]>
granicus.if.org Git - sudo/log
Todd C. Miller [Thu, 24 Jun 2010 19:29:38 +0000 (15:29 -0400)]
Error out if libaudit.h is missing or ununable when --with-linux-audit
was specified
Todd C. Miller [Thu, 24 Jun 2010 13:59:06 +0000 (09:59 -0400)]
Add =head3 entries, mostly for the html version
Todd C. Miller [Tue, 22 Jun 2010 17:38:43 +0000 (13:38 -0400)]
Mention when LDAP was incorporate.
Todd C. Miller [Mon, 21 Jun 2010 21:37:21 +0000 (17:37 -0400)]
Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it
is not covered by _ALL_SOURCE.
Todd C. Miller [Fri, 18 Jun 2010 22:45:43 +0000 (18:45 -0400)]
Add a cast to quiet a compiler warning.
Todd C. Miller [Fri, 18 Jun 2010 22:39:40 +0000 (18:39 -0400)]
Quiet a compiler warning.
Todd C. Miller [Fri, 18 Jun 2010 21:47:55 +0000 (17:47 -0400)]
Call set_fqdn() after sudoers has parsed instead of inline as a callback.
Todd C. Miller [Fri, 18 Jun 2010 21:25:59 +0000 (17:25 -0400)]
Do not call set_fqdn() until sudoers parses (where is gets run as a callback).
Todd C. Miller [Fri, 18 Jun 2010 19:43:35 +0000 (15:43 -0400)]
mention the change in tty ticket behavior when there is no tty
Todd C. Miller [Fri, 18 Jun 2010 14:00:16 +0000 (08:00 -0600)]
Do not update tty ticket if there is no tty.
Todd C. Miller [Fri, 18 Jun 2010 13:57:01 +0000 (09:57 -0400)]
Update copyright year
Todd C. Miller [Fri, 18 Jun 2010 13:53:17 +0000 (09:53 -0400)]
Do not rely on BSD make's $>
Todd C. Miller [Fri, 18 Jun 2010 13:50:45 +0000 (09:50 -0400)]
Set timedir to /var/db/sudo for darwin to match Apple sudo's location
Todd C. Miller [Wed, 16 Jun 2010 21:10:04 +0000 (17:10 -0400)]
Add stub declarations for struct stat and struct timeval
Todd C. Miller [Wed, 16 Jun 2010 21:05:04 +0000 (17:05 -0400)]
Remove compat/sigaction.c
Todd C. Miller [Wed, 16 Jun 2010 20:51:46 +0000 (16:51 -0400)]
Check for zlib.h in addition to libz.
Todd C. Miller [Wed, 16 Jun 2010 20:46:56 +0000 (16:46 -0400)]
Move functions and symbols shared between exec.c and exec_pty.c
into sudo_exec.h.
Todd C. Miller [Wed, 16 Jun 2010 20:01:51 +0000 (16:01 -0400)]
Comment out rules to build .man.in and .cat files unless --with-devel
Todd C. Miller [Wed, 16 Jun 2010 19:59:52 +0000 (15:59 -0400)]
Comment out rules to build .man.in and .cat files unless --with-devel
Todd C. Miller [Wed, 16 Jun 2010 19:27:40 +0000 (15:27 -0400)]
Quote any non-alphanumeric characters other than '_' or '-' when passing
a command to be run via the shell for the -s and -i options.
Todd C. Miller [Wed, 16 Jun 2010 16:19:23 +0000 (12:19 -0400)]
Add back .man suffix
Todd C. Miller [Wed, 16 Jun 2010 15:17:02 +0000 (11:17 -0400)]
Add Linux audit support.
Todd C. Miller [Tue, 15 Jun 2010 21:00:42 +0000 (17:00 -0400)]
Remove an XXX
Todd C. Miller [Tue, 15 Jun 2010 20:11:25 +0000 (16:11 -0400)]
Add -f (filter) option to sudoreplay to allow certain streams to
be replayed and others ignored.
Todd C. Miller [Tue, 15 Jun 2010 19:11:10 +0000 (15:11 -0400)]
Fix -A flag when askpass is specified in sudo.conf or if sudo doesn't need
to read a password.
