Annotation of embedaddon/sudo/ChangeLog, revision 1.1.1.5

1.1.1.5 ! misho       1: 2013-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
        !             2: 
        !             3:        * include/missing.h:
        !             4:        Include stddef.h for rsize_t and errno_t on systems that support it
        !             5:        natively.
        !             6:        [bc547d47e9c6]
        !             7: 
        !             8:        * MANIFEST:
        !             9:        Fix braino.
        !            10:        [67b79747312f]
        !            11: 
        !            12:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/de.mo,
        !            13:        plugins/sudoers/po/eo.mo, plugins/sudoers/po/fi.mo,
        !            14:        plugins/sudoers/po/it.mo, plugins/sudoers/po/pl.mo,
        !            15:        plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/uk.mo,
        !            16:        plugins/sudoers/po/vi.mo, plugins/sudoers/po/zh_CN.mo:
        !            17:        Rebuild message catalog files.
        !            18:        [0a9befb0674e]
        !            19: 
        !            20:        * src/po/da.mo, src/po/eo.mo, src/po/fi.mo, src/po/it.mo,
        !            21:        src/po/pl.mo, src/po/pt_BR.mo, src/po/ru.mo, src/po/uk.mo,
        !            22:        src/po/vi.mo, src/po/zh_CN.mo:
        !            23:        Rebuild message catalog files.
        !            24:        [25191089ddf2]
        !            25: 
        !            26:        * MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/cs.mo, src/po/cs.po:
        !            27:        Czech translation for sudo from translationproject.org.
        !            28:        [8bc0ed069ddb]
        !            29: 
        !            30: 2013-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
        !            31: 
        !            32:        * plugins/sudoers/po/da.po, plugins/sudoers/po/de.po,
        !            33:        plugins/sudoers/po/eo.po, plugins/sudoers/po/fi.po,
        !            34:        plugins/sudoers/po/it.po, plugins/sudoers/po/pl.po,
        !            35:        plugins/sudoers/po/pt_BR.po, plugins/sudoers/po/uk.po,
        !            36:        plugins/sudoers/po/vi.po, plugins/sudoers/po/zh_CN.po, src/po/da.po,
        !            37:        src/po/eo.po, src/po/fi.po, src/po/it.po, src/po/pl.po,
        !            38:        src/po/pt_BR.po, src/po/ru.po, src/po/uk.po, src/po/vi.po,
        !            39:        src/po/zh_CN.po:
        !            40:        Sync with translationproject.org
        !            41:        [c16f9bb4579e]
        !            42: 
        !            43:        * NEWS, plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
        !            44:        Change "next" back to 2. In the context of "next Friday" we really
        !            45:        do want the friday of the upcoming (not current) week.
        !            46:        Unfortunately, this means that things like "next week" and "next
        !            47:        year" will match one more than we really want. Fixing this will
        !            48:        require some fairly major changes to the grammar.
        !            49:        [7f863c930121]
        !            50: 
        !            51:        * doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
        !            52:        Mention that relative times don't always do what you might expect.
        !            53:        [710a9b0dd36f]
        !            54: 
        !            55: 2013-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
        !            56: 
        !            57:        * doc/CONTRIBUTORS:
        !            58:        Add diacritical for Zdenek Behan.
        !            59:        [78d333f88e6c]
        !            60: 
        !            61: 2013-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
        !            62: 
        !            63:        * src/regress/ttyname/check_ttyname.c:
        !            64:        Do not fail if ttyname() cannot determine the tty but sudo can.
        !            65:        Should fix problems with running "make check" under pbuilder.
        !            66:        [e6fc06a6c5cf]
        !            67: 
        !            68:        * plugins/sudoers/Makefile.in:
        !            69:        Remove extraneous $$CWD; from Bdale Garbee
        !            70:        [4d040ddd7446]
        !            71: 
        !            72: 2013-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
        !            73: 
        !            74:        * NEWS, plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
        !            75:        Make "this" and "next" qualifiers work a bit better. There is still
        !            76:        room for improvement as "this week" will use the current time
        !            77:        instead of the beginning of the week. That's a separate issue
        !            78:        though.
        !            79:        [e844c02f754a]
        !            80: 
        !            81: 2013-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
        !            82: 
        !            83:        * common/regress/sudo_conf/conf_test.c,
        !            84:        common/regress/sudo_parseln/parseln_test.c:
        !            85:        Mark main() public to silence a warning on HP-UX.
        !            86:        [ac0b869b9842]
        !            87: 
        !            88: 2013-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
        !            89: 
        !            90:        * plugins/sudoers/po/sudoers.pot, plugins/sudoers/timestamp.c:
        !            91:        Be specific that we are talking about the Unix epoch; bug #615
        !            92:        [25887775371b]
        !            93: 
        !            94:        * plugins/sudoers/auth/bsdauth.c, plugins/sudoers/po/sudoers.pot,
        !            95:        src/po/sudo.pot, src/selinux.c:
        !            96:        Do not use "setup" as a verb; bug #614
        !            97:        [17c4750aac5f]
        !            98: 
        !            99:        * plugins/sudoers/iolog.c:
        !           100:        Fix logic goof when checking open() status.
        !           101:        [76ece1445d71]
        !           102: 
        !           103:        * plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po, src/po/nl.mo,
        !           104:        src/po/nl.po, src/po/ru.mo, src/po/ru.po:
        !           105:        Sync with translationproject.org
        !           106:        [21351498000f]
        !           107: 
        !           108:        * NEWS, plugins/sudoers/sudoreplay.c:
        !           109:        Work around a bug in sudo 1.8.7 timing files where the indexes are
        !           110:        off by two.
        !           111:        [4aa0cd58af58]
        !           112: 
        !           113:        * MANIFEST, plugins/sudoers/iolog.c, plugins/sudoers/iolog.h,
        !           114:        plugins/sudoers/sudoreplay.c:
        !           115:        Repair writing of the I/O log file indices broken in sudo 1.8.7.
        !           116:        [6a5f867884f5]
        !           117: 
        !           118: 2013-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           119: 
        !           120:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
        !           121:        Try to improve the PAGERS noexec example a bit.
        !           122:        [226f11118daa]
        !           123: 
        !           124: 2013-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           125: 
        !           126:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
        !           127:        doc/sudoers.ldap.mdoc.in:
        !           128:        Document comment character in ldap.conf Clarify what is and is not
        !           129:        supported in TLS_KEYPW Mention that gsk8capicmd can be used to
        !           130:        create a stash file
        !           131:        [fb8f06ab4458]
        !           132: 
        !           133: 2013-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           134: 
        !           135:        * NEWS:
        !           136:        New bugs fixed for 1.8.8.
        !           137:        [c158df7cd9d2]
        !           138: 
        !           139:        * plugins/sudoers/visudo.c:
        !           140:        Fix setting of quiet flag when -q / --quiet is specified. Do not
        !           141:        print "sudoers: parsed OK" in quiet mode.
        !           142:        [df55acd57ce6]
        !           143: 
        !           144:        * plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
        !           145:        plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, src/po/fi.mo,
        !           146:        src/po/fi.po, src/po/it.mo, src/po/it.po:
        !           147:        Updated translations from translationproject.org
        !           148:        [e9e8abd23a28]
        !           149: 
        !           150:        * plugins/sudoers/check.c:
        !           151:        Don't allow root to change its SELinux role without a password. Bug
        !           152:        #611
        !           153:        [f8b599acb29d]
        !           154: 
        !           155: 2013-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           156: 
        !           157:        * NEWS:
        !           158:        Mention new Mac OS X symbol interposition.
        !           159:        [98293b7c4e0f]
        !           160: 
        !           161:        * plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po, src/po/eo.mo,
        !           162:        src/po/eo.po, src/po/fr.mo, src/po/fr.po:
        !           163:        Updated translations from translationproject.org
        !           164:        [865be7454354]
        !           165: 
        !           166:        * config.h.in, configure, configure.in, src/sudo_noexec.c:
        !           167:        Add configure checks for the exec functions we will dummy out. This
        !           168:        is only really needed on Mac OS X when symbol interposition is being
        !           169:        performed but won't hurt elsewhere.
        !           170:        [49c20cf6bab0]
        !           171: 
        !           172: 2013-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           173: 
        !           174:        * config.h.in, configure, configure.in, src/Makefile.in,
        !           175:        src/sudo_noexec.c:
        !           176:        Fix installation of sudo_noexec on Mac OS X. Use library symbol
        !           177:        interposition on Mac OS X 10.4 and higher so we don't need to set
        !           178:        DYLD_FORCE_FLAT_NAMESPACE=1.
        !           179:        [a82999dff8e6]
        !           180: 
        !           181: 2013-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           182: 
        !           183:        * plugins/sudoers/ldap.c:
        !           184:        Fix error display from ldap_ssl_client_init(). There are two error
        !           185:        codes. The return value can be decoded via ldap_err2string() but
        !           186:        the ssl reason code cannot (you have to look it up in a table
        !           187:        online).
        !           188:        [0267125ce9f0]
        !           189: 
        !           190: 2013-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           191: 
        !           192:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
        !           193:        doc/sudoers.ldap.mdoc.in:
        !           194:        Fix typo in tls_key example for Tivoli
        !           195:        [36599f424ac4]
        !           196: 
        !           197:        * src/parse_args.c:
        !           198:        Don't escape '$' when running "sudo -i command". Bug #564
        !           199:        [17542d52f714]
        !           200: 
        !           201:        * plugins/sudoers/iolog_path.c:
        !           202:        Fix typo in comment.
        !           203:        [d0510ed5eaba]
        !           204: 
        !           205:        * plugins/sudoers/auth/pam.c:
        !           206:        Fix comment.
        !           207:        [4e89e0bfd6af]
        !           208: 
        !           209:        * plugins/sudoers/timestr.c, plugins/sudoers/visudo.c:
        !           210:        Quiet some gcc -Wformat=2 false positives
        !           211:        [28a2014b9822]
        !           212: 
        !           213: 2013-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           214: 
        !           215:        * plugins/sudoers/auth/pam.c:
        !           216:        Remove now-obsolete arg to env_merge()
        !           217:        [ba015cf5d935]
        !           218: 
        !           219:        * plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
        !           220:        plugins/sudoers/po/pt_BR.mo, plugins/sudoers/po/pt_BR.po,
        !           221:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
        !           222:        plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
        !           223:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
        !           224:        src/po/pl.mo, src/po/pl.po, src/po/pt_BR.mo, src/po/pt_BR.po,
        !           225:        src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
        !           226:        src/po/zh_CN.mo, src/po/zh_CN.po:
        !           227:        Updated translations from translationproject.org
        !           228:        [72b6aeaba505]
        !           229: 
        !           230:        * MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/fr.mo, src/po/fr.po:
        !           231:        French translation for sudo from translationproject.org.
        !           232:        [a72321771860]
        !           233: 
        !           234:        * plugins/sudoers/logging.h:
        !           235:        Add __printflike to audit_failure.
        !           236:        [1686b3699d41]
        !           237: 
        !           238:        * include/missing.h:
        !           239:        Use __nonnull__ attribute in __printflike.
        !           240:        [d123613a1fb6]
        !           241: 
        !           242: 2013-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           243: 
        !           244:        * plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
        !           245:        When merging the PAM environment, allow environment variables set in
        !           246:        PAM to override ones set by sudo as long as they do not match the
        !           247:        env_keep or env_check lists.
        !           248:        [f3c64967fed7]
        !           249: 
        !           250:        * plugins/sudoers/auth/pam.c:
        !           251:        Call pam_getenvlist() after we've opened the session to get the
        !           252:        session-specific environment variables.
        !           253:        [b413fb9e1c77]
        !           254: 
        !           255: 2013-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           256: 
        !           257:        * NEWS:
        !           258:        option not flag
        !           259:        [08c31af7b818]
        !           260: 
        !           261:        * compat/getopt_long.c, config.h.in, configure, configure.in:
        !           262:        Don't redefine opterr, optind, optopt, optarg in getopt_long.c. Add
        !           263:        a check for optreset which is a BSD extension and provide a
        !           264:        definition in getopt_long.c if it is not present.
        !           265:        [3393e8d83400]
        !           266: 
        !           267:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
        !           268:        regen
        !           269:        [f38f65830118]
        !           270: 
        !           271:        * plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c:
        !           272:        Use lower case for the long option arguments to match the manual.
        !           273:        This is inconsistent with GNU but it is better to match the sudo
        !           274:        documentation.
        !           275:        [8fac2d64f5d2]
        !           276: 
        !           277:        * NEWS:
        !           278:        Sudo 1.8.8
        !           279:        [105c73752474]
        !           280: 
        !           281:        * src/parse_args.c:
        !           282:        Use lower card for the long option arguments to match the manual.
        !           283:        This is inconsistent with GNU but it is better to match the sudo
        !           284:        documentation.
        !           285:        [af243dd39850]
        !           286: 
        !           287:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
        !           288:        doc/sudo_plugin.mdoc.in:
        !           289:        Describe how remote command execution can be implemented.
        !           290:        [3eba7f93b7f6]
        !           291: 
        !           292:        * doc/sudoers.ldap.cat:
        !           293:        Bump version.
        !           294:        [0ee7f02f3627]
        !           295: 
        !           296: 2013-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           297: 
        !           298:        * src/sudo.c:
        !           299:        Make it a fatal error if the plugin returns invalid or out of range
        !           300:        command info.
        !           301:        [8a7e56c7584a]
        !           302: 
        !           303:        * plugins/sudoers/policy.c:
        !           304:        Use strtol() instead of atoi() and perform error checking of
        !           305:        parameters passed from the sudo front-end.
        !           306:        [05e05be3c6c4]
        !           307: 
        !           308:        * plugins/sudoers/auth/pam.c:
        !           309:        It is not possible for auth to be NULL here.
        !           310:        [771500e776e9]
        !           311: 
        !           312:        * plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
        !           313:        Initialize user_runhost and user_srunhost to user_host and
        !           314:        user_shost in visudo and testsudoers.
        !           315:        [c47cca74e1fc]
        !           316: 
        !           317:        * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
        !           318:        common/error.c, common/fatal.c, common/gidlist.c, common/lbuf.c,
        !           319:        common/list.c, common/sudo_conf.c, common/sudo_debug.c,
        !           320:        compat/Makefile.in, compat/getopt_long.c, include/error.h,
        !           321:        include/fatal.h, plugins/sudoers/Makefile.in,
        !           322:        plugins/sudoers/bsm_audit.c, plugins/sudoers/hexchar.c,
        !           323:        plugins/sudoers/linux_audit.c, plugins/sudoers/locale.c,
        !           324:        plugins/sudoers/regress/check_symbols/check_symbols.c,
        !           325:        plugins/sudoers/regress/logging/check_wrap.c,
        !           326:        plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
        !           327:        src/Makefile.in, src/locale_stub.c, src/net_ifs.c,
        !           328:        src/regress/ttyname/check_ttyname.c, src/sesh.c, src/sudo.h:
        !           329:        Rename error.h -> fatal.h now that there is no error() function.
        !           330:        [3a3827f10f04]
        !           331: 
        !           332:        * common/sudo_debug.c, include/sudo_debug.h:
        !           333:        Add support to the debug subsystem for zero-length strings. This
        !           334:        can happen for things like warning(NULL) or fatal(NULL) where we
        !           335:        just want to log the errno string.
        !           336:        [3ed739c5cc91]
        !           337: 
        !           338:        * include/error.h:
        !           339:        Add __printflike for vfatal, vfatalx, vwarning and vwarningx.
        !           340:        [57e65ed595d2]
        !           341: 
        !           342:        * plugins/sudoers/audit.c:
        !           343:        Need to include gettext.h for BSM audit.
        !           344:        [a87fda2d0123]
        !           345: 
        !           346:        * common/alloc.c, plugins/sudoers/env.c, src/exec_common.c,
        !           347:        src/parse_args.c, src/sudo.c:
        !           348:        Change some fatalx(NULL) that should be fatal(NULL).
        !           349:        [8b1efda9f578]
        !           350: 
        !           351:        * include/error.h, include/missing.h:
        !           352:        Use __printf0like for warning() and fatal() since the fmt string may
        !           353:        be NULL.
        !           354:        [858a890f00ad]
        !           355: 
        !           356:        * compat/pw_dup.c:
        !           357:        Quiet a gcc "used uninitialized in this function" false positive.
        !           358:        [98f47f89ce60]
        !           359: 
        !           360:        * mkpkg:
        !           361:        Enable bsm audit on Mac OS X and Solaris >= 11.
        !           362:        [8607488f986c]
        !           363: 
        !           364:        * plugins/sudoers/bsm_audit.c:
        !           365:        Fix compilation on Solaris 11.
        !           366:        [01aa46298ed7]
        !           367: 
        !           368:        * plugins/sudoers/bsm_audit.c:
        !           369:        Add missing missing.h
        !           370:        [080de69a55a1]
        !           371: 
        !           372:        * plugins/sudoers/sudoers.c:
        !           373:        Move the -C (user_closefrom) check until after set_cmnd() so that
        !           374:        closefrom_override can be used in a command-specific Defaults line.
        !           375:        Fixes bug #610 from Mengtao Sun.
        !           376:        [413565c6ff6b]
        !           377: 
        !           378: 2013-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           379: 
        !           380:        * src/exec.c:
        !           381:        If not using a pty and the child process gets SIGTTOU or SIGTTIN and
        !           382:        sudo is the foreground process, make the child the foreground
        !           383:        process and continue it.
        !           384:        [5ff433443bc4]
        !           385: 
        !           386:        * src/sudo.c:
        !           387:        If sudo is not setuid and was not invoked with a full path, look in
        !           388:        the user's PATH for the sudo binary to give a better error message.
        !           389:        [a740129a38f0]
        !           390: 
        !           391:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
        !           392:        plugins/sudoers/logging.c, plugins/sudoers/match.c,
        !           393:        plugins/sudoers/policy.c, plugins/sudoers/sudo_nss.c,
        !           394:        plugins/sudoers/sudoers.h:
        !           395:        Add limited support for "sudo -l -h other_host". Since group
        !           396:        lookups are done on the local host, rules that use group membership
        !           397:        may be incorrect if the group database is not synchronized between
        !           398:        hosts.
        !           399:        [2c8b222a5f7f]
        !           400: 
        !           401:        * src/parse_args.c:
        !           402:        Fix parsing of "-h host" when used in conjunction with the -l flag.
        !           403:        [62f3d726d52b]
        !           404: 
        !           405:        * configure, configure.in, doc/fixman.sh, doc/fixmdoc.sh,
        !           406:        doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoreplay.cat,
        !           407:        doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
        !           408:        doc/visudo.man.in, doc/visudo.mdoc.in, plugins/sudoers/sudoreplay.c,
        !           409:        plugins/sudoers/visudo.c, src/parse_args.c, src/sudo.c,
        !           410:        src/sudo_usage.h.in:
        !           411:        Simplify usage messages a bit and make --help output more closely
        !           412:        resemble GNU usage wrt long options. Sync usage and man page
        !           413:        SYNOPSYS sections and improve long options in the manual pages. Now
        !           414:        that we have long options we don't need to give the mnemonic for the
        !           415:        single-character options in the description.
        !           416:        [17b7e386955a]
        !           417: 
        !           418: 2013-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           419: 
        !           420:        * plugins/sudoers/logging.c:
        !           421:        Fix setting of mailer argv[0] to basename of mailerpath. No need to
        !           422:        strdup() mailerpath as it is not modified.
        !           423:        [8843cdd958ee]
        !           424: 
        !           425:        * plugins/sudoers/logging.c:
        !           426:        Make sure the mailer exists and is a regular file before trying to
        !           427:        exec it.
        !           428:        [b73d6214014f]
        !           429: 
        !           430:        * plugins/sudoers/timestamp.c:
        !           431:        If tty_tickets are enabled but there is no tty, use a ticket file
        !           432:        based on the parent pid.
        !           433:        [75408bd61ced]
        !           434: 
        !           435:        * common/sudo_conf.c, doc/sudo.conf.cat, doc/sudo.conf.man.in,
        !           436:        doc/sudo.conf.mdoc.in, include/sudo_conf.h, src/parse_args.c:
        !           437:        Allow default plugin dir to be configured in sudo.conf.
        !           438:        [478883594cc5]
        !           439: 
        !           440:        * doc/CONTRIBUTORS:
        !           441:        UTF8 for Ruusamae, Elan; from Tae Wong
        !           442:        [02e0c95b4fa6]
        !           443: 
        !           444: 2013-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           445: 
        !           446:        * MANIFEST, common/regress/sudo_conf/test5.in,
        !           447:        common/regress/sudo_conf/test5.out.ok,
        !           448:        common/regress/sudo_conf/test6.in,
        !           449:        common/regress/sudo_conf/test6.out.ok, common/sudo_conf.c,
        !           450:        doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
        !           451:        plugins/sudoers/policy.c, plugins/sudoers/pwutil_impl.c, src/sudo.c:
        !           452:        Don't allow max_groups to be set to zero, it just complicates things
        !           453:        needlessly. Fixes an assertion in visudo when there is a group-
        !           454:        based Defaults entry.
        !           455:        [d62a8ea32db9]
        !           456: 
        !           457: 2013-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           458: 
        !           459:        * MANIFEST, common/Makefile.in, common/gidlist.c,
        !           460:        plugins/sudoers/policy.c, plugins/sudoers/sudoers.h, src/sudo.c,
        !           461:        src/sudo.h:
        !           462:        Refactor code to parse list of gids into its own function that is
        !           463:        shared by the sudo front-end and the sudoers module. Make uid/gid
        !           464:        parse error be fatal, not just a warning.
        !           465:        [da3b2b06605c]
        !           466: 
        !           467:        * common/atoid.c:
        !           468:        Add function comment block.
        !           469:        [09a324de716f]
        !           470: 
        !           471:        * common/atoid.c:
        !           472:        Default text domain is now sudo, not sudoers.
        !           473:        [1acb1da6f304]
        !           474: 
        !           475:        * common/Makefile.in:
        !           476:        Update dependency for atoid.lo
        !           477:        [5e367cd44288]
        !           478: 
        !           479:        * common/atoid.c, plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
        !           480:        plugins/sudoers/sudoers.h, plugins/sudoers/tsgetgrpw.c, src/sudo.c,
        !           481:        src/sudo.h:
        !           482:        Add endpointer and separator args to atoid()
        !           483:        [2077e4ed8578]
        !           484: 
        !           485: 2013-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           486: 
        !           487:        * compat/getgrouplist.c:
        !           488:        Use private version of atoid() to avoid a dependency on libcommon.a
        !           489:        (since that already depends on libreplace.a).
        !           490:        [7c12d63b0560]
        !           491: 
        !           492:        * doc/CONTRIBUTORS:
        !           493:        More UTF8 in names; from Tae Wong
        !           494:        [512b263f51c8]
        !           495: 
        !           496:        * compat/getgrouplist.c, plugins/sudoers/iolog.c,
        !           497:        plugins/sudoers/tsgetgrpw.c, src/sudo.c, src/sudo.h:
        !           498:        Use atoid() in more places.
        !           499:        [06f4ae57c707]
        !           500: 
        !           501:        * MANIFEST, common/Makefile.in, common/atoid.c,
        !           502:        plugins/sudoers/Makefile.in, plugins/sudoers/atoid.c:
        !           503:        Move atoid() to common so it can be used in src and compat too.
        !           504:        [095d730701e4]
        !           505: 
        !           506:        * compat/closefrom.c:
        !           507:        Avoid a crash on Mac OS X 10.8 (at least) when we close
        !           508:        libdispatch's fds out from under it before executing the command.
        !           509:        Switch to just setting the close on exec flag instead.
        !           510:        [349ebf4987df]
        !           511: 
        !           512:        * doc/CONTRIBUTORS:
        !           513:        Convert to last, first for easier sorting and use UTF8 (including a
        !           514:        BOM).
        !           515:        [8c30d221bd75]
        !           516: 
        !           517:        * plugins/sudoers/atoid.c:
        !           518:        Add atoid() function to convert a string to an id_t (uid, gid or
        !           519:        pid). We have to be careful to choose() either strtol() or
        !           520:        strtoul() depending on whether the string appears to be signed or
        !           521:        unsigned. Always using strtoul() is unsafe on 64-bit platforms since
        !           522:        the uid might be represented as a negative number and (unsigned
        !           523:        long)-1 on a 64-bit system is 0xffffffffffffffff not 0xffffffff.
        !           524:        Fixes a problem with uids larger than 0x7fffffff on 32-bit
        !           525:        platforms.
        !           526:        [5d818e399157]
        !           527: 
        !           528:        * MANIFEST, config.h.in, configure, configure.in,
        !           529:        plugins/sudoers/Makefile.in, plugins/sudoers/policy.c,
        !           530:        plugins/sudoers/sudoers.h:
        !           531:        Add atoid() function to convert a string to an id_t (uid, gid or
        !           532:        pid). We have to be careful to choose() either strtol() or
        !           533:        strtoul() depending on whether the string appears to be signed or
        !           534:        unsigned. Always using strtoul() is unsafe on 64-bit platforms since
        !           535:        the uid might be represented as a negative number and (unsigned
        !           536:        long)-1 on a 64-bit system is 0xffffffffffffffff not 0xffffffff.
        !           537:        Fixes a problem with uids larger than 0x7fffffff on 32-bit
        !           538:        platforms.
        !           539:        [cd92246a710f]
        !           540: 
        !           541:        * plugins/sudoers/sudoers.c:
        !           542:        Avoid "perm stack underflow" error when logging the unknown uid
        !           543:        error.
        !           544:        [871514c713b7]
        !           545: 
        !           546:        * plugins/sudoers/set_perms.c:
        !           547:        In rewind_perms() there is nothing to do if perm_stack_depth == 0.
        !           548:        [98de335f47f0]
        !           549: 
        !           550: 2013-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           551: 
        !           552:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
        !           553:        plugins/sudoers/auth/pam.c, plugins/sudoers/def_data.c,
        !           554:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in:
        !           555:        Add pam_setcred sudoers option to allow the user to control whether
        !           556:        pam_setcred() is called on the user's behalf.
        !           557:        [4260a8e43073]
        !           558: 
        !           559:        * configure, configure.in, doc/sudoers.cat, doc/sudoers.man.in,
        !           560:        doc/sudoers.mdoc.in, plugins/sudoers/auth/pam.c,
        !           561:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
        !           562:        plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
        !           563:        Add pam_service and pam_login_service sudoers settings to control
        !           564:        the service name passed to pam_start.
        !           565:        [5ea0e3588f3a]
        !           566: 
        !           567:        * mkpkg:
        !           568:        Newer Xcode places the SDKs under Xcode.app
        !           569:        [4b54379d5c45]
        !           570: 
        !           571: 2013-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           572: 
        !           573:        * MANIFEST, common/Makefile.in, common/zero_bytes.c,
        !           574:        compat/Makefile.in, compat/memset_s.c, config.h.in, configure,
        !           575:        configure.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
        !           576:        doc/sudo_plugin.mdoc.in, include/missing.h, include/sudo_plugin.h,
        !           577:        mkdep.pl, plugins/sudoers/Makefile.in,
        !           578:        plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
        !           579:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/pam.c,
        !           580:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
        !           581:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/defaults.c,
        !           582:        plugins/sudoers/logging.c, plugins/sudoers/sha2.c,
        !           583:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
        !           584:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
        !           585:        src/Makefile.in, src/conversation.c, src/sudo.h, src/sudo_edit.c,
        !           586:        src/tgetpass.c:
        !           587:        Implement memset_s() and use it instead of zero_bytes(). A new
        !           588:        constant, SUDO_CONV_REPL_MAX, is defined by the plugin API as the
        !           589:        max conversation reply length. This constant can be used as a max
        !           590:        value for memset_s() when clearing passwords filled in by the
        !           591:        conversation function.
        !           592:        [264ec146028e]
        !           593: 
        !           594: 2013-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           595: 
        !           596:        * plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
        !           597:        plugins/system_group/Makefile.in:
        !           598:        Do not try to install plugins when shared modules are disabled
        !           599:        (sudoers already had the check).
        !           600:        [3d582c042042]
        !           601: 
        !           602:        * plugins/sudoers/Makefile.in:
        !           603:        Update dependencies to take into account compat/getopt.h and
        !           604:        compat/dlfcn.h.
        !           605:        [301fb31cd121]
        !           606: 
        !           607:        * src/Makefile.in:
        !           608:        Update dependencies now that sudo_usage.h is always included from
        !           609:        the build dir.
        !           610:        [c1ff70ec9515]
        !           611: 
        !           612: 2013-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           613: 
        !           614:        * plugins/sudoers/ldap.c:
        !           615:        Add some warnings and debugging to sasl ccname handling.
        !           616:        [467f415861f0]
        !           617: 
        !           618:        * plugins/sudoers/ldap.c:
        !           619:        Fix write loop invariant in sudo_krb5_copy_cc_file()
        !           620:        [6948cf6e9b9f]
        !           621: 
        !           622: 2013-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           623: 
        !           624:        * plugins/sudoers/ldap.c:
        !           625:        Strip off leading FILE: or WRFILE: prefix before trying to copy the
        !           626:        user's credential cache.
        !           627:        [56c16feab62f]
        !           628: 
        !           629: 2013-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           630: 
        !           631:        * src/sudo.c:
        !           632:        Instead of setting RLIMIT_NPROC to unlimited when sudo initializes,
        !           633:        just save RLIMIT_NPROC in exec_setup() before the final setuid() and
        !           634:        restore it immediately after. We don't need to modify RLIMIT_NPROC
        !           635:        for simple euid changes, just for changing the real (and saved) uids
        !           636:        before we exec. This also means we no longer need to worry about
        !           637:        _SC_CHILD_MAX returning -1. Bug #565
        !           638:        [1372f1909039]
        !           639: 
        !           640: 2013-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           641: 
        !           642:        * plugins/sudoers/ldap.c, src/preload.c:
        !           643:        Now that the ldap code runs with the real and effective uid set to
        !           644:        0, it is not possible for the gssapi libs to find the user's krb5
        !           645:        credential cache file. To work around this, we make a temporary
        !           646:        copy of the user's credential cache specified by KRB5CCNAME (opened
        !           647:        with the user's effective uid) and point gssapi to it. To set the
        !           648:        credential cache file name, we dynamically look up
        !           649:        gss_krb5_ccache_name() and use it if available, otherwise fall back
        !           650:        to setting KRB5CCNAME.
        !           651:        [8b86c134541a]
        !           652: 
        !           653: 2013-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           654: 
        !           655:        * doc/sudo.man.in, doc/sudoreplay.cat, doc/sudoreplay.man.in,
        !           656:        doc/sudoreplay.mdoc.in, doc/visudo.cat, doc/visudo.man.in,
        !           657:        doc/visudo.mdoc.in, plugins/sudoers/sudoreplay.c,
        !           658:        plugins/sudoers/visudo.c:
        !           659:        Long option support for visudo and sudoreplay.
        !           660:        [91427968be71]
        !           661: 
        !           662: 2013-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           663: 
        !           664:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, src/Makefile.in,
        !           665:        src/parse_args.c, src/sudo.c, src/sudo_usage.h.in:
        !           666:        Add support for long options and fix inclusion of sudo_usage.h with
        !           667:        modern gcc broken in 8597:1fcb7ba13018.
        !           668:        [d13134819944]
        !           669: 
        !           670:        * src/Makefile.in:
        !           671:        Add rule to rebuild sudo_usage.h when the .in file changes.
        !           672:        [59a32899e251]
        !           673: 
        !           674:        * compat/Makefile.in, mkdep.pl, src/Makefile.in:
        !           675:        Add make rules for building getopt_long.c
        !           676:        [5f57593b3a8b]
        !           677: 
        !           678:        * src/parse_args.c:
        !           679:        Make "-h hostname" work. Optional args in GNU getopt() only work
        !           680:        when there is no space between the option flag and the argument.
        !           681:        [b8258659cabb]
        !           682: 
        !           683: 2013-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           684: 
        !           685:        * MANIFEST, compat/getopt.h, compat/getopt_long.c, config.h.in,
        !           686:        configure, configure.in, doc/LICENSE, src/parse_args.c:
        !           687:        Use getopt_long() so we can make the -h flag take an optional
        !           688:        argument. Includes a version for those without it.
        !           689:        [d1dd66c8a86b]
        !           690: 
        !           691: 2013-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           692: 
        !           693:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
        !           694:        Document that the -h option can be used specify a host name for
        !           695:        future plugins.
        !           696:        [8470c74cf326]
        !           697: 
        !           698:        * include/sudo_plugin.h, src/parse_args.c, src/sudo_usage.h.in:
        !           699:        Overload -h option to specify an optional hostname for remote
        !           700:        access. This is future-proofing; no policy plugins currently support
        !           701:        this.
        !           702:        [0e01d8c3c623]
        !           703: 
        !           704:        * configure, configure.in:
        !           705:        Bump version to 1.8.8
        !           706:        [a1155bfaa28f]
        !           707: 
        !           708:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
        !           709:        doc/sudo_plugin.mdoc.in:
        !           710:        Document the remote_host setting (-h host)
        !           711:        [c737db906f5d]
        !           712: 
        !           713:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
        !           714:        fix "the the"
        !           715:        [0025464a3942]
        !           716: 
        !           717:        * src/parse_args.c, src/sudo.c, src/sudo.h:
        !           718:        Do not error out if arg to -U option cannot be resolved, that is for
        !           719:        the plugin to decide. There is no need for runas_user and
        !           720:        runas_group to be global, make them local to parse_args() instead.
        !           721:        [fb02a62a72ba]
        !           722: 
        !           723:        * MANIFEST, doc/CONTRIBUTORS, plugins/sudoers/po/pt_BR.mo,
        !           724:        plugins/sudoers/po/pt_BR.po, src/po/es.mo, src/po/es.po,
        !           725:        src/po/pt_BR.mo, src/po/pt_BR.po:
        !           726:        Sync with translationproject.org
        !           727:        [e8f4772d918a]
        !           728: 
        !           729: 2013-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           730: 
        !           731:        * doc/TROUBLESHOOTING:
        !           732:        Remove old bits about sudo setuid problems that should have been
        !           733:        cleaned up in changeset 7917:fa4894896d8a. Also update the mode of
        !           734:        sudo to 04755 to match current packaging.
        !           735:        [1e3904cdc2de]
        !           736: 
        !           737:        * plugins/sudoers/auth/pam.c:
        !           738:        Go back to ignoring the return value of pam_setcred() since with
        !           739:        stacked PAM auth modules a failure from one module may override
        !           740:        PAM_SUCCESS from another. If the first module in the stack fails,
        !           741:        the others may be run (and succeed) but an error will be returned.
        !           742:        This can cause a spurious warning on systems with non-local users
        !           743:        (e.g. pam_ldap or pam_sss) where pam_unix is consulted first.
        !           744:        [b6022e26135a]
        !           745: 
        !           746:        * src/net_ifs.c:
        !           747:        Remove unused variable.
        !           748:        [93dde7d82fde]
        !           749: 
        !           750:        * NEWS:
        !           751:        Fix typo
        !           752:        [5ef79671c2c7]
        !           753: 
        !           754: 2013-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           755: 
        !           756:        * plugins/sudoers/sssd.c:
        !           757:        Fix pasto; sudo_sss_extract_digest() not sudo_ldap_extract_digest().
        !           758:        From Dan Harnett.
        !           759:        [4a0af6f12765]
        !           760: 
        !           761: 2013-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           762: 
        !           763:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
        !           764:        Fix formatting typo; from Eric S. Raymond
        !           765:        [058b533ba460]
        !           766: 
        !           767: 2013-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
        !           768: 
        !           769:        * mkpkg:
        !           770:        Use -gxcoff on aix so dbx can be used to debug sudo.
        !           771:        [4950e019ed2d]
        !           772: 
1.1.1.4   misho     773: 2013-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1.1.3   misho     774: 
1.1.1.4   misho     775:        * doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
                    776:        Fix typo; bug 605
                    777:        [41f7b46a6e51]
                    778: 
                    779: 2013-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                    780: 
                    781:        * src/po/da.mo, src/po/eo.mo, src/po/es.mo, src/po/it.mo,
                    782:        src/po/tr.mo:
                    783:        Regen .mo files that were out of date.
                    784:        [9e25a254f9db]
                    785: 
                    786: 2013-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                    787: 
                    788:        * NEWS, configure, configure.in:
                    789:        On Solaris 11 and higher, tag binaries for ASLR if supported by the
                    790:        linker.
                    791:        [a2a6cafa3e60]
                    792: 
                    793:        * mkpkg:
                    794:        No longer need to disable PIE on Solaris.
                    795:        [cf90019ae67e]
                    796: 
                    797: 2013-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                    798: 
                    799:        * INSTALL, NEWS, configure, configure.in, doc/TROUBLESHOOTING:
                    800:        Restrict default creation of PIE binaries (-fPIE and -pie) to Linux.
                    801:        OpenBSD also supports PIE but enables it by default so we don't need
                    802:        to do anything. This fixes problems on systems with a version of
                    803:        GNU ld that accepts -pie but where the run-time linker doesn't
                    804:        actually support PIE. Also verify that a trivial PIE binary works
                    805:        unless PIE is explicitly enabled.
                    806:        [3c5f125efeb1]
                    807: 
                    808: 2013-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                    809: 
                    810:        * aclocal.m4, configure, configure.in:
                    811:        Attempt to detect PIE failure on Solaris 10 with GNU as and GNU ld
                    812:        where we can end up crashing due to malloc() failures. Sems OK when
                    813:        Using Sun as and ld.
                    814:        [b8ba412102ab]
                    815: 
                    816:        * NEWS:
                    817:        Update with final changes.
                    818:        [78ff6d2ed47a]
                    819: 
                    820: 2013-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                    821: 
                    822:        * configure, configure.in:
                    823:        Add -fPIE to PIE_LDFLAGS as per gcc manual.
                    824:        [fe900cbb0780]
                    825: 
                    826: 2013-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                    827: 
                    828:        * common/Makefile.in, compat/Makefile.in:
                    829:        Add missing $(PIE_LDFLAGS) $(SSP_LDFLAGS) for test programs
                    830:        [f84bc7482b78]
                    831: 
                    832:        * MANIFEST, plugins/sudoers/alias.c, plugins/sudoers/match.c,
                    833:        plugins/sudoers/parse.c, plugins/sudoers/parse.h,
                    834:        plugins/sudoers/regress/visudo/test4.out.ok,
                    835:        plugins/sudoers/regress/visudo/test4.sh, plugins/sudoers/visudo.c:
                    836:        Replace sequence number-based cycle detection in visudo with a
                    837:        "used" flag in struct alias. The caller is required to call
                    838:        alias_put() when it is done with the alias. Inspired by a patch
                    839:        from Daniel Kopecek.
                    840:        [0bdbac1b3b39]
                    841: 
                    842: 2013-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                    843: 
                    844:        * plugins/sudoers/iolog.c:
                    845:        Eliminate a few relocations related to sudoers_io.
                    846:        [18e9e2cc3367]
                    847: 
                    848:        * plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po:
                    849:        Sync with translationproject.org
                    850:        [f38cc128a2ad]
                    851: 
                    852: 2013-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                    853: 
                    854:        * src/ttyname.c:
                    855:        Clarify a comment.
                    856:        [7a045ee06e95]
                    857: 
                    858: 2013-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                    859: 
                    860:        * src/ttyname.c:
                    861:        Handle d_type == DT_UNKNOWN when resolving the device to a name and
                    862:        sprinkle some more debugging.
                    863:        [8774133747d9]
                    864: 
                    865: 2013-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                    866: 
                    867:        * doc/TROUBLESHOOTING:
                    868:        Add message about disabling PIE if sudo gets SIGSEGV.
                    869:        [c786af2a6751]
                    870: 
                    871:        * plugins/sudoers/check.h, plugins/sudoers/timestamp.c:
                    872:        No longer store the ctime of a devpts tty. The handling of ctime on
                    873:        devpts in Linux has been changed to conform to POSIX. As a result
                    874:        we can no longer assume that the ctime will stay unchanged
                    875:        throughout the life of the session. We store the session ID in the
                    876:        time stamp file so there is a much smaller chance of the time stamp
                    877:        file being reused by a new login. While here, store the uid/gid in
                    878:        the timestamp file too for good measure.
                    879:        [7028b21f7a9b]
                    880: 
                    881:        * configure, configure.in:
                    882:        PIE is broken on FreeBSD/arm
                    883:        [f232c60d6229]
                    884: 
                    885:        * mkpkg:
                    886:        Add explicit sendmail path for Linux since we may not have sendmail
                    887:        installed in the build chroot.
                    888:        [1ba2f84f4ff0]
                    889: 
                    890: 2013-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                    891: 
                    892:        * common/sudo_debug.c, plugins/sudoers/iolog.c,
                    893:        plugins/sudoers/set_perms.c, src/sudo.c, src/tgetpass.c:
                    894:        Quiet a few -Wunused-result compiler warnings.
                    895:        [ef12afb61423]
                    896: 
                    897: 2013-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                    898: 
                    899:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                    900:        Mention what SHA-2 formats are supported.
                    901:        [bf298d0fdf8a]
                    902: 
                    903:        * doc/CONTRIBUTORS:
                    904:        List code and translations separately.
                    905:        [826547bc1295]
                    906: 
                    907: 2013-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                    908: 
                    909:        * MANIFEST, plugins/sudoers/po/de.mo, plugins/sudoers/po/de.po,
                    910:        plugins/sudoers/po/tr.mo, plugins/sudoers/po/tr.po,
                    911:        plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po:
                    912:        Sync with translationproject.org
                    913:        [9499a6f438b8]
                    914: 
                    915:        * plugins/sudoers/po/sudoers.pot:
                    916:        regen
                    917:        [cce449e284a6]
                    918: 
                    919:        * Makefile.in:
                    920:        Fix c-format for fatal/fatalx
                    921:        [4ad81d3faaeb]
                    922: 
                    923: 2013-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                    924: 
                    925:        * Makefile.in, plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
                    926:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                    927:        plugins/sudoers/visudo.c, src/exec_pty.c, src/sudo.h:
                    928:        Change some error/errorx -> fatal/fatalx in comments and xgettext
                    929:        flags.
                    930:        [9d9b64fa2ec9]
                    931: 
                    932:        * NEWS:
                    933:        There is now a Turkish translation of sudoers.
                    934:        [701c5af6aa76]
                    935: 
                    936:        * MANIFEST, plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
                    937:        plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                    938:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                    939:        plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po,
                    940:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                    941:        plugins/sudoers/po/tr.mo, plugins/sudoers/po/tr.po,
                    942:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
                    943:        plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
                    944:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
                    945:        Updated translations from translationproject.org including new
                    946:        Turkish translation.
                    947:        [9cedbb50d90f]
                    948: 
                    949: 2013-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                    950: 
                    951:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                    952:        Document that sudoers will re-use existing I/O log paths unless they
                    953:        are mktemp-style with trailing X's.
                    954:        [4f43bd13d9e7]
                    955: 
                    956:        * NEWS, doc/sudoers.cat, doc/sudoers.ldap.cat,
                    957:        doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
                    958:        doc/sudoers.man.in, doc/sudoers.mdoc.in, plugins/sudoers/ldap.c,
                    959:        plugins/sudoers/policy.c, plugins/sudoers/sudoers.h:
                    960:        Allow ldap_conf and ldap_secret to be specified as plugin arguments
                    961:        in sudo.conf
                    962:        [37c6c425b565]
                    963: 
                    964:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                    965:        doc/sudoers.ldap.mdoc.in:
                    966:        sudoers_debug is now deprecated in favor of the sudo debugging
                    967:        framework.
                    968:        [1195be1ec254]
                    969: 
                    970:        * plugins/sudoers/ldap.c:
                    971:        Replace DPRINTF with DPRINTF1 and DPRINTF2 macros that use
                    972:        SUDO_DEBUG_DIAG and SUDO_DEBUG_INFO respectively for logging to the
                    973:        debug file with the ldap subsystem. The sudoers_debug setting in
                    974:        ldap.conf is still honored for now but will be removed in a future
                    975:        release.
                    976:        [cfa42b4b913e]
                    977: 
                    978: 2013-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                    979: 
                    980:        * plugins/sudoers/sudoers2ldif:
                    981:        Add support for converting sudoers files with SHA-2 command digests.
                    982:        [dc0d03485946]
                    983: 
                    984:        * doc/fixman.sh, doc/fixmdoc.sh, mkdep.pl, mkpkg,
                    985:        plugins/sudoers/sudoers2ldif:
                    986:        Add copyright notice to scripts
                    987:        [5e8bd4e6083f]
                    988: 
                    989:        * MANIFEST, plugins/sudoers/regress/sudoers/test14.in,
                    990:        plugins/sudoers/regress/sudoers/test14.out.ok,
                    991:        plugins/sudoers/regress/sudoers/test14.toke.ok:
                    992:        Add regress for SHA-2 digests.
                    993:        [0b258c2a2a95]
                    994: 
                    995:        * compat/getgrouplist.c:
                    996:        Solaris maps negative gids to GID_NOBODY.
                    997:        [57050e5c750f]
                    998: 
                    999:        * plugins/sudoers/visudo.c:
                   1000:        Clear up an llvm checker warning which appears to be a false
                   1001:        positive and fix an old XXX while I'm at it.
                   1002:        [9ee13133e596]
                   1003: 
                   1004:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoreplay.cat,
                   1005:        doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
                   1006:        Correct last change date
                   1007:        [3bc1fa5b0f76]
                   1008: 
                   1009:        * plugins/sudoers/po/sudoers.pot, plugins/sudoers/sudoreplay.c:
                   1010:        No need to translate this error message.
                   1011:        [4d9941970a26]
                   1012: 
                   1013:        * doc/UPGRADE:
                   1014:        Mention .sl vs. .so extension handling on HP-UX Mention group
                   1015:        membership changes Fix typos
                   1016:        [40ac0efbdb2b]
                   1017: 
                   1018:        * aclocal.m4, common/aix.c, common/alloc.c, common/atobool.c,
                   1019:        common/error.c, common/fmt_string.c, common/lbuf.c, common/list.c,
                   1020:        common/setgroups.c, common/term.c, common/ttysize.c,
                   1021:        compat/Makefile.in, compat/dlopen.c, compat/endian.h,
                   1022:        compat/getline.c, compat/getprogname.c, compat/isblank.c,
                   1023:        compat/memrchr.c, compat/mksiglist.c, compat/mktemp.c,
                   1024:        compat/nanosleep.c, compat/pw_dup.c, compat/sig2str.c,
                   1025:        compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
                   1026:        compat/strsignal.c, compat/utimes.c, doc/Makefile.in,
                   1027:        include/Makefile.in, include/alloc.h, include/fileops.h,
                   1028:        include/gettext.h, include/lbuf.h, include/missing.h,
                   1029:        include/sudo_plugin.h, pathnames.h.in,
                   1030:        plugins/group_file/Makefile.in, plugins/sample/Makefile.in,
                   1031:        plugins/sample/sample_plugin.c, plugins/sudoers/Makefile.in,
                   1032:        plugins/sudoers/alias.c, plugins/sudoers/audit.c,
                   1033:        plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   1034:        plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
                   1035:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
                   1036:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
                   1037:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
                   1038:        plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
                   1039:        plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/bsm_audit.c,
                   1040:        plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.c,
                   1041:        plugins/sudoers/defaults.h, plugins/sudoers/env.c,
                   1042:        plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
                   1043:        plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
                   1044:        plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
                   1045:        plugins/sudoers/interfaces.c, plugins/sudoers/interfaces.h,
                   1046:        plugins/sudoers/iolog_path.c, plugins/sudoers/linux_audit.c,
                   1047:        plugins/sudoers/linux_audit.h, plugins/sudoers/locale.c,
                   1048:        plugins/sudoers/logging.h, plugins/sudoers/match.c,
                   1049:        plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
                   1050:        plugins/sudoers/parse.h, plugins/sudoers/prompt.c,
                   1051:        plugins/sudoers/pwutil.h, plugins/sudoers/redblack.c,
                   1052:        plugins/sudoers/redblack.h,
                   1053:        plugins/sudoers/regress/check_symbols/check_symbols.c,
                   1054:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   1055:        plugins/sudoers/regress/logging/check_wrap.c,
                   1056:        plugins/sudoers/regress/parser/check_addr.c,
                   1057:        plugins/sudoers/regress/parser/check_fill.c,
                   1058:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   1059:        plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers_version.h,
                   1060:        plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
                   1061:        plugins/sudoers/toke.h, plugins/sudoers/toke.l,
                   1062:        plugins/sudoers/toke_util.c, plugins/sudoers/tsgetgrpw.c,
                   1063:        plugins/sudoers/visudo.c, plugins/system_group/Makefile.in,
                   1064:        plugins/system_group/system_group.c, src/Makefile.in,
                   1065:        src/conversation.c, src/exec.c, src/exec_common.c, src/get_pty.c,
                   1066:        src/net_ifs.c, src/parse_args.c, src/preload.c, src/selinux.c,
                   1067:        src/sesh.c, src/signal.c, src/sudo_edit.c, src/sudo_exec.h,
                   1068:        src/sudo_noexec.c, src/sudo_plugin_int.h, src/tgetpass.c,
                   1069:        src/utmp.c:
                   1070:        Update copyright years.
                   1071:        [5c6d72661bad]
                   1072: 
                   1073:        * plugins/sudoers/mon_systrace.h:
                   1074:        Systrace support was removed long ago.
                   1075:        [10a038a2da77]
                   1076: 
                   1077: 2013-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1078: 
                   1079:        * MANIFEST, plugins/sudoers/regress/sudoers/test10.toke.out.ok,
                   1080:        plugins/sudoers/regress/sudoers/test9.toke.out.ok:
                   1081:        Remove some files that were mistakenly added.
                   1082:        [833502da26de]
                   1083: 
                   1084:        * common/sudo_debug.c, config.h.in, configure, configure.in,
                   1085:        plugins/sudoers/boottime.c, plugins/sudoers/iolog.c,
                   1086:        plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
                   1087:        plugins/sudoers/sudoreplay.c, plugins/sudoers/timestamp.c:
                   1088:        Use time(&now) instead of now = time(NULL) when storing the current
                   1089:        time in a time_t (better compiler error checking). Better parsing
                   1090:        and printing of 64-bit time_t on 32-bit platforms.
                   1091:        [c227dc72c04e]
                   1092: 
                   1093: 2013-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1094: 
                   1095:        * src/ttyname.c:
                   1096:        Don't check the tty of the parent process. Now that we get the
                   1097:        controlling tty device number from the kernel there is no need. If
                   1098:        the process has really disassociated from the tty then reporting
                   1099:        "unknown" is appropriate.
                   1100:        [62fb66e565db]
                   1101: 
                   1102: 2013-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1103: 
                   1104:        * common/error.c:
                   1105:        Use EXIT_FAILURE instead of 1 as the fatal() exit value.
                   1106:        [ed94c2c5e88a]
                   1107: 
                   1108:        * src/sesh.c:
                   1109:        Change remaining errorx -> fatalx
                   1110:        [3f6d70e19303]
                   1111: 
                   1112: 2013-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1113: 
                   1114:        * plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
                   1115:        plugins/sudoers/sudoers.h:
                   1116:        Replace sudo_fakepwnamid() with sudo_mkpwent() and don't return an
                   1117:        error if the entry already exists in the cache.
                   1118:        [94d45970400a]
                   1119: 
                   1120:        * plugins/sudoers/bsm_audit.c, plugins/sudoers/po/sudoers.pot:
                   1121:        Change "foo: failed" to just "foo" since we print the string form of
                   1122:        errno. Gets rids of some useless translations.
                   1123:        [476f37349dbc]
                   1124: 
                   1125: 2013-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1126: 
                   1127:        * plugins/sudoers/match.c:
                   1128:        Fix pasto in debug_decl
                   1129:        [08650186a239]
                   1130: 
                   1131:        * plugins/sudoers/Makefile.in:
                   1132:        regen
                   1133:        [acf4c34fba2c]
                   1134: 
                   1135:        * plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
                   1136:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
                   1137:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/logging.c,
                   1138:        plugins/sudoers/logging.h, plugins/sudoers/parse.c,
                   1139:        plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c:
                   1140:        Rename log_error() -> log_warning() for consistency with
                   1141:        warning()/fatal()
                   1142:        [474ed5a0e335]
                   1143: 
                   1144:        * plugins/sudoers/auth/API:
                   1145:        The NO_EXIT flag was removed a while ago.
                   1146:        [e0a4be270226]
                   1147: 
                   1148:        * common/aix.c, common/alloc.c, common/error.c, include/error.h,
                   1149:        plugins/sudoers/bsm_audit.c, plugins/sudoers/env.c,
                   1150:        plugins/sudoers/find_path.c, plugins/sudoers/hexchar.c,
                   1151:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   1152:        plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
                   1153:        plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
                   1154:        plugins/sudoers/pwutil.c,
                   1155:        plugins/sudoers/regress/check_symbols/check_symbols.c,
                   1156:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   1157:        plugins/sudoers/regress/logging/check_wrap.c,
                   1158:        plugins/sudoers/regress/parser/check_addr.c,
                   1159:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   1160:        plugins/sudoers/testsudoers.c, plugins/sudoers/timestamp.c,
                   1161:        plugins/sudoers/visudo.c, src/exec.c, src/exec_common.c,
                   1162:        src/exec_pty.c, src/net_ifs.c, src/parse_args.c, src/selinux.c,
                   1163:        src/signal.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c,
                   1164:        src/utmp.c:
                   1165:        Rename error/errorx -> fatal/fatalx and remove the exit value as it
                   1166:        was always 1.
                   1167:        [ea66f58c4da5]
                   1168: 
                   1169:        * NEWS:
                   1170:        digests are supported in sudoers ldap too
                   1171:        [77d6c25f7653]
                   1172: 
                   1173:        * plugins/sudoers/regress/check_symbols/check_symbols.c:
                   1174:        Print test failures to stdout like the final count so the outputis
                   1175:        not displayed out of order.
                   1176:        [f541b78ecb93]
                   1177: 
                   1178:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
                   1179:        plugins/sudoers/po/eo.po, plugins/sudoers/po/hr.mo,
                   1180:        plugins/sudoers/po/hr.po, plugins/sudoers/po/it.po, src/po/da.mo,
                   1181:        src/po/da.po, src/po/eo.po, src/po/hr.mo, src/po/hr.po,
                   1182:        src/po/it.po, src/po/tr.po:
                   1183:        Sync with translationproject.org
                   1184:        [cbd70678b99f]
                   1185: 
                   1186:        * Makefile.in:
                   1187:        Check for any uncommitted changes in dist target and add force-dist
                   1188:        target that omit check-dist.
                   1189:        [78dc3f41e37e]
                   1190: 
                   1191: 2013-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1192: 
                   1193:        * src/regress/ttyname/check_ttyname.c:
                   1194:        Fix logic bug when checking tty via ttyname().
                   1195:        [279aee076194]
                   1196: 
                   1197:        * compat/endian.h:
                   1198:        Fix check for _BIG_ENDIAN and _LITTLE_ENDIAN (Solaris) and
                   1199:        __BIG_ENDIAN__ and __LITTLE_ENDIAN__ (HP-UX)
                   1200:        [fe35e0b04502]
                   1201: 
                   1202:        * plugins/sudoers/po/sudoers.pot:
                   1203:        regen
                   1204:        [0ddebccd3045]
                   1205: 
                   1206:        * NEWS, doc/sample.sudoers, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   1207:        doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
                   1208:        doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   1209:        Document digest support.
                   1210:        [d794c7b9a7bc]
                   1211: 
                   1212:        * MANIFEST, plugins/sudoers/Makefile.in,
                   1213:        plugins/sudoers/regress/parser/check_base64.c:
                   1214:        Simple bas64 decode unit test.
                   1215:        [344b0df0fe50]
                   1216: 
                   1217:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/base64.c,
                   1218:        plugins/sudoers/match.c, plugins/sudoers/parse.h:
                   1219:        Move base64_decode into its own source file.
                   1220:        [30497e7f88bc]
                   1221: 
                   1222:        * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
                   1223:        Only check year against 2038 if time_t is 32-bit.
                   1224:        [9c1f2e3fc3ba]
                   1225: 
                   1226: 2013-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1227: 
                   1228:        * plugins/sudoers/ldap.c, plugins/sudoers/parse.h,
                   1229:        plugins/sudoers/sssd.c:
                   1230:        Add digest support for sudoers in ldap and sss.
                   1231:        [314937b5e59e]
                   1232: 
                   1233:        * INSTALL, configure, configure.in:
                   1234:        Error out in configure if the compiler doesn't support "long long".
                   1235:        [d3645c1d50d1]
                   1236: 
                   1237:        * plugins/sudoers/match.c, plugins/sudoers/toke.c,
                   1238:        plugins/sudoers/toke.l:
                   1239:        Include stdint.h or inttypes.h before sha2.h
                   1240:        [20ad1c20313d]
                   1241: 
                   1242:        * common/lbuf.c:
                   1243:        Simplify lbuf append functions by moving the realloc code into
                   1244:        lbuf_expand(). We now expand as needed each time bytes need to be
                   1245:        written to the lbuf. Also handle a NULL pointer being passed in for
                   1246:        paranoia's sake.
                   1247:        [6283ee562ef4]
                   1248: 
                   1249:        * plugins/sudoers/iolog.c:
                   1250:        Zero out struct iolog_details early to avoid a potential (though
                   1251:        unlikely) dereference of stack garbage if we hit a fatal error
                   1252:        before iolog_deserialize_info() is called.
                   1253:        [2eeca8be05fb]
                   1254: 
                   1255: 2013-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1256: 
                   1257:        * sudo.pp:
                   1258:        Update copyright year.
                   1259:        [b843c6a43238]
                   1260: 
                   1261:        * plugins/sudoers/sudoers_version.h:
                   1262:        Bump SUDOERS_GRAMMAR_VERSION for new digest support.
                   1263:        [188556fb8156]
                   1264: 
                   1265:        * plugins/sudoers/gram.c, plugins/sudoers/gram.h,
                   1266:        plugins/sudoers/gram.y, plugins/sudoers/match.c,
                   1267:        plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   1268:        Sanity check digest in parser so visudo can catch errors. Add base64
                   1269:        support
                   1270:        [b8586d5cc7ed]
                   1271: 
                   1272:        * MANIFEST, compat/endian.h, config.h.in, configure, configure.in,
                   1273:        plugins/sudoers/Makefile.in, plugins/sudoers/sha2.c:
                   1274:        For big endian architectures just use memcpy() instead of BE macros
                   1275:        in a loop.
                   1276:        [c71a0f4a8a8e]
                   1277: 
                   1278: 2013-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1279: 
                   1280:        * MANIFEST, config.h.in, configure, configure.in,
                   1281:        plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
                   1282:        plugins/sudoers/gram.h, plugins/sudoers/gram.y,
                   1283:        plugins/sudoers/hexchar.c, plugins/sudoers/ldap.c,
                   1284:        plugins/sudoers/match.c, plugins/sudoers/parse.h,
                   1285:        plugins/sudoers/regress/parser/check_digest.c,
                   1286:        plugins/sudoers/regress/parser/check_digest.out.ok,
                   1287:        plugins/sudoers/sha2.h, plugins/sudoers/sssd.c,
                   1288:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   1289:        plugins/sudoers/toke_util.c:
                   1290:        Initial implementation of checksum support in sudoers. Currently
                   1291:        supports SHA-224, SHA-256, SHA-384, SHA-512. TODO: checksum format
                   1292:        validation in parser and base64 support. checksum support for
                   1293:        ldap sudoers
                   1294:        [b8f196346eca]
                   1295: 
                   1296: 2013-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1297: 
                   1298:        * doc/CONTRIBUTORS, plugins/sudoers/sha2.c, plugins/sudoers/sha2.h:
                   1299:        SHA-224, SHA-256, SHA-384 and SHA-512. Derived from the public
                   1300:        domain SHA-1 and SHA-2 implementations by Steve Reid and Wei Dai
                   1301:        respectively.
                   1302:        [7511d07c0a83]
                   1303: 
                   1304: 2013-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1305: 
                   1306:        * NEWS:
                   1307:        Add sudo 1.8.6p8
                   1308:        [0666fd0321ae]
                   1309: 
                   1310:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/po/sudoers.pot:
                   1311:        Add missing "not" in error message when mixing standalone and non-
                   1312:        standalone authentication methods.
                   1313:        [7eba4439db73]
                   1314: 
                   1315:        * plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c:
                   1316:        Check for crypt() returning NULL. Traditionally, crypt() never
                   1317:        returned NULL but newer versions of eglibc have a crypt() that does.
                   1318:        Bug #598
                   1319:        [887b9df243df]
                   1320: 
                   1321:        * plugins/sudoers/auth/pam.c:
                   1322:        Better PAM error messages
                   1323:        [fd7eda53cdd7]
                   1324: 
                   1325:        * plugins/sudoers/auth/kerb5.c:
                   1326:        Better error messages
                   1327:        [98142874a2f4]
                   1328: 
                   1329:        * plugins/sudoers/bsm_audit.c:
                   1330:        Use same error message for getauid() failure.
                   1331:        [07f0d88cb1df]
                   1332: 
                   1333:        * plugins/sudoers/sssd.c:
                   1334:        Start warning with a lower case letter for consistency and to match
                   1335:        existing translated strings.
                   1336:        [b719ac52c9e3]
                   1337: 
                   1338: 2013-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1339: 
                   1340:        * mkpkg:
                   1341:        Disable PIE on Solaris where it is not really supported.
                   1342:        [c36c84cdcc7a]
                   1343: 
                   1344:        * src/ttyname.c:
                   1345:        AIX may have a 64-bit pr_ttydev that we need to convert to 32-bit
                   1346:        before we try to match it against st_rdev.
                   1347:        [5dab449fb962]
                   1348: 
                   1349:        * src/ttyname.c:
                   1350:        Break out of the loop if sudo_ttyname_scan() returns non-NULL. Fixes
                   1351:        a problem finding the tty name when it is not in /dev/pts.
                   1352:        [6c205d087fa0]
                   1353: 
                   1354:        * compat/snprintf.c:
                   1355:        Support %lld and %llu
                   1356:        [feabfa06c954]
                   1357: 
                   1358:        * .hgignore, MANIFEST, src/Makefile.in,
                   1359:        src/regress/ttyname/check_ttyname.c:
                   1360:        Add ttyname test.
                   1361:        [e987038f8c07]
                   1362: 
                   1363: 2013-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1364: 
                   1365:        * plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   1366:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   1367:        plugins/sudoers/po/sl.mo, plugins/sudoers/po/sl.po,
                   1368:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
                   1369:        plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po,
                   1370:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   1371:        src/po/de.mo, src/po/de.po, src/po/fi.mo, src/po/fi.po,
                   1372:        src/po/pl.mo, src/po/pl.po, src/po/ru.mo, src/po/ru.po,
                   1373:        src/po/sl.mo, src/po/sl.po, src/po/uk.mo, src/po/uk.po,
                   1374:        src/po/vi.mo, src/po/vi.po, src/po/zh_CN.mo, src/po/zh_CN.po:
                   1375:        Sync with translationproject.org
                   1376:        [4d7b73b22079]
                   1377: 
                   1378:        * plugins/sudoers/timestamp.c:
                   1379:        Log timestampfile to debug file.
                   1380:        [e997281146c0]
                   1381: 
                   1382:        * plugins/sudoers/auth/pam.c, plugins/sudoers/po/sudoers.pot:
                   1383:        Don't add the "Password: " string we look up in the PAM text domain
                   1384:        to the sudoers.pot file.
                   1385:        [771b52244abf]
                   1386: 
                   1387: 2013-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1388: 
                   1389:        * plugins/sudoers/po/sudoers.pot:
                   1390:        Synce with regcomp() error message change.
                   1391:        [fc6d3dfb8eb8]
                   1392: 
                   1393:        * plugins/sudoers/sudoreplay.c:
                   1394:        Be consistent with error message when regcomp() fails.
                   1395:        [de6c69ba04e4]
                   1396: 
                   1397: 2013-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1398: 
                   1399:        * plugins/sudoers/regress/testsudoers/test5.out.ok,
                   1400:        plugins/sudoers/regress/testsudoers/test5.sh:
                   1401:        Use group -1 instead of 1 as the invalid group since the running
                   1402:        user might have group 1 as their default group.
                   1403:        [71404a9fa75d]
                   1404: 
                   1405:        * plugins/sudoers/Makefile.in:
                   1406:        PWD may be a shell builtin, use CWD instead.
                   1407:        [c443105c5091]
                   1408: 
                   1409: 2013-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1410: 
                   1411:        * plugins/sudoers/check.c:
                   1412:        Split up check_user().
                   1413:        [ce7cc0767589]
                   1414: 
                   1415: 2013-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1416: 
                   1417:        * config.h.in, configure.in:
                   1418:        Cosmetic fixes in the comments.
                   1419:        [640abee43c14]
                   1420: 
                   1421: 2013-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1422: 
                   1423:        * configure, configure.in:
                   1424:        Use AC_LINK_IFELSE instead of AC_TRY_LINK Fix printing of status
                   1425:        message for visibility checks when the test fails.
                   1426:        [99665477ee55]
                   1427: 
                   1428:        * config.h.in:
                   1429:        regen
                   1430:        [00c22606719a]
                   1431: 
                   1432:        * configure, configure.in:
                   1433:        We no longer use mbr_check_membership() and setrlimit64() is AIX-
                   1434:        specific.
                   1435:        [43caf685a1f1]
                   1436: 
                   1437:        * Makefile.in:
                   1438:        The first (all) target must be by itself or some makes will choose
                   1439:        the run the entire target list.
                   1440:        [16cf3def49f5]
                   1441: 
                   1442:        * configure, configure.in:
                   1443:        Do exec_prefix expansion when enable_shared even if noexec is not
                   1444:        enabled.
                   1445:        [7ed28cb32d8d]
                   1446: 
                   1447:        * compat/getgrouplist.c:
                   1448:        Use free() not efree() since we don't include alloc.h here
                   1449:        [1a008737be24]
                   1450: 
                   1451:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   1452:        regen
                   1453:        [b939f941346f]
                   1454: 
                   1455:        * plugins/sudoers/regress/testsudoers/test2.sh,
                   1456:        plugins/sudoers/regress/testsudoers/test3.sh,
                   1457:        plugins/sudoers/regress/testsudoers/test5.sh:
                   1458:        Pass in expected gid to testsudoers in addition to the uid that
                   1459:        matches the test sudoers files.
                   1460:        [6a1710e8cac1]
                   1461: 
                   1462: 2013-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1463: 
                   1464:        * include/missing.h:
                   1465:        Tru64 5.x does declare innetgr() and getdomainname().
                   1466:        [c75598e69c7e]
                   1467: 
                   1468:        * plugins/sudoers/match.c:
                   1469:        Fix compilation when getdomainame() is not present.
                   1470:        [e831b017a962]
                   1471: 
                   1472:        * config.h.in, configure.in, include/missing.h:
                   1473:        Move SET/CLR/ISSET from config.h.in to missing.h
                   1474:        [3a3dd29fd7f0]
                   1475: 
                   1476:        * configure, configure.in:
                   1477:        Fix getgrouplist() check.
                   1478:        [12a2adf60e98]
                   1479: 
                   1480:        * MANIFEST:
                   1481:        No more timestamp.h
                   1482:        [5677e26afc0f]
                   1483: 
                   1484:        * plugins/sudoers/check.c:
                   1485:        Neded sys/time.h for struct timeval in struct sudo_tty_info.
                   1486:        [aceaadd8c400]
                   1487: 
                   1488:        * plugins/sudoers/Makefile.in:
                   1489:        regen depends
                   1490:        [21675a8b67e5]
                   1491: 
                   1492:        * NEWS:
                   1493:        Mention libibmldap on HP-UX
                   1494:        [75b4e4b22950]
                   1495: 
                   1496:        * NEWS, plugins/sudoers/match.c:
                   1497:        Instead of checking the domain name explicitly for "(none)", just
                   1498:        check for illegal characters.
                   1499:        [ce35dda811db]
                   1500: 
                   1501:        * plugins/sudoers/visudo.c:
                   1502:        Only warn once when we are unable to open the sudoers file.
                   1503:        [9e27e3aa5b10]
                   1504: 
                   1505:        * plugins/sudoers/sudoers.c:
                   1506:        Fall back to opening /dev/tty to determine whether there is a tty if
                   1507:        the system doesn't have kernel support for determing the tty.
                   1508:        [2775bcf9a9b5]
                   1509: 
                   1510:        * compat/getprogname.c:
                   1511:        Update guard to take __progname into account
                   1512:        [60eae3f20232]
                   1513: 
                   1514:        * compat/snprintf.c:
                   1515:        Some older systems have inttypes.h but not stdint.h
                   1516:        [ed1ef160015f]
                   1517: 
                   1518:        * compat/closefrom.c, compat/dlopen.c, compat/fnmatch.c,
                   1519:        compat/getaddrinfo.c, compat/getcwd.c, compat/getgrouplist.c,
                   1520:        compat/getline.c, compat/getprogname.c, compat/glob.c,
                   1521:        compat/isblank.c, compat/memrchr.c, compat/mktemp.c,
                   1522:        compat/nanosleep.c, compat/pw_dup.c, compat/sig2str.c,
                   1523:        compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
                   1524:        compat/strsignal.c, compat/utimes.c:
                   1525:        Add guards in compat source files. Not really needed since we only
                   1526:        include them in the Makefile if they are needed but should not hurt
                   1527:        either.
                   1528:        [8cbd3b4595b9]
                   1529: 
                   1530: 2013-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1531: 
                   1532:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
                   1533:        Don't include gram.h in gram.y, its contents are already included.
                   1534:        Move sudoerserror to the end of gram.y so COMMENT is declared when
                   1535:        we need to use it.
                   1536:        [7d72ebdd7222]
                   1537: 
                   1538: 2013-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1539: 
                   1540:        * config.h.in, configure.in:
                   1541:        Remove some pre-ANSI cruft.
                   1542:        [6a95704b2116]
                   1543: 
                   1544:        * plugins/sudoers/match.c:
                   1545:        Rename NAME_MATCH -> SUDOERS_NAME_MATCH and avoid pulling in glob.h
                   1546:        when it is set.
                   1547:        [da40c550ffed]
                   1548: 
                   1549:        * NEWS, plugins/sudoers/iolog_path.c:
                   1550:        We still want to recognize %{seq} for the SUDOERS_NO_SEQ case but
                   1551:        just leave it as-is.
                   1552:        [9a22de140d28]
                   1553: 
                   1554: 2013-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1555: 
                   1556:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
                   1557:        Add missing semicolon in rule.
                   1558:        [817d3f1b2a21]
                   1559: 
                   1560:        * plugins/sudoers/sudoers.c:
                   1561:        Now that we can determine the terminal even when file descriptors
                   1562:        are redirected we can check user_ttypath rather than opening
                   1563:        /dev/tty when enforcing requiretty.
                   1564:        [56a28bc09041]
                   1565: 
                   1566:        * plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
                   1567:        plugins/sudoers/sudoers.h:
                   1568:        Stash umask in struct sudo_user so we don't need to look it up
                   1569:        later.
                   1570:        [9f85749199dc]
                   1571: 
                   1572:        * plugins/sudoers/sudoers.c:
                   1573:        Minor cosmetic change
                   1574:        [c373e106ed49]
                   1575: 
                   1576:        * plugins/sudoers/regress/parser/check_addr.c:
                   1577:        No longer need to declare interfaces
                   1578:        [d7ff7e579557]
                   1579: 
                   1580:        * plugins/sudoers/logging.c:
                   1581:        Fix compilation in SUDOERS_NO_SEQ case
                   1582:        [9a6db9247534]
                   1583: 
                   1584:        * plugins/sudoers/regress/parser/check_addr.c:
                   1585:        No longer need to define sudo_printf
                   1586:        [578ad13c3546]
                   1587: 
                   1588:        * plugins/sudoers/check.c, plugins/sudoers/check.h,
                   1589:        plugins/sudoers/timestamp.c:
                   1590:        Pass auth_pw to the timestamp functions.
                   1591:        [f603649177d6]
                   1592: 
                   1593:        * plugins/sudoers/iolog_path.c:
                   1594:        Fix SUDOERS_NO_SEQ
                   1595:        [17881f9bcd68]
                   1596: 
                   1597:        * plugins/sudoers/locale.c:
                   1598:        Don't need all of sudoers.h in here
                   1599:        [c518150c6483]
                   1600: 
                   1601:        * plugins/sudoers/sudoers.c:
                   1602:        Don't need to include sudoers_version.h here.
                   1603:        [8abb31102119]
                   1604: 
                   1605: 2013-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1606: 
                   1607:        * plugins/sudoers/check.c:
                   1608:        DEFAULT_LECTURE is no longer used.
                   1609:        [f565c00a68c1]
                   1610: 
                   1611:        * plugins/sudoers/policy.c, plugins/sudoers/sudoers.c:
                   1612:        Move sudo_conv into policy.c
                   1613:        [f699aee7136b]
                   1614: 
                   1615:        * plugins/sudoers/pwutil.c:
                   1616:        cosmetic fixes
                   1617:        [930e60389ca8]
                   1618: 
                   1619:        * plugins/sudoers/match.c:
                   1620:        RHEL (and perhaps other Linux distros) use the string "(none)"
                   1621:        instead of an empty string when there is no actual NIS-style domain
                   1622:        name. Bug #596
                   1623:        [11aec11489ac]
                   1624: 
                   1625:        * plugins/sudoers/match.c:
                   1626:        Fix return values when NAME_MATCH is defined.
                   1627:        [ce030be9ccef]
                   1628: 
                   1629: 2013-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1630: 
                   1631:        * plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h:
                   1632:        Update copyright year.
                   1633:        [7e4b8d49addd]
                   1634: 
                   1635:        * plugins/sudoers/pwutil.c, plugins/sudoers/pwutil.h,
                   1636:        plugins/sudoers/pwutil_impl.c, plugins/sudoers/sudoers.h:
                   1637:        Add sudo_set_grlist(), currently unused by the back end.
                   1638:        [b37ac1d0e8fc]
                   1639: 
                   1640:        * plugins/sudoers/pwutil.c:
                   1641:        Remove unused macros, fix a debug_decl
                   1642:        [6136fb4a0d3b]
                   1643: 
                   1644:        * include/missing.h:
                   1645:        Tru64 Unix doesn't prototype innetgr() or getdomainname().
                   1646:        [585ac1874dfe]
                   1647: 
                   1648:        * include/missing.h:
                   1649:        Whitespace fixes
                   1650:        [0bb28cd91d97]
                   1651: 
                   1652:        * common/error.c:
                   1653:        Don't need to include setjmp.h here, error.h already includes it.
                   1654:        [fd05ab00e186]
                   1655: 
                   1656: 2013-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1657: 
                   1658:        * compat/Makefile.in, plugins/sudoers/Makefile.in:
                   1659:        regen depends
                   1660:        [57991f5e16b4]
                   1661: 
                   1662:        * plugins/sudoers/check.h:
                   1663:        Rename guard define.
                   1664:        [ccf4dba241d6]
                   1665: 
                   1666:        * plugins/sudoers/check.c, plugins/sudoers/check.h,
                   1667:        plugins/sudoers/timestamp.c, plugins/sudoers/timestamp.h:
                   1668:        Move contents of timestamp.h into check.h.
                   1669:        [c139757a9283]
                   1670: 
                   1671:        * plugins/sudoers/sudoers.h:
                   1672:        expand_prompt() is now in prompt.c sudo_printf extern is now in
                   1673:        error.h
                   1674:        [219bd74ca62b]
                   1675: 
                   1676:        * plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.h,
                   1677:        plugins/sudoers/ins_2001.h, plugins/sudoers/ins_classic.h,
                   1678:        plugins/sudoers/ins_csops.h, plugins/sudoers/ins_goons.h,
                   1679:        plugins/sudoers/insults.h, plugins/sudoers/interfaces.h,
                   1680:        plugins/sudoers/linux_audit.h, plugins/sudoers/logging.h,
                   1681:        plugins/sudoers/parse.h, plugins/sudoers/pwutil.h,
                   1682:        plugins/sudoers/redblack.h, plugins/sudoers/sudo_nss.h,
                   1683:        plugins/sudoers/sudoers.h, plugins/sudoers/timestamp.h,
                   1684:        plugins/sudoers/toke.h:
                   1685:        Change multiple inclusion guards to be _SUDOERS_FOO_H
                   1686:        [faace6d55e78]
                   1687: 
                   1688: 2013-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1689: 
                   1690:        * MANIFEST, plugins/sudoers/po/nl.mo, plugins/sudoers/po/nl.po,
                   1691:        src/po/nl.mo, src/po/nl.po, src/po/tr.mo, src/po/tr.po:
                   1692:        New Dutch translation for sudo and sudoers New Turkish translation
                   1693:        for sudo From translationproject.org
                   1694:        [bc918b7b23a4]
                   1695: 
                   1696: 2013-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1697: 
                   1698:        * config.h.in, configure, configure.in:
                   1699:        Fix a typo in a comment and make sure we don't mistakenly include
                   1700:        _PATH_SUDO_ASKPASS and _PATH_SUDO_SESH in config.h.in
                   1701:        [694d12ac70ec]
                   1702: 
                   1703: 2013-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1704: 
                   1705:        * plugins/sudoers/Makefile.in:
                   1706:        Don't build check_symbols if we are linking sudoers in statically.
                   1707:        [f6602723bab7]
                   1708: 
                   1709:        * configure, configure.in:
                   1710:        Use $host_os not $host when we only care about the os name and
                   1711:        version.
                   1712:        [05e4f4fcba06]
                   1713: 
                   1714:        * aclocal.m4, configure, configure.in:
                   1715:        Suppress duplicate -L and -I flags.
                   1716:        [228f2f581aed]
                   1717: 
                   1718:        * common/Makefile.in, compat/regress/fnmatch/fnm_test.c:
                   1719:        Fix regress tests on non-OpenBSD platforms.
                   1720:        [9d91bc859c50]
                   1721: 
                   1722:        * configure, configure.in:
                   1723:        If we find sasl/sasl.h there's no need to check for sasl.h too
                   1724:        [889efaa86012]
                   1725: 
                   1726:        * aclocal.m4, configure, configure.in:
                   1727:        Add -R flags at the very end after configure link tests are done
                   1728:        since we can only count on libtool to accept -R, the compiler front
                   1729:        end may not. Also unify the libldap and libibmldap tests using
                   1730:        AC_SEARCH_LIBS and check for -lCsup on HP-UX which is needed by
                   1731:        libibmldap (but is not an explicit dependency).
                   1732:        [ab1451894351]
                   1733: 
                   1734: 2013-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1735: 
                   1736:        * configure, configure.in:
                   1737:        Back out changes that broke detection of skey, opie and ldap
                   1738:        libraries.
                   1739:        [ffa82b8f8641]
                   1740: 
                   1741:        * plugins/sudoers/regress/testsudoers/test1.sh,
                   1742:        plugins/sudoers/regress/testsudoers/test2.sh,
                   1743:        plugins/sudoers/regress/testsudoers/test3.sh,
                   1744:        plugins/sudoers/regress/testsudoers/test4.sh,
                   1745:        plugins/sudoers/regress/testsudoers/test5.sh,
                   1746:        plugins/sudoers/regress/visudo/test1.sh,
                   1747:        plugins/sudoers/regress/visudo/test2.sh,
                   1748:        plugins/sudoers/regress/visudo/test3.sh:
                   1749:        Add explicit "exit 0" to prevent the check target from ending
                   1750:        prematurely.
                   1751:        [cca411b492bd]
                   1752: 
                   1753:        * plugins/sudoers/Makefile.in:
                   1754:        Fix exit values in check target so we don't have to ignore errors.
                   1755:        [cbc429c409e9]
                   1756: 
                   1757:        * plugins/sudoers/Makefile.in:
                   1758:        Fail a test if there is unexpected stderr output.
                   1759:        [4fc24d536bec]
                   1760: 
                   1761:        * MANIFEST:
                   1762:        Fix path to sudo.conf manuals; remove non-existant test2.err.ok
                   1763:        [6b8bcd60dd85]
                   1764: 
                   1765:        * src/load_plugins.c:
                   1766:        Fix compilation in dynamic mode.
                   1767:        [679856fa0774]
                   1768: 
                   1769:        * configure, configure.in:
                   1770:        On HP-UX, libibmldap has a hidden dependency on libCsup
                   1771:        [22994709d77c]
                   1772: 
                   1773:        * compat/dlopen.c:
                   1774:        Pass BIND_VERBOSE to shl_load()
                   1775:        [0060b9cfa9ab]
                   1776: 
                   1777:        * configure, configure.in:
                   1778:        Only create static helper libs when --disable-shared is specified.
                   1779:        [1fcdb1a437e0]
                   1780: 
                   1781:        * src/load_plugins.c:
                   1782:        Ubreak static build.
                   1783:        [4ac9f96be285]
                   1784: 
                   1785:        * INSTALL, aclocal.m4, configure, configure.in:
                   1786:        Replace --with-rpath and --with-blibpath with --disable-rpath. Now
                   1787:        that we use libtool for linking we can just use the -R flag and have
                   1788:        libtool translate it to the proper linker flag.
                   1789:        [09798fad6888]
                   1790: 
                   1791: 2013-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1792: 
                   1793:        * src/exec_pty.c:
                   1794:        Bump I/O buffer size 32K
                   1795:        [4ef793225309]
                   1796: 
                   1797: 2013-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1798: 
                   1799:        * configure, configure.in, doc/sudo.conf.cat, doc/sudo.conf.man.in,
                   1800:        doc/sudo.conf.mdoc.in:
                   1801:        Document sesh Path setting.
                   1802:        [34b0b903b4f8]
                   1803: 
                   1804:        * src/exec.c, src/exec_common.c:
                   1805:        Move exec_cmnd to exec.c to fix a compilation issue with sesh.c
                   1806:        [06aa1956f38d]
                   1807: 
                   1808:        * common/sudo_conf.c, configure, configure.in, include/sudo_conf.h,
                   1809:        src/selinux.c:
                   1810:        Make sesh path configurable in sudo.conf
                   1811:        [91d331f273b7]
                   1812: 
                   1813:        * configure, configure.in:
                   1814:        Use -fno-pie and -nopie if supported when --disable-pie is
                   1815:        specified.
                   1816:        [777138c04dcc]
                   1817: 
                   1818: 2013-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1819: 
                   1820:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
                   1821:        Document direct execution of the command if the policy plugin has no
                   1822:        close function.
                   1823:        [6a14145c6e80]
                   1824: 
                   1825: 2013-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1826: 
                   1827:        * plugins/sudoers/auth/pam.c:
                   1828:        Only delete creds if we actually established them. Print an error if
                   1829:        pam_setcred() fails and we actually authenticated.
                   1830:        [1e015314903b]
                   1831: 
                   1832:        * common/Makefile.in, plugins/group_file/Makefile.in:
                   1833:        regen
                   1834:        [dd8cee2a5e1b]
                   1835: 
                   1836:        * common/alloc.c, include/alloc.h:
                   1837:        Convert efree() to a macro that just casts to void * and does
                   1838:        free(). If the system free() can't handle free(NULL) this may crash
                   1839:        but C89 was a long time ago.
                   1840:        [efd0ff9270fb]
                   1841: 
                   1842:        * configure, configure.in:
                   1843:        Define _REENTRANT for HP-UX when we add -lpthread to SUDO_LIBS.
                   1844:        Fixes a problem with errno sometimes not being set on error on HP-
                   1845:        UX.
                   1846:        [54b419d58320]
                   1847: 
                   1848:        * common/sudo_debug.c:
                   1849:        Fix debug logging from the plugin when there is no error number.
                   1850:        This was broken in the big debugging reorg for 1.8.7.
                   1851:        [2ea7e145e928]
                   1852: 
                   1853: 2013-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1854: 
                   1855:        * configure, configure.in, plugins/group_file/Makefile.in,
                   1856:        plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
                   1857:        plugins/system_group/Makefile.in, src/load_plugins.c:
                   1858:        Always install plugins with a .so extension regardless of what
                   1859:        extension the system uses for shared libraries. That way the
                   1860:        group_plugin sudoers setting can be shared between heterogenous
                   1861:        systems.
                   1862:        [a7e6ecff6fdf]
                   1863: 
                   1864:        * plugins/sudoers/match.c:
                   1865:        Mac OS X has netgroup functions in netdb.h.
                   1866:        [243881a974aa]
                   1867: 
                   1868:        * plugins/sudoers/parse.h:
                   1869:        Tags in struct cmndtag can be set to IMPLIED as well.
                   1870:        [cb6926988cc8]
                   1871: 
                   1872:        * plugins/sudoers/parse.c:
                   1873:        Quiet a compiler warning.
                   1874:        [14e608c2001d]
                   1875: 
                   1876:        * plugins/sudoers/testsudoers.c:
                   1877:        Quiet an llvm checker warning.
                   1878:        [2eeb9f3d08f3]
                   1879: 
                   1880:        * plugins/sudoers/parse.c:
                   1881:        Quiet gcc -Wuninitialized false positive
                   1882:        [643ad987503d]
                   1883: 
                   1884: 2013-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1885: 
                   1886:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   1887:        doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
                   1888:        doc/sudoers.mdoc.in:
                   1889:        Document group_file and system_group plugins.
                   1890:        [b56511e79230]
                   1891: 
                   1892:        * NEWS:
                   1893:        Sudo 1.8.7
                   1894:        [e95183b8fa27]
                   1895: 
                   1896:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   1897:        Try to clarify that sudoedit in sudoers should not include a leading
                   1898:        pathname.
                   1899:        [7b2beac92a9c]
                   1900: 
                   1901:        * plugins/sudoers/pwutil_impl.c:
                   1902:        Make sure groupname_len is at least 32 just to be on the safe side.
                   1903:        It is better to allocate a little extra and not need it than to have
                   1904:        to reallocate and start over.
                   1905:        [6d3e1ba47de9]
                   1906: 
                   1907:        * include/alloc.h, include/missing.h:
                   1908:        Add __malloc_like macro to apply __malloc__ attribute to emalloc,
                   1909:        ecalloc and estrdup. It cannot be applied to realloc since that may
                   1910:        return the same pointer.
                   1911:        [8d70cb81d1f1]
                   1912: 
                   1913:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   1914:        Fix potential double free in an error path.
                   1915:        [657573feb6a4]
                   1916: 
                   1917:        * src/exec_pty.c:
                   1918:        When running the command in a pty, defer the call to exec_setup()
                   1919:        until just before we exec the command. This is consistent with the
                   1920:        non-pty path. As a side effect, the monitor process runs as root
                   1921:        and not the runas user.
                   1922:        [e2a7f8c7ee4c]
                   1923: 
                   1924: 2013-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1925: 
                   1926:        * compat/closefrom.c:
                   1927:        Update copyright year.
                   1928:        [9b652af4dfc0]
                   1929: 
                   1930: 2013-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1931: 
                   1932:        * compat/closefrom.c:
                   1933:        Use pst_highestfd from pstat_getproc() on HP-UX.
                   1934:        [09f3fea46a3d]
                   1935: 
                   1936: 2013-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1937: 
                   1938:        * Makefile.in, common/Makefile.in, doc/Makefile.in,
                   1939:        plugins/sudoers/Makefile.in:
                   1940:        Clean up generated test files and other minor housekeeping.
                   1941:        [f5f4fdd908e1]
                   1942: 
                   1943:        * plugins/sudoers/iolog.c:
                   1944:        Add back gettimeofday() call inadvertantly removed in e1abb9810a83
                   1945:        [675cce8401ae]
                   1946: 
                   1947:        * config.h.in, configure, configure.in, src/ttyname.c:
                   1948:        Use pstat() on HP-UX to determine the tty device.
                   1949:        [2884af22a9df]
                   1950: 
                   1951:        * plugins/sudoers/auth/pam.c:
                   1952:        Fix PAM compilation: def_pam_session, not just pam_session.
                   1953:        [5417d7acc6ea]
                   1954: 
                   1955:        * doc/fixmdoc.sh:
                   1956:        Don't remove the -S option description when trimming out selinux.
                   1957:        Bug #592
                   1958:        [8a94f2cfa0a0]
                   1959: 
                   1960: 2013-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1961: 
                   1962:        * NEWS:
                   1963:        Update for Sudo 1.8.6p7
                   1964:        [0858a73e9c40]
                   1965: 
                   1966: 2013-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1967: 
                   1968:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
                   1969:        Document when sudo may exec the command directly instead of forking.
                   1970:        [da41951edc28]
                   1971: 
                   1972:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   1973:        doc/sudo_plugin.mdoc.in:
                   1974:        Document that close and version be NULL for plugin API >= 1.3 and
                   1975:        that sudo may execute the command directly if there is no close, or
                   1976:        pty or timeout needed.
                   1977:        [e5f929ddeaf8]
                   1978: 
                   1979:        * plugins/sudoers/auth/sudo_auth.c:
                   1980:        Fix debug_decl for sudo_auth_begin_session and
                   1981:        sudo_auth_end_session.
                   1982:        [58243392c0df]
                   1983: 
                   1984:        * configure, configure.in, doc/sudoers.cat, doc/sudoers.man.in,
                   1985:        doc/sudoers.mdoc.in, plugins/sudoers/auth/pam.c,
                   1986:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
                   1987:        plugins/sudoers/def_data.in, plugins/sudoers/defaults.c:
                   1988:        Add pam_session sudoers option.
                   1989:        [d994465db9f1]
                   1990: 
                   1991:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/policy.c,
                   1992:        plugins/sudoers/sudoers.h:
                   1993:        Dummy out close function if there is no end_session for the auth
                   1994:        method and the front-end can handle a NULL close function. Avoids
                   1995:        the extra sudo process when we don't actually need it.
                   1996:        [74886d5b0fb6]
                   1997: 
                   1998: 2013-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   1999: 
                   2000:        * Makefile.in, aclocal.m4:
                   2001:        Add m4/ to paths m4_include parameters so we don't need to use
                   2002:        autoconf's -I flag.
                   2003:        [4fd86e7a84f3]
                   2004: 
                   2005:        * src/exec.c, src/exec_common.c, src/exec_pty.c, src/sudo_exec.h,
                   2006:        src/sudo_plugin_int.h:
                   2007:        If the policy plugin does not provide a close function, there is no
                   2008:        command timeout and no pty is required, skip the event loop and just
                   2009:        exec the command directly.
                   2010:        [ad532f107170]
                   2011: 
                   2012:        * src/sudo.c:
                   2013:        Do not crash if the plugin close and version functions are not
                   2014:        defined. If there is no policy close function, simply print a
                   2015:        warning that the command was not found.
                   2016:        [c789a9dd54e8]
                   2017: 
                   2018: 2013-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2019: 
                   2020:        * plugins/sudoers/parse.c:
                   2021:        Fix typos in selinux/solaris privs specific code.
                   2022:        [9af3999361b4]
                   2023: 
                   2024:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2025:        doc/sudo_plugin.mdoc.in, src/parse_args.c:
                   2026:        Pass the default plugin directory to the plugin via the settings
                   2027:        list. Could be used by a stacking plugin.
                   2028:        [688e771fc145]
                   2029: 
                   2030:        * plugins/sudoers/timestamp.c:
                   2031:        Completely ignore time stamp file if it is set to the epoch,
                   2032:        regardless of what gettimeofday() returns.
                   2033:        [df58842af660]
                   2034: 
                   2035:        * doc/CONTRIBUTORS:
                   2036:        Add Nikolai Kondrashov
                   2037:        [df59791438f9]
                   2038: 
                   2039:        * plugins/sudoers/ldap.c, plugins/sudoers/sssd.c:
                   2040:        Use userpw_matches() for username matching so #uid works for
                   2041:        sudoRunAsUser.
                   2042:        [a124062334df]
                   2043: 
                   2044:        * plugins/sudoers/sssd.c:
                   2045:        Avoid calling realloc3() with a zero size parameter when all
                   2046:        retrieved sssd rules fail. Otherwise we'll get a run-time error due
                   2047:        to malloc(0) checking.
                   2048:        [84dfcb73ebd7]
                   2049: 
                   2050:        * plugins/sudoers/sssd.c:
                   2051:        Do not send error mail if a user is not found in SSSD. Local users
                   2052:        can run sudo too. From Nikolai Kondrashov
                   2053:        [3d2ae99ee468]
                   2054: 
                   2055: 2013-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2056: 
                   2057:        * MANIFEST, common/regress/sudo_conf/test4.in,
                   2058:        common/regress/sudo_conf/test4.out.ok:
                   2059:        Test setting disable_coredump to illegal value.
                   2060:        [3c71c6c49027]
                   2061: 
                   2062:        * common/sudo_conf.c:
                   2063:        Fix atobool() usage.
                   2064:        [d40c9f4d06b0]
                   2065: 
                   2066:        * common/regress/sudo_conf/conf_test.c:
                   2067:        Remove unused variable.
                   2068:        [328b524b365b]
                   2069: 
                   2070:        * plugins/sudoers/sudoers.c:
                   2071:        Make "sudo -l non_existent_command" warn that non_existent_command
                   2072:        doesn't exist, not the "list" pseudo-command.
                   2073:        [9dc0388fc4f3]
                   2074: 
                   2075:        * plugins/sudoers/parse.c:
                   2076:        Make sudoers file long list output better match the format used by
                   2077:        ldap sudoers. Tags are now converted to options and there is a
                   2078:        single command per line.
                   2079:        [6e6dc3f20d84]
                   2080: 
                   2081:        * doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
                   2082:        doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   2083:        Use the correct the sudoers policy symbol names and undo an editor
                   2084:        goof committed when adding max_groups to sudo.conf.
                   2085:        [2a6f7ddf5cc3]
                   2086: 
                   2087:        * plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c:
                   2088:        For "sudo -l" start a new line if the runas list changes to make the
                   2089:        output easier to read.
                   2090:        [7dc3d724c924]
                   2091: 
                   2092: 2013-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2093: 
                   2094:        * plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c:
                   2095:        For "sudo -l" and "sudo -ll" only print the runas info for
                   2096:        subsequent commands in a list if the runas info has changed. If we
                   2097:        have new runas info, print out the tags again so as to be less
                   2098:        confusing to the user. For "sudo -ll" set the line continuation
                   2099:        indent to 8.
                   2100:        [b5ec02fe7fc1]
                   2101: 
                   2102: 2013-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2103: 
                   2104:        * MANIFEST, Makefile.in, configure, configure.in, doc/sudoers.cat,
                   2105:        doc/sudoers.man.in, doc/sudoers.mdoc.in,
                   2106:        plugins/group_file/Makefile.in, plugins/group_file/getgrent.c,
                   2107:        plugins/group_file/group_file.c, plugins/group_file/group_file.exp,
                   2108:        plugins/group_file/plugin_test.c, plugins/sample_group/Makefile.in,
                   2109:        plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
                   2110:        plugins/sample_group/sample_group.c,
                   2111:        plugins/sample_group/sample_group.exp:
                   2112:        Rename sample_group plugin to group_file. Install group_file and
                   2113:        system_group plugins by default.
                   2114:        [951b3e446fae]
                   2115: 
                   2116:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
                   2117:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
                   2118:        plugins/sudoers/def_data.in, plugins/sudoers/iolog.c,
                   2119:        plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
                   2120:        plugins/sudoers/sudoers.h:
                   2121:        Add maxseq sudoers option to limit the max number of I/O log files.
                   2122:        [e1abb9810a83]
                   2123: 
                   2124: 2013-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2125: 
                   2126:        * plugins/sudoers/iolog.c:
                   2127:        Log lines and columns in the iolog file.
                   2128:        [03adb6230e05]
                   2129: 
                   2130: 2013-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2131: 
                   2132:        * MANIFEST, common/Makefile.in, common/regress/sudo_conf/conf_test.c,
                   2133:        common/regress/sudo_conf/test1.in,
                   2134:        common/regress/sudo_conf/test1.out.ok,
                   2135:        common/regress/sudo_conf/test2.in,
                   2136:        common/regress/sudo_conf/test2.out.ok,
                   2137:        common/regress/sudo_conf/test3.in,
                   2138:        common/regress/sudo_conf/test3.out.ok, common/sudo_conf.c,
                   2139:        include/sudo_conf.h, plugins/sudoers/sudoreplay.c,
                   2140:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c, src/sesh.c,
                   2141:        src/sudo.c:
                   2142:        Add simple regress tests for sudo.conf parsing.
                   2143:        [3c36b61bf61c]
                   2144: 
                   2145:        * src/sudo.c:
                   2146:        Always display the I/O plugin version as long as its open functions
                   2147:        doesn't return an error. Previously it was only displayed if the
                   2148:        plugin open returned 1.
                   2149:        [4b0277db3f8c]
                   2150: 
                   2151:        * plugins/sudoers/pwutil_impl.c:
                   2152:        Use sysconf(_SC_LOGIN_NAME_MAX) to find max username length instead
                   2153:        of poking around in struct utmpx.
                   2154:        [2c0cc5c42958]
                   2155: 
                   2156:        * plugins/sudoers/pwutil_impl.c, src/parse_args.c, src/sudo.c:
                   2157:        #include "sudo_usage.h" not <sudo_usage.h> so we get the one in the
                   2158:        build directory and not the src dir when using a separate build
                   2159:        directory.
                   2160:        [1fcb7ba13018]
                   2161: 
                   2162: 2013-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2163: 
                   2164:        * common/fileops.c:
                   2165:        If a line was longer that 0x80000000 the bit hack to round to the
                   2166:        next power of two would roll over to zero.
                   2167:        [f4f729cf6f0f]
                   2168: 
                   2169:        * plugins/sudoers/policy.c, plugins/sudoers/pwutil_impl.c,
                   2170:        plugins/sudoers/sudoers.h, src/sudo.c:
                   2171:        Use max_groups in front-end and plugin.
                   2172:        [bf1e74166831]
                   2173: 
                   2174:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2175:        doc/sudo_plugin.mdoc.in, src/parse_args.c:
                   2176:        Pass max_groups to plugin in settings list.
                   2177:        [d7d76e8651f4]
                   2178: 
                   2179:        * common/sudo_conf.c, doc/sudo.conf.cat, doc/sudo.conf.man.in,
                   2180:        doc/sudo.conf.mdoc.in, include/sudo_conf.h:
                   2181:        Add max_groups setting to sudo.conf (currently unused) and remove
                   2182:        unused return value from setters.
                   2183:        [f6494f71e1f0]
                   2184: 
                   2185: 2013-02-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2186: 
                   2187:        * INSTALL:
                   2188:        Reorganize configure options
                   2189:        [23475de8039f]
                   2190: 
                   2191: 2013-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2192: 
                   2193:        * NEWS:
                   2194:        Add Sudo 1.8.6p7
                   2195:        [5192fc511cbe]
                   2196: 
                   2197: 2013-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2198: 
                   2199:        * INSTALL.configure:
                   2200:        Sync with autoconf 2.68
                   2201:        [985e5c8efa4e]
                   2202: 
                   2203:        * INSTALL, README:
                   2204:        Remove obsolete OS notes and move build requirements to INSTALL.
                   2205:        [bf0dd53ca164]
                   2206: 
                   2207: 2013-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2208: 
                   2209:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2210:        doc/sudo_plugin.mdoc.in:
                   2211:        Sort elements of the settings, user_info and command_info lists.
                   2212:        [663062ada5b7]
                   2213: 
                   2214:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
                   2215:        Remove trailing white space
                   2216:        [027916a6c8e7]
                   2217: 
                   2218:        * plugins/sudoers/policy.c, plugins/sudoers/sudoers.h,
                   2219:        plugins/sudoers/timestamp.c, plugins/sudoers/timestamp.h:
                   2220:        Store the session ID in the tty ticket file too. A tty may only be
                   2221:        in one session at a time so if the session ID doesn't match we
                   2222:        ignore the ticket.
                   2223:        [4eb2cb8df48b]
                   2224: 
                   2225: 2013-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2226: 
                   2227:        * plugins/sudoers/sudoers.c, src/sudo.c:
                   2228:        Move tzset() call from sudoers plugin to sudo front end.
                   2229:        [3c058dad8772]
                   2230: 
                   2231:        * doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in,
                   2232:        doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   2233:        doc/sudoers.ldap.mdoc.in:
                   2234:        Mention line continuation
                   2235:        [399873f8c805]
                   2236: 
                   2237:        * MANIFEST, common/Makefile.in, common/fileops.c,
                   2238:        common/regress/sudo_parseln/parseln_test.c,
                   2239:        common/regress/sudo_parseln/test1.in,
                   2240:        common/regress/sudo_parseln/test1.out.ok,
                   2241:        common/regress/sudo_parseln/test2.in,
                   2242:        common/regress/sudo_parseln/test2.out.ok,
                   2243:        common/regress/sudo_parseln/test3.in,
                   2244:        common/regress/sudo_parseln/test3.out.ok,
                   2245:        common/regress/sudo_parseln/test4.in,
                   2246:        common/regress/sudo_parseln/test4.out.ok,
                   2247:        common/regress/sudo_parseln/test5.in,
                   2248:        common/regress/sudo_parseln/test5.out.ok,
                   2249:        common/regress/sudo_parseln/test6.in,
                   2250:        common/regress/sudo_parseln/test6.out.ok, common/sudo_conf.c,
                   2251:        include/fileops.h, plugins/sudoers/env.c, plugins/sudoers/ldap.c,
                   2252:        plugins/sudoers/sudo_nss.c:
                   2253:        Add line continuation support to sudo_parseln() and make it use
                   2254:        getline() instead of fgets() internally.
                   2255:        [d02bf3973fc5]
                   2256: 
                   2257: 2013-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2258: 
                   2259:        * plugins/sample/sample_plugin.c:
                   2260:        Fix memory leak in error path; found by llvm checker
                   2261:        [d090c26a5b00]
                   2262: 
                   2263:        * plugins/sudoers/sudoreplay.c:
                   2264:        Remove useless store detected by llvm checker.
                   2265:        [12a4db91651a]
                   2266: 
                   2267:        * configure, configure.in, doc/UPGRADE, mkpkg, src/Makefile.in,
                   2268:        src/load_plugins.c, sudo.pp:
                   2269:        Sudo now stores its libexec files in a "sudo" subdirectory instead
                   2270:        of in libexec itself. For backwards compatibility, if the plugin is
                   2271:        not found in the default plugin directory, sudo will check the
                   2272:        parent directory default directory ends in "/sudo".
                   2273:        [5de67de76489]
                   2274: 
                   2275:        * plugins/sample/sample_plugin.c, plugins/sample_group/sample_group.c,
                   2276:        plugins/system_group/system_group.c:
                   2277:        Add missing __dso_public to plugin structs so they are exported.
                   2278:        [dde703577621]
                   2279: 
                   2280:        * doc/sudo.conf.cat, doc/sudo.conf.man.in, doc/sudo.conf.mdoc.in:
                   2281:        Mention that sudoers has its own plugins too.
                   2282:        [0a6c6203b512]
                   2283: 
                   2284: 2013-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2285: 
                   2286:        * doc/visudo.cat, doc/visudo.man.in, doc/visudo.mdoc.in:
                   2287:        Correct last change date.
                   2288:        [45894291d792]
                   2289: 
                   2290:        * doc/sudo.cat, doc/sudo.conf.cat, doc/sudo.conf.man.in,
                   2291:        doc/sudo.conf.mdoc.in, doc/sudo.man.in, doc/sudo.mdoc.in,
                   2292:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2293:        doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
                   2294:        doc/sudoers.mdoc.in:
                   2295:        Remove duplicated sudo.conf info in the sudo, sudoers and
                   2296:        sudo_plugin manuals and cross-reference the new sudo.conf manual.
                   2297:        [b808ba29cf3a]
                   2298: 
                   2299:        * doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in:
                   2300:        Fix typos
                   2301:        [0e70964150c6]
                   2302: 
                   2303:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   2304:        doc/sudoers.ldap.mdoc.in:
                   2305:        Fix some typos.
                   2306:        [94ae045cfbc6]
                   2307: 
                   2308:        * MANIFEST, doc/Makefile.in, doc/sudo.conf.cat, doc/sudo.conf.man.in,
                   2309:        doc/sudo.conf.mdoc.in:
                   2310:        Add standalone sudo.conf manual page.
                   2311:        [d64d949b700c]
                   2312: 
                   2313:        * doc/sample.sudo.conf:
                   2314:        add group_source example
                   2315:        [118c1ba1c014]
                   2316: 
                   2317:        * configure, configure.in, doc/sample.sudo.conf, doc/sudo.man.in,
                   2318:        doc/sudo.mdoc.in, doc/sudo_plugin.man.in, doc/sudo_plugin.mdoc.in,
                   2319:        doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   2320:        Use PLUGINDIR in the manuals and fix a typo in the sample sudo.conf.
                   2321:        [f5bd6006dc1c]
                   2322: 
                   2323:        * plugins/sudoers/po/it.mo, plugins/sudoers/po/it.po, src/po/it.mo,
                   2324:        src/po/it.po:
                   2325:        Sync with translationproject.org
                   2326:        [a6f2b9aac371]
                   2327: 
                   2328: 2013-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2329: 
                   2330:        * plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   2331:        plugins/sudoers/po/vi.mo, plugins/sudoers/po/vi.po, src/po/fi.mo,
                   2332:        src/po/fi.po, src/po/gl.mo, src/po/gl.po, src/po/vi.mo,
                   2333:        src/po/vi.po:
                   2334:        Sync with translationproject.org
                   2335:        [ba546666969d]
                   2336: 
                   2337: 2013-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2338: 
                   2339:        * plugins/sudoers/po/da.po, plugins/sudoers/po/eo.mo,
                   2340:        plugins/sudoers/po/eo.po, src/po/da.po, src/po/eo.mo, src/po/eo.po,
                   2341:        src/po/es.po, src/po/gl.po:
                   2342:        Sync with translationproject.org
                   2343:        [cdc454e34c03]
                   2344: 
                   2345: 2013-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2346: 
                   2347:        * NEWS:
                   2348:        Clarify ttyname changes.
                   2349:        [cbf2f80fe582]
                   2350: 
                   2351:        * NEWS:
                   2352:        Add 1.8.6p6
                   2353:        [3aa591e98b3b]
                   2354: 
                   2355:        * src/ttyname.c:
                   2356:        Remove ttyname() fall back code on systems where we can query the
                   2357:        kernel for the tty device via /proc or sysctl(). If there is no
                   2358:        controlling tty, it is better to just treat the tty as unknown
                   2359:        rather than to blindly use what is hooked up to std{in,out,err}.
                   2360:        [b2bd3005d2e4]
                   2361: 
                   2362: 2013-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2363: 
                   2364:        * common/sudo_conf.c, include/sudo_conf.h, src/sudo.c:
                   2365:        Add group_source setting in sudo.conf to allow the admin to specify
                   2366:        how a user's groups are looked up. Legal values are static (just
                   2367:        the kernel list from getgroups), dynamic (whatever the group
                   2368:        database includes) and adaptive (only use group db if kernel group
                   2369:        list is full).
                   2370:        [87a5b02e22ad]
                   2371: 
                   2372:        * plugins/sudoers/policy.c:
                   2373:        Pass back exec_background to front end if it is enabled in sudoers.
                   2374:        [8230e1cd0bbd]
                   2375: 
                   2376:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   2377:        Mention that exec_background is for 1.8.7 and higher only.
                   2378:        [fdf0d5a3e182]
                   2379: 
                   2380: 2013-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2381: 
                   2382:        * MANIFEST:
                   2383:        Add missing test files.
                   2384:        [1165389aa5e6]
                   2385: 
                   2386:        * plugins/sudoers/regress/visudo/test3.err.ok,
                   2387:        plugins/sudoers/regress/visudo/test3.out.ok,
                   2388:        plugins/sudoers/regress/visudo/test3.sh:
                   2389:        Add regress test for bug 361
                   2390:        [54c7fb61b82d]
                   2391: 
                   2392:        * plugins/sudoers/iolog.c:
                   2393:        Add __dso_public to extern declaration of declaration to match
                   2394:        actual definition.
                   2395:        [4695ded501e6]
                   2396: 
                   2397:        * NEWS:
                   2398:        Add 1.8.6p5
                   2399:        [b07b28c5c4d7]
                   2400: 
                   2401: 2013-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2402: 
                   2403:        * MANIFEST, plugins/sudoers/regress/visudo/test2.err.ok,
                   2404:        plugins/sudoers/regress/visudo/test2.out.ok,
                   2405:        plugins/sudoers/regress/visudo/test2.sh:
                   2406:        Add test for visudo cycle check core dump; test case from Daniel
                   2407:        Kopecek
                   2408:        [41074541147a]
                   2409: 
                   2410:        * plugins/sudoers/visudo.c:
                   2411:        Fix potential stack overflow due to infinite recursion in alias
                   2412:        cycle detection. From Daniel Kopecek.
                   2413:        [d7e018a87434]
                   2414: 
                   2415:        * common/sudo_conf.c, include/sudo_conf.h, src/load_plugins.c:
                   2416:        Ignore duplicate entries in sudo.conf and report the line number
                   2417:        when there is an error. Warn, don't abort if there is more than one
                   2418:        policy plugin.
                   2419:        [dfcb5a698f0a]
                   2420: 
                   2421:        * plugins/sudoers/tsgetgrpw.c:
                   2422:        Use strtoul() not atoi().
                   2423:        [58a52cf9b6b8]
                   2424: 
                   2425: 2013-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2426: 
                   2427:        * compat/Makefile.in:
                   2428:        regen depends for to add compat/nss_dbdefs.h for getgrouplist.lo
                   2429:        [9b44e9d26d16]
                   2430: 
                   2431:        * compat/nss_dbdefs.h:
                   2432:        Fix typo that breaks the build on HP-UX.
                   2433:        [b9ab6ba23485]
                   2434: 
                   2435:        * MANIFEST, compat/getgrouplist.c, compat/nss_dbdefs.h, config.h.in,
                   2436:        configure, configure.in:
                   2437:        Use nss_search() to implement getgrouplist() where available.
                   2438:        Tested on Solaris and HP-UX. We need to include a compatibility
                   2439:        header for HP-UX which uses the Solaris nsswitch implementation but
                   2440:        doesn't ship nss_dbdefs.h.
                   2441:        [d29dbc4dc06d]
                   2442: 
                   2443: 2013-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2444: 
                   2445:        * src/exec.c, src/exec_pty.c, src/signal.c, src/sudo.h:
                   2446:        Remove extra flag to sudo_sigaction(). We want to trap the signal
                   2447:        regardless of whether or not it is ignored by the underlying command
                   2448:        since there's no way to know what signal handlers the command will
                   2449:        install. Now we just use sudo_sigaction() to set a flag in
                   2450:        saved_signals[] to indicate whether a signal needs to be restored
                   2451:        before exec.
                   2452:        [c042d52c7192]
                   2453: 
                   2454: 2013-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2455: 
                   2456:        * compat/getgrouplist.c, config.h.in, configure, configure.in:
                   2457:        Use _getgroupsbymember() on Solaris to get the groups list. Fixes
                   2458:        performance problems with the getgroupslist() compat on Solaris
                   2459:        systems with network-based group databases.
                   2460:        [287d3ae2ce8d]
                   2461: 
                   2462: 2013-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2463: 
                   2464:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2465:        doc/sudo_plugin.mdoc.in:
                   2466:        Document signal handler behavior in plugin API 1.3
                   2467:        [20dc9d1c105f]
                   2468: 
                   2469:        * MANIFEST, include/sudo_plugin.h, src/Makefile.in, src/exec.c,
                   2470:        src/exec_pty.c, src/signal.c, src/sudo.c, src/sudo.h:
                   2471:        Move signal code into its own source file and add sudo_sigaction()
                   2472:        wrapper that has an extra flag to check the saved_signals list to
                   2473:        only install the handler if the signal is not already ignored. Bump
                   2474:        plugin API version for the new front-end signal behavior.
                   2475:        [5d2f27a1b404]
                   2476: 
                   2477:        * plugins/sudoers/sudoers.c, src/exec.c, src/sudo.c, src/sudo.h,
                   2478:        src/sudo_exec.h:
                   2479:        Catch SIGINT, SIGQUIT and SIGTSTP in the front end before we execute
                   2480:        the command. If we get SIGINT or SIGQUIT, call the plugin close()
                   2481:        functions as if the command was interrupted. If we get SIGTSTP,
                   2482:        uninstall the handler and deliver SIGTSTP to ourselves.
                   2483:        [332baf3a81b7]
                   2484: 
                   2485:        * src/exec.c, src/exec_pty.c:
                   2486:        Rename handle_signals() to dispatch_signals(). Block other signals
                   2487:        in handler() so we don't have to worry about the write() being
                   2488:        interrupted.
                   2489:        [666e95c9a0f1]
                   2490: 
                   2491: 2013-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2492: 
                   2493:        * src/tgetpass.c:
                   2494:        Rename signal handler to avoid name clash with one in exec.c
                   2495:        [8913101a29b6]
                   2496: 
                   2497: 2013-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2498: 
                   2499:        * src/sudo.c:
                   2500:        Add missing call to save_signals().
                   2501:        [47d075d7326b]
                   2502: 
                   2503: 2013-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2504: 
                   2505:        * Makefile.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   2506:        Fill in the comment block at the top of the .pot files and preserve
                   2507:        it when regenerating them.
                   2508:        [6449497b76db]
                   2509: 
                   2510:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2511:        doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.man.in,
                   2512:        doc/sudoers.mdoc.in, plugins/sudoers/def_data.c,
                   2513:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   2514:        plugins/sudoers/sudoers.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
                   2515:        Add exec_background option in plugin command info and a sudoers
                   2516:        option to match. When set, commands are started in the background
                   2517:        and automatically foregrounded as needed. There are issues with
                   2518:        some ill-mannered programs (like Linux su) so this is not the
                   2519:        default.
                   2520:        [c0b32b0938f2]
                   2521: 
                   2522:        * common/Makefile.in:
                   2523:        regen
                   2524:        [2b2b220e7aea]
                   2525: 
                   2526:        * src/Makefile.in:
                   2527:        Add SESH_OBJS variable for sesh object files.
                   2528:        [d3e04ae8fd1f]
                   2529: 
                   2530:        * configure.in, doc/LICENSE, plugins/sudoers/redblack.c:
                   2531:        Update copyright year.
                   2532:        [61a0f0cedb13]
                   2533: 
                   2534:        * src/exec_pty.c:
                   2535:        Always resume the command in the foreground if sudo itself is the
                   2536:        foreground process. This helps work around poorly behaved programs
                   2537:        that catch SIGTTOU/SIGTTIN but suspend themselves with SIGSTOP. At
                   2538:        worst, sudo will go into the background but upon resume the command
                   2539:        will be runnable. Otherwise, we can get into a situation where the
                   2540:        command will immediately suspend itself.
                   2541:        [c368ac3eb2e4]
                   2542: 
                   2543:        * configure, configure.in:
                   2544:        Use -fstack-protector-all in preference to -fstack-protector where
                   2545:        supported.
                   2546:        [f930c95ceb51]
                   2547: 
                   2548: 2013-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2549: 
                   2550:        * configure, configure.in:
                   2551:        Only test for -fstack-protector and -fvisibility=hidden on GNU
                   2552:        compatible compilers.
                   2553:        [796f4696d863]
                   2554: 
                   2555: 2013-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2556: 
                   2557:        * NEWS:
                   2558:        Add Sudo 1.8.6p4
                   2559:        [8a928de8e717]
                   2560: 
                   2561:        * common/Makefile.in, compat/Makefile.in, configure, configure.in,
                   2562:        plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   2563:        plugins/sudoers/Makefile.in, plugins/system_group/Makefile.in,
                   2564:        src/Makefile.in:
                   2565:        Break out stack smashing protector options into SSP_CFLAGS and
                   2566:        SSP_LDFLAGS so we can use it everywhere (unlike LT_LDFLAGS).
                   2567:        [01be114fc9fb]
                   2568: 
                   2569: 2013-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2570: 
                   2571:        * doc/CONTRIBUTORS, plugins/sudoers/redblack.c:
                   2572:        In rbrepair(), make sure we never try to change the color of the
                   2573:        sentinel node, which is the first entry, not the root. From Michael
                   2574:        King
                   2575:        [3fc4dc4004ec]
                   2576: 
                   2577: 2012-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2578: 
                   2579:        * src/exec_pty.c:
                   2580:        No need to restore default signal handler for SIGSTOP as it is not
                   2581:        catchable. Attempting to do so is harmless but sigaction() will
                   2582:        fail and set errno to EINVAL which makes it looks like there is an
                   2583:        error.
                   2584:        [be7c0b759e9a]
                   2585: 
                   2586:        * src/exec.c:
                   2587:        Print SIGCONT_FG and SIGCONT_BG properly in debug output.
                   2588:        [93e59e301c8f]
                   2589: 
                   2590: 2012-12-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2591: 
                   2592:        * configure, configure.in:
                   2593:        Disable PIE on FreeBSD/ia64, otherwise sudo will segfault.
                   2594:        [9ed48f696595]
                   2595: 
                   2596: 2012-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2597: 
                   2598:        * include/missing.h:
                   2599:        Add howmany() macro since some systems have this in sys/param.h
                   2600:        which we no longer include.
                   2601:        [2c5efaa16c45]
                   2602: 
                   2603: 2012-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2604: 
                   2605:        * plugins/sudoers/regress/sudoers/test11.toke.out.ok:
                   2606:        Remove errant file.
                   2607:        [a91699beffc6]
                   2608: 
                   2609: 2012-12-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2610: 
                   2611:        * plugins/sudoers/regress/check_symbols/check_symbols.c,
                   2612:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   2613:        plugins/sudoers/regress/logging/check_wrap.c,
                   2614:        plugins/sudoers/regress/parser/check_addr.c,
                   2615:        plugins/sudoers/regress/parser/check_fill.c:
                   2616:        Remove obsolete sudoers_cleanup() stubs.
                   2617:        [89153025a2ae]
                   2618: 
                   2619:        * common/alloc.c, common/atobool.c, common/fileops.c,
                   2620:        common/fmt_string.c, common/lbuf.c, common/secure_path.c,
                   2621:        common/sudo_conf.c, common/sudo_debug.c, common/term.c,
                   2622:        compat/closefrom.c, compat/getcwd.c, compat/glob.c,
                   2623:        compat/snprintf.c, include/missing.h,
                   2624:        plugins/sample/sample_plugin.c, plugins/sample_group/getgrent.c,
                   2625:        plugins/sample_group/plugin_test.c,
                   2626:        plugins/sample_group/sample_group.c, plugins/sudoers/alias.c,
                   2627:        plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   2628:        plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
                   2629:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
                   2630:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
                   2631:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
                   2632:        plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
                   2633:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/boottime.c,
                   2634:        plugins/sudoers/check.c, plugins/sudoers/defaults.c,
                   2635:        plugins/sudoers/env.c, plugins/sudoers/find_path.c,
                   2636:        plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
                   2637:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   2638:        plugins/sudoers/group_plugin.c, plugins/sudoers/interfaces.c,
                   2639:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   2640:        plugins/sudoers/logging.c, plugins/sudoers/match.c,
                   2641:        plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
                   2642:        plugins/sudoers/policy.c, plugins/sudoers/prompt.c,
                   2643:        plugins/sudoers/pwutil.c, plugins/sudoers/pwutil_impl.c,
                   2644:        plugins/sudoers/redblack.c,
                   2645:        plugins/sudoers/regress/parser/check_addr.c,
                   2646:        plugins/sudoers/set_perms.c, plugins/sudoers/sssd.c,
                   2647:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
                   2648:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   2649:        plugins/sudoers/timestamp.c, plugins/sudoers/toke.c,
                   2650:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   2651:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
                   2652:        plugins/system_group/system_group.c, src/conversation.c, src/exec.c,
                   2653:        src/exec_common.c, src/exec_pty.c, src/get_pty.c,
                   2654:        src/load_plugins.c, src/net_ifs.c, src/parse_args.c, src/sudo.c,
                   2655:        src/sudo_edit.c, src/tgetpass.c, src/ttyname.c, src/utmp.c:
                   2656:        Don't include <sys/param.h>. We only needed it for MAXPATHLEN,
                   2657:        MAXHOSTNAMELEN and the MIN/MAX macros. We now use PATH_MAX and
                   2658:        HOST_NAME_MAX throughout without falling back on MAXPATHLEN or
                   2659:        MAXHOSTNAMELEN and define our own MIN/MAX macros as needed.
                   2660:        [f4807d46f504]
                   2661: 
                   2662:        * include/missing.h, plugins/sudoers/match.c,
                   2663:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c, src/sudo.c:
                   2664:        Use MAX_HOST_NAME+1 (limits.h) instead of MAXHOSTNAMELEN
                   2665:        (sys/param.h or netdb.h).
                   2666:        [2544f5e306dd]
                   2667: 
                   2668: 2012-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2669: 
                   2670:        * plugins/sudoers/logging.c:
                   2671:        Move debug_decl() in log_failure() to be after the variable
                   2672:        declarations for C89.
                   2673:        [f48d2035ab44]
                   2674: 
                   2675: 2012-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2676: 
                   2677:        * common/error.c, include/error.h, plugins/sudoers/iolog.c,
                   2678:        plugins/sudoers/logging.c, plugins/sudoers/policy.c,
                   2679:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   2680:        Cannot wrap sigsetjmp() or we end up returning to the wrong place.
                   2681:        Use a macro instead.
                   2682:        [749ee6acdad8]
                   2683: 
                   2684: 2012-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2685: 
                   2686:        * plugins/sudoers/policy.c:
                   2687:        Fix return in sudoers_policy_open that should be debug_return.
                   2688:        [a78b795b6846]
                   2689: 
                   2690: 2012-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2691: 
                   2692:        * src/ttyname.c:
                   2693:        Define sudo_ttyname_dev() for the HAVE_STRUCT_PSINFO_PR_TTYDEV case
                   2694:        too.
                   2695:        [acfa891c229e]
                   2696: 
                   2697:        * src/solaris.c:
                   2698:        Quiet a gcc warning and add comment about needing to keep the handle
                   2699:        open.
                   2700:        [f954f228960f]
                   2701: 
                   2702: 2012-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2703: 
                   2704:        * INSTALL:
                   2705:        mention --disable-shared
                   2706:        [6954d39e2d0f]
                   2707: 
                   2708:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2709:        doc/sudo_plugin.mdoc.in:
                   2710:        Add missing command_info argument in I/O plugin open() prototype.
                   2711:        Bug #579
                   2712:        [72beb07aba0e]
                   2713: 
                   2714: 2012-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2715: 
                   2716:        * plugins/sudoers/gram.c:
                   2717:        Regen for proper line numbers.
                   2718:        [6cf6e132e764]
                   2719: 
                   2720:        * configure, configure.in:
                   2721:        Add locale_stub.o to SUDO_OBJS, not locale_stub.lo.
                   2722:        [d604dc8ca38a]
                   2723: 
                   2724:        * common/sudo_printf.c:
                   2725:        Include missing.h for __printflike.
                   2726:        [a33640600faf]
                   2727: 
                   2728:        * plugins/sudoers/iolog.c:
                   2729:        Saner loop invariant in io_mkdirs (cosmetic only).
                   2730:        [dc30274afe38]
                   2731: 
                   2732:        * MANIFEST, common/Makefile.in, common/error.c, common/sudo_printf.c,
                   2733:        configure, configure.in, include/error.h, mkdep.pl,
                   2734:        plugins/sudoers/Makefile.in, plugins/sudoers/locale.c,
                   2735:        plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
                   2736:        plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
                   2737:        plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
                   2738:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
                   2739:        src/Makefile.in, src/error.c, src/exec_pty.c, src/locale_stub.c,
                   2740:        src/sesh.c:
                   2741:        Move warn/error into common and make static builds work.
                   2742:        [4d3f374f4e4c]
                   2743: 
                   2744:        * MANIFEST, common/Makefile.in, common/sudo_debug.c,
                   2745:        common/sudo_printf.c, include/error.h, plugins/sudoers/Makefile.in,
                   2746:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   2747:        plugins/sudoers/iolog.c, plugins/sudoers/plugin_error.c,
                   2748:        plugins/sudoers/policy.c,
                   2749:        plugins/sudoers/regress/check_symbols/check_symbols.c,
                   2750:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   2751:        plugins/sudoers/regress/logging/check_wrap.c,
                   2752:        plugins/sudoers/regress/parser/check_addr.c,
                   2753:        plugins/sudoers/regress/parser/check_fill.c,
                   2754:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   2755:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
                   2756:        src/Makefile.in, src/conversation.c, src/sesh.c:
                   2757:        Move _sudo_printf from src/conversation.c to common/sudo_printf.c.
                   2758:        Add sudo_printf function pointer that is initialized to
                   2759:        _sudo_printf() instead of requiring a sudo_conv function pointer
                   2760:        everywhere. The plugin will reset sudo_printf to point to the
                   2761:        version passed in via the plugin open function. Now plugin_error.c
                   2762:        can just call sudo_printf in all cases. The sudoers binaries no
                   2763:        longer need their own version of sudo_printf.
                   2764:        [9b09d3f63790]
                   2765: 
                   2766:        * plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
                   2767:        plugins/sudoers/plugin_error.c, plugins/sudoers/policy.c,
                   2768:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   2769:        Add plugin_setjmp() wrapper for siglongjmp(error_jmp, 1) so we don't
                   2770:        need error_jmp to be extern. Also add plugin_clearjmp() that clears
                   2771:        a flag so error()/errorx() knows when to call exit() vs. longjmp().
                   2772:        [5a4617148e70]
                   2773: 
                   2774:        * plugins/sudoers/set_perms.c:
                   2775:        Let warning() call gettext() for us.
                   2776:        [ab8d502ba4ac]
                   2777: 
                   2778:        * include/error.h, plugins/sudoers/plugin_error.c, src/error.c:
                   2779:        Do locale swapping in the warning()/error() macros themselves
                   2780:        instead of in the underlying functions.
                   2781:        [4cd205540e17]
                   2782: 
                   2783:        * common/alloc.c, common/list.c, include/error.h,
                   2784:        plugins/sudoers/env.c, plugins/sudoers/plugin_error.c,
                   2785:        plugins/sudoers/regress/check_symbols/check_symbols.c,
                   2786:        plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, src/error.c,
                   2787:        src/hooks.c:
                   2788:        Rename warning2()/error2() -> warning_nodebug()/error_nodebug().
                   2789:        [48346393634d]
                   2790: 
                   2791:        * common/sudo_conf.c, plugins/sudoers/auth/fwtk.c,
                   2792:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/securid5.c,
                   2793:        plugins/sudoers/defaults.c, plugins/sudoers/group_plugin.c,
                   2794:        plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
                   2795:        plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
                   2796:        plugins/sudoers/policy.c, plugins/sudoers/sssd.c,
                   2797:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   2798:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   2799:        plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c, src/error.c,
                   2800:        src/exec.c, src/exec_common.c, src/exec_pty.c, src/load_plugins.c,
                   2801:        src/net_ifs.c, src/parse_args.c, src/selinux.c, src/sesh.c,
                   2802:        src/solaris.c, src/sudo.c, src/sudo_edit.c, src/tgetpass.c:
                   2803:        Call gettext() on parameters for warning()/warningx() instead of
                   2804:        having warning() do it for us.
                   2805:        [c71088bc9d3e]
                   2806: 
                   2807:        * Makefile.in, plugins/sudoers/alias.c, plugins/sudoers/gram.c,
                   2808:        plugins/sudoers/gram.y, plugins/sudoers/toke.c,
                   2809:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c:
                   2810:        Call gettext() in sudoerserror() in the user's locale and pass the
                   2811:        untranslated string to it.
                   2812:        [cdbfc231b848]
                   2813: 
                   2814:        * plugins/sudoers/Makefile.in, plugins/sudoers/locale.c,
                   2815:        plugins/sudoers/logging.h, plugins/sudoers/sudoers.c,
                   2816:        plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
                   2817:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
                   2818:        Allow sudoers programs (visudo, sudoreplay, visudo) to use
                   2819:        plugin_error.c instead of the error.c from the front-end. This
                   2820:        means sudoers_setlocale() needs to be independent of the sudo_user
                   2821:        struct and the defaults table. The sudoers locale is now updated
                   2822:        via a callback.
                   2823:        [e356f5f8cd6a]
                   2824: 
                   2825:        * plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
                   2826:        plugins/sudoers/plugin_error.c, plugins/sudoers/policy.c,
                   2827:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   2828:        Include setjmp.h in sudoers.h Move error_jmp into plugin_error.c
                   2829:        Rename sudoers_plugin_cleanup sudoers_cleanup Make sudoers
                   2830:        warning/error functions work when sudo_conv is NULL
                   2831:        [7365ee24a779]
                   2832: 
                   2833:        * src/error.c:
                   2834:        No need to change locale in front-end warning()/error().
                   2835:        [23dc1df7f93b]
                   2836: 
                   2837:        * plugins/sudoers/tsgetgrpw.c:
                   2838:        Ignore bad lines in passwd/group file instead if stopping processing
                   2839:        when we hit one.
                   2840:        [79b790559075]
                   2841: 
                   2842:        * plugins/sudoers/regress/testsudoers/test2.sh,
                   2843:        plugins/sudoers/regress/testsudoers/test3.sh,
                   2844:        plugins/sudoers/regress/testsudoers/test5.sh:
                   2845:        Bash doesn't let you set UID to use MYUID instead.
                   2846:        [5be56335f059]
                   2847: 
                   2848:        * plugins/sudoers/visudo.c:
                   2849:        Avoid NULL deref for unknown Defaults in strict mode.
                   2850:        [545c21c1e7d6]
                   2851: 
                   2852:        * common/sudo_conf.c, common/sudo_debug.c:
                   2853:        See DEFAULT_TEXT_DOMAIN
                   2854:        [3d723e1d27db]
                   2855: 
                   2856: 2012-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2857: 
                   2858:        * .hgignore:
                   2859:        Add signame.c and mksigname.
                   2860:        [d59bbf423f00]
                   2861: 
                   2862:        * plugins/sudoers/Makefile.in:
                   2863:        Fold preinstall into install-plugin and pass the path to the plugin
                   2864:        binary to the preinstall command.
                   2865:        [2c2205af8bb7]
                   2866: 
                   2867:        * pp:
                   2868:        sync with upstream
                   2869:        [a4b7336b3256]
                   2870: 
                   2871:        * src/sudo.h:
                   2872:        repair spacing
                   2873:        [f5c1255ce514]
                   2874: 
                   2875: 2012-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2876: 
                   2877:        * common/sudo_debug.c:
                   2878:        Set group on sudo_debug when creating it to gid 0 so systems without
                   2879:        BSD group semantics don't get the invoking user's group.
                   2880:        [7dda01196554]
                   2881: 
                   2882:        * plugins/sudoers/iolog.c:
                   2883:        Rename mkdir_parents() io_mkdirs() and add a flag to specify whether
                   2884:        path is a temporary, in which case the final component is created
                   2885:        via mkdtemp() instead of mkdir().
                   2886:        [79c0c4e7ed58]
                   2887: 
                   2888:        * plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.h:
                   2889:        For PERM_ROOT set egid to 0 so log files are not created with the
                   2890:        gid of the user.
                   2891:        [5b964ea43474]
                   2892: 
                   2893:        * plugins/sudoers/logging.c:
                   2894:        Add calls to set_perms(PERM_ROOT) becore logging to a file. We
                   2895:        should already be root but since we cache the current permission
                   2896:        status it is basically free. That way, if more of sudoers runs as
                   2897:        non-root in the future logging will still work correctly.
                   2898:        [c591d4973f41]
                   2899: 
                   2900:        * common/sudo_conf.c, config.h.in, configure, configure.in,
                   2901:        include/gettext.h, plugins/sudoers/locale.c,
                   2902:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   2903:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
                   2904:        src/error.c, src/exec.c, src/sesh.c, src/sudo.c:
                   2905:        #unifdef HAVE_SETLOCALE, it is C89 so no need to check for it.
                   2906:        [41f6bb4926f4]
                   2907: 
                   2908:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
                   2909:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   2910:        doc/sudo_plugin.mdoc.in:
                   2911:        Mention that sudo.conf is parsed in the C locale.
                   2912:        [f711c416e30c]
                   2913: 
                   2914:        * common/sudo_conf.c:
                   2915:        Parse sudo.conf in the "C" locale.
                   2916:        [776658f651ea]
                   2917: 
                   2918:        * plugins/sudoers/locale.c, plugins/sudoers/logging.h,
                   2919:        plugins/sudoers/sudoers.h:
                   2920:        Fix compilation on systems w/o setlocale()
                   2921:        [6940d1c1c1ce]
                   2922: 
                   2923:        * doc/TROUBLESHOOTING:
                   2924:        Sudo now includes a workaround for the Solaris 11 locale issue.
                   2925:        [ab93787a552c]
                   2926: 
                   2927: 2012-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2928: 
                   2929:        * include/gettext.h, plugins/sudoers/iolog_path.c,
                   2930:        plugins/sudoers/locale.c,
                   2931:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   2932:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   2933:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
                   2934:        src/error.c, src/exec.c, src/sesh.c, src/sudo.c, src/sudo.h:
                   2935:        Always include locale.h from gettext.h so we no longer need to
                   2936:        include locale.h from the .c files.
                   2937:        [93d39182ccfa]
                   2938: 
                   2939:        * MANIFEST, config.h.in, configure, configure.in, mkdep.pl,
                   2940:        plugins/sudoers/Makefile.in, src/Makefile.in, src/openbsd.c,
                   2941:        src/solaris.c, src/sudo.c, src/sudo.h:
                   2942:        Add os-specific initialization functions for solaris (workaround
                   2943:        setuid locale problem in Solaris 11) and openbsd (set malloc_options
                   2944:        if SUDO_DEVEL). Also move set_project() to solaris.c.
                   2945:        [1d6581afbaf4]
                   2946: 
                   2947: 2012-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2948: 
                   2949:        * plugins/sudoers/find_path.c, plugins/sudoers/group_plugin.c,
                   2950:        plugins/sudoers/iolog.c, plugins/sudoers/policy.c,
                   2951:        plugins/sudoers/sudoers.c, plugins/sudoers/timestamp.c:
                   2952:        Avoid strerror() when possible and just rely on warning/error to
                   2953:        handle errno in the proper locale.
                   2954:        [bf612caae97c]
                   2955: 
                   2956:        * plugins/sudoers/logging.c:
                   2957:        Set sudoers locale in log_allowed()
                   2958:        [2dd0ac704cae]
                   2959: 
                   2960:        * plugins/sudoers/check.c:
                   2961:        Make the sudo lecture translatable.
                   2962:        [3cdfc183d72d]
                   2963: 
                   2964:        * Makefile.in:
                   2965:        Add the values of badpass_message, passprompt and mailsub to
                   2966:        sudoers.pot so they can be translated.
                   2967:        [51cbe8adcb94]
                   2968: 
                   2969:        * plugins/sudoers/logging.c:
                   2970:        Expand the FMT_FIRST anf FMT_CONTD macros inline so they get picked
                   2971:        up by xgettext.
                   2972:        [c5b74115caf0]
                   2973: 
                   2974: 2012-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   2975: 
                   2976:        * plugins/sudoers/check.c, plugins/sudoers/prompt.c,
                   2977:        plugins/sudoers/sudoers.h:
                   2978:        Make expand_prompt() args const and free the prompt when we are done
                   2979:        with it.
                   2980:        [995ef8519fe6]
                   2981: 
                   2982:        * plugins/sudoers/policy.c:
                   2983:        Fix cut and pasto
                   2984:        [e002921c1d15]
                   2985: 
                   2986:        * plugins/sudoers/defaults.c, plugins/sudoers/logging.c:
                   2987:        Expand def_mailsub in the sudoers locale, not the user's.
                   2988:        [a4775f2fb385]
                   2989: 
                   2990:        * plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
                   2991:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
                   2992:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
                   2993:        plugins/sudoers/env.c, plugins/sudoers/iolog.c,
                   2994:        plugins/sudoers/locale.c, plugins/sudoers/logging.c,
                   2995:        plugins/sudoers/logging.h, plugins/sudoers/parse.c,
                   2996:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
                   2997:        plugins/sudoers/timestamp.c:
                   2998:        Call gettext inside log_error et al instead of having the caller do
                   2999:        it. This way we can display any messages to the user in their own
                   3000:        locale but log in the sudoers local.
                   3001:        [286e0444f785]
                   3002: 
                   3003:        * common/sudo_conf.c, plugins/sudoers/auth/fwtk.c,
                   3004:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/securid5.c,
                   3005:        plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
                   3006:        plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
                   3007:        plugins/sudoers/ldap.c, plugins/sudoers/linux_audit.c,
                   3008:        plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
                   3009:        plugins/sudoers/policy.c, plugins/sudoers/sssd.c,
                   3010:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   3011:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   3012:        plugins/sudoers/visudo.c, src/error.c, src/exec.c,
                   3013:        src/exec_common.c, src/exec_pty.c, src/load_plugins.c,
                   3014:        src/net_ifs.c, src/parse_args.c, src/selinux.c, src/sesh.c,
                   3015:        src/sudo.c, src/sudo_edit.c, src/tgetpass.c:
                   3016:        Display warning/error messages in the user's locale.
                   3017:        [00a04165c0cf]
                   3018: 
                   3019:        * plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.c,
                   3020:        plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
                   3021:        audit_failure() now calls gettext itself using the sudoers locale.
                   3022:        [d77f1d78799a]
                   3023: 
                   3024:        * plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
                   3025:        plugins/sudoers/sudoers.c:
                   3026:        Convert setlocale() to sudoers_setlocale() in the sudoers module.
                   3027:        This only converts existing uses, there are more places where we
                   3028:        need to sprinkle sudoers_setlocale() calls.
                   3029:        [8ee0cbf0d0a9]
                   3030: 
                   3031:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
                   3032:        plugins/sudoers/locale.c, plugins/sudoers/logging.h,
                   3033:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   3034:        Add simple locale switching to make it easy to switch from the
                   3035:        user's locale to the sudoers locale without making excessive
                   3036:        setlocale() calls when we don't need to.
                   3037:        [5c61582fdeee]
                   3038: 
                   3039:        * common/sudo_debug.c, include/error.h, include/sudo_debug.h,
                   3040:        plugins/sudoers/plugin_error.c, src/error.c:
                   3041:        Add variants of warn/error and sudo_debug_printf that take a va_list
                   3042:        instead of a variable number of args.
                   3043:        [00392bdc063c]
                   3044: 
                   3045:        * INSTALL, doc/TROUBLESHOOTING:
                   3046:        Document Solaris 11 locale issues and workarounds.
                   3047:        [05f7d34af3ae]
                   3048: 
                   3049:        * Makefile.in, configure, configure.in:
                   3050:        Solaris gettext() looks in lang.UTF-8, not just lang for UTF-8
                   3051:        locales. Make links from localdir/lang -> localdir/lang.UTF-8
                   3052:        [5ca9326480e2]
                   3053: 
                   3054: 2012-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3055: 
                   3056:        * plugins/sudoers/audit.c, plugins/sudoers/logging.c,
                   3057:        plugins/sudoers/logging.h, plugins/sudoers/sudoers.c:
                   3058:        Do not inform the user that the command was not permitted by the
                   3059:        policy if they do not successfully authenticate. This is a
                   3060:        regression introduced in sudo 1.8.6.
                   3061:        [c1279df08bfb]
                   3062: 
                   3063:        * plugins/sudoers/Makefile.in:
                   3064:        Add preinstall target that runs SUDO_PREINSTALL_CMD. Used to fixup
                   3065:        the rpath in HP-UX SOM shared libraries for the LDAP libs.
                   3066:        [b07185657b42]
                   3067: 
                   3068:        * src/parse_args.c:
                   3069:        The -a option should be #ifdef HAVE_BSD_AUTH_H, not -A.
                   3070:        [22c73cbe3ff9]
                   3071: 
                   3072: 2012-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3073: 
                   3074:        * INSTALL, configure, configure.in:
                   3075:        Allow the user to specify and alternate libtool
                   3076:        [c9d6fc9521fd]
                   3077: 
                   3078: 2012-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3079: 
                   3080:        * doc/CONTRIBUTORS, plugins/sudoers/sudo_nss.c:
                   3081:        Allow sudo to be build with sss support without also including ldap
                   3082:        support. From Stephane Graber.
                   3083:        [b992a80ebea1]
                   3084: 
                   3085: 2012-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3086: 
                   3087:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/iolog_path.c,
                   3088:        plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
                   3089:        plugins/sudoers/policy.c, plugins/sudoers/sudoers.c,
                   3090:        plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
                   3091:        plugins/sudoers/visudo.c:
                   3092:        Refactor policy plugin interface code from sudoers.c into policy.c
                   3093:        [393e62910b8a]
                   3094: 
                   3095:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
                   3096:        Refactor command_info setting into its own function.
                   3097:        [a952b948324c]
                   3098: 
                   3099:        * plugins/sudoers/interfaces.c, plugins/sudoers/interfaces.h,
                   3100:        plugins/sudoers/match_addr.c, plugins/sudoers/sudoers.c,
                   3101:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
                   3102:        Make interfaces pointer private to interfaces.c and add
                   3103:        get_interfaces() accessor.
                   3104:        [b69b9334ed3c]
                   3105: 
                   3106: 2012-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3107: 
                   3108:        * plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
                   3109:        plugins/sudoers/sudoers.h:
                   3110:        Make user_cwd const since it is either a string literal or passed in
                   3111:        from the front-end.
                   3112:        [90751b81e8bc]
                   3113: 
                   3114:        * configure, configure.in:
                   3115:        sudo 1.8.7
                   3116:        [bf727adb8af0]
                   3117: 
                   3118:        * plugins/sudoers/sudoers.c:
                   3119:        Avoid nested strtok() calls.
                   3120:        [9d9f22ab52a9]
                   3121: 
                   3122: 2012-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3123: 
                   3124:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/check.c,
                   3125:        plugins/sudoers/prompt.c, plugins/sudoers/sudoers.h:
                   3126:        Move expand_prompt() into its own source file for easier unit
                   3127:        testing.
                   3128:        [b419b48a436f]
                   3129: 
                   3130:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/check.c,
                   3131:        plugins/sudoers/check.h, plugins/sudoers/sudoers.h,
                   3132:        plugins/sudoers/timestamp.c, plugins/sudoers/timestamp.h:
                   3133:        Make check.c independent of the underlying timestamp implementation.
                   3134:        [895071bd6065]
                   3135: 
                   3136:        * plugins/sudoers/iolog_path.c:
                   3137:        Add SUDOERS_NO_SEQ define to allow ${seq} to be disabled.
                   3138:        [8ac38f02dd6d]
                   3139: 
                   3140:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3141:        Use a list for the possible values of Tag_Spec with a minimal indent
                   3142:        to improve readability. In the pod version, these were =head3. Also
                   3143:        use .St -p1003.1 instead of just POSIX when talking about glob() and
                   3144:        fnmatch().
                   3145:        [361a6f7a5c44]
                   3146: 
                   3147: 2012-10-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3148: 
                   3149:        * src/ttyname.c:
                   3150:        sudo_ttyname_dev() is unused if there is no /proc or sysctl().
                   3151:        [6598dbf81e16]
                   3152: 
                   3153:        * compat/mksiglist.c, compat/mksigname.c,
                   3154:        compat/regress/fnmatch/fnm_test.c, compat/regress/glob/globtest.c,
                   3155:        plugins/sample_group/plugin_test.c,
                   3156:        plugins/sudoers/regress/check_symbols/check_symbols.c,
                   3157:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   3158:        plugins/sudoers/regress/logging/check_wrap.c,
                   3159:        plugins/sudoers/regress/parser/check_addr.c,
                   3160:        plugins/sudoers/regress/parser/check_fill.c,
                   3161:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   3162:        plugins/sudoers/visudo.c, src/sesh.c, src/sudo.c:
                   3163:        Explicitly mark main() as public in executables to avoid an HP-UX ld
                   3164:        warning.
                   3165:        [72a40ce218be]
                   3166: 
                   3167:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in:
                   3168:        Remove grep from SEE ALSO section.
                   3169:        [c7cafee1621f]
                   3170: 
                   3171:        * common/alloc.c:
                   3172:        If vasprintf() fails, just use the errno it sets instead of assuming
                   3173:        ENOMEM.
                   3174:        [1be5bfdc0cab]
                   3175: 
                   3176: 2012-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3177: 
                   3178:        * doc/TROUBLESHOOTING:
                   3179:        Mention HP-UX pam.conf settings.
                   3180:        [8b8e745b49fd]
                   3181: 
                   3182: 2012-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3183: 
                   3184:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/check.c,
                   3185:        plugins/sudoers/defaults.c, plugins/sudoers/timestamp.c,
                   3186:        plugins/sudoers/timestamp.h:
                   3187:        Split off timestamp functions into their own source file.
                   3188:        [d5833332511d]
                   3189: 
                   3190: 2012-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3191: 
                   3192:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3193:        Mention how !foo is not the same as ALL,!foo
                   3194:        [51f8e470757d]
                   3195: 
                   3196: 2012-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3197: 
                   3198:        * src/exec_pty.c:
                   3199:        Start commands in the background when I/O logging is enabled. We
                   3200:        can't do this on Mac OS X due to a kernel bug in tc[gs]etattr(2)
                   3201:        which returns EINTR on signal instead of restarting automatically.
                   3202:        [83b1d59146f7]
                   3203: 
                   3204:        * src/exec_pty.c:
                   3205:        Handle SIGCONT_FG and SIGCONT_BG when converting signal number to
                   3206:        string in deliver_signal().
                   3207:        [2cefea7a976e]
                   3208: 
                   3209: 2012-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3210: 
                   3211:        * src/exec_pty.c:
                   3212:        Fix running commands that need the terminal in the background when
                   3213:        I/O logging is enabled. E.g. "sudo vi &". When the command is
                   3214:        foregrounded, it will now resume properly.
                   3215:        [0bc13a253429]
                   3216: 
                   3217:        * plugins/sudoers/match.c:
                   3218:        Add rudimentary support for name-based matching as a compile-time
                   3219:        option. This unsafe when used in conjunction with the '!' operator.
                   3220:        [f93bc8e6db15]
                   3221: 
                   3222: 2012-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3223: 
                   3224:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/pwutil.c,
                   3225:        plugins/sudoers/pwutil.h, plugins/sudoers/pwutil_impl.c:
                   3226:        Split out implementation-specific back end code out of pwutil.c into
                   3227:        pwutil_impl.c. This will allow the main pwutil code to be used for
                   3228:        lookup methods other than getpw* and getgr*.
                   3229:        [999c2dde60e4]
                   3230: 
                   3231: 2012-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1.1.3   misho    3232: 
                   3233:        * NEWS, configure, configure.in:
                   3234:        sudo 1.8.6p3
                   3235:        [97fef3d9ed65]
                   3236: 
                   3237: 2012-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3238: 
                   3239:        * doc/fixman.sh:
                   3240:        Don't use embedded newline when matching, use \n. This got expanded
                   3241:        at some point. Bug #573
                   3242:        [6652f834b8f5]
                   3243: 
1.1.1.4   misho    3244:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
                   3245:        Rename yyerror() to sudoerserror() to match yacc prefix changes. Not
                   3246:        really needed due to the #defines that yacc makes but it is less
                   3247:        confusing this way as the lexer calls sudoerserror().
                   3248:        [a0577be6527d]
                   3249: 
                   3250:        * common/alloc.c, plugins/sample_group/plugin_test.c,
                   3251:        plugins/sudoers/env.c, plugins/sudoers/toke.c,
                   3252:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   3253:        src/exec_common.c, src/parse_args.c, src/sudo.c:
                   3254:        No need to translate "unable to allocate memory" when we can just
                   3255:        use the system translation via strerror().
                   3256:        [377499e5827c]
                   3257: 
1.1.1.3   misho    3258:        * plugins/sudoers/sudoreplay.c:
                   3259:        Fall back on lstat(2) if d_type in struct dirent is DT_UNKNOWN. Not
                   3260:        all file systems support d_type. Bug #572
                   3261:        [8b861c62945f]
                   3262: 
                   3263:        * plugins/sudoers/sudoreplay.c:
                   3264:        Avoid calling fclose(NULL) in the error path when we cannot open an
                   3265:        I/O log file.
                   3266:        [9401d5c4bb05]
                   3267: 
                   3268: 2012-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3269: 
                   3270:        * NEWS, configure, configure.in:
                   3271:        Sudo 1.8.6p2
                   3272:        [6e32496280f2]
                   3273: 
                   3274:        * src/exec.c:
                   3275:        When setting the signal handler for SIGTSTP to the default value in
                   3276:        non-I/O log mode, store the old handler value for when we restore it
                   3277:        after resume.
                   3278:        [242628694e42]
                   3279: 
1.1.1.4   misho    3280:        * plugins/sudoers/env.c:
                   3281:        Replace the guts of sudo_setenv_nodebug() with our old setenv.c
                   3282:        which supports non-standard BSD and glibc semantics. sudo_setenv()
                   3283:        now simply calls sudo_setenv2().
                   3284:        [57ffb6c9efaa]
                   3285: 
                   3286: 2012-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3287: 
                   3288:        * doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   3289:        doc/sudoers.ldap.mdoc.in, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3290:        Document non-Unix group support in LDAP sudoers.
                   3291:        [33c89f3aeee6]
                   3292: 
                   3293:        * plugins/sudoers/ldap.c:
                   3294:        Enable non-Unix group support for LDAP sudoers. We now check for
                   3295:        non-Unix groups and netgroups with the same query in the second
                   3296:        pass. Bug #571
                   3297:        [eb98fdff54d9]
                   3298: 
                   3299: 2012-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3300: 
                   3301:        * plugins/sudoers/Makefile.in, plugins/sudoers/gram.c,
                   3302:        plugins/sudoers/gram.h, plugins/sudoers/parse.c,
                   3303:        plugins/sudoers/regress/parser/check_fill.c,
                   3304:        plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
                   3305:        plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   3306:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   3307:        plugins/sudoers/visudo.c:
                   3308:        Set yacc prefix to "sudoers" to avoid conflicts other yacc parsers.
                   3309:        [cb6c0d93215e]
                   3310: 
1.1.1.3   misho    3311: 2012-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3312: 
                   3313:        * NEWS:
                   3314:        Mention support for SUCCESS=return in /etc/nsswitch.conf
                   3315:        [ef1f35aa0863]
                   3316: 
                   3317:        * NEWS, configure, configure.in:
                   3318:        sudo 1.8.6p1
                   3319:        [73a5e1f004b3]
                   3320: 
                   3321: 2012-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3322: 
                   3323:        * plugins/sudoers/env.c:
                   3324:        Avoid setting LOGNAME, USER and USERNAME variables twice when
                   3325:        set_logname is enabled.
                   3326:        [0de4f5fbd1d4]
                   3327: 
                   3328:        * plugins/sudoers/env.c:
                   3329:        Fix duplicate detection in sudo_putenv(), do not prune out the
                   3330:        variable we just set when overwriting an existing instance. Fixes
                   3331:        bug #570
                   3332:        [854ee714c831]
                   3333: 
                   3334:        * plugins/sudoers/env.c:
                   3335:        Add some debuggging
                   3336:        [a25cd3305823]
                   3337: 
                   3338: 2012-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3339: 
                   3340:        * plugins/sudoers/sudo_nss.c:
                   3341:        Disable word wrap in list mode when stdout is a pipe to make "sudo
                   3342:        -l | grep ..." more useful. Adapted from a diff by Daniel Kopecek.
                   3343:        [65ade04511fd]
                   3344: 
                   3345:        * common/lbuf.c:
                   3346:        Print a trailing newline in lbuf_print() when there is not enough
                   3347:        space to do word wrapping and the lbuf does not end with a newline.
                   3348:        [c0200e19cd09]
                   3349: 
                   3350:        * plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c:
                   3351:        Add support for [SUCCESS=return] in nsswitch.conf; from Daniel
                   3352:        Kopecek
                   3353:        [5c480316e3ce]
                   3354: 
                   3355:        * MANIFEST:
                   3356:        Add sssd.c
                   3357:        [9cadd014ef97]
                   3358: 
                   3359: 2012-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3360: 
                   3361:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/fi.mo,
                   3362:        plugins/sudoers/po/hr.mo, plugins/sudoers/po/sl.mo,
                   3363:        plugins/sudoers/po/uk.mo, src/po/fi.mo, src/po/hr.mo, src/po/it.mo,
                   3364:        src/po/ru.mo, src/po/sl.mo, src/po/uk.mo, src/po/vi.mo:
                   3365:        regen .po files
                   3366:        [62423d4d143d]
                   3367: 
                   3368:        * MANIFEST, plugins/sudoers/po/vi.mo:
                   3369:        Add Vietnamese sudoers translation from translationproject.org
                   3370:        [33666a605525]
                   3371: 
                   3372:        * NEWS:
                   3373:        mention PIE
                   3374:        [05032e5304c6]
                   3375: 
                   3376:        * MANIFEST, plugins/sudoers/po/vi.po:
                   3377:        Add Vietnamese sudoers translation from translationproject.org
                   3378:        [015c2204bae2]
                   3379: 
                   3380: 2012-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3381: 
                   3382:        * Makefile.in, compat/Makefile.in, mkdep.pl:
                   3383:        Add missing signame dependency
                   3384:        [e493bfb01929]
                   3385: 
                   3386:        * src/exec.c, src/ttyname.c:
                   3387:        Silence compiler warnings.
                   3388:        [1c5374b66d9b]
                   3389: 
                   3390:        * MANIFEST, compat/Makefile.in, compat/sig2str.c, compat/strsigname.c,
                   3391:        config.h.in, configure, configure.in, include/missing.h, mkdep.pl,
                   3392:        src/exec.c, src/exec_pty.c:
                   3393:        Replace strsigname() with sig2str(), emulating it as needed.
                   3394:        [1e348cca1fa6]
                   3395: 
                   3396:        * config.h.in, configure, configure.in, src/utmp.c:
                   3397:        Use fseeko() for legacy utmp handling if available.
                   3398:        [b4bbd8d2c0e9]
                   3399: 
                   3400: 2012-08-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3401: 
                   3402:        * compat/strsigname.c, config.h.in, configure, configure.in:
                   3403:        Detect sys_sigabbrev[] and use it in place of sys_signame[] if
                   3404:        present. For some reason glibc does not declare sys_sigabbrev so we
                   3405:        must add an extern definition of our own.
                   3406:        [b38f3fbd7078]
                   3407: 
                   3408:        * compat/strsignal.c, compat/strsigname.c:
                   3409:        Handle NULL entries in sys_siglist and sys_signame.
                   3410:        [a388959d9654]
                   3411: 
                   3412:        * compat/mksiglist.c, compat/mksiglist.h, compat/mksigname.c,
                   3413:        compat/mksigname.h, compat/strsignal.c, compat/strsigname.c:
                   3414:        Convert my_sys_sig{list,name} -> sudo_sys_sig{list,name}
                   3415:        [711e41aba59a]
                   3416: 
                   3417: 2012-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3418: 
                   3419:        * NEWS:
                   3420:        sync
                   3421:        [5a2522488754]
                   3422: 
                   3423:        * src/exec.c:
                   3424:        Pass on SIGTSTP to the command if it was sent by a user process (not
                   3425:        the kernel or the terminal) when we are not I/O logging and set the
                   3426:        default SIGTSTP handler when we re-send the signal to ourself,
                   3427:        restoring our handler after we resume.
                   3428:        [4259c47e31c0]
                   3429: 
                   3430:        * src/exec.c:
                   3431:        Shells typically change their process group when they start up so
                   3432:        that they can implement job control. Most well-behaved shells
                   3433:        change the pgrp back to its original value before suspending so we
                   3434:        must not try to restore in that case, lest we race with the child
                   3435:        upon resume, potentially stopping sudo with SIGTTOU while the
                   3436:        command continues to run. Some shells, such as pdksh, just suspend
                   3437:        the shell by sending SIGSTOP to themselves without restoring the
                   3438:        pgrp. In this case we need to change the pgrp back for them. Should
                   3439:        fix bug #568
                   3440:        [6ac6751ffd17]
                   3441: 
                   3442: 2012-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3443: 
                   3444:        * MANIFEST, compat/Makefile.in, compat/mksigname.c,
                   3445:        compat/mksigname.h, compat/strsignal.c, compat/strsigname.c,
                   3446:        config.h.in, configure, configure.in, include/missing.h, mkdep.pl,
                   3447:        src/exec.c, src/exec_pty.c:
                   3448:        Use strsigname() to print signal names in the debug output. If the
                   3449:        system has no strsigname(), use our own.
                   3450:        [0735f18906b9]
                   3451: 
                   3452: 2012-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3453: 
                   3454:        * plugins/sudoers/regress/testsudoers/test5.inc,
                   3455:        plugins/sudoers/regress/testsudoers/test5.sh:
                   3456:        Remove generated file and change path for temporary include file.
                   3457:        [4e9fa830c6b5]
                   3458: 
                   3459:        * plugins/sudoers/Makefile.in:
                   3460:        When running regress tests, list pass/fail rate for each dir
                   3461:        (testsudoers and visudo) instead of the total. Also prevent the
                   3462:        result files from clobbering each other by keeping them in the
                   3463:        relevant directories.
                   3464:        [6aac53baff7d]
                   3465: 
                   3466:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   3467:        plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   3468:        Don't print an error message in yyerror() if open_sudoers() fails,
                   3469:        we've already printed an error message. Also restore the check for
                   3470:        sudoers_warnings in yyerror().
                   3471:        [aa6036df5fb2]
                   3472: 
                   3473:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   3474:        plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   3475:        plugins/sudoers/toke.l:
                   3476:        Avoid printing the >>> parse error <<< message for testsudoers when
                   3477:        the -t flag is specified.
                   3478:        [76f3433c8992]
                   3479: 
                   3480: 2012-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3481: 
                   3482:        * plugins/sudoers/parse.c:
                   3483:        Fix NULL deref when an entry has no Runas_Entry
                   3484:        [4b14983ff6e7]
                   3485: 
                   3486:        * plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
                   3487:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   3488:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   3489:        src/po/ja.mo, src/po/ja.po, src/po/pl.mo, src/po/pl.po,
                   3490:        src/po/zh_CN.mo, src/po/zh_CN.po:
                   3491:        sync with translationproject.org
                   3492:        [440e9c9b37de]
                   3493: 
                   3494:        * NEWS:
                   3495:        sync
                   3496:        [3142ba2dce60]
                   3497: 
                   3498:        * plugins/sudoers/check.c:
                   3499:        Correct the check_user() comment header.
                   3500:        [73da30308fff]
                   3501: 
                   3502:        * plugins/sudoers/auth/sudo_auth.c:
                   3503:        Change a log_fatal() into log_error() when no auth methods are
                   3504:        configured. The caller already checks the return value.
                   3505:        [05f5c39793a7]
                   3506: 
                   3507:        * plugins/sudoers/logging.c:
                   3508:        Add missing debug_return
                   3509:        [3a76bb7c2fe7]
                   3510: 
                   3511: 2012-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3512: 
                   3513:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
                   3514:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   3515:        doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   3516:        doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
                   3517:        doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3518:        Make the capitalization consistent for .Ss and .Sx
                   3519:        [5c5735ee4b2f]
                   3520: 
                   3521:        * doc/Makefile.in, doc/fixman.sh, doc/fixmdoc.sh, doc/sudo.cat,
                   3522:        doc/sudo.man.in, doc/sudo.mdoc.in:
                   3523:        Add COMMAND EXECUTION section that describes how sudo runs the
                   3524:        command, the extra sudo processes and signal handling.
                   3525:        [dff2d88e984e]
                   3526: 
                   3527: 2012-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3528: 
                   3529:        * Makefile.in:
                   3530:        Happy Easter
                   3531:        [4b9d697c6b83]
                   3532: 
                   3533: 2012-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3534: 
                   3535:        * compat/Makefile.in:
                   3536:        Don't echo the awk command when building siglist.in
                   3537:        [21daa72921e6]
                   3538: 
                   3539:        * doc/fixman.sh, doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
                   3540:        doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3541:        Cosmetic changes.
                   3542:        [19259528e9ad]
                   3543: 
                   3544:        * doc/Makefile.in:
                   3545:        The HISTORY, LICENSE and CONTRIBUTORS files are not longer
                   3546:        generated.
                   3547:        [ea6ac9e981e6]
                   3548: 
                   3549:        * MANIFEST, plugins/sudoers/po/da.po, plugins/sudoers/po/fi.po,
                   3550:        plugins/sudoers/po/hr.po, plugins/sudoers/po/it.mo,
                   3551:        plugins/sudoers/po/it.po, plugins/sudoers/po/sl.po,
                   3552:        plugins/sudoers/po/uk.po, src/po/de.mo, src/po/de.po, src/po/fi.po,
                   3553:        src/po/hr.po, src/po/it.po, src/po/ru.po, src/po/sl.po,
                   3554:        src/po/uk.po, src/po/vi.po:
                   3555:        Sync with translationproject.org and add Italian sudoers
                   3556:        translation.
                   3557:        [9276740aea59]
                   3558: 
                   3559: 2012-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3560: 
                   3561:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3562:        Expand description of fqdn to talk about systems where the hosts
                   3563:        file is searched before DNS.
                   3564:        [4ee812ca6116]
                   3565: 
                   3566: 2012-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3567: 
                   3568:        * doc/Makefile.in:
                   3569:        For cat pages there is nothing to make unless DEVEL is set.
                   3570:        [fab4a5b68708]
                   3571: 
                   3572:        * configure, configure.in, doc/Makefile.in:
                   3573:        Always use mandoc to format cat pages and remove now-extraneous
                   3574:        nroff configure tests.
                   3575:        [5747f4ed5762]
                   3576: 
                   3577:        * pp:
                   3578:        sync polypkg from git
                   3579:        [89ddf6ea3e3f]
                   3580: 
                   3581:        * plugins/sudoers/sudoers.c:
                   3582:        Use AI_FQDN instead of AI_CANONNAME if available since "canonical"
                   3583:        is not always the same as "fully qualified".
                   3584:        [7c1d9c098386]
                   3585: 
                   3586: 2012-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3587: 
                   3588:        * doc/sudoers.mdoc.in:
                   3589:        Fix some typos. Describe error messages not related to policy
                   3590:        permissions.
                   3591:        [f5ebf9030d85]
                   3592: 
                   3593:        * plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
                   3594:        plugins/sudoers/visudo.c:
                   3595:        Add new check_defaults() function to check (but not update) the
                   3596:        Defaults entries. Visudo can now use this instead of
                   3597:        update_defaults to check all the defaults regardless instead of just
                   3598:        the global Defaults entries.
                   3599:        [3fa879ce1b65]
                   3600: 
                   3601: 2012-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3602: 
                   3603:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3604:        Document sudoers log format.
                   3605:        [08998a7061ab]
                   3606: 
                   3607:        * NEWS:
                   3608:        Update for sudo 1.8.5p3
                   3609:        [6e102a5d4e8d]
                   3610: 
                   3611:        * src/load_plugins.c:
                   3612:        Add missing check for I/O plugin API version when checking for the
                   3613:        presence of I/O plugin hooks.
                   3614:        [ef05c7eeaf81]
                   3615: 
                   3616:        * src/hooks.c:
                   3617:        Can't call debug code in the process_hooks_xxx functions() since
                   3618:        ctime() may look up the timezone via the TZ environment variable.
                   3619:        [2179fb26bd8e]
                   3620: 
                   3621: 2012-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3622: 
                   3623:        * src/exec_common.c, src/sesh.c, src/utmp.c:
                   3624:        Include signal.h before sudo_exec.h since it uses sigset_t * in the
                   3625:        fork_pty prototype.
                   3626:        [94fc0d859600]
                   3627: 
                   3628:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in, doc/sudoreplay.cat,
                   3629:        doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
                   3630:        doc/visudo.man.in, doc/visudo.mdoc.in:
                   3631:        Remove OPTIONS section; options now go inside DESCRIPTION
                   3632:        [a619fc58a746]
                   3633: 
                   3634:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   3635:        regen
                   3636:        [44719d80bc06]
                   3637: 
                   3638:        * MANIFEST, NEWS, plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
                   3639:        plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                   3640:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   3641:        plugins/sudoers/po/hr.mo, plugins/sudoers/po/hr.po,
                   3642:        plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
                   3643:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   3644:        plugins/sudoers/po/sl.mo, plugins/sudoers/po/sl.po,
                   3645:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
                   3646:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   3647:        src/po/da.mo, src/po/da.po, src/po/hr.mo, src/po/hr.po,
                   3648:        src/po/sl.mo, src/po/sl.po, src/po/vi.mo, src/po/vi.po:
                   3649:        Sync with translationproject.org and add new Slovenian translation.
                   3650:        [34b4b966bbac]
                   3651: 
                   3652:        * common/alloc.c, plugins/sudoers/check.c, plugins/sudoers/env.c,
                   3653:        plugins/sudoers/linux_audit.c, plugins/sudoers/sudoers.c,
                   3654:        plugins/sudoers/testsudoers.c:
                   3655:        Reduce the number of "internal error, foo overflow" messages that
                   3656:        need to be translated.
                   3657:        [93ffa2b3d53f]
                   3658: 
                   3659:        * NEWS:
                   3660:        Mention HP-UX reboot fix.
                   3661:        [1e39b5aa32ac]
                   3662: 
                   3663:        * INSTALL, NEWS, common/sudo_debug.c, configure, configure.in,
                   3664:        doc/CONTRIBUTORS, include/sudo_debug.h, mkdep.pl, pathnames.h.in,
                   3665:        plugins/sudoers/Makefile.in, plugins/sudoers/sssd.c,
                   3666:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c:
                   3667:        Support for using SSSD (http://fedorahosted.org/sssd/) as a sudoers
                   3668:        data source. From Daniel Kopecek and Pavel Brezina.
                   3669:        [3f85e95d6928]
                   3670: 
                   3671: 2012-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3672: 
                   3673:        * common/sudo_conf.c, src/load_plugins.c:
                   3674:        If sudo.conf contains an I/O plugin but no policy plugin, use
                   3675:        sudoers for the policy plugin. If a policy plugin is specified
                   3676:        without an I/O plugin, only the policy plugin will be loaded.
                   3677:        [ea192df2439d]
                   3678: 
                   3679:        * doc/Makefile.in, doc/sudoers.man.in:
                   3680:        Do not modify the .Os section when building the .man.in file from
                   3681:        .mdoc.in.
                   3682:        [a9f9628e147f]
                   3683: 
                   3684:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3685:        Add a note about wildcards matching multiple words and include an
                   3686:        example. Also mention that for sudoedit, a wildcard in command line
                   3687:        args does not match a slash.
                   3688:        [fcb9fbac14e0]
                   3689: 
                   3690: 2012-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3691: 
                   3692:        * src/exec_pty.c, src/sudo_exec.h:
                   3693:        Fix a comment, update a variable name in a prototype; all cosmetic.
                   3694:        [e89f10cbd6e1]
                   3695: 
                   3696:        * plugins/sudoers/iolog.c:
                   3697:        Cast 2nd argument of lseek() to off_t if it is a constant for
                   3698:        systems with 64-bit off_t but without a proper lseek() prototype.
                   3699:        [d8779da135d0]
                   3700: 
                   3701:        * compat/getline.c, plugins/sudoers/check.c, plugins/sudoers/env.c,
                   3702:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   3703:        plugins/sudoers/visudo.c:
                   3704:        Fix some warnings from clang checker-267
                   3705:        [1e44ef7860b5]
                   3706: 
                   3707:        * plugins/sample/sample_plugin.c:
                   3708:        Fix memory leak found by clang checker-267
                   3709:        [f8a43617fdfb]
                   3710: 
                   3711: 2012-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3712: 
                   3713:        * src/exec.c, src/exec_pty.c, src/sudo.h, src/sudo_exec.h:
                   3714:        If we receive a signal from the command we executed, do not forward
                   3715:        it back to the command. This fixes a problem with BSD-derived
                   3716:        versions of the reboot command which send SIGTERM to all other
                   3717:        processes, including the sudo process. Sudo would then deliver
                   3718:        SIGTERM to reboot which would die before calling the reboot() system
                   3719:        call, effectively leaving the system in single user mode.
                   3720:        [4ffab9ab9e98]
                   3721: 
                   3722: 2012-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3723: 
                   3724:        * doc/fixman.sh, doc/fixmdoc.sh:
                   3725:        Remove section about Solaris 10 on other systems. Add missing
                   3726:        sudoers.man.in bit to fixman.sh.
                   3727:        [176559199ba7]
                   3728: 
                   3729: 2012-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3730: 
                   3731:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in:
                   3732:        Expand section on Solaris privileges.
                   3733:        [3a1bfa2f1743]
                   3734: 
                   3735:        * NEWS:
                   3736:        Expand a bit on the Solaris priv set changes.
                   3737:        [bffb78b4a520]
                   3738: 
                   3739:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   3740:        plugins/sudoers/parse.c, plugins/sudoers/parse.h,
                   3741:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
                   3742:        The second argument to init_parser() is now bool.
                   3743:        [fb727a4fb651]
                   3744: 
                   3745:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
                   3746:        Fix printing of parse error message to stderr.
                   3747:        [dea6b420b84f]
                   3748: 
                   3749:        * plugins/sudoers/check.c, plugins/sudoers/defaults.c,
                   3750:        plugins/sudoers/match.c, plugins/sudoers/parse.c,
                   3751:        plugins/sudoers/parse.h, plugins/sudoers/sudoers.c,
                   3752:        plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c:
                   3753:        If a command matches using an empty Runas_List (i.e. Runas_List is
                   3754:        present but empty) and the -u option was not specified, set runas_pw
                   3755:        to user_pw instead of using runas_default. This is intended to be
                   3756:        used in conjunction with the Solaris Privilege Set support for rules
                   3757:        that grant privileges without changing the user.
                   3758:        [e84a081f3c11]
                   3759: 
                   3760:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.mdoc.in,
                   3761:        plugins/sudoers/gram.c, plugins/sudoers/gram.h,
                   3762:        plugins/sudoers/gram.y, plugins/sudoers/match.c,
                   3763:        plugins/sudoers/parse.c, plugins/sudoers/sudoers_version.h:
                   3764:        Add support for parsing an empty Runas_List, which only allows the
                   3765:        command to be run as the invoking user. This can be used in
                   3766:        conjunction with the Solaris Privilege Set support to grant
                   3767:        privileges without changing the user.
                   3768:        [dc34373792fc]
                   3769: 
                   3770: 2012-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3771: 
                   3772:        * doc/fixman.sh:
                   3773:        Fix HP-UX, just use ".TH name section" like the vendor manuals.
                   3774:        [559738237c92]
                   3775: 
                   3776:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   3777:        Fix compilation on Solaris
                   3778:        [2d310302207c]
                   3779: 
                   3780:        * .hgignore, MANIFEST, doc/Makefile.in, doc/fixman.sh, doc/fixmdoc.sh,
                   3781:        doc/sudo.man.sh, doc/sudo.mdoc.sh, doc/sudoers.man.sh,
                   3782:        doc/sudoers.mdoc.sh:
                   3783:        Generate a sed script file when munging *.mdoc or *.man instead of
                   3784:        passing sed expressions on the command line. Older seds do not
                   3785:        support \n in a replacement so generate and run a sed script
                   3786:        instead.
                   3787:        [0bcce3f1ca18]
                   3788: 
                   3789:        * doc/Makefile.in, doc/sudo.man.in, doc/sudo_plugin.man.in,
                   3790:        doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.man.in,
                   3791:        doc/visudo.man.in:
                   3792:        Use "Sudo VERSION" as the 4th arg to .TH instead of just "VERSION"
                   3793:        [fe0f10b63776]
                   3794: 
                   3795: 2012-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3796: 
                   3797:        * src/exec.c:
                   3798:        When checking whether a signal is user-generated, compare si_code
                   3799:        against SI_USER instead of <= 0 since on HP-UX, terminal-related
                   3800:        signals get a code of 0.
                   3801:        [4e9021243343]
                   3802: 
                   3803:        * src/sudo.c:
                   3804:        SuSE Enterprise Linux uses RLIMIT_NPROC and _SC_CHILD_MAX
                   3805:        interchangably. This causes problems when setting RLIMIT_NPROC to
                   3806:        RLIM_INFINITY due to a bug in bash where bash tries to honor the
                   3807:        value of _SC_CHILD_MAX but treats a value of -1 as an error, and
                   3808:        uses a default value of 32 instead.
                   3809: 
                   3810:        Previously, we just checked RLIMIT_NPROC and, if it was unlimited,
                   3811:        restored the previous value of RLIMIT_NPROC. However, that makes it
                   3812:        impossible to set nproc to unlimited. We now only restore the nproc
                   3813:        resource limit if sysconf(_SC_CHILD_MAX) is negative. In most
                   3814:        cases, pam_limits will set RLIMIT_NPROC for us.
                   3815:        [cb71cc8d0b08]
                   3816: 
                   3817: 2012-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3818: 
                   3819:        * plugins/sudoers/ldap.c:
                   3820:        Active Directory apparently requires that tenths of a second be
                   3821:        present in a date so append .0 to the "now" value in the time
                   3822:        filter. Also remove space for the global AND from TIMEFILTER_LENGTH
                   3823:        since it was not being used consistently. Buffers of
                   3824:        TIMEFILTER_LENGTH now need to account for the terminating NUL byte.
                   3825:        [d28619ff6e45]
                   3826: 
                   3827:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   3828:        Fix SELinux build
                   3829:        [cc0d1f4e851b]
                   3830: 
                   3831: 2012-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3832: 
                   3833:        * MANIFEST:
                   3834:        Remove pod versinons of HISTORY, CONTRIBUTORS and LICENSE as they
                   3835:        were not being kept in sync.
                   3836:        [fc3ad1847cb1]
                   3837: 
                   3838:        * doc/HISTORY, doc/Makefile.in, doc/contributors.pod, doc/history.pod,
                   3839:        doc/license.pod:
                   3840:        Remove pod versinons of HISTORY, CONTRIBUTORS and LICENSE as they
                   3841:        were not being kept in sync.
                   3842:        [950363dffe3a]
                   3843: 
                   3844: 2012-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3845: 
                   3846:        * plugins/sudoers/logging.c:
                   3847:        Fix printing of the permission denied message to standard error when
                   3848:        a user is not allowed to run a command. This got broken by the
                   3849:        recent logging changes.
                   3850:        [b7af63da3ca1]
                   3851: 
                   3852:        * plugins/sudoers/sudoers_version.h:
                   3853:        Bump grammar version for Solaris privs.
                   3854:        [2a2baf024477]
                   3855: 
                   3856:        * doc/schema.ActiveDirectory:
                   3857:        Fix errors introduced when sudoNotBefore, sudoNotAfter and sudoOrder
                   3858:        were added. From David Hicks.
                   3859:        [3fc432a8edb4]
                   3860: 
                   3861: 2012-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3862: 
                   3863:        * plugins/sudoers/Makefile.in:
                   3864:        Remove lex.yy.c when building toke.c
                   3865:        [72bb9e62b289]
                   3866: 
                   3867:        * doc/Makefile.in:
                   3868:        Fix building docs in a build dir.
                   3869:        [7a6f435af022]
                   3870: 
                   3871:        * doc/sudo.man.pl, doc/sudo.pod, doc/sudo_plugin.pod,
                   3872:        doc/sudoers.ldap.pod, doc/sudoers.man.pl, doc/sudoers.pod,
                   3873:        doc/sudoreplay.pod, doc/visudo.pod:
                   3874:        Remove pod versions of the manual; we now use mdoc.
                   3875:        [5c967d2dd5db]
                   3876: 
                   3877:        * MANIFEST, doc/Makefile.in, doc/sudo.man.sh, doc/sudo.mdoc.sh,
                   3878:        doc/sudoers.man.sh, doc/sudoers.mdoc.sh:
                   3879:        Add post-processing scripts to strip out login class, BSD auth,
                   3880:        SELinux and privilege set bits when they are not supported.
                   3881:        [d0d51f72f597]
                   3882: 
                   3883:        * NEWS, configure.in, doc/CONTRIBUTORS, doc/Makefile.in,
                   3884:        doc/contributors.pod, doc/sudoers.cat, doc/sudoers.man.in,
                   3885:        doc/sudoers.man.pl, doc/sudoers.mdoc.in, doc/sudoers.pod,
                   3886:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
                   3887:        plugins/sudoers/def_data.in, plugins/sudoers/gram.c,
                   3888:        plugins/sudoers/gram.h, plugins/sudoers/gram.y,
                   3889:        plugins/sudoers/parse.c, plugins/sudoers/parse.h,
                   3890:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   3891:        plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
                   3892:        plugins/sudoers/toke.l, src/sudo.c, src/sudo.h:
                   3893:        Merge in Solaris privilege support by Darren Moffat and John
                   3894:        Zolnowsky
                   3895:        [3aa0a64f2f5c]
                   3896: 
                   3897: 2012-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3898: 
                   3899:        * doc/contributors.pod:
                   3900:        Sync with CONTRIBUTORS file
                   3901:        [9a0852306ad9]
                   3902: 
                   3903:        * doc/sudo.man.in, doc/sudo_plugin.man.in, doc/sudoers.ldap.man.in,
                   3904:        doc/sudoers.man.in, doc/sudoreplay.man.in:
                   3905:        Regen .man.in files with my private mandoc.
                   3906:        [dc3c9fc449eb]
                   3907: 
                   3908:        * doc/Makefile.in:
                   3909:        add MANDOC variable
                   3910:        [35527e66afc5]
                   3911: 
                   3912: 2012-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3913: 
                   3914:        * doc/sudo.man.in, doc/sudo_plugin.man.in, doc/sudoers.ldap.man.in,
                   3915:        doc/sudoers.man.in, doc/sudoreplay.man.in, doc/visudo.man.in:
                   3916:        Regen .man.in files with hacked mandoc to avoid issues with historic
                   3917:        nroff.
