Annotation of embedaddon/sudo/ChangeLog, revision 1.1.1.1
1.1 misho 1: 2012-01-24 Todd C. Miller <Todd.Miller@courtesan.com>
2:
3: * src/sudo.c:
4: Fixed a format string vulnerability when the sudo binary (or a
5: symbolic link to the sudo binary) contains printf format escapes
6: and the -D (debugging) flag is used.
7:
8: 2012-01-13 Todd C. Miller <Todd.Miller@courtesan.com>
9:
10: * sudo.pp:
11: Include parent directories in case they don't already exist. This
12: fixes a directory permissions problem with the AIX package when the
13: /usr/local directories don't already exist.
14:
15: 2011-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
16:
17: * plugins/sudoers/Makefile.in:
18: check_addr needs to link with the network libraries on Solaris
19: [322bd70e316e]
20:
21: * plugins/sudoers/match.c:
22: When matching a RunasAlias for a runas group, pass the alias in as
23: the group_list, not the user_list. From Daniel Kopecek.
24: [766545edf141]
25:
26: * plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
27: We need to init the auth system regardless of whether we need a
28: password since we will be closing the PAM session in the monitor
29: process. Fixes a crash in the monitor on Solaris; bugzilla #518
30: [e82809f86fb3]
31:
32: 2011-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
33:
34: * .hgtags:
35: Added tag SUDO_1_8_3 for changeset 82bec4d3a203
36: [6c953ef6f577] <1.8>
37:
38: * Update Japanese sudoers translation from translationproject.org
39: [82bec4d3a203] [SUDO_1_8_3] <1.8>
40:
41: 2011-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
42:
43: * configure, configure.in:
44: Override and ignore the --disable-static option. Sudo already runs
45: libtool with -tag=disable-static where applicable and we need non-
46: PIC objects to build the executables.
47: [dff177464029] <1.8>
48:
49: 2011-10-10 Todd C. Miller <Todd.Miller@courtesan.com>
50:
51: * NEWS:
52: Add sudoedit fix
53: [3238dc7e4fb2] <1.8>
54:
55: * plugins/sudoers/po/sudoers.pot:
56: regen pot files
57: [7981d6cbf1ab] <1.8>
58:
59: * Ignore set_logname (which is now the default) for sudoedit since we
60: want the LOGNAME, USER and USERNAME environment variables to refer
61: to the calling user since that is who the editor runs as. This
62: allows the editor to find the user's startup files. Fixes bugzilla
63: #515
64: [3b9486e5fddb] <1.8>
65:
66: * Instead of trying to grow the buffer in make_grlist_item(), simply
67: increase the total length, free the old buffer and allocate a new
68: one. This is less error prone and saves us from having to adjust
69: all the pointers in the buffer. This code path is only taken when
70: there are groups longer than the length of the user field in struct
71: utmp or utmpx, which should be quite rare.
72: [cb7c5ac834b5] <1.8>
73:
74: * Add Italian translation for sudo from translationproject.org
75: [c7876fccbc38] <1.8>
76:
77: * NEWS:
78: Japanese translation for sudo and sudoers from
79: translationproject.org
80: [9945a3ef7ff7] <1.8>
81:
82: 2011-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
83:
84: * sudoreplay depends on timestr.lo too; from Mike Frysinger
85: [ad9ae493205f] <1.8>
86:
87: 2011-10-04 Todd C. Miller <Todd.Miller@courtesan.com>
88:
89: * plugins/sudoers/po/sudoers.pot:
90: Regen sudoers pot file.
91: [2c4d99361994] <1.8>
92:
93: * NEWS:
94: Update with latest sudo 1.8.3 news
95: [4e7f59d339d4] <1.8>
96:
97: * ldap_start_tls_s() on Debian (at least) sets the effective and saved
98: uids to the same value as the real uid. This prevents sudo from
99: setting the uid or gid later on. As a workaround, we now set perms
100: to root during sudoers_policy_open().
101: [eb4c4f15833a] <1.8>
102:
103: * Better warning message on setuid() failure for the setreuid()
104: version of set_perms().
105: [308c72f601e4] <1.8>
106:
107: 2011-10-02 Todd C. Miller <Todd.Miller@courtesan.com>
108:
109: * NEWS:
110: Combine new translations in NEWS item
111: [0aa07471a5e6] <1.8>
112:
113: 2011-09-27 Todd C. Miller <Todd.Miller@courtesan.com>
114:
115: * Delref auth_pw at the end of check_user() instead of getting a ref
116: twice.
117: [1c882f2fb46c] <1.8>
118:
119: * Make sudo_auth_{init,cleanup} return TRUE on success and check for
120: sudo_auth_init() return value in check_user().
121: [573bf35ecac9] <1.8>
122:
123: * Do not return without restoring permissions.
124: [2444a0b96469] <1.8>
125:
126: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
127: regen pot files
128: [d286bce8dbb1] <1.8>
129:
130: * NEWS:
131: Update for latest release candidate
132: [63d184ba6263] <1.8>
133:
134: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
135: regen pot files
136: [ac3ec1315df7] <1.8>
137:
138: * Modify the authentication API such that the init and cleanup
139: functions are always called, regardless of whether or not we are
140: going to verify a password. This is needed for proper PAM session
141: support.
142: [ea281ca46d94] <1.8>
143:
144: * Add missing dependency for getspwgen other depends.
145: [9c124272910d] <1.8>
146:
147: * Fix a PAM_USER mismatch in session open/close. We update PAM_USER
148: to the target user immediately before setting resource limits, which
149: is after the monitor process has forked (so it has the old value).
150: Also, if the user did not authenticate, there is no pamh in the
151: monitor so we need to init pam here too. This means we end up
152: calling pam_start() twice, which should be fixed, but at least the
153: session is always properly closed now.
154: [d0866ee5f190] <1.8>
155:
156: * Add check for old being NULL in utmp_setid(); from Steven McDonald
157: [30cc283ac2b4] <1.8>
158:
159: 2011-09-25 Todd C. Miller <Todd.Miller@courtesan.com>
160:
161: * If the invoking user cannot be resolved by uid fake the struct
162: passwd and store it in the cache so we can delref it on exit.
163: [19d44f44d45d] <1.8>
164:
165: 2011-09-24 Todd C. Miller <Todd.Miller@courtesan.com>
166:
167: * Don't error out if the group plugin cannot be loaded, just warn.
168: [e91d9912c9a0] <1.8>
169:
170: 2011-09-23 Todd C. Miller <Todd.Miller@courtesan.com>
171:
172: * Quiet a false positive found by several static analysis tools. These
173: tools don't know that log_error() does not return (it longjmps to
174: error_jmp which returns to the sudo front-end).
175: [3cc319e31ed6] <1.8>
176:
177: 2011-09-22 Todd C. Miller <Todd.Miller@courtesan.com>
178:
179: * Add Italian translation for sudo from translationproject.org Regen
180: .mo files
181: [c0b27f9d7e57] <1.8>
182:
183: * .hgtags:
184: Added tag SUDO_1_8_2 for changeset 3682e51af1d0
185: [f0be566e9ea2] <1.8>
186:
187: 2011-09-21 Todd C. Miller <Todd.Miller@courtesan.com>
188:
189: * Update to current reality and add bit about ssh auth
190: [48dcb86ce9be] <1.8>
191:
192: * Make "verbose" static; fixes a namespace clash with
193: pam_ssh_agent_auth (and it doesn't need to be extern these days).
194: [b60fdd82de94] <1.8>
195:
196: * configure, configure.in:
197: FreeBSD has libutil.h not util.h
198: [c03b121e0193] <1.8>
199:
200: * configure, configure.in:
201: Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
202: [002e3e0bb173] <1.8>
203:
204: * Update po files from translationproject.org
205: [2b36af902213] <1.8>
206:
207: 2011-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
208:
209: * NEWS:
210: Mention DEREF support
211: [dfeb152f1686] <1.8>
212:
213: * plugins/sudoers/po/sudoers.pot:
214: sync pot files
215: [1fba22e927a3] <1.8>
216:
217: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
218: Add support for DEREF in ldap.conf.
219: [fe1cf6ad0add] <1.8>
220:
221: * Makefile.in:
222: install target should depend on ChangeLog too, not just install-doc
223: [f54e2ab633b8] <1.8>
224:
225: * NEWS, configure.in, doc/sudoers.cat, doc/sudoers.man.in:
226: Only iolog_file (not iolog_dir) supports mktemp-style suffixes.
227: [44a25099594e] <1.8>
228:
229: * configure.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
230: regen pot files
231: [e14ee85cf49b] <1.8>
232:
233: * configure, configure.in:
234: Fix some square brackets in case statements that needed to be
235: doubled up. While here, use $OSMAJOR when it makes sense.
236: [853c6e5f994c] <1.8>
237:
238: * Fix a crash in make_grlist_item() on 64-bit machines with strict
239: alignment.
240: [e877c89ae32f] <1.8>
241:
242: * Remove list_options() function that is no longer used now that "sudo
243: -L" is gone.
244: [f31543c80b98] <1.8>
245:
246: * configure, configure.in:
247: Error message if user tries --with-CC
248: [0ed7558b8924] <1.8>
249:
250: * configure, configure.in:
251: Check for -libmldap too when looking for ldap libs, which is the
252: Tivoli Directory Server client library.
253: [831e32d1453c] <1.8>
254:
255: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
256: regen pot files for 1.8.3
257: [df2fb085cff2] <1.8>
258:
259: * NEWS, configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
260: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
261: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
262: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
263: doc/visudo.man.in:
264: Update for version 1.8.3
265: [38cf153add0a] <1.8>
266:
267: 2011-09-09 Todd C. Miller <Todd.Miller@courtesan.com>
268:
269: * Honor NOPASSWD tag for denied commands too.
270: [f473c443ad54] <1.8>
271:
272: * INSTALL, configure, configure.in:
273: Remove --with-CC option; it doesn't work correctly now that we use
274: libtool. Users can get the same effect by setting the CC
275: environment variable when running configure.
276: [4f04869d74fd] <1.8>
277:
278: 2011-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
279:
280: * configure, configure.in:
281: Assume all modern systems support fstat(2).
282: [0422b19dced3] <1.8>
283:
284: 2011-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
285:
286: * configure, configure.in:
287: Add configure test for missing errno declaration and only declare it
288: ourselves if it is missing.
289: [6d26974f7e16] <1.8>
290:
291: * Include errno.h before sudo.h to avoid conflicting with the system
292: definition of errno.
293: [8000bdc0968f] <1.8>
294:
295: 2011-08-29 Todd C. Miller <Todd.Miller@courtesan.com>
296:
297: * Only print individual check status when there is a failure.
298: [bbdd669e7615] <1.8>
299:
300: * Add calls to setprogname() for test programs.
301: [c721f3466a3a] <1.8>
302:
303: * configure, configure.in:
304: Add -Wall and -Werror after all tests so they don't cause failures.
305: [20d75ce40086] <1.8>
306:
307: * Actually run check_addr in the check target
308: [dcd96ef0dc57] <1.8>
309:
310: * Split out address matching into its own file and add regression
311: tests for it.
312: [863f28589c24] <1.8>
313:
314: 2011-08-27 Todd C. Miller <Todd.Miller@courtesan.com>
315:
316: * Fix matching a network number with netmask when the network number
317: is not the first address in the CIDR block.
318: [719942c986e9] <1.8>
319:
320: 2011-08-26 Todd C. Miller <Todd.Miller@courtesan.com>
321:
322: * Don't assume all editors support the +linenumber command line
323: argument, use a whitelist of known good editors.
324: [d8d884af3b05] <1.8>
325:
326: 2011-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
327:
328: * Silence compiler warnings on Solaris with gcc 3.4.3
329: [8047cdb5d6a1] <1.8>
330:
331: * Fix building on RHEL 3
332: [6bb0464a7450] <1.8>
333:
334: * INSTALL, configure, configure.in:
335: Add --enable-werror configure option.
336: [aa40fd459836] <1.8>
337:
338: * setgroups() proto lives in grp.h on RHEL4, perhaps others.
339: [92f98cbaebf0] <1.8>
340:
341: * configure, configure.in:
342: Use PAM by default on AIX 6 and higher.
343: [7ef53d5ac819] <1.8>
344:
345: 2011-08-22 Todd C. Miller <Todd.Miller@courtesan.com>
346:
347: * Add new Esperanto translation from translationproject.org
348: [109ed683b885] <1.8>
349:
350: 2011-08-19 Todd C. Miller <Todd.Miller@courtesan.com>
351:
352: * Quiet an innocuous valgrind warning.
353: [fc453e49f9dd] <1.8>
354:
355: 2011-08-18 Todd C. Miller <Todd.Miller@courtesan.com>
356:
357: * Fix expansion of strftime() escapes in log_dir and add a regress
358: test that exhibited the problem.
359: [784e60d21f11] <1.8>
360:
361: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
362: Fix "make check" return value.
363: [d3608efd8da6] <1.8>
364:
365: 2011-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
366:
367: * plugins/sudoers/po/sudoers.pot:
368: Regen pot files
369: [3682e51af1d0] [SUDO_1_8_2] <1.8>
370:
371: * Makefile.in:
372: Fix logic inversion in pot file up to date check.
373: [343dbbca9422] <1.8>
374:
375: * doc/sudo.cat, doc/sudo.man.in, doc/sudoers.cat,
376: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
377: doc/visudo.cat, doc/visudo.man.in:
378: regen docs
379: [96234478bde2] <1.8>
380:
381: 2011-08-15 Todd C. Miller <Todd.Miller@courtesan.com>
382:
383: * configure, configure.in:
384: Add caching for gettext() checks.
385: [4039d21424c3] <1.8>
386:
387: * configure, configure.in:
388: Better handling of libintl header and library mismatch.
389: [cc9faee8e486] <1.8>
390:
391: 2011-08-14 Todd C. Miller <Todd.Miller@courtesan.com>
392:
393: * NEWS:
394: sync
395: [73649a44d934] <1.8>
396:
397: 2011-08-13 Todd C. Miller <Todd.Miller@courtesan.com>
398:
399: * Also check sudoers gid if sudoers is group writable.
400: [3d345347f6ac] <1.8>
401:
402: * NEWS:
403: Update for 1.8.2 final
404: [441c22fea363] <1.8>
405:
406: 2011-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
407:
408: * configure, configure.in:
409: If dlopen is present but libtool doesn't find it, error out since it
410: probably means that libtool doesn't support the system.
411: [6fc7c0de4f6d] <1.8>
412:
413: * configure args on the command line should override builtin defaults.
414: Disable NLS for non-Linux/Solaris unless explicitly enabled.
415: [0ef165f892c2] <1.8>
416:
417: * Fix loop that calls authenticate(). If there was an error message
418: from authenticate(), display it.
419: [f0686011ff2e] <1.8>
420:
421: 2011-08-11 Todd C. Miller <Todd.Miller@courtesan.com>
422:
423: * configure, configure.in:
424: Update to autoconf 2.68 and libtool 2.4
425: [00df5f3647e1] <1.8>
426:
427: * Fix typo; OPT should be OTP
428: [31da1f989740] <1.8>
429:
430: * Rename libsudoers convenience library to libparsesudoers to avoid
431: libtool confusion.
432: [e9ae9d611dd5] <1.8>
433:
434: 2011-08-10 Todd C. Miller <Todd.Miller@courtesan.com>
435:
436: * Add Danish sudoers translation from translationproject.org
437: [fa9cd9758249] <1.8>
438:
439: * Add dedicated callback function for runas_default sudoers setting
440: that only sets runas_pw if no runas user or group was specified by
441: the user.
442: [3fb4b18525de] <1.8>
443:
444: 2011-08-09 Todd C. Miller <Todd.Miller@courtesan.com>
445:
446: * Update Finish, Polish, Russian and Ukrainian translations from
447: translationproject.org.
448: [0fcd8f6aff0a] <1.8>
449:
450: * Makefile.in:
451: Go back to using a callback for runas_default to keep runas_pw in
452: sync. This is needed to make per-entry runas_default settings work
453: with LDAP-based sudoers. Instead of declaring it a callback in
454: def_data.in, sudo and testsudoers poke sudo_defs_table[] which is a
455: bit naughty, but avoids requiring stub functions in visudo and the
456: tests.
457: [4e8e70832f06] <1.8>
458:
459: 2011-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
460:
461: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
462: Regen pot files
463: [ca5c58c599a6] <1.8>
464:
465: * Makefile.in:
466: Add check for out of date message catalogs when doing "make dist".
467: [36414e5c762b] <1.8>
468:
469: 2011-08-02 Todd C. Miller <Todd.Miller@courtesan.com>
470:
471: * configure, configure.in:
472: Make sure compiler supports static-libgcc before using it.
473: [6c98e8809291] <1.8>
474:
475: 2011-08-01 Todd C. Miller <Todd.Miller@courtesan.com>
476:
477: * Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc
478: [a0a3a3fa6470] <1.8>
479:
480: 2011-07-30 Todd C. Miller <Todd.Miller@courtesan.com>
481:
482: * Add new Russian sudo translation from translationproject.org and
483: rebuild the other translation files.
484: [e953d7d1ca6d] <1.8>
485:
486: 2011-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
487:
488: * Update Finish and Polish translations from translationproject.org
489: [17e408d73c85] <1.8>
490:
491: * Go back to escaping the command args for "sudo -i" and "sudo -s"
492: before calling the plugin. Otherwise, spaces in the command args
493: are not treated properly. The sudoers plugin will unescape non-
494: spaces to make matching easier.
495: [f666191a4e80] <1.8>
496:
497: 2011-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
498:
499: * Fix some potential problems found by the clang static analyzer, none
500: serious.
501: [c1ab4b940980] <1.8>
502:
503: * Updated Ukranian and Chinese (simplified) po files from
504: translationproject.org
505: [792a66672715] <1.8>
506:
507: 2011-07-27 Todd C. Miller <Todd.Miller@courtesan.com>
508:
509: * Updated Polish translation from translationproject.org
510: [5f434cc04482] <1.8>
511:
512: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
513: Rebuild pot files
514: [639230dbd741] <1.8>
515:
516: * Don't try to audit failure if the runas user does not exist. We
517: don't have the user's command at this point so there is nothing to
518: audit. Add a NULL check in audit_success() and audit_failure() just
519: to be on the safe side.
520: [2bfb96a32b00] <1.8>
521:
522: * Add -g to CFLAG for PIE builds.
523: [e4c94977ca4e] <1.8>
524:
525: 2011-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
526:
527: * Remove fallback to per-group lookup when matching groups in sudoers.
528: The sudo front-end will now use getgrouplist() to get the user's
529: list of groups if getgroups() fails or returns zero groups so we
530: always have a list of the user's groups. For systems with
531: mbr_check_membership() which support more that NGROUPS_MAX groups
532: (Mac OS X), skip the call to getgroups() and use getgrouplist() so
533: we get all the groups.
534: [168d6d4a386b] <1.8>
535:
536: 2011-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
537:
538: * Fix setgroups() fallback code on EINVAL.
539: [dd1310945ab3] <1.8>
540:
541: * Fix two PERM_INITIAL cases that were still using user_gids.
542: [d497d0d47a23] <1.8>
543:
544: * Add Polish sudo message catalog
545: [1a0aa3f9f179] <1.8>
546:
547: * user_group is no longer used, remove it
548: [379185a76094] <1.8>
549:
550: 2011-07-21 Todd C. Miller <Todd.Miller@courtesan.com>
551:
552: * Add Polish translation from translationproject.org
553: [2e7cdfe4ef41] <1.8>
554:
555: * Add a wrapper for setgroups() that trims off extra groups and
556: retries if setgroups() fails. Also add some missing addrefs for
557: PERM_USER and PERM_FULL_USER.
558: [bacb4170a510] <1.8>
559:
560: * configure, configure.in:
561: Instead of keeping separate groups and gids arrays, create struct
562: group_info and use it to store both, along with a count for each.
563: Cache group info on a per-user basis using getgrouplist() to get the
564: groups. We no longer need special to special case the user or list
565: user for user_in_group() and thus no longer need to reset the groups
566: list when listing another user.
567: [f1d8962821a0] <1.8>
568:
569: * Don't rely on NULL since we don't include a header for it.
570: [ed46286f848b] <1.8>
571:
572: * Fix typo
573: [a38b8fbb0e70] <1.8>
574:
575: * Do not shadow global sudo_mode with a local variable in set_cmnd()
576: [8e462ebafea4] <1.8>
577:
578: 2011-07-17 Todd C. Miller <Todd.Miller@courtesan.com>
579:
580: * bash 2.x doesd not support the -l flag and exits with an error if it
581: is specified so use --login instead. This causes an error with bash
582: 1.x (which uses -login instead) but this version is hopefully less
583: used than 2.x.
584: [73020a67b9d5] <1.8>
585:
586: * Add Polish translation from translationproject.org
587: [8cac0da9ffb1] <1.8>
588:
589: 2011-07-13 Todd C. Miller <Todd.Miller@courtesan.com>
590:
591: * Make error strings translatable.
592: [d1ff594f27b5] <1.8>
593:
594: * Only run configure with --with-pam-login for RHEL 5 and above.
595: [2f1a0ff5230e] <1.8>
596:
597: * Fix typo in summary
598: [1e1d7dcae9ab] <1.8>
599:
600: 2011-07-11 Todd C. Miller <Todd.Miller@courtesan.com>
601:
602: * Add missing logwrap.c
603: [abcd28c194d2] <1.8>
604:
605: * Split out log file word wrap code into its own file and add unit
606: tests. Fixes an off-by one in the word wrap when the log line
607: length matches loglinelen.
608: [0ae1c7aa9ef1] <1.8>
609:
610: 2011-07-05 Todd C. Miller <Todd.Miller@courtesan.com>
611:
612: * For SuSE, only use /usr/lib64 as libexec if generating 64-bit
613: binaries.
614: [4448fa1c639f] <1.8>
615:
616: * Fix build error when --without-noexec configure option is used.
617: [f6bfd748ae45] <1.8>
618:
619: * configure, configure.in:
620: Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX
621: 5.3 and above.
622: [9d957ae1840d] <1.8>
623:
624: 2011-07-03 Todd C. Miller <Todd.Miller@courtesan.com>
625:
626: * NEWS, doc/UPGRADE:
627: Document group lookup change and possible side effects.
628: [fe4b2d2701b2] <1.8>
629:
630: 2011-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
631:
632: * Resolve the list of gids passed in from the sudo frontend (the
633: result of getgroups()) to names and store both the group names and
634: ids in the sudo_user struct. When matching groups in the sudoers
635: file, match based on the names in the groups list first and only do
636: a gid-based match when we absolutely have to. By matching on the
637: group name (as it is listed in sudoers) instead of id (which we
638: would have to resolve) we save a lot of group lookups for sudoers
639: files with a lot of groups in them.
640: [c10d208bd7e5] <1.8>
641:
642: 2011-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
643:
644: * NEWS:
645: Update for 1.8.2rc5
646: [f6a3aa2edf7a] <1.8>
647:
648: 2011-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
649:
650: * Workaround for "sudo -i command" and newer versions of bash which
651: don't go into login mode when -c is specified unless -l is too.
652: [381e74d35006] <1.8>
653:
654: 2011-06-23 Todd C. Miller <Todd.Miller@courtesan.com>
655:
656: * Rewrite logfile word wrapping code to be more straight-forward and
657: actually wrap at the correct place.
658: [8a7862d6a82f] <1.8>
659:
660: 2011-06-22 Todd C. Miller <Todd.Miller@courtesan.com>
661:
662: * NEWS:
663: Fix typo
664: [2456ad2ad3e3] <1.8>
665:
666: * NEWS:
667: Mention use_pty bug fix
668: [f4eab5193452] <1.8>
669:
670: * Set use_pty=true in command details when use_pty is set in sudoers.
671: From Ludwig Nussel
672: [abaafc5793d9] <1.8>
673:
674: 2011-06-20 Todd C. Miller <Todd.Miller@courtesan.com>
675:
676: * Sync Chinese (simplified) PO files from translationproject.org
677: [a4cf84dd9ddf] <1.8>
678:
679: 2011-06-18 Todd C. Miller <Todd.Miller@courtesan.com>
680:
681: * Add Danish translation from translationproject.org and add missing
682: Basque mo files.
683: [672b88adcc34] <1.8>
684:
685: * Makefile.in, configure, configure.in:
686: No longer need to specify LINGUAS in configure, "make install-nls"
687: now just installs all the .mo files it finds.
688: [c226a39ece48] <1.8>
689:
690: 2011-06-17 Todd C. Miller <Todd.Miller@courtesan.com>
691:
692: * Build CONTRIBUTORS from newly-added contributors.pod
693: [b8871dd293ff] <1.8>
694:
695: * Rework the wording in the leading paragraph
696: [d8b081dedeb3] <1.8>
697:
698: 2011-06-16 Todd C. Miller <Todd.Miller@courtesan.com>
699:
700: * Add a CONTRIBUTORS file with the names of folks who have contributed
701: code or patches to sudo since I started maintaining it (plus the
702: original authors).
703: [8b064e8996af] <1.8>
704:
705: 2011-06-13 Todd C. Miller <Todd.Miller@courtesan.com>
706:
707: * Preserve SHELL variable for "sudo -s". Otherwise we can end up with
708: a situation where the SHELL variable and the actual shell being run
709: do not match.
710: [8f5bb61a8b76] <1.8>
711:
712: 2011-06-10 Todd C. Miller <Todd.Miller@courtesan.com>
713:
714: * configure, configure.in:
715: Only enable Solaris project support when setproject() is present in
716: libproject.
717: [bf370ff3c194] <1.8>
718:
719: * Explicitly set mode and owner of /etc/sudoers instead of relying on
720: "cp -p" to work in the postinstall script. On AIX 6.1 at least the
721: postinstall script runs before the final file permissions are set.
722: [7a4a87405349] <1.8>
723:
724: * Refer the user to the "Command Environment" section in description
725: of sudo's -i option.
726: [1a063eaf9670] <1.8>
727:
728: * Fix typo
729: [442c50370c44] <1.8>
730:
731: * If there is no old dependency for an object file, use the MANIFEST
732: to find its source.
733: [d95c77ad283f] <1.8>
734:
735: * Remove dependency for getgrouplist.lo as we don't ship that source
736: file.
737: [bbede77e6256] <1.8>
738:
739: * Do not declare yyparse() static as the actual function generated by
740: yacc is extern.
741: [8e615bd15a4c] <1.8>
742:
743: * Makefile.in:
744: Remove locale files in "make uninstall"
745: [9791be90d5ac] <1.8>
746:
747: 2011-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
748:
749: * configure.in:
750: Add Basque translation and sync Finish and Ukranian translations.
751: [64af34789164] <1.8>
752:
753: * NEWS:
754: Update PAM change to reflect latest checkin.
755: [657cddf2077a] <1.8>
756:
757: * configure, configure.in:
758: FreeBSD no longer needs the main sudo binary to link with -lpam now
759: that plug-ins are loaded with RTLD_GLOBAL.
760: [573a6f4b29af] <1.8>
761:
762: * Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes
763: problems with pam modules not having access to symbols provided by
764: libpam on some platforms. Affects FreeBSD and SLES 10 at least.
765: [4ec864fdba46] <1.8>
766:
767: * Makefile.in:
768: Move xgettext invocation out of update-po target into update-pot
769: [421ac1a073ea] <1.8>
770:
771: 2011-06-04 Todd C. Miller <Todd.Miller@courtesan.com>
772:
773: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
774: Regenerate .pot files for 1.8.2rc2
775: [d2a891e3d3dd] <1.8>
776:
777: * Makefile.in:
778: Move nls targets to the top level Makefile so the paths in the pot
779: file are saner
780: [6c256cb77f78] <1.8>
781:
782: * NEWS:
783: Update 1.8.2 news
784: [17bd04278b04] <1.8>
785:
786: * Add compiled version of sudo Finish translation
787: [ff9d20a02aa0] <1.8>
788:
789: * Update MANIFEST with .po and .mo files Rebuild sudoers fi and uk .mo
790: files
791: [60c4f3b3829c] <1.8>
792:
793: * configure, configure.in:
794: Add Finish translation from translationproject.org
795: [ade788a35521] <1.8>
796:
797: * The group named by exempt_group should not have a % prefix.
798: [1f74c691c1e1] <1.8>
799:
800: * Fix typo; "Defaults group_plugin" not "Defaults sudo_plugin"
801: [58d36c0e76f9] <1.8>
802:
803: * Fix compressed io log corruption in background mode by using _exit()
804: instead of exit() to avoid flushing buffers twice.
805:
806: Improved background mode support. When not allocating a pty, the
807: command is run in its own process group. This prevents write access
808: to the tty. When running in a pty, stdin is not hooked up and we
809: never read from /dev/tty, which results in similar behavior.
810: [fe50d6a5c5b9] <1.8>
811:
812: 2011-05-31 Todd C. Miller <Todd.Miller@courtesan.com>
813:
814: * Clean up regress files Generate proper dependencies for regress objs
815: in compat
816: [264196584549] <1.8>
817:
818: * Add missing dependency for check_fill.o.
819: [c41f4e6ff078] <1.8>
820:
821: 2011-05-30 Todd C. Miller <Todd.Miller@courtesan.com>
822:
823: * INSTALL, configure, configure.in:
824: Add support for --enable-nls[=location]
825: [0ea8e7bd1739] <1.8>
826:
827: 2011-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
828:
829: * Include gettext.h
830: [fe8bab6403c6] <1.8>
831:
832: * Quiet gcc warnings.
833: [aa16d09710a7] <1.8>
834:
835: * configure, configure.in:
836: Don't install .mo files if gettext was not found.
837: [c6b233e829aa] <1.8>
838:
839: 2011-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
840:
841: * Always allocate a pty when running a command in the background but
842: call setsid() after forking to make sure we don't end up with a
843: controlling tty.
844: [77c6b2923714] <1.8>
845:
846: * Add missing space between command name and the first command line
847: argument.
848: [d0a36b9c0f38] <1.8>
849:
850: * Quiet a compiler warning on some platforms.
851: [654e76cf0574] <1.8>
852:
853: * README file that directs people to translationproject.org
854: [5545e9a5ae37] <1.8>
855:
856: * Sync translations with TP
857: [b054ce577022] <1.8>
858:
859: * Makefile.in:
860: Add 'sync-po' target to top-level Makefile to rsync the po files
861: from translationproject.org.
862: [87a5011b0410] <1.8>
863:
864: * install nls files from install target
865: [a3feba9ef323] <1.8>
866:
867: * Makefile.in:
868: Include .mo files in sudo binary packags.
869: [bc3ee7e7fb44] <1.8>
870:
871: * configure, configure.in:
872: Add simplified chinese translation
873: [c22e6842c766] <1.8>
874:
875: 2011-05-26 Todd C. Miller <Todd.Miller@courtesan.com>
876:
877: * configure, configure.in:
878: Add ukranian translation
879: [0bb9e6437f0f] <1.8>
880:
881: * refer to siglist.c, not ./siglist.c since not all makes will treat
882: foo and ./foo the same.
883: [909051ff6061] <1.8>
884:
885: * Set def_preserve_groups before searching for the command when the -P
886: flag is specified.
887: [08e9378f50e4] <1.8>
888:
889: * Makefile.in:
890: Add dependency for siglist.lo in compat. This is a generated file
891: so "make depend" needs to depend on it.
892: [e6c0daf36af0] <1.8>
893:
894: * More dependency fixes.
895: [7fed03624689] <1.8>
896:
897: * Fix a few dependencies.
898: [7cb86c721961] <1.8>
899:
900: * Place compiled mo files in the src dir, not the build dir. When
901: installing compiled mo files, display a status message.
902: [b87aa18a9968] <1.8>
903:
904: 2011-05-25 Todd C. Miller <Todd.Miller@courtesan.com>
905:
906: * Tivoli Directory Server requires that seconds be present in a
907: timestamp, even though RFC 4517 states that they are optional.
908: [47ebf110ea7a] <1.8>
909:
910: * Add missing bit of copyright
911: [d05d28a91bc4] <1.8>
912:
913: * Mention cycle detection warnings
914: [ee8231aa1aed] <1.8>
915:
916: * When checking aliases, also check the contents of the alias in case
917: there are problems with an alias that is referenced inside another.
918: Replace the self reference check with real alias cycle detection.
919: [abcfe1bc95d8] <1.8>
920:
921: * Set errno to ELOOP in alias_find() if there is a cycle. Set errno to
922: ENOENT in alias_find() and alias_remove() if the entry could not be
923: found.
924: [e73d169f4e9b] <1.8>
925:
926: * Increment alias_seqno before calls to alias_remove_recursive() to
927: avoid false positives with the alias loop detection. Fixes spurious
928: warnings about unused aliases when they are nested.
929: [ac094820ef19] <1.8>
930:
931: * add mkdep.pl
932: [3721e9654ba6] <1.8>
933:
934: * Add dependency on convenience libs to binaries
935: [8a4db8226dfe] <1.8>
936:
937: * Makefile.in:
938: mkdep.pl only works when run from the src dir
939: [2480427a0680] <1.8>
940:
941: * Makefile.in:
942: Auto-generate Makefile dependencies with a perl script.
943: [ef5f56907d97] <1.8>
944:
945: 2011-05-23 Todd C. Miller <Todd.Miller@courtesan.com>
946:
947: * If the user specifies a runas group via sudo's -g option that
948: matches the runas user's group in the passwd database and that group
949: is not denied in the Runas_Spec, allow it. Thus, if user root's gid
950: in /etc/passwd is 0, then "sudo -u root -g root id" is allow even if
951: no groups are present in the Runas_Spec.
952: [942e1e7c5090] <1.8>
953:
954: 2011-05-22 Todd C. Miller <Todd.Miller@courtesan.com>
955:
956: * NEWS:
957: Mention what is new in 1.8.2 (for now)
958: [d44b26eceee5] <1.8>
959:
960: * Add dependencies on gettext.h
961: [32c61c6af852] <1.8>
962:
963: * Fix install-nls target with HP-UX sh when gettext is not present.
964: [3441cece9638] <1.8>
965:
966: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
967: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
968: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
969: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
970: Regen for sudo 1.8.2
971: [9ea124b542cc] <1.8>
972:
973: 2011-05-20 Todd C. Miller <Todd.Miller@courtesan.com>
974:
975: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
976: regenerate .pot files for lbuf changes
977: [a8a9cc62c3a5] <1.8>
978:
979: * configure, configure.in:
980: Add missing "checking" message for gettext when using the cache.
981: [4136bc346576] <1.8>
982:
983: * Add primitive format string support to the lbuf code to make
984: translations simpler.
985: [22fc74618d09] <1.8>
986:
987: * configure, configure.in, plugins/sudoers/po/sudoers.pot,
988: src/po/sudo.pot:
989: Bump version to 1.8.2
990: [999de1ac5b3e] <1.8>
991:
992: * Add message catalog template files for sudo and the sudoers module.
993: [6afad75e7afa] <1.8>
994:
995: * configure.in:
996: Add gettext.h convenience header. This is similar to but distinct
997: from the one included with the gettext package.
998: [5ae5a86e0d06] <1.8>
999:
1000: * configure, configure.in:
1001: Add checks for nroff -c and -Tascii flags
1002: [580c21905280] <1.8>
1003:
1004: * configure, configure.in:
1005: Add check for HP bundled C Compiler (which cannot create shared
1006: libs)
1007: [34f616cbb0f3] <1.8>
1008:
1009: * Fix C format warnings.
1010: [f20a43a817f0] <1.8>
1011:
1012: * Add __printflike
1013: [76bf8a4bf075] <1.8>
1014:
1015: * Translate help / usage strings.
1016: [16c5b7902d4c] <1.8>
1017:
1018: * Set --msgid-bugs-address to the bugzilla url
1019: [3e3cfa7b4ceb] <1.8>
1020:
1021: * INSTALL, Makefile.in, README, configure, configure.in:
1022: Add scaffolding to update .po files and install .mo files.
1023: [a51e60b35e47] <1.8>
1024:
1025: * Minor warning/error cleanup
1026: [593144ac87ff] <1.8>
1027:
1028: * configure.in:
1029: Emulate ngettext for the non-nls case
1030: [7cdf82de4dee] <1.8>
1031:
1032: * Do not mark untranslatable strings for translation
1033: [088271ed02d0] <1.8>
1034:
1035: * Use ROOT_UID not 0.
1036: [f901fa2fdaf2] <1.8>
1037:
1038: * Minor warning/error message cleanup
1039: [b99c7ef46236] <1.8>
1040:
1041: * cannot -> "unable to" in warning/error messages can't -> "unable to"
1042: in warning/error messages
1043: [5119140fabc7] <1.8>
1044:
1045: * configure, configure.in:
1046: FreeBSD needs the main sudo executable to link with -lpam when
1047: loading dynaic pam modules for some reason.
1048: [738b6778a505] <1.8>
1049:
1050: * We don't want to translate debugging messages.
1051: [357a575c2dfd] <1.8>
1052:
1053: * configure, configure.in:
1054: Add calls to bindtextdomain() and textdomain() Currently there are
1055: two domains, one for the sudo front-end and one for the sudoers
1056: plugin and its associated utilities.
1057: [907f39439d80] <1.8>
1058:
1059: * configure, configure.in:
1060: Fix caching of libc gettext check.
1061: [e229c21f412f] <1.8>
1062:
1063: * Mark defaults descriptions for translation
1064: [65e03d1f8203] <1.8>
1065:
1066: * NEWS:
1067: Update for sudo 1.8.1p2
1068: [89c31f2aa11e] <1.8>
1069:
1070: * Quiet compiler warning when SELinux is enabled.
1071: [51b1d7c8aa86] <1.8>
1072:
1073: * dd missing includes of libintl.h.
1074: [25662143d36d] <1.8>
1075:
1076: * Fix gettext marker.
1077: [7618856ba5de] <1.8>
1078:
1079: * Include libint.h where needed.
1080: [cc256b297b9d] <1.8>
1081:
1082: * Prepare sudoers module messages for translation.
1083: [1b7f0bbaa55f] <1.8>
1084:
1085: * Only check gid of sudoers file if it is group-readable.
1086: [f3cae943f35a] <1.8>
1087:
1088: * For AIX, keep calling authenticate() until reenter reaches 0.
1089: [e412676bac73] <1.8>
1090:
1091: * configure, configure.in:
1092: Cache the status of the initial gettext() check.
1093: [c32281768c0f] <1.8>
1094:
1095: * INSTALL, configure, configure.in:
1096: Add --disable-nls flag and improve checks for gettext.
1097: [b39674c1e538] <1.8>
1098:
1099: * configure, configure.in:
1100: When building with gcc on HP-UX, use -march=1.1 to produce portable
1101: binaries on a pa-risc2 host. Previously, the +Dportable option was
1102: used for the HP-UX C compiler but gcc always produced native
1103: binaries.
1104: [41351c23ad41] <1.8>
1105:
1106: * Prepare sudo front end messages for translation.
1107: [7807d6f74dac] <1.8>
1108:
1109: * configure, configure.in:
1110: Add initial scaffolding to support localization via gettext()
1111: [cdbbff7e6376] <1.8>
1112:
1113: 2011-05-19 Todd C. Miller <Todd.Miller@courtesan.com>
1114:
1115: * doc/license.pod:
1116: update copyright year
1117: [d681661f03cc] <1.8>
1118:
1119: * INSTALL, README:
1120: No need to include version number at the top of these files.
1121: [7e11f673f773] <1.8>
1122:
1123: * README:
1124: This is sudo 1.8.1 not 1.8.0
1125: [4d674f230d8a] <1.8>
1126:
1127: 2011-05-04 Todd C. Miller <Todd.Miller@courtesan.com>
1128:
1129: * Don't let the fnmatch/glob macros expand the function prototype.
1130: [d449e9a8f447] <1.8>
1131:
1132: 2011-05-03 Todd C. Miller <Todd.Miller@courtesan.com>
1133:
1134: * Resolve namespace collisions on HP-UX ia64 and possibly others by
1135: adding a rpl_ prefix to our fnmatch and glob replacements and
1136: #defining rpl_foo to foo in the header files.
1137: [d23889375b21] <1.8>
1138:
1139: 2011-04-29 Todd C. Miller <Todd.Miller@courtesan.com>
1140:
1141: * Split ALL, ROLE and TYPE into their own actions. Since you can only
1142: have #ifdefs inside of braces, ROLE and TYPE use a naughty goto in
1143: the non-SELinux case. This is safe because the actions are in one
1144: big switch() statement.
1145: [0bd9b7e37ab1] <1.8>
1146:
1147: * Fix regexp for matching a CIDR-style IPv4 netmask. From Marc Espie.
1148: [8dec97b359e0] <1.8>
1149:
1150: * askpass moved from sudoers to sudo.conf in sudo 1.8.0
1151: [1001d87d82ed] <1.8>
1152:
1153: * Remove obsolete warning about runas_default and ordering. Move
1154: syslog facility and priority lists into the section where the
1155: relevant options are described.
1156: [1286b9624021] <1.8>
1157:
1158: 2011-04-26 Todd C. Miller <Todd.Miller@courtesan.com>
1159:
1160: * Fix SIA support; we no longer have access to the real argc and argv
1161: so allocate space for a fake one and use the argv passed to the
1162: plugin with "sudo" for argv[0].
1163: [7c11eeffb91c] <1.8>
1164:
1165: * Remove useless realloc when trying to get the buffer size right.
1166: [58128e7f4e28] <1.8>
1167:
1168: * Be explicit when setting euid to 0 before call to setreuid(0, 0)
1169: [95769a564ab8] <1.8>
1170:
1171: 2011-04-18 Todd C. Miller <Todd.Miller@courtesan.com>
1172:
1173: * NEWS:
1174: sudo 1.8.1p1 updates
1175: [de3d688b5bb1] <1.8>
1176:
1177: * configure, configure.in:
1178: Need to do checks for krb5_verify_user, krb5_init_secure_context and
1179: krb5_get_init_creds_opt_alloc regardless of whether or
1180: notkrb5-config is present.
1181: [456c4a9cd5d6] <1.8>
1182:
1183: 2011-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
1184:
1185: * Work around weird AIX saved uid semantics on setuid() and
1186: setreuid(). On AIX, setuid() will only set the saved uid if the euid
1187: is already 0.
1188: [5d0a69e9d181] <1.8>
1189:
1190: 2011-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
1191:
1192: * update copyright year
1193: [fa8da6d55783] <1.8>
1194:
1195: * Treat a missing includedir like an empty one and do not return an
1196: error.
1197: [5fd9fe004728] <1.8>
1198:
1199: 2011-04-12 Todd C. Miller <Todd.Miller@courtesan.com>
1200:
1201: * Fix ARCH setting in cross-compile Solaris packages.
1202: [8ce40940f6c9] <1.8>
1203:
1204: * Fix aix version setting.
1205: [02a9e25d46ba] <1.8>
1206:
1207: * Remove extraneous parens in LDAP filter when sudoers_search_filter
1208: is enabled that causes a search error. From Matthew Thomas.
1209: [b67be9b51ec6] <1.8>
1210:
1211: 2011-04-11 Todd C. Miller <Todd.Miller@courtesan.com>
1212:
1213: * Correct sizeof() to fix test failure.
1214: [a11b89fd13f9] <1.8>
1215:
1216: * "install" target should depend on "install-dirs". Fixes "make -j"
1217: problem and closes bz #487. From Chris Coleman.
1218: [06ab0558f848] <1.8>
1219:
1220: 2011-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
1221:
1222: * .hgtags:
1223: Added tag SUDO_1_8_1 for changeset 0ed6281995f0
1224: [543d41a163e9] <1.8>
1225:
1226: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
1227: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
1228: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
1229: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
1230: Regen man pages for 1.8.1
1231: [0ed6281995f0] [SUDO_1_8_1] <1.8>
1232:
1233: 2011-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
1234:
1235: * Add HAVE_RFC1938_SKEYCHALLENGE
1236: [c0d7eb39799d] <1.8>
1237:
1238: 2011-04-06 Todd C. Miller <Todd.Miller@courtesan.com>
1239:
1240: * Mention plugin loading and libgcc changes
1241: [b74929cba37c] <1.8>
1242:
1243: * Load plugins after parsing arguments and potentially printing the
1244: version. That way, an error loading or initializing a plugin
1245: doesn't break "sudo -h" or "sudo -V".
1246: [c1ecb5979cf0] <1.8>
1247:
1248: * Makefile.in:
1249: When using a sub-shell to invoke the sub-make, exec make instead of
1250: running it inside the shell to avoid an extra process.
1251: [9439f016c993] <1.8>
1252:
1253: * Stop testing unspecified behavior in fnmatch Make glob test more
1254: portable
1255: [87a91d76fbff] <1.8>
1256:
1257: * No need to add current dir to include path and having it breaks the
1258: test programs that expect to get the system glob.h and fnmatch.h
1259: [3ae7f9e7b710] <1.8>
1260:
1261: * configure, configure.in:
1262: Fix and document --with-plugindir; partially from Diego Elio Petteno
1263: [0220a0c2606f] <1.8>
1264:
1265: * Fix fnmatch and glob tests to not use hard-coded flag values in the
1266: input file. Link test programs with libreplace so we get our
1267: replacement verions as needed.
1268: [66bab80241e0] <1.8>
1269:
1270: * Makefile.in:
1271: If make in a subdir fails, fail the target in the upper level
1272: Makefile too. Adapted from a patch from Diego Elio Petteno
1273: [bc35b7813507] <1.8>
1274:
1275: * configure, configure.in:
1276: Add check for NetBSD-style 4-argument skeychallenge() as Gentoo also
1277: has this. Adapted from a patch from Diego Elio Petteno
1278: [bb6228f484b9] <1.8>
1279:
1280: * Make SUDOERS_LDFLAGS reference $(LDFLAGS) instead of using @LDFLAGS@
1281: directly.
1282: [47e6d5fadc6d] <1.8>
1283:
1284: * configure, configure.in:
1285: Fix warnings when -without-skey, --without-opie, --without-kerb4,
1286: --without-kerb5 or --without-SecurID were specified.
1287: [1b75035dd129] <1.8>
1288:
1289: * Add plugins/sudoers/sudoers_version.h
1290: [1d470c6033ca] <1.8>
1291:
1292: * configure, configure.in:
1293: Back out the --with-libpath addition to SUDOERS_LDFLAGS since that
1294: now include LDFLAGS in the sudoers Makefile.in. Add missing settng
1295: of @LDFLAGS@ in plugin Makefile.in files.
1296: [dd237f43aa12] <1.8>
1297:
1298: 2011-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
1299:
1300: * Mention %#gid support in User_List and Runas_List
1301: [37e259b9181b] <1.8>
1302:
1303: * Keep track of sudoers grammar version and report it in the -V
1304: output.
1305: [0e0b891dd8a4] <1.8>
1306:
1307: * Add multiple inclusion guard
1308: [ec6884f51ea8] <1.8>
1309:
1310: * configure, configure.in:
1311: The --with-libpath option now adds to SUDOERS_LDFLAGS as well as
1312: LDFLAGS. Remove old -static hack for HP-UX < 9. Add LTLDFLAGS and
1313: set it to -Wc,-static-libgcc if not using GNU ld so we don't
1314: have a dependency on the shared libgcc in sudoers.so.
1315: [28d03f3eb0d2] <1.8>
1316:
1317: * Fix typo; from Petr Uzel
1318: [d19b9bd92bd3] <1.8>
1319:
1320: 2011-04-01 Todd C. Miller <Todd.Miller@courtesan.com>
1321:
1322: * In dump-only mode, use "root" as the default username instead of
1323: "nobody" as the latter may not be available on all systems.
1324: [b304111616dd] <1.8>
1325:
1326: 2011-03-31 Todd C. Miller <Todd.Miller@courtesan.com>
1327:
1328: * Remove NewArgv/NewArgc, they are no longer needed.
1329: [c0a36a42a68c] <1.8>
1330:
1331: * Fix setting of user_args
1332: [529e79ea95d1] <1.8>
1333:
1334: * Add '!' token to lex tracing
1335: [aef295d428e7] <1.8>
1336:
1337: * Use group bin in test, not wheel as most systems have the bin group
1338: but the same is no longer true of wheel.
1339: [350347f09c1a] <1.8>
1340:
1341: * Avoid using pre or post increment in a parameter to a ctype(3)
1342: function as it might be a macro that causes the increment to happen
1343: more than once.
1344: [8a94ebdd53b8] <1.8>
1345:
1346: 2011-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
1347:
1348: * Strip off the beta or release candidate version when building AIX
1349: packages.
1350: [00ad950764e2] <1.8>
1351:
1352: * configure, configure.in:
1353: We need to include OSDEFS in CFLAGS when doing the utmp/utmpx
1354: structure checks for glibc which only has __e_termination visible
1355: when _GNU_SOURCE is *not* defined.
1356: [1d58420a4a4a] <1.8>
1357:
1358: * getuserattr(user, ...) will fall back to the "default" entry
1359: automatically, there's no need to check "default" manually.
1360: [cefffa82967d] <1.8>
1361:
1362: * Document parser changes.
1363: [5038238f60eb] <1.8>
1364:
1365: 2011-03-29 Todd C. Miller <Todd.Miller@courtesan.com>
1366:
1367: * Makefile.in:
1368: If there is an existing sudoers file, only install if it passes a
1369: syntax check.
1370: [b1e4c9c56fe0] <1.8>
1371:
1372: * Add runasgroup support to testsudoers
1373: [30838590e9de] <1.8>
1374:
1375: * For "make check", keep going even if a test fails.
1376: [d3a72f67227e] <1.8>
1377:
1378: * More useful exit codes:
1379: * 0 - parsed OK and command matched.
1380: * 1 - parse error
1381: * 2 - command not matched
1382: * 3 - command denied
1383: [59301e0769cd] <1.8>
1384:
1385: * Document %#gid, and %:#nonunix_gid syntax.
1386: [39ee15af58e9] <1.8>
1387:
1388: * Add support to user_in_group() for treating group names that begin
1389: with a '#' as gids.
1390: [0eb19980cf5f] <1.8>
1391:
1392: * configure, configure.in:
1393: Add explicit check for struct utmpx.ut_exit.e_termination and struct
1394: utmpx.ut_exit.__e_termination. HP-UX uses the latter. Only update
1395: ut_exit if we detect one or the other.
1396: [ab5b665fc04b] <1.8>
1397:
1398: 2011-03-28 Todd C. Miller <Todd.Miller@courtesan.com>
1399:
1400: * Add back missing #include of config.h
1401: [9c82bec81018] <1.8>
1402:
1403: * Avoid a NULL deref on unrecognized escapes. Collapse %% -> % like
1404: strftime() does.
1405: [1ae630470f8a] <1.8>
1406:
1407: * Quote first argument to AC_DEFUN(); from Elan Ruusamae
1408: [c467e9e3b399] <1.8>
1409:
1410: 2011-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
1411:
1412: * add new sudoers tests
1413: [05f2a0924acc] <1.8>
1414:
1415: * Add test for a newline in the middle of a string when no line
1416: continuation character is used.
1417: [24b79be5822b] <1.8>
1418:
1419: * Use bitwise AND instead of modulus to check for length being odd. A
1420: newline in the middle of a string is an error unless a line
1421: continuation character is used.
1422: [65c468599688] <1.8>
1423:
1424: * Move lexer globals initialization into init_lexer.
1425: [07a1171a1853] <1.8>
1426:
1427: * Fix a potential crash when a non-regular file is present in an
1428: includedir. Fixes bz #452
1429: [5057cb9516e4] <1.8>
1430:
1431: * On some Linux systems, "uname -p" contains detailed processor info
1432: so check "uname -m" first and then "uname -p" if needed. Recognize
1433: PLD Linux.
1434: [56226c84a060] <1.8>
1435:
1436: 2011-03-25 Todd C. Miller <Todd.Miller@courtesan.com>
1437:
1438: * Don't need all sudoers.h here.
1439: [43b6ae5999c5] <1.8>
1440:
1441: * Print sudo version early, in case policy plugin init fails.
1442: [620f2d0ec4b1] <1.8>
1443:
1444: 2011-03-24 Todd C. Miller <Todd.Miller@courtesan.com>
1445:
1446: * Update to match change in input.
1447: [69540f84721d] <1.8>
1448:
1449: * Make an empty group or netgroup a syntax error.
1450: [4b85bddc494e] <1.8>
1451:
1452: * An empty group or netgroup should be a syntax error.
1453: [6ec796972eff] <1.8>
1454:
1455: * Check that uids work in per-user and per-runas Defaults Check that
1456: uids and gids work in a Command_Spec
1457: [68cf62353420] <1.8>
1458:
1459: * Test empty string in User_Alias and Command_Spec
1460: [017d487c31be] <1.8>
1461:
1462: * Allow a group ID in the User_Spec.
1463: [37e0bf69c8d8] <1.8>
1464:
1465: * Return an error for the empty string when a word is expected. Allow
1466: an ID for per-user or per-runas Defaults.
1467: [4c9020779582] <1.8>
1468:
1469: 2011-03-23 Todd C. Miller <Todd.Miller@courtesan.com>
1470:
1471: * Fix printing "User_Alias FOO = ALL"
1472: [97c9fd7caeb7] <1.8>
1473:
1474: 2011-03-22 Todd C. Miller <Todd.Miller@courtesan.com>
1475:
1476: * Better error message about invalid -C argument
1477: [2301e7a3835b] <1.8>
1478:
1479: * fix typo
1480: [c5acde62a309] <1.8>
1481:
1482: * Fix placement of equal size ('=') in user specification summary.
1483: [4d0ffef77ae4] <1.8>
1484:
1485: 2011-03-21 Todd C. Miller <Todd.Miller@courtesan.com>
1486:
1487: * update to match sudoers regress
1488: [0efb8dc9092a] <1.8>
1489:
1490: * Restore ability to define TRACELEXER and have trace output go to
1491: stderr.
1492: [441c8b372217] <1.8>
1493:
1494: * Restore old behavior of setting sawspace = TRUE for command line
1495: args when a line continuation character is hit to avoid causing
1496: problems for existing sudoers files.
1497: [963ded6ce070] <1.8>
1498:
1499: * Add test for line continuation and aliases
1500: [5703d11a3c46] <1.8>
1501:
1502: * Make test output line up nicely for parse vs. toke
1503: [15321ce2d7d9] <1.8>
1504:
1505: * plugins/sudoers/regress/testsudoers/test1.ok,
1506: plugins/sudoers/regress/testsudoers/test2.out,
1507: plugins/sudoers/regress/testsudoers/test2.sh,
1508: plugins/sudoers/regress/testsudoers/test3.ok,
1509: plugins/sudoers/regress/testsudoers/test3.sh,
1510: plugins/sudoers/regress/visudo/test1.ok,
1511: plugins/sudoers/regress/visudo/test1.sh:
1512: Move parser tests to sudoers directory and test the tokenizer output
1513: too.
1514: [111c1ccda334] <1.8>
1515:
1516: * If we match a rule anchored to the beginning of a line after parsing
1517: a line continuation character, return an ERROR token. It would be
1518: nicer to use REJECT instead but that substantially slows down the
1519: lexer.
1520: [67e54b14aa9d] <1.8>
1521:
1522: * Move LEXTRACE macro to toke.h so we can use it in yyerror().
1523: [e6e04037deed] <1.8>
1524:
1525: * Make lex tracing settable at run-time in testsudoers via the -t
1526: flag. Trace output goes to stderr. Will be used by regress tests
1527: to check lexer.
1528: [a973f43cc0c2] <1.8>
1529:
1530: * Allow whitespace after the modifier in a Defaults entry. E.g.
1531: "Defaults: username set_home"
1532: [bf876c9fc5bb] <1.8>
1533:
1534: 2011-03-18 Todd C. Miller <Todd.Miller@courtesan.com>
1535:
1536: * Don't set CC when cross-compiling.
1537: [d3c33dcb02f2] <1.8>
1538:
1539: * Credit Matthew Thomas for the sudoers_search_filter changes.
1540: [2209b80664af] <1.8>
1541:
1542: * Add the .sym files to the MANIFEST
1543: [bb452b28a009] <1.8>
1544:
1545: * Update for sudo 1.8.1 beta
1546: [700d42d80e00] <1.8>
1547:
1548: * user_shell -> run_shell to avoid confusion with the user's SHELL
1549: variable.
1550: [451b96d5f97e] <1.8>
1551:
1552: * Save the controlling tty process group before suspending in pty
1553: mode. Previously, we assumed that the child pgrp == child pid
1554: (which is usually, but not always, the case).
1555: [b0841d861191] <1.8>
1556:
1557: * Add support for sudoers_search_filter setting in ldap.conf. This
1558: can be used to restrict the set of records returned by the LDAP
1559: query.
1560: [70c5f496e2b3] <1.8>
1561:
1562: 2011-03-17 Todd C. Miller <Todd.Miller@courtesan.com>
1563:
1564: * configure, configure.in:
1565: Remove the hack to disable -g in CFLAGS unless --with-devel
1566: [9459839f50ba] <1.8>
1567:
1568: * The '@' character does not normally need to be quoted.
1569: [e66c4c64e514] <1.8>
1570:
1571: * We normaly transition from GOTDEFS to STARTDEFS on whitespace, but
1572: if that whitespace is followed by a comma, we want to treat it as
1573: part of a list and not transition.
1574: [52ae2df9959d] <1.8>
1575:
1576: * Add check for whitespace when a User_List is used for a per-user
1577: Defaults entry.
1578: [44a4db95be86] <1.8>
1579:
1580: * Expand quoted name checks to cover recent fixes.
1581: [bd494b5c2bed] <1.8>
1582:
1583: * Fix parsing of double-quoted names in Defaults and Aliases which was
1584: broken in 601d97ea8792.
1585: [dfdd58c3eb3b] <1.8>
1586:
1587: * toke_util.c lives in $(srcdir) not $(devdir)
1588: [94f8f024782e] <1.8>
1589:
1590: 2011-03-16 Todd C. Miller <Todd.Miller@courtesan.com>
1591:
1592: * configure, configure.in:
1593: Update version to 1.8.1
1594: [531a7d520f18] <1.8>
1595:
1596: * Document major changes in 1.8.1 and add upgrade notes.
1597: [116821646140] <1.8>
1598:
1599: * Be careful not to deref user_stat if it is NULL. This cannot
1600: currently happen in sudo but might in other programs using the
1601: parser.
1602: [d72a9c7151c4] <1.8>
1603:
1604: * configure will not add -O2 to CFLAGS if it is already defined to add
1605: -O2 to the CFLAGS we pass in when PIE is being used.
1606: [2c7fe82be93d] <1.8>
1607:
1608: * Warn about the dangers of log_input and mention iolog_file and
1609: iolog_dir in the log_input and log_output descriptions.
1610: [edc6aa59aa45] <1.8>
1611:
1612: * sync with git version
1613: [b121cf739c77] <1.8>
1614:
1615: * It seems that h comes after i
1616: [99ad15015f05] <1.8>
1617:
1618: * Move log_input and log_output to their proper, sorted, location.
1619: Document set_utmp and utmp_runas.
1620: [216ce8b0ae1a] <1.8>
1621:
1622: * Save the controlling tty process group before suspending so we can
1623: restore it when we resume. Fixes job control problems on Linux
1624: caused by the previous attemp to fix resuming a shell when I/O
1625: logging not enabled.
1626: [dfe038f733be] <1.8>
1627:
1628: * Fix printing of the remainder after a newline. Fixes "sudo -l"
1629: output corruption that could occur in some cases.
1630: [ab2f0a629e0d] <1.8>
1631:
1632: * Add support for ut_exit
1633: [7039ec6a73fa] <1.8>
1634:
1635: * Add support for controlling whether utmp is updated and which user
1636: is listed in the entry.
1637: [1b008ce71eab] <1.8>
1638:
1639: * Fix typo; tupple vs. tuple
1640: [67bb5c67ae3d] <1.8>
1641:
1642: * For legacy utmp, strip the /dev/ prefix before trying to determine
1643: slot since the ttys file does not include the /dev/ prefix.
1644: [8f597114381d] <1.8>
1645:
1646: * Add check for _PATH_UTMP
1647: [fe7e2456f017] <1.8>
1648:
1649: * Adapt check_iolog_path to sessid changes
1650: [3016201869b6] <1.8>
1651:
1652: * Redo utmp handling. If no getutent()/getutxent() is available,
1653: assume a ttyslot-based utmp. If getttyent() is available, use that
1654: directly instead of ttyslot() so we don't have to do the stdin dup2
1655: dance.
1656: [817490c7c20e] <1.8>
1657:
1658: * Move utmp handling into utmp.c
1659: [e4729d9259e9] <1.8>
1660:
1661: * Update copyright years.
1662: [1065afc00233] <1.8>
1663:
1664: 2011-03-11 Todd C. Miller <Todd.Miller@courtesan.com>
1665:
1666: * Add "user_shell" boolean as a way to indicate to the plugin that the
1667: -s flag was given.
1668: [6e8bc49b7ea7] <1.8>
1669:
1670: * Move sessid out of sudo_user.
1671: [00d67d5ba894] <1.8>
1672:
1673: * Log the TSID even if it is not a simple session ID.
1674: [490cf0adae29] <1.8>
1675:
1676: * Document noexec in sample.sudo.conf and add back noexec_file section
1677: in sudoers with a note that it is deprecated.
1678: [c7a2d8d0c563] <1.8>
1679:
1680: * Fix running commands as non-root on systems where setreuid() changes
1681: the saved uid based on the effective uid we are changing to.
1682: [f3b27db56ba6] <1.8>
1683:
1684: 2011-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
1685:
1686: * Move noexec path into sudo.conf now that sudo itself handles noexec.
1687: Currently can be configured in sudoers too but is now undocumented
1688: and will be removed in a future release.
1689: [9c5f64709994] <1.8>
1690:
1691: * Document "Path noexec ..." in sudo.conf. No longer document
1692: noexec_file in sudoers, it will be removed in a future release.
1693: [959fa6b5217b] <1.8>
1694:
1695: * Move noexec handling to sudo front-end where it is documented as
1696: being.
1697: [ef6cd4a40c61] <1.8>
1698:
1699: * Add support for disabling exec via solaris privileges. Includes
1700: preparation for moving noexec support out of sudoers and into front
1701: end as documented.
1702: [d9c05ba9a24f] <1.8>
1703:
1704: * Only export the symbols corresponding to the plugin structs.
1705: [cb07af1d9b39] <1.8>
1706:
1707: * Install plugins manually instead of using libtool. This works
1708: around a problem on AIX where libtool will install a .a file
1709: containing the .so file instead of the .so file itself.
1710: [1ccf5af58c05] <1.8>
1711:
1712: * Makefile.in:
1713: Move check into its own rule since some versions of make will run
1714: both targets as the default rule.
1715: [7159f37eb552] <1.8>
1716:
1717: * Update to libtool 2.2.10
1718: [9e49773b32b7] <1.8>
1719:
1720: * In handle_signals(), restart the read() on EINTR to make sure we
1721: keep up with the signal pipe. Don't return -1 on EAGAIN, it just
1722: means we have emptied the pipe.
1723: [dc2926097b2d] <1.8>
1724:
1725: * Reorder functions to quiet a compiler warning.
1726: [5201367e5db4] <1.8>
1727:
1728: * Use the Sun Studio C compiler on Solaris if possible
1729: [b8d43b423fb9] <1.8>
1730:
1731: 2011-03-08 Todd C. Miller <Todd.Miller@courtesan.com>
1732:
1733: * Fix default setting of osversion variable.
1734: [e12905851be5] <1.8>
1735:
1736: * Make two login_class entris consistent.
1737: [0671d7b204be] <1.8>
1738:
1739: * Add support for adding a utmp entry when allocating a new pty.
1740: Requires the BSD login(3) or SYSV/POSIX getutent()/getutxent().
1741: Currently only creates a new entry if the existing tty has a utmp
1742: entry.
1743: [40ff30099e79] <1.8>
1744:
1745: * Avoid pulling in headers we don't need on Linux For getutx?id(),
1746: call setutx?ent() first and always call endutx?ent().
1747: [b86f7a13aae9] <1.8>
1748:
1749: * Add some more libs to SUDOERS_LIBS instead of relying on them to be
1750: pulled in by SUDO_LIBS.
1751: [bcbd16ec56c6] <1.8>
1752:
1753: * Fix return value of "sudo -l command" when command is not allowed,
1754: broken in [c7097ea22111]. The default return value is now TRUE and
1755: a bad: label is used when permission is denied. Also fixed missing
1756: permissions restoration on certain errors. On error()/errorx(), the
1757: password and group files are now closed before returning.
1758: [757c941a47b2] <1.8>
1759:
1760: 2011-03-07 Todd C. Miller <Todd.Miller@courtesan.com>
1761:
1762: * Fix passing of login class back to sudo front end.
1763: [5e649de6b7f5] <1.8>
1764:
1765: * Add --osversion flag to specify OS instead of running "pp
1766: --probeonly"
1767: [8a03943ac5e8] <1.8>
1768:
1769: * Fix expr usage w/ GNU expr
1770: [bdecfa1f54fc] <1.8>
1771:
1772: 2011-03-06 Todd C. Miller <Todd.Miller@courtesan.com>
1773:
1774: * Fix exit value for validate and list mode.
1775: [6f8b20199935] <1.8>
1776:
1777: * Fix non-interactive mode with sudoers plugin.
1778: [cf5aca4fcbcf] <1.8>
1779:
1780: 2011-03-05 Todd C. Miller <Todd.Miller@courtesan.com>
1781:
1782: * sudoreplay can now find IDs other than %{seq} and display the
1783: session.
1784: [60396b417633] <1.8>
1785:
1786: * Add support for replaying sessions when iolog_file is set to
1787: something other than %{seq}.
1788: [1cd2baa74d56] <1.8>
1789:
1790: 2011-03-04 Todd C. Miller <Todd.Miller@courtesan.com>
1791:
1792: * If we are killed by a signal, display the name of the signal that
1793: got us.
1794: [1b38c4d42282] <1.8>
1795:
1796: * Move libs used for authentication from SUDO_LIBS to SUDOERS_LIBS
1797: where they belong.
1798: [78e97a921104] <1.8>
1799:
1800: * Fix bug in skey/opie check that could cause a shell warning.
1801: [f20229a04f30] <1.8>
1802:
1803: * No longer need sudo_getepw() stubs.
1804: [795631ac7db0] <1.8>
1805:
1806: 2011-03-03 Todd C. Miller <Todd.Miller@courtesan.com>
1807:
1808: * Fix exit value of "sudo -l command" in sudoers module.
1809: [4a05d6019b3d] <1.8>
1810:
1811: 2011-03-02 Todd C. Miller <Todd.Miller@courtesan.com>
1812:
1813: * Use fgets() not fgetln() for portability.
1814: [1f2050745096] <1.8>
1815:
1816: * Don't use the beta or release candidate version as the rpm release.
1817: [a5b049477646] <1.8>
1818:
1819: 2011-02-25 Todd C. Miller <Todd.Miller@courtesan.com>
1820:
1821: * Makefile.in:
1822: Adjust ChangeLog rule now that 1.8 is branched
1823: [a994ac361e44] <1.8>
1824:
1825: * .hgtags:
1826: Added tag SUDO_1_8_0 for changeset f6530d56f6ae
1827: [99a2b3801419] <1.8>
1828:
1829: 2011-02-25 Todd C. Miller <Todd.Miller@courtesan.com>
1830:
1831: * configure, configure.in:
1832: version 1.8.0
1833: [f6530d56f6ae] [SUDO_1_8_0]
1834:
1835: * NEWS:
1836: update sudo 1.8 section
1837: [f2ee2cf95d18]
1838:
1839: 2011-02-23 Todd C. Miller <Todd.Miller@courtesan.com>
1840:
1841: * plugins/sudoers/regress/testsudoers/test2.sh:
1842: fix test description
1843: [cd5730fa9f09]
1844:
1845: * plugins/sudoers/regress/testsudoers/test2.out,
1846: plugins/sudoers/regress/testsudoers/test2.sh,
1847: plugins/sudoers/regress/visudo/test2.out,
1848: plugins/sudoers/regress/visudo/test2.sh:
1849: convert test2 to use testsudoers
1850: [b5ec3f0b69f1]
1851:
1852: * include/sudo_plugin.h, src/sudo_plugin_int.h:
1853: Move struct generic_plugin to sudo_plugin_int.h
1854: [6f7bc629329c]
1855:
1856: * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
1857: plugins/sudoers/parse.c, plugins/sudoers/parse.h,
1858: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
1859: plugins/sudoers/sudoers.h:
1860: Allow sudoers file name, mode, uid and gid to be specified in the
1861: settings list. The sudo front end does not currently set these but
1862: may in the future.
1863: [22f38a0fda2a]
1864:
1865: 2011-02-21 Todd C. Miller <Todd.Miller@courtesan.com>
1866:
1867: * configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
1868: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
1869: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
1870: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
1871: doc/visudo.man.in:
1872: 1.8.0rc1
1873: [5d4588b9c057]
1874:
1875: * doc/sudo.pod, doc/sudoreplay.pod, doc/visudo.pod,
1876: plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
1877: src/parse_args.c, src/sudo.h:
1878: add help text to sudo, visudo and sudoreplay for the -h option
1879: [52e7378d8476]
1880:
1881: 2011-02-19 Todd C. Miller <Todd.Miller@courtesan.com>
1882:
1883: * compat/snprintf.c:
1884: avoid using "howmany" for a parameter name since it is a select-
1885: related macro
1886: [a14d565401a1]
1887:
1888: * doc/sudoers.pod:
1889: mention group_plugin when describing nonunix_group
1890: [e0d1d0034b17]
1891:
1892: * doc/sudo_plugin.pod:
1893: Add missing period at end of sentence
1894: [6744d7e9056d]
1895:
1896: * Makefile.in, doc/Makefile.in, include/Makefile.in,
1897: plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
1898: plugins/sudoers/Makefile.in, src/Makefile.in:
1899: add localstatedir; closes bug 471
1900: [7aefcab85088]
1901:
1902: * config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c,
1903: src/exec.c, src/exec_pty.c:
1904: The howmany macro lives in sys/sysmacros.h on SVR5 systems Closes
1905: Bug 470
1906: [927ed6740f32]
1907:
1908: * configure.in:
1909: add missing AH_TEMPLATE for ENV_RESET
1910: [16300010c986]
1911:
1912: * src/exec.c:
1913: SVR5 systems return non-zero for success on socketpair(), check for
1914: -1 instead. Closes Bug 469
1915: [4d276494bf8e]
1916:
1917: 2011-02-16 Todd C. Miller <Todd.Miller@courtesan.com>
1918:
1919: * configure, configure.in:
1920: 1.8.0b5
1921: [d611cd5d73d3]
1922:
1923: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
1924: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
1925: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
1926: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
1927: regen
1928: [85e96eeaed82]
1929:
1930: * doc/sudo.pod:
1931: Document that a sudo.conf file with no Pligin lines uses the default
1932: sudoers plugins.
1933: [88bd52da977f]
1934:
1935: * src/load_plugins.c:
1936: If sudo.conf contains no Plugin lines, use the default sudoers
1937: policy and I/O plugins.
1938: [fd8f4cb811ab]
1939:
1940: 2011-02-14 Todd C. Miller <Todd.Miller@courtesan.com>
1941:
1942: * plugins/sudoers/sudo_nss.c:
1943: Avoid printing empty "Runas and Command-specific defaults for user"
1944: line.
1945: [2dd330fe4f8b]
1946:
1947: * common/lbuf.c:
1948: Truncate the buffer at buf.len before printing in the non-wordwrap
1949: case.
1950: [901e9833f80d]
1951:
1952: * common/lbuf.c:
1953: Remove extra newline when the tty width is very small or unavailable
1954: [245c05506c0e]
1955:
1956: 2011-02-11 Todd C. Miller <Todd.Miller@courtesan.com>
1957:
1958: * plugins/sudoers/alias.c:
1959: Remove unneeded variable.
1960: [2c086d30b796]
1961:
1962: 2011-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
1963:
1964: * configure, configure.in:
1965: Prefer getutxid over getutid
1966: [3f3322e9c93e]
1967:
1968: * plugins/sudoers/boottime.c:
1969: Include utmp.h / utmpx.h before missing.h as apparently including it
1970: afterwards causes a compilation problem on GNU Hurd.
1971: [a528029ae962]
1972:
1973: 2011-02-07 Todd C. Miller <Todd.Miller@courtesan.com>
1974:
1975: * plugins/sudoers/sudoreplay.c, plugins/sudoers/toke_util.c:
1976: #include "foo.h", not <foo.h> for local includes.
1977: [f65ec693998e]
1978:
1979: * src/parse_args.c:
1980: remove bogus XXX
1981: [9136c17d53ce]
1982:
1983: * compat/mksiglist.c:
1984: Fix typo
1985: [1a3bb7b455c9]
1986:
1987: * compat/glob.c, plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
1988: plugins/sudoers/match.c:
1989: return foo not return(foo)
1990: [5c9e0647359a]
1991:
1992: 2011-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
1993:
1994: * src/exec.c:
1995: Remove duplicate FD_SET of signal_pipe[0]
1996: [3096527d2215]
1997:
1998: 2011-02-05 Todd C. Miller <Todd.Miller@courtesan.com>
1999:
2000: * compat/mksiglist.c:
2001: Use "missing.h" not <missing.h> in generated code.
2002: [d8e09cffbe09]
2003:
2004: 2011-02-04 Todd C. Miller <Todd.Miller@courtesan.com>
2005:
2006: * aclocal.m4, configure:
2007: fix --with-iologdir=no
2008: [a89699cb5f5f]
2009:
2010: * aclocal.m4, configure:
2011: fix typo that broke --with-iologdir
2012: [91b54eb22403]
2013:
2014: 2011-02-03 Todd C. Miller <Todd.Miller@courtesan.com>
2015:
2016: * configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
2017: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
2018: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
2019: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
2020: doc/visudo.man.in:
2021: Bump version to 1.8.0b4
2022: [e2b7f2cdc02e]
2023:
2024: * NEWS:
2025: sync
2026: [decf5a0a8a33]
2027:
2028: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
2029: Attempt to clarify how users and groups interact in Runas_Specs
2030: [e6fb3a2dbd77]
2031:
2032: * plugins/sudoers/regress/visudo/test2.out,
2033: plugins/sudoers/regress/visudo/test2.sh:
2034: Add test for quoted group that contains escaped double quotes
2035: [44596c48c629]
2036:
2037: * src/exec.c, src/exec_pty.c:
2038: Pass SIGUSR1/SIGUSR2 through to the child.
2039: [c3108a827b01]
2040:
2041: * src/exec_pty.c, src/sudo_exec.h:
2042: Use special values SIGCONT_FG and SIGCONT_BG instead of SIGUSR1 and
2043: SIGUSR2 to indicate whether the child should be continued in the
2044: foreground or background.
2045: [35ca47cc6785]
2046:
2047: * src/exec.c:
2048: Use pid_t not int and check the return value of kill()
2049: [36ae7d37d7f9]
2050:
2051: 2011-02-02 Todd C. Miller <Todd.Miller@courtesan.com>
2052:
2053: * src/exec_pty.c:
2054: Remove obsolete comment
2055: [baebef4919f6]
2056:
2057: * src/exec.c:
2058: In non-pty mode before continuing the child, make it the foreground
2059: pgrp if possible. Fixes resuming a shell.
2060: [fef5b1d02ddb]
2061:
2062: * src/exec_pty.c:
2063: If we get a signal other than SIGCHLD in the monitor, pass it
2064: directly to the child.
2065: [b3ecb28163a0]
2066:
2067: * src/exec.c, src/exec_pty.c, src/sudo.h:
2068: Save signal state before changing handlers and restore before we
2069: execute the command.
2070: [faf7475dc4bf]
2071:
2072: 2011-02-01 Todd C. Miller <Todd.Miller@courtesan.com>
2073:
2074: * plugins/sudoers/iolog.c:
2075: Use a char array to map a number to a base36 digit.
2076: [257576c51f8b]
2077:
2078: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod:
2079: Be clear about what versions of sudo support new LDAP attributes.
2080: Fix up some formatting of attribute names. Minor other tweaks.
2081: [39f65df71f65]
2082:
2083: 2011-01-31 Todd C. Miller <Todd.Miller@courtesan.com>
2084:
2085: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
2086: match quoted strings the same way whether in a Defaults line or as a
2087: user/group/netgroup name. Fixes escaped double quotes in quoted
2088: user/group/netgroup names.
2089: [601d97ea8792]
2090:
2091: * plugins/sudoers/Makefile.in:
2092: 'make check' depends on visudo and testsudoers
2093: [127c5a24df8f]
2094:
2095: * plugins/sudoers/sudoers2ldif:
2096: Add sudoOrder attribute to each entry Parse LOG_{INPUT,OUTPUT} tags
2097: [9029163a58c3]
2098:
2099: 2011-01-30 Todd C. Miller <Todd.Miller@courtesan.com>
2100:
2101: * doc/UPGRADE:
2102: Mention LDAP attribute compatibility status.
2103: [2c3595aaec63]
2104:
2105: 2011-01-28 Todd C. Miller <Todd.Miller@courtesan.com>
2106:
2107: * README.LDAP:
2108: Mention phpQLAdmin
2109: [9304c9064fbe]
2110:
2111: * INSTALL, NEWS, config.h.in, configure, configure.in,
2112: doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c:
2113: Add --disable-env-reset configure option.
2114: [8a753aa13a46]
2115:
2116: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
2117: Document that sudoers_locale also affects logging and email.
2118: [998d6ac11277]
2119:
2120: * NEWS, config.h.in, configure, configure.in,
2121: plugins/sudoers/logging.c:
2122: Do logging and email sending in the locale specified by the
2123: "sudoers_locale" setting ("C" by default). Email send by sudo
2124: includes MIME headers when the sudoers locale is not "C".
2125: [cb7e55408400]
2126:
2127: 2011-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
2128:
2129: * plugins/sudoers/check.c:
2130: Fix indentation
2131: [65ae7e92b9e4]
2132:
2133: 2011-01-25 Todd C. Miller <Todd.Miller@courtesan.com>
2134:
2135: * NEWS, src/parse_args.c, src/sudo.c:
2136: Perform command escaping for "sudo -s" and "sudo -i" after
2137: validating sudoers so the sudoers entries don't need to have all the
2138: backslashes.
2139: [4e168c103f4b]
2140:
2141: 2011-01-24 Todd C. Miller <Todd.Miller@courtesan.com>
2142:
2143: * plugins/sudoers/logging.c:
2144: Prepend "list " to the command logged when "sudo -l command" is used
2145: to make it clear that the command was listed, not run.
2146: [f392a6056cd6]
2147:
2148: * plugins/sudoers/parse.c:
2149: cosmetic change
2150: [7c0951dbc2dd]
2151:
2152: * common/aix.c, common/alloc.c, common/fileops.c, common/fmt_string.c,
2153: common/list.c, common/term.c, compat/fnmatch.c, compat/getcwd.c,
2154: compat/glob.c, compat/isblank.c, compat/memrchr.c, compat/mktemp.c,
2155: compat/nanosleep.c, compat/regress/glob/globtest.c,
2156: compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
2157: compat/strsignal.c, compat/utimes.c, plugins/sample/sample_plugin.c,
2158: plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
2159: plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
2160: plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
2161: plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
2162: plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
2163: plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
2164: plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
2165: plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
2166: plugins/sudoers/auth/sia.c, plugins/sudoers/bsm_audit.c,
2167: plugins/sudoers/check.c, plugins/sudoers/defaults.c,
2168: plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
2169: plugins/sudoers/gram.c, plugins/sudoers/gram.y,
2170: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
2171: plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c,
2172: plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
2173: plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
2174: plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
2175: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
2176: plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
2177: plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
2178: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
2179: src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c,
2180: src/sudo_noexec.c, src/tgetpass.c:
2181: standardize on "return foo;" rather than "return(foo);" or "return
2182: (foo);"
2183: [32d76c5aaf8c]
2184:
2185: * plugins/sudoers/sudoers.c:
2186: Do not reject sudoers file just because it is root-writable.
2187: [0febc579185b]
2188:
2189: 2011-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
2190:
2191: * NEWS:
2192: sync
2193: [1ab03f8278ff]
2194:
2195: * plugins/sudoers/sudo_nss.c:
2196: For "sudo -U user -l" if user is not authorized on the host, say so.
2197: [289afe6dd15c]
2198:
2199: * plugins/sudoers/ldap.c:
2200: In sudo_ldap_lookup(), always do the initial sudoers check as the
2201: invoking user. If we are listing another user's privs we will do a
2202: separate lookup using list_pw later.
2203: [e52bc15de76d]
2204:
2205: 2011-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
2206:
2207: * MANIFEST:
2208: add parser fill tests
2209: [4f65140d3515]
2210:
2211: * compat/regress/glob/globtest.c, compat/regress/glob/globtest.in:
2212: Don't test features not supported by the bundled glob()
2213: [8ec7ace11949]
2214:
2215: * Makefile.in, aclocal.m4, common/Makefile.in, common/term.c,
2216: compat/Makefile.in, configure.in, doc/LICENSE, doc/Makefile.in,
2217: doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
2218: doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, doc/sudoers.man.in,
2219: doc/sudoers.pod, include/Makefile.in, plugins/sample/Makefile.in,
2220: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
2221: plugins/sudoers/check.c, plugins/sudoers/defaults.c,
2222: plugins/sudoers/gram.c, plugins/sudoers/gram.y,
2223: plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
2224: plugins/sudoers/ldap.c, plugins/sudoers/match.c,
2225: plugins/sudoers/pwutil.c, plugins/sudoers/sudo_nss.c,
2226: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
2227: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
2228: plugins/sudoers/toke.c, plugins/sudoers/toke.l,
2229: plugins/sudoers/toke_util.c, src/Makefile.in, zlib/Makefile.in:
2230: Update copyright year to 2011
2231: [ac1b45cb1809]
2232:
2233: * plugins/sudoers/sudo_nss.c:
2234: When listing, use separate lbufs for the defaults and the privileges
2235: and only print something if the number of privileges is non-zero.
2236: Fixes extraneous Defaults output for "sudo -U unauthorized_user -l".
2237: [d0854d39f8ef]
2238:
2239: * plugins/sudoers/ldap.c:
2240: Stash pointer to user group vector in LDAP handle and only reuse the
2241: query if it has not changed. We always allocate a new buffer when
2242: we reset the group vector so a simple pointer check is sufficient.
2243: [88861d4eba69]
2244:
2245: * plugins/sudoers/sudo_nss.c:
2246: Check initgroups() return value.
2247: [3bdaf58408a7]
2248:
2249: * plugins/sudoers/Makefile.in,
2250: plugins/sudoers/regress/parser/check_fill.c:
2251: Add tests for the fill functions in toke_util.c
2252: [bca587ab4956]
2253:
2254: 2011-01-19 Todd C. Miller <Todd.Miller@courtesan.com>
2255:
2256: * plugins/sudoers/regress/iolog_path/check_iolog_path.c:
2257: fix copyright year
2258: [e2038cdaf055]
2259:
2260: * NEWS:
2261: sync
2262: [56ca5d5eaebe]
2263:
2264: 2011-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
2265:
2266: * common/term.c:
2267: Clear, don't set, OPOST in c_oflag as was intended in 506ad5ae9b4e.
2268: [b91f266624ec]
2269:
2270: 2011-01-14 Todd C. Miller <Todd.Miller@courtesan.com>
2271:
2272: * mkpkg, sudo.pp:
2273: Add Requires line for audit-libs >= 1.4 for RHEL5+
2274: [6c02f976171b]
2275:
2276: * pp:
2277: sync with git version
2278: [d301c32d5865]
2279:
2280: 2011-01-13 Todd C. Miller <Todd.Miller@courtesan.com>
2281:
2282: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
2283: fix typo
2284: [39353f92976f]
2285:
2286: 2011-01-12 Todd C. Miller <Todd.Miller@courtesan.com>
2287:
2288: * NEWS:
2289: Update for sudo 1.7.4p5
2290: [b444da76901f]
2291:
2292: * doc/schema.OpenLDAP, doc/schema.iPlanet:
2293: Add sudoNotBefore and sudoNotAfter attributes as optional attributes
2294: to the sudoRole object class. From Andreas Mueller
2295: [dacfad7e7a95]
2296:
2297: 2011-01-11 Todd C. Miller <Todd.Miller@courtesan.com>
2298:
2299: * NEWS:
2300: Mention "sudo -g group" password check fix.
2301: [1eb8fb14e53b]
2302:
2303: * plugins/sudoers/sudoers.c:
2304: Fix "sudo -g" support in the sudoers module.
2305: [07d1b0ce530e]
2306:
2307: * plugins/sudoers/check.c:
2308: If the user is running sudo as himself but as a different group we
2309: need to prompt for a password.
2310: [caf1fcc9a117]
2311:
2312: 2011-01-10 Todd C. Miller <Todd.Miller@courtesan.com>
2313:
2314: * NEWS, config.h.in, configure, configure.in, doc/sudoers.ldap.cat,
2315: doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
2316: plugins/sudoers/ldap.c:
2317: Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP
2318: LDAP_OPT_TIMEOUT. There is no corresponding option for mozilla-
2319: derived LDAP SDKs but we can pass the timeout parameter to
2320: ldap_search_ext_s() or ldap_search_st() when possible.
2321: [5537049991f7]
2322:
2323: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
2324: regen
2325: [5b361c3c4324]
2326:
2327: * NEWS, doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
2328: Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility
2329: with OpenLDAP ldap.conf files.
2330: [e97843bd16fb]
2331:
2332: * plugins/sudoers/pwutil.c:
2333: If user has no supplementary groups, fall back on checking the group
2334: file expliticly.
2335: [5223ad4eb690]
2336:
2337: 2011-01-08 Todd C. Miller <Todd.Miller@courtesan.com>
2338:
2339: * plugins/sudoers/toke.h, plugins/sudoers/toke_util.c:
2340: constify
2341: [6e132a4cca61]
2342:
2343: * plugins/sudoers/toke.c, plugins/sudoers/toke.h,
2344: plugins/sudoers/toke.l:
2345: Move fill macro to toke.h
2346: [623d430798cf]
2347:
2348: * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/toke.c,
2349: plugins/sudoers/toke.h, plugins/sudoers/toke.l,
2350: plugins/sudoers/toke_util.c:
2351: Split tokenizer utility functions out into toke_util.c
2352: [89a97bd51618]
2353:
2354: * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
2355: plugins/sudoers/toke.c, plugins/sudoers/toke.l:
2356: ANSIfy
2357: [ca0eba1dfaa9]
2358:
2359: 2011-01-07 Todd C. Miller <Todd.Miller@courtesan.com>
2360:
2361: * MANIFEST:
2362: sync
2363: [a43f94064bb3]
2364:
2365: * plugins/sudoers/Makefile.in:
2366: Add visudo tests to check target
2367: [8c82fb4ed40f]
2368:
2369: * compat/Makefile.in, compat/regress/fnmatch/fnm_test.c,
2370: compat/regress/fnmatch/fnm_test.in, compat/regress/glob/files,
2371: compat/regress/glob/globtest.c, compat/regress/glob/globtest.in:
2372: Add my regress tests for fnmatch() and glob() from OpenBSD.
2373: [6e8c1f211723]
2374:
2375: * plugins/sudoers/regress/testsudoers/test1.sh,
2376: plugins/sudoers/regress/visudo/test1.ok,
2377: plugins/sudoers/regress/visudo/test1.sh:
2378: Add regress test for command tags using visudo -c
2379: [18b0ef207c0f]
2380:
2381: * plugins/sudoers/Makefile.in,
2382: plugins/sudoers/regress/testsudoers/test1.ok,
2383: plugins/sudoers/regress/testsudoers/test1.sh:
2384: Add support for regress tests using testsudoers
2385: [1fa94bd2671b]
2386:
2387: * plugins/sudoers/testsudoers.c:
2388: Need to set user_name explicitly due to internal changes made when
2389: converting sudoers to a plugin.
2390: [1fa54e86a364]
2391:
2392: 2011-01-06 Todd C. Miller <Todd.Miller@courtesan.com>
2393:
2394: * MANIFEST, Makefile.in, common/Makefile.in, compat/Makefile.in,
2395: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
2396: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
2397: plugins/sudoers/regress/iolog_path/check_iolog_path.c,
2398: plugins/sudoers/regress/iolog_path/data, src/Makefile.in,
2399: zlib/Makefile.in:
2400: Add regression tests for iolog_path()
2401: [afa4b416e559]
2402:
2403: * Makefile.in, common/Makefile.in, compat/Makefile.in,
2404: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
2405: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
2406: src/Makefile.in, zlib/Makefile.in:
2407: Add support for "make Makefile" to regenerate Makefile from
2408: Makefile.in
2409: [98bd2dda3294]
2410:
2411: * plugins/sudoers/iolog_path.c:
2412: Quiest a bogus compiler warning.
2413: [5ff932a7ad67]
2414:
2415: 2011-01-05 Todd C. Miller <Todd.Miller@courtesan.com>
2416:
2417: * plugins/sudoers/iolog_path.c:
2418: Protect call to setlocale() with HAVE_SETLOCALE
2419: [2c29ee3ccc81]
2420:
2421: 2011-01-04 Todd C. Miller <Todd.Miller@courtesan.com>
2422:
2423: * MANIFEST:
2424: mkstemps.c was renamed mktemp.c
2425: [ae299c3b1827]
2426:
2427: * NEWS:
2428: Update from 1.7 branch
2429: [20817d79717b]
2430:
2431: * Makefile.in:
2432: Use "mv -f" when regenerating ChangeLog
2433: [c163635206c6]
2434:
2435: * plugins/sudoers/match.c:
2436: Fix NULL dereference with "sudo -g group" when the sudoers rule has
2437: no runas user or group listed. Fixes RedHat bug Bug 667103.
2438: [41a6a1243d9e]
2439:
2440: 2011-01-03 Todd C. Miller <Todd.Miller@courtesan.com>
2441:
2442: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
2443: Correct the default sudo.conf example
2444: [4e791698cad1]
2445:
2446: 2010-12-31 Todd C. Miller <Todd.Miller@courtesan.com>
2447:
2448: * plugins/sudoers/iolog_path.c:
2449: Reset slashp if we allocate a new buffer for strftime()
2450: [e491daa4203b]
2451:
2452: * plugins/sudoers/iolog_path.c, plugins/sudoers/sudoers.c,
2453: plugins/sudoers/sudoers.h:
2454: Add extra out parameter to expand_iolog_path() to allow the caller
2455: to split the path into dir and file components if needed.
2456: [88346bc5ae39]
2457:
2458: 2010-12-30 Todd C. Miller <Todd.Miller@courtesan.com>
2459:
2460: * plugins/sudoers/iolog.c:
2461: mkdir_iopath() returns size_t now that it uses strlcpy() and not
2462: snprintf()
2463: [3c4c64d265eb]
2464:
2465: * plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c:
2466: Trim leading slashes from iolog_file and trailing slashes from
2467: iolog_dir
2468: [a803b51f8948]
2469:
2470: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
2471: plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
2472: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
2473: Pass a single I/O log file name in command_details instead of
2474: separate dir + file parameters.
2475: [d672a3e46e80]
2476:
2477: * plugins/sudoers/sudoreplay.c:
2478: change an error() to errorx()
2479: [8013dcfdd69d]
2480:
2481: * plugins/sudoers/iolog.c:
2482: Add missing cwd line to I/O log info file that got dropped when
2483: iolog_deserialize_info() was added
2484: [7cf84f208423]
2485:
2486: 2010-12-29 Todd C. Miller <Todd.Miller@courtesan.com>
2487:
2488: * plugins/sudoers/iolog.c:
2489: Avoid relying on globals filled in by the sudoers policy module for
2490: the sudoers I/O log module. The I/O log open function now pulls the
2491: bits it needs out of user_info and command_info.
2492: [c02f6951b0cc]
2493:
2494: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
2495: plugins/sudoers/sudoers.h:
2496: If no iolog file is specified by the policy plugin, use io_nextid()
2497: to determine the next file in the sequence.
2498: [faa1130b1020]
2499:
2500: 2010-12-28 Todd C. Miller <Todd.Miller@courtesan.com>
2501:
2502: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
2503: Document iolog_compress in command_info
2504: [58895c7d12f5]
2505:
2506: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
2507: Add support for the iolog_compress variable in command_info.
2508: [36f13a2fd1c1]
2509:
2510: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
2511: Add sigsetjmp() calls to all plugin entry points just to be safe.
2512: [3fa482355bc4]
2513:
2514: * src/sudo.c, src/sudo.h:
2515: Don't need iolog variables in struct command_details, they are for
2516: the I/O log plugins to handle.
2517: [5111579ffd9d]
2518:
2519: 2010-12-27 Todd C. Miller <Todd.Miller@courtesan.com>
2520:
2521: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
2522: Document use of mkdtemp() for iolog path teplates
2523: [5db6101408a9]
2524:
2525: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
2526: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
2527: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
2528: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
2529: regen
2530: [1ee11fd6d4eb]
2531:
2532: * doc/sudo_plugin.pod, doc/sudoers.pod:
2533: Document iolog_file and supported escape sequences for sudoers.
2534: Clarify that iolog_file can contain directories.
2535: [da611dedcbdb]
2536:
2537: * compat/Makefile.in, configure, configure.in:
2538: Fix building of mkstemps/mkdtemp replacements.
2539: [793a5e303122]
2540:
2541: * compat/mkstemps.c, compat/mktemp.c, config.h.in, configure,
2542: configure.in, include/missing.h:
2543: Provide mkdtemp() for systems without it.
2544: [b0527dfa965c]
2545:
2546: * plugins/sudoers/iolog_path.c:
2547: Fix typo
2548: [277f6c514cba]
2549:
2550: * plugins/sudoers/iolog.c:
2551: Only use mkdtemp() if the path ends in at least 6 Xs since otherwise
2552: glibc mkdtemp() returns EINVAL.
2553: [2e7323b05579]
2554:
2555: * plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
2556: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
2557: plugins/sudoers/defaults.c, plugins/sudoers/iolog.c,
2558: plugins/sudoers/iolog_path.c, plugins/sudoers/plugin_error.c,
2559: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
2560: Allow sudoers to specify the iolog file in addition to the iolog
2561: dir. Add escape sequence support to iolog file and dir: sequence
2562: number, user, group, runas_user, runas_group, hostname and
2563: command in addition to any escape sequence recognized by
2564: strftime(3).
2565: [75cd32ee0435]
2566:
2567: * plugins/sudoers/iolog.c:
2568: Add missing sigsetjmp() call in I/O plugin open function. Fixes a
2569: crash when the I/O plugin calls error(), errorx() or log_error().
2570: [1a6718bd817d]
2571:
2572: 2010-12-21 Todd C. Miller <Todd.Miller@courtesan.com>
2573:
2574: * doc/sudo_plugin.pod, plugins/sudoers/iolog.c,
2575: plugins/sudoers/sudoers.c:
2576: Give the policy module fine-grained control over what the I/O plugin
2577: logs.
2578: [d29784fd2a66]
2579:
2580: * common/term.c:
2581: Clear OPOST from c_oflag like we used to. Fixes screen-based
2582: editors such as vi.
2583: [506ad5ae9b4e]
2584:
2585: * doc/sudoers.pod:
2586: Clarify umask option description. From Reuben Thomas.
2587: [1294ac84222b]
2588:
2589: 2010-12-20 Todd C. Miller <Todd.Miller@courtesan.com>
2590:
2591: * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
2592: Pick last match in LDAP sudoers too
2593: [fbfd8e85703b]
2594:
2595: * doc/sudo_plugin.pod:
2596: Document iolog_file, iolog_dir and use_pty
2597: [26120a59c20e]
2598:
2599: * plugins/sample/sample_plugin.c, plugins/sudoers/iolog.c,
2600: plugins/sudoers/sudoers.c:
2601: Adapt plugins to version I/O logging ABI 1.1
2602: [880dd64bc1e8]
2603:
2604: * src/exec.c, src/sudo.h:
2605: Add use_pty command_info flag for policies to indicate that a pty
2606: should be allocated even if no I/O logging is performed.
2607: [e7b167f8a6e5]
2608:
2609: * src/sudo.c:
2610: Add remaining plugin convenience functions
2611: [ffeaf96da031]
2612:
2613: * include/sudo_plugin.h, src/sudo.c, src/sudo.h,
2614: src/sudo_plugin_int.h:
2615: Change I/O log API to pass in command info to the I/O log open
2616: function. Add iolog_file and iolog_dir parameters to command info.
2617: This allows the policy plugin to specify the I/O log pathname. Add
2618: convenience functions for calling plugin functions that handle ABI
2619: backwards compatibility.
2620: [9b81dce76ce5]
2621:
2622: * compat/dlopen.c:
2623: Remove useless cast
2624: [7cecce969739]
2625:
2626: 2010-12-17 Todd C. Miller <Todd.Miller@courtesan.com>
2627:
2628: * configure, configure.in:
2629: Bump version to 1.8.0b3
2630: [1dc9f040aae0]
2631:
2632: 2010-12-13 Todd C. Miller <Todd.Miller@courtesan.com>
2633:
2634: * configure.in:
2635: Remove extraneous newline
2636: [71c94551eea5]
2637:
2638: 2010-12-10 Todd C. Miller <Todd.Miller@courtesan.com>
2639:
2640: * doc/sudoers.pod, plugins/sudoers/def_data.c,
2641: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
2642: plugins/sudoers/defaults.c, plugins/sudoers/iolog.c:
2643: Make I/O log dir configurable.
2644: [99b576667a38]
2645:
2646: * aclocal.m4, configure, configure.in, doc/sudoers.pod:
2647: Rename io_logdir to iolog_dir
2648: [0731662acc8d]
2649:
2650: 2010-12-07 Todd C. Miller <Todd.Miller@courtesan.com>
2651:
2652: * pp:
2653: Add missing '*' that prevented the generic ELF case from matching.
2654: [be77ca26bfb2]
2655:
2656: * pp:
2657: If file(1) can't identify the ELF binary type, try readelf(1).
2658: [38a18d32a9e3]
2659:
2660: 2010-11-30 Todd C. Miller <Todd.Miller@courtesan.com>
2661:
2662: * plugins/sudoers/auth/kerb4.c, plugins/sudoers/check.c,
2663: plugins/sudoers/env.c, plugins/sudoers/pwutil.c,
2664: plugins/sudoers/sudoers.c, src/sudo.c:
2665: Use %u to print uid/gid, not %lu and adjust casts to match.
2666: [03c43b8749cf]
2667:
2668: * doc/sudoers.ldap.pod:
2669: Clarify ordering of entries and attributes.
2670: [924e2a6bb603]
2671:
2672: * doc/sudoers.ldap.pod:
2673: Fix typo and editing goof.
2674: [79dc7ccd85a8]
2675:
2676: * doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet,
2677: doc/sudoers.ldap.pod:
2678: Merge in ordered LDAP entry support from Andreas Mueller.
2679: [ea5885989bad]
2680:
2681: * plugins/sudoers/ldap.c:
2682: Make sure we don't dereference a NULL handle.
2683: [1a9f9ee15371]
2684:
2685: 2010-11-24 Todd C. Miller <Todd.Miller@courtesan.com>
2686:
2687: * pp:
2688: Add support for RHEL 6 file modes that include a trailing dot on
2689: files with an SELinux security context
2690: [dc09be959547]
2691:
2692: 2010-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
2693:
2694: * src/sudo.c:
2695: exec_setup() does not need to setuid(0), the Ubuntu issue was in the
2696: sudoers module.
2697: [d6dd99fc6062]
2698:
2699: * plugins/sudoers/sudoers.c:
2700: create_admin_success_flag() should use restore_perms() rather than
2701: set_perms() to restore the uid.
2702: [eba7a91c1f57]
2703:
2704: * src/sudo.c:
2705: In exec_setup() call setuid(0) to make certain the subsequent uid
2706: and gid changes will succeed. Fixes a problem on Ubuntu.
2707: [c5d32abf0645]
2708:
2709: * src/sudo_edit.c:
2710: Error out if we cannot change to root's uid so we catch the failure
2711: early.
2712: [7a2e7f8f2c80]
2713:
2714: 2010-11-22 Todd C. Miller <Todd.Miller@courtesan.com>
2715:
2716: * doc/sudoers.pod:
2717: fix typo; from Michael T Hunter
2718: [a574a9d0db5b]
2719:
2720: * plugins/sudoers/match.c:
2721: In sudoedit mode, assume command line arguments are paths and pass
2722: FNM_PATHNAME to fnmatch().
2723: [ce0abff8ce9f]
2724:
2725: 2010-11-20 Todd C. Miller <Todd.Miller@courtesan.com>
2726:
2727: * configure, configure.in:
2728: Add workaround for an error in sys/types.h on HP-UX 11.23 when large
2729: file support is enabled. Defining _XOPEN_SOURCE_EXTENDED avoids the
2730: broken bits of the header file.
2731: [e337217f097a]
2732:
2733: * aclocal.m4:
2734: Fix SUDO_MAILDIR usage of AC_LANG_PROGRAM
2735: [fbbcee28961f]
2736:
2737: * sudo.pp:
2738: For Tru64, strip off beta version.
2739: [eeccd762df5e]
2740:
2741: * MANIFEST, plugins/sudoers/testsudoers.c,
2742: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h:
2743: Avoid conflicts with system definitions in grp.h and pwd.h
2744: [b219ffe1da09]
2745:
2746: * zlib/gzguts.h:
2747: Include stdio.h after zlib.h, not before. We need the large file
2748: defines to come first.
2749: [21d6df39790f]
2750:
2751: 2010-11-19 Todd C. Miller <Todd.Miller@courtesan.com>
2752:
2753: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
2754: regen
2755: [3ff8750d0aac]
2756:
2757: * Makefile.in:
2758: Don't clean ChangeLog
2759: [ab0d30d289d4]
2760:
2761: * plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
2762: Add prototype for cleanup()
2763: [75626fd3769a]
2764:
2765: 2010-11-18 Todd C. Miller <Todd.Miller@courtesan.com>
2766:
2767: * plugins/sudoers/group_plugin.c:
2768: Avoid deferencing group_plugin if it is NULL in
2769: group_plugin_query(). This should not happen.
2770: [4f2933c8da7e]
2771:
2772: * plugins/sudoers/group_plugin.c:
2773: group plugin init function return TRUE when successful
2774: [198024477030]
2775:
2776: 2010-11-17 Todd C. Miller <Todd.Miller@courtesan.com>
2777:
2778: * plugins/sudoers/ldap.c:
2779: Enlarge the array of entry wrappers int blocks of 100 entries to
2780: save on allocation time. From Andreas Mueller
2781: [375c916bb03b]
2782:
2783: * plugins/sudoers/ldap.c:
2784: Add back call to sudo_ldap_timefilter() in sudo_ldap_build_pass2()
2785: that was mistakenly dropped.
2786: [1555f5bc132d]
2787:
2788: 2010-11-16 Todd C. Miller <Todd.Miller@courtesan.com>
2789:
2790: * doc/TROUBLESHOOTING:
2791: Mention that sudo needs "ar" to build.
2792: [65582ace2d09]
2793:
2794: * configure, configure.in:
2795: Fail with a more useful error if "ar" is not found.
2796: [d1cb83719c17]
2797:
2798: 2010-11-14 Todd C. Miller <Todd.Miller@courtesan.com>
2799:
2800: * plugins/sudoers/ldap.c:
2801: Merge in ordered LDAP entry support from Andreas Mueller and add
2802: local changes from the 1.7 branch.
2803: [bca29e461618]
2804:
2805: 2010-11-12 Todd C. Miller <Todd.Miller@courtesan.com>
2806:
2807: * doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet,
2808: doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
2809: Add timed entry support from Andreas Mueller.
2810: [e18d1df46a8d]
2811:
2812: * plugins/sudoers/group_plugin.c:
2813: Don't try to unload if group_plugin is NULL. Don't call dlclose() if
2814: group_handle is NULL
2815: [de2273da37d5]
2816:
2817: * plugins/sudoers/sudoers.h:
2818: It is now plugin_cleanup(), not cleanup()
2819: [da62a4e1a78c]
2820:
2821: * plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
2822: Call plugin_cleanup(), not cleanup()
2823: [e800ad8b33ad]
2824:
2825: 2010-11-11 Todd C. Miller <Todd.Miller@courtesan.com>
2826:
2827: * plugins/sudoers/ldap.c:
2828: Use efree() not free() and remove malloc.h include since we never
2829: directly call malloc() or free().
2830: [107fffd134bb]
2831:
2832: 2010-11-09 Todd C. Miller <Todd.Miller@courtesan.com>
2833:
2834: * sudo.pp:
2835: set PSTAMP for Solaris and move the backend-specific bits to their
2836: own %if [xxx] %endif blocks in %set.
2837: [a94ebe8920c1]
2838:
2839: * pp:
2840: sync with git repo
2841: [75ff509696b4]
2842:
2843: * configure, configure.in:
2844: Only substitute file zlib files when using the builtin zlib
2845: [6c8145b2deb4]
2846:
2847: * common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in,
2848: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
2849: src/Makefile.in, zlib/Makefile.in:
2850: Give up on using VPATH to find sources as it is implemented
2851: inconsistenly in different versions of make.
2852: [60517c69aaee]
2853:
2854: * plugins/sudoers/Makefile.in, plugins/sudoers/getdate.c,
2855: plugins/sudoers/gram.c, plugins/sudoers/toke.c:
2856: Include config.h before any other includes to make sure we get the
2857: right value for _FILE_OFFSET_BITS.
2858: [8fb007ca832e]
2859:
2860: * MANIFEST:
2861: Add zlib
2862: [04a3e23dfaa9]
2863:
2864: * zlib/Makefile.in:
2865: Add missing targets
2866: [40e45a177168]
2867:
2868: * src/Makefile.in:
2869: g/c unused $(GENERATED)
2870: [c8758068c1bc]
2871:
2872: 2010-11-08 Todd C. Miller <Todd.Miller@courtesan.com>
2873:
2874: * plugins/sudoers/group_plugin.c:
2875: Zero out group_plugin on unload just to be safe.
2876: [0b10f4d101ca]
2877:
2878: * plugins/sudoers/group_plugin.c:
2879: Unload group plugin if its init function fails.
2880: [6552cdac4b7c]
2881:
2882: * src/sudo.c:
2883: Only chdir to cwd if it is different from the current cwd or there
2884: is a new root (chroot).
2885: [b8203e875e84]
2886:
2887: * configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
2888: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.ldap.cat,
2889: doc/sudoers.ldap.man.in, doc/visudo.cat, doc/visudo.man.in:
2890: Bump version to 1.8.0b2
2891: [6dadeb75a878]
2892:
2893: 2010-10-28 Todd C. Miller <Todd.Miller@courtesan.com>
2894:
2895: * INSTALL:
2896: Better --enable-zlib description
2897: [e0da54fa59a6]
2898:
2899: * mkpkg:
2900: Use system zlib on Linux Let configure decide on Solaris For all
2901: others, use builtin zlib
2902: [3d52eddb523c]
2903:
2904: * zlib/zconf.h.in:
2905: Add large file support.
2906: [bec01215270d]
2907:
2908: * config.h.in:
2909: Add large file support.
2910: [244e95b034ec]
2911:
2912: * Makefile.in, configure, configure.in, doc/LICENSE, doc/license.pod,
2913: zlib/Makefile.in, zlib/adler32.c, zlib/compress.c, zlib/crc32.c,
2914: zlib/crc32.h, zlib/deflate.c, zlib/deflate.h, zlib/gzclose.c,
2915: zlib/gzguts.h, zlib/gzlib.c, zlib/gzread.c, zlib/gzwrite.c,
2916: zlib/infback.c, zlib/inffast.c, zlib/inffast.h, zlib/inffixed.h,
2917: zlib/inflate.c, zlib/inflate.h, zlib/inftrees.c, zlib/inftrees.h,
2918: zlib/trees.c, zlib/trees.h, zlib/uncompr.c, zlib/zconf.h.in,
2919: zlib/zlib.h, zlib/zutil.c, zlib/zutil.h:
2920: Add local copy of zlib for systems that lack it.
2921: [7542ca465c5a]
2922:
2923: 2010-10-15 Todd C. Miller <Todd.Miller@courtesan.com>
2924:
2925: * src/exec.c:
2926: If perform_io() fails, kill the child before exiting so it doesn't
2927: complain about connection reset. We can get an I/O error if, for
2928: example, and we get EIO reading from stdin.
2929: [e59a05fa729f]
2930:
2931: 2010-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
2932:
2933: * plugins/sudoers/sudoers.c, src/sudo.c:
2934: Fix complilation on systems with set_auth_parameters() Sprinkle
2935: volatile to quiet warnings from gcc 2.8.0
2936: [a34c2b924ba7]
2937:
2938: * compat/dlfcn.h, compat/dlopen.c:
2939: Avoid potential namespace issues with dlopen() emulation.
2940: [aedfababd6ca]
2941:
2942: * MANIFEST:
2943: sync
2944: [6afb97e6d308]
2945:
2946: * plugins/sudoers/interfaces.c:
2947: Use INADDR_NONE instead of casting -1 to in_addr_t (which may not
2948: exist).
2949: [ddfca5af1a36]
2950:
2951: * Makefile.in:
2952: Mark ChangeLog as PHONY Don't overwrite ChangeLog if we can't run hg
2953: [e9d04bfa4505]
2954:
2955: * configure, configure.in:
2956: HP-UX 10.20 libc has an incompatible getline
2957: [2e7bc202e78d]
2958:
2959: * plugins/sudoers/visudo.c:
2960: Quiet an HP-UX compiler warning.
2961: [55b9d587ac8c]
2962:
2963: * configure, configure.in:
2964: Check for vi even with --with-editor specified; the sample plugin
2965: needs it.
2966: [94dfc3643f76]
2967:
2968: 2010-10-11 Todd C. Miller <Todd.Miller@courtesan.com>
2969:
2970: * compat/dlopen.c:
2971: Fix remaining syntax errors.
2972: [9d729b5b577e]
2973:
2974: * src/Makefile.in:
2975: sudo binary depends on the libtool-generated libs
2976: [9e6148406adb]
2977:
2978: * plugins/sudoers/group_plugin.c, src/load_plugins.c:
2979: Use HAVE_DLOPEN instead of HAVE_DLFCN_H when determining whether to
2980: include the local or system dlfcn.h
2981: [68cfe4c1089b]
2982:
2983: * pp:
2984: Don't use run_as_superuser=false on HP-UX
2985: [532242370b09]
2986:
2987: * src/net_ifs.c:
2988: Use memset() instead of zero_bytes() since we don't include
2989: sudoers.h
2990: [a187c18c2472]
2991:
2992: * plugins/sudoers/interfaces.c:
2993: Fix pasto; AF_INET not AF_INET6
2994: [2d2e9d7dc6f9]
2995:
2996: * compat/dlopen.c:
2997: Actually call shl_load()
2998: [ed8153b8a3cd]
2999:
3000: * pp:
3001: Update from git repo. Debian: version numbers now compliant with
3002: policy section 5.6.12 HP-UX: minimal changes needed to work on HP-UX
3003: 10.20
3004: [ecf2692bceeb]
3005:
3006: * configure, configure.in:
3007: Fix dlopen() detection for systems where dlopen() is in a separate
3008: library.
3009: [fa6b175582b6]
3010:
3011: * plugins/sudoers/auth/pam.c:
3012: If pam_acct_mgmt() returns PAM_AUTH_ERR print a (hopefully) more
3013: useful message and return AUTH_FATAL so sudo does not keep trying to
3014: validate the user.
3015: [1be8857e5291]
3016:
3017: * src/preload.c:
3018: sudo_preload_table is an array
3019: [b7704e72a9da]
3020:
3021: * compat/dlopen.c:
3022: Quiet a compiler warning and fix sudo_preload_table external
3023: definition.
3024: [8234987664cc]
3025:
3026: * compat/dlfcn.h:
3027: Fix multiple inclusion guard in dlfcn.h and fix dlerror() prototype.
3028: [8bab6a4053cc]
3029:
3030: * plugins/sudoers/group_plugin.c:
3031: Make this compile correctly when no dlopen is available.
3032: [57643879bd2b]
3033:
3034: 2010-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
3035:
3036: * plugins/sudoers/check.c:
3037: Having a timestamp file defined is no longer indicative of tty
3038: tickets being enabled. Check def_tty_tickets directly.
3039: [efcc11ad157f]
3040:
3041: * src/exec_pty.c, src/sudo.h, src/ttysize.c:
3042: Fix TCGETWINSZ compat.
3043: [da3a8b17cf7a]
3044:
3045: 2010-10-02 Todd C. Miller <Todd.Miller@courtesan.com>
3046:
3047: * src/exec_pty.c, src/ttysize.c:
3048: Prefer newer TIOCGWINSZ ioctl to old TIOCGSIZE
3049: [926492dd10a6]
3050:
3051: 2010-10-01 Todd C. Miller <Todd.Miller@courtesan.com>
3052:
3053: * plugins/sudoers/sudoers.c, src/sudo.c:
3054: Move set_project() from sudoers module into sudo proper.
3055: [beabafac03b4]
3056:
3057: * configure, configure.in:
3058: Fix typo and regenerate
3059: [4a3caf4234f3]
3060:
3061: * plugins/sudoers/ldap.c:
3062: When iterating over returned LDAP entries, keep looking at remaining
3063: matches even if we have a positive match. This catches negative
3064: matches that may exist in other entries and more closely match the
3065: sudoers file behavior.
3066: [f47db6e609b0]
3067:
3068: * pp:
3069: Add support for multiple package instances on Solaris.
3070: [7f2a8b942545]
3071:
3072: * src/exec.c:
3073: Add missing signal_pipe[0] to fdsr for the non-pty case.
3074: [79d01e11b19c]
3075:
3076: * mkpkg:
3077: Add --with-project for Solaris
3078: [ffa4c2bb93f7]
3079:
3080: * README:
3081: Need ar and ranlib too
3082: [5c2f679172ef]
3083:
3084: 2010-09-27 Todd C. Miller <Todd.Miller@courtesan.com>
3085:
3086: * plugins/sudoers/env.c:
3087: Preserve ODMDIR environment variable by default on AIX.
3088: [bd47cb1e804f]
3089:
3090: 2010-09-26 Todd C. Miller <Todd.Miller@courtesan.com>
3091:
3092: * Makefile.in, compat/Makefile.in, compat/dlfcn.h, compat/dlopen.c,
3093: config.h.in, configure, configure.in, plugins/sample/Makefile.in,
3094: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
3095: plugins/sudoers/group_plugin.c, plugins/sudoers/plugin_error.c,
3096: plugins/sudoers/sudoers.c, src/Makefile.in, src/load_plugins.c,
3097: src/preload.c:
3098: Add dlopen() emulation for systems without it. For HP-UX 10, emulate
3099: using shl_load(). For others, link sudoers plugin statically and use
3100: a lookup table to emulate dlsym().
3101: [e92edfb3c642]
3102:
3103: 2010-09-24 Todd C. Miller <Todd.Miller@courtesan.com>
3104:
3105: * compat/fnmatch.c, compat/glob.c, compat/mksiglist.c,
3106: compat/nanosleep.c, compat/utimes.c:
3107: When including compat headers, use the compat dir as part of the
3108: path so we are sure to get the correct header.
3109: [6c2a45da6af5]
3110:
3111: 2010-09-21 Todd C. Miller <Todd.Miller@courtesan.com>
3112:
3113: * plugins/sudoers/linux_audit.c:
3114: Ignore ECONNREFUSED from audit_log_user_command() which will occur
3115: if auditd is not running.
3116: [d314fe4c8d03]
3117:
3118: 2010-09-17 Todd C. Miller <Todd.Miller@courtesan.com>
3119:
3120: * pp:
3121: Sync with git version
3122: [1c0357744222]
3123:
3124: 2010-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
3125:
3126: * common/fileops.c, plugins/sudoers/defaults.c:
3127: Cast isblank argument to unsigned char.
3128: [c822dbb3ca54]
3129:
3130: 2010-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
3131:
3132: * INSTALL, config.h.in, configure, configure.in, doc/sudoers.cat,
3133: doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c:
3134: Implement --with-umask-override configure flag.
3135: [863e3047df22]
3136:
3137: * plugins/sudoers/env.c:
3138: Take MODE_LOGIN_SHELL into account when initially setting reset_home
3139: instead of special-casing it later.
3140: [5d6b16480fd6]
3141:
3142: * plugins/sudoers/sudoers.c:
3143: In login mode, make a copy of the runas user's pw_shell for
3144: NewArgv[0] because 1) we modify it and 2) it will runas_pw gets
3145: freed before exec.
3146: [1d1ccb568dfa]
3147:
3148: * plugins/sudoers/env.c:
3149: Reset HOME for "sudo -i" even if HOME was listed in env_keep.
3150: [c1c1c65a2d63]
3151:
3152: * src/sudo.c:
3153: Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK.
3154: [7443454e5f88]
3155:
3156: * src/sudo.c:
3157: Reset signal mask at sudo startup time; we need to be able to rely
3158: on normal signal delivery to control the child process.
3159: [95800163ff94]
3160:
3161: 2010-09-13 Todd C. Miller <Todd.Miller@courtesan.com>
3162:
3163: * install-sh:
3164: Use sed instead of expr to split a flag from its argument. Fixes a
3165: problem with expr interpreting its arguments as a flag when they
3166: start with a dash.
3167: [736065e14301]
3168:
3169: * common/lbuf.c:
3170: Do not need sys/time.h after all
3171: [91f6f668ccda]
3172:
3173: * common/lbuf.c:
3174: Include sys/time.h for utimes() and struct timeval. No longer need
3175: ioctl.h or termios.h
3176: [2d75273d3213]
3177:
3178: * compat/snprintf.c:
3179: Quiet bogus compiler warnings.
3180: [fe252e1968f5]
3181:
3182: * include/missing.h:
3183: Declare innetgr() for HP-UX which is missing a declaration. Declare
3184: domainname() for HP-UX and Solaris which are missing a declaration.
3185: [b37c50751138]
3186:
3187: * plugins/sudoers/bsm_audit.c:
3188: Use __sun for consistency with the rest of the sources.
3189: [6b086b61ccb6]
3190:
3191: * plugins/sudoers/group_plugin.c:
3192: Quiet a bogus compiler warning.
3193: [ebc069842c4a]
3194:
3195: * plugins/sudoers/pwutil.c:
3196: Don't try to delref a NULL group.
3197: [f6ff0838be21]
3198:
3199: * common/alloc.c, common/lbuf.c:
3200: Include memory.h on systems that need it.
3201: [4e676da81c6f]
3202:
3203: 2010-09-11 Todd C. Miller <Todd.Miller@courtesan.com>
3204:
3205: * src/exec.c:
3206: Quiet gcc warnings on glibc systems that use warn_unused_result for
3207: write(2).
3208: [0532da0b7cf7]
3209:
3210: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
3211: sudo_plugin is in section 8; from Ted Percival
3212: [b4506a0de87e]
3213:
3214: * plugins/sudoers/Makefile.in:
3215: testsudoers depends on libsudoers.la, not sudoreplay
3216: [cdb1cc3bf06a]
3217:
3218: 2010-09-10 Todd C. Miller <Todd.Miller@courtesan.com>
3219:
3220: * src/exec.c:
3221: Read as many signals on the signal pipe as we can before returning.
3222: [b181671da047]
3223:
3224: * src/exec.c, src/exec_pty.c, src/sudo_exec.h:
3225: Instead of using a array to store received signals, open a pipe and
3226: have the signal handler write the signal number to one end and
3227: select() on the other end. This makes it possible to handle signals
3228: similar to I/O without race conditions.
3229: [ee84d65c16b6]
3230:
3231: 2010-09-09 Todd C. Miller <Todd.Miller@courtesan.com>
3232:
3233: * doc/visudo.pod, plugins/sudoers/visudo.c:
3234: Make "visudo -c -f -" check the standard input.
3235: [195a3d2a9a26]
3236:
3237: * doc/sudoers.pod:
3238: set_home and always_set_home have an effect if HOME is present in
3239: the env_keep list.
3240: [159d0b9dc5c8]
3241:
3242: * plugins/sudoers/env.c:
3243: Make -H flag work when HOME is listed in env_keep. Also makes
3244: "set_home" and "always_set_home" override override HOME in env_keep.
3245: [a3e5b966193f]
3246:
3247: 2010-09-08 Todd C. Miller <Todd.Miller@courtesan.com>
3248:
3249: * plugins/sudoers/Makefile.in, plugins/sudoers/interfaces.c,
3250: plugins/sudoers/interfaces.h, plugins/sudoers/match.c,
3251: plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
3252: plugins/sudoers/visudo.c, src/net_ifs.c:
3253: Convert sudoers plugin to use interface list passed in settings.
3254: [87d9b5f4f586]
3255:
3256: * doc/sudo_plugin.pod, src/Makefile.in, src/net_ifs.c,
3257: src/parse_args.c, src/sudo.h:
3258: Query local network interfaces in the main sudo driver and pass to
3259: the plugin as "network_addrs" in the settings list.
3260: [7f35bcfe77a7]
3261:
3262: * plugins/sudoers/bsm_audit.c:
3263: Solaris BSM audit return EINVAL when auditing is not enabled,
3264: whereas OpenBSM returns ENOSYS.
3265: [411b980ec58b]
3266:
3267: 2010-09-07 Todd C. Miller <Todd.Miller@courtesan.com>
3268:
3269: * compat/fnmatch.c:
3270: missing.h should come before most local includes
3271: [53921a7b8b5b]
3272:
3273: * plugins/sudoers/sudoreplay.c:
3274: missing.h should come before most local includes
3275: [e9abb0db1aac]
3276:
3277: * plugins/sudoers/sudoers.h:
3278: Make local includes consistent; use double quotes for local includes
3279: except for generated ones where we use angle brackets.
3280: [09de4faa9547]
3281:
3282: * plugins/sudoers/sudoers.c:
3283: Always fill in NewArgv for audit code.
3284: [7c3aca60519f]
3285:
3286: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
3287: Add missing LOG_INPUT/LOG_OUTPUT support in the lexer.
3288: [007cf6560f92]
3289:
3290: * common/alloc.c, common/atobool.c, common/fileops.c,
3291: common/fmt_string.c, common/lbuf.c, common/list.c, common/term.c,
3292: common/zero_bytes.c, compat/closefrom.c, compat/fnmatch.c,
3293: compat/getcwd.c, compat/getgrouplist.c, compat/getline.c,
3294: compat/getprogname.c, compat/glob.c, compat/isblank.c,
3295: compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c,
3296: compat/nanosleep.c, compat/setenv.c, compat/snprintf.c,
3297: compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
3298: compat/unsetenv.c, compat/utimes.c, include/compat.h,
3299: plugins/sample/sample_plugin.c, plugins/sample_group/getgrent.c,
3300: plugins/sample_group/plugin_test.c,
3301: plugins/sample_group/sample_group.c, plugins/sudoers/audit.c,
3302: plugins/sudoers/auth/afs.c, plugins/sudoers/boottime.c,
3303: plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
3304: plugins/sudoers/linux_audit.c, plugins/sudoers/match.c,
3305: plugins/sudoers/plugin_error.c, plugins/sudoers/sudoreplay.c,
3306: plugins/sudoers/timestr.c, src/error.c, src/sesh.c, src/sudo.h,
3307: src/sudo_noexec.c, src/ttysize.c:
3308: Make local includes consistent; use double quotes for local includes
3309: except for generated ones where we use angle brackets. Also g/c
3310: unused compat.h.
3311: [e57070dc8f04]
3312:
3313: 2010-09-06 Todd C. Miller <Todd.Miller@courtesan.com>
3314:
3315: * plugins/sudoers/match.c:
3316: When matching the runas user and runas group (-u and -g command line
3317: options), keep track of runas group and runas user matches
3318: separately. Only return a positive match if we have a match for
3319: both runas user and runas group (if specified).
3320: [815219e04cc8]
3321:
3322: 2010-09-04 Todd C. Miller <Todd.Miller@courtesan.com>
3323:
3324: * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
3325: Add support for multiple URI lines by joining the contents and
3326: passing the result to ldap_initialize.
3327: [a47cae3b72e8]
3328:
3329: * plugins/sudoers/ldap.c, plugins/sudoers/parse.c:
3330: Do not return -1 on error from the display functions; the caller
3331: expects a return value >= 0.
3332: [101456a7dd00]
3333:
3334: * plugins/sudoers/sudoers.c:
3335: Do not set both MODE_EDIT and MODE_RUN
3336: [8faa36694d54]
3337:
3338: 2010-09-03 Todd C. Miller <Todd.Miller@courtesan.com>
3339:
3340: * include/missing.h:
3341: Move includes to the top of the file.
3342: [a51436798e8c]
3343:
3344: 2010-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
3345:
3346: * plugins/sudoers/Makefile.in:
3347: Add missing definition of timedir
3348: [458a749c2c5e]
3349:
3350: * compat/fnmatch.c, compat/getprogname.c, compat/isblank.c,
3351: compat/mksiglist.c, compat/strsignal.c,
3352: plugins/sudoers/plugin_error.c, src/error.c, src/sudo_noexec.c:
3353: Add #include of sys/types.h for .c files that include missing.h to
3354: be sure that size_t and ssize_t are defined.
3355: [08e3132dbf4f]
3356:
3357: * plugins/sudoers/Makefile.in:
3358: Install sudoers file from the build dir not hte src dir.
3359: [ca89e962dbf4]
3360:
3361: 2010-08-26 Todd C. Miller <Todd.Miller@courtesan.com>
3362:
3363: * plugins/sudoers/set_perms.c:
3364: If runas_pw changes, reset the stashed runas aux group vector.
3365: Otherwise, if runas_default is set in a per-command Defaults
3366: statement, the command runs with root's aux group vector (i.e. the
3367: one that was used when locating the command).
3368: [24f9107cedd2]
3369:
3370: * plugins/sudoers/Makefile.in:
3371: Add target to generate sudoers file Remove generated sudoers file as
3372: part of distclean
3373: [fb7422e90f03]
3374:
3375: 2010-08-24 Todd C. Miller <Todd.Miller@courtesan.com>
3376:
3377: * src/exec.c:
3378: When not logging I/O install a handler for SIGCONT and deliver it to
3379: the command upon resume. Fixes bugzilla #431
3380: [495dce52a5aa]
3381:
3382: 2010-08-21 Todd C. Miller <Todd.Miller@courtesan.com>
3383:
3384: * plugins/sudoers/sudoers.h:
3385: g/c unused auth_pw extern definition
3386: [40eb7477ba17]
3387:
3388: * plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
3389: Move get_auth() into check.c where it is actually used.
3390: [e31db0ce3a61]
3391:
3392: 2010-08-20 Todd C. Miller <Todd.Miller@courtesan.com>
3393:
3394: * common/lbuf.c:
3395: Convert a remaining puts() and putchar() to use the output function.
3396: [d69e363a506b]
3397:
3398: * plugins/sudoers/plugin_error.c:
3399: Plug memory leak
3400: [68895469ea8d]
3401:
3402: 2010-08-18 Todd C. Miller <Todd.Miller@courtesan.com>
3403:
3404: * plugins/sudoers/env.c:
3405: Set dupcheck to TRUE when setting new HOME value if !env_reset but
3406: always_set_home is true. Prevents a duplicate HOME in the
3407: environment (old value plus the new one) introduced in f421f8827340.
3408: [9ca19183794f]
3409:
3410: * configure, configure.in, plugins/sudoers/sudoers,
3411: plugins/sudoers/sudoers.in:
3412: Substitute sysconfdir in the installed sudoers file to get the
3413: correct path for sudoers.d.
3414: [86072b6cd55d]
3415:
3416: 2010-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
3417:
3418: * src/get_pty.c:
3419: Fix typo that prevented compilation on Irix; Friedrich Haubensak
3420: [b48be51b65fc]
3421:
3422: 2010-08-16 Todd C. Miller <Todd.Miller@courtesan.com>
3423:
3424: * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
3425: common/atobool.c, common/fileops.c, common/fmt_string.c,
3426: common/lbuf.c, common/list.c, common/term.c, common/zero_bytes.c,
3427: compat/Makefile.in, compat/closefrom.c, compat/fnmatch.c,
3428: compat/getcwd.c, compat/getgrouplist.c, compat/getline.c,
3429: compat/getprogname.c, compat/glob.c, compat/isblank.c,
3430: compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c,
3431: compat/nanosleep.c, compat/setenv.c, compat/snprintf.c,
3432: compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
3433: compat/unsetenv.c, compat/utimes.c, include/compat.h,
3434: include/missing.h, plugins/sample/sample_plugin.c,
3435: plugins/sample_group/getgrent.c,
3436: plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in,
3437: plugins/sudoers/audit.c, plugins/sudoers/boottime.c,
3438: plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
3439: plugins/sudoers/linux_audit.c, plugins/sudoers/plugin_error.c,
3440: plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
3441: plugins/sudoers/timestr.c, src/Makefile.in, src/error.c, src/sesh.c,
3442: src/sudo.h, src/sudo_noexec.c, src/ttysize.c:
3443: Merge compat.h and missing.h into missing.h
3444: [572909ae9716]
3445:
3446: 2010-08-14 Todd C. Miller <Todd.Miller@courtesan.com>
3447:
3448: * plugins/sudoers/auth/pam.c:
3449: If the user hits ^C while a password is being read, error out before
3450: reading any further passwords in the pam conversation function.