Todd C. Miller [Tue, 15 Jun 2010 19:01:11 +0000 (15:01 -0400)]
Clean up some XXXs
Todd C. Miller [Tue, 15 Jun 2010 14:33:30 +0000 (10:33 -0400)]
Add support for multiple sudoers_base entries in ldap.conf.
From Joachim Henke
Todd C. Miller [Tue, 15 Jun 2010 13:24:56 +0000 (09:24 -0400)]
remove setsid check, we require a POSIX system
Todd C. Miller [Tue, 15 Jun 2010 13:02:23 +0000 (09:02 -0400)]
Check for dup2() failure.
Todd C. Miller [Tue, 15 Jun 2010 12:42:17 +0000 (08:42 -0400)]
Remove dup2() check, it is not optional.
Todd C. Miller [Mon, 14 Jun 2010 20:20:41 +0000 (16:20 -0400)]
sync with sudo 1.7.3
Todd C. Miller [Mon, 14 Jun 2010 20:14:19 +0000 (16:14 -0400)]
SunOS does not ship with an ANSI compiler
Todd C. Miller [Mon, 14 Jun 2010 20:11:01 +0000 (16:11 -0400)]
Update OS specific notes. Delete some really ancient ones and move
older ones to the end of the list.
Todd C. Miller [Mon, 14 Jun 2010 19:16:57 +0000 (15:16 -0400)]
Sudo can be downloaded from the web site too
Mention "OS dependent notes" section in INSTALL
Todd C. Miller [Mon, 14 Jun 2010 19:09:15 +0000 (15:09 -0400)]
Call selinux_restore_tty() as part of cleanup() so it gets called
from error()/errorx()
Todd C. Miller [Mon, 14 Jun 2010 18:56:45 +0000 (14:56 -0400)]
Remove obsolete porting guide
Todd C. Miller [Mon, 14 Jun 2010 18:52:53 +0000 (14:52 -0400)]
Move union sudo_in_addr_un into interfaces.h
Todd C. Miller [Mon, 14 Jun 2010 16:35:06 +0000 (12:35 -0400)]
Remove useless circular dependencies
Todd C. Miller [Mon, 14 Jun 2010 16:30:21 +0000 (12:30 -0400)]
Convert to ANSI C function declarations
Todd C. Miller [Mon, 14 Jun 2010 16:19:49 +0000 (12:19 -0400)]
Update copyright year
Todd C. Miller [Mon, 14 Jun 2010 16:19:29 +0000 (12:19 -0400)]
Fix commented DEVDOCS when not in devel mode.
Todd C. Miller [Mon, 14 Jun 2010 15:18:50 +0000 (11:18 -0400)]
Quiet a compiler warning.
Todd C. Miller [Mon, 14 Jun 2010 14:56:01 +0000 (10:56 -0400)]
Quiet a compiler warning.
Todd C. Miller [Mon, 14 Jun 2010 14:37:42 +0000 (10:37 -0400)]
Make all functions in ldap.c static
Todd C. Miller [Mon, 14 Jun 2010 14:20:41 +0000 (10:20 -0400)]
Updates from Alain Roy to provide better examples for importing the
schema and to fix problems caused by Windows validating attributes
which have not yet been added before committing the changes.
Todd C. Miller [Fri, 11 Jun 2010 22:34:24 +0000 (18:34 -0400)]
Leave rules to build .man.in and .cat files uncommented but only make
them part of the "all" rule in devel mode.
Generate .cat files directly from .man.in instead of .man using default
values in configure.in
Todd C. Miller [Fri, 11 Jun 2010 14:55:30 +0000 (10:55 -0400)]
Bump sudo version to 1.8.0b1
Todd C. Miller [Fri, 11 Jun 2010 14:53:44 +0000 (10:53 -0400)]
Print configure args with verbose version information.
Todd C. Miller [Fri, 11 Jun 2010 13:53:44 +0000 (09:53 -0400)]
Remove tfd from struct sudoersfile; it is not used.
Add prev pointer to struct sudoersfile.
Declare list of sudoersfile using TQ_DECLARE.
Use tq_append to append sudoers entries to the tail queue.
