]> granicus.if.org Git - sudo/log
sudo
11 years agoUse same error message for getauid() failure.
Todd C. Miller [Thu, 11 Apr 2013 12:54:39 +0000 (08:54 -0400)]
Use same error message for getauid() failure.

11 years agoStart warning with a lower case letter for consistency and to match
Todd C. Miller [Thu, 11 Apr 2013 10:38:12 +0000 (06:38 -0400)]
Start warning with a lower case letter for consistency and to match
existing translated strings.

11 years agoDisable PIE on Solaris where it is not really supported.
Todd C. Miller [Wed, 10 Apr 2013 20:26:41 +0000 (16:26 -0400)]
Disable PIE on Solaris where it is not really supported.

11 years agoAIX may have a 64-bit pr_ttydev that we need to convert to 32-bit
Todd C. Miller [Wed, 10 Apr 2013 16:30:16 +0000 (12:30 -0400)]
AIX may have a 64-bit pr_ttydev that we need to convert to 32-bit
before we try to match it against st_rdev.

11 years agoBreak out of the loop if sudo_ttyname_scan() returns non-NULL.
Todd C. Miller [Wed, 10 Apr 2013 16:11:12 +0000 (12:11 -0400)]
Break out of the loop if sudo_ttyname_scan() returns non-NULL.
Fixes a problem finding the tty name when it is not in /dev/pts.

11 years agoSupport %lld and %llu
Todd C. Miller [Wed, 10 Apr 2013 15:17:41 +0000 (11:17 -0400)]
Support %lld and %llu

11 years agoAdd ttyname test.
Todd C. Miller [Wed, 10 Apr 2013 13:39:49 +0000 (09:39 -0400)]
Add ttyname test.

11 years agoSync with translationproject.org
Todd C. Miller [Tue, 9 Apr 2013 18:39:44 +0000 (14:39 -0400)]
Sync with translationproject.org

11 years agoLog timestampfile to debug file.
Todd C. Miller [Tue, 9 Apr 2013 18:17:59 +0000 (14:17 -0400)]
Log timestampfile to debug file.

11 years agoDon't add the "Password: " string we look up in the PAM text domain
Todd C. Miller [Tue, 9 Apr 2013 13:40:36 +0000 (09:40 -0400)]
Don't add the "Password: " string we look up in the PAM text domain
to the sudoers.pot file.

11 years agoSynce with regcomp() error message change.
Todd C. Miller [Mon, 8 Apr 2013 19:41:55 +0000 (15:41 -0400)]
Synce with regcomp() error message change.

11 years agoBe consistent with error message when regcomp() fails.
Todd C. Miller [Mon, 8 Apr 2013 19:41:09 +0000 (15:41 -0400)]
Be consistent with error message when regcomp() fails.

11 years agoUse group -1 instead of 1 as the invalid group since the running
Todd C. Miller [Fri, 5 Apr 2013 12:17:19 +0000 (08:17 -0400)]
Use group -1 instead of 1 as the invalid group since the running
user might have group 1 as their default group.

11 years agoPWD may be a shell builtin, use CWD instead.
Todd C. Miller [Fri, 5 Apr 2013 12:05:35 +0000 (08:05 -0400)]
PWD may be a shell builtin, use CWD instead.

11 years agoSplit up check_user().
Todd C. Miller [Thu, 4 Apr 2013 14:04:22 +0000 (10:04 -0400)]
Split up check_user().

11 years agoCosmetic fixes in the comments.
Todd C. Miller [Wed, 3 Apr 2013 13:54:11 +0000 (09:54 -0400)]
Cosmetic fixes in the comments.

11 years agoUse AC_LINK_IFELSE instead of AC_TRY_LINK
Todd C. Miller [Tue, 2 Apr 2013 20:56:59 +0000 (16:56 -0400)]
Use AC_LINK_IFELSE instead of AC_TRY_LINK
Fix printing of status message for visibility checks when the test fails.

