]>
granicus.if.org Git - sudo/log
Todd C. Miller [Fri, 12 Mar 2010 10:26:01 +0000 (05:26 -0500)]
Change the sys_siglist check to use AC_CHECK_DECLS and also check
for _sys_siglist and__sys_siglist
Todd C. Miller [Thu, 11 Mar 2010 22:21:34 +0000 (17:21 -0500)]
Change SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS.
We now use SUDO_OBJS for the main driver as part of OBJS.
Todd C. Miller [Thu, 11 Mar 2010 22:02:23 +0000 (17:02 -0500)]
Mention in the conversation function section that a newline is
not implicit.
Todd C. Miller [Thu, 11 Mar 2010 21:57:20 +0000 (16:57 -0500)]
Add definition of WCOREDUMP for systems without it. This is known
to work on AIX and SunOS 4, but may be incorrect on other systems
that lack WCOREDUMP.
Todd C. Miller [Wed, 10 Mar 2010 00:20:01 +0000 (19:20 -0500)]
conversation function no longer puts a newline at the end of info
or error messages.
Todd C. Miller [Sun, 7 Mar 2010 12:45:17 +0000 (07:45 -0500)]
Use parent process group id instead of parent process id when checking
foreground status and suspending parent. Fixes an issue when running
commands under /usr/bin/time and others.
Todd C. Miller [Sat, 6 Mar 2010 21:31:10 +0000 (16:31 -0500)]
transcript option is now --with not --enable
Todd C. Miller [Sat, 6 Mar 2010 21:29:59 +0000 (16:29 -0500)]
Add support to -u and -g flags
Check fmt_string retval
Add timeout for debugging purposes
Todd C. Miller [Sat, 6 Mar 2010 19:34:23 +0000 (14:34 -0500)]
Wire up SIGALRM handler
Set close on exec flag for child side of the socketpair
Fix signal handling when not doing I/O logging
Todd C. Miller [Sat, 6 Mar 2010 19:29:32 +0000 (14:29 -0500)]
g/c unused SIGCHLD handler
Todd C. Miller [Sat, 6 Mar 2010 19:29:04 +0000 (14:29 -0500)]
Don't use emalloc() in fmt_string(); we want to be able to use it from
a plugin.
Todd C. Miller [Sat, 6 Mar 2010 19:28:26 +0000 (14:28 -0500)]
tq_remove not list_remove
Todd C. Miller [Sat, 6 Mar 2010 12:36:02 +0000 (07:36 -0500)]
AUTH_OBJS should contain .lo files not .o files.
Todd C. Miller [Fri, 5 Mar 2010 22:14:19 +0000 (17:14 -0500)]
Simplify conversion of command line args to name=value pairs.
Todd C. Miller [Fri, 5 Mar 2010 22:13:42 +0000 (17:13 -0500)]
Handle NULL reply from conversation function
Todd C. Miller [Fri, 5 Mar 2010 21:52:04 +0000 (16:52 -0500)]
Don't depend on emalloc/erealloc
Todd C. Miller [Fri, 5 Mar 2010 19:44:04 +0000 (14:44 -0500)]
Use $(OBJS) instead of sample_plugin.lo
Todd C. Miller [Fri, 5 Mar 2010 19:39:13 +0000 (14:39 -0500)]
runas_user is in settings not user_info
Todd C. Miller [Fri, 5 Mar 2010 19:38:42 +0000 (14:38 -0500)]
Fix a mismatch between sudo_settings and settings_pairs that causes
some settings to get the wrong values.
Todd C. Miller [Fri, 5 Mar 2010 01:18:22 +0000 (20:18 -0500)]
Convert to ANSI C
Todd C. Miller [Thu, 4 Mar 2010 17:06:42 +0000 (12:06 -0500)]
Fix strlcpy() return value check.
Todd C. Miller [Thu, 4 Mar 2010 13:12:36 +0000 (08:12 -0500)]
No longer need to substitute in script.o and pty.o; I/O logging support
is always built.
Todd C. Miller [Sun, 28 Feb 2010 20:10:18 +0000 (15:10 -0500)]
Add fallback to /bin/sh when execve() fails with ENOEXEC.
Todd C. Miller [Sun, 28 Feb 2010 20:09:50 +0000 (15:09 -0500)]
Add estrndup()
Todd C. Miller [Sat, 27 Feb 2010 21:53:56 +0000 (16:53 -0500)]
Refactor script_execve() a bit so that it can be used in non-script
mode. Needs more cleanup.
Todd C. Miller [Sat, 27 Feb 2010 18:36:30 +0000 (13:36 -0500)]
Ignore empty entries in command_info list
Todd C. Miller [Sat, 27 Feb 2010 18:17:58 +0000 (13:17 -0500)]
Add tq_remove
Todd C. Miller [Sat, 27 Feb 2010 17:39:18 +0000 (12:39 -0500)]
Pass timeout to tgetpass()
Todd C. Miller [Sat, 27 Feb 2010 17:37:49 +0000 (12:37 -0500)]
Add ChangeLog target
Todd C. Miller [Sat, 27 Feb 2010 15:05:04 +0000 (10:05 -0500)]
Bump version and update things slightly for sudo 1.8.0
Todd C. Miller [Sat, 27 Feb 2010 15:04:39 +0000 (10:04 -0500)]
Sudo now requires an ANSI/ISO C compiler
Todd C. Miller [Sat, 27 Feb 2010 14:29:59 +0000 (09:29 -0500)]
Convert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:26:43 +0000 (09:26 -0500)]
Convert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:23:25 +0000 (09:23 -0500)]
Convert to ANSI C
Todd C. Miller [Thu, 25 Feb 2010 00:53:45 +0000 (19:53 -0500)]
Make user_details extern so tgetpass can get at the uid and gid.
Set uid/gid to user before executing askpass program.
Check environment for SUDO_ASKPASS and use that if set.
TODO: a way for the policy to set the askpass program itself
Todd C. Miller [Wed, 24 Feb 2010 12:49:16 +0000 (07:49 -0500)]
No longer need sudo_usage.h in sudo.c
Todd C. Miller [Wed, 24 Feb 2010 12:48:53 +0000 (07:48 -0500)]
Document -D level command line flag which maps to the debug_level setting.
Todd C. Miller [Wed, 24 Feb 2010 11:35:45 +0000 (06:35 -0500)]
Document debug_level in plugin doc. Still need to document the -D
flag in sudo itself.
Todd C. Miller [Mon, 22 Feb 2010 02:27:57 +0000 (21:27 -0500)]
include missing,h for vasprintf
Todd C. Miller [Mon, 22 Feb 2010 02:24:20 +0000 (21:24 -0500)]
Rename plugin.pod -> sudo_plugin.pod and wire into Makefile
Todd C. Miller [Mon, 22 Feb 2010 02:19:07 +0000 (21:19 -0500)]
Need to include limits.h
Todd C. Miller [Mon, 22 Feb 2010 02:18:52 +0000 (21:18 -0500)]
No more sudo_getpw*
Todd C. Miller [Mon, 22 Feb 2010 02:15:38 +0000 (21:15 -0500)]
Add missing compat bits
Todd C. Miller [Sun, 21 Feb 2010 21:41:19 +0000 (16:41 -0500)]
compat files should not include sudo.h
wire up compat in sample plugin
Todd C. Miller [Sun, 21 Feb 2010 21:12:01 +0000 (16:12 -0500)]
Fix up compat dependencies.
Fix distclean target in doc/Makefile.in
Todd C. Miller [Sun, 21 Feb 2010 20:32:59 +0000 (15:32 -0500)]
Fix typo
Todd C. Miller [Sun, 21 Feb 2010 19:19:22 +0000 (14:19 -0500)]
Log input and output to temp files for proof of concept.
Todd C. Miller [Sun, 21 Feb 2010 18:37:52 +0000 (13:37 -0500)]
Add doc Makefile.in and wire it up
Todd C. Miller [Sun, 21 Feb 2010 15:36:50 +0000 (10:36 -0500)]
Handle SIGSTOP in addition to SIGTSTP. Fixes a problem with suspending
a shell with the "suspend" builtint.
Todd C. Miller [Sun, 21 Feb 2010 15:30:43 +0000 (10:30 -0500)]
In child, handle parent side of the pipe going away.
Todd C. Miller [Sun, 21 Feb 2010 15:26:30 +0000 (10:26 -0500)]
No longer need to check for explicit death of the child (process #2)
since if it dies we will get EPIPE from the socketpair.
Fix a sizeof() that was causing a spurious error.
Convert SCRIPT_DEBUG to sudo_debug.
Todd C. Miller [Sun, 21 Feb 2010 15:24:27 +0000 (10:24 -0500)]
Make sudo_debug do a single vfprintf() which will result in a single
write call on most systems. Avoids problems with interleaved debug
printf from different processes. Also remove an extraneous error case
since recv() can't return a short read and add some more XXX.
Todd C. Miller [Sat, 20 Feb 2010 20:13:11 +0000 (15:13 -0500)]
Fix uninitialized variable.
Todd C. Miller [Sat, 20 Feb 2010 19:47:43 +0000 (14:47 -0500)]
Fix sudo install target
Todd C. Miller [Sat, 20 Feb 2010 18:25:10 +0000 (13:25 -0500)]
Wire up debug_level
Todd C. Miller [Sat, 20 Feb 2010 18:24:50 +0000 (13:24 -0500)]
Fix dependencies
Todd C. Miller [Sat, 20 Feb 2010 18:20:57 +0000 (13:20 -0500)]
Fix setting of plugin dir
Todd C. Miller [Sat, 20 Feb 2010 14:53:05 +0000 (09:53 -0500)]
add clean targets
Todd C. Miller [Sat, 20 Feb 2010 14:47:46 +0000 (09:47 -0500)]
Add missing source for sudo front end
Todd C. Miller [Sat, 20 Feb 2010 14:42:16 +0000 (09:42 -0500)]
Sample plugin demonstrating the sudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:41:49 +0000 (09:41 -0500)]
Modular sudo front-end which loads policy and I/O plugins that do
most the actual work. Currently relies on dynamic loading using
dlopen(). See doc/plugin.pod for the plugin API.
Todd C. Miller [Sat, 20 Feb 2010 14:30:27 +0000 (09:30 -0500)]
Sudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:22:30 +0000 (09:22 -0500)]
Replace emul/include.h with compat/include.h to match new source
tree layout.
Todd C. Miller [Sat, 20 Feb 2010 14:17:54 +0000 (09:17 -0500)]
Include missing.h for memrchr() proto
Todd C. Miller [Sat, 20 Feb 2010 14:14:01 +0000 (09:14 -0500)]
Rework source layout in preparation for modular sudo.
Todd C. Miller [Sat, 13 Feb 2010 12:32:05 +0000 (07:32 -0500)]
Avoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Sat, 13 Feb 2010 12:31:38 +0000 (07:31 -0500)]
Fix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Sat, 13 Feb 2010 12:30:56 +0000 (07:30 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.
Todd C. Miller [Sat, 13 Feb 2010 12:30:31 +0000 (07:30 -0500)]
Fix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 13 Feb 2010 12:29:36 +0000 (07:29 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.
Todd C. Miller [Tue, 9 Feb 2010 15:43:20 +0000 (10:43 -0500)]
Avoid a duplicate fclose() of the sudoers file.
--HG--
branch : 1.7
Todd C. Miller [Tue, 9 Feb 2010 13:28:03 +0000 (08:28 -0500)]
Fix size arg when realloc()ing include stack. From Daniel Kopecek
--HG--
branch : 1.7
Todd C. Miller [Sat, 6 Feb 2010 20:16:04 +0000 (15:16 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.
--HG--
branch : 1.7
Todd C. Miller [Sat, 6 Feb 2010 17:43:26 +0000 (12:43 -0500)]
Fix use after free when sending error messages. From Timo Juhani Lindfors
--HG--
branch : 1.7
Todd C. Miller [Mon, 18 Jan 2010 12:12:06 +0000 (07:12 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.
--HG--
branch : 1.7
Todd C. Miller [Mon, 18 Jan 2010 00:55:11 +0000 (19:55 -0500)]
Generate correct ChangeLog for 1.7 branch.
--HG--
branch : 1.7
Todd C. Miller [Mon, 18 Jan 2010 00:51:28 +0000 (19:51 -0500)]
Remove CVS $Sudo$ tags.
convert-repo [Mon, 18 Jan 2010 05:45:25 +0000 (05:45 +0000)]
update tags
Todd C. Miller [Sat, 26 Dec 2009 23:48:09 +0000 (23:48 +0000)]
make this match sudoers SYNOPSIS
Todd C. Miller [Sat, 26 Dec 2009 17:25:49 +0000 (17:25 +0000)]
Print a newline between Runas and Command-specific defaults in
sudo -l.
Todd C. Miller [Sat, 26 Dec 2009 01:50:25 +0000 (01:50 +0000)]
Use SET and CLR macros in term_raw
Todd C. Miller [Sat, 26 Dec 2009 01:49:25 +0000 (01:49 +0000)]
Set stdin to non-blocking mode early instead of in check_input.
Use term_raw instead of term_cbreak since the data we get has
already been expanded via OPOST.
Todd C. Miller [Wed, 23 Dec 2009 23:53:04 +0000 (23:53 +0000)]
Enable/disable all postprocessing instead of just nl->crnl processing
since things like tab expansion matter too. However, if stdout is
a tty leave postprocessing on in the pty since we run into problems
doing it only on the real stdout with .e.g nvi.
Todd C. Miller [Sat, 19 Dec 2009 23:04:58 +0000 (23:04 +0000)]
If tty_tickets is enabled and there is no tty, prompt for a password.
Do not lecture user for "sudo -k command" if user has a timestamp.
Todd C. Miller [Sat, 19 Dec 2009 21:57:33 +0000 (21:57 +0000)]
Document missing options: --with-efence and --with-bsm-audit
Todd C. Miller [Sat, 19 Dec 2009 21:44:06 +0000 (21:44 +0000)]
username -> user name
groupname -> group name
hostname -> host name
Todd C. Miller [Sat, 19 Dec 2009 21:33:25 +0000 (21:33 +0000)]
filename -> file name like the rest of the docs
Todd C. Miller [Thu, 17 Dec 2009 15:02:06 +0000 (15:02 +0000)]
Fix printing of entries with multiple host entries on a single line.
Todd C. Miller [Mon, 14 Dec 2009 23:53:05 +0000 (23:53 +0000)]
Mention that targetpw affects the timestamp file name.
Todd C. Miller [Mon, 14 Dec 2009 01:49:50 +0000 (01:49 +0000)]
Add compress_transcript option.
Todd C. Miller [Sun, 13 Dec 2009 22:26:32 +0000 (22:26 +0000)]
bump to 1.7.3b2
Todd C. Miller [Sun, 13 Dec 2009 22:24:34 +0000 (22:24 +0000)]
Better split of membership vs. traditional group check in user_in_group().
Allow user_ngroups to be < 0 if getgroups() fails.
Todd C. Miller [Sat, 12 Dec 2009 16:27:02 +0000 (16:27 +0000)]
Fix pasto and add default return value.
Todd C. Miller [Sat, 12 Dec 2009 16:12:26 +0000 (16:12 +0000)]
refactor group member checking into user_in_group()
Todd C. Miller [Sat, 12 Dec 2009 15:37:52 +0000 (15:37 +0000)]
Add support for mbr_check_membership() as present in darwin.
Todd C. Miller [Thu, 10 Dec 2009 19:37:56 +0000 (19:37 +0000)]
Rename label to be accurate
Todd C. Miller [Thu, 10 Dec 2009 16:59:27 +0000 (16:59 +0000)]
Treat timestamp files from before we booted as old. Idea from and
Apple patch.
Todd C. Miller [Wed, 9 Dec 2009 16:19:30 +0000 (16:19 +0000)]
Allow the -u flag to be used in conjunction with the -v flag as per
older versions of sudo.
Todd C. Miller [Wed, 9 Dec 2009 16:05:02 +0000 (16:05 +0000)]
fix typo in last commit
Todd C. Miller [Tue, 8 Dec 2009 22:19:49 +0000 (22:19 +0000)]
Convert fmt_first and fmt_confd into macros.