]>
granicus.if.org Git - sudo/log
Todd C. Miller [Wed, 4 Jan 2012 17:55:05 +0000 (12:55 -0500)]
emove inaccurate comment
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:54 +0000 (12:54 -0500)]
Fetch the login class for the user we authenticate specifically when
using BSD authentication. That user may have a different login class
than what we will use to run the command. When setting the login
class for the command, use the target user's struct passwd, not
the invoking user's. Fixes bug 526
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:43 +0000 (12:54 -0500)]
Replace @DEV@ prefix with DEVEL variable so we can do "make DEVEL=1"
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:32 +0000 (12:54 -0500)]
Fix "make check" fallout from the sudo_conv changes in sudo_debug.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:23 +0000 (12:54 -0500)]
Use stdbool.h instead of rolling our own TRUE/FALSE macros.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:54:08 +0000 (12:54 -0500)]
Add stdbool.h for systems without it.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:53 +0000 (12:53 -0500)]
No longer need SUDO_CHECK_TYPE and SUDO_TYPE_* now that the default
includes have unistd.h in them. Add check for socklen_t for upcoming
getaddrinfo compat.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:41 +0000 (12:53 -0500)]
Use HAVE_STRUCT_TIMESPEC and HAVE_STRUCT_IN6_ADDR instead of
HAVE_TIMESPEC and HAVE_IN6_ADDR respectively.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:28 +0000 (12:53 -0500)]
No longer need to include time.h here as missing.h does not use
time_t.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:19 +0000 (12:53 -0500)]
Fix mode on sudoers as needed when the -f option is not specified.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:09 +0000 (12:53 -0500)]
Add Serbian translation for sudo from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:53:01 +0000 (12:53 -0500)]
No longer pass debug_file to plugin, plugins must now use CONV_DEBUG_MSG
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:53 +0000 (12:52 -0500)]
Build PIE executables for newer Debian and Ubuntu
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:44 +0000 (12:52 -0500)]
Include time.h for ctime() prototype.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:36 +0000 (12:52 -0500)]
Do not close error pipe or debug fd via closefrom() as we need them
to report an exec error should one occur.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:24 +0000 (12:52 -0500)]
Document that a sudoUser may now be a group ID.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:14 +0000 (12:52 -0500)]
Add support for permitting access by group ID in addition to group name.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:03 +0000 (12:52 -0500)]
Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:48 +0000 (12:51 -0500)]
Replace UCB fnmatch.c with a non-recursive version written by
William A. Rowe Jr.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:34 +0000 (12:51 -0500)]
Fix typo, return_debug vs. debug_return
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:25 +0000 (12:51 -0500)]
Update Japanese sudoers translation from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:09 +0000 (12:51 -0500)]
Make the env_reset descriptions consistent.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:58 +0000 (12:50 -0500)]
Do multiple expansion when expanding paths to the noexec file, sesh
and the plugin directory. Adapted from a diff by Mike Frysinger
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:44 +0000 (12:50 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:35 +0000 (12:50 -0500)]
Add ignore file; from Mike Frysinger
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:27 +0000 (12:50 -0500)]
no longer save old Makefile.in to .old
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:19 +0000 (12:50 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:54 +0000 (12:49 -0500)]
Update to libtool 2.4.2
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:46 +0000 (12:49 -0500)]
Bump grammar version for #include and #includedir relative path support.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:35 +0000 (12:49 -0500)]
Add support for relative paths in #include and #includedir
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:26 +0000 (12:49 -0500)]
Fix install-plugin when shared objects are unsupported or disabled.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:16 +0000 (12:49 -0500)]
Don't write to sbp if it is NULL
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:08 +0000 (12:49 -0500)]
If LINGUAS is set, only install matching .mo files
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:54 +0000 (12:48 -0500)]
Fix non-dynamic (no dlopen) sudo build.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:46 +0000 (12:48 -0500)]
Don't error out if the user specified --disable-shared
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:35 +0000 (12:48 -0500)]
Use SUDO_CONV_DEBUG_MSG in the plugin instead of writing
directly to the debug file.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:23 +0000 (12:48 -0500)]
Make sudo_goodpath() return value bolean
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:11 +0000 (12:48 -0500)]
Remove obsolete securid auth method.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:58 +0000 (12:47 -0500)]
Prefix authentication functions with a "sudo_" prefix to avoid
namespace problems.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:46 +0000 (12:47 -0500)]
Remove the old Kerberos IV support
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:33 +0000 (12:47 -0500)]
Don't print garbage at the end of the custom lecture.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:26 +0000 (12:47 -0500)]
Add lexer tracing as debug@parser
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:14 +0000 (12:47 -0500)]
Add devdir before srcdir in include path and fix up dependecies
accordingly and add better devdir support to mkdep.pl. We also
need to #include <gram.h> not "gram.h" and <def_data.h> and not
"def_data.h" when generating the parser in a build dir.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:46:15 +0000 (12:46 -0500)]
Mark libexec files as optional. If we build without shared object
support, libexec is not used.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:46:02 +0000 (12:46 -0500)]
Change Debug sudo.conf setting to take a program name as the first
argument. In the future, this will allow visudo and sudoreplay to
use their own Debug entries.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:51 +0000 (12:45 -0500)]
fix sudo_debug_printf priority
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:40 +0000 (12:45 -0500)]
add missing debug_return_int
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:16 +0000 (12:45 -0500)]
Fold SUDO_DEBUG_PROGERR and SUDO_DEBUG_SYSERR into SUDO_DEBUG_ERROR
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:05 +0000 (12:45 -0500)]
Add missing word in HOME security note.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:55 +0000 (12:44 -0500)]
Prevent "testsudoers -d username" from trying to malloc(0).