11 years agoregen
Todd C. Miller [Tue, 2 Apr 2013 20:54:39 +0000 (16:54 -0400)]
regen

11 years agoWe no longer use mbr_check_membership() and setrlimit64() is
Todd C. Miller [Tue, 2 Apr 2013 20:52:59 +0000 (16:52 -0400)]
We no longer use mbr_check_membership() and setrlimit64() is
AIX-specific.

11 years agoThe first (all) target must be by itself or some makes will choose
Todd C. Miller [Tue, 2 Apr 2013 16:40:53 +0000 (12:40 -0400)]
The first (all) target must be by itself or some makes will choose
the run the entire target list.

11 years agoDo exec_prefix expansion when enable_shared even if noexec is
Todd C. Miller [Tue, 2 Apr 2013 16:25:54 +0000 (12:25 -0400)]
Do exec_prefix expansion when enable_shared even if noexec is
not enabled.

11 years agoUse free() not efree() since we don't include alloc.h here
Todd C. Miller [Tue, 2 Apr 2013 15:23:31 +0000 (11:23 -0400)]
Use free() not efree() since we don't include alloc.h here

11 years agoregen
Todd C. Miller [Tue, 2 Apr 2013 14:40:16 +0000 (10:40 -0400)]
regen

11 years agoPass in expected gid to testsudoers in addition to the uid that
Todd C. Miller [Tue, 2 Apr 2013 13:25:51 +0000 (09:25 -0400)]
Pass in expected gid to testsudoers in addition to the uid that
matches the test sudoers files.

11 years agoTru64 5.x does declare innetgr() and getdomainname().
Todd C. Miller [Mon, 1 Apr 2013 20:39:30 +0000 (16:39 -0400)]
Tru64 5.x does declare innetgr() and getdomainname().

11 years agoFix compilation when getdomainame() is not present.
Todd C. Miller [Mon, 1 Apr 2013 20:35:35 +0000 (16:35 -0400)]
Fix compilation when getdomainame() is not present.

11 years agoMove SET/CLR/ISSET from config.h.in to missing.h
Todd C. Miller [Mon, 1 Apr 2013 19:38:09 +0000 (15:38 -0400)]
Move SET/CLR/ISSET from config.h.in to missing.h

11 years agoFix getgrouplist() check.
Todd C. Miller [Mon, 1 Apr 2013 18:58:31 +0000 (14:58 -0400)]
Fix getgrouplist() check.

11 years agoNo more timestamp.h
Todd C. Miller [Mon, 1 Apr 2013 18:56:54 +0000 (14:56 -0400)]
No more timestamp.h

11 years agoNeded sys/time.h for struct timeval in struct sudo_tty_info.
Todd C. Miller [Mon, 1 Apr 2013 18:48:00 +0000 (14:48 -0400)]
Neded sys/time.h for struct timeval in struct sudo_tty_info.

11 years agoregen depends
Todd C. Miller [Mon, 1 Apr 2013 18:10:42 +0000 (14:10 -0400)]
regen depends

11 years agoMention libibmldap on HP-UX
Todd C. Miller [Mon, 1 Apr 2013 18:10:37 +0000 (14:10 -0400)]
Mention libibmldap on HP-UX

11 years agoInstead of checking the domain name explicitly for "(none)", just
Todd C. Miller [Mon, 1 Apr 2013 17:56:42 +0000 (13:56 -0400)]
Instead of checking the domain name explicitly for "(none)", just
check for illegal characters.

11 years agoOnly warn once when we are unable to open the sudoers file.
Todd C. Miller [Mon, 1 Apr 2013 15:23:29 +0000 (11:23 -0400)]
Only warn once when we are unable to open the sudoers file.

11 years agoFall back to opening /dev/tty to determine whether there is a tty
Todd C. Miller [Mon, 1 Apr 2013 14:40:17 +0000 (10:40 -0400)]
Fall back to opening /dev/tty to determine whether there is a tty
if the system doesn't have kernel support for determing the tty.