                   3918:        [d45cfa7d665f]
                   3919: 
                   3920: 2012-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3921: 
                   3922:        * doc/sudo.mdoc.in, doc/sudoers.mdoc.in:
                   3923:        Fix groff warnings.
                   3924:        [111d522ca807]
                   3925: 
                   3926:        * doc/Makefile.in:
                   3927:        Fix dependencies for .man.in files.
                   3928:        [aefeffe1af2b]
                   3929: 
                   3930:        * .hgignore:
                   3931:        Add doc/*.mdoc to ignore file
                   3932:        [1e4de6ef2ad8]
                   3933: 
                   3934:        * INSTALL, MANIFEST, NEWS, configure, configure.in, doc/Makefile.in,
                   3935:        doc/sudo.cat, doc/sudo.man.in, doc/sudo.mdoc.in,
                   3936:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   3937:        doc/sudo_plugin.mdoc.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   3938:        doc/sudoers.ldap.man.in, doc/sudoers.ldap.mdoc.in,
                   3939:        doc/sudoers.man.in, doc/sudoers.mdoc.in, doc/sudoreplay.cat,
                   3940:        doc/sudoreplay.man.in, doc/sudoreplay.mdoc.in, doc/visudo.cat,
                   3941:        doc/visudo.man.in, doc/visudo.mdoc.in:
                   3942:        Build .man.in and .cat files from .mdoc.in files. Add new --with-man
                   3943:        and --with-mdoc configure options.
                   3944:        [c963fd7e8f80]
                   3945: 
                   3946: 2012-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3947: 
                   3948:        * doc/sudo.mdoc.in, doc/sudo_plugin.mdoc.in, doc/sudoers.ldap.mdoc.in,
                   3949:        doc/sudoers.mdoc.in, doc/sudoreplay.mdoc.in, doc/visudo.mdoc.in:
                   3950:        Sudo manuals formatted in mdoc, to replace the pod versions.
                   3951:        [e6dca4030451]
                   3952: 
                   3953:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   3954:        doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   3955:        doc/sudoers.ldap.pod, doc/sudoers.man.in, doc/sudoers.pod,
                   3956:        doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
                   3957:        doc/visudo.cat, doc/visudo.man.in, doc/visudo.pod:
                   3958:        More minor costmetic fixes.
                   3959:        [a7287a68385a]
                   3960: 
                   3961: 2012-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3962: 
                   3963:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
                   3964:        Minor cosmetic fixes.
                   3965:        [9c48bdaf3946]
                   3966: 
                   3967: 2012-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3968: 
                   3969:        * plugins/sudoers/logging.c, plugins/sudoers/po/sudoers.pot:
                   3970:        Use "a password is required" instead of "password required" when the
                   3971:        -n flag is used and we need to read a password.
                   3972:        [a3c30fc41648]
                   3973: 
                   3974: 2012-07-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   3975: 
                   3976:        * NEWS:
                   3977:        Mention logging changes.
                   3978:        [8238fd6e02e8]
                   3979: 
                   3980:        * plugins/sudoers/po/sudoers.pot:
                   3981:        regen
                   3982:        [e2cf634ba63b]
                   3983: 
                   3984:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   3985:        Document that other mail_* flags have precedence over mail_badpass.
                   3986:        [9f4cc9188f40]
                   3987: 
                   3988:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
                   3989:        plugins/sudoers/logging.c, plugins/sudoers/logging.h,
                   3990:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   3991:        Move log_denial() calls and logic to log_failure(). Move
                   3992:        authentication failure logging to log_auth_failure(). Both of these
                   3993:        call audit_failure() for us.
                   3994: 
                   3995:        This subtly changes logging for commands that are denied by sudoers
                   3996:        but where the user failed to enter the correct password.
                   3997:        Previously, these would be logged as "N incorrect password attempts"
                   3998:        but now are logged as "command not allowed". Fixes bug #563
                   3999:        [cad35f0b3ad7]
                   4000: 
                   4001: 2012-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4002: 
                   4003:        * common/aix.c:
                   4004:        Do not set a resource limit to zero when we are unable to fetch a
                   4005:        value from /etc/security/limits.
                   4006:        [62bfb0a7895e]
                   4007: 
                   4008: 2012-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4009: 
                   4010:        * sudo.pp:
                   4011:        Add "Provides: sudo" to debian sudo-ldap package
                   4012:        [beb8afa0beb2]
                   4013: 
                   4014: 2012-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4015: 
                   4016:        * configure, configure.in, zlib/Makefile.in:
                   4017:        Define NO_VIZ for zlib when gcc doesn't support symbol visibility
                   4018:        attributes.
                   4019:        [9fdcbf526386]
                   4020: 
                   4021:        * configure, configure.in:
                   4022:        Use the autoconf cache when checking for symbol export control
                   4023:        support.
                   4024:        [03c2cce8711f]
                   4025: 
                   4026:        * INSTALL, common/Makefile.in, compat/Makefile.in, configure,
                   4027:        configure.in, mkpkg, plugins/sample/Makefile.in,
                   4028:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   4029:        plugins/system_group/Makefile.in, src/Makefile.in:
                   4030:        Add configure check for building PIE executables instead of doing it
                   4031:        in mkpkg.
                   4032:        [02b5b78ef258]
                   4033: 
                   4034:        * sudo.pp:
                   4035:        MacOS pp backend doesn't like modes longer than 4 characters.
                   4036:        [01b49022bf01]
                   4037: 
                   4038: 2012-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4039: 
                   4040:        * configure, configure.in:
                   4041:        Add -Wc,-fstack-protector to LT_LDFLAGS instead of adding
                   4042:        -fstack-protector to LDFLAGS so it doesn't get stripped out. Libtool
                   4043:        will strip -fstack-protector from the linker flags and we always
                   4044:        link with libtool.
                   4045:        [0a0a0250ac2b]
                   4046: 
                   4047: 2012-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4048: 
                   4049:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
                   4050:        doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   4051:        doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
                   4052:        doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
                   4053:        Regen for sudo 1.8.6
                   4054:        [1657ee28b496]
                   4055: 
                   4056:        * NEWS, doc/sudoers.ldap.pod:
                   4057:        Document improved Tivoli Directory Server support.
                   4058:        [fb411edf4687]
                   4059: 
                   4060:        * config.h.in, configure, configure.in, plugins/sudoers/ldap.c:
                   4061:        Add support for ldaps using Tivoli LDAP libraries. Add ldap.conf
                   4062:        option to specify Tivoli key db password. Allow TLS ciphers to be
                   4063:        configured for Tivoli.
                   4064:        [737e17c91e60]
                   4065: 
                   4066: 2012-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4067: 
                   4068:        * plugins/sudoers/ldap.c:
                   4069:        Tivoli Directory Server 6.3 libs always return a (bogus) error when
                   4070:        setting LDAP_OPT_CONNECT_TIMEOUT.
                   4071:        [504406637c38]
                   4072: 
                   4073:        * NEWS:
                   4074:        Update
                   4075:        [687a755604e8]
                   4076: 
                   4077:        * plugins/sudoers/ldap.c:
                   4078:        Treat LDAP_OPT_CONNECT_TIMEOUT (Tivoli Directory Server 6.3) the
                   4079:        same as LDAP_OPT_CONNECT_TIMEOUT (OpenSSH). Don't make failure to a
                   4080:        set an ldap option fatal.
                   4081:        [17cf93ae3304]
                   4082: 
                   4083: 2012-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4084: 
                   4085:        * plugins/sudoers/sudoers.c:
                   4086:        Zero pointers in sudo_user struct after freeing, just in case.
                   4087:        [8eff1f80b943]
                   4088: 
                   4089:        * plugins/sudoers/sudoers.c:
                   4090:        Free user_gids in close function if it has not already been freed.
                   4091:        [cbce28877f37]
                   4092: 
                   4093:        * plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
                   4094:        plugins/sudoers/sudoers.h:
                   4095:        Defer group ID to name resolution until we actually need it.
                   4096:        [463e75b81e89]
                   4097: 
                   4098:        * src/sudo.c:
                   4099:        It is safe to read in sudo.conf before calling user_info().
                   4100:        [3290b6434e3c]
                   4101: 
                   4102:        * plugins/sudoers/env.c, plugins/sudoers/ldap.c:
                   4103:        Use MAX_UID_T_LEN + 1 for uid/gid buffers, not MAX_UID_T_LEN to
                   4104:        prevent potential truncation. Bug #562.
                   4105:        [29d9fc4e0c4e]
                   4106: 
                   4107: 2012-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4108: 
                   4109:        * sudo.pp:
                   4110:        If installing with installp, error out if there is already an
                   4111:        instance of the rpm package installed.
                   4112:        [ec24c6faba22]
                   4113: 
                   4114:        * mkpkg:
                   4115:        Add --disable-nls for AIX
                   4116:        [192ac2f7d65e]
                   4117: 
                   4118: 2012-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4119: 
                   4120:        * sudo.pp:
                   4121:        Debian sudo-ldap packages should now depend on libldap-2.4-2, not
                   4122:        libldap2.
                   4123:        [cbcec71e6b58]
                   4124: 
                   4125: 2012-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4126: 
                   4127:        * sudo.pp:
                   4128:        Add Homepage and Bugs to debian control file.
                   4129:        [0f19d7d14e66]
                   4130: 
                   4131: 2012-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4132: 
                   4133:        * mkpkg:
                   4134:        fix typo when setting aix_freeware
                   4135:        [2fd6feb50195]
                   4136: 
                   4137:        * common/Makefile.in, compat/Makefile.in, configure, configure.in,
                   4138:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   4139:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   4140:        plugins/system_group/Makefile.in, src/Makefile.in, zlib/Makefile.in:
                   4141:        Don't run regress tests or sudoers sanity check (using the newly-
                   4142:        built visudo) when cross compiling. Bug #560
                   4143:        [0c4e3f68b2f5]
                   4144: 
                   4145:        * MANIFEST, configure, configure.in, plugins/sample/Makefile.in,
                   4146:        plugins/sample/sample_plugin.exp, plugins/sample/sample_plugin.map,
                   4147:        plugins/sample/sample_plugin.sym, plugins/sample_group/Makefile.in,
                   4148:        plugins/sample_group/sample_group.exp,
                   4149:        plugins/sample_group/sample_group.map,
                   4150:        plugins/sample_group/sample_group.sym, plugins/sudoers/Makefile.in,
                   4151:        plugins/sudoers/sudoers.exp, plugins/sudoers/sudoers.map,
                   4152:        plugins/sudoers/sudoers.sym, plugins/system_group/Makefile.in,
                   4153:        plugins/system_group/system_group.exp,
                   4154:        plugins/system_group/system_group.map,
                   4155:        plugins/system_group/system_group.sym:
                   4156:        Rename foo.sym -> foo.exp Remove foo.map from the repo and generate
                   4157:        it on demand Use a loader option file for HP-UX ld to explicitly
                   4158:        export symbols
                   4159:        [2402ff5302ab]
                   4160: 
                   4161:        * src/Makefile.in:
                   4162:        Remove extraneous backslash
                   4163:        [8ca054de138c]
                   4164: 
                   4165:        * plugins/sudoers/regress/check_symbols/check_symbols.c:
                   4166:        Don't check for errorx as an exported symbols as it is now a macro.
                   4167:        Check for user_in_group() instead.
                   4168:        [7b02c8ecd3ea]
                   4169: 
                   4170: 2012-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4171: 
                   4172:        * configure, configure.in:
                   4173:        Adjust ld map file support to use an anonymous scope to match the
                   4174:        updated .map files.
                   4175:        [49be44282d9e]
                   4176: 
                   4177: 2012-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4178: 
                   4179:        * config.h.in, configure, configure.in, include/gettext.h:
                   4180:        Older versions of Solaris lack ngettext()
                   4181:        [028af10dfa5f]
                   4182: 
                   4183:        * configure, configure.in:
                   4184:        Move the check for -static-libgcc until after AC_LANG_WERROR has
                   4185:        been called and use AX_CHECK_COMPILE_FLAG().
                   4186:        [a7b09120e7ff]
                   4187: 
                   4188:        * include/gettext.h:
                   4189:        Sudo defines HAVE_SETLOCALE not HAVE_LOCALE_H
                   4190:        [3aa2780d4a4e]
                   4191: 
                   4192:        * include/error.h, include/sudo_debug.h:
                   4193:        Fix gcc 2.x variant macro support.
                   4194:        [8e71c2370997]
                   4195: 
                   4196:        * plugins/sudoers/logging.c, plugins/sudoers/sudoreplay.c:
                   4197:        Fix compilation on gcc 2.95 and other compilers that only allow
                   4198:        variable declarations at the beginning of a block.
                   4199:        [9d80c802bb46]
                   4200: 
                   4201:        * configure, configure.in, plugins/sudoers/Makefile.in:
                   4202:        Link check_symbols with SUDO_LIBS to make sure we link with the
                   4203:        requisite libraries to successfully dlopen sudoers.so. This is
                   4204:        needed on HP-UX where a program dlopen()ing a shared object that
                   4205:        uses pthreads must also be linked with pthreads (and HP-UX LDAP uses
                   4206:        pthreads).
                   4207:        [b8961cd82337]
                   4208: 
                   4209:        * plugins/sudoers/regress/check_symbols/check_symbols.c:
                   4210:        Add check for exported local symbols. This will cause a "make
                   4211:        check" failure on systems where we don't support symbol hiding.
                   4212:        [8aa549389bb1]
                   4213: 
                   4214:        * configure, configure.in:
                   4215:        Additional ${foo} -> $(foo) Makefile tweaks.
                   4216:        [046bbde18f52]
                   4217: 
                   4218:        * plugins/sample/sample_plugin.map,
                   4219:        plugins/sample_group/sample_group.map, plugins/sudoers/sudoers.map,
                   4220:        plugins/system_group/system_group.map:
                   4221:        No need to provide a name for the scope in the map file since we
                   4222:        don't use the it for versioning.
                   4223:        [5ed4b997560d]
                   4224: 
                   4225: 2012-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4226: 
                   4227:        * MANIFEST, plugins/sudoers/Makefile.in,
                   4228:        plugins/sudoers/regress/check_symbols/check_symbols.c:
                   4229:        Add regress test for symbol visibility.
                   4230:        [9adddd4e0518]
                   4231: 
                   4232: 2012-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4233: 
                   4234:        * NEWS, configure, configure.in:
                   4235:        sudo 1.8.6
                   4236:        [57008a7afb77]
                   4237: 
                   4238:        * configure, configure.in, include/missing.h:
                   4239:        Add support for controlling symbol visibility using the HP and
                   4240:        Solaris C compilers.
                   4241:        [46d5b468979e]
                   4242: 
                   4243:        * plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
                   4244:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   4245:        plugins/sudoers/sudoers.h:
                   4246:        Use the expanded io log dir when updating the sequence number.
                   4247:        Includes a workaround for older versions of sudo where the sequence
                   4248:        number was stored in the unexpanded io log dir.
                   4249:        [210797dab9a8]
                   4250: 
                   4251: 2012-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4252: 
                   4253:        * src/parse_args.c:
                   4254:        Simplify "sudo -s" argv rewriting.
                   4255:        [7be143dae7c5]
                   4256: 
                   4257:        * MANIFEST, configure, configure.in, plugins/sample/Makefile.in,
                   4258:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   4259:        plugins/system_group/Makefile.in, src/Makefile.in,
                   4260:        src/sudo_noexec.map:
                   4261:        Don't use a map file for sudo_noexec.so since Solaris ld doesn't
                   4262:        allow '*' in the global section. The libtool export flag is now
                   4263:        added to LT_LDFLAGS instead of commenting/uncommenting lines.
                   4264:        [38fc37a66b04]
                   4265: 
                   4266: 2012-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4267: 
                   4268:        * config.h.in, configure, configure.in, include/missing.h:
                   4269:        The visibility attribute was actually added in gcc 3.3.x, not 4.0.
                   4270:        Just assume that if -fvisibility=hidden works that the attribute is
                   4271:        usable.
                   4272:        [d3904d6faf14]
                   4273: 
                   4274:        * plugins/sudoers/check.c, plugins/sudoers/iolog.c,
                   4275:        plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
                   4276:        plugins/sudoers/match.c, plugins/sudoers/pwutil.c,
                   4277:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
                   4278:        plugins/sudoers/sudoers.h, plugins/sudoers/sudoers.map,
                   4279:        plugins/sudoers/sudoers.sym, plugins/sudoers/testsudoers.c,
                   4280:        plugins/system_group/system_group.c:
                   4281:        Export group cache from sudoers.so for system_group.so to use.
                   4282:        [16695d207fc5]
                   4283: 
                   4284:        * MANIFEST, configure, configure.in, include/missing.h,
                   4285:        plugins/sample/Makefile.in, plugins/sample/sample_plugin.map,
                   4286:        plugins/sample_group/Makefile.in,
                   4287:        plugins/sample_group/sample_group.map, plugins/sudoers/Makefile.in,
                   4288:        plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
                   4289:        plugins/sudoers/sudoers.map, plugins/system_group/Makefile.in,
                   4290:        plugins/system_group/system_group.map, src/sudo_noexec.c,
                   4291:        src/sudo_noexec.map:
                   4292:        Use gcc's visibility attribute to specify when symbols are visible
                   4293:        or hidden, if available. If not available, use an ELF version
                   4294:        script if it is supported. If all else fails, fall back to using
                   4295:        libtool's -export-symbols.
                   4296:        [64e889921727]
                   4297: 
                   4298: 2012-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4299: 
                   4300:        * sudo.pp:
                   4301:        Add mode for installed locale files but leave the directories with
                   4302:        default mode and owner.
                   4303:        [142237dbb31f]
                   4304: 
                   4305: 2012-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4306: 
                   4307:        * mkpkg, sudo.pp:
                   4308:        Install AIX packages under /opt/freeware with links in /usr/bin and
                   4309:        /usr/sbin. This matches the layout of the sudo package from AIX
                   4310:        freeware.
                   4311:        [0b79d47bbe01]
                   4312: 
                   4313:        * Makefile.in, configure, configure.in, plugins/sample/Makefile.in,
                   4314:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   4315:        plugins/system_group/Makefile.in, src/Makefile.in, sudo.pp:
                   4316:        Install shared objects with mode 0644 except on HP-UX which needs
                   4317:        the executable bit set.
                   4318:        [ae416af0ba6c]
                   4319: 
                   4320:        * Makefile.in, doc/Makefile.in, include/Makefile.in,
                   4321:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   4322:        Make installed file modes consistent with the file modes in the sudo
                   4323:        package.
                   4324:        [307386373289]
                   4325: 
                   4326: 2012-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4327: 
                   4328:        * doc/sudoers.pod:
                   4329:        Add "%:" prefix when talking about QAS non-Unix group support.
                   4330:        [7cb25f6861f8]
                   4331: 
                   4332:        * pp, sudo.pp:
                   4333:        Fix packaging of symbolic links on HP-UX when the link source
                   4334:        already exists in the filesystem.
                   4335:        [c9bb48031596]
                   4336: 
                   4337:        * mkpkg:
                   4338:        Only specify prefix if we are overriding the default value. Fixes
                   4339:        the man dir (/usr/local/man vs. /usr/local/share/man).
                   4340:        [65351b6c1697]
                   4341: 
                   4342:        * sudo.pp:
                   4343:        Fix setting of sudoedit_man variable.
                   4344:        [9beed9ae5bba]
                   4345: 
                   4346:        * doc/Makefile.in:
                   4347:        Echo the command when linking the sudoedit manual.
                   4348:        [6c83b5657b55]
                   4349: 
                   4350: 2012-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4351: 
                   4352:        * mkpkg, sudo.pp:
                   4353:        Build .deb packages with selinux support.
                   4354:        [3fd9cb1b4526]
                   4355: 
                   4356: 2012-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4357: 
                   4358:        * sudo.pp:
                   4359:        Don't list paths for unstripped binaries in the lintial overrides.
                   4360:        [4c8e16f1773b]
                   4361: 
                   4362:        * pp:
                   4363:        Add support for Installed-Size header in control file, required by
                   4364:        newer debian versions.
                   4365:        [e97d76234bee]
                   4366: 
                   4367:        * pp:
                   4368:        Fix extended description in .deb files.
                   4369:        [d35e27ace146]
                   4370: 
                   4371:        * sudo.pp:
                   4372:        Add Depends, Replaces and Conflicts headers for .deb packages.
                   4373:        [76eb6c4b3278]
                   4374: 
                   4375: 2012-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4376: 
                   4377:        * plugins/sudoers/sudo_nss.c:
                   4378:        If there are no privs to print, write the message to the lbuf
                   4379:        instead of printing it directly.
                   4380:        [ecd56226abb7]
                   4381: 
                   4382: 2012-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4383: 
                   4384:        * sudo.pp:
                   4385:        Set -e in %pos and %preun for debian to quiet a lintian warning.
                   4386:        [8bb908514df9]
                   4387: 
                   4388:        * doc/Makefile.in, src/Makefile.in, sudo.pp:
                   4389:        Install sudoedit and the sudoedit manual as symbolic links, not hard
                   4390:        links and package them as such.
                   4391:        [f317ff3cf3e7]
                   4392: 
                   4393:        * sudo.pp:
                   4394:        Make sudo binary permissions 755 instead of 111 Add lintian
                   4395:        overrides file for .deb files.
                   4396:        [991cd7d7f0e1]
                   4397: 
                   4398:        * configure, configure.in, doc/Makefile.in, mkpkg:
                   4399:        Replace out of date MAN_POSTINSTALL with MANCOMPRESS and
                   4400:        MANCOMPRESSEXT which can be used to compress the installed manual
                   4401:        pages. Compress the man pages for .deb files to appease lintian.
                   4402:        [4e34083b41d2]
                   4403: 
                   4404:        * sudo.pp:
                   4405:        Debian fixes:
                   4406:         * fix modes to be more in line with what Debian expects
                   4407:         * add section
                   4408:         * install LICENSE as copyright and ChangeLog as changelog
                   4409:         * create stub changelog.debian
                   4410:        [7f6c5647f588]
                   4411: 
                   4412:        * pp:
                   4413:        Fix find command to properly skip files in the DEBIAN dir when
                   4414:        building md5sums.
                   4415:        [8918bde941fa]
                   4416: 
                   4417:        * pp, sudo.pp:
                   4418:        Use a debian-compliant package maintainer field.
                   4419:        [fc51a94170eb]
                   4420: 
                   4421: 2012-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4422: 
                   4423:        * plugins/sudoers/sudoreplay.c:
                   4424:        No need to loop over atomic_writev(), it guarantees to write all
                   4425:        data or return an error.
                   4426: 
                   4427:        Fix handling of stdout/stderr that contains "\r\n" and handle a
                   4428:        "\r\n" pair that spans a buffer.
                   4429:        [8aaf02d90c45]
                   4430: 
                   4431: 2012-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4432: 
                   4433:        * NEWS:
                   4434:        Update for sudo 1.8.5p2
                   4435:        [d369d4d40a19]
                   4436: 
                   4437:        * plugins/sudoers/sudoreplay.c:
                   4438:        Instead of doing extra write()s when replaying stdout, build up a
                   4439:        vector for writev() instead. This results in far fewer system
                   4440:        calls.
                   4441:        [303d866c025c]
                   4442: 
                   4443: 2012-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4444: 
                   4445:        * src/env_hooks.c, src/sudo.h, src/tgetpass.c:
                   4446:        Provide unhooked version of getenv() and use it when looking up
                   4447:        DISPLAY and SUDO_ASKPASS in the environment.
                   4448:        [04dbdccf4a14]
                   4449: 
                   4450: 2012-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4451: 
                   4452:        * plugins/sudoers/sudoreplay.c:
                   4453:        When replaying a log of stdout or stderr, do newline to carriage
                   4454:        return + linefeed conversion. We cannot have termios do this for us
                   4455:        since we've disabled output postprocessing (POST) when setting raw
                   4456:        mode.
                   4457:        [61352a7d996f]
                   4458: 
                   4459: 2012-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4460: 
                   4461:        * configure, configure.in:
                   4462:        When checking for -fstack-protector, treat warnings as fatal errors.
                   4463:        [4124cd12d511]
                   4464: 
                   4465: 2012-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4466: 
                   4467:        * configure, configure.in:
                   4468:        Fix test for -z relro
                   4469:        [548bdb6f5c4a]
                   4470: 
                   4471:        * MANIFEST:
                   4472:        Add m4/ax_check_compile_flag.m4 and m4/ax_check_link_flag.m4
                   4473:        [ed063264a2a1]
                   4474: 
                   4475:        * INSTALL, aclocal.m4, configure, configure.in,
                   4476:        m4/ax_check_compile_flag.m4, m4/ax_check_link_flag.m4:
                   4477:        Build with -fstack-protector and link with -zrelo where supported.
                   4478:        Added --disable-hardening option to disable hardening options.
                   4479:        [0b6c1a1ceb03]
                   4480: 
                   4481: 2012-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4482: 
                   4483:        * plugins/sudoers/Makefile.in,
                   4484:        plugins/sudoers/regress/testsudoers/test1.sh,
                   4485:        plugins/sudoers/regress/testsudoers/test2.sh,
                   4486:        plugins/sudoers/regress/testsudoers/test3.sh,
                   4487:        plugins/sudoers/regress/testsudoers/test4.out.ok,
                   4488:        plugins/sudoers/regress/testsudoers/test4.sh,
                   4489:        plugins/sudoers/regress/testsudoers/test5.inc,
                   4490:        plugins/sudoers/regress/testsudoers/test5.out.ok,
                   4491:        plugins/sudoers/regress/testsudoers/test5.sh,
                   4492:        plugins/sudoers/testsudoers.c:
                   4493:        Add tests for sudoers mode, owner and group checks.
                   4494:        [a7607443aba0]
                   4495: 
                   4496:        * plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
                   4497:        If sudoers_mode is group-readable but the actual sudoers file is
                   4498:        not, open the file as uid 0, not uid 1. This fixes a problem when
                   4499:        sudoers has a more restrictive mode than what sudo expects to find.
                   4500:        In older versions, sudo would silently chmod the file to add the
                   4501:        group-readable bit.
                   4502:        [c056b6003e6f]
                   4503: 
                   4504:        * INSTALL, common/secure_path.c, config.h.in, configure, configure.in:
                   4505:        No longer throw an error if sudoers is a symbolic link. Deprecated
                   4506:        the --with-stow option as that is now (effectively) the default.
                   4507:        [8ce783e54886]
                   4508: 
                   4509: 2012-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4510: 
                   4511:        * plugins/sudoers/Makefile.in,
                   4512:        plugins/sudoers/regress/testsudoers/test2.inc,
                   4513:        plugins/sudoers/regress/testsudoers/test2.out.ok,
                   4514:        plugins/sudoers/regress/testsudoers/test2.sh,
                   4515:        plugins/sudoers/regress/testsudoers/test3.d/root,
                   4516:        plugins/sudoers/regress/testsudoers/test3.out.ok,
                   4517:        plugins/sudoers/regress/testsudoers/test3.sh:
                   4518:        Add basic tests for #include and #includedir
                   4519:        [b303e4218951]
                   4520: 
                   4521:        * plugins/sudoers/testsudoers.c:
                   4522:        Add -U sudoers_uid option to testsudoers.
                   4523:        [3f8ed13501ba]
                   4524: 
1.1.1.2   misho    4525: 2012-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4526: 
                   4527:        * NEWS, configure, configure.in:
                   4528:        Update for 1.8.5p1
                   4529:        [c33c49bf5b4b]
                   4530: 
                   4531:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   4532:        Fix #includedir; from Mike Frysinger
                   4533:        [d4833d4e39a0]
                   4534: 
                   4535:        * plugins/sudoers/check.c:
                   4536:        Don't prompt for a password if the user is in the exempt group, is
                   4537:        root, or is running the command as themselves even if the -k option
                   4538:        was specified. This makes "sudo -k command" consistent with the
                   4539:        behavior one would get if the user ran "sudo -k" immediately before
                   4540:        running the command.
                   4541:        [632b3961df00]
                   4542: 
                   4543: 2012-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4544: 
                   4545:        * INSTALL:
                   4546:        Fix capitalization
                   4547:        [7258aa977caf]
                   4548: 
                   4549:        * mkpkg:
                   4550:        Build PIE executable on Mac OS X 10.5 and above.
                   4551:        [2a5c7ef92182]
                   4552: 
                   4553: 2012-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4554: 
                   4555:        * NEWS:
                   4556:        Update for sudo 1.8.4p5
                   4557:        [21164f508b68]
                   4558: 
                   4559:        * plugins/sudoers/match_addr.c:
                   4560:        Add missing break between AF_INET and AF_INET6 in
                   4561:        addr_matches_if_netmask()
                   4562:        [672a4793931a]
                   4563: 
                   4564:        * plugins/sudoers/mon_systrace.c:
                   4565:        Move systrace monitor code to the attic
                   4566:        [d6faf4754e9c]
                   4567: 
                   4568: 2012-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4569: 
                   4570:        * src/exec.c:
                   4571:        The pointer to the siginfo_t struct in a signal handler may be NULL.
                   4572:        [41a4ee934b53]
                   4573: 
                   4574: 2012-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4575: 
                   4576:        * plugins/sudoers/pwutil.c:
                   4577:        Fix an alignment problem on NetBSD systems with a 64-bit time_t and
                   4578:        strict alignment. Based on a patch from Martin Husemann.
                   4579:        [1e5ba3c18f17]
                   4580: 
                   4581:        * include/missing.h:
                   4582:        Add offsetof macro for those without it.
                   4583:        [e44cb51d2587]
                   4584: 
                   4585:        * MANIFEST:
                   4586:        add system_group plugin
                   4587:        [6169793b510c]
                   4588: 
                   4589: 2012-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4590: 
                   4591:        * compat/dlopen.c:
                   4592:        Implement RTLD_NEXT and fix RTLD_DEFAULT for HP-UX.
                   4593:        [85bd03bc5d94]
                   4594: 
                   4595: 2012-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4596: 
                   4597:        * NEWS:
                   4598:        Mention system_group plugin
                   4599:        [05393dd4bdb8]
                   4600: 
                   4601:        * Makefile.in, plugins/sudoers/Makefile.in,
                   4602:        plugins/system_group/Makefile.in:
                   4603:        update depends
                   4604:        [6feb0b824fc4]
                   4605: 
                   4606:        * plugins/system_group/system_group.c:
                   4607:        Only call gr_delref() when use sudo's password caching functions.
                   4608:        [1103442e21fa]
                   4609: 
                   4610:        * plugins/sample_group/Makefile.in, plugins/system_group/Makefile.in:
                   4611:        Add missing dependency on libreplace.la
                   4612:        [05bfd9d4657f]
                   4613: 
                   4614:        * compat/dlopen.c:
                   4615:        Emulate RTLD_DEFAULT and RTLD_SELF w/ shl_findsym() using NULL and
                   4616:        PROG_HANDLE.
                   4617:        [2382d0693acc]
                   4618: 
                   4619:        * Makefile.in, configure, configure.in,
                   4620:        plugins/system_group/Makefile.in,
                   4621:        plugins/system_group/system_group.c,
                   4622:        plugins/system_group/system_group.sym:
                   4623:        Add group plugin that does lookups by name using the system group
                   4624:        database.
                   4625:        [2ddbb604112f]
                   4626: 
                   4627:        * plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po, src/po/pl.mo,
                   4628:        src/po/pl.po:
                   4629:        sync with translationproject.org
                   4630:        [4ef05df4226d]
                   4631: 
                   4632: 2012-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4633: 
                   4634:        * plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                   4635:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   4636:        plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
                   4637:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
                   4638:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   4639:        src/po/de.mo, src/po/de.po, src/po/eo.mo, src/po/eo.po,
                   4640:        src/po/fi.mo, src/po/fi.po, src/po/ja.mo, src/po/ja.po,
                   4641:        src/po/ru.mo, src/po/ru.po, src/po/sr.mo, src/po/sr.po,
                   4642:        src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
                   4643:        src/po/zh_CN.mo, src/po/zh_CN.po:
                   4644:        sync with translationproject.org
                   4645:        [115c3f828fc5]
                   4646: 
                   4647: 2012-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4648: 
                   4649:        * sudo.pp:
                   4650:        Add mode for docdir and use '-' (default) for localedir mode. Fixes
                   4651:        a problem on Linux when building in a directory with the setgid bit
                   4652:        set.
                   4653:        [582279c8bcb1]
                   4654: 
                   4655: 2012-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4656: 
                   4657:        * pp:
                   4658:        Match CentOS 6.0
                   4659:        [1e99ef210f98]
                   4660: 
                   4661: 2012-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4662: 
                   4663:        * NEWS:
                   4664:        Update with recent changes
                   4665:        [c5fc220ba696]
                   4666: 
                   4667:        * pp:
                   4668:        Fix version check on AIX
                   4669:        [d272e39112f4]
                   4670: 
                   4671:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   4672:        regen
                   4673:        [72b23509465a]
                   4674: 
                   4675:        * plugins/sudoers/ldap.c:
                   4676:        Need to call ldapssl_clientauth_init() for start_tls on Mozilla LDAP
                   4677:        SDK.
                   4678:        [87b685e70b9a]
                   4679: 
                   4680:        * plugins/sudoers/ldap.c:
                   4681:        Fix printing of invalid uri
                   4682:        [645aa53acdde]
                   4683: 
                   4684:        * plugins/sudoers/auth/pam.c:
                   4685:        Pass PAM_SILENT when deleting creds to remove an annoying warning
                   4686:        message on Solaris.
                   4687:        [1dd0301ef293]
                   4688: 
                   4689: 2012-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4690: 
                   4691:        * src/utmp.c:
                   4692:        Fix the setutxent and endutxent compatibility defines (this time
                   4693:        correctly) when only setutent and endutent are available.
                   4694:        [d136d2867db9]
                   4695: 
                   4696:        * plugins/sudoers/ldap.c:
                   4697:        sudo_ldap_set_options_global() should not take an LDAP handle as an
                   4698:        argument since the options affect the global settings.
                   4699:        [1dc39b9d20f2]
                   4700: 
                   4701:        * mkpkg:
                   4702:        Debian sudo has not been built with --with-exempt=sudo since 1.6.8.
                   4703:        [c7716291a856]
                   4704: 
                   4705:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   4706:        plugins/sudoers/auth/pam.c, src/exec.c, src/exec_pty.c, src/sudo.c,
                   4707:        src/sudo.h:
                   4708:        Call the policy's init_session() function before we fork the child.
                   4709:        That way, the session is created and destroyed in the same process,
                   4710:        which is needed by some modules, such as pam_mount.
                   4711:        [ece552ba002e]
                   4712: 
                   4713:        * doc/TROUBLESHOOTING:
                   4714:        Add entry for SSL LDAP errors on Mozilla SDKs when the cert dir is
                   4715:        not specified.
                   4716:        [bd293e100b28]
                   4717: 
                   4718:        * plugins/sudoers/auth/pam.c:
                   4719:        Delete creds after closing the PAM session.
                   4720:        [5158d726d6a5]
                   4721: 
                   4722:        * plugins/sudoers/ldap.c:
                   4723:        Provide a more useful error message if using a Mozilla-style LDAP
                   4724:        SDK and you forgot to specify TLS_CERT in ldap.conf.
                   4725:        [7cb78feb899c]
                   4726: 
                   4727:        * src/exec_pty.c:
                   4728:        Add missing initialization of a sigaction structure when I/O
                   4729:        logging. Fixes a potential problem when suspending the command.
                   4730:        [f4480f2ba816]
                   4731: 
                   4732:        * plugins/sudoers/ldap.c:
                   4733:        Split global and per-connection LDAP options into separate arrays.
                   4734:        Set global LDAP options before calling ldap_initialize() or
                   4735:        ldap_init(). After we have an LDAP handle, set the per-connection
                   4736:        options. Fixes a problem with OpenLDAP using the nss crypto backend;
                   4737:        bug #342
                   4738:        [265c9d2dc12b]
                   4739: 
                   4740:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
                   4741:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   4742:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   4743:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
                   4744:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   4745:        src/po/de.mo, src/po/de.po, src/po/hr.mo, src/po/hr.po,
                   4746:        src/po/vi.mo, src/po/vi.po, src/po/zh_CN.mo, src/po/zh_CN.po:
                   4747:        sync with translationproject.org
                   4748:        [6d7fe44be21e]
                   4749: 
                   4750: 2012-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4751: 
                   4752:        * src/sudo.c, src/sudo.h:
                   4753:        Move struct passwd pointer into struct command details.
                   4754:        [d6fb1eff2065]
                   4755: 
                   4756: 2012-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4757: 
                   4758:        * pp:
                   4759:        Sync with upstream for Mac OS X (and other) fixes.
                   4760:        [c2f4998d01b0]
                   4761: 
                   4762:        * mkpkg:
                   4763:        Only built Mac intel universal binary on an intel machine.
                   4764:        [0009e0b7e5a8]
                   4765: 
                   4766:        * src/Makefile.in:
                   4767:        Do not pass libtool the -static-libtool-libs option when building
                   4768:        sudo and sesh. Otherwise, libtool may prefer a static version of an
                   4769:        installed library over a dynamic one when linking.
                   4770:        [6fbac9adc885]
                   4771: 
                   4772: 2012-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4773: 
                   4774:        * MANIFEST, NEWS, doc/CONTRIBUTORS, plugins/sudoers/po/hr.mo,
                   4775:        plugins/sudoers/po/hr.po, src/po/de.mo, src/po/de.po:
                   4776:        Add German translation for sudo Add Croatian translation for sudoers
                   4777:        [fa4da1a6530c]
                   4778: 
                   4779:        * plugins/sudoers/iolog.c:
                   4780:        typo fix in comment
                   4781:        [abd721d1288e]
                   4782: 
                   4783: 2012-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4784: 
                   4785:        * NEWS:
                   4786:        Update with recent changes
                   4787:        [6fa11e8448b9]
                   4788: 
                   4789:        * Makefile.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   4790:        Sort xgettext output by file name.
                   4791:        [f650841810f0]
                   4792: 
                   4793:        * doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod:
                   4794:        Clarify what "sudoreplay -l" displays and mention that it is sorted.
                   4795:        [84031c117bd6]
                   4796: 
                   4797:        * config.h.in, configure, configure.in, src/ttyname.c:
                   4798:        Use AC_HEADER_MAJOR to determine where major/minor are defined.
                   4799:        [3c949650a223]
                   4800: 
                   4801:        * config.h.in, configure, configure.in, src/ttyname.c:
                   4802:        Include sys/mkdev.h if present instead of sys/sysmacros.h for
                   4803:        minor(). This is needed on Solaris (at least) where the makedev
                   4804:        macros in sysmacros.h are obsolete and library functions should be
                   4805:        used instead.
                   4806:        [343928acf81e]
                   4807: 
                   4808:        * mkpkg:
                   4809:        When building on Mac OS X, only set SDK_FLAGS if specified osversion
                   4810:        doesn't match host.
                   4811:        [d84c6efac872]
                   4812: 
                   4813: 2012-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4814: 
                   4815:        * src/ttyname.c:
                   4816:        Add back buf and tty variables for _ttyname() case that were
                   4817:        inadvertantly removed.
                   4818:        [a4a820b22a44]
                   4819: 
                   4820: 2012-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4821: 
                   4822:        * plugins/sudoers/po/sudoers.pot:
                   4823:        regen
                   4824:        [5446b12c1250]
                   4825: 
                   4826:        * configure, configure.in:
                   4827:        Remove b8 from version number.
                   4828:        [5adc4dcec061]
                   4829: 
                   4830:        * src/ttyname.c:
                   4831:        remove some XXX
                   4832:        [187579a5f593]
                   4833: 
                   4834:        * src/ttyname.c:
                   4835:        When looking for a device match, do a breadth-first search instead
                   4836:        of depth-first. We already special case /dev/pts/ so chances are
                   4837:        good that if it is not a pseudo-tty it is in the base of /dev/. Also
                   4838:        avoid a stat(2) when possible if struct dirent has d_type.
                   4839:        [0183f8a1b278]
                   4840: 
                   4841:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   4842:        src/sudo.c, src/sudo.h:
                   4843:        Pass pid, ppid, sid, pgid and tcpgid to plugin in user_info list.
                   4844:        [f0574d878491]
                   4845: 
                   4846:        * src/po/eo.mo, src/po/es.mo, src/po/es.po, src/po/fi.mo,
                   4847:        src/po/ja.mo, src/po/pl.mo, src/po/ru.mo, src/po/uk.mo,
                   4848:        src/po/vi.mo:
                   4849:        sync with translationproject.org
                   4850:        [4527ea78fbd5]
                   4851: 
                   4852:        * MANIFEST, NEWS, doc/CONTRIBUTORS, src/po/gl.mo, src/po/gl.po,
                   4853:        src/po/hr.mo, src/po/hr.po:
                   4854:        New Croatian and Galician translations from translationproject.org
                   4855:        [ad4bd924b4de]
                   4856: 
                   4857:        * src/ttyname.c:
                   4858:        Add depth-first traversal of /dev/ for the /proc case when not
                   4859:        /dev/pts/N
                   4860:        [499bd3456774]
                   4861: 
                   4862:        * config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c:
                   4863:        If struct dirent has d_type, use it to avoid an extra stat().
                   4864:        [741dabbe4bcd]
                   4865: 
                   4866:        * plugins/sudoers/sudoreplay.c:
                   4867:        Sort output of "sudoreplay -l"
                   4868:        [c0615795bd4b]
                   4869: 
                   4870: 2012-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4871: 
                   4872:        * plugins/sudoers/sudoreplay.c:
                   4873:        Fix duplicate free introduced in last rev
                   4874:        [efdaabe69d75]
                   4875: 
                   4876: 2012-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4877: 
                   4878:        * plugins/sudoers/auth/pam.c:
                   4879:        Instead of treating ^C from tgetpass() specially, always return
                   4880:        AUTH_INTR if tgetpass() returned NULL. Treat PAM_AUTHINFO_UNAVAIL
                   4881:        like PAM_AUTH_ERR which Mac OS X returns this when there is no tty.
                   4882:        [a3b17298d4d0]
                   4883: 
                   4884:        * config.h.in, configure, configure.in, src/ttyname.c:
                   4885:        Rototill code to determine the tty. For Linux, we now look up the
                   4886:        tty device in /proc/pid/stat instead of trying to open
                   4887:        /proc/pid/fd/[0-2]. The sudo_ttyname_dev() function maps the given
                   4888:        device number to a string. On BSD, we can use devname(). On
                   4889:        Solaris, _ttyname_dev() does what we want. TODO: write /dev/
                   4890:        traversal code for the generic sudo_ttyname_dev().
                   4891:        [6b22be4d09f0]
                   4892: 
                   4893: 2012-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4894: 
                   4895:        * src/ttyname.c:
                   4896:        Define PRNODEV for those w/o it.
                   4897:        [f17290e64559]
                   4898: 
                   4899:        * config.h.in, configure, configure.in, src/ttyname.c:
                   4900:        Check for SVR4-style struct psinfo.pr_ttydev and use that to
                   4901:        determine the tty if std{in,out,err} are not ttys.
                   4902:        [76ad33a91f4b]
                   4903: 
                   4904:        * src/ttyname.c:
                   4905:        Better support for SVR4-style /proc entries where we can't use
                   4906:        ttyname() on the /proc/pid/fd/[0-2] entries. We can, however,
                   4907:        attempt to map the device number back to the correct pseudo-tty
                   4908:        slave device.
                   4909:        [4f9f48cc79eb]
                   4910: 
                   4911:        * src/ttyname.c:
                   4912:        When trying to determine the tty name, check parent's stderr in
                   4913:        addition to its stdin and stdout.
                   4914:        [604644056c7d]
                   4915: 
                   4916:        * src/exec_pty.c:
                   4917:        Treat a tty read failure like EOF as it usually means the pty has
                   4918:        gone away. Handle write() on the tty returning EIO.
                   4919:        [16957f4a706f]
                   4920: 
                   4921:        * src/exec.c, src/exec_pty.c:
                   4922:        Linux select() may return ENOMEM if there is a kernel resource
                   4923:        shortage. Older Solaris select() may return EIO instead of EBADF
                   4924:        when the tty goes away. If we get an unhandled select() failure,
                   4925:        kill the child and exit cleanly.
                   4926:        [d93940a311ab]
                   4927: 
                   4928:        * src/ttyname.c:
                   4929:        Open /proc/pid/fd/[0-2] in non-blocking mode just in case we might
                   4930:        block in open.
                   4931:        [a9f809d09d52]
                   4932: 
                   4933: 2012-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4934: 
                   4935:        * plugins/sudoers/set_perms.c:
                   4936:        Fix restoration of AIX permissions.
                   4937:        [30c717115988]
                   4938: 
                   4939:        * src/parse_args.c:
                   4940:        Allow the -k flag to be used along with the -i and -s flags.
                   4941:        [0653b17c97f1]
                   4942: 
                   4943:        * plugins/sudoers/sudoreplay.c:
                   4944:        Plug memory leak in parse_logfile() in the error path.
                   4945:        [9cce86fa833b]
                   4946: 
                   4947:        * plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   4948:        src/po/da.mo, src/po/da.po, src/po/eo.po, src/po/es.po,
                   4949:        src/po/fi.po, src/po/it.mo, src/po/it.po, src/po/ja.po,
                   4950:        src/po/pl.po, src/po/ru.po, src/po/uk.po, src/po/vi.po,
                   4951:        src/po/zh_CN.mo, src/po/zh_CN.po:
                   4952:        sync with translationproject.org
                   4953:        [14af43d0b170]
                   4954: 
                   4955: 2012-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4956: 
                   4957:        * compat/regress/glob/globtest.c, config.h.in, configure,
                   4958:        configure.in, plugins/sudoers/match.c:
                   4959:        Do not use GLOB_BRACE or GLOB_TILDE flags to glob()--we want the
                   4960:        glob() and fnmatch() results to be consistent.
                   4961:        [4226750d73c2]
                   4962: 
                   4963: 2012-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   4964: 
                   4965:        * MANIFEST, common/Makefile.in, common/ttysize.c, src/Makefile.in,
                   4966:        src/ttysize.c:
                   4967:        Move ttysize.c to common so sudoreplay can use it.
                   4968:        [b4a0aa514cd4]
                   4969: 
                   4970:        * plugins/sudoers/sudoreplay.c:
                   4971:        If I/O log file includes rows + cols, warn if the user's tty is not
                   4972:        big enough.
                   4973:        [b980ef89efff]
                   4974: 
                   4975:        * plugins/sudoers/sudoreplay.c:
                   4976:        Fix printing of TSID in "sudoreplay -l"
                   4977:        [4221e3e108b4]
                   4978: 
                   4979:        * common/sudo_debug.c, include/sudo_debug.h,
                   4980:        plugins/sudoers/logging.c, plugins/sudoers/visudo.c, src/exec.c,
                   4981:        src/exec_pty.c:
                   4982:        Log the process id in the debug file output. Since we don't want to
                   4983:        keep calling getpid(), stash the value at init time and when we
                   4984:        fork().
                   4985:        [2782d30c024d]
                   4986: 
                   4987:        * src/exec_pty.c:
                   4988:        Ignore SIGTTIN and SIGTTOU in main sudo process when I/O logging. It
                   4989:        is better to receive EIO from read()/write() than to be suspended
                   4990:        when we don't expect it. Fixes a problem when our terminal is
                   4991:        revoked which can happen when, e.g. our sshd is killed
                   4992:        unceremoniously. Also, only change the value of "alive" from true to
                   4993:        false, never from false to true. It is possible for us to receive
                   4994:        notification of the child having stopped after it is already dead.
                   4995:        This does not mean it has risen from the grave.
                   4996:        [26c9fe8ce0f9]
                   4997: 
                   4998:        * src/exec_pty.c:
                   4999:        Distinguish between signals we received from the parent vs. those
                   5000:        delivered explicitly to the monitor process in debugging info.
                   5001:        [40716cb180e5]
                   5002: 
                   5003: 2012-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5004: 
                   5005:        * plugins/sudoers/check.c:
                   5006:        In Solaris 11, /dev/pts under the "dev" filesystem, not "devices".
                   5007:        Update tty_is_devpts() to match so we can determine when the tty has
                   5008:        been reused.
                   5009:        [2689665df027]
                   5010: 
                   5011:        * common/sudo_debug.c, include/error.h, include/sudo_debug.h:
                   5012:        Always pass __func__, __FILE__ and __LINE__ in sudo_debug_printf()
                   5013:        and use a new flag, SUDO_DEBUG_FILENO to specify when to use it.
                   5014:        This allows consumers of sudo_debug_printf() to log that data
                   5015:        without having to specify it manually.
                   5016:        [7c94c4879208]
                   5017: 
                   5018:        * src/exec_pty.c:
                   5019:        Make this compile after last change.
                   5020:        [ee09034f3266]
                   5021: 
                   5022:        * src/exec_pty.c:
                   5023:        Don't try to restore the terminal if we are not the foreground
                   5024:        process. Otherwise, we may be stopped by SIGTTOU when we try to
                   5025:        update the terminal settings when cleaning up.
                   5026:        [c48b24335456]
                   5027: 
                   5028:        * src/exec.c:
                   5029:        If select() return EBADF in the main event loop, one of the ttys
                   5030:        must have gone away so perform any I/O we can and close the bad fds.
                   5031:        [3bc8678c03ce]
                   5032: 
                   5033:        * common/sudo_debug.c, include/error.h, include/sudo_debug.h,
                   5034:        plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   5035:        plugins/sudoers/toke.l:
                   5036:        Log warning() at SUDO_DEBUG_WARN not SUDO_DEBUG_ERROR. Log the
                   5037:        function, file and line number in the debug log for warning() and
                   5038:        error().
                   5039:        [894cd131f11d]
                   5040: 
                   5041: 2012-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5042: 
                   5043:        * common/sudo_debug.c, include/error.h, include/sudo_debug.h,
                   5044:        src/conversation.c:
                   5045:        Add SUDO_DEBUG_ERRNO flag to debug functions so we can log errno.
                   5046:        Use this flag when wrapping error() and warning() so the debug
                   5047:        output includes the error string.
                   5048:        [1e2c67adaf1f]
                   5049: 
                   5050: 2012-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5051: 
                   5052:        * NEWS:
                   5053:        Update for sudo 1.8.5
                   5054:        [7d2b62b823fe]
                   5055: 
                   5056:        * plugins/sudoers/po/sudoers.pot:
                   5057:        regen
                   5058:        [718ad9de92cd]
                   5059: 
                   5060:        * doc/CONTRIBUTORS:
                   5061:        sync
                   5062:        [f48013aea641]
                   5063: 
                   5064:        * plugins/sudoers/pwutil.c:
                   5065:        Use ecalloc()
                   5066:        [fabd23c1f271]
                   5067: 
                   5068:        * src/exec_pty.c:
                   5069:        Don't need zero_bytes() after ecalloc()
                   5070:        [1a9d95cd10ef]
                   5071: 
                   5072:        * config.h.in, configure, configure.in, src/sudo_noexec.c:
                   5073:        Add execvpe(), exect(), posix_spawn() and posix_spawnp() wrappers to
                   5074:        sudo_noexec.c.
                   5075:        [cbaa1d4b0f8a]
                   5076: 
                   5077:        * src/utmp.c:
                   5078:        Fix compat setutxent and endutxent macros for systems with
                   5079:        setutent() but not setutxent(). From Gustavo Zacarias
                   5080:        [d7ce622fc5f2]
                   5081: 
                   5082: 2012-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5083: 
                   5084:        * configure.in:
                   5085:        Add ignore_result definition to AH_BOTTOM
                   5086:        [8d4096838a98]
                   5087: 
                   5088:        * common/sudo_debug.c, config.h.in, plugins/sample/sample_plugin.c,
                   5089:        plugins/sudoers/iolog.c, plugins/sudoers/toke.c,
                   5090:        plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/env_hooks.c,
                   5091:        src/exec.c, src/exec_pty.c, src/tgetpass.c:
                   5092:        Fix compiler warnings on some platforms and provide a better method
                   5093:        of defeating gcc's warn_unused_result attribute.
                   5094:        [9a8f804fcc75]
                   5095: 
                   5096:        * configure, configure.in:
                   5097:        Fix building the builtin zlib from a build dir. When a zlib dir was
                   5098:        specified, prepend its include path instead of appending so we get
                   5099:        the right zlib headers.
                   5100:        [5f61d591b186]
                   5101: 
                   5102:        * doc/LICENSE, zlib/adler32.c, zlib/crc32.c, zlib/crc32.h,
                   5103:        zlib/deflate.c, zlib/deflate.h, zlib/gzguts.h, zlib/gzlib.c,
                   5104:        zlib/gzread.c, zlib/gzwrite.c, zlib/infback.c, zlib/inffixed.h,
                   5105:        zlib/inflate.c, zlib/inftrees.c, zlib/trees.c, zlib/zconf.h.in,
                   5106:        zlib/zlib.h, zlib/zutil.c, zlib/zutil.h:
                   5107:        Update zlib to version 1.2.6
                   5108:        [173c4bc4d4fc]
                   5109: 
                   5110: 2012-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5111: 
                   5112:        * include/missing.h:
                   5113:        g/c __unused which is no longer used
                   5114:        [7ef3f23edcd6]
                   5115: 
                   5116:        * src/env_hooks.c:
                   5117:        Fix compilation if RTLD_NEXT is not defined.
                   5118:        [d5605f468b71]
                   5119: 
                   5120:        * src/po/sr.mo, src/po/sr.po:
                   5121:        sync with translationproject.org
                   5122:        [27d559f7985d]
                   5123: 
                   5124:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
                   5125:        doc/sudoers.man.in:
                   5126:        regen
                   5127:        [f9f63ce478b6]
                   5128: 
                   5129:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   5130:        regen
                   5131:        [59035d82d15a]
                   5132: 
                   5133:        * Makefile.in:
                   5134:        Ignore Project-Id-Version when comparing pot files.
                   5135:        [22feb9ede46b]
                   5136: 
                   5137:        * plugins/sudoers/bsm_audit.c:
                   5138:        Use error() instead of log_fatal()
                   5139:        [54130bda4b50]
                   5140: 
                   5141:        * plugins/sudoers/env.c:
                   5142:        Fix signedness of didvar in env_update_didvar()
                   5143:        [77048a80b3e4]
                   5144: 
                   5145:        * plugins/sudoers/iolog.c:
                   5146:        Quiet a compiler warning on some platforms.
                   5147:        [8fdcaece0400]
                   5148: 
                   5149:        * compat/fnmatch.c:
                   5150:        cast ctype(3) function/macro arguments from char to unsigned char to
                   5151:        avoid potential negative subscripting.
                   5152:        [bdcf7eef21ef]
                   5153: 
                   5154:        * common/setgroups.c:
                   5155:        Quiet a warning on systems where the gids array in setgroups() is
                   5156:        not prototyped as being const, even though it really is.
                   5157:        [fdd758c6302d]
                   5158: 
                   5159:        * src/env_hooks.c:
                   5160:        Quiet a compiler warning on systems where the argument to putenv(3)
                   5161:        is const.
                   5162:        [51bae2193b53]
                   5163: 
                   5164:        * plugins/sudoers/sudoreplay.c:
                   5165:        Undo an incorrect int -> bool conversion.
                   5166:        [b9a4ce320f14]
                   5167: 
                   5168:        * MANIFEST, NEWS, plugins/sudoers/po/sv.mo, plugins/sudoers/po/sv.po,
                   5169:        src/po/sv.mo, src/po/sv.po:
                   5170:        Add Swedish sudo and sudoers translations from
                   5171:        translationproject.org
                   5172:        [f7ce1de9073f]
                   5173: 
                   5174:        * plugins/sudoers/env.c:
                   5175:        No need to preserve ODMDIR on AIX now that we always read
                   5176:        /etc/environment.
                   5177:        [4aa04b2f0125]
                   5178: 
                   5179: 2012-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5180: 
                   5181:        * doc/sudoers.pod, plugins/sudoers/env.c:
                   5182:        When initializing the environment for env_reset, start out with the
                   5183:        contents of /etc/environment on AIX and login.conf on BSD.
                   5184:        [5717bdc321e2]
                   5185: 
                   5186:        * doc/TROUBLESHOOTING, src/sudo.c:
                   5187:        If we are not running with an effective uid of 0, try to give the
                   5188:        user enough information to debug the problem.
                   5189:        [fa4894896d8a]
                   5190: 
                   5191:        * plugins/sudoers/getdate.c, plugins/sudoers/gram.c:
                   5192:        Quiet a clang-analyzer false positive.
                   5193:        [c4c0c1b9c8b0]
                   5194: 
                   5195:        * src/tgetpass.c:
                   5196:        If there is nothing to read from the askpass program, set errno to
                   5197:        EINTR. This makes the cancel button behave like the user entered ^C
                   5198:        at the password prompt when PAM is used.
                   5199:        [594302cb9caf]
                   5200: 
                   5201:        * src/sudo.h, src/tgetpass.c:
                   5202:        Fetch the value of "askpass" from the sudo conf struct.
                   5203:        [4593ee8f1bd3]
                   5204: 
                   5205:        * common/sudo_conf.c:
                   5206:        Fix matching of "Path askpass" and "Path noexec"
                   5207:        [4df28d62afb9]
                   5208: 
                   5209: 2012-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5210: 
                   5211:        * plugins/sudoers/visudo.c:
                   5212:        Quiet a clang-analyzer dead store warning.
                   5213:        [dd90bf385a3f]
                   5214: 
                   5215:        * plugins/sudoers/sudoers.c:
                   5216:        If the "timestampowner" user cannot be resolved, use ROOT_UID
                   5217:        instead of exiting with a fatal error.
                   5218:        [8d62aae99715]
                   5219: 
                   5220:        * plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/kerb5.c,
                   5221:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sia.c,
                   5222:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/bsm_audit.c,
                   5223:        plugins/sudoers/check.c, plugins/sudoers/env.c,
                   5224:        plugins/sudoers/iolog.c, plugins/sudoers/logging.c,
                   5225:        plugins/sudoers/logging.h, plugins/sudoers/parse.c,
                   5226:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
                   5227:        Remove the NO_EXIT flag to log_error() and add a log_fatal()
                   5228:        function that exits and is marked no_return. Fixes false positives
                   5229:        from static analyzers and is easier for humans to read too.
                   5230:        [a0fe785c2a3d]
                   5231: 
                   5232: 2012-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5233: 
                   5234:        * plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po, src/po/eo.mo,
                   5235:        src/po/eo.po:
                   5236:        sync with translationproject.org
                   5237:        [df5e8777de13]
                   5238: 
                   5239: 2012-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5240: 
                   5241:        * src/po/da.mo, src/po/da.po:
                   5242:        sync with translationproject.org
                   5243:        [629d99548b78]
                   5244: 
                   5245:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
                   5246:        sync with translationproject.org
                   5247:        [9d122a2860d6]
                   5248: 
                   5249: 2012-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5250: 
                   5251:        * src/po/it.mo, src/po/it.po:
                   5252:        sync with translationproject.org
                   5253:        [6397593b15cf]
                   5254: 
                   5255:        * common/sudo_conf.c, plugins/sudoers/alias.c,
                   5256:        plugins/sudoers/defaults.c, plugins/sudoers/env.c,
                   5257:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   5258:        plugins/sudoers/interfaces.c, plugins/sudoers/ldap.c,
                   5259:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   5260:        plugins/sudoers/visudo.c, src/exec.c, src/exec_pty.c, src/hooks.c,
                   5261:        src/load_plugins.c:
                   5262:        Use ecalloc() when allocating structs.
                   5263:        [8b5888868db2]
                   5264: 
                   5265:        * common/alloc.c, include/alloc.h:
                   5266:        Add ecalloc() and commented out recalloc(). Use inline strnlen()
                   5267:        instead of strlen() in estrndup().
                   5268:        [7fb9aa46c1e0]
                   5269: 
                   5270: 2012-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5271: 
                   5272:        * plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   5273:        plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
                   5274:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   5275:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po,
                   5276:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   5277:        src/po/fi.mo, src/po/fi.po, src/po/ja.mo, src/po/ja.po,
                   5278:        src/po/pl.mo, src/po/pl.po, src/po/ru.mo, src/po/ru.po,
                   5279:        src/po/uk.mo, src/po/uk.po, src/po/vi.mo, src/po/vi.po,
                   5280:        src/po/zh_CN.mo, src/po/zh_CN.po:
                   5281:        sync with translationproject.org
                   5282:        [45a032c37334]
                   5283: 
                   5284: 2012-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5285: 
                   5286:        * plugins/sudoers/set_perms.c:
                   5287:        Remove unused label
                   5288:        [2660bb0c1313]
                   5289: 
                   5290:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   5291:        Document what changed in each plugin API revision
                   5292:        [59b30a6fc4d1]
                   5293: 
                   5294:        * plugins/sudoers/set_perms.c:
                   5295:        Remove bogus optimization that could lead to a double free of the
                   5296:        group list.
                   5297:        [b0bfbd2a83a8]
                   5298: 
                   5299: 2012-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5300: 
                   5301:        * doc/TROUBLESHOOTING:
                   5302:        Expand AIX /etc/security/privcmds entry.
                   5303:        [9f3f072e034e]
                   5304: 
                   5305:        * NEWS:
                   5306:        Update for sudo 1.8.5
                   5307:        [086049011f25]
                   5308: 
                   5309:        * common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.cat,
                   5310:        doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
                   5311:        doc/sudo_plugin.man.in, doc/sudo_plugin.pod, doc/sudoers.cat,
                   5312:        doc/sudoers.man.in, doc/sudoers.pod, include/sudo_conf.h,
                   5313:        include/sudo_plugin.h, src/load_plugins.c, src/sudo.c,
                   5314:        src/sudo_plugin_int.h:
                   5315:        Rename plugin "args" to "options"
                   5316:        [f25624951bd2]
                   5317: 
                   5318:        * doc/CONTRIBUTORS:
                   5319:        Add Lithuanian and Vietnamese translators
                   5320:        [2b4c075b69e3]
                   5321: 
                   5322:        * Makefile.in:
                   5323:        Ignore comments when comparing new and old pot files.
                   5324:        [f872999347b3]
                   5325: 
                   5326:        * src/Makefile.in:
                   5327:        regen
                   5328:        [c8193b1b11c7]
                   5329: 
                   5330:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in:
                   5331:        regen
                   5332:        [15e3c17e8a3a]
                   5333: 
                   5334:        * doc/sudo_plugin.pod, include/sudo_plugin.h,
                   5335:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
                   5336:        plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/env.c,
                   5337:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/hooks.c,
                   5338:        src/sudo.c, src/sudo.h:
                   5339:        Pass a pointer to user_env in to the init_session policy plugin
                   5340:        function so session setup can modify the user environment as needed.
                   5341:        For PAM authentication, merge the PAM environment with the user
                   5342:        environment at init_session time. We no longer need to swap in the
                   5343:        user_env for environ during session init, nor do we need to disable
                   5344:        the env hooks at init_session time.
                   5345:        [3f5277b359d8]
                   5346: 
                   5347:        * plugins/sample/sample_plugin.c:
                   5348:        Add explicit NULL entries for init_session, register_hooks and
                   5349:        deregister_hooks with appropriate comments.
                   5350:        [727a57978b40]
                   5351: 
                   5352:        * compat/pw_dup.c:
                   5353:        Quiet a gcc "used uninitialized in this function" false positive.
                   5354:        [f14b68379ce9]
                   5355: 
                   5356:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   5357:        We should always call warning() with a format string or a string
                   5358:        literal. In this case, the argument (path) is not user-controlled.
                   5359:        [e9ef51224024]
                   5360: 
                   5361: 2012-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5362: 
                   5363:        * src/selinux.c:
                   5364:        Include sudo_exec.h for the sudo_execve() prototype.
                   5365:        [769e58065edc]
                   5366: 
                   5367:        * config.h.in, configure, configure.in:
                   5368:        Add check for pam_getenvlist()
                   5369:        [36bde3f26c60]
                   5370: 
                   5371:        * common/sudo_conf.c:
                   5372:        Set args to NULL in default plugin info struct when there is no
                   5373:        Plugin line in sudo.conf.
                   5374:        [93ec67708f01]
                   5375: 
                   5376:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   5377:        regen
                   5378:        [a9287677795c]
                   5379: 
                   5380:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
                   5381:        doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   5382:        doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
                   5383:        doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
                   5384:        regen
                   5385:        [a242769d7962]
                   5386: 
                   5387:        * configure, configure.in:
                   5388:        Bump version to 1.8.5
                   5389:        [e8618f0c2505]
                   5390: 
                   5391:        * doc/sudo_plugin.pod:
                   5392:        Document hooks API
                   5393:        [e6ad07d27958]
                   5394: 
                   5395: 2012-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5396: 
                   5397:        * sudo.pp:
                   5398:        Make sudoersdir relative to PKG_INSTALL_ROOT for Solaris.
                   5399:        [fd72340042d3]
                   5400: 
                   5401:        * include/sudo_plugin.h:
                   5402:        Use sudo_hook_fn_t in struct sudo_hook.
                   5403:        [938f93112d6e]
                   5404: 
                   5405:        * doc/TROUBLESHOOTING:
                   5406:        If cross compiling, --host must include the OS in the tuple. E.g.
                   5407:        --host powerpc-unknown-linux
                   5408:        [b8c010070c1e]
                   5409: 
                   5410: 2012-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5411: 
                   5412:        * plugins/sudoers/parse.c:
                   5413:        Fix bogus int -> bool conversion; tags can have a value of -1.
                   5414:        [e63d6434a303]
                   5415: 
                   5416:        * plugins/sudoers/env.c:
                   5417:        Add env_should_keep() and env_should_delete() wrapper functions to
                   5418:        simplify things a bit and hide the fact that matches_env_check() is
                   5419:        not bool.
                   5420:        [7a03d7a12b50]
                   5421: 
                   5422:        * sudo.pp:
                   5423:        Fix application of debian-specific sudoers mods when building
                   5424:        packages as non-root.
                   5425:        [34bf4c52c425]
                   5426: 
                   5427:        * plugins/sudoers/env.c:
                   5428:        matches_env_check() returns int, not boolean
                   5429:        [0ad915b8d5cb]
                   5430: 
                   5431:        * src/sudo_edit.c:
                   5432:        Fix compilation when seteuid() is not available.
                   5433:        [8a722f998000]
                   5434: 
                   5435:        * src/ttyname.c:
                   5436:        Simply move the free of ki_proc outside the realloc() loop.
                   5437:        [217b786da760]
                   5438: 
                   5439:        * src/ttyname.c:
                   5440:        Bring back the erealloc() for the ENOMEM loop and just zero the
                   5441:        pointer after we free it.
                   5442:        [29a016e45127]
                   5443: 
                   5444:        * src/ttyname.c:
                   5445:        Don't try to erealloc() a potentially freed pointer; Mateusz Guzik
                   5446:        [266e08844065]
                   5447: 
                   5448: 2012-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5449: 
                   5450:        * plugins/sudoers/set_perms.c:
                   5451:        Use normal error path if unable to set sudoers gid.
                   5452:        [01c816918c99]
                   5453: 
                   5454:        * plugins/sudoers/set_perms.c:
                   5455:        Make this work again on systems w/o seteuid().
                   5456:        [2e67f7421e97]
                   5457: 
                   5458: 2012-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5459: 
                   5460:        * plugins/sudoers/set_perms.c:
                   5461:        Fix compilation if no seteuid/setreuid/setresuid available.
                   5462:        [d0b3c1f88eb4]
                   5463: 
                   5464:        * plugins/sudoers/set_perms.c:
                   5465:        Better error messages, and added debugging throughout. Fixed
                   5466:        seteuid() version of set_perms()/restore_perms(). Fixed logic bug in
                   5467:        AIX version of restore_perms(). Added checks to avoid changing
                   5468:        uid/gid when we don't have to. Never set gid/uid state to -1, use
                   5469:        the old value instead.
                   5470:        [29188d469b5c]
                   5471: 
                   5472:        * src/exec_pty.c, src/ttyname.c:
                   5473:        Fix format string warning on Solaris with gcc 3.4.3.
                   5474:        [d1eeb6e1dd0f]
                   5475: 
                   5476:        * src/sudo.c:
                   5477:        Always declare environ now that we swap it around unilaterally.
                   5478:        [aaa3e92e7d0d]
                   5479: 
                   5480:        * src/Makefile.in:
                   5481:        Honor LDFLAGS when linking sesh; from Vita Cizek
                   5482:        [498b41438f6e]
                   5483: 
                   5484:        * src/sesh.c:
                   5485:        Include alloc.h for estrdup() prototype; from Vita Cizek
                   5486:        [93203655a320]
                   5487: 
                   5488: 2012-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5489: 
                   5490:        * plugins/sudoers/sudoers.c:
                   5491:        Don't read /etc/environment on Linux when using PAM, PAM should set
                   5492:        the environment variables as needed via pam_env.
                   5493:        [b1ef62cb2d40]
                   5494: 
                   5495:        * INSTALL:
                   5496:        Fix editor goof.
                   5497:        [0c3dd3bb8b57]
                   5498: 
                   5499:        * src/hooks.c, src/sudo.c, src/sudo.h:
                   5500:        Disable environment hooks after we get user_env back to make sure a
                   5501:        plugin can't to modify user_env after we "own" it. This is kind of
                   5502:        a hack but we don't want the init_session plugin function to modify
                   5503:        user_env.
                   5504:        [8e6d119452a5]
                   5505: 
                   5506:        * src/hooks.c, src/sudo.c:
                   5507:        Add support for deregistering hooks. If an I/O log plugin fails to
                   5508:        initialize, deregister its hooks (if any).
                   5509:        [ac00c93900c5]
                   5510: 
                   5511: 2012-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5512: 
                   5513:        * plugins/sudoers/sudoers.c, src/sudo.c:
                   5514:        Move LOGIN_PATH and LOGIN_SETENV handling to plugin now that we hook
                   5515:        setenv.
                   5516:        [e75469dd9908]
                   5517: 
                   5518:        * MANIFEST, aclocal.m4, common/sudo_debug.c, compat/Makefile.in,
                   5519:        compat/setenv.c, compat/unsetenv.c, config.h.in, configure,
                   5520:        configure.in, include/sudo_debug.h, include/sudo_plugin.h, mkdep.pl,
                   5521:        plugins/sudoers/auth/aix_auth.c, plugins/sudoers/env.c,
                   5522:        plugins/sudoers/ldap.c, plugins/sudoers/sudoers.c,
                   5523:        plugins/sudoers/sudoers.h, src/Makefile.in, src/env_hooks.c,
                   5524:        src/hooks.c, src/load_plugins.c, src/sudo.c, src/sudo.h,
                   5525:        src/sudo_plugin_int.h:
                   5526:        Initial cut at a hooks implementation. The plugin can register
                   5527:        hooks for getenv, putenv, setenv and unsetenv. This makes it
                   5528:        possible for the plugin to trap changes to the environment made by
                   5529:        authentication methods such as PAM or BSD auth so that such changes
                   5530:        are reflected in the environment passed back to sudo for execve().
                   5531:        [61cffa06f863]
                   5532: 
                   5533: 2012-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5534: 
                   5535:        * MANIFEST, src/po/vi.mo, src/po/vi.po:
                   5536:        Add Vietnamese sudo translation from translationproject.org
                   5537:        [96df426790d5]
                   5538: 
                   5539: 2012-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5540: 
                   5541:        * doc/sample.sudo.conf, doc/sudo.pod, doc/sudo_plugin.pod,
                   5542:        doc/sudoers.pod:
                   5543:        List sudo_noexec.so not noexec.so in the sample sudo.conf
                   5544:        [53844e190ec5]
                   5545: 
                   5546:        * common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.pod,
                   5547:        doc/sudo_plugin.pod, doc/sudoers.pod, include/sudo_conf.h,
                   5548:        include/sudo_plugin.h, plugins/sample/sample_plugin.c,
                   5549:        plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
                   5550:        plugins/sudoers/toke.l, src/load_plugins.c, src/sudo.c,
                   5551:        src/sudo_plugin_int.h:
                   5552:        Add support for plugin args at the end of a Plugin line in
                   5553:        sudo.conf. Bump the minor number accordingly and update the
                   5554:        documentation. A plugin must check the sudo front end's version
                   5555:        before using the plugin_args parameter since it is only supported
                   5556:        for API version 1.2 and higher.
                   5557:        [587f1f819536]
                   5558: 
                   5559: 2012-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5560: 
                   5561:        * plugins/sudoers/Makefile.in:
                   5562:        update depends
                   5563:        [6d2da44e11e5]
                   5564: 
                   5565:        * MANIFEST:
                   5566:        secure_path.c is in common, not compat
                   5567:        [619c4a663dde]
                   5568: 
                   5569:        * configure, configure.in:
                   5570:        Add check for variadic macro support in cpp.
                   5571:        [756854caf675]
                   5572: 
                   5573: 2012-02-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5574: 
                   5575:        * common/secure_path.c, common/sudo_conf.c, include/secure_path.h,
                   5576:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   5577:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   5578:        plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   5579:        Add type param to sudo_secure_path() and add sudo_secure_file() and
                   5580:        sudo_secure_dir() wrappers which get by #includedir in sudoers.
                   5581:        [2ec2d3d8df04]
                   5582: 
                   5583: 2012-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5584: 
                   5585:        * doc/visudo.pod, plugins/sudoers/visudo.c:
                   5586:        Check the owner and mode in -c (check) mode unless the -f option is
                   5587:        specified. Previously, the owner and mode were checked on the main
                   5588:        sudoers file when the -s (strict) option was given, but this was not
                   5589:        documented.
                   5590:        [b2d6ee1e547a]
                   5591: 
                   5592:        * config.h.in, configure, configure.in, src/ttyname.c:
                   5593:        Prefer KERN_PROC2 over KERN_PROC. Fixes compilation on some
                   5594:        versions of OpenBSD versions that have KERN_PROC2 but not KERN_PROC.
                   5595:        [159f6a50456a]
                   5596: 
                   5597: 2012-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5598: 
                   5599:        * doc/CONTRIBUTORS:
                   5600:        Add Eric Lakin for patch in bug #538
                   5601:        [490c29c234c6]
                   5602: 
                   5603:        * src/exec_pty.c:
                   5604:        Fix typo in safe_close() made while converting to debug framework
                   5605:        that prevented it from actually closing anything.
                   5606:        [a66422a62afd]
                   5607: 
                   5608:        * src/exec_pty.c:
                   5609:        Add some more debugging.
                   5610:        [b5667947dda9]
                   5611: 
                   5612:        * common/Makefile.in, compat/Makefile.in, doc/Makefile.in,
                   5613:        include/Makefile.in:
                   5614:        We need sysconfdir in compat/Makfile to get the proper sudo.conf
                   5615:        path. Add standard prefix and foodir expansion in all Makefiles to
                   5616:        avoid this problem in the future.
                   5617:        [62b6ce4ecae9]
                   5618: 
                   5619: 2012-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5620: 
                   5621:        * MANIFEST, plugins/sudoers/po/lt.mo, plugins/sudoers/po/lt.po:
                   5622:        New Lithuanian sudoers translation from translationproject.org
                   5623:        [10436b649035]
                   5624: 
                   5625:        * plugins/sudoers/po/ja.po:
                   5626:        Update from translationproject.org
                   5627:        [acb8db5f8ef1]
                   5628: 
                   5629: 2012-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5630: 
                   5631:        * plugins/sudoers/ldap.c:
                   5632:        When adding gids to the LDAP filter, only add the primary gid once.
                   5633:        This is consistent with the space computation/allocation. From Eric
                   5634:        Lakin
                   5635:        [35d9d99c92c6]
                   5636: 
                   5637:        * doc/TROUBLESHOOTING:
                   5638:        Add entry for AIX enhanced RBAC config.
                   5639:        [5e10b6f8def7]
                   5640: 
                   5641:        * mkpkg:
                   5642:        Target Mac OS X 10.5 when building packages.
                   5643:        [06fce9bbebee]
                   5644: 
                   5645: 2012-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5646: 
                   5647:        * MANIFEST, common/Makefile.in, common/secure_path.c,
                   5648:        common/sudo_conf.c, include/secure_path.h,
                   5649:        plugins/sudoers/Makefile.in, plugins/sudoers/sudoers.c:
                   5650:        Relax the user/group/mode checks on sudoers files. As long as the
                   5651:        file is owned by the right user, not world-writable and not writable
                   5652:        by a group other than the one specified at configure time (gid 0 by
                   5653:        default), the file is considered OK. Note that visudo will still
                   5654:        set the mode to the value specified at configure time.
                   5655:        [241174babfcc]
                   5656: 
                   5657: 2012-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5658: 
                   5659:        * plugins/sudoers/set_perms.c:
                   5660:        Add AIX-specific version of permission setting code to make sure
                   5661:        that the saved uid gets restored properly.
                   5662:        [9a6f5d22c301]
                   5663: 
                   5664:        * config.h.in, configure, configure.in, src/exec_common.c:
                   5665:        Check for LD_PRELOAD variants in configure instead of checkign cpp
                   5666:        symbols. In disable_execute(), compute the length of the new envp
                   5667:        and allocate it once instead of reallocating on demand. Also append
                   5668:        old value of LD_PRELOAD (if any) to the new value.
                   5669:        [680266346917]
                   5670: 
                   5671:        * plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
                   5672:        Fix the description of noexec.
                   5673:        [6a6d142f3c80]
                   5674: 
                   5675:        * plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
                   5676:        The "op" parameter to set_default() must be int, not bool since it
                   5677:        is set to '+' or '-' for list add and subtract.
                   5678:        [8da5b137bea2]
                   5679: 
                   5680:        * sudo.pp:
                   5681:        Make sure sudoers is writable before calling ed script.
                   5682:        [95352ab6336b]
                   5683: 
                   5684: 2012-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5685: 
                   5686:        * doc/CONTRIBUTORS, doc/contributors.pod:
                   5687:        Update contributors. Now includes translators and authors of compat
                   5688:        code.
                   5689:        [4fb5b616b50a]
                   5690: 
                   5691: 2012-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5692: 
                   5693:        * src/po/sudo.pot:
                   5694:        regen
                   5695:        [2c86e2c328fe]
                   5696: 
                   5697:        * pp, sudo.pp:
                   5698:        Build flat packages, not package bundles, on Mac OS X.
                   5699:        [57bda3cd5520]
                   5700: 
                   5701: 2012-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5702: 
                   5703:        * sudo.pp:
                   5704:        Move macos section to be with the other OS-specific sections.
                   5705:        [51423bb2973a]
                   5706: 
                   5707:        * plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                   5708:        plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po:
                   5709:        Sync with translationproject.org
                   5710:        [8ce41cbb8da0]
                   5711: 
                   5712:        * configure, configure.in:
                   5713:        Don't permanently add -D_FORTIFY_SOURCE=2 to CPPFLAGS
                   5714:        [fa979aa6fe7d]
                   5715: 
                   5716:        * sudo.pp:
                   5717:        Add Mac OS X support, printing the latest chunk of the NEWS file and
                   5718:        the license text in the installer.
                   5719:        [ffeab72387c0]
                   5720: 
                   5721:        * sudo.pp:
                   5722:        Add explicit file modes that match those used by "make install"
                   5723:        [7eb37242c920]
                   5724: 
                   5725:        * pp:
                   5726:        Sync with upstream for Mac OS X fixes.
                   5727:        [97cba179041e]
                   5728: 
                   5729:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   5730:        Got back to using "install-sh -M" for files installed as non-
                   5731:        readable by owner. This fixes "make install" as non-root for
                   5732:        package building.
                   5733:        [967804ee77d6]
                   5734: 
                   5735: 2012-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5736: 
                   5737:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po,
                   5738:        plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                   5739:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   5740:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   5741:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po:
                   5742:        Sync with translationproject.org
                   5743:        [0e53db12039a]
                   5744: 
                   5745:        * Makefile.in, doc/Makefile.in, include/Makefile.in,
                   5746:        plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   5747:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   5748:        Use -m not -M for install-sh for everything except setuid. Install
                   5749:        locale .mo files mode 0444, not 0644. If timedir parent doesn't
                   5750:        exist, use default dir mode, not 0700.
                   5751:        [8b6f64c92090]
                   5752: 
                   5753: 2012-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5754: 
                   5755:        * pp:
                   5756:        Re-sync with upstream; no longer need a local patch.
                   5757:        [97a2c7be5e59]
                   5758: 
                   5759:        * mkpkg:
                   5760:        Add support for building Mac OS X packages.
                   5761:        [94d49ac223a4]
                   5762: 
                   5763:        * pp:
                   5764:        Sync with upstream
                   5765:        [1c97654fc841]
                   5766: 
                   5767:        * src/Makefile.in:
                   5768:        No longer need to define _PATH_SUDO_CONF here.
                   5769:        [2560905b7482]
                   5770: 
                   5771:        * src/exec_common.c:
                   5772:        Fix noexec for Mac OS X.
                   5773:        [b7a744bca2c0]
                   5774: 
                   5775: 2012-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5776: 
                   5777:        * common/Makefile.in:
                   5778:        Move _PATH_SUDO_CONF override to common to match sudo_debug.c
                   5779:        [f0788972a63a]
                   5780: 
                   5781:        * plugins/sudoers/set_perms.c:
                   5782:        More complete fix for LDR_PRELOAD on AIX. The addition of
                   5783:        set_perm(PERM_ROOT) before calling the nss open functions (needed to
                   5784:        avoid a GNU TLS bug) also broke LDR_PRELOAD. Setting the effective
                   5785:        and then real uid to 0 for PERM_ROOT works around the issue.
                   5786:        [5888eda051af]
                   5787: 
                   5788:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   5789:        regen
                   5790:        [997fe403e219]
                   5791: 
                   5792:        * src/sudo.c:
                   5793:        Set real uid to root before calling sudo_edit() or run_command() so
                   5794:        that the monitor process is owned by root and not by the user.
                   5795:        Otherwise, on AIX at least, the monitor process shows up in ps as
                   5796:        belonging to the user (and can be killed by the user).
                   5797:        [d4772d7d2fc5]
                   5798: 
                   5799:        * plugins/sudoers/set_perms.c:
                   5800:        For PERM_ROOT when using setreuid(), only set the euid to 0 prior to
                   5801:        the call to setuid(0) if the current euid is non-zero. This
                   5802:        effectively restores the state of things prior to rev 7bfeb629fccb.
                   5803:        Fixes a problem on AIX where LDR_PRELOAD was not being honored for
                   5804:        the command being executed.
                   5805:        [b9b40325b4dc]
                   5806: 
                   5807:        * MANIFEST, compat/pw_dup.c, config.h.in, configure, configure.in,
                   5808:        include/missing.h, src/sudo.c:
                   5809:        Make a copy of the struct passwd in exec_setup() to make sure
                   5810:        nothing in the policy init modifies it.
                   5811:        [b721261c921f]
                   5812: 
                   5813: 2012-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5814: 
                   5815:        * doc/sudoers.pod:
                   5816:        update copyright
                   5817:        [f9d229d1f65e]
                   5818: 
                   5819:        * common/sudo_debug.c, include/sudo_debug.h:
                   5820:        g/c now-unused debug subsystems
                   5821:        [8f21726e698f]
                   5822: 
                   5823:        * doc/sudo.pod, doc/sudoers.pod:
                   5824:        Enumerate the debug subsystems used by sudo and sudoers.
                   5825:        [ac4f84293d14]
                   5826: 
                   5827: 2012-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5828: 
                   5829:        * NEWS, common/sudo_conf.c, doc/sample.sudo.conf, doc/sudo.pod,
                   5830:        include/sudo_conf.h, src/sudo.c:
                   5831:        Normally, sudo disables core dumps while it is running. This
                   5832:        behavior can now be modified at run time with a line in sudo.conf
                   5833:        like "Set disable_coredumps false"
                   5834:        [ad14e0508b0d]
                   5835: 
                   5836:        * NEWS:
                   5837:        Mention Spanish translation
                   5838:        [600f3205bd6e]
                   5839: 
                   5840:        * common/sudo_debug.c:
                   5841:        Make sure we don't try to fall back to using the conversation
                   5842:        function for debugging in the main sudo process if we are unable to
                   5843:        open the debug file.
                   5844:        [ffa329aa908c]
                   5845: 
                   5846:        * MANIFEST, src/po/es.mo, src/po/es.po:
                   5847:        Add sudo Spanish translation from translationproject.org
                   5848:        [c1906654e740]
                   5849: 
                   5850: 2012-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5851: 
                   5852:        * plugins/sudoers/iolog.c:
                   5853:        Better debug subsystem usage
                   5854:        [1a31f115743c]
                   5855: 
                   5856:        * src/sudo.c:
                   5857:        Remove duplicate function prototypes
                   5858:        [ae04b00532eb]
                   5859: 
                   5860: 2012-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5861: 
                   5862:        * configure, configure.in:
                   5863:        Error out if user specified --with-pam but we can't find the headers
                   5864:        or library. Also throw an error if the headers are present but the
                   5865:        library is not and vice versa.
                   5866:        [d6bf3e3d0aae]
                   5867: 
                   5868: 2012-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5869: 
                   5870:        * plugins/sudoers/sudoers.c:
                   5871:        Fix the sudoers permission check when the expected sudoers mode is
                   5872:        owner-writable.
                   5873:        [8b0b7e770a22]
                   5874: 
                   5875: 2012-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5876: 
                   5877:        * configure, configure.in:
                   5878:        Verify that we can link executables built with -D_FORTIFY_SOURCE
                   5879:        before using it.
                   5880:        [7578215d1a95]
                   5881: 
                   5882:        * src/exec_common.c:
                   5883:        Fix potential off-by-one when making a copy of the environment for
                   5884:        LD_PRELOAD insertion. Fixes bug #534
                   5885:        [cc699cd551b6]
                   5886: 
                   5887:        * configure, configure.in:
                   5888:        Add rudimentary check for _FORTIFY_SOURCE support by checking for
                   5889:        __sprintf_chk, one of the functions used by gcc to support it.
                   5890:        [a992673d2ef8]
                   5891: 
                   5892:        * compat/stdbool.h, config.h.in, configure, configure.in:
                   5893:        Use AC_HEADER_STDBOOL instead of checking for stdbool.h ourselves.
                   5894:        [8ba1370884b3]
                   5895: 
                   5896: 2012-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5897: 
                   5898:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   5899:        regen
                   5900:        [1e0b38397705]
                   5901: 
                   5902: 2012-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5903: 
                   5904:        * src/exec.c, src/sudo.c:
                   5905:        The change in 818e82ecbbfc that caused to exit when the monitor dies
                   5906:        created a race condition between the monitor exiting and the status
                   5907:        being read. All we really want to do is make sure that select()
                   5908:        notifies us that there is a status change when the monitor dies
                   5909:        unexpectedly so shutdown the socketpair connected to the monitor for
                   5910:        writing when it dies. That way we can still read the status that is
                   5911:        pending on the socket and select() on Linux will tell us that the fd
                   5912:        is ready.
                   5913:        [7fb5b30ea48d]
                   5914: 
                   5915:        * MANIFEST, src/Makefile.in, src/exec.c, src/exec_common.c,
                   5916:        src/exec_pty.c, src/selinux.c, src/sesh.c, src/sudo.c, src/sudo.h,
                   5917:        src/sudo_exec.h:
                   5918:        Refactor disable_execute() and my_execve() into exec_common.c for
                   5919:        use by sesh.c. This fixes NOEXEC when SELinux is used. Instead of
                   5920:        disabling exec in exec_setup(), disable it immediately before
                   5921:        executing the command. Adapted from a diff by Arno Schuring.
                   5922:        [ec4d8b53db6b]
                   5923: 
                   5924: 2012-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5925: 
                   5926:        * aclocal.m4, configure, configure.in:
                   5927:        Add custom version of AC_CHECK_LIB that uses the extra libs in the
                   5928:        cache value name. With this we no longer need to rely on a modified
                   5929:        version of autoconf.
                   5930:        [1c3b1d482d6c]
                   5931: 
                   5932: 2012-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5933: 
                   5934:        * configure, configure.in:
                   5935:        Better handling of network functions that need -lsocket -lnsl
                   5936:        [cc386342ec2b]
                   5937: 
                   5938:        * src/sudo.c:
                   5939:        When setting up the execution environment, set groups before
                   5940:        gid/egid like sudo 1.7 did.
                   5941:        [928e1c5fa6c1]
                   5942: 
                   5943:        * configure, configure.in:
                   5944:        Remove "WARNING: unable to find foo() trying -lsocket -lnsl"
                   5945:        [84b23cdf138f]
                   5946: 
                   5947:        * plugins/sudoers/sudoers.c:
                   5948:        For "sudo -g" prepend the specified group ID to the beginning of the
                   5949:        groups list. This matches BSD convention where the effective gid is
                   5950:        the first entry in the group list. This is required on newer
                   5951:        FreeBSD where the effective gid is not tracked separately and thus
                   5952:        setgroups() changes the egid if this convention is not followed.
                   5953:        Fixes bug #532
                   5954:        [782d6909108b]
                   5955: 
                   5956: 2012-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5957: 
                   5958:        * configure, configure.in:
                   5959:        Fix sh warning; use "test" instead of "["
                   5960:        [c6ee3407f65e]
                   5961: 
                   5962:        * src/exec.c:
                   5963:        When not logging I/O, use a signal handler that only forwards
                   5964:        SIGINT, SIGQUIT and SIGHUP when they are user-generated signals.
                   5965:        Fixes a race in the non-I/O logging path where the command may
                   5966:        receive two keyboard-generated signals; one from the kernel and one
                   5967:        from the sudo process.
                   5968:        [9638684e786a]
                   5969: 
                   5970:        * src/exec.c:
                   5971:        Back out change that put the command in its own pgrp when not
                   5972:        logging I/O. It causes problems with pipelines.
                   5973:        [4fc9c6e1e770]
                   5974: 
                   5975: 2012-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5976: 
                   5977:        * compat/Makefile.in, configure, configure.in:
                   5978:        Only run compat regress tests on compat objects we actually build.
                   5979:        Fixes "make check" in the compat dir for systems that don't
                   5980:        implement character classes in fnmatch() or glob(). Bug #531
                   5981:        [a7addc305e83]
                   5982: 
                   5983: 2012-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5984: 
                   5985:        * plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
                   5986:        Update po files from translationproject.org
                   5987:        [5ea066af1356]
                   5988: 
                   5989: 2012-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   5990: 
                   5991:        * sudo.pp:
                   5992:        Include parent directories in case they don't already exist. This
                   5993:        fixes a directory permissions problem with the AIX package when the
                   5994:        /usr/local directories don't already exist.
                   5995:        [a14f783dc827]
                   5996: 
                   5997:        * pp:
                   5998:        sync with git version
                   5999:        [2f79d0543661]
                   6000: 
                   6001:        * common/Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in:
                   6002:        regen dependencies
                   6003:        [24c92ca6c64d]
                   6004: 
                   6005:        * MANIFEST, src/Makefile.in, src/sudo.c, src/sudo.h, src/ttyname.c:
                   6006:        Move tty name lookup code to its own file.
                   6007:        [58faf072cbf4]
                   6008: 
                   6009: 2012-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6010: 
                   6011:        * NEWS:
                   6012:        Update with latest sudo 1.8.4 changes.
                   6013:        [a4ffe4f42528]
                   6014: 
                   6015:        * config.h.in, configure, configure.in:
                   6016:        Remove obsolete template for HAVE_TIMESPEC
                   6017:        [75709007c906]
                   6018: 
                   6019:        * src/sudo.c:
                   6020:        Add a check for devname() returning a fully-qualified pathname. None
                   6021:        of the devname() implementations do this today but you never know
                   6022:        when this might change.
                   6023:        [16813ace38f9]
                   6024: 
                   6025: 2012-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6026: 
                   6027:        * plugins/sudoers/visudo.c:
                   6028:        For "visudo -c" also list include files that were checked when
                   6029:        everything is OK.
                   6030:        [ad6f85b35c9c]
                   6031: 
                   6032:        * src/sudo.c:
                   6033:        The device name returned by devname() does not include the /dev/
                   6034:        prefix so we need to add it ourselves.
                   6035:        [b55285abb7ed]
                   6036: 
                   6037:        * src/sudo.c:
                   6038:        Add debug warning if KERN_PROC sysctl fails or devname() can't
                   6039:        resolve the tty device to a name.
                   6040:        [b5a23916ba3a]
                   6041: 
                   6042:        * common/sudo_debug.c:
                   6043:        The result of writev() is never checked so just cast to NULL.
                   6044:        [4be4e9b58d5b]
                   6045: 
                   6046:        * plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                   6047:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   6048:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   6049:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po:
                   6050:        Update Esperanto, Finnish, Polish and Ukrainian translations from
                   6051:        translationproject.org.
                   6052:        [bb91bc6ad7e9]
                   6053: 
                   6054: 2012-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6055: 
                   6056:        * config.h.in, configure, configure.in, src/sudo.c:
                   6057:        Add support for determining tty via sysctl on other BSD variants.
                   6058:        [fd15f63f719a]
                   6059: 
                   6060:        * configure, configure.in:
                   6061:        Only check for struct kinfo_proc.ki_tdev on systems that support
                   6062:        sysctl.
                   6063:        [109b3f07a39d]
                   6064: 
                   6065:        * src/sudo.c:
                   6066:        For FreeBSD, try the KERN_PROC_PID sysctl() first, falling back on
                   6067:        ttyname() of std{in,out,err}.
                   6068:        [95969b70bd68]
                   6069: 
                   6070: 2012-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6071: 
                   6072:        * config.h.in, configure, configure.in, src/sudo.c:
                   6073:        On newer FreeBSD we can get the parent's tty name via sysctl().
                   6074:        [3207290501ee]
                   6075: 
                   6076:        * plugins/sudoers/testsudoers.c:
                   6077:        Include locale.h
                   6078:        [a602cd0b8c2d]
                   6079: 
                   6080:        * src/sudo.c:
                   6081:        Silence a gcc warning.
                   6082:        [8c6d0e3cd534]
                   6083: 
                   6084:        * plugins/sudoers/bsm_audit.c:
                   6085:        Need to include gettext.h and sudo_debug.h; from John Hein
                   6086:        [447912aa7300]
                   6087: 
                   6088:        * plugins/sudoers/iolog.c:
                   6089:        Initialize the debug framework from the I/O plugin too.
                   6090:        [ce1bf44d96d2]
                   6091: 
                   6092: 2012-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6093: 
                   6094:        * plugins/sudoers/testsudoers.c:
                   6095:        Enable debugging via sudo.conf.
                   6096:        [d85669c749d0]
                   6097: 
                   6098: 2012-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6099: 
                   6100:        * plugins/sudoers/visudo.c:
                   6101:        Use SUDO_DEBUG_ALIAS for alias checking functions.
                   6102:        [fb84af30dc76]
                   6103: 
                   6104:        * configure, configure.in:
                   6105:        More complete test for getaddrinfo() that doesn't rely on the
                   6106:        network libraries already being added to LIBS.
                   6107:        [cbaf2369f4f0]
                   6108: 
                   6109: 2012-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6110: 
                   6111:        * common/aix.c:
                   6112:        Add debug support.
                   6113:        [def1bdf24485]
                   6114: 
                   6115:        * configure, configure.in:
                   6116:        Need -lsocket -lnsl for getaddrinfo(3) on Solaris at least.
                   6117:        [a2ea1c2eac61]
                   6118: 
                   6119:        * compat/getaddrinfo.c:
                   6120:        Include errno.h and missing.h
                   6121:        [7d15e17cc2f2]
                   6122: 
                   6123:        * .hgignore:
                   6124:        ignore doc/varsub
                   6125:        [417f9fc3231b]
                   6126: 
                   6127:        * configure.in, doc/visudo.pod, plugins/sudoers/Makefile.in,
                   6128:        plugins/sudoers/gram.y, plugins/sudoers/match.c,
                   6129:        plugins/sudoers/parse.c, plugins/sudoers/testsudoers.c, src/exec.c,
                   6130:        src/parse_args.c, src/sudo.c, src/sudo.h:
                   6131:        Update copyright year.
                   6132:        [5d0ffc7dd567]
                   6133: 
                   6134:        * NEWS:
                   6135:        Update for sudo 1.8.4
                   6136:        [841e3eff9844]
                   6137: 
                   6138:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   6139:        regen pot files
                   6140:        [c509cb45b66a]
                   6141: 
                   6142:        * plugins/sudoers/sudoreplay.c:
                   6143:        Enable debugging via sudo.conf.
                   6144:        [5087aaee8484]
                   6145: 
                   6146:        * plugins/sudoers/visudo.c:
                   6147:        Enable debugging via sudo.conf.
                   6148:        [04b067c16ed3]
                   6149: 
                   6150:        * plugins/sudoers/visudo.c:
                   6151:        Allow "visudo -c" to work when we only have read-only access to the
                   6152:        sudoers include files.
                   6153:        [d8c6713fe5c1]
                   6154: 
                   6155:        * doc/sudo.pod, doc/visudo.pod:
                   6156:        Mention the CONTRIBUTORS file, not HISTORY in AUTHOR section. Add
                   6157:        HISTORY section in sudo that points to HISTORY file.
                   6158:        [d1f1bcb051c5]
                   6159: 
                   6160:        * doc/sudo.pod, doc/sudo_plugin.pod:
                   6161:        Document Debug setting in sudo.conf and debug_flags in plugin.
                   6162:        [acfc505aa4a9]
                   6163: 
                   6164: 2012-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6165: 
                   6166:        * plugins/sudoers/match.c:
                   6167:        Do not include GLOB_MARK in the flags we pass to glob(3). Fixes a
                   6168:        bug where a pattern like "/usr/*" include /usr/bin/ in the results,
                   6169:        which would be incorrectly be interpreted as if the sudoers file had
                   6170:        specified a directory. From Vitezslav Cizek.
                   6171:        [0cdb6252188c]
                   6172: 
                   6173:        * INSTALL, config.h.in, configure, configure.in,
                   6174:        plugins/sudoers/auth/kerb5.c:
                   6175:        Add --enable-kerb5-instance configure option to allow people using
                   6176:        Kerberos V authentication to use a custom instance. Adapted from a
                   6177:        diff by Michael E Burr.
                   6178:        [e83af8bb7aa7]
                   6179: 
                   6180:        * doc/sudo.pod, src/parse_args.c, src/sudo.c, src/sudo.h:
                   6181:        Remove -D debug_level option.
                   6182:        [cbcd05094347]
                   6183: 
                   6184:        * doc/LICENSE:
                   6185:        Update copyright year.
                   6186:        [9f43dd7aa852]
                   6187: 
                   6188: 2012-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6189: 
                   6190:        * plugins/sudoers/parse.c, plugins/sudoers/testsudoers.c,
                   6191:        plugins/sudoers/visudo.c:
                   6192:        parse_error is now bool, not int
                   6193:        [5ea7fb6fda38]
                   6194: 
                   6195:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   6196:        plugins/sudoers/parse.c:
                   6197:        Print a more sensible error if yyparse() returns non-zero but
                   6198:        yyerror() was not called.
                   6199:        [d44ec88f1183]
                   6200: 
                   6201:        * plugins/sudoers/Makefile.in, plugins/sudoers/getdate.c,
                   6202:        plugins/sudoers/gram.c:
                   6203:        Replace y.tab.c with the correct filename in #line directives.
                   6204:        [3c84fcb7e959]
                   6205: 
                   6206: 2012-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    6207: 
                   6208:        * src/sudo.c:
1.1.1.2   misho    6209:        When trying to determine the tty, fall back on /proc/ppid/fd/{0,1,2}
                   6210:        if the main process's fds 0-2 are not hooked up to a tty. Adapted
                   6211:        from a diff by Zdenek Behan.
                   6212:        [b9dfce12af85]
                   6213: 
                   6214:        * src/exec.c:
                   6215:        When not logging I/O, put command in its own pgrp and make that the
                   6216:        controlling pgrp if the command is in the foreground. Fixes a race
                   6217:        in the non-I/O logging path where the command may receive two
                   6218:        keyboard-generated signals; one from the kernel and one from the
                   6219:        sudo process.
                   6220:        [d0e263ce496c]
                   6221: 
                   6222: 2011-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6223: 
                   6224:        * src/sudo_edit.c:
                   6225:        Quiet a bogus gcc warning.
                   6226:        [2009669e0608]
                   6227: 
                   6228:        * src/parse_args.c, src/sudo.h:
                   6229:        Fix warnings related to sudo.conf accessors.
                   6230:        [08ddc29ba50b]
                   6231: 
                   6232:        * common/sudo_conf.c, include/sudo_conf.h:
                   6233:        Separate sudo.conf parsing from plugin loading and move the parse
                   6234:        functions into the common lib so that visudo, etc. can use them.
                   6235:        [f1fc659a8079]
                   6236: 
                   6237:        * MANIFEST, common/Makefile.in, src/Makefile.in, src/load_plugins.c,
                   6238:        src/parse_args.c, src/sudo.c, src/sudo_plugin_int.h:
                   6239:        Separate sudo.conf parsing from plugin loading and move the parse
                   6240:        functions into the common lib so that visudo, etc. can use them.
                   6241:        [e1f2cf6bd57a]
                   6242: 
                   6243:        * doc/sudoers.pod, plugins/sudoers/def_data.c,
                   6244:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   6245:        plugins/sudoers/sudoers.c, src/sudo.c:
                   6246:        Remove support for noexec_file in sudoers and the plugin API
                   6247:        [3e2fd58879b5]
                   6248: 
                   6249:        * plugins/sudoers/sudoers.c:
                   6250:        Don't dump interfaces if there are none.
                   6251:        [9081bb4d3e9e]
                   6252: 
                   6253:        * plugins/sudoers/def_data.c, plugins/sudoers/def_data.in:
                   6254:        Add missing %s printf escape to the group_plugin, iolog_dir and
                   6255:        iolog_file descriptions.
                   6256:        [7db03f2b737e]
                   6257: 
                   6258: 2011-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6259: 
                   6260:        * plugins/sudoers/def_data.c, plugins/sudoers/def_data.in, src/exec.c:
                   6261:        Fix typo in visiblepw description; from Joel Pickett
                   6262:        [2fb4b26d5c2c]
                   6263: 
                   6264: 2011-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6265: 
                   6266:        * MANIFEST, configure, configure.in, mkdep.pl,
                   6267:        plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
                   6268:        plugins/sudoers/login_class.c, plugins/sudoers/sudoers.c,
                   6269:        plugins/sudoers/sudoers.h, src/sudo.c:
                   6270:        When running a login shell with a login_class specified, use
                   6271:        LOGIN_SETENV instead of rolling our own login.conf setenv support
                   6272:        since FreeBSD's login.conf has more than just setenv capabilities.
                   6273:        This requires us to swap the plugin-provided envp for the global
                   6274:        environ before calling setusercontext() and then stash the resulting
                   6275:        environ pointer back into the command details, which is kind of a
                   6276:        hack.
                   6277:        [ad4f1190143b]
                   6278: 
                   6279:        * plugins/sudoers/Makefile.in:
                   6280:        If srcdir is "." just use the basename of the yacc/lex file when
                   6281:        generating the C version. This matches the generated files
                   6282:        currently in the repo.
                   6283:        [0b11c3df87a8]
                   6284: 
                   6285:        * doc/Makefile.in, plugins/sudoers/Makefile.in:
                   6286:        Clean up the DEVEL noise
                   6287:        [9de2afe457fd]
                   6288: 
                   6289:        * src/exec.c:
                   6290:        Handle different Unix domain socket (actually socketpair) semantics
                   6291:        in BSD vs. Linux. In BSD if one end of the socketpair goes away
                   6292:        select() returns the fd as readable and the read will fail with
                   6293:        ECONNRESET. This doesn't appear to happen on Linux so if we notice
                   6294:        that the monitor process has died when I/O logging is enabled,
                   6295:        behave like the command has exited. This means we log the wait
                   6296:        status of the monitor, not the command, but there is nothing else we
                   6297:        can do at that point. This should only be an issue if SIGKILL is
                   6298:        sent to the monitor process.
                   6299:        [818e82ecbbfc]
                   6300: 
                   6301:        * src/exec_pty.c:
                   6302:        Catch common signals in the monitor process so they get passed to
                   6303:        the command. Fixes a problem when the entire login session is
                   6304:        killed when ssh is disconnected or the terminal window is closed.
                   6305:        Previously, the monitor would exit and plugin's close method would
                   6306:        not be called.
                   6307:        [0e4658263138]
                   6308: 
                   6309:        * INSTALL, configure, configure.in:
                   6310:        Mention how to configure pam_hpsec on HP-UX to play nicely with
                   6311:        sudo.
                   6312:        [a7294cd8ce98]
                   6313: 
                   6314: 2011-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6315: 
                   6316:        * plugins/sudoers/ldap.c:
                   6317:        Escape values in the search expression as per RFC 4515.
                   6318:        [c2adbc5db92b]
                   6319: 
                   6320:        * doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   6321:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   6322:        src/Makefile.in:
                   6323:        No need for install target to depend explicitly on install-dirs, the
                   6324:        install-foo targets all depend on it.
                   6325:        [62a36ed98279]
                   6326: 
                   6327: 2011-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6328: 
                   6329:        * .hgignore:
                   6330:        ignore src/sesh
                   6331:        [463d492f6782]
                   6332: 
                   6333:        * MANIFEST, common/Makefile.in, configure, configure.in, mkdep.pl,
                   6334:        plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   6335:        plugins/sudoers/Makefile.in, plugins/sudoers/env.c,
                   6336:        plugins/sudoers/login_class.c, plugins/sudoers/sudoers.c,
                   6337:        plugins/sudoers/sudoers.h, src/Makefile.in:
                   6338:        Add support for setenv entries in login.conf. We can't use
                   6339:        LOGIN_SETENV since the plugin sets up the envp the command is
                   6340:        executed with. Also regen the Makefile.in files while here. Fixes
                   6341:        bug #527
                   6342:        [088d507926e2]
                   6343: 
                   6344: 2011-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6345: 
                   6346:        * MANIFEST, aclocal.m4, compat/getaddrinfo.c, compat/getaddrinfo.h,
                   6347:        config.h.in, configure, configure.in, plugins/sudoers/sudoers.c,
                   6348:        src/net_ifs.c:
                   6349:        Add getaddrinfo() for those without it, written by Russ Allbery
                   6350:        [4cf9ac831222]
                   6351: 
                   6352:        * doc/Makefile.in:
                   6353:        Restore PACKAGE_TARNAME, it is used in docdir
                   6354:        [9d65e893edb1]
                   6355: 
                   6356:        * MANIFEST, compat/stdbool.h:
                   6357:        SunPro C Compiler also has a _Bool builtin. Also add stdbool.h to
                   6358:        the MANIFEST
                   6359:        [e67700dc5621]
                   6360: 
                   6361:        * common/atobool.c, common/term.c, src/exec.c:
                   6362:        Remove duplicate return statements.
                   6363:        [48a20d5215fd]
                   6364: 
                   6365:        * plugins/sudoers/auth/bsdauth.c:
                   6366:        Remove inaccurate comment
                   6367:        [e7f0265cf657]
                   6368: 
                   6369:        * plugins/sudoers/auth/bsdauth.c, plugins/sudoers/sudoers.c:
                   6370:        Fetch the login class for the user we authenticate specifically when
                   6371:        using BSD authentication. That user may have a different login
                   6372:        class than what we will use to run the command. When setting the
                   6373:        login class for the command, use the target user's struct passwd,
                   6374:        not the invoking user's. Fixes bug 526
                   6375:        [21bf0af892f7]
                   6376: 
                   6377:        * compat/Makefile.in, configure, configure.in, doc/Makefile.in,
                   6378:        plugins/sudoers/Makefile.in:
                   6379:        Replace @DEV@ prefix with DEVEL variable so we can do "make DEVEL=1"
                   6380:        [8ee6e0891f27]
                   6381: 
                   6382:        * plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   6383:        plugins/sudoers/regress/logging/check_wrap.c,
                   6384:        plugins/sudoers/regress/parser/check_addr.c,
                   6385:        plugins/sudoers/regress/parser/check_fill.c:
                   6386:        Fix "make check" fallout from the sudo_conv changes in sudo_debug.
                   6387:        [b0aaa63c9081]
                   6388: 
                   6389:        * common/fileops.c, common/sudo_debug.c, configure, configure.in,
                   6390:        include/fileops.h, plugins/sample/Makefile.in,
                   6391:        plugins/sample/sample_plugin.c, plugins/sample_group/Makefile.in,
                   6392:        plugins/sample_group/sample_group.c, plugins/sudoers/alias.c,
                   6393:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c,
                   6394:        plugins/sudoers/defaults.c, plugins/sudoers/defaults.h,
                   6395:        plugins/sudoers/env.c, plugins/sudoers/find_path.c,
                   6396:        plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
                   6397:        plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
                   6398:        plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
                   6399:        plugins/sudoers/ldap.c, plugins/sudoers/match.c,
                   6400:        plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
                   6401:        plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
                   6402:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
                   6403:        plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
                   6404:        plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   6405:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   6406:        plugins/sudoers/visudo.c, src/exec.c, src/exec_pty.c,
                   6407:        src/load_plugins.c, src/sudo.c, src/sudo.h, src/sudo_exec.h,
                   6408:        src/sudo_plugin_int.h, src/utmp.c:
                   6409:        Use stdbool.h instead of rolling our own TRUE/FALSE macros.
                   6410:        [dcb0bbc42fc9]
                   6411: 
                   6412: 2011-12-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6413: 
                   6414:        * compat/stdbool.h, config.h.in, configure, configure.in:
                   6415:        Add stdbool.h for systems without it.
                   6416:        [18bd9dda1dcd]
                   6417: 
                   6418:        * aclocal.m4, config.h.in, configure, configure.in:
                   6419:        No longer need SUDO_CHECK_TYPE and SUDO_TYPE_* now that the default
                   6420:        includes have unistd.h in them. Add check for socklen_t for
                   6421:        upcoming getaddrinfo compat.
                   6422:        [d705465bef69]
                   6423: 
                   6424:        * common/fileops.c, compat/nanosleep.c, config.h.in, configure,
                   6425:        configure.in, plugins/sudoers/interfaces.c,
                   6426:        plugins/sudoers/interfaces.h, plugins/sudoers/match_addr.c,
                   6427:        plugins/sudoers/sudoreplay.c, src/net_ifs.c:
                   6428:        Use HAVE_STRUCT_TIMESPEC and HAVE_STRUCT_IN6_ADDR instead of
                   6429:        HAVE_TIMESPEC and HAVE_IN6_ADDR respectively.
                   6430:        [fa187c9bd2be]
                   6431: 
                   6432:        * src/sudo_noexec.c:
                   6433:        No longer need to include time.h here as missing.h does not use
                   6434:        time_t.
                   6435:        [fa3a089bf5b1]
                   6436: 
                   6437: 2011-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6438: 
                   6439:        * plugins/sudoers/visudo.c:
                   6440:        Fix mode on sudoers as needed when the -f option is not specified.
                   6441:        [7a1c40b0dc03]
                   6442: 
                   6443:        * MANIFEST, src/po/sr.mo, src/po/sr.po:
                   6444:        Add Serbian translation for sudo from translationproject.org
                   6445:        [9a0c25e25cba]
                   6446: 
                   6447:        * common/sudo_debug.c, plugins/sudoers/sudoers.c, src/load_plugins.c,
                   6448:        src/parse_args.c:
                   6449:        No longer pass debug_file to plugin, plugins must now use
                   6450:        CONV_DEBUG_MSG
                   6451:        [810cda1abb0b]
                   6452: 
                   6453:        * mkpkg:
                   6454:        Build PIE executables for newer Debian and Ubuntu
                   6455:        [1c5f25f8904a]
                   6456: 
                   6457:        * common/sudo_debug.c:
                   6458:        Include time.h for ctime() prototype.
                   6459:        [10090cf3bca1]
                   6460: 
                   6461: 2011-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6462: 
                   6463:        * common/sudo_debug.c, include/sudo_debug.h, src/exec.c,
                   6464:        src/exec_pty.c:
                   6465:        Do not close error pipe or debug fd via closefrom() as we need them
                   6466:        to report an exec error should one occur.
                   6467:        [732f6587fafa]
                   6468: 
                   6469:        * doc/sudoers.ldap.pod:
                   6470:        Document that a sudoUser may now be a group ID.
                   6471:        [2fef46b9d3d3]
                   6472: 
                   6473:        * plugins/sudoers/ldap.c:
                   6474:        Add support for permitting access by group ID in addition to group
                   6475:        name.
                   6476:        [b9450fdf1f69]
                   6477: 
                   6478:        * plugins/sudoers/ldap.c:
                   6479:        Older Netscape LDAP SDKs don't prototype ldapssl_set_strength()
                   6480:        [d62a1e7cff4f]
                   6481: 
                   6482:        * compat/fnmatch.c, compat/fnmatch.h, doc/LICENSE:
                   6483:        Replace UCB fnmatch.c with a non-recursive version written by
                   6484:        William A. Rowe Jr.
                   6485:        [354d3384adb8]
                   6486: 
                   6487:        * plugins/sudoers/auth/pam.c:
                   6488:        Fix typo, return_debug vs. debug_return
                   6489:        [1b522efcbb0d]
                   6490: 
                   6491: 2011-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6492: 
                   6493:        * plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po:
                   6494:        Update Japanese sudoers translation from translationproject.org
                   6495:        [ec0f2beaad36]
                   6496: 
                   6497:        * doc/sudoers.pod:
                   6498:        Make the env_reset descriptions consistent.
                   6499:        [41c056f02688]
                   6500: 
                   6501: 2011-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6502: 
                   6503:        * configure, configure.in:
                   6504:        Do multiple expansion when expanding paths to the noexec file, sesh
                   6505:        and the plugin directory. Adapted from a diff by Mike Frysinger
                   6506:        [d7e16c876c66]
                   6507: 
                   6508:        * common/Makefile.in:
                   6509:        regen
                   6510:        [9d729e09c186]
                   6511: 
                   6512: 2011-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6513: 
                   6514:        * .hgignore:
                   6515:        Add ignore file; from Mike Frysinger
                   6516:        [1fa8d52425f8]
                   6517: 
                   6518:        * mkdep.pl:
                   6519:        no longer save old Makefile.in to .old
                   6520:        [378dd2395545]
                   6521: 
                   6522:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   6523:        regen
                   6524:        [769faf517720]
                   6525: 
                   6526:        * config.guess, config.sub, configure, ltmain.sh, m4/libtool.m4,
                   6527:        m4/ltoptions.m4, m4/ltversion.m4:
                   6528:        Update to libtool 2.4.2
                   6529:        [9dac78d84b4f]
                   6530: 
                   6531: 2011-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6532: 
                   6533:        * plugins/sudoers/sudoers_version.h:
                   6534:        Bump grammar version for #include and #includedir relative path
                   6535:        support.
                   6536:        [82a4f7cd8f71]
                   6537: 
                   6538: 2011-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6539: 
                   6540:        * doc/sudoers.pod, plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   6541:        Add support for relative paths in #include and #includedir
                   6542:        [4d6e3bd0c24f]
                   6543: 
                   6544:        * plugins/sudoers/Makefile.in:
                   6545:        Fix install-plugin when shared objects are unsupported or disabled.
                   6546:        [cbdd770a7a1b]
                   6547: 
                   6548:        * plugins/sudoers/goodpath.c:
                   6549:        Don't write to sbp if it is NULL
                   6550:        [fc438f8e8570]
                   6551: 
                   6552: 2011-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6553: 
                   6554:        * Makefile.in:
                   6555:        Remove all sudo/sudoers .mo files on uninstall If LINGUAS is set,
                   6556:        only install matching .mo files
                   6557:        [c1dc30ab4ebc]
                   6558: 
                   6559: 2011-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6560: 
                   6561:        * plugins/sudoers/group_plugin.c, plugins/sudoers/plugin_error.c,
                   6562:        plugins/sudoers/sudoers.c, src/conversation.c:
                   6563:        Fix non-dynamic (no dlopen) sudo build.
                   6564:        [b0bd3fa925a3]
                   6565: 
                   6566:        * configure, configure.in:
                   6567:        Don't error out if the user specified --disable-shared
                   6568:        [cf035dd1e5cc]
                   6569: 
                   6570:        * common/sudo_debug.c, plugins/sudoers/sudoreplay.c,
                   6571:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
                   6572:        src/conversation.c:
                   6573:        Use SUDO_CONV_DEBUG_MSG in the plugin instead of writing directly to
                   6574:        the debug file.
                   6575:        [640c62f83251]
                   6576: 
                   6577:        * plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
                   6578:        plugins/sudoers/sudoers.h:
                   6579:        Make sudo_goodpath() return value bolean
                   6580:        [fea2d59a6e55]
1.1       misho    6581: 
1.1.1.2   misho    6582:        * INSTALL, MANIFEST, configure, configure.in, mkdep.pl,
                   6583:        plugins/sudoers/Makefile.in, plugins/sudoers/auth/securid.c:
                   6584:        Remove obsolete securid auth method.
                   6585:        [4e54f860214b]
                   6586: 
                   6587:        * plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   6588:        plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
                   6589:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   6590:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
                   6591:        plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid5.c,
                   6592:        plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
                   6593:        plugins/sudoers/auth/sudo_auth.h:
                   6594:        Prefix authentication functions with a "sudo_" prefix to avoid
                   6595:        namespace problems.
                   6596:        [581d74063ea1]
                   6597: 
                   6598:        * INSTALL, MANIFEST, config.h.in, configure, configure.in,
                   6599:        doc/TROUBLESHOOTING, mkdep.pl, plugins/sudoers/Makefile.in,
                   6600:        plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/sudo_auth.c,
                   6601:        plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/env.c:
                   6602:        Remove the old Kerberos IV support
                   6603:        [2e4b4a44209d]
                   6604: 
                   6605: 2011-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6606: 
                   6607:        * plugins/sudoers/check.c:
                   6608:        Don't print garbage at the end of the custom lecture.
                   6609:        [44bb788fafaa]
                   6610: 
                   6611:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   6612:        Add lexer tracing as debug@parser
                   6613:        [d850f3f9d414]
                   6614: 
                   6615:        * plugins/sudoers/alias.c, plugins/sudoers/defaults.c,
                   6616:        plugins/sudoers/defaults.h, plugins/sudoers/gram.c,
                   6617:        plugins/sudoers/match.c, plugins/sudoers/parse.c,
                   6618:        plugins/sudoers/regress/parser/check_fill.c,
                   6619:        plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
                   6620:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   6621:        plugins/sudoers/visudo.c:
                   6622:        Revert 003bdb078a15. We need to #include <gram.h> not "gram.h" and
                   6623:        <def_data.h> and not "def_data.h" when generating the parser in a
                   6624:        build dir.
                   6625:        [7da701def753]
                   6626: 
                   6627: 2011-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6628: 
                   6629:        * mkdep.pl, plugins/sudoers/Makefile.in:
                   6630:        Better devdir support in mkdep.pl
                   6631:        [7dcec57bd155]
                   6632: 
                   6633:        * plugins/sudoers/Makefile.in:
                   6634:        Add devdir before srcdir in include path and fix up dependecies
                   6635:        accordingly.
                   6636:        [6e9958eca485]
                   6637: 
                   6638:        * plugins/sudoers/alias.c, plugins/sudoers/defaults.c,
                   6639:        plugins/sudoers/defaults.h, plugins/sudoers/match.c,
                   6640:        plugins/sudoers/parse.c, plugins/sudoers/testsudoers.c,
                   6641:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   6642:        plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c:
                   6643:        #include "gram.h" not <gram.h> and "def_data.h" and not
                   6644:        <def_data.h>.
                   6645:        [003bdb078a15]
1.1       misho    6646: 
                   6647:        * sudo.pp:
1.1.1.2   misho    6648:        Mark libexec files as optional. If we build without shared object
                   6649:        support, libexec is not used.
                   6650:        [4bffcf482219]
                   6651: 
                   6652:        * src/load_plugins.c:
                   6653:        Change Debug sudo.conf setting to take a program name as the first
                   6654:        argument. In the future, this will allow visudo and sudoreplay to
                   6655:        use their own Debug entries.
                   6656:        [cfb8f7e4867c]
                   6657: 
                   6658:        * src/sudo.c:
                   6659:        fix sudo_debug_printf priority
                   6660:        [dcb67e965609]
                   6661: 
                   6662:        * plugins/sudoers/sudoers.c:
                   6663:        add missing debug_return_int
                   6664:        [d88ec450c592]
                   6665: 
                   6666: 2011-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6667: 
                   6668:        * common/sudo_debug.c, include/error.h, include/sudo_debug.h,
                   6669:        plugins/sudoers/logging.c, src/exec.c, src/exec_pty.c:
                   6670:        Fold SUDO_DEBUG_PROGERR and SUDO_DEBUG_SYSERR into SUDO_DEBUG_ERROR
                   6671:        [dcee8efc294f]
                   6672: 
                   6673:        * doc/UPGRADE:
                   6674:        Add missing word in HOME security note.
                   6675:        [fd844fdcc1ac]
                   6676: 
                   6677:        * plugins/sudoers/testsudoers.c:
                   6678:        Prevent "testsudoers -d username" from trying to malloc(0).
                   6679:        [839126e56e8c]
                   6680: 
                   6681: 2011-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6682: 
                   6683:        * plugins/sudoers/regress/sudoers/test10.in,
                   6684:        plugins/sudoers/regress/sudoers/test10.out.ok,
                   6685:        plugins/sudoers/regress/sudoers/test10.toke.ok,
                   6686:        plugins/sudoers/regress/sudoers/test10.toke.out.ok,
                   6687:        plugins/sudoers/regress/sudoers/test11.in,
                   6688:        plugins/sudoers/regress/sudoers/test11.out.ok,
                   6689:        plugins/sudoers/regress/sudoers/test11.toke.ok,
                   6690:        plugins/sudoers/regress/sudoers/test11.toke.out.ok,
                   6691:        plugins/sudoers/regress/sudoers/test12.in,
                   6692:        plugins/sudoers/regress/sudoers/test12.out.ok,
                   6693:        plugins/sudoers/regress/sudoers/test12.toke.ok,
                   6694:        plugins/sudoers/regress/sudoers/test13.in,
                   6695:        plugins/sudoers/regress/sudoers/test13.out.ok,
                   6696:        plugins/sudoers/regress/sudoers/test13.toke.ok,
                   6697:        plugins/sudoers/regress/sudoers/test9.in,
                   6698:        plugins/sudoers/regress/sudoers/test9.out.ok,
                   6699:        plugins/sudoers/regress/sudoers/test9.toke.ok,
                   6700:        plugins/sudoers/regress/sudoers/test9.toke.out.ok:
                   6701:        Tests for empty sudoers (should parse OK) and syntax errors within a
                   6702:        line (should report correct line number) both with and without the
                   6703:        trailing newline.
                   6704:        [d57c879c4718]
                   6705: 
                   6706:        * plugins/sudoers/regress/sudoers/test4.out.ok,
                   6707:        plugins/sudoers/regress/sudoers/test5.out.ok,
                   6708:        plugins/sudoers/regress/sudoers/test7.out.ok,
                   6709:        plugins/sudoers/regress/sudoers/test8.out.ok,
                   6710:        plugins/sudoers/testsudoers.c:
                   6711:        Print line number when there is a parser error.
                   6712:        [5444ef6ac6dc]
                   6713: 
                   6714: 2011-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6715: 
                   6716:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   6717:        plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   6718:        Keep track of the last token returned. On error, if the last token
                   6719:        was COMMENT, decrement sudolineno since the error most likely
                   6720:        occurred on the preceding line. Previously we always uses
                   6721:        sudolineno-1 which will give the wrong line number for errors within
                   6722:        a line.
                   6723:        [d661a03a64da]
                   6724: 
                   6725: 2011-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6726: 
                   6727:        * NEWS:
                   6728:        update with sudo 1.8.3p1 info
                   6729:        [0f79ff31f602]
                   6730: 
                   6731:        * plugins/sudoers/sudoers.c:
                   6732:        Fix crash when "sudo -g group -i" is run. Fixes bug 521
                   6733:        [a3087ae337c4]
                   6734: 
                   6735: 2011-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6736: 
                   6737:        * plugins/sudoers/visudo.c:
                   6738:        Make alias_remove_recursive() return TRUE/FALSE as its callers
                   6739:        expect and remove two unused arguments. Fixes bug 519.
                   6740:        [2ee3b2882844]
                   6741: 
                   6742:        * plugins/sudoers/regress/visudo/test1.out.ok,
                   6743:        plugins/sudoers/regress/visudo/test1.sh:
                   6744:        Add regress test for bugzilla 519
                   6745:        [48000ebedf97]
                   6746: 
                   6747:        * plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   6748:        plugins/sudoers/regress/logging/check_wrap.c,
                   6749:        plugins/sudoers/regress/parser/check_addr.c,
                   6750:        plugins/sudoers/regress/parser/check_fill.c:
                   6751:        Disable warning/error wrapping in regress tests.
                   6752:        [373c589ba561]
1.1       misho    6753: 
                   6754: 2011-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6755: 
1.1.1.2   misho    6756:        * Makefile.in:
                   6757:        Do compile-po as part of sync-po so that the .mo files get rebuild
                   6758:        automatically when we sync with translationproject.org
                   6759:        [83f3cbfc2f33]
                   6760: 
1.1       misho    6761:        * plugins/sudoers/Makefile.in:
                   6762:        check_addr needs to link with the network libraries on Solaris
                   6763:        [322bd70e316e]
                   6764: 
                   6765:        * plugins/sudoers/match.c:
                   6766:        When matching a RunasAlias for a runas group, pass the alias in as
                   6767:        the group_list, not the user_list. From Daniel Kopecek.
                   6768:        [766545edf141]
                   6769: 
                   6770:        * plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
                   6771:        We need to init the auth system regardless of whether we need a
                   6772:        password since we will be closing the PAM session in the monitor
                   6773:        process. Fixes a crash in the monitor on Solaris; bugzilla #518
                   6774:        [e82809f86fb3]
                   6775: 
1.1.1.2   misho    6776: 2011-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    6777: 
1.1.1.2   misho    6778:        * src/exec.c:
                   6779:        Get rid of done: label. If the child exits we still need to close
                   6780:        the pty, update utmp and restore the SELinux tty context.
                   6781:        [cc127bf48405]
                   6782: 
                   6783: 2011-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6784: 
                   6785:        * common/Makefile.in, common/atobool.c, common/fileops.c,
                   6786:        common/fmt_string.c, common/lbuf.c, common/list.c,
                   6787:        common/setgroups.c, common/term.c, plugins/sudoers/Makefile.in,
                   6788:        plugins/sudoers/alias.c, plugins/sudoers/audit.c,
                   6789:        plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   6790:        plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
                   6791:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
                   6792:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   6793:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
                   6794:        plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
                   6795:        plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
                   6796:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/boottime.c,
                   6797:        plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
                   6798:        plugins/sudoers/defaults.c, plugins/sudoers/env.c,
                   6799:        plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
                   6800:        plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
                   6801:        plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
                   6802:        plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
                   6803:        plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
                   6804:        plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
                   6805:        plugins/sudoers/logwrap.c, plugins/sudoers/match.c,
                   6806:        plugins/sudoers/match_addr.c, plugins/sudoers/parse.c,
                   6807:        plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
                   6808:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   6809:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   6810:        plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   6811:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   6812:        src/Makefile.in, src/conversation.c, src/exec.c, src/exec_pty.c,
                   6813:        src/get_pty.c, src/load_plugins.c, src/net_ifs.c, src/parse_args.c,
                   6814:        src/selinux.c, src/sudo.c, src/sudo.h, src/sudo_edit.c,
                   6815:        src/tgetpass.c, src/ttysize.c, src/utmp.c:
                   6816:        Add debug_decl/debug_return (almost) everywhere. Remove old
                   6817:        sudo_debug() and convert users to sudo_debug_printf().
                   6818:        [8f3bbf907b67]
                   6819: 
                   6820:        * common/alloc.c, include/error.h, plugins/sudoers/plugin_error.c,
                   6821:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   6822:        plugins/sudoers/visudo.c, src/error.c:
                   6823:        Wrap error/errorx and warning/warningx functions with debug
                   6824:        statements. Disable wrapping for standalone sudoers programs as well
                   6825:        as memory allocation functions (to avoid infinite recursion).
                   6826:        [562ed7b5ae8d]
                   6827: 
                   6828:        * README, config.h.in, configure, configure.in:
                   6829:        Add checks for __func__ and __FUNCTION__ and mention that we now
                   6830:        require a cpp that supports variadic macros.
                   6831:        [314cfe4c5d23]
                   6832: 
                   6833:        * MANIFEST, common/Makefile.in, common/sudo_debug.c,
                   6834:        include/sudo_debug.h, include/sudo_plugin.h, src/conversation.c,
                   6835:        src/load_plugins.c, src/parse_args.c, src/sudo.c,
                   6836:        src/sudo_plugin_int.h:
                   6837:        New debug framework for sudo and plugins using /etc/sudo.conf that
                   6838:        also supports function call tracing.
                   6839:        [cded741e9f10]
1.1       misho    6840: 
1.1.1.2   misho    6841: 2011-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6842: 
                   6843:        * plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po:
                   6844:        Update Japanese sudoers translation from translationproject.org
                   6845:        [c24725775e32]
1.1       misho    6846: 
                   6847: 2011-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6848: 
                   6849:        * configure, configure.in:
                   6850:        Override and ignore the --disable-static option. Sudo already runs
                   6851:        libtool with -tag=disable-static where applicable and we need non-
                   6852:        PIC objects to build the executables.
1.1.1.2   misho    6853:        [aff1227b853a]
1.1       misho    6854: 
                   6855: 2011-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6856: 
                   6857:        * NEWS:
                   6858:        Add sudoedit fix
1.1.1.2   misho    6859:        [74655c7ccad1]
1.1       misho    6860: 
                   6861:        * plugins/sudoers/po/sudoers.pot:
                   6862:        regen pot files
1.1.1.2   misho    6863:        [28d89a831ed3]
1.1       misho    6864: 
1.1.1.2   misho    6865:        * plugins/sudoers/env.c:
                   6866:        Ignore set_logname (which is now the default) for sudoedit since we
1.1       misho    6867:        want the LOGNAME, USER and USERNAME environment variables to refer
                   6868:        to the calling user since that is who the editor runs as. This
                   6869:        allows the editor to find the user's startup files. Fixes bugzilla
                   6870:        #515
1.1.1.2   misho    6871:        [6c5dddf5ff05]
1.1       misho    6872: 
1.1.1.2   misho    6873:        * plugins/sudoers/pwutil.c:
                   6874:        Instead of trying to grow the buffer in make_grlist_item(), simply
1.1       misho    6875:        increase the total length, free the old buffer and allocate a new
                   6876:        one. This is less error prone and saves us from having to adjust
                   6877:        all the pointers in the buffer. This code path is only taken when
                   6878:        there are groups longer than the length of the user field in struct
                   6879:        utmp or utmpx, which should be quite rare.
1.1.1.2   misho    6880:        [5587dc8cffaf]
1.1       misho    6881: 
1.1.1.2   misho    6882:        * src/po/it.mo:
                   6883:        Add Italian translation for sudo from translationproject.org
                   6884:        [1b3dd886e7e3]
1.1       misho    6885: 
1.1.1.2   misho    6886:        * MANIFEST, NEWS, plugins/sudoers/po/ja.mo, plugins/sudoers/po/ja.po,
                   6887:        src/po/ja.mo, src/po/ja.po:
1.1       misho    6888:        Japanese translation for sudo and sudoers from
                   6889:        translationproject.org
1.1.1.2   misho    6890:        [c06dd866be6e]
1.1       misho    6891: 
                   6892: 2011-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6893: 
1.1.1.2   misho    6894:        * plugins/sudoers/Makefile.in:
                   6895:        sudoreplay depends on timestr.lo too; from Mike Frysinger
                   6896:        [b9e73214b2f1]
1.1       misho    6897: 
                   6898: 2011-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6899: 
                   6900:        * plugins/sudoers/po/sudoers.pot:
                   6901:        Regen sudoers pot file.
1.1.1.2   misho    6902:        [019588bafdb3]
1.1       misho    6903: 
                   6904:        * NEWS:
                   6905:        Update with latest sudo 1.8.3 news
1.1.1.2   misho    6906:        [6868042a88e9]
1.1       misho    6907: 
1.1.1.2   misho    6908:        * plugins/sudoers/sudoers.c:
                   6909:        It appears that LDAP or NSS may modify the euid so we need to be
                   6910:        root for the open(). We restore the old perms at the end of
                   6911:        sudoers_policy_open().
                   6912:        [2da67a5497ef]
1.1       misho    6913: 
1.1.1.2   misho    6914:        * plugins/sudoers/set_perms.c:
                   6915:        Better warning message on setuid() failure for the setreuid()
1.1       misho    6916:        version of set_perms().
1.1.1.2   misho    6917:        [07abcfe7bd9a]
1.1       misho    6918: 
                   6919: 2011-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6920: 
1.1.1.2   misho    6921:        * plugins/sudoers/check.c:
                   6922:        Delref auth_pw at the end of check_user() instead of getting a ref
1.1       misho    6923:        twice.
1.1.1.2   misho    6924:        [cb665f55e6a5]
1.1       misho    6925: 
1.1.1.2   misho    6926:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/check.c:
                   6927:        Make sudo_auth_{init,cleanup} return TRUE on success and check for
1.1       misho    6928:        sudo_auth_init() return value in check_user().
1.1.1.2   misho    6929:        [92631c919356]
1.1       misho    6930: 
1.1.1.2   misho    6931:        * plugins/sudoers/auth/sudo_auth.c:
                   6932:        Do not return without restoring permissions.
                   6933:        [59ef40b6696a]
1.1       misho    6934: 
                   6935:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   6936:        regen pot files
1.1.1.2   misho    6937:        [9f320a340b7c]
1.1       misho    6938: 
1.1.1.2   misho    6939:        * plugins/sudoers/auth/API, plugins/sudoers/auth/bsdauth.c,
                   6940:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
                   6941:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   6942:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
                   6943:        plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
                   6944:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
                   6945:        plugins/sudoers/check.c, plugins/sudoers/sudoers.c,
                   6946:        plugins/sudoers/sudoers.h:
                   6947:        Modify the authentication API such that the init and cleanup
1.1       misho    6948:        functions are always called, regardless of whether or not we are
                   6949:        going to verify a password. This is needed for proper PAM session
                   6950:        support.
1.1.1.2   misho    6951:        [19a53f3fb596]
1.1       misho    6952: 
1.1.1.2   misho    6953:        * compat/Makefile.in, mkdep.pl, plugins/sudoers/Makefile.in:
                   6954:        Add missing dependency for getspwuid.lo and regen other depends.
                   6955:        [f7f70eae819a]
1.1       misho    6956: 
1.1.1.2   misho    6957:        * plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
                   6958:        plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/sudoers.c:
                   6959:        Fix a PAM_USER mismatch in session open/close. We update PAM_USER
1.1       misho    6960:        to the target user immediately before setting resource limits, which
                   6961:        is after the monitor process has forked (so it has the old value).
                   6962:        Also, if the user did not authenticate, there is no pamh in the
                   6963:        monitor so we need to init pam here too. This means we end up
                   6964:        calling pam_start() twice, which should be fixed, but at least the
                   6965:        session is always properly closed now.
1.1.1.2   misho    6966:        [fbc063a2a872]
1.1       misho    6967: 
1.1.1.2   misho    6968:        * src/utmp.c:
                   6969:        Add check for old being NULL in utmp_setid(); from Steven McDonald
                   6970:        [e87126442f2e]
1.1       misho    6971: 
                   6972: 2011-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6973: 
1.1.1.2   misho    6974:        * plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
                   6975:        plugins/sudoers/sudoers.h:
                   6976:        If the invoking user cannot be resolved by uid fake the struct
1.1       misho    6977:        passwd and store it in the cache so we can delref it on exit.
1.1.1.2   misho    6978:        [a27e2f8b9f5e]
1.1       misho    6979: 
                   6980: 2011-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6981: 
1.1.1.2   misho    6982:        * plugins/sudoers/sudoers.c:
                   6983:        Don't error out if the group plugin cannot be loaded, just warn.
                   6984:        [0fbfcd381e33]
1.1       misho    6985: 
                   6986: 2011-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6987: 
1.1.1.2   misho    6988:        * plugins/sudoers/sudoers.c:
                   6989:        Quiet a false positive found by several static analysis tools. These
1.1       misho    6990:        tools don't know that log_error() does not return (it longjmps to
                   6991:        error_jmp which returns to the sudo front-end).
1.1.1.2   misho    6992:        [33d0469df21b]
1.1       misho    6993: 
                   6994: 2011-09-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   6995: 
1.1.1.2   misho    6996:        * MANIFEST, plugins/sudoers/po/da.mo, plugins/sudoers/po/eo.mo,
                   6997:        plugins/sudoers/po/fi.mo, plugins/sudoers/po/pl.mo,
                   6998:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/zh_CN.mo, src/po/it.po:
                   6999:        Add Italian translation for sudo from translationproject.org Regen
1.1       misho    7000:        .mo files
1.1.1.2   misho    7001:        [c3c888a82be6]
1.1       misho    7002: 
                   7003: 2011-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7004: 
1.1.1.2   misho    7005:        * doc/TROUBLESHOOTING:
                   7006:        Update to current reality and add bit about ssh auth
                   7007:        [184a1e7c2eeb]
1.1       misho    7008: 
1.1.1.2   misho    7009:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
                   7010:        Make "verbose" static; fixes a namespace clash with
1.1       misho    7011:        pam_ssh_agent_auth (and it doesn't need to be extern these days).
1.1.1.2   misho    7012:        [cc38d2eb2f4c]
1.1       misho    7013: 
1.1.1.2   misho    7014:        * config.h.in, configure, configure.in, src/get_pty.c:
1.1       misho    7015:        FreeBSD has libutil.h not util.h
1.1.1.2   misho    7016:        [dab4c94b6d4f]
1.1       misho    7017: 
                   7018:        * configure, configure.in:
                   7019:        Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD
1.1.1.2   misho    7020:        [41c362f0a92a]
1.1       misho    7021: 
1.1.1.2   misho    7022: 2011-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7023: 
1.1.1.2   misho    7024:        * plugins/sudoers/po/da.po, plugins/sudoers/po/eo.po,
                   7025:        plugins/sudoers/po/fi.po, plugins/sudoers/po/pl.po,
                   7026:        plugins/sudoers/po/uk.po, plugins/sudoers/po/zh_CN.po:
                   7027:        Update po files from translationproject.org
                   7028:        [1e99e147c7fa]
1.1       misho    7029: 
1.1.1.2   misho    7030: 2011-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7031: 
1.1.1.2   misho    7032:        * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
1.1       misho    7033:        Add support for DEREF in ldap.conf.
1.1.1.2   misho    7034:        [3c1937a98547]
1.1       misho    7035: 
                   7036:        * Makefile.in:
                   7037:        install target should depend on ChangeLog too, not just install-doc
1.1.1.2   misho    7038:        [1a7c83941175]
1.1       misho    7039: 
1.1.1.2   misho    7040:        * doc/sudoers.pod:
1.1       misho    7041:        Only iolog_file (not iolog_dir) supports mktemp-style suffixes.
1.1.1.2   misho    7042:        [0eca47d60a2c]
1.1       misho    7043: 
1.1.1.2   misho    7044:        * NEWS:
                   7045:        Sync with 1.8 branch for sudo 1.8.2 and 1.8.3 changes.
                   7046:        [0501415cc5ff]
                   7047: 
                   7048:        * doc/UPGRADE:
                   7049:        Document group lookup change and possible side effects.
                   7050:        [585743e1ebf7]
1.1       misho    7051: 
                   7052:        * configure, configure.in:
                   7053:        Fix some square brackets in case statements that needed to be
                   7054:        doubled up. While here, use $OSMAJOR when it makes sense.
1.1.1.2   misho    7055:        [8973343f4696]
1.1       misho    7056: 
1.1.1.2   misho    7057:        * plugins/sudoers/pwutil.c:
                   7058:        Fix a crash in make_grlist_item() on 64-bit machines with strict
1.1       misho    7059:        alignment.
1.1.1.2   misho    7060:        [c89508c73c46]
1.1       misho    7061: 
1.1.1.2   misho    7062:        * plugins/sudoers/defaults.c, plugins/sudoers/defaults.h:
                   7063:        Remove list_options() function that is no longer used now that "sudo
1.1       misho    7064:        -L" is gone.
1.1.1.2   misho    7065:        [fcc6a776c135]
1.1       misho    7066: 
                   7067:        * configure, configure.in:
                   7068:        Error message if user tries --with-CC
1.1.1.2   misho    7069:        [ec5b478f813a]
1.1       misho    7070: 
                   7071:        * configure, configure.in:
                   7072:        Check for -libmldap too when looking for ldap libs, which is the
                   7073:        Tivoli Directory Server client library.
1.1.1.2   misho    7074:        [bb3007a97206]
1.1       misho    7075: 
                   7076: 2011-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7077: 
1.1.1.2   misho    7078:        * plugins/sudoers/parse.c:
                   7079:        Honor NOPASSWD tag for denied commands too.
                   7080:        [8dd92656db92]
                   7081: 
                   7082: 2011-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7083: 
                   7084:        * INSTALL, configure, configure.in:
                   7085:        Remove --with-CC option; it doesn't work correctly now that we use
                   7086:        libtool. Users can get the same effect by setting the CC
                   7087:        environment variable when running configure.
1.1.1.2   misho    7088:        [ec22bd1a55e0]
1.1       misho    7089: 
                   7090: 2011-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7091: 
1.1.1.2   misho    7092:        * config.h.in, configure, configure.in, plugins/sudoers/visudo.c,
                   7093:        src/sudo_edit.c:
1.1       misho    7094:        Assume all modern systems support fstat(2).
1.1.1.2   misho    7095:        [6a5a8985f6a0]
1.1       misho    7096: 
                   7097: 2011-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7098: 
1.1.1.2   misho    7099:        * compat/regress/glob/globtest.c, config.h.in, configure,
                   7100:        configure.in, include/missing.h, plugins/sudoers/sudoers.h,
                   7101:        src/sudo.h, src/sudo_noexec.c:
1.1       misho    7102:        Add configure test for missing errno declaration and only declare it
                   7103:        ourselves if it is missing.
1.1.1.2   misho    7104:        [456e76c809a2]
1.1       misho    7105: 
1.1.1.2   misho    7106:        * plugins/sudoers/alias.c:
                   7107:        Include errno.h before sudo.h to avoid conflicting with the system
1.1       misho    7108:        definition of errno.
1.1.1.2   misho    7109:        [d0b97e392512]
1.1       misho    7110: 
                   7111: 2011-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7112: 
1.1.1.2   misho    7113:        * plugins/sudoers/regress/parser/check_addr.c:
                   7114:        Only print individual check status when there is a failure.
                   7115:        [2ac704c91441]
                   7116: 
                   7117:        * plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   7118:        plugins/sudoers/regress/logging/check_wrap.c,
                   7119:        plugins/sudoers/regress/parser/check_addr.c:
                   7120:        Add calls to setprogname() for test programs.
                   7121:        [a8d9b420e826]
1.1       misho    7122: 
                   7123:        * configure, configure.in:
                   7124:        Add -Wall and -Werror after all tests so they don't cause failures.
1.1.1.2   misho    7125:        [2661188ff3fa]
1.1       misho    7126: 
1.1.1.2   misho    7127:        * plugins/sudoers/Makefile.in:
                   7128:        Actually run check_addr in the check target
                   7129:        [0b2778bc86bf]
1.1       misho    7130: 
1.1.1.2   misho    7131:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/match.c,
                   7132:        plugins/sudoers/match_addr.c,
                   7133:        plugins/sudoers/regress/parser/check_addr.c,
                   7134:        plugins/sudoers/regress/parser/check_addr.in:
                   7135:        Split out address matching into its own file and add regression
1.1       misho    7136:        tests for it.
1.1.1.2   misho    7137:        [12b9a2bf8dba]
1.1       misho    7138: 
                   7139: 2011-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7140: 
1.1.1.2   misho    7141:        * plugins/sudoers/match.c:
                   7142:        When matching an address with a netmask in sudoers, AND the mask and
                   7143:        addr before checking against the local addresses.
                   7144:        [9747bb6d7b1c]
1.1       misho    7145: 
                   7146: 2011-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7147: 
1.1.1.2   misho    7148:        * plugins/sudoers/match.c:
                   7149:        Fix netmask matching.
                   7150:        [a3c8f8cc1464]
                   7151: 
                   7152:        * plugins/sudoers/visudo.c:
                   7153:        Don't assume all editors support the +linenumber command line
1.1       misho    7154:        argument, use a whitelist of known good editors.
1.1.1.2   misho    7155:        [21d43a91fd10]
1.1       misho    7156: 
                   7157: 2011-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7158: 
1.1.1.2   misho    7159:        * plugins/sudoers/set_perms.c, plugins/sudoers/visudo.c, src/exec.c,
                   7160:        src/exec_pty.c, src/sudo.c:
                   7161:        Silence compiler warnings on Solaris with gcc 3.4.3
                   7162:        [da620bae6fdb]
1.1       misho    7163: 
1.1.1.2   misho    7164:        * mkpkg:
                   7165:        Fix building on RHEL 3
                   7166:        [f3227fb2a252]
1.1       misho    7167: 
                   7168:        * INSTALL, configure, configure.in:
                   7169:        Add --enable-werror configure option.
1.1.1.2   misho    7170:        [fec2cdb95543]
1.1       misho    7171: 
1.1.1.2   misho    7172:        * common/setgroups.c:
                   7173:        setgroups() proto lives in grp.h on RHEL4, perhaps others.
                   7174:        [de91c0de5a98]
1.1       misho    7175: 
                   7176:        * configure, configure.in:
                   7177:        Use PAM by default on AIX 6 and higher.
1.1.1.2   misho    7178:        [e16493208e5f]
1.1       misho    7179: 
                   7180: 2011-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7181: 
1.1.1.2   misho    7182:        * MANIFEST, plugins/sudoers/po/eo.mo, plugins/sudoers/po/eo.po,
                   7183:        src/po/eo.mo, src/po/eo.po:
                   7184:        Add new Esperanto translation from translationproject.org
                   7185:        [0d9a59e04c64]
1.1       misho    7186: 
                   7187: 2011-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7188: 
1.1.1.2   misho    7189:        * plugins/sudoers/iolog_path.c:
                   7190:        Quiet an innocuous valgrind warning.
                   7191:        [0582b6027161]
1.1       misho    7192: 
                   7193: 2011-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7194: 
1.1.1.2   misho    7195:        * plugins/sudoers/iolog_path.c,
                   7196:        plugins/sudoers/regress/iolog_path/data:
                   7197:        Fix expansion of strftime() escapes in log_dir and add a regress
1.1       misho    7198:        test that exhibited the problem.
1.1.1.2   misho    7199:        [a5c7c1c4c589]
1.1       misho    7200: 
1.1.1.2   misho    7201:        * plugins/sudoers/Makefile.in:
1.1       misho    7202:        Fix "make check" return value.
1.1.1.2   misho    7203:        [33b58e175230]
1.1       misho    7204: 
                   7205: 2011-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7206: 
1.1.1.2   misho    7207:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
1.1       misho    7208:        Regen pot files
1.1.1.2   misho    7209:        [063841aac19b]
1.1       misho    7210: 
                   7211:        * Makefile.in:
                   7212:        Fix logic inversion in pot file up to date check.
1.1.1.2   misho    7213:        [f6a8ca8654df]
1.1       misho    7214: 
                   7215: 2011-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7216: 
                   7217:        * configure, configure.in:
                   7218:        Add caching for gettext() checks.
1.1.1.2   misho    7219:        [01b7200f6105]
1.1       misho    7220: 
                   7221:        * configure, configure.in:
                   7222:        Better handling of libintl header and library mismatch.
1.1.1.2   misho    7223:        [9a49b1d4db69]
1.1       misho    7224: 
                   7225: 2011-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7226: 
1.1.1.2   misho    7227:        * plugins/sudoers/sudoers.c:
                   7228:        Also check sudoers gid if sudoers is group writable.
                   7229:        [23ef96ca0d33]
1.1       misho    7230: 
                   7231: 2011-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7232: 
                   7233:        * configure, configure.in:
                   7234:        If dlopen is present but libtool doesn't find it, error out since it
                   7235:        probably means that libtool doesn't support the system.
1.1.1.2   misho    7236:        [a9da0a5f7941]
1.1       misho    7237: 
1.1.1.2   misho    7238:        * mkpkg:
                   7239:        configure args on the command line should override builtin defaults.
1.1       misho    7240:        Disable NLS for non-Linux/Solaris unless explicitly enabled.
1.1.1.2   misho    7241:        [b2fb05614504]
1.1       misho    7242: 
1.1.1.2   misho    7243:        * plugins/sudoers/auth/aix_auth.c:
                   7244:        Fix loop that calls authenticate(). If there was an error message
1.1       misho    7245:        from authenticate(), display it.
1.1.1.2   misho    7246:        [063a0c4f0b9a]
1.1       misho    7247: 
                   7248: 2011-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7249: 
1.1.1.2   misho    7250:        * m4/libtool.m4, m4/ltversion.m4:
1.1       misho    7251:        Update to autoconf 2.68 and libtool 2.4
1.1.1.2   misho    7252:        [5a912a6eb67b]
1.1       misho    7253: 
1.1.1.2   misho    7254:        * config.guess, config.sub, configure, configure.in, ltmain.sh:
                   7255:        Update to autoconf 2.68 and libtool 2.4
                   7256:        [931ab56aecf6]
                   7257: 
                   7258:        * doc/sudoers.pod:
                   7259:        Fix typo; OPT should be OTP
                   7260:        [e97bd2e46544]
1.1       misho    7261: 
1.1.1.2   misho    7262:        * plugins/sudoers/Makefile.in:
                   7263:        Rename libsudoers convenience library to libparsesudoers to avoid
1.1       misho    7264:        libtool confusion.
1.1.1.2   misho    7265:        [2a89a613f537]
1.1       misho    7266: 
                   7267: 2011-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7268: 
1.1.1.2   misho    7269:        * MANIFEST, plugins/sudoers/po/da.mo, plugins/sudoers/po/da.po:
                   7270:        Add Danish sudoers translation from translationproject.org
                   7271:        [27b96e85eb13]
1.1       misho    7272: 
1.1.1.2   misho    7273:        * plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c:
                   7274:        Add dedicated callback function for runas_default sudoers setting
1.1       misho    7275:        that only sets runas_pw if no runas user or group was specified by
                   7276:        the user.
1.1.1.2   misho    7277:        [b8382d8eea34]
1.1       misho    7278: 
                   7279: 2011-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7280: 
1.1.1.2   misho    7281:        * plugins/sudoers/po/fi.mo, plugins/sudoers/po/fi.po,
                   7282:        plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po,
                   7283:        plugins/sudoers/po/uk.mo, plugins/sudoers/po/uk.po, src/po/ru.mo,
                   7284:        src/po/ru.po:
                   7285:        Update Finish, Polish, Russian and Ukrainian translations from
1.1       misho    7286:        translationproject.org.
1.1.1.2   misho    7287:        [f9339aff664e]
1.1       misho    7288: 
1.1.1.2   misho    7289:        * plugins/sudoers/defaults.h, plugins/sudoers/sudoers.c,
                   7290:        plugins/sudoers/testsudoers.c:
1.1       misho    7291:        Go back to using a callback for runas_default to keep runas_pw in
                   7292:        sync. This is needed to make per-entry runas_default settings work
                   7293:        with LDAP-based sudoers. Instead of declaring it a callback in
                   7294:        def_data.in, sudo and testsudoers poke sudo_defs_table[] which is a
                   7295:        bit naughty, but avoids requiring stub functions in visudo and the
                   7296:        tests.
1.1.1.2   misho    7297:        [9aaefb908415]
1.1       misho    7298: 
                   7299: 2011-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7300: 
                   7301:        * Makefile.in:
                   7302:        Add check for out of date message catalogs when doing "make dist".
1.1.1.2   misho    7303:        [e45a29b612f4]
1.1       misho    7304: 
                   7305: 2011-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7306: 
1.1.1.2   misho    7307:        * configure:
                   7308:        regen
                   7309:        [d6f9ad26774a]
                   7310: 
                   7311:        * configure.in:
1.1       misho    7312:        Make sure compiler supports static-libgcc before using it.
1.1.1.2   misho    7313:        [b01bd9566e50]
1.1       misho    7314: 
                   7315: 2011-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7316: 
1.1.1.2   misho    7317:        * src/Makefile.in:
                   7318:        Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc
                   7319:        [c99c7ab3edef]
1.1       misho    7320: 
                   7321: 2011-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7322: 
1.1.1.2   misho    7323:        * MANIFEST, plugins/sudoers/po/fi.mo, plugins/sudoers/po/pl.mo,
                   7324:        plugins/sudoers/po/pl.po, plugins/sudoers/po/uk.mo,
                   7325:        plugins/sudoers/po/zh_CN.mo, src/po/ru.mo, src/po/ru.po,
                   7326:        src/po/zh_CN.mo:
                   7327:        Add new Russian sudo translation from translationproject.org and
1.1       misho    7328:        rebuild the other translation files.
1.1.1.2   misho    7329:        [e20015459056]
1.1       misho    7330: 
                   7331: 2011-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7332: 
1.1.1.2   misho    7333:        * plugins/sudoers/po/fi.po, plugins/sudoers/po/pl.po:
                   7334:        Update Finish and Polish translations from translationproject.org
                   7335:        [4e3dbba4a1de]
1.1       misho    7336: 
1.1.1.2   misho    7337:        * plugins/sudoers/sudoers.c, src/parse_args.c, src/sudo.c:
                   7338:        Go back to escaping the command args for "sudo -i" and "sudo -s"
1.1       misho    7339:        before calling the plugin. Otherwise, spaces in the command args
                   7340:        are not treated properly. The sudoers plugin will unescape non-
                   7341:        spaces to make matching easier.
1.1.1.2   misho    7342:        [dfa2c4636f33]
1.1       misho    7343: 
                   7344: 2011-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7345: 
1.1.1.2   misho    7346:        * plugins/sudoers/check.c, plugins/sudoers/group_plugin.c,
                   7347:        plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
                   7348:        plugins/sudoers/set_perms.c, plugins/sudoers/toke.c,
                   7349:        plugins/sudoers/toke.l:
                   7350:        Fix some potential problems found by the clang static analyzer, none
1.1       misho    7351:        serious.
1.1.1.2   misho    7352:        [ff64aa74aae6]
1.1       misho    7353: 
1.1.1.2   misho    7354:        * plugins/sudoers/po/uk.po, plugins/sudoers/po/zh_CN.po,
                   7355:        src/po/zh_CN.po:
                   7356:        Updated Ukranian and Chinese (simplified) po files from
1.1       misho    7357:        translationproject.org
1.1.1.2   misho    7358:        [ec792becb48e]
1.1       misho    7359: 
                   7360: 2011-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7361: 
1.1.1.2   misho    7362:        * plugins/sudoers/po/pl.po:
                   7363:        Updated Polish translation from translationproject.org
                   7364:        [a3af53cb649c]
1.1       misho    7365: 
                   7366:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   7367:        Rebuild pot files
1.1.1.2   misho    7368:        [c650524c0f0a]
1.1       misho    7369: 
1.1.1.2   misho    7370:        * plugins/sudoers/audit.c, plugins/sudoers/sudoers.c:
                   7371:        Don't try to audit failure if the runas user does not exist. We
1.1       misho    7372:        don't have the user's command at this point so there is nothing to
                   7373:        audit. Add a NULL check in audit_success() and audit_failure() just
                   7374:        to be on the safe side.
1.1.1.2   misho    7375:        [2a0007c2022f]
1.1       misho    7376: 
1.1.1.2   misho    7377:        * mkpkg:
                   7378:        Add -g to CFLAG for PIE builds.
                   7379:        [32a0a9693c9c]
1.1       misho    7380: 
                   7381: 2011-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7382: 
1.1.1.2   misho    7383:        * plugins/sudoers/pwutil.c, plugins/sudoers/sudoers.c,
                   7384:        plugins/sudoers/sudoers.h, src/sudo.c:
                   7385:        Remove fallback to per-group lookup when matching groups in sudoers.
1.1       misho    7386:        The sudo front-end will now use getgrouplist() to get the user's
                   7387:        list of groups if getgroups() fails or returns zero groups so we
                   7388:        always have a list of the user's groups. For systems with
                   7389:        mbr_check_membership() which support more that NGROUPS_MAX groups
                   7390:        (Mac OS X), skip the call to getgroups() and use getgrouplist() so
                   7391:        we get all the groups.
1.1.1.2   misho    7392:        [51b3ed8c600b]
1.1       misho    7393: 
                   7394: 2011-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7395: 
1.1.1.2   misho    7396:        * common/setgroups.c:
                   7397:        Fix setgroups() fallback code on EINVAL.
                   7398:        [2b6faecd56a4]
1.1       misho    7399: 
1.1.1.2   misho    7400:        * plugins/sudoers/set_perms.c:
                   7401:        Fix two PERM_INITIAL cases that were still using user_gids.
                   7402:        [9680bab0acc6]
1.1       misho    7403: 
1.1.1.2   misho    7404:        * MANIFEST:
                   7405:        Add Polish sudo message catalog
                   7406:        [8bb40c3ba576]
1.1       misho    7407: 
1.1.1.2   misho    7408:        * plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   7409:        user_group is no longer used, remove it
                   7410:        [9acede0fe6c5]
1.1       misho    7411: 
1.1.1.2   misho    7412: 2011-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7413: 
1.1.1.2   misho    7414:        * MANIFEST, plugins/sudoers/po/pl.mo, plugins/sudoers/po/pl.po:
                   7415:        Add Polish translation from translationproject.org
                   7416:        [afac5c638573]
1.1       misho    7417: 
1.1.1.2   misho    7418:        * MANIFEST, common/Makefile.in, common/setgroups.c,
                   7419:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.h, src/sudo.c,
                   7420:        src/sudo.h, src/sudo_edit.c:
                   7421:        Add a wrapper for setgroups() that trims off extra groups and
1.1       misho    7422:        retries if setgroups() fails. Also add some missing addrefs for
                   7423:        PERM_USER and PERM_FULL_USER.
1.1.1.2   misho    7424:        [224dfd8aae5c]
1.1       misho    7425: 
1.1.1.2   misho    7426:        * MANIFEST, compat/Makefile.in, compat/getgrouplist.c, config.h.in,
                   7427:        configure, configure.in, include/missing.h, mkdep.pl,
                   7428:        plugins/sudoers/ldap.c, plugins/sudoers/pwutil.c,
                   7429:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   7430:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/sudo.c:
1.1       misho    7431:        Instead of keeping separate groups and gids arrays, create struct
                   7432:        group_info and use it to store both, along with a count for each.
                   7433:        Cache group info on a per-user basis using getgrouplist() to get the
                   7434:        groups. We no longer need special to special case the user or list
                   7435:        user for user_in_group() and thus no longer need to reset the groups
                   7436:        list when listing another user.
1.1.1.2   misho    7437:        [0ad849a8b2d5]
                   7438: 
                   7439:        * src/preload.c:
                   7440:        Don't rely on NULL since we don't include a header for it.
                   7441:        [b40937f1890c]
1.1       misho    7442: 
1.1.1.2   misho    7443: 2011-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7444: 
1.1.1.2   misho    7445:        * doc/sudoers.pod:
                   7446:        Fix typo
                   7447:        [c1035360e169]
1.1       misho    7448: 
1.1.1.2   misho    7449: 2011-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7450: 
                   7451:        * plugins/sudoers/sudoers.c:
                   7452:        Do not shadow global sudo_mode with a local variable in set_cmnd()
                   7453:        [0c72969503ad]
1.1       misho    7454: 
                   7455: 2011-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7456: 
1.1.1.2   misho    7457:        * plugins/sudoers/sudoers.c:
                   7458:        bash 2.x doesd not support the -l flag and exits with an error if it
1.1       misho    7459:        is specified so use --login instead. This causes an error with bash
                   7460:        1.x (which uses -login instead) but this version is hopefully less
                   7461:        used than 2.x.
1.1.1.2   misho    7462:        [5c4c296e30e6]
1.1       misho    7463: 
1.1.1.2   misho    7464:        * src/po/pl.mo, src/po/pl.po:
                   7465:        Add Polish translation from translationproject.org
                   7466:        [48592dd6edcf]
1.1       misho    7467: 
                   7468: 2011-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7469: 
1.1.1.2   misho    7470:        * plugins/sudoers/set_perms.c:
                   7471:        Make error strings translatable.
                   7472:        [414c5c484768]
1.1       misho    7473: 
1.1.1.2   misho    7474:        * mkpkg:
                   7475:        Only run configure with --with-pam-login for RHEL 5 and above.
                   7476:        [6c16e4de4026]
1.1       misho    7477: 
1.1.1.2   misho    7478:        * sudo.pp:
                   7479:        Fix typo in summary
                   7480:        [9ac618c9a749]
1.1       misho    7481: 
                   7482: 2011-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7483: 
1.1.1.2   misho    7484:        * plugins/sudoers/logwrap.c:
                   7485:        Add missing logwrap.c
                   7486:        [c12a413ecc1d]
                   7487: 
                   7488:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/logging.c,
                   7489:        plugins/sudoers/logging.h,
                   7490:        plugins/sudoers/regress/logging/check_wrap.c,
                   7491:        plugins/sudoers/regress/logging/check_wrap.in,
                   7492:        plugins/sudoers/regress/logging/check_wrap.out.ok:
                   7493:        Split out log file word wrap code into its own file and add unit
1.1       misho    7494:        tests. Fixes an off-by one in the word wrap when the log line
                   7495:        length matches loglinelen.
1.1.1.2   misho    7496:        [52ed277f6690]
1.1       misho    7497: 
                   7498: 2011-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7499: 
1.1.1.2   misho    7500:        * mkpkg:
                   7501:        For SuSE, only use /usr/lib64 as libexec if generating 64-bit
1.1       misho    7502:        binaries.
1.1.1.2   misho    7503:        [645ab903cf77]
1.1       misho    7504: 
1.1.1.2   misho    7505:        * src/load_plugins.c, src/sudo.c:
                   7506:        Fix build error when --without-noexec configure option is used.
                   7507:        [b994f7b0d8b4]
1.1       misho    7508: 
                   7509:        * configure, configure.in:
                   7510:        Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX
                   7511:        5.3 and above.
1.1.1.2   misho    7512:        [c2a6f9b472f3]
1.1       misho    7513: 
                   7514: 2011-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7515: 
1.1.1.2   misho    7516:        * plugins/sudoers/ldap.c, plugins/sudoers/pwutil.c,
                   7517:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   7518:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   7519:        Resolve the list of gids passed in from the sudo frontend (the
1.1       misho    7520:        result of getgroups()) to names and store both the group names and
                   7521:        ids in the sudo_user struct. When matching groups in the sudoers
                   7522:        file, match based on the names in the groups list first and only do
                   7523:        a gid-based match when we absolutely have to. By matching on the
                   7524:        group name (as it is listed in sudoers) instead of id (which we
                   7525:        would have to resolve) we save a lot of group lookups for sudoers
                   7526:        files with a lot of groups in them.
1.1.1.2   misho    7527:        [8dc19353f148]
1.1       misho    7528: 
                   7529: 2011-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7530: 
1.1.1.2   misho    7531:        * plugins/sudoers/sudoers.c:
                   7532:        Workaround for "sudo -i command" and newer versions of bash which
1.1       misho    7533:        don't go into login mode when -c is specified unless -l is too.
1.1.1.2   misho    7534:        [9393762b80f3]
1.1       misho    7535: 
                   7536: 2011-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7537: 
1.1.1.2   misho    7538:        * plugins/sudoers/logging.c:
                   7539:        Rewrite logfile word wrapping code to be more straight-forward and
1.1       misho    7540:        actually wrap at the correct place.
1.1.1.2   misho    7541:        [f712a0c90f55]
1.1       misho    7542: 
                   7543: 2011-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7544: 
1.1.1.2   misho    7545:        * doc/CONTRIBUTORS, doc/contributors.pod, plugins/sudoers/sudoers.c:
                   7546:        Set use_pty=true in command details when use_pty is set in sudoers.
1.1       misho    7547:        From Ludwig Nussel
1.1.1.2   misho    7548:        [8d95a163dfc1]
1.1       misho    7549: 
                   7550: 2011-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7551: 
1.1.1.2   misho    7552:        * plugins/sudoers/po/zh_CN.mo, plugins/sudoers/po/zh_CN.po,
                   7553:        src/po/zh_CN.mo, src/po/zh_CN.po:
                   7554:        Sync Chinese (simplified) PO files from translationproject.org
                   7555:        [acce8eb7be18]
1.1       misho    7556: 
                   7557: 2011-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7558: 
1.1.1.2   misho    7559:        * MANIFEST, plugins/sudoers/po/eu.mo, plugins/sudoers/po/fi.mo,
                   7560:        plugins/sudoers/po/uk.mo, src/po/da.mo, src/po/da.po, src/po/eu.mo:
                   7561:        Add Danish translation from translationproject.org and add missing
1.1       misho    7562:        Basque mo files.
1.1.1.2   misho    7563:        [0c22bb21b9c4]
1.1       misho    7564: 
                   7565:        * Makefile.in, configure, configure.in:
                   7566:        No longer need to specify LINGUAS in configure, "make install-nls"
                   7567:        now just installs all the .mo files it finds.
1.1.1.2   misho    7568:        [fcd45cf04885]
1.1       misho    7569: 
                   7570: 2011-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7571: 
1.1.1.2   misho    7572:        * MANIFEST, doc/CONTRIBUTORS, doc/Makefile.in, doc/contributors.pod:
                   7573:        Build CONTRIBUTORS from newly-added contributors.pod
                   7574:        [8b192f2720f4]
                   7575: 
                   7576:        * doc/CONTRIBUTORS:
                   7577:        Rework the wording in the leading paragraph
                   7578:        [312044145cdd]
1.1       misho    7579: 
1.1.1.2   misho    7580: 2011-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7581: 
1.1.1.2   misho    7582:        * MANIFEST, doc/CONTRIBUTORS:
                   7583:        Add a CONTRIBUTORS file with the names of folks who have contributed
1.1       misho    7584:        code or patches to sudo since I started maintaining it (plus the
                   7585:        original authors).
1.1.1.2   misho    7586:        [b8bdd8b59528]
1.1       misho    7587: 
                   7588: 2011-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7589: 
1.1.1.2   misho    7590:        * plugins/sudoers/env.c:
                   7591:        Preserve SHELL variable for "sudo -s". Otherwise we can end up with
1.1       misho    7592:        a situation where the SHELL variable and the actual shell being run
                   7593:        do not match.
1.1.1.2   misho    7594:        [b8b3974aee3e]
1.1       misho    7595: 
                   7596: 2011-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7597: 
                   7598:        * configure, configure.in:
                   7599:        Only enable Solaris project support when setproject() is present in
                   7600:        libproject.
1.1.1.2   misho    7601:        [49ad7857ab89]
1.1       misho    7602: 
1.1.1.2   misho    7603:        * sudo.pp:
                   7604:        Explicitly set mode and owner of /etc/sudoers instead of relying on
1.1       misho    7605:        "cp -p" to work in the postinstall script. On AIX 6.1 at least the
                   7606:        postinstall script runs before the final file permissions are set.
1.1.1.2   misho    7607:        [e41ffc0212b2]
                   7608: 
                   7609: 2011-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7610: 
1.1.1.2   misho    7611:        * doc/sudo.pod, doc/sudoers.pod:
                   7612:        Refer the user to the "Command Environment" section in description
1.1       misho    7613:        of sudo's -i option.
1.1.1.2   misho    7614:        [263cc3be7eef]
                   7615: 
                   7616:        * doc/sudo.pod:
                   7617:        Fix typo
                   7618:        [35dfac450f4d]
1.1       misho    7619: 
1.1.1.2   misho    7620: 2011-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7621: 
1.1.1.2   misho    7622:        * mkdep.pl:
                   7623:        If there is no old dependency for an object file, use the MANIFEST
1.1       misho    7624:        to find its source.
1.1.1.2   misho    7625:        [d15e3b9899f9]
1.1       misho    7626: 
1.1.1.2   misho    7627:        * compat/Makefile.in:
                   7628:        Remove dependency for getgrouplist.lo as we don't ship that source
1.1       misho    7629:        file.
1.1.1.2   misho    7630:        [312a6d5fe6b0]
1.1       misho    7631: 
1.1.1.2   misho    7632: 2011-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7633: 
                   7634:        * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
                   7635:        Do not declare yyparse() static as the actual function generated by
1.1       misho    7636:        yacc is extern.
1.1.1.2   misho    7637:        [9017b79dcf55]
                   7638: 
                   7639: 2011-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7640: 
                   7641:        * Makefile.in:
                   7642:        Remove locale files in "make uninstall"
1.1.1.2   misho    7643:        [201ff261ecbe]
1.1       misho    7644: 
1.1.1.2   misho    7645:        * configure.in, plugins/sudoers/po/eu.po, plugins/sudoers/po/fi.po,
                   7646:        plugins/sudoers/po/uk.po, src/po/eu.po:
1.1       misho    7647:        Add Basque translation and sync Finish and Ukranian translations.
1.1.1.2   misho    7648:        [66d2c78c8a13]
1.1       misho    7649: 
                   7650:        * configure, configure.in:
                   7651:        FreeBSD no longer needs the main sudo binary to link with -lpam now
                   7652:        that plug-ins are loaded with RTLD_GLOBAL.
1.1.1.2   misho    7653:        [96c710df2457]
1.1       misho    7654: 
1.1.1.2   misho    7655:        * plugins/sudoers/group_plugin.c, src/load_plugins.c:
                   7656:        Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes
1.1       misho    7657:        problems with pam modules not having access to symbols provided by
                   7658:        libpam on some platforms. Affects FreeBSD and SLES 10 at least.
1.1.1.2   misho    7659:        [0d016983ec84]
1.1       misho    7660: 
                   7661:        * Makefile.in:
                   7662:        Move xgettext invocation out of update-po target into update-pot
1.1.1.2   misho    7663:        [19a73c6d017c]
1.1       misho    7664: 
                   7665: 2011-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7666: 
                   7667:        * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot:
                   7668:        Regenerate .pot files for 1.8.2rc2
1.1.1.2   misho    7669:        [c3037f591dd8]
1.1       misho    7670: 
1.1.1.2   misho    7671:        * Makefile.in, common/Makefile.in, compat/Makefile.in,
                   7672:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   7673:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   7674:        src/Makefile.in, zlib/Makefile.in:
1.1       misho    7675:        Move nls targets to the top level Makefile so the paths in the pot
                   7676:        file are saner
1.1.1.2   misho    7677:        [65b9285cd8d9]
1.1       misho    7678: 
1.1.1.2   misho    7679:        * src/po/fi.mo:
                   7680:        Add compiled version of sudo Finish translation
                   7681:        [8f2405384ea3]
1.1       misho    7682: 
1.1.1.2   misho    7683:        * MANIFEST, plugins/sudoers/po/fi.mo, plugins/sudoers/po/uk.mo:
                   7684:        Update MANIFEST with .po and .mo files Rebuild sudoers fi and uk .mo
1.1       misho    7685:        files
1.1.1.2   misho    7686:        [a165e70fa9ec]
1.1       misho    7687: 
1.1.1.2   misho    7688:        * configure, configure.in, plugins/sudoers/po/fi.po:
1.1       misho    7689:        Add Finish translation from translationproject.org
1.1.1.2   misho    7690:        [4466f8a96ceb]
                   7691: 
                   7692: 2011-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7693: 
                   7694:        * doc/sudoers.pod:
                   7695:        The group named by exempt_group should not have a % prefix.
                   7696:        [df084d6b32c8]
                   7697: 
                   7698: 2011-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7699: 
1.1.1.2   misho    7700:        * doc/sudoers.pod:
                   7701:        Fix typo; "Defaults group_plugin" not "Defaults sudo_plugin"
                   7702:        [5113699a3f8b]
1.1       misho    7703: 
1.1.1.2   misho    7704: 2011-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7705: 
1.1.1.2   misho    7706:        * src/exec.c, src/exec_pty.c:
                   7707:        Fix compressed io log corruption in background mode by using _exit()
1.1       misho    7708:        instead of exit() to avoid flushing buffers twice.
                   7709: 
                   7710:        Improved background mode support. When not allocating a pty, the
                   7711:        command is run in its own process group. This prevents write access
                   7712:        to the tty. When running in a pty, stdin is not hooked up and we
                   7713:        never read from /dev/tty, which results in similar behavior.
1.1.1.2   misho    7714:        [87c15149894c]
1.1       misho    7715: 
1.1.1.2   misho    7716:        * compat/Makefile.in, mkdep.pl, plugins/sudoers/Makefile.in:
                   7717:        Clean up regress files Generate proper dependencies for regress objs
1.1       misho    7718:        in compat
1.1.1.2   misho    7719:        [88bfc728c1e7]
1.1       misho    7720: 
1.1.1.2   misho    7721:        * plugins/sudoers/Makefile.in:
                   7722:        Add missing dependency for check_fill.o.
                   7723:        [0bd6362e3e17]
1.1       misho    7724: 
1.1.1.2   misho    7725: 2011-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7726: 
                   7727:        * INSTALL, configure, configure.in:
                   7728:        Add support for --enable-nls[=location]
1.1.1.2   misho    7729:        [b90db44a050f]
1.1       misho    7730: 
                   7731: 2011-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7732: 
1.1.1.2   misho    7733:        * plugins/sudoers/linux_audit.c:
                   7734:        Include gettext.h
                   7735:        [7f909a6e48cb]
1.1       misho    7736: 
1.1.1.2   misho    7737:        * plugins/sudoers/ldap.c, plugins/sudoers/parse.c:
                   7738:        Quiet gcc warnings.
                   7739:        [b41a6cdca583]
1.1       misho    7740: 
                   7741:        * configure, configure.in:
                   7742:        Don't install .mo files if gettext was not found.
1.1.1.2   misho    7743:        [1397b34cc165]
1.1       misho    7744: 
                   7745: 2011-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7746: 
1.1.1.2   misho    7747:        * src/exec.c:
                   7748:        Always allocate a pty when running a command in the background but
1.1       misho    7749:        call setsid() after forking to make sure we don't end up with a
                   7750:        controlling tty.
1.1.1.2   misho    7751:        [b6454ba172e8]
1.1       misho    7752: 
1.1.1.2   misho    7753:        * plugins/sudoers/iolog.c:
                   7754:        Add missing space between command name and the first command line
1.1       misho    7755:        argument.
1.1.1.2   misho    7756:        [fe217f0a36d4]
1.1       misho    7757: 
1.1.1.2   misho    7758:        * plugins/sudoers/sudoreplay.c:
                   7759:        Quiet a compiler warning on some platforms.
                   7760:        [de9f2849f236]
1.1       misho    7761: 
1.1.1.2   misho    7762:        * plugins/sudoers/po/README, src/po/README:
                   7763:        README file that directs people to translationproject.org
                   7764:        [30c0fc323281]
                   7765: 
                   7766:        * plugins/sudoers/po/uk.po, src/po/fi.po:
                   7767:        Sync translations with TP
                   7768:        [1d7d64559cba]
1.1       misho    7769: 
                   7770:        * Makefile.in:
                   7771:        Add 'sync-po' target to top-level Makefile to rsync the po files
                   7772:        from translationproject.org.
1.1.1.2   misho    7773:        [20508211aaa3]
1.1       misho    7774: 
1.1.1.2   misho    7775:        * plugins/sudoers/Makefile.in:
                   7776:        install nls files from install target
                   7777:        [5fc07b6cab38]
1.1       misho    7778: 
1.1.1.2   misho    7779:        * Makefile.in, plugins/sudoers/Makefile.in, src/Makefile.in, sudo.pp:
1.1       misho    7780:        Include .mo files in sudo binary packags.
1.1.1.2   misho    7781:        [278d4821a916]
1.1       misho    7782: 
1.1.1.2   misho    7783:        * configure, configure.in, plugins/sudoers/po/zh_CN.mo,
                   7784:        plugins/sudoers/po/zh_CN.po, src/po/zh_CN.mo, src/po/zh_CN.po:
1.1       misho    7785:        Add simplified chinese translation
1.1.1.2   misho    7786:        [2b33ffc755b9]
1.1       misho    7787: 
                   7788: 2011-05-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7789: 
1.1.1.2   misho    7790:        * configure, configure.in, plugins/sudoers/po/uk.mo,
                   7791:        plugins/sudoers/po/uk.po, src/po/uk.mo, src/po/uk.po:
1.1       misho    7792:        Add ukranian translation
1.1.1.2   misho    7793:        [2d8102688e93]
1.1       misho    7794: 
1.1.1.2   misho    7795:        * compat/Makefile.in:
                   7796:        refer to siglist.c, not ./siglist.c since not all makes will treat
1.1       misho    7797:        foo and ./foo the same.
1.1.1.2   misho    7798:        [6639d293ffba]
1.1       misho    7799: 
1.1.1.2   misho    7800:        * plugins/sudoers/sudoers.c:
                   7801:        Set def_preserve_groups before searching for the command when the -P
1.1       misho    7802:        flag is specified.
1.1.1.2   misho    7803:        [0edc7942f875]
1.1       misho    7804: 
1.1.1.2   misho    7805:        * Makefile.in, compat/Makefile.in, mkdep.pl,
                   7806:        plugins/sudoers/Makefile.in:
1.1       misho    7807:        Add dependency for siglist.lo in compat. This is a generated file
                   7808:        so "make depend" needs to depend on it.