3451: Otherwise, if multiple PAM auth methods are required, the user will
3452: have to hit ^C for each one.
3453: [23782631748c]
3454:
3455: 2010-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
3456:
3457: * plugins/sudoers/check.c:
3458: Update comment
3459: [a5296cb3a20a]
3460:
3461: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
3462: Document sudo_conv_t function and sudo_printf_t return values.
3463: [745c0017814c]
3464:
3465: * src/conversation.c:
3466: Make _sudo_printf return the number of characters printed on success
3467: like printf(3).
3468: [8eeefe8d7e77]
3469:
3470: 2010-08-10 Todd C. Miller <Todd.Miller@courtesan.com>
3471:
3472: * plugins/sudoers/sudoers.c:
3473: sudoers.h includes sudo_plugin.h for us
3474: [cabe68e07807]
3475:
3476: * common/Makefile.in, common/gettime.c, compat/mkstemps.c,
3477: plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/sudo.h,
3478: src/sudo_edit.c:
3479: Use gettimeofday() directly instead of via the gettime() wrapper.
3480: [7490426c99ae]
3481:
3482: * common/gettime.c, compat/snprintf.c, compat/strcasecmp.c,
3483: compat/strerror.c, config.h.in, configure, configure.in,
3484: include/compat.h, include/missing.h, plugins/sudoers/logging.c,
3485: plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c, src/sudo.c:
3486: Remove some obsolete configure tests, ancient Unix systems are no
3487: longer supported.
3488: [2be6218c3a36]
3489:
3490: 2010-08-07 Todd C. Miller <Todd.Miller@courtesan.com>
3491:
3492: * sudo.pp:
3493: Set pp_kit_version and strip off patch level
3494: [aacfda1b676d]
3495:
3496: * sudo.pp:
3497: Better handling of versions with a patchlevel. For rpm and deb, use
3498: the patchlevel+1 as the release. For AIX, use the patchlevel as the
3499: 4th version number. For the rest, just leave the patchlevel in the
3500: version string.
3501: [638bd35f2346]
3502:
3503: 2010-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
3504:
3505: * plugins/sudoers/auth/sudo_auth.c:
3506: For non-standalone auth methods, stop reading the password if the
3507: user enters ^C at the prompt.
3508: [82c2911bb264]
3509:
3510: * configure, configure.in, plugins/sudoers/Makefile.in,
3511: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
3512: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
3513: plugins/sudoers/pwutil.c:
3514: No need to look up shadow password unless we are doing password-
3515: style authentication. This moves the shadow password lookup to the
3516: auth functions that need it.
3517: [ba9e3eba2b72]
3518:
3519: * plugins/sudoers/sudoers.c:
3520: Retain final passwd/group refs until the policy close() function.
3521: Note that this doesn't get called in all cases so putting this in a
3522: cleanup function is probably better.
3523: [bbe214cb4119]
3524:
3525: * plugins/sudoers/check.c:
3526: Fix mismerge
3527: [395115f89dd6]
3528:
3529: * plugins/sudoers/check.c:
3530: When removing/resetting the timestamp file ignore the tty ticket
3531: contents.
3532: [b709f5667a0b]
3533:
3534: * plugins/sudoers/sudoers.c:
3535: delref sudo_user.pw, runas_pw and runas_gr immediately before we
3536: return.
3537: [4d67d15dfd3b]
3538:
3539: 2010-08-04 Todd C. Miller <Todd.Miller@courtesan.com>
3540:
3541: * plugins/sudoers/check.c, plugins/sudoers/ldap.c,
3542: plugins/sudoers/match.c, plugins/sudoers/pwutil.c,
3543: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
3544: Reference count cached passwd and group structs. The cache holds
3545: one reference itself and another is added by sudo_getgr{gid,nam} and
3546: sudo_getpw{uid,nam}. The final ref on the runas and user passwd and
3547: group structs are persistent for now.
3548: [e544685523c3]
3549:
3550: * doc/UPGRADE:
3551: fix typo
3552: [e32f2d35e6c9]
3553:
3554: 2010-08-03 Todd C. Miller <Todd.Miller@courtesan.com>
3555:
3556: * plugins/sudoers/check.c:
3557: Do not produce a warning for "sudo -k" if the ticket file does not
3558: exist.
3559: [1598f6061b75]
3560:
3561: * plugins/sudoers/pwutil.c:
3562: Instead of caching struct passwd and struct group in the red-black
3563: tree, store a struct cache_item which includes both the key and
3564: datum. This allows us to user the actual name that was looked up as
3565: the key instead of the contents of struct passwd or struct group.
3566: This matters because the name in the database may not match what we
3567: looked up, due either to case folding or truncation (historically at
3568: 8 characters). Also mark the disabled calls to sudo_freepwcache()
3569: and sudo_freegrcache() as broken since we use cached data for things
3570: like set_perms() and the logging functions. Fixing this would
3571: require making a copy of the structs for user and runas or adding a
3572: reference count (better).
3573: [225d4a22f60e]
3574:
3575: * plugins/sudoers/Makefile.in:
3576: Fix path to mkinstalldirs
3577: [b4968379b12d]
3578:
3579: * plugins/sudoers/check.c, plugins/sudoers/logging.c,
3580: plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
3581: src/exec_pty.c, src/get_pty.c, src/tgetpass.c:
3582: Quiet gcc warnings on glibc systems that use warn_unused_result for
3583: write(2) and others.
3584: [c99f138960e0]
3585:
3586: 2010-08-02 Todd C. Miller <Todd.Miller@courtesan.com>
3587:
3588: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
3589: Add %option noinput
3590: [72b9cd49b4f1]
3591:
3592: * aclocal.m4, configure, configure.in:
3593: Add cross-compile defaults for remaining AC_TRY_RUN usage. Also add
3594: back getgroups() check since AC_FUNC_GETGROUPS defaults to "no" when
3595: cross-compiling.
3596: [e385c176d0ee]
3597:
3598: 2010-07-31 Todd C. Miller <Todd.Miller@courtesan.com>
3599:
3600: * aclocal.m4, compat/snprintf.c, config.h.in, configure, configure.in:
3601: Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN Use AC_TYPE_LONG_LONG_INT
3602: and AC_CHECK_SIZEOF([long int]) instead of rolling our own.
3603: [cf3e60d9c440]
3604:
3605: 2010-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
3606:
3607: * pp:
3608: Update to latest version
3609: [32f93be33961]
3610:
3611: 2010-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
3612:
3613: * sudo.pp:
3614: Let pp determine pp_aix_version itself.
3615: [7cf0245d84ed]
3616:
3617: * INSTALL, config.h.in, configure, configure.in, mkpkg,
3618: plugins/sudoers/sudoers.c:
3619: Add support for Ubuntu admin flag file and enable it when building
3620: Ubuntu packages.
3621: [00e27cff2dfb]
3622:
3623: * plugins/sudoers/sudoers, sudo.pp:
3624: Add commented out SuSE-like targetpw settings
3625: [4605d47b7413]
3626:
3627: * configure, configure.in:
3628: Only try to use +DAportable for non-GCC on hppa
3629: [75d0f284ccf7]
3630:
3631: * configure, configure.in:
3632: Prevent configure from adding the -g flag unless in devel mode
3633: [b1fd3f8d45c0]
3634:
3635: 2010-07-27 Todd C. Miller <Todd.Miller@courtesan.com>
3636:
3637: * sudo.pp:
3638: Go back to sudo-flavor to match existing packages and only use an
3639: underscore for those that need it.
3640: [d737069d1e1c]
3641:
3642: * sudo.pp:
3643: Use sudo_$flavor instead of sudo-$flavor since that causes the least
3644: amount of trouble for the various package managers.
3645: [71f547af35fc]
3646:
3647: * mkpkg:
3648: Fix handling of the ldap flavor Remove destdir unless --debug was
3649: specified Make distclean before running configure if there is a
3650: Makefile present
3651: [6316f08de7d3]
3652:
3653: * sudo.pp:
3654: Add back include file.
3655: [195627bf68b8]
3656:
3657: * mkpkg:
3658: Pass extra args on to configure on HP-UX, if we don't have the HP C
3659: compiler, disable zlib to prevent gcc from finding it in
3660: /usr/local/lib.
3661: [473efa0e2bac]
3662:
3663: * mkpkg:
3664: Use the HP ANSI C compiler on HP-UX if possible
3665: [fb249b6b175d]
3666:
3667: * plugins/sudoers/sudoreplay.c:
3668: Some getline() implementations (FreeBSD 8.0) do not ignore the
3669: length pointer when the line pointer is NULL as they should.
3670: [2410a1a3543c]
3671:
3672: * plugins/sudoers/sudoreplay.c:
3673: Don't need to check for *cp being non-zero, isdigit() will do that.
3674: [7df11ea8a487]
3675:
3676: * plugins/sudoers/sudoreplay.c:
3677: Add setlocale() so the command line arguments that use floating
3678: point work in different locales. Since sudo now logs the timing
3679: data in the C locale we must Parse the seconds in the timing file
3680: manually instead of using strtod(). Furthermore, sudo 1.7.3 logged
3681: the number of seconds with the user's locale so if the decimal point
3682: is not '.' try using the locale-specific version.
3683: [4d385765f23b]
3684:
3685: * src/exec.c:
3686: Do I/O logging in the C locale so the floating point numbers in the
3687: timing file are not locale-dependent.
3688: [5961cec044ec]
3689:
3690: * plugins/sudoers/sudoreplay.c:
3691: Use errorx() not error() for thingsthat don't set errno.
3692: [0fe5e692af84]
3693:
3694: 2010-07-26 Todd C. Miller <Todd.Miller@courtesan.com>
3695:
3696: * pp:
3697: Better support for 1.2.3 style versions in Tru64 kits
3698: [997c549bb777]
3699:
3700: * sudo.pp:
3701: Add Tru64 kit support
3702: [e273a954f981]
3703:
3704: * pp:
3705: Remove apparently unnecessary use of sudo
3706: [be8840d85125]
3707:
3708: * Makefile.in, plugins/sudoers/Makefile.in:
3709: Create timedir as part of install-dirs target.
3710: [c736bc2fb14f]
3711:
3712: * src/exec_pty.c:
3713: Handle ENXIO from read/write which can occur when reading/writing a
3714: pty that has gone away.
3715: [fa2e8059879f]
3716:
3717: * plugins/sudoers/pwutil.c:
3718: sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
3719: [3a045475d5ee]
3720:
3721: * mkpkg:
3722: platform is a pp flag not a variable
3723: [12eba39a47c1]
3724:
3725: * Makefile.in, mkpkg, sudo.pp:
3726: Add simple arg parsing for mkpkg so we can set debug, flavor or
3727: platform.
3728: [ada839fe252d]
3729:
3730: * pp:
3731: Make rpm backend work on AIX 5.x
3732: [549a76d11393]
3733:
3734: 2010-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
3735:
3736: * plugins/sudoers/sudoers:
3737: Add commented out Defaults entry for log_output
3738: [7e67d7588900]
3739:
3740: 2010-07-23 Todd C. Miller <Todd.Miller@courtesan.com>
3741:
3742: * doc/Makefile.in:
3743: Remove sudo docdir completely
3744: [dce8e82878ef]
3745:
3746: * doc/sample.sudo.conf:
3747: Add sample sudo.conf
3748: [aafdba3fc411]
3749:
3750: 2010-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
3751:
3752: * plugins/sudoers/Makefile.in:
3753: Add PACKAGE_TARNAME for docdir
3754: [930c92b8f8f0]
3755:
3756: 2010-07-23 Todd C. Miller <Todd.Miller@courtesan.com>
3757:
3758: * src/Makefile.in:
3759: Pass install-sh -b~ here too.
3760: [c3f5eb446c38]
3761:
3762: * plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
3763: plugins/sudoers/Makefile.in, src/Makefile.in:
3764: Install binary files with -b~ to make a backup. Fixes "text file
3765: busy" error on HP-UX during install.
3766: [81f306f54f8c]
3767:
3768: * install-sh:
3769: "mv -f" on HP-UX doesn't unlink the destination first so add an
3770: explicit rm before moving the temporary into place.
3771: [fb719a79582d]
3772:
3773: * configure, configure.in:
3774: Some more ${foo} -> $(foo) conversion for consistent Makefiles.
3775: [0aa098770074]
3776:
3777: * doc/Makefile.in, plugins/sudoers/Makefile.in:
3778: Install sudoers2ldif in the doc dir
3779: [33ac3b53d7f5]
3780:
3781: 2010-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
3782:
3783: * pathnames.h.in:
3784: Add missing include of maillock.h for Solaris
3785: [5a58883be23a]
3786:
3787: * NEWS, configure, configure.in, doc/TROUBLESHOOTING, doc/UPGRADE,
3788: doc/sample.syslog.conf, doc/sudoers.cat:
3789: Change the default syslog facility from local2 to authpriv (or auth
3790: if the operating system doesn't support authpriv).
3791: [3b70ba514f49]
3792:
3793: * Makefile.in, sudo.pp:
3794: Install sudoers as /etc/sudoers on RPM and debian systems where the
3795: package manager will not replace a user-modified configuration file.
3796: This fixes upgrades from the vendor sudo packages.
3797: [d886b6d60b5b]
3798:
3799: * pp:
3800: RPM: use %config(noreplace) instead of %config for volatile This
3801: results in the new file being installed with a .rpmnew suffix
3802: instead of the file being replaced and the old one renamed with a
3803: .rpmsave suffix.
3804: [58be2119f8e8]
3805:
3806: 2010-07-21 Todd C. Miller <Todd.Miller@courtesan.com>
3807:
3808: * compat/mkstemps.c, plugins/sudoers/boottime.c:
3809: Include time.h for struct timeval
3810: [ddf8b04f0276]
3811:
3812: * src/exec_pty.c:
3813: The return value of strsignal() may be const and should be treated
3814: as const regardless.
3815: [620074ae1e77]
3816:
3817: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
3818: Mention that 127.0.0.1 will not match, nor will localhost unless
3819: that is the actual host name.
3820: [8b574122eb8f]
3821:
3822: * MANIFEST, NEWS, README, WHATSNEW, doc/Makefile.in, doc/UPGRADE:
3823: Rename WHATSNEW -> NEWS
3824: [d1a2c8c47d89]
3825:
3826: * pp:
3827: Updated pp with latest patches
3828: [98e16b9b8f62]
3829:
3830: * WHATSNEW:
3831: Sync with 1.7.4
3832: [65ac4dafeef7]
3833:
3834: * doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
3835: plugins/sudoers/sudoers:
3836: Add commented out line to add HOME to env_keep and add a warning to
3837: the note about the HOME change in UPGRADE.
3838: [0d6a775bb6c8]
3839:
3840: 2010-07-20 Todd C. Miller <Todd.Miller@courtesan.com>
3841:
3842: * plugins/sudoers/sudoreplay.c:
3843: Add LINE_MAX define for those without it.
3844: [446d9dbe7859]
3845:
3846: * INSTALL, WHATSNEW, config.h.in, configure, configure.in,
3847: doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
3848: plugins/sudoers/defaults.c:
3849: The tty_tickets option is now on by default.
3850: [a01c48206d80]
3851:
3852: * WHATSNEW:
3853: Mention that AIX authdb support has been fixed.
3854: [87bd7f4eba6a]
3855:
3856: * common/aix.c:
3857: setauthdb() only sets the "old" registry if it was set by a previous
3858: call to setauthdb(). To restore the original value, passing NULL
3859: (or an empty string) to setauthdb() is sufficient.
3860: [470da190a254]
3861:
3862: 2010-07-19 Todd C. Miller <Todd.Miller@courtesan.com>
3863:
3864: * WHATSNEW, doc/UPGRADE, doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod,
3865: doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
3866: plugins/sudoers/env.c:
3867: Reset HOME when env_reset is enabled unless it is in env_keep
3868: [f421f8827340]
3869:
3870: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
3871: The default for set_logname has been "true" for some time now.
3872: [f489da5674c3]
3873:
3874: * plugins/sudoers/boottime.c:
3875: Add missing include of time.h
3876: [624d7014932f]
3877:
3878: * plugins/sudoers/logging.c:
3879: Fix check for dup2() return value.
3880: [140ea2d50d20]
3881:
3882: * plugins/sudoers/env.c:
3883: Add PYTHONUSERBASE to initial_badenv_table
3884: [3149aae5b12c]
3885:
3886: * plugins/sudoers/visudo.c:
3887: Treat an unknown defaults entry as a parse error.
3888: [b3ebad73efb2]
3889:
3890: * plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
3891: Check return value of setdefs() but don't stop setting defaults if
3892: we hit an unknown one.
3893: [945e752239ab]
3894:
3895: * WHATSNEW, aclocal.m4, config.h.in, configure, configure.in,
3896: doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat,
3897: doc/sudoers.man.in, doc/sudoers.pod, pathnames.h.in,
3898: plugins/sudoers/env.c:
3899: If env_reset is enabled, set the MAIL environment variable based on
3900: the target user unless MAIL is explicitly preserved in sudoers.
3901: [a1b03e2e0e96]
3902:
3903: 2010-07-17 Todd C. Miller <Todd.Miller@courtesan.com>
3904:
3905: * pp:
3906: decode debian code names
3907: [8741280d9960]
3908:
3909: * WHATSNEW:
3910: fix typo
3911: [a8a19451110b]
3912:
3913: 2010-07-16 Todd C. Miller <Todd.Miller@courtesan.com>
3914:
3915: * WHATSNEW:
3916: Merge with 1.7.4
3917: [9348fa7e15b8]
3918:
3919: * src/sudo.c:
3920: Restore RLIMIT_NPROC after the uid switch if it appears that
3921: runas_setup() did not do it for us. Fixes a bash script problem on
3922: SuSE with RLIMIT_NPROC set to RLIM_INFINITY.
3923: [786fb272e5fd]
3924:
3925: 2010-07-15 Todd C. Miller <Todd.Miller@courtesan.com>
3926:
3927: * mkpkg, pp, sudo.pp:
3928: Restore the dot removal in the os version reported by polypkg. Adapt
3929: mkpkg and sudo.pp to the change.
3930: [dcafdd53b88f]
3931:
3932: 2010-07-16 Todd C. Miller <Todd.Miller@courtesan.com>
3933:
3934: * INSTALL:
3935: document --with-pam-login
3936: [ea93e4c6873c]
3937:
3938: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
3939: The tag is NOSETENV, not UNSETENV. From Petr Uzel.
3940: [2ac90d8de36e]
3941:
3942: 2010-07-15 Todd C. Miller <Todd.Miller@courtesan.com>
3943:
3944: * sudo.pp:
3945: Include flavor in solaris package name
3946: [e605f6364c9f]
3947:
3948: * mkpkg:
3949: Older shells don't support IFS= so set explictly to space, tab,
3950: newline.
3951: [7773960bc8a0]
3952:
3953: * mkpkg:
3954: Use '=' not '==' in test
3955: [c99d42bc48e6]
3956:
3957: * mkpkg:
3958: Fix typo that prevented debian from matching
3959: [84421078fcb7]
3960:
3961: * mkpkg:
3962: Add missing prefix setting for debian
3963: [6466f23de4aa]
3964:
3965: * sudo.pp:
3966: Use tab indents to reduce the chance of problem with <<- Fix the
3967: debian %set section, pp does not set pp_deb_distro Uncomment %sudo
3968: line in sudoers for debian Uncomment some env_keep lines for RHEL,
3969: SLES and debian to more closely match the vendor sudoers files.
3970: Add /etc/pam.d to %files Remove the /etc/sudo-ldap.conf symlink on
3971: debian for ldap flavor
3972: [c5b49feb1a0c]
3973:
3974: * plugins/sudoers/sudoers:
3975: Add commented out env_keep entries, sample Aliases and a %sudo line
3976: for debian.
3977: [387719e52d0f]
3978:
3979: * configure, configure.in:
3980: Move zlib check later on in the script to avoid a strange shell
3981: problem on SLES11.
3982: [1a3153bb1291]
3983:
3984: * configure.in:
3985: Remove check for egrep; configure has its own
3986: [a3b9d98cb5d2]
3987:
3988: 2010-07-14 Todd C. Miller <Todd.Miller@courtesan.com>
3989:
3990: * mkpkg:
3991: Enable zlib for linux distros
3992: [8fa51a1405a4]
3993:
3994: * mkpkg:
3995: Add ldap flavor to default build
3996: [97644f5a555f]
3997:
3998: * mkpkg, sudo.pp:
3999: Simplify rpm linux distro settings
4000: [b9dcf10cdf20]
4001:
4002: * aclocal.m4, configure, configure.in, doc/UPGRADE, doc/sudoers.cat:
4003: Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo.
4004: [2c549c1acde9]
4005:
4006: * Makefile.in:
4007: Fix ChangeLog creation from build dir
4008: [3d0c7904f173]
4009:
4010: * plugins/sudoers/sudoers.c:
4011: Handle getcwd() failure.
4012: [aef7bef87394]
4013:
4014: * doc/Makefile.in, mkpkg, sudo.pp:
4015: Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR
4016: environment variable.
4017: [be6ed611b7a8]
4018:
4019: * sudo.pp:
4020: Create sudo group on debian
4021: [6ed6c032042e]
4022:
4023: * mkpkg, sudo.pp:
4024: Add debian 4/5/6 and use the dot when doing version matches
4025: [6bcb664d1f4f]
4026:
4027: * aclocal.m4, configure:
4028: Use a loop when searching for mv, sendmail and sh
4029: [d5e9369f8d13]
4030:
4031: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
4032: Remove spurious "and"; from debian
4033: [a21e6f7c5b99]
4034:
4035: * aclocal.m4, configure, configure.in, doc/sudoers.cat,
4036: doc/sudoers.man.in, doc/sudoers.pod, doc/visudo.cat,
4037: doc/visudo.man.in, doc/visudo.pod:
4038: Substitute the value of EDITOR into the sudoers and visudo manuals.
4039: [cd79e587dd7f]
4040:
4041: 2010-07-13 Todd C. Miller <Todd.Miller@courtesan.com>
4042:
4043: * mkpkg, pp, sudo.pp:
4044: Initial support for debian 4.0
4045: [ac6707915fa8]
4046:
4047: * mkpkg:
4048: Some platforms need -fPIE instead of -fpie
4049: [fd6be19e5bc2]
4050:
4051: * plugins/sudoers/auth/pam.c:
4052: Only set PAM_RHOST for Solaris, where it is needed to avoid a bug.
4053: On Linux it causes a DNS lookup via libaudit.
4054: [1e10105ade5b]
4055:
4056: * MANIFEST:
4057: Update MANIFEST to match packaging changes
4058: [ef86ee557b5b]
4059:
4060: * sudo.psf:
4061: We now use pp to generate HP-UX packages
4062: [f7aa8da7844e]
4063:
4064: * INSTALL.binary, plugins/sudoers/Makefile.binary.in:
4065: Remove vestiges of old binary package bits.
4066: [afffd005452f]
4067:
4068: * INSTALL, Makefile.in, common/Makefile.in, compat/Makefile.in,
4069: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
4070: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
4071: src/Makefile.in:
4072: install-man -> install-doc
4073: [99b5fa05567c]
4074:
4075: * Makefile.in, doc/Makefile.in, include/Makefile.in, mkpkg,
4076: plugins/sudoers/Makefile.in, pp, src/Makefile.in, sudo.pp:
4077: Use http://rc.quest.com/topics/polypkg/ for packaging
4078: [5ca8eb75b223]
4079:
4080: * install-sh:
4081: Just ignore the -c option, it is the default Add support for -d
4082: option
4083: [a8b6b0a131e8]
4084:
4085: 2010-07-12 Todd C. Miller <Todd.Miller@courtesan.com>
4086:
4087: * pathnames.h.in, plugins/sudoers/env.c, plugins/sudoers/logging.c:
4088: Use _PATH_STDPATH instead of _PATH_DEFPATH
4089: [137fa911908e]
4090:
4091: * plugins/sudoers/Makefile.in, src/Makefile.in:
4092: Do not strip binaries.
4093: [20166e287176]
4094:
4095: * INSTALL, configure, configure.in:
4096: Add --insults=disabled configure option to allow people to build in
4097: insult support but have the insults disabled unless explicitly
4098: enabled in sudoers.
4099: [523b8c552e90]
4100:
4101: * compat/mkstemps.c:
4102: Add prototype for gettime()
4103: [275eee40473b]
4104:
4105: * config.h.in, configure, configure.in, plugins/sudoers/auth/pam.c,
4106: plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
4107: plugins/sudoers/sudoers.h:
4108: Add support for a sudo-i pam.d file to be used for "sudo -i".
4109: Adapted from a RedHat patch.
4110: [06d34f16520b]
4111:
4112: 2010-07-09 Todd C. Miller <Todd.Miller@courtesan.com>
4113:
4114: * include/missing.h:
4115: Fix mkstemps() prototype
4116: [2421841e815b]
4117:
4118: * MANIFEST, compat/Makefile.in, compat/mkstemp.c, compat/mkstemps.c,
4119: config.h.in, configure, configure.in, include/missing.h,
4120: src/sudo_edit.c:
4121: Use mkstemps() instead of mkstemp() in sudoedit. This allows
4122: sudoedit to preserve the file extension (if any) which may be used
4123: by the editor (like emacs) to choose the editing mode.
4124: [d33172d2c086]
4125:
4126: 2010-07-08 Todd C. Miller <Todd.Miller@courtesan.com>
4127:
4128: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
4129: plugins/sudoers/ldap.c:
4130: TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses
4131: TLS_CACERT, not TLS_CACERTFILE in its ldap.conf. Other LDAP client
4132: code, such as nss_ldap, uses TLS_CACERTFILE. Also document why you
4133: should avoid disabling TLS_CHECKPEER is possible.
4134: [196622436212]
4135:
4136: 2010-07-07 Todd C. Miller <Todd.Miller@courtesan.com>
4137:
4138: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
4139: Make sudo_plugin format a bit more like a man page
4140: [048d596e32da]
4141:
4142: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
4143: Add suport for negated user/host/command lists in a Defaults entry.
4144: E.g. Defaults:!baduser noexec
4145: [d41112cf0342]
4146:
4147: * Makefile.in, common/Makefile.in, compat/Makefile.in,
4148: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
4149: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
4150: src/Makefile.in:
4151: Add uninstall target
4152: [fea66ebf136a]
4153:
4154: * common/Makefile.in, compat/Makefile.in:
4155: Remove unused AR, SED and RANLIB variables
4156: [2ff9928bfdb3]
4157:
4158: * Makefile.in:
4159: Do not install sample plugins
4160: [5443b87bd1c3]
4161:
4162: 2010-07-06 Todd C. Miller <Todd.Miller@courtesan.com>
4163:
4164: * MANIFEST, aclocal.m4, compat/setenv.c, compat/unsetenv.c, configure,
4165: configure.in, plugins/sudoers/env.c:
4166: Now that sudoers is a dynamically loaded module we cannot override
4167: the libc environment functions because the symbols may already have
4168: been resolved via libc. Remove getenv/putenv/setenv/unsetenv
4169: replacements from sudoers and add replacements for setenv/unsetenv
4170: for systems that lack them.
4171: [3f2b43cb8851]
4172:
4173: * configure, configure.in, plugins/sudoers/Makefile.in:
4174: Link testsudoers with -ldl when needed
4175: [f79606f9fcd7]
4176:
4177: * plugins/sample_group/plugin_test.c:
4178: Remove unused time.h and add limits.h for PATH_MAX
4179: [3f5d0074d621]
4180:
4181: * doc/sudoers.ldap.pod:
4182: Fix typo.
4183: [bc855fd57397]
4184:
4185: 2010-07-05 Todd C. Miller <Todd.Miller@courtesan.com>
4186:
4187: * plugins/sample_group/plugin_test.c:
4188: Do not depend on strlcpy/strlcat
4189: [6e7e2b5af051]
4190:
4191: * plugins/sample_group/plugin_test.c:
4192: Standalone test driver for sudoers group plugin.
4193: [eb1235fc3b8e]
4194:
4195: 2010-07-02 Todd C. Miller <Todd.Miller@courtesan.com>
4196:
4197: * plugins/sudoers/group_plugin.c, src/load_plugins.c:
4198: Use RTLD_LAZY instead of RTLD_NOW; was using RTLD_NOW as a debugging
4199: aid.
4200: [2a34e616229b]
4201:
4202: * plugins/sample_group/sample_group.c:
4203: Fix style nit in function declarations
4204: [ab87c7c76bf9]
4205:
4206: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
4207: Document group_plugin syntax.
4208: [ed1faf72ddcb]
4209:
4210: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
4211: Document the sudoers group plugin.
4212: [f19a62dc8cfc]
4213:
4214: * INSTALL, MANIFEST, Makefile.in, config.h.in, configure,
4215: configure.in, doc/LICENSE, doc/license.pod, include/sudo_plugin.h,
4216: plugins/sample_group/Makefile.in, plugins/sample_group/getgrent.c,
4217: plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in,
4218: plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
4219: plugins/sudoers/def_data.in, plugins/sudoers/group_plugin.c,
4220: plugins/sudoers/match.c, plugins/sudoers/nonunix.h,
4221: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
4222: plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
4223: plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c, src/sudo.c:
4224: Replace built-in non-unix group support with a sudoers group plugin.
4225: Include a sample plugin that can read Unix-format group files.
4226: [8fc58ce0b1a8]
4227:
4228: * configure, configure.in, src/load_plugins.c:
4229: Add a trailing slash to _PATH_SUDO_PLUGIN_DIR to simplify usage.
4230: [5c491dddb8ef]
4231:
4232: 2010-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
4233:
4234: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat,
4235: doc/sudoers.man.in, doc/sudoers.pod:
4236: Move sudoers-specific bits out of sudo(8) and into sudoers(5)
4237: [e8a5a5830cfe]
4238:
4239: * aclocal.m4, configure, configure.in:
4240: Substitute @io_logdir@ for the sudoers I/O log directory.
4241: [21a75ca7b0ab]
4242:
4243: 2010-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
4244:
4245: * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
4246: common/atobool.c, common/fileops.c, common/fmt_string.c,
4247: common/lbuf.c, common/term.c, compat/fnmatch.c, compat/getcwd.c,
4248: compat/getgrouplist.c, compat/getline.c, compat/glob.c,
4249: compat/snprintf.c, config.h.in, configure, configure.in,
4250: include/fileops.h, plugins/sample/sample_plugin.c,
4251: plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
4252: plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
4253: plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
4254: plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
4255: plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
4256: plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
4257: plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
4258: plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
4259: plugins/sudoers/boottime.c, plugins/sudoers/check.c,
4260: plugins/sudoers/defaults.c, plugins/sudoers/env.c,
4261: plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
4262: plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
4263: plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
4264: plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
4265: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
4266: plugins/sudoers/logging.c, plugins/sudoers/match.c,
4267: plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
4268: plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
4269: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
4270: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
4271: plugins/sudoers/toke.c, plugins/sudoers/toke.l,
4272: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
4273: src/Makefile.in, src/aix.c, src/conversation.c, src/exec.c,
4274: src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c,
4275: src/sudo.c, src/sudo.h, src/sudo_edit.c, src/tgetpass.c:
4276: Set usrinfo for AIX Set adminstrative domain for the process when
4277: looking up user's password or group info and when preparing for
4278: execve(). Include strings.h even if string.h exists since they may
4279: define different things. Fixes warnings on AIX and others.
4280: [cf8b93e872c9]
4281:
4282: * Makefile.in:
4283: Add a separate all target for AIX make which was using the entire
4284: LHS (not just the first entry) of the first target as the implicit
4285: target.
4286: [a45b980a01ef]
4287:
4288: * plugins/sudoers/env.c:
4289: Do not rely on env.env_len when unsetting a variable, just use the
4290: NULL terminator.
4291: [ca6eb239c829]
4292:
4293: * plugins/sudoers/env.c:
4294: In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008
4295: [7046ba7caa4e]
4296:
4297: 2010-06-25 Todd C. Miller <Todd.Miller@courtesan.com>
4298:
4299: * plugins/sudoers/vasgroups.c:
4300: Use warningx() instead of log_error() since the latter is not
4301: available to visudo or testsudoers. This does mean that they don't
4302: end up in syslog.
4303: [152b7c50f426]
4304:
4305: * plugins/sudoers/sudoers.c:
4306: Defer call to sudo_nonunix_groupcheck_cleanup() until after we have
4307: closed the sudoers sources. From Quest sudo.
4308: [c1cd573bab94]
4309:
4310: * plugins/sudoers/pwutil.c:
4311: Ignore case when matching user/group names in the cache. From Quest
4312: sudo.
4313: [2aa4ecc7d7f5]
4314:
4315: 2010-06-24 Todd C. Miller <Todd.Miller@courtesan.com>
4316:
4317: * config.h.in, configure, configure.in, src/selinux.c:
4318: Add check for setkeycreatecon() when --with-selinux is specified.
4319: [affae247b4e0]
4320:
4321: * configure, configure.in:
4322: Error out if libaudit.h is missing or ununable when --with-linux-
4323: audit was specified
4324: [d82e743fac04]
4325:
4326: * doc/HISTORY, doc/history.pod:
4327: Add =head3 entries, mostly for the html version
4328: [ee93112d0308]
4329:
4330: 2010-06-22 Todd C. Miller <Todd.Miller@courtesan.com>
4331:
4332: * doc/HISTORY, doc/history.pod:
4333: Mention when LDAP was incorporate.
4334: [2923dc17f79c]
4335:
4336: 2010-06-21 Todd C. Miller <Todd.Miller@courtesan.com>
4337:
4338: * configure, configure.in:
4339: Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it is
4340: not covered by _ALL_SOURCE.
4341: [c92fd69809d0]
4342:
4343: 2010-06-18 Todd C. Miller <Todd.Miller@courtesan.com>
4344:
4345: * plugins/sudoers/iolog.c:
4346: Add a cast to quiet a compiler warning.
4347: [a200e07ee1bc]
4348:
4349: * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
4350: Quiet a compiler warning.
4351: [c9acfc927cea]
4352:
4353: * plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
4354: Call set_fqdn() after sudoers has parsed instead of inline as a
4355: callback.
4356: [5f4e5d075f2d]
4357:
4358: * WHATSNEW, plugins/sudoers/sudoers.c:
4359: Do not call set_fqdn() until sudoers parses (where is gets run as a
4360: callback).
4361: [09040fca6d40]
4362:
4363: * WHATSNEW:
4364: mention the change in tty ticket behavior when there is no tty
4365: [575a1fd98f05]
4366:
4367: * plugins/sudoers/check.c:
4368: Do not update tty ticket if there is no tty.
4369: [63f9c33ce6a7]
4370:
4371: * doc/LICENSE, doc/license.pod:
4372: Update copyright year
4373: [0722ab5d404b]
4374:
4375: * doc/Makefile.in:
4376: Do not rely on BSD make's $>
4377: [936a86398bd9]
4378:
4379: * configure, configure.in:
4380: Set timedir to /var/db/sudo for darwin to match Apple sudo's
4381: location
4382: [d5b9b03096f1]
4383:
4384: 2010-06-16 Todd C. Miller <Todd.Miller@courtesan.com>
4385:
4386: * plugins/sudoers/sudoers.h:
4387: Add stub declarations for struct stat and struct timeval
4388: [f6d90551a4fd]
4389:
4390: * MANIFEST:
4391: Remove compat/sigaction.c
4392: [d0ed6d9a770e]
4393:
4394: * config.h.in, configure, configure.in, plugins/sudoers/defaults.c,
4395: plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
4396: Check for zlib.h in addition to libz.
4397: [6e191b4a6065]
4398:
4399: * MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h,
4400: src/sudo_exec.h:
4401: Move functions and symbols shared between exec.c and exec_pty.c into
4402: sudo_exec.h.
4403: [14ae63403544]
4404:
4405: * doc/Makefile.in:
4406: Comment out rules to build .man.in and .cat files unless --with-
4407: devel
4408: [3cf7e5606a85]
4409:
4410: * doc/Makefile.in:
4411: Comment out rules to build .man.in and .cat files unless --with-
4412: devel
4413: [d30495b0e29e]
4414:
4415: * src/parse_args.c:
4416: Quote any non-alphanumeric characters other than '_' or '-' when
4417: passing a command to be run via the shell for the -s and -i options.
4418: [d633f74fe2d9]
4419:
4420: * doc/Makefile.in:
4421: Add back .man suffix
4422: [6e63b60a2739]
4423:
4424: * INSTALL, MANIFEST, WHATSNEW, config.h.in, configure, configure.in,
4425: plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
4426: plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c,
4427: plugins/sudoers/linux_audit.h, plugins/sudoers/logging.h,
4428: src/selinux.c:
4429: Add Linux audit support.
4430: [5a2f445e0bd4]
4431:
4432: 2010-06-15 Todd C. Miller <Todd.Miller@courtesan.com>
4433:
4434: * plugins/sudoers/iolog.c:
4435: Remove an XXX
4436: [a170cbe651d1]
4437:
4438: * doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
4439: plugins/sudoers/sudoreplay.c:
4440: Add -f (filter) option to sudoreplay to allow certain streams to be
4441: replayed and others ignored.
4442: [62e51b432ea1]
4443:
4444: * src/load_plugins.c, src/parse_args.c, src/sudo.c, src/sudo.h,
4445: src/tgetpass.c:
4446: Fix -A flag when askpass is specified in sudo.conf or if sudo
4447: doesn't need to read a password.
4448: [2e401e4a00e3]
4449:
4450: * src/exec.c, src/exec_pty.c, src/parse_args.c, src/sudo.c,
4451: src/sudo.h, src/sudo_edit.c, src/tgetpass.c:
4452: Clean up some XXXs
4453: [689f0b002d3d]
4454:
4455: * WHATSNEW, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
4456: doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
4457: Add support for multiple sudoers_base entries in ldap.conf. From
4458: Joachim Henke
4459: [e3e4a3c2bd5b]
4460:
4461: * config.h.in, configure, configure.in, plugins/sudoers/logging.c,
4462: src/exec_pty.c:
4463: remove setsid check, we require a POSIX system
4464: [cc73cb9e22c0]
4465:
4466: * plugins/sudoers/logging.c, src/exec_pty.c, src/selinux.c,
4467: src/sudo.c, src/tgetpass.c:
4468: Check for dup2() failure.
4469: [5d46d66794f5]
4470:
4471: * config.h.in, configure, configure.in:
4472: Remove dup2() check, it is not optional.
4473: [5f1d56de4384]
4474:
4475: 2010-06-14 Todd C. Miller <Todd.Miller@courtesan.com>
4476:
4477: * WHATSNEW:
4478: sync with sudo 1.7.3
4479: [88e5c0bd6d59]
4480:
4481: * INSTALL:
4482: SunOS does not ship with an ANSI compiler
4483: [f13c85c67069]
4484:
4485: * INSTALL:
4486: Update OS specific notes. Delete some really ancient ones and move
4487: older ones to the end of the list.
4488: [59ce592c4c52]
4489:
4490: * README:
4491: Sudo can be downloaded from the web site too Mention "OS dependent
4492: notes" section in INSTALL
4493: [191871538984]
4494:
4495: * src/exec_pty.c, src/selinux.c:
4496: Call selinux_restore_tty() as part of cleanup() so it gets called
4497: from error()/errorx()
4498: [bb017da6b6da]
4499:
4500: * MANIFEST, doc/PORTING:
4501: Remove obsolete porting guide
4502: [321e35591344]
4503:
4504: * plugins/sudoers/interfaces.h, plugins/sudoers/match.c:
4505: Move union sudo_in_addr_un into interfaces.h
4506: [b2c8b19ee094]
4507:
4508: * doc/Makefile.in:
4509: Remove useless circular dependencies
4510: [5682181b59cf]
4511:
4512: * plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
4513: plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
4514: plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
4515: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
4516: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
4517: plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
4518: plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c:
4519: Convert to ANSI C function declarations
4520: [a4f76927d034]
4521:
4522: * common/alloc.c, common/fileops.c, common/gettime.c, common/list.c,
4523: common/zero_bytes.c, compat/charclass.h, compat/closefrom.c,
4524: compat/fnmatch.c, compat/glob.c, compat/isblank.c, compat/memrchr.c,
4525: compat/mkstemp.c, compat/nanosleep.c, compat/snprintf.c,
4526: compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
4527: compat/strlcpy.c, compat/timespec.h, compat/utime.h,
4528: compat/utimes.c, doc/HISTORY, doc/history.pod, doc/license.pod,
4529: include/alloc.h, include/error.h, include/lbuf.h, include/list.h,
4530: include/missing.h, pathnames.h.in, plugins/sudoers/alias.c,
4531: plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.h,
4532: plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
4533: plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.c,
4534: plugins/sudoers/defaults.h, plugins/sudoers/find_path.c,
4535: plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
4536: plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
4537: plugins/sudoers/interfaces.h, plugins/sudoers/logging.c,
4538: plugins/sudoers/logging.h, plugins/sudoers/match.c,
4539: plugins/sudoers/parse.h, plugins/sudoers/plugin_error.c,
4540: plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
4541: plugins/sudoers/redblack.h, plugins/sudoers/sudo_nss.h,
4542: plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
4543: plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c,
4544: plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/aix.c,
4545: src/conversation.c, src/error.c, src/load_plugins.c,
4546: src/parse_args.c, src/sesh.c, src/sudo.h, src/sudo_noexec.c,
4547: src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c:
4548: Update copyright year
4549: [26ac7991f7d8]
4550:
4551: * doc/Makefile.in:
4552: Fix commented DEVDOCS when not in devel mode.
4553: [e0a97eaf3793]
4554:
4555: * plugins/sudoers/match.c:
4556: Quiet a compiler warning.
4557: [b2a17ebd5d38]
4558:
4559: * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
4560: Quiet a compiler warning.
4561: [687843bc593d]
4562:
4563: * plugins/sudoers/ldap.c, plugins/sudoers/sudoers.h:
4564: Make all functions in ldap.c static
4565: [b2111e89eeba]
4566:
4567: * doc/schema.ActiveDirectory:
4568: Updates from Alain Roy to provide better examples for importing the
4569: schema and to fix problems caused by Windows validating attributes
4570: which have not yet been added before committing the changes.
4571: [69f4c5ccaf89]
4572:
4573: 2010-06-11 Todd C. Miller <Todd.Miller@courtesan.com>
4574:
4575: * configure, configure.in, doc/Makefile.in, doc/sudo.cat,
4576: doc/sudo.man.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
4577: doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
4578: doc/sudoers.man.in, doc/sudoreplay.cat, doc/sudoreplay.man.in,
4579: doc/visudo.cat, doc/visudo.man.in:
4580: Leave rules to build .man.in and .cat files uncommented but only
4581: make them part of the "all" rule in devel mode. Generate .cat files
4582: directly from .man.in instead of .man using default values in
4583: configure.in
4584: [c3054a44f6a5]
4585:
4586: * configure, configure.in:
4587: Bump sudo version to 1.8.0b1
4588: [8f79c85135e1]
4589:
4590: * configure, configure.in, src/sudo.c, src/sudo_usage.h.in:
4591: Print configure args with verbose version information.
4592: [1ce690660ed2]
4593:
4594: * TODO, plugins/sudoers/visudo.c:
4595: Remove tfd from struct sudoersfile; it is not used. Add prev pointer
4596: to struct sudoersfile. Declare list of sudoersfile using TQ_DECLARE.
4597: Use tq_append to append sudoers entries to the tail queue.
4598: [1743f9a286e4]
4599:
4600: 2010-06-10 Todd C. Miller <Todd.Miller@courtesan.com>
4601:
4602: * WHATSNEW:
4603: Describe tty timestamp improvements
4604: [e214e863a313]
4605:
4606: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
4607: A comment character may not be part of a command line argument
4608: unless it is quoted with a backslash. Fixes parsing of:
4609: testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar closes bz #441
4610: [ea2e990f85ed]
4611:
4612: * doc/sudoers.pod:
4613: Make this read a little bit better when passwd_timeout is 0.
4614: [39d362757f31]
4615:
4616: * doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod:
4617: Attempt to handle a default password prompt timeout of zero more
4618: gracefully.
4619: [ea47d43acf5b]
4620:
4621: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
4622: Do not override value of keepopen global, instead restore it to the
4623: value we pushed onto the stack when popping.
4624: [fe282e5a3402]
4625:
4626: * plugins/sudoers/Makefile.in:
4627: Add dependency for utility programs on libreplace and libcommon
4628: [2339aba64928]
4629:
4630: * compat/sigaction.c, config.h.in, configure.in, include/compat.h,
4631: plugins/sudoers/logging.c, plugins/sudoers/mon_systrace.c,
4632: src/exec.c, src/exec_pty.c, src/tgetpass.c:
4633: Remove sigaction emulation Use SA_INTERRUPT in sa_flags
4634: [7dd61f1bd8d2]
4635:
4636: * MANIFEST, config.h.in, configure, configure.in, include/missing.h:
4637: We don't use getgrouplist() at the moment so there's no need to
4638: provide a compat version.
4639: [1597536fbada]
4640:
4641: * TODO:
4642: sync with reality
4643: [9e1a874e7885]
4644:
4645: * include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c,
4646: src/conversation.c, src/sudo.h, src/tgetpass.c:
4647: Fix visiblepw sudoers option; the plugin API portion still needs
4648: documenting
4649: [60b6933ef5e0]
4650:
4651: * src/sudo.c:
4652: Print sudo version as well.
4653: [987ed459b459]
4654:
4655: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
4656: Use sudo_printf for I/O log version Clarify policy plugin version
4657: string
4658: [5a58b7e8c80b]
4659:
4660: * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
4661: plugins/sudoers/ldap.c, plugins/sudoers/sudoreplay.c:
4662: Silence some compiler warnings
4663: [afb1eba90915]
4664:
4665: * src/load_plugins.c, src/tgetpass.c:
4666: Store askpass path in a global instead of uses setenv() which many
4667: systems lack.
4668: [b440bcc0e660]
4669:
4670: 2010-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
4671:
4672: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
4673: doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
4674: plugins/sudoers/check.c, plugins/sudoers/def_data.c,
4675: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
4676: plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c,
4677: plugins/sudoers/sudoers.h, src/load_plugins.c, src/parse_args.c,
4678: src/tgetpass.c:
4679: Move askpass path specification from sudoers to sudo.conf.
4680: [5507ab867c26]
4681:
4682: * src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
4683: Use a flag bit in struct command_details for selinux instead of a
4684: separate field.
4685: [c59ca4acded9]
4686:
4687: * src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
4688: Implement background mode. If I/O logging we use pipes instead of a
4689: pty.
4690: [c07a4b356cbd]
4691:
4692: * compat/mksiglist.c, compat/strsignal.c, include/compat.h,
4693: src/exec.c, src/exec_pty.c, src/tgetpass.c:
4694: Move compat definition of NSIG to compat.h
4695: [ab0385467f25]
4696:
4697: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
4698: doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
4699: Mention plugins in the sudo manual and add some missing path
4700: substitution in the sudo_plugin manual.
4701: [570f831f47a3]
4702:
4703: * src/Makefile.in:
4704: Set _PATH_SUDO_CONF based on $(sysconfdir)
4705: [fde51869cf07]
4706:
4707: * common/lbuf.c, common/term.c, config.h.in, configure, configure.in,
4708: src/exec.c, src/exec_pty.c, src/ttysize.c:
4709: Require POSIX termios to build sudo
4710: [9ec6b41f3f95]
4711:
4712: * src/tgetpass.c:
4713: Ignore SIGPIPE for "sudo -S"
4714: [7ad27fde0c06]
4715:
4716: * src/tgetpass.c:
4717: Fix uninitialized variable in TGP_ECHO case and print a newline if
4718: the user interrupted password input.
4719: [ce19204d8dd4]
4720:
4721: * src/tgetpass.c:
4722: Make TGP_ECHO override TGP_MASK and don't try to restore the
4723: terminal if we didn't modify it.
4724: [a7e11abfe7e4]
4725:
4726: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
4727: include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c,
4728: src/conversation.c, src/sudo.h, src/tgetpass.c:
4729: Add SUDO_CONV_PROMPT_MASK define which corresponds to the
4730: "pwfeedback" sudoers option. Do not disable echo if TGP_ECHO is
4731: set.
4732: [e0550590cabe]
4733:
4734: * src/exec_pty.c:
4735: Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
4736: [762448182fe3]
4737:
4738: 2010-06-08 Todd C. Miller <Todd.Miller@courtesan.com>
4739:
4740: * src/exec.c, src/exec_pty.c, src/selinux.c, src/sudo.c, src/sudo.h:
4741: Add selinux_enabled flag into struct command_details and set it in
4742: command_info_to_details(). Return an error from selinux_setup()
4743: instead of exiting. Call selinux_setup() from exec_setup().
4744: [011bea23a5a0]
4745:
4746: 2010-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
4747:
4748: * src/exec_pty.c:
4749: Remove commented out copy of old sudo_execve() function.
4750: [9c5e21380472]
4751:
4752: 2010-06-08 Todd C. Miller <Todd.Miller@courtesan.com>
4753:
4754: * plugins/sudoers/sudoers.c:
4755: Fix setting selinux type on command line.
4756: [814b20a0b3be]
4757:
4758: * plugins/sudoers/iolog.c:
4759: In sudoers_io_close(), skip NULL io_fds[] elements.
4760: [4011ff7d4daf]
4761:
4762: * include/compat.h:
4763: No longer need NGROUPS_MAX define
4764: [cae4c49d7077]
4765:
4766: * compat/nanosleep.c, config.h.in, configure, configure.in,
4767: include/compat.h, plugins/sudoers/check.c, plugins/sudoers/iolog.c,
4768: plugins/sudoers/visudo.c, src/sudo_edit.c:
4769: Replace timerfoo macros with timevalfoo since the timer macros are
4770: known to be busted on some systems.
4771: [4f97d79f2d41]
4772:
4773: * src/exec_pty.c:
4774: Remove duplicate call to selinux_setup().
4775: [82bd52764e21]
4776:
4777: * plugins/sudoers/auth/pam.c:
4778: If pam_open_session() fails, pass its status to pam_end.
4779: [1d8de4cf8ff3]
4780:
4781: * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
4782: If a file in a #includedir has improper permissions or owner just
4783: skip it. This prevents packages that incorrectly install a file
4784: into /etc/sudoers.d from breaking sudo so easily. Syntax errors in
4785: #includedir files still result in a parse error (for now).
4786: [ade99a4549a4]
4787:
4788: * WHATSNEW, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
4789: plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
4790: plugins/sudoers/def_data.in, plugins/sudoers/iolog.c:
4791: Add use_pty sudoers option to force use of a pty even when not
4792: logging I/O.
4793: [b280a8972a79]
4794:
4795: * plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
4796: Make env_init() void as it never fails.
4797: [d3890e55daa7]
4798:
4799: * plugins/sudoers/env.c:
4800: No longer use _NSGetEnviron so don't need crt_externs.h
4801: [9b4e0e139881]
4802:
4803: * plugins/sudoers/env.c:
4804: Remove unused VNULL define
4805: [a42cacb263e3]
4806:
4807: 2010-06-07 Todd C. Miller <Todd.Miller@courtesan.com>
4808:
4809: * plugins/sudoers/iolog.c:
4810: Add #define for maximum session id
4811: [9e18c17a28c2]
4812:
4813: * MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h:
4814: Split exec.c into exec.c and exec_pty.c
4815: [d52376327332]
4816:
4817: * MANIFEST:
4818: Sync with source file moves.
4819: [4a62c6c9e846]
4820:
4821: * src/Makefile.in, src/get_pty.c, src/pty.c:
4822: Rename pty.c -> get_pty.c
4823: [5696a12bd29b]
4824:
4825: 2010-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
4826:
4827: * plugins/sudoers/iolog.c:
4828: Only use I/O input log file if def_log_input is set and output file
4829: if def_log_output is set.
4830: [d866992f1681]
4831:
4832: 2010-06-04 Todd C. Miller <Todd.Miller@courtesan.com>
4833:
4834: * compat/strsignal.c:
4835: Update copyright year
4836: [a96f2593fd4e]
4837:
4838: * src/pty.c:
4839: uid -> ttyuid
4840: [c3454d74ebcb]
4841:
4842: * plugins/sudoers/sudoers.c:
4843: For sudoedit, make a local copy of editor string si become part of
4844: argv. If no editor environment variable, split def_editor on ':'
4845: since it may be a colon-delimited path.
4846: [2ee298506a6e]
4847:
4848: * src/sudo_edit.c:
4849: Remove unneeded endpwent()/endgrent()
4850: [623f6743d101]
4851:
4852: * doc/Makefile.in:
4853: Use value of nroff from configure
4854: [b2ce649125ab]
4855:
4856: * src/exec.c:
4857: Add missing const to I/O log action function
4858: [d764a3955e04]
4859:
4860: * plugins/sudoers/check.c:
4861: Update copyright year and fix whitespace
4862: [e648c35b16be]
4863:
4864: * configure, configure.in:
4865: Fix typo
4866: [8e0bdfc47da4]
4867:
4868: * plugins/sudoers/iolog.c:
4869: Remove redundant tty signal blocking in log function.
4870: [f17f575dabd4]
4871:
4872: 2010-06-03 Todd C. Miller <Todd.Miller@courtesan.com>
4873:
4874: * plugins/sudoers/iolog.c:
4875: Place static keyword where it belongs
4876: [b01aec7c86b4]
4877:
4878: * plugins/sudoers/logging.c:
4879: Always use a printf format string for send_mail()
4880: [13b1ada644c9]
4881:
4882: * common/atobool.c, plugins/sudoers/ldap.c:
4883: Extend atobool() so we can use it in the LDAP code.
4884: [73f8e6807044]
4885:
4886: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
4887: Sudo now stashes tty ctime for tty_tickets on Solaris too.
4888: [e82df13ad3fd]
4889:
4890: * plugins/sudoers/boottime.c:
4891: Fix dummy version of get_boottime()
4892: [01d69c06013b]
4893:
4894: 2010-06-02 Todd C. Miller <Todd.Miller@courtesan.com>
4895:
4896: * plugins/sudoers/check.c:
4897: Enable tty_is_devpts() support for Solaris with the "devices"
4898: filesystem.
4899: [237c6b25fa84]
4900:
4901: * src/exec.c:
4902: Unbreak the non-io logging case.
4903: [4822b9f709fb]
4904:
4905: * src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
4906: Fix symbol name conflict with sudo_printf.
4907: [0d44eab0a8f6]
4908:
4909: * plugins/sudoers/auth/pam.c:
4910: Fix OpenPAM detection for newer versions.
4911: [1b2abed232d8]
4912:
4913: * plugins/sudoers/vasgroups.c:
4914: Sync with Quest sudo git repo
4915: [f1d98b3cba02]
4916:
4917: * aclocal.m4, configure, configure.in:
4918: HP-UX ld uses +b instead or -R or -rpath Fix typo in libvas check
4919: Add missing template for ENV_DEBUG Adapted from Quest sudo
4920: [695dbd7b28f4]
4921:
4922: * README.LDAP:
4923: Fix typos; from Quest Sudo
4924: [4eba9da33b8e]
4925:
4926: 2010-06-01 Todd C. Miller <Todd.Miller@courtesan.com>
4927:
4928: * plugins/sudoers/Makefile.in:
4929: Add back -I$(top_srcdir); we need it for including compat/foo.h
4930: since we cannot rely on "foo.h" being found relative to the source
4931: file when the cwd is different.
4932: [bbf24695f325]
4933:
4934: * src/exec.c:
4935: Fix a bug where we could treat EAGAIN as a permanent error. Also set
4936: cstat if perform_io() returns an error.
4937: [200475c4326f]
4938:
4939: * common/alloc.c, plugins/sudoers/boottime.c,
4940: plugins/sudoers/sudoers.c:
4941: Add casts to quiet compiler warnings.
4942: [85eb1c336697]
4943:
4944: * plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
4945: plugins/sudoers/visudo.c:
4946: Fix typo in ternary operator usage.
4947: [6492ac1450e2]
4948:
4949: 2010-05-30 Todd C. Miller <Todd.Miller@courtesan.com>
4950:
4951: * INSTALL, configure, configure.in:
4952: Add --enable-warnings and fix typo in SUDO_IO_LOGDIR
4953: [92121d693b30]
4954:
4955: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
4956: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod:
4957: Update docs to match sudoers I/O logging changes
4958: [18d651989e49]
4959:
4960: * INSTALL, WHATSNEW, aclocal.m4, configure, configure.in,
4961: pathnames.h.in, plugins/sudoers/def_data.c,
4962: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
4963: plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
4964: plugins/sudoers/gram.h, plugins/sudoers/gram.y,
4965: plugins/sudoers/iolog.c, plugins/sudoers/parse.c,
4966: plugins/sudoers/parse.h, plugins/sudoers/sudoers.c,
4967: plugins/sudoers/sudoreplay.c:
4968: Break sudoers transcript feature up into log_input and log_output.
4969: [db3c1248d2ad]
4970:
4971: * plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
4972: plugins/sudoers/visudo.c:
4973: Use setprogname() as needed.
4974: [6beee63a4553]
4975:
4976: * plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
4977: Adapt sudoreplay to iolog changes.
4978: [581f52c05f0f]
4979:
4980: 2010-05-29 Todd C. Miller <Todd.Miller@courtesan.com>
4981:
4982: * plugins/sudoers/iolog.c:
4983: Log all input and output into separate files and store a number on
4984: each timing file line to indicate which file the data is in.
4985: [fb460c5273dd]
4986:
4987: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
4988: plugins/sudoers/sudoers.h:
4989: Make sudoers_io functions static to iolog.c
4990: [b2df3cc3eecb]
4991:
4992: 2010-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
4993:
4994: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, src/parse_args.c,
4995: src/sudo_usage.h.in:
4996: Completely remove the -L flag from the sudo front end.
4997: [3d220030b720]
4998:
4999: * plugins/sudoers/sudoreplay.c:
5000: Fix EAGAIN handling when writing to stdout.
5001: [4766d77cea49]
5002:
5003: * plugins/sudoers/sudoers.c:
5004: Eliminate unused variables
5005: [83bd711e79c4]
5006:
5007: * plugins/sudoers/sudoers.c, src/exec.c, src/sudo.c:
5008: Re-enable cleanup functions in sudoers plugin and sudo driver for
5009: error()/errorx().
5010: [43093f937dd8]
5011:
5012: * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/defaults.c,
5013: plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
5014: plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
5015: plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
5016: Use sudo_printf to display verbose version information.
5017: [435cc9f8d4a2]
5018:
5019: * common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in,
5020: plugins/sudoers/Makefile.in, src/Makefile.in:
5021: Minor Makefile cleanup: fix a typo, change the removal order in the
5022: clean targets, and remove a superfluous include path for the sudoers
5023: plugin.
5024: [6e3b2d6b4437]
5025:
5026: * plugins/sudoers/env.c:
5027: Handle duplicate variables in the environment. For unsetenv(), keep
5028: looking even after remove the first instance. For sudo_putenv(),
5029: check for and remove dupes after we replace an existing value.
5030: [c1bbb88d0435]
5031:
5032: 2010-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
5033:
5034: * plugins/sudoers/Makefile.in:
5035: Use explicit path to source file instead of $< for files that live
5036: in devdir and top_srcdir.
5037: [358ab7f6cc64]
5038:
5039: * plugins/sudoers/Makefile.in:
5040: Add explicit rules to compile gram.c and toke.c for HP-UX Pevent
5041: ending LIBSUDOERS_OBJS with a backslash
5042: [481a5c96d47e]
5043:
5044: * plugins/sudoers/Makefile.in, src/Makefile.in:
5045: Link libcommon before libreplace since libcommon may use functions
5046: only present in libreplace.
5047: [1847c496ff5b]
5048:
5049: * common/Makefile.in:
5050: Move code common to sudo and the sudoers plugin to a convenience
5051: library, libcommon. Removes the need to make links in the sudoers
5052: plugin dir and reduces re-compilation of duplicate object files.
5053: [4c8986352937]
5054:
5055: * Makefile.in, common/alloc.c, common/atobool.c, common/fileops.c,
5056: common/fmt_string.c, common/gettime.c, common/lbuf.c, common/list.c,
5057: common/term.c, common/zero_bytes.c, configure, configure.in,
5058: plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
5059: src/Makefile.in, src/alloc.c, src/atobool.c, src/fileops.c,
5060: src/fmt_string.c, src/gettime.c, src/lbuf.c, src/list.c, src/term.c,
5061: src/zero_bytes.c:
5062: Move code common to sudo and the sudoers plugin to a convenience
5063: library, libcommon. Removes the need to make links in the sudoers
5064: plugin dir and reduces re-compilation of duplicate object files.
5065: [1d1d98bd55b9]
5066:
5067: * src/exec.c, src/sudo.c, src/sudo.h:
5068: Rename script_execve to sudo_execve and rename script_foo in exec.c
5069: [a35ec80de96a]
5070:
5071: * MANIFEST, src/Makefile.in, src/exec.c, src/script.c:
5072: rename script.c exec.c and fix up the MANIFEST file
5073: [36bc3bff9578]
5074:
5075: * src/script.c, src/sudo.c, src/sudo.h:
5076: Rename script_setup() to pty_setup() and call from script_execve()
5077: directly.
5078: [899b0fb2a14d]
5079:
5080: * configure, configure.in:
5081: bump version to 1.8.0a2
5082: [0b1c1ca9d4e5]
5083:
5084: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
5085: Document init_session
5086: [b5324785a406]
5087:
5088: * plugins/sudoers/auth/API, plugins/sudoers/auth/sudo_auth.c,
5089: plugins/sudoers/auth/sudo_auth.h:
5090: Clean up the sudoers auth API a bit and update the docs.
5091: [c40fd4cb6e68]
5092:
5093: * include/sudo_plugin.h, plugins/sudoers/auth/pam.c,
5094: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c,
5095: plugins/sudoers/sudoers.h, src/script.c, src/sudo.c:
5096: Add init_session function to struct policy_plugin that gets called
5097: before the uid/gid/etc changes. A struct passwd pointer is passed
5098: in,which may be NULL if the user does not exist in the passwd
5099: database.The sudoers module uses init_session to open the pam
5100: session as needed.
5101: [d71723320ee8]
5102:
5103: 2010-05-26 Todd C. Miller <Todd.Miller@courtesan.com>
5104:
5105: * plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
5106: plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/set_perms.c,
5107: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
5108: Add open/close session to sudo auth, only used by PAM. This allows
5109: us to open (and close) the PAM session from sudoers.
5110: [2665e2920d0d]
5111:
5112: * plugins/sudoers/Makefile.in:
5113: Add explicit rule to build getdate.o for HP-UX make.
5114: [7f049e989956]
5115:
5116: * plugins/sudoers/Makefile.in:
5117: Back out most of change 45e406ebdea2. Create dummy .l.c and .y.c
5118: rules as an alternate way to prevent HP-UX make (and others) from
5119: trying to rebuild the parser in non-dev mode.
5120: [f84badad98c5]
5121:
5122: * plugins/sudoers/sudoers.c:
5123: Re-enable PATH_MAX check for command
5124: [40d8a50da136]
5125:
5126: * Makefile.in:
5127: For distclean, clean the main directory last since the subdirs need
5128: to be able to run libtool to clean things.
5129: [8949a9861634]
5130:
5131: * compat/Makefile.in:
5132: Fix generation of mksiglist.h
5133: [b7cdc9b36650]
5134:
5135: * src/script.c:
5136: Now that we defer sending cstat until the end of script_child() we
5137: cannot reuse cstat when reading command status from parent.
5138: [25c882643466]
5139:
5140: 2010-05-25 Todd C. Miller <Todd.Miller@courtesan.com>
5141:
5142: * configure, configure.in, doc/sudo.man.in, doc/sudo.man.pl,
5143: doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
5144: doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoreplay.cat,
5145: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
5146: Use numeric registers to handle conditionals instead of trying to do
5147: it all with text processing.
5148: [478079c3fd4b]
5149:
5150: * doc/sudoers.pod:
5151: Document per-command SELinux settings
5152: [13840d566805]
5153:
5154: * plugins/sudoers/sudoers.c:
5155: Repair "sudo -l -U username"
5156: [10a0dcdf2ddf]
5157:
5158: * plugins/sudoers/sudoers.c:
5159: Set selinux role and type in command details.
5160: [8ae6d35a126d]
5161:
5162: * src/script.c, src/selinux.c, src/sudo.h:
5163: Rework SELinux support.
5164: [83279cc94bf2]
5165:
5166: 2010-05-24 Todd C. Miller <Todd.Miller@courtesan.com>
5167:
5168: * src/script.c, src/selinux.c, src/sudo.h:
5169: Make SELinux support compile again. Needs more work to be complete.
5170: [3d3addebcf82]
5171:
5172: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
5173: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
5174: src/parse_args.c, src/script.c, src/selinux.c, src/sudo.c,
5175: src/sudo.h:
5176: Bring back closefrom settings.
5177: [b1c6257d4bbb]
5178:
5179: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
5180: plugins/sudoers/sudoers.h:
5181: If running a command or sudoedit in transcript mode, call
5182: io_nextid() before log_allowed() so the session id is logged.
5183: [c42f3ae40150]
5184:
5185: * configure, configure.in:
5186: Use mandoc(1) if nroff(1) is not present.
5187: [daad4bbd04af]
5188:
5189: * doc/Makefile.in:
5190: Use the --file argument to config.status instead of setting
5191: CONFIG_FILES in the environment.
5192: [c89411a8bf70]
5193:
5194: * plugins/sudoers/Makefile.in:
5195: We cannot conditionally update gram.h or the dependency ordering
5196: gets messed up in devel mode.
5197: [c938953231d9]
5198:
5199: 2010-05-21 Todd C. Miller <Todd.Miller@courtesan.com>
5200:
5201: * Makefile.in, compat/Makefile.in, configure, configure.in,
5202: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
5203: plugins/sudoers/Makefile.in, src/Makefile.in:
5204: Substitute @SHELL@ into Makefiles
5205: [36aa6a095335]
5206:
5207: * config.sub:
5208: Fix typo
5209: [16d294d26b58]
5210:
5211: * config.guess, config.sub, configure, configure.in:
5212: Update to autoconf 2.65
5213: [4fa6ea8caea3]
5214:
5215: * Makefile.in:
5216: Fix libtool target (space vs. tabs)
5217: [755cf3892618]
5218:
5219: * config.h.in, plugins/sudoers/logging.h, plugins/sudoers/visudo.c:
5220: Remove use of RETSIGTYPE; all modern systems have signal handlers
5221: that return void.
5222: [42b4e3aee668]
5223:
5224: * Makefile.in, aclocal.m4, acsite.m4, configure, configure.in,
5225: ltmain.sh, m4/libtool.m4, m4/ltoptions.m4, m4/ltsugar.m4,
5226: m4/ltversion.m4, m4/lt~obsolete.m4, plugins/sample/Makefile.in,
5227: plugins/sudoers/Makefile.in, src/Makefile.in:
5228: Update to libtool-2.2.6b. I haven't made any local modifications
5229: this time, which should be OK since we install sudo_noexec.so by
5230: hand now.
5231: [6f79ced593bb]
5232:
5233: * compat/Makefile.in, plugins/sample/Makefile.in,
5234: plugins/sudoers/Makefile.in, src/Makefile.in:
5235: Use libtool to clean objects
5236: [1581057d6472]
5237:
5238: * include/Makefile.in:
5239: Install sudo_plugin.h as part of "make install" and make other
5240: install targets callable from the top-level Makefile
5241: [aaaeb027d774]
5242:
5243: * configure, configure.in:
5244: regen with autoupdate to eliminate AC_TRY_LINK
5245: [5d5541c230f5]
5246:
5247: * Makefile.in, compat/Makefile.in, configure, configure.in,
5248: doc/Makefile.in, plugins/sample/Makefile.in,
5249: plugins/sudoers/Makefile.in, src/Makefile.in:
5250: Install sudo_plugin.h as part of "make install" and make other
5251: install targets callable from the top-level Makefile
5252: [b258b8401b1c]
5253:
5254: * plugins/sample/sample_plugin.c:
5255: The sample plugin doesn't support being run with no args so return a
5256: usage error in this case.
5257: [473b3cf965be]
5258:
5259: * plugins/sudoers/iolog.c:
5260: Set close on exec flag for descriptors used for I/O logging so they
5261: are not present in the command being run.
5262: [2c7e8708df76]
5263:
5264: * plugins/sudoers/tsgetgrpw.c:
5265: Set close on exec flag in private versions of setpwent() and
5266: setgrent().
5267: [64fef78cb833]
5268:
5269: * src/script.c:
5270: Close the I/O pipes aftering dup2()ing them to std{in,out,err}.
5271: Fixes extra fds being present in the command when it is part of a
5272: pipeline.
5273: [060451617713]
5274:
5275: * plugins/sudoers/sudoers.c:
5276: Set user_tty to "unknown" if there is no tty, like sudo 1.7 does (it
5277: is used when logging). Note that user_ttypath will still be NULL if
5278: there is no tty.
5279: [31b69a6ecda7]
5280:
5281: * src/script.c, src/sudo.h:
5282: Cosmetic changes: add comments, remove orphaned prototype and
5283: make a global static.
5284: [f7851af0143e]
5285:
5286: 2010-05-20 Todd C. Miller <Todd.Miller@courtesan.com>
5287:
5288: * src/script.c:
5289: Move check for maxfd == -1 to flush_output where it belongs.
5290: [b826a95b4491]
5291:
5292: * src/script.c:
5293: Break out of select loop if all the fds we want to select on are -1.
5294: [f5b387024238]
5295:
5296: * src/sudo.c:
5297: Avoid possible malloc(0) if plugin returns an empty groups list.
5298: [9765a8fe5ce7]
5299:
5300: * src/sudo.c:
5301: Add debugging info when calling plugin close function
5302: [95a273c7ff66]
5303:
5304: * src/script.c:
5305: Avoid closing stdin/stdout/stderr when we are piping output.
5306: [330e76423caf]
5307:
5308: * src/script.c:
5309: When execve() of the command fails, it is possible to receive
5310: SIGCHLD before we've read the error status from the pipe. Re-order
5311: things such that we send the final status at the very end and prefer
5312: error status over wait status.
5313: [b0dcf825244f]
5314:
5315: 2010-05-19 Todd C. Miller <Todd.Miller@courtesan.com>
5316:
5317: * plugins/sudoers/auth/sudo_auth.c:
5318: Fix compilation for non PAM/BSD auth/AIX auth
5319: [e382b39d2e4f]
5320:
5321: 2010-05-18 Todd C. Miller <Todd.Miller@courtesan.com>
5322:
5323: * src/script.c:
5324: Additional checks to make sure we don't close /dev/tty by mistake.
5325: When flushing, sleep in select as long as we have buffers that need
5326: to be written out.
5327: [8139cbd3dd54]
5328:
5329: * src/script.c:
5330: Now that we can use pipes for stdin/stdout/stderr there is no longer
5331: a need to error out when there is no tty. We just need to make sure
5332: we don't try to use the tty fd if it is -1.
5333: [666621635d26]
5334:
5335: 2010-05-17 Todd C. Miller <Todd.Miller@courtesan.com>
5336:
5337: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
5338: include/sudo_plugin.h, plugins/sample/sample_plugin.c,
5339: plugins/sudoers/iolog.c, plugins/sudoers/sudoers.h, src/sudo.c:
5340: Add argc and argv to I/O logger open function.
5341: [0d7faa007d27]
5342:
5343: * doc/sudo_plugin.man.in, doc/sudo_plugin.pod, include/sudo_plugin.h,
5344: plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c,
5345: src/parse_args.c, src/sudo.c, src/sudo_edit.c:
5346: Remove check_sudoedit function pointer in struct sudo_policy.
5347: Instead, sudo will set sudoedit=true in the settings array. The
5348: plugin should check for this and modify argv_out as appropriate in
5349: check_policy.
5350: [c0328e3276b8]
5351:
5352: 2010-05-16 Todd C. Miller <Todd.Miller@courtesan.com>
5353:
5354: * plugins/sample/sample_plugin.c, src/sudo.c, src/sudo.h,
5355: src/sudo_edit.c:
5356: If plugin sets "sudoedit=true" in the command info, enable sudoedit
5357: mode even if not invoked as sudoedit. This allows a plugin to
5358: enable sudoedit when the user runs an editor.
5359: [96d67b99e42e]
5360:
5361: 2010-05-15 Todd C. Miller <Todd.Miller@courtesan.com>
5362:
5363: * plugins/sudoers/Makefile.in:
5364: gram.h must not depend on gram.y if we want to avoid unnecessary
5365: rebuilding of targets dependent on gram.h when gram.y changes.
5366: [9db4b767fdca]
5367:
5368: * plugins/sample/sample_plugin.c:
5369: Refactor common bits of check_policy and check_edit
5370: [ac4d366a04cf]
5371:
5372: * plugins/sample/sample_plugin.c:
5373: Add sudoedit support
5374: [a1a6cc4c0cef]
5375:
5376: 2010-05-14 Todd C. Miller <Todd.Miller@courtesan.com>
5377:
5378: * plugins/sudoers/Makefile.in:
5379: Rely more on VPATH; fixes a dependency issue with the parser.
5380: [45e406ebdea2]
5381:
5382: * include/compat.h:
5383: Fix typo introduced in last commit
5384: [3ccb0f853d11]
5385:
5386: * include/compat.h:
5387: Emulate seteuid using setreuid() or setresuid() as needed. There are
5388: still a few places that call seteuid() directly.
5389: [36e8efa3a99d]
5390:
5391: * src/parse_args.c, src/sudo_edit.c:
5392: Attempt to fix building on systems that only have setuid.
5393: [8e9ba4083318]
5394:
5395: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
5396: Clarify sudoedit a tad.
5397: [d39dfaa14ade]
5398:
5399: 2010-05-13 Todd C. Miller <Todd.Miller@courtesan.com>
5400:
5401: * src/sudo_edit.c:
5402: Fix compilation on HP-UX
5403: [f6e47843d139]
5404:
5405: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
5406: Document sudoedit
5407: [4cbf5196d993]
5408:
5409: * plugins/sudoers/sudoers.c, src/sudo.c, src/sudo.h, src/sudo_edit.c:
5410: Change how we handle the sudoedit argv. We now require that there
5411: be a "--" in argv to separate the editor and any command line
5412: arguments from the files to be edited.
5413: [20623d549a3c]
5414:
5415: * include/sudo_plugin.h, plugins/sample/sample_plugin.c,
5416: plugins/sudoers/Makefile.in, plugins/sudoers/gettime.c,
5417: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
5418: src/Makefile.in, src/gettime.c, src/parse_args.c, src/sudo.c,
5419: src/sudo.h, src/sudo_edit.c:
5420: Work in progress support for sudoedit. The actual interface used by
5421: the plugin for sudoedit is likely to change.
5422: [c31262a31997]
5423:
5424: * plugins/sudoers/find_path.c, plugins/sudoers/sudoers.c,
5425: plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c:
5426: Make find_path() a little more generic by not checking def_foo
5427: variables inside it. Instead, pass in ignore_dot as a function
5428: argument.
5429: [9c23101a094d]
5430:
5431: * plugins/sudoers/env.c:
5432: Add version of getenv(3) that uses our own environ pointer.
5433: [0e3783e63534]
5434:
5435: 2010-05-12 Todd C. Miller <Todd.Miller@courtesan.com>
5436:
5437: * src/script.c:
5438: Avoid a potential race condition if SIGCHLD is received immediately
5439: before we call select().
5440: [99adc5ea7f0a]
5441:
5442: * plugins/sudoers/sudoers.c:
5443: Call env_init() before we open the sudoers sources as those may call
5444: our setenv() replacement.
5445: [5f82601f5ab0]
5446:
5447: * plugins/sudoers/env.c:
5448: Initialize env_len in env_init()
5449: [7ae02b3029b5]
5450:
5451: 2010-05-11 Todd C. Miller <Todd.Miller@courtesan.com>
5452:
5453: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
5454: Document time stamp shortcomings under SECURITY NOTES Use "time
5455: stamp" instead of timestamp.
5456: [2b86120815b2]
5457:
5458: * doc/Makefile.in:
5459: Make sed substitution of mansectsu and mansectform global.
5460: [94588632dba0]
5461:
5462: * plugins/sudoers/check.c:
5463: If the tty lives on a devpts filesystem, stash the ctime in the tty
5464: ticket file, as it is not updated when the tty is written to. This
5465: helps us determine when a tty has been reused without the user
5466: authenticating again with sudo.
5467: [0e62a31bceb0]
5468:
5469: * src/tgetpass.c:
5470: Fix pasto in mulitple signal fix and use _NSIG not NSIG since that
5471: is what our compat checks set.
5472: [df50f0a040c9]
5473:
5474: * configure, configure.in:
5475: Add check for whether sudo need to link with -ldl to get dlopen().
5476: This is a bit of a hack that will get reworked when libtool is
5477: updated.
5478: [63bdcf579533]
5479:
5480: * plugins/sudoers/check.c:
5481: Fix timestamp removal with -k/-K
5482: [6b4639fef973]
5483:
5484: * plugins/sudoers/Makefile.in:
5485: audit.c is now private to the sudoers plugin
5486: [1974f342ae0b]
5487:
5488: * configure, configure.in:
5489: Link with -lpthread on HP-UX since a plugin may be linked with
5490: -lpthread and dlopen() will fail if the shared object has a
5491: dependency on -lpthread but the main program is not linked with it.
5492: [d42139391263]
5493:
5494: * config.h.in, configure, configure.in, plugins/sudoers/set_perms.c:
5495: Add separate test for getresuid() since HP-UX has setresuid() but no
5496: getresuid().
5497: [910fe727a374]
5498:
5499: * doc/Makefile.in:
5500: Remove errant backslash
5501: [dd5464257c69]
5502:
5503: * src/script.c:
5504: Fix SIGPIPE handling. Now that we use may use pipes for
5505: stdin/stdout we need to pass any SIGPIPE we receive to the running
5506: command.
5507: [3f6b1991f4fd]
5508:
5509: * src/script.c:
5510: Also start the command in the background if stdin is not a tty.
5511: [d93bc33a3740]
5512:
5513: 2010-05-10 Todd C. Miller <Todd.Miller@courtesan.com>
5514:
5515: * plugins/sudoers/sudoreplay.c, src/script.c, src/sudo.h, src/term.c:
5516: No need to use pseudo-cbreak mode now that we use pipes when stdout
5517: is not a tty. Instead, check whether stdin is a tty and if not,
5518: delay setting the tty to raw mode until the command tries to access
5519: it itself (and receives SIGTTIN or SIGTTOU).
5520: [e68315cf8c6b]
5521:
5522: * src/tgetpass.c:
5523: Use an array for signals received instead of a single variable so we
5524: don't lose any when there are multiple different signals.
5525: [2ac726dac864]
5526:
5527: * src/tgetpass.c:
5528: Do signal setup after turning off echo, not before. If we are using
5529: a tty but are not the foreground pgrp this will generate SIGTTOU so
5530: we want the default action to be taken (suspend process).
5531: [bebb6209c795]
5532:
5533: 2010-05-07 Todd C. Miller <Todd.Miller@courtesan.com>
5534:
5535: * src/script.c:
5536: Flush the iobufs on suspend or child exit using the same logic as
5537: the main event loop.
5538: [c627feee1035]
5539:
5540: * src/script.c:
5541: Free memory after we are done with it.
5542: [8db9b611b45a]
5543:
5544: 2010-05-06 Todd C. Miller <Todd.Miller@courtesan.com>
5545:
5546: * doc/HISTORY:
5547: Quest now sponsors Sudo development
5548: [6cc490083bc7]
5549:
5550: 2010-05-05 Todd C. Miller <Todd.Miller@courtesan.com>
5551:
5552: * doc/Makefile.in:
5553: Install sudo_plugin man page.
5554: [c253729790b2]
5555:
5556: * src/script.c:
5557: Go back to reseting io_buffer offset and length (and now also the
5558: EOF handling) in the loop we do the FD_SET, not after we drain the
5559: buffer after write() since we don't know what order reads and writes
5560: will occur in.
5561: [5f38bfa8497f]
5562:
5563: * MANIFEST:
5564: audit files moved to sudoers plugin directory
5565: [b1ead182428e]
5566:
5567: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
5568: Document plugin_printf and new logging functions.
5569: [fe9430b60ab5]
5570:
5571: * src/script.c:
5572: Add support for logging stdin when it is not a tty. There is still a
5573: bug where "cat | sudo cat" has problems because both cat and sudo
5574: are trying to read from the tty.
5575: [04c9c59fcfba]
5576:
5577: * include/sudo_plugin.h, plugins/sample/sample_plugin.c,
5578: plugins/sudoers/sudoers.c, src/script.c:
5579: Add separate I/O logging functions for tty in/out and
5580: stdin/stdout/stderr. NOTE: stdin logging does not currently work and
5581: is disabled for now.
5582: [a36dfd4ca935]
5583:
5584: 2010-05-04 Todd C. Miller <Todd.Miller@courtesan.com>
5585:
5586: * include/sudo_plugin.h, plugins/sample/sample_plugin.c,
5587: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
5588: plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
5589: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
5590: src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
5591: Add pointer to a printf like function to plugin open functon. This
5592: can be used instead of the conversation function to display info and
5593: error messages.
5594: [98734eea8ef1]
5595:
5596: * Makefile.in:
5597: Stop if make in a subdir fails
5598: [228bb3ad2dbc]
5599:
5600: * src/script.c:
5601: Only set user's tty to blocking mode when doing the final flush.
5602: Flush pipes as well as pty master when the process is done.
5603: [20ff67218666]
5604:
5605: 2010-05-03 Todd C. Miller <Todd.Miller@courtesan.com>
5606:
5607: * plugins/sudoers/ldap.c:
5608: Use print_error() when displaying ldap config info in debugging
5609: mode.
5610: [d142e0cacb22]
5611:
5612: * compat/Makefile.in, compat/strdup.c, compat/strndup.c:
5613: No longer need strdup() or strndup() replacements.
5614: [df53697174ec]
5615:
5616: * plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
5617: plugins/sudoers/sudoers.h:
5618: Add print_error() function that uses the conversation function to
5619: print a variable number of error strings and use it in log_error().
5620: [b1fa2861b575]
5621:
5622: * src/script.c, src/sudo.h, src/term.c:
5623: Do not need the opost flag to term_copy() now that we use pipes for
5624: stdout/stderr when they are not a tty.
5625: [f42811f70a19]
5626:
5627: * src/script.c:
5628: Use pipes to the sudo process if stdout or stderr is not a tty.
5629: Still needs some polishing and a decision as to whether it is
5630: desirable to add additonal entry points for logging
5631: stdout/stderr/stdin when they are not ttys. That would allow a
5632: replay program to keep things separate and to know whether the
5633: terminal needs to be in raw mode at replay time.
5634: [1a945e0ab2da]
5635:
5636: 2010-04-30 Todd C. Miller <Todd.Miller@courtesan.com>
5637:
5638: * plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
5639: plugins/sudoers/bsm_audit.c, plugins/sudoers/bsm_audit.h,
5640: src/audit.c, src/bsm_audit.c, src/bsm_audit.h:
5641: Move audit sources into the sudoers plugin dir; the driver does not
5642: use them.
5643: [50ec36422cd0]
5644:
5645: * compat/getline.c, compat/mksiglist.c, compat/nanosleep.c,
5646: compat/strdup.c, compat/strndup.c, plugins/sample/sample_plugin.c,
5647: plugins/sudoers/boottime.c, plugins/sudoers/getdate.c,
5648: plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c,
5649: plugins/sudoers/timestr.c, plugins/sudoers/vasgroups.c, src/alloc.c,
5650: src/atobool.c, src/audit.c, src/lbuf.c, src/list.c, src/sesh.c,
5651: src/term.c, src/ttysize.c:
5652: Use angle brackets when including headers that can only be found
5653: when an -I flag is specified. The files in the compat dir could get
5654: away with double quotes here but I've converted all the source files
5655: to use angle brackets for consistency.
5656: [9e30a8fc6d4b]
5657:
5658: * plugins/sudoers/Makefile.in:
5659: Add missing -I$(top_srcdir) to CPPFLAGS so includes in the compat
5660: dir can be found when building outside the source tree.
5661: [1150934b79dd]
5662:
5663: * plugins/sudoers/Makefile.in:
5664: Clean up links in distclean
5665: [78595028be8b]
5666:
5667: * plugins/sudoers/Makefile.in:
5668: Hack around VPATH semantic differences by symlinking files we need
5669: from ../../src into the current directory and build those. A better
5670: fix would be to either make a .a or .la file with those files in it
5671: or simply use a single, flat, Makefile instead of per-subdirs
5672: Makefiles.
5673: [892c332d3f05]
5674:
5675: * plugins/sudoers/Makefile.in, src/Makefile.in, src/fmt_string.c:
5676: fmt_string is used by the sudoers plugin too so do not include
5677: sudo.h (which is not really needed here anyway)
5678: [231c35e3941f]
5679:
5680: * compat/Makefile.in, plugins/sample/Makefile.in,
5681: plugins/sudoers/Makefile.in, src/Makefile.in:
5682: Fix building with non-BSD versions of make such as GNU make.
5683: Requires VPATH support, which should be in any non-neolithic make.
5684: [dc174f135919]
5685:
5686: * configure, configure.in, plugins/sudoers/Makefile.in,
5687: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c,
5688: src/Makefile.in:
5689: Re-enable bsm audit. Currently auditing is done within the sudoers
5690: plugin itself. If possible, this should really be done in the main
5691: driver but we don't presently have the needed data to do that. This
5692: will be re-evaluated when Linux audit support is added.
5693: [1d05a3236bfe]
5694:
5695: * compat/Makefile.in, plugins/sample/Makefile.in,
5696: plugins/sudoers/Makefile.in, src/Makefile.in:
5697: Remove extraneous $srcdir and use more .c.lo and .c.o rules instead
5698: of explicit rules in the dependency.
5699: [88f80efd25f0]
5700:
5701: * plugins/sudoers/visudo.c:
5702: Fix mismerge; alias_remove_recursive() now returns int
5703: [6257a4849641]
5704:
5705: 2010-04-29 Todd C. Miller <Todd.Miller@courtesan.com>
5706:
5707: * plugins/sudoers/visudo.c:
5708: Fix a crash when checking a sudoers file that has aliases that
5709: reference themselves. Based on a diff from David Wood.
5710: [545d194484a7]
5711:
5712: * src/script.c:
5713: Print signal info after restoring the tty mode, not before.
5714: [a68618e67435]
5715:
5716: * src/script.c:
5717: Defer call to alarm() until after we fork the child. Pass correct
5718: pid to terminate_child() If the command exits due to signal, set
5719: alive to false like we do when it exits normally. Add missing
5720: check for errpipe[0] != -1 before using it in FD_ISSET
5721: [22f0a1549391]
5722:
5723: 2010-04-28 Todd C. Miller <Todd.Miller@courtesan.com>
5724:
5725: * plugins/sudoers/boottime.c:
5726: Use 1/0 instead of TRUE/FALSE so we don't need sudoers.h
5727: [0e627170c6e8]
5728:
5729: 2010-04-27 Todd C. Miller <Todd.Miller@courtesan.com>
5730:
5731: * src/Makefile.in:
5732: Simplify dependencies by using .c.o and .c.lo rules.
5733: [6abcaef5d1ac]
5734:
5735: * configure, configure.in, plugins/sudoers/Makefile.in,
5736: src/Makefile.in:
5737: Substitute in @PROGS@ into src/Makefile to add sesh
5738: [cc46d3b6208f]
5739:
5740: 2010-04-26 Todd C. Miller <Todd.Miller@courtesan.com>
5741:
5742: * plugins/sudoers/sudoers.c:
5743: Add back calls to log_denial() if sudoers does not allow the
5744: command.
5745: [9783316207f0]
5746:
5747: * plugins/sudoers/sudoers.c:
5748: Pass in correct pwflag for list and validate.
5749: [973dd56d4b81]
5750:
5751: * plugins/sudoers/env.c:
5752: Add missing check for NULL in validate_env_vars
5753: [1d6eb6957824]
5754:
5755: * src/Makefile.in:
5756: Add sudo_noexec.la to "all" target, otherwise it only gets built at
5757: install time.
5758: [644a9694d2ef]
5759:
5760: * plugins/sudoers/sudoers.c:
5761: Only set sudo_user.env_vars if the env_add list is empty.
5762: [fccdf6f0e0e2]
5763:
5764: * plugins/sudoers/sudoers.c:
5765: Set sudo_user.env_vars so that environment variables specified on
5766: the command line get logged correctly.
5767: [9b51012c491e]
5768:
5769: * plugins/sudoers/env.c, plugins/sudoers/logging.c,
5770: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
5771: Re-enable environment files and setting environment variables on the
5772: command line.
5773: [5662d5645dbd]
5774:
5775: 2010-04-24 Todd C. Miller <Todd.Miller@courtesan.com>
5776:
5777: * plugins/sudoers/check.c:
5778: Fix typo in last commit (ifndef vs ifdef) Make sure we pass ctime()
5779: a pointer to time_t as tv_sec in struct timeval may be long.
5780: [4de0c46e788e]
5781:
5782: * plugins/sudoers/check.c:
5783: Don't stash ctime in on-disk tty ticket info for now; on many
5784: (most?) systems the ctime is updated when the tty is written to.
5785: Once I have a better idea of what systems do not update ctime on
5786: ttys (and have a way to test for this) the ctime stash will be
5787: conditionally re-enabled.
5788: [a90eeec0f648]
5789:
5790: 2010-04-23 Todd C. Miller <Todd.Miller@courtesan.com>
5791:
5792: * MANIFEST, Makefile.in:
5793: Add back "dist" target, this time using a MANIFEST file
5794: [29277c05499f]
5795:
5796: * Makefile.in:
5797: Remove Makefile in distclean target
5798: [83d695f4f450]
5799:
5800: * Makefile.in, src/Makefile.in:
5801: Update clean and cleandir targets
5802: [ad7b2afeb9c1]
5803:
5804: * include/fileops.h, plugins/sudoers/sudoers.h, src/fileops.c,
5805: src/sudo.h:
5806: Move fileops.c defines and prototypes to filesops.h
5807: [4545e9b6892d]
5808:
5809: * plugins/sudoers/check.c:
5810: Lock the tty timestamp when writing. We shouldn't have to lock when
5811: reading since the file is updated via a single write system call.
5812: [0c7276f02696]
5813:
5814: 2010-04-22 Todd C. Miller <Todd.Miller@courtesan.com>
5815:
5816: * plugins/sudoers/alias.c, plugins/sudoers/check.c,
5817: plugins/sudoers/defaults.c, plugins/sudoers/find_path.c,
5818: plugins/sudoers/getspwuid.c, plugins/sudoers/gettime.c,
5819: plugins/sudoers/goodpath.c, plugins/sudoers/interfaces.c,
5820: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
5821: plugins/sudoers/logging.c, plugins/sudoers/match.c,
5822: plugins/sudoers/nonunix.h, plugins/sudoers/parse.c,
5823: plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
5824: plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
5825: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
5826: plugins/sudoers/timestr.c, plugins/sudoers/tsgetgrpw.c,
5827: plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c:
5828: Convert to ANSI C function declarations
5829: [9c45def57cf7]
5830:
5831: * plugins/sudoers/sudoers.h:
5832: Remove extraneous bits and classify by source file.
5833: [e8ea9f109ebb]
5834:
5835: * include/compat.h:
5836: Add timercmp macro for systems without it
5837: [d3bf87b1d08e]
5838:
5839: * plugins/sudoers/boottime.c, plugins/sudoers/check.c,
5840: plugins/sudoers/sudoers.h:
5841: get_boottime() now fills in a timeval struct
5842: [3573c3f44e11]
5843:
5844: * plugins/sudoers/check.c:
5845: Store info from stat(2)ing the tty in the tty ticket when tty
5846: tickets are in use. On most systems, this closes the loophole
5847: whereby a user can log out of a tty, log back in and still have the
5848: timestamp be valid.
5849: [53380f9f5242]
5850:
5851: * config.h.in, configure.in:
5852: Add timespec2timeval and use it when getting ctime/mtime
5853: [4cb7f7caec2c]
5854:
5855: 2010-04-20 Todd C. Miller <Todd.Miller@courtesan.com>
5856:
5857: * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/set_perms.c,
5858: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
5859: plugins/sudoers/testsudoers.c:
5860: Convert perm setting to push/pop model; still needs some work Use
5861: the stashed runas groups instead of using getgrouplist() Reset perms
5862: to the initial value on error
5863: [09c072ebde8b]
5864:
5865: * config.h.in, configure.in:
5866: fix ctim_get and mtim_get macros
5867: [58773dc1e360]
5868:
5869: * config.h.in, configure, configure.in, include/compat.h,
5870: plugins/sudoers/check.c, plugins/sudoers/gettime.c,
5871: plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/fileops.c:
5872: Use timeval directly instead of converting to timespec when dealing
5873: with file times and time of day.
5874: [a0ce1ae00a67]
5875:
5876: * plugins/sudoers/Makefile.in:
5877: Don't like sudoreplay with libsudoers.la due to a yacc symbol
5878: conflict.
5879: [f1a59cc63a15]
5880:
5881: 2010-04-18 Todd C. Miller <Todd.Miller@courtesan.com>
5882:
5883: * configure, configure.in:
5884: Darwin >= 9.x has real setreuid(2)
5885: [7ec942a64275]
5886:
5887: 2010-04-17 Todd C. Miller <Todd.Miller@courtesan.com>
5888:
5889: * plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
5890: Ansify env.c
5891: [f58551bad10a]
5892:
5893: * plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
5894: plugins/sudoers/sudoers.h:
5895: Remove remaining references to the environ pointer.
5896: [96faa530816a]
5897:
5898: 2010-04-16 Todd C. Miller <Todd.Miller@courtesan.com>
5899:
5900: * config.h.in, configure, configure.in, plugins/sudoers/env.c:
5901: Don't change the environ directly in the sudoers plugin
5902: [6db48ed3f7e0]
5903:
5904: 2010-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
5905:
5906: * plugins/sudoers/sudoers.c:
5907: Fix typo
5908: [4aa452b07f8f]
5909:
5910: * plugins/sudoers/alias.c:
5911: Fix use after free in error message when a duplicate alias exists.
5912: [ce1d2812ee34]
5913:
5914: 2010-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
5915:
5916: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
5917: src/parse_args.c:
5918: Add a "noninteractive" boolean to the settings passed in to the
5919: plugin's open function that is set when the user specifies the -n
5920: flag.
5921: [68f8d9d6d4d0]
5922:
5923: * config.h.in, configure, configure.in, plugins/sudoers/env.c:
5924: Add workaround for the lack of the environ pointer on Mac OS X in
5925: dlopen()ed modules. Use of environ in the sudoers plugin should
5926: ultimately be removed but this will do for the moment.
5927: [80c61647434f]
5928:
5929: * plugins/sudoers/visudo.c:
5930: Set errorfile to the sudoers path if we set parse_error manually.
5931: This prevents a NULL dereference in printf() when checking a sudoers
5932: file in strict mode when alias errors are present.
5933: [45e249ca99f7]
5934:
5935: * plugins/sudoers/sudoers.c:
5936: Main sudo no longer print "unable to execute" on exec failure so do
5937: it here.
5938: [50aaf62b43b5]
5939:
5940: 2010-04-13 Todd C. Miller <Todd.Miller@courtesan.com>
5941:
5942: * src/script.c:
5943: Use a pipe to pass back errno to the parent if execve() fails. If we
5944: get an error in script_child(), kill the command and exit.
5945: [dc3bf870f91b]
5946:
5947: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
5948: src/parse_args.c, src/sudo.c:
5949: Handle plugin's open function returning -2 (usage error).
5950: [aadf900c1de8]
5951:
5952: * src/script.c:
5953: If execve() fails, leave it to the plugin to print an error string.
5954: [e25748f2d5b9]
5955:
5956: * src/script.c:
5957: If execve fails in logging mode, pass the errno directly to the
5958: grandparent on the backchannel and exit. The immediate parent will
5959: get SIGCHLD and try to report that status but its parent will no
5960: longer be listening. It would probably be cleaner to pass this over
5961: a pipe in script_child().
5962: [cb122acc81a8]
5963:
5964: * plugins/sudoers/sudoers.c:
5965: Don't override rval with results of check_user() unless it failed.
5966: [46fb7e87ac7d]
5967:
5968: 2010-04-12 Todd C. Miller <Todd.Miller@courtesan.com>
5969:
5970: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
5971: Fix typo
5972: [ccd0b693f3da]
5973:
5974: * src/parse_args.c:
5975: NULL-terminate env_add
5976: [2c534368a0c3]
5977:
5978: 2010-04-11 Todd C. Miller <Todd.Miller@courtesan.com>
5979:
5980: * src/sudo.c:
5981: Call the I/O log open function before the I/O version function.
5982: [e88bf898990b]
5983:
5984: * plugins/sudoers/iolog.c:
5985: Remove io_conv and just use sudo_conv
5986: [a280052468eb]
5987:
5988: * plugins/sudoers/set_perms.c:
5989: Fix set/restore perms for systems w/o setresuid
5990: [4160517f6666]
5991:
5992: 2010-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
5993:
5994: * plugins/sudoers/check.c, plugins/sudoers/logging.c,
5995: plugins/sudoers/parse.c, plugins/sudoers/set_perms.c,
5996: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
5997: Primitive set/restore permissions. Will be replaced by a push/pop
5998: model.
5999: [aae102290866]
6000:
6001: * src/script.c:
6002: Only need to take action on SIGCHLD in parent if no I/O logger. If
6003: there is an I/O logger we will receive ECONNRESET or EPIPE when we
6004: try to read from the socketpair.
6005: [e1e4560401f6]
6006:
6007: 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
6008:
6009: * compat/memrchr.c, doc/sudoers.cat, doc/sudoers.man.in,
6010: doc/sudoers.pod, plugins/sudoers/find_path.c:
6011: Merge fb4d571495fa from the 1.7 branch to trunk.
6012: [c8fb424ad4d2]
6013:
6014: 2010-04-08 Todd C. Miller <Todd.Miller@courtesan.com>
6015:
6016: * src/script.c:
6017: Don't set SA_RESTART when registering SIGALRM handler. Do set
6018: SA_RESTART when registering SIGWINCH handler.
6019: [173472b76525]
6020:
6021: * doc/Makefile.in:
6022: Add dev targets for *.man.in and *.cat that don't specfify the
6023: $(srcdir) prefix.
6024: [b62f425da2e4]
6025:
6026: * src/script.c:
6027: If log_input or log_output returns false, terminate the command.
6028: [074f4c0c34a0]
6029:
6030: * src/script.c:
6031: Better signal handling. Instead of using a single variable to store
6032: the received signal, use an array so we can't lose a signal when
6033: multiple are sent. Fix process termination by SIGALRM in non-I/O
6034: logger mode. Fix relaying terminal signals to the child in non-I/O
6035: logger mode.
6036: [7a4723aca99d]
6037:
6038: * src/script.c:
6039: Fix a race between when we get the child pid in the parent and when
6040: the child process exits. The problem exhibited as a hang after a
6041: short-lived process, e.g. "sudo id" when no IO logger was enabled.
6042: [80bcc0aca70b]
6043:
6044: 2010-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
6045:
6046: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
6047: Add a note about the security implications of the fast_glob option.
6048: [c37a92ab7c93]
6049:
6050: 2010-04-06 Todd C. Miller <Todd.Miller@courtesan.com>
6051:
6052: * config.h.in, configure, configure.in:
6053: Fix up some AC_DEFINE descriptions and regen config.h.in
6054: [f4655adc0db3]
6055:
6056: 2010-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
6057:
6058: * include/missing.h:
6059: No longer check for strdup or strndup for LIBOBJ replacement.
6060: [fdc764ee8109]
6061:
6062: * src/script.c:
6063: Avoid installing signal handlers that are io-logger specific. Fixes
6064: job control when no io logger is enabled.
6065: [0853dd0906d4]
6066:
6067: * doc/Makefile.in:
6068: Only regen man pages from pod when configured with --with-devel
6069: [ab1995f8103d]
6070:
6071: 2010-04-04 Todd C. Miller <Todd.Miller@courtesan.com>
6072:
6073: * Makefile, Makefile.in, configure, configure.in:
6074: Top-level Makefile.in. Nothing is currently substituted but this is
6075: needed for separate build dirs.
6076: [e80873cbd201]
6077:
6078: * compat/Makefile.in, doc/Makefile.in, plugins/sample/Makefile.in,
6079: plugins/sudoers/Makefile.in, src/Makefile.in:
6080: Fix out-of-tree builds
6081: [59a35bef07b8]
6082:
6083: * Merge
6084: [386b848047e9]
6085:
6086: * doc/Makefile.in:
6087: We always install sudoreplay in 1.8
6088: [ce52ba6617c9]
6089:
6090: 2010-04-03 Todd C. Miller <Todd.Miller@courtesan.com>
6091:
6092: * compat/siglist.in:
6093: SIGPOLL is sometimes the same as SIGIO (like on HP-UX)
6094: [6d69e1b05faf]
6095:
6096: 2010-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
6097:
6098: * configure, configure.in:
6099: No need to provide strdup() or strndup(), sudo uses estrdup() and
6100: estrndup()
6101: [57ec23b72958]
6102:
6103: 2010-04-04 Todd C. Miller <Todd.Miller@courtesan.com>
6104:
6105: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
6106: Free str after using it in the version method. Use sudo_conv, not
6107: io_conv since we don't have the IO conversation function pointer in
6108: the I/O version method anymore now that io_open is delayed.
6109: [f2ed132adeb0]
6110:
6111: 2010-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
6112:
6113: * compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h,
6114: compat/siglist.in:
6115: Add license to mksiglist.c and note that the bits from pdksh are
6116: public domain
6117: [d8121a2467e8]
6118:
6119: * compat/Makefile.in:
6120: Fix LIBOBJDIR vs. srcdir wrt the siglist bits
6121: [164160148421]
6122:
6123: * plugins/sudoers/Makefile.in:
6124: Add sudoreplay testsudoers and visudo to clean target
6125: [138a17e51c0c]
6126:
6127: * compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h,
6128: compat/siglist.in, compat/strsignal.c, configure, configure.in,
6129: include/missing.h, src/script.c:
6130: Create our own sys_siglist for systems without it for use by
6131: strsignal()
6132: [2e5da011ebc3]
6133:
6134: * compat/Makefile.in:
6135: Remove duplicate $(LIBOBJDIR)
6136: [adf9abc9432f]
6137:
6138: 2010-04-01 Todd C. Miller <Todd.Miller@courtesan.com>
6139:
6140: * plugins/sudoers/sudoers.c, src/sudo.c, src/sudo_edit.c:
6141: Main sudo should not block signals; the plugin should do this in
6142: check_policy.
6143: [3f3736a7c5ed]
6144:
6145: 2010-03-31 Todd C. Miller <Todd.Miller@courtesan.com>
6146:
6147: * src/script.c:
6148: Fix a sizeof(ptr) vs. sizeof(*ptr)
6149: [aa1bcf5afcce]
6150:
6151: * src/script.c:
6152: Unlike most operating systems, HP-UX select() is not interrupted by
6153: SIGCHLD when the signal is registered with SA_RESTART. If we clear
6154: SA_RESTART when calling sigaction() for SIGCHLD we get the expected
6155: behavior and the code in the select() loops already handles EINTR
6156: correctly.
6157: [9eba0115e35a]
6158:
6159: * compat/getprogname.c:
6160: progname should be const
6161: [130228f062b7]
6162:
6163: * plugins/sudoers/Makefile.in:
6164: Move --tag=disable-static to when we link sudoers.la, not when we
6165: install.
6166: [ceb5e6c3b78b]
6167:
6168: * src/load_plugins.c:
6169: Load the sudoers I/O plugin by default too now that it is hooked up.
6170: [ea38befd0742]
6171:
6172: 2010-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
6173:
6174: * src/pty.c:
6175: It looks like AIX doesn't need to push STREAMS modules for ptys.
6176: [22da618ba0a1]
6177:
6178: 2010-03-28 Todd C. Miller <Todd.Miller@courtesan.com>
6179:
6180: * src/parse_args.c, src/sudo.c:
6181: Delay calling the I/O plugin open function until the policy plugin
6182: returns success.
6183: [f3297c325b48]
6184:
6185: 2010-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
6186:
6187: * plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
6188: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
6189: plugins/sudoers/sudoers.h:
6190: Add back io logging (transcript) support. Currently, the open
6191: function runs too early and it is not possible to use the io module
6192: independently of the policy module.
6193: [9bd932f66226]
6194:
6195: * plugins/sudoers/set_perms.c:
6196: Comment out dead code; will be removed when set_perms is rewritten.
6197: [af7a995284f8]
6198:
6199: 2010-03-23 Todd C. Miller <Todd.Miller@courtesan.com>
6200:
6201: * plugins/sudoers/sudoers.c:
6202: Fix off by one error when allocating user_groups.
6203: [6281fcf9c3bb]
6204:
6205: 2010-03-22 Todd C. Miller <Todd.Miller@courtesan.com>
6206:
6207: * configure, configure.in, plugins/sudoers/Makefile.in:
6208: Add REPLAY_LIBS for sudoreplay and add -lrt to it on Solaris.
6209: [fbce3e9eda3a]
6210:
6211: * plugins/sudoers/sudoers.c:
6212: Fix typo in preserve groups case
6213: [1fd72024fb5a]
6214:
6215: * plugins/sudoers/sudoers.c:
6216: In command_info it is "runas_groups" not "groups".
6217: [5c64dce4f285]
6218:
6219: * src/sudo.c:
6220: Fix iteration over runas_groups list.
6221: [b3c45a0cd643]
6222:
6223: * configure, configure.in, plugins/sudoers/env.c,
6224: plugins/sudoers/match.c, src/script.c:
6225: Merge 5177a284b9ff 549f8f7c2463 88f3181692fe from 1.7 branch.
6226: [a8108a0776c2]
6227:
6228: * compat/getgrouplist.c:
6229: getgrouplist(3) for those without it
6230: [4ab4d21e3b16]
6231:
6232: * plugins/sudoers/sudoers.c:
6233: Set preserve_groups or groups list in command_info
6234: [1266119ad654]
6235:
6236: * src/sudo.c:
6237: Fix setting of groups list
6238: [e75315e40bd4]
6239:
6240: * config.h.in, configure, configure.in, include/compat.h,
6241: include/missing.h:
6242: Add checks for getgrset and getgrouplist and use replacement
6243: getgrouplist if the system doesn't support it.
6244: [a62b8ba50863]
6245:
6246: * src/parse_args.c:
6247: Pass in preserve_groups when the -P flag is specified as per the
6248: design
6249: [7420c5d15474]
6250:
6251: * plugins/sudoers/sudoers.c:
6252: Check preserve_groups and ignore_ticket args with atobool instead of
6253: assuming they are true if present.
6254: [71c905702697]
6255:
6256: 2010-03-21 Todd C. Miller <Todd.Miller@courtesan.com>
6257:
6258: * plugins/sudoers/Makefile.in, plugins/sudoers/error.c,
6259: plugins/sudoers/plugin_error.c:
6260: Rename plugin-specific error.c to plugin_error.c Wire up visudo,
6261: sudoreplay and testsudoers in the build
6262: [9d581d5fa4d4]
6263:
6264: * src/Makefile.in, src/term.c:
6265: term.c does not needto include sudo.h
6266: [f6683cdcd2dd]
6267:
6268: * TODO, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
6269: doc/sudo_plugin.pod:
6270: Document the -2 return in the check_policy section too
6271: [e9cb4c34bbcf]
6272:
6273: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
6274: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
6275: src/parse_args.c, src/sudo.c, src/sudo.h:
6276: Fix the -s and -i flags and add support for the "implied_shell"
6277: option. If the user does not specify a command, sudo will now pass
6278: in the path to the user's shell and set impied_shell=true. The
6279: plugin can them either check the command normally or return -2 to
6280: cause sudo to print a usage message and exit.
6281: [bf889c38f229]
6282:
6283: 2010-03-19 Todd C. Miller <Todd.Miller@courtesan.com>
6284:
6285: * config.h.in, configure, configure.in, src/load_plugins.c:
6286: Bring back SUDOERS_PLUGIN but add .dylib -> .so conversion for
6287: Darwin where libraries end in .dylib but modules end in .so
6288: [2c56aaa38e21]
6289:
6290: * plugins/sudoers/parse.c:
6291: Better prefix determination now that we can't rely on len==0 to tell
6292: the beginning on an entry.
6293: [622bf18179e9]
6294:
6295: * plugins/sudoers/ldap.c:
6296: display_bound_defaults() stub should return 0, not 1 since it is a
6297: count, not a boolean.
6298: [0327a6c3d55d]
6299:
6300: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
6301: Document progname in settings
6302: [42031d56a2e3]
6303:
6304: * compat/getprogname.c, include/compat.h,
6305: plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c,
6306: src/parse_args.c, src/sudo.c:
6307: Rewrite compat/getprogname.c and add setprogname(). The progname is
6308: now passed to the plugin via the settings array.
6309: [25d8663e6006]
6310:
6311: * configure, configure.in, plugins/sudoers/Makefile.in:
6312: Fix --with-ldap
6313: [b64b633f426d]
6314:
6315: * plugins/sudoers/sudo_nss.c:
6316: Add missing whitespace for Runas and Command-specific defaults
6317: [65f4ddf5545e]
6318:
6319: * plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
6320: plugins/sudoers/sudo_nss.c:
6321: Use embedded newlines in lbuf instead of multiple calls to
6322: lbuf_print.
6323: [eed3af9cc3e1]
6324:
6325: * src/lbuf.c:
6326: Add support for embedded newlines.
6327: [e11f79b18deb]
6328:
6329: 2010-03-18 Todd C. Miller <Todd.Miller@courtesan.com>
6330:
6331: * compat/getprogname.c:
6332: If system doesn't support getprogname or __programe and we are
6333: building a shared object don't bother with Argc/Argv, just return
6334: "sudo"
6335: [aebde9062be7]
6336:
6337: * config.h.in, configure, configure.in, src/load_plugins.c:
6338: Hard-code sudoers.so instead of using SUDOERS_PLUGIN since libtool
6339: appears to always install a shared object with the .so suffix.
6340: [f9bbd0c0e9d3]
6341:
6342: * compat/Makefile.in, configure, configure.in,
6343: plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
6344: src/Makefile.in:
6345: Play more nicely with libtool and let it build libreplace (was
6346: libmissing) for us.
6347: [a4c6ebb2495c]
6348:
6349: * include/missing.h:
6350: Include stdarg.h for va_list rather than requiring all consumers of
6351: missing.h to include stdarg.h themselves.
6352: [37382df948de]
6353:
6354: * include/lbuf.h, plugins/sudoers/auth/sudo_auth.c,
6355: plugins/sudoers/check.c, plugins/sudoers/sudo_nss.c,
6356: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c,
6357: src/parse_args.c:
6358: Pass in output function to lbuf_init() instead of writing to stdout.
6359: A side effect is that the usage info can now go to stderr as it
6360: should.
6361: [6d261261a072]
6362:
6363: 2010-03-17 Todd C. Miller <Todd.Miller@courtesan.com>
6364:
6365: * include/lbuf.h, plugins/sudoers/sudo_nss.c,
6366: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c,
6367: src/parse_args.c, src/sudo.c:
6368: Use number of tty columns that is passed in user_info instead of
6369: getting it directly in the lbuf code.
6370: [8a16635c2638]
6371:
6372: * plugins/sudoers/alias.c, plugins/sudoers/auth/dce.c,
6373: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
6374: plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.h,
6375: plugins/sudoers/check.c, plugins/sudoers/defaults.c,
6376: plugins/sudoers/defaults.h, plugins/sudoers/env.c,
6377: plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
6378: plugins/sudoers/gram.c, plugins/sudoers/gram.y,
6379: plugins/sudoers/interfaces.h, plugins/sudoers/logging.c,
6380: plugins/sudoers/logging.h, plugins/sudoers/match.c,
6381: plugins/sudoers/mon_systrace.h, plugins/sudoers/parse.c,
6382: plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
6383: plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
6384: plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.h,
6385: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
6386: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
6387: plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
6388: plugins/sudoers/toke.l, plugins/sudoers/tsgetgrpw.c,
6389: plugins/sudoers/visudo.c:
6390: Kill __P in sudoers
6391: [63601e6cb171]
6392:
6393: * config.h.in, configure, configure.in, src/load_plugins.c:
6394: Set the sudoers plugin name in configure so we get the extension
6395: right.
6396: [edad89924cd1]
6397:
6398: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
6399: Document lines/cols in user_info
6400: [a808872394f3]
6401:
6402: * src/Makefile.in, src/sudo.c, src/sudo.h, src/ttysize.c:
6403: Add tty size to user info
6404: [23f3d27e77a7]
6405:
6406: * src/script.c:
6407: Use TIOCGSIZE/TIOCSSIZE instead of TIOCGWINSZ/TIOCSWINSZ
6408: [a2208dd09051]
6409:
6410: 2010-03-16 Todd C. Miller <Todd.Miller@courtesan.com>
6411:
6412: * plugins/sudoers/sudoers.c:
6413: Kill dead code Add missing sigsetjmp in sudo_policy_invalidate Error
6414: out if we fail to lookup the user's name that is passed in
6415: [e4e3728ed482]
6416:
6417: * plugins/sudoers/error.c:
6418: Pass the error value back via siglongjmp.
6419: [667b8ad575ce]
6420:
6421: * plugins/sudoers/check.c:
6422: Use conversation function for lecture.
6423: [1ab4719f509b]
6424:
6425: * plugins/sudoers/check.c:
6426: Don't update ticket file if verify_user returns FALSE.
6427: [2bbc46a39a2b]
6428:
6429: 2010-03-15 Todd C. Miller <Todd.Miller@courtesan.com>
6430:
6431: * plugins/sudoers/sudoers.c, src/sudo.c:
6432: Wire up invalidate and validate methods for sudoers
6433: [c0630c7bca47]
6434:
6435: * plugins/sudoers/check.c, plugins/sudoers/sudoers.c,
6436: plugins/sudoers/sudoers.h:
6437: Add support for -k flag with a command.
6438: [edad239b098b]
6439:
6440: * src/parse_args.c:
6441: Allow -k to be specified with a command.
6442: [43a45add9974]
6443:
6444: * plugins/sudoers/sudoers.c:
6445: Wire up policy_list
6446: [27cc35699eca]
6447:
6448: * plugins/sudoers/error.c:
6449: Add newline at the end of message and space after the colon in
6450: warning message
6451: [5a591aa8e744]
6452:
6453: * plugins/sudoers/auth/sudo_auth.c:
6454: Add missing newline after pass password warning
6455: [337dba3870a7]
6456:
6457: * plugins/sudoers/sudoers.c:
6458: Set user_groups and user_ngroups based on user_info
6459: [61bee85128c8]
6460:
6461: * plugins/sudoers/error.c:
6462: Make this compile
6463: [7041c441e1c8]
6464:
6465: * plugins/sudoers/error.c, plugins/sudoers/sudoers.c:
6466: Make _warning in error.c use the conversation function and remove
6467: commented out warning/warningx in sudoers.c.
6468: [7c9b09024b63]
6469:
6470: * plugins/sudoers/logging.c:
6471: Use siglongjmp() in log_error for fatal errors
6472: [b50e26f1c73f]
6473:
6474: * plugins/sample/Makefile.in, plugins/sudoers/Makefile.in:
6475: Quiet a libtool warning
6476: [b2331fb006bc]
6477:
6478: * Makefile:
6479: Build sudoers plugin
6480: [5cdf06e66978]
6481:
6482: * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
6483: Use warningx in yyerror() so the conversation function gets used
6484: when built as part of sudoers.
6485: [85f964215eef]
6486:
6487: 2010-03-14 Todd C. Miller <Todd.Miller@courtesan.com>
6488:
6489: * plugins/sudoers/auth/pam.c:
6490: Rename sudo_conv to conversation to avoid a namespace conflict.
6491: [1ad359d36be9]
6492:
6493: * plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
6494: plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
6495: plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
6496: plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
6497: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
6498: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
6499: plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
6500: plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
6501: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
6502: plugins/sudoers/check.c, plugins/sudoers/defaults.c,
6503: plugins/sudoers/env.c, plugins/sudoers/error.c,
6504: plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
6505: plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
6506: plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
6507: plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
6508: plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c,
6509: plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
6510: plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
6511: plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
6512: plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
6513: plugins/sudoers/toke.c, plugins/sudoers/tsgetgrpw.c,
6514: plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c:
6515: Initial bits of sudoers plugin; still needs work.
6516: [af2a2c59a952]
6517:
6518: * config.h.in:
6519: Add HAVE_STRDUP and HAVE_STRNDUP
6520: [50a3c0dd510f]
6521:
6522: * compat/Makefile.in, configure, configure.in:
6523: Build libmissing in two flavors (one PIC one non-PIC) and link with
6524: the appropriate one.
6525: [b62f411a4c18]
6526:
6527: * Makefile, compat/fnmatch.c, compat/glob.c, compat/nanosleep.c,
6528: compat/utimes.c, plugins/sample/Makefile.in, src/Makefile.in:
6529: Build libmissing in two flavors (one PIC one non-PIC) and link with
6530: the appropriate one.
6531: [e1e04972b5fe]
6532:
6533: 2010-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
6534:
6535: * include/missing.h:
6536: Add strdup and strndup and fix strsignal
6537: [c159babe2896]
6538:
6539: 2010-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
6540:
6541: * compat/strdup.c, compat/strndup.c, configure, configure.in,
6542: plugins/sample/Makefile.in, src/Makefile.in:
6543: Add strdup and strndup to compat
6544: [25c9fd399a4d]
6545:
6546: * plugins/sample/sample_plugin.c:
6547: Need to include compat.h before missing.h
6548: [c94f7aad380f]
6549:
6550: * compat/strsignal.c:
6551: Must check HAVE_DECL_SYS_SIGLIST == 1 (not just if defined) since if
6552: it doesn't exist configure will set it to 0.
6553: [384580566389]
6554:
6555: * compat/glob.c:
6556: Fix botched ANSI C coversion of globexp2()
6557: [4a344b8cbe49]
6558:
6559: * configure, configure.in:
6560: Remove redundant getgroups check
6561: [0b16ec210c81]
6562:
6563: * configure, configure.in, src/lbuf.c, src/script.c, src/term.c:
6564: Require either termios or termio, no more sgtty.
6565: [9b2fa2f17a1c]
6566:
6567: * compat/strsignal.c, config.h.in, configure, configure.in:
6568: Change the sys_siglist check to use AC_CHECK_DECLS and also check
6569: for _sys_siglist and__sys_siglist
6570: [2e078fed2408]
6571:
6572: 2010-03-11 Todd C. Miller <Todd.Miller@courtesan.com>
6573:
6574: * configure, configure.in, src/Makefile.in:
6575: Change SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS. We now
6576: use SUDO_OBJS for the main driver as part of OBJS.
6577: [9ae4a80a5ade]
6578:
6579: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
6580: Mention in the conversation function section that a newline is not
6581: implicit.
6582: [04a233b6c491]
6583:
6584: * include/compat.h:
6585: Add definition of WCOREDUMP for systems without it. This is known
6586: to work on AIX and SunOS 4, but may be incorrect on other systems
6587: that lack WCOREDUMP.
6588: [c85b3ce6b77d]
6589:
6590: 2010-03-09 Todd C. Miller <Todd.Miller@courtesan.com>
6591:
6592: * plugins/sample/sample_plugin.c, src/conversation.c:
6593: conversation function no longer puts a newline at the end of info or
6594: error messages.
6595: [c534cae1ac4a]
6596:
6597: 2010-03-07 Todd C. Miller <Todd.Miller@courtesan.com>
6598:
6599: * src/script.c:
6600: Use parent process group id instead of parent process id when
6601: checking foreground status and suspending parent. Fixes an issue
6602: when running commands under /usr/bin/time and others.
6603: [564f528c3bb7]
6604:
6605: 2010-03-06 Todd C. Miller <Todd.Miller@courtesan.com>
6606:
6607: * aclocal.m4:
6608: transcript option is now --with not --enable
6609: [0646fac4cf93]
6610:
6611: * plugins/sample/sample_plugin.c:
6612: Add support to -u and -g flags Check fmt_string retval Add timeout
6613: for debugging purposes
6614: [cfefa4fa60b5]
6615:
6616: * src/script.c, src/sudo.c:
6617: Wire up SIGALRM handler Set close on exec flag for child side of the
6618: socketpair Fix signal handling when not doing I/O logging
6619: [379581ec7272]
6620:
6621: * src/sudo.c:
6622: g/c unused SIGCHLD handler
6623: [0afa03912dce]
6624:
6625: * src/fmt_string.c, src/parse_args.c, src/sudo.c:
6626: Don't use emalloc() in fmt_string(); we want to be able to use it
6627: from a plugin.
6628: [ade64d368147]
6629:
6630: * include/list.h:
6631: tq_remove not list_remove
6632: [0e0e1fd5c31c]
6633:
6634: * configure, configure.in:
6635: AUTH_OBJS should contain .lo files not .o files.
6636: [c64c82c9d5a2]
6637:
6638: 2010-03-05 Todd C. Miller <Todd.Miller@courtesan.com>
6639:
6640: * src/parse_args.c:
6641: Simplify conversion of command line args to name=value pairs.
6642: [75ab127c6a94]
6643:
6644: * plugins/sample/sample_plugin.c:
6645: Handle NULL reply from conversation function
6646: [6ce09b6cb204]
6647:
6648: * compat/getline.c:
6649: Don't depend on emalloc/erealloc
6650: [73df09e2109f]
6651:
6652: * plugins/sample/Makefile.in:
6653: Use $(OBJS) instead of sample_plugin.lo
6654: [2d995db9aa99]
6655:
6656: * plugins/sample/sample_plugin.c:
6657: runas_user is in settings not user_info
6658: [7ee12068bc57]
6659:
6660: * src/parse_args.c:
6661: Fix a mismatch between sudo_settings and settings_pairs that causes
6662: some settings to get the wrong values.
6663: [b1bc6d81a65f]
6664:
6665: 2010-03-04 Todd C. Miller <Todd.Miller@courtesan.com>
6666:
6667: * src/Makefile.in, src/aix.c, src/alloc.c, src/atobool.c, src/error.c,
6668: src/fileops.c, src/lbuf.c, src/list.c, src/pty.c, src/sesh.c,
6669: src/sudo.c, src/sudo_edit.c, src/term.c, src/zero_bytes.c:
6670: Convert to ANSI C
6671: [d03b6e4a3b75]
6672:
6673: * src/load_plugins.c:
6674: Fix strlcpy() return value check.
6675: [7cd66999a374]
6676:
6677: * INSTALL, configure, configure.in:
6678: No longer need to substitute in script.o and pty.o; I/O logging
6679: support is always built.
6680: [45250024c5dc]
6681:
6682: 2010-02-28 Todd C. Miller <Todd.Miller@courtesan.com>
6683:
6684: * src/script.c:
6685: Add fallback to /bin/sh when execve() fails with ENOEXEC.
6686: [7684a15a1352]
6687:
6688: * include/alloc.h, src/alloc.c:
6689: Add estrndup()
6690: [47621c83bed9]
6691:
6692: 2010-02-27 Todd C. Miller <Todd.Miller@courtesan.com>
6693:
6694: * src/script.c, src/sudo.c:
6695: Refactor script_execve() a bit so that it can be used in non-script
6696: mode. Needs more cleanup.
6697: [f09e022d547c]
6698:
6699: * src/sudo.c:
6700: Ignore empty entries in command_info list
6701: [1eea9a8de21c]
6702:
6703: * include/list.h, src/list.c:
6704: Add tq_remove
6705: [40908a617cb2]
6706:
6707: * src/conversation.c:
6708: Pass timeout to tgetpass()
6709: [9e66c918b771]
6710:
6711: * Makefile:
6712: Add ChangeLog target
6713: [da4a39150838]
6714:
6715: * README, WHATSNEW:
6716: Bump version and update things slightly for sudo 1.8.0
6717: [4b73cc45e2d4]
6718:
6719: * configure, configure.in:
6720: Sudo now requires an ANSI/ISO C compiler
6721: [1e51f72e6964]
6722:
6723: * src/alloc.c, src/audit.c, src/error.c, src/lbuf.c,
6724: src/sudo_noexec.c:
6725: Convert to ANSI C
6726: [5cbd315dbde8]
6727:
6728: * include/alloc.h, include/compat.h, include/error.h, include/lbuf.h,
6729: include/list.h, include/missing.h:
6730: Convert to ANSI C
6731: [3f5016ff64f4]
6732:
6733: * compat/charclass.h, compat/closefrom.c, compat/fnmatch.c,
6734: compat/fnmatch.h, compat/getcwd.c, compat/getline.c,
6735: compat/getprogname.c, compat/glob.c, compat/glob.h,
6736: compat/isblank.c, compat/memrchr.c, compat/mkstemp.c,
6737: compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c,
6738: compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
6739: compat/strlcpy.c, compat/strsignal.c, compat/utime.h,
6740: compat/utimes.c:
6741: Convert to ANSI C
6742: [0d635c85461c]
6743:
6744: 2010-02-24 Todd C. Miller <Todd.Miller@courtesan.com>
6745:
6746: * src/sudo.c, src/tgetpass.c:
6747: Make user_details extern so tgetpass can get at the uid and gid. Set
6748: uid/gid to user before executing askpass program. Check environment
6749: for SUDO_ASKPASS and use that if set. TODO: a way for the policy to
6750: set the askpass program itself
6751: [d33606396176]
6752:
6753: * src/sudo.c:
6754: No longer need sudo_usage.h in sudo.c
6755: [063e2946c382]
6756:
6757: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.man.in,
6758: doc/sudo_plugin.pod, src/Makefile.in, src/parse_args.c,
6759: src/sudo_usage.h.in:
6760: Document -D level command line flag which maps to the debug_level
6761: setting.
6762: [61f1e2ab3ac1]
6763:
6764: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
6765: Document debug_level in plugin doc. Still need to document the -D
6766: flag in sudo itself.
6767: [8c62daea3e9b]
6768:
6769: 2010-02-21 Todd C. Miller <Todd.Miller@courtesan.com>
6770:
6771: * plugins/sample/sample_plugin.c:
6772: include missing,h for vasprintf
6773: [92503de49b39]
6774:
6775: * doc/Makefile.in, doc/plugin.pod, doc/sudo_plugin.cat,
6776: doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
6777: Rename plugin.pod -> sudo_plugin.pod and wire into Makefile
6778: [14cfb4775238]
6779:
6780: * plugins/sample/sample_plugin.c:
6781: Need to include limits.h
6782: [bda7f74343d2]
6783:
6784: * compat/glob.c:
6785: No more sudo_getpw*
6786: [232e52907634]
6787:
6788: * plugins/sample/Makefile.in, src/Makefile.in:
6789: Add missing compat bits
6790: [4843dd000e08]
6791:
6792: * compat/closefrom.c, compat/mkstemp.c, plugins/sample/Makefile.in:
6793: compat files should not include sudo.h wire up compat in sample
6794: plugin
6795: [a175b8185e0f]
6796:
6797: * Makefile, configure, configure.in, doc/Makefile.in, src/Makefile.in:
6798: Fix up compat dependencies. Fix distclean target in doc/Makefile.in
6799: [57e49bc20857]
6800:
6801: * configure, configure.in:
6802: Fix typo
6803: [333655e3d5fe]
6804:
6805: * plugins/sample/sample_plugin.c:
6806: Log input and output to temp files for proof of concept.
6807: [ae1dfc34f7d6]
6808:
6809: * Makefile, configure, configure.in, doc/Makefile.in:
6810: Add doc Makefile.in and wire it up
6811: [6a310443c87d]
6812:
6813: * src/script.c:
6814: Handle SIGSTOP in addition to SIGTSTP. Fixes a problem with
6815: suspending a shell with the "suspend" builtint.
6816: [3d65f182819a]
6817:
6818: * src/script.c:
6819: In child, handle parent side of the pipe going away.
6820: [a29c14d78cd9]
6821:
6822: * src/script.c:
6823: No longer need to check for explicit death of the child (process #2)
6824: since if it dies we will get EPIPE from the socketpair. Fix a
6825: sizeof() that was causing a spurious error. Convert SCRIPT_DEBUG to
6826: sudo_debug.
6827: [24c55dd4ff60]
6828:
6829: * src/sudo.c:
6830: Make sudo_debug do a single vfprintf() which will result in a single
6831: write call on most systems. Avoids problems with interleaved debug
6832: printf from different processes. Also remove an extraneous error
6833: case since recv() can't return a short read and add some more XXX.
