]> granicus.if.org Git - sudo/log
sudo
13 years agoUpdate for latest release candidate
Todd C. Miller [Tue, 27 Sep 2011 18:22:48 +0000 (14:22 -0400)]
Update for latest release candidate

--HG--
branch : 1.8

13 years agoregen pot files
Todd C. Miller [Tue, 27 Sep 2011 18:07:51 +0000 (14:07 -0400)]
regen pot files

--HG--
branch : 1.8

13 years agoModify the authentication API such that the init and cleanup functions
Todd C. Miller [Tue, 27 Sep 2011 17:59:12 +0000 (13:59 -0400)]
Modify the authentication API such that the init and cleanup functions
are always called, regardless of whether or not we are going to
verify a password.  This is needed for proper PAM session support.

--HG--
branch : 1.8

13 years agoAdd missing dependency for getspwgen other depends.
Todd C. Miller [Tue, 27 Sep 2011 17:58:50 +0000 (13:58 -0400)]
Add missing dependency for getspwgen other depends.

--HG--
branch : 1.8

13 years agoFix a PAM_USER mismatch in session open/close. We update PAM_USER
Todd C. Miller [Tue, 27 Sep 2011 17:58:17 +0000 (13:58 -0400)]
Fix a PAM_USER mismatch in session open/close.  We update PAM_USER
to the target user immediately before setting resource limits, which
is after the monitor process has forked (so it has the old value).
Also, if the user did not authenticate, there is no pamh in the
monitor so we need to init pam here too.  This means we end up
calling pam_start() twice, which should be fixed, but at least the
session is always properly closed now.

--HG--
branch : 1.8

13 years agoAdd check for old being NULL in utmp_setid(); from Steven McDonald
Todd C. Miller [Tue, 27 Sep 2011 17:44:56 +0000 (13:44 -0400)]
Add check for old being NULL in utmp_setid(); from Steven McDonald

--HG--
branch : 1.8

13 years agoModify the authentication API such that the init and cleanup functions
Todd C. Miller [Tue, 27 Sep 2011 17:18:46 +0000 (13:18 -0400)]
Modify the authentication API such that the init and cleanup functions
are always called, regardless of whether or not we are going to
verify a password.  This is needed for proper PAM session support.

13 years agoAdd missing dependency for getspwuid.lo and regen other depends.
Todd C. Miller [Tue, 27 Sep 2011 17:15:48 +0000 (13:15 -0400)]
Add missing dependency for getspwuid.lo and regen other depends.

13 years agoFix a PAM_USER mismatch in session open/close. We update PAM_USER
Todd C. Miller [Tue, 27 Sep 2011 15:13:44 +0000 (11:13 -0400)]
Fix a PAM_USER mismatch in session open/close.  We update PAM_USER
to the target user immediately before setting resource limits, which
is after the monitor process has forked (so it has the old value).
Also, if the user did not authenticate, there is no pamh in the
monitor so we need to init pam here too.  This means we end up
calling pam_start() twice, which should be fixed, but at least the
session is always properly closed now.

13 years agoAdd check for old being NULL in utmp_setid(); from Steven McDonald
Todd C. Miller [Tue, 27 Sep 2011 13:30:59 +0000 (09:30 -0400)]
Add check for old being NULL in utmp_setid(); from Steven McDonald

13 years agoIf the invoking user cannot be resolved by uid fake the struct
Todd C. Miller [Sun, 25 Sep 2011 17:11:57 +0000 (13:11 -0400)]
If the invoking user cannot be resolved by uid fake the struct
passwd and store it in the cache so we can delref it on exit.

--HG--
branch : 1.8

13 years agoIf the invoking user cannot be resolved by uid fake the struct
Todd C. Miller [Sun, 25 Sep 2011 10:35:40 +0000 (06:35 -0400)]
If the invoking user cannot be resolved by uid fake the struct
passwd and store it in the cache so we can delref it on exit.

13 years agoDon't error out if the group plugin cannot be loaded, just warn.
Todd C. Miller [Sat, 24 Sep 2011 14:29:15 +0000 (10:29 -0400)]
Don't error out if the group plugin cannot be loaded, just warn.

