]> granicus.if.org Git - sudo/log
sudo
15 years agoconversation function no longer puts a newline at the end of info
Todd C. Miller [Wed, 10 Mar 2010 00:20:01 +0000 (19:20 -0500)]
conversation function no longer puts a newline at the end of info
or error messages.

15 years agoUse parent process group id instead of parent process id when checking
Todd C. Miller [Sun, 7 Mar 2010 12:45:17 +0000 (07:45 -0500)]
Use parent process group id instead of parent process id when checking
foreground status and suspending parent.  Fixes an issue when running
commands under /usr/bin/time and others.

15 years agotranscript option is now --with not --enable
Todd C. Miller [Sat, 6 Mar 2010 21:31:10 +0000 (16:31 -0500)]
transcript option is now --with not --enable

15 years agoAdd support to -u and -g flags
Todd C. Miller [Sat, 6 Mar 2010 21:29:59 +0000 (16:29 -0500)]
Add support to -u and -g flags
Check fmt_string retval
Add timeout for debugging purposes

15 years agoWire up SIGALRM handler
Todd C. Miller [Sat, 6 Mar 2010 19:34:23 +0000 (14:34 -0500)]
Wire up SIGALRM handler
Set close on exec flag for child side of the socketpair
Fix signal handling when not doing I/O logging

15 years agog/c unused SIGCHLD handler
Todd C. Miller [Sat, 6 Mar 2010 19:29:32 +0000 (14:29 -0500)]
g/c unused SIGCHLD handler

15 years agoDon't use emalloc() in fmt_string(); we want to be able to use it from
Todd C. Miller [Sat, 6 Mar 2010 19:29:04 +0000 (14:29 -0500)]
Don't use emalloc() in fmt_string(); we want to be able to use it from
a plugin.

15 years agotq_remove not list_remove
Todd C. Miller [Sat, 6 Mar 2010 19:28:26 +0000 (14:28 -0500)]
tq_remove not list_remove

15 years agoAUTH_OBJS should contain .lo files not .o files.
Todd C. Miller [Sat, 6 Mar 2010 12:36:02 +0000 (07:36 -0500)]
AUTH_OBJS should contain .lo files not .o files.

15 years agoSimplify conversion of command line args to name=value pairs.
Todd C. Miller [Fri, 5 Mar 2010 22:14:19 +0000 (17:14 -0500)]
Simplify conversion of command line args to name=value pairs.

15 years agoHandle NULL reply from conversation function
Todd C. Miller [Fri, 5 Mar 2010 22:13:42 +0000 (17:13 -0500)]
Handle NULL reply from conversation function

15 years agoDon't depend on emalloc/erealloc
Todd C. Miller [Fri, 5 Mar 2010 21:52:04 +0000 (16:52 -0500)]
Don't depend on emalloc/erealloc

15 years agoUse $(OBJS) instead of sample_plugin.lo
Todd C. Miller [Fri, 5 Mar 2010 19:44:04 +0000 (14:44 -0500)]
Use $(OBJS) instead of sample_plugin.lo

15 years agorunas_user is in settings not user_info
Todd C. Miller [Fri, 5 Mar 2010 19:39:13 +0000 (14:39 -0500)]
runas_user is in settings not user_info

15 years agoFix a mismatch between sudo_settings and settings_pairs that causes
Todd C. Miller [Fri, 5 Mar 2010 19:38:42 +0000 (14:38 -0500)]
Fix a mismatch between sudo_settings and settings_pairs that causes
some settings to get the wrong values.

15 years agoConvert to ANSI C
Todd C. Miller [Fri, 5 Mar 2010 01:18:22 +0000 (20:18 -0500)]
Convert to ANSI C

15 years agoFix strlcpy() return value check.
Todd C. Miller [Thu, 4 Mar 2010 17:06:42 +0000 (12:06 -0500)]
Fix strlcpy() return value check.

15 years agoNo longer need to substitute in script.o and pty.o; I/O logging support
Todd C. Miller [Thu, 4 Mar 2010 13:12:36 +0000 (08:12 -0500)]
No longer need to substitute in script.o and pty.o; I/O logging support
is always built.

15 years agoAdd fallback to /bin/sh when execve() fails with ENOEXEC.
Todd C. Miller [Sun, 28 Feb 2010 20:10:18 +0000 (15:10 -0500)]
Add fallback to /bin/sh when execve() fails with ENOEXEC.