6834: [b37a8533ef1e]
6835:
6836: 2010-02-20 Todd C. Miller <Todd.Miller@courtesan.com>
6837:
6838: * src/script.c:
6839: Fix uninitialized variable.
6840: [e012a0a30890]
6841:
6842: * src/Makefile.in:
6843: Fix sudo install target
6844: [1417fa4b4ab9]
6845:
6846: * src/parse_args.c, src/sudo.c, src/sudo.h:
6847: Wire up debug_level
6848: [144fab289c73]
6849:
6850: * src/Makefile.in:
6851: Fix dependencies
6852: [5170940af2ce]
6853:
6854: * configure, configure.in:
6855: Fix setting of plugin dir
6856: [144eda170a72]
6857:
6858: * Makefile:
6859: add clean targets
6860: [d53f6f6f5c3a]
6861:
6862: * src/atobool.c:
6863: Add missing source for sudo front end
6864: [42487de9c489]
6865:
6866: * plugins/sample/Makefile.in, plugins/sample/sample_plugin.c:
6867: Sample plugin demonstrating the sudo plugin API
6868: [f1fd62d7644f]
6869:
6870: * Makefile, configure, configure.in, install-sh, pathnames.h.in,
6871: plugins/sudoers/install-sh, src/Makefile.in, src/conversation.c,
6872: src/fileops.c, src/fmt_string.c, src/load_plugins.c,
6873: src/parse_args.c, src/pty.c, src/script.c, src/sudo.c, src/sudo.h,
6874: src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c,
6875: sudo_usage.h.in:
6876: Modular sudo front-end which loads policy and I/O plugins that do
6877: most the actual work. Currently relies on dynamic loading using
6878: dlopen(). See doc/plugin.pod for the plugin API.
6879: [924f6eb2fbba]
6880:
6881: * doc/plugin.pod, include/sudo_plugin.h:
6882: Sudo plugin API
6883: [374ccbbd24ae]
6884:
6885: * compat/fnmatch.c, compat/glob.c, compat/nanosleep.c,
6886: compat/utimes.c, plugins/sudoers/check.c, plugins/sudoers/gettime.c,
6887: plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c,
6888: plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
6889: src/fileops.c, src/sudo_edit.c:
6890: Replace emul/include.h with compat/include.h to match new source
6891: tree layout.
6892: [7eccd10449a1]
6893:
6894: * src/lbuf.c:
6895: Include missing.h for memrchr() proto
6896: [03abd63a8a33]
6897:
6898: * HISTORY, LICENSE, Makefile.binary.in, Makefile.in, PORTING,
6899: TROUBLESHOOTING, UPGRADE, aix.c, aixcrypt.exp, alias.c, alloc.c,
6900: alloc.h, audit.c, auth/API, auth/afs.c, auth/aix_auth.c,
6901: auth/bsdauth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c,
6902: auth/pam.c, auth/passwd.c, auth/rfc1938.c, auth/secureware.c,
6903: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c,
6904: auth/sudo_auth.h, boottime.c, bsm_audit.c, bsm_audit.h, check.c,
6905: closefrom.c, compat.h, compat/charclass.h, compat/closefrom.c,
6906: compat/fnmatch.c, compat/fnmatch.h, compat/getcwd.c,
6907: compat/getline.c, compat/getprogname.c, compat/glob.c,
6908: compat/glob.h, compat/isblank.c, compat/memrchr.c, compat/mkstemp.c,
6909: compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c,
6910: compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
6911: compat/strlcpy.c, compat/strsignal.c, compat/timespec.h,
6912: compat/utime.h, compat/utimes.c, def_data.c, def_data.h,
6913: def_data.in, defaults.c, defaults.h, doc/HISTORY, doc/LICENSE,
6914: doc/PORTING, doc/TROUBLESHOOTING, doc/UPGRADE, doc/history.pod,
6915: doc/license.pod, doc/sample.pam, doc/sample.sudoers,
6916: doc/sample.syslog.conf, doc/schema.ActiveDirectory,
6917: doc/schema.OpenLDAP, doc/schema.iPlanet, doc/sudo.cat,
6918: doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod, doc/sudoers.cat,
6919: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
6920: doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoers.pod,
6921: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
6922: doc/visudo.cat, doc/visudo.man.in, doc/visudo.pod, emul/charclass.h,
6923: emul/fnmatch.h, emul/glob.h, emul/timespec.h, emul/utime.h, env.c,
6924: error.c, error.h, fileops.c, find_path.c, fnmatch.c, getcwd.c,
6925: getdate.c, getdate.y, getline.c, getprogname.c, getspwuid.c,
6926: gettime.c, glob.c, goodpath.c, gram.c, gram.h, gram.y, history.pod,
6927: include/alloc.h, include/compat.h, include/error.h, include/lbuf.h,
6928: include/list.h, include/missing.h, ins_2001.h, ins_classic.h,
6929: ins_csops.h, ins_goons.h, install-sh, insults.h, interfaces.c,
6930: interfaces.h, isblank.c, lbuf.c, lbuf.h, ldap.c, license.pod,
6931: list.c, list.h, logging.c, logging.h, match.c, memrchr.c, missing.h,
6932: mkdefaults, mkstemp.c, mon_systrace.c, mon_systrace.h, nanosleep.c,
6933: nonunix.h, parse.c, parse.h, plugins/sudoers/Makefile.binary.in,
6934: plugins/sudoers/Makefile.in, plugins/sudoers/aixcrypt.exp,
6935: plugins/sudoers/alias.c, plugins/sudoers/auth/API,
6936: plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
6937: plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
6938: plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
6939: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
6940: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
6941: plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
6942: plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
6943: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
6944: plugins/sudoers/boottime.c, plugins/sudoers/check.c,
6945: plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
6946: plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
6947: plugins/sudoers/defaults.h, plugins/sudoers/env.c,
6948: plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
6949: plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
6950: plugins/sudoers/gettime.c, plugins/sudoers/goodpath.c,
6951: plugins/sudoers/gram.c, plugins/sudoers/gram.h,
6952: plugins/sudoers/gram.y, plugins/sudoers/ins_2001.h,
6953: plugins/sudoers/ins_classic.h, plugins/sudoers/ins_csops.h,
6954: plugins/sudoers/ins_goons.h, plugins/sudoers/install-sh,
6955: plugins/sudoers/insults.h, plugins/sudoers/interfaces.c,
6956: plugins/sudoers/interfaces.h, plugins/sudoers/ldap.c,
6957: plugins/sudoers/logging.c, plugins/sudoers/logging.h,
6958: plugins/sudoers/match.c, plugins/sudoers/mkdefaults,
6959: plugins/sudoers/mon_systrace.c, plugins/sudoers/mon_systrace.h,
6960: plugins/sudoers/nonunix.h, plugins/sudoers/parse.c,
6961: plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
6962: plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
6963: plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
6964: plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers,
6965: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
6966: plugins/sudoers/sudoers2ldif, plugins/sudoers/sudoreplay.c,
6967: plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c,
6968: plugins/sudoers/toke.c, plugins/sudoers/toke.l,
6969: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/vasgroups.c,
6970: plugins/sudoers/visudo.c, pty.c, pwutil.c, redblack.c, redblack.h,
6971: sample.pam, sample.sudoers, sample.syslog.conf,
6972: schema.ActiveDirectory, schema.OpenLDAP, schema.iPlanet, script.c,
6973: selinux.c, sesh.c, set_perms.c, sigaction.c, snprintf.c, src/aix.c,
6974: src/alloc.c, src/audit.c, src/bsm_audit.c, src/bsm_audit.h,
6975: src/error.c, src/fileops.c, src/lbuf.c, src/list.c, src/pty.c,
6976: src/script.c, src/selinux.c, src/sesh.c, src/sudo_edit.c,
6977: src/sudo_noexec.c, src/term.c, src/tgetpass.c, src/zero_bytes.c,
6978: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, strsignal.c, sudo.c,
6979: sudo.cat, sudo.h, sudo.man.in, sudo.man.pl, sudo.pod, sudo_edit.c,
6980: sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudoers, sudoers.cat,
6981: sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod,
6982: sudoers.man.in, sudoers.man.pl, sudoers.pod, sudoers2ldif,
6983: sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod,
6984: term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l,
6985: tsgetgrpw.c, utimes.c, vasgroups.c, visudo.c, visudo.cat,
6986: visudo.man.in, visudo.pod, zero_bytes.c:
6987: Rework source layout in preparation for modular sudo.
6988: [7fc1978c6ad5]
6989:
6990: 2010-02-13 Todd C. Miller <Todd.Miller@courtesan.com>
6991:
6992: * Avoid a duplicate fclose() of the sudoers file.
6993: [5dba851088c1]
6994:
6995: * Fix size arg when realloc()ing include stack. From Daniel Kopecek
6996: [0a2935061e33]
6997:
6998: * Use setrlimit64(), if available, instead of setrlimit() when setting
6999: AIX resource limits since rlim_t is 32bits.
7000: [353db89bac61]
7001:
7002: * Fix use after free when sending error messages. From Timo Juhani
7003: Lindfors
7004: [e50dbd902382]
7005:
7006: * ChangeLog, Makefile.in:
7007: Generate the ChangeLog as part of "make dist" instead of having it
7008: in the repo.
7009: [251b70964673]
7010:
7011: 2010-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
7012:
7013: * Makefile.binary.in, Makefile.in, aix.c, alias.c, alloc.c, alloc.h,
7014: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
7015: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7016: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c,
7017: auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c,
7018: closefrom.c, compat.h, configure.in, defaults.c, defaults.h,
7019: emul/charclass.h, emul/timespec.h, env.c, error.c, error.h,
7020: fileops.c, find_path.c, getcwd.c, getprogname.c, getspwuid.c,
7021: gettime.c, goodpath.c, gram.c, gram.y, ins_2001.h, ins_classic.h,
7022: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
7023: isblank.c, lbuf.c, lbuf.h, ldap.c, list.c, list.h, logging.c,
7024: logging.h, match.c, memrchr.c, missing.h, mkinstalldirs, mkstemp.c,
7025: mon_systrace.c, nanosleep.c, parse.c, parse.h, pathnames.h.in,
7026: pty.c, pwutil.c, redblack.c, redblack.h, sample.pam, sample.sudoers,
7027: sample.syslog.conf, script.c, selinux.c, sesh.c, set_perms.c,
7028: sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c,
7029: strlcpy.c, strsignal.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7030: sudo_edit.c, sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudo_usage.h.in,
7031: sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod,
7032: sudoers2ldif, sudoreplay.c, sudoreplay.man.in, sudoreplay.pod,
7033: term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l,
7034: utimes.c, visudo.c, visudo.man.in, visudo.pod, zero_bytes.c:
7035: Remove CVS $Sudo$ tags.
7036: [de683a8b31f5]
7037:
7038: 2010-01-18 convert-repo <convert-repo>
7039:
7040: * .hgtags:
7041: update tags
7042: [9b7aa44ae436]
7043:
7044: 2009-12-26 Todd C. Miller <Todd.Miller@courtesan.com>
7045:
7046: * sudo_usage.h.in:
7047: make this match sudoers SYNOPSIS
7048: [c74ba66944c2]
7049:
7050: * lbuf.c, parse.c:
7051: Print a newline between Runas and Command-specific defaults in sudo
7052: -l.
7053: [b5bdfcc9ce4b]
7054:
7055: * term.c:
7056: Use SET and CLR macros in term_raw
7057: [50ca42609d6c]
7058:
7059: * sudoreplay.c:
7060: Set stdin to non-blocking mode early instead of in check_input. Use
7061: term_raw instead of term_cbreak since the data we get has already
7062: been expanded via OPOST.
7063: [51c47e803d62]
7064:
7065: 2009-12-23 Todd C. Miller <Todd.Miller@courtesan.com>
7066:
7067: * script.c, term.c:
7068: Enable/disable all postprocessing instead of just nl->crnl
7069: processing since things like tab expansion matter too. However, if
7070: stdout is a tty leave postprocessing on in the pty since we run into
7071: problems doing it only on the real stdout with .e.g nvi.
7072: [62666e309673]
7073:
7074: 2009-12-19 Todd C. Miller <Todd.Miller@courtesan.com>
7075:
7076: * check.c:
7077: If tty_tickets is enabled and there is no tty, prompt for a
7078: password. Do not lecture user for "sudo -k command" if user has a
7079: timestamp.
7080: [5880200c5f6b]
7081:
7082: * INSTALL:
7083: Document missing options: --with-efence and --with-bsm-audit
7084: [d83afcdf9ff3]
7085:
7086: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.ldap.cat,
7087: sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod,
7088: sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod, visudo.cat,
7089: visudo.man.in, visudo.pod:
7090: username -> user name groupname -> group name hostname -> host name
7091: [10c85646f45d]
7092:
7093: * INSTALL, README.LDAP, sudoers.pod:
7094: filename -> file name like the rest of the docs
7095: [1ef8ab5a9018]
7096:
7097: 2009-12-17 Todd C. Miller <Todd.Miller@courtesan.com>
7098:
7099: * parse.c:
7100: Fix printing of entries with multiple host entries on a single line.
7101: [226ceaf91d8d]
7102:
7103: 2009-12-14 Todd C. Miller <Todd.Miller@courtesan.com>
7104:
7105: * sudoers.pod:
7106: Mention that targetpw affects the timestamp file name.
7107: [a26e22e4f72e]
7108:
7109: * def_data.c, def_data.h, def_data.in, defaults.c, script.c,
7110: sudoers.pod:
7111: Add compress_transcript option.
7112: [6e94f8cb9dfb]
7113:
7114: 2009-12-13 Todd C. Miller <Todd.Miller@courtesan.com>
7115:
7116: * configure, configure.in:
7117: bump to 1.7.3b2
7118: [906d7e347d15]
7119:
7120: * pwutil.c, set_perms.c, sudo.c, sudo_nss.c:
7121: Better split of membership vs. traditional group check in
7122: user_in_group(). Allow user_ngroups to be < 0 if getgroups() fails.
7123: [6ebc55d4716b]
7124:
7125: 2009-12-12 Todd C. Miller <Todd.Miller@courtesan.com>
7126:
7127: * pwutil.c:
7128: Fix pasto and add default return value.
7129: [7973b5e4599c]
7130:
7131: * check.c, match.c, pwutil.c, sudo.h:
7132: refactor group member checking into user_in_group()
7133: [48ca8c2eddf8]
7134:
7135: * check.c, config.h.in, configure, configure.in, match.c, sudo.c,
7136: sudo.h:
7137: Add support for mbr_check_membership() as present in darwin.
7138: [5501aed02b9f]
7139:
7140: 2009-12-10 Todd C. Miller <Todd.Miller@courtesan.com>
7141:
7142: * match.c:
7143: Rename label to be accurate
7144: [3af17dd960f7]
7145:
7146: * Makefile.in, boottime.c, check.c, config.h.in, configure,
7147: configure.in, sudo.h:
7148: Treat timestamp files from before we booted as old. Idea from and
7149: Apple patch.
7150: [5c96e484c05a]
7151:
7152: 2009-12-09 Todd C. Miller <Todd.Miller@courtesan.com>
7153:
7154: * sudo.c, sudo.pod, sudo_usage.h.in:
7155: Allow the -u flag to be used in conjunction with the -v flag as per
7156: older versions of sudo.
7157: [591e9fc13c1a]
7158:
7159: * logging.c:
7160: fix typo in last commit
7161: [4fd0c692dcf0]
7162:
7163: 2009-12-08 Todd C. Miller <Todd.Miller@courtesan.com>
7164:
7165: * logging.c:
7166: Convert fmt_first and fmt_confd into macros.
7167: [32e870158b29]
7168:
7169: * sudoers.pod:
7170: timeouts can be floats now
7171: [89de639a9679]
7172:
7173: * WHATSNEW, def_data.c, def_data.h, def_data.in, defaults.c,
7174: defaults.h, mkdefaults:
7175: Add support for floating point timeout values (e.g. 2.5 minutes).
7176: [210ffa291733]
7177:
7178: 2009-12-07 Todd C. Miller <Todd.Miller@courtesan.com>
7179:
7180: * sudo.pod:
7181: The -L flag will be removed in sudo 1.7.4
7182: [ffd026084333]
7183:
7184: 2009-12-06 Todd C. Miller <Todd.Miller@courtesan.com>
7185:
7186: * sudoreplay.c:
7187: Fix a bug due to order of operators.
7188: [938d34464283]
7189:
7190: 2009-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
7191:
7192: * match.c:
7193: cmnd_matches() already deals with negation so _cmndlist_matches()
7194: does not need to do so itself. Fixes a bug with negated entries in
7195: a Cmnd_List.
7196: [71c845f6ce73]
7197:
7198: 2009-11-22 Todd C. Miller <Todd.Miller@courtesan.com>
7199:
7200: * sudo.c:
7201: Don't exit() from open_sudoers, just return NULL for all errors.
7202: [8cfa832f972a]
7203:
7204: * script.c:
7205: Can't rely on the shell sending us SIGCONT when transitioning from
7206: backgroup to foreground process.
7207: [3c6c5b6cb4b3]
7208:
7209: * toke.c, toke.l:
7210: Add missing extern def for parse_error
7211: [45b7b59d03b7]
7212:
7213: 2009-11-21 Todd C. Miller <Todd.Miller@courtesan.com>
7214:
7215: * toke.c, toke.l:
7216: Avoid a parse error when #includedir doesn't find any files. Closes
7217: bug #375
7218: [1ce1b850e9e6]
7219:
7220: * Makefile.in:
7221: Include sudo.man.pl and sudoers.man.pl in the distribution tarball.
7222: [6a22e32da108]
7223:
7224: 2009-11-15 Todd C. Miller <Todd.Miller@courtesan.com>
7225:
7226: * script.c:
7227: Start command out in foreground mode if stdout is a tty. Works
7228: around issues with some curses-based programs that don't handle
7229: tcsetattr getting interrupted by a signal. Still allows us to avoid
7230: hogging the tty if the command is part of a pipeline.
7231: [1c32f2b94769]
7232:
7233: * script.c, sudo.c, sudo.h, sudoreplay.c, term.c, tgetpass.c:
7234: Use a socketpair to pass signals from parent to child. Child will
7235: now pass command status change info back via the socketpair. This
7236: allows the parent to distinguish between signals it has been sent
7237: directly and signals the command has received. It also means the
7238: parent can once again print the signal notifications to the tty so
7239: all writes to the pty master occur in the parent. The command is
7240: now always started in background mode with tty signals handled by
7241: the parent.
7242: [c6790b82986d]
7243:
7244: 2009-11-04 Todd C. Miller <Todd.Miller@courtesan.com>
7245:
7246: * configure, configure.in:
7247: Fix a few typos in the descriptions; from Jeff Makey Only do the
7248: check for krb5_get_init_creds_opt_free() taking two arguments if we
7249: find krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
7250: positive when using our own krb5_get_init_creds_opt_free which takes
7251: only a single argument.
7252: [845a9ff6f93d]
7253:
7254: 2009-11-03 Todd C. Miller <Todd.Miller@courtesan.com>
7255:
7256: * configure, configure.in:
7257: Remove a spurious comma in the kerb5 bits.
7258: [3433eab083db]
7259:
7260: * auth/kerb5.c:
7261: Call krb5_get_init_creds_opt_init() in our emulated
7262: krb5_get_init_creds_opt_alloc() for MIT kerberos.
7263: [7ffb40bf43e9]
7264:
7265: 2009-11-01 Todd C. Miller <Todd.Miller@courtesan.com>
7266:
7267: * config.h.in:
7268: Add HAVE_ZLIB
7269: [9297bde61ecc]
7270:
7271: * script.c:
7272: Need to ignore SIGTT{IN,OU} in child when running the command in the
7273: background. Also some minor cleanup.
7274: [dc208d982319]
7275:
7276: 2009-10-31 Todd C. Miller <Todd.Miller@courtesan.com>
7277:
7278: * script.c:
7279: Instead of calling sigsuspend when waiting for SIGUSR[12] from
7280: parent, install the signal handlers w/o SA_RESTART and let them
7281: interrupt waitpid().
7282: [759c7d18203b]
7283:
7284: * script.c:
7285: Pass along SIGHUP and SIGTERM from parent to child.
7286: [035b0e254568]
7287:
7288: * script.c:
7289: Close unused bits of script_fds in processes that don't need them.
7290: Restore default SIGCONT handler in child.
7291: [e037378ab0c1]
7292:
7293: * script.c:
7294: Update foreground/background status in SIGCONT handler in parent
7295: process.
7296: [3f7f91333264]
7297:
7298: 2009-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
7299:
7300: * script.c:
7301: Defer setting terminal into raw mode until just before we fork() and
7302: only do it if sudo is the foreground process. If we get SIGTT{IN,OU}
7303: and sudo is already in the foreground be sure to set raw mode before
7304: continuing the child.
7305: [1102ef40832c]
7306:
7307: 2009-10-24 Todd C. Miller <Todd.Miller@courtesan.com>
7308:
7309: * script.c:
7310: Fix handling of SIGTTOU/SIGTTIN in program being run. We now only
7311: give the command the controlling tty if the main sudo process is the
7312: foreground process.
7313: [cf3a91cb5682]
7314:
7315: * script.c:
7316: Don't bother with sudo_waitpid() here for now.
7317: [9086de480c2d]
7318:
7319: * script.c:
7320: fix non-zlib case
7321: [a258bff0f9a6]
7322:
7323: 2009-10-23 Todd C. Miller <Todd.Miller@courtesan.com>
7324:
7325: * script.c:
7326: Remove non-wroking code that crept into rev 1.55
7327: [2802dd55cff5]
7328:
7329: 2009-10-22 Todd C. Miller <Todd.Miller@courtesan.com>
7330:
7331: * INSTALL, configure, configure.in, script.c, sudoreplay.c:
7332: First pass at zlib support for transcript data files
7333: [5d10260807da]
7334:
7335: * Makefile.in:
7336: remove vestiges of ZLDFLAGS
7337: [1fa0caf1c0fb]
7338:
7339: * script.c:
7340: Add missing variable declaration for when TIOCSCTTY is not defined.
7341: Need to include sys/termio.h for TIOCSCTTY on some systems.
7342: [ee7f41ac2709]
7343:
7344: * script.c:
7345: when resuming command, send SIGCONT to its pgrp not just pid
7346: [5cd63c1d565b]
7347:
7348: * selinux.c:
7349: remove unused variable
7350: [df67df4be228]
7351:
7352: * script.c:
7353: include selinux.h for is_selinux_enabled() proto
7354: [85ebaa880cc1]
7355:
7356: * script.c:
7357: Don't use log_error() in the child process.
7358: [def65fe2a433]
7359:
7360: * script.c:
7361: Do I/O in parent instead of child since the parent can have both
7362: /dev/tty as well as the pty fds open. The child just sets things up
7363: and waits for its grandchild and writes the signal description to
7364: the pty master if the command was killed by a signal.
7365: [95e473208982]
7366:
7367: 2009-10-18 Todd C. Miller <Todd.Miller@courtesan.com>
7368:
7369: * missing.h, sudo.h:
7370: Move two struct forward declarations from sudo.h to missing.h
7371: [90ad28294a8c]
7372:
7373: * script.c:
7374: Make comment at the top of script_exec() match reality.
7375: [c5042d27dbe0]
7376:
7377: * sudo.c:
7378: if neither stdin nor stdout is a tty, check stderr
7379: [c532ff20c8d8]
7380:
7381: * Makefile.in:
7382: Add back dependecy of gram.h on gram.y
7383: [c58382b7fcca]
7384:
7385: * script.c:
7386: Make transcript mode work as long as we can figure out our tty, even
7387: if it is not stdin. We'd like to use /dev/tty but that won't be
7388: valid after the setsid().
7389: [7b8bba8d99e7]
7390:
7391: 2009-10-17 Todd C. Miller <Todd.Miller@courtesan.com>
7392:
7393: * config.h.in, configure, configure.in, pty.c:
7394: Add support for IRIX-style dynamic ptys
7395: [bedc9bac44c1]
7396:
7397: * Makefile.in, alloc.h, getline.c, sudo.h, sudoreplay.c:
7398: Move alloc.c protos into alloc.h
7399: [b6a90649617d]
7400:
7401: * missing.h:
7402: Move prototypes for missing libc functions to missing.h
7403: [dda9ae1ccaf8]
7404:
7405: * Makefile.in, sudo.h, sudoreplay.c:
7406: Move prototypes for missing libc functions to missing.h
7407: [7483166b577b]
7408:
7409: 2009-10-16 Todd C. Miller <Todd.Miller@courtesan.com>
7410:
7411: * config.h.in, configure, configure.in:
7412: Disable transcript support if no tcsetpgrp until we support older
7413: BSD-style job control.
7414: [27ac1d8163df]
7415:
7416: * configure, configure.in, pty.c, script.c:
7417: Break out pty code into pty.c
7418: [e85509b25d41]
7419:
7420: * compat.h, config.h.in, configure, configure.in:
7421: add killpg macro if no killpg function
7422: [3a125f4a51f0]
7423:
7424: * config.h.in, configure, configure.in, script.c:
7425: Push ptem and ldterm for STERAMS-based systems when allocating a
7426: pty.
7427: [36bb39b30ff2]
7428:
7429: 2009-10-15 Todd C. Miller <Todd.Miller@courtesan.com>
7430:
7431: * script.c:
7432: Sprinkle some more O_NOCTTY and call grantpt() before unlockpt()
7433: [d94bd5c9bf4e]
7434:
7435: * script.c:
7436: Call tcgetpgrp() in the parent, not the child and have the child
7437: spin until it is granted. Fixes a race on darwin.
7438: [6e8d435339ce]
7439:
7440: * script.c:
7441: Only use TIOCNOTTY in the non-setsid case. If no TIOCSCTTY, just
7442: reopen slave.
7443: [0bdc63c019ca]
7444:
7445: 2009-10-14 Todd C. Miller <Todd.Miller@courtesan.com>
7446:
7447: * script.c:
7448: In script mode, if the command is killed by a signal, print the
7449: signal description as well as a core dump notification like the
7450: shell does.
7451: [9df61738df07]
7452:
7453: * Makefile.in, config.h.in, configure, configure.in, strsignal.c,
7454: sudo.h:
7455: Add check for strsignal() and a simple implementation if it is not
7456: there but sys_siglist is
7457: [61421a188ef4]
7458:
7459: * script.c:
7460: Add missing WUNTRACED and store the signal that stopped the
7461: grandchild in suspended, not signo.
7462: [df65042b200e]
7463:
7464: * script.c:
7465: g/c unused code
7466: [40d8cb5c9203]
7467:
7468: * script.c:
7469: Associate the grandchild's pgrp with the tty instead of the child's
7470: and just get suspend notifications via SIGCHLD instead of directly.
7471: This fixes a hang with programs that try to set terminal attributes
7472: and is more consistent with how the shell handles things.
7473: [6865abff7e94]
7474:
7475: 2009-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
7476:
7477: * script.c:
7478: Move setpgid() of child into the parent side of the fork() where it
7479: belongs.
7480: [3defa782777c]
7481:
7482: 2009-10-11 Todd C. Miller <Todd.Miller@courtesan.com>
7483:
7484: * script.c:
7485: fix typo
7486: [b6a612b3622c]
7487:
7488: * script.c:
7489: Run command in its own pgrp (like the shell does) for easier
7490: signalling. No need to relay SIGINT or SIGQUIT to parent, just send
7491: to grandchild. Don't want grandchild stopped events in the child
7492: (only termination). Flush output after suspending grandchild before
7493: signalling parent.
7494: [db556bf2176f]
7495:
7496: * script.c:
7497: Back out revision 1.34; the problem lies elsewhere.
7498: [85f590a03275]
7499:
7500: * script.c:
7501: Don't set stdout to blocking mode when flushing remaining output.
7502: It can cause us to hang when trying to exit. Need to investigate
7503: why.
7504: [6f803a3e33ca]
7505:
7506: * script.c:
7507: Handle SIGTTOU and remove some debugging.
7508: [52d17279053e]
7509:
7510: * term.c:
7511: Back out revision 1.10 as the signal that interrupts us may be
7512: SIGTTOU or SIGTTIN which the caller must handle.
7513: [7e2fa9107975]
7514:
7515: * script.c:
7516: Apparently we need to send SIGSTOP to the command as well as ourself
7517: when we get SIGTSTP, the kernel doesn't automatically stop the
7518: process for us.
7519: [1a936e9309c4]
7520:
7521: * script.c:
7522: Use an extra process to act as the glue bewteen the sessions
7523: associated with the user's controlling tty (what the shell uses) and
7524: the tty that sudo is using to do its logging. Basically, this means
7525: that if we get, e.g. SIGTSTP from the process sudo is running, we
7526: relay the signal to the parent so it's shell can do the job control.
7527: [6dd296988060]
7528:
7529: * term.c:
7530: Handle getting/setting terminal attributes when the fd is in non-
7531: blocking mode.
7532: [ae5ae535ea7b]
7533:
7534: 2009-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
7535:
7536: * sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
7537: Add support for pausing and changing the speed in interactive mode.
7538: [72a2063780a7]
7539:
7540: * script.c:
7541: Already define O_NOCTTY in compat.h, don't need it here
7542: [b5d80ed3e5ce]
7543:
7544: 2009-10-06 Todd C. Miller <Todd.Miller@courtesan.com>
7545:
7546: * sudoreplay.c:
7547: Add missing protos
7548: [c4cb4e7f4d8a]
7549:
7550: 2009-09-30 Todd C. Miller <Todd.Miller@courtesan.com>
7551:
7552: * sudo_edit.c:
7553: Always update the stashed mtime of the temp file instead of using
7554: what we have for the original because the time resolution of the
7555: filesystem the temporary is on may not match that of the filesystem
7556: that holds the original. Should fix bz #371 found by Philippe Levan.
7557: [c86ca4bec60c]
7558:
7559: * sudoreplay.c:
7560: Use cbreak mode instead of raw mode and add signal handlers to
7561: restore the tty on interrupt.
7562: [84dd283da41c]
7563:
7564: * script.c, sudo.h, term.c:
7565: Retain NL to NLCR conversion on the real tty and skip it on the pty
7566: we allocate. That way, if stdout is not a pty there are no extra
7567: carriage returns.
7568: [32e4f570414e]
7569:
7570: * script.c:
7571: Fix log_output(); just pass in a string and a length.
7572: [ca980cc0a3fb]
7573:
7574: 2009-09-28 Todd C. Miller <Todd.Miller@courtesan.com>
7575:
7576: * script.c:
7577: do not use errno when complaining out lack of a tty
7578: [8f9b8c55ab8e]
7579:
7580: 2009-09-27 Todd C. Miller <Todd.Miller@courtesan.com>
7581:
7582: * Makefile.in, sudoreplay.c, term.c:
7583: Instead of messing with line endings, just set terminal to raw mode
7584: in sudoreplay.
7585: [90943fa87acb]
7586:
7587: * term.c:
7588: When copying the terminal attributes to the pty, be sure not to set
7589: ONLCR. This prevents extra carriage returns from ending up in the
7590: script output file.
7591: [e6b5475ac2aa]
7592:
7593: * script.c:
7594: Convert a do {} while into a while
7595: [e461310d2c77]
7596:
7597: * Makefile.in:
7598: Use if then instead of test && when installing binaries that may not
7599: exist.
7600: [ad4f9490d971]
7601:
7602: * script.c:
7603: Add O_NOCTTY when opening a tty device. Explicitly disconnect from
7604: old tty before associatng with new one.
7605: [0e0ca634b80c]
7606:
7607: * script.c, selinux.c, sudo.c, sudo.h:
7608: First cut at refactoring some of the selinux code so it can be used
7609: in conjunction with sudo's transcript support.
7610: [779b0d8f9d29]
7611:
7612: 2009-09-26 Todd C. Miller <Todd.Miller@courtesan.com>
7613:
7614: * aclocal.m4, configure, configure.in:
7615: Fix default case of transcript_enabled being unset.
7616: [f8aa96186e6b]
7617:
7618: * script.c, sudoreplay.c:
7619: Use _PATH_SUDO_TRANSCRIPT instead of _PATH_SUDO_SESSDIR
7620: [2844a7a851fa]
7621:
7622: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.c:
7623: Hook up --disable-transcript and --enable-transcript=DIR
7624: [b3fa7e6b2480]
7625:
7626: 2009-09-25 Todd C. Miller <Todd.Miller@courtesan.com>
7627:
7628: * aclocal.m4, configure, configure.in, pathnames.h.in:
7629: _PATH_SUDO_SESSDIR -> _PATH_SUDO_TRANSCRIPT Add --enable-
7630: transcript=DIR option to specify the directory
7631: [b0bb76d43cda]
7632:
7633: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
7634: regen
7635: [c7a8a0a9027c]
7636:
7637: * configure, configure.in, sudoers.man.pl, sudoers.pod:
7638: Substitute in default value for secure_path
7639: [c8f9ac6dbf93]
7640:
7641: * sudo.pod:
7642: Mention that the password must be followed by a newline with the -S
7643: option.
7644: [2fc589a3ee7e]
7645:
7646: 2009-09-20 Todd C. Miller <Todd.Miller@courtesan.com>
7647:
7648: * script.c:
7649: Go back to dropping out of the select() loop when the process dies;
7650: Linux ptys apparently don't behave the same as BSD in regards to
7651: select(). No need to flush remaining output to the transcript, only
7652: to stdout. Add back code to check the master pty for additional data
7653: when we exit the main select loop.
7654: [abed9a9cbc6b]
7655:
7656: 2009-09-19 Todd C. Miller <Todd.Miller@courtesan.com>
7657:
7658: * Makefile.in:
7659: Add getline.o to COMMON_OBJS
7660: [04ef7643cbc2]
7661:
7662: * Makefile.in:
7663: sudoreplay depends on libsudo.a
7664: [142bd0472631]
7665:
7666: * Makefile.in:
7667: More pwutil.o into COMMON_OBJS
7668: [4a016b933629]
7669:
7670: * pwutil.c, testsudoers.c, tsgetgrpw.c:
7671: Remove my_* redirection in pwutil.c for testsudoers and just use the
7672: normal libc get{pw,gr}* names.
7673: [9b76d637d86b]
7674:
7675: * sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
7676: More time and date examples
7677: [c6ee0175ec56]
7678:
7679: * Makefile.in, configure, configure.in, nanosleep.c, sudoreplay.c:
7680: Move nanosleep() emulation into its own file Check librt.a for
7681: nanosleep if we don't find it in libc
7682: [4da0cc26aad7]
7683:
7684: * Makefile.in, configure, configure.in:
7685: Build libsudo with the common bits and link things against that.
7686: [2b53bc0b081a]
7687:
7688: * script.c:
7689: Fix final flush.
7690: [6da287d833da]
7691:
7692: * script.c:
7693: Keep reading from the pty master -> log file until read returns <=
7694: 0. Do our best to write everything to stdout when flushing any
7695: remaining bits.
7696: [2a45d4ae280c]
7697:
7698: * sudoreplay.c:
7699: Use unbuffered I/O when writing to stdout and make sure we write the
7700: entire buffer.
7701: [f39ef9844a47]
7702:
7703: 2009-09-18 Todd C. Miller <Todd.Miller@courtesan.com>
7704:
7705: * sudoreplay.c:
7706: Only use max_wait if it is non-zero
7707: [f6c10604d2e8]
7708:
7709: * getdate.c, getdate.y, getline.c:
7710: Need compat.h here
7711: [5d6722e225a0]
7712:
7713: * sudoreplay.c:
7714: Fix nanosleep emulation
7715: [34e5e5d72a76]
7716:
7717: * script.c:
7718: Fix comment after #endif
7719: [bd1347718b25]
7720:
7721: * sudoreplay.c:
7722: Add protos for missing libc bits
7723: [644f496427a2]
7724:
7725: * configure, configure.in:
7726: add missing line continuation char
7727: [db13c0d402cd]
7728:
7729: * config.h.in, configure, configure.in, getline.c:
7730: Implement getline() in terms of fgetln() if we have it.
7731: [3ab786eaadc5]
7732:
7733: * sudoreplay.c:
7734: Print year when formatting log line
7735: [90be669e3443]
7736:
7737: * sudoreplay.pod:
7738: Document cwd, attempt to document time/date formats.
7739: [6290fb9b65c6]
7740:
7741: * sudoreplay.c:
7742: Fix getline return value check.
7743: [d696d6657261]
7744:
7745: * Makefile.in, config.h.in, configure, configure.in, getline.c,
7746: sudoreplay.c:
7747: Use getline() if the system has it, else use provide our own for
7748: sudoreplay.
7749: [afca1d6fbe5e]
7750:
7751: * script.c:
7752: Refactor code to update output and timing files.
7753: [361491332b1a]
7754:
7755: 2009-09-17 Todd C. Miller <Todd.Miller@courtesan.com>
7756:
7757: * sudoreplay.c:
7758: Make sudo_getln() behave more like glibc getline.
7759: [40c9f2ea29e6]
7760:
7761: * script.c:
7762: When flushing remaining output, also update timing file.
7763: [5a9a5a627549]
7764:
7765: * sudoreplay.c:
7766: Use get_timestr() and make the -l output look like the regular sudo
7767: log.
7768: [452ba9d436c9]
7769:
7770: * logging.c, sudo.h, timestr.c:
7771: Make get_timestr() take a time_t so we can use it properly in
7772: sudoreplay.
7773: [82e67cc53c9c]
7774:
7775: * script.c:
7776: Create session dir earlier now that we update the seq number early.
7777: [797fe8d6dc61]
7778:
7779: 2009-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
7780:
7781: * sudoreplay.c:
7782: Use fromdate and todate as the keywords instead of from and to; the
7783: short forms will still be accepted.
7784: [d14d9b116df4]
7785:
7786: * sudoreplay.c:
7787: Fix reading long liensin sudo_getln()
7788: [58dadd74118c]
7789:
7790: * script.c, sudoreplay.c:
7791: Log the cwd in the script log file. Add sudo_getln() to read
7792: arbitrarily long lines.
7793: [faceb802ab8f]
7794:
7795: * Makefile.in, logging.c, sudo.h, timestr.c:
7796: Move get_timestr() into its own source file so sudoreplay can use
7797: it.
7798: [99b054bfa20a]
7799:
7800: 2009-09-15 Todd C. Miller <Todd.Miller@courtesan.com>
7801:
7802: * sudoreplay.c:
7803: Add to and from perdicates (date ranges); needs documentation
7804: [1d629174dcf4]
7805:
7806: 2009-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
7807:
7808: * Makefile.in, getdate.c, getdate.y:
7809: Fix warning and add generated getdate.c
7810: [b877a86b5a03]
7811:
7812: * Makefile.in, getdate.y:
7813: Add getdate.y to be used for sudoreplay date parsing.
7814: [b8e26fbb7a40]
7815:
7816: 2009-09-13 Todd C. Miller <Todd.Miller@courtesan.com>
7817:
7818: * sudoreplay.c:
7819: Check more than just the first character of a predicate
7820: [4fe53728adb1]
7821:
7822: * sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
7823: Add examples, sort predicates
7824: [70f8075cbccc]
7825:
7826: * Makefile.in, sudoreplay.c, sudoreplay.cat, sudoreplay.man.in,
7827: sudoreplay.pod:
7828: Implement search expressions in sudoreplay similar in concept to
7829: what find or tcpdump uses. TODO: date ranges
7830: [f7ce4fb4cf3a]
7831:
7832: 2009-09-07 Todd C. Miller <Todd.Miller@courtesan.com>
7833:
7834: * script.c:
7835: Remove vhangup as it was hanging up the wrong tty. Should really
7836: vhangup in the child after it as set its tty.
7837: [2eed9df73010]
7838:
7839: * sudoers.pod:
7840: Fix cut at documenting transcript support.
7841: [e6c533a5568a]
7842:
7843: * logging.c:
7844: ID= -> TSID= for transcript ID
7845: [1bf755a35333]
7846:
7847: 2009-09-06 Todd C. Miller <Todd.Miller@courtesan.com>
7848:
7849: * sudoers.pod:
7850: Move fast_glob description to where it belongs in sorted order
7851: [5901cfb0d25f]
7852:
7853: * def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
7854: parse.c, parse.h, sudo.c:
7855: Rename script -> transcript
7856: [e06cf823122c]
7857:
7858: 2009-09-03 Todd C. Miller <Todd.Miller@courtesan.com>
7859:
7860: * compat.h:
7861: Add timeradd and timersub for those without them
7862: [929f8aa06c2b]
7863:
7864: * script.c:
7865: Sanity check sessid before using it.
7866: [aa8ca5211d43]
7867:
7868: * sudo.c:
7869: Only set the session id if we are running a command or editing a
7870: file.
7871: [7205d717c098]
7872:
7873: * script.c:
7874: Actually. qsort is fine since most versions fal back to a cheaper
7875: sort when the number of elements to sort is small (like in our
7876: case).
7877: [d11c7cd352fe]
7878:
7879: * config.h.in, configure, configure.in, script.c:
7880: Check for dup2 and use dup instead if we don't have it.
7881: [98bd89830f8a]
7882:
7883: * script.c, sudo.c, sudo.h:
7884: Move the code to dup2 the script fds to low numbered descriptors
7885: into script_duplow() and fix the fd sorting.
7886: [9453fdc5fba6]
7887:
7888: * script.c, sudo.c, sudo.h:
7889: Move script_setup() back to immediately before we drop privs and
7890: call the new script_nextid() in its place, which will set
7891: sudo_user.sessid for the logging functions.
7892: [8434d0c8ff08]
7893:
7894: 2009-09-01 Todd C. Miller <Todd.Miller@courtesan.com>
7895:
7896: * Makefile.in:
7897: Install sudoreplay
7898: [6acf2cdb4d3f]
7899:
7900: * sudoreplay.c:
7901: remove unused variable
7902: [2316360bb992]
7903:
7904: 2009-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
7905:
7906: * logging.c, script.c, sudo.c, sudo.h:
7907: Log the session ID, if there is one. Currently logs ID=XXXXXX,
7908: perhaps should be SESSIONID or SESSID.
7909: [53976905b0a6]
7910:
7911: * Makefile.in, configure, configure.in, sudoreplay.cat,
7912: sudoreplay.man.in, sudoreplay.pod:
7913: Add sudoreplay docs
7914: [da4f14f0e64c]
7915:
7916: * sudoreplay.c:
7917: add -V (version) flag
7918: [b5e743639ee3]
7919:
7920: * sudoreplay.c:
7921: Hook up max_wait.
7922: [2ec5697a92ba]
7923:
7924: * script.c, sudoreplay.c:
7925: Use base36 number for the ID and store script files with paths like
7926: /var/log/sudo-session/00/00/00{,.tim,.scr}. This gives us 36^6
7927: (2,176,782,336) unique IDs.
7928: [6aab019d07aa]
7929:
7930: 2009-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
7931:
7932: * config.h.in, configure.in:
7933: Add check for regcomp
7934: [44c3ebd7ff34]
7935:
7936: * sudoreplay.c:
7937: Add support for selecting by pattern and tty when listing.
7938: [66189f840c52]
7939:
7940: 2009-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
7941:
7942: * sudoreplay.c:
7943: The beginnings of a list mode.
7944: [8d0150b4a52c]
7945:
7946: 2009-08-16 Todd C. Miller <Todd.Miller@courtesan.com>
7947:
7948: * Makefile.in:
7949: fix pasto
7950: [616b4640b8a8]
7951:
7952: * Makefile.in, config.h.in, configure.in:
7953: Add scaffolding for building sudoreplay
7954: [a32958505dbe]
7955:
7956: * sudoreplay.c:
7957: include error.h first arg to nanotime is const
7958: [fe5a7bb31bc5]
7959:
7960: * sudoreplay.c:
7961: Initial cut at sudoreplay; replay a sudo session.
7962: [f149fba372bd]
7963:
7964: 2009-08-08 Todd C. Miller <Todd.Miller@courtesan.com>
7965:
7966: * script.c:
7967: Fix wait() usage and use correct wait status.
7968: [f4745ed7ad05]
7969:
7970: * sudo.c, sudo.h, tgetpass.c:
7971: Add protos for term_* to sudo.h
7972: [14fe1abd7e7b]
7973:
7974: * script.c:
7975: Fix detection of the child process exiting. Since the child is in
7976: its own session we should only ever get SIGCHLD for that process but
7977: better safe than sorry.
7978: [7edfdadd8505]
7979:
7980: * config.h.in:
7981: Add UNIX98 pty support.
7982: [82f4b53a0e8f]
7983:
7984: * configure, configure.in, script.c:
7985: Add UNIX98 pty support.
7986: [795b8bb0a3a1]
7987:
7988: 2009-08-07 Todd C. Miller <Todd.Miller@courtesan.com>
7989:
7990: * term.c:
7991: For raw mode, don't bother clearing BRKINT or PARMRK and clear IUCLC
7992: if it is defined.
7993: [40f8b83baf69]
7994:
7995: * auth/pam.c:
7996: Set PAM_RUSER and PAM_RHOST early so they can be used during
7997: authentication. Based on a patch from Jamie Beverly.
7998: [3d567b453a6a]
7999:
8000: * match.c:
8001: Close dir before returning if strlcpy() reports overflow. From
8002: Martynas Venckus.
8003: [6a82f96473e5]
8004:
8005: * config.h.in, configure, configure.in, script.c:
8006: On Linux, the openpty proto libes in pty.h
8007: [98643a018d1c]
8008:
8009: * script.c:
8010: Call vhangup on exit if the system has it Use setpgrp() if no
8011: setsid()
8012: [3a9e13149829]
8013:
8014: 2009-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
8015:
8016: * config.h.in, configure, configure.in:
8017: Add checks for revoke and vhangup if we don't have openpty
8018: [fcb04572e994]
8019:
8020: * script.c:
8021: Session logging guts that got forgotten in the previous commit.
8022: [c2af08a63ea9]
8023:
8024: * Makefile.in, aclocal.m4, compat.h, config.h.in, configure,
8025: configure.in, def_data.c, def_data.h, def_data.in, gram.c, gram.h,
8026: gram.y, parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, term.c,
8027: tgetpass.c:
8028: First cut at session logging for sudo. Still need to write
8029: get_pty() for Unix 98 and old-style BSD ptys. Also needs
8030: documentation and general cleanup.
8031: [77e3f5e25738]
8032:
8033: 2009-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
8034:
8035: * sudo.c, sudo_edit.c:
8036: Fix a bug introduced with def_closefrom. The value of def_closefrom
8037: already includes the +1.
8038: [7291c136300d]
8039:
8040: 2009-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
8041:
8042: * Makefile.in:
8043: Generate sudo distributions with pax in ustar mode. No longer need
8044: to use a temp file or have the source dir name match the version.
8045: [9778177a8272]
8046:
8047: 2009-07-18 Todd C. Miller <Todd.Miller@courtesan.com>
8048:
8049: * toke.c, toke.l:
8050: Fix expansion of %h in #include names. Fixes bugzilla 363
8051: [6e346879ba24]
8052:
8053: 2009-07-12 Todd C. Miller <Todd.Miller@courtesan.com>
8054:
8055: * mkdefaults:
8056: If no arg assume def_data.in
8057: [c1dd28c0e675]
8058:
8059: * README, WHATSNEW:
8060: Update for 1.7.2
8061: [f5ad45f69f05] [SUDO_1_7_2]
8062:
8063: * ChangeLog:
8064: sync
8065: [6283549396ff]
8066:
8067: 2009-06-30 Todd C. Miller <Todd.Miller@courtesan.com>
8068:
8069: * sudoers.cat, sudoers.man.in, sudoers.pod:
8070: Add missing single quotes around a colon in Runas_Spec definition.
8071: From Elias Benali.
8072: [ccc6ee4fca83]
8073:
8074: 2009-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
8075:
8076: * sudo.man.in, sudoers.man.in:
8077: regen
8078: [546e75304ebf]
8079:
8080: * redblack.c:
8081: In rbrepair, re-color the root or the first non-block node we find
8082: to be black. Re-coloring the root is probably not needed but won't
8083: hurt.
8084: [34d01ebe241b]
8085:
8086: * sudo.cat, sudoers.cat:
8087: regen
8088: [bebf5a39f54f]
8089:
8090: 2009-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
8091:
8092: * redblack.c:
8093: When repairing the tree, don't touch the root node.
8094: [9841f0d5d789]
8095:
8096: 2009-06-25 Todd C. Miller <Todd.Miller@courtesan.com>
8097:
8098: * set_perms.c:
8099: Protect call to setegid in runas_setup with #ifdef HAVE_SETEUID.
8100: Reported by Josef Schmid.
8101: [ed044b1eb879]
8102:
8103: 2009-06-23 Todd C. Miller <Todd.Miller@courtesan.com>
8104:
8105: * sudoers.pod:
8106: Document that we accept env_pam-style environment files
8107: [e3b545456352]
8108:
8109: * env.c:
8110: Adapt to accept pam_env-style /etc/environment which allows shell-
8111: style lines such as: export EDITOR="/usr/bin/vi"
8112: [752eb75bf007]
8113:
8114: * sudoers.pod:
8115: Make it clear that env_delete only works when !env_reset. From Lo??c
8116: Minier
8117: [3bd3f8e351ba]
8118:
8119: 2009-06-15 Todd C. Miller <Todd.Miller@courtesan.com>
8120:
8121: * sudo.pod, sudoers.pod:
8122: Add non-unix group bits, adapted from Quest
8123: [8ce427de8dea]
8124:
8125: * Makefile.in:
8126: build the .cat page in the current working dir, not the src dir
8127: [00e87a307674]
8128:
8129: * env.c:
8130: Return EINVAL in setenv() if var is NULL or the empty string to
8131: match glibc behavior.
8132: [23fd7c247142]
8133:
8134: 2009-06-13 Todd C. Miller <Todd.Miller@courtesan.com>
8135:
8136: * configure, configure.in:
8137: Use AS_HELP_STRING for AC_ARG_WITH and AC_ARG_ENABLE
8138: [fedd4a3e2a85]
8139:
8140: 2009-06-11 Todd C. Miller <Todd.Miller@courtesan.com>
8141:
8142: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
8143: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
8144: regen
8145: [7b9f461a40b3]
8146:
8147: 2009-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
8148:
8149: * INSTALL:
8150: Document --with-libvas and --with-libvas-rpath
8151: [a071e6d96c89]
8152:
8153: 2009-05-29 Todd C. Miller <Todd.Miller@courtesan.com>
8154:
8155: * ldap.c, sudoers.ldap.pod:
8156: For netscape-derived LDAP SDKs the cert and key paths may be a
8157: directory or a file. However, version 5.0 of the SDK only seems to
8158: support using a directory. If ldapssl_clientauth_init fails and the
8159: cert or key paths look like they could be files, strip off the last
8160: path element and try again.
8161: [ac4e49d83043]
8162:
8163: * Makefile.in:
8164: Add non-Unix group .o to COMMON_OBJS and substitute in path to flex.
8165: [4547cc1a335f]
8166:
8167: 2009-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
8168:
8169: * configure, configure.in, match.c, sudo.c, vasgroups.c:
8170: Update non-Unix group support from Quest, as reworked by me.
8171: [1abafce29dc6]
8172:
8173: * toke.c:
8174: regen
8175: [01bfca9148b7]
8176:
8177: * toke.l:
8178: Add support for escaped hex chars in names, e.g. \x20 for space.
8179: [3c7be8e58a39]
8180:
8181: 2009-05-25 Todd C. Miller <Todd.Miller@courtesan.com>
8182:
8183: * LICENSE, Makefile.in, aclocal.m4, alias.c, auth/aix_auth.c,
8184: auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c, env.c,
8185: fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c, logging.c,
8186: logging.h, match.c, parse.c, parse.h, pathnames.h.in, pwutil.c,
8187: set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c, sudo_nss.h,
8188: sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod, testsudoers.c,
8189: tgetpass.c, toke.l, visudo.c:
8190: Update copyright years.
8191: [e615f676c764]
8192:
8193: 2009-05-24 Todd C. Miller <Todd.Miller@courtesan.com>
8194:
8195: * interfaces.c, lbuf.c:
8196: Minor fixes for Minix-3
8197: [898c510d23f9]
8198:
8199: 2009-05-22 Todd C. Miller <Todd.Miller@courtesan.com>
8200:
8201: * set_perms.c:
8202: Handle getgroups() returning 0. Also add missing check for
8203: HAVE_GETGROUPS.
8204: [d73b958f9ffd]
8205:
8206: 2009-05-19 Todd C. Miller <Todd.Miller@courtesan.com>
8207:
8208: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
8209: version.h, visudo.c:
8210: Replace version.h with PACKAGE_VERSION set via AC_INIT in configure.
8211: [5050579a264d]
8212:
8213: 2009-05-18 Todd C. Miller <Todd.Miller@courtesan.com>
8214:
8215: * set_perms.c:
8216: Remove group setting code in setusercontext case, we will do it
8217: ourselves later on in runas_setup. Set the gid after
8218: initgroups/setgroups is called, since on Mac OS X it seems to change
8219: the egid.
8220: [09dc21d8b42d]
8221:
8222: 2009-05-17 Todd C. Miller <Todd.Miller@courtesan.com>
8223:
8224: * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
8225: vasgroups.c:
8226: Initial bits of non-unix group support using Quest Authentication
8227: Services
8228: [1eecab0ff27e]
8229:
8230: * toke.c, toke.l:
8231: Accept %:foo as a non-Unix group
8232: [4c4b5dd899a6]
8233:
8234: * toke.c, toke.l:
8235: Allow user/group to be double quoted in the case of non-Unix groups
8236: which contain spaces.
8237: [47a3d568b7e8]
8238:
8239: 2009-05-11 Todd C. Miller <Todd.Miller@courtesan.com>
8240:
8241: * match.c:
8242: Don't allow the user to specify the default runas user if their
8243: sudoers entry only allows them to run as a group.
8244: [4d726177227c]
8245:
8246: 2009-05-10 Todd C. Miller <Todd.Miller@courtesan.com>
8247:
8248: * sudo.c:
8249: Must call audit_success before we change uids.
8250: [04a9e6ce6e55]
8251:
8252: * logging.c, set_perms.c, sudo.h, testsudoers.c:
8253: Add option for set_perm to not exit on failure and use this in the
8254: logging routines.
8255: [833dce7b7f42]
8256:
8257: * parse.c:
8258: In -l mode, if the user is only allowed to run as a group, display
8259: the user's name, not root's before the allowed group.
8260: [ef92ff99d265]
8261:
8262: * sudo.c:
8263: Fix -g mode, broken by rev 1.503 which had the side effect of
8264: setting the runas user to root unilaterally.
8265: [50a2f7df4385]
8266:
8267: 2009-05-08 Todd C. Miller <Todd.Miller@courtesan.com>
8268:
8269: * fileops.c:
8270: When unlocking a file with fcntl, use F_SETLK, not F_SETLKW.
8271: [30fbe832dcf3]
8272:
8273: * pwutil.c:
8274: Only cache by the method we fetched for pwd and grp lookups.
8275: Previously we cached both by namd and id but this can cause problems
8276: for entries that share the same id. Also add more info in the error
8277: message in case the insert fails (which should now be impossible).
8278: [ef95a4f0bab5]
8279:
8280: 2009-04-30 Todd C. Miller <Todd.Miller@courtesan.com>
8281:
8282: * sudoers.pod:
8283: Add a clarification from Nick Sieger
8284: [1eadad329561]
8285:
8286: 2009-04-25 Todd C. Miller <Todd.Miller@courtesan.com>
8287:
8288: * env.c:
8289: Inline the setting of the environment string.
8290: [9515d11c6295]
8291:
8292: 2009-04-24 Todd C. Miller <Todd.Miller@courtesan.com>
8293:
8294: * env.c:
8295: setenv(3) in Linux treats a NUL value as the empty string setenv(3)
8296: in BSD doesn't return an error if the name has '=' in it, it just
8297: treats the '=' as end of string.
8298: [941260bf94d2]
8299:
8300: 2009-04-22 Todd C. Miller <Todd.Miller@courtesan.com>
8301:
8302: * toke.c, toke.l:
8303: Not all systems have d_namlen
8304: [e377b18d8e2d]
8305:
8306: 2009-04-20 Todd C. Miller <Todd.Miller@courtesan.com>
8307:
8308: * sudoers.pod:
8309: Fix up some pod2html issues.
8310: [823a1f10ab60]
8311:
8312: 2009-04-19 Todd C. Miller <Todd.Miller@courtesan.com>
8313:
8314: * interfaces.c:
8315: Check for NULL ifa_addr and ifa_netmask. Adapted from a diff from
8316: Quest Software.
8317: [73de36653131]
8318:
8319: * sudoers.pod:
8320: Ignore files ending in '~' in sudo.d (emacs backup files)
8321: [7871fad702db]
8322:
8323: * toke.c, toke.l:
8324: Ignore files ending in '~' in sudo.d (emacs backup files)
8325: [53fded2a469f]
8326:
8327: 2009-04-18 Todd C. Miller <Todd.Miller@courtesan.com>
8328:
8329: * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l:
8330: For #includedir, ignore any file containing a dot
8331: [a7daa1bce6c2]
8332:
8333: * Makefile.in, version.h:
8334: Bump version
8335: [ef60f14ffc44]
8336:
8337: * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
8338: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
8339: visudo.c:
8340: Implement #includedir directive. Files in an includedir are not
8341: edited by visudo unless they contain a syntax error.
8342: [3923d85a6c79]
8343:
8344: * ChangeLog:
8345: sync
8346: [8741ed61a78b] [SUDO_1_7_1]
8347:
8348: * WHATSNEW:
8349: Forgot umask_override
8350: [7c86a21a5504]
8351:
8352: * ChangeLog, TODO:
8353: sync
8354: [57339ca6bccf]
8355:
8356: 2009-04-16 Todd C. Miller <Todd.Miller@courtesan.com>
8357:
8358: * visudo.c:
8359: Rewind stream if we fdopen sudoers since it may not be at the
8360: beginning. Set the keepopen flag on already-open files too so the
8361: lexer doesn't close them out from under us.
8362: [61292d819aff]
8363:
8364: * visudo.c:
8365: Print the proper file name when there is a parse error in an include
8366: file.
8367: [b0e85d4aedde]
8368:
8369: 2009-04-11 Todd C. Miller <Todd.Miller@courtesan.com>
8370:
8371: * WHATSNEW:
8372: Sync
8373: [997e5d485ea3]
8374:
8375: 2009-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
8376:
8377: * configure, configure.in:
8378: Fix a warning when --without-ldap is specified.
8379: [d91fd9481b30]
8380:
8381: 2009-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
8382:
8383: * alias.c, parse.h, visudo.c:
8384: Store aliases that we remove during check_aliases in a freelist and
8385: free them at the end so we don't leak memory.
8386: [805e2272f6a3]
8387:
8388: 2009-03-28 Todd C. Miller <Todd.Miller@courtesan.com>
8389:
8390: * visudo.c:
8391: Check aliases in -c mode too.
8392: [9199e188d9f2]
8393:
8394: * alias.c, parse.h, visudo.c:
8395: Make alias_remove return the alias struct instead of freeing it
8396: directly. Fixes a use after free in alias_remove_recursive, the only
8397: consumer.
8398: [a04b61804800]
8399:
8400: * alias.c, match.c, parse.c, parse.h, visudo.c:
8401: Rename find_alias -> alias_find for consistency.
8402: [48b0a82924f3]
8403:
8404: 2009-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
8405:
8406: * visudo.c:
8407: When checking for unused aliases, recurse if the alias points to
8408: another alias.
8409: [2d4d1a7f3a41]
8410:
8411: 2009-03-16 Todd C. Miller <Todd.Miller@courtesan.com>
8412:
8413: * ldap.c:
8414: Back out rev 1.105 for now. Real ldapux_client.conf support will be
8415: done later after some refactoring.
8416: [8ad72e69b277]
8417:
8418: 2009-03-14 Todd C. Miller <Todd.Miller@courtesan.com>
8419:
8420: * ldap.c:
8421: Treat ldap_hostport the same as "host" for ldapux.
8422: [3281dcc66da8]
8423:
8424: * configure, configure.in:
8425: Only check for ldap_sasl_interactive_bind_s if we can find sasl.h.
8426: Fixes compilation with ldapux.
8427: [ca1ed585ef0e]
8428:
8429: 2009-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
8430:
8431: * fileops.c:
8432: fix char subscript
8433: [41e51f080d00]
8434:
8435: 2009-03-11 Todd C. Miller <Todd.Miller@courtesan.com>
8436:
8437: * Makefile.in:
8438: remove errant carriage returns
8439: [e9e258a31c7b]
8440:
8441: * audit.c, env.c:
8442: fix K&R compilation
8443: [d182e8920f13]
8444:
8445: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
8446: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
8447: regen
8448: [791a5cbf04e5]
8449:
8450: 2009-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
8451:
8452: * config.h.in:
8453: Add missing HAVE_BSM_AUDIT
8454: [49ad1bb96f04]
8455:
8456: * WHATSNEW:
8457: Add 1.7.1 features
8458: [f107f1604c61]
8459:
8460: * INSTALL:
8461: Mention --with-netsvc
8462: [d1e90d147795]
8463:
8464: * sudoers.ldap.pod:
8465: Document netsvc.conf support
8466: [e78f8abce6af]
8467:
8468: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
8469: sudo_nss.h:
8470: Add support for AIX netsvc.conf (like nsswitch.conf).
8471: [1df56a84dee5]
8472:
8473: 2009-03-08 Todd C. Miller <Todd.Miller@courtesan.com>
8474:
8475: * config.h.in, configure, configure.in, env.c:
8476: Add --enable-env-debug flag to enable environment sanity checks.
8477: [128cdd8832e7]
8478:
8479: * sudoers.ldap.pod, sudoers.pod:
8480: Work around some pod2html issue.
8481: [e733b9609bd2]
8482:
8483: 2009-03-07 Todd C. Miller <Todd.Miller@courtesan.com>
8484:
8485: * env.c:
8486: Only sync environ for putenv, setenv, and unsetenv. We need to make
8487: sure that sudo_putenv and sudo_setenv only modify env.envp, not
8488: environ.
8489: [be3ac732243c]
8490:
8491: 2009-03-02 Todd C. Miller <Todd.Miller@courtesan.com>
8492:
8493: * env.c:
8494: Really fix UNSETENV_VOID
8495: [08ab7e882507]
8496:
8497: * env.c:
8498: Fix unsetenv when UNSETENV_VOID
8499: [d3038b3f2f15]
8500:
8501: * aclocal.m4, configure:
8502: Fix SUDO_FUNC_PUTENV_CONST
8503: [de35569c572b]
8504:
8505: * ldap.c:
8506: tivoli-based ldap does not have ldapssl_err2string
8507: [c63fd90d5e99]
8508:
8509: * configure:
8510: regen
8511: [f38f1ee828ad]
8512:
8513: 2009-03-01 Todd C. Miller <Todd.Miller@courtesan.com>
8514:
8515: * config.h.in, configure, configure.in, ldap.c:
8516: Add support for Tivoli-based LDAP start TLS as seen in AIX.
8517: Untested.
8518: [8f8771829f85]
8519:
8520: * env.c:
8521: Add sanity checks for setenv/unsetenv
8522: [adbd1d95856b]
8523:
8524: * Makefile.in:
8525: Include bsm_audit.h in the tarball
8526: [4a4aa02b2c32]
8527:
8528: * Makefile.in, version.h:
8529: bump version for sudo 1.7.1
8530: [362c71d21595]
8531:
8532: * aclocal.m4, auth/aix_auth.c, config.h.in, configure, configure.in,
8533: env.c, ldap.c, sudo.h:
8534: Replace sudo_setenv/sudo_unsetenv with calls to setenv/unsetenv and
8535: provide our own setenv/unsetenv/putenv that operates on own env
8536: pointer. Make sync_env() inline in setenv/unsetenv/putenv functions.
8537: [276edcd23032]
8538:
8539: 2009-02-25 Todd C. Miller <Todd.Miller@courtesan.com>
8540:
8541: * sudo.c:
8542: Make "sudoedit -h" work as expected
8543: [2bcbbb45d389]
8544:
8545: * auth/pam.c:
8546: Make sure def_prompt is always defined. This is a workaround for
8547: pam configs that prompt for a password in the session but don't have
8548: an auth line. A better fix is to expand the sudo prompt earlier and
8549: set def_prompt to that when initializing.
8550: [ee073c04aec3]
8551:
8552: * sudo.pod:
8553: Mention that the helper for -A may be graphical.
8554: [b64a940c4082]
8555:
8556: * TROUBLESHOOTING:
8557: Document what happens if there is no tty.
8558: [313d58a856a5]
8559:
8560: * sudo.c:
8561: cosmetic changes
8562: [894f5e3b0c3e]
8563:
8564: * term.c:
8565: Fix term_restore
8566: [6c6315ff14bc]
8567:
8568: * sudo.c:
8569: Fix "sudo -k" with no other args
8570: [59e94dc419c6]
8571:
8572: 2009-02-24 Todd C. Miller <Todd.Miller@courtesan.com>
8573:
8574: * check.c, sudo.c, sudo.pod, sudo_usage.h.in:
8575: Allow the -k flag to be specified in conjunction with a command or
8576: another option that may require authentication.
8577: [5960ff20355d]
8578:
8579: 2009-02-23 Todd C. Miller <Todd.Miller@courtesan.com>
8580:
8581: * configure, configure.in:
8582: Remove unneeded AC_CANONICAL_TARGET; from Diego E. 'Flameeyes'
8583: [e86ab69c4a57]
8584:
8585: * Makefile.in:
8586: Parallel make fix. From Diego E. 'Flameeyes'
8587: [1289d7ee27db]
8588:
8589: 2009-02-21 Todd C. Miller <Todd.Miller@courtesan.com>
8590:
8591: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
8592: Implement umask_override
8593: [8b87a3f7c5aa]
8594:
8595: * toke.c:
8596: regen
8597: [79d7ca9ac873]
8598:
8599: * sudoers.pod, toke.l, visudo.c:
8600: Implement %h escape in sudoers include filenames.
8601: [a7f288dd64f0]
8602:
8603: * audit.c:
8604: Need to include compat.h
8605: [c0dc07ce2f70]
8606:
8607: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h, sudo.c:
8608: Make audit_success and audit_failure generic functions in
8609: preparation for integrating linux audit support.
8610: [7df020a8fd6f]
8611:
8612: * term.c:
8613: remove duplicate include
8614: [1dfcd01a7e46]
8615:
8616: 2009-02-20 Todd C. Miller <Todd.Miller@courtesan.com>
8617:
8618: * bsm_audit.c:
8619: Add missing include
8620: [fb56e08c37ee]
8621:
8622: * sudo.c:
8623: May need to update the runas user after parsing command-based
8624: defaults.
8625: [246f130d7802]
8626:
8627: 2009-02-18 Todd C. Miller <Todd.Miller@courtesan.com>
8628:
8629: * glob.c:
8630: Add missing pair of braces introduced with character class support.
8631: [0e2afa2e03e9]
8632:
8633: 2009-02-15 Todd C. Miller <Todd.Miller@courtesan.com>
8634:
8635: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
8636: Rename pwstars to pwfeedback
8637: [a9f85a57ebac]
8638:
8639: 2009-02-11 Todd C. Miller <Todd.Miller@courtesan.com>
8640:
8641: * bsm_audit.c, bsm_audit.h:
8642: Add const to make MacOS happy.
8643: [4274432d6627]
8644:
8645: * Makefile.in, auth/sudo_auth.c, bsm_audit.c, bsm_audit.h, configure,
8646: configure.in, sudo.c:
8647: Add bsm audit support from Christian S.J. Peron
8648: [bef61cd8693d]
8649:
8650: * term.c:
8651: This is new code, no DARPA notice.
8652: [ec6ad09b9c23]
8653:
8654: 2009-02-10 Todd C. Miller <Todd.Miller@courtesan.com>
8655:
8656: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod:
8657: Rename simple_glob -> fast_glob
8658: [68d9ed803cc1]
8659:
8660: * match.c:
8661: g/c unused var
8662: [693fa0464eb6]
8663:
8664: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod:
8665: Add simple_glob option to use fnmatch() instead of glob(). This is
8666: useful when you need to specify patterns that reference network file
8667: systems.
8668: [77ba634f6949]
8669:
8670: * tgetpass.c:
8671: add term_* proto
8672: [520f5149d073]
8673:
8674: * sudoers.pod:
8675: mention glob()
8676: [ddaab8e03c52]
8677:
8678: 2009-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
8679:
8680: * tgetpass.c:
8681: Delete any pwstars we wrote after the user hits return. That way
8682: there is no record on screen as to the user's password length.
8683: [fae25cda762b]
8684:
8685: 2009-02-08 Todd C. Miller <Todd.Miller@courtesan.com>
8686:
8687: * term.c:
8688: Move terminal setting bits from tgetpass.c to term.c
8689: [03d43325ee99]
8690:
8691: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
8692: tgetpass.c:
8693: Add pwstars sudoers option that causes sudo to print a star every
8694: time the user presses a key.
8695: [7aab417e184d]
8696:
8697: 2009-02-03 Todd C. Miller <Todd.Miller@courtesan.com>
8698:
8699: * Makefile.in:
8700: Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in.
8701: [64f70e879816]
8702:
8703: 2009-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
8704:
8705: * ldap.c:
8706: For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
8707: indicate no limit. From Mark Janssen.
8708: [e2c5732d54f5]
8709:
8710: 2009-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
8711:
8712: * toke.c, toke.l:
8713: Comments that begin with #- should not be parsed as uids.
8714: [a72a50f12f41]
8715:
8716: 2009-01-09 Todd C. Miller <Todd.Miller@courtesan.com>
8717:
8718: * sudo.c:
8719: Do not try to set the close on exec flag if we didn't actually open
8720: sudoers.
8721: [ece3ca256904]
8722:
8723: 2008-12-19 Todd C. Miller <Todd.Miller@courtesan.com>
8724:
8725: * ChangeLog:
8726: regen
8727: [e11f0e4c1bdd] [SUDO_1_7_0]
8728:
8729: 2008-12-14 Todd C. Miller <Todd.Miller@courtesan.com>
8730:
8731: * TODO:
8732: sync
8733: [5b8954462bb3]
8734:
8735: 2008-12-09 Todd C. Miller <Todd.Miller@courtesan.com>
8736:
8737: * auth/pam.c:
8738: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user enters ^C at the
8739: password prompt.
8740: [8563601cb3de]
8741:
8742: * configure, configure.in:
8743: Don't try to build sudo_noexec.so on HP-UX with the bundled compiler
8744: as it cannot generate shared objects.
8745: [6d4262ef9669]
8746:
8747: * emul/charclass.h, glob.c, lbuf.c, tgetpass.c:
8748: K&R compilation fixes
8749: [77921678d17c]
8750:
8751: * parse.c:
8752: Use tq_foreach_fwd when checking pseudo-commands to make it clear
8753: that we are not short-circuiting on last match. When pwcheck is
8754: 'all', initialize nopass to TRUE and override it with the first non-
8755: TRUE entry.
8756: [96b209f4778f]
8757:
8758: 2008-12-08 Todd C. Miller <Todd.Miller@courtesan.com>
8759:
8760: * parse.c:
8761: Do not short circuit pseudo commands when we get a match since,
8762: depending on the settings, we may need to examine all commands for
8763: tags.
8764: [fdbaf89d6f35]
8765:
8766: 2008-12-03 Todd C. Miller <Todd.Miller@courtesan.com>
8767:
8768: * sudoers.cat, sudoers.man.in:
8769: regen
8770: [1ecce7c1b841]
8771:
8772: * sudoers.pod:
8773: hostnames may also contain wildcards
8774: [82b76695601c]
8775:
8776: * Makefile.in:
8777: remove stamp-* files and linux core files in clean target
8778: [22003f091467]
8779:
8780: 2008-12-02 Todd C. Miller <Todd.Miller@courtesan.com>
8781:
8782: * auth/sudo_auth.h, config.h.in, configure, configure.in:
8783: Use HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
8784: [6905bede8410]
8785:
8786: 2008-11-26 Todd C. Miller <Todd.Miller@courtesan.com>
8787:
8788: * configure, configure.in:
8789: correctly enable SIA on Digital UNIX
8790: [a51881d13995]
8791:
8792: * TODO:
8793: checkpoint
8794: [af0fe8d94d42]
8795:
8796: * ChangeLog:
8797: sync
8798: [831f623cf99c]
8799:
8800: 2008-11-25 Todd C. Miller <Todd.Miller@courtesan.com>
8801:
8802: * check.c, sudo.h, tgetpass.c:
8803: Even if neither stdin nor stdout are ttys we may still have /dev/tty
8804: available to us.
8805: [20f306ba883b]
8806:
8807: 2008-11-24 Todd C. Miller <Todd.Miller@courtesan.com>
8808:
8809: * sudoers.cat, sudoers.man.in:
8810: regen
8811: [76d97c4c318f]
8812:
8813: * sudoers.pod:
8814: fix typos; Markus Lude
8815: [bff8bc1e2066]
8816:
8817: * ChangeLog:
8818: sync
8819: [f108552531cd]
8820:
8821: * toke.c:
8822: regen
8823: [de828413c67e]
8824:
8825: * toke.l:
8826: Fix matching of a line that only consists of a comment char
8827: [09c953d8d5ca]
8828:
8829: 2008-11-22 Todd C. Miller <Todd.Miller@courtesan.com>
8830:
8831: * auth/pam.c:
8832: MacOS pam will retry conversation function if it fails so just treat
8833: ^C as an empty password.
8834: [d056058930bc]
8835:
8836: * visudo.c:
8837: When checking for alias use, also check defaults bindings.
8838: [2647f82c7dbd]
8839:
8840: * redblack.c:
8841: unused var
8842: [b7ff71c17c18]
8843:
8844: * redblack.c:
8845: Replace my rbdelete with Emin's version (which actually works ;-)
8846: [21b133dd0c72]
8847:
8848: 2008-11-19 Todd C. Miller <Todd.Miller@courtesan.com>
8849:
8850: * testsudoers.c:
8851: malloc debugging
8852: [0fb446fa3279]
8853:
8854: * visudo.c:
8855: malloc options in devel mode for visudo too
8856: [98d06c6afeef]
8857:
8858: 2008-11-18 Todd C. Miller <Todd.Miller@courtesan.com>
8859:
8860: * sudo.c:
8861: fix compilation on non-C99; from Theo
8862: [7c304e16c536]
8863:
8864: * visudo.c:
8865: fix check_aliases
8866: [83f30a3b1765]
8867:
8868: * alias.c:
8869: when destroying an alias, free the correct data pointer
8870: [6e1a8bd86c01]
8871:
8872: * auth/sudo_auth.h:
8873: add proto for aixauth_cleanup; from Dale King
8874: [eba94ffc8f63]
8875:
8876: 2008-11-15 Todd C. Miller <Todd.Miller@courtesan.com>
8877:
8878: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8879: visudo.man.in:
8880: regen
8881: [409fa57fff83]
8882:
8883: * sudo.pod, sudoers.pod, visudo.pod:
8884: standardize on the term 'option' for command line options (not flag)
8885: [228caefc2e36]
8886:
8887: 2008-11-14 Todd C. Miller <Todd.Miller@courtesan.com>
8888:
8889: * INSTALL:
8890: Add note on configuring HP-UX pam
8891: [f7674a581baf]
8892:
8893: 2008-11-11 Todd C. Miller <Todd.Miller@courtesan.com>
8894:
8895: * check.c, sudo.c:
8896: Move tty checks into check_user() so we only do them if we actually
8897: need a password.
8898: [7d997d7106d6]
8899:
8900: * sudo.c:
8901: Don't error out if no tty or askpass unless we actually need to
8902: authenticate.
8903: [9f23b83ed66c]
8904:
8905: 2008-11-10 Todd C. Miller <Todd.Miller@courtesan.com>
8906:
8907: * ChangeLog:
8908: regen
8909: [23f9aef32da6]
8910:
8911: * pathnames.h.in, sudo.c:
8912: s/overriden/overridden/; from Tobias Stoeckmann
8913: [9f7459a8fac5]
8914:
8915: 2008-11-09 Todd C. Miller <Todd.Miller@courtesan.com>
8916:
8917: * WHATSNEW, visudo.c:
8918: check sudoers owner and mode in strict mode
8919: [a3468c5ac1c4]
8920:
8921: * gram.c, toke.c:
8922: regen
8923: [7d6b515a5443]
8924:
8925: * sudo.man.in, sudoers.man.in, visudo.man.in:
8926: Update copyright years.
8927: [52d340cb8cba]
8928:
8929: * LICENSE, alias.c, alloc.c, auth/afs.c, auth/aix_auth.c,
8930: auth/bsdauth.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8931: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
8932: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
8933: gettime.c, gram.y, ins_csops.h, insults.h, interfaces.c,
8934: interfaces.h, lbuf.c, license.pod, list.c, logging.c, logging.h,
8935: parse.c, parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c,
8936: sudo.c, sudo.pod, sudo_edit.c, sudo_nss.h, sudoers.pod,
8937: testsudoers.c, toke.l, tsgetgrpw.c, utimes.c, version.h, visudo.c,
8938: visudo.pod, zero_bytes.c:
8939: Update copyright years.
8940: [b4e6bf2beafa]
8941:
8942: * emul/charclass.h, fnmatch.c, glob.c:
8943: add my copyright
8944: [28681385014a]
8945:
8946: 2008-11-08 Todd C. Miller <Todd.Miller@courtesan.com>
8947:
8948: * toke.c, toke.l:
8949: The loop in fill_cmnd() was going one byte too far past the end,
8950: resulting in a NUL being written immediately after the buffer end.
8951: [a5a49d603cd7]
8952:
8953: * UPGRADE, WHATSNEW:
8954: add sections on tgetpass changes
8955: [2e6929b6a102]
8956:
8957: * tgetpass.c:
8958: Treat EOF w/o newline as an error.
8959: [aa02b1db9240]
8960:
8961: 2008-11-07 Todd C. Miller <Todd.Miller@courtesan.com>
8962:
8963: * parse.c:
8964: Fix "sudo -v" when NOPASSWD is set.
8965: [f4914711ea80]
8966:
8967: * auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c,
8968: auth/sudo_auth.h:
8969: No longer treat an empty password at the prompt as special. To quit
8970: out of sudo you now need to hit ^C at the password prompt.
8971: [980f760ad419]
8972:
8973: * sudoers.cat, sudoers.man.in:
8974: regen
8975: [6ca21a2cd869]
8976:
8977: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
8978: Sudo will now refuse to run if no tty is present unless the new
8979: visiblepw sudoers flag is set.
8980: [0cc56943252e]
8981:
8982: 2008-11-06 Todd C. Miller <Todd.Miller@courtesan.com>
8983:
8984: * aix.c:
8985: just use RLIM_INFINITY for RLIM_SAVED_MAX if RLIM_SAVED_MAX not
8986: defined
8987: [24fc6f712d5c]
8988:
8989: * aix.c:
8990: fix fallback value for RLIM_SAVED_MAX
8991: [e09e04e1af89]
8992:
8993: * auth/aix_auth.c, auth/sudo_auth.h:
8994: Move clearing of AUTHSTATE into aixauth_cleanup.
8995: [e14ae7bd259c]
8996:
8997: * auth/aix_auth.c, env.c:
8998: Unset AUTHSTATE after calling authenticate() as it may not be
8999: correct for the user we are running the command as.
9000: [d14f68f1b0ab]
9001:
9002: * isblank.c:
9003: Add isblank() function for systems without it. Needed for POSIX
9004: character class matching in fnmatch.c and glob.c.
9005: [16cba30b283f]
9006:
9007: 2008-11-05 Todd C. Miller <Todd.Miller@courtesan.com>
9008:
9009: * TROUBLESHOOTING:
9010: expound on sudo and cd
9011: [8e0fa9033637]
9012:
9013: 2008-11-04 Todd C. Miller <Todd.Miller@courtesan.com>
9014:
9015: * ChangeLog:
9016: regen
9017: [40cf320a10fc]
9018:
9019: * sudoers.cat, sudoers.man.in:
9020: regen
9021: [7cac761ae2c6]
9022:
9023: * sudoers.pod:
9024: mention defauts parse order
9025: [4e2ce86d1394]
9026:
9027: 2008-11-03 Todd C. Miller <Todd.Miller@courtesan.com>
9028:
9029: * Makefile.in, aclocal.m4, compat.h, configure:
9030: Add isblank() function for systems without it. Needed for POSIX
9031: character class matching in fnmatch.c and glob.c.
9032: [a1ab55da8424]
9033:
9034: * Makefile.in:
9035: add emul/charclass.h to HDRS
9036: [7e8a019dcaa4]
9037:
9038: 2008-11-02 Todd C. Miller <Todd.Miller@courtesan.com>
9039:
9040: * TODO:
9041: checkpoint
9042: [afeb9bc1baed]
9043:
9044: * defaults.c, parse.c, testsudoers.c, visudo.c:
9045: Move update_defaults into defaults.c and call it properly from
9046: visudo and testsudoers.
9047: [f4dbb369461f]
9048:
9049: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c, tgetpass.c,
9050: tsgetgrpw.c:
9051: use zero_bytes() instead of memset() for consistency
9052: [4cee0465f4a8]
9053:
9054: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c, tgetpass.c,
9055: visudo.c:
9056: Zero out sigaction_t before use in case it has non-standard entries.
9057: [120092225459]
9058:
9059: * match.c:
9060: quiet gcc
9061: [098a1df49b23]
9062:
9063: * match.c:
9064: Short circuit glob() checks if basename(pattern) !=
9065: basename(command). Refactor code that checks for a command in a
9066: directory and use it in the glob case if the resolved pattern ends
9067: in a '/'.
9068: [3c46fd317acb]
9069:
9070: 2008-11-01 Todd C. Miller <Todd.Miller@courtesan.com>
9071:
9072: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c:
9073: Defer setting runas defaults until after runaspw/gr is setup.
9074: [12e75ee49c0c]
9075:
9076: 2008-10-29 Todd C. Miller <Todd.Miller@courtesan.com>
9077:
9078: * match.c, sudo.c, testsudoers.c:
9079: Use MAXHOSTNAMELEN+1 when allocating host/domain name since some
9080: systems do not include space for the NUL in the size. Also manually
9081: NUL-terminate buffer from gethostname() since POSIX is wishy-washy
9082: on this.
9083: [7266ab3296a3]
9084:
9085: 2008-10-26 Todd C. Miller <Todd.Miller@courtesan.com>
9086:
9087: * sudo.c, sudoers.pod:
9088: When setting the umask, use the union of the user's umask and the
9089: default value set in sudoers so that we never lower the user's umask
9090: when running a command.
9091: [4e804b004e38]
9092:
9093: * sudo.c:
9094: Don't try to read from a zero-length sudoers file. Remove the bogus
9095: Solaris work-around for EAGAIN. Since we now use fgetc() it should
9096: not be a problem.
9097: [bb8e5f68d944]
9098:
9099: 2008-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
9100:
9101: * parse.c:
9102: In update_defaults() check the return value of user*_matches against
9103: ALLOW so we don't inadvertantly match on UNSPEC.
9104: [4e422fa1527e]
9105:
9106: 2008-10-24 Todd C. Miller <Todd.Miller@courtesan.com>
9107:
9108: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
9109: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
9110: regen man pages; no more hyphenation
9111: [15de4fe2fe01]
9112:
9113: * sudo.c:
9114: Don't error out on a zero-length sudoers file. With the advent of
9115: #include the user could create a situation where sudo is unusable.
9116: [6eb461319fa5]
9117:
9118: 2008-10-23 Todd C. Miller <Todd.Miller@courtesan.com>
9119:
9120: * auth/kerb5.c, config.h.in, configure, configure.in:
9121: Newer heimdal has 2-argument krb5_get_init_creds_opt_free() like MIT
9122: krb5. Really old heimdal has no krb5_get_init_creds_opt_alloc() at
9123: all. Add configure tests to handle all the cases.
9124: [4b554a98470d]
9125:
9126: 2008-10-08 Todd C. Miller <Todd.Miller@courtesan.com>
9127:
9128: * sudo.pod:
9129: resort ENVIRONMENT
9130: [f4f20f40653e]
9131:
9132: * sudoers.pod:
9133: document sudoers_locale
9134: [0bffd2dbe806]
9135:
9136: * sudo.pod, sudo_edit.c:
9137: add SUDO_EDITOR variable that sudoedit uses in preference to VISUAL
9138: or EDITOR
9139: [0ef8cb248cee]
9140:
9141: * toke.c, toke.l:
9142: In fill_cmnd(), collapse any escaped sudo-specific characters.
9143: Allows character classes to be used in pathnames.
9144: [5685244c8e44]
9145:
9146: 2008-10-03 Todd C. Miller <Todd.Miller@courtesan.com>
9147:
9148: * lbuf.c:
9149: fix typo in non-C89 function declaration
9150: [99a7113b3a05]
9151:
9152: * sudoers.pod:
9153: Mention POSIX characters classes now that out fnmatch() and glob()
9154: support them.
9155: [9c916f1230c3]
9156:
9157: * sample.sudoers, sudoers.pod:
9158: Replace [A-z] (which won't match in UTF8) with [A-Za-z] which is
9159: locale agnostic.
9160: [a60a62bec244]
9161:
9162: * parse.h:
9163: use __signed char if we are going to assign a negative value since
9164: on Power, char is unsigned by default
9165: [2877b319df17]
9166:
9167: * config.h.in, configure, configure.in:
9168: Add tests for __signed char and signed char.
9169: [5eb874fdf1d4]
9170:
9171: * aix.c:
9172: Fix AIX limit setting. getuserattr() returns values in disk blocks
9173: rather than bytes. The default hard stack size in newer AIX is
9174: RLIM_SAVED_MAX. From Dale King.
9175: [3db67415ecc3]
9176:
9177: 2008-09-26 Todd C. Miller <Todd.Miller@courtesan.com>
9178:
9179: * emul/charclass.h, fnmatch.c, glob.c:
9180: Add character class support to included glob(3) and fnmatch(3).
9181: [6b5b4ad77899]
9182:
9183: 2008-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
9184:
9185: * emul/fnmatch.h:
9186: Remove UCB advertising clause and some compatibility defines.
9187: [2ade7bee74e1]
9188:
9189: 2008-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
9190:
9191: * sudo_edit.c:
9192: Check EDITOR/VISUAL to make sure sudoedit is not re-invoking itself
9193: or sudo. This allows one to set EDITOR to sudoedit without getting
9194: into an infinite loop of sudoedit running itself until the path gets
9195: too big.
9196: [aa49ab68f82d]
9197:
9198: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c:
9199: Add sudoers_locale Defaults option to override the default sudoers
9200: locale of "C".
9201: [0639886a35bf]
9202:
9203: 2008-09-13 Todd C. Miller <Todd.Miller@courtesan.com>
9204:
9205: * sudo.c:
9206: Set locale to system default except for during sudoers parse.
9207: [016dd2736728]
9208:
9209: 2008-09-12 Todd C. Miller <Todd.Miller@courtesan.com>
9210:
9211: * match.c:
9212: Redo change in 1.34 to use pointer arithmetic.
9213: [f9e7b63bb450]
9214:
9215: 2008-09-11 Todd C. Miller <Todd.Miller@courtesan.com>
9216:
9217: * match.c:
9218: Fix a dereference (read) of a freed pointer. Reported by Patrick
9219: Williams.
9220: [69877b633753]
9221:
9222: 2008-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
9223:
9224: * sudo.c:
9225: Set locale to "C" to avoid interpretation issues with character
9226: ranges in sudoers. May want to make the locale a sudoers option in
9227: the future.
9228: [098a95de1746]
9229:
9230: 2008-08-20 Todd C. Miller <Todd.Miller@courtesan.com>
9231:
9232: * config.h.in:
9233: we no longer use setproctitle
9234: [c7f20fb747ea]
9235:
9236: * sudo.h:
9237: remove #if 1
9238: [a368ee6816c6]
9239:
9240: * LICENSE, mkstemp.c:
9241: Use my replacement mkstemp() from the mktemp package.
9242: [d07c2beb0f9e]
9243:
9244: 2008-07-12 Todd C. Miller <Todd.Miller@courtesan.com>
9245:
9246: * gram.c:
9247: regen with yacc skeleton bug fixed
9248: [24784571cbb8]
9249:
9250: * sudoers.pod:
9251: Remove duplicate "as root". From Martin Toft.
9252: [97241acfee5e]
9253:
9254: 2008-07-02 Todd C. Miller <Todd.Miller@courtesan.com>
9255:
9256: * pwutil.c, sudo.c, sudo.h, testsudoers.c:
9257: Flesh out the fake passwd entry used for running commands as a uid
9258: not listed in the passwd database. Fixes an issue with some PAM
9259: modules.
9260: [a6648227f3f2]
9261:
9262: 2008-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
9263:
9264: * sudo.c:
9265: Error out in -i mode if the user has no shell. This can happen when
9266: running commands as a uid with no password entry.
9267: [0c174bef36ff]
9268:
9269: 2008-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
9270:
9271: * toke.c, toke.l:
9272: Better fix for line continuation inside double quotes. Now accepts
9273: whitespace between the backslash and the newline like the main
9274: lexer.
9275: [64efcdf86d31]
9276:
9277: 2008-06-25 Todd C. Miller <Todd.Miller@courtesan.com>
9278:
9279: * toke.c, toke.l:
9280: Fix line continuation in strings. It was only being honored if
9281: preceded by whitespace.
9282: [96c21271a3e4]
9283:
9284: 2008-06-22 Todd C. Miller <Todd.Miller@courtesan.com>
9285:
9286: * config.h.in, configure, configure.in, logging.c:
9287: Replace the double fork with a fork + daemonize.
9288: [328505441e67]
9289:
9290: 2008-06-21 Todd C. Miller <Todd.Miller@courtesan.com>
9291:
9292: * env.c, sudo.c:
9293: The -i flag should imply env_reset. This got broken in sudo 1.6.9.
9294: [3caedfeaec87]
9295:
9296: * logging.c, sudo.c, sudo_edit.c, visudo.c:
9297: Change how the mailer is waited for. Instead of having a SIGCHLD
9298: handler, use the double fork trick to orphan the child that opens
9299: the pipe to sendmail. Fixes a problem running su on some Linux
9300: distros.
9301: [b59ce60a393d]
9302:
9303: 2008-06-20 Todd C. Miller <Todd.Miller@courtesan.com>
9304:
9305: * configure, configure.in:
9306: Fix configure test for dirfd() on Linux where DIR is opaque.
9307: [b8f729cdfecc]
9308:
9309: 2008-06-17 Todd C. Miller <Todd.Miller@courtesan.com>
9310:
9311: * tgetpass.c:
9312: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If QNX still has
9313: this problem we'll need to revisit this again.
9314: [c17fee8ad530]
9315:
9316: 2008-06-11 Todd C. Miller <Todd.Miller@courtesan.com>
9317:
9318: * logging.c:
9319: Ignore SIGPIPE instead of blocking it when piping to the mailer. If
9320: we only block the signal it may be delivered later when we unblock.
9321: Also, there is no need to block SIGCHLD since we no longer do the
9322: double fork. The normal SIGCHLD handler is sufficient.
9323: [e94a49e992e5]
9324:
9325: 2008-06-08 Todd C. Miller <Todd.Miller@courtesan.com>
9326:
9327: * configure, configure.in:
9328: Add description for NO_PAM_SESSION, from a redhat patch.
9329: [b9e4c939ec09]
9330:
9331: 2008-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
9332:
9333: * sudo.cat, sudo.man.in, sudo.pod:
9334: Fix typos in -i usage
9335: [2d7ce5de0235]
9336:
9337: 2008-05-18 Todd C. Miller <Todd.Miller@courtesan.com>
9338:
9339: * configure, configure.in:
9340: Redo the test for dgettext() in a way that hopefully will work
9341: around the libintl_dgettext() undefined problem.
9342: [d27beb0cf85e]
9343:
9344: 2008-05-11 Todd C. Miller <Todd.Miller@courtesan.com>
9345:
9346: * schema.ActiveDirectory:
9347: change filename in comment
9348: [733da4ee9ac5]
9349:
9350: 2008-05-10 Todd C. Miller <Todd.Miller@courtesan.com>
9351:
9352: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
9353: sudoers.ldap.pod:
9354: Reference schema.ActiveDirectory
9355: [d6aec537800e]
9356:
9357: 2008-05-09 Todd C. Miller <Todd.Miller@courtesan.com>
9358:
9359: * schema.OpenLDAP, schema.iPlanet:
9360: Mark sudoRunAs as deprecated.
9361: [00c50df807af]
9362:
9363: * schema.ActiveDirectory:
9364: add sudoRunAsUser and sudoRunAsGroup
9365: [19bcce6f72fb]
9366:
9367: * schema.ActiveDirectory:
9368: Active Directory schema by Chantal Paradis and Eric Paquet
9369: [06a09c92c6a5]
9370:
9371: 2008-05-08 Todd C. Miller <Todd.Miller@courtesan.com>
9372:
9373: * parse.c:
9374: remove an XXX that was fixed
9375: [b88038062fa2]
9376:
9377: * ChangeLog:
9378: sync
9379: [8fc27c17270e]
9380:
9381: * parse.c:
9382: Initialize tags to UNSPEC instead of def_* in "sudo -l" mode. This
9383: fixes a problem where the tag value printed was influenced by
9384: defaults set in the first pass through the parser.
9385: [588ccd630367]
9386:
9387: 2008-05-04 Todd C. Miller <Todd.Miller@courtesan.com>
9388:
9389: * Makefile.in, sudo.psf:
9390: No point in packaging the TODO file
9391: [9590248fffe1]
9392:
9393: * ChangeLog:
9394: sync
9395: [152acf4c6813]
9396:
9397: 2008-05-03 Todd C. Miller <Todd.Miller@courtesan.com>
9398:
9399: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
9400: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod:
9401: Add env_file Defaults option that is similar to /etc/environment on
9402: some systems.
9403: [1daf53d51e18]
9404:
9405: 2008-05-02 Todd C. Miller <Todd.Miller@courtesan.com>
9406:
9407: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
9408: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in,
9409: version.h, visudo.cat, visudo.man.in:
9410: change version to 1.7.0
9411: [d41d126b9bd8]
9412:
9413: * UPGRADE:
9414: initial valgrind pass done
9415: [c59c3876d8ca]
9416:
9417: 2008-04-23 Todd C. Miller <Todd.Miller@courtesan.com>
9418:
9419: * ldap.c:
9420: Fix typo/think in sudo_ldap_read_secret() when storing the secret.
9421: [830d246c09b0]
9422:
9423: 2008-04-11 Todd C. Miller <Todd.Miller@courtesan.com>
9424:
9425: * ldap.c:
9426: define LDAPS_PORT if the system headers do not
9427: [247b12325701]
9428:
9429: 2008-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
9430:
9431: * gram.c, gram.y:
9432: Fix another memory leak in init_parser().
9433: [7bba47deba11]
9434:
9435: * configure, configure.in:
9436: There was a missing space before the ldap libs in SUDO_LIBS for some
9437: configurations.
9438: [7524cfc93759]
9439:
9440: * alias.c, gram.c, gram.y, toke.c, toke.l:
9441: Clean up some memory leaks pointed out by valgrind.
9442: [a965866ece1a]
9443:
9444: 2008-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
9445:
9446: * sudo.c:
9447: fix "sudo -s" broken by mode/flags breakout
9448: [acffe984d408]
9449:
9450: * configure, configure.in:
9451: remove duplicate check for dgettext
9452: [58145529133c]
9453:
9454: 2008-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
9455:
9456: * aix.c:
9457: Fall back to default stanza if no user-specific limit is found.
9458: [7b8cb29123ee]
9459:
9460: 2008-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
9461:
9462: * snprintf.c:
9463: include stdint.h if present
9464: [f0ec38529306]
9465:
9466: * snprintf.c:
9467: Use LLONG_MAX, not the old QUAD_MAX
9468: [01041ce508fb]
9469:
9470: 2008-04-01 Todd C. Miller <Todd.Miller@courtesan.com>
9471:
9472: * sudoers.ldap.pod:
9473: fix cut and pasto
9474: [34240fdef5ab]
9475:
9476: 2008-03-31 Todd C. Miller <Todd.Miller@courtesan.com>
9477:
9478: * pwutil.c:
9479: Add #ifdef PURITY
9480: [ce1b571ad526]
9481:
9482: 2008-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
9483:
9484: * auth/bsdauth.c:
9485: remove useless cast
9486: [494f8a862e1d]
9487:
9488: 2008-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
9489:
9490: * ChangeLog:
9491: sync
9492: [f5c97ffaabcc]
9493:
9494: * TODO:
9495: sync
9496: [96ff1c44c182]
9497:
9498: * sudo.h:
9499: Split MODE_* defines into primary and flags.
9500: [c02ee3027cb9]
9501:
9502: 2008-03-26 Todd C. Miller <Todd.Miller@courtesan.com>
9503:
9504: * aix.c:
9505: It turns out the logic for getting AIX limits is more convoluted
9506: than I realized and differs depending on whether the soft and/or
9507: hard limits are defined.
9508: [cf8d3f85d395]
9509:
9510: 2008-03-23 Todd C. Miller <Todd.Miller@courtesan.com>
9511:
9512: * Makefile.in, configure, configure.in:
9513: Back out AIX-specific change to set the sudo_noexec path to the .a
9514: file, we do really want to use the .so file. Since libtool doesn't
9515: do that correctly, just install the .so file ourselves in the
9516: Makefile.
9517: [05c6f33177d9]
9518:
9519: * install-sh:
9520: If the file given to install is a path, only use the basename of the
9521: file when building the destination path.
9522: [695ba4e429ce]
9523:
9524: 2008-03-18 Todd C. Miller <Todd.Miller@courtesan.com>
9525:
9526: * sudo.c:
9527: parse_args() cleanup: Sort command line options in the getopt()
9528: switch The -U option requires a parameter Normalize a few ISSET
9529: calls Split mode into mode and flags and retire the now-obsolete
9530: excl variable
9531: [0d156835f861]
9532:
9533: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod,
9534: sudo_usage.h.in:
9535: Add -n (non-interactive) flag.
9536: [e3e50400d32d]
9537:
9538: * sudo.c:
9539: Move version printing, etc. into a separate function.
9540: [18c91b476e2c]
9541:
9542: * sudo.c:
9543: Don't try to cleanup nsswitch if it has not been initialized.
9544: [aeb1ca1b399d]
9545:
9546: 2008-03-17 Todd C. Miller <Todd.Miller@courtesan.com>
9547:
9548: * logging.c:
9549: Block SIGPIPE in send_mail() so sudo is not killed by a problem
9550: executing the mailer.
9551: [f130e7924cca]
9552:
9553: 2008-03-14 Todd C. Miller <Todd.Miller@courtesan.com>
9554:
9555: * configure, configure.in:
9556: AIX shared libs end in .a, not .so.
9557: [a5deb07020d8]
9558:
9559: 2008-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
9560:
9561: * env.c:
9562: Preserve HOME by default too. Matches documentation and previous
9563: behavior.
9564: [c16f17f1047c]
9565:
9566: 2008-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
9567:
9568: * sudo.c:
9569: Use getopt() to parse the command line. We need to be able to
9570: intersperse env variables and options yet still honor "--"" which
9571: complicates things slightly.
9572: [60f271ce5c16]
9573:
9574: 2008-03-06 Todd C. Miller <Todd.Miller@courtesan.com>
9575:
9576: * ChangeLog:
9577: sync
9578: [685e67964eda]
9579:
9580: * acsite.m4, configure, ltmain.sh:
9581: update to libtool-1.5.26
9582: [4c9a8c3d3b40]
9583:
9584: * config.guess, config.sub:
9585: update from libtool-1.5.26 distribution
9586: [c6641aef2527]
9587:
9588: * aix.c, sudo.h:
9589: attempt to fix compilation errors on AIX
9590: [edb13e5b2184]
9591:
9592: * Makefile.in:
9593: fix typo in last commit
9594: [25ba7f7ceae4]
9595:
9596: * Makefile.in:
9597: Add WHATSNEW file to the distribution
9598: [213f4115de8f]
9599:
9600: * visudo.c:
9601: use warningx instead of fprintf(stderr, ...)
9602: [a3494b8ccb19]
9603:
9604: * list.c:
9605: add DEBUG to list2tq
9606: [115d24a3000c]
9607:
9608: * ChangeLog, TODO:
9609: sync
9610: [60e6f4d1fac0]
9611:
9612: * WHATSNEW:
9613: mention mailfrom
9614: [e2498f9e18d6]
9615:
9616: * Makefile.in, aix.c, config.h.in, configure, configure.in,
9617: set_perms.c, sudo.h:
9618: Add aix_setlimits() to set resource limits on AIX using a
9619: combination of getuserattr() and setrlimit(). Currently untested.
9620: [9b1441fd89ca]
9621:
9622: 2008-03-05 Todd C. Miller <Todd.Miller@courtesan.com>
9623:
9624: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
9625: sudoers.man.in, sudoers.pod:
9626: Add mailfrom Defaults option that sets the value of the From: field
9627: in the warning/error mail. If unset the login name of the invoking
9628: user is used.
9629: [029b9f05d3d9]
9630:
9631: * defaults.c:
9632: store a copy of _PATH_SUDO_ASKPASS in def_askpass that is freeable
9633: [a90e407d5e00]
9634:
9635: * gram.c, gram.y:
9636: When adding a default, only call list2tq() once to do the list to tq
9637: conversion. It is not legal to call list2tq multiple times on the
9638: same list since list2tq consumes and modifies the list argument.
9639: [fbc25d245c4a]
9640:
9641: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
9642: comment out XXXs for now
9643: [595a1d43309d]
9644:
9645: * WHATSNEW:
9646: mention askpass
9647: [b993e0837c22]
9648:
9649: 2008-03-04 Todd C. Miller <Todd.Miller@courtesan.com>
9650:
9651: * sudo.c:
9652: Error out if both -A and -S are specified Error out if -A is
9653: specified but no askpass is configured
9654: [24f1df2638f6]
9655:
9656: * configure, configure.in:
9657: we are not going to ship a sudo-specific askpass
9658: [61949e7a3943]
9659:
9660: 2008-03-03 Todd C. Miller <Todd.Miller@courtesan.com>
9661:
9662: * sudo.h:
9663: fix definition of TGP_ASKPASS
9664: [0447c57ba4c3]
9665:
9666: * def_data.c, def_data.in:
9667: make askpass boolean-capable
9668: [e0885893a325]
9669:
9670: * INSTALL:
9671: document --with-askpass
9672: [c76e15ba97cf]
9673:
9674: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
9675: sudoers.man.in, visudo.cat:
9676: regen
9677: [8d16242980b7]
9678:
9679: 2008-03-02 Todd C. Miller <Todd.Miller@courtesan.com>
9680:
9681: * sudo.pod, sudo_usage.h.in, sudoers.pod:
9682: document -A and askpass
9683: [02c07505a78c]
9684:
9685: * auth/sudo_auth.c, check.c, configure, configure.in, def_data.c,
9686: def_data.h, def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
9687: sudo_usage.h.in, tgetpass.c:
9688: Add support for running a helper program to read the password when
9689: no tty is present (or when specified with the -A flag). TODO: docs.
9690: [05780f5f71fd]
9691:
9692: * def_data.c, def_data.in:
9693: add missing printf format to SELinux role and type strings
9694: [2b32774715e7]
9695:
9696: 2008-02-27 Todd C. Miller <Todd.Miller@courtesan.com>
9697:
9698: * INSTALL, configure, configure.in:
9699: Disable use of gss_krb5_ccache_name() by default and add
9700: --enable-gss-krb5-ccache-name configure option to enable it. It
9701: seems that gss_krb5_ccache_name() doesn't work properly with some
9702: combinations of Heimdal and OpenLDAP.
9703: [f61ebd3b19bd]
9704:
9705: 2008-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
9706:
9707: * selinux.c:
9708: Ignore setexeccon() failing in permissive mode. Also add a call to
9709: setkeycreatecon() (though this is probably insufficient). From Dan
9710: Walsh.
9711: [52564fc1c069]
9712:
9713: * auth/pam.c:
9714: Only set std_prompt for the PAM_PROMPT_* cases. The conversation
9715: function may be called for non-password reading purposes so we must
9716: be careful not to use def_prompt in cases where it may not be set.
9717: [29d88ca575ba]
9718:
9719: 2008-02-20 Todd C. Miller <Todd.Miller@courtesan.com>
9720:
9721: * selinux.c:
9722: Don't free the new tty context, we need to keep it around when we
9723: restore the tty context after the command completes
9724: [5b4bd39b6ea8]
9725:
9726: 2008-02-19 Todd C. Miller <Todd.Miller@courtesan.com>
9727:
9728: * selinux.c:
9729: s/newrole/sudo/
9730: [21b8a96ff8df]
9731:
9732: * sudo.man.pl, sudo.pod:
9733: Only put login_cap(3) in SEE ALSO section if we have login.conf
9734: support
9735: [05250ddff2c0]
9736:
9737: 2008-02-18 Todd C. Miller <Todd.Miller@courtesan.com>
9738:
9739: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
9740: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
9741: regen
9742: [301e5c5ccdbe]
9743:
9744: * sudoers.pod:
9745: Substitute in comment characters for lines partaining to login.conf,
9746: BSD auth and SELinux and only enable them if pertinent.
9747: [c1c98fa163ce]
9748:
9749: * sudoers.man.pl:
9750: Substitute in comment characters for lines partaining to login.conf,
9751: BSD auth and SELinux and only enable them if pertinent.
9752: [6c88f30b878a]
9753:
9754: * sudo.pod:
9755: Substitute in comment characters for lines partaining to login.conf,
9756: BSD auth and SELinux and only enable them if pertinent.
9757: [acdbdfd24e1d]
9758:
9759: * sudo.man.pl:
9760: Substitute in comment characters for lines partaining to login.conf,
9761: BSD auth and SELinux and only enable them if pertinent.
9762: [0c56d4750ac3]
9763:
9764: * Makefile.in, configure, configure.in:
9765: Substitute in comment characters for lines partaining to login.conf,
9766: BSD auth and SELinux and only enable them if pertinent.
9767: [9a02bd6a6658]
9768:
9769: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
9770: Remove the =cut on the first line (above the copyright notice) to
9771: quiet pod2man. Also remove the hackery in the FILES section and
9772: just deal with the fact that there will a newline between each
9773: pathname.
9774: [2ac1ab191835]
9775:
9776: 2008-02-17 Todd C. Miller <Todd.Miller@courtesan.com>
9777:
9778: * Makefile.in:
9779: run sudo.man.pl when generating sudo.man.in
9780: [859727369168]
9781:
9782: * configure, configure.in, sudo.man.pl:
9783: comment out SELinux manual bits unless --with-selinux was specified
9784: [97ff4212b649]
9785:
9786: * sudoers.pod:
9787: document role and type defaults for SELinux
9788: [870f303366b3]
9789:
9790: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
9791: Document "sudo -ll" and make "sudo -l -l" be equivalent.
9792: [3ce6dc429ea3]
9793:
9794: 2008-02-15 Todd C. Miller <Todd.Miller@courtesan.com>
9795:
9796: * configure, configure.in:
9797: Treat k*bsd*-gnu like Linux, not BSD. Fixes compilation problems on
9798: Debian GNU/kFreeBSD.
9799: [c4efa567a328]
9800:
9801: 2008-02-13 Todd C. Miller <Todd.Miller@courtesan.com>
9802:
9803: * auth/kerb5.c:
9804: Avoid Heimdal'isms introduced in the rev 1.32 rewrite of
9805: verify_krb_v5_tgt()
9806: [f80538e5a6fa]
9807:
9808: * logging.c, logging.h, sudo.c:
9809: Remove dependence on VALIDATE_NOT_OK in logging functions. Split
9810: log_auth() into log_allowed() and log_denial() Replace mail_auth()
9811: with should_mail() and a call to send_mail()
9812: [58aac9997557]
9813:
9814: 2008-02-10 Todd C. Miller <Todd.Miller@courtesan.com>
9815:
9816: * ldap.c:
9817: Add debugging so we can tell if the krb5 ccache is accessible
9818: [c679322527bb]
9819:
9820: * INSTALL:
9821: mention --with-selinux
9822: [9efbe0b52194]
9823:
9824: 2008-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
9825:
9826: * configure:
9827: regen
9828: [467a834f867c]
9829:
9830: * selinux.c:
9831: add Sudo tag
9832: [d004ee669bed]
9833:
9834: * sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod, sudo_usage.h.in,
9835: sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod,
9836: testsudoers.c, toke.c, toke.l:
9837: Add support for SELinux RBAC. Sudoers entries may specify a role
9838: and type. There are also role and type defaults that may be used.
9839: To make sure a transition occurs, when using RBAC commands are
9840: executed via the new sesh binary. Based on initial changes from Dan
9841: Walsh.
9842: [1d4abfe2c004]
9843:
9844: * sesh.c:
9845: Add support for SELinux RBAC. Sudoers entries may specify a role
9846: and type. There are also role and type defaults that may be used.
9847: To make sure a transition occurs, when using RBAC commands are
9848: executed via the new sesh binary. Based on initial changes from Dan
9849: Walsh.
9850: [1e3b395ce049]
9851:
9852: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
9853: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
9854: pathnames.h.in, selinux.c:
9855: Add support for SELinux RBAC. Sudoers entries may specify a role
9856: and type. There are also role and type defaults that may be used.
9857: To make sure a transition occurs, when using RBAC commands are
9858: executed via the new sesh binary. Based on initial changes from Dan
9859: Walsh.
9860: [6b421948286e]
9861:
9862: 2008-02-08 Todd C. Miller <Todd.Miller@courtesan.com>
9863:
9864: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c:
9865: Add long list (sudo -ll) support for printing verbose LDAP and
9866: sudoers file entries. Still need to update manual.
9867: [2875be37935c]
9868:
9869: 2008-02-03 Todd C. Miller <Todd.Miller@courtesan.com>
9870:
9871: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h:
9872: Unify the -l output for file and ldap based sudoers and use lbufs
9873: for both. The ldap output does not currently include options that
9874: cannot be represented as tags. This will be remedied in a long list
9875: output mode to come.
9876: [b2e429456596]
9877:
9878: 2008-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
9879:
9880: * set_perms.c:
9881: Use a specific error message for errno == EAGAIN when setuid() et al
9882: fails. On Linux systems setuid() will fail with errno set to EAGAIN
9883: if changing to the new uid would result in a resource limit
9884: violation.
9885: [08d0aecd9f03]
9886:
9887: * sudo.c:
9888: Unlimit nproc on Linux systems where calling the setuid() family of
9889: syscalls causes the nroc resource limit to be checked. The limits
9890: will be reset by pam_limits.so when PAM is used. In the non-PAM
9891: case the nproc limit will remain unlimited but there doesn't seem to
9892: be a way around that other than having sudo parse
9893: /etc/security/limits.conf directly.
9894: [df024b415a8d]
9895:
9896: * env.c, sudo.c, sudo.pod:
9897: Only read /etc/environment on Linux and AIX
9898: [90669e2aefdb]
9899:
9900: 2008-01-23 Todd C. Miller <Todd.Miller@courtesan.com>
9901:
9902: * configure, configure.in:
9903: Use SUDO_DEFINE_UNQUOTED instead of AC_DEFINE_UNQUOTED to prevent
9904: ldap.conf and ldap.secret paths from going into config.h. Avoid
9905: single quotes in variable expansion when using SUDO_DEFINE_UNQUOTED
9906: since in some versions of bash they will end up literally in the
9907: resulting define.
9908: [25390f3ef10a]
9909:
9910: 2008-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
9911:
9912: * README.LDAP:
9913: mention --with-nsswitch=no
9914: [c509df927263]
9915:
9916: * configure, configure.in:
9917: ldap_ssl.h depends on ldap.h being included first
9918: [d96d90e9b21f]
9919:
9920: * config.h.in, configure, configure.in, ldap.c:
9921: Include ldap_ssl.h if we can find it. Needed for the
9922: ldapssl_set_strength defines on HP-UX at least.
9923: [9e530470948a]
9924:
9925: * sudoers.ldap.pod:
9926: sync
9927: [b9d101f4673a]
9928:
9929: * TODO:
9930: sync
9931: [2ce951b2ecd0]
9932:
9933: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
9934: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
9935: regen
9936: [b61d793987e0]
9937:
9938: * Makefile.in:
9939: Use 78n line length when formatting cat pages.
9940: [761bee9d5759]
9941:
9942: * README.LDAP:
9943: Remove redundant info that is now in sudoers.ldap.pod
9944: [01828dcce59e]
9945:
9946: 2008-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
9947:
9948: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
9949: Reorganize the first section a bit. Substitute the proper path for
9950: /etc/sudoers.
9951: [11ae165e065d]
9952:
9953: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
9954: Substitute values for ldap.conf, ldap.secret and nsswitch.conf Move
9955: schema into EXAMPLES
9956: [ab6509d1dde7]
9957:
9958: * configure, configure.in:
9959: Substitute values for ldap.conf, ldap.secret and nsswitch.conf into
9960: sudoers.ldap.man.
9961: [6e689972f465]
9962:
9963: * configure, configure.in:
9964: substitute for sudoers.ldap.man
9965: [5a4a25766dee]
9966:
9967: * Makefile.in:
9968: Fix cut & pasto introduced when adding sudoers.ldap man page.
9969: [a7b069af8894]
9970:
9971: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
9972: Fill in some of the missing pieces. Still needs some reorganization
9973: and editing.
9974: [5e7331722166]
9975:
9976: 2008-01-19 Todd C. Miller <Todd.Miller@courtesan.com>
9977:
9978: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
9979: sudoers.ldap.pod:
9980: Beginnings of a sudoers.ldap man page. Currently, much of the
9981: information is adapted from README.LDAP.
9982: [aad28c8a922d]
9983:
9984: 2008-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
9985:
9986: * pwutil.c:
9987: When copying gr_mem we must guarantee that the storage space for
9988: gr_mem is properly aligned. The simplest way to do this is to
9989: simply store gr_mem directly after struct group. This is not a
9990: problem for gr_passwd or gr_name as they are simple strings.
9991: [af58fc76f1ed]
9992:
9993: * ldap.c:
9994: Fix a typo/thinko in one of the calls to
9995: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
9996: [70b2eb8097f5]
9997:
9998: 2008-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
9999:
10000: * config.h.in, configure, configure.in, ldap.c:
10001: include <mps/ldap_ssl.h> in ldap.c if available
10002: [34346206ef16]
10003:
10004: 2008-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
10005:
10006: * gram.c, gram.y:
10007: Make sure we define SIZE_MAX for yacc's skeleton.c
10008: [d8a45c7a3c42]
10009:
10010: * tgetpass.c:
10011: Use TCSAFLUSH when restoring terminal settings (and echo) to
10012: guarantee that any pending output is discarded
10013: [549a184479e5]
10014:
10015: 2008-01-15 Todd C. Miller <Todd.Miller@courtesan.com>
10016:
10017: * sudoers:
10018: no longer need to specify SETENV when user has sudo ALL
10019: [3051b41f8032]
10020:
10021: * testsudoers.c:
10022: sync user_args size calculation with sudo.c Add -g group option,
10023: renaming old -g to -G Add set_runasgr() and set_runaspw() and use
10024: them
10025: [0850325180f0]
10026:
10027: * sudo.c, sudo.h:
10028: Make set_runaspw static void
10029: [5d44d7a340ce]
10030:
10031: * testsudoers.c, visudo.c:
10032: g/c set_runaspw stub
10033: [79ebb5e2cc38]
10034:
10035: * configure, configure.in:
10036: Don't add -llber twice.
10037: [4356d302eef4]
10038:
10039: 2008-01-14 Todd C. Miller <Todd.Miller@courtesan.com>
10040:
10041: * ldap.c:
10042: fix typo
10043: [249cecc557e9]
10044:
10045: 2008-01-13 Todd C. Miller <Todd.Miller@courtesan.com>
10046:
10047: * gram.c:
10048: regen
10049: [2f94ea375b67]
10050:
10051: * configure, configure.in:
10052: Fix check that determines whether -llber is required.
10053: [6afa99523379]
10054:
10055: * README.LDAP, config.h.in, configure, configure.in, ldap.c:
10056: For netscape-based LDAP, use ldapssl_set_strength() to implement the
10057: checkpeer ldap.conf option.
10058: [16ae24d73795]
10059:
10060: * auth/kerb5.c:
10061: Delay krb5_cc_initialize() until we actually need to use the cred
10062: cache, which is what krb5_verify_user() does. Better cleanup on
10063: failure.
10064: [d12e5f1695b8]
10065:
10066: 2008-01-12 Todd C. Miller <Todd.Miller@courtesan.com>
10067:
10068: * auth/kerb5.c:
10069: Rewrite verify_krb_v5_tgt() based on what heimdal's
10070: krb5_verify_user() does.
10071: [05b5815f86c9]
10072:
10073: 2008-01-09 Todd C. Miller <Todd.Miller@courtesan.com>
10074:
10075: * gram.c:
10076: The U suffix on constants is an ANSI feature
10077: [c6dfce3167f1]
10078:
10079: * configure, configure.in:
10080: Add check for ber_set_option() in -llber
10081: [43d0c0566074]
10082:
10083: 2008-01-07 Todd C. Miller <Todd.Miller@courtesan.com>
10084:
10085: * README.LDAP:
10086: default if no nsswitch.conf is files only
10087: [c13001d9c998]
10088:
10089: 2008-01-06 Todd C. Miller <Todd.Miller@courtesan.com>
10090:
10091: * README.LDAP:
10092: don't tell people to mail aaron about LDAP stuff
10093: [8165ec1ef0c6]
10094:
10095: * README.LDAP:
10096: timelimit and bind_timelimit
10097: [44f74cbed167]
10098:
10099: * ChangeLog:
10100: sync
10101: [aba1a0ab02bd]
10102:
10103: * ldap.c:
10104: Move ldap.secret reading into a separate function.
10105: [1948acc9f7a4]
10106:
10107: * check.c:
10108: user_runas -> runas_pw
10109: [334490fc2bae]
10110:
10111: 2008-01-05 Todd C. Miller <Todd.Miller@courtesan.com>
10112:
10113: * TODO:
10114: sync
10115: [c7b165cc47c6]
10116:
10117: * check.c, sudo.pod, sudoers.pod:
10118: Add and document the %p escape in the password prompt. Based on a
10119: patch from Patrick Schoenfeld.
10120: [3972d4f31ffa]
10121:
10122: * ldap.c:
10123: Check strlcpy() return values.
10124: [9b42f3ae8ff1]
10125:
10126: * ldap.c:
10127: refactor ldap binding code into sudo_ldap_bind_s()
10128: [cb0c66a4d955]
10129:
10130: * README.LDAP:
10131: Make it clear that host and uri can take multiple parameters. URI is
10132: now supported for more than just openldap nsswitch.conf does't
10133: accept "compat"
10134: [f610dea656d6]
10135:
10136: * sudo.c:
10137: comment cleanup and update (c) year
10138: [6cd69c810ca5]
10139:
10140: * parse.c, sudo_nss.c:
10141: Move display_privs() and display_cmnd() from parse.c to sudo_nss.c.
10142: This should make it possible to build an LDAP-only sudo binary.
10143: [61c3f27066a0]
10144:
10145: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h:
10146: Improve chaining of multiple sudoers sources by passing in the
10147: previous return value to the next in the chain
10148: [2c0b722b1b2d]
10149:
10150: * gram.y:
10151: Free up parser data structures in sudo_file_close().
10152: [2251531d4519]
10153:
10154: * gram.c, parse.c:
10155: Free up parser data structures in sudo_file_close().
10156: [8371f130f401]
10157:
10158: * ldap.c:
10159: Parse uri ourself if no ldap_initialize() is present Use
10160: ldap_create() instead of deprecated ldap_init() Use
10161: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
10162: [85d3825b1953]
10163:
10164: * config.h.in, configure, configure.in:
10165: Add check for ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from
10166: CFLAGS
10167: [240524512bc5]
10168:
10169: 2008-01-04 Todd C. Miller <Todd.Miller@courtesan.com>
10170:
10171: * config.h.in, configure, configure.in:
10172: add check for ldap_create
10173: [3089badd73b8]
10174:
10175: 2008-01-03 Todd C. Miller <Todd.Miller@courtesan.com>
10176:
10177: * config.h.in, configure, configure.in, ldap.c:
10178: Add sudo_ldap_get_first_rdn() to return the first rdn of an entry's
10179: dn using the mechanism appropriate for the LDAP SDK in use. Use
10180: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s(). Emulate
10181: ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's without them.
10182: [6deeca3d00cc]
10183:
10184: * lbuf.c:
10185: include unistd.h
10186: [8419ed0bae7f]
10187:
10188: * config.h.in, configure.in:
10189: fix typo in mtim_getnsec
10190: [2d5f21230a60]
10191:
10192: 2008-01-02 Todd C. Miller <Todd.Miller@courtesan.com>
10193:
10194: * config.h.in, configure, configure.in:
10195: add check for st__tim in struct stat as used by SCO
10196: [587060ea2a89]
10197:
10198: * ldap.c:
10199: use ldap_search_ext_s instead of deprecated ldap_search_s
10200: [5fc44fe3b44c]
10201:
10202: * Makefile.in, TODO, sudo.cat, sudo.man.in:
10203: add sudo_nss.h to HDRS
10204: [86f01a70ff29]
10205:
10206: * ldap.c:
10207: Replace deprecated ldap_explode_dn() with calls to ldap_str2dn() and
10208: ldap_rdn2str().
10209: [aa217002cfae]
10210:
10211: 2008-01-01 Todd C. Miller <Todd.Miller@courtesan.com>
10212:
10213: * ldap.c:
10214: Use ldap_get_values_len()/ldap_value_free_len() instead of the
10215: deprecated ldap_get_values()/ldap_value_free().
10216: [e22dceb85e57]
10217:
10218: * ChangeLog:
10219: sync
10220: [adad27b36107]
10221:
10222: * TODO:
10223: sync
10224: [c449eb47e0ef]
10225:
10226: * gettime.c, sudo.c:
10227: Remove some already fixed XXXs
10228: [532788d0e6da]
10229:
10230: * ldap.c:
10231: Same return value as non-existent sudoers if LDAP was unable to
10232: connect.
10233: [5819810e8e4e]
10234:
10235: * sudo.pod:
10236: mention /etc/environment
10237: [ea8e6102f853]
10238:
10239: * README.LDAP, UPGRADE, WHATSNEW:
10240: Update to reflect recent developments.
10241: [ed1fb026fe77]
10242:
10243: * sudo.c:
10244: Print nsswitch.conf, ldap.conf and ldap.secret paths in -V output.
10245: [55b68a58260d]
10246:
10247: * ldap.c:
10248: When building up a query don't list groups in the aux group vector
10249: that are the same as the passwd file group. On most systems the
10250: first gid in the group vector is the same as the passwd entry gid.
10251: [4bb51e297e0d]
10252:
10253: * env.c, ldap.c:
10254: Define LDAPNOINIT before calling ldap_init(), etc. to disable user
10255: ldaprc and system defaults that could affect how LDAP works.
10256: [ce5036440db2]
10257:
10258: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
10259: sudo_nss.c, sudo_nss.h:
10260: Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users
10261: to specify nsswitch.conf path or disable it. If --with-nsswitch=no
10262: but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf-
10263: file and --with-ldap-secret-file
10264: [ea5d7704381f]
10265:
10266: * parse.c:
10267: Honor def_ignore_local_sudoers
10268: [f38e1121fae1]
10269:
10270: 2007-12-31 Todd C. Miller <Todd.Miller@courtesan.com>
10271:
10272: * ldap.c:
10273: no longer need to check def_ignore_local_sudoers here
10274: [fce2a72f96fb]
10275:
10276: * parse.c:
10277: Refactor group vector resetting into a function and also call it
10278: from display_cmnd. Stop after the first sucessful match in
10279: display_cmnd. Print a newline between each display_privs method.
10280: [981b37b5adff]
10281:
10282: * parse.c:
10283: fix double free introduced in rev 1.218
10284: [c574b02d8747]
10285:
10286: * ldap.c:
10287: belt and suspenders; zero out result after freeing it
10288: [7732988d4620]
10289:
10290: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c:
10291: Refactor line reading into a separate function, sudo_parseln(),
10292: which removes comments, leading/trailing whitespace and newlines.
10293: May want to rethink the use of sudo_parseln() for /etc/ldap.secret
10294: [61d9068f0645]
10295:
10296: * parse.c, sudo.c:
10297: Make the inability to read the sudoers file a non-fatal error if
10298: there are other sudoers sources available. sudoers_file_lookup now
10299: returns "not OK" if sudoers was not present
10300: [643babf597a8]
10301:
10302: * ldap.c:
10303: make it clear that the global options are from LDAP
10304: [9ff950349463]
10305:
10306: * logging.c:
10307: allocate proper amount of space for error string
10308: [8bebb7d46d19]
10309:
10310: * sudo_nss.c, sudo_nss.h:
10311: actual sudo nss code
10312: [5bd7d52d7738]
10313:
10314: * ldap.c, parse.c, sudo.c, sudo.h:
10315: nss-ify display_privs and display_cmnd.
10316: [cccfdd3253f2]
10317:
10318: * defaults.c, parse.c, testsudoers.c, visudo.c:
10319: move update_defaults() to parse.c
10320: [ace144b958a9]
10321:
10322: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
10323: Use nsswitch to hide some sudoers vs. ldap implementation details
10324: and reduce the number of #ifdef LDAP TODO: fix display routines and
10325: error handling
10326: [6225edde89a6]
10327:
10328: 2007-12-28 Todd C. Miller <Todd.Miller@courtesan.com>
10329:
10330: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
10331: First cut at nsswitch.conf support. Further reorganizaton and
10332: related changes are forthcoming.
10333: [717f59d0790b]
10334:
10335: 2007-12-21 Todd C. Miller <Todd.Miller@courtesan.com>
10336:
10337: * env.c, pathnames.h.in, sudo.c, sudo.h:
10338: Add support for reading and /etc/environment file. Still needs to
10339: be documented and should probably only applies to OSes that have it
10340: (AIX and Linux, maybe others).
10341: [15d3edae27e4]
10342:
10343: * ldap.c:
10344: include limits.h
10345: [e19875ef0f82]
10346:
10347: 2007-12-20 Todd C. Miller <Todd.Miller@courtesan.com>
10348:
10349: * WHATSNEW:
10350: reword LDAP SASL
10351: [7ec3c4ec31b5]
10352:
10353: 2007-12-19 Todd C. Miller <Todd.Miller@courtesan.com>
10354:
10355: * TODO:
10356: sync
10357: [87c5a7aea7bf]
10358:
10359: * README.LDAP:
10360: Add an example sudoRole, clarify netscape vs. openldap a bit more
10361: [6f96c0ca8107]
10362:
10363: * README.LDAP:
10364: Be clear on what is OpenLDAP vs. Netscape-derived
10365: [a33c8314dec5]
10366:
10367: * config.h.in, configure, configure.in, ldap.c:
10368: Use ldapssl_init() for ldaps support instead of trying to do it
10369: manually with ldap_init() + ldapssl_install_routines(). Use tls_cert
10370: and tls_key for cert7.db and key3.db respectively. Don't print
10371: debugging info for options that are not set. Add warning if
10372: start_tls specified when not supported.
10373: [abb62dc7e4a3]
10374:
10375: * ldap.c:
10376: fix compilation on solaris
10377: [03d449684e80]
10378:
10379: * Makefile.in:
10380: add missing .h and .c files for missing lib objs
10381: [8b37825bdfc7]
10382:
10383: 2007-12-18 Todd C. Miller <Todd.Miller@courtesan.com>
10384:
10385: * ldap.c:
10386: fix LDAP_OPT_NETWORK_TIMEOUT setting
10387: [226eba89c0ad]
10388:
10389: * ldap.c:
10390: fix compilation on Solaris
10391: [917d47639eb6]
10392:
10393: 2007-12-17 Todd C. Miller <Todd.Miller@courtesan.com>
10394:
10395: * configure, configure.in:
10396: fix typo
10397: [009d5c81b225]
10398:
10399: * README.LDAP:
10400: try to clear up which variables are for OpenLDAP and which are for
10401: netscape-derived SDKs
10402: [f8d9823ee73c]
10403:
10404: * config.h.in, configure, configure.in, ldap.c:
10405: Add support for "ssl on" in both netscape and openldap flavors. Only
10406: the OpenLDAP flavor has been tested.
10407: [952745829ec5]
10408:
10409: * logging.c, sudo.c, sudo.h:
10410: Call cleanup() before exit in log_error() instead of calling
10411: sudo_ldap_close() directly. ldap_conn can now be static to sudo.c
10412: [da02d1b67a2c]
10413:
10414: * sudo.c:
10415: ld -> ldap_conn
10416: [01afa6d927cc]
10417:
10418: 2007-12-16 Todd C. Miller <Todd.Miller@courtesan.com>
10419:
10420: * logging.c, sudo.c, sudo.h:
10421: Better ldap cleanup.
10422: [25b9abe2d617]
10423:
10424: * ldap.c:
10425: Distinguish between LDAP conf settings that are connection-specific
10426: (which take an ld pointer) and those that are default settings
10427: (which do not).
