]>
granicus.if.org Git - sudo/log
Todd C. Miller [Thu, 11 Apr 2013 12:54:39 +0000 (08:54 -0400)]
Use same error message for getauid() failure.
Todd C. Miller [Thu, 11 Apr 2013 10:38:12 +0000 (06:38 -0400)]
Start warning with a lower case letter for consistency and to match
existing translated strings.
Todd C. Miller [Wed, 10 Apr 2013 20:26:41 +0000 (16:26 -0400)]
Disable PIE on Solaris where it is not really supported.
Todd C. Miller [Wed, 10 Apr 2013 16:30:16 +0000 (12:30 -0400)]
AIX may have a 64-bit pr_ttydev that we need to convert to 32-bit
before we try to match it against st_rdev.
Todd C. Miller [Wed, 10 Apr 2013 16:11:12 +0000 (12:11 -0400)]
Break out of the loop if sudo_ttyname_scan() returns non-NULL.
Fixes a problem finding the tty name when it is not in /dev/pts.
Todd C. Miller [Wed, 10 Apr 2013 15:17:41 +0000 (11:17 -0400)]
Support %lld and %llu
Todd C. Miller [Wed, 10 Apr 2013 13:39:49 +0000 (09:39 -0400)]
Add ttyname test.
Todd C. Miller [Tue, 9 Apr 2013 18:39:44 +0000 (14:39 -0400)]
Sync with translationproject.org
Todd C. Miller [Tue, 9 Apr 2013 18:17:59 +0000 (14:17 -0400)]
Log timestampfile to debug file.
Todd C. Miller [Tue, 9 Apr 2013 13:40:36 +0000 (09:40 -0400)]
Don't add the "Password: " string we look up in the PAM text domain
to the sudoers.pot file.
Todd C. Miller [Mon, 8 Apr 2013 19:41:55 +0000 (15:41 -0400)]
Synce with regcomp() error message change.
Todd C. Miller [Mon, 8 Apr 2013 19:41:09 +0000 (15:41 -0400)]
Be consistent with error message when regcomp() fails.
Todd C. Miller [Fri, 5 Apr 2013 12:17:19 +0000 (08:17 -0400)]
Use group -1 instead of 1 as the invalid group since the running
user might have group 1 as their default group.
Todd C. Miller [Fri, 5 Apr 2013 12:05:35 +0000 (08:05 -0400)]
PWD may be a shell builtin, use CWD instead.
Todd C. Miller [Thu, 4 Apr 2013 14:04:22 +0000 (10:04 -0400)]
Split up check_user().
Todd C. Miller [Wed, 3 Apr 2013 13:54:11 +0000 (09:54 -0400)]
Cosmetic fixes in the comments.
Todd C. Miller [Tue, 2 Apr 2013 20:56:59 +0000 (16:56 -0400)]
Use AC_LINK_IFELSE instead of AC_TRY_LINK
Fix printing of status message for visibility checks when the test fails.
Todd C. Miller [Tue, 2 Apr 2013 20:54:39 +0000 (16:54 -0400)]
regen
Todd C. Miller [Tue, 2 Apr 2013 20:52:59 +0000 (16:52 -0400)]
We no longer use mbr_check_membership() and setrlimit64() is
AIX-specific.
Todd C. Miller [Tue, 2 Apr 2013 16:40:53 +0000 (12:40 -0400)]
The first (all) target must be by itself or some makes will choose
the run the entire target list.
Todd C. Miller [Tue, 2 Apr 2013 16:25:54 +0000 (12:25 -0400)]
Do exec_prefix expansion when enable_shared even if noexec is
not enabled.
Todd C. Miller [Tue, 2 Apr 2013 15:23:31 +0000 (11:23 -0400)]
Use free() not efree() since we don't include alloc.h here
Todd C. Miller [Tue, 2 Apr 2013 14:40:16 +0000 (10:40 -0400)]
regen
Todd C. Miller [Tue, 2 Apr 2013 13:25:51 +0000 (09:25 -0400)]
Pass in expected gid to testsudoers in addition to the uid that
matches the test sudoers files.
Todd C. Miller [Mon, 1 Apr 2013 20:39:30 +0000 (16:39 -0400)]
Tru64 5.x does declare innetgr() and getdomainname().
Todd C. Miller [Mon, 1 Apr 2013 20:35:35 +0000 (16:35 -0400)]
Fix compilation when getdomainame() is not present.