11 years agoUpdate guard to take __progname into account
Todd C. Miller [Mon, 1 Apr 2013 14:23:36 +0000 (10:23 -0400)]
Update guard to take __progname into account

11 years agoSome older systems have inttypes.h but not stdint.h
Todd C. Miller [Mon, 1 Apr 2013 14:23:18 +0000 (10:23 -0400)]
Some older systems have inttypes.h but not stdint.h

11 years agoAdd guards in compat source files. Not really needed since we only
Todd C. Miller [Mon, 1 Apr 2013 14:19:26 +0000 (10:19 -0400)]
Add guards in compat source files.  Not really needed since we only
include them in the Makefile if they are needed but should not hurt
either.

11 years agoDon't include gram.h in gram.y, its contents are already included.
Todd C. Miller [Sun, 31 Mar 2013 13:58:37 +0000 (09:58 -0400)]
Don't include gram.h in gram.y, its contents are already included.
Move sudoerserror to the end of gram.y so COMMENT is declared
when we need to use it.

11 years agoRemove some pre-ANSI cruft.
Todd C. Miller [Fri, 29 Mar 2013 20:30:27 +0000 (16:30 -0400)]
Remove some pre-ANSI cruft.

11 years agoRename NAME_MATCH -> SUDOERS_NAME_MATCH and avoid pulling in glob.h
Todd C. Miller [Fri, 29 Mar 2013 18:03:00 +0000 (14:03 -0400)]
Rename NAME_MATCH -> SUDOERS_NAME_MATCH and avoid pulling in glob.h
when it is set.

11 years agoWe still want to recognize %{seq} for the SUDOERS_NO_SEQ case but
Todd C. Miller [Fri, 29 Mar 2013 14:54:46 +0000 (10:54 -0400)]
We still want to recognize %{seq} for the SUDOERS_NO_SEQ case but
just leave it as-is.

11 years agoAdd missing semicolon in rule.
Todd C. Miller [Fri, 29 Mar 2013 00:53:55 +0000 (20:53 -0400)]
Add missing semicolon in rule.

11 years agoNow that we can determine the terminal even when file descriptors
Todd C. Miller [Thu, 28 Mar 2013 19:46:52 +0000 (15:46 -0400)]
Now that we can determine the terminal even when file descriptors
are redirected we can check user_ttypath rather than opening
/dev/tty when enforcing requiretty.

11 years agoStash umask in struct sudo_user so we don't need to look it up later.
Todd C. Miller [Thu, 28 Mar 2013 19:40:32 +0000 (15:40 -0400)]
Stash umask in struct sudo_user so we don't need to look it up later.

11 years agoMinor cosmetic change
Todd C. Miller [Thu, 28 Mar 2013 18:25:24 +0000 (14:25 -0400)]
Minor cosmetic change

11 years agoNo longer need to declare interfaces
Todd C. Miller [Thu, 28 Mar 2013 18:25:09 +0000 (14:25 -0400)]
No longer need to declare interfaces

11 years agoFix compilation in SUDOERS_NO_SEQ case
Todd C. Miller [Thu, 28 Mar 2013 18:23:31 +0000 (14:23 -0400)]
Fix compilation in SUDOERS_NO_SEQ case

11 years agoNo longer need to define sudo_printf
Todd C. Miller [Thu, 28 Mar 2013 17:40:20 +0000 (13:40 -0400)]
No longer need to define sudo_printf

11 years agoPass auth_pw to the timestamp functions.
Todd C. Miller [Thu, 28 Mar 2013 17:22:09 +0000 (13:22 -0400)]
Pass auth_pw to the timestamp functions.

