]>
granicus.if.org Git - sudo/log
Todd C. Miller [Tue, 27 Sep 2011 18:22:48 +0000 (14:22 -0400)]
Update for latest release candidate
--HG--
branch : 1.8
Todd C. Miller [Tue, 27 Sep 2011 18:07:51 +0000 (14:07 -0400)]
regen pot files
--HG--
branch : 1.8
Todd C. Miller [Tue, 27 Sep 2011 17:59:12 +0000 (13:59 -0400)]
Modify the authentication API such that the init and cleanup functions
are always called, regardless of whether or not we are going to
verify a password. This is needed for proper PAM session support.
--HG--
branch : 1.8
Todd C. Miller [Tue, 27 Sep 2011 17:58:50 +0000 (13:58 -0400)]
Add missing dependency for getspwgen other depends.
--HG--
branch : 1.8
Todd C. Miller [Tue, 27 Sep 2011 17:58:17 +0000 (13:58 -0400)]
Fix a PAM_USER mismatch in session open/close. We update PAM_USER
to the target user immediately before setting resource limits, which
is after the monitor process has forked (so it has the old value).
Also, if the user did not authenticate, there is no pamh in the
monitor so we need to init pam here too. This means we end up
calling pam_start() twice, which should be fixed, but at least the
session is always properly closed now.
--HG--
branch : 1.8
Todd C. Miller [Tue, 27 Sep 2011 17:44:56 +0000 (13:44 -0400)]
Add check for old being NULL in utmp_setid(); from Steven McDonald
--HG--
branch : 1.8
Todd C. Miller [Tue, 27 Sep 2011 17:18:46 +0000 (13:18 -0400)]
Modify the authentication API such that the init and cleanup functions
are always called, regardless of whether or not we are going to
verify a password. This is needed for proper PAM session support.
Todd C. Miller [Tue, 27 Sep 2011 17:15:48 +0000 (13:15 -0400)]
Add missing dependency for getspwuid.lo and regen other depends.
Todd C. Miller [Tue, 27 Sep 2011 15:13:44 +0000 (11:13 -0400)]
Fix a PAM_USER mismatch in session open/close. We update PAM_USER
to the target user immediately before setting resource limits, which
is after the monitor process has forked (so it has the old value).
Also, if the user did not authenticate, there is no pamh in the
monitor so we need to init pam here too. This means we end up
calling pam_start() twice, which should be fixed, but at least the
session is always properly closed now.
Todd C. Miller [Tue, 27 Sep 2011 13:30:59 +0000 (09:30 -0400)]
Add check for old being NULL in utmp_setid(); from Steven McDonald
Todd C. Miller [Sun, 25 Sep 2011 17:11:57 +0000 (13:11 -0400)]
If the invoking user cannot be resolved by uid fake the struct
passwd and store it in the cache so we can delref it on exit.
--HG--
branch : 1.8
Todd C. Miller [Sun, 25 Sep 2011 10:35:40 +0000 (06:35 -0400)]
If the invoking user cannot be resolved by uid fake the struct
passwd and store it in the cache so we can delref it on exit.
Todd C. Miller [Sat, 24 Sep 2011 14:29:15 +0000 (10:29 -0400)]
Don't error out if the group plugin cannot be loaded, just warn.
--HG--
branch : 1.8
Todd C. Miller [Sat, 24 Sep 2011 14:24:40 +0000 (10:24 -0400)]
Don't error out if the group plugin cannot be loaded, just warn.
Todd C. Miller [Fri, 23 Sep 2011 23:43:32 +0000 (19:43 -0400)]
Quiet a false positive found by several static analysis tools.
These tools don't know that log_error() does not return (it longjmps
to error_jmp which returns to the sudo front-end).
--HG--
branch : 1.8
Todd C. Miller [Fri, 23 Sep 2011 23:37:21 +0000 (19:37 -0400)]
Quiet a false positive found by several static analysis tools.
These tools don't know that log_error() does not return (it longjmps
to error_jmp which returns to the sudo front-end).
Todd C. Miller [Thu, 22 Sep 2011 18:59:13 +0000 (14:59 -0400)]
Add Italian translation for sudo from translationproject.org
Regen .mo files
--HG--
branch : 1.8
Todd C. Miller [Thu, 22 Sep 2011 18:56:43 +0000 (14:56 -0400)]
Add Italian translation for sudo from translationproject.org
Regen .mo files
Todd C. Miller [Thu, 22 Sep 2011 13:28:55 +0000 (09:28 -0400)]
Added tag SUDO_1_8_2 for changeset
3682e51af1d0
--HG--
branch : 1.8
Todd C. Miller [Wed, 21 Sep 2011 16:32:18 +0000 (12:32 -0400)]
Update to current reality and add bit about ssh auth
--HG--
branch : 1.8
Todd C. Miller [Wed, 21 Sep 2011 16:32:08 +0000 (12:32 -0400)]
Make "verbose" static; fixes a namespace clash with pam_ssh_agent_auth
(and it doesn't need to be extern these days).