--HG--
branch : 1.8

13 years agoDon't error out if the group plugin cannot be loaded, just warn.
Todd C. Miller [Sat, 24 Sep 2011 14:24:40 +0000 (10:24 -0400)]
Don't error out if the group plugin cannot be loaded, just warn.

13 years agoQuiet a false positive found by several static analysis tools.
Todd C. Miller [Fri, 23 Sep 2011 23:43:32 +0000 (19:43 -0400)]
Quiet a false positive found by several static analysis tools.
These tools don't know that log_error() does not return (it longjmps
to error_jmp which returns to the sudo front-end).

--HG--
branch : 1.8

13 years agoQuiet a false positive found by several static analysis tools.
Todd C. Miller [Fri, 23 Sep 2011 23:37:21 +0000 (19:37 -0400)]
Quiet a false positive found by several static analysis tools.
These tools don't know that log_error() does not return (it longjmps
to error_jmp which returns to the sudo front-end).

13 years agoAdd Italian translation for sudo from translationproject.org
Todd C. Miller [Thu, 22 Sep 2011 18:59:13 +0000 (14:59 -0400)]
Add Italian translation for sudo from translationproject.org
Regen .mo files

--HG--
branch : 1.8

13 years agoAdd Italian translation for sudo from translationproject.org
Todd C. Miller [Thu, 22 Sep 2011 18:56:43 +0000 (14:56 -0400)]
Add Italian translation for sudo from translationproject.org
Regen .mo files

13 years agoAdded tag SUDO_1_8_2 for changeset 3682e51af1d0
Todd C. Miller [Thu, 22 Sep 2011 13:28:55 +0000 (09:28 -0400)]
Added tag SUDO_1_8_2 for changeset 3682e51af1d0

--HG--
branch : 1.8

13 years agoUpdate to current reality and add bit about ssh auth
Todd C. Miller [Wed, 21 Sep 2011 16:32:18 +0000 (12:32 -0400)]
Update to current reality and add bit about ssh auth

--HG--
branch : 1.8

13 years agoMake "verbose" static; fixes a namespace clash with pam_ssh_agent_auth
Todd C. Miller [Wed, 21 Sep 2011 16:32:08 +0000 (12:32 -0400)]
Make "verbose" static; fixes a namespace clash with pam_ssh_agent_auth
(and it doesn't need to be extern these days).

--HG--
branch : 1.8

13 years agoFreeBSD has libutil.h not util.h
Todd C. Miller [Wed, 21 Sep 2011 16:31:59 +0000 (12:31 -0400)]
FreeBSD has libutil.h not util.h

--HG--
branch : 1.8

13 years agoDefine _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
Todd C. Miller [Wed, 21 Sep 2011 16:31:40 +0000 (12:31 -0400)]
Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD

--HG--
branch : 1.8

13 years agoUpdate po files from translationproject.org
Todd C. Miller [Wed, 21 Sep 2011 16:31:28 +0000 (12:31 -0400)]
Update po files from translationproject.org

--HG--
branch : 1.8

13 years agoUpdate to current reality and add bit about ssh auth
Todd C. Miller [Wed, 21 Sep 2011 16:30:09 +0000 (12:30 -0400)]
Update to current reality and add bit about ssh auth

13 years agoMake "verbose" static; fixes a namespace clash with pam_ssh_agent_auth
Todd C. Miller [Wed, 21 Sep 2011 14:15:13 +0000 (10:15 -0400)]
Make "verbose" static; fixes a namespace clash with pam_ssh_agent_auth
(and it doesn't need to be extern these days).

13 years agoFreeBSD has libutil.h not util.h
Todd C. Miller [Wed, 21 Sep 2011 13:52:33 +0000 (09:52 -0400)]
FreeBSD has libutil.h not util.h

13 years agoDefine _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
Todd C. Miller [Wed, 21 Sep 2011 13:46:52 +0000 (09:46 -0400)]
Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD

13 years agoUpdate po files from translationproject.org
Todd C. Miller [Tue, 20 Sep 2011 18:57:43 +0000 (14:57 -0400)]
Update po files from translationproject.org

13 years agoMention DEREF support
Todd C. Miller [Fri, 16 Sep 2011 23:33:32 +0000 (19:33 -0400)]
Mention DEREF support

--HG--
branch : 1.8

13 years agosync pot files
Todd C. Miller [Fri, 16 Sep 2011 20:53:05 +0000 (16:53 -0400)]
sync pot files

--HG--
branch : 1.8

13 years agoAdd support for DEREF in ldap.conf.
Todd C. Miller [Fri, 16 Sep 2011 20:51:24 +0000 (16:51 -0400)]
Add support for DEREF in ldap.conf.

