]> granicus.if.org Git - sudo/log
sudo
14 years agoChange the sys_siglist check to use AC_CHECK_DECLS and also check
Todd C. Miller [Fri, 12 Mar 2010 10:26:01 +0000 (05:26 -0500)]
Change the sys_siglist check to use AC_CHECK_DECLS and also check
for _sys_siglist and__sys_siglist

14 years agoChange SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS.
Todd C. Miller [Thu, 11 Mar 2010 22:21:34 +0000 (17:21 -0500)]
Change SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS.
We now use SUDO_OBJS for the main driver as part of OBJS.

14 years agoMention in the conversation function section that a newline is
Todd C. Miller [Thu, 11 Mar 2010 22:02:23 +0000 (17:02 -0500)]
Mention in the conversation function section that a newline is
not implicit.

14 years agoAdd definition of WCOREDUMP for systems without it. This is known
Todd C. Miller [Thu, 11 Mar 2010 21:57:20 +0000 (16:57 -0500)]
Add definition of WCOREDUMP for systems without it.  This is known
to work on AIX and SunOS 4, but may be incorrect on other systems
that lack WCOREDUMP.

14 years agoconversation function no longer puts a newline at the end of info
Todd C. Miller [Wed, 10 Mar 2010 00:20:01 +0000 (19:20 -0500)]
conversation function no longer puts a newline at the end of info
or error messages.

14 years agoUse parent process group id instead of parent process id when checking
Todd C. Miller [Sun, 7 Mar 2010 12:45:17 +0000 (07:45 -0500)]
Use parent process group id instead of parent process id when checking
foreground status and suspending parent.  Fixes an issue when running
commands under /usr/bin/time and others.

14 years agotranscript option is now --with not --enable
Todd C. Miller [Sat, 6 Mar 2010 21:31:10 +0000 (16:31 -0500)]
transcript option is now --with not --enable

14 years agoAdd support to -u and -g flags
Todd C. Miller [Sat, 6 Mar 2010 21:29:59 +0000 (16:29 -0500)]
Add support to -u and -g flags
Check fmt_string retval
Add timeout for debugging purposes

14 years agoWire up SIGALRM handler
Todd C. Miller [Sat, 6 Mar 2010 19:34:23 +0000 (14:34 -0500)]
Wire up SIGALRM handler
Set close on exec flag for child side of the socketpair
Fix signal handling when not doing I/O logging

14 years agog/c unused SIGCHLD handler
Todd C. Miller [Sat, 6 Mar 2010 19:29:32 +0000 (14:29 -0500)]
g/c unused SIGCHLD handler

14 years agoDon't use emalloc() in fmt_string(); we want to be able to use it from
Todd C. Miller [Sat, 6 Mar 2010 19:29:04 +0000 (14:29 -0500)]
Don't use emalloc() in fmt_string(); we want to be able to use it from
a plugin.

14 years agotq_remove not list_remove
Todd C. Miller [Sat, 6 Mar 2010 19:28:26 +0000 (14:28 -0500)]
tq_remove not list_remove

14 years agoAUTH_OBJS should contain .lo files not .o files.
Todd C. Miller [Sat, 6 Mar 2010 12:36:02 +0000 (07:36 -0500)]
AUTH_OBJS should contain .lo files not .o files.

14 years agoSimplify conversion of command line args to name=value pairs.
Todd C. Miller [Fri, 5 Mar 2010 22:14:19 +0000 (17:14 -0500)]
Simplify conversion of command line args to name=value pairs.

14 years agoHandle NULL reply from conversation function
Todd C. Miller [Fri, 5 Mar 2010 22:13:42 +0000 (17:13 -0500)]
Handle NULL reply from conversation function

14 years agoDon't depend on emalloc/erealloc
Todd C. Miller [Fri, 5 Mar 2010 21:52:04 +0000 (16:52 -0500)]
Don't depend on emalloc/erealloc

14 years agoUse $(OBJS) instead of sample_plugin.lo
Todd C. Miller [Fri, 5 Mar 2010 19:44:04 +0000 (14:44 -0500)]
Use $(OBJS) instead of sample_plugin.lo

14 years agorunas_user is in settings not user_info
Todd C. Miller [Fri, 5 Mar 2010 19:39:13 +0000 (14:39 -0500)]
runas_user is in settings not user_info

14 years agoFix a mismatch between sudo_settings and settings_pairs that causes
Todd C. Miller [Fri, 5 Mar 2010 19:38:42 +0000 (14:38 -0500)]
Fix a mismatch between sudo_settings and settings_pairs that causes
some settings to get the wrong values.