1.1.1.2   misho    7809:        [28d0932f8b50]
1.1       misho    7810: 
1.1.1.2   misho    7811:        * compat/Makefile.in:
                   7812:        More dependency fixes.
                   7813:        [aad0d05cd020]
1.1       misho    7814: 
1.1.1.2   misho    7815:        * compat/Makefile.in:
                   7816:        Fix a few dependencies.
                   7817:        [eb21aa35a032]
1.1       misho    7818: 
1.1.1.2   misho    7819:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   7820:        Place compiled mo files in the src dir, not the build dir. When
1.1       misho    7821:        installing compiled mo files, display a status message.
1.1.1.2   misho    7822:        [e15634c29cd3]
1.1       misho    7823: 
                   7824: 2011-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7825: 
1.1.1.2   misho    7826:        * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   7827:        Tivoli Directory Server requires that seconds be present in a
1.1       misho    7828:        timestamp, even though RFC 4517 states that they are optional.
1.1.1.2   misho    7829:        [55fe23dd4ef9]
1.1       misho    7830: 
1.1.1.2   misho    7831:        * plugins/sudoers/sudo_nss.h:
                   7832:        Add missing bit of copyright
                   7833:        [d2eba3c364ca]
                   7834: 
                   7835:        * doc/visudo.pod:
                   7836:        Mention cycle detection warnings
                   7837:        [a76bef15ab67]
1.1       misho    7838: 
1.1.1.2   misho    7839:        * plugins/sudoers/visudo.c:
                   7840:        When checking aliases, also check the contents of the alias in case
1.1       misho    7841:        there are problems with an alias that is referenced inside another.
                   7842:        Replace the self reference check with real alias cycle detection.
1.1.1.2   misho    7843:        [a66c904cf53b]
1.1       misho    7844: 
1.1.1.2   misho    7845:        * plugins/sudoers/alias.c:
                   7846:        Set errno to ELOOP in alias_find() if there is a cycle. Set errno to
1.1       misho    7847:        ENOENT in alias_find() and alias_remove() if the entry could not be
                   7848:        found.
1.1.1.2   misho    7849:        [b4f0b89e433c]
1.1       misho    7850: 
1.1.1.2   misho    7851:        * plugins/sudoers/visudo.c:
                   7852:        Increment alias_seqno before calls to alias_remove_recursive() to
1.1       misho    7853:        avoid false positives with the alias loop detection. Fixes spurious
                   7854:        warnings about unused aliases when they are nested.
1.1.1.2   misho    7855:        [a344483b8193]
1.1       misho    7856: 
1.1.1.2   misho    7857:        * MANIFEST:
                   7858:        add mkdep.pl
                   7859:        [86b7ed33eab2]
1.1       misho    7860: 
1.1.1.2   misho    7861:        * plugins/sudoers/Makefile.in:
                   7862:        Add dependency on convenience libs to binaries
                   7863:        [cd3078b3c997]
1.1       misho    7864: 
                   7865:        * Makefile.in:
                   7866:        mkdep.pl only works when run from the src dir
1.1.1.2   misho    7867:        [f35a5e47c944]
1.1       misho    7868: 
1.1.1.2   misho    7869:        * Makefile.in, common/Makefile.in, compat/Makefile.in, mkdep.pl,
                   7870:        plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   7871:        plugins/sudoers/Makefile.in, src/Makefile.in, zlib/Makefile.in:
1.1       misho    7872:        Auto-generate Makefile dependencies with a perl script.
1.1.1.2   misho    7873:        [a3e4afcd7975]
1.1       misho    7874: 
                   7875: 2011-05-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7876: 
1.1.1.2   misho    7877:        * plugins/sudoers/match.c:
                   7878:        If the user specifies a runas group via sudo's -g option that
1.1       misho    7879:        matches the runas user's group in the passwd database and that group
                   7880:        is not denied in the Runas_Spec, allow it. Thus, if user root's gid
                   7881:        in /etc/passwd is 0, then "sudo -u root -g root id" is allow even if
                   7882:        no groups are present in the Runas_Spec.
1.1.1.2   misho    7883:        [e3f9732dc564]
1.1       misho    7884: 
                   7885: 2011-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7886: 
1.1.1.2   misho    7887:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   7888:        Add dependencies on gettext.h
                   7889:        [a3a9dc51f78b]
1.1       misho    7890: 
1.1.1.2   misho    7891:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   7892:        Fix install-nls target with HP-UX sh when gettext is not present.
                   7893:        [0c6b9655cd41]
1.1       misho    7894: 
                   7895: 2011-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7896: 
1.1.1.2   misho    7897:        * plugins/sudoers/Makefile.in, plugins/sudoers/po/sudoers.pot,
                   7898:        src/Makefile.in, src/po/sudo.pot:
1.1       misho    7899:        regenerate .pot files for lbuf changes
1.1.1.2   misho    7900:        [918ded125a0b]
1.1       misho    7901: 
                   7902:        * configure, configure.in:
                   7903:        Add missing "checking" message for gettext when using the cache.
1.1.1.2   misho    7904:        [9c21187ad1d2]
1.1       misho    7905: 
1.1.1.2   misho    7906:        * common/lbuf.c, include/lbuf.h, plugins/sudoers/ldap.c,
                   7907:        plugins/sudoers/parse.c, plugins/sudoers/sudo_nss.c,
                   7908:        src/parse_args.c:
                   7909:        Add primitive format string support to the lbuf code to make
1.1       misho    7910:        translations simpler.
1.1.1.2   misho    7911:        [ee71c7ef5299]
1.1       misho    7912: 
1.1.1.2   misho    7913:        * MANIFEST, plugins/sudoers/Makefile.in,
                   7914:        plugins/sudoers/po/sudoers.pot, src/Makefile.in, src/po/sudo.pot:
                   7915:        Add message catalog template files for sudo and the sudoers module.
                   7916:        [f3f8acb1f014]
                   7917: 
                   7918:        * MANIFEST, common/aix.c, common/alloc.c, compat/strsignal.c,
                   7919:        config.h.in, configure.in, doc/Makefile.in, include/gettext.h,
                   7920:        plugins/sudoers/iolog.c, plugins/sudoers/plugin_error.c,
                   7921:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   7922:        plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, src/error.c,
                   7923:        src/net_ifs.c, src/sesh.c, src/sudo.c, src/sudo.h:
1.1       misho    7924:        Add gettext.h convenience header. This is similar to but distinct
                   7925:        from the one included with the gettext package.
1.1.1.2   misho    7926:        [930a0591f73c]
                   7927: 
                   7928: 2011-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    7929: 
                   7930:        * configure, configure.in:
                   7931:        Add checks for nroff -c and -Tascii flags
1.1.1.2   misho    7932:        [19ca990b3149]
1.1       misho    7933: 
                   7934:        * configure, configure.in:
                   7935:        Add check for HP bundled C Compiler (which cannot create shared
                   7936:        libs)
1.1.1.2   misho    7937:        [517716a7072d]
1.1       misho    7938: 
1.1.1.2   misho    7939:        * plugins/sudoers/sudoreplay.c:
                   7940:        Fix C format warnings.
                   7941:        [6514326013fa]
1.1       misho    7942: 
1.1.1.2   misho    7943:        * include/error.h:
                   7944:        Add __printflike
                   7945:        [e1749a30a406]
1.1       misho    7946: 
1.1.1.2   misho    7947:        * plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
                   7948:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoreplay.c,
                   7949:        plugins/sudoers/visudo.c, src/parse_args.c:
                   7950:        Translate help / usage strings.
                   7951:        [ee1cc9b1a8bd]
1.1       misho    7952: 
1.1.1.2   misho    7953:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   7954:        Set --msgid-bugs-address to the bugzilla url
                   7955:        [5a0aa250ca21]
1.1       misho    7956: 
1.1.1.2   misho    7957:        * Makefile.in, common/Makefile.in, compat/Makefile.in, configure,
                   7958:        configure.in, doc/Makefile.in, include/Makefile.in,
                   7959:        plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   7960:        plugins/sudoers/Makefile.in, src/Makefile.in, zlib/Makefile.in:
1.1       misho    7961:        Add scaffolding to update .po files and install .mo files.
1.1.1.2   misho    7962:        [f05f4eed1fe1]
1.1       misho    7963: 
1.1.1.2   misho    7964:        * doc/license.pod:
                   7965:        update copyright year
                   7966:        [fa0c62523875]
1.1       misho    7967: 
1.1.1.2   misho    7968:        * INSTALL, README:
                   7969:        No need to include version number at the top of these files.
                   7970:        [9f2981325351]
                   7971: 
                   7972: 2011-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   7973: 
                   7974:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/env.c,
                   7975:        plugins/sudoers/find_path.c, plugins/sudoers/group_plugin.c,
                   7976:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoreplay.c,
                   7977:        plugins/sudoers/visudo.c:
                   7978:        Minor warning/error cleanup
                   7979:        [9236dc85aeab]
                   7980: 
                   7981:        * config.h.in, configure.in:
1.1       misho    7982:        Emulate ngettext for the non-nls case
1.1.1.2   misho    7983:        [13571d63fa36]
                   7984: 
                   7985:        * plugins/sudoers/ldap.c:
                   7986:        Do not mark untranslatable strings for translation
                   7987:        [735f5d4413fe]
1.1       misho    7988: 
1.1.1.2   misho    7989:        * plugins/sudoers/check.c:
                   7990:        Use ROOT_UID not 0.
                   7991:        [09a268db8da4]
1.1       misho    7992: 
1.1.1.2   misho    7993:        * plugins/sudoers/check.c, plugins/sudoers/iolog.c,
                   7994:        plugins/sudoers/logging.c, src/exec.c, src/exec_pty.c,
                   7995:        src/load_plugins.c, src/sudo.c, src/sudo_edit.c:
                   7996:        Minor warning/error message cleanup
                   7997:        [3c7b1a7939b5]
1.1       misho    7998: 
1.1.1.2   misho    7999:        * plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/sudo_auth.c,
                   8000:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   8001:        plugins/sudoers/logging.c, plugins/sudoers/mon_systrace.c,
                   8002:        plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, src/exec.c,
                   8003:        src/exec_pty.c, src/net_ifs.c, src/selinux.c:
                   8004:        cannot -> "unable to" in warning/error messages
                   8005:        [31c3897649e9]
1.1       misho    8006: 
1.1.1.2   misho    8007:        * plugins/sudoers/check.c, plugins/sudoers/mon_systrace.c,
                   8008:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   8009:        plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c, src/exec_pty.c,
                   8010:        src/sudo.c, src/utmp.c:
                   8011:        can't -> "unable to" in warning/error messages
                   8012:        [127b75f15291]
1.1       misho    8013: 
                   8014:        * configure, configure.in:
                   8015:        FreeBSD needs the main sudo executable to link with -lpam when
                   8016:        loading dynaic pam modules for some reason.
1.1.1.2   misho    8017:        [944522cc9bef]
1.1       misho    8018: 
1.1.1.2   misho    8019: 2011-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8020: 
1.1.1.2   misho    8021:        * plugins/sudoers/ldap.c, src/exec.c, src/exec_pty.c, src/sudo.c:
                   8022:        We don't want to translate debugging messages.
                   8023:        [56a1a365815a]
                   8024: 
                   8025:        * configure, configure.in, plugins/sudoers/Makefile.in,
                   8026:        plugins/sudoers/iolog.c, plugins/sudoers/plugin_error.c,
                   8027:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   8028:        plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
                   8029:        src/Makefile.in, src/sesh.c, src/sudo.c:
1.1       misho    8030:        Add calls to bindtextdomain() and textdomain() Currently there are
                   8031:        two domains, one for the sudo front-end and one for the sudoers
                   8032:        plugin and its associated utilities.
1.1.1.2   misho    8033:        [0426138f789e]
1.1       misho    8034: 
                   8035:        * configure, configure.in:
                   8036:        Fix caching of libc gettext check.
1.1.1.2   misho    8037:        [942142d2c43a]
1.1       misho    8038: 
1.1.1.2   misho    8039:        * plugins/sudoers/def_data.c, plugins/sudoers/defaults.c,
                   8040:        plugins/sudoers/mkdefaults:
                   8041:        Mark defaults descriptions for translation
                   8042:        [5b27f018e6cf]
1.1       misho    8043: 
                   8044:        * NEWS:
                   8045:        Update for sudo 1.8.1p2
1.1.1.2   misho    8046:        [747c4dee2ca7]
1.1       misho    8047: 
1.1.1.2   misho    8048: 2011-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8049: 
                   8050:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8051:        Quiet compiler warning when SELinux is enabled.
                   8052:        [1fbf77dda240]
1.1       misho    8053: 
1.1.1.2   misho    8054:        * plugins/sudoers/plugin_error.c, plugins/sudoers/sudoreplay.c,
                   8055:        src/error.c, src/net_ifs.c, src/sesh.c:
                   8056:        Add missing includes of libintl.h.
                   8057:        [bc1d66316082]
1.1       misho    8058: 
1.1.1.2   misho    8059:        * plugins/sudoers/auth/pam.c:
                   8060:        Fix gettext marker.
                   8061:        [a5cf4ed66c66]
1.1       misho    8062: 
1.1.1.2   misho    8063:        * common/aix.c, common/alloc.c, compat/strsignal.c,
                   8064:        plugins/sudoers/auth/pam.c, plugins/sudoers/sudoers.h, src/sudo.h:
                   8065:        Include libint.h where needed.
                   8066:        [2b0e5a663c7b]
                   8067: 
                   8068:        * plugins/sudoers/alias.c, plugins/sudoers/auth/bsdauth.c,
                   8069:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb5.c,
                   8070:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/rfc1938.c,
                   8071:        plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
                   8072:        plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
                   8073:        plugins/sudoers/bsm_audit.c, plugins/sudoers/check.c,
                   8074:        plugins/sudoers/defaults.c, plugins/sudoers/env.c,
                   8075:        plugins/sudoers/find_path.c, plugins/sudoers/gram.c,
                   8076:        plugins/sudoers/gram.y, plugins/sudoers/group_plugin.c,
                   8077:        plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
                   8078:        plugins/sudoers/iolog_path.c, plugins/sudoers/ldap.c,
                   8079:        plugins/sudoers/linux_audit.c, plugins/sudoers/logging.c,
                   8080:        plugins/sudoers/parse.c, plugins/sudoers/plugin_error.c,
                   8081:        plugins/sudoers/pwutil.c, plugins/sudoers/set_perms.c,
                   8082:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
                   8083:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   8084:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   8085:        plugins/sudoers/toke_util.c, plugins/sudoers/visudo.c:
                   8086:        Prepare sudoers module messages for translation.
                   8087:        [7212ae1909c5]
1.1       misho    8088: 
1.1.1.2   misho    8089:        * plugins/sudoers/sudoers.c:
                   8090:        Only check gid of sudoers file if it is group-readable.
                   8091:        [50e3bc0cb242]
1.1       misho    8092: 
1.1.1.2   misho    8093:        * plugins/sudoers/auth/aix_auth.c:
                   8094:        For AIX, keep calling authenticate() until reenter reaches 0.
                   8095:        [e240815b74b1]
1.1       misho    8096: 
1.1.1.2   misho    8097: 2011-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8098: 
                   8099:        * configure, configure.in:
                   8100:        Cache the status of the initial gettext() check.
1.1.1.2   misho    8101:        [32751ebe1704]
1.1       misho    8102: 
                   8103:        * INSTALL, configure, configure.in:
                   8104:        Add --disable-nls flag and improve checks for gettext.
1.1.1.2   misho    8105:        [c7e6b17052de]
1.1       misho    8106: 
                   8107:        * configure, configure.in:
                   8108:        When building with gcc on HP-UX, use -march=1.1 to produce portable
                   8109:        binaries on a pa-risc2 host. Previously, the +Dportable option was
                   8110:        used for the HP-UX C compiler but gcc always produced native
                   8111:        binaries.
1.1.1.2   misho    8112:        [8f4c749324d7]
1.1       misho    8113: 
1.1.1.2   misho    8114: 2011-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8115: 
1.1.1.2   misho    8116:        * common/aix.c, common/alloc.c, compat/strsignal.c, src/error.c,
                   8117:        src/exec.c, src/exec_pty.c, src/load_plugins.c, src/net_ifs.c,
                   8118:        src/parse_args.c, src/selinux.c, src/sesh.c, src/sudo.c,
                   8119:        src/sudo_edit.c, src/tgetpass.c, src/utmp.c:
                   8120:        Prepare sudo front end messages for translation.
                   8121:        [2fc2fabceccb]
1.1       misho    8122: 
                   8123: 2011-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8124: 
1.1.1.2   misho    8125:        * config.h.in, configure, configure.in, plugins/sudoers/auth/pam.c:
                   8126:        Add initial scaffolding to support localization via gettext()
                   8127:        [7d47b59fcf95]
                   8128: 
                   8129:        * compat/fnmatch.h, compat/glob.h:
                   8130:        Don't let the fnmatch/glob macros expand the function prototype.
                   8131:        [a9014aa0288e]
1.1       misho    8132: 
                   8133: 2011-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8134: 
1.1.1.2   misho    8135:        * compat/fnmatch.c, compat/fnmatch.h, compat/glob.c, compat/glob.h:
                   8136:        Resolve namespace collisions on HP-UX ia64 and possibly others by
1.1       misho    8137:        adding a rpl_ prefix to our fnmatch and glob replacements and
                   8138:        #defining rpl_foo to foo in the header files.
1.1.1.2   misho    8139:        [caa9b690a15d]
1.1       misho    8140: 
                   8141: 2011-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8142: 
1.1.1.2   misho    8143:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8144:        Split ALL, ROLE and TYPE into their own actions. Since you can only
1.1       misho    8145:        have #ifdefs inside of braces, ROLE and TYPE use a naughty goto in
                   8146:        the non-SELinux case. This is safe because the actions are in one
                   8147:        big switch() statement.
1.1.1.2   misho    8148:        [7473fc2cfa2c]
1.1       misho    8149: 
1.1.1.2   misho    8150:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8151:        Fix regexp for matching a CIDR-style IPv4 netmask. From Marc Espie.
                   8152:        [9be3480c2865]
                   8153: 
                   8154: 2011-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8155: 
1.1.1.2   misho    8156:        * doc/UPGRADE, doc/sudoers.pod:
                   8157:        askpass moved from sudoers to sudo.conf in sudo 1.8.0
                   8158:        [b2c2956cec4e]
1.1       misho    8159: 
1.1.1.2   misho    8160:        * doc/sudoers.pod:
                   8161:        Remove obsolete warning about runas_default and ordering. Move
1.1       misho    8162:        syslog facility and priority lists into the section where the
                   8163:        relevant options are described.
1.1.1.2   misho    8164:        [e57b8dc3f779]
1.1       misho    8165: 
                   8166: 2011-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8167: 
1.1.1.2   misho    8168:        * plugins/sudoers/auth/sia.c:
                   8169:        Fix SIA support; we no longer have access to the real argc and argv
1.1       misho    8170:        so allocate space for a fake one and use the argv passed to the
                   8171:        plugin with "sudo" for argv[0].
1.1.1.2   misho    8172:        [1c0552772ad2]
                   8173: 
                   8174: 2011-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8175: 
1.1.1.2   misho    8176:        * src/net_ifs.c:
                   8177:        Remove useless realloc when trying to get the buffer size right.
                   8178:        [792225380a62]
1.1       misho    8179: 
1.1.1.2   misho    8180:        * plugins/sudoers/set_perms.c:
                   8181:        Be explicit when setting euid to 0 before call to setreuid(0, 0)
                   8182:        [7bfeb629fccb]
1.1       misho    8183: 
                   8184: 2011-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8185: 
                   8186:        * configure, configure.in:
                   8187:        Need to do checks for krb5_verify_user, krb5_init_secure_context and
1.1.1.2   misho    8188:        krb5_get_init_creds_opt_alloc regardless of whether or not
                   8189:        krb5-config is present.
                   8190:        [9d1b98ece1d3]
1.1       misho    8191: 
                   8192: 2011-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8193: 
1.1.1.2   misho    8194:        * plugins/sudoers/set_perms.c:
                   8195:        Work around weird AIX saved uid semantics on setuid() and
1.1       misho    8196:        setreuid(). On AIX, setuid() will only set the saved uid if the euid
                   8197:        is already 0.
1.1.1.2   misho    8198:        [069fc08150ca]
1.1       misho    8199: 
                   8200: 2011-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8201: 
1.1.1.2   misho    8202:        * sudo.pp:
                   8203:        update copyright year
                   8204:        [1c42d579ba6e]
1.1       misho    8205: 
1.1.1.2   misho    8206:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8207:        Treat a missing includedir like an empty one and do not return an
1.1       misho    8208:        error.
1.1.1.2   misho    8209:        [92f71d8cbfd4]
1.1       misho    8210: 
                   8211: 2011-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8212: 
1.1.1.2   misho    8213:        * pp:
                   8214:        Fix ARCH setting in cross-compile Solaris packages.
                   8215:        [b0de281cc889]
1.1       misho    8216: 
1.1.1.2   misho    8217:        * sudo.pp:
                   8218:        Fix aix version setting.
                   8219:        [98437dbfb085]
1.1       misho    8220: 
1.1.1.2   misho    8221:        * plugins/sudoers/ldap.c:
                   8222:        Remove extraneous parens in LDAP filter when sudoers_search_filter
1.1       misho    8223:        is enabled that causes a search error. From Matthew Thomas.
1.1.1.2   misho    8224:        [1d75bf1fc8d9]
1.1       misho    8225: 
                   8226: 2011-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8227: 
1.1.1.2   misho    8228:        * plugins/sudoers/regress/iolog_path/check_iolog_path.c:
                   8229:        Correct sizeof() to fix test failure.
                   8230:        [fd2f7c0c0572]
1.1       misho    8231: 
1.1.1.2   misho    8232:        * plugins/sudoers/Makefile.in:
                   8233:        "install" target should depend on "install-dirs". Fixes "make -j"
1.1       misho    8234:        problem and closes bz #487. From Chris Coleman.
1.1.1.2   misho    8235:        [083902d38edb]
1.1       misho    8236: 
                   8237: 2011-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8238: 
1.1.1.2   misho    8239:        * config.h.in:
                   8240:        Add HAVE_RFC1938_SKEYCHALLENGE
                   8241:        [a94cb33758a8]
1.1       misho    8242: 
                   8243: 2011-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8244: 
1.1.1.2   misho    8245:        * NEWS:
                   8246:        Mention plugin loading and libgcc changes
                   8247:        [e11b30b5026a]
1.1       misho    8248: 
1.1.1.2   misho    8249:        * src/load_plugins.c, src/sudo.c, src/sudo_plugin_int.h:
                   8250:        Load plugins after parsing arguments and potentially printing the
1.1       misho    8251:        version. That way, an error loading or initializing a plugin
                   8252:        doesn't break "sudo -h" or "sudo -V".
1.1.1.2   misho    8253:        [1b76f2b096a2]
1.1       misho    8254: 
                   8255:        * Makefile.in:
                   8256:        When using a sub-shell to invoke the sub-make, exec make instead of
                   8257:        running it inside the shell to avoid an extra process.
1.1.1.2   misho    8258:        [fd2c04a71fbf]
1.1       misho    8259: 
1.1.1.2   misho    8260:        * compat/regress/fnmatch/fnm_test.in, compat/regress/glob/globtest.c:
                   8261:        Stop testing unspecified behavior in fnmatch Make glob test more
1.1       misho    8262:        portable
1.1.1.2   misho    8263:        [229803093725]
1.1       misho    8264: 
1.1.1.2   misho    8265:        * compat/Makefile.in:
                   8266:        No need to add current dir to include path and having it breaks the
1.1       misho    8267:        test programs that expect to get the system glob.h and fnmatch.h
1.1.1.2   misho    8268:        [68085f624be4]
1.1       misho    8269: 
1.1.1.2   misho    8270:        * INSTALL, configure, configure.in:
1.1       misho    8271:        Fix and document --with-plugindir; partially from Diego Elio Petteno
1.1.1.2   misho    8272:        [07edc52ea89e]
1.1       misho    8273: 
1.1.1.2   misho    8274:        * compat/Makefile.in, compat/regress/fnmatch/fnm_test.c,
                   8275:        compat/regress/fnmatch/fnm_test.in, compat/regress/glob/globtest.c,
                   8276:        compat/regress/glob/globtest.in:
                   8277:        Fix fnmatch and glob tests to not use hard-coded flag values in the
1.1       misho    8278:        input file. Link test programs with libreplace so we get our
                   8279:        replacement verions as needed.
1.1.1.2   misho    8280:        [c2cca448f660]
1.1       misho    8281: 
                   8282:        * Makefile.in:
                   8283:        If make in a subdir fails, fail the target in the upper level
                   8284:        Makefile too. Adapted from a patch from Diego Elio Petteno
1.1.1.2   misho    8285:        [76fc9a0d96fd]
1.1       misho    8286: 
1.1.1.2   misho    8287:        * configure, configure.in, plugins/sudoers/auth/rfc1938.c:
1.1       misho    8288:        Add check for NetBSD-style 4-argument skeychallenge() as Gentoo also
                   8289:        has this. Adapted from a patch from Diego Elio Petteno
1.1.1.2   misho    8290:        [a97279a59b93]
1.1       misho    8291: 
1.1.1.2   misho    8292:        * plugins/sudoers/Makefile.in:
                   8293:        Make SUDOERS_LDFLAGS reference $(LDFLAGS) instead of using @LDFLAGS@
1.1       misho    8294:        directly.
1.1.1.2   misho    8295:        [47b884029b3b]
1.1       misho    8296: 
                   8297:        * configure, configure.in:
                   8298:        Fix warnings when -without-skey, --without-opie, --without-kerb4,
                   8299:        --without-kerb5 or --without-SecurID were specified.
1.1.1.2   misho    8300:        [71ad150f4d24]
1.1       misho    8301: 
1.1.1.2   misho    8302:        * MANIFEST:
                   8303:        Add plugins/sudoers/sudoers_version.h
                   8304:        [7423966de440]
1.1       misho    8305: 
1.1.1.2   misho    8306:        * configure, configure.in, plugins/sample/Makefile.in,
                   8307:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in:
1.1       misho    8308:        Back out the --with-libpath addition to SUDOERS_LDFLAGS since that
                   8309:        now include LDFLAGS in the sudoers Makefile.in. Add missing settng
                   8310:        of @LDFLAGS@ in plugin Makefile.in files.
1.1.1.2   misho    8311:        [b835826f889c]
1.1       misho    8312: 
                   8313: 2011-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8314: 
1.1.1.2   misho    8315:        * NEWS:
                   8316:        Mention %#gid support in User_List and Runas_List
                   8317:        [5a983dff017a]
1.1       misho    8318: 
1.1.1.2   misho    8319:        * plugins/sudoers/sudoers.c, plugins/sudoers/sudoers_version.h,
                   8320:        plugins/sudoers/visudo.c:
                   8321:        Keep track of sudoers grammar version and report it in the -V
1.1       misho    8322:        output.
1.1.1.2   misho    8323:        [52901a3c0296]
1.1       misho    8324: 
1.1.1.2   misho    8325:        * plugins/sudoers/sudo_nss.h:
                   8326:        Add multiple inclusion guard
                   8327:        [50853aed046e]
1.1       misho    8328: 
1.1.1.2   misho    8329:        * configure, configure.in, plugins/sample/Makefile.in,
                   8330:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in:
1.1       misho    8331:        The --with-libpath option now adds to SUDOERS_LDFLAGS as well as
                   8332:        LDFLAGS. Remove old -static hack for HP-UX < 9. Add LTLDFLAGS and
                   8333:        set it to -Wc,-static-libgcc if not using GNU ld so we don't
                   8334:        have a dependency on the shared libgcc in sudoers.so.
1.1.1.2   misho    8335:        [66ad8bc5e32d]
1.1       misho    8336: 
1.1.1.2   misho    8337:        * doc/sudoers.pod:
                   8338:        Fix typo; from Petr Uzel
                   8339:        [f9a7afd80892]
1.1       misho    8340: 
                   8341: 2011-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8342: 
1.1.1.2   misho    8343:        * plugins/sudoers/testsudoers.c:
                   8344:        In dump-only mode, use "root" as the default username instead of
1.1       misho    8345:        "nobody" as the latter may not be available on all systems.
1.1.1.2   misho    8346:        [0c48e6414337]
1.1       misho    8347: 
                   8348: 2011-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8349: 
1.1.1.2   misho    8350:        * plugins/sudoers/testsudoers.c:
                   8351:        Remove NewArgv/NewArgc, they are no longer needed.
                   8352:        [16e18f734c7e]
1.1       misho    8353: 
1.1.1.2   misho    8354:        * plugins/sudoers/testsudoers.c:
                   8355:        Fix setting of user_args
                   8356:        [aa29e0d0a54a]
1.1       misho    8357: 
1.1.1.2   misho    8358:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8359:        Add '!' token to lex tracing
                   8360:        [5227ad266235]
1.1       misho    8361: 
1.1.1.2   misho    8362:        * plugins/sudoers/regress/testsudoers/test1.sh:
                   8363:        Use group bin in test, not wheel as most systems have the bin group
1.1       misho    8364:        but the same is no longer true of wheel.
1.1.1.2   misho    8365:        [718802b3b45e]
1.1       misho    8366: 
1.1.1.2   misho    8367:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8368:        Avoid using pre or post increment in a parameter to a ctype(3)
1.1       misho    8369:        function as it might be a macro that causes the increment to happen
                   8370:        more than once.
1.1.1.2   misho    8371:        [78e281152c3a]
1.1       misho    8372: 
                   8373: 2011-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8374: 
1.1.1.2   misho    8375:        * sudo.pp:
                   8376:        Strip off the beta or release candidate version when building AIX
1.1       misho    8377:        packages.
1.1.1.2   misho    8378:        [28fe31668559]
1.1       misho    8379: 
                   8380:        * configure, configure.in:
                   8381:        We need to include OSDEFS in CFLAGS when doing the utmp/utmpx
                   8382:        structure checks for glibc which only has __e_termination visible
                   8383:        when _GNU_SOURCE is *not* defined.
1.1.1.2   misho    8384:        [59ae1698911f]
1.1       misho    8385: 
1.1.1.2   misho    8386:        * common/aix.c:
                   8387:        getuserattr(user, ...) will fall back to the "default" entry
1.1       misho    8388:        automatically, there's no need to check "default" manually.
1.1.1.2   misho    8389:        [3c7a47a61fdb]
1.1       misho    8390: 
                   8391: 2011-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8392: 
1.1.1.2   misho    8393:        * doc/UPGRADE:
                   8394:        Document parser changes.
                   8395:        [ec415503308d]
                   8396: 
                   8397:        * Makefile.in, common/Makefile.in, compat/Makefile.in,
                   8398:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   8399:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   8400:        src/Makefile.in, zlib/Makefile.in:
1.1       misho    8401:        If there is an existing sudoers file, only install if it passes a
                   8402:        syntax check.
1.1.1.2   misho    8403:        [37427c73e8cb]
1.1       misho    8404: 
1.1.1.2   misho    8405:        * plugins/sudoers/regress/sudoers/test6.out.ok,
                   8406:        plugins/sudoers/testsudoers.c:
                   8407:        Add runasgroup support to testsudoers
                   8408:        [047ea5571f33]
1.1       misho    8409: 
1.1.1.2   misho    8410:        * plugins/sudoers/Makefile.in:
                   8411:        For "make check", keep going even if a test fails.
                   8412:        [ce6a0a73c372]
1.1       misho    8413: 
1.1.1.2   misho    8414:        * plugins/sudoers/testsudoers.c:
                   8415:        More useful exit codes:
1.1       misho    8416:         * 0 - parsed OK and command matched.
                   8417:         * 1 - parse error
                   8418:         * 2 - command not matched
                   8419:         * 3 - command denied
1.1.1.2   misho    8420:        [1d2ce1361903]
1.1       misho    8421: 
1.1.1.2   misho    8422:        * doc/sudoers.pod:
                   8423:        Document %#gid, and %:#nonunix_gid syntax.
                   8424:        [492d4f9696c4]
1.1       misho    8425: 
1.1.1.2   misho    8426:        * plugins/sudoers/pwutil.c:
                   8427:        Add support to user_in_group() for treating group names that begin
1.1       misho    8428:        with a '#' as gids.
1.1.1.2   misho    8429:        [20240c94a134]
1.1       misho    8430: 
1.1.1.2   misho    8431:        * config.h.in, configure, configure.in, src/utmp.c:
1.1       misho    8432:        Add explicit check for struct utmpx.ut_exit.e_termination and struct
                   8433:        utmpx.ut_exit.__e_termination. HP-UX uses the latter. Only update
                   8434:        ut_exit if we detect one or the other.
1.1.1.2   misho    8435:        [b4e8cab777e6]
1.1       misho    8436: 
                   8437: 2011-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8438: 
1.1.1.2   misho    8439:        * plugins/sudoers/toke.c:
                   8440:        Add back missing #include of config.h
                   8441:        [9ab3897a1b2e]
                   8442: 
                   8443:        * plugins/sudoers/iolog_path.c,
                   8444:        plugins/sudoers/regress/iolog_path/data:
                   8445:        Avoid a NULL deref on unrecognized escapes. Collapse %% -> % like
1.1       misho    8446:        strftime() does.
1.1.1.2   misho    8447:        [93395762cdcd]
1.1       misho    8448: 
1.1.1.2   misho    8449:        * aclocal.m4:
                   8450:        Quote first argument to AC_DEFUN(); from Elan Ruusamae
                   8451:        [97f53ad31d77]
1.1       misho    8452: 
                   8453: 2011-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8454: 
1.1.1.2   misho    8455:        * MANIFEST:
                   8456:        add new sudoers tests
                   8457:        [476af91b3da3]
1.1       misho    8458: 
1.1.1.2   misho    8459:        * plugins/sudoers/regress/sudoers/test8.in,
                   8460:        plugins/sudoers/regress/sudoers/test8.out.ok,
                   8461:        plugins/sudoers/regress/sudoers/test8.toke.ok:
                   8462:        Add test for a newline in the middle of a string when no line
1.1       misho    8463:        continuation character is used.
1.1.1.2   misho    8464:        [de2394bc86ab]
1.1       misho    8465: 
1.1.1.2   misho    8466:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8467:        Use bitwise AND instead of modulus to check for length being odd. A
1.1       misho    8468:        newline in the middle of a string is an error unless a line
                   8469:        continuation character is used.
1.1.1.2   misho    8470:        [bdb1d762a1d5]
1.1       misho    8471: 
1.1.1.2   misho    8472:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   8473:        plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8474:        Move lexer globals initialization into init_lexer.
                   8475:        [1ce62211aadb]
1.1       misho    8476: 
1.1.1.2   misho    8477:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8478:        Fix a potential crash when a non-regular file is present in an
1.1       misho    8479:        includedir. Fixes bz #452
1.1.1.2   misho    8480:        [1586760c3525]
1.1       misho    8481: 
1.1.1.2   misho    8482:        * pp:
                   8483:        On some Linux systems, "uname -p" contains detailed processor info
1.1       misho    8484:        so check "uname -m" first and then "uname -p" if needed. Recognize
                   8485:        PLD Linux.
1.1.1.2   misho    8486:        [b8535cb9012e]
1.1       misho    8487: 
                   8488: 2011-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8489: 
1.1.1.2   misho    8490:        * plugins/sudoers/redblack.c:
                   8491:        Don't need all sudoers.h here.
                   8492:        [8c0929f42dab]
1.1       misho    8493: 
1.1.1.2   misho    8494:        * src/sudo.c:
                   8495:        Print sudo version early, in case policy plugin init fails.
                   8496:        [47cddc4358bc]
1.1       misho    8497: 
                   8498: 2011-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8499: 
1.1.1.2   misho    8500:        * plugins/sudoers/regress/sudoers/test4.toke.ok:
                   8501:        Update to match change in input.
                   8502:        [4a3af8e68790]
1.1       misho    8503: 
1.1.1.2   misho    8504:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8505:        Make an empty group or netgroup a syntax error.
                   8506:        [66f51ddc2ff6]
1.1       misho    8507: 
1.1.1.2   misho    8508:        * plugins/sudoers/regress/sudoers/test7.in,
                   8509:        plugins/sudoers/regress/sudoers/test7.out.ok,
                   8510:        plugins/sudoers/regress/sudoers/test7.toke.ok:
                   8511:        An empty group or netgroup should be a syntax error.
                   8512:        [bd5bf1e2edce]
                   8513: 
                   8514:        * plugins/sudoers/regress/sudoers/test6.in,
                   8515:        plugins/sudoers/regress/sudoers/test6.out.ok,
                   8516:        plugins/sudoers/regress/sudoers/test6.toke.ok:
                   8517:        Check that uids work in per-user and per-runas Defaults Check that
1.1       misho    8518:        uids and gids work in a Command_Spec
1.1.1.2   misho    8519:        [c5e848e6082b]
1.1       misho    8520: 
1.1.1.2   misho    8521:        * plugins/sudoers/regress/sudoers/test5.in,
                   8522:        plugins/sudoers/regress/sudoers/test5.out.ok,
                   8523:        plugins/sudoers/regress/sudoers/test5.toke.ok:
                   8524:        Test empty string in User_Alias and Command_Spec
                   8525:        [3a084d777e03]
1.1       misho    8526: 
1.1.1.2   misho    8527:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8528:        Allow a group ID in the User_Spec.
                   8529:        [bc2859eb71dc]
1.1       misho    8530: 
                   8531: 2011-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8532: 
1.1.1.2   misho    8533:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8534:        Return an error for the empty string when a word is expected. Allow
                   8535:        an ID for per-user or per-runas Defaults.
                   8536:        [915c259b00ff]
                   8537: 
                   8538:        * plugins/sudoers/testsudoers.c:
                   8539:        Fix printing "User_Alias FOO = ALL"
                   8540:        [ba58c3d548b3]
1.1       misho    8541: 
                   8542: 2011-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8543: 
1.1.1.2   misho    8544:        * src/parse_args.c:
                   8545:        Better error message about invalid -C argument
                   8546:        [c9a8d15bbf5d]
1.1       misho    8547: 
1.1.1.2   misho    8548:        * NEWS:
                   8549:        fix typo
                   8550:        [cdcfbafed013]
1.1       misho    8551: 
1.1.1.2   misho    8552:        * doc/sudoers.pod:
                   8553:        Fix placement of equal size ('=') in user specification summary.
                   8554:        [5ad7178b230d]
1.1       misho    8555: 
                   8556: 2011-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8557: 
1.1.1.2   misho    8558:        * MANIFEST:
                   8559:        update to match sudoers regress
                   8560:        [e04db0648717]
1.1       misho    8561: 
1.1.1.2   misho    8562:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8563:        Restore ability to define TRACELEXER and have trace output go to
1.1       misho    8564:        stderr.
1.1.1.2   misho    8565:        [d9531e4d1b20]
1.1       misho    8566: 
1.1.1.2   misho    8567:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8568:        Restore old behavior of setting sawspace = TRUE for command line
1.1       misho    8569:        args when a line continuation character is hit to avoid causing
                   8570:        problems for existing sudoers files.
1.1.1.2   misho    8571:        [fd930ad25550]
1.1       misho    8572: 
1.1.1.2   misho    8573:        * plugins/sudoers/regress/sudoers/test4.in,
                   8574:        plugins/sudoers/regress/sudoers/test4.out.ok,
                   8575:        plugins/sudoers/regress/sudoers/test4.toke.ok:
                   8576:        Add test for line continuation and aliases
                   8577:        [29ab538ca6bb]
1.1       misho    8578: 
1.1.1.2   misho    8579:        * plugins/sudoers/Makefile.in:
                   8580:        Make test output line up nicely for parse vs. toke
                   8581:        [257ef82c1434]
1.1       misho    8582: 
1.1.1.2   misho    8583:        * plugins/sudoers/Makefile.in,
                   8584:        plugins/sudoers/regress/sudoers/test1.in,
                   8585:        plugins/sudoers/regress/sudoers/test1.out.ok,
                   8586:        plugins/sudoers/regress/sudoers/test1.toke.ok,
                   8587:        plugins/sudoers/regress/sudoers/test2.in,
                   8588:        plugins/sudoers/regress/sudoers/test2.out.ok,
                   8589:        plugins/sudoers/regress/sudoers/test2.toke.ok,
                   8590:        plugins/sudoers/regress/sudoers/test3.in,
                   8591:        plugins/sudoers/regress/sudoers/test3.out.ok,
                   8592:        plugins/sudoers/regress/sudoers/test3.toke.ok,
                   8593:        plugins/sudoers/regress/testsudoers/test1.ok,
                   8594:        plugins/sudoers/regress/testsudoers/test1.out.ok,
                   8595:        plugins/sudoers/regress/testsudoers/test1.sh,
1.1       misho    8596:        plugins/sudoers/regress/testsudoers/test2.out,
                   8597:        plugins/sudoers/regress/testsudoers/test2.sh,
                   8598:        plugins/sudoers/regress/testsudoers/test3.ok,
                   8599:        plugins/sudoers/regress/testsudoers/test3.sh,
                   8600:        plugins/sudoers/regress/visudo/test1.ok,
                   8601:        plugins/sudoers/regress/visudo/test1.sh:
                   8602:        Move parser tests to sudoers directory and test the tokenizer output
                   8603:        too.
1.1.1.2   misho    8604:        [44f529b3cdb6]
1.1       misho    8605: 
1.1.1.2   misho    8606:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8607:        If we match a rule anchored to the beginning of a line after parsing
1.1       misho    8608:        a line continuation character, return an ERROR token. It would be
                   8609:        nicer to use REJECT instead but that substantially slows down the
                   8610:        lexer.
1.1.1.2   misho    8611:        [355478293f8c]
                   8612: 
                   8613:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   8614:        plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   8615:        plugins/sudoers/toke.l:
                   8616:        Move LEXTRACE macro to toke.h so we can use it in yyerror().
                   8617:        [72ee7a06d3ca]
1.1       misho    8618: 
1.1.1.2   misho    8619: 2011-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8620: 
1.1.1.2   misho    8621:        * plugins/sudoers/testsudoers.c, plugins/sudoers/toke.c,
                   8622:        plugins/sudoers/toke.l:
                   8623:        Make lex tracing settable at run-time in testsudoers via the -t
1.1       misho    8624:        flag. Trace output goes to stderr. Will be used by regress tests
                   8625:        to check lexer.
1.1.1.2   misho    8626:        [93bd53c413c8]
1.1       misho    8627: 
1.1.1.2   misho    8628:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8629:        Allow whitespace after the modifier in a Defaults entry. E.g.
1.1       misho    8630:        "Defaults: username set_home"
1.1.1.2   misho    8631:        [9dfcf8dd8a3a]
1.1       misho    8632: 
                   8633: 2011-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8634: 
1.1.1.2   misho    8635:        * mkpkg:
                   8636:        Don't set CC when cross-compiling.
                   8637:        [4b95b0c04e1c]
1.1       misho    8638: 
1.1.1.2   misho    8639:        * NEWS:
                   8640:        Credit Matthew Thomas for the sudoers_search_filter changes.
                   8641:        [a65998ab09f7]
1.1       misho    8642: 
1.1.1.2   misho    8643:        * MANIFEST:
                   8644:        Add the .sym files to the MANIFEST
                   8645:        [f599225cc861]
1.1       misho    8646: 
1.1.1.2   misho    8647:        * NEWS:
                   8648:        Update for sudo 1.8.1 beta
                   8649:        [71021e854c49]
1.1       misho    8650: 
1.1.1.2   misho    8651:        * doc/sudo_plugin.pod, plugins/sudoers/sudoers.c, src/parse_args.c:
                   8652:        user_shell -> run_shell to avoid confusion with the user's SHELL
1.1       misho    8653:        variable.
1.1.1.2   misho    8654:        [dc0ac6dafc21]
1.1       misho    8655: 
1.1.1.2   misho    8656:        * src/exec_pty.c:
                   8657:        Save the controlling tty process group before suspending in pty
1.1       misho    8658:        mode. Previously, we assumed that the child pgrp == child pid
                   8659:        (which is usually, but not always, the case).
1.1.1.2   misho    8660:        [10b2883b7875]
1.1       misho    8661: 
1.1.1.2   misho    8662:        * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   8663:        Add support for sudoers_search_filter setting in ldap.conf. This
1.1       misho    8664:        can be used to restrict the set of records returned by the LDAP
                   8665:        query.
1.1.1.2   misho    8666:        [b0f1b721d102]
1.1       misho    8667: 
                   8668: 2011-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8669: 
                   8670:        * configure, configure.in:
                   8671:        Remove the hack to disable -g in CFLAGS unless --with-devel
1.1.1.2   misho    8672:        [89822cf84ef4]
1.1       misho    8673: 
1.1.1.2   misho    8674:        * doc/sudoers.pod:
                   8675:        The '@' character does not normally need to be quoted.
                   8676:        [7823f5ed829a]
1.1       misho    8677: 
1.1.1.2   misho    8678:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8679:        We normaly transition from GOTDEFS to STARTDEFS on whitespace, but
1.1       misho    8680:        if that whitespace is followed by a comma, we want to treat it as
                   8681:        part of a list and not transition.
1.1.1.2   misho    8682:        [1ca6943e1824]
1.1       misho    8683: 
1.1.1.2   misho    8684:        * plugins/sudoers/regress/testsudoers/test3.ok,
                   8685:        plugins/sudoers/regress/testsudoers/test3.sh:
                   8686:        Add check for whitespace when a User_List is used for a per-user
1.1       misho    8687:        Defaults entry.
1.1.1.2   misho    8688:        [91f75e6dd19a]
1.1       misho    8689: 
1.1.1.2   misho    8690:        * plugins/sudoers/regress/testsudoers/test2.out,
                   8691:        plugins/sudoers/regress/testsudoers/test2.sh:
                   8692:        Expand quoted name checks to cover recent fixes.
                   8693:        [ce4f76bca146]
1.1       misho    8694: 
1.1.1.2   misho    8695:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   8696:        Fix parsing of double-quoted names in Defaultd and Aliases which was
1.1       misho    8697:        broken in 601d97ea8792.
1.1.1.2   misho    8698:        [424b0d6c1dc4]
1.1       misho    8699: 
1.1.1.2   misho    8700:        * plugins/sudoers/Makefile.in:
                   8701:        toke_util.c lives in $(srcdir) not $(devdir)
                   8702:        [94866bebee83]
1.1       misho    8703: 
                   8704: 2011-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8705: 
                   8706:        * configure, configure.in:
1.1.1.2   misho    8707:        Change trunk version to 1.8.x to distinguish from real 1.8.0.
                   8708:        [a9781e61d064]
1.1       misho    8709: 
1.1.1.2   misho    8710:        * NEWS, doc/UPGRADE:
                   8711:        Document major changes in 1.8.1 and add upgrade notes.
                   8712:        [f2cf51b0d9ce]
1.1       misho    8713: 
1.1.1.2   misho    8714:        * plugins/sudoers/match.c:
                   8715:        Be careful not to deref user_stat if it is NULL. This cannot
1.1       misho    8716:        currently happen in sudo but might in other programs using the
                   8717:        parser.
1.1.1.2   misho    8718:        [06a2334dd674]
1.1       misho    8719: 
1.1.1.2   misho    8720:        * mkpkg:
                   8721:        configure will not add -O2 to CFLAGS if it is already defined to add
1.1       misho    8722:        -O2 to the CFLAGS we pass in when PIE is being used.
1.1.1.2   misho    8723:        [1ce6481ece59]
1.1       misho    8724: 
1.1.1.2   misho    8725:        * doc/sudoers.pod:
                   8726:        Warn about the dangers of log_input and mention iolog_file and
1.1       misho    8727:        iolog_dir in the log_input and log_output descriptions.
1.1.1.2   misho    8728:        [ae854ffb0768]
1.1       misho    8729: 
1.1.1.2   misho    8730:        * pp:
                   8731:        sync with git version
                   8732:        [a993e39ce3cb]
1.1       misho    8733: 
1.1.1.2   misho    8734:        * doc/sudoers.pod:
                   8735:        It seems that h comes after i
                   8736:        [0f621109220d]
1.1       misho    8737: 
1.1.1.2   misho    8738:        * doc/sudoers.pod:
                   8739:        Move log_input and log_output to their proper, sorted, location.
1.1       misho    8740:        Document set_utmp and utmp_runas.
1.1.1.2   misho    8741:        [273b234b9c34]
1.1       misho    8742: 
1.1.1.2   misho    8743:        * src/exec.c:
                   8744:        Save the controlling tty process group before suspending so we can
1.1       misho    8745:        restore it when we resume. Fixes job control problems on Linux
                   8746:        caused by the previous attemp to fix resuming a shell when I/O
                   8747:        logging not enabled.
1.1.1.2   misho    8748:        [f03a660315ee]
1.1       misho    8749: 
1.1.1.2   misho    8750:        * common/lbuf.c:
                   8751:        Fix printing of the remainder after a newline. Fixes "sudo -l"
1.1       misho    8752:        output corruption that could occur in some cases.
1.1.1.2   misho    8753:        [25d83fb501fc]
                   8754: 
                   8755: 2011-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8756: 
1.1.1.2   misho    8757:        * config.h.in, configure, configure.in, src/exec_pty.c,
                   8758:        src/sudo_exec.h, src/utmp.c:
                   8759:        Add support for ut_exit
                   8760:        [b574c13f1bba]
1.1       misho    8761: 
1.1.1.2   misho    8762:        * doc/sudo_plugin.pod, plugins/sudoers/def_data.c,
                   8763:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   8764:        plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c, src/exec.c,
                   8765:        src/exec_pty.c, src/sudo.c, src/sudo.h, src/sudo_exec.h, src/utmp.c:
                   8766:        Add support for controlling whether utmp is updated and which user
1.1       misho    8767:        is listed in the entry.
1.1.1.2   misho    8768:        [44a81632133f]
1.1       misho    8769: 
1.1.1.2   misho    8770:        * plugins/sudoers/def_data.h, plugins/sudoers/defaults.h,
                   8771:        plugins/sudoers/ldap.c, plugins/sudoers/mkdefaults,
                   8772:        plugins/sudoers/parse.c:
                   8773:        Fix typo; tupple vs. tuple
                   8774:        [697744acb710]
1.1       misho    8775: 
1.1.1.2   misho    8776:        * src/utmp.c:
                   8777:        For legacy utmp, strip the /dev/ prefix before trying to determine
1.1       misho    8778:        slot since the ttys file does not include the /dev/ prefix.
1.1.1.2   misho    8779:        [7ad5b81ff90c]
                   8780: 
                   8781:        * aclocal.m4, configure, configure.in, pathnames.h.in:
                   8782:        Add check for _PATH_UTMP
                   8783:        [21e638029bfd]
1.1       misho    8784: 
1.1.1.2   misho    8785: 2011-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8786: 
1.1.1.2   misho    8787:        * plugins/sudoers/regress/iolog_path/check_iolog_path.c:
                   8788:        Adapt check_iolog_path to sessid changes
                   8789:        [728b5fe2be6f]
1.1       misho    8790: 
1.1.1.2   misho    8791:        * config.h.in, configure, configure.in, src/Makefile.in,
                   8792:        src/exec_pty.c, src/sudo_exec.h, src/utmp.c:
                   8793:        Redo utmp handling. If no getutent()/getutxent() is available,
1.1       misho    8794:        assume a ttyslot-based utmp. If getttyent() is available, use that
                   8795:        directly instead of ttyslot() so we don't have to do the stdin dup2
                   8796:        dance.
1.1.1.2   misho    8797:        [18aa455cd140]
1.1       misho    8798: 
1.1.1.2   misho    8799: 2011-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
1.1       misho    8800: 
1.1.1.2   misho    8801:        * MANIFEST, src/Makefile.in, src/exec_pty.c, src/sudo_exec.h,
                   8802:        src/utmp.c:
                   8803:        Move utmp handling into utmp.c
                   8804:        [f6eae6c8e012]
1.1       misho    8805: 
1.1.1.2   misho    8806:        * common/aix.c, common/alloc.c, common/fileops.c, common/fmt_string.c,
                   8807:        common/lbuf.c, common/list.c, compat/isblank.c, compat/memrchr.c,
                   8808:        compat/mksiglist.c, compat/nanosleep.c, compat/snprintf.c,
                   8809:        compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
                   8810:        compat/utimes.c, doc/sudo.pod, doc/visudo.pod,
                   8811:        include/sudo_plugin.h, plugins/sample/sample_plugin.c,
                   8812:        plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
                   8813:        plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
                   8814:        plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
                   8815:        plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
                   8816:        plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
                   8817:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
                   8818:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
                   8819:        plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
                   8820:        plugins/sudoers/auth/sia.c, plugins/sudoers/boottime.c,
                   8821:        plugins/sudoers/bsm_audit.c, plugins/sudoers/env.c,
                   8822:        plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
                   8823:        plugins/sudoers/logging.c, plugins/sudoers/parse.c,
                   8824:        plugins/sudoers/parse.h, plugins/sudoers/redblack.c,
                   8825:        plugins/sudoers/set_perms.c, plugins/sudoers/timestr.c,
                   8826:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c, src/exec.c,
                   8827:        src/exec_pty.c, src/get_pty.c, src/parse_args.c, src/sudo.c,
                   8828:        src/sudo.h, src/sudo_edit.c, src/sudo_exec.h, src/sudo_noexec.c,
                   8829:        src/sudo_plugin_int.h, src/tgetpass.c:
                   8830:        Update copyright years.
                   8831:        [16aa39f9060a]
1.1       misho    8832: 
1.1.1.2   misho    8833:        * doc/sudo_plugin.pod, plugins/sudoers/sudoers.c,
                   8834:        plugins/sudoers/sudoers.h, src/parse_args.c:
                   8835:        Add "user_shell" boolean as a way to indicate to the plugin that the
1.1       misho    8836:        -s flag was given.
1.1.1.2   misho    8837:        [fb1ef0897b32]
1.1       misho    8838: 
1.1.1.2   misho    8839:        * plugins/sudoers/iolog_path.c, plugins/sudoers/logging.c,
                   8840:        plugins/sudoers/sudoers.h:
                   8841:        Move sessid out of sudo_user.
                   8842:        [ba298ddb57f4]
1.1       misho    8843: 
1.1.1.2   misho    8844:        * plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
                   8845:        plugins/sudoers/logging.c, plugins/sudoers/sudoers.c,
                   8846:        plugins/sudoers/sudoers.h:
                   8847:        Log the TSID even if it is not a simple session ID.
                   8848:        [d7cc1b9c513c]
1.1       misho    8849: 
1.1.1.2   misho    8850:        * doc/sample.sudo.conf, doc/sudo.pod, doc/sudoers.pod:
                   8851:        Document noexec in sample.sudo.conf and add back noexec_file section
1.1       misho    8852:        in sudoers with a note that it is deprecated.
1.1.1.2   misho    8853:        [4a6e961e494d]
1.1       misho    8854: 
1.1.1.2   misho    8855:        * plugins/sudoers/set_perms.c:
                   8856:        Fix running commands as non-root on systems where setreuid() changes
1.1       misho    8857:        the saved uid based on the effective uid we are changing to.
1.1.1.2   misho    8858:        [df0769b71b34]
1.1       misho    8859: 
                   8860: 2011-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8861: 
1.1.1.2   misho    8862:        * plugins/sudoers/defaults.c, src/load_plugins.c, src/sudo.c,
                   8863:        src/sudo.h:
                   8864:        Move noexec path into sudo.conf now that sudo itself handles noexec.
1.1       misho    8865:        Currently can be configured in sudoers too but is now undocumented
                   8866:        and will be removed in a future release.
1.1.1.2   misho    8867:        [6fa8befdc110]
1.1       misho    8868: 
1.1.1.2   misho    8869:        * doc/sudo.pod, doc/sudoers.pod:
                   8870:        Document "Path noexec ..." in sudo.conf. No longer document
1.1       misho    8871:        noexec_file in sudoers, it will be removed in a future release.
1.1.1.2   misho    8872:        [24eee3a0b3e5]
1.1       misho    8873: 
1.1.1.2   misho    8874:        * plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
                   8875:        plugins/sudoers/sudoers.h, src/sudo.c, src/sudo.h:
                   8876:        Move noexec handling to sudo front-end where it is documented as
1.1       misho    8877:        being.
1.1.1.2   misho    8878:        [3ed4f10d7052]
1.1       misho    8879: 
1.1.1.2   misho    8880:        * config.h.in, configure, configure.in, plugins/sudoers/sudoers.c,
                   8881:        src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h, src/sudo_edit.c,
                   8882:        src/sudo_exec.h:
                   8883:        Add support for disabling exec via solaris privileges. Includes
1.1       misho    8884:        preparation for moving noexec support out of sudoers and into front
                   8885:        end as documented.
1.1.1.2   misho    8886:        [dec843ed553e]
1.1       misho    8887: 
1.1.1.2   misho    8888:        * plugins/sample/Makefile.in, plugins/sample/sample_plugin.sym,
                   8889:        plugins/sample_group/Makefile.in,
                   8890:        plugins/sample_group/sample_group.sym, plugins/sudoers/Makefile.in,
                   8891:        plugins/sudoers/sudoers.sym:
                   8892:        Only export the symbols corresponding to the plugin structs.
                   8893:        [8d8d03b0ca54]
                   8894: 
                   8895:        * configure, configure.in, plugins/sample/Makefile.in,
                   8896:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in:
                   8897:        Install plugins manually instead of using libtool. This works
1.1       misho    8898:        around a problem on AIX where libtool will install a .a file
                   8899:        containing the .so file instead of the .so file itself.
1.1.1.2   misho    8900:        [796971cfbddb]
1.1       misho    8901: 
                   8902:        * Makefile.in:
                   8903:        Move check into its own rule since some versions of make will run
                   8904:        both targets as the default rule.
1.1.1.2   misho    8905:        [34d759979176]
1.1       misho    8906: 
1.1.1.2   misho    8907:        * configure, ltmain.sh, m4/libtool.m4, m4/ltoptions.m4,
                   8908:        m4/ltversion.m4, m4/lt~obsolete.m4:
                   8909:        Update to libtool 2.2.10
                   8910:        [34c130de6af7]
1.1       misho    8911: 
1.1.1.2   misho    8912: 2011-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8913: 
                   8914:        * src/exec.c:
                   8915:        In handle_signals(), restart the read() on EINTR to make sure we
1.1       misho    8916:        keep up with the signal pipe. Don't return -1 on EAGAIN, it just
                   8917:        means we have emptied the pipe.
1.1.1.2   misho    8918:        [d5b9c8eb9000]
1.1       misho    8919: 
1.1.1.2   misho    8920:        * compat/mktemp.c:
                   8921:        Reorder functions to quiet a compiler warning.
                   8922:        [c9e9a23729f0]
1.1       misho    8923: 
1.1.1.2   misho    8924:        * mkpkg:
                   8925:        Use the Sun Studio C compiler on Solaris if possible
                   8926:        [11a86e27891e]
1.1       misho    8927: 
                   8928: 2011-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8929: 
1.1.1.2   misho    8930:        * mkpkg:
                   8931:        Fix default setting of osversion variable.
                   8932:        [52e49ca1cedd]
1.1       misho    8933: 
1.1.1.2   misho    8934:        * doc/sudo_plugin.pod:
                   8935:        Make two login_class entris consistent.
                   8936:        [18ff1fa94a91]
1.1       misho    8937: 
1.1.1.2   misho    8938:        * config.h.in, configure, configure.in, src/exec.c, src/exec_pty.c,
                   8939:        src/sudo_exec.h:
                   8940:        Add support for adding a utmp entry when allocating a new pty.
1.1       misho    8941:        Requires the BSD login(3) or SYSV/POSIX getutent()/getutxent().
                   8942:        Currently only creates a new entry if the existing tty has a utmp
                   8943:        entry.
1.1.1.2   misho    8944:        [32db72b81d80]
1.1       misho    8945: 
1.1.1.2   misho    8946:        * plugins/sudoers/boottime.c:
                   8947:        Avoid pulling in headers we don't need on Linux For getutx?id(),
1.1       misho    8948:        call setutx?ent() first and always call endutx?ent().
1.1.1.2   misho    8949:        [5dad21e1ee1b]
1.1       misho    8950: 
1.1.1.2   misho    8951:        * configure, configure.in:
                   8952:        Add some more libs to SUDOERS_LIBS instead of relying on them to be
1.1       misho    8953:        pulled in by SUDO_LIBS.
1.1.1.2   misho    8954:        [18a7c21c09a7]
1.1       misho    8955: 
1.1.1.2   misho    8956:        * plugins/sudoers/sudoers.c:
                   8957:        Fix return value of "sudo -l command" when command is not allowed,
1.1       misho    8958:        broken in [c7097ea22111]. The default return value is now TRUE and
                   8959:        a bad: label is used when permission is denied. Also fixed missing
                   8960:        permissions restoration on certain errors. On error()/errorx(), the
                   8961:        password and group files are now closed before returning.
1.1.1.2   misho    8962:        [4f2d0e869ae5]
1.1       misho    8963: 
                   8964: 2011-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8965: 
1.1.1.2   misho    8966:        * plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c:
                   8967:        Fix passing of login class back to sudo front end.
                   8968:        [6f70a784ce48]
1.1       misho    8969: 
1.1.1.2   misho    8970:        * mkpkg:
                   8971:        Add --osversion flag to specify OS instead of running "pp
1.1       misho    8972:        --probeonly"
1.1.1.2   misho    8973:        [a8efdccb7bc1]
1.1       misho    8974: 
1.1.1.2   misho    8975:        * sudo.pp:
                   8976:        Fix expr usage w/ GNU expr
                   8977:        [48895599ee63]
1.1       misho    8978: 
                   8979: 2011-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8980: 
1.1.1.2   misho    8981:        * plugins/sudoers/sudoers.c:
                   8982:        Fix exit value for validate and list mode.
                   8983:        [c7097ea22111]
1.1       misho    8984: 
1.1.1.2   misho    8985:        * plugins/sudoers/sudoers.c:
                   8986:        Fix non-interactive mode with sudoers plugin.
                   8987:        [172f29597bd2]
1.1       misho    8988: 
                   8989: 2011-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8990: 
1.1.1.2   misho    8991:        * doc/sudoreplay.pod:
                   8992:        sudoreplay can now find IDs other than %{seq} and display the
1.1       misho    8993:        session.
1.1.1.2   misho    8994:        [fc3dd3be67e9]
1.1       misho    8995: 
                   8996: 2011-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   8997: 
1.1.1.2   misho    8998:        * plugins/sudoers/sudoreplay.c:
                   8999:        Add support for replaying sessions when iolog_file is set to
                   9000:        something other than %{seq}.
                   9001:        [ca3131243874]
                   9002: 
                   9003:        * plugins/sudoers/visudo.c:
                   9004:        If we are killed by a signal, display the name of the signal that
1.1       misho    9005:        got us.
1.1.1.2   misho    9006:        [994bb76a990e]
1.1       misho    9007: 
1.1.1.2   misho    9008:        * configure, configure.in:
                   9009:        Move libs used for authentication from SUDO_LIBS to SUDOERS_LIBS
1.1       misho    9010:        where they belong.
1.1.1.2   misho    9011:        [40f94b936fa4]
1.1       misho    9012: 
1.1.1.2   misho    9013:        * configure.in:
                   9014:        Fix bug in skey/opie check that could cause a shell warning.
                   9015:        [83c043072be5]
1.1       misho    9016: 
1.1.1.2   misho    9017:        * plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
                   9018:        No longer need sudo_getepw() stubs.
                   9019:        [bbee15c36912]
1.1       misho    9020: 
                   9021: 2011-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9022: 
1.1.1.2   misho    9023:        * plugins/sudoers/sudo_nss.c:
                   9024:        Fix exit value of "sudo -l command" in sudoers module.
                   9025:        [a6541867521b]
1.1       misho    9026: 
                   9027: 2011-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9028: 
1.1.1.2   misho    9029:        * compat/regress/glob/globtest.c:
                   9030:        Use fgets() not fgetln() for portability.
                   9031:        [df1bb67fb168]
1.1       misho    9032: 
1.1.1.2   misho    9033:        * sudo.pp:
                   9034:        Don't use the beta or release candidate version as the rpm release.
                   9035:        [d661ef78021a]
1.1       misho    9036: 
                   9037: 2011-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9038: 
                   9039:        * configure, configure.in:
                   9040:        version 1.8.0
                   9041:        [f6530d56f6ae] [SUDO_1_8_0]
                   9042: 
                   9043:        * NEWS:
                   9044:        update sudo 1.8 section
                   9045:        [f2ee2cf95d18]
                   9046: 
                   9047: 2011-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9048: 
                   9049:        * plugins/sudoers/regress/testsudoers/test2.sh:
                   9050:        fix test description
                   9051:        [cd5730fa9f09]
                   9052: 
                   9053:        * plugins/sudoers/regress/testsudoers/test2.out,
                   9054:        plugins/sudoers/regress/testsudoers/test2.sh,
                   9055:        plugins/sudoers/regress/visudo/test2.out,
                   9056:        plugins/sudoers/regress/visudo/test2.sh:
                   9057:        convert test2 to use testsudoers
                   9058:        [b5ec3f0b69f1]
                   9059: 
                   9060:        * include/sudo_plugin.h, src/sudo_plugin_int.h:
                   9061:        Move struct generic_plugin to sudo_plugin_int.h
                   9062:        [6f7bc629329c]
                   9063: 
                   9064:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   9065:        plugins/sudoers/parse.c, plugins/sudoers/parse.h,
                   9066:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
                   9067:        plugins/sudoers/sudoers.h:
                   9068:        Allow sudoers file name, mode, uid and gid to be specified in the
                   9069:        settings list. The sudo front end does not currently set these but
                   9070:        may in the future.
                   9071:        [22f38a0fda2a]
                   9072: 
                   9073: 2011-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9074: 
                   9075:        * configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
                   9076:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
                   9077:        doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
                   9078:        doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
                   9079:        doc/visudo.man.in:
                   9080:        1.8.0rc1
                   9081:        [5d4588b9c057]
                   9082: 
                   9083:        * doc/sudo.pod, doc/sudoreplay.pod, doc/visudo.pod,
                   9084:        plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
                   9085:        src/parse_args.c, src/sudo.h:
                   9086:        add help text to sudo, visudo and sudoreplay for the -h option
                   9087:        [52e7378d8476]
                   9088: 
                   9089: 2011-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9090: 
                   9091:        * compat/snprintf.c:
                   9092:        avoid using "howmany" for a parameter name since it is a select-
                   9093:        related macro
                   9094:        [a14d565401a1]
                   9095: 
                   9096:        * doc/sudoers.pod:
                   9097:        mention group_plugin when describing nonunix_group
                   9098:        [e0d1d0034b17]
                   9099: 
                   9100:        * doc/sudo_plugin.pod:
                   9101:        Add missing period at end of sentence
                   9102:        [6744d7e9056d]
                   9103: 
                   9104:        * Makefile.in, doc/Makefile.in, include/Makefile.in,
                   9105:        plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   9106:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   9107:        add localstatedir; closes bug 471
                   9108:        [7aefcab85088]
                   9109: 
                   9110:        * config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c,
                   9111:        src/exec.c, src/exec_pty.c:
                   9112:        The howmany macro lives in sys/sysmacros.h on SVR5 systems Closes
                   9113:        Bug 470
                   9114:        [927ed6740f32]
                   9115: 
                   9116:        * configure.in:
                   9117:        add missing AH_TEMPLATE for ENV_RESET
                   9118:        [16300010c986]
                   9119: 
                   9120:        * src/exec.c:
                   9121:        SVR5 systems return non-zero for success on socketpair(), check for
                   9122:        -1 instead. Closes Bug 469
                   9123:        [4d276494bf8e]
                   9124: 
                   9125: 2011-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9126: 
                   9127:        * configure, configure.in:
                   9128:        1.8.0b5
                   9129:        [d611cd5d73d3]
                   9130: 
                   9131:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
                   9132:        doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   9133:        doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
                   9134:        doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
                   9135:        regen
                   9136:        [85e96eeaed82]
                   9137: 
                   9138:        * doc/sudo.pod:
                   9139:        Document that a sudo.conf file with no Pligin lines uses the default
                   9140:        sudoers plugins.
                   9141:        [88bd52da977f]
                   9142: 
                   9143:        * src/load_plugins.c:
                   9144:        If sudo.conf contains no Plugin lines, use the default sudoers
                   9145:        policy and I/O plugins.
                   9146:        [fd8f4cb811ab]
                   9147: 
                   9148: 2011-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9149: 
                   9150:        * plugins/sudoers/sudo_nss.c:
                   9151:        Avoid printing empty "Runas and Command-specific defaults for user"
                   9152:        line.
                   9153:        [2dd330fe4f8b]
                   9154: 
                   9155:        * common/lbuf.c:
                   9156:        Truncate the buffer at buf.len before printing in the non-wordwrap
                   9157:        case.
                   9158:        [901e9833f80d]
                   9159: 
                   9160:        * common/lbuf.c:
                   9161:        Remove extra newline when the tty width is very small or unavailable
                   9162:        [245c05506c0e]
                   9163: 
                   9164: 2011-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9165: 
                   9166:        * plugins/sudoers/alias.c:
                   9167:        Remove unneeded variable.
                   9168:        [2c086d30b796]
                   9169: 
                   9170: 2011-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9171: 
                   9172:        * configure, configure.in:
                   9173:        Prefer getutxid over getutid
                   9174:        [3f3322e9c93e]
                   9175: 
                   9176:        * plugins/sudoers/boottime.c:
                   9177:        Include utmp.h / utmpx.h before missing.h as apparently including it
                   9178:        afterwards causes a compilation problem on GNU Hurd.
                   9179:        [a528029ae962]
                   9180: 
                   9181: 2011-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9182: 
                   9183:        * plugins/sudoers/sudoreplay.c, plugins/sudoers/toke_util.c:
                   9184:        #include "foo.h", not <foo.h> for local includes.
                   9185:        [f65ec693998e]
                   9186: 
                   9187:        * src/parse_args.c:
                   9188:        remove bogus XXX
                   9189:        [9136c17d53ce]
                   9190: 
                   9191:        * compat/mksiglist.c:
                   9192:        Fix typo
                   9193:        [1a3bb7b455c9]
                   9194: 
                   9195:        * compat/glob.c, plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
                   9196:        plugins/sudoers/match.c:
                   9197:        return foo not return(foo)
                   9198:        [5c9e0647359a]
                   9199: 
                   9200: 2011-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9201: 
                   9202:        * src/exec.c:
                   9203:        Remove duplicate FD_SET of signal_pipe[0]
                   9204:        [3096527d2215]
                   9205: 
                   9206: 2011-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9207: 
                   9208:        * compat/mksiglist.c:
                   9209:        Use "missing.h" not <missing.h> in generated code.
                   9210:        [d8e09cffbe09]
                   9211: 
                   9212: 2011-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9213: 
                   9214:        * aclocal.m4, configure:
                   9215:        fix --with-iologdir=no
                   9216:        [a89699cb5f5f]
                   9217: 
                   9218:        * aclocal.m4, configure:
                   9219:        fix typo that broke --with-iologdir
                   9220:        [91b54eb22403]
                   9221: 
                   9222: 2011-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9223: 
                   9224:        * configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
                   9225:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat,
                   9226:        doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in,
                   9227:        doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat,
                   9228:        doc/visudo.man.in:
                   9229:        Bump version to 1.8.0b4
                   9230:        [e2b7f2cdc02e]
                   9231: 
                   9232:        * NEWS:
                   9233:        sync
                   9234:        [decf5a0a8a33]
                   9235: 
                   9236:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   9237:        Attempt to clarify how users and groups interact in Runas_Specs
                   9238:        [e6fb3a2dbd77]
                   9239: 
                   9240:        * plugins/sudoers/regress/visudo/test2.out,
                   9241:        plugins/sudoers/regress/visudo/test2.sh:
                   9242:        Add test for quoted group that contains escaped double quotes
                   9243:        [44596c48c629]
                   9244: 
                   9245:        * src/exec.c, src/exec_pty.c:
                   9246:        Pass SIGUSR1/SIGUSR2 through to the child.
                   9247:        [c3108a827b01]
                   9248: 
                   9249:        * src/exec_pty.c, src/sudo_exec.h:
                   9250:        Use special values SIGCONT_FG and SIGCONT_BG instead of SIGUSR1 and
                   9251:        SIGUSR2 to indicate whether the child should be continued in the
                   9252:        foreground or background.
                   9253:        [35ca47cc6785]
                   9254: 
                   9255:        * src/exec.c:
                   9256:        Use pid_t not int and check the return value of kill()
                   9257:        [36ae7d37d7f9]
                   9258: 
                   9259: 2011-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9260: 
                   9261:        * src/exec_pty.c:
                   9262:        Remove obsolete comment
                   9263:        [baebef4919f6]
                   9264: 
                   9265:        * src/exec.c:
                   9266:        In non-pty mode before continuing the child, make it the foreground
                   9267:        pgrp if possible. Fixes resuming a shell.
                   9268:        [fef5b1d02ddb]
                   9269: 
                   9270:        * src/exec_pty.c:
                   9271:        If we get a signal other than SIGCHLD in the monitor, pass it
                   9272:        directly to the child.
                   9273:        [b3ecb28163a0]
                   9274: 
                   9275:        * src/exec.c, src/exec_pty.c, src/sudo.h:
                   9276:        Save signal state before changing handlers and restore before we
                   9277:        execute the command.
                   9278:        [faf7475dc4bf]
                   9279: 
                   9280: 2011-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9281: 
                   9282:        * plugins/sudoers/iolog.c:
                   9283:        Use a char array to map a number to a base36 digit.
                   9284:        [257576c51f8b]
                   9285: 
                   9286:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod:
                   9287:        Be clear about what versions of sudo support new LDAP attributes.
                   9288:        Fix up some formatting of attribute names. Minor other tweaks.
                   9289:        [39f65df71f65]
                   9290: 
                   9291: 2011-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9292: 
                   9293:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   9294:        match quoted strings the same way whether in a Defaults line or as a
                   9295:        user/group/netgroup name. Fixes escaped double quotes in quoted
                   9296:        user/group/netgroup names.
                   9297:        [601d97ea8792]
                   9298: 
                   9299:        * plugins/sudoers/Makefile.in:
                   9300:        'make check' depends on visudo and testsudoers
                   9301:        [127c5a24df8f]
                   9302: 
                   9303:        * plugins/sudoers/sudoers2ldif:
                   9304:        Add sudoOrder attribute to each entry Parse LOG_{INPUT,OUTPUT} tags
                   9305:        [9029163a58c3]
                   9306: 
                   9307: 2011-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9308: 
                   9309:        * doc/UPGRADE:
                   9310:        Mention LDAP attribute compatibility status.
                   9311:        [2c3595aaec63]
                   9312: 
                   9313: 2011-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9314: 
                   9315:        * README.LDAP:
                   9316:        Mention phpQLAdmin
                   9317:        [9304c9064fbe]
                   9318: 
                   9319:        * INSTALL, NEWS, config.h.in, configure, configure.in,
                   9320:        doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c:
                   9321:        Add --disable-env-reset configure option.
                   9322:        [8a753aa13a46]
                   9323: 
                   9324:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   9325:        Document that sudoers_locale also affects logging and email.
                   9326:        [998d6ac11277]
                   9327: 
                   9328:        * NEWS, config.h.in, configure, configure.in,
                   9329:        plugins/sudoers/logging.c:
                   9330:        Do logging and email sending in the locale specified by the
                   9331:        "sudoers_locale" setting ("C" by default). Email send by sudo
                   9332:        includes MIME headers when the sudoers locale is not "C".
                   9333:        [cb7e55408400]
                   9334: 
                   9335: 2011-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9336: 
                   9337:        * plugins/sudoers/check.c:
                   9338:        Fix indentation
                   9339:        [65ae7e92b9e4]
                   9340: 
                   9341: 2011-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9342: 
                   9343:        * NEWS, src/parse_args.c, src/sudo.c:
                   9344:        Perform command escaping for "sudo -s" and "sudo -i" after
                   9345:        validating sudoers so the sudoers entries don't need to have all the
                   9346:        backslashes.
                   9347:        [4e168c103f4b]
                   9348: 
                   9349: 2011-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9350: 
                   9351:        * plugins/sudoers/logging.c:
                   9352:        Prepend "list " to the command logged when "sudo -l command" is used
                   9353:        to make it clear that the command was listed, not run.
                   9354:        [f392a6056cd6]
                   9355: 
                   9356:        * plugins/sudoers/parse.c:
                   9357:        cosmetic change
                   9358:        [7c0951dbc2dd]
                   9359: 
                   9360:        * common/aix.c, common/alloc.c, common/fileops.c, common/fmt_string.c,
                   9361:        common/list.c, common/term.c, compat/fnmatch.c, compat/getcwd.c,
                   9362:        compat/glob.c, compat/isblank.c, compat/memrchr.c, compat/mktemp.c,
                   9363:        compat/nanosleep.c, compat/regress/glob/globtest.c,
                   9364:        compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c,
                   9365:        compat/strsignal.c, compat/utimes.c, plugins/sample/sample_plugin.c,
                   9366:        plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c,
                   9367:        plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
                   9368:        plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
                   9369:        plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
                   9370:        plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
                   9371:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
                   9372:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
                   9373:        plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
                   9374:        plugins/sudoers/auth/sia.c, plugins/sudoers/bsm_audit.c,
                   9375:        plugins/sudoers/check.c, plugins/sudoers/defaults.c,
                   9376:        plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c,
                   9377:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   9378:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   9379:        plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c,
                   9380:        plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
                   9381:        plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
                   9382:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
                   9383:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   9384:        plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
                   9385:        plugins/sudoers/toke.l, plugins/sudoers/toke_util.c,
                   9386:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
                   9387:        src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c,
                   9388:        src/sudo_noexec.c, src/tgetpass.c:
                   9389:        standardize on "return foo;" rather than "return(foo);" or "return
                   9390:        (foo);"
                   9391:        [32d76c5aaf8c]
                   9392: 
                   9393:        * plugins/sudoers/sudoers.c:
                   9394:        Do not reject sudoers file just because it is root-writable.
                   9395:        [0febc579185b]
                   9396: 
                   9397: 2011-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9398: 
                   9399:        * NEWS:
                   9400:        sync
                   9401:        [1ab03f8278ff]
                   9402: 
                   9403:        * plugins/sudoers/sudo_nss.c:
                   9404:        For "sudo -U user -l" if user is not authorized on the host, say so.
                   9405:        [289afe6dd15c]
                   9406: 
                   9407:        * plugins/sudoers/ldap.c:
                   9408:        In sudo_ldap_lookup(), always do the initial sudoers check as the
                   9409:        invoking user. If we are listing another user's privs we will do a
                   9410:        separate lookup using list_pw later.
                   9411:        [e52bc15de76d]
                   9412: 
                   9413: 2011-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9414: 
                   9415:        * MANIFEST:
                   9416:        add parser fill tests
                   9417:        [4f65140d3515]
                   9418: 
                   9419:        * compat/regress/glob/globtest.c, compat/regress/glob/globtest.in:
                   9420:        Don't test features not supported by the bundled glob()
                   9421:        [8ec7ace11949]
                   9422: 
                   9423:        * Makefile.in, aclocal.m4, common/Makefile.in, common/term.c,
                   9424:        compat/Makefile.in, configure.in, doc/LICENSE, doc/Makefile.in,
                   9425:        doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   9426:        doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, doc/sudoers.man.in,
                   9427:        doc/sudoers.pod, include/Makefile.in, plugins/sample/Makefile.in,
                   9428:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   9429:        plugins/sudoers/check.c, plugins/sudoers/defaults.c,
                   9430:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   9431:        plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
                   9432:        plugins/sudoers/ldap.c, plugins/sudoers/match.c,
                   9433:        plugins/sudoers/pwutil.c, plugins/sudoers/sudo_nss.c,
                   9434:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   9435:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   9436:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   9437:        plugins/sudoers/toke_util.c, src/Makefile.in, zlib/Makefile.in:
                   9438:        Update copyright year to 2011
                   9439:        [ac1b45cb1809]
                   9440: 
                   9441:        * plugins/sudoers/sudo_nss.c:
                   9442:        When listing, use separate lbufs for the defaults and the privileges
                   9443:        and only print something if the number of privileges is non-zero.
                   9444:        Fixes extraneous Defaults output for "sudo -U unauthorized_user -l".
                   9445:        [d0854d39f8ef]
                   9446: 
                   9447:        * plugins/sudoers/ldap.c:
                   9448:        Stash pointer to user group vector in LDAP handle and only reuse the
                   9449:        query if it has not changed. We always allocate a new buffer when
                   9450:        we reset the group vector so a simple pointer check is sufficient.
                   9451:        [88861d4eba69]
                   9452: 
                   9453:        * plugins/sudoers/sudo_nss.c:
                   9454:        Check initgroups() return value.
                   9455:        [3bdaf58408a7]
                   9456: 
                   9457:        * plugins/sudoers/Makefile.in,
                   9458:        plugins/sudoers/regress/parser/check_fill.c:
                   9459:        Add tests for the fill functions in toke_util.c
                   9460:        [bca587ab4956]
                   9461: 
                   9462: 2011-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9463: 
                   9464:        * plugins/sudoers/regress/iolog_path/check_iolog_path.c:
                   9465:        fix copyright year
                   9466:        [e2038cdaf055]
                   9467: 
                   9468:        * NEWS:
                   9469:        sync
                   9470:        [56ca5d5eaebe]
                   9471: 
                   9472: 2011-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9473: 
                   9474:        * common/term.c:
                   9475:        Clear, don't set, OPOST in c_oflag as was intended in 506ad5ae9b4e.
                   9476:        [b91f266624ec]
                   9477: 
                   9478: 2011-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9479: 
                   9480:        * mkpkg, sudo.pp:
                   9481:        Add Requires line for audit-libs >= 1.4 for RHEL5+
                   9482:        [6c02f976171b]
                   9483: 
                   9484:        * pp:
                   9485:        sync with git version
                   9486:        [d301c32d5865]
                   9487: 
                   9488: 2011-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9489: 
                   9490:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   9491:        fix typo
                   9492:        [39353f92976f]
                   9493: 
                   9494: 2011-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9495: 
                   9496:        * NEWS:
                   9497:        Update for sudo 1.7.4p5
                   9498:        [b444da76901f]
                   9499: 
                   9500:        * doc/schema.OpenLDAP, doc/schema.iPlanet:
                   9501:        Add sudoNotBefore and sudoNotAfter attributes as optional attributes
                   9502:        to the sudoRole object class. From Andreas Mueller
                   9503:        [dacfad7e7a95]
                   9504: 
                   9505: 2011-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9506: 
                   9507:        * NEWS:
                   9508:        Mention "sudo -g group" password check fix.
                   9509:        [1eb8fb14e53b]
                   9510: 
                   9511:        * plugins/sudoers/sudoers.c:
                   9512:        Fix "sudo -g" support in the sudoers module.
                   9513:        [07d1b0ce530e]
                   9514: 
                   9515:        * plugins/sudoers/check.c:
                   9516:        If the user is running sudo as himself but as a different group we
                   9517:        need to prompt for a password.
                   9518:        [caf1fcc9a117]
                   9519: 
                   9520: 2011-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9521: 
                   9522:        * NEWS, config.h.in, configure, configure.in, doc/sudoers.ldap.cat,
                   9523:        doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
                   9524:        plugins/sudoers/ldap.c:
                   9525:        Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP
                   9526:        LDAP_OPT_TIMEOUT. There is no corresponding option for mozilla-
                   9527:        derived LDAP SDKs but we can pass the timeout parameter to
                   9528:        ldap_search_ext_s() or ldap_search_st() when possible.
                   9529:        [5537049991f7]
                   9530: 
                   9531:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
                   9532:        regen
                   9533:        [5b361c3c4324]
                   9534: 
                   9535:        * NEWS, doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   9536:        Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility
                   9537:        with OpenLDAP ldap.conf files.
                   9538:        [e97843bd16fb]
                   9539: 
                   9540:        * plugins/sudoers/pwutil.c:
                   9541:        If user has no supplementary groups, fall back on checking the group
                   9542:        file expliticly.
                   9543:        [5223ad4eb690]
                   9544: 
                   9545: 2011-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9546: 
                   9547:        * plugins/sudoers/toke.h, plugins/sudoers/toke_util.c:
                   9548:        constify
                   9549:        [6e132a4cca61]
                   9550: 
                   9551:        * plugins/sudoers/toke.c, plugins/sudoers/toke.h,
                   9552:        plugins/sudoers/toke.l:
                   9553:        Move fill macro to toke.h
                   9554:        [623d430798cf]
                   9555: 
                   9556:        * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/toke.c,
                   9557:        plugins/sudoers/toke.h, plugins/sudoers/toke.l,
                   9558:        plugins/sudoers/toke_util.c:
                   9559:        Split tokenizer utility functions out into toke_util.c
                   9560:        [89a97bd51618]
                   9561: 
                   9562:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   9563:        plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   9564:        ANSIfy
                   9565:        [ca0eba1dfaa9]
                   9566: 
                   9567: 2011-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9568: 
                   9569:        * MANIFEST:
                   9570:        sync
                   9571:        [a43f94064bb3]
                   9572: 
                   9573:        * plugins/sudoers/Makefile.in:
                   9574:        Add visudo tests to check target
                   9575:        [8c82fb4ed40f]
                   9576: 
                   9577:        * compat/Makefile.in, compat/regress/fnmatch/fnm_test.c,
                   9578:        compat/regress/fnmatch/fnm_test.in, compat/regress/glob/files,
                   9579:        compat/regress/glob/globtest.c, compat/regress/glob/globtest.in:
                   9580:        Add my regress tests for fnmatch() and glob() from OpenBSD.
                   9581:        [6e8c1f211723]
                   9582: 
                   9583:        * plugins/sudoers/regress/testsudoers/test1.sh,
                   9584:        plugins/sudoers/regress/visudo/test1.ok,
                   9585:        plugins/sudoers/regress/visudo/test1.sh:
                   9586:        Add regress test for command tags using visudo -c
                   9587:        [18b0ef207c0f]
                   9588: 
                   9589:        * plugins/sudoers/Makefile.in,
                   9590:        plugins/sudoers/regress/testsudoers/test1.ok,
                   9591:        plugins/sudoers/regress/testsudoers/test1.sh:
                   9592:        Add support for regress tests using testsudoers
                   9593:        [1fa94bd2671b]
                   9594: 
                   9595:        * plugins/sudoers/testsudoers.c:
                   9596:        Need to set user_name explicitly due to internal changes made when
                   9597:        converting sudoers to a plugin.
                   9598:        [1fa54e86a364]
                   9599: 
                   9600: 2011-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9601: 
                   9602:        * MANIFEST, Makefile.in, common/Makefile.in, compat/Makefile.in,
                   9603:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   9604:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   9605:        plugins/sudoers/regress/iolog_path/check_iolog_path.c,
                   9606:        plugins/sudoers/regress/iolog_path/data, src/Makefile.in,
                   9607:        zlib/Makefile.in:
                   9608:        Add regression tests for iolog_path()
                   9609:        [afa4b416e559]
                   9610: 
                   9611:        * Makefile.in, common/Makefile.in, compat/Makefile.in,
                   9612:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   9613:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   9614:        src/Makefile.in, zlib/Makefile.in:
                   9615:        Add support for "make Makefile" to regenerate Makefile from
                   9616:        Makefile.in
                   9617:        [98bd2dda3294]
                   9618: 
                   9619:        * plugins/sudoers/iolog_path.c:
                   9620:        Quiest a bogus compiler warning.
                   9621:        [5ff932a7ad67]
                   9622: 
                   9623: 2011-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9624: 
                   9625:        * plugins/sudoers/iolog_path.c:
                   9626:        Protect call to setlocale() with HAVE_SETLOCALE
                   9627:        [2c29ee3ccc81]
                   9628: 
                   9629: 2011-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9630: 
                   9631:        * MANIFEST:
                   9632:        mkstemps.c was renamed mktemp.c
                   9633:        [ae299c3b1827]
                   9634: 
                   9635:        * NEWS:
                   9636:        Update from 1.7 branch
                   9637:        [20817d79717b]
                   9638: 
                   9639:        * Makefile.in:
                   9640:        Use "mv -f" when regenerating ChangeLog
                   9641:        [c163635206c6]
                   9642: 
                   9643:        * plugins/sudoers/match.c:
                   9644:        Fix NULL dereference with "sudo -g group" when the sudoers rule has
                   9645:        no runas user or group listed. Fixes RedHat bug Bug 667103.
                   9646:        [41a6a1243d9e]
                   9647: 
                   9648: 2011-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9649: 
                   9650:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   9651:        Correct the default sudo.conf example
                   9652:        [4e791698cad1]
                   9653: 
                   9654: 2010-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9655: 
                   9656:        * plugins/sudoers/iolog_path.c:
                   9657:        Reset slashp if we allocate a new buffer for strftime()
                   9658:        [e491daa4203b]
                   9659: 
                   9660:        * plugins/sudoers/iolog_path.c, plugins/sudoers/sudoers.c,
                   9661:        plugins/sudoers/sudoers.h:
                   9662:        Add extra out parameter to expand_iolog_path() to allow the caller
                   9663:        to split the path into dir and file components if needed.
                   9664:        [88346bc5ae39]
                   9665: 
                   9666: 2010-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9667: 
                   9668:        * plugins/sudoers/iolog.c:
                   9669:        mkdir_iopath() returns size_t now that it uses strlcpy() and not
                   9670:        snprintf()
                   9671:        [3c4c64d265eb]
                   9672: 
                   9673:        * plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c:
                   9674:        Trim leading slashes from iolog_file and trailing slashes from
                   9675:        iolog_dir
                   9676:        [a803b51f8948]
                   9677: 
                   9678:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   9679:        plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c,
                   9680:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   9681:        Pass a single I/O log file name in command_details instead of
                   9682:        separate dir + file parameters.
                   9683:        [d672a3e46e80]
                   9684: 
                   9685:        * plugins/sudoers/sudoreplay.c:
                   9686:        change an error() to errorx()
                   9687:        [8013dcfdd69d]
                   9688: 
                   9689:        * plugins/sudoers/iolog.c:
                   9690:        Add missing cwd line to I/O log info file that got dropped when
                   9691:        iolog_deserialize_info() was added
                   9692:        [7cf84f208423]
                   9693: 
                   9694: 2010-12-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9695: 
                   9696:        * plugins/sudoers/iolog.c:
                   9697:        Avoid relying on globals filled in by the sudoers policy module for
                   9698:        the sudoers I/O log module. The I/O log open function now pulls the
                   9699:        bits it needs out of user_info and command_info.
                   9700:        [c02f6951b0cc]
                   9701: 
                   9702:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
                   9703:        plugins/sudoers/sudoers.h:
                   9704:        If no iolog file is specified by the policy plugin, use io_nextid()
                   9705:        to determine the next file in the sequence.
                   9706:        [faa1130b1020]
                   9707: 
                   9708: 2010-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9709: 
                   9710:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   9711:        Document iolog_compress in command_info
                   9712:        [58895c7d12f5]
                   9713: 
                   9714:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
                   9715:        Add support for the iolog_compress variable in command_info.
                   9716:        [36f13a2fd1c1]
                   9717: 
                   9718:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
                   9719:        Add sigsetjmp() calls to all plugin entry points just to be safe.
                   9720:        [3fa482355bc4]
                   9721: 
                   9722:        * src/sudo.c, src/sudo.h:
                   9723:        Don't need iolog variables in struct command_details, they are for
                   9724:        the I/O log plugins to handle.
                   9725:        [5111579ffd9d]
                   9726: 
                   9727: 2010-12-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9728: 
                   9729:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   9730:        Document use of mkdtemp() for iolog path teplates
                   9731:        [5db6101408a9]
                   9732: 
                   9733:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat,
                   9734:        doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat,
                   9735:        doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat,
                   9736:        doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
                   9737:        regen
                   9738:        [1ee11fd6d4eb]
                   9739: 
                   9740:        * doc/sudo_plugin.pod, doc/sudoers.pod:
                   9741:        Document iolog_file and supported escape sequences for sudoers.
                   9742:        Clarify that iolog_file can contain directories.
                   9743:        [da611dedcbdb]
                   9744: 
                   9745:        * compat/Makefile.in, configure, configure.in:
                   9746:        Fix building of mkstemps/mkdtemp replacements.
                   9747:        [793a5e303122]
                   9748: 
                   9749:        * compat/mkstemps.c, compat/mktemp.c, config.h.in, configure,
                   9750:        configure.in, include/missing.h:
                   9751:        Provide mkdtemp() for systems without it.
                   9752:        [b0527dfa965c]
                   9753: 
                   9754:        * plugins/sudoers/iolog_path.c:
                   9755:        Fix typo
                   9756:        [277f6c514cba]
                   9757: 
                   9758:        * plugins/sudoers/iolog.c:
                   9759:        Only use mkdtemp() if the path ends in at least 6 Xs since otherwise
                   9760:        glibc mkdtemp() returns EINVAL.
                   9761:        [2e7323b05579]
                   9762: 
                   9763:        * plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c,
                   9764:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   9765:        plugins/sudoers/defaults.c, plugins/sudoers/iolog.c,
                   9766:        plugins/sudoers/iolog_path.c, plugins/sudoers/plugin_error.c,
                   9767:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   9768:        Allow sudoers to specify the iolog file in addition to the iolog
                   9769:        dir. Add escape sequence support to iolog file and dir: sequence
                   9770:        number, user, group, runas_user, runas_group, hostname and
                   9771:        command in addition to any escape sequence recognized by
                   9772:        strftime(3).
                   9773:        [75cd32ee0435]
                   9774: 
                   9775:        * plugins/sudoers/iolog.c:
                   9776:        Add missing sigsetjmp() call in I/O plugin open function. Fixes a
                   9777:        crash when the I/O plugin calls error(), errorx() or log_error().
                   9778:        [1a6718bd817d]
                   9779: 
                   9780: 2010-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9781: 
                   9782:        * doc/sudo_plugin.pod, plugins/sudoers/iolog.c,
                   9783:        plugins/sudoers/sudoers.c:
                   9784:        Give the policy module fine-grained control over what the I/O plugin
                   9785:        logs.
                   9786:        [d29784fd2a66]
                   9787: 
                   9788:        * common/term.c:
                   9789:        Clear OPOST from c_oflag like we used to. Fixes screen-based
                   9790:        editors such as vi.
                   9791:        [506ad5ae9b4e]
                   9792: 
                   9793:        * doc/sudoers.pod:
                   9794:        Clarify umask option description. From Reuben Thomas.
                   9795:        [1294ac84222b]
                   9796: 
                   9797: 2010-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9798: 
                   9799:        * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   9800:        Pick last match in LDAP sudoers too
                   9801:        [fbfd8e85703b]
                   9802: 
                   9803:        * doc/sudo_plugin.pod:
                   9804:        Document iolog_file, iolog_dir and use_pty
                   9805:        [26120a59c20e]
                   9806: 
                   9807:        * plugins/sample/sample_plugin.c, plugins/sudoers/iolog.c,
                   9808:        plugins/sudoers/sudoers.c:
                   9809:        Adapt plugins to version I/O logging ABI 1.1
                   9810:        [880dd64bc1e8]
                   9811: 
                   9812:        * src/exec.c, src/sudo.h:
                   9813:        Add use_pty command_info flag for policies to indicate that a pty
                   9814:        should be allocated even if no I/O logging is performed.
                   9815:        [e7b167f8a6e5]
                   9816: 
                   9817:        * src/sudo.c:
                   9818:        Add remaining plugin convenience functions
                   9819:        [ffeaf96da031]
                   9820: 
                   9821:        * include/sudo_plugin.h, src/sudo.c, src/sudo.h,
                   9822:        src/sudo_plugin_int.h:
                   9823:        Change I/O log API to pass in command info to the I/O log open
                   9824:        function. Add iolog_file and iolog_dir parameters to command info.
                   9825:        This allows the policy plugin to specify the I/O log pathname. Add
                   9826:        convenience functions for calling plugin functions that handle ABI
                   9827:        backwards compatibility.
                   9828:        [9b81dce76ce5]
                   9829: 
                   9830:        * compat/dlopen.c:
                   9831:        Remove useless cast
                   9832:        [7cecce969739]
                   9833: 
                   9834: 2010-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9835: 
                   9836:        * configure, configure.in:
                   9837:        Bump version to 1.8.0b3
                   9838:        [1dc9f040aae0]
                   9839: 
                   9840: 2010-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9841: 
                   9842:        * configure.in:
                   9843:        Remove extraneous newline
                   9844:        [71c94551eea5]
                   9845: 
                   9846: 2010-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9847: 
                   9848:        * doc/sudoers.pod, plugins/sudoers/def_data.c,
                   9849:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   9850:        plugins/sudoers/defaults.c, plugins/sudoers/iolog.c:
                   9851:        Make I/O log dir configurable.
                   9852:        [99b576667a38]
                   9853: 
                   9854:        * aclocal.m4, configure, configure.in, doc/sudoers.pod:
                   9855:        Rename io_logdir to iolog_dir
                   9856:        [0731662acc8d]
                   9857: 
                   9858: 2010-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9859: 
                   9860:        * pp:
                   9861:        Add missing '*' that prevented the generic ELF case from matching.
                   9862:        [be77ca26bfb2]
                   9863: 
                   9864:        * pp:
                   9865:        If file(1) can't identify the ELF binary type, try readelf(1).
                   9866:        [38a18d32a9e3]
                   9867: 
                   9868: 2010-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9869: 
                   9870:        * plugins/sudoers/auth/kerb4.c, plugins/sudoers/check.c,
                   9871:        plugins/sudoers/env.c, plugins/sudoers/pwutil.c,
                   9872:        plugins/sudoers/sudoers.c, src/sudo.c:
                   9873:        Use %u to print uid/gid, not %lu and adjust casts to match.
                   9874:        [03c43b8749cf]
                   9875: 
                   9876:        * doc/sudoers.ldap.pod:
                   9877:        Clarify ordering of entries and attributes.
                   9878:        [924e2a6bb603]
                   9879: 
                   9880:        * doc/sudoers.ldap.pod:
                   9881:        Fix typo and editing goof.
                   9882:        [79dc7ccd85a8]
                   9883: 
                   9884:        * doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet,
                   9885:        doc/sudoers.ldap.pod:
                   9886:        Merge in ordered LDAP entry support from Andreas Mueller.
                   9887:        [ea5885989bad]
                   9888: 
                   9889:        * plugins/sudoers/ldap.c:
                   9890:        Make sure we don't dereference a NULL handle.
                   9891:        [1a9f9ee15371]
                   9892: 
                   9893: 2010-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9894: 
                   9895:        * pp:
                   9896:        Add support for RHEL 6 file modes that include a trailing dot on
                   9897:        files with an SELinux security context
                   9898:        [dc09be959547]
                   9899: 
                   9900: 2010-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9901: 
                   9902:        * src/sudo.c:
                   9903:        exec_setup() does not need to setuid(0), the Ubuntu issue was in the
                   9904:        sudoers module.
                   9905:        [d6dd99fc6062]
                   9906: 
                   9907:        * plugins/sudoers/sudoers.c:
                   9908:        create_admin_success_flag() should use restore_perms() rather than
                   9909:        set_perms() to restore the uid.
                   9910:        [eba7a91c1f57]
                   9911: 
                   9912:        * src/sudo.c:
                   9913:        In exec_setup() call setuid(0) to make certain the subsequent uid
                   9914:        and gid changes will succeed. Fixes a problem on Ubuntu.
                   9915:        [c5d32abf0645]
                   9916: 
                   9917:        * src/sudo_edit.c:
                   9918:        Error out if we cannot change to root's uid so we catch the failure
                   9919:        early.
                   9920:        [7a2e7f8f2c80]
                   9921: 
                   9922: 2010-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9923: 
                   9924:        * doc/sudoers.pod:
                   9925:        fix typo; from Michael T Hunter
                   9926:        [a574a9d0db5b]
                   9927: 
                   9928:        * plugins/sudoers/match.c:
                   9929:        In sudoedit mode, assume command line arguments are paths and pass
                   9930:        FNM_PATHNAME to fnmatch().
                   9931:        [ce0abff8ce9f]
                   9932: 
                   9933: 2010-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9934: 
                   9935:        * configure, configure.in:
                   9936:        Add workaround for an error in sys/types.h on HP-UX 11.23 when large
                   9937:        file support is enabled. Defining _XOPEN_SOURCE_EXTENDED avoids the
                   9938:        broken bits of the header file.
                   9939:        [e337217f097a]
                   9940: 
                   9941:        * aclocal.m4:
                   9942:        Fix SUDO_MAILDIR usage of AC_LANG_PROGRAM
                   9943:        [fbbcee28961f]
                   9944: 
                   9945:        * sudo.pp:
                   9946:        For Tru64, strip off beta version.
                   9947:        [eeccd762df5e]
                   9948: 
                   9949:        * MANIFEST, plugins/sudoers/testsudoers.c,
                   9950:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h:
                   9951:        Avoid conflicts with system definitions in grp.h and pwd.h
                   9952:        [b219ffe1da09]
                   9953: 
                   9954:        * zlib/gzguts.h:
                   9955:        Include stdio.h after zlib.h, not before. We need the large file
                   9956:        defines to come first.
                   9957:        [21d6df39790f]
                   9958: 
                   9959: 2010-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9960: 
                   9961:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in:
                   9962:        regen
                   9963:        [3ff8750d0aac]
                   9964: 
                   9965:        * Makefile.in:
                   9966:        Don't clean ChangeLog
                   9967:        [ab0d30d289d4]
                   9968: 
                   9969:        * plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
                   9970:        Add prototype for cleanup()
                   9971:        [75626fd3769a]
                   9972: 
                   9973: 2010-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9974: 
                   9975:        * plugins/sudoers/group_plugin.c:
                   9976:        Avoid deferencing group_plugin if it is NULL in
                   9977:        group_plugin_query(). This should not happen.
                   9978:        [4f2933c8da7e]
                   9979: 
                   9980:        * plugins/sudoers/group_plugin.c:
                   9981:        group plugin init function return TRUE when successful
                   9982:        [198024477030]
                   9983: 
                   9984: 2010-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9985: 
                   9986:        * plugins/sudoers/ldap.c:
                   9987:        Enlarge the array of entry wrappers int blocks of 100 entries to
                   9988:        save on allocation time. From Andreas Mueller
                   9989:        [375c916bb03b]
                   9990: 
                   9991:        * plugins/sudoers/ldap.c:
                   9992:        Add back call to sudo_ldap_timefilter() in sudo_ldap_build_pass2()
                   9993:        that was mistakenly dropped.
                   9994:        [1555f5bc132d]
                   9995: 
                   9996: 2010-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   9997: 
                   9998:        * doc/TROUBLESHOOTING:
                   9999:        Mention that sudo needs "ar" to build.
                   10000:        [65582ace2d09]
                   10001: 
                   10002:        * configure, configure.in:
                   10003:        Fail with a more useful error if "ar" is not found.
                   10004:        [d1cb83719c17]
                   10005: 
                   10006: 2010-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10007: 
                   10008:        * plugins/sudoers/ldap.c:
                   10009:        Merge in ordered LDAP entry support from Andreas Mueller and add
                   10010:        local changes from the 1.7 branch.
                   10011:        [bca29e461618]
                   10012: 
                   10013: 2010-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10014: 
                   10015:        * doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet,
                   10016:        doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   10017:        Add timed entry support from Andreas Mueller.
                   10018:        [e18d1df46a8d]
                   10019: 
                   10020:        * plugins/sudoers/group_plugin.c:
                   10021:        Don't try to unload if group_plugin is NULL. Don't call dlclose() if
                   10022:        group_handle is NULL
                   10023:        [de2273da37d5]
                   10024: 
                   10025:        * plugins/sudoers/sudoers.h:
                   10026:        It is now plugin_cleanup(), not cleanup()
                   10027:        [da62a4e1a78c]
                   10028: 
                   10029:        * plugins/sudoers/logging.c, plugins/sudoers/sudoers.c:
                   10030:        Call plugin_cleanup(), not cleanup()
                   10031:        [e800ad8b33ad]
                   10032: 
                   10033: 2010-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10034: 
                   10035:        * plugins/sudoers/ldap.c:
                   10036:        Use efree() not free() and remove malloc.h include since we never
                   10037:        directly call malloc() or free().
                   10038:        [107fffd134bb]
                   10039: 
                   10040: 2010-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10041: 
                   10042:        * sudo.pp:
                   10043:        set PSTAMP for Solaris and move the backend-specific bits to their
                   10044:        own %if [xxx] %endif blocks in %set.
                   10045:        [a94ebe8920c1]
                   10046: 
                   10047:        * pp:
                   10048:        sync with git repo
                   10049:        [75ff509696b4]
                   10050: 
                   10051:        * configure, configure.in:
                   10052:        Only substitute file zlib files when using the builtin zlib
                   10053:        [6c8145b2deb4]
                   10054: 
                   10055:        * common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in,
                   10056:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   10057:        src/Makefile.in, zlib/Makefile.in:
                   10058:        Give up on using VPATH to find sources as it is implemented
                   10059:        inconsistenly in different versions of make.
                   10060:        [60517c69aaee]
                   10061: 
                   10062:        * plugins/sudoers/Makefile.in, plugins/sudoers/getdate.c,
                   10063:        plugins/sudoers/gram.c, plugins/sudoers/toke.c:
                   10064:        Include config.h before any other includes to make sure we get the
                   10065:        right value for _FILE_OFFSET_BITS.
                   10066:        [8fb007ca832e]
                   10067: 
                   10068:        * MANIFEST:
                   10069:        Add zlib
                   10070:        [04a3e23dfaa9]
                   10071: 
                   10072:        * zlib/Makefile.in:
                   10073:        Add missing targets
                   10074:        [40e45a177168]
                   10075: 
                   10076:        * src/Makefile.in:
                   10077:        g/c unused $(GENERATED)
                   10078:        [c8758068c1bc]
                   10079: 
                   10080: 2010-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10081: 
                   10082:        * plugins/sudoers/group_plugin.c:
                   10083:        Zero out group_plugin on unload just to be safe.
                   10084:        [0b10f4d101ca]
                   10085: 
                   10086:        * plugins/sudoers/group_plugin.c:
                   10087:        Unload group plugin if its init function fails.
                   10088:        [6552cdac4b7c]
                   10089: 
                   10090:        * src/sudo.c:
                   10091:        Only chdir to cwd if it is different from the current cwd or there
                   10092:        is a new root (chroot).
                   10093:        [b8203e875e84]
                   10094: 
                   10095:        * configure, configure.in, doc/sudo.cat, doc/sudo.man.in,
                   10096:        doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.ldap.cat,
                   10097:        doc/sudoers.ldap.man.in, doc/visudo.cat, doc/visudo.man.in:
                   10098:        Bump version to 1.8.0b2
                   10099:        [6dadeb75a878]
                   10100: 
                   10101: 2010-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10102: 
                   10103:        * INSTALL:
                   10104:        Better --enable-zlib description
                   10105:        [e0da54fa59a6]
                   10106: 
                   10107:        * mkpkg:
                   10108:        Use system zlib on Linux Let configure decide on Solaris For all
                   10109:        others, use builtin zlib
                   10110:        [3d52eddb523c]
                   10111: 
                   10112:        * zlib/zconf.h.in:
                   10113:        Add large file support.
                   10114:        [bec01215270d]
                   10115: 
                   10116:        * config.h.in:
                   10117:        Add large file support.
                   10118:        [244e95b034ec]
                   10119: 
                   10120:        * Makefile.in, configure, configure.in, doc/LICENSE, doc/license.pod,
                   10121:        zlib/Makefile.in, zlib/adler32.c, zlib/compress.c, zlib/crc32.c,
                   10122:        zlib/crc32.h, zlib/deflate.c, zlib/deflate.h, zlib/gzclose.c,
                   10123:        zlib/gzguts.h, zlib/gzlib.c, zlib/gzread.c, zlib/gzwrite.c,
                   10124:        zlib/infback.c, zlib/inffast.c, zlib/inffast.h, zlib/inffixed.h,
                   10125:        zlib/inflate.c, zlib/inflate.h, zlib/inftrees.c, zlib/inftrees.h,
                   10126:        zlib/trees.c, zlib/trees.h, zlib/uncompr.c, zlib/zconf.h.in,
                   10127:        zlib/zlib.h, zlib/zutil.c, zlib/zutil.h:
                   10128:        Add local copy of zlib for systems that lack it.
                   10129:        [7542ca465c5a]
                   10130: 
                   10131: 2010-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10132: 
                   10133:        * src/exec.c:
                   10134:        If perform_io() fails, kill the child before exiting so it doesn't
                   10135:        complain about connection reset. We can get an I/O error if, for
                   10136:        example, and we get EIO reading from stdin.
                   10137:        [e59a05fa729f]
                   10138: 
                   10139: 2010-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10140: 
                   10141:        * plugins/sudoers/sudoers.c, src/sudo.c:
                   10142:        Fix complilation on systems with set_auth_parameters() Sprinkle
                   10143:        volatile to quiet warnings from gcc 2.8.0
                   10144:        [a34c2b924ba7]
                   10145: 
                   10146:        * compat/dlfcn.h, compat/dlopen.c:
                   10147:        Avoid potential namespace issues with dlopen() emulation.
                   10148:        [aedfababd6ca]
                   10149: 
                   10150:        * MANIFEST:
                   10151:        sync
                   10152:        [6afb97e6d308]
                   10153: 
                   10154:        * plugins/sudoers/interfaces.c:
                   10155:        Use INADDR_NONE instead of casting -1 to in_addr_t (which may not
                   10156:        exist).
                   10157:        [ddfca5af1a36]
                   10158: 
                   10159:        * Makefile.in:
                   10160:        Mark ChangeLog as PHONY Don't overwrite ChangeLog if we can't run hg
                   10161:        [e9d04bfa4505]
                   10162: 
                   10163:        * configure, configure.in:
                   10164:        HP-UX 10.20 libc has an incompatible getline
                   10165:        [2e7bc202e78d]
                   10166: 
                   10167:        * plugins/sudoers/visudo.c:
                   10168:        Quiet an HP-UX compiler warning.
                   10169:        [55b9d587ac8c]
                   10170: 
                   10171:        * configure, configure.in:
                   10172:        Check for vi even with --with-editor specified; the sample plugin
                   10173:        needs it.
                   10174:        [94dfc3643f76]
                   10175: 
                   10176: 2010-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10177: 
                   10178:        * compat/dlopen.c:
                   10179:        Fix remaining syntax errors.
                   10180:        [9d729b5b577e]
                   10181: 
                   10182:        * src/Makefile.in:
                   10183:        sudo binary depends on the libtool-generated libs
                   10184:        [9e6148406adb]
                   10185: 
                   10186:        * plugins/sudoers/group_plugin.c, src/load_plugins.c:
                   10187:        Use HAVE_DLOPEN instead of HAVE_DLFCN_H when determining whether to
                   10188:        include the local or system dlfcn.h
                   10189:        [68cfe4c1089b]
                   10190: 
                   10191:        * pp:
                   10192:        Don't use run_as_superuser=false on HP-UX
                   10193:        [532242370b09]
                   10194: 
                   10195:        * src/net_ifs.c:
                   10196:        Use memset() instead of zero_bytes() since we don't include
                   10197:        sudoers.h
                   10198:        [a187c18c2472]
                   10199: 
                   10200:        * plugins/sudoers/interfaces.c:
                   10201:        Fix pasto; AF_INET not AF_INET6
                   10202:        [2d2e9d7dc6f9]
                   10203: 
                   10204:        * compat/dlopen.c:
                   10205:        Actually call shl_load()
                   10206:        [ed8153b8a3cd]
                   10207: 
                   10208:        * pp:
                   10209:        Update from git repo. Debian: version numbers now compliant with
                   10210:        policy section 5.6.12 HP-UX: minimal changes needed to work on HP-UX
                   10211:        10.20
                   10212:        [ecf2692bceeb]
                   10213: 
                   10214:        * configure, configure.in:
                   10215:        Fix dlopen() detection for systems where dlopen() is in a separate
                   10216:        library.
                   10217:        [fa6b175582b6]
                   10218: 
                   10219:        * plugins/sudoers/auth/pam.c:
                   10220:        If pam_acct_mgmt() returns PAM_AUTH_ERR print a (hopefully) more
                   10221:        useful message and return AUTH_FATAL so sudo does not keep trying to
                   10222:        validate the user.
                   10223:        [1be8857e5291]
                   10224: 
                   10225:        * src/preload.c:
                   10226:        sudo_preload_table is an array
                   10227:        [b7704e72a9da]
                   10228: 
                   10229:        * compat/dlopen.c:
                   10230:        Quiet a compiler warning and fix sudo_preload_table external
                   10231:        definition.
                   10232:        [8234987664cc]
                   10233: 
                   10234:        * compat/dlfcn.h:
                   10235:        Fix multiple inclusion guard in dlfcn.h and fix dlerror() prototype.
                   10236:        [8bab6a4053cc]
                   10237: 
                   10238:        * plugins/sudoers/group_plugin.c:
                   10239:        Make this compile correctly when no dlopen is available.
                   10240:        [57643879bd2b]
                   10241: 
                   10242: 2010-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10243: 
                   10244:        * plugins/sudoers/check.c:
                   10245:        Having a timestamp file defined is no longer indicative of tty
                   10246:        tickets being enabled. Check def_tty_tickets directly.
                   10247:        [efcc11ad157f]
                   10248: 
                   10249:        * src/exec_pty.c, src/sudo.h, src/ttysize.c:
                   10250:        Fix TCGETWINSZ compat.
                   10251:        [da3a8b17cf7a]
                   10252: 
                   10253: 2010-10-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10254: 
                   10255:        * src/exec_pty.c, src/ttysize.c:
                   10256:        Prefer newer TIOCGWINSZ ioctl to old TIOCGSIZE
                   10257:        [926492dd10a6]
                   10258: 
                   10259: 2010-10-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10260: 
                   10261:        * plugins/sudoers/sudoers.c, src/sudo.c:
                   10262:        Move set_project() from sudoers module into sudo proper.
                   10263:        [beabafac03b4]
                   10264: 
                   10265:        * configure, configure.in:
                   10266:        Fix typo and regenerate
                   10267:        [4a3caf4234f3]
                   10268: 
                   10269:        * plugins/sudoers/ldap.c:
                   10270:        When iterating over returned LDAP entries, keep looking at remaining
                   10271:        matches even if we have a positive match. This catches negative
                   10272:        matches that may exist in other entries and more closely match the
                   10273:        sudoers file behavior.
                   10274:        [f47db6e609b0]
                   10275: 
                   10276:        * pp:
                   10277:        Add support for multiple package instances on Solaris.
                   10278:        [7f2a8b942545]
                   10279: 
                   10280:        * src/exec.c:
                   10281:        Add missing signal_pipe[0] to fdsr for the non-pty case.
                   10282:        [79d01e11b19c]
                   10283: 
                   10284:        * mkpkg:
                   10285:        Add --with-project for Solaris
                   10286:        [ffa4c2bb93f7]
                   10287: 
                   10288:        * README:
                   10289:        Need ar and ranlib too
                   10290:        [5c2f679172ef]
                   10291: 
                   10292: 2010-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10293: 
                   10294:        * plugins/sudoers/env.c:
                   10295:        Preserve ODMDIR environment variable by default on AIX.
                   10296:        [bd47cb1e804f]
                   10297: 
                   10298: 2010-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10299: 
                   10300:        * Makefile.in, compat/Makefile.in, compat/dlfcn.h, compat/dlopen.c,
                   10301:        config.h.in, configure, configure.in, plugins/sample/Makefile.in,
                   10302:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   10303:        plugins/sudoers/group_plugin.c, plugins/sudoers/plugin_error.c,
                   10304:        plugins/sudoers/sudoers.c, src/Makefile.in, src/load_plugins.c,
                   10305:        src/preload.c:
                   10306:        Add dlopen() emulation for systems without it. For HP-UX 10, emulate
                   10307:        using shl_load(). For others, link sudoers plugin statically and use
                   10308:        a lookup table to emulate dlsym().
                   10309:        [e92edfb3c642]
                   10310: 
                   10311: 2010-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10312: 
                   10313:        * compat/fnmatch.c, compat/glob.c, compat/mksiglist.c,
                   10314:        compat/nanosleep.c, compat/utimes.c:
                   10315:        When including compat headers, use the compat dir as part of the
                   10316:        path so we are sure to get the correct header.
                   10317:        [6c2a45da6af5]
                   10318: 
                   10319: 2010-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10320: 
                   10321:        * plugins/sudoers/linux_audit.c:
                   10322:        Ignore ECONNREFUSED from audit_log_user_command() which will occur
                   10323:        if auditd is not running.
                   10324:        [d314fe4c8d03]
                   10325: 
                   10326: 2010-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10327: 
                   10328:        * pp:
                   10329:        Sync with git version
                   10330:        [1c0357744222]
                   10331: 
                   10332: 2010-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10333: 
                   10334:        * common/fileops.c, plugins/sudoers/defaults.c:
                   10335:        Cast isblank argument to unsigned char.
                   10336:        [c822dbb3ca54]
                   10337: 
                   10338: 2010-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10339: 
                   10340:        * INSTALL, config.h.in, configure, configure.in, doc/sudoers.cat,
                   10341:        doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c:
                   10342:        Implement --with-umask-override configure flag.
                   10343:        [863e3047df22]
                   10344: 
                   10345:        * plugins/sudoers/env.c:
                   10346:        Take MODE_LOGIN_SHELL into account when initially setting reset_home
                   10347:        instead of special-casing it later.
                   10348:        [5d6b16480fd6]
                   10349: 
                   10350:        * plugins/sudoers/sudoers.c:
                   10351:        In login mode, make a copy of the runas user's pw_shell for
                   10352:        NewArgv[0] because 1) we modify it and 2) it will runas_pw gets
                   10353:        freed before exec.
                   10354:        [1d1ccb568dfa]
                   10355: 
                   10356:        * plugins/sudoers/env.c:
                   10357:        Reset HOME for "sudo -i" even if HOME was listed in env_keep.
                   10358:        [c1c1c65a2d63]
                   10359: 
                   10360:        * src/sudo.c:
                   10361:        Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK.
                   10362:        [7443454e5f88]
                   10363: 
                   10364:        * src/sudo.c:
                   10365:        Reset signal mask at sudo startup time; we need to be able to rely
                   10366:        on normal signal delivery to control the child process.
                   10367:        [95800163ff94]
                   10368: 
                   10369: 2010-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10370: 
                   10371:        * install-sh:
                   10372:        Use sed instead of expr to split a flag from its argument. Fixes a
                   10373:        problem with expr interpreting its arguments as a flag when they
                   10374:        start with a dash.
                   10375:        [736065e14301]
                   10376: 
                   10377:        * common/lbuf.c:
                   10378:        Do not need sys/time.h after all
                   10379:        [91f6f668ccda]
                   10380: 
                   10381:        * common/lbuf.c:
                   10382:        Include sys/time.h for utimes() and struct timeval. No longer need
                   10383:        ioctl.h or termios.h
                   10384:        [2d75273d3213]
                   10385: 
                   10386:        * compat/snprintf.c:
                   10387:        Quiet bogus compiler warnings.
                   10388:        [fe252e1968f5]
                   10389: 
                   10390:        * include/missing.h:
                   10391:        Declare innetgr() for HP-UX which is missing a declaration. Declare
                   10392:        domainname() for HP-UX and Solaris which are missing a declaration.
                   10393:        [b37c50751138]
                   10394: 
                   10395:        * plugins/sudoers/bsm_audit.c:
                   10396:        Use __sun for consistency with the rest of the sources.
                   10397:        [6b086b61ccb6]
                   10398: 
                   10399:        * plugins/sudoers/group_plugin.c:
                   10400:        Quiet a bogus compiler warning.
                   10401:        [ebc069842c4a]
                   10402: 
                   10403:        * plugins/sudoers/pwutil.c:
                   10404:        Don't try to delref a NULL group.
                   10405:        [f6ff0838be21]
                   10406: 
                   10407:        * common/alloc.c, common/lbuf.c:
                   10408:        Include memory.h on systems that need it.
                   10409:        [4e676da81c6f]
                   10410: 
                   10411: 2010-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10412: 
                   10413:        * src/exec.c:
                   10414:        Quiet gcc warnings on glibc systems that use warn_unused_result for
                   10415:        write(2).
                   10416:        [0532da0b7cf7]
                   10417: 
                   10418:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   10419:        sudo_plugin is in section 8; from Ted Percival
                   10420:        [b4506a0de87e]
                   10421: 
                   10422:        * plugins/sudoers/Makefile.in:
                   10423:        testsudoers depends on libsudoers.la, not sudoreplay
                   10424:        [cdb1cc3bf06a]
                   10425: 
                   10426: 2010-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10427: 
                   10428:        * src/exec.c:
                   10429:        Read as many signals on the signal pipe as we can before returning.
                   10430:        [b181671da047]
                   10431: 
                   10432:        * src/exec.c, src/exec_pty.c, src/sudo_exec.h:
                   10433:        Instead of using a array to store received signals, open a pipe and
                   10434:        have the signal handler write the signal number to one end and
                   10435:        select() on the other end. This makes it possible to handle signals
                   10436:        similar to I/O without race conditions.
                   10437:        [ee84d65c16b6]
                   10438: 
                   10439: 2010-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10440: 
                   10441:        * doc/visudo.pod, plugins/sudoers/visudo.c:
                   10442:        Make "visudo -c -f -" check the standard input.
                   10443:        [195a3d2a9a26]
                   10444: 
                   10445:        * doc/sudoers.pod:
                   10446:        set_home and always_set_home have an effect if HOME is present in
                   10447:        the env_keep list.
                   10448:        [159d0b9dc5c8]
                   10449: 
                   10450:        * plugins/sudoers/env.c:
                   10451:        Make -H flag work when HOME is listed in env_keep. Also makes
                   10452:        "set_home" and "always_set_home" override override HOME in env_keep.
                   10453:        [a3e5b966193f]
                   10454: 
                   10455: 2010-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10456: 
                   10457:        * plugins/sudoers/Makefile.in, plugins/sudoers/interfaces.c,
                   10458:        plugins/sudoers/interfaces.h, plugins/sudoers/match.c,
                   10459:        plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c,
                   10460:        plugins/sudoers/visudo.c, src/net_ifs.c:
                   10461:        Convert sudoers plugin to use interface list passed in settings.
                   10462:        [87d9b5f4f586]
                   10463: 
                   10464:        * doc/sudo_plugin.pod, src/Makefile.in, src/net_ifs.c,
                   10465:        src/parse_args.c, src/sudo.h:
                   10466:        Query local network interfaces in the main sudo driver and pass to
                   10467:        the plugin as "network_addrs" in the settings list.
                   10468:        [7f35bcfe77a7]
                   10469: 
                   10470:        * plugins/sudoers/bsm_audit.c:
                   10471:        Solaris BSM audit return EINVAL when auditing is not enabled,
                   10472:        whereas OpenBSM returns ENOSYS.
                   10473:        [411b980ec58b]
                   10474: 
                   10475: 2010-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10476: 
                   10477:        * compat/fnmatch.c:
                   10478:        missing.h should come before most local includes
                   10479:        [53921a7b8b5b]
                   10480: 
                   10481:        * plugins/sudoers/sudoreplay.c:
                   10482:        missing.h should come before most local includes
                   10483:        [e9abb0db1aac]
                   10484: 
                   10485:        * plugins/sudoers/sudoers.h:
                   10486:        Make local includes consistent; use double quotes for local includes
                   10487:        except for generated ones where we use angle brackets.
                   10488:        [09de4faa9547]
                   10489: 
                   10490:        * plugins/sudoers/sudoers.c:
                   10491:        Always fill in NewArgv for audit code.
                   10492:        [7c3aca60519f]
                   10493: 
                   10494:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   10495:        Add missing LOG_INPUT/LOG_OUTPUT support in the lexer.
                   10496:        [007cf6560f92]
                   10497: 
                   10498:        * common/alloc.c, common/atobool.c, common/fileops.c,
                   10499:        common/fmt_string.c, common/lbuf.c, common/list.c, common/term.c,
                   10500:        common/zero_bytes.c, compat/closefrom.c, compat/fnmatch.c,
                   10501:        compat/getcwd.c, compat/getgrouplist.c, compat/getline.c,
                   10502:        compat/getprogname.c, compat/glob.c, compat/isblank.c,
                   10503:        compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c,
                   10504:        compat/nanosleep.c, compat/setenv.c, compat/snprintf.c,
                   10505:        compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
                   10506:        compat/unsetenv.c, compat/utimes.c, include/compat.h,
                   10507:        plugins/sample/sample_plugin.c, plugins/sample_group/getgrent.c,
                   10508:        plugins/sample_group/plugin_test.c,
                   10509:        plugins/sample_group/sample_group.c, plugins/sudoers/audit.c,
                   10510:        plugins/sudoers/auth/afs.c, plugins/sudoers/boottime.c,
                   10511:        plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
                   10512:        plugins/sudoers/linux_audit.c, plugins/sudoers/match.c,
                   10513:        plugins/sudoers/plugin_error.c, plugins/sudoers/sudoreplay.c,
                   10514:        plugins/sudoers/timestr.c, src/error.c, src/sesh.c, src/sudo.h,
                   10515:        src/sudo_noexec.c, src/ttysize.c:
                   10516:        Make local includes consistent; use double quotes for local includes
                   10517:        except for generated ones where we use angle brackets. Also g/c
                   10518:        unused compat.h.
                   10519:        [e57070dc8f04]
                   10520: 
                   10521: 2010-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10522: 
                   10523:        * plugins/sudoers/match.c:
                   10524:        When matching the runas user and runas group (-u and -g command line
                   10525:        options), keep track of runas group and runas user matches
                   10526:        separately. Only return a positive match if we have a match for
                   10527:        both runas user and runas group (if specified).
                   10528:        [815219e04cc8]
                   10529: 
                   10530: 2010-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10531: 
                   10532:        * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   10533:        Add support for multiple URI lines by joining the contents and
                   10534:        passing the result to ldap_initialize.
                   10535:        [a47cae3b72e8]
                   10536: 
                   10537:        * plugins/sudoers/ldap.c, plugins/sudoers/parse.c:
                   10538:        Do not return -1 on error from the display functions; the caller
                   10539:        expects a return value >= 0.
                   10540:        [101456a7dd00]
                   10541: 
                   10542:        * plugins/sudoers/sudoers.c:
                   10543:        Do not set both MODE_EDIT and MODE_RUN
                   10544:        [8faa36694d54]
                   10545: 
                   10546: 2010-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10547: 
                   10548:        * include/missing.h:
                   10549:        Move includes to the top of the file.
                   10550:        [a51436798e8c]
                   10551: 
                   10552: 2010-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10553: 
                   10554:        * plugins/sudoers/Makefile.in:
                   10555:        Add missing definition of timedir
                   10556:        [458a749c2c5e]
                   10557: 
                   10558:        * compat/fnmatch.c, compat/getprogname.c, compat/isblank.c,
                   10559:        compat/mksiglist.c, compat/strsignal.c,
                   10560:        plugins/sudoers/plugin_error.c, src/error.c, src/sudo_noexec.c:
                   10561:        Add #include of sys/types.h for .c files that include missing.h to
                   10562:        be sure that size_t and ssize_t are defined.
                   10563:        [08e3132dbf4f]
                   10564: 
                   10565:        * plugins/sudoers/Makefile.in:
                   10566:        Install sudoers file from the build dir not hte src dir.
                   10567:        [ca89e962dbf4]
                   10568: 
                   10569: 2010-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10570: 
                   10571:        * plugins/sudoers/set_perms.c:
                   10572:        If runas_pw changes, reset the stashed runas aux group vector.
                   10573:        Otherwise, if runas_default is set in a per-command Defaults
                   10574:        statement, the command runs with root's aux group vector (i.e. the
                   10575:        one that was used when locating the command).
                   10576:        [24f9107cedd2]
                   10577: 
                   10578:        * plugins/sudoers/Makefile.in:
                   10579:        Add target to generate sudoers file Remove generated sudoers file as
                   10580:        part of distclean
                   10581:        [fb7422e90f03]
                   10582: 
                   10583: 2010-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10584: 
                   10585:        * src/exec.c:
                   10586:        When not logging I/O install a handler for SIGCONT and deliver it to
                   10587:        the command upon resume. Fixes bugzilla #431
                   10588:        [495dce52a5aa]
                   10589: 
                   10590: 2010-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10591: 
                   10592:        * plugins/sudoers/sudoers.h:
                   10593:        g/c unused auth_pw extern definition
                   10594:        [40eb7477ba17]
                   10595: 
                   10596:        * plugins/sudoers/check.c, plugins/sudoers/sudoers.c:
                   10597:        Move get_auth() into check.c where it is actually used.
                   10598:        [e31db0ce3a61]
                   10599: 
                   10600: 2010-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10601: 
                   10602:        * common/lbuf.c:
                   10603:        Convert a remaining puts() and putchar() to use the output function.
                   10604:        [d69e363a506b]
                   10605: 
                   10606:        * plugins/sudoers/plugin_error.c:
                   10607:        Plug memory leak
                   10608:        [68895469ea8d]
                   10609: 
                   10610: 2010-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10611: 
                   10612:        * plugins/sudoers/env.c:
                   10613:        Set dupcheck to TRUE when setting new HOME value if !env_reset but
                   10614:        always_set_home is true. Prevents a duplicate HOME in the
                   10615:        environment (old value plus the new one) introduced in f421f8827340.
                   10616:        [9ca19183794f]
                   10617: 
                   10618:        * configure, configure.in, plugins/sudoers/sudoers,
                   10619:        plugins/sudoers/sudoers.in:
                   10620:        Substitute sysconfdir in the installed sudoers file to get the
                   10621:        correct path for sudoers.d.
                   10622:        [86072b6cd55d]
                   10623: 
                   10624: 2010-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10625: 
                   10626:        * src/get_pty.c:
                   10627:        Fix typo that prevented compilation on Irix; Friedrich Haubensak
                   10628:        [b48be51b65fc]
                   10629: 
                   10630: 2010-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10631: 
                   10632:        * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
                   10633:        common/atobool.c, common/fileops.c, common/fmt_string.c,
                   10634:        common/lbuf.c, common/list.c, common/term.c, common/zero_bytes.c,
                   10635:        compat/Makefile.in, compat/closefrom.c, compat/fnmatch.c,
                   10636:        compat/getcwd.c, compat/getgrouplist.c, compat/getline.c,
                   10637:        compat/getprogname.c, compat/glob.c, compat/isblank.c,
                   10638:        compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c,
                   10639:        compat/nanosleep.c, compat/setenv.c, compat/snprintf.c,
                   10640:        compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c,
                   10641:        compat/unsetenv.c, compat/utimes.c, include/compat.h,
                   10642:        include/missing.h, plugins/sample/sample_plugin.c,
                   10643:        plugins/sample_group/getgrent.c,
                   10644:        plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in,
                   10645:        plugins/sudoers/audit.c, plugins/sudoers/boottime.c,
                   10646:        plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
                   10647:        plugins/sudoers/linux_audit.c, plugins/sudoers/plugin_error.c,
                   10648:        plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
                   10649:        plugins/sudoers/timestr.c, src/Makefile.in, src/error.c, src/sesh.c,
                   10650:        src/sudo.h, src/sudo_noexec.c, src/ttysize.c:
                   10651:        Merge compat.h and missing.h into missing.h
                   10652:        [572909ae9716]
                   10653: 
                   10654: 2010-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10655: 
                   10656:        * plugins/sudoers/auth/pam.c:
                   10657:        If the user hits ^C while a password is being read, error out before
                   10658:        reading any further passwords in the pam conversation function.
                   10659:        Otherwise, if multiple PAM auth methods are required, the user will
                   10660:        have to hit ^C for each one.
                   10661:        [23782631748c]
                   10662: 
                   10663: 2010-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10664: 
                   10665:        * plugins/sudoers/check.c:
                   10666:        Update comment
                   10667:        [a5296cb3a20a]
                   10668: 
                   10669:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   10670:        Document sudo_conv_t function and sudo_printf_t return values.
                   10671:        [745c0017814c]
                   10672: 
                   10673:        * src/conversation.c:
                   10674:        Make _sudo_printf return the number of characters printed on success
                   10675:        like printf(3).
                   10676:        [8eeefe8d7e77]
                   10677: 
                   10678: 2010-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10679: 
                   10680:        * plugins/sudoers/sudoers.c:
                   10681:        sudoers.h includes sudo_plugin.h for us
                   10682:        [cabe68e07807]
                   10683: 
                   10684:        * common/Makefile.in, common/gettime.c, compat/mkstemps.c,
                   10685:        plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/sudo.h,
                   10686:        src/sudo_edit.c:
                   10687:        Use gettimeofday() directly instead of via the gettime() wrapper.
                   10688:        [7490426c99ae]
                   10689: 
                   10690:        * common/gettime.c, compat/snprintf.c, compat/strcasecmp.c,
                   10691:        compat/strerror.c, config.h.in, configure, configure.in,
                   10692:        include/compat.h, include/missing.h, plugins/sudoers/logging.c,
                   10693:        plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c, src/sudo.c:
                   10694:        Remove some obsolete configure tests, ancient Unix systems are no
                   10695:        longer supported.
                   10696:        [2be6218c3a36]
                   10697: 
                   10698: 2010-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10699: 
                   10700:        * sudo.pp:
                   10701:        Set pp_kit_version and strip off patch level
                   10702:        [aacfda1b676d]
                   10703: 
                   10704:        * sudo.pp:
                   10705:        Better handling of versions with a patchlevel. For rpm and deb, use
                   10706:        the patchlevel+1 as the release. For AIX, use the patchlevel as the
                   10707:        4th version number. For the rest, just leave the patchlevel in the
                   10708:        version string.
                   10709:        [638bd35f2346]
                   10710: 
                   10711: 2010-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10712: 
                   10713:        * plugins/sudoers/auth/sudo_auth.c:
                   10714:        For non-standalone auth methods, stop reading the password if the
                   10715:        user enters ^C at the prompt.
                   10716:        [82c2911bb264]
                   10717: 
                   10718:        * configure, configure.in, plugins/sudoers/Makefile.in,
                   10719:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c,
                   10720:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
                   10721:        plugins/sudoers/pwutil.c:
                   10722:        No need to look up shadow password unless we are doing password-
                   10723:        style authentication. This moves the shadow password lookup to the
                   10724:        auth functions that need it.
                   10725:        [ba9e3eba2b72]
                   10726: 
                   10727:        * plugins/sudoers/sudoers.c:
                   10728:        Retain final passwd/group refs until the policy close() function.
                   10729:        Note that this doesn't get called in all cases so putting this in a
                   10730:        cleanup function is probably better.
                   10731:        [bbe214cb4119]
                   10732: 
                   10733:        * plugins/sudoers/check.c:
                   10734:        Fix mismerge
                   10735:        [395115f89dd6]
                   10736: 
                   10737:        * plugins/sudoers/check.c:
                   10738:        When removing/resetting the timestamp file ignore the tty ticket
                   10739:        contents.
                   10740:        [b709f5667a0b]
                   10741: 
                   10742:        * plugins/sudoers/sudoers.c:
                   10743:        delref sudo_user.pw, runas_pw and runas_gr immediately before we
                   10744:        return.
                   10745:        [4d67d15dfd3b]
                   10746: 
                   10747: 2010-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10748: 
                   10749:        * plugins/sudoers/check.c, plugins/sudoers/ldap.c,
                   10750:        plugins/sudoers/match.c, plugins/sudoers/pwutil.c,
                   10751:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   10752:        Reference count cached passwd and group structs. The cache holds
                   10753:        one reference itself and another is added by sudo_getgr{gid,nam} and
                   10754:        sudo_getpw{uid,nam}. The final ref on the runas and user passwd and
                   10755:        group structs are persistent for now.
                   10756:        [e544685523c3]
                   10757: 
                   10758:        * doc/UPGRADE:
                   10759:        fix typo
                   10760:        [e32f2d35e6c9]
                   10761: 
                   10762: 2010-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10763: 
                   10764:        * plugins/sudoers/check.c:
                   10765:        Do not produce a warning for "sudo -k" if the ticket file does not
                   10766:        exist.
                   10767:        [1598f6061b75]
                   10768: 
                   10769:        * plugins/sudoers/pwutil.c:
                   10770:        Instead of caching struct passwd and struct group in the red-black
                   10771:        tree, store a struct cache_item which includes both the key and
                   10772:        datum. This allows us to user the actual name that was looked up as
                   10773:        the key instead of the contents of struct passwd or struct group.
                   10774:        This matters because the name in the database may not match what we
                   10775:        looked up, due either to case folding or truncation (historically at
                   10776:        8 characters). Also mark the disabled calls to sudo_freepwcache()
                   10777:        and sudo_freegrcache() as broken since we use cached data for things
                   10778:        like set_perms() and the logging functions. Fixing this would
                   10779:        require making a copy of the structs for user and runas or adding a
                   10780:        reference count (better).
                   10781:        [225d4a22f60e]
                   10782: 
                   10783:        * plugins/sudoers/Makefile.in:
                   10784:        Fix path to mkinstalldirs
                   10785:        [b4968379b12d]
                   10786: 
                   10787:        * plugins/sudoers/check.c, plugins/sudoers/logging.c,
                   10788:        plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c,
                   10789:        src/exec_pty.c, src/get_pty.c, src/tgetpass.c:
                   10790:        Quiet gcc warnings on glibc systems that use warn_unused_result for
                   10791:        write(2) and others.
                   10792:        [c99f138960e0]
                   10793: 
                   10794: 2010-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10795: 
                   10796:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   10797:        Add %option noinput
                   10798:        [72b9cd49b4f1]
                   10799: 
                   10800:        * aclocal.m4, configure, configure.in:
                   10801:        Add cross-compile defaults for remaining AC_TRY_RUN usage. Also add
                   10802:        back getgroups() check since AC_FUNC_GETGROUPS defaults to "no" when
                   10803:        cross-compiling.
                   10804:        [e385c176d0ee]
                   10805: 
                   10806: 2010-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10807: 
                   10808:        * aclocal.m4, compat/snprintf.c, config.h.in, configure, configure.in:
                   10809:        Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN Use AC_TYPE_LONG_LONG_INT
                   10810:        and AC_CHECK_SIZEOF([long int]) instead of rolling our own.
                   10811:        [cf3e60d9c440]
                   10812: 
                   10813: 2010-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10814: 
                   10815:        * pp:
                   10816:        Update to latest version
                   10817:        [32f93be33961]
                   10818: 
                   10819: 2010-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10820: 
                   10821:        * sudo.pp:
                   10822:        Let pp determine pp_aix_version itself.
                   10823:        [7cf0245d84ed]
                   10824: 
                   10825:        * INSTALL, config.h.in, configure, configure.in, mkpkg,
                   10826:        plugins/sudoers/sudoers.c:
                   10827:        Add support for Ubuntu admin flag file and enable it when building
                   10828:        Ubuntu packages.
                   10829:        [00e27cff2dfb]
                   10830: 
                   10831:        * plugins/sudoers/sudoers, sudo.pp:
                   10832:        Add commented out SuSE-like targetpw settings
                   10833:        [4605d47b7413]
                   10834: 
                   10835:        * configure, configure.in:
                   10836:        Only try to use +DAportable for non-GCC on hppa
                   10837:        [75d0f284ccf7]
                   10838: 
                   10839:        * configure, configure.in:
                   10840:        Prevent configure from adding the -g flag unless in devel mode
                   10841:        [b1fd3f8d45c0]
                   10842: 
                   10843: 2010-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10844: 
                   10845:        * sudo.pp:
                   10846:        Go back to sudo-flavor to match existing packages and only use an
                   10847:        underscore for those that need it.
                   10848:        [d737069d1e1c]
                   10849: 
                   10850:        * sudo.pp:
                   10851:        Use sudo_$flavor instead of sudo-$flavor since that causes the least
                   10852:        amount of trouble for the various package managers.
                   10853:        [71f547af35fc]
                   10854: 
                   10855:        * mkpkg:
                   10856:        Fix handling of the ldap flavor Remove destdir unless --debug was
                   10857:        specified Make distclean before running configure if there is a
                   10858:        Makefile present
                   10859:        [6316f08de7d3]
                   10860: 
                   10861:        * sudo.pp:
                   10862:        Add back include file.
                   10863:        [195627bf68b8]
                   10864: 
                   10865:        * mkpkg:
                   10866:        Pass extra args on to configure on HP-UX, if we don't have the HP C
                   10867:        compiler, disable zlib to prevent gcc from finding it in
                   10868:        /usr/local/lib.
                   10869:        [473efa0e2bac]
                   10870: 
                   10871:        * mkpkg:
                   10872:        Use the HP ANSI C compiler on HP-UX if possible
                   10873:        [fb249b6b175d]
                   10874: 
                   10875:        * plugins/sudoers/sudoreplay.c:
                   10876:        Some getline() implementations (FreeBSD 8.0) do not ignore the
                   10877:        length pointer when the line pointer is NULL as they should.
                   10878:        [2410a1a3543c]
                   10879: 
                   10880:        * plugins/sudoers/sudoreplay.c:
                   10881:        Don't need to check for *cp being non-zero, isdigit() will do that.
                   10882:        [7df11ea8a487]
                   10883: 
                   10884:        * plugins/sudoers/sudoreplay.c:
                   10885:        Add setlocale() so the command line arguments that use floating
                   10886:        point work in different locales. Since sudo now logs the timing
                   10887:        data in the C locale we must Parse the seconds in the timing file
                   10888:        manually instead of using strtod(). Furthermore, sudo 1.7.3 logged
                   10889:        the number of seconds with the user's locale so if the decimal point
                   10890:        is not '.' try using the locale-specific version.
                   10891:        [4d385765f23b]
                   10892: 
                   10893:        * src/exec.c:
                   10894:        Do I/O logging in the C locale so the floating point numbers in the
                   10895:        timing file are not locale-dependent.
                   10896:        [5961cec044ec]
                   10897: 
                   10898:        * plugins/sudoers/sudoreplay.c:
                   10899:        Use errorx() not error() for thingsthat don't set errno.
                   10900:        [0fe5e692af84]
                   10901: 
                   10902: 2010-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10903: 
                   10904:        * pp:
                   10905:        Better support for 1.2.3 style versions in Tru64 kits
                   10906:        [997c549bb777]
                   10907: 
                   10908:        * sudo.pp:
                   10909:        Add Tru64 kit support
                   10910:        [e273a954f981]
                   10911: 
                   10912:        * pp:
                   10913:        Remove apparently unnecessary use of sudo
                   10914:        [be8840d85125]
                   10915: 
                   10916:        * Makefile.in, plugins/sudoers/Makefile.in:
                   10917:        Create timedir as part of install-dirs target.
                   10918:        [c736bc2fb14f]
                   10919: 
                   10920:        * src/exec_pty.c:
                   10921:        Handle ENXIO from read/write which can occur when reading/writing a
                   10922:        pty that has gone away.
                   10923:        [fa2e8059879f]
                   10924: 
                   10925:        * plugins/sudoers/pwutil.c:
                   10926:        sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL
                   10927:        [3a045475d5ee]
                   10928: 
                   10929:        * mkpkg:
                   10930:        platform is a pp flag not a variable
                   10931:        [12eba39a47c1]
                   10932: 
                   10933:        * Makefile.in, mkpkg, sudo.pp:
                   10934:        Add simple arg parsing for mkpkg so we can set debug, flavor or
                   10935:        platform.
                   10936:        [ada839fe252d]
                   10937: 
                   10938:        * pp:
                   10939:        Make rpm backend work on AIX 5.x
                   10940:        [549a76d11393]
                   10941: 
                   10942: 2010-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10943: 
                   10944:        * plugins/sudoers/sudoers:
                   10945:        Add commented out Defaults entry for log_output
                   10946:        [7e67d7588900]
                   10947: 
                   10948: 2010-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10949: 
                   10950:        * doc/Makefile.in:
                   10951:        Remove sudo docdir completely
                   10952:        [dce8e82878ef]
                   10953: 
                   10954:        * doc/sample.sudo.conf:
                   10955:        Add sample sudo.conf
                   10956:        [aafdba3fc411]
                   10957: 
                   10958: 2010-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10959: 
                   10960:        * plugins/sudoers/Makefile.in:
                   10961:        Add PACKAGE_TARNAME for docdir
                   10962:        [930c92b8f8f0]
                   10963: 
                   10964: 2010-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10965: 
                   10966:        * src/Makefile.in:
                   10967:        Pass install-sh -b~ here too.
                   10968:        [c3f5eb446c38]
                   10969: 
                   10970:        * plugins/sample/Makefile.in, plugins/sample_group/Makefile.in,
                   10971:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   10972:        Install binary files with -b~ to make a backup. Fixes "text file
                   10973:        busy" error on HP-UX during install.
                   10974:        [81f306f54f8c]
                   10975: 
                   10976:        * install-sh:
                   10977:        "mv -f" on HP-UX doesn't unlink the destination first so add an
                   10978:        explicit rm before moving the temporary into place.
                   10979:        [fb719a79582d]
                   10980: 
                   10981:        * configure, configure.in:
                   10982:        Some more ${foo} -> $(foo) conversion for consistent Makefiles.
                   10983:        [0aa098770074]
                   10984: 
                   10985:        * doc/Makefile.in, plugins/sudoers/Makefile.in:
                   10986:        Install sudoers2ldif in the doc dir
                   10987:        [33ac3b53d7f5]
                   10988: 
                   10989: 2010-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   10990: 
                   10991:        * pathnames.h.in:
                   10992:        Add missing include of maillock.h for Solaris
                   10993:        [5a58883be23a]
                   10994: 
                   10995:        * NEWS, configure, configure.in, doc/TROUBLESHOOTING, doc/UPGRADE,
                   10996:        doc/sample.syslog.conf, doc/sudoers.cat:
                   10997:        Change the default syslog facility from local2 to authpriv (or auth
                   10998:        if the operating system doesn't support authpriv).
                   10999:        [3b70ba514f49]
                   11000: 
                   11001:        * Makefile.in, sudo.pp:
                   11002:        Install sudoers as /etc/sudoers on RPM and debian systems where the
                   11003:        package manager will not replace a user-modified configuration file.
                   11004:        This fixes upgrades from the vendor sudo packages.
                   11005:        [d886b6d60b5b]
                   11006: 
                   11007:        * pp:
                   11008:        RPM: use %config(noreplace) instead of %config for volatile This
                   11009:        results in the new file being installed with a .rpmnew suffix
                   11010:        instead of the file being replaced and the old one renamed with a
                   11011:        .rpmsave suffix.
                   11012:        [58be2119f8e8]
                   11013: 
                   11014: 2010-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11015: 
                   11016:        * compat/mkstemps.c, plugins/sudoers/boottime.c:
                   11017:        Include time.h for struct timeval
                   11018:        [ddf8b04f0276]
                   11019: 
                   11020:        * src/exec_pty.c:
                   11021:        The return value of strsignal() may be const and should be treated
                   11022:        as const regardless.
                   11023:        [620074ae1e77]
                   11024: 
                   11025:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   11026:        Mention that 127.0.0.1 will not match, nor will localhost unless
                   11027:        that is the actual host name.
                   11028:        [8b574122eb8f]
                   11029: 
                   11030:        * MANIFEST, NEWS, README, WHATSNEW, doc/Makefile.in, doc/UPGRADE:
                   11031:        Rename WHATSNEW -> NEWS
                   11032:        [d1a2c8c47d89]
                   11033: 
                   11034:        * pp:
                   11035:        Updated pp with latest patches
                   11036:        [98e16b9b8f62]
                   11037: 
                   11038:        * WHATSNEW:
                   11039:        Sync with 1.7.4
                   11040:        [65ac4dafeef7]
                   11041: 
                   11042:        * doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
                   11043:        plugins/sudoers/sudoers:
                   11044:        Add commented out line to add HOME to env_keep and add a warning to
                   11045:        the note about the HOME change in UPGRADE.
                   11046:        [0d6a775bb6c8]
                   11047: 
                   11048: 2010-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11049: 
                   11050:        * plugins/sudoers/sudoreplay.c:
                   11051:        Add LINE_MAX define for those without it.
                   11052:        [446d9dbe7859]
                   11053: 
                   11054:        * INSTALL, WHATSNEW, config.h.in, configure, configure.in,
                   11055:        doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
                   11056:        plugins/sudoers/defaults.c:
                   11057:        The tty_tickets option is now on by default.
                   11058:        [a01c48206d80]
                   11059: 
                   11060:        * WHATSNEW:
                   11061:        Mention that AIX authdb support has been fixed.
                   11062:        [87bd7f4eba6a]
                   11063: 
                   11064:        * common/aix.c:
                   11065:        setauthdb() only sets the "old" registry if it was set by a previous
                   11066:        call to setauthdb(). To restore the original value, passing NULL
                   11067:        (or an empty string) to setauthdb() is sufficient.
                   11068:        [470da190a254]
                   11069: 
                   11070: 2010-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11071: 
                   11072:        * WHATSNEW, doc/UPGRADE, doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod,
                   11073:        doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
                   11074:        plugins/sudoers/env.c:
                   11075:        Reset HOME when env_reset is enabled unless it is in env_keep
                   11076:        [f421f8827340]
                   11077: 
                   11078:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   11079:        The default for set_logname has been "true" for some time now.
                   11080:        [f489da5674c3]
                   11081: 
                   11082:        * plugins/sudoers/boottime.c:
                   11083:        Add missing include of time.h
                   11084:        [624d7014932f]
                   11085: 
                   11086:        * plugins/sudoers/logging.c:
                   11087:        Fix check for dup2() return value.
                   11088:        [140ea2d50d20]
                   11089: 
                   11090:        * plugins/sudoers/env.c:
                   11091:        Add PYTHONUSERBASE to initial_badenv_table
                   11092:        [3149aae5b12c]
                   11093: 
                   11094:        * plugins/sudoers/visudo.c:
                   11095:        Treat an unknown defaults entry as a parse error.
                   11096:        [b3ebad73efb2]
                   11097: 
                   11098:        * plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
                   11099:        Check return value of setdefs() but don't stop setting defaults if
                   11100:        we hit an unknown one.
                   11101:        [945e752239ab]
                   11102: 
                   11103:        * WHATSNEW, aclocal.m4, config.h.in, configure, configure.in,
                   11104:        doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat,
                   11105:        doc/sudoers.man.in, doc/sudoers.pod, pathnames.h.in,
                   11106:        plugins/sudoers/env.c:
                   11107:        If env_reset is enabled, set the MAIL environment variable based on
                   11108:        the target user unless MAIL is explicitly preserved in sudoers.
                   11109:        [a1b03e2e0e96]
                   11110: 
                   11111: 2010-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11112: 
                   11113:        * pp:
                   11114:        decode debian code names
                   11115:        [8741280d9960]
                   11116: 
                   11117:        * WHATSNEW:
                   11118:        fix typo
                   11119:        [a8a19451110b]
                   11120: 
                   11121: 2010-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11122: 
                   11123:        * WHATSNEW:
                   11124:        Merge with 1.7.4
                   11125:        [9348fa7e15b8]
                   11126: 
                   11127:        * src/sudo.c:
                   11128:        Restore RLIMIT_NPROC after the uid switch if it appears that
                   11129:        runas_setup() did not do it for us. Fixes a bash script problem on
                   11130:        SuSE with RLIMIT_NPROC set to RLIM_INFINITY.
                   11131:        [786fb272e5fd]
                   11132: 
                   11133: 2010-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11134: 
                   11135:        * mkpkg, pp, sudo.pp:
                   11136:        Restore the dot removal in the os version reported by polypkg. Adapt
                   11137:        mkpkg and sudo.pp to the change.
                   11138:        [dcafdd53b88f]
                   11139: 
                   11140: 2010-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11141: 
                   11142:        * INSTALL:
                   11143:        document --with-pam-login
                   11144:        [ea93e4c6873c]
                   11145: 
                   11146:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   11147:        The tag is NOSETENV, not UNSETENV. From Petr Uzel.
                   11148:        [2ac90d8de36e]
                   11149: 
                   11150: 2010-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11151: 
                   11152:        * sudo.pp:
                   11153:        Include flavor in solaris package name
                   11154:        [e605f6364c9f]
                   11155: 
                   11156:        * mkpkg:
                   11157:        Older shells don't support IFS= so set explictly to space, tab,
                   11158:        newline.
                   11159:        [7773960bc8a0]
                   11160: 
                   11161:        * mkpkg:
                   11162:        Use '=' not '==' in test
                   11163:        [c99d42bc48e6]
                   11164: 
                   11165:        * mkpkg:
                   11166:        Fix typo that prevented debian from matching
                   11167:        [84421078fcb7]
                   11168: 
                   11169:        * mkpkg:
                   11170:        Add missing prefix setting for debian
                   11171:        [6466f23de4aa]
                   11172: 
                   11173:        * sudo.pp:
                   11174:        Use tab indents to reduce the chance of problem with <<- Fix the
                   11175:        debian %set section, pp does not set pp_deb_distro Uncomment %sudo
                   11176:        line in sudoers for debian Uncomment some env_keep lines for RHEL,
                   11177:        SLES and debian to more closely match the vendor sudoers files.
                   11178:        Add /etc/pam.d to %files Remove the /etc/sudo-ldap.conf symlink on
                   11179:        debian for ldap flavor
                   11180:        [c5b49feb1a0c]
                   11181: 
                   11182:        * plugins/sudoers/sudoers:
                   11183:        Add commented out env_keep entries, sample Aliases and a %sudo line
                   11184:        for debian.
                   11185:        [387719e52d0f]
                   11186: 
                   11187:        * configure, configure.in:
                   11188:        Move zlib check later on in the script to avoid a strange shell
                   11189:        problem on SLES11.
                   11190:        [1a3153bb1291]
                   11191: 
                   11192:        * configure.in:
                   11193:        Remove check for egrep; configure has its own
                   11194:        [a3b9d98cb5d2]
                   11195: 
                   11196: 2010-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11197: 
                   11198:        * mkpkg:
                   11199:        Enable zlib for linux distros
                   11200:        [8fa51a1405a4]
                   11201: 
                   11202:        * mkpkg:
                   11203:        Add ldap flavor to default build
                   11204:        [97644f5a555f]
                   11205: 
                   11206:        * mkpkg, sudo.pp:
                   11207:        Simplify rpm linux distro settings
                   11208:        [b9dcf10cdf20]
                   11209: 
                   11210:        * aclocal.m4, configure, configure.in, doc/UPGRADE, doc/sudoers.cat:
                   11211:        Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo.
                   11212:        [2c549c1acde9]
                   11213: 
                   11214:        * Makefile.in:
                   11215:        Fix ChangeLog creation from build dir
                   11216:        [3d0c7904f173]
                   11217: 
                   11218:        * plugins/sudoers/sudoers.c:
                   11219:        Handle getcwd() failure.
                   11220:        [aef7bef87394]
                   11221: 
                   11222:        * doc/Makefile.in, mkpkg, sudo.pp:
                   11223:        Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR
                   11224:        environment variable.
                   11225:        [be6ed611b7a8]
                   11226: 
                   11227:        * sudo.pp:
                   11228:        Create sudo group on debian
                   11229:        [6ed6c032042e]
                   11230: 
                   11231:        * mkpkg, sudo.pp:
                   11232:        Add debian 4/5/6 and use the dot when doing version matches
                   11233:        [6bcb664d1f4f]
                   11234: 
                   11235:        * aclocal.m4, configure:
                   11236:        Use a loop when searching for mv, sendmail and sh
                   11237:        [d5e9369f8d13]
                   11238: 
                   11239:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   11240:        Remove spurious "and"; from debian
                   11241:        [a21e6f7c5b99]
                   11242: 
                   11243:        * aclocal.m4, configure, configure.in, doc/sudoers.cat,
                   11244:        doc/sudoers.man.in, doc/sudoers.pod, doc/visudo.cat,
                   11245:        doc/visudo.man.in, doc/visudo.pod:
                   11246:        Substitute the value of EDITOR into the sudoers and visudo manuals.
                   11247:        [cd79e587dd7f]
                   11248: 
                   11249: 2010-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11250: 
                   11251:        * mkpkg, pp, sudo.pp:
                   11252:        Initial support for debian 4.0
                   11253:        [ac6707915fa8]
                   11254: 
                   11255:        * mkpkg:
                   11256:        Some platforms need -fPIE instead of -fpie
                   11257:        [fd6be19e5bc2]
                   11258: 
                   11259:        * plugins/sudoers/auth/pam.c:
                   11260:        Only set PAM_RHOST for Solaris, where it is needed to avoid a bug.
                   11261:        On Linux it causes a DNS lookup via libaudit.
                   11262:        [1e10105ade5b]
                   11263: 
                   11264:        * MANIFEST:
                   11265:        Update MANIFEST to match packaging changes
                   11266:        [ef86ee557b5b]
                   11267: 
                   11268:        * sudo.psf:
                   11269:        We now use pp to generate HP-UX packages
                   11270:        [f7aa8da7844e]
                   11271: 
                   11272:        * INSTALL.binary, plugins/sudoers/Makefile.binary.in:
                   11273:        Remove vestiges of old binary package bits.
                   11274:        [afffd005452f]
                   11275: 
                   11276:        * INSTALL, Makefile.in, common/Makefile.in, compat/Makefile.in,
                   11277:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   11278:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   11279:        src/Makefile.in:
                   11280:        install-man -> install-doc
                   11281:        [99b5fa05567c]
                   11282: 
                   11283:        * Makefile.in, doc/Makefile.in, include/Makefile.in, mkpkg,
                   11284:        plugins/sudoers/Makefile.in, pp, src/Makefile.in, sudo.pp:
                   11285:        Use http://rc.quest.com/topics/polypkg/ for packaging
                   11286:        [5ca8eb75b223]
                   11287: 
                   11288:        * install-sh:
                   11289:        Just ignore the -c option, it is the default Add support for -d
                   11290:        option
                   11291:        [a8b6b0a131e8]
                   11292: 
                   11293: 2010-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11294: 
                   11295:        * pathnames.h.in, plugins/sudoers/env.c, plugins/sudoers/logging.c:
                   11296:        Use _PATH_STDPATH instead of _PATH_DEFPATH
                   11297:        [137fa911908e]
                   11298: 
                   11299:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   11300:        Do not strip binaries.
                   11301:        [20166e287176]
                   11302: 
                   11303:        * INSTALL, configure, configure.in:
                   11304:        Add --insults=disabled configure option to allow people to build in
                   11305:        insult support but have the insults disabled unless explicitly
                   11306:        enabled in sudoers.
                   11307:        [523b8c552e90]
                   11308: 
                   11309:        * compat/mkstemps.c:
                   11310:        Add prototype for gettime()
                   11311:        [275eee40473b]
                   11312: 
                   11313:        * config.h.in, configure, configure.in, plugins/sudoers/auth/pam.c,
                   11314:        plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
                   11315:        plugins/sudoers/sudoers.h:
                   11316:        Add support for a sudo-i pam.d file to be used for "sudo -i".
                   11317:        Adapted from a RedHat patch.
                   11318:        [06d34f16520b]
                   11319: 
                   11320: 2010-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11321: 
                   11322:        * include/missing.h:
                   11323:        Fix mkstemps() prototype
                   11324:        [2421841e815b]
                   11325: 
                   11326:        * MANIFEST, compat/Makefile.in, compat/mkstemp.c, compat/mkstemps.c,
                   11327:        config.h.in, configure, configure.in, include/missing.h,
                   11328:        src/sudo_edit.c:
                   11329:        Use mkstemps() instead of mkstemp() in sudoedit. This allows
                   11330:        sudoedit to preserve the file extension (if any) which may be used
                   11331:        by the editor (like emacs) to choose the editing mode.
                   11332:        [d33172d2c086]
                   11333: 
                   11334: 2010-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11335: 
                   11336:        * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
                   11337:        plugins/sudoers/ldap.c:
                   11338:        TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses
                   11339:        TLS_CACERT, not TLS_CACERTFILE in its ldap.conf. Other LDAP client
                   11340:        code, such as nss_ldap, uses TLS_CACERTFILE. Also document why you
                   11341:        should avoid disabling TLS_CHECKPEER is possible.
                   11342:        [196622436212]
                   11343: 
                   11344: 2010-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11345: 
                   11346:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   11347:        Make sudo_plugin format a bit more like a man page
                   11348:        [048d596e32da]
                   11349: 
                   11350:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   11351:        Add suport for negated user/host/command lists in a Defaults entry.
                   11352:        E.g. Defaults:!baduser noexec
                   11353:        [d41112cf0342]
                   11354: 
                   11355:        * Makefile.in, common/Makefile.in, compat/Makefile.in,
                   11356:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   11357:        plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in,
                   11358:        src/Makefile.in:
                   11359:        Add uninstall target
                   11360:        [fea66ebf136a]
                   11361: 
                   11362:        * common/Makefile.in, compat/Makefile.in:
                   11363:        Remove unused AR, SED and RANLIB variables
                   11364:        [2ff9928bfdb3]
                   11365: 
                   11366:        * Makefile.in:
                   11367:        Do not install sample plugins
                   11368:        [5443b87bd1c3]
                   11369: 
                   11370: 2010-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11371: 
                   11372:        * MANIFEST, aclocal.m4, compat/setenv.c, compat/unsetenv.c, configure,
                   11373:        configure.in, plugins/sudoers/env.c:
                   11374:        Now that sudoers is a dynamically loaded module we cannot override
                   11375:        the libc environment functions because the symbols may already have
                   11376:        been resolved via libc. Remove getenv/putenv/setenv/unsetenv
                   11377:        replacements from sudoers and add replacements for setenv/unsetenv
                   11378:        for systems that lack them.
                   11379:        [3f2b43cb8851]
                   11380: 
                   11381:        * configure, configure.in, plugins/sudoers/Makefile.in:
                   11382:        Link testsudoers with -ldl when needed
                   11383:        [f79606f9fcd7]
                   11384: 
                   11385:        * plugins/sample_group/plugin_test.c:
                   11386:        Remove unused time.h and add limits.h for PATH_MAX
                   11387:        [3f5d0074d621]
                   11388: 
                   11389:        * doc/sudoers.ldap.pod:
                   11390:        Fix typo.
                   11391:        [bc855fd57397]
                   11392: 
                   11393: 2010-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11394: 
                   11395:        * plugins/sample_group/plugin_test.c:
                   11396:        Do not depend on strlcpy/strlcat
                   11397:        [6e7e2b5af051]
                   11398: 
                   11399:        * plugins/sample_group/plugin_test.c:
                   11400:        Standalone test driver for sudoers group plugin.
                   11401:        [eb1235fc3b8e]
                   11402: 
                   11403: 2010-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11404: 
                   11405:        * plugins/sudoers/group_plugin.c, src/load_plugins.c:
                   11406:        Use RTLD_LAZY instead of RTLD_NOW; was using RTLD_NOW as a debugging
                   11407:        aid.
                   11408:        [2a34e616229b]
                   11409: 
                   11410:        * plugins/sample_group/sample_group.c:
                   11411:        Fix style nit in function declarations
                   11412:        [ab87c7c76bf9]
                   11413: 
                   11414:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   11415:        Document group_plugin syntax.
                   11416:        [ed1faf72ddcb]
                   11417: 
                   11418:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   11419:        Document the sudoers group plugin.
                   11420:        [f19a62dc8cfc]
                   11421: 
                   11422:        * INSTALL, MANIFEST, Makefile.in, config.h.in, configure,
                   11423:        configure.in, doc/LICENSE, doc/license.pod, include/sudo_plugin.h,
                   11424:        plugins/sample_group/Makefile.in, plugins/sample_group/getgrent.c,
                   11425:        plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in,
                   11426:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
                   11427:        plugins/sudoers/def_data.in, plugins/sudoers/group_plugin.c,
                   11428:        plugins/sudoers/match.c, plugins/sudoers/nonunix.h,
                   11429:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
                   11430:        plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
                   11431:        plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c, src/sudo.c:
                   11432:        Replace built-in non-unix group support with a sudoers group plugin.
                   11433:        Include a sample plugin that can read Unix-format group files.
                   11434:        [8fc58ce0b1a8]
                   11435: 
                   11436:        * configure, configure.in, src/load_plugins.c:
                   11437:        Add a trailing slash to _PATH_SUDO_PLUGIN_DIR to simplify usage.
                   11438:        [5c491dddb8ef]
                   11439: 
                   11440: 2010-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11441: 
                   11442:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat,
                   11443:        doc/sudoers.man.in, doc/sudoers.pod:
                   11444:        Move sudoers-specific bits out of sudo(8) and into sudoers(5)
                   11445:        [e8a5a5830cfe]
                   11446: 
                   11447:        * aclocal.m4, configure, configure.in:
                   11448:        Substitute @io_logdir@ for the sudoers I/O log directory.
                   11449:        [21a75ca7b0ab]
                   11450: 
                   11451: 2010-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11452: 
                   11453:        * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c,
                   11454:        common/atobool.c, common/fileops.c, common/fmt_string.c,
                   11455:        common/lbuf.c, common/term.c, compat/fnmatch.c, compat/getcwd.c,
                   11456:        compat/getgrouplist.c, compat/getline.c, compat/glob.c,
                   11457:        compat/snprintf.c, config.h.in, configure, configure.in,
                   11458:        include/fileops.h, plugins/sample/sample_plugin.c,
                   11459:        plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c,
                   11460:        plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c,
                   11461:        plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c,
                   11462:        plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c,
                   11463:        plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c,
                   11464:        plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c,
                   11465:        plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c,
                   11466:        plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c,
                   11467:        plugins/sudoers/boottime.c, plugins/sudoers/check.c,
                   11468:        plugins/sudoers/defaults.c, plugins/sudoers/env.c,
                   11469:        plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
                   11470:        plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
                   11471:        plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
                   11472:        plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
                   11473:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   11474:        plugins/sudoers/logging.c, plugins/sudoers/match.c,
                   11475:        plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
                   11476:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   11477:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   11478:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   11479:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   11480:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c,
                   11481:        src/Makefile.in, src/aix.c, src/conversation.c, src/exec.c,
                   11482:        src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c,
                   11483:        src/sudo.c, src/sudo.h, src/sudo_edit.c, src/tgetpass.c:
                   11484:        Set usrinfo for AIX Set adminstrative domain for the process when
                   11485:        looking up user's password or group info and when preparing for
                   11486:        execve(). Include strings.h even if string.h exists since they may
                   11487:        define different things. Fixes warnings on AIX and others.
                   11488:        [cf8b93e872c9]
                   11489: 
                   11490:        * Makefile.in:
                   11491:        Add a separate all target for AIX make which was using the entire
                   11492:        LHS (not just the first entry) of the first target as the implicit
                   11493:        target.
                   11494:        [a45b980a01ef]
                   11495: 
                   11496:        * plugins/sudoers/env.c:
                   11497:        Do not rely on env.env_len when unsetting a variable, just use the
                   11498:        NULL terminator.
                   11499:        [ca6eb239c829]
                   11500: 
                   11501:        * plugins/sudoers/env.c:
                   11502:        In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008
                   11503:        [7046ba7caa4e]
                   11504: 
                   11505: 2010-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11506: 
                   11507:        * plugins/sudoers/vasgroups.c:
                   11508:        Use warningx() instead of log_error() since the latter is not
                   11509:        available to visudo or testsudoers. This does mean that they don't
                   11510:        end up in syslog.
                   11511:        [152b7c50f426]
                   11512: 
                   11513:        * plugins/sudoers/sudoers.c:
                   11514:        Defer call to sudo_nonunix_groupcheck_cleanup() until after we have
                   11515:        closed the sudoers sources. From Quest sudo.
                   11516:        [c1cd573bab94]
                   11517: 
                   11518:        * plugins/sudoers/pwutil.c:
                   11519:        Ignore case when matching user/group names in the cache. From Quest
                   11520:        sudo.
                   11521:        [2aa4ecc7d7f5]
                   11522: 
                   11523: 2010-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11524: 
                   11525:        * config.h.in, configure, configure.in, src/selinux.c:
                   11526:        Add check for setkeycreatecon() when --with-selinux is specified.
                   11527:        [affae247b4e0]
                   11528: 
                   11529:        * configure, configure.in:
                   11530:        Error out if libaudit.h is missing or ununable when --with-linux-
                   11531:        audit was specified
                   11532:        [d82e743fac04]
                   11533: 
                   11534:        * doc/HISTORY, doc/history.pod:
                   11535:        Add =head3 entries, mostly for the html version
                   11536:        [ee93112d0308]
                   11537: 
                   11538: 2010-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11539: 
                   11540:        * doc/HISTORY, doc/history.pod:
                   11541:        Mention when LDAP was incorporate.
                   11542:        [2923dc17f79c]
                   11543: 
                   11544: 2010-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11545: 
                   11546:        * configure, configure.in:
                   11547:        Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it is
                   11548:        not covered by _ALL_SOURCE.
                   11549:        [c92fd69809d0]
                   11550: 
                   11551: 2010-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11552: 
                   11553:        * plugins/sudoers/iolog.c:
                   11554:        Add a cast to quiet a compiler warning.
                   11555:        [a200e07ee1bc]
                   11556: 
                   11557:        * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
                   11558:        Quiet a compiler warning.
                   11559:        [c9acfc927cea]
                   11560: 
                   11561:        * plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c:
                   11562:        Call set_fqdn() after sudoers has parsed instead of inline as a
                   11563:        callback.
                   11564:        [5f4e5d075f2d]
                   11565: 
                   11566:        * WHATSNEW, plugins/sudoers/sudoers.c:
                   11567:        Do not call set_fqdn() until sudoers parses (where is gets run as a
                   11568:        callback).
                   11569:        [09040fca6d40]
                   11570: 
                   11571:        * WHATSNEW:
                   11572:        mention the change in tty ticket behavior when there is no tty
                   11573:        [575a1fd98f05]
                   11574: 
                   11575:        * plugins/sudoers/check.c:
                   11576:        Do not update tty ticket if there is no tty.
                   11577:        [63f9c33ce6a7]
                   11578: 
                   11579:        * doc/LICENSE, doc/license.pod:
                   11580:        Update copyright year
                   11581:        [0722ab5d404b]
                   11582: 
                   11583:        * doc/Makefile.in:
                   11584:        Do not rely on BSD make's $>
                   11585:        [936a86398bd9]
                   11586: 
                   11587:        * configure, configure.in:
                   11588:        Set timedir to /var/db/sudo for darwin to match Apple sudo's
                   11589:        location
                   11590:        [d5b9b03096f1]
                   11591: 
                   11592: 2010-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11593: 
                   11594:        * plugins/sudoers/sudoers.h:
                   11595:        Add stub declarations for struct stat and struct timeval
                   11596:        [f6d90551a4fd]
                   11597: 
                   11598:        * MANIFEST:
                   11599:        Remove compat/sigaction.c
                   11600:        [d0ed6d9a770e]
                   11601: 
                   11602:        * config.h.in, configure, configure.in, plugins/sudoers/defaults.c,
                   11603:        plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
                   11604:        Check for zlib.h in addition to libz.
                   11605:        [6e191b4a6065]
                   11606: 
                   11607:        * MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h,
                   11608:        src/sudo_exec.h:
                   11609:        Move functions and symbols shared between exec.c and exec_pty.c into
                   11610:        sudo_exec.h.
                   11611:        [14ae63403544]
                   11612: 
                   11613:        * doc/Makefile.in:
                   11614:        Comment out rules to build .man.in and .cat files unless --with-
                   11615:        devel
                   11616:        [3cf7e5606a85]
                   11617: 
                   11618:        * doc/Makefile.in:
                   11619:        Comment out rules to build .man.in and .cat files unless --with-
                   11620:        devel
                   11621:        [d30495b0e29e]
                   11622: 
                   11623:        * src/parse_args.c:
                   11624:        Quote any non-alphanumeric characters other than '_' or '-' when
                   11625:        passing a command to be run via the shell for the -s and -i options.
                   11626:        [d633f74fe2d9]
                   11627: 
                   11628:        * doc/Makefile.in:
                   11629:        Add back .man suffix
                   11630:        [6e63b60a2739]
                   11631: 
                   11632:        * INSTALL, MANIFEST, WHATSNEW, config.h.in, configure, configure.in,
                   11633:        plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
                   11634:        plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c,
                   11635:        plugins/sudoers/linux_audit.h, plugins/sudoers/logging.h,
                   11636:        src/selinux.c:
                   11637:        Add Linux audit support.
                   11638:        [5a2f445e0bd4]
                   11639: 
                   11640: 2010-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11641: 
                   11642:        * plugins/sudoers/iolog.c:
                   11643:        Remove an XXX
                   11644:        [a170cbe651d1]
                   11645: 
                   11646:        * doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
                   11647:        plugins/sudoers/sudoreplay.c:
                   11648:        Add -f (filter) option to sudoreplay to allow certain streams to be
                   11649:        replayed and others ignored.
                   11650:        [62e51b432ea1]
                   11651: 
                   11652:        * src/load_plugins.c, src/parse_args.c, src/sudo.c, src/sudo.h,
                   11653:        src/tgetpass.c:
                   11654:        Fix -A flag when askpass is specified in sudo.conf or if sudo
                   11655:        doesn't need to read a password.
                   11656:        [2e401e4a00e3]
                   11657: 
                   11658:        * src/exec.c, src/exec_pty.c, src/parse_args.c, src/sudo.c,
                   11659:        src/sudo.h, src/sudo_edit.c, src/tgetpass.c:
                   11660:        Clean up some XXXs
                   11661:        [689f0b002d3d]
                   11662: 
                   11663:        * WHATSNEW, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   11664:        doc/sudoers.ldap.pod, plugins/sudoers/ldap.c:
                   11665:        Add support for multiple sudoers_base entries in ldap.conf. From
                   11666:        Joachim Henke
                   11667:        [e3e4a3c2bd5b]
                   11668: 
                   11669:        * config.h.in, configure, configure.in, plugins/sudoers/logging.c,
                   11670:        src/exec_pty.c:
                   11671:        remove setsid check, we require a POSIX system
                   11672:        [cc73cb9e22c0]
                   11673: 
                   11674:        * plugins/sudoers/logging.c, src/exec_pty.c, src/selinux.c,
                   11675:        src/sudo.c, src/tgetpass.c:
                   11676:        Check for dup2() failure.
                   11677:        [5d46d66794f5]
                   11678: 
                   11679:        * config.h.in, configure, configure.in:
                   11680:        Remove dup2() check, it is not optional.
                   11681:        [5f1d56de4384]
                   11682: 
                   11683: 2010-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11684: 
                   11685:        * WHATSNEW:
                   11686:        sync with sudo 1.7.3
                   11687:        [88e5c0bd6d59]
                   11688: 
                   11689:        * INSTALL:
                   11690:        SunOS does not ship with an ANSI compiler
                   11691:        [f13c85c67069]
                   11692: 
                   11693:        * INSTALL:
                   11694:        Update OS specific notes. Delete some really ancient ones and move
                   11695:        older ones to the end of the list.
                   11696:        [59ce592c4c52]
                   11697: 
                   11698:        * README:
                   11699:        Sudo can be downloaded from the web site too Mention "OS dependent
                   11700:        notes" section in INSTALL
                   11701:        [191871538984]
                   11702: 
                   11703:        * src/exec_pty.c, src/selinux.c:
                   11704:        Call selinux_restore_tty() as part of cleanup() so it gets called
                   11705:        from error()/errorx()
                   11706:        [bb017da6b6da]
                   11707: 
                   11708:        * MANIFEST, doc/PORTING:
                   11709:        Remove obsolete porting guide
                   11710:        [321e35591344]
                   11711: 
                   11712:        * plugins/sudoers/interfaces.h, plugins/sudoers/match.c:
                   11713:        Move union sudo_in_addr_un into interfaces.h
                   11714:        [b2c8b19ee094]
                   11715: 
                   11716:        * doc/Makefile.in:
                   11717:        Remove useless circular dependencies
                   11718:        [5682181b59cf]
                   11719: 
                   11720:        * plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   11721:        plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
                   11722:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
                   11723:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   11724:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
                   11725:        plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
                   11726:        plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c:
                   11727:        Convert to ANSI C function declarations
                   11728:        [a4f76927d034]
                   11729: 
                   11730:        * common/alloc.c, common/fileops.c, common/gettime.c, common/list.c,
                   11731:        common/zero_bytes.c, compat/charclass.h, compat/closefrom.c,
                   11732:        compat/fnmatch.c, compat/glob.c, compat/isblank.c, compat/memrchr.c,
                   11733:        compat/mkstemp.c, compat/nanosleep.c, compat/snprintf.c,
                   11734:        compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
                   11735:        compat/strlcpy.c, compat/timespec.h, compat/utime.h,
                   11736:        compat/utimes.c, doc/HISTORY, doc/history.pod, doc/license.pod,
                   11737:        include/alloc.h, include/error.h, include/lbuf.h, include/list.h,
                   11738:        include/missing.h, pathnames.h.in, plugins/sudoers/alias.c,
                   11739:        plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.h,
                   11740:        plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c,
                   11741:        plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.c,
                   11742:        plugins/sudoers/defaults.h, plugins/sudoers/find_path.c,
                   11743:        plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c,
                   11744:        plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
                   11745:        plugins/sudoers/interfaces.h, plugins/sudoers/logging.c,
                   11746:        plugins/sudoers/logging.h, plugins/sudoers/match.c,
                   11747:        plugins/sudoers/parse.h, plugins/sudoers/plugin_error.c,
                   11748:        plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
                   11749:        plugins/sudoers/redblack.h, plugins/sudoers/sudo_nss.h,
                   11750:        plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c,
                   11751:        plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c,
                   11752:        plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/aix.c,
                   11753:        src/conversation.c, src/error.c, src/load_plugins.c,
                   11754:        src/parse_args.c, src/sesh.c, src/sudo.h, src/sudo_noexec.c,
                   11755:        src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c:
                   11756:        Update copyright year
                   11757:        [26ac7991f7d8]
                   11758: 
                   11759:        * doc/Makefile.in:
                   11760:        Fix commented DEVDOCS when not in devel mode.
                   11761:        [e0a97eaf3793]
                   11762: 
                   11763:        * plugins/sudoers/match.c:
                   11764:        Quiet a compiler warning.
                   11765:        [b2a17ebd5d38]
                   11766: 
                   11767:        * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y:
                   11768:        Quiet a compiler warning.
                   11769:        [687843bc593d]
                   11770: 
                   11771:        * plugins/sudoers/ldap.c, plugins/sudoers/sudoers.h:
                   11772:        Make all functions in ldap.c static
                   11773:        [b2111e89eeba]
                   11774: 
                   11775:        * doc/schema.ActiveDirectory:
                   11776:        Updates from Alain Roy to provide better examples for importing the
                   11777:        schema and to fix problems caused by Windows validating attributes
                   11778:        which have not yet been added before committing the changes.
                   11779:        [69f4c5ccaf89]
                   11780: 
                   11781: 2010-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11782: 
                   11783:        * configure, configure.in, doc/Makefile.in, doc/sudo.cat,
                   11784:        doc/sudo.man.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   11785:        doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   11786:        doc/sudoers.man.in, doc/sudoreplay.cat, doc/sudoreplay.man.in,
                   11787:        doc/visudo.cat, doc/visudo.man.in:
                   11788:        Leave rules to build .man.in and .cat files uncommented but only
                   11789:        make them part of the "all" rule in devel mode. Generate .cat files
                   11790:        directly from .man.in instead of .man using default values in
                   11791:        configure.in
                   11792:        [c3054a44f6a5]
                   11793: 
                   11794:        * configure, configure.in:
                   11795:        Bump sudo version to 1.8.0b1
                   11796:        [8f79c85135e1]
                   11797: 
                   11798:        * configure, configure.in, src/sudo.c, src/sudo_usage.h.in:
                   11799:        Print configure args with verbose version information.
                   11800:        [1ce690660ed2]
                   11801: 
                   11802:        * TODO, plugins/sudoers/visudo.c:
                   11803:        Remove tfd from struct sudoersfile; it is not used. Add prev pointer
                   11804:        to struct sudoersfile. Declare list of sudoersfile using TQ_DECLARE.
                   11805:        Use tq_append to append sudoers entries to the tail queue.
                   11806:        [1743f9a286e4]
                   11807: 
                   11808: 2010-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11809: 
                   11810:        * WHATSNEW:
                   11811:        Describe tty timestamp improvements
                   11812:        [e214e863a313]
                   11813: 
                   11814:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   11815:        A comment character may not be part of a command line argument
                   11816:        unless it is quoted with a backslash. Fixes parsing of:
                   11817:        testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar closes bz #441
                   11818:        [ea2e990f85ed]
                   11819: 
                   11820:        * doc/sudoers.pod:
                   11821:        Make this read a little bit better when passwd_timeout is 0.
                   11822:        [39d362757f31]
                   11823: 
                   11824:        * doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod:
                   11825:        Attempt to handle a default password prompt timeout of zero more
                   11826:        gracefully.
                   11827:        [ea47d43acf5b]
                   11828: 
                   11829:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   11830:        Do not override value of keepopen global, instead restore it to the
                   11831:        value we pushed onto the stack when popping.
                   11832:        [fe282e5a3402]
                   11833: 
                   11834:        * plugins/sudoers/Makefile.in:
                   11835:        Add dependency for utility programs on libreplace and libcommon
                   11836:        [2339aba64928]
                   11837: 
                   11838:        * compat/sigaction.c, config.h.in, configure.in, include/compat.h,
                   11839:        plugins/sudoers/logging.c, plugins/sudoers/mon_systrace.c,
                   11840:        src/exec.c, src/exec_pty.c, src/tgetpass.c:
                   11841:        Remove sigaction emulation Use SA_INTERRUPT in sa_flags
                   11842:        [7dd61f1bd8d2]
                   11843: 
                   11844:        * MANIFEST, config.h.in, configure, configure.in, include/missing.h:
                   11845:        We don't use getgrouplist() at the moment so there's no need to
                   11846:        provide a compat version.
                   11847:        [1597536fbada]
                   11848: 
                   11849:        * TODO:
                   11850:        sync with reality
                   11851:        [9e1a874e7885]
                   11852: 
                   11853:        * include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c,
                   11854:        src/conversation.c, src/sudo.h, src/tgetpass.c:
                   11855:        Fix visiblepw sudoers option; the plugin API portion still needs
                   11856:        documenting
                   11857:        [60b6933ef5e0]
                   11858: 
                   11859:        * src/sudo.c:
                   11860:        Print sudo version as well.
                   11861:        [987ed459b459]
                   11862: 
                   11863:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
                   11864:        Use sudo_printf for I/O log version Clarify policy plugin version
                   11865:        string
                   11866:        [5a58b7e8c80b]
                   11867: 
                   11868:        * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
                   11869:        plugins/sudoers/ldap.c, plugins/sudoers/sudoreplay.c:
                   11870:        Silence some compiler warnings
                   11871:        [afb1eba90915]
                   11872: 
                   11873:        * src/load_plugins.c, src/tgetpass.c:
                   11874:        Store askpass path in a global instead of uses setenv() which many
                   11875:        systems lack.
                   11876:        [b440bcc0e660]
                   11877: 
                   11878: 2010-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11879: 
                   11880:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
                   11881:        doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   11882:        plugins/sudoers/check.c, plugins/sudoers/def_data.c,
                   11883:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   11884:        plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c,
                   11885:        plugins/sudoers/sudoers.h, src/load_plugins.c, src/parse_args.c,
                   11886:        src/tgetpass.c:
                   11887:        Move askpass path specification from sudoers to sudo.conf.
                   11888:        [5507ab867c26]
                   11889: 
                   11890:        * src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
                   11891:        Use a flag bit in struct command_details for selinux instead of a
                   11892:        separate field.
                   11893:        [c59ca4acded9]
                   11894: 
                   11895:        * src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h:
                   11896:        Implement background mode. If I/O logging we use pipes instead of a
                   11897:        pty.
                   11898:        [c07a4b356cbd]
                   11899: 
                   11900:        * compat/mksiglist.c, compat/strsignal.c, include/compat.h,
                   11901:        src/exec.c, src/exec_pty.c, src/tgetpass.c:
                   11902:        Move compat definition of NSIG to compat.h
                   11903:        [ab0385467f25]
                   11904: 
                   11905:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat,
                   11906:        doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   11907:        Mention plugins in the sudo manual and add some missing path
                   11908:        substitution in the sudo_plugin manual.
                   11909:        [570f831f47a3]
                   11910: 
                   11911:        * src/Makefile.in:
                   11912:        Set _PATH_SUDO_CONF based on $(sysconfdir)
                   11913:        [fde51869cf07]
                   11914: 
                   11915:        * common/lbuf.c, common/term.c, config.h.in, configure, configure.in,
                   11916:        src/exec.c, src/exec_pty.c, src/ttysize.c:
                   11917:        Require POSIX termios to build sudo
                   11918:        [9ec6b41f3f95]
                   11919: 
                   11920:        * src/tgetpass.c:
                   11921:        Ignore SIGPIPE for "sudo -S"
                   11922:        [7ad27fde0c06]
                   11923: 
                   11924:        * src/tgetpass.c:
                   11925:        Fix uninitialized variable in TGP_ECHO case and print a newline if
                   11926:        the user interrupted password input.
                   11927:        [ce19204d8dd4]
                   11928: 
                   11929:        * src/tgetpass.c:
                   11930:        Make TGP_ECHO override TGP_MASK and don't try to restore the
                   11931:        terminal if we didn't modify it.
                   11932:        [a7e11abfe7e4]
                   11933: 
                   11934:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   11935:        include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c,
                   11936:        src/conversation.c, src/sudo.h, src/tgetpass.c:
                   11937:        Add SUDO_CONV_PROMPT_MASK define which corresponds to the
                   11938:        "pwfeedback" sudoers option. Do not disable echo if TGP_ECHO is
                   11939:        set.
                   11940:        [e0550590cabe]
                   11941: 
                   11942:        * src/exec_pty.c:
                   11943:        Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl
                   11944:        [762448182fe3]
                   11945: 
                   11946: 2010-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11947: 
                   11948:        * src/exec.c, src/exec_pty.c, src/selinux.c, src/sudo.c, src/sudo.h:
                   11949:        Add selinux_enabled flag into struct command_details and set it in
                   11950:        command_info_to_details(). Return an error from selinux_setup()
                   11951:        instead of exiting. Call selinux_setup() from exec_setup().
                   11952:        [011bea23a5a0]
                   11953: 
                   11954: 2010-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11955: 
                   11956:        * src/exec_pty.c:
                   11957:        Remove commented out copy of old sudo_execve() function.
                   11958:        [9c5e21380472]
                   11959: 
                   11960: 2010-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   11961: 
                   11962:        * plugins/sudoers/sudoers.c:
                   11963:        Fix setting selinux type on command line.
                   11964:        [814b20a0b3be]
                   11965: 
                   11966:        * plugins/sudoers/iolog.c:
                   11967:        In sudoers_io_close(), skip NULL io_fds[] elements.
                   11968:        [4011ff7d4daf]
                   11969: 
                   11970:        * include/compat.h:
                   11971:        No longer need NGROUPS_MAX define
                   11972:        [cae4c49d7077]
                   11973: 
                   11974:        * compat/nanosleep.c, config.h.in, configure, configure.in,
                   11975:        include/compat.h, plugins/sudoers/check.c, plugins/sudoers/iolog.c,
                   11976:        plugins/sudoers/visudo.c, src/sudo_edit.c:
                   11977:        Replace timerfoo macros with timevalfoo since the timer macros are
                   11978:        known to be busted on some systems.
                   11979:        [4f97d79f2d41]
                   11980: 
                   11981:        * src/exec_pty.c:
                   11982:        Remove duplicate call to selinux_setup().
                   11983:        [82bd52764e21]
                   11984: 
                   11985:        * plugins/sudoers/auth/pam.c:
                   11986:        If pam_open_session() fails, pass its status to pam_end.
                   11987:        [1d8de4cf8ff3]
                   11988: 
                   11989:        * plugins/sudoers/toke.c, plugins/sudoers/toke.l:
                   11990:        If a file in a #includedir has improper permissions or owner just
                   11991:        skip it. This prevents packages that incorrectly install a file
                   11992:        into /etc/sudoers.d from breaking sudo so easily. Syntax errors in
                   11993:        #includedir files still result in a parse error (for now).
                   11994:        [ade99a4549a4]
                   11995: 
                   11996:        * WHATSNEW, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
                   11997:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
                   11998:        plugins/sudoers/def_data.in, plugins/sudoers/iolog.c:
                   11999:        Add use_pty sudoers option to force use of a pty even when not
                   12000:        logging I/O.
                   12001:        [b280a8972a79]
                   12002: 
                   12003:        * plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
                   12004:        Make env_init() void as it never fails.
                   12005:        [d3890e55daa7]
                   12006: 
                   12007:        * plugins/sudoers/env.c:
                   12008:        No longer use _NSGetEnviron so don't need crt_externs.h
                   12009:        [9b4e0e139881]
                   12010: 
                   12011:        * plugins/sudoers/env.c:
                   12012:        Remove unused VNULL define
                   12013:        [a42cacb263e3]
                   12014: 
                   12015: 2010-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12016: 
                   12017:        * plugins/sudoers/iolog.c:
                   12018:        Add #define for maximum session id
                   12019:        [9e18c17a28c2]
                   12020: 
                   12021:        * MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h:
                   12022:        Split exec.c into exec.c and exec_pty.c
                   12023:        [d52376327332]
                   12024: 
                   12025:        * MANIFEST:
                   12026:        Sync with source file moves.
                   12027:        [4a62c6c9e846]
                   12028: 
                   12029:        * src/Makefile.in, src/get_pty.c, src/pty.c:
                   12030:        Rename pty.c -> get_pty.c
                   12031:        [5696a12bd29b]
                   12032: 
                   12033: 2010-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12034: 
                   12035:        * plugins/sudoers/iolog.c:
                   12036:        Only use I/O input log file if def_log_input is set and output file
                   12037:        if def_log_output is set.
                   12038:        [d866992f1681]
                   12039: 
                   12040: 2010-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12041: 
                   12042:        * compat/strsignal.c:
                   12043:        Update copyright year
                   12044:        [a96f2593fd4e]
                   12045: 
                   12046:        * src/pty.c:
                   12047:        uid -> ttyuid
                   12048:        [c3454d74ebcb]
                   12049: 
                   12050:        * plugins/sudoers/sudoers.c:
                   12051:        For sudoedit, make a local copy of editor string si become part of
                   12052:        argv. If no editor environment variable, split def_editor on ':'
                   12053:        since it may be a colon-delimited path.
                   12054:        [2ee298506a6e]
                   12055: 
                   12056:        * src/sudo_edit.c:
                   12057:        Remove unneeded endpwent()/endgrent()
                   12058:        [623f6743d101]
                   12059: 
                   12060:        * doc/Makefile.in:
                   12061:        Use value of nroff from configure
                   12062:        [b2ce649125ab]
                   12063: 
                   12064:        * src/exec.c:
                   12065:        Add missing const to I/O log action function
                   12066:        [d764a3955e04]
                   12067: 
                   12068:        * plugins/sudoers/check.c:
                   12069:        Update copyright year and fix whitespace
                   12070:        [e648c35b16be]
                   12071: 
                   12072:        * configure, configure.in:
                   12073:        Fix typo
                   12074:        [8e0bdfc47da4]
                   12075: 
                   12076:        * plugins/sudoers/iolog.c:
                   12077:        Remove redundant tty signal blocking in log function.
                   12078:        [f17f575dabd4]
                   12079: 
                   12080: 2010-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12081: 
                   12082:        * plugins/sudoers/iolog.c:
                   12083:        Place static keyword where it belongs
                   12084:        [b01aec7c86b4]
                   12085: 
                   12086:        * plugins/sudoers/logging.c:
                   12087:        Always use a printf format string for send_mail()
                   12088:        [13b1ada644c9]
                   12089: 
                   12090:        * common/atobool.c, plugins/sudoers/ldap.c:
                   12091:        Extend atobool() so we can use it in the LDAP code.
                   12092:        [73f8e6807044]
                   12093: 
                   12094:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
                   12095:        Sudo now stashes tty ctime for tty_tickets on Solaris too.
                   12096:        [e82df13ad3fd]
                   12097: 
                   12098:        * plugins/sudoers/boottime.c:
                   12099:        Fix dummy version of get_boottime()
                   12100:        [01d69c06013b]
                   12101: 
                   12102: 2010-06-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12103: 
                   12104:        * plugins/sudoers/check.c:
                   12105:        Enable tty_is_devpts() support for Solaris with the "devices"
                   12106:        filesystem.
                   12107:        [237c6b25fa84]
                   12108: 
                   12109:        * src/exec.c:
                   12110:        Unbreak the non-io logging case.
                   12111:        [4822b9f709fb]
                   12112: 
                   12113:        * src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
                   12114:        Fix symbol name conflict with sudo_printf.
                   12115:        [0d44eab0a8f6]
                   12116: 
                   12117:        * plugins/sudoers/auth/pam.c:
                   12118:        Fix OpenPAM detection for newer versions.
                   12119:        [1b2abed232d8]
                   12120: 
                   12121:        * plugins/sudoers/vasgroups.c:
                   12122:        Sync with Quest sudo git repo
                   12123:        [f1d98b3cba02]
                   12124: 
                   12125:        * aclocal.m4, configure, configure.in:
                   12126:        HP-UX ld uses +b instead or -R or -rpath Fix typo in libvas check
                   12127:        Add missing template for ENV_DEBUG Adapted from Quest sudo
                   12128:        [695dbd7b28f4]
                   12129: 
                   12130:        * README.LDAP:
                   12131:        Fix typos; from Quest Sudo
                   12132:        [4eba9da33b8e]
                   12133: 
                   12134: 2010-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12135: 
                   12136:        * plugins/sudoers/Makefile.in:
                   12137:        Add back -I$(top_srcdir); we need it for including compat/foo.h
                   12138:        since we cannot rely on "foo.h" being found relative to the source
                   12139:        file when the cwd is different.
                   12140:        [bbf24695f325]
                   12141: 
                   12142:        * src/exec.c:
                   12143:        Fix a bug where we could treat EAGAIN as a permanent error. Also set
                   12144:        cstat if perform_io() returns an error.
                   12145:        [200475c4326f]
                   12146: 
                   12147:        * common/alloc.c, plugins/sudoers/boottime.c,
                   12148:        plugins/sudoers/sudoers.c:
                   12149:        Add casts to quiet compiler warnings.
                   12150:        [85eb1c336697]
                   12151: 
                   12152:        * plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   12153:        plugins/sudoers/visudo.c:
                   12154:        Fix typo in ternary operator usage.
                   12155:        [6492ac1450e2]
                   12156: 
                   12157: 2010-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12158: 
                   12159:        * INSTALL, configure, configure.in:
                   12160:        Add --enable-warnings and fix typo in SUDO_IO_LOGDIR
                   12161:        [92121d693b30]
                   12162: 
                   12163:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod,
                   12164:        doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod:
                   12165:        Update docs to match sudoers I/O logging changes
                   12166:        [18d651989e49]
                   12167: 
                   12168:        * INSTALL, WHATSNEW, aclocal.m4, configure, configure.in,
                   12169:        pathnames.h.in, plugins/sudoers/def_data.c,
                   12170:        plugins/sudoers/def_data.h, plugins/sudoers/def_data.in,
                   12171:        plugins/sudoers/defaults.c, plugins/sudoers/gram.c,
                   12172:        plugins/sudoers/gram.h, plugins/sudoers/gram.y,
                   12173:        plugins/sudoers/iolog.c, plugins/sudoers/parse.c,
                   12174:        plugins/sudoers/parse.h, plugins/sudoers/sudoers.c,
                   12175:        plugins/sudoers/sudoreplay.c:
                   12176:        Break sudoers transcript feature up into log_input and log_output.
                   12177:        [db3c1248d2ad]
                   12178: 
                   12179:        * plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   12180:        plugins/sudoers/visudo.c:
                   12181:        Use setprogname() as needed.
                   12182:        [6beee63a4553]
                   12183: 
                   12184:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c:
                   12185:        Adapt sudoreplay to iolog changes.
                   12186:        [581f52c05f0f]
                   12187: 
                   12188: 2010-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12189: 
                   12190:        * plugins/sudoers/iolog.c:
                   12191:        Log all input and output into separate files and store a number on
                   12192:        each timing file line to indicate which file the data is in.
                   12193:        [fb460c5273dd]
                   12194: 
                   12195:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
                   12196:        plugins/sudoers/sudoers.h:
                   12197:        Make sudoers_io functions static to iolog.c
                   12198:        [b2df3cc3eecb]
                   12199: 
                   12200: 2010-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12201: 
                   12202:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, src/parse_args.c,
                   12203:        src/sudo_usage.h.in:
                   12204:        Completely remove the -L flag from the sudo front end.
                   12205:        [3d220030b720]
                   12206: 
                   12207:        * plugins/sudoers/sudoreplay.c:
                   12208:        Fix EAGAIN handling when writing to stdout.
                   12209:        [4766d77cea49]
                   12210: 
                   12211:        * plugins/sudoers/sudoers.c:
                   12212:        Eliminate unused variables
                   12213:        [83bd711e79c4]
                   12214: 
                   12215:        * plugins/sudoers/sudoers.c, src/exec.c, src/sudo.c:
                   12216:        Re-enable cleanup functions in sudoers plugin and sudo driver for
                   12217:        error()/errorx().
                   12218:        [43093f937dd8]
                   12219: 
                   12220:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/defaults.c,
                   12221:        plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c,
                   12222:        plugins/sudoers/parse.c, plugins/sudoers/sudoers.c,
                   12223:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c:
                   12224:        Use sudo_printf to display verbose version information.
                   12225:        [435cc9f8d4a2]
                   12226: 
                   12227:        * common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in,
                   12228:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12229:        Minor Makefile cleanup: fix a typo, change the removal order in the
                   12230:        clean targets, and remove a superfluous include path for the sudoers
                   12231:        plugin.
                   12232:        [6e3b2d6b4437]
                   12233: 
                   12234:        * plugins/sudoers/env.c:
                   12235:        Handle duplicate variables in the environment. For unsetenv(), keep
                   12236:        looking even after remove the first instance. For sudo_putenv(),
                   12237:        check for and remove dupes after we replace an existing value.
                   12238:        [c1bbb88d0435]
                   12239: 
                   12240: 2010-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12241: 
                   12242:        * plugins/sudoers/Makefile.in:
                   12243:        Use explicit path to source file instead of $< for files that live
                   12244:        in devdir and top_srcdir.
                   12245:        [358ab7f6cc64]
                   12246: 
                   12247:        * plugins/sudoers/Makefile.in:
                   12248:        Add explicit rules to compile gram.c and toke.c for HP-UX Pevent
                   12249:        ending LIBSUDOERS_OBJS with a backslash
                   12250:        [481a5c96d47e]
                   12251: 
                   12252:        * plugins/sudoers/Makefile.in, src/Makefile.in:
                   12253:        Link libcommon before libreplace since libcommon may use functions
                   12254:        only present in libreplace.
                   12255:        [1847c496ff5b]
                   12256: 
                   12257:        * common/Makefile.in:
                   12258:        Move code common to sudo and the sudoers plugin to a convenience
                   12259:        library, libcommon. Removes the need to make links in the sudoers
                   12260:        plugin dir and reduces re-compilation of duplicate object files.
                   12261:        [4c8986352937]
                   12262: 
                   12263:        * Makefile.in, common/alloc.c, common/atobool.c, common/fileops.c,
                   12264:        common/fmt_string.c, common/gettime.c, common/lbuf.c, common/list.c,
                   12265:        common/term.c, common/zero_bytes.c, configure, configure.in,
                   12266:        plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
                   12267:        src/Makefile.in, src/alloc.c, src/atobool.c, src/fileops.c,
                   12268:        src/fmt_string.c, src/gettime.c, src/lbuf.c, src/list.c, src/term.c,
                   12269:        src/zero_bytes.c:
                   12270:        Move code common to sudo and the sudoers plugin to a convenience
                   12271:        library, libcommon. Removes the need to make links in the sudoers
                   12272:        plugin dir and reduces re-compilation of duplicate object files.
                   12273:        [1d1d98bd55b9]
                   12274: 
                   12275:        * src/exec.c, src/sudo.c, src/sudo.h:
                   12276:        Rename script_execve to sudo_execve and rename script_foo in exec.c
                   12277:        [a35ec80de96a]
                   12278: 
                   12279:        * MANIFEST, src/Makefile.in, src/exec.c, src/script.c:
                   12280:        rename script.c exec.c and fix up the MANIFEST file
                   12281:        [36bc3bff9578]
                   12282: 
                   12283:        * src/script.c, src/sudo.c, src/sudo.h:
                   12284:        Rename script_setup() to pty_setup() and call from script_execve()
                   12285:        directly.
                   12286:        [899b0fb2a14d]
                   12287: 
                   12288:        * configure, configure.in:
                   12289:        bump version to 1.8.0a2
                   12290:        [0b1c1ca9d4e5]
                   12291: 
                   12292:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   12293:        Document init_session
                   12294:        [b5324785a406]
                   12295: 
                   12296:        * plugins/sudoers/auth/API, plugins/sudoers/auth/sudo_auth.c,
                   12297:        plugins/sudoers/auth/sudo_auth.h:
                   12298:        Clean up the sudoers auth API a bit and update the docs.
                   12299:        [c40fd4cb6e68]
                   12300: 
                   12301:        * include/sudo_plugin.h, plugins/sudoers/auth/pam.c,
                   12302:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c,
                   12303:        plugins/sudoers/sudoers.h, src/script.c, src/sudo.c:
                   12304:        Add init_session function to struct policy_plugin that gets called
                   12305:        before the uid/gid/etc changes. A struct passwd pointer is passed
                   12306:        in,which may be NULL if the user does not exist in the passwd
                   12307:        database.The sudoers module uses init_session to open the pam
                   12308:        session as needed.
                   12309:        [d71723320ee8]
                   12310: 
                   12311: 2010-05-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12312: 
                   12313:        * plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c,
                   12314:        plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/set_perms.c,
                   12315:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   12316:        Add open/close session to sudo auth, only used by PAM. This allows
                   12317:        us to open (and close) the PAM session from sudoers.
                   12318:        [2665e2920d0d]
                   12319: 
                   12320:        * plugins/sudoers/Makefile.in:
                   12321:        Add explicit rule to build getdate.o for HP-UX make.
                   12322:        [7f049e989956]
                   12323: 
                   12324:        * plugins/sudoers/Makefile.in:
                   12325:        Back out most of change 45e406ebdea2. Create dummy .l.c and .y.c
                   12326:        rules as an alternate way to prevent HP-UX make (and others) from
                   12327:        trying to rebuild the parser in non-dev mode.
                   12328:        [f84badad98c5]
                   12329: 
                   12330:        * plugins/sudoers/sudoers.c:
                   12331:        Re-enable PATH_MAX check for command
                   12332:        [40d8a50da136]
                   12333: 
                   12334:        * Makefile.in:
                   12335:        For distclean, clean the main directory last since the subdirs need
                   12336:        to be able to run libtool to clean things.
                   12337:        [8949a9861634]
                   12338: 
                   12339:        * compat/Makefile.in:
                   12340:        Fix generation of mksiglist.h
                   12341:        [b7cdc9b36650]
                   12342: 
                   12343:        * src/script.c:
                   12344:        Now that we defer sending cstat until the end of script_child() we
                   12345:        cannot reuse cstat when reading command status from parent.
                   12346:        [25c882643466]
                   12347: 
                   12348: 2010-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12349: 
                   12350:        * configure, configure.in, doc/sudo.man.in, doc/sudo.man.pl,
                   12351:        doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in,
                   12352:        doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoreplay.cat,
                   12353:        doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in:
                   12354:        Use numeric registers to handle conditionals instead of trying to do
                   12355:        it all with text processing.
                   12356:        [478079c3fd4b]
                   12357: 
                   12358:        * doc/sudoers.pod:
                   12359:        Document per-command SELinux settings
                   12360:        [13840d566805]
                   12361: 
                   12362:        * plugins/sudoers/sudoers.c:
                   12363:        Repair "sudo -l -U username"
                   12364:        [10a0dcdf2ddf]
                   12365: 
                   12366:        * plugins/sudoers/sudoers.c:
                   12367:        Set selinux role and type in command details.
                   12368:        [8ae6d35a126d]
                   12369: 
                   12370:        * src/script.c, src/selinux.c, src/sudo.h:
                   12371:        Rework SELinux support.
                   12372:        [83279cc94bf2]
                   12373: 
                   12374: 2010-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12375: 
                   12376:        * src/script.c, src/selinux.c, src/sudo.h:
                   12377:        Make SELinux support compile again. Needs more work to be complete.
                   12378:        [3d3addebcf82]
                   12379: 
                   12380:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   12381:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   12382:        src/parse_args.c, src/script.c, src/selinux.c, src/sudo.c,
                   12383:        src/sudo.h:
                   12384:        Bring back closefrom settings.
                   12385:        [b1c6257d4bbb]
                   12386: 
                   12387:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c,
                   12388:        plugins/sudoers/sudoers.h:
                   12389:        If running a command or sudoedit in transcript mode, call
                   12390:        io_nextid() before log_allowed() so the session id is logged.
                   12391:        [c42f3ae40150]
                   12392: 
                   12393:        * configure, configure.in:
                   12394:        Use mandoc(1) if nroff(1) is not present.
                   12395:        [daad4bbd04af]
                   12396: 
                   12397:        * doc/Makefile.in:
                   12398:        Use the --file argument to config.status instead of setting
                   12399:        CONFIG_FILES in the environment.
                   12400:        [c89411a8bf70]
                   12401: 
                   12402:        * plugins/sudoers/Makefile.in:
                   12403:        We cannot conditionally update gram.h or the dependency ordering
                   12404:        gets messed up in devel mode.
                   12405:        [c938953231d9]
                   12406: 
                   12407: 2010-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12408: 
                   12409:        * Makefile.in, compat/Makefile.in, configure, configure.in,
                   12410:        doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in,
                   12411:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12412:        Substitute @SHELL@ into Makefiles
                   12413:        [36aa6a095335]
                   12414: 
                   12415:        * config.sub:
                   12416:        Fix typo
                   12417:        [16d294d26b58]
                   12418: 
                   12419:        * config.guess, config.sub, configure, configure.in:
                   12420:        Update to autoconf 2.65
                   12421:        [4fa6ea8caea3]
                   12422: 
                   12423:        * Makefile.in:
                   12424:        Fix libtool target (space vs. tabs)
                   12425:        [755cf3892618]
                   12426: 
                   12427:        * config.h.in, plugins/sudoers/logging.h, plugins/sudoers/visudo.c:
                   12428:        Remove use of RETSIGTYPE; all modern systems have signal handlers
                   12429:        that return void.
                   12430:        [42b4e3aee668]
                   12431: 
                   12432:        * Makefile.in, aclocal.m4, acsite.m4, configure, configure.in,
                   12433:        ltmain.sh, m4/libtool.m4, m4/ltoptions.m4, m4/ltsugar.m4,
                   12434:        m4/ltversion.m4, m4/lt~obsolete.m4, plugins/sample/Makefile.in,
                   12435:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12436:        Update to libtool-2.2.6b. I haven't made any local modifications
                   12437:        this time, which should be OK since we install sudo_noexec.so by
                   12438:        hand now.
                   12439:        [6f79ced593bb]
                   12440: 
                   12441:        * compat/Makefile.in, plugins/sample/Makefile.in,
                   12442:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12443:        Use libtool to clean objects
                   12444:        [1581057d6472]
                   12445: 
                   12446:        * include/Makefile.in:
                   12447:        Install sudo_plugin.h as part of "make install" and make other
                   12448:        install targets callable from the top-level Makefile
                   12449:        [aaaeb027d774]
                   12450: 
                   12451:        * configure, configure.in:
                   12452:        regen with autoupdate to eliminate AC_TRY_LINK
                   12453:        [5d5541c230f5]
                   12454: 
                   12455:        * Makefile.in, compat/Makefile.in, configure, configure.in,
                   12456:        doc/Makefile.in, plugins/sample/Makefile.in,
                   12457:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12458:        Install sudo_plugin.h as part of "make install" and make other
                   12459:        install targets callable from the top-level Makefile
                   12460:        [b258b8401b1c]
                   12461: 
                   12462:        * plugins/sample/sample_plugin.c:
                   12463:        The sample plugin doesn't support being run with no args so return a
                   12464:        usage error in this case.
                   12465:        [473b3cf965be]
                   12466: 
                   12467:        * plugins/sudoers/iolog.c:
                   12468:        Set close on exec flag for descriptors used for I/O logging so they
                   12469:        are not present in the command being run.
                   12470:        [2c7e8708df76]
                   12471: 
                   12472:        * plugins/sudoers/tsgetgrpw.c:
                   12473:        Set close on exec flag in private versions of setpwent() and
                   12474:        setgrent().
                   12475:        [64fef78cb833]
                   12476: 
                   12477:        * src/script.c:
                   12478:        Close the I/O pipes aftering dup2()ing them to std{in,out,err}.
                   12479:        Fixes extra fds being present in the command when it is part of a
                   12480:        pipeline.
                   12481:        [060451617713]
                   12482: 
                   12483:        * plugins/sudoers/sudoers.c:
                   12484:        Set user_tty to "unknown" if there is no tty, like sudo 1.7 does (it
                   12485:        is used when logging). Note that user_ttypath will still be NULL if
                   12486:        there is no tty.
                   12487:        [31b69a6ecda7]
                   12488: 
                   12489:        * src/script.c, src/sudo.h:
                   12490:        Cosmetic changes: add comments, remove orphaned prototype and
                   12491:        make a global static.
                   12492:        [f7851af0143e]
                   12493: 
                   12494: 2010-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12495: 
                   12496:        * src/script.c:
                   12497:        Move check for maxfd == -1 to flush_output where it belongs.
                   12498:        [b826a95b4491]
                   12499: 
                   12500:        * src/script.c:
                   12501:        Break out of select loop if all the fds we want to select on are -1.
                   12502:        [f5b387024238]
                   12503: 
                   12504:        * src/sudo.c:
                   12505:        Avoid possible malloc(0) if plugin returns an empty groups list.
                   12506:        [9765a8fe5ce7]
                   12507: 
                   12508:        * src/sudo.c:
                   12509:        Add debugging info when calling plugin close function
                   12510:        [95a273c7ff66]
                   12511: 
                   12512:        * src/script.c:
                   12513:        Avoid closing stdin/stdout/stderr when we are piping output.
                   12514:        [330e76423caf]
                   12515: 
                   12516:        * src/script.c:
                   12517:        When execve() of the command fails, it is possible to receive
                   12518:        SIGCHLD before we've read the error status from the pipe. Re-order
                   12519:        things such that we send the final status at the very end and prefer
                   12520:        error status over wait status.
                   12521:        [b0dcf825244f]
                   12522: 
                   12523: 2010-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12524: 
                   12525:        * plugins/sudoers/auth/sudo_auth.c:
                   12526:        Fix compilation for non PAM/BSD auth/AIX auth
                   12527:        [e382b39d2e4f]
                   12528: 
                   12529: 2010-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12530: 
                   12531:        * src/script.c:
                   12532:        Additional checks to make sure we don't close /dev/tty by mistake.
                   12533:        When flushing, sleep in select as long as we have buffers that need
                   12534:        to be written out.
                   12535:        [8139cbd3dd54]
                   12536: 
                   12537:        * src/script.c:
                   12538:        Now that we can use pipes for stdin/stdout/stderr there is no longer
                   12539:        a need to error out when there is no tty. We just need to make sure
                   12540:        we don't try to use the tty fd if it is -1.
                   12541:        [666621635d26]
                   12542: 
                   12543: 2010-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12544: 
                   12545:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   12546:        include/sudo_plugin.h, plugins/sample/sample_plugin.c,
                   12547:        plugins/sudoers/iolog.c, plugins/sudoers/sudoers.h, src/sudo.c:
                   12548:        Add argc and argv to I/O logger open function.
                   12549:        [0d7faa007d27]
                   12550: 
                   12551:        * doc/sudo_plugin.man.in, doc/sudo_plugin.pod, include/sudo_plugin.h,
                   12552:        plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c,
                   12553:        src/parse_args.c, src/sudo.c, src/sudo_edit.c:
                   12554:        Remove check_sudoedit function pointer in struct sudo_policy.
                   12555:        Instead, sudo will set sudoedit=true in the settings array. The
                   12556:        plugin should check for this and modify argv_out as appropriate in
                   12557:        check_policy.
                   12558:        [c0328e3276b8]
                   12559: 
                   12560: 2010-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12561: 
                   12562:        * plugins/sample/sample_plugin.c, src/sudo.c, src/sudo.h,
                   12563:        src/sudo_edit.c:
                   12564:        If plugin sets "sudoedit=true" in the command info, enable sudoedit
                   12565:        mode even if not invoked as sudoedit. This allows a plugin to
                   12566:        enable sudoedit when the user runs an editor.
                   12567:        [96d67b99e42e]
                   12568: 
                   12569: 2010-05-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12570: 
                   12571:        * plugins/sudoers/Makefile.in:
                   12572:        gram.h must not depend on gram.y if we want to avoid unnecessary
                   12573:        rebuilding of targets dependent on gram.h when gram.y changes.
                   12574:        [9db4b767fdca]
                   12575: 
                   12576:        * plugins/sample/sample_plugin.c:
                   12577:        Refactor common bits of check_policy and check_edit
                   12578:        [ac4d366a04cf]
                   12579: 
                   12580:        * plugins/sample/sample_plugin.c:
                   12581:        Add sudoedit support
                   12582:        [a1a6cc4c0cef]
                   12583: 
                   12584: 2010-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12585: 
                   12586:        * plugins/sudoers/Makefile.in:
                   12587:        Rely more on VPATH; fixes a dependency issue with the parser.
                   12588:        [45e406ebdea2]
                   12589: 
                   12590:        * include/compat.h:
                   12591:        Fix typo introduced in last commit
                   12592:        [3ccb0f853d11]
                   12593: 
                   12594:        * include/compat.h:
                   12595:        Emulate seteuid using setreuid() or setresuid() as needed. There are
                   12596:        still a few places that call seteuid() directly.
                   12597:        [36e8efa3a99d]
                   12598: 
                   12599:        * src/parse_args.c, src/sudo_edit.c:
                   12600:        Attempt to fix building on systems that only have setuid.
                   12601:        [8e9ba4083318]
                   12602: 
                   12603:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   12604:        Clarify sudoedit a tad.
                   12605:        [d39dfaa14ade]
                   12606: 
                   12607: 2010-05-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12608: 
                   12609:        * src/sudo_edit.c:
                   12610:        Fix compilation on HP-UX
                   12611:        [f6e47843d139]
                   12612: 
                   12613:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   12614:        Document sudoedit
                   12615:        [4cbf5196d993]
                   12616: 
                   12617:        * plugins/sudoers/sudoers.c, src/sudo.c, src/sudo.h, src/sudo_edit.c:
                   12618:        Change how we handle the sudoedit argv. We now require that there
                   12619:        be a "--" in argv to separate the editor and any command line
                   12620:        arguments from the files to be edited.
                   12621:        [20623d549a3c]
                   12622: 
                   12623:        * include/sudo_plugin.h, plugins/sample/sample_plugin.c,
                   12624:        plugins/sudoers/Makefile.in, plugins/sudoers/gettime.c,
                   12625:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
                   12626:        src/Makefile.in, src/gettime.c, src/parse_args.c, src/sudo.c,
                   12627:        src/sudo.h, src/sudo_edit.c:
                   12628:        Work in progress support for sudoedit. The actual interface used by
                   12629:        the plugin for sudoedit is likely to change.
                   12630:        [c31262a31997]
                   12631: 
                   12632:        * plugins/sudoers/find_path.c, plugins/sudoers/sudoers.c,
                   12633:        plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c:
                   12634:        Make find_path() a little more generic by not checking def_foo
                   12635:        variables inside it. Instead, pass in ignore_dot as a function
                   12636:        argument.
                   12637:        [9c23101a094d]
                   12638: 
                   12639:        * plugins/sudoers/env.c:
                   12640:        Add version of getenv(3) that uses our own environ pointer.
                   12641:        [0e3783e63534]
                   12642: 
                   12643: 2010-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12644: 
                   12645:        * src/script.c:
                   12646:        Avoid a potential race condition if SIGCHLD is received immediately
                   12647:        before we call select().
                   12648:        [99adc5ea7f0a]
                   12649: 
                   12650:        * plugins/sudoers/sudoers.c:
                   12651:        Call env_init() before we open the sudoers sources as those may call
                   12652:        our setenv() replacement.
                   12653:        [5f82601f5ab0]
                   12654: 
                   12655:        * plugins/sudoers/env.c:
                   12656:        Initialize env_len in env_init()
                   12657:        [7ae02b3029b5]
                   12658: 
                   12659: 2010-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12660: 
                   12661:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod:
                   12662:        Document time stamp shortcomings under SECURITY NOTES Use "time
                   12663:        stamp" instead of timestamp.
                   12664:        [2b86120815b2]
                   12665: 
                   12666:        * doc/Makefile.in:
                   12667:        Make sed substitution of mansectsu and mansectform global.
                   12668:        [94588632dba0]
                   12669: 
                   12670:        * plugins/sudoers/check.c:
                   12671:        If the tty lives on a devpts filesystem, stash the ctime in the tty
                   12672:        ticket file, as it is not updated when the tty is written to. This
                   12673:        helps us determine when a tty has been reused without the user
                   12674:        authenticating again with sudo.
                   12675:        [0e62a31bceb0]
                   12676: 
                   12677:        * src/tgetpass.c:
                   12678:        Fix pasto in mulitple signal fix and use _NSIG not NSIG since that
                   12679:        is what our compat checks set.
                   12680:        [df50f0a040c9]
                   12681: 
                   12682:        * configure, configure.in:
                   12683:        Add check for whether sudo need to link with -ldl to get dlopen().
                   12684:        This is a bit of a hack that will get reworked when libtool is
                   12685:        updated.
                   12686:        [63bdcf579533]
                   12687: 
                   12688:        * plugins/sudoers/check.c:
                   12689:        Fix timestamp removal with -k/-K
                   12690:        [6b4639fef973]
                   12691: 
                   12692:        * plugins/sudoers/Makefile.in:
                   12693:        audit.c is now private to the sudoers plugin
                   12694:        [1974f342ae0b]
                   12695: 
                   12696:        * configure, configure.in:
                   12697:        Link with -lpthread on HP-UX since a plugin may be linked with
                   12698:        -lpthread and dlopen() will fail if the shared object has a
                   12699:        dependency on -lpthread but the main program is not linked with it.
                   12700:        [d42139391263]
                   12701: 
                   12702:        * config.h.in, configure, configure.in, plugins/sudoers/set_perms.c:
                   12703:        Add separate test for getresuid() since HP-UX has setresuid() but no
                   12704:        getresuid().
                   12705:        [910fe727a374]
                   12706: 
                   12707:        * doc/Makefile.in:
                   12708:        Remove errant backslash
                   12709:        [dd5464257c69]
                   12710: 
                   12711:        * src/script.c:
                   12712:        Fix SIGPIPE handling. Now that we use may use pipes for
                   12713:        stdin/stdout we need to pass any SIGPIPE we receive to the running
                   12714:        command.
                   12715:        [3f6b1991f4fd]
                   12716: 
                   12717:        * src/script.c:
                   12718:        Also start the command in the background if stdin is not a tty.
                   12719:        [d93bc33a3740]
                   12720: 
                   12721: 2010-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12722: 
                   12723:        * plugins/sudoers/sudoreplay.c, src/script.c, src/sudo.h, src/term.c:
                   12724:        No need to use pseudo-cbreak mode now that we use pipes when stdout
                   12725:        is not a tty. Instead, check whether stdin is a tty and if not,
                   12726:        delay setting the tty to raw mode until the command tries to access
                   12727:        it itself (and receives SIGTTIN or SIGTTOU).
                   12728:        [e68315cf8c6b]
                   12729: 
                   12730:        * src/tgetpass.c:
                   12731:        Use an array for signals received instead of a single variable so we
                   12732:        don't lose any when there are multiple different signals.
                   12733:        [2ac726dac864]
                   12734: 
                   12735:        * src/tgetpass.c:
                   12736:        Do signal setup after turning off echo, not before. If we are using
                   12737:        a tty but are not the foreground pgrp this will generate SIGTTOU so
                   12738:        we want the default action to be taken (suspend process).
                   12739:        [bebb6209c795]
                   12740: 
                   12741: 2010-05-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12742: 
                   12743:        * src/script.c:
                   12744:        Flush the iobufs on suspend or child exit using the same logic as
                   12745:        the main event loop.
                   12746:        [c627feee1035]
                   12747: 
                   12748:        * src/script.c:
                   12749:        Free memory after we are done with it.
                   12750:        [8db9b611b45a]
                   12751: 
                   12752: 2010-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12753: 
                   12754:        * doc/HISTORY:
                   12755:        Quest now sponsors Sudo development
                   12756:        [6cc490083bc7]
                   12757: 
                   12758: 2010-05-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12759: 
                   12760:        * doc/Makefile.in:
                   12761:        Install sudo_plugin man page.
                   12762:        [c253729790b2]
                   12763: 
                   12764:        * src/script.c:
                   12765:        Go back to reseting io_buffer offset and length (and now also the
                   12766:        EOF handling) in the loop we do the FD_SET, not after we drain the
                   12767:        buffer after write() since we don't know what order reads and writes
                   12768:        will occur in.
                   12769:        [5f38bfa8497f]
                   12770: 
                   12771:        * MANIFEST:
                   12772:        audit files moved to sudoers plugin directory
                   12773:        [b1ead182428e]
                   12774: 
                   12775:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   12776:        Document plugin_printf and new logging functions.
                   12777:        [fe9430b60ab5]
                   12778: 
                   12779:        * src/script.c:
                   12780:        Add support for logging stdin when it is not a tty. There is still a
                   12781:        bug where "cat | sudo cat" has problems because both cat and sudo
                   12782:        are trying to read from the tty.
                   12783:        [04c9c59fcfba]
                   12784: 
                   12785:        * include/sudo_plugin.h, plugins/sample/sample_plugin.c,
                   12786:        plugins/sudoers/sudoers.c, src/script.c:
                   12787:        Add separate I/O logging functions for tty in/out and
                   12788:        stdin/stdout/stderr. NOTE: stdin logging does not currently work and
                   12789:        is disabled for now.
                   12790:        [a36dfd4ca935]
                   12791: 
                   12792: 2010-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12793: 
                   12794:        * include/sudo_plugin.h, plugins/sample/sample_plugin.c,
                   12795:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   12796:        plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
                   12797:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   12798:        src/conversation.c, src/sudo.c, src/sudo_plugin_int.h:
                   12799:        Add pointer to a printf like function to plugin open functon. This
                   12800:        can be used instead of the conversation function to display info and
                   12801:        error messages.
                   12802:        [98734eea8ef1]
                   12803: 
                   12804:        * Makefile.in:
                   12805:        Stop if make in a subdir fails
                   12806:        [228bb3ad2dbc]
                   12807: 
                   12808:        * src/script.c:
                   12809:        Only set user's tty to blocking mode when doing the final flush.
                   12810:        Flush pipes as well as pty master when the process is done.
                   12811:        [20ff67218666]
                   12812: 
                   12813: 2010-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12814: 
                   12815:        * plugins/sudoers/ldap.c:
                   12816:        Use print_error() when displaying ldap config info in debugging
                   12817:        mode.
                   12818:        [d142e0cacb22]
                   12819: 
                   12820:        * compat/Makefile.in, compat/strdup.c, compat/strndup.c:
                   12821:        No longer need strdup() or strndup() replacements.
                   12822:        [df53697174ec]
                   12823: 
                   12824:        * plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c,
                   12825:        plugins/sudoers/sudoers.h:
                   12826:        Add print_error() function that uses the conversation function to
                   12827:        print a variable number of error strings and use it in log_error().
                   12828:        [b1fa2861b575]
                   12829: 
                   12830:        * src/script.c, src/sudo.h, src/term.c:
                   12831:        Do not need the opost flag to term_copy() now that we use pipes for
                   12832:        stdout/stderr when they are not a tty.
                   12833:        [f42811f70a19]
                   12834: 
                   12835:        * src/script.c:
                   12836:        Use pipes to the sudo process if stdout or stderr is not a tty.
                   12837:        Still needs some polishing and a decision as to whether it is
                   12838:        desirable to add additonal entry points for logging
                   12839:        stdout/stderr/stdin when they are not ttys. That would allow a
                   12840:        replay program to keep things separate and to know whether the
                   12841:        terminal needs to be in raw mode at replay time.
                   12842:        [1a945e0ab2da]
                   12843: 
                   12844: 2010-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12845: 
                   12846:        * plugins/sudoers/Makefile.in, plugins/sudoers/audit.c,
                   12847:        plugins/sudoers/bsm_audit.c, plugins/sudoers/bsm_audit.h,
                   12848:        src/audit.c, src/bsm_audit.c, src/bsm_audit.h:
                   12849:        Move audit sources into the sudoers plugin dir; the driver does not
                   12850:        use them.
                   12851:        [50ec36422cd0]
                   12852: 
                   12853:        * compat/getline.c, compat/mksiglist.c, compat/nanosleep.c,
                   12854:        compat/strdup.c, compat/strndup.c, plugins/sample/sample_plugin.c,
                   12855:        plugins/sudoers/boottime.c, plugins/sudoers/getdate.c,
                   12856:        plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c,
                   12857:        plugins/sudoers/timestr.c, plugins/sudoers/vasgroups.c, src/alloc.c,
                   12858:        src/atobool.c, src/audit.c, src/lbuf.c, src/list.c, src/sesh.c,
                   12859:        src/term.c, src/ttysize.c:
                   12860:        Use angle brackets when including headers that can only be found
                   12861:        when an -I flag is specified. The files in the compat dir could get
                   12862:        away with double quotes here but I've converted all the source files
                   12863:        to use angle brackets for consistency.
                   12864:        [9e30a8fc6d4b]
                   12865: 
                   12866:        * plugins/sudoers/Makefile.in:
                   12867:        Add missing -I$(top_srcdir) to CPPFLAGS so includes in the compat
                   12868:        dir can be found when building outside the source tree.
                   12869:        [1150934b79dd]
                   12870: 
                   12871:        * plugins/sudoers/Makefile.in:
                   12872:        Clean up links in distclean
                   12873:        [78595028be8b]
                   12874: 
                   12875:        * plugins/sudoers/Makefile.in:
                   12876:        Hack around VPATH semantic differences by symlinking files we need
                   12877:        from ../../src into the current directory and build those. A better
                   12878:        fix would be to either make a .a or .la file with those files in it
                   12879:        or simply use a single, flat, Makefile instead of per-subdirs
                   12880:        Makefiles.
                   12881:        [892c332d3f05]
                   12882: 
                   12883:        * plugins/sudoers/Makefile.in, src/Makefile.in, src/fmt_string.c:
                   12884:        fmt_string is used by the sudoers plugin too so do not include
                   12885:        sudo.h (which is not really needed here anyway)
                   12886:        [231c35e3941f]
                   12887: 
                   12888:        * compat/Makefile.in, plugins/sample/Makefile.in,
                   12889:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12890:        Fix building with non-BSD versions of make such as GNU make.
                   12891:        Requires VPATH support, which should be in any non-neolithic make.
                   12892:        [dc174f135919]
                   12893: 
                   12894:        * configure, configure.in, plugins/sudoers/Makefile.in,
                   12895:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c,
                   12896:        src/Makefile.in:
                   12897:        Re-enable bsm audit. Currently auditing is done within the sudoers
                   12898:        plugin itself. If possible, this should really be done in the main
                   12899:        driver but we don't presently have the needed data to do that. This
                   12900:        will be re-evaluated when Linux audit support is added.
                   12901:        [1d05a3236bfe]
                   12902: 
                   12903:        * compat/Makefile.in, plugins/sample/Makefile.in,
                   12904:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   12905:        Remove extraneous $srcdir and use more .c.lo and .c.o rules instead
                   12906:        of explicit rules in the dependency.
                   12907:        [88f80efd25f0]
                   12908: 
                   12909:        * plugins/sudoers/visudo.c:
                   12910:        Fix mismerge; alias_remove_recursive() now returns int
                   12911:        [6257a4849641]
                   12912: 
                   12913: 2010-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12914: 
                   12915:        * plugins/sudoers/visudo.c:
                   12916:        Fix a crash when checking a sudoers file that has aliases that
                   12917:        reference themselves. Based on a diff from David Wood.
                   12918:        [545d194484a7]
                   12919: 
                   12920:        * src/script.c:
                   12921:        Print signal info after restoring the tty mode, not before.
                   12922:        [a68618e67435]
                   12923: 
                   12924:        * src/script.c:
                   12925:        Defer call to alarm() until after we fork the child. Pass correct
                   12926:        pid to terminate_child() If the command exits due to signal, set
                   12927:        alive to false like we do when it exits normally. Add missing
                   12928:        check for errpipe[0] != -1 before using it in FD_ISSET
                   12929:        [22f0a1549391]
                   12930: 
                   12931: 2010-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12932: 
                   12933:        * plugins/sudoers/boottime.c:
                   12934:        Use 1/0 instead of TRUE/FALSE so we don't need sudoers.h
                   12935:        [0e627170c6e8]
                   12936: 
                   12937: 2010-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12938: 
                   12939:        * src/Makefile.in:
                   12940:        Simplify dependencies by using .c.o and .c.lo rules.
                   12941:        [6abcaef5d1ac]
                   12942: 
                   12943:        * configure, configure.in, plugins/sudoers/Makefile.in,
                   12944:        src/Makefile.in:
                   12945:        Substitute in @PROGS@ into src/Makefile to add sesh
                   12946:        [cc46d3b6208f]
                   12947: 
                   12948: 2010-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12949: 
                   12950:        * plugins/sudoers/sudoers.c:
                   12951:        Add back calls to log_denial() if sudoers does not allow the
                   12952:        command.
                   12953:        [9783316207f0]
                   12954: 
                   12955:        * plugins/sudoers/sudoers.c:
                   12956:        Pass in correct pwflag for list and validate.
                   12957:        [973dd56d4b81]
                   12958: 
                   12959:        * plugins/sudoers/env.c:
                   12960:        Add missing check for NULL in validate_env_vars
                   12961:        [1d6eb6957824]
                   12962: 
                   12963:        * src/Makefile.in:
                   12964:        Add sudo_noexec.la to "all" target, otherwise it only gets built at
                   12965:        install time.
                   12966:        [644a9694d2ef]
                   12967: 
                   12968:        * plugins/sudoers/sudoers.c:
                   12969:        Only set sudo_user.env_vars if the env_add list is empty.
                   12970:        [fccdf6f0e0e2]
                   12971: 
                   12972:        * plugins/sudoers/sudoers.c:
                   12973:        Set sudo_user.env_vars so that environment variables specified on
                   12974:        the command line get logged correctly.
                   12975:        [9b51012c491e]
                   12976: 
                   12977:        * plugins/sudoers/env.c, plugins/sudoers/logging.c,
                   12978:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   12979:        Re-enable environment files and setting environment variables on the
                   12980:        command line.
                   12981:        [5662d5645dbd]
                   12982: 
                   12983: 2010-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12984: 
                   12985:        * plugins/sudoers/check.c:
                   12986:        Fix typo in last commit (ifndef vs ifdef) Make sure we pass ctime()
                   12987:        a pointer to time_t as tv_sec in struct timeval may be long.
                   12988:        [4de0c46e788e]
                   12989: 
                   12990:        * plugins/sudoers/check.c:
                   12991:        Don't stash ctime in on-disk tty ticket info for now; on many
                   12992:        (most?) systems the ctime is updated when the tty is written to.
                   12993:        Once I have a better idea of what systems do not update ctime on
                   12994:        ttys (and have a way to test for this) the ctime stash will be
                   12995:        conditionally re-enabled.
                   12996:        [a90eeec0f648]
                   12997: 
                   12998: 2010-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   12999: 
                   13000:        * MANIFEST, Makefile.in:
                   13001:        Add back "dist" target, this time using a MANIFEST file
                   13002:        [29277c05499f]
                   13003: 
                   13004:        * Makefile.in:
                   13005:        Remove Makefile in distclean target
                   13006:        [83d695f4f450]
                   13007: 
                   13008:        * Makefile.in, src/Makefile.in:
                   13009:        Update clean and cleandir targets
                   13010:        [ad7b2afeb9c1]
                   13011: 
                   13012:        * include/fileops.h, plugins/sudoers/sudoers.h, src/fileops.c,
                   13013:        src/sudo.h:
                   13014:        Move fileops.c defines and prototypes to filesops.h
                   13015:        [4545e9b6892d]
                   13016: 
                   13017:        * plugins/sudoers/check.c:
                   13018:        Lock the tty timestamp when writing. We shouldn't have to lock when
                   13019:        reading since the file is updated via a single write system call.
                   13020:        [0c7276f02696]
                   13021: 
                   13022: 2010-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13023: 
                   13024:        * plugins/sudoers/alias.c, plugins/sudoers/check.c,
                   13025:        plugins/sudoers/defaults.c, plugins/sudoers/find_path.c,
                   13026:        plugins/sudoers/getspwuid.c, plugins/sudoers/gettime.c,
                   13027:        plugins/sudoers/goodpath.c, plugins/sudoers/interfaces.c,
                   13028:        plugins/sudoers/iolog.c, plugins/sudoers/ldap.c,
                   13029:        plugins/sudoers/logging.c, plugins/sudoers/match.c,
                   13030:        plugins/sudoers/nonunix.h, plugins/sudoers/parse.c,
                   13031:        plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c,
                   13032:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
                   13033:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   13034:        plugins/sudoers/timestr.c, plugins/sudoers/tsgetgrpw.c,
                   13035:        plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c:
                   13036:        Convert to ANSI C function declarations
                   13037:        [9c45def57cf7]
                   13038: 
                   13039:        * plugins/sudoers/sudoers.h:
                   13040:        Remove extraneous bits and classify by source file.
                   13041:        [e8ea9f109ebb]
                   13042: 
                   13043:        * include/compat.h:
                   13044:        Add timercmp macro for systems without it
                   13045:        [d3bf87b1d08e]
                   13046: 
                   13047:        * plugins/sudoers/boottime.c, plugins/sudoers/check.c,
                   13048:        plugins/sudoers/sudoers.h:
                   13049:        get_boottime() now fills in a timeval struct
                   13050:        [3573c3f44e11]
                   13051: 
                   13052:        * plugins/sudoers/check.c:
                   13053:        Store info from stat(2)ing the tty in the tty ticket when tty
                   13054:        tickets are in use. On most systems, this closes the loophole
                   13055:        whereby a user can log out of a tty, log back in and still have the
                   13056:        timestamp be valid.
                   13057:        [53380f9f5242]
                   13058: 
                   13059:        * config.h.in, configure.in:
                   13060:        Add timespec2timeval and use it when getting ctime/mtime
                   13061:        [4cb7f7caec2c]
                   13062: 
                   13063: 2010-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13064: 
                   13065:        * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/set_perms.c,
                   13066:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   13067:        plugins/sudoers/testsudoers.c:
                   13068:        Convert perm setting to push/pop model; still needs some work Use
                   13069:        the stashed runas groups instead of using getgrouplist() Reset perms
                   13070:        to the initial value on error
                   13071:        [09c072ebde8b]
                   13072: 
                   13073:        * config.h.in, configure.in:
                   13074:        fix ctim_get and mtim_get macros
                   13075:        [58773dc1e360]
                   13076: 
                   13077:        * config.h.in, configure, configure.in, include/compat.h,
                   13078:        plugins/sudoers/check.c, plugins/sudoers/gettime.c,
                   13079:        plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/fileops.c:
                   13080:        Use timeval directly instead of converting to timespec when dealing
                   13081:        with file times and time of day.
                   13082:        [a0ce1ae00a67]
                   13083: 
                   13084:        * plugins/sudoers/Makefile.in:
                   13085:        Don't like sudoreplay with libsudoers.la due to a yacc symbol
                   13086:        conflict.
                   13087:        [f1a59cc63a15]
                   13088: 
                   13089: 2010-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13090: 
                   13091:        * configure, configure.in:
                   13092:        Darwin >= 9.x has real setreuid(2)
                   13093:        [7ec942a64275]
                   13094: 
                   13095: 2010-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13096: 
                   13097:        * plugins/sudoers/env.c, plugins/sudoers/sudoers.h:
                   13098:        Ansify env.c
                   13099:        [f58551bad10a]
                   13100: 
                   13101:        * plugins/sudoers/env.c, plugins/sudoers/sudoers.c,
                   13102:        plugins/sudoers/sudoers.h:
                   13103:        Remove remaining references to the environ pointer.
                   13104:        [96faa530816a]
                   13105: 
                   13106: 2010-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13107: 
                   13108:        * config.h.in, configure, configure.in, plugins/sudoers/env.c:
                   13109:        Don't change the environ directly in the sudoers plugin
                   13110:        [6db48ed3f7e0]
                   13111: 
                   13112: 2010-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13113: 
                   13114:        * plugins/sudoers/sudoers.c:
                   13115:        Fix typo
                   13116:        [4aa452b07f8f]
                   13117: 
                   13118:        * plugins/sudoers/alias.c:
                   13119:        Fix use after free in error message when a duplicate alias exists.
                   13120:        [ce1d2812ee34]
                   13121: 
                   13122: 2010-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13123: 
                   13124:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   13125:        src/parse_args.c:
                   13126:        Add a "noninteractive" boolean to the settings passed in to the
                   13127:        plugin's open function that is set when the user specifies the -n
                   13128:        flag.
                   13129:        [68f8d9d6d4d0]
                   13130: 
                   13131:        * config.h.in, configure, configure.in, plugins/sudoers/env.c:
                   13132:        Add workaround for the lack of the environ pointer on Mac OS X in
                   13133:        dlopen()ed modules. Use of environ in the sudoers plugin should
                   13134:        ultimately be removed but this will do for the moment.
                   13135:        [80c61647434f]
                   13136: 
                   13137:        * plugins/sudoers/visudo.c:
                   13138:        Set errorfile to the sudoers path if we set parse_error manually.
                   13139:        This prevents a NULL dereference in printf() when checking a sudoers
                   13140:        file in strict mode when alias errors are present.
                   13141:        [45e249ca99f7]
                   13142: 
                   13143:        * plugins/sudoers/sudoers.c:
                   13144:        Main sudo no longer print "unable to execute" on exec failure so do
                   13145:        it here.
                   13146:        [50aaf62b43b5]
                   13147: 
                   13148: 2010-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13149: 
                   13150:        * src/script.c:
                   13151:        Use a pipe to pass back errno to the parent if execve() fails. If we
                   13152:        get an error in script_child(), kill the command and exit.
                   13153:        [dc3bf870f91b]
                   13154: 
                   13155:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   13156:        src/parse_args.c, src/sudo.c:
                   13157:        Handle plugin's open function returning -2 (usage error).
                   13158:        [aadf900c1de8]
                   13159: 
                   13160:        * src/script.c:
                   13161:        If execve() fails, leave it to the plugin to print an error string.
                   13162:        [e25748f2d5b9]
                   13163: 
                   13164:        * src/script.c:
                   13165:        If execve fails in logging mode, pass the errno directly to the
                   13166:        grandparent on the backchannel and exit. The immediate parent will
                   13167:        get SIGCHLD and try to report that status but its parent will no
                   13168:        longer be listening. It would probably be cleaner to pass this over
                   13169:        a pipe in script_child().
                   13170:        [cb122acc81a8]
                   13171: 
                   13172:        * plugins/sudoers/sudoers.c:
                   13173:        Don't override rval with results of check_user() unless it failed.
                   13174:        [46fb7e87ac7d]
                   13175: 
                   13176: 2010-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13177: 
                   13178:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   13179:        Fix typo
                   13180:        [ccd0b693f3da]
                   13181: 
                   13182:        * src/parse_args.c:
                   13183:        NULL-terminate env_add
                   13184:        [2c534368a0c3]
                   13185: 
                   13186: 2010-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13187: 
                   13188:        * src/sudo.c:
                   13189:        Call the I/O log open function before the I/O version function.
                   13190:        [e88bf898990b]
                   13191: 
                   13192:        * plugins/sudoers/iolog.c:
                   13193:        Remove io_conv and just use sudo_conv
                   13194:        [a280052468eb]
                   13195: 
                   13196:        * plugins/sudoers/set_perms.c:
                   13197:        Fix set/restore perms for systems w/o setresuid
                   13198:        [4160517f6666]
                   13199: 
                   13200: 2010-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13201: 
                   13202:        * plugins/sudoers/check.c, plugins/sudoers/logging.c,
                   13203:        plugins/sudoers/parse.c, plugins/sudoers/set_perms.c,
                   13204:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h:
                   13205:        Primitive set/restore permissions. Will be replaced by a push/pop
                   13206:        model.
                   13207:        [aae102290866]
                   13208: 
                   13209:        * src/script.c:
                   13210:        Only need to take action on SIGCHLD in parent if no I/O logger. If
                   13211:        there is an I/O logger we will receive ECONNRESET or EPIPE when we
                   13212:        try to read from the socketpair.
                   13213:        [e1e4560401f6]
                   13214: 
                   13215: 2010-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13216: 
                   13217:        * compat/memrchr.c, doc/sudoers.cat, doc/sudoers.man.in,
                   13218:        doc/sudoers.pod, plugins/sudoers/find_path.c:
                   13219:        Merge fb4d571495fa from the 1.7 branch to trunk.
                   13220:        [c8fb424ad4d2]
                   13221: 
                   13222: 2010-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13223: 
                   13224:        * src/script.c:
                   13225:        Don't set SA_RESTART when registering SIGALRM handler. Do set
                   13226:        SA_RESTART when registering SIGWINCH handler.
                   13227:        [173472b76525]
                   13228: 
                   13229:        * doc/Makefile.in:
                   13230:        Add dev targets for *.man.in and *.cat that don't specfify the
                   13231:        $(srcdir) prefix.
                   13232:        [b62f425da2e4]
                   13233: 
                   13234:        * src/script.c:
                   13235:        If log_input or log_output returns false, terminate the command.
                   13236:        [074f4c0c34a0]
                   13237: 
                   13238:        * src/script.c:
                   13239:        Better signal handling. Instead of using a single variable to store
                   13240:        the received signal, use an array so we can't lose a signal when
                   13241:        multiple are sent. Fix process termination by SIGALRM in non-I/O
                   13242:        logger mode. Fix relaying terminal signals to the child in non-I/O
                   13243:        logger mode.
                   13244:        [7a4723aca99d]
                   13245: 
                   13246:        * src/script.c:
                   13247:        Fix a race between when we get the child pid in the parent and when
                   13248:        the child process exits. The problem exhibited as a hang after a
                   13249:        short-lived process, e.g. "sudo id" when no IO logger was enabled.
                   13250:        [80bcc0aca70b]
                   13251: 
                   13252: 2010-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13253: 
                   13254:        * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod:
                   13255:        Add a note about the security implications of the fast_glob option.
                   13256:        [c37a92ab7c93]
                   13257: 
                   13258: 2010-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13259: 
                   13260:        * config.h.in, configure, configure.in:
                   13261:        Fix up some AC_DEFINE descriptions and regen config.h.in
                   13262:        [f4655adc0db3]
                   13263: 
                   13264: 2010-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13265: 
                   13266:        * include/missing.h:
                   13267:        No longer check for strdup or strndup for LIBOBJ replacement.
                   13268:        [fdc764ee8109]
                   13269: 
                   13270:        * src/script.c:
                   13271:        Avoid installing signal handlers that are io-logger specific. Fixes
                   13272:        job control when no io logger is enabled.
                   13273:        [0853dd0906d4]
                   13274: 
                   13275:        * doc/Makefile.in:
                   13276:        Only regen man pages from pod when configured with --with-devel
                   13277:        [ab1995f8103d]
                   13278: 
                   13279: 2010-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13280: 
                   13281:        * Makefile, Makefile.in, configure, configure.in:
                   13282:        Top-level Makefile.in. Nothing is currently substituted but this is
                   13283:        needed for separate build dirs.
                   13284:        [e80873cbd201]
                   13285: 
                   13286:        * compat/Makefile.in, doc/Makefile.in, plugins/sample/Makefile.in,
                   13287:        plugins/sudoers/Makefile.in, src/Makefile.in:
                   13288:        Fix out-of-tree builds
                   13289:        [59a35bef07b8]
                   13290: 
                   13291:        * Merge
                   13292:        [386b848047e9]
                   13293: 
                   13294:        * doc/Makefile.in:
                   13295:        We always install sudoreplay in 1.8
                   13296:        [ce52ba6617c9]
                   13297: 
                   13298: 2010-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13299: 
                   13300:        * compat/siglist.in:
                   13301:        SIGPOLL is sometimes the same as SIGIO (like on HP-UX)
                   13302:        [6d69e1b05faf]
                   13303: 
                   13304: 2010-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13305: 
                   13306:        * configure, configure.in:
                   13307:        No need to provide strdup() or strndup(), sudo uses estrdup() and
                   13308:        estrndup()
                   13309:        [57ec23b72958]
                   13310: 
                   13311: 2010-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13312: 
                   13313:        * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c:
                   13314:        Free str after using it in the version method. Use sudo_conv, not
                   13315:        io_conv since we don't have the IO conversation function pointer in
                   13316:        the I/O version method anymore now that io_open is delayed.
                   13317:        [f2ed132adeb0]
                   13318: 
                   13319: 2010-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13320: 
                   13321:        * compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h,
                   13322:        compat/siglist.in:
                   13323:        Add license to mksiglist.c and note that the bits from pdksh are
                   13324:        public domain
                   13325:        [d8121a2467e8]
                   13326: 
                   13327:        * compat/Makefile.in:
                   13328:        Fix LIBOBJDIR vs. srcdir wrt the siglist bits
                   13329:        [164160148421]
                   13330: 
                   13331:        * plugins/sudoers/Makefile.in:
                   13332:        Add sudoreplay testsudoers and visudo to clean target
                   13333:        [138a17e51c0c]
                   13334: 
                   13335:        * compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h,
                   13336:        compat/siglist.in, compat/strsignal.c, configure, configure.in,
                   13337:        include/missing.h, src/script.c:
                   13338:        Create our own sys_siglist for systems without it for use by
                   13339:        strsignal()
                   13340:        [2e5da011ebc3]
                   13341: 
                   13342:        * compat/Makefile.in:
                   13343:        Remove duplicate $(LIBOBJDIR)
                   13344:        [adf9abc9432f]
                   13345: 
                   13346: 2010-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13347: 
                   13348:        * plugins/sudoers/sudoers.c, src/sudo.c, src/sudo_edit.c:
                   13349:        Main sudo should not block signals; the plugin should do this in
                   13350:        check_policy.
                   13351:        [3f3736a7c5ed]
                   13352: 
                   13353: 2010-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13354: 
                   13355:        * src/script.c:
                   13356:        Fix a sizeof(ptr) vs. sizeof(*ptr)
                   13357:        [aa1bcf5afcce]
                   13358: 
                   13359:        * src/script.c:
                   13360:        Unlike most operating systems, HP-UX select() is not interrupted by
                   13361:        SIGCHLD when the signal is registered with SA_RESTART. If we clear
                   13362:        SA_RESTART when calling sigaction() for SIGCHLD we get the expected
                   13363:        behavior and the code in the select() loops already handles EINTR
                   13364:        correctly.
                   13365:        [9eba0115e35a]
                   13366: 
                   13367:        * compat/getprogname.c:
                   13368:        progname should be const
                   13369:        [130228f062b7]
                   13370: 
                   13371:        * plugins/sudoers/Makefile.in:
                   13372:        Move --tag=disable-static to when we link sudoers.la, not when we
                   13373:        install.
                   13374:        [ceb5e6c3b78b]
                   13375: 
                   13376:        * src/load_plugins.c:
                   13377:        Load the sudoers I/O plugin by default too now that it is hooked up.
                   13378:        [ea38befd0742]
                   13379: 
                   13380: 2010-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13381: 
                   13382:        * src/pty.c:
                   13383:        It looks like AIX doesn't need to push STREAMS modules for ptys.
                   13384:        [22da618ba0a1]
                   13385: 
                   13386: 2010-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13387: 
                   13388:        * src/parse_args.c, src/sudo.c:
                   13389:        Delay calling the I/O plugin open function until the policy plugin
                   13390:        returns success.
                   13391:        [f3297c325b48]
                   13392: 
                   13393: 2010-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13394: 
                   13395:        * plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c,
                   13396:        plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c,
                   13397:        plugins/sudoers/sudoers.h:
                   13398:        Add back io logging (transcript) support. Currently, the open
                   13399:        function runs too early and it is not possible to use the io module
                   13400:        independently of the policy module.
                   13401:        [9bd932f66226]
                   13402: 
                   13403:        * plugins/sudoers/set_perms.c:
                   13404:        Comment out dead code; will be removed when set_perms is rewritten.
                   13405:        [af7a995284f8]
                   13406: 
                   13407: 2010-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13408: 
                   13409:        * plugins/sudoers/sudoers.c:
                   13410:        Fix off by one error when allocating user_groups.
                   13411:        [6281fcf9c3bb]
                   13412: 
                   13413: 2010-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13414: 
                   13415:        * configure, configure.in, plugins/sudoers/Makefile.in:
                   13416:        Add REPLAY_LIBS for sudoreplay and add -lrt to it on Solaris.
                   13417:        [fbce3e9eda3a]
                   13418: 
                   13419:        * plugins/sudoers/sudoers.c:
                   13420:        Fix typo in preserve groups case
                   13421:        [1fd72024fb5a]
                   13422: 
                   13423:        * plugins/sudoers/sudoers.c:
                   13424:        In command_info it is "runas_groups" not "groups".
                   13425:        [5c64dce4f285]
                   13426: 
                   13427:        * src/sudo.c:
                   13428:        Fix iteration over runas_groups list.
                   13429:        [b3c45a0cd643]
                   13430: 
                   13431:        * configure, configure.in, plugins/sudoers/env.c,
                   13432:        plugins/sudoers/match.c, src/script.c:
                   13433:        Merge 5177a284b9ff 549f8f7c2463 88f3181692fe from 1.7 branch.
                   13434:        [a8108a0776c2]
                   13435: 
                   13436:        * compat/getgrouplist.c:
                   13437:        getgrouplist(3) for those without it
                   13438:        [4ab4d21e3b16]
                   13439: 
                   13440:        * plugins/sudoers/sudoers.c:
                   13441:        Set preserve_groups or groups list in command_info
                   13442:        [1266119ad654]
                   13443: 
                   13444:        * src/sudo.c:
                   13445:        Fix setting of groups list
                   13446:        [e75315e40bd4]
                   13447: 
                   13448:        * config.h.in, configure, configure.in, include/compat.h,
                   13449:        include/missing.h:
                   13450:        Add checks for getgrset and getgrouplist and use replacement
                   13451:        getgrouplist if the system doesn't support it.
                   13452:        [a62b8ba50863]
                   13453: 
                   13454:        * src/parse_args.c:
                   13455:        Pass in preserve_groups when the -P flag is specified as per the
                   13456:        design
                   13457:        [7420c5d15474]
                   13458: 
                   13459:        * plugins/sudoers/sudoers.c:
                   13460:        Check preserve_groups and ignore_ticket args with atobool instead of
                   13461:        assuming they are true if present.
                   13462:        [71c905702697]
                   13463: 
                   13464: 2010-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13465: 
                   13466:        * plugins/sudoers/Makefile.in, plugins/sudoers/error.c,
                   13467:        plugins/sudoers/plugin_error.c:
                   13468:        Rename plugin-specific error.c to plugin_error.c Wire up visudo,
                   13469:        sudoreplay and testsudoers in the build
                   13470:        [9d581d5fa4d4]
                   13471: 
                   13472:        * src/Makefile.in, src/term.c:
                   13473:        term.c does not needto include sudo.h
                   13474:        [f6683cdcd2dd]
                   13475: 
                   13476:        * TODO, doc/sudo_plugin.cat, doc/sudo_plugin.man.in,
                   13477:        doc/sudo_plugin.pod:
                   13478:        Document the -2 return in the check_policy section too
                   13479:        [e9cb4c34bbcf]
                   13480: 
                   13481:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod,
                   13482:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   13483:        src/parse_args.c, src/sudo.c, src/sudo.h:
                   13484:        Fix the -s and -i flags and add support for the "implied_shell"
                   13485:        option. If the user does not specify a command, sudo will now pass
                   13486:        in the path to the user's shell and set impied_shell=true. The
                   13487:        plugin can them either check the command normally or return -2 to
                   13488:        cause sudo to print a usage message and exit.
                   13489:        [bf889c38f229]
                   13490: 
                   13491: 2010-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13492: 
                   13493:        * config.h.in, configure, configure.in, src/load_plugins.c:
                   13494:        Bring back SUDOERS_PLUGIN but add .dylib -> .so conversion for
                   13495:        Darwin where libraries end in .dylib but modules end in .so
                   13496:        [2c56aaa38e21]
                   13497: 
                   13498:        * plugins/sudoers/parse.c:
                   13499:        Better prefix determination now that we can't rely on len==0 to tell
                   13500:        the beginning on an entry.
                   13501:        [622bf18179e9]
                   13502: 
                   13503:        * plugins/sudoers/ldap.c:
                   13504:        display_bound_defaults() stub should return 0, not 1 since it is a
                   13505:        count, not a boolean.
                   13506:        [0327a6c3d55d]
                   13507: 
                   13508:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   13509:        Document progname in settings
                   13510:        [42031d56a2e3]
                   13511: 
                   13512:        * compat/getprogname.c, include/compat.h,
                   13513:        plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c,
                   13514:        src/parse_args.c, src/sudo.c:
                   13515:        Rewrite compat/getprogname.c and add setprogname(). The progname is
                   13516:        now passed to the plugin via the settings array.
                   13517:        [25d8663e6006]
                   13518: 
                   13519:        * configure, configure.in, plugins/sudoers/Makefile.in:
                   13520:        Fix --with-ldap
                   13521:        [b64b633f426d]
                   13522: 
                   13523:        * plugins/sudoers/sudo_nss.c:
                   13524:        Add missing whitespace for Runas and Command-specific defaults
                   13525:        [65f4ddf5545e]
                   13526: 
                   13527:        * plugins/sudoers/ldap.c, plugins/sudoers/parse.c,
                   13528:        plugins/sudoers/sudo_nss.c:
                   13529:        Use embedded newlines in lbuf instead of multiple calls to
                   13530:        lbuf_print.
                   13531:        [eed3af9cc3e1]
                   13532: 
                   13533:        * src/lbuf.c:
                   13534:        Add support for embedded newlines.
                   13535:        [e11f79b18deb]
                   13536: 
                   13537: 2010-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13538: 
                   13539:        * compat/getprogname.c:
                   13540:        If system doesn't support getprogname or __programe and we are
                   13541:        building a shared object don't bother with Argc/Argv, just return
                   13542:        "sudo"
                   13543:        [aebde9062be7]
                   13544: 
                   13545:        * config.h.in, configure, configure.in, src/load_plugins.c:
                   13546:        Hard-code sudoers.so instead of using SUDOERS_PLUGIN since libtool
                   13547:        appears to always install a shared object with the .so suffix.
                   13548:        [f9bbd0c0e9d3]
                   13549: 
                   13550:        * compat/Makefile.in, configure, configure.in,
                   13551:        plugins/sample/Makefile.in, plugins/sudoers/Makefile.in,
                   13552:        src/Makefile.in:
                   13553:        Play more nicely with libtool and let it build libreplace (was
                   13554:        libmissing) for us.
                   13555:        [a4c6ebb2495c]
                   13556: 
                   13557:        * include/missing.h:
                   13558:        Include stdarg.h for va_list rather than requiring all consumers of
                   13559:        missing.h to include stdarg.h themselves.
                   13560:        [37382df948de]
                   13561: 
                   13562:        * include/lbuf.h, plugins/sudoers/auth/sudo_auth.c,
                   13563:        plugins/sudoers/check.c, plugins/sudoers/sudo_nss.c,
                   13564:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c,
                   13565:        src/parse_args.c:
                   13566:        Pass in output function to lbuf_init() instead of writing to stdout.
                   13567:        A side effect is that the usage info can now go to stderr as it
                   13568:        should.
                   13569:        [6d261261a072]
                   13570: 
                   13571: 2010-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13572: 
                   13573:        * include/lbuf.h, plugins/sudoers/sudo_nss.c,
                   13574:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c,
                   13575:        src/parse_args.c, src/sudo.c:
                   13576:        Use number of tty columns that is passed in user_info instead of
                   13577:        getting it directly in the lbuf code.
                   13578:        [8a16635c2638]
                   13579: 
                   13580:        * plugins/sudoers/alias.c, plugins/sudoers/auth/dce.c,
                   13581:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   13582:        plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.h,
                   13583:        plugins/sudoers/check.c, plugins/sudoers/defaults.c,
                   13584:        plugins/sudoers/defaults.h, plugins/sudoers/env.c,
                   13585:        plugins/sudoers/getdate.c, plugins/sudoers/getdate.y,
                   13586:        plugins/sudoers/gram.c, plugins/sudoers/gram.y,
                   13587:        plugins/sudoers/interfaces.h, plugins/sudoers/logging.c,
                   13588:        plugins/sudoers/logging.h, plugins/sudoers/match.c,
                   13589:        plugins/sudoers/mon_systrace.h, plugins/sudoers/parse.c,
                   13590:        plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
                   13591:        plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
                   13592:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.h,
                   13593:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   13594:        plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c,
                   13595:        plugins/sudoers/timestr.c, plugins/sudoers/toke.c,
                   13596:        plugins/sudoers/toke.l, plugins/sudoers/tsgetgrpw.c,
                   13597:        plugins/sudoers/visudo.c:
                   13598:        Kill __P in sudoers
                   13599:        [63601e6cb171]
                   13600: 
                   13601:        * config.h.in, configure, configure.in, src/load_plugins.c:
                   13602:        Set the sudoers plugin name in configure so we get the extension
                   13603:        right.
                   13604:        [edad89924cd1]
                   13605: 
                   13606:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   13607:        Document lines/cols in user_info
                   13608:        [a808872394f3]
                   13609: 
                   13610:        * src/Makefile.in, src/sudo.c, src/sudo.h, src/ttysize.c:
                   13611:        Add tty size to user info
                   13612:        [23f3d27e77a7]
                   13613: 
                   13614:        * src/script.c:
                   13615:        Use TIOCGSIZE/TIOCSSIZE instead of TIOCGWINSZ/TIOCSWINSZ
                   13616:        [a2208dd09051]
                   13617: 
                   13618: 2010-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13619: 
                   13620:        * plugins/sudoers/sudoers.c:
                   13621:        Kill dead code Add missing sigsetjmp in sudo_policy_invalidate Error
                   13622:        out if we fail to lookup the user's name that is passed in
                   13623:        [e4e3728ed482]
                   13624: 
                   13625:        * plugins/sudoers/error.c:
                   13626:        Pass the error value back via siglongjmp.
                   13627:        [667b8ad575ce]
                   13628: 
                   13629:        * plugins/sudoers/check.c:
                   13630:        Use conversation function for lecture.
                   13631:        [1ab4719f509b]
                   13632: 
                   13633:        * plugins/sudoers/check.c:
                   13634:        Don't update ticket file if verify_user returns FALSE.
                   13635:        [2bbc46a39a2b]
                   13636: 
                   13637: 2010-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13638: 
                   13639:        * plugins/sudoers/sudoers.c, src/sudo.c:
                   13640:        Wire up invalidate and validate methods for sudoers
                   13641:        [c0630c7bca47]
                   13642: 
                   13643:        * plugins/sudoers/check.c, plugins/sudoers/sudoers.c,
                   13644:        plugins/sudoers/sudoers.h:
                   13645:        Add support for -k flag with a command.
                   13646:        [edad239b098b]
                   13647: 
                   13648:        * src/parse_args.c:
                   13649:        Allow -k to be specified with a command.
                   13650:        [43a45add9974]
                   13651: 
                   13652:        * plugins/sudoers/sudoers.c:
                   13653:        Wire up policy_list
                   13654:        [27cc35699eca]
                   13655: 
                   13656:        * plugins/sudoers/error.c:
                   13657:        Add newline at the end of message and space after the colon in
                   13658:        warning message
                   13659:        [5a591aa8e744]
                   13660: 
                   13661:        * plugins/sudoers/auth/sudo_auth.c:
                   13662:        Add missing newline after pass password warning
                   13663:        [337dba3870a7]
                   13664: 
                   13665:        * plugins/sudoers/sudoers.c:
                   13666:        Set user_groups and user_ngroups based on user_info
                   13667:        [61bee85128c8]
                   13668: 
                   13669:        * plugins/sudoers/error.c:
                   13670:        Make this compile
                   13671:        [7041c441e1c8]
                   13672: 
                   13673:        * plugins/sudoers/error.c, plugins/sudoers/sudoers.c:
                   13674:        Make _warning in error.c use the conversation function and remove
                   13675:        commented out warning/warningx in sudoers.c.
                   13676:        [7c9b09024b63]
                   13677: 
                   13678:        * plugins/sudoers/logging.c:
                   13679:        Use siglongjmp() in log_error for fatal errors
                   13680:        [b50e26f1c73f]
                   13681: 
                   13682:        * plugins/sample/Makefile.in, plugins/sudoers/Makefile.in:
                   13683:        Quiet a libtool warning
                   13684:        [b2331fb006bc]
                   13685: 
                   13686:        * Makefile:
                   13687:        Build sudoers plugin
                   13688:        [5cdf06e66978]
                   13689: 
                   13690:        * plugins/sudoers/gram.c, plugins/sudoers/gram.y:
                   13691:        Use warningx in yyerror() so the conversation function gets used
                   13692:        when built as part of sudoers.
                   13693:        [85f964215eef]
                   13694: 
                   13695: 2010-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13696: 
                   13697:        * plugins/sudoers/auth/pam.c:
                   13698:        Rename sudo_conv to conversation to avoid a namespace conflict.
                   13699:        [1ad359d36be9]
                   13700: 
                   13701:        * plugins/sudoers/Makefile.in, plugins/sudoers/alias.c,
                   13702:        plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   13703:        plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
                   13704:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
                   13705:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   13706:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
                   13707:        plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
                   13708:        plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
                   13709:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
                   13710:        plugins/sudoers/check.c, plugins/sudoers/defaults.c,
                   13711:        plugins/sudoers/env.c, plugins/sudoers/error.c,
                   13712:        plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c,
                   13713:        plugins/sudoers/goodpath.c, plugins/sudoers/gram.c,
                   13714:        plugins/sudoers/gram.y, plugins/sudoers/interfaces.c,
                   13715:        plugins/sudoers/ldap.c, plugins/sudoers/logging.c,
                   13716:        plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c,
                   13717:        plugins/sudoers/parse.c, plugins/sudoers/pwutil.c,
                   13718:        plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c,
                   13719:        plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c,
                   13720:        plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c,
                   13721:        plugins/sudoers/toke.c, plugins/sudoers/tsgetgrpw.c,
                   13722:        plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c:
                   13723:        Initial bits of sudoers plugin; still needs work.
                   13724:        [af2a2c59a952]
                   13725: 
                   13726:        * config.h.in:
                   13727:        Add HAVE_STRDUP and HAVE_STRNDUP
                   13728:        [50a3c0dd510f]
                   13729: 
                   13730:        * compat/Makefile.in, configure, configure.in:
                   13731:        Build libmissing in two flavors (one PIC one non-PIC) and link with
                   13732:        the appropriate one.
                   13733:        [b62f411a4c18]
                   13734: 
                   13735:        * Makefile, compat/fnmatch.c, compat/glob.c, compat/nanosleep.c,
                   13736:        compat/utimes.c, plugins/sample/Makefile.in, src/Makefile.in:
                   13737:        Build libmissing in two flavors (one PIC one non-PIC) and link with
                   13738:        the appropriate one.
                   13739:        [e1e04972b5fe]
                   13740: 
                   13741: 2010-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13742: 
                   13743:        * include/missing.h:
                   13744:        Add strdup and strndup and fix strsignal
                   13745:        [c159babe2896]
                   13746: 
                   13747: 2010-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13748: 
                   13749:        * compat/strdup.c, compat/strndup.c, configure, configure.in,
                   13750:        plugins/sample/Makefile.in, src/Makefile.in:
                   13751:        Add strdup and strndup to compat
                   13752:        [25c9fd399a4d]
                   13753: 
                   13754:        * plugins/sample/sample_plugin.c:
                   13755:        Need to include compat.h before missing.h
                   13756:        [c94f7aad380f]
                   13757: 
                   13758:        * compat/strsignal.c:
                   13759:        Must check HAVE_DECL_SYS_SIGLIST == 1 (not just if defined) since if
                   13760:        it doesn't exist configure will set it to 0.
                   13761:        [384580566389]
                   13762: 
                   13763:        * compat/glob.c:
                   13764:        Fix botched ANSI C coversion of globexp2()
                   13765:        [4a344b8cbe49]
                   13766: 
                   13767:        * configure, configure.in:
                   13768:        Remove redundant getgroups check
                   13769:        [0b16ec210c81]
                   13770: 
                   13771:        * configure, configure.in, src/lbuf.c, src/script.c, src/term.c:
                   13772:        Require either termios or termio, no more sgtty.
                   13773:        [9b2fa2f17a1c]
                   13774: 
                   13775:        * compat/strsignal.c, config.h.in, configure, configure.in:
                   13776:        Change the sys_siglist check to use AC_CHECK_DECLS and also check
                   13777:        for _sys_siglist and__sys_siglist
                   13778:        [2e078fed2408]
                   13779: 
                   13780: 2010-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13781: 
                   13782:        * configure, configure.in, src/Makefile.in:
                   13783:        Change SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS. We now
                   13784:        use SUDO_OBJS for the main driver as part of OBJS.
                   13785:        [9ae4a80a5ade]
                   13786: 
                   13787:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   13788:        Mention in the conversation function section that a newline is not
                   13789:        implicit.
                   13790:        [04a233b6c491]
                   13791: 
                   13792:        * include/compat.h:
                   13793:        Add definition of WCOREDUMP for systems without it. This is known
                   13794:        to work on AIX and SunOS 4, but may be incorrect on other systems
                   13795:        that lack WCOREDUMP.
                   13796:        [c85b3ce6b77d]
                   13797: 
                   13798: 2010-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13799: 
                   13800:        * plugins/sample/sample_plugin.c, src/conversation.c:
                   13801:        conversation function no longer puts a newline at the end of info or
                   13802:        error messages.
                   13803:        [c534cae1ac4a]
                   13804: 
                   13805: 2010-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13806: 
                   13807:        * src/script.c:
                   13808:        Use parent process group id instead of parent process id when
                   13809:        checking foreground status and suspending parent. Fixes an issue
                   13810:        when running commands under /usr/bin/time and others.
                   13811:        [564f528c3bb7]
                   13812: 
                   13813: 2010-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13814: 
                   13815:        * aclocal.m4:
                   13816:        transcript option is now --with not --enable
                   13817:        [0646fac4cf93]
                   13818: 
                   13819:        * plugins/sample/sample_plugin.c:
                   13820:        Add support to -u and -g flags Check fmt_string retval Add timeout
                   13821:        for debugging purposes
                   13822:        [cfefa4fa60b5]
                   13823: 
                   13824:        * src/script.c, src/sudo.c:
                   13825:        Wire up SIGALRM handler Set close on exec flag for child side of the
                   13826:        socketpair Fix signal handling when not doing I/O logging
                   13827:        [379581ec7272]
                   13828: 
                   13829:        * src/sudo.c:
                   13830:        g/c unused SIGCHLD handler
                   13831:        [0afa03912dce]
                   13832: 
                   13833:        * src/fmt_string.c, src/parse_args.c, src/sudo.c:
                   13834:        Don't use emalloc() in fmt_string(); we want to be able to use it
                   13835:        from a plugin.
                   13836:        [ade64d368147]
                   13837: 
                   13838:        * include/list.h:
                   13839:        tq_remove not list_remove
                   13840:        [0e0e1fd5c31c]
                   13841: 
                   13842:        * configure, configure.in:
                   13843:        AUTH_OBJS should contain .lo files not .o files.
                   13844:        [c64c82c9d5a2]
                   13845: 
                   13846: 2010-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13847: 
                   13848:        * src/parse_args.c:
                   13849:        Simplify conversion of command line args to name=value pairs.
                   13850:        [75ab127c6a94]
                   13851: 
                   13852:        * plugins/sample/sample_plugin.c:
                   13853:        Handle NULL reply from conversation function
                   13854:        [6ce09b6cb204]
                   13855: 
                   13856:        * compat/getline.c:
                   13857:        Don't depend on emalloc/erealloc
                   13858:        [73df09e2109f]
                   13859: 
                   13860:        * plugins/sample/Makefile.in:
                   13861:        Use $(OBJS) instead of sample_plugin.lo
                   13862:        [2d995db9aa99]
                   13863: 
                   13864:        * plugins/sample/sample_plugin.c:
                   13865:        runas_user is in settings not user_info
                   13866:        [7ee12068bc57]
                   13867: 
                   13868:        * src/parse_args.c:
                   13869:        Fix a mismatch between sudo_settings and settings_pairs that causes
                   13870:        some settings to get the wrong values.
                   13871:        [b1bc6d81a65f]
                   13872: 
                   13873: 2010-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13874: 
                   13875:        * src/Makefile.in, src/aix.c, src/alloc.c, src/atobool.c, src/error.c,
                   13876:        src/fileops.c, src/lbuf.c, src/list.c, src/pty.c, src/sesh.c,
                   13877:        src/sudo.c, src/sudo_edit.c, src/term.c, src/zero_bytes.c:
                   13878:        Convert to ANSI C
                   13879:        [d03b6e4a3b75]
                   13880: 
                   13881:        * src/load_plugins.c:
                   13882:        Fix strlcpy() return value check.
                   13883:        [7cd66999a374]
                   13884: 
                   13885:        * INSTALL, configure, configure.in:
                   13886:        No longer need to substitute in script.o and pty.o; I/O logging
                   13887:        support is always built.
                   13888:        [45250024c5dc]
                   13889: 
                   13890: 2010-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13891: 
                   13892:        * src/script.c:
                   13893:        Add fallback to /bin/sh when execve() fails with ENOEXEC.
                   13894:        [7684a15a1352]
                   13895: 
                   13896:        * include/alloc.h, src/alloc.c:
                   13897:        Add estrndup()
                   13898:        [47621c83bed9]
                   13899: 
                   13900: 2010-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13901: 
                   13902:        * src/script.c, src/sudo.c:
                   13903:        Refactor script_execve() a bit so that it can be used in non-script
                   13904:        mode. Needs more cleanup.
                   13905:        [f09e022d547c]
                   13906: 
                   13907:        * src/sudo.c:
                   13908:        Ignore empty entries in command_info list
                   13909:        [1eea9a8de21c]
                   13910: 
                   13911:        * include/list.h, src/list.c:
                   13912:        Add tq_remove
                   13913:        [40908a617cb2]
                   13914: 
                   13915:        * src/conversation.c:
                   13916:        Pass timeout to tgetpass()
                   13917:        [9e66c918b771]
                   13918: 
                   13919:        * Makefile:
                   13920:        Add ChangeLog target
                   13921:        [da4a39150838]
                   13922: 
                   13923:        * README, WHATSNEW:
                   13924:        Bump version and update things slightly for sudo 1.8.0
                   13925:        [4b73cc45e2d4]
                   13926: 
                   13927:        * configure, configure.in:
                   13928:        Sudo now requires an ANSI/ISO C compiler
                   13929:        [1e51f72e6964]
                   13930: 
                   13931:        * src/alloc.c, src/audit.c, src/error.c, src/lbuf.c,
                   13932:        src/sudo_noexec.c:
                   13933:        Convert to ANSI C
                   13934:        [5cbd315dbde8]
                   13935: 
                   13936:        * include/alloc.h, include/compat.h, include/error.h, include/lbuf.h,
                   13937:        include/list.h, include/missing.h:
                   13938:        Convert to ANSI C
                   13939:        [3f5016ff64f4]
                   13940: 
                   13941:        * compat/charclass.h, compat/closefrom.c, compat/fnmatch.c,
                   13942:        compat/fnmatch.h, compat/getcwd.c, compat/getline.c,
                   13943:        compat/getprogname.c, compat/glob.c, compat/glob.h,
                   13944:        compat/isblank.c, compat/memrchr.c, compat/mkstemp.c,
                   13945:        compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c,
                   13946:        compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
                   13947:        compat/strlcpy.c, compat/strsignal.c, compat/utime.h,
                   13948:        compat/utimes.c:
                   13949:        Convert to ANSI C
                   13950:        [0d635c85461c]
                   13951: 
                   13952: 2010-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13953: 
                   13954:        * src/sudo.c, src/tgetpass.c:
                   13955:        Make user_details extern so tgetpass can get at the uid and gid. Set
                   13956:        uid/gid to user before executing askpass program. Check environment
                   13957:        for SUDO_ASKPASS and use that if set. TODO: a way for the policy to
                   13958:        set the askpass program itself
                   13959:        [d33606396176]
                   13960: 
                   13961:        * src/sudo.c:
                   13962:        No longer need sudo_usage.h in sudo.c
                   13963:        [063e2946c382]
                   13964: 
                   13965:        * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.man.in,
                   13966:        doc/sudo_plugin.pod, src/Makefile.in, src/parse_args.c,
                   13967:        src/sudo_usage.h.in:
                   13968:        Document -D level command line flag which maps to the debug_level
                   13969:        setting.
                   13970:        [61f1e2ab3ac1]
                   13971: 
                   13972:        * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   13973:        Document debug_level in plugin doc. Still need to document the -D
                   13974:        flag in sudo itself.
                   13975:        [8c62daea3e9b]
                   13976: 
                   13977: 2010-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   13978: 
                   13979:        * plugins/sample/sample_plugin.c:
                   13980:        include missing,h for vasprintf
                   13981:        [92503de49b39]
                   13982: 
                   13983:        * doc/Makefile.in, doc/plugin.pod, doc/sudo_plugin.cat,
                   13984:        doc/sudo_plugin.man.in, doc/sudo_plugin.pod:
                   13985:        Rename plugin.pod -> sudo_plugin.pod and wire into Makefile
                   13986:        [14cfb4775238]
                   13987: 
                   13988:        * plugins/sample/sample_plugin.c:
                   13989:        Need to include limits.h
                   13990:        [bda7f74343d2]
                   13991: 
                   13992:        * compat/glob.c:
                   13993:        No more sudo_getpw*
                   13994:        [232e52907634]
                   13995: 
                   13996:        * plugins/sample/Makefile.in, src/Makefile.in:
                   13997:        Add missing compat bits
                   13998:        [4843dd000e08]
                   13999: 
                   14000:        * compat/closefrom.c, compat/mkstemp.c, plugins/sample/Makefile.in:
                   14001:        compat files should not include sudo.h wire up compat in sample
                   14002:        plugin
                   14003:        [a175b8185e0f]
                   14004: 
                   14005:        * Makefile, configure, configure.in, doc/Makefile.in, src/Makefile.in:
                   14006:        Fix up compat dependencies. Fix distclean target in doc/Makefile.in
                   14007:        [57e49bc20857]
                   14008: 
                   14009:        * configure, configure.in:
                   14010:        Fix typo
                   14011:        [333655e3d5fe]
                   14012: 
                   14013:        * plugins/sample/sample_plugin.c:
                   14014:        Log input and output to temp files for proof of concept.
                   14015:        [ae1dfc34f7d6]
                   14016: 
                   14017:        * Makefile, configure, configure.in, doc/Makefile.in:
                   14018:        Add doc Makefile.in and wire it up
                   14019:        [6a310443c87d]
                   14020: 
                   14021:        * src/script.c:
                   14022:        Handle SIGSTOP in addition to SIGTSTP. Fixes a problem with
                   14023:        suspending a shell with the "suspend" builtint.
                   14024:        [3d65f182819a]
                   14025: 
                   14026:        * src/script.c:
                   14027:        In child, handle parent side of the pipe going away.
                   14028:        [a29c14d78cd9]
                   14029: 
                   14030:        * src/script.c:
                   14031:        No longer need to check for explicit death of the child (process #2)
                   14032:        since if it dies we will get EPIPE from the socketpair. Fix a
                   14033:        sizeof() that was causing a spurious error. Convert SCRIPT_DEBUG to
                   14034:        sudo_debug.
                   14035:        [24c55dd4ff60]
                   14036: 
                   14037:        * src/sudo.c:
                   14038:        Make sudo_debug do a single vfprintf() which will result in a single
                   14039:        write call on most systems. Avoids problems with interleaved debug
                   14040:        printf from different processes. Also remove an extraneous error
                   14041:        case since recv() can't return a short read and add some more XXX.
                   14042:        [b37a8533ef1e]
                   14043: 
                   14044: 2010-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14045: 
                   14046:        * src/script.c:
                   14047:        Fix uninitialized variable.
                   14048:        [e012a0a30890]
                   14049: 
                   14050:        * src/Makefile.in:
                   14051:        Fix sudo install target
                   14052:        [1417fa4b4ab9]
                   14053: 
                   14054:        * src/parse_args.c, src/sudo.c, src/sudo.h:
                   14055:        Wire up debug_level
                   14056:        [144fab289c73]
                   14057: 
                   14058:        * src/Makefile.in:
                   14059:        Fix dependencies
                   14060:        [5170940af2ce]
                   14061: 
                   14062:        * configure, configure.in:
                   14063:        Fix setting of plugin dir
                   14064:        [144eda170a72]
                   14065: 
                   14066:        * Makefile:
                   14067:        add clean targets
                   14068:        [d53f6f6f5c3a]
                   14069: 
                   14070:        * src/atobool.c:
                   14071:        Add missing source for sudo front end
                   14072:        [42487de9c489]
                   14073: 
                   14074:        * plugins/sample/Makefile.in, plugins/sample/sample_plugin.c:
                   14075:        Sample plugin demonstrating the sudo plugin API
                   14076:        [f1fd62d7644f]
                   14077: 
                   14078:        * Makefile, configure, configure.in, install-sh, pathnames.h.in,
                   14079:        plugins/sudoers/install-sh, src/Makefile.in, src/conversation.c,
                   14080:        src/fileops.c, src/fmt_string.c, src/load_plugins.c,
                   14081:        src/parse_args.c, src/pty.c, src/script.c, src/sudo.c, src/sudo.h,
                   14082:        src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c,
                   14083:        sudo_usage.h.in:
                   14084:        Modular sudo front-end which loads policy and I/O plugins that do
                   14085:        most the actual work. Currently relies on dynamic loading using
                   14086:        dlopen(). See doc/plugin.pod for the plugin API.
                   14087:        [924f6eb2fbba]
                   14088: 
                   14089:        * doc/plugin.pod, include/sudo_plugin.h:
                   14090:        Sudo plugin API
                   14091:        [374ccbbd24ae]
                   14092: 
                   14093:        * compat/fnmatch.c, compat/glob.c, compat/nanosleep.c,
                   14094:        compat/utimes.c, plugins/sudoers/check.c, plugins/sudoers/gettime.c,
                   14095:        plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c,
                   14096:        plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c,
                   14097:        src/fileops.c, src/sudo_edit.c:
                   14098:        Replace emul/include.h with compat/include.h to match new source
                   14099:        tree layout.
                   14100:        [7eccd10449a1]
                   14101: 
                   14102:        * src/lbuf.c:
                   14103:        Include missing.h for memrchr() proto
                   14104:        [03abd63a8a33]
                   14105: 
                   14106:        * HISTORY, LICENSE, Makefile.binary.in, Makefile.in, PORTING,
                   14107:        TROUBLESHOOTING, UPGRADE, aix.c, aixcrypt.exp, alias.c, alloc.c,
                   14108:        alloc.h, audit.c, auth/API, auth/afs.c, auth/aix_auth.c,
                   14109:        auth/bsdauth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c,
                   14110:        auth/pam.c, auth/passwd.c, auth/rfc1938.c, auth/secureware.c,
                   14111:        auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c,
                   14112:        auth/sudo_auth.h, boottime.c, bsm_audit.c, bsm_audit.h, check.c,
                   14113:        closefrom.c, compat.h, compat/charclass.h, compat/closefrom.c,
                   14114:        compat/fnmatch.c, compat/fnmatch.h, compat/getcwd.c,
                   14115:        compat/getline.c, compat/getprogname.c, compat/glob.c,
                   14116:        compat/glob.h, compat/isblank.c, compat/memrchr.c, compat/mkstemp.c,
                   14117:        compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c,
                   14118:        compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c,
                   14119:        compat/strlcpy.c, compat/strsignal.c, compat/timespec.h,
                   14120:        compat/utime.h, compat/utimes.c, def_data.c, def_data.h,
                   14121:        def_data.in, defaults.c, defaults.h, doc/HISTORY, doc/LICENSE,
                   14122:        doc/PORTING, doc/TROUBLESHOOTING, doc/UPGRADE, doc/history.pod,
                   14123:        doc/license.pod, doc/sample.pam, doc/sample.sudoers,
                   14124:        doc/sample.syslog.conf, doc/schema.ActiveDirectory,
                   14125:        doc/schema.OpenLDAP, doc/schema.iPlanet, doc/sudo.cat,
                   14126:        doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod, doc/sudoers.cat,
                   14127:        doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod,
                   14128:        doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoers.pod,
                   14129:        doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod,
                   14130:        doc/visudo.cat, doc/visudo.man.in, doc/visudo.pod, emul/charclass.h,
                   14131:        emul/fnmatch.h, emul/glob.h, emul/timespec.h, emul/utime.h, env.c,
                   14132:        error.c, error.h, fileops.c, find_path.c, fnmatch.c, getcwd.c,
                   14133:        getdate.c, getdate.y, getline.c, getprogname.c, getspwuid.c,
                   14134:        gettime.c, glob.c, goodpath.c, gram.c, gram.h, gram.y, history.pod,
                   14135:        include/alloc.h, include/compat.h, include/error.h, include/lbuf.h,
                   14136:        include/list.h, include/missing.h, ins_2001.h, ins_classic.h,
                   14137:        ins_csops.h, ins_goons.h, install-sh, insults.h, interfaces.c,
                   14138:        interfaces.h, isblank.c, lbuf.c, lbuf.h, ldap.c, license.pod,
                   14139:        list.c, list.h, logging.c, logging.h, match.c, memrchr.c, missing.h,
                   14140:        mkdefaults, mkstemp.c, mon_systrace.c, mon_systrace.h, nanosleep.c,
                   14141:        nonunix.h, parse.c, parse.h, plugins/sudoers/Makefile.binary.in,
                   14142:        plugins/sudoers/Makefile.in, plugins/sudoers/aixcrypt.exp,
                   14143:        plugins/sudoers/alias.c, plugins/sudoers/auth/API,
                   14144:        plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c,
                   14145:        plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c,
                   14146:        plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c,
                   14147:        plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c,
                   14148:        plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c,
                   14149:        plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c,
                   14150:        plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c,
                   14151:        plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h,
                   14152:        plugins/sudoers/boottime.c, plugins/sudoers/check.c,
                   14153:        plugins/sudoers/def_data.c, plugins/sudoers/def_data.h,
                   14154:        plugins/sudoers/def_data.in, plugins/sudoers/defaults.c,
                   14155:        plugins/sudoers/defaults.h, plugins/sudoers/env.c,
                   14156:        plugins/sudoers/find_path.c, plugins/sudoers/getdate.c,
                   14157:        plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c,
                   14158:        plugins/sudoers/gettime.c, plugins/sudoers/goodpath.c,
                   14159:        plugins/sudoers/gram.c, plugins/sudoers/gram.h,
                   14160:        plugins/sudoers/gram.y, plugins/sudoers/ins_2001.h,
                   14161:        plugins/sudoers/ins_classic.h, plugins/sudoers/ins_csops.h,
                   14162:        plugins/sudoers/ins_goons.h, plugins/sudoers/install-sh,
                   14163:        plugins/sudoers/insults.h, plugins/sudoers/interfaces.c,
                   14164:        plugins/sudoers/interfaces.h, plugins/sudoers/ldap.c,
                   14165:        plugins/sudoers/logging.c, plugins/sudoers/logging.h,
                   14166:        plugins/sudoers/match.c, plugins/sudoers/mkdefaults,
                   14167:        plugins/sudoers/mon_systrace.c, plugins/sudoers/mon_systrace.h,
                   14168:        plugins/sudoers/nonunix.h, plugins/sudoers/parse.c,
                   14169:        plugins/sudoers/parse.h, plugins/sudoers/pwutil.c,
                   14170:        plugins/sudoers/redblack.c, plugins/sudoers/redblack.h,
                   14171:        plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c,
                   14172:        plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers,
                   14173:        plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h,
                   14174:        plugins/sudoers/sudoers2ldif, plugins/sudoers/sudoreplay.c,
                   14175:        plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c,
                   14176:        plugins/sudoers/toke.c, plugins/sudoers/toke.l,
                   14177:        plugins/sudoers/tsgetgrpw.c, plugins/sudoers/vasgroups.c,
                   14178:        plugins/sudoers/visudo.c, pty.c, pwutil.c, redblack.c, redblack.h,
                   14179:        sample.pam, sample.sudoers, sample.syslog.conf,
                   14180:        schema.ActiveDirectory, schema.OpenLDAP, schema.iPlanet, script.c,
                   14181:        selinux.c, sesh.c, set_perms.c, sigaction.c, snprintf.c, src/aix.c,
                   14182:        src/alloc.c, src/audit.c, src/bsm_audit.c, src/bsm_audit.h,
                   14183:        src/error.c, src/fileops.c, src/lbuf.c, src/list.c, src/pty.c,
                   14184:        src/script.c, src/selinux.c, src/sesh.c, src/sudo_edit.c,
                   14185:        src/sudo_noexec.c, src/term.c, src/tgetpass.c, src/zero_bytes.c,
                   14186:        strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, strsignal.c, sudo.c,
                   14187:        sudo.cat, sudo.h, sudo.man.in, sudo.man.pl, sudo.pod, sudo_edit.c,
                   14188:        sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudoers, sudoers.cat,
                   14189:        sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod,
                   14190:        sudoers.man.in, sudoers.man.pl, sudoers.pod, sudoers2ldif,
                   14191:        sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod,
                   14192:        term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l,
                   14193:        tsgetgrpw.c, utimes.c, vasgroups.c, visudo.c, visudo.cat,
                   14194:        visudo.man.in, visudo.pod, zero_bytes.c:
                   14195:        Rework source layout in preparation for modular sudo.
                   14196:        [7fc1978c6ad5]
                   14197: 
                   14198: 2010-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14199: 
                   14200:        * Avoid a duplicate fclose() of the sudoers file.
                   14201:        [5dba851088c1]
                   14202: 
                   14203:        * Fix size arg when realloc()ing include stack. From Daniel Kopecek
                   14204:        [0a2935061e33]
                   14205: 
                   14206:        * Use setrlimit64(), if available, instead of setrlimit() when setting
                   14207:        AIX resource limits since rlim_t is 32bits.
                   14208:        [353db89bac61]
                   14209: 
                   14210:        * Fix use after free when sending error messages. From Timo Juhani
                   14211:        Lindfors
                   14212:        [e50dbd902382]
                   14213: 
                   14214:        * ChangeLog, Makefile.in:
                   14215:        Generate the ChangeLog as part of "make dist" instead of having it
                   14216:        in the repo.
                   14217:        [251b70964673]
                   14218: 
                   14219: 2010-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14220: 
                   14221:        * Makefile.binary.in, Makefile.in, aix.c, alias.c, alloc.c, alloc.h,
                   14222:        auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
                   14223:        auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
                   14224:        auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c,
                   14225:        auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c,
                   14226:        closefrom.c, compat.h, configure.in, defaults.c, defaults.h,
                   14227:        emul/charclass.h, emul/timespec.h, env.c, error.c, error.h,
                   14228:        fileops.c, find_path.c, getcwd.c, getprogname.c, getspwuid.c,
                   14229:        gettime.c, goodpath.c, gram.c, gram.y, ins_2001.h, ins_classic.h,
                   14230:        ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
                   14231:        isblank.c, lbuf.c, lbuf.h, ldap.c, list.c, list.h, logging.c,
                   14232:        logging.h, match.c, memrchr.c, missing.h, mkinstalldirs, mkstemp.c,
                   14233:        mon_systrace.c, nanosleep.c, parse.c, parse.h, pathnames.h.in,
                   14234:        pty.c, pwutil.c, redblack.c, redblack.h, sample.pam, sample.sudoers,
                   14235:        sample.syslog.conf, script.c, selinux.c, sesh.c, set_perms.c,
                   14236:        sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c,
                   14237:        strlcpy.c, strsignal.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
                   14238:        sudo_edit.c, sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudo_usage.h.in,
                   14239:        sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod,
                   14240:        sudoers2ldif, sudoreplay.c, sudoreplay.man.in, sudoreplay.pod,
                   14241:        term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l,
                   14242:        utimes.c, visudo.c, visudo.man.in, visudo.pod, zero_bytes.c:
                   14243:        Remove CVS $Sudo$ tags.
                   14244:        [de683a8b31f5]
                   14245: 
                   14246: 2010-01-18  convert-repo  <convert-repo>
                   14247: 
                   14248:        * .hgtags:
                   14249:        update tags
                   14250:        [9b7aa44ae436]
                   14251: 
                   14252: 2009-12-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14253: 
                   14254:        * sudo_usage.h.in:
                   14255:        make this match sudoers SYNOPSIS
                   14256:        [c74ba66944c2]
                   14257: 
                   14258:        * lbuf.c, parse.c:
                   14259:        Print a newline between Runas and Command-specific defaults in sudo
                   14260:        -l.
                   14261:        [b5bdfcc9ce4b]
                   14262: 
                   14263:        * term.c:
                   14264:        Use SET and CLR macros in term_raw
                   14265:        [50ca42609d6c]
                   14266: 
                   14267:        * sudoreplay.c:
                   14268:        Set stdin to non-blocking mode early instead of in check_input. Use
                   14269:        term_raw instead of term_cbreak since the data we get has already
                   14270:        been expanded via OPOST.
                   14271:        [51c47e803d62]
                   14272: 
                   14273: 2009-12-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14274: 
                   14275:        * script.c, term.c:
                   14276:        Enable/disable all postprocessing instead of just nl->crnl
                   14277:        processing since things like tab expansion matter too. However, if
                   14278:        stdout is a tty leave postprocessing on in the pty since we run into
                   14279:        problems doing it only on the real stdout with .e.g nvi.
                   14280:        [62666e309673]
                   14281: 
                   14282: 2009-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14283: 
                   14284:        * check.c:
                   14285:        If tty_tickets is enabled and there is no tty, prompt for a
                   14286:        password. Do not lecture user for "sudo -k command" if user has a
                   14287:        timestamp.
                   14288:        [5880200c5f6b]
                   14289: 
                   14290:        * INSTALL:
                   14291:        Document missing options: --with-efence and --with-bsm-audit
                   14292:        [d83afcdf9ff3]
                   14293: 
                   14294:        * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.ldap.cat,
                   14295:        sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod,
                   14296:        sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod, visudo.cat,
                   14297:        visudo.man.in, visudo.pod:
                   14298:        username -> user name groupname -> group name hostname -> host name
                   14299:        [10c85646f45d]
                   14300: 
                   14301:        * INSTALL, README.LDAP, sudoers.pod:
                   14302:        filename -> file name like the rest of the docs
                   14303:        [1ef8ab5a9018]
                   14304: 
                   14305: 2009-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14306: 
                   14307:        * parse.c:
                   14308:        Fix printing of entries with multiple host entries on a single line.
                   14309:        [226ceaf91d8d]
                   14310: 
                   14311: 2009-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14312: 
                   14313:        * sudoers.pod:
                   14314:        Mention that targetpw affects the timestamp file name.
                   14315:        [a26e22e4f72e]
                   14316: 
                   14317:        * def_data.c, def_data.h, def_data.in, defaults.c, script.c,
                   14318:        sudoers.pod:
                   14319:        Add compress_transcript option.
                   14320:        [6e94f8cb9dfb]
                   14321: 
                   14322: 2009-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14323: 
                   14324:        * configure, configure.in:
                   14325:        bump to 1.7.3b2
                   14326:        [906d7e347d15]
                   14327: 
                   14328:        * pwutil.c, set_perms.c, sudo.c, sudo_nss.c:
                   14329:        Better split of membership vs. traditional group check in
                   14330:        user_in_group(). Allow user_ngroups to be < 0 if getgroups() fails.
                   14331:        [6ebc55d4716b]
                   14332: 
                   14333: 2009-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14334: 
                   14335:        * pwutil.c:
                   14336:        Fix pasto and add default return value.
                   14337:        [7973b5e4599c]
                   14338: 
                   14339:        * check.c, match.c, pwutil.c, sudo.h:
                   14340:        refactor group member checking into user_in_group()
                   14341:        [48ca8c2eddf8]
                   14342: 
                   14343:        * check.c, config.h.in, configure, configure.in, match.c, sudo.c,
                   14344:        sudo.h:
                   14345:        Add support for mbr_check_membership() as present in darwin.
                   14346:        [5501aed02b9f]
                   14347: 
                   14348: 2009-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14349: 
                   14350:        * match.c:
                   14351:        Rename label to be accurate
                   14352:        [3af17dd960f7]
                   14353: 
                   14354:        * Makefile.in, boottime.c, check.c, config.h.in, configure,
                   14355:        configure.in, sudo.h:
                   14356:        Treat timestamp files from before we booted as old. Idea from and
                   14357:        Apple patch.
                   14358:        [5c96e484c05a]
                   14359: 
                   14360: 2009-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14361: 
                   14362:        * sudo.c, sudo.pod, sudo_usage.h.in:
                   14363:        Allow the -u flag to be used in conjunction with the -v flag as per
                   14364:        older versions of sudo.
                   14365:        [591e9fc13c1a]
                   14366: 
                   14367:        * logging.c:
                   14368:        fix typo in last commit
                   14369:        [4fd0c692dcf0]
                   14370: 
                   14371: 2009-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14372: 
                   14373:        * logging.c:
                   14374:        Convert fmt_first and fmt_confd into macros.
                   14375:        [32e870158b29]
                   14376: 
                   14377:        * sudoers.pod:
                   14378:        timeouts can be floats now
                   14379:        [89de639a9679]
                   14380: 
                   14381:        * WHATSNEW, def_data.c, def_data.h, def_data.in, defaults.c,
                   14382:        defaults.h, mkdefaults:
                   14383:        Add support for floating point timeout values (e.g. 2.5 minutes).
                   14384:        [210ffa291733]
                   14385: 
                   14386: 2009-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14387: 
                   14388:        * sudo.pod:
                   14389:        The -L flag will be removed in sudo 1.7.4
                   14390:        [ffd026084333]
                   14391: 
                   14392: 2009-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14393: 
                   14394:        * sudoreplay.c:
                   14395:        Fix a bug due to order of operators.
                   14396:        [938d34464283]
                   14397: 
                   14398: 2009-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14399: 
                   14400:        * match.c:
                   14401:        cmnd_matches() already deals with negation so _cmndlist_matches()
                   14402:        does not need to do so itself. Fixes a bug with negated entries in
                   14403:        a Cmnd_List.
                   14404:        [71c845f6ce73]
                   14405: 
                   14406: 2009-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14407: 
                   14408:        * sudo.c:
                   14409:        Don't exit() from open_sudoers, just return NULL for all errors.
                   14410:        [8cfa832f972a]
                   14411: 
                   14412:        * script.c:
                   14413:        Can't rely on the shell sending us SIGCONT when transitioning from
                   14414:        backgroup to foreground process.
                   14415:        [3c6c5b6cb4b3]
                   14416: 
                   14417:        * toke.c, toke.l:
                   14418:        Add missing extern def for parse_error
                   14419:        [45b7b59d03b7]
                   14420: 
                   14421: 2009-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14422: 
                   14423:        * toke.c, toke.l:
                   14424:        Avoid a parse error when #includedir doesn't find any files. Closes
                   14425:        bug #375
                   14426:        [1ce1b850e9e6]
                   14427: 
                   14428:        * Makefile.in:
                   14429:        Include sudo.man.pl and sudoers.man.pl in the distribution tarball.
                   14430:        [6a22e32da108]
                   14431: 
                   14432: 2009-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14433: 
                   14434:        * script.c:
                   14435:        Start command out in foreground mode if stdout is a tty. Works
                   14436:        around issues with some curses-based programs that don't handle
                   14437:        tcsetattr getting interrupted by a signal. Still allows us to avoid
                   14438:        hogging the tty if the command is part of a pipeline.
                   14439:        [1c32f2b94769]
                   14440: 
                   14441:        * script.c, sudo.c, sudo.h, sudoreplay.c, term.c, tgetpass.c:
                   14442:        Use a socketpair to pass signals from parent to child. Child will
                   14443:        now pass command status change info back via the socketpair. This
                   14444:        allows the parent to distinguish between signals it has been sent
                   14445:        directly and signals the command has received. It also means the
                   14446:        parent can once again print the signal notifications to the tty so
                   14447:        all writes to the pty master occur in the parent. The command is
                   14448:        now always started in background mode with tty signals handled by
                   14449:        the parent.
                   14450:        [c6790b82986d]
                   14451: 
                   14452: 2009-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14453: 
                   14454:        * configure, configure.in:
                   14455:        Fix a few typos in the descriptions; from Jeff Makey Only do the
                   14456:        check for krb5_get_init_creds_opt_free() taking two arguments if we
                   14457:        find krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
                   14458:        positive when using our own krb5_get_init_creds_opt_free which takes
                   14459:        only a single argument.
                   14460:        [845a9ff6f93d]
                   14461: 
                   14462: 2009-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14463: 
                   14464:        * configure, configure.in:
                   14465:        Remove a spurious comma in the kerb5 bits.
                   14466:        [3433eab083db]
                   14467: 
                   14468:        * auth/kerb5.c:
                   14469:        Call krb5_get_init_creds_opt_init() in our emulated
                   14470:        krb5_get_init_creds_opt_alloc() for MIT kerberos.
                   14471:        [7ffb40bf43e9]
                   14472: 
                   14473: 2009-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14474: 
                   14475:        * config.h.in:
                   14476:        Add HAVE_ZLIB
                   14477:        [9297bde61ecc]
                   14478: 
                   14479:        * script.c:
                   14480:        Need to ignore SIGTT{IN,OU} in child when running the command in the
                   14481:        background. Also some minor cleanup.
                   14482:        [dc208d982319]
                   14483: 
                   14484: 2009-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14485: 
                   14486:        * script.c:
                   14487:        Instead of calling sigsuspend when waiting for SIGUSR[12] from
                   14488:        parent, install the signal handlers w/o SA_RESTART and let them
                   14489:        interrupt waitpid().
                   14490:        [759c7d18203b]
                   14491: 
                   14492:        * script.c:
                   14493:        Pass along SIGHUP and SIGTERM from parent to child.
                   14494:        [035b0e254568]
                   14495: 
                   14496:        * script.c:
                   14497:        Close unused bits of script_fds in processes that don't need them.
                   14498:        Restore default SIGCONT handler in child.
                   14499:        [e037378ab0c1]
                   14500: 
                   14501:        * script.c:
                   14502:        Update foreground/background status in SIGCONT handler in parent
                   14503:        process.
                   14504:        [3f7f91333264]
                   14505: 
                   14506: 2009-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14507: 
                   14508:        * script.c:
                   14509:        Defer setting terminal into raw mode until just before we fork() and
                   14510:        only do it if sudo is the foreground process. If we get SIGTT{IN,OU}
                   14511:        and sudo is already in the foreground be sure to set raw mode before
                   14512:        continuing the child.
                   14513:        [1102ef40832c]
                   14514: 
                   14515: 2009-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14516: 
                   14517:        * script.c:
                   14518:        Fix handling of SIGTTOU/SIGTTIN in program being run. We now only
                   14519:        give the command the controlling tty if the main sudo process is the
                   14520:        foreground process.
                   14521:        [cf3a91cb5682]
                   14522: 
                   14523:        * script.c:
                   14524:        Don't bother with sudo_waitpid() here for now.
                   14525:        [9086de480c2d]
                   14526: 
                   14527:        * script.c:
                   14528:        fix non-zlib case
                   14529:        [a258bff0f9a6]
                   14530: 
                   14531: 2009-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14532: 
                   14533:        * script.c:
                   14534:        Remove non-wroking code that crept into rev 1.55
                   14535:        [2802dd55cff5]
                   14536: 
                   14537: 2009-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14538: 
                   14539:        * INSTALL, configure, configure.in, script.c, sudoreplay.c:
                   14540:        First pass at zlib support for transcript data files
                   14541:        [5d10260807da]
                   14542: 
                   14543:        * Makefile.in:
                   14544:        remove vestiges of ZLDFLAGS
                   14545:        [1fa0caf1c0fb]
                   14546: 
                   14547:        * script.c:
                   14548:        Add missing variable declaration for when TIOCSCTTY is not defined.
                   14549:        Need to include sys/termio.h for TIOCSCTTY on some systems.
                   14550:        [ee7f41ac2709]
                   14551: 
                   14552:        * script.c:
                   14553:        when resuming command, send SIGCONT to its pgrp not just pid
                   14554:        [5cd63c1d565b]
                   14555: 
                   14556:        * selinux.c:
                   14557:        remove unused variable
                   14558:        [df67df4be228]
                   14559: 
                   14560:        * script.c:
                   14561:        include selinux.h for is_selinux_enabled() proto
                   14562:        [85ebaa880cc1]
                   14563: 
                   14564:        * script.c:
                   14565:        Don't use log_error() in the child process.
                   14566:        [def65fe2a433]
                   14567: 
                   14568:        * script.c:
                   14569:        Do I/O in parent instead of child since the parent can have both
                   14570:        /dev/tty as well as the pty fds open. The child just sets things up
                   14571:        and waits for its grandchild and writes the signal description to
                   14572:        the pty master if the command was killed by a signal.
                   14573:        [95e473208982]
                   14574: 
                   14575: 2009-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14576: 
                   14577:        * missing.h, sudo.h:
                   14578:        Move two struct forward declarations from sudo.h to missing.h
                   14579:        [90ad28294a8c]
                   14580: 
                   14581:        * script.c:
                   14582:        Make comment at the top of script_exec() match reality.
                   14583:        [c5042d27dbe0]
                   14584: 
                   14585:        * sudo.c:
                   14586:        if neither stdin nor stdout is a tty, check stderr
                   14587:        [c532ff20c8d8]
                   14588: 
                   14589:        * Makefile.in:
                   14590:        Add back dependecy of gram.h on gram.y
                   14591:        [c58382b7fcca]
                   14592: 
                   14593:        * script.c:
                   14594:        Make transcript mode work as long as we can figure out our tty, even
                   14595:        if it is not stdin. We'd like to use /dev/tty but that won't be
                   14596:        valid after the setsid().
                   14597:        [7b8bba8d99e7]
                   14598: 
                   14599: 2009-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14600: 
                   14601:        * config.h.in, configure, configure.in, pty.c:
                   14602:        Add support for IRIX-style dynamic ptys
                   14603:        [bedc9bac44c1]
                   14604: 
                   14605:        * Makefile.in, alloc.h, getline.c, sudo.h, sudoreplay.c:
                   14606:        Move alloc.c protos into alloc.h
                   14607:        [b6a90649617d]
                   14608: 
                   14609:        * missing.h:
                   14610:        Move prototypes for missing libc functions to missing.h
                   14611:        [dda9ae1ccaf8]
                   14612: 
                   14613:        * Makefile.in, sudo.h, sudoreplay.c:
                   14614:        Move prototypes for missing libc functions to missing.h
                   14615:        [7483166b577b]
                   14616: 
                   14617: 2009-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14618: 
                   14619:        * config.h.in, configure, configure.in:
                   14620:        Disable transcript support if no tcsetpgrp until we support older
                   14621:        BSD-style job control.
                   14622:        [27ac1d8163df]
                   14623: 
                   14624:        * configure, configure.in, pty.c, script.c:
                   14625:        Break out pty code into pty.c
                   14626:        [e85509b25d41]
                   14627: 
                   14628:        * compat.h, config.h.in, configure, configure.in:
                   14629:        add killpg macro if no killpg function
                   14630:        [3a125f4a51f0]
                   14631: 
                   14632:        * config.h.in, configure, configure.in, script.c:
                   14633:        Push ptem and ldterm for STERAMS-based systems when allocating a
                   14634:        pty.
                   14635:        [36bb39b30ff2]
                   14636: 
                   14637: 2009-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14638: 
                   14639:        * script.c:
                   14640:        Sprinkle some more O_NOCTTY and call grantpt() before unlockpt()
                   14641:        [d94bd5c9bf4e]
                   14642: 
                   14643:        * script.c:
                   14644:        Call tcgetpgrp() in the parent, not the child and have the child
                   14645:        spin until it is granted. Fixes a race on darwin.
                   14646:        [6e8d435339ce]
                   14647: 
                   14648:        * script.c:
                   14649:        Only use TIOCNOTTY in the non-setsid case. If no TIOCSCTTY, just
                   14650:        reopen slave.
                   14651:        [0bdc63c019ca]
                   14652: 
                   14653: 2009-10-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14654: 
                   14655:        * script.c:
                   14656:        In script mode, if the command is killed by a signal, print the
                   14657:        signal description as well as a core dump notification like the
                   14658:        shell does.
                   14659:        [9df61738df07]
                   14660: 
                   14661:        * Makefile.in, config.h.in, configure, configure.in, strsignal.c,
                   14662:        sudo.h:
                   14663:        Add check for strsignal() and a simple implementation if it is not
                   14664:        there but sys_siglist is
                   14665:        [61421a188ef4]
                   14666: 
                   14667:        * script.c:
                   14668:        Add missing WUNTRACED and store the signal that stopped the
                   14669:        grandchild in suspended, not signo.
                   14670:        [df65042b200e]
                   14671: 
                   14672:        * script.c:
                   14673:        g/c unused code
                   14674:        [40d8cb5c9203]
                   14675: 
                   14676:        * script.c:
                   14677:        Associate the grandchild's pgrp with the tty instead of the child's
                   14678:        and just get suspend notifications via SIGCHLD instead of directly.
                   14679:        This fixes a hang with programs that try to set terminal attributes
                   14680:        and is more consistent with how the shell handles things.
                   14681:        [6865abff7e94]
                   14682: 
                   14683: 2009-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14684: 
                   14685:        * script.c:
                   14686:        Move setpgid() of child into the parent side of the fork() where it
                   14687:        belongs.
                   14688:        [3defa782777c]
                   14689: 
                   14690: 2009-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14691: 
                   14692:        * script.c:
                   14693:        fix typo
                   14694:        [b6a612b3622c]
                   14695: 
                   14696:        * script.c:
                   14697:        Run command in its own pgrp (like the shell does) for easier
                   14698:        signalling. No need to relay SIGINT or SIGQUIT to parent, just send
                   14699:        to grandchild. Don't want grandchild stopped events in the child
                   14700:        (only termination). Flush output after suspending grandchild before
                   14701:        signalling parent.
                   14702:        [db556bf2176f]
                   14703: 
                   14704:        * script.c:
                   14705:        Back out revision 1.34; the problem lies elsewhere.
                   14706:        [85f590a03275]
                   14707: 
                   14708:        * script.c:
                   14709:        Don't set stdout to blocking mode when flushing remaining output.
                   14710:        It can cause us to hang when trying to exit. Need to investigate
                   14711:        why.
                   14712:        [6f803a3e33ca]
                   14713: 
                   14714:        * script.c:
                   14715:        Handle SIGTTOU and remove some debugging.
                   14716:        [52d17279053e]
                   14717: 
                   14718:        * term.c:
                   14719:        Back out revision 1.10 as the signal that interrupts us may be
                   14720:        SIGTTOU or SIGTTIN which the caller must handle.
                   14721:        [7e2fa9107975]
                   14722: 
                   14723:        * script.c:
                   14724:        Apparently we need to send SIGSTOP to the command as well as ourself
                   14725:        when we get SIGTSTP, the kernel doesn't automatically stop the
                   14726:        process for us.
                   14727:        [1a936e9309c4]
                   14728: 
                   14729:        * script.c:
                   14730:        Use an extra process to act as the glue bewteen the sessions
                   14731:        associated with the user's controlling tty (what the shell uses) and
                   14732:        the tty that sudo is using to do its logging. Basically, this means
                   14733:        that if we get, e.g. SIGTSTP from the process sudo is running, we
                   14734:        relay the signal to the parent so it's shell can do the job control.
                   14735:        [6dd296988060]
                   14736: 
                   14737:        * term.c:
                   14738:        Handle getting/setting terminal attributes when the fd is in non-
                   14739:        blocking mode.
                   14740:        [ae5ae535ea7b]
                   14741: 
                   14742: 2009-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14743: 
                   14744:        * sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
                   14745:        Add support for pausing and changing the speed in interactive mode.
                   14746:        [72a2063780a7]
                   14747: 
                   14748:        * script.c:
                   14749:        Already define O_NOCTTY in compat.h, don't need it here
                   14750:        [b5d80ed3e5ce]
                   14751: 
                   14752: 2009-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14753: 
                   14754:        * sudoreplay.c:
                   14755:        Add missing protos
                   14756:        [c4cb4e7f4d8a]
                   14757: 
                   14758: 2009-09-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14759: 
                   14760:        * sudo_edit.c:
                   14761:        Always update the stashed mtime of the temp file instead of using
                   14762:        what we have for the original because the time resolution of the
                   14763:        filesystem the temporary is on may not match that of the filesystem
                   14764:        that holds the original. Should fix bz #371 found by Philippe Levan.
                   14765:        [c86ca4bec60c]
                   14766: 
                   14767:        * sudoreplay.c:
                   14768:        Use cbreak mode instead of raw mode and add signal handlers to
                   14769:        restore the tty on interrupt.
                   14770:        [84dd283da41c]
                   14771: 
                   14772:        * script.c, sudo.h, term.c:
                   14773:        Retain NL to NLCR conversion on the real tty and skip it on the pty
                   14774:        we allocate. That way, if stdout is not a pty there are no extra
                   14775:        carriage returns.
                   14776:        [32e4f570414e]
                   14777: 
                   14778:        * script.c:
                   14779:        Fix log_output(); just pass in a string and a length.
                   14780:        [ca980cc0a3fb]
                   14781: 
                   14782: 2009-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14783: 
                   14784:        * script.c:
                   14785:        do not use errno when complaining out lack of a tty
                   14786:        [8f9b8c55ab8e]
                   14787: 
                   14788: 2009-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14789: 
                   14790:        * Makefile.in, sudoreplay.c, term.c:
                   14791:        Instead of messing with line endings, just set terminal to raw mode
                   14792:        in sudoreplay.
                   14793:        [90943fa87acb]
                   14794: 
                   14795:        * term.c:
                   14796:        When copying the terminal attributes to the pty, be sure not to set
                   14797:        ONLCR. This prevents extra carriage returns from ending up in the
                   14798:        script output file.
                   14799:        [e6b5475ac2aa]
                   14800: 
                   14801:        * script.c:
                   14802:        Convert a do {} while into a while
                   14803:        [e461310d2c77]
                   14804: 
                   14805:        * Makefile.in:
                   14806:        Use if then instead of test && when installing binaries that may not
                   14807:        exist.
                   14808:        [ad4f9490d971]
                   14809: 
                   14810:        * script.c:
                   14811:        Add O_NOCTTY when opening a tty device. Explicitly disconnect from
                   14812:        old tty before associatng with new one.
                   14813:        [0e0ca634b80c]
                   14814: 
                   14815:        * script.c, selinux.c, sudo.c, sudo.h:
                   14816:        First cut at refactoring some of the selinux code so it can be used
                   14817:        in conjunction with sudo's transcript support.
                   14818:        [779b0d8f9d29]
                   14819: 
                   14820: 2009-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14821: 
                   14822:        * aclocal.m4, configure, configure.in:
                   14823:        Fix default case of transcript_enabled being unset.
                   14824:        [f8aa96186e6b]
                   14825: 
                   14826:        * script.c, sudoreplay.c:
                   14827:        Use _PATH_SUDO_TRANSCRIPT instead of _PATH_SUDO_SESSDIR
                   14828:        [2844a7a851fa]
                   14829: 
                   14830:        * INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.c:
                   14831:        Hook up --disable-transcript and --enable-transcript=DIR
                   14832:        [b3fa7e6b2480]
                   14833: 
                   14834: 2009-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14835: 
                   14836:        * aclocal.m4, configure, configure.in, pathnames.h.in:
                   14837:        _PATH_SUDO_SESSDIR -> _PATH_SUDO_TRANSCRIPT Add --enable-
                   14838:        transcript=DIR option to specify the directory
                   14839:        [b0bb76d43cda]
                   14840: 
                   14841:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
                   14842:        regen
                   14843:        [c7a8a0a9027c]
                   14844: 
                   14845:        * configure, configure.in, sudoers.man.pl, sudoers.pod:
                   14846:        Substitute in default value for secure_path
                   14847:        [c8f9ac6dbf93]
                   14848: 
                   14849:        * sudo.pod:
                   14850:        Mention that the password must be followed by a newline with the -S
                   14851:        option.
                   14852:        [2fc589a3ee7e]
                   14853: 
                   14854: 2009-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14855: 
                   14856:        * script.c:
                   14857:        Go back to dropping out of the select() loop when the process dies;
                   14858:        Linux ptys apparently don't behave the same as BSD in regards to
                   14859:        select(). No need to flush remaining output to the transcript, only
                   14860:        to stdout. Add back code to check the master pty for additional data
                   14861:        when we exit the main select loop.
                   14862:        [abed9a9cbc6b]
                   14863: 
                   14864: 2009-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14865: 
                   14866:        * Makefile.in:
                   14867:        Add getline.o to COMMON_OBJS
                   14868:        [04ef7643cbc2]
                   14869: 
                   14870:        * Makefile.in:
                   14871:        sudoreplay depends on libsudo.a
                   14872:        [142bd0472631]
                   14873: 
                   14874:        * Makefile.in:
                   14875:        More pwutil.o into COMMON_OBJS
                   14876:        [4a016b933629]
                   14877: 
                   14878:        * pwutil.c, testsudoers.c, tsgetgrpw.c:
                   14879:        Remove my_* redirection in pwutil.c for testsudoers and just use the
                   14880:        normal libc get{pw,gr}* names.
                   14881:        [9b76d637d86b]
                   14882: 
                   14883:        * sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
                   14884:        More time and date examples
                   14885:        [c6ee0175ec56]
                   14886: 
                   14887:        * Makefile.in, configure, configure.in, nanosleep.c, sudoreplay.c:
                   14888:        Move nanosleep() emulation into its own file Check librt.a for
                   14889:        nanosleep if we don't find it in libc
                   14890:        [4da0cc26aad7]
                   14891: 
                   14892:        * Makefile.in, configure, configure.in:
                   14893:        Build libsudo with the common bits and link things against that.
                   14894:        [2b53bc0b081a]
                   14895: 
                   14896:        * script.c:
                   14897:        Fix final flush.
                   14898:        [6da287d833da]
                   14899: 
                   14900:        * script.c:
                   14901:        Keep reading from the pty master -> log file until read returns <=
                   14902:        0. Do our best to write everything to stdout when flushing any
                   14903:        remaining bits.
                   14904:        [2a45d4ae280c]
                   14905: 
                   14906:        * sudoreplay.c:
                   14907:        Use unbuffered I/O when writing to stdout and make sure we write the
                   14908:        entire buffer.
                   14909:        [f39ef9844a47]
                   14910: 
                   14911: 2009-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14912: 
                   14913:        * sudoreplay.c:
                   14914:        Only use max_wait if it is non-zero
                   14915:        [f6c10604d2e8]
                   14916: 
                   14917:        * getdate.c, getdate.y, getline.c:
                   14918:        Need compat.h here
                   14919:        [5d6722e225a0]
                   14920: 
                   14921:        * sudoreplay.c:
                   14922:        Fix nanosleep emulation
                   14923:        [34e5e5d72a76]
                   14924: 
                   14925:        * script.c:
                   14926:        Fix comment after #endif
                   14927:        [bd1347718b25]
                   14928: 
                   14929:        * sudoreplay.c:
                   14930:        Add protos for missing libc bits
                   14931:        [644f496427a2]
                   14932: 
                   14933:        * configure, configure.in:
                   14934:        add missing line continuation char
                   14935:        [db13c0d402cd]
                   14936: 
                   14937:        * config.h.in, configure, configure.in, getline.c:
                   14938:        Implement getline() in terms of fgetln() if we have it.
                   14939:        [3ab786eaadc5]
                   14940: 
                   14941:        * sudoreplay.c:
                   14942:        Print year when formatting log line
                   14943:        [90be669e3443]
                   14944: 
                   14945:        * sudoreplay.pod:
                   14946:        Document cwd, attempt to document time/date formats.
                   14947:        [6290fb9b65c6]
                   14948: 
                   14949:        * sudoreplay.c:
                   14950:        Fix getline return value check.
                   14951:        [d696d6657261]
                   14952: 
                   14953:        * Makefile.in, config.h.in, configure, configure.in, getline.c,
                   14954:        sudoreplay.c:
                   14955:        Use getline() if the system has it, else use provide our own for
                   14956:        sudoreplay.
                   14957:        [afca1d6fbe5e]
                   14958: 
                   14959:        * script.c:
                   14960:        Refactor code to update output and timing files.
                   14961:        [361491332b1a]
                   14962: 
                   14963: 2009-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14964: 
                   14965:        * sudoreplay.c:
                   14966:        Make sudo_getln() behave more like glibc getline.
                   14967:        [40c9f2ea29e6]
                   14968: 
                   14969:        * script.c:
                   14970:        When flushing remaining output, also update timing file.
                   14971:        [5a9a5a627549]
                   14972: 
                   14973:        * sudoreplay.c:
                   14974:        Use get_timestr() and make the -l output look like the regular sudo
                   14975:        log.
                   14976:        [452ba9d436c9]
                   14977: 
                   14978:        * logging.c, sudo.h, timestr.c:
                   14979:        Make get_timestr() take a time_t so we can use it properly in
                   14980:        sudoreplay.
                   14981:        [82e67cc53c9c]
                   14982: 
                   14983:        * script.c:
                   14984:        Create session dir earlier now that we update the seq number early.
                   14985:        [797fe8d6dc61]
                   14986: 
                   14987: 2009-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   14988: 
                   14989:        * sudoreplay.c:
                   14990:        Use fromdate and todate as the keywords instead of from and to; the
                   14991:        short forms will still be accepted.
                   14992:        [d14d9b116df4]
                   14993: 
                   14994:        * sudoreplay.c:
                   14995:        Fix reading long liensin sudo_getln()
                   14996:        [58dadd74118c]
                   14997: 
                   14998:        * script.c, sudoreplay.c:
                   14999:        Log the cwd in the script log file. Add sudo_getln() to read
                   15000:        arbitrarily long lines.
                   15001:        [faceb802ab8f]
                   15002: 
                   15003:        * Makefile.in, logging.c, sudo.h, timestr.c:
                   15004:        Move get_timestr() into its own source file so sudoreplay can use
                   15005:        it.
                   15006:        [99b054bfa20a]
                   15007: 
                   15008: 2009-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15009: 
                   15010:        * sudoreplay.c:
                   15011:        Add to and from perdicates (date ranges); needs documentation
                   15012:        [1d629174dcf4]
                   15013: 
                   15014: 2009-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15015: 
                   15016:        * Makefile.in, getdate.c, getdate.y:
                   15017:        Fix warning and add generated getdate.c
                   15018:        [b877a86b5a03]
                   15019: 
                   15020:        * Makefile.in, getdate.y:
                   15021:        Add getdate.y to be used for sudoreplay date parsing.
                   15022:        [b8e26fbb7a40]
                   15023: 
                   15024: 2009-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15025: 
                   15026:        * sudoreplay.c:
                   15027:        Check more than just the first character of a predicate
                   15028:        [4fe53728adb1]
                   15029: 
                   15030:        * sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod:
                   15031:        Add examples, sort predicates
                   15032:        [70f8075cbccc]
                   15033: 
                   15034:        * Makefile.in, sudoreplay.c, sudoreplay.cat, sudoreplay.man.in,
                   15035:        sudoreplay.pod:
                   15036:        Implement search expressions in sudoreplay similar in concept to
                   15037:        what find or tcpdump uses. TODO: date ranges
                   15038:        [f7ce4fb4cf3a]
                   15039: 
                   15040: 2009-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15041: 
                   15042:        * script.c:
                   15043:        Remove vhangup as it was hanging up the wrong tty. Should really
                   15044:        vhangup in the child after it as set its tty.
                   15045:        [2eed9df73010]
                   15046: 
                   15047:        * sudoers.pod:
                   15048:        Fix cut at documenting transcript support.
                   15049:        [e6c533a5568a]
                   15050: 
                   15051:        * logging.c:
                   15052:        ID= -> TSID= for transcript ID
                   15053:        [1bf755a35333]
                   15054: 
                   15055: 2009-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15056: 
                   15057:        * sudoers.pod:
                   15058:        Move fast_glob description to where it belongs in sorted order
                   15059:        [5901cfb0d25f]
                   15060: 
                   15061:        * def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
                   15062:        parse.c, parse.h, sudo.c:
                   15063:        Rename script -> transcript
                   15064:        [e06cf823122c]
                   15065: 
                   15066: 2009-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15067: 
                   15068:        * compat.h:
                   15069:        Add timeradd and timersub for those without them
                   15070:        [929f8aa06c2b]
                   15071: 
                   15072:        * script.c:
                   15073:        Sanity check sessid before using it.
                   15074:        [aa8ca5211d43]
                   15075: 
                   15076:        * sudo.c:
                   15077:        Only set the session id if we are running a command or editing a
                   15078:        file.
                   15079:        [7205d717c098]
                   15080: 
                   15081:        * script.c:
                   15082:        Actually. qsort is fine since most versions fal back to a cheaper
                   15083:        sort when the number of elements to sort is small (like in our
                   15084:        case).
                   15085:        [d11c7cd352fe]
                   15086: 
                   15087:        * config.h.in, configure, configure.in, script.c:
                   15088:        Check for dup2 and use dup instead if we don't have it.
                   15089:        [98bd89830f8a]
                   15090: 
                   15091:        * script.c, sudo.c, sudo.h:
                   15092:        Move the code to dup2 the script fds to low numbered descriptors
                   15093:        into script_duplow() and fix the fd sorting.
                   15094:        [9453fdc5fba6]
                   15095: 
                   15096:        * script.c, sudo.c, sudo.h:
                   15097:        Move script_setup() back to immediately before we drop privs and
                   15098:        call the new script_nextid() in its place, which will set
                   15099:        sudo_user.sessid for the logging functions.
                   15100:        [8434d0c8ff08]
                   15101: 
                   15102: 2009-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15103: 
                   15104:        * Makefile.in:
                   15105:        Install sudoreplay
                   15106:        [6acf2cdb4d3f]
                   15107: 
                   15108:        * sudoreplay.c:
                   15109:        remove unused variable
                   15110:        [2316360bb992]
                   15111: 
                   15112: 2009-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15113: 
                   15114:        * logging.c, script.c, sudo.c, sudo.h:
                   15115:        Log the session ID, if there is one. Currently logs ID=XXXXXX,
                   15116:        perhaps should be SESSIONID or SESSID.
                   15117:        [53976905b0a6]
                   15118: 
                   15119:        * Makefile.in, configure, configure.in, sudoreplay.cat,
                   15120:        sudoreplay.man.in, sudoreplay.pod:
                   15121:        Add sudoreplay docs
                   15122:        [da4f14f0e64c]
                   15123: 
                   15124:        * sudoreplay.c:
                   15125:        add -V (version) flag
                   15126:        [b5e743639ee3]
                   15127: 
                   15128:        * sudoreplay.c:
                   15129:        Hook up max_wait.
                   15130:        [2ec5697a92ba]
                   15131: 
                   15132:        * script.c, sudoreplay.c:
                   15133:        Use base36 number for the ID and store script files with paths like
                   15134:        /var/log/sudo-session/00/00/00{,.tim,.scr}. This gives us 36^6
                   15135:        (2,176,782,336) unique IDs.
                   15136:        [6aab019d07aa]
                   15137: 
                   15138: 2009-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15139: 
                   15140:        * config.h.in, configure.in:
                   15141:        Add check for regcomp
                   15142:        [44c3ebd7ff34]
                   15143: 
                   15144:        * sudoreplay.c:
                   15145:        Add support for selecting by pattern and tty when listing.
                   15146:        [66189f840c52]
                   15147: 
                   15148: 2009-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15149: 
                   15150:        * sudoreplay.c:
                   15151:        The beginnings of a list mode.
                   15152:        [8d0150b4a52c]
                   15153: 
                   15154: 2009-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15155: 
                   15156:        * Makefile.in:
                   15157:        fix pasto
                   15158:        [616b4640b8a8]
                   15159: 
                   15160:        * Makefile.in, config.h.in, configure.in:
                   15161:        Add scaffolding for building sudoreplay
                   15162:        [a32958505dbe]
                   15163: 
                   15164:        * sudoreplay.c:
                   15165:        include error.h first arg to nanotime is const
                   15166:        [fe5a7bb31bc5]
                   15167: 
                   15168:        * sudoreplay.c:
                   15169:        Initial cut at sudoreplay; replay a sudo session.
                   15170:        [f149fba372bd]
                   15171: 
                   15172: 2009-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15173: 
                   15174:        * script.c:
                   15175:        Fix wait() usage and use correct wait status.
                   15176:        [f4745ed7ad05]
                   15177: 
                   15178:        * sudo.c, sudo.h, tgetpass.c:
                   15179:        Add protos for term_* to sudo.h
                   15180:        [14fe1abd7e7b]
                   15181: 
                   15182:        * script.c:
                   15183:        Fix detection of the child process exiting. Since the child is in
                   15184:        its own session we should only ever get SIGCHLD for that process but
                   15185:        better safe than sorry.
                   15186:        [7edfdadd8505]
                   15187: 
                   15188:        * config.h.in:
                   15189:        Add UNIX98 pty support.
                   15190:        [82f4b53a0e8f]
                   15191: 
                   15192:        * configure, configure.in, script.c:
                   15193:        Add UNIX98 pty support.
                   15194:        [795b8bb0a3a1]
                   15195: 
                   15196: 2009-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15197: 
                   15198:        * term.c:
                   15199:        For raw mode, don't bother clearing BRKINT or PARMRK and clear IUCLC
                   15200:        if it is defined.
                   15201:        [40f8b83baf69]
                   15202: 
                   15203:        * auth/pam.c:
                   15204:        Set PAM_RUSER and PAM_RHOST early so they can be used during
                   15205:        authentication. Based on a patch from Jamie Beverly.
                   15206:        [3d567b453a6a]
                   15207: 
                   15208:        * match.c:
                   15209:        Close dir before returning if strlcpy() reports overflow. From
                   15210:        Martynas Venckus.
                   15211:        [6a82f96473e5]
                   15212: 
                   15213:        * config.h.in, configure, configure.in, script.c:
                   15214:        On Linux, the openpty proto libes in pty.h
                   15215:        [98643a018d1c]
                   15216: 
                   15217:        * script.c:
                   15218:        Call vhangup on exit if the system has it Use setpgrp() if no
                   15219:        setsid()
                   15220:        [3a9e13149829]
                   15221: 
                   15222: 2009-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15223: 
                   15224:        * config.h.in, configure, configure.in:
                   15225:        Add checks for revoke and vhangup if we don't have openpty
                   15226:        [fcb04572e994]
                   15227: 
                   15228:        * script.c:
                   15229:        Session logging guts that got forgotten in the previous commit.
                   15230:        [c2af08a63ea9]
                   15231: 
                   15232:        * Makefile.in, aclocal.m4, compat.h, config.h.in, configure,
                   15233:        configure.in, def_data.c, def_data.h, def_data.in, gram.c, gram.h,
                   15234:        gram.y, parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, term.c,
                   15235:        tgetpass.c:
                   15236:        First cut at session logging for sudo. Still need to write
                   15237:        get_pty() for Unix 98 and old-style BSD ptys. Also needs
                   15238:        documentation and general cleanup.
                   15239:        [77e3f5e25738]
                   15240: 
                   15241: 2009-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15242: 
                   15243:        * sudo.c, sudo_edit.c:
                   15244:        Fix a bug introduced with def_closefrom. The value of def_closefrom
                   15245:        already includes the +1.
                   15246:        [7291c136300d]
                   15247: 
                   15248: 2009-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15249: 
                   15250:        * Makefile.in:
                   15251:        Generate sudo distributions with pax in ustar mode. No longer need
                   15252:        to use a temp file or have the source dir name match the version.
                   15253:        [9778177a8272]
                   15254: 
                   15255: 2009-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15256: 
                   15257:        * toke.c, toke.l:
                   15258:        Fix expansion of %h in #include names. Fixes bugzilla 363
                   15259:        [6e346879ba24]
                   15260: 
                   15261: 2009-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15262: 
                   15263:        * mkdefaults:
                   15264:        If no arg assume def_data.in
                   15265:        [c1dd28c0e675]
                   15266: 
                   15267:        * README, WHATSNEW:
                   15268:        Update for 1.7.2
                   15269:        [f5ad45f69f05] [SUDO_1_7_2]
                   15270: 
                   15271:        * ChangeLog:
                   15272:        sync
                   15273:        [6283549396ff]
                   15274: 
                   15275: 2009-06-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15276: 
                   15277:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   15278:        Add missing single quotes around a colon in Runas_Spec definition.
                   15279:        From Elias Benali.
                   15280:        [ccc6ee4fca83]
                   15281: 
                   15282: 2009-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15283: 
                   15284:        * sudo.man.in, sudoers.man.in:
                   15285:        regen
                   15286:        [546e75304ebf]
                   15287: 
                   15288:        * redblack.c:
                   15289:        In rbrepair, re-color the root or the first non-block node we find
                   15290:        to be black. Re-coloring the root is probably not needed but won't
                   15291:        hurt.
                   15292:        [34d01ebe241b]
                   15293: 
                   15294:        * sudo.cat, sudoers.cat:
                   15295:        regen
                   15296:        [bebf5a39f54f]
                   15297: 
                   15298: 2009-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15299: 
                   15300:        * redblack.c:
                   15301:        When repairing the tree, don't touch the root node.
                   15302:        [9841f0d5d789]
                   15303: 
                   15304: 2009-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15305: 
                   15306:        * set_perms.c:
                   15307:        Protect call to setegid in runas_setup with #ifdef HAVE_SETEUID.
                   15308:        Reported by Josef Schmid.
                   15309:        [ed044b1eb879]
                   15310: 
                   15311: 2009-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15312: 
                   15313:        * sudoers.pod:
                   15314:        Document that we accept env_pam-style environment files
                   15315:        [e3b545456352]
                   15316: 
                   15317:        * env.c:
                   15318:        Adapt to accept pam_env-style /etc/environment which allows shell-
                   15319:        style lines such as: export EDITOR="/usr/bin/vi"
                   15320:        [752eb75bf007]
                   15321: 
                   15322:        * sudoers.pod:
                   15323:        Make it clear that env_delete only works when !env_reset. From Lo??c
                   15324:        Minier
                   15325:        [3bd3f8e351ba]
                   15326: 
                   15327: 2009-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15328: 
                   15329:        * sudo.pod, sudoers.pod:
                   15330:        Add non-unix group bits, adapted from Quest
                   15331:        [8ce427de8dea]
                   15332: 
                   15333:        * Makefile.in:
                   15334:        build the .cat page in the current working dir, not the src dir
                   15335:        [00e87a307674]
                   15336: 
                   15337:        * env.c:
                   15338:        Return EINVAL in setenv() if var is NULL or the empty string to
                   15339:        match glibc behavior.
                   15340:        [23fd7c247142]
                   15341: 
                   15342: 2009-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15343: 
                   15344:        * configure, configure.in:
                   15345:        Use AS_HELP_STRING for AC_ARG_WITH and AC_ARG_ENABLE
                   15346:        [fedd4a3e2a85]
                   15347: 
                   15348: 2009-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15349: 
                   15350:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
                   15351:        sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
                   15352:        regen
                   15353:        [7b9f461a40b3]
                   15354: 
                   15355: 2009-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15356: 
                   15357:        * INSTALL:
                   15358:        Document --with-libvas and --with-libvas-rpath
                   15359:        [a071e6d96c89]
                   15360: 
                   15361: 2009-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15362: 
                   15363:        * ldap.c, sudoers.ldap.pod:
                   15364:        For netscape-derived LDAP SDKs the cert and key paths may be a
                   15365:        directory or a file. However, version 5.0 of the SDK only seems to
                   15366:        support using a directory. If ldapssl_clientauth_init fails and the
                   15367:        cert or key paths look like they could be files, strip off the last
                   15368:        path element and try again.
                   15369:        [ac4e49d83043]
                   15370: 
                   15371:        * Makefile.in:
                   15372:        Add non-Unix group .o to COMMON_OBJS and substitute in path to flex.
                   15373:        [4547cc1a335f]
                   15374: 
                   15375: 2009-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15376: 
                   15377:        * configure, configure.in, match.c, sudo.c, vasgroups.c:
                   15378:        Update non-Unix group support from Quest, as reworked by me.
                   15379:        [1abafce29dc6]
                   15380: 
                   15381:        * toke.c:
                   15382:        regen
                   15383:        [01bfca9148b7]
                   15384: 
                   15385:        * toke.l:
                   15386:        Add support for escaped hex chars in names, e.g. \x20 for space.
                   15387:        [3c7be8e58a39]
                   15388: 
                   15389: 2009-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15390: 
                   15391:        * LICENSE, Makefile.in, aclocal.m4, alias.c, auth/aix_auth.c,
                   15392:        auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c, env.c,
                   15393:        fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c, logging.c,
                   15394:        logging.h, match.c, parse.c, parse.h, pathnames.h.in, pwutil.c,
                   15395:        set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c, sudo_nss.h,
                   15396:        sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod, testsudoers.c,
                   15397:        tgetpass.c, toke.l, visudo.c:
                   15398:        Update copyright years.
                   15399:        [e615f676c764]
                   15400: 
                   15401: 2009-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15402: 
                   15403:        * interfaces.c, lbuf.c:
                   15404:        Minor fixes for Minix-3
                   15405:        [898c510d23f9]
                   15406: 
                   15407: 2009-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15408: 
                   15409:        * set_perms.c:
                   15410:        Handle getgroups() returning 0. Also add missing check for
                   15411:        HAVE_GETGROUPS.
                   15412:        [d73b958f9ffd]
                   15413: 
                   15414: 2009-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15415: 
                   15416:        * Makefile.in, config.h.in, configure, configure.in, sudo.c,
                   15417:        version.h, visudo.c:
                   15418:        Replace version.h with PACKAGE_VERSION set via AC_INIT in configure.
                   15419:        [5050579a264d]
                   15420: 
                   15421: 2009-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15422: 
                   15423:        * set_perms.c:
                   15424:        Remove group setting code in setusercontext case, we will do it
                   15425:        ourselves later on in runas_setup. Set the gid after
                   15426:        initgroups/setgroups is called, since on Mac OS X it seems to change
                   15427:        the egid.
                   15428:        [09dc21d8b42d]
                   15429: 
                   15430: 2009-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15431: 
                   15432:        * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
                   15433:        vasgroups.c:
                   15434:        Initial bits of non-unix group support using Quest Authentication
                   15435:        Services
                   15436:        [1eecab0ff27e]
                   15437: 
                   15438:        * toke.c, toke.l:
                   15439:        Accept %:foo as a non-Unix group
                   15440:        [4c4b5dd899a6]
                   15441: 
                   15442:        * toke.c, toke.l:
                   15443:        Allow user/group to be double quoted in the case of non-Unix groups
                   15444:        which contain spaces.
                   15445:        [47a3d568b7e8]
                   15446: 
                   15447: 2009-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15448: 
                   15449:        * match.c:
                   15450:        Don't allow the user to specify the default runas user if their
                   15451:        sudoers entry only allows them to run as a group.
                   15452:        [4d726177227c]
                   15453: 
                   15454: 2009-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15455: 
                   15456:        * sudo.c:
                   15457:        Must call audit_success before we change uids.
                   15458:        [04a9e6ce6e55]
                   15459: 
                   15460:        * logging.c, set_perms.c, sudo.h, testsudoers.c:
                   15461:        Add option for set_perm to not exit on failure and use this in the
                   15462:        logging routines.
                   15463:        [833dce7b7f42]
                   15464: 
                   15465:        * parse.c:
                   15466:        In -l mode, if the user is only allowed to run as a group, display
                   15467:        the user's name, not root's before the allowed group.
                   15468:        [ef92ff99d265]
                   15469: 
                   15470:        * sudo.c:
                   15471:        Fix -g mode, broken by rev 1.503 which had the side effect of
                   15472:        setting the runas user to root unilaterally.
                   15473:        [50a2f7df4385]
                   15474: 
                   15475: 2009-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15476: 
                   15477:        * fileops.c:
                   15478:        When unlocking a file with fcntl, use F_SETLK, not F_SETLKW.
                   15479:        [30fbe832dcf3]
                   15480: 
                   15481:        * pwutil.c:
                   15482:        Only cache by the method we fetched for pwd and grp lookups.
                   15483:        Previously we cached both by namd and id but this can cause problems
                   15484:        for entries that share the same id. Also add more info in the error
                   15485:        message in case the insert fails (which should now be impossible).
                   15486:        [ef95a4f0bab5]
                   15487: 
                   15488: 2009-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15489: 
                   15490:        * sudoers.pod:
                   15491:        Add a clarification from Nick Sieger
                   15492:        [1eadad329561]
                   15493: 
                   15494: 2009-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15495: 
                   15496:        * env.c:
                   15497:        Inline the setting of the environment string.
                   15498:        [9515d11c6295]
                   15499: 
                   15500: 2009-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15501: 
                   15502:        * env.c:
                   15503:        setenv(3) in Linux treats a NUL value as the empty string setenv(3)
                   15504:        in BSD doesn't return an error if the name has '=' in it, it just
                   15505:        treats the '=' as end of string.
                   15506:        [941260bf94d2]
                   15507: 
                   15508: 2009-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15509: 
                   15510:        * toke.c, toke.l:
                   15511:        Not all systems have d_namlen
                   15512:        [e377b18d8e2d]
                   15513: 
                   15514: 2009-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15515: 
                   15516:        * sudoers.pod:
                   15517:        Fix up some pod2html issues.
                   15518:        [823a1f10ab60]
                   15519: 
                   15520: 2009-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15521: 
                   15522:        * interfaces.c:
                   15523:        Check for NULL ifa_addr and ifa_netmask. Adapted from a diff from
                   15524:        Quest Software.
                   15525:        [73de36653131]
                   15526: 
                   15527:        * sudoers.pod:
                   15528:        Ignore files ending in '~' in sudo.d (emacs backup files)
                   15529:        [7871fad702db]
                   15530: 
                   15531:        * toke.c, toke.l:
                   15532:        Ignore files ending in '~' in sudo.d (emacs backup files)
                   15533:        [53fded2a469f]
                   15534: 
                   15535: 2009-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15536: 
                   15537:        * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l:
                   15538:        For #includedir, ignore any file containing a dot
                   15539:        [a7daa1bce6c2]
                   15540: 
                   15541:        * Makefile.in, version.h:
                   15542:        Bump version
                   15543:        [ef60f14ffc44]
                   15544: 
                   15545:        * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
                   15546:        sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
                   15547:        visudo.c:
                   15548:        Implement #includedir directive. Files in an includedir are not
                   15549:        edited by visudo unless they contain a syntax error.
                   15550:        [3923d85a6c79]
                   15551: 
                   15552:        * ChangeLog:
                   15553:        sync
                   15554:        [8741ed61a78b] [SUDO_1_7_1]
                   15555: 
                   15556:        * WHATSNEW:
                   15557:        Forgot umask_override
                   15558:        [7c86a21a5504]
                   15559: 
                   15560:        * ChangeLog, TODO:
                   15561:        sync
                   15562:        [57339ca6bccf]
                   15563: 
                   15564: 2009-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15565: 
                   15566:        * visudo.c:
                   15567:        Rewind stream if we fdopen sudoers since it may not be at the
                   15568:        beginning. Set the keepopen flag on already-open files too so the
                   15569:        lexer doesn't close them out from under us.
                   15570:        [61292d819aff]
                   15571: 
                   15572:        * visudo.c:
                   15573:        Print the proper file name when there is a parse error in an include
                   15574:        file.
                   15575:        [b0e85d4aedde]
                   15576: 
                   15577: 2009-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15578: 
                   15579:        * WHATSNEW:
                   15580:        Sync
                   15581:        [997e5d485ea3]
                   15582: 
                   15583: 2009-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15584: 
                   15585:        * configure, configure.in:
                   15586:        Fix a warning when --without-ldap is specified.
                   15587:        [d91fd9481b30]
                   15588: 
                   15589: 2009-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15590: 
                   15591:        * alias.c, parse.h, visudo.c:
                   15592:        Store aliases that we remove during check_aliases in a freelist and
                   15593:        free them at the end so we don't leak memory.
                   15594:        [805e2272f6a3]
                   15595: 
                   15596: 2009-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15597: 
                   15598:        * visudo.c:
                   15599:        Check aliases in -c mode too.
                   15600:        [9199e188d9f2]
                   15601: 
                   15602:        * alias.c, parse.h, visudo.c:
                   15603:        Make alias_remove return the alias struct instead of freeing it
                   15604:        directly. Fixes a use after free in alias_remove_recursive, the only
                   15605:        consumer.
                   15606:        [a04b61804800]
                   15607: 
                   15608:        * alias.c, match.c, parse.c, parse.h, visudo.c:
                   15609:        Rename find_alias -> alias_find for consistency.
                   15610:        [48b0a82924f3]
                   15611: 
                   15612: 2009-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15613: 
                   15614:        * visudo.c:
                   15615:        When checking for unused aliases, recurse if the alias points to
                   15616:        another alias.
                   15617:        [2d4d1a7f3a41]
                   15618: 
                   15619: 2009-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15620: 
                   15621:        * ldap.c:
                   15622:        Back out rev 1.105 for now. Real ldapux_client.conf support will be
                   15623:        done later after some refactoring.
                   15624:        [8ad72e69b277]
                   15625: 
                   15626: 2009-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15627: 
                   15628:        * ldap.c:
                   15629:        Treat ldap_hostport the same as "host" for ldapux.
                   15630:        [3281dcc66da8]
                   15631: 
                   15632:        * configure, configure.in:
                   15633:        Only check for ldap_sasl_interactive_bind_s if we can find sasl.h.
                   15634:        Fixes compilation with ldapux.
                   15635:        [ca1ed585ef0e]
                   15636: 
                   15637: 2009-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15638: 
                   15639:        * fileops.c:
                   15640:        fix char subscript
                   15641:        [41e51f080d00]
                   15642: 
                   15643: 2009-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15644: 
                   15645:        * Makefile.in:
                   15646:        remove errant carriage returns
                   15647:        [e9e258a31c7b]
                   15648: 
                   15649:        * audit.c, env.c:
                   15650:        fix K&R compilation
                   15651:        [d182e8920f13]
                   15652: 
                   15653:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
                   15654:        sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
                   15655:        regen
                   15656:        [791a5cbf04e5]
                   15657: 
                   15658: 2009-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15659: 
                   15660:        * config.h.in:
                   15661:        Add missing HAVE_BSM_AUDIT
                   15662:        [49ad1bb96f04]
                   15663: 
                   15664:        * WHATSNEW:
                   15665:        Add 1.7.1 features
                   15666:        [f107f1604c61]
                   15667: 
                   15668:        * INSTALL:
                   15669:        Mention --with-netsvc
                   15670:        [d1e90d147795]
                   15671: 
                   15672:        * sudoers.ldap.pod:
                   15673:        Document netsvc.conf support
                   15674:        [e78f8abce6af]
                   15675: 
                   15676:        * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
                   15677:        sudo_nss.h:
                   15678:        Add support for AIX netsvc.conf (like nsswitch.conf).
                   15679:        [1df56a84dee5]
                   15680: 
                   15681: 2009-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15682: 
                   15683:        * config.h.in, configure, configure.in, env.c:
                   15684:        Add --enable-env-debug flag to enable environment sanity checks.
                   15685:        [128cdd8832e7]
                   15686: 
                   15687:        * sudoers.ldap.pod, sudoers.pod:
                   15688:        Work around some pod2html issue.
                   15689:        [e733b9609bd2]
                   15690: 
                   15691: 2009-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15692: 
                   15693:        * env.c:
                   15694:        Only sync environ for putenv, setenv, and unsetenv. We need to make
                   15695:        sure that sudo_putenv and sudo_setenv only modify env.envp, not
                   15696:        environ.
                   15697:        [be3ac732243c]
                   15698: 
                   15699: 2009-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15700: 
                   15701:        * env.c:
                   15702:        Really fix UNSETENV_VOID
                   15703:        [08ab7e882507]
                   15704: 
                   15705:        * env.c:
                   15706:        Fix unsetenv when UNSETENV_VOID
                   15707:        [d3038b3f2f15]
                   15708: 
                   15709:        * aclocal.m4, configure:
                   15710:        Fix SUDO_FUNC_PUTENV_CONST
                   15711:        [de35569c572b]
                   15712: 
                   15713:        * ldap.c:
                   15714:        tivoli-based ldap does not have ldapssl_err2string
                   15715:        [c63fd90d5e99]
                   15716: 
                   15717:        * configure:
                   15718:        regen
                   15719:        [f38f1ee828ad]
                   15720: 
                   15721: 2009-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15722: 
                   15723:        * config.h.in, configure, configure.in, ldap.c:
                   15724:        Add support for Tivoli-based LDAP start TLS as seen in AIX.
                   15725:        Untested.
                   15726:        [8f8771829f85]
                   15727: 
                   15728:        * env.c:
                   15729:        Add sanity checks for setenv/unsetenv
                   15730:        [adbd1d95856b]
                   15731: 
                   15732:        * Makefile.in:
                   15733:        Include bsm_audit.h in the tarball
                   15734:        [4a4aa02b2c32]
                   15735: 
                   15736:        * Makefile.in, version.h:
                   15737:        bump version for sudo 1.7.1
                   15738:        [362c71d21595]
                   15739: 
                   15740:        * aclocal.m4, auth/aix_auth.c, config.h.in, configure, configure.in,
                   15741:        env.c, ldap.c, sudo.h:
                   15742:        Replace sudo_setenv/sudo_unsetenv with calls to setenv/unsetenv and
                   15743:        provide our own setenv/unsetenv/putenv that operates on own env
                   15744:        pointer. Make sync_env() inline in setenv/unsetenv/putenv functions.
                   15745:        [276edcd23032]
                   15746: 
                   15747: 2009-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15748: 
                   15749:        * sudo.c:
                   15750:        Make "sudoedit -h" work as expected
                   15751:        [2bcbbb45d389]
                   15752: 
                   15753:        * auth/pam.c:
                   15754:        Make sure def_prompt is always defined. This is a workaround for
                   15755:        pam configs that prompt for a password in the session but don't have
                   15756:        an auth line. A better fix is to expand the sudo prompt earlier and
                   15757:        set def_prompt to that when initializing.
                   15758:        [ee073c04aec3]
                   15759: 
                   15760:        * sudo.pod:
                   15761:        Mention that the helper for -A may be graphical.
                   15762:        [b64a940c4082]
                   15763: 
                   15764:        * TROUBLESHOOTING:
                   15765:        Document what happens if there is no tty.
                   15766:        [313d58a856a5]
                   15767: 
                   15768:        * sudo.c:
                   15769:        cosmetic changes
                   15770:        [894f5e3b0c3e]
                   15771: 
                   15772:        * term.c:
                   15773:        Fix term_restore
                   15774:        [6c6315ff14bc]
                   15775: 
                   15776:        * sudo.c:
                   15777:        Fix "sudo -k" with no other args
                   15778:        [59e94dc419c6]
                   15779: 
                   15780: 2009-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15781: 
                   15782:        * check.c, sudo.c, sudo.pod, sudo_usage.h.in:
                   15783:        Allow the -k flag to be specified in conjunction with a command or
                   15784:        another option that may require authentication.
                   15785:        [5960ff20355d]
                   15786: 
                   15787: 2009-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15788: 
                   15789:        * configure, configure.in:
                   15790:        Remove unneeded AC_CANONICAL_TARGET; from Diego E. 'Flameeyes'
                   15791:        [e86ab69c4a57]
                   15792: 
                   15793:        * Makefile.in:
                   15794:        Parallel make fix. From Diego E. 'Flameeyes'
                   15795:        [1289d7ee27db]
                   15796: 
                   15797: 2009-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15798: 
                   15799:        * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
                   15800:        Implement umask_override
                   15801:        [8b87a3f7c5aa]
                   15802: 
                   15803:        * toke.c:
                   15804:        regen
                   15805:        [79d7ca9ac873]
                   15806: 
                   15807:        * sudoers.pod, toke.l, visudo.c:
                   15808:        Implement %h escape in sudoers include filenames.
                   15809:        [a7f288dd64f0]
                   15810: 
                   15811:        * audit.c:
                   15812:        Need to include compat.h
                   15813:        [c0dc07ce2f70]
                   15814: 
                   15815:        * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h, sudo.c:
                   15816:        Make audit_success and audit_failure generic functions in
                   15817:        preparation for integrating linux audit support.
                   15818:        [7df020a8fd6f]
                   15819: 
                   15820:        * term.c:
                   15821:        remove duplicate include
                   15822:        [1dfcd01a7e46]
                   15823: 
                   15824: 2009-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15825: 
                   15826:        * bsm_audit.c:
                   15827:        Add missing include
                   15828:        [fb56e08c37ee]
                   15829: 
                   15830:        * sudo.c:
                   15831:        May need to update the runas user after parsing command-based
                   15832:        defaults.
                   15833:        [246f130d7802]
                   15834: 
                   15835: 2009-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15836: 
                   15837:        * glob.c:
                   15838:        Add missing pair of braces introduced with character class support.
                   15839:        [0e2afa2e03e9]
                   15840: 
                   15841: 2009-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15842: 
                   15843:        * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
                   15844:        Rename pwstars to pwfeedback
                   15845:        [a9f85a57ebac]
                   15846: 
                   15847: 2009-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15848: 
                   15849:        * bsm_audit.c, bsm_audit.h:
                   15850:        Add const to make MacOS happy.
                   15851:        [4274432d6627]
                   15852: 
                   15853:        * Makefile.in, auth/sudo_auth.c, bsm_audit.c, bsm_audit.h, configure,
                   15854:        configure.in, sudo.c:
                   15855:        Add bsm audit support from Christian S.J. Peron
                   15856:        [bef61cd8693d]
                   15857: 
                   15858:        * term.c:
                   15859:        This is new code, no DARPA notice.
                   15860:        [ec6ad09b9c23]
                   15861: 
                   15862: 2009-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15863: 
                   15864:        * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod:
                   15865:        Rename simple_glob -> fast_glob
                   15866:        [68d9ed803cc1]
                   15867: 
                   15868:        * match.c:
                   15869:        g/c unused var
                   15870:        [693fa0464eb6]
                   15871: 
                   15872:        * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod:
                   15873:        Add simple_glob option to use fnmatch() instead of glob(). This is
                   15874:        useful when you need to specify patterns that reference network file
                   15875:        systems.
                   15876:        [77ba634f6949]
                   15877: 
                   15878:        * tgetpass.c:
                   15879:        add term_* proto
                   15880:        [520f5149d073]
                   15881: 
                   15882:        * sudoers.pod:
                   15883:        mention glob()
                   15884:        [ddaab8e03c52]
                   15885: 
                   15886: 2009-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15887: 
                   15888:        * tgetpass.c:
                   15889:        Delete any pwstars we wrote after the user hits return. That way
                   15890:        there is no record on screen as to the user's password length.
                   15891:        [fae25cda762b]
                   15892: 
                   15893: 2009-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15894: 
                   15895:        * term.c:
                   15896:        Move terminal setting bits from tgetpass.c to term.c
                   15897:        [03d43325ee99]
                   15898: 
                   15899:        * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
                   15900:        tgetpass.c:
                   15901:        Add pwstars sudoers option that causes sudo to print a star every
                   15902:        time the user presses a key.
                   15903:        [7aab417e184d]
                   15904: 
                   15905: 2009-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15906: 
                   15907:        * Makefile.in:
                   15908:        Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in.
                   15909:        [64f70e879816]
                   15910: 
                   15911: 2009-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15912: 
                   15913:        * ldap.c:
                   15914:        For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
                   15915:        indicate no limit. From Mark Janssen.
                   15916:        [e2c5732d54f5]
                   15917: 
                   15918: 2009-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15919: 
                   15920:        * toke.c, toke.l:
                   15921:        Comments that begin with #- should not be parsed as uids.
                   15922:        [a72a50f12f41]
                   15923: 
                   15924: 2009-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15925: 
                   15926:        * sudo.c:
                   15927:        Do not try to set the close on exec flag if we didn't actually open
                   15928:        sudoers.
                   15929:        [ece3ca256904]
                   15930: 
                   15931: 2008-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15932: 
                   15933:        * ChangeLog:
                   15934:        regen
                   15935:        [e11f0e4c1bdd] [SUDO_1_7_0]
                   15936: 
                   15937: 2008-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15938: 
                   15939:        * TODO:
                   15940:        sync
                   15941:        [5b8954462bb3]
                   15942: 
                   15943: 2008-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15944: 
                   15945:        * auth/pam.c:
                   15946:        Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user enters ^C at the
                   15947:        password prompt.
                   15948:        [8563601cb3de]
                   15949: 
                   15950:        * configure, configure.in:
                   15951:        Don't try to build sudo_noexec.so on HP-UX with the bundled compiler
                   15952:        as it cannot generate shared objects.
                   15953:        [6d4262ef9669]
                   15954: 
                   15955:        * emul/charclass.h, glob.c, lbuf.c, tgetpass.c:
                   15956:        K&R compilation fixes
                   15957:        [77921678d17c]
                   15958: 
                   15959:        * parse.c:
                   15960:        Use tq_foreach_fwd when checking pseudo-commands to make it clear
                   15961:        that we are not short-circuiting on last match. When pwcheck is
                   15962:        'all', initialize nopass to TRUE and override it with the first non-
                   15963:        TRUE entry.
                   15964:        [96b209f4778f]
                   15965: 
                   15966: 2008-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15967: 
                   15968:        * parse.c:
                   15969:        Do not short circuit pseudo commands when we get a match since,
                   15970:        depending on the settings, we may need to examine all commands for
                   15971:        tags.
                   15972:        [fdbaf89d6f35]
                   15973: 
                   15974: 2008-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15975: 
                   15976:        * sudoers.cat, sudoers.man.in:
                   15977:        regen
                   15978:        [1ecce7c1b841]
                   15979: 
                   15980:        * sudoers.pod:
                   15981:        hostnames may also contain wildcards
                   15982:        [82b76695601c]
                   15983: 
                   15984:        * Makefile.in:
                   15985:        remove stamp-* files and linux core files in clean target
                   15986:        [22003f091467]
                   15987: 
                   15988: 2008-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15989: 
                   15990:        * auth/sudo_auth.h, config.h.in, configure, configure.in:
                   15991:        Use HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
                   15992:        [6905bede8410]
                   15993: 
                   15994: 2008-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   15995: 
                   15996:        * configure, configure.in:
                   15997:        correctly enable SIA on Digital UNIX
                   15998:        [a51881d13995]
                   15999: 
                   16000:        * TODO:
                   16001:        checkpoint
                   16002:        [af0fe8d94d42]
                   16003: 
                   16004:        * ChangeLog:
                   16005:        sync
                   16006:        [831f623cf99c]
                   16007: 
                   16008: 2008-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16009: 
                   16010:        * check.c, sudo.h, tgetpass.c:
                   16011:        Even if neither stdin nor stdout are ttys we may still have /dev/tty
                   16012:        available to us.
                   16013:        [20f306ba883b]
                   16014: 
                   16015: 2008-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16016: 
                   16017:        * sudoers.cat, sudoers.man.in:
                   16018:        regen
                   16019:        [76d97c4c318f]
                   16020: 
                   16021:        * sudoers.pod:
                   16022:        fix typos; Markus Lude
                   16023:        [bff8bc1e2066]
                   16024: 
                   16025:        * ChangeLog:
                   16026:        sync
                   16027:        [f108552531cd]
                   16028: 
                   16029:        * toke.c:
                   16030:        regen
                   16031:        [de828413c67e]
                   16032: 
                   16033:        * toke.l:
                   16034:        Fix matching of a line that only consists of a comment char
                   16035:        [09c953d8d5ca]
                   16036: 
                   16037: 2008-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16038: 
                   16039:        * auth/pam.c:
                   16040:        MacOS pam will retry conversation function if it fails so just treat
                   16041:        ^C as an empty password.
                   16042:        [d056058930bc]
                   16043: 
                   16044:        * visudo.c:
                   16045:        When checking for alias use, also check defaults bindings.
                   16046:        [2647f82c7dbd]
                   16047: 
                   16048:        * redblack.c:
                   16049:        unused var
                   16050:        [b7ff71c17c18]
                   16051: 
                   16052:        * redblack.c:
                   16053:        Replace my rbdelete with Emin's version (which actually works ;-)
                   16054:        [21b133dd0c72]
                   16055: 
                   16056: 2008-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16057: 
                   16058:        * testsudoers.c:
                   16059:        malloc debugging
                   16060:        [0fb446fa3279]
                   16061: 
                   16062:        * visudo.c:
                   16063:        malloc options in devel mode for visudo too
                   16064:        [98d06c6afeef]
                   16065: 
                   16066: 2008-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16067: 
                   16068:        * sudo.c:
                   16069:        fix compilation on non-C99; from Theo
                   16070:        [7c304e16c536]
                   16071: 
                   16072:        * visudo.c:
                   16073:        fix check_aliases
                   16074:        [83f30a3b1765]
                   16075: 
                   16076:        * alias.c:
                   16077:        when destroying an alias, free the correct data pointer
                   16078:        [6e1a8bd86c01]
                   16079: 
                   16080:        * auth/sudo_auth.h:
                   16081:        add proto for aixauth_cleanup; from Dale King
                   16082:        [eba94ffc8f63]
                   16083: 
                   16084: 2008-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16085: 
                   16086:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   16087:        visudo.man.in:
                   16088:        regen
                   16089:        [409fa57fff83]
                   16090: 
                   16091:        * sudo.pod, sudoers.pod, visudo.pod:
                   16092:        standardize on the term 'option' for command line options (not flag)
                   16093:        [228caefc2e36]
                   16094: 
                   16095: 2008-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16096: 
                   16097:        * INSTALL:
                   16098:        Add note on configuring HP-UX pam
                   16099:        [f7674a581baf]
                   16100: 
                   16101: 2008-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16102: 
                   16103:        * check.c, sudo.c:
                   16104:        Move tty checks into check_user() so we only do them if we actually
                   16105:        need a password.
                   16106:        [7d997d7106d6]
                   16107: 
                   16108:        * sudo.c:
                   16109:        Don't error out if no tty or askpass unless we actually need to
                   16110:        authenticate.
                   16111:        [9f23b83ed66c]
                   16112: 
                   16113: 2008-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16114: 
                   16115:        * ChangeLog:
                   16116:        regen
                   16117:        [23f9aef32da6]
                   16118: 
                   16119:        * pathnames.h.in, sudo.c:
                   16120:        s/overriden/overridden/; from Tobias Stoeckmann
                   16121:        [9f7459a8fac5]
                   16122: 
                   16123: 2008-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16124: 
                   16125:        * WHATSNEW, visudo.c:
                   16126:        check sudoers owner and mode in strict mode
                   16127:        [a3468c5ac1c4]
                   16128: 
                   16129:        * gram.c, toke.c:
                   16130:        regen
                   16131:        [7d6b515a5443]
                   16132: 
                   16133:        * sudo.man.in, sudoers.man.in, visudo.man.in:
                   16134:        Update copyright years.
                   16135:        [52d340cb8cba]
                   16136: 
                   16137:        * LICENSE, alias.c, alloc.c, auth/afs.c, auth/aix_auth.c,
                   16138:        auth/bsdauth.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
                   16139:        auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
                   16140:        closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
                   16141:        gettime.c, gram.y, ins_csops.h, insults.h, interfaces.c,
                   16142:        interfaces.h, lbuf.c, license.pod, list.c, logging.c, logging.h,
                   16143:        parse.c, parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c,
                   16144:        sudo.c, sudo.pod, sudo_edit.c, sudo_nss.h, sudoers.pod,
                   16145:        testsudoers.c, toke.l, tsgetgrpw.c, utimes.c, version.h, visudo.c,
                   16146:        visudo.pod, zero_bytes.c:
                   16147:        Update copyright years.
                   16148:        [b4e6bf2beafa]
                   16149: 
                   16150:        * emul/charclass.h, fnmatch.c, glob.c:
                   16151:        add my copyright
                   16152:        [28681385014a]
                   16153: 
                   16154: 2008-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16155: 
                   16156:        * toke.c, toke.l:
                   16157:        The loop in fill_cmnd() was going one byte too far past the end,
                   16158:        resulting in a NUL being written immediately after the buffer end.
                   16159:        [a5a49d603cd7]
                   16160: 
                   16161:        * UPGRADE, WHATSNEW:
                   16162:        add sections on tgetpass changes
                   16163:        [2e6929b6a102]
                   16164: 
                   16165:        * tgetpass.c:
                   16166:        Treat EOF w/o newline as an error.
                   16167:        [aa02b1db9240]
                   16168: 
                   16169: 2008-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16170: 
                   16171:        * parse.c:
                   16172:        Fix "sudo -v" when NOPASSWD is set.
                   16173:        [f4914711ea80]
                   16174: 
                   16175:        * auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c,
                   16176:        auth/sudo_auth.h:
                   16177:        No longer treat an empty password at the prompt as special. To quit
                   16178:        out of sudo you now need to hit ^C at the password prompt.
                   16179:        [980f760ad419]
                   16180: 
                   16181:        * sudoers.cat, sudoers.man.in:
                   16182:        regen
                   16183:        [6ca21a2cd869]
                   16184: 
                   16185:        * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
                   16186:        Sudo will now refuse to run if no tty is present unless the new
                   16187:        visiblepw sudoers flag is set.
                   16188:        [0cc56943252e]
                   16189: 
                   16190: 2008-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16191: 
                   16192:        * aix.c:
                   16193:        just use RLIM_INFINITY for RLIM_SAVED_MAX if RLIM_SAVED_MAX not
                   16194:        defined
                   16195:        [24fc6f712d5c]
                   16196: 
                   16197:        * aix.c:
                   16198:        fix fallback value for RLIM_SAVED_MAX
                   16199:        [e09e04e1af89]
                   16200: 
                   16201:        * auth/aix_auth.c, auth/sudo_auth.h:
                   16202:        Move clearing of AUTHSTATE into aixauth_cleanup.
                   16203:        [e14ae7bd259c]
                   16204: 
                   16205:        * auth/aix_auth.c, env.c:
                   16206:        Unset AUTHSTATE after calling authenticate() as it may not be
                   16207:        correct for the user we are running the command as.
                   16208:        [d14f68f1b0ab]
                   16209: 
                   16210:        * isblank.c:
                   16211:        Add isblank() function for systems without it. Needed for POSIX
                   16212:        character class matching in fnmatch.c and glob.c.
                   16213:        [16cba30b283f]
                   16214: 
                   16215: 2008-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16216: 
                   16217:        * TROUBLESHOOTING:
                   16218:        expound on sudo and cd
                   16219:        [8e0fa9033637]
                   16220: 
                   16221: 2008-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16222: 
                   16223:        * ChangeLog:
                   16224:        regen
                   16225:        [40cf320a10fc]
                   16226: 
                   16227:        * sudoers.cat, sudoers.man.in:
                   16228:        regen
                   16229:        [7cac761ae2c6]
                   16230: 
                   16231:        * sudoers.pod:
                   16232:        mention defauts parse order
                   16233:        [4e2ce86d1394]
                   16234: 
                   16235: 2008-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16236: 
                   16237:        * Makefile.in, aclocal.m4, compat.h, configure:
                   16238:        Add isblank() function for systems without it. Needed for POSIX
                   16239:        character class matching in fnmatch.c and glob.c.
                   16240:        [a1ab55da8424]
                   16241: 
                   16242:        * Makefile.in:
                   16243:        add emul/charclass.h to HDRS
                   16244:        [7e8a019dcaa4]
                   16245: 
                   16246: 2008-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16247: 
                   16248:        * TODO:
                   16249:        checkpoint
                   16250:        [afeb9bc1baed]
                   16251: 
                   16252:        * defaults.c, parse.c, testsudoers.c, visudo.c:
                   16253:        Move update_defaults into defaults.c and call it properly from
                   16254:        visudo and testsudoers.
                   16255:        [f4dbb369461f]
                   16256: 
                   16257:        * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c, tgetpass.c,
                   16258:        tsgetgrpw.c:
                   16259:        use zero_bytes() instead of memset() for consistency
                   16260:        [4cee0465f4a8]
                   16261: 
                   16262:        * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c, tgetpass.c,
                   16263:        visudo.c:
                   16264:        Zero out sigaction_t before use in case it has non-standard entries.
                   16265:        [120092225459]
                   16266: 
                   16267:        * match.c:
                   16268:        quiet gcc
                   16269:        [098a1df49b23]
                   16270: 
                   16271:        * match.c:
                   16272:        Short circuit glob() checks if basename(pattern) !=
                   16273:        basename(command). Refactor code that checks for a command in a
                   16274:        directory and use it in the glob case if the resolved pattern ends
                   16275:        in a '/'.
                   16276:        [3c46fd317acb]
                   16277: 
                   16278: 2008-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16279: 
                   16280:        * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c:
                   16281:        Defer setting runas defaults until after runaspw/gr is setup.
                   16282:        [12e75ee49c0c]
                   16283: 
                   16284: 2008-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16285: 
                   16286:        * match.c, sudo.c, testsudoers.c:
                   16287:        Use MAXHOSTNAMELEN+1 when allocating host/domain name since some
                   16288:        systems do not include space for the NUL in the size. Also manually
                   16289:        NUL-terminate buffer from gethostname() since POSIX is wishy-washy
                   16290:        on this.
                   16291:        [7266ab3296a3]
                   16292: 
                   16293: 2008-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16294: 
                   16295:        * sudo.c, sudoers.pod:
                   16296:        When setting the umask, use the union of the user's umask and the
                   16297:        default value set in sudoers so that we never lower the user's umask
                   16298:        when running a command.
                   16299:        [4e804b004e38]
                   16300: 
                   16301:        * sudo.c:
                   16302:        Don't try to read from a zero-length sudoers file. Remove the bogus
                   16303:        Solaris work-around for EAGAIN. Since we now use fgetc() it should
                   16304:        not be a problem.
                   16305:        [bb8e5f68d944]
                   16306: 
                   16307: 2008-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16308: 
                   16309:        * parse.c:
                   16310:        In update_defaults() check the return value of user*_matches against
                   16311:        ALLOW so we don't inadvertantly match on UNSPEC.
                   16312:        [4e422fa1527e]
                   16313: 
                   16314: 2008-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16315: 
                   16316:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
                   16317:        sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
                   16318:        regen man pages; no more hyphenation
                   16319:        [15de4fe2fe01]
                   16320: 
                   16321:        * sudo.c:
                   16322:        Don't error out on a zero-length sudoers file. With the advent of
                   16323:        #include the user could create a situation where sudo is unusable.
                   16324:        [6eb461319fa5]
                   16325: 
                   16326: 2008-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16327: 
                   16328:        * auth/kerb5.c, config.h.in, configure, configure.in:
                   16329:        Newer heimdal has 2-argument krb5_get_init_creds_opt_free() like MIT
                   16330:        krb5. Really old heimdal has no krb5_get_init_creds_opt_alloc() at
                   16331:        all. Add configure tests to handle all the cases.
                   16332:        [4b554a98470d]
                   16333: 
                   16334: 2008-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16335: 
                   16336:        * sudo.pod:
                   16337:        resort ENVIRONMENT
                   16338:        [f4f20f40653e]
                   16339: 
                   16340:        * sudoers.pod:
                   16341:        document sudoers_locale
                   16342:        [0bffd2dbe806]
                   16343: 
                   16344:        * sudo.pod, sudo_edit.c:
                   16345:        add SUDO_EDITOR variable that sudoedit uses in preference to VISUAL
                   16346:        or EDITOR
                   16347:        [0ef8cb248cee]
                   16348: 
                   16349:        * toke.c, toke.l:
                   16350:        In fill_cmnd(), collapse any escaped sudo-specific characters.
                   16351:        Allows character classes to be used in pathnames.
                   16352:        [5685244c8e44]
                   16353: 
                   16354: 2008-10-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16355: 
                   16356:        * lbuf.c:
                   16357:        fix typo in non-C89 function declaration
                   16358:        [99a7113b3a05]
                   16359: 
                   16360:        * sudoers.pod:
                   16361:        Mention POSIX characters classes now that out fnmatch() and glob()
                   16362:        support them.
                   16363:        [9c916f1230c3]
                   16364: 
                   16365:        * sample.sudoers, sudoers.pod:
                   16366:        Replace [A-z] (which won't match in UTF8) with [A-Za-z] which is
                   16367:        locale agnostic.
                   16368:        [a60a62bec244]
                   16369: 
                   16370:        * parse.h:
                   16371:        use __signed char if we are going to assign a negative value since
                   16372:        on Power, char is unsigned by default
                   16373:        [2877b319df17]
                   16374: 
                   16375:        * config.h.in, configure, configure.in:
                   16376:        Add tests for __signed char and signed char.
                   16377:        [5eb874fdf1d4]
                   16378: 
                   16379:        * aix.c:
                   16380:        Fix AIX limit setting. getuserattr() returns values in disk blocks
                   16381:        rather than bytes. The default hard stack size in newer AIX is
                   16382:        RLIM_SAVED_MAX. From Dale King.
                   16383:        [3db67415ecc3]
                   16384: 
                   16385: 2008-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16386: 
                   16387:        * emul/charclass.h, fnmatch.c, glob.c:
                   16388:        Add character class support to included glob(3) and fnmatch(3).
                   16389:        [6b5b4ad77899]
                   16390: 
                   16391: 2008-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16392: 
                   16393:        * emul/fnmatch.h:
                   16394:        Remove UCB advertising clause and some compatibility defines.
                   16395:        [2ade7bee74e1]
                   16396: 
                   16397: 2008-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16398: 
                   16399:        * sudo_edit.c:
                   16400:        Check EDITOR/VISUAL to make sure sudoedit is not re-invoking itself
                   16401:        or sudo. This allows one to set EDITOR to sudoedit without getting
                   16402:        into an infinite loop of sudoedit running itself until the path gets
                   16403:        too big.
                   16404:        [aa49ab68f82d]
                   16405: 
                   16406:        * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c:
                   16407:        Add sudoers_locale Defaults option to override the default sudoers
                   16408:        locale of "C".
                   16409:        [0639886a35bf]
                   16410: 
                   16411: 2008-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16412: 
                   16413:        * sudo.c:
                   16414:        Set locale to system default except for during sudoers parse.
                   16415:        [016dd2736728]
                   16416: 
                   16417: 2008-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16418: 
                   16419:        * match.c:
                   16420:        Redo change in 1.34 to use pointer arithmetic.
                   16421:        [f9e7b63bb450]
                   16422: 
                   16423: 2008-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16424: 
                   16425:        * match.c:
                   16426:        Fix a dereference (read) of a freed pointer. Reported by Patrick
                   16427:        Williams.
                   16428:        [69877b633753]
                   16429: 
                   16430: 2008-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16431: 
                   16432:        * sudo.c:
                   16433:        Set locale to "C" to avoid interpretation issues with character
                   16434:        ranges in sudoers. May want to make the locale a sudoers option in
                   16435:        the future.
                   16436:        [098a95de1746]
                   16437: 
                   16438: 2008-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16439: 
                   16440:        * config.h.in:
                   16441:        we no longer use setproctitle
                   16442:        [c7f20fb747ea]
                   16443: 
                   16444:        * sudo.h:
                   16445:        remove #if 1
                   16446:        [a368ee6816c6]
                   16447: 
                   16448:        * LICENSE, mkstemp.c:
                   16449:        Use my replacement mkstemp() from the mktemp package.
                   16450:        [d07c2beb0f9e]
                   16451: 
                   16452: 2008-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16453: 
                   16454:        * gram.c:
                   16455:        regen with yacc skeleton bug fixed
                   16456:        [24784571cbb8]
                   16457: 
                   16458:        * sudoers.pod:
                   16459:        Remove duplicate "as root". From Martin Toft.
                   16460:        [97241acfee5e]
                   16461: 
                   16462: 2008-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16463: 
                   16464:        * pwutil.c, sudo.c, sudo.h, testsudoers.c:
                   16465:        Flesh out the fake passwd entry used for running commands as a uid
                   16466:        not listed in the passwd database. Fixes an issue with some PAM
                   16467:        modules.
                   16468:        [a6648227f3f2]
                   16469: 
                   16470: 2008-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16471: 
                   16472:        * sudo.c:
                   16473:        Error out in -i mode if the user has no shell. This can happen when
                   16474:        running commands as a uid with no password entry.
                   16475:        [0c174bef36ff]
                   16476: 
                   16477: 2008-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16478: 
                   16479:        * toke.c, toke.l:
                   16480:        Better fix for line continuation inside double quotes. Now accepts
                   16481:        whitespace between the backslash and the newline like the main
                   16482:        lexer.
                   16483:        [64efcdf86d31]
                   16484: 
                   16485: 2008-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16486: 
                   16487:        * toke.c, toke.l:
                   16488:        Fix line continuation in strings. It was only being honored if
                   16489:        preceded by whitespace.
                   16490:        [96c21271a3e4]
                   16491: 
                   16492: 2008-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16493: 
                   16494:        * config.h.in, configure, configure.in, logging.c:
                   16495:        Replace the double fork with a fork + daemonize.
                   16496:        [328505441e67]
                   16497: 
                   16498: 2008-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16499: 
                   16500:        * env.c, sudo.c:
                   16501:        The -i flag should imply env_reset. This got broken in sudo 1.6.9.
                   16502:        [3caedfeaec87]
                   16503: 
                   16504:        * logging.c, sudo.c, sudo_edit.c, visudo.c:
                   16505:        Change how the mailer is waited for. Instead of having a SIGCHLD
                   16506:        handler, use the double fork trick to orphan the child that opens
                   16507:        the pipe to sendmail. Fixes a problem running su on some Linux
                   16508:        distros.
                   16509:        [b59ce60a393d]
                   16510: 
                   16511: 2008-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16512: 
                   16513:        * configure, configure.in:
                   16514:        Fix configure test for dirfd() on Linux where DIR is opaque.
                   16515:        [b8f729cdfecc]
                   16516: 
                   16517: 2008-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16518: 
                   16519:        * tgetpass.c:
                   16520:        Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If QNX still has
                   16521:        this problem we'll need to revisit this again.
                   16522:        [c17fee8ad530]
                   16523: 
                   16524: 2008-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16525: 
                   16526:        * logging.c:
                   16527:        Ignore SIGPIPE instead of blocking it when piping to the mailer. If
                   16528:        we only block the signal it may be delivered later when we unblock.
                   16529:        Also, there is no need to block SIGCHLD since we no longer do the
                   16530:        double fork. The normal SIGCHLD handler is sufficient.
                   16531:        [e94a49e992e5]
                   16532: 
                   16533: 2008-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16534: 
                   16535:        * configure, configure.in:
                   16536:        Add description for NO_PAM_SESSION, from a redhat patch.
                   16537:        [b9e4c939ec09]
                   16538: 
                   16539: 2008-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16540: 
                   16541:        * sudo.cat, sudo.man.in, sudo.pod:
                   16542:        Fix typos in -i usage
                   16543:        [2d7ce5de0235]
                   16544: 
                   16545: 2008-05-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16546: 
                   16547:        * configure, configure.in:
                   16548:        Redo the test for dgettext() in a way that hopefully will work
                   16549:        around the libintl_dgettext() undefined problem.
                   16550:        [d27beb0cf85e]
                   16551: 
                   16552: 2008-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16553: 
                   16554:        * schema.ActiveDirectory:
                   16555:        change filename in comment
                   16556:        [733da4ee9ac5]
                   16557: 
                   16558: 2008-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16559: 
                   16560:        * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
                   16561:        sudoers.ldap.pod:
                   16562:        Reference schema.ActiveDirectory
                   16563:        [d6aec537800e]
                   16564: 
                   16565: 2008-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16566: 
                   16567:        * schema.OpenLDAP, schema.iPlanet:
                   16568:        Mark sudoRunAs as deprecated.
                   16569:        [00c50df807af]
                   16570: 
                   16571:        * schema.ActiveDirectory:
                   16572:        add sudoRunAsUser and sudoRunAsGroup
                   16573:        [19bcce6f72fb]
                   16574: 
                   16575:        * schema.ActiveDirectory:
                   16576:        Active Directory schema by Chantal Paradis and Eric Paquet
                   16577:        [06a09c92c6a5]
                   16578: 
                   16579: 2008-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16580: 
                   16581:        * parse.c:
                   16582:        remove an XXX that was fixed
                   16583:        [b88038062fa2]
                   16584: 
                   16585:        * ChangeLog:
                   16586:        sync
                   16587:        [8fc27c17270e]
                   16588: 
                   16589:        * parse.c:
                   16590:        Initialize tags to UNSPEC instead of def_* in "sudo -l" mode. This
                   16591:        fixes a problem where the tag value printed was influenced by
                   16592:        defaults set in the first pass through the parser.
                   16593:        [588ccd630367]
                   16594: 
                   16595: 2008-05-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16596: 
                   16597:        * Makefile.in, sudo.psf:
                   16598:        No point in packaging the TODO file
                   16599:        [9590248fffe1]
                   16600: 
                   16601:        * ChangeLog:
                   16602:        sync
                   16603:        [152acf4c6813]
                   16604: 
                   16605: 2008-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16606: 
                   16607:        * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
                   16608:        sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod:
                   16609:        Add env_file Defaults option that is similar to /etc/environment on
                   16610:        some systems.
                   16611:        [1daf53d51e18]
                   16612: 
                   16613: 2008-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16614: 
                   16615:        * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
                   16616:        sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in,
                   16617:        version.h, visudo.cat, visudo.man.in:
                   16618:        change version to 1.7.0
                   16619:        [d41d126b9bd8]
                   16620: 
                   16621:        * UPGRADE:
                   16622:        initial valgrind pass done
                   16623:        [c59c3876d8ca]
                   16624: 
                   16625: 2008-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16626: 
                   16627:        * ldap.c:
                   16628:        Fix typo/think in sudo_ldap_read_secret() when storing the secret.
                   16629:        [830d246c09b0]
                   16630: 
                   16631: 2008-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16632: 
                   16633:        * ldap.c:
                   16634:        define LDAPS_PORT if the system headers do not
                   16635:        [247b12325701]
                   16636: 
                   16637: 2008-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16638: 
                   16639:        * gram.c, gram.y:
                   16640:        Fix another memory leak in init_parser().
                   16641:        [7bba47deba11]
                   16642: 
                   16643:        * configure, configure.in:
                   16644:        There was a missing space before the ldap libs in SUDO_LIBS for some
                   16645:        configurations.
                   16646:        [7524cfc93759]
                   16647: 
                   16648:        * alias.c, gram.c, gram.y, toke.c, toke.l:
                   16649:        Clean up some memory leaks pointed out by valgrind.
                   16650:        [a965866ece1a]
                   16651: 
                   16652: 2008-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16653: 
                   16654:        * sudo.c:
                   16655:        fix "sudo -s" broken by mode/flags breakout
                   16656:        [acffe984d408]
                   16657: 
                   16658:        * configure, configure.in:
                   16659:        remove duplicate check for dgettext
                   16660:        [58145529133c]
                   16661: 
                   16662: 2008-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16663: 
                   16664:        * aix.c:
                   16665:        Fall back to default stanza if no user-specific limit is found.
                   16666:        [7b8cb29123ee]
                   16667: 
                   16668: 2008-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16669: 
                   16670:        * snprintf.c:
                   16671:        include stdint.h if present
                   16672:        [f0ec38529306]
                   16673: 
                   16674:        * snprintf.c:
                   16675:        Use LLONG_MAX, not the old QUAD_MAX
                   16676:        [01041ce508fb]
                   16677: 
                   16678: 2008-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16679: 
                   16680:        * sudoers.ldap.pod:
                   16681:        fix cut and pasto
                   16682:        [34240fdef5ab]
                   16683: 
                   16684: 2008-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16685: 
                   16686:        * pwutil.c:
                   16687:        Add #ifdef PURITY
                   16688:        [ce1b571ad526]
                   16689: 
                   16690: 2008-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16691: 
                   16692:        * auth/bsdauth.c:
                   16693:        remove useless cast
                   16694:        [494f8a862e1d]
                   16695: 
                   16696: 2008-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16697: 
                   16698:        * ChangeLog:
                   16699:        sync
                   16700:        [f5c97ffaabcc]
                   16701: 
                   16702:        * TODO:
                   16703:        sync
                   16704:        [96ff1c44c182]
                   16705: 
                   16706:        * sudo.h:
                   16707:        Split MODE_* defines into primary and flags.
                   16708:        [c02ee3027cb9]
                   16709: 
                   16710: 2008-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16711: 
                   16712:        * aix.c:
                   16713:        It turns out the logic for getting AIX limits is more convoluted
                   16714:        than I realized and differs depending on whether the soft and/or
                   16715:        hard limits are defined.
                   16716:        [cf8d3f85d395]
                   16717: 
                   16718: 2008-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16719: 
                   16720:        * Makefile.in, configure, configure.in:
                   16721:        Back out AIX-specific change to set the sudo_noexec path to the .a
                   16722:        file, we do really want to use the .so file. Since libtool doesn't
                   16723:        do that correctly, just install the .so file ourselves in the
                   16724:        Makefile.
                   16725:        [05c6f33177d9]
                   16726: 
                   16727:        * install-sh:
                   16728:        If the file given to install is a path, only use the basename of the
                   16729:        file when building the destination path.
                   16730:        [695ba4e429ce]
                   16731: 
                   16732: 2008-03-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16733: 
                   16734:        * sudo.c:
                   16735:        parse_args() cleanup: Sort command line options in the getopt()
                   16736:        switch The -U option requires a parameter Normalize a few ISSET
                   16737:        calls Split mode into mode and flags and retire the now-obsolete
                   16738:        excl variable
                   16739:        [0d156835f861]
                   16740: 
                   16741:        * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod,
                   16742:        sudo_usage.h.in:
                   16743:        Add -n (non-interactive) flag.
                   16744:        [e3e50400d32d]
                   16745: 
                   16746:        * sudo.c:
                   16747:        Move version printing, etc. into a separate function.
                   16748:        [18c91b476e2c]
                   16749: 
                   16750:        * sudo.c:
                   16751:        Don't try to cleanup nsswitch if it has not been initialized.
                   16752:        [aeb1ca1b399d]
                   16753: 
                   16754: 2008-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16755: 
                   16756:        * logging.c:
                   16757:        Block SIGPIPE in send_mail() so sudo is not killed by a problem
                   16758:        executing the mailer.
                   16759:        [f130e7924cca]
                   16760: 
                   16761: 2008-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16762: 
                   16763:        * configure, configure.in:
                   16764:        AIX shared libs end in .a, not .so.
                   16765:        [a5deb07020d8]
                   16766: 
                   16767: 2008-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16768: 
                   16769:        * env.c:
                   16770:        Preserve HOME by default too. Matches documentation and previous
                   16771:        behavior.
                   16772:        [c16f17f1047c]
                   16773: 
                   16774: 2008-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16775: 
                   16776:        * sudo.c:
                   16777:        Use getopt() to parse the command line. We need to be able to
                   16778:        intersperse env variables and options yet still honor "--"" which
                   16779:        complicates things slightly.
                   16780:        [60f271ce5c16]
                   16781: 
                   16782: 2008-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16783: 
                   16784:        * ChangeLog:
                   16785:        sync
                   16786:        [685e67964eda]
                   16787: 
                   16788:        * acsite.m4, configure, ltmain.sh:
                   16789:        update to libtool-1.5.26
                   16790:        [4c9a8c3d3b40]
                   16791: 
                   16792:        * config.guess, config.sub:
                   16793:        update from libtool-1.5.26 distribution
                   16794:        [c6641aef2527]
                   16795: 
                   16796:        * aix.c, sudo.h:
                   16797:        attempt to fix compilation errors on AIX
                   16798:        [edb13e5b2184]
                   16799: 
                   16800:        * Makefile.in:
                   16801:        fix typo in last commit
                   16802:        [25ba7f7ceae4]
                   16803: 
                   16804:        * Makefile.in:
                   16805:        Add WHATSNEW file to the distribution
                   16806:        [213f4115de8f]
                   16807: 
                   16808:        * visudo.c:
                   16809:        use warningx instead of fprintf(stderr, ...)
                   16810:        [a3494b8ccb19]
                   16811: 
                   16812:        * list.c:
                   16813:        add DEBUG to list2tq
                   16814:        [115d24a3000c]
                   16815: 
                   16816:        * ChangeLog, TODO:
                   16817:        sync
                   16818:        [60e6f4d1fac0]
                   16819: 
                   16820:        * WHATSNEW:
                   16821:        mention mailfrom
                   16822:        [e2498f9e18d6]
                   16823: 
                   16824:        * Makefile.in, aix.c, config.h.in, configure, configure.in,
                   16825:        set_perms.c, sudo.h:
                   16826:        Add aix_setlimits() to set resource limits on AIX using a
                   16827:        combination of getuserattr() and setrlimit(). Currently untested.
                   16828:        [9b1441fd89ca]
                   16829: 
                   16830: 2008-03-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16831: 
                   16832:        * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
                   16833:        sudoers.man.in, sudoers.pod:
                   16834:        Add mailfrom Defaults option that sets the value of the From: field
                   16835:        in the warning/error mail. If unset the login name of the invoking
                   16836:        user is used.
                   16837:        [029b9f05d3d9]
                   16838: 
                   16839:        * defaults.c:
                   16840:        store a copy of _PATH_SUDO_ASKPASS in def_askpass that is freeable
                   16841:        [a90e407d5e00]
                   16842: 
                   16843:        * gram.c, gram.y:
                   16844:        When adding a default, only call list2tq() once to do the list to tq
                   16845:        conversion. It is not legal to call list2tq multiple times on the
                   16846:        same list since list2tq consumes and modifies the list argument.
                   16847:        [fbc25d245c4a]
                   16848: 
                   16849:        * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
                   16850:        comment out XXXs for now
                   16851:        [595a1d43309d]
                   16852: 
                   16853:        * WHATSNEW:
                   16854:        mention askpass
                   16855:        [b993e0837c22]
                   16856: 
                   16857: 2008-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16858: 
                   16859:        * sudo.c:
                   16860:        Error out if both -A and -S are specified Error out if -A is
                   16861:        specified but no askpass is configured
                   16862:        [24f1df2638f6]
                   16863: 
                   16864:        * configure, configure.in:
                   16865:        we are not going to ship a sudo-specific askpass
                   16866:        [61949e7a3943]
                   16867: 
                   16868: 2008-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16869: 
                   16870:        * sudo.h:
                   16871:        fix definition of TGP_ASKPASS
                   16872:        [0447c57ba4c3]
                   16873: 
                   16874:        * def_data.c, def_data.in:
                   16875:        make askpass boolean-capable
                   16876:        [e0885893a325]
                   16877: 
                   16878:        * INSTALL:
                   16879:        document --with-askpass
                   16880:        [c76e15ba97cf]
                   16881: 
                   16882:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
                   16883:        sudoers.man.in, visudo.cat:
                   16884:        regen
                   16885:        [8d16242980b7]
                   16886: 
                   16887: 2008-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16888: 
                   16889:        * sudo.pod, sudo_usage.h.in, sudoers.pod:
                   16890:        document -A and askpass
                   16891:        [02c07505a78c]
                   16892: 
                   16893:        * auth/sudo_auth.c, check.c, configure, configure.in, def_data.c,
                   16894:        def_data.h, def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
                   16895:        sudo_usage.h.in, tgetpass.c:
                   16896:        Add support for running a helper program to read the password when
                   16897:        no tty is present (or when specified with the -A flag). TODO: docs.
                   16898:        [05780f5f71fd]
                   16899: 
                   16900:        * def_data.c, def_data.in:
                   16901:        add missing printf format to SELinux role and type strings
                   16902:        [2b32774715e7]
                   16903: 
                   16904: 2008-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16905: 
                   16906:        * INSTALL, configure, configure.in:
                   16907:        Disable use of gss_krb5_ccache_name() by default and add
                   16908:        --enable-gss-krb5-ccache-name configure option to enable it. It
                   16909:        seems that gss_krb5_ccache_name() doesn't work properly with some
                   16910:        combinations of Heimdal and OpenLDAP.
                   16911:        [f61ebd3b19bd]
                   16912: 
                   16913: 2008-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16914: 
                   16915:        * selinux.c:
                   16916:        Ignore setexeccon() failing in permissive mode. Also add a call to
                   16917:        setkeycreatecon() (though this is probably insufficient). From Dan
                   16918:        Walsh.
                   16919:        [52564fc1c069]
                   16920: 
                   16921:        * auth/pam.c:
                   16922:        Only set std_prompt for the PAM_PROMPT_* cases. The conversation
                   16923:        function may be called for non-password reading purposes so we must
                   16924:        be careful not to use def_prompt in cases where it may not be set.
                   16925:        [29d88ca575ba]
                   16926: 
                   16927: 2008-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16928: 
                   16929:        * selinux.c:
                   16930:        Don't free the new tty context, we need to keep it around when we
                   16931:        restore the tty context after the command completes
                   16932:        [5b4bd39b6ea8]
                   16933: 
                   16934: 2008-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16935: 
                   16936:        * selinux.c:
                   16937:        s/newrole/sudo/
                   16938:        [21b8a96ff8df]
                   16939: 
                   16940:        * sudo.man.pl, sudo.pod:
                   16941:        Only put login_cap(3) in SEE ALSO section if we have login.conf
                   16942:        support
                   16943:        [05250ddff2c0]
                   16944: 
                   16945: 2008-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16946: 
                   16947:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
                   16948:        sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
                   16949:        regen
                   16950:        [301e5c5ccdbe]
                   16951: 
                   16952:        * sudoers.pod:
                   16953:        Substitute in comment characters for lines partaining to login.conf,
                   16954:        BSD auth and SELinux and only enable them if pertinent.
                   16955:        [c1c98fa163ce]
                   16956: 
                   16957:        * sudoers.man.pl:
                   16958:        Substitute in comment characters for lines partaining to login.conf,
                   16959:        BSD auth and SELinux and only enable them if pertinent.
                   16960:        [6c88f30b878a]
                   16961: 
                   16962:        * sudo.pod:
                   16963:        Substitute in comment characters for lines partaining to login.conf,
                   16964:        BSD auth and SELinux and only enable them if pertinent.
                   16965:        [acdbdfd24e1d]
                   16966: 
                   16967:        * sudo.man.pl:
                   16968:        Substitute in comment characters for lines partaining to login.conf,
                   16969:        BSD auth and SELinux and only enable them if pertinent.
                   16970:        [0c56d4750ac3]
                   16971: 
                   16972:        * Makefile.in, configure, configure.in:
                   16973:        Substitute in comment characters for lines partaining to login.conf,
                   16974:        BSD auth and SELinux and only enable them if pertinent.
                   16975:        [9a02bd6a6658]
                   16976: 
                   16977:        * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
                   16978:        Remove the =cut on the first line (above the copyright notice) to
                   16979:        quiet pod2man. Also remove the hackery in the FILES section and
                   16980:        just deal with the fact that there will a newline between each
                   16981:        pathname.
                   16982:        [2ac1ab191835]
                   16983: 
                   16984: 2008-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   16985: 
                   16986:        * Makefile.in:
                   16987:        run sudo.man.pl when generating sudo.man.in
                   16988:        [859727369168]
                   16989: 
                   16990:        * configure, configure.in, sudo.man.pl:
                   16991:        comment out SELinux manual bits unless --with-selinux was specified
                   16992:        [97ff4212b649]
                   16993: 
                   16994:        * sudoers.pod:
                   16995:        document role and type defaults for SELinux
                   16996:        [870f303366b3]
                   16997: 
                   16998:        * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
                   16999:        Document "sudo -ll" and make "sudo -l -l" be equivalent.
                   17000:        [3ce6dc429ea3]
                   17001: 
                   17002: 2008-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17003: 
                   17004:        * configure, configure.in:
                   17005:        Treat k*bsd*-gnu like Linux, not BSD. Fixes compilation problems on
                   17006:        Debian GNU/kFreeBSD.
                   17007:        [c4efa567a328]
                   17008: 
                   17009: 2008-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17010: 
                   17011:        * auth/kerb5.c:
                   17012:        Avoid Heimdal'isms introduced in the rev 1.32 rewrite of
                   17013:        verify_krb_v5_tgt()
                   17014:        [f80538e5a6fa]
                   17015: 
                   17016:        * logging.c, logging.h, sudo.c:
                   17017:        Remove dependence on VALIDATE_NOT_OK in logging functions. Split
                   17018:        log_auth() into log_allowed() and log_denial() Replace mail_auth()
                   17019:        with should_mail() and a call to send_mail()
                   17020:        [58aac9997557]
                   17021: 
                   17022: 2008-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17023: 
                   17024:        * ldap.c:
                   17025:        Add debugging so we can tell if the krb5 ccache is accessible
                   17026:        [c679322527bb]
                   17027: 
                   17028:        * INSTALL:
                   17029:        mention --with-selinux
                   17030:        [9efbe0b52194]
                   17031: 
                   17032: 2008-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17033: 
                   17034:        * configure:
                   17035:        regen
                   17036:        [467a834f867c]
                   17037: 
                   17038:        * selinux.c:
                   17039:        add Sudo tag
                   17040:        [d004ee669bed]
                   17041: 
                   17042:        * sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod, sudo_usage.h.in,
                   17043:        sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod,
                   17044:        testsudoers.c, toke.c, toke.l:
                   17045:        Add support for SELinux RBAC. Sudoers entries may specify a role
                   17046:        and type. There are also role and type defaults that may be used.
                   17047:        To make sure a transition occurs, when using RBAC commands are
                   17048:        executed via the new sesh binary. Based on initial changes from Dan
                   17049:        Walsh.
                   17050:        [1d4abfe2c004]
                   17051: 
                   17052:        * sesh.c:
                   17053:        Add support for SELinux RBAC. Sudoers entries may specify a role
                   17054:        and type. There are also role and type defaults that may be used.
                   17055:        To make sure a transition occurs, when using RBAC commands are
                   17056:        executed via the new sesh binary. Based on initial changes from Dan
                   17057:        Walsh.
                   17058:        [1e3b395ce049]
                   17059: 
                   17060:        * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
                   17061:        def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
                   17062:        pathnames.h.in, selinux.c:
                   17063:        Add support for SELinux RBAC. Sudoers entries may specify a role
                   17064:        and type. There are also role and type defaults that may be used.
                   17065:        To make sure a transition occurs, when using RBAC commands are
                   17066:        executed via the new sesh binary. Based on initial changes from Dan
                   17067:        Walsh.
                   17068:        [6b421948286e]
                   17069: 
                   17070: 2008-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17071: 
                   17072:        * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c:
                   17073:        Add long list (sudo -ll) support for printing verbose LDAP and
                   17074:        sudoers file entries. Still need to update manual.
                   17075:        [2875be37935c]
                   17076: 
                   17077: 2008-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17078: 
                   17079:        * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h:
                   17080:        Unify the -l output for file and ldap based sudoers and use lbufs
                   17081:        for both. The ldap output does not currently include options that
                   17082:        cannot be represented as tags. This will be remedied in a long list
                   17083:        output mode to come.
                   17084:        [b2e429456596]
                   17085: 
                   17086: 2008-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17087: 
                   17088:        * set_perms.c:
                   17089:        Use a specific error message for errno == EAGAIN when setuid() et al
                   17090:        fails. On Linux systems setuid() will fail with errno set to EAGAIN
                   17091:        if changing to the new uid would result in a resource limit
                   17092:        violation.
                   17093:        [08d0aecd9f03]
                   17094: 
                   17095:        * sudo.c:
                   17096:        Unlimit nproc on Linux systems where calling the setuid() family of
                   17097:        syscalls causes the nroc resource limit to be checked. The limits
                   17098:        will be reset by pam_limits.so when PAM is used. In the non-PAM
                   17099:        case the nproc limit will remain unlimited but there doesn't seem to
                   17100:        be a way around that other than having sudo parse
                   17101:        /etc/security/limits.conf directly.
                   17102:        [df024b415a8d]
                   17103: 
                   17104:        * env.c, sudo.c, sudo.pod:
                   17105:        Only read /etc/environment on Linux and AIX
                   17106:        [90669e2aefdb]
                   17107: 
                   17108: 2008-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17109: 
                   17110:        * configure, configure.in:
                   17111:        Use SUDO_DEFINE_UNQUOTED instead of AC_DEFINE_UNQUOTED to prevent
                   17112:        ldap.conf and ldap.secret paths from going into config.h. Avoid
                   17113:        single quotes in variable expansion when using SUDO_DEFINE_UNQUOTED
                   17114:        since in some versions of bash they will end up literally in the
                   17115:        resulting define.
                   17116:        [25390f3ef10a]
                   17117: 
                   17118: 2008-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17119: 
                   17120:        * README.LDAP:
                   17121:        mention --with-nsswitch=no
                   17122:        [c509df927263]
                   17123: 
                   17124:        * configure, configure.in:
                   17125:        ldap_ssl.h depends on ldap.h being included first
                   17126:        [d96d90e9b21f]
                   17127: 
                   17128:        * config.h.in, configure, configure.in, ldap.c:
                   17129:        Include ldap_ssl.h if we can find it. Needed for the
                   17130:        ldapssl_set_strength defines on HP-UX at least.
                   17131:        [9e530470948a]
                   17132: 
                   17133:        * sudoers.ldap.pod:
                   17134:        sync
                   17135:        [b9d101f4673a]
                   17136: 
                   17137:        * TODO:
                   17138:        sync
                   17139:        [2ce951b2ecd0]
                   17140: 
                   17141:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
                   17142:        sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
                   17143:        regen
                   17144:        [b61d793987e0]
                   17145: 
                   17146:        * Makefile.in:
                   17147:        Use 78n line length when formatting cat pages.
                   17148:        [761bee9d5759]
                   17149: 
                   17150:        * README.LDAP:
                   17151:        Remove redundant info that is now in sudoers.ldap.pod
                   17152:        [01828dcce59e]
                   17153: 
                   17154: 2008-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17155: 
                   17156:        * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
                   17157:        Reorganize the first section a bit. Substitute the proper path for
                   17158:        /etc/sudoers.
                   17159:        [11ae165e065d]
                   17160: 
                   17161:        * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
                   17162:        Substitute values for ldap.conf, ldap.secret and nsswitch.conf Move
                   17163:        schema into EXAMPLES
                   17164:        [ab6509d1dde7]
                   17165: 
                   17166:        * configure, configure.in:
                   17167:        Substitute values for ldap.conf, ldap.secret and nsswitch.conf into
                   17168:        sudoers.ldap.man.
                   17169:        [6e689972f465]
                   17170: 
                   17171:        * configure, configure.in:
                   17172:        substitute for sudoers.ldap.man
                   17173:        [5a4a25766dee]
                   17174: 
                   17175:        * Makefile.in:
                   17176:        Fix cut & pasto introduced when adding sudoers.ldap man page.
                   17177:        [a7b069af8894]
                   17178: 
                   17179:        * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
                   17180:        Fill in some of the missing pieces. Still needs some reorganization
                   17181:        and editing.
                   17182:        [5e7331722166]
                   17183: 
                   17184: 2008-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17185: 
                   17186:        * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
                   17187:        sudoers.ldap.pod:
                   17188:        Beginnings of a sudoers.ldap man page. Currently, much of the
                   17189:        information is adapted from README.LDAP.
                   17190:        [aad28c8a922d]
                   17191: 
                   17192: 2008-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17193: 
                   17194:        * pwutil.c:
                   17195:        When copying gr_mem we must guarantee that the storage space for
                   17196:        gr_mem is properly aligned. The simplest way to do this is to
                   17197:        simply store gr_mem directly after struct group. This is not a
                   17198:        problem for gr_passwd or gr_name as they are simple strings.
                   17199:        [af58fc76f1ed]
                   17200: 
                   17201:        * ldap.c:
                   17202:        Fix a typo/thinko in one of the calls to
                   17203:        sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
                   17204:        [70b2eb8097f5]
                   17205: 
                   17206: 2008-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17207: 
                   17208:        * config.h.in, configure, configure.in, ldap.c:
                   17209:        include <mps/ldap_ssl.h> in ldap.c if available
                   17210:        [34346206ef16]
                   17211: 
                   17212: 2008-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17213: 
                   17214:        * gram.c, gram.y:
                   17215:        Make sure we define SIZE_MAX for yacc's skeleton.c
                   17216:        [d8a45c7a3c42]
                   17217: 
                   17218:        * tgetpass.c:
                   17219:        Use TCSAFLUSH when restoring terminal settings (and echo) to
                   17220:        guarantee that any pending output is discarded
                   17221:        [549a184479e5]
                   17222: 
                   17223: 2008-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17224: 
                   17225:        * sudoers:
                   17226:        no longer need to specify SETENV when user has sudo ALL
                   17227:        [3051b41f8032]
                   17228: 
                   17229:        * testsudoers.c:
                   17230:        sync user_args size calculation with sudo.c Add -g group option,
                   17231:        renaming old -g to -G Add set_runasgr() and set_runaspw() and use
                   17232:        them
                   17233:        [0850325180f0]
                   17234: 
                   17235:        * sudo.c, sudo.h:
                   17236:        Make set_runaspw static void
                   17237:        [5d44d7a340ce]
                   17238: 
                   17239:        * testsudoers.c, visudo.c:
                   17240:        g/c set_runaspw stub
                   17241:        [79ebb5e2cc38]
                   17242: 
                   17243:        * configure, configure.in:
                   17244:        Don't add -llber twice.
                   17245:        [4356d302eef4]
                   17246: 
                   17247: 2008-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17248: 
                   17249:        * ldap.c:
                   17250:        fix typo
                   17251:        [249cecc557e9]
                   17252: 
                   17253: 2008-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17254: 
                   17255:        * gram.c:
                   17256:        regen
                   17257:        [2f94ea375b67]
                   17258: 
                   17259:        * configure, configure.in:
                   17260:        Fix check that determines whether -llber is required.
                   17261:        [6afa99523379]
                   17262: 
                   17263:        * README.LDAP, config.h.in, configure, configure.in, ldap.c:
                   17264:        For netscape-based LDAP, use ldapssl_set_strength() to implement the
                   17265:        checkpeer ldap.conf option.
                   17266:        [16ae24d73795]
                   17267: 
                   17268:        * auth/kerb5.c:
                   17269:        Delay krb5_cc_initialize() until we actually need to use the cred
                   17270:        cache, which is what krb5_verify_user() does. Better cleanup on
                   17271:        failure.
                   17272:        [d12e5f1695b8]
                   17273: 
                   17274: 2008-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17275: 
                   17276:        * auth/kerb5.c:
                   17277:        Rewrite verify_krb_v5_tgt() based on what heimdal's
                   17278:        krb5_verify_user() does.
                   17279:        [05b5815f86c9]
                   17280: 
                   17281: 2008-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17282: 
                   17283:        * gram.c:
                   17284:        The U suffix on constants is an ANSI feature
                   17285:        [c6dfce3167f1]
                   17286: 
                   17287:        * configure, configure.in:
                   17288:        Add check for ber_set_option() in -llber
                   17289:        [43d0c0566074]
                   17290: 
                   17291: 2008-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17292: 
                   17293:        * README.LDAP:
                   17294:        default if no nsswitch.conf is files only
                   17295:        [c13001d9c998]
                   17296: 
                   17297: 2008-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17298: 
                   17299:        * README.LDAP:
                   17300:        don't tell people to mail aaron about LDAP stuff
                   17301:        [8165ec1ef0c6]
                   17302: 
                   17303:        * README.LDAP:
                   17304:        timelimit and bind_timelimit
                   17305:        [44f74cbed167]
                   17306: 
                   17307:        * ChangeLog:
                   17308:        sync
                   17309:        [aba1a0ab02bd]
                   17310: 
                   17311:        * ldap.c:
                   17312:        Move ldap.secret reading into a separate function.
                   17313:        [1948acc9f7a4]
                   17314: 
                   17315:        * check.c:
                   17316:        user_runas -> runas_pw
                   17317:        [334490fc2bae]
                   17318: 
                   17319: 2008-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17320: 
                   17321:        * TODO:
                   17322:        sync
                   17323:        [c7b165cc47c6]
                   17324: 
                   17325:        * check.c, sudo.pod, sudoers.pod:
                   17326:        Add and document the %p escape in the password prompt. Based on a
                   17327:        patch from Patrick Schoenfeld.
                   17328:        [3972d4f31ffa]
                   17329: 
                   17330:        * ldap.c:
                   17331:        Check strlcpy() return values.
                   17332:        [9b42f3ae8ff1]
                   17333: 
                   17334:        * ldap.c:
                   17335:        refactor ldap binding code into sudo_ldap_bind_s()
                   17336:        [cb0c66a4d955]
                   17337: 
                   17338:        * README.LDAP:
                   17339:        Make it clear that host and uri can take multiple parameters. URI is
                   17340:        now supported for more than just openldap nsswitch.conf does't
                   17341:        accept "compat"
                   17342:        [f610dea656d6]
                   17343: 
                   17344:        * sudo.c:
                   17345:        comment cleanup and update (c) year
                   17346:        [6cd69c810ca5]
                   17347: 
                   17348:        * parse.c, sudo_nss.c:
                   17349:        Move display_privs() and display_cmnd() from parse.c to sudo_nss.c.
                   17350:        This should make it possible to build an LDAP-only sudo binary.
                   17351:        [61c3f27066a0]
                   17352: 
                   17353:        * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h:
                   17354:        Improve chaining of multiple sudoers sources by passing in the
                   17355:        previous return value to the next in the chain
                   17356:        [2c0b722b1b2d]
                   17357: 
                   17358:        * gram.y:
                   17359:        Free up parser data structures in sudo_file_close().
                   17360:        [2251531d4519]
                   17361: 
                   17362:        * gram.c, parse.c:
                   17363:        Free up parser data structures in sudo_file_close().
                   17364:        [8371f130f401]
                   17365: 
                   17366:        * ldap.c:
                   17367:        Parse uri ourself if no ldap_initialize() is present Use
                   17368:        ldap_create() instead of deprecated ldap_init() Use
                   17369:        ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
                   17370:        [85d3825b1953]
                   17371: 
                   17372:        * config.h.in, configure, configure.in:
                   17373:        Add check for ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from
                   17374:        CFLAGS
                   17375:        [240524512bc5]
                   17376: 
                   17377: 2008-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17378: 
                   17379:        * config.h.in, configure, configure.in:
                   17380:        add check for ldap_create
                   17381:        [3089badd73b8]
                   17382: 
                   17383: 2008-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17384: 
                   17385:        * config.h.in, configure, configure.in, ldap.c:
                   17386:        Add sudo_ldap_get_first_rdn() to return the first rdn of an entry's
                   17387:        dn using the mechanism appropriate for the LDAP SDK in use. Use
                   17388:        ldap_unbind_ext_s() instead of deprecated ldap_unbind_s(). Emulate
                   17389:        ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's without them.
                   17390:        [6deeca3d00cc]
                   17391: 
                   17392:        * lbuf.c:
                   17393:        include unistd.h
                   17394:        [8419ed0bae7f]
                   17395: 
                   17396:        * config.h.in, configure.in:
                   17397:        fix typo in mtim_getnsec
                   17398:        [2d5f21230a60]
                   17399: 
                   17400: 2008-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17401: 
                   17402:        * config.h.in, configure, configure.in:
                   17403:        add check for st__tim in struct stat as used by SCO
                   17404:        [587060ea2a89]
                   17405: 
                   17406:        * ldap.c:
                   17407:        use ldap_search_ext_s instead of deprecated ldap_search_s
                   17408:        [5fc44fe3b44c]
                   17409: 
                   17410:        * Makefile.in, TODO, sudo.cat, sudo.man.in:
                   17411:        add sudo_nss.h to HDRS
                   17412:        [86f01a70ff29]
                   17413: 
                   17414:        * ldap.c:
                   17415:        Replace deprecated ldap_explode_dn() with calls to ldap_str2dn() and
                   17416:        ldap_rdn2str().
                   17417:        [aa217002cfae]
                   17418: 
                   17419: 2008-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17420: 
                   17421:        * ldap.c:
                   17422:        Use ldap_get_values_len()/ldap_value_free_len() instead of the
                   17423:        deprecated ldap_get_values()/ldap_value_free().
                   17424:        [e22dceb85e57]
                   17425: 
                   17426:        * ChangeLog:
                   17427:        sync
                   17428:        [adad27b36107]
                   17429: 
                   17430:        * TODO:
                   17431:        sync
                   17432:        [c449eb47e0ef]
                   17433: 
                   17434:        * gettime.c, sudo.c:
                   17435:        Remove some already fixed XXXs
                   17436:        [532788d0e6da]
                   17437: 
                   17438:        * ldap.c:
                   17439:        Same return value as non-existent sudoers if LDAP was unable to
                   17440:        connect.
                   17441:        [5819810e8e4e]
                   17442: 
                   17443:        * sudo.pod:
                   17444:        mention /etc/environment
                   17445:        [ea8e6102f853]
                   17446: 
                   17447:        * README.LDAP, UPGRADE, WHATSNEW:
                   17448:        Update to reflect recent developments.
                   17449:        [ed1fb026fe77]
                   17450: 
                   17451:        * sudo.c:
                   17452:        Print nsswitch.conf, ldap.conf and ldap.secret paths in -V output.
                   17453:        [55b68a58260d]
                   17454: 
                   17455:        * ldap.c:
                   17456:        When building up a query don't list groups in the aux group vector
                   17457:        that are the same as the passwd file group. On most systems the
                   17458:        first gid in the group vector is the same as the passwd entry gid.
                   17459:        [4bb51e297e0d]
                   17460: 
                   17461:        * env.c, ldap.c:
                   17462:        Define LDAPNOINIT before calling ldap_init(), etc. to disable user
                   17463:        ldaprc and system defaults that could affect how LDAP works.
                   17464:        [ce5036440db2]
                   17465: 
                   17466:        * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
                   17467:        sudo_nss.c, sudo_nss.h:
                   17468:        Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users
                   17469:        to specify nsswitch.conf path or disable it. If --with-nsswitch=no
                   17470:        but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf-
                   17471:        file and --with-ldap-secret-file
                   17472:        [ea5d7704381f]
                   17473: 
                   17474:        * parse.c:
                   17475:        Honor def_ignore_local_sudoers
                   17476:        [f38e1121fae1]
                   17477: 
                   17478: 2007-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17479: 
                   17480:        * ldap.c:
                   17481:        no longer need to check def_ignore_local_sudoers here
                   17482:        [fce2a72f96fb]
                   17483: 
                   17484:        * parse.c:
                   17485:        Refactor group vector resetting into a function and also call it
                   17486:        from display_cmnd. Stop after the first sucessful match in
                   17487:        display_cmnd. Print a newline between each display_privs method.
                   17488:        [981b37b5adff]
                   17489: 
                   17490:        * parse.c:
                   17491:        fix double free introduced in rev 1.218
                   17492:        [c574b02d8747]
                   17493: 
                   17494:        * ldap.c:
                   17495:        belt and suspenders; zero out result after freeing it
                   17496:        [7732988d4620]
                   17497: 
                   17498:        * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c:
                   17499:        Refactor line reading into a separate function, sudo_parseln(),
                   17500:        which removes comments, leading/trailing whitespace and newlines.
                   17501:        May want to rethink the use of sudo_parseln() for /etc/ldap.secret
                   17502:        [61d9068f0645]
                   17503: 
                   17504:        * parse.c, sudo.c:
                   17505:        Make the inability to read the sudoers file a non-fatal error if
                   17506:        there are other sudoers sources available. sudoers_file_lookup now
                   17507:        returns "not OK" if sudoers was not present
                   17508:        [643babf597a8]
                   17509: 
                   17510:        * ldap.c:
                   17511:        make it clear that the global options are from LDAP
                   17512:        [9ff950349463]
                   17513: 
                   17514:        * logging.c:
                   17515:        allocate proper amount of space for error string
                   17516:        [8bebb7d46d19]
                   17517: 
                   17518:        * sudo_nss.c, sudo_nss.h:
                   17519:        actual sudo nss code
                   17520:        [5bd7d52d7738]
                   17521: 
                   17522:        * ldap.c, parse.c, sudo.c, sudo.h:
                   17523:        nss-ify display_privs and display_cmnd.
                   17524:        [cccfdd3253f2]
                   17525: 
                   17526:        * defaults.c, parse.c, testsudoers.c, visudo.c:
                   17527:        move update_defaults() to parse.c
                   17528:        [ace144b958a9]
                   17529: 
                   17530:        * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
                   17531:        Use nsswitch to hide some sudoers vs. ldap implementation details
                   17532:        and reduce the number of #ifdef LDAP TODO: fix display routines and
                   17533:        error handling
                   17534:        [6225edde89a6]
                   17535: 
                   17536: 2007-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17537: 
                   17538:        * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
                   17539:        First cut at nsswitch.conf support. Further reorganizaton and
                   17540:        related changes are forthcoming.
                   17541:        [717f59d0790b]
                   17542: 
                   17543: 2007-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17544: 
                   17545:        * env.c, pathnames.h.in, sudo.c, sudo.h:
                   17546:        Add support for reading and /etc/environment file. Still needs to
                   17547:        be documented and should probably only applies to OSes that have it
                   17548:        (AIX and Linux, maybe others).
                   17549:        [15d3edae27e4]
                   17550: 
                   17551:        * ldap.c:
                   17552:        include limits.h
                   17553:        [e19875ef0f82]
                   17554: 
                   17555: 2007-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17556: 
                   17557:        * WHATSNEW:
                   17558:        reword LDAP SASL
                   17559:        [7ec3c4ec31b5]
                   17560: 
                   17561: 2007-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17562: 
                   17563:        * TODO:
                   17564:        sync
                   17565:        [87c5a7aea7bf]
                   17566: 
                   17567:        * README.LDAP:
                   17568:        Add an example sudoRole, clarify netscape vs. openldap a bit more
                   17569:        [6f96c0ca8107]
                   17570: 
                   17571:        * README.LDAP:
                   17572:        Be clear on what is OpenLDAP vs. Netscape-derived
                   17573:        [a33c8314dec5]
                   17574: 
                   17575:        * config.h.in, configure, configure.in, ldap.c:
                   17576:        Use ldapssl_init() for ldaps support instead of trying to do it
                   17577:        manually with ldap_init() + ldapssl_install_routines(). Use tls_cert
                   17578:        and tls_key for cert7.db and key3.db respectively. Don't print
                   17579:        debugging info for options that are not set. Add warning if
                   17580:        start_tls specified when not supported.
                   17581:        [abb62dc7e4a3]
                   17582: 
                   17583:        * ldap.c:
                   17584:        fix compilation on solaris
                   17585:        [03d449684e80]
                   17586: 
                   17587:        * Makefile.in:
                   17588:        add missing .h and .c files for missing lib objs
                   17589:        [8b37825bdfc7]
                   17590: 
                   17591: 2007-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17592: 
                   17593:        * ldap.c:
                   17594:        fix LDAP_OPT_NETWORK_TIMEOUT setting
                   17595:        [226eba89c0ad]
                   17596: 
                   17597:        * ldap.c:
                   17598:        fix compilation on Solaris
                   17599:        [917d47639eb6]
                   17600: 
                   17601: 2007-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17602: 
                   17603:        * configure, configure.in:
                   17604:        fix typo
                   17605:        [009d5c81b225]
                   17606: 
                   17607:        * README.LDAP:
                   17608:        try to clear up which variables are for OpenLDAP and which are for
                   17609:        netscape-derived SDKs
                   17610:        [f8d9823ee73c]
                   17611: 
                   17612:        * config.h.in, configure, configure.in, ldap.c:
                   17613:        Add support for "ssl on" in both netscape and openldap flavors. Only
                   17614:        the OpenLDAP flavor has been tested.
                   17615:        [952745829ec5]
                   17616: 
                   17617:        * logging.c, sudo.c, sudo.h:
                   17618:        Call cleanup() before exit in log_error() instead of calling
                   17619:        sudo_ldap_close() directly. ldap_conn can now be static to sudo.c
                   17620:        [da02d1b67a2c]
                   17621: 
                   17622:        * sudo.c:
                   17623:        ld -> ldap_conn
                   17624:        [01afa6d927cc]
                   17625: 
                   17626: 2007-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17627: 
                   17628:        * logging.c, sudo.c, sudo.h:
                   17629:        Better ldap cleanup.
                   17630:        [25b9abe2d617]
                   17631: 
                   17632:        * ldap.c:
                   17633:        Distinguish between LDAP conf settings that are connection-specific
                   17634:        (which take an ld pointer) and those that are default settings
                   17635:        (which do not).
                   17636:        [d48dc6c9c3b4]
                   17637: 
                   17638: 2007-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17639: 
                   17640:        * ldap.c:
                   17641:        Improved warnings on error.
                   17642:        [c8dce7b4feb4]
                   17643: 
                   17644:        * ldap.c:
                   17645:        Make ldap config table driven and set the config *after* we open the
                   17646:        connection.
                   17647:        [d9698b5a2681]
                   17648: 
                   17649: 2007-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17650: 
                   17651:        * ldap.c:
                   17652:        fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
                   17653:        [598c6df06660]
                   17654: 
                   17655:        * configure, configure.in:
                   17656:        some operating systems need to link with -lkrb5support when using
                   17657:        krb5
                   17658:        [8896365dde9e]
                   17659: 
                   17660: 2007-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17661: 
                   17662:        * WHATSNEW:
                   17663:        minor update
                   17664:        [acfeeb7f4886]
                   17665: 
                   17666:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
                   17667:        regen
                   17668:        [a3c6699674f9]
                   17669: 
                   17670: 2007-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17671: 
                   17672:        * ChangeLog, TODO:
                   17673:        sync
                   17674:        [138e99b925ee]
                   17675: 
                   17676:        * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif:
                   17677:        add -g support for LDAP
                   17678:        [8fc27dbe9287]
                   17679: 
                   17680: 2007-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17681: 
                   17682:        * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in:
                   17683:        The -i and -s flags can now take an optional command.
                   17684:        [6afec104ee77]
                   17685: 
                   17686: 2007-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17687: 
                   17688:        * auth/pam.c, def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
                   17689:        sudoers.pod:
                   17690:        Add passprompt_override flag to sudoers that will cause the prompt
                   17691:        to be overridden in all cases. This flag is also set when the user
                   17692:        specifies the -p flag.
                   17693:        [e4c5402131a6]
                   17694: 
                   17695:        * sudo.c:
                   17696:        Move setting of login class until after sudoers has been parsed. Set
                   17697:        NewArgv[0] for -i after runas_pw has been set.
                   17698:        [62a48c8c56fa]
                   17699: 
                   17700:        * configure, configure.in:
                   17701:        Move the dgettext check.
                   17702:        [5fd8a4712d1c]
                   17703: 
                   17704: 2007-12-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17705: 
                   17706:        * auth/pam.c, config.h.in, configure, configure.in:
                   17707:        Add basic support for looking up the string "Password: " in the PAM
                   17708:        localized text db. This allows us to determine whether the PAM
                   17709:        prompt is the default "Password: " one even if it has been
                   17710:        localized.
                   17711: 
                   17712:        TODO: concatenate non-std PAM prompts and user-specified sudo
                   17713:        prompts.
                   17714:        [81c25a415d41]
                   17715: 
                   17716: 2007-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17717: 
                   17718:        * Makefile.in, config.h.in, configure, configure.in, parse.c,
                   17719:        set_perms.c, sudo.c, sudo.h:
                   17720:        Use AC_FUNC_GETGROUPS instead of a home-grown attempt that was
                   17721:        insufficient.
                   17722:        [1cce6ec1a91e]
                   17723: 
                   17724:        * acsite.m4, configure, interfaces.c, memrchr.c:
                   17725:        Fix typos; Martynas Venckus
                   17726:        [be1233cca11a]
                   17727: 
                   17728: 2007-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17729: 
                   17730:        * set_perms.c:
                   17731:        Don't assume runas_pw is set; it may not be in the -g case.
                   17732:        [aa11bd2193ac]
                   17733: 
                   17734: 2007-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17735: 
                   17736:        * logging.c, set_perms.c:
                   17737:        Set aux group vector for PERM_RUNAS and restore group vector for
                   17738:        PERM_ROOT if we previously changed it. Stash the runas group vector
                   17739:        so we don't have to call initgroups more than once. Also add no-op
                   17740:        check to check_perms.
                   17741:        [53837fc755f7]
                   17742: 
                   17743: 2007-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17744: 
                   17745:        * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h, gram.y,
                   17746:        ldap.c, logging.c, match.c, mon_systrace.c, parse.c, parse.h,
                   17747:        pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
                   17748:        sudo.pod, sudo_usage.h.in, sudoers.cat, sudoers.man.in, sudoers.pod,
                   17749:        testsudoers.c, visudo.c, visudo.cat, visudo.man.in:
                   17750:        Add support for runas groups. This allows the user to run a command
                   17751:        with a different effective group. If the -g option is specified
                   17752:        without -u the command will be run as the current user (only the
                   17753:        group will change). the -g and -u options may be used together.
                   17754:        TODO: implement runas group for ldap improve runas group
                   17755:        documentation add testsudoers support
                   17756:        [9019309df6d0]
                   17757: 
                   17758:        * configure, configure.in:
                   17759:        fix setting of mandir
                   17760:        [2c60f269399f]
                   17761: 
                   17762:        * sudo.pod, sudoers.pod:
                   17763:        document that ALL implies SETENV
                   17764:        [bcc8e5b703b9]
                   17765: 
                   17766:        * ldap.c:
                   17767:        s/setenv_ok/setenv_implied/g
                   17768:        [f005df2c2eea]
                   17769: 
                   17770:        * ldap.c:
                   17771:        hostname_matches() returns TRUE on match in sudo 1.7.
                   17772:        [c3d4377b6e8b]
                   17773: 
                   17774:        * ldap.c:
                   17775:        use strcmp, not strcasecmp when comparing ALL
                   17776:        [e486024574a1]
                   17777: 
                   17778:        * ldap.c:
                   17779:        Make sudo ALL imply setenv. Note that unlike with file-based
                   17780:        sudoers this does affect all the commands in the sudoRole.
                   17781:        [bc12f54321d1]
                   17782: 
                   17783:        * gram.c, gram.y, parse.c, parse.h:
                   17784:        sudo "ALL" now implies the SETENV tag but, unlike an explicit tag,
                   17785:        it is not passed on to other commands in the list.
                   17786:        [026e2cb40680]
                   17787: 
                   17788:        * visudo.c:
                   17789:        Add missing sudo_setpwent() and sudo_setgrent() calls. Also use
                   17790:        sudo_getpwuid() instead of getpwuid().
                   17791:        [86f30a8fbd49]
                   17792: 
                   17793: 2007-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17794: 
                   17795:        * sudoers:
                   17796:        Expand on the dangers of not using visudo to edit sudoers.
                   17797:        [e434e8057d02]
                   17798: 
                   17799: 2007-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17800: 
                   17801:        * parse.c:
                   17802:        Don't quote *?[]! on output since the lexer does not strip off the
                   17803:        backslash when reading those in.
                   17804:        [561da4a13afa]
                   17805: 
                   17806: 2007-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17807: 
                   17808:        * glob.c:
                   17809:        expand "u_foo" types to "unsigned foo" to avoid compatibility
                   17810:        issues.
                   17811:        [b0d7c64d78c3]
                   17812: 
                   17813: 2007-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17814: 
                   17815:        * logging.c:
                   17816:        Refactor log line generation in to new_logline().
                   17817:        [6a9b9730615d]
                   17818: 
                   17819: 2007-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17820: 
                   17821:        * TROUBLESHOOTING:
                   17822:        fix typo
                   17823:        [9e19d4f86e47]
                   17824: 
                   17825: 2007-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17826: 
                   17827:        * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
                   17828:        match.c:
                   17829:        Add configure check for struct in6_addr instead of relying on
                   17830:        AF_INET6 since some systems define AF_INET6 but do not include IPv6
                   17831:        support.
                   17832:        [e24082c416bd]
                   17833: 
                   17834: 2007-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17835: 
                   17836:        * configure, configure.in:
                   17837:        Fix block to add -lutil for FreeBSD and NetBSD when logincap is in
                   17838:        use.
                   17839:        [76a9df4a63be]
                   17840: 
                   17841: 2007-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17842: 
                   17843:        * configure, configure.in:
                   17844:        POSIX states that struct timespec be declared in time.h so check
                   17845:        there regardless of the value of TIME_WITH_SYS_TIME.
                   17846:        [e42c55ec9daf]
                   17847: 
                   17848: 2007-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17849: 
                   17850:        * tgetpass.c:
                   17851:        Instead of defining a macro to call the appropriate method for
                   17852:        turning on/off echo, just define tc[gs]etattr() and the related
                   17853:        defines that use the correct terminal ioctls if needed. Also go back
                   17854:        to using TCSAFLUSH instead of TCSADRAIN on all but QNX.
                   17855:        [5dfb2379d995]
                   17856: 
                   17857: 2007-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17858: 
                   17859:        * Makefile.in:
                   17860:        g/c @ALLOCA@
                   17861:        [e6946c2e3820]
                   17862: 
                   17863:        * configure:
                   17864:        regen
                   17865:        [9bac7159a138]
                   17866: 
                   17867:        * INSTALL, auth/pam.c, config.h.in, configure.in:
                   17868:        Add --disable-pam-session configure option to disable calling
                   17869:        pam_{open,close}_session. May work around bugs in some PAM
                   17870:        implementations.
                   17871:        [273d0fdb4a9d]
                   17872: 
                   17873: 2007-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17874: 
                   17875:        * tgetpass.c:
                   17876:        quiet gcc warnings
                   17877:        [325565c5a579]
                   17878: 
                   17879:        * tgetpass.c:
                   17880:        Avoid printing the prompt if we are already backgrounded. E.g. if
                   17881:        the user runs "sudo foo &" from the shell. In this case, the call
                   17882:        to tcsetattr() will cause SIGTTOU to be delivered.
                   17883:        [db2139a8d8b8]
                   17884: 
                   17885: 2007-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17886: 
                   17887:        * def_data.c, def_data.h, def_data.in:
                   17888:        Reorder things such that the definition of env_reset come right
                   17889:        before the env variable lists.
                   17890:        [e0d8e22a581a]
                   17891: 
                   17892:        * parse.h:
                   17893:        Shrink type and seqno in struct alias from int to u_short
                   17894:        [9425263dd565]
                   17895: 
                   17896:        * alias.c, match.c, parse.c, parse.h:
                   17897:        Add a sequence number in the aliases for loop detection. If we find
                   17898:        an alias with the seqno already set to the current (global) value we
                   17899:        know we've visited it before so ignore it.
                   17900:        [301a0548ffff]
                   17901: 
                   17902: 2007-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17903: 
                   17904:        * TODO, auth/pam.c, sudo.c, sudo.h:
                   17905:        PAM wants the full tty path so add user_ttypath which holds the full
                   17906:        path to the tty or is NULL if no tty was present.
                   17907:        [c7c1dd4b36c8]
                   17908: 
                   17909:        * auth/pam.c:
                   17910:        Set PAM_RHOST to work around a bug in Solaris 7 and lower that
                   17911:        results in a segv.
                   17912:        [3a8865b3a357]
                   17913: 
                   17914: 2007-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17915: 
                   17916:        * gram.c:
                   17917:        regen
                   17918:        [5647be127950]
                   17919: 
                   17920:        * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
                   17921:        parse.h, testsudoers.c, visudo.c:
                   17922:        rename lh_ -> tq_
                   17923:        [8f500c542c4a]
                   17924: 
                   17925: 2007-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17926: 
                   17927:        * alloc.c:
                   17928:        remove some useless casts
                   17929:        [409a448b23f5]
                   17930: 
                   17931:        * alloc.c:
                   17932:        pull in inttypes.h for SIZE_MAX; we avoid stdint.h since inttypes.h
                   17933:        predates the final C99 spec and the standard specifies that it shall
                   17934:        include stdint.h anyway
                   17935:        [ae478fdef61a]
                   17936: 
                   17937: 2007-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17938: 
                   17939:        * Makefile.in, alloca.c, configure.in:
                   17940:        Since we ship with a pre-generated parser there is no need to ship a
                   17941:        bogus alloca implementation.
                   17942:        [3f611a7cc0e5]
                   17943: 
                   17944:        * configure:
                   17945:        regen
                   17946:        [771eccf5269c]
                   17947: 
                   17948:        * configure.in:
                   17949:        remove initial setting of CHECKSIA, we require that it be unset if
                   17950:        not used
                   17951:        [a2e91adc5aa2]
                   17952: 
                   17953:        * Makefile.in:
                   17954:        add list.c to SRCS
                   17955:        [7db0e56cf5b9]
                   17956: 
                   17957:        * configure:
                   17958:        regen
                   17959:        [3716ec30172e]
                   17960: 
                   17961:        * configure.in:
                   17962:        only do SIA checks on Digital Unix
                   17963:        [6a96e1af2597]
                   17964: 
                   17965: 2007-09-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17966: 
                   17967:        * sudoers.cat, sudoers.man.in:
                   17968:        regen
                   17969:        [ac1dc29de72b]
                   17970: 
                   17971:        * ChangeLog, TODO:
                   17972:        sync
                   17973:        [781effce0a2d]
                   17974: 
                   17975:        * auth/kerb5.c:
                   17976:        Remove call to krb5_cc_register() as it is not needed for modern
                   17977:        kerb5.
                   17978:        [351b8b764f16]
                   17979: 
                   17980:        * configure:
                   17981:        regen
                   17982:        [ac21dbcc9c2c]
                   17983: 
                   17984:        * aclocal.m4, configure.in:
                   17985:        New method for setting the default authentication type and avoiding
                   17986:        conflicts in auth types.
                   17987:        [5fb15be11f78]
                   17988: 
                   17989:        * match.c, parse.c, testsudoers.c:
                   17990:        Each entry in a cmndlist now has an associated runaslist so no need
                   17991:        to keep track of the most recent non-NULL one.
                   17992:        [582e015786b0]
                   17993: 
                   17994: 2007-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   17995: 
                   17996:        * ldap.c:
                   17997:        back out partial ldaps support mistakenly committed
                   17998:        [357703e94b2d]
                   17999: 
                   18000:        * ldap.c:
                   18001:        Add support for unix groups and netgroups in sudoRunas
                   18002:        [2f04eb91c6d0]
                   18003: 
                   18004: 2007-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18005: 
                   18006:        * sudo_edit.c:
                   18007:        Fix sudoedit of a non-existent file. From Tilo Stritzky.
                   18008:        [a5488a03bddd]
                   18009: 
                   18010: 2007-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18011: 
                   18012:        * configure:
                   18013:        regen
                   18014:        [541177376ee1]
                   18015: 
                   18016:        * INSTALL:
                   18017:        update --passprompt escape info
                   18018:        [6d57db4cd538]
                   18019: 
                   18020:        * configure.in:
                   18021:        remove now-bogus comment and update copyright date
                   18022:        [6a4af45fa331]
                   18023: 
                   18024:        * configure.in:
                   18025:        Fix up use of with_passwd
                   18026:        [7c79d8640f77]
                   18027: 
                   18028:        * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
                   18029:        Update to autoconf-2.61 andf libtool-1.5.24
                   18030:        [045259b0b439]
                   18031: 
                   18032:        * Makefile.in:
                   18033:        "cmp -s" not just cmp Add @datarootdir@ to quiet autoconf-2.61
                   18034:        [f5b6a7afb817]
                   18035: 
                   18036: 2007-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18037: 
                   18038:        * gram.c:
                   18039:        regen
                   18040:        [b5b78e71d2cb]
                   18041: 
                   18042:        * gram.y:
                   18043:        move tags and runaslist propagation to be earlier
                   18044:        [94f7805f4489]
                   18045: 
                   18046:        * visudo.c:
                   18047:        If -f flag given use the permissions of the original file as a
                   18048:        template
                   18049:        [9303d22bddb0]
                   18050: 
                   18051:        * gram.y:
                   18052:        prevent a double free() when re-initing the parser
                   18053:        [5b3907c4de5a]
                   18054: 
                   18055: 2007-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18056: 
                   18057:        * configure:
                   18058:        regen
                   18059:        [49a90b19a17d]
                   18060: 
                   18061:        * aclocal.m4, alias.c, alloc.c, auth/API, auth/afs.c, auth/bsdauth.c,
                   18062:        auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/securid.c,
                   18063:        auth/securid5.c, auth/sia.c, auth/sudo_auth.h, config.h.in,
                   18064:        configure.in, env.c, ldap.c, list.c, list.h, memrchr.c, parse.c,
                   18065:        parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c, sudo.c,
                   18066:        sudo.h, testsudoers.c, visudo.c, zero_bytes.c:
                   18067:        Remove support for compilers that don't support void *
                   18068:        [35e1d01ae197]
                   18069: 
                   18070:        * gram.c:
                   18071:        regen
                   18072:        [70ce412a458a]
                   18073: 
                   18074:        * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h, match.c,
                   18075:        parse.c, parse.h, testsudoers.c, visudo.c:
                   18076:        Move list manipulation macros to list.h and create C versions of the
                   18077:        more complex ones in list.c. The names have been down-cased so they
                   18078:        appear more like normal functions.
                   18079:        [9cea0e281148]
                   18080: 
                   18081:        * Makefile.in:
                   18082:        Fix cmp command when regenerating parser. Make gram.o the first
                   18083:        dependency for all programs so gram.h will be generated before
                   18084:        anything that needs it.
                   18085:        [429ea065abf1]
                   18086: 
                   18087:        * gram.y, parse.h:
                   18088:        Convert NEW_DEFAULT anf NEW_MEMBER into static functions.
                   18089:        [2f3433833589]
                   18090: 
                   18091:        * match.c, parse.c, testsudoers.c:
                   18092:        Use LH_FOREACH_REV when checking permission and short-circuit on the
                   18093:        first non-UNSPEC hit we get for the command. This means that
                   18094:        instead of cycling through the all the parsed sudoers entries we
                   18095:        start at the end and work backwards and quit after the first
                   18096:        positive or negative match.
                   18097:        [881474532f3e]
                   18098: 
                   18099:        * gram.c:
                   18100:        regen
                   18101:        [9152a19d4188]
                   18102: 
                   18103:        * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
                   18104:        Change list head macros to take a pointer, not a struct.
                   18105:        [054f1dcce4cc]
                   18106: 
                   18107:        * gram.c:
                   18108:        regen
                   18109:        [be154aae6235]
                   18110: 
                   18111:        * gram.y:
                   18112:        Propagate the runasspec from one command to the next in a cmndspec.
                   18113:        [4957b1cb03a3]
                   18114: 
                   18115: 2007-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18116: 
                   18117:        * match.c:
                   18118:        Replace has_meta() with a macro that calls strpbrk().
                   18119:        [a2e58846a542]
                   18120: 
                   18121:        * regen
                   18122:        [5a932a5c9451]
                   18123: 
                   18124:        * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
                   18125:        testsudoers.c, visudo.c:
                   18126:        Use a list head struct when storing the semi-circular lists and
                   18127:        convert to tail queues in the process. This will allow us to
                   18128:        reverse foreach loops more easily and it makes it clearer which
                   18129:        functions expect a list as opposed to a single member.
                   18130: 
                   18131:        Add macros for manipulating lists. Some of these should become
                   18132:        functions.
                   18133: 
                   18134:        When freeing up a list, just pop off the last item in the queue
                   18135:        instead of going from head to tail. This is simpler since we don't
                   18136:        have to stash a pointer to the next member, we always just use the
                   18137:        last one in the queue until the queue is empty.
                   18138: 
                   18139:        Rename match functions that take a list to have list in the name.
                   18140:        Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
                   18141:        [7c37b271607a]
                   18142: 
                   18143:        * parse.c:
                   18144:        Fix pasto, append "!" not negated (which is an int) for sudo -l
                   18145:        output.
                   18146:        [93a444c3997f]
                   18147: 
                   18148:        * Makefile.in:
                   18149:        Remove the dependency of gram .h on gram.y, the .c dependency is
                   18150:        enough. Only move y.tab.h to gram.h if it is different; avoids
                   18151:        needless rebuilding.
                   18152:        [67bf4ea2a2e5]
                   18153: 
                   18154: 2007-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18155: 
                   18156:        * sudoers.pod:
                   18157:        Defaults lines may be associated with lists of users, hosts,
                   18158:        commands and runas users, not just single entries.
                   18159:        [795effacb6be]
                   18160: 
                   18161: 2007-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18162: 
                   18163:        * Makefile.in:
                   18164:        Revert the "cmp" portion of the last diff, it doesn't make sense.
                   18165:        [26f34bf4e2e3]
                   18166: 
                   18167:        * Makefile.in:
                   18168:        Remove *.lo for clean: When generating the parser, only move the
                   18169:        generated files into place if they differ from the existing ones.
                   18170:        [84673fea371b]
                   18171: 
                   18172: 2007-08-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18173: 
                   18174:        * toke.c, toke.l:
                   18175:        Replace IPV6 regexp with a much simpler (readable) one and add an
                   18176:        extra check when it matches to make sure we have a valid address.
                   18177:        [592e9f690556]
                   18178: 
                   18179:        * match.c:
                   18180:        Fix thinko introduced when merging IPV6 support.
                   18181:        [da38cd5eb8c7]
                   18182: 
                   18183: 2007-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18184: 
                   18185:        * HISTORY, LICENSE:
                   18186:        regen
                   18187:        [0d7b27b90634]
                   18188: 
                   18189:        * license.pod:
                   18190:        add 2007
                   18191:        [510e5048ae1a]
                   18192: 
                   18193:        * UPGRADE:
                   18194:        mention #uid vs. comment pitfall
                   18195:        [4d2861898bcc]
                   18196: 
                   18197:        * acsite.m4:
                   18198:        Merge in a patch from the libtool cvs that fixes a problem with the
                   18199:        latest autoconf. From Stepan Kasal.
                   18200:        [0c279ae7df3e]
                   18201: 
                   18202:        * parse.h:
                   18203:        Back out he XOR swap trick, it is slower than a temp variable on
                   18204:        modern CPUs.
                   18205:        [91c4b024e317]
                   18206: 
                   18207:        * gram.c:
                   18208:        regen
                   18209:        [cb6d4106fb74]
                   18210: 
                   18211:        * gram.y, parse.h:
                   18212:        Convert the tail queue to a semi-circle queue and use the XOR swap
                   18213:        trick to swap the prev pointers during append.
                   18214:        [8bf4d9fbee58]
                   18215: 
                   18216: 2007-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18217: 
                   18218:        * parse.h:
                   18219:        remove useless statement
                   18220:        [421ec1dd73e6]
                   18221: 
                   18222:        * toke.c, toke.l:
                   18223:        Refactor #include parsing into a separate function and return
                   18224:        unparsed chars (such as newline or comment) back to the lexer.
                   18225:        [64166917aa3d]
                   18226: 
                   18227: 2007-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18228: 
                   18229:        * WHATSNEW:
                   18230:        mention better uid support
                   18231:        [56f510e7f2ec]
                   18232: 
                   18233:        * sudoers.pod:
                   18234:        Users may now consist of a uid.
                   18235:        [5fd31b2c55ed]
                   18236: 
                   18237:        * gram.c, gram.h, toke.c:
                   18238:        regen
                   18239:        [599e58af6dc1]
                   18240: 
                   18241:        * parse.c:
                   18242:        Use lbuf_append_quoted() for sudo -l output to quote characters that
                   18243:        would require quoting in sudoers.
                   18244:        [3132d05c990a]
                   18245: 
                   18246:        * lbuf.c, lbuf.h:
                   18247:        Add lbuf_append_quoted() which takes a set of characters which
                   18248:        should be quoted with a backslash when displayed.
                   18249:        [ab09bebb1d65]
                   18250: 
                   18251:        * toke.l:
                   18252:        Require that the first character after a comment not be a digit or a
                   18253:        dash. This allows us to remove the GOTRUNAS state and treat
                   18254:        uid/gids similar to other words. It also means that we can now
                   18255:        specify uids in User_Lists and a User_Spec may now contain a uid.
                   18256:        [461fe01f8392]
                   18257: 
                   18258:        * gram.y, toke.l:
                   18259:        Replace RUNAS token with '(' and ')' tokens to make the runas
                   18260:        portion of the grammar more natural.
                   18261:        [e0c383b4684d]
                   18262: 
                   18263:        * BUGS:
                   18264:        The BUGS file is history
                   18265:        [4d9a809585c7]
                   18266: 
                   18267:        * Makefile.in, README:
                   18268:        The BUGS file is history
                   18269:        [d9500e261172]
                   18270: 
                   18271: 2007-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18272: 
                   18273:        * toke.c, toke.l:
                   18274:        Allow comments after a RunasAlias as long as the character after the
                   18275:        pound sign isn't a digit or a dash.
                   18276:        [d7f3bd94eeda]
                   18277: 
                   18278:        * WHATSNEW:
                   18279:        Glob support was back-ported to 1.6.9
                   18280:        [d1d5cfd46228]
                   18281: 
                   18282: 2007-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18283: 
                   18284:        * Makefile.in:
                   18285:        remove sudo_usage.h in distclean
                   18286:        [df05ce9c4127]
                   18287: 
                   18288:        * parse.c:
                   18289:        If a Defaults value contains a blank, double-quote the string.
                   18290:        [9057a910daad]
                   18291: 
                   18292:        * toke.c, toke.l:
                   18293:        Properly deal with Defaults double-quoted strings that span multiple
                   18294:        lines using the line continuation char. Previously, the entire
                   18295:        thing, including the continuation char, newline, and spaces was
                   18296:        stored as-is.
                   18297:        [4a4e8eacefe6]
                   18298: 
                   18299:        * sudo.c:
                   18300:        Be consistent when using single quotes and backticks.
                   18301:        [d010b83a0fa1]
                   18302: 
                   18303: 2007-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18304: 
                   18305:        * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
                   18306:        sudo.c, sudo_usage.h.in:
                   18307:        Add new linebuf code to do appends of dynamically allocated strings
                   18308:        and word-wrapped output. Currently used for sudo's usage() and sudo
                   18309:        -l output. Sudo usage strings are now in sudo_usage.h which is
                   18310:        generated at configure time.
                   18311:        [4dfd0ee8d961]
                   18312: 
                   18313: 2007-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18314: 
                   18315:        * parse.c, sudo.c, sudo.h:
                   18316:        Fix line wrapping in usage() and use the actual tty width instead of
                   18317:        assuming 80.
                   18318:        [700eab37c5a6]
                   18319: 
                   18320: 2007-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18321: 
                   18322:        * history.pod:
                   18323:        some more info
                   18324:        [8140112a8ae1]
                   18325: 
                   18326:        * history.pod:
                   18327:        Mentioned Chris Jepeway's parser and also the new one that is in
                   18328:        sudo 1.7.
                   18329:        [2132d00f0597]
                   18330: 
                   18331: 2007-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18332: 
                   18333:        * sudo.pod, visudo.pod:
                   18334:        For the options list, add flag args where appropriate and increase
                   18335:        the indent level so there is room for them.
                   18336:        [2b60fb572e12]
                   18337: 
                   18338: 2007-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18339: 
                   18340:        * parse.c:
                   18341:        Fix some spacing in "sudo -l" and add a comment about some bogosity
                   18342:        in the line wrapping.
                   18343:        [b59b056f5ee2]
                   18344: 
                   18345:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   18346:        visudo.man.in:
                   18347:        regen
                   18348:        [5fb719f18ebc]
                   18349: 
                   18350:        * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
                   18351:        def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
                   18352:        parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
                   18353:        testsudoers.c, toke.c, toke.l:
                   18354:        Remove monitor support until there is a versino of systrace that
                   18355:        uses a lookaside buffer (or we have a better mechanism to use).
                   18356:        [61ff76878e4a]
                   18357: 
                   18358:        * config.h.in, configure, configure.in, sudo.c:
                   18359:        use getaddrinfo() instead of gethostbyname() if it is available
                   18360:        [cc33c136aa6a]
                   18361: 
                   18362: 2007-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18363: 
                   18364:        * parse.c, sudo.c:
                   18365:        Deal with OSes where sizeof(gid_t) < sizeof(int).
                   18366:        [130a89cbdfba]
                   18367: 
                   18368:        * interfaces.c:
                   18369:        repair non-getifaddrs() code after ipv6 integration
                   18370:        [7ae7a89e2236]
                   18371: 
                   18372:        * sudo.c:
                   18373:        If we can open sudoers but fail to read the first byte, close the
                   18374:        file stream before trying again.
                   18375:        [6f31272fae7b]
                   18376: 
                   18377: 2007-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18378: 
                   18379:        * toke.c:
                   18380:        regen
                   18381:        [4d7afe0aa6fa]
                   18382: 
                   18383:        * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
                   18384:        Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
                   18385:        [4e6ff2965a42]
                   18386: 
                   18387:        * sudo.pod, sudoers.pod, visudo.pod:
                   18388:        Add some missing markup Update copyright
                   18389:        [7e6d3c686b5e]
                   18390: 
                   18391: 2007-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18392: 
                   18393:        * configure, configure.in:
                   18394:        fix sudo_noexec extension which got broken in the libtool update
                   18395:        [3a5b447df861]
                   18396: 
                   18397: 2007-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18398: 
                   18399:        * Makefile.in:
                   18400:        explicitly specify -Tascii to nroff
                   18401:        [45c8da4cbefe]
                   18402: 
                   18403: 2007-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18404: 
                   18405:        * logging.c:
                   18406:        remove an ANSI-ism that crept in
                   18407:        [29086f87b2ca]
                   18408: 
                   18409: 2007-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18410: 
                   18411:        * sudo.pod:
                   18412:        Adjust list indents Prevent -- from being turned into an em dash Use
                   18413:        a list for the environment instead of a literal paragraph
                   18414:        [c3abcd8f76f4]
                   18415: 
                   18416:        * visudo.pod:
                   18417:        Use a list for the environment instead of an indented literal
                   18418:        paragraph.
                   18419:        [0ffcfcb7349f]
                   18420: 
                   18421:        * sudoers.pod:
                   18422:        Adjust list indentation
                   18423:        [615c89e3123a]
                   18424: 
                   18425:        * license.pod:
                   18426:        add =head3
                   18427:        [8b2e0d38c0bd]
                   18428: 
                   18429: 2007-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18430: 
                   18431:        * sudo.pod:
                   18432:        mention that when specifying a uid for the -u option the shell may
                   18433:        require that the # be escaped
                   18434:        [3e3a17bff150]
                   18435: 
                   18436: 2007-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18437: 
                   18438:        * match.c:
                   18439:        Fix off by one in group matching.
                   18440:        [b529602b7fba]
                   18441: 
                   18442: 2007-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18443: 
                   18444:        * env.c:
                   18445:        Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From David Krause.
                   18446:        [ffbf8907c6e7]
                   18447: 
                   18448: 2007-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18449: 
                   18450:        * configure, configure.in:
                   18451:        Add missing define of HAVE_GSS_KRB5_CCACHE_NAME for the
                   18452:        -lgssapi_krb5 case.
                   18453:        [2b85a89c2252]
                   18454: 
                   18455:        * aclocal.m4, configure, configure.in:
                   18456:        Fix link tests such that new gcc doesn't optimize away the test.
                   18457:        [83484ec95cba]
                   18458: 
                   18459: 2007-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18460: 
                   18461:        * sudo.pod, sudoers.pod, visudo.pod:
                   18462:        add missing over/back
                   18463:        [251a12c89b91]
                   18464: 
                   18465:        * sudo.pod, sudoers.pod, visudo.pod:
                   18466:        Change FILES section to use =item
                   18467:        [60b9efc3a0b2]
                   18468: 
                   18469:        * env.c:
                   18470:        Add back allocation of the env struct in rebuild_env but save a copy
                   18471:        of the old pointer and free it before returning.
                   18472:        [1100cd4fa997]
                   18473: 
                   18474:        * env.c:
                   18475:        Don't init the private environment in rebuild_env() since it may
                   18476:        have already been done implicitly sudo_setenv/sudo_unsetenv.
                   18477: 
                   18478:        Multiply length by sizeof(char *) in memcpy/memmove when copying the
                   18479:        environment so we copy the full thing.
                   18480: 
                   18481:        Add missing set of parens so we deref the right pointer in
                   18482:        sudo_unsetenv when searching for a matching variable.
                   18483:        [9086a8f756b1]
                   18484: 
                   18485: 2007-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18486: 
                   18487:        * sudo.pod, sudoers.pod, visudo.pod:
                   18488:        Use file markup for paths in the FILES section
                   18489:        [940d99f731f2]
                   18490: 
                   18491:        * sudo.pod, sudoers.pod, visudo.pod:
                   18492:        Don't capitalize sudo/visudo
                   18493:        [f067a455d44b]
                   18494: 
                   18495:        * sudoers.pod:
                   18496:        Sort sudoers options; based on a diff from Igor Sobrado.
                   18497:        [a9b9befe85ac]
                   18498: 
                   18499: 2007-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18500: 
                   18501:        * sudo.pod, sudoers.pod, visudo.pod:
                   18502:        Use 8 and 5 instead of @mansectsu@ and @mansectform@ since the
                   18503:        latter confuses pod2man. The Makefile rules for the .man.in file
                   18504:        will add @mansectsu@ and @mansectform@ back in after pod2man is done
                   18505:        anyway.
                   18506:        [b50ea0db727c]
                   18507: 
                   18508: 2007-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18509: 
                   18510:        * LICENSE, Makefile.in, license.pod:
                   18511:        Move license info to pod format
                   18512:        [25bdd82e592b]
                   18513: 
                   18514:        * configure, configure.in, sudoers.pod:
                   18515:        Substitute value of path_info into sudoers man page.
                   18516:        [9ba661a82798]
                   18517: 
                   18518:        * WHATSNEW:
                   18519:        remove features that were back-ported to 1.6.9
                   18520:        [e76d756cbe65]
                   18521: 
                   18522:        * sudo.c, sudo.pod, visudo.c, visudo.pod:
                   18523:        Sort SYNOPSIS and sync usage. From Igor Sobrado.
                   18524:        [4970386c9e54]
                   18525: 
                   18526:        * env.c:
                   18527:        Only need sudo_setenv/sudo_unsetenv if we are going to use
                   18528:        ldap_sasl_interactive_bind_s() but don't have
                   18529:        gss_krb5_ccache_name().
                   18530:        [f1a73d8b35c5]
                   18531: 
                   18532:        * ChangeLog:
                   18533:        rebuild without branch info
                   18534:        [5d5a33494677]
                   18535: 
                   18536:        * Makefile.in:
                   18537:        Add ChangeLog target
                   18538:        [a702034fdd89]
                   18539: 
                   18540:        * auth/pam.c:
                   18541:        Run cleanup code if the user hits ^C at the password prompt.
                   18542:        [9cf87768e921]
                   18543: 
                   18544:        * auth/pam.c:
                   18545:        Some versions of pam_lastlog have a bug that will cause a crash if
                   18546:        PAM_TTY is not set so if there is no tty, set PAM_TTY to the empty
                   18547:        string.
                   18548:        [5b63f6c88866]
                   18549: 
                   18550: 2007-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18551: 
                   18552:        * Makefile.in:
                   18553:        ChageLog not Changelog
                   18554:        [1243d8473ceb]
                   18555: 
                   18556:        * ChangeLog:
                   18557:        sync
                   18558:        [d887df98c6b0]
                   18559: 
                   18560:        * Makefile.in:
                   18561:        CHANGE -> Changelog
                   18562:        [917738df30dd]
                   18563: 
                   18564:        * TODO:
                   18565:        sync
                   18566:        [cd382f7d1948]
                   18567: 
                   18568: 2007-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18569: 
                   18570:        * config.h.in, configure, configure.in, ldap.c:
                   18571:        Add configure hooks for gss_krb5_ccache_name() and the gssapi
                   18572:        headers.
                   18573:        [139606209991]
                   18574: 
                   18575: 2007-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18576: 
                   18577:        * env.c, sudo.c:
                   18578:        rebuild_env() and insert_env_vars() no longer return environment
                   18579:        pointer, they set environ directly.
                   18580: 
                   18581:        No longer need to pass around an envp pointer since we just operate
                   18582:        on environ now.
                   18583: 
                   18584:        Add dosync argument to insert_env() that indicates whether it should
                   18585:        reset environ when realloc()ing env.envp.
                   18586: 
                   18587:        Use an initial size of 128 for the environment.
                   18588:        [4735fd5fddb8]
                   18589: 
                   18590:        * env.c:
                   18591:        Split sudo_setenv() into an external version and a version only for
                   18592:        use by rebuild_env().
                   18593:        [fda7d655adb1]
                   18594: 
                   18595: 2007-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18596: 
                   18597:        * ldap.c:
                   18598:        Add support for using gss_krb5_ccache_name() instead of setting
                   18599:        KRB5CCNAME. Also use sudo_unsetenv() in the non-
                   18600:        gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
                   18601:        original environment. TODO: configure setup for
                   18602:        gss_krb5_ccache_name()
                   18603:        [fcafa5a49caf]
                   18604: 
                   18605:        * README.LDAP:
                   18606:        add krb5_ccname
                   18607:        [fceb8f883886]
                   18608: 
                   18609:        * README.LDAP, ldap.c:
                   18610:        Add support for sasl_secprops in ldap.conf
                   18611:        [1f06f4bf7347]
                   18612: 
                   18613:        * env.c, sudo.h:
                   18614:        Add sudo_unsetenv() and refactor private env syncing code into
                   18615:        sync_env().
                   18616:        [045ecb3fd22b]
                   18617: 
                   18618:        * README.LDAP, ldap.c:
                   18619:        The ldap.conf variable is sasl_auth_id not sasl_authid.
                   18620:        [a5f98491311b]
                   18621: 
                   18622: 2007-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18623: 
                   18624:        * ldap.c, sudo.c, sudo.h:
                   18625:        Add support for krb5_ccname in ldap.conf. If specified, it will
                   18626:        override the default value of KRB5CCNAME in the environment for the
                   18627:        duration of the call to ldap_sasl_interactive_bind_s().
                   18628:        [b08a10c3045b]
                   18629: 
                   18630:        * env.c, sudo.h:
                   18631:        Remove format_env() Add sudo_setenv() to replace most format_env() +
                   18632:        insert_env() combinations. insert_env() no longer takes a struct
                   18633:        environment *
                   18634:        [131da52f43f3]
                   18635: 
                   18636:        * ldap.c:
                   18637:        Fix use_sasl vs. rootuse_sasl logic.
                   18638:        [0c0417b6918c]
                   18639: 
                   18640:        * README.LDAP, config.h.in, configure, configure.in, ldap.c:
                   18641:        Add support for SASL auth when connecting to an LDAP server. Adapted
                   18642:        from a diff by Tom McLaughlin.
                   18643:        [a6285f1356ea]
                   18644: 
                   18645: 2007-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18646: 
                   18647:        * configure, configure.in:
                   18648:        Only enable AIX or BSD auth if no other exclusive auth method has
                   18649:        been chosen. Allows people to e.g., use PAM on AIX without adding
                   18650:        --without-aixauth. A better solution is needed to deal with default
                   18651:        authentication since if a non-exclusive method is chosen we will
                   18652:        still get an error.
                   18653:        [83f7afdc0ec3]
                   18654: 
                   18655: 2007-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18656: 
                   18657:        * HISTORY, Makefile.in, history.pod:
                   18658:        Generate HISTORY from history.pod (which is also used for web pages)
                   18659:        [60bcd5164931]
                   18660: 
                   18661: 2007-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18662: 
                   18663:        * sudo.man.in, sudoers.man.in:
                   18664:        regen
                   18665:        [63956a366191]
                   18666: 
                   18667:        * sudo.pod:
                   18668:        Better explanation of environment handling in the sudo man page.
                   18669:        [6c247742f7ee]
                   18670: 
                   18671:        * env.c, sudo.c:
                   18672:        Defer setting user-specified env vars until after authentication.
                   18673:        [4750b79323ee]
                   18674: 
                   18675:        * env.c:
                   18676:        honor def_default_path for PATH set on the command line
                   18677:        [6db31d9b6d65]
                   18678: 
                   18679:        * env.c, sudo.c, sudo.pod, sudoers.pod:
                   18680:        Allow user to set environment variables on the command line as long
                   18681:        as they are allowed by env_keep and env_check. Ie: apply the same
                   18682:        restrictions as normal environment variables. TODO: deal with
                   18683:        secure_path
                   18684:        [26c0da3840cf]
                   18685: 
                   18686: 2007-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18687: 
                   18688:        * sudo.c, sudo_edit.c:
                   18689:        Call rebuild_env() in call cases. Pass original envp to sudo_edit().
                   18690:        Don't allow -E or env var setting in sudoedit mode. More accurate
                   18691:        usage() when called as sudoedit.
                   18692:        [a4af20658361]
                   18693: 
                   18694:        * ldap.c:
                   18695:        warn -> warning
                   18696:        [d87d1192b048]
                   18697: 
                   18698:        * sudo.pod:
                   18699:        add -c option to sudoedit synopsis
                   18700:        [15b596a7e2db]
                   18701: 
                   18702:        * TODO:
                   18703:        udpate to reality
                   18704:        [e2f8fde89db1]
                   18705: 
                   18706:        * parse.c:
                   18707:        Use ALLOW/DENY instead of TRUE/FALSE when dealing with the return
                   18708:        value from {user,host,runas,cmnd}_matches(). Rename *matches
                   18709:        variables -> *match. Purely cosmetic.
                   18710:        [e54a44c00a88]
                   18711: 
                   18712:        * parse.c:
                   18713:        Move setting of FLAG_NO_CHECK into the if(pwflag) block. No change
                   18714:        in behavior.
                   18715:        [c6272b4f2127]
                   18716: 
                   18717:        * sudoers:
                   18718:        add SETENV tag
                   18719:        [3a3066bb6788]
                   18720: 
                   18721: 2007-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18722: 
                   18723:        * parse.c:
                   18724:        Make pwcheck local to the pwflag block. Use pwcheck even if user
                   18725:        didn't match since Defaults options may still apply.
                   18726:        [45da9efbbafd]
                   18727: 
                   18728:        * check.c, sudo.c:
                   18729:        Do not update timestamp if user not validated by sudoers.
                   18730:        [a4a9d4364827]
                   18731: 
                   18732:        * set_perms.c:
                   18733:        for PERM_RUNAS, set the egid to the runas user's gid and restore to
                   18734:        the user's original in PERM_ROOT
                   18735:        [1514bfb32847]
                   18736: 
                   18737:        * logging.c, mon_systrace.c, set_perms.c, sudo.h:
                   18738:        PERM_FULL_ROOT is now no different than PERM_ROOT so remove
                   18739:        PERM_FULL_ROOT
                   18740:        [b9d047a3178c]
                   18741: 
                   18742:        * check.c:
                   18743:        don't check timestamp mtime if we are just going to remove it
                   18744:        [5d2470bc6cbd]
                   18745: 
                   18746:        * sudoers.pod:
                   18747:        Move sudoers defaults parameters into their own section.
                   18748:        [54701fbc0ff3]
                   18749: 
                   18750:        * testsudoers.c:
                   18751:        Reduce a level of indent by a few placed continue statements.
                   18752:        [5d5a9838c8ef]
                   18753: 
                   18754:        * parse.c:
                   18755:        Make matching but negated commands/hosts/runas entries override a
                   18756:        previous match as expected. Also reduce some levels of indent by a
                   18757:        few placed continue statements.
                   18758:        [dd59fa4b91a1]
                   18759: 
                   18760: 2007-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18761: 
                   18762:        * parse.c:
                   18763:        Print default runas in "sudo -l" if sudoers don't specify one.
                   18764:        [07d408c400bd]
                   18765: 
                   18766:        * match.c:
                   18767:        Less hacky way of testing whether the domain was set.
                   18768:        [a537059776e5]
                   18769: 
                   18770: 2007-07-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18771: 
                   18772:        * INSTALL:
                   18773:        Mention pam-devel and openldap-devel for Linux
                   18774:        [9e708c54ecc3]
                   18775: 
                   18776: 2007-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18777: 
                   18778:        * README.LDAP:
                   18779:        or vs. are
                   18780:        [abe8c0f3a410]
                   18781: 
                   18782: 2007-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18783: 
                   18784:        * sudo.c:
                   18785:        fix typo in Solaris project support
                   18786:        [2ffeb2d80959]
                   18787: 
                   18788:        * HISTORY:
                   18789:        update
                   18790:        [df162b36f120]
                   18791: 
                   18792:        * sudo.c:
                   18793:        Make -- on the command line match the manual page. The implied shell
                   18794:        case has been simplified as a result.
                   18795:        [cd217a1f6694]
                   18796: 
                   18797: 2007-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18798: 
                   18799:        * sudoers2ldif:
                   18800:        add simplistic support for sudoRunas; note that if a sudoers entry
                   18801:        contains multiple Runas users, all will apply to the sudoRole
                   18802:        [65b11421f5c8]
                   18803: 
                   18804:        * sudoers2ldif:
                   18805:        honor SETENV and NOSETENV tags
                   18806:        [2c0d5ba7a09b]
                   18807: 
                   18808: 2007-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18809: 
                   18810:        * mon_systrace.c:
                   18811:        Redo setting of user_args. We now build up a private copy of argv
                   18812:        first and then replace the NULs?with spaces.
                   18813:        [ccbba72ea112]
                   18814: 
                   18815:        * mon_systrace.c:
                   18816:        getcwd() returns NULL on failure, not 0 on success
                   18817:        [88cd9e66e530]
                   18818: 
                   18819:        * mon_systrace.c:
                   18820:        allow chunksiz to reach 1 before erroring out
                   18821:        [619d68f14964]
                   18822: 
                   18823:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   18824:        visudo.man.in:
                   18825:        regen
                   18826:        [8db512d3caf0]
                   18827: 
                   18828: 2007-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18829: 
                   18830:        * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h, gram.y,
                   18831:        logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod, sudoers.pod,
                   18832:        toke.c, toke.l:
                   18833:        Add support for setting environment variables on the command line.
                   18834:        This is only allowed if the setenv sudoers options is enabled or if
                   18835:        the command is prefixed with the SETENV tag.
                   18836:        [5744caebd969]
                   18837: 
                   18838:        * README.LDAP:
                   18839:        replace Aaron's email address with the sudo-workers list
                   18840:        [2ffce5f9afc0]
                   18841: 
                   18842:        * configure:
                   18843:        regen
                   18844:        [8013dff82c0c]
                   18845: 
                   18846: 2007-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18847: 
                   18848:        * schema.OpenLDAP, schema.iPlanet:
                   18849:        Break schema out into separate files.
                   18850:        [15e598e4c60b]
                   18851: 
                   18852:        * Makefile.in, README.LDAP:
                   18853:        Break schema out into separate files.
                   18854:        [1a53966ca1fa]
                   18855: 
                   18856: 2007-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18857: 
                   18858:        * auth/aix_auth.c:
                   18859:        free message if set by authenticate()
                   18860:        [849c220c1236]
                   18861: 
                   18862:        * match.c:
                   18863:        deal with NULL gr_mem
                   18864:        [49e4d74f0bbe]
                   18865: 
                   18866: 2007-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18867: 
                   18868:        * config.h.in:
                   18869:        regen
                   18870:        [fead999ad3e9]
                   18871: 
                   18872:        * configure.in:
                   18873:        add template for HAVE_PROJECT_H
                   18874:        [e6c42c2eaad1]
                   18875: 
                   18876:        * closefrom.c:
                   18877:        include fcntl.h
                   18878:        [54d98b382f03]
                   18879: 
                   18880: 2007-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18881: 
                   18882:        * INSTALL:
                   18883:        mention --with-project
                   18884:        [d3ea3baad7c5]
                   18885: 
                   18886:        * config.h.in, configure.in, sudo.c:
                   18887:        Add Solaris 10 "project" support. From Michael Brantley.
                   18888:        [f14f3c8c6554]
                   18889: 
                   18890:        * sudoers.pod:
                   18891:        fix typo
                   18892:        [50db81a19787]
                   18893: 
                   18894:        * configure:
                   18895:        regen
                   18896:        [ea71afd3e564]
                   18897: 
                   18898:        * configure.in:
                   18899:        Fix preservation of LDFLAGS in the LDAP case.
                   18900:        [40a3a47e8059]
                   18901: 
                   18902:        * memrchr.c:
                   18903:        Remove dependecy on NULL
                   18904:        [c957ae5e1733]
                   18905: 
                   18906:        * configure:
                   18907:        regen
                   18908:        [4955ce0c6912]
                   18909: 
                   18910:        * aclocal.m4, configure.in:
                   18911:        Can't use the regular autoconf fnmatch() check since we need
                   18912:        FNM_CASEFOLD so go back to our custom one.
                   18913:        [f10d76237486]
                   18914: 
                   18915:        * env.c:
                   18916:        Fix preserving of variables in env_keep.
                   18917:        [d040049d6b84]
                   18918: 
                   18919:        * env.c:
                   18920:        add XAUTHORIZATION
                   18921:        [0d589a5fe015]
                   18922: 
                   18923:        * UPGRADE:
                   18924:        expand upon env resetting and mention that it began in 1.6.9 not
                   18925:        1.7.
                   18926:        [dba251655c76]
                   18927: 
                   18928:        * sudoers.pod:
                   18929:        Update descriptions of env_keep and env_check to match current
                   18930:        reality.
                   18931:        [dba77357954b]
                   18932: 
                   18933: 2007-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18934: 
                   18935:        * env.c:
                   18936:        Add LINGUAS to initial_checkenv_table. Add COLORS, HOSTNAME,
                   18937:        LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to intial_keepenv_table.
                   18938:        [eec4632bd190]
                   18939: 
                   18940:        * env.c, logging.c:
                   18941:        Treat USERNAME environemnt variable like LOGNAME/USER
                   18942:        [09f52dcfd70c]
                   18943: 
                   18944:        * env.c:
                   18945:        Don't need to populate keepenv table with the contents of the
                   18946:        checkenv table.
                   18947:        [527a14afd973]
                   18948: 
                   18949:        * sudo.c:
                   18950:        Don't force sudo into the C locale.
                   18951:        [8a5bd301ef96]
                   18952: 
                   18953:        * env.c:
                   18954:        Make env_check apply when env_reset it true. Environment variables
                   18955:        are passed through unless they contain '/' or '%'. There is no need
                   18956:        to have a variable in both env_check and env_keep.
                   18957:        [840c802721e4]
                   18958: 
                   18959: 2007-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18960: 
                   18961:        * visudo.c:
                   18962:        Remove an duplicate lock_file() call and add a comment.
                   18963:        [5af9dcdf0eb6]
                   18964: 
                   18965:        * UPGRADE:
                   18966:        Add sudo 1.6.9 upgrade note.
                   18967:        [1585149f2914]
                   18968: 
                   18969: 2007-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18970: 
                   18971:        * interfaces.c:
                   18972:        Solaris will return EINVAL if the buffer used in SIOCGIFCONF is too
                   18973:        small. From Klaus Wagner.
                   18974:        [d6899fc44f77]
                   18975: 
                   18976:        * logging.c, sudo.h:
                   18977:        Redo the long syslog line splitting based on a patch from Eygene
                   18978:        Ryabinkin. Include memrchr() for systems without it.
                   18979:        [66a50e8d553a]
                   18980: 
                   18981:        * memrchr.c:
                   18982:        Redo the long syslog line splitting based on a patch from Eygene
                   18983:        Ryabinkin. Include memrchr() for systems without it.
                   18984:        [2f6702b7d41b]
                   18985: 
                   18986:        * Makefile.in, config.h.in, configure, configure.in:
                   18987:        Redo the long syslog line splitting based on a patch from Eygene
                   18988:        Ryabinkin. Include memrchr() for systems without it.
                   18989:        [407a46190921]
                   18990: 
                   18991:        * configure.in:
                   18992:        Since we need to be able to convert timespec to timeval for utimes()
                   18993:        the last 3 digits in the tv_nsec are not significant. This makes the
                   18994:        sudoedit file date comparison work again.
                   18995:        [9d0258849fa9]
                   18996: 
                   18997: 2007-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   18998: 
                   18999:        * aclocal.m4, configure, configure.in:
                   19000:        Add SUDO_ADD_AUTH macro to deal with adding things to AUTH_OBJS.
                   19001:        This deals with exclusive authentication methods in a simple way.
                   19002:        [7d70072c0f35]
                   19003: 
                   19004: 2007-06-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19005: 
                   19006:        * LICENSE:
                   19007:        mkstemp.c is BSD code too.
                   19008:        [29e236d98162]
                   19009: 
                   19010:        * sudo.pod, sudoers.pod, visudo.pod:
                   19011:        No commercial support for now.
                   19012:        [7c76b3e192dd]
                   19013: 
                   19014: 2007-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19015: 
                   19016:        * sudo.c:
                   19017:        cleanenv() is no more.
                   19018:        [518080514408]
                   19019: 
                   19020: 2007-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19021: 
                   19022:        * ChangeLog:
                   19023:        Display branch info in Changelog
                   19024:        [44e3b27427c7]
                   19025: 
                   19026:        * utimes.c:
                   19027:        Include config.h early so we have it for TIME_WITH_SYS_TIME
                   19028:        [4bf1a00d0703]
                   19029: 
                   19030:        * ChangeLog:
                   19031:        Fix Changelog generation and update.
                   19032:        [6e960dbcbece]
                   19033: 
                   19034: 2007-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19035: 
                   19036:        * closefrom.c:
                   19037:        Use /proc/self/fd instead of /proc/$$/fd
                   19038: 
                   19039:        Move old-style fd closing into closefrom_fallback() and call that if
                   19040:        /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
                   19041:        [faa7e4810758]
                   19042: 
                   19043:        * auth/kerb5.c, config.h.in, configure.in:
                   19044:        o use krb5_verify_user() if available instead of doing it by hand o
                   19045:        use krb5_init_secure_context() if we have it o pass an encryption
                   19046:        type of 0 to krb5_kt_read_service_key() instead of
                   19047:        ENCTYPE_DES_CBC_MD5 to let kerberos choose.
                   19048:        [df7acf72bd7c]
                   19049: 
                   19050:        * env.c:
                   19051:        Check TERM and COLORTERM for '%' and '/' characters. From Debian.
                   19052:        [f92d05197e40]
                   19053: 
                   19054:        * configure.in:
                   19055:        Fix closefrom() substitution in the Makefile
                   19056:        [b642b13fcc5c]
                   19057: 
                   19058:        * TROUBLESHOOTING:
                   19059:        Mention alternate sudo pronunciation.
                   19060:        [7c71dc73409f]
                   19061: 
                   19062: 2007-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19063: 
                   19064:        * env.c:
                   19065:        Remove KRB5_KTNAME from environment. Allow COLORTERM.
                   19066:        [70f35a79f780]
                   19067: 
                   19068:        * auth/kerb5.c:
                   19069:        If we cannot get a valid service key using the default keytab it is
                   19070:        a fatal error. Fixes a bug where sudo could be tricked into
                   19071:        allowing access when it should not by a fake KDC. From Thor Lancelot
                   19072:        Simon.
                   19073:        [a3ae6a47cb23]
                   19074: 
                   19075: 2007-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19076: 
                   19077:        * aclocal.m4, configure, configure.in:
                   19078:        Update long long checks to use AC_CHECK_TYPES and to cache values.
                   19079:        [047318eaaeb2]
                   19080: 
                   19081:        * aclocal.m4, configure.in:
                   19082:        Use AC_FUNC_FNMATCH instead of a homebrew fnmatch checker. We can't
                   19083:        use AC_REPLACE_FNMATCH since that assumes replacing with GNU
                   19084:        fnmatch.
                   19085:        [80513a1003ea]
                   19086: 
                   19087: 2007-05-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19088: 
                   19089:        * configure, configure.in:
                   19090:        Add closefrom() to LIB_OBJS not SUDO_OBJS if it is missing since we
                   19091:        need it for visudo now too.
                   19092:        [50837c7c2b5e]
                   19093: 
                   19094: 2007-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19095: 
                   19096:        * sudoers.pod:
                   19097:        Attempt to clarify the bit talking about network numbers w/o
                   19098:        netmasks.
                   19099:        [211e68c1d034]
                   19100: 
                   19101:        * sudo.pod:
                   19102:        Clarify timestamp dir ownership sentence.
                   19103:        [9178f132c7f7]
                   19104: 
                   19105: 2007-04-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19106: 
                   19107:        * auth/pam.c:
                   19108:        Linux PAM now defines __LINUX_PAM__, not __LIBPAM_VERSION. From
                   19109:        Dmitry V. Levin.
                   19110:        [81fce91667bc]
                   19111: 
                   19112: 2007-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19113: 
                   19114:        * sudo.c:
                   19115:        -i is also one of the mutually exclusive options to list it in the
                   19116:        warning message. Noted by Chris Pepper.
                   19117:        [7da73fb248e9]
                   19118: 
                   19119: 2007-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19120: 
                   19121:        * visudo.pod:
                   19122:        The sudoers variable is env_editor, not enveditor. From Jean-
                   19123:        Francois Saucier.
                   19124:        [2a86ec09a6db]
                   19125: 
                   19126: 2007-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19127: 
                   19128:        * redblack.c:
                   19129:        I tracked down the original author so credit him and include his
                   19130:        license info.
                   19131:        [3733553a1bba]
                   19132: 
                   19133: 2007-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19134: 
                   19135:        * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
                   19136:        sudoers.pod:
                   19137:        Fix typos; from Jason McIntyre.
                   19138:        [1ee4ce2512f2]
                   19139: 
                   19140:        * logging.c:
                   19141:        Restore signal mask before calling reapchild(). Fixes a possible
                   19142:        race condition that could prevent sudo from properly waiting for the
                   19143:        child.
                   19144:        [9ee4192385dc]
                   19145: 
                   19146: 2007-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19147: 
                   19148:        * pwutil.c:
                   19149:        Don't declare pw_free() if we are not going to use it.
                   19150:        [adb79a4289ca]
                   19151: 
                   19152:        * env.c:
                   19153:        Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD and
                   19154:        LDR_PRELOAD64. The 64-bit version is not currently supported.
                   19155:        Remove zero_env() prototype as it no longer exists.
                   19156:        [b4fe65027fb6]
                   19157: 
                   19158: 2006-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19159: 
                   19160:        * logging.c:
                   19161:        Add "Auto-Submitted: auto-generated" line to sudo mail for rfc 3834.
                   19162:        [78002ad90f7b]
                   19163: 
                   19164: 2006-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19165: 
                   19166:        * auth/pam.c:
                   19167:        If the user enters ^C at the password prompt, abort instead of
                   19168:        trying to authenticate with an empty password (which causes an
                   19169:        annoying delay).
                   19170:        [da3f27b747c7]
                   19171: 
                   19172: 2006-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19173: 
                   19174:        * closefrom.c, config.h.in, configure, configure.in:
                   19175:        Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by
                   19176:        Darren Tucker.
                   19177:        [0331b7780759]
                   19178: 
                   19179:        * pwutil.c:
                   19180:        pw_free() is only used by sudo_freepwcache() so ifdef it out too.
                   19181:        [0014c0d9eeba]
                   19182: 
                   19183: 2006-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19184: 
                   19185:        * config.guess, config.sub:
                   19186:        Update to latest versions from cvs.savannah.gnu.org
                   19187:        [aa0143101c20]
                   19188: 
                   19189: 2006-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19190: 
                   19191:        * pwutil.c, sudo_edit.c:
                   19192:        Move password/group cache cleaning out of sudo_end{pw,grp}ent() so
                   19193:        we can close the passwd/group files early.
                   19194:        [559074bd7eb7]
                   19195: 
                   19196:        * config.h.in, configure, configure.in, set_perms.c:
                   19197:        Add seteuid() flavor of set_perms() for systems without setreuid()
                   19198:        or setresuid() that have a working seteuid(). Tested on Darwin.
                   19199:        [508d8da99189]
                   19200: 
                   19201: 2006-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19202: 
                   19203:        * mon_systrace.c:
                   19204:        systrace_read() returns ssize_t
                   19205:        [9f97d1d1a59d]
                   19206: 
                   19207:        * configure, configure.in:
                   19208:        Fix typo, -lldap vs. -ldap; from Tim Knox.
                   19209:        [a8cc43c3bb2a]
                   19210: 
                   19211: 2006-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19212: 
                   19213:        * HISTORY:
                   19214:        Fix typo; Matt Ackeret
                   19215:        [86964ee3dfbd]
                   19216: 
                   19217: 2006-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19218: 
                   19219:        * sudo.c:
                   19220:        Print sudoers path in -V mode for root.
                   19221:        [dc43f2d75bd9]
                   19222: 
                   19223: 2006-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19224: 
                   19225:        * ldap.c:
                   19226:        Do a sub tree search instead of a base search (one level in the tree
                   19227:        only) for sudo right objects. This allows system administrators to
                   19228:        categorize the rights in a tree to make them easier to manage.
                   19229:        [6d2d9abf996e]
                   19230: 
                   19231: 2005-12-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19232: 
                   19233:        * sudo.pod:
                   19234:        fix typo
                   19235:        [1473413bcbda]
                   19236: 
                   19237: 2005-12-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19238: 
                   19239:        * ldap.c:
                   19240:        Convert GET_OPT and GET_OPTI to use just 2 args. Add timelimit and
                   19241:        bind_timelimit support; adapted from gentoo.
                   19242:        [afc816093026]
                   19243: 
                   19244: 2005-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19245: 
                   19246:        * ldap.c:
                   19247:        Support comments that start in the middle of a line
                   19248:        [c25df6ee3db8]
                   19249: 
                   19250:        * configure, configure.in:
                   19251:        Define LDAP_DEPRECATED until we start using ldap_get_values_len()
                   19252:        [ee249bfe230a]
                   19253: 
                   19254: 2005-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19255: 
                   19256:        * closefrom.c:
                   19257:        Silence gcc -Wsign-compare; djm@openbsd.org
                   19258:        [28769ce6418d]
                   19259: 
                   19260:        * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c:
                   19261:        cleanup() now takes an int as an arg so it can be used as a signal
                   19262:        handler too.
                   19263:        [2bb0df34d09c]
                   19264: 
                   19265:        * sudo.c:
                   19266:        Make a copy of the shell field in the passwd struct for NewArgv to
                   19267:        avoid a use after free situation after sudo_endpwent() is called.
                   19268:        [5dcc9ffd362e]
                   19269: 
                   19270: 2005-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19271: 
                   19272:        * config.h.in, configure, configure.in:
                   19273:        Add mkstemp() for those poor souls without it.
                   19274:        [5fdd02e863e0]
                   19275: 
                   19276:        * mkstemp.c:
                   19277:        Add mkstemp() for those poor souls without it.
                   19278:        [c99401207860]
                   19279: 
                   19280:        * Makefile.in:
                   19281:        Add mkstemp() for those poor souls without it.
                   19282:        [9c1cf2678f24]
                   19283: 
                   19284: 2005-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19285: 
                   19286:        * env.c:
                   19287:        Add PERL5DB to list of environment variables to remove.
                   19288:        [7375c27ecf75]
                   19289: 
                   19290: 2005-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19291: 
                   19292:        * mon_systrace.c, mon_systrace.h:
                   19293:        Instead of calling the check function twice with a state cookie use
                   19294:        separate check/log functions.
                   19295: 
                   19296:        Check more ioctl() calls for failure.
                   19297: 
                   19298:        systrace_{read,write} now return the number of bytes read/written or
                   19299:        -1 on error.
                   19300:        [3dc8946d90e9]
                   19301: 
                   19302:        * env.c:
                   19303:        Add more environment variables to remove; from gentoo linux Add some
                   19304:        comments about what bad env variables go to what (more to do)
                   19305:        [6918110a6b82]
                   19306: 
                   19307: 2005-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19308: 
                   19309:        * sudo.c, sudo_edit.c:
                   19310:        Move sudo_end{gr,pw}ent() until just before the exec since they free
                   19311:        up our cached copy of the passwd structs, including sudo_user and
                   19312:        sudo_runas. Fixes a use-after-free bug.
                   19313:        [54de3778bad0]
                   19314: 
                   19315:        * visudo.c:
                   19316:        Close all fd's before executing editor.
                   19317:        [4fcc05e1bec8]
                   19318: 
                   19319:        * sudo.c:
                   19320:        Enable malloc debugging on OpenBSD when SUDO_DEVEL is set.
                   19321:        [ef0e8ffa5c9f]
                   19322: 
                   19323:        * check.c:
                   19324:        Fix fd leak when lecture file option is enabled. From Jerry Brown
                   19325:        [ce97f9207cd8]
                   19326: 
                   19327: 2005-11-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19328: 
                   19329:        * env.c:
                   19330:        Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
                   19331:        environment variables to remove. From Charles Morris
                   19332:        [c96e1367d1c1]
                   19333: 
                   19334: 2005-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19335: 
                   19336:        * env.c:
                   19337:        add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
                   19338:        [72a6a1571226]
                   19339: 
                   19340: 2005-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19341: 
                   19342:        * env.c:
                   19343:        add PS4 and SHELLOPTS to initial_badenv_table for bash
                   19344:        [89dfb3f318f3]
                   19345: 
                   19346: 2005-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19347: 
                   19348:        * sudoers.pod:
                   19349:        Fix typo; Toby Peterson
                   19350:        [b7a3222b23f4]
                   19351: 
                   19352: 2005-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19353: 
                   19354:        * tsgetgrpw.c:
                   19355:        Make return buffers static so they don't get clobbered
                   19356:        [13323a39b9f5]
                   19357: 
                   19358: 2005-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19359: 
                   19360:        * auth/securid5.c:
                   19361:        Fix securid5 authentication, was not checking for ACM_OK. Also add
                   19362:        default cases for the two switch()es. Problem noted by ccon at
                   19363:        worldbank
                   19364:        [14091e418333]
                   19365: 
                   19366: 2005-06-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19367: 
                   19368:        * ldap.c:
                   19369:        Remove ncat() in favor of just counting bytes and pre-allocating
                   19370:        what is needed.
                   19371:        [25b8712adb61]
                   19372: 
                   19373: 2005-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19374: 
                   19375:        * ldap.c:
                   19376:        Fix up some comments Add missing fclose() for the rootbinddn case
                   19377:        [ae95c8a89711]
                   19378: 
                   19379:        * ldap.c:
                   19380:        align struct ldap_config
                   19381:        [35d0d64c76f8]
                   19382: 
                   19383:        * ldap.c:
                   19384:        use LINE_MAX for max conf file line size
                   19385:        [da116cb8853d]
                   19386: 
                   19387:        * pathnames.h.in:
                   19388:        add _PATH_LDAP_SECRET
                   19389:        [128b04ecfab7]
                   19390: 
                   19391:        * README.LDAP:
                   19392:        Mention rootbinddn Give example ou=SUDOers container
                   19393:        [852edc69bd1c]
                   19394: 
                   19395: 2005-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19396: 
                   19397:        * INSTALL, configure, configure.in, ldap.c:
                   19398:        Support rootbinddn in ldap.conf
                   19399:        [1615c91522a1]
                   19400: 
                   19401:        * env.c, sudo.pod, sudoers.pod:
                   19402:        Preserve DISPLAY environment variable by default.
                   19403:        [05f503d5f438]
                   19404: 
                   19405:        * acsite.m4, configure:
                   19406:        set need_lib_prefix=no for all cases; this is safe for LD_PRELOAD
                   19407:        [18a04dea8d05]
                   19408: 
                   19409:        * acsite.m4, configure:
                   19410:        set need_version=no for all cases; this is safe for LD_PRELOAD
                   19411:        [b542560e1a73]
                   19412: 
                   19413:        * aclocal.m4:
                   19414:        typo
                   19415:        [c040df0fcd5a]
                   19416: 
                   19417:        * configure, configure.in:
                   19418:        Add dragonfly
                   19419:        [f13794618636]
                   19420: 
                   19421:        * auth/pam.c:
                   19422:        Fix call to pam_end() when pam_open_session() fails.
                   19423:        [0be47cdfdef1]
                   19424: 
                   19425:        * configure:
                   19426:        regen
                   19427:        [7f5c13b4b800]
                   19428: 
                   19429:        * acsite.m4:
                   19430:        rebuild acsite.m4 from libtool 1.9f libtool.m4 ltoptions.m4
                   19431:        ltsugar.m4 ltversion.m4
                   19432:        [a7ba9fd1a2ab]
                   19433: 
                   19434:        * config.guess, config.sub, ltmain.sh:
                   19435:        merge in local changes: config.guess: o better openbsd support
                   19436:        config.sub: o hiuxmpp support ltmain.sh o remove requirement that
                   19437:        libs must begin with "lib" o don't print a bunch of crap about
                   19438:        library installs o don't run ldconfig
                   19439:        [f4149f2c720f]
                   19440: 
                   19441:        * config.guess, config.sub, ltmain.sh:
                   19442:        libtool 1.9f
                   19443:        [82a534e7121f]
                   19444: 
                   19445:        * configure.in:
                   19446:        Update with autoupdate and make minor changes for libtool 1.9f
                   19447:        [11b5ae5c1428]
                   19448: 
                   19449: 2005-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19450: 
                   19451:        * parse.c:
                   19452:        don't call sudo_ldap_display_cmnd if ldap not setup
                   19453:        [8bcf6c094ffe]
                   19454: 
                   19455:        * sudo_edit.c, visudo.c:
                   19456:        Move declatation of struct timespec to its own include files for
                   19457:        systems without it since it needs time_t defined.
                   19458:        [b95c333299a0]
                   19459: 
                   19460:        * gettime.c:
                   19461:        Move declatation of struct timespec to its own include files for
                   19462:        systems without it since it needs time_t defined.
                   19463:        [021b4569cc0c]
                   19464: 
                   19465:        * fileops.c:
                   19466:        Move declatation of struct timespec to its own include files for
                   19467:        systems without it since it needs time_t defined.
                   19468:        [dd8573b2ee7d]
                   19469: 
                   19470:        * emul/timespec.h:
                   19471:        Move declatation of struct timespec to its own include files for
                   19472:        systems without it since it needs time_t defined.
                   19473:        [f95137771564]
                   19474: 
                   19475:        * check.c, compat.h:
                   19476:        Move declatation of struct timespec to its own include files for
                   19477:        systems without it since it needs time_t defined.
                   19478:        [2ef2ace8fe85]
                   19479: 
                   19480:        * ldap.c:
                   19481:        Don't set safe_cmnd for the "sudo ALL" case.
                   19482:        [ad7fa9e07da0]
                   19483: 
                   19484: 2005-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19485: 
                   19486:        * auth/pam.c:
                   19487:        Call pam_open_session() and pam_close_session() to give pam_limits a
                   19488:        chance to run. Idea from Karel Zak.
                   19489:        [fed46d471350]
                   19490: 
                   19491: 2005-04-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19492: 
                   19493:        * check.c, sudo.c:
                   19494:        Add explicit cast from mode_t -> u_int in printf to silence warnings
                   19495:        on Solaris
                   19496:        [17bb961fe22d]
                   19497: 
                   19498:        * parse.c:
                   19499:        include grp.h to silence a warning on Solaris
                   19500:        [14386fbab640]
                   19501: 
                   19502: 2005-04-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19503: 
                   19504:        * parse.c:
                   19505:        Fix printing of += and -= defaults.
                   19506:        [a667604c56cd]
                   19507: 
                   19508: 2005-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19509: 
                   19510:        * mon_systrace.c:
                   19511:        Sanity check number of syscall args with argsize. Not really needed
                   19512:        but a little paranoia never hurts.
                   19513:        [6bb455a2c2d6]
                   19514: 
                   19515:        * mon_systrace.c, mon_systrace.h:
                   19516:        Don't do pointer arithmetic on void * Use int, not size_t/ssize_t
                   19517:        for systrace lengths (since it uses int)
                   19518:        [3cafccffcffd]
                   19519: 
                   19520: 2005-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19521: 
                   19522:        * mon_systrace.c:
                   19523:        Add some memsets for paranoia Fix namespace collsion w/ error Check
                   19524:        rval of decode_args() and update_env() Remove improper setting of
                   19525:        validated variable
                   19526:        [3d385158354d]
                   19527: 
                   19528: 2005-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19529: 
                   19530:        * parse.c, sudo.c, sudo.h:
                   19531:        In -l mode, only check local sudoers file if def_ignore_sudoers is
                   19532:        not set and call LDAP versions from display_privs() and
                   19533:        display_cmnd() instead of directly from main(). Because of this we
                   19534:        need to defer closing the ldap connection until after -l processing
                   19535:        has ocurred and we must pass in the ldap pointer to display_privs()
                   19536:        and display_cmnd().
                   19537:        [1dfc2e8c9f2b]
                   19538: 
                   19539:        * ldap.c:
                   19540:        Reorganize LDAP code to better match normal sudoers parsing.
                   19541:        Instead of storing strings for later printing in -l mode we do
                   19542:        another query since the authenticating user and the user being
                   19543:        listed may not be the same (the new -U flag). Also add support for
                   19544:        "sudo -l command".
                   19545: 
                   19546:        There is still a fair bit if duplicated code that can probably be
                   19547:        refactored.
                   19548:        [e9568f19bde5]
                   19549: 
                   19550: 2005-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19551: 
                   19552:        * ldap.c:
                   19553:        Replace pass variable with do_netgr for better readability.
                   19554:        [1bba841b6e79]
                   19555: 
                   19556:        * ldap.c:
                   19557:        use DPRINTF macro
                   19558:        [02b159b66bb5]
                   19559: 
                   19560:        * ldap.c:
                   19561:        estrdup, not strdup
                   19562:        [22cdee7973c1]
                   19563: 
                   19564: 2005-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19565: 
                   19566:        * parse.c:
                   19567:        Add macro to test if the tag changed to improve readability.
                   19568:        [4e11b4819556]
                   19569: 
                   19570:        * parse.c:
                   19571:        Avoid printing defaults header if there are no defaults to print...
                   19572:        [41a28627df03]
                   19573: 
                   19574:        * glob.c:
                   19575:        Fix a warning on systems without strlcpy().
                   19576:        [6814e0f0e4f4]
                   19577: 
                   19578:        * pwutil.c:
                   19579:        Use macros where possible for sudo_grdup() like sudo_pwdup().
                   19580:        [30f201ff35cd]
                   19581: 
                   19582: 2005-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19583: 
                   19584:        * utimes.c:
                   19585:        It is possible for tv_usec to hold >= 1000000 usecs so add in
                   19586:        tv_usec / 1000000.
                   19587:        [794ac4d53a65]
                   19588: 
                   19589: 2005-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19590: 
                   19591:        * auth/kerb5.c:
                   19592:        The component in krb5_principal_get_comp_string() should be 1, not 0
                   19593:        for Heimdal. From Alex Plotnick.
                   19594:        [fefa351c5044]
                   19595: 
                   19596: 2005-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19597: 
                   19598:        * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c, gram.y,
                   19599:        interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c, pwutil.c,
                   19600:        redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
                   19601:        Add efree() for consistency with emalloc() et al. Allows us to rely
                   19602:        on C89 behavior (free(NULL) is valid) even on K&R.
                   19603:        [7876bb80d87c]
                   19604: 
                   19605:        * parse.c, sudo.c:
                   19606:        Move initgroups() for -U option into display_privs() so group
                   19607:        matching in sudoers works correctly.
                   19608:        [b074428ad2ca]
                   19609: 
                   19610: 2005-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19611: 
                   19612:        * ldap.c:
                   19613:        Removed duplicate call to ldap_unbind_s introduced along with
                   19614:        sudo_ldap_close.
                   19615:        [19acc1c20f7c]
                   19616: 
                   19617:        * parse.c:
                   19618:        Add missing space in Defaults printing
                   19619:        [95d2935bf6d4]
                   19620: 
                   19621: 2005-03-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19622: 
                   19623:        * pwutil.c:
                   19624:        Sync sudo_pwdup with OpenBSD changes: use macros for size computaton
                   19625:        and string copies.
                   19626:        [6b6b241495e5]
                   19627: 
                   19628: 2005-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19629: 
                   19630:        * pwutil.c:
                   19631:        Zero old pw_passwd before replacing with version from shadow file.
                   19632:        [3251b349dfe1]
                   19633: 
                   19634:        * configure, configure.in:
                   19635:        Only attempt shadow password detection if PAM is not being used Add
                   19636:        shadow_* variables to make shadow password detection more generic.
                   19637:        [d498a3423ac9]
                   19638: 
                   19639:        * configure.in:
                   19640:        Use OSDEFS for os-specific -D_FOO_BAR stuff rather than CPPFLAGS
                   19641:        [04d55bbd5e35]
                   19642: 
                   19643: 2005-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19644: 
                   19645:        * sudoers.pod:
                   19646:        use a non-breaking space to avoid a double space after e.g.
                   19647:        [11cdb54bdf7b]
                   19648: 
                   19649:        * sudo.pod:
                   19650:        commna, not colon after e.g.
                   19651:        [8d5875ff72e0]
                   19652: 
                   19653: 2005-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19654: 
                   19655:        * sudo_noexec.c:
                   19656:        Add __ variants of the exec functions. GNU libc at least uses
                   19657:        __execve() internally.
                   19658:        [d1880473d790]
                   19659: 
                   19660:        * indent.pro:
                   19661:        Match reality a bit more.
                   19662:        [633e3fa875a7]
                   19663: 
                   19664:        * pwutil.c:
                   19665:        Missed piece from rev. 1.6, fix sudo_getpwnam() too.
                   19666:        [128f7b21c2ee]
                   19667: 
                   19668:        * pwutil.c:
                   19669:        Store shadow password after making a local copy of struct passwd in
                   19670:        case normal and shadow routines use the same internal buffer in
                   19671:        libc.
                   19672:        [f806052a6ffc]
                   19673: 
                   19674: 2005-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19675: 
                   19676:        * alloc.c, logging.c:
                   19677:        Make varargs usage consistent with the rest of the code.
                   19678:        [3d45affc9851]
                   19679: 
                   19680: 2005-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19681: 
                   19682:        * sudo_noexec.c:
                   19683:        Wrap more of the exec family since on Linux the others do not appear
                   19684:        to go through the normal execve() path.
                   19685:        [8167769b4e19]
                   19686: 
                   19687:        * visudo.c:
                   19688:        make print_unused static like proto says
                   19689:        [ecf10e1bae55]
                   19690: 
                   19691:        * glob.c:
                   19692:        silence a warning on K&R systems
                   19693:        [2e00425f1a5c]
                   19694: 
                   19695:        * alias.c, error.c:
                   19696:        make this build in K&R land
                   19697:        [156f65f8525a]
                   19698: 
                   19699:        * parse.c:
                   19700:        make this build in K&R land
                   19701:        [6fc9276889cb]
                   19702: 
                   19703: 2005-03-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19704: 
                   19705:        * toke.c:
                   19706:        regen
                   19707:        [3b349748cd21]
                   19708: 
                   19709: 2005-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19710: 
                   19711:        * ldap.c:
                   19712:        return(foo) not return foo optimize _atobool() slightly
                   19713:        [11d09d154ed5]
                   19714: 
                   19715:        * ldap.c:
                   19716:        Use TRUE/FALSE
                   19717:        [53999320d98f]
                   19718: 
                   19719:        * ldap.c:
                   19720:        Reformat to match the rest of sudo's code.
                   19721:        [1bd0f2afa0e7]
                   19722: 
                   19723:        * sudo.pod:
                   19724:        I am the primary author
                   19725:        [5d311ecd85c6]
                   19726: 
                   19727: 2005-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19728: 
                   19729:        * Makefile.in, README, RUNSON:
                   19730:        The RUNSON file is toast--it confused too many people and really
                   19731:        isn't needed in a configure-oriented world.
                   19732:        [96a6ef7bbc08]
                   19733: 
                   19734:        * INSTALL:
                   19735:        alternate -> alternative
                   19736:        [b65015c5d0a2]
                   19737: 
                   19738:        * tgetpass.c:
                   19739:        Use TCSADRAIN instead of TCSAFLUSH since some OSes have issues with
                   19740:        TCSAFLUSH.
                   19741:        [c66b4763ffdc]
                   19742: 
                   19743:        * toke.l:
                   19744:        Allow leading blanks before Defaults and Foo_Alias definitions
                   19745:        [2add513d9277]
                   19746: 
                   19747:        * Makefile.in:
                   19748:        fix rules to build toke.o and gram.o in devel mode
                   19749:        [96cbb414ebd3]
                   19750: 
                   19751: 2005-02-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19752: 
                   19753:        * sudoers.pod:
                   19754:        env_keep overrides set_logname
                   19755:        [401877193a15]
                   19756: 
                   19757:        * env.c:
                   19758:        Fix disabling set_logname and make env_keep override set_logname.
                   19759:        [0906e7a5ed93]
                   19760: 
                   19761:        * compat.h, config.h.in, configure, configure.in:
                   19762:        No longer need memmove()
                   19763:        [43bdb6efe3f2]
                   19764: 
                   19765:        * env.c, sudo.c:
                   19766:        Just clean the environment once. This assumes that any further
                   19767:        setenv/putenv will be able to handle the fact that we replaced
                   19768:        environ with our own malloc'd copy but all the implementations I've
                   19769:        checked do.
                   19770:        [11658fe92ba2]
                   19771: 
                   19772: 2005-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19773: 
                   19774:        * env.c, sudo.c:
                   19775:        In -i mode, base the value of insert_env()'s dupcheck flag on
                   19776:        DID_FOO flags. Move checks for $HOME resetting into rebuild_env()
                   19777:        [8365b0bd0c71]
                   19778: 
                   19779: 2005-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19780: 
                   19781:        * env.c, sudo.c:
                   19782:        Move setting of user_path, user_shell, user_prompt and prev_user
                   19783:        into init_vars() since user_shell at least is needed there.
                   19784:        [37e22dce66e9]
                   19785: 
                   19786: 2005-02-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19787: 
                   19788:        * Makefile.in:
                   19789:        fix devel builds
                   19790:        [9fbb15ef164c]
                   19791: 
                   19792:        * sudo.c:
                   19793:        Fix some printf format mismatches on error.
                   19794:        [ffc1c3f11740]
                   19795: 
                   19796:        * check.c:
                   19797:        Fix some printf format mismatches on error.
                   19798:        [7b3b508adf50]
                   19799: 
                   19800:        * configure, gram.c, toke.c:
                   19801:        regen
                   19802:        [aa76f9d8b02a]
                   19803: 
                   19804:        * Makefile.in, aclocal.m4, alias.c, alloc.c, auth/afs.c,
                   19805:        auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
                   19806:        auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
                   19807:        auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c,
                   19808:        auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c,
                   19809:        closefrom.c, compat.h, configure.in, defaults.c, defaults.h,
                   19810:        emul/utime.h, env.c, error.c, fileops.c, find_path.c, getprogname.c,
                   19811:        getspwuid.c, gettime.c, goodpath.c, gram.y, interfaces.c,
                   19812:        interfaces.h, ldap.c, logging.c, logging.h, match.c, mon_systrace.c,
                   19813:        parse.c, redblack.c, redblack.h, set_perms.c, sigaction.c,
                   19814:        snprintf.c, strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
                   19815:        sudo.h, sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.pod,
                   19816:        testsudoers.c, tgetpass.c, toke.l, utimes.c, version.h, visudo.c,
                   19817:        visudo.pod, zero_bytes.c:
                   19818:        Update copyright years.
                   19819:        [0610c3654739]
                   19820: 
                   19821:        * Makefile.binary.in:
                   19822:        Update copyright years.
                   19823:        [d78ffc9f2e2b]
                   19824: 
                   19825:        * LICENSE:
                   19826:        Update copyright years.
                   19827:        [f60473bca4b1]
                   19828: 
                   19829:        * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
                   19830:        version 1.7
                   19831:        [aa977a544ca1]
                   19832: 
                   19833:        * WHATSNEW:
                   19834:        What's new in sudo 1.7, based on the 1.7 CHANGES entries.
                   19835:        [ecfcf7269c14]
                   19836: 
                   19837: 2005-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19838: 
                   19839:        * compat.h, logging.h, sudo.h:
                   19840:        Add __printflike and use it with gcc to warn about printf-like
                   19841:        format mismatches
                   19842:        [b192ad4a0548]
                   19843: 
                   19844: 2005-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19845: 
                   19846:        * CHANGES, ChangeLog:
                   19847:        Replaced CHANGES file with ChangeLog generated from cvs logs
                   19848:        [d9ace9dab98f]
                   19849: 
                   19850:        * set_perms.c:
                   19851:        Use warning/error instead of perror/fatal.
                   19852:        [e33259df7738]
                   19853: 
                   19854:        * config.guess:
                   19855:        Update OpenBSD section
                   19856:        [9d2c23de6801]
                   19857: 
                   19858:        * UPGRADE:
                   19859:        Add upgrading noted for 1.7
                   19860:        [1fb6b6d6df07]
                   19861: 
                   19862:        * env.c, sudo.c, sudoers.pod:
                   19863:        Instead of zeroing out the environment, just prune out entries based
                   19864:        on the env_delete and env_check lists. Base building up the new
                   19865:        environment on the current environment and the variables we removed
                   19866:        initially.
                   19867:        [fc192df8fd15]
                   19868: 
                   19869:        * config.h.in, configure, configure.in, sudo.c:
                   19870:        Set locale to "C" if locales are supported, just to be safe.
                   19871:        [91fbaa98f02e]
                   19872: 
                   19873:        * toke.c, toke.l:
                   19874:        Cast?argument to ctype functions to unsigned char.
                   19875:        [e096b4d65796]
                   19876: 
                   19877: 2005-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19878: 
                   19879:        * env.c:
                   19880:        correct value for DID_USER
                   19881:        [b5b05d36ec15]
                   19882: 
                   19883:        * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c:
                   19884:        #include <compat.h> not "compat.h"
                   19885:        [7a0ad9a0ccd7]
                   19886: 
                   19887:        * defaults.c:
                   19888:        Reset the environment by default.
                   19889:        [4ecc6423e0f0]
                   19890: 
                   19891:        * sudo.c:
                   19892:        Alloc an extra slot in NewArgv. Removes the need to malloc an new
                   19893:        vector if execve() fails.
                   19894:        [83dfb6f584a7]
                   19895: 
                   19896: 2005-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19897: 
                   19898:        * INSTALL, config.h.in, configure, configure.in, sudo.c:
                   19899:        Use execve(2) and wrap the command in sh if we get ENOEXEC.
                   19900:        [c0c6af4e2a21]
                   19901: 
                   19902: 2005-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19903: 
                   19904:        * sudo_noexec.c:
                   19905:        Only include time.h on systems that lack struct timespec which gets
                   19906:        defind in compat.h (using time_t).
                   19907:        [e373e518b4cb]
                   19908: 
                   19909:        * sudo_noexec.c:
                   19910:        Include time.h for time_t in compat.h for systems w/o struct
                   19911:        timespec.
                   19912:        [a34b5637e458]
                   19913: 
                   19914:        * compat.h, config.h.in, configure, configure.in:
                   19915:        use bcopy on systems w/o memmove
                   19916:        [f835eafd78c6]
                   19917: 
                   19918:        * compat.h:
                   19919:        __attribute__((__unused__)) doesn't work in gcc 2.7.2.1 so limit its
                   19920:        use to gcc >= 2.8.
                   19921:        [1cb9a4e58566]
                   19922: 
                   19923:        * Makefile.in:
                   19924:        Add explicit rule to build sudo_noexec.lo
                   19925:        [df1dfcf8dd77]
                   19926: 
                   19927: 2005-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19928: 
                   19929:        * INSTALL.configure, Makefile.in:
                   19930:        No longer depend on VPATH; pointed out a bunch of missed
                   19931:        dependencies.
                   19932:        [601a45d4af6b]
                   19933: 
                   19934:        * TROUBLESHOOTING:
                   19935:        Help for PAM when account section is missing
                   19936:        [9b8221256756]
                   19937: 
                   19938:        * auth/pam.c:
                   19939:        Give user a clue when there is a missing "account" section in the
                   19940:        PAM config.
                   19941:        [2529625c0495]
                   19942: 
                   19943:        * auth/pam.c:
                   19944:        Better error handling.
                   19945:        [518c9bda23d8]
                   19946: 
                   19947:        * config.h.in, configure, configure.in:
                   19948:        Move _FOO_SOURCE to CPPFLAGS so it takes effect as early as
                   19949:        possible. Silences a warning about isblank() on linux.
                   19950:        [19c94d7ecdc8]
                   19951: 
                   19952:        * auth/pam.c:
                   19953:        Fix typo (missing comma) that caused an incorrect number of args to
                   19954:        be passed to log_error().
                   19955:        [0099dfec560f]
                   19956: 
                   19957: 2005-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19958: 
                   19959:        * pwutil.c:
                   19960:        Don't try to destroy a tree we didn't create.
                   19961:        [d43c4fe03aa4]
                   19962: 
                   19963: 2005-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19964: 
                   19965:        * alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
                   19966:        auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
                   19967:        auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
                   19968:        auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c,
                   19969:        compat.h, defaults.c, env.c, error.c, fileops.c, find_path.c,
                   19970:        fnmatch.c, getcwd.c, getprogname.c, getspwuid.c, gettime.c,
                   19971:        goodpath.c, gram.c, gram.y, interfaces.c, ldap.c, logging.c,
                   19972:        match.c, mon_systrace.c, parse.c, pwutil.c, set_perms.c,
                   19973:        sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c,
                   19974:        strlcpy.c, sudo.c, sudo_edit.c, sudo_noexec.c, testsudoers.c,
                   19975:        tgetpass.c, toke.c, toke.l, utimes.c, visudo.c, zero_bytes.c:
                   19976:        Add __unused to rcsids
                   19977:        [ad6b4ac45705]
                   19978: 
                   19979: 2005-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   19980: 
                   19981:        * configure, configure.in:
                   19982:        Fix error message when mixing invalid auth types
                   19983:        [68069b3ff5bc]
                   19984: 
                   19985:        * INSTALL:
                   19986:        PAM, AIX auth, BSD auth and login_cap are now on by default if the
                   19987:        OS supports them.
                   19988:        [4e44e9098cf0]
                   19989: 
                   19990:        * auth/sudo_auth.h, config.h.in:
                   19991:        s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
                   19992:        [2d569b43b23e]
                   19993: 
                   19994:        * configure.in:
                   19995:        Better checking for conflicting authentication methods Display the
                   19996:        authentication methods used at the end of configure Rename --with-
                   19997:        authenticate -> --with-aixauth Use --with-aixauth, --with-bsdauth,
                   19998:        --with-pam, --with-logincap by default on systems that support them
                   19999:        unless disabled. Add OSMAJOR variable that replaces old OSREV; now
                   20000:        OSREV has full version number
                   20001:        [a21115b6fe9f]
                   20002: 
                   20003: 2005-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20004: 
                   20005:        * def_data.c, def_data.in, sudo.c, sudoers.pod:
                   20006:        s/-O/-C/
                   20007:        [ee73f1b81923]
                   20008: 
                   20009: 2005-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20010: 
                   20011:        * configure.in:
                   20012:        Replace: test -n "$FOO" || FOO="bar"
                   20013: 
                   20014:        With: : ${FOO='bar'}
                   20015:        [37552d9054fc]
                   20016: 
                   20017: 2005-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20018: 
                   20019:        * pwutil.c, testsudoers.c, tsgetgrpw.c:
                   20020:        Use function pointers to only call private passwd/group routines
                   20021:        when using a nonstandard passwd/group file.
                   20022:        [215908681dfb]
                   20023: 
                   20024: 2005-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20025: 
                   20026:        * CHANGES:
                   20027:        sync
                   20028:        [2e55c03f5790]
                   20029: 
                   20030:        * tsgetgrpw.c:
                   20031:        Can't use strtok() since it doesn't handle empty fields so add
                   20032:        getpwent()/getgrent() functions and call those.
                   20033:        [bdaa5b0db70e]
                   20034: 
                   20035: 2005-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20036: 
                   20037:        * Makefile.in:
                   20038:        Fix dummied out toke.c and gram.c dependencies.
                   20039:        [4b909c8b2ebe]
                   20040: 
                   20041:        * Makefile.in:
                   20042:        Rename PARSESRCS -> GENERATED since it is only used in the clean
                   20043:        target Add devdir variable and use it to specify the path to parser
                   20044:        sources
                   20045:        [f27b3f41ca23]
                   20046: 
                   20047:        * configure:
                   20048:        regen
                   20049:        [22c6435dbd46]
                   20050: 
                   20051:        * configure.in:
                   20052:        Add a devdir variables that defaults to $(srcdir) and is set to . if
                   20053:        --devel was specified. Allows for proper dependecies building the
                   20054:        parser.
                   20055:        [a36d694c6d21]
                   20056: 
                   20057:        * testsudoers.c:
                   20058:        Add support for custom passwd/group files.
                   20059:        [296549ff4b87]
                   20060: 
                   20061:        * Makefile.in:
                   20062:        Build private copy of pwutil.o for testsudoers with MYPW defined so
                   20063:        it uses our own passwd/group routines.
                   20064:        [bafa54ec78ca]
                   20065: 
                   20066:        * visudo.c:
                   20067:        Remove sudo_*{pw,gr}* stubs and add sudo_setspent/sudo_endspent
                   20068:        stubs instead. We can now just use the caching sudo_*{pw,gr}*
                   20069:        functions in pwutil.c Add comment about wanting to call
                   20070:        sudo_endpwent/sudo_endgrent in cleanup()
                   20071:        [7e59d6b5510d]
                   20072: 
                   20073:        * tsgetgrpw.c:
                   20074:        Remove caching; we will just use what is in pwutil.c Use global
                   20075:        buffers for passwd/group structs Rename functions from sudo_* to
                   20076:        my_*
                   20077:        [8c1e068f574c]
                   20078: 
                   20079:        * logging.c, sudo.c:
                   20080:        g/c pwcache_init/pwcache_destroy
                   20081:        [60a24909b947]
                   20082: 
                   20083:        * sudo.h:
                   20084:        Undo last commit and add sudo_setspent and sudo_endspent instead.
                   20085:        [bac80db08296]
                   20086: 
                   20087:        * getspwuid.c, pwutil.c:
                   20088:        Move all but the shadow stuff from getspwuid.c to pwutil.c and
                   20089:        pwcache_get and pwcache_put as they are no longer needed. Also add
                   20090:        preprocessor magic to use private versions of the passwd and group
                   20091:        routines if MYPW is defined (for use by testsudoers).
                   20092:        [a16b8678a426]
                   20093: 
                   20094:        * tsgetgrpw.c:
                   20095:        zero out struct passwd/group before filling it in so if there are
                   20096:        fields we don't handle they end up as 0.
                   20097:        [274cb6a93301]
                   20098: 
                   20099:        * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c:
                   20100:        Adapt to pwutil.c
                   20101:        [43ebd04c8b82]
                   20102: 
                   20103:        * Makefile.in:
                   20104:        Add tsgetgrpw.c and pwutil.c Rename the *OBJ variables for better
                   20105:        readability.
                   20106:        [7f88c6061e2d]
                   20107: 
                   20108:        * tsgetgrpw.c:
                   20109:        Passwd and group lookup routines for testsudoers that support
                   20110:        alternate passwd and group files.
                   20111:        [d7803101d34e]
                   20112: 
                   20113:        * getspwuid.c, pwutil.c:
                   20114:        Split off pw/gr cache and dup code into its own file. This allows
                   20115:        visudo and testsudoers to use the pw/gr cache too.
                   20116:        [ef333d3ffedf]
                   20117: 
                   20118: 2005-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20119: 
                   20120:        * parse.c:
                   20121:        Print Defaults info in "sudo -l" output and wrap lines based on the
                   20122:        terminal width.
                   20123:        [e559eae4250e]
                   20124: 
                   20125: 2005-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20126: 
                   20127:        * match.c, testsudoers.c, visudo.c:
                   20128:        Only check group vector in usergr_matches() if we are matching the
                   20129:        invoking or list user. Always check the group members, even if
                   20130:        there was a group vector.
                   20131:        [d0c7ceb2a041]
                   20132: 
                   20133: 2004-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20134: 
                   20135:        * LICENSE, Makefile.in, fnmatch.3:
                   20136:        No longer bundle fnmatch.3
                   20137:        [72db4a4ff4e1]
                   20138: 
                   20139:        * CHANGES, TODO:
                   20140:        checkpoint
                   20141:        [e92781bfd99c]
                   20142: 
                   20143: 2004-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20144: 
                   20145:        * sudo.c:
                   20146:        sort usage
                   20147:        [15e3b876ec2c]
                   20148: 
                   20149:        * sudo.pod:
                   20150:        Sort command line options
                   20151:        [c1fa56584bc4]
                   20152: 
                   20153:        * def_data.c, def_data.h, def_data.in, defaults.c, logging.c, sudo.c,
                   20154:        sudo.pod, sudoers.pod:
                   20155:        Add closefrom sudoers option to start closing at a point other than
                   20156:        3. Add closefrom_override sudoers option and -C sudo flag to allow
                   20157:        the user to specify a different closefrom starting point.
                   20158:        [370652b099d1]
                   20159: 
                   20160:        * pathnames.h.in:
                   20161:        Add _PATH_DEVNULL for those without it.
                   20162:        [0c4c3e0ceb8b]
                   20163: 
                   20164:        * LICENSE:
                   20165:        no more UCB strcasecmp
                   20166:        [397a6298e07f]
                   20167: 
                   20168:        * strcasecmp.c:
                   20169:        replace BSD licensed one with version derived from pdksh
                   20170:        [d7cfda8c57a2]
                   20171: 
                   20172: 2004-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20173: 
                   20174:        * sudo.c:
                   20175:        Fix last commit.
                   20176:        [7afb9a180532]
                   20177: 
                   20178:        * sudo.c:
                   20179:        Make sure stdin, stdout and stderr are open and dup them to
                   20180:        /dev/null if not.
                   20181:        [590f387068bd]
                   20182: 
                   20183: 2004-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20184: 
                   20185:        * ldap.c, mon_systrace.c, sudo.c, sudo.h:
                   20186:        add sudo_ldap_close
                   20187:        [4273a36765a7]
                   20188: 
                   20189:        * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
                   20190:        Use TIME_WITH_SYS_TIME
                   20191:        [c32b59bf15fb]
                   20192: 
                   20193:        * config.h.in, configure, configure.in:
                   20194:        Add TIME_WITH_SYS_TIME_H
                   20195:        [57cb146f451d]
                   20196: 
                   20197: 2004-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20198: 
                   20199:        * env.c:
                   20200:        Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE being set
                   20201:        unconditionally on darwin. From Toby Peterson.
                   20202:        [d69959681c87]
                   20203: 
                   20204:        * getspwuid.c:
                   20205:        Check rbinsert() return value. In the case of faked up entries
                   20206:        there is usually a negative response cached that we need to
                   20207:        overwrite.
                   20208: 
                   20209:        In pwfree() don't try to zero out a NULL pw_passwd pointer.
                   20210:        [00b32d1a48c1]
                   20211: 
                   20212:        * mon_systrace.c:
                   20213:        Use the double fork trick to avoid the monitor process being waited
                   20214:        for by the main program run through sudo.
                   20215:        [e0ce556712ff]
                   20216: 
                   20217: 2004-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20218: 
                   20219:        * sudo.c:
                   20220:        Call initgroups() in -U mode so group matches work normally.
                   20221:        [2235bea15283]
                   20222: 
                   20223:        * def_data.h, mkdefaults:
                   20224:        Don't print a trailing comma for the last entry in enum def_tupple
                   20225:        [c43a96bb31df]
                   20226: 
                   20227: 2004-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20228: 
                   20229:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   20230:        Mention values when lecture, listpw and verifypw are used in boolean
                   20231:        context.
                   20232:        [a0b5c0abaccf]
                   20233: 
                   20234:        * def_data.c, def_data.in:
                   20235:        verifypw when used in a boolean TRUE context should be "all", not
                   20236:        "any".
                   20237:        [2eb076ddd5e2]
                   20238: 
                   20239: 2004-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20240: 
                   20241:        * def_data.in, defaults.c:
                   20242:        Allow tuples that can be used as booleans to be used as boolean
                   20243:        TRUE. In this case the 2nd possible value of the tuple is used for
                   20244:        TRUE.
                   20245:        [bd99aa77e88b]
                   20246: 
                   20247: 2004-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20248: 
                   20249:        * configure, configure.in:
                   20250:        Correct the test for 2-parameter timespecsub
                   20251:        [d41c9cb26b97]
                   20252: 
                   20253:        * sudo.h:
                   20254:        Add strub struct definitions for passwd, timeval and timespec
                   20255:        [c4ce5c43d8c5]
                   20256: 
                   20257:        * config.h.in, configure, configure.in, sudo_edit.c, visudo.c:
                   20258:        Add check for 2-argument form of timespecsub (FreeBSD and BSD/OS)
                   20259:        and fix a typo in the gettimeofday check.
                   20260:        [8ac9893057ce]
                   20261: 
                   20262: 2004-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20263: 
                   20264:        * match.c, testsudoers.c:
                   20265:        Deal with user_stat being NULL as it is for visudo and testsudoers.
                   20266:        [3605a6ff64d0]
                   20267: 
                   20268:        * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod:
                   20269:        Add -U option to use in conjunction with -l instead of -u. Add
                   20270:        support for "sudo -l command" to test a specific command.
                   20271:        [99638789d415]
                   20272: 
                   20273:        * gram.c, gram.y, sudo.c:
                   20274:        Set safe_cmnd after sudoers_lookup() if it has not been set.
                   20275:        Previously it was set by sudo "ALL" in the parser but at that point
                   20276:        the fully-qualified pathname has not yet been found.
                   20277:        [ac30d98f8225]
                   20278: 
                   20279: 2004-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20280: 
                   20281:        * parse.c, testsudoers.c:
                   20282:        Correctly handle multiple privileges per userspec and runas
                   20283:        inheritence.
                   20284:        [a98a965181af]
                   20285: 
                   20286: 2004-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20287: 
                   20288:        * defaults.c:
                   20289:        Zero out sd_un for each entry in sudo_defs_table in init_defaults.
                   20290:        [031d3cd4a848]
                   20291: 
                   20292: 2004-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20293: 
                   20294:        * toke.c, toke.l:
                   20295:        make per-command defaults work with sudoedit
                   20296:        [e56fe33db916]
                   20297: 
                   20298:        * ldap.c, parse.c, sudo.c, sudo.h:
                   20299:        Remove the FLAG_NOPASS, FLAG_NOEXEC and FLAG_MONITOR flags.
                   20300:        Instead, we just set the approriate defaults variable.
                   20301:        [756eeecc1d86]
                   20302: 
                   20303:        * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
                   20304:        Document per-command Defaults.
                   20305:        [92a0f84b91c1]
                   20306: 
                   20307:        * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
                   20308:        sudo.c, testsudoers.c, toke.c, toke.l, visudo.c:
                   20309:        Add support for command-specific Defaults entries. E.g.
                   20310:        Defaults!/usr/bin/vi noexec
                   20311:        [be3d52bf01cf]
                   20312: 
                   20313:        * defaults.c, match.c, parse.c, parse.h, testsudoers.c:
                   20314:        Change an occurence of user_matches() -> runas_matches() missed
                   20315:        previously runas_matches(), host_matches() and cmnd_matches() only
                   20316:        really need to pass in a list of members. user_matches() still
                   20317:        needs to pass in a passwd struct because of "sudo -l"
                   20318:        [833b22fc6fa0]
                   20319: 
                   20320:        * parse.c:
                   20321:        Check def_authenticate, def_noexec and def_monitor when setting
                   20322:        return flags. XXX May be better to just set the defaults directly
                   20323:        and get rid of those flags.
                   20324:        [b6db22b59d69]
                   20325: 
                   20326:        * alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
                   20327:        auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
                   20328:        auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
                   20329:        auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c,
                   20330:        defaults.c, env.c, error.c, fileops.c, find_path.c, fnmatch.c,
                   20331:        getcwd.c, getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
                   20332:        gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
                   20333:        mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
                   20334:        strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo_edit.c,
                   20335:        sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c, toke.l, utimes.c,
                   20336:        visudo.c, zero_bytes.c:
                   20337:        Use: #include <config.h> Not: #include "config.h" That way we get
                   20338:        the correct config.h when build dir != src dir
                   20339:        [97e5670a442b]
                   20340: 
                   20341:        * Makefile.in:
                   20342:        Back out part of rev 1.263; fix -I order
                   20343:        [197ea01cad5d]
                   20344: 
                   20345:        * toke.c, toke.l:
                   20346:        More robust parsing if #include; could be much better still.
                   20347:        [31bc3cd8f045]
                   20348: 
                   20349:        * sudo_edit.c, visudo.c:
                   20350:        Make arg splitting in visudo and sudoedit consistent.
                   20351:        [7bc74485f246]
                   20352: 
                   20353:        * Makefile.in, alias.c, gram.c, gram.y, parse.h:
                   20354:        Split alias routines out into their own file.
                   20355:        [d90f633cf9ae]
                   20356: 
                   20357:        * error.h:
                   20358:        __attribute__ is already defined in compat.h
                   20359:        [676ed3fe9203]
                   20360: 
                   20361:        * visudo.c:
                   20362:        quit() should not be __noreturn__ as it is non-void on some
                   20363:        platforms.
                   20364:        [e528c2b6ba10]
                   20365: 
                   20366:        * auth/fwtk.c, auth/rfc1938.c, auth/securid.c, auth/securid5.c:
                   20367:        Add local error/warning functions like err/warn but that call an
                   20368:        additional cleanup routine in the error case. This means we no
                   20369:        longer need to compile a special version of alloc.o for visudo.
                   20370:        [e78e8aae882e]
                   20371: 
                   20372:        * parse.h:
                   20373:        Clarify comments about the data structures
                   20374:        [ae894e266701]
                   20375: 
                   20376: 2004-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20377: 
                   20378:        * visudo.c:
                   20379:        Add support for VISUAL and EDITOR containing command line args. If
                   20380:        env_editor is not set any args in VISUAL and EDITOR are ignored.
                   20381:        Arguments are also now supported in def_editor.
                   20382:        [ff7303b8e298]
                   20383: 
                   20384: 2004-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20385: 
                   20386:        * parse.h:
                   20387:        alias_matches() is no more
                   20388:        [b59825e28084]
                   20389: 
                   20390:        * CHANGES, TODO:
                   20391:        sync
                   20392:        [2b8f5f63c1de]
                   20393: 
                   20394:        * Makefile.in:
                   20395:        When regenerating the parser, don't replace gram.h unless it has
                   20396:        changed.
                   20397:        [819949668018]
                   20398: 
                   20399:        * Makefile.in:
                   20400:        remove Makefile.binary for distclean
                   20401:        [351eec8d00b2]
                   20402: 
                   20403:        * env.c:
                   20404:        Preserve KRB5CCNAME in zero_env() and add a paranoia check to make
                   20405:        sure we can't overflow new_env.
                   20406:        [3284d17b9c6d]
                   20407: 
                   20408:        * sudo_edit.c:
                   20409:        paranoia when stripping trailing slashes from tempdir.
                   20410:        [012f1aa2b81f]
                   20411: 
                   20412:        * sudo.c:
                   20413:        Set user_ngroups to 0 if getgroups() returns an error.
                   20414:        [c46d43e9449a]
                   20415: 
                   20416: 2004-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20417: 
                   20418:        * config.h.in, configure, configure.in, sudo.c:
                   20419:        Add configure check for getgroups()
                   20420:        [5d8a214e2cef]
                   20421: 
                   20422:        * ldap.c:
                   20423:        Use supplementary group vector in struct sudo_user.
                   20424:        [3d0c463c034d]
                   20425: 
                   20426:        * match.c:
                   20427:        Only do string comparisons on the group members if there is no
                   20428:        supplemental group list.
                   20429:        [be1c8362f7ef]
                   20430: 
                   20431:        * CHANGES, TODO:
                   20432:        sync
                   20433:        [db188bc5b975]
                   20434: 
                   20435:        * sudo_edit.c:
                   20436:        On Digital UNIX _PATH_VAR_TMP doesn't end with a trailing slash so
                   20437:        chop off any trailing slashes we see and add an explicit one.
                   20438:        [e1b477dafee1]
                   20439: 
                   20440:        * match.c:
                   20441:        remove bogus XXX comment
                   20442:        [8aecb8a28d40]
                   20443: 
                   20444:        * match.c:
                   20445:        Get rid of alias_matches and correctly fall through to the non-alias
                   20446:        cases when there is no alias with the specified name.
                   20447:        [2cd555246f09]
                   20448: 
                   20449:        * getspwuid.c:
                   20450:        Cache non-existent passwd/group entries too.
                   20451:        [8de9a467d271]
                   20452: 
                   20453:        * gram.c:
                   20454:        regen
                   20455:        [9ece18c58f36]
                   20456: 
                   20457:        * getspwuid.c:
                   20458:        fix typo
                   20459:        [9a7ae371eac1]
                   20460: 
                   20461:        * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
                   20462:        mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
                   20463:        Implement group caching and use the passwd and group caches
                   20464:        throughout.
                   20465:        [f1d8c5015169]
                   20466: 
                   20467: 2004-11-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20468: 
                   20469:        * match.c:
                   20470:        Properly negate the return value of alias_matches() when
                   20471:        appropriate.
                   20472:        [ce59c4ce77ad]
                   20473: 
                   20474:        * match.c:
                   20475:        Make hostname_matches() return TRUE for a match, else FALSE like the
                   20476:        caller expects.
                   20477:        [1dc03902d3a2]
                   20478: 
                   20479:        * Makefile.in:
                   20480:        Add missing dependencies on gram.h
                   20481:        [4f94bbb1d50c]
                   20482: 
                   20483:        * match.c:
                   20484:        Use runas_matches in alias_matches() now that we have it.
                   20485:        [284d22e91178]
                   20486: 
                   20487:        * parse.c, parse.h:
                   20488:        Expand aliases in "sudo -l" mode
                   20489:        [f67a38b79c44]
                   20490: 
                   20491:        * gram.y, match.c:
                   20492:        Use ALIAS for the member type when storing an alias instead of
                   20493:        HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since match.c relies on the
                   20494:        more generic type. Expand runas_matches instead of calling
                   20495:        user_matches() inside of it since user_matches() looks up
                   20496:        USERALIASes, not RUNASALIASes.
                   20497:        [52004d75232b]
                   20498: 
                   20499:        * CHANGES, getspwuid.c:
                   20500:        Paranoia; zero out pw_passwd before freeing passwd entry.
                   20501:        [bd1b22638f00]
                   20502: 
                   20503:        * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
                   20504:        configure.in, defaults.c, emul/err.h, env.c, err.c, error.c,
                   20505:        error.h, find_path.c, interfaces.c, logging.c, mon_systrace.c,
                   20506:        sudo.c, sudo.h, sudo_edit.c, testsudoers.c, visudo.c:
                   20507:        Add local error/warning functions like err/warn but that call an
                   20508:        additional cleanup routine in the error case. This means we no
                   20509:        longer need to compile a special version of alloc.o for visudo.
                   20510:        [25000b676cfe]
                   20511: 
                   20512:        * match.c:
                   20513:        Use userpw_matches() to compare usernames, not strcmp(), since the
                   20514:        latter checks for "#uid".
                   20515:        [fcbe4b859f66]
                   20516: 
                   20517:        * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c:
                   20518:        Cache passwd db entries in 2 reb-black trees; one indexed by uid,
                   20519:        the other by user name. The data returned from the cache should be
                   20520:        considered read-only and is destroyed by sudo_endpwent().
                   20521:        [ee2418ff3f86]
                   20522: 
                   20523:        * match.c:
                   20524:        add cast to uid_t
                   20525:        [eb6415302d84]
                   20526: 
                   20527:        * gram.y:
                   20528:        missing free in alias_destroy
                   20529:        [572ecb680ad8]
                   20530: 
                   20531:        * redblack.c:
                   20532:        Can't use rbapply() for rbdestroy since the destructor is passed a
                   20533:        data pointer, not a node pointer.
                   20534:        [11ce713830c0]
                   20535: 
                   20536:        * getspwuid.c, logging.c, sudo.c, sudo.h:
                   20537:        Create and use private versions of setpwent() and endpwent() that
                   20538:        set/end the shadow password file too.
                   20539:        [616bc76d23bf]
                   20540: 
                   20541:        * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c, visudo.c:
                   20542:        Store aliases in a red-black tree.
                   20543:        [ce017d540416]
                   20544: 
                   20545:        * Makefile.in, redblack.c, redblack.h:
                   20546:        red-black tree implementation
                   20547:        [cd5586e8f48b]
                   20548: 
                   20549:        * visudo.c:
                   20550:        Edit all sudoers file if there were unused or undefined aliases and
                   20551:        we are in strict mode.
                   20552:        [b6d5f5bb7262]
                   20553: 
                   20554: 2004-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20555: 
                   20556:        * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
                   20557:        find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
                   20558:        Bring back the "secure_path" Defaults option now that Defaults take
                   20559:        effect before the path is searched.
                   20560:        [2e52c0e27606]
                   20561: 
                   20562: 2004-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20563: 
                   20564:        * logging.c, parse.c:
                   20565:        A user can always list their own entries, even with -u. Better error
                   20566:        message when failing to list another user's entries.
                   20567:        [e2e24deb0071]
                   20568: 
                   20569:        * parse.c, sudo.c, sudo.h:
                   20570:        The syntax to list another user's entries is now "-u otheruser -l".
                   20571:        Only root or users with sudo "ALL" may list other user's entries.
                   20572:        [3c0657e8f5fe]
                   20573: 
                   20574:        * sudo.cat, sudo.man.in, sudo.pod:
                   20575:        Update env variable info in SECURITY NOTES
                   20576:        [299716071024]
                   20577: 
                   20578:        * env.c:
                   20579:        strip CDPATH too
                   20580:        [9b97643b26f9]
                   20581: 
                   20582:        * env.c:
                   20583:        strip exported bash functions from the environment.
                   20584:        [9e5090c8284f]
                   20585: 
                   20586: 2004-10-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20587: 
                   20588:        * sudo.c:
                   20589:        Only reset sudo_user.pw based on SUDO_USER environment variables for
                   20590:        real commands and sudoedit. This avoids a confusing message when a
                   20591:        user tries "sudo -l" or "sudo -v" and is denied.
                   20592:        [3ea6d0053274]
                   20593: 
                   20594:        * gram.c, gram.y, parse.h:
                   20595:        Extend LIST_APPEND to deal with appending lists too
                   20596:        [d963e42f622f]
                   20597: 
                   20598: 2004-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20599: 
                   20600:        * logging.c:
                   20601:        Convert some bitwise AND to ISSET
                   20602:        [130dc40d268e]
                   20603: 
                   20604:        * lex.yy.c, toke.c:
                   20605:        toke.c replaces lex.yy.c
                   20606:        [048858df79e7]
                   20607: 
                   20608:        * CHANGES, TODO:
                   20609:        sync
                   20610:        [d19e7abf251c]
                   20611: 
                   20612:        * BUGS:
                   20613:        new parser fixes most of the outstanding bugs
                   20614:        [0891f66e3758]
                   20615: 
                   20616:        * configure:
                   20617:        regen
                   20618:        [1a3358cc7283]
                   20619: 
                   20620:        * visudo.c:
                   20621:        Rework for the new parser. Now checks for unused aliases in sudoers.
                   20622:        [ad462ede3094]
                   20623: 
                   20624:        * testsudoers.c:
                   20625:        Rewrite for the new parser. Now supports a -d flag (dump) and adds
                   20626:        a -h flag (host). It now defaults to the local hostname unless
                   20627:        otherwise specified.
                   20628:        [1b69685cc601]
                   20629: 
                   20630:        * sudo.h:
                   20631:        Add new prototypes. Remove NOMATCH/UNSPEC (now in parse.h)
                   20632:        [2e4fb3abfef0]
                   20633: 
                   20634:        * sudo.c:
                   20635:        Update for new parse. We now call find_path() *after* we have
                   20636:        updated the global defaults based on sudoers. Also adds support for
                   20637:        listing other user's privs if you are root.