10428: [d48dc6c9c3b4]
10429:
10430: 2007-12-14 Todd C. Miller <Todd.Miller@courtesan.com>
10431:
10432: * ldap.c:
10433: Improved warnings on error.
10434: [c8dce7b4feb4]
10435:
10436: * ldap.c:
10437: Make ldap config table driven and set the config *after* we open the
10438: connection.
10439: [d9698b5a2681]
10440:
10441: 2007-12-13 Todd C. Miller <Todd.Miller@courtesan.com>
10442:
10443: * ldap.c:
10444: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
10445: [598c6df06660]
10446:
10447: * configure, configure.in:
10448: some operating systems need to link with -lkrb5support when using
10449: krb5
10450: [8896365dde9e]
10451:
10452: 2007-12-10 Todd C. Miller <Todd.Miller@courtesan.com>
10453:
10454: * WHATSNEW:
10455: minor update
10456: [acfeeb7f4886]
10457:
10458: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
10459: regen
10460: [a3c6699674f9]
10461:
10462: 2007-12-08 Todd C. Miller <Todd.Miller@courtesan.com>
10463:
10464: * ChangeLog, TODO:
10465: sync
10466: [138e99b925ee]
10467:
10468: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif:
10469: add -g support for LDAP
10470: [8fc27dbe9287]
10471:
10472: 2007-12-03 Todd C. Miller <Todd.Miller@courtesan.com>
10473:
10474: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in:
10475: The -i and -s flags can now take an optional command.
10476: [6afec104ee77]
10477:
10478: 2007-12-02 Todd C. Miller <Todd.Miller@courtesan.com>
10479:
10480: * auth/pam.c, def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
10481: sudoers.pod:
10482: Add passprompt_override flag to sudoers that will cause the prompt
10483: to be overridden in all cases. This flag is also set when the user
10484: specifies the -p flag.
10485: [e4c5402131a6]
10486:
10487: * sudo.c:
10488: Move setting of login class until after sudoers has been parsed. Set
10489: NewArgv[0] for -i after runas_pw has been set.
10490: [62a48c8c56fa]
10491:
10492: * configure, configure.in:
10493: Move the dgettext check.
10494: [5fd8a4712d1c]
10495:
10496: 2007-12-01 Todd C. Miller <Todd.Miller@courtesan.com>
10497:
10498: * auth/pam.c, config.h.in, configure, configure.in:
10499: Add basic support for looking up the string "Password: " in the PAM
10500: localized text db. This allows us to determine whether the PAM
10501: prompt is the default "Password: " one even if it has been
10502: localized.
10503:
10504: TODO: concatenate non-std PAM prompts and user-specified sudo
10505: prompts.
10506: [81c25a415d41]
10507:
10508: 2007-11-27 Todd C. Miller <Todd.Miller@courtesan.com>
10509:
10510: * Makefile.in, config.h.in, configure, configure.in, parse.c,
10511: set_perms.c, sudo.c, sudo.h:
10512: Use AC_FUNC_GETGROUPS instead of a home-grown attempt that was
10513: insufficient.
10514: [1cce6ec1a91e]
10515:
10516: * acsite.m4, configure, interfaces.c, memrchr.c:
10517: Fix typos; Martynas Venckus
10518: [be1233cca11a]
10519:
10520: 2007-11-26 Todd C. Miller <Todd.Miller@courtesan.com>
10521:
10522: * set_perms.c:
10523: Don't assume runas_pw is set; it may not be in the -g case.
10524: [aa11bd2193ac]
10525:
10526: 2007-11-25 Todd C. Miller <Todd.Miller@courtesan.com>
10527:
10528: * logging.c, set_perms.c:
10529: Set aux group vector for PERM_RUNAS and restore group vector for
10530: PERM_ROOT if we previously changed it. Stash the runas group vector
10531: so we don't have to call initgroups more than once. Also add no-op
10532: check to check_perms.
10533: [53837fc755f7]
10534:
10535: 2007-11-21 Todd C. Miller <Todd.Miller@courtesan.com>
10536:
10537: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h, gram.y,
10538: ldap.c, logging.c, match.c, mon_systrace.c, parse.c, parse.h,
10539: pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
10540: sudo.pod, sudo_usage.h.in, sudoers.cat, sudoers.man.in, sudoers.pod,
10541: testsudoers.c, visudo.c, visudo.cat, visudo.man.in:
10542: Add support for runas groups. This allows the user to run a command
10543: with a different effective group. If the -g option is specified
10544: without -u the command will be run as the current user (only the
10545: group will change). the -g and -u options may be used together.
10546: TODO: implement runas group for ldap improve runas group
10547: documentation add testsudoers support
10548: [9019309df6d0]
10549:
10550: * configure, configure.in:
10551: fix setting of mandir
10552: [2c60f269399f]
10553:
10554: * sudo.pod, sudoers.pod:
10555: document that ALL implies SETENV
10556: [bcc8e5b703b9]
10557:
10558: * ldap.c:
10559: s/setenv_ok/setenv_implied/g
10560: [f005df2c2eea]
10561:
10562: * ldap.c:
10563: hostname_matches() returns TRUE on match in sudo 1.7.
10564: [c3d4377b6e8b]
10565:
10566: * ldap.c:
10567: use strcmp, not strcasecmp when comparing ALL
10568: [e486024574a1]
10569:
10570: * ldap.c:
10571: Make sudo ALL imply setenv. Note that unlike with file-based
10572: sudoers this does affect all the commands in the sudoRole.
10573: [bc12f54321d1]
10574:
10575: * gram.c, gram.y, parse.c, parse.h:
10576: sudo "ALL" now implies the SETENV tag but, unlike an explicit tag,
10577: it is not passed on to other commands in the list.
10578: [026e2cb40680]
10579:
10580: * visudo.c:
10581: Add missing sudo_setpwent() and sudo_setgrent() calls. Also use
10582: sudo_getpwuid() instead of getpwuid().
10583: [86f30a8fbd49]
10584:
10585: 2007-11-15 Todd C. Miller <Todd.Miller@courtesan.com>
10586:
10587: * sudoers:
10588: Expand on the dangers of not using visudo to edit sudoers.
10589: [e434e8057d02]
10590:
10591: 2007-11-08 Todd C. Miller <Todd.Miller@courtesan.com>
10592:
10593: * parse.c:
10594: Don't quote *?[]! on output since the lexer does not strip off the
10595: backslash when reading those in.
10596: [561da4a13afa]
10597:
10598: 2007-11-07 Todd C. Miller <Todd.Miller@courtesan.com>
10599:
10600: * glob.c:
10601: expand "u_foo" types to "unsigned foo" to avoid compatibility
10602: issues.
10603: [b0d7c64d78c3]
10604:
10605: 2007-11-04 Todd C. Miller <Todd.Miller@courtesan.com>
10606:
10607: * logging.c:
10608: Refactor log line generation in to new_logline().
10609: [6a9b9730615d]
10610:
10611: 2007-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
10612:
10613: * TROUBLESHOOTING:
10614: fix typo
10615: [9e19d4f86e47]
10616:
10617: 2007-10-24 Todd C. Miller <Todd.Miller@courtesan.com>
10618:
10619: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
10620: match.c:
10621: Add configure check for struct in6_addr instead of relying on
10622: AF_INET6 since some systems define AF_INET6 but do not include IPv6
10623: support.
10624: [e24082c416bd]
10625:
10626: 2007-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
10627:
10628: * configure, configure.in:
10629: Fix block to add -lutil for FreeBSD and NetBSD when logincap is in
10630: use.
10631: [76a9df4a63be]
10632:
10633: 2007-10-20 Todd C. Miller <Todd.Miller@courtesan.com>
10634:
10635: * configure, configure.in:
10636: POSIX states that struct timespec be declared in time.h so check
10637: there regardless of the value of TIME_WITH_SYS_TIME.
10638: [e42c55ec9daf]
10639:
10640: 2007-10-17 Todd C. Miller <Todd.Miller@courtesan.com>
10641:
10642: * tgetpass.c:
10643: Instead of defining a macro to call the appropriate method for
10644: turning on/off echo, just define tc[gs]etattr() and the related
10645: defines that use the correct terminal ioctls if needed. Also go back
10646: to using TCSAFLUSH instead of TCSADRAIN on all but QNX.
10647: [5dfb2379d995]
10648:
10649: 2007-10-09 Todd C. Miller <Todd.Miller@courtesan.com>
10650:
10651: * Makefile.in:
10652: g/c @ALLOCA@
10653: [e6946c2e3820]
10654:
10655: * configure:
10656: regen
10657: [9bac7159a138]
10658:
10659: * INSTALL, auth/pam.c, config.h.in, configure.in:
10660: Add --disable-pam-session configure option to disable calling
10661: pam_{open,close}_session. May work around bugs in some PAM
10662: implementations.
10663: [273d0fdb4a9d]
10664:
10665: 2007-10-08 Todd C. Miller <Todd.Miller@courtesan.com>
10666:
10667: * tgetpass.c:
10668: quiet gcc warnings
10669: [325565c5a579]
10670:
10671: * tgetpass.c:
10672: Avoid printing the prompt if we are already backgrounded. E.g. if
10673: the user runs "sudo foo &" from the shell. In this case, the call
10674: to tcsetattr() will cause SIGTTOU to be delivered.
10675: [db2139a8d8b8]
10676:
10677: 2007-09-15 Todd C. Miller <Todd.Miller@courtesan.com>
10678:
10679: * def_data.c, def_data.h, def_data.in:
10680: Reorder things such that the definition of env_reset come right
10681: before the env variable lists.
10682: [e0d8e22a581a]
10683:
10684: * parse.h:
10685: Shrink type and seqno in struct alias from int to u_short
10686: [9425263dd565]
10687:
10688: * alias.c, match.c, parse.c, parse.h:
10689: Add a sequence number in the aliases for loop detection. If we find
10690: an alias with the seqno already set to the current (global) value we
10691: know we've visited it before so ignore it.
10692: [301a0548ffff]
10693:
10694: 2007-09-13 Todd C. Miller <Todd.Miller@courtesan.com>
10695:
10696: * TODO, auth/pam.c, sudo.c, sudo.h:
10697: PAM wants the full tty path so add user_ttypath which holds the full
10698: path to the tty or is NULL if no tty was present.
10699: [c7c1dd4b36c8]
10700:
10701: * auth/pam.c:
10702: Set PAM_RHOST to work around a bug in Solaris 7 and lower that
10703: results in a segv.
10704: [3a8865b3a357]
10705:
10706: 2007-09-11 Todd C. Miller <Todd.Miller@courtesan.com>
10707:
10708: * gram.c:
10709: regen
10710: [5647be127950]
10711:
10712: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
10713: parse.h, testsudoers.c, visudo.c:
10714: rename lh_ -> tq_
10715: [8f500c542c4a]
10716:
10717: 2007-09-10 Todd C. Miller <Todd.Miller@courtesan.com>
10718:
10719: * alloc.c:
10720: remove some useless casts
10721: [409a448b23f5]
10722:
10723: * alloc.c:
10724: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since inttypes.h
10725: predates the final C99 spec and the standard specifies that it shall
10726: include stdint.h anyway
10727: [ae478fdef61a]
10728:
10729: 2007-09-06 Todd C. Miller <Todd.Miller@courtesan.com>
10730:
10731: * Makefile.in, alloca.c, configure.in:
10732: Since we ship with a pre-generated parser there is no need to ship a
10733: bogus alloca implementation.
10734: [3f611a7cc0e5]
10735:
10736: * configure:
10737: regen
10738: [771eccf5269c]
10739:
10740: * configure.in:
10741: remove initial setting of CHECKSIA, we require that it be unset if
10742: not used
10743: [a2e91adc5aa2]
10744:
10745: * Makefile.in:
10746: add list.c to SRCS
10747: [7db0e56cf5b9]
10748:
10749: * configure:
10750: regen
10751: [3716ec30172e]
10752:
10753: * configure.in:
10754: only do SIA checks on Digital Unix
10755: [6a96e1af2597]
10756:
10757: 2007-09-05 Todd C. Miller <Todd.Miller@courtesan.com>
10758:
10759: * sudoers.cat, sudoers.man.in:
10760: regen
10761: [ac1dc29de72b]
10762:
10763: * ChangeLog, TODO:
10764: sync
10765: [781effce0a2d]
10766:
10767: * auth/kerb5.c:
10768: Remove call to krb5_cc_register() as it is not needed for modern
10769: kerb5.
10770: [351b8b764f16]
10771:
10772: * configure:
10773: regen
10774: [ac21dbcc9c2c]
10775:
10776: * aclocal.m4, configure.in:
10777: New method for setting the default authentication type and avoiding
10778: conflicts in auth types.
10779: [5fb15be11f78]
10780:
10781: * match.c, parse.c, testsudoers.c:
10782: Each entry in a cmndlist now has an associated runaslist so no need
10783: to keep track of the most recent non-NULL one.
10784: [582e015786b0]
10785:
10786: 2007-09-04 Todd C. Miller <Todd.Miller@courtesan.com>
10787:
10788: * ldap.c:
10789: back out partial ldaps support mistakenly committed
10790: [357703e94b2d]
10791:
10792: * ldap.c:
10793: Add support for unix groups and netgroups in sudoRunas
10794: [2f04eb91c6d0]
10795:
10796: 2007-09-03 Todd C. Miller <Todd.Miller@courtesan.com>
10797:
10798: * sudo_edit.c:
10799: Fix sudoedit of a non-existent file. From Tilo Stritzky.
10800: [a5488a03bddd]
10801:
10802: 2007-09-02 Todd C. Miller <Todd.Miller@courtesan.com>
10803:
10804: * configure:
10805: regen
10806: [541177376ee1]
10807:
10808: * INSTALL:
10809: update --passprompt escape info
10810: [6d57db4cd538]
10811:
10812: * configure.in:
10813: remove now-bogus comment and update copyright date
10814: [6a4af45fa331]
10815:
10816: * configure.in:
10817: Fix up use of with_passwd
10818: [7c79d8640f77]
10819:
10820: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
10821: Update to autoconf-2.61 andf libtool-1.5.24
10822: [045259b0b439]
10823:
10824: * Makefile.in:
10825: "cmp -s" not just cmp Add @datarootdir@ to quiet autoconf-2.61
10826: [f5b6a7afb817]
10827:
10828: 2007-09-01 Todd C. Miller <Todd.Miller@courtesan.com>
10829:
10830: * gram.c:
10831: regen
10832: [b5b78e71d2cb]
10833:
10834: * gram.y:
10835: move tags and runaslist propagation to be earlier
10836: [94f7805f4489]
10837:
10838: * visudo.c:
10839: If -f flag given use the permissions of the original file as a
10840: template
10841: [9303d22bddb0]
10842:
10843: * gram.y:
10844: prevent a double free() when re-initing the parser
10845: [5b3907c4de5a]
10846:
10847: 2007-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
10848:
10849: * configure:
10850: regen
10851: [49a90b19a17d]
10852:
10853: * aclocal.m4, alias.c, alloc.c, auth/API, auth/afs.c, auth/bsdauth.c,
10854: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/securid.c,
10855: auth/securid5.c, auth/sia.c, auth/sudo_auth.h, config.h.in,
10856: configure.in, env.c, ldap.c, list.c, list.h, memrchr.c, parse.c,
10857: parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c, sudo.c,
10858: sudo.h, testsudoers.c, visudo.c, zero_bytes.c:
10859: Remove support for compilers that don't support void *
10860: [35e1d01ae197]
10861:
10862: * gram.c:
10863: regen
10864: [70ce412a458a]
10865:
10866: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h, match.c,
10867: parse.c, parse.h, testsudoers.c, visudo.c:
10868: Move list manipulation macros to list.h and create C versions of the
10869: more complex ones in list.c. The names have been down-cased so they
10870: appear more like normal functions.
10871: [9cea0e281148]
10872:
10873: * Makefile.in:
10874: Fix cmp command when regenerating parser. Make gram.o the first
10875: dependency for all programs so gram.h will be generated before
10876: anything that needs it.
10877: [429ea065abf1]
10878:
10879: * gram.y, parse.h:
10880: Convert NEW_DEFAULT anf NEW_MEMBER into static functions.
10881: [2f3433833589]
10882:
10883: * match.c, parse.c, testsudoers.c:
10884: Use LH_FOREACH_REV when checking permission and short-circuit on the
10885: first non-UNSPEC hit we get for the command. This means that
10886: instead of cycling through the all the parsed sudoers entries we
10887: start at the end and work backwards and quit after the first
10888: positive or negative match.
10889: [881474532f3e]
10890:
10891: * gram.c:
10892: regen
10893: [9152a19d4188]
10894:
10895: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
10896: Change list head macros to take a pointer, not a struct.
10897: [054f1dcce4cc]
10898:
10899: * gram.c:
10900: regen
10901: [be154aae6235]
10902:
10903: * gram.y:
10904: Propagate the runasspec from one command to the next in a cmndspec.
10905: [4957b1cb03a3]
10906:
10907: 2007-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
10908:
10909: * match.c:
10910: Replace has_meta() with a macro that calls strpbrk().
10911: [a2e58846a542]
10912:
10913: * regen
10914: [5a932a5c9451]
10915:
10916: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
10917: testsudoers.c, visudo.c:
10918: Use a list head struct when storing the semi-circular lists and
10919: convert to tail queues in the process. This will allow us to
10920: reverse foreach loops more easily and it makes it clearer which
10921: functions expect a list as opposed to a single member.
10922:
10923: Add macros for manipulating lists. Some of these should become
10924: functions.
10925:
10926: When freeing up a list, just pop off the last item in the queue
10927: instead of going from head to tail. This is simpler since we don't
10928: have to stash a pointer to the next member, we always just use the
10929: last one in the queue until the queue is empty.
10930:
10931: Rename match functions that take a list to have list in the name.
10932: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
10933: [7c37b271607a]
10934:
10935: * parse.c:
10936: Fix pasto, append "!" not negated (which is an int) for sudo -l
10937: output.
10938: [93a444c3997f]
10939:
10940: * Makefile.in:
10941: Remove the dependency of gram .h on gram.y, the .c dependency is
10942: enough. Only move y.tab.h to gram.h if it is different; avoids
10943: needless rebuilding.
10944: [67bf4ea2a2e5]
10945:
10946: 2007-08-27 Todd C. Miller <Todd.Miller@courtesan.com>
10947:
10948: * sudoers.pod:
10949: Defaults lines may be associated with lists of users, hosts,
10950: commands and runas users, not just single entries.
10951: [795effacb6be]
10952:
10953: 2007-08-26 Todd C. Miller <Todd.Miller@courtesan.com>
10954:
10955: * Makefile.in:
10956: Revert the "cmp" portion of the last diff, it doesn't make sense.
10957: [26f34bf4e2e3]
10958:
10959: * Makefile.in:
10960: Remove *.lo for clean: When generating the parser, only move the
10961: generated files into place if they differ from the existing ones.
10962: [84673fea371b]
10963:
10964: 2007-08-25 Todd C. Miller <Todd.Miller@courtesan.com>
10965:
10966: * toke.c, toke.l:
10967: Replace IPV6 regexp with a much simpler (readable) one and add an
10968: extra check when it matches to make sure we have a valid address.
10969: [592e9f690556]
10970:
10971: * match.c:
10972: Fix thinko introduced when merging IPV6 support.
10973: [da38cd5eb8c7]
10974:
10975: 2007-08-24 Todd C. Miller <Todd.Miller@courtesan.com>
10976:
10977: * HISTORY, LICENSE:
10978: regen
10979: [0d7b27b90634]
10980:
10981: * license.pod:
10982: add 2007
10983: [510e5048ae1a]
10984:
10985: * UPGRADE:
10986: mention #uid vs. comment pitfall
10987: [4d2861898bcc]
10988:
10989: * acsite.m4:
10990: Merge in a patch from the libtool cvs that fixes a problem with the
10991: latest autoconf. From Stepan Kasal.
10992: [0c279ae7df3e]
10993:
10994: * parse.h:
10995: Back out he XOR swap trick, it is slower than a temp variable on
10996: modern CPUs.
10997: [91c4b024e317]
10998:
10999: * gram.c:
11000: regen
11001: [cb6d4106fb74]
11002:
11003: * gram.y, parse.h:
11004: Convert the tail queue to a semi-circle queue and use the XOR swap
11005: trick to swap the prev pointers during append.
11006: [8bf4d9fbee58]
11007:
11008: 2007-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
11009:
11010: * parse.h:
11011: remove useless statement
11012: [421ec1dd73e6]
11013:
11014: * toke.c, toke.l:
11015: Refactor #include parsing into a separate function and return
11016: unparsed chars (such as newline or comment) back to the lexer.
11017: [64166917aa3d]
11018:
11019: 2007-08-22 Todd C. Miller <Todd.Miller@courtesan.com>
11020:
11021: * WHATSNEW:
11022: mention better uid support
11023: [56f510e7f2ec]
11024:
11025: * sudoers.pod:
11026: Users may now consist of a uid.
11027: [5fd31b2c55ed]
11028:
11029: * gram.c, gram.h, toke.c:
11030: regen
11031: [599e58af6dc1]
11032:
11033: * parse.c:
11034: Use lbuf_append_quoted() for sudo -l output to quote characters that
11035: would require quoting in sudoers.
11036: [3132d05c990a]
11037:
11038: * lbuf.c, lbuf.h:
11039: Add lbuf_append_quoted() which takes a set of characters which
11040: should be quoted with a backslash when displayed.
11041: [ab09bebb1d65]
11042:
11043: * toke.l:
11044: Require that the first character after a comment not be a digit or a
11045: dash. This allows us to remove the GOTRUNAS state and treat
11046: uid/gids similar to other words. It also means that we can now
11047: specify uids in User_Lists and a User_Spec may now contain a uid.
11048: [461fe01f8392]
11049:
11050: * gram.y, toke.l:
11051: Replace RUNAS token with '(' and ')' tokens to make the runas
11052: portion of the grammar more natural.
11053: [e0c383b4684d]
11054:
11055: * BUGS:
11056: The BUGS file is history
11057: [4d9a809585c7]
11058:
11059: * Makefile.in, README:
11060: The BUGS file is history
11061: [d9500e261172]
11062:
11063: 2007-08-21 Todd C. Miller <Todd.Miller@courtesan.com>
11064:
11065: * toke.c, toke.l:
11066: Allow comments after a RunasAlias as long as the character after the
11067: pound sign isn't a digit or a dash.
11068: [d7f3bd94eeda]
11069:
11070: * WHATSNEW:
11071: Glob support was back-ported to 1.6.9
11072: [d1d5cfd46228]
11073:
11074: 2007-08-20 Todd C. Miller <Todd.Miller@courtesan.com>
11075:
11076: * Makefile.in:
11077: remove sudo_usage.h in distclean
11078: [df05ce9c4127]
11079:
11080: * parse.c:
11081: If a Defaults value contains a blank, double-quote the string.
11082: [9057a910daad]
11083:
11084: * toke.c, toke.l:
11085: Properly deal with Defaults double-quoted strings that span multiple
11086: lines using the line continuation char. Previously, the entire
11087: thing, including the continuation char, newline, and spaces was
11088: stored as-is.
11089: [4a4e8eacefe6]
11090:
11091: * sudo.c:
11092: Be consistent when using single quotes and backticks.
11093: [d010b83a0fa1]
11094:
11095: 2007-08-19 Todd C. Miller <Todd.Miller@courtesan.com>
11096:
11097: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
11098: sudo.c, sudo_usage.h.in:
11099: Add new linebuf code to do appends of dynamically allocated strings
11100: and word-wrapped output. Currently used for sudo's usage() and sudo
11101: -l output. Sudo usage strings are now in sudo_usage.h which is
11102: generated at configure time.
11103: [4dfd0ee8d961]
11104:
11105: 2007-08-18 Todd C. Miller <Todd.Miller@courtesan.com>
11106:
11107: * parse.c, sudo.c, sudo.h:
11108: Fix line wrapping in usage() and use the actual tty width instead of
11109: assuming 80.
11110: [700eab37c5a6]
11111:
11112: 2007-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
11113:
11114: * history.pod:
11115: some more info
11116: [8140112a8ae1]
11117:
11118: * history.pod:
11119: Mentioned Chris Jepeway's parser and also the new one that is in
11120: sudo 1.7.
11121: [2132d00f0597]
11122:
11123: 2007-08-16 Todd C. Miller <Todd.Miller@courtesan.com>
11124:
11125: * sudo.pod, visudo.pod:
11126: For the options list, add flag args where appropriate and increase
11127: the indent level so there is room for them.
11128: [2b60fb572e12]
11129:
11130: 2007-08-15 Todd C. Miller <Todd.Miller@courtesan.com>
11131:
11132: * parse.c:
11133: Fix some spacing in "sudo -l" and add a comment about some bogosity
11134: in the line wrapping.
11135: [b59b056f5ee2]
11136:
11137: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
11138: visudo.man.in:
11139: regen
11140: [5fb719f18ebc]
11141:
11142: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
11143: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
11144: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
11145: testsudoers.c, toke.c, toke.l:
11146: Remove monitor support until there is a versino of systrace that
11147: uses a lookaside buffer (or we have a better mechanism to use).
11148: [61ff76878e4a]
11149:
11150: * config.h.in, configure, configure.in, sudo.c:
11151: use getaddrinfo() instead of gethostbyname() if it is available
11152: [cc33c136aa6a]
11153:
11154: 2007-08-14 Todd C. Miller <Todd.Miller@courtesan.com>
11155:
11156: * parse.c, sudo.c:
11157: Deal with OSes where sizeof(gid_t) < sizeof(int).
11158: [130a89cbdfba]
11159:
11160: * interfaces.c:
11161: repair non-getifaddrs() code after ipv6 integration
11162: [7ae7a89e2236]
11163:
11164: * sudo.c:
11165: If we can open sudoers but fail to read the first byte, close the
11166: file stream before trying again.
11167: [6f31272fae7b]
11168:
11169: 2007-08-13 Todd C. Miller <Todd.Miller@courtesan.com>
11170:
11171: * toke.c:
11172: regen
11173: [4d7afe0aa6fa]
11174:
11175: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
11176: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
11177: [4e6ff2965a42]
11178:
11179: * sudo.pod, sudoers.pod, visudo.pod:
11180: Add some missing markup Update copyright
11181: [7e6d3c686b5e]
11182:
11183: 2007-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
11184:
11185: * configure, configure.in:
11186: fix sudo_noexec extension which got broken in the libtool update
11187: [3a5b447df861]
11188:
11189: 2007-08-10 Todd C. Miller <Todd.Miller@courtesan.com>
11190:
11191: * Makefile.in:
11192: explicitly specify -Tascii to nroff
11193: [45c8da4cbefe]
11194:
11195: 2007-08-08 Todd C. Miller <Todd.Miller@courtesan.com>
11196:
11197: * logging.c:
11198: remove an ANSI-ism that crept in
11199: [29086f87b2ca]
11200:
11201: 2007-08-07 Todd C. Miller <Todd.Miller@courtesan.com>
11202:
11203: * sudo.pod:
11204: Adjust list indents Prevent -- from being turned into an em dash Use
11205: a list for the environment instead of a literal paragraph
11206: [c3abcd8f76f4]
11207:
11208: * visudo.pod:
11209: Use a list for the environment instead of an indented literal
11210: paragraph.
11211: [0ffcfcb7349f]
11212:
11213: * sudoers.pod:
11214: Adjust list indentation
11215: [615c89e3123a]
11216:
11217: * license.pod:
11218: add =head3
11219: [8b2e0d38c0bd]
11220:
11221: 2007-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
11222:
11223: * sudo.pod:
11224: mention that when specifying a uid for the -u option the shell may
11225: require that the # be escaped
11226: [3e3a17bff150]
11227:
11228: 2007-08-02 Todd C. Miller <Todd.Miller@courtesan.com>
11229:
11230: * match.c:
11231: Fix off by one in group matching.
11232: [b529602b7fba]
11233:
11234: 2007-07-31 Todd C. Miller <Todd.Miller@courtesan.com>
11235:
11236: * env.c:
11237: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From David Krause.
11238: [ffbf8907c6e7]
11239:
11240: 2007-07-30 Todd C. Miller <Todd.Miller@courtesan.com>
11241:
11242: * configure, configure.in:
11243: Add missing define of HAVE_GSS_KRB5_CCACHE_NAME for the
11244: -lgssapi_krb5 case.
11245: [2b85a89c2252]
11246:
11247: * aclocal.m4, configure, configure.in:
11248: Fix link tests such that new gcc doesn't optimize away the test.
11249: [83484ec95cba]
11250:
11251: 2007-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
11252:
11253: * sudo.pod, sudoers.pod, visudo.pod:
11254: add missing over/back
11255: [251a12c89b91]
11256:
11257: * sudo.pod, sudoers.pod, visudo.pod:
11258: Change FILES section to use =item
11259: [60b9efc3a0b2]
11260:
11261: * env.c:
11262: Add back allocation of the env struct in rebuild_env but save a copy
11263: of the old pointer and free it before returning.
11264: [1100cd4fa997]
11265:
11266: * env.c:
11267: Don't init the private environment in rebuild_env() since it may
11268: have already been done implicitly sudo_setenv/sudo_unsetenv.
11269:
11270: Multiply length by sizeof(char *) in memcpy/memmove when copying the
11271: environment so we copy the full thing.
11272:
11273: Add missing set of parens so we deref the right pointer in
11274: sudo_unsetenv when searching for a matching variable.
11275: [9086a8f756b1]
11276:
11277: 2007-07-26 Todd C. Miller <Todd.Miller@courtesan.com>
11278:
11279: * sudo.pod, sudoers.pod, visudo.pod:
11280: Use file markup for paths in the FILES section
11281: [940d99f731f2]
11282:
11283: * sudo.pod, sudoers.pod, visudo.pod:
11284: Don't capitalize sudo/visudo
11285: [f067a455d44b]
11286:
11287: * sudoers.pod:
11288: Sort sudoers options; based on a diff from Igor Sobrado.
11289: [a9b9befe85ac]
11290:
11291: 2007-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
11292:
11293: * sudo.pod, sudoers.pod, visudo.pod:
11294: Use 8 and 5 instead of @mansectsu@ and @mansectform@ since the
11295: latter confuses pod2man. The Makefile rules for the .man.in file
11296: will add @mansectsu@ and @mansectform@ back in after pod2man is done
11297: anyway.
11298: [b50ea0db727c]
11299:
11300: 2007-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
11301:
11302: * LICENSE, Makefile.in, license.pod:
11303: Move license info to pod format
11304: [25bdd82e592b]
11305:
11306: * configure, configure.in, sudoers.pod:
11307: Substitute value of path_info into sudoers man page.
11308: [9ba661a82798]
11309:
11310: * WHATSNEW:
11311: remove features that were back-ported to 1.6.9
11312: [e76d756cbe65]
11313:
11314: * sudo.c, sudo.pod, visudo.c, visudo.pod:
11315: Sort SYNOPSIS and sync usage. From Igor Sobrado.
11316: [4970386c9e54]
11317:
11318: * env.c:
11319: Only need sudo_setenv/sudo_unsetenv if we are going to use
11320: ldap_sasl_interactive_bind_s() but don't have
11321: gss_krb5_ccache_name().
11322: [f1a73d8b35c5]
11323:
11324: * ChangeLog:
11325: rebuild without branch info
11326: [5d5a33494677]
11327:
11328: * Makefile.in:
11329: Add ChangeLog target
11330: [a702034fdd89]
11331:
11332: * auth/pam.c:
11333: Run cleanup code if the user hits ^C at the password prompt.
11334: [9cf87768e921]
11335:
11336: * auth/pam.c:
11337: Some versions of pam_lastlog have a bug that will cause a crash if
11338: PAM_TTY is not set so if there is no tty, set PAM_TTY to the empty
11339: string.
11340: [5b63f6c88866]
11341:
11342: 2007-07-20 Todd C. Miller <Todd.Miller@courtesan.com>
11343:
11344: * Makefile.in:
11345: ChageLog not Changelog
11346: [1243d8473ceb]
11347:
11348: * ChangeLog:
11349: sync
11350: [d887df98c6b0]
11351:
11352: * Makefile.in:
11353: CHANGE -> Changelog
11354: [917738df30dd]
11355:
11356: * TODO:
11357: sync
11358: [cd382f7d1948]
11359:
11360: 2007-07-19 Todd C. Miller <Todd.Miller@courtesan.com>
11361:
11362: * config.h.in, configure, configure.in, ldap.c:
11363: Add configure hooks for gss_krb5_ccache_name() and the gssapi
11364: headers.
11365: [139606209991]
11366:
11367: 2007-07-18 Todd C. Miller <Todd.Miller@courtesan.com>
11368:
11369: * env.c, sudo.c:
11370: rebuild_env() and insert_env_vars() no longer return environment
11371: pointer, they set environ directly.
11372:
11373: No longer need to pass around an envp pointer since we just operate
11374: on environ now.
11375:
11376: Add dosync argument to insert_env() that indicates whether it should
11377: reset environ when realloc()ing env.envp.
11378:
11379: Use an initial size of 128 for the environment.
11380: [4735fd5fddb8]
11381:
11382: * env.c:
11383: Split sudo_setenv() into an external version and a version only for
11384: use by rebuild_env().
11385: [fda7d655adb1]
11386:
11387: 2007-07-16 Todd C. Miller <Todd.Miller@courtesan.com>
11388:
11389: * ldap.c:
11390: Add support for using gss_krb5_ccache_name() instead of setting
11391: KRB5CCNAME. Also use sudo_unsetenv() in the non-
11392: gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
11393: original environment. TODO: configure setup for
11394: gss_krb5_ccache_name()
11395: [fcafa5a49caf]
11396:
11397: * README.LDAP:
11398: add krb5_ccname
11399: [fceb8f883886]
11400:
11401: * README.LDAP, ldap.c:
11402: Add support for sasl_secprops in ldap.conf
11403: [1f06f4bf7347]
11404:
11405: * env.c, sudo.h:
11406: Add sudo_unsetenv() and refactor private env syncing code into
11407: sync_env().
11408: [045ecb3fd22b]
11409:
11410: * README.LDAP, ldap.c:
11411: The ldap.conf variable is sasl_auth_id not sasl_authid.
11412: [a5f98491311b]
11413:
11414: 2007-07-15 Todd C. Miller <Todd.Miller@courtesan.com>
11415:
11416: * ldap.c, sudo.c, sudo.h:
11417: Add support for krb5_ccname in ldap.conf. If specified, it will
11418: override the default value of KRB5CCNAME in the environment for the
11419: duration of the call to ldap_sasl_interactive_bind_s().
11420: [b08a10c3045b]
11421:
11422: * env.c, sudo.h:
11423: Remove format_env() Add sudo_setenv() to replace most format_env() +
11424: insert_env() combinations. insert_env() no longer takes a struct
11425: environment *
11426: [131da52f43f3]
11427:
11428: * ldap.c:
11429: Fix use_sasl vs. rootuse_sasl logic.
11430: [0c0417b6918c]
11431:
11432: * README.LDAP, config.h.in, configure, configure.in, ldap.c:
11433: Add support for SASL auth when connecting to an LDAP server. Adapted
11434: from a diff by Tom McLaughlin.
11435: [a6285f1356ea]
11436:
11437: 2007-07-14 Todd C. Miller <Todd.Miller@courtesan.com>
11438:
11439: * configure, configure.in:
11440: Only enable AIX or BSD auth if no other exclusive auth method has
11441: been chosen. Allows people to e.g., use PAM on AIX without adding
11442: --without-aixauth. A better solution is needed to deal with default
11443: authentication since if a non-exclusive method is chosen we will
11444: still get an error.
11445: [83f7afdc0ec3]
11446:
11447: 2007-07-11 Todd C. Miller <Todd.Miller@courtesan.com>
11448:
11449: * HISTORY, Makefile.in, history.pod:
11450: Generate HISTORY from history.pod (which is also used for web pages)
11451: [60bcd5164931]
11452:
11453: 2007-07-09 Todd C. Miller <Todd.Miller@courtesan.com>
11454:
11455: * sudo.man.in, sudoers.man.in:
11456: regen
11457: [63956a366191]
11458:
11459: * sudo.pod:
11460: Better explanation of environment handling in the sudo man page.
11461: [6c247742f7ee]
11462:
11463: * env.c, sudo.c:
11464: Defer setting user-specified env vars until after authentication.
11465: [4750b79323ee]
11466:
11467: * env.c:
11468: honor def_default_path for PATH set on the command line
11469: [6db31d9b6d65]
11470:
11471: * env.c, sudo.c, sudo.pod, sudoers.pod:
11472: Allow user to set environment variables on the command line as long
11473: as they are allowed by env_keep and env_check. Ie: apply the same
11474: restrictions as normal environment variables. TODO: deal with
11475: secure_path
11476: [26c0da3840cf]
11477:
11478: 2007-07-08 Todd C. Miller <Todd.Miller@courtesan.com>
11479:
11480: * sudo.c, sudo_edit.c:
11481: Call rebuild_env() in call cases. Pass original envp to sudo_edit().
11482: Don't allow -E or env var setting in sudoedit mode. More accurate
11483: usage() when called as sudoedit.
11484: [a4af20658361]
11485:
11486: * ldap.c:
11487: warn -> warning
11488: [d87d1192b048]
11489:
11490: * sudo.pod:
11491: add -c option to sudoedit synopsis
11492: [15b596a7e2db]
11493:
11494: * TODO:
11495: udpate to reality
11496: [e2f8fde89db1]
11497:
11498: * parse.c:
11499: Use ALLOW/DENY instead of TRUE/FALSE when dealing with the return
11500: value from {user,host,runas,cmnd}_matches(). Rename *matches
11501: variables -> *match. Purely cosmetic.
11502: [e54a44c00a88]
11503:
11504: * parse.c:
11505: Move setting of FLAG_NO_CHECK into the if(pwflag) block. No change
11506: in behavior.
11507: [c6272b4f2127]
11508:
11509: * sudoers:
11510: add SETENV tag
11511: [3a3066bb6788]
11512:
11513: 2007-07-06 Todd C. Miller <Todd.Miller@courtesan.com>
11514:
11515: * parse.c:
11516: Make pwcheck local to the pwflag block. Use pwcheck even if user
11517: didn't match since Defaults options may still apply.
11518: [45da9efbbafd]
11519:
11520: * check.c, sudo.c:
11521: Do not update timestamp if user not validated by sudoers.
11522: [a4a9d4364827]
11523:
11524: * set_perms.c:
11525: for PERM_RUNAS, set the egid to the runas user's gid and restore to
11526: the user's original in PERM_ROOT
11527: [1514bfb32847]
11528:
11529: * logging.c, mon_systrace.c, set_perms.c, sudo.h:
11530: PERM_FULL_ROOT is now no different than PERM_ROOT so remove
11531: PERM_FULL_ROOT
11532: [b9d047a3178c]
11533:
11534: * check.c:
11535: don't check timestamp mtime if we are just going to remove it
11536: [5d2470bc6cbd]
11537:
11538: * sudoers.pod:
11539: Move sudoers defaults parameters into their own section.
11540: [54701fbc0ff3]
11541:
11542: * testsudoers.c:
11543: Reduce a level of indent by a few placed continue statements.
11544: [5d5a9838c8ef]
11545:
11546: * parse.c:
11547: Make matching but negated commands/hosts/runas entries override a
11548: previous match as expected. Also reduce some levels of indent by a
11549: few placed continue statements.
11550: [dd59fa4b91a1]
11551:
11552: 2007-07-05 Todd C. Miller <Todd.Miller@courtesan.com>
11553:
11554: * parse.c:
11555: Print default runas in "sudo -l" if sudoers don't specify one.
11556: [07d408c400bd]
11557:
11558: * match.c:
11559: Less hacky way of testing whether the domain was set.
11560: [a537059776e5]
11561:
11562: 2007-07-04 Todd C. Miller <Todd.Miller@courtesan.com>
11563:
11564: * INSTALL:
11565: Mention pam-devel and openldap-devel for Linux
11566: [9e708c54ecc3]
11567:
11568: 2007-07-03 Todd C. Miller <Todd.Miller@courtesan.com>
11569:
11570: * README.LDAP:
11571: or vs. are
11572: [abe8c0f3a410]
11573:
11574: 2007-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
11575:
11576: * sudo.c:
11577: fix typo in Solaris project support
11578: [2ffeb2d80959]
11579:
11580: * HISTORY:
11581: update
11582: [df162b36f120]
11583:
11584: * sudo.c:
11585: Make -- on the command line match the manual page. The implied shell
11586: case has been simplified as a result.
11587: [cd217a1f6694]
11588:
11589: 2007-06-28 Todd C. Miller <Todd.Miller@courtesan.com>
11590:
11591: * sudoers2ldif:
11592: add simplistic support for sudoRunas; note that if a sudoers entry
11593: contains multiple Runas users, all will apply to the sudoRole
11594: [65b11421f5c8]
11595:
11596: * sudoers2ldif:
11597: honor SETENV and NOSETENV tags
11598: [2c0d5ba7a09b]
11599:
11600: 2007-06-24 Todd C. Miller <Todd.Miller@courtesan.com>
11601:
11602: * mon_systrace.c:
11603: Redo setting of user_args. We now build up a private copy of argv
11604: first and then replace the NULs?with spaces.
11605: [ccbba72ea112]
11606:
11607: * mon_systrace.c:
11608: getcwd() returns NULL on failure, not 0 on success
11609: [88cd9e66e530]
11610:
11611: * mon_systrace.c:
11612: allow chunksiz to reach 1 before erroring out
11613: [619d68f14964]
11614:
11615: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
11616: visudo.man.in:
11617: regen
11618: [8db512d3caf0]
11619:
11620: 2007-06-23 Todd C. Miller <Todd.Miller@courtesan.com>
11621:
11622: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h, gram.y,
11623: logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod, sudoers.pod,
11624: toke.c, toke.l:
11625: Add support for setting environment variables on the command line.
11626: This is only allowed if the setenv sudoers options is enabled or if
11627: the command is prefixed with the SETENV tag.
11628: [5744caebd969]
11629:
11630: * README.LDAP:
11631: replace Aaron's email address with the sudo-workers list
11632: [2ffce5f9afc0]
11633:
11634: * configure:
11635: regen
11636: [8013dff82c0c]
11637:
11638: 2007-06-22 Todd C. Miller <Todd.Miller@courtesan.com>
11639:
11640: * schema.OpenLDAP, schema.iPlanet:
11641: Break schema out into separate files.
11642: [15e598e4c60b]
11643:
11644: * Makefile.in, README.LDAP:
11645: Break schema out into separate files.
11646: [1a53966ca1fa]
11647:
11648: 2007-06-21 Todd C. Miller <Todd.Miller@courtesan.com>
11649:
11650: * auth/aix_auth.c:
11651: free message if set by authenticate()
11652: [849c220c1236]
11653:
11654: * match.c:
11655: deal with NULL gr_mem
11656: [49e4d74f0bbe]
11657:
11658: 2007-06-20 Todd C. Miller <Todd.Miller@courtesan.com>
11659:
11660: * config.h.in:
11661: regen
11662: [fead999ad3e9]
11663:
11664: * configure.in:
11665: add template for HAVE_PROJECT_H
11666: [e6c42c2eaad1]
11667:
11668: * closefrom.c:
11669: include fcntl.h
11670: [54d98b382f03]
11671:
11672: 2007-06-19 Todd C. Miller <Todd.Miller@courtesan.com>
11673:
11674: * INSTALL:
11675: mention --with-project
11676: [d3ea3baad7c5]
11677:
11678: * config.h.in, configure.in, sudo.c:
11679: Add Solaris 10 "project" support. From Michael Brantley.
11680: [f14f3c8c6554]
11681:
11682: * sudoers.pod:
11683: fix typo
11684: [50db81a19787]
11685:
11686: * configure:
11687: regen
11688: [ea71afd3e564]
11689:
11690: * configure.in:
11691: Fix preservation of LDFLAGS in the LDAP case.
11692: [40a3a47e8059]
11693:
11694: * memrchr.c:
11695: Remove dependecy on NULL
11696: [c957ae5e1733]
11697:
11698: * configure:
11699: regen
11700: [4955ce0c6912]
11701:
11702: * aclocal.m4, configure.in:
11703: Can't use the regular autoconf fnmatch() check since we need
11704: FNM_CASEFOLD so go back to our custom one.
11705: [f10d76237486]
11706:
11707: * env.c:
11708: Fix preserving of variables in env_keep.
11709: [d040049d6b84]
11710:
11711: * env.c:
11712: add XAUTHORIZATION
11713: [0d589a5fe015]
11714:
11715: * UPGRADE:
11716: expand upon env resetting and mention that it began in 1.6.9 not
11717: 1.7.
11718: [dba251655c76]
11719:
11720: * sudoers.pod:
11721: Update descriptions of env_keep and env_check to match current
11722: reality.
11723: [dba77357954b]
11724:
11725: 2007-06-18 Todd C. Miller <Todd.Miller@courtesan.com>
11726:
11727: * env.c:
11728: Add LINGUAS to initial_checkenv_table. Add COLORS, HOSTNAME,
11729: LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to intial_keepenv_table.
11730: [eec4632bd190]
11731:
11732: * env.c, logging.c:
11733: Treat USERNAME environemnt variable like LOGNAME/USER
11734: [09f52dcfd70c]
11735:
11736: * env.c:
11737: Don't need to populate keepenv table with the contents of the
11738: checkenv table.
11739: [527a14afd973]
11740:
11741: * sudo.c:
11742: Don't force sudo into the C locale.
11743: [8a5bd301ef96]
11744:
11745: * env.c:
11746: Make env_check apply when env_reset it true. Environment variables
11747: are passed through unless they contain '/' or '%'. There is no need
11748: to have a variable in both env_check and env_keep.
11749: [840c802721e4]
11750:
11751: 2007-06-16 Todd C. Miller <Todd.Miller@courtesan.com>
11752:
11753: * visudo.c:
11754: Remove an duplicate lock_file() call and add a comment.
11755: [5af9dcdf0eb6]
11756:
11757: * UPGRADE:
11758: Add sudo 1.6.9 upgrade note.
11759: [1585149f2914]
11760:
11761: 2007-06-14 Todd C. Miller <Todd.Miller@courtesan.com>
11762:
11763: * interfaces.c:
11764: Solaris will return EINVAL if the buffer used in SIOCGIFCONF is too
11765: small. From Klaus Wagner.
11766: [d6899fc44f77]
11767:
11768: * logging.c, sudo.h:
11769: Redo the long syslog line splitting based on a patch from Eygene
11770: Ryabinkin. Include memrchr() for systems without it.
11771: [66a50e8d553a]
11772:
11773: * memrchr.c:
11774: Redo the long syslog line splitting based on a patch from Eygene
11775: Ryabinkin. Include memrchr() for systems without it.
11776: [2f6702b7d41b]
11777:
11778: * Makefile.in, config.h.in, configure, configure.in:
11779: Redo the long syslog line splitting based on a patch from Eygene
11780: Ryabinkin. Include memrchr() for systems without it.
11781: [407a46190921]
11782:
11783: * configure.in:
11784: Since we need to be able to convert timespec to timeval for utimes()
11785: the last 3 digits in the tv_nsec are not significant. This makes the
11786: sudoedit file date comparison work again.
11787: [9d0258849fa9]
11788:
11789: 2007-06-13 Todd C. Miller <Todd.Miller@courtesan.com>
11790:
11791: * aclocal.m4, configure, configure.in:
11792: Add SUDO_ADD_AUTH macro to deal with adding things to AUTH_OBJS.
11793: This deals with exclusive authentication methods in a simple way.
11794: [7d70072c0f35]
11795:
11796: 2007-06-12 Todd C. Miller <Todd.Miller@courtesan.com>
11797:
11798: * LICENSE:
11799: mkstemp.c is BSD code too.
11800: [29e236d98162]
11801:
11802: * sudo.pod, sudoers.pod, visudo.pod:
11803: No commercial support for now.
11804: [7c76b3e192dd]
11805:
11806: 2007-06-11 Todd C. Miller <Todd.Miller@courtesan.com>
11807:
11808: * sudo.c:
11809: cleanenv() is no more.
11810: [518080514408]
11811:
11812: 2007-06-10 Todd C. Miller <Todd.Miller@courtesan.com>
11813:
11814: * ChangeLog:
11815: Display branch info in Changelog
11816: [44e3b27427c7]
11817:
11818: * utimes.c:
11819: Include config.h early so we have it for TIME_WITH_SYS_TIME
11820: [4bf1a00d0703]
11821:
11822: * ChangeLog:
11823: Fix Changelog generation and update.
11824: [6e960dbcbece]
11825:
11826: 2007-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
11827:
11828: * closefrom.c:
11829: Use /proc/self/fd instead of /proc/$$/fd
11830:
11831: Move old-style fd closing into closefrom_fallback() and call that if
11832: /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
11833: [faa7e4810758]
11834:
11835: * auth/kerb5.c, config.h.in, configure.in:
11836: o use krb5_verify_user() if available instead of doing it by hand o
11837: use krb5_init_secure_context() if we have it o pass an encryption
11838: type of 0 to krb5_kt_read_service_key() instead of
11839: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
11840: [df7acf72bd7c]
11841:
11842: * env.c:
11843: Check TERM and COLORTERM for '%' and '/' characters. From Debian.
11844: [f92d05197e40]
11845:
11846: * configure.in:
11847: Fix closefrom() substitution in the Makefile
11848: [b642b13fcc5c]
11849:
11850: * TROUBLESHOOTING:
11851: Mention alternate sudo pronunciation.
11852: [7c71dc73409f]
11853:
11854: 2007-06-07 Todd C. Miller <Todd.Miller@courtesan.com>
11855:
11856: * env.c:
11857: Remove KRB5_KTNAME from environment. Allow COLORTERM.
11858: [70f35a79f780]
11859:
11860: * auth/kerb5.c:
11861: If we cannot get a valid service key using the default keytab it is
11862: a fatal error. Fixes a bug where sudo could be tricked into
11863: allowing access when it should not by a fake KDC. From Thor Lancelot
11864: Simon.
11865: [a3ae6a47cb23]
11866:
11867: 2007-05-12 Todd C. Miller <Todd.Miller@courtesan.com>
11868:
11869: * aclocal.m4, configure, configure.in:
11870: Update long long checks to use AC_CHECK_TYPES and to cache values.
11871: [047318eaaeb2]
11872:
11873: * aclocal.m4, configure.in:
11874: Use AC_FUNC_FNMATCH instead of a homebrew fnmatch checker. We can't
11875: use AC_REPLACE_FNMATCH since that assumes replacing with GNU
11876: fnmatch.
11877: [80513a1003ea]
11878:
11879: 2007-05-11 Todd C. Miller <Todd.Miller@courtesan.com>
11880:
11881: * configure, configure.in:
11882: Add closefrom() to LIB_OBJS not SUDO_OBJS if it is missing since we
11883: need it for visudo now too.
11884: [50837c7c2b5e]
11885:
11886: 2007-04-24 Todd C. Miller <Todd.Miller@courtesan.com>
11887:
11888: * sudoers.pod:
11889: Attempt to clarify the bit talking about network numbers w/o
11890: netmasks.
11891: [211e68c1d034]
11892:
11893: * sudo.pod:
11894: Clarify timestamp dir ownership sentence.
11895: [9178f132c7f7]
11896:
11897: 2007-04-20 Todd C. Miller <Todd.Miller@courtesan.com>
11898:
11899: * auth/pam.c:
11900: Linux PAM now defines __LINUX_PAM__, not __LIBPAM_VERSION. From
11901: Dmitry V. Levin.
11902: [81fce91667bc]
11903:
11904: 2007-04-16 Todd C. Miller <Todd.Miller@courtesan.com>
11905:
11906: * sudo.c:
11907: -i is also one of the mutually exclusive options to list it in the
11908: warning message. Noted by Chris Pepper.
11909: [7da73fb248e9]
11910:
11911: 2007-04-12 Todd C. Miller <Todd.Miller@courtesan.com>
11912:
11913: * visudo.pod:
11914: The sudoers variable is env_editor, not enveditor. From Jean-
11915: Francois Saucier.
11916: [2a86ec09a6db]
11917:
11918: 2007-03-29 Todd C. Miller <Todd.Miller@courtesan.com>
11919:
11920: * redblack.c:
11921: I tracked down the original author so credit him and include his
11922: license info.
11923: [3733553a1bba]
11924:
11925: 2007-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
11926:
11927: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
11928: sudoers.pod:
11929: Fix typos; from Jason McIntyre.
11930: [1ee4ce2512f2]
11931:
11932: * logging.c:
11933: Restore signal mask before calling reapchild(). Fixes a possible
11934: race condition that could prevent sudo from properly waiting for the
11935: child.
11936: [9ee4192385dc]
11937:
11938: 2007-01-31 Todd C. Miller <Todd.Miller@courtesan.com>
11939:
11940: * pwutil.c:
11941: Don't declare pw_free() if we are not going to use it.
11942: [adb79a4289ca]
11943:
11944: * env.c:
11945: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD and
11946: LDR_PRELOAD64. The 64-bit version is not currently supported.
11947: Remove zero_env() prototype as it no longer exists.
11948: [b4fe65027fb6]
11949:
11950: 2006-12-11 Todd C. Miller <Todd.Miller@courtesan.com>
11951:
11952: * logging.c:
11953: Add "Auto-Submitted: auto-generated" line to sudo mail for rfc 3834.
11954: [78002ad90f7b]
11955:
11956: 2006-09-29 Todd C. Miller <Todd.Miller@courtesan.com>
11957:
11958: * auth/pam.c:
11959: If the user enters ^C at the password prompt, abort instead of
11960: trying to authenticate with an empty password (which causes an
11961: annoying delay).
11962: [da3f27b747c7]
11963:
11964: 2006-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
11965:
11966: * closefrom.c, config.h.in, configure, configure.in:
11967: Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by
11968: Darren Tucker.
11969: [0331b7780759]
11970:
11971: * pwutil.c:
11972: pw_free() is only used by sudo_freepwcache() so ifdef it out too.
11973: [0014c0d9eeba]
11974:
11975: 2006-08-04 Todd C. Miller <Todd.Miller@courtesan.com>
11976:
11977: * config.guess, config.sub:
11978: Update to latest versions from cvs.savannah.gnu.org
11979: [aa0143101c20]
11980:
11981: 2006-07-31 Todd C. Miller <Todd.Miller@courtesan.com>
11982:
11983: * pwutil.c, sudo_edit.c:
11984: Move password/group cache cleaning out of sudo_end{pw,grp}ent() so
11985: we can close the passwd/group files early.
11986: [559074bd7eb7]
11987:
11988: * config.h.in, configure, configure.in, set_perms.c:
11989: Add seteuid() flavor of set_perms() for systems without setreuid()
11990: or setresuid() that have a working seteuid(). Tested on Darwin.
11991: [508d8da99189]
11992:
11993: 2006-07-30 Todd C. Miller <Todd.Miller@courtesan.com>
11994:
11995: * mon_systrace.c:
11996: systrace_read() returns ssize_t
11997: [9f97d1d1a59d]
11998:
11999: * configure, configure.in:
12000: Fix typo, -lldap vs. -ldap; from Tim Knox.
12001: [a8cc43c3bb2a]
12002:
12003: 2006-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
12004:
12005: * HISTORY:
12006: Fix typo; Matt Ackeret
12007: [86964ee3dfbd]
12008:
12009: 2006-07-17 Todd C. Miller <Todd.Miller@courtesan.com>
12010:
12011: * sudo.c:
12012: Print sudoers path in -V mode for root.
12013: [dc43f2d75bd9]
12014:
12015: 2006-06-15 Todd C. Miller <Todd.Miller@courtesan.com>
12016:
12017: * ldap.c:
12018: Do a sub tree search instead of a base search (one level in the tree
12019: only) for sudo right objects. This allows system administrators to
12020: categorize the rights in a tree to make them easier to manage.
12021: [6d2d9abf996e]
12022:
12023: 2005-12-28 Todd C. Miller <Todd.Miller@courtesan.com>
12024:
12025: * sudo.pod:
12026: fix typo
12027: [1473413bcbda]
12028:
12029: 2005-12-04 Todd C. Miller <Todd.Miller@courtesan.com>
12030:
12031: * ldap.c:
12032: Convert GET_OPT and GET_OPTI to use just 2 args. Add timelimit and
12033: bind_timelimit support; adapted from gentoo.
12034: [afc816093026]
12035:
12036: 2005-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
12037:
12038: * ldap.c:
12039: Support comments that start in the middle of a line
12040: [c25df6ee3db8]
12041:
12042: * configure, configure.in:
12043: Define LDAP_DEPRECATED until we start using ldap_get_values_len()
12044: [ee249bfe230a]
12045:
12046: 2005-11-18 Todd C. Miller <Todd.Miller@courtesan.com>
12047:
12048: * closefrom.c:
12049: Silence gcc -Wsign-compare; djm@openbsd.org
12050: [28769ce6418d]
12051:
12052: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c:
12053: cleanup() now takes an int as an arg so it can be used as a signal
12054: handler too.
12055: [2bb0df34d09c]
12056:
12057: * sudo.c:
12058: Make a copy of the shell field in the passwd struct for NewArgv to
12059: avoid a use after free situation after sudo_endpwent() is called.
12060: [5dcc9ffd362e]
12061:
12062: 2005-11-17 Todd C. Miller <Todd.Miller@courtesan.com>
12063:
12064: * config.h.in, configure, configure.in:
12065: Add mkstemp() for those poor souls without it.
12066: [5fdd02e863e0]
12067:
12068: * mkstemp.c:
12069: Add mkstemp() for those poor souls without it.
12070: [c99401207860]
12071:
12072: * Makefile.in:
12073: Add mkstemp() for those poor souls without it.
12074: [9c1cf2678f24]
12075:
12076: 2005-11-15 Todd C. Miller <Todd.Miller@courtesan.com>
12077:
12078: * env.c:
12079: Add PERL5DB to list of environment variables to remove.
12080: [7375c27ecf75]
12081:
12082: 2005-11-13 Todd C. Miller <Todd.Miller@courtesan.com>
12083:
12084: * mon_systrace.c, mon_systrace.h:
12085: Instead of calling the check function twice with a state cookie use
12086: separate check/log functions.
12087:
12088: Check more ioctl() calls for failure.
12089:
12090: systrace_{read,write} now return the number of bytes read/written or
12091: -1 on error.
12092: [3dc8946d90e9]
12093:
12094: * env.c:
12095: Add more environment variables to remove; from gentoo linux Add some
12096: comments about what bad env variables go to what (more to do)
12097: [6918110a6b82]
12098:
12099: 2005-11-11 Todd C. Miller <Todd.Miller@courtesan.com>
12100:
12101: * sudo.c, sudo_edit.c:
12102: Move sudo_end{gr,pw}ent() until just before the exec since they free
12103: up our cached copy of the passwd structs, including sudo_user and
12104: sudo_runas. Fixes a use-after-free bug.
12105: [54de3778bad0]
12106:
12107: * visudo.c:
12108: Close all fd's before executing editor.
12109: [4fcc05e1bec8]
12110:
12111: * sudo.c:
12112: Enable malloc debugging on OpenBSD when SUDO_DEVEL is set.
12113: [ef0e8ffa5c9f]
12114:
12115: * check.c:
12116: Fix fd leak when lecture file option is enabled. From Jerry Brown
12117: [ce97f9207cd8]
12118:
12119: 2005-11-07 Todd C. Miller <Todd.Miller@courtesan.com>
12120:
12121: * env.c:
12122: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
12123: environment variables to remove. From Charles Morris
12124: [c96e1367d1c1]
12125:
12126: 2005-11-01 Todd C. Miller <Todd.Miller@courtesan.com>
12127:
12128: * env.c:
12129: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
12130: [72a6a1571226]
12131:
12132: 2005-10-28 Todd C. Miller <Todd.Miller@courtesan.com>
12133:
12134: * env.c:
12135: add PS4 and SHELLOPTS to initial_badenv_table for bash
12136: [89dfb3f318f3]
12137:
12138: 2005-08-15 Todd C. Miller <Todd.Miller@courtesan.com>
12139:
12140: * sudoers.pod:
12141: Fix typo; Toby Peterson
12142: [b7a3222b23f4]
12143:
12144: 2005-08-02 Todd C. Miller <Todd.Miller@courtesan.com>
12145:
12146: * tsgetgrpw.c:
12147: Make return buffers static so they don't get clobbered
12148: [13323a39b9f5]
12149:
12150: 2005-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
12151:
12152: * auth/securid5.c:
12153: Fix securid5 authentication, was not checking for ACM_OK. Also add
12154: default cases for the two switch()es. Problem noted by ccon at
12155: worldbank
12156: [14091e418333]
12157:
12158: 2005-06-27 Todd C. Miller <Todd.Miller@courtesan.com>
12159:
12160: * ldap.c:
12161: Remove ncat() in favor of just counting bytes and pre-allocating
12162: what is needed.
12163: [25b8712adb61]
12164:
12165: 2005-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
12166:
12167: * ldap.c:
12168: Fix up some comments Add missing fclose() for the rootbinddn case
12169: [ae95c8a89711]
12170:
12171: * ldap.c:
12172: align struct ldap_config
12173: [35d0d64c76f8]
12174:
12175: * ldap.c:
12176: use LINE_MAX for max conf file line size
12177: [da116cb8853d]
12178:
12179: * pathnames.h.in:
12180: add _PATH_LDAP_SECRET
12181: [128b04ecfab7]
12182:
12183: * README.LDAP:
12184: Mention rootbinddn Give example ou=SUDOers container
12185: [852edc69bd1c]
12186:
12187: 2005-06-25 Todd C. Miller <Todd.Miller@courtesan.com>
12188:
12189: * INSTALL, configure, configure.in, ldap.c:
12190: Support rootbinddn in ldap.conf
12191: [1615c91522a1]
12192:
12193: * env.c, sudo.pod, sudoers.pod:
12194: Preserve DISPLAY environment variable by default.
12195: [05f503d5f438]
12196:
12197: * acsite.m4, configure:
12198: set need_lib_prefix=no for all cases; this is safe for LD_PRELOAD
12199: [18a04dea8d05]
12200:
12201: * acsite.m4, configure:
12202: set need_version=no for all cases; this is safe for LD_PRELOAD
12203: [b542560e1a73]
12204:
12205: * aclocal.m4:
12206: typo
12207: [c040df0fcd5a]
12208:
12209: * configure, configure.in:
12210: Add dragonfly
12211: [f13794618636]
12212:
12213: * auth/pam.c:
12214: Fix call to pam_end() when pam_open_session() fails.
12215: [0be47cdfdef1]
12216:
12217: * configure:
12218: regen
12219: [7f5c13b4b800]
12220:
12221: * acsite.m4:
12222: rebuild acsite.m4 from libtool 1.9f libtool.m4 ltoptions.m4
12223: ltsugar.m4 ltversion.m4
12224: [a7ba9fd1a2ab]
12225:
12226: * config.guess, config.sub, ltmain.sh:
12227: merge in local changes: config.guess: o better openbsd support
12228: config.sub: o hiuxmpp support ltmain.sh o remove requirement that
12229: libs must begin with "lib" o don't print a bunch of crap about
12230: library installs o don't run ldconfig
12231: [f4149f2c720f]
12232:
12233: * config.guess, config.sub, ltmain.sh:
12234: libtool 1.9f
12235: [82a534e7121f]
12236:
12237: * configure.in:
12238: Update with autoupdate and make minor changes for libtool 1.9f
12239: [11b5ae5c1428]
12240:
12241: 2005-06-23 Todd C. Miller <Todd.Miller@courtesan.com>
12242:
12243: * parse.c:
12244: don't call sudo_ldap_display_cmnd if ldap not setup
12245: [8bcf6c094ffe]
12246:
12247: * sudo_edit.c, visudo.c:
12248: Move declatation of struct timespec to its own include files for
12249: systems without it since it needs time_t defined.
12250: [b95c333299a0]
12251:
12252: * gettime.c:
12253: Move declatation of struct timespec to its own include files for
12254: systems without it since it needs time_t defined.
12255: [021b4569cc0c]
12256:
12257: * fileops.c:
12258: Move declatation of struct timespec to its own include files for
12259: systems without it since it needs time_t defined.
12260: [dd8573b2ee7d]
12261:
12262: * emul/timespec.h:
12263: Move declatation of struct timespec to its own include files for
12264: systems without it since it needs time_t defined.
12265: [f95137771564]
12266:
12267: * check.c, compat.h:
12268: Move declatation of struct timespec to its own include files for
12269: systems without it since it needs time_t defined.
12270: [2ef2ace8fe85]
12271:
12272: * ldap.c:
12273: Don't set safe_cmnd for the "sudo ALL" case.
12274: [ad7fa9e07da0]
12275:
12276: 2005-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
12277:
12278: * auth/pam.c:
12279: Call pam_open_session() and pam_close_session() to give pam_limits a
12280: chance to run. Idea from Karel Zak.
12281: [fed46d471350]
12282:
12283: 2005-04-24 Todd C. Miller <Todd.Miller@courtesan.com>
12284:
12285: * check.c, sudo.c:
12286: Add explicit cast from mode_t -> u_int in printf to silence warnings
12287: on Solaris
12288: [17bb961fe22d]
12289:
12290: * parse.c:
12291: include grp.h to silence a warning on Solaris
12292: [14386fbab640]
12293:
12294: 2005-04-23 Todd C. Miller <Todd.Miller@courtesan.com>
12295:
12296: * parse.c:
12297: Fix printing of += and -= defaults.
12298: [a667604c56cd]
12299:
12300: 2005-04-17 Todd C. Miller <Todd.Miller@courtesan.com>
12301:
12302: * mon_systrace.c:
12303: Sanity check number of syscall args with argsize. Not really needed
12304: but a little paranoia never hurts.
12305: [6bb455a2c2d6]
12306:
12307: * mon_systrace.c, mon_systrace.h:
12308: Don't do pointer arithmetic on void * Use int, not size_t/ssize_t
12309: for systrace lengths (since it uses int)
12310: [3cafccffcffd]
12311:
12312: 2005-04-16 Todd C. Miller <Todd.Miller@courtesan.com>
12313:
12314: * mon_systrace.c:
12315: Add some memsets for paranoia Fix namespace collsion w/ error Check
12316: rval of decode_args() and update_env() Remove improper setting of
12317: validated variable
12318: [3d385158354d]
12319:
12320: 2005-04-12 Todd C. Miller <Todd.Miller@courtesan.com>
12321:
12322: * parse.c, sudo.c, sudo.h:
12323: In -l mode, only check local sudoers file if def_ignore_sudoers is
12324: not set and call LDAP versions from display_privs() and
12325: display_cmnd() instead of directly from main(). Because of this we
12326: need to defer closing the ldap connection until after -l processing
12327: has ocurred and we must pass in the ldap pointer to display_privs()
12328: and display_cmnd().
12329: [1dfc2e8c9f2b]
12330:
12331: * ldap.c:
12332: Reorganize LDAP code to better match normal sudoers parsing.
12333: Instead of storing strings for later printing in -l mode we do
12334: another query since the authenticating user and the user being
12335: listed may not be the same (the new -U flag). Also add support for
12336: "sudo -l command".
12337:
12338: There is still a fair bit if duplicated code that can probably be
12339: refactored.
12340: [e9568f19bde5]
12341:
12342: 2005-04-11 Todd C. Miller <Todd.Miller@courtesan.com>
12343:
12344: * ldap.c:
12345: Replace pass variable with do_netgr for better readability.
12346: [1bba841b6e79]
12347:
12348: * ldap.c:
12349: use DPRINTF macro
12350: [02b159b66bb5]
12351:
12352: * ldap.c:
12353: estrdup, not strdup
12354: [22cdee7973c1]
12355:
12356: 2005-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
12357:
12358: * parse.c:
12359: Add macro to test if the tag changed to improve readability.
12360: [4e11b4819556]
12361:
12362: * parse.c:
12363: Avoid printing defaults header if there are no defaults to print...
12364: [41a28627df03]
12365:
12366: * glob.c:
12367: Fix a warning on systems without strlcpy().
12368: [6814e0f0e4f4]
12369:
12370: * pwutil.c:
12371: Use macros where possible for sudo_grdup() like sudo_pwdup().
12372: [30f201ff35cd]
12373:
12374: 2005-04-08 Todd C. Miller <Todd.Miller@courtesan.com>
12375:
12376: * utimes.c:
12377: It is possible for tv_usec to hold >= 1000000 usecs so add in
12378: tv_usec / 1000000.
12379: [794ac4d53a65]
12380:
12381: 2005-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
12382:
12383: * auth/kerb5.c:
12384: The component in krb5_principal_get_comp_string() should be 1, not 0
12385: for Heimdal. From Alex Plotnick.
12386: [fefa351c5044]
12387:
12388: 2005-03-29 Todd C. Miller <Todd.Miller@courtesan.com>
12389:
12390: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c, gram.y,
12391: interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c, pwutil.c,
12392: redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
12393: Add efree() for consistency with emalloc() et al. Allows us to rely
12394: on C89 behavior (free(NULL) is valid) even on K&R.
12395: [7876bb80d87c]
12396:
12397: * parse.c, sudo.c:
12398: Move initgroups() for -U option into display_privs() so group
12399: matching in sudoers works correctly.
12400: [b074428ad2ca]
12401:
12402: 2005-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
12403:
12404: * ldap.c:
12405: Removed duplicate call to ldap_unbind_s introduced along with
12406: sudo_ldap_close.
12407: [19acc1c20f7c]
12408:
12409: * parse.c:
12410: Add missing space in Defaults printing
12411: [95d2935bf6d4]
12412:
12413: 2005-03-25 Todd C. Miller <Todd.Miller@courtesan.com>
12414:
12415: * pwutil.c:
12416: Sync sudo_pwdup with OpenBSD changes: use macros for size computaton
12417: and string copies.
12418: [6b6b241495e5]
12419:
12420: 2005-03-19 Todd C. Miller <Todd.Miller@courtesan.com>
12421:
12422: * pwutil.c:
12423: Zero old pw_passwd before replacing with version from shadow file.
12424: [3251b349dfe1]
12425:
12426: * configure, configure.in:
12427: Only attempt shadow password detection if PAM is not being used Add
12428: shadow_* variables to make shadow password detection more generic.
12429: [d498a3423ac9]
12430:
12431: * configure.in:
12432: Use OSDEFS for os-specific -D_FOO_BAR stuff rather than CPPFLAGS
12433: [04d55bbd5e35]
12434:
12435: 2005-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
12436:
12437: * sudoers.pod:
12438: use a non-breaking space to avoid a double space after e.g.
12439: [11cdb54bdf7b]
12440:
12441: * sudo.pod:
12442: commna, not colon after e.g.
12443: [8d5875ff72e0]
12444:
12445: 2005-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
12446:
12447: * sudo_noexec.c:
12448: Add __ variants of the exec functions. GNU libc at least uses
12449: __execve() internally.
12450: [d1880473d790]
12451:
12452: * indent.pro:
12453: Match reality a bit more.
12454: [633e3fa875a7]
12455:
12456: * pwutil.c:
12457: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
12458: [128f7b21c2ee]
12459:
12460: * pwutil.c:
12461: Store shadow password after making a local copy of struct passwd in
12462: case normal and shadow routines use the same internal buffer in
12463: libc.
12464: [f806052a6ffc]
12465:
12466: 2005-03-11 Todd C. Miller <Todd.Miller@courtesan.com>
12467:
12468: * alloc.c, logging.c:
12469: Make varargs usage consistent with the rest of the code.
12470: [3d45affc9851]
12471:
12472: 2005-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
12473:
12474: * sudo_noexec.c:
12475: Wrap more of the exec family since on Linux the others do not appear
12476: to go through the normal execve() path.
12477: [8167769b4e19]
12478:
12479: * visudo.c:
12480: make print_unused static like proto says
12481: [ecf10e1bae55]
12482:
12483: * glob.c:
12484: silence a warning on K&R systems
12485: [2e00425f1a5c]
12486:
12487: * alias.c, error.c:
12488: make this build in K&R land
12489: [156f65f8525a]
12490:
12491: * parse.c:
12492: make this build in K&R land
12493: [6fc9276889cb]
12494:
12495: 2005-03-08 Todd C. Miller <Todd.Miller@courtesan.com>
12496:
12497: * toke.c:
12498: regen
12499: [3b349748cd21]
12500:
12501: 2005-03-06 Todd C. Miller <Todd.Miller@courtesan.com>
12502:
12503: * ldap.c:
12504: return(foo) not return foo optimize _atobool() slightly
12505: [11d09d154ed5]
12506:
12507: * ldap.c:
12508: Use TRUE/FALSE
12509: [53999320d98f]
12510:
12511: * ldap.c:
12512: Reformat to match the rest of sudo's code.
12513: [1bd0f2afa0e7]
12514:
12515: * sudo.pod:
12516: I am the primary author
12517: [5d311ecd85c6]
12518:
12519: 2005-02-23 Todd C. Miller <Todd.Miller@courtesan.com>
12520:
12521: * Makefile.in, README, RUNSON:
12522: The RUNSON file is toast--it confused too many people and really
12523: isn't needed in a configure-oriented world.
12524: [96a6ef7bbc08]
12525:
12526: * INSTALL:
12527: alternate -> alternative
12528: [b65015c5d0a2]
12529:
12530: * tgetpass.c:
12531: Use TCSADRAIN instead of TCSAFLUSH since some OSes have issues with
12532: TCSAFLUSH.
12533: [c66b4763ffdc]
12534:
12535: * toke.l:
12536: Allow leading blanks before Defaults and Foo_Alias definitions
12537: [2add513d9277]
12538:
12539: * Makefile.in:
12540: fix rules to build toke.o and gram.o in devel mode
12541: [96cbb414ebd3]
12542:
12543: 2005-02-20 Todd C. Miller <Todd.Miller@courtesan.com>
12544:
12545: * sudoers.pod:
12546: env_keep overrides set_logname
12547: [401877193a15]
12548:
12549: * env.c:
12550: Fix disabling set_logname and make env_keep override set_logname.
12551: [0906e7a5ed93]
12552:
12553: * compat.h, config.h.in, configure, configure.in:
12554: No longer need memmove()
12555: [43bdb6efe3f2]
12556:
12557: * env.c, sudo.c:
12558: Just clean the environment once. This assumes that any further
12559: setenv/putenv will be able to handle the fact that we replaced
12560: environ with our own malloc'd copy but all the implementations I've
12561: checked do.
12562: [11658fe92ba2]
12563:
12564: 2005-02-16 Todd C. Miller <Todd.Miller@courtesan.com>
12565:
12566: * env.c, sudo.c:
12567: In -i mode, base the value of insert_env()'s dupcheck flag on
12568: DID_FOO flags. Move checks for $HOME resetting into rebuild_env()
12569: [8365b0bd0c71]
12570:
12571: 2005-02-13 Todd C. Miller <Todd.Miller@courtesan.com>
12572:
12573: * env.c, sudo.c:
12574: Move setting of user_path, user_shell, user_prompt and prev_user
12575: into init_vars() since user_shell at least is needed there.
12576: [37e22dce66e9]
12577:
12578: 2005-02-12 Todd C. Miller <Todd.Miller@courtesan.com>
12579:
12580: * Makefile.in:
12581: fix devel builds
12582: [9fbb15ef164c]
12583:
12584: * sudo.c:
12585: Fix some printf format mismatches on error.
12586: [ffc1c3f11740]
12587:
12588: * check.c:
12589: Fix some printf format mismatches on error.
12590: [7b3b508adf50]
12591:
12592: * configure, gram.c, toke.c:
12593: regen
12594: [aa76f9d8b02a]
12595:
12596: * Makefile.in, aclocal.m4, alias.c, alloc.c, auth/afs.c,
12597: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
12598: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
12599: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c,
12600: auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c,
12601: closefrom.c, compat.h, configure.in, defaults.c, defaults.h,
12602: emul/utime.h, env.c, error.c, fileops.c, find_path.c, getprogname.c,
12603: getspwuid.c, gettime.c, goodpath.c, gram.y, interfaces.c,
12604: interfaces.h, ldap.c, logging.c, logging.h, match.c, mon_systrace.c,
12605: parse.c, redblack.c, redblack.h, set_perms.c, sigaction.c,
12606: snprintf.c, strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
12607: sudo.h, sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.pod,
12608: testsudoers.c, tgetpass.c, toke.l, utimes.c, version.h, visudo.c,
12609: visudo.pod, zero_bytes.c:
12610: Update copyright years.
12611: [0610c3654739]
12612:
12613: * Makefile.binary.in:
12614: Update copyright years.
12615: [d78ffc9f2e2b]
12616:
12617: * LICENSE:
12618: Update copyright years.
12619: [f60473bca4b1]
12620:
12621: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
12622: version 1.7
12623: [aa977a544ca1]
12624:
12625: * WHATSNEW:
12626: What's new in sudo 1.7, based on the 1.7 CHANGES entries.
12627: [ecfcf7269c14]
12628:
12629: 2005-02-11 Todd C. Miller <Todd.Miller@courtesan.com>
12630:
12631: * compat.h, logging.h, sudo.h:
12632: Add __printflike and use it with gcc to warn about printf-like
12633: format mismatches
12634: [b192ad4a0548]
12635:
12636: 2005-02-10 Todd C. Miller <Todd.Miller@courtesan.com>
12637:
12638: * CHANGES, ChangeLog:
12639: Replaced CHANGES file with ChangeLog generated from cvs logs
12640: [d9ace9dab98f]
12641:
12642: * set_perms.c:
12643: Use warning/error instead of perror/fatal.
12644: [e33259df7738]
12645:
12646: * config.guess:
12647: Update OpenBSD section
12648: [9d2c23de6801]
12649:
12650: * UPGRADE:
12651: Add upgrading noted for 1.7
12652: [1fb6b6d6df07]
12653:
12654: * env.c, sudo.c, sudoers.pod:
12655: Instead of zeroing out the environment, just prune out entries based
12656: on the env_delete and env_check lists. Base building up the new
12657: environment on the current environment and the variables we removed
12658: initially.
12659: [fc192df8fd15]
12660:
12661: * config.h.in, configure, configure.in, sudo.c:
12662: Set locale to "C" if locales are supported, just to be safe.
12663: [91fbaa98f02e]
12664:
12665: * toke.c, toke.l:
12666: Cast?argument to ctype functions to unsigned char.
12667: [e096b4d65796]
12668:
12669: 2005-02-08 Todd C. Miller <Todd.Miller@courtesan.com>
12670:
12671: * env.c:
12672: correct value for DID_USER
12673: [b5b05d36ec15]
12674:
12675: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c:
12676: #include <compat.h> not "compat.h"
12677: [7a0ad9a0ccd7]
12678:
12679: * defaults.c:
12680: Reset the environment by default.
12681: [4ecc6423e0f0]
12682:
12683: * sudo.c:
12684: Alloc an extra slot in NewArgv. Removes the need to malloc an new
12685: vector if execve() fails.
12686: [83dfb6f584a7]
12687:
12688: 2005-02-07 Todd C. Miller <Todd.Miller@courtesan.com>
12689:
12690: * INSTALL, config.h.in, configure, configure.in, sudo.c:
12691: Use execve(2) and wrap the command in sh if we get ENOEXEC.
12692: [c0c6af4e2a21]
12693:
12694: 2005-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
12695:
12696: * sudo_noexec.c:
12697: Only include time.h on systems that lack struct timespec which gets
12698: defind in compat.h (using time_t).
12699: [e373e518b4cb]
12700:
12701: * sudo_noexec.c:
12702: Include time.h for time_t in compat.h for systems w/o struct
12703: timespec.
12704: [a34b5637e458]
12705:
12706: * compat.h, config.h.in, configure, configure.in:
12707: use bcopy on systems w/o memmove
12708: [f835eafd78c6]
12709:
12710: * compat.h:
12711: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1 so limit its
12712: use to gcc >= 2.8.
12713: [1cb9a4e58566]
12714:
12715: * Makefile.in:
12716: Add explicit rule to build sudo_noexec.lo
12717: [df1dfcf8dd77]
12718:
12719: 2005-02-05 Todd C. Miller <Todd.Miller@courtesan.com>
12720:
12721: * INSTALL.configure, Makefile.in:
12722: No longer depend on VPATH; pointed out a bunch of missed
12723: dependencies.
12724: [601a45d4af6b]
12725:
12726: * TROUBLESHOOTING:
12727: Help for PAM when account section is missing
12728: [9b8221256756]
12729:
12730: * auth/pam.c:
12731: Give user a clue when there is a missing "account" section in the
12732: PAM config.
12733: [2529625c0495]
12734:
12735: * auth/pam.c:
12736: Better error handling.
12737: [518c9bda23d8]
12738:
12739: * config.h.in, configure, configure.in:
12740: Move _FOO_SOURCE to CPPFLAGS so it takes effect as early as
12741: possible. Silences a warning about isblank() on linux.
12742: [19c94d7ecdc8]
12743:
12744: * auth/pam.c:
12745: Fix typo (missing comma) that caused an incorrect number of args to
12746: be passed to log_error().
12747: [0099dfec560f]
12748:
12749: 2005-02-01 Todd C. Miller <Todd.Miller@courtesan.com>
12750:
12751: * pwutil.c:
12752: Don't try to destroy a tree we didn't create.
12753: [d43c4fe03aa4]
12754:
12755: 2005-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
12756:
12757: * alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
12758: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
12759: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
12760: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c,
12761: compat.h, defaults.c, env.c, error.c, fileops.c, find_path.c,
12762: fnmatch.c, getcwd.c, getprogname.c, getspwuid.c, gettime.c,
12763: goodpath.c, gram.c, gram.y, interfaces.c, ldap.c, logging.c,
12764: match.c, mon_systrace.c, parse.c, pwutil.c, set_perms.c,
12765: sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c,
12766: strlcpy.c, sudo.c, sudo_edit.c, sudo_noexec.c, testsudoers.c,
12767: tgetpass.c, toke.c, toke.l, utimes.c, visudo.c, zero_bytes.c:
12768: Add __unused to rcsids
12769: [ad6b4ac45705]
12770:
12771: 2005-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
12772:
12773: * configure, configure.in:
12774: Fix error message when mixing invalid auth types
12775: [68069b3ff5bc]
12776:
12777: * INSTALL:
12778: PAM, AIX auth, BSD auth and login_cap are now on by default if the
12779: OS supports them.
12780: [4e44e9098cf0]
12781:
12782: * auth/sudo_auth.h, config.h.in:
12783: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
12784: [2d569b43b23e]
12785:
12786: * configure.in:
12787: Better checking for conflicting authentication methods Display the
12788: authentication methods used at the end of configure Rename --with-
12789: authenticate -> --with-aixauth Use --with-aixauth, --with-bsdauth,
12790: --with-pam, --with-logincap by default on systems that support them
12791: unless disabled. Add OSMAJOR variable that replaces old OSREV; now
12792: OSREV has full version number
12793: [a21115b6fe9f]
12794:
12795: 2005-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
12796:
12797: * def_data.c, def_data.in, sudo.c, sudoers.pod:
12798: s/-O/-C/
12799: [ee73f1b81923]
12800:
12801: 2005-01-14 Todd C. Miller <Todd.Miller@courtesan.com>
12802:
12803: * configure.in:
12804: Replace: test -n "$FOO" || FOO="bar"
12805:
12806: With: : ${FOO='bar'}
12807: [37552d9054fc]
12808:
12809: 2005-01-09 Todd C. Miller <Todd.Miller@courtesan.com>
12810:
12811: * pwutil.c, testsudoers.c, tsgetgrpw.c:
12812: Use function pointers to only call private passwd/group routines
12813: when using a nonstandard passwd/group file.
12814: [215908681dfb]
12815:
12816: 2005-01-06 Todd C. Miller <Todd.Miller@courtesan.com>
12817:
12818: * CHANGES:
12819: sync
12820: [2e55c03f5790]
12821:
12822: * tsgetgrpw.c:
12823: Can't use strtok() since it doesn't handle empty fields so add
12824: getpwent()/getgrent() functions and call those.
12825: [bdaa5b0db70e]
12826:
12827: 2005-01-05 Todd C. Miller <Todd.Miller@courtesan.com>
12828:
12829: * Makefile.in:
12830: Fix dummied out toke.c and gram.c dependencies.
12831: [4b909c8b2ebe]
12832:
12833: * Makefile.in:
12834: Rename PARSESRCS -> GENERATED since it is only used in the clean
12835: target Add devdir variable and use it to specify the path to parser
12836: sources
12837: [f27b3f41ca23]
12838:
12839: * configure:
12840: regen
12841: [22c6435dbd46]
12842:
12843: * configure.in:
12844: Add a devdir variables that defaults to $(srcdir) and is set to . if
12845: --devel was specified. Allows for proper dependecies building the
12846: parser.
12847: [a36d694c6d21]
12848:
12849: * testsudoers.c:
12850: Add support for custom passwd/group files.
12851: [296549ff4b87]
12852:
12853: * Makefile.in:
12854: Build private copy of pwutil.o for testsudoers with MYPW defined so
12855: it uses our own passwd/group routines.
12856: [bafa54ec78ca]
12857:
12858: * visudo.c:
12859: Remove sudo_*{pw,gr}* stubs and add sudo_setspent/sudo_endspent
12860: stubs instead. We can now just use the caching sudo_*{pw,gr}*
12861: functions in pwutil.c Add comment about wanting to call
12862: sudo_endpwent/sudo_endgrent in cleanup()
12863: [7e59d6b5510d]
12864:
12865: * tsgetgrpw.c:
12866: Remove caching; we will just use what is in pwutil.c Use global
12867: buffers for passwd/group structs Rename functions from sudo_* to
12868: my_*
12869: [8c1e068f574c]
12870:
12871: * logging.c, sudo.c:
12872: g/c pwcache_init/pwcache_destroy
12873: [60a24909b947]
12874:
12875: * sudo.h:
12876: Undo last commit and add sudo_setspent and sudo_endspent instead.
12877: [bac80db08296]
12878:
12879: * getspwuid.c, pwutil.c:
12880: Move all but the shadow stuff from getspwuid.c to pwutil.c and
12881: pwcache_get and pwcache_put as they are no longer needed. Also add
12882: preprocessor magic to use private versions of the passwd and group
12883: routines if MYPW is defined (for use by testsudoers).
12884: [a16b8678a426]
12885:
12886: * tsgetgrpw.c:
12887: zero out struct passwd/group before filling it in so if there are
12888: fields we don't handle they end up as 0.
12889: [274cb6a93301]
12890:
12891: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c:
12892: Adapt to pwutil.c
12893: [43ebd04c8b82]
12894:
12895: * Makefile.in:
12896: Add tsgetgrpw.c and pwutil.c Rename the *OBJ variables for better
12897: readability.
12898: [7f88c6061e2d]
12899:
12900: * tsgetgrpw.c:
12901: Passwd and group lookup routines for testsudoers that support
12902: alternate passwd and group files.
12903: [d7803101d34e]
12904:
12905: * getspwuid.c, pwutil.c:
12906: Split off pw/gr cache and dup code into its own file. This allows
12907: visudo and testsudoers to use the pw/gr cache too.
12908: [ef333d3ffedf]
12909:
12910: 2005-01-02 Todd C. Miller <Todd.Miller@courtesan.com>
12911:
12912: * parse.c:
12913: Print Defaults info in "sudo -l" output and wrap lines based on the
12914: terminal width.
12915: [e559eae4250e]
12916:
12917: 2005-01-01 Todd C. Miller <Todd.Miller@courtesan.com>
12918:
12919: * match.c, testsudoers.c, visudo.c:
12920: Only check group vector in usergr_matches() if we are matching the
12921: invoking or list user. Always check the group members, even if
12922: there was a group vector.
12923: [d0c7ceb2a041]
12924:
12925: 2004-12-17 Todd C. Miller <Todd.Miller@courtesan.com>
12926:
12927: * LICENSE, Makefile.in, fnmatch.3:
12928: No longer bundle fnmatch.3
12929: [72db4a4ff4e1]
12930:
12931: * CHANGES, TODO:
12932: checkpoint
12933: [e92781bfd99c]
12934:
12935: 2004-12-16 Todd C. Miller <Todd.Miller@courtesan.com>
12936:
12937: * sudo.c:
12938: sort usage
12939: [15e3b876ec2c]
12940:
12941: * sudo.pod:
12942: Sort command line options
12943: [c1fa56584bc4]
12944:
12945: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c, sudo.c,
12946: sudo.pod, sudoers.pod:
12947: Add closefrom sudoers option to start closing at a point other than
12948: 3. Add closefrom_override sudoers option and -C sudo flag to allow
12949: the user to specify a different closefrom starting point.
12950: [370652b099d1]
12951:
12952: * pathnames.h.in:
12953: Add _PATH_DEVNULL for those without it.
12954: [0c4c3e0ceb8b]
12955:
12956: * LICENSE:
12957: no more UCB strcasecmp
12958: [397a6298e07f]
12959:
12960: * strcasecmp.c:
12961: replace BSD licensed one with version derived from pdksh
12962: [d7cfda8c57a2]
12963:
12964: 2004-12-10 Todd C. Miller <Todd.Miller@courtesan.com>
12965:
12966: * sudo.c:
12967: Fix last commit.
12968: [7afb9a180532]
12969:
12970: * sudo.c:
12971: Make sure stdin, stdout and stderr are open and dup them to
12972: /dev/null if not.
12973: [590f387068bd]
12974:
12975: 2004-12-03 Todd C. Miller <Todd.Miller@courtesan.com>
12976:
12977: * ldap.c, mon_systrace.c, sudo.c, sudo.h:
12978: add sudo_ldap_close
12979: [4273a36765a7]
12980:
12981: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
12982: Use TIME_WITH_SYS_TIME
12983: [c32b59bf15fb]
12984:
12985: * config.h.in, configure, configure.in:
12986: Add TIME_WITH_SYS_TIME_H
12987: [57cb146f451d]
12988:
12989: 2004-12-02 Todd C. Miller <Todd.Miller@courtesan.com>
12990:
12991: * env.c:
12992: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE being set
12993: unconditionally on darwin. From Toby Peterson.
12994: [d69959681c87]
12995:
12996: * getspwuid.c:
12997: Check rbinsert() return value. In the case of faked up entries
12998: there is usually a negative response cached that we need to
12999: overwrite.
13000:
13001: In pwfree() don't try to zero out a NULL pw_passwd pointer.
13002: [00b32d1a48c1]
13003:
13004: * mon_systrace.c:
13005: Use the double fork trick to avoid the monitor process being waited
13006: for by the main program run through sudo.
13007: [e0ce556712ff]
13008:
13009: 2004-11-29 Todd C. Miller <Todd.Miller@courtesan.com>
13010:
13011: * sudo.c:
13012: Call initgroups() in -U mode so group matches work normally.
13013: [2235bea15283]
13014:
13015: * def_data.h, mkdefaults:
13016: Don't print a trailing comma for the last entry in enum def_tupple
13017: [c43a96bb31df]
13018:
13019: 2004-11-28 Todd C. Miller <Todd.Miller@courtesan.com>
13020:
13021: * sudoers.cat, sudoers.man.in, sudoers.pod:
13022: Mention values when lecture, listpw and verifypw are used in boolean
13023: context.
13024: [a0b5c0abaccf]
13025:
13026: * def_data.c, def_data.in:
13027: verifypw when used in a boolean TRUE context should be "all", not
13028: "any".
13029: [2eb076ddd5e2]
13030:
13031: 2004-11-26 Todd C. Miller <Todd.Miller@courtesan.com>
13032:
13033: * def_data.in, defaults.c:
13034: Allow tuples that can be used as booleans to be used as boolean
13035: TRUE. In this case the 2nd possible value of the tuple is used for
13036: TRUE.
13037: [bd99aa77e88b]
13038:
13039: 2004-11-25 Todd C. Miller <Todd.Miller@courtesan.com>
13040:
13041: * configure, configure.in:
13042: Correct the test for 2-parameter timespecsub
13043: [d41c9cb26b97]
13044:
13045: * sudo.h:
13046: Add strub struct definitions for passwd, timeval and timespec
13047: [c4ce5c43d8c5]
13048:
13049: * config.h.in, configure, configure.in, sudo_edit.c, visudo.c:
13050: Add check for 2-argument form of timespecsub (FreeBSD and BSD/OS)
13051: and fix a typo in the gettimeofday check.
13052: [8ac9893057ce]
13053:
13054: 2004-11-24 Todd C. Miller <Todd.Miller@courtesan.com>
13055:
13056: * match.c, testsudoers.c:
13057: Deal with user_stat being NULL as it is for visudo and testsudoers.
13058: [3605a6ff64d0]
13059:
13060: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod:
13061: Add -U option to use in conjunction with -l instead of -u. Add
13062: support for "sudo -l command" to test a specific command.
13063: [99638789d415]
13064:
13065: * gram.c, gram.y, sudo.c:
13066: Set safe_cmnd after sudoers_lookup() if it has not been set.
13067: Previously it was set by sudo "ALL" in the parser but at that point
13068: the fully-qualified pathname has not yet been found.
13069: [ac30d98f8225]
13070:
13071: 2004-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
13072:
13073: * parse.c, testsudoers.c:
13074: Correctly handle multiple privileges per userspec and runas
13075: inheritence.
13076: [a98a965181af]
13077:
13078: 2004-11-21 Todd C. Miller <Todd.Miller@courtesan.com>
13079:
13080: * defaults.c:
13081: Zero out sd_un for each entry in sudo_defs_table in init_defaults.
13082: [031d3cd4a848]
13083:
13084: 2004-11-19 Todd C. Miller <Todd.Miller@courtesan.com>
13085:
13086: * toke.c, toke.l:
13087: make per-command defaults work with sudoedit
13088: [e56fe33db916]
13089:
13090: * ldap.c, parse.c, sudo.c, sudo.h:
13091: Remove the FLAG_NOPASS, FLAG_NOEXEC and FLAG_MONITOR flags.
13092: Instead, we just set the approriate defaults variable.
13093: [756eeecc1d86]
13094:
13095: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
13096: Document per-command Defaults.
13097: [92a0f84b91c1]
13098:
13099: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
13100: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c:
13101: Add support for command-specific Defaults entries. E.g.
13102: Defaults!/usr/bin/vi noexec
13103: [be3d52bf01cf]
13104:
13105: * defaults.c, match.c, parse.c, parse.h, testsudoers.c:
13106: Change an occurence of user_matches() -> runas_matches() missed
13107: previously runas_matches(), host_matches() and cmnd_matches() only
13108: really need to pass in a list of members. user_matches() still
13109: needs to pass in a passwd struct because of "sudo -l"
13110: [833b22fc6fa0]
13111:
13112: * parse.c:
13113: Check def_authenticate, def_noexec and def_monitor when setting
13114: return flags. XXX May be better to just set the defaults directly
13115: and get rid of those flags.
13116: [b6db22b59d69]
13117:
13118: * alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
13119: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
13120: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
13121: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c,
13122: defaults.c, env.c, error.c, fileops.c, find_path.c, fnmatch.c,
13123: getcwd.c, getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
13124: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
13125: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
13126: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo_edit.c,
13127: sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c, toke.l, utimes.c,
13128: visudo.c, zero_bytes.c:
13129: Use: #include <config.h> Not: #include "config.h" That way we get
13130: the correct config.h when build dir != src dir
13131: [97e5670a442b]
13132:
13133: * Makefile.in:
13134: Back out part of rev 1.263; fix -I order
13135: [197ea01cad5d]
13136:
13137: * toke.c, toke.l:
13138: More robust parsing if #include; could be much better still.
13139: [31bc3cd8f045]
13140:
13141: * sudo_edit.c, visudo.c:
13142: Make arg splitting in visudo and sudoedit consistent.
13143: [7bc74485f246]
13144:
13145: * Makefile.in, alias.c, gram.c, gram.y, parse.h:
13146: Split alias routines out into their own file.
13147: [d90f633cf9ae]
13148:
13149: * error.h:
13150: __attribute__ is already defined in compat.h
13151: [676ed3fe9203]
13152:
13153: * visudo.c:
13154: quit() should not be __noreturn__ as it is non-void on some
13155: platforms.
13156: [e528c2b6ba10]
13157:
13158: * auth/fwtk.c, auth/rfc1938.c, auth/securid.c, auth/securid5.c:
13159: Add local error/warning functions like err/warn but that call an
13160: additional cleanup routine in the error case. This means we no
13161: longer need to compile a special version of alloc.o for visudo.
13162: [e78e8aae882e]
13163:
13164: * parse.h:
13165: Clarify comments about the data structures
13166: [ae894e266701]
13167:
13168: 2004-11-18 Todd C. Miller <Todd.Miller@courtesan.com>
13169:
13170: * visudo.c:
13171: Add support for VISUAL and EDITOR containing command line args. If
13172: env_editor is not set any args in VISUAL and EDITOR are ignored.
13173: Arguments are also now supported in def_editor.
13174: [ff7303b8e298]
13175:
13176: 2004-11-17 Todd C. Miller <Todd.Miller@courtesan.com>
13177:
13178: * parse.h:
13179: alias_matches() is no more
13180: [b59825e28084]
13181:
13182: * CHANGES, TODO:
13183: sync
13184: [2b8f5f63c1de]
13185:
13186: * Makefile.in:
13187: When regenerating the parser, don't replace gram.h unless it has
13188: changed.
13189: [819949668018]
13190:
13191: * Makefile.in:
13192: remove Makefile.binary for distclean
13193: [351eec8d00b2]
13194:
13195: * env.c:
13196: Preserve KRB5CCNAME in zero_env() and add a paranoia check to make
13197: sure we can't overflow new_env.
13198: [3284d17b9c6d]
13199:
13200: * sudo_edit.c:
13201: paranoia when stripping trailing slashes from tempdir.
13202: [012f1aa2b81f]
13203:
13204: * sudo.c:
13205: Set user_ngroups to 0 if getgroups() returns an error.
13206: [c46d43e9449a]
13207:
13208: 2004-11-16 Todd C. Miller <Todd.Miller@courtesan.com>
13209:
13210: * config.h.in, configure, configure.in, sudo.c:
13211: Add configure check for getgroups()
13212: [5d8a214e2cef]
13213:
13214: * ldap.c:
13215: Use supplementary group vector in struct sudo_user.
13216: [3d0c463c034d]
13217:
13218: * match.c:
13219: Only do string comparisons on the group members if there is no
13220: supplemental group list.
13221: [be1c8362f7ef]
13222:
13223: * CHANGES, TODO:
13224: sync
13225: [db188bc5b975]
13226:
13227: * sudo_edit.c:
13228: On Digital UNIX _PATH_VAR_TMP doesn't end with a trailing slash so
13229: chop off any trailing slashes we see and add an explicit one.
13230: [e1b477dafee1]
13231:
13232: * match.c:
13233: remove bogus XXX comment
13234: [8aecb8a28d40]
13235:
13236: * match.c:
13237: Get rid of alias_matches and correctly fall through to the non-alias
13238: cases when there is no alias with the specified name.
13239: [2cd555246f09]
13240:
13241: * getspwuid.c:
13242: Cache non-existent passwd/group entries too.
13243: [8de9a467d271]
13244:
13245: * gram.c:
13246: regen
13247: [9ece18c58f36]
13248:
13249: * getspwuid.c:
13250: fix typo
13251: [9a7ae371eac1]
13252:
13253: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
13254: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
13255: Implement group caching and use the passwd and group caches
13256: throughout.
13257: [f1d8c5015169]
13258:
13259: 2004-11-15 Todd C. Miller <Todd.Miller@courtesan.com>
13260:
13261: * match.c:
13262: Properly negate the return value of alias_matches() when
13263: appropriate.
13264: [ce59c4ce77ad]
13265:
13266: * match.c:
13267: Make hostname_matches() return TRUE for a match, else FALSE like the
13268: caller expects.
13269: [1dc03902d3a2]
13270:
13271: * Makefile.in:
13272: Add missing dependencies on gram.h
13273: [4f94bbb1d50c]
13274:
13275: * match.c:
13276: Use runas_matches in alias_matches() now that we have it.
13277: [284d22e91178]
13278:
13279: * parse.c, parse.h:
13280: Expand aliases in "sudo -l" mode
13281: [f67a38b79c44]
13282:
13283: * gram.y, match.c:
13284: Use ALIAS for the member type when storing an alias instead of
13285: HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since match.c relies on the
13286: more generic type. Expand runas_matches instead of calling
13287: user_matches() inside of it since user_matches() looks up
13288: USERALIASes, not RUNASALIASes.
13289: [52004d75232b]
13290:
13291: * CHANGES, getspwuid.c:
13292: Paranoia; zero out pw_passwd before freeing passwd entry.
13293: [bd1b22638f00]
13294:
13295: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
13296: configure.in, defaults.c, emul/err.h, env.c, err.c, error.c,
13297: error.h, find_path.c, interfaces.c, logging.c, mon_systrace.c,
13298: sudo.c, sudo.h, sudo_edit.c, testsudoers.c, visudo.c:
13299: Add local error/warning functions like err/warn but that call an
13300: additional cleanup routine in the error case. This means we no
13301: longer need to compile a special version of alloc.o for visudo.
13302: [25000b676cfe]
13303:
13304: * match.c:
13305: Use userpw_matches() to compare usernames, not strcmp(), since the
13306: latter checks for "#uid".
13307: [fcbe4b859f66]
13308:
13309: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c:
13310: Cache passwd db entries in 2 reb-black trees; one indexed by uid,
13311: the other by user name. The data returned from the cache should be
13312: considered read-only and is destroyed by sudo_endpwent().
13313: [ee2418ff3f86]
13314:
13315: * match.c:
13316: add cast to uid_t
13317: [eb6415302d84]
13318:
13319: * gram.y:
13320: missing free in alias_destroy
13321: [572ecb680ad8]
13322:
13323: * redblack.c:
13324: Can't use rbapply() for rbdestroy since the destructor is passed a
13325: data pointer, not a node pointer.
13326: [11ce713830c0]
13327:
13328: * getspwuid.c, logging.c, sudo.c, sudo.h:
13329: Create and use private versions of setpwent() and endpwent() that
13330: set/end the shadow password file too.
13331: [616bc76d23bf]
13332:
13333: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c, visudo.c:
13334: Store aliases in a red-black tree.
13335: [ce017d540416]
13336:
13337: * Makefile.in, redblack.c, redblack.h:
13338: red-black tree implementation
13339: [cd5586e8f48b]
13340:
13341: * visudo.c:
13342: Edit all sudoers file if there were unused or undefined aliases and
13343: we are in strict mode.
13344: [b6d5f5bb7262]
13345:
13346: 2004-11-12 Todd C. Miller <Todd.Miller@courtesan.com>
13347:
13348: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
13349: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
13350: Bring back the "secure_path" Defaults option now that Defaults take
13351: effect before the path is searched.
13352: [2e52c0e27606]
13353:
13354: 2004-11-11 Todd C. Miller <Todd.Miller@courtesan.com>
13355:
13356: * logging.c, parse.c:
13357: A user can always list their own entries, even with -u. Better error
13358: message when failing to list another user's entries.
13359: [e2e24deb0071]
13360:
13361: * parse.c, sudo.c, sudo.h:
13362: The syntax to list another user's entries is now "-u otheruser -l".
13363: Only root or users with sudo "ALL" may list other user's entries.
13364: [3c0657e8f5fe]
13365:
13366: * sudo.cat, sudo.man.in, sudo.pod:
13367: Update env variable info in SECURITY NOTES
13368: [299716071024]
13369:
13370: * env.c:
13371: strip CDPATH too
13372: [9b97643b26f9]
13373:
13374: * env.c:
13375: strip exported bash functions from the environment.
13376: [9e5090c8284f]
13377:
13378: 2004-10-27 Todd C. Miller <Todd.Miller@courtesan.com>
13379:
13380: * sudo.c:
13381: Only reset sudo_user.pw based on SUDO_USER environment variables for
13382: real commands and sudoedit. This avoids a confusing message when a
13383: user tries "sudo -l" or "sudo -v" and is denied.
13384: [3ea6d0053274]
13385:
13386: * gram.c, gram.y, parse.h:
13387: Extend LIST_APPEND to deal with appending lists too
13388: [d963e42f622f]
13389:
13390: 2004-10-26 Todd C. Miller <Todd.Miller@courtesan.com>
13391:
13392: * logging.c:
13393: Convert some bitwise AND to ISSET
13394: [130dc40d268e]
13395:
13396: * lex.yy.c, toke.c:
13397: toke.c replaces lex.yy.c
13398: [048858df79e7]
13399:
13400: * CHANGES, TODO:
13401: sync
13402: [d19e7abf251c]
13403:
13404: * BUGS:
13405: new parser fixes most of the outstanding bugs
13406: [0891f66e3758]
13407:
13408: * configure:
13409: regen
13410: [1a3358cc7283]
13411:
13412: * visudo.c:
13413: Rework for the new parser. Now checks for unused aliases in sudoers.
13414: [ad462ede3094]
13415:
13416: * testsudoers.c:
13417: Rewrite for the new parser. Now supports a -d flag (dump) and adds
13418: a -h flag (host). It now defaults to the local hostname unless
13419: otherwise specified.
13420: [1b69685cc601]
13421:
13422: * sudo.h:
13423: Add new prototypes. Remove NOMATCH/UNSPEC (now in parse.h)
13424: [2e4fb3abfef0]
13425:
13426: * sudo.c:
13427: Update for new parse. We now call find_path() *after* we have
13428: updated the global defaults based on sudoers. Also adds support for
13429: listing other user's privs if you are root.
13430: [cf3db9fc3024]
13431:
13432: * mon_systrace.c:
13433: Working LDAP support; also remove a now-unneeded rewind().
13434: [649ecf1baf6b]
13435:
13436: * logging.c, logging.h:
13437: Add NO_STDERR flag.
13438: [6cb935af94e0]
13439:
13440: * ldap.c:
13441: Split sudo_ldap_check() into three pieces: sudo_ldap_open(),
13442: udo_ldap_update_defaults() and sudo_ldap_check(). This allows us to
13443: connecto to LDAP, apply the default options, find the command in the
13444: user's path, and then check whether the user is allowed to run it.
13445: The important thing here is that the default runas user may be
13446: specified as a default option and that needs to be set before we
13447: search for the command.
13448: [fc0426abc6f1]
13449:
13450: * ldap.c:
13451: Add casts to unsigned char for isspace() to quiet a gcc warning.
13452: [e5358e3df439]
13453:
13454: * defaults.h:
13455: Add prototype for update_defaults()
13456: [564dac3db74e]
13457:
13458: * defaults.c:
13459: Don't warn about line numbers now that we operate on a set of data
13460: structures (or LDAP) and not a file.
13461: [bcd9ffb9b67c]
13462:
13463: * config.h.in:
13464: No long use lsearch()
13465: [9d048c587319]
13466:
13467: * Makefile.in:
13468: Update for new and changed file names.
13469: [6f424a7c4515]
13470:
13471: * LICENSE:
13472: no more BSD lsearch.c
13473: [463a96d89026]
13474:
13475: * match.c:
13476: foo_matches() routines now live in match.c Added user_matches(),
13477: runas_matches(), host_matches(), cmnd_matches() and alias_matches()
13478: that operate on the parsed sudoers file.
13479: [b14da8a0567e]
13480:
13481: * parse.lex, toke.l:
13482: Move parse.lex -> toke.l Rename buffer_frob() -> switch_buffer()
13483: WORD no longer needs to exclude '@' kill yywrap()
13484: [a922294eb7b7]
13485:
13486: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.c,
13487: sudo.tab.h:
13488: Rewritten parser that converts sudoers into a set of data
13489: structures. This eliminates ordering issues and makes it possible to
13490: apply sudoers Defaults entries before searching for the command.
13491: [30d2ec4d203c]
13492:
13493: * configure.in, emul/search.h, lsearch.c:
13494: We won't be using lsearch() any longer.
13495: [29c4d54bfac0]
13496:
13497: * ldap.c:
13498: sudo should not send mail if someone who runs 'sudo -l' has no
13499: entry.
13500: [6fc27a69fd9c]
13501:
13502: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
13503: visudo.man.in:
13504: regen
13505: [8166347917f3]
13506:
13507: * visudo.pod:
13508: Update warnings to match new visudo
13509: [004c0766798f]
13510:
13511: * sudoers.pod:
13512: The new parser doesn't have the old ordering constraints.
13513: [ffd43bd08661]
13514:
13515: * sudo.pod:
13516: Document that -l now takes an optional username argument
13517: [278f9557de8b]
13518:
13519: 2004-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
13520:
13521: * RUNSON:
13522: AIX 5.2.0.0 works
13523: [523acd29d858]
13524:
13525: * ldap.c:
13526: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS instead. Fixes
13527: a compilation problem with Solaris 9's native LDAP.
13528:
13529: Set FLAG_MONITOR when needed.
13530: [35824ade672d]
13531:
13532: 2004-10-23 Todd C. Miller <Todd.Miller@courtesan.com>
13533:
13534: * mon_systrace.c:
13535: Call sudo_goodpath() *after* changing the cwd to match the traced
13536: process. Fixes relative paths.
13537: [12ee111d0ad7]
13538:
13539: 2004-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
13540:
13541: * testsudoers.c:
13542: Kill set_perms() stub--it is no longer needed.
13543: [116ed702935d]
13544:
13545: 2004-10-13 Todd C. Miller <Todd.Miller@courtesan.com>
13546:
13547: * sudoers.cat, sudoers.man.in, sudoers.pod:
13548: stay_setuid now requires set_reuid() or setresuid()
13549: [8511f67e25d5]
13550:
13551: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
13552: configure.in, set_perms.c, sudo.c, sudo.h:
13553: Kill use of POSIX saved uids; they aren't worth bothering with.
13554: [b3b1f19f18c1]
13555:
13556: 2004-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
13557:
13558: * glob.c:
13559: remove call to issetugid()
13560: [63f2e492c08f]
13561:
13562: * sudoers.cat, sudoers.man.in, sudoers.pod:
13563: Remove warning about wildcards. Now that we use glob() the bug is
13564: fixed.
13565: [b15729d32266]
13566:
13567: * parse.c:
13568: Use glob(3) instead of fnmatch(3) for matching pathnames and stat
13569: each result that matches the basename of the user's command. This
13570: makes "cd /usr/bin ; sudo ./blah" work when sudoers allows
13571: /usr/bin/blah. Fixes bug #143.
13572: [e31eb6310340]
13573:
13574: * config.h.in, configure, configure.in:
13575: Define HAVE_EXTENDED_GLOB for extended glob (GLOB_TILDE and
13576: GLOB_BRACE)
13577: [677ed6661e17]
13578:
13579: * config.h.in, configure, configure.in:
13580: Check for a glob() that supports GLOB_BRACE and GLOB_TILDE
13581: [aaa2329dd266]
13582:
13583: * LICENSE:
13584: reference glob
13585: [bedc9a923423]
13586:
13587: * glob.c:
13588: 4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions
13589: removed.
13590: [81799451473c]
13591:
13592: * emul/glob.h:
13593: 4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions
13594: removed.
13595: [0335cf31fb1e]
13596:
13597: 2004-10-05 Todd C. Miller <Todd.Miller@courtesan.com>
13598:
13599: * mon_systrace.c:
13600: Just return if STRIOCINJECT or STRIOCREPLACE fail. It probably
13601: means we are out of space in the stack gap...
13602: [5b02b702021e]
13603:
13604: * CHANGES:
13605: sync
13606: [be3826273e56]
13607:
13608: * mon_systrace.c:
13609: Take a stab at ldap sudoers support here.
13610: [9d023695b0de]
13611:
13612: * mon_systrace.c, mon_systrace.h:
13613: Detach from tracee on SIGHUP, SIGINT and SIGTERM. Now "sudo reboot"
13614: doesn't cause reboot to inadvertanly kill itself.
13615: [d4aab2365610]
13616:
13617: * mon_systrace.c:
13618: put "monitor" in the proctitle, not "systrace"
13619: [9a9025767d86]
13620:
13621: * mon_systrace.c:
13622: When modifying the environment, don't replace envp when we can get
13623: away with just rewriting pointers in the traced process.
13624: [c03622f7a2e2]
13625:
13626: * mon_systrace.c, mon_systrace.h:
13627: Add environment updating via STRIOCINJECT (if available).
13628: [037291016870]
13629:
13630: * sudoers.cat, sudoers.man.in:
13631: regen
13632: [869acc511046]
13633:
13634: 2004-10-04 Todd C. Miller <Todd.Miller@courtesan.com>
13635:
13636: * lex.yy.c:
13637: regen
13638: [4e61a9bd3c97]
13639:
13640: * parse.lex:
13641: Fix bug introduced in unput() removal; want yyless(0) not yyless(1)
13642: [b70d7bd6e147]
13643:
13644: * mon_systrace.c:
13645: Include file is now mon_systrace.h
13646: [ead4e36d92ae]
13647:
13648: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
13649: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
13650: sudo.c, sudo.h, sudo.tab.c, sudo.tab.h, sudoers.pod:
13651: No longer call it tracing, it is now "monitoring" which should be
13652: more a obvious name to non-hackers.
13653: [aa811ded0789]
13654:
13655: 2004-10-01 Todd C. Miller <Todd.Miller@courtesan.com>
13656:
13657: * mon_systrace.c, mon_systrace.h:
13658: Fix some XXX
13659: [a271072dacc6]
13660:
13661: * mon_systrace.c, mon_systrace.h:
13662: No need to include syscall.h, use 1024 as the max # of entries (the
13663: max that systrace(4) allows).
13664:
13665: Only need to use SYSTR_POLICY_ASSIGN once
13666:
13667: Change check_syscall() -> find_handler() and have it return the
13668: handler instead of just running it. We need this since handler now
13669: have two parts: one part that generates and answer and another that
13670: gets called after the answer is accepted (to do logging).
13671:
13672: Add some missing check_exec for emul execv
13673: [a89d243f0525]
13674:
13675: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers:
13676: Add $Sudo$ tags.
13677: [6f3fedb0daba]
13678:
13679: * config.h.in:
13680: Add missing HAVE_LINUX_SYSTRACE_H
13681: [ff75ab7bfc53]
13682:
13683: * Makefile.in:
13684: add trace_systrace.o dependency
13685: [88a408668ab2]
13686:
13687: 2004-09-30 Todd C. Miller <Todd.Miller@courtesan.com>
13688:
13689: * configure, configure.in:
13690: Also look for systrace.h in /usr/include/linux
13691: [98b98b436cf3]
13692:
13693: * mon_systrace.c, mon_systrace.h:
13694: Move all struct defs and prototypes into trace_systrace.h and mark
13695: all but systace_attach() static.
13696: [85511253b570]
13697:
13698: * mon_systrace.c, mon_systrace.h:
13699: Add support for tracing emulations. At the moment, all emulations
13700: are compiled in. It might make sense to #ifdef them in the future,
13701: though this impeeds readability.
13702: [87bb50abf277]
13703:
13704: * Makefile.in, configure, configure.in:
13705: rename systrace.c -> trace_systrace.c
13706: [31cfa4407d93]
13707:
13708: * parse.yacc, sudo.tab.c:
13709: Allow this to build with a K&R compiler again
13710: [32876af5bb98]
13711:
13712: * TODO:
13713: sync
13714: [46865bd70f7c]
13715:
13716: * compat.h, sudo.c, visudo.c:
13717: Use __attribute__((__noreturn__))
13718: [65bbad71fe89]
13719:
13720: * visudo.c:
13721: Exit() takes a negative value to indicate it was not called via
13722: signal.
13723: [b93032ed7b60]
13724:
13725: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
13726: visudo.man.in:
13727: regen
13728: [45bcf4661558]
13729:
13730: * Makefile.in, visudo.c:
13731: Define Err() and Errx() that are like err() and errx() but call
13732: Exit() instead of exit(). Build private copy of alloc.o for visudo
13733: that calls Err() and Errx().
13734: [c6d02bf42edd]
13735:
13736: 2004-09-29 Todd C. Miller <Todd.Miller@courtesan.com>
13737:
13738: * lex.yy.c, sudo.tab.c:
13739: regen
13740: [39de7e7c59da]
13741:
13742: * CHANGES:
13743: sync
13744: [ba481d9ed1aa]
13745:
13746: * visudo.c:
13747: Overhaul visudo for editing multiple files: o visudo has been
13748: broken out into functions (more work needed here) o each file is
13749: now edited before sudoers is re-parsed o if a #include line is
13750: added that file will be edited too
13751:
13752: TODO: o cleanup temp files when exiting via err() or errx() o
13753: continue breaking things out into separate functions
13754: [80c35cf534eb]
13755:
13756: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c:
13757: Add keepopen arg to open_sudoers that open_sudoers can use to
13758: indicate to the caller that the fd should not be closed when it is
13759: done with it. To be used by visudo to keep locked fds from being
13760: closed prematurely (and thus losing the lock).
13761: [f330fe632470]
13762:
13763: * parse.yacc, sudo.c:
13764: Add errorfile global that contains the name of the file that caused
13765: the error.
13766: [98079c7a37ed]
13767:
13768: * parse.lex:
13769: return COMMENT to yacc grammar for a #include line
13770: [2024a8de4fa8]
13771:
13772: * parse.lex:
13773: Remove us of unput() in favor of yyless() which is cheaper.
13774: [c61291902beb]
13775:
13776: * parse.yacc:
13777: Allow an empty sudoers file.
13778: [62fb111db2e7]
13779:
13780: 2004-09-28 Todd C. Miller <Todd.Miller@courtesan.com>
13781:
13782: * mon_systrace.c:
13783: Rewind sudoers_fp now that sudoers_lookup() doesn't do it for us.
13784: [9e15869ef597]
13785:
13786: * lex.yy.c, sudo.tab.c:
13787: regen
13788: [c29bdd43bfad]
13789:
13790: * visudo.c:
13791: Do signal setup before calling edit_sudoers(). Don't shadow the
13792: "quiet" global.
13793: [74252efd09ff]
13794:
13795: * visudo.c:
13796: If a sudoers file includes other files, edit those too. Does not yes
13797: deal with creating the new includes files itself.
13798: [06af7b9c173f]
13799:
13800: * testsudoers.c:
13801: init_parser now takes a path
13802: [b5ee186eb192]
13803:
13804: * parse.c, parse.h, parse.lex, parse.yacc:
13805: More scaffolding for dealing with multiple sudoers files: o
13806: init_parser() now takes a path used to populate the sudoers global
13807: o the sudoers global is used to print the correct file in yyerror()
13808: o when switching to a new sudoers file, perserve old file name and
13809: line number
13810: [d9be4970b8bd]
13811:
13812: * Makefile.in, pathnames.h.in:
13813: Kill _PATH_SUDOERS_TMP; it is not meaningful now that we can have
13814: multiple sudoers files.
13815: [6ccc4e921c43]
13816:
13817: * parse.c, sudo.c:
13818: Rewind sudoers_fp in open_sudoers() instead of sudoers_lookup() so
13819: we start at the right file position when reading include files.
13820: [91fcb961e7a4]
13821:
13822: * sudoers.pod:
13823: document #include
13824: [fbb92a25a726]
13825:
13826: * lex.yy.c:
13827: regen
13828: [50cd7a4c9dff]
13829:
13830: * parse.lex:
13831: Add max depth of 128 for the include stack to avoid loops.
13832:
13833: Since yyerror() doesn't stop parsing, pass return values back to
13834: yylex and call yyterminate() on error.
13835: [e79dbffb729d]
13836:
13837: 2004-09-27 Todd C. Miller <Todd.Miller@courtesan.com>
13838:
13839: * sudoers.pod:
13840: document tracing
13841: [165a467eadd8]
13842:
13843: * sudo.pod:
13844: Mention PREVENTING SHELL ESCAPES section of sudoers man page
13845: [3217ccecd834]
13846:
13847: * lex.yy.c, sudo.tab.c:
13848: regen
13849: [fbd58d1d3a76]
13850:
13851: * parse.lex:
13852: Add support for #include in sudoers (visudo support TBD)
13853: [a78015ca81af]
13854:
13855: * parse.yacc:
13856: make yyerror()'s argument const
13857: [7d8e168c019a]
13858:
13859: * testsudoers.c, visudo.c:
13860: Add open_sudoers() stubs.
13861: [087466787198]
13862:
13863: * sudo.c, sudo.h:
13864: Rename check_sudoers() open_sudoers() and make it return a FILE *
13865: [142fc511fc65]
13866:
13867: 2004-09-26 Todd C. Miller <Todd.Miller@courtesan.com>
13868:
13869: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
13870: version.h:
13871: Crank version
13872: [1adc3f839480]
13873:
13874: * Makefile.in, sudo.psf:
13875: Better HP-UX depot construction
13876: [2d952b000e63]
13877:
13878: 2004-09-25 Todd C. Miller <Todd.Miller@courtesan.com>
13879:
13880: * mon_systrace.c:
13881: o Made children global so check_exec() can lookup a child. o
13882: Replaced uid in struct childinfo with struct passwd * (for runas) o
13883: new_child() now takes a parent pid so the runas info can be
13884: inherited o Added find_child() to lookup a child by its pid o
13885: update_child() now fills in a struct passwd o Converted the big
13886: if/else mess in set_policy to a switch o Syscalls that change uid
13887: are now "ask" so we get SYSTR_MSG_UGID events
13888: [29b9ea3f09a3]
13889:
13890: * getspwuid.c:
13891: Add flag to sudo_pwdup that indicates whether or not to lookup the
13892: shadow password. Will be used to a struct passwd that has the
13893: shadow password already filled in.
13894: [e19d43dd7238]
13895:
13896: * mon_systrace.c:
13897: add missing increment of addr in read_string()
13898: [f9eb0f060cb6]
13899:
13900: * mon_systrace.c:
13901: Remove bogus call to update_child() and some cosmetic fixes
13902: [701ab0b97fef]
13903:
13904: * mon_systrace.c:
13905: Don't leak /dev/systrace fd to tracee Make initialized global for
13906: simplicity If STRIOCATTACH returns EBUSY we are already being traced
13907: Check for user_args == NULL in setproctitle() call Add missing calls
13908: to STRIOCANSWER
13909: [1956edf9bc3a]
13910:
13911: * sudo.c:
13912: g/c sudo_pwdup proto
13913: [b7c4d6249ecb]
13914:
13915: * Makefile.in, sudo.psf:
13916: Add target for building a depot file
13917: [357019efd99b]
13918:
13919: * mon_systrace.c:
13920: trim includes
13921: [501534428471]
13922:
13923: 2004-09-24 Todd C. Miller <Todd.Miller@courtesan.com>
13924:
13925: * lex.yy.c, sudo.tab.c, sudo.tab.h:
13926: regen
13927: [52fd250c6986]
13928:
13929: * INSTALL:
13930: document --with-systrace
13931: [79623927c94e]
13932:
13933: * config.h.in, configure, configure.in:
13934: Add check for setproctitle
13935: [1730cf1c26ed]
13936:
13937: * mon_systrace.c:
13938: pass struct str_msg_ask in to syscall checker so it can set the
13939: error code
13940: [1703fd2fdef6]
13941:
13942: * mon_systrace.c:
13943: systrace(4) support for sudo. On systems with the systrace(4)
13944: kernel facility (OpenBSD, NetBSD, Linux w/ patches) sudo can
13945: intercept exec calls and check the exec args against the sudoers
13946: file. In other words, sudo can now control subcommands and shell
13947: escapes.
13948: [928c9217c386]
13949:
13950: * sudo.c, sudo.h:
13951: Call systrace_attach() if FLAG_TRACE is set.
13952: [014ba9402fa5]
13953:
13954: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h:
13955: Add trace Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
13956: [a99904db5e56]
13957:
13958: * parse.c, sudo.c:
13959: Don't close sudoers_fp, keep it open and set close on exec flag
13960: instead.
13961: [43a9fec60bee]
13962:
13963: * def_data.c, def_data.h, def_data.in:
13964: Add trace option
13965: [5b643b86730a]
13966:
13967: * Makefile.in:
13968: Add systrace
13969: [47a0519c427c]
13970:
13971: * INSTALL:
13972: SunOS /bin/sh blows up with configure
13973: [005a23cc5615]
13974:
13975: * configure, configure.in:
13976: Include sys/param.h before systrace.h
13977: [9345bc8efecf]
13978:
13979: * configure:
13980: regen
13981: [a8f53fcbb254]
13982:
13983: * pathnames.h.in:
13984: _PATH_DEV_SYSTRACE
13985: [d2ad1e492a00]
13986:
13987: * configure.in:
13988: line up options in --help
13989: [fa51f2821d09]
13990:
13991: * config.h.in, configure.in:
13992: Add --with-systrace
13993: [a264d54bc413]
13994:
13995: 2004-09-23 Todd C. Miller <Todd.Miller@courtesan.com>
13996:
13997: * configure:
13998: regen
13999: [a4dad0bcc523]
14000:
14001: * aclocal.m4, configure.in:
14002: make this work with autoconf-2.59
14003: [c4a92b6a684a]
14004:
14005: 2004-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
14006:
14007: * sudo_edit.c:
14008: Simplify logic around open & stat of files and do sanity on edited
14009: file even if we lack fstat (still racable but worth doing).
14010: [adda65ade70c]
14011:
14012: 2004-09-15 Todd C. Miller <Todd.Miller@courtesan.com>
14013:
14014: * HISTORY:
14015: Add support url
14016: [bf6590fbde9f]
14017:
14018: * Makefile.in:
14019: versino 1.6.8p1
14020: [b84ebfaf1552] [SUDO_1_6_8p1]
14021:
14022: * CHANGES:
14023: more changes for 1.6.8p1
14024: [e23a9c0393b6]
14025:
14026: * version.h:
14027: 1.6.8p1
14028: [872f14504b5f]
14029:
14030: * CHANGES, sudo_edit.c:
14031: Add sanity check so we don't try to edit something other than a
14032: regular file.
14033: [350134ec6d4e]
14034:
14035: 2004-09-15 Aaron Spangler <aaron777@gmail.com>
14036:
14037: * CHANGES:
14038: sync
14039: [3091ca9eae00]
14040:
14041: * INSTALL:
14042: document --with-ldap-conf-file
14043: [0e2cd6b896f1]
14044:
14045: 2004-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
14046:
14047: * CHANGES, ins_csops.h:
14048: political correctness strikes again
14049: [428e8bc77f55]
14050:
14051: * RUNSON:
14052: sync
14053: [27f44bd423dc]
14054:
14055: 2004-09-12 Todd C. Miller <Todd.Miller@courtesan.com>
14056:
14057: * Makefile.binary.in, Makefile.in:
14058: Install sudoedit man link
14059: [19a55234fc1f]
14060:
14061: * INSTALL:
14062: Update PAM note and mention where HP-UX users can download gcc
14063: binaries.
14064: [d37cdbbabfd4]
14065:
14066: * Makefile.in:
14067: libtool wants to install stuff from .libs so fake one up for binary
14068: installations.
14069: [a681bc6fcfba]
14070:
14071: * Makefile.binary.in:
14072: rm -f old sudoedit link instead of using ln -f set LIBTOOL correctly
14073: [3e0c4b3372cc]
14074:
14075: * Makefile.in:
14076: Deal with "uname -m" having slashes in it rm -f old sudoedit link
14077: instead of using ln -f
14078: [cff33fb97e5b]
14079:
14080: * Makefile.binary, Makefile.binary.in:
14081: Makefile.binary -> Makefile.binary.in for config.status substitution
14082: Add support for installing noexec bits
14083: [37d8bb3483c6]
14084:
14085: * Makefile.in:
14086: Copy noexec bits into binary dists too No longer use my old arch
14087: script for making binary dists
14088: [e7058bab9e33]
14089:
14090: * Makefile.binary:
14091: Install sudoedit link.
14092: [417d1e101711]
14093:
14094: 2004-09-11 Todd C. Miller <Todd.Miller@courtesan.com>
14095:
14096: * emul/utime.h:
14097: avoid __P so there is no need for compat.h to be included
14098: [6d8d1f1abf7d]
14099:
14100: * utimes.c:
14101: Don't use HAVE_UTIME_H before including config.h.
14102: [013b7bb61181]
14103:
14104: 2004-09-10 Todd C. Miller <Todd.Miller@courtesan.com>
14105:
14106: * compat.h:
14107: Fix Solatis futimes macro
14108: [d4eda2ca0d29]
14109:
14110: 2004-09-09 Todd C. Miller <Todd.Miller@courtesan.com>
14111:
14112: * sudo_edit.c:
14113: Rename ots -> omtim for improved readability.
14114: [127ca5bb297c]
14115:
14116: 2004-09-08 Todd C. Miller <Todd.Miller@courtesan.com>
14117:
14118: * sudo_edit.c:
14119: Redo changes in revision 1.7. Don't really need to keep the temp
14120: file open; re-opening it with the invoking user's euid is
14121: sufficient.
14122: [55a883165a95]
14123:
14124: * CHANGES:
14125: sync
14126: [9015b291170d]
14127:
14128: * sudo.cat, sudo.man.in:
14129: regen
14130: [c0313f6ed783]
14131:
14132: * sudo.pod:
14133: back out revision 1.70; it is no long applicable
14134: [b641d503aff6]
14135:
14136: * env.c:
14137: Let the loader initialize nep
14138: [bec192139b02]
14139:
14140: * config.h.in, configure, configure.in:
14141: Removed unneed check for fchown Add check for gettimeofday Move
14142: autoheader template stuff into separate AH_TEMPLATE lines
14143: [bfc0edbd43f2]
14144:
14145: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c:
14146: Use timespec throughout.