--HG--
branch : 1.8

13 years agoAdd support for DEREF in ldap.conf.
Todd C. Miller [Fri, 16 Sep 2011 20:50:04 +0000 (16:50 -0400)]
Add support for DEREF in ldap.conf.

13 years agoinstall target should depend on ChangeLog too, not just install-doc
Todd C. Miller [Fri, 16 Sep 2011 18:21:37 +0000 (14:21 -0400)]
install target should depend on ChangeLog too, not just install-doc

--HG--
branch : 1.8

13 years agoinstall target should depend on ChangeLog too, not just install-doc
Todd C. Miller [Fri, 16 Sep 2011 18:20:15 +0000 (14:20 -0400)]
install target should depend on ChangeLog too, not just install-doc

13 years agoOnly iolog_file (not iolog_dir) supports mktemp-style suffixes.
Todd C. Miller [Fri, 16 Sep 2011 18:08:28 +0000 (14:08 -0400)]
Only iolog_file (not iolog_dir) supports mktemp-style suffixes.

--HG--
branch : 1.8

13 years agoOnly iolog_file (not iolog_dir) supports mktemp-style suffixes.
Todd C. Miller [Fri, 16 Sep 2011 18:05:44 +0000 (14:05 -0400)]
Only iolog_file (not iolog_dir) supports mktemp-style suffixes.

13 years agoregen pot files
Todd C. Miller [Fri, 16 Sep 2011 17:39:07 +0000 (13:39 -0400)]
regen pot files

--HG--
branch : 1.8

13 years agoSync with 1.8 branch for sudo 1.8.2 and 1.8.3 changes.
Todd C. Miller [Fri, 16 Sep 2011 17:30:16 +0000 (13:30 -0400)]
Sync with 1.8 branch for sudo 1.8.2 and 1.8.3 changes.

13 years agoDocument group lookup change and possible side effects.
Todd C. Miller [Fri, 16 Sep 2011 17:29:50 +0000 (13:29 -0400)]
Document group lookup change and possible side effects.

13 years agoFix some square brackets in case statements that needed to be doubled
Todd C. Miller [Fri, 16 Sep 2011 17:13:01 +0000 (13:13 -0400)]
Fix some square brackets in case statements that needed to be doubled
up.  While here, use $OSMAJOR when it makes sense.

--HG--
branch : 1.8

13 years agoFix a crash in make_grlist_item() on 64-bit machines with strict
Todd C. Miller [Fri, 16 Sep 2011 17:12:46 +0000 (13:12 -0400)]
Fix a crash in make_grlist_item() on 64-bit machines with strict
alignment.

--HG--
branch : 1.8

13 years agoRemove list_options() function that is no longer used now that "sudo
Todd C. Miller [Fri, 16 Sep 2011 17:12:34 +0000 (13:12 -0400)]
Remove list_options() function that is no longer used now that "sudo
-L" is gone.

--HG--
branch : 1.8

13 years agoError message if user tries --with-CC
Todd C. Miller [Fri, 16 Sep 2011 17:12:20 +0000 (13:12 -0400)]
Error message if user tries --with-CC

--HG--
branch : 1.8

13 years agoCheck for -libmldap too when looking for ldap libs, which is the
Todd C. Miller [Fri, 16 Sep 2011 17:12:04 +0000 (13:12 -0400)]
Check for -libmldap too when looking for ldap libs, which is the
Tivoli Directory Server client library.

--HG--
branch : 1.8

13 years agoFix some square brackets in case statements that needed to be doubled
Todd C. Miller [Fri, 16 Sep 2011 17:05:21 +0000 (13:05 -0400)]
Fix some square brackets in case statements that needed to be doubled
up.  While here, use $OSMAJOR when it makes sense.