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:34 +0000 (12:44 -0500)]
Tests for empty sudoers (should parse OK) and syntax errors within
a line (should report correct line number) both with and without
the trailing newline.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:19 +0000 (12:44 -0500)]
Print line number when there is a parser error.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:03 +0000 (12:44 -0500)]
Keep track of the last token returned. On error, if the last token was
COMMENT, decrement sudolineno since the error most likely occurred on
the preceding line. Previously we always uses sudolineno-1 which will
give the wrong line number for errors within a line.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:55 +0000 (12:43 -0500)]
update with sudo 1.8.3p1 info
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:42 +0000 (12:43 -0500)]
Fix crash when "sudo -g group -i" is run. Fixes bug 521
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:29 +0000 (12:43 -0500)]
Make alias_remove_recursive() return TRUE/FALSE as its callers
expect and remove two unused arguments. Fixes bug 519.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:19 +0000 (12:43 -0500)]
Add regress test for bugzilla 519
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:06 +0000 (12:43 -0500)]
Disable warning/error wrapping in regress tests.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:52 +0000 (12:42 -0500)]
Do compile-po as part of sync-po so that the .mo files get rebuild
automatically when we sync with translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:36 +0000 (12:42 -0500)]
check_addr needs to link with the network libraries on Solaris
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:25 +0000 (12:42 -0500)]
When matching a RunasAlias for a runas group, pass the alias in as
the group_list, not the user_list. From Daniel Kopecek.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:14 +0000 (12:42 -0500)]
We need to init the auth system regardless of whether we need a
password since we will be closing the PAM session in the monitor
process. Fixes a crash in the monitor on Solaris; bugzilla #518
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:01 +0000 (12:42 -0500)]
Get rid of done: label. If the child exits we still need to close
the pty, update utmp and restore the SELinux tty context.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:41:49 +0000 (12:41 -0500)]
Add debug_decl/debug_return (almost) everywhere.
Remove old sudo_debug() and convert users to sudo_debug_printf().
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:40:54 +0000 (12:40 -0500)]
Wrap error/errorx and warning/warningx functions with debug statements.
Disable wrapping for standalone sudoers programs as well as memory
allocation functions (to avoid infinite recursion).
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:40:43 +0000 (12:40 -0500)]
Add checks for __func__ and __FUNCTION__ and mention that we now
require a cpp that supports variadic macros.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:40:27 +0000 (12:40 -0500)]
New debug framework for sudo and plugins using /etc/sudo.conf that
also supports function call tracing.
--HG--
branch : 1.8
Todd C. Miller [Fri, 2 Dec 2011 19:41:32 +0000 (14:41 -0500)]
Remove inaccurate comment
Todd C. Miller [Fri, 2 Dec 2011 19:29:54 +0000 (14:29 -0500)]
Fetch the login class for the user we authenticate specifically when
using BSD authentication. That user may have a different login class
than what we will use to run the command. When setting the login
class for the command, use the target user's struct passwd, not
the invoking user's. Fixes bug 526
Todd C. Miller [Fri, 2 Dec 2011 18:43:02 +0000 (13:43 -0500)]
Replace @DEV@ prefix with DEVEL variable so we can do "make DEVEL=1"
Todd C. Miller [Fri, 2 Dec 2011 16:35:22 +0000 (11:35 -0500)]
Fix "make check" fallout from the sudo_conv changes in sudo_debug.
Todd C. Miller [Fri, 2 Dec 2011 16:27:33 +0000 (11:27 -0500)]
Use stdbool.h instead of rolling our own TRUE/FALSE macros.
Todd C. Miller [Thu, 1 Dec 2011 18:49:46 +0000 (13:49 -0500)]
Add stdbool.h for systems without it.