14147: [1a178a23b69b]
14148:
14149: * Makefile.in:
14150: gettime.[co]
14151: [6aeb48a7ab7f]
14152:
14153: * gettime.c:
14154: function to return the current time in a struct timespec
14155: [bf8eb12cb63f]
14156:
14157: * utimes.c:
14158: Not a darpa-sponsored file.
14159: [121ce5e2036c]
14160:
14161: 2004-09-07 Todd C. Miller <Todd.Miller@courtesan.com>
14162:
14163: * compat.h, config.h.in, configure, configure.in:
14164: Add a check for struct timespec and provide it for those without.
14165: [42124055030d]
14166:
14167: * config.h.in, configure, configure.in, sudo_edit.c:
14168: Add checks for st_mtim and st_mtimespec and add macros for pulling
14169: the mtime sec and nsec out of struct stat. These are used in
14170: sudo_edit() to better tell whether or not the file has changed.
14171: [23debfbb3fab]
14172:
14173: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c:
14174: Add an extra param to touch() for nsec
14175: [56f7a4ba8ddb]
14176:
14177: * sudo_edit.c:
14178: Call mkstemp() as the in invoking user so we don't have to chown the
14179: file later. Only touch() the temp file if we can do it via the file
14180: descriptor. Don't check for modification of the temp file if we lack
14181: fstat(). Catch errors read()ing the temp file.
14182: [665f52c70836]
14183:
14184: * fileops.c:
14185: If path is NULL and fd == -1 return -1.
14186: [757a518a824c]
14187:
14188: * sudo_edit.c:
14189: closefrom() is overkill, the only extra fds are the ones we opened
14190: so just close those in the child.
14191: [f361c9d2a1f4]
14192:
14193: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in, configure,
14194: configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c, utimes.c,
14195: visudo.c:
14196: Use utimes() and futimes() instead of utime() in touch(), emulating
14197: as needed. Not all systems are able to support setting the times of
14198: an fd so touch() takes both an fd and a file name as arguments.
14199: [3d9276f29717]
14200:
14201: 2004-09-07 Aaron Spangler <aaron777@gmail.com>
14202:
14203: * env.c:
14204: Rare SEGV
14205: [8995f828782d]
14206:
14207: 2004-09-06 Todd C. Miller <Todd.Miller@courtesan.com>
14208:
14209: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
14210: visudo.man.in:
14211: regen
14212: [b8e9406711c5]
14213:
14214: * sudo.pod, sudoers.pod, visudo.pod:
14215: Add SUPPORT section and re-order some of the sections to match the
14216: order we use in OpenBSD.
14217: [fa37bd917e2c]
14218:
14219: 2004-09-06 Aaron Spangler <aaron777@gmail.com>
14220:
14221: * env.c:
14222: Openldap ~/.ldaprc fix
14223: [1a37afe6850f]
14224:
14225: 2004-09-06 Todd C. Miller <Todd.Miller@courtesan.com>
14226:
14227: * sudo.pod:
14228: Talk about how the editor must write its changes to the original
14229: file and not just use rename(2).
14230: [c55ed91c5ee9]
14231:
14232: * CHANGES:
14233: sync
14234: [62af26bd37a2]
14235:
14236: * sudo_edit.c:
14237: Keep the temp file open instead of re-opening after the editor has
14238: exited.
14239: [de41eeb6dcf2]
14240:
14241: * sample.pam:
14242: Update for current redhat/fedora core.
14243: [8cf083077333]
14244:
14245: 2004-09-03 Aaron Spangler <aaron777@gmail.com>
14246:
14247: * README.LDAP:
14248: tls_ examples
14249: [ba783d88a034]
14250:
14251: 2004-09-02 Aaron Spangler <aaron777@gmail.com>
14252:
14253: * ldap.c:
14254: config tls_* options
14255: [0b0e0797b3b9]
14256:
14257: 2004-08-29 Todd C. Miller <Todd.Miller@courtesan.com>
14258:
14259: * configure, configure.in:
14260: No need for -lcrypt when using pam.
14261: [41fff3a53e68]
14262:
14263: 2004-08-27 Todd C. Miller <Todd.Miller@courtesan.com>
14264:
14265: * configure:
14266: regen
14267: [75820aecce2c]
14268:
14269: 2004-08-27 Aaron Spangler <aaron777@gmail.com>
14270:
14271: * configure.in, ldap.c, pathnames.h.in:
14272: Allow --with-ldap-conf-file option to override LDAP_CONF
14273: [c9909bc484a5]
14274:
14275: * ldap.c:
14276: cleanup debug message
14277: [1f6ca4824d8d]
14278:
14279: 2004-08-26 Aaron Spangler <aaron777@gmail.com>
14280:
14281: * README.LDAP:
14282: more config info
14283: [f2e7147fd507]
14284:
14285: 2004-08-24 Todd C. Miller <Todd.Miller@courtesan.com>
14286:
14287: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
14288: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
14289: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
14290: longer use gross statics in command_matches(). Also rename some
14291: variables for improved clarity.
14292: [7169a6c7bea4]
14293:
14294: 2004-08-21 Todd C. Miller <Todd.Miller@courtesan.com>
14295:
14296: * INSTALL:
14297: document HP's crippled compiler deficiency.
14298: [c405ea5a8d4c]
14299:
14300: * INSTALL:
14301: Fix some thinkos in --with-editor and --with-env-editor
14302: descriptions. Noticed by Norihiko Murase.
14303: [dd781de1c985]
14304:
14305: * configure, configure.in:
14306: --with-noexec takes an optional PATH argument.
14307: [8f6ab77f22cc]
14308:
14309: * INSTALL:
14310: document --with-noexec
14311: [50cb1fc627ce]
14312:
14313: 2004-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
14314:
14315: * RUNSON, TODO:
14316: sync
14317: [f2503bd13373] [SUDO_1_6_8]
14318:
14319: * sudo_edit.c:
14320: Better warning message when sudoedit is unable to write to the
14321: destination file.
14322: [f78c18f2ffa8]
14323:
14324: * sudo.cat, sudo.man.in:
14325: regen
14326: [7e2bf63d6d9a]
14327:
14328: * sudo.pod:
14329: Don't italicize the string "sudoedit"
14330: [c691643bd269]
14331:
14332: 2004-08-16 Todd C. Miller <Todd.Miller@courtesan.com>
14333:
14334: * HISTORY:
14335: Mention GratiSoft.
14336: [dc53de581b2d]
14337:
14338: 2004-08-11 Todd C. Miller <Todd.Miller@courtesan.com>
14339:
14340: * sudo.tab.c:
14341: regen
14342: [8ae0484dfc38]
14343:
14344: * parse.yacc:
14345: Reset used_runas to FALSE when re-intializing the parser.
14346: [b7403f353a02]
14347:
14348: 2004-08-09 Todd C. Miller <Todd.Miller@courtesan.com>
14349:
14350: * config.guess:
14351: Correct OpenBSD mips support
14352: [314fc7afc165]
14353:
14354: * config.guess:
14355: Add OpenBSD/mips
14356: [ac87d0a773ef]
14357:
14358: 2004-08-07 Aaron Spangler <aaron777@gmail.com>
14359:
14360: * README.LDAP:
14361: More behavior notes
14362: [13be1d212b47]
14363:
14364: * README.LDAP:
14365: Updates on current behavior
14366: [d498a8866d6f]
14367:
14368: 2004-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
14369:
14370: * sudoers.pod:
14371: =back does not take an indentlevel (makes no difference to formatted
14372: files).
14373: [9c8523bb382a]
14374:
14375: * sudo.pod:
14376: =back does not take an indentlevel (makes no difference to formatted
14377: files).
14378: [e5f479e24fa8]
14379:
14380: * CHANGES:
14381: new
14382: [2dbd9aba8b33]
14383:
14384: * sudo.c:
14385: Consistency. Use same error for bad -u #uid when targetpw is set as
14386: we do when a bad -u username is specified.
14387: [922961c4a9d6]
14388:
14389: * TODO:
14390: Add checksum idea from Steve Mancini
14391: [e6ece1b766ba]
14392:
14393: * sudoers.cat, sudoers.man.in:
14394: regen
14395: [370d2317829f]
14396:
14397: * sudo.cat, sudo.man.in:
14398: regen
14399: [f93d41fc38b1]
14400:
14401: * sudo.pod, sudoers.pod:
14402: Document the restriction on uids specified via -u when targetpw is
14403: set.
14404: [878fedb455db]
14405:
14406: * sudo.c:
14407: Error out when targetpw is enabled and sudo is run with -u #uid but
14408: #uid does not exist in the passwd database. We can't do target
14409: authentication when the target is not in passwd!
14410: [27c5888c86eb]
14411:
14412: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
14413: regen
14414: [ceb65711050c]
14415:
14416: * TODO:
14417: Some more todo for the next release.
14418: [7b7417be7601]
14419:
14420: * INSTALL:
14421: Make it clear that PAM should be used for DCE support when possible.
14422: [7502029fd385]
14423:
14424: * sudoers.pod:
14425: o Document problems with wildcards and relative paths. o Make the
14426: order requirements more prominent. o Change a "set" to "reset" for
14427: clarity.
14428: [bacdd181b33f]
14429:
14430: 2004-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
14431:
14432: * sudo.pod:
14433: Mention --with-secure-path, not SECURE_PATH.
14434: [41283ddde5e1]
14435:
14436: 2004-08-03 Aaron Spangler <aaron777@gmail.com>
14437:
14438: * ldap.c:
14439: reflect changes to parse.c
14440: [8880fe9b724d]
14441:
14442: 2004-08-02 Todd C. Miller <Todd.Miller@courtesan.com>
14443:
14444: * sudo.tab.c:
14445: regen
14446: [a57658ca9177]
14447:
14448: * parse.c, parse.h, testsudoers.c, visudo.c:
14449: Don't pass user_cmnd and user_args to command_matches(), just use
14450: the globals there. Since we keep state with statics anyway it is
14451: misleading to pretend that passing in different cmnd and cmnd_args
14452: will work.
14453: [0a2544991fd6]
14454:
14455: * parse.yacc:
14456: Don't pass user_cmnd and user_args to command_matches(), just use
14457: the globals there. Since we keep state with statics anyway it is
14458: misleading to pretend that passing in different cmnd and cmnd_args
14459: will work.
14460: [a4910bf6032b]
14461:
14462: * parse.c:
14463: Fix a bug introduced in rev. 1.149. When checking for pseudo-
14464: commands check for a '/' anywhere in cmnd, not just the first
14465: character.
14466: [ce98142f03ca]
14467:
14468: 2004-07-31 Aaron Spangler <aaron777@gmail.com>
14469:
14470: * sudo.man.in, sudo.pod:
14471: Clarification thanks to Olivier Blin <oblin@mandrakesoft.com>
14472: [a91800e094b1]
14473:
14474: * sudoers.man.in, sudoers.pod:
14475: Add ignore_local_sudoers
14476: [741ddcbf7083]
14477:
14478: * README.LDAP:
14479: Sun One schema definition by Andreas.Bussjaeger@t-systems.com and
14480: janth@moldung.no
14481: [742c02e07cd9]
14482:
14483: 2004-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
14484:
14485: * CHANGES:
14486: typo
14487: [e7cdefbd7a9a]
14488:
14489: 2004-07-23 Todd C. Miller <Todd.Miller@courtesan.com>
14490:
14491: * CHANGES:
14492: sync
14493: [734dafc4a85e]
14494:
14495: * parse.c:
14496: Parse sudoers file as PERM_RUNAS not PERM_ROOT and remove a useless
14497: PERM_SUDOERS. Restore to PERM_ROOT upon exit of the parse.
14498: [151b7f593568]
14499:
14500: 2004-07-08 Todd C. Miller <Todd.Miller@courtesan.com>
14501:
14502: * CHANGES:
14503: PAM change
14504: [d8fb6d6a22d0]
14505:
14506: 2004-07-08 Aaron Spangler <aaron777@gmail.com>
14507:
14508: * ldap.c:
14509: Better debugging of ALL command
14510: [9db3e84029dc]
14511:
14512: 2004-07-08 Todd C. Miller <Todd.Miller@courtesan.com>
14513:
14514: * parse.c:
14515: When matching for "sudoedit" in sudoers check both the command the
14516: user typed *and* the command that is listed in the sudoers entry.
14517: [f36ca1f94095]
14518:
14519: 2004-07-04 Aaron Spangler <aaron777@gmail.com>
14520:
14521: * ldap.c:
14522: Added !command feature
14523: [ed539574611b]
14524:
14525: 2004-06-28 Todd C. Miller <Todd.Miller@courtesan.com>
14526:
14527: * auth/pam.c:
14528: Use pam_acct_mgmt() to check for disabled accounts; Brian Farrell
14529: [2be8e0e8813a]
14530:
14531: 2004-06-11 Todd C. Miller <Todd.Miller@courtesan.com>
14532:
14533: * LICENSE:
14534: License is ISC-style, not BSD-style
14535: [ac0589e1dd5d]
14536:
14537: * CHANGES:
14538: sync
14539: [16058a30f404]
14540:
14541: 2004-06-10 Todd C. Miller <Todd.Miller@courtesan.com>
14542:
14543: * sudo.cat, sudo.man.in:
14544: regen
14545: [8820eb9c809b]
14546:
14547: * sudo.pod:
14548: o Update some out of date bits to reality o Change the shell promt
14549: in examples to bourne-shell style o Clarify some details o Add a
14550: CAVEAT about "sudo cd /foo"
14551: [b0af373214b6]
14552:
14553: * check.c:
14554: Don't ask for a password if invoking user == target user.
14555: [dd5c96141132]
14556:
14557: * sudo.c:
14558: typo in comment
14559: [278d20f9b249]
14560:
14561: 2004-06-08 Todd C. Miller <Todd.Miller@courtesan.com>
14562:
14563: * sudoers.cat, sudoers.man.in:
14564: regen
14565: [9036c6f39eff]
14566:
14567: * sudoers.pod:
14568: Expand on NOEXEC a little.
14569: [9a13756aebe4]
14570:
14571: * TODO:
14572: sync
14573: [8d2c1af48de8]
14574:
14575: * visudo.cat, visudo.man.in:
14576: regen
14577: [3921f01607c8]
14578:
14579: * sudo.tab.c:
14580: regen
14581: [9338c3d68250]
14582:
14583: * visudo.pod:
14584: Add a check in visudo for runas_default being set after it has
14585: already been used.
14586: [6700358d7ad8]
14587:
14588: * CHANGES, parse.yacc, visudo.c:
14589: Add a check in visudo for runas_default being set after it has
14590: already been used.
14591: [803560986a8a]
14592:
14593: * sudo.tab.c:
14594: regen
14595: [b60636e2cf63]
14596:
14597: * parse.yacc:
14598: Add a MATCHED macro for testing whether foo_matches has been set to
14599: TRUE or FALSE. This is more readable than checking for >=0 or < 0.
14600: Doesn't change the actual code generated.
14601: [f376da8ccdc8]
14602:
14603: 2004-06-07 Todd C. Miller <Todd.Miller@courtesan.com>
14604:
14605: * sudoers.cat:
14606: regen
14607: [6cceb6d6c9bd]
14608:
14609: * sudoers.man.in:
14610: regen
14611: [5acd12b730b3]
14612:
14613: * sudoers.pod:
14614: Correct description of where Defaults specs should go.
14615: [6b11ff53d7ad]
14616:
14617: * sudoers:
14618: Correct description of where Defaults specs should go.
14619: [868db857630d]
14620:
14621: * testsudoers.c, visudo.c:
14622: update (c) year
14623: [272c8a53604c]
14624:
14625: * logging.h:
14626: update (c) year
14627: [3cec76d400ce]
14628:
14629: * ldap.c:
14630: update (c) year
14631: [f264632488a0]
14632:
14633: * find_path.c:
14634: update (c) year
14635: [40c227af9227]
14636:
14637: * auth/pam.c:
14638: update (c) year
14639: [87149e0eed50]
14640:
14641: * auth/bsdauth.c, auth/kerb5.c:
14642: update (c) year
14643: [d72eb434c068]
14644:
14645: 2004-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
14646:
14647: * sudo.tab.c:
14648: regen
14649: [83408d9e9d2e]
14650:
14651: * auth/bsdauth.c, auth/kerb5.c, auth/pam.c, visudo.c:
14652: Remove trailing spaces, no actual code changes.
14653: [4c3bf2819293]
14654:
14655: * tgetpass.c:
14656: Remove trailing spaces, no actual code changes.
14657: [96f6e0a24c26]
14658:
14659: * ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c:
14660: Remove trailing spaces, no actual code changes.
14661: [c7075d1cbed5]
14662:
14663: * getcwd.c:
14664: Remove trailing spaces, no actual code changes.
14665: [776cc0374547]
14666:
14667: * find_path.c:
14668: Remove trailing spaces, no actual code changes.
14669: [7ed7099f3c71]
14670:
14671: * compat.h, defaults.c, env.c:
14672: Remove trailing spaces, no actual code changes.
14673: [893e83c33795]
14674:
14675: * check.c:
14676: Remove trailing spaces, no actual code changes.
14677: [f77750f8803b]
14678:
14679: * sudo.tab.c:
14680: regen
14681: [62e0ed883b31]
14682:
14683: * parse.yacc:
14684: Fix a >=0 that should be <0 that was improperly converted when
14685: UNSPEC was added.
14686: [ad1531a55a49]
14687:
14688: * parse.yacc:
14689: Add do {} while(0) around pop macro Set cmnd_matches to UNSPEC, not
14690: NOMATCH when resetting it.
14691: [ae017a12870a]
14692:
14693: * parse.yacc:
14694: Fix pastos introduced in SETNMATCH addition.
14695: [6ea1c9d80681]
14696:
14697: 2004-06-05 Todd C. Miller <Todd.Miller@courtesan.com>
14698:
14699: * README.LDAP:
14700: Update for configure changes
14701: [637a635da287]
14702:
14703: * sudo.tab.c:
14704: regen
14705: [4753c2788713]
14706:
14707: * sudo.h:
14708: Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use
14709: these in parse.yacc. Also in parse.yacc initialize the *_matches
14710: vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use
14711: when setting *_matches to a value that may be
14712: NOMATCH/UNSPEC/TRUE/FALSE.
14713: [2ba622e15a4d]
14714:
14715: * parse.yacc:
14716: Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use
14717: these in parse.yacc. Also in parse.yacc initialize the *_matches
14718: vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use
14719: when setting *_matches to a value that may be
14720: NOMATCH/UNSPEC/TRUE/FALSE.
14721: [746b519e41a6]
14722:
14723: * parse.yacc:
14724: Initialize runas to -2, not -1 since we need to be able to
14725: distinguish between the initialized value and the value of a non-
14726: match when passing along the runas value to multiple commands.
14727:
14728: The result of this is that an unmatched runas is now set to -1, not
14729: 0. This is required now that parse.c treats a FALSE value for runas
14730: as being explicitly denied.
14731: [7791ed3621f6]
14732:
14733: 2004-06-03 Todd C. Miller <Todd.Miller@courtesan.com>
14734:
14735: * sudo.c, visudo.c:
14736: Error out if argc < 1.
14737: [ce6b2a9eda3c]
14738:
14739: * getprogname.c:
14740: Error out if argc < 1.
14741: [c566cce8dc78]
14742:
14743: * configure, configure.in:
14744: Add tests for what libs we need to link with for ldap and for
14745: whether or not lber.h needs to be explicitly included.
14746: [b2e9729cc4e7]
14747:
14748: 2004-06-03 Aaron Spangler <aaron777@gmail.com>
14749:
14750: * ldap.c:
14751: Solaris native LDAP build fix
14752: [39929e40eb11]
14753:
14754: 2004-06-01 Todd C. Miller <Todd.Miller@courtesan.com>
14755:
14756: * ldap.c:
14757: Set edn to NULL is ldap_get_dn() fails to avoid potential use of an
14758: unset variable.
14759: [6a4c20a66f98]
14760:
14761: * sudo.h:
14762: Add prototype for sudo_ldap_list_matches
14763: [443b007a8dab]
14764:
14765: * configure, configure.in:
14766: Better check for dirfd macro--we now set HAVE_DIRFD for the macro
14767: version too. Added check for dd_fd in `DIR' if no dirfd is found;
14768: this is now used to confitionally define the dirfd macro in
14769: compat.h.
14770: [567656978f7e]
14771:
14772: * config.h.in:
14773: Better check for dirfd macro--we now set HAVE_DIRFD for the macro
14774: version too. Added check for dd_fd in `DIR' if no dirfd is found;
14775: this is now used to confitionally define the dirfd macro in
14776: compat.h.
14777: [34eace4faec8]
14778:
14779: * compat.h:
14780: Better check for dirfd macro--we now set HAVE_DIRFD for the macro
14781: version too. Added check for dd_fd in `DIR' if no dirfd is found;
14782: this is now used to confitionally define the dirfd macro in
14783: compat.h.
14784: [8d50ff1bbf2a]
14785:
14786: * closefrom.c:
14787: Only check /proc/$$/fd if we have the dirfd function/macro.
14788: [15e3ccce7553]
14789:
14790: * compat.h, config.h.in, configure, configure.in:
14791: Add a check for a dirfd() function (like Linux) and add a dirfd
14792: macro in compat.h if there is no dirfd() function or macro.
14793: [1e95756edb50]
14794:
14795: * closefrom.c, getcwd.c:
14796: dirfd() is now defined in compat.h as needed.
14797: [bb1d79271188]
14798:
14799: * CHANGES:
14800: Clarify closefrom() note.
14801: [f4e4a5508dda]
14802:
14803: * parse.c:
14804: When checking for a command in the directory, only copy the base dir
14805: once.
14806: [7a3276808b87]
14807:
14808: * closefrom.c:
14809: If there is a /proc/$$/fd directory, behave like the Solaris
14810: closefrom() and only close the descriptors listed therein.
14811: [19de23779e84]
14812:
14813: * alloc.c:
14814: compat.h guarantees INT_MAX is defined.
14815: [1bf0c79d4606]
14816:
14817: * compat.h:
14818: Add definitions of OPEN_MAX and INT_MAX for those without it and
14819: remove definition of RLIM_INFINITY (now unused).
14820: [f827d1ebf96e]
14821:
14822: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c, parse.c,
14823: sudo.c, sudo.h, visudo.c:
14824: Use PATH_MAX, not MAXPATHLEN since the former is standardized.
14825: [59788f211c24]
14826:
14827: 2004-05-31 Todd C. Miller <Todd.Miller@courtesan.com>
14828:
14829: * CHANGES:
14830: sync
14831: [d32fa124f1ad]
14832:
14833: * RUNSON:
14834: Add some entries that were mailed in a while ago
14835: [ff8d5bfec54e]
14836:
14837: * closefrom.c:
14838: o sysconf returns a long, not an int. o check for negative return
14839: value from sysconf/getdtablesize and use OPEN_MAX in this case. o
14840: define OPEN_MAX to 256 for those without it (a fair guess...)
14841: [ccf81ae6deb2]
14842:
14843: 2004-05-30 Todd C. Miller <Todd.Miller@courtesan.com>
14844:
14845: * UPGRADE:
14846: Mention change in parse order for RunAs entries.
14847: [dc73b0bca617]
14848:
14849: * configure:
14850: regen
14851: [07cce8e0534e]
14852:
14853: 2004-05-29 Todd C. Miller <Todd.Miller@courtesan.com>
14854:
14855: * INSTALL, README.LDAP, config.h.in, configure.in:
14856: o --with-ldap now takes an optional dir as a parameter o added
14857: check for ldap_initialize() and start_tls_s()
14858: [2b846c7974c6]
14859:
14860: * README.LDAP:
14861: Fix some typos, word choice and formatting issues.
14862: [00dc8ca84b10]
14863:
14864: 2004-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
14865:
14866: * tgetpass.c:
14867: Use SA_INTERRUPT so SunOS works correctly, avoid stdio and just use
14868: read/write as it is simpler.
14869: [30f5446ee8b0]
14870:
14871: * configure, configure.in:
14872: Remove hack overriding cross-compiler check. It should no longer be
14873: needed.
14874: [22a6cbd88608]
14875:
14876: * compat.h:
14877: Remove select() compat bits since we no longer use select().
14878: [d7bbf7cd36f5]
14879:
14880: * CHANGES, tgetpass.c:
14881: Use alarm() instead of select() for the timeout for systems that
14882: don't fully/properly implement select().
14883: [d7cc60f15800]
14884:
14885: 2004-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
14886:
14887: * CHANGES:
14888: synbc
14889: [132a39788e07]
14890:
14891: * RUNSON:
14892: update
14893: [61ef508380c6]
14894:
14895: * set_perms.c:
14896: Deal with systems that have no way of setting the effective uid such
14897: as nsr-tandem-nsk.
14898: [306e00e9b5a4]
14899:
14900: * configure, configure.in:
14901: Define NO_SAVED_IDS if we don't find seteuid()
14902: [8588f18345cf]
14903:
14904: * config.h.in, configure, configure.in:
14905: Add back check for setreuid() since NSK doesn't have it.
14906: [43127bd703d1]
14907:
14908: * sudoers.cat, sudoers.man.in:
14909: regen
14910: [af4f4b20e422]
14911:
14912: * CHANGES:
14913: sync
14914: [29ca3b699c24]
14915:
14916: * BUGS:
14917: sync
14918: [3593f17f72ed]
14919:
14920: * parse.c:
14921: In sudoers_lookup() return VALIDATE_NOT_OK if the runas user was
14922: explicitly denied and the command matched. This fixes a long-
14923: standing bug and makes: foo machine = (ALL) /usr/bin/blah
14924: foo machine = (!bar) /usr/bin/blah
14925:
14926: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
14927: [2f5ee244985a]
14928:
14929: * sudoers.pod:
14930: Clarify mail_noperm
14931: [3238b2d41989]
14932:
14933: 2004-05-20 Aaron Spangler <aaron777@gmail.com>
14934:
14935: * Makefile.in:
14936: Missing DESTDIR in make install for sudo_noexec.la
14937: [91431e821525]
14938:
14939: 2004-05-17 Todd C. Miller <Todd.Miller@courtesan.com>
14940:
14941: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
14942: visudo.man.in:
14943: regen
14944: [cdfde0dcb556]
14945:
14946: * TODO:
14947: sync
14948: [4799b7d8b62c]
14949:
14950: * sudoers.pod:
14951: Remove fastboot/fasthalt (who still remembers these?) and add a
14952: minimal sudoedit example.
14953: [19d299f233cd]
14954:
14955: * sample.sudoers:
14956: Remove fastboot/fasthalt (who still remembers these?) and add a
14957: minimal sudoedit example.
14958: [b1bca73d6250]
14959:
14960: * UPGRADE, sudo.c, visudo.c:
14961: filesystem -> file system
14962: [1e1afaf30469]
14963:
14964: * TROUBLESHOOTING:
14965: filesystem -> file system
14966: [39fb594e9338]
14967:
14968: * CHANGES, INSTALL:
14969: filesystem -> file system
14970: [85948b608ffe]
14971:
14972: * sudo.pod, sudoers.pod:
14973: Fix some minor typos and formatting goofs
14974: [e94d243a0b90]
14975:
14976: * lex.yy.c:
14977: regen
14978: [2eed0ab1f4c4]
14979:
14980: * visudo.pod:
14981: remove my email addr
14982: [b63262c0389b]
14983:
14984: * sudo.pod, sudoers.pod, visudo.pod:
14985: Use @mansectform@ and @mansectsu@ everywhere Make man page
14986: references links with L<>
14987: [f459f4b9ddb9]
14988:
14989: * parse.lex:
14990: Accept quoted globbing characters and pass them verbatim for
14991: fnmatch()
14992: [8248b86e9380]
14993:
14994: * UPGRADE:
14995: Document that /tmp/.odus is gone.
14996: [3667b66af5bb]
14997:
14998: * pathnames.h.in:
14999: No longer use /tmp/.odus as a possible timestamp dir unless
15000: specifically configured to do so. Instead, if no /var/run exists,
15001: use /var/adm/sudo or /usr/adm/sudo.
15002: [48d94c9f9ad4]
15003:
15004: * configure:
15005: No longer use /tmp/.odus as a possible timestamp dir unless
15006: specifically configured to do so. Instead, if no /var/run exists,
15007: use /var/adm/sudo or /usr/adm/sudo.
15008: [058d7b8cf07b]
15009:
15010: * aclocal.m4:
15011: No longer use /tmp/.odus as a possible timestamp dir unless
15012: specifically configured to do so. Instead, if no /var/run exists,
15013: use /var/adm/sudo or /usr/adm/sudo.
15014: [cf52c4c2803f]
15015:
15016: * CHANGES:
15017: No longer use /tmp/.odus as a possible timestamp dir unless
15018: specifically configured to do so. Instead, if no /var/run exists,
15019: use /var/adm/sudo or /usr/adm/sudo.
15020: [6058c4cefcec]
15021:
15022: * set_perms.c, sudo.c, tgetpass.c, visudo.c:
15023: Preliminary changes to support nsr-tandem-nsk. Based on patches
15024: from Tom Bates.
15025: [2e5f81834383]
15026:
15027: * logging.c:
15028: Preliminary changes to support nsr-tandem-nsk. Based on patches
15029: from Tom Bates.
15030: [934bbe6872b6]
15031:
15032: * check.c, compat.h:
15033: Preliminary changes to support nsr-tandem-nsk. Based on patches
15034: from Tom Bates.
15035: [390b698b5924]
15036:
15037: 2004-05-16 Todd C. Miller <Todd.Miller@courtesan.com>
15038:
15039: * CHANGES:
15040: There was no 1.6.7p6.
15041: [8013d2e6b062]
15042:
15043: * BUGS, CHANGES:
15044: sync
15045: [c38b41f32857]
15046:
15047: * Makefile.in:
15048: add missing files to DISTFILES
15049: [e6a80ad03039]
15050:
15051: * sudo.cat, sudoers.cat, visudo.cat:
15052: regen
15053: [027bc9746dd5]
15054:
15055: * sudoers.man.in:
15056: regen
15057: [f5e85ef686cf]
15058:
15059: * Makefile.in:
15060: Fix some line wrap and update (c) year
15061: [bad1f46aa1ca]
15062:
15063: 2004-04-28 Aaron Spangler <aaron777@gmail.com>
15064:
15065: * README.LDAP:
15066: Build Note
15067: [7a061248249b]
15068:
15069: 2004-04-07 Aaron Spangler <aaron777@gmail.com>
15070:
15071: * Makefile.in:
15072: Fix install-dirs
15073: [be0726dd92e7]
15074:
15075: 2004-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
15076:
15077: * sudo.tab.c:
15078: regen
15079: [3f4f0d1ab8b9]
15080:
15081: * visudo.c:
15082: In Exit() when used as a signal handler, emsg is a pointer so
15083: sizeof() is wrong so make it a #define instead. Also avoid using a
15084: negative exit value. Found by Aaron Campbell
15085: [78716a3a3fdc]
15086:
15087: 2004-03-24 Todd C. Miller <Todd.Miller@courtesan.com>
15088:
15089: * sudoers.pod:
15090: Remove bogus sentence about uids in a User_List. Document usernames
15091: vs. uid parsing in a Runas_List.
15092: [7ca510b5031c]
15093:
15094: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
15095: If the user specified a uid with the -u flag and the uid exists in
15096: the passwd file, set runas_user to the name, not the uid.
15097:
15098: When comparing usernames in sudoers, if a name is really a uid
15099: (starts with '#') compare it numerically to pw_uid.
15100: [8d6935d04673]
15101:
15102: 2004-03-22 Todd C. Miller <Todd.Miller@courtesan.com>
15103:
15104: * auth/kerb5.c:
15105: krb5_mcc_ops should be const; Johnny C. Lam
15106: [aa8c753e426e]
15107:
15108: 2004-02-28 Aaron Spangler <aaron777@gmail.com>
15109:
15110: * CHANGES, config.h.in, ldap.c:
15111: Added start_tls support
15112: [7ef864c15b69]
15113:
15114: 2004-02-14 Todd C. Miller <Todd.Miller@courtesan.com>
15115:
15116: * Makefile.in:
15117: Clean up libtool stuff for 'make distclean' and add def_data.c,
15118: def_data.h to PARSESRCS.
15119: [bf9bb6bb06ab]
15120:
15121: 2004-02-14 Aaron Spangler <aaron777@gmail.com>
15122:
15123: * strlcat.c, strlcpy.c:
15124: Un-Fix last license munge
15125: [42654b77ac71]
15126:
15127: 2004-02-13 Todd C. Miller <Todd.Miller@courtesan.com>
15128:
15129: * configure:
15130: regen
15131: [e4de6b23a4dc]
15132:
15133: * CHANGES, RUNSON, TODO:
15134: checkpoint
15135: [94e1ace84d5c]
15136:
15137: * lex.yy.c, sudo.tab.c:
15138: regen
15139: [8ce784505643]
15140:
15141: * auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
15142: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
15143: emul/search.h, emul/utime.h:
15144: More to a less restrictive, ISC-style license.
15145: [a31b20e48003]
15146:
15147: * auth/kerb5.c, auth/pam.c:
15148: More to a less restrictive, ISC-style license.
15149: [e41f92b41216]
15150:
15151: * auth/dce.c, auth/fwtk.c, auth/kerb4.c:
15152: More to a less restrictive, ISC-style license.
15153: [87534c164a52]
15154:
15155: * auth/bsdauth.c:
15156: More to a less restrictive, ISC-style license.
15157: [e21be6594b58]
15158:
15159: * auth/afs.c, auth/aix_auth.c, zero_bytes.c:
15160: More to a less restrictive, ISC-style license.
15161: [6d234be91c5e]
15162:
15163: * sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, visudo.c,
15164: visudo.man.in, visudo.pod:
15165: More to a less restrictive, ISC-style license.
15166: [b02aea324fd6]
15167:
15168: * sudo_noexec.c:
15169: More to a less restrictive, ISC-style license.
15170: [a6da7631e0b2]
15171:
15172: * strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
15173: sudo_edit.c:
15174: More to a less restrictive, ISC-style license.
15175: [71cdcc241e94]
15176:
15177: * sigaction.c, strerror.c:
15178: More to a less restrictive, ISC-style license.
15179: [4bccdedca58a]
15180:
15181: * ldap.c, logging.c, logging.h, parse.c, parse.h, pathnames.h.in,
15182: set_perms.c:
15183: More to a less restrictive, ISC-style license.
15184: [64d772d70ab3]
15185:
15186: * getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15187: ins_goons.h, insults.h, interfaces.c, interfaces.h:
15188: More to a less restrictive, ISC-style license.
15189: [520381c60a54]
15190:
15191: * find_path.c, getprogname.c:
15192: More to a less restrictive, ISC-style license.
15193: [f605d5eab6f1]
15194:
15195: * fileops.c:
15196: More to a less restrictive, ISC-style license.
15197: [4129a8b38a67]
15198:
15199: * env.c:
15200: More to a less restrictive, ISC-style license.
15201: [d5bd859757de]
15202:
15203: * defaults.h:
15204: More to a less restrictive, ISC-style license.
15205: [008f5d5743f5]
15206:
15207: * LICENSE, Makefile.in, alloc.c, check.c, closefrom.c, compat.h,
15208: defaults.c:
15209: More to a less restrictive, ISC-style license.
15210: [d8d7bfc8a18b]
15211:
15212: * utime.c, version.h:
15213: More to a less restrictive, ISC-style license.
15214: [e2e038ad8209]
15215:
15216: * parse.lex, parse.yacc:
15217: More to a less restrictive, ISC-style license.
15218: [2f5942e847a1]
15219:
15220: * Makefile.binary:
15221: More to a less restrictive, ISC-style license.
15222: [1ed561734535]
15223:
15224: 2004-02-13 Aaron Spangler <aaron777@gmail.com>
15225:
15226: * sudoers2ldif:
15227: Merged in LDAP Support
15228: [3994c4d05947]
15229:
15230: * ldap.c, sudo.c, sudo.h:
15231: Merged in LDAP Support
15232: [547eaa346fcc]
15233:
15234: * def_data.c, def_data.h, def_data.in:
15235: Merged in LDAP Support
15236: [8fb255280e42]
15237:
15238: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in:
15239: Merged in LDAP Support
15240: [1038092a161e]
15241:
15242: 2004-02-08 Todd C. Miller <Todd.Miller@courtesan.com>
15243:
15244: * sudo.h, sudo_noexec.c:
15245: Only do "extern int errno" if errno is not a macro.
15246: [b2e02a08be8b]
15247:
15248: 2004-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
15249:
15250: * set_perms.c:
15251: setreuid(0, 0) fails on QNX if the euid is not already 0 so set the
15252: euid first, then just call setuid(0) to set the real uid too.
15253: [f08546e2e0ee]
15254:
15255: * set_perms.c:
15256: Use setresuid() and setreuid() for PERM_RUNAS when appropriate
15257: instead of seteuid() which may not exist.
15258: [ba508581befb]
15259:
15260: 2004-02-04 Todd C. Miller <Todd.Miller@courtesan.com>
15261:
15262: * LICENSE:
15263: 2004
15264: [37425513a342]
15265:
15266: * INSTALL, config.h.in, configure, configure.in, ins_classic.h:
15267: Add --with-pc-insults configure option
15268: [7daa5294c17b]
15269:
15270: * visudo.man.in:
15271: Prefer VISUAL over EDITOR like old vipw did.
15272: [996252a4ab65]
15273:
15274: 2004-02-01 Todd C. Miller <Todd.Miller@courtesan.com>
15275:
15276: * sudo.man.in, sudoers.man.in:
15277: regen
15278: [a247f1c52eb9]
15279:
15280: * sudoers.pod:
15281: Add a note that noexec is not a cure-all.
15282: [9e7fc535367d]
15283:
15284: * sudoers.pod:
15285: Mention that disabling "root_sudo" is pretty pointless.
15286: [f38a415afba0]
15287:
15288: * configure, configure.in:
15289: Substitute for root_sudo in sudoers.pod
15290: [ce483cfc86be]
15291:
15292: * sudo.pod:
15293: Add sudoedit to the NAME section
15294: [51bc453ec2f6]
15295:
15296: * sudoers.pod:
15297: Document that fact that setting ignore_dot in sudoers has no effect
15298: due to the fact that find_path() is called *before* sudoers is read.
15299: [6808df7e417c]
15300:
15301: 2004-01-30 Todd C. Miller <Todd.Miller@courtesan.com>
15302:
15303: * sudo_edit.c:
15304: Do not require _PATH_USRTMP to be set.
15305: [546f3270dd10]
15306:
15307: * BUGS, CHANGES, TODO:
15308: sync
15309: [4205ddeab781]
15310:
15311: * sudo.man.in:
15312: regen
15313: [e2143690a88a]
15314:
15315: * sudo.pod:
15316: Clarify that when sudo is run by root with the SUDO_USER variable
15317: set, the sudoers lookup happens for root and not the SUDO_USER user.
15318: [47207bec1bdf]
15319:
15320: 2004-01-29 Todd C. Miller <Todd.Miller@courtesan.com>
15321:
15322: * auth/pam.c, auth/sudo_auth.c, interfaces.c, logging.c, parse.c,
15323: set_perms.c, sigaction.c, sudo.c, tgetpass.c:
15324: Use the SET, CLR and ISSET macros.
15325: [a8b0d7f1e8fd]
15326:
15327: * fnmatch.c:
15328: Use the SET, CLR and ISSET macros.
15329: [1afbcba22ba6]
15330:
15331: * defaults.c, env.c:
15332: Use the SET, CLR and ISSET macros.
15333: [2f39431e0a49]
15334:
15335: * interfaces.h:
15336: MAIN was replaced with _SUDO_MAIN some time ago.
15337: [ea1b38f2ac9d]
15338:
15339: * sudo.c:
15340: Don't look at prev_user until after we've parsed sudoers and done
15341: the password check. That way, if sudo/sudoedit is run from a root
15342: process that was invoked by sudo, we check sudoers for root, not the
15343: previous user. This makes sudoedit much more useful and means that
15344: for the sudo case, we get correct logging on who actually ran the
15345: command.
15346: [431dfbf20552]
15347:
15348: 2004-01-23 Todd C. Miller <Todd.Miller@courtesan.com>
15349:
15350: * sudo_edit.c:
15351: Add a comment describing why we need to be notified about our child
15352: stopping.
15353: [0bec3ce4b49d]
15354:
15355: 2004-01-22 Todd C. Miller <Todd.Miller@courtesan.com>
15356:
15357: * def_data.c, def_data.in:
15358: Update the noexec variable descriptions
15359: [9cb7f1aa0e57]
15360:
15361: * sudoers.man.in, sudoers.pod:
15362: noexec now replaces more than just execve()
15363: [23cbdc0ee95c]
15364:
15365: * sudo_noexec.c:
15366: Alas, all the world does not go through execve(2). Many systems
15367: still have an execv(2) system call, Linux 2.6 provides fexecve(2)
15368: and it is not uncommon for libc to have underscore ('_') versions of
15369: the functions to be used internally by the library. Instead of
15370: stubbing all these out by hand, define a macro and let it do the
15371: work. Extra exec functions pointed out by Reznic Valery.
15372: [9fa0cd871b0c]
15373:
15374: * sudo.c, sudo_edit.c:
15375: Fix suspending the editor in -e mode. Because we do a fork() first
15376: we need to be notified when the child has been stopped and then send
15377: that same signal to ourself so the shell can do its job control
15378: thing.
15379: [773165eb6057]
15380:
15381: * visudo.c:
15382: Use WIFEXITED and WEXITSTATUS macros. If there are systems out
15383: there that want to run sudo that still don't support these we can
15384: try to deal with that later.
15385: [6af68e4aff60]
15386:
15387: * lex.yy.c:
15388: regen
15389: [403435317d5d]
15390:
15391: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod:
15392: Document sudo -e / sudoedit
15393: [a80f6ea910af]
15394:
15395: * configure, configure.in:
15396: fix typo
15397: [5020fcdc27f4]
15398:
15399: * config.h.in, configure.in:
15400: Add SET/CLR/ISSET
15401: [03ff57286e7e]
15402:
15403: 2004-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
15404:
15405: * sudo.c:
15406: Allow non-exclusive flags when invoked as sudoedit. Pretty print the
15407: long usage() line to not wrap (assumes 80 char display)
15408: [3941fa4004bb]
15409:
15410: * Makefile.in, sudo.c:
15411: If sudo is invoked as "sudoedit" the -e flag is implied and no other
15412: flags are permitted.
15413: [929670b01293]
15414:
15415: * sudo.h:
15416: Add a new flag, -e, that makes it possible to give users the ability
15417: to edit files with the editor of their choice as the invoking user,
15418: not the runas user. Temporary files are used for the actual edit
15419: and the temp file is copied over the original after the editor is
15420: done.
15421: [c4051414c1f4]
15422:
15423: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c:
15424: Add a new flag, -e, that makes it possible to give users the ability
15425: to edit files with the editor of their choice as the invoking user,
15426: not the runas user. Temporary files are used for the actual edit
15427: and the temp file is copied over the original after the editor is
15428: done.
15429: [37ac05c8ac3c]
15430:
15431: * env.c, sudo.c:
15432: If real uid == 0 and the SUDO_USER environment variables is set, use
15433: that to determine the invoking user's true identity. That way the
15434: proper info gets logged by someone who has done "sudo su" but still
15435: uses sudo to as root. We can't do this for non-root users since
15436: that would open up a security hole, though perhaps it would be
15437: acceptable to use getlogin(2) on OSes where this a system call (and
15438: doesn't just look in the utmp file).
15439: [c2f9198708a1]
15440:
15441: * pathnames.h.in:
15442: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
15443: [7d9e5768df93]
15444:
15445: * config.h.in, configure, configure.in:
15446: Add check for fchown(2)
15447: [a85df18798ed]
15448:
15449: 2004-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
15450:
15451: * sudo.c:
15452: Back out portions of the -i commit that set NewArgv[0] in
15453: set_runaspw. It is far to late to set NewArgv[0] there and will have
15454: no effect anyway as cmnd and safe_cmnd have already been set.
15455: [c2d343430c1c]
15456:
15457: * visudo.c, visudo.pod:
15458: Prefer VISUAL over EDITOR like old vipw did.
15459: [ae32f477cea3]
15460:
15461: 2004-01-19 Todd C. Miller <Todd.Miller@courtesan.com>
15462:
15463: * env.c, sudo.c:
15464: In -i mode always set new environment based on the runas user's
15465: passwd entry.
15466: [fa653b7887a8]
15467:
15468: 2004-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
15469:
15470: * sudo.man.in, sudo.pod:
15471: Document the new -i flag and sync SYNOPSIS section with usage() in
15472: sudo.c. Also sort the flags in the OPTIONS section.
15473: [6aabc0ffc47e]
15474:
15475: * sudo.c, sudo.h:
15476: o Add -i that acts similar to "su -", based on patches from David J.
15477: MacKenzie o Sort the flags in the usage message
15478: [c0fe7d6beffd]
15479:
15480: * sudoers.man.in, sudoers.pod:
15481: Add a missing @runas_default@ substitution.
15482: [60516fe2d090]
15483:
15484: 2004-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
15485:
15486: * sudo.c:
15487: Change euid to runas user before calling find_path().
15488: Unfortunately, though runas_user can be modified in sudoers we
15489: haven't parsed sudoers yet.
15490: [f469fdf2e313]
15491:
15492: * sudoers.man.in, sudoers.pod:
15493: Add missing defintion of Parameter_List and use single pipes in the
15494: Defaults EBNF definition.
15495: [f7bed6e909bf]
15496:
15497: * sudo.c:
15498: Fix a bug when set_runaspw() is used as a callback. We don't want
15499: to reset the contents of runas_pw if the user specified a user via
15500: the -u flag.
15501:
15502: Avoid unnecessary passwd lookups in set_authpw(). In most cases we
15503: already have the info in runas_pw.
15504: [efc35623ba09]
15505:
15506: 2004-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
15507:
15508: * check.c:
15509: Add Stan Lee / Uncle Ben quote to the lecture from RedHat
15510: [ebd5a76ccd7e]
15511:
15512: * sudo.h:
15513: Update sudo_getepw() proto and add one for set_runaspw()
15514: [6ed65795c17f]
15515:
15516: * parse.c:
15517: If we can't stat the command as root, try as the runas user instead.
15518: [ae713fca0e15]
15519:
15520: * testsudoers.c, visudo.c:
15521: Add stub set_runaspw() function
15522: [42aa37050053]
15523:
15524: * sudo.c:
15525: Add set_runaspw() function to fill in runas_pw. This will be used
15526: as a callback to update runas_pw when the runas user changes.
15527: [e570aa0088d0]
15528:
15529: * env.c, sudo.c:
15530: PERM_RUNAS -> PERM_FULL_RUNAS
15531: [51eec6f9e89a]
15532:
15533: * set_perms.c, sudo.h:
15534: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add a PERM_RUNAS that just
15535: changes the euid.
15536: [877c6fe4d12c]
15537:
15538: * getspwuid.c:
15539: Make sudo_pwdup() act like OpenBSD pw_dup() and allocate memory in
15540: one chunk for easy free()ing. Also change it from static to extern.
15541: [ab503260a7ec]
15542:
15543: * defaults.c, defaults.h:
15544: Add callback support
15545: [a61c4ca983fb]
15546:
15547: * mkdefaults:
15548: Add a callback field and use it for runas_default
15549: [96b69c27df5e]
15550:
15551: * def_data.c, def_data.in:
15552: Add a callback field and use it for runas_default
15553: [d3e9f06872b8]
15554:
15555: 2004-01-15 Todd C. Miller <Todd.Miller@courtesan.com>
15556:
15557: * auth/fwtk.c:
15558: Add support for chalnecho and display server responses used by fwtk
15559: >= 2.0
15560: [b1870f7aaf0d]
15561:
15562: 2004-01-12 Todd C. Miller <Todd.Miller@courtesan.com>
15563:
15564: * sudoers.man.in, sudoers.pod:
15565: ld.so is ld.so.1 on solaris
15566: [2bf9a123fa4c]
15567:
15568: * Makefile.in, config.h.in, configure, configure.in, sudo.c, sudo.h:
15569: Use closefrom() instead of doing the equivalent inline.
15570: [7e3ef6072884]
15571:
15572: * closefrom.c:
15573: closefrom(3) for systems w/o it
15574: [35caf58bb636]
15575:
15576: 2004-01-09 Todd C. Miller <Todd.Miller@courtesan.com>
15577:
15578: * sudoers.man.in:
15579: Update from .pod file.
15580: [d4c94fc0e0c9]
15581:
15582: * configure, configure.in:
15583: Substitute noexec_file for the sudoers man page
15584: [203d3376a551]
15585:
15586: * sudo.man.in, sudo.pod:
15587: Mention noexec
15588: [014375ddbb06]
15589:
15590: * sudoers.man.in, sudoers.pod:
15591: Document noexec
15592: [49a65d06201f]
15593:
15594: * auth/pam.c, config.h.in, configure.in:
15595: Move PAM_CONST macro definition from config.h to pam.c where it
15596: belongs. We can't have this in config.h since that gets included too
15597: early.
15598: [e64748071637]
15599:
15600: * auth/pam.c, config.h.in, configure, configure.in:
15601: Some PAM implementations put their headers in /usr/include/pam
15602: instead of /usr/include/security.
15603: [8cc749e9575c]
15604:
15605: * configure.in:
15606: I missed changing the EXEC macro -> EXECV here when I changed this
15607: in config.h.in and sudo.c a while ago.
15608: [6f5afac7789f]
15609:
15610: * acsite.m4:
15611: OpenBSD vax/m88k/hppa don't do shared libs
15612: [e4901d958bb7]
15613:
15614: * configure, configure.in:
15615: o merge the hpux case entries into a single entry w/ its own sub-
15616: case statement. o HP-UX >= 11 support getspnam(), use it in
15617: preference to getprpwuid()
15618: [0caad428894e]
15619:
15620: * configure, configure.in:
15621: eval $shrext so that it expands nicely on MacOS X
15622: [40419343eef8]
15623:
15624: * Makefile.in:
15625: Don't lie about making a module, it does the wrong thing on mach
15626: [7629b28f5688]
15627:
15628: * ltmain.sh:
15629: Remove requirement that libs must begin with "lib". They don't when
15630: we point directly at the lib using LD_PRELOAD or its equivalent.
15631: [d66f3de6ec85]
15632:
15633: * acsite.m4:
15634: Disable support for c++, f77 and java. We don't need it, it takes a
15635: lot of time, and it hosed our check for shared lib support.
15636: [4f5749c52ce4]
15637:
15638: * configure:
15639: regen
15640: [160865e9d15f]
15641:
15642: * configure.in:
15643: Call AC_ENABLE_SHARED and check the status of enable_shared to know
15644: when shared libs are available.
15645: [42504c1668fc]
15646:
15647: * acsite.m4:
15648: Duh, OpenBSD suports shared libs too
15649: [8e3cd9417475]
15650:
15651: * config.h.in, configure.in:
15652: Only OpenPAM and Linux PAM use const qualifiers.
15653: [b2f76476e866]
15654:
15655: * configure, configure.in:
15656: o No need to check for sed, libtool config does that for us o move
15657: check for --with-noexec until after libtool magic is run so we can
15658: use $can_build_shared and $shrext
15659: [668c656e89cc]
15660:
15661: * ltmain.sh:
15662: Don't print a bunch of crap about library installs since we are not
15663: really installing a library.
15664: [83fbcad29fe4]
15665:
15666: * env.c:
15667: Make format_env() varargs Add noexec support for Darwin, MacOS X,
15668: Irix, and Tru64
15669: [468885d75d10]
15670:
15671: * acsite.m4, ltconfig, ltmain.sh:
15672: Update to libtool 1.5 with local changes: o no ldconfig in the
15673: finish step o assume no libprefix or version is needed
15674: [4961cffc3797]
15675:
15676: * sudo_noexec.c:
15677: Fix compilation under K&R
15678: [8b309bf0b1b2]
15679:
15680: 2004-01-06 Todd C. Miller <Todd.Miller@courtesan.com>
15681:
15682: * CHANGES:
15683: checkpoint
15684: [3c368badab32]
15685:
15686: * sudo_noexec.c:
15687: stub execve() that just returns EACCES; used for noexec
15688: functionality
15689: [1297acae283a]
15690:
15691: * sudo.tab.h:
15692: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with
15693: generated code.
15694: [dcab78c49273]
15695:
15696: * sudo.tab.c:
15697: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with
15698: generated code.
15699: [0a61c735eabe]
15700:
15701: 2004-01-05 Todd C. Miller <Todd.Miller@courtesan.com>
15702:
15703: * def_data.c, def_data.h, def_data.in:
15704: Move the environment defaults to the end and shorten a few of the
15705: descriptions.
15706: [66787b9c612c]
15707:
15708: * configure, configure.in:
15709: no shared libs on ultris or convexos
15710: [2c5f3c456e32]
15711:
15712: * Makefile.in, configure, configure.in:
15713: Build sudo_noexec shared object using libtool; could use some
15714: cleanup.
15715: [373f483555dd]
15716:
15717: * acsite.m4, ltconfig, ltmain.sh:
15718: libtool scaffolding
15719: [c903a42e3d90]
15720:
15721: * parse.yacc, sudo.tab.c:
15722: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so that order is not
15723: important.
15724: [c6e8a34639a4]
15725:
15726: * defaults.c, env.c, lex.yy.c, parse.c, parse.h, parse.lex,
15727: parse.yacc, pathnames.h.in, sudo.c, sudo.h, sudo.tab.c:
15728: update copyright year
15729: [a16372ae1711]
15730:
15731: * configure, configure.in, defaults.c, env.c, pathnames.h.in:
15732: Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
15733: option. The default value of noexec_file is set to this.
15734: [7d88e1d3c494]
15735:
15736: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
15737: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c,
15738: sudo.tab.h:
15739: Add support for preloading a shared object containing a dummy
15740: execve() function that just sets error and returns -1. This adds a
15741: "noexec_file" option to load the filename as well as a "noexec" flag
15742: to enable it unconditionally. There is also a NOEXEC tag that can
15743: be attached to specific commands and an EXEC tag to disable it.
15744: [c8b6712feb91]
15745:
15746: * mkdefaults:
15747: add missing newline to usage statement
15748: [e84746618362]
15749:
15750: * config.h.in, sudo.c:
15751: Rename EXEC macro -> EXECV
15752: [ddaa0c027299]
15753:
15754: * logging.c:
15755: Don't truncate usernames to 8 characters in the log message.
15756: [f62a20f27075]
15757:
15758: * check.c, sudoers.man.in, sudoers.pod:
15759: Update copyright year
15760: [ca9964054085]
15761:
15762: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
15763: sudoers.pod:
15764: Add a new option, lecture_file, that can be used to point to a
15765: custom sudo lecture.
15766: [940133231216]
15767:
15768: 2003-12-31 Todd C. Miller <Todd.Miller@courtesan.com>
15769:
15770: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
15771: auth/sudo_auth.c:
15772: Add a zero_bytes() function to do the equivalent of bzero in such a
15773: way that will heopfully not be optimized away by sneaky compilers.
15774: [161b6d74bfb4]
15775:
15776: * zero_bytes.c:
15777: Add a zero_bytes() function to do the equivalent of bzero in such a
15778: way that will heopfully not be optimized away by sneaky compilers.
15779: [d035abf0af94]
15780:
15781: * Makefile.in, sudo.h:
15782: Add a zero_bytes() function to do the equivalent of bzero in such a
15783: way that will heopfully not be optimized away by sneaky compilers.
15784: [ff136de3e255]
15785:
15786: * err.c:
15787: Use #ifdef __STDC__, not #if __STDC__.
15788: [6889dd6bc51a]
15789:
15790: 2003-12-30 Todd C. Miller <Todd.Miller@courtesan.com>
15791:
15792: * mkdefaults:
15793: Always put at least one space between the def_* macro name and its
15794: definition.
15795: [6b3ad0e6619a]
15796:
15797: * configure, configure.in:
15798: Adjust code for --without-lecture to match new values.
15799: [062aa788a6b9]
15800:
15801: * visudo.man.in:
15802: regen after pasto fix
15803: [3deec16906c0]
15804:
15805: * sudoers.man.in, sudoers.pod:
15806: Document that "lecture" has changed from a flag to a tuple.
15807: [e2c03062b533]
15808:
15809: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
15810: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h:
15811: Add support for tuples in def_data.in; these are implemented as an
15812: enum type. Currently there is only a single tuple enum but in the
15813: future we may have one tuple enum per T_TUPLE entry in def_data.in.
15814: Currently listpw, verifypw and lecture are tuples. This avoids the
15815: need to have two entries (one ival, one str) for pwflags and syslog
15816: values.
15817:
15818: lecture is now a tuple with the following values: never, once,
15819: always
15820:
15821: We no longer use both an int and string entry for syslog facilities
15822: and priorities. Instead, there are logfac2str() and logpri2str()
15823: functions that get used when we need to print the string values.
15824: [5293f946c836]
15825:
15826: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
15827: auth/rfc1938.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c,
15828: check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
15829: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
15830: sudo.tab.c, visudo.c:
15831: Create def_* macros for each defaults value so we no longer need the
15832: def_{flag,ival,str,list,mode} macros (which have been removed). This
15833: is a step toward more flexible data types in def_data.in.
15834: [009c02934106]
15835:
15836: * TODO:
15837: checkpoint
15838: [0a99a4bb5d15]
15839:
15840: 2003-12-23 Todd C. Miller <Todd.Miller@courtesan.com>
15841:
15842: * sudo.c:
15843: If we are in -k/-K mode, just spew to stderr. It is not unusual for
15844: users to place "sudo -k" in a .logout file which can cause sudo to
15845: be run during reboot after the YP/NIS/NIS+/LDAP/etc daemon has died.
15846: Previously, this would result in useless mail and logging.
15847: [d282e7ed63af]
15848:
15849: 2003-12-16 Todd C. Miller <Todd.Miller@courtesan.com>
15850:
15851: * visudo.pod:
15852: fix pasto in VISUAL description
15853: [1c6a6148b5f9]
15854:
15855: 2003-12-10 Todd C. Miller <Todd.Miller@courtesan.com>
15856:
15857: * configure:
15858: regen
15859: [f44312c63799]
15860:
15861: * CHANGES:
15862: checkpoint
15863: [0c42e38f78d5]
15864:
15865: * TROUBLESHOOTING:
15866: Some OSes (like Solaris) allow export w/ nosuid too
15867: [973ce85ffa12]
15868:
15869: 2003-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
15870:
15871: * compat.h:
15872: We don't use FD_ZERO anymore so just define FD_SET (if not already
15873: there).
15874: [d1c8c11905cd]
15875:
15876: 2003-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
15877:
15878: * auth/pam.c:
15879: Fix a core dump on Solaris by preserving the pam_handle_t we used
15880: during authentication for pam_prep_user(). If we didn't
15881: authenticate (ie: ticket still valid), we call pam_init() from
15882: pam_prep_user(). This is something of a hack; it may be better to
15883: change the auth API and add an auth_final() function that acts like
15884: pam_prep_user().
15885: [f787de49b175]
15886:
15887: 2003-06-21 Todd C. Miller <Todd.Miller@courtesan.com>
15888:
15889: * set_perms.c:
15890: Add explicit declaration of printerr variable in function header
15891: (was defaulting to int which is OK but oh so K&R :-). From Theo.
15892: [492c2358783f]
15893:
15894: 2003-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
15895:
15896: * config.h.in, configure.in:
15897: s/HAVE_STOW/USE_STOW/
15898: [4b99e1824ece]
15899:
15900: * logging.c:
15901: Also exit waitpid() loop when pid == 0. Fixes a problem where the
15902: sudo process would spin eating up CPU until sendmail finished when
15903: it has to send mail.
15904: [ec3d5792b9b4]
15905:
15906: 2003-05-30 Todd C. Miller <Todd.Miller@courtesan.com>
15907:
15908: * fnmatch.c:
15909: Remove advertising clause, UCB has disavowed it
15910: [43a26bbd6628]
15911:
15912: * fnmatch.3:
15913: Remove advertising clause, UCB has disavowed it
15914: [3ff24291bcfa]
15915:
15916: 2003-05-22 Todd C. Miller <Todd.Miller@courtesan.com>
15917:
15918: * parse.c:
15919: Don't assume that getgrnam() calls don't modify contents of struct
15920: passwd returned by getpwnam(). On FreeBSD w/ NIS this can happen.
15921: Based on a patch from Kirk Webb.
15922: [5574c68f60f3]
15923:
15924: 2003-05-06 Todd C. Miller <Todd.Miller@courtesan.com>
15925:
15926: * configure.in:
15927: missing ;;
15928: [22378f2a9d31]
15929:
15930: * configure.in:
15931: darwin has a broken setreuid() in at least some versions
15932: [d572aed930d2]
15933:
15934: * env.c:
15935: Fix an off by one error when reallocating the environment; Kevin Pye
15936: [3d98e7cf097a]
15937:
15938: 2003-04-30 Todd C. Miller <Todd.Miller@courtesan.com>
15939:
15940: * sudoers.pod:
15941: Fix User_Spec definition; SEKINE Tatsuo
15942: [49b0da65e090]
15943:
15944: 2003-04-28 Todd C. Miller <Todd.Miller@courtesan.com>
15945:
15946: * HISTORY:
15947: More info on the early days from Coggs.
15948: [9381ca10b06b]
15949:
15950: 2003-04-21 Todd C. Miller <Todd.Miller@courtesan.com>
15951:
15952: * auth/kerb5.c:
15953: remove errant semicolon that prevented compilation under heimdal
15954: [d2f2bb73a598]
15955:
15956: 2003-04-16 Todd C. Miller <Todd.Miller@courtesan.com>
15957:
15958: * testsudoers.c, tgetpass.c, visudo.c, visudo.man.in, visudo.pod:
15959: add DARPA credit on affected files
15960: [7020785ee50d]
15961:
15962: * sudoers.pod:
15963: add DARPA credit on affected files
15964: [83b46318750b]
15965:
15966: * sigaction.c, strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
15967: sudoers.man.in:
15968: add DARPA credit on affected files
15969: [d8adf1c2ba22]
15970:
15971: * set_perms.c:
15972: add DARPA credit on affected files
15973: [3d79fdabb582]
15974:
15975: * pathnames.h.in:
15976: add DARPA credit on affected files
15977: [e334cdda422f]
15978:
15979: * logging.c, parse.c:
15980: add DARPA credit on affected files
15981: [8f75f822755b]
15982:
15983: * auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
15984: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, fileops.c,
15985: find_path.c, getprogname.c, getspwuid.c, goodpath.c, interfaces.c,
15986: interfaces.h:
15987: add DARPA credit on affected files
15988: [da66e28fb3f5]
15989:
15990: * auth/kerb5.c, auth/pam.c:
15991: add DARPA credit on affected files
15992: [15da3021b49c]
15993:
15994: * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
15995: auth/fwtk.c, auth/kerb4.c, parse.lex, parse.yacc, utime.c,
15996: version.h:
15997: add DARPA credit on affected files
15998: [868d54cbddea]
15999:
16000: * env.c:
16001: add DARPA credit on affected files
16002: [90239f51ef0a]
16003:
16004: * defaults.c, defaults.h:
16005: add DARPA credit on affected files
16006: [6a64205fd1eb]
16007:
16008: * compat.h:
16009: add DARPA credit on affected files
16010: [316a735783c4]
16011:
16012: * Makefile.in, alloc.c, check.c:
16013: add DARPA credit on affected files
16014: [cd939e05c810]
16015:
16016: * LICENSE:
16017: slightly different wording for the darpa credit
16018: [e468909c4a21]
16019:
16020: 2003-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
16021:
16022: * LICENSE:
16023: Add DARPA credit
16024: [8eb20e2cd63e]
16025:
16026: 2003-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
16027:
16028: * auth/kerb5.c:
16029: Use krb5_princ_component() instead of krb5_princ_realm() for MIT
16030: Kerberos like we did before I messed things up ;-)
16031:
16032: Use krb5_principal_get_comp_string() to do the same thing w/
16033: Heimdal. I'm not sure if the component should be 0 or 1 in this
16034: case.
16035:
16036: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
16037: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
16038: should be a configure check for this I guess.
16039: [74919a3933fe]
16040:
16041: 2003-04-13 Todd C. Miller <Todd.Miller@courtesan.com>
16042:
16043: * sample.sudoers:
16044: builtin -> built-in; Jason McIntyre
16045: [027f2187923e]
16046:
16047: * TROUBLESHOOTING, config.h.in, configure, configure.in:
16048: builtin -> built-in; Jason McIntyre
16049: [70b81ac48943]
16050:
16051: * sudoers.pod:
16052: built in -> built-in; Jason McIntyre
16053: [da658ef5138d]
16054:
16055: 2003-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
16056:
16057: * CHANGES:
16058: checkpoint for 1.6.7p3
16059: [da85f989fadf]
16060:
16061: * HISTORY:
16062: Update info on the early years @ SUNY-Buffalo from Cliff Spencer.
16063: Amazingly, sudo source from 1985 is available via groups.google.com
16064: [39e0fc85b89f]
16065:
16066: * sudo.c:
16067: Don't change rl.rlim_max for RLIMIT_CORE. We need only set
16068: rl.rlim_cur to 0 to turn off core dumps. This may be needed for the
16069: RLIMIT_CORE restoration on some OSes.
16070: [7e2c1a7adfd8]
16071:
16072: 2003-04-04 Todd C. Miller <Todd.Miller@courtesan.com>
16073:
16074: * auth/kerb5.c:
16075: Make this compile on Heimdal and MIT Kerberos 5
16076: [44c07d615868]
16077:
16078: * config.h.in, configure, configure.in:
16079: Check for heimdal even if we found krb5-config and define
16080: HAVE_HEIMDAL.
16081: [aba0126f0059]
16082:
16083: * auth/kerb5.c:
16084: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5. The former is
16085: no longer defined by MIT kerb5 (though it used to be and indeed
16086: remains so in Heimdal).
16087: [e5a6c64d7cd5]
16088:
16089: 2003-04-03 Todd C. Miller <Todd.Miller@courtesan.com>
16090:
16091: * mkinstalldirs:
16092: Remove newer stuff that passes multiple (possibly duplicate)
16093: directories to "mkdir -p" since that seems to break on Tru64 Unix at
16094: least. This basically brings back what shipped with sudo 1.6.6.
16095: [f2a1abd872b3]
16096:
16097: 2003-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
16098:
16099: * auth/kerb5.c:
16100: Correct number of args to krb5_principal_get_realm() and fix an
16101: unclosed comment that hid the bug.
16102: [0b37f8ce7824]
16103:
16104: * configure:
16105: regen
16106: [1876cb840fe0]
16107:
16108: * configure.in:
16109: ++version
16110: [480aff7c048e]
16111:
16112: * README:
16113: ++version
16114: [488e0bbff613]
16115:
16116: * Makefile.in:
16117: ++version
16118: [97ef63cedc38]
16119:
16120: * INSTALL.binary:
16121: ++version
16122: [a506204e77d0]
16123:
16124: * INSTALL:
16125: ++version
16126: [555aeba5c2bf]
16127:
16128: * CHANGES, version.h:
16129: ++version
16130: [f66985a64063]
16131:
16132: * BUGS:
16133: ++version
16134: [ea3573432412]
16135:
16136: * configure.in:
16137: use krb5-config to determine Kerberos V details if it exists
16138: [7b46bbdaf774]
16139:
16140: * alloc.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
16141: auth/securid5.c, auth/sia.c, check.c, compat.h, defaults.c, env.c,
16142: find_path.c, interfaces.c, logging.c, parse.c, sudo.c, sudo.h,
16143: testsudoers.c, visudo.c:
16144: Use warn/err and getprogname() throughout. The main exception is
16145: openlog(). Since the admin may be filtering logs based on the
16146: program name in the log files, hard code this to "sudo".
16147: [9f180d015cfa]
16148:
16149: * Makefile.in:
16150: Add getprogname.c and err.c
16151: [d411c54a07dc]
16152:
16153: * configure:
16154: regen
16155: [6d585d391acc]
16156:
16157: * config.h.in, configure.in:
16158: Add checks for getprognam(), __progname and err.h
16159: [bcbccf61d34a]
16160:
16161: * emul/err.h:
16162: For systems withour err/warn functions.
16163: [1b33118884d9]
16164:
16165: * err.c:
16166: For systems withour err/warn functions.
16167: [26721f6b041f]
16168:
16169: * getprogname.c:
16170: For systems neither getprogname() nor __progname; uses Argv[0].
16171: [841cf42af1eb]
16172:
16173: 2003-04-01 Todd C. Miller <Todd.Miller@courtesan.com>
16174:
16175: * CHANGES:
16176: checkpoint for 1.6.7p1
16177: [5bfdaf441dce]
16178:
16179: * sudo.c, testsudoers.c:
16180: fix strlcpy() rval check (innocuous)
16181: [e05ac7e0d1f3]
16182:
16183: * check.c:
16184: oflow detection in expand_prompt() was faulty (false positives). The
16185: count was based on strlcat() return value which includes the length
16186: of the entire string.
16187: [086c5a0acb25]
16188:
16189: 2003-03-31 Todd C. Miller <Todd.Miller@courtesan.com>
16190:
16191: * RUNSON, TODO:
16192: checkpoint for the sudo 1.6.7 release
16193: [096bab4da29a] [SUDO_1_6_7]
16194:
16195: * CHANGES:
16196: checkpoint for the sudo 1.6.7 release
16197: [87322187ed78]
16198:
16199: 2003-03-24 Todd C. Miller <Todd.Miller@courtesan.com>
16200:
16201: * logging.c:
16202: g/c unused variable
16203: [c57cd4a17765]
16204:
16205: * configure:
16206: regen
16207: [e7c1f581dfac]
16208:
16209: * configure.in:
16210: use man sections 8 and 5 for csops
16211: [87de581bda88]
16212:
16213: 2003-03-21 Todd C. Miller <Todd.Miller@courtesan.com>
16214:
16215: * configure:
16216: regen
16217: [cb1433a9c7a1]
16218:
16219: * configure.in:
16220: Add -lskey or -lopie directly to SUDO_LIBS instead of having
16221: AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
16222: [ac5667978939]
16223:
16224: * configure:
16225: regen
16226: [638459118a2a]
16227:
16228: * configure.in:
16229: Add --with-blibpath for AIX. An alternate libpath may be specified
16230: or
16231: -blibpath support can be disabled. Also change conifgure such that
16232: -blibpath is not specified if no -L libpaths were added to
16233: SUDO_LDFLAGS.
16234: [c7d17b480cad]
16235:
16236: * aclocal.m4:
16237: Add --with-blibpath for AIX. An alternate libpath may be specified
16238: or
16239: -blibpath support can be disabled. Also change conifgure such that
16240: -blibpath is not specified if no -L libpaths were added to
16241: SUDO_LDFLAGS.
16242: [37022e991575]
16243:
16244: * INSTALL:
16245: Add --with-blibpath for AIX. An alternate libpath may be specified
16246: or
16247: -blibpath support can be disabled. Also change conifgure such that
16248: -blibpath is not specified if no -L libpaths were added to
16249: SUDO_LDFLAGS.
16250: [4b4bbe5bbe1b]
16251:
16252: * configure.in:
16253: add AIX blibpath support
16254: [16ba788bf086]
16255:
16256: * INSTALL, configure.in:
16257: --with-skey and --with-opie now take an option directory argument
16258: This obsoletes a --with-csops hack (/tools/cs/skey)
16259:
16260: Also remove the remaining direct uses of "echo"
16261: [5b4986a90c03]
16262:
16263: 2003-03-20 Todd C. Miller <Todd.Miller@courtesan.com>
16264:
16265: * configure.in:
16266: Detect KTH Kerberos IV and deal with it. Also make -lroken optional
16267: for KTH Kerberos IV and V.
16268: [119f97b48e18]
16269:
16270: * aclocal.m4:
16271: Add SUDO_APPEND_LIBPATH function that add -L/path/to/dir (and
16272: -R/path/to/dir if $with_rpath) to the specified variable.
16273: [e55e49d076ce]
16274:
16275: * INSTALL, configure.in:
16276: Add -R/path/to/libs for Solaris and SVR4. There is a new configure
16277: option, --with-rpath to control this behavior.
16278: [d4730c5399ab]
16279:
16280: * configure.in:
16281: for kerb4 put libdes after libkrb on the link line
16282: [5c566100eab6]
16283:
16284: * auth/kerb4.c:
16285: typo
16286: [6541b72b64a3]
16287:
16288: * configure.in:
16289: fix kerberos lib check when a path is specified
16290: [ae833a914c6f]
16291:
16292: * logging.c:
16293: Fix boolean thinko in SIGCHLD reaper and call reapchild after
16294: sending mail instead of doing a conditional sudo_waitpid.
16295: [86fa9a35df5a]
16296:
16297: 2003-03-19 Todd C. Miller <Todd.Miller@courtesan.com>
16298:
16299: * configure:
16300: regen
16301: [e6275cf528ba]
16302:
16303: * configure.in:
16304: replace =DIR with [=DIR] where sensible
16305: [c39a59173b38]
16306:
16307: * configure.in:
16308: o Use AC_MSG_* instead of "echo" o New Kerberos include/lib
16309: detection based on openssh's configure.in
16310: [5b7a340912df]
16311:
16312: * INSTALL:
16313: --with-kerb4 and --with-kerb5 now take an optional argument.
16314: [71ed87fc9c64]
16315:
16316: 2003-03-16 Todd C. Miller <Todd.Miller@courtesan.com>
16317:
16318: * auth/securid.c:
16319: Kill remaining strcpy(), the programmer's guide says username is 32
16320: bytes.
16321: [bdba70fcd08d]
16322:
16323: * auth/kerb4.c:
16324: trat uid_t as unsigned long for printf and use snprintf, not sprintf
16325: [8072f5f8966d]
16326:
16327: * auth/rfc1938.c:
16328: use snprintf
16329: [fc0c70c665fe]
16330:
16331: 2003-03-15 Todd C. Miller <Todd.Miller@courtesan.com>
16332:
16333: * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
16334: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
16335: auth/rfc1938.c, auth/sudo_auth.c:
16336: update copyright year
16337: [b0a10ccb1d0e]
16338:
16339: * sudo.man.in, sudoers.man.in, visudo.man.in:
16340: update copyright year
16341: [8fce0034eb51]
16342:
16343: * LICENSE, Makefile.in, aclocal.m4, alloc.c, check.c, compat.h,
16344: configure.in, env.c, find_path.c, interfaces.c, logging.c, parse.c,
16345: parse.lex, parse.yacc, set_perms.c, sudo.c, sudo.h, sudo.pod,
16346: sudoers.pod, testsudoers.c, version.h, visudo.c, visudo.pod:
16347: update copyright year
16348: [d541e75fe520]
16349:
16350: * check.c, env.c, sudo.c:
16351: Cast [ug]ids to unsigned long and printf with %lu
16352: [2ede64d3592b]
16353:
16354: * configure:
16355: regen
16356: [c7c3245bdf3e]
16357:
16358: * configure.in:
16359: correct error messages for --with-sudoers-{mode,uid,gid}
16360: [77fc15b1c9db]
16361:
16362: * alloc.c:
16363: make the malloc(0) error specific to each function to aid tracking
16364: down bugs.
16365: [a58c34374b4b]
16366:
16367: * alloc.c:
16368: deal with platforms where size_t is signed and there is no SIZE_MAX
16369: or SIZE_T_MAX
16370: [7192abb4ab4e]
16371:
16372: * auth/kerb5.c:
16373: Make this compile w/ Heimdal and fix some gcc warnings.
16374: [f52f026f31c2]
16375:
16376: * sudo.c:
16377: Use stat_sudoers macro so --with-stow can work
16378: [c3674735c139]
16379:
16380: * INSTALL, config.h.in, configure, configure.in:
16381: Add support for --with-stow based on patches from Robert Uhl
16382: [b274cc1dd52c]
16383:
16384: * env.c:
16385: fix indentation
16386: [110d9f1721b1]
16387:
16388: * configure.in:
16389: back out rev 1.352
16390: [1eee91c83f11]
16391:
16392: * lex.yy.c:
16393: regen
16394: [72fba1c9590b]
16395:
16396: * parse.lex:
16397: use strlcpy, not strncpy
16398: [4faccbaeccef]
16399:
16400: * set_perms.c:
16401: Fix typo; check pw_uid, not pw_gid after setusercontext() failure.
16402: [33bf0d18fdc1]
16403:
16404: * logging.c:
16405: use pid_t
16406: [3e0536993d2c]
16407:
16408: 2003-03-14 Todd C. Miller <Todd.Miller@courtesan.com>
16409:
16410: * strlcat.c, strlcpy.c:
16411: Make gcc shutup about unused rcsid
16412: [1669a0c74e9e]
16413:
16414: * interfaces.c:
16415: Move the n == 0 check for the non-getifaddrs cas
16416: [2460be061b2a]
16417:
16418: * auth/rfc1938.c:
16419: skeychallenge() on NetBSD take a size parameter
16420: [05acc2012801]
16421:
16422: * configure:
16423: regen
16424: [24bccf4749e8]
16425:
16426: * configure.in:
16427: put -ldl after -lpam, not before; fixes static linking on Linux
16428: [7f06b7b2b4d8]
16429:
16430: * interfaces.c:
16431: Avoid malloc(0) and fix the loop invariant for the getifaddrs()
16432: case.
16433: [239a55068646]
16434:
16435: * sudo.cat, sudoers.cat, visudo.cat:
16436: regen
16437: [4a2eed3981ca]
16438:
16439: * sudo.man.in, sudoers.man.in, visudo.man.in:
16440: regen
16441: [2c96ea2cf930]
16442:
16443: * Makefile.in:
16444: Preserve copyright notice from .pod file in .man.in file
16445: [519fbd09aebc]
16446:
16447: * visudo.pod:
16448: Add sudoers(5) to SEE ALSO
16449: [77ecfe3aedf1]
16450:
16451: 2003-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
16452:
16453: * lex.yy.c:
16454: regen
16455: [6f5751ce0b74]
16456:
16457: * parse.lex:
16458: Don't assume libc can realloc() a NULL string. If malloc/realloc
16459: fails, make sure we just return; yyerror() is not terminal.
16460: [1b8618623708]
16461:
16462: * lex.yy.c:
16463: regen
16464: [5d31b46191c6]
16465:
16466: * parse.lex:
16467: simplify fill_args a little and use strlcpy for paranoia
16468: [0ea35a55542b]
16469:
16470: * sudo.tab.c:
16471: regen
16472: [5a8d508d708b]
16473:
16474: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
16475: testsudoers.c:
16476: Use strlc{at,py} for paranoia's sake and exit on overflow. In all
16477: cases the strings were either pre-allocated to the correct size of
16478: length checks were done before the copy but a little paranoia can go
16479: a long way.
16480: [e73d28f1d14e]
16481:
16482: * sudo.h:
16483: Add strlc{at,py} protos
16484: [748ffc7fc7f4]
16485:
16486: * env.c, interfaces.c:
16487: Use erealloc3()
16488: [47f2cb46aba8]
16489:
16490: * configure:
16491: regen
16492: [e7e2fb79f935]
16493:
16494: * alloc.c:
16495: Oflow test of nmemb > SIZE_MAX / size is fine (don't need >=). Use
16496: memcpy() instead of strcpy() in estrdup() so this is strcpy()-free.
16497: [7e0fa4d6fc1d]
16498:
16499: * sudo.c:
16500: snprintf() a uid as %lu, not %ld to match the MAX_UID_T_LEN test in
16501: configure.
16502: [09ea4d3959e9]
16503:
16504: * aclocal.m4:
16505: In MAX_UID_T_LEN test cast uid_t to unsigned long, just unsigned.
16506: [31b4fdfdb8bf]
16507:
16508: 2003-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
16509:
16510: * sudo.c:
16511: Use snprintf() for paranoia
16512: [a2659ceb46de]
16513:
16514: * parse.yacc:
16515: Use emalloc2 and erealloc3
16516: [90a069842401]
16517:
16518: * Makefile.in:
16519: strlc{at,py} for those w/o it
16520: [bac82dc916ee]
16521:
16522: * strlcat.c, strlcpy.c:
16523: stlc{at,py} for those w/o it.
16524: [ce7254f5db09]
16525:
16526: * config.h.in, configure, configure.in:
16527: Add stlc{at,py} for those w/o it.
16528: [00f08219657a]
16529:
16530: * alloc.c, sudo.h:
16531: Add erealloc3(), a realloc() version of emalloc2().
16532: [c96eaf08bbed]
16533:
16534: * interfaces.c, sudo.c:
16535: Use emalloc2() to allocate N things of a certain size.
16536: [1e0aba365555]
16537:
16538: * alloc.c, sudo.h:
16539: Add emalloc2() -- like calloc() but w/o the bzero and with
16540: error/oflow checking.
16541: [292150bc4153]
16542:
16543: * alloc.c:
16544: Error out on malloc(0); suggested by theo
16545: [995279e81326]
16546:
16547: 2003-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
16548:
16549: * configure, configure.in:
16550: fix a typo; David Krause
16551: [f161213a17ab]
16552:
16553: 2003-03-07 Todd C. Miller <Todd.Miller@courtesan.com>
16554:
16555: * sudo.pod:
16556: fix typo
16557: [3ae5ad9a351a]
16558:
16559: 2003-03-04 Todd C. Miller <Todd.Miller@courtesan.com>
16560:
16561: * env.c:
16562: Remove DYLD_ from the environment for MacOS X; from bbraun
16563: [38caad5a3935]
16564:
16565: 2003-03-01 Todd C. Miller <Todd.Miller@courtesan.com>
16566:
16567: * config.h.in, configure.in:
16568: not not; Anil Madhavapeddy
16569: [d4f4f0bfc66b]
16570:
16571: 2003-01-23 Todd C. Miller <Todd.Miller@courtesan.com>
16572:
16573: * sudo.pod, sudoers.pod, visudo.pod:
16574: typos; jmc@openbsd.org
16575: [868c0f09bf9e]
16576:
16577: 2003-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
16578:
16579: * parse.yacc:
16580: Add some missing ';' rule terminators that bison warns about.
16581: [535b0b8dcce5]
16582:
16583: * config.sub:
16584: fix typo I introduced in last merge
16585: [81db4e4f43fe]
16586:
16587: * configure:
16588: regenerate with autoconf 2.57
16589: [ca0c1e9564f8]
16590:
16591: * config.h.in:
16592: Add missing "$HOME"
16593: [209186197ad1]
16594:
16595: * configure.in:
16596: Add some more square backets to make autoconf 2.57 happy
16597: [b5639c14faf7]
16598:
16599: * config.sub, mkinstalldirs:
16600: Updates from autoconf-2.57
16601: [36be35eb331b]
16602:
16603: * config.guess:
16604: Updates from autoconf-2.57
16605: [ea0f8ca622af]
16606:
16607: 2003-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
16608:
16609: * sudo.tab.h:
16610: regen
16611: [13a65a421567]
16612:
16613: * lex.yy.c, sudo.tab.c:
16614: regen
16615: [0b529db7cb6d]
16616:
16617: * parse.lex, parse.yacc, sudoers.pod:
16618: Add support for Defaults>RunasUser
16619: [20d726373175]
16620:
16621: 2003-01-07 Todd C. Miller <Todd.Miller@courtesan.com>
16622:
16623: * visudo.c:
16624: fclose() yyin after each yyparse() is done and use fopen() instead
16625: of using freopen().
16626: [587f8a2df857]
16627:
16628: * parse.lex:
16629: Better fix for sudoers files w/o a newline before EOF. It looks
16630: like the issue is that yyrestart() does not reset the start
16631: condition to INITIAL which is an issue since we parse sudoers
16632: multiple times.
16633: [920f8326968a]
16634:
16635: 2003-01-06 Todd C. Miller <Todd.Miller@courtesan.com>
16636:
16637: * parse.lex:
16638: Work around what appears to be a flex bug when dealing with files
16639: that lack a final newline before EOF. This adds a rule to match EOF
16640: in the non-initial states which resets the state to INITIAL and
16641: throws an error.
16642: [b94943bb1f81]
16643:
16644: * visudo.c:
16645: o The parser needs sudoers to end with a newline but some editors
16646: (emacs) may not add one. Check for a missing newline at EOF and
16647: add one if needed. o Set quiet flag during initial sudoers parse (to
16648: get options) o Move yyrestart() call and always use freopen() to
16649: open yyin after initial sudoers parse.
16650: [12d12f9b07aa]
16651:
16652: 2002-12-15 Todd C. Miller <Todd.Miller@courtesan.com>
16653:
16654: * set_perms.c:
16655: Fix pasto/thinko in setresgid()/setregid() usage. Want to set
16656: effective gid, not real gid, when reading sudoers.
16657: [c7d18b810fcd]
16658:
16659: * set_perms.c:
16660: don't compile set_perms_posix if we have setreuid or setresuid
16661: [b9cea7a81a29]
16662:
16663: 2002-12-14 Todd C. Miller <Todd.Miller@courtesan.com>
16664:
16665: * sudo.pod, sudoers.pod:
16666: document new prompt escapes
16667: [2f088076b640]
16668:
16669: * check.c:
16670: Add %U and %H escapes and redo prompt rewriting. "%%" now gets
16671: collapsed to "%" as was originally intended. This also gets rid of
16672: lastchar (does lookahead instead of lookback) which should simplify
16673: the logic slightly.
16674: [4b707b77b3c7]
16675:
16676: 2002-12-13 Todd C. Miller <Todd.Miller@courtesan.com>
16677:
16678: * tgetpass.c:
16679: Write the prompt *after* turning off echo to avoid some password
16680: characters being echoed on heavily-loaded machines with fast
16681: typists.
16682: [d38c57775915]
16683:
16684: * config.sub:
16685: Add support for mipseb; wiz@danbala.tuwien.ac.at
16686: [cfdac87ed5c8]
16687:
16688: * configure.in:
16689: Fix IRIX fallout from name changes in man dir/sect Makefile
16690: variables. Patch from erici AT motown DOT cc DOT utexas DOT edu
16691: [9a7618755c23]
16692:
16693: * auth/pam.c:
16694: Keep a local copy of tgetpass_flags so we don't add in TGP_ECHO to
16695: the global copy. Problem noted by Peter Pentchev.
16696: [d0a3e189cb06]
16697:
16698: 2002-11-28 Todd C. Miller <Todd.Miller@courtesan.com>
16699:
16700: * sudo.tab.c:
16701: regen
16702: [23b931359087]
16703:
16704: * parse.yacc:
16705: Add missing yyerror() calls; YYERROR does not seem to call this for
16706: us.
16707: [0be7aeb3ac57]
16708:
16709: 2002-11-26 Todd C. Miller <Todd.Miller@courtesan.com>
16710:
16711: * sudo.c:
16712: fix typo in comment; Pedro Bastos
16713: [d7406c460e99]
16714:
16715: 2002-11-22 Todd C. Miller <Todd.Miller@courtesan.com>
16716:
16717: * INSTALL:
16718: document --disable-setresuid
16719: [fbd03d03a027]
16720:
16721: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
16722: auth/sudo_auth.c:
16723: Sprinkle some volatile qualifiers to prevent over-enthusiastic
16724: optimizers from removing memset() calls.
16725: [5370ac0e6129]
16726:
16727: * logging.c, parse.yacc:
16728: minor sign fixes pointed out by gcc -Wsign-compare
16729: [db872438337f]
16730:
16731: * set_perms.c, sudo.c, sudo.h:
16732: Revamp set_perms. We now use a version based on setresuid() or
16733: setreuid() when possible since that allows us to support the
16734: stay_setuid option and we always know exactly what the semantics
16735: will be (various Linux kernels have broken POSIX saved uid support).
16736: [523bc212396c]
16737:
16738: * config.h.in, configure:
16739: regen from configure.in
16740: [351877ea2624]
16741:
16742: * configure.in:
16743: Add checks for setresuid() and a way to disable using it
16744: [a5b21653d169]
16745:
16746: * compat.h:
16747: No long need to emulate set*[ug]id() via setres[ug]id() or
16748: setre[ug]id(). The new set_perms stuff only uses things it knows are
16749: there.
16750: [47884bd5d1d9]
16751:
16752: * sudo.c:
16753: Before exec, restore state of signal handlers to be the same as when
16754: we were initialy invoked instead of just reseting to SIG_DFL. Fixes
16755: a problem when using sudo with nohup. Based on a patch from Paul
16756: Markham.
16757: [f8f5a1484faa]
16758:
16759: * sudo.c:
16760: o timestamp_uid should be uid_t, not int o clarify error message
16761: when sudo is run by root and no_root_sudo is set
16762: [19dda0734264]
16763:
16764: 2002-09-19 Todd C. Miller <Todd.Miller@courtesan.com>
16765:
16766: * README:
16767: update ftp link for bison
16768: [98bc191016e3]
16769:
16770: 2002-07-20 Todd C. Miller <Todd.Miller@courtesan.com>
16771:
16772: * set_perms.c:
16773: Error out if setusercontext() fails and the runas user is not root.
16774: [089f9ade4686]
16775:
16776: 2002-05-20 Todd C. Miller <Todd.Miller@courtesan.com>
16777:
16778: * auth/securid5.c:
16779: Fix rcsid
16780: [07e9e85dcc2f]
16781:
16782: * configure.in:
16783: Fix SecurID API test
16784: [5ec201f454a5]
16785:
16786: 2002-05-17 Todd C. Miller <Todd.Miller@courtesan.com>
16787:
16788: * env.c:
16789: typo in comment
16790: [9d385c9ac533]
16791:
16792: * configure.in:
16793: securid5 stuff needs pthreads. Just adding -lpthread is suboptimal
16794: but I don't see a better way at the moment.
16795: [f89e55cbb313]
16796:
16797: * Makefile.in, auth/securid5.c:
16798: SecurID API version 5 support from Michael Stroucken
16799: [68500ac7e531]
16800:
16801: * configure.in:
16802: Add check for SecurID 5.0 API
16803: [1ee242e6de6b]
16804:
16805: 2002-05-08 Todd C. Miller <Todd.Miller@courtesan.com>
16806:
16807: * strerror.c:
16808: We actually do still need config.h to get the 'const' definition for
16809: K&R C.
16810: [d9c982032d85]
16811:
16812: 2002-05-05 Todd C. Miller <Todd.Miller@courtesan.com>
16813:
16814: * configure:
16815: regen with autoconf 2.5.3
16816: [c71fc086eef5]
16817:
16818: * configure.in:
16819: Don't set sysconfdir to '/etc' if the user has specified a --prefix.
16820: [d90da1efafd9]
16821:
16822: * configure.in:
16823: Some fixes for autoconf 2.53 from Robert Uhl o don't AC_SUBST
16824: LIBOBJS o force a 4th arg for AC_CHECK_HEADER() to workaround a bug
16825: [dd67afefa90d]
16826:
16827: * env.c, sudo.c, sudo.h:
16828: No need for dump_badenv() now that dump_defaults() knows how to dump
16829: lists.
16830: [6bcda468501d]
16831:
16832: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
16833: version.h:
16834: ++version
16835: [44e3b8f95f0b]
16836:
16837: * sudoers.pod:
16838: document timestampowner
16839: [37ebd69e9dd1]
16840:
16841: * check.c:
16842: Don't call set_perms() when doing timestamp stuff unless
16843: timestamp_uid != 0.
16844: [63a63d41d18c]
16845:
16846: * auth/sudo_auth.c, check.c, logging.c, parse.c, set_perms.c, sudo.c,
16847: sudo.h, testsudoers.c:
16848: g/c second arg to set_perms--it is no longer used
16849: [7ac4ce50c612]
16850:
16851: 2002-05-03 Todd C. Miller <Todd.Miller@courtesan.com>
16852:
16853: * check.c, set_perms.c, sudo.c, sudo.h:
16854: Add support for non-root timestamp dirs. This allows the timestamp
16855: dir to be shared via NFS (though this is not recommended).
16856: [faa83dd2b7fb]
16857:
16858: * def_data.c, def_data.h, def_data.in:
16859: Add timestampowner, "Owner of the authentication timestamp dir"
16860: [d47640d4c86a]
16861:
16862: 2002-05-02 Todd C. Miller <Todd.Miller@courtesan.com>
16863:
16864: * env.c:
16865: Don't try to pre-compute the size of the new envp, just allocate
16866: space up front and realloc as needed. Changes to the new env
16867: pointer must all be made through insert_env() which now keeps track
16868: of spaced used and allocates as needed.
16869: [39bc934a9f2c]
16870:
16871: 2002-04-26 Todd C. Miller <Todd.Miller@courtesan.com>
16872:
16873: * configure:
16874: regen
16875: [0e12c09bb790]
16876:
16877: * configure.in:
16878: Fix two typo/pastos; from jrj@purdue.edu
16879: [b718a4bf1181]
16880:
16881: 2002-04-25 Todd C. Miller <Todd.Miller@courtesan.com>
16882:
16883: * INSTALL.binary, README:
16884: ++version
16885: [a1e33027278c] [SUDO_1_6_6]
16886:
16887: * configure, sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
16888: visudo.cat, visudo.man.in:
16889: regen
16890: [19eb2be283ef]
16891:
16892: * CHANGES, RUNSON, TODO:
16893: Sync with 1.6.6
16894: [2ff9a9087f63]
16895:
16896: * check.c:
16897: The the loop used to expand %h and %u, the lastchar variable was not
16898: being initialized. This means that if the last char in the prompt
16899: is '%' and the first char is 'h' or 'u' a extra copy of the host or
16900: user name would be copied, for which space had not been allocated.
16901: [b2e27197857d]
16902:
16903: 2002-04-18 Todd C. Miller <Todd.Miller@courtesan.com>
16904:
16905: * BUGS, INSTALL, Makefile.in, configure.in, version.h:
16906: crank version to 1.6.6
16907: [cfd08689e597]
16908:
16909: * auth/afs.c:
16910: #undef VOID to get rid of an AFS warning
16911: [b40760564dc1]
16912:
16913: * env.c:
16914: Use easprintf instead of emalloc + sprintf for some things.
16915: [e7bfe2e69a03]
16916:
16917: 2002-03-16 Todd C. Miller <Todd.Miller@courtesan.com>
16918:
16919: * lex.yy.c, sudo.tab.c:
16920: regen
16921: [35327104383d]
16922:
16923: * parse.c, parse.lex, parse.yacc, testsudoers.c:
16924: Remove Chris Jepeway's email address so people don't bug him ;-)
16925: [c03410747a69]
16926:
16927: 2002-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
16928:
16929: * sudo.c:
16930: Move endpwent() to be after set_perms(PERM_RUNAS, ...) and also call
16931: endgrent() at the same time.
16932: [28b6097d5d1a]
16933:
16934: 2002-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
16935:
16936: * INSTALL:
16937: Make it clear which configure options take arguments.
16938: [38529e7efad0]
16939:
16940: 2002-01-25 Todd C. Miller <Todd.Miller@courtesan.com>
16941:
16942: * compat.h:
16943: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there is no
16944: RLIM_INFINITY, just pretend it is -1. This works because we only
16945: check for RLIM_INFINITY and do not set anything to that value.
16946: [53173d34e6eb]
16947:
16948: 2002-01-22 Todd C. Miller <Todd.Miller@courtesan.com>
16949:
16950: * auth/pam.c:
16951: Zero and free allocated memory when there is a conversation error.
16952: [e342133db579]
16953:
16954: * auth/bsdauth.c:
16955: Use sigaction() not signal()
16956: [126c2790561f]
16957:
16958: * INSTALL:
16959: Mention that some linux kernels have broken POSIX saved ID support
16960: [571ef1a893d3]
16961:
16962: * CHANGES:
16963: checkpoint for 1.6.5p2
16964: [9e9e456f7f43]
16965:
16966: * configure:
16967: regen
16968: [d53703a46708]
16969:
16970: * configure.in:
16971: Add --disable-setreuid flag
16972: [3b9f2679cb55]
16973:
16974: * INSTALL:
16975: Document new --disable-setreuid option and change description for
16976: --disable-saved-ids to match new error message.
16977: [14fd3e5f60a5]
16978:
16979: * set_perms.c:
16980: fatal() now takes an argument that determines whether or not to call
16981: perror().
16982: [d826b25e62ff]
16983:
16984: * TROUBLESHOOTING:
16985: Update for new error messages from set_perms()
16986: [78007c3f76a9]
16987:
16988: * PORTING:
16989: Update for new error messages from set_perms()
16990: [60c545a6bcff]
16991:
16992: 2002-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
16993:
16994: * auth/pam.c:
16995: Make this compile w/o warnings
16996: [b90843a29af5]
16997:
16998: * auth/pam.c:
16999: Mention that we can't use pam_acct_mgmt()
17000: [1dfc5a6e0479]
17001:
17002: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c:
17003: The user's password was not zeroed after use when AIX
17004: authentication, BSD authentication, FWTK or PAM was in use.
17005: [b18fff30b1e7]
17006:
17007: 2002-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
17008:
17009: * auth/pam.c:
17010: Avoid giving PAM a NULL password response, use the empty string
17011: instead. This avoids a log warning when the user hits ^C at the
17012: password prompt when PAM is in use.
17013: [c3315805e4e4]
17014:
17015: * auth/pam.c:
17016: Don't check the return value of pam_setcred(). In Linux-PAM 0.75
17017: pam_setcred() returns the last saved return code, not the return
17018: code for the setcred module. Because we haven't called
17019: pam_authenticate(), this is not set and so pam_setcred() returns
17020: PAM_PERM_DENIED.
17021: [73db145fa179]
17022:
17023: * Makefile.in:
17024: Don't need a '/' between $(DESTDIR) and a directory.
17025: [0901ca618176]
17026:
17027: * Makefile.binary:
17028: Don't need a '/' between $(DESTDIR) and a directory.
17029: [cd7eb6098b87]
17030:
17031: 2002-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
17032:
17033: * configure:
17034: regen
17035: [41b12c039282]
17036:
17037: * configure.in:
17038: o BSDi also has a bogus setreuid() o Old FreeBSD has a bogus
17039: setreuid() o new NetBSD has a real setreuid() o add check for
17040: freeifaddrs() if getifaddrs() exists.
17041: [a82ee3b01733]
17042:
17043: * config.h.in, interfaces.c:
17044: Older BSDi releases lack freeifaddrs() so add a test for that and if
17045: it is not present just use free().
17046: [6270671ea9d5]
17047:
17048: 2002-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
17049:
17050: * CHANGES, RUNSON:
17051: Checkpoint for 1.6.5p1
17052: [26134ecf9b36]
17053:
17054: * auth/passwd.c:
17055: Return AUTH_FAILURE in passwd_init() if skeyaccess() denies access
17056: to normal passwords, not AUTH_FATAL (which just causes an exit).
17057: [785e0f4bc0e2]
17058:
17059: * visudo.c:
17060: Don't use memory after it has been freed.
17061: [c60492739fdb]
17062:
17063: * auth/passwd.c:
17064: skeyaccess() wants a struct passwd * not a char *; Patch from
17065: Phillip E. Lobbes
17066: [65a1d3806fcd] [SUDO_1_6_5]
17067:
17068: * BUGS:
17069: ++version
17070: [b2e1825e692e]
17071:
17072: * CHANGES, RUNSON, TODO:
17073: checkpoint for sudo 1.6.5
17074: [d730945622e7]
17075:
17076: 2002-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
17077:
17078: * configure:
17079: regen
17080: [49744c403ac9]
17081:
17082: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
17083: version 1.6.5
17084: [ec30a5f7fc45]
17085:
17086: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
17087: visudo.man.in:
17088: sudo version 1.6.5
17089: [458a3bed535d]
17090:
17091: * logging.c:
17092: o when invoking the mailer as root use a hard-coded environment that
17093: doesn't include any info from the user's environment. Basically
17094: paranoia.
17095:
17096: o Add support for the NO_ROOT_MAILER compile-time option and run the
17097: mailer as the user and not root if NO_ROOT_MAILER is defined.
17098: [4df351ec92ce]
17099:
17100: * set_perms.c, sudo.h:
17101: Bring back PERM_FULL_USER
17102: [edb6039bb284]
17103:
17104: * configure:
17105: regen
17106: [3eb2943afa03]
17107:
17108: * version.h:
17109: version 1.6.5
17110: [044fc9a0c72b]
17111:
17112: * INSTALL, config.h.in, configure.in:
17113: Add --disable-root-mailer option to run the mailer as the user and
17114: not root.
17115: [e9f805397963]
17116:
17117: * CHANGES:
17118: checkpoint for 1.6.4p2
17119: [b58aae5aa98a]
17120:
17121: * PORTING:
17122: Mention the "seteuid(0): Operation not permitted" problem here too
17123: just for good measure.
17124: [90135b37a691]
17125:
17126: 2002-01-15 Todd C. Miller <Todd.Miller@courtesan.com>
17127:
17128: * env.c, getspwuid.c, sudo.c:
17129: The SHELL environment variable was preserved from the user's
17130: environment instead of being reset based on the passwd database when
17131: the "env_reset" option was used. Now it is reset as it should be.
17132: [300066ef3c71]
17133:
17134: * configure:
17135: regen
17136: [a47d779e6552]
17137:
17138: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
17139: sudo.c:
17140: Add a configure option to turn off use of POSIX saved IDs
17141: [fb18cc8e94d0]
17142:
17143: * configure:
17144: regen
17145: [d4f2f20025b6]
17146:
17147: * configure.in:
17148: add --with-efence option
17149: [45c4f33a8e88]
17150:
17151: * sudo.c:
17152: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a problem where
17153: "sudo -l" would not work if always_set_home was set.
17154: [c3a6de6c4800]
17155:
17156: * lex.yy.c:
17157: regen
17158: [417424452998]
17159:
17160: * parse.lex:
17161: Quoted commas were not being treated correctly in command line
17162: arguments.
17163: [753415541b37]
17164:
17165: * sudo.c:
17166: o Move the call to rebuild_env() until after MODE_RESET_HOME is set.
17167: Otherwise, the set_home option has no effect.
17168:
17169: o Fix use of freed memory when the "fqdn" flag is set. This was
17170: introduced by the fix for the "segv when gethostbynam() fails" bug.
17171: Also, we no longer call set_fqdn() if the "fqdn" flag is not set so
17172: there is no need to check the "fqdn" flag in set_fqdn() itself.
17173: [4b6a4245c04e]
17174:
17175: * env.c:
17176: Add 'continue' statements to optimize the switch statement. From
17177: Solar.
17178: [a82c76975ae5]
17179:
17180: 2002-01-13 Todd C. Miller <Todd.Miller@courtesan.com>
17181:
17182: * sudoers.cat, sudoers.man.in:
17183: Regen from new sudoers.pod
17184: [6ecc07b3d0e1] [SUDO_1_6_4]
17185:
17186: * sudoers.pod:
17187: Add caveat about stay_setuid flag
17188: [9d228a7bea1b]
17189:
17190: * sudo.c:
17191: If set_perms == set_perms_posix and the stay_setuid flag is not set,
17192: set all uids to 0 and use set_perms_fallback().
17193: [c4e54d1ec86f]
17194:
17195: * set_perms.c, sudo.h:
17196: Remove PERM_FULL_USER (which is no longer used) and add
17197: PERM_FULL_ROOT (used when exec'ing the mailer).
17198: [15406c522ea2]
17199:
17200: * logging.c:
17201: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the mailer since we
17202: never want to run the mailer setuid.
17203: [2294853e0666]
17204:
17205: 2002-01-12 Todd C. Miller <Todd.Miller@courtesan.com>
17206:
17207: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
17208: visudo.pod:
17209: Use sudo.ws instead of courtesan.com in URLs
17210: [55204002a308]
17211:
17212: * Makefile.binary, Makefile.in:
17213: Fix mansect substitution
17214: [b7b5cbc3aa91]
17215:
17216: * Makefile.in:
17217: Substitute man sections in Makefile.binary
17218: [040deb785e56]
17219:
17220: * Makefile.binary:
17221: Sync install targets with Makefile.in and substitute in man
17222: sections.
17223: [77882a275281]
17224:
17225: * INSTALL, INSTALL.binary:
17226: version is 1.6.4
17227: [0f87aabbcb70]
17228:
17229: * Makefile.in:
17230: Repair bindist target
17231: [8d43bfe7e2d1]
17232:
17233: * CHANGES:
17234: sync for 1.6.4
17235: [13ca3d4a0a72]
17236:
17237: 2002-01-10 Todd C. Miller <Todd.Miller@courtesan.com>
17238:
17239: * install-sh:
17240: Fix case where neither whoami nor id are found
17241: [424dd270bc47]
17242:
17243: 2002-01-09 Todd C. Miller <Todd.Miller@courtesan.com>
17244:
17245: * install-sh:
17246: If neither whoami nor id exists, just assume we are root.
17247: [2d2644e42c53]
17248:
17249: * alloc.c:
17250: Add explicit cast to (VOID *) on malloc/realloc. Seems to be needed
17251: on AIX which for some reason isn't pulling in the malloc prototype.
17252: [231440d2ee3b]
17253:
17254: 2002-01-08 Todd C. Miller <Todd.Miller@courtesan.com>
17255:
17256: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c:
17257: (c) 2002
17258: [700e3b41a68e]
17259:
17260: * CHANGES:
17261: checkpoint
17262: [33e604bd8d5b]
17263:
17264: * sudo.c:
17265: Defer assigning new environment until right before the exec.
17266: [f13c49e75c1c]
17267:
17268: * parse.c:
17269: kill extra blank line
17270: [12ef22e9dae3]
17271:
17272: 2002-01-07 Todd C. Miller <Todd.Miller@courtesan.com>
17273:
17274: * configure:
17275: regen
17276: [a6cd2d788f74]
17277:
17278: * configure.in:
17279: Use -O not -O2 for m88k-motorola-sysv* since motorola gcc-derived
17280: compiler doesn't recognise -O2.
17281: [5234aa543692]
17282:
17283: * HISTORY:
17284: Clarify origins of Root Group sudo a bit based on info from
17285: billp@rootgroup.com
17286: [4deef01c4208]
17287:
17288: 2002-01-03 Todd C. Miller <Todd.Miller@courtesan.com>
17289:
17290: * LICENSE:
17291: 2002
17292: [6c8e089dbd1a]
17293:
17294: * CHANGES:
17295: checkpoint for 1.6.4rc1
17296: [3349eb87a49f]
17297:
17298: 2002-01-02 Todd C. Miller <Todd.Miller@courtesan.com>
17299:
17300: * config.h.in:
17301: now generated via autoheader
17302: [84657d303cb9]
17303:
17304: * configure:
17305: regen
17306: [207bfa6a13f6]
17307:
17308: * compat.h:
17309: Move in some stuff that was previously in config.h.
17310: [e576d8b6480f]
17311:
17312: * aclocal.m4, configure.in:
17313: Add info for autoheader.
17314: [0549cd5da27c]
17315:
17316: 2002-01-01 Todd C. Miller <Todd.Miller@courtesan.com>
17317:
17318: * Makefile.in:
17319: o Add DESTDIR support o Use -M, -O, and -G instead of -m, -o, and
17320: -g to facilitate non-root installs
17321: [619216038f56]
17322:
17323: * install-sh:
17324: Add -M option (like -m but only for root) If we can't find "whoami",
17325: use "id" w/ some sed.
17326: [b39121c8b792]
17327:
17328: * configure:
17329: regen
17330: [b39b93ff9804]
17331:
17332: * configure.in:
17333: allow user to always override mansectsu and mansectform
17334: [0fca5e63bd90]
17335:
17336: 2001-12-31 Todd C. Miller <Todd.Miller@courtesan.com>
17337:
17338: * mkinstalldirs:
17339: update from autoconf 2.52
17340: [07bd75a508c3]
17341:
17342: * config.guess, config.sub:
17343: Update from autoconf 2.52
17344: [857b90fe31b7]
17345:
17346: * configure:
17347: regen with autoconf 2.52
17348: [08e7d1ea2aeb]
17349:
17350: * configure.in:
17351: o Call AC_PROG_CC_STDC to find out how to run the compiler in ANSI
17352: mode o Remove compiler-specific checks for HP-UX now that we use
17353: AC_PROG_CC_STDC
17354: [d433a70b6208]
17355:
17356: * RUNSON:
17357: Checkpoint
17358: [babf6d2235d1]
17359:
17360: * auth/pam.c:
17361: o Add pam_prep_user function to call pam_setcred() for the target
17362: user; on Linux this often sets resource limits. o When calling
17363: pam_end(), try to convert the auth->result to a PAM_FOO value.
17364: This is a hack--we really need to stash the last PAM_FOO value
17365: received and use that instead.
17366: [6ad6f340dd2a]
17367:
17368: * set_perms.c, sudo.h:
17369: o Add pam_prep_user function to call pam_setcred() for the target
17370: user; on Linux this often sets resource limits.
17371: [67795421ac82]
17372:
17373: * env.c:
17374: Fix off by one error in number of bytes allocated via malloc (does
17375: not affected any released version of sudo).
17376: [5f5915360111]
17377:
17378: 2001-12-30 Todd C. Miller <Todd.Miller@courtesan.com>
17379:
17380: * lex.yy.c:
17381: regen
17382: [8208c0277775]
17383:
17384: * parse.lex:
17385: Allow '@', '(', ')', ':' in arguments to a defaults variable w/o
17386: requiring that they be quoted.
17387: [ae59bc8f68dd]
17388:
17389: * sudoers.cat, sudoers.man.in, sudoers.pod:
17390: Mention that no double quotes are needed when
17391: adding/deleting/assigning a single value to a list.
17392: [25efc940a1f0]
17393:
17394: * Makefile.in:
17395: Don't rely on mkdefaults being executable, call perl explicitly.
17396: [6edc97ba5f1d]
17397:
17398: * sudo.tab.c:
17399: regen
17400: [49130b2e7e4d]
17401:
17402: * parse.yacc:
17403: Remove some XXX that are no longer relevant.
17404: [d460ac0d3767]
17405:
17406: * defaults.c:
17407: o Roll our own loop instead of using strpbrk() for better
17408: grokability o When adding to a list we must malloc() and use
17409: memcpy(), not strdup() since we must only copy len bytes from str.
17410: [649bef08e1f0]
17411:
17412: 2001-12-21 Todd C. Miller <Todd.Miller@courtesan.com>
17413:
17414: * sudo.tab.c:
17415: regen
17416: [f0bbf2c38c0e]
17417:
17418: * parse.yacc:
17419: typo in comment
17420: [2563711ff593]
17421:
17422: 2001-12-19 Todd C. Miller <Todd.Miller@courtesan.com>
17423:
17424: * CHANGES:
17425: checkpoint
17426: [a6d8a29fb30e]
17427:
17428: * configure:
17429: regen
17430: [bdfcaaf3bd13]
17431:
17432: * configure.in:
17433: avoid the -g flag unless --with-devel was specified
17434: [a976707bef30]
17435:
17436: * Makefile.in:
17437: mkdefaults, def_data.in and sigaction.c were missing from the
17438: tarball
17439: [6917ffbaa412]
17440:
17441: * Makefile.in:
17442: def_data.c was missing
17443: [87c78b11453d]
17444:
17445: 2001-12-18 Todd C. Miller <Todd.Miller@courtesan.com>
17446:
17447: * env.c:
17448: Fix setting of $USER and $LOGNAME in the non-reset_env case. Also
17449: allow HOME, SHELL, LOGNAME, and USER to be specified in keep_env
17450: [fc8698e6a45e]
17451:
17452: * TODO:
17453: Another TODO item
17454: [6f251d6cd466]
17455:
17456: * sudoers:
17457: Add comment for Default section so folks know where it should go.
17458: [7edba626f392]
17459:
17460: 2001-12-17 Todd C. Miller <Todd.Miller@courtesan.com>
17461:
17462: * tgetpass.c:
17463: Use TCSETAF, not TCSETA to set terminal in termio case
17464: [fbd172f6c5d3]
17465:
17466: * sudoers.cat, sudoers.man.in:
17467: regen from sudoers.pod
17468: [64edd2de816e]
17469:
17470: * sudoers.pod:
17471: o Typo, Runas_User_List should be Runas_List o a User_List can not
17472: contain a uid o mention that the Defaults section should come after
17473: Alias definitions but before the user specifications
17474: [54070ba2092b]
17475:
17476: 2001-12-15 Todd C. Miller <Todd.Miller@courtesan.com>
17477:
17478: * sudoers.cat, sudoers.man.in:
17479: regen
17480: [e62d1d97693c]
17481:
17482: * sudoers.pod:
17483: Fix listpw and verifypw sections, they were not being formatted
17484: properly.
17485: [123868c2f3e9]
17486:
17487: * sudoers.cat, sudoers.man.in:
17488: regen
17489: [f94841f8b374]
17490:
17491: * sudoers.pod:
17492: fix typos
17493: [f278f1c1184e]
17494:
17495: * configure:
17496: regen
17497: [d2270049ba9f]
17498:
17499: * config.h.in, configure.in:
17500: use AC_SYS_POSIX_TERMIOS instead of rolling our own
17501: [c1a13f1354b9]
17502:
17503: * README:
17504: Reference sudo.ws not courtesan.com
17505: [ca13be67ebd7]
17506:
17507: * PORTING:
17508: Add notes on shadow passwords
17509: [aa13863f2314]
17510:
17511: * BUGS:
17512: In list mode (sudo -l), characters escaped with a backslash are
17513: shown verbatim with the backslash.
17514: [1a75a2858be2]
17515:
17516: * sudoers:
17517: Add simple examples from OpenBSD (Marc Espie)
17518: [3ae9a9ae4125]
17519:
17520: * tgetpass.c:
17521: Catch SIGTTIN and SIGTTOU too and treat them like SIGTSTP.
17522: [f8817699ee10]
17523:
17524: * CHANGES:
17525: minor prettyification
17526: [f523587929b9]
17527:
17528: * CHANGES:
17529: Updated change log
17530: [39d9010ee7a8]
17531:
17532: * testsudoers.c:
17533: Fix CIDR handling here too.
17534: [c91db8344c32]
17535:
17536: * auth/pam.c:
17537: Apparently a NULL response is OK
17538: [83bae61078d9]
17539:
17540: * TODO:
17541: Checkpoint for upcoming beta release
17542: [efb95c09df2a]
17543:
17544: * TROUBLESHOOTING:
17545: Many people believe that adding a runas spec should obviate the need
17546: for the -u flag. It does not.
17547: [c698bad85b0e]
17548:
17549: * RUNSON:
17550: checkpoint update for upcoming 1.6.4 beta
17551: [009e465a0a45]
17552:
17553: * config.h.in:
17554: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define HAVE_STRINGS_H even
17555: if HAVE_STRING_H is defined -- this is safe now
17556: [d27c035f4e14]
17557:
17558: * PORTING:
17559: Add signals section
17560: [2d24c13cb3c8]
17561:
17562: * configure:
17563: regen
17564: [2b80a939e2ed]
17565:
17566: * configure.in:
17567: Fix check for sigaction_t
17568: [6fa41c89ab20]
17569:
17570: * sudo.c:
17571: XXX - should call find_path() as runas user, not root. Can't do
17572: that until the parser changes though.
17573: [f0b4f85651bd]
17574:
17575: * sudo.c:
17576: If find_path() fails as root, try again as the invoking user (useful
17577: for NFS). Idea from Chip Capelik.
17578: [e03fa7872692]
17579:
17580: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
17581: Regenerate after pod file changes
17582: [48e4bd75ec21]
17583:
17584: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
17585: sudo.pod, sudoers.pod:
17586: Add new sudoers option "preserve_groups". Previously sudo would not
17587: call initgroups() if the target user was root. Now it always calls
17588: initgroups() unless the -P command line option or the
17589: "preserve_groups" sudoers option is set. Idea from TJ Saunders.
17590: [4f730359f101]
17591:
17592: 2001-12-14 Todd C. Miller <Todd.Miller@courtesan.com>
17593:
17594: * compat.h, config.h.in:
17595: Use new HAVE_SIGACTION_T define
17596: [dfb25f3cae5b]
17597:
17598: * logging.c:
17599: Fix compilation on K&C
17600: [7355e3275e34]
17601:
17602: * configure:
17603: regen
17604: [a710584f92f0]
17605:
17606: * configure.in:
17607: Add check for sigaction_t -- IRIX already defines this so don't
17608: redefine it.
17609: [df9c5737f6da]
17610:
17611: * snprintf.c:
17612: fix typo
17613: [3d782b8134c8]
17614:
17615: * interfaces.c:
17616: need stdlib.h here too
17617: [c789d8973ab2]
17618:
17619: * configure:
17620: regen
17621: [44822856bf46]
17622:
17623: * configure.in:
17624: Remove redundant checks for string.h, strings.h and unistd.h
17625: [933c94f8bbf4]
17626:
17627: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
17628: visudo.man.in:
17629: Regen from pod files
17630: [ad18c590f638]
17631:
17632: * BUGS:
17633: Update for 1.6.4
17634: [26bc88b69d22]
17635:
17636: * configure, lex.yy.c, sudo.tab.c:
17637: regen
17638: [bef89fd6fa2d]
17639:
17640: * strerror.c:
17641: Return EINVAL if errnum > sys_nerr
17642: [0512374e6661]
17643:
17644: * auth/sudo_auth.h:
17645: o Update copyright year
17646: [a877016db6e2]
17647:
17648: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
17649: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
17650: sudo.pod:
17651: o Update copyright year
17652: [e15a1b39039f]
17653:
17654: * configure.in:
17655: o Don't define STDC_HEADERS unconditionally for IRIX o Update
17656: copyright year
17657: [82a8cb819e07]
17658:
17659: * README:
17660: update version
17661: [d82e523a16b4]
17662:
17663: * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
17664: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
17665: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
17666: auth/sudo_auth.c, logging.c, parse.c, parse.lex, parse.yacc,
17667: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c, utime.c,
17668: visudo.c:
17669: o Reorder some headers and use STDC_HEADERS define properly o Update
17670: copyright year
17671: [fe39f76b3795]
17672:
17673: * lsearch.c:
17674: o Reorder some headers and use STDC_HEADERS define properly o Update
17675: copyright year
17676: [764ba3d4fa13]
17677:
17678: * getspwuid.c, goodpath.c, interfaces.c:
17679: o Reorder some headers and use STDC_HEADERS define properly o Update
17680: copyright year
17681: [fb46d46140d4]
17682:
17683: * getcwd.c:
17684: o Reorder some headers and use STDC_HEADERS define properly o Update
17685: copyright year
17686: [b199d70ac7ab]
17687:
17688: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
17689: fnmatch.c:
17690: o Reorder some headers and use STDC_HEADERS define properly o Update
17691: copyright year
17692: [dab8f192a3ed]
17693:
17694: * configure:
17695: regen
17696: [156658f25cea]
17697:
17698: * tgetpass.c:
17699: flags set in signal handlers should be volatile sig_atomic_t
17700: [c22931a5535e]
17701:
17702: * config.h.in, configure.in:
17703: Add checks for volatile and sig_atomic_t
17704: [b03b3341381d]
17705:
17706: * configure, lex.yy.c:
17707: regen
17708: [ed9daba88217]
17709:
17710: * def_data.c, def_data.h, def_data.in, defaults.c, env.c, find_path.c,
17711: sudo.c, sudoers.pod:
17712: Remove "secure_path" Defaults option since it cannot work with the
17713: existing parser.
17714: [c9e54a0f5971]
17715:
17716: * find_path.c, sudo.c:
17717: Unset "secure_path" if user_is_exempt()
17718: [fb7544565ae8]
17719:
17720: * env.c, pathnames.h.in:
17721: o Remove assumption that PATH and TERM are not listed in env_keep o
17722: If no PATH is in the environment use a default value o If TERM is
17723: not set in the non-reset case also give it a default value.
17724: [c987eb7df268]
17725:
17726: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
17727: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on
17728: systems that define in paths.h
17729: [51865b0cdebf]
17730:
17731: * auth/passwd.c, auth/sudo_auth.c, auth/sudo_auth.h:
17732: Add support for skeyaccess(3) if it is present in libskey.
17733: [8add77c7d3e7]
17734:
17735: 2001-12-13 Todd C. Miller <Todd.Miller@courtesan.com>
17736:
17737: * sudo.c:
17738: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
17739: [5a3d3cbf2c6d]
17740:
17741: * parse.lex:
17742: '\\' is a perfectly legal character to have in a command line
17743: argument.
17744: [c15a466ef00e]
17745:
17746: * sudo.c:
17747: o Defer call to set_fqdn() until it is safe to use log_error() o
17748: Don't print errno string value if gethostbyname fails, it is not
17749: relevant
17750: [c0c6bcf08bcb]
17751:
17752: * parse.c:
17753: Fix CIDR -> in_addr_t conversion.
17754: [2f307ebeb63f]
17755:
17756: 2001-12-12 Todd C. Miller <Todd.Miller@courtesan.com>
17757:
17758: * sudoers.pod:
17759: Remove an extra "User_List" in the User_Spec definition From
17760: ybertrand AT snoopymail.com
17761: [97bde59ea280]
17762:
17763: * parse.c:
17764: Make 'listpw=never' work for users who are not explicitly mentioned
17765: in sudoers.
17766: [258f0f30a428]
17767:
17768: * sudoers.pod:
17769: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
17770: [4b0f03872ee1]
17771:
17772: * sudoers.pod:
17773: Document new list Defaults type and convert env_keep and env_delete
17774: to lists. Document new env_check option.
17775: [a07f1f079fe3]
17776:
17777: * lex.yy.c, sudo.tab.c, sudo.tab.h:
17778: regen parser
17779: [e39ac6c6581b]
17780:
17781: * parse.lex:
17782: Don't let '#' appear in a {WORD} and restrict #foo in a Runas spec
17783: to #[0-9-]+.
17784: [69c5388908f3]
17785:
17786: * configure:
17787: regen
17788: [0f1877b88cb3]
17789:
17790: * aclocal.m4:
17791: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
17792: [6545503ae361]
17793:
17794: * config.h.in, configure.in:
17795: Add check for skeyaccess(3)
17796: [6caf69fe6359]
17797:
17798: * visudo.pod:
17799: Document new -c, -f, and -q options
17800: [13d0203c21d3]
17801:
17802: * visudo.c:
17803: o Add -f option (alternate sudoers file) o Convert to use getopt(3)
17804: [4c2b664d617d]
17805:
17806: * configure:
17807: regen
17808: [6d5bd932e7b5]
17809:
17810: * aclocal.m4, config.h.in, configure.in:
17811: Add check for isblank and a replacement macro if it doesn't exist.
17812: [b524f5e4f953]
17813:
17814: 2001-12-11 Todd C. Miller <Todd.Miller@courtesan.com>
17815:
17816: * visudo.c:
17817: In check-only mode, don't create sudoers if it does not already
17818: exist.
17819: [c748a2d5acad]
17820:
17821: * parse.yacc:
17822: o Add a new token, DEFVAR, to indicate a Defaults variable name o
17823: Add support for "+=" and "-=" list operators o replace some 1 and 0
17824: with TRUE and FALSE for greater legibility.
17825: [554cb174b37e]
17826:
17827: * parse.lex:
17828: o Use exclusive start conditions to remove some ambiguity in the
17829: lexer. Also reorder some things for clarity. o Add support for
17830: "+=" and "-=" list operators. o Use the new DEFVAR token to denote
17831: a Defaults variable name.
17832: [3a2cf8323e26]
17833:
17834: * sudo.h:
17835: Prototype init_envtables()
17836: [b74916469dab]
17837:
17838: * env.c:
17839: o Convert environment handling to use lists instead of strings.
17840: This greatly simplifies routines that need to do "foreach" type
17841: operations. o Add new init_envtables() function to set env_check
17842: and env_delete defaults based on initial_badenv_table and
17843: initial_checkenv_table (formerly sudo_badenv_table).
17844: [0a8b404658b6]
17845:
17846: * defaults.c, defaults.h:
17847: o Add a new LIST type and functions to manipulate it. o This is for
17848: use with environment handling variables. o Call new
17849: init_envtables() routine inside init_defaults() to initialize the
17850: environment lists.
17851: [ae73e64f0902]
17852:
17853: * def_data.c, def_data.h, def_data.in:
17854: Convert environment options to use the new LIST type and add a new
17855: one, env_check that only deletes if the sanity check fails.
17856: [3019503936de]
17857:
17858: * testsudoers.c:
17859: Add dummy version of init_envtables()
17860: [9d9e3ee609d9]
17861:
17862: * parse.yacc:
17863: honor quiet mode
17864: [8330fba6167c]
17865:
17866: * visudo.c:
17867: Add check-only mode
17868: [dab411bc8c35]
17869:
17870: * mkdefaults:
17871: Fix generation of entries with NULL descriptions.
17872: [ea75b9fed02e]
17873:
17874: 2001-12-09 Todd C. Miller <Todd.Miller@courtesan.com>
17875:
17876: * tgetpass.c:
17877: Use sigaction_t and quiet a gcc warning.
17878: [6f67d719c452]
17879:
17880: * sudo.c:
17881: Must reset signal handlers before we exec
17882: [300418120e1a]
17883:
17884: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
17885: auth/sudo_auth.c:
17886: Be carefule now that tgetpass() can return NULL (user hit ^C). PAM
17887: version needs testing. Set SIGTSTP to SIG_DFL during password entry
17888: so user can suspend us.
17889: [00304aa58747]
17890:
17891: * tgetpass.c:
17892: Add support for interrupting/suspending tgetpass via keyboard input.
17893: If you suspend sudo from the password prompt and resume it will re-
17894: prompt you.
17895: [4af2b5101d32]
17896:
17897: * sudo.c:
17898: Don't block keyboard interrupt signals, just set them to SIG_IGN.
17899: [d46d7f67ef6b]
17900:
17901: 2001-12-08 Todd C. Miller <Todd.Miller@courtesan.com>
17902:
17903: * config.h.in:
17904: add back HAVE_SIGACTION
17905: [c9c7702c603e]
17906:
17907: * configure:
17908: regen
17909: [09fe669d337f]
17910:
17911: * config.h.in, configure.in, logging.c, sudo.c, visudo.c:
17912: Kill POSIX_SIGNALS define and old signal support now that we emulate
17913: POSIX ones Also be sure to correctly initialize struct sigaction.
17914: [4bc2a6dbb2be]
17915:
17916: * strerror.c:
17917: Don't need config.h or "#ifndef HAVE_STRERROR" wrapper.
17918: [1ad64a19f328]
17919:
17920: * compat.h:
17921: Add scaffolding for POSIX signal emulation
17922: [945861d4c93b]
17923:
17924: * sigaction.c:
17925: o Add missing ';' so this compiles o Can't use NULL since we don't
17926: include stdio.h
17927: [04d0cac7438f]
17928:
17929: * sigaction.c:
17930: Emulate sigaction() using sigvec()
17931: [d0b54a989875]
17932:
17933: 2001-11-13 Todd C. Miller <Todd.Miller@courtesan.com>
17934:
17935: * sudoers.pod:
17936: Document new behavior of negative values of timestamp_timeout Fix a
17937: typo
17938: [4c0716570d01]
17939:
17940: * sudo.pod:
17941: Add security note about command not being logged after 'sudo su' and
17942: friends.
17943: [43294851a33c]
17944:
17945: * sudo.pod:
17946: Mention that -V prints default values when run as root, including
17947: the list of environment variables to clear.
17948: [d9e5e550a8c3]
17949:
17950: * Makefile.in:
17951: Run pod2man with --quotes=none to avoid stupid quoting of C<>
17952: entries.
17953: [997b23c35dbe]
17954:
17955: 2001-11-12 Todd C. Miller <Todd.Miller@courtesan.com>
17956:
17957: * auth/sudo_auth.c, def_data.c, def_data.h, def_data.in, sudoers.pod:
17958: Add mail_badpass option Also modify mail_always behavior to also
17959: send mail when the password is wrong
17960: [838d40ccafce]
17961:
17962: * env.c, sudo.c, sudo.h:
17963: Dump default bad env table when 'sudo -V' is run by root.
17964: [f67f1b8048b0]
17965:
17966: * sudoers.pod:
17967: document env_delete
17968: [d74f893663a2]
17969:
17970: * env.c:
17971: Add support for '*' in env_keep when not resetting the environment
17972: (ie: the normal case).
17973: [fd4fb62ea8fd]
17974:
17975: * env.c:
17976: Add env_delete variable that lets the user replace/add to the
17977: bad_env_table. Allow '*' wildcard in env_keep entries.
17978: [aa728bc35e29]
17979:
17980: 2001-11-06 Todd C. Miller <Todd.Miller@courtesan.com>
17981:
17982: * mkinstalldirs:
17983: Force umask to 022 to guarantee sane directory permissions.