                   20638:        [cf3db9fc3024]
                   20639: 
                   20640:        * mon_systrace.c:
                   20641:        Working LDAP support; also remove a now-unneeded rewind().
                   20642:        [649ecf1baf6b]
                   20643: 
                   20644:        * logging.c, logging.h:
                   20645:        Add NO_STDERR flag.
                   20646:        [6cb935af94e0]
                   20647: 
                   20648:        * ldap.c:
                   20649:        Split sudo_ldap_check() into three pieces: sudo_ldap_open(),
                   20650:        udo_ldap_update_defaults() and sudo_ldap_check(). This allows us to
                   20651:        connecto to LDAP, apply the default options, find the command in the
                   20652:        user's path, and then check whether the user is allowed to run it.
                   20653:        The important thing here is that the default runas user may be
                   20654:        specified as a default option and that needs to be set before we
                   20655:        search for the command.
                   20656:        [fc0426abc6f1]
                   20657: 
                   20658:        * ldap.c:
                   20659:        Add casts to unsigned char for isspace() to quiet a gcc warning.
                   20660:        [e5358e3df439]
                   20661: 
                   20662:        * defaults.h:
                   20663:        Add prototype for update_defaults()
                   20664:        [564dac3db74e]
                   20665: 
                   20666:        * defaults.c:
                   20667:        Don't warn about line numbers now that we operate on a set of data
                   20668:        structures (or LDAP) and not a file.
                   20669:        [bcd9ffb9b67c]
                   20670: 
                   20671:        * config.h.in:
                   20672:        No long use lsearch()
                   20673:        [9d048c587319]
                   20674: 
                   20675:        * Makefile.in:
                   20676:        Update for new and changed file names.
                   20677:        [6f424a7c4515]
                   20678: 
                   20679:        * LICENSE:
                   20680:        no more BSD lsearch.c
                   20681:        [463a96d89026]
                   20682: 
                   20683:        * match.c:
                   20684:        foo_matches() routines now live in match.c Added user_matches(),
                   20685:        runas_matches(), host_matches(), cmnd_matches() and alias_matches()
                   20686:        that operate on the parsed sudoers file.
                   20687:        [b14da8a0567e]
                   20688: 
                   20689:        * parse.lex, toke.l:
                   20690:        Move parse.lex -> toke.l Rename buffer_frob() -> switch_buffer()
                   20691:        WORD no longer needs to exclude '@' kill yywrap()
                   20692:        [a922294eb7b7]
                   20693: 
                   20694:        * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.c,
                   20695:        sudo.tab.h:
                   20696:        Rewritten parser that converts sudoers into a set of data
                   20697:        structures. This eliminates ordering issues and makes it possible to
                   20698:        apply sudoers Defaults entries before searching for the command.
                   20699:        [30d2ec4d203c]
                   20700: 
                   20701:        * configure.in, emul/search.h, lsearch.c:
                   20702:        We won't be using lsearch() any longer.
                   20703:        [29c4d54bfac0]
                   20704: 
                   20705:        * ldap.c:
                   20706:        sudo should not send mail if someone who runs 'sudo -l' has no
                   20707:        entry.
                   20708:        [6fc27a69fd9c]
                   20709: 
                   20710:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   20711:        visudo.man.in:
                   20712:        regen
                   20713:        [8166347917f3]
                   20714: 
                   20715:        * visudo.pod:
                   20716:        Update warnings to match new visudo
                   20717:        [004c0766798f]
                   20718: 
                   20719:        * sudoers.pod:
                   20720:        The new parser doesn't have the old ordering constraints.
                   20721:        [ffd43bd08661]
                   20722: 
                   20723:        * sudo.pod:
                   20724:        Document that -l now takes an optional username argument
                   20725:        [278f9557de8b]
                   20726: 
                   20727: 2004-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20728: 
                   20729:        * RUNSON:
                   20730:        AIX 5.2.0.0 works
                   20731:        [523acd29d858]
                   20732: 
                   20733:        * ldap.c:
                   20734:        If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS instead. Fixes
                   20735:        a compilation problem with Solaris 9's native LDAP.
                   20736: 
                   20737:        Set FLAG_MONITOR when needed.
                   20738:        [35824ade672d]
                   20739: 
                   20740: 2004-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20741: 
                   20742:        * mon_systrace.c:
                   20743:        Call sudo_goodpath() *after* changing the cwd to match the traced
                   20744:        process. Fixes relative paths.
                   20745:        [12ee111d0ad7]
                   20746: 
                   20747: 2004-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20748: 
                   20749:        * testsudoers.c:
                   20750:        Kill set_perms() stub--it is no longer needed.
                   20751:        [116ed702935d]
                   20752: 
                   20753: 2004-10-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20754: 
                   20755:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   20756:        stay_setuid now requires set_reuid() or setresuid()
                   20757:        [8511f67e25d5]
                   20758: 
                   20759:        * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
                   20760:        configure.in, set_perms.c, sudo.c, sudo.h:
                   20761:        Kill use of POSIX saved uids; they aren't worth bothering with.
                   20762:        [b3b1f19f18c1]
                   20763: 
                   20764: 2004-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20765: 
                   20766:        * glob.c:
                   20767:        remove call to issetugid()
                   20768:        [63f2e492c08f]
                   20769: 
                   20770:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   20771:        Remove warning about wildcards. Now that we use glob() the bug is
                   20772:        fixed.
                   20773:        [b15729d32266]
                   20774: 
                   20775:        * parse.c:
                   20776:        Use glob(3) instead of fnmatch(3) for matching pathnames and stat
                   20777:        each result that matches the basename of the user's command. This
                   20778:        makes "cd /usr/bin ; sudo ./blah" work when sudoers allows
                   20779:        /usr/bin/blah. Fixes bug #143.
                   20780:        [e31eb6310340]
                   20781: 
                   20782:        * config.h.in, configure, configure.in:
                   20783:        Define HAVE_EXTENDED_GLOB for extended glob (GLOB_TILDE and
                   20784:        GLOB_BRACE)
                   20785:        [677ed6661e17]
                   20786: 
                   20787:        * config.h.in, configure, configure.in:
                   20788:        Check for a glob() that supports GLOB_BRACE and GLOB_TILDE
                   20789:        [aaa2329dd266]
                   20790: 
                   20791:        * LICENSE:
                   20792:        reference glob
                   20793:        [bedc9a923423]
                   20794: 
                   20795:        * glob.c:
                   20796:        4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions
                   20797:        removed.
                   20798:        [81799451473c]
                   20799: 
                   20800:        * emul/glob.h:
                   20801:        4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions
                   20802:        removed.
                   20803:        [0335cf31fb1e]
                   20804: 
                   20805: 2004-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20806: 
                   20807:        * mon_systrace.c:
                   20808:        Just return if STRIOCINJECT or STRIOCREPLACE fail. It probably
                   20809:        means we are out of space in the stack gap...
                   20810:        [5b02b702021e]
                   20811: 
                   20812:        * CHANGES:
                   20813:        sync
                   20814:        [be3826273e56]
                   20815: 
                   20816:        * mon_systrace.c:
                   20817:        Take a stab at ldap sudoers support here.
                   20818:        [9d023695b0de]
                   20819: 
                   20820:        * mon_systrace.c, mon_systrace.h:
                   20821:        Detach from tracee on SIGHUP, SIGINT and SIGTERM. Now "sudo reboot"
                   20822:        doesn't cause reboot to inadvertanly kill itself.
                   20823:        [d4aab2365610]
                   20824: 
                   20825:        * mon_systrace.c:
                   20826:        put "monitor" in the proctitle, not "systrace"
                   20827:        [9a9025767d86]
                   20828: 
                   20829:        * mon_systrace.c:
                   20830:        When modifying the environment, don't replace envp when we can get
                   20831:        away with just rewriting pointers in the traced process.
                   20832:        [c03622f7a2e2]
                   20833: 
                   20834:        * mon_systrace.c, mon_systrace.h:
                   20835:        Add environment updating via STRIOCINJECT (if available).
                   20836:        [037291016870]
                   20837: 
                   20838:        * sudoers.cat, sudoers.man.in:
                   20839:        regen
                   20840:        [869acc511046]
                   20841: 
                   20842: 2004-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20843: 
                   20844:        * lex.yy.c:
                   20845:        regen
                   20846:        [4e61a9bd3c97]
                   20847: 
                   20848:        * parse.lex:
                   20849:        Fix bug introduced in unput() removal; want yyless(0) not yyless(1)
                   20850:        [b70d7bd6e147]
                   20851: 
                   20852:        * mon_systrace.c:
                   20853:        Include file is now mon_systrace.h
                   20854:        [ead4e36d92ae]
                   20855: 
                   20856:        * Makefile.in, configure, configure.in, def_data.c, def_data.h,
                   20857:        def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
                   20858:        sudo.c, sudo.h, sudo.tab.c, sudo.tab.h, sudoers.pod:
                   20859:        No longer call it tracing, it is now "monitoring" which should be
                   20860:        more a obvious name to non-hackers.
                   20861:        [aa811ded0789]
                   20862: 
                   20863: 2004-10-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20864: 
                   20865:        * mon_systrace.c, mon_systrace.h:
                   20866:        Fix some XXX
                   20867:        [a271072dacc6]
                   20868: 
                   20869:        * mon_systrace.c, mon_systrace.h:
                   20870:        No need to include syscall.h, use 1024 as the max # of entries (the
                   20871:        max that systrace(4) allows).
                   20872: 
                   20873:        Only need to use SYSTR_POLICY_ASSIGN once
                   20874: 
                   20875:        Change check_syscall() -> find_handler() and have it return the
                   20876:        handler instead of just running it. We need this since handler now
                   20877:        have two parts: one part that generates and answer and another that
                   20878:        gets called after the answer is accepted (to do logging).
                   20879: 
                   20880:        Add some missing check_exec for emul execv
                   20881:        [a89d243f0525]
                   20882: 
                   20883:        * sample.pam, sample.sudoers, sample.syslog.conf, sudoers:
                   20884:        Add $Sudo$ tags.
                   20885:        [6f3fedb0daba]
                   20886: 
                   20887:        * config.h.in:
                   20888:        Add missing HAVE_LINUX_SYSTRACE_H
                   20889:        [ff75ab7bfc53]
                   20890: 
                   20891:        * Makefile.in:
                   20892:        add trace_systrace.o dependency
                   20893:        [88a408668ab2]
                   20894: 
                   20895: 2004-09-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20896: 
                   20897:        * configure, configure.in:
                   20898:        Also look for systrace.h in /usr/include/linux
                   20899:        [98b98b436cf3]
                   20900: 
                   20901:        * mon_systrace.c, mon_systrace.h:
                   20902:        Move all struct defs and prototypes into trace_systrace.h and mark
                   20903:        all but systace_attach() static.
                   20904:        [85511253b570]
                   20905: 
                   20906:        * mon_systrace.c, mon_systrace.h:
                   20907:        Add support for tracing emulations. At the moment, all emulations
                   20908:        are compiled in. It might make sense to #ifdef them in the future,
                   20909:        though this impeeds readability.
                   20910:        [87bb50abf277]
                   20911: 
                   20912:        * Makefile.in, configure, configure.in:
                   20913:        rename systrace.c -> trace_systrace.c
                   20914:        [31cfa4407d93]
                   20915: 
                   20916:        * parse.yacc, sudo.tab.c:
                   20917:        Allow this to build with a K&R compiler again
                   20918:        [32876af5bb98]
                   20919: 
                   20920:        * TODO:
                   20921:        sync
                   20922:        [46865bd70f7c]
                   20923: 
                   20924:        * compat.h, sudo.c, visudo.c:
                   20925:        Use __attribute__((__noreturn__))
                   20926:        [65bbad71fe89]
                   20927: 
                   20928:        * visudo.c:
                   20929:        Exit() takes a negative value to indicate it was not called via
                   20930:        signal.
                   20931:        [b93032ed7b60]
                   20932: 
                   20933:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   20934:        visudo.man.in:
                   20935:        regen
                   20936:        [45bcf4661558]
                   20937: 
                   20938:        * Makefile.in, visudo.c:
                   20939:        Define Err() and Errx() that are like err() and errx() but call
                   20940:        Exit() instead of exit(). Build private copy of alloc.o for visudo
                   20941:        that calls Err() and Errx().
                   20942:        [c6d02bf42edd]
                   20943: 
                   20944: 2004-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20945: 
                   20946:        * lex.yy.c, sudo.tab.c:
                   20947:        regen
                   20948:        [39de7e7c59da]
                   20949: 
                   20950:        * CHANGES:
                   20951:        sync
                   20952:        [ba481d9ed1aa]
                   20953: 
                   20954:        * visudo.c:
                   20955:        Overhaul visudo for editing multiple files: o visudo has been
                   20956:        broken out into functions (more work needed here) o each file is
                   20957:        now edited before sudoers is re-parsed o if a #include line is
                   20958:        added that file will be edited too
                   20959: 
                   20960:        TODO: o cleanup temp files when exiting via err() or errx() o
                   20961:        continue breaking things out into separate functions
                   20962:        [80c35cf534eb]
                   20963: 
                   20964:        * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c:
                   20965:        Add keepopen arg to open_sudoers that open_sudoers can use to
                   20966:        indicate to the caller that the fd should not be closed when it is
                   20967:        done with it. To be used by visudo to keep locked fds from being
                   20968:        closed prematurely (and thus losing the lock).
                   20969:        [f330fe632470]
                   20970: 
                   20971:        * parse.yacc, sudo.c:
                   20972:        Add errorfile global that contains the name of the file that caused
                   20973:        the error.
                   20974:        [98079c7a37ed]
                   20975: 
                   20976:        * parse.lex:
                   20977:        return COMMENT to yacc grammar for a #include line
                   20978:        [2024a8de4fa8]
                   20979: 
                   20980:        * parse.lex:
                   20981:        Remove us of unput() in favor of yyless() which is cheaper.
                   20982:        [c61291902beb]
                   20983: 
                   20984:        * parse.yacc:
                   20985:        Allow an empty sudoers file.
                   20986:        [62fb111db2e7]
                   20987: 
                   20988: 2004-09-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   20989: 
                   20990:        * mon_systrace.c:
                   20991:        Rewind sudoers_fp now that sudoers_lookup() doesn't do it for us.
                   20992:        [9e15869ef597]
                   20993: 
                   20994:        * lex.yy.c, sudo.tab.c:
                   20995:        regen
                   20996:        [c29bdd43bfad]
                   20997: 
                   20998:        * visudo.c:
                   20999:        Do signal setup before calling edit_sudoers(). Don't shadow the
                   21000:        "quiet" global.
                   21001:        [74252efd09ff]
                   21002: 
                   21003:        * visudo.c:
                   21004:        If a sudoers file includes other files, edit those too. Does not yes
                   21005:        deal with creating the new includes files itself.
                   21006:        [06af7b9c173f]
                   21007: 
                   21008:        * testsudoers.c:
                   21009:        init_parser now takes a path
                   21010:        [b5ee186eb192]
                   21011: 
                   21012:        * parse.c, parse.h, parse.lex, parse.yacc:
                   21013:        More scaffolding for dealing with multiple sudoers files: o
                   21014:        init_parser() now takes a path used to populate the sudoers global
                   21015:        o the sudoers global is used to print the correct file in yyerror()
                   21016:        o when switching to a new sudoers file, perserve old file name and
                   21017:        line number
                   21018:        [d9be4970b8bd]
                   21019: 
                   21020:        * Makefile.in, pathnames.h.in:
                   21021:        Kill _PATH_SUDOERS_TMP; it is not meaningful now that we can have
                   21022:        multiple sudoers files.
                   21023:        [6ccc4e921c43]
                   21024: 
                   21025:        * parse.c, sudo.c:
                   21026:        Rewind sudoers_fp in open_sudoers() instead of sudoers_lookup() so
                   21027:        we start at the right file position when reading include files.
                   21028:        [91fcb961e7a4]
                   21029: 
                   21030:        * sudoers.pod:
                   21031:        document #include
                   21032:        [fbb92a25a726]
                   21033: 
                   21034:        * lex.yy.c:
                   21035:        regen
                   21036:        [50cd7a4c9dff]
                   21037: 
                   21038:        * parse.lex:
                   21039:        Add max depth of 128 for the include stack to avoid loops.
                   21040: 
                   21041:        Since yyerror() doesn't stop parsing, pass return values back to
                   21042:        yylex and call yyterminate() on error.
                   21043:        [e79dbffb729d]
                   21044: 
                   21045: 2004-09-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21046: 
                   21047:        * sudoers.pod:
                   21048:        document tracing
                   21049:        [165a467eadd8]
                   21050: 
                   21051:        * sudo.pod:
                   21052:        Mention PREVENTING SHELL ESCAPES section of sudoers man page
                   21053:        [3217ccecd834]
                   21054: 
                   21055:        * lex.yy.c, sudo.tab.c:
                   21056:        regen
                   21057:        [fbd58d1d3a76]
                   21058: 
                   21059:        * parse.lex:
                   21060:        Add support for #include in sudoers (visudo support TBD)
                   21061:        [a78015ca81af]
                   21062: 
                   21063:        * parse.yacc:
                   21064:        make yyerror()'s argument const
                   21065:        [7d8e168c019a]
                   21066: 
                   21067:        * testsudoers.c, visudo.c:
                   21068:        Add open_sudoers() stubs.
                   21069:        [087466787198]
                   21070: 
                   21071:        * sudo.c, sudo.h:
                   21072:        Rename check_sudoers() open_sudoers() and make it return a FILE *
                   21073:        [142fc511fc65]
                   21074: 
                   21075: 2004-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21076: 
                   21077:        * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
                   21078:        version.h:
                   21079:        Crank version
                   21080:        [1adc3f839480]
                   21081: 
                   21082:        * Makefile.in, sudo.psf:
                   21083:        Better HP-UX depot construction
                   21084:        [2d952b000e63]
                   21085: 
                   21086: 2004-09-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21087: 
                   21088:        * mon_systrace.c:
                   21089:        o Made children global so check_exec() can lookup a child. o
                   21090:        Replaced uid in struct childinfo with struct passwd * (for runas) o
                   21091:        new_child() now takes a parent pid so the runas info can be
                   21092:        inherited o Added find_child() to lookup a child by its pid o
                   21093:        update_child() now fills in a struct passwd o Converted the big
                   21094:        if/else mess in set_policy to a switch o Syscalls that change uid
                   21095:        are now "ask" so we get SYSTR_MSG_UGID events
                   21096:        [29b9ea3f09a3]
                   21097: 
                   21098:        * getspwuid.c:
                   21099:        Add flag to sudo_pwdup that indicates whether or not to lookup the
                   21100:        shadow password. Will be used to a struct passwd that has the
                   21101:        shadow password already filled in.
                   21102:        [e19d43dd7238]
                   21103: 
                   21104:        * mon_systrace.c:
                   21105:        add missing increment of addr in read_string()
                   21106:        [f9eb0f060cb6]
                   21107: 
                   21108:        * mon_systrace.c:
                   21109:        Remove bogus call to update_child() and some cosmetic fixes
                   21110:        [701ab0b97fef]
                   21111: 
                   21112:        * mon_systrace.c:
                   21113:        Don't leak /dev/systrace fd to tracee Make initialized global for
                   21114:        simplicity If STRIOCATTACH returns EBUSY we are already being traced
                   21115:        Check for user_args == NULL in setproctitle() call Add missing calls
                   21116:        to STRIOCANSWER
                   21117:        [1956edf9bc3a]
                   21118: 
                   21119:        * sudo.c:
                   21120:        g/c sudo_pwdup proto
                   21121:        [b7c4d6249ecb]
                   21122: 
                   21123:        * Makefile.in, sudo.psf:
                   21124:        Add target for building a depot file
                   21125:        [357019efd99b]
                   21126: 
                   21127:        * mon_systrace.c:
                   21128:        trim includes
                   21129:        [501534428471]
                   21130: 
                   21131: 2004-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21132: 
                   21133:        * lex.yy.c, sudo.tab.c, sudo.tab.h:
                   21134:        regen
                   21135:        [52fd250c6986]
                   21136: 
                   21137:        * INSTALL:
                   21138:        document --with-systrace
                   21139:        [79623927c94e]
                   21140: 
                   21141:        * config.h.in, configure, configure.in:
                   21142:        Add check for setproctitle
                   21143:        [1730cf1c26ed]
                   21144: 
                   21145:        * mon_systrace.c:
                   21146:        pass struct str_msg_ask in to syscall checker so it can set the
                   21147:        error code
                   21148:        [1703fd2fdef6]
                   21149: 
                   21150:        * mon_systrace.c:
                   21151:        systrace(4) support for sudo. On systems with the systrace(4)
                   21152:        kernel facility (OpenBSD, NetBSD, Linux w/ patches) sudo can
                   21153:        intercept exec calls and check the exec args against the sudoers
                   21154:        file. In other words, sudo can now control subcommands and shell
                   21155:        escapes.
                   21156:        [928c9217c386]
                   21157: 
                   21158:        * sudo.c, sudo.h:
                   21159:        Call systrace_attach() if FLAG_TRACE is set.
                   21160:        [014ba9402fa5]
                   21161: 
                   21162:        * parse.c, parse.h, parse.lex, parse.yacc, sudo.h:
                   21163:        Add trace Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
                   21164:        [a99904db5e56]
                   21165: 
                   21166:        * parse.c, sudo.c:
                   21167:        Don't close sudoers_fp, keep it open and set close on exec flag
                   21168:        instead.
                   21169:        [43a9fec60bee]
                   21170: 
                   21171:        * def_data.c, def_data.h, def_data.in:
                   21172:        Add trace option
                   21173:        [5b643b86730a]
                   21174: 
                   21175:        * Makefile.in:
                   21176:        Add systrace
                   21177:        [47a0519c427c]
                   21178: 
                   21179:        * INSTALL:
                   21180:        SunOS /bin/sh blows up with configure
                   21181:        [005a23cc5615]
                   21182: 
                   21183:        * configure, configure.in:
                   21184:        Include sys/param.h before systrace.h
                   21185:        [9345bc8efecf]
                   21186: 
                   21187:        * configure:
                   21188:        regen
                   21189:        [a8f53fcbb254]
                   21190: 
                   21191:        * pathnames.h.in:
                   21192:        _PATH_DEV_SYSTRACE
                   21193:        [d2ad1e492a00]
                   21194: 
                   21195:        * configure.in:
                   21196:        line up options in --help
                   21197:        [fa51f2821d09]
                   21198: 
                   21199:        * config.h.in, configure.in:
                   21200:        Add --with-systrace
                   21201:        [a264d54bc413]
                   21202: 
                   21203: 2004-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21204: 
                   21205:        * configure:
                   21206:        regen
                   21207:        [a4dad0bcc523]
                   21208: 
                   21209:        * aclocal.m4, configure.in:
                   21210:        make this work with autoconf-2.59
                   21211:        [c4a92b6a684a]
                   21212: 
                   21213: 2004-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21214: 
                   21215:        * sudo_edit.c:
                   21216:        Simplify logic around open & stat of files and do sanity on edited
                   21217:        file even if we lack fstat (still racable but worth doing).
                   21218:        [adda65ade70c]
                   21219: 
                   21220: 2004-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21221: 
                   21222:        * HISTORY:
                   21223:        Add support url
                   21224:        [bf6590fbde9f]
                   21225: 
                   21226:        * Makefile.in:
                   21227:        versino 1.6.8p1
                   21228:        [b84ebfaf1552] [SUDO_1_6_8p1]
                   21229: 
                   21230:        * CHANGES:
                   21231:        more changes for 1.6.8p1
                   21232:        [e23a9c0393b6]
                   21233: 
                   21234:        * version.h:
                   21235:        1.6.8p1
                   21236:        [872f14504b5f]
                   21237: 
                   21238:        * CHANGES, sudo_edit.c:
                   21239:        Add sanity check so we don't try to edit something other than a
                   21240:        regular file.
                   21241:        [350134ec6d4e]
                   21242: 
                   21243: 2004-09-15  Aaron Spangler  <aaron777@gmail.com>
                   21244: 
                   21245:        * CHANGES:
                   21246:        sync
                   21247:        [3091ca9eae00]
                   21248: 
                   21249:        * INSTALL:
                   21250:        document --with-ldap-conf-file
                   21251:        [0e2cd6b896f1]
                   21252: 
                   21253: 2004-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21254: 
                   21255:        * CHANGES, ins_csops.h:
                   21256:        political correctness strikes again
                   21257:        [428e8bc77f55]
                   21258: 
                   21259:        * RUNSON:
                   21260:        sync
                   21261:        [27f44bd423dc]
                   21262: 
                   21263: 2004-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21264: 
                   21265:        * Makefile.binary.in, Makefile.in:
                   21266:        Install sudoedit man link
                   21267:        [19a55234fc1f]
                   21268: 
                   21269:        * INSTALL:
                   21270:        Update PAM note and mention where HP-UX users can download gcc
                   21271:        binaries.
                   21272:        [d37cdbbabfd4]
                   21273: 
                   21274:        * Makefile.in:
                   21275:        libtool wants to install stuff from .libs so fake one up for binary
                   21276:        installations.
                   21277:        [a681bc6fcfba]
                   21278: 
                   21279:        * Makefile.binary.in:
                   21280:        rm -f old sudoedit link instead of using ln -f set LIBTOOL correctly
                   21281:        [3e0c4b3372cc]
                   21282: 
                   21283:        * Makefile.in:
                   21284:        Deal with "uname -m" having slashes in it rm -f old sudoedit link
                   21285:        instead of using ln -f
                   21286:        [cff33fb97e5b]
                   21287: 
                   21288:        * Makefile.binary, Makefile.binary.in:
                   21289:        Makefile.binary -> Makefile.binary.in for config.status substitution
                   21290:        Add support for installing noexec bits
                   21291:        [37d8bb3483c6]
                   21292: 
                   21293:        * Makefile.in:
                   21294:        Copy noexec bits into binary dists too No longer use my old arch
                   21295:        script for making binary dists
                   21296:        [e7058bab9e33]
                   21297: 
                   21298:        * Makefile.binary:
                   21299:        Install sudoedit link.
                   21300:        [417d1e101711]
                   21301: 
                   21302: 2004-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21303: 
                   21304:        * emul/utime.h:
                   21305:        avoid __P so there is no need for compat.h to be included
                   21306:        [6d8d1f1abf7d]
                   21307: 
                   21308:        * utimes.c:
                   21309:        Don't use HAVE_UTIME_H before including config.h.
                   21310:        [013b7bb61181]
                   21311: 
                   21312: 2004-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21313: 
                   21314:        * compat.h:
                   21315:        Fix Solatis futimes macro
                   21316:        [d4eda2ca0d29]
                   21317: 
                   21318: 2004-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21319: 
                   21320:        * sudo_edit.c:
                   21321:        Rename ots -> omtim for improved readability.
                   21322:        [127ca5bb297c]
                   21323: 
                   21324: 2004-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21325: 
                   21326:        * sudo_edit.c:
                   21327:        Redo changes in revision 1.7. Don't really need to keep the temp
                   21328:        file open; re-opening it with the invoking user's euid is
                   21329:        sufficient.
                   21330:        [55a883165a95]
                   21331: 
                   21332:        * CHANGES:
                   21333:        sync
                   21334:        [9015b291170d]
                   21335: 
                   21336:        * sudo.cat, sudo.man.in:
                   21337:        regen
                   21338:        [c0313f6ed783]
                   21339: 
                   21340:        * sudo.pod:
                   21341:        back out revision 1.70; it is no long applicable
                   21342:        [b641d503aff6]
                   21343: 
                   21344:        * env.c:
                   21345:        Let the loader initialize nep
                   21346:        [bec192139b02]
                   21347: 
                   21348:        * config.h.in, configure, configure.in:
                   21349:        Removed unneed check for fchown Add check for gettimeofday Move
                   21350:        autoheader template stuff into separate AH_TEMPLATE lines
                   21351:        [bfc0edbd43f2]
                   21352: 
                   21353:        * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c:
                   21354:        Use timespec throughout.
                   21355:        [1a178a23b69b]
                   21356: 
                   21357:        * Makefile.in:
                   21358:        gettime.[co]
                   21359:        [6aeb48a7ab7f]
                   21360: 
                   21361:        * gettime.c:
                   21362:        function to return the current time in a struct timespec
                   21363:        [bf8eb12cb63f]
                   21364: 
                   21365:        * utimes.c:
                   21366:        Not a darpa-sponsored file.
                   21367:        [121ce5e2036c]
                   21368: 
                   21369: 2004-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21370: 
                   21371:        * compat.h, config.h.in, configure, configure.in:
                   21372:        Add a check for struct timespec and provide it for those without.
                   21373:        [42124055030d]
                   21374: 
                   21375:        * config.h.in, configure, configure.in, sudo_edit.c:
                   21376:        Add checks for st_mtim and st_mtimespec and add macros for pulling
                   21377:        the mtime sec and nsec out of struct stat. These are used in
                   21378:        sudo_edit() to better tell whether or not the file has changed.
                   21379:        [23debfbb3fab]
                   21380: 
                   21381:        * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c:
                   21382:        Add an extra param to touch() for nsec
                   21383:        [56f7a4ba8ddb]
                   21384: 
                   21385:        * sudo_edit.c:
                   21386:        Call mkstemp() as the in invoking user so we don't have to chown the
                   21387:        file later. Only touch() the temp file if we can do it via the file
                   21388:        descriptor. Don't check for modification of the temp file if we lack
                   21389:        fstat(). Catch errors read()ing the temp file.
                   21390:        [665f52c70836]
                   21391: 
                   21392:        * fileops.c:
                   21393:        If path is NULL and fd == -1 return -1.
                   21394:        [757a518a824c]
                   21395: 
                   21396:        * sudo_edit.c:
                   21397:        closefrom() is overkill, the only extra fds are the ones we opened
                   21398:        so just close those in the child.
                   21399:        [f361c9d2a1f4]
                   21400: 
                   21401:        * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in, configure,
                   21402:        configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c, utimes.c,
                   21403:        visudo.c:
                   21404:        Use utimes() and futimes() instead of utime() in touch(), emulating
                   21405:        as needed. Not all systems are able to support setting the times of
                   21406:        an fd so touch() takes both an fd and a file name as arguments.
                   21407:        [3d9276f29717]
                   21408: 
                   21409: 2004-09-07  Aaron Spangler  <aaron777@gmail.com>
                   21410: 
                   21411:        * env.c:
                   21412:        Rare SEGV
                   21413:        [8995f828782d]
                   21414: 
                   21415: 2004-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21416: 
                   21417:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   21418:        visudo.man.in:
                   21419:        regen
                   21420:        [b8e9406711c5]
                   21421: 
                   21422:        * sudo.pod, sudoers.pod, visudo.pod:
                   21423:        Add SUPPORT section and re-order some of the sections to match the
                   21424:        order we use in OpenBSD.
                   21425:        [fa37bd917e2c]
                   21426: 
                   21427: 2004-09-06  Aaron Spangler  <aaron777@gmail.com>
                   21428: 
                   21429:        * env.c:
                   21430:        Openldap ~/.ldaprc fix
                   21431:        [1a37afe6850f]
                   21432: 
                   21433: 2004-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21434: 
                   21435:        * sudo.pod:
                   21436:        Talk about how the editor must write its changes to the original
                   21437:        file and not just use rename(2).
                   21438:        [c55ed91c5ee9]
                   21439: 
                   21440:        * CHANGES:
                   21441:        sync
                   21442:        [62af26bd37a2]
                   21443: 
                   21444:        * sudo_edit.c:
                   21445:        Keep the temp file open instead of re-opening after the editor has
                   21446:        exited.
                   21447:        [de41eeb6dcf2]
                   21448: 
                   21449:        * sample.pam:
                   21450:        Update for current redhat/fedora core.
                   21451:        [8cf083077333]
                   21452: 
                   21453: 2004-09-03  Aaron Spangler  <aaron777@gmail.com>
                   21454: 
                   21455:        * README.LDAP:
                   21456:        tls_ examples
                   21457:        [ba783d88a034]
                   21458: 
                   21459: 2004-09-02  Aaron Spangler  <aaron777@gmail.com>
                   21460: 
                   21461:        * ldap.c:
                   21462:        config tls_* options
                   21463:        [0b0e0797b3b9]
                   21464: 
                   21465: 2004-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21466: 
                   21467:        * configure, configure.in:
                   21468:        No need for -lcrypt when using pam.
                   21469:        [41fff3a53e68]
                   21470: 
                   21471: 2004-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21472: 
                   21473:        * configure:
                   21474:        regen
                   21475:        [75820aecce2c]
                   21476: 
                   21477: 2004-08-27  Aaron Spangler  <aaron777@gmail.com>
                   21478: 
                   21479:        * configure.in, ldap.c, pathnames.h.in:
                   21480:        Allow --with-ldap-conf-file option to override LDAP_CONF
                   21481:        [c9909bc484a5]
                   21482: 
                   21483:        * ldap.c:
                   21484:        cleanup debug message
                   21485:        [1f6ca4824d8d]
                   21486: 
                   21487: 2004-08-26  Aaron Spangler  <aaron777@gmail.com>
                   21488: 
                   21489:        * README.LDAP:
                   21490:        more config info
                   21491:        [f2e7147fd507]
                   21492: 
                   21493: 2004-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21494: 
                   21495:        * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
                   21496:        Add cmnd_base to struct sudo_user and set it in init_vars(). Add
                   21497:        cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
                   21498:        longer use gross statics in command_matches(). Also rename some
                   21499:        variables for improved clarity.
                   21500:        [7169a6c7bea4]
                   21501: 
                   21502: 2004-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21503: 
                   21504:        * INSTALL:
                   21505:        document HP's crippled compiler deficiency.
                   21506:        [c405ea5a8d4c]
                   21507: 
                   21508:        * INSTALL:
                   21509:        Fix some thinkos in --with-editor and --with-env-editor
                   21510:        descriptions. Noticed by Norihiko Murase.
                   21511:        [dd781de1c985]
                   21512: 
                   21513:        * configure, configure.in:
                   21514:        --with-noexec takes an optional PATH argument.
                   21515:        [8f6ab77f22cc]
                   21516: 
                   21517:        * INSTALL:
                   21518:        document --with-noexec
                   21519:        [50cb1fc627ce]
                   21520: 
                   21521: 2004-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21522: 
                   21523:        * RUNSON, TODO:
                   21524:        sync
                   21525:        [f2503bd13373] [SUDO_1_6_8]
                   21526: 
                   21527:        * sudo_edit.c:
                   21528:        Better warning message when sudoedit is unable to write to the
                   21529:        destination file.
                   21530:        [f78c18f2ffa8]
                   21531: 
                   21532:        * sudo.cat, sudo.man.in:
                   21533:        regen
                   21534:        [7e2bf63d6d9a]
                   21535: 
                   21536:        * sudo.pod:
                   21537:        Don't italicize the string "sudoedit"
                   21538:        [c691643bd269]
                   21539: 
                   21540: 2004-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21541: 
                   21542:        * HISTORY:
                   21543:        Mention GratiSoft.
                   21544:        [dc53de581b2d]
                   21545: 
                   21546: 2004-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21547: 
                   21548:        * sudo.tab.c:
                   21549:        regen
                   21550:        [8ae0484dfc38]
                   21551: 
                   21552:        * parse.yacc:
                   21553:        Reset used_runas to FALSE when re-intializing the parser.
                   21554:        [b7403f353a02]
                   21555: 
                   21556: 2004-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21557: 
                   21558:        * config.guess:
                   21559:        Correct OpenBSD mips support
                   21560:        [314fc7afc165]
                   21561: 
                   21562:        * config.guess:
                   21563:        Add OpenBSD/mips
                   21564:        [ac87d0a773ef]
                   21565: 
                   21566: 2004-08-07  Aaron Spangler  <aaron777@gmail.com>
                   21567: 
                   21568:        * README.LDAP:
                   21569:        More behavior notes
                   21570:        [13be1d212b47]
                   21571: 
                   21572:        * README.LDAP:
                   21573:        Updates on current behavior
                   21574:        [d498a8866d6f]
                   21575: 
                   21576: 2004-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21577: 
                   21578:        * sudoers.pod:
                   21579:        =back does not take an indentlevel (makes no difference to formatted
                   21580:        files).
                   21581:        [9c8523bb382a]
                   21582: 
                   21583:        * sudo.pod:
                   21584:        =back does not take an indentlevel (makes no difference to formatted
                   21585:        files).
                   21586:        [e5f479e24fa8]
                   21587: 
                   21588:        * CHANGES:
                   21589:        new
                   21590:        [2dbd9aba8b33]
                   21591: 
                   21592:        * sudo.c:
                   21593:        Consistency. Use same error for bad -u #uid when targetpw is set as
                   21594:        we do when a bad -u username is specified.
                   21595:        [922961c4a9d6]
                   21596: 
                   21597:        * TODO:
                   21598:        Add checksum idea from Steve Mancini
                   21599:        [e6ece1b766ba]
                   21600: 
                   21601:        * sudoers.cat, sudoers.man.in:
                   21602:        regen
                   21603:        [370d2317829f]
                   21604: 
                   21605:        * sudo.cat, sudo.man.in:
                   21606:        regen
                   21607:        [f93d41fc38b1]
                   21608: 
                   21609:        * sudo.pod, sudoers.pod:
                   21610:        Document the restriction on uids specified via -u when targetpw is
                   21611:        set.
                   21612:        [878fedb455db]
                   21613: 
                   21614:        * sudo.c:
                   21615:        Error out when targetpw is enabled and sudo is run with -u #uid but
                   21616:        #uid does not exist in the passwd database. We can't do target
                   21617:        authentication when the target is not in passwd!
                   21618:        [27c5888c86eb]
                   21619: 
                   21620:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
                   21621:        regen
                   21622:        [ceb65711050c]
                   21623: 
                   21624:        * TODO:
                   21625:        Some more todo for the next release.
                   21626:        [7b7417be7601]
                   21627: 
                   21628:        * INSTALL:
                   21629:        Make it clear that PAM should be used for DCE support when possible.
                   21630:        [7502029fd385]
                   21631: 
                   21632:        * sudoers.pod:
                   21633:        o Document problems with wildcards and relative paths. o Make the
                   21634:        order requirements more prominent. o Change a "set" to "reset" for
                   21635:        clarity.
                   21636:        [bacdd181b33f]
                   21637: 
                   21638: 2004-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21639: 
                   21640:        * sudo.pod:
                   21641:        Mention --with-secure-path, not SECURE_PATH.
                   21642:        [41283ddde5e1]
                   21643: 
                   21644: 2004-08-03  Aaron Spangler  <aaron777@gmail.com>
                   21645: 
                   21646:        * ldap.c:
                   21647:        reflect changes to parse.c
                   21648:        [8880fe9b724d]
                   21649: 
                   21650: 2004-08-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21651: 
                   21652:        * sudo.tab.c:
                   21653:        regen
                   21654:        [a57658ca9177]
                   21655: 
                   21656:        * parse.c, parse.h, testsudoers.c, visudo.c:
                   21657:        Don't pass user_cmnd and user_args to command_matches(), just use
                   21658:        the globals there. Since we keep state with statics anyway it is
                   21659:        misleading to pretend that passing in different cmnd and cmnd_args
                   21660:        will work.
                   21661:        [0a2544991fd6]
                   21662: 
                   21663:        * parse.yacc:
                   21664:        Don't pass user_cmnd and user_args to command_matches(), just use
                   21665:        the globals there. Since we keep state with statics anyway it is
                   21666:        misleading to pretend that passing in different cmnd and cmnd_args
                   21667:        will work.
                   21668:        [a4910bf6032b]
                   21669: 
                   21670:        * parse.c:
                   21671:        Fix a bug introduced in rev. 1.149. When checking for pseudo-
                   21672:        commands check for a '/' anywhere in cmnd, not just the first
                   21673:        character.
                   21674:        [ce98142f03ca]
                   21675: 
                   21676: 2004-07-31  Aaron Spangler  <aaron777@gmail.com>
                   21677: 
                   21678:        * sudo.man.in, sudo.pod:
                   21679:        Clarification thanks to Olivier Blin <oblin@mandrakesoft.com>
                   21680:        [a91800e094b1]
                   21681: 
                   21682:        * sudoers.man.in, sudoers.pod:
                   21683:        Add ignore_local_sudoers
                   21684:        [741ddcbf7083]
                   21685: 
                   21686:        * README.LDAP:
                   21687:        Sun One schema definition by Andreas.Bussjaeger@t-systems.com and
                   21688:        janth@moldung.no
                   21689:        [742c02e07cd9]
                   21690: 
                   21691: 2004-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21692: 
                   21693:        * CHANGES:
                   21694:        typo
                   21695:        [e7cdefbd7a9a]
                   21696: 
                   21697: 2004-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21698: 
                   21699:        * CHANGES:
                   21700:        sync
                   21701:        [734dafc4a85e]
                   21702: 
                   21703:        * parse.c:
                   21704:        Parse sudoers file as PERM_RUNAS not PERM_ROOT and remove a useless
                   21705:        PERM_SUDOERS. Restore to PERM_ROOT upon exit of the parse.
                   21706:        [151b7f593568]
                   21707: 
                   21708: 2004-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21709: 
                   21710:        * CHANGES:
                   21711:        PAM change
                   21712:        [d8fb6d6a22d0]
                   21713: 
                   21714: 2004-07-08  Aaron Spangler  <aaron777@gmail.com>
                   21715: 
                   21716:        * ldap.c:
                   21717:        Better debugging of ALL command
                   21718:        [9db3e84029dc]
                   21719: 
                   21720: 2004-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21721: 
                   21722:        * parse.c:
                   21723:        When matching for "sudoedit" in sudoers check both the command the
                   21724:        user typed *and* the command that is listed in the sudoers entry.
                   21725:        [f36ca1f94095]
                   21726: 
                   21727: 2004-07-04  Aaron Spangler  <aaron777@gmail.com>
                   21728: 
                   21729:        * ldap.c:
                   21730:        Added !command feature
                   21731:        [ed539574611b]
                   21732: 
                   21733: 2004-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21734: 
                   21735:        * auth/pam.c:
                   21736:        Use pam_acct_mgmt() to check for disabled accounts; Brian Farrell
                   21737:        [2be8e0e8813a]
                   21738: 
                   21739: 2004-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21740: 
                   21741:        * LICENSE:
                   21742:        License is ISC-style, not BSD-style
                   21743:        [ac0589e1dd5d]
                   21744: 
                   21745:        * CHANGES:
                   21746:        sync
                   21747:        [16058a30f404]
                   21748: 
                   21749: 2004-06-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21750: 
                   21751:        * sudo.cat, sudo.man.in:
                   21752:        regen
                   21753:        [8820eb9c809b]
                   21754: 
                   21755:        * sudo.pod:
                   21756:        o Update some out of date bits to reality o Change the shell promt
                   21757:        in examples to bourne-shell style o Clarify some details o Add a
                   21758:        CAVEAT about "sudo cd /foo"
                   21759:        [b0af373214b6]
                   21760: 
                   21761:        * check.c:
                   21762:        Don't ask for a password if invoking user == target user.
                   21763:        [dd5c96141132]
                   21764: 
                   21765:        * sudo.c:
                   21766:        typo in comment
                   21767:        [278d20f9b249]
                   21768: 
                   21769: 2004-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21770: 
                   21771:        * sudoers.cat, sudoers.man.in:
                   21772:        regen
                   21773:        [9036c6f39eff]
                   21774: 
                   21775:        * sudoers.pod:
                   21776:        Expand on NOEXEC a little.
                   21777:        [9a13756aebe4]
                   21778: 
                   21779:        * TODO:
                   21780:        sync
                   21781:        [8d2c1af48de8]
                   21782: 
                   21783:        * visudo.cat, visudo.man.in:
                   21784:        regen
                   21785:        [3921f01607c8]
                   21786: 
                   21787:        * sudo.tab.c:
                   21788:        regen
                   21789:        [9338c3d68250]
                   21790: 
                   21791:        * visudo.pod:
                   21792:        Add a check in visudo for runas_default being set after it has
                   21793:        already been used.
                   21794:        [6700358d7ad8]
                   21795: 
                   21796:        * CHANGES, parse.yacc, visudo.c:
                   21797:        Add a check in visudo for runas_default being set after it has
                   21798:        already been used.
                   21799:        [803560986a8a]
                   21800: 
                   21801:        * sudo.tab.c:
                   21802:        regen
                   21803:        [b60636e2cf63]
                   21804: 
                   21805:        * parse.yacc:
                   21806:        Add a MATCHED macro for testing whether foo_matches has been set to
                   21807:        TRUE or FALSE. This is more readable than checking for >=0 or < 0.
                   21808:        Doesn't change the actual code generated.
                   21809:        [f376da8ccdc8]
                   21810: 
                   21811: 2004-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21812: 
                   21813:        * sudoers.cat:
                   21814:        regen
                   21815:        [6cceb6d6c9bd]
                   21816: 
                   21817:        * sudoers.man.in:
                   21818:        regen
                   21819:        [5acd12b730b3]
                   21820: 
                   21821:        * sudoers.pod:
                   21822:        Correct description of where Defaults specs should go.
                   21823:        [6b11ff53d7ad]
                   21824: 
                   21825:        * sudoers:
                   21826:        Correct description of where Defaults specs should go.
                   21827:        [868db857630d]
                   21828: 
                   21829:        * testsudoers.c, visudo.c:
                   21830:        update (c) year
                   21831:        [272c8a53604c]
                   21832: 
                   21833:        * logging.h:
                   21834:        update (c) year
                   21835:        [3cec76d400ce]
                   21836: 
                   21837:        * ldap.c:
                   21838:        update (c) year
                   21839:        [f264632488a0]
                   21840: 
                   21841:        * find_path.c:
                   21842:        update (c) year
                   21843:        [40c227af9227]
                   21844: 
                   21845:        * auth/pam.c:
                   21846:        update (c) year
                   21847:        [87149e0eed50]
                   21848: 
                   21849:        * auth/bsdauth.c, auth/kerb5.c:
                   21850:        update (c) year
                   21851:        [d72eb434c068]
                   21852: 
                   21853: 2004-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21854: 
                   21855:        * sudo.tab.c:
                   21856:        regen
                   21857:        [83408d9e9d2e]
                   21858: 
                   21859:        * auth/bsdauth.c, auth/kerb5.c, auth/pam.c, visudo.c:
                   21860:        Remove trailing spaces, no actual code changes.
                   21861:        [4c3bf2819293]
                   21862: 
                   21863:        * tgetpass.c:
                   21864:        Remove trailing spaces, no actual code changes.
                   21865:        [96f6e0a24c26]
                   21866: 
                   21867:        * ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c:
                   21868:        Remove trailing spaces, no actual code changes.
                   21869:        [c7075d1cbed5]
                   21870: 
                   21871:        * getcwd.c:
                   21872:        Remove trailing spaces, no actual code changes.
                   21873:        [776cc0374547]
                   21874: 
                   21875:        * find_path.c:
                   21876:        Remove trailing spaces, no actual code changes.
                   21877:        [7ed7099f3c71]
                   21878: 
                   21879:        * compat.h, defaults.c, env.c:
                   21880:        Remove trailing spaces, no actual code changes.
                   21881:        [893e83c33795]
                   21882: 
                   21883:        * check.c:
                   21884:        Remove trailing spaces, no actual code changes.
                   21885:        [f77750f8803b]
                   21886: 
                   21887:        * sudo.tab.c:
                   21888:        regen
                   21889:        [62e0ed883b31]
                   21890: 
                   21891:        * parse.yacc:
                   21892:        Fix a >=0 that should be <0 that was improperly converted when
                   21893:        UNSPEC was added.
                   21894:        [ad1531a55a49]
                   21895: 
                   21896:        * parse.yacc:
                   21897:        Add do {} while(0) around pop macro Set cmnd_matches to UNSPEC, not
                   21898:        NOMATCH when resetting it.
                   21899:        [ae017a12870a]
                   21900: 
                   21901:        * parse.yacc:
                   21902:        Fix pastos introduced in SETNMATCH addition.
                   21903:        [6ea1c9d80681]
                   21904: 
                   21905: 2004-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21906: 
                   21907:        * README.LDAP:
                   21908:        Update for configure changes
                   21909:        [637a635da287]
                   21910: 
                   21911:        * sudo.tab.c:
                   21912:        regen
                   21913:        [4753c2788713]
                   21914: 
                   21915:        * sudo.h:
                   21916:        Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use
                   21917:        these in parse.yacc. Also in parse.yacc initialize the *_matches
                   21918:        vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use
                   21919:        when setting *_matches to a value that may be
                   21920:        NOMATCH/UNSPEC/TRUE/FALSE.
                   21921:        [2ba622e15a4d]
                   21922: 
                   21923:        * parse.yacc:
                   21924:        Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use
                   21925:        these in parse.yacc. Also in parse.yacc initialize the *_matches
                   21926:        vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use
                   21927:        when setting *_matches to a value that may be
                   21928:        NOMATCH/UNSPEC/TRUE/FALSE.
                   21929:        [746b519e41a6]
                   21930: 
                   21931:        * parse.yacc:
                   21932:        Initialize runas to -2, not -1 since we need to be able to
                   21933:        distinguish between the initialized value and the value of a non-
                   21934:        match when passing along the runas value to multiple commands.
                   21935: 
                   21936:        The result of this is that an unmatched runas is now set to -1, not
                   21937:        0. This is required now that parse.c treats a FALSE value for runas
                   21938:        as being explicitly denied.
                   21939:        [7791ed3621f6]
                   21940: 
                   21941: 2004-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21942: 
                   21943:        * sudo.c, visudo.c:
                   21944:        Error out if argc < 1.
                   21945:        [ce6b2a9eda3c]
                   21946: 
                   21947:        * getprogname.c:
                   21948:        Error out if argc < 1.
                   21949:        [c566cce8dc78]
                   21950: 
                   21951:        * configure, configure.in:
                   21952:        Add tests for what libs we need to link with for ldap and for
                   21953:        whether or not lber.h needs to be explicitly included.
                   21954:        [b2e9729cc4e7]
                   21955: 
                   21956: 2004-06-03  Aaron Spangler  <aaron777@gmail.com>
                   21957: 
                   21958:        * ldap.c:
                   21959:        Solaris native LDAP build fix
                   21960:        [39929e40eb11]
                   21961: 
                   21962: 2004-06-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   21963: 
                   21964:        * ldap.c:
                   21965:        Set edn to NULL is ldap_get_dn() fails to avoid potential use of an
                   21966:        unset variable.
                   21967:        [6a4c20a66f98]
                   21968: 
                   21969:        * sudo.h:
                   21970:        Add prototype for sudo_ldap_list_matches
                   21971:        [443b007a8dab]
                   21972: 
                   21973:        * configure, configure.in:
                   21974:        Better check for dirfd macro--we now set HAVE_DIRFD for the macro
                   21975:        version too. Added check for dd_fd in `DIR' if no dirfd is found;
                   21976:        this is now used to confitionally define the dirfd macro in
                   21977:        compat.h.
                   21978:        [567656978f7e]
                   21979: 
                   21980:        * config.h.in:
                   21981:        Better check for dirfd macro--we now set HAVE_DIRFD for the macro
                   21982:        version too. Added check for dd_fd in `DIR' if no dirfd is found;
                   21983:        this is now used to confitionally define the dirfd macro in
                   21984:        compat.h.
                   21985:        [34eace4faec8]
                   21986: 
                   21987:        * compat.h:
                   21988:        Better check for dirfd macro--we now set HAVE_DIRFD for the macro
                   21989:        version too. Added check for dd_fd in `DIR' if no dirfd is found;
                   21990:        this is now used to confitionally define the dirfd macro in
                   21991:        compat.h.
                   21992:        [8d50ff1bbf2a]
                   21993: 
                   21994:        * closefrom.c:
                   21995:        Only check /proc/$$/fd if we have the dirfd function/macro.
                   21996:        [15e3ccce7553]
                   21997: 
                   21998:        * compat.h, config.h.in, configure, configure.in:
                   21999:        Add a check for a dirfd() function (like Linux) and add a dirfd
                   22000:        macro in compat.h if there is no dirfd() function or macro.
                   22001:        [1e95756edb50]
                   22002: 
                   22003:        * closefrom.c, getcwd.c:
                   22004:        dirfd() is now defined in compat.h as needed.
                   22005:        [bb1d79271188]
                   22006: 
                   22007:        * CHANGES:
                   22008:        Clarify closefrom() note.
                   22009:        [f4e4a5508dda]
                   22010: 
                   22011:        * parse.c:
                   22012:        When checking for a command in the directory, only copy the base dir
                   22013:        once.
                   22014:        [7a3276808b87]
                   22015: 
                   22016:        * closefrom.c:
                   22017:        If there is a /proc/$$/fd directory, behave like the Solaris
                   22018:        closefrom() and only close the descriptors listed therein.
                   22019:        [19de23779e84]
                   22020: 
                   22021:        * alloc.c:
                   22022:        compat.h guarantees INT_MAX is defined.
                   22023:        [1bf0c79d4606]
                   22024: 
                   22025:        * compat.h:
                   22026:        Add definitions of OPEN_MAX and INT_MAX for those without it and
                   22027:        remove definition of RLIM_INFINITY (now unused).
                   22028:        [f827d1ebf96e]
                   22029: 
                   22030:        * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c, parse.c,
                   22031:        sudo.c, sudo.h, visudo.c:
                   22032:        Use PATH_MAX, not MAXPATHLEN since the former is standardized.
                   22033:        [59788f211c24]
                   22034: 
                   22035: 2004-05-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22036: 
                   22037:        * CHANGES:
                   22038:        sync
                   22039:        [d32fa124f1ad]
                   22040: 
                   22041:        * RUNSON:
                   22042:        Add some entries that were mailed in a while ago
                   22043:        [ff8d5bfec54e]
                   22044: 
                   22045:        * closefrom.c:
                   22046:        o sysconf returns a long, not an int. o check for negative return
                   22047:        value from sysconf/getdtablesize and use OPEN_MAX in this case. o
                   22048:        define OPEN_MAX to 256 for those without it (a fair guess...)
                   22049:        [ccf81ae6deb2]
                   22050: 
                   22051: 2004-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22052: 
                   22053:        * UPGRADE:
                   22054:        Mention change in parse order for RunAs entries.
                   22055:        [dc73b0bca617]
                   22056: 
                   22057:        * configure:
                   22058:        regen
                   22059:        [07cce8e0534e]
                   22060: 
                   22061: 2004-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22062: 
                   22063:        * INSTALL, README.LDAP, config.h.in, configure.in:
                   22064:        o --with-ldap now takes an optional dir as a parameter o added
                   22065:        check for ldap_initialize() and start_tls_s()
                   22066:        [2b846c7974c6]
                   22067: 
                   22068:        * README.LDAP:
                   22069:        Fix some typos, word choice and formatting issues.
                   22070:        [00dc8ca84b10]
                   22071: 
                   22072: 2004-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22073: 
                   22074:        * tgetpass.c:
                   22075:        Use SA_INTERRUPT so SunOS works correctly, avoid stdio and just use
                   22076:        read/write as it is simpler.
                   22077:        [30f5446ee8b0]
                   22078: 
                   22079:        * configure, configure.in:
                   22080:        Remove hack overriding cross-compiler check. It should no longer be
                   22081:        needed.
                   22082:        [22a6cbd88608]
                   22083: 
                   22084:        * compat.h:
                   22085:        Remove select() compat bits since we no longer use select().
                   22086:        [d7bbf7cd36f5]
                   22087: 
                   22088:        * CHANGES, tgetpass.c:
                   22089:        Use alarm() instead of select() for the timeout for systems that
                   22090:        don't fully/properly implement select().
                   22091:        [d7cc60f15800]
                   22092: 
                   22093: 2004-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22094: 
                   22095:        * CHANGES:
                   22096:        synbc
                   22097:        [132a39788e07]
                   22098: 
                   22099:        * RUNSON:
                   22100:        update
                   22101:        [61ef508380c6]
                   22102: 
                   22103:        * set_perms.c:
                   22104:        Deal with systems that have no way of setting the effective uid such
                   22105:        as nsr-tandem-nsk.
                   22106:        [306e00e9b5a4]
                   22107: 
                   22108:        * configure, configure.in:
                   22109:        Define NO_SAVED_IDS if we don't find seteuid()
                   22110:        [8588f18345cf]
                   22111: 
                   22112:        * config.h.in, configure, configure.in:
                   22113:        Add back check for setreuid() since NSK doesn't have it.
                   22114:        [43127bd703d1]
                   22115: 
                   22116:        * sudoers.cat, sudoers.man.in:
                   22117:        regen
                   22118:        [af4f4b20e422]
                   22119: 
                   22120:        * CHANGES:
                   22121:        sync
                   22122:        [29ca3b699c24]
                   22123: 
                   22124:        * BUGS:
                   22125:        sync
                   22126:        [3593f17f72ed]
                   22127: 
                   22128:        * parse.c:
                   22129:        In sudoers_lookup() return VALIDATE_NOT_OK if the runas user was
                   22130:        explicitly denied and the command matched. This fixes a long-
                   22131:        standing bug and makes: foo machine = (ALL) /usr/bin/blah
                   22132:        foo machine = (!bar) /usr/bin/blah
                   22133: 
                   22134:        equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
                   22135:        [2f5ee244985a]
                   22136: 
                   22137:        * sudoers.pod:
                   22138:        Clarify mail_noperm
                   22139:        [3238b2d41989]
                   22140: 
                   22141: 2004-05-20  Aaron Spangler  <aaron777@gmail.com>
                   22142: 
                   22143:        * Makefile.in:
                   22144:        Missing DESTDIR in make install for sudo_noexec.la
                   22145:        [91431e821525]
                   22146: 
                   22147: 2004-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22148: 
                   22149:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   22150:        visudo.man.in:
                   22151:        regen
                   22152:        [cdfde0dcb556]
                   22153: 
                   22154:        * TODO:
                   22155:        sync
                   22156:        [4799b7d8b62c]
                   22157: 
                   22158:        * sudoers.pod:
                   22159:        Remove fastboot/fasthalt (who still remembers these?) and add a
                   22160:        minimal sudoedit example.
                   22161:        [19d299f233cd]
                   22162: 
                   22163:        * sample.sudoers:
                   22164:        Remove fastboot/fasthalt (who still remembers these?) and add a
                   22165:        minimal sudoedit example.
                   22166:        [b1bca73d6250]
                   22167: 
                   22168:        * UPGRADE, sudo.c, visudo.c:
                   22169:        filesystem -> file system
                   22170:        [1e1afaf30469]
                   22171: 
                   22172:        * TROUBLESHOOTING:
                   22173:        filesystem -> file system
                   22174:        [39fb594e9338]
                   22175: 
                   22176:        * CHANGES, INSTALL:
                   22177:        filesystem -> file system
                   22178:        [85948b608ffe]
                   22179: 
                   22180:        * sudo.pod, sudoers.pod:
                   22181:        Fix some minor typos and formatting goofs
                   22182:        [e94d243a0b90]
                   22183: 
                   22184:        * lex.yy.c:
                   22185:        regen
                   22186:        [2eed0ab1f4c4]
                   22187: 
                   22188:        * visudo.pod:
                   22189:        remove my email addr
                   22190:        [b63262c0389b]
                   22191: 
                   22192:        * sudo.pod, sudoers.pod, visudo.pod:
                   22193:        Use @mansectform@ and @mansectsu@ everywhere Make man page
                   22194:        references links with L<>
                   22195:        [f459f4b9ddb9]
                   22196: 
                   22197:        * parse.lex:
                   22198:        Accept quoted globbing characters and pass them verbatim for
                   22199:        fnmatch()
                   22200:        [8248b86e9380]
                   22201: 
                   22202:        * UPGRADE:
                   22203:        Document that /tmp/.odus is gone.
                   22204:        [3667b66af5bb]
                   22205: 
                   22206:        * pathnames.h.in:
                   22207:        No longer use /tmp/.odus as a possible timestamp dir unless
                   22208:        specifically configured to do so. Instead, if no /var/run exists,
                   22209:        use /var/adm/sudo or /usr/adm/sudo.
                   22210:        [48d94c9f9ad4]
                   22211: 
                   22212:        * configure:
                   22213:        No longer use /tmp/.odus as a possible timestamp dir unless
                   22214:        specifically configured to do so. Instead, if no /var/run exists,
                   22215:        use /var/adm/sudo or /usr/adm/sudo.
                   22216:        [058d7b8cf07b]
                   22217: 
                   22218:        * aclocal.m4:
                   22219:        No longer use /tmp/.odus as a possible timestamp dir unless
                   22220:        specifically configured to do so. Instead, if no /var/run exists,
                   22221:        use /var/adm/sudo or /usr/adm/sudo.
                   22222:        [cf52c4c2803f]
                   22223: 
                   22224:        * CHANGES:
                   22225:        No longer use /tmp/.odus as a possible timestamp dir unless
                   22226:        specifically configured to do so. Instead, if no /var/run exists,
                   22227:        use /var/adm/sudo or /usr/adm/sudo.
                   22228:        [6058c4cefcec]
                   22229: 
                   22230:        * set_perms.c, sudo.c, tgetpass.c, visudo.c:
                   22231:        Preliminary changes to support nsr-tandem-nsk. Based on patches
                   22232:        from Tom Bates.
                   22233:        [2e5f81834383]
                   22234: 
                   22235:        * logging.c:
                   22236:        Preliminary changes to support nsr-tandem-nsk. Based on patches
                   22237:        from Tom Bates.
                   22238:        [934bbe6872b6]
                   22239: 
                   22240:        * check.c, compat.h:
                   22241:        Preliminary changes to support nsr-tandem-nsk. Based on patches
                   22242:        from Tom Bates.
                   22243:        [390b698b5924]
                   22244: 
                   22245: 2004-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22246: 
                   22247:        * CHANGES:
                   22248:        There was no 1.6.7p6.
                   22249:        [8013d2e6b062]
                   22250: 
                   22251:        * BUGS, CHANGES:
                   22252:        sync
                   22253:        [c38b41f32857]
                   22254: 
                   22255:        * Makefile.in:
                   22256:        add missing files to DISTFILES
                   22257:        [e6a80ad03039]
                   22258: 
                   22259:        * sudo.cat, sudoers.cat, visudo.cat:
                   22260:        regen
                   22261:        [027bc9746dd5]
                   22262: 
                   22263:        * sudoers.man.in:
                   22264:        regen
                   22265:        [f5e85ef686cf]
                   22266: 
                   22267:        * Makefile.in:
                   22268:        Fix some line wrap and update (c) year
                   22269:        [bad1f46aa1ca]
                   22270: 
                   22271: 2004-04-28  Aaron Spangler  <aaron777@gmail.com>
                   22272: 
                   22273:        * README.LDAP:
                   22274:        Build Note
                   22275:        [7a061248249b]
                   22276: 
                   22277: 2004-04-07  Aaron Spangler  <aaron777@gmail.com>
                   22278: 
                   22279:        * Makefile.in:
                   22280:        Fix install-dirs
                   22281:        [be0726dd92e7]
                   22282: 
                   22283: 2004-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22284: 
                   22285:        * sudo.tab.c:
                   22286:        regen
                   22287:        [3f4f0d1ab8b9]
                   22288: 
                   22289:        * visudo.c:
                   22290:        In Exit() when used as a signal handler, emsg is a pointer so
                   22291:        sizeof() is wrong so make it a #define instead. Also avoid using a
                   22292:        negative exit value. Found by Aaron Campbell
                   22293:        [78716a3a3fdc]
                   22294: 
                   22295: 2004-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22296: 
                   22297:        * sudoers.pod:
                   22298:        Remove bogus sentence about uids in a User_List. Document usernames
                   22299:        vs. uid parsing in a Runas_List.
                   22300:        [7ca510b5031c]
                   22301: 
                   22302:        * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
                   22303:        If the user specified a uid with the -u flag and the uid exists in
                   22304:        the passwd file, set runas_user to the name, not the uid.
                   22305: 
                   22306:        When comparing usernames in sudoers, if a name is really a uid
                   22307:        (starts with '#') compare it numerically to pw_uid.
                   22308:        [8d6935d04673]
                   22309: 
                   22310: 2004-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22311: 
                   22312:        * auth/kerb5.c:
                   22313:        krb5_mcc_ops should be const; Johnny C. Lam
                   22314:        [aa8c753e426e]
                   22315: 
                   22316: 2004-02-28  Aaron Spangler  <aaron777@gmail.com>
                   22317: 
                   22318:        * CHANGES, config.h.in, ldap.c:
                   22319:        Added start_tls support
                   22320:        [7ef864c15b69]
                   22321: 
                   22322: 2004-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22323: 
                   22324:        * Makefile.in:
                   22325:        Clean up libtool stuff for 'make distclean' and add def_data.c,
                   22326:        def_data.h to PARSESRCS.
                   22327:        [bf9bb6bb06ab]
                   22328: 
                   22329: 2004-02-14  Aaron Spangler  <aaron777@gmail.com>
                   22330: 
                   22331:        * strlcat.c, strlcpy.c:
                   22332:        Un-Fix last license munge
                   22333:        [42654b77ac71]
                   22334: 
                   22335: 2004-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22336: 
                   22337:        * configure:
                   22338:        regen
                   22339:        [e4de6b23a4dc]
                   22340: 
                   22341:        * CHANGES, RUNSON, TODO:
                   22342:        checkpoint
                   22343:        [94e1ace84d5c]
                   22344: 
                   22345:        * lex.yy.c, sudo.tab.c:
                   22346:        regen
                   22347:        [8ce784505643]
                   22348: 
                   22349:        * auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
                   22350:        auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
                   22351:        emul/search.h, emul/utime.h:
                   22352:        More to a less restrictive, ISC-style license.
                   22353:        [a31b20e48003]
                   22354: 
                   22355:        * auth/kerb5.c, auth/pam.c:
                   22356:        More to a less restrictive, ISC-style license.
                   22357:        [e41f92b41216]
                   22358: 
                   22359:        * auth/dce.c, auth/fwtk.c, auth/kerb4.c:
                   22360:        More to a less restrictive, ISC-style license.
                   22361:        [87534c164a52]
                   22362: 
                   22363:        * auth/bsdauth.c:
                   22364:        More to a less restrictive, ISC-style license.
                   22365:        [e21be6594b58]
                   22366: 
                   22367:        * auth/afs.c, auth/aix_auth.c, zero_bytes.c:
                   22368:        More to a less restrictive, ISC-style license.
                   22369:        [6d234be91c5e]
                   22370: 
                   22371:        * sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, visudo.c,
                   22372:        visudo.man.in, visudo.pod:
                   22373:        More to a less restrictive, ISC-style license.
                   22374:        [b02aea324fd6]
                   22375: 
                   22376:        * sudo_noexec.c:
                   22377:        More to a less restrictive, ISC-style license.
                   22378:        [a6da7631e0b2]
                   22379: 
                   22380:        * strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
                   22381:        sudo_edit.c:
                   22382:        More to a less restrictive, ISC-style license.
                   22383:        [71cdcc241e94]
                   22384: 
                   22385:        * sigaction.c, strerror.c:
                   22386:        More to a less restrictive, ISC-style license.
                   22387:        [4bccdedca58a]
                   22388: 
                   22389:        * ldap.c, logging.c, logging.h, parse.c, parse.h, pathnames.h.in,
                   22390:        set_perms.c:
                   22391:        More to a less restrictive, ISC-style license.
                   22392:        [64d772d70ab3]
                   22393: 
                   22394:        * getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
                   22395:        ins_goons.h, insults.h, interfaces.c, interfaces.h:
                   22396:        More to a less restrictive, ISC-style license.
                   22397:        [520381c60a54]
                   22398: 
                   22399:        * find_path.c, getprogname.c:
                   22400:        More to a less restrictive, ISC-style license.
                   22401:        [f605d5eab6f1]
                   22402: 
                   22403:        * fileops.c:
                   22404:        More to a less restrictive, ISC-style license.
                   22405:        [4129a8b38a67]
                   22406: 
                   22407:        * env.c:
                   22408:        More to a less restrictive, ISC-style license.
                   22409:        [d5bd859757de]
                   22410: 
                   22411:        * defaults.h:
                   22412:        More to a less restrictive, ISC-style license.
                   22413:        [008f5d5743f5]
                   22414: 
                   22415:        * LICENSE, Makefile.in, alloc.c, check.c, closefrom.c, compat.h,
                   22416:        defaults.c:
                   22417:        More to a less restrictive, ISC-style license.
                   22418:        [d8d7bfc8a18b]
                   22419: 
                   22420:        * utime.c, version.h:
                   22421:        More to a less restrictive, ISC-style license.
                   22422:        [e2e038ad8209]
                   22423: 
                   22424:        * parse.lex, parse.yacc:
                   22425:        More to a less restrictive, ISC-style license.
                   22426:        [2f5942e847a1]
                   22427: 
                   22428:        * Makefile.binary:
                   22429:        More to a less restrictive, ISC-style license.
                   22430:        [1ed561734535]
                   22431: 
                   22432: 2004-02-13  Aaron Spangler  <aaron777@gmail.com>
                   22433: 
                   22434:        * sudoers2ldif:
                   22435:        Merged in LDAP Support
                   22436:        [3994c4d05947]
                   22437: 
                   22438:        * ldap.c, sudo.c, sudo.h:
                   22439:        Merged in LDAP Support
                   22440:        [547eaa346fcc]
                   22441: 
                   22442:        * def_data.c, def_data.h, def_data.in:
                   22443:        Merged in LDAP Support
                   22444:        [8fb255280e42]
                   22445: 
                   22446:        * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in:
                   22447:        Merged in LDAP Support
                   22448:        [1038092a161e]
                   22449: 
                   22450: 2004-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22451: 
                   22452:        * sudo.h, sudo_noexec.c:
                   22453:        Only do "extern int errno" if errno is not a macro.
                   22454:        [b2e02a08be8b]
                   22455: 
                   22456: 2004-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22457: 
                   22458:        * set_perms.c:
                   22459:        setreuid(0, 0) fails on QNX if the euid is not already 0 so set the
                   22460:        euid first, then just call setuid(0) to set the real uid too.
                   22461:        [f08546e2e0ee]
                   22462: 
                   22463:        * set_perms.c:
                   22464:        Use setresuid() and setreuid() for PERM_RUNAS when appropriate
                   22465:        instead of seteuid() which may not exist.
                   22466:        [ba508581befb]
                   22467: 
                   22468: 2004-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22469: 
                   22470:        * LICENSE:
                   22471:        2004
                   22472:        [37425513a342]
                   22473: 
                   22474:        * INSTALL, config.h.in, configure, configure.in, ins_classic.h:
                   22475:        Add --with-pc-insults configure option
                   22476:        [7daa5294c17b]
                   22477: 
                   22478:        * visudo.man.in:
                   22479:        Prefer VISUAL over EDITOR like old vipw did.
                   22480:        [996252a4ab65]
                   22481: 
                   22482: 2004-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22483: 
                   22484:        * sudo.man.in, sudoers.man.in:
                   22485:        regen
                   22486:        [a247f1c52eb9]
                   22487: 
                   22488:        * sudoers.pod:
                   22489:        Add a note that noexec is not a cure-all.
                   22490:        [9e7fc535367d]
                   22491: 
                   22492:        * sudoers.pod:
                   22493:        Mention that disabling "root_sudo" is pretty pointless.
                   22494:        [f38a415afba0]
                   22495: 
                   22496:        * configure, configure.in:
                   22497:        Substitute for root_sudo in sudoers.pod
                   22498:        [ce483cfc86be]
                   22499: 
                   22500:        * sudo.pod:
                   22501:        Add sudoedit to the NAME section
                   22502:        [51bc453ec2f6]
                   22503: 
                   22504:        * sudoers.pod:
                   22505:        Document that fact that setting ignore_dot in sudoers has no effect
                   22506:        due to the fact that find_path() is called *before* sudoers is read.
                   22507:        [6808df7e417c]
                   22508: 
                   22509: 2004-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22510: 
                   22511:        * sudo_edit.c:
                   22512:        Do not require _PATH_USRTMP to be set.
                   22513:        [546f3270dd10]
                   22514: 
                   22515:        * BUGS, CHANGES, TODO:
                   22516:        sync
                   22517:        [4205ddeab781]
                   22518: 
                   22519:        * sudo.man.in:
                   22520:        regen
                   22521:        [e2143690a88a]
                   22522: 
                   22523:        * sudo.pod:
                   22524:        Clarify that when sudo is run by root with the SUDO_USER variable
                   22525:        set, the sudoers lookup happens for root and not the SUDO_USER user.
                   22526:        [47207bec1bdf]
                   22527: 
                   22528: 2004-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22529: 
                   22530:        * auth/pam.c, auth/sudo_auth.c, interfaces.c, logging.c, parse.c,
                   22531:        set_perms.c, sigaction.c, sudo.c, tgetpass.c:
                   22532:        Use the SET, CLR and ISSET macros.
                   22533:        [a8b0d7f1e8fd]
                   22534: 
                   22535:        * fnmatch.c:
                   22536:        Use the SET, CLR and ISSET macros.
                   22537:        [1afbcba22ba6]
                   22538: 
                   22539:        * defaults.c, env.c:
                   22540:        Use the SET, CLR and ISSET macros.
                   22541:        [2f39431e0a49]
                   22542: 
                   22543:        * interfaces.h:
                   22544:        MAIN was replaced with _SUDO_MAIN some time ago.
                   22545:        [ea1b38f2ac9d]
                   22546: 
                   22547:        * sudo.c:
                   22548:        Don't look at prev_user until after we've parsed sudoers and done
                   22549:        the password check. That way, if sudo/sudoedit is run from a root
                   22550:        process that was invoked by sudo, we check sudoers for root, not the
                   22551:        previous user. This makes sudoedit much more useful and means that
                   22552:        for the sudo case, we get correct logging on who actually ran the
                   22553:        command.
                   22554:        [431dfbf20552]
                   22555: 
                   22556: 2004-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22557: 
                   22558:        * sudo_edit.c:
                   22559:        Add a comment describing why we need to be notified about our child
                   22560:        stopping.
                   22561:        [0bec3ce4b49d]
                   22562: 
                   22563: 2004-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22564: 
                   22565:        * def_data.c, def_data.in:
                   22566:        Update the noexec variable descriptions
                   22567:        [9cb7f1aa0e57]
                   22568: 
                   22569:        * sudoers.man.in, sudoers.pod:
                   22570:        noexec now replaces more than just execve()
                   22571:        [23cbdc0ee95c]
                   22572: 
                   22573:        * sudo_noexec.c:
                   22574:        Alas, all the world does not go through execve(2). Many systems
                   22575:        still have an execv(2) system call, Linux 2.6 provides fexecve(2)
                   22576:        and it is not uncommon for libc to have underscore ('_') versions of
                   22577:        the functions to be used internally by the library. Instead of
                   22578:        stubbing all these out by hand, define a macro and let it do the
                   22579:        work. Extra exec functions pointed out by Reznic Valery.
                   22580:        [9fa0cd871b0c]
                   22581: 
                   22582:        * sudo.c, sudo_edit.c:
                   22583:        Fix suspending the editor in -e mode. Because we do a fork() first
                   22584:        we need to be notified when the child has been stopped and then send
                   22585:        that same signal to ourself so the shell can do its job control
                   22586:        thing.
                   22587:        [773165eb6057]
                   22588: 
                   22589:        * visudo.c:
                   22590:        Use WIFEXITED and WEXITSTATUS macros. If there are systems out
                   22591:        there that want to run sudo that still don't support these we can
                   22592:        try to deal with that later.
                   22593:        [6af68e4aff60]
                   22594: 
                   22595:        * lex.yy.c:
                   22596:        regen
                   22597:        [403435317d5d]
                   22598: 
                   22599:        * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod:
                   22600:        Document sudo -e / sudoedit
                   22601:        [a80f6ea910af]
                   22602: 
                   22603:        * configure, configure.in:
                   22604:        fix typo
                   22605:        [5020fcdc27f4]
                   22606: 
                   22607:        * config.h.in, configure.in:
                   22608:        Add SET/CLR/ISSET
                   22609:        [03ff57286e7e]
                   22610: 
                   22611: 2004-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22612: 
                   22613:        * sudo.c:
                   22614:        Allow non-exclusive flags when invoked as sudoedit. Pretty print the
                   22615:        long usage() line to not wrap (assumes 80 char display)
                   22616:        [3941fa4004bb]
                   22617: 
                   22618:        * Makefile.in, sudo.c:
                   22619:        If sudo is invoked as "sudoedit" the -e flag is implied and no other
                   22620:        flags are permitted.
                   22621:        [929670b01293]
                   22622: 
                   22623:        * sudo.h:
                   22624:        Add a new flag, -e, that makes it possible to give users the ability
                   22625:        to edit files with the editor of their choice as the invoking user,
                   22626:        not the runas user. Temporary files are used for the actual edit
                   22627:        and the temp file is copied over the original after the editor is
                   22628:        done.
                   22629:        [c4051414c1f4]
                   22630: 
                   22631:        * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c:
                   22632:        Add a new flag, -e, that makes it possible to give users the ability
                   22633:        to edit files with the editor of their choice as the invoking user,
                   22634:        not the runas user. Temporary files are used for the actual edit
                   22635:        and the temp file is copied over the original after the editor is
                   22636:        done.
                   22637:        [37ac05c8ac3c]
                   22638: 
                   22639:        * env.c, sudo.c:
                   22640:        If real uid == 0 and the SUDO_USER environment variables is set, use
                   22641:        that to determine the invoking user's true identity. That way the
                   22642:        proper info gets logged by someone who has done "sudo su" but still
                   22643:        uses sudo to as root. We can't do this for non-root users since
                   22644:        that would open up a security hole, though perhaps it would be
                   22645:        acceptable to use getlogin(2) on OSes where this a system call (and
                   22646:        doesn't just look in the utmp file).
                   22647:        [c2f9198708a1]
                   22648: 
                   22649:        * pathnames.h.in:
                   22650:        Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
                   22651:        [7d9e5768df93]
                   22652: 
                   22653:        * config.h.in, configure, configure.in:
                   22654:        Add check for fchown(2)
                   22655:        [a85df18798ed]
                   22656: 
                   22657: 2004-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22658: 
                   22659:        * sudo.c:
                   22660:        Back out portions of the -i commit that set NewArgv[0] in
                   22661:        set_runaspw. It is far to late to set NewArgv[0] there and will have
                   22662:        no effect anyway as cmnd and safe_cmnd have already been set.
                   22663:        [c2d343430c1c]
                   22664: 
                   22665:        * visudo.c, visudo.pod:
                   22666:        Prefer VISUAL over EDITOR like old vipw did.
                   22667:        [ae32f477cea3]
                   22668: 
                   22669: 2004-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22670: 
                   22671:        * env.c, sudo.c:
                   22672:        In -i mode always set new environment based on the runas user's
                   22673:        passwd entry.
                   22674:        [fa653b7887a8]
                   22675: 
                   22676: 2004-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22677: 
                   22678:        * sudo.man.in, sudo.pod:
                   22679:        Document the new -i flag and sync SYNOPSIS section with usage() in
                   22680:        sudo.c. Also sort the flags in the OPTIONS section.
                   22681:        [6aabc0ffc47e]
                   22682: 
                   22683:        * sudo.c, sudo.h:
                   22684:        o Add -i that acts similar to "su -", based on patches from David J.
                   22685:        MacKenzie o Sort the flags in the usage message
                   22686:        [c0fe7d6beffd]
                   22687: 
                   22688:        * sudoers.man.in, sudoers.pod:
                   22689:        Add a missing @runas_default@ substitution.
                   22690:        [60516fe2d090]
                   22691: 
                   22692: 2004-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22693: 
                   22694:        * sudo.c:
                   22695:        Change euid to runas user before calling find_path().
                   22696:        Unfortunately, though runas_user can be modified in sudoers we
                   22697:        haven't parsed sudoers yet.
                   22698:        [f469fdf2e313]
                   22699: 
                   22700:        * sudoers.man.in, sudoers.pod:
                   22701:        Add missing defintion of Parameter_List and use single pipes in the
                   22702:        Defaults EBNF definition.
                   22703:        [f7bed6e909bf]
                   22704: 
                   22705:        * sudo.c:
                   22706:        Fix a bug when set_runaspw() is used as a callback. We don't want
                   22707:        to reset the contents of runas_pw if the user specified a user via
                   22708:        the -u flag.
                   22709: 
                   22710:        Avoid unnecessary passwd lookups in set_authpw(). In most cases we
                   22711:        already have the info in runas_pw.
                   22712:        [efc35623ba09]
                   22713: 
                   22714: 2004-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22715: 
                   22716:        * check.c:
                   22717:        Add Stan Lee / Uncle Ben quote to the lecture from RedHat
                   22718:        [ebd5a76ccd7e]
                   22719: 
                   22720:        * sudo.h:
                   22721:        Update sudo_getepw() proto and add one for set_runaspw()
                   22722:        [6ed65795c17f]
                   22723: 
                   22724:        * parse.c:
                   22725:        If we can't stat the command as root, try as the runas user instead.
                   22726:        [ae713fca0e15]
                   22727: 
                   22728:        * testsudoers.c, visudo.c:
                   22729:        Add stub set_runaspw() function
                   22730:        [42aa37050053]
                   22731: 
                   22732:        * sudo.c:
                   22733:        Add set_runaspw() function to fill in runas_pw. This will be used
                   22734:        as a callback to update runas_pw when the runas user changes.
                   22735:        [e570aa0088d0]
                   22736: 
                   22737:        * env.c, sudo.c:
                   22738:        PERM_RUNAS -> PERM_FULL_RUNAS
                   22739:        [51eec6f9e89a]
                   22740: 
                   22741:        * set_perms.c, sudo.h:
                   22742:        Rename PERM_RUNAS -> PERM_FULL_RUNAS and add a PERM_RUNAS that just
                   22743:        changes the euid.
                   22744:        [877c6fe4d12c]
                   22745: 
                   22746:        * getspwuid.c:
                   22747:        Make sudo_pwdup() act like OpenBSD pw_dup() and allocate memory in
                   22748:        one chunk for easy free()ing. Also change it from static to extern.
                   22749:        [ab503260a7ec]
                   22750: 
                   22751:        * defaults.c, defaults.h:
                   22752:        Add callback support
                   22753:        [a61c4ca983fb]
                   22754: 
                   22755:        * mkdefaults:
                   22756:        Add a callback field and use it for runas_default
                   22757:        [96b69c27df5e]
                   22758: 
                   22759:        * def_data.c, def_data.in:
                   22760:        Add a callback field and use it for runas_default
                   22761:        [d3e9f06872b8]
                   22762: 
                   22763: 2004-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22764: 
                   22765:        * auth/fwtk.c:
                   22766:        Add support for chalnecho and display server responses used by fwtk
                   22767:        >= 2.0
                   22768:        [b1870f7aaf0d]
                   22769: 
                   22770: 2004-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22771: 
                   22772:        * sudoers.man.in, sudoers.pod:
                   22773:        ld.so is ld.so.1 on solaris
                   22774:        [2bf9a123fa4c]
                   22775: 
                   22776:        * Makefile.in, config.h.in, configure, configure.in, sudo.c, sudo.h:
                   22777:        Use closefrom() instead of doing the equivalent inline.
                   22778:        [7e3ef6072884]
                   22779: 
                   22780:        * closefrom.c:
                   22781:        closefrom(3) for systems w/o it
                   22782:        [35caf58bb636]
                   22783: 
                   22784: 2004-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22785: 
                   22786:        * sudoers.man.in:
                   22787:        Update from .pod file.
                   22788:        [d4c94fc0e0c9]
                   22789: 
                   22790:        * configure, configure.in:
                   22791:        Substitute noexec_file for the sudoers man page
                   22792:        [203d3376a551]
                   22793: 
                   22794:        * sudo.man.in, sudo.pod:
                   22795:        Mention noexec
                   22796:        [014375ddbb06]
                   22797: 
                   22798:        * sudoers.man.in, sudoers.pod:
                   22799:        Document noexec
                   22800:        [49a65d06201f]
                   22801: 
                   22802:        * auth/pam.c, config.h.in, configure.in:
                   22803:        Move PAM_CONST macro definition from config.h to pam.c where it
                   22804:        belongs. We can't have this in config.h since that gets included too
                   22805:        early.
                   22806:        [e64748071637]
                   22807: 
                   22808:        * auth/pam.c, config.h.in, configure, configure.in:
                   22809:        Some PAM implementations put their headers in /usr/include/pam
                   22810:        instead of /usr/include/security.
                   22811:        [8cc749e9575c]
                   22812: 
                   22813:        * configure.in:
                   22814:        I missed changing the EXEC macro -> EXECV here when I changed this
                   22815:        in config.h.in and sudo.c a while ago.
                   22816:        [6f5afac7789f]
                   22817: 
                   22818:        * acsite.m4:
                   22819:        OpenBSD vax/m88k/hppa don't do shared libs
                   22820:        [e4901d958bb7]
                   22821: 
                   22822:        * configure, configure.in:
                   22823:        o merge the hpux case entries into a single entry w/ its own sub-
                   22824:        case statement. o HP-UX >= 11 support getspnam(), use it in
                   22825:        preference to getprpwuid()
                   22826:        [0caad428894e]
                   22827: 
                   22828:        * configure, configure.in:
                   22829:        eval $shrext so that it expands nicely on MacOS X
                   22830:        [40419343eef8]
                   22831: 
                   22832:        * Makefile.in:
                   22833:        Don't lie about making a module, it does the wrong thing on mach
                   22834:        [7629b28f5688]
                   22835: 
                   22836:        * ltmain.sh:
                   22837:        Remove requirement that libs must begin with "lib". They don't when
                   22838:        we point directly at the lib using LD_PRELOAD or its equivalent.
                   22839:        [d66f3de6ec85]
                   22840: 
                   22841:        * acsite.m4:
                   22842:        Disable support for c++, f77 and java. We don't need it, it takes a
                   22843:        lot of time, and it hosed our check for shared lib support.
                   22844:        [4f5749c52ce4]
                   22845: 
                   22846:        * configure:
                   22847:        regen
                   22848:        [160865e9d15f]
                   22849: 
                   22850:        * configure.in:
                   22851:        Call AC_ENABLE_SHARED and check the status of enable_shared to know
                   22852:        when shared libs are available.
                   22853:        [42504c1668fc]
                   22854: 
                   22855:        * acsite.m4:
                   22856:        Duh, OpenBSD suports shared libs too
                   22857:        [8e3cd9417475]
                   22858: 
                   22859:        * config.h.in, configure.in:
                   22860:        Only OpenPAM and Linux PAM use const qualifiers.
                   22861:        [b2f76476e866]
                   22862: 
                   22863:        * configure, configure.in:
                   22864:        o No need to check for sed, libtool config does that for us o move
                   22865:        check for --with-noexec until after libtool magic is run so we can
                   22866:        use $can_build_shared and $shrext
                   22867:        [668c656e89cc]
                   22868: 
                   22869:        * ltmain.sh:
                   22870:        Don't print a bunch of crap about library installs since we are not
                   22871:        really installing a library.
                   22872:        [83fbcad29fe4]
                   22873: 
                   22874:        * env.c:
                   22875:        Make format_env() varargs Add noexec support for Darwin, MacOS X,
                   22876:        Irix, and Tru64
                   22877:        [468885d75d10]
                   22878: 
                   22879:        * acsite.m4, ltconfig, ltmain.sh:
                   22880:        Update to libtool 1.5 with local changes: o no ldconfig in the
                   22881:        finish step o assume no libprefix or version is needed
                   22882:        [4961cffc3797]
                   22883: 
                   22884:        * sudo_noexec.c:
                   22885:        Fix compilation under K&R
                   22886:        [8b309bf0b1b2]
                   22887: 
                   22888: 2004-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22889: 
                   22890:        * CHANGES:
                   22891:        checkpoint
                   22892:        [3c368badab32]
                   22893: 
                   22894:        * sudo_noexec.c:
                   22895:        stub execve() that just returns EACCES; used for noexec
                   22896:        functionality
                   22897:        [1297acae283a]
                   22898: 
                   22899:        * sudo.tab.h:
                   22900:        Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with
                   22901:        generated code.
                   22902:        [dcab78c49273]
                   22903: 
                   22904:        * sudo.tab.c:
                   22905:        Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with
                   22906:        generated code.
                   22907:        [0a61c735eabe]
                   22908: 
                   22909: 2004-01-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22910: 
                   22911:        * def_data.c, def_data.h, def_data.in:
                   22912:        Move the environment defaults to the end and shorten a few of the
                   22913:        descriptions.
                   22914:        [66787b9c612c]
                   22915: 
                   22916:        * configure, configure.in:
                   22917:        no shared libs on ultris or convexos
                   22918:        [2c5f3c456e32]
                   22919: 
                   22920:        * Makefile.in, configure, configure.in:
                   22921:        Build sudo_noexec shared object using libtool; could use some
                   22922:        cleanup.
                   22923:        [373f483555dd]
                   22924: 
                   22925:        * acsite.m4, ltconfig, ltmain.sh:
                   22926:        libtool scaffolding
                   22927:        [c903a42e3d90]
                   22928: 
                   22929:        * parse.yacc, sudo.tab.c:
                   22930:        Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so that order is not
                   22931:        important.
                   22932:        [c6e8a34639a4]
                   22933: 
                   22934:        * defaults.c, env.c, lex.yy.c, parse.c, parse.h, parse.lex,
                   22935:        parse.yacc, pathnames.h.in, sudo.c, sudo.h, sudo.tab.c:
                   22936:        update copyright year
                   22937:        [a16372ae1711]
                   22938: 
                   22939:        * configure, configure.in, defaults.c, env.c, pathnames.h.in:
                   22940:        Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
                   22941:        option. The default value of noexec_file is set to this.
                   22942:        [7d88e1d3c494]
                   22943: 
                   22944:        * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
                   22945:        parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c,
                   22946:        sudo.tab.h:
                   22947:        Add support for preloading a shared object containing a dummy
                   22948:        execve() function that just sets error and returns -1. This adds a
                   22949:        "noexec_file" option to load the filename as well as a "noexec" flag
                   22950:        to enable it unconditionally. There is also a NOEXEC tag that can
                   22951:        be attached to specific commands and an EXEC tag to disable it.
                   22952:        [c8b6712feb91]
                   22953: 
                   22954:        * mkdefaults:
                   22955:        add missing newline to usage statement
                   22956:        [e84746618362]
                   22957: 
                   22958:        * config.h.in, sudo.c:
                   22959:        Rename EXEC macro -> EXECV
                   22960:        [ddaa0c027299]
                   22961: 
                   22962:        * logging.c:
                   22963:        Don't truncate usernames to 8 characters in the log message.
                   22964:        [f62a20f27075]
                   22965: 
                   22966:        * check.c, sudoers.man.in, sudoers.pod:
                   22967:        Update copyright year
                   22968:        [ca9964054085]
                   22969: 
                   22970:        * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
                   22971:        sudoers.pod:
                   22972:        Add a new option, lecture_file, that can be used to point to a
                   22973:        custom sudo lecture.
                   22974:        [940133231216]
                   22975: 
                   22976: 2003-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22977: 
                   22978:        * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
                   22979:        auth/sudo_auth.c:
                   22980:        Add a zero_bytes() function to do the equivalent of bzero in such a
                   22981:        way that will heopfully not be optimized away by sneaky compilers.
                   22982:        [161b6d74bfb4]
                   22983: 
                   22984:        * zero_bytes.c:
                   22985:        Add a zero_bytes() function to do the equivalent of bzero in such a
                   22986:        way that will heopfully not be optimized away by sneaky compilers.
                   22987:        [d035abf0af94]
                   22988: 
                   22989:        * Makefile.in, sudo.h:
                   22990:        Add a zero_bytes() function to do the equivalent of bzero in such a
                   22991:        way that will heopfully not be optimized away by sneaky compilers.
                   22992:        [ff136de3e255]
                   22993: 
                   22994:        * err.c:
                   22995:        Use #ifdef __STDC__, not #if __STDC__.
                   22996:        [6889dd6bc51a]
                   22997: 
                   22998: 2003-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   22999: 
                   23000:        * mkdefaults:
                   23001:        Always put at least one space between the def_* macro name and its
                   23002:        definition.
                   23003:        [6b3ad0e6619a]
                   23004: 
                   23005:        * configure, configure.in:
                   23006:        Adjust code for --without-lecture to match new values.
                   23007:        [062aa788a6b9]
                   23008: 
                   23009:        * visudo.man.in:
                   23010:        regen after pasto fix
                   23011:        [3deec16906c0]
                   23012: 
                   23013:        * sudoers.man.in, sudoers.pod:
                   23014:        Document that "lecture" has changed from a flag to a tuple.
                   23015:        [e2c03062b533]
                   23016: 
                   23017:        * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
                   23018:        defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h:
                   23019:        Add support for tuples in def_data.in; these are implemented as an
                   23020:        enum type. Currently there is only a single tuple enum but in the
                   23021:        future we may have one tuple enum per T_TUPLE entry in def_data.in.
                   23022:        Currently listpw, verifypw and lecture are tuples. This avoids the
                   23023:        need to have two entries (one ival, one str) for pwflags and syslog
                   23024:        values.
                   23025: 
                   23026:        lecture is now a tuple with the following values: never, once,
                   23027:        always
                   23028: 
                   23029:        We no longer use both an int and string entry for syslog facilities
                   23030:        and priorities. Instead, there are logfac2str() and logpri2str()
                   23031:        functions that get used when we need to print the string values.
                   23032:        [5293f946c836]
                   23033: 
                   23034:        * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
                   23035:        auth/rfc1938.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c,
                   23036:        check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
                   23037:        logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
                   23038:        sudo.tab.c, visudo.c:
                   23039:        Create def_* macros for each defaults value so we no longer need the
                   23040:        def_{flag,ival,str,list,mode} macros (which have been removed). This
                   23041:        is a step toward more flexible data types in def_data.in.
                   23042:        [009c02934106]
                   23043: 
                   23044:        * TODO:
                   23045:        checkpoint
                   23046:        [0a99a4bb5d15]
                   23047: 
                   23048: 2003-12-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23049: 
                   23050:        * sudo.c:
                   23051:        If we are in -k/-K mode, just spew to stderr. It is not unusual for
                   23052:        users to place "sudo -k" in a .logout file which can cause sudo to
                   23053:        be run during reboot after the YP/NIS/NIS+/LDAP/etc daemon has died.
                   23054:        Previously, this would result in useless mail and logging.
                   23055:        [d282e7ed63af]
                   23056: 
                   23057: 2003-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23058: 
                   23059:        * visudo.pod:
                   23060:        fix pasto in VISUAL description
                   23061:        [1c6a6148b5f9]
                   23062: 
                   23063: 2003-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23064: 
                   23065:        * configure:
                   23066:        regen
                   23067:        [f44312c63799]
                   23068: 
                   23069:        * CHANGES:
                   23070:        checkpoint
                   23071:        [0c42e38f78d5]
                   23072: 
                   23073:        * TROUBLESHOOTING:
                   23074:        Some OSes (like Solaris) allow export w/ nosuid too
                   23075:        [973ce85ffa12]
                   23076: 
                   23077: 2003-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23078: 
                   23079:        * compat.h:
                   23080:        We don't use FD_ZERO anymore so just define FD_SET (if not already
                   23081:        there).
                   23082:        [d1c8c11905cd]
                   23083: 
                   23084: 2003-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23085: 
                   23086:        * auth/pam.c:
                   23087:        Fix a core dump on Solaris by preserving the pam_handle_t we used
                   23088:        during authentication for pam_prep_user(). If we didn't
                   23089:        authenticate (ie: ticket still valid), we call pam_init() from
                   23090:        pam_prep_user(). This is something of a hack; it may be better to
                   23091:        change the auth API and add an auth_final() function that acts like
                   23092:        pam_prep_user().
                   23093:        [f787de49b175]
                   23094: 
                   23095: 2003-06-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23096: 
                   23097:        * set_perms.c:
                   23098:        Add explicit declaration of printerr variable in function header
                   23099:        (was defaulting to int which is OK but oh so K&R :-). From Theo.
                   23100:        [492c2358783f]
                   23101: 
                   23102: 2003-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23103: 
                   23104:        * config.h.in, configure.in:
                   23105:        s/HAVE_STOW/USE_STOW/
                   23106:        [4b99e1824ece]
                   23107: 
                   23108:        * logging.c:
                   23109:        Also exit waitpid() loop when pid == 0. Fixes a problem where the
                   23110:        sudo process would spin eating up CPU until sendmail finished when
                   23111:        it has to send mail.
                   23112:        [ec3d5792b9b4]
                   23113: 
                   23114: 2003-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23115: 
                   23116:        * fnmatch.c:
                   23117:        Remove advertising clause, UCB has disavowed it
                   23118:        [43a26bbd6628]
                   23119: 
                   23120:        * fnmatch.3:
                   23121:        Remove advertising clause, UCB has disavowed it
                   23122:        [3ff24291bcfa]
                   23123: 
                   23124: 2003-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23125: 
                   23126:        * parse.c:
                   23127:        Don't assume that getgrnam() calls don't modify contents of struct
                   23128:        passwd returned by getpwnam(). On FreeBSD w/ NIS this can happen.
                   23129:        Based on a patch from Kirk Webb.
                   23130:        [5574c68f60f3]
                   23131: 
                   23132: 2003-05-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23133: 
                   23134:        * configure.in:
                   23135:        missing ;;
                   23136:        [22378f2a9d31]
                   23137: 
                   23138:        * configure.in:
                   23139:        darwin has a broken setreuid() in at least some versions
                   23140:        [d572aed930d2]
                   23141: 
                   23142:        * env.c:
                   23143:        Fix an off by one error when reallocating the environment; Kevin Pye
                   23144:        [3d98e7cf097a]
                   23145: 
                   23146: 2003-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23147: 
                   23148:        * sudoers.pod:
                   23149:        Fix User_Spec definition; SEKINE Tatsuo
                   23150:        [49b0da65e090]
                   23151: 
                   23152: 2003-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23153: 
                   23154:        * HISTORY:
                   23155:        More info on the early days from Coggs.
                   23156:        [9381ca10b06b]
                   23157: 
                   23158: 2003-04-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23159: 
                   23160:        * auth/kerb5.c:
                   23161:        remove errant semicolon that prevented compilation under heimdal
                   23162:        [d2f2bb73a598]
                   23163: 
                   23164: 2003-04-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23165: 
                   23166:        * testsudoers.c, tgetpass.c, visudo.c, visudo.man.in, visudo.pod:
                   23167:        add DARPA credit on affected files
                   23168:        [7020785ee50d]
                   23169: 
                   23170:        * sudoers.pod:
                   23171:        add DARPA credit on affected files
                   23172:        [83b46318750b]
                   23173: 
                   23174:        * sigaction.c, strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
                   23175:        sudoers.man.in:
                   23176:        add DARPA credit on affected files
                   23177:        [d8adf1c2ba22]
                   23178: 
                   23179:        * set_perms.c:
                   23180:        add DARPA credit on affected files
                   23181:        [3d79fdabb582]
                   23182: 
                   23183:        * pathnames.h.in:
                   23184:        add DARPA credit on affected files
                   23185:        [e334cdda422f]
                   23186: 
                   23187:        * logging.c, parse.c:
                   23188:        add DARPA credit on affected files
                   23189:        [8f75f822755b]
                   23190: 
                   23191:        * auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
                   23192:        auth/securid5.c, auth/sia.c, auth/sudo_auth.c, fileops.c,
                   23193:        find_path.c, getprogname.c, getspwuid.c, goodpath.c, interfaces.c,
                   23194:        interfaces.h:
                   23195:        add DARPA credit on affected files
                   23196:        [da66e28fb3f5]
                   23197: 
                   23198:        * auth/kerb5.c, auth/pam.c:
                   23199:        add DARPA credit on affected files
                   23200:        [15da3021b49c]
                   23201: 
                   23202:        * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
                   23203:        auth/fwtk.c, auth/kerb4.c, parse.lex, parse.yacc, utime.c,
                   23204:        version.h:
                   23205:        add DARPA credit on affected files
                   23206:        [868d54cbddea]
                   23207: 
                   23208:        * env.c:
                   23209:        add DARPA credit on affected files
                   23210:        [90239f51ef0a]
                   23211: 
                   23212:        * defaults.c, defaults.h:
                   23213:        add DARPA credit on affected files
                   23214:        [6a64205fd1eb]
                   23215: 
                   23216:        * compat.h:
                   23217:        add DARPA credit on affected files
                   23218:        [316a735783c4]
                   23219: 
                   23220:        * Makefile.in, alloc.c, check.c:
                   23221:        add DARPA credit on affected files
                   23222:        [cd939e05c810]
                   23223: 
                   23224:        * LICENSE:
                   23225:        slightly different wording for the darpa credit
                   23226:        [e468909c4a21]
                   23227: 
                   23228: 2003-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23229: 
                   23230:        * LICENSE:
                   23231:        Add DARPA credit
                   23232:        [8eb20e2cd63e]
                   23233: 
                   23234: 2003-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23235: 
                   23236:        * auth/kerb5.c:
                   23237:        Use krb5_princ_component() instead of krb5_princ_realm() for MIT
                   23238:        Kerberos like we did before I messed things up ;-)
                   23239: 
                   23240:        Use krb5_principal_get_comp_string() to do the same thing w/
                   23241:        Heimdal. I'm not sure if the component should be 0 or 1 in this
                   23242:        case.
                   23243: 
                   23244:        #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
                   23245:        older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
                   23246:        should be a configure check for this I guess.
                   23247:        [74919a3933fe]
                   23248: 
                   23249: 2003-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23250: 
                   23251:        * sample.sudoers:
                   23252:        builtin -> built-in; Jason McIntyre
                   23253:        [027f2187923e]
                   23254: 
                   23255:        * TROUBLESHOOTING, config.h.in, configure, configure.in:
                   23256:        builtin -> built-in; Jason McIntyre
                   23257:        [70b81ac48943]
                   23258: 
                   23259:        * sudoers.pod:
                   23260:        built in -> built-in; Jason McIntyre
                   23261:        [da658ef5138d]
                   23262: 
                   23263: 2003-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23264: 
                   23265:        * CHANGES:
                   23266:        checkpoint for 1.6.7p3
                   23267:        [da85f989fadf]
                   23268: 
                   23269:        * HISTORY:
                   23270:        Update info on the early years @ SUNY-Buffalo from Cliff Spencer.
                   23271:        Amazingly, sudo source from 1985 is available via groups.google.com
                   23272:        [39e0fc85b89f]
                   23273: 
                   23274:        * sudo.c:
                   23275:        Don't change rl.rlim_max for RLIMIT_CORE. We need only set
                   23276:        rl.rlim_cur to 0 to turn off core dumps. This may be needed for the
                   23277:        RLIMIT_CORE restoration on some OSes.
                   23278:        [7e2c1a7adfd8]
                   23279: 
                   23280: 2003-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23281: 
                   23282:        * auth/kerb5.c:
                   23283:        Make this compile on Heimdal and MIT Kerberos 5
                   23284:        [44c07d615868]
                   23285: 
                   23286:        * config.h.in, configure, configure.in:
                   23287:        Check for heimdal even if we found krb5-config and define
                   23288:        HAVE_HEIMDAL.
                   23289:        [aba0126f0059]
                   23290: 
                   23291:        * auth/kerb5.c:
                   23292:        Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5. The former is
                   23293:        no longer defined by MIT kerb5 (though it used to be and indeed
                   23294:        remains so in Heimdal).
                   23295:        [e5a6c64d7cd5]
                   23296: 
                   23297: 2003-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23298: 
                   23299:        * mkinstalldirs:
                   23300:        Remove newer stuff that passes multiple (possibly duplicate)
                   23301:        directories to "mkdir -p" since that seems to break on Tru64 Unix at
                   23302:        least. This basically brings back what shipped with sudo 1.6.6.
                   23303:        [f2a1abd872b3]
                   23304: 
                   23305: 2003-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23306: 
                   23307:        * auth/kerb5.c:
                   23308:        Correct number of args to krb5_principal_get_realm() and fix an
                   23309:        unclosed comment that hid the bug.
                   23310:        [0b37f8ce7824]
                   23311: 
                   23312:        * configure:
                   23313:        regen
                   23314:        [1876cb840fe0]
                   23315: 
                   23316:        * configure.in:
                   23317:        ++version
                   23318:        [480aff7c048e]
                   23319: 
                   23320:        * README:
                   23321:        ++version
                   23322:        [488e0bbff613]
                   23323: 
                   23324:        * Makefile.in:
                   23325:        ++version
                   23326:        [97ef63cedc38]
                   23327: 
                   23328:        * INSTALL.binary:
                   23329:        ++version
                   23330:        [a506204e77d0]
                   23331: 
                   23332:        * INSTALL:
                   23333:        ++version
                   23334:        [555aeba5c2bf]
                   23335: 
                   23336:        * CHANGES, version.h:
                   23337:        ++version
                   23338:        [f66985a64063]
                   23339: 
                   23340:        * BUGS:
                   23341:        ++version
                   23342:        [ea3573432412]
                   23343: 
                   23344:        * configure.in:
                   23345:        use krb5-config to determine Kerberos V details if it exists
                   23346:        [7b46bbdaf774]
                   23347: 
                   23348:        * alloc.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
                   23349:        auth/securid5.c, auth/sia.c, check.c, compat.h, defaults.c, env.c,
                   23350:        find_path.c, interfaces.c, logging.c, parse.c, sudo.c, sudo.h,
                   23351:        testsudoers.c, visudo.c:
                   23352:        Use warn/err and getprogname() throughout. The main exception is
                   23353:        openlog(). Since the admin may be filtering logs based on the
                   23354:        program name in the log files, hard code this to "sudo".
                   23355:        [9f180d015cfa]
                   23356: 
                   23357:        * Makefile.in:
                   23358:        Add getprogname.c and err.c
                   23359:        [d411c54a07dc]
                   23360: 
                   23361:        * configure:
                   23362:        regen
                   23363:        [6d585d391acc]
                   23364: 
                   23365:        * config.h.in, configure.in:
                   23366:        Add checks for getprognam(), __progname and err.h
                   23367:        [bcbccf61d34a]
                   23368: 
                   23369:        * emul/err.h:
                   23370:        For systems withour err/warn functions.
                   23371:        [1b33118884d9]
                   23372: 
                   23373:        * err.c:
                   23374:        For systems withour err/warn functions.
                   23375:        [26721f6b041f]
                   23376: 
                   23377:        * getprogname.c:
                   23378:        For systems neither getprogname() nor __progname; uses Argv[0].
                   23379:        [841cf42af1eb]
                   23380: 
                   23381: 2003-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23382: 
                   23383:        * CHANGES:
                   23384:        checkpoint for 1.6.7p1
                   23385:        [5bfdaf441dce]
                   23386: 
                   23387:        * sudo.c, testsudoers.c:
                   23388:        fix strlcpy() rval check (innocuous)
                   23389:        [e05ac7e0d1f3]
                   23390: 
                   23391:        * check.c:
                   23392:        oflow detection in expand_prompt() was faulty (false positives). The
                   23393:        count was based on strlcat() return value which includes the length
                   23394:        of the entire string.
                   23395:        [086c5a0acb25]
                   23396: 
                   23397: 2003-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23398: 
                   23399:        * RUNSON, TODO:
                   23400:        checkpoint for the sudo 1.6.7 release
                   23401:        [096bab4da29a] [SUDO_1_6_7]
                   23402: 
                   23403:        * CHANGES:
                   23404:        checkpoint for the sudo 1.6.7 release
                   23405:        [87322187ed78]
                   23406: 
                   23407: 2003-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23408: 
                   23409:        * logging.c:
                   23410:        g/c unused variable
                   23411:        [c57cd4a17765]
                   23412: 
                   23413:        * configure:
                   23414:        regen
                   23415:        [e7c1f581dfac]
                   23416: 
                   23417:        * configure.in:
                   23418:        use man sections 8 and 5 for csops
                   23419:        [87de581bda88]
                   23420: 
                   23421: 2003-03-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23422: 
                   23423:        * configure:
                   23424:        regen
                   23425:        [cb1433a9c7a1]
                   23426: 
                   23427:        * configure.in:
                   23428:        Add -lskey or -lopie directly to SUDO_LIBS instead of having
                   23429:        AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
                   23430:        [ac5667978939]
                   23431: 
                   23432:        * configure:
                   23433:        regen
                   23434:        [638459118a2a]
                   23435: 
                   23436:        * configure.in:
                   23437:        Add --with-blibpath for AIX. An alternate libpath may be specified
                   23438:        or
                   23439:        -blibpath support can be disabled. Also change conifgure such that
                   23440:        -blibpath is not specified if no -L libpaths were added to
                   23441:        SUDO_LDFLAGS.
                   23442:        [c7d17b480cad]
                   23443: 
                   23444:        * aclocal.m4:
                   23445:        Add --with-blibpath for AIX. An alternate libpath may be specified
                   23446:        or
                   23447:        -blibpath support can be disabled. Also change conifgure such that
                   23448:        -blibpath is not specified if no -L libpaths were added to
                   23449:        SUDO_LDFLAGS.
                   23450:        [37022e991575]
                   23451: 
                   23452:        * INSTALL:
                   23453:        Add --with-blibpath for AIX. An alternate libpath may be specified
                   23454:        or
                   23455:        -blibpath support can be disabled. Also change conifgure such that
                   23456:        -blibpath is not specified if no -L libpaths were added to
                   23457:        SUDO_LDFLAGS.
                   23458:        [4b4bbe5bbe1b]
                   23459: 
                   23460:        * configure.in:
                   23461:        add AIX blibpath support
                   23462:        [16ba788bf086]
                   23463: 
                   23464:        * INSTALL, configure.in:
                   23465:        --with-skey and --with-opie now take an option directory argument
                   23466:        This obsoletes a --with-csops hack (/tools/cs/skey)
                   23467: 
                   23468:        Also remove the remaining direct uses of "echo"
                   23469:        [5b4986a90c03]
                   23470: 
                   23471: 2003-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23472: 
                   23473:        * configure.in:
                   23474:        Detect KTH Kerberos IV and deal with it. Also make -lroken optional
                   23475:        for KTH Kerberos IV and V.
                   23476:        [119f97b48e18]
                   23477: 
                   23478:        * aclocal.m4:
                   23479:        Add SUDO_APPEND_LIBPATH function that add -L/path/to/dir (and
                   23480:        -R/path/to/dir if $with_rpath) to the specified variable.
                   23481:        [e55e49d076ce]
                   23482: 
                   23483:        * INSTALL, configure.in:
                   23484:        Add -R/path/to/libs for Solaris and SVR4. There is a new configure
                   23485:        option, --with-rpath to control this behavior.
                   23486:        [d4730c5399ab]
                   23487: 
                   23488:        * configure.in:
                   23489:        for kerb4 put libdes after libkrb on the link line
                   23490:        [5c566100eab6]
                   23491: 
                   23492:        * auth/kerb4.c:
                   23493:        typo
                   23494:        [6541b72b64a3]
                   23495: 
                   23496:        * configure.in:
                   23497:        fix kerberos lib check when a path is specified
                   23498:        [ae833a914c6f]
                   23499: 
                   23500:        * logging.c:
                   23501:        Fix boolean thinko in SIGCHLD reaper and call reapchild after
                   23502:        sending mail instead of doing a conditional sudo_waitpid.
                   23503:        [86fa9a35df5a]
                   23504: 
                   23505: 2003-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23506: 
                   23507:        * configure:
                   23508:        regen
                   23509:        [e6275cf528ba]
                   23510: 
                   23511:        * configure.in:
                   23512:        replace =DIR with [=DIR] where sensible
                   23513:        [c39a59173b38]
                   23514: 
                   23515:        * configure.in:
                   23516:        o Use AC_MSG_* instead of "echo" o New Kerberos include/lib
                   23517:        detection based on openssh's configure.in
                   23518:        [5b7a340912df]
                   23519: 
                   23520:        * INSTALL:
                   23521:        --with-kerb4 and --with-kerb5 now take an optional argument.
                   23522:        [71ed87fc9c64]
                   23523: 
                   23524: 2003-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23525: 
                   23526:        * auth/securid.c:
                   23527:        Kill remaining strcpy(), the programmer's guide says username is 32
                   23528:        bytes.
                   23529:        [bdba70fcd08d]
                   23530: 
                   23531:        * auth/kerb4.c:
                   23532:        trat uid_t as unsigned long for printf and use snprintf, not sprintf
                   23533:        [8072f5f8966d]
                   23534: 
                   23535:        * auth/rfc1938.c:
                   23536:        use snprintf
                   23537:        [fc0c70c665fe]
                   23538: 
                   23539: 2003-03-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23540: 
                   23541:        * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
                   23542:        auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
                   23543:        auth/rfc1938.c, auth/sudo_auth.c:
                   23544:        update copyright year
                   23545:        [b0a10ccb1d0e]
                   23546: 
                   23547:        * sudo.man.in, sudoers.man.in, visudo.man.in:
                   23548:        update copyright year
                   23549:        [8fce0034eb51]
                   23550: 
                   23551:        * LICENSE, Makefile.in, aclocal.m4, alloc.c, check.c, compat.h,
                   23552:        configure.in, env.c, find_path.c, interfaces.c, logging.c, parse.c,
                   23553:        parse.lex, parse.yacc, set_perms.c, sudo.c, sudo.h, sudo.pod,
                   23554:        sudoers.pod, testsudoers.c, version.h, visudo.c, visudo.pod:
                   23555:        update copyright year
                   23556:        [d541e75fe520]
                   23557: 
                   23558:        * check.c, env.c, sudo.c:
                   23559:        Cast [ug]ids to unsigned long and printf with %lu
                   23560:        [2ede64d3592b]
                   23561: 
                   23562:        * configure:
                   23563:        regen
                   23564:        [c7c3245bdf3e]
                   23565: 
                   23566:        * configure.in:
                   23567:        correct error messages for --with-sudoers-{mode,uid,gid}
                   23568:        [77fc15b1c9db]
                   23569: 
                   23570:        * alloc.c:
                   23571:        make the malloc(0) error specific to each function to aid tracking
                   23572:        down bugs.
                   23573:        [a58c34374b4b]
                   23574: 
                   23575:        * alloc.c:
                   23576:        deal with platforms where size_t is signed and there is no SIZE_MAX
                   23577:        or SIZE_T_MAX
                   23578:        [7192abb4ab4e]
                   23579: 
                   23580:        * auth/kerb5.c:
                   23581:        Make this compile w/ Heimdal and fix some gcc warnings.
                   23582:        [f52f026f31c2]
                   23583: 
                   23584:        * sudo.c:
                   23585:        Use stat_sudoers macro so --with-stow can work
                   23586:        [c3674735c139]
                   23587: 
                   23588:        * INSTALL, config.h.in, configure, configure.in:
                   23589:        Add support for --with-stow based on patches from Robert Uhl
                   23590:        [b274cc1dd52c]
                   23591: 
                   23592:        * env.c:
                   23593:        fix indentation
                   23594:        [110d9f1721b1]
                   23595: 
                   23596:        * configure.in:
                   23597:        back out rev 1.352
                   23598:        [1eee91c83f11]
                   23599: 
                   23600:        * lex.yy.c:
                   23601:        regen
                   23602:        [72fba1c9590b]
                   23603: 
                   23604:        * parse.lex:
                   23605:        use strlcpy, not strncpy
                   23606:        [4faccbaeccef]
                   23607: 
                   23608:        * set_perms.c:
                   23609:        Fix typo; check pw_uid, not pw_gid after setusercontext() failure.
                   23610:        [33bf0d18fdc1]
                   23611: 
                   23612:        * logging.c:
                   23613:        use pid_t
                   23614:        [3e0536993d2c]
                   23615: 
                   23616: 2003-03-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23617: 
                   23618:        * strlcat.c, strlcpy.c:
                   23619:        Make gcc shutup about unused rcsid
                   23620:        [1669a0c74e9e]
                   23621: 
                   23622:        * interfaces.c:
                   23623:        Move the n == 0 check for the non-getifaddrs cas
                   23624:        [2460be061b2a]
                   23625: 
                   23626:        * auth/rfc1938.c:
                   23627:        skeychallenge() on NetBSD take a size parameter
                   23628:        [05acc2012801]
                   23629: 
                   23630:        * configure:
                   23631:        regen
                   23632:        [24bccf4749e8]
                   23633: 
                   23634:        * configure.in:
                   23635:        put -ldl after -lpam, not before; fixes static linking on Linux
                   23636:        [7f06b7b2b4d8]
                   23637: 
                   23638:        * interfaces.c:
                   23639:        Avoid malloc(0) and fix the loop invariant for the getifaddrs()
                   23640:        case.
                   23641:        [239a55068646]
                   23642: 
                   23643:        * sudo.cat, sudoers.cat, visudo.cat:
                   23644:        regen
                   23645:        [4a2eed3981ca]
                   23646: 
                   23647:        * sudo.man.in, sudoers.man.in, visudo.man.in:
                   23648:        regen
                   23649:        [2c96ea2cf930]
                   23650: 
                   23651:        * Makefile.in:
                   23652:        Preserve copyright notice from .pod file in .man.in file
                   23653:        [519fbd09aebc]
                   23654: 
                   23655:        * visudo.pod:
                   23656:        Add sudoers(5) to SEE ALSO
                   23657:        [77ecfe3aedf1]
                   23658: 
                   23659: 2003-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23660: 
                   23661:        * lex.yy.c:
                   23662:        regen
                   23663:        [6f5751ce0b74]
                   23664: 
                   23665:        * parse.lex:
                   23666:        Don't assume libc can realloc() a NULL string. If malloc/realloc
                   23667:        fails, make sure we just return; yyerror() is not terminal.
                   23668:        [1b8618623708]
                   23669: 
                   23670:        * lex.yy.c:
                   23671:        regen
                   23672:        [5d31b46191c6]
                   23673: 
                   23674:        * parse.lex:
                   23675:        simplify fill_args a little and use strlcpy for paranoia
                   23676:        [0ea35a55542b]
                   23677: 
                   23678:        * sudo.tab.c:
                   23679:        regen
                   23680:        [5a8d508d708b]
                   23681: 
                   23682:        * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
                   23683:        testsudoers.c:
                   23684:        Use strlc{at,py} for paranoia's sake and exit on overflow. In all
                   23685:        cases the strings were either pre-allocated to the correct size of
                   23686:        length checks were done before the copy but a little paranoia can go
                   23687:        a long way.
                   23688:        [e73d28f1d14e]
                   23689: 
                   23690:        * sudo.h:
                   23691:        Add strlc{at,py} protos
                   23692:        [748ffc7fc7f4]
                   23693: 
                   23694:        * env.c, interfaces.c:
                   23695:        Use erealloc3()
                   23696:        [47f2cb46aba8]
                   23697: 
                   23698:        * configure:
                   23699:        regen
                   23700:        [e7e2fb79f935]
                   23701: 
                   23702:        * alloc.c:
                   23703:        Oflow test of nmemb > SIZE_MAX / size is fine (don't need >=). Use
                   23704:        memcpy() instead of strcpy() in estrdup() so this is strcpy()-free.
                   23705:        [7e0fa4d6fc1d]
                   23706: 
                   23707:        * sudo.c:
                   23708:        snprintf() a uid as %lu, not %ld to match the MAX_UID_T_LEN test in
                   23709:        configure.
                   23710:        [09ea4d3959e9]
                   23711: 
                   23712:        * aclocal.m4:
                   23713:        In MAX_UID_T_LEN test cast uid_t to unsigned long, just unsigned.
                   23714:        [31b4fdfdb8bf]
                   23715: 
                   23716: 2003-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23717: 
                   23718:        * sudo.c:
                   23719:        Use snprintf() for paranoia
                   23720:        [a2659ceb46de]
                   23721: 
                   23722:        * parse.yacc:
                   23723:        Use emalloc2 and erealloc3
                   23724:        [90a069842401]
                   23725: 
                   23726:        * Makefile.in:
                   23727:        strlc{at,py} for those w/o it
                   23728:        [bac82dc916ee]
                   23729: 
                   23730:        * strlcat.c, strlcpy.c:
                   23731:        stlc{at,py} for those w/o it.
                   23732:        [ce7254f5db09]
                   23733: 
                   23734:        * config.h.in, configure, configure.in:
                   23735:        Add stlc{at,py} for those w/o it.
                   23736:        [00f08219657a]
                   23737: 
                   23738:        * alloc.c, sudo.h:
                   23739:        Add erealloc3(), a realloc() version of emalloc2().
                   23740:        [c96eaf08bbed]
                   23741: 
                   23742:        * interfaces.c, sudo.c:
                   23743:        Use emalloc2() to allocate N things of a certain size.
                   23744:        [1e0aba365555]
                   23745: 
                   23746:        * alloc.c, sudo.h:
                   23747:        Add emalloc2() -- like calloc() but w/o the bzero and with
                   23748:        error/oflow checking.
                   23749:        [292150bc4153]
                   23750: 
                   23751:        * alloc.c:
                   23752:        Error out on malloc(0); suggested by theo
                   23753:        [995279e81326]
                   23754: 
                   23755: 2003-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23756: 
                   23757:        * configure, configure.in:
                   23758:        fix a typo; David Krause
                   23759:        [f161213a17ab]
                   23760: 
                   23761: 2003-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23762: 
                   23763:        * sudo.pod:
                   23764:        fix typo
                   23765:        [3ae5ad9a351a]
                   23766: 
                   23767: 2003-03-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23768: 
                   23769:        * env.c:
                   23770:        Remove DYLD_ from the environment for MacOS X; from bbraun
                   23771:        [38caad5a3935]
                   23772: 
                   23773: 2003-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23774: 
                   23775:        * config.h.in, configure.in:
                   23776:        not not; Anil Madhavapeddy
                   23777:        [d4f4f0bfc66b]
                   23778: 
                   23779: 2003-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23780: 
                   23781:        * sudo.pod, sudoers.pod, visudo.pod:
                   23782:        typos; jmc@openbsd.org
                   23783:        [868c0f09bf9e]
                   23784: 
                   23785: 2003-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23786: 
                   23787:        * parse.yacc:
                   23788:        Add some missing ';' rule terminators that bison warns about.
                   23789:        [535b0b8dcce5]
                   23790: 
                   23791:        * config.sub:
                   23792:        fix typo I introduced in last merge
                   23793:        [81db4e4f43fe]
                   23794: 
                   23795:        * configure:
                   23796:        regenerate with autoconf 2.57
                   23797:        [ca0c1e9564f8]
                   23798: 
                   23799:        * config.h.in:
                   23800:        Add missing "$HOME"
                   23801:        [209186197ad1]
                   23802: 
                   23803:        * configure.in:
                   23804:        Add some more square backets to make autoconf 2.57 happy
                   23805:        [b5639c14faf7]
                   23806: 
                   23807:        * config.sub, mkinstalldirs:
                   23808:        Updates from autoconf-2.57
                   23809:        [36be35eb331b]
                   23810: 
                   23811:        * config.guess:
                   23812:        Updates from autoconf-2.57
                   23813:        [ea0f8ca622af]
                   23814: 
                   23815: 2003-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23816: 
                   23817:        * sudo.tab.h:
                   23818:        regen
                   23819:        [13a65a421567]
                   23820: 
                   23821:        * lex.yy.c, sudo.tab.c:
                   23822:        regen
                   23823:        [0b529db7cb6d]
                   23824: 
                   23825:        * parse.lex, parse.yacc, sudoers.pod:
                   23826:        Add support for Defaults>RunasUser
                   23827:        [20d726373175]
                   23828: 
                   23829: 2003-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23830: 
                   23831:        * visudo.c:
                   23832:        fclose() yyin after each yyparse() is done and use fopen() instead
                   23833:        of using freopen().
                   23834:        [587f8a2df857]
                   23835: 
                   23836:        * parse.lex:
                   23837:        Better fix for sudoers files w/o a newline before EOF. It looks
                   23838:        like the issue is that yyrestart() does not reset the start
                   23839:        condition to INITIAL which is an issue since we parse sudoers
                   23840:        multiple times.
                   23841:        [920f8326968a]
                   23842: 
                   23843: 2003-01-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23844: 
                   23845:        * parse.lex:
                   23846:        Work around what appears to be a flex bug when dealing with files
                   23847:        that lack a final newline before EOF. This adds a rule to match EOF
                   23848:        in the non-initial states which resets the state to INITIAL and
                   23849:        throws an error.
                   23850:        [b94943bb1f81]
                   23851: 
                   23852:        * visudo.c:
                   23853:        o The parser needs sudoers to end with a newline but some editors
                   23854:        (emacs) may not add one. Check for a missing newline at EOF and
                   23855:        add one if needed. o Set quiet flag during initial sudoers parse (to
                   23856:        get options) o Move yyrestart() call and always use freopen() to
                   23857:        open yyin after initial sudoers parse.
                   23858:        [12d12f9b07aa]
                   23859: 
                   23860: 2002-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23861: 
                   23862:        * set_perms.c:
                   23863:        Fix pasto/thinko in setresgid()/setregid() usage. Want to set
                   23864:        effective gid, not real gid, when reading sudoers.
                   23865:        [c7d18b810fcd]
                   23866: 
                   23867:        * set_perms.c:
                   23868:        don't compile set_perms_posix if we have setreuid or setresuid
                   23869:        [b9cea7a81a29]
                   23870: 
                   23871: 2002-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23872: 
                   23873:        * sudo.pod, sudoers.pod:
                   23874:        document new prompt escapes
                   23875:        [2f088076b640]
                   23876: 
                   23877:        * check.c:
                   23878:        Add %U and %H escapes and redo prompt rewriting. "%%" now gets
                   23879:        collapsed to "%" as was originally intended. This also gets rid of
                   23880:        lastchar (does lookahead instead of lookback) which should simplify
                   23881:        the logic slightly.
                   23882:        [4b707b77b3c7]
                   23883: 
                   23884: 2002-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23885: 
                   23886:        * tgetpass.c:
                   23887:        Write the prompt *after* turning off echo to avoid some password
                   23888:        characters being echoed on heavily-loaded machines with fast
                   23889:        typists.
                   23890:        [d38c57775915]
                   23891: 
                   23892:        * config.sub:
                   23893:        Add support for mipseb; wiz@danbala.tuwien.ac.at
                   23894:        [cfdac87ed5c8]
                   23895: 
                   23896:        * configure.in:
                   23897:        Fix IRIX fallout from name changes in man dir/sect Makefile
                   23898:        variables. Patch from erici AT motown DOT cc DOT utexas DOT edu
                   23899:        [9a7618755c23]
                   23900: 
                   23901:        * auth/pam.c:
                   23902:        Keep a local copy of tgetpass_flags so we don't add in TGP_ECHO to
                   23903:        the global copy. Problem noted by Peter Pentchev.
                   23904:        [d0a3e189cb06]
                   23905: 
                   23906: 2002-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23907: 
                   23908:        * sudo.tab.c:
                   23909:        regen
                   23910:        [23b931359087]
                   23911: 
                   23912:        * parse.yacc:
                   23913:        Add missing yyerror() calls; YYERROR does not seem to call this for
                   23914:        us.
                   23915:        [0be7aeb3ac57]
                   23916: 
                   23917: 2002-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23918: 
                   23919:        * sudo.c:
                   23920:        fix typo in comment; Pedro Bastos
                   23921:        [d7406c460e99]
                   23922: 
                   23923: 2002-11-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23924: 
                   23925:        * INSTALL:
                   23926:        document --disable-setresuid
                   23927:        [fbd03d03a027]
                   23928: 
                   23929:        * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
                   23930:        auth/sudo_auth.c:
                   23931:        Sprinkle some volatile qualifiers to prevent over-enthusiastic
                   23932:        optimizers from removing memset() calls.
                   23933:        [5370ac0e6129]
                   23934: 
                   23935:        * logging.c, parse.yacc:
                   23936:        minor sign fixes pointed out by gcc -Wsign-compare
                   23937:        [db872438337f]
                   23938: 
                   23939:        * set_perms.c, sudo.c, sudo.h:
                   23940:        Revamp set_perms. We now use a version based on setresuid() or
                   23941:        setreuid() when possible since that allows us to support the
                   23942:        stay_setuid option and we always know exactly what the semantics
                   23943:        will be (various Linux kernels have broken POSIX saved uid support).
                   23944:        [523bc212396c]
                   23945: 
                   23946:        * config.h.in, configure:
                   23947:        regen from configure.in
                   23948:        [351877ea2624]
                   23949: 
                   23950:        * configure.in:
                   23951:        Add checks for setresuid() and a way to disable using it
                   23952:        [a5b21653d169]
                   23953: 
                   23954:        * compat.h:
                   23955:        No long need to emulate set*[ug]id() via setres[ug]id() or
                   23956:        setre[ug]id(). The new set_perms stuff only uses things it knows are
                   23957:        there.
                   23958:        [47884bd5d1d9]
                   23959: 
                   23960:        * sudo.c:
                   23961:        Before exec, restore state of signal handlers to be the same as when
                   23962:        we were initialy invoked instead of just reseting to SIG_DFL. Fixes
                   23963:        a problem when using sudo with nohup. Based on a patch from Paul
                   23964:        Markham.
                   23965:        [f8f5a1484faa]
                   23966: 
                   23967:        * sudo.c:
                   23968:        o timestamp_uid should be uid_t, not int o clarify error message
                   23969:        when sudo is run by root and no_root_sudo is set
                   23970:        [19dda0734264]
                   23971: 
                   23972: 2002-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23973: 
                   23974:        * README:
                   23975:        update ftp link for bison
                   23976:        [98bc191016e3]
                   23977: 
                   23978: 2002-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23979: 
                   23980:        * set_perms.c:
                   23981:        Error out if setusercontext() fails and the runas user is not root.
                   23982:        [089f9ade4686]
                   23983: 
                   23984: 2002-05-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23985: 
                   23986:        * auth/securid5.c:
                   23987:        Fix rcsid
                   23988:        [07e9e85dcc2f]
                   23989: 
                   23990:        * configure.in:
                   23991:        Fix SecurID API test
                   23992:        [5ec201f454a5]
                   23993: 
                   23994: 2002-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   23995: 
                   23996:        * env.c:
                   23997:        typo in comment
                   23998:        [9d385c9ac533]
                   23999: 
                   24000:        * configure.in:
                   24001:        securid5 stuff needs pthreads. Just adding -lpthread is suboptimal
                   24002:        but I don't see a better way at the moment.
                   24003:        [f89e55cbb313]
                   24004: 
                   24005:        * Makefile.in, auth/securid5.c:
                   24006:        SecurID API version 5 support from Michael Stroucken
                   24007:        [68500ac7e531]
                   24008: 
                   24009:        * configure.in:
                   24010:        Add check for SecurID 5.0 API
                   24011:        [1ee242e6de6b]
                   24012: 
                   24013: 2002-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24014: 
                   24015:        * strerror.c:
                   24016:        We actually do still need config.h to get the 'const' definition for
                   24017:        K&R C.
                   24018:        [d9c982032d85]
                   24019: 
                   24020: 2002-05-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24021: 
                   24022:        * configure:
                   24023:        regen with autoconf 2.5.3
                   24024:        [c71fc086eef5]
                   24025: 
                   24026:        * configure.in:
                   24027:        Don't set sysconfdir to '/etc' if the user has specified a --prefix.
                   24028:        [d90da1efafd9]
                   24029: 
                   24030:        * configure.in:
                   24031:        Some fixes for autoconf 2.53 from Robert Uhl o don't AC_SUBST
                   24032:        LIBOBJS o force a 4th arg for AC_CHECK_HEADER() to workaround a bug
                   24033:        [dd67afefa90d]
                   24034: 
                   24035:        * env.c, sudo.c, sudo.h:
                   24036:        No need for dump_badenv() now that dump_defaults() knows how to dump
                   24037:        lists.
                   24038:        [6bcda468501d]
                   24039: 
                   24040:        * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
                   24041:        version.h:
                   24042:        ++version
                   24043:        [44e3b8f95f0b]
                   24044: 
                   24045:        * sudoers.pod:
                   24046:        document timestampowner
                   24047:        [37ebd69e9dd1]
                   24048: 
                   24049:        * check.c:
                   24050:        Don't call set_perms() when doing timestamp stuff unless
                   24051:        timestamp_uid != 0.
                   24052:        [63a63d41d18c]
                   24053: 
                   24054:        * auth/sudo_auth.c, check.c, logging.c, parse.c, set_perms.c, sudo.c,
                   24055:        sudo.h, testsudoers.c:
                   24056:        g/c second arg to set_perms--it is no longer used
                   24057:        [7ac4ce50c612]
                   24058: 
                   24059: 2002-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24060: 
                   24061:        * check.c, set_perms.c, sudo.c, sudo.h:
                   24062:        Add support for non-root timestamp dirs. This allows the timestamp
                   24063:        dir to be shared via NFS (though this is not recommended).
                   24064:        [faa83dd2b7fb]
                   24065: 
                   24066:        * def_data.c, def_data.h, def_data.in:
                   24067:        Add timestampowner, "Owner of the authentication timestamp dir"
                   24068:        [d47640d4c86a]
                   24069: 
                   24070: 2002-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24071: 
                   24072:        * env.c:
                   24073:        Don't try to pre-compute the size of the new envp, just allocate
                   24074:        space up front and realloc as needed. Changes to the new env
                   24075:        pointer must all be made through insert_env() which now keeps track
                   24076:        of spaced used and allocates as needed.
                   24077:        [39bc934a9f2c]
                   24078: 
                   24079: 2002-04-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24080: 
                   24081:        * configure:
                   24082:        regen
                   24083:        [0e12c09bb790]
                   24084: 
                   24085:        * configure.in:
                   24086:        Fix two typo/pastos; from jrj@purdue.edu
                   24087:        [b718a4bf1181]
                   24088: 
                   24089: 2002-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24090: 
                   24091:        * INSTALL.binary, README:
                   24092:        ++version
                   24093:        [a1e33027278c] [SUDO_1_6_6]
                   24094: 
                   24095:        * configure, sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
                   24096:        visudo.cat, visudo.man.in:
                   24097:        regen
                   24098:        [19eb2be283ef]
                   24099: 
                   24100:        * CHANGES, RUNSON, TODO:
                   24101:        Sync with 1.6.6
                   24102:        [2ff9a9087f63]
                   24103: 
                   24104:        * check.c:
                   24105:        The the loop used to expand %h and %u, the lastchar variable was not
                   24106:        being initialized. This means that if the last char in the prompt
                   24107:        is '%' and the first char is 'h' or 'u' a extra copy of the host or
                   24108:        user name would be copied, for which space had not been allocated.
                   24109:        [b2e27197857d]
                   24110: 
                   24111: 2002-04-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24112: 
                   24113:        * BUGS, INSTALL, Makefile.in, configure.in, version.h:
                   24114:        crank version to 1.6.6
                   24115:        [cfd08689e597]
                   24116: 
                   24117:        * auth/afs.c:
                   24118:        #undef VOID to get rid of an AFS warning
                   24119:        [b40760564dc1]
                   24120: 
                   24121:        * env.c:
                   24122:        Use easprintf instead of emalloc + sprintf for some things.
                   24123:        [e7bfe2e69a03]
                   24124: 
                   24125: 2002-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24126: 
                   24127:        * lex.yy.c, sudo.tab.c:
                   24128:        regen
                   24129:        [35327104383d]
                   24130: 
                   24131:        * parse.c, parse.lex, parse.yacc, testsudoers.c:
                   24132:        Remove Chris Jepeway's email address so people don't bug him ;-)
                   24133:        [c03410747a69]
                   24134: 
                   24135: 2002-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24136: 
                   24137:        * sudo.c:
                   24138:        Move endpwent() to be after set_perms(PERM_RUNAS, ...) and also call
                   24139:        endgrent() at the same time.
                   24140:        [28b6097d5d1a]
                   24141: 
                   24142: 2002-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24143: 
                   24144:        * INSTALL:
                   24145:        Make it clear which configure options take arguments.
                   24146:        [38529e7efad0]
                   24147: 
                   24148: 2002-01-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24149: 
                   24150:        * compat.h:
                   24151:        HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there is no
                   24152:        RLIM_INFINITY, just pretend it is -1. This works because we only
                   24153:        check for RLIM_INFINITY and do not set anything to that value.
                   24154:        [53173d34e6eb]
                   24155: 
                   24156: 2002-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24157: 
                   24158:        * auth/pam.c:
                   24159:        Zero and free allocated memory when there is a conversation error.
                   24160:        [e342133db579]
                   24161: 
                   24162:        * auth/bsdauth.c:
                   24163:        Use sigaction() not signal()
                   24164:        [126c2790561f]
                   24165: 
                   24166:        * INSTALL:
                   24167:        Mention that some linux kernels have broken POSIX saved ID support
                   24168:        [571ef1a893d3]
                   24169: 
                   24170:        * CHANGES:
                   24171:        checkpoint for 1.6.5p2
                   24172:        [9e9e456f7f43]
                   24173: 
                   24174:        * configure:
                   24175:        regen
                   24176:        [d53703a46708]
                   24177: 
                   24178:        * configure.in:
                   24179:        Add --disable-setreuid flag
                   24180:        [3b9f2679cb55]
                   24181: 
                   24182:        * INSTALL:
                   24183:        Document new --disable-setreuid option and change description for
                   24184:        --disable-saved-ids to match new error message.
                   24185:        [14fd3e5f60a5]
                   24186: 
                   24187:        * set_perms.c:
                   24188:        fatal() now takes an argument that determines whether or not to call
                   24189:        perror().
                   24190:        [d826b25e62ff]
                   24191: 
                   24192:        * TROUBLESHOOTING:
                   24193:        Update for new error messages from set_perms()
                   24194:        [78007c3f76a9]
                   24195: 
                   24196:        * PORTING:
                   24197:        Update for new error messages from set_perms()
                   24198:        [60c545a6bcff]
                   24199: 
                   24200: 2002-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24201: 
                   24202:        * auth/pam.c:
                   24203:        Make this compile w/o warnings
                   24204:        [b90843a29af5]
                   24205: 
                   24206:        * auth/pam.c:
                   24207:        Mention that we can't use pam_acct_mgmt()
                   24208:        [1dfc5a6e0479]
                   24209: 
                   24210:        * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c:
                   24211:        The user's password was not zeroed after use when AIX
                   24212:        authentication, BSD authentication, FWTK or PAM was in use.
                   24213:        [b18fff30b1e7]
                   24214: 
                   24215: 2002-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24216: 
                   24217:        * auth/pam.c:
                   24218:        Avoid giving PAM a NULL password response, use the empty string
                   24219:        instead. This avoids a log warning when the user hits ^C at the
                   24220:        password prompt when PAM is in use.
                   24221:        [c3315805e4e4]
                   24222: 
                   24223:        * auth/pam.c:
                   24224:        Don't check the return value of pam_setcred(). In Linux-PAM 0.75
                   24225:        pam_setcred() returns the last saved return code, not the return
                   24226:        code for the setcred module. Because we haven't called
                   24227:        pam_authenticate(), this is not set and so pam_setcred() returns
                   24228:        PAM_PERM_DENIED.
                   24229:        [73db145fa179]
                   24230: 
                   24231:        * Makefile.in:
                   24232:        Don't need a '/' between $(DESTDIR) and a directory.
                   24233:        [0901ca618176]
                   24234: 
                   24235:        * Makefile.binary:
                   24236:        Don't need a '/' between $(DESTDIR) and a directory.
                   24237:        [cd7eb6098b87]
                   24238: 
                   24239: 2002-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24240: 
                   24241:        * configure:
                   24242:        regen
                   24243:        [41b12c039282]
                   24244: 
                   24245:        * configure.in:
                   24246:        o BSDi also has a bogus setreuid() o Old FreeBSD has a bogus
                   24247:        setreuid() o new NetBSD has a real setreuid() o add check for
                   24248:        freeifaddrs() if getifaddrs() exists.
                   24249:        [a82ee3b01733]
                   24250: 
                   24251:        * config.h.in, interfaces.c:
                   24252:        Older BSDi releases lack freeifaddrs() so add a test for that and if
                   24253:        it is not present just use free().
                   24254:        [6270671ea9d5]
                   24255: 
                   24256: 2002-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24257: 
                   24258:        * CHANGES, RUNSON:
                   24259:        Checkpoint for 1.6.5p1
                   24260:        [26134ecf9b36]
                   24261: 
                   24262:        * auth/passwd.c:
                   24263:        Return AUTH_FAILURE in passwd_init() if skeyaccess() denies access
                   24264:        to normal passwords, not AUTH_FATAL (which just causes an exit).
                   24265:        [785e0f4bc0e2]
                   24266: 
                   24267:        * visudo.c:
                   24268:        Don't use memory after it has been freed.
                   24269:        [c60492739fdb]
                   24270: 
                   24271:        * auth/passwd.c:
                   24272:        skeyaccess() wants a struct passwd * not a char *; Patch from
                   24273:        Phillip E. Lobbes
                   24274:        [65a1d3806fcd] [SUDO_1_6_5]
                   24275: 
                   24276:        * BUGS:
                   24277:        ++version
                   24278:        [b2e1825e692e]
                   24279: 
                   24280:        * CHANGES, RUNSON, TODO:
                   24281:        checkpoint for sudo 1.6.5
                   24282:        [d730945622e7]
                   24283: 
                   24284: 2002-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24285: 
                   24286:        * configure:
                   24287:        regen
                   24288:        [49744c403ac9]
                   24289: 
                   24290:        * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
                   24291:        version 1.6.5
                   24292:        [ec30a5f7fc45]
                   24293: 
                   24294:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   24295:        visudo.man.in:
                   24296:        sudo version 1.6.5
                   24297:        [458a3bed535d]
                   24298: 
                   24299:        * logging.c:
                   24300:        o when invoking the mailer as root use a hard-coded environment that
                   24301:        doesn't include any info from the user's environment. Basically
                   24302:        paranoia.
                   24303: 
                   24304:        o Add support for the NO_ROOT_MAILER compile-time option and run the
                   24305:        mailer as the user and not root if NO_ROOT_MAILER is defined.
                   24306:        [4df351ec92ce]
                   24307: 
                   24308:        * set_perms.c, sudo.h:
                   24309:        Bring back PERM_FULL_USER
                   24310:        [edb6039bb284]
                   24311: 
                   24312:        * configure:
                   24313:        regen
                   24314:        [3eb2943afa03]
                   24315: 
                   24316:        * version.h:
                   24317:        version 1.6.5
                   24318:        [044fc9a0c72b]
                   24319: 
                   24320:        * INSTALL, config.h.in, configure.in:
                   24321:        Add --disable-root-mailer option to run the mailer as the user and
                   24322:        not root.
                   24323:        [e9f805397963]
                   24324: 
                   24325:        * CHANGES:
                   24326:        checkpoint for 1.6.4p2
                   24327:        [b58aae5aa98a]
                   24328: 
                   24329:        * PORTING:
                   24330:        Mention the "seteuid(0): Operation not permitted" problem here too
                   24331:        just for good measure.
                   24332:        [90135b37a691]
                   24333: 
                   24334: 2002-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24335: 
                   24336:        * env.c, getspwuid.c, sudo.c:
                   24337:        The SHELL environment variable was preserved from the user's
                   24338:        environment instead of being reset based on the passwd database when
                   24339:        the "env_reset" option was used. Now it is reset as it should be.
                   24340:        [300066ef3c71]
                   24341: 
                   24342:        * configure:
                   24343:        regen
                   24344:        [a47d779e6552]
                   24345: 
                   24346:        * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
                   24347:        sudo.c:
                   24348:        Add a configure option to turn off use of POSIX saved IDs
                   24349:        [fb18cc8e94d0]
                   24350: 
                   24351:        * configure:
                   24352:        regen
                   24353:        [d4f2f20025b6]
                   24354: 
                   24355:        * configure.in:
                   24356:        add --with-efence option
                   24357:        [45c4f33a8e88]
                   24358: 
                   24359:        * sudo.c:
                   24360:        Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a problem where
                   24361:        "sudo -l" would not work if always_set_home was set.
                   24362:        [c3a6de6c4800]
                   24363: 
                   24364:        * lex.yy.c:
                   24365:        regen
                   24366:        [417424452998]
                   24367: 
                   24368:        * parse.lex:
                   24369:        Quoted commas were not being treated correctly in command line
                   24370:        arguments.
                   24371:        [753415541b37]
                   24372: 
                   24373:        * sudo.c:
                   24374:        o Move the call to rebuild_env() until after MODE_RESET_HOME is set.
                   24375:        Otherwise, the set_home option has no effect.
                   24376: 
                   24377:        o Fix use of freed memory when the "fqdn" flag is set. This was
                   24378:        introduced by the fix for the "segv when gethostbynam() fails" bug.
                   24379:        Also, we no longer call set_fqdn() if the "fqdn" flag is not set so
                   24380:        there is no need to check the "fqdn" flag in set_fqdn() itself.
                   24381:        [4b6a4245c04e]
                   24382: 
                   24383:        * env.c:
                   24384:        Add 'continue' statements to optimize the switch statement. From
                   24385:        Solar.
                   24386:        [a82c76975ae5]
                   24387: 
                   24388: 2002-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24389: 
                   24390:        * sudoers.cat, sudoers.man.in:
                   24391:        Regen from new sudoers.pod
                   24392:        [6ecc07b3d0e1] [SUDO_1_6_4]
                   24393: 
                   24394:        * sudoers.pod:
                   24395:        Add caveat about stay_setuid flag
                   24396:        [9d228a7bea1b]
                   24397: 
                   24398:        * sudo.c:
                   24399:        If set_perms == set_perms_posix and the stay_setuid flag is not set,
                   24400:        set all uids to 0 and use set_perms_fallback().
                   24401:        [c4e54d1ec86f]
                   24402: 
                   24403:        * set_perms.c, sudo.h:
                   24404:        Remove PERM_FULL_USER (which is no longer used) and add
                   24405:        PERM_FULL_ROOT (used when exec'ing the mailer).
                   24406:        [15406c522ea2]
                   24407: 
                   24408:        * logging.c:
                   24409:        Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the mailer since we
                   24410:        never want to run the mailer setuid.
                   24411:        [2294853e0666]
                   24412: 
                   24413: 2002-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24414: 
                   24415:        * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
                   24416:        visudo.pod:
                   24417:        Use sudo.ws instead of courtesan.com in URLs
                   24418:        [55204002a308]
                   24419: 
                   24420:        * Makefile.binary, Makefile.in:
                   24421:        Fix mansect substitution
                   24422:        [b7b5cbc3aa91]
                   24423: 
                   24424:        * Makefile.in:
                   24425:        Substitute man sections in Makefile.binary
                   24426:        [040deb785e56]
                   24427: 
                   24428:        * Makefile.binary:
                   24429:        Sync install targets with Makefile.in and substitute in man
                   24430:        sections.
                   24431:        [77882a275281]
                   24432: 
                   24433:        * INSTALL, INSTALL.binary:
                   24434:        version is 1.6.4
                   24435:        [0f87aabbcb70]
                   24436: 
                   24437:        * Makefile.in:
                   24438:        Repair bindist target
                   24439:        [8d43bfe7e2d1]
                   24440: 
                   24441:        * CHANGES:
                   24442:        sync for 1.6.4
                   24443:        [13ca3d4a0a72]
                   24444: 
                   24445: 2002-01-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24446: 
                   24447:        * install-sh:
                   24448:        Fix case where neither whoami nor id are found
                   24449:        [424dd270bc47]
                   24450: 
                   24451: 2002-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24452: 
                   24453:        * install-sh:
                   24454:        If neither whoami nor id exists, just assume we are root.
                   24455:        [2d2644e42c53]
                   24456: 
                   24457:        * alloc.c:
                   24458:        Add explicit cast to (VOID *) on malloc/realloc. Seems to be needed
                   24459:        on AIX which for some reason isn't pulling in the malloc prototype.
                   24460:        [231440d2ee3b]
                   24461: 
                   24462: 2002-01-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24463: 
                   24464:        * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c:
                   24465:        (c) 2002
                   24466:        [700e3b41a68e]
                   24467: 
                   24468:        * CHANGES:
                   24469:        checkpoint
                   24470:        [33e604bd8d5b]
                   24471: 
                   24472:        * sudo.c:
                   24473:        Defer assigning new environment until right before the exec.
                   24474:        [f13c49e75c1c]
                   24475: 
                   24476:        * parse.c:
                   24477:        kill extra blank line
                   24478:        [12ef22e9dae3]
                   24479: 
                   24480: 2002-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24481: 
                   24482:        * configure:
                   24483:        regen
                   24484:        [a6cd2d788f74]
                   24485: 
                   24486:        * configure.in:
                   24487:        Use -O not -O2 for m88k-motorola-sysv* since motorola gcc-derived
                   24488:        compiler doesn't recognise -O2.
                   24489:        [5234aa543692]
                   24490: 
                   24491:        * HISTORY:
                   24492:        Clarify origins of Root Group sudo a bit based on info from
                   24493:        billp@rootgroup.com
                   24494:        [4deef01c4208]
                   24495: 
                   24496: 2002-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24497: 
                   24498:        * LICENSE:
                   24499:        2002
                   24500:        [6c8e089dbd1a]
                   24501: 
                   24502:        * CHANGES:
                   24503:        checkpoint for 1.6.4rc1
                   24504:        [3349eb87a49f]
                   24505: 
                   24506: 2002-01-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24507: 
                   24508:        * config.h.in:
                   24509:        now generated via autoheader
                   24510:        [84657d303cb9]
                   24511: 
                   24512:        * configure:
                   24513:        regen
                   24514:        [207bfa6a13f6]
                   24515: 
                   24516:        * compat.h:
                   24517:        Move in some stuff that was previously in config.h.
                   24518:        [e576d8b6480f]
                   24519: 
                   24520:        * aclocal.m4, configure.in:
                   24521:        Add info for autoheader.
                   24522:        [0549cd5da27c]
                   24523: 
                   24524: 2002-01-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24525: 
                   24526:        * Makefile.in:
                   24527:        o Add DESTDIR support o Use -M, -O, and -G instead of -m, -o, and
                   24528:        -g to facilitate non-root installs
                   24529:        [619216038f56]
                   24530: 
                   24531:        * install-sh:
                   24532:        Add -M option (like -m but only for root) If we can't find "whoami",
                   24533:        use "id" w/ some sed.
                   24534:        [b39121c8b792]
                   24535: 
                   24536:        * configure:
                   24537:        regen
                   24538:        [b39b93ff9804]
                   24539: 
                   24540:        * configure.in:
                   24541:        allow user to always override mansectsu and mansectform
                   24542:        [0fca5e63bd90]
                   24543: 
                   24544: 2001-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24545: 
                   24546:        * mkinstalldirs:
                   24547:        update from autoconf 2.52
                   24548:        [07bd75a508c3]
                   24549: 
                   24550:        * config.guess, config.sub:
                   24551:        Update from autoconf 2.52
                   24552:        [857b90fe31b7]
                   24553: 
                   24554:        * configure:
                   24555:        regen with autoconf 2.52
                   24556:        [08e7d1ea2aeb]
                   24557: 
                   24558:        * configure.in:
                   24559:        o Call AC_PROG_CC_STDC to find out how to run the compiler in ANSI
                   24560:        mode o Remove compiler-specific checks for HP-UX now that we use
                   24561:        AC_PROG_CC_STDC
                   24562:        [d433a70b6208]
                   24563: 
                   24564:        * RUNSON:
                   24565:        Checkpoint
                   24566:        [babf6d2235d1]
                   24567: 
                   24568:        * auth/pam.c:
                   24569:        o Add pam_prep_user function to call pam_setcred() for the target
                   24570:        user; on Linux this often sets resource limits. o When calling
                   24571:        pam_end(), try to convert the auth->result to a PAM_FOO value.
                   24572:        This is a hack--we really need to stash the last PAM_FOO value
                   24573:        received and use that instead.
                   24574:        [6ad6f340dd2a]
                   24575: 
                   24576:        * set_perms.c, sudo.h:
                   24577:        o Add pam_prep_user function to call pam_setcred() for the target
                   24578:        user; on Linux this often sets resource limits.
                   24579:        [67795421ac82]
                   24580: 
                   24581:        * env.c:
                   24582:        Fix off by one error in number of bytes allocated via malloc (does
                   24583:        not affected any released version of sudo).
                   24584:        [5f5915360111]
                   24585: 
                   24586: 2001-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24587: 
                   24588:        * lex.yy.c:
                   24589:        regen
                   24590:        [8208c0277775]
                   24591: 
                   24592:        * parse.lex:
                   24593:        Allow '@', '(', ')', ':' in arguments to a defaults variable w/o
                   24594:        requiring that they be quoted.
                   24595:        [ae59bc8f68dd]
                   24596: 
                   24597:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   24598:        Mention that no double quotes are needed when
                   24599:        adding/deleting/assigning a single value to a list.
                   24600:        [25efc940a1f0]
                   24601: 
                   24602:        * Makefile.in:
                   24603:        Don't rely on mkdefaults being executable, call perl explicitly.
                   24604:        [6edc97ba5f1d]
                   24605: 
                   24606:        * sudo.tab.c:
                   24607:        regen
                   24608:        [49130b2e7e4d]
                   24609: 
                   24610:        * parse.yacc:
                   24611:        Remove some XXX that are no longer relevant.
                   24612:        [d460ac0d3767]
                   24613: 
                   24614:        * defaults.c:
                   24615:        o Roll our own loop instead of using strpbrk() for better
                   24616:        grokability o When adding to a list we must malloc() and use
                   24617:        memcpy(), not strdup() since we must only copy len bytes from str.
                   24618:        [649bef08e1f0]
                   24619: 
                   24620: 2001-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24621: 
                   24622:        * sudo.tab.c:
                   24623:        regen
                   24624:        [f0bbf2c38c0e]
                   24625: 
                   24626:        * parse.yacc:
                   24627:        typo in comment
                   24628:        [2563711ff593]
                   24629: 
                   24630: 2001-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24631: 
                   24632:        * CHANGES:
                   24633:        checkpoint
                   24634:        [a6d8a29fb30e]
                   24635: 
                   24636:        * configure:
                   24637:        regen
                   24638:        [bdfcaaf3bd13]
                   24639: 
                   24640:        * configure.in:
                   24641:        avoid the -g flag unless --with-devel was specified
                   24642:        [a976707bef30]
                   24643: 
                   24644:        * Makefile.in:
                   24645:        mkdefaults, def_data.in and sigaction.c were missing from the
                   24646:        tarball
                   24647:        [6917ffbaa412]
                   24648: 
                   24649:        * Makefile.in:
                   24650:        def_data.c was missing
                   24651:        [87c78b11453d]
                   24652: 
                   24653: 2001-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24654: 
                   24655:        * env.c:
                   24656:        Fix setting of $USER and $LOGNAME in the non-reset_env case. Also
                   24657:        allow HOME, SHELL, LOGNAME, and USER to be specified in keep_env
                   24658:        [fc8698e6a45e]
                   24659: 
                   24660:        * TODO:
                   24661:        Another TODO item
                   24662:        [6f251d6cd466]
                   24663: 
                   24664:        * sudoers:
                   24665:        Add comment for Default section so folks know where it should go.
                   24666:        [7edba626f392]
                   24667: 
                   24668: 2001-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24669: 
                   24670:        * tgetpass.c:
                   24671:        Use TCSETAF, not TCSETA to set terminal in termio case
                   24672:        [fbd172f6c5d3]
                   24673: 
                   24674:        * sudoers.cat, sudoers.man.in:
                   24675:        regen from sudoers.pod
                   24676:        [64edd2de816e]
                   24677: 
                   24678:        * sudoers.pod:
                   24679:        o Typo, Runas_User_List should be Runas_List o a User_List can not
                   24680:        contain a uid o mention that the Defaults section should come after
                   24681:        Alias definitions but before the user specifications
                   24682:        [54070ba2092b]
                   24683: 
                   24684: 2001-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24685: 
                   24686:        * sudoers.cat, sudoers.man.in:
                   24687:        regen
                   24688:        [e62d1d97693c]
                   24689: 
                   24690:        * sudoers.pod:
                   24691:        Fix listpw and verifypw sections, they were not being formatted
                   24692:        properly.
                   24693:        [123868c2f3e9]
                   24694: 
                   24695:        * sudoers.cat, sudoers.man.in:
                   24696:        regen
                   24697:        [f94841f8b374]
                   24698: 
                   24699:        * sudoers.pod:
                   24700:        fix typos
                   24701:        [f278f1c1184e]
                   24702: 
                   24703:        * configure:
                   24704:        regen
                   24705:        [d2270049ba9f]
                   24706: 
                   24707:        * config.h.in, configure.in:
                   24708:        use AC_SYS_POSIX_TERMIOS instead of rolling our own
                   24709:        [c1a13f1354b9]
                   24710: 
                   24711:        * README:
                   24712:        Reference sudo.ws not courtesan.com
                   24713:        [ca13be67ebd7]
                   24714: 
                   24715:        * PORTING:
                   24716:        Add notes on shadow passwords
                   24717:        [aa13863f2314]
                   24718: 
                   24719:        * BUGS:
                   24720:        In list mode (sudo -l), characters escaped with a backslash are
                   24721:        shown verbatim with the backslash.
                   24722:        [1a75a2858be2]
                   24723: 
                   24724:        * sudoers:
                   24725:        Add simple examples from OpenBSD (Marc Espie)
                   24726:        [3ae9a9ae4125]
                   24727: 
                   24728:        * tgetpass.c:
                   24729:        Catch SIGTTIN and SIGTTOU too and treat them like SIGTSTP.
                   24730:        [f8817699ee10]
                   24731: 
                   24732:        * CHANGES:
                   24733:        minor prettyification
                   24734:        [f523587929b9]
                   24735: 
                   24736:        * CHANGES:
                   24737:        Updated change log
                   24738:        [39d9010ee7a8]
                   24739: 
                   24740:        * testsudoers.c:
                   24741:        Fix CIDR handling here too.
                   24742:        [c91db8344c32]
                   24743: 
                   24744:        * auth/pam.c:
                   24745:        Apparently a NULL response is OK
                   24746:        [83bae61078d9]
                   24747: 
                   24748:        * TODO:
                   24749:        Checkpoint for upcoming beta release
                   24750:        [efb95c09df2a]
                   24751: 
                   24752:        * TROUBLESHOOTING:
                   24753:        Many people believe that adding a runas spec should obviate the need
                   24754:        for the -u flag. It does not.
                   24755:        [c698bad85b0e]
                   24756: 
                   24757:        * RUNSON:
                   24758:        checkpoint update for upcoming 1.6.4 beta
                   24759:        [009e465a0a45]
                   24760: 
                   24761:        * config.h.in:
                   24762:        o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define HAVE_STRINGS_H even
                   24763:        if HAVE_STRING_H is defined -- this is safe now
                   24764:        [d27c035f4e14]
                   24765: 
                   24766:        * PORTING:
                   24767:        Add signals section
                   24768:        [2d24c13cb3c8]
                   24769: 
                   24770:        * configure:
                   24771:        regen
                   24772:        [2b80a939e2ed]
                   24773: 
                   24774:        * configure.in:
                   24775:        Fix check for sigaction_t
                   24776:        [6fa41c89ab20]
                   24777: 
                   24778:        * sudo.c:
                   24779:        XXX - should call find_path() as runas user, not root. Can't do
                   24780:        that until the parser changes though.
                   24781:        [f0b4f85651bd]
                   24782: 
                   24783:        * sudo.c:
                   24784:        If find_path() fails as root, try again as the invoking user (useful
                   24785:        for NFS). Idea from Chip Capelik.
                   24786:        [e03fa7872692]
                   24787: 
                   24788:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in:
                   24789:        Regenerate after pod file changes
                   24790:        [48e4bd75ec21]
                   24791: 
                   24792:        * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
                   24793:        sudo.pod, sudoers.pod:
                   24794:        Add new sudoers option "preserve_groups". Previously sudo would not
                   24795:        call initgroups() if the target user was root. Now it always calls
                   24796:        initgroups() unless the -P command line option or the
                   24797:        "preserve_groups" sudoers option is set. Idea from TJ Saunders.
                   24798:        [4f730359f101]
                   24799: 
                   24800: 2001-12-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24801: 
                   24802:        * compat.h, config.h.in:
                   24803:        Use new HAVE_SIGACTION_T define
                   24804:        [dfb25f3cae5b]
                   24805: 
                   24806:        * logging.c:
                   24807:        Fix compilation on K&C
                   24808:        [7355e3275e34]
                   24809: 
                   24810:        * configure:
                   24811:        regen
                   24812:        [a710584f92f0]
                   24813: 
                   24814:        * configure.in:
                   24815:        Add check for sigaction_t -- IRIX already defines this so don't
                   24816:        redefine it.
                   24817:        [df9c5737f6da]
                   24818: 
                   24819:        * snprintf.c:
                   24820:        fix typo
                   24821:        [3d782b8134c8]
                   24822: 
                   24823:        * interfaces.c:
                   24824:        need stdlib.h here too
                   24825:        [c789d8973ab2]
                   24826: 
                   24827:        * configure:
                   24828:        regen
                   24829:        [44822856bf46]
                   24830: 
                   24831:        * configure.in:
                   24832:        Remove redundant checks for string.h, strings.h and unistd.h
                   24833:        [933c94f8bbf4]
                   24834: 
                   24835:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   24836:        visudo.man.in:
                   24837:        Regen from pod files
                   24838:        [ad18c590f638]
                   24839: 
                   24840:        * BUGS:
                   24841:        Update for 1.6.4
                   24842:        [26bc88b69d22]
                   24843: 
                   24844:        * configure, lex.yy.c, sudo.tab.c:
                   24845:        regen
                   24846:        [bef89fd6fa2d]
                   24847: 
                   24848:        * strerror.c:
                   24849:        Return EINVAL if errnum > sys_nerr
                   24850:        [0512374e6661]
                   24851: 
                   24852:        * auth/sudo_auth.h:
                   24853:        o Update copyright year
                   24854:        [a877016db6e2]
                   24855: 
                   24856:        * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
                   24857:        config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
                   24858:        sudo.pod:
                   24859:        o Update copyright year
                   24860:        [e15a1b39039f]
                   24861: 
                   24862:        * configure.in:
                   24863:        o Don't define STDC_HEADERS unconditionally for IRIX o Update
                   24864:        copyright year
                   24865:        [82a8cb819e07]
                   24866: 
                   24867:        * README:
                   24868:        update version
                   24869:        [d82e523a16b4]
                   24870: 
                   24871:        * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
                   24872:        auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
                   24873:        auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
                   24874:        auth/sudo_auth.c, logging.c, parse.c, parse.lex, parse.yacc,
                   24875:        set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c, utime.c,
                   24876:        visudo.c:
                   24877:        o Reorder some headers and use STDC_HEADERS define properly o Update
                   24878:        copyright year
                   24879:        [fe39f76b3795]
                   24880: 
                   24881:        * lsearch.c:
                   24882:        o Reorder some headers and use STDC_HEADERS define properly o Update
                   24883:        copyright year
                   24884:        [764ba3d4fa13]
                   24885: 
                   24886:        * getspwuid.c, goodpath.c, interfaces.c:
                   24887:        o Reorder some headers and use STDC_HEADERS define properly o Update
                   24888:        copyright year
                   24889:        [fb46d46140d4]
                   24890: 
                   24891:        * getcwd.c:
                   24892:        o Reorder some headers and use STDC_HEADERS define properly o Update
                   24893:        copyright year
                   24894:        [b199d70ac7ab]
                   24895: 
                   24896:        * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
                   24897:        fnmatch.c:
                   24898:        o Reorder some headers and use STDC_HEADERS define properly o Update
                   24899:        copyright year
                   24900:        [dab8f192a3ed]
                   24901: 
                   24902:        * configure:
                   24903:        regen
                   24904:        [156658f25cea]
                   24905: 
                   24906:        * tgetpass.c:
                   24907:        flags set in signal handlers should be volatile sig_atomic_t
                   24908:        [c22931a5535e]
                   24909: 
                   24910:        * config.h.in, configure.in:
                   24911:        Add checks for volatile and sig_atomic_t
                   24912:        [b03b3341381d]
                   24913: 
                   24914:        * configure, lex.yy.c:
                   24915:        regen
                   24916:        [ed9daba88217]
                   24917: 
                   24918:        * def_data.c, def_data.h, def_data.in, defaults.c, env.c, find_path.c,
                   24919:        sudo.c, sudoers.pod:
                   24920:        Remove "secure_path" Defaults option since it cannot work with the
                   24921:        existing parser.
                   24922:        [c9e54a0f5971]
                   24923: 
                   24924:        * find_path.c, sudo.c:
                   24925:        Unset "secure_path" if user_is_exempt()
                   24926:        [fb7544565ae8]
                   24927: 
                   24928:        * env.c, pathnames.h.in:
                   24929:        o Remove assumption that PATH and TERM are not listed in env_keep o
                   24930:        If no PATH is in the environment use a default value o If TERM is
                   24931:        not set in the non-reset case also give it a default value.
                   24932:        [c987eb7df268]
                   24933: 
                   24934:        * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
                   24935:        _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on
                   24936:        systems that define in paths.h
                   24937:        [51865b0cdebf]
                   24938: 
                   24939:        * auth/passwd.c, auth/sudo_auth.c, auth/sudo_auth.h:
                   24940:        Add support for skeyaccess(3) if it is present in libskey.
                   24941:        [8add77c7d3e7]
                   24942: 
                   24943: 2001-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24944: 
                   24945:        * sudo.c:
                   24946:        Only need to do 'lc = login_getclass(NULL)' if lc == NULL
                   24947:        [5a3d3cbf2c6d]
                   24948: 
                   24949:        * parse.lex:
                   24950:        '\\' is a perfectly legal character to have in a command line
                   24951:        argument.
                   24952:        [c15a466ef00e]
                   24953: 
                   24954:        * sudo.c:
                   24955:        o Defer call to set_fqdn() until it is safe to use log_error() o
                   24956:        Don't print errno string value if gethostbyname fails, it is not
                   24957:        relevant
                   24958:        [c0c6bcf08bcb]
                   24959: 
                   24960:        * parse.c:
                   24961:        Fix CIDR -> in_addr_t conversion.
                   24962:        [2f307ebeb63f]
                   24963: 
                   24964: 2001-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   24965: 
                   24966:        * sudoers.pod:
                   24967:        Remove an extra "User_List" in the User_Spec definition From
                   24968:        ybertrand AT snoopymail.com
                   24969:        [97bde59ea280]
                   24970: 
                   24971:        * parse.c:
                   24972:        Make 'listpw=never' work for users who are not explicitly mentioned
                   24973:        in sudoers.
                   24974:        [258f0f30a428]
                   24975: 
                   24976:        * sudoers.pod:
                   24977:        Remove gratuitous '=' in EBNF grammar; era AT iki.fi
                   24978:        [4b0f03872ee1]
                   24979: 
                   24980:        * sudoers.pod:
                   24981:        Document new list Defaults type and convert env_keep and env_delete
                   24982:        to lists. Document new env_check option.
                   24983:        [a07f1f079fe3]
                   24984: 
                   24985:        * lex.yy.c, sudo.tab.c, sudo.tab.h:
                   24986:        regen parser
                   24987:        [e39ac6c6581b]
                   24988: 
                   24989:        * parse.lex:
                   24990:        Don't let '#' appear in a {WORD} and restrict #foo in a Runas spec
                   24991:        to #[0-9-]+.
                   24992:        [69c5388908f3]
                   24993: 
                   24994:        * configure:
                   24995:        regen
                   24996:        [0f1877b88cb3]
                   24997: 
                   24998:        * aclocal.m4:
                   24999:        Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
                   25000:        [6545503ae361]
                   25001: 
                   25002:        * config.h.in, configure.in:
                   25003:        Add check for skeyaccess(3)
                   25004:        [6caf69fe6359]
                   25005: 
                   25006:        * visudo.pod:
                   25007:        Document new -c, -f, and -q options
                   25008:        [13d0203c21d3]
                   25009: 
                   25010:        * visudo.c:
                   25011:        o Add -f option (alternate sudoers file) o Convert to use getopt(3)
                   25012:        [4c2b664d617d]
                   25013: 
                   25014:        * configure:
                   25015:        regen
                   25016:        [6d5bd932e7b5]
                   25017: 
                   25018:        * aclocal.m4, config.h.in, configure.in:
                   25019:        Add check for isblank and a replacement macro if it doesn't exist.
                   25020:        [b524f5e4f953]
                   25021: 
                   25022: 2001-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25023: 
                   25024:        * visudo.c:
                   25025:        In check-only mode, don't create sudoers if it does not already
                   25026:        exist.
                   25027:        [c748a2d5acad]
                   25028: 
                   25029:        * parse.yacc:
                   25030:        o Add a new token, DEFVAR, to indicate a Defaults variable name o
                   25031:        Add support for "+=" and "-=" list operators o replace some 1 and 0
                   25032:        with TRUE and FALSE for greater legibility.
                   25033:        [554cb174b37e]
                   25034: 
                   25035:        * parse.lex:
                   25036:        o Use exclusive start conditions to remove some ambiguity in the
                   25037:        lexer. Also reorder some things for clarity. o Add support for
                   25038:        "+=" and "-=" list operators. o Use the new DEFVAR token to denote
                   25039:        a Defaults variable name.
                   25040:        [3a2cf8323e26]
                   25041: 
                   25042:        * sudo.h:
                   25043:        Prototype init_envtables()
                   25044:        [b74916469dab]
                   25045: 
                   25046:        * env.c:
                   25047:        o Convert environment handling to use lists instead of strings.
                   25048:        This greatly simplifies routines that need to do "foreach" type
                   25049:        operations. o Add new init_envtables() function to set env_check
                   25050:        and env_delete defaults based on initial_badenv_table and
                   25051:        initial_checkenv_table (formerly sudo_badenv_table).
                   25052:        [0a8b404658b6]
                   25053: 
                   25054:        * defaults.c, defaults.h:
                   25055:        o Add a new LIST type and functions to manipulate it. o This is for
                   25056:        use with environment handling variables. o Call new
                   25057:        init_envtables() routine inside init_defaults() to initialize the
                   25058:        environment lists.
                   25059:        [ae73e64f0902]
                   25060: 
                   25061:        * def_data.c, def_data.h, def_data.in:
                   25062:        Convert environment options to use the new LIST type and add a new
                   25063:        one, env_check that only deletes if the sanity check fails.
                   25064:        [3019503936de]
                   25065: 
                   25066:        * testsudoers.c:
                   25067:        Add dummy version of init_envtables()
                   25068:        [9d9e3ee609d9]
                   25069: 
                   25070:        * parse.yacc:
                   25071:        honor quiet mode
                   25072:        [8330fba6167c]
                   25073: 
                   25074:        * visudo.c:
                   25075:        Add check-only mode
                   25076:        [dab411bc8c35]
                   25077: 
                   25078:        * mkdefaults:
                   25079:        Fix generation of entries with NULL descriptions.
                   25080:        [ea75b9fed02e]
                   25081: 
                   25082: 2001-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25083: 
                   25084:        * tgetpass.c:
                   25085:        Use sigaction_t and quiet a gcc warning.
                   25086:        [6f67d719c452]
                   25087: 
                   25088:        * sudo.c:
                   25089:        Must reset signal handlers before we exec
                   25090:        [300418120e1a]
                   25091: 
                   25092:        * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
                   25093:        auth/sudo_auth.c:
                   25094:        Be carefule now that tgetpass() can return NULL (user hit ^C). PAM
                   25095:        version needs testing. Set SIGTSTP to SIG_DFL during password entry
                   25096:        so user can suspend us.
                   25097:        [00304aa58747]
                   25098: 
                   25099:        * tgetpass.c:
                   25100:        Add support for interrupting/suspending tgetpass via keyboard input.
                   25101:        If you suspend sudo from the password prompt and resume it will re-
                   25102:        prompt you.
                   25103:        [4af2b5101d32]
                   25104: 
                   25105:        * sudo.c:
                   25106:        Don't block keyboard interrupt signals, just set them to SIG_IGN.
                   25107:        [d46d7f67ef6b]
                   25108: 
                   25109: 2001-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25110: 
                   25111:        * config.h.in:
                   25112:        add back HAVE_SIGACTION
                   25113:        [c9c7702c603e]
                   25114: 
                   25115:        * configure:
                   25116:        regen
                   25117:        [09fe669d337f]
                   25118: 
                   25119:        * config.h.in, configure.in, logging.c, sudo.c, visudo.c:
                   25120:        Kill POSIX_SIGNALS define and old signal support now that we emulate
                   25121:        POSIX ones Also be sure to correctly initialize struct sigaction.
                   25122:        [4bc2a6dbb2be]
                   25123: 
                   25124:        * strerror.c:
                   25125:        Don't need config.h or "#ifndef HAVE_STRERROR" wrapper.
                   25126:        [1ad64a19f328]
                   25127: 
                   25128:        * compat.h:
                   25129:        Add scaffolding for POSIX signal emulation
                   25130:        [945861d4c93b]
                   25131: 
                   25132:        * sigaction.c:
                   25133:        o Add missing ';' so this compiles o Can't use NULL since we don't
                   25134:        include stdio.h
                   25135:        [04d0cac7438f]
                   25136: 
                   25137:        * sigaction.c:
                   25138:        Emulate sigaction() using sigvec()
                   25139:        [d0b54a989875]
                   25140: 
                   25141: 2001-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25142: 
                   25143:        * sudoers.pod:
                   25144:        Document new behavior of negative values of timestamp_timeout Fix a
                   25145:        typo
                   25146:        [4c0716570d01]
                   25147: 
                   25148:        * sudo.pod:
                   25149:        Add security note about command not being logged after 'sudo su' and
                   25150:        friends.
                   25151:        [43294851a33c]
                   25152: 
                   25153:        * sudo.pod:
                   25154:        Mention that -V prints default values when run as root, including
                   25155:        the list of environment variables to clear.
                   25156:        [d9e5e550a8c3]
                   25157: 
                   25158:        * Makefile.in:
                   25159:        Run pod2man with --quotes=none to avoid stupid quoting of C<>
                   25160:        entries.
                   25161:        [997b23c35dbe]
                   25162: 
                   25163: 2001-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25164: 
                   25165:        * auth/sudo_auth.c, def_data.c, def_data.h, def_data.in, sudoers.pod:
                   25166:        Add mail_badpass option Also modify mail_always behavior to also
                   25167:        send mail when the password is wrong
                   25168:        [838d40ccafce]
                   25169: 
                   25170:        * env.c, sudo.c, sudo.h:
                   25171:        Dump default bad env table when 'sudo -V' is run by root.
                   25172:        [f67f1b8048b0]
                   25173: 
                   25174:        * sudoers.pod:
                   25175:        document env_delete
                   25176:        [d74f893663a2]
                   25177: 
                   25178:        * env.c:
                   25179:        Add support for '*' in env_keep when not resetting the environment
                   25180:        (ie: the normal case).
                   25181:        [fd4fb62ea8fd]
                   25182: 
                   25183:        * env.c:
                   25184:        Add env_delete variable that lets the user replace/add to the
                   25185:        bad_env_table. Allow '*' wildcard in env_keep entries.
                   25186:        [aa728bc35e29]
                   25187: 
                   25188: 2001-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25189: 
                   25190:        * mkinstalldirs:
                   25191:        Force umask to 022 to guarantee sane directory permissions.
                   25192:        [9ab3cfe70569]
                   25193: 
                   25194: 2001-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25195: 
                   25196:        * Makefile.in:
                   25197:        add sudo.tab.h and sudo.tab.c to sudo.tab.o dependency
                   25198:        [671010465e6f]
                   25199: 
                   25200:        * mkdefaults:
                   25201:        fix breakage in last commit
                   25202:        [8318f8851e56]
                   25203: 
                   25204:        * Makefile.in:
                   25205:        acsite.m4 -> aclocal.m4
                   25206:        [30c146873a01]
                   25207: 
                   25208:        * check.c:
                   25209:        fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in previous commit
                   25210:        [4dc8b39954da]
                   25211: 
                   25212:        * def_data.c:
                   25213:        regenerated from def_data.in
                   25214:        [915ea16ce1eb]
                   25215: 
                   25216:        * check.c, defaults.c, defaults.h:
                   25217:        Add new T_UINT type that most things use instead of T_INT If
                   25218:        timestamp_timeout is < 0 then treat the ticket as never expiring (to
                   25219:        be expired manually by the user).
                   25220:        [3a3a636a2a5d]
                   25221: 
                   25222:        * def_data.in:
                   25223:        change most T_INT -> T_UINT
                   25224:        [a2228d2457af]
                   25225: 
                   25226:        * mkdefaults:
                   25227:        fix warning when no args
                   25228:        [ca70a5394af5]
                   25229: 
                   25230:        * visudo.c:
                   25231:        Change 2 Exit() -> exit() Avoid stdio in Exit() and call _exit() if
                   25232:        we are a signal handler. We no longer print the signal number but
                   25233:        the user can just check the exit value for that.
                   25234:        [dc424f631fef]
                   25235: 
                   25236: 2001-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25237: 
                   25238:        * logging.c:
                   25239:        when setting up pipes in child process check for case where stdin ==
                   25240:        pipe fd 0
                   25241:        [518112d76184]
                   25242: 
                   25243: 2001-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25244: 
                   25245:        * visudo.c:
                   25246:        Ignore editor exit value since XPG4 says vi's exit value is the
                   25247:        count of editing errors made (failed searches, etc).
                   25248:        [b9d952284865]
                   25249: 
                   25250: 2001-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25251: 
                   25252:        * configure:
                   25253:        regen
                   25254:        [cb3aa586f03b]
                   25255: 
                   25256:        * configure.in:
                   25257:        sco now is identified by config.guess as *-sco-*
                   25258:        [46664bbdea61]
                   25259: 
                   25260:        * configure.in:
                   25261:        Check for getspnam() in -lgen if not in -lc for UnixWare.
