]> granicus.if.org Git - sudo/log
sudo
14 years agoError out if libaudit.h is missing or ununable when --with-linux-audit
Todd C. Miller [Thu, 24 Jun 2010 19:29:38 +0000 (15:29 -0400)]
Error out if libaudit.h is missing or ununable when --with-linux-audit
was specified

14 years agoAdd =head3 entries, mostly for the html version
Todd C. Miller [Thu, 24 Jun 2010 13:59:06 +0000 (09:59 -0400)]
Add =head3 entries, mostly for the html version

14 years agoMention when LDAP was incorporate.
Todd C. Miller [Tue, 22 Jun 2010 17:38:43 +0000 (13:38 -0400)]
Mention when LDAP was incorporate.

14 years agoDefine _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it
Todd C. Miller [Mon, 21 Jun 2010 21:37:21 +0000 (17:37 -0400)]
Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it
is not covered by _ALL_SOURCE.

14 years agoAdd a cast to quiet a compiler warning.
Todd C. Miller [Fri, 18 Jun 2010 22:45:43 +0000 (18:45 -0400)]
Add a cast to quiet a compiler warning.

14 years agoQuiet a compiler warning.
Todd C. Miller [Fri, 18 Jun 2010 22:39:40 +0000 (18:39 -0400)]
Quiet a compiler warning.

14 years agoCall set_fqdn() after sudoers has parsed instead of inline as a callback.
Todd C. Miller [Fri, 18 Jun 2010 21:47:55 +0000 (17:47 -0400)]
Call set_fqdn() after sudoers has parsed instead of inline as a callback.

14 years agoDo not call set_fqdn() until sudoers parses (where is gets run as a callback).
Todd C. Miller [Fri, 18 Jun 2010 21:25:59 +0000 (17:25 -0400)]
Do not call set_fqdn() until sudoers parses (where is gets run as a callback).

14 years agomention the change in tty ticket behavior when there is no tty
Todd C. Miller [Fri, 18 Jun 2010 19:43:35 +0000 (15:43 -0400)]
mention the change in tty ticket behavior when there is no tty

14 years agoDo not update tty ticket if there is no tty.
Todd C. Miller [Fri, 18 Jun 2010 14:00:16 +0000 (08:00 -0600)]
Do not update tty ticket if there is no tty.

14 years agoUpdate copyright year
Todd C. Miller [Fri, 18 Jun 2010 13:57:01 +0000 (09:57 -0400)]
Update copyright year

14 years agoDo not rely on BSD make's $>
Todd C. Miller [Fri, 18 Jun 2010 13:53:17 +0000 (09:53 -0400)]
Do not rely on BSD make's $>

14 years agoSet timedir to /var/db/sudo for darwin to match Apple sudo's location
Todd C. Miller [Fri, 18 Jun 2010 13:50:45 +0000 (09:50 -0400)]
Set timedir to /var/db/sudo for darwin to match Apple sudo's location

14 years agoAdd stub declarations for struct stat and struct timeval
Todd C. Miller [Wed, 16 Jun 2010 21:10:04 +0000 (17:10 -0400)]
Add stub declarations for struct stat and struct timeval

14 years agoRemove compat/sigaction.c
Todd C. Miller [Wed, 16 Jun 2010 21:05:04 +0000 (17:05 -0400)]
Remove compat/sigaction.c

14 years agoCheck for zlib.h in addition to libz.
Todd C. Miller [Wed, 16 Jun 2010 20:51:46 +0000 (16:51 -0400)]
Check for zlib.h in addition to libz.

14 years agoMove functions and symbols shared between exec.c and exec_pty.c
Todd C. Miller [Wed, 16 Jun 2010 20:46:56 +0000 (16:46 -0400)]
Move functions and symbols shared between exec.c and exec_pty.c
into sudo_exec.h.

14 years agoComment out rules to build .man.in and .cat files unless --with-devel
Todd C. Miller [Wed, 16 Jun 2010 20:01:51 +0000 (16:01 -0400)]
Comment out rules to build .man.in and .cat files unless --with-devel

14 years agoComment out rules to build .man.in and .cat files unless --with-devel
Todd C. Miller [Wed, 16 Jun 2010 19:59:52 +0000 (15:59 -0400)]
Comment out rules to build .man.in and .cat files unless --with-devel

14 years agoQuote any non-alphanumeric characters other than '_' or '-' when passing
Todd C. Miller [Wed, 16 Jun 2010 19:27:40 +0000 (15:27 -0400)]
Quote any non-alphanumeric characters other than '_' or '-' when passing
a command to be run via the shell for the -s and -i options.