17984: [9ab3cfe70569]
17985:
17986: 2001-11-02 Todd C. Miller <Todd.Miller@courtesan.com>
17987:
17988: * Makefile.in:
17989: add sudo.tab.h and sudo.tab.c to sudo.tab.o dependency
17990: [671010465e6f]
17991:
17992: * mkdefaults:
17993: fix breakage in last commit
17994: [8318f8851e56]
17995:
17996: * Makefile.in:
17997: acsite.m4 -> aclocal.m4
17998: [30c146873a01]
17999:
18000: * check.c:
18001: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in previous commit
18002: [4dc8b39954da]
18003:
18004: * def_data.c:
18005: regenerated from def_data.in
18006: [915ea16ce1eb]
18007:
18008: * check.c, defaults.c, defaults.h:
18009: Add new T_UINT type that most things use instead of T_INT If
18010: timestamp_timeout is < 0 then treat the ticket as never expiring (to
18011: be expired manually by the user).
18012: [3a3a636a2a5d]
18013:
18014: * def_data.in:
18015: change most T_INT -> T_UINT
18016: [a2228d2457af]
18017:
18018: * mkdefaults:
18019: fix warning when no args
18020: [ca70a5394af5]
18021:
18022: * visudo.c:
18023: Change 2 Exit() -> exit() Avoid stdio in Exit() and call _exit() if
18024: we are a signal handler. We no longer print the signal number but
18025: the user can just check the exit value for that.
18026: [dc424f631fef]
18027:
18028: 2001-10-16 Todd C. Miller <Todd.Miller@courtesan.com>
18029:
18030: * logging.c:
18031: when setting up pipes in child process check for case where stdin ==
18032: pipe fd 0
18033: [518112d76184]
18034:
18035: 2001-10-11 Todd C. Miller <Todd.Miller@courtesan.com>
18036:
18037: * visudo.c:
18038: Ignore editor exit value since XPG4 says vi's exit value is the
18039: count of editing errors made (failed searches, etc).
18040: [b9d952284865]
18041:
18042: 2001-10-05 Todd C. Miller <Todd.Miller@courtesan.com>
18043:
18044: * configure:
18045: regen
18046: [cb3aa586f03b]
18047:
18048: * configure.in:
18049: sco now is identified by config.guess as *-sco-*
18050: [46664bbdea61]
18051:
18052: * configure.in:
18053: Check for getspnam() in -lgen if not in -lc for UnixWare.
18054: [0f152ad1ba93]
18055:
18056: 2001-09-18 Todd C. Miller <Todd.Miller@courtesan.com>
18057:
18058: * sudoers.pod, visudo.pod:
18059: "upper case" -> "uppercase"
18060: [f9151f232326]
18061:
18062: * sudoers.pod:
18063: fix typos and grammar; pjanzen@foatdi.harvard.edu
18064: [2855d73d0237]
18065:
18066: 2001-08-28 Todd C. Miller <Todd.Miller@courtesan.com>
18067:
18068: * sudoers.pod:
18069: Missing word (specify); krapht@secureops.com
18070: [65523eb37a2c]
18071:
18072: 2001-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
18073:
18074: * sudo.c:
18075: If we fail to lookup a login class, apply the default one.
18076: [d4869faa6816]
18077:
18078: * logging.c:
18079: In log_error() free message, not logline unconditionally, then free
18080: logline if it is not the same as message. No function change but
18081: this mirrors how they are allocated.
18082: [565e5f6cc643]
18083:
18084: 2001-07-17 Todd C. Miller <Todd.Miller@courtesan.com>
18085:
18086: * configure:
18087: regenerate
18088: [834a48f548a2]
18089:
18090: * configure.in:
18091: remove some backslash quotes that are unneeded
18092: [50d401d6e2ca]
18093:
18094: * configure.in:
18095: o Tweaks to make this work with autoconf-2.50 o Use AC_LIBOBJ
18096: instead of changing LIBOBJS directly o Use AC_REPLACE_FUNCS where we
18097: can o Use AC_CHECK_FUNCS instead of AC_CHECK_FUNC so we don't have
18098: to AC_DEFINE things manually.
18099: [f502c5f15f92]
18100:
18101: * config.guess, config.sub:
18102: Updated from autoconf-2.50
18103: [6140205915ef]
18104:
18105: 2001-05-22 Todd C. Miller <Todd.Miller@courtesan.com>
18106:
18107: * README:
18108: Update mailing list section. We use mailman now, not majordomo.
18109: [b9a8ca45e6dc]
18110:
18111: 2001-05-10 Todd C. Miller <Todd.Miller@courtesan.com>
18112:
18113: * getspwuid.c, logging.c, sudo.c:
18114: Use setpwent()/endpwent() + all the shadow variants to make sure we
18115: don't inadvertantly leak an fd to the child. Apparently Linux's
18116: shadow routines leave the fd open even if you don't call setspent().
18117: Reported by mike@gistnet.com; different patch used.
18118: [d33792ef6c01]
18119:
18120: 2001-04-13 Todd C. Miller <Todd.Miller@courtesan.com>
18121:
18122: * sudoers.pod:
18123: s/eg./e.g./
18124: [bd32a0acaf93]
18125:
18126: * tgetpass.c:
18127: select() may return EAGAIN. If so, continue like we do for EINTR.
18128: [5f202c943818]
18129:
18130: * logging.c:
18131: Fix a non-exploitable buffer overflow in the word splitting code.
18132: This should really be rewritten.
18133: [4c724363863a]
18134:
18135: * Makefile.in:
18136: FAQ link goes away
18137: [1d26dd6c8972]
18138:
18139: * INSTALL:
18140: Tell people to look in sample.syslog.conf for examples, not FAQ
18141: [affcae3f43ca]
18142:
18143: * TROUBLESHOOTING:
18144: Update list of env vars that are cleared
18145: [234e56f1435a]
18146:
18147: * sudo.c:
18148: remove struct env_table decl since that stuff has all moved to env.c
18149: [5dd923148777]
18150:
18151: 2001-04-04 Todd C. Miller <Todd.Miller@courtesan.com>
18152:
18153: * fileops.c:
18154: Fix a pasto in flock-style unlocking and include <sys/file.h> for
18155: flock on older systems; twetzel@gwdg.de
18156: [d5420d9d2861]
18157:
18158: * configure:
18159: regen to get NeXT lockf/flock fix
18160: [d3ba6ed70e15]
18161:
18162: * configure.in:
18163: force NeXT to use flock since lockf is broken
18164: [bd5391dca1bb]
18165:
18166: 2001-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
18167:
18168: * check.c:
18169: Use stashed user_gid when checking against exempt gid since sudo
18170: sets its gid to a a value that makes sudoers readable. Previously
18171: if you used gid 0 as the exempt group everyone would be exempt. From
18172: Paul Kranenburg <pk@cs.few.eur.nl>
18173: [0b140cc3a817]
18174:
18175: 2001-03-29 Todd C. Miller <Todd.Miller@courtesan.com>
18176:
18177: * configure:
18178: regen
18179: [cc455408f32b]
18180:
18181: * aclocal.m4:
18182: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6 aparently defines
18183: some types (such as ssize_t) therein.
18184: [b6aee85ca331]
18185:
18186: 2001-03-02 Todd C. Miller <Todd.Miller@courtesan.com>
18187:
18188: * defaults.c:
18189: Fix negation of paths in a boolean context. Problem found by
18190: apt@UH.EDU
18191: [8aee217a7cdf]
18192:
18193: 2001-02-23 Todd C. Miller <Todd.Miller@courtesan.com>
18194:
18195: * visudo.c:
18196: pasto
18197: [ad32b277bf68]
18198:
18199: 2001-02-17 Todd C. Miller <Todd.Miller@courtesan.com>
18200:
18201: * visudo.c:
18202: SA_RESETHAND means the opposite of what I was thinking--oops To
18203: block all signals in old-style signals use ~0, not 0xffffffff
18204: [6ecdd793590a]
18205:
18206: 2001-02-04 Todd C. Miller <Todd.Miller@courtesan.com>
18207:
18208: * defaults.c:
18209: coerce difference of pointers to int when used in a string length
18210: printf format; deraadt@openbsd.org
18211: [a9d10f07180d]
18212:
18213: 2001-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
18214:
18215: * visudo.c:
18216: Block all signals in Exit() to avoid a signal race. There is still
18217: a tiny window but I'm not going to worry about it.
18218: [6661805c0458]
18219:
18220: 2001-01-07 Todd C. Miller <Todd.Miller@courtesan.com>
18221:
18222: * env.c:
18223: glibc uses the LANGUAGE env var so clear that too; Solar Designer
18224: [d4ba95628afb]
18225:
18226: * lex.yy.c:
18227: Regenerate with a fix to flex.skl that preserves errno from
18228: clobbering by isatty().
18229: [607eec736e19]
18230:
18231: 2000-12-31 Todd C. Miller <Todd.Miller@courtesan.com>
18232:
18233: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
18234: auth/sia.c, auth/sudo_auth.c:
18235: Some defaults I_ defines got renamed.
18236: [ec19b23caaf3]
18237:
18238: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
18239: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
18240: set_perms.c, sudo.c, sudo.tab.c:
18241: Move defaults info into its own files from which we generate .h and
18242: .c files. This makes adding or rearranging variables much simpler.
18243: [e91b880b5043]
18244:
18245: 2000-12-30 Todd C. Miller <Todd.Miller@courtesan.com>
18246:
18247: * configure, configure.in:
18248: fix typo in last commit
18249: [10a6ee2bae71]
18250:
18251: * compat.h, config.h.in, configure, configure.in:
18252: Add check + emulation for setegid (like seteuid).
18253: [29492092bd2f]
18254:
18255: * env.c:
18256: Make env_keep override badenv_table as documented Fix traversal of
18257: badenv_table (broken in last commit)
18258: [37c9f0d22673]
18259:
18260: * set_perms.c, sudo.c, sudo.h:
18261: Don't try and build saved uid version of set_perms on systems w/o
18262: them. Rename set_perms_saved_uid() -> set_perms_posix() Make
18263: set_perms_setreuid simply be set_perms_fallback() and simply include
18264: the appropriate function at compile time (setreuid() vs. setuid()).
18265: [3107333c062c]
18266:
18267: * sudoers.cat, sudoers.man.in, sudoers.pod:
18268: PATH is also preserved when env_reset is in effect
18269: [90e45c5711ff]
18270:
18271: * CHANGES, Makefile.in, check.c, compat.h, config.h.in, configure,
18272: configure.in, defaults.c, defaults.h, env.c, find_path.c,
18273: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
18274: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, testsudoers.c,
18275: visudo.c, visudo.cat, visudo.man.in:
18276: New Defaults options: o stay_setuid - sudo will remain setuid if
18277: system has saved uids or setreuid(2) o env_reset - reset the
18278: environment to a sane default o env_keep - preserve environment
18279: variables that would otherwise be cleared
18280:
18281: No longer use getenv/putenv/setenv functions--do environment munging
18282: by hand. Potentially dangerous environment variables can be cleared
18283: only if they contain '/' pr '%' characters to protect buggy
18284: programs. Moved environment routines into env.c (new file)
18285: [c2f97651db4c]
18286:
18287: * INSTALL:
18288: Clear up --without-passwd description
18289: [2f336dab6733]
18290:
18291: * putenv.c, sudo_setenv.c:
18292: We now build up a new environment from scratch and assign it to
18293: "environ".
18294: [6ae6152f2238]
18295:
18296: 2000-12-19 Todd C. Miller <Todd.Miller@courtesan.com>
18297:
18298: * sudo.pod, visudo.pod:
18299: Grammatical fixes from Paul Janzen
18300: [e03ead2e56f8]
18301:
18302: 2000-12-15 Todd C. Miller <Todd.Miller@courtesan.com>
18303:
18304: * visudo.c:
18305: If there was a syntax error and the user just wants to quit, unlink
18306: sudoers if it is zero length.
18307: [74ba7921f520]
18308:
18309: * visudo.c:
18310: 'Q' means ignore parse error, not 'q'
18311: [e8d0e4491fe6]
18312:
18313: * visudo.c:
18314: Open sudoers for writing with mode SUDOERS_MODE From Dimitry Andric
18315: <dim@xs4all.nl>
18316: [b24990a72491]
18317:
18318: 2000-12-13 Todd C. Miller <Todd.Miller@courtesan.com>
18319:
18320: * set_perms.c:
18321: Add missing #ifdef HAVE_LOGIN_CAP_H; ayamura@ayamura.org
18322: [41a8db10e076]
18323:
18324: 2000-12-09 Todd C. Miller <Todd.Miller@courtesan.com>
18325:
18326: * config.guess, config.sub:
18327: Darwin / Mac OS X support from Wilfredo Sanchez <wsanchez@apple.com>
18328: [6052da895d2e]
18329:
18330: 2000-11-03 Todd C. Miller <Todd.Miller@courtesan.com>
18331:
18332: * sudo.c, visudo.c:
18333: Use exit(127), not exit(-1)
18334: [9ff0c3eada34]
18335:
18336: * Makefile.in, defaults.c, defaults.h, set_perms.c, sudo.c:
18337: Move set_perms() to its own file and use POSIX saved uid or
18338: setreuid() if available.
18339:
18340: Added stay_setuid option for systems that have libraries that
18341: perform extra paranoia checks in system libraries for setuid
18342: programs (ie: anything with issetugid(2)).
18343: [28960f842698]
18344:
18345: * sudo.c:
18346: strip more bits from the environment and add a facility for
18347: stripping things only if they contain '/' or '%' to address printf
18348: format string vulnerabilities in other programs.
18349: [b98d6375f299]
18350:
18351: 2000-11-02 Todd C. Miller <Todd.Miller@courtesan.com>
18352:
18353: * configure:
18354: regen
18355: [7e74e5c91049]
18356:
18357: * configure.in:
18358: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache the existence of
18359: strcasecmp().
18360: [a418e9e70442]
18361:
18362: * configure:
18363: regen
18364: [bbff244a52bc]
18365:
18366: * configure.in:
18367: Check for strcasecmp(3) in -lc89 for NCR Unix
18368: [361c99576681]
18369:
18370: 2000-11-01 Todd C. Miller <Todd.Miller@courtesan.com>
18371:
18372: * config.h.in:
18373: Define HAVE_INNETGR #ifdef HAVE__INNETGR
18374: [473cdb92b6db]
18375:
18376: * configure:
18377: regen
18378: [4e6364a195e0]
18379:
18380: * compat.h, config.h.in, configure.in:
18381: Add check for _innetgr(3) since NCR systems have that instead of
18382: innetgr(3).
18383: [25e6852e7494]
18384:
18385: 2000-10-31 Todd C. Miller <Todd.Miller@courtesan.com>
18386:
18387: * auth/securid.c:
18388: check return value of creadcfg() call sd_close() after sd_auth()
18389: store username in sd->username so we don't rely on the USER env
18390: variable
18391: [d106b4f42722]
18392:
18393: 2000-10-30 Todd C. Miller <Todd.Miller@courtesan.com>
18394:
18395: * INSTALL:
18396: document --with-bsdauth
18397: [f1518ecc2ee9]
18398:
18399: * configure:
18400: regen
18401: [dceb35071ea8]
18402:
18403: * configure.in:
18404: --with-bsdauth assumes --with-logincap
18405: [4200778083fd]
18406:
18407: * auth/bsdauth.c, auth/fwtk.c:
18408: When prompting for a response to a challenge, if the user just hits
18409: return then reprompt with echo turned on.
18410: [a539b6474a97]
18411:
18412: 2000-10-29 Todd C. Miller <Todd.Miller@courtesan.com>
18413:
18414: * sudo.c:
18415: Remove debugging code that should not have been committed, oops.
18416: [9862607b77a7]
18417:
18418: * auth/bsdauth.c:
18419: Use lower-level routines and get the password ourselves. Checks for
18420: a challenge and if there is one echo is not turned off.
18421: [2d8fcd166baa]
18422:
18423: * auth/pam.c, auth/sudo_auth.h:
18424: minor housekeeping, no real code changes
18425: [d0074a277fb4]
18426:
18427: 2000-10-27 Todd C. Miller <Todd.Miller@courtesan.com>
18428:
18429: * sudo.c:
18430: Fix a coredump in the logging functions if gethostname(2) fails by
18431: deferring the call to log_error() until things are better setup.
18432:
18433: Fix return value of set_loginclass() in non-BSD-auth case.
18434:
18435: Hard-code 'sudo' in the usage message so we can fit more options on
18436: a line
18437: [d9d1b7579818]
18438:
18439: * logging.c:
18440: Fix errant ';' (typo) that broken MSG_ONLY
18441: [849b2276a470]
18442:
18443: 2000-10-26 Todd C. Miller <Todd.Miller@courtesan.com>
18444:
18445: * sudo.cat, sudo.man.in:
18446: regen
18447: [bb3c8c6704d1]
18448:
18449: * sudo.pod:
18450: Document -a flag
18451: [e18316cebaac]
18452:
18453: * Makefile.in, auth/bsdauth.c, auth/sudo_auth.h, config.h.in,
18454: configure, configure.in, getspwuid.c, sudo.c:
18455: Add support for BSD authentication.
18456: [f374cfd9ca0d]
18457:
18458: 2000-10-19 Todd C. Miller <Todd.Miller@courtesan.com>
18459:
18460: * sudoers.pod:
18461: Fix typo; from sato@complex.eng.hokudai.ac.jp
18462: [3085fee9766e]
18463:
18464: 2000-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
18465:
18466: * sudoers.pod:
18467: Mention negating umask
18468: [c9e410294dae]
18469:
18470: * defaults.c:
18471: Allow user to specify umask of 0777 (same as !umask)
18472: [bb771daa96fe]
18473:
18474: 2000-10-09 Todd C. Miller <Todd.Miller@courtesan.com>
18475:
18476: * sudo.pod, visudo.pod:
18477: Fix a typo and give a URL for the sudo history.
18478: [77f73199aedb]
18479:
18480: 2000-10-08 Todd C. Miller <Todd.Miller@courtesan.com>
18481:
18482: * defaults.c, sudo.pod:
18483: fix typos; pepper@reppep.com
18484: [5532c7421340]
18485:
18486: 2000-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
18487:
18488: * sudo.c, sudo.h, sudo_setenv.c:
18489: sudo_setenv() now exits on memory alloc failure instead of returning
18490: -1.
18491: [71f1cf18f47b]
18492:
18493: 2000-09-07 Todd C. Miller <Todd.Miller@courtesan.com>
18494:
18495: * sudo.c:
18496: Strip out NLSPATH and PATH_LOCALE from the environment for FreeBSD
18497: and possibly others.
18498: [b69d985b0d22]
18499:
18500: * logging.c:
18501: Don't use vsyslog(3) since HP-UX (and others?) lack it. This means
18502: that "%m" won't be expanded but we don't use that anyway since the
18503: logging routines may splat to stderr as well.
18504: [8d37a544d0c0]
18505:
18506: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
18507: sudoers.pod:
18508: Add always_set_home variable
18509: [dbcaff646e07]
18510:
18511: * configure, configure.in:
18512: Have to hard code default values in help since the defaults are set
18513: _after_ the help stuff.
18514: [7b5d6d72f55c]
18515:
18516: 2000-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
18517:
18518: * lex.yy.c, parse.lex:
18519: Allow special characters (including '#') to be embedded in pathnames
18520: if quoted by a '\\'. The quoted chars will be dealt with by
18521: fnmatch(). Unfortunately, 'sudo -l' still prints the '\\'.
18522: [3ed33cf09977]
18523:
18524: 2000-08-13 Todd C. Miller <Todd.Miller@courtesan.com>
18525:
18526: * install-sh:
18527: Better path searching for programs we need.
18528: [60517cb1f0d6]
18529:
18530: * TROUBLESHOOTING:
18531: Add section on "C compiler cannot create executables" errors.
18532: [e4ada6eaee59]
18533:
18534: * Makefile.binary, Makefile.in, version.h:
18535: Crank version
18536: [93d1bd5b7f5e]
18537:
18538: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
18539: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
18540: visudo.man.in, visudo.pod:
18541: Substitute values from configure into man pages.
18542: [619854c356c1]
18543:
18544: 2000-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
18545:
18546: * parse.c, sudo.c:
18547: The listpw and verifypw sudoers options would not take effect
18548: because the value of the default was checked *before* sudoers was
18549: parsed. Instead of passing in the value of PWCHECK_* to
18550: sudoers_lookup(), pass in the arg for def_ival() so the check can be
18551: deferred until after sudoers is parsed.
18552: [4f596e358f72]
18553:
18554: 2000-08-11 Todd C. Miller <Todd.Miller@courtesan.com>
18555:
18556: * tgetpass.c:
18557: When writing prompt, no need to write the NUL as well;
18558: hag@linnaean.org
18559: [fbcdd7b431ee]
18560:
18561: 2000-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
18562:
18563: * install-sh:
18564: When looking for chown, check in /sbin too
18565: [657ba6653f8c]
18566:
18567: 2000-06-05 Todd C. Miller <Todd.Miller@courtesan.com>
18568:
18569: * visudo.c:
18570: Remove extraneous call to init_defaults() and set runas_user to NULL
18571: betweem parses so init_defaults will reset it each time, thus
18572: avoiding a reference to free()d data.
18573: [7421fcd692af]
18574:
18575: 2000-06-04 Todd C. Miller <Todd.Miller@courtesan.com>
18576:
18577: * config.h.in, interfaces.c, interfaces.h, sudo.c:
18578: Add support for using getifaddrs() to get the list of ip addr /
18579: netmask pairs. Currently IPv4-only.
18580: [a35bc4f7306d]
18581:
18582: * visudo.c:
18583: Add a missing check for UserEditor == NULL Add missing '+' before
18584: line number when invoking editor to fix a syntax error
18585: [f0d4635f6082]
18586:
18587: 2000-05-12 Todd C. Miller <Todd.Miller@courtesan.com>
18588:
18589: * sudo.c:
18590: Call clean_env very early in main() for paranoia's sake. Idea from
18591: Marc Esipovich.
18592: [f8d72ebd0115]
18593:
18594: 2000-05-10 Todd C. Miller <Todd.Miller@courtesan.com>
18595:
18596: * sudo.h:
18597: Update proto for evasprintf and easprintf
18598: [d147d6e58419]
18599:
18600: * alloc.c:
18601: Make easprintf() and evasprintf() return an int.
18602: [b2ca5d089667]
18603:
18604: * check.c:
18605: If the targetpw flag is set, use target username as part of the
18606: timestamp path. If tty tickets are in effect cat the tty and the
18607: target username with a ':' as the separator.
18608: [de11abc693c2]
18609:
18610: 2000-05-09 Todd C. Miller <Todd.Miller@courtesan.com>
18611:
18612: * auth/pam.c:
18613: Backout part of last change; setting PAM_USER to the invoking user
18614: breaks things like targetpw.
18615: [427218a7387f]
18616:
18617: * auth/pam.c:
18618: set tty and username via pam_set_item
18619: [85d1922dbcc9]
18620:
18621: * auth/sudo_auth.c, check.c, getspwuid.c, sudo.c, sudo.h:
18622: Fix root, runas, and target authentication for non-passwd file auth
18623: methods.
18624: [a14535e7b30c]
18625:
18626: 2000-04-22 Todd C. Miller <Todd.Miller@courtesan.com>
18627:
18628: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
18629: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
18630: Use B<-Z> not C<-Z> for command line flags in all places. This is
18631: more consistent and works around a bug in Pod::Man.
18632: [64b5a05f30c5]
18633:
18634: * sudoers.cat, sudoers.man.in, sudoers.pod:
18635: Fix an occurence of 'semicolon' that should be 'colon'
18636: [4ea5aacae3fb]
18637:
18638: 2000-04-19 Todd C. Miller <Todd.Miller@courtesan.com>
18639:
18640: * configure, configure.in:
18641: Fix --with-badpri help line
18642: [3cc40977c043]
18643:
18644: 2000-04-17 Todd C. Miller <Todd.Miller@courtesan.com>
18645:
18646: * defaults.c, logging.c, sudo.c:
18647: Bracket calls to syslog with an openlog() and closelog() since some
18648: authentication methods (like PAM) may do their own logging via
18649: syslog. Since we don't use syslog much (usually just once per
18650: session) this doesn't really incur a performance penalty. It also
18651: Fixes a SEGV with pam_kafs.
18652: [fe1cc28529f6]
18653:
18654: 2000-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
18655:
18656: * sudo.c:
18657: Fix -H flag. runas_homedir is only valid after
18658: set_perms(PERM_RUNAS, mode)
18659: [ce9b1c6f68a6]
18660:
18661: 2000-04-12 Todd C. Miller <Todd.Miller@courtesan.com>
18662:
18663: * INSTALL:
18664: Clarify the fact that insults are not enabled just by including them
18665: in the binary.
18666: [d5a31d48320c]
18667:
18668: 2000-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
18669:
18670: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
18671: visudo.man.in:
18672: Regenerated with perl 5.6.0 pod2man
18673: [21751433768b]
18674:
18675: * Makefile.in:
18676: Give date string to pod2man since its default is ugly and it ain't
18677: got no alibi.
18678: [0080b2f6298f]
18679:
18680: * Makefile.in:
18681: Do section substitution on the output of pod2man and remove hack
18682: needed for old pod2man.
18683: [1ef843d5c78b]
18684:
18685: * sudo.pod, sudoers.pod, visudo.pod:
18686: Put back real man sections, we will do the substitution later.
18687: [f728c1abad7e]
18688:
18689: 2000-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
18690:
18691: * configure, configure.in:
18692: Don't bother checking for the path to vi if user specified --with-
18693: editor
18694: [bf698487e0d5]
18695:
18696: 2000-04-01 Todd C. Miller <Todd.Miller@courtesan.com>
18697:
18698: * CHANGES, visudo.c:
18699: Visudo now does its own fork/exec instead of calling system(3).
18700: [99bbcd88863b]
18701:
18702: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
18703: sudoers.pod, visudo.c:
18704: Visudo now checks for the existence of an editor and gives a
18705: sensible error if it does not exist.
18706:
18707: The path to the editor for visudo is now a colon-separated list of
18708: allowable editors. If the user has $EDITOR set and it matches one
18709: of the allowed editors that editor will be used. If not, the first
18710: editor in the list that actually exists is used.
18711: [cc86eb9f5440]
18712:
18713: * sudo.cat, sudo.man.in, sudo.pod:
18714: Clear up confusion wrt sudo's return value.
18715: [9385b12d8e79]
18716:
18717: 2000-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
18718:
18719: * Makefile.in:
18720: Strip sudo and visudo for bindist target
18721: [a995ddd79177]
18722:
18723: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
18724: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
18725: Use @mansectsu@ and @mansectform@ in the man page bodies as well.
18726: [5eb9e60a726f] [SUDO_1_6_3]
18727:
18728: * visudo.cat, visudo.man.in, visudo.pod:
18729: Typo: @sysconf@ -> @sysconfdir@
18730: [f07f52fcd099]
18731:
18732: * Makefile.in:
18733: 'make dist' should not cause any files to be modified so remove its
18734: dependencies.
18735: [7f44a2666a9c]
18736:
18737: * CHANGES:
18738: Whoops, forgot to add release marker
18739: [16c0f16b35b8]
18740:
18741: 2000-03-26 Todd C. Miller <Todd.Miller@courtesan.com>
18742:
18743: * CHANGES:
18744: Final change for 1.6.3 (or so I hope)
18745: [473c89da6123]
18746:
18747: * sudo.cat, sudoers.cat, visudo.cat:
18748: Use SYSV man sections since BSD systems will have nroff...
18749: [0a6bd154324e]
18750:
18751: 2000-03-24 Todd C. Miller <Todd.Miller@courtesan.com>
18752:
18753: * parse.yacc, sudo.tab.c:
18754: When checking to see if the host/user matches in a defaults spec,
18755: check against TRUE, not just non-zero since it might be -1.
18756: [41f2b7ad3fdd]
18757:
18758: * configure, configure.in:
18759: OSF/1 puts file formats in section 4, not 5.
18760: [d77c1301afa9]
18761:
18762: * CHANGES, INSTALL, sudo.c:
18763: Make login class support work on BSD/OS
18764: [e9bbe3c08ade]
18765:
18766: * RUNSON:
18767: Update for 1.6.3
18768: [c40ce1d76c4d]
18769:
18770: * configure, configure.in:
18771: If there is no inet_addr but there *is* an __inet_addr that's ok
18772: since inet_addr is probably just a macro then. The better thing to
18773: do would be to look for the macro, but this is fine for now.
18774: [1b8865ae4d68]
18775:
18776: * configure, configure.in:
18777: Don't use shlicc for BSD/OS 4.x
18778: [83fbf6dedd2c]
18779:
18780: * Makefile.in, configure, configure.in:
18781: *.man lives in cwd, *.cat lives in $(srcdir), add a @mansrcdir@
18782: configure variable so we can deal with this. Also, only remove *.man
18783: for 'distclean' not 'clean'.
18784: [30d56e6de214]
18785:
18786: * sudo.c:
18787: set_loginclass() should be static like the proto says
18788: [d570a2d55fb8]
18789:
18790: 2000-03-23 Todd C. Miller <Todd.Miller@courtesan.com>
18791:
18792: * fnmatch.c:
18793: Add #ifdef __STDC__ around the rangematch function header to avoid
18794: promotion of test to int, thus violating the prototype. Gcc handles
18795: this gracefully but more std ANSI compilers will complain.
18796: [7d98c3e332b2]
18797:
18798: * emul/fnmatch.h:
18799: Pull in newer fnmatch(3) that supports FNM_CASEFOLD
18800: [4e1320852f8b]
18801:
18802: * aclocal.m4, configure, fnmatch.3, fnmatch.c:
18803: Pull in newer fnmatch(3) that supports FNM_CASEFOLD Check for
18804: FNM_CASEFOLD in configure
18805: [9ef952bf1896]
18806:
18807: * CHANGES, TODO:
18808: update for 1.6.3
18809: [e4ba6368a0c5]
18810:
18811: * sudo.tab.c, sudo.tab.h, testsudoers.c, visudo.c:
18812: Fully qualified hosts w/ wildcards were not matching the FQHOST
18813: token type. There's really no need for a separate token for fully-
18814: qualified vs. unqualified anymore so FQHOST is now history and
18815: hostname_matches now decides which hostname (short or long) to check
18816: based on whether or not the pattern contains a '.'.
18817: [fbd2887d9811]
18818:
18819: * parse.h:
18820: Fully qualified hosts w/ wildcards were not matching the FQHOST
18821: token type. There's really no need for a separate token for fully-
18822: qualified vs. unqualified anymore so FQHOST is now history and
18823: hostname_matches now decides which hostname (short or long) to check
18824: based on whether or not the pattern contains a '.'.
18825: [dd7bbe223461]
18826:
18827: * lex.yy.c, parse.c, parse.lex, parse.yacc:
18828: Fully qualified hosts w/ wildcards were not matching the FQHOST
18829: token type. There's really no need for a separate token for fully-
18830: qualified vs. unqualified anymore so FQHOST is now history and
18831: hostname_matches now decides which hostname (short or long) to check
18832: based on whether or not the pattern contains a '.'.
18833: [630d9d205397]
18834:
18835: * parse.c, parse.h, parse.yacc, sudo.tab.c, sudoers.cat,
18836: sudoers.man.in, sudoers.pod, testsudoers.c, visudo.c:
18837: Add support for wildcards in the hostname.
18838: [d8d821ed4238]
18839:
18840: * Makefile.in:
18841: Add targets for *.man.in, using config.status to generate *.man from
18842: *.man.in
18843: [640e50ede485]
18844:
18845: * sudoers.cat, sudoers.man.in, sudoers.pod:
18846: Document set_logname option and enbolden refs to sudo and visudo.
18847: [9622b3a48707]
18848:
18849: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.cat,
18850: sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
18851: visudo.cat, visudo.man.in, visudo.pod:
18852: Add FreeBSD login.conf support (untested on BSD/OS) based on a patch
18853: from Michael D. Marchionna. configure now does substitution on the
18854: man pages, allowing us to fix up the paths and set the section
18855: correctly. Based on an idea from Michael D. Marchionna.
18856: [463e928a0a2f]
18857:
18858: * auth/passwd.c:
18859: Better fix for handling HP-UX aging info.
18860: [3950f42d8549]
18861:
18862: * sudo.c:
18863: Add support for set_logname run-time default
18864: [c6a7cc76b8b4]
18865:
18866: * sudo.man.in, sudoers.man.in, visudo.man.in:
18867: configure does substitution on these to produce *.man
18868: [b83fc3c1bfc9]
18869:
18870: * sudo.man, sudoers.man, visudo.man:
18871: These files now get generated from *.man.in at configure time.
18872: [c499061f79e0]
18873:
18874: 2000-03-22 Todd C. Miller <Todd.Miller@courtesan.com>
18875:
18876: * defaults.c, defaults.h:
18877: Add set_logname option so users can turn off setting of LOGNAME/USER
18878: environment variables.
18879: [6316869180b8]
18880:
18881: * lsearch.c, parse.c, testsudoers.c:
18882: kill register
18883: [6e104e653748]
18884:
18885: 2000-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
18886:
18887: * auth/passwd.c:
18888: HP-UX adds extra info at the end for password aging so when
18889: comparing the result of crypt to pw_passwd we only compare the first
18890: len(epass) bytes *unless* the user entered an empty string for a
18891: password.
18892: [3d24d4e4e889]
18893:
18894: * logging.c:
18895: Get rid of grandchild hack, it was causing problems and there is
18896: really no need for it. This fixes a bug where we spin eating up CPU
18897: when the user runs a long-running process like a shell.
18898: [5743b10b1e81]
18899:
18900: 2000-03-07 Todd C. Miller <Todd.Miller@courtesan.com>
18901:
18902: * sudo.c:
18903: User can always specify a login class if he/she is already root.
18904: [710d160cef9f]
18905:
18906: * config.h.in, configure, configure.in, defaults.c, defaults.h,
18907: sudo.c, sudo.h:
18908: FreeBSD login class (login.conf) support.
18909: [026b981d6328]
18910:
18911: 2000-03-06 Todd C. Miller <Todd.Miller@courtesan.com>
18912:
18913: * auth/sudo_auth.c:
18914: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes secureware support
18915: [9cd4929f1a78]
18916:
18917: 2000-03-03 Todd C. Miller <Todd.Miller@courtesan.com>
18918:
18919: * auth/passwd.c:
18920: Truncate unencrypted password to 8 chars if encrypted password is
18921: exactly 13 characters (indicateing standard a DES password). Many
18922: versions of crypt() do this for you, but not all (like HP-UX's).
18923: [a9d0259cb193]
18924:
18925: 2000-03-02 Todd C. Miller <Todd.Miller@courtesan.com>
18926:
18927: * INSTALL, RUNSON:
18928: Mention that gcc on dynix may have problems
18929: [77b97fa5bf1b]
18930:
18931: 2000-02-29 Todd C. Miller <Todd.Miller@courtesan.com>
18932:
18933: * Makefile.in:
18934: Link visudo with NET_LIBS since we now call syslog via defaults.c
18935: [9e3830b277cc]
18936:
18937: * defaults.c:
18938: Use Argv[0] as the first arg to openlog() since visudo uses this
18939: too.
18940: [e61078f328ec]
18941:
18942: 2000-02-28 Todd C. Miller <Todd.Miller@courtesan.com>
18943:
18944: * sudo.c:
18945: Stash coredumpsize resource limit and retsore it before the exec()
18946: Otherwise the child ends up with a coredumpsize of 0.
18947: [f6a4783835a3]
18948:
18949: 2000-02-27 Todd C. Miller <Todd.Miller@courtesan.com>
18950:
18951: * sudo.cat, sudo.man, sudo.pod:
18952: document -S flag
18953: [3ebd805b7142]
18954:
18955: * sudo.c:
18956: fix usage string
18957: [66b2dfa47fe8]
18958:
18959: * CHANGES, RUNSON, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c,
18960: auth/sudo_auth.c, sudo.c, sudo.h, tgetpass.c:
18961: Added -S flag (read passwd from stdin) and tgetpass_flags global
18962: that holds flags to be passed in to tgetpass(). Change echo_off
18963: param to tgetpass() into a flags field. There are currently 2
18964: possible flags for tgetpass(): TGP_ECHO and TGP_STDIN. In
18965: tgetpass(), abstract the echo set/clear via macros and if (flags &
18966: TGP_ECHO) but echo is not set on the terminal, but sure to set it.
18967: [a4fcbb712cd0]
18968:
18969: * tgetpass.c:
18970: Fixed a bug that caused an infinite loop when the password timeout
18971: was disabled.
18972: [2be1ffc5a39f]
18973:
18974: 2000-02-18 Todd C. Miller <Todd.Miller@courtesan.com>
18975:
18976: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
18977: sudoers.cat, sudoers.man, sudoers.pod, visudo.c:
18978: Add rootpw, runaspw, and targetpw options.
18979: [2d4563e46df7]
18980:
18981: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
18982: visudo.c:
18983: enveditor -> env_editor
18984: [ddc5f856e583]
18985:
18986: 2000-02-16 Todd C. Miller <Todd.Miller@courtesan.com>
18987:
18988: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
18989: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h, visudo.cat,
18990: visudo.man:
18991: crank versino to 1.6.3
18992: [a5f7d3e74360]
18993:
18994: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
18995: sudoers.pod, visudo.c:
18996: Add 'editor' and 'enveditor' sudoers defaults and make visudo honor
18997: them. This means that visudo will now parse the sudoers file
18998: *before* it is edited so a bogus sudoers file will cause a warning
18999: to go to stderr. Also, visudo checks the variables once--it does not
19000: check them after each editor run since that could be confusing.
19001: [9f5af18e9212]
19002:
19003: 2000-02-15 Todd C. Miller <Todd.Miller@courtesan.com>
19004:
19005: * RUNSON:
19006: 1.6.2 -> 1.6.2p1
19007: [e25b74f1d1af]
19008:
19009: * check.c, sudo.c, sudo.h:
19010: Move user_is_exempt prototype into sudo.h
19011: [daf26a6ded8a]
19012:
19013: 2000-02-13 Todd C. Miller <Todd.Miller@courtesan.com>
19014:
19015: * configure, configure.in:
19016: Fix thinko, some && should have been || in the last commit
19017: [4b9b2d487ded]
19018:
19019: * configure, configure.in:
19020: Don't initialized Makefile variables to be NULL since the user may
19021: want to import variables from their environment.
19022: [7be019f4422c]
19023:
19024: 2000-02-04 Todd C. Miller <Todd.Miller@courtesan.com>
19025:
19026: * configure, configure.in:
19027: typo
19028: [38f4d8971f0a]
19029:
19030: 2000-01-28 Todd C. Miller <Todd.Miller@courtesan.com>
19031:
19032: * sudo.tab.c:
19033: fix a yacc (skeleton.c) warning
19034: [a2da228a937b]
19035:
19036: 2000-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
19037:
19038: * INSTALL, RUNSON, configure, configure.in:
19039: Make pam work on HP-UX 11.0;jaearick@colby.edu
19040: [b94de0ff6f42]
19041:
19042: * CHANGES:
19043: recent changes; prepare for 1.6.2p1
19044: [b291635ea141]
19045:
19046: * find_path.c:
19047: Don't apply SECURE_PATH if user is example; jmknoble@pobox.com
19048: [4306285c4f6e]
19049:
19050: 2000-01-26 Todd C. Miller <Todd.Miller@courtesan.com>
19051:
19052: * sudo.tab.c:
19053: Regen with yacc that has a memory leak plugged.
19054: [e26383a04eb7]
19055:
19056: * sudoers.cat, sudoers.man, sudoers.pod:
19057: Expanded docs on sudoers 'defaults' options based on INSTALL file
19058: info.
19059: [54c3d62d6c74]
19060:
19061: * INSTALL:
19062: Fix some while lies
19063: [d15311782150]
19064:
19065: 2000-01-24 Todd C. Miller <Todd.Miller@courtesan.com>
19066:
19067: * Makefile.in:
19068: When making a bindist, link FAQ to TROUBLESHOOTING instead of
19069: copying.
19070: [2d88a6ac88cf]
19071:
19072: * sudoers.cat, sudoers.man, sudoers.pod:
19073: Add netgroup caveat
19074: [28d119f466e3] [SUDO_1_6_2]
19075:
19076: * RUNSON:
19077: Last minute updates
19078: [89fb4ed22d52]
19079:
19080: * TROUBLESHOOTING:
19081: PAM entry
19082: [a9fd59f39457]
19083:
19084: * auth/pam.c:
19085: correct a comment
19086: [a29627225ba9]
19087:
19088: * CHANGES, RUNSON:
19089: update for 1.6.2
19090: [b7f1c40ea732]
19091:
19092: * auth/pam.c:
19093: Better detection of PAM errors and fix custom prompts with PAM.
19094: Based on patches from "Cloyce D. Spradling" <cloyce@headgear.org>
19095: [ff69234b94a5]
19096:
19097: 2000-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
19098:
19099: * snprintf.c:
19100: Cast ULONG_MAX to unsigned long long when comparing to an unsigned
19101: long long value.
19102: [9d918c3a2ecd]
19103:
19104: 2000-01-19 Todd C. Miller <Todd.Miller@courtesan.com>
19105:
19106: * CHANGES, config.h.in, configure, configure.in, visudo.c:
19107: Fix sudoers locking in visudo. We now lock the sudoers file itself,
19108: not the temp file (since locking the temp file can foul up editors).
19109: The previous locking scheme didn't work because the fd was closed
19110: too early.
19111: [de2011bb11ed]
19112:
19113: * config.h.in, configure, configure.in:
19114: Don't need test for ftruncate() any more.
19115: [e5f71c848104]
19116:
19117: * configure, configure.in:
19118: Add a test for the -Aa flag w/ HP-UX's cc. Fixes compilation with
19119: the unbundled HP-UX cc.
19120: [2c373612c644]
19121:
19122: 2000-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
19123:
19124: * sudoers.cat, sudoers.man, sudoers.pod:
19125: "a a" -> "a"; Aaron Campbell <aaron@cs.dal.ca>
19126: [05360d2c314e]
19127:
19128: 2000-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
19129:
19130: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
19131: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c, tgetpass.c,
19132: version.h, visudo.c:
19133: update copyright year on changed files
19134: [5792a2a28a4c]
19135:
19136: * RUNSON:
19137: updates
19138: [edf8f19aa403]
19139:
19140: * CHANGES:
19141: aix fix
19142: [4d4a243b31e2]
19143:
19144: * INSTALL:
19145: Crank version to 1.6.2
19146: [bcb5cb411624]
19147:
19148: * configure:
19149: Crank version to 1.6.2
19150: [32a19f33427f]
19151:
19152: * sudo.c:
19153: When using rlimit check for RLIM_INFINITY When computing the value
19154: of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
19155: [8c16166802e5]
19156:
19157: * CHANGES:
19158: recent changes
19159: [09fc7112e44d]
19160:
19161: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
19162: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
19163: Crank version to 1.6.2
19164: [055fa61a7c61]
19165:
19166: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod:
19167: Add 'shell_noargs' runtime option back in. We have to defer
19168: checking until after the sudoers file has been parsed but since
19169: there are now other options that operate that way this one can too.
19170: Based on a patch from bguillory@email.com.
19171: [231db7a007a6]
19172:
19173: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h:
19174: Add "listpw" and "verifypw" options.
19175: [190683bac878]
19176:
19177: * sudoers.cat, sudoers.man, sudoers.pod:
19178: o Fix some typos/omissions o Add section on verifypw and listpw o
19179: Define how NOPASSWD interacts with the -v and -l flags
19180: [6feb7350eb79]
19181:
19182: 2000-01-14 Todd C. Miller <Todd.Miller@courtesan.com>
19183:
19184: * configure, configure.in:
19185: For HP-UX cc, add -Aa to CPPFLAGS. For HP-UX always add
19186: -D_HPUX_SOURCE to CPPFLAGS.
19187: [06cc35d89dc8]
19188:
19189: * defaults.c, defaults.h:
19190: In struct sudo_defs_types, move the union to the end and don't
19191: initialize the union member since that only works with an ANSI
19192: compiler. We set the value of the union by hand in init_defaults()
19193: anyway. This allows sudo to compile on a K&R compiler again.
19194: [623487e1fcfa]
19195:
19196: 2000-01-11 Todd C. Miller <Todd.Miller@courtesan.com>
19197:
19198: * parse.c, parse.h, parse.yacc, sudo.tab.c, testsudoers.c, visudo.c:
19199: netgr_matches needs to check shost as well as host since they may be
19200: different.
19201: [3f43ace23d3e]
19202:
19203: * tgetpass.c:
19204: End on \r as well as \n
19205: [cb7c6e6f4202]
19206:
19207: 2000-01-03 Todd C. Miller <Todd.Miller@courtesan.com>
19208:
19209: * sudo.c:
19210: Update statbuf.st_mode based on SUDOERS_MODE when we are chaning
19211: from 0400 to whatever SUDOERS_MODE is (converting from the old
19212: sudoers mode). Assumes that SUDOERS_MODE is less restrictive than
19213: 0400 which should always be the case.
19214: [34cd83d49d20]
19215:
19216: * parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c:
19217: Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l
19218: w/o a passwd if there is *any* entry for the user on the host with a
19219: NOPASSWD flag. For -v, only allow w/o a passwd if *all* entries for
19220: the user on the host w/ the specified runas user have the NOPASSWD
19221: flag set.
19222: [4b3b85697653]
19223:
19224: * Makefile.in:
19225: add check target
19226: [3d24d34a76fd]
19227:
19228: 1999-12-16 Todd C. Miller <Todd.Miller@courtesan.com>
19229:
19230: * visudo.c:
19231: Treat EOF at whatnow prompt like 'x' instead of looping.
19232: [5deffc27114c]
19233:
19234: 1999-12-10 Todd C. Miller <Todd.Miller@courtesan.com>
19235:
19236: * CHANGES:
19237: recent changes
19238: [5836a9452568] [SUDO_1_6_1]
19239:
19240: 1999-12-09 Todd C. Miller <Todd.Miller@courtesan.com>
19241:
19242: * config.h.in, configure, configure.in, sudo.c:
19243: Add check for initgroups() since old SYSV lacks this.
19244: [657a6005a569]
19245:
19246: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure, configure.in,
19247: parse.c, testsudoers.c:
19248: o Kill HAVE_FNMATCH_H o Only define HAVE_FNMATCH if <fnmatch.h>
19249: exists.
19250: [17d081e917d6]
19251:
19252: 1999-12-06 Todd C. Miller <Todd.Miller@courtesan.com>
19253:
19254: * auth/sudo_auth.c:
19255: Don't allow insults to be enabled if the insults[] array is empty.
19256: Otherwise there would be division by zero.
19257: [b20c14db6029]
19258:
19259: * insults.h:
19260: Don't allow insults to be enabled if the insults[] array is empty.
19261: Otherwise there would be division by zero.
19262: [028f130204b0]
19263:
19264: * CHANGES, RUNSON:
19265: Don't allow insults to be enabled if the insults[] array is empty.
19266: Otherwise there would be division by zero.
19267: [974f4780254b]
19268:
19269: * insults.h:
19270: Don't care about USE_INSULTS #define since the insult stuff may be
19271: overridden at runtime.
19272: [b873df8b299c]
19273:
19274: * auth/sudo_auth.c:
19275: Honor insults flag.
19276: [756111640fdc]
19277:
19278: * CHANGES, parse.c:
19279: Don't ask the user for a password if the user is not allowed to run
19280: the command and the authenticate flag (in sudoers) is false.
19281: [cea9fdc09c76]
19282:
19283: * CHANGES, RUNSON, lex.yy.c, parse.lex:
19284: o Whenever we get a bare newline we change to the INITIAL state. o
19285: Enter GOTRUNAS when we see Runas_Alias
19286:
19287: This allows #uid to work in a RunasAlias.
19288: [a475513e7c7a]
19289:
19290: 1999-12-05 Todd C. Miller <Todd.Miller@courtesan.com>
19291:
19292: * CHANGES, parse.yacc, sudo.tab.c:
19293: fix parsing of runas lists: o oprunasuser and runaslist now return a
19294: value o in a runasspec, if a runaslist does not return TRUE, set
19295: runas_matches to FALSE. Normally, a runaslist only returns FALSE
19296: for explicitly denied users. o since runaslist does not modify the
19297: stack there is no need for a push/pop in runasalias.
19298: [82b305b34a8c]
19299:
19300: * check.c, sudo.c:
19301: Don't kill the user's tickets until after sudoers has been parsed
19302: since tty_tickets and ticket_dir could be set in sudoers.
19303: [f43e25367f3a]
19304:
19305: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
19306: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
19307: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man:
19308: crank version to 1.6
19309: [95f8bdcf9bb2]
19310:
19311: * testsudoers.c:
19312: add set_fqdn() stub
19313: [bbc81af5b41a]
19314:
19315: 1999-12-02 Todd C. Miller <Todd.Miller@courtesan.com>
19316:
19317: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
19318: sudoers.man, sudoers.pod, visudo.c:
19319: o Kill shell_noargs option, it cannot work since the command needs
19320: to be set before sudoers is parsed. o Fix the "set_home" sudoers
19321: option (only worked at compile time). o Fix "fqdn" sudoers option.
19322: We now set host/shost via set_fqdn which gets called when the
19323: "fqdn" option is set in sudoers. o Move the openlog() to
19324: store_syslogfac() so this gets overridden correctly from the
19325: sudoers file.
19326: [3dca861f0f5d]
19327:
19328: * auth/securid.c:
19329: SecurID support should compile now.
19330: [a544e5c6ea34]
19331:
19332: 1999-11-29 Todd C. Miller <Todd.Miller@courtesan.com>
19333:
19334: * sudo.cat, sudo.man, sudo.pod, sudoers.cat, sudoers.man, visudo.cat,
19335: visudo.man, visudo.pod:
19336: fix some syntactic goofs
19337: [b3451f0d5239]
19338:
19339: 1999-11-28 Todd C. Miller <Todd.Miller@courtesan.com>
19340:
19341: * Makefile.in, sudo.html, sudoers.html, visudo.html:
19342: No longer need the .html files as they are generated automatically
19343: on the web site.
19344: [1b4aa4204584]
19345:
19346: * CHANGES, LICENSE:
19347: kill characters that made wml unhappy
19348: [b988fbc6da56]
19349:
19350: * HISTORY:
19351: typo
19352: [a418963f7fce]
19353:
19354: 1999-11-25 Todd C. Miller <Todd.Miller@courtesan.com>
19355:
19356: * README:
19357: majordomo@cs.colorado.edu -> majordomo@courtesan.com
19358: [5d151e8ffd3b]
19359:
19360: * Makefile.in, configure:
19361: Wrap script execution w/ /bin/sh for the benefit of ctm
19362: [3a9c4766b2c3]
19363:
19364: 1999-11-24 Todd C. Miller <Todd.Miller@courtesan.com>
19365:
19366: * sudo.c:
19367: Make the -s flag be exclusive too. Also reorder the flags in the
19368: exclusive usage message so they are alphabetical.
19369: [4c7af200db34]
19370:
19371: 1999-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
19372:
19373: * auth/pam.c:
19374: make pam errors other than PAM_PERM_DENIED fatal
19375: [64bcb3fd2baf]
19376:
19377: * auth/API:
19378: fix typo
19379: [f3134c88b12e]
19380:
19381: * INSTALL:
19382: make it clear that /etc/pam.d/sudo is required on linux
19383: [213cc3eaad82]
19384:
19385: * auth/pam.c:
19386: fix a warning on redhat and spew an error if pam_authenticate()
19387: returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED
19388: [7e46dd19da89]
19389:
19390: * sudo.cat, sudo.html, sudo.man, sudo.pod:
19391: Be very clear that the password required is the user's not root's
19392: [a6da127347e5]
19393:
19394: 1999-11-20 Todd C. Miller <Todd.Miller@courtesan.com>
19395:
19396: * Makefile.in:
19397: add sample.syslog.conf to DISTFILES and BINFILES
19398: [8661c27c007e]
19399:
19400: 1999-11-19 Todd C. Miller <Todd.Miller@courtesan.com>
19401:
19402: * RUNSON:
19403: updates from Brian Jackson + some formatting
19404: [6d31c6fa63f8]
19405:
19406: 1999-11-18 Todd C. Miller <Todd.Miller@courtesan.com>
19407:
19408: * INSTALL.binary, Makefile.binary, README, RUNSON:
19409: o One RUNSon update o Changes for automating real binary releases
19410: [dd9585f4406c]
19411:
19412: * Makefile.in:
19413: Add bindist target
19414: [546ed3fa94bb]
19415:
19416: 1999-11-16 Todd C. Miller <Todd.Miller@courtesan.com>
19417:
19418: * TROUBLESHOOTING:
19419: talk about run-time options in addition to compile-time options
19420: [1eb813ff0a9a] [SUDO_1_6_0]
19421:
19422: * CHANGES:
19423: fix typos
19424: [65e92bb70a7b]
19425:
19426: * sudo.c:
19427: need sys/time.h if HAVE_SETRLIMIT
19428: [ce31655a8a60]
19429:
19430: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
19431: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod:
19432: get rid of references to sudo-bugs. Now mention the web site or the
19433: sudo@ alias
19434: [a9db861fd8c6]
19435:
19436: * sudoers.html:
19437: repair pod2html damage
19438: [62ece4277f1f]
19439:
19440: * RUNSON, TODO:
19441: Update for 1.6 release
19442: [98569c57ba2a]
19443:
19444: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
19445: Add warning about using ALL in a command context.
19446: [6c77685ab280]
19447:
19448: 1999-11-09 Todd C. Miller <Todd.Miller@courtesan.com>
19449:
19450: * visudo.c:
19451: Call yyrestart() on a parse error to reset the lexer state.
19452: [1370a27acdb2]
19453:
19454: * lex.yy.c, parse.lex:
19455: Don't need YY_FLUSH_BUFFER after all Move yyrestart() into visudo.c
19456: since it might not get called in yywrap if we get a parse error
19457: (and we only reread the file on error anyway).
19458: [37f4b449e28e]
19459:
19460: * lex.yy.c, parse.lex:
19461: Call YY_FLUSH_BUFFER macro in yywrap() to clean up any buffers that
19462: might still exist. Call yyrestart() instead of using the deprecated
19463: YY_NEW_FILE macro.
19464: [7d0d873046c6]
19465:
19466: * lex.yy.c, parse.lex:
19467: flex doesn't need %N table size declarations
19468: [268b020fd60a]
19469:
19470: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
19471: Mention what characters need to be escaped in names.
19472: [72ccbb6b0f31]
19473:
19474: 1999-11-08 Todd C. Miller <Todd.Miller@courtesan.com>
19475:
19476: * configure:
19477: regen
19478: [65827abb5c7b]
19479:
19480: * INSTALL:
19481: clarify Mac OS X entry
19482: [8da1549a71f5]
19483:
19484: * RUNSON:
19485: update
19486: [0cff8df7459f]
19487:
19488: * configure.in:
19489: o Use AC_MSG_ERROR throughout o Check syslog configure options for
19490: danity
19491: [4cb81e642e5c]
19492:
19493: 1999-11-05 Todd C. Miller <Todd.Miller@courtesan.com>
19494:
19495: * defaults.c:
19496: Fix printing of type T_MODE in dump_defaults()
19497: [a868bb6f5515]
19498:
19499: * strcasecmp.c:
19500: missing sys/types.h
19501: [ca694ca325b6]
19502:
19503: * INSTALL:
19504: Break out options that may be overridden at run time into their own
19505: section. Add a not about Max OS X and correct some lies.
19506: [d8bcfd120593]
19507:
19508: 1999-11-04 Todd C. Miller <Todd.Miller@courtesan.com>
19509:
19510: * CHANGES, config.h.in, configure, configure.in, sudo.c:
19511: o Now use getrlimit to find the highest fd when closing all non-std
19512: fd's o Turn off core dumps via setrlimit for the sake of paranoia
19513: [dd9f651b6def]
19514:
19515: * RUNSON:
19516: updates
19517: [f581841fe615]
19518:
19519: 1999-11-01 Todd C. Miller <Todd.Miller@courtesan.com>
19520:
19521: * CHANGES:
19522: updates
19523: [553baa1d44c7]
19524:
19525: * tgetpass.c:
19526: When read()'ing, do a single character at a time to be sure we don't
19527: go oast the newline.
19528: [907d33f55bb4]
19529:
19530: * sudo.c:
19531: For the sudo_root option, check against user_uid, not getuid() since
19532: at this point, ruid == euid == 0.
19533: [92d5c51939b4]
19534:
19535: * RUNSON:
19536: some updates
19537: [e3ed0c1f312b]
19538:
19539: * logging.h:
19540: Fix compilation problem when --with-logging=file was specified.
19541: This means that syslog is now required to build sudo but that should
19542: not be a problem. If it is it can be fixed trivially with a
19543: configure check for syslog() or syslog.h.
19544: [839a4b069190]
19545:
19546: * tgetpass.c:
19547: Make this work again for things like "sudo echo hi | more" where the
19548: tty gets put into character at a time mode. We read until we read
19549: end of line or we run out of space (similar to fgets(3)).
19550: [c8f746df2e63]
19551:
19552: 1999-10-20 Todd C. Miller <Todd.Miller@courtesan.com>
19553:
19554: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
19555: change ital to bold
19556: [f860978e530a]
19557:
19558: * RUNSON:
19559: update
19560: [9bcfbb405568]
19561:
19562: 1999-10-16 Todd C. Miller <Todd.Miller@courtesan.com>
19563:
19564: * defaults.c:
19565: Error out if syslog parameters are given without a value. For
19566: Ultrix or 4.2BSD "syslog" is allowed without a value since there are
19567: no facilities in the 4.2BSD syslog.
19568: [69e7a686f5f0]
19569:
19570: 1999-10-15 Todd C. Miller <Todd.Miller@courtesan.com>
19571:
19572: * defaults.c:
19573: Ignore the syslog facility for systems w/ old syslog like Ultrix.
19574: [5c250adbbb84]
19575:
19576: * TROUBLESHOOTING:
19577: people with "." early in their path can have problems running sudo
19578: from the build dir ;-)
19579: [20a1744a24a4]
19580:
19581: 1999-10-13 Todd C. Miller <Todd.Miller@courtesan.com>
19582:
19583: * sudo.cat, sudo.html, sudo.man, sudo.pod:
19584: Remove -r realm option
19585: [127caa537f95]
19586:
19587: * auth/kerb5.c, auth/sudo_auth.c, auth/sudo_auth.h, configure,
19588: configure.in, sudo.c:
19589: New krb5 code from Frank Cusack <fcusack@iconnet.net>.
19590: [7177a3893a62]
19591:
19592: * CHANGES:
19593: update to reality
19594: [766cfbb512d6]
19595:
19596: 1999-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
19597:
19598: * auth/fwtk.c:
19599: include <auth.h> to get function prototypes.
19600: [d6c7c12d09fe]
19601:
19602: * sudo.cat, sudo.html, sudo.man, sudo.pod:
19603: document -L flag
19604: [dc803e1ce0d7]
19605:
19606: 1999-10-11 Todd C. Miller <Todd.Miller@courtesan.com>
19607:
19608: * sudo.c:
19609: in set_perms(), always call setuid(0) before changing the ruid/euid
19610: so we always know it will succeed.
19611: [8cced1b862bf]
19612:
19613: * defaults.h:
19614: #undef T_FOO to avoid conflicts with system defines (like on
19615: ULTRIX).
19616: [d9f0aac092b0]
19617:
19618: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
19619: sudoers.pod:
19620: Docuement "Defaults" lines in /etc/sudoers. Still needs some
19621: fleshing out but this is a start.
19622: [521a1e629bbc]
19623:
19624: 1999-10-10 Todd C. Miller <Todd.Miller@courtesan.com>
19625:
19626: * use strtol, not strtoul since not everyone has not strtoul
19627: [988462f093cc]
19628:
19629: * defaults.c:
19630: use strtol, not strtoul since not everyone has not strtoul
19631: [fce835ce62e3]
19632:
19633: * lex.yy.c, parse.lex:
19634: last {WORD} rule should only apply in the INITIAL state
19635: [9b57570bfa83]
19636:
19637: * lex.yy.c, parse.lex:
19638: o Add support for escaped characters in the WORD macro o Modify
19639: fill() to squash escape chars
19640: [87572d59e4e0]
19641:
19642: * defaults.c, defaults.h:
19643: o Add T_PATH flag to allow simple sanity checks for default values
19644: that are supposed to be pathnames. o Fix a duplicate free when
19645: visudo finds an error.
19646: [bdc6855a6c6d]
19647:
19648: 1999-10-09 Todd C. Miller <Todd.Miller@courtesan.com>
19649:
19650: * defaults.c, defaults.h, logging.c:
19651: mail_if_foo -> mail_foo
19652: [cbee9415875d]
19653:
19654: 1999-10-08 Todd C. Miller <Todd.Miller@courtesan.com>
19655:
19656: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c:
19657: o Add requiretty option o Move O_NOCTTY to compat.h
19658: [65b8bf0e1795]
19659:
19660: * logging.c:
19661: The exit() in log_error() was mistakenly removed in a previous
19662: version. Put it back...
19663: [9473449130a4]
19664:
19665: 1999-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
19666:
19667: * INSTALL, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c,
19668: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c, check.c, config.h.in,
19669: configure, configure.in, defaults.c, defaults.h, find_path.c,
19670: getspwuid.c, logging.c, parse.yacc, sudo.c, sudo.tab.c:
19671: o Change defaults stuff to put the value right in the struct. o
19672: Implement mailer_flags o Store syslog stuff both in int and string
19673: form. Setting the string form magically updates the int version.
19674: o Add boolean attribute to strings where it makes sense to say !foo
19675: [4698953f9a36]
19676:
19677: * tgetpass.c:
19678: add O_NOCTTY when opening /dev/tty just in case
19679: [4c6d1d1bb300]
19680:
19681: 1999-10-06 Todd C. Miller <Todd.Miller@courtesan.com>
19682:
19683: * auth/API:
19684: cleanup function no longer takes a status arg
19685: [0819edbfe7f8]
19686:
19687: * INSTALL:
19688: the the
19689: [19aadb65ea28]
19690:
19691: 1999-09-15 Todd C. Miller <Todd.Miller@courtesan.com>
19692:
19693: * TODO, config.h.in, configure, configure.in, logging.c:
19694: Use strftime() instead of ctime() if it is available.
19695: [fb60ea63b514]
19696:
19697: 1999-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
19698:
19699: * defaults.c:
19700: fix copyright date
19701: [4a53b54aa72f]
19702:
19703: * RUNSON:
19704: update ReliantUNIX entry
19705: [de618a4f67d9]
19706:
19707: * defaults.c, defaults.h, logging.c:
19708: add log_year option
19709: [251a9e20568a]
19710:
19711: * configure, configure.in:
19712: add --without-sendmail to help output
19713: [93162f199902]
19714:
19715: * configure, configure.in:
19716: enforce an otctal arg for --with-suoders-mode
19717: [45e1b04ccad3]
19718:
19719: 1999-09-08 Todd C. Miller <Todd.Miller@courtesan.com>
19720:
19721: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, auth/aix_auth.c,
19722: auth/fwtk.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c, auth/sia.c,
19723: auth/sudo_auth.c, check.c, config.h.in, configure, configure.in,
19724: defaults.c, defaults.h, find_path.c, lex.yy.c, logging.c, parse.h,
19725: parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c, sudo.tab.h,
19726: testsudoers.c, version.c, visudo.c:
19727: Add support for "Defaults" line in sudoers to make configuration
19728: variables changable at runtime (and on a global, per-host and per-
19729: user basis). Both the names and the internal representation are
19730: still subject to change. It was necessary to make sudo_user.runas
19731: but a char ** instead of a char * since this value can be changed by
19732: a Defaults line. There is a similar (but more complicated) issue
19733: with sudo_user.prompt but it is handled differently at the moment.
19734:
19735: Add a "-L" flag to list the name of options with their descriptions.
19736: This may only be temporary.
19737:
19738: Move some prototypes to parse.h
19739:
19740: Be much less restrictive on what is allowed for a username.
19741: [f71abf7ba80c]
19742:
19743: * sample.syslog.conf:
19744: Add more info
19745: [e952e6f42d4d]
19746:
19747: 1999-09-04 Todd C. Miller <Todd.Miller@courtesan.com>
19748:
19749: * LICENSE, fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
19750: strcasecmp.c:
19751: UCB has dropped the advertising clause from their license.
19752: [a5602b36a341]
19753:
19754: 1999-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
19755:
19756: * auth/sudo_auth.h:
19757: move dce_verofy proto to correct section
19758: [972c815af558]
19759:
19760: * auth/dce.c:
19761: remove XXX
19762: [820631855be0]
19763:
19764: 1999-08-28 Todd C. Miller <Todd.Miller@courtesan.com>
19765:
19766: * emul/fnmatch.h:
19767: Add fnmatch() prototype
19768: [79e84576d92a]
19769:
19770: * fnmatch.c, parse.c, testsudoers.c:
19771: Move inclusion of emul/fnmatch.h to be after sudo.h for __P
19772: [1182c89fa811]
19773:
19774: * sudo.h:
19775: add strcasecmp proto
19776: [512d1d8a6a0c]
19777:
19778: * auth/sudo_auth.c:
19779: add check for case where there are no auth methods
19780: [e4af2b91b43e]
19781:
19782: * configure, configure.in:
19783: Define _XOPEN_EXTENDED_SOURCE on AIX and __USE_FIXED_PROTOTYPES__ on
19784: SunOS4 w/ gcc
19785: [746ce8bcec23]
19786:
19787: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c:
19788: include strings.h everywhere we include string.h
19789: [6f7d5d437e7b]
19790:
19791: * version.c:
19792: nicer output when showing auth methods
19793: [0eac4b977f9d]
19794:
19795: * version.c:
19796: Add support for SEND_MAIL_WHEN_NO_HOST
19797: [9f20a3a3fae6]
19798:
19799: * config.h.in, configure, configure.in:
19800: Add _GNU_SOURCE for Linux
19801: [c7bd8c511847]
19802:
19803: * lex.yy.c, parse.lex:
19804: fix definition of OCTECT
19805: [4af30e63244d]
19806:
19807: * configure, configure.in:
19808: aix_auth.o not authenticate.o
19809: [fe95dfb08df4]
19810:
19811: 1999-08-27 Todd C. Miller <Todd.Miller@courtesan.com>
19812:
19813: * sudo.c:
19814: Only block SIGINT, SIGQUIT, SIGTSTP (which can be generated from the
19815: keyboard). Since we run with ruid/euid == 0 the user can't really
19816: signal us in nasty ways.
19817: [a7f6487c0f48]
19818:
19819: * visudo.c:
19820: Don't need to worry about catching too many signals since we do
19821: locking on the tmp file. If a lockfile is really stale, it will be
19822: detected and overwritten.
19823: [28983db3e749]
19824:
19825: * INSTALL, Makefile.in:
19826: include auth/API in tarball
19827: [014991600252]
19828:
19829: * auth/sudo_auth.c:
19830: move memset() of plaintext pw outside of verify loop and only do the
19831: memset if we are *not* in standalone mode.
19832: [66f8e87567e2]
19833:
19834: * auth/sudo_auth.c, auth/sudo_auth.h:
19835: DCE is not a standalone method
19836: [34963e2d8a1b]
19837:
19838: * sudo.c:
19839: fix --enable-noargs-shell
19840: [4234062abbb0]
19841:
19842: * snprintf.c:
19843: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
19844: [c430b80454c6]
19845:
19846: * auth/fwtk.c, auth/sia.c:
19847: _cleanup() function returns an int.
19848: [d1a1cc071ec1]
19849:
19850: * auth/dce.c:
19851: there were still some return(0)'s hanging around, make them
19852: AUTH_FAILURE
19853: [1002aa1962c3]
19854:
19855: * parse.c:
19856: typo in comment
19857: [5abc410dbfd2]
19858:
19859: * version.c:
19860: add missing semicolon
19861: [a262283b52a5]
19862:
19863: * auth/sudo_auth.h:
19864: missing backslash
19865: [bf89f6bd2900]
19866:
19867: 1999-08-26 Todd C. Miller <Todd.Miller@courtesan.com>
19868:
19869: * CHANGES, config.h.in, configure, configure.in:
19870: Kill _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
19871: [f1a9bca0cf67]
19872:
19873: * Makefile.in:
19874: add parse.h to HDRS
19875: [a3d054987766]
19876:
19877: * Makefile.in, configure, configure.in:
19878: Kill VISUDO_LIBS and VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and
19879: LDFLAGS. Common libs go in LIBS, commong ld flags go in LDFLAGS and
19880: network libs like -lsocket, -lnsl go in NET_LIBS. This allows
19881: testsudoers to build on Solaris and is a bit cleaner in general.
19882: [4e6239e97002]
19883:
19884: * UPGRADE:
19885: mention ptmp -> sudoers.tmp
19886: [ec3baa0fe8a1]
19887:
19888: * config.h.in, configure, configure.in:
19889: Define _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
19890: [6f93dc7f39f5]
19891:
19892: * RUNSON:
19893: add 2 reports
19894: [ce0fcc00ee4e]
19895:
19896: * auth/kerb5.c:
19897: Minor changes, mostly cosmetic. verify_krb_v5_tgt() changed to
19898: return a value more like a system function
19899: [0dd56aa21424]
19900:
19901: * auth/dce.c:
19902: Add an XXX
19903: [58fc8562c212]
19904:
19905: * TODO:
19906: more things todo!
19907: [5a459d0cf339]
19908:
19909: * sample.sudoers:
19910: update based on what is in the man page
19911: [1a0477db96fa]
19912:
19913: * parse.yacc, sudo.tab.c:
19914: minor change to first line printed in -l mode
19915: [69eb57d96952]
19916:
19917: * sudo.cat, sudo.html, sudo.man, sudo.pod:
19918: rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
19919: standard and add "EXAMPLES" section
19920: [7e543335ebe1]
19921:
19922: * visudo.cat, visudo.html, visudo.man, visudo.pod:
19923: rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
19924: standard
19925: [f82d87ed65c2]
19926:
19927: * logging.c, parse.c, sudo.h:
19928: add FLAG_NO_CHECK
19929: [c7d69176a2d7]
19930:
19931: * lex.yy.c, parse.lex:
19932: make an OCTET really be limited to 0-255
19933: [6ee568dd6a02]
19934:
19935: * UPGRADE:
19936: mention timestamp changes
19937: [e44d5302bf60]
19938:
19939: * PORTING:
19940: cosmetic cleanup
19941: [36fa3a2664dd]
19942:
19943: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
19944: new sudoers(8) man page
19945: [e674d06283d0]
19946:
19947: 1999-08-24 Todd C. Miller <Todd.Miller@courtesan.com>
19948:
19949: * version.c:
19950: Update comments about syslog name tables
19951: [63830a782dcb]
19952:
19953: * CHANGES, LICENSE, Makefile.in, configure, configure.in, parse.yacc,
19954: strcasecmp.c, sudo.tab.c:
19955: include strcasecmp() for those without it
19956: [a0d8e2488bbc]
19957:
19958: * sample.sudoers:
19959: Use the : operator some more and fix a typo
19960: [18804c70da86]
19961:
19962: * HISTORY:
19963: update the history of sudo
19964: [9d9b3d5279b3]
19965:
19966: * parse.c, parse.lex, testsudoers.c:
19967: CIDR-style netmask support
19968: [768644467353]
19969:
19970: * CHANGES:
19971: recent changes
19972: [a4319e9d07cb]
19973:
19974: * sudo.tab.c, sudo.tab.h:
19975: these should be generated with byacc, not bison
19976: [f57b9489b752]
19977:
19978: * lex.yy.c:
19979: regen
19980: [522461f95dfa]
19981:
19982: * parse.h, parse.yacc, sudo.tab.c, sudo.tab.h:
19983: In "sudo -l" mode, the type of the stored (expanded) alias was not
19984: stored with the contents. This could lead to incorrect output if
19985: the sudoers file had different alias types with the same name.
19986: Normal parsing (ie: not in '-l' mode) is unaffected.
19987: [823fe2bc4b79]
19988:
19989: 1999-08-23 Todd C. Miller <Todd.Miller@courtesan.com>
19990:
19991: * configure, configure.in:
19992: define _XOPEN_SOURCE to get at crypt() proto on some systems
19993: [1b3769b86fb9]
19994:
19995: 1999-08-22 Todd C. Miller <Todd.Miller@courtesan.com>
19996:
19997: * snprintf.c:
19998: fix comment
19999: [fc1264df00f7]
20000:
20001: * tgetpass.c:
20002: don't need limits.h
20003: [f1631829af45]
20004:
20005: * snprintf.c:
20006: kill bogus reference to vfprintf
20007: [a0b99b25d389]
20008:
20009: * sample.sudoers, sudoers:
20010: better examples
20011: [b4d87ea64cc8]
20012:
20013: * snprintf.c:
20014: Add some const in the K&R defs. This is safe since we define const
20015: away if the compiler doesn't grok it.
20016: [614d6e83d45e]
20017:
20018: * aclocal.m4, configure:
20019: Better test for working long long support. Ultrix compiler supports
20020: basic long long but not all operations on them.
20021: [5da1508710ed]
20022:
20023: * aclocal.m4, auth/secureware.c, config.h.in, configure, getspwuid.c,
20024: snprintf.c, sudo.c:
20025: Add check for LONG_IS_QUAD #undef MAXINT before including
20026: hpsecurity.h to silence an HP-UX warning Check for U?LONG_LONG_MAX
20027: in snprintf.c and use LONG_IS_QUAD
20028: [a1f7993367fc]
20029:
20030: 1999-08-21 Todd C. Miller <Todd.Miller@courtesan.com>
20031:
20032: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
20033: snprintf.c:
20034: UCB-derived snprintf + asprintf support. Supports quads if the
20035: compiler does. No floating point yet, perhaps later...
20036: [0caf05aba945]
20037:
20038: 1999-08-20 Todd C. Miller <Todd.Miller@courtesan.com>
20039:
20040: * auth/API, auth/sudo_auth.c, auth/sudo_auth.h, check.c, find_path.c,
20041: goodpath.c, logging.c, parse.c, sudo.c:
20042: Run most of the code as root, not the invoking user. It doesn't
20043: really gain us anything to run as the user since an attacker can
20044: just have an setuid(0) in their egg. Running as root solves
20045: potential problems wrt signalling.
20046: [408e530dda01]
20047:
20048: * sudo.tab.c:
20049: regen
20050: [f8cfb37e37de]
20051:
20052: 1999-08-19 Todd C. Miller <Todd.Miller@courtesan.com>
20053:
20054: * logging.c, sudo.c:
20055: Don't wait for child to finish in log_error(), let the signal
20056: handler get it if we are still running, else let init reap it for
20057: us. The extra time it takes to wait lets the user know that mail is
20058: being sent.
20059:
20060: Install SIGCHLD handler in main() and for POSIX signals, block
20061: everything
20062: *except* SIGCHLD.
20063: [d2b6ab0ef3be]
20064:
20065: * INSTALL, config.h.in, configure, configure.in, logging.c, parse.c,
20066: parse.yacc, sudo.c, sudo.h:
20067: sudoers_lookup() now returns a bitmap instead of an int. This makes
20068: it possible to express things like "failed to validate because user
20069: not listed for this host". Some thigns that were previously
20070: VALIDATE_FOO are now FLAG_FOO. This may change later on.
20071:
20072: Reorganized code in log_auth() and sudo.c to deal with above
20073: changes.
20074:
20075: Safer versions of push/pushcp with in the do { ... } while (0) style
20076:
20077: parse.yacc now saves info on the stack to allow parse.c to determine
20078: if a user was listed, but not for the host he/she tried to run on.
20079:
20080: Added --with-mail-if-no-host option
20081: [63326cb01efc]
20082:
20083: 1999-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
20084:
20085: * parse.yacc, sudo.h, sudo.tab.c, visudo.c, visudo.cat, visudo.html,
20086: visudo.man, visudo.pod:
20087: o NewArgv and NewArgc don't need to be externally visible. o If
20088: pedantic > 1, it is a parse error. o Add -s (strict) option to
20089: visudo which sets pedantic to 2.
20090: [5d7d81b55cd5]
20091:
20092: * HISTORY, INSTALL:
20093: Just have sudo-bugs contact info in one place
20094: [e7f6588ea683]
20095:
20096: * sudo.cat, sudo.html, sudo.man, sudo.pod:
20097: Add BUGS section
20098: [6607d96ea510]
20099:
20100: * Makefile.in, configure, configure.in:
20101: Add testsudoers to default build target if --with-devel Don't clean
20102: generated parser files unless "distclean".
20103: [5827b769dc57]
20104:
20105: * parse.yacc, sudo.tab.c:
20106: In pedantic mode we need to save *all* the aliases, not just those
20107: that match, or we get spurious warnings.
20108: [24f5b1f0e1de]
20109:
20110: * TROUBLESHOOTING:
20111: reference samples.sylog.conf
20112: [11841668380a]
20113:
20114: 1999-08-14 Todd C. Miller <Todd.Miller@courtesan.com>
20115:
20116: * sample.syslog.conf:
20117: Sample entries for syslog.conf
20118: [0f7697d878a1]
20119:
20120: * CHANGES:
20121: recent changes
20122: [8bca8810c6bd]
20123:
20124: * auth/API, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
20125: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
20126: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
20127: auth/sudo_auth.c, auth/sudo_auth.h:
20128: In struct sudo_auth, turn need_root and configured into flags and
20129: add a flag to specify an auth method is running alone (the only
20130: one). Pass auth methods their sudo_auth pointer, not the data
20131: pointer. This allows us to get at the flags and tell if we are the
20132: only auth method. That, in turn, allows the method to be able to
20133: decide what should/should not be a fatal error. Currently only
20134: rfc1938 uses it this way, which allows us to kill the OTP_ONLY
20135: define and te hackery that went with it. With access to the
20136: sudo_auth struct, methods can also get at a string holding their
20137: cannonical name (useful in error messages).
20138: [b7e320fc6511]
20139:
20140: * INSTALL, Makefile.in, README, config.h.in, configure, configure.in,
20141: getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c,
20142: sudo.tab.h:
20143: o --with-otp deprecated, use --without-passwd instead o real
20144: dependencies in the Makefile o --with-devel option to enable yacc,
20145: lex, and -Wall o style -- "foo -> bar" becomes "foo->bar" o ALL goes
20146: back to being a token, not a string but don't leak memory o rename
20147: hsotspec -> host in parse.yacc
20148: [912c45226cb2]
20149:
20150: 1999-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
20151:
20152: * BUGS, CHANGES:
20153: recent changes
20154: [801fa6e55687]
20155:
20156: * auth/sudo_auth.c, configure, configure.in, interfaces.c, snprintf.c,
20157: sudo.c, sudo.h:
20158: o Digital UNIX needs to check for *snprintf() before -ldb is added
20159: to LIBS since -ldb includes a bogus snprintf(). o Add forward refs
20160: for struct mbuf and struct rtentry for Digital UNIX. o Reorder some
20161: functions in snprintf.c to fix -Wall o Add missing includes to fix
20162: more -Wall
20163: [8d207203e126]
20164:
20165: * INSTALL, auth/sudo_auth.c, check.c, config.h.in, configure,
20166: configure.in, parse.yacc, sudo.tab.c, testsudoers.c, version.c,
20167: visudo.c:
20168: o Add a "pedentic" flag to the parser. This makes sudo warn in
20169: cases where an alias may be used before it is defined. Only turned
20170: on for visudo and testsudoers. o Add --disable-authentication option
20171: that makes sudo not require authentication by default. The PASSWD
20172: tag can be used to require authentication for an entry. We no
20173: longer overload --without-passwd.
20174: [f307e09adf98]
20175:
20176: * lex.yy.c, parse.lex:
20177: Break 'WORD' regexp def into HOSTNAME and USERNAME. These days a
20178: username can contain just about anything so be very permissive. Also
20179: drop the unused \. punctuation.
20180: [06a50614ff89]
20181:
20182: 1999-08-09 Todd C. Miller <Todd.Miller@courtesan.com>
20183:
20184: * parse.yacc, sudo.tab.c:
20185: o add a 'val' element to aliasinfo struct and move -> parse.h o
20186: find_alias() now returns an aliasinfo * instead of boolean o
20187: add_alias() now takes a value parameter to store in the
20188: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
20189: return: 1) positive match 0) negative match (due to '!')
20190: -1) no match This means setting $$ explicitly in all cases, which I
20191: should have done in the first place. It also means that we always
20192: store a value that is != -1 and when we see a '!' we can set
20193: *_matches to !rv if rv != -1. The upshot of all of this is that '!'
20194: now works the way it should in lists and some of the rules are more
20195: uniform and sensible.
20196: [ad8e73b5d581]
20197:
20198: * Makefile.in:
20199: add parse.h dependency
20200: [4ccccd464d30]
20201:
20202: * parse.h:
20203: kill unused *_matched macros
20204: [02cba6dcb732]
20205:
20206: * parse.yacc:
20207: Allow a list of users as the first thing in a user spec, not just a
20208: single entry. This makes things more uniform, though it does allow
20209: you to write user specs that are hard to read.
20210: [3c4c91c508ca]
20211:
20212: * sudo.tab.c:
20213: parse.yacc
20214: [feca81881bb6]
20215:
20216: * configure:
20217: regen
20218: [6f247010bb3b]
20219:
20220: * configure.in:
20221: fix check for crypt() in libufc
20222: [82770736f4b0]
20223:
20224: 1999-08-07 Todd C. Miller <Todd.Miller@courtesan.com>
20225:
20226: * README:
20227: sudo-users list now exists
20228: [4716d2bb0bbf]
20229:
20230: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING:
20231: Update to reality.
20232: [1eda2d57e42a]
20233:
20234: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
20235: config.h.in, configure, configure.in, fileops.c, logging.c, sudo.h,
20236: version.c, visudo.c:
20237: o Move lock_file() and touch() into fileops.c so visudo can use them
20238: o Visudo now locks the sudoers temp file instead of bailing when the
20239: temp file already exists. This fixes the problem of stale temp
20240: files but it does *require* that you not try to put the temp file in
20241: a world-writable directory. This shoud not be an issue as the temp
20242: file should live in the same dir as sudoers. o Visudo now only
20243: installs the temp file as sudoers if it changed.
20244: [2517cd06c070]
20245:
20246: 1999-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
20247:
20248: * logging.c:
20249: add fcntl locking
20250: [c304adeaf515]
20251:
20252: * config.h.in, configure, configure.in, logging.c:
20253: Lock the log file.
20254: [d8652704fbdf]
20255:
20256: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
20257: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod:
20258: o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
20259: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP
20260: -> _PATH_SUDOERS_TMP
20261: [68cad8975807]
20262:
20263: 1999-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
20264:
20265: * INSTALL, check.c, config.h.in, configure, configure.in, version.c:
20266: o Kill *_MESSAGE and replace with NO_LECTURE o Add more things to
20267: root sudo -V config reporting
20268: [cdd2613a9dcf]
20269:
20270: * configure, configure.in:
20271: aix_auth.o not authenticate.o
20272: [d972e35f6730]
20273:
20274: * config.h.in:
20275: Add --with-goodpri and --with-badpri configure options to specify
20276: the syslog priority to use.
20277: [2595ae50ab86]
20278:
20279: * INSTALL, configure, configure.in, logging.h:
20280: Add --with-goodpri and --with-badpri configure options to specify
20281: the syslog priority to use.
20282: [8276ee9b2b49]
20283:
20284: * compat.h:
20285: kill crufty AIX stuff
20286: [a4f35ef9854e]
20287:
20288: * Makefile.in:
20289: Sigh, some versions of make (like Solaris's) don't deal with $< like
20290: I would expect. Both GNU and BSD makes get this right but... So, we
20291: just expand $< inline at the cost of some ugliness.
20292: [b1b456f8801f]
20293:
20294: * version.c:
20295: If the invoking user is root, sudo will now print configure info in
20296: -V mode. Currently just prints logging info, to be expanded later.
20297: [392f7ed99267]
20298:
20299: * logging.c, logging.h, sudo.c, sudo.h:
20300: o new defines for syslog facility and priority o use new
20301: print_version() functino for -V mode
20302: [78abc5142985]
20303:
20304: * check.c:
20305: Don't need version.c
20306: [db9a830ad893]
20307:
20308: * aclocal.m4, config.h.in, configure, configure.in:
20309: Add check for syslog facilities and priorities tables in syslog.h
20310: [b86213e5fc5c]
20311:
20312: * Makefile.in:
20313: o authenticate -> aix_auth o add version.c
20314: [44b6b9a8d0f5]
20315:
20316: * auth/sudo_auth.c:
20317: Missed a prompt -> user_prompt conversion
20318: [e4c60b1f210c]
20319:
20320: 1999-08-04 Todd C. Miller <Todd.Miller@courtesan.com>
20321:
20322: * TODO:
20323: sudo should lock its logfile
20324: [6d2830b28b07]
20325:
20326: * parse.yacc, sudo.tab.c:
20327: o Add '!' correctly when expanding Aliases. o Add shortcut macros
20328: for append() to make things more readable. o The separator in
20329: append() is now a string instead of a char. o In append(), only
20330: prepend the separator if the last char is not a '!'. This is a
20331: hack but it greatly simplifies '!' handling. o In -l mode, Runas
20332: lists and NOPASSWD/PASSWD tags are now inherited across entries in
20333: a list (matches current behavior). o Fix formatting in -l mode such
20334: that items in a list are separated by a space. Greatlt improves
20335: readability. o Space for name field in struct aliasinfo is now
20336: allocated dyanically instead of using a (big) buffer. o In
20337: add_alias(), only search the list once (lsearch instead of lfind +
20338: lsearch)
20339: [51f7e07addb9]
20340:
20341: * lex.yy.c, sudo.tab.c, sudo.tab.h:
20342: regen
20343: [5c19bb05dc21]
20344:
20345: * configure, configure.in:
20346: Solais pam doesn't require anye xtra setup
20347: [a25ba03d91d1]
20348:
20349: * parse.yacc:
20350: o Simpler '!' support now that the lexer deals with multiple !'s for
20351: us. o In the case of opFOO, have FOO give a boolean return value and
20352: set foo_matches in opFOO, not FOO. o Treat 'ALL' as a string since
20353: it gets fill()'d in parse.lex--fixes a small memory leak. In the
20354: long run it may be better to just fix parse.lex and make ALL back
20355: into a token. However, having it be a string is useful since it
20356: can be easily passed back to the parent rule if we so desire.
20357: [b3c64b443018]
20358:
20359: * parse.lex:
20360: o Remove some unnecessary backslashes o collapse multiple !'s by
20361: using !+ and checking if yyleng is even or odd. this allows us to
20362: simplify ! handling in parse.yacc
20363: [76330e8da8e3]
20364:
20365: * sudo.c:
20366: -u flag was being ignored
20367: [e30283207585]
20368:
20369: 1999-08-01 Todd C. Miller <Todd.Miller@courtesan.com>
20370:
20371: * Makefile.in:
20372: correct fix
20373: [a0e2377dec8f]
20374:
20375: * Makefile.in:
20376: work around pod2man stupididy
20377: [7c755640b67f]
20378:
20379: * Makefile.in:
20380: correct dependencies for .cat
20381: [5ed7b0653b68]
20382:
20383: * sudo.cat, sudo.man, visudo.cat, visudo.man:
20384: regen
20385: [b74510dd6a0a]
20386:
20387: * sudo.pod, visudo.pod:
20388: Add copyright Update to reality
20389: [188e9b046c15]
20390:
20391: * parse.c, sudo.c, sudo.h:
20392: rename validate() to the more descriptive sudoers_lookup()
20393: [7a1cb652f379]
20394:
20395: * auth/aix_auth.c:
20396: use tgetpass
20397: [b8ba5daec40a]
20398:
20399: 1999-07-31 Todd C. Miller <Todd.Miller@courtesan.com>
20400:
20401: * CHANGES:
20402: updates
20403: [e61460cdf4a0]
20404:
20405: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
20406: configure, configure.in, sudo.c:
20407: Sudo, not CU Sudo
20408: [9061b3573c0c]
20409:
20410: * LICENSE:
20411: add 4th term to license similar to term 5 in the apache license
20412: [92712e895afb]
20413:
20414: * emul/search.h, emul/utime.h:
20415: add 4th term to license similar to term 5 in the apache license
20416: [4f93a8b9396e]
20417:
20418: * auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c,
20419: auth/kerb5.c, auth/pam.c, auth/passwd.c, auth/rfc1938.c,
20420: auth/secureware.c, auth/securid.c, auth/sia.c, auth/sudo_auth.c,
20421: auth/sudo_auth.h, insults.h, interfaces.c, interfaces.h, lex.yy.c,
20422: logging.c, logging.h, parse.c, parse.h, parse.lex, parse.yacc,
20423: pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h, sudo.tab.c,
20424: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
20425: visudo.c:
20426: add 4th term to license similar to term 5 in the apache license
20427: [afae9f2bf9ec]
20428:
20429: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
20430: add 4th term to license similar to term 5 in the apache license
20431: [c389d3fdafac]
20432:
20433: * Makefile.in, alloc.c, check.c, compat.h, config.h.in, find_path.c,
20434: getspwuid.c, goodpath.c:
20435: add 4th term to license similar to term 5 in the apache license
20436: [969e63dbd38e]
20437:
20438: * LICENSE, aclocal.m4, auth/rfc1938.c, check.c, configure.in,
20439: insults.h, logging.c, sudo.c, sudo.h:
20440: there was a 1995 release too
20441: [5963fd89457a]
20442:
20443: 1999-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
20444:
20445: * CHANGES:
20446: updates
20447: [254b794f16ab]
20448:
20449: * check.c:
20450: Use dirs instead of files for timestamp. This allows tty and non-
20451: tty schemes to coexist reasonably. Note, however, that when you
20452: update a tty ticket, the mtime on the user dir gets updated as well.
20453: [44bfac32f799]
20454:
20455: * configure, configure.in:
20456: Fix getprpwnam() checking on SCO. Need to link with "-lprot -lx"
20457: when linking test program, not just -lprot. Also add check for
20458: getspnam(). The SCO docs indicate that /etc/shadow can be used but
20459: this may be a lie.
20460: [2ba21d36cc1e]
20461:
20462: 1999-07-24 Todd C. Miller <Todd.Miller@courtesan.com>
20463:
20464: * auth/API:
20465: first cut at auth API description
20466: [3d10df021eb8]
20467:
20468: 1999-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
20469:
20470: * auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c,
20471: auth/secureware.c, auth/securid.c, auth/sudo_auth.c,
20472: auth/sudo_auth.h:
20473: auth API change. There is now an init method that gets run before
20474: the main loop. This allows auth routines to differentiate between
20475: initialization that happens once vs. setup that needs to run each
20476: time through the loop.
20477: [76df1c0d3478]
20478:
20479: * auth/kerb5.c, logging.c:
20480: use easprintf() and evasprintf()
20481: [fd97d96dc12f]
20482:
20483: * alloc.c, sudo.h:
20484: add easprintf() and evasprintf(), error checking versions of
20485: asprintf() and vasprintf()
20486: [f54385de20b7]
20487:
20488: * TODO:
20489: remove 2 items. One done, one won't do.
20490: [64513b47bc7a]
20491:
20492: * lex.yy.c, sudo.tab.c:
20493: regen
20494: [4aa299de2752]
20495:
20496: * configure, sudo.cat, sudo.html, sudo.man, sudoers.html, visudo.cat,
20497: visudo.html, visudo.man:
20498: regen
20499: [553c0d1209be]
20500:
20501: * CHANGES:
20502: new changes
20503: [d7be00b7e36b]
20504:
20505: * sudo.pod:
20506: o Document -K flag and update meaning of -k flag. o BSD-style
20507: copyright o Document clearing of BIND resolver environment variables
20508: o Clarify bit about shared libs o suggest rc files create /tmp/.odus
20509: if your OS gives away files
20510: [4a4092be1455]
20511:
20512: * visudo.pod:
20513: BSD license
20514: [ad0bfd0a4630]
20515:
20516: * version.h:
20517: BSD-style copyright
20518: [ecc6479325be]
20519:
20520: * tgetpass.c:
20521: o BSD copyright o no need to block signals, we now do that in main()
20522: o cosmetic changes
20523: [61958beda7ab]
20524:
20525: * testsudoers.c, visudo.c:
20526: o BSD-style copyright o Use "struct sudo_user" instead of old
20527: globals. o some cometic cleanup
20528: [88c0c6924082]
20529:
20530: * sudo_setenv.c:
20531: BSD-style copyright
20532: [df20290129a0]
20533:
20534: * sudo.h:
20535: o BSD copyright o logging and parser bits moved to their own .h
20536: files o new "struct sudo_user" to encapsulate many of the old
20537: globals.
20538: [50fc86bf25cb]
20539:
20540: * sudo.c:
20541: o no longer contains sudo 1.1/1.2 code o BSD copyright o use new
20542: logging routines o simplified flow of control o BIND resolver
20543: additions to badenv_table
20544: [8c53f15bfcb0]
20545:
20546: * strerror.c:
20547: BSD-style copyright
20548: [7c906c3a82ac]
20549:
20550: * snprintf.c:
20551: Now compiles on more K&R compilers
20552: [07ab1d3231c7]
20553:
20554: * putenv.c:
20555: BSD-style copyright, cosmetic changes
20556: [c42371295881]
20557:
20558: * pathnames.h.in:
20559: BSD-style copyright
20560: [e5c34ebd4cf1]
20561:
20562: * parse.c, parse.h, parse.lex, parse.yacc:
20563: BSD-style copyright. Move parser-specific defines and structs into
20564: parse.h + other cosmetic changes
20565: [d3088efb6228]
20566:
20567: * logging.h:
20568: defines for logging routines
20569: [13147941c02d]
20570:
20571: * find_path.c, getspwuid.c, goodpath.c, interfaces.c:
20572: BSD-style copyright, cosmetic changes
20573: [e8205e91a4fa]
20574:
20575: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
20576: interfaces.h:
20577: BSD-style copyright
20578: [b9499da7cdce]
20579:
20580: * configure.in:
20581: o tgetpass.c is no longer optional o kill DCE_OBJS, add AUTH_OBJS o
20582: kill --disable-tgetpass o add --without-passwd o changes to fill in
20583: AUTH_OBJS for new auth api o check for strerror(), v?snprintf() and
20584: v?asprintf() o replace --with-AuthSRV with --with-fwtk
20585: [9a3f39b9c128]
20586:
20587: * config.h.in:
20588: BSD-style copyright. Remove USE_GETPASS and HAVE_UTIME_NULL. Add
20589: HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF, HAVE_VSNPRINTF,
20590: HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and NO_PASSWD
20591: [9a09054db53a]
20592:
20593: * compat.h:
20594: BSD-style copyright; Add S_IFLNK and MIN/MAX id they are missing.
20595: [25509c566975]
20596:
20597: * alloc.c:
20598: BSD-style copyright
20599: [4967be892363]
20600:
20601: * TROUBLESHOOTING:
20602: no more --with-getpass
20603: [afd5b670c196]
20604:
20605: * TODO:
20606: Take out things I've done...
20607: [375420c8270e]
20608:
20609: * README:
20610: Refer to LICENSE
20611: [c486c8db30f6]
20612:
20613: * PORTING:
20614: --with-getpass no longer exists
20615: [db48202df1bb]
20616:
20617: * Makefile.in:
20618: BSD-style copyright. Update to reflect reality wrt new files and
20619: new auth modules.
20620: [61a2ca7940fb]
20621:
20622: * INSTALL:
20623: Remove --with-AuthSRV and --disable-tgetpass. Add --with-fwtk and
20624: --without-passwd.
20625: [64e8f9e1c05e]
20626:
20627: * HISTORY:
20628: Update history a bit
20629: [df60c0a871b8]
20630:
20631: * COPYING, LICENSE:
20632: Now distributed under a BSD-style license
20633: [d1a184ccabe1]
20634:
20635: * auth/sudo_auth.c:
20636: o BSD-style copyright o Add support for NO_PASSWD/WITHOUT_PASSWD
20637: options. o skey/opie replaced by rfc1938 code o new struct sudo_user
20638: global
20639: [891b57060868]
20640:
20641: * auth/pam.c, auth/sia.c:
20642: BSD-style copyright and use new log functions
20643: [65c44445ea84]
20644:
20645: * auth/kerb5.c:
20646: o BSD-style copyright o Use new log functiongs o Use asprintf() and
20647: snprintf() where sensible.
20648: [1ff0feaacf95]
20649:
20650: * check.c:
20651: Rewrote all the old sudo 1.1/1.2 code. Timestamp handling is now
20652: done more reasonably--better sanity checks and tty-based stamps are
20653: now done as files in a directory with the same name as the invoking
20654: user, eg. /var/run/sudo/millert/ttyp1. It is not currently possible
20655: to mix tty and non-tty based ticket schemes but this may change in
20656: the future (it requires sudo to use a directory instead of a file in
20657: the non-tty case). Also, ``sudo -k'' now sets the ticket back to
20658: the epoch and ``sudo -K'' really deletes the file. That way you
20659: don't get the lecture again just because you killed your ticket in
20660: .logout. BSD-style copyright now.
20661: [ec3460f85be8]
20662:
20663: * logging.c:
20664: o rewritten logging routines. log_error() now takes printf-style
20665: varargs and log_auth() for the return value of validate(). o BSD-
20666: style copyright
20667: [438292025c4e]
20668:
20669: * auth.c, check_sia.c, dce_pwent.c, secureware.c:
20670: superceded by new auth API
20671: [412060590da7]
20672:
20673: * auth/kerb4.c:
20674: BSD-style copyright
20675: [cc4e800833c7]
20676:
20677: * auth/fwtk.c:
20678: Use snprintf() where it makes sense and add a BSD-style copyright
20679: [1b7502388a74]
20680:
20681: * auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/passwd.c,
20682: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sudo_auth.h:
20683: BSD-style copyright
20684: [42583bedae5c]
20685:
20686: * emul/utime.h, utime.c:
20687: BSD-style copyright
20688: [3985c90aba47]
20689:
20690: * emul/search.h:
20691: this has been rewritten so use my BSD-style copyright
20692: [176df1b0de6f]
20693:
20694: 1999-07-15 Todd C. Miller <Todd.Miller@courtesan.com>
20695:
20696: * snprintf.c:
20697: include malloc.h if no stdlib.h
20698: [7b123f1d1d03]
20699:
20700: * snprintf.c:
20701: KTH snprintf()/asprintf() for systems w/o them
20702: [3ca9aefb9d01]
20703:
20704: * strerror.c:
20705: strerror() for systems w/o it
20706: [7f0bd8a1c1b4]
20707:
20708: 1999-07-12 Todd C. Miller <Todd.Miller@courtesan.com>
20709:
20710: * visudo.c:
20711: stylistic changes
20712: [6f99aceb7170]
20713:
20714: * parse.c, parse.lex, parse.yacc:
20715: Add contribution info in the main comment
20716: [e50cec10acd6]
20717:
20718: 1999-07-11 Todd C. Miller <Todd.Miller@courtesan.com>
20719:
20720: * auth/pam.c:
20721: remove missed ref to PAM_nullpw
20722: [a43e59692cdb]
20723:
20724: * auth/sudo_auth.h:
20725: pasto
20726: [891ff138ab89]
20727:
20728: * auth/kerb5.c:
20729: more or less complete now--still untested
20730: [21036732faa0]
20731:
20732: * auth/afs.c, auth/pam.c:
20733: don't use user_name macro, it will go away
20734: [def7cf727349]
20735:
20736: * auth/opie.c, auth/rfc1938.c, auth/skey.c, auth/sudo_auth.h:
20737: combine skey/opie code into rfc1938.c
20738: [44d88ca93d3e]
20739:
20740: * auth/dce.c, auth/sudo_auth.h:
20741: DCE authentication method; basically unchanged from dce_pwent.c
20742: [4d468473dd6f]
20743:
20744: * auth/aix_auth.c, auth/sudo_auth.h:
20745: AIX authenticate() support. Could probably be much better
20746: [000013321a33]
20747:
20748: * auth/sia.c:
20749: Fix an uninitialized variable and some cleanup. Now works (tested)
20750: [fd6ad88ff055]
20751:
20752: * auth/sia.c, auth/sudo_auth.h:
20753: SIA support for digital unix
20754: [5335f3e70eab]
20755:
20756: * auth/pam.c:
20757: don't use prompt global, it will go away
20758: [fadd22dd6ce4]
20759:
20760: * auth/secureware.c:
20761: correct copyright years
20762: [6aa07c49f51b]
20763:
20764: * auth/afs.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/opie.c,
20765: auth/pam.c, auth/passwd.c, auth/secureware.c, auth/securid.c,
20766: auth/skey.c, auth/sudo_auth.c, auth/sudo_auth.h:
20767: New authentication API and methods
20768: [9debe9b59c79]
20769:
20770: 1999-07-08 Todd C. Miller <Todd.Miller@courtesan.com>
20771:
20772: * sudo.tab.c:
20773: regen
20774: [84578e82c1a6]
20775:
20776: * parse.yacc:
20777: only save an entry if user_matches && host_matches, even if the
20778: stack is empty (fix for previous commit)
20779: [00984b078d8a]
20780:
20781: * sudo.tab.c:
20782: regen
20783: [66acf160b4b7]
20784:
20785: * parse.yacc:
20786: 1) Always save an entry on the stack if it is empty. This fixes the
20787: -l and -v flags that were broken by earlier parser changes.
20788:
20789: 2) In a Runas list, don't negate FALSE -> TRUE since that would make
20790: !foo match any time the user specified a runas user (via -u) other
20791: than foo.
20792: [f322eb54b015]
20793:
20794: * testsudoers.c:
20795: interfaces and num_interfaces are now auto, not extern
20796: [113add5c6518]
20797:
20798: 1999-07-07 Todd C. Miller <Todd.Miller@courtesan.com>
20799:
20800: * auth.c:
20801: use a static global to keep stae about empty passwords
20802: [bc02e30807d8]
20803:
20804: * check_sia.c:
20805: make PASSWORD_NOT_CORRECT logging consistent with other modules
20806: [21962549d5fd]
20807:
20808: 1999-07-05 Todd C. Miller <Todd.Miller@courtesan.com>
20809:
20810: * auth.c:
20811: PAM prompt code was wrong, looks like we have to kludge it after
20812: all.
20813: [91f246155ead]
20814:
20815: * auth.c:
20816: In the PAM code, when a user hits return at the first password
20817: prompt, exit without a warning just like the normal auth code
20818: [918f59bacdb7]
20819:
20820: * configure, configure.in:
20821: kludge around cross-compiler false positives
20822: [5e5fc8356400]
20823:
20824: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c:
20825: New (correct) PAM code Tgetpass now takes an echo flag for use with
20826: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
20827: useless umask setting Change error from BAD_ALLOCATION ->
20828: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to auth.c
20829: for consistency
20830: [e71397f09dd8]
20831:
20832: * sudo.c:
20833: Some -Wall and kill some trailing spaces
20834: [8229b43d5c4e]
20835:
20836: * configure.in:
20837: define -D__EXTENSIONS__ for solaris so we get crypt() proto
20838: [7533e4436cab]
20839:
20840: 1999-06-22 Todd C. Miller <Todd.Miller@courtesan.com>
20841:
20842: * RUNSON:
20843: add Dynix 4.4.4
20844: [b69f773efbce]
20845:
20846: * INSTALL, config.h.in, configure, configure.in:
20847: for kerberos V < version, fall back on old kerb4 auth code
20848: [d685ed3a1d8e]
20849:
20850: * INSTALL:
20851: clarify some things
20852: [2f5ba2e8e53a]
20853:
20854: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod:
20855: typos
20856: [8925a109c093]
20857:
20858: 1999-06-14 Todd C. Miller <Todd.Miller@courtesan.com>
20859:
20860: * sudo.c:
20861: mention why DONT_LEAK_PATH_INFO is not the default
20862: [0346260cb4ec]
20863:
20864: 1999-06-03 Todd C. Miller <Todd.Miller@courtesan.com>
20865:
20866: * tgetpass.c:
20867: Fix open(2) return value checking, was NULL for fopen, should be -1
20868: for open
20869: [355878bf6d8a]
20870:
20871: * configure:
20872: regen
20873: [68bf82871862]
20874:
20875: * configure.in:
20876: better wording for solaris pam notice
20877: [04e88c7a6c42]
20878:
20879: * CHANGES:
20880: document recent changes
20881: [7c922c5622ef]
20882:
20883: * TROUBLESHOOTING:
20884: Update shadow password section
20885: [e8448bae7d66]
20886:
20887: * auth.c:
20888: move authentication code from check.c to auth.c
20889: [e9f6ecae2399]
20890:
20891: * Makefile.in, check.c, sudo.h:
20892: move authentication code to auth.c
20893: [124cded85f46]
20894:
20895: 1999-05-17 Todd C. Miller <Todd.Miller@courtesan.com>
20896:
20897: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
20898: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
20899: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
20900: sudo.h, sudo.tab.c, sudo_setenv.c, testsudoers.c, tgetpass.c,
20901: visudo.c:
20902: Move interface-related defines to interfaces.h so we don't have to
20903: include <netinet/in.h> everywhere.
20904: [e7599d8ea0bf]
20905:
20906: 1999-05-14 Todd C. Miller <Todd.Miller@courtesan.com>
20907:
20908: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c, logging.c,
20909: parse.yacc, sudo.c, sudo.tab.c, tgetpass.c:
20910: o Replace _PASSWD_LEN braindeath with our own SUDO_MAX_PASS. It
20911: turns out the old DES crypt does the right thing with passwords
20912: longert than 8 characters. o Fix common typo (necesary ->
20913: necessary) o Update TODO list
20914: [ad75007a6f13]
20915:
20916: 1999-05-03 Todd C. Miller <Todd.Miller@courtesan.com>
20917:
20918: * sudo.c:
20919: set $LOGNAME when we set $USER
20920: [391596210fd7]
20921:
20922: 1999-04-27 Todd C. Miller <Todd.Miller@courtesan.com>
20923:
20924: * INSTALL:
20925: add comment about digital unix and interfaces.c warning with gcc
20926: [e20f815901cc]
20927:
20928: 1999-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
20929:
20930: * sample.sudoers:
20931: use modern paths and give examples for some of the new parser
20932: features
20933: [e7b2e507c695]
20934:
20935: 1999-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
20936:
20937: * parse.c:
20938: fix comment
20939: [5eb0d005a65f]
20940:
20941: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
20942: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c, parse.c,
20943: parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c, sudo.tab.c,
20944: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
20945: Function names should be flush with the start of the line so they
20946: can be found trivially in an editor and with grep
20947: [3c400abde574]
20948:
20949: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex, parse.yacc,
20950: sudo.c, sudo.tab.c, testsudoers.c, tgetpass.c, visudo.c:
20951: free(3) is already void, no need to cast it
20952: [6981e1ebda0f]
20953:
20954: * logging.c, sudo.c, sudo.h:
20955: catch case where cmnd_safe is not set (this should not be possible)
20956: [3e1e3038546c]
20957:
20958: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c,
20959: testsudoers.c, visudo.c:
20960: Stash the "safe" path (ie: the one listed in sudoers) to the command
20961: instead of stashing the struct stat. Should be safer.
20962: [aa2883fcf57e]
20963:
20964: 1999-04-08 Todd C. Miller <Todd.Miller@courtesan.com>
20965:
20966: * INSTALL, Makefile.in, UPGRADE:
20967: notes on updating from an earlier release
20968: [df9fffa4ab2c]
20969:
20970: * CHANGES:
20971: updated
20972: [574f5065d15a]
20973:
20974: 1999-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
20975:
20976: * parse.yacc, sudo.tab.c, sudo.tab.h, sudoers.cat, sudoers.html,
20977: sudoers.man, sudoers.pod:
20978: You can now specifiy a host list instead of just a host or alias.
20979: Ie: user = host1,host2,ALIAS,!host3 my_command now works.
20980: [e3942bb78021]
20981:
20982: * testsudoers.c:
20983: Quiet -Wall
20984: [a3edc8b08c3a]
20985:
20986: * parse.yacc, sudo.tab.c:
20987: Move the push from the beginning of cmndspec to the end. This means
20988: we no longer have to do a push at the end of privilege, just reset
20989: some values.
20990: [8ea66e5860c6]
20991:
20992: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
20993: runas-lists and NOPASSWD/PASSWD modifiers are now sticky and you can
20994: use "!" most everywhere
20995: [aadae4d1c9d5]
20996:
20997: 1999-04-06 Todd C. Miller <Todd.Miller@courtesan.com>
20998:
20999: * sudoers.pod:
21000: modernize paths and update su example based on sample.sudoers one
21001: [3f6a37e16c83]
21002:
21003: * sample.sudoers:
21004: New runas semantics
21005: [756ee92865b7]
21006:
21007: * CHANGES, Makefile.in, alloc.c, config.h.in, configure, configure.in,
21008: strdup.c, sudo.h:
21009: In estrdup(), do the malloc ourselves so we don't need to rely on
21010: the system strdup(3) which may or may not exist. There is now no
21011: need to provide strdup() for those w/o it. Also, the prototype for
21012: estrdup() was wrong, it returns char * and its param is const.
21013: [5f1f984da8e3]
21014:
21015: * getcwd.c:
21016: $Sudo tag
21017: [e4188a35e68c]
21018:
21019: * check.c:
21020: buf should be prompt; Michael Robokoff <mrobo@networkcs.com>
21021: [2aec87c86cde]
21022:
21023: * CHANGES, TODO, parse.yacc, sudo.tab.c:
21024: It is now possible to use the '!' operator in a runas list as well
21025: as in a Cmnd_Alias, Host_Alias and User_Alias.
21026: [a4fdaabda990]
21027:
21028: * logging.c, sudo.h:
21029: Kill GLOBAL_NO_SPW_ENT (not used) and crank GLOBAL_PROBLEM
21030: [73d0376785ae]
21031:
21032: * sudo.h:
21033: Definitions of *_matched were wrong--user top, not top-2 as
21034: subscript.
21035: [5f8350a57362]
21036:
21037: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c:
21038: Add VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
21039: command but the NOPASSWD flag was set. Make runasspec, runaslist,
21040: runasuser, and nopasswd typeless in parse.yacc Add support for '!'
21041: in the runas list Fix double printing of '%' and '+' for groups and
21042: netgroups respectively Add *_matched macros (no need for local stack
21043: variable). Should only be used directly after a pop (since top must
21044: be >= 2).
21045: [392b1400c4e6]
21046:
21047: * aclocal.m4, configure.in:
21048: Add copyright, somewhat silly
21049: [55c2cdd82dca]
21050:
21051: 1999-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
21052:
21053: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c, check_sia.c,
21054: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
21055: emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
21056: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
21057: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
21058: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
21059: sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat, sudoers.man,
21060: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c, visudo.cat,
21061: visudo.man:
21062: Crank version to 1.6 and combine copyright statements
21063: [0e1c791658ae]
21064:
21065: * sample.sudoers:
21066: Use ! not ^ to do negation
21067: [1480a0761730]
21068:
21069: * lex.yy.c, sudo.tab.c:
21070: regen
21071: [89ca5a46684b]
21072:
21073: * parse.lex, parse.yacc:
21074: Make runas and NOPASSWD tags persistent across entris in a command
21075: list. Add a PASSWD tag to reverse NOPASSWD. When you override a
21076: runas or *PASSWD tag the value given becomes the new default for the
21077: rest of the command list.
21078: [f1bbb4066542]
21079:
21080: 1999-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
21081:
21082: * CHANGES, RUNSON:
21083: update for 1.5.9
21084: [a1ae9d4a7d54] [SUDO_1_5_9]
21085:
21086: * visudo.c:
21087: Shift return value of system(3) by 8 to get real exit value and if
21088: it is not 1 or 0 print the retval along with the error message.
21089: [c1ff50d743fb]
21090:
21091: 1999-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
21092:
21093: * Makefile.in:
21094: testsudoers needs LIBOBJS too
21095: [972571b4e4bf]
21096:
21097: * parse.c, parse.yacc, sudo.tab.c:
21098: Fix another parser bug. For a sudoers entry like this: millert
21099: ALL=/bin/ls,(daemon) !/bin/ls sudo would not allow millert to run ls
21100: as root.
21101: [51968e1eb33d]
21102:
21103: * CHANGES:
21104: new change
21105: [271c6110bb62]
21106:
21107: * parse.yacc, sudo.tab.c:
21108: Save entries that match a ! command on the matching stack too
21109: [5afb5107116c]
21110:
21111: * sudo.c:
21112: Make sudo's usage info better when mutually exclusive args are given
21113: and don't rely on argument order to detect this; nick@zeta.org.au
21114: [2422753c88fd]
21115:
21116: 1999-03-29 Todd C. Miller <Todd.Miller@courtesan.com>
21117:
21118: * CHANGES, Makefile.in, RUNSON:
21119: updates from CU
21120: [b37381e3dafb]
21121:
21122: * Makefile.in:
21123: use gzip
21124: [94a64e52a166]
21125:
21126: * parse.yacc, sudo.tab.c:
21127: Fix off by one error introduced in *alloc changes
21128: [95ede581153a]
21129:
21130: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
21131: check_sia.c, compat.h, config.h.in, configure, configure.in,
21132: dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c,
21133: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
21134: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
21135: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat,
21136: sudo.h, sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat,
21137: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
21138: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod:
21139: ++version
21140: [c6d88f024e37]
21141:
21142: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
21143: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
21144: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo.tab.c,
21145: sudo_setenv.c, testsudoers.c, utime.c, visudo.c:
21146: Use emalloc/erealloc/estrdup
21147: [44221d97361a]
21148:
21149: * alloc.c:
21150: error checking memory allocation routines
21151: [5f8c1e7bbc71]
21152:
21153: * parse.yacc, sudo.tab.c:
21154: Still not right, this fixes it for real
21155: [ad553b6f5339]
21156:
21157: * parse.yacc, sudo.tab.c:
21158: Fix for previous commit
21159: [4d6f989f9bf2]
21160:
21161: * CHANGES, INSTALL, parse.yacc:
21162: Fix a parser bug that was exposed when mixing different runas specs
21163: and ! commands. For example: millert ALL=(daemon)
21164: /usr/bin/whoami,!/bin/ls would allow millert to run whoami as root
21165: as well as daemon when it should just allow daemon. The problem was
21166: that comma-separated commands in a list shared the same entry on the
21167: matching stack. Now they get their own entry iff there is a full
21168: match. It may be better to just make the runas spec persistent
21169: across all commands in a list like the user and host entries of the
21170: matching stack. However, since that is a fairly major change it
21171: should gets its own minor rev increase.
21172: [c4b939cdcc8e]
21173:
21174: 1999-03-28 Todd C. Miller <Todd.Miller@courtesan.com>
21175:
21176: * check.c, config.h.in:
21177: Simplify PAM code and fix a PAM-related warning on Linux
21178: [2468399523b6]
21179:
21180: 1999-03-26 Todd C. Miller <Todd.Miller@courtesan.com>
21181:
21182: * CHANGES:
21183: updates
21184: [29d4a997769c]
21185:
21186: * sample.sudoers:
21187: better su entry
21188: [76d8285a72ba]
21189:
21190: * configure:
21191: regen
21192: [b7450cc6975d]
21193:
21194: * check.c, configure.in:
21195: new pam code that works on solaris, should work on linux too;
21196: aelberg@home.com
21197: [84c16c0ff259]
21198:
21199: 1999-03-19 Todd C. Miller <Todd.Miller@courtesan.com>
21200:
21201: * RUNSON:
21202: more entries
21203: [b6bef8660759]
21204:
21205: * config.h.in:
21206: only include strings.h if there is no string.h
21207: [b66054a32b00]
21208:
21209: 1999-03-17 Todd C. Miller <Todd.Miller@courtesan.com>
21210:
21211: * config.guess:
21212: Sinix is now being called ReliantUNIX; bjjackso@us.oracle.com
21213: [c086d2fe63af]
21214:
21215: 1999-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
21216:
21217: * sudo.c:
21218: shost must be set before log functions are called #ifdef HOST_IN_LOG
21219: [d49a7944358f]
21220:
21221: 1999-03-07 Todd C. Miller <Todd.Miller@courtesan.com>
21222:
21223: * CHANGES, lex.yy.c, parse.lex:
21224: Fix a bug wrt quoting characters in command args. Stop processing
21225: an arg when you hit a backslash so the quoted-character detection
21226: can catch it.
21227: [2281438d7f41]
21228:
21229: 1999-02-26 Todd C. Miller <Todd.Miller@courtesan.com>
21230:
21231: * interfaces.c:
21232: include sys/time.h; aparently AIX needs it. ppz@cdu.elektra.ru
21233: [31118a9e9916]
21234:
21235: 1999-02-24 Todd C. Miller <Todd.Miller@courtesan.com>
21236:
21237: * configure, configure.in:
21238: add missing case statement so --without-sendmail works
21239: [ca25614f7dd9]
21240:
21241: 1999-02-23 Todd C. Miller <Todd.Miller@courtesan.com>
21242:
21243: * CHANGES:
21244: more
21245: [4d70e44f7f93]
21246:
21247: 1999-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
21248:
21249: * configure, configure.in:
21250: only search for -lsun in irix <= 4.x
21251: [e604238317b1]
21252:
21253: * configure, configure.in:
21254: back out last configure.in change now that I've hacked autoconf to
21255: fix the real problem and add a missing newline
21256: [2dabf59a79b5]
21257:
21258: * CHANGES:
21259: updated
21260: [bb35d526552f]
21261:
21262: * getcwd.c:
21263: add def of dirfd() for those without it
21264: [95f0173d8441]
21265:
21266: * configure, configure.in:
21267: When falling back to checking for socket() when linking with
21268: "-lsocket -lnsl" check for main() instead since autoconf has already
21269: cached the results of checking for socket() in -lsocket. This is
21270: really an autoconf bug as it should use the extra libs as part of
21271: the cache variable name.
21272: [a845f8b710ad]
21273:
21274: * configure.in:
21275: typo
21276: [a7d62f62a478]
21277:
21278: 1999-02-21 Todd C. Miller <Todd.Miller@courtesan.com>
21279:
21280: * configure.in:
21281: fix occurrence of $with_timeout that should be
21282: $with_password_timeout; Michael.Neef@neuroinformatik.ruhr-uni-
21283: bochum.de
21284: [8c4da2cf73d1]
21285:
21286: 1999-02-17 Todd C. Miller <Todd.Miller@courtesan.com>
21287:
21288: * sudo.cat, sudo.html, sudo.man, sudo.pod:
21289: fix grammar; espie@openbsd.org
21290: [7031d9dfbc3e] [SUDO_1_5_8]
21291:
21292: 1999-02-11 Todd C. Miller <Todd.Miller@courtesan.com>
21293:
21294: * parse.yacc, sudo.c, testsudoers.c:
21295: add cast for strdup in places it does not have it
21296: [7ce4478d3b0f]
21297:
21298: 1999-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
21299:
21300: * configure, configure.in:
21301: define for_BSD_TYPES irix
21302: [858337ff4af8]
21303:
21304: 1999-02-07 Todd C. Miller <Todd.Miller@courtesan.com>
21305:
21306: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod:
21307: Make it clear that it is the user's password, not root's, that we
21308: want.
21309: [ae0f51b35ee4]
21310:
21311: * check.c, sudo.h:
21312: If the user enters an empty password and really has no password,
21313: accept the empty password they entered. Perviously, they could
21314: enter anything
21315: *but* an empty password. Also, add GETPASS macro that calls either
21316: tgetpass() or getpass() depending on how sudo was configured.
21317: Problem noted by jdg@maths.qmw.ac.uk
21318: [2fde21ce94c1]
21319:
21320: 1999-02-03 Todd C. Miller <Todd.Miller@courtesan.com>
21321:
21322: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
21323: dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c,
21324: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
21325: interfaces.c, logging.c, parse.c, parse.lex, parse.yacc,
21326: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
21327: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
21328: visudo.c:
21329: add explicate copyright
21330: [d3b4449834a5]
21331:
21332: * CHANGES:
21333: mention -lsocket, -lnsl configure changes
21334: [9140af4ad8ae]
21335:
21336: 1999-02-02 Todd C. Miller <Todd.Miller@courtesan.com>
21337:
21338: * sudo.c:
21339: Don't clobber errno after calling check_sudoers().
21340: [59bd581b2654]
21341:
21342: 1999-02-01 Todd C. Miller <Todd.Miller@courtesan.com>
21343:
21344: * configure, configure.in:
21345: When linking with both -lsocket and -lnsl be sure to do so in that
21346: order. Also, when we can't find socket() or inet_addr() and have to
21347: try linking with both libs, issue a warning.
21348: [0ee547163067]
21349:
21350: * sudo.cat, sudo.man, sudo.pod:
21351: clarify bad timestamp and fmt
21352: [70e42cf56c75]
21353:
21354: 1999-01-23 Todd C. Miller <Todd.Miller@courtesan.com>
21355:
21356: * INSTALL, RUNSON:
21357: be clear that pam is linux-only and add a RUNSON entry
21358: [7fdeab875e0d]
21359:
21360: 1999-01-22 Todd C. Miller <Todd.Miller@courtesan.com>
21361:
21362: * CHANGES, INSTALL, configure, configure.in:
21363: fix and correctly document --with-umask; problem noted by
21364: adap@adap.org
21365: [11cd0481d63a]
21366:
21367: 1999-01-20 Todd C. Miller <Todd.Miller@courtesan.com>
21368:
21369: * configure, configure.in:
21370: only use /usr/{man,catman}/local to store man pages if suer didn't
21371: override prefix or mandir
21372: [781ad2cbe9be]
21373:
21374: * INSTALL, configure, configure.in:
21375: fix typo, make --with-SecurID take an arg
21376: [026a9b4014fc]
21377:
21378: 1999-01-19 Todd C. Miller <Todd.Miller@courtesan.com>
21379:
21380: * RUNSON:
21381: updates from users
21382: [2286982b31e6]
21383:
21384: * CHANGES, INSTALL, check.c, configure, configure.in:
21385: FWTK 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
21386: [23aa4e5c6b02]
21387:
21388: * configure, configure.in:
21389: better fix for the problem of unresolved symbols in -lnsl or
21390: -lsocket
21391: [82fe70fc287f]
21392:
21393: * configure, configure.in:
21394: when checking for functions in -lnsl and -lsocket link with both of
21395: them to avoid unresolved symbols on some weirdo systems
21396: [1734a591808e]
21397:
21398: 1999-01-18 Todd C. Miller <Todd.Miller@courtesan.com>
21399:
21400: * BUGS, CHANGES, RUNSON, TODO:
21401: old changes that didn't make it into RCS before the RCS->CVS switch
21402: [846eb2b8f9aa]
21403:
21404: 1999-01-17 Todd C. Miller <Todd.Miller@courtesan.com>
21405:
21406: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
21407: configure.in, dce_pwent.c, emul/search.h, emul/utime.h, find_path.c,
21408: getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
21409: ins_goons.h, insults.h, interfaces.c, lex.yy.c, logging.c,
21410: lsearch.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
21411: secureware.c, strdup.c, sudo.c, sudo.pod, sudo_setenv.c,
21412: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, visudo.c,
21413: visudo.pod:
21414: add sudo tags
21415: [962f81eaa5ab]
21416:
21417: * sudo.h:
21418: testing Sudo tag
21419: [e84cbc521129]
21420:
21421: * version.h:
21422: testing Sudo tag
21423: [a8c3a3998b88]
21424:
21425: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c, compat.h,
21426: config.h.in, configure, configure.in, dce_pwent.c, emul/utime.h,
21427: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
21428: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
21429: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
21430: secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h, sudo.man,
21431: sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c, tgetpass.c,
21432: utime.c, version.h, visudo.c, visudo.cat, visudo.man:
21433: crank version and regen files
21434: [23eacf00a1a4]
21435:
21436: * Makefile.in:
21437: kill rcs goop in update_version and fix now that version is a const
21438: [e6e50bd8d1e1]
21439:
21440: * INSTALL, check.c, config.h.in, configure, configure.in, logging.c,
21441: sudo.c, sudo.h, sudo.pod:
21442: kerb5 support from fcusack@iconnet.net
21443: [8134027986e2]
21444:
21445: * realpath.c, sudo_realpath.c:
21446: we no longer use realpath
21447: [0f5f64abc646]
21448:
21449: * qualify.c:
21450: replaced by find_path.c
21451: [9e32a87e09c4]
21452:
21453: * options.h:
21454: all options are now configure flags
21455: [ee6bd9610102]
21456:
21457: * lex.yy.c:
21458: regen
21459: [bdbf8a18161f]
21460:
21461: * getwd.c:
21462: superceded by getcwd.c
21463: [1e54ee0990b4]
21464:
21465: * getpass.c:
21466: superceded by tgetpass.c
21467: [4e0d1edc30e3]
21468:
21469: * SUPPORTED:
21470: superceded by RUNSON
21471: [854c5a21cb53]
21472:
21473: * OPTIONS:
21474: No longer used now that we have configure options for everything.
21475: [9b1ae1c89259]
21476:
21477: * configure:
21478: regen based on configure.in
21479: [3a4d73936973]
21480:
21481: * sudo.cat, sudo.html, sudo.man, sudoers.cat, sudoers.html,
21482: sudoers.man, visudo.cat, visudo.html, visudo.man:
21483: regen based on sudo.pod, sudoers.pod, and visudo.pod
21484: [c267beb90778]
21485:
21486: 1998-12-11 Todd C. Miller <Todd.Miller@courtesan.com>
21487:
21488: * check.c:
21489: fix tty tickets in remove_timestamp (didn't use ':')
21490: [fd964a74a32b]
21491:
21492: 1998-12-07 Todd C. Miller <Todd.Miller@courtesan.com>
21493:
21494: * interfaces.c:
21495: close sock when we are done with it
21496: [95de0380f8a4]
21497:
21498: 1998-11-28 Todd C. Miller <Todd.Miller@courtesan.com>
21499:
21500: * parse.yacc:
21501: never say "error on line -1"
21502: [361db1491121]
21503:
21504: 1998-11-24 Todd C. Miller <Todd.Miller@courtesan.com>
21505:
21506: * configure.in:
21507: check for -lnsl before -lsocket
21508: [8e966d6bbcb5]
21509:
21510: * configure.in:
21511: quote '[', ']' used in ranges correctly
21512: [fa4f9c6ff651]
21513:
21514: 1998-11-21 Todd C. Miller <Todd.Miller@courtesan.com>
21515:
21516: * config.h.in:
21517: add missing NO_ROOT_SUDO noted by drno@tsd.edu
21518: [c969f25d1667]
21519:
21520: 1998-11-20 Todd C. Miller <Todd.Miller@courtesan.com>
21521:
21522: * version.h:
21523: 1.5.7
21524: [7a22de0bc148]
21525:
21526: * INSTALL:
21527: more info for 1.5.7
21528: [30ad9e784799]
21529:
21530: * README:
21531: update for 1.5.7
21532: [cd03a0a27cd2]
21533:
21534: * parse.yacc:
21535: make increases of cm_list_size and ga_list_size be similar to
21536: increases of stacksize (ie: >= not > in initial compare).
21537: [6bd450a896c7]
21538:
21539: * parse.yacc:
21540: when we get a syntax error, report it for the previous line since
21541: that's generally where the error occurred.
21542: [c4ac84058f0b]
21543:
21544: 1998-11-18 Todd C. Miller <Todd.Miller@courtesan.com>
21545:
21546: * config.h.in, configure.in, interfaces.c:
21547: add back check for sys/sockio.h but only use it if SIOCGIFCONF is
21548: not defined
21549: [d197f31fd1e4] [SUDO_1_5_7]
21550:
21551: * config.h.in:
21552: define BSD_COMP for svr4
21553: [87ac1147ff79]
21554:
21555: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
21556: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex,
21557: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c,
21558: testsudoers.c, tgetpass.c, utime.c, visudo.c:
21559: more -Wall
21560: [d98e2d32db2a]
21561:
21562: * configure.in:
21563: kill check for sockio,h
21564: [4399779014c1]
21565:
21566: * config.h.in:
21567: no more HAVE_SYS_SOCKIO_H
21568: [67484528e347]
21569:
21570: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
21571: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex,
21572: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c,
21573: testsudoers.c, tgetpass.c, utime.c, visudo.c:
21574: -Wall
21575: [2b7e83976788]
21576:
21577: 1998-11-16 Todd C. Miller <Todd.Miller@courtesan.com>
21578:
21579: * sudo.c:
21580: add missing inform_user()
21581: [8689528c6d55]
21582:
21583: 1998-11-14 Todd C. Miller <Todd.Miller@courtesan.com>
21584:
21585: * find_path.c:
21586: return NOT_FOUND if given fully qualified path and it does not exist
21587: previously it would perror(ENOENT) which bypasses the option to not
21588: leak path info
21589: [ccbc3d0130ae]
21590:
21591: * configure.in:
21592: for kerb5, check for -lkerb4, fall back on -lkrb for kerb, check for
21593: -ldes
21594: [c77d3b484ece]
21595:
21596: 1998-11-13 Todd C. Miller <Todd.Miller@courtesan.com>
21597:
21598: * INSTALL:
21599: tty tickets are user:tty now
21600: [a53a303a614d]
21601:
21602: * check.c:
21603: when using tty tickets make it user:tty not user.tty as a username
21604: could have a '.' in it
21605: [3160b3f5c890]
21606:
21607: 1998-11-10 Todd C. Miller <Todd.Miller@courtesan.com>
21608:
21609: * sudo.c:
21610: add "ignoring foo found in ." for auth successful case
21611: [24257169e0bd]
21612:
21613: 1998-11-09 Todd C. Miller <Todd.Miller@courtesan.com>
21614:
21615: * sudo.c:
21616: add missing printf param
21617: [8c905124f777]
21618:
21619: 1998-11-08 Todd C. Miller <Todd.Miller@courtesan.com>
21620:
21621: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
21622: go back to printing "command not found" unless --disable-path-info
21623: specified. Also, tell user when we ignore '.' in their path and it
21624: would have been used but for --with-ignore-dot.