13 years agoregen pot files for 1.8.3
Todd C. Miller [Fri, 16 Sep 2011 13:37:17 +0000 (09:37 -0400)]
regen pot files for 1.8.3

--HG--
branch : 1.8

13 years agoUpdate for version 1.8.3
Todd C. Miller [Fri, 16 Sep 2011 13:31:09 +0000 (09:31 -0400)]
Update for version 1.8.3

--HG--
branch : 1.8

13 years agoFix a crash in make_grlist_item() on 64-bit machines with strict
Todd C. Miller [Fri, 16 Sep 2011 13:05:37 +0000 (09:05 -0400)]
Fix a crash in make_grlist_item() on 64-bit machines with strict
alignment.

13 years agoRemove list_options() function that is no longer used now that "sudo
Todd C. Miller [Fri, 16 Sep 2011 13:05:17 +0000 (09:05 -0400)]
Remove list_options() function that is no longer used now that "sudo
-L" is gone.

13 years agoError message if user tries --with-CC
Todd C. Miller [Fri, 16 Sep 2011 13:04:58 +0000 (09:04 -0400)]
Error message if user tries --with-CC

13 years agoCheck for -libmldap too when looking for ldap libs, which is the
Todd C. Miller [Fri, 16 Sep 2011 13:04:27 +0000 (09:04 -0400)]
Check for -libmldap too when looking for ldap libs, which is the
Tivoli Directory Server client library.

13 years agoHonor NOPASSWD tag for denied commands too.
Todd C. Miller [Fri, 9 Sep 2011 13:58:55 +0000 (09:58 -0400)]
Honor NOPASSWD tag for denied commands too.

--HG--
branch : 1.8

13 years agoHonor NOPASSWD tag for denied commands too.
Todd C. Miller [Fri, 9 Sep 2011 13:57:39 +0000 (09:57 -0400)]
Honor NOPASSWD tag for denied commands too.

13 years agoRemove --with-CC option; it doesn't work correctly now that we use
Todd C. Miller [Fri, 9 Sep 2011 13:57:01 +0000 (09:57 -0400)]
Remove --with-CC option; it doesn't work correctly now that we use
libtool.  Users can get the same effect by setting the CC environment
variable when running configure.

--HG--
branch : 1.8

13 years agoRemove --with-CC option; it doesn't work correctly now that we use
Todd C. Miller [Thu, 8 Sep 2011 13:36:24 +0000 (09:36 -0400)]
Remove --with-CC option; it doesn't work correctly now that we use
libtool.  Users can get the same effect by setting the CC environment
variable when running configure.

13 years agoAssume all modern systems support fstat(2).
Todd C. Miller [Wed, 31 Aug 2011 15:23:26 +0000 (11:23 -0400)]
Assume all modern systems support fstat(2).

--HG--
branch : 1.8

13 years agoAssume all modern systems support fstat(2).
Todd C. Miller [Wed, 31 Aug 2011 15:19:10 +0000 (11:19 -0400)]
Assume all modern systems support fstat(2).

13 years agoAdd configure test for missing errno declaration and only
Todd C. Miller [Tue, 30 Aug 2011 14:05:56 +0000 (10:05 -0400)]
Add configure test for missing errno declaration and only
declare it ourselves if it is missing.

--HG--
branch : 1.8

13 years agoAdd configure test for missing errno declaration and only
Todd C. Miller [Tue, 30 Aug 2011 14:05:30 +0000 (10:05 -0400)]
Add configure test for missing errno declaration and only
declare it ourselves if it is missing.

13 years agoInclude errno.h before sudo.h to avoid conflicting with the system
Todd C. Miller [Tue, 30 Aug 2011 13:47:12 +0000 (09:47 -0400)]
Include errno.h before sudo.h to avoid conflicting with the system
definition of errno.

--HG--
branch : 1.8

13 years agoInclude errno.h before sudo.h to avoid conflicting with the system
Todd C. Miller [Tue, 30 Aug 2011 13:46:12 +0000 (09:46 -0400)]
Include errno.h before sudo.h to avoid conflicting with the system
definition of errno.

13 years agoOnly print individual check status when there is a failure.
Todd C. Miller [Mon, 29 Aug 2011 18:55:13 +0000 (14:55 -0400)]
Only print individual check status when there is a failure.

--HG--
branch : 1.8

13 years agoAdd calls to setprogname() for test programs.
Todd C. Miller [Mon, 29 Aug 2011 18:54:58 +0000 (14:54 -0400)]
Add calls to setprogname() for test programs.

