]>
granicus.if.org Git - sudo/log
Todd C. Miller [Mon, 20 Jul 2015 02:19:22 +0000 (20:19 -0600)]
Avoid needless memory allocation when resolving the tty name.
Todd C. Miller [Fri, 17 Jul 2015 21:28:26 +0000 (15:28 -0600)]
Sudo 1.8.14p1
Todd C. Miller [Fri, 17 Jul 2015 19:58:26 +0000 (13:58 -0600)]
Fix typo in sudo_sss_attrcpy() that caused a memory allocation error.
Todd C. Miller [Wed, 15 Jul 2015 18:36:02 +0000 (12:36 -0600)]
rebuild
Todd C. Miller [Tue, 14 Jul 2015 21:28:01 +0000 (15:28 -0600)]
Add some debugging printfs when malloc fails and we don't have an
explicit call to sudo_warnx().
Todd C. Miller [Tue, 14 Jul 2015 20:50:36 +0000 (14:50 -0600)]
Add missing warnings for memory allocation failure.
Add function name to memory allocation warnings.
Todd C. Miller [Tue, 14 Jul 2015 20:48:04 +0000 (14:48 -0600)]
Return -1 if realloc() fails.
Todd C. Miller [Tue, 14 Jul 2015 20:47:12 +0000 (14:47 -0600)]
Add line number to debug log for memory allocation errors.
Todd C. Miller [Tue, 14 Jul 2015 20:00:18 +0000 (14:00 -0600)]
Add warning if calloc() fails.
Add debugging for other unexpected errors.
Todd C. Miller [Tue, 14 Jul 2015 19:56:29 +0000 (13:56 -0600)]
Add missing check for calloc(3) return value.
Todd C. Miller [Mon, 13 Jul 2015 18:58:25 +0000 (12:58 -0600)]
Document that the values printed by "sudo -V" are affected by
Defaults settings in sudoers.
Todd C. Miller [Fri, 10 Jul 2015 16:31:21 +0000 (10:31 -0600)]
Avoid calling dlerror() multiple times since it clear the error
status after printing the error.
Problem caused by sudo_warn/sudo_fatal being macros...
Todd C. Miller [Fri, 10 Jul 2015 16:02:38 +0000 (10:02 -0600)]
Attempt to clarify the conditions under which MAIL and HOME are
set to the target user.
Todd C. Miller [Thu, 9 Jul 2015 19:01:43 +0000 (13:01 -0600)]
Better checks for the libaudit package for Debian and error out
if we can't figure it out.
Todd C. Miller [Thu, 9 Jul 2015 17:36:51 +0000 (11:36 -0600)]
Fix linux_audit setting on non-multiarch Debian.
Todd C. Miller [Thu, 9 Jul 2015 17:06:03 +0000 (11:06 -0600)]
Fix typo that broke the linux_audit dependency on Debian.
Todd C. Miller [Thu, 9 Jul 2015 16:45:33 +0000 (10:45 -0600)]
Mention /proc/stat btime fix.
Todd C. Miller [Thu, 9 Jul 2015 16:11:25 +0000 (10:11 -0600)]
Solaris 2.6 has the prototypes for inet_pton() and inet_ntop() in
resolv.h.
Todd C. Miller [Thu, 9 Jul 2015 16:10:34 +0000 (10:10 -0600)]
Sprinkle debugging for boottime.
Todd C. Miller [Thu, 9 Jul 2015 15:34:22 +0000 (09:34 -0600)]
The old Solaris /bin/sh doesn't support POSIX $( .. ) syntax,
use backquotes instead.
Todd C. Miller [Thu, 9 Jul 2015 00:13:39 +0000 (18:13 -0600)]
Only use --with-sssd-lib on Debian/Ubuntu w/ multipackage.
Use dpkg-query to determine the name of the audit package
for proper dependencies.
Todd C. Miller [Wed, 8 Jul 2015 22:15:53 +0000 (16:15 -0600)]
Update Debian/Ubuntu packages to be more like the vendor ones. One
notable exception is that sudo.ws packages use /var/run, not /var/lib
for timestamp files.
Todd C. Miller [Wed, 8 Jul 2015 21:13:14 +0000 (15:13 -0600)]
Strip newline from /proc/stat btime line to avoid a strtonum() failure.
From Jakub Wilk.
Todd C. Miller [Wed, 8 Jul 2015 16:12:15 +0000 (10:12 -0600)]
In io_callback() service writes before reads. That way, if both
SUDO_EV_READ and SUDO_EV_WRITE are set and read() returns 0 (EOF)
we don't close the fd before the write() is performed.
If the write() returns EPIPE, ENXIO, EIO or EBADF, clear SUDO_EV_READ
before we close the fd to avoid calling read() on a closed fd.
Todd C. Miller [Tue, 7 Jul 2015 19:17:50 +0000 (13:17 -0600)]
Check sudo_conf_read() return value and exit on fatal error (a
warning was already printed by sudo_conf_read()).
Todd C. Miller [Tue, 7 Jul 2015 17:28:49 +0000 (11:28 -0600)]
Mention double-quoted sudoOption value support.
Todd C. Miller [Tue, 7 Jul 2015 16:58:05 +0000 (10:58 -0600)]
Add support for parsing quoted strings in a sudoOption just like
sudoers Defaults settings.
Todd C. Miller [Tue, 7 Jul 2015 16:34:37 +0000 (10:34 -0600)]
Sync with translationproject.org
Todd C. Miller [Mon, 6 Jul 2015 22:45:33 +0000 (16:45 -0600)]
Update year.
Todd C. Miller [Mon, 6 Jul 2015 22:44:23 +0000 (16:44 -0600)]
Sync with translationproject.org
Todd C. Miller [Mon, 6 Jul 2015 19:56:39 +0000 (13:56 -0600)]
Fix utmp setup broken by commit
be0ca60facf8
Todd C. Miller [Fri, 3 Jul 2015 13:28:00 +0000 (07:28 -0600)]
Sync with translationproject.org
Todd C. Miller [Fri, 3 Jul 2015 13:12:30 +0000 (07:12 -0600)]
regen
Todd C. Miller [Fri, 3 Jul 2015 13:06:29 +0000 (07:06 -0600)]
Fix typo in error message.
Todd C. Miller [Thu, 2 Jul 2015 20:06:16 +0000 (14:06 -0600)]
Bug #702 is the AIX timespec issue.
Todd C. Miller [Thu, 2 Jul 2015 15:24:48 +0000 (09:24 -0600)]
We require POSIX so no need to conditionally include dirent.h.
Add a check for d_namlen and use the result in the NAMLEN macro.
Todd C. Miller [Thu, 2 Jul 2015 15:08:28 +0000 (09:08 -0600)]
There's no need to conditionalize the #include <unistd.h>, we require
a POSIX system.
Todd C. Miller [Thu, 2 Jul 2015 15:07:15 +0000 (09:07 -0600)]
Remove some compatibilty defines that should no longer be needed.
Todd C. Miller [Tue, 30 Jun 2015 20:29:39 +0000 (14:29 -0600)]
Final changes in 1.8.14
Todd C. Miller [Tue, 30 Jun 2015 20:11:53 +0000 (14:11 -0600)]
Need to include stddef.h to get rsize_t on Mac OS X for sudo_memset_s()
prototype.
Todd C. Miller [Tue, 30 Jun 2015 18:19:24 +0000 (12:19 -0600)]
Add missing exit value.
Todd C. Miller [Tue, 30 Jun 2015 18:19:17 +0000 (12:19 -0600)]
Add missing fcntl.h include.
Todd C. Miller [Tue, 30 Jun 2015 16:57:42 +0000 (10:57 -0600)]
Do check for inet_pton before inet_ntop since we may need to record
dependent libraries for inet_pton when linking our getaddrinfo
replacement.
Todd C. Miller [Tue, 30 Jun 2015 16:41:14 +0000 (10:41 -0600)]
Fix build on compilers w/o __func__ or __FUNCTION__
Todd C. Miller [Tue, 30 Jun 2015 16:37:06 +0000 (10:37 -0600)]
Remove sudo_evasprintf_v1, missed during alloc.c removal.
Todd C. Miller [Tue, 30 Jun 2015 16:32:42 +0000 (10:32 -0600)]
Add missing fcntl.h include.
Todd C. Miller [Tue, 30 Jun 2015 16:16:56 +0000 (10:16 -0600)]
Add check for inline support.
Todd C. Miller [Mon, 29 Jun 2015 14:16:43 +0000 (08:16 -0600)]
Add reallocarray.c license.
Todd C. Miller [Sat, 27 Jun 2015 20:01:09 +0000 (14:01 -0600)]
Fix entry for Joel Pelaez Jorge.
Todd C. Miller [Fri, 26 Jun 2015 21:58:04 +0000 (15:58 -0600)]
Add an error flag to the lbuf struct to simplify error checking.
Callers of the lbuf functions now check the error flag to tell if
a memory allocation error ocurred.
Todd C. Miller [Fri, 26 Jun 2015 16:33:28 +0000 (10:33 -0600)]
display_privs() and display_cmnd() may need to return -1 on error.
Todd C. Miller [Thu, 25 Jun 2015 17:12:36 +0000 (11:12 -0600)]
Return -1, not 0 from sudoers when there is an error (as opposed to
a policy denial).
Todd C. Miller [Thu, 25 Jun 2015 17:12:36 +0000 (11:12 -0600)]
Check restore_perms() return value in all cases, pushing the
return value back up the call stack.
Todd C. Miller [Thu, 25 Jun 2015 15:16:07 +0000 (09:16 -0600)]
Add Joel Pelaez Jorge
Todd C. Miller [Thu, 25 Jun 2015 15:12:15 +0000 (09:12 -0600)]
When checking whether the PAM prompt matches "Password:", also check
for the untranslated version. The PAM module might not be using the
localized string even though it exists. From Joel Pelaez Jorge.
Fixes Bug #701
Todd C. Miller [Wed, 24 Jun 2015 16:32:08 +0000 (10:32 -0600)]
Silence clang analyzer warning on glibc systems where the first
argument to qsort() is marked as non-NULL.
Also change some counters from into to unsigned int and two flags
from int to bool.
Todd C. Miller [Tue, 23 Jun 2015 22:37:01 +0000 (16:37 -0600)]
Silence clang analyzer warning on glibc systems where the first
argument to qsort() is marked as non-NULL.
Todd C. Miller [Tue, 23 Jun 2015 22:37:00 +0000 (16:37 -0600)]
Use our own bitmap macros instead of borrowing the ones from select.
Todd C. Miller [Tue, 23 Jun 2015 18:58:02 +0000 (12:58 -0600)]
Quiet clang analyzer false positive.
Todd C. Miller [Tue, 23 Jun 2015 18:57:47 +0000 (12:57 -0600)]
Fix uninitialized variables warnings in error case when src file
cannot be opened. At least one of these is a false positive.
Todd C. Miller [Tue, 23 Jun 2015 19:49:56 +0000 (13:49 -0600)]
Must call round_nfds() with fd+1 since it takes a count not the fd
number. In other words, the lowest value is 1, not 0.
Todd C. Miller [Sun, 21 Jun 2015 01:27:31 +0000 (19:27 -0600)]
It's safe to rely on C89 semantics for realloc(NULL, size).
Todd C. Miller [Sun, 21 Jun 2015 01:26:43 +0000 (19:26 -0600)]
malloc() sets errno to ENOMEM on failure so we don't need to set
it explicitly.
Todd C. Miller [Sat, 20 Jun 2015 22:56:57 +0000 (16:56 -0600)]
No longer need __malloc_like
Todd C. Miller [Sat, 20 Jun 2015 22:56:42 +0000 (16:56 -0600)]
Remove symbols from the now-removed alloc.c.
Todd C. Miller [Sat, 20 Jun 2015 11:34:35 +0000 (05:34 -0600)]
Only include stddef.h where it is needed.
Todd C. Miller [Fri, 19 Jun 2015 22:50:54 +0000 (16:50 -0600)]
regen
Todd C. Miller [Fri, 19 Jun 2015 22:49:02 +0000 (16:49 -0600)]
Better handling of setlocale() returning NULL.
Todd C. Miller [Fri, 19 Jun 2015 20:51:17 +0000 (14:51 -0600)]
Add function name to "unable to allocate memory" warnings.
Todd C. Miller [Fri, 19 Jun 2015 20:29:27 +0000 (14:29 -0600)]
We require ANSI C so stop using the obsolete STDC_HEADERS.
Todd C. Miller [Fri, 19 Jun 2015 18:35:51 +0000 (12:35 -0600)]
Add back _REENTRANT define on HP-UX to expose strtok_r on some versions.
We may need to define it on other systems too.
Todd C. Miller [Fri, 19 Jun 2015 18:35:51 +0000 (12:35 -0600)]
Use strtok_r() instead of strtok()
Todd C. Miller [Fri, 19 Jun 2015 15:54:12 +0000 (09:54 -0600)]
Fix check for strnlen() when cross-compiling.
Todd C. Miller [Fri, 19 Jun 2015 14:57:54 +0000 (08:57 -0600)]
Use sudo_strsplit() in dump_interfaces.
Todd C. Miller [Fri, 19 Jun 2015 03:02:57 +0000 (21:02 -0600)]
Remove obsolete memory.h include.
Todd C. Miller [Fri, 19 Jun 2015 02:30:59 +0000 (20:30 -0600)]
Remove support for the obsolete malloc.h header.
Todd C. Miller [Thu, 18 Jun 2015 23:53:49 +0000 (17:53 -0600)]
Remove BROKEN_SYSLOG define which was for obsolete versions of HP-UX.
Remove last remnants of 4.2BSD syslog support.