14 years agoConvert to ANSI C
Todd C. Miller [Fri, 5 Mar 2010 01:18:22 +0000 (20:18 -0500)]
Convert to ANSI C

14 years agoFix strlcpy() return value check.
Todd C. Miller [Thu, 4 Mar 2010 17:06:42 +0000 (12:06 -0500)]
Fix strlcpy() return value check.

14 years agoNo longer need to substitute in script.o and pty.o; I/O logging support
Todd C. Miller [Thu, 4 Mar 2010 13:12:36 +0000 (08:12 -0500)]
No longer need to substitute in script.o and pty.o; I/O logging support
is always built.

14 years agoAdd fallback to /bin/sh when execve() fails with ENOEXEC.
Todd C. Miller [Sun, 28 Feb 2010 20:10:18 +0000 (15:10 -0500)]
Add fallback to /bin/sh when execve() fails with ENOEXEC.

14 years agoAdd estrndup()
Todd C. Miller [Sun, 28 Feb 2010 20:09:50 +0000 (15:09 -0500)]
Add estrndup()

14 years agoRefactor script_execve() a bit so that it can be used in non-script
Todd C. Miller [Sat, 27 Feb 2010 21:53:56 +0000 (16:53 -0500)]
Refactor script_execve() a bit so that it can be used in non-script
mode.  Needs more cleanup.

14 years agoIgnore empty entries in command_info list
Todd C. Miller [Sat, 27 Feb 2010 18:36:30 +0000 (13:36 -0500)]
Ignore empty entries in command_info list

14 years agoAdd tq_remove
Todd C. Miller [Sat, 27 Feb 2010 18:17:58 +0000 (13:17 -0500)]
Add tq_remove

14 years agoPass timeout to tgetpass()
Todd C. Miller [Sat, 27 Feb 2010 17:39:18 +0000 (12:39 -0500)]
Pass timeout to tgetpass()

14 years agoAdd ChangeLog target
Todd C. Miller [Sat, 27 Feb 2010 17:37:49 +0000 (12:37 -0500)]
Add ChangeLog target

14 years agoBump version and update things slightly for sudo 1.8.0
Todd C. Miller [Sat, 27 Feb 2010 15:05:04 +0000 (10:05 -0500)]
Bump version and update things slightly for sudo 1.8.0

14 years agoSudo now requires an ANSI/ISO C compiler
Todd C. Miller [Sat, 27 Feb 2010 15:04:39 +0000 (10:04 -0500)]
Sudo now requires an ANSI/ISO C compiler

14 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:29:59 +0000 (09:29 -0500)]
Convert to ANSI C

14 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:26:43 +0000 (09:26 -0500)]
Convert to ANSI C

14 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:23:25 +0000 (09:23 -0500)]
Convert to ANSI C

14 years agoMake user_details extern so tgetpass can get at the uid and gid.
Todd C. Miller [Thu, 25 Feb 2010 00:53:45 +0000 (19:53 -0500)]
Make user_details extern so tgetpass can get at the uid and gid.
Set uid/gid to user before executing askpass program.
Check environment for SUDO_ASKPASS and use that if set.
TODO: a way for the policy to set the askpass program itself

14 years agoNo longer need sudo_usage.h in sudo.c
Todd C. Miller [Wed, 24 Feb 2010 12:49:16 +0000 (07:49 -0500)]
No longer need sudo_usage.h in sudo.c

14 years agoDocument -D level command line flag which maps to the debug_level setting.
Todd C. Miller [Wed, 24 Feb 2010 12:48:53 +0000 (07:48 -0500)]
Document -D level command line flag which maps to the debug_level setting.

14 years agoDocument debug_level in plugin doc. Still need to document the -D
Todd C. Miller [Wed, 24 Feb 2010 11:35:45 +0000 (06:35 -0500)]
Document debug_level in plugin doc.  Still need to document the -D
flag in sudo itself.

14 years agoinclude missing,h for vasprintf
Todd C. Miller [Mon, 22 Feb 2010 02:27:57 +0000 (21:27 -0500)]
include missing,h for vasprintf

14 years agoRename plugin.pod -> sudo_plugin.pod and wire into Makefile
Todd C. Miller [Mon, 22 Feb 2010 02:24:20 +0000 (21:24 -0500)]
Rename plugin.pod -> sudo_plugin.pod and wire into Makefile

14 years agoNeed to include limits.h
Todd C. Miller [Mon, 22 Feb 2010 02:19:07 +0000 (21:19 -0500)]
Need to include limits.h

14 years agoNo more sudo_getpw*
Todd C. Miller [Mon, 22 Feb 2010 02:18:52 +0000 (21:18 -0500)]
No more sudo_getpw*

14 years agoAdd missing compat bits
Todd C. Miller [Mon, 22 Feb 2010 02:15:38 +0000 (21:15 -0500)]
Add missing compat bits

14 years agocompat files should not include sudo.h
Todd C. Miller [Sun, 21 Feb 2010 21:41:19 +0000 (16:41 -0500)]
compat files should not include sudo.h
wire up compat in sample plugin

14 years agoFix up compat dependencies.
Todd C. Miller [Sun, 21 Feb 2010 21:12:01 +0000 (16:12 -0500)]
Fix up compat dependencies.
Fix distclean target in doc/Makefile.in

14 years agoFix typo
Todd C. Miller [Sun, 21 Feb 2010 20:32:59 +0000 (15:32 -0500)]
Fix typo

14 years agoLog input and output to temp files for proof of concept.
Todd C. Miller [Sun, 21 Feb 2010 19:19:22 +0000 (14:19 -0500)]
Log input and output to temp files for proof of concept.

14 years agoAdd doc Makefile.in and wire it up
Todd C. Miller [Sun, 21 Feb 2010 18:37:52 +0000 (13:37 -0500)]
Add doc Makefile.in and wire it up

14 years agoHandle SIGSTOP in addition to SIGTSTP. Fixes a problem with suspending
Todd C. Miller [Sun, 21 Feb 2010 15:36:50 +0000 (10:36 -0500)]
Handle SIGSTOP in addition to SIGTSTP.  Fixes a problem with suspending
a shell with the "suspend" builtint.

14 years agoIn child, handle parent side of the pipe going away.
Todd C. Miller [Sun, 21 Feb 2010 15:30:43 +0000 (10:30 -0500)]
In child, handle parent side of the pipe going away.

14 years agoNo longer need to check for explicit death of the child (process #2)
Todd C. Miller [Sun, 21 Feb 2010 15:26:30 +0000 (10:26 -0500)]
No longer need to check for explicit death of the child (process #2)
since if it dies we will get EPIPE from the socketpair.
Fix a sizeof() that was causing a spurious error.
Convert SCRIPT_DEBUG to sudo_debug.

14 years agoMake sudo_debug do a single vfprintf() which will result in a single
Todd C. Miller [Sun, 21 Feb 2010 15:24:27 +0000 (10:24 -0500)]
Make sudo_debug do a single vfprintf() which will result in a single
write call on most systems.  Avoids problems with interleaved debug
printf from different processes.  Also remove an extraneous error case
since recv() can't return a short read and add some more XXX.

14 years agoFix uninitialized variable.
Todd C. Miller [Sat, 20 Feb 2010 20:13:11 +0000 (15:13 -0500)]
Fix uninitialized variable.

14 years agoFix sudo install target
Todd C. Miller [Sat, 20 Feb 2010 19:47:43 +0000 (14:47 -0500)]
Fix sudo install target

14 years agoWire up debug_level
Todd C. Miller [Sat, 20 Feb 2010 18:25:10 +0000 (13:25 -0500)]
Wire up debug_level

14 years agoFix dependencies
Todd C. Miller [Sat, 20 Feb 2010 18:24:50 +0000 (13:24 -0500)]
Fix dependencies

14 years agoFix setting of plugin dir
Todd C. Miller [Sat, 20 Feb 2010 18:20:57 +0000 (13:20 -0500)]
Fix setting of plugin dir

14 years agoadd clean targets
Todd C. Miller [Sat, 20 Feb 2010 14:53:05 +0000 (09:53 -0500)]
add clean targets

14 years agoAdd missing source for sudo front end
Todd C. Miller [Sat, 20 Feb 2010 14:47:46 +0000 (09:47 -0500)]
Add missing source for sudo front end

14 years agoSample plugin demonstrating the sudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:42:16 +0000 (09:42 -0500)]
Sample plugin demonstrating the sudo plugin API

14 years agoModular sudo front-end which loads policy and I/O plugins that do
Todd C. Miller [Sat, 20 Feb 2010 14:41:49 +0000 (09:41 -0500)]
Modular sudo front-end which loads policy and I/O plugins that do
most the actual work.  Currently relies on dynamic loading using
dlopen().  See doc/plugin.pod for the plugin API.

14 years agoSudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:30:27 +0000 (09:30 -0500)]
Sudo plugin API

14 years agoReplace emul/include.h with compat/include.h to match new source
Todd C. Miller [Sat, 20 Feb 2010 14:22:30 +0000 (09:22 -0500)]
Replace emul/include.h with compat/include.h to match new source
tree layout.

14 years agoInclude missing.h for memrchr() proto
Todd C. Miller [Sat, 20 Feb 2010 14:17:54 +0000 (09:17 -0500)]
Include missing.h for memrchr() proto

14 years agoRework source layout in preparation for modular sudo.
Todd C. Miller [Sat, 20 Feb 2010 14:14:01 +0000 (09:14 -0500)]
Rework source layout in preparation for modular sudo.

14 years agoAvoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Sat, 13 Feb 2010 12:32:05 +0000 (07:32 -0500)]
Avoid a duplicate fclose() of the sudoers file.

14 years agoFix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Sat, 13 Feb 2010 12:31:38 +0000 (07:31 -0500)]
Fix size arg when realloc()ing include stack.  From Daniel Kopecek

14 years agoUse setrlimit64(), if available, instead of setrlimit() when setting
Todd C. Miller [Sat, 13 Feb 2010 12:30:56 +0000 (07:30 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.

14 years agoFix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 13 Feb 2010 12:30:31 +0000 (07:30 -0500)]
Fix use after free when sending error messages.  From Timo Juhani Lindfors

14 years agoGenerate the ChangeLog as part of "make dist" instead of having it
Todd C. Miller [Sat, 13 Feb 2010 12:29:36 +0000 (07:29 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.

14 years agoAvoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Tue, 9 Feb 2010 15:43:20 +0000 (10:43 -0500)]
Avoid a duplicate fclose() of the sudoers file.

--HG--
branch : 1.7

14 years agoFix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Tue, 9 Feb 2010 13:28:03 +0000 (08:28 -0500)]
Fix size arg when realloc()ing include stack.  From Daniel Kopecek

--HG--
branch : 1.7

14 years agoUse setrlimit64(), if available, instead of setrlimit() when setting
Todd C. Miller [Sat, 6 Feb 2010 20:16:04 +0000 (15:16 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.

--HG--
branch : 1.7

14 years agoFix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 6 Feb 2010 17:43:26 +0000 (12:43 -0500)]
Fix use after free when sending error messages.  From Timo Juhani Lindfors

--HG--
branch : 1.7

15 years agoGenerate the ChangeLog as part of "make dist" instead of having it
Todd C. Miller [Mon, 18 Jan 2010 12:12:06 +0000 (07:12 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.

--HG--
branch : 1.7

15 years agoGenerate correct ChangeLog for 1.7 branch.
Todd C. Miller [Mon, 18 Jan 2010 00:55:11 +0000 (19:55 -0500)]
Generate correct ChangeLog for 1.7 branch.

--HG--
branch : 1.7

15 years agoRemove CVS $Sudo$ tags.
Todd C. Miller [Mon, 18 Jan 2010 00:51:28 +0000 (19:51 -0500)]
Remove CVS $Sudo$ tags.

15 years agoupdate tags
convert-repo [Mon, 18 Jan 2010 05:45:25 +0000 (05:45 +0000)]
update tags

15 years agomake this match sudoers SYNOPSIS
Todd C. Miller [Sat, 26 Dec 2009 23:48:09 +0000 (23:48 +0000)]
make this match sudoers SYNOPSIS

15 years agoPrint a newline between Runas and Command-specific defaults in
Todd C. Miller [Sat, 26 Dec 2009 17:25:49 +0000 (17:25 +0000)]
Print a newline between Runas and Command-specific defaults in
sudo -l.

15 years agoUse SET and CLR macros in term_raw
Todd C. Miller [Sat, 26 Dec 2009 01:50:25 +0000 (01:50 +0000)]
Use SET and CLR macros in term_raw

15 years agoSet stdin to non-blocking mode early instead of in check_input.
Todd C. Miller [Sat, 26 Dec 2009 01:49:25 +0000 (01:49 +0000)]
Set stdin to non-blocking mode early instead of in check_input.
Use term_raw instead of term_cbreak since the data we get has
already been expanded via OPOST.

15 years agoEnable/disable all postprocessing instead of just nl->crnl processing
Todd C. Miller [Wed, 23 Dec 2009 23:53:04 +0000 (23:53 +0000)]
Enable/disable all postprocessing instead of just nl->crnl processing
since things like tab expansion matter too.  However, if stdout is
a tty leave postprocessing on in the pty since we run into problems
doing it only on the real stdout with .e.g nvi.

15 years agoIf tty_tickets is enabled and there is no tty, prompt for a password.
Todd C. Miller [Sat, 19 Dec 2009 23:04:58 +0000 (23:04 +0000)]
If tty_tickets is enabled and there is no tty, prompt for a password.
Do not lecture user for "sudo -k command" if user has a timestamp.

15 years agoDocument missing options: --with-efence and --with-bsm-audit
Todd C. Miller [Sat, 19 Dec 2009 21:57:33 +0000 (21:57 +0000)]
Document missing options: --with-efence and --with-bsm-audit

15 years agousername -> user name
Todd C. Miller [Sat, 19 Dec 2009 21:44:06 +0000 (21:44 +0000)]
username -> user name
groupname -> group name
hostname -> host name

15 years agofilename -> file name like the rest of the docs
Todd C. Miller [Sat, 19 Dec 2009 21:33:25 +0000 (21:33 +0000)]
filename -> file name like the rest of the docs

15 years agoFix printing of entries with multiple host entries on a single line.
Todd C. Miller [Thu, 17 Dec 2009 15:02:06 +0000 (15:02 +0000)]
Fix printing of entries with multiple host entries on a single line.

15 years agoMention that targetpw affects the timestamp file name.
Todd C. Miller [Mon, 14 Dec 2009 23:53:05 +0000 (23:53 +0000)]
Mention that targetpw affects the timestamp file name.

15 years agoAdd compress_transcript option.
Todd C. Miller [Mon, 14 Dec 2009 01:49:50 +0000 (01:49 +0000)]
Add compress_transcript option.

15 years agobump to 1.7.3b2
Todd C. Miller [Sun, 13 Dec 2009 22:26:32 +0000 (22:26 +0000)]
bump to 1.7.3b2

15 years agoBetter split of membership vs. traditional group check in user_in_group().
Todd C. Miller [Sun, 13 Dec 2009 22:24:34 +0000 (22:24 +0000)]
Better split of membership vs. traditional group check in user_in_group().
Allow user_ngroups to be < 0 if getgroups() fails.

15 years agoFix pasto and add default return value.
Todd C. Miller [Sat, 12 Dec 2009 16:27:02 +0000 (16:27 +0000)]
Fix pasto and add default return value.

15 years agorefactor group member checking into user_in_group()
Todd C. Miller [Sat, 12 Dec 2009 16:12:26 +0000 (16:12 +0000)]
refactor group member checking into user_in_group()

15 years agoAdd support for mbr_check_membership() as present in darwin.
Todd C. Miller [Sat, 12 Dec 2009 15:37:52 +0000 (15:37 +0000)]
Add support for mbr_check_membership() as present in darwin.

15 years agoRename label to be accurate
Todd C. Miller [Thu, 10 Dec 2009 19:37:56 +0000 (19:37 +0000)]
Rename label to be accurate

15 years agoTreat timestamp files from before we booted as old. Idea from and
Todd C. Miller [Thu, 10 Dec 2009 16:59:27 +0000 (16:59 +0000)]
Treat timestamp files from before we booted as old.  Idea from and
Apple patch.

15 years agoAllow the -u flag to be used in conjunction with the -v flag as per
Todd C. Miller [Wed, 9 Dec 2009 16:19:30 +0000 (16:19 +0000)]
Allow the -u flag to be used in conjunction with the -v flag as per
older versions of sudo.

15 years agofix typo in last commit
Todd C. Miller [Wed, 9 Dec 2009 16:05:02 +0000 (16:05 +0000)]
fix typo in last commit

15 years agoConvert fmt_first and fmt_confd into macros.
Todd C. Miller [Tue, 8 Dec 2009 22:19:49 +0000 (22:19 +0000)]
Convert fmt_first and fmt_confd into macros.