Todd C. Miller [Mon, 1 Apr 2013 19:38:09 +0000 (15:38 -0400)]
Move SET/CLR/ISSET from config.h.in to missing.h
Todd C. Miller [Mon, 1 Apr 2013 18:58:31 +0000 (14:58 -0400)]
Fix getgrouplist() check.
Todd C. Miller [Mon, 1 Apr 2013 18:56:54 +0000 (14:56 -0400)]
No more timestamp.h
Todd C. Miller [Mon, 1 Apr 2013 18:48:00 +0000 (14:48 -0400)]
Neded sys/time.h for struct timeval in struct sudo_tty_info.
Todd C. Miller [Mon, 1 Apr 2013 18:10:42 +0000 (14:10 -0400)]
regen depends
Todd C. Miller [Mon, 1 Apr 2013 18:10:37 +0000 (14:10 -0400)]
Mention libibmldap on HP-UX
Todd C. Miller [Mon, 1 Apr 2013 17:56:42 +0000 (13:56 -0400)]
Instead of checking the domain name explicitly for "(none)", just
check for illegal characters.
Todd C. Miller [Mon, 1 Apr 2013 15:23:29 +0000 (11:23 -0400)]
Only warn once when we are unable to open the sudoers file.
Todd C. Miller [Mon, 1 Apr 2013 14:40:17 +0000 (10:40 -0400)]
Fall back to opening /dev/tty to determine whether there is a tty
if the system doesn't have kernel support for determing the tty.
Todd C. Miller [Mon, 1 Apr 2013 14:23:36 +0000 (10:23 -0400)]
Update guard to take __progname into account
Todd C. Miller [Mon, 1 Apr 2013 14:23:18 +0000 (10:23 -0400)]
Some older systems have inttypes.h but not stdint.h
Todd C. Miller [Mon, 1 Apr 2013 14:19:26 +0000 (10:19 -0400)]
Add guards in compat source files. Not really needed since we only
include them in the Makefile if they are needed but should not hurt
either.
Todd C. Miller [Sun, 31 Mar 2013 13:58:37 +0000 (09:58 -0400)]
Don't include gram.h in gram.y, its contents are already included.
Move sudoerserror to the end of gram.y so COMMENT is declared
when we need to use it.
Todd C. Miller [Fri, 29 Mar 2013 20:30:27 +0000 (16:30 -0400)]
Remove some pre-ANSI cruft.
Todd C. Miller [Fri, 29 Mar 2013 18:03:00 +0000 (14:03 -0400)]
Rename NAME_MATCH -> SUDOERS_NAME_MATCH and avoid pulling in glob.h
when it is set.
Todd C. Miller [Fri, 29 Mar 2013 14:54:46 +0000 (10:54 -0400)]
We still want to recognize %{seq} for the SUDOERS_NO_SEQ case but
just leave it as-is.
Todd C. Miller [Fri, 29 Mar 2013 00:53:55 +0000 (20:53 -0400)]
Add missing semicolon in rule.
Todd C. Miller [Thu, 28 Mar 2013 19:46:52 +0000 (15:46 -0400)]
Now that we can determine the terminal even when file descriptors
are redirected we can check user_ttypath rather than opening
/dev/tty when enforcing requiretty.
Todd C. Miller [Thu, 28 Mar 2013 19:40:32 +0000 (15:40 -0400)]
Stash umask in struct sudo_user so we don't need to look it up later.
Todd C. Miller [Thu, 28 Mar 2013 18:25:24 +0000 (14:25 -0400)]
Minor cosmetic change
Todd C. Miller [Thu, 28 Mar 2013 18:25:09 +0000 (14:25 -0400)]
No longer need to declare interfaces
Todd C. Miller [Thu, 28 Mar 2013 18:23:31 +0000 (14:23 -0400)]
Fix compilation in SUDOERS_NO_SEQ case
Todd C. Miller [Thu, 28 Mar 2013 17:40:20 +0000 (13:40 -0400)]
No longer need to define sudo_printf
Todd C. Miller [Thu, 28 Mar 2013 17:22:09 +0000 (13:22 -0400)]
Pass auth_pw to the timestamp functions.
Todd C. Miller [Thu, 28 Mar 2013 17:21:43 +0000 (13:21 -0400)]
Fix SUDOERS_NO_SEQ
Todd C. Miller [Thu, 28 Mar 2013 15:19:18 +0000 (11:19 -0400)]
Don't need all of sudoers.h in here
Todd C. Miller [Thu, 28 Mar 2013 14:49:18 +0000 (10:49 -0400)]
Don't need to include sudoers_version.h here.
Todd C. Miller [Wed, 27 Mar 2013 19:01:26 +0000 (15:01 -0400)]
DEFAULT_LECTURE is no longer used.
Todd C. Miller [Wed, 27 Mar 2013 17:42:40 +0000 (13:42 -0400)]
Move sudo_conv into policy.c
Todd C. Miller [Wed, 27 Mar 2013 15:29:58 +0000 (11:29 -0400)]
cosmetic fixes
Todd C. Miller [Wed, 27 Mar 2013 07:41:00 +0000 (03:41 -0400)]
RHEL (and perhaps other Linux distros) use the string "(none)"
instead of an empty string when there is no actual NIS-style domain
name. Bug #596
Todd C. Miller [Wed, 27 Mar 2013 07:39:18 +0000 (03:39 -0400)]
Fix return values when NAME_MATCH is defined.
Todd C. Miller [Tue, 26 Mar 2013 17:29:05 +0000 (13:29 -0400)]
Update copyright year.
Todd C. Miller [Tue, 26 Mar 2013 17:27:51 +0000 (13:27 -0400)]
Add sudo_set_grlist(), currently unused by the back end.
Todd C. Miller [Tue, 26 Mar 2013 17:26:59 +0000 (13:26 -0400)]
Remove unused macros, fix a debug_decl
Todd C. Miller [Tue, 26 Mar 2013 17:19:59 +0000 (13:19 -0400)]
Tru64 Unix doesn't prototype innetgr() or getdomainname().
Todd C. Miller [Tue, 26 Mar 2013 14:27:06 +0000 (10:27 -0400)]
Whitespace fixes
Todd C. Miller [Tue, 26 Mar 2013 12:56:56 +0000 (08:56 -0400)]
Don't need to include setjmp.h here, error.h already includes it.
Todd C. Miller [Mon, 25 Mar 2013 17:54:25 +0000 (13:54 -0400)]
regen depends
Todd C. Miller [Mon, 25 Mar 2013 15:30:16 +0000 (11:30 -0400)]
Rename guard define.
Todd C. Miller [Mon, 25 Mar 2013 15:28:21 +0000 (11:28 -0400)]
Move contents of timestamp.h into check.h.
Todd C. Miller [Mon, 25 Mar 2013 15:19:56 +0000 (11:19 -0400)]
expand_prompt() is now in prompt.c
sudo_printf extern is now in error.h
Todd C. Miller [Mon, 25 Mar 2013 15:17:46 +0000 (11:17 -0400)]
Change multiple inclusion guards to be _SUDOERS_FOO_H
Todd C. Miller [Sat, 23 Mar 2013 12:45:51 +0000 (08:45 -0400)]
New Dutch translation for sudo and sudoers
New Turkish translation for sudo
From translationproject.org
Todd C. Miller [Thu, 21 Mar 2013 20:35:18 +0000 (16:35 -0400)]
Fix a typo in a comment and make sure we don't mistakenly include
_PATH_SUDO_ASKPASS and _PATH_SUDO_SESH in config.h.in
Todd C. Miller [Tue, 19 Mar 2013 20:18:04 +0000 (16:18 -0400)]
Don't build check_symbols if we are linking sudoers in statically.
Todd C. Miller [Tue, 19 Mar 2013 19:59:23 +0000 (15:59 -0400)]
Use $host_os not $host when we only care about the os name and version.
Todd C. Miller [Tue, 19 Mar 2013 18:10:26 +0000 (14:10 -0400)]
Suppress duplicate -L and -I flags.
Todd C. Miller [Tue, 19 Mar 2013 18:08:11 +0000 (14:08 -0400)]
Fix regress tests on non-OpenBSD platforms.
Todd C. Miller [Tue, 19 Mar 2013 17:04:24 +0000 (13:04 -0400)]
If we find sasl/sasl.h there's no need to check for sasl.h too
Todd C. Miller [Tue, 19 Mar 2013 15:52:54 +0000 (11:52 -0400)]
Add -R flags at the very end after configure link tests are done
since we can only count on libtool to accept -R, the compiler front
end may not.
Also unify the libldap and libibmldap tests using AC_SEARCH_LIBS
and check for -lCsup on HP-UX which is needed by libibmldap (but
is not an explicit dependency).
Todd C. Miller [Mon, 18 Mar 2013 20:34:01 +0000 (16:34 -0400)]
Back out changes that broke detection of skey, opie and ldap
libraries.
Todd C. Miller [Mon, 18 Mar 2013 20:11:24 +0000 (16:11 -0400)]
Add explicit "exit 0" to prevent the check target from ending
prematurely.
Todd C. Miller [Mon, 18 Mar 2013 20:10:08 +0000 (16:10 -0400)]
Fix exit values in check target so we don't have to ignore errors.
Todd C. Miller [Mon, 18 Mar 2013 19:31:04 +0000 (15:31 -0400)]
Fail a test if there is unexpected stderr output.
Todd C. Miller [Mon, 18 Mar 2013 19:29:40 +0000 (15:29 -0400)]
Fix path to sudo.conf manuals; remove non-existant test2.err.ok
Todd C. Miller [Mon, 18 Mar 2013 19:26:08 +0000 (15:26 -0400)]
Fix compilation in dynamic mode.
Todd C. Miller [Mon, 18 Mar 2013 19:19:12 +0000 (15:19 -0400)]
On HP-UX, libibmldap has a hidden dependency on libCsup
Todd C. Miller [Mon, 18 Mar 2013 19:15:13 +0000 (15:15 -0400)]
Pass BIND_VERBOSE to shl_load()
Todd C. Miller [Mon, 18 Mar 2013 14:15:48 +0000 (10:15 -0400)]
Only create static helper libs when --disable-shared is specified.
Todd C. Miller [Mon, 18 Mar 2013 13:55:01 +0000 (09:55 -0400)]
Ubreak static build.
Todd C. Miller [Mon, 18 Mar 2013 13:27:07 +0000 (09:27 -0400)]
Replace --with-rpath and --with-blibpath with --disable-rpath.
Now that we use libtool for linking we can just use the -R
flag and have libtool translate it to the proper linker flag.
Todd C. Miller [Fri, 15 Mar 2013 15:31:58 +0000 (11:31 -0400)]
Bump I/O buffer size 32K
Todd C. Miller [Fri, 15 Mar 2013 00:13:54 +0000 (20:13 -0400)]
Document sesh Path setting.
Todd C. Miller [Thu, 14 Mar 2013 23:59:07 +0000 (19:59 -0400)]
Move exec_cmnd to exec.c to fix a compilation issue with sesh.c
Todd C. Miller [Thu, 14 Mar 2013 20:49:42 +0000 (16:49 -0400)]
Make sesh path configurable in sudo.conf
Todd C. Miller [Thu, 14 Mar 2013 20:06:13 +0000 (16:06 -0400)]
Use -fno-pie and -nopie if supported when --disable-pie is specified.
Todd C. Miller [Wed, 13 Mar 2013 15:32:31 +0000 (11:32 -0400)]
Document direct execution of the command if the policy plugin has
no close function.
Todd C. Miller [Thu, 7 Mar 2013 21:17:44 +0000 (16:17 -0500)]
Only delete creds if we actually established them.
Print an error if pam_setcred() fails and we actually authenticated.
Todd C. Miller [Thu, 7 Mar 2013 20:46:11 +0000 (15:46 -0500)]
regen
Todd C. Miller [Thu, 7 Mar 2013 20:41:34 +0000 (15:41 -0500)]
Convert efree() to a macro that just casts to void * and does free().
If the system free() can't handle free(NULL) this may crash but C89
was a long time ago.
Todd C. Miller [Thu, 7 Mar 2013 16:54:17 +0000 (11:54 -0500)]
Define _REENTRANT for HP-UX when we add -lpthread to SUDO_LIBS.
Fixes a problem with errno sometimes not being set on error on HP-UX.
Todd C. Miller [Thu, 7 Mar 2013 15:06:01 +0000 (10:06 -0500)]
Fix debug logging from the plugin when there is no error number.
This was broken in the big debugging reorg for 1.8.7.
Todd C. Miller [Wed, 6 Mar 2013 22:08:10 +0000 (17:08 -0500)]
Always install plugins with a .so extension regardless of what
extension the system uses for shared libraries. That way the
group_plugin sudoers setting can be shared between heterogenous
systems.