21625: [066e118c11e4]
21626:
21627: * check.c, sudo.c:
21628: Only one space after a colon, not two, in printf's
21629: [38452f4c8007]
21630:
21631: 1998-11-05 Todd C. Miller <Todd.Miller@courtesan.com>
21632:
21633: * sudo.pod:
21634: document setting $USER
21635: [80557fe6aede]
21636:
21637: * check.c:
21638: fix bugs with prompt expansion
21639: [44c4fca5f009]
21640:
21641: * sudo.c:
21642: set $USER for root too
21643: [4b525e1c6269]
21644:
21645: 1998-11-04 Todd C. Miller <Todd.Miller@courtesan.com>
21646:
21647: * getspwuid.c:
21648: typo
21649: [5107446f43e0]
21650:
21651: * configure.in:
21652: HP-UX's iscomsec is in -lsec, not libc
21653: [03c9f700b795]
21654:
21655: * configure.in:
21656: remove some entries in the OS case statement that did nothing
21657: [ea96e7e0f624]
21658:
21659: * TROUBLESHOOTING:
21660: add "cd" section and flush out syslog section
21661: [5107f7363b78]
21662:
21663: * Makefile.in:
21664: no more sudo-lex.yy.c
21665: [ed50826efbbc]
21666:
21667: * check_sia.c:
21668: add custom prompt support
21669: [6a285cea10b7]
21670:
21671: * testsudoers.c:
21672: kill perror("malloc") since we already have a good error messages
21673: pw_ent -> pw for brevity
21674: [eee31052921e]
21675:
21676: * sudo.c:
21677: kill perror("malloc") since we already have a good error messages
21678: pw_ent -> pw for brevity set $USER if -u specified
21679: [9f3753461f8a]
21680:
21681: * parse.yacc:
21682: kill perror("malloc") since we already have a good error messages
21683: [849459088ac3]
21684:
21685: * parse.c:
21686: kill perror("malloc") since we already have a good error messages
21687: pw_ent -> pw for brevity when checking if %group matches, look up
21688: user in password file so that %groups works in a RunAs spec.
21689: [0489b4ecc59a]
21690:
21691: * logging.c:
21692: kill perror("malloc") since we already have a good error messages
21693: [3191a18b3526]
21694:
21695: * check.c, getspwuid.c, interfaces.c:
21696: kill perror("malloc") since we already have a good error messages
21697: pw_ent -> pw for brevity
21698: [7193fdb38cf9]
21699:
21700: 1998-11-03 Todd C. Miller <Todd.Miller@courtesan.com>
21701:
21702: * tgetpass.c:
21703: the prompt is expanded before tgetpass is called
21704: [0f408f508041]
21705:
21706: * sudo.h:
21707: tgetpass now has the same args as getpass again
21708: [b6778cd9d79f]
21709:
21710: * getspwuid.c:
21711: add iscomsec, issecure support
21712: [007be7ec7ae7]
21713:
21714: * check.c:
21715: we now expand any %h or %u in the prompt before passing to tgetpass
21716: [f3db8c9ee387]
21717:
21718: * configure.in:
21719: add check for syslog(3) in -lsocket, -lnsl, -linet
21720: [5a96f902ce00]
21721:
21722: * config.h.in:
21723: add HAVE_ISCOMSEC and HAVE_ISSECURE
21724: [f640b0d4cf05]
21725:
21726: * configure.in:
21727: add check for iscomsec in HP-UX
21728: [b28b249040f0]
21729:
21730: * configure.in:
21731: check for issecure if we have getpwanam on SunOS some options are
21732: incompatible with DUNIX SIA check for dispcrypt on DUNIX
21733: [a49d05d9c913]
21734:
21735: 1998-10-25 Todd C. Miller <Todd.Miller@courtesan.com>
21736:
21737: * config.h.in:
21738: add HAVE_DISPCRYPT
21739: [7376d543d8d6]
21740:
21741: * secureware.c:
21742: add back support for non-dispcrypt based checking for older DUNIX
21743: [977b98e936be]
21744:
21745: * INSTALL:
21746: sia changes
21747: [c5387c06e30f]
21748:
21749: * configure.in:
21750: SIA becomes the default on Digital UNIX now havbe --disable-sia to
21751: turn it off...
21752: [3b647558ea13]
21753:
21754: * check.c:
21755: move local includes after system ones
21756: [b2abad4c4aef]
21757:
21758: 1998-10-24 Todd C. Miller <Todd.Miller@courtesan.com>
21759:
21760: * check.c, check_sia.c, sudo.h:
21761: add pass_warn() which prints out INCORRECT_PASSWORD or an insult to
21762: stderr
21763: [547cbf299661]
21764:
21765: * check_sia.c:
21766: fix while loop in sia_attempt_auth() that checks the password. Only
21767: the first iteration was working.
21768: [1886fd1ac831]
21769:
21770: 1998-10-22 Todd C. Miller <Todd.Miller@courtesan.com>
21771:
21772: * aclocal.m4:
21773: don't trust UID_MAX or MAXUID
21774: [2aeddb1654d8]
21775:
21776: * configure.in:
21777: fix two pastos
21778: [c18f0a10b75d]
21779:
21780: * configure.in:
21781: fix typo
21782: [1eb3190ef12d]
21783:
21784: * getspwuid.c, secureware.c:
21785: init crypt_type to INT_MAX since it is legal to be negative in DUNX
21786: 5.0
21787: [cefbde04822d]
21788:
21789: * configure.in:
21790: for secureware on dunix, use -lsecurity -ldb -laud -lm but check for
21791: -ldb since DUNX < 4.0 lacks it
21792: [e6b11d971068]
21793:
21794: 1998-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
21795:
21796: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
21797: secureware.c, sudo.c, tgetpass.c:
21798: getprpwuid is broken in HP-UX 10.20 at least (it sleeps for 2
21799: minutes if the shadow files don't exist).
21800: [2f297d095004]
21801:
21802: 1998-10-20 Todd C. Miller <Todd.Miller@courtesan.com>
21803:
21804: * INSTALL:
21805: updated --with-editor blurb
21806: [77d8a3ea7328]
21807:
21808: * TROUBLESHOOTING:
21809: tell how to put sudoers in a different dir
21810: [456cd20eb1d0]
21811:
21812: * configure.in:
21813: add missing quotes around $with_editor
21814: [22881748ab1b]
21815:
21816: * configure.in:
21817: typo in --with-editor bits
21818: [ab6964580681]
21819:
21820: * INSTALL:
21821: I don't expect it to work on Solaris
21822: [1c2fceaaf56e]
21823:
21824: * check.c:
21825: add back security/pam_misc.h
21826: [6ffd30033c1e]
21827:
21828: 1998-10-19 Todd C. Miller <Todd.Miller@courtesan.com>
21829:
21830: * INSTALL:
21831: remove dunix note since configure checks for this now
21832: [e9904512b8e8]
21833:
21834: * configure.in:
21835: add check for broken dunix prot.h (4.0 < 4.0D is bad)
21836: [8a4c1e6aef3b]
21837:
21838: * getspwuid.c, secureware.c, tgetpass.c:
21839: new dunix shadow code, use dispcrypt(3)
21840: [1b936bc7268c]
21841:
21842: * config.h.in:
21843: add HAVE_INITPRIVS
21844: [4369f4c4f914]
21845:
21846: * sudo.c:
21847: call initprivs() if we have it for getprpwuid later on
21848: [11cf5915d826]
21849:
21850: * Makefile.in:
21851: clean pathnames.h too
21852: [5f1df3262613]
21853:
21854: * configure.in:
21855: quote "Sorry, try again." with [] since it has a comma in it set
21856: LIBS when we add stuff to SUDO_LIBS set SECUREWARE when we find
21857: getprpwuid() so we can check for bigcrypt, set_auth_parameters, and
21858: initprivs later.
21859: [e226b0a3f250]
21860:
21861: * INSTALL:
21862: update Digital UNIX note about acl.h
21863: [80132b71d73a]
21864:
21865: * INSTALL:
21866: add --with-sia
21867: --without-root-sudo -> --disable-root-sudo some reordering
21868: [198386358818]
21869:
21870: * secureware.c:
21871: add whitespace
21872: [4aadaf1a54b0]
21873:
21874: * Makefile.in, check.c, config.h.in, configure.in, logging.c, sudo.h:
21875: add SIA support
21876: [fa3ddbb9cc51]
21877:
21878: * check_sia.c:
21879: Initial revision
21880: [2968551d40e4]
21881:
21882: 1998-10-18 Todd C. Miller <Todd.Miller@courtesan.com>
21883:
21884: * configure.in:
21885: when checking for -lsocket, -lnsl, and -linet, check for the
21886: specific functions we need from them.
21887: [8d33e64362a3]
21888:
21889: * config.h.in, sudo.h:
21890: move Syslog_* defs into sudo.h
21891: [03d1774f25c7]
21892:
21893: * Makefile.in, sudo.h:
21894: added check_secureware
21895: [e46e3cbb9a97]
21896:
21897: * configure.in:
21898: finished adding AC_MSG_CHECKING and AC_MSG_RESULT bits
21899: [dbefe1856503]
21900:
21901: * insults.h:
21902: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no other sets
21903: defined. configure now does that for us
21904: [e4520ea0581f]
21905:
21906: * configure.in:
21907: move some --with options around change a bunch of echo's to
21908: AC_MSG_CHECKING, AC_MSG_RESULT pairs
21909: [ffdf6869fdd7]
21910:
21911: * configure.in:
21912: change $with_foo-bar -> $with_foo_bar kill extra " that caused a
21913: syntax error add some echo verbage
21914: [3278c49bf74b]
21915:
21916: 1998-10-17 Todd C. Miller <Todd.Miller@courtesan.com>
21917:
21918: * check.c:
21919: moved SecureWare stuff into secureware.c
21920: [42d3d3ac35dc]
21921:
21922: * secureware.c:
21923: Initial revision
21924: [aa7f72a249cf]
21925:
21926: * INSTALL:
21927: update url to solaris gcc bins
21928: [36a3eb668777]
21929:
21930: * INSTALL:
21931: change option formatter and flesh out someentries
21932: [6fbd1db4a8ad]
21933:
21934: * TROUBLESHOOTING, sudo.pod, visudo.pod:
21935: environmental variable -> environment variable
21936: [6f14d708e32d]
21937:
21938: * BUGS:
21939: everything is now done via configure
21940: [c217858f58ab]
21941:
21942: * README:
21943: prev rev was 1.5.6
21944: [7b4177103c35]
21945:
21946: * Makefile.in:
21947: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID correctly
21948: [31c6b0a5e0e2]
21949:
21950: * config.h.in:
21951: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from the Makefile
21952: [d406a1ef6d25]
21953:
21954: * Makefile.in:
21955: merge OSDEFS and OPTIONS into DEFS get sudoers_uid, sudoers_gid,
21956: sudoers_mode from configure
21957: [1c509500655a]
21958:
21959: * configure.in:
21960: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get substituted into
21961: the Makefile, not config.h
21962: [d4482f1492fe]
21963:
21964: * INSTALL:
21965: document all --with/--enable options
21966: [22d81b312d7f]
21967:
21968: 1998-10-15 Todd C. Miller <Todd.Miller@courtesan.com>
21969:
21970: * insults.h:
21971: options.h is no more
21972: [560946a33f7f]
21973:
21974: * config.h.in:
21975: assimilated options.h
21976: [dd8ce74613c1]
21977:
21978: * configure.in:
21979: moved options from options.h to configure
21980: [d39662f71b4e]
21981:
21982: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
21983: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
21984: sudo_setenv.c, visudo.c:
21985: no more options.h
21986: [43924bf0858d]
21987:
21988: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING:
21989: remove references to options.h
21990: [ef3474295395]
21991:
21992: * dce_pwent.c, interfaces.c, sudo.c:
21993: kill sys/time.h
21994: [4d833f0034e4]
21995:
21996: * tgetpass.c:
21997: if select return < -1 still prompt for pw
21998: [e0009e5c93a2]
21999:
22000: * options.h:
22001: convert LOGGING, LOGFAC, MAXLOGFILELEN, IGNORE_DOT_PATH into
22002: configure options
22003: [e60a1e546516]
22004:
22005: * parse.c:
22006: FAST_MATCH is no longer an optino
22007: [c448dbb3464b]
22008:
22009: * check.c:
22010: remove_timestamp() if timestamp is preposterous
22011: [70d9a86c6ecd]
22012:
22013: * options.h:
22014: convert more options to --with/--enable
22015: [34646d9b09dc]
22016:
22017: * INSTALL, aclocal.m4:
22018: logfile -> logpath
22019: [42de502bc637]
22020:
22021: * configure.in:
22022: convert more options into --with and --enable
22023: [92d0898c9844]
22024:
22025: * tgetpass.c:
22026: catch EINTR in select and restart
22027: [f045d2f234d7]
22028:
22029: * logging.c:
22030: sys/errno -> errno
22031: [7f0c5beab6f2]
22032:
22033: 1998-09-24 Todd C. Miller <Todd.Miller@courtesan.com>
22034:
22035: * sudo.c:
22036: UMASK -> SUDO_UMASK.
22037: [48f308661514]
22038:
22039: * check.c, logging.c:
22040: time.h, not sys/time.h
22041: [91de049c79e4]
22042:
22043: 1998-09-21 Todd C. Miller <Todd.Miller@courtesan.com>
22044:
22045: * logging.c:
22046: MAILER -> _PATH_SENDMAIL
22047: [df65d6896639]
22048:
22049: * INSTALL, configure.in:
22050: no more --with-C2, now it is --disable-shadow
22051: [18bfcab3b9ab]
22052:
22053: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
22054: getspwuid.c, sudo.c, tgetpass.c:
22055: new shadow password scheme. Always include shadow support if the
22056: platform supports it and the user did not disable it via configure
22057: [2135d93bb4a9]
22058:
22059: 1998-09-20 Todd C. Miller <Todd.Miller@courtesan.com>
22060:
22061: * configure.in:
22062: --with-getpass -> --{enable,disable}-tgetpass
22063: [451b33fdd4c7]
22064:
22065: * Makefile.in:
22066: pathnames.h -> pathnames.h.in
22067: [b109022eca69]
22068:
22069: * check.c:
22070: fix version string
22071: [761b25c314ea]
22072:
22073: * check.c:
22074: move pam_conv to be static to auth function remove pam_misc.h
22075: (solaris doesn't have one)
22076: [a682e4da987a]
22077:
22078: * aclocal.m4:
22079: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill SUDO_PROG_PWD
22080: [e6005d0599b5]
22081:
22082: * configure.in:
22083: munge pathnames.h.in -> pathnames.h kill SUDO_PROG_PWD
22084: [24c0ac2155ef]
22085:
22086: * pathnames.h.in:
22087: convert to pathnames.h.in
22088: [013bddf7f684]
22089:
22090: 1998-09-19 Todd C. Miller <Todd.Miller@courtesan.com>
22091:
22092: * configure.in:
22093: fix typo in sysv4 matching case /.
22094: [2994c4f88cf5]
22095:
22096: 1998-09-18 Todd C. Miller <Todd.Miller@courtesan.com>
22097:
22098: * check.c:
22099: pam stuff needs to run as root, not user, for shadow passwords
22100: [d94ff75de503]
22101:
22102: 1998-09-17 Todd C. Miller <Todd.Miller@courtesan.com>
22103:
22104: * BUGS, INSTALL, README, configure.in:
22105: updated version
22106: [775adc7de7ac]
22107:
22108: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
22109: emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
22110: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
22111: logging.c, options.h, parse.c, parse.lex, parse.yacc,
22112: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
22113: testsudoers.c, tgetpass.c, utime.c, visudo.c:
22114: updated version
22115: [5ca599fb6b93]
22116:
22117: * check.c:
22118: user version.h for long message
22119: [47a52ac7e542]
22120:
22121: * check.c:
22122: this is version 1.5.6
22123: [8451ac79eee2]
22124:
22125: 1998-09-16 Todd C. Miller <Todd.Miller@courtesan.com>
22126:
22127: * Makefile.in:
22128: remove errant backslash
22129: [0222a8a650ff]
22130:
22131: 1998-09-15 Todd C. Miller <Todd.Miller@courtesan.com>
22132:
22133: * options.h, parse.yacc, pathnames.h.in:
22134: fix version string
22135: [fdee73255d64] [SUDO_1_5_6]
22136:
22137: * BUGS, CHANGES, TODO:
22138: updtaed for 1.5.6
22139: [752443bf7f26]
22140:
22141: * RUNSON:
22142: updated for 1.5.6
22143: [0f878123fe6a]
22144:
22145: 1998-09-14 Todd C. Miller <Todd.Miller@courtesan.com>
22146:
22147: * interfaces.c:
22148: kill unused localhost_mask var copy if name to ifr_tmp after we zero
22149: it
22150: [8e89c364cef2]
22151:
22152: 1998-09-13 Todd C. Miller <Todd.Miller@courtesan.com>
22153:
22154: * INSTALL:
22155: Better description of new vs. old sudoers modes fix some typos
22156: better description of /usr/ucb/cc gotchas on slowaris
22157: [c00b2a6fc1e8]
22158:
22159: * Makefile.in:
22160: add sample.pam
22161: [ec7f6cc19b00]
22162:
22163: * sudo.c:
22164: set NewArgv[0] to user_shell, not basename(user_shell)
22165: [1e907cbc9f7b]
22166:
22167: 1998-09-12 Todd C. Miller <Todd.Miller@courtesan.com>
22168:
22169: * README:
22170: mention TROUBLESHOOTING more fix some typos
22171: [2c2e6907d4a4]
22172:
22173: * configure.in:
22174: move --enable/--disable to be after --with
22175: [9b30097f76c1]
22176:
22177: * INSTALL:
22178: document --enable/--disable
22179: [c522362e38a8]
22180:
22181: * INSTALL:
22182: document --with-pam
22183: [7e38932c78ac]
22184:
22185: 1998-09-11 Todd C. Miller <Todd.Miller@courtesan.com>
22186:
22187: * configure.in:
22188: Add message for pam users
22189: [d224f277e3cd]
22190:
22191: * sample.pam:
22192: Initial revision
22193: [3a84d7045f54]
22194:
22195: * config.h.in:
22196: fix HAVE_PAM
22197: [2f0f303ebd88]
22198:
22199: * check.c, config.h.in, configure.in:
22200: pam support, from Gary Calvin <GCalvin@kenwoodusa.com>
22201: [ea3e0a72d707]
22202:
22203: 1998-09-10 Todd C. Miller <Todd.Miller@courtesan.com>
22204:
22205: * config.h.in:
22206: add HOST_IN_LOG and WRAP_LOG
22207: [822c36eeb6a8]
22208:
22209: * logging.c:
22210: add WRAP_LOG and HOST_IN_LOG
22211: [3cf6052bd27e]
22212:
22213: * configure.in:
22214: add --enable-log-host and --enable-log-wrap
22215: [c968cc12b353]
22216:
22217: * aclocal.m4:
22218: use AC_DEFINE_UNQUOTED for --with-logfile and --with-timedir
22219: [915fef7e11a1]
22220:
22221: 1998-09-09 Todd C. Miller <Todd.Miller@courtesan.com>
22222:
22223: * compat.h:
22224: add howmany macro
22225: [9107a057a7c8]
22226:
22227: * tgetpass.c:
22228: include sys/param.h to get howmany macro
22229: [7e908b5e1f32]
22230:
22231: 1998-09-08 Todd C. Miller <Todd.Miller@courtesan.com>
22232:
22233: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
22234: add RUNAS_DEFAULT
22235: [1e76398ea3fd]
22236:
22237: 1998-09-07 Todd C. Miller <Todd.Miller@courtesan.com>
22238:
22239: * fnmatch.c:
22240: bring in stdio.h for NULL
22241: [69c016610cbb]
22242:
22243: * aclocal.m4:
22244: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
22245: [15ab2972f8d0]
22246:
22247: * sudo.c:
22248: use HAVE_SET_AUTH_PARAMETERS
22249: [8abfdc8c80f7]
22250:
22251: * config.h.in:
22252: add HAVE_SET_AUTH_PARAMETERS
22253: [673a5ebd5539]
22254:
22255: * configure.in:
22256: add *-*-hiuxmpp* add test for set_auth_parameters() if secureware
22257: [a401f5a7469a]
22258:
22259: * config.sub:
22260: add support for HI-UX/MPP SR220001 02-03 0 SR2201
22261: [cb657b7acaae]
22262:
22263: * interfaces.c:
22264: initialize previfname
22265: [26a1902f56dc]
22266:
22267: * interfaces.c:
22268: Don't use SIOCGIFADDR, we don't need it Use SIOCGIFFLAGS if we have
22269: it check ifr_flags against IFF_UP and IFF_LOOPBACK instead of
22270: kludging it
22271: [fa5c890c313b]
22272:
22273: * configure.in:
22274: typo
22275: [bff579fbe95c]
22276:
22277: * Makefile.in:
22278: don't need special build line for sudo.tab.o
22279: [10c0a0a912e4]
22280:
22281: * Makefile.in:
22282: don't clean sudo.tab.[ch]
22283: [c40d5968efbb]
22284:
22285: * sudo.c:
22286: Sudo should prompt for a password before telling the user that a
22287: command could not be found.
22288: [d718c85a0047]
22289:
22290: * BUGS:
22291: for 1.5.6
22292: [0cc1fe5b9129]
22293:
22294: * INSTALL, README:
22295: no longer require yacc
22296: [d9096fc5b8b6]
22297:
22298: * Makefile.in:
22299: typo
22300: [70feb1aefbd5]
22301:
22302: * Makefile.in:
22303: y.tab -> sudo.tab include pre-yacc'd parse.yacc
22304: [cc802025fd44]
22305:
22306: * parse.lex:
22307: include sudo.tab.h, not y.tab.h don't break out of command args if
22308: you get a '='
22309: [728ad26dbda5]
22310:
22311: * insults.h:
22312: fix version ,
22313: [242bbce1b2d4]
22314:
22315: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
22316: fix version
22317: [2bb9086fea1e]
22318:
22319: * compat.h:
22320: fix version
22321: [7e634d498ce6]
22322:
22323: * getcwd.c:
22324: getcwd(3) from OpenBSD for those without it.
22325: [6c68d0df8f6c]
22326:
22327: * sudo.h:
22328: HAVE_GETWD -> HAVE_GETCWD
22329: [2ad1e64d60c0]
22330:
22331: * configure.in:
22332: pretend sunos doesn't have getcwd(3) since it opens a pipe to
22333: getpwd!
22334: [677992ba5a6a]
22335:
22336: * parse.c:
22337: use NAMLEN() macro
22338: [8f5685aa3165]
22339:
22340: * fnmatch.c:
22341: remove duplicate include of string.h
22342: [6024f3051ac3]
22343:
22344: * configure.in:
22345: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
22346: [3d82a9c22cc2]
22347:
22348: * aclocal.m4:
22349: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
22350: [53fbc47282f9]
22351:
22352: * config.h.in:
22353: add dev_t and ino_t
22354: [5929bb0c7e1a]
22355:
22356: 1998-07-28 Todd C. Miller <Todd.Miller@courtesan.com>
22357:
22358: * check.c:
22359: fix OTP_ONLY for opie
22360: [7edcfa78f2ec]
22361:
22362: 1998-06-24 Todd C. Miller <Todd.Miller@courtesan.com>
22363:
22364: * testsudoers.c, tgetpass.c:
22365: include stdlib.h for malloc proto
22366: [c9f4b99a2fe9]
22367:
22368: 1998-05-19 Todd C. Miller <Todd.Miller@courtesan.com>
22369:
22370: * Makefile.in:
22371: make update_version saner
22372: [d522f93ee04a]
22373:
22374: * config.h.in:
22375: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
22376: [c9a2d21dc608]
22377:
22378: * configure.in:
22379: check for waitpid and wait3 or no waitpid
22380: [1f18c3224184]
22381:
22382: * logging.c:
22383: used waitpid or wait3 if we have 'em
22384: [391c3279ee65]
22385:
22386: 1998-05-02 Todd C. Miller <Todd.Miller@courtesan.com>
22387:
22388: * visudo.c:
22389: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel Faigon)
22390: [fbf53b18178f]
22391:
22392: 1998-04-28 Todd C. Miller <Todd.Miller@courtesan.com>
22393:
22394: * configure.in:
22395: don't need to explicately mention -lsocket -lnsl for sequent
22396: [1898dc055352]
22397:
22398: 1998-04-25 Todd C. Miller <Todd.Miller@courtesan.com>
22399:
22400: * configure.in:
22401: dynix should not link with -linet
22402: [278a4b9cfe2a]
22403:
22404: 1998-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
22405:
22406: * INSTALL:
22407: mention that HP-UX doesn't ship with yacc
22408: [bde5147198c0]
22409:
22410: 1998-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
22411:
22412: * check.c:
22413: ignore kerberos if we can't get the local realm
22414: [1e311a091a27]
22415:
22416: 1998-04-06 Todd C. Miller <Todd.Miller@courtesan.com>
22417:
22418: * BUGS, INSTALL, README, configure.in:
22419: ++version
22420: [499ffc746018]
22421:
22422: * version.h:
22423: ++
22424: [35ba1ee01bd3]
22425:
22426: * Makefile.in, check.c, config.h.in, dce_pwent.c, emul/utime.h,
22427: find_path.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
22428: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c, sudo.h,
22429: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
22430: updated version
22431: [b4990a513f31]
22432:
22433: * check.c, sudo.h:
22434: fix version
22435: [5710795834e8]
22436:
22437: * getcwd.c:
22438: don't use popen/pclose. Do it inline.
22439: [29e57b0646a4]
22440:
22441: * lsearch.c:
22442: add rcsid
22443: [b2b55c39858d]
22444:
22445: * sudo.c:
22446: typo
22447: [d381ac39ed0f]
22448:
22449: * check.c, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
22450: ins_goons.h, insults.h, options.h, parse.yacc, pathnames.h.in,
22451: sudo.h:
22452: updated version
22453: [462d6e1a2d75]
22454:
22455: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c:
22456: MAX* + 1 -> MAX*
22457: [2c2eeb78d34f]
22458:
22459: * Makefile.in:
22460: getwd.c -> getcwd.c
22461: [7d718c32fc02]
22462:
22463: * config.h.in:
22464: kill HAVE_GETWD
22465: [6ad3d702343f]
22466:
22467: * configure.in:
22468: getcwd, not getwd
22469: [33e5b9841f58]
22470:
22471: * getcwd.c:
22472: use MAX* not MAX* + 1 always run pwd as using getwd() defeats the
22473: purpose
22474: [24e58d340161]
22475:
22476: 1998-03-31 Todd C. Miller <Todd.Miller@courtesan.com>
22477:
22478: * OPTIONS, options.h:
22479: add STUB_LOAD_INTERFACES
22480: [d747cb23ca83]
22481:
22482: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
22483: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
22484: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
22485: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
22486: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
22487: testsudoers.c, tgetpass.c, utime.c, visudo.c:
22488: updated version
22489: [0798229312cc]
22490:
22491: * configure.in:
22492: support *-ccur-sysv4 and fix two typos
22493: [24a823ad7cc9]
22494:
22495: 1998-03-28 Todd C. Miller <Todd.Miller@courtesan.com>
22496:
22497: * configure.in:
22498: don't echo about with_logfile and with_timedir
22499: [31e4a1e2d9ad]
22500:
22501: * INSTALL:
22502: document --with-logfile and --with-timedir
22503: [674f811a40e0]
22504:
22505: * aclocal.m4:
22506: support --with-logfile and --with-timedir
22507: [2fc36b35db12]
22508:
22509: * configure.in:
22510: Add --with-logfile and --with-timedir
22511: [09045bf07e29]
22512:
22513: * sudo.c:
22514: change size computation of NewArgv for UNICOS
22515: [b50df07da3a1]
22516:
22517: 1998-02-19 Todd C. Miller <Todd.Miller@courtesan.com>
22518:
22519: * configure.in:
22520: treate -*-sysv4* like *-*-svr4
22521: [471b7ef4dbf2]
22522:
22523: 1998-02-18 Todd C. Miller <Todd.Miller@courtesan.com>
22524:
22525: * configure.in:
22526: fix spacing for --with-authenticate help
22527: [8321cb37c410]
22528:
22529: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
22530: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
22531: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
22532: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
22533: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
22534: testsudoers.c, tgetpass.c, utime.c, visudo.c:
22535: updated version
22536: [dc1ab97312eb]
22537:
22538: * parse.yacc:
22539: fix off by one error in push macro
22540: [bece59c8c3a9]
22541:
22542: 1998-02-17 Todd C. Miller <Todd.Miller@courtesan.com>
22543:
22544: * configure.in:
22545: removed bogus alloca hack
22546: [a68dd720462d]
22547:
22548: * check.c:
22549: added AIX 4.x authenticate() support
22550: [12985eb448a0]
22551:
22552: * parse.yacc:
22553: include alloca.h if using bison and not gcc and it exists. fixes an
22554: alloca problem on hpux 10.x
22555: [e3b5c4f26072]
22556:
22557: * INSTALL:
22558: mention --with-authenticate
22559: [78a1c96820e7]
22560:
22561: * configure.in:
22562: added AIX authenticate() support
22563: [c983193ec252]
22564:
22565: * config.h.in:
22566: add HAVE_AUTHENTICATE
22567: [7b0e5f5db5d9]
22568:
22569: * interfaces.c:
22570: dynamically size ifconf buffer
22571: [10afb0e9b2f9]
22572:
22573: * configure.in:
22574: quote '[' and ']'
22575: [8fc38a4defad]
22576:
22577: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
22578: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
22579: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
22580: logging.c, options.h, parse.c, parse.lex, parse.yacc,
22581: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
22582: testsudoers.c, tgetpass.c, utime.c, visudo.c:
22583: updated version
22584: [5f66de71ec61]
22585:
22586: * visudo.pod:
22587: add ERRORS section
22588: [3df3edb73cf6]
22589:
22590: 1998-02-16 Todd C. Miller <Todd.Miller@courtesan.com>
22591:
22592: * TROUBLESHOOTING:
22593: add busy stmp file explanation
22594: [6c555d469b6f]
22595:
22596: 1998-02-15 Todd C. Miller <Todd.Miller@courtesan.com>
22597:
22598: * configure.in:
22599: the name of the cached var that signals whether or not you are cross
22600: compiling changed. It is now ac_cv_prog_cc_cross
22601: [123911c0658c]
22602:
22603: 1998-02-11 Todd C. Miller <Todd.Miller@courtesan.com>
22604:
22605: * INSTALL:
22606: mention glibc 2.07 is fixed wrt lsearch()\.
22607: [ded758524582]
22608:
22609: 1998-02-07 Todd C. Miller <Todd.Miller@courtesan.com>
22610:
22611: * sample.sudoers, sudoers.pod:
22612: better example of su but not root su
22613: [b3199610be21]
22614:
22615: 1998-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
22616:
22617: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
22618: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
22619: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
22620: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
22621: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
22622: testsudoers.c, tgetpass.c, utime.c, visudo.c:
22623: updated version
22624: [46922b84e86b]
22625:
22626: * Makefile.in:
22627: correct regexp for updating version
22628: [8032728b2a8a]
22629:
22630: * tgetpass.c:
22631: remove bogus flush of stderr spew prompt before turning off echo.
22632: Seems to fix a weird problem where if sudo complained about a bogus
22633: stamp file the user would sometimes not have a chance to enter a
22634: password
22635: [7aa1493cc141]
22636:
22637: * check.c:
22638: fix bogus flush of stderr
22639: [6d047871c5e8]
22640:
22641: * sudo.c:
22642: close fd's <=2 not <=3 and move that chunk of code up
22643: [553e4faac195]
22644:
22645: * configure.in:
22646: support hpux1[0-9] not just hpux10
22647: [5a34a000ff8a]
22648:
22649: 1998-01-30 Todd C. Miller <Todd.Miller@courtesan.com>
22650:
22651: * parse.c:
22652: set sudoers_fp to nil after closing
22653: [221a8b4bbf34]
22654:
22655: 1998-01-24 Todd C. Miller <Todd.Miller@courtesan.com>
22656:
22657: * config.guess, config.sub:
22658: updated from autoconf 2.12
22659: [6fc86a0fc61b]
22660:
22661: * configure.in:
22662: add *-*-svr4 rule
22663: [38f0427f7c9d]
22664:
22665: 1998-01-23 Todd C. Miller <Todd.Miller@courtesan.com>
22666:
22667: * tgetpass.c:
22668: fix select usage for high fd's (dynamically allocate readfds)
22669: [c2d1f76e0321]
22670:
22671: * check.c:
22672: kill extra whitespace
22673: [d784b6c9c514]
22674:
22675: * sudo.c:
22676: do an initgroups() before running a command, unless the target user
22677: is root.
22678: [4ca561287480]
22679:
22680: 1998-01-22 Todd C. Miller <Todd.Miller@courtesan.com>
22681:
22682: * TROUBLESHOOTING:
22683: tell people to use tabs, not spaces, in syslog.conf
22684: [8ae90a205134]
22685:
22686: 1998-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
22687:
22688: * Makefile.in, config.h.in, dce_pwent.c, emul/utime.h, getwd.c,
22689: parse.lex, putenv.c, strdup.c, testsudoers.c, utime.c:
22690: updated version
22691: [4d855ff5de26]
22692:
22693: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
22694: logging.c, parse.c, sudo.c, sudo_setenv.c, tgetpass.c, visudo.c:
22695: updated version
22696: [8e007e178b33]
22697:
22698: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
22699: insults.h, options.h, parse.yacc, pathnames.h.in, sudo.h:
22700: updated version
22701: [9ddea5c8814d]
22702:
22703: * Makefile.in:
22704: more tweaks to update_version
22705: [047698752855]
22706:
22707: * Makefile.in:
22708: fixed up update_version rule
22709: [47b6fa34b77f]
22710:
22711: * configure.in:
22712: ++version
22713: [c1ca664e30b7]
22714:
22715: * Makefile.in:
22716: removed supe of check.c
22717: [8f340a05296a]
22718:
22719: * INSTALL:
22720: ++version I missed
22721: [a298e6c17491]
22722:
22723: * RUNSON:
22724: updated
22725: [a14f6057bc15]
22726:
22727: * BUGS, INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
22728: dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, getwd.c,
22729: goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
22730: insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex,
22731: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
22732: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
22733: visudo.c:
22734: updated version
22735: [02231b1a3ab3]
22736:
22737: * CHANGES:
22738: updated for 1.5.5
22739: [634e5fcaf40b]
22740:
22741: * Makefile.in:
22742: add rules to update version stuff in files so I don't need to do it
22743: by hand
22744: [3620ad60485a]
22745:
22746: * sudo.h:
22747: sudoers_fp is now extern
22748: [88c6e9b9ea84]
22749:
22750: * sudo.c:
22751: in check_sudoers, cache the sudoers file handle in sudoers_fp so we
22752: don't have to open it again in the parse. This may help with weird
22753: solaris problems where EAGAIN sometime occurrs.
22754: [d3c26451ed1d]
22755:
22756: * parse.c:
22757: sudoers file open is now done only in check_sudoers() so we just do
22758: a rewind() instead of an open. May help people on solaris who were
22759: getting EAGAIN.
22760: [c8b8c7722fa5]
22761:
22762: 1998-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
22763:
22764: * INSTALL:
22765: mention that newer glibc is fixed
22766: [20f06f5d3ef3]
22767:
22768: 1998-01-13 Todd C. Miller <Todd.Miller@courtesan.com>
22769:
22770: * sudo.c:
22771: newer irix uses _RLDN32_* envariables for 32-bit binaries so ignore
22772: _RLD* instead of _RLD_*
22773: [1e22c588d602]
22774:
22775: * parse.c:
22776: typo
22777: [d0b7cb85f08a]
22778:
22779: * parse.c:
22780: fix that bug for real
22781: [5a6eeca6d04b]
22782:
22783: * INSTALL:
22784: document Linux's libc6 brokenness.
22785: [0246c1aa64ee]
22786:
22787: * parse.yacc:
22788: -Wall
22789: [d0e452fb1e2d]
22790:
22791: * RUNSON:
22792: updated
22793: [4949a1bbd0a9] [SUDO_1_5_4]
22794:
22795: * TROUBLESHOOTING:
22796: remind people to HUP syslogd
22797: [590962faa4f0]
22798:
22799: * Makefile.in:
22800: add -O flag to tar
22801: [622d02de339d]
22802:
22803: * RUNSON:
22804: updated
22805: [a72930d6e615]
22806:
22807: * TODO:
22808: updated
22809: [4a51bd458390]
22810:
22811: * sudo.pod:
22812: remove author's email addr. people should mail sudo-bugs
22813: [9b6bbdb3a6d9]
22814:
22815: * INSTALL:
22816: fix version
22817: [246274c6c8af]
22818:
22819: * README, check.c, compat.h, config.h.in, configure.in, dce_pwent.c,
22820: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
22821: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
22822: logging.c, options.h, parse.c, parse.lex, parse.yacc,
22823: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
22824: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
22825: ++version
22826: [f532ff4ee766]
22827:
22828: * RUNSON:
22829: updated
22830: [62d5c71358b5]
22831:
22832: * INSTALL, Makefile.in:
22833: ++version
22834: [1a7c7628edfc]
22835:
22836: * CHANGES:
22837: updated fort 1.5.4
22838: [7e4873508c99]
22839:
22840: * check.c:
22841: exit(1) if user enters no passwd
22842: [f382c0e35e4e]
22843:
22844: * BUGS:
22845: ++version
22846: [fab6a867ab67]
22847:
22848: * parse.c:
22849: commands can start with ./* not just /* -- fixes a serious security
22850: hole.
22851: [244d2fe35ee3]
22852:
22853: 1997-12-21 Todd C. Miller <Todd.Miller@courtesan.com>
22854:
22855: * sudo.c:
22856: Don't set the tty variable to NULL when we lack a tty, leave it as
22857: "unknown".
22858: [193b26daba03]
22859:
22860: 1997-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
22861:
22862: * sample.sudoers:
22863: fix usage of (username) in conjunction with , and !
22864: [7ae68607f68f]
22865:
22866: * visudo.c:
22867: catch the case where the user is not in the passwd file
22868: [31650258deb0]
22869:
22870: * tgetpass.c:
22871: use fileno(input) + 1 instead of getdtablesize() as the nfds arg to
22872: select(2)
22873: [60ab2d9a9ee8]
22874:
22875: * sudo.c:
22876: define tty global to an initial value to avoid dumping core in
22877: logging functions when passwd file is unavailable.
22878: [77056c7bc908]
22879:
22880: * sudo.c:
22881: do the set_perms(PERM_USER, sudo_mode) after we have gotten the
22882: passwd entry
22883: [1fdb8e579a5a]
22884:
22885: * sudo.pod:
22886: talk about problem of ALL
22887: [1cd1905c9f6f]
22888:
22889: 1997-10-10 Todd C. Miller <Todd.Miller@courtesan.com>
22890:
22891: * README:
22892: new web location
22893: [d24dc26f6da5]
22894:
22895: * INSTALL:
22896: fdesc bug is fixed in Open/Net BSD
22897: [7d4d81b08ac3]
22898:
22899: * HISTORY:
22900: updates from Nieusma
22901: [3a43769a1b78]
22902:
22903: 1997-10-09 Todd C. Miller <Todd.Miller@courtesan.com>
22904:
22905: * dce_pwent.c:
22906: move compat.h after the system includes
22907: [5ea43a5968ac]
22908:
22909: 1997-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
22910:
22911: * logging.c:
22912: save errno from being clobbered by wait(). From Theo
22913: [f2d1c48cd592]
22914:
22915: 1997-05-21 Todd C. Miller <Todd.Miller@courtesan.com>
22916:
22917: * compat.h:
22918: fix an occurence of setresuid -> setreuid (typo)
22919: [394de35c9b1c]
22920:
22921: 1997-03-19 Todd C. Miller <Todd.Miller@courtesan.com>
22922:
22923: * install-sh:
22924: check for path to strip
22925: [2b7ef824bd55]
22926:
22927: 1997-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
22928:
22929: * logging.c:
22930: deal with maxfilelen < 0 case
22931: [f0af095178d7]
22932:
22933: * OPTIONS:
22934: fixed descriptin
22935: [629f60bd4b5f]
22936:
22937: 1996-12-12 Todd C. Miller <Todd.Miller@courtesan.com>
22938:
22939: * sudo.c:
22940: correct error message if mode/owner wrong and not statable by owner
22941: but is statable by root.
22942: [cb631ce2e85e]
22943:
22944: 1996-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
22945:
22946: * config.guess, config.sub:
22947: autoconf 2.11
22948: [f3cbe59e0756]
22949:
22950: 1996-11-16 Todd C. Miller <Todd.Miller@courtesan.com>
22951:
22952: * CHANGES, RUNSON, TODO:
22953: sudo 1.5.3.
22954: [2be3229b8626]
22955:
22956: 1996-11-14 Todd C. Miller <Todd.Miller@courtesan.com>
22957:
22958: * parse.yacc, sudo.h:
22959: command_alias -> generic_alias
22960: [c404ca8c510d] [SUDO_1_5_3]
22961:
22962: * sample.sudoers:
22963: added Runas_Alias example and fixed syntax errors
22964: [c304053f4a8a]
22965:
22966: * OPTIONS, options.h:
22967: updated MAILSUBJECT
22968: [18d1573fcd2a]
22969:
22970: * logging.c:
22971: added %h expansion
22972: [a4bff9b284fd]
22973:
22974: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
22975: configure.in, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
22976: goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
22977: insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex,
22978: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
22979: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
22980: visudo.c:
22981: ++version
22982: [211ff20f956f]
22983:
22984: * BUGS, emul/utime.h:
22985: ++version
22986: [cde5376579e3]
22987:
22988: * sudoers.pod:
22989: document Runas_Alias
22990: [b1a58f28fb2c]
22991:
22992: * visudo.pod:
22993: q (uid) -> Q
22994: [d256649a0e6b]
22995:
22996: * visudo.c:
22997: buffer oflow checking q (uit) -> Q if yyparse() fails drop into
22998: whatnow
22999: [1cb183d15626]
23000:
23001: * parse.yacc:
23002: add size params to sprintf
23003: [9228f698921f]
23004:
23005: * parse.lex:
23006: allow trailing space after '\\' but before '\n'
23007: [f51dbbf69fdf]
23008:
23009: * find_path.c:
23010: off by one error in path size check
23011: [a6d75ccd7632]
23012:
23013: * check.c:
23014: sprintf paranoia
23015: [3ffb12d198dd]
23016:
23017: 1996-11-12 Todd C. Miller <Todd.Miller@courtesan.com>
23018:
23019: * parse.yacc:
23020: fixed more_aliases
23021: [aab12f2a50af]
23022:
23023: * visudo.c:
23024: now warns if killed by signal ./
23025: [310c186a0fd7]
23026:
23027: 1996-11-11 Todd C. Miller <Todd.Miller@courtesan.com>
23028:
23029: * parse.yacc:
23030: fix Runas_Alias stuff Alias's in runas list now get expanded (but it
23031: is gross)
23032: [45590b83120f]
23033:
23034: * sudo.c:
23035: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE == 0400
23036: [d53e01c14c58]
23037:
23038: * parse.yacc:
23039: add Runas_Alias support change FOO to FOO_ALIAS (ie: USER_ALIAS)
23040: [7a4a040aae2d]
23041:
23042: * parse.lex:
23043: Add Runas_Alias and simplify a rule.
23044: [6f794a769a37]
23045:
23046: * parse.yacc:
23047: always store User_Alias's since they can be used inside of a runas
23048: list. Sigh. Really need a Runas_Alias instead.
23049: [3bab058a873e]
23050:
23051: 1996-10-30 Todd C. Miller <Todd.Miller@courtesan.com>
23052:
23053: * visudo.c:
23054: deal with case where there is no sudoers file
23055: [fa38b3bb244d]
23056:
23057: 1996-10-12 Todd C. Miller <Todd.Miller@courtesan.com>
23058:
23059: * TROUBLESHOOTING:
23060: added one
23061: [e61346d06725]
23062:
23063: 1996-10-11 Todd C. Miller <Todd.Miller@courtesan.com>
23064:
23065: * HISTORY, testsudoers.c:
23066: developement -> development
23067: [4df55e293941]
23068:
23069: * INSTALL:
23070: added a note
23071: [3845fb83dbc0]
23072:
23073: * RUNSON:
23074: for 1.5.2
23075: [5489b7298942]
23076:
23077: * CHANGES:
23078: updated
23079: [0741834929e6]
23080:
23081: 1996-10-10 Todd C. Miller <Todd.Miller@courtesan.com>
23082:
23083: * PORTING:
23084: removed seteuid() notes
23085: [1010a60f281d] [SUDO_1_5_2]
23086:
23087: 1996-10-09 Todd C. Miller <Todd.Miller@courtesan.com>
23088:
23089: * compat.h:
23090: better seteuid() emulatino
23091: [e807623b662c]
23092:
23093: * configure.in:
23094: added check for seteuid
23095: [8cf9fabc6f4f]
23096:
23097: * config.h.in:
23098: added HAVE_SETEUID
23099: [596db46aa828]
23100:
23101: 1996-10-08 Todd C. Miller <Todd.Miller@courtesan.com>
23102:
23103: * configure.in:
23104: first stab at sequent support
23105: [b85a7bfcac76]
23106:
23107: * config.h.in:
23108: added HAVE_SYS_SELECT_H
23109: [93ecdd042463]
23110:
23111: * compat.h:
23112: sequent -> _SEQUENT_
23113: [63a38b6da98c]
23114:
23115: * compat.h:
23116: added seteuid() macro for DYNIX
23117: [695bd63c5ea6]
23118:
23119: * tgetpass.c:
23120: _AIX -> HAVE_SYS_SELECT_H
23121: [b31221211bc2]
23122:
23123: 1996-10-07 Todd C. Miller <Todd.Miller@courtesan.com>
23124:
23125: * BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in, logging.c,
23126: parse.c, parse.lex, parse.yacc, putenv.c, strdup.c, sudo_setenv.c,
23127: testsudoers.c, tgetpass.c, utime.c, visudo.c:
23128: ++version
23129: [8052992fd453]
23130:
23131: * check.c, compat.h, dce_pwent.c, emul/utime.h, find_path.c,
23132: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
23133: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
23134: pathnames.h.in, version.h:
23135: ++version
23136: [f7ad15e1598a]
23137:
23138: * sudo.pod:
23139: added -H and SUDO_PS1
23140: [bb965241e30c]
23141:
23142: * configure.in:
23143: use SUDO_FUNC_FNMATCH
23144: [6a8350d85fb2]
23145:
23146: * aclocal.m4:
23147: added SUDO_FUNC_FNMATCH
23148: [45b32c91c4ba]
23149:
23150: * sudo.c:
23151: added -H flag
23152: [11ebc6872fd6]
23153:
23154: * sudo.h:
23155: added MODE_RESET_HOME /
23156: [67a7f8bcbbd6]
23157:
23158: 1996-10-05 Todd C. Miller <Todd.Miller@courtesan.com>
23159:
23160: * INSTALL:
23161: mention OPIE
23162: [5723515d5bbd]
23163:
23164: * options.h:
23165: SKEY -> OTP
23166: [c1d268130bc4]
23167:
23168: * configure.in:
23169: added opie support
23170: [123872b41b20]
23171:
23172: * compat.h, config.h.in:
23173: added HAVE_OPIE
23174: [528c71afc1e5]
23175:
23176: * check.c:
23177: added HAVE_OPIE and changed to *_OTP_*
23178: [4c62f5db872a]
23179:
23180: * OPTIONS:
23181: SKEY -> OTP
23182: [bd858e5e9652]
23183:
23184: 1996-10-04 Todd C. Miller <Todd.Miller@courtesan.com>
23185:
23186: * check.c:
23187: moved fclose() in skey stuff.
23188: [11f7dc8431a6]
23189:
23190: 1996-10-03 Todd C. Miller <Todd.Miller@courtesan.com>
23191:
23192: * putenv.c:
23193: index -> strchr remove unnecesary stuff
23194: [af2d05238062]
23195:
23196: * check.c:
23197: now call skeychallenge() to get challenge instead of making one up
23198: ourselves. this way, we get extra goodies in the prompt.
23199: [49b770d98d3a]
23200:
23201: 1996-09-10 Todd C. Miller <Todd.Miller@courtesan.com>
23202:
23203: * CHANGES:
23204: added one
23205: [3f5149357e2a] [SUDO_1_5_1]
23206:
23207: * parse.lex:
23208: allow logins to start with a number (YUCK!)
23209: [7ed7ef324741]
23210:
23211: 1996-09-08 Todd C. Miller <Todd.Miller@courtesan.com>
23212:
23213: * TROUBLESHOOTING:
23214: added soalris 2.5 vs 2.4 note
23215: [16160a251aae]
23216:
23217: * configure.in:
23218: DUNIX doesn't need -lnsl
23219: [be924cc322c3]
23220:
23221: * CHANGES:
23222: *** empty log message ***
23223: [1b2937521981]
23224:
23225: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
23226: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
23227: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
23228: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
23229: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c,
23230: utime.c, version.h, visudo.c:
23231: courtesan
23232: [5f203589bbfe]
23233:
23234: * PORTING, README, RUNSON:
23235: courtesan
23236: [d72517f4937e]
23237:
23238: * INSTALL, Makefile.in, TROUBLESHOOTING:
23239: courtesan
23240: [5c007e3c7a71]
23241:
23242: * visudo.pod:
23243: *** empty log message ***
23244: [37ebe85bd4e1]
23245:
23246: * sudo.pod, visudo.pod:
23247: courtesan
23248: [37f02e2130ea]
23249:
23250: 1996-09-07 Todd C. Miller <Todd.Miller@courtesan.com>
23251:
23252: * HISTORY:
23253: added courtesan ./
23254: [b01435226276]
23255:
23256: 1996-09-06 Todd C. Miller <Todd.Miller@courtesan.com>
23257:
23258: * sudo.c:
23259: added $SUDO_PROMPT support
23260: [cb1fa72c093d]
23261:
23262: 1996-09-04 Todd C. Miller <Todd.Miller@courtesan.com>
23263:
23264: * check.c:
23265: print long skey challemged to stderr, not stdout
23266: [750fc775b3b2]
23267:
23268: 1996-09-01 Todd C. Miller <Todd.Miller@courtesan.com>
23269:
23270: * CHANGES:
23271: updated for 1.5.1
23272: [9b615f393057]
23273:
23274: * emul/utime.h:
23275: ++version
23276: [a94de18deafb]
23277:
23278: 1996-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
23279:
23280: * RUNSON:
23281: updated for 1.5.1
23282: [4092f20ab634]
23283:
23284: 1996-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
23285:
23286: * check.c:
23287: use shost, not host for tgetpass
23288: [6061c49ff9be]
23289:
23290: * sudo.pod:
23291: documented %u and %h
23292: [6d2922d29897]
23293:
23294: * OPTIONS:
23295: documented %u and %h
23296: [1a71da13a864]
23297:
23298: * configure.in:
23299: fixed typo
23300: [1230dec2b062]
23301:
23302: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
23303: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
23304: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
23305: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
23306: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
23307: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
23308: ++version
23309: [65ce8eabf77a]
23310:
23311: * BUGS:
23312: ++version
23313: [afecab53aab7]
23314:
23315: 1996-08-29 Todd C. Miller <Todd.Miller@courtesan.com>
23316:
23317: * Makefile.in, configure.in, version.h:
23318: ++version
23319: [fb3ff940d672]
23320:
23321: * sudo.h:
23322: new tgetpass() params
23323: [9eccc5b0f8ae]
23324:
23325: * check.c:
23326: pass use and host to tgetpass
23327: [c56d9d13c401]
23328:
23329: * tgetpass.c:
23330: added %u and %h escapes
23331: [04ae775d3e5d]
23332:
23333: * OPTIONS, check.c, options.h:
23334: added NO_MESSAGE
23335: [3927dad19057]
23336:
23337: * configure.in:
23338: added cray (unicos) support
23339: [1122210c5fb1]
23340:
23341: 1996-08-27 Todd C. Miller <Todd.Miller@courtesan.com>
23342:
23343: * OPTIONS, options.h, sudo.c:
23344: added SHELL_SETS_HOME
23345: [0b26909b0929]
23346:
23347: 1996-08-25 Todd C. Miller <Todd.Miller@courtesan.com>
23348:
23349: * INSTALL:
23350: added note about "make install"
23351: [7e56ea76d4b4]
23352:
23353: * parse.yacc:
23354: changed length/size params from int to size_t
23355: [5654e5ceb1b3]
23356:
23357: * OPTIONS:
23358: now get CSOPS insults as well by default
23359: [297323d0179a]
23360:
23361: * insults.h:
23362: use csops insults too by default
23363: [07fafc136169]
23364:
23365: * INSTALL, Makefile.in, README, config.h.in, configure.in, version.h:
23366: version = 1.5
23367: [4b8772b11e3b]
23368:
23369: * sudo.c:
23370: added runas_homedir
23371: [b0e0d4417a15]
23372:
23373: * TODO:
23374: updated for 1.5
23375: [66259df825d5]
23376:
23377: * RUNSON:
23378: updated for 1.5
23379: [e08bc9ebfe95]
23380:
23381: * CHANGES:
23382: 1.5 release
23383: [8c16942fea41]
23384:
23385: * INSTALL:
23386: added "upgrading" notes
23387: [210d968964ff]
23388:
23389: 1996-08-22 Todd C. Miller <Todd.Miller@courtesan.com>
23390:
23391: * visudo.c:
23392: now do chmod and chown after edit of temp file and before rename
23393: [de174e34faa7] [SUDO_1_5_0]
23394:
23395: 1996-08-18 Todd C. Miller <Todd.Miller@courtesan.com>
23396:
23397: * Makefile.in:
23398: ++version added INSTALL.configure
23399: [c9e9214f52ae]
23400:
23401: * configure.in, version.h:
23402: ++version
23403: [5985abed3eb2]
23404:
23405: * TROUBLESHOOTING:
23406: *** empty log message ***
23407: [d65c540ec52e]
23408:
23409: * parse.yacc:
23410: added missing cast
23411: [e7247319a7d5]
23412:
23413: * sudo.c:
23414: sets $HOME to pw_dir of runas user
23415: [d3f7f4d05752]
23416:
23417: * sudo.pod:
23418: document $HOME change
23419: [854454d458c4]
23420:
23421: 1996-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
23422:
23423: * sudo.pod:
23424: fixed up some wording
23425: [b0c8582f2c97]
23426:
23427: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
23428: interfaces.c, logging.c, parse.c, parse.lex, parse.yacc, putenv.c,
23429: strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
23430: visudo.c:
23431: ++version
23432: [748be723fd8b]
23433:
23434: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
23435: insults.h, options.h, pathnames.h.in, sudo.h:
23436: ++version
23437: [acdf8b1b2a1b]
23438:
23439: * emul/utime.h:
23440: ++version
23441: [b3f35298ab8d]
23442:
23443: * sudo.h:
23444: name nad type changes
23445: [db24ab3da141]
23446:
23447: * testsudoers.c:
23448: now works with new sudo
23449: [379346c42cc2]
23450:
23451: * parse.yacc:
23452: fixed some XXX
23453: [f5fe4c990052]
23454:
23455: * parse.yacc:
23456: some variable name changes + comment headers for functions.
23457: [3dc3bd9aa73d]
23458:
23459: * tgetpass.c:
23460: added extra paren's to make compilers happy
23461: [9e4968a34d56]
23462:
23463: * sudo.c:
23464: *** empty log message ***
23465: [70c924c1ed69]
23466:
23467: * parse.c:
23468: now uses init_parser() if not in sudoers and tries "list" or
23469: "validate" scold but don't be nasty.
23470: [c0d8fb3f8c9e]
23471:
23472: * TROUBLESHOOTING:
23473: now can use upper case login names
23474: [c772fffcefe5]
23475:
23476: * visudo.c:
23477: now uses init_parser()
23478: [b9efae7243fd]
23479:
23480: * INSTALL, README:
23481: updated
23482: [27dc8283fdc8]
23483:
23484: * PORTING:
23485: added info about PASSWORD_TIMEOUT
23486: [980e15d892f8]
23487:
23488: * INSTALL.configure:
23489: Initial revision
23490: [8292e89a08d3]
23491:
23492: * BUGS:
23493: fixed a bug ,
23494: [c6e46f5624f9]
23495:
23496: * parse.yacc:
23497: now dynamically allocates memory for the stacks -- no more
23498: overflows!
23499: [8615c35b6ad3]
23500:
23501: * sudo.pod:
23502: -l now explands command aliases
23503: [39f45605935d]
23504:
23505: * parse.yacc:
23506: hacks to expand command aliases for `sudo -l'
23507: [e4eb752608f9]
23508:
23509: * sudo.c:
23510: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh, and bash)
23511: [01327ca5084b]
23512:
23513: * sudo.h:
23514: added struct command_alias
23515: [dd2f32764082]
23516:
23517: * sudo.pod:
23518: fixed a bug
23519: [e708ff08d2eb]
23520:
23521: * lsearch.c:
23522: in compar() key should be first arg
23523: [fc14c3fa62ee]
23524:
23525: 1996-08-15 Todd C. Miller <Todd.Miller@courtesan.com>
23526:
23527: * BUGS:
23528: fixed some bugs
23529: [639dfe425bd5]
23530:
23531: * parse.yacc:
23532: can now deal with upcase HOST and USER names
23533: [c6aa7bcfb00d]
23534:
23535: * sudo.c:
23536: don't yell too loudly at non-sudoers if they do "sudo -l"
23537: [4ef146128d89]
23538:
23539: * sudo.pod:
23540: fixed thinko
23541: [830f2f0f22e7]
23542:
23543: * parse.c:
23544: fix comment
23545: [d20ce9e17ddc]
23546:
23547: 1996-08-09 Todd C. Miller <Todd.Miller@courtesan.com>
23548:
23549: * parse.c, parse.yacc:
23550: added support for new `sudo -l' stuff
23551: [7dceaef3c733]
23552:
23553: * sudo.c:
23554: now uses list_matches()
23555: [293364821b61]
23556:
23557: * sudo.h:
23558: added struct sudo_match
23559: [b2684179d179]
23560:
23561: * configure.in:
23562: now more -lgnumalloc
23563: [4f8ae42617d8]
23564:
23565: 1996-08-01 Todd C. Miller <Todd.Miller@courtesan.com>
23566:
23567: * install-sh:
23568: added more paths for chown and whoami
23569: [6e685a19426c]
23570:
23571: 1996-07-31 Todd C. Miller <Todd.Miller@courtesan.com>
23572:
23573: * check.c:
23574: typo
23575: [3adfa01c04bc]
23576:
23577: 1996-07-30 Todd C. Miller <Todd.Miller@courtesan.com>
23578:
23579: * aclocal.m4:
23580: fixed DUNIX check for shadow pw
23581: [c25324bcd27b]
23582:
23583: * tgetpass.c:
23584: now only turn off echo if it is already on. this fixes a race when
23585: you use sudo in a pipelin
23586: [28388c2de21c]
23587:
23588: * INSTALL:
23589: updated
23590: [b45ac9366b7e]
23591:
23592: * configure.in:
23593: changed "test -z $foo && do_this" to if; then construct
23594: [2183c4426bca]
23595:
23596: 1996-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
23597:
23598: * configure.in:
23599: added missing defines of SHADOW_TYPE
23600: [be89ea68a7f3]
23601:
23602: 1996-07-26 Todd C. Miller <Todd.Miller@courtesan.com>
23603:
23604: * check.c:
23605: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since they are
23606: only in dunix 4.x
23607: [1e7c1c677263]
23608:
23609: * getspwuid.c:
23610: added AUTH_CRYPT_C1CRYPT support
23611: [88d6b0058b20]
23612:
23613: * parse.c:
23614: no longer return VALIDATE_NOT_OK if there was a runas that didn't
23615: match. Now we can have runas stuff on more than one line.
23616: [52b68920d7b7]
23617:
23618: * getspwuid.c, sudo.c, tgetpass.c:
23619: use SHADOW_TYPE instead of HAVE_C2_SECURITY
23620: [cf401dfcbc06]
23621:
23622: * configure.in:
23623: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always defined to
23624: something
23625: [c7a233c4dd93]
23626:
23627: * config.h.in:
23628: removed HAVE_C2_SECURITY added SPW_BSD
23629: [8314405e9754]
23630:
23631: * compat.h:
23632: use SHADOW_TYPE instead of HAVE_C2_SECURITY
23633: [6f94870df17f]
23634:
23635: * check.c:
23636: SHADOW_TYPE is always defined so just against its value
23637: [72c69a55d02f]
23638:
23639: * aclocal.m4:
23640: added SUDO_CHECK_SHADOW_DUNIX
23641: [ef025ae9d496]
23642:
23643: 1996-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
23644:
23645: * sudoers.pod:
23646: * -> ?* in one example added another instance of (runas) and one of
23647: NOPASSWD:
23648: [d74fe1dcbe7d]
23649:
23650: 1996-07-24 Todd C. Miller <Todd.Miller@courtesan.com>
23651:
23652: * configure.in:
23653: added back check for config.cache from other host type
23654: [0ba87871f585]
23655:
23656: * parse.lex:
23657: removed an instance of \"
23658: [1e008d3709f6]
23659:
23660: * sample.sudoers:
23661: added an example
23662: [dbfcf68ee330]
23663:
23664: * sudoers.pod:
23665: updated wrt new wildcard matching
23666: [193fa44a475b]
23667:
23668: * configure.in:
23669: new check for shadow passwords if we don't know anything
23670: [67465df7dc9a]
23671:
23672: * aclocal.m4:
23673: new SUDO_CHECK_SHADOW_GENERIC
23674: [3563b16a41b8]
23675:
23676: * configure.in:
23677: added back check for -lsocket (oops)
23678: [a80882ee1cb6]
23679:
23680: * configure.in:
23681: better (working) check for shadow passwd type if we know to use C2.
23682: [3cdd2a59a641]
23683:
23684: * configure.in:
23685: now uses AC_CANONICAL_HOST to figure out os type
23686: [80db7fe6e704]
23687:
23688: * Makefile.in:
23689: added config.{guess,sub}
23690: [c6be7e3ca384]
23691:
23692: * aclocal.m4:
23693: removed unused stuff to figure out os type
23694: [c9a0f3b57123]
23695:
23696: * config.sub:
23697: added openbsd
23698: [bfc6bfec3668]
23699:
23700: * config.sub:
23701: Initial revision
23702: [e6e06ce0d17d]
23703:
23704: * config.guess:
23705: Initial revision
23706: [99dd06f79199]
23707:
23708: * testsudoers.c:
23709: don't call fnmatch() with FNM_PATHNAME flag unless it can only be a
23710: pathname. need to check against sudoers_args even if user_args is
23711: nil
23712: [66e6cf77f5d6]
23713:
23714: * parse.c:
23715: don't call fnmatch() with FNM_PATHNAME flag unless it can only be a
23716: pathname need to check against sudoers_args even if user_args is nil
23717: [74374df17311]
23718:
23719: 1996-07-23 Todd C. Miller <Todd.Miller@courtesan.com>
23720:
23721: * check.c:
23722: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
23723: [cbb00261c415]
23724:
23725: * testsudoers.c:
23726: now takes command line args and uses cmnd_args
23727: [f0c2fd35a527]
23728:
23729: * parse.lex:
23730: fill_args was adding an extra leading space
23731: [692fc999b2e8]
23732:
23733: 1996-07-22 Todd C. Miller <Todd.Miller@courtesan.com>
23734:
23735: * visudo.c:
23736: fixed dummy command_matches()
23737: [93d9543db6e2]
23738:
23739: * parse.yacc:
23740: fixed prototype
23741: [7b0addfbd429]
23742:
23743: * sudo.h:
23744: added cmnd_args
23745: [8f47c4ae65ef]
23746:
23747: * parse.yacc:
23748: now uses flat args string
23749: [016e65877da3]
23750:
23751: * parse.c, parse.lex:
23752: now uses flat arg string
23753: [5b5f2e3f4c09]
23754:
23755: * visudo.c:
23756: added cmnd_args def
23757: [876867134775]
23758:
23759: * sudo.c:
23760: now sets cmnd_args global
23761: [e6fee70cb59b]
23762:
23763: * logging.c:
23764: cmnd_args is now exported from sudo.[ch]
23765: [7a9cd36e356f]
23766:
23767: 1996-07-21 Todd C. Miller <Todd.Miller@courtesan.com>
23768:
23769: * parse.yacc:
23770: can't rely on cmnd_matches as much as I thought -- added some $$
23771: stuff back in to prevent namespace pollution problems.
23772: [3c45fedb5af3]
23773:
23774: * parse.yacc:
23775: Simplified parse rules wrt runas and NOPASSWD (more consistent).
23776: [e6d838c8a4c7]
23777:
23778: 1996-07-20 Todd C. Miller <Todd.Miller@courtesan.com>
23779:
23780: * parse.lex:
23781: NOPASSWD may now have blanks before the ':' '(' only starts a
23782: 'runas' if in the initial state to avoid collision with command args
23783: [c5c01172f499]
23784:
23785: * configure.in:
23786: added checks for specific shadow passwd schemes
23787: [b7e3d1f7b84f]
23788:
23789: * aclocal.m4:
23790: added routines to check for specific shadow passwd types
23791: [e5e1d19960a6]
23792:
23793: 1996-07-18 Todd C. Miller <Todd.Miller@courtesan.com>
23794:
23795: * configure.in:
23796: added support for ncr boxen
23797: [bea9dc5aae7f]
23798:
23799: * aclocal.m4:
23800: added support for detecting ncr boxen
23801: [8653a158a924]
23802:
23803: 1996-07-16 Todd C. Miller <Todd.Miller@courtesan.com>
23804:
23805: * configure.in:
23806: added sinix support
23807: [5de2b2173ee1]
23808:
23809: 1996-07-14 Todd C. Miller <Todd.Miller@courtesan.com>
23810:
23811: * TROUBLESHOOTING:
23812: added info about "config.cache from other other" error.
23813: [845b10198e0b]
23814:
23815: * aclocal.m4:
23816: now makes sure you don't have a config.cache file from another OS
23817: [4fe32571c021]
23818:
23819: * configure.in:
23820: now sets $LIBS when needed to configure links with libs when doing
23821: tests hpux10 now uses SPW_SECUREWARE for C2 added check for
23822: bigcrypt(3) if SPW_SECUREWARE
23823: [2df6b8ca538f]
23824:
23825: * getspwuid.c:
23826: fixed typo
23827: [fe1cb1d792d6]
23828:
23829: * tgetpass.c:
23830: now include stuff for SPW_SECUREWARE to get AUTH_MAX_PASSWD_LENGTH
23831: [f71138372c07]
23832:
23833: * getspwuid.c:
23834: no more SPW_HPUX10
23835: [cfdeb18bc16b]
23836:
23837: * config.h.in:
23838: no more SPW_HPUX10 added HAVE_BIGCRYPT
23839: [00d296479a61]
23840:
23841: * compat.h:
23842: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
23843: [6c6d9e680417]
23844:
23845: * check.c:
23846: SPW_SECUREWARE now uses bigcrypt
23847: [be71fc66690f]
23848:
23849: 1996-07-13 Todd C. Miller <Todd.Miller@courtesan.com>
23850:
23851: * sample.sudoers:
23852: fixed 2 syntax errors
23853: [45eee19ef4ac]
23854:
23855: * sudoers:
23856: root may now run ALL as ALL
23857: [1b54c6b9b212]
23858:
23859: 1996-07-12 Todd C. Miller <Todd.Miller@courtesan.com>
23860:
23861: * interfaces.c:
23862: fixed a typo/thinko that broke BSD's with sa_len
23863: [603438360126]
23864:
23865: 1996-07-08 Todd C. Miller <Todd.Miller@courtesan.com>
23866:
23867: * check.c, configure.in:
23868: updated AFS support
23869: [e572eb8d177a]
23870:
23871: * TROUBLESHOOTING:
23872: added entry about /usr/ucb/cc
23873: [025b353aa9d3]
23874:
23875: * INSTALL:
23876: prep no longer holds gcc binaries
23877: [8b0942958049]
23878:
23879: * INSTALL:
23880: updated AFS note
23881: [7af6efd5abe4]
23882:
23883: * Makefile.in:
23884: added @AFS_LIBS@
23885: [97b6fe6ad7d6]
23886:
23887: * compat.h:
23888: AFS allows long passwords
23889: [5fb17122c302]
23890:
23891: * testsudoers.c:
23892: fixed -u user support
23893: [b1a0c1648639]
23894:
23895: * parse.c:
23896: sudo -v now groks VALIDATE_OK_NOPASS
23897: [74fc03fffe7e]
23898:
23899: * parse.yacc:
23900: fixed no_passwd vs. runas_matched
23901: [549a9b791a6a]
23902:
23903: * TROUBLESHOOTING:
23904: took out stuff about NFS-mounting since it is no longer an issue
23905: [d95ab7fbbc61]
23906:
23907: * INSTALL:
23908: added --with-libraries > --with-libpath --with-incpath
23909: [d5d15a7a0f4c]
23910:
23911: * parse.yacc:
23912: was setting runas_matches to -1 in wrong place
23913: [db2b1deb8d33]
23914:
23915: * check.c:
23916: removed usersec.h which is not present in new AFS versions
23917: [618b016dd17f]
23918:
23919: * tgetpass.c:
23920: now deals with timeout <= 0
23921: [ba53a1257255]
23922:
23923: * OPTIONS:
23924: updated
23925: [75093bd8fdca]
23926:
23927: * configure.in:
23928: BSD/OS >= 2.0 now uses shlicc instead of just gcc
23929: [ff6dbf7825c2]
23930:
23931: * sudo.c:
23932: fixed backwards compatibility with sudo 1.4 sudoers mode for root
23933: readable/writable filesystems
23934: [2694ed627221]
23935:
23936: * Makefile.in:
23937: now gives INSTALL -c flag
23938: [63db055a2fd1]
23939:
23940: * parse.yacc:
23941: slightly simpler initialization of no_passwd and runas_matches
23942: [463a1b5fa323]
23943:
23944: * testsudoers.c:
23945: added -u username support
23946: [38b072fcd6b3]
23947:
23948: * configure.in:
23949: improved --with-libraries support
23950: [047dbc5f0af2]
23951:
23952: 1996-07-07 Todd C. Miller <Todd.Miller@courtesan.com>
23953:
23954: * configure.in:
23955: added --with-incpath, --with-libpath, --with-libraries
23956: [20f20d6c718c]
23957:
23958: * parse.yacc:
23959: now initializes some fields that weren't getting set to -1 pretty
23960: gross -- need a rewrite.
23961: [021c160390c6]
23962:
23963: 1996-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
23964:
23965: * alloca.c:
23966: removed emacs'isms
23967: [9d4ec2efe057]
23968:
23969: * configure.in:
23970: no longer add -lPW to *_LIBS since we include alloca.c
23971: [a626d1bbea80]
23972:
23973: * config.h.in:
23974: added HAVE_ALLOCA_H
23975: [15491e2a6cff]
23976:
23977: * Makefile.in:
23978: added alloca.c
23979: [0400f25e1fe4]
23980:
23981: * alloca.c:
23982: Initial revision
23983: [06d033aa4882]
23984:
23985: * configure.in:
23986: ++version
23987: [f52c0fb98f90]
23988:
23989: 1996-06-25 Todd C. Miller <Todd.Miller@courtesan.com>
23990:
23991: * sudo.c:
23992: now set uid to 1 instead of nobody for PERM_SUDOERS since nobody is
23993: not always set to a valid uid.
23994: [c2669f77704d]
23995:
23996: * OPTIONS:
23997: fixed entry for SUDO_MODE
23998: [d7272f6035b8]
23999:
24000: * sudo.c:
24001: Fixed NFS-mounted sudoers file under solaris both uid *and* gid were
24002: being set to -2. Now beat NFS to the punch and set uid to "nobody"
24003: ourselves, preserving group 0 to read sudoers.
24004: [b1fbc5dd1e34]
24005:
24006: * parse.c:
24007: moved set_perms(PERM_ROOT) to be before yyparse()
24008: [7619d8080735]
24009:
24010: * logging.c:
24011: fixed a typo
24012: [318acc48cde0]
24013:
24014: * configure.in:
24015: no longer need AC_PROG_INSTALL
24016: [de01b1336dc8]
24017:
24018: * Makefile.in:
24019: always use install-sh to avoid install(1)'s that use get{pw,gr}nam
24020: [ea2351986406]
24021:
24022: * INSTALL:
24023: make clean -> make distclean
24024: [704a98e8ba10]
24025:
24026: 1996-06-20 Todd C. Miller <Todd.Miller@courtesan.com>
24027:
24028: * parse.yacc:
24029: removed some unnecsary if's
24030: [f00db6508132]
24031:
24032: * Makefile.in, version.h:
24033: ++version
24034: [bdb6740b24c8]
24035:
24036: * parse.c, testsudoers.c:
24037: now includes netgroup.h
24038: [93f5a06352bc]
24039:
24040: * interfaces.c:
24041: removed cats of ioctl to int since they didn't shut up -Wall
24042: [83e9f912cd7a]
24043:
24044: * interfaces.c:
24045: explicately cast ioctl() to int since it it not always declared
24046: [2ff9294e469e]
24047:
24048: * sudo.h:
24049: added declarations for yyparse() and yylex()
24050: [6071321ab771]
24051:
24052: * parse.yacc:
24053: fixed an occurence of '==' -> '='
24054: [2c46d2e11d57]
24055:
24056: * config.h.in, configure.in:
24057: added check for netgroup.h
24058: [73403050f4e3]
24059:
24060: * sudo.c:
24061: fixed 2 compiler warnings
24062: [680929b0bd97]
24063:
24064: * sudo.c:
24065: SHELL_IF_NO_ARGS caused core dump since NewArg[cv] weren't being
24066: initialized
24067: [18707ecd07c2]
24068:
24069: 1996-06-19 Todd C. Miller <Todd.Miller@courtesan.com>
24070:
24071: * sudo.pod:
24072: fixed a typo
24073: [e4b5c12aa130]
24074:
24075: 1996-06-17 Todd C. Miller <Todd.Miller@courtesan.com>
24076:
24077: * parse.yacc:
24078: fixed a formatting thingie
24079: [c79327b6f19b]
24080:
24081: * parse.c, parse.yacc:
24082: fixed -u support with multiple user lists on a line
24083: [e4d1066adca2]
24084:
24085: * configure.in:
24086: unixware needs -lgen
24087: [b5bf9bca63cc]
24088:
24089: * README:
24090: updated ftp location
24091: [b25a033f7921]
24092:
24093: * sudoers.pod:
24094: add net_addr/netmask support
24095: [674e83516d1e]
24096:
24097: * sample.sudoers:
24098: added net_addr/mask example
24099: [774878e89b28]
24100:
24101: * parse.c, parse.lex:
24102: added support for net_addr/netmask
24103: [e33de27325d8]
24104:
24105: 1996-06-16 Todd C. Miller <Todd.Miller@courtesan.com>
24106:
24107: * sudoers.pod:
24108: ^ -> !
24109: [1a084950d6ef]
24110:
24111: 1996-06-15 Todd C. Miller <Todd.Miller@courtesan.com>
24112:
24113: * RUNSON:
24114: updated for 1.4.3
24115: [c82019025d09]
24116:
24117: * CHANGES:
24118: udpated for 1.4.3
24119: [ceaa81adb8f0]
24120:
24121: * BUGS, TODO, TROUBLESHOOTING:
24122: updated
24123: [ff94fae4b853]
24124:
24125: * sample.sudoers:
24126: updated with examples of new stuff
24127: [99d0b4cb4c9c]
24128:
24129: * INSTALL, README:
24130: ++version
24131: [b763b80fe836]
24132:
24133: * sudoers.pod:
24134: updated wrt -u and NOPASSWD
24135: [0b5b722ea0f4]
24136:
24137: * sudo.pod:
24138: updated wrt -u and CAVEATS
24139: [71d5d53b5d18]
24140:
24141: 1996-06-09 Todd C. Miller <Todd.Miller@courtesan.com>
24142:
24143: * sudo.c:
24144: fixed usage()
24145: [114c7d09b550]
24146:
24147: * parse.lex:
24148: now use :foo: character classes (makes no diff for generated lexer)
24149: [7b0aeb737a02]
24150:
24151: 1996-06-07 Todd C. Miller <Todd.Miller@courtesan.com>
24152:
24153: * check.c:
24154: fixed LONG_SKEY_PROMPT stuff
24155: [0efe78b4bdda]
24156:
24157: 1996-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
24158:
24159: * visudo.c:
24160: fixed a comment
24161: [3d289017104b]
24162:
24163: * lsearch.c:
24164: make more like NetBSD one -- now compiles w/o warnings
24165: [932206296a54]
24166:
24167: * emul/search.h:
24168: fixed decls of lsearch()
24169: [c58cf4584c45]
24170:
24171: * config.h.in, configure.in, getspwuid.c:
24172: added SPW_HPUX10
24173: [d74e5eaa5f17]
24174:
24175: * check.c:
24176: hpux 10 uses bigcrypt() if C2
24177: [359eb63f4021]
24178:
24179: 1996-06-04 Todd C. Miller <Todd.Miller@courtesan.com>
24180:
24181: * parse.c:
24182: now always uses fnmatch to match args
24183: [a9d91f35256a]
24184:
24185: * tgetpass.c:
24186: back to using stdio instead of raw i/o since that caused some
24187: problems
24188: [e7ce2bc92974]
24189:
24190: 1996-05-29 Todd C. Miller <Todd.Miller@courtesan.com>
24191:
24192: * sudo.c:
24193: now give usage warning if use -l,-v,-k with args
24194: [6b48180c4fea]
24195:
24196: 1996-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
24197:
24198: * sudo.c:
24199: NewArgc is now set to 1 for -l, -v, -k
24200: [7497cb1416a8]
24201:
24202: * sudo.c:
24203: now sets sudoers to correct group if mode is 0400
24204: [484c43d99718]
24205:
24206: * install-sh:
24207: updated to version used by inn and bind
24208: [28683ad8725a]
24209:
24210: * configure.in:
24211: now uses -lgnumalloc if it exists
24212: [3651ca4415a2]
24213:
24214: * Makefile.in:
24215: "make install" now sets uid/gid and mode on sudoers if it exists
24216: [1f5216191ae9]
24217:
24218: * sudo.c:
24219: rmeoved debugging statements
24220: [aeda278e2c26]
24221:
24222: * parse.yacc:
24223: added a missing free()
24224: [592c9482a159]
24225:
24226: * sudo.c:
24227: now uses user_gid instead of getegid (which was wrong anyway) to set
24228: SUDO_GID Now sets command line args in SUDO_COMMAND envariabled
24229: (logging.c depends on args being in the environment)
24230: [9f5328a3b942]
24231:
24232: * logging.c:
24233: now uses SUDO_COMMAND envariable to get command args rather than
24234: building it up again.
24235: [7f8edc5bccb7]
24236:
24237: * parse.c:
24238: now uses user_gid
24239: [4b9303ae45fe]
24240:
24241: * sudo.c:
24242: fixed off by one error in allocation NewArgv
24243: [921ea1a4e7c6]
24244:
24245: * parse.c:
24246: in sudoers, 'command ""' now means command with no args
24247: [a5273648ace2]
24248:
24249: * configure.in:
24250: added check for fnmatch(3) and fnmatch.h
24251: [258916a7866f]
24252:
24253: * config.h.in:
24254: added HAVE_FNMATCH
24255: [b9860d361e93]
24256:
24257: * Makefile.in:
24258: replaced wildcat.* with fnmatch.*
24259: [03ad9ee21a1c]
24260:
24261: * testsudoers.c:
24262: now uses fnmatch()
24263: [5a7f7de987a9]
24264:
24265: 1996-05-27 Todd C. Miller <Todd.Miller@courtesan.com>
24266:
24267: * parse.c:
24268: now uses fnmatch() instead of wildmat a trailing star (*) by itself
24269: now matches multiple args added support for wildcards in the
24270: pathname in sudoers
24271: [1f7fb950b868]
24272:
24273: 1996-05-25 Todd C. Miller <Todd.Miller@courtesan.com>
24274:
24275: * fnmatch.c:
24276: now includes compat.h and config.h
24277: [090206b95cf8]
24278:
24279: * config.h.in:
24280: added HAVE_FNMATCH_H
24281: [90eb42150173]
24282:
24283: * configure.in:
24284: now checks for alloca() (if needed by bison or dce) and links with
24285: -lPW if it contains alloca() and libv and compiler do not.
24286: [cfa2b3cef49a]
24287:
24288: * emul/fnmatch.h, fnmatch.3, fnmatch.c:
24289: Initial revision
24290: [20b1f762a32a]
24291:
24292: 1996-04-29 Todd C. Miller <Todd.Miller@courtesan.com>
24293:
24294: * sudo.c:
24295: now fixes mode on sudoers if set to 0400 to aid in upgrade
24296: [d4bdfd521820]
24297:
24298: 1996-04-28 Todd C. Miller <Todd.Miller@courtesan.com>
24299:
24300: * Makefile.in:
24301: fixed pod2man usage
24302: [5adf2ec77b27]
24303:
24304: * Makefile.in, configure.in, version.h:
24305: ++version
24306: [b4029de876d0]
24307:
24308: * testsudoers.c, visudo.c:
24309: runas_user is now initialized to "root"
24310: [8537d97bff39]
24311:
24312: * sudo.h:
24313: removed PERM_FULL_ROOT
24314: [241f8bbf647f]
24315:
24316: * sudo.c:
24317: runas_user defaults to "root" so no more need to PERM_RUNAS
24318: [fc0c0dfc72ba]
24319:
24320: * parse.c:
24321: will now only running commands as root if there was no runas list
24322: (or if root is in the runas list)
24323: [40c587666c81]
24324:
24325: * logging.c:
24326: now logs "USER=%s"
24327: [b733504c87fd]
24328:
24329: * parse.yacc:
24330: runas_matches is now set to false if we get a negative match
24331: [5495b150b300]
24332:
24333: * parse.lex:
24334: make #uid work + some minor cleanup
24335: [07851bbce03a]
24336:
24337: * sample.sudoers:
24338: added support for NOPASSWD and "runas" from garp@opustel.com /
24339: [7a9c67b51fa5]
24340:
24341: * visudo.c:
24342: added support for "runas" from garp@opustel.com replaced
24343: SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added support for
24344: SUDOERS_MODE
24345: [e714209b9885]
24346:
24347: * testsudoers.c:
24348: added support for "runas" from garp@opustel.com
24349: [b837f856da10]
24350:
24351: * sudo.h:
24352: added support for NO_PASSWD and runas from garp@opustel.com replaced
24353: SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support
24354: fro SUDOERS_MODE
24355: [cea6f26679b7]
24356:
24357: * sudo.c:
24358: added support for NO_PASSWD and runas from garp@opustel.com replaced
24359: SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support fro
24360: SUDOERS_MODE
24361: [61b5434237c5]
24362:
24363: * parse.yacc:
24364: added support for NO_PASSWD and runas from garp@opustel.com
24365: [72ebd3056f22]
24366:
24367: * parse.c, parse.lex:
24368: added support for NO_PASSWD and runas from garp@opustel.com
24369: [fef6dbdd114d]
24370:
24371: * logging.c:
24372: added support for SUDOERS_WRONG_MODE and "runas"
24373: [e794efc2b443]
24374:
24375: * configure.in:
24376: added --with-CC only link with -lshadow on linux (with shadow pw) if
24377: libc lacks getspnam()
24378: [3ecf4ae21002]
24379:
24380: * OPTIONS, options.h:
24381: removed NO_PASSWD since it is not possible to do this in the sudoers
24382: file itself. Replaced SUDOERS_OWNER with SUDOERS_UID and
24383: SUDOERS_GID. Added SUDOERS_MODE.
24384: [2eaa4891ef48]
24385:
24386: * Makefile.in:
24387: now uses SUDOERS_UID and SUDOERS_GID
24388: [8d615f0fdb2a]
24389:
24390: 1996-04-27 Todd C. Miller <Todd.Miller@courtesan.com>
24391:
24392: * INSTALL:
24393: added --with-CC
24394: [a1b8286a81b8]
24395:
24396: 1996-04-06 Todd C. Miller <Todd.Miller@courtesan.com>
24397:
24398: * parse.lex:
24399: added double quote support
24400: [a5e4fc7e3a2b]
24401:
24402: * sudoers.pod:
24403: documented double quoting
24404: [c6ea47969a44]
24405:
24406: 1996-04-05 Todd C. Miller <Todd.Miller@courtesan.com>
24407:
24408: * mkinstalldirs:
24409: Initial revision
24410: [dcb86d65ad8f]
24411:
24412: * check.c:
24413: fixed some indentation
24414: [4d1c5ab8072b]
24415:
24416: * Makefile.in:
24417: fixed a typo
24418: [0d27eebc7227]
24419:
24420: * Makefile.in:
24421: added install-dirs .
24422: [f499b99b8be7]
24423:
24424: 1996-04-04 Todd C. Miller <Todd.Miller@courtesan.com>
24425:
24426: * dce_pwent.c:
24427: new version from "Jeff A. Earickson" <jaearick@colby.edu>
24428: [422481be5fbd]
24429:
24430: 1996-04-03 Todd C. Miller <Todd.Miller@courtesan.com>
24431:
24432: * configure.in:
24433: $CSOPS -> $with_csops (whoops, missed one)
24434: [b04c6948130e]
24435:
24436: * BUGS:
24437: updated
24438: [c4d5713e227d]
24439:
24440: * parse.lex:
24441: FQHOST now has same constraints as non-FQHOST
24442: [e1c3bf2381d1]
24443:
24444: * INSTALL:
24445: added note about OS's w/ shadow passwords turned on by default
24446: [166257f43be4]
24447:
24448: 1996-04-02 Todd C. Miller <Todd.Miller@courtesan.com>
24449:
24450: * configure.in:
24451: fixed a typo
24452: [e5c3e2e9a359]
24453:
24454: * configure.in:
24455: added support for --without-THING sanitized shadow pw situtation by
24456: adding support for
24457: --without-C2
24458: [65dc6bf64cce]
24459:
24460: * tgetpass.c:
24461: fixed a typo wrt placement of an end paren
24462: [a8780f818231]
24463:
24464: * check.c:
24465: was closing an fd that may not have been opened
24466: [760271c7bdc9]
24467:
24468: 1996-03-22 Todd C. Miller <Todd.Miller@courtesan.com>
24469:
24470: * OPTIONS, options.h, sudo.c:
24471: added NO_PASSWD
24472: [28ff1dc93d7a]
24473:
24474: 1996-03-20 Todd C. Miller <Todd.Miller@courtesan.com>
24475:
24476: * configure.in:
24477: now always use shadow pw on some arches
24478: [069161ccffda]
24479:
24480: 1996-03-19 Todd C. Miller <Todd.Miller@courtesan.com>
24481:
24482: * configure.in:
24483: added pyramid support
24484: [a0eb57a3a531]
24485:
24486: * configure.in:
24487: no longer check for C2 if alternate passwd method is used no longer
24488: check for some libs twice
24489: [2d0c3c902b40]
24490:
24491: * parse.yacc:
24492: moved fqdn stuff into parse.lex (FQHOST)
24493: [d9c9abd481d8]
24494:
24495: * parse.lex:
24496: added FQHOST rules
24497: [4a1695acff6d]
24498:
24499: * tgetpass.c:
24500: now define TCSASOFT in necesary
24501: [3fac2e21c9ab]
24502:
24503: * tgetpass.c:
24504: now uses read/write instead of stdio string goop to avoid problems
24505: with select(2)
24506: [67fd174e518c]
24507:
24508: * OPTIONS, find_path.c, options.h:
24509: -DNO_DOT_PATH -> -DIGNORE_DOT_PATH
24510: [d05ba5100d28]
24511:
24512: 1996-03-17 Todd C. Miller <Todd.Miller@courtesan.com>
24513:
24514: * INSTALL:
24515: added note about no shadow auto-detect if using alternate auth
24516: schemes
24517: [b425592232a3]
24518:
24519: * configure.in:
24520: don't check for C2 if AFS or DCE (unless they said --with-C2)
24521: [61342962171a]
24522:
24523: * testsudoers.c:
24524: now groks shost
24525: [85dda17303f6]
24526:
24527: * OPTIONS, find_path.c, options.h:
24528: added NO_DOT_PATH
24529: [c261ca1fb196]
24530:
24531: 1996-03-16 Todd C. Miller <Todd.Miller@courtesan.com>
24532:
24533: * find_path.c:
24534: checkdot now works correctly
24535: [3bc4835bb3e9]
24536:
24537: 1996-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
24538:
24539: * configure.in:
24540: can't have DCE and C2 passwords both...
24541: [fb9a8ab7ca66]
24542:
24543: 1996-03-11 Todd C. Miller <Todd.Miller@courtesan.com>
24544:
24545: * parse.yacc, sudo.c, sudo.h, visudo.c:
24546: now uses shost even if not FQDN
24547: [87f7498b3a1f]
24548:
24549: * configure.in:
24550: now looks for skey in /usr/lib and doesn't require libskey to be in
24551: /usr/local/lib just because skey.h is (for my netbsd box :-)
24552: [ceb1763e37d2]
24553:
24554: * aclocal.m4, config.h.in, pathnames.h.in:
24555: _SUDO_PATH_ -> _CONFIG_PATH_
24556: [84d97ad13d75]
24557:
24558: * aclocal.m4, sudo.pod:
24559: /var/run/.odus -> /var/run/sudo
24560: [922da220b8f5]
24561:
24562: * pathnames.h.in:
24563: now uses _SUDO_PATH_TIMEDIR
24564: [5ecab0155fdf]
24565:
24566: * OPTIONS:
24567: udpated FQDN
24568: [361b6f7440c0]
24569:
24570: * aclocal.m4, configure.in:
24571: added SUDO_TIMEDIR
24572: [368c95c8c950]
24573:
24574: * config.h.in:
24575: added _SUDO_PATH_TIMEDIR
24576: [3879864d808c]
24577:
24578: * sudo.pod:
24579: updated wrt /var/run/sudo
24580: [9e14f2a429d3]
24581:
24582: * sudo.c, sudo.h:
24583: added support for shost if FQDN
24584: [51a3f51a09a1]
24585:
24586: * parse.yacc, visudo.c:
24587: now uses shost if FQDN
24588: [d19da2e92b42]
24589:
24590: * check.c:
24591: Now use skeylookup() instead off skeychallenge()
24592: [4c7438bb2ae0]
24593:
24594: 1996-02-28 Todd C. Miller <Todd.Miller@courtesan.com>
24595:
24596: * logging.c:
24597: mail_argv should not contain ALERTMAIL as it includes "-t"
24598: [67ffaaa8f843]
24599:
24600: 1996-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
24601:
24602: * INSTALL, Makefile.in, README, configure.in, version.h:
24603: ++version
24604: [e08fd4a809fc]
24605:
24606: * compat.h:
24607: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
24608: [2f20c3153689]
24609:
24610: * tgetpass.c:
24611: now includes limits.h moved _PASSWD_LEN -> compat.h
24612: [b1ca3cafdacc]
24613:
24614: 1996-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
24615:
24616: * INSTALL, README:
24617: ++version
24618: [3eacf32803f5]
24619:
24620: * Makefile.in:
24621: ++versoin
24622: [3b91c317630a]
24623:
24624: * Makefile.in:
24625: fixed a typo
24626: [3661ac4a7803]
24627:
24628: * configure.in:
24629: ++version
24630: [60e842973745]
24631:
24632: 1996-02-05 Todd C. Miller <Todd.Miller@courtesan.com>
24633:
24634: * RUNSON:
24635: updated
24636: [def2c3c24195]
24637:
24638: * CHANGES:
24639: done for 1.4.1 (I hope)
24640: [2ab543769a40]
24641:
24642: * sudoers.pod:
24643: added info on wildcards
24644: [ce3bd41bc063]
24645:
24646: * sample.sudoers:
24647: added wildcard example
24648: [762feb0577bd]
24649:
24650: * Makefile.in:
24651: now uses *.pod to build *.man and *.cat & *.html
24652: [3ec14962028b]
24653:
24654: * configure.in:
24655: addedSUDO_PROG_BSHELL !ll
24656: [3c80b320bf16]
24657:
24658: * visudo.pod:
24659: fixed up some formatting
24660: [12166c434526]
24661:
24662: * sudoers.pod:
24663: redid section describing sample sudoers stuff
24664: [b8065cceec71]
24665:
24666: * sudo.pod:
24667: fixed some formatting
24668: [aa9a681add0f]
24669:
24670: * getspwuid.c:
24671: now treats "" as bourne shell
24672: [30194a72ad56]
24673:
24674: * Makefile.in:
24675: TESTOBJS nwo includes wildmat.o
24676: [86cc6500f84d]
24677:
24678: * testsudoers.c:
24679: now works with NewArg[cv]
24680: [2f72674ce942]
24681:
24682: * sudo.c:
24683: removed an XXX (fixed it in getspwuid.c)
24684: [e791ee0d1a68]
24685:
24686: * aclocal.m4:
24687: added check for bourne shell
24688: [a2fd51676b8a]
24689:
24690: * pathnames.h.in:
24691: added _PATH_BSHELL
24692: [e7c10011d47b]
24693:
24694: * config.h.in:
24695: added _SUDO_PATH_BSHELL
24696: [6a1182898de9]
24697:
24698: 1996-02-04 Todd C. Miller <Todd.Miller@courtesan.com>
24699:
24700: * visudo.c:
24701: unixware vi returns 256 instead of 0
24702: [234ffc7c6786]
24703:
24704: * INSTALL:
24705: added Linux note
24706: [5f85efcd2b58]
24707:
24708: * logging.c:
24709: fixed up some XXX's. file log format now looks a little more like
24710: real syslog(3) format.
24711: [6df55707bfc3]
24712:
24713: * README, TROUBLESHOOTING:
24714: updated wrt lex/flex
24715: [eb787d69156b]
24716:
24717: * Makefile.in:
24718: commented out rule to build lex.yy.c from parse.lex since we ship
24719: with a pre-flex'd parser
24720: [7507e2ce4a95]
24721:
24722: * parse.c, parse.yacc, visudo.c:
24723: path_matches -> command_matches
24724: [0bd469424f86]
24725:
24726: * logging.c:
24727: eliminated some strcat()'s
24728: [9878a79bc374]
24729:
24730: * configure.in:
24731: no longer checks for lex/flex (now assumes flex)
24732: [a086ccc73798]
24733:
24734: * configure.in:
24735: now checks for $kerb_dir_candidate/krb.h instead of just
24736: kerb_dir_candidate
24737: [9133bc3c5208]
24738:
24739: 1996-02-03 Todd C. Miller <Todd.Miller@courtesan.com>
24740:
24741: * parse.yacc:
24742: now use a 'hook' expression instead of an iffy one :-)
24743: [9560df01b8c0]
24744:
24745: 1996-02-02 Todd C. Miller <Todd.Miller@courtesan.com>
24746:
24747: * visudo.c:
24748: now works with new sudo arg stuff
24749: [310a0d43ddad]
24750:
24751: * parse.yacc:
24752: fixed dereferencing deadbeef
24753: [474ef8a8006b]
24754:
24755: * sudo.c:
24756: changed an occurrence of Argv to NewArgv
24757: [205b012b7691]
24758:
24759: * parse.lex:
24760: took out support for quoted commands since there is no need...
24761: [5c5036d353b1]
24762:
24763: * parse.c:
24764: fixed a typo in a for() loop
24765: [7e8d5283c43b]
24766:
24767: * logging.c:
24768: protected against dereferencing rogue pointers
24769: [56debd517717]
24770:
24771: * sudo.c:
24772: now uses NewArgv amd NewArgc so cmnd_aegs is no longer needed this
24773: also allows us to eliminate some kludges in parse_args() and
24774: eliminate superfluous code.
24775: [5122f66ad150]
24776:
24777: * logging.c:
24778: no longer uses cmnd_args, now uses NewArgv instead.
24779: [abddd23cf068]
24780:
24781: * sudo.h:
24782: added struct sudo_command, NewArgc, and NewArgv removed cmnd_args
24783: (no longer used)
24784: [78410984fb05]
24785:
24786: * Makefile.in:
24787: added wildmat.c to SRCS & SUDOBJS
24788: [3800efb41794]
24789:
24790: * parse.yacc:
24791: COMMAND is now a struct containing the path and args
24792: [5c32822c5b94]
24793:
24794: * parse.lex:
24795: replaced append() with fill_cmnd() and fill_args. command args from
24796: a sudoers entry are now stored in an arrary for easy matching.
24797: [a981d7f4eb0d]
24798:
24799: * parse.c:
24800: command line args from sudoers file are now in an array like ones
24801: passed in from the command line
24802: [1d9e37e84519]
24803:
24804: 1996-02-01 Todd C. Miller <Todd.Miller@courtesan.com>
24805:
24806: * parse.c:
24807: wildwat stuff now works
24808: [49d16488531f]
24809:
24810: 1996-01-29 Todd C. Miller <Todd.Miller@courtesan.com>
24811:
24812: * version.h:
24813: ++version
24814: [53e55463ef89]
24815:
24816: * Makefile.in:
24817: ++version added wildmat.*
24818: [0508297a4711]
24819:
24820: 1996-01-28 Todd C. Miller <Todd.Miller@courtesan.com>
24821:
24822: * parse.lex:
24823: added support for quoted commands (w/ or w/o args)
24824: [b9a637155673]
24825:
24826: 1996-01-22 Todd C. Miller <Todd.Miller@courtesan.com>
24827:
24828: * sudo.pod, visudo.pod:
24829: cleaned up formatting
24830: [4591d4195437]
24831:
24832: * sudo.pod, visudo.pod:
24833: Initial revision
24834: [7564a8242750]
24835:
24836: 1996-01-21 Todd C. Miller <Todd.Miller@courtesan.com>
24837:
24838: * sudoers.pod:
24839: looks reasonable, could be mroe readable
24840: [a5be2d19d9e0]
24841:
24842: * sudoers.pod:
24843: Initial revision
24844: [957888be31a6]
24845:
24846: 1996-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
24847:
24848: * RUNSON:
24849: updated
24850: [633743aa924b]
24851:
24852: * OPTIONS:
24853: updated NO_ROOT_SUDO entry
24854: [f1c15b1dec9e]
24855:
24856: 1996-01-15 Todd C. Miller <Todd.Miller@courtesan.com>
24857:
24858: * RUNSON:
24859: *** empty log message ***
24860: [5b63de579ff7] [SUDO_1_4_0]
24861:
24862: * sudo.c:
24863: fixed SECURE_PATH
24864: [6002889f606d]
24865:
24866: * RUNSON:
24867: udpa`ted for 1.4
24868: [6014a8592815]
24869:
24870: * configure.in:
24871: AIX aixcrypt.exp now uses $(srcdir)
24872: [b0d57674fef4]
24873:
24874: * TROUBLESHOOTING:
24875: added entry for anal ansi compilers
24876: [4193cec1c6b1]
24877:
24878: 1996-01-14 Todd C. Miller <Todd.Miller@courtesan.com>
24879:
24880: * INSTALL:
24881: added info on libcrypt_i for SCO
24882: [575497d56698]
24883:
24884: * TODO:
24885: *** empty log message ***
24886: [d0aaf67b9913]
24887:
24888: * sample.sudoers:
24889: added comments
24890: [a7773f7eda8d]
24891:
24892: * TODO:
24893: 1.4 release
24894: [1dade29e9fd9]
24895:
24896: * CHANGES:
24897: ++version
24898: [67241be40780]
24899:
24900: * INSTALL, OPTIONS, README, config.h.in, configure.in:
24901: ++version
24902: [2e0a37897f68]
24903:
24904: * BUGS:
24905: ++version and fixed ISC
24906: [78963f01a0e3]
24907:
24908: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
24909: goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
24910: insults.h, logging.c, options.h, pathnames.h.in, putenv.c, strdup.c,
24911: sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
24912: visudo.c:
24913: ++version
24914: [b6227f29b3d9]
24915:
24916: * interfaces.c:
24917: added STUB_LOAD_INTERFACES ++version
24918: [d8150a3fd577]
24919:
24920: * Makefile.in, emul/utime.h, parse.c, parse.lex, parse.yacc,
24921: version.h:
24922: ++version
24923: [da9e90e69bdc]
24924:
24925: * PORTING:
24926: added info about fd_set in tgetpass added info on interfaces.c
24927: [a39902febd17]
24928:
24929: 1996-01-11 Todd C. Miller <Todd.Miller@courtesan.com>
24930:
24931: * dce_pwent.c:
24932: added sudo header
24933: [fc0f2c48682e]
24934:
24935: * tgetpass.c:
24936: fixed a typo
24937: [43d40b72ee8f]
24938:
24939: * Makefile.in:
24940: tgetpass.o is now only linked in with sudo (not visudo)
24941: [7407c5ff11f8]
24942:
24943: 1996-01-09 Todd C. Miller <Todd.Miller@courtesan.com>
24944:
24945: * BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in,
24946: configure.in:
24947: ++version
24948: [9b82ad805d6b]
24949:
24950: * emul/utime.h:
24951: added copyright notice
24952: [4380f16cd075]
24953:
24954: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
24955: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
24956: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
24957: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
24958: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
24959: ++version
24960: [32717fdb5d05]
24961:
24962: * tgetpass.c:
24963: minor cleanup and now includes sys/bsdtypes for svr4'ish boxen
24964: [326864428da2]
24965:
24966: * configure.in:
24967: ISC now gets -lcrypt now check for sys/bsdtypes.h
24968: [e064799c054b]
24969:
24970: * config.h.in:
24971: added check for sys/bsdtypes.h
24972: [9adb9533c363]
24973:
24974: 1996-01-07 Todd C. Miller <Todd.Miller@courtesan.com>
24975:
24976: * parse.yacc:
24977: removed debugging stuff (setting freed ptr to NULL)
24978: [02fe8eec63a0]
24979:
24980: * TROUBLESHOOTING:
24981: added 2 entries
24982: [02884e2733e2]
24983:
24984: * Makefile.in:
24985: added FAQ
24986: [074d8dfcf28d]
24987:
24988: * TROUBLESHOOTING:
24989: added section on syslog
24990: [e6bc02a22b86]
24991:
24992: * configure.in:
24993: added AC_ISC_POSIX for better ISC support
24994: [8436b3e12af2]
24995:
24996: * config.h.in:
24997: fixed typo
24998: [f1b3922babf4]
24999:
25000: * config.h.in:
25001: added define for _POSIX_SOURCE
25002: [ded6d92b34f9]
25003:
25004: 1996-01-04 Todd C. Miller <Todd.Miller@courtesan.com>
25005:
25006: * configure.in:
25007: fixed check for lsearch()
25008: [75baa5bc28a3]
25009:
25010: 1995-12-22 Todd C. Miller <Todd.Miller@courtesan.com>
25011:
25012: * interfaces.c:
25013: fixed for AIX now deal if num_interfaces == 0 (should not happen)
25014: [ae450e859227]
25015:
25016: 1995-12-20 Todd C. Miller <Todd.Miller@courtesan.com>
25017:
25018: * configure.in:
25019: now only define HAVE_LSEARCH if there is a corresponding search.h
25020: [8ce645c5d17f]
25021:
25022: * interfaces.c:
25023: works on ISC again
25024: [ccac920d424c]
25025:
25026: 1995-12-18 Todd C. Miller <Todd.Miller@courtesan.com>
25027:
25028: * configure.in:
25029: now define HAVE_LSEARCH if we find lsearch() in libcompat
25030: [7343e4313a87]
25031:
25032: * lsearch.c:
25033: char * -> const char *
25034: [1c0b11c2300a]
25035:
25036: * configure.in:
25037: now looks in -lcompat for lsearch()
25038: [a1cc1d6fcd09]
25039:
25040: * Makefile.in:
25041: remove sudo.core visudo.core for clan target
25042: [b523456a85df]
25043:
25044: * aclocal.m4:
25045: added UID_MAX support in check for MAX_UID_T_LEN
25046: [7ab262b1173f]
25047:
25048: * Makefile.in:
25049: fixed another occurence of sudo_getpwuid.*
25050: [fb5809c07da2]
25051:
25052: * Makefile.in, getspwuid.c:
25053: sudo_getpwuid.c -> getspwuid.c
25054: [875f2ef808b4]
25055:
25056: * configure.in:
25057: moved the "echo"
25058: [ad7b8f966076]
25059:
25060: * BUGS, CHANGES, INSTALL, Makefile.in, OPTIONS, README, check.c,
25061: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
25062: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
25063: ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c,
25064: parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c,
25065: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
25066: version.h, visudo.c:
25067: ++version
25068: [ee57c6410ffa]
25069:
25070: * testsudoers.c:
25071: added group support
25072: [54d8097df8bd]
25073:
25074: * sample.sudoers:
25075: added group entry
25076: [50994d31fd49]
25077:
25078: * sudoers.man:
25079: documented group support
25080: [0a16707f8fed]
25081:
25082: * parse.c, parse.lex, parse.yacc, visudo.c:
25083: added group support
25084: [427218c879c8]
25085:
25086: 1995-12-15 Todd C. Miller <Todd.Miller@courtesan.com>
25087:
25088: * check.c:
25089: tkfile was too short and overflowed the kerberos realm
25090: [53823a1ff5af]
25091:
25092: 1995-12-11 Todd C. Miller <Todd.Miller@courtesan.com>
25093:
25094: * sudo.c:
25095: now copy command args directly from Argv
25096: [77408278b6fd]
25097:
25098: * sudo.c:
25099: replaced code to copy cmnd_args so that is does not use realloc
25100: since most realloc()'s really stink
25101: [b29a0ff73fb6]
25102:
25103: 1995-12-08 Todd C. Miller <Todd.Miller@courtesan.com>
25104:
25105: * configure.in:
25106: syslog() fixed in hpux 10.01
25107: [2648e6f0cdb0]
25108:
25109: 1995-12-06 Todd C. Miller <Todd.Miller@courtesan.com>
25110:
25111: * configure.in:
25112: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS if appropriate)
25113: [8f108b8d8711]
25114:
25115: * configure.in:
25116: better error if cannot find skey incs or libs
25117: [5887662ee9d3]
25118:
25119: * aclocal.m4:
25120: now use a temp file for determining max len of uid_t in string form.
25121: the old hacky way broke on netbsd
25122: [b68f470fa9f8]
25123:
25124: * sudo.c:
25125: added set of parens and a space
25126: [8a3d4826d022]
25127:
25128: 1995-12-05 Todd C. Miller <Todd.Miller@courtesan.com>
25129:
25130: * dce_pwent.c:
25131: fixes from Jeff Earickson <jaearick@colby.edu> ,
25132: [bde0f0b756ec]
25133:
25134: * check.c:
25135: modified a comment
25136: [e2a97f1afbbe]
25137:
25138: * Makefile.in:
25139: fixed up testsudoers target
25140: [d39c4e7bb609]
25141:
25142: * configure.in:
25143: DCE changes from Jeff Earickson <jaearick@colby.edu> LIBS ->
25144: SUDO_LIBS and VISUDO_LIBS LDFLAGS -> SUDO_FDFLAGS and VISUDO_LDFLAGS
25145: [da7a1c433828]
25146:
25147: * Makefile.in:
25148: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS -> SUDO_LDFLAGS,
25149: VISUDO_LDFLAGS
25150: [4b69503e8487]
25151:
25152: 1995-11-28 Todd C. Miller <Todd.Miller@courtesan.com>
25153:
25154: * configure.in:
25155: fix for C2 on hpux 10 now uses -linet if it exists
25156: [8d300112263d]
25157:
25158: * check.c:
25159: LONG_SKEY_PROMPT is less of a klusge /
25160: [dcc144abaac3]
25161:
25162: * configure.in:
25163: fixed typos w/ dce stuff
25164: [f7dfd6d4e149]
25165:
25166: * Makefile.in:
25167: added dce_pwent.c
25168: [79047acdc516]
25169:
25170: 1995-11-26 Todd C. Miller <Todd.Miller@courtesan.com>
25171:
25172: * INSTALL:
25173: amended section on combining authentication mechanisms
25174: [dc5138c7c716]
25175:
25176: * PORTING:
25177: minor updates for 1.3.6
25178: [fe80c13bd994]
25179:
25180: * TROUBLESHOOTING:
25181: added 2 more entries
25182: [c7201439a0f5]
25183:
25184: * BUGS:
25185: updated for 1.3.6
25186: [979b414d2a2d]
25187:
25188: * README:
25189: overhauled
25190: [3af8b60eb594]
25191:
25192: * INSTALL:
25193: rewrote for sudo 1.3.6
25194: [b16027b9c726]
25195:
25196: * TROUBLESHOOTING:
25197: added 3 entries
25198: [934c9ee3f153]
25199:
25200: 1995-11-25 Todd C. Miller <Todd.Miller@courtesan.com>
25201:
25202: * find_path.c, getspwuid.c, sudo.c:
25203: added explict casts for strdup since many includes don't prototype
25204: it. gag me.
25205: [3e19a11f2fcc]
25206:
25207: * sudo.h:
25208: removed prototype for sudo_getpwuid() since convex C compiler choked
25209: on it.
25210: [c3ea74ca67b0]
25211:
25212: * sudo.c:
25213: added prototype for sudo_getpwuid()
25214: [4a8e3cdc2b98]
25215:
25216: * lsearch.c:
25217: now compiles on strict ANSI compilers
25218: [3ce5d72d0b08]
25219:
25220: * check.c:
25221: added LONG_SKEY_PROMPT support
25222: [48a18b8a2332]
25223:
25224: * Makefile.in:
25225: added extra $'s for make to eat up, yum.
25226: [2995b214e12b]
25227:
25228: * OPTIONS, options.h:
25229: added LONG_SKEY_PROMPT
25230: [f23ae799b5a4]
25231:
25232: 1995-11-24 Todd C. Miller <Todd.Miller@courtesan.com>
25233:
25234: * check.c:
25235: s/key support now works with normal s/key as well as logdaemon
25236: [d67573f523bf]
25237:
25238: * OPTIONS, options.h:
25239: added SKEY_ONLY
25240: [bbf07654e0de]
25241:
25242: * compat.h:
25243: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
25244: [205895b96a36]
25245:
25246: * INSTALL:
25247: added DCE note added more AIX notes
25248: [6345403b3522]
25249:
25250: * sudo.c:
25251: now include pthread.h for DCE support
25252: [6fe02865f679]
25253:
25254: * check.c:
25255: dce_pwent() is ok after all .,
25256: [d26a8746a55d]
25257:
25258: * logging.c:
25259: now uses SYSLOG() macro that equates to either syslog() or
25260: syslog_wrapper
25261: [42ac4cff8045]
25262:
25263: * dce_pwent.c:
25264: minor formatting changes. renamed check() to somthing less generic
25265: [71859f217be1]
25266:
25267: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
25268: visudo.c:
25269: now uses user_pw_ent and simple macros to get at the contents
25270: [f4cbf3e7145a]
25271:
25272: 1995-11-23 Todd C. Miller <Todd.Miller@courtesan.com>
25273:
25274: * check.c:
25275: simpler dec unix C2 support
25276: [86bc8f75250e]
25277:
25278: * getspwuid.c:
25279: now sets crypt_type for DEC unix C2
25280: [99aeadd18266]
25281:
25282: 1995-11-21 Todd C. Miller <Todd.Miller@courtesan.com>
25283:
25284: * configure.in:
25285: added csops paths for skey
25286: [b8ca672e2117]
25287:
25288: * getspwuid.c:
25289: now includes string.h for strdup() prototype
25290: [3605259c3620]
25291:
25292: * getspwuid.c:
25293: fixed a few typos
25294: [46c97e4ea417]
25295:
25296: * check.c:
25297: now includes skey.h
25298: [11e611ce1b61]
25299:
25300: * getspwuid.c:
25301: fixed up comments
25302: [223dac56f0c8]
25303:
25304: * check.c:
25305: moved a lot of the shadow passwd crap to sudo_getpwuid()
25306: [97d8887fb7d3]
25307:
25308: * sudo.c:
25309: now uses sudo_pw_ent
25310: [d014dadbef48]
25311:
25312: * testsudoers.c:
25313: now uses sudo_pw_ent
25314: [d92936ed7e34]
25315:
25316: * visudo.c:
25317: now sets sudo_pw_ent
25318: [ff75cdfcf8b3]
25319:
25320: * getspwuid.c:
25321: Initial revision
25322: [6deb6df9d7bc]
25323:
25324: * tgetpass.c:
25325: moved dce stuff into compat.h
25326: [1124284396e7]
25327:
25328: * logging.c, sudo.h:
25329: now uses sudo_pw_ent
25330: [404ff20a5067]
25331:
25332: * Makefile.in:
25333: added sudo_getpwuid.c
25334: [6666d0644512]
25335:
25336: * compat.h:
25337: added dce support
25338: [3c3b36a7ce0e]
25339:
25340: * parse.yacc:
25341: now uses sudo_pw_ent
25342: [9f5e8d11bd68]
25343:
25344: 1995-11-20 Todd C. Miller <Todd.Miller@courtesan.com>
25345:
25346: * check.c:
25347: fixed exempt_group stuff for OS's that don't put base gid in group
25348: vector
25349: [003f153bd396]
25350:
25351: * check.c:
25352: S/Key support now works with sunos4 shadow passwords
25353: [1eb64a5efff1]
25354:
25355: * Makefile.in:
25356: fixed clean rule
25357: [5695a2c62816]
25358:
25359: * config.h.in, configure.in:
25360: added DCE support
25361: [f53c766c1947]
25362:
25363: * tgetpass.c:
25364: DCE & KERB support
25365: [904cf436506a]
25366:
25367: * check.c:
25368: first stab at dce support
25369: [aea5ca07b1e3]
25370:
25371: * dce_pwent.c:
25372: now smells like sudo
25373: [8b3d609b49cd]
25374:
25375: * dce_pwent.c:
25376: Initial revision
25377: [b573555f2399]
25378:
25379: * check.c:
25380: skey'd sudo now works w/ normal password as well
25381: [8d038f9f6e94]
25382:
25383: 1995-11-19 Todd C. Miller <Todd.Miller@courtesan.com>
25384:
25385: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in, find_path.c,
25386: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
25387: ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c,
25388: parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c,
25389: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
25390: version.h, visudo.c:
25391: updated version number
25392: [ba7e346d7904]
25393:
25394: * README:
25395: updated to reflect version change
25396: [1d15cf1d8cc8]
25397:
25398: * configure.in:
25399: --with options now line up ++version
25400: [08ebf625fbca]
25401:
25402: * sudo.h:
25403: removed unecesary S/Key stuff
25404: [68188cba90af]
25405:
25406: * configure.in:
25407: fixed S/Key support
25408: [f6d9cbc36618]
25409:
25410: * Makefile.in:
25411: -I stuff now goes in CPPFLAGS
25412: [7b8e53c5b046]
25413:
25414: * check.c:
25415: fixed SKey support
25416: [52c1a5cf4435]
25417:
25418: * README:
25419: updated version
25420: [bed6498a10bb]
25421:
25422: * OPTIONS:
25423: fixed description of EXEMPTGROUP
25424: [cfeead55edc2]
25425:
25426: * sudo.c:
25427: more people use _RLD_ than just alphas...
25428: [6a3c7090a6f6]
25429:
25430: * Makefile.in:
25431: replaced $man_prefix with $mandir
25432: [dc4b36a550e2]
25433:
25434: * configure.in:
25435: fixed a typo
25436: [a38a4acddcaf]
25437:
25438: * Makefile.in:
25439: now use more GNU'ish dir names
25440: [c5498391a520]
25441:
25442: * configure.in:
25443: now set *dir correctly (can override from command line)
25444: [523ff98fd438]
25445:
25446: * sudo.c:
25447: now deal with situations where we getwd() fails
25448: [88a9e61dccbb]
25449:
25450: 1995-11-17 Todd C. Miller <Todd.Miller@courtesan.com>
25451:
25452: * Makefile.in:
25453: added etc_dir, bin_dir, sbin_dir
25454: [75fd08d92842]
25455:
25456: * configure.in:
25457: added sbin_dir
25458: [3cb318c0d8d1]
25459:
25460: * Makefile.in:
25461: now ship a flex-generated lex.yy.c
25462: [4d083ed70dce]
25463:
25464: * Makefile.in:
25465: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP, SUDOERS_OWNER
25466: [4d51dc9c3780]
25467:
25468: * pathnames.h.in:
25469: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile
25470: [773fd163d52f]
25471:
25472: * options.h:
25473: no more error for redefining SUDOERS_OWNER
25474: [4ba336644c6a]
25475:
25476: * OPTIONS:
25477: expanded SUDOERS_OWNER section
25478: [12fae405759e]
25479:
25480: 1995-11-16 Todd C. Miller <Todd.Miller@courtesan.com>
25481:
25482: * visudo.c:
25483: now warn if chown(2) failed
25484: [d0d1db6e3a1f]
25485:
25486: * logging.c:
25487: better default warning for NO_SUDOERS_FILE
25488: [5260b458ac64]
25489:
25490: * sudo.c:
25491: added missing set_perms() no more cryptic message if the sudoers
25492: file is zero length, now just give a parse error
25493: [b81ea724838a]
25494:
25495: * logging.c:
25496: better diagnostics if NO_SUDOERS_FILE
25497: [877e878663c5]
25498:
25499: * sudo.c:
25500: check_sudoers() now catches sudoers files that are not readable (but
25501: are stat'able).
25502: [fea05663b3de]
25503:
25504: 1995-11-13 Todd C. Miller <Todd.Miller@courtesan.com>
25505:
25506: * configure.in:
25507: now add -D__STDC__ for convex cc (not gcc)
25508: [c80fc53ff51b]
25509:
25510: * configure.in:
25511: MAN_PREFIX -> man_prefix now sets prefix and exec_prefix
25512: [fe238226a057]
25513:
25514: * Makefile.in:
25515: now uses exec_prefix & prefix from configure
25516: [f62fca5f56bd]
25517:
25518: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c, parse.c,
25519: parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c, tgetpass.c,
25520: utime.c, visudo.c:
25521: options.h is now <> instead of "" so shadow build trees can have a
25522: custom copy of options.h
25523: [e6782676099c]
25524:
25525: * check.c:
25526: user_is_exempt() is no longer a hack, it now uses getgrnam()
25527: [287f8d5356f7]
25528:
25529: * options.h:
25530: EXEMPTGROUP is now "sudo"
25531: [61487304dbe1]
25532:
25533: * configure.in:
25534: MAN_POSTINSTALL now contains a leading space
25535: [eaad4ac34012]
25536:
25537: * Makefile.in:
25538: removed leading tab if @MAN_POSTINSTALL@ not defined now removes
25539: testsudoers in clean:
25540: [e01711baceb8]
25541:
25542: * tgetpass.c:
25543: includes pwd.h to get _PASSWD_LEN definition
25544: [8ec174f263f1]
25545:
25546: 1995-10-30 Todd C. Miller <Todd.Miller@courtesan.com>
25547:
25548: * sudo.c:
25549: unset the KRB_CONF envariable if using kerberos so we don't get
25550: spoofed into using a bogus server
25551: [2561a0274fca]
25552:
25553: 1995-09-29 Todd C. Miller <Todd.Miller@courtesan.com>
25554:
25555: * parse.yacc:
25556: now explicately initialize match[] tp be FALSE
25557: [0e45e5c47766]
25558:
25559: 1995-09-23 Todd C. Miller <Todd.Miller@courtesan.com>
25560:
25561: * sudo.c:
25562: removed unused variable now passes -Wall
25563: [3452508bc16d]
25564:
25565: * parse.yacc:
25566: yyerror and dumpaliases are now void's now passes -Wall
25567: [2769dfb51993]
25568:
25569: * parse.lex:
25570: added prototype for yyerror
25571: [1f3f0c1b4ab4]
25572:
25573: * check.c, logging.c, parse.c:
25574: now passes -Wall
25575: [eab57e5e81d2]
25576:
25577: * interfaces.c:
25578: rmeoved unused cruft now passes -Wall
25579: [7a47e1866f4b]
25580:
25581: * Makefile.in:
25582: fixed headers that moved to emul dir
25583: [e680c1e5049b]
25584:
25585: * logging.c:
25586: fixed deref of nil pointer if no args
25587: [973b9bea432f]
25588:
25589: 1995-09-15 Todd C. Miller <Todd.Miller@courtesan.com>
25590:
25591: * OPTIONS:
25592: added a caveat to FQDN section
25593: [dcf6e2a5fff4]
25594:
25595: 1995-09-13 Todd C. Miller <Todd.Miller@courtesan.com>
25596:
25597: * Makefile.in:
25598: more $srcdir support for install targets
25599: [f6eac78436dd]
25600:
25601: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc, putenv.c,
25602: strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, visudo.c:
25603: don't include malloc.h if we include stdlib.h
25604: [fca2ff307cd8]
25605:
25606: * parse.yacc:
25607: local search.h now lives in emul
25608: [51c458904424]
25609:
25610: * check.c, utime.c:
25611: local utime.h now lives in emul dir
25612: [f92fc9e8c8de]
25613:
25614: * lsearch.c:
25615: local search.h now lives in emul
25616: [579efc407439]
25617:
25618: * Makefile.in:
25619: added support for building in other than the sourcedir
25620: [2ab53a43f7d4]
25621:
25622: 1995-09-10 Todd C. Miller <Todd.Miller@courtesan.com>
25623:
25624: * OPTIONS:
25625: annotated CSOPS_INSULTS option
25626: [9e57d45a0afa]
25627:
25628: * TROUBLESHOOTING:
25629: updated shadow passwords blurb
25630: [39b785bc7253]
25631:
25632: * sudo.c:
25633: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a shell and
25634: passes along foo as the arguments
25635: [a91077aa8fc5]
25636:
25637: 1995-09-09 Todd C. Miller <Todd.Miller@courtesan.com>
25638:
25639: * parse.lex:
25640: collapsed pathname and dir sections into one -- its now less
25641: expensive
25642: [89caa03bec25]
25643:
25644: * parse.lex:
25645: fixed spacing quoting [,:\\=] now works correctly append() and
25646: fill() now take args to make the above work
25647: [09d023d9ef3a]
25648:
25649: * sudo.c:
25650: fixed a typo that caused commands with no tty on fd 0 but a tty on
25651: fd 1 to erroneously have "none" as their tty
25652: [07d2c0e7977c]
25653:
25654: 1995-09-04 Todd C. Miller <Todd.Miller@courtesan.com>
25655:
25656: * check.c:
25657: timestampfile is now a global static removed decl of timestampfile
25658: in remove_timestamp since we can just use the global one
25659: [f0cbdc6aab1c]
25660:
25661: * check.c:
25662: created touch() to update timestamps added USE_TTY_TICKETS support
25663: (bit of a kludge)
25664: [cee1dd0318f8]
25665:
25666: * compat.h:
25667: added _S_IFDIR and S_ISDIR
25668: [b4a51cc9628e]
25669:
25670: * OPTIONS, options.h:
25671: added USE_TTY_TICKETS
25672: [b4e22f81f25e]
25673:
25674: * parse.yacc:
25675: removed const from casts for lsearch() & lfind() to placate irix 4.x
25676: C compiler
25677: [5003081f76ea]
25678:
25679: 1995-09-03 Todd C. Miller <Todd.Miller@courtesan.com>
25680:
25681: * sudo.c:
25682: now only strip '/dev/' off of a tty if it starts with '/dev/'
25683: [7f62bcd24039]
25684:
25685: * pathnames.h.in:
25686: added _PATH_DEV
25687: [6375f44d1910]
25688:
25689: * configure.in:
25690: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for tcgetattr only if
25691: have termios.h
25692: [9c60391235fd]
25693:
25694: * tgetpass.c:
25695: fixed incorrect #ifdef termio uses "unsigned short" not int for
25696: c_?flag
25697: [d032e6a29845]
25698:
25699: * parse.lex, parse.yacc:
25700: fixed a spelling error
25701: [cad6a944c7b1]
25702:
25703: * Makefile.in:
25704: fixed typo
25705: [204a65403e7c]
25706:
25707: 1995-09-02 Todd C. Miller <Todd.Miller@courtesan.com>
25708:
25709: * Makefile.in:
25710: fixed a comment
25711: [268f760e57ad]
25712:
25713: * parse.yacc:
25714: added dotcat() to cat 2 strings w/ a dot effeciently now that we
25715: dynamically allocate strings they need to be free()'d
25716: [ec2e2152f415]
25717:
25718: * parse.lex:
25719: dynamically allocates space for strings
25720: [d10ac3533d66]
25721:
25722: * sudo.h:
25723: no more MAXCOMMANDLENGTH
25724: [e2e1219bff8a]
25725:
25726: * sudo.h:
25727: added decl of tty
25728: [c8ae81303ee5]
25729:
25730: * logging.c, sudo.c:
25731: moved tty stuff into sudo.c
25732: [e028abefeb07]
25733:
25734: 1995-09-01 Todd C. Miller <Todd.Miller@courtesan.com>
25735:
25736: * parse.c:
25737: fixed a logic bug. Was denying a command if user gave command line
25738: args but there were none in the sudoers file which is wrong.
25739: [7489a99b8e8a]
25740:
25741: * sudo.h:
25742: MAXCOMMMANDLEN dropped down to 1K
25743: [38ef54ba290b]
25744:
25745: * parse.lex:
25746: return foo; -> return(foo);
25747: [0e8be1b57001]
25748:
25749: * parse.yacc:
25750: fixed netgr_matches() prototype
25751: [e69f15910464]
25752:
25753: * parse.lex:
25754: added support for escaping "termination" characters
25755: [8bd4ef50f35c]
25756:
25757: * parse.c:
25758: buf is now of size MAXPATHLEN+1 since it never holds command args
25759: [2ce4b763058c]
25760:
25761: * sudo.c:
25762: fixed comments
25763: [0c74a3d2ebb0]
25764:
25765: * goodpath.c:
25766: fixed negation problem (doh!)