15 years agoAdd estrndup()
Todd C. Miller [Sun, 28 Feb 2010 20:09:50 +0000 (15:09 -0500)]
Add estrndup()

15 years agoRefactor script_execve() a bit so that it can be used in non-script
Todd C. Miller [Sat, 27 Feb 2010 21:53:56 +0000 (16:53 -0500)]
Refactor script_execve() a bit so that it can be used in non-script
mode.  Needs more cleanup.

15 years agoIgnore empty entries in command_info list
Todd C. Miller [Sat, 27 Feb 2010 18:36:30 +0000 (13:36 -0500)]
Ignore empty entries in command_info list

15 years agoAdd tq_remove
Todd C. Miller [Sat, 27 Feb 2010 18:17:58 +0000 (13:17 -0500)]
Add tq_remove

15 years agoPass timeout to tgetpass()
Todd C. Miller [Sat, 27 Feb 2010 17:39:18 +0000 (12:39 -0500)]
Pass timeout to tgetpass()

15 years agoAdd ChangeLog target
Todd C. Miller [Sat, 27 Feb 2010 17:37:49 +0000 (12:37 -0500)]
Add ChangeLog target

15 years agoBump version and update things slightly for sudo 1.8.0
Todd C. Miller [Sat, 27 Feb 2010 15:05:04 +0000 (10:05 -0500)]
Bump version and update things slightly for sudo 1.8.0

15 years agoSudo now requires an ANSI/ISO C compiler
Todd C. Miller [Sat, 27 Feb 2010 15:04:39 +0000 (10:04 -0500)]
Sudo now requires an ANSI/ISO C compiler

15 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:29:59 +0000 (09:29 -0500)]
Convert to ANSI C

15 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:26:43 +0000 (09:26 -0500)]
Convert to ANSI C

15 years agoConvert to ANSI C
Todd C. Miller [Sat, 27 Feb 2010 14:23:25 +0000 (09:23 -0500)]
Convert to ANSI C

15 years agoMake user_details extern so tgetpass can get at the uid and gid.
Todd C. Miller [Thu, 25 Feb 2010 00:53:45 +0000 (19:53 -0500)]
Make user_details extern so tgetpass can get at the uid and gid.
Set uid/gid to user before executing askpass program.
Check environment for SUDO_ASKPASS and use that if set.
TODO: a way for the policy to set the askpass program itself

15 years agoNo longer need sudo_usage.h in sudo.c
Todd C. Miller [Wed, 24 Feb 2010 12:49:16 +0000 (07:49 -0500)]
No longer need sudo_usage.h in sudo.c

15 years agoDocument -D level command line flag which maps to the debug_level setting.
Todd C. Miller [Wed, 24 Feb 2010 12:48:53 +0000 (07:48 -0500)]
Document -D level command line flag which maps to the debug_level setting.

15 years agoDocument debug_level in plugin doc. Still need to document the -D
Todd C. Miller [Wed, 24 Feb 2010 11:35:45 +0000 (06:35 -0500)]
Document debug_level in plugin doc.  Still need to document the -D
flag in sudo itself.

15 years agoinclude missing,h for vasprintf
Todd C. Miller [Mon, 22 Feb 2010 02:27:57 +0000 (21:27 -0500)]
include missing,h for vasprintf

15 years agoRename plugin.pod -> sudo_plugin.pod and wire into Makefile
Todd C. Miller [Mon, 22 Feb 2010 02:24:20 +0000 (21:24 -0500)]
Rename plugin.pod -> sudo_plugin.pod and wire into Makefile

15 years agoNeed to include limits.h
Todd C. Miller [Mon, 22 Feb 2010 02:19:07 +0000 (21:19 -0500)]
Need to include limits.h

15 years agoNo more sudo_getpw*
Todd C. Miller [Mon, 22 Feb 2010 02:18:52 +0000 (21:18 -0500)]
No more sudo_getpw*

15 years agoAdd missing compat bits
Todd C. Miller [Mon, 22 Feb 2010 02:15:38 +0000 (21:15 -0500)]
Add missing compat bits

15 years agocompat files should not include sudo.h
Todd C. Miller [Sun, 21 Feb 2010 21:41:19 +0000 (16:41 -0500)]
compat files should not include sudo.h
wire up compat in sample plugin

15 years agoFix up compat dependencies.
Todd C. Miller [Sun, 21 Feb 2010 21:12:01 +0000 (16:12 -0500)]
Fix up compat dependencies.
Fix distclean target in doc/Makefile.in

15 years agoFix typo
Todd C. Miller [Sun, 21 Feb 2010 20:32:59 +0000 (15:32 -0500)]
Fix typo

15 years agoLog input and output to temp files for proof of concept.
Todd C. Miller [Sun, 21 Feb 2010 19:19:22 +0000 (14:19 -0500)]
Log input and output to temp files for proof of concept.

15 years agoAdd doc Makefile.in and wire it up
Todd C. Miller [Sun, 21 Feb 2010 18:37:52 +0000 (13:37 -0500)]
Add doc Makefile.in and wire it up

15 years agoHandle SIGSTOP in addition to SIGTSTP. Fixes a problem with suspending
Todd C. Miller [Sun, 21 Feb 2010 15:36:50 +0000 (10:36 -0500)]
Handle SIGSTOP in addition to SIGTSTP.  Fixes a problem with suspending
a shell with the "suspend" builtint.

15 years agoIn child, handle parent side of the pipe going away.
Todd C. Miller [Sun, 21 Feb 2010 15:30:43 +0000 (10:30 -0500)]
In child, handle parent side of the pipe going away.

15 years agoNo longer need to check for explicit death of the child (process #2)
Todd C. Miller [Sun, 21 Feb 2010 15:26:30 +0000 (10:26 -0500)]
No longer need to check for explicit death of the child (process #2)
since if it dies we will get EPIPE from the socketpair.
Fix a sizeof() that was causing a spurious error.
Convert SCRIPT_DEBUG to sudo_debug.

15 years agoMake sudo_debug do a single vfprintf() which will result in a single
Todd C. Miller [Sun, 21 Feb 2010 15:24:27 +0000 (10:24 -0500)]
Make sudo_debug do a single vfprintf() which will result in a single
write call on most systems.  Avoids problems with interleaved debug
printf from different processes.  Also remove an extraneous error case
since recv() can't return a short read and add some more XXX.

15 years agoFix uninitialized variable.
Todd C. Miller [Sat, 20 Feb 2010 20:13:11 +0000 (15:13 -0500)]
Fix uninitialized variable.

15 years agoFix sudo install target
Todd C. Miller [Sat, 20 Feb 2010 19:47:43 +0000 (14:47 -0500)]
Fix sudo install target

15 years agoWire up debug_level
Todd C. Miller [Sat, 20 Feb 2010 18:25:10 +0000 (13:25 -0500)]
Wire up debug_level

15 years agoFix dependencies
Todd C. Miller [Sat, 20 Feb 2010 18:24:50 +0000 (13:24 -0500)]
Fix dependencies

15 years agoFix setting of plugin dir
Todd C. Miller [Sat, 20 Feb 2010 18:20:57 +0000 (13:20 -0500)]
Fix setting of plugin dir

15 years agoadd clean targets
Todd C. Miller [Sat, 20 Feb 2010 14:53:05 +0000 (09:53 -0500)]
add clean targets

15 years agoAdd missing source for sudo front end
Todd C. Miller [Sat, 20 Feb 2010 14:47:46 +0000 (09:47 -0500)]
Add missing source for sudo front end

15 years agoSample plugin demonstrating the sudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:42:16 +0000 (09:42 -0500)]
Sample plugin demonstrating the sudo plugin API

15 years agoModular sudo front-end which loads policy and I/O plugins that do
Todd C. Miller [Sat, 20 Feb 2010 14:41:49 +0000 (09:41 -0500)]
Modular sudo front-end which loads policy and I/O plugins that do
most the actual work.  Currently relies on dynamic loading using
dlopen().  See doc/plugin.pod for the plugin API.

15 years agoSudo plugin API
Todd C. Miller [Sat, 20 Feb 2010 14:30:27 +0000 (09:30 -0500)]
Sudo plugin API

15 years agoReplace emul/include.h with compat/include.h to match new source
Todd C. Miller [Sat, 20 Feb 2010 14:22:30 +0000 (09:22 -0500)]
Replace emul/include.h with compat/include.h to match new source
tree layout.

15 years agoInclude missing.h for memrchr() proto
Todd C. Miller [Sat, 20 Feb 2010 14:17:54 +0000 (09:17 -0500)]
Include missing.h for memrchr() proto

15 years agoRework source layout in preparation for modular sudo.
Todd C. Miller [Sat, 20 Feb 2010 14:14:01 +0000 (09:14 -0500)]
Rework source layout in preparation for modular sudo.

