]>
granicus.if.org Git - sudo/log
Todd C. Miller [Wed, 4 Jan 2012 17:53:01 +0000 (12:53 -0500)]
No longer pass debug_file to plugin, plugins must now use CONV_DEBUG_MSG
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:53 +0000 (12:52 -0500)]
Build PIE executables for newer Debian and Ubuntu
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:44 +0000 (12:52 -0500)]
Include time.h for ctime() prototype.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:36 +0000 (12:52 -0500)]
Do not close error pipe or debug fd via closefrom() as we need them
to report an exec error should one occur.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:24 +0000 (12:52 -0500)]
Document that a sudoUser may now be a group ID.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:14 +0000 (12:52 -0500)]
Add support for permitting access by group ID in addition to group name.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:52:03 +0000 (12:52 -0500)]
Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:48 +0000 (12:51 -0500)]
Replace UCB fnmatch.c with a non-recursive version written by
William A. Rowe Jr.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:34 +0000 (12:51 -0500)]
Fix typo, return_debug vs. debug_return
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:25 +0000 (12:51 -0500)]
Update Japanese sudoers translation from translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:51:09 +0000 (12:51 -0500)]
Make the env_reset descriptions consistent.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:58 +0000 (12:50 -0500)]
Do multiple expansion when expanding paths to the noexec file, sesh
and the plugin directory. Adapted from a diff by Mike Frysinger
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:44 +0000 (12:50 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:35 +0000 (12:50 -0500)]
Add ignore file; from Mike Frysinger
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:27 +0000 (12:50 -0500)]
no longer save old Makefile.in to .old
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:50:19 +0000 (12:50 -0500)]
regen
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:54 +0000 (12:49 -0500)]
Update to libtool 2.4.2
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:46 +0000 (12:49 -0500)]
Bump grammar version for #include and #includedir relative path support.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:35 +0000 (12:49 -0500)]
Add support for relative paths in #include and #includedir
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:26 +0000 (12:49 -0500)]
Fix install-plugin when shared objects are unsupported or disabled.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:16 +0000 (12:49 -0500)]
Don't write to sbp if it is NULL
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:49:08 +0000 (12:49 -0500)]
If LINGUAS is set, only install matching .mo files
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:54 +0000 (12:48 -0500)]
Fix non-dynamic (no dlopen) sudo build.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:46 +0000 (12:48 -0500)]
Don't error out if the user specified --disable-shared
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:35 +0000 (12:48 -0500)]
Use SUDO_CONV_DEBUG_MSG in the plugin instead of writing
directly to the debug file.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:23 +0000 (12:48 -0500)]
Make sudo_goodpath() return value bolean
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:48:11 +0000 (12:48 -0500)]
Remove obsolete securid auth method.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:58 +0000 (12:47 -0500)]
Prefix authentication functions with a "sudo_" prefix to avoid
namespace problems.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:46 +0000 (12:47 -0500)]
Remove the old Kerberos IV support
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:33 +0000 (12:47 -0500)]
Don't print garbage at the end of the custom lecture.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:26 +0000 (12:47 -0500)]
Add lexer tracing as debug@parser
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:47:14 +0000 (12:47 -0500)]
Add devdir before srcdir in include path and fix up dependecies
accordingly and add better devdir support to mkdep.pl. We also
need to #include <gram.h> not "gram.h" and <def_data.h> and not
"def_data.h" when generating the parser in a build dir.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:46:15 +0000 (12:46 -0500)]
Mark libexec files as optional. If we build without shared object
support, libexec is not used.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:46:02 +0000 (12:46 -0500)]
Change Debug sudo.conf setting to take a program name as the first
argument. In the future, this will allow visudo and sudoreplay to
use their own Debug entries.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:51 +0000 (12:45 -0500)]
fix sudo_debug_printf priority
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:40 +0000 (12:45 -0500)]
add missing debug_return_int
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:16 +0000 (12:45 -0500)]
Fold SUDO_DEBUG_PROGERR and SUDO_DEBUG_SYSERR into SUDO_DEBUG_ERROR
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:45:05 +0000 (12:45 -0500)]
Add missing word in HOME security note.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:55 +0000 (12:44 -0500)]
Prevent "testsudoers -d username" from trying to malloc(0).