--HG--
branch : 1.8
Todd C. Miller [Wed, 21 Sep 2011 16:31:59 +0000 (12:31 -0400)]
FreeBSD has libutil.h not util.h
--HG--
branch : 1.8
Todd C. Miller [Wed, 21 Sep 2011 16:31:40 +0000 (12:31 -0400)]
Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
--HG--
branch : 1.8
Todd C. Miller [Wed, 21 Sep 2011 16:31:28 +0000 (12:31 -0400)]
Update po files from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 21 Sep 2011 16:30:09 +0000 (12:30 -0400)]
Update to current reality and add bit about ssh auth
Todd C. Miller [Wed, 21 Sep 2011 14:15:13 +0000 (10:15 -0400)]
Make "verbose" static; fixes a namespace clash with pam_ssh_agent_auth
(and it doesn't need to be extern these days).
Todd C. Miller [Wed, 21 Sep 2011 13:52:33 +0000 (09:52 -0400)]
FreeBSD has libutil.h not util.h
Todd C. Miller [Wed, 21 Sep 2011 13:46:52 +0000 (09:46 -0400)]
Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
Todd C. Miller [Tue, 20 Sep 2011 18:57:43 +0000 (14:57 -0400)]
Update po files from translationproject.org
Todd C. Miller [Fri, 16 Sep 2011 23:33:32 +0000 (19:33 -0400)]
Mention DEREF support
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 20:53:05 +0000 (16:53 -0400)]
sync pot files
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 20:51:24 +0000 (16:51 -0400)]
Add support for DEREF in ldap.conf.
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 20:50:04 +0000 (16:50 -0400)]
Add support for DEREF in ldap.conf.
Todd C. Miller [Fri, 16 Sep 2011 18:21:37 +0000 (14:21 -0400)]
install target should depend on ChangeLog too, not just install-doc
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 18:20:15 +0000 (14:20 -0400)]
install target should depend on ChangeLog too, not just install-doc
Todd C. Miller [Fri, 16 Sep 2011 18:08:28 +0000 (14:08 -0400)]
Only iolog_file (not iolog_dir) supports mktemp-style suffixes.
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 18:05:44 +0000 (14:05 -0400)]
Only iolog_file (not iolog_dir) supports mktemp-style suffixes.
Todd C. Miller [Fri, 16 Sep 2011 17:39:07 +0000 (13:39 -0400)]
regen pot files
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 17:30:16 +0000 (13:30 -0400)]
Sync with 1.8 branch for sudo 1.8.2 and 1.8.3 changes.
Todd C. Miller [Fri, 16 Sep 2011 17:29:50 +0000 (13:29 -0400)]
Document group lookup change and possible side effects.
Todd C. Miller [Fri, 16 Sep 2011 17:13:01 +0000 (13:13 -0400)]
Fix some square brackets in case statements that needed to be doubled
up. While here, use $OSMAJOR when it makes sense.
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 17:12:46 +0000 (13:12 -0400)]
Fix a crash in make_grlist_item() on 64-bit machines with strict
alignment.
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 17:12:34 +0000 (13:12 -0400)]
Remove list_options() function that is no longer used now that "sudo
-L" is gone.
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 17:12:20 +0000 (13:12 -0400)]
Error message if user tries --with-CC
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 17:12:04 +0000 (13:12 -0400)]
Check for -libmldap too when looking for ldap libs, which is the
Tivoli Directory Server client library.
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 17:05:21 +0000 (13:05 -0400)]
Fix some square brackets in case statements that needed to be doubled
up. While here, use $OSMAJOR when it makes sense.
Todd C. Miller [Fri, 16 Sep 2011 13:37:17 +0000 (09:37 -0400)]
regen pot files for 1.8.3
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 13:31:09 +0000 (09:31 -0400)]
Update for version 1.8.3
--HG--
branch : 1.8
Todd C. Miller [Fri, 16 Sep 2011 13:05:37 +0000 (09:05 -0400)]
Fix a crash in make_grlist_item() on 64-bit machines with strict
alignment.
Todd C. Miller [Fri, 16 Sep 2011 13:05:17 +0000 (09:05 -0400)]
Remove list_options() function that is no longer used now that "sudo
-L" is gone.
Todd C. Miller [Fri, 16 Sep 2011 13:04:58 +0000 (09:04 -0400)]
Error message if user tries --with-CC
Todd C. Miller [Fri, 16 Sep 2011 13:04:27 +0000 (09:04 -0400)]
Check for -libmldap too when looking for ldap libs, which is the
Tivoli Directory Server client library.
Todd C. Miller [Fri, 9 Sep 2011 13:58:55 +0000 (09:58 -0400)]
Honor NOPASSWD tag for denied commands too.
--HG--
branch : 1.8
Todd C. Miller [Fri, 9 Sep 2011 13:57:39 +0000 (09:57 -0400)]
Honor NOPASSWD tag for denied commands too.
Todd C. Miller [Fri, 9 Sep 2011 13:57:01 +0000 (09:57 -0400)]
Remove --with-CC option; it doesn't work correctly now that we use
libtool. Users can get the same effect by setting the CC environment
variable when running configure.
--HG--
branch : 1.8
Todd C. Miller [Thu, 8 Sep 2011 13:36:24 +0000 (09:36 -0400)]
Remove --with-CC option; it doesn't work correctly now that we use
libtool. Users can get the same effect by setting the CC environment
variable when running configure.
Todd C. Miller [Wed, 31 Aug 2011 15:23:26 +0000 (11:23 -0400)]
Assume all modern systems support fstat(2).
--HG--
branch : 1.8
Todd C. Miller [Wed, 31 Aug 2011 15:19:10 +0000 (11:19 -0400)]
Assume all modern systems support fstat(2).
Todd C. Miller [Tue, 30 Aug 2011 14:05:56 +0000 (10:05 -0400)]
Add configure test for missing errno declaration and only
declare it ourselves if it is missing.
--HG--
branch : 1.8
Todd C. Miller [Tue, 30 Aug 2011 14:05:30 +0000 (10:05 -0400)]
Add configure test for missing errno declaration and only
declare it ourselves if it is missing.
Todd C. Miller [Tue, 30 Aug 2011 13:47:12 +0000 (09:47 -0400)]
Include errno.h before sudo.h to avoid conflicting with the system
definition of errno.
--HG--
branch : 1.8
Todd C. Miller [Tue, 30 Aug 2011 13:46:12 +0000 (09:46 -0400)]
Include errno.h before sudo.h to avoid conflicting with the system
definition of errno.
Todd C. Miller [Mon, 29 Aug 2011 18:55:13 +0000 (14:55 -0400)]
Only print individual check status when there is a failure.
--HG--
branch : 1.8
Todd C. Miller [Mon, 29 Aug 2011 18:54:58 +0000 (14:54 -0400)]
Add calls to setprogname() for test programs.
--HG--
branch : 1.8
Todd C. Miller [Mon, 29 Aug 2011 18:54:43 +0000 (14:54 -0400)]
Add -Wall and -Werror after all tests so they don't cause failures.
--HG--
branch : 1.8
Todd C. Miller [Mon, 29 Aug 2011 18:54:27 +0000 (14:54 -0400)]
Actually run check_addr in the check target
--HG--
branch : 1.8
Todd C. Miller [Mon, 29 Aug 2011 18:53:47 +0000 (14:53 -0400)]
Only print individual check status when there is a failure.
Todd C. Miller [Mon, 29 Aug 2011 18:51:12 +0000 (14:51 -0400)]
Add calls to setprogname() for test programs.
Todd C. Miller [Mon, 29 Aug 2011 18:49:10 +0000 (14:49 -0400)]
Add -Wall and -Werror after all tests so they don't cause failures.
Todd C. Miller [Mon, 29 Aug 2011 18:48:09 +0000 (14:48 -0400)]
Actually run check_addr in the check target
Todd C. Miller [Mon, 29 Aug 2011 18:11:17 +0000 (14:11 -0400)]
Split out address matching into its own file and add regression
tests for it.
--HG--
branch : 1.8
Todd C. Miller [Mon, 29 Aug 2011 18:10:18 +0000 (14:10 -0400)]
Split out address matching into its own file and add regression
tests for it.
Todd C. Miller [Sat, 27 Aug 2011 16:11:40 +0000 (12:11 -0400)]
Fix matching a network number with netmask when the network number
is not the first address in the CIDR block.
--HG--
branch : 1.8
Todd C. Miller [Sat, 27 Aug 2011 16:09:30 +0000 (12:09 -0400)]
When matching an address with a netmask in sudoers, AND the mask
and addr before checking against the local addresses.
Todd C. Miller [Fri, 26 Aug 2011 20:01:39 +0000 (16:01 -0400)]
Fix netmask matching.
Todd C. Miller [Fri, 26 Aug 2011 18:04:22 +0000 (14:04 -0400)]
Don't assume all editors support the +linenumber command line argument,
use a whitelist of known good editors.
--HG--
branch : 1.8
Todd C. Miller [Fri, 26 Aug 2011 18:03:49 +0000 (14:03 -0400)]
Don't assume all editors support the +linenumber command line argument,
use a whitelist of known good editors.
Todd C. Miller [Tue, 23 Aug 2011 20:42:45 +0000 (16:42 -0400)]
Silence compiler warnings on Solaris with gcc 3.4.3
--HG--
branch : 1.8
Todd C. Miller [Tue, 23 Aug 2011 20:42:18 +0000 (16:42 -0400)]
Silence compiler warnings on Solaris with gcc 3.4.3
Todd C. Miller [Tue, 23 Aug 2011 19:25:17 +0000 (15:25 -0400)]
Fix building on RHEL 3
--HG--
branch : 1.8
Todd C. Miller [Tue, 23 Aug 2011 19:24:55 +0000 (15:24 -0400)]
Fix building on RHEL 3
Todd C. Miller [Tue, 23 Aug 2011 14:18:45 +0000 (10:18 -0400)]
Add --enable-werror configure option.
--HG--
branch : 1.8
Todd C. Miller [Tue, 23 Aug 2011 14:18:32 +0000 (10:18 -0400)]
setgroups() proto lives in grp.h on RHEL4, perhaps others.
--HG--
branch : 1.8
Todd C. Miller [Tue, 23 Aug 2011 14:18:22 +0000 (10:18 -0400)]
Use PAM by default on AIX 6 and higher.
--HG--
branch : 1.8
Todd C. Miller [Tue, 23 Aug 2011 14:15:28 +0000 (10:15 -0400)]
Add --enable-werror configure option.
Todd C. Miller [Tue, 23 Aug 2011 14:14:52 +0000 (10:14 -0400)]
setgroups() proto lives in grp.h on RHEL4, perhaps others.
Todd C. Miller [Tue, 23 Aug 2011 13:50:40 +0000 (09:50 -0400)]
Use PAM by default on AIX 6 and higher.
Todd C. Miller [Mon, 22 Aug 2011 12:27:12 +0000 (08:27 -0400)]
Add new Esperanto translation from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Mon, 22 Aug 2011 12:26:50 +0000 (08:26 -0400)]
Add new Esperanto translation from translationproject.org
Todd C. Miller [Fri, 19 Aug 2011 13:33:02 +0000 (09:33 -0400)]
Quiet an innocuous valgrind warning.
--HG--
branch : 1.8
Todd C. Miller [Fri, 19 Aug 2011 13:32:25 +0000 (09:32 -0400)]
Quiet an innocuous valgrind warning.
Todd C. Miller [Thu, 18 Aug 2011 17:45:09 +0000 (13:45 -0400)]
Fix expansion of strftime() escapes in log_dir and add a regress test
that exhibited the problem.
--HG--
branch : 1.8
Todd C. Miller [Thu, 18 Aug 2011 17:44:55 +0000 (13:44 -0400)]
Fix "make check" return value.
--HG--
branch : 1.8
Todd C. Miller [Thu, 18 Aug 2011 17:41:40 +0000 (13:41 -0400)]
Fix expansion of strftime() escapes in log_dir and add a regress test
that exhibited the problem.
Todd C. Miller [Thu, 18 Aug 2011 16:09:34 +0000 (12:09 -0400)]
Fix "make check" return value.
Todd C. Miller [Wed, 17 Aug 2011 15:41:30 +0000 (11:41 -0400)]
Regen pot files
--HG--
branch : 1.8
Todd C. Miller [Wed, 17 Aug 2011 15:40:14 +0000 (11:40 -0400)]
Regen pot files
Todd C. Miller [Wed, 17 Aug 2011 15:39:18 +0000 (11:39 -0400)]
Fix logic inversion in pot file up to date check.
--HG--
branch : 1.8
Todd C. Miller [Wed, 17 Aug 2011 15:38:53 +0000 (11:38 -0400)]
Fix logic inversion in pot file up to date check.
Todd C. Miller [Wed, 17 Aug 2011 13:54:48 +0000 (09:54 -0400)]
regen docs
--HG--
branch : 1.8