15 years agoAvoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Sat, 13 Feb 2010 12:32:05 +0000 (07:32 -0500)]
Avoid a duplicate fclose() of the sudoers file.

15 years agoFix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Sat, 13 Feb 2010 12:31:38 +0000 (07:31 -0500)]
Fix size arg when realloc()ing include stack.  From Daniel Kopecek

15 years agoUse setrlimit64(), if available, instead of setrlimit() when setting
Todd C. Miller [Sat, 13 Feb 2010 12:30:56 +0000 (07:30 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.

15 years agoFix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 13 Feb 2010 12:30:31 +0000 (07:30 -0500)]
Fix use after free when sending error messages.  From Timo Juhani Lindfors

15 years agoGenerate the ChangeLog as part of "make dist" instead of having it
Todd C. Miller [Sat, 13 Feb 2010 12:29:36 +0000 (07:29 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.

15 years agoAvoid a duplicate fclose() of the sudoers file.
Todd C. Miller [Tue, 9 Feb 2010 15:43:20 +0000 (10:43 -0500)]
Avoid a duplicate fclose() of the sudoers file.

--HG--
branch : 1.7

15 years agoFix size arg when realloc()ing include stack. From Daniel Kopecek
Todd C. Miller [Tue, 9 Feb 2010 13:28:03 +0000 (08:28 -0500)]
Fix size arg when realloc()ing include stack.  From Daniel Kopecek

--HG--
branch : 1.7

15 years agoUse setrlimit64(), if available, instead of setrlimit() when setting
Todd C. Miller [Sat, 6 Feb 2010 20:16:04 +0000 (15:16 -0500)]
Use setrlimit64(), if available, instead of setrlimit() when setting
AIX resource limits since rlim_t is 32bits.

--HG--
branch : 1.7

15 years agoFix use after free when sending error messages. From Timo Juhani Lindfors
Todd C. Miller [Sat, 6 Feb 2010 17:43:26 +0000 (12:43 -0500)]
Fix use after free when sending error messages.  From Timo Juhani Lindfors

--HG--
branch : 1.7

15 years agoGenerate the ChangeLog as part of "make dist" instead of having it
Todd C. Miller [Mon, 18 Jan 2010 12:12:06 +0000 (07:12 -0500)]
Generate the ChangeLog as part of "make dist" instead of having it
in the repo.

--HG--
branch : 1.7

15 years agoGenerate correct ChangeLog for 1.7 branch.
Todd C. Miller [Mon, 18 Jan 2010 00:55:11 +0000 (19:55 -0500)]
Generate correct ChangeLog for 1.7 branch.

--HG--
branch : 1.7

15 years agoRemove CVS $Sudo$ tags.
Todd C. Miller [Mon, 18 Jan 2010 00:51:28 +0000 (19:51 -0500)]
Remove CVS $Sudo$ tags.

15 years agoupdate tags
convert-repo [Mon, 18 Jan 2010 05:45:25 +0000 (05:45 +0000)]
update tags

15 years agomake this match sudoers SYNOPSIS
Todd C. Miller [Sat, 26 Dec 2009 23:48:09 +0000 (23:48 +0000)]
make this match sudoers SYNOPSIS

15 years agoPrint a newline between Runas and Command-specific defaults in
Todd C. Miller [Sat, 26 Dec 2009 17:25:49 +0000 (17:25 +0000)]
Print a newline between Runas and Command-specific defaults in
sudo -l.

15 years agoUse SET and CLR macros in term_raw
Todd C. Miller [Sat, 26 Dec 2009 01:50:25 +0000 (01:50 +0000)]
Use SET and CLR macros in term_raw

15 years agoSet stdin to non-blocking mode early instead of in check_input.
Todd C. Miller [Sat, 26 Dec 2009 01:49:25 +0000 (01:49 +0000)]
Set stdin to non-blocking mode early instead of in check_input.
Use term_raw instead of term_cbreak since the data we get has
already been expanded via OPOST.

15 years agoEnable/disable all postprocessing instead of just nl->crnl processing
Todd C. Miller [Wed, 23 Dec 2009 23:53:04 +0000 (23:53 +0000)]
Enable/disable all postprocessing instead of just nl->crnl processing
since things like tab expansion matter too.  However, if stdout is
a tty leave postprocessing on in the pty since we run into problems
doing it only on the real stdout with .e.g nvi.

