 years agoUse SET and CLR macros in term_raw
Todd C. Miller [Sat, 26 Dec 2009 01:50:25 +0000 (01:50 +0000)]
Use SET and CLR macros in term_raw

15 years agoSet stdin to non-blocking mode early instead of in check_input.
Todd C. Miller [Sat, 26 Dec 2009 01:49:25 +0000 (01:49 +0000)]
Set stdin to non-blocking mode early instead of in check_input.
Use term_raw instead of term_cbreak since the data we get has
already been expanded via OPOST.

15 years agoEnable/disable all postprocessing instead of just nl->crnl processing
Todd C. Miller [Wed, 23 Dec 2009 23:53:04 +0000 (23:53 +0000)]
Enable/disable all postprocessing instead of just nl->crnl processing
since things like tab expansion matter too.  However, if stdout is
a tty leave postprocessing on in the pty since we run into problems
doing it only on the real stdout with .e.g nvi.

15 years agoIf tty_tickets is enabled and there is no tty, prompt for a password.
Todd C. Miller [Sat, 19 Dec 2009 23:04:58 +0000 (23:04 +0000)]
If tty_tickets is enabled and there is no tty, prompt for a password.
Do not lecture user for "sudo -k command" if user has a timestamp.

15 years agoDocument missing options: --with-efence and --with-bsm-audit
Todd C. Miller [Sat, 19 Dec 2009 21:57:33 +0000 (21:57 +0000)]
Document missing options: --with-efence and --with-bsm-audit

15 years agousername -> user name
Todd C. Miller [Sat, 19 Dec 2009 21:44:06 +0000 (21:44 +0000)]
username -> user name
groupname -> group name
hostname -> host name

15 years agofilename -> file name like the rest of the docs
Todd C. Miller [Sat, 19 Dec 2009 21:33:25 +0000 (21:33 +0000)]
filename -> file name like the rest of the docs

15 years agoFix printing of entries with multiple host entries on a single line.
Todd C. Miller [Thu, 17 Dec 2009 15:02:06 +0000 (15:02 +0000)]
Fix printing of entries with multiple host entries on a single line.

15 years agoMention that targetpw affects the timestamp file name.
Todd C. Miller [Mon, 14 Dec 2009 23:53:05 +0000 (23:53 +0000)]
Mention that targetpw affects the timestamp file name.

15 years agoAdd compress_transcript option.
Todd C. Miller [Mon, 14 Dec 2009 01:49:50 +0000 (01:49 +0000)]
Add compress_transcript option.

15 years agobump to 1.7.3b2
Todd C. Miller [Sun, 13 Dec 2009 22:26:32 +0000 (22:26 +0000)]
bump to 1.7.3b2

15 years agoBetter split of membership vs. traditional group check in user_in_group().
Todd C. Miller [Sun, 13 Dec 2009 22:24:34 +0000 (22:24 +0000)]
Better split of membership vs. traditional group check in user_in_group().
Allow user_ngroups to be < 0 if getgroups() fails.

15 years agoFix pasto and add default return value.
Todd C. Miller [Sat, 12 Dec 2009 16:27:02 +0000 (16:27 +0000)]
Fix pasto and add default return value.

15 years agorefactor group member checking into user_in_group()
Todd C. Miller [Sat, 12 Dec 2009 16:12:26 +0000 (16:12 +0000)]
refactor group member checking into user_in_group()

15 years agoAdd support for mbr_check_membership() as present in darwin.
Todd C. Miller [Sat, 12 Dec 2009 15:37:52 +0000 (15:37 +0000)]
Add support for mbr_check_membership() as present in darwin.

15 years agoRename label to be accurate
Todd C. Miller [Thu, 10 Dec 2009 19:37:56 +0000 (19:37 +0000)]
Rename label to be accurate

15 years agoTreat timestamp files from before we booted as old. Idea from and
Todd C. Miller [Thu, 10 Dec 2009 16:59:27 +0000 (16:59 +0000)]
Treat timestamp files from before we booted as old.  Idea from and
Apple patch.

15 years agoAllow the -u flag to be used in conjunction with the -v flag as per
Todd C. Miller [Wed, 9 Dec 2009 16:19:30 +0000 (16:19 +0000)]
Allow the -u flag to be used in conjunction with the -v flag as per
older versions of sudo.

15 years agofix typo in last commit
Todd C. Miller [Wed, 9 Dec 2009 16:05:02 +0000 (16:05 +0000)]
fix typo in last commit

15 years agoConvert fmt_first and fmt_confd into macros.
Todd C. Miller [Tue, 8 Dec 2009 22:19:49 +0000 (22:19 +0000)]
Convert fmt_first and fmt_confd into macros.

15 years agotimeouts can be floats now
Todd C. Miller [Tue, 8 Dec 2009 21:58:16 +0000 (21:58 +0000)]
timeouts can be floats now

15 years agoAdd support for floating point timeout values (e.g. 2.5 minutes).
Todd C. Miller [Tue, 8 Dec 2009 21:49:53 +0000 (21:49 +0000)]
Add support for floating point timeout values (e.g. 2.5 minutes).

15 years agoThe -L flag will be removed in sudo 1.7.4
Todd C. Miller [Mon, 7 Dec 2009 00:11:43 +0000 (00:11 +0000)]
The -L flag will be removed in sudo 1.7.4

15 years agoFix a bug due to order of operators.
Todd C. Miller [Sun, 6 Dec 2009 17:10:36 +0000 (17:10 +0000)]
Fix a bug due to order of operators.

15 years agocmnd_matches() already deals with negation so _cmndlist_matches() does
Todd C. Miller [Mon, 23 Nov 2009 15:56:14 +0000 (15:56 +0000)]
cmnd_matches() already deals with negation so _cmndlist_matches() does
not need to do so itself.  Fixes a bug with negated entries in a
Cmnd_List.

15 years agoDon't exit() from open_sudoers, just return NULL for all errors.
Todd C. Miller [Sun, 22 Nov 2009 16:12:38 +0000 (16:12 +0000)]
Don't exit() from open_sudoers, just return NULL for all errors.

15 years agoCan't rely on the shell sending us SIGCONT when transitioning from
Todd C. Miller [Sun, 22 Nov 2009 15:58:37 +0000 (15:58 +0000)]
Can't rely on the shell sending us SIGCONT when transitioning from
backgroup to foreground process.

15 years agoAdd missing extern def for parse_error
Todd C. Miller [Sun, 22 Nov 2009 14:54:04 +0000 (14:54 +0000)]
Add missing extern def for parse_error

15 years agoAvoid a parse error when #includedir doesn't find any files.
Todd C. Miller [Sat, 21 Nov 2009 00:11:50 +0000 (00:11 +0000)]
Avoid a parse error when #includedir doesn't find any files.
Closes bug #375

15 years agoInclude sudo.man.pl and sudoers.man.pl in the distribution tarball.
Todd C. Miller [Sat, 21 Nov 2009 00:03:52 +0000 (00:03 +0000)]
Include sudo.man.pl and sudoers.man.pl in the distribution tarball.

15 years agoStart command out in foreground mode if stdout is a tty. Works
Todd C. Miller [Sun, 15 Nov 2009 21:53:38 +0000 (21:53 +0000)]
Start command out in foreground mode if stdout is a tty.  Works
around issues with some curses-based programs that don't handle
tcsetattr getting interrupted by a signal.  Still allows us to
avoid hogging the tty if the command is part of a pipeline.