--HG--
branch : 1.8

13 years agoAdd -Wall and -Werror after all tests so they don't cause failures.
Todd C. Miller [Mon, 29 Aug 2011 18:54:43 +0000 (14:54 -0400)]
Add -Wall and -Werror after all tests so they don't cause failures.

--HG--
branch : 1.8

13 years agoActually run check_addr in the check target
Todd C. Miller [Mon, 29 Aug 2011 18:54:27 +0000 (14:54 -0400)]
Actually run check_addr in the check target

--HG--
branch : 1.8

13 years agoOnly print individual check status when there is a failure.
Todd C. Miller [Mon, 29 Aug 2011 18:53:47 +0000 (14:53 -0400)]
Only print individual check status when there is a failure.

13 years agoAdd calls to setprogname() for test programs.
Todd C. Miller [Mon, 29 Aug 2011 18:51:12 +0000 (14:51 -0400)]
Add calls to setprogname() for test programs.

13 years agoAdd -Wall and -Werror after all tests so they don't cause failures.
Todd C. Miller [Mon, 29 Aug 2011 18:49:10 +0000 (14:49 -0400)]
Add -Wall and -Werror after all tests so they don't cause failures.

13 years agoActually run check_addr in the check target
Todd C. Miller [Mon, 29 Aug 2011 18:48:09 +0000 (14:48 -0400)]
Actually run check_addr in the check target

13 years agoSplit out address matching into its own file and add regression
Todd C. Miller [Mon, 29 Aug 2011 18:11:17 +0000 (14:11 -0400)]
Split out address matching into its own file and add regression
tests for it.

--HG--
branch : 1.8

13 years agoSplit out address matching into its own file and add regression
Todd C. Miller [Mon, 29 Aug 2011 18:10:18 +0000 (14:10 -0400)]
Split out address matching into its own file and add regression
tests for it.

13 years agoFix matching a network number with netmask when the network number
Todd C. Miller [Sat, 27 Aug 2011 16:11:40 +0000 (12:11 -0400)]
Fix matching a network number with netmask when the network number
is not the first address in the CIDR block.

--HG--
branch : 1.8

13 years agoWhen matching an address with a netmask in sudoers, AND the mask
Todd C. Miller [Sat, 27 Aug 2011 16:09:30 +0000 (12:09 -0400)]
When matching an address with a netmask in sudoers, AND the mask
and addr before checking against the local addresses.

13 years agoFix netmask matching.
Todd C. Miller [Fri, 26 Aug 2011 20:01:39 +0000 (16:01 -0400)]
Fix netmask matching.

13 years agoDon't assume all editors support the +linenumber command line argument,
Todd C. Miller [Fri, 26 Aug 2011 18:04:22 +0000 (14:04 -0400)]
Don't assume all editors support the +linenumber command line argument,
use a whitelist of known good editors.

--HG--
branch : 1.8

13 years agoDon't assume all editors support the +linenumber command line argument,
Todd C. Miller [Fri, 26 Aug 2011 18:03:49 +0000 (14:03 -0400)]
Don't assume all editors support the +linenumber command line argument,
use a whitelist of known good editors.

13 years agoSilence compiler warnings on Solaris with gcc 3.4.3
Todd C. Miller [Tue, 23 Aug 2011 20:42:45 +0000 (16:42 -0400)]
Silence compiler warnings on Solaris with gcc 3.4.3

--HG--
branch : 1.8

13 years agoSilence compiler warnings on Solaris with gcc 3.4.3
Todd C. Miller [Tue, 23 Aug 2011 20:42:18 +0000 (16:42 -0400)]
Silence compiler warnings on Solaris with gcc 3.4.3

13 years agoFix building on RHEL 3
Todd C. Miller [Tue, 23 Aug 2011 19:25:17 +0000 (15:25 -0400)]
Fix building on RHEL 3

--HG--
branch : 1.8

13 years agoFix building on RHEL 3
Todd C. Miller [Tue, 23 Aug 2011 19:24:55 +0000 (15:24 -0400)]
Fix building on RHEL 3

13 years agoAdd --enable-werror configure option.
Todd C. Miller [Tue, 23 Aug 2011 14:18:45 +0000 (10:18 -0400)]
Add --enable-werror configure option.