14 years agoAdd back .man suffix
Todd C. Miller [Wed, 16 Jun 2010 16:19:23 +0000 (12:19 -0400)]
Add back .man suffix

14 years agoAdd Linux audit support.
Todd C. Miller [Wed, 16 Jun 2010 15:17:02 +0000 (11:17 -0400)]
Add Linux audit support.

14 years agoRemove an XXX
Todd C. Miller [Tue, 15 Jun 2010 21:00:42 +0000 (17:00 -0400)]
Remove an XXX

14 years agoAdd -f (filter) option to sudoreplay to allow certain streams to
Todd C. Miller [Tue, 15 Jun 2010 20:11:25 +0000 (16:11 -0400)]
Add -f (filter) option to sudoreplay to allow certain streams to
be replayed and others ignored.

14 years agoFix -A flag when askpass is specified in sudo.conf or if sudo doesn't need
Todd C. Miller [Tue, 15 Jun 2010 19:11:10 +0000 (15:11 -0400)]
Fix -A flag when askpass is specified in sudo.conf or if sudo doesn't need
to read a password.

14 years agoClean up some XXXs
Todd C. Miller [Tue, 15 Jun 2010 19:01:11 +0000 (15:01 -0400)]
Clean up some XXXs

14 years agoAdd support for multiple sudoers_base entries in ldap.conf.
Todd C. Miller [Tue, 15 Jun 2010 14:33:30 +0000 (10:33 -0400)]
Add support for multiple sudoers_base entries in ldap.conf.
From Joachim Henke

14 years agoremove setsid check, we require a POSIX system
Todd C. Miller [Tue, 15 Jun 2010 13:24:56 +0000 (09:24 -0400)]
remove setsid check, we require a POSIX system

14 years agoCheck for dup2() failure.
Todd C. Miller [Tue, 15 Jun 2010 13:02:23 +0000 (09:02 -0400)]
Check for dup2() failure.

14 years agoRemove dup2() check, it is not optional.
Todd C. Miller [Tue, 15 Jun 2010 12:42:17 +0000 (08:42 -0400)]
Remove dup2() check, it is not optional.

14 years agosync with sudo 1.7.3
Todd C. Miller [Mon, 14 Jun 2010 20:20:41 +0000 (16:20 -0400)]
sync with sudo 1.7.3

14 years agoSunOS does not ship with an ANSI compiler
Todd C. Miller [Mon, 14 Jun 2010 20:14:19 +0000 (16:14 -0400)]
SunOS does not ship with an ANSI compiler

14 years agoUpdate OS specific notes. Delete some really ancient ones and move
Todd C. Miller [Mon, 14 Jun 2010 20:11:01 +0000 (16:11 -0400)]
Update OS specific notes.  Delete some really ancient ones and move
older ones to the end of the list.

14 years agoSudo can be downloaded from the web site too
Todd C. Miller [Mon, 14 Jun 2010 19:16:57 +0000 (15:16 -0400)]
Sudo can be downloaded from the web site too
Mention "OS dependent notes" section in INSTALL

14 years agoCall selinux_restore_tty() as part of cleanup() so it gets called
Todd C. Miller [Mon, 14 Jun 2010 19:09:15 +0000 (15:09 -0400)]
Call selinux_restore_tty() as part of cleanup() so it gets called
from error()/errorx()

14 years agoRemove obsolete porting guide
Todd C. Miller [Mon, 14 Jun 2010 18:56:45 +0000 (14:56 -0400)]
Remove obsolete porting guide

14 years agoMove union sudo_in_addr_un into interfaces.h
Todd C. Miller [Mon, 14 Jun 2010 18:52:53 +0000 (14:52 -0400)]
Move union sudo_in_addr_un into interfaces.h

14 years agoRemove useless circular dependencies
Todd C. Miller [Mon, 14 Jun 2010 16:35:06 +0000 (12:35 -0400)]
Remove useless circular dependencies

14 years agoConvert to ANSI C function declarations
Todd C. Miller [Mon, 14 Jun 2010 16:30:21 +0000 (12:30 -0400)]
Convert to ANSI C function declarations

14 years agoUpdate copyright year
Todd C. Miller [Mon, 14 Jun 2010 16:19:49 +0000 (12:19 -0400)]
Update copyright year

14 years agoFix commented DEVDOCS when not in devel mode.
Todd C. Miller [Mon, 14 Jun 2010 16:19:29 +0000 (12:19 -0400)]
Fix commented DEVDOCS when not in devel mode.

14 years agoQuiet a compiler warning.
Todd C. Miller [Mon, 14 Jun 2010 15:18:50 +0000 (11:18 -0400)]
Quiet a compiler warning.