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:34 +0000 (12:44 -0500)]
Tests for empty sudoers (should parse OK) and syntax errors within
a line (should report correct line number) both with and without
the trailing newline.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:19 +0000 (12:44 -0500)]
Print line number when there is a parser error.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:44:03 +0000 (12:44 -0500)]
Keep track of the last token returned. On error, if the last token was
COMMENT, decrement sudolineno since the error most likely occurred on
the preceding line. Previously we always uses sudolineno-1 which will
give the wrong line number for errors within a line.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:55 +0000 (12:43 -0500)]
update with sudo 1.8.3p1 info
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:42 +0000 (12:43 -0500)]
Fix crash when "sudo -g group -i" is run. Fixes bug 521
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:29 +0000 (12:43 -0500)]
Make alias_remove_recursive() return TRUE/FALSE as its callers
expect and remove two unused arguments. Fixes bug 519.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:19 +0000 (12:43 -0500)]
Add regress test for bugzilla 519
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:43:06 +0000 (12:43 -0500)]
Disable warning/error wrapping in regress tests.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:52 +0000 (12:42 -0500)]
Do compile-po as part of sync-po so that the .mo files get rebuild
automatically when we sync with translationproject.org
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:36 +0000 (12:42 -0500)]
check_addr needs to link with the network libraries on Solaris
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:25 +0000 (12:42 -0500)]
When matching a RunasAlias for a runas group, pass the alias in as
the group_list, not the user_list. From Daniel Kopecek.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:14 +0000 (12:42 -0500)]
We need to init the auth system regardless of whether we need a
password since we will be closing the PAM session in the monitor
process. Fixes a crash in the monitor on Solaris; bugzilla #518
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:42:01 +0000 (12:42 -0500)]
Get rid of done: label. If the child exits we still need to close
the pty, update utmp and restore the SELinux tty context.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:41:49 +0000 (12:41 -0500)]
Add debug_decl/debug_return (almost) everywhere.
Remove old sudo_debug() and convert users to sudo_debug_printf().
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:40:54 +0000 (12:40 -0500)]
Wrap error/errorx and warning/warningx functions with debug statements.
Disable wrapping for standalone sudoers programs as well as memory
allocation functions (to avoid infinite recursion).
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:40:43 +0000 (12:40 -0500)]
Add checks for __func__ and __FUNCTION__ and mention that we now
require a cpp that supports variadic macros.
--HG--
branch : 1.8
Todd C. Miller [Wed, 4 Jan 2012 17:40:27 +0000 (12:40 -0500)]
New debug framework for sudo and plugins using /etc/sudo.conf that
also supports function call tracing.
--HG--
branch : 1.8
Todd C. Miller [Wed, 30 Nov 2011 19:56:41 +0000 (14:56 -0500)]
No longer pass debug_file to plugin, plugins must now use CONV_DEBUG_MSG
Todd C. Miller [Wed, 30 Nov 2011 18:51:41 +0000 (13:51 -0500)]
Build PIE executables for newer Debian and Ubuntu
Todd C. Miller [Wed, 30 Nov 2011 14:14:11 +0000 (09:14 -0500)]
Include time.h for ctime() prototype.
Todd C. Miller [Wed, 30 Nov 2011 00:51:24 +0000 (19:51 -0500)]
Do not close error pipe or debug fd via closefrom() as we need them
to report an exec error should one occur.
Todd C. Miller [Tue, 29 Nov 2011 21:37:01 +0000 (16:37 -0500)]
Document that a sudoUser may now be a group ID.
Todd C. Miller [Tue, 29 Nov 2011 21:24:45 +0000 (16:24 -0500)]
Add support for permitting access by group ID in addition to group name.
Todd C. Miller [Tue, 29 Nov 2011 20:37:48 +0000 (15:37 -0500)]
Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
Todd C. Miller [Tue, 29 Nov 2011 19:57:08 +0000 (14:57 -0500)]
Replace UCB fnmatch.c with a non-recursive version written by
William A. Rowe Jr.
Todd C. Miller [Tue, 29 Nov 2011 19:41:00 +0000 (14:41 -0500)]
Fix typo, return_debug vs. debug_return
Todd C. Miller [Wed, 23 Nov 2011 20:04:09 +0000 (15:04 -0500)]
Update Japanese sudoers translation from translationproject.org
Todd C. Miller [Wed, 23 Nov 2011 15:42:32 +0000 (10:42 -0500)]
Make the env_reset descriptions consistent.
Todd C. Miller [Tue, 22 Nov 2011 19:53:47 +0000 (14:53 -0500)]
Do multiple expansion when expanding paths to the noexec file, sesh
and the plugin directory. Adapted from a diff by Mike Frysinger
Todd C. Miller [Tue, 22 Nov 2011 18:16:43 +0000 (13:16 -0500)]
regen
Todd C. Miller [Mon, 21 Nov 2011 21:44:21 +0000 (16:44 -0500)]
Add ignore file; from Mike Frysinger
Todd C. Miller [Mon, 21 Nov 2011 21:44:08 +0000 (16:44 -0500)]
no longer save old Makefile.in to .old
Todd C. Miller [Mon, 21 Nov 2011 21:43:46 +0000 (16:43 -0500)]
regen
Todd C. Miller [Mon, 21 Nov 2011 17:24:32 +0000 (12:24 -0500)]
Update to libtool 2.4.2
Todd C. Miller [Fri, 18 Nov 2011 17:02:43 +0000 (12:02 -0500)]
Bump grammar version for #include and #includedir relative path support.