--HG--
branch : 1.8

13 years agosetgroups() proto lives in grp.h on RHEL4, perhaps others.
Todd C. Miller [Tue, 23 Aug 2011 14:18:32 +0000 (10:18 -0400)]
setgroups() proto lives in grp.h on RHEL4, perhaps others.

--HG--
branch : 1.8

13 years agoUse PAM by default on AIX 6 and higher.
Todd C. Miller [Tue, 23 Aug 2011 14:18:22 +0000 (10:18 -0400)]
Use PAM by default on AIX 6 and higher.

--HG--
branch : 1.8

13 years agoAdd --enable-werror configure option.
Todd C. Miller [Tue, 23 Aug 2011 14:15:28 +0000 (10:15 -0400)]
Add --enable-werror configure option.

13 years agosetgroups() proto lives in grp.h on RHEL4, perhaps others.
Todd C. Miller [Tue, 23 Aug 2011 14:14:52 +0000 (10:14 -0400)]
setgroups() proto lives in grp.h on RHEL4, perhaps others.

13 years agoUse PAM by default on AIX 6 and higher.
Todd C. Miller [Tue, 23 Aug 2011 13:50:40 +0000 (09:50 -0400)]
Use PAM by default on AIX 6 and higher.

13 years agoAdd new Esperanto translation from translationproject.org
Todd C. Miller [Mon, 22 Aug 2011 12:27:12 +0000 (08:27 -0400)]
Add new Esperanto translation from translationproject.org

--HG--
branch : 1.8

13 years agoAdd new Esperanto translation from translationproject.org
Todd C. Miller [Mon, 22 Aug 2011 12:26:50 +0000 (08:26 -0400)]
Add new Esperanto translation from translationproject.org

13 years agoQuiet an innocuous valgrind warning.
Todd C. Miller [Fri, 19 Aug 2011 13:33:02 +0000 (09:33 -0400)]
Quiet an innocuous valgrind warning.

--HG--
branch : 1.8

13 years agoQuiet an innocuous valgrind warning.
Todd C. Miller [Fri, 19 Aug 2011 13:32:25 +0000 (09:32 -0400)]
Quiet an innocuous valgrind warning.

13 years agoFix expansion of strftime() escapes in log_dir and add a regress test
Todd C. Miller [Thu, 18 Aug 2011 17:45:09 +0000 (13:45 -0400)]
Fix expansion of strftime() escapes in log_dir and add a regress test
that exhibited the problem.

--HG--
branch : 1.8

13 years agoFix "make check" return value.
Todd C. Miller [Thu, 18 Aug 2011 17:44:55 +0000 (13:44 -0400)]
Fix "make check" return value.

--HG--
branch : 1.8

13 years agoFix expansion of strftime() escapes in log_dir and add a regress test
Todd C. Miller [Thu, 18 Aug 2011 17:41:40 +0000 (13:41 -0400)]
Fix expansion of strftime() escapes in log_dir and add a regress test
that exhibited the problem.

13 years agoFix "make check" return value.
Todd C. Miller [Thu, 18 Aug 2011 16:09:34 +0000 (12:09 -0400)]
Fix "make check" return value.

13 years agoRegen pot files SUDO_1_8_2
Todd C. Miller [Wed, 17 Aug 2011 15:41:30 +0000 (11:41 -0400)]
Regen pot files

--HG--
branch : 1.8

13 years agoRegen pot files
Todd C. Miller [Wed, 17 Aug 2011 15:40:14 +0000 (11:40 -0400)]
Regen pot files

13 years agoFix logic inversion in pot file up to date check.
Todd C. Miller [Wed, 17 Aug 2011 15:39:18 +0000 (11:39 -0400)]
Fix logic inversion in pot file up to date check.

--HG--
branch : 1.8

13 years agoFix logic inversion in pot file up to date check.
Todd C. Miller [Wed, 17 Aug 2011 15:38:53 +0000 (11:38 -0400)]
Fix logic inversion in pot file up to date check.

13 years agoregen docs
Todd C. Miller [Wed, 17 Aug 2011 13:54:48 +0000 (09:54 -0400)]
regen docs

--HG--
branch : 1.8