11 years agoFix SUDOERS_NO_SEQ
Todd C. Miller [Thu, 28 Mar 2013 17:21:43 +0000 (13:21 -0400)]
Fix SUDOERS_NO_SEQ

11 years agoDon't need all of sudoers.h in here
Todd C. Miller [Thu, 28 Mar 2013 15:19:18 +0000 (11:19 -0400)]
Don't need all of sudoers.h in here

11 years agoDon't need to include sudoers_version.h here.
Todd C. Miller [Thu, 28 Mar 2013 14:49:18 +0000 (10:49 -0400)]
Don't need to include sudoers_version.h here.

11 years agoDEFAULT_LECTURE is no longer used.
Todd C. Miller [Wed, 27 Mar 2013 19:01:26 +0000 (15:01 -0400)]
DEFAULT_LECTURE is no longer used.

11 years agoMove sudo_conv into policy.c
Todd C. Miller [Wed, 27 Mar 2013 17:42:40 +0000 (13:42 -0400)]
Move sudo_conv into policy.c

11 years agocosmetic fixes
Todd C. Miller [Wed, 27 Mar 2013 15:29:58 +0000 (11:29 -0400)]
cosmetic fixes

11 years agoRHEL (and perhaps other Linux distros) use the string "(none)"
Todd C. Miller [Wed, 27 Mar 2013 07:41:00 +0000 (03:41 -0400)]
RHEL (and perhaps other Linux distros) use the string "(none)"
instead of an empty string when there is no actual NIS-style domain
name.  Bug #596

11 years agoFix return values when NAME_MATCH is defined.
Todd C. Miller [Wed, 27 Mar 2013 07:39:18 +0000 (03:39 -0400)]
Fix return values when NAME_MATCH is defined.

11 years agoUpdate copyright year.
Todd C. Miller [Tue, 26 Mar 2013 17:29:05 +0000 (13:29 -0400)]
Update copyright year.

11 years agoAdd sudo_set_grlist(), currently unused by the back end.
Todd C. Miller [Tue, 26 Mar 2013 17:27:51 +0000 (13:27 -0400)]
Add sudo_set_grlist(), currently unused by the back end.

11 years agoRemove unused macros, fix a debug_decl
Todd C. Miller [Tue, 26 Mar 2013 17:26:59 +0000 (13:26 -0400)]
Remove unused macros, fix a debug_decl

11 years agoTru64 Unix doesn't prototype innetgr() or getdomainname().
Todd C. Miller [Tue, 26 Mar 2013 17:19:59 +0000 (13:19 -0400)]
Tru64 Unix doesn't prototype innetgr() or getdomainname().

11 years agoWhitespace fixes
Todd C. Miller [Tue, 26 Mar 2013 14:27:06 +0000 (10:27 -0400)]
Whitespace fixes

11 years agoDon't need to include setjmp.h here, error.h already includes it.
Todd C. Miller [Tue, 26 Mar 2013 12:56:56 +0000 (08:56 -0400)]
Don't need to include setjmp.h here, error.h already includes it.

11 years agoregen depends
Todd C. Miller [Mon, 25 Mar 2013 17:54:25 +0000 (13:54 -0400)]
regen depends

11 years agoRename guard define.
Todd C. Miller [Mon, 25 Mar 2013 15:30:16 +0000 (11:30 -0400)]
Rename guard define.

11 years agoMove contents of timestamp.h into check.h.
Todd C. Miller [Mon, 25 Mar 2013 15:28:21 +0000 (11:28 -0400)]
Move contents of timestamp.h into check.h.