Todd C. Miller [Thu, 1 Dec 2011 16:27:57 +0000 (11:27 -0500)]
No longer need SUDO_CHECK_TYPE and SUDO_TYPE_* now that the default
includes have unistd.h in them. Add check for socklen_t for upcoming
getaddrinfo compat.
Todd C. Miller [Thu, 1 Dec 2011 16:07:17 +0000 (11:07 -0500)]
Use HAVE_STRUCT_TIMESPEC and HAVE_STRUCT_IN6_ADDR instead of
HAVE_TIMESPEC and HAVE_IN6_ADDR respectively.
Todd C. Miller [Thu, 1 Dec 2011 15:47:23 +0000 (10:47 -0500)]
No longer need to include time.h here as missing.h does not use
time_t.
Todd C. Miller [Wed, 30 Nov 2011 20:33:26 +0000 (15:33 -0500)]
Fix mode on sudoers as needed when the -f option is not specified.
Todd C. Miller [Wed, 30 Nov 2011 19:57:45 +0000 (14:57 -0500)]
Add Serbian translation for sudo from translationproject.org
Todd C. Miller [Wed, 30 Nov 2011 19:56:41 +0000 (14:56 -0500)]
No longer pass debug_file to plugin, plugins must now use CONV_DEBUG_MSG
Todd C. Miller [Wed, 30 Nov 2011 18:51:41 +0000 (13:51 -0500)]
Build PIE executables for newer Debian and Ubuntu
Todd C. Miller [Wed, 30 Nov 2011 14:14:11 +0000 (09:14 -0500)]
Include time.h for ctime() prototype.
Todd C. Miller [Wed, 30 Nov 2011 00:51:24 +0000 (19:51 -0500)]
Do not close error pipe or debug fd via closefrom() as we need them
to report an exec error should one occur.
Todd C. Miller [Tue, 29 Nov 2011 21:37:01 +0000 (16:37 -0500)]
Document that a sudoUser may now be a group ID.
Todd C. Miller [Tue, 29 Nov 2011 21:24:45 +0000 (16:24 -0500)]
Add support for permitting access by group ID in addition to group name.
Todd C. Miller [Tue, 29 Nov 2011 20:37:48 +0000 (15:37 -0500)]
Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
Todd C. Miller [Tue, 29 Nov 2011 19:57:08 +0000 (14:57 -0500)]
Replace UCB fnmatch.c with a non-recursive version written by
William A. Rowe Jr.
Todd C. Miller [Tue, 29 Nov 2011 19:41:00 +0000 (14:41 -0500)]
Fix typo, return_debug vs. debug_return
Todd C. Miller [Wed, 23 Nov 2011 20:04:09 +0000 (15:04 -0500)]
Update Japanese sudoers translation from translationproject.org
Todd C. Miller [Wed, 23 Nov 2011 15:42:32 +0000 (10:42 -0500)]
Make the env_reset descriptions consistent.
Todd C. Miller [Tue, 22 Nov 2011 19:53:47 +0000 (14:53 -0500)]
Do multiple expansion when expanding paths to the noexec file, sesh
and the plugin directory. Adapted from a diff by Mike Frysinger
Todd C. Miller [Tue, 22 Nov 2011 18:16:43 +0000 (13:16 -0500)]
regen
Todd C. Miller [Mon, 21 Nov 2011 21:44:21 +0000 (16:44 -0500)]
Add ignore file; from Mike Frysinger
Todd C. Miller [Mon, 21 Nov 2011 21:44:08 +0000 (16:44 -0500)]
no longer save old Makefile.in to .old
Todd C. Miller [Mon, 21 Nov 2011 21:43:46 +0000 (16:43 -0500)]
regen
Todd C. Miller [Mon, 21 Nov 2011 17:24:32 +0000 (12:24 -0500)]
Update to libtool 2.4.2
Todd C. Miller [Fri, 18 Nov 2011 17:02:43 +0000 (12:02 -0500)]
Bump grammar version for #include and #includedir relative path support.
Todd C. Miller [Fri, 18 Nov 2011 01:48:42 +0000 (20:48 -0500)]
Add support for relative paths in #include and #includedir
Todd C. Miller [Thu, 17 Nov 2011 21:45:52 +0000 (16:45 -0500)]
Fix install-plugin when shared objects are unsupported or disabled.
Todd C. Miller [Thu, 17 Nov 2011 21:33:32 +0000 (16:33 -0500)]
Don't write to sbp if it is NULL
Todd C. Miller [Wed, 16 Nov 2011 16:18:25 +0000 (11:18 -0500)]
Remove all sudo/sudoers .mo files on uninstall
If LINGUAS is set, only install matching .mo files