Todd C. Miller [Thu, 18 Jun 2015 22:14:49 +0000 (16:14 -0600)]
Use sudo_strsplit() instead of doing the equivalent manually.
Todd C. Miller [Thu, 18 Jun 2015 22:14:20 +0000 (16:14 -0600)]
Test strsplit behavior with an empty string.
Todd C. Miller [Thu, 18 Jun 2015 19:06:15 +0000 (13:06 -0600)]
Allow "make LIBTOOL=/path/to/libtool" to work properly.
Todd C. Miller [Thu, 18 Jun 2015 15:51:36 +0000 (09:51 -0600)]
Use a common function for resolviong the user's editor in sudoedit
and visudo. The find_path() function now returns a dynamically
allocated path instead of using a static string.
Todd C. Miller [Thu, 18 Jun 2015 15:33:05 +0000 (09:33 -0600)]
Replace use of OSDEFS with config.h defines.
Rename DEFS in Makefile.in to CPPDEFS and include in CPPFLAGS.
Bring back _BSD_SOURCE as a config.h define.
Remove obsolescent _REENTRANT define.
Todd C. Miller [Wed, 17 Jun 2015 23:00:55 +0000 (17:00 -0600)]
Remove now-unused sudo_alloc.h and alloc.c
Todd C. Miller [Wed, 17 Jun 2015 23:00:54 +0000 (17:00 -0600)]
Avoid using exiting allocators in the front end.
Todd C. Miller [Wed, 17 Jun 2015 23:00:53 +0000 (17:00 -0600)]
Use non-exiting allocators in libsudo_util.
Todd C. Miller [Wed, 17 Jun 2015 23:00:25 +0000 (17:00 -0600)]
Remove asprintf() return value warnings.
Todd C. Miller [Wed, 17 Jun 2015 23:00:21 +0000 (17:00 -0600)]
Use AC_FUNC_STRNLEN to check for broken strnlen() on AIX.
This requires that we use AC_USE_SYSTEM_EXTENSIONS so remove
things from OSDEFS that are enabled by AC_USE_SYSTEM_EXTENSIONS.
Todd C. Miller [Wed, 17 Jun 2015 16:25:29 +0000 (10:25 -0600)]
Remove extraneous semicolons in CHECK_* macros.
Todd C. Miller [Wed, 17 Jun 2015 16:20:14 +0000 (10:20 -0600)]
Remove remaining SUDO_MAIN remnants.
Todd C. Miller [Wed, 17 Jun 2015 12:49:59 +0000 (06:49 -0600)]
Use non-exiting allocatings in the sudoers plugin.
Todd C. Miller [Tue, 16 Jun 2015 21:00:47 +0000 (15:00 -0600)]
Use non-exiting allocators in the sudoers SSSD backend.
Todd C. Miller [Tue, 16 Jun 2015 19:58:45 +0000 (13:58 -0600)]
Use non-exiting allocators in the sudoers LDAP backend.
Todd C. Miller [Tue, 16 Jun 2015 19:17:46 +0000 (13:17 -0600)]
regen dependencies
Todd C. Miller [Mon, 15 Jun 2015 19:45:12 +0000 (13:45 -0600)]
Add missing dependency info for reallocarray.lo in lib/util/Makefile.in
and regen configure to match last configure.ac change.
Todd C. Miller [Mon, 15 Jun 2015 19:32:48 +0000 (13:32 -0600)]
Use \28 and \29 instead of \( and \) in the ldap query as per RFC
2254. Fixes netgroup queries on AIX. From Steven Soulen.
Todd C. Miller [Sat, 13 Jun 2015 14:13:48 +0000 (08:13 -0600)]
Move pattern length check until after we have initialized the glob_t
so we can call globfree() even on error. From Frank Denis.
Todd C. Miller [Fri, 12 Jun 2015 21:30:06 +0000 (15:30 -0600)]
We need to unlimit RLIMIT_NPROC in sudoers as well as the sudo front
end since set_perms() and restore_perms change the read uid and may
fail with EAGAIN on Linux kernels prior to 3.1.
Todd C. Miller [Mon, 8 Jun 2015 22:49:09 +0000 (16:49 -0600)]
Fix underlining of "root" in -u option descriptions. Bug #699
Todd C. Miller [Mon, 8 Jun 2015 19:57:14 +0000 (13:57 -0600)]
Remove support for converting plugin.so -> plugin.sl on HP-UX when
plugin.so can not be found. This was a temporary hack for using
an older (pre 1.8.7) sudoers plugin with a newer sudo front-end.
Todd C. Miller [Fri, 5 Jun 2015 19:18:48 +0000 (13:18 -0600)]
Add debugging output on memory alloc failure.
Add missing checks in event_select.c for reallocarray() failure.