11 years agoexpand_prompt() is now in prompt.c
Todd C. Miller [Mon, 25 Mar 2013 15:19:56 +0000 (11:19 -0400)]
expand_prompt() is now in prompt.c
sudo_printf extern is now in error.h

11 years agoChange multiple inclusion guards to be _SUDOERS_FOO_H
Todd C. Miller [Mon, 25 Mar 2013 15:17:46 +0000 (11:17 -0400)]
Change multiple inclusion guards to be _SUDOERS_FOO_H

11 years agoNew Dutch translation for sudo and sudoers
Todd C. Miller [Sat, 23 Mar 2013 12:45:51 +0000 (08:45 -0400)]
New Dutch translation for sudo and sudoers
New Turkish translation for sudo
From translationproject.org

11 years agoFix a typo in a comment and make sure we don't mistakenly include
Todd C. Miller [Thu, 21 Mar 2013 20:35:18 +0000 (16:35 -0400)]
Fix a typo in a comment and make sure we don't mistakenly include
_PATH_SUDO_ASKPASS and _PATH_SUDO_SESH in config.h.in

11 years agoDon't build check_symbols if we are linking sudoers in statically.
Todd C. Miller [Tue, 19 Mar 2013 20:18:04 +0000 (16:18 -0400)]
Don't build check_symbols if we are linking sudoers in statically.

11 years agoUse $host_os not $host when we only care about the os name and version.
Todd C. Miller [Tue, 19 Mar 2013 19:59:23 +0000 (15:59 -0400)]
Use $host_os not $host when we only care about the os name and version.

11 years agoSuppress duplicate -L and -I flags.
Todd C. Miller [Tue, 19 Mar 2013 18:10:26 +0000 (14:10 -0400)]
Suppress duplicate -L and -I flags.

11 years agoFix regress tests on non-OpenBSD platforms.
Todd C. Miller [Tue, 19 Mar 2013 18:08:11 +0000 (14:08 -0400)]
Fix regress tests on non-OpenBSD platforms.

11 years agoIf we find sasl/sasl.h there's no need to check for sasl.h too
Todd C. Miller [Tue, 19 Mar 2013 17:04:24 +0000 (13:04 -0400)]
If we find sasl/sasl.h there's no need to check for sasl.h too

11 years agoAdd -R flags at the very end after configure link tests are done
Todd C. Miller [Tue, 19 Mar 2013 15:52:54 +0000 (11:52 -0400)]
Add -R flags at the very end after configure link tests are done
since we can only count on libtool to accept -R, the compiler front
end may not.
Also unify the libldap and libibmldap tests using AC_SEARCH_LIBS
and check for -lCsup on HP-UX which is needed by libibmldap (but
is not an explicit dependency).

11 years agoBack out changes that broke detection of skey, opie and ldap
Todd C. Miller [Mon, 18 Mar 2013 20:34:01 +0000 (16:34 -0400)]
Back out changes that broke detection of skey, opie and ldap
libraries.

11 years agoAdd explicit "exit 0" to prevent the check target from ending
Todd C. Miller [Mon, 18 Mar 2013 20:11:24 +0000 (16:11 -0400)]
Add explicit "exit 0" to prevent the check target from ending
prematurely.

11 years agoFix exit values in check target so we don't have to ignore errors.
Todd C. Miller [Mon, 18 Mar 2013 20:10:08 +0000 (16:10 -0400)]
Fix exit values in check target so we don't have to ignore errors.

11 years agoFail a test if there is unexpected stderr output.
Todd C. Miller [Mon, 18 Mar 2013 19:31:04 +0000 (15:31 -0400)]
Fail a test if there is unexpected stderr output.

11 years agoFix path to sudo.conf manuals; remove non-existant test2.err.ok
Todd C. Miller [Mon, 18 Mar 2013 19:29:40 +0000 (15:29 -0400)]
Fix path to sudo.conf manuals; remove non-existant test2.err.ok

11 years agoFix compilation in dynamic mode.
Todd C. Miller [Mon, 18 Mar 2013 19:26:08 +0000 (15:26 -0400)]
Fix compilation in dynamic mode.