Todd C. Miller [Fri, 18 Nov 2011 01:48:42 +0000 (20:48 -0500)]
Add support for relative paths in #include and #includedir
Todd C. Miller [Thu, 17 Nov 2011 21:45:52 +0000 (16:45 -0500)]
Fix install-plugin when shared objects are unsupported or disabled.
Todd C. Miller [Thu, 17 Nov 2011 21:33:32 +0000 (16:33 -0500)]
Don't write to sbp if it is NULL
Todd C. Miller [Wed, 16 Nov 2011 16:18:25 +0000 (11:18 -0500)]
Remove all sudo/sudoers .mo files on uninstall
If LINGUAS is set, only install matching .mo files
Todd C. Miller [Mon, 14 Nov 2011 02:24:54 +0000 (21:24 -0500)]
Fix non-dynamic (no dlopen) sudo build.
Todd C. Miller [Mon, 14 Nov 2011 02:24:02 +0000 (21:24 -0500)]
Don't error out if the user specified --disable-shared
Todd C. Miller [Sun, 13 Nov 2011 18:55:19 +0000 (13:55 -0500)]
Use SUDO_CONV_DEBUG_MSG in the plugin instead of writing
directly to the debug file.
Todd C. Miller [Sun, 13 Nov 2011 17:11:00 +0000 (12:11 -0500)]
Make sudo_goodpath() return value bolean
Todd C. Miller [Sun, 13 Nov 2011 16:54:06 +0000 (11:54 -0500)]
Remove obsolete securid auth method.
Todd C. Miller [Sun, 13 Nov 2011 16:46:39 +0000 (11:46 -0500)]
Prefix authentication functions with a "sudo_" prefix to avoid
namespace problems.
Todd C. Miller [Sun, 13 Nov 2011 14:12:43 +0000 (09:12 -0500)]
Remove the old Kerberos IV support
Todd C. Miller [Sat, 12 Nov 2011 18:08:13 +0000 (13:08 -0500)]
Don't print garbage at the end of the custom lecture.
Todd C. Miller [Sat, 12 Nov 2011 17:41:44 +0000 (12:41 -0500)]
Add lexer tracing as debug@parser
Todd C. Miller [Sat, 12 Nov 2011 17:18:44 +0000 (12:18 -0500)]
Revert
003bdb078a15 . We need to #include <gram.h> not "gram.h" and
<def_data.h> and not "def_data.h" when generating the parser in a
build dir.
Todd C. Miller [Tue, 8 Nov 2011 20:05:10 +0000 (15:05 -0500)]
Better devdir support in mkdep.pl
Todd C. Miller [Tue, 8 Nov 2011 19:10:34 +0000 (14:10 -0500)]
Add devdir before srcdir in include path and fix up dependecies
accordingly.
Todd C. Miller [Tue, 8 Nov 2011 19:09:48 +0000 (14:09 -0500)]
#include "gram.h" not <gram.h> and "def_data.h" and not <def_data.h>.
Todd C. Miller [Tue, 8 Nov 2011 13:38:21 +0000 (08:38 -0500)]
Mark libexec files as optional. If we build without shared object
support, libexec is not used.
Todd C. Miller [Tue, 8 Nov 2011 13:24:45 +0000 (08:24 -0500)]
Change Debug sudo.conf setting to take a program name as the first
argument. In the future, this will allow visudo and sudoreplay to
use their own Debug entries.
Todd C. Miller [Tue, 8 Nov 2011 13:22:48 +0000 (08:22 -0500)]
fix sudo_debug_printf priority
Todd C. Miller [Tue, 8 Nov 2011 13:22:07 +0000 (08:22 -0500)]
add missing debug_return_int
Todd C. Miller [Mon, 7 Nov 2011 21:33:49 +0000 (16:33 -0500)]
Fold SUDO_DEBUG_PROGERR and SUDO_DEBUG_SYSERR into SUDO_DEBUG_ERROR
Todd C. Miller [Mon, 7 Nov 2011 20:52:29 +0000 (15:52 -0500)]
Add missing word in HOME security note.
Todd C. Miller [Mon, 7 Nov 2011 13:44:05 +0000 (08:44 -0500)]
Prevent "testsudoers -d username" from trying to malloc(0).
Todd C. Miller [Sun, 6 Nov 2011 22:04:55 +0000 (17:04 -0500)]
Tests for empty sudoers (should parse OK) and syntax errors within
a line (should report correct line number) both with and without
the trailing newline.
Todd C. Miller [Sun, 6 Nov 2011 22:00:40 +0000 (17:00 -0500)]
Print line number when there is a parser error.