25767: [782814e3a2d1]
25768:
25769: * parse.yacc:
25770: fixed 2nd parameter to lfind()
25771: [63d7b1623c08]
25772:
25773: * parse.lex:
25774: now do bounds checking in fill() and append()
25775: [54381b563251]
25776:
25777: * sudo.c:
25778: include netdb.h as we should added a missing void cast added
25779: SHELL_IF_NO_ARGS support now use realloc() properly. would fail if
25780: realloc actually moved the string instead of shrinking it
25781: [897ccdec9c06]
25782:
25783: * sample.sudoers:
25784: updated with examples of new features
25785: [9b3ed00e8aa6]
25786:
25787: * goodpath.c:
25788: now set errno to EACCES if not a regular file or not executable
25789: [2d069548a5ea]
25790:
25791: * find_path.c:
25792: if given a fully-qualified or relative path we now check it with
25793: sudo_goodpath() and error out with the appropriate error message if
25794: the file does not exist or is not executable
25795: [590f89dd8dec]
25796:
25797: * emul/search.h, lsearch.c:
25798: now use correct args for lfind
25799: [fccdcdbf020e]
25800:
25801: * logging.c:
25802: added a comment
25803: [fab9f49708ea]
25804:
25805: * insults.h:
25806: added in CSOps insults
25807: [ad8eb1862adc]
25808:
25809: * ins_csops.h:
25810: Initial revision
25811: [de5a475ec018]
25812:
25813: * tgetpass.c:
25814: added RCS id
25815: [c3ffd550a482]
25816:
25817: * sudo.h:
25818: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD -> HAVE_GETWD
25819: [aba25c90d08a]
25820:
25821: * OPTIONS:
25822: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
25823: [e27bd62e9ccf]
25824:
25825: * sudo.c:
25826: fixed -k load_interfaces() now gets called if FQDN is set
25827: -p now works with -s
25828: [07ca2a34bae8]
25829:
25830: * parse.c:
25831: don't try to stat() "pseudo commands" like "validate"
25832: [75527045984b]
25833:
25834: * options.h:
25835: added CLASSIC_INSULTS added CSOPS_INSULTS added SHELL_IF_NO_ARGS
25836: [07b157a0eafd]
25837:
25838: * configure.in:
25839: added SecurID support added other insults to --with-csops
25840: [6c992ceb244c]
25841:
25842: * config.h.in:
25843: added HAVE_SECURID
25844: [e734ff617fe8]
25845:
25846: * Makefile.in:
25847: added clobber target added ins_csops.h now gets CFLAGS from
25848: configure
25849: [d1e29c7cec25]
25850:
25851: * aclocal.m4:
25852: relaxed SUDO_FULL_VOID
25853: [fb4084f27406]
25854:
25855: * visudo.c:
25856: function comment blocks are now in same style as rest of code
25857: [04a2931354c5]
25858:
25859: * testsudoers.c:
25860: added support for command line args in /etc/sudoers
25861: [bfe4e1bcc655]
25862:
25863: * sudoers.man:
25864: updated to have command args in the sudoers file
25865: [1cd34355e9ea]
25866:
25867: * sudo.man:
25868: added -s and -- flags added SHELL to ENVIRONMENT VARIABLES section
25869: [930b48023b68]
25870:
25871: 1995-08-19 Todd C. Miller <Todd.Miller@courtesan.com>
25872:
25873: * parse.yacc:
25874: PATH renamed to COMMAND
25875: [4e109a6de3cd]
25876:
25877: * parse.lex:
25878: it is now a parse error for directories to have args attached to
25879: them
25880: [2ab10a146b54]
25881:
25882: * logging.c:
25883: now say command args if telling user to buzz off
25884: [933de26ded8b]
25885:
25886: * sudo.c:
25887: -s no longer indicates end of args sped up loading on cmnd_args in
25888: load_cmnd()
25889: [eac99a4da862]
25890:
25891: * parse.c:
25892: removed an unreachable statement
25893: [634302623c49]
25894:
25895: * parse.lex:
25896: made more efficient by pulling out the terminators when in GOTCMND
25897: state and making them their own rule
25898: [80798f1e1166]
25899:
25900: 1995-08-14 Todd C. Miller <Todd.Miller@courtesan.com>
25901:
25902: * sudo.h:
25903: removed MAXLOGLEN since it is no longer used
25904: [102824196b71]
25905:
25906: * parse.lex:
25907: now allows command args
25908: [d29dfa1e5254]
25909:
25910: * parse.c:
25911: now groks command arguments
25912: [6c414cb7f105]
25913:
25914: * logging.c:
25915: now sets tty correctly when piped input
25916: [de46a30c0406]
25917:
25918: * sudo.c:
25919: fixed loading of cmnd_args (was including command name too)
25920: [15319a425ea6]
25921:
25922: * logging.c:
25923: fixed a core dump due to incorrect if construct
25924: [582363c7d7fa]
25925:
25926: 1995-08-13 Todd C. Miller <Todd.Miller@courtesan.com>
25927:
25928: * configure.in:
25929: only add -lsun is irix < 5 don't look for -lnsl or -lsocket if irix
25930: [da591fe9b931]
25931:
25932: * aclocal.m4:
25933: fixed check for ISC
25934: [52e59f2082a7]
25935:
25936: * sudo.c:
25937: now sets cmnd_args used by log_error() and that will be used by the
25938: parse to check against command args
25939: [c6804389723b]
25940:
25941: * sudo.h:
25942: added cmnd_args
25943: [4d00446b4a8d]
25944:
25945: * logging.c:
25946: now dynamically allocate logline since we can guess at its size
25947: [4bed8c8446aa]
25948:
25949: 1995-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
25950:
25951: * logging.c:
25952: cleaned up a bunch of unnecesary #ifdef's eliminated a buffer remove
25953: "register" since the compiler knows more than I do now do a
25954: "basename" of the tty
25955: [3b1bbf0b3da1]
25956:
25957: 1995-07-31 Todd C. Miller <Todd.Miller@courtesan.com>
25958:
25959: * configure.in:
25960: ++version
25961: [5ce552f9a5f1]
25962:
25963: * sudo.h:
25964: added shell extern changed MODE_* to be bit masks to allow for
25965: several options together
25966: [06f9dc4f400c]
25967:
25968: * sudo.c:
25969: added -s (shell) option made MODE_* masks so we can do bitwise & and
25970: | to see if multiple flags are set.
25971: [01f8143010ad]
25972:
25973: * check.c:
25974: added securid support
25975: [909e078005fe]
25976:
25977: 1995-07-30 Todd C. Miller <Todd.Miller@courtesan.com>
25978:
25979: * logging.c:
25980: removed a bunch of unnecesary strncpy()'s and replaced with strcat()
25981: [644506b57d61]
25982:
25983: 1995-07-29 Todd C. Miller <Todd.Miller@courtesan.com>
25984:
25985: * Makefile.in, version.h:
25986: ++version
25987: [3cd6f1fbc3d9]
25988:
25989: 1995-07-27 Todd C. Miller <Todd.Miller@courtesan.com>
25990:
25991: * parse.yacc:
25992: fixed free() of an uninitialized pointer (yuck)
25993: [8c404ee502ee]
25994:
25995: * testsudoers.c:
25996: added netgr_matches
25997: [e7c9fa2f774c]
25998:
25999: * parse.c:
26000: cleaned up netgr_matches
26001: [8108f00b810e]
26002:
26003: 1995-07-26 Todd C. Miller <Todd.Miller@courtesan.com>
26004:
26005: * RUNSON:
26006: updated for 1.3.4
26007: [4741704310a1]
26008:
26009: 1995-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
26010:
26011: * Makefile.in:
26012: now installs sudoers.man -- really should clean this up though.
26013: [455631d45a1d]
26014:
26015: * Makefile.in:
26016: added sudoers.cat and sudoers.man
26017: [0bdedd6c7363]
26018:
26019: * sudo.man:
26020: pulled out stuff on the sudoers file format into a separate man page
26021: [de215d999cb9]
26022:
26023: * sudoers.man:
26024: Initial revision
26025: [f25eafbb7095]
26026:
26027: * HISTORY:
26028: fixed up my email address
26029: [254fbf80be74]
26030:
26031: * configure.in:
26032: added checks for innetgr and getdomainname
26033: [24a99cb7e97e]
26034:
26035: * visudo.c:
26036: added dummy netgr_matches function
26037: [1841ff2c01da]
26038:
26039: * parse.c:
26040: added netgr_matches
26041: [ec90db6a97b8]
26042:
26043: * parse.lex, parse.yacc:
26044: added NETGROUP support
26045: [c9dd93e3bc4b]
26046:
26047: * config.h.in:
26048: added HAVE_INNETGR & HAVE_GETDOMAINNAME
26049: [14abd494d875]
26050:
26051: 1995-07-24 Todd C. Miller <Todd.Miller@courtesan.com>
26052:
26053: * sudo.c:
26054: rewrote clean_env() that has rm_env() builtin
26055: [55cb43818a95]
26056:
26057: 1995-07-23 Todd C. Miller <Todd.Miller@courtesan.com>
26058:
26059: * check.c:
26060: now cast uid to long in sprintf
26061: [b549eea40aeb]
26062:
26063: * OPTIONS:
26064: added _INSULTS suffix to HAL & GOONS end
26065: [ed620d0aad30]
26066:
26067: * options.h:
26068: added _INSULTS suffix to HAL & GOONS
26069: [9f72e9b83afd]
26070:
26071: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h:
26072: converted to new scheme of insult "unions" end
26073: [2f6d2b412132]
26074:
26075: * sudo.c:
26076: now uses MAX_UID_T_LEN
26077: [c1df79e0f389]
26078:
26079: * configure.in:
26080: added SUDO_UID_T_LEN !l
26081: [195f0b9f5f84]
26082:
26083: * config.h.in:
26084: added MAX_UID_T_LEN
26085: [73f42ae4f14d]
26086:
26087: * check.c:
26088: now use MAX_UID_T_LEN
26089: [df9c063234cb]
26090:
26091: * aclocal.m4:
26092: added check for max len of uid_t fixed sco vs. isc check
26093: [d558f36d2223]
26094:
26095: 1995-07-19 Todd C. Miller <Todd.Miller@courtesan.com>
26096:
26097: * configure.in:
26098: corrected version
26099: [828dd1571e86]
26100:
26101: * configure.in:
26102: added sco support
26103: [af1e2f616638]
26104:
26105: * aclocal.m4:
26106: hack to check for sco
26107: [549ab99a9a43]
26108:
26109: * interfaces.c:
26110: removed #include <net/route.h> since it was hosing some OS's
26111: [ac78a7c04005]
26112:
26113: 1995-07-18 Todd C. Miller <Todd.Miller@courtesan.com>
26114:
26115: * find_path.c:
26116: fixed prreadlink() prototype
26117: [b380fe1f2b11]
26118:
26119: * check.c:
26120: added parens in #if's
26121: [e96ade691b82]
26122:
26123: * configure.in:
26124: added SPW_ prefix
26125: [a302683a1483]
26126:
26127: * sudo.h:
26128: moved SPW_* to config.h.in
26129: [6b3be70e34cf]
26130:
26131: * sudo.c:
26132: added a set of parens
26133: [8188d735d695]
26134:
26135: * config.h.in:
26136: added SPW_*
26137: [5ead6371cf60]
26138:
26139: * sudo.h:
26140: added SPW_* reordered error codes
26141: [dead25b4ed0a]
26142:
26143: * check.c:
26144: moved SPW_* to sudo.h
26145: [ca51fb04caf4]
26146:
26147: 1995-07-17 Todd C. Miller <Todd.Miller@courtesan.com>
26148:
26149: * sudo.c:
26150: SPW_AUTH -> SPW_SECUREWARE
26151: [6b512b2bc5dc]
26152:
26153: * logging.c:
26154: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
26155: [defdd0944e2f]
26156:
26157: * configure.in:
26158: AUTH -> SECUREWARE
26159: [d1f8a17001dd]
26160:
26161: * check.c:
26162: SPW_AUTH -> SPW_SECUREWARE
26163: [af0e8d8b89b2]
26164:
26165: * check.c:
26166: now uses SHADOW_TYPE to make shadow pw support more readable and
26167: modular. It's a start...
26168: [8c2a59667014]
26169:
26170: * configure.in:
26171: added autodetection of shadow passwords
26172: [85f81fa54b1b]
26173:
26174: * sudo.c:
26175: now uses SHADOW_TYPE define
26176: [355e5dc09b07]
26177:
26178: * config.h.in:
26179: added SHADOW_TYPE which replaces SUNOS4 & __svr4__ defines
26180: [c0c06e83e483]
26181:
26182: * aclocal.m4:
26183: added SUDO_CHECK_SHADOW
26184: [464301301639]
26185:
26186: 1995-07-12 Todd C. Miller <Todd.Miller@courtesan.com>
26187:
26188: * configure.in:
26189: define SVR4 for ISC define BROKEN_SYSLOG for hpux took out test for
26190: memmove() since we dno longer use it...
26191: [8aefa87d7d31]
26192:
26193: * CHANGES:
26194: updated
26195: [ce97b3fd7182]
26196:
26197: * logging.c:
26198: added BROKEN_SYSLOG support
26199: [a45c3bca36f6]
26200:
26201: * config.h.in:
26202: added BROKEN_SYSLOG
26203: [6f6abf0a6268]
26204:
26205: * check.c:
26206: now only bitch it timestamp > time_now + 2 * timeout to allow for a
26207: machine udpating its time from a server
26208: [546bc8d35325]
26209:
26210: * sudo.man:
26211: added 2 security notes updated Nieusma's email addr
26212: [616756c56977]
26213:
26214: * lsearch.c:
26215: changed a memmove() to memcpy() since we don't have to worry about
26216: overlapping segments.
26217: [30baa478526b]
26218:
26219: 1995-07-11 Todd C. Miller <Todd.Miller@courtesan.com>
26220:
26221: * interfaces.c:
26222: cleanup up the loop when interfaces are groped in so that it is
26223: readable
26224: [1fa39446bd69]
26225:
26226: * Makefile.in, version.h:
26227: ++version
26228: [b46bd2b1770f]
26229:
26230: 1995-07-09 Todd C. Miller <Todd.Miller@courtesan.com>
26231:
26232: * CHANGES:
26233: annotated 124-126
26234: [b82a2b3ec7ce]
26235:
26236: 1995-07-07 Todd C. Miller <Todd.Miller@courtesan.com>
26237:
26238: * check.c:
26239: fixed permissions check on /tmp/.odus
26240: [cc2431a65468]
26241:
26242: 1995-07-06 Todd C. Miller <Todd.Miller@courtesan.com>
26243:
26244: * check.c:
26245: fixed some comments
26246: [8896d09b4fda]
26247:
26248: * check.c:
26249: now checks owner & mode of timedir also checks for bogus dates on
26250: timestamp file
26251: [a0fad5df5b0a]
26252:
26253: * OPTIONS:
26254: updated TIMEOUT info
26255: [033cc22d9e04]
26256:
26257: * logging.c, sudo.h:
26258: added BAD_STAMPDIR and BAD_STAMPFILE
26259: [31d9ce691101]
26260:
26261: * compat.h:
26262: added definition of S_IRWXU
26263: [ff2dab091a9b]
26264:
26265: * CHANGES:
26266: updated
26267: [a40df90284f1]
26268:
26269: 1995-07-03 Todd C. Miller <Todd.Miller@courtesan.com>
26270:
26271: * interfaces.c:
26272: added #ifdef to make it compile on strange arches
26273: [4a127f12afce]
26274:
26275: 1995-07-02 Todd C. Miller <Todd.Miller@courtesan.com>
26276:
26277: * aclocal.m4:
26278: fixed check for fulkl void impl.
26279: [b6f2a4a361d8]
26280:
26281: * check.c:
26282: added mssing "static"
26283: [520552f2772b]
26284:
26285: * insults.h:
26286: replaced #elif with #else #if constructs for ancient C compilers
26287: [39ab2d365b57]
26288:
26289: * INSTALL:
26290: updated irix c2 & kerb5 info
26291: [ae79b99b4905]
26292:
26293: * configure.in:
26294: added shadow pw support for irix
26295: [632469d9c528]
26296:
26297: 1995-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
26298:
26299: * BUGS, TODO:
26300: updated
26301: [2a96bb18ac30]
26302:
26303: * CHANGES:
26304: last changes for sudo 1.3.3
26305: [c1c0cd1034b8]
26306:
26307: * configure.in:
26308: now calls SUDO_SOCK_SA_LEN
26309: [14ea78159d45]
26310:
26311: * config.h.in:
26312: added HAVE_SA_LEN
26313: [cc2a346aa905]
26314:
26315: * aclocal.m4:
26316: added SUDO_SOCK_SA_LEN
26317: [456a2025644a]
26318:
26319: * interfaces.c:
26320: now works with ip implementations that use sa_len in sockaddr
26321: [90be6e028077]
26322:
26323: * INSTALL:
26324: added note about buggy AIX compiler
26325: [c0f6d427e4e4]
26326:
26327: * interfaces.c:
26328: now include sys/time.h for AIX
26329: [2510858ab38b]
26330:
26331: 1995-06-28 Todd C. Miller <Todd.Miller@courtesan.com>
26332:
26333: * Makefile.in:
26334: getcwd -> getwd
26335: [66085ebca98e]
26336:
26337: * interfaces.c:
26338: now works for ISC and others. yay.
26339: [f336d4ffc927]
26340:
26341: 1995-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
26342:
26343: * Makefile.in, version.h:
26344: version++
26345: [836cffc2078d]
26346:
26347: 1995-06-23 Todd C. Miller <Todd.Miller@courtesan.com>
26348:
26349: * aclocal.m4:
26350: fixed test for full void impl
26351: [fb004107e7b9]
26352:
26353: * sudo.c:
26354: now check to see that st_dev is non-zero before assuming that we are
26355: being spoofed
26356: [1b0e1c30c506]
26357:
26358: 1995-06-20 Todd C. Miller <Todd.Miller@courtesan.com>
26359:
26360: * aclocal.m4, configure.in:
26361: SUDO_FUNC_UTIME_NULL -> AC_FUNC_UTIME_NULL
26362: [4953379bfb01]
26363:
26364: 1995-06-19 Todd C. Miller <Todd.Miller@courtesan.com>
26365:
26366: * aclocal.m4:
26367: fixed include file order for SUDO_FUNC_UTIME_POSIX
26368: [ff64ab7df44f]
26369:
26370: * logging.c:
26371: added cast for ttyname()
26372: [444f05f56758]
26373:
26374: * configure.in:
26375: fixed typo
26376: [de068e748431]
26377:
26378: * check.c:
26379: now deal correctly with all known variation of utime() -- yippe
26380: [b778a4195a89]
26381:
26382: * configure.in:
26383: added SUDO_FUNC_UTIME_POSIX
26384: [cf635f2269d6]
26385:
26386: * aclocal.m4:
26387: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
26388: [d79593be4b73]
26389:
26390: * config.h.in:
26391: added HAVE_UTIME_POSIX
26392: [c67b4ac0dca5]
26393:
26394: * check.c:
26395: fixed a typo
26396: [b14df5680f59]
26397:
26398: * check.c:
26399: no longer assume !HAVE_UTIME_NULL means old BSD utime()
26400: [0aeaf4b2f38b]
26401:
26402: * check.c:
26403: fixed fascist C compiler warning
26404: [c61ddf2f1f93]
26405:
26406: * interfaces.c:
26407: now set strioctl.ic_timout in STRSET() now initialize num_interfaces
26408: to 0 (just to be anal)
26409: [c54cc2ba0052]
26410:
26411: 1995-06-18 Todd C. Miller <Todd.Miller@courtesan.com>
26412:
26413: * sudo.h:
26414: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
26415: [74cf585a54fb]
26416:
26417: * logging.c:
26418: added tty logging
26419: [e27d8dcfbd78]
26420:
26421: * interfaces.c:
26422: reworked the ISC code
26423: [bcf57ce8ae69]
26424:
26425: * Makefile.in, version.h:
26426: updated version
26427: [032941c9b94d]
26428:
26429: * check.c:
26430: now expect old-style utime(3) if utime() can't take NULL as an arg
26431: [018dd4a73030]
26432:
26433: * configure.in:
26434: added check for utime.h
26435: [0b76e8feb618]
26436:
26437: * config.h.in:
26438: added HAVE_UTIME_H
26439: [62ee42feda46]
26440:
26441: * Makefile.in:
26442: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
26443: [fa3201d294e1]
26444:
26445: * configure.in:
26446: now search for kerb libs and includes
26447: [cc332401e571]
26448:
26449: * check.c:
26450: added support for utime(2)'s that can't take a NULL parameter
26451: [98797fedf69f]
26452:
26453: * utime.c:
26454: moved HAVE_UTIME_NULL stuff to update_timestamp() where t belongs
26455: [6ce6d825fb44]
26456:
26457: * configure.in:
26458: added utime(s) stuff
26459: [a2afb744403e]
26460:
26461: * check.c:
26462: now use utime()
26463: [48902240a51e]
26464:
26465: * config.h.in:
26466: added HAVE_UTIME and HAVE_UTIME_NULL
26467: [9a56ab65d4f4]
26468:
26469: 1995-06-17 Todd C. Miller <Todd.Miller@courtesan.com>
26470:
26471: * utime.c:
26472: now use HAVE_UTIME_NULL
26473: [e3944de09a92]
26474:
26475: * emul/utime.h, utime.c:
26476: Initial revision
26477: [a2cbf2ef3427]
26478:
26479: * check.c:
26480: need to setuid(0) to make kerb4 stuff work.
26481: [c6cfda4039d7]
26482:
26483: * tgetpass.c:
26484: no more special case for kerberos
26485: [4a5c33145be9]
26486:
26487: * config.h.in:
26488: took out setreuid and setresuid stuff added kerb5 stuff (use kerb4
26489: emulation)
26490: [a607ee43e650]
26491:
26492: * compat.h:
26493: no longer need setreuid() emulation now set _PASSWD_LEN to 128 if
26494: kerberos
26495: [02fb274cc136]
26496:
26497: * check.c:
26498: now use private ticket file for kerberos support to avoid trouncing
26499: on system one
26500: [28d8b6b812c7]
26501:
26502: 1995-06-15 Todd C. Miller <Todd.Miller@courtesan.com>
26503:
26504: * sudo.h:
26505: added SPOOF_ATTEMPT & cmnd_st
26506: [d3b42a1f4d0d]
26507:
26508: * sudo.c:
26509: added anti-spoofing support
26510: [ab1e2aa44a57]
26511:
26512: * parse.c:
26513: now use global cmnd_st
26514: [47018265a1a6]
26515:
26516: * logging.c:
26517: added SPOOF_ATTEMPT suypport
26518: [7bbe9dd2a021]
26519:
26520: * testsudoers.c, visudo.c:
26521: added void casts where appropriate
26522: [f191441ba333]
26523:
26524: * parse.yacc:
26525: fixed up spacing and added void casts where appropriate
26526: [15d886fc809c]
26527:
26528: * sudo.c:
26529: fixed problem with "-p prompt" but no args
26530: [6fc048261a3e]
26531:
26532: 1995-06-14 Todd C. Miller <Todd.Miller@courtesan.com>
26533:
26534: * sudo.man:
26535: added BUGS and annotated -l description
26536: [e5c506de2603]
26537:
26538: * sudo.h:
26539: validate() now takes a flag
26540: [26627becc60a]
26541:
26542: * sudo.c:
26543: validate() now takes a flag added -l
26544: [a4f7bb97fe54]
26545:
26546: * parse.yacc:
26547: added support for -l
26548: [e7a9b10b0ad3]
26549:
26550: * parse.c:
26551: validate() now takes a flag that says whether or not to check the
26552: command
26553: [9e1e67f4e281]
26554:
26555: 1995-06-08 Todd C. Miller <Todd.Miller@courtesan.com>
26556:
26557: * logging.c:
26558: now deals with Argv == 1
26559: [0acb637ab635]
26560:
26561: * sudo.man:
26562: added -p option
26563: [e60382fc0561]
26564:
26565: * sudo.c:
26566: added prompt support reworked parse_args()
26567: [2f605267ed4a]
26568:
26569: * sudo.h:
26570: added prompt
26571: [5ab021bdb419]
26572:
26573: * options.h:
26574: added PASSPROMPT
26575: [614727ff44a2]
26576:
26577: * check.c:
26578: now use BUFSIZ as length of kerb password added kpass so pass is
26579: always a char * now use prompt global when asking for a password
26580: [76be09af784f]
26581:
26582: * tgetpass.c:
26583: now use BUFSIZ as _PASSWD_LEN if using kerberos
26584: [1e907eed312b]
26585:
26586: * OPTIONS:
26587: added PASSPROMPT
26588: [ddb2f405ce40]
26589:
26590: 1995-06-07 Todd C. Miller <Todd.Miller@courtesan.com>
26591:
26592: * configure.in:
26593: only look for -lufc or -lcrypt if crypt() not in libc
26594: [9717d315661f]
26595:
26596: * check.c:
26597: don't exit on kerb error, just warn if k_errno == KDC_PR_UNKNOWN
26598: (unknown user) silently fail
26599: [2b48693d4ee9]
26600:
26601: * INSTALL:
26602: added kerb4 note
26603: [986e393f740c]
26604:
26605: * tgetpass.c:
26606: HAVE_KERBEROS -> HAVE_KERB4
26607: [e438bfb5e6aa]
26608:
26609: * check.c:
26610: removed debugging printf
26611: [1cf9f5cbffa5]
26612:
26613: * configure.in:
26614: KERBEROS -> KERB4 added checks for setreuid & setresuid
26615: [01e9945beb1e]
26616:
26617: * config.h.in:
26618: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and HAVE_SETRESUID
26619: [0e0bb5b8ac3e]
26620:
26621: * compat.h:
26622: added deif of UID_NO_CHANGE & GID_NO_CHANGE added setreuid emulation
26623: with setresuid if applic
26624: [9dae24c47696]
26625:
26626: * check.c:
26627: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid chown() hack if
26628: no setreuid() or a broken one
26629: [1fca642bdb8e]
26630:
26631: 1995-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
26632:
26633: * configure.in:
26634: added kerberos support
26635: [da5639b9b8e7]
26636:
26637: * config.h.in:
26638: added HAVE_KERBEROS
26639: [fcc5be550e65]
26640:
26641: * tgetpass.c:
26642: added KERBEROS support (long passwords)
26643: [303ba6924dd2]
26644:
26645: * check.c:
26646: added kerberos support
26647: [e40afe98fc1d]
26648:
26649: 1995-06-03 Todd C. Miller <Todd.Miller@courtesan.com>
26650:
26651: * sudo.h:
26652: added MODE_BACKGROUND
26653: [9b483c932016]
26654:
26655: * sudo.man:
26656: escaped dashes added -b option
26657: [62e84f1a7714]
26658:
26659: * sudo.c:
26660: added -b option
26661: [7e78aaefeb95]
26662:
26663: * check.c:
26664: added crypt() for osf/1 3.x enhanced secuiry
26665: [e9aa5abdb7d5]
26666:
26667: * configure.in:
26668: now check for -lcrypt
26669: [5cb9c67e9fa2]
26670:
26671: * interfaces.c:
26672: added ENXIO like EADDRNOTAVAIL
26673: [74223bb1ba75]
26674:
26675: 1995-05-08 Todd C. Miller <Todd.Miller@courtesan.com>
26676:
26677: * configure.in:
26678: now emulate getwd(), not getcwd()
26679: [3e5439d9a5f4]
26680:
26681: * sudo.c:
26682: getcwd() -> getwd()
26683: [6392a96a658e]
26684:
26685: * getwd.c:
26686: getcwd -> getwd
26687: [1b0ab9bae11e]
26688:
26689: 1995-05-02 Todd C. Miller <Todd.Miller@courtesan.com>
26690:
26691: * ins_2001.h, ins_classic.h, ins_goons.h:
26692: Initial revision
26693: [86db60d8cf00]
26694:
26695: * insults.h:
26696: broke out insults into separate include files
26697: [0a01993bd38a]
26698:
26699: * OPTIONS, options.h:
26700: added GOONS
26701: [e283203c6515]
26702:
26703: * Makefile.in:
26704: added ins_2001.h ins_classic.h ins_goons.h
26705: [2a39cd6a4cd2]
26706:
26707: * Makefile.in, version.h:
26708: ++version
26709: [05ebf4f5e41a]
26710:
26711: * visudo.c:
26712: moved signal handler setup to setup_signals()
26713: [3dd976c04540]
26714:
26715: * sudo.h:
26716: added load_interfaces()
26717: [af2d473b09e2]
26718:
26719: * sudo.c:
26720: moved load_interfaces to interfaces.c
26721: [5c8c138e5d4c]
26722:
26723: * parse.yacc:
26724: added clearaliases
26725: [aeb4ff301daa]
26726:
26727: * OPTIONS, options.h:
26728: added FAST_MATCH
26729: [f49ea3d1b525]
26730:
26731: * parse.lex:
26732: now uses clearaliases variable
26733: [a2dda415bf61]
26734:
26735: * interfaces.c:
26736: Initial revision
26737: [a1990e3f5c69]
26738:
26739: * Makefile.in:
26740: added interfaces.[co]
26741: [1e8e5984de97]
26742:
26743: * testsudoers.c:
26744: now uses ip addrs and netmasks via load_interfaces()
26745: [54b8f7a6835e]
26746:
26747: * sudo.c:
26748: now remove IFS instead of setting to "sane" value
26749: [ce7eec9f115e]
26750:
26751: 1995-05-01 Todd C. Miller <Todd.Miller@courtesan.com>
26752:
26753: * parse.c:
26754: added FAST_MATCH
26755: [816d4f5fe81a]
26756:
26757: 1995-04-30 Todd C. Miller <Todd.Miller@courtesan.com>
26758:
26759: * Makefile.in:
26760: sudo_goodpath.c-> goodpath.c
26761: [a5072c4e1de2]
26762:
26763: * sudo.c:
26764: added Andy's new ISC changes
26765: [caa6bbee358e]
26766:
26767: 1995-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
26768:
26769: * OPTIONS:
26770: added a sentence to SECURE_PATH info
26771: [cad6e1569d15]
26772:
26773: * BUGS:
26774: added one
26775: [4b35cf699a83]
26776:
26777: * CHANGES:
26778: updated
26779: [5fded9dc62f0]
26780:
26781: * RUNSON:
26782: updated
26783: [33cb993cfd39]
26784:
26785: 1995-04-13 Todd C. Miller <Todd.Miller@courtesan.com>
26786:
26787: * RUNSON:
26788: updated for beta3
26789: [a05dc6a91995]
26790:
26791: * Makefile.in, version.h:
26792: ++version
26793: [54aaf3fadc75]
26794:
26795: * aclocal.m4:
26796: sendmail is now looked for in /usr/ucblib
26797: [231ac1a4662f]
26798:
26799: * sudo.c:
26800: fixed indentation
26801: [fb137400c8c2]
26802:
26803: * aclocal.m4:
26804: fixed a typo
26805: [e03f1acc468b]
26806:
26807: * sudo.c:
26808: updated ISC mods
26809: [070290d4754b]
26810:
26811: * configure.in:
26812: added unixware case
26813: [e90250bae0d9]
26814:
26815: * check.c:
26816: user_is_exempt is no longer hidden
26817: [1a341765b8af]
26818:
26819: * RUNSON:
26820: updated
26821: [a9c4898b26dd]
26822:
26823: * aclocal.m4:
26824: isc and riscos changes
26825: [98b5d86585d1]
26826:
26827: * OPTIONS:
26828: added NOTE about new interaction of EXEMPTGROUP and SECURE_PATH
26829: [e1ecc464ce4b]
26830:
26831: * Makefile.in:
26832: fixed a typo and added testsudoers stuff
26833: [435d60e163dc]
26834:
26835: * testsudoers.c:
26836: Initial revision
26837: [6ce14a448662]
26838:
26839: 1995-04-12 Todd C. Miller <Todd.Miller@courtesan.com>
26840:
26841: * parse.yacc:
26842: applied fixed patch from Chris
26843: [cd6144203d13]
26844:
26845: 1995-04-11 Todd C. Miller <Todd.Miller@courtesan.com>
26846:
26847: * Makefile.in:
26848: fixed a typo
26849: [34f8a54ba041]
26850:
26851: * parse.yacc:
26852: added a set of braces for bison
26853: [f0e43b938914]
26854:
26855: * parse.yacc:
26856: merged in Chris' changes to dekludge the parser.
26857: [82d6e373ab1c]
26858:
26859: * logging.c:
26860: send_mail() was calling find_path() which is wrong since find_path()
26861: stores cmnd in a static var. Anyhow, it doesn't make much sense
26862: since MAILER should always be fully qualified
26863: [6eae6a0b8098]
26864:
26865: 1995-04-10 Todd C. Miller <Todd.Miller@courtesan.com>
26866:
26867: * sample.sudoers:
26868: added User_Alias stuff
26869: [aaba8c8e918d]
26870:
26871: * aclocal.m4:
26872: SUDO_NEXT now looks for /usr/lib/NextStep/software_version
26873: [52bd81f34b32]
26874:
26875: * RUNSON:
26876: added DEC UNIX 3.0 w/ gcc
26877: [7daf570775b5]
26878:
26879: * visudo.c:
26880: Exit was being used in places where exit should be used
26881: [6026a89c07ed]
26882:
26883: * sudoers:
26884: added "User alias specification"
26885: [a487b6e234f8]
26886:
26887: * parse.yacc:
26888: fixed probs caused by making nslots and naliases a size_t
26889: [0be919384f3f]
26890:
26891: * RUNSON:
26892: added KSR, upped rev to 1.3.1b2
26893: [ce04ee6faadf]
26894:
26895: * logging.c, parse.yacc:
26896: 1024 -> BUFSIZ
26897: [cd6dda45fa11]
26898:
26899: * parse.yacc:
26900: void * -> VOID * naliases and nslots are now size_t to appease
26901: lsearch on 64-bit machines
26902: [bf2f807c0dc1]
26903:
26904: 1995-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
26905:
26906: * TODO:
26907: did a bunch of things and added a bunch :-)
26908: [42afd957b829]
26909:
26910: * PORTING:
26911: updated
26912: [972f95c85776]
26913:
26914: * visudo.man:
26915: closer to BSD manpage style
26916: [07ae88f50325]
26917:
26918: * sudo.man:
26919: closer to standard BSD man format
26920: [372c28dcc135]
26921:
26922: * compat.h, config.h.in, emul/search.h, insults.h, options.h,
26923: pathnames.h.in, sudo.h, version.h:
26924: added RCS id
26925: [c0ec90b81002]
26926:
26927: * sudo.h:
26928: removed crufty #defines that are no longer used
26929: [35e2b4b477f0]
26930:
26931: * BUGS:
26932: fixed a bug
26933: [5bb3e1bee85e]
26934:
26935: * sudo.man:
26936: updated based on sudo changes
26937: [e65de1cae438]
26938:
26939: * parse.yacc:
26940: now allow ALL keyword in User_Aliases now allow ALL keyword as well
26941: as a NAME or ALIAS
26942: [1fb31404dd0f]
26943:
26944: * CHANGES:
26945: updated
26946: [b24018ac610b]
26947:
26948: * sudo.c:
26949: now sets SUDO_COMMAND and SUDO_GID envariables.
26950: [e9d791557fb7]
26951:
26952: * aclocal.m4:
26953: fixed bug with full void impl check
26954: [35715301023c]
26955:
26956: * parse.yacc:
26957: fixed User_Alias supoprt
26958: [4c30dfbaaa07]
26959:
26960: * parse.yacc:
26961: added stubs for User_Alias support
26962: [f4afbd247edf]
26963:
26964: * sudo.c:
26965: now sets removes # bogus interfaces from num_interfaces
26966: [6f077fac9ab1]
26967:
26968: * parse.lex:
26969: added User_Alias support
26970: [bc7997e5df85]
26971:
26972: 1995-04-08 Todd C. Miller <Todd.Miller@courtesan.com>
26973:
26974: * Makefile.in:
26975: removed extraneous TODO
26976: [bc87a3b14d6d]
26977:
26978: 1995-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
26979:
26980: * visudo.c:
26981: ntwk_matches -> addr_matches
26982: [475044e288b8]
26983:
26984: * parse.yacc:
26985: ntwk_matches -> addr_matches
26986: [dd1f4093fd2d]
26987:
26988: * parse.c:
26989: ntwk_matches -> addr_matches now use inet_addr() not inet_network()
26990: (which expects octet boundaries) fixes for OSF (sizeof(int) !=
26991: sizeof(long))
26992: [acd2f556940f]
26993:
26994: * sudo.c:
26995: took out debugging info
26996: [044023063eca]
26997:
26998: * aclocal.m4:
26999: OS was being set to unknown before non-uname based host checks.
27000: This caused no checks to happen since $OS was not zero-length.
27001: [335a7267479d]
27002:
27003: * sudo.c:
27004: fixed loading of interfaces struct still has debugging info in
27005: though
27006: [2d1a18998c1e]
27007:
27008: * parse.c:
27009: fixed typo
27010: [175674a3a9fa]
27011:
27012: 1995-04-06 Todd C. Miller <Todd.Miller@courtesan.com>
27013:
27014: * Makefile.in:
27015: ++version
27016: [55d191b5daa3]
27017:
27018: * version.h:
27019: ++
27020: [d7d1f115696a]
27021:
27022: * visudo.c:
27023: removed extraneous extern decl of "top
27024: [50355621047d]
27025:
27026: * visudo.c:
27027: now zeros "top"
27028: [4e683210345b]
27029:
27030: * parse.yacc:
27031: removed parser_cleanup (no need for it now)
27032: [afa59f222b6c]
27033:
27034: * parse.lex:
27035: now calls reset_aliases() directly
27036: [3a23cbd60fc0]
27037:
27038: 1995-04-04 Todd C. Miller <Todd.Miller@courtesan.com>
27039:
27040: * OPTIONS:
27041: added a sentence to SECURE_PATH description
27042: [c5bf75b85af0]
27043:
27044: * parse.c:
27045: fixed my stupid bug where I used NAMLEN on something I wanted to
27046: just get the name from. argh.
27047: [111f460f6540]
27048:
27049: 1995-04-03 Todd C. Miller <Todd.Miller@courtesan.com>
27050:
27051: * lsearch.c:
27052: fixed argument order of memmove() that i hosed when converting from
27053: bcopy(). arghh.
27054: [2f5336045c8b]
27055:
27056: * Makefile.in:
27057: finally fixed DISTFILES line
27058: [a1b419e73a63]
27059:
27060: * Makefile.in:
27061: tabs -> spaces
27062: [280fb03e5764]
27063:
27064: * Makefile.in:
27065: added missing files to DISTFILES
27066: [991fc1cd2263]
27067:
27068: * Makefile.in:
27069: SUPPORTED -> RUNSON
27070: [7580e65b05fb]
27071:
27072: 1995-04-01 Todd C. Miller <Todd.Miller@courtesan.com>
27073:
27074: * TODO:
27075: updated
27076: [fe764a29c1cc]
27077:
27078: * RUNSON:
27079: updated for pl5b1 release
27080: [aefc35bd2291]
27081:
27082: * BUGS, TODO:
27083: updated
27084: [8f0ea249b687]
27085:
27086: * check.c:
27087: fixed bug where if you hit return at first sudo prompt it would
27088: still log as a failure
27089: [24539c854692]
27090:
27091: * CHANGES:
27092: updated
27093: [251cc7b3ede4]
27094:
27095: * aclocal.m4:
27096: better test for bogus void * implementation
27097: [efe23180cb88]
27098:
27099: * logging.c:
27100: added PASSWORDS_NOT_CORRECT
27101: [bd12c73f83f7]
27102:
27103: * check.c:
27104: added PASSWORDS_NOT_CORRECT stuff]
27105: [90de391a979f]
27106:
27107: * sudo.h:
27108: added PASSWORDS_NOT_CORRECT
27109: [727fbeb76fc5]
27110:
27111: * tgetpass.c:
27112: moved pathnames.h
27113: [4f910e5a8df7]
27114:
27115: * sudo.c:
27116: removed some unused vars and fixed up uid2str
27117: [70e92c7f9076]
27118:
27119: * putenv.c:
27120: moved compat.h
27121: [b271091586f6]
27122:
27123: * getcwd.c, getwd.c:
27124: added pathnames.h
27125: [6f25218f133f]
27126:
27127: 1995-03-31 Todd C. Miller <Todd.Miller@courtesan.com>
27128:
27129: * parse.yacc:
27130: fixed a typo I introduced in the last checkin :-(
27131: [62c3af75c4fe]
27132:
27133: * parse.lex:
27134: can't have #ifdef's where N is defined so just do this the broken
27135: way for AIX
27136: [c5648a5594e4]
27137:
27138: * parse.yacc:
27139: better hack from Chris (but still a hack)
27140: [6b6d8aed93f3]
27141:
27142: * parse.lex:
27143: stupid hack for broken aix lex
27144: [efc3f9e5280e]
27145:
27146: * tgetpass.c:
27147: now includes compat.h
27148: [401822173f77]
27149:
27150: * visudo.c:
27151: now includes fcntl.h
27152: [63865c2f8ac6]
27153:
27154: * compat.h:
27155: added FD_SET and FD_ZERO for 4.2BSD
27156: [00c5597c0bb0]
27157:
27158: * parse.yacc:
27159: dirty hack to fix parser bug. i don't really like this but it works
27160: for now...
27161: [5b8bbdc81569]
27162:
27163: * sudo.c:
27164: uid2str is now static like the prototype says
27165: [f2a97b5cb870]
27166:
27167: 1995-03-30 Todd C. Miller <Todd.Miller@courtesan.com>
27168:
27169: * CHANGES, SUPPORTED, TODO, TROUBLESHOOTING:
27170: updated
27171: [6f79c3e92716]
27172:
27173: * RUNSON:
27174: Initial revision
27175: [12a09ef9e884]
27176:
27177: * sudo.c:
27178: check_sudoers now returns an error code and sudo calls inform_user
27179: and log_error based on the return value.
27180: [340eca188d9a]
27181:
27182: * logging.c, sudo.h:
27183: added entries for new errors
27184: [6050d8542e1f]
27185:
27186: * parse.c:
27187: now set uid to that of SUDOERS_OWNER while parsing sudoers file
27188: [3683c42bc9b0]
27189:
27190: * Makefile.in:
27191: took out testsudoers
27192: [65317d49db48]
27193:
27194: * sudo.c:
27195: now explicately checks that it is setuid root
27196: [2fe1be60ef6a]
27197:
27198: * sudo.c:
27199: If a user has no passwd entry sudo would segv (writing to a garbage
27200: pointer). Now allocate space before writing :-)
27201: [d08e7eb5e5ef]
27202:
27203: * configure.in:
27204: reordered AC_CHECK_FUNCS
27205: [4c82e56c6f4f]
27206:
27207: * config.h.in:
27208: fixed memset macro
27209: [77ede6b714ab]
27210:
27211: * tgetpass.c, visudo.c:
27212: bzero -> memset
27213: [1a005bb322c8]
27214:
27215: * logging.c:
27216: bzero -> memset when a parse error is logged the line number of the
27217: error is now logged too
27218: [a42d68047723]
27219:
27220: * INSTALL:
27221: added Sunos to blurb about c2 security
27222: [af750a1d131e]
27223:
27224: * configure.in:
27225: added a SUN4 define for C2 security
27226: [6ad5b23a3eb0]
27227:
27228: * config.h.in:
27229: bcopy -> memmove bzero -> memset
27230: [5494460c8464]
27231:
27232: * lsearch.c:
27233: bcopy -> memmove char * -> VOID *
27234: [a15f5c316e16]
27235:
27236: * check.c:
27237: added support for sunos with C2 security
27238: [03fea5bb21e6]
27239:
27240: * OPTIONS, options.h:
27241: reordered
27242: [1686265af3e1]
27243:
27244: * pathnames.h.in:
27245: _PATH_SUDO_LOGFILE now set based on configure
27246: [5867b58e4a04]
27247:
27248: * configure.in:
27249: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
27250: [1984d9fd1b5c]
27251:
27252: * config.h.in:
27253: added _SUDO_PATH_LOGFILE
27254: [dd3eebe62580]
27255:
27256: * aclocal.m4:
27257: added SUDO_LOGFILE to find where to put sudo.log added
27258: SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h too) added
27259: SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
27260: [c589a515a99a]
27261:
27262: 1995-03-29 Todd C. Miller <Todd.Miller@courtesan.com>
27263:
27264: * TROUBLESHOOTING:
27265: Initial revision
27266: [f42f1baba3a8]
27267:
27268: * sudo.c:
27269: now do set_perms(PERM_ROOT) before the getpwuid() in load_global()
27270: to work around a problem is trusted hpux shadow passwords. yuck.
27271: [ae1f13b54687]
27272:
27273: * parse.yacc:
27274: backed out a change in malloc/realloc
27275: [ab868db0ad69]
27276:
27277: * parse.yacc:
27278: now include stdlib.h
27279: [957eef0631eb]
27280:
27281: * visudo.c:
27282: now do an freopen() of the stmp file so that yyin will always point
27283: to the same thing. This is important for flex since we are doing a
27284: YY_NEWFILE
27285: [44558922fd3e]
27286:
27287: * parse.yacc:
27288: replaced yywrap() with parser_cleanup() since yywrap() needs to be
27289: in parse.lex to be able to use YY_NEW_FILE. sigh.
27290: [12dd09921074]
27291:
27292: * parse.lex:
27293: now have a rule that matches anything that doesn't match an
27294: explicite rule. well, you know what i mean (. matches anything not
27295: yet matched). However, this means that there is input still queued
27296: up so we need to do a YY_NEW_FILE; in yywrap. So, yywrap has moved
27297: into parse.lex and it calls parser_cleanup() which is most of the
27298: old yywrap() sigh.
27299: [7f4042bc48d6]
27300:
27301: * SUPPORTED:
27302: no longer used
27303: [8f220be4da94]
27304:
27305: * getcwd.c, getwd.c:
27306: moved compat.h to be the last include file
27307: [9f3a65e2d485]
27308:
27309: * parse.yacc:
27310: fixed type of aliascmp() args
27311: [1c27eb989bdf]
27312:
27313: * find_path.c:
27314: NULL -> '\0'
27315: [5c8d8cf1692e]
27316:
27317: * parse.yacc:
27318: added casts to lfind and lsearch args for irix
27319: [61027ddeecf8]
27320:
27321: * Makefile.in:
27322: bsdinstall -> install-sh
27323: [61de6612c5a5]
27324:
27325: * INSTALL:
27326: added info about make realclean
27327: [29c6324d727f]
27328:
27329: * Makefile.in:
27330: updated VERSION added dependencies for visudo.cat
27331: [09077d7229d4]
27332:
27333: * version.h:
27334: -> pl5b1
27335: [5d21c7ad1a41]
27336:
27337: * sudo.c:
27338: took out -l
27339: [fc1478d81b38]
27340:
27341: * Makefile.in:
27342: now there is a real visudo.man and visudo.cat
27343: [58aeac43a6dd]
27344:
27345: * sudo.man:
27346: took out visudo stuff
27347: [4a6ac4393343]
27348:
27349: * visudo.man:
27350: Initial revision
27351: [cba348843db8]
27352:
27353: * parse.c, parse.lex, parse.yacc:
27354: updated copyright
27355: [ffa16b70944a]
27356:
27357: * README:
27358: updated for pl5
27359: [a26e423e9e5f]
27360:
27361: * sudo.man:
27362: updated Nieusma & Hieb email addresses
27363: [f0083e71989d]
27364:
27365: * INSTALL:
27366: updated to include options.h and OPTIONS
27367: [ee59e2b76c94]
27368:
27369: * CHANGES, TODO:
27370: updated
27371: [51e011ad5220]
27372:
27373: * BUGS:
27374: eliminated bug #1 (yay)
27375: [e7e88515494e]
27376:
27377: * configure.in:
27378: sunos no longer gets linked statically
27379: [2e5b3ff3108f]
27380:
27381: 1995-03-28 Todd C. Miller <Todd.Miller@courtesan.com>
27382:
27383: * parse.lex:
27384: prototype now uses __P()
27385: [68ecdcab4c70]
27386:
27387: * parse.lex:
27388: make fill() non-ansi
27389: [d6509972260b]
27390:
27391: * parse.c:
27392: made -v (validate) work
27393: [13c9d520638c]
27394:
27395: * logging.c:
27396: now gives host
27397: [f04859cdba5a]
27398:
27399: * find_path.c:
27400: don't check for execute/statable if fq or relative path given
27401: [4bbe851f3973]
27402:
27403: * parse.c:
27404: added a cast
27405: [345c308f72f3]
27406:
27407: * visudo.c:
27408: now include ctype.h for islower and tolower macros
27409: [582c0aa332d5]
27410:
27411: * goodpath.c:
27412: moved _S_IFMT & _S_ISREG to compat.h
27413: [828e4ca4e7b4]
27414:
27415: * sudo.c:
27416: moved a set of parens
27417: [5783474ecf37]
27418:
27419: * strdup.c:
27420: now include compat.h
27421: [75e2036b94af]
27422:
27423: * emul/search.h:
27424: void * -> VOID *
27425: [cedcfaf04161]
27426:
27427: * parse.yacc:
27428: now cast malloc & realloc return vals added search for HAVE_LSEARCH
27429: now use strcmp if no strcasecmp available
27430: [d6a42bc3d4ae]
27431:
27432: * lsearch.c:
27433: void * -> VOID *
27434: [886adc44f607]
27435:
27436: * config.h.in:
27437: removed HAVE_FLEX added VOID added HAVE_DIRENT_H, HAVE_SYS_NDIR_H,
27438: HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
27439: [3b50d7fb4349]
27440:
27441: * compat.h:
27442: added _S_IFMT, _S_IFREG, and S_ISREG
27443: [73d506c7d53c]
27444:
27445: * aclocal.m4:
27446: took out SUDO_PROG_INSTALL 1.x to 2.x changes added echo and results
27447: to most SUDO_* macros
27448: [8442155f5936]
27449:
27450: * Makefile.in:
27451: no more -I.
27452: [63462f195bd4]
27453:
27454: * configure.in:
27455: various 1.x ro 2.x autoconf changes now check for strcasecmp now use
27456: AC_INSTALL_PROG instead of custom one added check for fully woorking
27457: void implementation
27458: [5ac6b6e6230f]
27459:
27460: * Makefile.in:
27461: added lsearch & search.h visudo links into $(LIBOBJS)
27462: [bc119cda4598]
27463:
27464: * aclocal.m4:
27465: partial 1.x to 2.x changes added SUDO_FULL_VOID
27466: [1194d01fa5c5]
27467:
27468: * visudo.c:
27469: whatnow_help was prototyped to be static be was not declared as
27470: such
27471: [0f85489dd426]
27472:
27473: * configure.in:
27474: autoconf 2.x changes took out HAVE_FLEX (no longer used) added check
27475: for dirent/dir/ndir.h
27476: [7408f3854948]
27477:
27478: * parse.c:
27479: now use groovy gnu autoconf macro AC_HEADER_DIRENT
27480: [e465db9f5dfa]
27481:
27482: * getcwd.c, getwd.c:
27483: MAXPATHLEN -> MAXPATHLEN+1
27484: [714d87424e21]
27485:
27486: * emul/search.h, lsearch.c:
27487: Initial revision
27488: [55d79482c535]
27489:
27490: 1995-03-27 Todd C. Miller <Todd.Miller@courtesan.com>
27491:
27492: * parse.yacc:
27493: eliminated bison warnings
27494: [61ca0a96da22]
27495:
27496: * parse.lex:
27497: added missing case
27498: [6be0f849747c]
27499:
27500: * visudo.c:
27501: now iincludes signal.h
27502: [221e0fcc144f]
27503:
27504: * parse.yacc:
27505: only clear data structures on a parse error
27506: [7b1c0f1a4527]
27507:
27508: * visudo.c:
27509: whatnow() now gives help on invalid input
27510: [e5a4cd88c587]
27511:
27512: * visudo.c:
27513: added a whatnow() function (sort of like mh)
27514: [932d9b145f1c]
27515:
27516: * parse.yacc:
27517: kill_aliases -> reset_aliases yywrap() now cleans up by calling
27518: reset_aliases() and clearing top took reset stuff out of yyerror()
27519: since it doesn't beling there (and doesn't work anyway). errorlineno
27520: is now initially set to -1 so we can set it to the first error that
27521: occurrs (it was getting set to the last)
27522: [2f71f95a974c]
27523:
27524: * parse.lex:
27525: added a void cast
27526: [18ae6042dce4]
27527:
27528: * visudo.c:
27529: rewrote from scratch based on 4.3BSD vipw.c
27530: [2f6814f18576]
27531:
27532: 1995-03-26 Todd C. Miller <Todd.Miller@courtesan.com>
27533:
27534: * sudo.c, sudo.h:
27535: removed ocmnd
27536: [a31735f41ad4]
27537:
27538: * sudo.h:
27539: no more sudo_realpath() and find_path() changed params
27540: [8e85c3b39159]
27541:
27542: * sudo.c:
27543: find_path() changed since no more realpath()
27544: [b25366c7f2ee]
27545:
27546: * parse.yacc:
27547: on error, errorlineno is set to the line where the error occurred
27548: added kill_aliases() to free the aliases struct now clean up in
27549: yyerror() so we can reparse cleanly
27550: [2342f578c27a]
27551:
27552: * options.h, parse.c:
27553: no more USE_REALPATH
27554: [cfc59babeaff]
27555:
27556: * logging.c:
27557: changed to use new find_path()
27558: [91c7a38e7751]
27559:
27560: * find_path.c:
27561: removed all the realpath() stuff
27562: [cc21a43a8562]
27563:
27564: * Makefile.in:
27565: sudo_realpath.c -> sudo_goodpath.c
27566: [03a9b1ddec2f]
27567:
27568: * visudo.c:
27569: now works correctly with utk parser
27570: [08aa554a0ce8]
27571:
27572: * goodpath.c:
27573: Initial revision
27574: [1ea607e1ffb2]
27575:
27576: * sudo_realpath.c:
27577: eliminated a compiler warning
27578: [198bcccc55b6]
27579:
27580: * sudo.c:
27581: elinated compiler warning
27582: [e2384f9a878b]
27583:
27584: * sudo_realpath.c:
27585: added sudo_goodpath()
27586: [43878c4cc540]
27587:
27588: * sudo.h:
27589: added prototype for sudo_goodpath
27590: [23e8627a2265]
27591:
27592: * parse.c:
27593: added support for /sys/dir.h
27594: [eca897087741]
27595:
27596: * options.h:
27597: USE_REALPATH turned off
27598: [620ac8b63d85]
27599:
27600: * find_path.c:
27601: added calls to sudo_goodpath()
27602: [ad170904fbcd]
27603:
27604: * configure.in:
27605: added check for dirent.h
27606: [7964a8c26855]
27607:
27608: * config.h.in:
27609: added HAVE_DIRENT_H
27610: [1f785fec7e19]
27611:
27612: * configure.in:
27613: added in linux shadow pass stuff
27614: [e585a5785f50]
27615:
27616: 1995-03-24 Todd C. Miller <Todd.Miller@courtesan.com>
27617:
27618: * visudo.c:
27619: added back host, user, cmnd, parse_error
27620: [0ec19f3d64f4]
27621:
27622: * visudo.c:
27623: added in utk changes plus some minor cosmetic changes
27624: [c5c1921c8a58]
27625:
27626: * sudo.c, sudo_realpath.c:
27627: added void casts for printf's
27628: [9c6ff11c0082]
27629:
27630: * options.h:
27631: added a define of USE_REALPATH
27632: [db3711c9efc5]
27633:
27634: * configure.in:
27635: there is no more visudoers/Makefile
27636: [36e1bc1f78d0]
27637:
27638: * Makefile.in:
27639: added in utk changes (visudo is now built from the toplevel)
27640: [76203d4b345d]
27641:
27642: * find_path.c:
27643: added (void) casts to printf's
27644: [dd5cb1e060ac]
27645:
27646: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c:
27647: merged in utk changes
27648: [35563307fd8e]
27649:
27650: 1995-03-23 Todd C. Miller <Todd.Miller@courtesan.com>
27651:
27652: * find_path.c:
27653: now check to see that what we are trying to run is a file (or a link
27654: to a file, we do a stat(2) so there is no diff)
27655: [05889c4bcace]
27656:
27657: 1995-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
27658:
27659: * CHANGES:
27660: updated
27661: [3e8047bb26fb]
27662:
27663: * Makefile.in:
27664: aclocal.m4 -> acsite.m4 make realclean updated for new autoconf
27665: [0bdbaa7c4c7d]
27666:
27667: * sudo.man:
27668: added myself as maintainer
27669: [77a9d75aab84]
27670:
27671: 1995-02-17 Todd C. Miller <Todd.Miller@courtesan.com>
27672:
27673: * sudo.c:
27674: changed setegid -> setgid
27675: [7f4788d73b6f]
27676:
27677: 1995-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
27678:
27679: * configure.in:
27680: fixed the test for irix 5.x to skip bad libs
27681: [bfef896de013]
27682:
27683: * aclocal.m4:
27684: now initialize OS and OSREV
27685: [cc302756e440]
27686:
27687: 1995-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
27688:
27689: * configure.in:
27690: irix5 changes
27691: [ac985b23f5f2]
27692:
27693: * configure.in:
27694: AC_WITH -> AC_ARG_WITH changes other misc changes for autoconf 2.1
27695: compatibility
27696: [0cf8c92a06d7]
27697:
27698: 1995-01-19 Todd C. Miller <Todd.Miller@courtesan.com>
27699:
27700: * visudo.c:
27701: use YY_NEW_FILE, not yyrestart since OSF flex doesn't do the righ
27702: thing wrt yyrestart (grrrr)
27703: [18e8eabfbb82]
27704:
27705: 1995-01-16 Todd C. Miller <Todd.Miller@courtesan.com>
27706:
27707: * Makefile.in:
27708: added visudoers/compat.h to DISTFILES
27709: [db23b574b034]
27710:
27711: * configure.in:
27712: fixed an echo
27713: [7cbc0462b89d]
27714:
27715: * sudo.c:
27716: added ocmnd declaration adjusted for find_path()'s new parameters
27717: [d929cd156474]
27718:
27719: * sudo.h:
27720: added ocmnd extern adjusted find_path() prototype
27721: [e0004daf5d3c]
27722:
27723: * parse.c:
27724: cmndcmp() now takes 3 arguments and checks against the qualified as
27725: well as the unqualified pathname. more code that should use
27726: cmndcmp() but did not, now does
27727: [6f70a8c17bee]
27728:
27729: * options.h:
27730: added to a comment
27731: [7a78680426b2]
27732:
27733: * logging.c:
27734: changed to use new find_path() parameter passing
27735: [840981d30db4]
27736:
27737: * find_path.c:
27738: find_path() now takes 2 copyout parameters (one for the qualified
27739: pathname and one for the unqualified pathname). The third parameter
27740: may be NULL.
27741: [851503b005e9]
27742:
27743: * configure.in:
27744: no longer munge pathnames.h
27745: [427d8796c5a9]
27746:
27747: * pathnames.h.in:
27748: changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h)
27749: as a result, pathnames.h does not need to be run through configure
27750: and the user can override the configured values easily.
27751: [2e378f2ebe88]
27752:
27753: * config.h.in:
27754: added _SUDO_PATH_* entries
27755: [0857de7cebab]
27756:
27757: * aclocal.m4:
27758: _PATH* -> _SUDO_PATH_*
27759: [7601193f56cc]
27760:
27761: * Makefile.in:
27762: updated DISTFILES and HDRS .o's now depend on config.h
27763: [39d8601965cf]
27764:
27765: 1995-01-13 Todd C. Miller <Todd.Miller@courtesan.com>
27766:
27767: * compat.h:
27768: removed extraneous #endif
27769: [27d4c5f2ce7e]
27770:
27771: * aclocal.m4:
27772: added SUDO_PROG_MV
27773: [76dda3bdd816]
27774:
27775: * configure.in:
27776: added SUDO_PROG_MV added riscos and isc os types took out
27777: -DSHORT_MESSAGE from --with-csops since it is now the default
27778: [68c206ad976e]
27779:
27780: * sudo.c:
27781: move the include of id.h to compat.h now includes options.h
27782: [45a1eaafb3a8]
27783:
27784: * sudo.h:
27785: moved compatibility #defines to compat.h
27786: [0eee27057698]
27787:
27788: * pathnames.h.in:
27789: added _PATH_MV
27790: [e830797ab320]
27791:
27792: * config.h.in:
27793: move __P to compat.h
27794: [188e12e0ba93]
27795:
27796: * getcwd.c, getwd.c, putenv.c:
27797: now includes compat.h
27798: [c72cb6d73981]
27799:
27800: * compat.h:
27801: Initial revision
27802: [d4d2f359ae03]
27803:
27804: 1995-01-12 Todd C. Miller <Todd.Miller@courtesan.com>
27805:
27806: * sudo.h:
27807: pull user-configurable stuff out and put in options.h
27808: [ef929467b070]
27809:
27810: 1995-01-11 Todd C. Miller <Todd.Miller@courtesan.com>
27811:
27812: * parse.lex, parse.yacc, visudo.c:
27813: now includes options.h
27814: [e36d7c82add1]
27815:
27816: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
27817: sudo_setenv.c:
27818: now includes options.h
27819: [f186ba03de07]
27820:
27821: * Makefile.in:
27822: added visudoers/options.h
27823: [e5350c476494]
27824:
27825: * OPTIONS, options.h:
27826: Initial revision
27827: [9b6b5001e318]
27828:
27829: * Makefile.in:
27830: added OPTIONS and options.h
27831: [25448341e16a]
27832:
27833: * logging.c:
27834: changed #ifdef's to use LOGGING and SLOG_SYSLOG/SLOG_FILE
27835: [5dd6385dd1d3]
27836:
27837: * check.c, sudo.h:
27838: changed PASSWORD_TIMEOUT to minutes
27839: [0ec6aab98738]
27840:
27841: 1994-12-17 Todd C. Miller <Todd.Miller@courtesan.com>
27842:
27843: * visudo.c:
27844: now only do Editor +line_num if line_num != 0
27845: [b69f04b5e3c7]
27846:
27847: 1994-12-16 Todd C. Miller <Todd.Miller@courtesan.com>
27848:
27849: * visudo.c:
27850: now use mv if rename(2) fails
27851: [83210dca1bab]
27852:
27853: * BUGS:
27854: added a visudo bug
27855: [d61a806f9aa7]
27856:
27857: * check.c:
27858: expanded comment
27859: [641f2cba94cb]
27860:
27861: 1994-11-12 Todd C. Miller <Todd.Miller@courtesan.com>
27862:
27863: * check.c:
27864: fixed user_is_exempt to return 0 if EXEMPTGROUP is not set
27865: [7a11135039a8]
27866:
27867: 1994-11-10 Todd C. Miller <Todd.Miller@courtesan.com>
27868:
27869: * sudo.c:
27870: added mips & isc support
27871: [e258dc053119]
27872:
27873: * parse.c:
27874: added support for non-root owned sudoers file
27875: [fea07e65a0fc]
27876:
27877: * check.c:
27878: added exempt group support
27879: [928fb4bd9ad5]
27880:
27881: * sudo.h:
27882: added set_perms() support added SUDOERS_OWNER so can have non-root
27883: own sudoers file added exempt group support added isc support
27884: [61c578d31fc1]
27885:
27886: * visudo.c:
27887: now copy sudoers to temp file via read/write (not stdio) now chown
27888: new sudoers file to SUDOERS_OWNER
27889: [a5176c59df70]
27890:
27891: 1994-11-08 Todd C. Miller <Todd.Miller@courtesan.com>
27892:
27893: * configure.in:
27894: added skey support
27895: [35a8d2fabdb7]
27896:
27897: * sudo_realpath.c:
27898: be_* -> setperms()
27899: [a1631d686e1c]
27900:
27901: * sudo.h:
27902: fixed typo added set_perms support added skey support added
27903: seteuid()/setegid() emulation for AIX
27904: [c0c8d6771406]
27905:
27906: * sudo.c:
27907: be_* -> setperms() now check to make sure sudoers file is owned by
27908: root nread/write by only root
27909: [13ab1e261f1a]
27910:
27911: * logging.c, parse.c:
27912: be_* -> setperms()
27913: [21499d845c8f]
27914:
27915: * check.c:
27916: be_* -> set_perms() added skey support
27917: [df51b56871c1]
27918:
27919: 1994-11-06 Todd C. Miller <Todd.Miller@courtesan.com>
27920:
27921: * Makefile.in:
27922: ++version
27923: [3c1abbe4e43c]
27924:
27925: * version.h:
27926: ++
27927: [1d2f9b540a95]
27928:
27929: 1994-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
27930:
27931: * sudo.c:
27932: now sets IFS
27933: [eabbb41b9f08]
27934:
27935: * insults.h:
27936: fixed typo
27937: [c7997f19216e]
27938:
27939: 1994-10-15 Todd C. Miller <Todd.Miller@courtesan.com>
27940:
27941: * config.h.in:
27942: added HAVE_SKEY
27943: [da948ec4186b]
27944:
27945: 1994-10-04 Todd C. Miller <Todd.Miller@courtesan.com>
27946:
27947: * CHANGES:
27948: updated
27949: [f4b55ab007ea]
27950:
27951: * Makefile.in:
27952: ++version
27953: [0489068b8c95]
27954:
27955: * version.h:
27956: ++
27957: [d189faedf423]
27958:
27959: * sudo.c:
27960: now bail if ARgv[1] > MAXPATHLEN
27961: [0cea8ecc9dc2]
27962:
27963: * configure.in:
27964: added function check for tcgetattr(3)
27965: [e03289b22c2f]
27966:
27967: * config.h.in:
27968: only define HAVE_TERMIOS_H if you have tcgetattr(3)
27969: [757eab83d1a2]
27970:
27971: * config.h.in:
27972: added check for tcgetattr
27973: [c5ae92715930]
27974:
27975: 1994-09-26 Todd C. Miller <Todd.Miller@courtesan.com>
27976:
27977: * CHANGES:
27978: updated
27979: [cbc419883108]
27980:
27981: 1994-09-22 Todd C. Miller <Todd.Miller@courtesan.com>
27982:
27983: * parse.lex:
27984: now only include unistd.h for linux
27985: [e9adeab95ef0]
27986:
27987: 1994-09-21 Todd C. Miller <Todd.Miller@courtesan.com>
27988:
27989: * Makefile.in:
27990: added visudo.8 generation
27991: [d6a3f0f887f8]
27992:
27993: * configure.in:
27994: added -Wl,-bI:./aixcrypt.exp to aix flags
27995: [72594a21edcf]
27996:
27997: 1994-09-20 Todd C. Miller <Todd.Miller@courtesan.com>
27998:
27999: * BUGS:
28000: added one
28001: [9993a349e096]
28002:
28003: * CHANGES:
28004: updated
28005: [297b31ec4cdd]
28006:
28007: * README:
28008: added mailing list info
28009: [10372f94a2b2]
28010:
28011: * parse.yacc:
28012: now use sudolineno instead of yylineno fixed bison warnings
28013: [25a83e62057b]
28014:
28015: * configure.in:
28016: now use -no_library_replacement for osf don't make a static binary
28017: for hpux >= 9.0
28018: [1fa7b892f1a3]
28019:
28020: * tgetpass.c:
28021: added string.h/strings.h inclusion
28022: [71faa98fc0a1]
28023:
28024: * config.h.in:
28025: added ssize_t def
28026: [406284bd1ac0]
28027:
28028: * parse.lex:
28029: added inclusion of string.h/strings.h
28030: [6985b1df5d09]
28031:
28032: * aclocal.m4:
28033: fixed uname | sed (needed to quote the '[')
28034: [4cd2d3415c1a]
28035:
28036: * parse.lex:
28037: replaced yylineno with sudolineno fixed bison syntax errors
28038: [0bd31a5fab26]
28039:
28040: * visudo.c:
28041: changed yylineno to sudolineno since yylineno cannot be counted
28042: upon.
28043: [38c30104d0ae]
28044:
28045: * TODO:
28046: updated
28047: [5d4746f1a752]
28048:
28049: * parse.c:
28050: added code to support command listings
28051: [030172e133fd]
28052:
28053: * sudo.c:
28054: added code for -l flag
28055: [801dbbc82778]
28056:
28057: * sudo.man:
28058: fixed typo added info for -l flag
28059: [8916ca945d65]
28060:
28061: * configure.in:
28062: AC_SSIZE_T -> SUDO_SSIZE_T
28063: [c61f7f47013f]
28064:
28065: * aclocal.m4:
28066: added SUDO_SSIZE_T
28067: [0ccdb77be84d]
28068:
28069: * sudo.h:
28070: added MODE_LIST
28071: [9b2bd844c76c]
28072:
28073: * configure.in:
28074: added AC_SSIZE_T
28075: [35cca208f9b5]
28076:
28077: * find_path.c, sudo_realpath.c:
28078: readlink() is now declared as returning ssize~_t
28079: [0640a08d1407]
28080:
28081: * configure.in:
28082: added -laud for OSF c2
28083: [b7539c905efc]
28084:
28085: 1994-09-02 Todd C. Miller <Todd.Miller@courtesan.com>
28086:
28087: * Makefile.in, visudo.c:
28088: changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu
28089: [067fd9bcb5e1]
28090:
28091: * config.h.in, parse.lex, parse.yacc, pathnames.h.in:
28092: changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu
28093: [fc46e7c7110a]
28094:
28095: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
28096: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
28097: sudo_setenv.c, tgetpass.c, version.h:
28098: changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
28099: [d1d4fbc53a98]
28100:
28101: 1994-09-01 Todd C. Miller <Todd.Miller@courtesan.com>
28102:
28103: * Makefile.in:
28104: ++version
28105: [b7066d97633f]
28106:
28107: * version.h:
28108: ++
28109: [65ec69d88110]
28110:
28111: * logging.c:
28112: added host to alertmail messages
28113: [d973c19ce777]
28114:
28115: * CHANGES, TODO:
28116: udpated
28117: [5a65eb16faeb]
28118:
28119: * logging.c:
28120: fixed logging problem where mail would not say which user it was
28121: [35723edcc5d2]
28122:
28123: * configure.in:
28124: added -laud for gcc if osf & c2
28125: [18f1e0ae5548]
28126:
28127: * check.c:
28128: moved set_auth_parameters to sudo.c
28129: [d23112fe01db]
28130:
28131: * sudo.c:
28132: added set_auth_parameters for osf
28133: [eb70f65214ac]
28134:
28135: * configure.in:
28136: cleaned up -static stuff
28137: [01e9575f0422]
28138:
28139: * Makefile.in:
28140: ++version
28141: [7ac3bff5c770]
28142:
28143: * version.h:
28144: ++
28145: [10a4ff478469]
28146:
28147: * sudo.c:
28148: changed setenv() to sudo_setenv()
28149: [40a78abb9946]
28150:
28151: * check.c:
28152: fixed osf problem
28153: [3d69b118efb8]
28154:
28155: * configure.in:
28156: added OSF C2 stuff
28157: [38cff3ad4093]
28158:
28159: * CHANGES:
28160: updated
28161: [cd341dd0581a]
28162:
28163: * check.c:
28164: added osf auth support & removed some extra spaces
28165: [a448cdd81514]
28166:
28167: * INSTALL, SUPPORTED:
28168: added osf C2 stuff
28169: [f70484796146]
28170:
28171: 1994-08-31 Todd C. Miller <Todd.Miller@courtesan.com>
28172:
28173: * TODO:
28174: added 2 suggestions
28175: [695fbdbd86e6]
28176:
28177: * Makefile.in:
28178: removed README.v1.3.1 and added VERSION stuff
28179: [f69403eb04c6]
28180:
28181: * version.h:
28182: pl1
28183: [21580c0f8cb1]
28184:
28185: 1994-08-30 Todd C. Miller <Todd.Miller@courtesan.com>
28186:
28187: * version.h:
28188: 1.3.1final
28189: [630114970298]
28190:
28191: * Makefile.in:
28192: added HISTORY
28193: [901bff251614]
28194:
28195: * sudo.man:
28196: mention HISTPRY file
28197: [86dbcfd4326e]
28198:
28199: * sudo.c:
28200: use sizeof instead of a constant in 1 place
28201: [d819604c68ca]
28202:
28203: * parse.yacc:
28204: added unistd.h
28205: [6f9500f9fe7e]
28206:
28207: * parse.lex:
28208: added unistd.h
28209: [468b81a276eb]
28210:
28211: * README:
28212: udpated
28213: [7e275618923a]
28214:
28215: * HISTORY:
28216: Initial revision
28217: [5db1b0a3939b]
28218:
28219: 1994-08-17 Todd C. Miller <Todd.Miller@courtesan.com>
28220:
28221: * version.h:
28222: ++
28223: [7dfbb4a810bb] [SUDO_1_3_1]
28224:
28225: * CHANGES:
28226: updated
28227: [7820ee610bf8]
28228:
28229: * sudo_setenv.c:
28230: added unistd.h include
28231: [30cf2b654525]
28232:
28233: 1994-08-16 Todd C. Miller <Todd.Miller@courtesan.com>
28234:
28235: * sudo.c:
28236: added sys/time.h for AIX
28237: [199fc8caf3a3]
28238:
28239: 1994-08-15 Todd C. Miller <Todd.Miller@courtesan.com>
28240:
28241: * configure.in:
28242: added check for -lsocket and sys/sockio.h
28243: [f9abfbb31031]
28244:
28245: * config.h.in:
28246: took out libshadow check and added in sys/sockio.h check
28247: [0c4b0393ac80]
28248:
28249: * sudo.c:
28250: now include sockio.h instead of ioctl.h if it exists "sudo -" now
28251: gets a better error message
28252: [53041bea5483]
28253:
28254: * sample.sudoers:
28255: now has a dir and subnet entry
28256: [56b820f65438]
28257:
28258: 1994-08-13 Todd C. Miller <Todd.Miller@courtesan.com>
28259:
28260: * sudo.c:
28261: removed if_ether.h
28262: [b4f64507493e]
28263:
28264: * TODO:
28265: added an item
28266: [ea2a1bb6922a]
28267:
28268: * sudo.man:
28269: added network and ip addresses to man page
28270: [01c85016511f]
28271:
28272: * sudo.c:
28273: no error if can't get interfaces or netmask since networking may not
28274: be in the kernel.
28275: [50b8890e2134]
28276:
28277: * parse.c:
28278: nwo check for interfaces == NULL
28279: [dc1b3eef0db2]
28280:
28281: * parse.c:
28282: fixed a bug that caused directory specs in a Cmnd_Alias to fail if
28283: the last entry in the spec failed (ie: it was only looking at the
28284: last entry). CLeaned things up by adding the cmndcmp() function--all
28285: neat & tidy
28286: [007e93578e5e]
28287:
28288: * CHANGES:
28289: added one
28290: [40e8a2cef497]
28291:
28292: 1994-08-12 Todd C. Miller <Todd.Miller@courtesan.com>
28293:
28294: * sudo.c:
28295: now do two passes to skip bogus interfaces (lo0, etc)
28296: [465e30aecaf7]
28297:
28298: * parse.lex, parse.yacc, visudo.c:
28299: added include of netinet/in.h
28300: [11e3816ed362]
28301:
28302: * logging.c, sudo_realpath.c, sudo_setenv.c:
28303: added ninclude of netinet/in.h
28304: [daccfa40fe1e]
28305:
28306: * check.c, find_path.c, getcwd.c, getwd.c:
28307: added include of netinet/in.h
28308: [0222f95e06ad]
28309:
28310: * version.h:
28311: ++
28312: [d6b0cfa35a38]
28313:
28314: * sudo.h:
28315: added interfaces global
28316: [ba52fa8ad75e]
28317:
28318: * parse.c:
28319: now uses new interfaces global
28320: [17473ad5ecba]
28321:
28322: * sudo.c:
28323: now ip addresses are gleaned fw/o dns
28324: [8828bb2007e0]
28325:
28326: 1994-08-10 Todd C. Miller <Todd.Miller@courtesan.com>
28327:
28328: * sudo.c:
28329: added load_ip_addrs() to load the ip_addrs global var
28330: [60c825f04238]
28331:
28332: * parse.c:
28333: added hostcmp() to compare hostnames, ip addrs, and network addrs
28334: [ab0e40e37537]
28335:
28336: * sudo.h:
28337: added ip_addrs def added load_ip_addrs prototype
28338: [c41c565d0777]
28339:
28340: 1994-08-08 Todd C. Miller <Todd.Miller@courtesan.com>
28341:
28342: * CHANGES:
28343: updated
28344: [2a128dbe9bcb]
28345:
28346: * Makefile.in:
28347: removed multiple entries in DISTFILES
28348: [2490f4f371e6]
28349:
28350: * visudo.c:
28351: ansified the !STDC_HEADERS decls
28352: [646ba06d17ae]
28353:
28354: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c:
28355: don't do malloc decl if gnuc
28356: [f1bad1925f98]
28357:
28358: * sudo.c:
28359: can't use getopt(3) since it munges args to the command to be run as
28360: root don't do malloc decl if gnuc
28361: [38e78f6da14e]
28362:
28363: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
28364: sudo_realpath.c, sudo_setenv.c:
28365: ansi-fied !STDC_HEADER function prottypes
28366: [51d8cad89976]
28367:
28368: * getcwd.c, getwd.c:
28369: added missing paren
28370: [6a1fae70e27e]
28371:
28372: * Makefile.in:
28373: added putenv.c to DISTFILES
28374: [a5e4523eabbb]
28375:
28376: * sudo_setenv.c:
28377: added params to func decls when STDC_HEADERS is not defined now can
28378: count on putenv() being there
28379: [fd587796189b]
28380:
28381: * sudo_realpath.c:
28382: took out errno decl since sudo.h does it for us fixed up a next cc
28383: warning added params to func decls when STDC_HEADERS is not defined
28384: [70fa5152ace6]
28385:
28386: * sudo.h:
28387: took out environ extern added local declaratio of putenv() if local
28388: version is needed
28389: [a84bae6c020d]
28390:
28391: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c:
28392: added params to func decls when STDC_HEADERS is not defined
28393: [f406f0e47ac0]
28394:
28395: * config.h.in:
28396: added memcpy check check to see that ansi vs bsd macros are ntot
28397: already defiend before defining (ie: avoid redefinition)
28398: [879ae026e19f]
28399:
28400: * configure.in:
28401: removed fluff setenv check plus check w/ replace for putenv if also
28402: no setenv
28403: [e3c03814ad4b]
28404:
28405: * putenv.c:
28406: Initial revision
28407: [3cff63e2dc1b]
28408:
28409: 1994-08-06 Todd C. Miller <Todd.Miller@courtesan.com>
28410:
28411: * sudo_setenv.c:
28412: Initial revision
28413: [4d637631fa6b]
28414:
28415: * sudo.h:
28416: rm'd s realp[ath added sudo_realpath and sudo_setenv
28417: [07ba001ff57e]
28418:
28419: * sudo.c:
28420: now use sudo_setenvc
28421: [fd81e04d5ef0]
28422:
28423: * configure.in:
28424: added puteenv and setenv, removed realpath
28425: [27bfacfb513b]
28426:
28427: * config.h.in:
28428: added putenv & setenv
28429: [515f14eaf6e4]
28430:
28431: * Makefile.in:
28432: added sudo_setenv
28433: [217731a717c5]
28434:
28435: * version.h:
28436: ++
28437: [eadb346d7129]
28438:
28439: 1994-08-05 Todd C. Miller <Todd.Miller@courtesan.com>
28440:
28441: * configure.in:
28442: added MAN_POSTINSTALL and /usr/share/catman for irix
28443: [2a9496c1bdba]
28444:
28445: * Makefile.in:
28446: added MAN_POSTINSTALL
28447: [89b0d4695529]
28448:
28449: * CHANGES:
28450: added
28451: [48c021ba8a70]
28452:
28453: * sudo.man:
28454: added SUDO_* plus new options
28455: [c0759cff5683]
28456:
28457: * CHANGES:
28458: added one
28459: [7d44a3922d56]
28460:
28461: * configure.in:
28462: took out shadow lib
28463: [07cf3de18701]
28464:
28465: * TODO:
28466: adde done
28467: [a27a578e8afe]
28468:
28469: * visudo.c:
28470: now use yyrestart() if flex now reset yylineno to 0
28471: [77d67ce0b677]
28472:
28473: * Makefile.in:
28474: support for installing a cat page instead of a man page if no nroff
28475: [44671c0fc0fa]
28476:
28477: * configure.in:
28478: now defines HAVE_FLEX fixed up man stuff so that it looks for nroff
28479: to determine whether or not to install a cat or man page
28480: [0562d069c135]
28481:
28482: * config.h.in:
28483: added HAVE_FLEX
28484: [c5490bae39d3]
28485:
28486: * sudo.c:
28487: not set ret to MODE_RUN initially
28488: [88b4983c195b]
28489:
28490: * find_path.c:
28491: made command (and therefor cmnd dynamically allocated)
28492: [95b82e32b6de]
28493:
28494: * TODO:
28495: did #8
28496: [fb6f41308cdf]
28497:
28498: * version.h:
28499: ++
28500: [14112ecab5ae]
28501:
28502: * sudo_realpath.c:
28503: changed bufs from MAXPATHLEN to MAXPATHLEN+1
28504: [0ad4f34e55c0]
28505:
28506: * sudo.h:
28507: added MODE_ removed validate_only and added remove_timestamp()
28508: [dd5f99c57728]
28509:
28510: * sudo.c:
28511: usage() now takes an int (exit value) added parse_args() to parse
28512: command line arguments moved call to find_path() from load_globals
28513: to new function load_cmnd() removed validate_only global -- now use
28514: the concept of "modes" added -h and -k options
28515: [c3887090b28a]
28516:
28517: * parse.c:
28518: no longer use global validate_only now checks for command called
28519: "validate" removed check for non-fully qualified commands since that
28520: is done by find_path
28521: [7d56fbd26369]
28522:
28523: * find_path.c:
28524: changed MAXPATHLEN r to MAXPATHLEN+1
28525: [a86e8664d971]
28526:
28527: * find_path.c:
28528: fixed off by one error with MAXPATHLEN and fixed a comment
28529: [58adcef8c981]
28530:
28531: * check.c:
28532: check_timestamp no longer runs reminder(), it is implied in the
28533: return val added remove_timestamp()
28534: [42ab5a77066f]
28535:
28536: * CHANGES:
28537: updated
28538: [8e69b31df024]
28539:
28540: 1994-08-04 Todd C. Miller <Todd.Miller@courtesan.com>
28541:
28542: * BUGS:
28543: fixed on
28544: [bc34f1ac4280]
28545:
28546: * sudo_realpath.c:
28547: took out old_errno
28548: [a168d00a0768]
28549:
28550: * CHANGES:
28551: updated
28552: [04ba80922df7]
28553:
28554: 1994-08-03 Todd C. Miller <Todd.Miller@courtesan.com>
28555:
28556: * logging.c:
28557: moved send_mail to after syslog
28558: [4d4188087834]
28559:
28560: * sudo.c:
28561: now set SUDO_ envariables
28562: [e5963f1bd3bb]
28563:
28564: 1994-08-01 Todd C. Miller <Todd.Miller@courtesan.com>
28565:
28566: * version.h:
28567: ++
28568: [2a4534845d8c]
28569:
28570: * sudo_realpath.c:
28571: now print error if chdir fails
28572: [0d75c8973d49]
28573:
28574: * find_path.c:
28575: removed an XXX
28576: [e2077bcb35aa]
28577:
28578: 1994-07-26 Todd C. Miller <Todd.Miller@courtesan.com>
28579:
28580: * CHANGES:
28581: updated
28582: [e30a2b39b41a]
28583:
28584: * configure.in:
28585: no more static binaries for aix
28586: [77a0beb6bd80]
28587:
28588: 1994-07-25 Todd C. Miller <Todd.Miller@courtesan.com>
28589:
28590: * INSTALL:
28591: fixed typo
28592: [ba5e0d391bc4]
28593:
28594: * sudo_realpath.c:
28595: took out stuff not needed for sudo now does be_root/be_user itself
28596: now uses cwd global
28597: [4f6d4641d793]
28598:
28599: * version.h:
28600: +=2
28601: [97da927b297c]
28602:
28603: * logging.c, sudo.c:
28604: be_root/be_user is now down in sudo_realpath()
28605: [f331662fa50f]
28606:
28607: * logging.c, sudo.h:
28608: now works with 4.2BSD syslog (blech)
28609: [98e39d89dd36]
28610:
28611: * find_path.c:
28612: now use sudo_realpath()
28613: [ab436a8ebd02]
28614:
28615: * config.h.in:
28616: took out realpth() stuff since we now use sudo_realpath()
28617: [8de5ef9f6044]
28618:
28619: * configure.in:
28620: ultrix enhanced sec
28621: [815fb7fffcc0]
28622:
28623: * SUPPORTED:
28624: added ultrix enhanced sec.
28625: [6466766c8062]
28626:
28627: * INSTALL:
28628: updated
28629: [d681a634297a]
28630:
28631: * check.c:
28632: ultrix enhanced security suport
28633: [f10c8decbcc2]
28634:
28635: * Makefile.in:
28636: added sudo_realpath.c
28637: [6b9bcd3be022]
28638:
28639: * CHANGES:
28640: updated
28641: [2fa8084c1b53]
28642:
28643: * tgetpass.c:
28644: increased passwd len to 24 for c2 security
28645: [ec64838be62d]
28646:
28647: * BUGS:
28648: updated BUGS
28649: [ca00d8fec2ce]
28650:
28651: 1994-07-15 Todd C. Miller <Todd.Miller@courtesan.com>
28652:
28653: * check.c:
28654: now use user global var
28655: [568769719013]
28656:
28657: * configure.in:
28658: took out -ls
28659: [490a44180d5f]
28660:
28661: 1994-07-14 Todd C. Miller <Todd.Miller@courtesan.com>
28662:
28663: * configure.in:
28664: added AFS libs
28665: [4fb40c8c01ba]
28666:
28667: * sudo.h:
28668: user is now a char * added epasswd
28669: [27a919fafdfb]
28670:
28671: * sudo.c:
28672: added tzset() to load_globals added epasswd (encrypted password)
28673: global made user dynamically allocated
28674: [b99ef9bdbfce]
28675:
28676: * configure.in:
28677: added tzset test
28678: [27592dd1214b]
28679:
28680: * config.h.in:
28681: added HAVE_TZSET
28682: [b13f4213f3d0]
28683:
28684: * check.c:
28685: cleaned up encrypted passwd grab somewhat
28686: [c8ba9a4db38a]
28687:
28688: * configure.in:
28689: fixed AFS typo
28690: [2bfcbce237b6]
28691:
28692: * INSTALL:
28693: added AFS not
28694: [80c67329393c]
28695:
28696: * CHANGES:
28697: udpated
28698: [2f09ecdd5d31]
28699:
28700: * logging.c:
28701: can now log to both syslog & a file
28702: [4d5c0932bc01]
28703:
28704: * sudo.h:
28705: added BOTH_LOGS
28706: [623c539be824]
28707:
28708: * CHANGES:
28709: updated
28710: [a1c7f5ef3616]
28711:
28712: * configure.in:
28713: --with-AFS
28714: [28718d8f5daf]
28715:
28716: * config.h.in:
28717: added HAVE_AFS
28718: [2e32bb4e63e4]
28719:
28720: * check.c:
28721: added afs changes
28722: [fe4d0ff320a2]
28723:
28724: * sudo.h:
28725: removed AFS stuff :-)
28726: [a40387e6fa27]
28727:
28728: * tgetpass.c:
28729: include sys/select for AIX
28730: [f32c5a8f2c84]
28731:
28732: * sudo.h:
28733: added AFS
28734: [da2ab3dd0348]
28735:
28736: * version.h:
28737: ++
28738: [452d4dfe25af]
28739:
28740: 1994-07-07 Todd C. Miller <Todd.Miller@courtesan.com>
28741:
28742: * CHANGES, SUPPORTED:
28743: updated
28744: [e7dfe6f23a37]
28745:
28746: * logging.c:
28747: can now have MAILER undefined
28748: [1d33b98b35e1]
28749:
28750: * INSTALL:
28751: new sub-note about MAILER
28752: [d35c636a0574]
28753:
28754: * sudo.man:
28755: added blurb about password timeout
28756: [70c2ee50de20]
28757:
28758: * configure.in:
28759: convex c2 changes
28760: [367138a6232e]
28761:
28762: * aclocal.m4:
28763: took out duplicate define of _CONVEX_SOURCE
28764: [647182138450]
28765:
28766: * Makefile.in:
28767: added OSDEFS
28768: [7fdcd50602d1]
28769:
28770: * config.h.in:
28771: added spaces
28772: [f2b8a05e48f3]
28773:
28774: * tgetpass.c:
28775: added a goto if fgets fails
28776: [68a6586d9c45]
28777:
28778: * sudo.h:
28779: use __hpux not hpux convex c2 stuff
28780: [5c377a8d5f34]
28781:
28782: * sudo.c:
28783: use __hpux not hpux
28784: [9363bc0f9f9e]
28785:
28786: * logging.c:
28787: convex c2 stuff
28788: [ea5630975ac4]
28789:
28790: * config.h.in:
28791: define ansi-ish cpp os defines if non-ansi are defined for hpux &
28792: convex
28793: [664f53a5e786]
28794:
28795: * INSTALL:
28796: updated to say we support sonvex C2
28797: [5f2f8b87013e]
28798:
28799: * check.c:
28800: added convex c2 support
28801: [9a665d4918fa]
28802:
28803: 1994-07-01 Todd C. Miller <Todd.Miller@courtesan.com>
28804:
28805: * tgetpass.c:
28806: no more ioctl never returns NULL uses fgets() and select() to
28807: timeout
28808: [b333e6d63e97]
28809:
28810: 1994-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
28811:
28812: * configure.in:
28813: things were testing -n "$GCC" instead of -z "$GCC"
28814: [059a9b15ede2]
28815:
28816: * tgetpass.c:
28817: now works + uses fgets()
28818: [353d7ebcb7bb]
28819:
28820: 1994-06-28 Todd C. Miller <Todd.Miller@courtesan.com>
28821:
28822: * tgetpass.c:
28823: select doesn't seem to recognize a single '\n' as input waiting so
28824: we can;t use it, sigh.
28825: [f76e3218b835]
28826:
28827: 1994-06-26 Todd C. Miller <Todd.Miller@courtesan.com>
28828:
28829: * PORTING:
28830: updated tgetpass() blurb
28831: [95baac736b49]
28832:
28833: * configure.in:
28834: added --with-getpass
28835: [42ac0bdf58ed]
28836:
28837: * Makefile.in:
28838: added tgetpass stuff
28839: [e2b38c635663]
28840:
28841: * tgetpass.c:
28842: now uses stdio
28843: [36af8ff66e35]
28844:
28845: * version.h:
28846: ++
28847: [4e81c9db19bd]
28848:
28849: 1994-06-24 Todd C. Miller <Todd.Miller@courtesan.com>
28850:
28851: * PORTING:
28852: updated ,.
28853: [54f523770a05]
28854:
28855: * config.h.in:
28856: added USE_GETPASS && HAVE_C2_SECURITY
28857: [86b355cb2953]
28858:
28859: * configure.in:
28860: fixed a test aded --with-C2 and --with-tgetpass
28861: [abf6181588ef]
28862:
28863: * check.c:
28864: added hpux C2 shit
28865: [20d4177ffa88]
28866:
28867: * Makefile.in:
28868: took out tgetpass.*
28869: [cc82fd9984b4]
28870:
28871: * INSTALL:
28872: added C2 blurb
28873: [1d2bfc35e4b6]
28874:
28875: 1994-06-13 Todd C. Miller <Todd.Miller@courtesan.com>
28876:
28877: * configure.in:
28878: no termio(s) for ultrix since it is broken
28879: [d3e82e835350]
28880:
28881: * check.c:
28882: added a space (yeah, anal)
28883: [05e4b31ca68c]
28884:
28885: * realpath.c, sudo_realpath.c:
28886: fixed it (duh, rtfm)
28887: [f13097cb8cb6]
28888:
28889: 1994-06-08 Todd C. Miller <Todd.Miller@courtesan.com>
28890:
28891: * config.h.in:
28892: took out bsd signal stuff for irix
28893: [e179cdafc97a]
28894:
28895: * visudo.c:
28896: comments in #endif
28897: [e3a629190f5e]
28898:
28899: * configure.in:
28900: don't define BSD signals for irix
28901: [3ce57bffb7f0]
28902:
28903: * TODO:
28904: did some...
28905: [274241cd0f74]
28906:
28907: * CHANGES:
28908: updated
28909: [8f29fc755faf]
28910:
28911: * realpath.c, sudo_realpath.c:
28912: took out unneeded code by changing where a strings was terminated
28913: [b5564d62d30e]
28914:
28915: 1994-06-07 Todd C. Miller <Todd.Miller@courtesan.com>
28916:
28917: * realpath.c, sudo_realpath.c:
28918: fix bug where /dirname would return NULL
28919: [b85f470daf26]
28920:
28921: * sudo.h:
28922: move __P to config.h
28923: [7763c0ff3f28]
28924:
28925: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c:
28926: added errno definition
28927: [4cc9d2d9782a]
28928:
28929: * config.h.in:
28930: added __P
28931: [ca06f5aa58f3]
28932:
28933: * config.h.in:
28934: added HAVE_FCHDIR
28935: [206d714641e0]
28936:
28937: * strdup.c:
28938: now include stdio
28939: [0d8458da0e1d]
28940:
28941: * realpath.c, sudo_realpath.c:
28942: now works if no fchdir
28943: [e035911b6722]
28944:
28945: * visudo.c:
28946: define SA_RESETHAND to null if not defined
28947: [afec03e84342]
28948:
28949: * configure.in:
28950: added check & replace
28951: [c1a65481441c]
28952:
28953: * configure.in:
28954: took out -static for nextstep -- it doesn't work
28955: [fa1a1a611743]
28956:
28957: 1994-06-06 Todd C. Miller <Todd.Miller@courtesan.com>
28958:
28959: * logging.c:
28960: moved #endif to where it belongs
28961: [07d3a8972097]
28962:
28963: * SUPPORTED:
28964: correction
28965: [0c1ecba3e5a3]
28966:
28967: * configure.in:
28968: now checks for strdup realpath getcwd bzero
28969: [f029a1917515]
28970:
28971: * config.h.in:
28972: emulate bzero
28973: [d792352e44a3]
28974:
28975: * visudo.c:
28976: added posic signals
28977: [2ed0005f90fc]
28978:
28979: * tgetpass.c:
28980: bzero cast
28981: [6d91b1a1526f]
28982:
28983: * logging.c:
28984: added posix signals
28985: [67ede9c22a05]
28986:
28987: * configure.in:
28988: removed BROKEN_GETPASS added new srcs toreplace missing functions
28989: [cf44274bb1c8]
28990:
28991: * config.h.in:
28992: added posix signal stuff
28993: [a3c1c98fe8ef]
28994:
28995: * Makefile.in:
28996: added new srcs
28997: [b6a079afee47]
28998:
28999: * visudo.c:
29000: updated useag
29001: [589ed091c44f]
29002:
29003: * tgetpass.c:
29004: now uses posix signals
29005: [30f74964074f]
29006:
29007: * PORTING:
29008: updated sto reflect major changes
29009: [bcfc309e017b]
29010:
29011: * CHANGES, TODO:
29012: updated
29013: [23aacbd54278]
29014:
29015: * tgetpass.c:
29016: uses sysconf() if available
29017: [a27431c90bab]
29018:
29019: * sudo.h:
29020: added PASSWORD_TIMEOUT + prototypes for new functions
29021: [d7473c2f77c4]
29022:
29023: * realpath.c, sudo_realpath.c:
29024: for those w/o this in libc
29025: [1e47aa7a9d46]
29026:
29027: * getcwd.c, getwd.c:
29028: Initial revision
29029: [c90dea57a84f]
29030:
29031: * find_path.c:
29032: rewrote to use realpath(3) - nis now all my code
29033: [d2c3bb8fb37d]
29034:
29035: * config.h.in:
29036: added HAVE_REALPATH
29037: [02c10352a8c7]
29038:
29039: * check.c:
29040: now use tgetpass
29041: [b5c021fc179f]
29042:
29043: * Makefile.in:
29044: added LIBOBJS use tgetpass.c
29045: [230a7b3eeaa3]
29046:
29047: 1994-06-05 Todd C. Miller <Todd.Miller@courtesan.com>
29048:
29049: * tgetpass.c:
29050: works now :-)
29051: [025e7a3875ba]
29052:
29053: * tgetpass.c:
29054: Initial revision
29055: [3316ab33b230]
29056:
29057: * pathnames.h.in:
29058: added /dev/tty
29059: [29242585e53f]
29060:
29061: 1994-06-04 Todd C. Miller <Todd.Miller@courtesan.com>
29062:
29063: * version.h:
29064: incremented
29065: [f2e54b48280f]
29066:
29067: * sudo.c:
29068: always use getcwd
29069: [c6068e8a4029]
29070:
29071: * config.h.in:
29072: added check for getwd
29073: [ab1e102ad673]
29074:
29075: * configure.in:
29076: replace strdup & realpath & getcwd if missing
29077: [b0eb14f2a1c3]
29078:
29079: * pathnames.h.in:
29080: added _PATH_PWD
29081: [309d2388f69a]
29082:
29083: * aclocal.m4:
29084: added SUDO_PROG_PWD
29085: [e16e85deb96c]
29086:
29087: * strdup.c:
29088: Initial revision
29089: [810efdc15007]
29090:
29091: * realpath.c, sudo_realpath.c:
29092: Initial revision
29093: [d85eee438e09]
29094:
29095: 1994-06-03 Todd C. Miller <Todd.Miller@courtesan.com>
29096:
29097: * configure.in:
29098: quoted quare brackets
29099: [d0e7ca111d98]
29100:
29101: 1994-06-02 Todd C. Miller <Todd.Miller@courtesan.com>
29102:
29103: * sudo.c:
29104: no need to strdup() a constant
29105: [a8c44712df9a]
29106:
29107: * CHANGES:
29108: updated
29109: [71364129cca0]
29110:
29111: * sudo.man:
29112: added validate
29113: [0bb198095a26]
29114:
29115: * sudo.c:
29116: added -v to usage
29117: [31ea71f11dbb]
29118:
29119: * parse.c, sudo.c, sudo.h:
29120: added validate_only stuff
29121: [9bcd853d3c90]
29122:
29123: 1994-05-30 Todd C. Miller <Todd.Miller@courtesan.com>
29124:
29125: * configure.in:
29126: now finds sed
29127: [6374bb0d3f28]
29128:
29129: * aclocal.m4:
29130: $OSREV is now an int
29131: [ace0666d66cf]
29132:
29133: 1994-05-29 Todd C. Miller <Todd.Miller@courtesan.com>
29134:
29135: * configure.in:
29136: added mtxinu to caser
29137: [73a776887b16]
29138:
29139: * sudo.h:
29140: added EXEC macro
29141: [2e8eb28b710a]
29142:
29143: * sudo.c:
29144: now use the EXEC nmacro now only do a gethostbyname() if FQDN is set
29145: [56afb4f658d5]
29146:
29147: * logging.c:
29148: changed mail_argv[] def now use EXEC() macro
29149: [ddcabd28edb1]
29150:
29151: * check.c:
29152: took out crypt() definition
29153: [0e657724cf5f]
29154:
29155: * version.h:
29156: upped the version
29157: [62c5d66119fc]
29158:
29159: * configure.in:
29160: always look for -lnsl
29161: [d7b594f0313b]
29162:
29163: * aclocal.m4:
29164: added an echo
29165: [1caae3491dc5]
29166:
29167: * sudo.h:
29168: SHORT_MESSAGE is now the default
29169: [cfce35c3119a]
29170:
29171: * config.h.in:
29172: fixed typo
29173: [6499a564bf75]
29174:
29175: * configure.in:
29176: added missing AC_DEFINE(SVR4) for solaris
29177: [feef0b17b94f]
29178:
29179: * sudo.man:
29180: documented the -v flag
29181: [a6429f2bc2cf]
29182:
29183: * SUPPORTED:
29184: updated
29185: [088886e79540]
29186:
29187: * check.c:
29188: proto-ized crypt()
29189: [801e4ff5b121]
29190:
29191: * config.h.in:
29192: added LIBSHADOW undef
29193: [8df588e9ee2b]
29194:
29195: * configure.in:
29196: nwo set OS to be lowercase
29197: [561ebed833e4]
29198:
29199: 1994-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
29200:
29201: * configure.in:
29202: now use SUDO_OSTYPE to set $OS
29203: [0e60aee23098]
29204:
29205: * aclocal.m4:
29206: now use uname to determine os
29207: [99705e58d400]
29208:
29209: * visudo.c:
29210: added prototypes & moved sig handler around
29211: [1f0bc8d23b51]
29212:
29213: * sudo.h:
29214: added prototyppes
29215: [be3935a2b163]
29216:
29217: * check.c, logging.c, sudo.c:
29218: added prototypes
29219: [2079b4605ab8]
29220:
29221: * parse.c:
29222: added comment
29223: [a34d147d8399]
29224:
29225: * config.h.in:
29226: nwo use _BSD_SIGNALS not _BSD_COMPAT
29227: [63663195f047]
29228:
29229: * aixcrypt.exp:
29230: Initial revision
29231: [890aed08357e]
29232:
29233: * Makefile.in:
29234: added aixcrypt.exp
29235: [1005a183105f]
29236:
29237: * parse.lex, parse.yacc:
29238: moved config.h to top of includes
29239: [9569c49aa5f3]
29240:
29241: 1994-05-25 Todd C. Miller <Todd.Miller@courtesan.com>
29242:
29243: * find_path.c:
29244: now don't bitch if get EACCESS (treat like EPERM)
29245: [dbeffb638de4]
29246:
29247: * visudo.c:
29248: added -v flag and usage()
29249: [4d44ed60ed75]
29250:
29251: * version.h:
29252: fixed a typo
29253: [cf3f9347ae41]
29254:
29255: * sudo.c:
29256: cast Argv to a const for exec added -v flag
29257: [d11b6efc0e45]
29258:
29259: * logging.c:
29260: mail_argv is now a const
29261: [93bb5d90bb6f]
29262:
29263: * configure.in:
29264: only set RETSIGTYPE if it is not set already
29265: [c97aac260b77]
29266:
29267: * aclocal.m4:
29268: now defines & STDC_HEADERS for Irix
29269: [9c2b24ad1fc5]
29270:
29271: * Makefile.in:
29272: added version.h
29273: [9f79e880229a]
29274:
29275: * insults.h, sudo.h:
29276: prevent multiple inclusion
29277: [d68c8a9243ce]
29278:
29279: * version.h:
29280: Initial revision
29281: [dbb39c5ef8d9]
29282:
29283: * parse.lex, parse.yacc:
29284: now includes config.h
29285: [f117e036a56b]
29286:
29287: * aclocal.m4:
29288: now talks about sunos 4.x
29289: [c9054aa92d4e]
29290:
29291: * visudo.c:
29292: calls to Exit now pass an arg
29293: [a92104670551]
29294:
29295: 1994-05-24 Todd C. Miller <Todd.Miller@courtesan.com>
29296:
29297: * visudo.c:
29298: signal handler now takes an int argument
29299: [26f480c41523]
29300:
29301: * CHANGES:
29302: updated
29303: [8c166a9d796b]
29304:
29305: * sudo.c:
29306: ok, the getcwd() is now *really* done as the user
29307: [ab86cf85134a]
29308:
29309: * configure.in:
29310: changed AIX STATIC_FLAGS
29311: [b9c0a3ba5663]
29312:
29313: * aclocal.m4:
29314: solaris now defines SVR4
29315: [c3e20cac96f5]
29316:
29317: * sudo.h:
29318: added cwd and fixed stupid core dump that makes no sense. sigh.
29319: [7a9755436dbb]
29320:
29321: * sudo.c:
29322: moved getcwd stuff into load_globals
29323: [ec2bc90df1f3]
29324:
29325: * parse.c:
29326: took out externs that are in suod.h
29327: [93c4b3f856d7]
29328:
29329: * logging.c:
29330: moved cwd into load_globals
29331: [050de754d228]
29332:
29333: * find_path.c:
29334: moved cwd stuff
29335: [22f3f3b4c34d]
29336:
29337: * Makefile.in:
29338: fixed make distclean & realclean
29339: [c9964d89bcef]
29340:
29341: * TODO:
29342: updated .,
29343: [e513581ef0e3]
29344:
29345: * CHANGES:
29346: added solaris changes
29347: [505d930daf27]
29348:
29349: * aclocal.m4:
29350: added solaris changes, need to rework
29351: [33f20fb16c49]
29352:
29353: * configure.in:
29354: cleaned up for solaris
29355: [2fb8cfa05d0f]
29356:
29357: * logging.c:
29358: reinstall reapchild signal handler for non-bsd signals
29359: [3d1dc545113d]
29360:
29361: * sudo.h:
29362: took out getdtablesize() emulation for HP-UX (no longer needed)
29363: [1fc83d170f34]
29364:
29365: * sudo.c:
29366: support for HAVE_SYSCONF
29367: [50ca2a7a224a]
29368:
29369: * visudo.c:
29370: added <fcntl.h> for solaris & reorg'd the includes + minor prettying
29371: up /
29372: [0a570e826dd4]
29373:
29374: * config.h.in:
29375: added HAVE_SYSCONF
29376: [2b9a9f3a4e94]
29377:
29378: 1994-05-16 Todd C. Miller <Todd.Miller@courtesan.com>
29379:
29380: * configure.in:
29381: now tells you what os you are running /.
29382: [06c6332a895b]
29383:
29384: * aclocal.m4:
29385: took out extra ','
29386: [e8c75ce59f4a]
29387:
29388: 1994-05-14 Todd C. Miller <Todd.Miller@courtesan.com>
29389:
29390: * config.h.in:
29391: added _BSD_COMPAT
29392: [73c5099806c2]
29393:
29394: * aclocal.m4:
29395: fixed for irix5
29396: [1047d1f6c0eb]
29397:
29398: * CHANGES:
29399: updated
29400: [1bc4969fee96]
29401:
29402: * sudo.c:
29403: uid seinitialized to -2
29404: [8d7812b1878b]
29405:
29406: 1994-04-28 Todd C. Miller <Todd.Miller@courtesan.com>
29407:
29408: * sudo.c:
29409: now removes LIBPATH for AIX
29410: [075392eb1dd9]
29411:
29412: 1994-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
29413:
29414: * configure.in:
29415: now uses ufc if it finds it
29416: [ab6ce30a5958]
29417:
29418: 1994-03-12 Todd C. Miller <Todd.Miller@courtesan.com>
29419:
29420: * sudo.h:
29421: no longer define yyval & yylval since yacc does it
29422: [09d250aea50a]
29423:
29424: * parse.lex:
29425: now defines yylval as extenr
29426: [8ec2b88952bc]
29427:
29428: * configure.in:
29429: BROKEN_GETPASS is now an OPTION
29430: [3714f4bb8312]
29431:
29432: * config.h.in:
29433: took out BROKEN_GETPASS
29434: [9c4f6aa50137]
29435:
29436: * Makefile.in:
29437: took out big comment
29438: [4c13cff0e556]
29439:
29440: * README:
29441: updated
29442: [b8b9902b620d]
29443:
29444: * Makefile.in:
29445: took out README.beta
29446: [ed2cd861e82b]
29447:
29448: * SUPPORTED:
29449: Initial revision
29450: [2fffc51e6606]
29451:
29452: * INSTALL:
29453: now reference SUPPORTED .,
29454: [d112c30be1f2]
29455:
29456: * config.h.in:
29457: now check for convex OR __convex__
29458: [a0e5701a3069]
29459:
29460: * aclocal.m4:
29461: now check for convex or __convex__
29462: [5dae2bfbe3bc]
29463:
29464: * Makefile.in:
29465: added dist target
29466: [400a54de57db]
29467:
29468: * aclocal.m4:
29469: use __convex__
29470: [58a19470ed0b]
29471:
29472: * find_path.c:
29473: now use _S_* stat stuff to be ansi-like
29474: [28cce560e048]
29475:
29476: * INSTALL:
29477: updated for configure directions
29478: [a034ccc7c30a]
29479:
29480: * Makefile.in:
29481: distclean now removes config.h and pathnames.h
29482: [300f2349b4ab]
29483:
29484: * CHANGES:
29485: updated
29486: [646f7e9430c1]
29487:
29488: * TODO:
29489: fixed typoe
29490: [70fd6361b2bc]
29491:
29492: * visudo.c:
29493: updated version
29494: [cf13d87d789f]
29495:
29496: * Makefile.in:
29497: updated version
29498: [8c5dacc27a7a]
29499:
29500: * config.h.in, pathnames.h.in:
29501: added copyright header
29502: [747ce3d3d6b7]
29503:
29504: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
29505: parse.yacc, sudo.c, sudo.h:
29506: udpated version
29507: [4751c39bad18]
29508:
29509: * visudo.c:
29510: udpated to use configure + pathnames.h
29511: [d45dff76a1cd]
29512:
29513: * aclocal.m4:
29514: updated
29515: [f05a367a55be]
29516:
29517: * Makefile.in, config.h.in, configure.in:
29518: updated
29519: [524778598879]
29520:
29521: * sudo.h:
29522: now works with configure
29523: [83fc40e533f4]
29524:
29525: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
29526: updated to work with configure + pathnames.h
29527: [cb67fa6ab52d]
29528:
29529: * Makefile.in:
29530: added LEXLIB
29531: [f43cad4ab0a2]
29532:
29533: 1994-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
29534:
29535: * COPYING:
29536: updated gnu general licence to versio 2
29537: [2b0b56112ddc]
29538:
29539: * config.h.in, pathnames.h.in:
29540: Initial revision
29541: [4b586f39ec2d]
29542:
29543: * sudo.h:
29544: changed to work with configure
29545: [13f3506ddf16]
29546:
29547: 1994-03-09 Todd C. Miller <Todd.Miller@courtesan.com>
29548:
29549: * Makefile.in, aclocal.m4, configure.in:
29550: Initial revision
29551: [a8636ae77371]
29552:
29553: * visudo.c:
29554: now uses defines used by configure
29555: [de438d118993]
29556:
29557: 1994-03-01 Todd C. Miller <Todd.Miller@courtesan.com>
29558:
29559: * find_path.c:
29560: sudo won't bitch about EPERM now, for real
29561: [ce26d9ef7e3f]
29562:
29563: 1994-02-28 Todd C. Miller <Todd.Miller@courtesan.com>
29564:
29565: * logging.c:
29566: renamed exec_argv to eliminate a libc name clash with ksros
29567: [bcb4350d8411]
29568:
29569: * CHANGES:
29570: corrected
29571: [dae68d422efd]
29572:
29573: * logging.c, sudo.c, sudo.h:
29574: execve -> execv
29575: [40cc2c4bdb15]
29576:
29577: * TODO:
29578: upated
29579: [9275a8b8fc45]
29580:
29581: * PORTING:
29582: added 2 mroe items
29583: [6cbb5c56993c]
29584:
29585: * CHANGES:
29586: updated
29587: [73f34f8e571a]
29588:
29589: * sudo.h:
29590: added UMASK and mode_t declaration
29591: [7c2015e1d171]
29592:
29593: * sudo.c:
29594: added UMASK
29595: [d37be7523680]
29596:
29597: * logging.c:
29598: now opens log file with mode 077
29599: [0825cc3ee841]
29600:
29601: * check.c:
29602: saved current umask ans restores it
29603: [659c1aaae8e8]
29604:
29605: * sudo.h:
29606: added MAXLOGFILELEN
29607: [34331c7dee90]
29608:
29609: * logging.c:
29610: split long log lines. FOr syslog, split into multiple entries, for
29611: a log file, indent the extra for readability
29612: [72c9e4cdba6e]
29613:
29614: 1994-02-27 Todd C. Miller <Todd.Miller@courtesan.com>
29615:
29616: * CHANGES:
29617: added changes
29618: [81196833673d]
29619:
29620: * sudo.h:
29621: MAXLOGLEN & MAXSYSLOGLEN are now different (as they should be)
29622: [1aa69e903840]
29623:
29624: 1994-02-25 Todd C. Miller <Todd.Miller@courtesan.com>
29625:
29626: * TODO:
29627: added input from Brett M Hogden <hogden@rge.com>
29628: [80f01fc88ce9]
29629:
29630: 1994-02-16 Todd C. Miller <Todd.Miller@courtesan.com>
29631:
29632: * sudo.c:
29633: added rmenv() to remove stuff from environ. can now uses execvp()
29634: OR execve() becuase of this.
29635: [e7fc2535bd67]
29636:
29637: * logging.c:
29638: now uses execvp() OR execve()
29639: [56391aa1f99d]
29640:
29641: * sudo.h:
29642: added USE_EXECVE
29643: [f21f38050b95]
29644:
29645: * sudo.h:
29646: added environ
29647: [6b805e23c6f6]
29648:
29649: * find_path.c:
29650: now ignore EPERM
29651: [c8fd7117a1d7]
29652:
29653: * sudo.h:
29654: moved some func decls out of sudo.h and into sudo.c as statics /.
29655: [5f555c267d27]
29656:
29657: * CHANGES:
29658: updated
29659: [431f478af320]
29660:
29661: * sudo.h:
29662: took out Envp
29663: [6f722be7793d]
29664:
29665: 1994-02-14 Todd C. Miller <Todd.Miller@courtesan.com>
29666:
29667: * BUGS:
29668: Initial revision
29669: [4a8ecf0da95c]
29670:
29671: 1994-02-10 Todd C. Miller <Todd.Miller@courtesan.com>
29672:
29673: * CHANGES:
29674: added SECURE_PATH
29675: [1c72cb222609]
29676:
29677: * sudo.c, sudo.h:
29678: added SECURE_PATH
29679: [5bf5357a63c5]
29680:
29681: * sudo.h:
29682: added SECURE_PATH
29683: [3976a74405ac]
29684:
29685: * INSTALL:
29686: added sample.sudoers note
29687: [1b395d29aaeb]
29688:
29689: * sudoers:
29690: Initial revision
29691: [485888d07477]
29692:
29693: 1994-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
29694:
29695: * find_path.c:
29696: fixed typo
29697: [bfc3cc4d41ca]
29698:
29699: * PORTING:
29700: took out SAVED_UID garbage
29701: [b7c2d3469661] [SUDO_1_3_0]
29702:
29703: * INSTALL:
29704: mentioned HAL
29705: [253d6695df90]
29706:
29707: * sudo.h:
29708: added HAL line
29709: [29ec1a4ac6de]
29710:
29711: * insults.h:
29712: added HAL insults
29713: [7d7c96d77c74]
29714:
29715: * TODO:
29716: updated
29717: [aa2ed9790586]
29718:
29719: * logging.c:
29720: more verbose error if mailer not found
29721: [fca47fd00cb6]
29722:
29723: * check.c:
29724: now do getpwent as root for soem shadow password systems (bsdi)
29725: [e0339e110d46]
29726:
29727: 1994-02-08 Todd C. Miller <Todd.Miller@courtesan.com>
29728:
29729: * sudo.h:
29730: took out SAVED_UID garbade
29731: [fcb0e81dcdb5]
29732:
29733: * sudo.c:
29734: took out SAVED_UID garbage since it don't work
29735: [507e9513e9c2]
29736:
29737: 1994-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
29738:
29739: * README:
29740: updated
29741: [d2b6b253dae5]
29742:
29743: * insults.h:
29744: added a missing space :-)
29745: [8940ea991f87]
29746:
29747: * sudo.c, sudo.h:
29748: took out multimax cruft
29749: [c2606b365181]
29750:
29751: * INSTALL:
29752: minor update
29753: [05fb6ee73131]
29754:
29755: * PORTING:
29756: finished
29757: [c4ac47c84dc5]
29758:
29759: * sudo.c:
29760: fixed a typo + indentation
29761: [7eab40aae8fa]
29762:
29763: 1994-02-05 Todd C. Miller <Todd.Miller@courtesan.com>
29764:
29765: * sudo.h:
29766: took outumoved some defines to the config file ,. ,.
29767: [defff05beb52]
29768:
29769: * PORTING:
29770: Initial revision
29771: [c803e9127959]
29772:
29773: * TODO:
29774: did #6
29775: [c6fa1c946c31]
29776:
29777: * sudo.h:
29778: added HAS_SAVED_UID
29779: [6a88a39c0a07]
29780:
29781: * sudo.c:
29782: put back AIX cruft
29783: [a24d2507ddd4]
29784:
29785: 1994-02-03 Todd C. Miller <Todd.Miller@courtesan.com>
29786:
29787: * sudo.c:
29788: aix changes
29789: [1663915f754a]
29790:
29791: 1994-02-02 Todd C. Miller <Todd.Miller@courtesan.com>
29792:
29793: * CHANGES:
29794: updated
29795: [a8cc73747cae]
29796:
29797: * check.c, logging.c, parse.c, sudo.c, sudo.h:
29798: now is only root when abs necesary
29799: [3c9d12c5cdfe]
29800:
29801: * check.c:
29802: added missing %s\n
29803: [609320b72d89]
29804:
29805: 1994-01-31 Todd C. Miller <Todd.Miller@courtesan.com>
29806:
29807: * install-sh:
29808: Initial revision
29809: [b5bba140a175]
29810:
29811: * TODO:
29812: updated
29813: [c9d2eba602af]
29814:
29815: * CHANGES:
29816: updated
29817: [932f1fc3bb14]
29818:
29819: * sudo.c:
29820: now removed _RLD_* for alphas
29821: [54a36e648158]
29822:
29823: * INSTALL:
29824: updated for new config scheme
29825: [61c8ae800444]
29826:
29827: * find_path.c:
29828: more verbose eror messages
29829: [b4fd123db42d]
29830:
29831: 1994-01-27 Todd C. Miller <Todd.Miller@courtesan.com>
29832:
29833: * TODO:
29834: now have solaris
29835: [371002fbf266]
29836:
29837: * sudo.h:
29838: define __svr4__ for SOLARIS
29839: [0b5cf5ed936d]
29840:
29841: * check.c:
29842: added svr4 junk for shadow pws for solaris 2.x
29843: [91ed58f21618]
29844:
29845: * check.c, sudo.c:
29846: took out setuid(0) and setreuid(udi) garbage. Its not needed since
29847: we start out setuid with the correct perms.
29848: [07689e782b0b]
29849:
29850: * check.c, sudo.c, sudo.h:
29851: now use setreuid()
29852: [7d64d685d78e]
29853:
29854: 1994-01-26 Todd C. Miller <Todd.Miller@courtesan.com>
29855:
29856: * sudo.man:
29857: revised AUTHORS secrtion & added ENV_EDITOR stuff to VARIABLES
29858: sectoin
29859: [b26967b1e19b]
29860:
29861: * visudo.c:
29862: now uses ENV_EDITOR if you want to use the EDITOR envar
29863: [a4f8fcb9bd1d]
29864:
29865: * sudo.h:
29866: now uses ENV_EDITOR if you want to use the EDITOR envar >> .
29867: [028cc55c4328]
29868:
29869: 1993-12-07 Todd C. Miller <Todd.Miller@courtesan.com>
29870:
29871: * INSTALL:
29872: rewrote most of this
29873: [a6750923f9c9]
29874:
29875: * README:
29876: minor update + spell fix
29877: [a411717a7249]
29878:
29879: * sudo.h:
29880: added all options that are in the Makefile
29881: [6db3b3b841b3]
29882:
29883: * getpass.c:
29884: now use USE_TERMIO #define for sgi & hpux
29885: [b91f89ae6be1]
29886:
29887: * TODO:
29888: todo: posix sigs
29889: [4548a56eb2ef]
29890:
29891: 1993-12-06 Todd C. Miller <Todd.Miller@courtesan.com>
29892:
29893: * check.c, find_path.c:
29894: always include strings.h
29895: [1fc20bda92c0]
29896:
29897: * visudo.c:
29898: added STATICEDITOR
29899: [0596f820716e]
29900:
29901: * sudo.h:
29902: sgi has vi in /usr/bin too
29903: [94203b62bfd9]
29904:
29905: * sudo.man:
29906: added VISUAL
29907: [87c2844c4cac]
29908:
29909: 1993-12-03 Todd C. Miller <Todd.Miller@courtesan.com>
29910:
29911: * sudo.h:
29912: sue /usr/bin/vi on some systems
29913: [e3ad9190f35e]
29914:
29915: * sudo.c:
29916: fixed warning (include strings.h)
29917: [0b896de4d8a0]
29918:
29919: * sudo.man:
29920: added John_Rouillard@dl5000.bc.edu's changes (new features)
29921: [f41b4205a8cf]
29922:
29923: * CHANGES:
29924: changes from John_Rouillard@dl5000.bc.edu
29925: [6bdef8e948d5]
29926:
29927: * visudo.c:
29928: added EDITOR envar
29929: [5c4bf716de21]
29930:
29931: * check.c, find_path.c, parse.c, sudo.c:
29932: added patches from John_Rouillard directory spec
29933: uses EDITOR
29934: [f62a435f8c41]
29935:
29936: 1993-12-02 Todd C. Miller <Todd.Miller@courtesan.com>
29937:
29938: * getpass.c:
29939: added flush for hpux
29940: [07cfdd6a7b55]
29941:
29942: 1993-11-30 Todd C. Miller <Todd.Miller@courtesan.com>
29943:
29944: * sudo.c:
29945: no longer assume malloc returns a char *
29946: [7480bd2756f3]
29947:
29948: * sudo.c:
29949: alpha change to remove LD_-like thing fixed SHLIB_PATH stuff -- now
29950: gets removed correctly
29951: [8587166c6ac8]
29952:
29953: * sudo.h:
29954: added STD_HEADERS macro
29955: [480f5a9a516c]
29956:
29957: * sudo.c:
29958: now uses STD_HEADERS macor for ansi
29959: [c5018806fd59]
29960:
29961: * find_path.c:
29962: now uses STD_HEADERS macro
29963: [ad821e0788ea]
29964:
29965: * check.c:
29966: niceties for C compiler bitches -- no real change
29967: [0fc0b1a5fb64]
29968:
29969: 1993-11-29 Todd C. Miller <Todd.Miller@courtesan.com>
29970:
29971: * visudo.c:
29972: now doesn't fclose a file never opened.
29973: [ee888ec9427d]
29974:
29975: 1993-11-28 Todd C. Miller <Todd.Miller@courtesan.com>
29976:
29977: * sudo.man:
29978: added visudo line
29979: [698d51c66407]
29980:
29981: * sudo.man:
29982: added error stuff added me in there...
29983: [d202fd34b906]
29984:
29985: * CHANGES:
29986: noted insults
29987: [998a22c2230c]
29988:
29989: * INSTALL:
29990: added blurb about reading stuff
29991: [e71db100798f]
29992:
29993: * sudo.h:
29994: added insults
29995: [c110431cec56]
29996:
29997: * insults.h:
29998: corrected somments and removed newlines
29999: [493706fd488c]
30000:
30001: * check.c:
30002: now uses insults
30003: [6d23cf06a0ef]
30004:
30005: * insults.h:
30006: Initial revision
30007: [83153c26b4a3]
30008:
30009: * INSTALL:
30010: added dec syslog note
30011: [555437273237]
30012:
30013: * sample.sudoers:
30014: added real stuff in there
30015: [53442a7fba78]
30016:
30017: * TODO:
30018: added a todo
30019: [c630472bd4dc]
30020:
30021: * TODO:
30022: added one
30023: [806464453284]
30024:
30025: 1993-11-27 Todd C. Miller <Todd.Miller@courtesan.com>
30026:
30027: * sample.sudoers:
30028: Initial revision
30029: [7db0a9f1ca8f]
30030:
30031: * sudo.man:
30032: updated with changes
30033: [d9bf254c6c08]
30034:
30035: * sudo.man:
30036: Initial revision
30037: [dd6f11174ac6]
30038:
30039: * indent.pro:
30040: Initial revision
30041: [dbfbb494fad9]
30042:
30043: * CHANGES, COPYING, INSTALL, README, TODO:
30044: Initial revision
30045: [6d98f489a079]
30046:
30047: * visudo.c:
30048: updated version number and took out jeff's old addr since it is no
30049: good
30050: [ee47c24818cb]
30051:
30052: * check.c, find_path.c, logging.c, parse.c, parse.lex, parse.yacc,
30053: sudo.c, sudo.h:
30054: updated version number and took out jeff's email (since it is
30055: invalid)
30056: [54616458a52e]
30057:
30058: 1993-10-28 Todd C. Miller <Todd.Miller@courtesan.com>
30059:
30060: * check.c:
30061: added fflush()
30062: [145c881f4fb4]
30063:
30064: 1993-10-23 Todd C. Miller <Todd.Miller@courtesan.com>
30065:
30066: * find_path.c:
30067: now return NULL instead pfof exiting for nopnn-fatal errors
30068: [8bc74f8cb1ae]
30069:
30070: 1993-10-21 Todd C. Miller <Todd.Miller@courtesan.com>
30071:
30072: * check.c:
30073: new banner
30074: [5387ab2af516]
30075:
30076: * parse.lex:
30077: now sudo.h gets included first
30078: [2acb01c18e18]
30079:
30080: 1993-10-18 Todd C. Miller <Todd.Miller@courtesan.com>
30081:
30082: * parse.lex:
30083: now can use flex
30084: [164d3839adf0]
30085:
30086: * sudo.h:
30087: linux patch
30088: [f1b6b1b1a2ca]
30089:
30090: * sudo.c:
30091: hpux 9 fix, removes SHLIB_PATH linux patch
30092: [67611dc1737f]
30093:
30094: * check.c:
30095: linux diff
30096: [c24536682397]
30097:
30098: 1993-10-15 Todd C. Miller <Todd.Miller@courtesan.com>
30099:
30100: * find_path.c:
30101: stat now ignores EINVAL
30102: [c7761a5dc642]
30103:
30104: 1993-10-06 Todd C. Miller <Todd.Miller@courtesan.com>
30105:
30106: * find_path.c, sudo.c:
30107: now declare strdup as extern
30108: [6b7d6f8784b5]
30109:
30110: 1993-10-04 Todd C. Miller <Todd.Miller@courtesan.com>
30111:
30112: * visudo.c:
30113: reformatted with indent + by hand
30114: [9d43084e4990]
30115:
30116: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c, sudo.h:
30117: used indent to "fix" coding style
30118: [489ffacbdc70]
30119:
30120: * find_path.c:
30121: now checks '.' or '.' or '' in PATH -- but does it LAST should maybe
30122: move the code that does this into the loop body. makes it messier
30123: tho. hmmm.
30124: [c4d22b48da9a]
30125:
30126: 1993-09-08 Todd C. Miller <Todd.Miller@courtesan.com>
30127:
30128: * find_path.c:
30129: redid the fix for non-executable files in an easier to read way plus
30130: some minor aethetic changes
30131: [84fe337f1426]
30132:
30133: * find_path.c:
30134: fixed bug with non-executable tings of same name in path introduced
30135: by checkig errno after stat(2).
30136: [c2a812cfcbc1]
30137:
30138: 1993-09-05 Todd C. Miller <Todd.Miller@courtesan.com>
30139:
30140: * sudo.c:
30141: fixed off by one error
30142: [fabb7cee0041]
30143:
30144: * find_path.c:
30145: now handles decending below '/' correctly
30146: [5d2ddfc0b220]
30147:
30148: * sudo.c:
30149: now actually builds Envp instead of munging envp
30150: [bdc4b08f6898]
30151:
30152: 1993-09-04 Todd C. Miller <Todd.Miller@courtesan.com>
30153:
30154: * parse.yacc:
30155: now includes sys/param.h
30156: [efbb494ab4de]
30157:
30158: * visudo.c:
30159: now includes sys/param.h
30160: [ad6c91d59958]
30161:
30162: * sudo.h:
30163: fixed ifndef -> ifdef
30164: [7aebe822d863]
30165:
30166: * qualify.c:
30167: make more like find_path.c
30168: [853b2dab2e03]
30169:
30170: * find_path.c:
30171: rewritten by millert
30172: [c6a043cc11b3]
30173:
30174: * sudo.h:
30175: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP added info
30176: about new defines in the comment
30177: [39ffefce3aec]
30178:
30179: * logging.c:
30180: now uses USE_CWD
30181: [fa0f3b118bb3]
30182:
30183: * sudo.h:
30184: added delc for clean_envp() and Envp
30185: [a12034e300c2]
30186:
30187: * sudo.c:
30188: now rips LD_* env vars out of envp and passed sanitized Envp to exec
30189: [d201a218e056]
30190:
30191: * logging.c:
30192: now uses execve()
30193: [f3e01032cd33]
30194:
30195: * find_path.c:
30196: ENOTDIR is ok now too (in case part of the path is bogus)
30197: [b5cbbb201bb5]
30198:
30199: * qualify.c:
30200: now works correctly (ttaltotal rewrite)
30201: [0c25d64a5c68]
30202:
30203: * parse.lex:
30204: now includes sys/param.h didn't match trailing / -- fix from
30205: rouilj@cs.umb.edu
30206: [b6363ba110af]
30207:
30208: 1993-06-11 Todd C. Miller <Todd.Miller@courtesan.com>
30209:
30210: * sudo.c:
30211: moved around the #ifndef _AIX
30212: [7d4330950c20]
30213:
30214: * check.c, logging.c, parse.c:
30215: Initial revision
30216: [c101e9572d7f]
30217:
30218: 1993-03-20 Todd C. Miller <Todd.Miller@courtesan.com>
30219:
30220: * qualify.c:
30221: Initial revision
30222: [5a5f21d0e0bf]
30223:
30224: 1993-03-13 Todd C. Miller <Todd.Miller@courtesan.com>
30225:
30226: * find_path.c:
30227: now works if you do sudo bin/test
30228: [07835120ce43]
30229:
30230: * find_path.c:
30231: works
30232: [c3da8b5efa20]
30233:
30234: 1993-03-02 Todd C. Miller <Todd.Miller@courtesan.com>
30235:
30236: * sudo.h:
30237: Initial revision
30238: [28a1caa38b72]
30239:
30240: * visudo.c:
30241: Initial revision
30242: [0e5cd7c3cdbe]
30243:
30244: * parse.lex, parse.yacc:
30245: Initial revision
30246: [5f2d0cccb06b]
30247:
30248: 1993-02-16 Todd C. Miller <Todd.Miller@courtesan.com>
30249:
30250: * sudo.c:
30251: took out errno.h
30252: [7466431a2655]
30253:
30254: * sudo.c:
30255: now spews error if exec fails and exits with -1
30256: [e5c41ea725c1]
30257:
30258: * sudo.c:
30259: Initial revision
30260: [8aeabe39a0c2]
30261:
30262: * find_path.c:
30263: now only execs files with (an) executable bit set.
30264: [0a451f9c0e58]
30265:
30266: * find_path.c:
30267: Initial revision
30268: [02a534891a35]
30269:
30270: 1993-02-15 Todd C. Miller <Todd.Miller@courtesan.com>
30271:
30272: * getpass.c:
30273: added nice comment
30274: [ea8b2aaa9389]
30275:
30276: * getpass.c:
30277: now works on sgi's
30278: [bf2b7c6d0960]
30279:
30280: * getpass.c:
30281: Initial revision
30282: [9f4de251c1b5]
30283:
FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>
![[BACK]](/icons/cvsweb/back.gif){kind=icon}
Return to ChangeLog CVS log ![[TXT]](/icons/cvsweb/text.gif){kind=icon}
![[DIR]](/icons/cvsweb/dir.gif){kind=icon}
Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo