]>
granicus.if.org Git - sudo/log
Todd C. Miller [Tue, 14 Sep 2010 15:28:41 +0000 (11:28 -0400)]
Reset HOME for "sudo -i" even if HOME was listed in env_keep.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 13:25:58 +0000 (09:25 -0400)]
Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 13:23:28 +0000 (09:23 -0400)]
Reset signal mask at sudo startup time; we need to be able to rely on
normal signal delivery to control the child process.
--HG--
branch : 1.7
Todd C. Miller [Tue, 14 Sep 2010 13:21:59 +0000 (09:21 -0400)]
Fix SIG_UNBLOCK emulation
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 20:34:16 +0000 (16:34 -0400)]
Use sed instead of expr to split a flag from its argument.
Fixes a problem with expr interpreting its arguments as a flag
when they start with a dash.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 17:20:20 +0000 (13:20 -0400)]
Back out rev
e165f67d3127
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 17:16:59 +0000 (13:16 -0400)]
Include sys/time.h for utimes() and struct timeval.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 16:19:03 +0000 (12:19 -0400)]
Quiet bogus compiler warnings.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 15:53:01 +0000 (11:53 -0400)]
Declare innetgr() for HP-UX which is missing a declaration.
Declare domainname() for HP-UX and Solaris which are missing a declaration.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 15:48:51 +0000 (11:48 -0400)]
Use __sun for consistency with the rest of the sources.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 15:08:27 +0000 (11:08 -0400)]
Don't try to delref a NULL group.
--HG--
branch : 1.7
Todd C. Miller [Mon, 13 Sep 2010 14:40:37 +0000 (10:40 -0400)]
Include memory.h on systems that need it.
--HG--
branch : 1.7
Todd C. Miller [Sat, 11 Sep 2010 13:26:20 +0000 (09:26 -0400)]
Quiet gcc warnings on glibc systems that use warn_unused_result for
write(2).
--HG--
branch : 1.7
Todd C. Miller [Fri, 10 Sep 2010 17:56:20 +0000 (13:56 -0400)]
Update for sudo 1.7.5
--HG--
branch : 1.7
Todd C. Miller [Fri, 10 Sep 2010 17:19:26 +0000 (13:19 -0400)]
Instead of using a array to store received signals, open a pipe and
have the signal handler write the signal number to one end and
select() on the other end. This makes it possible to handle signals
similar to I/O without race conditions.
--HG--
branch : 1.7
Todd C. Miller [Fri, 10 Sep 2010 17:16:52 +0000 (13:16 -0400)]
--with-iologdir not --enable-iologdir
--HG--
branch : 1.7
Todd C. Miller [Thu, 9 Sep 2010 21:09:54 +0000 (17:09 -0400)]
Make "visudo -c -f -" check the standard input.
--HG--
branch : 1.7
Todd C. Miller [Thu, 9 Sep 2010 20:22:08 +0000 (16:22 -0400)]
set_home and always_set_home have an effect if HOME is present in
the env_keep list.
--HG--
branch : 1.7
Todd C. Miller [Thu, 9 Sep 2010 20:16:19 +0000 (16:16 -0400)]
Make -H flag work when HOME is listed in env_keep. Also makes
"set_home" and "always_set_home" override override HOME in env_keep.
--HG--
branch : 1.7
Todd C. Miller [Wed, 8 Sep 2010 13:46:49 +0000 (09:46 -0400)]
Solaris BSM audit return EINVAL when auditing is not enabled, whereas
OpenBSM returns ENOSYS.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 21:15:43 +0000 (17:15 -0400)]
Add missing LOG_INPUT/LOG_OUTPUT support in the lexer.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 21:00:32 +0000 (17:00 -0400)]
Set NewArgv[0] to the name of the pseudo-command we are running.
Fixes a problem with "sudo -l" when auditing is enabled and the
user is not allowed to run any commands on the host.
Adapted from a patch from Daniel Kopecek.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 14:27:45 +0000 (10:27 -0400)]
Update comment to reality.
--HG--
branch : 1.7
Todd C. Miller [Tue, 7 Sep 2010 14:24:51 +0000 (10:24 -0400)]
Need stdio.h for FILE *, not just NULL.
--HG--
branch : 1.7
Todd C. Miller [Mon, 6 Sep 2010 11:56:25 +0000 (07:56 -0400)]
When matching the runas user and runas group (-u and -g command
line options), keep track of runas group and runas user matches
separately. Only return a positive match if we have a match for
both runas user and runas group (if specified).
--HG--
branch : 1.7
Todd C. Miller [Sat, 4 Sep 2010 12:33:45 +0000 (08:33 -0400)]
Do not return -1 on error from the display functions; the call expects
a return value >= 0.
--HG--
branch : 1.7
Todd C. Miller [Sat, 4 Sep 2010 11:47:27 +0000 (07:47 -0400)]
display_bound_defaults now returns a count so make the stub
return 0, not 1.
--HG--
branch : 1.7
Todd C. Miller [Sat, 4 Sep 2010 11:22:31 +0000 (07:22 -0400)]
Add #include of sys/types.h for .c files that include missing.h to
be sure that size_t and ssize_t are defined.
--HG--
branch : 1.7
Todd C. Miller [Fri, 3 Sep 2010 21:30:28 +0000 (17:30 -0400)]
It looks like AIX doesn't need to push STREAMS modules for ptys.
--HG--
branch : 1.7
Todd C. Miller [Mon, 30 Aug 2010 13:08:16 +0000 (09:08 -0400)]
Add #include of sys/types.h for .c files that include missing.h to
be sure that size_t and ssize_t are defined.
--HG--
branch : 1.7
Todd C. Miller [Mon, 30 Aug 2010 13:06:04 +0000 (09:06 -0400)]
Install sudoers file from the build dir not hte src dir.
--HG--
branch : 1.7
Todd C. Miller [Thu, 26 Aug 2010 15:36:47 +0000 (11:36 -0400)]
If runas_pw changes, reset the stashed runas aux group vector.
Otherwise, if runas_default is set in a per-command Defaults statement,
the command runs with root's aux group vector (i.e. the one that
was used when locating the command).
--HG--
branch : 1.7
Todd C. Miller [Thu, 26 Aug 2010 15:10:00 +0000 (11:10 -0400)]
Add target to generate sudoers file
Remove generated sudoers file as part of distclean
--HG--
branch : 1.7
millert@rh4-x86.home.courtesan.com [Tue, 24 Aug 2010 01:01:00 +0000 (21:01 -0400)]
When not logging I/O install a handler for SIGCONT and deliver it
to the command upon resume. Fixes bugzilla #431
--HG--
branch : 1.7
Todd C. Miller [Sat, 21 Aug 2010 14:02:29 +0000 (10:02 -0400)]
g/c unused auth_pw global
--HG--
branch : 1.7
Todd C. Miller [Sat, 21 Aug 2010 12:48:13 +0000 (08:48 -0400)]
Move get_auth() into check.c where it is actually used.
--HG--
branch : 1.7
Todd C. Miller [Sat, 21 Aug 2010 12:31:21 +0000 (08:31 -0400)]
Don't need to fork and wait when compiled with --disable-pam-session
--HG--
branch : 1.7
Todd C. Miller [Fri, 20 Aug 2010 20:54:57 +0000 (16:54 -0400)]
Convert a remaining puts() and putchar() to use the output function.
--HG--
branch : 1.7
Todd C. Miller [Wed, 18 Aug 2010 19:32:30 +0000 (15:32 -0400)]
Replace sudoers with sudoers.in in DISTFILES
--HG--
branch : 1.7
Todd C. Miller [Wed, 18 Aug 2010 19:25:19 +0000 (15:25 -0400)]
Set dupcheck to TRUE when setting new HOME value if !env_reset but
always_set_home is true. Prevents a duplicate HOME in the environment
(old value plus the new one) introduced in
9f97e4b43a4b .
--HG--
branch : 1.7
Todd C. Miller [Wed, 18 Aug 2010 11:42:47 +0000 (07:42 -0400)]
Substitute sysconfdir in the installed sudoers file to get the
correct path for sudoers.d.
--HG--
branch : 1.7
Todd C. Miller [Tue, 17 Aug 2010 13:49:59 +0000 (09:49 -0400)]
Fix typos that prevented compilation on Irix; Friedrich Haubensak
--HG--
branch : 1.7
Todd C. Miller [Mon, 16 Aug 2010 18:22:14 +0000 (14:22 -0400)]
Merge compat.h and missing.h into missing.h
--HG--
branch : 1.7
Todd C. Miller [Sat, 14 Aug 2010 14:18:27 +0000 (10:18 -0400)]
If the user hits ^C while a password is being read, error out before
reading any further passwords in the pam conversation function.
Otherwise, if multiple PAM auth methods are required, the user will
have to hit ^C for each one.
--HG--
branch : 1.7
Todd C. Miller [Mon, 9 Aug 2010 10:34:55 +0000 (06:34 -0400)]
Fix waitpid() loop termination condition.
--HG--
branch : 1.7
Todd C. Miller [Mon, 9 Aug 2010 10:31:14 +0000 (06:31 -0400)]
Use sudo_waitpid() instead of bare waitpid()
--HG--
branch : 1.7
Todd C. Miller [Sat, 7 Aug 2010 18:28:46 +0000 (14:28 -0400)]
Set pp_kit_version and strip off patchlevel
--HG--
branch : 1.7
Todd C. Miller [Sat, 7 Aug 2010 15:08:16 +0000 (11:08 -0400)]
Better handling of versions with a patchlevel. For rpm and deb, use
the patchlevel+1 as the release. For AIX, use the patchlevel as the
4th version number. For the rest, just leave the patchlevel in the
version string.
--HG--
branch : 1.7
Todd C. Miller [Fri, 6 Aug 2010 21:09:03 +0000 (17:09 -0400)]
For non-standalone auth methods, stop reading the password if the
user enters ^C at the prompt.
--HG--
branch : 1.7
Todd C. Miller [Fri, 6 Aug 2010 16:19:54 +0000 (12:19 -0400)]
Don't print getspwuid as an auth method.
--HG--
branch : 1.7
Todd C. Miller [Fri, 6 Aug 2010 14:02:02 +0000 (10:02 -0400)]
No need to look up shadow password unless we are doing password-style
authentication. This moves the shadow password lookup to the auth
functions that need it.
--HG--
branch : 1.7
Todd C. Miller [Fri, 6 Aug 2010 13:39:01 +0000 (09:39 -0400)]
When removing/resetting the timestamp file ignore the tty ticket contents.
--HG--
branch : 1.7
Todd C. Miller [Thu, 5 Aug 2010 14:17:21 +0000 (10:17 -0400)]
delref sudo_user.pw, runas_pw and runas_gr immediately before we exec.
--HG--
branch : 1.7
Todd C. Miller [Thu, 5 Aug 2010 13:45:21 +0000 (09:45 -0400)]
Move calls to sudo_endgrent() and sudo_endpwent() to be after
set_perms(), which may do passwd or group lookups.
--HG--
branch : 1.7
Todd C. Miller [Wed, 4 Aug 2010 13:58:34 +0000 (09:58 -0400)]
Make sure we don't try to delref NULL.
--HG--
branch : 1.7
Todd C. Miller [Wed, 4 Aug 2010 13:48:51 +0000 (09:48 -0400)]
Add missing delref in user_in_group()
--HG--
branch : 1.7
Todd C. Miller [Wed, 4 Aug 2010 13:43:29 +0000 (09:43 -0400)]
delref the old runas group in set_runasgr()
--HG--
branch : 1.7
Todd C. Miller [Wed, 4 Aug 2010 13:32:52 +0000 (09:32 -0400)]
Repair usergr_matches() return value broken in last checkin.
--HG--
branch : 1.7
Todd C. Miller [Wed, 4 Aug 2010 13:13:17 +0000 (09:13 -0400)]
Reference count cached passwd and group structs. The cache holds
one reference itself and another is added by sudo_getgr{gid,nam}
and sudo_getpw{uid,nam}. The final ref on the runas and user passwd
and group structs are persistent for now.
--HG--
branch : 1.7
Todd C. Miller [Wed, 4 Aug 2010 12:41:49 +0000 (08:41 -0400)]
Fix typo
--HG--
branch : 1.7
Todd C. Miller [Tue, 3 Aug 2010 19:14:55 +0000 (15:14 -0400)]
Do not produce a warning for "sudo -k" if the ticket file does not
exist.
--HG--
branch : 1.7
Todd C. Miller [Tue, 3 Aug 2010 18:59:17 +0000 (14:59 -0400)]
Instead of caching struct passwd and struct group in the red-black
tree, store a struct cache_item which includes both the key and
datum. This allows us to user the actual name that was looked up
as the key instead of the contents of struct passwd or struct group.
This matters because the name in the database may not match what
we looked up, due either to case folding or truncation (historically
at 8 characters). Also mark the disabled calls to sudo_freepwcache()
and sudo_freegrcache() as broken since we use cached data for things
like set_perms() and the logging functions. Fixing this would
require making a copy of the structs for user and runas or adding
a reference count (better).
--HG--
branch : 1.7
Todd C. Miller [Tue, 3 Aug 2010 15:18:07 +0000 (11:18 -0400)]
Quiet gcc warnings on glibc systems that use warn_unused_result for
write(2) and others.
--HG--
branch : 1.7
Todd C. Miller [Mon, 2 Aug 2010 22:16:47 +0000 (18:16 -0400)]
Add %option noinput
--HG--
branch : 1.7
Todd C. Miller [Mon, 2 Aug 2010 19:31:11 +0000 (15:31 -0400)]
Add cross-compile defaults for remaining AC_TRY_RUN usage.
--HG--
branch : 1.7
Todd C. Miller [Sun, 1 Aug 2010 00:18:48 +0000 (20:18 -0400)]
Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN
Use AC_TYPE_LONG_LONG_INT and AC_CHECK_SIZEOF([long int]) instead
of rolling our own.
--HG--
branch : 1.7
Todd C. Miller [Fri, 30 Jul 2010 15:51:00 +0000 (11:51 -0400)]
Added tag SUDO_1_7_4 for changeset
2920a3b9d568
--HG--
branch : 1.7
Todd C. Miller [Fri, 30 Jul 2010 15:50:28 +0000 (11:50 -0400)]
Debian: Remove dots from decoded release number
AIX: looser matching of file command output for AIX 5.1
--HG--
branch : 1.7
Todd C. Miller [Fri, 30 Jul 2010 13:07:33 +0000 (09:07 -0400)]
Added tag SUDO_1_7_4 for changeset
0d844aa34c1d
--HG--
branch : 1.7
Todd C. Miller [Thu, 29 Jul 2010 18:21:03 +0000 (14:21 -0400)]
exec_monitor is static
--HG--
branch : 1.7
Todd C. Miller [Thu, 29 Jul 2010 13:43:28 +0000 (09:43 -0400)]
Update to latest version
--HG--
branch : 1.7
Todd C. Miller [Wed, 28 Jul 2010 21:52:29 +0000 (17:52 -0400)]
Let pp determine pp_aix_version itself.
--HG--
branch : 1.7
Todd C. Miller [Wed, 28 Jul 2010 19:24:05 +0000 (15:24 -0400)]
Add support for Ubuntu admin flag file and enable it when building
Ubuntu packages.
--HG--
branch : 1.7
Todd C. Miller [Wed, 28 Jul 2010 18:28:46 +0000 (14:28 -0400)]
Add commented out SuSE-like targetpw settings
--HG--
branch : 1.7
Todd C. Miller [Wed, 28 Jul 2010 17:54:15 +0000 (13:54 -0400)]
Only try to use +DAportable for non-GCC on hppa
Check the value of $pic_flag insteaf of whether the compiler is ANSI C
when detecting the HP-UX bundled C compiler.
--HG--
branch : 1.7
Todd C. Miller [Wed, 28 Jul 2010 13:23:28 +0000 (09:23 -0400)]
Prevent configure from adding the -g flag unless in devel mode
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 22:22:24 +0000 (18:22 -0400)]
Go back to sudo-flavor to match existing packages and only use an
underscore for those that need it.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 22:17:23 +0000 (18:17 -0400)]
Use sudo_$flavor instead of sudo-$flavor since that causes the
least amount of trouble for the various package managers.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 22:09:59 +0000 (18:09 -0400)]
Fix handling of the ldap flavor
Remove destdir unless --debug was specified
Make distclean before running configure if there is a Makefile present
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 20:57:06 +0000 (16:57 -0400)]
Back out version change in
5baf2187a138
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 18:49:02 +0000 (14:49 -0400)]
Pass extra args on to configure
on HP-UX, if we don't have the HP C compiler, disable zlib to
prevent gcc from finding it in /usr/local/lib.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 18:26:43 +0000 (14:26 -0400)]
Use the HP ANSI C compiler on HP-UX if possible
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 14:47:55 +0000 (10:47 -0400)]
Some getline() implementations (FreeBSD 8.0) do not ignore the
length pointer when the line pointer is NULL as they should.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 14:12:12 +0000 (10:12 -0400)]
Don't need to check for *cp being non-zero, isdigit() will do that.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 13:43:23 +0000 (09:43 -0400)]
Add setlocale() so the command line arguments that use floating
point work in different locales. Since sudo now logs the timing
data in the C locale we must Parse the seconds in the timing file
manually instead of using strtod(). Furthermore, sudo 1.7.3 logged
the number of seconds with the user's locale so if the decimal point
is not '.' try using the locale-specific version.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 13:41:13 +0000 (09:41 -0400)]
Do I/O logging in the C locale so the floating point numbers in the
timing file are not locale-dependent.
--HG--
branch : 1.7
Todd C. Miller [Tue, 27 Jul 2010 11:50:32 +0000 (07:50 -0400)]
Use errorx() not error() for thingsthat don't set errno.
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 19:29:46 +0000 (15:29 -0400)]
Add Tru64 kit support
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 19:29:29 +0000 (15:29 -0400)]
Better support for 1.2.3 style versions in Tru64 kits
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 19:00:21 +0000 (15:00 -0400)]
Remove apparently unnecessary use of sudo
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 18:25:33 +0000 (14:25 -0400)]
Create timedir as part of install-dirs target.
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 17:03:44 +0000 (13:03 -0400)]
Handle ENXIO from read/write which can occur when reading/writing
a pty that has gone away. Fixes bugzilla 422
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 16:34:27 +0000 (12:34 -0400)]
sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 15:34:41 +0000 (11:34 -0400)]
platform is a pp flag not a variable
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 15:15:19 +0000 (11:15 -0400)]
Add simple arg parsing for mkpkg so we can set debug, flavor or platform.
--HG--
branch : 1.7
Todd C. Miller [Mon, 26 Jul 2010 15:13:54 +0000 (11:13 -0400)]
Make rpm backend work on AIX 5.x
--HG--
branch : 1.7
Todd C. Miller [Sun, 25 Jul 2010 17:12:30 +0000 (13:12 -0400)]
Add commented out Defaults entry for log_output
--HG--
branch : 1.7
Todd C. Miller [Fri, 23 Jul 2010 15:26:00 +0000 (11:26 -0400)]
Install binary files with -b~ to make a backup.
Fixes "text file busy" error on HP-UX during install.
--HG--
branch : 1.7
Todd C. Miller [Fri, 23 Jul 2010 15:23:04 +0000 (11:23 -0400)]
"mv -f" on HP-UX doesn't unlink the destination first so add
an explicit rm before moving the temporary into place.
--HG--
branch : 1.7
Todd C. Miller [Fri, 23 Jul 2010 13:35:52 +0000 (09:35 -0400)]
Some more ${foo} -> $(foo) conversion for consistent Makefiles.
--HG--
branch : 1.7