15 years agoIf tty_tickets is enabled and there is no tty, prompt for a password.
Todd C. Miller [Sat, 19 Dec 2009 23:04:58 +0000 (23:04 +0000)]
If tty_tickets is enabled and there is no tty, prompt for a password.
Do not lecture user for "sudo -k command" if user has a timestamp.

15 years agoDocument missing options: --with-efence and --with-bsm-audit
Todd C. Miller [Sat, 19 Dec 2009 21:57:33 +0000 (21:57 +0000)]
Document missing options: --with-efence and --with-bsm-audit

15 years agousername -> user name
Todd C. Miller [Sat, 19 Dec 2009 21:44:06 +0000 (21:44 +0000)]
username -> user name
groupname -> group name
hostname -> host name

15 years agofilename -> file name like the rest of the docs
Todd C. Miller [Sat, 19 Dec 2009 21:33:25 +0000 (21:33 +0000)]
filename -> file name like the rest of the docs

15 years agoFix printing of entries with multiple host entries on a single line.
Todd C. Miller [Thu, 17 Dec 2009 15:02:06 +0000 (15:02 +0000)]
Fix printing of entries with multiple host entries on a single line.

15 years agoMention that targetpw affects the timestamp file name.
Todd C. Miller [Mon, 14 Dec 2009 23:53:05 +0000 (23:53 +0000)]
Mention that targetpw affects the timestamp file name.

15 years agoAdd compress_transcript option.
Todd C. Miller [Mon, 14 Dec 2009 01:49:50 +0000 (01:49 +0000)]
Add compress_transcript option.

15 years agobump to 1.7.3b2
Todd C. Miller [Sun, 13 Dec 2009 22:26:32 +0000 (22:26 +0000)]
bump to 1.7.3b2

15 years agoBetter split of membership vs. traditional group check in user_in_group().
Todd C. Miller [Sun, 13 Dec 2009 22:24:34 +0000 (22:24 +0000)]
Better split of membership vs. traditional group check in user_in_group().
Allow user_ngroups to be < 0 if getgroups() fails.

15 years agoFix pasto and add default return value.
Todd C. Miller [Sat, 12 Dec 2009 16:27:02 +0000 (16:27 +0000)]
Fix pasto and add default return value.

15 years agorefactor group member checking into user_in_group()
Todd C. Miller [Sat, 12 Dec 2009 16:12:26 +0000 (16:12 +0000)]
refactor group member checking into user_in_group()

15 years agoAdd support for mbr_check_membership() as present in darwin.
Todd C. Miller [Sat, 12 Dec 2009 15:37:52 +0000 (15:37 +0000)]
Add support for mbr_check_membership() as present in darwin.

15 years agoRename label to be accurate
Todd C. Miller [Thu, 10 Dec 2009 19:37:56 +0000 (19:37 +0000)]
Rename label to be accurate

15 years agoTreat timestamp files from before we booted as old. Idea from and
Todd C. Miller [Thu, 10 Dec 2009 16:59:27 +0000 (16:59 +0000)]
Treat timestamp files from before we booted as old.  Idea from and
Apple patch.

15 years agoAllow the -u flag to be used in conjunction with the -v flag as per
Todd C. Miller [Wed, 9 Dec 2009 16:19:30 +0000 (16:19 +0000)]
Allow the -u flag to be used in conjunction with the -v flag as per
older versions of sudo.

15 years agofix typo in last commit
Todd C. Miller [Wed, 9 Dec 2009 16:05:02 +0000 (16:05 +0000)]
fix typo in last commit

15 years agoConvert fmt_first and fmt_confd into macros.
Todd C. Miller [Tue, 8 Dec 2009 22:19:49 +0000 (22:19 +0000)]
Convert fmt_first and fmt_confd into macros.

15 years agotimeouts can be floats now
Todd C. Miller [Tue, 8 Dec 2009 21:58:16 +0000 (21:58 +0000)]
timeouts can be floats now

15 years agoAdd support for floating point timeout values (e.g. 2.5 minutes).
Todd C. Miller [Tue, 8 Dec 2009 21:49:53 +0000 (21:49 +0000)]
Add support for floating point timeout values (e.g. 2.5 minutes).

15 years agoThe -L flag will be removed in sudo 1.7.4
Todd C. Miller [Mon, 7 Dec 2009 00:11:43 +0000 (00:11 +0000)]
The -L flag will be removed in sudo 1.7.4

15 years agoFix a bug due to order of operators.
Todd C. Miller [Sun, 6 Dec 2009 17:10:36 +0000 (17:10 +0000)]
Fix a bug due to order of operators.