Todd C. Miller [Thu, 10 Jun 2010 22:04:08 +0000 (18:04 -0400)]
Describe tty timestamp improvements
Todd C. Miller [Thu, 10 Jun 2010 21:52:51 +0000 (17:52 -0400)]
A comment character may not be part of a command line argument
unless it is quoted with a backslash. Fixes parsing of:
testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar
closes bz #441
Todd C. Miller [Thu, 10 Jun 2010 21:38:56 +0000 (17:38 -0400)]
Make this read a little bit better when passwd_timeout is 0.
Todd C. Miller [Thu, 10 Jun 2010 21:16:27 +0000 (17:16 -0400)]
Attempt to handle a default password prompt timeout of zero more gracefully.
Todd C. Miller [Thu, 10 Jun 2010 20:36:41 +0000 (16:36 -0400)]
Do not override value of keepopen global, instead restore it to the
value we pushed onto the stack when popping.
Todd C. Miller [Thu, 10 Jun 2010 20:10:17 +0000 (16:10 -0400)]
Add dependency for utility programs on libreplace and libcommon
Todd C. Miller [Thu, 10 Jun 2010 19:18:23 +0000 (15:18 -0400)]
Remove sigaction emulation
Use SA_INTERRUPT in sa_flags
Todd C. Miller [Thu, 10 Jun 2010 19:12:37 +0000 (15:12 -0400)]
We don't use getgrouplist() at the moment so there's no need to
provide a compat version.
Todd C. Miller [Thu, 10 Jun 2010 19:12:07 +0000 (15:12 -0400)]
sync with reality
Todd C. Miller [Thu, 10 Jun 2010 19:02:32 +0000 (15:02 -0400)]
Fix visiblepw sudoers option; the plugin API portion still needs documenting
Todd C. Miller [Thu, 10 Jun 2010 18:25:25 +0000 (14:25 -0400)]
Print sudo version as well.
Todd C. Miller [Thu, 10 Jun 2010 18:24:06 +0000 (14:24 -0400)]
Use sudo_printf for I/O log version
Clarify policy plugin version string
Todd C. Miller [Thu, 10 Jun 2010 16:27:18 +0000 (12:27 -0400)]
Silence some compiler warnings
Todd C. Miller [Thu, 10 Jun 2010 16:03:40 +0000 (12:03 -0400)]
Store askpass path in a global instead of uses setenv() which many
systems lack.
Todd C. Miller [Wed, 9 Jun 2010 21:40:44 +0000 (17:40 -0400)]
Move askpass path specification from sudoers to sudo.conf.
Todd C. Miller [Wed, 9 Jun 2010 20:25:44 +0000 (16:25 -0400)]
Use a flag bit in struct command_details for selinux instead of a separate
field.
Todd C. Miller [Wed, 9 Jun 2010 20:19:45 +0000 (16:19 -0400)]
Implement background mode. If I/O logging we use pipes instead of a pty.
Todd C. Miller [Wed, 9 Jun 2010 17:57:07 +0000 (13:57 -0400)]
Move compat definition of NSIG to compat.h
Todd C. Miller [Wed, 9 Jun 2010 16:26:37 +0000 (12:26 -0400)]
Mention plugins in the sudo manual and add some missing path
substitution in the sudo_plugin manual.
Todd C. Miller [Wed, 9 Jun 2010 16:24:37 +0000 (12:24 -0400)]
Set _PATH_SUDO_CONF based on $(sysconfdir)
Todd C. Miller [Wed, 9 Jun 2010 15:09:55 +0000 (11:09 -0400)]
Require POSIX termios to build sudo
Todd C. Miller [Wed, 9 Jun 2010 14:59:51 +0000 (10:59 -0400)]
Ignore SIGPIPE for "sudo -S"
Todd C. Miller [Wed, 9 Jun 2010 14:52:02 +0000 (10:52 -0400)]
Fix uninitialized variable in TGP_ECHO case and print a newline if
the user interrupted password input.
Todd C. Miller [Wed, 9 Jun 2010 14:45:07 +0000 (10:45 -0400)]
Make TGP_ECHO override TGP_MASK and don't try to restore the terminal
if we didn't modify it.
Todd C. Miller [Wed, 9 Jun 2010 14:31:05 +0000 (10:31 -0400)]
Add SUDO_CONV_PROMPT_MASK define which corresponds to the "pwfeedback"
sudoers option. Do not disable echo if TGP_ECHO is set.