14 years agoQuiet a compiler warning.
Todd C. Miller [Mon, 14 Jun 2010 14:56:01 +0000 (10:56 -0400)]
Quiet a compiler warning.

14 years agoMake all functions in ldap.c static
Todd C. Miller [Mon, 14 Jun 2010 14:37:42 +0000 (10:37 -0400)]
Make all functions in ldap.c static

14 years agoUpdates from Alain Roy to provide better examples for importing the
Todd C. Miller [Mon, 14 Jun 2010 14:20:41 +0000 (10:20 -0400)]
Updates from Alain Roy to provide better examples for importing the
schema and to fix problems caused by Windows validating attributes
which have not yet been added before committing the changes.

14 years agoLeave rules to build .man.in and .cat files uncommented but only make
Todd C. Miller [Fri, 11 Jun 2010 22:34:24 +0000 (18:34 -0400)]
Leave rules to build .man.in and .cat files uncommented but only make
them part of the "all" rule in devel mode.
Generate .cat files directly from .man.in instead of .man using default
values in configure.in

14 years agoBump sudo version to 1.8.0b1
Todd C. Miller [Fri, 11 Jun 2010 14:55:30 +0000 (10:55 -0400)]
Bump sudo version to 1.8.0b1

14 years agoPrint configure args with verbose version information.
Todd C. Miller [Fri, 11 Jun 2010 14:53:44 +0000 (10:53 -0400)]
Print configure args with verbose version information.

14 years agoRemove tfd from struct sudoersfile; it is not used.
Todd C. Miller [Fri, 11 Jun 2010 13:53:44 +0000 (09:53 -0400)]
Remove tfd from struct sudoersfile; it is not used.
Add prev pointer to struct sudoersfile.
Declare list of sudoersfile using TQ_DECLARE.
Use tq_append to append sudoers entries to the tail queue.

14 years agoDescribe tty timestamp improvements
Todd C. Miller [Thu, 10 Jun 2010 22:04:08 +0000 (18:04 -0400)]
Describe tty timestamp improvements

14 years agoA comment character may not be part of a command line argument
Todd C. Miller [Thu, 10 Jun 2010 21:52:51 +0000 (17:52 -0400)]
A comment character may not be part of a command line argument
unless it is quoted with a backslash.  Fixes parsing of:
    testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar
closes bz #441

14 years agoMake this read a little bit better when passwd_timeout is 0.
Todd C. Miller [Thu, 10 Jun 2010 21:38:56 +0000 (17:38 -0400)]
Make this read a little bit better when passwd_timeout is 0.

14 years agoAttempt to handle a default password prompt timeout of zero more gracefully.
Todd C. Miller [Thu, 10 Jun 2010 21:16:27 +0000 (17:16 -0400)]
Attempt to handle a default password prompt timeout of zero more gracefully.

14 years agoDo not override value of keepopen global, instead restore it to the
Todd C. Miller [Thu, 10 Jun 2010 20:36:41 +0000 (16:36 -0400)]
Do not override value of keepopen global, instead restore it to the
value we pushed onto the stack when popping.

14 years agoAdd dependency for utility programs on libreplace and libcommon
Todd C. Miller [Thu, 10 Jun 2010 20:10:17 +0000 (16:10 -0400)]
Add dependency for utility programs on libreplace and libcommon

14 years agoRemove sigaction emulation
Todd C. Miller [Thu, 10 Jun 2010 19:18:23 +0000 (15:18 -0400)]
Remove sigaction emulation
Use SA_INTERRUPT in sa_flags

14 years agoWe don't use getgrouplist() at the moment so there's no need to
Todd C. Miller [Thu, 10 Jun 2010 19:12:37 +0000 (15:12 -0400)]
We don't use getgrouplist() at the moment so there's no need to
provide a compat version.

14 years agosync with reality
Todd C. Miller [Thu, 10 Jun 2010 19:12:07 +0000 (15:12 -0400)]
sync with reality

14 years agoFix visiblepw sudoers option; the plugin API portion still needs documenting
Todd C. Miller [Thu, 10 Jun 2010 19:02:32 +0000 (15:02 -0400)]
Fix visiblepw sudoers option; the plugin API portion still needs documenting

14 years agoPrint sudo version as well.
Todd C. Miller [Thu, 10 Jun 2010 18:25:25 +0000 (14:25 -0400)]
Print sudo version as well.

14 years agoUse sudo_printf for I/O log version
Todd C. Miller [Thu, 10 Jun 2010 18:24:06 +0000 (14:24 -0400)]
Use sudo_printf for I/O log version
Clarify policy plugin version string

14 years agoSilence some compiler warnings
Todd C. Miller [Thu, 10 Jun 2010 16:27:18 +0000 (12:27 -0400)]
Silence some compiler warnings

14 years agoStore askpass path in a global instead of uses setenv() which many
Todd C. Miller [Thu, 10 Jun 2010 16:03:40 +0000 (12:03 -0400)]
Store askpass path in a global instead of uses setenv() which many
systems lack.

14 years agoMove askpass path specification from sudoers to sudo.conf.
Todd C. Miller [Wed, 9 Jun 2010 21:40:44 +0000 (17:40 -0400)]
Move askpass path specification from sudoers to sudo.conf.

14 years agoUse a flag bit in struct command_details for selinux instead of a separate
Todd C. Miller [Wed, 9 Jun 2010 20:25:44 +0000 (16:25 -0400)]
Use a flag bit in struct command_details for selinux instead of a separate
field.

14 years agoImplement background mode. If I/O logging we use pipes instead of a pty.
Todd C. Miller [Wed, 9 Jun 2010 20:19:45 +0000 (16:19 -0400)]
Implement background mode.  If I/O logging we use pipes instead of a pty.

14 years agoMove compat definition of NSIG to compat.h
Todd C. Miller [Wed, 9 Jun 2010 17:57:07 +0000 (13:57 -0400)]
Move compat definition of NSIG to compat.h

14 years agoMention plugins in the sudo manual and add some missing path
Todd C. Miller [Wed, 9 Jun 2010 16:26:37 +0000 (12:26 -0400)]
Mention plugins in the sudo manual and add some missing path
substitution in the sudo_plugin manual.

14 years agoSet _PATH_SUDO_CONF based on $(sysconfdir)
Todd C. Miller [Wed, 9 Jun 2010 16:24:37 +0000 (12:24 -0400)]
Set _PATH_SUDO_CONF based on $(sysconfdir)

14 years agoRequire POSIX termios to build sudo
Todd C. Miller [Wed, 9 Jun 2010 15:09:55 +0000 (11:09 -0400)]
Require POSIX termios to build sudo

14 years agoIgnore SIGPIPE for "sudo -S"
Todd C. Miller [Wed, 9 Jun 2010 14:59:51 +0000 (10:59 -0400)]
Ignore SIGPIPE for "sudo -S"

14 years agoFix uninitialized variable in TGP_ECHO case and print a newline if
Todd C. Miller [Wed, 9 Jun 2010 14:52:02 +0000 (10:52 -0400)]
Fix uninitialized variable in TGP_ECHO case and print a newline if
the user interrupted password input.

14 years agoMake TGP_ECHO override TGP_MASK and don't try to restore the terminal
Todd C. Miller [Wed, 9 Jun 2010 14:45:07 +0000 (10:45 -0400)]
Make TGP_ECHO override TGP_MASK and don't try to restore the terminal
if we didn't modify it.

14 years agoAdd SUDO_CONV_PROMPT_MASK define which corresponds to the "pwfeedback"
Todd C. Miller [Wed, 9 Jun 2010 14:31:05 +0000 (10:31 -0400)]
Add SUDO_CONV_PROMPT_MASK define which corresponds to the "pwfeedback"
sudoers option.  Do not disable echo if TGP_ECHO is set.

14 years agoUse POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
Todd C. Miller [Wed, 9 Jun 2010 13:54:58 +0000 (09:54 -0400)]
Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl

14 years agoAdd selinux_enabled flag into struct command_details and
Todd C. Miller [Tue, 8 Jun 2010 21:59:18 +0000 (17:59 -0400)]
Add selinux_enabled flag into struct command_details and
set it in command_info_to_details().
Return an error from selinux_setup() instead of exiting.
Call selinux_setup() from exec_setup().

14 years agoRemove commented out copy of old sudo_execve() function.
Todd C. Miller [Wed, 9 Jun 2010 13:22:44 +0000 (09:22 -0400)]
Remove commented out copy of old sudo_execve() function.

14 years agoFix setting selinux type on command line.
Todd C. Miller [Tue, 8 Jun 2010 21:10:27 +0000 (17:10 -0400)]
Fix setting selinux type on command line.

14 years agoIn sudoers_io_close(), skip NULL io_fds[] elements.
Todd C. Miller [Tue, 8 Jun 2010 20:57:18 +0000 (16:57 -0400)]
In sudoers_io_close(), skip NULL io_fds[] elements.

14 years agoNo longer need NGROUPS_MAX define
Todd C. Miller [Tue, 8 Jun 2010 22:42:36 +0000 (18:42 -0400)]
No longer need NGROUPS_MAX define

14 years agoReplace timerfoo macros with timevalfoo since the timer macros are known
Todd C. Miller [Tue, 8 Jun 2010 22:38:23 +0000 (18:38 -0400)]
Replace timerfoo macros with timevalfoo since the timer macros are known
to be busted on some systems.

14 years agoRemove duplicate call to selinux_setup().
Todd C. Miller [Tue, 8 Jun 2010 20:16:08 +0000 (16:16 -0400)]
Remove duplicate call to selinux_setup().

14 years agoIf pam_open_session() fails, pass its status to pam_end.
Todd C. Miller [Tue, 8 Jun 2010 20:54:04 +0000 (16:54 -0400)]
If pam_open_session() fails, pass its status to pam_end.

14 years agoIf a file in a #includedir has improper permissions or owner just
Todd C. Miller [Tue, 8 Jun 2010 20:53:38 +0000 (16:53 -0400)]
If a file in a #includedir has improper permissions or owner just
skip it.  This prevents packages that incorrectly install a file
into /etc/sudoers.d from breaking sudo so easily.  Syntax errors
in #includedir files still result in a parse error (for now).

14 years agoAdd use_pty sudoers option to force use of a pty even when not logging I/O.
Todd C. Miller [Tue, 8 Jun 2010 15:25:33 +0000 (11:25 -0400)]
Add use_pty sudoers option to force use of a pty even when not logging I/O.

14 years agoMake env_init() void as it never fails.
Todd C. Miller [Tue, 8 Jun 2010 14:23:35 +0000 (10:23 -0400)]
Make env_init() void as it never fails.

14 years agoNo longer use _NSGetEnviron so don't need crt_externs.h
Todd C. Miller [Tue, 8 Jun 2010 13:55:36 +0000 (09:55 -0400)]
No longer use _NSGetEnviron so don't need crt_externs.h

14 years agoRemove unused VNULL define
Todd C. Miller [Tue, 8 Jun 2010 13:44:19 +0000 (09:44 -0400)]
Remove unused VNULL define

14 years agoAdd #define for maximum session id
Todd C. Miller [Mon, 7 Jun 2010 22:53:58 +0000 (18:53 -0400)]
Add #define for maximum session id

14 years agoSplit exec.c into exec.c and exec_pty.c
Todd C. Miller [Mon, 7 Jun 2010 22:06:22 +0000 (18:06 -0400)]
Split exec.c into exec.c and exec_pty.c

14 years agoSync with source file moves.
Todd C. Miller [Mon, 7 Jun 2010 15:20:31 +0000 (11:20 -0400)]
Sync with source file moves.

14 years agoRename pty.c -> get_pty.c
Todd C. Miller [Mon, 7 Jun 2010 15:13:03 +0000 (11:13 -0400)]
Rename pty.c -> get_pty.c

14 years agoOnly use I/O input log file if def_log_input is set and output file
Todd C. Miller [Sun, 6 Jun 2010 15:54:46 +0000 (11:54 -0400)]
Only use I/O input log file if def_log_input is set and output file
if def_log_output is set.

14 years agoUpdate copyright year
Todd C. Miller [Fri, 4 Jun 2010 19:37:24 +0000 (15:37 -0400)]
Update copyright year

14 years agouid -> ttyuid
Todd C. Miller [Fri, 4 Jun 2010 18:20:03 +0000 (14:20 -0400)]
uid -> ttyuid

14 years agoFor sudoedit, make a local copy of editor string si become part of
Todd C. Miller [Fri, 4 Jun 2010 16:17:19 +0000 (12:17 -0400)]
For sudoedit, make a local copy of editor string si become part of
argv.  If no editor environment variable, split def_editor on ':'
since it may be a colon-delimited path.

14 years agoRemove unneeded endpwent()/endgrent()
Todd C. Miller [Fri, 4 Jun 2010 16:11:02 +0000 (12:11 -0400)]
Remove unneeded endpwent()/endgrent()

14 years agoUse value of nroff from configure
Todd C. Miller [Fri, 4 Jun 2010 13:40:01 +0000 (09:40 -0400)]
Use value of nroff from configure

14 years agoAdd missing const to I/O log action function
Todd C. Miller [Fri, 4 Jun 2010 13:10:05 +0000 (09:10 -0400)]
Add missing const to I/O log action function

14 years agoUpdate copyright year and fix whitespace
Todd C. Miller [Fri, 4 Jun 2010 13:09:39 +0000 (09:09 -0400)]
Update copyright year and fix whitespace