11 years agoOn HP-UX, libibmldap has a hidden dependency on libCsup
Todd C. Miller [Mon, 18 Mar 2013 19:19:12 +0000 (15:19 -0400)]
On HP-UX, libibmldap has a hidden dependency on libCsup

11 years agoPass BIND_VERBOSE to shl_load()
Todd C. Miller [Mon, 18 Mar 2013 19:15:13 +0000 (15:15 -0400)]
Pass BIND_VERBOSE to shl_load()

11 years agoOnly create static helper libs when --disable-shared is specified.
Todd C. Miller [Mon, 18 Mar 2013 14:15:48 +0000 (10:15 -0400)]
Only create static helper libs when --disable-shared is specified.

11 years agoUbreak static build.
Todd C. Miller [Mon, 18 Mar 2013 13:55:01 +0000 (09:55 -0400)]
Ubreak static build.

11 years agoReplace --with-rpath and --with-blibpath with --disable-rpath.
Todd C. Miller [Mon, 18 Mar 2013 13:27:07 +0000 (09:27 -0400)]
Replace --with-rpath and --with-blibpath with --disable-rpath.
Now that we use libtool for linking we can just use the -R
flag and have libtool translate it to the proper linker flag.

11 years agoBump I/O buffer size 32K
Todd C. Miller [Fri, 15 Mar 2013 15:31:58 +0000 (11:31 -0400)]
Bump I/O buffer size 32K

11 years agoDocument sesh Path setting.
Todd C. Miller [Fri, 15 Mar 2013 00:13:54 +0000 (20:13 -0400)]
Document sesh Path setting.

11 years agoMove exec_cmnd to exec.c to fix a compilation issue with sesh.c
Todd C. Miller [Thu, 14 Mar 2013 23:59:07 +0000 (19:59 -0400)]
Move exec_cmnd to exec.c to fix a compilation issue with sesh.c

11 years agoMake sesh path configurable in sudo.conf
Todd C. Miller [Thu, 14 Mar 2013 20:49:42 +0000 (16:49 -0400)]
Make sesh path configurable in sudo.conf

11 years agoUse -fno-pie and -nopie if supported when --disable-pie is specified.
Todd C. Miller [Thu, 14 Mar 2013 20:06:13 +0000 (16:06 -0400)]
Use -fno-pie and -nopie if supported when --disable-pie is specified.

11 years agoDocument direct execution of the command if the policy plugin has
Todd C. Miller [Wed, 13 Mar 2013 15:32:31 +0000 (11:32 -0400)]
Document direct execution of the command if the policy plugin has
no close function.

11 years agoOnly delete creds if we actually established them.
Todd C. Miller [Thu, 7 Mar 2013 21:17:44 +0000 (16:17 -0500)]
Only delete creds if we actually established them.
Print an error if pam_setcred() fails and we actually authenticated.

11 years agoregen
Todd C. Miller [Thu, 7 Mar 2013 20:46:11 +0000 (15:46 -0500)]
regen

11 years agoConvert efree() to a macro that just casts to void * and does free().
Todd C. Miller [Thu, 7 Mar 2013 20:41:34 +0000 (15:41 -0500)]
Convert efree() to a macro that just casts to void * and does free().
If the system free() can't handle free(NULL) this may crash but C89
was a long time ago.

11 years agoDefine _REENTRANT for HP-UX when we add -lpthread to SUDO_LIBS.
Todd C. Miller [Thu, 7 Mar 2013 16:54:17 +0000 (11:54 -0500)]
Define _REENTRANT for HP-UX when we add -lpthread to SUDO_LIBS.
Fixes a problem with errno sometimes not being set on error on HP-UX.

11 years agoFix debug logging from the plugin when there is no error number.
Todd C. Miller [Thu, 7 Mar 2013 15:06:01 +0000 (10:06 -0500)]
Fix debug logging from the plugin when there is no error number.
This was broken in the big debugging reorg for 1.8.7.

11 years agoAlways install plugins with a .so extension regardless of what
Todd C. Miller [Wed, 6 Mar 2013 22:08:10 +0000 (17:08 -0500)]
Always install plugins with a .so extension regardless of what
extension the system uses for shared libraries.  That way the
group_plugin sudoers setting can be shared between heterogenous
systems.