Todd C. Miller [Wed, 9 Jun 2010 13:54:58 +0000 (09:54 -0400)]
Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
Todd C. Miller [Tue, 8 Jun 2010 21:59:18 +0000 (17:59 -0400)]
Add selinux_enabled flag into struct command_details and
set it in command_info_to_details().
Return an error from selinux_setup() instead of exiting.
Call selinux_setup() from exec_setup().
Todd C. Miller [Wed, 9 Jun 2010 13:22:44 +0000 (09:22 -0400)]
Remove commented out copy of old sudo_execve() function.
Todd C. Miller [Tue, 8 Jun 2010 21:10:27 +0000 (17:10 -0400)]
Fix setting selinux type on command line.
Todd C. Miller [Tue, 8 Jun 2010 20:57:18 +0000 (16:57 -0400)]
In sudoers_io_close(), skip NULL io_fds[] elements.
Todd C. Miller [Tue, 8 Jun 2010 22:42:36 +0000 (18:42 -0400)]
No longer need NGROUPS_MAX define
Todd C. Miller [Tue, 8 Jun 2010 22:38:23 +0000 (18:38 -0400)]
Replace timerfoo macros with timevalfoo since the timer macros are known
to be busted on some systems.
Todd C. Miller [Tue, 8 Jun 2010 20:16:08 +0000 (16:16 -0400)]
Remove duplicate call to selinux_setup().
Todd C. Miller [Tue, 8 Jun 2010 20:54:04 +0000 (16:54 -0400)]
If pam_open_session() fails, pass its status to pam_end.
Todd C. Miller [Tue, 8 Jun 2010 20:53:38 +0000 (16:53 -0400)]
If a file in a #includedir has improper permissions or owner just
skip it. This prevents packages that incorrectly install a file
into /etc/sudoers.d from breaking sudo so easily. Syntax errors
in #includedir files still result in a parse error (for now).
Todd C. Miller [Tue, 8 Jun 2010 15:25:33 +0000 (11:25 -0400)]
Add use_pty sudoers option to force use of a pty even when not logging I/O.
Todd C. Miller [Tue, 8 Jun 2010 14:23:35 +0000 (10:23 -0400)]
Make env_init() void as it never fails.
Todd C. Miller [Tue, 8 Jun 2010 13:55:36 +0000 (09:55 -0400)]
No longer use _NSGetEnviron so don't need crt_externs.h
Todd C. Miller [Tue, 8 Jun 2010 13:44:19 +0000 (09:44 -0400)]
Remove unused VNULL define
Todd C. Miller [Mon, 7 Jun 2010 22:53:58 +0000 (18:53 -0400)]
Add #define for maximum session id
Todd C. Miller [Mon, 7 Jun 2010 22:06:22 +0000 (18:06 -0400)]
Split exec.c into exec.c and exec_pty.c
Todd C. Miller [Mon, 7 Jun 2010 15:20:31 +0000 (11:20 -0400)]
Sync with source file moves.
Todd C. Miller [Mon, 7 Jun 2010 15:13:03 +0000 (11:13 -0400)]
Rename pty.c -> get_pty.c
Todd C. Miller [Sun, 6 Jun 2010 15:54:46 +0000 (11:54 -0400)]
Only use I/O input log file if def_log_input is set and output file
if def_log_output is set.
Todd C. Miller [Fri, 4 Jun 2010 19:37:24 +0000 (15:37 -0400)]
Update copyright year
Todd C. Miller [Fri, 4 Jun 2010 18:20:03 +0000 (14:20 -0400)]
uid -> ttyuid
Todd C. Miller [Fri, 4 Jun 2010 16:17:19 +0000 (12:17 -0400)]
For sudoedit, make a local copy of editor string si become part of
argv. If no editor environment variable, split def_editor on ':'
since it may be a colon-delimited path.
Todd C. Miller [Fri, 4 Jun 2010 16:11:02 +0000 (12:11 -0400)]
Remove unneeded endpwent()/endgrent()
Todd C. Miller [Fri, 4 Jun 2010 13:40:01 +0000 (09:40 -0400)]
Use value of nroff from configure
Todd C. Miller [Fri, 4 Jun 2010 13:10:05 +0000 (09:10 -0400)]
Add missing const to I/O log action function
Todd C. Miller [Fri, 4 Jun 2010 13:09:39 +0000 (09:09 -0400)]
Update copyright year and fix whitespace