                   25262:        [0f152ad1ba93]
                   25263: 
                   25264: 2001-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25265: 
                   25266:        * sudoers.pod, visudo.pod:
                   25267:        "upper case" -> "uppercase"
                   25268:        [f9151f232326]
                   25269: 
                   25270:        * sudoers.pod:
                   25271:        fix typos and grammar; pjanzen@foatdi.harvard.edu
                   25272:        [2855d73d0237]
                   25273: 
                   25274: 2001-08-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25275: 
                   25276:        * sudoers.pod:
                   25277:        Missing word (specify); krapht@secureops.com
                   25278:        [65523eb37a2c]
                   25279: 
                   25280: 2001-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25281: 
                   25282:        * sudo.c:
                   25283:        If we fail to lookup a login class, apply the default one.
                   25284:        [d4869faa6816]
                   25285: 
                   25286:        * logging.c:
                   25287:        In log_error() free message, not logline unconditionally, then free
                   25288:        logline if it is not the same as message. No function change but
                   25289:        this mirrors how they are allocated.
                   25290:        [565e5f6cc643]
                   25291: 
                   25292: 2001-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25293: 
                   25294:        * configure:
                   25295:        regenerate
                   25296:        [834a48f548a2]
                   25297: 
                   25298:        * configure.in:
                   25299:        remove some backslash quotes that are unneeded
                   25300:        [50d401d6e2ca]
                   25301: 
                   25302:        * configure.in:
                   25303:        o Tweaks to make this work with autoconf-2.50 o Use AC_LIBOBJ
                   25304:        instead of changing LIBOBJS directly o Use AC_REPLACE_FUNCS where we
                   25305:        can o Use AC_CHECK_FUNCS instead of AC_CHECK_FUNC so we don't have
                   25306:        to AC_DEFINE things manually.
                   25307:        [f502c5f15f92]
                   25308: 
                   25309:        * config.guess, config.sub:
                   25310:        Updated from autoconf-2.50
                   25311:        [6140205915ef]
                   25312: 
                   25313: 2001-05-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25314: 
                   25315:        * README:
                   25316:        Update mailing list section. We use mailman now, not majordomo.
                   25317:        [b9a8ca45e6dc]
                   25318: 
                   25319: 2001-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25320: 
                   25321:        * getspwuid.c, logging.c, sudo.c:
                   25322:        Use setpwent()/endpwent() + all the shadow variants to make sure we
                   25323:        don't inadvertantly leak an fd to the child. Apparently Linux's
                   25324:        shadow routines leave the fd open even if you don't call setspent().
                   25325:        Reported by mike@gistnet.com; different patch used.
                   25326:        [d33792ef6c01]
                   25327: 
                   25328: 2001-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25329: 
                   25330:        * sudoers.pod:
                   25331:        s/eg./e.g./
                   25332:        [bd32a0acaf93]
                   25333: 
                   25334:        * tgetpass.c:
                   25335:        select() may return EAGAIN. If so, continue like we do for EINTR.
                   25336:        [5f202c943818]
                   25337: 
                   25338:        * logging.c:
                   25339:        Fix a non-exploitable buffer overflow in the word splitting code.
                   25340:        This should really be rewritten.
                   25341:        [4c724363863a]
                   25342: 
                   25343:        * Makefile.in:
                   25344:        FAQ link goes away
                   25345:        [1d26dd6c8972]
                   25346: 
                   25347:        * INSTALL:
                   25348:        Tell people to look in sample.syslog.conf for examples, not FAQ
                   25349:        [affcae3f43ca]
                   25350: 
                   25351:        * TROUBLESHOOTING:
                   25352:        Update list of env vars that are cleared
                   25353:        [234e56f1435a]
                   25354: 
                   25355:        * sudo.c:
                   25356:        remove struct env_table decl since that stuff has all moved to env.c
                   25357:        [5dd923148777]
                   25358: 
                   25359: 2001-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25360: 
                   25361:        * fileops.c:
                   25362:        Fix a pasto in flock-style unlocking and include <sys/file.h> for
                   25363:        flock on older systems; twetzel@gwdg.de
                   25364:        [d5420d9d2861]
                   25365: 
                   25366:        * configure:
                   25367:        regen to get NeXT lockf/flock fix
                   25368:        [d3ba6ed70e15]
                   25369: 
                   25370:        * configure.in:
                   25371:        force NeXT to use flock since lockf is broken
                   25372:        [bd5391dca1bb]
                   25373: 
                   25374: 2001-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25375: 
                   25376:        * check.c:
                   25377:        Use stashed user_gid when checking against exempt gid since sudo
                   25378:        sets its gid to a a value that makes sudoers readable. Previously
                   25379:        if you used gid 0 as the exempt group everyone would be exempt. From
                   25380:        Paul Kranenburg <pk@cs.few.eur.nl>
                   25381:        [0b140cc3a817]
                   25382: 
                   25383: 2001-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25384: 
                   25385:        * configure:
                   25386:        regen
                   25387:        [cc455408f32b]
                   25388: 
                   25389:        * aclocal.m4:
                   25390:        #include stdio.h in SUDO_CHECK_TYPE since IRIX 6 aparently defines
                   25391:        some types (such as ssize_t) therein.
                   25392:        [b6aee85ca331]
                   25393: 
                   25394: 2001-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25395: 
                   25396:        * defaults.c:
                   25397:        Fix negation of paths in a boolean context. Problem found by
                   25398:        apt@UH.EDU
                   25399:        [8aee217a7cdf]
                   25400: 
                   25401: 2001-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25402: 
                   25403:        * visudo.c:
                   25404:        pasto
                   25405:        [ad32b277bf68]
                   25406: 
                   25407: 2001-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25408: 
                   25409:        * visudo.c:
                   25410:        SA_RESETHAND means the opposite of what I was thinking--oops To
                   25411:        block all signals in old-style signals use ~0, not 0xffffffff
                   25412:        [6ecdd793590a]
                   25413: 
                   25414: 2001-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25415: 
                   25416:        * defaults.c:
                   25417:        coerce difference of pointers to int when used in a string length
                   25418:        printf format; deraadt@openbsd.org
                   25419:        [a9d10f07180d]
                   25420: 
                   25421: 2001-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25422: 
                   25423:        * visudo.c:
                   25424:        Block all signals in Exit() to avoid a signal race. There is still
                   25425:        a tiny window but I'm not going to worry about it.
                   25426:        [6661805c0458]
                   25427: 
                   25428: 2001-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25429: 
                   25430:        * env.c:
                   25431:        glibc uses the LANGUAGE env var so clear that too; Solar Designer
                   25432:        [d4ba95628afb]
                   25433: 
                   25434:        * lex.yy.c:
                   25435:        Regenerate with a fix to flex.skl that preserves errno from
                   25436:        clobbering by isatty().
                   25437:        [607eec736e19]
                   25438: 
                   25439: 2000-12-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25440: 
                   25441:        * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c,
                   25442:        auth/sia.c, auth/sudo_auth.c:
                   25443:        Some defaults I_ defines got renamed.
                   25444:        [ec19b23caaf3]
                   25445: 
                   25446:        * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
                   25447:        defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
                   25448:        set_perms.c, sudo.c, sudo.tab.c:
                   25449:        Move defaults info into its own files from which we generate .h and
                   25450:        .c files. This makes adding or rearranging variables much simpler.
                   25451:        [e91b880b5043]
                   25452: 
                   25453: 2000-12-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25454: 
                   25455:        * configure, configure.in:
                   25456:        fix typo in last commit
                   25457:        [10a6ee2bae71]
                   25458: 
                   25459:        * compat.h, config.h.in, configure, configure.in:
                   25460:        Add check + emulation for setegid (like seteuid).
                   25461:        [29492092bd2f]
                   25462: 
                   25463:        * env.c:
                   25464:        Make env_keep override badenv_table as documented Fix traversal of
                   25465:        badenv_table (broken in last commit)
                   25466:        [37c9f0d22673]
                   25467: 
                   25468:        * set_perms.c, sudo.c, sudo.h:
                   25469:        Don't try and build saved uid version of set_perms on systems w/o
                   25470:        them. Rename set_perms_saved_uid() -> set_perms_posix() Make
                   25471:        set_perms_setreuid simply be set_perms_fallback() and simply include
                   25472:        the appropriate function at compile time (setreuid() vs. setuid()).
                   25473:        [3107333c062c]
                   25474: 
                   25475:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   25476:        PATH is also preserved when env_reset is in effect
                   25477:        [90e45c5711ff]
                   25478: 
                   25479:        * CHANGES, Makefile.in, check.c, compat.h, config.h.in, configure,
                   25480:        configure.in, defaults.c, defaults.h, env.c, find_path.c,
                   25481:        getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
                   25482:        sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, testsudoers.c,
                   25483:        visudo.c, visudo.cat, visudo.man.in:
                   25484:        New Defaults options: o stay_setuid - sudo will remain setuid if
                   25485:        system has saved uids or setreuid(2) o env_reset - reset the
                   25486:        environment to a sane default o env_keep - preserve environment
                   25487:        variables that would otherwise be cleared
                   25488: 
                   25489:        No longer use getenv/putenv/setenv functions--do environment munging
                   25490:        by hand. Potentially dangerous environment variables can be cleared
                   25491:        only if they contain '/' pr '%' characters to protect buggy
                   25492:        programs. Moved environment routines into env.c (new file)
                   25493:        [c2f97651db4c]
                   25494: 
                   25495:        * INSTALL:
                   25496:        Clear up --without-passwd description
                   25497:        [2f336dab6733]
                   25498: 
                   25499:        * putenv.c, sudo_setenv.c:
                   25500:        We now build up a new environment from scratch and assign it to
                   25501:        "environ".
                   25502:        [6ae6152f2238]
                   25503: 
                   25504: 2000-12-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25505: 
                   25506:        * sudo.pod, visudo.pod:
                   25507:        Grammatical fixes from Paul Janzen
                   25508:        [e03ead2e56f8]
                   25509: 
                   25510: 2000-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25511: 
                   25512:        * visudo.c:
                   25513:        If there was a syntax error and the user just wants to quit, unlink
                   25514:        sudoers if it is zero length.
                   25515:        [74ba7921f520]
                   25516: 
                   25517:        * visudo.c:
                   25518:        'Q' means ignore parse error, not 'q'
                   25519:        [e8d0e4491fe6]
                   25520: 
                   25521:        * visudo.c:
                   25522:        Open sudoers for writing with mode SUDOERS_MODE From Dimitry Andric
                   25523:        <dim@xs4all.nl>
                   25524:        [b24990a72491]
                   25525: 
                   25526: 2000-12-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25527: 
                   25528:        * set_perms.c:
                   25529:        Add missing #ifdef HAVE_LOGIN_CAP_H; ayamura@ayamura.org
                   25530:        [41a8db10e076]
                   25531: 
                   25532: 2000-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25533: 
                   25534:        * config.guess, config.sub:
                   25535:        Darwin / Mac OS X support from Wilfredo Sanchez <wsanchez@apple.com>
                   25536:        [6052da895d2e]
                   25537: 
                   25538: 2000-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25539: 
                   25540:        * sudo.c, visudo.c:
                   25541:        Use exit(127), not exit(-1)
                   25542:        [9ff0c3eada34]
                   25543: 
                   25544:        * Makefile.in, defaults.c, defaults.h, set_perms.c, sudo.c:
                   25545:        Move set_perms() to its own file and use POSIX saved uid or
                   25546:        setreuid() if available.
                   25547: 
                   25548:        Added stay_setuid option for systems that have libraries that
                   25549:        perform extra paranoia checks in system libraries for setuid
                   25550:        programs (ie: anything with issetugid(2)).
                   25551:        [28960f842698]
                   25552: 
                   25553:        * sudo.c:
                   25554:        strip more bits from the environment and add a facility for
                   25555:        stripping things only if they contain '/' or '%' to address printf
                   25556:        format string vulnerabilities in other programs.
                   25557:        [b98d6375f299]
                   25558: 
                   25559: 2000-11-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25560: 
                   25561:        * configure:
                   25562:        regen
                   25563:        [7e74e5c91049]
                   25564: 
                   25565:        * configure.in:
                   25566:        For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache the existence of
                   25567:        strcasecmp().
                   25568:        [a418e9e70442]
                   25569: 
                   25570:        * configure:
                   25571:        regen
                   25572:        [bbff244a52bc]
                   25573: 
                   25574:        * configure.in:
                   25575:        Check for strcasecmp(3) in -lc89 for NCR Unix
                   25576:        [361c99576681]
                   25577: 
                   25578: 2000-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25579: 
                   25580:        * config.h.in:
                   25581:        Define HAVE_INNETGR #ifdef HAVE__INNETGR
                   25582:        [473cdb92b6db]
                   25583: 
                   25584:        * configure:
                   25585:        regen
                   25586:        [4e6364a195e0]
                   25587: 
                   25588:        * compat.h, config.h.in, configure.in:
                   25589:        Add check for _innetgr(3) since NCR systems have that instead of
                   25590:        innetgr(3).
                   25591:        [25e6852e7494]
                   25592: 
                   25593: 2000-10-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25594: 
                   25595:        * auth/securid.c:
                   25596:        check return value of creadcfg() call sd_close() after sd_auth()
                   25597:        store username in sd->username so we don't rely on the USER env
                   25598:        variable
                   25599:        [d106b4f42722]
                   25600: 
                   25601: 2000-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25602: 
                   25603:        * INSTALL:
                   25604:        document --with-bsdauth
                   25605:        [f1518ecc2ee9]
                   25606: 
                   25607:        * configure:
                   25608:        regen
                   25609:        [dceb35071ea8]
                   25610: 
                   25611:        * configure.in:
                   25612:        --with-bsdauth assumes --with-logincap
                   25613:        [4200778083fd]
                   25614: 
                   25615:        * auth/bsdauth.c, auth/fwtk.c:
                   25616:        When prompting for a response to a challenge, if the user just hits
                   25617:        return then reprompt with echo turned on.
                   25618:        [a539b6474a97]
                   25619: 
                   25620: 2000-10-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25621: 
                   25622:        * sudo.c:
                   25623:        Remove debugging code that should not have been committed, oops.
                   25624:        [9862607b77a7]
                   25625: 
                   25626:        * auth/bsdauth.c:
                   25627:        Use lower-level routines and get the password ourselves. Checks for
                   25628:        a challenge and if there is one echo is not turned off.
                   25629:        [2d8fcd166baa]
                   25630: 
                   25631:        * auth/pam.c, auth/sudo_auth.h:
                   25632:        minor housekeeping, no real code changes
                   25633:        [d0074a277fb4]
                   25634: 
                   25635: 2000-10-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25636: 
                   25637:        * sudo.c:
                   25638:        Fix a coredump in the logging functions if gethostname(2) fails by
                   25639:        deferring the call to log_error() until things are better setup.
                   25640: 
                   25641:        Fix return value of set_loginclass() in non-BSD-auth case.
                   25642: 
                   25643:        Hard-code 'sudo' in the usage message so we can fit more options on
                   25644:        a line
                   25645:        [d9d1b7579818]
                   25646: 
                   25647:        * logging.c:
                   25648:        Fix errant ';' (typo) that broken MSG_ONLY
                   25649:        [849b2276a470]
                   25650: 
                   25651: 2000-10-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25652: 
                   25653:        * sudo.cat, sudo.man.in:
                   25654:        regen
                   25655:        [bb3c8c6704d1]
                   25656: 
                   25657:        * sudo.pod:
                   25658:        Document -a flag
                   25659:        [e18316cebaac]
                   25660: 
                   25661:        * Makefile.in, auth/bsdauth.c, auth/sudo_auth.h, config.h.in,
                   25662:        configure, configure.in, getspwuid.c, sudo.c:
                   25663:        Add support for BSD authentication.
                   25664:        [f374cfd9ca0d]
                   25665: 
                   25666: 2000-10-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25667: 
                   25668:        * sudoers.pod:
                   25669:        Fix typo; from sato@complex.eng.hokudai.ac.jp
                   25670:        [3085fee9766e]
                   25671: 
                   25672: 2000-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25673: 
                   25674:        * sudoers.pod:
                   25675:        Mention negating umask
                   25676:        [c9e410294dae]
                   25677: 
                   25678:        * defaults.c:
                   25679:        Allow user to specify umask of 0777 (same as !umask)
                   25680:        [bb771daa96fe]
                   25681: 
                   25682: 2000-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25683: 
                   25684:        * sudo.pod, visudo.pod:
                   25685:        Fix a typo and give a URL for the sudo history.
                   25686:        [77f73199aedb]
                   25687: 
                   25688: 2000-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25689: 
                   25690:        * defaults.c, sudo.pod:
                   25691:        fix typos; pepper@reppep.com
                   25692:        [5532c7421340]
                   25693: 
                   25694: 2000-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25695: 
                   25696:        * sudo.c, sudo.h, sudo_setenv.c:
                   25697:        sudo_setenv() now exits on memory alloc failure instead of returning
                   25698:        -1.
                   25699:        [71f1cf18f47b]
                   25700: 
                   25701: 2000-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25702: 
                   25703:        * sudo.c:
                   25704:        Strip out NLSPATH and PATH_LOCALE from the environment for FreeBSD
                   25705:        and possibly others.
                   25706:        [b69d985b0d22]
                   25707: 
                   25708:        * logging.c:
                   25709:        Don't use vsyslog(3) since HP-UX (and others?) lack it. This means
                   25710:        that "%m" won't be expanded but we don't use that anyway since the
                   25711:        logging routines may splat to stderr as well.
                   25712:        [8d37a544d0c0]
                   25713: 
                   25714:        * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
                   25715:        sudoers.pod:
                   25716:        Add always_set_home variable
                   25717:        [dbcaff646e07]
                   25718: 
                   25719:        * configure, configure.in:
                   25720:        Have to hard code default values in help since the defaults are set
                   25721:        _after_ the help stuff.
                   25722:        [7b5d6d72f55c]
                   25723: 
                   25724: 2000-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25725: 
                   25726:        * lex.yy.c, parse.lex:
                   25727:        Allow special characters (including '#') to be embedded in pathnames
                   25728:        if quoted by a '\\'. The quoted chars will be dealt with by
                   25729:        fnmatch(). Unfortunately, 'sudo -l' still prints the '\\'.
                   25730:        [3ed33cf09977]
                   25731: 
                   25732: 2000-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25733: 
                   25734:        * install-sh:
                   25735:        Better path searching for programs we need.
                   25736:        [60517cb1f0d6]
                   25737: 
                   25738:        * TROUBLESHOOTING:
                   25739:        Add section on "C compiler cannot create executables" errors.
                   25740:        [e4ada6eaee59]
                   25741: 
                   25742:        * Makefile.binary, Makefile.in, version.h:
                   25743:        Crank version
                   25744:        [93d1bd5b7f5e]
                   25745: 
                   25746:        * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
                   25747:        sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
                   25748:        visudo.man.in, visudo.pod:
                   25749:        Substitute values from configure into man pages.
                   25750:        [619854c356c1]
                   25751: 
                   25752: 2000-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25753: 
                   25754:        * parse.c, sudo.c:
                   25755:        The listpw and verifypw sudoers options would not take effect
                   25756:        because the value of the default was checked *before* sudoers was
                   25757:        parsed. Instead of passing in the value of PWCHECK_* to
                   25758:        sudoers_lookup(), pass in the arg for def_ival() so the check can be
                   25759:        deferred until after sudoers is parsed.
                   25760:        [4f596e358f72]
                   25761: 
                   25762: 2000-08-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25763: 
                   25764:        * tgetpass.c:
                   25765:        When writing prompt, no need to write the NUL as well;
                   25766:        hag@linnaean.org
                   25767:        [fbcdd7b431ee]
                   25768: 
                   25769: 2000-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25770: 
                   25771:        * install-sh:
                   25772:        When looking for chown, check in /sbin too
                   25773:        [657ba6653f8c]
                   25774: 
                   25775: 2000-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25776: 
                   25777:        * visudo.c:
                   25778:        Remove extraneous call to init_defaults() and set runas_user to NULL
                   25779:        betweem parses so init_defaults will reset it each time, thus
                   25780:        avoiding a reference to free()d data.
                   25781:        [7421fcd692af]
                   25782: 
                   25783: 2000-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25784: 
                   25785:        * config.h.in, interfaces.c, interfaces.h, sudo.c:
                   25786:        Add support for using getifaddrs() to get the list of ip addr /
                   25787:        netmask pairs. Currently IPv4-only.
                   25788:        [a35bc4f7306d]
                   25789: 
                   25790:        * visudo.c:
                   25791:        Add a missing check for UserEditor == NULL Add missing '+' before
                   25792:        line number when invoking editor to fix a syntax error
                   25793:        [f0d4635f6082]
                   25794: 
                   25795: 2000-05-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25796: 
                   25797:        * sudo.c:
                   25798:        Call clean_env very early in main() for paranoia's sake. Idea from
                   25799:        Marc Esipovich.
                   25800:        [f8d72ebd0115]
                   25801: 
                   25802: 2000-05-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25803: 
                   25804:        * sudo.h:
                   25805:        Update proto for evasprintf and easprintf
                   25806:        [d147d6e58419]
                   25807: 
                   25808:        * alloc.c:
                   25809:        Make easprintf() and evasprintf() return an int.
                   25810:        [b2ca5d089667]
                   25811: 
                   25812:        * check.c:
                   25813:        If the targetpw flag is set, use target username as part of the
                   25814:        timestamp path. If tty tickets are in effect cat the tty and the
                   25815:        target username with a ':' as the separator.
                   25816:        [de11abc693c2]
                   25817: 
                   25818: 2000-05-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25819: 
                   25820:        * auth/pam.c:
                   25821:        Backout part of last change; setting PAM_USER to the invoking user
                   25822:        breaks things like targetpw.
                   25823:        [427218a7387f]
                   25824: 
                   25825:        * auth/pam.c:
                   25826:        set tty and username via pam_set_item
                   25827:        [85d1922dbcc9]
                   25828: 
                   25829:        * auth/sudo_auth.c, check.c, getspwuid.c, sudo.c, sudo.h:
                   25830:        Fix root, runas, and target authentication for non-passwd file auth
                   25831:        methods.
                   25832:        [a14535e7b30c]
                   25833: 
                   25834: 2000-04-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25835: 
                   25836:        * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
                   25837:        sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
                   25838:        Use B<-Z> not C<-Z> for command line flags in all places. This is
                   25839:        more consistent and works around a bug in Pod::Man.
                   25840:        [64b5a05f30c5]
                   25841: 
                   25842:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   25843:        Fix an occurence of 'semicolon' that should be 'colon'
                   25844:        [4ea5aacae3fb]
                   25845: 
                   25846: 2000-04-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25847: 
                   25848:        * configure, configure.in:
                   25849:        Fix --with-badpri help line
                   25850:        [3cc40977c043]
                   25851: 
                   25852: 2000-04-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25853: 
                   25854:        * defaults.c, logging.c, sudo.c:
                   25855:        Bracket calls to syslog with an openlog() and closelog() since some
                   25856:        authentication methods (like PAM) may do their own logging via
                   25857:        syslog. Since we don't use syslog much (usually just once per
                   25858:        session) this doesn't really incur a performance penalty. It also
                   25859:        Fixes a SEGV with pam_kafs.
                   25860:        [fe1cc28529f6]
                   25861: 
                   25862: 2000-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25863: 
                   25864:        * sudo.c:
                   25865:        Fix -H flag. runas_homedir is only valid after
                   25866:        set_perms(PERM_RUNAS, mode)
                   25867:        [ce9b1c6f68a6]
                   25868: 
                   25869: 2000-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25870: 
                   25871:        * INSTALL:
                   25872:        Clarify the fact that insults are not enabled just by including them
                   25873:        in the binary.
                   25874:        [d5a31d48320c]
                   25875: 
                   25876: 2000-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25877: 
                   25878:        * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
                   25879:        visudo.man.in:
                   25880:        Regenerated with perl 5.6.0 pod2man
                   25881:        [21751433768b]
                   25882: 
                   25883:        * Makefile.in:
                   25884:        Give date string to pod2man since its default is ugly and it ain't
                   25885:        got no alibi.
                   25886:        [0080b2f6298f]
                   25887: 
                   25888:        * Makefile.in:
                   25889:        Do section substitution on the output of pod2man and remove hack
                   25890:        needed for old pod2man.
                   25891:        [1ef843d5c78b]
                   25892: 
                   25893:        * sudo.pod, sudoers.pod, visudo.pod:
                   25894:        Put back real man sections, we will do the substitution later.
                   25895:        [f728c1abad7e]
                   25896: 
                   25897: 2000-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25898: 
                   25899:        * configure, configure.in:
                   25900:        Don't bother checking for the path to vi if user specified --with-
                   25901:        editor
                   25902:        [bf698487e0d5]
                   25903: 
                   25904: 2000-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25905: 
                   25906:        * CHANGES, visudo.c:
                   25907:        Visudo now does its own fork/exec instead of calling system(3).
                   25908:        [99bbcd88863b]
                   25909: 
                   25910:        * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
                   25911:        sudoers.pod, visudo.c:
                   25912:        Visudo now checks for the existence of an editor and gives a
                   25913:        sensible error if it does not exist.
                   25914: 
                   25915:        The path to the editor for visudo is now a colon-separated list of
                   25916:        allowable editors. If the user has $EDITOR set and it matches one
                   25917:        of the allowed editors that editor will be used. If not, the first
                   25918:        editor in the list that actually exists is used.
                   25919:        [cc86eb9f5440]
                   25920: 
                   25921:        * sudo.cat, sudo.man.in, sudo.pod:
                   25922:        Clear up confusion wrt sudo's return value.
                   25923:        [9385b12d8e79]
                   25924: 
                   25925: 2000-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25926: 
                   25927:        * Makefile.in:
                   25928:        Strip sudo and visudo for bindist target
                   25929:        [a995ddd79177]
                   25930: 
                   25931:        * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
                   25932:        sudoers.pod, visudo.cat, visudo.man.in, visudo.pod:
                   25933:        Use @mansectsu@ and @mansectform@ in the man page bodies as well.
                   25934:        [5eb9e60a726f] [SUDO_1_6_3]
                   25935: 
                   25936:        * visudo.cat, visudo.man.in, visudo.pod:
                   25937:        Typo: @sysconf@ -> @sysconfdir@
                   25938:        [f07f52fcd099]
                   25939: 
                   25940:        * Makefile.in:
                   25941:        'make dist' should not cause any files to be modified so remove its
                   25942:        dependencies.
                   25943:        [7f44a2666a9c]
                   25944: 
                   25945:        * CHANGES:
                   25946:        Whoops, forgot to add release marker
                   25947:        [16c0f16b35b8]
                   25948: 
                   25949: 2000-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25950: 
                   25951:        * CHANGES:
                   25952:        Final change for 1.6.3 (or so I hope)
                   25953:        [473c89da6123]
                   25954: 
                   25955:        * sudo.cat, sudoers.cat, visudo.cat:
                   25956:        Use SYSV man sections since BSD systems will have nroff...
                   25957:        [0a6bd154324e]
                   25958: 
                   25959: 2000-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25960: 
                   25961:        * parse.yacc, sudo.tab.c:
                   25962:        When checking to see if the host/user matches in a defaults spec,
                   25963:        check against TRUE, not just non-zero since it might be -1.
                   25964:        [41f2b7ad3fdd]
                   25965: 
                   25966:        * configure, configure.in:
                   25967:        OSF/1 puts file formats in section 4, not 5.
                   25968:        [d77c1301afa9]
                   25969: 
                   25970:        * CHANGES, INSTALL, sudo.c:
                   25971:        Make login class support work on BSD/OS
                   25972:        [e9bbe3c08ade]
                   25973: 
                   25974:        * RUNSON:
                   25975:        Update for 1.6.3
                   25976:        [c40ce1d76c4d]
                   25977: 
                   25978:        * configure, configure.in:
                   25979:        If there is no inet_addr but there *is* an __inet_addr that's ok
                   25980:        since inet_addr is probably just a macro then. The better thing to
                   25981:        do would be to look for the macro, but this is fine for now.
                   25982:        [1b8865ae4d68]
                   25983: 
                   25984:        * configure, configure.in:
                   25985:        Don't use shlicc for BSD/OS 4.x
                   25986:        [83fbf6dedd2c]
                   25987: 
                   25988:        * Makefile.in, configure, configure.in:
                   25989:        *.man lives in cwd, *.cat lives in $(srcdir), add a @mansrcdir@
                   25990:        configure variable so we can deal with this. Also, only remove *.man
                   25991:        for 'distclean' not 'clean'.
                   25992:        [30d56e6de214]
                   25993: 
                   25994:        * sudo.c:
                   25995:        set_loginclass() should be static like the proto says
                   25996:        [d570a2d55fb8]
                   25997: 
                   25998: 2000-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   25999: 
                   26000:        * fnmatch.c:
                   26001:        Add #ifdef __STDC__ around the rangematch function header to avoid
                   26002:        promotion of test to int, thus violating the prototype. Gcc handles
                   26003:        this gracefully but more std ANSI compilers will complain.
                   26004:        [7d98c3e332b2]
                   26005: 
                   26006:        * emul/fnmatch.h:
                   26007:        Pull in newer fnmatch(3) that supports FNM_CASEFOLD
                   26008:        [4e1320852f8b]
                   26009: 
                   26010:        * aclocal.m4, configure, fnmatch.3, fnmatch.c:
                   26011:        Pull in newer fnmatch(3) that supports FNM_CASEFOLD Check for
                   26012:        FNM_CASEFOLD in configure
                   26013:        [9ef952bf1896]
                   26014: 
                   26015:        * CHANGES, TODO:
                   26016:        update for 1.6.3
                   26017:        [e4ba6368a0c5]
                   26018: 
                   26019:        * sudo.tab.c, sudo.tab.h, testsudoers.c, visudo.c:
                   26020:        Fully qualified hosts w/ wildcards were not matching the FQHOST
                   26021:        token type. There's really no need for a separate token for fully-
                   26022:        qualified vs. unqualified anymore so FQHOST is now history and
                   26023:        hostname_matches now decides which hostname (short or long) to check
                   26024:        based on whether or not the pattern contains a '.'.
                   26025:        [fbd2887d9811]
                   26026: 
                   26027:        * parse.h:
                   26028:        Fully qualified hosts w/ wildcards were not matching the FQHOST
                   26029:        token type. There's really no need for a separate token for fully-
                   26030:        qualified vs. unqualified anymore so FQHOST is now history and
                   26031:        hostname_matches now decides which hostname (short or long) to check
                   26032:        based on whether or not the pattern contains a '.'.
                   26033:        [dd7bbe223461]
                   26034: 
                   26035:        * lex.yy.c, parse.c, parse.lex, parse.yacc:
                   26036:        Fully qualified hosts w/ wildcards were not matching the FQHOST
                   26037:        token type. There's really no need for a separate token for fully-
                   26038:        qualified vs. unqualified anymore so FQHOST is now history and
                   26039:        hostname_matches now decides which hostname (short or long) to check
                   26040:        based on whether or not the pattern contains a '.'.
                   26041:        [630d9d205397]
                   26042: 
                   26043:        * parse.c, parse.h, parse.yacc, sudo.tab.c, sudoers.cat,
                   26044:        sudoers.man.in, sudoers.pod, testsudoers.c, visudo.c:
                   26045:        Add support for wildcards in the hostname.
                   26046:        [d8d821ed4238]
                   26047: 
                   26048:        * Makefile.in:
                   26049:        Add targets for *.man.in, using config.status to generate *.man from
                   26050:        *.man.in
                   26051:        [640e50ede485]
                   26052: 
                   26053:        * sudoers.cat, sudoers.man.in, sudoers.pod:
                   26054:        Document set_logname option and enbolden refs to sudo and visudo.
                   26055:        [9622b3a48707]
                   26056: 
                   26057:        * INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.cat,
                   26058:        sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
                   26059:        visudo.cat, visudo.man.in, visudo.pod:
                   26060:        Add FreeBSD login.conf support (untested on BSD/OS) based on a patch
                   26061:        from Michael D. Marchionna. configure now does substitution on the
                   26062:        man pages, allowing us to fix up the paths and set the section
                   26063:        correctly. Based on an idea from Michael D. Marchionna.
                   26064:        [463e928a0a2f]
                   26065: 
                   26066:        * auth/passwd.c:
                   26067:        Better fix for handling HP-UX aging info.
                   26068:        [3950f42d8549]
                   26069: 
                   26070:        * sudo.c:
                   26071:        Add support for set_logname run-time default
                   26072:        [c6a7cc76b8b4]
                   26073: 
                   26074:        * sudo.man.in, sudoers.man.in, visudo.man.in:
                   26075:        configure does substitution on these to produce *.man
                   26076:        [b83fc3c1bfc9]
                   26077: 
                   26078:        * sudo.man, sudoers.man, visudo.man:
                   26079:        These files now get generated from *.man.in at configure time.
                   26080:        [c499061f79e0]
                   26081: 
                   26082: 2000-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26083: 
                   26084:        * defaults.c, defaults.h:
                   26085:        Add set_logname option so users can turn off setting of LOGNAME/USER
                   26086:        environment variables.
                   26087:        [6316869180b8]
                   26088: 
                   26089:        * lsearch.c, parse.c, testsudoers.c:
                   26090:        kill register
                   26091:        [6e104e653748]
                   26092: 
                   26093: 2000-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26094: 
                   26095:        * auth/passwd.c:
                   26096:        HP-UX adds extra info at the end for password aging so when
                   26097:        comparing the result of crypt to pw_passwd we only compare the first
                   26098:        len(epass) bytes *unless* the user entered an empty string for a
                   26099:        password.
                   26100:        [3d24d4e4e889]
                   26101: 
                   26102:        * logging.c:
                   26103:        Get rid of grandchild hack, it was causing problems and there is
                   26104:        really no need for it. This fixes a bug where we spin eating up CPU
                   26105:        when the user runs a long-running process like a shell.
                   26106:        [5743b10b1e81]
                   26107: 
                   26108: 2000-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26109: 
                   26110:        * sudo.c:
                   26111:        User can always specify a login class if he/she is already root.
                   26112:        [710d160cef9f]
                   26113: 
                   26114:        * config.h.in, configure, configure.in, defaults.c, defaults.h,
                   26115:        sudo.c, sudo.h:
                   26116:        FreeBSD login class (login.conf) support.
                   26117:        [026b981d6328]
                   26118: 
                   26119: 2000-03-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26120: 
                   26121:        * auth/sudo_auth.c:
                   26122:        HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes secureware support
                   26123:        [9cd4929f1a78]
                   26124: 
                   26125: 2000-03-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26126: 
                   26127:        * auth/passwd.c:
                   26128:        Truncate unencrypted password to 8 chars if encrypted password is
                   26129:        exactly 13 characters (indicateing standard a DES password). Many
                   26130:        versions of crypt() do this for you, but not all (like HP-UX's).
                   26131:        [a9d0259cb193]
                   26132: 
                   26133: 2000-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26134: 
                   26135:        * INSTALL, RUNSON:
                   26136:        Mention that gcc on dynix may have problems
                   26137:        [77b97fa5bf1b]
                   26138: 
                   26139: 2000-02-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26140: 
                   26141:        * Makefile.in:
                   26142:        Link visudo with NET_LIBS since we now call syslog via defaults.c
                   26143:        [9e3830b277cc]
                   26144: 
                   26145:        * defaults.c:
                   26146:        Use Argv[0] as the first arg to openlog() since visudo uses this
                   26147:        too.
                   26148:        [e61078f328ec]
                   26149: 
                   26150: 2000-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26151: 
                   26152:        * sudo.c:
                   26153:        Stash coredumpsize resource limit and retsore it before the exec()
                   26154:        Otherwise the child ends up with a coredumpsize of 0.
                   26155:        [f6a4783835a3]
                   26156: 
                   26157: 2000-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26158: 
                   26159:        * sudo.cat, sudo.man, sudo.pod:
                   26160:        document -S flag
                   26161:        [3ebd805b7142]
                   26162: 
                   26163:        * sudo.c:
                   26164:        fix usage string
                   26165:        [66b2dfa47fe8]
                   26166: 
                   26167:        * CHANGES, RUNSON, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c,
                   26168:        auth/sudo_auth.c, sudo.c, sudo.h, tgetpass.c:
                   26169:        Added -S flag (read passwd from stdin) and tgetpass_flags global
                   26170:        that holds flags to be passed in to tgetpass(). Change echo_off
                   26171:        param to tgetpass() into a flags field. There are currently 2
                   26172:        possible flags for tgetpass(): TGP_ECHO and TGP_STDIN. In
                   26173:        tgetpass(), abstract the echo set/clear via macros and if (flags &
                   26174:        TGP_ECHO) but echo is not set on the terminal, but sure to set it.
                   26175:        [a4fcbb712cd0]
                   26176: 
                   26177:        * tgetpass.c:
                   26178:        Fixed a bug that caused an infinite loop when the password timeout
                   26179:        was disabled.
                   26180:        [2be1ffc5a39f]
                   26181: 
                   26182: 2000-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26183: 
                   26184:        * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
                   26185:        sudoers.cat, sudoers.man, sudoers.pod, visudo.c:
                   26186:        Add rootpw, runaspw, and targetpw options.
                   26187:        [2d4563e46df7]
                   26188: 
                   26189:        * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
                   26190:        visudo.c:
                   26191:        enveditor -> env_editor
                   26192:        [ddc5f856e583]
                   26193: 
                   26194: 2000-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26195: 
                   26196:        * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
                   26197:        sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h, visudo.cat,
                   26198:        visudo.man:
                   26199:        crank versino to 1.6.3
                   26200:        [a5f7d3e74360]
                   26201: 
                   26202:        * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
                   26203:        sudoers.pod, visudo.c:
                   26204:        Add 'editor' and 'enveditor' sudoers defaults and make visudo honor
                   26205:        them. This means that visudo will now parse the sudoers file
                   26206:        *before* it is edited so a bogus sudoers file will cause a warning
                   26207:        to go to stderr. Also, visudo checks the variables once--it does not
                   26208:        check them after each editor run since that could be confusing.
                   26209:        [9f5af18e9212]
                   26210: 
                   26211: 2000-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26212: 
                   26213:        * RUNSON:
                   26214:        1.6.2 -> 1.6.2p1
                   26215:        [e25b74f1d1af]
                   26216: 
                   26217:        * check.c, sudo.c, sudo.h:
                   26218:        Move user_is_exempt prototype into sudo.h
                   26219:        [daf26a6ded8a]
                   26220: 
                   26221: 2000-02-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26222: 
                   26223:        * configure, configure.in:
                   26224:        Fix thinko, some && should have been || in the last commit
                   26225:        [4b9b2d487ded]
                   26226: 
                   26227:        * configure, configure.in:
                   26228:        Don't initialized Makefile variables to be NULL since the user may
                   26229:        want to import variables from their environment.
                   26230:        [7be019f4422c]
                   26231: 
                   26232: 2000-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26233: 
                   26234:        * configure, configure.in:
                   26235:        typo
                   26236:        [38f4d8971f0a]
                   26237: 
                   26238: 2000-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26239: 
                   26240:        * sudo.tab.c:
                   26241:        fix a yacc (skeleton.c) warning
                   26242:        [a2da228a937b]
                   26243: 
                   26244: 2000-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26245: 
                   26246:        * INSTALL, RUNSON, configure, configure.in:
                   26247:        Make pam work on HP-UX 11.0;jaearick@colby.edu
                   26248:        [b94de0ff6f42]
                   26249: 
                   26250:        * CHANGES:
                   26251:        recent changes; prepare for 1.6.2p1
                   26252:        [b291635ea141]
                   26253: 
                   26254:        * find_path.c:
                   26255:        Don't apply SECURE_PATH if user is example; jmknoble@pobox.com
                   26256:        [4306285c4f6e]
                   26257: 
                   26258: 2000-01-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26259: 
                   26260:        * sudo.tab.c:
                   26261:        Regen with yacc that has a memory leak plugged.
                   26262:        [e26383a04eb7]
                   26263: 
                   26264:        * sudoers.cat, sudoers.man, sudoers.pod:
                   26265:        Expanded docs on sudoers 'defaults' options based on INSTALL file
                   26266:        info.
                   26267:        [54c3d62d6c74]
                   26268: 
                   26269:        * INSTALL:
                   26270:        Fix some while lies
                   26271:        [d15311782150]
                   26272: 
                   26273: 2000-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26274: 
                   26275:        * Makefile.in:
                   26276:        When making a bindist, link FAQ to TROUBLESHOOTING instead of
                   26277:        copying.
                   26278:        [2d88a6ac88cf]
                   26279: 
                   26280:        * sudoers.cat, sudoers.man, sudoers.pod:
                   26281:        Add netgroup caveat
                   26282:        [28d119f466e3] [SUDO_1_6_2]
                   26283: 
                   26284:        * RUNSON:
                   26285:        Last minute updates
                   26286:        [89fb4ed22d52]
                   26287: 
                   26288:        * TROUBLESHOOTING:
                   26289:        PAM entry
                   26290:        [a9fd59f39457]
                   26291: 
                   26292:        * auth/pam.c:
                   26293:        correct a comment
                   26294:        [a29627225ba9]
                   26295: 
                   26296:        * CHANGES, RUNSON:
                   26297:        update for 1.6.2
                   26298:        [b7f1c40ea732]
                   26299: 
                   26300:        * auth/pam.c:
                   26301:        Better detection of PAM errors and fix custom prompts with PAM.
                   26302:        Based on patches from "Cloyce D. Spradling" <cloyce@headgear.org>
                   26303:        [ff69234b94a5]
                   26304: 
                   26305: 2000-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26306: 
                   26307:        * snprintf.c:
                   26308:        Cast ULONG_MAX to unsigned long long when comparing to an unsigned
                   26309:        long long value.
                   26310:        [9d918c3a2ecd]
                   26311: 
                   26312: 2000-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26313: 
                   26314:        * CHANGES, config.h.in, configure, configure.in, visudo.c:
                   26315:        Fix sudoers locking in visudo. We now lock the sudoers file itself,
                   26316:        not the temp file (since locking the temp file can foul up editors).
                   26317:        The previous locking scheme didn't work because the fd was closed
                   26318:        too early.
                   26319:        [de2011bb11ed]
                   26320: 
                   26321:        * config.h.in, configure, configure.in:
                   26322:        Don't need test for ftruncate() any more.
                   26323:        [e5f71c848104]
                   26324: 
                   26325:        * configure, configure.in:
                   26326:        Add a test for the -Aa flag w/ HP-UX's cc. Fixes compilation with
                   26327:        the unbundled HP-UX cc.
                   26328:        [2c373612c644]
                   26329: 
                   26330: 2000-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26331: 
                   26332:        * sudoers.cat, sudoers.man, sudoers.pod:
                   26333:        "a a" -> "a"; Aaron Campbell <aaron@cs.dal.ca>
                   26334:        [05360d2c314e]
                   26335: 
                   26336: 2000-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26337: 
                   26338:        * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
                   26339:        parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c, tgetpass.c,
                   26340:        version.h, visudo.c:
                   26341:        update copyright year on changed files
                   26342:        [5792a2a28a4c]
                   26343: 
                   26344:        * RUNSON:
                   26345:        updates
                   26346:        [edf8f19aa403]
                   26347: 
                   26348:        * CHANGES:
                   26349:        aix fix
                   26350:        [4d4a243b31e2]
                   26351: 
                   26352:        * INSTALL:
                   26353:        Crank version to 1.6.2
                   26354:        [bcb5cb411624]
                   26355: 
                   26356:        * configure:
                   26357:        Crank version to 1.6.2
                   26358:        [32a19f33427f]
                   26359: 
                   26360:        * sudo.c:
                   26361:        When using rlimit check for RLIM_INFINITY When computing the value
                   26362:        of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
                   26363:        [8c16166802e5]
                   26364: 
                   26365:        * CHANGES:
                   26366:        recent changes
                   26367:        [09fc7112e44d]
                   26368: 
                   26369:        * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
                   26370:        sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
                   26371:        Crank version to 1.6.2
                   26372:        [055fa61a7c61]
                   26373: 
                   26374:        * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod:
                   26375:        Add 'shell_noargs' runtime option back in. We have to defer
                   26376:        checking until after the sudoers file has been parsed but since
                   26377:        there are now other options that operate that way this one can too.
                   26378:        Based on a patch from bguillory@email.com.
                   26379:        [231db7a007a6]
                   26380: 
                   26381:        * defaults.c, defaults.h, parse.c, sudo.c, sudo.h:
                   26382:        Add "listpw" and "verifypw" options.
                   26383:        [190683bac878]
                   26384: 
                   26385:        * sudoers.cat, sudoers.man, sudoers.pod:
                   26386:        o Fix some typos/omissions o Add section on verifypw and listpw o
                   26387:        Define how NOPASSWD interacts with the -v and -l flags
                   26388:        [6feb7350eb79]
                   26389: 
                   26390: 2000-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26391: 
                   26392:        * configure, configure.in:
                   26393:        For HP-UX cc, add -Aa to CPPFLAGS. For HP-UX always add
                   26394:        -D_HPUX_SOURCE to CPPFLAGS.
                   26395:        [06cc35d89dc8]
                   26396: 
                   26397:        * defaults.c, defaults.h:
                   26398:        In struct sudo_defs_types, move the union to the end and don't
                   26399:        initialize the union member since that only works with an ANSI
                   26400:        compiler. We set the value of the union by hand in init_defaults()
                   26401:        anyway. This allows sudo to compile on a K&R compiler again.
                   26402:        [623487e1fcfa]
                   26403: 
                   26404: 2000-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26405: 
                   26406:        * parse.c, parse.h, parse.yacc, sudo.tab.c, testsudoers.c, visudo.c:
                   26407:        netgr_matches needs to check shost as well as host since they may be
                   26408:        different.
                   26409:        [3f43ace23d3e]
                   26410: 
                   26411:        * tgetpass.c:
                   26412:        End on \r as well as \n
                   26413:        [cb7c6e6f4202]
                   26414: 
                   26415: 2000-01-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26416: 
                   26417:        * sudo.c:
                   26418:        Update statbuf.st_mode based on SUDOERS_MODE when we are chaning
                   26419:        from 0400 to whatever SUDOERS_MODE is (converting from the old
                   26420:        sudoers mode). Assumes that SUDOERS_MODE is less restrictive than
                   26421:        0400 which should always be the case.
                   26422:        [34cd83d49d20]
                   26423: 
                   26424:        * parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c:
                   26425:        Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l
                   26426:        w/o a passwd if there is *any* entry for the user on the host with a
                   26427:        NOPASSWD flag. For -v, only allow w/o a passwd if *all* entries for
                   26428:        the user on the host w/ the specified runas user have the NOPASSWD
                   26429:        flag set.
                   26430:        [4b3b85697653]
                   26431: 
                   26432:        * Makefile.in:
                   26433:        add check target
                   26434:        [3d24d34a76fd]
                   26435: 
                   26436: 1999-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26437: 
                   26438:        * visudo.c:
                   26439:        Treat EOF at whatnow prompt like 'x' instead of looping.
                   26440:        [5deffc27114c]
                   26441: 
                   26442: 1999-12-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26443: 
                   26444:        * CHANGES:
                   26445:        recent changes
                   26446:        [5836a9452568] [SUDO_1_6_1]
                   26447: 
                   26448: 1999-12-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26449: 
                   26450:        * config.h.in, configure, configure.in, sudo.c:
                   26451:        Add check for initgroups() since old SYSV lacks this.
                   26452:        [657a6005a569]
                   26453: 
                   26454:        * CHANGES, RUNSON, aclocal.m4, config.h.in, configure, configure.in,
                   26455:        parse.c, testsudoers.c:
                   26456:        o Kill HAVE_FNMATCH_H o Only define HAVE_FNMATCH if <fnmatch.h>
                   26457:        exists.
                   26458:        [17d081e917d6]
                   26459: 
                   26460: 1999-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26461: 
                   26462:        * auth/sudo_auth.c:
                   26463:        Don't allow insults to be enabled if the insults[] array is empty.
                   26464:        Otherwise there would be division by zero.
                   26465:        [b20c14db6029]
                   26466: 
                   26467:        * insults.h:
                   26468:        Don't allow insults to be enabled if the insults[] array is empty.
                   26469:        Otherwise there would be division by zero.
                   26470:        [028f130204b0]
                   26471: 
                   26472:        * CHANGES, RUNSON:
                   26473:        Don't allow insults to be enabled if the insults[] array is empty.
                   26474:        Otherwise there would be division by zero.
                   26475:        [974f4780254b]
                   26476: 
                   26477:        * insults.h:
                   26478:        Don't care about USE_INSULTS #define since the insult stuff may be
                   26479:        overridden at runtime.
                   26480:        [b873df8b299c]
                   26481: 
                   26482:        * auth/sudo_auth.c:
                   26483:        Honor insults flag.
                   26484:        [756111640fdc]
                   26485: 
                   26486:        * CHANGES, parse.c:
                   26487:        Don't ask the user for a password if the user is not allowed to run
                   26488:        the command and the authenticate flag (in sudoers) is false.
                   26489:        [cea9fdc09c76]
                   26490: 
                   26491:        * CHANGES, RUNSON, lex.yy.c, parse.lex:
                   26492:        o Whenever we get a bare newline we change to the INITIAL state. o
                   26493:        Enter GOTRUNAS when we see Runas_Alias
                   26494: 
                   26495:        This allows #uid to work in a RunasAlias.
                   26496:        [a475513e7c7a]
                   26497: 
                   26498: 1999-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26499: 
                   26500:        * CHANGES, parse.yacc, sudo.tab.c:
                   26501:        fix parsing of runas lists: o oprunasuser and runaslist now return a
                   26502:        value o in a runasspec, if a runaslist does not return TRUE, set
                   26503:        runas_matches to FALSE. Normally, a runaslist only returns FALSE
                   26504:        for explicitly denied users. o since runaslist does not modify the
                   26505:        stack there is no need for a push/pop in runasalias.
                   26506:        [82b305b34a8c]
                   26507: 
                   26508:        * check.c, sudo.c:
                   26509:        Don't kill the user's tickets until after sudoers has been parsed
                   26510:        since tty_tickets and ticket_dir could be set in sudoers.
                   26511:        [f43e25367f3a]
                   26512: 
                   26513:        * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
                   26514:        configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
                   26515:        sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man:
                   26516:        crank version to 1.6
                   26517:        [95f8bdcf9bb2]
                   26518: 
                   26519:        * testsudoers.c:
                   26520:        add set_fqdn() stub
                   26521:        [bbc81af5b41a]
                   26522: 
                   26523: 1999-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26524: 
                   26525:        * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
                   26526:        sudoers.man, sudoers.pod, visudo.c:
                   26527:        o Kill shell_noargs option, it cannot work since the command needs
                   26528:        to be set before sudoers is parsed. o Fix the "set_home" sudoers
                   26529:        option (only worked at compile time). o Fix "fqdn" sudoers option.
                   26530:        We now set host/shost via set_fqdn which gets called when the
                   26531:        "fqdn" option is set in sudoers. o Move the openlog() to
                   26532:        store_syslogfac() so this gets overridden correctly from the
                   26533:        sudoers file.
                   26534:        [3dca861f0f5d]
                   26535: 
                   26536:        * auth/securid.c:
                   26537:        SecurID support should compile now.
                   26538:        [a544e5c6ea34]
                   26539: 
                   26540: 1999-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26541: 
                   26542:        * sudo.cat, sudo.man, sudo.pod, sudoers.cat, sudoers.man, visudo.cat,
                   26543:        visudo.man, visudo.pod:
                   26544:        fix some syntactic goofs
                   26545:        [b3451f0d5239]
                   26546: 
                   26547: 1999-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26548: 
                   26549:        * Makefile.in, sudo.html, sudoers.html, visudo.html:
                   26550:        No longer need the .html files as they are generated automatically
                   26551:        on the web site.
                   26552:        [1b4aa4204584]
                   26553: 
                   26554:        * CHANGES, LICENSE:
                   26555:        kill characters that made wml unhappy
                   26556:        [b988fbc6da56]
                   26557: 
                   26558:        * HISTORY:
                   26559:        typo
                   26560:        [a418963f7fce]
                   26561: 
                   26562: 1999-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26563: 
                   26564:        * README:
                   26565:        majordomo@cs.colorado.edu -> majordomo@courtesan.com
                   26566:        [5d151e8ffd3b]
                   26567: 
                   26568:        * Makefile.in, configure:
                   26569:        Wrap script execution w/ /bin/sh for the benefit of ctm
                   26570:        [3a9c4766b2c3]
                   26571: 
                   26572: 1999-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26573: 
                   26574:        * sudo.c:
                   26575:        Make the -s flag be exclusive too. Also reorder the flags in the
                   26576:        exclusive usage message so they are alphabetical.
                   26577:        [4c7af200db34]
                   26578: 
                   26579: 1999-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26580: 
                   26581:        * auth/pam.c:
                   26582:        make pam errors other than PAM_PERM_DENIED fatal
                   26583:        [64bcb3fd2baf]
                   26584: 
                   26585:        * auth/API:
                   26586:        fix typo
                   26587:        [f3134c88b12e]
                   26588: 
                   26589:        * INSTALL:
                   26590:        make it clear that /etc/pam.d/sudo is required on linux
                   26591:        [213cc3eaad82]
                   26592: 
                   26593:        * auth/pam.c:
                   26594:        fix a warning on redhat and spew an error if pam_authenticate()
                   26595:        returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED
                   26596:        [7e46dd19da89]
                   26597: 
                   26598:        * sudo.cat, sudo.html, sudo.man, sudo.pod:
                   26599:        Be very clear that the password required is the user's not root's
                   26600:        [a6da127347e5]
                   26601: 
                   26602: 1999-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26603: 
                   26604:        * Makefile.in:
                   26605:        add sample.syslog.conf to DISTFILES and BINFILES
                   26606:        [8661c27c007e]
                   26607: 
                   26608: 1999-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26609: 
                   26610:        * RUNSON:
                   26611:        updates from Brian Jackson + some formatting
                   26612:        [6d31c6fa63f8]
                   26613: 
                   26614: 1999-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26615: 
                   26616:        * INSTALL.binary, Makefile.binary, README, RUNSON:
                   26617:        o One RUNSon update o Changes for automating real binary releases
                   26618:        [dd9585f4406c]
                   26619: 
                   26620:        * Makefile.in:
                   26621:        Add bindist target
                   26622:        [546ed3fa94bb]
                   26623: 
                   26624: 1999-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26625: 
                   26626:        * TROUBLESHOOTING:
                   26627:        talk about run-time options in addition to compile-time options
                   26628:        [1eb813ff0a9a] [SUDO_1_6_0]
                   26629: 
                   26630:        * CHANGES:
                   26631:        fix typos
                   26632:        [65e92bb70a7b]
                   26633: 
                   26634:        * sudo.c:
                   26635:        need sys/time.h if HAVE_SETRLIMIT
                   26636:        [ce31655a8a60]
                   26637: 
                   26638:        * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
                   26639:        sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod:
                   26640:        get rid of references to sudo-bugs. Now mention the web site or the
                   26641:        sudo@ alias
                   26642:        [a9db861fd8c6]
                   26643: 
                   26644:        * sudoers.html:
                   26645:        repair pod2html damage
                   26646:        [62ece4277f1f]
                   26647: 
                   26648:        * RUNSON, TODO:
                   26649:        Update for 1.6 release
                   26650:        [98569c57ba2a]
                   26651: 
                   26652:        * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
                   26653:        Add warning about using ALL in a command context.
                   26654:        [6c77685ab280]
                   26655: 
                   26656: 1999-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26657: 
                   26658:        * visudo.c:
                   26659:        Call yyrestart() on a parse error to reset the lexer state.
                   26660:        [1370a27acdb2]
                   26661: 
                   26662:        * lex.yy.c, parse.lex:
                   26663:        Don't need YY_FLUSH_BUFFER after all Move yyrestart() into visudo.c
                   26664:        since it might not get called in yywrap if we get a parse error
                   26665:        (and we only reread the file on error anyway).
                   26666:        [37f4b449e28e]
                   26667: 
                   26668:        * lex.yy.c, parse.lex:
                   26669:        Call YY_FLUSH_BUFFER macro in yywrap() to clean up any buffers that
                   26670:        might still exist. Call yyrestart() instead of using the deprecated
                   26671:        YY_NEW_FILE macro.
                   26672:        [7d0d873046c6]
                   26673: 
                   26674:        * lex.yy.c, parse.lex:
                   26675:        flex doesn't need %N table size declarations
                   26676:        [268b020fd60a]
                   26677: 
                   26678:        * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
                   26679:        Mention what characters need to be escaped in names.
                   26680:        [72ccbb6b0f31]
                   26681: 
                   26682: 1999-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26683: 
                   26684:        * configure:
                   26685:        regen
                   26686:        [65827abb5c7b]
                   26687: 
                   26688:        * INSTALL:
                   26689:        clarify Mac OS X entry
                   26690:        [8da1549a71f5]
                   26691: 
                   26692:        * RUNSON:
                   26693:        update
                   26694:        [0cff8df7459f]
                   26695: 
                   26696:        * configure.in:
                   26697:        o Use AC_MSG_ERROR throughout o Check syslog configure options for
                   26698:        danity
                   26699:        [4cb81e642e5c]
                   26700: 
                   26701: 1999-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26702: 
                   26703:        * defaults.c:
                   26704:        Fix printing of type T_MODE in dump_defaults()
                   26705:        [a868bb6f5515]
                   26706: 
                   26707:        * strcasecmp.c:
                   26708:        missing sys/types.h
                   26709:        [ca694ca325b6]
                   26710: 
                   26711:        * INSTALL:
                   26712:        Break out options that may be overridden at run time into their own
                   26713:        section. Add a not about Max OS X and correct some lies.
                   26714:        [d8bcfd120593]
                   26715: 
                   26716: 1999-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26717: 
                   26718:        * CHANGES, config.h.in, configure, configure.in, sudo.c:
                   26719:        o Now use getrlimit to find the highest fd when closing all non-std
                   26720:        fd's o Turn off core dumps via setrlimit for the sake of paranoia
                   26721:        [dd9f651b6def]
                   26722: 
                   26723:        * RUNSON:
                   26724:        updates
                   26725:        [f581841fe615]
                   26726: 
                   26727: 1999-11-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26728: 
                   26729:        * CHANGES:
                   26730:        updates
                   26731:        [553baa1d44c7]
                   26732: 
                   26733:        * tgetpass.c:
                   26734:        When read()'ing, do a single character at a time to be sure we don't
                   26735:        go oast the newline.
                   26736:        [907d33f55bb4]
                   26737: 
                   26738:        * sudo.c:
                   26739:        For the sudo_root option, check against user_uid, not getuid() since
                   26740:        at this point, ruid == euid == 0.
                   26741:        [92d5c51939b4]
                   26742: 
                   26743:        * RUNSON:
                   26744:        some updates
                   26745:        [e3ed0c1f312b]
                   26746: 
                   26747:        * logging.h:
                   26748:        Fix compilation problem when --with-logging=file was specified.
                   26749:        This means that syslog is now required to build sudo but that should
                   26750:        not be a problem. If it is it can be fixed trivially with a
                   26751:        configure check for syslog() or syslog.h.
                   26752:        [839a4b069190]
                   26753: 
                   26754:        * tgetpass.c:
                   26755:        Make this work again for things like "sudo echo hi | more" where the
                   26756:        tty gets put into character at a time mode. We read until we read
                   26757:        end of line or we run out of space (similar to fgets(3)).
                   26758:        [c8f746df2e63]
                   26759: 
                   26760: 1999-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26761: 
                   26762:        * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
                   26763:        change ital to bold
                   26764:        [f860978e530a]
                   26765: 
                   26766:        * RUNSON:
                   26767:        update
                   26768:        [9bcfbb405568]
                   26769: 
                   26770: 1999-10-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26771: 
                   26772:        * defaults.c:
                   26773:        Error out if syslog parameters are given without a value. For
                   26774:        Ultrix or 4.2BSD "syslog" is allowed without a value since there are
                   26775:        no facilities in the 4.2BSD syslog.
                   26776:        [69e7a686f5f0]
                   26777: 
                   26778: 1999-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26779: 
                   26780:        * defaults.c:
                   26781:        Ignore the syslog facility for systems w/ old syslog like Ultrix.
                   26782:        [5c250adbbb84]
                   26783: 
                   26784:        * TROUBLESHOOTING:
                   26785:        people with "." early in their path can have problems running sudo
                   26786:        from the build dir ;-)
                   26787:        [20a1744a24a4]
                   26788: 
                   26789: 1999-10-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26790: 
                   26791:        * sudo.cat, sudo.html, sudo.man, sudo.pod:
                   26792:        Remove -r realm option
                   26793:        [127caa537f95]
                   26794: 
                   26795:        * auth/kerb5.c, auth/sudo_auth.c, auth/sudo_auth.h, configure,
                   26796:        configure.in, sudo.c:
                   26797:        New krb5 code from Frank Cusack <fcusack@iconnet.net>.
                   26798:        [7177a3893a62]
                   26799: 
                   26800:        * CHANGES:
                   26801:        update to reality
                   26802:        [766cfbb512d6]
                   26803: 
                   26804: 1999-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26805: 
                   26806:        * auth/fwtk.c:
                   26807:        include <auth.h> to get function prototypes.
                   26808:        [d6c7c12d09fe]
                   26809: 
                   26810:        * sudo.cat, sudo.html, sudo.man, sudo.pod:
                   26811:        document -L flag
                   26812:        [dc803e1ce0d7]
                   26813: 
                   26814: 1999-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26815: 
                   26816:        * sudo.c:
                   26817:        in set_perms(), always call setuid(0) before changing the ruid/euid
                   26818:        so we always know it will succeed.
                   26819:        [8cced1b862bf]
                   26820: 
                   26821:        * defaults.h:
                   26822:        #undef T_FOO to avoid conflicts with system defines (like on
                   26823:        ULTRIX).
                   26824:        [d9f0aac092b0]
                   26825: 
                   26826:        * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
                   26827:        sudoers.pod:
                   26828:        Docuement "Defaults" lines in /etc/sudoers. Still needs some
                   26829:        fleshing out but this is a start.
                   26830:        [521a1e629bbc]
                   26831: 
                   26832: 1999-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26833: 
                   26834:        * use strtol, not strtoul since not everyone has not strtoul
                   26835:        [988462f093cc]
                   26836: 
                   26837:        * defaults.c:
                   26838:        use strtol, not strtoul since not everyone has not strtoul
                   26839:        [fce835ce62e3]
                   26840: 
                   26841:        * lex.yy.c, parse.lex:
                   26842:        last {WORD} rule should only apply in the INITIAL state
                   26843:        [9b57570bfa83]
                   26844: 
                   26845:        * lex.yy.c, parse.lex:
                   26846:        o Add support for escaped characters in the WORD macro o Modify
                   26847:        fill() to squash escape chars
                   26848:        [87572d59e4e0]
                   26849: 
                   26850:        * defaults.c, defaults.h:
                   26851:        o Add T_PATH flag to allow simple sanity checks for default values
                   26852:        that are supposed to be pathnames. o Fix a duplicate free when
                   26853:        visudo finds an error.
                   26854:        [bdc6855a6c6d]
                   26855: 
                   26856: 1999-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26857: 
                   26858:        * defaults.c, defaults.h, logging.c:
                   26859:        mail_if_foo -> mail_foo
                   26860:        [cbee9415875d]
                   26861: 
                   26862: 1999-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26863: 
                   26864:        * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c:
                   26865:        o Add requiretty option o Move O_NOCTTY to compat.h
                   26866:        [65b8bf0e1795]
                   26867: 
                   26868:        * logging.c:
                   26869:        The exit() in log_error() was mistakenly removed in a previous
                   26870:        version. Put it back...
                   26871:        [9473449130a4]
                   26872: 
                   26873: 1999-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26874: 
                   26875:        * INSTALL, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c,
                   26876:        auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c, check.c, config.h.in,
                   26877:        configure, configure.in, defaults.c, defaults.h, find_path.c,
                   26878:        getspwuid.c, logging.c, parse.yacc, sudo.c, sudo.tab.c:
                   26879:        o Change defaults stuff to put the value right in the struct. o
                   26880:        Implement mailer_flags o Store syslog stuff both in int and string
                   26881:        form. Setting the string form magically updates the int version.
                   26882:        o Add boolean attribute to strings where it makes sense to say !foo
                   26883:        [4698953f9a36]
                   26884: 
                   26885:        * tgetpass.c:
                   26886:        add O_NOCTTY when opening /dev/tty just in case
                   26887:        [4c6d1d1bb300]
                   26888: 
                   26889: 1999-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26890: 
                   26891:        * auth/API:
                   26892:        cleanup function no longer takes a status arg
                   26893:        [0819edbfe7f8]
                   26894: 
                   26895:        * INSTALL:
                   26896:        the the
                   26897:        [19aadb65ea28]
                   26898: 
                   26899: 1999-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26900: 
                   26901:        * TODO, config.h.in, configure, configure.in, logging.c:
                   26902:        Use strftime() instead of ctime() if it is available.
                   26903:        [fb60ea63b514]
                   26904: 
                   26905: 1999-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26906: 
                   26907:        * defaults.c:
                   26908:        fix copyright date
                   26909:        [4a53b54aa72f]
                   26910: 
                   26911:        * RUNSON:
                   26912:        update ReliantUNIX entry
                   26913:        [de618a4f67d9]
                   26914: 
                   26915:        * defaults.c, defaults.h, logging.c:
                   26916:        add log_year option
                   26917:        [251a9e20568a]
                   26918: 
                   26919:        * configure, configure.in:
                   26920:        add --without-sendmail to help output
                   26921:        [93162f199902]
                   26922: 
                   26923:        * configure, configure.in:
                   26924:        enforce an otctal arg for --with-suoders-mode
                   26925:        [45e1b04ccad3]
                   26926: 
                   26927: 1999-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26928: 
                   26929:        * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, auth/aix_auth.c,
                   26930:        auth/fwtk.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c, auth/sia.c,
                   26931:        auth/sudo_auth.c, check.c, config.h.in, configure, configure.in,
                   26932:        defaults.c, defaults.h, find_path.c, lex.yy.c, logging.c, parse.h,
                   26933:        parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c, sudo.tab.h,
                   26934:        testsudoers.c, version.c, visudo.c:
                   26935:        Add support for "Defaults" line in sudoers to make configuration
                   26936:        variables changable at runtime (and on a global, per-host and per-
                   26937:        user basis). Both the names and the internal representation are
                   26938:        still subject to change. It was necessary to make sudo_user.runas
                   26939:        but a char ** instead of a char * since this value can be changed by
                   26940:        a Defaults line. There is a similar (but more complicated) issue
                   26941:        with sudo_user.prompt but it is handled differently at the moment.
                   26942: 
                   26943:        Add a "-L" flag to list the name of options with their descriptions.
                   26944:        This may only be temporary.
                   26945: 
                   26946:        Move some prototypes to parse.h
                   26947: 
                   26948:        Be much less restrictive on what is allowed for a username.
                   26949:        [f71abf7ba80c]
                   26950: 
                   26951:        * sample.syslog.conf:
                   26952:        Add more info
                   26953:        [e952e6f42d4d]
                   26954: 
                   26955: 1999-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26956: 
                   26957:        * LICENSE, fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
                   26958:        strcasecmp.c:
                   26959:        UCB has dropped the advertising clause from their license.
                   26960:        [a5602b36a341]
                   26961: 
                   26962: 1999-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26963: 
                   26964:        * auth/sudo_auth.h:
                   26965:        move dce_verofy proto to correct section
                   26966:        [972c815af558]
                   26967: 
                   26968:        * auth/dce.c:
                   26969:        remove XXX
                   26970:        [820631855be0]
                   26971: 
                   26972: 1999-08-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   26973: 
                   26974:        * emul/fnmatch.h:
                   26975:        Add fnmatch() prototype
                   26976:        [79e84576d92a]
                   26977: 
                   26978:        * fnmatch.c, parse.c, testsudoers.c:
                   26979:        Move inclusion of emul/fnmatch.h to be after sudo.h for __P
                   26980:        [1182c89fa811]
                   26981: 
                   26982:        * sudo.h:
                   26983:        add strcasecmp proto
                   26984:        [512d1d8a6a0c]
                   26985: 
                   26986:        * auth/sudo_auth.c:
                   26987:        add check for case where there are no auth methods
                   26988:        [e4af2b91b43e]
                   26989: 
                   26990:        * configure, configure.in:
                   26991:        Define _XOPEN_EXTENDED_SOURCE on AIX and __USE_FIXED_PROTOTYPES__ on
                   26992:        SunOS4 w/ gcc
                   26993:        [746ce8bcec23]
                   26994: 
                   26995:        * getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c:
                   26996:        include strings.h everywhere we include string.h
                   26997:        [6f7d5d437e7b]
                   26998: 
                   26999:        * version.c:
                   27000:        nicer output when showing auth methods
                   27001:        [0eac4b977f9d]
                   27002: 
                   27003:        * version.c:
                   27004:        Add support for SEND_MAIL_WHEN_NO_HOST
                   27005:        [9f20a3a3fae6]
                   27006: 
                   27007:        * config.h.in, configure, configure.in:
                   27008:        Add _GNU_SOURCE for Linux
                   27009:        [c7bd8c511847]
                   27010: 
                   27011:        * lex.yy.c, parse.lex:
                   27012:        fix definition of OCTECT
                   27013:        [4af30e63244d]
                   27014: 
                   27015:        * configure, configure.in:
                   27016:        aix_auth.o not authenticate.o
                   27017:        [fe95dfb08df4]
                   27018: 
                   27019: 1999-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27020: 
                   27021:        * sudo.c:
                   27022:        Only block SIGINT, SIGQUIT, SIGTSTP (which can be generated from the
                   27023:        keyboard). Since we run with ruid/euid == 0 the user can't really
                   27024:        signal us in nasty ways.
                   27025:        [a7f6487c0f48]
                   27026: 
                   27027:        * visudo.c:
                   27028:        Don't need to worry about catching too many signals since we do
                   27029:        locking on the tmp file. If a lockfile is really stale, it will be
                   27030:        detected and overwritten.
                   27031:        [28983db3e749]
                   27032: 
                   27033:        * INSTALL, Makefile.in:
                   27034:        include auth/API in tarball
                   27035:        [014991600252]
                   27036: 
                   27037:        * auth/sudo_auth.c:
                   27038:        move memset() of plaintext pw outside of verify loop and only do the
                   27039:        memset if we are *not* in standalone mode.
                   27040:        [66f8e87567e2]
                   27041: 
                   27042:        * auth/sudo_auth.c, auth/sudo_auth.h:
                   27043:        DCE is not a standalone method
                   27044:        [34963e2d8a1b]
                   27045: 
                   27046:        * sudo.c:
                   27047:        fix --enable-noargs-shell
                   27048:        [4234062abbb0]
                   27049: 
                   27050:        * snprintf.c:
                   27051:        "#ifdef __STDC__" not "#if __STDC__" (I missed one)
                   27052:        [c430b80454c6]
                   27053: 
                   27054:        * auth/fwtk.c, auth/sia.c:
                   27055:        _cleanup() function returns an int.
                   27056:        [d1a1cc071ec1]
                   27057: 
                   27058:        * auth/dce.c:
                   27059:        there were still some return(0)'s hanging around, make them
                   27060:        AUTH_FAILURE
                   27061:        [1002aa1962c3]
                   27062: 
                   27063:        * parse.c:
                   27064:        typo in comment
                   27065:        [5abc410dbfd2]
                   27066: 
                   27067:        * version.c:
                   27068:        add missing semicolon
                   27069:        [a262283b52a5]
                   27070: 
                   27071:        * auth/sudo_auth.h:
                   27072:        missing backslash
                   27073:        [bf89f6bd2900]
                   27074: 
                   27075: 1999-08-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27076: 
                   27077:        * CHANGES, config.h.in, configure, configure.in:
                   27078:        Kill _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
                   27079:        [f1a9bca0cf67]
                   27080: 
                   27081:        * Makefile.in:
                   27082:        add parse.h to HDRS
                   27083:        [a3d054987766]
                   27084: 
                   27085:        * Makefile.in, configure, configure.in:
                   27086:        Kill VISUDO_LIBS and VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and
                   27087:        LDFLAGS. Common libs go in LIBS, commong ld flags go in LDFLAGS and
                   27088:        network libs like -lsocket, -lnsl go in NET_LIBS. This allows
                   27089:        testsudoers to build on Solaris and is a bit cleaner in general.
                   27090:        [4e6239e97002]
                   27091: 
                   27092:        * UPGRADE:
                   27093:        mention ptmp -> sudoers.tmp
                   27094:        [ec3baa0fe8a1]
                   27095: 
                   27096:        * config.h.in, configure, configure.in:
                   27097:        Define _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
                   27098:        [6f93dc7f39f5]
                   27099: 
                   27100:        * RUNSON:
                   27101:        add 2 reports
                   27102:        [ce0fcc00ee4e]
                   27103: 
                   27104:        * auth/kerb5.c:
                   27105:        Minor changes, mostly cosmetic. verify_krb_v5_tgt() changed to
                   27106:        return a value more like a system function
                   27107:        [0dd56aa21424]
                   27108: 
                   27109:        * auth/dce.c:
                   27110:        Add an XXX
                   27111:        [58fc8562c212]
                   27112: 
                   27113:        * TODO:
                   27114:        more things todo!
                   27115:        [5a459d0cf339]
                   27116: 
                   27117:        * sample.sudoers:
                   27118:        update based on what is in the man page
                   27119:        [1a0477db96fa]
                   27120: 
                   27121:        * parse.yacc, sudo.tab.c:
                   27122:        minor change to first line printed in -l mode
                   27123:        [69eb57d96952]
                   27124: 
                   27125:        * sudo.cat, sudo.html, sudo.man, sudo.pod:
                   27126:        rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
                   27127:        standard and add "EXAMPLES" section
                   27128:        [7e543335ebe1]
                   27129: 
                   27130:        * visudo.cat, visudo.html, visudo.man, visudo.pod:
                   27131:        rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
                   27132:        standard
                   27133:        [f82d87ed65c2]
                   27134: 
                   27135:        * logging.c, parse.c, sudo.h:
                   27136:        add FLAG_NO_CHECK
                   27137:        [c7d69176a2d7]
                   27138: 
                   27139:        * lex.yy.c, parse.lex:
                   27140:        make an OCTET really be limited to 0-255
                   27141:        [6ee568dd6a02]
                   27142: 
                   27143:        * UPGRADE:
                   27144:        mention timestamp changes
                   27145:        [e44d5302bf60]
                   27146: 
                   27147:        * PORTING:
                   27148:        cosmetic cleanup
                   27149:        [36fa3a2664dd]
                   27150: 
                   27151:        * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
                   27152:        new sudoers(8) man page
                   27153:        [e674d06283d0]
                   27154: 
                   27155: 1999-08-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27156: 
                   27157:        * version.c:
                   27158:        Update comments about syslog name tables
                   27159:        [63830a782dcb]
                   27160: 
                   27161:        * CHANGES, LICENSE, Makefile.in, configure, configure.in, parse.yacc,
                   27162:        strcasecmp.c, sudo.tab.c:
                   27163:        include strcasecmp() for those without it
                   27164:        [a0d8e2488bbc]
                   27165: 
                   27166:        * sample.sudoers:
                   27167:        Use the : operator some more and fix a typo
                   27168:        [18804c70da86]
                   27169: 
                   27170:        * HISTORY:
                   27171:        update the history of sudo
                   27172:        [9d9b3d5279b3]
                   27173: 
                   27174:        * parse.c, parse.lex, testsudoers.c:
                   27175:        CIDR-style netmask support
                   27176:        [768644467353]
                   27177: 
                   27178:        * CHANGES:
                   27179:        recent changes
                   27180:        [a4319e9d07cb]
                   27181: 
                   27182:        * sudo.tab.c, sudo.tab.h:
                   27183:        these should be generated with byacc, not bison
                   27184:        [f57b9489b752]
                   27185: 
                   27186:        * lex.yy.c:
                   27187:        regen
                   27188:        [522461f95dfa]
                   27189: 
                   27190:        * parse.h, parse.yacc, sudo.tab.c, sudo.tab.h:
                   27191:        In "sudo -l" mode, the type of the stored (expanded) alias was not
                   27192:        stored with the contents. This could lead to incorrect output if
                   27193:        the sudoers file had different alias types with the same name.
                   27194:        Normal parsing (ie: not in '-l' mode) is unaffected.
                   27195:        [823fe2bc4b79]
                   27196: 
                   27197: 1999-08-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27198: 
                   27199:        * configure, configure.in:
                   27200:        define _XOPEN_SOURCE to get at crypt() proto on some systems
                   27201:        [1b3769b86fb9]
                   27202: 
                   27203: 1999-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27204: 
                   27205:        * snprintf.c:
                   27206:        fix comment
                   27207:        [fc1264df00f7]
                   27208: 
                   27209:        * tgetpass.c:
                   27210:        don't need limits.h
                   27211:        [f1631829af45]
                   27212: 
                   27213:        * snprintf.c:
                   27214:        kill bogus reference to vfprintf
                   27215:        [a0b99b25d389]
                   27216: 
                   27217:        * sample.sudoers, sudoers:
                   27218:        better examples
                   27219:        [b4d87ea64cc8]
                   27220: 
                   27221:        * snprintf.c:
                   27222:        Add some const in the K&R defs. This is safe since we define const
                   27223:        away if the compiler doesn't grok it.
                   27224:        [614d6e83d45e]
                   27225: 
                   27226:        * aclocal.m4, configure:
                   27227:        Better test for working long long support. Ultrix compiler supports
                   27228:        basic long long but not all operations on them.
                   27229:        [5da1508710ed]
                   27230: 
                   27231:        * aclocal.m4, auth/secureware.c, config.h.in, configure, getspwuid.c,
                   27232:        snprintf.c, sudo.c:
                   27233:        Add check for LONG_IS_QUAD #undef MAXINT before including
                   27234:        hpsecurity.h to silence an HP-UX warning Check for U?LONG_LONG_MAX
                   27235:        in snprintf.c and use LONG_IS_QUAD
                   27236:        [a1f7993367fc]
                   27237: 
                   27238: 1999-08-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27239: 
                   27240:        * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
                   27241:        snprintf.c:
                   27242:        UCB-derived snprintf + asprintf support. Supports quads if the
                   27243:        compiler does. No floating point yet, perhaps later...
                   27244:        [0caf05aba945]
                   27245: 
                   27246: 1999-08-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27247: 
                   27248:        * auth/API, auth/sudo_auth.c, auth/sudo_auth.h, check.c, find_path.c,
                   27249:        goodpath.c, logging.c, parse.c, sudo.c:
                   27250:        Run most of the code as root, not the invoking user. It doesn't
                   27251:        really gain us anything to run as the user since an attacker can
                   27252:        just have an setuid(0) in their egg. Running as root solves
                   27253:        potential problems wrt signalling.
                   27254:        [408e530dda01]
                   27255: 
                   27256:        * sudo.tab.c:
                   27257:        regen
                   27258:        [f8cfb37e37de]
                   27259: 
                   27260: 1999-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27261: 
                   27262:        * logging.c, sudo.c:
                   27263:        Don't wait for child to finish in log_error(), let the signal
                   27264:        handler get it if we are still running, else let init reap it for
                   27265:        us. The extra time it takes to wait lets the user know that mail is
                   27266:        being sent.
                   27267: 
                   27268:        Install SIGCHLD handler in main() and for POSIX signals, block
                   27269:        everything
                   27270:        *except* SIGCHLD.
                   27271:        [d2b6ab0ef3be]
                   27272: 
                   27273:        * INSTALL, config.h.in, configure, configure.in, logging.c, parse.c,
                   27274:        parse.yacc, sudo.c, sudo.h:
                   27275:        sudoers_lookup() now returns a bitmap instead of an int. This makes
                   27276:        it possible to express things like "failed to validate because user
                   27277:        not listed for this host". Some thigns that were previously
                   27278:        VALIDATE_FOO are now FLAG_FOO. This may change later on.
                   27279: 
                   27280:        Reorganized code in log_auth() and sudo.c to deal with above
                   27281:        changes.
                   27282: 
                   27283:        Safer versions of push/pushcp with in the do { ... } while (0) style
                   27284: 
                   27285:        parse.yacc now saves info on the stack to allow parse.c to determine
                   27286:        if a user was listed, but not for the host he/she tried to run on.
                   27287: 
                   27288:        Added --with-mail-if-no-host option
                   27289:        [63326cb01efc]
                   27290: 
                   27291: 1999-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27292: 
                   27293:        * parse.yacc, sudo.h, sudo.tab.c, visudo.c, visudo.cat, visudo.html,
                   27294:        visudo.man, visudo.pod:
                   27295:        o NewArgv and NewArgc don't need to be externally visible. o If
                   27296:        pedantic > 1, it is a parse error. o Add -s (strict) option to
                   27297:        visudo which sets pedantic to 2.
                   27298:        [5d7d81b55cd5]
                   27299: 
                   27300:        * HISTORY, INSTALL:
                   27301:        Just have sudo-bugs contact info in one place
                   27302:        [e7f6588ea683]
                   27303: 
                   27304:        * sudo.cat, sudo.html, sudo.man, sudo.pod:
                   27305:        Add BUGS section
                   27306:        [6607d96ea510]
                   27307: 
                   27308:        * Makefile.in, configure, configure.in:
                   27309:        Add testsudoers to default build target if --with-devel Don't clean
                   27310:        generated parser files unless "distclean".
                   27311:        [5827b769dc57]
                   27312: 
                   27313:        * parse.yacc, sudo.tab.c:
                   27314:        In pedantic mode we need to save *all* the aliases, not just those
                   27315:        that match, or we get spurious warnings.
                   27316:        [24f5b1f0e1de]
                   27317: 
                   27318:        * TROUBLESHOOTING:
                   27319:        reference samples.sylog.conf
                   27320:        [11841668380a]
                   27321: 
                   27322: 1999-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27323: 
                   27324:        * sample.syslog.conf:
                   27325:        Sample entries for syslog.conf
                   27326:        [0f7697d878a1]
                   27327: 
                   27328:        * CHANGES:
                   27329:        recent changes
                   27330:        [8bca8810c6bd]
                   27331: 
                   27332:        * auth/API, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
                   27333:        auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
                   27334:        auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
                   27335:        auth/sudo_auth.c, auth/sudo_auth.h:
                   27336:        In struct sudo_auth, turn need_root and configured into flags and
                   27337:        add a flag to specify an auth method is running alone (the only
                   27338:        one). Pass auth methods their sudo_auth pointer, not the data
                   27339:        pointer. This allows us to get at the flags and tell if we are the
                   27340:        only auth method. That, in turn, allows the method to be able to
                   27341:        decide what should/should not be a fatal error. Currently only
                   27342:        rfc1938 uses it this way, which allows us to kill the OTP_ONLY
                   27343:        define and te hackery that went with it. With access to the
                   27344:        sudo_auth struct, methods can also get at a string holding their
                   27345:        cannonical name (useful in error messages).
                   27346:        [b7e320fc6511]
                   27347: 
                   27348:        * INSTALL, Makefile.in, README, config.h.in, configure, configure.in,
                   27349:        getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c,
                   27350:        sudo.tab.h:
                   27351:        o --with-otp deprecated, use --without-passwd instead o real
                   27352:        dependencies in the Makefile o --with-devel option to enable yacc,
                   27353:        lex, and -Wall o style -- "foo -> bar" becomes "foo->bar" o ALL goes
                   27354:        back to being a token, not a string but don't leak memory o rename
                   27355:        hsotspec -> host in parse.yacc
                   27356:        [912c45226cb2]
                   27357: 
                   27358: 1999-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27359: 
                   27360:        * BUGS, CHANGES:
                   27361:        recent changes
                   27362:        [801fa6e55687]
                   27363: 
                   27364:        * auth/sudo_auth.c, configure, configure.in, interfaces.c, snprintf.c,
                   27365:        sudo.c, sudo.h:
                   27366:        o Digital UNIX needs to check for *snprintf() before -ldb is added
                   27367:        to LIBS since -ldb includes a bogus snprintf(). o Add forward refs
                   27368:        for struct mbuf and struct rtentry for Digital UNIX. o Reorder some
                   27369:        functions in snprintf.c to fix -Wall o Add missing includes to fix
                   27370:        more -Wall
                   27371:        [8d207203e126]
                   27372: 
                   27373:        * INSTALL, auth/sudo_auth.c, check.c, config.h.in, configure,
                   27374:        configure.in, parse.yacc, sudo.tab.c, testsudoers.c, version.c,
                   27375:        visudo.c:
                   27376:        o Add a "pedentic" flag to the parser. This makes sudo warn in
                   27377:        cases where an alias may be used before it is defined. Only turned
                   27378:        on for visudo and testsudoers. o Add --disable-authentication option
                   27379:        that makes sudo not require authentication by default. The PASSWD
                   27380:        tag can be used to require authentication for an entry. We no
                   27381:        longer overload --without-passwd.
                   27382:        [f307e09adf98]
                   27383: 
                   27384:        * lex.yy.c, parse.lex:
                   27385:        Break 'WORD' regexp def into HOSTNAME and USERNAME. These days a
                   27386:        username can contain just about anything so be very permissive. Also
                   27387:        drop the unused \. punctuation.
                   27388:        [06a50614ff89]
                   27389: 
                   27390: 1999-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27391: 
                   27392:        * parse.yacc, sudo.tab.c:
                   27393:        o add a 'val' element to aliasinfo struct and move -> parse.h o
                   27394:        find_alias() now returns an aliasinfo * instead of boolean o
                   27395:        add_alias() now takes a value parameter to store in the
                   27396:        aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
                   27397:        return: 1) positive match 0) negative match (due to '!')
                   27398:        -1) no match This means setting $$ explicitly in all cases, which I
                   27399:        should have done in the first place. It also means that we always
                   27400:        store a value that is != -1 and when we see a '!' we can set
                   27401:        *_matches to !rv if rv != -1. The upshot of all of this is that '!'
                   27402:        now works the way it should in lists and some of the rules are more
                   27403:        uniform and sensible.
                   27404:        [ad8e73b5d581]
                   27405: 
                   27406:        * Makefile.in:
                   27407:        add parse.h dependency
                   27408:        [4ccccd464d30]
                   27409: 
                   27410:        * parse.h:
                   27411:        kill unused *_matched macros
                   27412:        [02cba6dcb732]
                   27413: 
                   27414:        * parse.yacc:
                   27415:        Allow a list of users as the first thing in a user spec, not just a
                   27416:        single entry. This makes things more uniform, though it does allow
                   27417:        you to write user specs that are hard to read.
                   27418:        [3c4c91c508ca]
                   27419: 
                   27420:        * sudo.tab.c:
                   27421:        parse.yacc
                   27422:        [feca81881bb6]
                   27423: 
                   27424:        * configure:
                   27425:        regen
                   27426:        [6f247010bb3b]
                   27427: 
                   27428:        * configure.in:
                   27429:        fix check for crypt() in libufc
                   27430:        [82770736f4b0]
                   27431: 
                   27432: 1999-08-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27433: 
                   27434:        * README:
                   27435:        sudo-users list now exists
                   27436:        [4716d2bb0bbf]
                   27437: 
                   27438:        * INSTALL, PORTING, README, TODO, TROUBLESHOOTING:
                   27439:        Update to reality.
                   27440:        [1eda2d57e42a]
                   27441: 
                   27442:        * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
                   27443:        config.h.in, configure, configure.in, fileops.c, logging.c, sudo.h,
                   27444:        version.c, visudo.c:
                   27445:        o Move lock_file() and touch() into fileops.c so visudo can use them
                   27446:        o Visudo now locks the sudoers temp file instead of bailing when the
                   27447:        temp file already exists. This fixes the problem of stale temp
                   27448:        files but it does *require* that you not try to put the temp file in
                   27449:        a world-writable directory. This shoud not be an issue as the temp
                   27450:        file should live in the same dir as sudoers. o Visudo now only
                   27451:        installs the temp file as sudoers if it changed.
                   27452:        [2517cd06c070]
                   27453: 
                   27454: 1999-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27455: 
                   27456:        * logging.c:
                   27457:        add fcntl locking
                   27458:        [c304adeaf515]
                   27459: 
                   27460:        * config.h.in, configure, configure.in, logging.c:
                   27461:        Lock the log file.
                   27462:        [d8652704fbdf]
                   27463: 
                   27464:        * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
                   27465:        visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod:
                   27466:        o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
                   27467:        temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP
                   27468:        -> _PATH_SUDOERS_TMP
                   27469:        [68cad8975807]
                   27470: 
                   27471: 1999-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27472: 
                   27473:        * INSTALL, check.c, config.h.in, configure, configure.in, version.c:
                   27474:        o Kill *_MESSAGE and replace with NO_LECTURE o Add more things to
                   27475:        root sudo -V config reporting
                   27476:        [cdd2613a9dcf]
                   27477: 
                   27478:        * configure, configure.in:
                   27479:        aix_auth.o not authenticate.o
                   27480:        [d972e35f6730]
                   27481: 
                   27482:        * config.h.in:
                   27483:        Add --with-goodpri and --with-badpri configure options to specify
                   27484:        the syslog priority to use.
                   27485:        [2595ae50ab86]
                   27486: 
                   27487:        * INSTALL, configure, configure.in, logging.h:
                   27488:        Add --with-goodpri and --with-badpri configure options to specify
                   27489:        the syslog priority to use.
                   27490:        [8276ee9b2b49]
                   27491: 
                   27492:        * compat.h:
                   27493:        kill crufty AIX stuff
                   27494:        [a4f35ef9854e]
                   27495: 
                   27496:        * Makefile.in:
                   27497:        Sigh, some versions of make (like Solaris's) don't deal with $< like
                   27498:        I would expect. Both GNU and BSD makes get this right but... So, we
                   27499:        just expand $< inline at the cost of some ugliness.
                   27500:        [b1b456f8801f]
                   27501: 
                   27502:        * version.c:
                   27503:        If the invoking user is root, sudo will now print configure info in
                   27504:        -V mode. Currently just prints logging info, to be expanded later.
                   27505:        [392f7ed99267]
                   27506: 
                   27507:        * logging.c, logging.h, sudo.c, sudo.h:
                   27508:        o new defines for syslog facility and priority o use new
                   27509:        print_version() functino for -V mode
                   27510:        [78abc5142985]
                   27511: 
                   27512:        * check.c:
                   27513:        Don't need version.c
                   27514:        [db9a830ad893]
                   27515: 
                   27516:        * aclocal.m4, config.h.in, configure, configure.in:
                   27517:        Add check for syslog facilities and priorities tables in syslog.h
                   27518:        [b86213e5fc5c]
                   27519: 
                   27520:        * Makefile.in:
                   27521:        o authenticate -> aix_auth o add version.c
                   27522:        [44b6b9a8d0f5]
                   27523: 
                   27524:        * auth/sudo_auth.c:
                   27525:        Missed a prompt -> user_prompt conversion
                   27526:        [e4c60b1f210c]
                   27527: 
                   27528: 1999-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27529: 
                   27530:        * TODO:
                   27531:        sudo should lock its logfile
                   27532:        [6d2830b28b07]
                   27533: 
                   27534:        * parse.yacc, sudo.tab.c:
                   27535:        o Add '!' correctly when expanding Aliases. o Add shortcut macros
                   27536:        for append() to make things more readable. o The separator in
                   27537:        append() is now a string instead of a char. o In append(), only
                   27538:        prepend the separator if the last char is not a '!'. This is a
                   27539:        hack but it greatly simplifies '!' handling. o In -l mode, Runas
                   27540:        lists and NOPASSWD/PASSWD tags are now inherited across entries in
                   27541:        a list (matches current behavior). o Fix formatting in -l mode such
                   27542:        that items in a list are separated by a space. Greatlt improves
                   27543:        readability. o Space for name field in struct aliasinfo is now
                   27544:        allocated dyanically instead of using a (big) buffer. o In
                   27545:        add_alias(), only search the list once (lsearch instead of lfind +
                   27546:        lsearch)
                   27547:        [51f7e07addb9]
                   27548: 
                   27549:        * lex.yy.c, sudo.tab.c, sudo.tab.h:
                   27550:        regen
                   27551:        [5c19bb05dc21]
                   27552: 
                   27553:        * configure, configure.in:
                   27554:        Solais pam doesn't require anye xtra setup
                   27555:        [a25ba03d91d1]
                   27556: 
                   27557:        * parse.yacc:
                   27558:        o Simpler '!' support now that the lexer deals with multiple !'s for
                   27559:        us. o In the case of opFOO, have FOO give a boolean return value and
                   27560:        set foo_matches in opFOO, not FOO. o Treat 'ALL' as a string since
                   27561:        it gets fill()'d in parse.lex--fixes a small memory leak. In the
                   27562:        long run it may be better to just fix parse.lex and make ALL back
                   27563:        into a token. However, having it be a string is useful since it
                   27564:        can be easily passed back to the parent rule if we so desire.
                   27565:        [b3c64b443018]
                   27566: 
                   27567:        * parse.lex:
                   27568:        o Remove some unnecessary backslashes o collapse multiple !'s by
                   27569:        using !+ and checking if yyleng is even or odd. this allows us to
                   27570:        simplify ! handling in parse.yacc
                   27571:        [76330e8da8e3]
                   27572: 
                   27573:        * sudo.c:
                   27574:        -u flag was being ignored
                   27575:        [e30283207585]
                   27576: 
                   27577: 1999-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27578: 
                   27579:        * Makefile.in:
                   27580:        correct fix
                   27581:        [a0e2377dec8f]
                   27582: 
                   27583:        * Makefile.in:
                   27584:        work around pod2man stupididy
                   27585:        [7c755640b67f]
                   27586: 
                   27587:        * Makefile.in:
                   27588:        correct dependencies for .cat
                   27589:        [5ed7b0653b68]
                   27590: 
                   27591:        * sudo.cat, sudo.man, visudo.cat, visudo.man:
                   27592:        regen
                   27593:        [b74510dd6a0a]
                   27594: 
                   27595:        * sudo.pod, visudo.pod:
                   27596:        Add copyright Update to reality
                   27597:        [188e9b046c15]
                   27598: 
                   27599:        * parse.c, sudo.c, sudo.h:
                   27600:        rename validate() to the more descriptive sudoers_lookup()
                   27601:        [7a1cb652f379]
                   27602: 
                   27603:        * auth/aix_auth.c:
                   27604:        use tgetpass
                   27605:        [b8ba5daec40a]
                   27606: 
                   27607: 1999-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27608: 
                   27609:        * CHANGES:
                   27610:        updates
                   27611:        [e61460cdf4a0]
                   27612: 
                   27613:        * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
                   27614:        configure, configure.in, sudo.c:
                   27615:        Sudo, not CU Sudo
                   27616:        [9061b3573c0c]
                   27617: 
                   27618:        * LICENSE:
                   27619:        add 4th term to license similar to term 5 in the apache license
                   27620:        [92712e895afb]
                   27621: 
                   27622:        * emul/search.h, emul/utime.h:
                   27623:        add 4th term to license similar to term 5 in the apache license
                   27624:        [4f93a8b9396e]
                   27625: 
                   27626:        * auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c,
                   27627:        auth/kerb5.c, auth/pam.c, auth/passwd.c, auth/rfc1938.c,
                   27628:        auth/secureware.c, auth/securid.c, auth/sia.c, auth/sudo_auth.c,
                   27629:        auth/sudo_auth.h, insults.h, interfaces.c, interfaces.h, lex.yy.c,
                   27630:        logging.c, logging.h, parse.c, parse.h, parse.lex, parse.yacc,
                   27631:        pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h, sudo.tab.c,
                   27632:        sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
                   27633:        visudo.c:
                   27634:        add 4th term to license similar to term 5 in the apache license
                   27635:        [afae9f2bf9ec]
                   27636: 
                   27637:        * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
                   27638:        add 4th term to license similar to term 5 in the apache license
                   27639:        [c389d3fdafac]
                   27640: 
                   27641:        * Makefile.in, alloc.c, check.c, compat.h, config.h.in, find_path.c,
                   27642:        getspwuid.c, goodpath.c:
                   27643:        add 4th term to license similar to term 5 in the apache license
                   27644:        [969e63dbd38e]
                   27645: 
                   27646:        * LICENSE, aclocal.m4, auth/rfc1938.c, check.c, configure.in,
                   27647:        insults.h, logging.c, sudo.c, sudo.h:
                   27648:        there was a 1995 release too
                   27649:        [5963fd89457a]
                   27650: 
                   27651: 1999-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27652: 
                   27653:        * CHANGES:
                   27654:        updates
                   27655:        [254b794f16ab]
                   27656: 
                   27657:        * check.c:
                   27658:        Use dirs instead of files for timestamp. This allows tty and non-
                   27659:        tty schemes to coexist reasonably. Note, however, that when you
                   27660:        update a tty ticket, the mtime on the user dir gets updated as well.
                   27661:        [44bfac32f799]
                   27662: 
                   27663:        * configure, configure.in:
                   27664:        Fix getprpwnam() checking on SCO. Need to link with "-lprot -lx"
                   27665:        when linking test program, not just -lprot. Also add check for
                   27666:        getspnam(). The SCO docs indicate that /etc/shadow can be used but
                   27667:        this may be a lie.
                   27668:        [2ba21d36cc1e]
                   27669: 
                   27670: 1999-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27671: 
                   27672:        * auth/API:
                   27673:        first cut at auth API description
                   27674:        [3d10df021eb8]
                   27675: 
                   27676: 1999-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27677: 
                   27678:        * auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c,
                   27679:        auth/secureware.c, auth/securid.c, auth/sudo_auth.c,
                   27680:        auth/sudo_auth.h:
                   27681:        auth API change. There is now an init method that gets run before
                   27682:        the main loop. This allows auth routines to differentiate between
                   27683:        initialization that happens once vs. setup that needs to run each
                   27684:        time through the loop.
                   27685:        [76df1c0d3478]
                   27686: 
                   27687:        * auth/kerb5.c, logging.c:
                   27688:        use easprintf() and evasprintf()
                   27689:        [fd97d96dc12f]
                   27690: 
                   27691:        * alloc.c, sudo.h:
                   27692:        add easprintf() and evasprintf(), error checking versions of
                   27693:        asprintf() and vasprintf()
                   27694:        [f54385de20b7]
                   27695: 
                   27696:        * TODO:
                   27697:        remove 2 items. One done, one won't do.
                   27698:        [64513b47bc7a]
                   27699: 
                   27700:        * lex.yy.c, sudo.tab.c:
                   27701:        regen
                   27702:        [4aa299de2752]
                   27703: 
                   27704:        * configure, sudo.cat, sudo.html, sudo.man, sudoers.html, visudo.cat,
                   27705:        visudo.html, visudo.man:
                   27706:        regen
                   27707:        [553c0d1209be]
                   27708: 
                   27709:        * CHANGES:
                   27710:        new changes
                   27711:        [d7be00b7e36b]
                   27712: 
                   27713:        * sudo.pod:
                   27714:        o Document -K flag and update meaning of -k flag. o BSD-style
                   27715:        copyright o Document clearing of BIND resolver environment variables
                   27716:        o Clarify bit about shared libs o suggest rc files create /tmp/.odus
                   27717:        if your OS gives away files
                   27718:        [4a4092be1455]
                   27719: 
                   27720:        * visudo.pod:
                   27721:        BSD license
                   27722:        [ad0bfd0a4630]
                   27723: 
                   27724:        * version.h:
                   27725:        BSD-style copyright
                   27726:        [ecc6479325be]
                   27727: 
                   27728:        * tgetpass.c:
                   27729:        o BSD copyright o no need to block signals, we now do that in main()
                   27730:        o cosmetic changes
                   27731:        [61958beda7ab]
                   27732: 
                   27733:        * testsudoers.c, visudo.c:
                   27734:        o BSD-style copyright o Use "struct sudo_user" instead of old
                   27735:        globals. o some cometic cleanup
                   27736:        [88c0c6924082]
                   27737: 
                   27738:        * sudo_setenv.c:
                   27739:        BSD-style copyright
                   27740:        [df20290129a0]
                   27741: 
                   27742:        * sudo.h:
                   27743:        o BSD copyright o logging and parser bits moved to their own .h
                   27744:        files o new "struct sudo_user" to encapsulate many of the old
                   27745:        globals.
                   27746:        [50fc86bf25cb]
                   27747: 
                   27748:        * sudo.c:
                   27749:        o no longer contains sudo 1.1/1.2 code o BSD copyright o use new
                   27750:        logging routines o simplified flow of control o BIND resolver
                   27751:        additions to badenv_table
                   27752:        [8c53f15bfcb0]
                   27753: 
                   27754:        * strerror.c:
                   27755:        BSD-style copyright
                   27756:        [7c906c3a82ac]
                   27757: 
                   27758:        * snprintf.c:
                   27759:        Now compiles on more K&R compilers
                   27760:        [07ab1d3231c7]
                   27761: 
                   27762:        * putenv.c:
                   27763:        BSD-style copyright, cosmetic changes
                   27764:        [c42371295881]
                   27765: 
                   27766:        * pathnames.h.in:
                   27767:        BSD-style copyright
                   27768:        [e5c34ebd4cf1]
                   27769: 
                   27770:        * parse.c, parse.h, parse.lex, parse.yacc:
                   27771:        BSD-style copyright. Move parser-specific defines and structs into
                   27772:        parse.h + other cosmetic changes
                   27773:        [d3088efb6228]
                   27774: 
                   27775:        * logging.h:
                   27776:        defines for logging routines
                   27777:        [13147941c02d]
                   27778: 
                   27779:        * find_path.c, getspwuid.c, goodpath.c, interfaces.c:
                   27780:        BSD-style copyright, cosmetic changes
                   27781:        [e8205e91a4fa]
                   27782: 
                   27783:        * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   27784:        interfaces.h:
                   27785:        BSD-style copyright
                   27786:        [b9499da7cdce]
                   27787: 
                   27788:        * configure.in:
                   27789:        o tgetpass.c is no longer optional o kill DCE_OBJS, add AUTH_OBJS o
                   27790:        kill --disable-tgetpass o add --without-passwd o changes to fill in
                   27791:        AUTH_OBJS for new auth api o check for strerror(), v?snprintf() and
                   27792:        v?asprintf() o replace --with-AuthSRV with --with-fwtk
                   27793:        [9a3f39b9c128]
                   27794: 
                   27795:        * config.h.in:
                   27796:        BSD-style copyright. Remove USE_GETPASS and HAVE_UTIME_NULL. Add
                   27797:        HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF, HAVE_VSNPRINTF,
                   27798:        HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and NO_PASSWD
                   27799:        [9a09054db53a]
                   27800: 
                   27801:        * compat.h:
                   27802:        BSD-style copyright; Add S_IFLNK and MIN/MAX id they are missing.
                   27803:        [25509c566975]
                   27804: 
                   27805:        * alloc.c:
                   27806:        BSD-style copyright
                   27807:        [4967be892363]
                   27808: 
                   27809:        * TROUBLESHOOTING:
                   27810:        no more --with-getpass
                   27811:        [afd5b670c196]
                   27812: 
                   27813:        * TODO:
                   27814:        Take out things I've done...
                   27815:        [375420c8270e]
                   27816: 
                   27817:        * README:
                   27818:        Refer to LICENSE
                   27819:        [c486c8db30f6]
                   27820: 
                   27821:        * PORTING:
                   27822:        --with-getpass no longer exists
                   27823:        [db48202df1bb]
                   27824: 
                   27825:        * Makefile.in:
                   27826:        BSD-style copyright. Update to reflect reality wrt new files and
                   27827:        new auth modules.
                   27828:        [61a2ca7940fb]
                   27829: 
                   27830:        * INSTALL:
                   27831:        Remove --with-AuthSRV and --disable-tgetpass. Add --with-fwtk and
                   27832:        --without-passwd.
                   27833:        [64e8f9e1c05e]
                   27834: 
                   27835:        * HISTORY:
                   27836:        Update history a bit
                   27837:        [df60c0a871b8]
                   27838: 
                   27839:        * COPYING, LICENSE:
                   27840:        Now distributed under a BSD-style license
                   27841:        [d1a184ccabe1]
                   27842: 
                   27843:        * auth/sudo_auth.c:
                   27844:        o BSD-style copyright o Add support for NO_PASSWD/WITHOUT_PASSWD
                   27845:        options. o skey/opie replaced by rfc1938 code o new struct sudo_user
                   27846:        global
                   27847:        [891b57060868]
                   27848: 
                   27849:        * auth/pam.c, auth/sia.c:
                   27850:        BSD-style copyright and use new log functions
                   27851:        [65c44445ea84]
                   27852: 
                   27853:        * auth/kerb5.c:
                   27854:        o BSD-style copyright o Use new log functiongs o Use asprintf() and
                   27855:        snprintf() where sensible.
                   27856:        [1ff0feaacf95]
                   27857: 
                   27858:        * check.c:
                   27859:        Rewrote all the old sudo 1.1/1.2 code. Timestamp handling is now
                   27860:        done more reasonably--better sanity checks and tty-based stamps are
                   27861:        now done as files in a directory with the same name as the invoking
                   27862:        user, eg. /var/run/sudo/millert/ttyp1. It is not currently possible
                   27863:        to mix tty and non-tty based ticket schemes but this may change in
                   27864:        the future (it requires sudo to use a directory instead of a file in
                   27865:        the non-tty case). Also, ``sudo -k'' now sets the ticket back to
                   27866:        the epoch and ``sudo -K'' really deletes the file. That way you
                   27867:        don't get the lecture again just because you killed your ticket in
                   27868:        .logout. BSD-style copyright now.
                   27869:        [ec3460f85be8]
                   27870: 
                   27871:        * logging.c:
                   27872:        o rewritten logging routines. log_error() now takes printf-style
                   27873:        varargs and log_auth() for the return value of validate(). o BSD-
                   27874:        style copyright
                   27875:        [438292025c4e]
                   27876: 
                   27877:        * auth.c, check_sia.c, dce_pwent.c, secureware.c:
                   27878:        superceded by new auth API
                   27879:        [412060590da7]
                   27880: 
                   27881:        * auth/kerb4.c:
                   27882:        BSD-style copyright
                   27883:        [cc4e800833c7]
                   27884: 
                   27885:        * auth/fwtk.c:
                   27886:        Use snprintf() where it makes sense and add a BSD-style copyright
                   27887:        [1b7502388a74]
                   27888: 
                   27889:        * auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/passwd.c,
                   27890:        auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sudo_auth.h:
                   27891:        BSD-style copyright
                   27892:        [42583bedae5c]
                   27893: 
                   27894:        * emul/utime.h, utime.c:
                   27895:        BSD-style copyright
                   27896:        [3985c90aba47]
                   27897: 
                   27898:        * emul/search.h:
                   27899:        this has been rewritten so use my BSD-style copyright
                   27900:        [176df1b0de6f]
                   27901: 
                   27902: 1999-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27903: 
                   27904:        * snprintf.c:
                   27905:        include malloc.h if no stdlib.h
                   27906:        [7b123f1d1d03]
                   27907: 
                   27908:        * snprintf.c:
                   27909:        KTH snprintf()/asprintf() for systems w/o them
                   27910:        [3ca9aefb9d01]
                   27911: 
                   27912:        * strerror.c:
                   27913:        strerror() for systems w/o it
                   27914:        [7f0bd8a1c1b4]
                   27915: 
                   27916: 1999-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27917: 
                   27918:        * visudo.c:
                   27919:        stylistic changes
                   27920:        [6f99aceb7170]
                   27921: 
                   27922:        * parse.c, parse.lex, parse.yacc:
                   27923:        Add contribution info in the main comment
                   27924:        [e50cec10acd6]
                   27925: 
                   27926: 1999-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27927: 
                   27928:        * auth/pam.c:
                   27929:        remove missed ref to PAM_nullpw
                   27930:        [a43e59692cdb]
                   27931: 
                   27932:        * auth/sudo_auth.h:
                   27933:        pasto
                   27934:        [891ff138ab89]
                   27935: 
                   27936:        * auth/kerb5.c:
                   27937:        more or less complete now--still untested
                   27938:        [21036732faa0]
                   27939: 
                   27940:        * auth/afs.c, auth/pam.c:
                   27941:        don't use user_name macro, it will go away
                   27942:        [def7cf727349]
                   27943: 
                   27944:        * auth/opie.c, auth/rfc1938.c, auth/skey.c, auth/sudo_auth.h:
                   27945:        combine skey/opie code into rfc1938.c
                   27946:        [44d88ca93d3e]
                   27947: 
                   27948:        * auth/dce.c, auth/sudo_auth.h:
                   27949:        DCE authentication method; basically unchanged from dce_pwent.c
                   27950:        [4d468473dd6f]
                   27951: 
                   27952:        * auth/aix_auth.c, auth/sudo_auth.h:
                   27953:        AIX authenticate() support. Could probably be much better
                   27954:        [000013321a33]
                   27955: 
                   27956:        * auth/sia.c:
                   27957:        Fix an uninitialized variable and some cleanup. Now works (tested)
                   27958:        [fd6ad88ff055]
                   27959: 
                   27960:        * auth/sia.c, auth/sudo_auth.h:
                   27961:        SIA support for digital unix
                   27962:        [5335f3e70eab]
                   27963: 
                   27964:        * auth/pam.c:
                   27965:        don't use prompt global, it will go away
                   27966:        [fadd22dd6ce4]
                   27967: 
                   27968:        * auth/secureware.c:
                   27969:        correct copyright years
                   27970:        [6aa07c49f51b]
                   27971: 
                   27972:        * auth/afs.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/opie.c,
                   27973:        auth/pam.c, auth/passwd.c, auth/secureware.c, auth/securid.c,
                   27974:        auth/skey.c, auth/sudo_auth.c, auth/sudo_auth.h:
                   27975:        New authentication API and methods
                   27976:        [9debe9b59c79]
                   27977: 
                   27978: 1999-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   27979: 
                   27980:        * sudo.tab.c:
                   27981:        regen
                   27982:        [84578e82c1a6]
                   27983: 
                   27984:        * parse.yacc:
                   27985:        only save an entry if user_matches && host_matches, even if the
                   27986:        stack is empty (fix for previous commit)
                   27987:        [00984b078d8a]
                   27988: 
                   27989:        * sudo.tab.c:
                   27990:        regen
                   27991:        [66acf160b4b7]
                   27992: 
                   27993:        * parse.yacc:
                   27994:        1) Always save an entry on the stack if it is empty. This fixes the
                   27995:        -l and -v flags that were broken by earlier parser changes.
                   27996: 
                   27997:        2) In a Runas list, don't negate FALSE -> TRUE since that would make
                   27998:        !foo match any time the user specified a runas user (via -u) other
                   27999:        than foo.
                   28000:        [f322eb54b015]
                   28001: 
                   28002:        * testsudoers.c:
                   28003:        interfaces and num_interfaces are now auto, not extern
                   28004:        [113add5c6518]
                   28005: 
                   28006: 1999-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28007: 
                   28008:        * auth.c:
                   28009:        use a static global to keep stae about empty passwords
                   28010:        [bc02e30807d8]
                   28011: 
                   28012:        * check_sia.c:
                   28013:        make PASSWORD_NOT_CORRECT logging consistent with other modules
                   28014:        [21962549d5fd]
                   28015: 
                   28016: 1999-07-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28017: 
                   28018:        * auth.c:
                   28019:        PAM prompt code was wrong, looks like we have to kludge it after
                   28020:        all.
                   28021:        [91f246155ead]
                   28022: 
                   28023:        * auth.c:
                   28024:        In the PAM code, when a user hits return at the first password
                   28025:        prompt, exit without a warning just like the normal auth code
                   28026:        [918f59bacdb7]
                   28027: 
                   28028:        * configure, configure.in:
                   28029:        kludge around cross-compiler false positives
                   28030:        [5e5fc8356400]
                   28031: 
                   28032:        * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c:
                   28033:        New (correct) PAM code Tgetpass now takes an echo flag for use with
                   28034:        PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
                   28035:        useless umask setting Change error from BAD_ALLOCATION ->
                   28036:        BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to auth.c
                   28037:        for consistency
                   28038:        [e71397f09dd8]
                   28039: 
                   28040:        * sudo.c:
                   28041:        Some -Wall and kill some trailing spaces
                   28042:        [8229b43d5c4e]
                   28043: 
                   28044:        * configure.in:
                   28045:        define -D__EXTENSIONS__ for solaris so we get crypt() proto
                   28046:        [7533e4436cab]
                   28047: 
                   28048: 1999-06-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28049: 
                   28050:        * RUNSON:
                   28051:        add Dynix 4.4.4
                   28052:        [b69f773efbce]
                   28053: 
                   28054:        * INSTALL, config.h.in, configure, configure.in:
                   28055:        for kerberos V < version, fall back on old kerb4 auth code
                   28056:        [d685ed3a1d8e]
                   28057: 
                   28058:        * INSTALL:
                   28059:        clarify some things
                   28060:        [2f5ba2e8e53a]
                   28061: 
                   28062:        * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod:
                   28063:        typos
                   28064:        [8925a109c093]
                   28065: 
                   28066: 1999-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28067: 
                   28068:        * sudo.c:
                   28069:        mention why DONT_LEAK_PATH_INFO is not the default
                   28070:        [0346260cb4ec]
                   28071: 
                   28072: 1999-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28073: 
                   28074:        * tgetpass.c:
                   28075:        Fix open(2) return value checking, was NULL for fopen, should be -1
                   28076:        for open
                   28077:        [355878bf6d8a]
                   28078: 
                   28079:        * configure:
                   28080:        regen
                   28081:        [68bf82871862]
                   28082: 
                   28083:        * configure.in:
                   28084:        better wording for solaris pam notice
                   28085:        [04e88c7a6c42]
                   28086: 
                   28087:        * CHANGES:
                   28088:        document recent changes
                   28089:        [7c922c5622ef]
                   28090: 
                   28091:        * TROUBLESHOOTING:
                   28092:        Update shadow password section
                   28093:        [e8448bae7d66]
                   28094: 
                   28095:        * auth.c:
                   28096:        move authentication code from check.c to auth.c
                   28097:        [e9f6ecae2399]
                   28098: 
                   28099:        * Makefile.in, check.c, sudo.h:
                   28100:        move authentication code to auth.c
                   28101:        [124cded85f46]
                   28102: 
                   28103: 1999-05-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28104: 
                   28105:        * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
                   28106:        getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
                   28107:        logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
                   28108:        sudo.h, sudo.tab.c, sudo_setenv.c, testsudoers.c, tgetpass.c,
                   28109:        visudo.c:
                   28110:        Move interface-related defines to interfaces.h so we don't have to
                   28111:        include <netinet/in.h> everywhere.
                   28112:        [e7599d8ea0bf]
                   28113: 
                   28114: 1999-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28115: 
                   28116:        * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c, logging.c,
                   28117:        parse.yacc, sudo.c, sudo.tab.c, tgetpass.c:
                   28118:        o Replace _PASSWD_LEN braindeath with our own SUDO_MAX_PASS. It
                   28119:        turns out the old DES crypt does the right thing with passwords
                   28120:        longert than 8 characters. o Fix common typo (necesary ->
                   28121:        necessary) o Update TODO list
                   28122:        [ad75007a6f13]
                   28123: 
                   28124: 1999-05-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28125: 
                   28126:        * sudo.c:
                   28127:        set $LOGNAME when we set $USER
                   28128:        [391596210fd7]
                   28129: 
                   28130: 1999-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28131: 
                   28132:        * INSTALL:
                   28133:        add comment about digital unix and interfaces.c warning with gcc
                   28134:        [e20f815901cc]
                   28135: 
                   28136: 1999-04-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28137: 
                   28138:        * sample.sudoers:
                   28139:        use modern paths and give examples for some of the new parser
                   28140:        features
                   28141:        [e7b2e507c695]
                   28142: 
                   28143: 1999-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28144: 
                   28145:        * parse.c:
                   28146:        fix comment
                   28147:        [5eb0d005a65f]
                   28148: 
                   28149:        * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
                   28150:        getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c, parse.c,
                   28151:        parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c, sudo.tab.c,
                   28152:        sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   28153:        Function names should be flush with the start of the line so they
                   28154:        can be found trivially in an editor and with grep
                   28155:        [3c400abde574]
                   28156: 
                   28157:        * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex, parse.yacc,
                   28158:        sudo.c, sudo.tab.c, testsudoers.c, tgetpass.c, visudo.c:
                   28159:        free(3) is already void, no need to cast it
                   28160:        [6981e1ebda0f]
                   28161: 
                   28162:        * logging.c, sudo.c, sudo.h:
                   28163:        catch case where cmnd_safe is not set (this should not be possible)
                   28164:        [3e1e3038546c]
                   28165: 
                   28166:        * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c,
                   28167:        testsudoers.c, visudo.c:
                   28168:        Stash the "safe" path (ie: the one listed in sudoers) to the command
                   28169:        instead of stashing the struct stat. Should be safer.
                   28170:        [aa2883fcf57e]
                   28171: 
                   28172: 1999-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28173: 
                   28174:        * INSTALL, Makefile.in, UPGRADE:
                   28175:        notes on updating from an earlier release
                   28176:        [df9fffa4ab2c]
                   28177: 
                   28178:        * CHANGES:
                   28179:        updated
                   28180:        [574f5065d15a]
                   28181: 
                   28182: 1999-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28183: 
                   28184:        * parse.yacc, sudo.tab.c, sudo.tab.h, sudoers.cat, sudoers.html,
                   28185:        sudoers.man, sudoers.pod:
                   28186:        You can now specifiy a host list instead of just a host or alias.
                   28187:        Ie: user = host1,host2,ALIAS,!host3 my_command now works.
                   28188:        [e3942bb78021]
                   28189: 
                   28190:        * testsudoers.c:
                   28191:        Quiet -Wall
                   28192:        [a3edc8b08c3a]
                   28193: 
                   28194:        * parse.yacc, sudo.tab.c:
                   28195:        Move the push from the beginning of cmndspec to the end. This means
                   28196:        we no longer have to do a push at the end of privilege, just reset
                   28197:        some values.
                   28198:        [8ea66e5860c6]
                   28199: 
                   28200:        * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod:
                   28201:        runas-lists and NOPASSWD/PASSWD modifiers are now sticky and you can
                   28202:        use "!" most everywhere
                   28203:        [aadae4d1c9d5]
                   28204: 
                   28205: 1999-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28206: 
                   28207:        * sudoers.pod:
                   28208:        modernize paths and update su example based on sample.sudoers one
                   28209:        [3f6a37e16c83]
                   28210: 
                   28211:        * sample.sudoers:
                   28212:        New runas semantics
                   28213:        [756ee92865b7]
                   28214: 
                   28215:        * CHANGES, Makefile.in, alloc.c, config.h.in, configure, configure.in,
                   28216:        strdup.c, sudo.h:
                   28217:        In estrdup(), do the malloc ourselves so we don't need to rely on
                   28218:        the system strdup(3) which may or may not exist. There is now no
                   28219:        need to provide strdup() for those w/o it. Also, the prototype for
                   28220:        estrdup() was wrong, it returns char * and its param is const.
                   28221:        [5f1f984da8e3]
                   28222: 
                   28223:        * getcwd.c:
                   28224:        $Sudo tag
                   28225:        [e4188a35e68c]
                   28226: 
                   28227:        * check.c:
                   28228:        buf should be prompt; Michael Robokoff <mrobo@networkcs.com>
                   28229:        [2aec87c86cde]
                   28230: 
                   28231:        * CHANGES, TODO, parse.yacc, sudo.tab.c:
                   28232:        It is now possible to use the '!' operator in a runas list as well
                   28233:        as in a Cmnd_Alias, Host_Alias and User_Alias.
                   28234:        [a4fdaabda990]
                   28235: 
                   28236:        * logging.c, sudo.h:
                   28237:        Kill GLOBAL_NO_SPW_ENT (not used) and crank GLOBAL_PROBLEM
                   28238:        [73d0376785ae]
                   28239: 
                   28240:        * sudo.h:
                   28241:        Definitions of *_matched were wrong--user top, not top-2 as
                   28242:        subscript.
                   28243:        [5f8350a57362]
                   28244: 
                   28245:        * logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c:
                   28246:        Add VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
                   28247:        command but the NOPASSWD flag was set. Make runasspec, runaslist,
                   28248:        runasuser, and nopasswd typeless in parse.yacc Add support for '!'
                   28249:        in the runas list Fix double printing of '%' and '+' for groups and
                   28250:        netgroups respectively Add *_matched macros (no need for local stack
                   28251:        variable). Should only be used directly after a pop (since top must
                   28252:        be >= 2).
                   28253:        [392b1400c4e6]
                   28254: 
                   28255:        * aclocal.m4, configure.in:
                   28256:        Add copyright, somewhat silly
                   28257:        [55c2cdd82dca]
                   28258: 
                   28259: 1999-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28260: 
                   28261:        * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c, check_sia.c,
                   28262:        compat.h, config.h.in, configure, configure.in, dce_pwent.c,
                   28263:        emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
                   28264:        ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
                   28265:        lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
                   28266:        putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
                   28267:        sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat, sudoers.man,
                   28268:        testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c, visudo.cat,
                   28269:        visudo.man:
                   28270:        Crank version to 1.6 and combine copyright statements
                   28271:        [0e1c791658ae]
                   28272: 
                   28273:        * sample.sudoers:
                   28274:        Use ! not ^ to do negation
                   28275:        [1480a0761730]
                   28276: 
                   28277:        * lex.yy.c, sudo.tab.c:
                   28278:        regen
                   28279:        [89ca5a46684b]
                   28280: 
                   28281:        * parse.lex, parse.yacc:
                   28282:        Make runas and NOPASSWD tags persistent across entris in a command
                   28283:        list. Add a PASSWD tag to reverse NOPASSWD. When you override a
                   28284:        runas or *PASSWD tag the value given becomes the new default for the
                   28285:        rest of the command list.
                   28286:        [f1bbb4066542]
                   28287: 
                   28288: 1999-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28289: 
                   28290:        * CHANGES, RUNSON:
                   28291:        update for 1.5.9
                   28292:        [a1ae9d4a7d54] [SUDO_1_5_9]
                   28293: 
                   28294:        * visudo.c:
                   28295:        Shift return value of system(3) by 8 to get real exit value and if
                   28296:        it is not 1 or 0 print the retval along with the error message.
                   28297:        [c1ff50d743fb]
                   28298: 
                   28299: 1999-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28300: 
                   28301:        * Makefile.in:
                   28302:        testsudoers needs LIBOBJS too
                   28303:        [972571b4e4bf]
                   28304: 
                   28305:        * parse.c, parse.yacc, sudo.tab.c:
                   28306:        Fix another parser bug. For a sudoers entry like this: millert
                   28307:        ALL=/bin/ls,(daemon) !/bin/ls sudo would not allow millert to run ls
                   28308:        as root.
                   28309:        [51968e1eb33d]
                   28310: 
                   28311:        * CHANGES:
                   28312:        new change
                   28313:        [271c6110bb62]
                   28314: 
                   28315:        * parse.yacc, sudo.tab.c:
                   28316:        Save entries that match a ! command on the matching stack too
                   28317:        [5afb5107116c]
                   28318: 
                   28319:        * sudo.c:
                   28320:        Make sudo's usage info better when mutually exclusive args are given
                   28321:        and don't rely on argument order to detect this; nick@zeta.org.au
                   28322:        [2422753c88fd]
                   28323: 
                   28324: 1999-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28325: 
                   28326:        * CHANGES, Makefile.in, RUNSON:
                   28327:        updates from CU
                   28328:        [b37381e3dafb]
                   28329: 
                   28330:        * Makefile.in:
                   28331:        use gzip
                   28332:        [94a64e52a166]
                   28333: 
                   28334:        * parse.yacc, sudo.tab.c:
                   28335:        Fix off by one error introduced in *alloc changes
                   28336:        [95ede581153a]
                   28337: 
                   28338:        * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
                   28339:        check_sia.c, compat.h, config.h.in, configure, configure.in,
                   28340:        dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c,
                   28341:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   28342:        interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
                   28343:        pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat,
                   28344:        sudo.h, sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat,
                   28345:        sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
                   28346:        visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod:
                   28347:        ++version
                   28348:        [c6d88f024e37]
                   28349: 
                   28350:        * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
                   28351:        interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
                   28352:        putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo.tab.c,
                   28353:        sudo_setenv.c, testsudoers.c, utime.c, visudo.c:
                   28354:        Use emalloc/erealloc/estrdup
                   28355:        [44221d97361a]
                   28356: 
                   28357:        * alloc.c:
                   28358:        error checking memory allocation routines
                   28359:        [5f8c1e7bbc71]
                   28360: 
                   28361:        * parse.yacc, sudo.tab.c:
                   28362:        Still not right, this fixes it for real
                   28363:        [ad553b6f5339]
                   28364: 
                   28365:        * parse.yacc, sudo.tab.c:
                   28366:        Fix for previous commit
                   28367:        [4d6f989f9bf2]
                   28368: 
                   28369:        * CHANGES, INSTALL, parse.yacc:
                   28370:        Fix a parser bug that was exposed when mixing different runas specs
                   28371:        and ! commands. For example: millert ALL=(daemon)
                   28372:        /usr/bin/whoami,!/bin/ls would allow millert to run whoami as root
                   28373:        as well as daemon when it should just allow daemon. The problem was
                   28374:        that comma-separated commands in a list shared the same entry on the
                   28375:        matching stack. Now they get their own entry iff there is a full
                   28376:        match. It may be better to just make the runas spec persistent
                   28377:        across all commands in a list like the user and host entries of the
                   28378:        matching stack. However, since that is a fairly major change it
                   28379:        should gets its own minor rev increase.
                   28380:        [c4b939cdcc8e]
                   28381: 
                   28382: 1999-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28383: 
                   28384:        * check.c, config.h.in:
                   28385:        Simplify PAM code and fix a PAM-related warning on Linux
                   28386:        [2468399523b6]
                   28387: 
                   28388: 1999-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28389: 
                   28390:        * CHANGES:
                   28391:        updates
                   28392:        [29d4a997769c]
                   28393: 
                   28394:        * sample.sudoers:
                   28395:        better su entry
                   28396:        [76d8285a72ba]
                   28397: 
                   28398:        * configure:
                   28399:        regen
                   28400:        [b7450cc6975d]
                   28401: 
                   28402:        * check.c, configure.in:
                   28403:        new pam code that works on solaris, should work on linux too;
                   28404:        aelberg@home.com
                   28405:        [84c16c0ff259]
                   28406: 
                   28407: 1999-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28408: 
                   28409:        * RUNSON:
                   28410:        more entries
                   28411:        [b6bef8660759]
                   28412: 
                   28413:        * config.h.in:
                   28414:        only include strings.h if there is no string.h
                   28415:        [b66054a32b00]
                   28416: 
                   28417: 1999-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28418: 
                   28419:        * config.guess:
                   28420:        Sinix is now being called ReliantUNIX; bjjackso@us.oracle.com
                   28421:        [c086d2fe63af]
                   28422: 
                   28423: 1999-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28424: 
                   28425:        * sudo.c:
                   28426:        shost must be set before log functions are called #ifdef HOST_IN_LOG
                   28427:        [d49a7944358f]
                   28428: 
                   28429: 1999-03-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28430: 
                   28431:        * CHANGES, lex.yy.c, parse.lex:
                   28432:        Fix a bug wrt quoting characters in command args. Stop processing
                   28433:        an arg when you hit a backslash so the quoted-character detection
                   28434:        can catch it.
                   28435:        [2281438d7f41]
                   28436: 
                   28437: 1999-02-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28438: 
                   28439:        * interfaces.c:
                   28440:        include sys/time.h; aparently AIX needs it. ppz@cdu.elektra.ru
                   28441:        [31118a9e9916]
                   28442: 
                   28443: 1999-02-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28444: 
                   28445:        * configure, configure.in:
                   28446:        add missing case statement so --without-sendmail works
                   28447:        [ca25614f7dd9]
                   28448: 
                   28449: 1999-02-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28450: 
                   28451:        * CHANGES:
                   28452:        more
                   28453:        [4d70e44f7f93]
                   28454: 
                   28455: 1999-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28456: 
                   28457:        * configure, configure.in:
                   28458:        only search for -lsun in irix <= 4.x
                   28459:        [e604238317b1]
                   28460: 
                   28461:        * configure, configure.in:
                   28462:        back out last configure.in change now that I've hacked autoconf to
                   28463:        fix the real problem and add a missing newline
                   28464:        [2dabf59a79b5]
                   28465: 
                   28466:        * CHANGES:
                   28467:        updated
                   28468:        [bb35d526552f]
                   28469: 
                   28470:        * getcwd.c:
                   28471:        add def of dirfd() for those without it
                   28472:        [95f0173d8441]
                   28473: 
                   28474:        * configure, configure.in:
                   28475:        When falling back to checking for socket() when linking with
                   28476:        "-lsocket -lnsl" check for main() instead since autoconf has already
                   28477:        cached the results of checking for socket() in -lsocket. This is
                   28478:        really an autoconf bug as it should use the extra libs as part of
                   28479:        the cache variable name.
                   28480:        [a845f8b710ad]
                   28481: 
                   28482:        * configure.in:
                   28483:        typo
                   28484:        [a7d62f62a478]
                   28485: 
                   28486: 1999-02-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28487: 
                   28488:        * configure.in:
                   28489:        fix occurrence of $with_timeout that should be
                   28490:        $with_password_timeout; Michael.Neef@neuroinformatik.ruhr-uni-
                   28491:        bochum.de
                   28492:        [8c4da2cf73d1]
                   28493: 
                   28494: 1999-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28495: 
                   28496:        * sudo.cat, sudo.html, sudo.man, sudo.pod:
                   28497:        fix grammar; espie@openbsd.org
                   28498:        [7031d9dfbc3e] [SUDO_1_5_8]
                   28499: 
                   28500: 1999-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28501: 
                   28502:        * parse.yacc, sudo.c, testsudoers.c:
                   28503:        add cast for strdup in places it does not have it
                   28504:        [7ce4478d3b0f]
                   28505: 
                   28506: 1999-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28507: 
                   28508:        * configure, configure.in:
                   28509:        define for_BSD_TYPES irix
                   28510:        [858337ff4af8]
                   28511: 
                   28512: 1999-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28513: 
                   28514:        * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod:
                   28515:        Make it clear that it is the user's password, not root's, that we
                   28516:        want.
                   28517:        [ae0f51b35ee4]
                   28518: 
                   28519:        * check.c, sudo.h:
                   28520:        If the user enters an empty password and really has no password,
                   28521:        accept the empty password they entered. Perviously, they could
                   28522:        enter anything
                   28523:        *but* an empty password. Also, add GETPASS macro that calls either
                   28524:        tgetpass() or getpass() depending on how sudo was configured.
                   28525:        Problem noted by jdg@maths.qmw.ac.uk
                   28526:        [2fde21ce94c1]
                   28527: 
                   28528: 1999-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28529: 
                   28530:        * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
                   28531:        dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c,
                   28532:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   28533:        interfaces.c, logging.c, parse.c, parse.lex, parse.yacc,
                   28534:        pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
                   28535:        sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
                   28536:        visudo.c:
                   28537:        add explicate copyright
                   28538:        [d3b4449834a5]
                   28539: 
                   28540:        * CHANGES:
                   28541:        mention -lsocket, -lnsl configure changes
                   28542:        [9140af4ad8ae]
                   28543: 
                   28544: 1999-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28545: 
                   28546:        * sudo.c:
                   28547:        Don't clobber errno after calling check_sudoers().
                   28548:        [59bd581b2654]
                   28549: 
                   28550: 1999-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28551: 
                   28552:        * configure, configure.in:
                   28553:        When linking with both -lsocket and -lnsl be sure to do so in that
                   28554:        order. Also, when we can't find socket() or inet_addr() and have to
                   28555:        try linking with both libs, issue a warning.
                   28556:        [0ee547163067]
                   28557: 
                   28558:        * sudo.cat, sudo.man, sudo.pod:
                   28559:        clarify bad timestamp and fmt
                   28560:        [70e42cf56c75]
                   28561: 
                   28562: 1999-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28563: 
                   28564:        * INSTALL, RUNSON:
                   28565:        be clear that pam is linux-only and add a RUNSON entry
                   28566:        [7fdeab875e0d]
                   28567: 
                   28568: 1999-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28569: 
                   28570:        * CHANGES, INSTALL, configure, configure.in:
                   28571:        fix and correctly document --with-umask; problem noted by
                   28572:        adap@adap.org
                   28573:        [11cd0481d63a]
                   28574: 
                   28575: 1999-01-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28576: 
                   28577:        * configure, configure.in:
                   28578:        only use /usr/{man,catman}/local to store man pages if suer didn't
                   28579:        override prefix or mandir
                   28580:        [781ad2cbe9be]
                   28581: 
                   28582:        * INSTALL, configure, configure.in:
                   28583:        fix typo, make --with-SecurID take an arg
                   28584:        [026a9b4014fc]
                   28585: 
                   28586: 1999-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28587: 
                   28588:        * RUNSON:
                   28589:        updates from users
                   28590:        [2286982b31e6]
                   28591: 
                   28592:        * CHANGES, INSTALL, check.c, configure, configure.in:
                   28593:        FWTK 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
                   28594:        [23aa4e5c6b02]
                   28595: 
                   28596:        * configure, configure.in:
                   28597:        better fix for the problem of unresolved symbols in -lnsl or
                   28598:        -lsocket
                   28599:        [82fe70fc287f]
                   28600: 
                   28601:        * configure, configure.in:
                   28602:        when checking for functions in -lnsl and -lsocket link with both of
                   28603:        them to avoid unresolved symbols on some weirdo systems
                   28604:        [1734a591808e]
                   28605: 
                   28606: 1999-01-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28607: 
                   28608:        * BUGS, CHANGES, RUNSON, TODO:
                   28609:        old changes that didn't make it into RCS before the RCS->CVS switch
                   28610:        [846eb2b8f9aa]
                   28611: 
                   28612: 1999-01-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28613: 
                   28614:        * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
                   28615:        configure.in, dce_pwent.c, emul/search.h, emul/utime.h, find_path.c,
                   28616:        getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
                   28617:        ins_goons.h, insults.h, interfaces.c, lex.yy.c, logging.c,
                   28618:        lsearch.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
                   28619:        secureware.c, strdup.c, sudo.c, sudo.pod, sudo_setenv.c,
                   28620:        sudoers.pod, testsudoers.c, tgetpass.c, utime.c, visudo.c,
                   28621:        visudo.pod:
                   28622:        add sudo tags
                   28623:        [962f81eaa5ab]
                   28624: 
                   28625:        * sudo.h:
                   28626:        testing Sudo tag
                   28627:        [e84cbc521129]
                   28628: 
                   28629:        * version.h:
                   28630:        testing Sudo tag
                   28631:        [a8c3a3998b88]
                   28632: 
                   28633:        * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c, compat.h,
                   28634:        config.h.in, configure, configure.in, dce_pwent.c, emul/utime.h,
                   28635:        find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
                   28636:        ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
                   28637:        logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
                   28638:        secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h, sudo.man,
                   28639:        sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c, tgetpass.c,
                   28640:        utime.c, version.h, visudo.c, visudo.cat, visudo.man:
                   28641:        crank version and regen files
                   28642:        [23eacf00a1a4]
                   28643: 
                   28644:        * Makefile.in:
                   28645:        kill rcs goop in update_version and fix now that version is a const
                   28646:        [e6e50bd8d1e1]
                   28647: 
                   28648:        * INSTALL, check.c, config.h.in, configure, configure.in, logging.c,
                   28649:        sudo.c, sudo.h, sudo.pod:
                   28650:        kerb5 support from fcusack@iconnet.net
                   28651:        [8134027986e2]
                   28652: 
                   28653:        * realpath.c, sudo_realpath.c:
                   28654:        we no longer use realpath
                   28655:        [0f5f64abc646]
                   28656: 
                   28657:        * qualify.c:
                   28658:        replaced by find_path.c
                   28659:        [9e32a87e09c4]
                   28660: 
                   28661:        * options.h:
                   28662:        all options are now configure flags
                   28663:        [ee6bd9610102]
                   28664: 
                   28665:        * lex.yy.c:
                   28666:        regen
                   28667:        [bdbf8a18161f]
                   28668: 
                   28669:        * getwd.c:
                   28670:        superceded by getcwd.c
                   28671:        [1e54ee0990b4]
                   28672: 
                   28673:        * getpass.c:
                   28674:        superceded by tgetpass.c
                   28675:        [4e0d1edc30e3]
                   28676: 
                   28677:        * SUPPORTED:
                   28678:        superceded by RUNSON
                   28679:        [854c5a21cb53]
                   28680: 
                   28681:        * OPTIONS:
                   28682:        No longer used now that we have configure options for everything.
                   28683:        [9b1ae1c89259]
                   28684: 
                   28685:        * configure:
                   28686:        regen based on configure.in
                   28687:        [3a4d73936973]
                   28688: 
                   28689:        * sudo.cat, sudo.html, sudo.man, sudoers.cat, sudoers.html,
                   28690:        sudoers.man, visudo.cat, visudo.html, visudo.man:
                   28691:        regen based on sudo.pod, sudoers.pod, and visudo.pod
                   28692:        [c267beb90778]
                   28693: 
                   28694: 1998-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28695: 
                   28696:        * check.c:
                   28697:        fix tty tickets in remove_timestamp (didn't use ':')
                   28698:        [fd964a74a32b]
                   28699: 
                   28700: 1998-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28701: 
                   28702:        * interfaces.c:
                   28703:        close sock when we are done with it
                   28704:        [95de0380f8a4]
                   28705: 
                   28706: 1998-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28707: 
                   28708:        * parse.yacc:
                   28709:        never say "error on line -1"
                   28710:        [361db1491121]
                   28711: 
                   28712: 1998-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28713: 
                   28714:        * configure.in:
                   28715:        check for -lnsl before -lsocket
                   28716:        [8e966d6bbcb5]
                   28717: 
                   28718:        * configure.in:
                   28719:        quote '[', ']' used in ranges correctly
                   28720:        [fa4f9c6ff651]
                   28721: 
                   28722: 1998-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28723: 
                   28724:        * config.h.in:
                   28725:        add missing NO_ROOT_SUDO noted by drno@tsd.edu
                   28726:        [c969f25d1667]
                   28727: 
                   28728: 1998-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28729: 
                   28730:        * version.h:
                   28731:        1.5.7
                   28732:        [7a22de0bc148]
                   28733: 
                   28734:        * INSTALL:
                   28735:        more info for 1.5.7
                   28736:        [30ad9e784799]
                   28737: 
                   28738:        * README:
                   28739:        update for 1.5.7
                   28740:        [cd03a0a27cd2]
                   28741: 
                   28742:        * parse.yacc:
                   28743:        make increases of cm_list_size and ga_list_size be similar to
                   28744:        increases of stacksize (ie: >= not > in initial compare).
                   28745:        [6bd450a896c7]
                   28746: 
                   28747:        * parse.yacc:
                   28748:        when we get a syntax error, report it for the previous line since
                   28749:        that's generally where the error occurred.
                   28750:        [c4ac84058f0b]
                   28751: 
                   28752: 1998-11-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28753: 
                   28754:        * config.h.in, configure.in, interfaces.c:
                   28755:        add back check for sys/sockio.h but only use it if SIOCGIFCONF is
                   28756:        not defined
                   28757:        [d197f31fd1e4] [SUDO_1_5_7]
                   28758: 
                   28759:        * config.h.in:
                   28760:        define BSD_COMP for svr4
                   28761:        [87ac1147ff79]
                   28762: 
                   28763:        * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
                   28764:        goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex,
                   28765:        parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c,
                   28766:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   28767:        more -Wall
                   28768:        [d98e2d32db2a]
                   28769: 
                   28770:        * configure.in:
                   28771:        kill check for sockio,h
                   28772:        [4399779014c1]
                   28773: 
                   28774:        * config.h.in:
                   28775:        no more HAVE_SYS_SOCKIO_H
                   28776:        [67484528e347]
                   28777: 
                   28778:        * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
                   28779:        goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex,
                   28780:        parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c,
                   28781:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   28782:        -Wall
                   28783:        [2b7e83976788]
                   28784: 
                   28785: 1998-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28786: 
                   28787:        * sudo.c:
                   28788:        add missing inform_user()
                   28789:        [8689528c6d55]
                   28790: 
                   28791: 1998-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28792: 
                   28793:        * find_path.c:
                   28794:        return NOT_FOUND if given fully qualified path and it does not exist
                   28795:        previously it would perror(ENOENT) which bypasses the option to not
                   28796:        leak path info
                   28797:        [ccbc3d0130ae]
                   28798: 
                   28799:        * configure.in:
                   28800:        for kerb5, check for -lkerb4, fall back on -lkrb for kerb, check for
                   28801:        -ldes
                   28802:        [c77d3b484ece]
                   28803: 
                   28804: 1998-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28805: 
                   28806:        * INSTALL:
                   28807:        tty tickets are user:tty now
                   28808:        [a53a303a614d]
                   28809: 
                   28810:        * check.c:
                   28811:        when using tty tickets make it user:tty not user.tty as a username
                   28812:        could have a '.' in it
                   28813:        [3160b3f5c890]
                   28814: 
                   28815: 1998-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28816: 
                   28817:        * sudo.c:
                   28818:        add "ignoring foo found in ." for auth successful case
                   28819:        [24257169e0bd]
                   28820: 
                   28821: 1998-11-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28822: 
                   28823:        * sudo.c:
                   28824:        add missing printf param
                   28825:        [8c905124f777]
                   28826: 
                   28827: 1998-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28828: 
                   28829:        * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
                   28830:        go back to printing "command not found" unless --disable-path-info
                   28831:        specified. Also, tell user when we ignore '.' in their path and it
                   28832:        would have been used but for --with-ignore-dot.
                   28833:        [066e118c11e4]
                   28834: 
                   28835:        * check.c, sudo.c:
                   28836:        Only one space after a colon, not two, in printf's
                   28837:        [38452f4c8007]
                   28838: 
                   28839: 1998-11-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28840: 
                   28841:        * sudo.pod:
                   28842:        document setting $USER
                   28843:        [80557fe6aede]
                   28844: 
                   28845:        * check.c:
                   28846:        fix bugs with prompt expansion
                   28847:        [44c4fca5f009]
                   28848: 
                   28849:        * sudo.c:
                   28850:        set $USER for root too
                   28851:        [4b525e1c6269]
                   28852: 
                   28853: 1998-11-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28854: 
                   28855:        * getspwuid.c:
                   28856:        typo
                   28857:        [5107446f43e0]
                   28858: 
                   28859:        * configure.in:
                   28860:        HP-UX's iscomsec is in -lsec, not libc
                   28861:        [03c9f700b795]
                   28862: 
                   28863:        * configure.in:
                   28864:        remove some entries in the OS case statement that did nothing
                   28865:        [ea96e7e0f624]
                   28866: 
                   28867:        * TROUBLESHOOTING:
                   28868:        add "cd" section and flush out syslog section
                   28869:        [5107f7363b78]
                   28870: 
                   28871:        * Makefile.in:
                   28872:        no more sudo-lex.yy.c
                   28873:        [ed50826efbbc]
                   28874: 
                   28875:        * check_sia.c:
                   28876:        add custom prompt support
                   28877:        [6a285cea10b7]
                   28878: 
                   28879:        * testsudoers.c:
                   28880:        kill perror("malloc") since we already have a good error messages
                   28881:        pw_ent -> pw for brevity
                   28882:        [eee31052921e]
                   28883: 
                   28884:        * sudo.c:
                   28885:        kill perror("malloc") since we already have a good error messages
                   28886:        pw_ent -> pw for brevity set $USER if -u specified
                   28887:        [9f3753461f8a]
                   28888: 
                   28889:        * parse.yacc:
                   28890:        kill perror("malloc") since we already have a good error messages
                   28891:        [849459088ac3]
                   28892: 
                   28893:        * parse.c:
                   28894:        kill perror("malloc") since we already have a good error messages
                   28895:        pw_ent -> pw for brevity when checking if %group matches, look up
                   28896:        user in password file so that %groups works in a RunAs spec.
                   28897:        [0489b4ecc59a]
                   28898: 
                   28899:        * logging.c:
                   28900:        kill perror("malloc") since we already have a good error messages
                   28901:        [3191a18b3526]
                   28902: 
                   28903:        * check.c, getspwuid.c, interfaces.c:
                   28904:        kill perror("malloc") since we already have a good error messages
                   28905:        pw_ent -> pw for brevity
                   28906:        [7193fdb38cf9]
                   28907: 
                   28908: 1998-11-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28909: 
                   28910:        * tgetpass.c:
                   28911:        the prompt is expanded before tgetpass is called
                   28912:        [0f408f508041]
                   28913: 
                   28914:        * sudo.h:
                   28915:        tgetpass now has the same args as getpass again
                   28916:        [b6778cd9d79f]
                   28917: 
                   28918:        * getspwuid.c:
                   28919:        add iscomsec, issecure support
                   28920:        [007be7ec7ae7]
                   28921: 
                   28922:        * check.c:
                   28923:        we now expand any %h or %u in the prompt before passing to tgetpass
                   28924:        [f3db8c9ee387]
                   28925: 
                   28926:        * configure.in:
                   28927:        add check for syslog(3) in -lsocket, -lnsl, -linet
                   28928:        [5a96f902ce00]
                   28929: 
                   28930:        * config.h.in:
                   28931:        add HAVE_ISCOMSEC and HAVE_ISSECURE
                   28932:        [f640b0d4cf05]
                   28933: 
                   28934:        * configure.in:
                   28935:        add check for iscomsec in HP-UX
                   28936:        [b28b249040f0]
                   28937: 
                   28938:        * configure.in:
                   28939:        check for issecure if we have getpwanam on SunOS some options are
                   28940:        incompatible with DUNIX SIA check for dispcrypt on DUNIX
                   28941:        [a49d05d9c913]
                   28942: 
                   28943: 1998-10-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28944: 
                   28945:        * config.h.in:
                   28946:        add HAVE_DISPCRYPT
                   28947:        [7376d543d8d6]
                   28948: 
                   28949:        * secureware.c:
                   28950:        add back support for non-dispcrypt based checking for older DUNIX
                   28951:        [977b98e936be]
                   28952: 
                   28953:        * INSTALL:
                   28954:        sia changes
                   28955:        [c5387c06e30f]
                   28956: 
                   28957:        * configure.in:
                   28958:        SIA becomes the default on Digital UNIX now havbe --disable-sia to
                   28959:        turn it off...
                   28960:        [3b647558ea13]
                   28961: 
                   28962:        * check.c:
                   28963:        move local includes after system ones
                   28964:        [b2abad4c4aef]
                   28965: 
                   28966: 1998-10-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28967: 
                   28968:        * check.c, check_sia.c, sudo.h:
                   28969:        add pass_warn() which prints out INCORRECT_PASSWORD or an insult to
                   28970:        stderr
                   28971:        [547cbf299661]
                   28972: 
                   28973:        * check_sia.c:
                   28974:        fix while loop in sia_attempt_auth() that checks the password. Only
                   28975:        the first iteration was working.
                   28976:        [1886fd1ac831]
                   28977: 
                   28978: 1998-10-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   28979: 
                   28980:        * aclocal.m4:
                   28981:        don't trust UID_MAX or MAXUID
                   28982:        [2aeddb1654d8]
                   28983: 
                   28984:        * configure.in:
                   28985:        fix two pastos
                   28986:        [c18f0a10b75d]
                   28987: 
                   28988:        * configure.in:
                   28989:        fix typo
                   28990:        [1eb3190ef12d]
                   28991: 
                   28992:        * getspwuid.c, secureware.c:
                   28993:        init crypt_type to INT_MAX since it is legal to be negative in DUNX
                   28994:        5.0
                   28995:        [cefbde04822d]
                   28996: 
                   28997:        * configure.in:
                   28998:        for secureware on dunix, use -lsecurity -ldb -laud -lm but check for
                   28999:        -ldb since DUNX < 4.0 lacks it
                   29000:        [e6b11d971068]
                   29001: 
                   29002: 1998-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29003: 
                   29004:        * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
                   29005:        secureware.c, sudo.c, tgetpass.c:
                   29006:        getprpwuid is broken in HP-UX 10.20 at least (it sleeps for 2
                   29007:        minutes if the shadow files don't exist).
                   29008:        [2f297d095004]
                   29009: 
                   29010: 1998-10-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29011: 
                   29012:        * INSTALL:
                   29013:        updated --with-editor blurb
                   29014:        [77d8a3ea7328]
                   29015: 
                   29016:        * TROUBLESHOOTING:
                   29017:        tell how to put sudoers in a different dir
                   29018:        [456cd20eb1d0]
                   29019: 
                   29020:        * configure.in:
                   29021:        add missing quotes around $with_editor
                   29022:        [22881748ab1b]
                   29023: 
                   29024:        * configure.in:
                   29025:        typo in --with-editor bits
                   29026:        [ab6964580681]
                   29027: 
                   29028:        * INSTALL:
                   29029:        I don't expect it to work on Solaris
                   29030:        [1c2fceaaf56e]
                   29031: 
                   29032:        * check.c:
                   29033:        add back security/pam_misc.h
                   29034:        [6ffd30033c1e]
                   29035: 
                   29036: 1998-10-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29037: 
                   29038:        * INSTALL:
                   29039:        remove dunix note since configure checks for this now
                   29040:        [e9904512b8e8]
                   29041: 
                   29042:        * configure.in:
                   29043:        add check for broken dunix prot.h (4.0 < 4.0D is bad)
                   29044:        [8a4c1e6aef3b]
                   29045: 
                   29046:        * getspwuid.c, secureware.c, tgetpass.c:
                   29047:        new dunix shadow code, use dispcrypt(3)
                   29048:        [1b936bc7268c]
                   29049: 
                   29050:        * config.h.in:
                   29051:        add HAVE_INITPRIVS
                   29052:        [4369f4c4f914]
                   29053: 
                   29054:        * sudo.c:
                   29055:        call initprivs() if we have it for getprpwuid later on
                   29056:        [11cf5915d826]
                   29057: 
                   29058:        * Makefile.in:
                   29059:        clean pathnames.h too
                   29060:        [5f1df3262613]
                   29061: 
                   29062:        * configure.in:
                   29063:        quote "Sorry, try again." with [] since it has a comma in it set
                   29064:        LIBS when we add stuff to SUDO_LIBS set SECUREWARE when we find
                   29065:        getprpwuid() so we can check for bigcrypt, set_auth_parameters, and
                   29066:        initprivs later.
                   29067:        [e226b0a3f250]
                   29068: 
                   29069:        * INSTALL:
                   29070:        update Digital UNIX note about acl.h
                   29071:        [80132b71d73a]
                   29072: 
                   29073:        * INSTALL:
                   29074:        add --with-sia
                   29075:        --without-root-sudo -> --disable-root-sudo some reordering
                   29076:        [198386358818]
                   29077: 
                   29078:        * secureware.c:
                   29079:        add whitespace
                   29080:        [4aadaf1a54b0]
                   29081: 
                   29082:        * Makefile.in, check.c, config.h.in, configure.in, logging.c, sudo.h:
                   29083:        add SIA support
                   29084:        [fa3ddbb9cc51]
                   29085: 
                   29086:        * check_sia.c:
                   29087:        Initial revision
                   29088:        [2968551d40e4]
                   29089: 
                   29090: 1998-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29091: 
                   29092:        * configure.in:
                   29093:        when checking for -lsocket, -lnsl, and -linet, check for the
                   29094:        specific functions we need from them.
                   29095:        [8d33e64362a3]
                   29096: 
                   29097:        * config.h.in, sudo.h:
                   29098:        move Syslog_* defs into sudo.h
                   29099:        [03d1774f25c7]
                   29100: 
                   29101:        * Makefile.in, sudo.h:
                   29102:        added check_secureware
                   29103:        [e46e3cbb9a97]
                   29104: 
                   29105:        * configure.in:
                   29106:        finished adding AC_MSG_CHECKING and AC_MSG_RESULT bits
                   29107:        [dbefe1856503]
                   29108: 
                   29109:        * insults.h:
                   29110:        don't define CLASSIC_INSULTS and CSOPS_INSULTS if no other sets
                   29111:        defined. configure now does that for us
                   29112:        [e4520ea0581f]
                   29113: 
                   29114:        * configure.in:
                   29115:        move some --with options around change a bunch of echo's to
                   29116:        AC_MSG_CHECKING, AC_MSG_RESULT pairs
                   29117:        [ffdf6869fdd7]
                   29118: 
                   29119:        * configure.in:
                   29120:        change $with_foo-bar -> $with_foo_bar kill extra " that caused a
                   29121:        syntax error add some echo verbage
                   29122:        [3278c49bf74b]
                   29123: 
                   29124: 1998-10-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29125: 
                   29126:        * check.c:
                   29127:        moved SecureWare stuff into secureware.c
                   29128:        [42d3d3ac35dc]
                   29129: 
                   29130:        * secureware.c:
                   29131:        Initial revision
                   29132:        [aa7f72a249cf]
                   29133: 
                   29134:        * INSTALL:
                   29135:        update url to solaris gcc bins
                   29136:        [36a3eb668777]
                   29137: 
                   29138:        * INSTALL:
                   29139:        change option formatter and flesh out someentries
                   29140:        [6fbd1db4a8ad]
                   29141: 
                   29142:        * TROUBLESHOOTING, sudo.pod, visudo.pod:
                   29143:        environmental variable -> environment variable
                   29144:        [6f14d708e32d]
                   29145: 
                   29146:        * BUGS:
                   29147:        everything is now done via configure
                   29148:        [c217858f58ab]
                   29149: 
                   29150:        * README:
                   29151:        prev rev was 1.5.6
                   29152:        [7b4177103c35]
                   29153: 
                   29154:        * Makefile.in:
                   29155:        passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID correctly
                   29156:        [31c6b0a5e0e2]
                   29157: 
                   29158:        * config.h.in:
                   29159:        SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from the Makefile
                   29160:        [d406a1ef6d25]
                   29161: 
                   29162:        * Makefile.in:
                   29163:        merge OSDEFS and OPTIONS into DEFS get sudoers_uid, sudoers_gid,
                   29164:        sudoers_mode from configure
                   29165:        [1c509500655a]
                   29166: 
                   29167:        * configure.in:
                   29168:        SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get substituted into
                   29169:        the Makefile, not config.h
                   29170:        [d4482f1492fe]
                   29171: 
                   29172:        * INSTALL:
                   29173:        document all --with/--enable options
                   29174:        [22d81b312d7f]
                   29175: 
                   29176: 1998-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29177: 
                   29178:        * insults.h:
                   29179:        options.h is no more
                   29180:        [560946a33f7f]
                   29181: 
                   29182:        * config.h.in:
                   29183:        assimilated options.h
                   29184:        [dd8ce74613c1]
                   29185: 
                   29186:        * configure.in:
                   29187:        moved options from options.h to configure
                   29188:        [d39662f71b4e]
                   29189: 
                   29190:        * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
                   29191:        logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
                   29192:        sudo_setenv.c, visudo.c:
                   29193:        no more options.h
                   29194:        [43924bf0858d]
                   29195: 
                   29196:        * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING:
                   29197:        remove references to options.h
                   29198:        [ef3474295395]
                   29199: 
                   29200:        * dce_pwent.c, interfaces.c, sudo.c:
                   29201:        kill sys/time.h
                   29202:        [4d833f0034e4]
                   29203: 
                   29204:        * tgetpass.c:
                   29205:        if select return < -1 still prompt for pw
                   29206:        [e0009e5c93a2]
                   29207: 
                   29208:        * options.h:
                   29209:        convert LOGGING, LOGFAC, MAXLOGFILELEN, IGNORE_DOT_PATH into
                   29210:        configure options
                   29211:        [e60a1e546516]
                   29212: 
                   29213:        * parse.c:
                   29214:        FAST_MATCH is no longer an optino
                   29215:        [c448dbb3464b]
                   29216: 
                   29217:        * check.c:
                   29218:        remove_timestamp() if timestamp is preposterous
                   29219:        [70d9a86c6ecd]
                   29220: 
                   29221:        * options.h:
                   29222:        convert more options to --with/--enable
                   29223:        [34646d9b09dc]
                   29224: 
                   29225:        * INSTALL, aclocal.m4:
                   29226:        logfile -> logpath
                   29227:        [42de502bc637]
                   29228: 
                   29229:        * configure.in:
                   29230:        convert more options into --with and --enable
                   29231:        [92d0898c9844]
                   29232: 
                   29233:        * tgetpass.c:
                   29234:        catch EINTR in select and restart
                   29235:        [f045d2f234d7]
                   29236: 
                   29237:        * logging.c:
                   29238:        sys/errno -> errno
                   29239:        [7f0c5beab6f2]
                   29240: 
                   29241: 1998-09-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29242: 
                   29243:        * sudo.c:
                   29244:        UMASK -> SUDO_UMASK.
                   29245:        [48f308661514]
                   29246: 
                   29247:        * check.c, logging.c:
                   29248:        time.h, not sys/time.h
                   29249:        [91de049c79e4]
                   29250: 
                   29251: 1998-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29252: 
                   29253:        * logging.c:
                   29254:        MAILER -> _PATH_SENDMAIL
                   29255:        [df65d6896639]
                   29256: 
                   29257:        * INSTALL, configure.in:
                   29258:        no more --with-C2, now it is --disable-shadow
                   29259:        [18bfcab3b9ab]
                   29260: 
                   29261:        * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
                   29262:        getspwuid.c, sudo.c, tgetpass.c:
                   29263:        new shadow password scheme. Always include shadow support if the
                   29264:        platform supports it and the user did not disable it via configure
                   29265:        [2135d93bb4a9]
                   29266: 
                   29267: 1998-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29268: 
                   29269:        * configure.in:
                   29270:        --with-getpass -> --{enable,disable}-tgetpass
                   29271:        [451b33fdd4c7]
                   29272: 
                   29273:        * Makefile.in:
                   29274:        pathnames.h -> pathnames.h.in
                   29275:        [b109022eca69]
                   29276: 
                   29277:        * check.c:
                   29278:        fix version string
                   29279:        [761b25c314ea]
                   29280: 
                   29281:        * check.c:
                   29282:        move pam_conv to be static to auth function remove pam_misc.h
                   29283:        (solaris doesn't have one)
                   29284:        [a682e4da987a]
                   29285: 
                   29286:        * aclocal.m4:
                   29287:        _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill SUDO_PROG_PWD
                   29288:        [e6005d0599b5]
                   29289: 
                   29290:        * configure.in:
                   29291:        munge pathnames.h.in -> pathnames.h kill SUDO_PROG_PWD
                   29292:        [24c0ac2155ef]
                   29293: 
                   29294:        * pathnames.h.in:
                   29295:        convert to pathnames.h.in
                   29296:        [013bddf7f684]
                   29297: 
                   29298: 1998-09-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29299: 
                   29300:        * configure.in:
                   29301:        fix typo in sysv4 matching case /.
                   29302:        [2994c4f88cf5]
                   29303: 
                   29304: 1998-09-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29305: 
                   29306:        * check.c:
                   29307:        pam stuff needs to run as root, not user, for shadow passwords
                   29308:        [d94ff75de503]
                   29309: 
                   29310: 1998-09-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29311: 
                   29312:        * BUGS, INSTALL, README, configure.in:
                   29313:        updated version
                   29314:        [775adc7de7ac]
                   29315: 
                   29316:        * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
                   29317:        emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
                   29318:        ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
                   29319:        logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   29320:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   29321:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   29322:        updated version
                   29323:        [5ca599fb6b93]
                   29324: 
                   29325:        * check.c:
                   29326:        user version.h for long message
                   29327:        [47a52ac7e542]
                   29328: 
                   29329:        * check.c:
                   29330:        this is version 1.5.6
                   29331:        [8451ac79eee2]
                   29332: 
                   29333: 1998-09-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29334: 
                   29335:        * Makefile.in:
                   29336:        remove errant backslash
                   29337:        [0222a8a650ff]
                   29338: 
                   29339: 1998-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29340: 
                   29341:        * options.h, parse.yacc, pathnames.h.in:
                   29342:        fix version string
                   29343:        [fdee73255d64] [SUDO_1_5_6]
                   29344: 
                   29345:        * BUGS, CHANGES, TODO:
                   29346:        updtaed for 1.5.6
                   29347:        [752443bf7f26]
                   29348: 
                   29349:        * RUNSON:
                   29350:        updated for 1.5.6
                   29351:        [0f878123fe6a]
                   29352: 
                   29353: 1998-09-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29354: 
                   29355:        * interfaces.c:
                   29356:        kill unused localhost_mask var copy if name to ifr_tmp after we zero
                   29357:        it
                   29358:        [8e89c364cef2]
                   29359: 
                   29360: 1998-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29361: 
                   29362:        * INSTALL:
                   29363:        Better description of new vs. old sudoers modes fix some typos
                   29364:        better description of /usr/ucb/cc gotchas on slowaris
                   29365:        [c00b2a6fc1e8]
                   29366: 
                   29367:        * Makefile.in:
                   29368:        add sample.pam
                   29369:        [ec7f6cc19b00]
                   29370: 
                   29371:        * sudo.c:
                   29372:        set NewArgv[0] to user_shell, not basename(user_shell)
                   29373:        [1e907cbc9f7b]
                   29374: 
                   29375: 1998-09-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29376: 
                   29377:        * README:
                   29378:        mention TROUBLESHOOTING more fix some typos
                   29379:        [2c2e6907d4a4]
                   29380: 
                   29381:        * configure.in:
                   29382:        move --enable/--disable to be after --with
                   29383:        [9b30097f76c1]
                   29384: 
                   29385:        * INSTALL:
                   29386:        document --enable/--disable
                   29387:        [c522362e38a8]
                   29388: 
                   29389:        * INSTALL:
                   29390:        document --with-pam
                   29391:        [7e38932c78ac]
                   29392: 
                   29393: 1998-09-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29394: 
                   29395:        * configure.in:
                   29396:        Add message for pam users
                   29397:        [d224f277e3cd]
                   29398: 
                   29399:        * sample.pam:
                   29400:        Initial revision
                   29401:        [3a84d7045f54]
                   29402: 
                   29403:        * config.h.in:
                   29404:        fix HAVE_PAM
                   29405:        [2f0f303ebd88]
                   29406: 
                   29407:        * check.c, config.h.in, configure.in:
                   29408:        pam support, from Gary Calvin <GCalvin@kenwoodusa.com>
                   29409:        [ea3e0a72d707]
                   29410: 
                   29411: 1998-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29412: 
                   29413:        * config.h.in:
                   29414:        add HOST_IN_LOG and WRAP_LOG
                   29415:        [822c36eeb6a8]
                   29416: 
                   29417:        * logging.c:
                   29418:        add WRAP_LOG and HOST_IN_LOG
                   29419:        [3cf6052bd27e]
                   29420: 
                   29421:        * configure.in:
                   29422:        add --enable-log-host and --enable-log-wrap
                   29423:        [c968cc12b353]
                   29424: 
                   29425:        * aclocal.m4:
                   29426:        use AC_DEFINE_UNQUOTED for --with-logfile and --with-timedir
                   29427:        [915fef7e11a1]
                   29428: 
                   29429: 1998-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29430: 
                   29431:        * compat.h:
                   29432:        add howmany macro
                   29433:        [9107a057a7c8]
                   29434: 
                   29435:        * tgetpass.c:
                   29436:        include sys/param.h to get howmany macro
                   29437:        [7e908b5e1f32]
                   29438: 
                   29439: 1998-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29440: 
                   29441:        * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
                   29442:        add RUNAS_DEFAULT
                   29443:        [1e76398ea3fd]
                   29444: 
                   29445: 1998-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29446: 
                   29447:        * fnmatch.c:
                   29448:        bring in stdio.h for NULL
                   29449:        [69c016610cbb]
                   29450: 
                   29451:        * aclocal.m4:
                   29452:        allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
                   29453:        [15ab2972f8d0]
                   29454: 
                   29455:        * sudo.c:
                   29456:        use HAVE_SET_AUTH_PARAMETERS
                   29457:        [8abfdc8c80f7]
                   29458: 
                   29459:        * config.h.in:
                   29460:        add HAVE_SET_AUTH_PARAMETERS
                   29461:        [673a5ebd5539]
                   29462: 
                   29463:        * configure.in:
                   29464:        add *-*-hiuxmpp* add test for set_auth_parameters() if secureware
                   29465:        [a401f5a7469a]
                   29466: 
                   29467:        * config.sub:
                   29468:        add support for HI-UX/MPP SR220001 02-03 0 SR2201
                   29469:        [cb657b7acaae]
                   29470: 
                   29471:        * interfaces.c:
                   29472:        initialize previfname
                   29473:        [26a1902f56dc]
                   29474: 
                   29475:        * interfaces.c:
                   29476:        Don't use SIOCGIFADDR, we don't need it Use SIOCGIFFLAGS if we have
                   29477:        it check ifr_flags against IFF_UP and IFF_LOOPBACK instead of
                   29478:        kludging it
                   29479:        [fa5c890c313b]
                   29480: 
                   29481:        * configure.in:
                   29482:        typo
                   29483:        [bff579fbe95c]
                   29484: 
                   29485:        * Makefile.in:
                   29486:        don't need special build line for sudo.tab.o
                   29487:        [10c0a0a912e4]
                   29488: 
                   29489:        * Makefile.in:
                   29490:        don't clean sudo.tab.[ch]
                   29491:        [c40d5968efbb]
                   29492: 
                   29493:        * sudo.c:
                   29494:        Sudo should prompt for a password before telling the user that a
                   29495:        command could not be found.
                   29496:        [d718c85a0047]
                   29497: 
                   29498:        * BUGS:
                   29499:        for 1.5.6
                   29500:        [0cc1fe5b9129]
                   29501: 
                   29502:        * INSTALL, README:
                   29503:        no longer require yacc
                   29504:        [d9096fc5b8b6]
                   29505: 
                   29506:        * Makefile.in:
                   29507:        typo
                   29508:        [70feb1aefbd5]
                   29509: 
                   29510:        * Makefile.in:
                   29511:        y.tab -> sudo.tab include pre-yacc'd parse.yacc
                   29512:        [cc802025fd44]
                   29513: 
                   29514:        * parse.lex:
                   29515:        include sudo.tab.h, not y.tab.h don't break out of command args if
                   29516:        you get a '='
                   29517:        [728ad26dbda5]
                   29518: 
                   29519:        * insults.h:
                   29520:        fix version ,
                   29521:        [242bbce1b2d4]
                   29522: 
                   29523:        * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
                   29524:        fix version
                   29525:        [2bb9086fea1e]
                   29526: 
                   29527:        * compat.h:
                   29528:        fix version
                   29529:        [7e634d498ce6]
                   29530: 
                   29531:        * getcwd.c:
                   29532:        getcwd(3) from OpenBSD for those without it.
                   29533:        [6c68d0df8f6c]
                   29534: 
                   29535:        * sudo.h:
                   29536:        HAVE_GETWD -> HAVE_GETCWD
                   29537:        [2ad1e64d60c0]
                   29538: 
                   29539:        * configure.in:
                   29540:        pretend sunos doesn't have getcwd(3) since it opens a pipe to
                   29541:        getpwd!
                   29542:        [677992ba5a6a]
                   29543: 
                   29544:        * parse.c:
                   29545:        use NAMLEN() macro
                   29546:        [8f5685aa3165]
                   29547: 
                   29548:        * fnmatch.c:
                   29549:        remove duplicate include of string.h
                   29550:        [6024f3051ac3]
                   29551: 
                   29552:        * configure.in:
                   29553:        call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
                   29554:        [3d82a9c22cc2]
                   29555: 
                   29556:        * aclocal.m4:
                   29557:        add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
                   29558:        [53fbc47282f9]
                   29559: 
                   29560:        * config.h.in:
                   29561:        add dev_t and ino_t
                   29562:        [5929bb0c7e1a]
                   29563: 
                   29564: 1998-07-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29565: 
                   29566:        * check.c:
                   29567:        fix OTP_ONLY for opie
                   29568:        [7edcfa78f2ec]
                   29569: 
                   29570: 1998-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29571: 
                   29572:        * testsudoers.c, tgetpass.c:
                   29573:        include stdlib.h for malloc proto
                   29574:        [c9f4b99a2fe9]
                   29575: 
                   29576: 1998-05-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29577: 
                   29578:        * Makefile.in:
                   29579:        make update_version saner
                   29580:        [d522f93ee04a]
                   29581: 
                   29582:        * config.h.in:
                   29583:        add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
                   29584:        [c9a2d21dc608]
                   29585: 
                   29586:        * configure.in:
                   29587:        check for waitpid and wait3 or no waitpid
                   29588:        [1f18c3224184]
                   29589: 
                   29590:        * logging.c:
                   29591:        used waitpid or wait3 if we have 'em
                   29592:        [391c3279ee65]
                   29593: 
                   29594: 1998-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29595: 
                   29596:        * visudo.c:
                   29597:        fix some fprintf args, ariel@oz.engr.sgi.com (Ariel Faigon)
                   29598:        [fbf53b18178f]
                   29599: 
                   29600: 1998-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29601: 
                   29602:        * configure.in:
                   29603:        don't need to explicately mention -lsocket -lnsl for sequent
                   29604:        [1898dc055352]
                   29605: 
                   29606: 1998-04-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29607: 
                   29608:        * configure.in:
                   29609:        dynix should not link with -linet
                   29610:        [278a4b9cfe2a]
                   29611: 
                   29612: 1998-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29613: 
                   29614:        * INSTALL:
                   29615:        mention that HP-UX doesn't ship with yacc
                   29616:        [bde5147198c0]
                   29617: 
                   29618: 1998-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29619: 
                   29620:        * check.c:
                   29621:        ignore kerberos if we can't get the local realm
                   29622:        [1e311a091a27]
                   29623: 
                   29624: 1998-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29625: 
                   29626:        * BUGS, INSTALL, README, configure.in:
                   29627:        ++version
                   29628:        [499ffc746018]
                   29629: 
                   29630:        * version.h:
                   29631:        ++
                   29632:        [35ba1ee01bd3]
                   29633: 
                   29634:        * Makefile.in, check.c, config.h.in, dce_pwent.c, emul/utime.h,
                   29635:        find_path.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
                   29636:        logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c, sudo.h,
                   29637:        sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   29638:        updated version
                   29639:        [b4990a513f31]
                   29640: 
                   29641:        * check.c, sudo.h:
                   29642:        fix version
                   29643:        [5710795834e8]
                   29644: 
                   29645:        * getcwd.c:
                   29646:        don't use popen/pclose. Do it inline.
                   29647:        [29e57b0646a4]
                   29648: 
                   29649:        * lsearch.c:
                   29650:        add rcsid
                   29651:        [b2b55c39858d]
                   29652: 
                   29653:        * sudo.c:
                   29654:        typo
                   29655:        [d381ac39ed0f]
                   29656: 
                   29657:        * check.c, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
                   29658:        ins_goons.h, insults.h, options.h, parse.yacc, pathnames.h.in,
                   29659:        sudo.h:
                   29660:        updated version
                   29661:        [462d6e1a2d75]
                   29662: 
                   29663:        * check.c, find_path.c, parse.c, sudo.c, testsudoers.c:
                   29664:        MAX* + 1 -> MAX*
                   29665:        [2c2eeb78d34f]
                   29666: 
                   29667:        * Makefile.in:
                   29668:        getwd.c -> getcwd.c
                   29669:        [7d718c32fc02]
                   29670: 
                   29671:        * config.h.in:
                   29672:        kill HAVE_GETWD
                   29673:        [6ad3d702343f]
                   29674: 
                   29675:        * configure.in:
                   29676:        getcwd, not getwd
                   29677:        [33e5b9841f58]
                   29678: 
                   29679:        * getcwd.c:
                   29680:        use MAX* not MAX* + 1 always run pwd as using getwd() defeats the
                   29681:        purpose
                   29682:        [24e58d340161]
                   29683: 
                   29684: 1998-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29685: 
                   29686:        * OPTIONS, options.h:
                   29687:        add STUB_LOAD_INTERFACES
                   29688:        [d747cb23ca83]
                   29689: 
                   29690:        * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
                   29691:        emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   29692:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   29693:        interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   29694:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   29695:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   29696:        updated version
                   29697:        [0798229312cc]
                   29698: 
                   29699:        * configure.in:
                   29700:        support *-ccur-sysv4 and fix two typos
                   29701:        [24a823ad7cc9]
                   29702: 
                   29703: 1998-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29704: 
                   29705:        * configure.in:
                   29706:        don't echo about with_logfile and with_timedir
                   29707:        [31e4a1e2d9ad]
                   29708: 
                   29709:        * INSTALL:
                   29710:        document --with-logfile and --with-timedir
                   29711:        [674f811a40e0]
                   29712: 
                   29713:        * aclocal.m4:
                   29714:        support --with-logfile and --with-timedir
                   29715:        [2fc36b35db12]
                   29716: 
                   29717:        * configure.in:
                   29718:        Add --with-logfile and --with-timedir
                   29719:        [09045bf07e29]
                   29720: 
                   29721:        * sudo.c:
                   29722:        change size computation of NewArgv for UNICOS
                   29723:        [b50df07da3a1]
                   29724: 
                   29725: 1998-02-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29726: 
                   29727:        * configure.in:
                   29728:        treate -*-sysv4* like *-*-svr4
                   29729:        [471b7ef4dbf2]
                   29730: 
                   29731: 1998-02-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29732: 
                   29733:        * configure.in:
                   29734:        fix spacing for --with-authenticate help
                   29735:        [8321cb37c410]
                   29736: 
                   29737:        * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
                   29738:        emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   29739:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   29740:        interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   29741:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   29742:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   29743:        updated version
                   29744:        [dc1ab97312eb]
                   29745: 
                   29746:        * parse.yacc:
                   29747:        fix off by one error in push macro
                   29748:        [bece59c8c3a9]
                   29749: 
                   29750: 1998-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29751: 
                   29752:        * configure.in:
                   29753:        removed bogus alloca hack
                   29754:        [a68dd720462d]
                   29755: 
                   29756:        * check.c:
                   29757:        added AIX 4.x authenticate() support
                   29758:        [12985eb448a0]
                   29759: 
                   29760:        * parse.yacc:
                   29761:        include alloca.h if using bison and not gcc and it exists. fixes an
                   29762:        alloca problem on hpux 10.x
                   29763:        [e3b5c4f26072]
                   29764: 
                   29765:        * INSTALL:
                   29766:        mention --with-authenticate
                   29767:        [78a1c96820e7]
                   29768: 
                   29769:        * configure.in:
                   29770:        added AIX authenticate() support
                   29771:        [c983193ec252]
                   29772: 
                   29773:        * config.h.in:
                   29774:        add HAVE_AUTHENTICATE
                   29775:        [7b0e5f5db5d9]
                   29776: 
                   29777:        * interfaces.c:
                   29778:        dynamically size ifconf buffer
                   29779:        [10afb0e9b2f9]
                   29780: 
                   29781:        * configure.in:
                   29782:        quote '[' and ']'
                   29783:        [8fc38a4defad]
                   29784: 
                   29785:        * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
                   29786:        emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   29787:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   29788:        logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   29789:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   29790:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   29791:        updated version
                   29792:        [5f66de71ec61]
                   29793: 
                   29794:        * visudo.pod:
                   29795:        add ERRORS section
                   29796:        [3df3edb73cf6]
                   29797: 
                   29798: 1998-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29799: 
                   29800:        * TROUBLESHOOTING:
                   29801:        add busy stmp file explanation
                   29802:        [6c555d469b6f]
                   29803: 
                   29804: 1998-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29805: 
                   29806:        * configure.in:
                   29807:        the name of the cached var that signals whether or not you are cross
                   29808:        compiling changed. It is now ac_cv_prog_cc_cross
                   29809:        [123911c0658c]
                   29810: 
                   29811: 1998-02-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29812: 
                   29813:        * INSTALL:
                   29814:        mention glibc 2.07 is fixed wrt lsearch()\.
                   29815:        [ded758524582]
                   29816: 
                   29817: 1998-02-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29818: 
                   29819:        * sample.sudoers, sudoers.pod:
                   29820:        better example of su but not root su
                   29821:        [b3199610be21]
                   29822: 
                   29823: 1998-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29824: 
                   29825:        * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
                   29826:        emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   29827:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   29828:        interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   29829:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   29830:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   29831:        updated version
                   29832:        [46922b84e86b]
                   29833: 
                   29834:        * Makefile.in:
                   29835:        correct regexp for updating version
                   29836:        [8032728b2a8a]
                   29837: 
                   29838:        * tgetpass.c:
                   29839:        remove bogus flush of stderr spew prompt before turning off echo.
                   29840:        Seems to fix a weird problem where if sudo complained about a bogus
                   29841:        stamp file the user would sometimes not have a chance to enter a
                   29842:        password
                   29843:        [7aa1493cc141]
                   29844: 
                   29845:        * check.c:
                   29846:        fix bogus flush of stderr
                   29847:        [6d047871c5e8]
                   29848: 
                   29849:        * sudo.c:
                   29850:        close fd's <=2 not <=3 and move that chunk of code up
                   29851:        [553e4faac195]
                   29852: 
                   29853:        * configure.in:
                   29854:        support hpux1[0-9] not just hpux10
                   29855:        [5a34a000ff8a]
                   29856: 
                   29857: 1998-01-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29858: 
                   29859:        * parse.c:
                   29860:        set sudoers_fp to nil after closing
                   29861:        [221a8b4bbf34]
                   29862: 
                   29863: 1998-01-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29864: 
                   29865:        * config.guess, config.sub:
                   29866:        updated from autoconf 2.12
                   29867:        [6fc86a0fc61b]
                   29868: 
                   29869:        * configure.in:
                   29870:        add *-*-svr4 rule
                   29871:        [38f0427f7c9d]
                   29872: 
                   29873: 1998-01-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29874: 
                   29875:        * tgetpass.c:
                   29876:        fix select usage for high fd's (dynamically allocate readfds)
                   29877:        [c2d1f76e0321]
                   29878: 
                   29879:        * check.c:
                   29880:        kill extra whitespace
                   29881:        [d784b6c9c514]
                   29882: 
                   29883:        * sudo.c:
                   29884:        do an initgroups() before running a command, unless the target user
                   29885:        is root.
                   29886:        [4ca561287480]
                   29887: 
                   29888: 1998-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29889: 
                   29890:        * TROUBLESHOOTING:
                   29891:        tell people to use tabs, not spaces, in syslog.conf
                   29892:        [8ae90a205134]
                   29893: 
                   29894: 1998-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29895: 
                   29896:        * Makefile.in, config.h.in, dce_pwent.c, emul/utime.h, getwd.c,
                   29897:        parse.lex, putenv.c, strdup.c, testsudoers.c, utime.c:
                   29898:        updated version
                   29899:        [4d855ff5de26]
                   29900: 
                   29901:        * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
                   29902:        logging.c, parse.c, sudo.c, sudo_setenv.c, tgetpass.c, visudo.c:
                   29903:        updated version
                   29904:        [8e007e178b33]
                   29905: 
                   29906:        * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
                   29907:        insults.h, options.h, parse.yacc, pathnames.h.in, sudo.h:
                   29908:        updated version
                   29909:        [9ddea5c8814d]
                   29910: 
                   29911:        * Makefile.in:
                   29912:        more tweaks to update_version
                   29913:        [047698752855]
                   29914: 
                   29915:        * Makefile.in:
                   29916:        fixed up update_version rule
                   29917:        [47b6fa34b77f]
                   29918: 
                   29919:        * configure.in:
                   29920:        ++version
                   29921:        [c1ca664e30b7]
                   29922: 
                   29923:        * Makefile.in:
                   29924:        removed supe of check.c
                   29925:        [8f340a05296a]
                   29926: 
                   29927:        * INSTALL:
                   29928:        ++version I missed
                   29929:        [a298e6c17491]
                   29930: 
                   29931:        * RUNSON:
                   29932:        updated
                   29933:        [a14f6057bc15]
                   29934: 
                   29935:        * BUGS, INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
                   29936:        dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, getwd.c,
                   29937:        goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
                   29938:        insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex,
                   29939:        parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
                   29940:        sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
                   29941:        visudo.c:
                   29942:        updated version
                   29943:        [02231b1a3ab3]
                   29944: 
                   29945:        * CHANGES:
                   29946:        updated for 1.5.5
                   29947:        [634e5fcaf40b]
                   29948: 
                   29949:        * Makefile.in:
                   29950:        add rules to update version stuff in files so I don't need to do it
                   29951:        by hand
                   29952:        [3620ad60485a]
                   29953: 
                   29954:        * sudo.h:
                   29955:        sudoers_fp is now extern
                   29956:        [88c6e9b9ea84]
                   29957: 
                   29958:        * sudo.c:
                   29959:        in check_sudoers, cache the sudoers file handle in sudoers_fp so we
                   29960:        don't have to open it again in the parse. This may help with weird
                   29961:        solaris problems where EAGAIN sometime occurrs.
                   29962:        [d3c26451ed1d]
                   29963: 
                   29964:        * parse.c:
                   29965:        sudoers file open is now done only in check_sudoers() so we just do
                   29966:        a rewind() instead of an open. May help people on solaris who were
                   29967:        getting EAGAIN.
                   29968:        [c8b8c7722fa5]
                   29969: 
                   29970: 1998-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29971: 
                   29972:        * INSTALL:
                   29973:        mention that newer glibc is fixed
                   29974:        [20f06f5d3ef3]
                   29975: 
                   29976: 1998-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   29977: 
                   29978:        * sudo.c:
                   29979:        newer irix uses _RLDN32_* envariables for 32-bit binaries so ignore
                   29980:        _RLD* instead of _RLD_*
                   29981:        [1e22c588d602]
                   29982: 
                   29983:        * parse.c:
                   29984:        typo
                   29985:        [d0b7cb85f08a]
                   29986: 
                   29987:        * parse.c:
                   29988:        fix that bug for real
                   29989:        [5a6eeca6d04b]
                   29990: 
                   29991:        * INSTALL:
                   29992:        document Linux's libc6 brokenness.
                   29993:        [0246c1aa64ee]
                   29994: 
                   29995:        * parse.yacc:
                   29996:        -Wall
                   29997:        [d0e452fb1e2d]
                   29998: 
                   29999:        * RUNSON:
                   30000:        updated
                   30001:        [4949a1bbd0a9] [SUDO_1_5_4]
                   30002: 
                   30003:        * TROUBLESHOOTING:
                   30004:        remind people to HUP syslogd
                   30005:        [590962faa4f0]
                   30006: 
                   30007:        * Makefile.in:
                   30008:        add -O flag to tar
                   30009:        [622d02de339d]
                   30010: 
                   30011:        * RUNSON:
                   30012:        updated
                   30013:        [a72930d6e615]
                   30014: 
                   30015:        * TODO:
                   30016:        updated
                   30017:        [4a51bd458390]
                   30018: 
                   30019:        * sudo.pod:
                   30020:        remove author's email addr. people should mail sudo-bugs
                   30021:        [9b6bbdb3a6d9]
                   30022: 
                   30023:        * INSTALL:
                   30024:        fix version
                   30025:        [246274c6c8af]
                   30026: 
                   30027:        * README, check.c, compat.h, config.h.in, configure.in, dce_pwent.c,
                   30028:        find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
                   30029:        ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
                   30030:        logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   30031:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   30032:        testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
                   30033:        ++version
                   30034:        [f532ff4ee766]
                   30035: 
                   30036:        * RUNSON:
                   30037:        updated
                   30038:        [62d5c71358b5]
                   30039: 
                   30040:        * INSTALL, Makefile.in:
                   30041:        ++version
                   30042:        [1a7c7628edfc]
                   30043: 
                   30044:        * CHANGES:
                   30045:        updated fort 1.5.4
                   30046:        [7e4873508c99]
                   30047: 
                   30048:        * check.c:
                   30049:        exit(1) if user enters no passwd
                   30050:        [f382c0e35e4e]
                   30051: 
                   30052:        * BUGS:
                   30053:        ++version
                   30054:        [fab6a867ab67]
                   30055: 
                   30056:        * parse.c:
                   30057:        commands can start with ./* not just /* -- fixes a serious security
                   30058:        hole.
                   30059:        [244d2fe35ee3]
                   30060: 
                   30061: 1997-12-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30062: 
                   30063:        * sudo.c:
                   30064:        Don't set the tty variable to NULL when we lack a tty, leave it as
                   30065:        "unknown".
                   30066:        [193b26daba03]
                   30067: 
                   30068: 1997-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30069: 
                   30070:        * sample.sudoers:
                   30071:        fix usage of (username) in conjunction with , and !
                   30072:        [7ae68607f68f]
                   30073: 
                   30074:        * visudo.c:
                   30075:        catch the case where the user is not in the passwd file
                   30076:        [31650258deb0]
                   30077: 
                   30078:        * tgetpass.c:
                   30079:        use fileno(input) + 1 instead of getdtablesize() as the nfds arg to
                   30080:        select(2)
                   30081:        [60ab2d9a9ee8]
                   30082: 
                   30083:        * sudo.c:
                   30084:        define tty global to an initial value to avoid dumping core in
                   30085:        logging functions when passwd file is unavailable.
                   30086:        [77056c7bc908]
                   30087: 
                   30088:        * sudo.c:
                   30089:        do the set_perms(PERM_USER, sudo_mode) after we have gotten the
                   30090:        passwd entry
                   30091:        [1fdb8e579a5a]
                   30092: 
                   30093:        * sudo.pod:
                   30094:        talk about problem of ALL
                   30095:        [1cd1905c9f6f]
                   30096: 
                   30097: 1997-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30098: 
                   30099:        * README:
                   30100:        new web location
                   30101:        [d24dc26f6da5]
                   30102: 
                   30103:        * INSTALL:
                   30104:        fdesc bug is fixed in Open/Net BSD
                   30105:        [7d4d81b08ac3]
                   30106: 
                   30107:        * HISTORY:
                   30108:        updates from Nieusma
                   30109:        [3a43769a1b78]
                   30110: 
                   30111: 1997-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30112: 
                   30113:        * dce_pwent.c:
                   30114:        move compat.h after the system includes
                   30115:        [5ea43a5968ac]
                   30116: 
                   30117: 1997-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30118: 
                   30119:        * logging.c:
                   30120:        save errno from being clobbered by wait(). From Theo
                   30121:        [f2d1c48cd592]
                   30122: 
                   30123: 1997-05-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30124: 
                   30125:        * compat.h:
                   30126:        fix an occurence of setresuid -> setreuid (typo)
                   30127:        [394de35c9b1c]
                   30128: 
                   30129: 1997-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30130: 
                   30131:        * install-sh:
                   30132:        check for path to strip
                   30133:        [2b7ef824bd55]
                   30134: 
                   30135: 1997-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30136: 
                   30137:        * logging.c:
                   30138:        deal with maxfilelen < 0 case
                   30139:        [f0af095178d7]
                   30140: 
                   30141:        * OPTIONS:
                   30142:        fixed descriptin
                   30143:        [629f60bd4b5f]
                   30144: 
                   30145: 1996-12-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30146: 
                   30147:        * sudo.c:
                   30148:        correct error message if mode/owner wrong and not statable by owner
                   30149:        but is statable by root.
                   30150:        [cb631ce2e85e]
                   30151: 
                   30152: 1996-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30153: 
                   30154:        * config.guess, config.sub:
                   30155:        autoconf 2.11
                   30156:        [f3cbe59e0756]
                   30157: 
                   30158: 1996-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30159: 
                   30160:        * CHANGES, RUNSON, TODO:
                   30161:        sudo 1.5.3.
                   30162:        [2be3229b8626]
                   30163: 
                   30164: 1996-11-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30165: 
                   30166:        * parse.yacc, sudo.h:
                   30167:        command_alias -> generic_alias
                   30168:        [c404ca8c510d] [SUDO_1_5_3]
                   30169: 
                   30170:        * sample.sudoers:
                   30171:        added Runas_Alias example and fixed syntax errors
                   30172:        [c304053f4a8a]
                   30173: 
                   30174:        * OPTIONS, options.h:
                   30175:        updated MAILSUBJECT
                   30176:        [18d1573fcd2a]
                   30177: 
                   30178:        * logging.c:
                   30179:        added %h expansion
                   30180:        [a4bff9b284fd]
                   30181: 
                   30182:        * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
                   30183:        configure.in, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
                   30184:        goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
                   30185:        insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex,
                   30186:        parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
                   30187:        sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
                   30188:        visudo.c:
                   30189:        ++version
                   30190:        [211ff20f956f]
                   30191: 
                   30192:        * BUGS, emul/utime.h:
                   30193:        ++version
                   30194:        [cde5376579e3]
                   30195: 
                   30196:        * sudoers.pod:
                   30197:        document Runas_Alias
                   30198:        [b1a58f28fb2c]
                   30199: 
                   30200:        * visudo.pod:
                   30201:        q (uid) -> Q
                   30202:        [d256649a0e6b]
                   30203: 
                   30204:        * visudo.c:
                   30205:        buffer oflow checking q (uit) -> Q if yyparse() fails drop into
                   30206:        whatnow
                   30207:        [1cb183d15626]
                   30208: 
                   30209:        * parse.yacc:
                   30210:        add size params to sprintf
                   30211:        [9228f698921f]
                   30212: 
                   30213:        * parse.lex:
                   30214:        allow trailing space after '\\' but before '\n'
                   30215:        [f51dbbf69fdf]
                   30216: 
                   30217:        * find_path.c:
                   30218:        off by one error in path size check
                   30219:        [a6d75ccd7632]
                   30220: 
                   30221:        * check.c:
                   30222:        sprintf paranoia
                   30223:        [3ffb12d198dd]
                   30224: 
                   30225: 1996-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30226: 
                   30227:        * parse.yacc:
                   30228:        fixed more_aliases
                   30229:        [aab12f2a50af]
                   30230: 
                   30231:        * visudo.c:
                   30232:        now warns if killed by signal ./
                   30233:        [310c186a0fd7]
                   30234: 
                   30235: 1996-11-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30236: 
                   30237:        * parse.yacc:
                   30238:        fix Runas_Alias stuff Alias's in runas list now get expanded (but it
                   30239:        is gross)
                   30240:        [45590b83120f]
                   30241: 
                   30242:        * sudo.c:
                   30243:        Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE == 0400
                   30244:        [d53e01c14c58]
                   30245: 
                   30246:        * parse.yacc:
                   30247:        add Runas_Alias support change FOO to FOO_ALIAS (ie: USER_ALIAS)
                   30248:        [7a4a040aae2d]
                   30249: 
                   30250:        * parse.lex:
                   30251:        Add Runas_Alias and simplify a rule.
                   30252:        [6f794a769a37]
                   30253: 
                   30254:        * parse.yacc:
                   30255:        always store User_Alias's since they can be used inside of a runas
                   30256:        list. Sigh. Really need a Runas_Alias instead.
                   30257:        [3bab058a873e]
                   30258: 
                   30259: 1996-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30260: 
                   30261:        * visudo.c:
                   30262:        deal with case where there is no sudoers file
                   30263:        [fa38b3bb244d]
                   30264: 
                   30265: 1996-10-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30266: 
                   30267:        * TROUBLESHOOTING:
                   30268:        added one
                   30269:        [e61346d06725]
                   30270: 
                   30271: 1996-10-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30272: 
                   30273:        * HISTORY, testsudoers.c:
                   30274:        developement -> development
                   30275:        [4df55e293941]
                   30276: 
                   30277:        * INSTALL:
                   30278:        added a note
                   30279:        [3845fb83dbc0]
                   30280: 
                   30281:        * RUNSON:
                   30282:        for 1.5.2
                   30283:        [5489b7298942]
                   30284: 
                   30285:        * CHANGES:
                   30286:        updated
                   30287:        [0741834929e6]
                   30288: 
                   30289: 1996-10-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30290: 
                   30291:        * PORTING:
                   30292:        removed seteuid() notes
                   30293:        [1010a60f281d] [SUDO_1_5_2]
                   30294: 
                   30295: 1996-10-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30296: 
                   30297:        * compat.h:
                   30298:        better seteuid() emulatino
                   30299:        [e807623b662c]
                   30300: 
                   30301:        * configure.in:
                   30302:        added check for seteuid
                   30303:        [8cf9fabc6f4f]
                   30304: 
                   30305:        * config.h.in:
                   30306:        added HAVE_SETEUID
                   30307:        [596db46aa828]
                   30308: 
                   30309: 1996-10-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30310: 
                   30311:        * configure.in:
                   30312:        first stab at sequent support
                   30313:        [b85a7bfcac76]
                   30314: 
                   30315:        * config.h.in:
                   30316:        added HAVE_SYS_SELECT_H
                   30317:        [93ecdd042463]
                   30318: 
                   30319:        * compat.h:
                   30320:        sequent -> _SEQUENT_
                   30321:        [63a38b6da98c]
                   30322: 
                   30323:        * compat.h:
                   30324:        added seteuid() macro for DYNIX
                   30325:        [695bd63c5ea6]
                   30326: 
                   30327:        * tgetpass.c:
                   30328:        _AIX -> HAVE_SYS_SELECT_H
                   30329:        [b31221211bc2]
                   30330: 
                   30331: 1996-10-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30332: 
                   30333:        * BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in, logging.c,
                   30334:        parse.c, parse.lex, parse.yacc, putenv.c, strdup.c, sudo_setenv.c,
                   30335:        testsudoers.c, tgetpass.c, utime.c, visudo.c:
                   30336:        ++version
                   30337:        [8052992fd453]
                   30338: 
                   30339:        * check.c, compat.h, dce_pwent.c, emul/utime.h, find_path.c,
                   30340:        getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
                   30341:        ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
                   30342:        pathnames.h.in, version.h:
                   30343:        ++version
                   30344:        [f7ad15e1598a]
                   30345: 
                   30346:        * sudo.pod:
                   30347:        added -H and SUDO_PS1
                   30348:        [bb965241e30c]
                   30349: 
                   30350:        * configure.in:
                   30351:        use SUDO_FUNC_FNMATCH
                   30352:        [6a8350d85fb2]
                   30353: 
                   30354:        * aclocal.m4:
                   30355:        added SUDO_FUNC_FNMATCH
                   30356:        [45b32c91c4ba]
                   30357: 
                   30358:        * sudo.c:
                   30359:        added -H flag
                   30360:        [11ebc6872fd6]
                   30361: 
                   30362:        * sudo.h:
                   30363:        added MODE_RESET_HOME /
                   30364:        [67a7f8bcbbd6]
                   30365: 
                   30366: 1996-10-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30367: 
                   30368:        * INSTALL:
                   30369:        mention OPIE
                   30370:        [5723515d5bbd]
                   30371: 
                   30372:        * options.h:
                   30373:        SKEY -> OTP
                   30374:        [c1d268130bc4]
                   30375: 
                   30376:        * configure.in:
                   30377:        added opie support
                   30378:        [123872b41b20]
                   30379: 
                   30380:        * compat.h, config.h.in:
                   30381:        added HAVE_OPIE
                   30382:        [528c71afc1e5]
                   30383: 
                   30384:        * check.c:
                   30385:        added HAVE_OPIE and changed to *_OTP_*
                   30386:        [4c62f5db872a]
                   30387: 
                   30388:        * OPTIONS:
                   30389:        SKEY -> OTP
                   30390:        [bd858e5e9652]
                   30391: 
                   30392: 1996-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30393: 
                   30394:        * check.c:
                   30395:        moved fclose() in skey stuff.
                   30396:        [11f7dc8431a6]
                   30397: 
                   30398: 1996-10-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30399: 
                   30400:        * putenv.c:
                   30401:        index -> strchr remove unnecesary stuff
                   30402:        [af2d05238062]
                   30403: 
                   30404:        * check.c:
                   30405:        now call skeychallenge() to get challenge instead of making one up
                   30406:        ourselves. this way, we get extra goodies in the prompt.
                   30407:        [49b770d98d3a]
                   30408: 
                   30409: 1996-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30410: 
                   30411:        * CHANGES:
                   30412:        added one
                   30413:        [3f5149357e2a] [SUDO_1_5_1]
                   30414: 
                   30415:        * parse.lex:
                   30416:        allow logins to start with a number (YUCK!)
                   30417:        [7ed7ef324741]
                   30418: 
                   30419: 1996-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30420: 
                   30421:        * TROUBLESHOOTING:
                   30422:        added soalris 2.5 vs 2.4 note
                   30423:        [16160a251aae]
                   30424: 
                   30425:        * configure.in:
                   30426:        DUNIX doesn't need -lnsl
                   30427:        [be924cc322c3]
                   30428: 
                   30429:        * CHANGES:
                   30430:        *** empty log message ***
                   30431:        [1b2937521981]
                   30432: 
                   30433:        * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
                   30434:        getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
                   30435:        ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
                   30436:        options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
                   30437:        strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c,
                   30438:        utime.c, version.h, visudo.c:
                   30439:        courtesan
                   30440:        [5f203589bbfe]
                   30441: 
                   30442:        * PORTING, README, RUNSON:
                   30443:        courtesan
                   30444:        [d72517f4937e]
                   30445: 
                   30446:        * INSTALL, Makefile.in, TROUBLESHOOTING:
                   30447:        courtesan
                   30448:        [5c007e3c7a71]
                   30449: 
                   30450:        * visudo.pod:
                   30451:        *** empty log message ***
                   30452:        [37ebe85bd4e1]
                   30453: 
                   30454:        * sudo.pod, visudo.pod:
                   30455:        courtesan
                   30456:        [37f02e2130ea]
                   30457: 
                   30458: 1996-09-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30459: 
                   30460:        * HISTORY:
                   30461:        added courtesan ./
                   30462:        [b01435226276]
                   30463: 
                   30464: 1996-09-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30465: 
                   30466:        * sudo.c:
                   30467:        added $SUDO_PROMPT support
                   30468:        [cb1fa72c093d]
                   30469: 
                   30470: 1996-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30471: 
                   30472:        * check.c:
                   30473:        print long skey challemged to stderr, not stdout
                   30474:        [750fc775b3b2]
                   30475: 
                   30476: 1996-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30477: 
                   30478:        * CHANGES:
                   30479:        updated for 1.5.1
                   30480:        [9b615f393057]
                   30481: 
                   30482:        * emul/utime.h:
                   30483:        ++version
                   30484:        [a94de18deafb]
                   30485: 
                   30486: 1996-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30487: 
                   30488:        * RUNSON:
                   30489:        updated for 1.5.1
                   30490:        [4092f20ab634]
                   30491: 
                   30492: 1996-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30493: 
                   30494:        * check.c:
                   30495:        use shost, not host for tgetpass
                   30496:        [6061c49ff9be]
                   30497: 
                   30498:        * sudo.pod:
                   30499:        documented %u and %h
                   30500:        [6d2922d29897]
                   30501: 
                   30502:        * OPTIONS:
                   30503:        documented %u and %h
                   30504:        [1a71da13a864]
                   30505: 
                   30506:        * configure.in:
                   30507:        fixed typo
                   30508:        [1230dec2b062]
                   30509: 
                   30510:        * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
                   30511:        dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   30512:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   30513:        interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   30514:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   30515:        testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
                   30516:        ++version
                   30517:        [65ce8eabf77a]
                   30518: 
                   30519:        * BUGS:
                   30520:        ++version
                   30521:        [afecab53aab7]
                   30522: 
                   30523: 1996-08-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30524: 
                   30525:        * Makefile.in, configure.in, version.h:
                   30526:        ++version
                   30527:        [fb3ff940d672]
                   30528: 
                   30529:        * sudo.h:
                   30530:        new tgetpass() params
                   30531:        [9eccc5b0f8ae]
                   30532: 
                   30533:        * check.c:
                   30534:        pass use and host to tgetpass
                   30535:        [c56d9d13c401]
                   30536: 
                   30537:        * tgetpass.c:
                   30538:        added %u and %h escapes
                   30539:        [04ae775d3e5d]
                   30540: 
                   30541:        * OPTIONS, check.c, options.h:
                   30542:        added NO_MESSAGE
                   30543:        [3927dad19057]
                   30544: 
                   30545:        * configure.in:
                   30546:        added cray (unicos) support
                   30547:        [1122210c5fb1]
                   30548: 
                   30549: 1996-08-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30550: 
                   30551:        * OPTIONS, options.h, sudo.c:
                   30552:        added SHELL_SETS_HOME
                   30553:        [0b26909b0929]
                   30554: 
                   30555: 1996-08-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30556: 
                   30557:        * INSTALL:
                   30558:        added note about "make install"
                   30559:        [7e56ea76d4b4]
                   30560: 
                   30561:        * parse.yacc:
                   30562:        changed length/size params from int to size_t
                   30563:        [5654e5ceb1b3]
                   30564: 
                   30565:        * OPTIONS:
                   30566:        now get CSOPS insults as well by default
                   30567:        [297323d0179a]
                   30568: 
                   30569:        * insults.h:
                   30570:        use csops insults too by default
                   30571:        [07fafc136169]
                   30572: 
                   30573:        * INSTALL, Makefile.in, README, config.h.in, configure.in, version.h:
                   30574:        version = 1.5
                   30575:        [4b8772b11e3b]
                   30576: 
                   30577:        * sudo.c:
                   30578:        added runas_homedir
                   30579:        [b0e0d4417a15]
                   30580: 
                   30581:        * TODO:
                   30582:        updated for 1.5
                   30583:        [66259df825d5]
                   30584: 
                   30585:        * RUNSON:
                   30586:        updated for 1.5
                   30587:        [e08bc9ebfe95]
                   30588: 
                   30589:        * CHANGES:
                   30590:        1.5 release
                   30591:        [8c16942fea41]
                   30592: 
                   30593:        * INSTALL:
                   30594:        added "upgrading" notes
                   30595:        [210d968964ff]
                   30596: 
                   30597: 1996-08-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30598: 
                   30599:        * visudo.c:
                   30600:        now do chmod and chown after edit of temp file and before rename
                   30601:        [de174e34faa7] [SUDO_1_5_0]
                   30602: 
                   30603: 1996-08-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30604: 
                   30605:        * Makefile.in:
                   30606:        ++version added INSTALL.configure
                   30607:        [c9e9214f52ae]
                   30608: 
                   30609:        * configure.in, version.h:
                   30610:        ++version
                   30611:        [5985abed3eb2]
                   30612: 
                   30613:        * TROUBLESHOOTING:
                   30614:        *** empty log message ***
                   30615:        [d65c540ec52e]
                   30616: 
                   30617:        * parse.yacc:
                   30618:        added missing cast
                   30619:        [e7247319a7d5]
                   30620: 
                   30621:        * sudo.c:
                   30622:        sets $HOME to pw_dir of runas user
                   30623:        [d3f7f4d05752]
                   30624: 
                   30625:        * sudo.pod:
                   30626:        document $HOME change
                   30627:        [854454d458c4]
                   30628: 
                   30629: 1996-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30630: 
                   30631:        * sudo.pod:
                   30632:        fixed up some wording
                   30633:        [b0c8582f2c97]
                   30634: 
                   30635:        * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   30636:        interfaces.c, logging.c, parse.c, parse.lex, parse.yacc, putenv.c,
                   30637:        strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
                   30638:        visudo.c:
                   30639:        ++version
                   30640:        [748be723fd8b]
                   30641: 
                   30642:        * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
                   30643:        insults.h, options.h, pathnames.h.in, sudo.h:
                   30644:        ++version
                   30645:        [acdf8b1b2a1b]
                   30646: 
                   30647:        * emul/utime.h:
                   30648:        ++version
                   30649:        [b3f35298ab8d]
                   30650: 
                   30651:        * sudo.h:
                   30652:        name nad type changes
                   30653:        [db24ab3da141]
                   30654: 
                   30655:        * testsudoers.c:
                   30656:        now works with new sudo
                   30657:        [379346c42cc2]
                   30658: 
                   30659:        * parse.yacc:
                   30660:        fixed some XXX
                   30661:        [f5fe4c990052]
                   30662: 
                   30663:        * parse.yacc:
                   30664:        some variable name changes + comment headers for functions.
                   30665:        [3dc3bd9aa73d]
                   30666: 
                   30667:        * tgetpass.c:
                   30668:        added extra paren's to make compilers happy
                   30669:        [9e4968a34d56]
                   30670: 
                   30671:        * sudo.c:
                   30672:        *** empty log message ***
                   30673:        [70c924c1ed69]
                   30674: 
                   30675:        * parse.c:
                   30676:        now uses init_parser() if not in sudoers and tries "list" or
                   30677:        "validate" scold but don't be nasty.
                   30678:        [c0d8fb3f8c9e]
                   30679: 
                   30680:        * TROUBLESHOOTING:
                   30681:        now can use upper case login names
                   30682:        [c772fffcefe5]
                   30683: 
                   30684:        * visudo.c:
                   30685:        now uses init_parser()
                   30686:        [b9efae7243fd]
                   30687: 
                   30688:        * INSTALL, README:
                   30689:        updated
                   30690:        [27dc8283fdc8]
                   30691: 
                   30692:        * PORTING:
                   30693:        added info about PASSWORD_TIMEOUT
                   30694:        [980e15d892f8]
                   30695: 
                   30696:        * INSTALL.configure:
                   30697:        Initial revision
                   30698:        [8292e89a08d3]
                   30699: 
                   30700:        * BUGS:
                   30701:        fixed a bug ,
                   30702:        [c6e46f5624f9]
                   30703: 
                   30704:        * parse.yacc:
                   30705:        now dynamically allocates memory for the stacks -- no more
                   30706:        overflows!
                   30707:        [8615c35b6ad3]
                   30708: 
                   30709:        * sudo.pod:
                   30710:        -l now explands command aliases
                   30711:        [39f45605935d]
                   30712: 
                   30713:        * parse.yacc:
                   30714:        hacks to expand command aliases for `sudo -l'
                   30715:        [e4eb752608f9]
                   30716: 
                   30717:        * sudo.c:
                   30718:        remove $ENV and $BASH_ENV (dangerous in ksh, posix sh, and bash)
                   30719:        [01327ca5084b]
                   30720: 
                   30721:        * sudo.h:
                   30722:        added struct command_alias
                   30723:        [dd2f32764082]
                   30724: 
                   30725:        * sudo.pod:
                   30726:        fixed a bug
                   30727:        [e708ff08d2eb]
                   30728: 
                   30729:        * lsearch.c:
                   30730:        in compar() key should be first arg
                   30731:        [fc14c3fa62ee]
                   30732: 
                   30733: 1996-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30734: 
                   30735:        * BUGS:
                   30736:        fixed some bugs
                   30737:        [639dfe425bd5]
                   30738: 
                   30739:        * parse.yacc:
                   30740:        can now deal with upcase HOST and USER names
                   30741:        [c6aa7bcfb00d]
                   30742: 
                   30743:        * sudo.c:
                   30744:        don't yell too loudly at non-sudoers if they do "sudo -l"
                   30745:        [4ef146128d89]
                   30746: 
                   30747:        * sudo.pod:
                   30748:        fixed thinko
                   30749:        [830f2f0f22e7]
                   30750: 
                   30751:        * parse.c:
                   30752:        fix comment
                   30753:        [d20ce9e17ddc]
                   30754: 
                   30755: 1996-08-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30756: 
                   30757:        * parse.c, parse.yacc:
                   30758:        added support for new `sudo -l' stuff
                   30759:        [7dceaef3c733]
                   30760: 
                   30761:        * sudo.c:
                   30762:        now uses list_matches()
                   30763:        [293364821b61]
                   30764: 
                   30765:        * sudo.h:
                   30766:        added struct sudo_match
                   30767:        [b2684179d179]
                   30768: 
                   30769:        * configure.in:
                   30770:        now more -lgnumalloc
                   30771:        [4f8ae42617d8]
                   30772: 
                   30773: 1996-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30774: 
                   30775:        * install-sh:
                   30776:        added more paths for chown and whoami
                   30777:        [6e685a19426c]
                   30778: 
                   30779: 1996-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30780: 
                   30781:        * check.c:
                   30782:        typo
                   30783:        [3adfa01c04bc]
                   30784: 
                   30785: 1996-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30786: 
                   30787:        * aclocal.m4:
                   30788:        fixed DUNIX check for shadow pw
                   30789:        [c25324bcd27b]
                   30790: 
                   30791:        * tgetpass.c:
                   30792:        now only turn off echo if it is already on. this fixes a race when
                   30793:        you use sudo in a pipelin
                   30794:        [28388c2de21c]
                   30795: 
                   30796:        * INSTALL:
                   30797:        updated
                   30798:        [b45ac9366b7e]
                   30799: 
                   30800:        * configure.in:
                   30801:        changed "test -z $foo && do_this" to if; then construct
                   30802:        [2183c4426bca]
                   30803: 
                   30804: 1996-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30805: 
                   30806:        * configure.in:
                   30807:        added missing defines of SHADOW_TYPE
                   30808:        [be89ea68a7f3]
                   30809: 
                   30810: 1996-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30811: 
                   30812:        * check.c:
                   30813:        protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since they are
                   30814:        only in dunix 4.x
                   30815:        [1e7c1c677263]
                   30816: 
                   30817:        * getspwuid.c:
                   30818:        added AUTH_CRYPT_C1CRYPT support
                   30819:        [88d6b0058b20]
                   30820: 
                   30821:        * parse.c:
                   30822:        no longer return VALIDATE_NOT_OK if there was a runas that didn't
                   30823:        match. Now we can have runas stuff on more than one line.
                   30824:        [52b68920d7b7]
                   30825: 
                   30826:        * getspwuid.c, sudo.c, tgetpass.c:
                   30827:        use SHADOW_TYPE instead of HAVE_C2_SECURITY
                   30828:        [cf401dfcbc06]
                   30829: 
                   30830:        * configure.in:
                   30831:        got rid of HAVE_C2_SECURITY SHADOW_TYPE is always defined to
                   30832:        something
                   30833:        [c7a233c4dd93]
                   30834: 
                   30835:        * config.h.in:
                   30836:        removed HAVE_C2_SECURITY added SPW_BSD
                   30837:        [8314405e9754]
                   30838: 
                   30839:        * compat.h:
                   30840:        use SHADOW_TYPE instead of HAVE_C2_SECURITY
                   30841:        [6f94870df17f]
                   30842: 
                   30843:        * check.c:
                   30844:        SHADOW_TYPE is always defined so just against its value
                   30845:        [72c69a55d02f]
                   30846: 
                   30847:        * aclocal.m4:
                   30848:        added SUDO_CHECK_SHADOW_DUNIX
                   30849:        [ef025ae9d496]
                   30850: 
                   30851: 1996-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30852: 
                   30853:        * sudoers.pod:
                   30854:        * -> ?* in one example added another instance of (runas) and one of
                   30855:        NOPASSWD:
                   30856:        [d74fe1dcbe7d]
                   30857: 
                   30858: 1996-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30859: 
                   30860:        * configure.in:
                   30861:        added back check for config.cache from other host type
                   30862:        [0ba87871f585]
                   30863: 
                   30864:        * parse.lex:
                   30865:        removed an instance of \"
                   30866:        [1e008d3709f6]
                   30867: 
                   30868:        * sample.sudoers:
                   30869:        added an example
                   30870:        [dbfcf68ee330]
                   30871: 
                   30872:        * sudoers.pod:
                   30873:        updated wrt new wildcard matching
                   30874:        [193fa44a475b]
                   30875: 
                   30876:        * configure.in:
                   30877:        new check for shadow passwords if we don't know anything
                   30878:        [67465df7dc9a]
                   30879: 
                   30880:        * aclocal.m4:
                   30881:        new SUDO_CHECK_SHADOW_GENERIC
                   30882:        [3563b16a41b8]
                   30883: 
                   30884:        * configure.in:
                   30885:        added back check for -lsocket (oops)
                   30886:        [a80882ee1cb6]
                   30887: 
                   30888:        * configure.in:
                   30889:        better (working) check for shadow passwd type if we know to use C2.
                   30890:        [3cdd2a59a641]
                   30891: 
                   30892:        * configure.in:
                   30893:        now uses AC_CANONICAL_HOST to figure out os type
                   30894:        [80db7fe6e704]
                   30895: 
                   30896:        * Makefile.in:
                   30897:        added config.{guess,sub}
                   30898:        [c6be7e3ca384]
                   30899: 
                   30900:        * aclocal.m4:
                   30901:        removed unused stuff to figure out os type
                   30902:        [c9a0f3b57123]
                   30903: 
                   30904:        * config.sub:
                   30905:        added openbsd
                   30906:        [bfc6bfec3668]
                   30907: 
                   30908:        * config.sub:
                   30909:        Initial revision
                   30910:        [e6e06ce0d17d]
                   30911: 
                   30912:        * config.guess:
                   30913:        Initial revision
                   30914:        [99dd06f79199]
                   30915: 
                   30916:        * testsudoers.c:
                   30917:        don't call fnmatch() with FNM_PATHNAME flag unless it can only be a
                   30918:        pathname. need to check against sudoers_args even if user_args is
                   30919:        nil
                   30920:        [66e6cf77f5d6]
                   30921: 
                   30922:        * parse.c:
                   30923:        don't call fnmatch() with FNM_PATHNAME flag unless it can only be a
                   30924:        pathname need to check against sudoers_args even if user_args is nil
                   30925:        [74374df17311]
                   30926: 
                   30927: 1996-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30928: 
                   30929:        * check.c:
                   30930:        added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
                   30931:        [cbb00261c415]
                   30932: 
                   30933:        * testsudoers.c:
                   30934:        now takes command line args and uses cmnd_args
                   30935:        [f0c2fd35a527]
                   30936: 
                   30937:        * parse.lex:
                   30938:        fill_args was adding an extra leading space
                   30939:        [692fc999b2e8]
                   30940: 
                   30941: 1996-07-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30942: 
                   30943:        * visudo.c:
                   30944:        fixed dummy command_matches()
                   30945:        [93d9543db6e2]
                   30946: 
                   30947:        * parse.yacc:
                   30948:        fixed prototype
                   30949:        [7b0addfbd429]
                   30950: 
                   30951:        * sudo.h:
                   30952:        added cmnd_args
                   30953:        [8f47c4ae65ef]
                   30954: 
                   30955:        * parse.yacc:
                   30956:        now uses flat args string
                   30957:        [016e65877da3]
                   30958: 
                   30959:        * parse.c, parse.lex:
                   30960:        now uses flat arg string
                   30961:        [5b5f2e3f4c09]
                   30962: 
                   30963:        * visudo.c:
                   30964:        added cmnd_args def
                   30965:        [876867134775]
                   30966: 
                   30967:        * sudo.c:
                   30968:        now sets cmnd_args global
                   30969:        [e6fee70cb59b]
                   30970: 
                   30971:        * logging.c:
                   30972:        cmnd_args is now exported from sudo.[ch]
                   30973:        [7a9cd36e356f]
                   30974: 
                   30975: 1996-07-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30976: 
                   30977:        * parse.yacc:
                   30978:        can't rely on cmnd_matches as much as I thought -- added some $$
                   30979:        stuff back in to prevent namespace pollution problems.
                   30980:        [3c45fedb5af3]
                   30981: 
                   30982:        * parse.yacc:
                   30983:        Simplified parse rules wrt runas and NOPASSWD (more consistent).
                   30984:        [e6d838c8a4c7]
                   30985: 
                   30986: 1996-07-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   30987: 
                   30988:        * parse.lex:
                   30989:        NOPASSWD may now have blanks before the ':' '(' only starts a
                   30990:        'runas' if in the initial state to avoid collision with command args
                   30991:        [c5c01172f499]
                   30992: 
                   30993:        * configure.in:
                   30994:        added checks for specific shadow passwd schemes
                   30995:        [b7e3d1f7b84f]
                   30996: 
                   30997:        * aclocal.m4:
                   30998:        added routines to check for specific shadow passwd types
                   30999:        [e5e1d19960a6]
                   31000: 
                   31001: 1996-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31002: 
                   31003:        * configure.in:
                   31004:        added support for ncr boxen
                   31005:        [bea9dc5aae7f]
                   31006: 
                   31007:        * aclocal.m4:
                   31008:        added support for detecting ncr boxen
                   31009:        [8653a158a924]
                   31010: 
                   31011: 1996-07-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31012: 
                   31013:        * configure.in:
                   31014:        added sinix support
                   31015:        [5de2b2173ee1]
                   31016: 
                   31017: 1996-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31018: 
                   31019:        * TROUBLESHOOTING:
                   31020:        added info about "config.cache from other other" error.
                   31021:        [845b10198e0b]
                   31022: 
                   31023:        * aclocal.m4:
                   31024:        now makes sure you don't have a config.cache file from another OS
                   31025:        [4fe32571c021]
                   31026: 
                   31027:        * configure.in:
                   31028:        now sets $LIBS when needed to configure links with libs when doing
                   31029:        tests hpux10 now uses SPW_SECUREWARE for C2 added check for
                   31030:        bigcrypt(3) if SPW_SECUREWARE
                   31031:        [2df6b8ca538f]
                   31032: 
                   31033:        * getspwuid.c:
                   31034:        fixed typo
                   31035:        [fe1cb1d792d6]
                   31036: 
                   31037:        * tgetpass.c:
                   31038:        now include stuff for SPW_SECUREWARE to get AUTH_MAX_PASSWD_LENGTH
                   31039:        [f71138372c07]
                   31040: 
                   31041:        * getspwuid.c:
                   31042:        no more SPW_HPUX10
                   31043:        [cfdeb18bc16b]
                   31044: 
                   31045:        * config.h.in:
                   31046:        no more SPW_HPUX10 added HAVE_BIGCRYPT
                   31047:        [00d296479a61]
                   31048: 
                   31049:        * compat.h:
                   31050:        now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
                   31051:        [6c6d9e680417]
                   31052: 
                   31053:        * check.c:
                   31054:        SPW_SECUREWARE now uses bigcrypt
                   31055:        [be71fc66690f]
                   31056: 
                   31057: 1996-07-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31058: 
                   31059:        * sample.sudoers:
                   31060:        fixed 2 syntax errors
                   31061:        [45eee19ef4ac]
                   31062: 
                   31063:        * sudoers:
                   31064:        root may now run ALL as ALL
                   31065:        [1b54c6b9b212]
                   31066: 
                   31067: 1996-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31068: 
                   31069:        * interfaces.c:
                   31070:        fixed a typo/thinko that broke BSD's with sa_len
                   31071:        [603438360126]
                   31072: 
                   31073: 1996-07-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31074: 
                   31075:        * check.c, configure.in:
                   31076:        updated AFS support
                   31077:        [e572eb8d177a]
                   31078: 
                   31079:        * TROUBLESHOOTING:
                   31080:        added entry about /usr/ucb/cc
                   31081:        [025b353aa9d3]
                   31082: 
                   31083:        * INSTALL:
                   31084:        prep no longer holds gcc binaries
                   31085:        [8b0942958049]
                   31086: 
                   31087:        * INSTALL:
                   31088:        updated AFS note
                   31089:        [7af6efd5abe4]
                   31090: 
                   31091:        * Makefile.in:
                   31092:        added @AFS_LIBS@
                   31093:        [97b6fe6ad7d6]
                   31094: 
                   31095:        * compat.h:
                   31096:        AFS allows long passwords
                   31097:        [5fb17122c302]
                   31098: 
                   31099:        * testsudoers.c:
                   31100:        fixed -u user support
                   31101:        [b1a0c1648639]
                   31102: 
                   31103:        * parse.c:
                   31104:        sudo -v now groks VALIDATE_OK_NOPASS
                   31105:        [74fc03fffe7e]
                   31106: 
                   31107:        * parse.yacc:
                   31108:        fixed no_passwd vs. runas_matched
                   31109:        [549a9b791a6a]
                   31110: 
                   31111:        * TROUBLESHOOTING:
                   31112:        took out stuff about NFS-mounting since it is no longer an issue
                   31113:        [d95ab7fbbc61]
                   31114: 
                   31115:        * INSTALL:
                   31116:        added --with-libraries > --with-libpath --with-incpath
                   31117:        [d5d15a7a0f4c]
                   31118: 
                   31119:        * parse.yacc:
                   31120:        was setting runas_matches to -1 in wrong place
                   31121:        [db2b1deb8d33]
                   31122: 
                   31123:        * check.c:
                   31124:        removed usersec.h which is not present in new AFS versions
                   31125:        [618b016dd17f]
                   31126: 
                   31127:        * tgetpass.c:
                   31128:        now deals with timeout <= 0
                   31129:        [ba53a1257255]
                   31130: 
                   31131:        * OPTIONS:
                   31132:        updated
                   31133:        [75093bd8fdca]
                   31134: 
                   31135:        * configure.in:
                   31136:        BSD/OS >= 2.0 now uses shlicc instead of just gcc
                   31137:        [ff6dbf7825c2]
                   31138: 
                   31139:        * sudo.c:
                   31140:        fixed backwards compatibility with sudo 1.4 sudoers mode for root
                   31141:        readable/writable filesystems
                   31142:        [2694ed627221]
                   31143: 
                   31144:        * Makefile.in:
                   31145:        now gives INSTALL -c flag
                   31146:        [63db055a2fd1]
                   31147: 
                   31148:        * parse.yacc:
                   31149:        slightly simpler initialization of no_passwd and runas_matches
                   31150:        [463a1b5fa323]
                   31151: 
                   31152:        * testsudoers.c:
                   31153:        added -u username support
                   31154:        [38b072fcd6b3]
                   31155: 
                   31156:        * configure.in:
                   31157:        improved --with-libraries support
                   31158:        [047dbc5f0af2]
                   31159: 
                   31160: 1996-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31161: 
                   31162:        * configure.in:
                   31163:        added --with-incpath, --with-libpath, --with-libraries
                   31164:        [20f20d6c718c]
                   31165: 
                   31166:        * parse.yacc:
                   31167:        now initializes some fields that weren't getting set to -1 pretty
                   31168:        gross -- need a rewrite.
                   31169:        [021c160390c6]
                   31170: 
                   31171: 1996-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31172: 
                   31173:        * alloca.c:
                   31174:        removed emacs'isms
                   31175:        [9d4ec2efe057]
                   31176: 
                   31177:        * configure.in:
                   31178:        no longer add -lPW to *_LIBS since we include alloca.c
                   31179:        [a626d1bbea80]
                   31180: 
                   31181:        * config.h.in:
                   31182:        added HAVE_ALLOCA_H
                   31183:        [15491e2a6cff]
                   31184: 
                   31185:        * Makefile.in:
                   31186:        added alloca.c
                   31187:        [0400f25e1fe4]
                   31188: 
                   31189:        * alloca.c:
                   31190:        Initial revision
                   31191:        [06d033aa4882]
                   31192: 
                   31193:        * configure.in:
                   31194:        ++version
                   31195:        [f52c0fb98f90]
                   31196: 
                   31197: 1996-06-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31198: 
                   31199:        * sudo.c:
                   31200:        now set uid to 1 instead of nobody for PERM_SUDOERS since nobody is
                   31201:        not always set to a valid uid.
                   31202:        [c2669f77704d]
                   31203: 
                   31204:        * OPTIONS:
                   31205:        fixed entry for SUDO_MODE
                   31206:        [d7272f6035b8]
                   31207: 
                   31208:        * sudo.c:
                   31209:        Fixed NFS-mounted sudoers file under solaris both uid *and* gid were
                   31210:        being set to -2. Now beat NFS to the punch and set uid to "nobody"
                   31211:        ourselves, preserving group 0 to read sudoers.
                   31212:        [b1fbc5dd1e34]
                   31213: 
                   31214:        * parse.c:
                   31215:        moved set_perms(PERM_ROOT) to be before yyparse()
                   31216:        [7619d8080735]
                   31217: 
                   31218:        * logging.c:
                   31219:        fixed a typo
                   31220:        [318acc48cde0]
                   31221: 
                   31222:        * configure.in:
                   31223:        no longer need AC_PROG_INSTALL
                   31224:        [de01b1336dc8]
                   31225: 
                   31226:        * Makefile.in:
                   31227:        always use install-sh to avoid install(1)'s that use get{pw,gr}nam
                   31228:        [ea2351986406]
                   31229: 
                   31230:        * INSTALL:
                   31231:        make clean -> make distclean
                   31232:        [704a98e8ba10]
                   31233: 
                   31234: 1996-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31235: 
                   31236:        * parse.yacc:
                   31237:        removed some unnecsary if's
                   31238:        [f00db6508132]
                   31239: 
                   31240:        * Makefile.in, version.h:
                   31241:        ++version
                   31242:        [bdb6740b24c8]
                   31243: 
                   31244:        * parse.c, testsudoers.c:
                   31245:        now includes netgroup.h
                   31246:        [93f5a06352bc]
                   31247: 
                   31248:        * interfaces.c:
                   31249:        removed cats of ioctl to int since they didn't shut up -Wall
                   31250:        [83e9f912cd7a]
                   31251: 
                   31252:        * interfaces.c:
                   31253:        explicately cast ioctl() to int since it it not always declared
                   31254:        [2ff9294e469e]
                   31255: 
                   31256:        * sudo.h:
                   31257:        added declarations for yyparse() and yylex()
                   31258:        [6071321ab771]
                   31259: 
                   31260:        * parse.yacc:
                   31261:        fixed an occurence of '==' -> '='
                   31262:        [2c46d2e11d57]
                   31263: 
                   31264:        * config.h.in, configure.in:
                   31265:        added check for netgroup.h
                   31266:        [73403050f4e3]
                   31267: 
                   31268:        * sudo.c:
                   31269:        fixed 2 compiler warnings
                   31270:        [680929b0bd97]
                   31271: 
                   31272:        * sudo.c:
                   31273:        SHELL_IF_NO_ARGS caused core dump since NewArg[cv] weren't being
                   31274:        initialized
                   31275:        [18707ecd07c2]
                   31276: 
                   31277: 1996-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31278: 
                   31279:        * sudo.pod:
                   31280:        fixed a typo
                   31281:        [e4b5c12aa130]
                   31282: 
                   31283: 1996-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31284: 
                   31285:        * parse.yacc:
                   31286:        fixed a formatting thingie
                   31287:        [c79327b6f19b]
                   31288: 
                   31289:        * parse.c, parse.yacc:
                   31290:        fixed -u support with multiple user lists on a line
                   31291:        [e4d1066adca2]
                   31292: 
                   31293:        * configure.in:
                   31294:        unixware needs -lgen
                   31295:        [b5bf9bca63cc]
                   31296: 
                   31297:        * README:
                   31298:        updated ftp location
                   31299:        [b25a033f7921]
                   31300: 
                   31301:        * sudoers.pod:
                   31302:        add net_addr/netmask support
                   31303:        [674e83516d1e]
                   31304: 
                   31305:        * sample.sudoers:
                   31306:        added net_addr/mask example
                   31307:        [774878e89b28]
                   31308: 
                   31309:        * parse.c, parse.lex:
                   31310:        added support for net_addr/netmask
                   31311:        [e33de27325d8]
                   31312: 
                   31313: 1996-06-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31314: 
                   31315:        * sudoers.pod:
                   31316:        ^ -> !
                   31317:        [1a084950d6ef]
                   31318: 
                   31319: 1996-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31320: 
                   31321:        * RUNSON:
                   31322:        updated for 1.4.3
                   31323:        [c82019025d09]
                   31324: 
                   31325:        * CHANGES:
                   31326:        udpated for 1.4.3
                   31327:        [ceaa81adb8f0]
                   31328: 
                   31329:        * BUGS, TODO, TROUBLESHOOTING:
                   31330:        updated
                   31331:        [ff94fae4b853]
                   31332: 
                   31333:        * sample.sudoers:
                   31334:        updated with examples of new stuff
                   31335:        [99d0b4cb4c9c]
                   31336: 
                   31337:        * INSTALL, README:
                   31338:        ++version
                   31339:        [b763b80fe836]
                   31340: 
                   31341:        * sudoers.pod:
                   31342:        updated wrt -u and NOPASSWD
                   31343:        [0b5b722ea0f4]
                   31344: 
                   31345:        * sudo.pod:
                   31346:        updated wrt -u and CAVEATS
                   31347:        [71d5d53b5d18]
                   31348: 
                   31349: 1996-06-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31350: 
                   31351:        * sudo.c:
                   31352:        fixed usage()
                   31353:        [114c7d09b550]
                   31354: 
                   31355:        * parse.lex:
                   31356:        now use :foo: character classes (makes no diff for generated lexer)
                   31357:        [7b0aeb737a02]
                   31358: 
                   31359: 1996-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31360: 
                   31361:        * check.c:
                   31362:        fixed LONG_SKEY_PROMPT stuff
                   31363:        [0efe78b4bdda]
                   31364: 
                   31365: 1996-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31366: 
                   31367:        * visudo.c:
                   31368:        fixed a comment
                   31369:        [3d289017104b]
                   31370: 
                   31371:        * lsearch.c:
                   31372:        make more like NetBSD one -- now compiles w/o warnings
                   31373:        [932206296a54]
                   31374: 
                   31375:        * emul/search.h:
                   31376:        fixed decls of lsearch()
                   31377:        [c58cf4584c45]
                   31378: 
                   31379:        * config.h.in, configure.in, getspwuid.c:
                   31380:        added SPW_HPUX10
                   31381:        [d74e5eaa5f17]
                   31382: 
                   31383:        * check.c:
                   31384:        hpux 10 uses bigcrypt() if C2
                   31385:        [359eb63f4021]
                   31386: 
                   31387: 1996-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31388: 
                   31389:        * parse.c:
                   31390:        now always uses fnmatch to match args
                   31391:        [a9d91f35256a]
                   31392: 
                   31393:        * tgetpass.c:
                   31394:        back to using stdio instead of raw i/o since that caused some
                   31395:        problems
                   31396:        [e7ce2bc92974]
                   31397: 
                   31398: 1996-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31399: 
                   31400:        * sudo.c:
                   31401:        now give usage warning if use -l,-v,-k with args
                   31402:        [6b48180c4fea]
                   31403: 
                   31404: 1996-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31405: 
                   31406:        * sudo.c:
                   31407:        NewArgc is now set to 1 for -l, -v, -k
                   31408:        [7497cb1416a8]
                   31409: 
                   31410:        * sudo.c:
                   31411:        now sets sudoers to correct group if mode is 0400
                   31412:        [484c43d99718]
                   31413: 
                   31414:        * install-sh:
                   31415:        updated to version used by inn and bind
                   31416:        [28683ad8725a]
                   31417: 
                   31418:        * configure.in:
                   31419:        now uses -lgnumalloc if it exists
                   31420:        [3651ca4415a2]
                   31421: 
                   31422:        * Makefile.in:
                   31423:        "make install" now sets uid/gid and mode on sudoers if it exists
                   31424:        [1f5216191ae9]
                   31425: 
                   31426:        * sudo.c:
                   31427:        rmeoved debugging statements
                   31428:        [aeda278e2c26]
                   31429: 
                   31430:        * parse.yacc:
                   31431:        added a missing free()
                   31432:        [592c9482a159]
                   31433: 
                   31434:        * sudo.c:
                   31435:        now uses user_gid instead of getegid (which was wrong anyway) to set
                   31436:        SUDO_GID Now sets command line args in SUDO_COMMAND envariabled
                   31437:        (logging.c depends on args being in the environment)
                   31438:        [9f5328a3b942]
                   31439: 
                   31440:        * logging.c:
                   31441:        now uses SUDO_COMMAND envariable to get command args rather than
                   31442:        building it up again.
                   31443:        [7f8edc5bccb7]
                   31444: 
                   31445:        * parse.c:
                   31446:        now uses user_gid
                   31447:        [4b9303ae45fe]
                   31448: 
                   31449:        * sudo.c:
                   31450:        fixed off by one error in allocation NewArgv
                   31451:        [921ea1a4e7c6]
                   31452: 
                   31453:        * parse.c:
                   31454:        in sudoers, 'command ""' now means command with no args
                   31455:        [a5273648ace2]
                   31456: 
                   31457:        * configure.in:
                   31458:        added check for fnmatch(3) and fnmatch.h
                   31459:        [258916a7866f]
                   31460: 
                   31461:        * config.h.in:
                   31462:        added HAVE_FNMATCH
                   31463:        [b9860d361e93]
                   31464: 
                   31465:        * Makefile.in:
                   31466:        replaced wildcat.* with fnmatch.*
                   31467:        [03ad9ee21a1c]
                   31468: 
                   31469:        * testsudoers.c:
                   31470:        now uses fnmatch()
                   31471:        [5a7f7de987a9]
                   31472: 
                   31473: 1996-05-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31474: 
                   31475:        * parse.c:
                   31476:        now uses fnmatch() instead of wildmat a trailing star (*) by itself
                   31477:        now matches multiple args added support for wildcards in the
                   31478:        pathname in sudoers
                   31479:        [1f7fb950b868]
                   31480: 
                   31481: 1996-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31482: 
                   31483:        * fnmatch.c:
                   31484:        now includes compat.h and config.h
                   31485:        [090206b95cf8]
                   31486: 
                   31487:        * config.h.in:
                   31488:        added HAVE_FNMATCH_H
                   31489:        [90eb42150173]
                   31490: 
                   31491:        * configure.in:
                   31492:        now checks for alloca() (if needed by bison or dce) and links with
                   31493:        -lPW if it contains alloca() and libv and compiler do not.
                   31494:        [cfa2b3cef49a]
                   31495: 
                   31496:        * emul/fnmatch.h, fnmatch.3, fnmatch.c:
                   31497:        Initial revision
                   31498:        [20b1f762a32a]
                   31499: 
                   31500: 1996-04-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31501: 
                   31502:        * sudo.c:
                   31503:        now fixes mode on sudoers if set to 0400 to aid in upgrade
                   31504:        [d4bdfd521820]
                   31505: 
                   31506: 1996-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31507: 
                   31508:        * Makefile.in:
                   31509:        fixed pod2man usage
                   31510:        [5adf2ec77b27]
                   31511: 
                   31512:        * Makefile.in, configure.in, version.h:
                   31513:        ++version
                   31514:        [b4029de876d0]
                   31515: 
                   31516:        * testsudoers.c, visudo.c:
                   31517:        runas_user is now initialized to "root"
                   31518:        [8537d97bff39]
                   31519: 
                   31520:        * sudo.h:
                   31521:        removed PERM_FULL_ROOT
                   31522:        [241f8bbf647f]
                   31523: 
                   31524:        * sudo.c:
                   31525:        runas_user defaults to "root" so no more need to PERM_RUNAS
                   31526:        [fc0c0dfc72ba]
                   31527: 
                   31528:        * parse.c:
                   31529:        will now only running commands as root if there was no runas list
                   31530:        (or if root is in the runas list)
                   31531:        [40c587666c81]
                   31532: 
                   31533:        * logging.c:
                   31534:        now logs "USER=%s"
                   31535:        [b733504c87fd]
                   31536: 
                   31537:        * parse.yacc:
                   31538:        runas_matches is now set to false if we get a negative match
                   31539:        [5495b150b300]
                   31540: 
                   31541:        * parse.lex:
                   31542:        make #uid work + some minor cleanup
                   31543:        [07851bbce03a]
                   31544: 
                   31545:        * sample.sudoers:
                   31546:        added support for NOPASSWD and "runas" from garp@opustel.com /
                   31547:        [7a9c67b51fa5]
                   31548: 
                   31549:        * visudo.c:
                   31550:        added support for "runas" from garp@opustel.com replaced
                   31551:        SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added support for
                   31552:        SUDOERS_MODE
                   31553:        [e714209b9885]
                   31554: 
                   31555:        * testsudoers.c:
                   31556:        added support for "runas" from garp@opustel.com
                   31557:        [b837f856da10]
                   31558: 
                   31559:        * sudo.h:
                   31560:        added support for NO_PASSWD and runas from garp@opustel.com replaced
                   31561:        SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support
                   31562:        fro SUDOERS_MODE
                   31563:        [cea6f26679b7]
                   31564: 
                   31565:        * sudo.c:
                   31566:        added support for NO_PASSWD and runas from garp@opustel.com replaced
                   31567:        SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support fro
                   31568:        SUDOERS_MODE
                   31569:        [61b5434237c5]
                   31570: 
                   31571:        * parse.yacc:
                   31572:        added support for NO_PASSWD and runas from garp@opustel.com
                   31573:        [72ebd3056f22]
                   31574: 
                   31575:        * parse.c, parse.lex:
                   31576:        added support for NO_PASSWD and runas from garp@opustel.com
                   31577:        [fef6dbdd114d]
                   31578: 
                   31579:        * logging.c:
                   31580:        added support for SUDOERS_WRONG_MODE and "runas"
                   31581:        [e794efc2b443]
                   31582: 
                   31583:        * configure.in:
                   31584:        added --with-CC only link with -lshadow on linux (with shadow pw) if
                   31585:        libc lacks getspnam()
                   31586:        [3ecf4ae21002]
                   31587: 
                   31588:        * OPTIONS, options.h:
                   31589:        removed NO_PASSWD since it is not possible to do this in the sudoers
                   31590:        file itself. Replaced SUDOERS_OWNER with SUDOERS_UID and
                   31591:        SUDOERS_GID. Added SUDOERS_MODE.
                   31592:        [2eaa4891ef48]
                   31593: 
                   31594:        * Makefile.in:
                   31595:        now uses SUDOERS_UID and SUDOERS_GID
                   31596:        [8d615f0fdb2a]
                   31597: 
                   31598: 1996-04-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31599: 
                   31600:        * INSTALL:
                   31601:        added --with-CC
                   31602:        [a1b8286a81b8]
                   31603: 
                   31604: 1996-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31605: 
                   31606:        * parse.lex:
                   31607:        added double quote support
                   31608:        [a5e4fc7e3a2b]
                   31609: 
                   31610:        * sudoers.pod:
                   31611:        documented double quoting
                   31612:        [c6ea47969a44]
                   31613: 
                   31614: 1996-04-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31615: 
                   31616:        * mkinstalldirs:
                   31617:        Initial revision
                   31618:        [dcb86d65ad8f]
                   31619: 
                   31620:        * check.c:
                   31621:        fixed some indentation
                   31622:        [4d1c5ab8072b]
                   31623: 
                   31624:        * Makefile.in:
                   31625:        fixed a typo
                   31626:        [0d27eebc7227]
                   31627: 
                   31628:        * Makefile.in:
                   31629:        added install-dirs .
                   31630:        [f499b99b8be7]
                   31631: 
                   31632: 1996-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31633: 
                   31634:        * dce_pwent.c:
                   31635:        new version from "Jeff A. Earickson" <jaearick@colby.edu>
                   31636:        [422481be5fbd]
                   31637: 
                   31638: 1996-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31639: 
                   31640:        * configure.in:
                   31641:        $CSOPS -> $with_csops (whoops, missed one)
                   31642:        [b04c6948130e]
                   31643: 
                   31644:        * BUGS:
                   31645:        updated
                   31646:        [c4d5713e227d]
                   31647: 
                   31648:        * parse.lex:
                   31649:        FQHOST now has same constraints as non-FQHOST
                   31650:        [e1c3bf2381d1]
                   31651: 
                   31652:        * INSTALL:
                   31653:        added note about OS's w/ shadow passwords turned on by default
                   31654:        [166257f43be4]
                   31655: 
                   31656: 1996-04-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31657: 
                   31658:        * configure.in:
                   31659:        fixed a typo
                   31660:        [e5c3e2e9a359]
                   31661: 
                   31662:        * configure.in:
                   31663:        added support for --without-THING sanitized shadow pw situtation by
                   31664:        adding support for
                   31665:        --without-C2
                   31666:        [65dc6bf64cce]
                   31667: 
                   31668:        * tgetpass.c:
                   31669:        fixed a typo wrt placement of an end paren
                   31670:        [a8780f818231]
                   31671: 
                   31672:        * check.c:
                   31673:        was closing an fd that may not have been opened
                   31674:        [760271c7bdc9]
                   31675: 
                   31676: 1996-03-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31677: 
                   31678:        * OPTIONS, options.h, sudo.c:
                   31679:        added NO_PASSWD
                   31680:        [28ff1dc93d7a]
                   31681: 
                   31682: 1996-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31683: 
                   31684:        * configure.in:
                   31685:        now always use shadow pw on some arches
                   31686:        [069161ccffda]
                   31687: 
                   31688: 1996-03-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31689: 
                   31690:        * configure.in:
                   31691:        added pyramid support
                   31692:        [a0eb57a3a531]
                   31693: 
                   31694:        * configure.in:
                   31695:        no longer check for C2 if alternate passwd method is used no longer
                   31696:        check for some libs twice
                   31697:        [2d0c3c902b40]
                   31698: 
                   31699:        * parse.yacc:
                   31700:        moved fqdn stuff into parse.lex (FQHOST)
                   31701:        [d9c9abd481d8]
                   31702: 
                   31703:        * parse.lex:
                   31704:        added FQHOST rules
                   31705:        [4a1695acff6d]
                   31706: 
                   31707:        * tgetpass.c:
                   31708:        now define TCSASOFT in necesary
                   31709:        [3fac2e21c9ab]
                   31710: 
                   31711:        * tgetpass.c:
                   31712:        now uses read/write instead of stdio string goop to avoid problems
                   31713:        with select(2)
                   31714:        [67fd174e518c]
                   31715: 
                   31716:        * OPTIONS, find_path.c, options.h:
                   31717:        -DNO_DOT_PATH -> -DIGNORE_DOT_PATH
                   31718:        [d05ba5100d28]
                   31719: 
                   31720: 1996-03-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31721: 
                   31722:        * INSTALL:
                   31723:        added note about no shadow auto-detect if using alternate auth
                   31724:        schemes
                   31725:        [b425592232a3]
                   31726: 
                   31727:        * configure.in:
                   31728:        don't check for C2 if AFS or DCE (unless they said --with-C2)
                   31729:        [61342962171a]
                   31730: 
                   31731:        * testsudoers.c:
                   31732:        now groks shost
                   31733:        [85dda17303f6]
                   31734: 
                   31735:        * OPTIONS, find_path.c, options.h:
                   31736:        added NO_DOT_PATH
                   31737:        [c261ca1fb196]
                   31738: 
                   31739: 1996-03-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31740: 
                   31741:        * find_path.c:
                   31742:        checkdot now works correctly
                   31743:        [3bc4835bb3e9]
                   31744: 
                   31745: 1996-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31746: 
                   31747:        * configure.in:
                   31748:        can't have DCE and C2 passwords both...
                   31749:        [fb9a8ab7ca66]
                   31750: 
                   31751: 1996-03-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31752: 
                   31753:        * parse.yacc, sudo.c, sudo.h, visudo.c:
                   31754:        now uses shost even if not FQDN
                   31755:        [87f7498b3a1f]
                   31756: 
                   31757:        * configure.in:
                   31758:        now looks for skey in /usr/lib and doesn't require libskey to be in
                   31759:        /usr/local/lib just because skey.h is (for my netbsd box :-)
                   31760:        [ceb1763e37d2]
                   31761: 
                   31762:        * aclocal.m4, config.h.in, pathnames.h.in:
                   31763:        _SUDO_PATH_ -> _CONFIG_PATH_
                   31764:        [84d97ad13d75]
                   31765: 
                   31766:        * aclocal.m4, sudo.pod:
                   31767:        /var/run/.odus -> /var/run/sudo
                   31768:        [922da220b8f5]
                   31769: 
                   31770:        * pathnames.h.in:
                   31771:        now uses _SUDO_PATH_TIMEDIR
                   31772:        [5ecab0155fdf]
                   31773: 
                   31774:        * OPTIONS:
                   31775:        udpated FQDN
                   31776:        [361b6f7440c0]
                   31777: 
                   31778:        * aclocal.m4, configure.in:
                   31779:        added SUDO_TIMEDIR
                   31780:        [368c95c8c950]
                   31781: 
                   31782:        * config.h.in:
                   31783:        added _SUDO_PATH_TIMEDIR
                   31784:        [3879864d808c]
                   31785: 
                   31786:        * sudo.pod:
                   31787:        updated wrt /var/run/sudo
                   31788:        [9e14f2a429d3]
                   31789: 
                   31790:        * sudo.c, sudo.h:
                   31791:        added support for shost if FQDN
                   31792:        [51a3f51a09a1]
                   31793: 
                   31794:        * parse.yacc, visudo.c:
                   31795:        now uses shost if FQDN
                   31796:        [d19da2e92b42]
                   31797: 
                   31798:        * check.c:
                   31799:        Now use skeylookup() instead off skeychallenge()
                   31800:        [4c7438bb2ae0]
                   31801: 
                   31802: 1996-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31803: 
                   31804:        * logging.c:
                   31805:        mail_argv should not contain ALERTMAIL as it includes "-t"
                   31806:        [67ffaaa8f843]
                   31807: 
                   31808: 1996-02-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31809: 
                   31810:        * INSTALL, Makefile.in, README, configure.in, version.h:
                   31811:        ++version
                   31812:        [e08fd4a809fc]
                   31813: 
                   31814:        * compat.h:
                   31815:        added more _PASSWD_LEN stuff -- now uses PASS_MAX too
                   31816:        [2f20c3153689]
                   31817: 
                   31818:        * tgetpass.c:
                   31819:        now includes limits.h moved _PASSWD_LEN -> compat.h
                   31820:        [b1ca3cafdacc]
                   31821: 
                   31822: 1996-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31823: 
                   31824:        * INSTALL, README:
                   31825:        ++version
                   31826:        [3eacf32803f5]
                   31827: 
                   31828:        * Makefile.in:
                   31829:        ++versoin
                   31830:        [3b91c317630a]
                   31831: 
                   31832:        * Makefile.in:
                   31833:        fixed a typo
                   31834:        [3661ac4a7803]
                   31835: 
                   31836:        * configure.in:
                   31837:        ++version
                   31838:        [60e842973745]
                   31839: 
                   31840: 1996-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31841: 
                   31842:        * RUNSON:
                   31843:        updated
                   31844:        [def2c3c24195]
                   31845: 
                   31846:        * CHANGES:
                   31847:        done for 1.4.1 (I hope)
                   31848:        [2ab543769a40]
                   31849: 
                   31850:        * sudoers.pod:
                   31851:        added info on wildcards
                   31852:        [ce3bd41bc063]
                   31853: 
                   31854:        * sample.sudoers:
                   31855:        added wildcard example
                   31856:        [762feb0577bd]
                   31857: 
                   31858:        * Makefile.in:
                   31859:        now uses *.pod to build *.man and *.cat & *.html
                   31860:        [3ec14962028b]
                   31861: 
                   31862:        * configure.in:
                   31863:        addedSUDO_PROG_BSHELL !ll
                   31864:        [3c80b320bf16]
                   31865: 
                   31866:        * visudo.pod:
                   31867:        fixed up some formatting
                   31868:        [12166c434526]
                   31869: 
                   31870:        * sudoers.pod:
                   31871:        redid section describing sample sudoers stuff
                   31872:        [b8065cceec71]
                   31873: 
                   31874:        * sudo.pod:
                   31875:        fixed some formatting
                   31876:        [aa9a681add0f]
                   31877: 
                   31878:        * getspwuid.c:
                   31879:        now treats "" as bourne shell
                   31880:        [30194a72ad56]
                   31881: 
                   31882:        * Makefile.in:
                   31883:        TESTOBJS nwo includes wildmat.o
                   31884:        [86cc6500f84d]
                   31885: 
                   31886:        * testsudoers.c:
                   31887:        now works with NewArg[cv]
                   31888:        [2f72674ce942]
                   31889: 
                   31890:        * sudo.c:
                   31891:        removed an XXX (fixed it in getspwuid.c)
                   31892:        [e791ee0d1a68]
                   31893: 
                   31894:        * aclocal.m4:
                   31895:        added check for bourne shell
                   31896:        [a2fd51676b8a]
                   31897: 
                   31898:        * pathnames.h.in:
                   31899:        added _PATH_BSHELL
                   31900:        [e7c10011d47b]
                   31901: 
                   31902:        * config.h.in:
                   31903:        added _SUDO_PATH_BSHELL
                   31904:        [6a1182898de9]
                   31905: 
                   31906: 1996-02-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31907: 
                   31908:        * visudo.c:
                   31909:        unixware vi returns 256 instead of 0
                   31910:        [234ffc7c6786]
                   31911: 
                   31912:        * INSTALL:
                   31913:        added Linux note
                   31914:        [5f85efcd2b58]
                   31915: 
                   31916:        * logging.c:
                   31917:        fixed up some XXX's. file log format now looks a little more like
                   31918:        real syslog(3) format.
                   31919:        [6df55707bfc3]
                   31920: 
                   31921:        * README, TROUBLESHOOTING:
                   31922:        updated wrt lex/flex
                   31923:        [eb787d69156b]
                   31924: 
                   31925:        * Makefile.in:
                   31926:        commented out rule to build lex.yy.c from parse.lex since we ship
                   31927:        with a pre-flex'd parser
                   31928:        [7507e2ce4a95]
                   31929: 
                   31930:        * parse.c, parse.yacc, visudo.c:
                   31931:        path_matches -> command_matches
                   31932:        [0bd469424f86]
                   31933: 
                   31934:        * logging.c:
                   31935:        eliminated some strcat()'s
                   31936:        [9878a79bc374]
                   31937: 
                   31938:        * configure.in:
                   31939:        no longer checks for lex/flex (now assumes flex)
                   31940:        [a086ccc73798]
                   31941: 
                   31942:        * configure.in:
                   31943:        now checks for $kerb_dir_candidate/krb.h instead of just
                   31944:        kerb_dir_candidate
                   31945:        [9133bc3c5208]
                   31946: 
                   31947: 1996-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31948: 
                   31949:        * parse.yacc:
                   31950:        now use a 'hook' expression instead of an iffy one :-)
                   31951:        [9560df01b8c0]
                   31952: 
                   31953: 1996-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   31954: 
                   31955:        * visudo.c:
                   31956:        now works with new sudo arg stuff
                   31957:        [310a0d43ddad]
                   31958: 
                   31959:        * parse.yacc:
                   31960:        fixed dereferencing deadbeef
                   31961:        [474ef8a8006b]
                   31962: 
                   31963:        * sudo.c:
                   31964:        changed an occurrence of Argv to NewArgv
                   31965:        [205b012b7691]
                   31966: 
                   31967:        * parse.lex:
                   31968:        took out support for quoted commands since there is no need...
                   31969:        [5c5036d353b1]
                   31970: 
                   31971:        * parse.c:
                   31972:        fixed a typo in a for() loop
                   31973:        [7e8d5283c43b]
                   31974: 
                   31975:        * logging.c:
                   31976:        protected against dereferencing rogue pointers
                   31977:        [56debd517717]
                   31978: 
                   31979:        * sudo.c:
                   31980:        now uses NewArgv amd NewArgc so cmnd_aegs is no longer needed this
                   31981:        also allows us to eliminate some kludges in parse_args() and
                   31982:        eliminate superfluous code.
                   31983:        [5122f66ad150]
                   31984: 
                   31985:        * logging.c:
                   31986:        no longer uses cmnd_args, now uses NewArgv instead.
                   31987:        [abddd23cf068]
                   31988: 
                   31989:        * sudo.h:
                   31990:        added struct sudo_command, NewArgc, and NewArgv removed cmnd_args
                   31991:        (no longer used)
                   31992:        [78410984fb05]
                   31993: 
                   31994:        * Makefile.in:
                   31995:        added wildmat.c to SRCS & SUDOBJS
                   31996:        [3800efb41794]
                   31997: 
                   31998:        * parse.yacc:
                   31999:        COMMAND is now a struct containing the path and args
                   32000:        [5c32822c5b94]
                   32001: 
                   32002:        * parse.lex:
                   32003:        replaced append() with fill_cmnd() and fill_args. command args from
                   32004:        a sudoers entry are now stored in an arrary for easy matching.
                   32005:        [a981d7f4eb0d]
                   32006: 
                   32007:        * parse.c:
                   32008:        command line args from sudoers file are now in an array like ones
                   32009:        passed in from the command line
                   32010:        [1d9e37e84519]
                   32011: 
                   32012: 1996-02-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32013: 
                   32014:        * parse.c:
                   32015:        wildwat stuff now works
                   32016:        [49d16488531f]
                   32017: 
                   32018: 1996-01-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32019: 
                   32020:        * version.h:
                   32021:        ++version
                   32022:        [53e55463ef89]
                   32023: 
                   32024:        * Makefile.in:
                   32025:        ++version added wildmat.*
                   32026:        [0508297a4711]
                   32027: 
                   32028: 1996-01-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32029: 
                   32030:        * parse.lex:
                   32031:        added support for quoted commands (w/ or w/o args)
                   32032:        [b9a637155673]
                   32033: 
                   32034: 1996-01-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32035: 
                   32036:        * sudo.pod, visudo.pod:
                   32037:        cleaned up formatting
                   32038:        [4591d4195437]
                   32039: 
                   32040:        * sudo.pod, visudo.pod:
                   32041:        Initial revision
                   32042:        [7564a8242750]
                   32043: 
                   32044: 1996-01-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32045: 
                   32046:        * sudoers.pod:
                   32047:        looks reasonable, could be mroe readable
                   32048:        [a5be2d19d9e0]
                   32049: 
                   32050:        * sudoers.pod:
                   32051:        Initial revision
                   32052:        [957888be31a6]
                   32053: 
                   32054: 1996-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32055: 
                   32056:        * RUNSON:
                   32057:        updated
                   32058:        [633743aa924b]
                   32059: 
                   32060:        * OPTIONS:
                   32061:        updated NO_ROOT_SUDO entry
                   32062:        [f1c15b1dec9e]
                   32063: 
                   32064: 1996-01-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32065: 
                   32066:        * RUNSON:
                   32067:        *** empty log message ***
                   32068:        [5b63de579ff7] [SUDO_1_4_0]
                   32069: 
                   32070:        * sudo.c:
                   32071:        fixed SECURE_PATH
                   32072:        [6002889f606d]
                   32073: 
                   32074:        * RUNSON:
                   32075:        udpa`ted for 1.4
                   32076:        [6014a8592815]
                   32077: 
                   32078:        * configure.in:
                   32079:        AIX aixcrypt.exp now uses $(srcdir)
                   32080:        [b0d57674fef4]
                   32081: 
                   32082:        * TROUBLESHOOTING:
                   32083:        added entry for anal ansi compilers
                   32084:        [4193cec1c6b1]
                   32085: 
                   32086: 1996-01-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32087: 
                   32088:        * INSTALL:
                   32089:        added info on libcrypt_i for SCO
                   32090:        [575497d56698]
                   32091: 
                   32092:        * TODO:
                   32093:        *** empty log message ***
                   32094:        [d0aaf67b9913]
                   32095: 
                   32096:        * sample.sudoers:
                   32097:        added comments
                   32098:        [a7773f7eda8d]
                   32099: 
                   32100:        * TODO:
                   32101:        1.4 release
                   32102:        [1dade29e9fd9]
                   32103: 
                   32104:        * CHANGES:
                   32105:        ++version
                   32106:        [67241be40780]
                   32107: 
                   32108:        * INSTALL, OPTIONS, README, config.h.in, configure.in:
                   32109:        ++version
                   32110:        [2e0a37897f68]
                   32111: 
                   32112:        * BUGS:
                   32113:        ++version and fixed ISC
                   32114:        [78963f01a0e3]
                   32115: 
                   32116:        * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
                   32117:        goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h,
                   32118:        insults.h, logging.c, options.h, pathnames.h.in, putenv.c, strdup.c,
                   32119:        sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
                   32120:        visudo.c:
                   32121:        ++version
                   32122:        [b6227f29b3d9]
                   32123: 
                   32124:        * interfaces.c:
                   32125:        added STUB_LOAD_INTERFACES ++version
                   32126:        [d8150a3fd577]
                   32127: 
                   32128:        * Makefile.in, emul/utime.h, parse.c, parse.lex, parse.yacc,
                   32129:        version.h:
                   32130:        ++version
                   32131:        [da9e90e69bdc]
                   32132: 
                   32133:        * PORTING:
                   32134:        added info about fd_set in tgetpass added info on interfaces.c
                   32135:        [a39902febd17]
                   32136: 
                   32137: 1996-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32138: 
                   32139:        * dce_pwent.c:
                   32140:        added sudo header
                   32141:        [fc0f2c48682e]
                   32142: 
                   32143:        * tgetpass.c:
                   32144:        fixed a typo
                   32145:        [43d40b72ee8f]
                   32146: 
                   32147:        * Makefile.in:
                   32148:        tgetpass.o is now only linked in with sudo (not visudo)
                   32149:        [7407c5ff11f8]
                   32150: 
                   32151: 1996-01-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32152: 
                   32153:        * BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in,
                   32154:        configure.in:
                   32155:        ++version
                   32156:        [9b82ad805d6b]
                   32157: 
                   32158:        * emul/utime.h:
                   32159:        added copyright notice
                   32160:        [4380f16cd075]
                   32161: 
                   32162:        * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
                   32163:        ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
                   32164:        interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc,
                   32165:        pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
                   32166:        testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c:
                   32167:        ++version
                   32168:        [32717fdb5d05]
                   32169: 
                   32170:        * tgetpass.c:
                   32171:        minor cleanup and now includes sys/bsdtypes for svr4'ish boxen
                   32172:        [326864428da2]
                   32173: 
                   32174:        * configure.in:
                   32175:        ISC now gets -lcrypt now check for sys/bsdtypes.h
                   32176:        [e064799c054b]
                   32177: 
                   32178:        * config.h.in:
                   32179:        added check for sys/bsdtypes.h
                   32180:        [9adb9533c363]
                   32181: 
                   32182: 1996-01-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32183: 
                   32184:        * parse.yacc:
                   32185:        removed debugging stuff (setting freed ptr to NULL)
                   32186:        [02fe8eec63a0]
                   32187: 
                   32188:        * TROUBLESHOOTING:
                   32189:        added 2 entries
                   32190:        [02884e2733e2]
                   32191: 
                   32192:        * Makefile.in:
                   32193:        added FAQ
                   32194:        [074d8dfcf28d]
                   32195: 
                   32196:        * TROUBLESHOOTING:
                   32197:        added section on syslog
                   32198:        [e6bc02a22b86]
                   32199: 
                   32200:        * configure.in:
                   32201:        added AC_ISC_POSIX for better ISC support
                   32202:        [8436b3e12af2]
                   32203: 
                   32204:        * config.h.in:
                   32205:        fixed typo
                   32206:        [f1b3922babf4]
                   32207: 
                   32208:        * config.h.in:
                   32209:        added define for _POSIX_SOURCE
                   32210:        [ded6d92b34f9]
                   32211: 
                   32212: 1996-01-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32213: 
                   32214:        * configure.in:
                   32215:        fixed check for lsearch()
                   32216:        [75baa5bc28a3]
                   32217: 
                   32218: 1995-12-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32219: 
                   32220:        * interfaces.c:
                   32221:        fixed for AIX now deal if num_interfaces == 0 (should not happen)
                   32222:        [ae450e859227]
                   32223: 
                   32224: 1995-12-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32225: 
                   32226:        * configure.in:
                   32227:        now only define HAVE_LSEARCH if there is a corresponding search.h
                   32228:        [8ce645c5d17f]
                   32229: 
                   32230:        * interfaces.c:
                   32231:        works on ISC again
                   32232:        [ccac920d424c]
                   32233: 
                   32234: 1995-12-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32235: 
                   32236:        * configure.in:
                   32237:        now define HAVE_LSEARCH if we find lsearch() in libcompat
                   32238:        [7343e4313a87]
                   32239: 
                   32240:        * lsearch.c:
                   32241:        char * -> const char *
                   32242:        [1c0b11c2300a]
                   32243: 
                   32244:        * configure.in:
                   32245:        now looks in -lcompat for lsearch()
                   32246:        [a1cc1d6fcd09]
                   32247: 
                   32248:        * Makefile.in:
                   32249:        remove sudo.core visudo.core for clan target
                   32250:        [b523456a85df]
                   32251: 
                   32252:        * aclocal.m4:
                   32253:        added UID_MAX support in check for MAX_UID_T_LEN
                   32254:        [7ab262b1173f]
                   32255: 
                   32256:        * Makefile.in:
                   32257:        fixed another occurence of sudo_getpwuid.*
                   32258:        [fb5809c07da2]
                   32259: 
                   32260:        * Makefile.in, getspwuid.c:
                   32261:        sudo_getpwuid.c -> getspwuid.c
                   32262:        [875f2ef808b4]
                   32263: 
                   32264:        * configure.in:
                   32265:        moved the "echo"
                   32266:        [ad7b8f966076]
                   32267: 
                   32268:        * BUGS, CHANGES, INSTALL, Makefile.in, OPTIONS, README, check.c,
                   32269:        compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
                   32270:        getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
                   32271:        ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c,
                   32272:        parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c,
                   32273:        sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
                   32274:        version.h, visudo.c:
                   32275:        ++version
                   32276:        [ee57c6410ffa]
                   32277: 
                   32278:        * testsudoers.c:
                   32279:        added group support
                   32280:        [54d8097df8bd]
                   32281: 
                   32282:        * sample.sudoers:
                   32283:        added group entry
                   32284:        [50994d31fd49]
                   32285: 
                   32286:        * sudoers.man:
                   32287:        documented group support
                   32288:        [0a16707f8fed]
                   32289: 
                   32290:        * parse.c, parse.lex, parse.yacc, visudo.c:
                   32291:        added group support
                   32292:        [427218c879c8]
                   32293: 
                   32294: 1995-12-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32295: 
                   32296:        * check.c:
                   32297:        tkfile was too short and overflowed the kerberos realm
                   32298:        [53823a1ff5af]
                   32299: 
                   32300: 1995-12-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32301: 
                   32302:        * sudo.c:
                   32303:        now copy command args directly from Argv
                   32304:        [77408278b6fd]
                   32305: 
                   32306:        * sudo.c:
                   32307:        replaced code to copy cmnd_args so that is does not use realloc
                   32308:        since most realloc()'s really stink
                   32309:        [b29a0ff73fb6]
                   32310: 
                   32311: 1995-12-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32312: 
                   32313:        * configure.in:
                   32314:        syslog() fixed in hpux 10.01
                   32315:        [2648e6f0cdb0]
                   32316: 
                   32317: 1995-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32318: 
                   32319:        * configure.in:
                   32320:        AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS if appropriate)
                   32321:        [8f108b8d8711]
                   32322: 
                   32323:        * configure.in:
                   32324:        better error if cannot find skey incs or libs
                   32325:        [5887662ee9d3]
                   32326: 
                   32327:        * aclocal.m4:
                   32328:        now use a temp file for determining max len of uid_t in string form.
                   32329:        the old hacky way broke on netbsd
                   32330:        [b68f470fa9f8]
                   32331: 
                   32332:        * sudo.c:
                   32333:        added set of parens and a space
                   32334:        [8a3d4826d022]
                   32335: 
                   32336: 1995-12-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32337: 
                   32338:        * dce_pwent.c:
                   32339:        fixes from Jeff Earickson <jaearick@colby.edu> ,
                   32340:        [bde0f0b756ec]
                   32341: 
                   32342:        * check.c:
                   32343:        modified a comment
                   32344:        [e2a97f1afbbe]
                   32345: 
                   32346:        * Makefile.in:
                   32347:        fixed up testsudoers target
                   32348:        [d39c4e7bb609]
                   32349: 
                   32350:        * configure.in:
                   32351:        DCE changes from Jeff Earickson <jaearick@colby.edu> LIBS ->
                   32352:        SUDO_LIBS and VISUDO_LIBS LDFLAGS -> SUDO_FDFLAGS and VISUDO_LDFLAGS
                   32353:        [da7a1c433828]
                   32354: 
                   32355:        * Makefile.in:
                   32356:        LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS -> SUDO_LDFLAGS,
                   32357:        VISUDO_LDFLAGS
                   32358:        [4b69503e8487]
                   32359: 
                   32360: 1995-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32361: 
                   32362:        * configure.in:
                   32363:        fix for C2 on hpux 10 now uses -linet if it exists
                   32364:        [8d300112263d]
                   32365: 
                   32366:        * check.c:
                   32367:        LONG_SKEY_PROMPT is less of a klusge /
                   32368:        [dcc144abaac3]
                   32369: 
                   32370:        * configure.in:
                   32371:        fixed typos w/ dce stuff
                   32372:        [f7dfd6d4e149]
                   32373: 
                   32374:        * Makefile.in:
                   32375:        added dce_pwent.c
                   32376:        [79047acdc516]
                   32377: 
                   32378: 1995-11-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32379: 
                   32380:        * INSTALL:
                   32381:        amended section on combining authentication mechanisms
                   32382:        [dc5138c7c716]
                   32383: 
                   32384:        * PORTING:
                   32385:        minor updates for 1.3.6
                   32386:        [fe80c13bd994]
                   32387: 
                   32388:        * TROUBLESHOOTING:
                   32389:        added 2 more entries
                   32390:        [c7201439a0f5]
                   32391: 
                   32392:        * BUGS:
                   32393:        updated for 1.3.6
                   32394:        [979b414d2a2d]
                   32395: 
                   32396:        * README:
                   32397:        overhauled
                   32398:        [3af8b60eb594]
                   32399: 
                   32400:        * INSTALL:
                   32401:        rewrote for sudo 1.3.6
                   32402:        [b16027b9c726]
                   32403: 
                   32404:        * TROUBLESHOOTING:
                   32405:        added 3 entries
                   32406:        [934c9ee3f153]
                   32407: 
                   32408: 1995-11-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32409: 
                   32410:        * find_path.c, getspwuid.c, sudo.c:
                   32411:        added explict casts for strdup since many includes don't prototype
                   32412:        it. gag me.
                   32413:        [3e19a11f2fcc]
                   32414: 
                   32415:        * sudo.h:
                   32416:        removed prototype for sudo_getpwuid() since convex C compiler choked
                   32417:        on it.
                   32418:        [c3ea74ca67b0]
                   32419: 
                   32420:        * sudo.c:
                   32421:        added prototype for sudo_getpwuid()
                   32422:        [4a8e3cdc2b98]
                   32423: 
                   32424:        * lsearch.c:
                   32425:        now compiles on strict ANSI compilers
                   32426:        [3ce5d72d0b08]
                   32427: 
                   32428:        * check.c:
                   32429:        added LONG_SKEY_PROMPT support
                   32430:        [48a18b8a2332]
                   32431: 
                   32432:        * Makefile.in:
                   32433:        added extra $'s for make to eat up, yum.
                   32434:        [2995b214e12b]
                   32435: 
                   32436:        * OPTIONS, options.h:
                   32437:        added LONG_SKEY_PROMPT
                   32438:        [f23ae799b5a4]
                   32439: 
                   32440: 1995-11-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32441: 
                   32442:        * check.c:
                   32443:        s/key support now works with normal s/key as well as logdaemon
                   32444:        [d67573f523bf]
                   32445: 
                   32446:        * OPTIONS, options.h:
                   32447:        added SKEY_ONLY
                   32448:        [bbf07654e0de]
                   32449: 
                   32450:        * compat.h:
                   32451:        set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
                   32452:        [205895b96a36]
                   32453: 
                   32454:        * INSTALL:
                   32455:        added DCE note added more AIX notes
                   32456:        [6345403b3522]
                   32457: 
                   32458:        * sudo.c:
                   32459:        now include pthread.h for DCE support
                   32460:        [6fe02865f679]
                   32461: 
                   32462:        * check.c:
                   32463:        dce_pwent() is ok after all .,
                   32464:        [d26a8746a55d]
                   32465: 
                   32466:        * logging.c:
                   32467:        now uses SYSLOG() macro that equates to either syslog() or
                   32468:        syslog_wrapper
                   32469:        [42ac4cff8045]
                   32470: 
                   32471:        * dce_pwent.c:
                   32472:        minor formatting changes. renamed check() to somthing less generic
                   32473:        [71859f217be1]
                   32474: 
                   32475:        * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
                   32476:        visudo.c:
                   32477:        now uses user_pw_ent and simple macros to get at the contents
                   32478:        [f4cbf3e7145a]
                   32479: 
                   32480: 1995-11-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32481: 
                   32482:        * check.c:
                   32483:        simpler dec unix C2 support
                   32484:        [86bc8f75250e]
                   32485: 
                   32486:        * getspwuid.c:
                   32487:        now sets crypt_type for DEC unix C2
                   32488:        [99aeadd18266]
                   32489: 
                   32490: 1995-11-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32491: 
                   32492:        * configure.in:
                   32493:        added csops paths for skey
                   32494:        [b8ca672e2117]
                   32495: 
                   32496:        * getspwuid.c:
                   32497:        now includes string.h for strdup() prototype
                   32498:        [3605259c3620]
                   32499: 
                   32500:        * getspwuid.c:
                   32501:        fixed a few typos
                   32502:        [46c97e4ea417]
                   32503: 
                   32504:        * check.c:
                   32505:        now includes skey.h
                   32506:        [11e611ce1b61]
                   32507: 
                   32508:        * getspwuid.c:
                   32509:        fixed up comments
                   32510:        [223dac56f0c8]
                   32511: 
                   32512:        * check.c:
                   32513:        moved a lot of the shadow passwd crap to sudo_getpwuid()
                   32514:        [97d8887fb7d3]
                   32515: 
                   32516:        * sudo.c:
                   32517:        now uses sudo_pw_ent
                   32518:        [d014dadbef48]
                   32519: 
                   32520:        * testsudoers.c:
                   32521:        now uses sudo_pw_ent
                   32522:        [d92936ed7e34]
                   32523: 
                   32524:        * visudo.c:
                   32525:        now sets sudo_pw_ent
                   32526:        [ff75cdfcf8b3]
                   32527: 
                   32528:        * getspwuid.c:
                   32529:        Initial revision
                   32530:        [6deb6df9d7bc]
                   32531: 
                   32532:        * tgetpass.c:
                   32533:        moved dce stuff into compat.h
                   32534:        [1124284396e7]
                   32535: 
                   32536:        * logging.c, sudo.h:
                   32537:        now uses sudo_pw_ent
                   32538:        [404ff20a5067]
                   32539: 
                   32540:        * Makefile.in:
                   32541:        added sudo_getpwuid.c
                   32542:        [6666d0644512]
                   32543: 
                   32544:        * compat.h:
                   32545:        added dce support
                   32546:        [3c3b36a7ce0e]
                   32547: 
                   32548:        * parse.yacc:
                   32549:        now uses sudo_pw_ent
                   32550:        [9f5e8d11bd68]
                   32551: 
                   32552: 1995-11-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32553: 
                   32554:        * check.c:
                   32555:        fixed exempt_group stuff for OS's that don't put base gid in group
                   32556:        vector
                   32557:        [003f153bd396]
                   32558: 
                   32559:        * check.c:
                   32560:        S/Key support now works with sunos4 shadow passwords
                   32561:        [1eb64a5efff1]
                   32562: 
                   32563:        * Makefile.in:
                   32564:        fixed clean rule
                   32565:        [5695a2c62816]
                   32566: 
                   32567:        * config.h.in, configure.in:
                   32568:        added DCE support
                   32569:        [f53c766c1947]
                   32570: 
                   32571:        * tgetpass.c:
                   32572:        DCE & KERB support
                   32573:        [904cf436506a]
                   32574: 
                   32575:        * check.c:
                   32576:        first stab at dce support
                   32577:        [aea5ca07b1e3]
                   32578: 
                   32579:        * dce_pwent.c:
                   32580:        now smells like sudo
                   32581:        [8b3d609b49cd]
                   32582: 
                   32583:        * dce_pwent.c:
                   32584:        Initial revision
                   32585:        [b573555f2399]
                   32586: 
                   32587:        * check.c:
                   32588:        skey'd sudo now works w/ normal password as well
                   32589:        [8d038f9f6e94]
                   32590: 
                   32591: 1995-11-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32592: 
                   32593:        * Makefile.in, OPTIONS, check.c, compat.h, config.h.in, find_path.c,
                   32594:        getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
                   32595:        ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c,
                   32596:        parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c,
                   32597:        sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
                   32598:        version.h, visudo.c:
                   32599:        updated version number
                   32600:        [ba7e346d7904]
                   32601: 
                   32602:        * README:
                   32603:        updated to reflect version change
                   32604:        [1d15cf1d8cc8]
                   32605: 
                   32606:        * configure.in:
                   32607:        --with options now line up ++version
                   32608:        [08ebf625fbca]
                   32609: 
                   32610:        * sudo.h:
                   32611:        removed unecesary S/Key stuff
                   32612:        [68188cba90af]
                   32613: 
                   32614:        * configure.in:
                   32615:        fixed S/Key support
                   32616:        [f6d9cbc36618]
                   32617: 
                   32618:        * Makefile.in:
                   32619:        -I stuff now goes in CPPFLAGS
                   32620:        [7b8e53c5b046]
                   32621: 
                   32622:        * check.c:
                   32623:        fixed SKey support
                   32624:        [52c1a5cf4435]
                   32625: 
                   32626:        * README:
                   32627:        updated version
                   32628:        [bed6498a10bb]
                   32629: 
                   32630:        * OPTIONS:
                   32631:        fixed description of EXEMPTGROUP
                   32632:        [cfeead55edc2]
                   32633: 
                   32634:        * sudo.c:
                   32635:        more people use _RLD_ than just alphas...
                   32636:        [6a3c7090a6f6]
                   32637: 
                   32638:        * Makefile.in:
                   32639:        replaced $man_prefix with $mandir
                   32640:        [dc4b36a550e2]
                   32641: 
                   32642:        * configure.in:
                   32643:        fixed a typo
                   32644:        [a38a4acddcaf]
                   32645: 
                   32646:        * Makefile.in:
                   32647:        now use more GNU'ish dir names
                   32648:        [c5498391a520]
                   32649: 
                   32650:        * configure.in:
                   32651:        now set *dir correctly (can override from command line)
                   32652:        [523ff98fd438]
                   32653: 
                   32654:        * sudo.c:
                   32655:        now deal with situations where we getwd() fails
                   32656:        [88a9e61dccbb]
                   32657: 
                   32658: 1995-11-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32659: 
                   32660:        * Makefile.in:
                   32661:        added etc_dir, bin_dir, sbin_dir
                   32662:        [75fd08d92842]
                   32663: 
                   32664:        * configure.in:
                   32665:        added sbin_dir
                   32666:        [3cb318c0d8d1]
                   32667: 
                   32668:        * Makefile.in:
                   32669:        now ship a flex-generated lex.yy.c
                   32670:        [4d083ed70dce]
                   32671: 
                   32672:        * Makefile.in:
                   32673:        now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP, SUDOERS_OWNER
                   32674:        [4d51dc9c3780]
                   32675: 
                   32676:        * pathnames.h.in:
                   32677:        _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile
                   32678:        [773fd163d52f]
                   32679: 
                   32680:        * options.h:
                   32681:        no more error for redefining SUDOERS_OWNER
                   32682:        [4ba336644c6a]
                   32683: 
                   32684:        * OPTIONS:
                   32685:        expanded SUDOERS_OWNER section
                   32686:        [12fae405759e]
                   32687: 
                   32688: 1995-11-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32689: 
                   32690:        * visudo.c:
                   32691:        now warn if chown(2) failed
                   32692:        [d0d1db6e3a1f]
                   32693: 
                   32694:        * logging.c:
                   32695:        better default warning for NO_SUDOERS_FILE
                   32696:        [5260b458ac64]
                   32697: 
                   32698:        * sudo.c:
                   32699:        added missing set_perms() no more cryptic message if the sudoers
                   32700:        file is zero length, now just give a parse error
                   32701:        [b81ea724838a]
                   32702: 
                   32703:        * logging.c:
                   32704:        better diagnostics if NO_SUDOERS_FILE
                   32705:        [877e878663c5]
                   32706: 
                   32707:        * sudo.c:
                   32708:        check_sudoers() now catches sudoers files that are not readable (but
                   32709:        are stat'able).
                   32710:        [fea05663b3de]
                   32711: 
                   32712: 1995-11-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32713: 
                   32714:        * configure.in:
                   32715:        now add -D__STDC__ for convex cc (not gcc)
                   32716:        [c80fc53ff51b]
                   32717: 
                   32718:        * configure.in:
                   32719:        MAN_PREFIX -> man_prefix now sets prefix and exec_prefix
                   32720:        [fe238226a057]
                   32721: 
                   32722:        * Makefile.in:
                   32723:        now uses exec_prefix & prefix from configure
                   32724:        [f62fca5f56bd]
                   32725: 
                   32726:        * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c, parse.c,
                   32727:        parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c, tgetpass.c,
                   32728:        utime.c, visudo.c:
                   32729:        options.h is now <> instead of "" so shadow build trees can have a
                   32730:        custom copy of options.h
                   32731:        [e6782676099c]
                   32732: 
                   32733:        * check.c:
                   32734:        user_is_exempt() is no longer a hack, it now uses getgrnam()
                   32735:        [287f8d5356f7]
                   32736: 
                   32737:        * options.h:
                   32738:        EXEMPTGROUP is now "sudo"
                   32739:        [61487304dbe1]
                   32740: 
                   32741:        * configure.in:
                   32742:        MAN_POSTINSTALL now contains a leading space
                   32743:        [eaad4ac34012]
                   32744: 
                   32745:        * Makefile.in:
                   32746:        removed leading tab if @MAN_POSTINSTALL@ not defined now removes
                   32747:        testsudoers in clean:
                   32748:        [e01711baceb8]
                   32749: 
                   32750:        * tgetpass.c:
                   32751:        includes pwd.h to get _PASSWD_LEN definition
                   32752:        [8ec174f263f1]
                   32753: 
                   32754: 1995-10-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32755: 
                   32756:        * sudo.c:
                   32757:        unset the KRB_CONF envariable if using kerberos so we don't get
                   32758:        spoofed into using a bogus server
                   32759:        [2561a0274fca]
                   32760: 
                   32761: 1995-09-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32762: 
                   32763:        * parse.yacc:
                   32764:        now explicately initialize match[] tp be FALSE
                   32765:        [0e45e5c47766]
                   32766: 
                   32767: 1995-09-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32768: 
                   32769:        * sudo.c:
                   32770:        removed unused variable now passes -Wall
                   32771:        [3452508bc16d]
                   32772: 
                   32773:        * parse.yacc:
                   32774:        yyerror and dumpaliases are now void's now passes -Wall
                   32775:        [2769dfb51993]
                   32776: 
                   32777:        * parse.lex:
                   32778:        added prototype for yyerror
                   32779:        [1f3f0c1b4ab4]
                   32780: 
                   32781:        * check.c, logging.c, parse.c:
                   32782:        now passes -Wall
                   32783:        [eab57e5e81d2]
                   32784: 
                   32785:        * interfaces.c:
                   32786:        rmeoved unused cruft now passes -Wall
                   32787:        [7a47e1866f4b]
                   32788: 
                   32789:        * Makefile.in:
                   32790:        fixed headers that moved to emul dir
                   32791:        [e680c1e5049b]
                   32792: 
                   32793:        * logging.c:
                   32794:        fixed deref of nil pointer if no args
                   32795:        [973b9bea432f]
                   32796: 
                   32797: 1995-09-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32798: 
                   32799:        * OPTIONS:
                   32800:        added a caveat to FQDN section
                   32801:        [dcf6e2a5fff4]
                   32802: 
                   32803: 1995-09-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32804: 
                   32805:        * Makefile.in:
                   32806:        more $srcdir support for install targets
                   32807:        [f6eac78436dd]
                   32808: 
                   32809:        * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc, putenv.c,
                   32810:        strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, visudo.c:
                   32811:        don't include malloc.h if we include stdlib.h
                   32812:        [fca2ff307cd8]
                   32813: 
                   32814:        * parse.yacc:
                   32815:        local search.h now lives in emul
                   32816:        [51c458904424]
                   32817: 
                   32818:        * check.c, utime.c:
                   32819:        local utime.h now lives in emul dir
                   32820:        [f92fc9e8c8de]
                   32821: 
                   32822:        * lsearch.c:
                   32823:        local search.h now lives in emul
                   32824:        [579efc407439]
                   32825: 
                   32826:        * Makefile.in:
                   32827:        added support for building in other than the sourcedir
                   32828:        [2ab53a43f7d4]
                   32829: 
                   32830: 1995-09-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32831: 
                   32832:        * OPTIONS:
                   32833:        annotated CSOPS_INSULTS option
                   32834:        [9e57d45a0afa]
                   32835: 
                   32836:        * TROUBLESHOOTING:
                   32837:        updated shadow passwords blurb
                   32838:        [39b785bc7253]
                   32839: 
                   32840:        * sudo.c:
                   32841:        if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a shell and
                   32842:        passes along foo as the arguments
                   32843:        [a91077aa8fc5]
                   32844: 
                   32845: 1995-09-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32846: 
                   32847:        * parse.lex:
                   32848:        collapsed pathname and dir sections into one -- its now less
                   32849:        expensive
                   32850:        [89caa03bec25]
                   32851: 
                   32852:        * parse.lex:
                   32853:        fixed spacing quoting [,:\\=] now works correctly append() and
                   32854:        fill() now take args to make the above work
                   32855:        [09d023d9ef3a]
                   32856: 
                   32857:        * sudo.c:
                   32858:        fixed a typo that caused commands with no tty on fd 0 but a tty on
                   32859:        fd 1 to erroneously have "none" as their tty
                   32860:        [07d2c0e7977c]
                   32861: 
                   32862: 1995-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32863: 
                   32864:        * check.c:
                   32865:        timestampfile is now a global static removed decl of timestampfile
                   32866:        in remove_timestamp since we can just use the global one
                   32867:        [f0cbdc6aab1c]
                   32868: 
                   32869:        * check.c:
                   32870:        created touch() to update timestamps added USE_TTY_TICKETS support
                   32871:        (bit of a kludge)
                   32872:        [cee1dd0318f8]
                   32873: 
                   32874:        * compat.h:
                   32875:        added _S_IFDIR and S_ISDIR
                   32876:        [b4a51cc9628e]
                   32877: 
                   32878:        * OPTIONS, options.h:
                   32879:        added USE_TTY_TICKETS
                   32880:        [b4e22f81f25e]
                   32881: 
                   32882:        * parse.yacc:
                   32883:        removed const from casts for lsearch() & lfind() to placate irix 4.x
                   32884:        C compiler
                   32885:        [5003081f76ea]
                   32886: 
                   32887: 1995-09-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32888: 
                   32889:        * sudo.c:
                   32890:        now only strip '/dev/' off of a tty if it starts with '/dev/'
                   32891:        [7f62bcd24039]
                   32892: 
                   32893:        * pathnames.h.in:
                   32894:        added _PATH_DEV
                   32895:        [6375f44d1910]
                   32896: 
                   32897:        * configure.in:
                   32898:        AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for tcgetattr only if
                   32899:        have termios.h
                   32900:        [9c60391235fd]
                   32901: 
                   32902:        * tgetpass.c:
                   32903:        fixed incorrect #ifdef termio uses "unsigned short" not int for
                   32904:        c_?flag
                   32905:        [d032e6a29845]
                   32906: 
                   32907:        * parse.lex, parse.yacc:
                   32908:        fixed a spelling error
                   32909:        [cad6a944c7b1]
                   32910: 
                   32911:        * Makefile.in:
                   32912:        fixed typo
                   32913:        [204a65403e7c]
                   32914: 
                   32915: 1995-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32916: 
                   32917:        * Makefile.in:
                   32918:        fixed a comment
                   32919:        [268f760e57ad]
                   32920: 
                   32921:        * parse.yacc:
                   32922:        added dotcat() to cat 2 strings w/ a dot effeciently now that we
                   32923:        dynamically allocate strings they need to be free()'d
                   32924:        [ec2e2152f415]
                   32925: 
                   32926:        * parse.lex:
                   32927:        dynamically allocates space for strings
                   32928:        [d10ac3533d66]
                   32929: 
                   32930:        * sudo.h:
                   32931:        no more MAXCOMMANDLENGTH
                   32932:        [e2e1219bff8a]
                   32933: 
                   32934:        * sudo.h:
                   32935:        added decl of tty
                   32936:        [c8ae81303ee5]
                   32937: 
                   32938:        * logging.c, sudo.c:
                   32939:        moved tty stuff into sudo.c
                   32940:        [e028abefeb07]
                   32941: 
                   32942: 1995-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   32943: 
                   32944:        * parse.c:
                   32945:        fixed a logic bug. Was denying a command if user gave command line
                   32946:        args but there were none in the sudoers file which is wrong.
                   32947:        [7489a99b8e8a]
                   32948: 
                   32949:        * sudo.h:
                   32950:        MAXCOMMMANDLEN dropped down to 1K
                   32951:        [38ef54ba290b]
                   32952: 
                   32953:        * parse.lex:
                   32954:        return foo; -> return(foo);
                   32955:        [0e8be1b57001]
                   32956: 
                   32957:        * parse.yacc:
                   32958:        fixed netgr_matches() prototype
                   32959:        [e69f15910464]
                   32960: 
                   32961:        * parse.lex:
                   32962:        added support for escaping "termination" characters
                   32963:        [8bd4ef50f35c]
                   32964: 
                   32965:        * parse.c:
                   32966:        buf is now of size MAXPATHLEN+1 since it never holds command args
                   32967:        [2ce4b763058c]
                   32968: 
                   32969:        * sudo.c:
                   32970:        fixed comments
                   32971:        [0c74a3d2ebb0]
                   32972: 
                   32973:        * goodpath.c:
                   32974:        fixed negation problem (doh!)
                   32975:        [782814e3a2d1]
                   32976: 
                   32977:        * parse.yacc:
                   32978:        fixed 2nd parameter to lfind()
                   32979:        [63d7b1623c08]
                   32980: 
                   32981:        * parse.lex:
                   32982:        now do bounds checking in fill() and append()
                   32983:        [54381b563251]
                   32984: 
                   32985:        * sudo.c:
                   32986:        include netdb.h as we should added a missing void cast added
                   32987:        SHELL_IF_NO_ARGS support now use realloc() properly. would fail if
                   32988:        realloc actually moved the string instead of shrinking it
                   32989:        [897ccdec9c06]
                   32990: 
                   32991:        * sample.sudoers:
                   32992:        updated with examples of new features
                   32993:        [9b3ed00e8aa6]
                   32994: 
                   32995:        * goodpath.c:
                   32996:        now set errno to EACCES if not a regular file or not executable
                   32997:        [2d069548a5ea]
                   32998: 
                   32999:        * find_path.c:
                   33000:        if given a fully-qualified or relative path we now check it with
                   33001:        sudo_goodpath() and error out with the appropriate error message if
                   33002:        the file does not exist or is not executable
                   33003:        [590f89dd8dec]
                   33004: 
                   33005:        * emul/search.h, lsearch.c:
                   33006:        now use correct args for lfind
                   33007:        [fccdcdbf020e]
                   33008: 
                   33009:        * logging.c:
                   33010:        added a comment
                   33011:        [fab9f49708ea]
                   33012: 
                   33013:        * insults.h:
                   33014:        added in CSOps insults
                   33015:        [ad8eb1862adc]
                   33016: 
                   33017:        * ins_csops.h:
                   33018:        Initial revision
                   33019:        [de5a475ec018]
                   33020: 
                   33021:        * tgetpass.c:
                   33022:        added RCS id
                   33023:        [c3ffd550a482]
                   33024: 
                   33025:        * sudo.h:
                   33026:        increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD -> HAVE_GETWD
                   33027:        [aba25c90d08a]
                   33028: 
                   33029:        * OPTIONS:
                   33030:        added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
                   33031:        [e27bd62e9ccf]
                   33032: 
                   33033:        * sudo.c:
                   33034:        fixed -k load_interfaces() now gets called if FQDN is set
                   33035:        -p now works with -s
                   33036:        [07ca2a34bae8]
                   33037: 
                   33038:        * parse.c:
                   33039:        don't try to stat() "pseudo commands" like "validate"
                   33040:        [75527045984b]
                   33041: 
                   33042:        * options.h:
                   33043:        added CLASSIC_INSULTS added CSOPS_INSULTS added SHELL_IF_NO_ARGS
                   33044:        [07b157a0eafd]
                   33045: 
                   33046:        * configure.in:
                   33047:        added SecurID support added other insults to --with-csops
                   33048:        [6c992ceb244c]
                   33049: 
                   33050:        * config.h.in:
                   33051:        added HAVE_SECURID
                   33052:        [e734ff617fe8]
                   33053: 
                   33054:        * Makefile.in:
                   33055:        added clobber target added ins_csops.h now gets CFLAGS from
                   33056:        configure
                   33057:        [d1e29c7cec25]
                   33058: 
                   33059:        * aclocal.m4:
                   33060:        relaxed SUDO_FULL_VOID
                   33061:        [fb4084f27406]
                   33062: 
                   33063:        * visudo.c:
                   33064:        function comment blocks are now in same style as rest of code
                   33065:        [04a2931354c5]
                   33066: 
                   33067:        * testsudoers.c:
                   33068:        added support for command line args in /etc/sudoers
                   33069:        [bfe4e1bcc655]
                   33070: 
                   33071:        * sudoers.man:
                   33072:        updated to have command args in the sudoers file
                   33073:        [1cd34355e9ea]
                   33074: 
                   33075:        * sudo.man:
                   33076:        added -s and -- flags added SHELL to ENVIRONMENT VARIABLES section
                   33077:        [930b48023b68]
                   33078: 
                   33079: 1995-08-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33080: 
                   33081:        * parse.yacc:
                   33082:        PATH renamed to COMMAND
                   33083:        [4e109a6de3cd]
                   33084: 
                   33085:        * parse.lex:
                   33086:        it is now a parse error for directories to have args attached to
                   33087:        them
                   33088:        [2ab10a146b54]
                   33089: 
                   33090:        * logging.c:
                   33091:        now say command args if telling user to buzz off
                   33092:        [933de26ded8b]
                   33093: 
                   33094:        * sudo.c:
                   33095:        -s no longer indicates end of args sped up loading on cmnd_args in
                   33096:        load_cmnd()
                   33097:        [eac99a4da862]
                   33098: 
                   33099:        * parse.c:
                   33100:        removed an unreachable statement
                   33101:        [634302623c49]
                   33102: 
                   33103:        * parse.lex:
                   33104:        made more efficient by pulling out the terminators when in GOTCMND
                   33105:        state and making them their own rule
                   33106:        [80798f1e1166]
                   33107: 
                   33108: 1995-08-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33109: 
                   33110:        * sudo.h:
                   33111:        removed MAXLOGLEN since it is no longer used
                   33112:        [102824196b71]
                   33113: 
                   33114:        * parse.lex:
                   33115:        now allows command args
                   33116:        [d29dfa1e5254]
                   33117: 
                   33118:        * parse.c:
                   33119:        now groks command arguments
                   33120:        [6c414cb7f105]
                   33121: 
                   33122:        * logging.c:
                   33123:        now sets tty correctly when piped input
                   33124:        [de46a30c0406]
                   33125: 
                   33126:        * sudo.c:
                   33127:        fixed loading of cmnd_args (was including command name too)
                   33128:        [15319a425ea6]
                   33129: 
                   33130:        * logging.c:
                   33131:        fixed a core dump due to incorrect if construct
                   33132:        [582363c7d7fa]
                   33133: 
                   33134: 1995-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33135: 
                   33136:        * configure.in:
                   33137:        only add -lsun is irix < 5 don't look for -lnsl or -lsocket if irix
                   33138:        [da591fe9b931]
                   33139: 
                   33140:        * aclocal.m4:
                   33141:        fixed check for ISC
                   33142:        [52e59f2082a7]
                   33143: 
                   33144:        * sudo.c:
                   33145:        now sets cmnd_args used by log_error() and that will be used by the
                   33146:        parse to check against command args
                   33147:        [c6804389723b]
                   33148: 
                   33149:        * sudo.h:
                   33150:        added cmnd_args
                   33151:        [4d00446b4a8d]
                   33152: 
                   33153:        * logging.c:
                   33154:        now dynamically allocate logline since we can guess at its size
                   33155:        [4bed8c8446aa]
                   33156: 
                   33157: 1995-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33158: 
                   33159:        * logging.c:
                   33160:        cleaned up a bunch of unnecesary #ifdef's eliminated a buffer remove
                   33161:        "register" since the compiler knows more than I do now do a
                   33162:        "basename" of the tty
                   33163:        [3b1bbf0b3da1]
                   33164: 
                   33165: 1995-07-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33166: 
                   33167:        * configure.in:
                   33168:        ++version
                   33169:        [5ce552f9a5f1]
                   33170: 
                   33171:        * sudo.h:
                   33172:        added shell extern changed MODE_* to be bit masks to allow for
                   33173:        several options together
                   33174:        [06f9dc4f400c]
                   33175: 
                   33176:        * sudo.c:
                   33177:        added -s (shell) option made MODE_* masks so we can do bitwise & and
                   33178:        | to see if multiple flags are set.
                   33179:        [01f8143010ad]
                   33180: 
                   33181:        * check.c:
                   33182:        added securid support
                   33183:        [909e078005fe]
                   33184: 
                   33185: 1995-07-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33186: 
                   33187:        * logging.c:
                   33188:        removed a bunch of unnecesary strncpy()'s and replaced with strcat()
                   33189:        [644506b57d61]
                   33190: 
                   33191: 1995-07-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33192: 
                   33193:        * Makefile.in, version.h:
                   33194:        ++version
                   33195:        [3cd6f1fbc3d9]
                   33196: 
                   33197: 1995-07-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33198: 
                   33199:        * parse.yacc:
                   33200:        fixed free() of an uninitialized pointer (yuck)
                   33201:        [8c404ee502ee]
                   33202: 
                   33203:        * testsudoers.c:
                   33204:        added netgr_matches
                   33205:        [e7c9fa2f774c]
                   33206: 
                   33207:        * parse.c:
                   33208:        cleaned up netgr_matches
                   33209:        [8108f00b810e]
                   33210: 
                   33211: 1995-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33212: 
                   33213:        * RUNSON:
                   33214:        updated for 1.3.4
                   33215:        [4741704310a1]
                   33216: 
                   33217: 1995-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33218: 
                   33219:        * Makefile.in:
                   33220:        now installs sudoers.man -- really should clean this up though.
                   33221:        [455631d45a1d]
                   33222: 
                   33223:        * Makefile.in:
                   33224:        added sudoers.cat and sudoers.man
                   33225:        [0bdedd6c7363]
                   33226: 
                   33227:        * sudo.man:
                   33228:        pulled out stuff on the sudoers file format into a separate man page
                   33229:        [de215d999cb9]
                   33230: 
                   33231:        * sudoers.man:
                   33232:        Initial revision
                   33233:        [f25eafbb7095]
                   33234: 
                   33235:        * HISTORY:
                   33236:        fixed up my email address
                   33237:        [254fbf80be74]
                   33238: 
                   33239:        * configure.in:
                   33240:        added checks for innetgr and getdomainname
                   33241:        [24a99cb7e97e]
                   33242: 
                   33243:        * visudo.c:
                   33244:        added dummy netgr_matches function
                   33245:        [1841ff2c01da]
                   33246: 
                   33247:        * parse.c:
                   33248:        added netgr_matches
                   33249:        [ec90db6a97b8]
                   33250: 
                   33251:        * parse.lex, parse.yacc:
                   33252:        added NETGROUP support
                   33253:        [c9dd93e3bc4b]
                   33254: 
                   33255:        * config.h.in:
                   33256:        added HAVE_INNETGR & HAVE_GETDOMAINNAME
                   33257:        [14abd494d875]
                   33258: 
                   33259: 1995-07-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33260: 
                   33261:        * sudo.c:
                   33262:        rewrote clean_env() that has rm_env() builtin
                   33263:        [55cb43818a95]
                   33264: 
                   33265: 1995-07-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33266: 
                   33267:        * check.c:
                   33268:        now cast uid to long in sprintf
                   33269:        [b549eea40aeb]
                   33270: 
                   33271:        * OPTIONS:
                   33272:        added _INSULTS suffix to HAL & GOONS end
                   33273:        [ed620d0aad30]
                   33274: 
                   33275:        * options.h:
                   33276:        added _INSULTS suffix to HAL & GOONS
                   33277:        [9f72e9b83afd]
                   33278: 
                   33279:        * ins_2001.h, ins_classic.h, ins_goons.h, insults.h:
                   33280:        converted to new scheme of insult "unions" end
                   33281:        [2f6d2b412132]
                   33282: 
                   33283:        * sudo.c:
                   33284:        now uses MAX_UID_T_LEN
                   33285:        [c1df79e0f389]
                   33286: 
                   33287:        * configure.in:
                   33288:        added SUDO_UID_T_LEN !l
                   33289:        [195f0b9f5f84]
                   33290: 
                   33291:        * config.h.in:
                   33292:        added MAX_UID_T_LEN
                   33293:        [73f42ae4f14d]
                   33294: 
                   33295:        * check.c:
                   33296:        now use MAX_UID_T_LEN
                   33297:        [df9c063234cb]
                   33298: 
                   33299:        * aclocal.m4:
                   33300:        added check for max len of uid_t fixed sco vs. isc check
                   33301:        [d558f36d2223]
                   33302: 
                   33303: 1995-07-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33304: 
                   33305:        * configure.in:
                   33306:        corrected version
                   33307:        [828dd1571e86]
                   33308: 
                   33309:        * configure.in:
                   33310:        added sco support
                   33311:        [af1e2f616638]
                   33312: 
                   33313:        * aclocal.m4:
                   33314:        hack to check for sco
                   33315:        [549ab99a9a43]
                   33316: 
                   33317:        * interfaces.c:
                   33318:        removed #include <net/route.h> since it was hosing some OS's
                   33319:        [ac78a7c04005]
                   33320: 
                   33321: 1995-07-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33322: 
                   33323:        * find_path.c:
                   33324:        fixed prreadlink() prototype
                   33325:        [b380fe1f2b11]
                   33326: 
                   33327:        * check.c:
                   33328:        added parens in #if's
                   33329:        [e96ade691b82]
                   33330: 
                   33331:        * configure.in:
                   33332:        added SPW_ prefix
                   33333:        [a302683a1483]
                   33334: 
                   33335:        * sudo.h:
                   33336:        moved SPW_* to config.h.in
                   33337:        [6b3be70e34cf]
                   33338: 
                   33339:        * sudo.c:
                   33340:        added a set of parens
                   33341:        [8188d735d695]
                   33342: 
                   33343:        * config.h.in:
                   33344:        added SPW_*
                   33345:        [5ead6371cf60]
                   33346: 
                   33347:        * sudo.h:
                   33348:        added SPW_* reordered error codes
                   33349:        [dead25b4ed0a]
                   33350: 
                   33351:        * check.c:
                   33352:        moved SPW_* to sudo.h
                   33353:        [ca51fb04caf4]
                   33354: 
                   33355: 1995-07-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33356: 
                   33357:        * sudo.c:
                   33358:        SPW_AUTH -> SPW_SECUREWARE
                   33359:        [6b512b2bc5dc]
                   33360: 
                   33361:        * logging.c:
                   33362:        GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
                   33363:        [defdd0944e2f]
                   33364: 
                   33365:        * configure.in:
                   33366:        AUTH -> SECUREWARE
                   33367:        [d1f8a17001dd]
                   33368: 
                   33369:        * check.c:
                   33370:        SPW_AUTH -> SPW_SECUREWARE
                   33371:        [af0e8d8b89b2]
                   33372: 
                   33373:        * check.c:
                   33374:        now uses SHADOW_TYPE to make shadow pw support more readable and
                   33375:        modular. It's a start...
                   33376:        [8c2a59667014]
                   33377: 
                   33378:        * configure.in:
                   33379:        added autodetection of shadow passwords
                   33380:        [85f81fa54b1b]
                   33381: 
                   33382:        * sudo.c:
                   33383:        now uses SHADOW_TYPE define
                   33384:        [355e5dc09b07]
                   33385: 
                   33386:        * config.h.in:
                   33387:        added SHADOW_TYPE which replaces SUNOS4 & __svr4__ defines
                   33388:        [c0c06e83e483]
                   33389: 
                   33390:        * aclocal.m4:
                   33391:        added SUDO_CHECK_SHADOW
                   33392:        [464301301639]
                   33393: 
                   33394: 1995-07-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33395: 
                   33396:        * configure.in:
                   33397:        define SVR4 for ISC define BROKEN_SYSLOG for hpux took out test for
                   33398:        memmove() since we dno longer use it...
                   33399:        [8aefa87d7d31]
                   33400: 
                   33401:        * CHANGES:
                   33402:        updated
                   33403:        [ce97b3fd7182]
                   33404: 
                   33405:        * logging.c:
                   33406:        added BROKEN_SYSLOG support
                   33407:        [a45c3bca36f6]
                   33408: 
                   33409:        * config.h.in:
                   33410:        added BROKEN_SYSLOG
                   33411:        [6f6abf0a6268]
                   33412: 
                   33413:        * check.c:
                   33414:        now only bitch it timestamp > time_now + 2 * timeout to allow for a
                   33415:        machine udpating its time from a server
                   33416:        [546bc8d35325]
                   33417: 
                   33418:        * sudo.man:
                   33419:        added 2 security notes updated Nieusma's email addr
                   33420:        [616756c56977]
                   33421: 
                   33422:        * lsearch.c:
                   33423:        changed a memmove() to memcpy() since we don't have to worry about
                   33424:        overlapping segments.
                   33425:        [30baa478526b]
                   33426: 
                   33427: 1995-07-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33428: 
                   33429:        * interfaces.c:
                   33430:        cleanup up the loop when interfaces are groped in so that it is
                   33431:        readable
                   33432:        [1fa39446bd69]
                   33433: 
                   33434:        * Makefile.in, version.h:
                   33435:        ++version
                   33436:        [b46bd2b1770f]
                   33437: 
                   33438: 1995-07-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33439: 
                   33440:        * CHANGES:
                   33441:        annotated 124-126
                   33442:        [b82a2b3ec7ce]
                   33443: 
                   33444: 1995-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33445: 
                   33446:        * check.c:
                   33447:        fixed permissions check on /tmp/.odus
                   33448:        [cc2431a65468]
                   33449: 
                   33450: 1995-07-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33451: 
                   33452:        * check.c:
                   33453:        fixed some comments
                   33454:        [8896d09b4fda]
                   33455: 
                   33456:        * check.c:
                   33457:        now checks owner & mode of timedir also checks for bogus dates on
                   33458:        timestamp file
                   33459:        [a0fad5df5b0a]
                   33460: 
                   33461:        * OPTIONS:
                   33462:        updated TIMEOUT info
                   33463:        [033cc22d9e04]
                   33464: 
                   33465:        * logging.c, sudo.h:
                   33466:        added BAD_STAMPDIR and BAD_STAMPFILE
                   33467:        [31d9ce691101]
                   33468: 
                   33469:        * compat.h:
                   33470:        added definition of S_IRWXU
                   33471:        [ff2dab091a9b]
                   33472: 
                   33473:        * CHANGES:
                   33474:        updated
                   33475:        [a40df90284f1]
                   33476: 
                   33477: 1995-07-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33478: 
                   33479:        * interfaces.c:
                   33480:        added #ifdef to make it compile on strange arches
                   33481:        [4a127f12afce]
                   33482: 
                   33483: 1995-07-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33484: 
                   33485:        * aclocal.m4:
                   33486:        fixed check for fulkl void impl.
                   33487:        [b6f2a4a361d8]
                   33488: 
                   33489:        * check.c:
                   33490:        added mssing "static"
                   33491:        [520552f2772b]
                   33492: 
                   33493:        * insults.h:
                   33494:        replaced #elif with #else #if constructs for ancient C compilers
                   33495:        [39ab2d365b57]
                   33496: 
                   33497:        * INSTALL:
                   33498:        updated irix c2 & kerb5 info
                   33499:        [ae79b99b4905]
                   33500: 
                   33501:        * configure.in:
                   33502:        added shadow pw support for irix
                   33503:        [632469d9c528]
                   33504: 
                   33505: 1995-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33506: 
                   33507:        * BUGS, TODO:
                   33508:        updated
                   33509:        [2a96bb18ac30]
                   33510: 
                   33511:        * CHANGES:
                   33512:        last changes for sudo 1.3.3
                   33513:        [c1c0cd1034b8]
                   33514: 
                   33515:        * configure.in:
                   33516:        now calls SUDO_SOCK_SA_LEN
                   33517:        [14ea78159d45]
                   33518: 
                   33519:        * config.h.in:
                   33520:        added HAVE_SA_LEN
                   33521:        [cc2a346aa905]
                   33522: 
                   33523:        * aclocal.m4:
                   33524:        added SUDO_SOCK_SA_LEN
                   33525:        [456a2025644a]
                   33526: 
                   33527:        * interfaces.c:
                   33528:        now works with ip implementations that use sa_len in sockaddr
                   33529:        [90be6e028077]
                   33530: 
                   33531:        * INSTALL:
                   33532:        added note about buggy AIX compiler
                   33533:        [c0f6d427e4e4]
                   33534: 
                   33535:        * interfaces.c:
                   33536:        now include sys/time.h for AIX
                   33537:        [2510858ab38b]
                   33538: 
                   33539: 1995-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33540: 
                   33541:        * Makefile.in:
                   33542:        getcwd -> getwd
                   33543:        [66085ebca98e]
                   33544: 
                   33545:        * interfaces.c:
                   33546:        now works for ISC and others. yay.
                   33547:        [f336d4ffc927]
                   33548: 
                   33549: 1995-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33550: 
                   33551:        * Makefile.in, version.h:
                   33552:        version++
                   33553:        [836cffc2078d]
                   33554: 
                   33555: 1995-06-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33556: 
                   33557:        * aclocal.m4:
                   33558:        fixed test for full void impl
                   33559:        [fb004107e7b9]
                   33560: 
                   33561:        * sudo.c:
                   33562:        now check to see that st_dev is non-zero before assuming that we are
                   33563:        being spoofed
                   33564:        [1b0e1c30c506]
                   33565: 
                   33566: 1995-06-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33567: 
                   33568:        * aclocal.m4, configure.in:
                   33569:        SUDO_FUNC_UTIME_NULL -> AC_FUNC_UTIME_NULL
                   33570:        [4953379bfb01]
                   33571: 
                   33572: 1995-06-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33573: 
                   33574:        * aclocal.m4:
                   33575:        fixed include file order for SUDO_FUNC_UTIME_POSIX
                   33576:        [ff64ab7df44f]
                   33577: 
                   33578:        * logging.c:
                   33579:        added cast for ttyname()
                   33580:        [444f05f56758]
                   33581: 
                   33582:        * configure.in:
                   33583:        fixed typo
                   33584:        [de068e748431]
                   33585: 
                   33586:        * check.c:
                   33587:        now deal correctly with all known variation of utime() -- yippe
                   33588:        [b778a4195a89]
                   33589: 
                   33590:        * configure.in:
                   33591:        added SUDO_FUNC_UTIME_POSIX
                   33592:        [cf635f2269d6]
                   33593: 
                   33594:        * aclocal.m4:
                   33595:        added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
                   33596:        [d79593be4b73]
                   33597: 
                   33598:        * config.h.in:
                   33599:        added HAVE_UTIME_POSIX
                   33600:        [c67b4ac0dca5]
                   33601: 
                   33602:        * check.c:
                   33603:        fixed a typo
                   33604:        [b14df5680f59]
                   33605: 
                   33606:        * check.c:
                   33607:        no longer assume !HAVE_UTIME_NULL means old BSD utime()
                   33608:        [0aeaf4b2f38b]
                   33609: 
                   33610:        * check.c:
                   33611:        fixed fascist C compiler warning
                   33612:        [c61ddf2f1f93]
                   33613: 
                   33614:        * interfaces.c:
                   33615:        now set strioctl.ic_timout in STRSET() now initialize num_interfaces
                   33616:        to 0 (just to be anal)
                   33617:        [c54cc2ba0052]
                   33618: 
                   33619: 1995-06-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33620: 
                   33621:        * sudo.h:
                   33622:        increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
                   33623:        [74cf585a54fb]
                   33624: 
                   33625:        * logging.c:
                   33626:        added tty logging
                   33627:        [e27d8dcfbd78]
                   33628: 
                   33629:        * interfaces.c:
                   33630:        reworked the ISC code
                   33631:        [bcf57ce8ae69]
                   33632: 
                   33633:        * Makefile.in, version.h:
                   33634:        updated version
                   33635:        [032941c9b94d]
                   33636: 
                   33637:        * check.c:
                   33638:        now expect old-style utime(3) if utime() can't take NULL as an arg
                   33639:        [018dd4a73030]
                   33640: 
                   33641:        * configure.in:
                   33642:        added check for utime.h
                   33643:        [0b76e8feb618]
                   33644: 
                   33645:        * config.h.in:
                   33646:        added HAVE_UTIME_H
                   33647:        [62ee42feda46]
                   33648: 
                   33649:        * Makefile.in:
                   33650:        added CPPFLAGS STATIC_FLAGS -> LDFLAGS
                   33651:        [fa3201d294e1]
                   33652: 
                   33653:        * configure.in:
                   33654:        now search for kerb libs and includes
                   33655:        [cc332401e571]
                   33656: 
                   33657:        * check.c:
                   33658:        added support for utime(2)'s that can't take a NULL parameter
                   33659:        [98797fedf69f]
                   33660: 
                   33661:        * utime.c:
                   33662:        moved HAVE_UTIME_NULL stuff to update_timestamp() where t belongs
                   33663:        [6ce6d825fb44]
                   33664: 
                   33665:        * configure.in:
                   33666:        added utime(s) stuff
                   33667:        [a2afb744403e]
                   33668: 
                   33669:        * check.c:
                   33670:        now use utime()
                   33671:        [48902240a51e]
                   33672: 
                   33673:        * config.h.in:
                   33674:        added HAVE_UTIME and HAVE_UTIME_NULL
                   33675:        [9a56ab65d4f4]
                   33676: 
                   33677: 1995-06-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33678: 
                   33679:        * utime.c:
                   33680:        now use HAVE_UTIME_NULL
                   33681:        [e3944de09a92]
                   33682: 
                   33683:        * emul/utime.h, utime.c:
                   33684:        Initial revision
                   33685:        [a2cbf2ef3427]
                   33686: 
                   33687:        * check.c:
                   33688:        need to setuid(0) to make kerb4 stuff work.
                   33689:        [c6cfda4039d7]
                   33690: 
                   33691:        * tgetpass.c:
                   33692:        no more special case for kerberos
                   33693:        [4a5c33145be9]
                   33694: 
                   33695:        * config.h.in:
                   33696:        took out setreuid and setresuid stuff added kerb5 stuff (use kerb4
                   33697:        emulation)
                   33698:        [a607ee43e650]
                   33699: 
                   33700:        * compat.h:
                   33701:        no longer need setreuid() emulation now set _PASSWD_LEN to 128 if
                   33702:        kerberos
                   33703:        [02fb274cc136]
                   33704: 
                   33705:        * check.c:
                   33706:        now use private ticket file for kerberos support to avoid trouncing
                   33707:        on system one
                   33708:        [28d8b6b812c7]
                   33709: 
                   33710: 1995-06-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33711: 
                   33712:        * sudo.h:
                   33713:        added SPOOF_ATTEMPT & cmnd_st
                   33714:        [d3b42a1f4d0d]
                   33715: 
                   33716:        * sudo.c:
                   33717:        added anti-spoofing support
                   33718:        [ab1e2aa44a57]
                   33719: 
                   33720:        * parse.c:
                   33721:        now use global cmnd_st
                   33722:        [47018265a1a6]
                   33723: 
                   33724:        * logging.c:
                   33725:        added SPOOF_ATTEMPT suypport
                   33726:        [7bbe9dd2a021]
                   33727: 
                   33728:        * testsudoers.c, visudo.c:
                   33729:        added void casts where appropriate
                   33730:        [f191441ba333]
                   33731: 
                   33732:        * parse.yacc:
                   33733:        fixed up spacing and added void casts where appropriate
                   33734:        [15d886fc809c]
                   33735: 
                   33736:        * sudo.c:
                   33737:        fixed problem with "-p prompt" but no args
                   33738:        [6fc048261a3e]
                   33739: 
                   33740: 1995-06-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33741: 
                   33742:        * sudo.man:
                   33743:        added BUGS and annotated -l description
                   33744:        [e5c506de2603]
                   33745: 
                   33746:        * sudo.h:
                   33747:        validate() now takes a flag
                   33748:        [26627becc60a]
                   33749: 
                   33750:        * sudo.c:
                   33751:        validate() now takes a flag added -l
                   33752:        [a4f7bb97fe54]
                   33753: 
                   33754:        * parse.yacc:
                   33755:        added support for -l
                   33756:        [e7a9b10b0ad3]
                   33757: 
                   33758:        * parse.c:
                   33759:        validate() now takes a flag that says whether or not to check the
                   33760:        command
                   33761:        [9e1e67f4e281]
                   33762: 
                   33763: 1995-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33764: 
                   33765:        * logging.c:
                   33766:        now deals with Argv == 1
                   33767:        [0acb637ab635]
                   33768: 
                   33769:        * sudo.man:
                   33770:        added -p option
                   33771:        [e60382fc0561]
                   33772: 
                   33773:        * sudo.c:
                   33774:        added prompt support reworked parse_args()
                   33775:        [2f605267ed4a]
                   33776: 
                   33777:        * sudo.h:
                   33778:        added prompt
                   33779:        [5ab021bdb419]
                   33780: 
                   33781:        * options.h:
                   33782:        added PASSPROMPT
                   33783:        [614727ff44a2]
                   33784: 
                   33785:        * check.c:
                   33786:        now use BUFSIZ as length of kerb password added kpass so pass is
                   33787:        always a char * now use prompt global when asking for a password
                   33788:        [76be09af784f]
                   33789: 
                   33790:        * tgetpass.c:
                   33791:        now use BUFSIZ as _PASSWD_LEN if using kerberos
                   33792:        [1e907eed312b]
                   33793: 
                   33794:        * OPTIONS:
                   33795:        added PASSPROMPT
                   33796:        [ddb2f405ce40]
                   33797: 
                   33798: 1995-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33799: 
                   33800:        * configure.in:
                   33801:        only look for -lufc or -lcrypt if crypt() not in libc
                   33802:        [9717d315661f]
                   33803: 
                   33804:        * check.c:
                   33805:        don't exit on kerb error, just warn if k_errno == KDC_PR_UNKNOWN
                   33806:        (unknown user) silently fail
                   33807:        [2b48693d4ee9]
                   33808: 
                   33809:        * INSTALL:
                   33810:        added kerb4 note
                   33811:        [986e393f740c]
                   33812: 
                   33813:        * tgetpass.c:
                   33814:        HAVE_KERBEROS -> HAVE_KERB4
                   33815:        [e438bfb5e6aa]
                   33816: 
                   33817:        * check.c:
                   33818:        removed debugging printf
                   33819:        [1cf9f5cbffa5]
                   33820: 
                   33821:        * configure.in:
                   33822:        KERBEROS -> KERB4 added checks for setreuid & setresuid
                   33823:        [01e9945beb1e]
                   33824: 
                   33825:        * config.h.in:
                   33826:        HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and HAVE_SETRESUID
                   33827:        [0e0bb5b8ac3e]
                   33828: 
                   33829:        * compat.h:
                   33830:        added deif of UID_NO_CHANGE & GID_NO_CHANGE added setreuid emulation
                   33831:        with setresuid if applic
                   33832:        [9dae24c47696]
                   33833: 
                   33834:        * check.c:
                   33835:        HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid chown() hack if
                   33836:        no setreuid() or a broken one
                   33837:        [1fca642bdb8e]
                   33838: 
                   33839: 1995-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33840: 
                   33841:        * configure.in:
                   33842:        added kerberos support
                   33843:        [da5639b9b8e7]
                   33844: 
                   33845:        * config.h.in:
                   33846:        added HAVE_KERBEROS
                   33847:        [fcc5be550e65]
                   33848: 
                   33849:        * tgetpass.c:
                   33850:        added KERBEROS support (long passwords)
                   33851:        [303ba6924dd2]
                   33852: 
                   33853:        * check.c:
                   33854:        added kerberos support
                   33855:        [e40afe98fc1d]
                   33856: 
                   33857: 1995-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33858: 
                   33859:        * sudo.h:
                   33860:        added MODE_BACKGROUND
                   33861:        [9b483c932016]
                   33862: 
                   33863:        * sudo.man:
                   33864:        escaped dashes added -b option
                   33865:        [62e84f1a7714]
                   33866: 
                   33867:        * sudo.c:
                   33868:        added -b option
                   33869:        [7e78aaefeb95]
                   33870: 
                   33871:        * check.c:
                   33872:        added crypt() for osf/1 3.x enhanced secuiry
                   33873:        [e9aa5abdb7d5]
                   33874: 
                   33875:        * configure.in:
                   33876:        now check for -lcrypt
                   33877:        [5cb9c67e9fa2]
                   33878: 
                   33879:        * interfaces.c:
                   33880:        added ENXIO like EADDRNOTAVAIL
                   33881:        [74223bb1ba75]
                   33882: 
                   33883: 1995-05-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33884: 
                   33885:        * configure.in:
                   33886:        now emulate getwd(), not getcwd()
                   33887:        [3e5439d9a5f4]
                   33888: 
                   33889:        * sudo.c:
                   33890:        getcwd() -> getwd()
                   33891:        [6392a96a658e]
                   33892: 
                   33893:        * getwd.c:
                   33894:        getcwd -> getwd
                   33895:        [1b0ab9bae11e]
                   33896: 
                   33897: 1995-05-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33898: 
                   33899:        * ins_2001.h, ins_classic.h, ins_goons.h:
                   33900:        Initial revision
                   33901:        [86db60d8cf00]
                   33902: 
                   33903:        * insults.h:
                   33904:        broke out insults into separate include files
                   33905:        [0a01993bd38a]
                   33906: 
                   33907:        * OPTIONS, options.h:
                   33908:        added GOONS
                   33909:        [e283203c6515]
                   33910: 
                   33911:        * Makefile.in:
                   33912:        added ins_2001.h ins_classic.h ins_goons.h
                   33913:        [2a39cd6a4cd2]
                   33914: 
                   33915:        * Makefile.in, version.h:
                   33916:        ++version
                   33917:        [05ebf4f5e41a]
                   33918: 
                   33919:        * visudo.c:
                   33920:        moved signal handler setup to setup_signals()
                   33921:        [3dd976c04540]
                   33922: 
                   33923:        * sudo.h:
                   33924:        added load_interfaces()
                   33925:        [af2d473b09e2]
                   33926: 
                   33927:        * sudo.c:
                   33928:        moved load_interfaces to interfaces.c
                   33929:        [5c8c138e5d4c]
                   33930: 
                   33931:        * parse.yacc:
                   33932:        added clearaliases
                   33933:        [aeb4ff301daa]
                   33934: 
                   33935:        * OPTIONS, options.h:
                   33936:        added FAST_MATCH
                   33937:        [f49ea3d1b525]
                   33938: 
                   33939:        * parse.lex:
                   33940:        now uses clearaliases variable
                   33941:        [a2dda415bf61]
                   33942: 
                   33943:        * interfaces.c:
                   33944:        Initial revision
                   33945:        [a1990e3f5c69]
                   33946: 
                   33947:        * Makefile.in:
                   33948:        added interfaces.[co]
                   33949:        [1e8e5984de97]
                   33950: 
                   33951:        * testsudoers.c:
                   33952:        now uses ip addrs and netmasks via load_interfaces()
                   33953:        [54b8f7a6835e]
                   33954: 
                   33955:        * sudo.c:
                   33956:        now remove IFS instead of setting to "sane" value
                   33957:        [ce7eec9f115e]
                   33958: 
                   33959: 1995-05-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33960: 
                   33961:        * parse.c:
                   33962:        added FAST_MATCH
                   33963:        [816d4f5fe81a]
                   33964: 
                   33965: 1995-04-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33966: 
                   33967:        * Makefile.in:
                   33968:        sudo_goodpath.c-> goodpath.c
                   33969:        [a5072c4e1de2]
                   33970: 
                   33971:        * sudo.c:
                   33972:        added Andy's new ISC changes
                   33973:        [caa6bbee358e]
                   33974: 
                   33975: 1995-04-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33976: 
                   33977:        * OPTIONS:
                   33978:        added a sentence to SECURE_PATH info
                   33979:        [cad6e1569d15]
                   33980: 
                   33981:        * BUGS:
                   33982:        added one
                   33983:        [4b35cf699a83]
                   33984: 
                   33985:        * CHANGES:
                   33986:        updated
                   33987:        [5fded9dc62f0]
                   33988: 
                   33989:        * RUNSON:
                   33990:        updated
                   33991:        [33cb993cfd39]
                   33992: 
                   33993: 1995-04-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   33994: 
                   33995:        * RUNSON:
                   33996:        updated for beta3
                   33997:        [a05dc6a91995]
                   33998: 
                   33999:        * Makefile.in, version.h:
                   34000:        ++version
                   34001:        [54aaf3fadc75]
                   34002: 
                   34003:        * aclocal.m4:
                   34004:        sendmail is now looked for in /usr/ucblib
                   34005:        [231ac1a4662f]
                   34006: 
                   34007:        * sudo.c:
                   34008:        fixed indentation
                   34009:        [fb137400c8c2]
                   34010: 
                   34011:        * aclocal.m4:
                   34012:        fixed a typo
                   34013:        [e03f1acc468b]
                   34014: 
                   34015:        * sudo.c:
                   34016:        updated ISC mods
                   34017:        [070290d4754b]
                   34018: 
                   34019:        * configure.in:
                   34020:        added unixware case
                   34021:        [e90250bae0d9]
                   34022: 
                   34023:        * check.c:
                   34024:        user_is_exempt is no longer hidden
                   34025:        [1a341765b8af]
                   34026: 
                   34027:        * RUNSON:
                   34028:        updated
                   34029:        [a9c4898b26dd]
                   34030: 
                   34031:        * aclocal.m4:
                   34032:        isc and riscos changes
                   34033:        [98b5d86585d1]
                   34034: 
                   34035:        * OPTIONS:
                   34036:        added NOTE about new interaction of EXEMPTGROUP and SECURE_PATH
                   34037:        [e1ecc464ce4b]
                   34038: 
                   34039:        * Makefile.in:
                   34040:        fixed a typo and added testsudoers stuff
                   34041:        [435d60e163dc]
                   34042: 
                   34043:        * testsudoers.c:
                   34044:        Initial revision
                   34045:        [6ce14a448662]
                   34046: 
                   34047: 1995-04-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34048: 
                   34049:        * parse.yacc:
                   34050:        applied fixed patch from Chris
                   34051:        [cd6144203d13]
                   34052: 
                   34053: 1995-04-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34054: 
                   34055:        * Makefile.in:
                   34056:        fixed a typo
                   34057:        [34f8a54ba041]
                   34058: 
                   34059:        * parse.yacc:
                   34060:        added a set of braces for bison
                   34061:        [f0e43b938914]
                   34062: 
                   34063:        * parse.yacc:
                   34064:        merged in Chris' changes to dekludge the parser.
                   34065:        [82d6e373ab1c]
                   34066: 
                   34067:        * logging.c:
                   34068:        send_mail() was calling find_path() which is wrong since find_path()
                   34069:        stores cmnd in a static var. Anyhow, it doesn't make much sense
                   34070:        since MAILER should always be fully qualified
                   34071:        [6eae6a0b8098]
                   34072: 
                   34073: 1995-04-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34074: 
                   34075:        * sample.sudoers:
                   34076:        added User_Alias stuff
                   34077:        [aaba8c8e918d]
                   34078: 
                   34079:        * aclocal.m4:
                   34080:        SUDO_NEXT now looks for /usr/lib/NextStep/software_version
                   34081:        [52bd81f34b32]
                   34082: 
                   34083:        * RUNSON:
                   34084:        added DEC UNIX 3.0 w/ gcc
                   34085:        [7daf570775b5]
                   34086: 
                   34087:        * visudo.c:
                   34088:        Exit was being used in places where exit should be used
                   34089:        [6026a89c07ed]
                   34090: 
                   34091:        * sudoers:
                   34092:        added "User alias specification"
                   34093:        [a487b6e234f8]
                   34094: 
                   34095:        * parse.yacc:
                   34096:        fixed probs caused by making nslots and naliases a size_t
                   34097:        [0be919384f3f]
                   34098: 
                   34099:        * RUNSON:
                   34100:        added KSR, upped rev to 1.3.1b2
                   34101:        [ce04ee6faadf]
                   34102: 
                   34103:        * logging.c, parse.yacc:
                   34104:        1024 -> BUFSIZ
                   34105:        [cd6dda45fa11]
                   34106: 
                   34107:        * parse.yacc:
                   34108:        void * -> VOID * naliases and nslots are now size_t to appease
                   34109:        lsearch on 64-bit machines
                   34110:        [bf2f807c0dc1]
                   34111: 
                   34112: 1995-04-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34113: 
                   34114:        * TODO:
                   34115:        did a bunch of things and added a bunch :-)
                   34116:        [42afd957b829]
                   34117: 
                   34118:        * PORTING:
                   34119:        updated
                   34120:        [972f95c85776]
                   34121: 
                   34122:        * visudo.man:
                   34123:        closer to BSD manpage style
                   34124:        [07ae88f50325]
                   34125: 
                   34126:        * sudo.man:
                   34127:        closer to standard BSD man format
                   34128:        [372c28dcc135]
                   34129: 
                   34130:        * compat.h, config.h.in, emul/search.h, insults.h, options.h,
                   34131:        pathnames.h.in, sudo.h, version.h:
                   34132:        added RCS id
                   34133:        [c0ec90b81002]
                   34134: 
                   34135:        * sudo.h:
                   34136:        removed crufty #defines that are no longer used
                   34137:        [35e2b4b477f0]
                   34138: 
                   34139:        * BUGS:
                   34140:        fixed a bug
                   34141:        [5bb3e1bee85e]
                   34142: 
                   34143:        * sudo.man:
                   34144:        updated based on sudo changes
                   34145:        [e65de1cae438]
                   34146: 
                   34147:        * parse.yacc:
                   34148:        now allow ALL keyword in User_Aliases now allow ALL keyword as well
                   34149:        as a NAME or ALIAS
                   34150:        [1fb31404dd0f]
                   34151: 
                   34152:        * CHANGES:
                   34153:        updated
                   34154:        [b24018ac610b]
                   34155: 
                   34156:        * sudo.c:
                   34157:        now sets SUDO_COMMAND and SUDO_GID envariables.
                   34158:        [e9d791557fb7]
                   34159: 
                   34160:        * aclocal.m4:
                   34161:        fixed bug with full void impl check
                   34162:        [35715301023c]
                   34163: 
                   34164:        * parse.yacc:
                   34165:        fixed User_Alias supoprt
                   34166:        [4c30dfbaaa07]
                   34167: 
                   34168:        * parse.yacc:
                   34169:        added stubs for User_Alias support
                   34170:        [f4afbd247edf]
                   34171: 
                   34172:        * sudo.c:
                   34173:        now sets removes # bogus interfaces from num_interfaces
                   34174:        [6f077fac9ab1]
                   34175: 
                   34176:        * parse.lex:
                   34177:        added User_Alias support
                   34178:        [bc7997e5df85]
                   34179: 
                   34180: 1995-04-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34181: 
                   34182:        * Makefile.in:
                   34183:        removed extraneous TODO
                   34184:        [bc87a3b14d6d]
                   34185: 
                   34186: 1995-04-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34187: 
                   34188:        * visudo.c:
                   34189:        ntwk_matches -> addr_matches
                   34190:        [475044e288b8]
                   34191: 
                   34192:        * parse.yacc:
                   34193:        ntwk_matches -> addr_matches
                   34194:        [dd1f4093fd2d]
                   34195: 
                   34196:        * parse.c:
                   34197:        ntwk_matches -> addr_matches now use inet_addr() not inet_network()
                   34198:        (which expects octet boundaries) fixes for OSF (sizeof(int) !=
                   34199:        sizeof(long))
                   34200:        [acd2f556940f]
                   34201: 
                   34202:        * sudo.c:
                   34203:        took out debugging info
                   34204:        [044023063eca]
                   34205: 
                   34206:        * aclocal.m4:
                   34207:        OS was being set to unknown before non-uname based host checks.
                   34208:        This caused no checks to happen since $OS was not zero-length.
                   34209:        [335a7267479d]
                   34210: 
                   34211:        * sudo.c:
                   34212:        fixed loading of interfaces struct still has debugging info in
                   34213:        though
                   34214:        [2d1a18998c1e]
                   34215: 
                   34216:        * parse.c:
                   34217:        fixed typo
                   34218:        [175674a3a9fa]
                   34219: 
                   34220: 1995-04-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34221: 
                   34222:        * Makefile.in:
                   34223:        ++version
                   34224:        [55d191b5daa3]
                   34225: 
                   34226:        * version.h:
                   34227:        ++
                   34228:        [d7d1f115696a]
                   34229: 
                   34230:        * visudo.c:
                   34231:        removed extraneous extern decl of "top
                   34232:        [50355621047d]
                   34233: 
                   34234:        * visudo.c:
                   34235:        now zeros "top"
                   34236:        [4e683210345b]
                   34237: 
                   34238:        * parse.yacc:
                   34239:        removed parser_cleanup (no need for it now)
                   34240:        [afa59f222b6c]
                   34241: 
                   34242:        * parse.lex:
                   34243:        now calls reset_aliases() directly
                   34244:        [3a23cbd60fc0]
                   34245: 
                   34246: 1995-04-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34247: 
                   34248:        * OPTIONS:
                   34249:        added a sentence to SECURE_PATH description
                   34250:        [c5bf75b85af0]
                   34251: 
                   34252:        * parse.c:
                   34253:        fixed my stupid bug where I used NAMLEN on something I wanted to
                   34254:        just get the name from. argh.
                   34255:        [111f460f6540]
                   34256: 
                   34257: 1995-04-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34258: 
                   34259:        * lsearch.c:
                   34260:        fixed argument order of memmove() that i hosed when converting from
                   34261:        bcopy(). arghh.
                   34262:        [2f5336045c8b]
                   34263: 
                   34264:        * Makefile.in:
                   34265:        finally fixed DISTFILES line
                   34266:        [a1b419e73a63]
                   34267: 
                   34268:        * Makefile.in:
                   34269:        tabs -> spaces
                   34270:        [280fb03e5764]
                   34271: 
                   34272:        * Makefile.in:
                   34273:        added missing files to DISTFILES
                   34274:        [991fc1cd2263]
                   34275: 
                   34276:        * Makefile.in:
                   34277:        SUPPORTED -> RUNSON
                   34278:        [7580e65b05fb]
                   34279: 
                   34280: 1995-04-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34281: 
                   34282:        * TODO:
                   34283:        updated
                   34284:        [fe764a29c1cc]
                   34285: 
                   34286:        * RUNSON:
                   34287:        updated for pl5b1 release
                   34288:        [aefc35bd2291]
                   34289: 
                   34290:        * BUGS, TODO:
                   34291:        updated
                   34292:        [8f0ea249b687]
                   34293: 
                   34294:        * check.c:
                   34295:        fixed bug where if you hit return at first sudo prompt it would
                   34296:        still log as a failure
                   34297:        [24539c854692]
                   34298: 
                   34299:        * CHANGES:
                   34300:        updated
                   34301:        [251cc7b3ede4]
                   34302: 
                   34303:        * aclocal.m4:
                   34304:        better test for bogus void * implementation
                   34305:        [efe23180cb88]
                   34306: 
                   34307:        * logging.c:
                   34308:        added PASSWORDS_NOT_CORRECT
                   34309:        [bd12c73f83f7]
                   34310: 
                   34311:        * check.c:
                   34312:        added PASSWORDS_NOT_CORRECT stuff]
                   34313:        [90de391a979f]
                   34314: 
                   34315:        * sudo.h:
                   34316:        added PASSWORDS_NOT_CORRECT
                   34317:        [727fbeb76fc5]
                   34318: 
                   34319:        * tgetpass.c:
                   34320:        moved pathnames.h
                   34321:        [4f910e5a8df7]
                   34322: 
                   34323:        * sudo.c:
                   34324:        removed some unused vars and fixed up uid2str
                   34325:        [70e92c7f9076]
                   34326: 
                   34327:        * putenv.c:
                   34328:        moved compat.h
                   34329:        [b271091586f6]
                   34330: 
                   34331:        * getcwd.c, getwd.c:
                   34332:        added pathnames.h
                   34333:        [6f25218f133f]
                   34334: 
                   34335: 1995-03-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34336: 
                   34337:        * parse.yacc:
                   34338:        fixed a typo I introduced in the last checkin :-(
                   34339:        [62c3af75c4fe]
                   34340: 
                   34341:        * parse.lex:
                   34342:        can't have #ifdef's where N is defined so just do this the broken
                   34343:        way for AIX
                   34344:        [c5648a5594e4]
                   34345: 
                   34346:        * parse.yacc:
                   34347:        better hack from Chris (but still a hack)
                   34348:        [6b6d8aed93f3]
                   34349: 
                   34350:        * parse.lex:
                   34351:        stupid hack for broken aix lex
                   34352:        [efc3f9e5280e]
                   34353: 
                   34354:        * tgetpass.c:
                   34355:        now includes compat.h 
                   34356:        [401822173f77]
                   34357: 
                   34358:        * visudo.c:
                   34359:        now includes fcntl.h
                   34360:        [63865c2f8ac6]
                   34361: 
                   34362:        * compat.h:
                   34363:        added FD_SET and FD_ZERO for 4.2BSD
                   34364:        [00c5597c0bb0]
                   34365: 
                   34366:        * parse.yacc:
                   34367:        dirty hack to fix parser bug. i don't really like this but it works
                   34368:        for now...
                   34369:        [5b8bbdc81569]
                   34370: 
                   34371:        * sudo.c:
                   34372:        uid2str is now static like the prototype says
                   34373:        [f2a97b5cb870]
                   34374: 
                   34375: 1995-03-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34376: 
                   34377:        * CHANGES, SUPPORTED, TODO, TROUBLESHOOTING:
                   34378:        updated
                   34379:        [6f79c3e92716]
                   34380: 
                   34381:        * RUNSON:
                   34382:        Initial revision
                   34383:        [12a09ef9e884]
                   34384: 
                   34385:        * sudo.c:
                   34386:        check_sudoers now returns an error code and sudo calls inform_user
                   34387:        and log_error based on the return value.
                   34388:        [340eca188d9a]
                   34389: 
                   34390:        * logging.c, sudo.h:
                   34391:        added entries for new errors
                   34392:        [6050d8542e1f]
                   34393: 
                   34394:        * parse.c:
                   34395:        now set uid to that of SUDOERS_OWNER while parsing sudoers file
                   34396:        [3683c42bc9b0]
                   34397: 
                   34398:        * Makefile.in:
                   34399:        took out testsudoers 
                   34400:        [65317d49db48]
                   34401: 
                   34402:        * sudo.c:
                   34403:        now explicately checks that it is setuid root
                   34404:        [2fe1be60ef6a]
                   34405: 
                   34406:        * sudo.c:
                   34407:        If a user has no passwd entry sudo would segv (writing to a garbage
                   34408:        pointer). Now allocate space before writing :-)
                   34409:        [d08e7eb5e5ef]
                   34410: 
                   34411:        * configure.in:
                   34412:        reordered AC_CHECK_FUNCS
                   34413:        [4c82e56c6f4f]
                   34414: 
                   34415:        * config.h.in:
                   34416:        fixed memset macro
                   34417:        [77ede6b714ab]
                   34418: 
                   34419:        * tgetpass.c, visudo.c:
                   34420:        bzero -> memset
                   34421:        [1a005bb322c8]
                   34422: 
                   34423:        * logging.c:
                   34424:        bzero -> memset when a parse error is logged the line number of the
                   34425:        error is now logged too
                   34426:        [a42d68047723]
                   34427: 
                   34428:        * INSTALL:
                   34429:        added Sunos to blurb about c2 security
                   34430:        [af750a1d131e]
                   34431: 
                   34432:        * configure.in:
                   34433:        added a SUN4 define for C2 security
                   34434:        [6ad5b23a3eb0]
                   34435: 
                   34436:        * config.h.in:
                   34437:        bcopy -> memmove bzero -> memset
                   34438:        [5494460c8464]
                   34439: 
                   34440:        * lsearch.c:
                   34441:        bcopy -> memmove char * -> VOID *
                   34442:        [a15f5c316e16]
                   34443: 
                   34444:        * check.c:
                   34445:        added support for sunos with C2 security
                   34446:        [03fea5bb21e6]
                   34447: 
                   34448:        * OPTIONS, options.h:
                   34449:        reordered
                   34450:        [1686265af3e1]
                   34451: 
                   34452:        * pathnames.h.in:
                   34453:        _PATH_SUDO_LOGFILE now set based on configure
                   34454:        [5867b58e4a04]
                   34455: 
                   34456:        * configure.in:
                   34457:        added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
                   34458:        [1984d9fd1b5c]
                   34459: 
                   34460:        * config.h.in:
                   34461:        added _SUDO_PATH_LOGFILE
                   34462:        [dd3eebe62580]
                   34463: 
                   34464:        * aclocal.m4:
                   34465:        added SUDO_LOGFILE to find where to put sudo.log added
                   34466:        SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h too) added
                   34467:        SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
                   34468:        [c589a515a99a]
                   34469: 
                   34470: 1995-03-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34471: 
                   34472:        * TROUBLESHOOTING:
                   34473:        Initial revision
                   34474:        [f42f1baba3a8]
                   34475: 
                   34476:        * sudo.c:
                   34477:        now do set_perms(PERM_ROOT) before the getpwuid() in load_global()
                   34478:        to work around a problem is trusted hpux shadow passwords. yuck.
                   34479:        [ae1f13b54687]
                   34480: 
                   34481:        * parse.yacc:
                   34482:        backed out a change in malloc/realloc
                   34483:        [ab868db0ad69]
                   34484: 
                   34485:        * parse.yacc:
                   34486:        now include stdlib.h
                   34487:        [957eef0631eb]
                   34488: 
                   34489:        * visudo.c:
                   34490:        now do an freopen() of the stmp file so that yyin will always point
                   34491:        to the same thing. This is important for flex since we are doing a
                   34492:        YY_NEWFILE
                   34493:        [44558922fd3e]
                   34494: 
                   34495:        * parse.yacc:
                   34496:        replaced yywrap() with parser_cleanup() since yywrap() needs to be
                   34497:        in parse.lex to be able to use YY_NEW_FILE. sigh.
                   34498:        [12dd09921074]
                   34499: 
                   34500:        * parse.lex:
                   34501:        now have a rule that matches anything that doesn't match an
                   34502:        explicite rule. well, you know what i mean (. matches anything not
                   34503:        yet matched). However, this means that there is input still queued
                   34504:        up so we need to do a YY_NEW_FILE; in yywrap. So, yywrap has moved
                   34505:        into parse.lex and it calls parser_cleanup() which is most of the
                   34506:        old yywrap() sigh.
                   34507:        [7f4042bc48d6]
                   34508: 
                   34509:        * SUPPORTED:
                   34510:        no longer used
                   34511:        [8f220be4da94]
                   34512: 
                   34513:        * getcwd.c, getwd.c:
                   34514:        moved compat.h to be the last include file
                   34515:        [9f3a65e2d485]
                   34516: 
                   34517:        * parse.yacc:
                   34518:        fixed type of aliascmp() args
                   34519:        [1c27eb989bdf]
                   34520: 
                   34521:        * find_path.c:
                   34522:        NULL -> '\0'
                   34523:        [5c8d8cf1692e]
                   34524: 
                   34525:        * parse.yacc:
                   34526:        added casts to lfind and lsearch args for irix
                   34527:        [61027ddeecf8]
                   34528: 
                   34529:        * Makefile.in:
                   34530:        bsdinstall -> install-sh
                   34531:        [61de6612c5a5]
                   34532: 
                   34533:        * INSTALL:
                   34534:        added info about make realclean
                   34535:        [29c6324d727f]
                   34536: 
                   34537:        * Makefile.in:
                   34538:        updated VERSION added dependencies for visudo.cat
                   34539:        [09077d7229d4]
                   34540: 
                   34541:        * version.h:
                   34542:        -> pl5b1
                   34543:        [5d21c7ad1a41]
                   34544: 
                   34545:        * sudo.c:
                   34546:        took out -l
                   34547:        [fc1478d81b38]
                   34548: 
                   34549:        * Makefile.in:
                   34550:        now there is a real visudo.man and visudo.cat
                   34551:        [58aeac43a6dd]
                   34552: 
                   34553:        * sudo.man:
                   34554:        took out visudo stuff
                   34555:        [4a6ac4393343]
                   34556: 
                   34557:        * visudo.man:
                   34558:        Initial revision
                   34559:        [cba348843db8]
                   34560: 
                   34561:        * parse.c, parse.lex, parse.yacc:
                   34562:        updated copyright
                   34563:        [ffa16b70944a]
                   34564: 
                   34565:        * README:
                   34566:        updated for pl5
                   34567:        [a26e423e9e5f]
                   34568: 
                   34569:        * sudo.man:
                   34570:        updated Nieusma & Hieb email addresses
                   34571:        [f0083e71989d]
                   34572: 
                   34573:        * INSTALL:
                   34574:        updated to include options.h and OPTIONS
                   34575:        [ee59e2b76c94]
                   34576: 
                   34577:        * CHANGES, TODO:
                   34578:        updated
                   34579:        [51e011ad5220]
                   34580: 
                   34581:        * BUGS:
                   34582:        eliminated bug #1 (yay)
                   34583:        [e7e88515494e]
                   34584: 
                   34585:        * configure.in:
                   34586:        sunos no longer gets linked statically
                   34587:        [2e5b3ff3108f]
                   34588: 
                   34589: 1995-03-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34590: 
                   34591:        * parse.lex:
                   34592:        prototype now uses __P()
                   34593:        [68ecdcab4c70]
                   34594: 
                   34595:        * parse.lex:
                   34596:        make fill() non-ansi
                   34597:        [d6509972260b]
                   34598: 
                   34599:        * parse.c:
                   34600:        made -v (validate) work
                   34601:        [13c9d520638c]
                   34602: 
                   34603:        * logging.c:
                   34604:        now gives host
                   34605:        [f04859cdba5a]
                   34606: 
                   34607:        * find_path.c:
                   34608:        don't check for execute/statable if fq or relative path given
                   34609:        [4bbe851f3973]
                   34610: 
                   34611:        * parse.c:
                   34612:        added a cast
                   34613:        [345c308f72f3]
                   34614: 
                   34615:        * visudo.c:
                   34616:        now include ctype.h for islower and tolower macros
                   34617:        [582c0aa332d5]
                   34618: 
                   34619:        * goodpath.c:
                   34620:        moved _S_IFMT & _S_ISREG to compat.h
                   34621:        [828e4ca4e7b4]
                   34622: 
                   34623:        * sudo.c:
                   34624:        moved a set of parens
                   34625:        [5783474ecf37]
                   34626: 
                   34627:        * strdup.c:
                   34628:        now include compat.h
                   34629:        [75e2036b94af]
                   34630: 
                   34631:        * emul/search.h:
                   34632:        void * -> VOID *
                   34633:        [cedcfaf04161]
                   34634: 
                   34635:        * parse.yacc:
                   34636:        now cast malloc & realloc return vals added search for HAVE_LSEARCH
                   34637:        now use strcmp if no strcasecmp available
                   34638:        [d6a42bc3d4ae]
                   34639: 
                   34640:        * lsearch.c:
                   34641:        void * -> VOID *
                   34642:        [886adc44f607]
                   34643: 
                   34644:        * config.h.in:
                   34645:        removed HAVE_FLEX added VOID added HAVE_DIRENT_H, HAVE_SYS_NDIR_H,
                   34646:        HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
                   34647:        [3b50d7fb4349]
                   34648: 
                   34649:        * compat.h:
                   34650:        added _S_IFMT, _S_IFREG, and S_ISREG
                   34651:        [73d506c7d53c]
                   34652: 
                   34653:        * aclocal.m4:
                   34654:        took out SUDO_PROG_INSTALL 1.x to 2.x changes added echo and results
                   34655:        to most SUDO_* macros
                   34656:        [8442155f5936]
                   34657: 
                   34658:        * Makefile.in:
                   34659:        no more -I.
                   34660:        [63462f195bd4]
                   34661: 
                   34662:        * configure.in:
                   34663:        various 1.x ro 2.x autoconf changes now check for strcasecmp now use
                   34664:        AC_INSTALL_PROG instead of custom one added check for fully woorking
                   34665:        void implementation
                   34666:        [5ac6b6e6230f]
                   34667: 
                   34668:        * Makefile.in:
                   34669:        added lsearch & search.h visudo links into $(LIBOBJS)
                   34670:        [bc119cda4598]
                   34671: 
                   34672:        * aclocal.m4:
                   34673:        partial 1.x to 2.x changes added SUDO_FULL_VOID
                   34674:        [1194d01fa5c5]
                   34675: 
                   34676:        * visudo.c:
                   34677:        whatnow_help was prototyped to be static be was not declared as
                   34678:        such
                   34679:        [0f85489dd426]
                   34680: 
                   34681:        * configure.in:
                   34682:        autoconf 2.x changes took out HAVE_FLEX (no longer used) added check
                   34683:        for dirent/dir/ndir.h
                   34684:        [7408f3854948]
                   34685: 
                   34686:        * parse.c:
                   34687:        now use groovy gnu autoconf macro AC_HEADER_DIRENT
                   34688:        [e465db9f5dfa]
                   34689: 
                   34690:        * getcwd.c, getwd.c:
                   34691:        MAXPATHLEN -> MAXPATHLEN+1
                   34692:        [714d87424e21]
                   34693: 
                   34694:        * emul/search.h, lsearch.c:
                   34695:        Initial revision
                   34696:        [55d79482c535]
                   34697: 
                   34698: 1995-03-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34699: 
                   34700:        * parse.yacc:
                   34701:        eliminated bison warnings
                   34702:        [61ca0a96da22]
                   34703: 
                   34704:        * parse.lex:
                   34705:        added missing case
                   34706:        [6be0f849747c]
                   34707: 
                   34708:        * visudo.c:
                   34709:        now iincludes signal.h
                   34710:        [221e0fcc144f]
                   34711: 
                   34712:        * parse.yacc:
                   34713:        only clear data structures on a parse error
                   34714:        [7b1c0f1a4527]
                   34715: 
                   34716:        * visudo.c:
                   34717:        whatnow() now gives help on invalid input
                   34718:        [e5a4cd88c587]
                   34719: 
                   34720:        * visudo.c:
                   34721:        added a whatnow() function (sort of like mh)
                   34722:        [932d9b145f1c]
                   34723: 
                   34724:        * parse.yacc:
                   34725:        kill_aliases -> reset_aliases yywrap() now cleans up by calling
                   34726:        reset_aliases() and clearing top took reset stuff out of yyerror()
                   34727:        since it doesn't beling there (and doesn't work anyway). errorlineno
                   34728:        is now initially set to -1 so we can set it to the first error that
                   34729:        occurrs (it was getting set to the last)
                   34730:        [2f71f95a974c]
                   34731: 
                   34732:        * parse.lex:
                   34733:        added a void cast
                   34734:        [18ae6042dce4]
                   34735: 
                   34736:        * visudo.c:
                   34737:        rewrote from scratch based on 4.3BSD vipw.c
                   34738:        [2f6814f18576]
                   34739: 
                   34740: 1995-03-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34741: 
                   34742:        * sudo.c, sudo.h:
                   34743:        removed ocmnd
                   34744:        [a31735f41ad4]
                   34745: 
                   34746:        * sudo.h:
                   34747:        no more sudo_realpath() and find_path() changed params
                   34748:        [8e85c3b39159]
                   34749: 
                   34750:        * sudo.c:
                   34751:        find_path() changed since no more realpath()
                   34752:        [b25366c7f2ee]
                   34753: 
                   34754:        * parse.yacc:
                   34755:        on error, errorlineno is set to the line where the error occurred
                   34756:        added kill_aliases() to free the aliases struct now clean up in
                   34757:        yyerror() so we can reparse cleanly
                   34758:        [2342f578c27a]
                   34759: 
                   34760:        * options.h, parse.c:
                   34761:        no more USE_REALPATH
                   34762:        [cfc59babeaff]
                   34763: 
                   34764:        * logging.c:
                   34765:        changed to use new find_path()
                   34766:        [91c7a38e7751]
                   34767: 
                   34768:        * find_path.c:
                   34769:        removed all the realpath() stuff
                   34770:        [cc21a43a8562]
                   34771: 
                   34772:        * Makefile.in:
                   34773:        sudo_realpath.c -> sudo_goodpath.c
                   34774:        [03a9b1ddec2f]
                   34775: 
                   34776:        * visudo.c:
                   34777:        now works correctly with utk parser
                   34778:        [08aa554a0ce8]
                   34779: 
                   34780:        * goodpath.c:
                   34781:        Initial revision
                   34782:        [1ea607e1ffb2]
                   34783: 
                   34784:        * sudo_realpath.c:
                   34785:        eliminated a compiler warning
                   34786:        [198bcccc55b6]
                   34787: 
                   34788:        * sudo.c:
                   34789:        elinated compiler warning
                   34790:        [e2384f9a878b]
                   34791: 
                   34792:        * sudo_realpath.c:
                   34793:        added sudo_goodpath()
                   34794:        [43878c4cc540]
                   34795: 
                   34796:        * sudo.h:
                   34797:        added prototype for sudo_goodpath
                   34798:        [23e8627a2265]
                   34799: 
                   34800:        * parse.c:
                   34801:        added support for /sys/dir.h
                   34802:        [eca897087741]
                   34803: 
                   34804:        * options.h:
                   34805:        USE_REALPATH turned off
                   34806:        [620ac8b63d85]
                   34807: 
                   34808:        * find_path.c:
                   34809:        added calls to sudo_goodpath()
                   34810:        [ad170904fbcd]
                   34811: 
                   34812:        * configure.in:
                   34813:        added check for dirent.h
                   34814:        [7964a8c26855]
                   34815: 
                   34816:        * config.h.in:
                   34817:        added HAVE_DIRENT_H
                   34818:        [1f785fec7e19]
                   34819: 
                   34820:        * configure.in:
                   34821:        added in linux shadow pass stuff 
                   34822:        [e585a5785f50]
                   34823: 
                   34824: 1995-03-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34825: 
                   34826:        * visudo.c:
                   34827:        added back host, user, cmnd, parse_error
                   34828:        [0ec19f3d64f4]
                   34829: 
                   34830:        * visudo.c:
                   34831:        added in utk changes plus some minor cosmetic changes
                   34832:        [c5c1921c8a58]
                   34833: 
                   34834:        * sudo.c, sudo_realpath.c:
                   34835:        added void casts for printf's
                   34836:        [9c6ff11c0082]
                   34837: 
                   34838:        * options.h:
                   34839:        added a define of USE_REALPATH
                   34840:        [db3711c9efc5]
                   34841: 
                   34842:        * configure.in:
                   34843:        there is no more visudoers/Makefile
                   34844:        [36e1bc1f78d0]
                   34845: 
                   34846:        * Makefile.in:
                   34847:        added in utk changes (visudo is now built from the toplevel)
                   34848:        [76203d4b345d]
                   34849: 
                   34850:        * find_path.c:
                   34851:        added (void) casts to printf's
                   34852:        [dd5cb1e060ac]
                   34853: 
                   34854:        * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c:
                   34855:        merged in utk changes
                   34856:        [35563307fd8e]
                   34857: 
                   34858: 1995-03-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34859: 
                   34860:        * find_path.c:
                   34861:        now check to see that what we are trying to run is a file (or a link
                   34862:        to a file, we do a stat(2) so there is no diff)
                   34863:        [05889c4bcace]
                   34864: 
                   34865: 1995-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34866: 
                   34867:        * CHANGES:
                   34868:        updated
                   34869:        [3e8047bb26fb]
                   34870: 
                   34871:        * Makefile.in:
                   34872:        aclocal.m4 -> acsite.m4 make realclean updated for new autoconf 
                   34873:        [0bdbaa7c4c7d]
                   34874: 
                   34875:        * sudo.man:
                   34876:        added myself as maintainer
                   34877:        [77a9d75aab84]
                   34878: 
                   34879: 1995-02-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34880: 
                   34881:        * sudo.c:
                   34882:        changed setegid -> setgid
                   34883:        [7f4788d73b6f]
                   34884: 
                   34885: 1995-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34886: 
                   34887:        * configure.in:
                   34888:        fixed the test for irix 5.x to skip bad libs
                   34889:        [bfef896de013]
                   34890: 
                   34891:        * aclocal.m4:
                   34892:        now initialize OS and OSREV
                   34893:        [cc302756e440]
                   34894: 
                   34895: 1995-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34896: 
                   34897:        * configure.in:
                   34898:        irix5 changes
                   34899:        [ac985b23f5f2]
                   34900: 
                   34901:        * configure.in:
                   34902:        AC_WITH -> AC_ARG_WITH changes other misc changes for autoconf 2.1
                   34903:        compatibility
                   34904:        [0cf8c92a06d7]
                   34905: 
                   34906: 1995-01-19  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34907: 
                   34908:        * visudo.c:
                   34909:        use YY_NEW_FILE, not yyrestart since OSF flex doesn't do the righ
                   34910:        thing wrt yyrestart (grrrr)
                   34911:        [18e8eabfbb82]
                   34912: 
                   34913: 1995-01-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34914: 
                   34915:        * Makefile.in:
                   34916:        added visudoers/compat.h to DISTFILES
                   34917:        [db23b574b034]
                   34918: 
                   34919:        * configure.in:
                   34920:        fixed an echo
                   34921:        [7cbc0462b89d]
                   34922: 
                   34923:        * sudo.c:
                   34924:        added ocmnd declaration adjusted for find_path()'s new parameters
                   34925:        [d929cd156474]
                   34926: 
                   34927:        * sudo.h:
                   34928:        added ocmnd extern adjusted find_path() prototype
                   34929:        [e0004daf5d3c]
                   34930: 
                   34931:        * parse.c:
                   34932:        cmndcmp() now takes 3 arguments and checks against the qualified as
                   34933:        well as the unqualified pathname. more code that should use
                   34934:        cmndcmp() but did not, now does
                   34935:        [6f70a8c17bee]
                   34936: 
                   34937:        * options.h:
                   34938:        added to a comment
                   34939:        [7a78680426b2]
                   34940: 
                   34941:        * logging.c:
                   34942:        changed to use new find_path() parameter passing
                   34943:        [840981d30db4]
                   34944: 
                   34945:        * find_path.c:
                   34946:        find_path() now takes 2 copyout parameters (one for the qualified
                   34947:        pathname and one for the unqualified pathname). The third parameter
                   34948:        may be NULL.
                   34949:        [851503b005e9]
                   34950: 
                   34951:        * configure.in:
                   34952:        no longer munge pathnames.h
                   34953:        [427d8796c5a9]
                   34954: 
                   34955:        * pathnames.h.in:
                   34956:        changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h)
                   34957:        as a result, pathnames.h does not need to be run through configure
                   34958:        and the user can override the configured values easily.
                   34959:        [2e378f2ebe88]
                   34960: 
                   34961:        * config.h.in:
                   34962:        added _SUDO_PATH_* entries
                   34963:        [0857de7cebab]
                   34964: 
                   34965:        * aclocal.m4:
                   34966:        _PATH* -> _SUDO_PATH_*
                   34967:        [7601193f56cc]
                   34968: 
                   34969:        * Makefile.in:
                   34970:        updated DISTFILES and HDRS .o's now depend on config.h
                   34971:        [39d8601965cf]
                   34972: 
                   34973: 1995-01-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   34974: 
                   34975:        * compat.h:
                   34976:        removed extraneous #endif
                   34977:        [27d4c5f2ce7e]
                   34978: 
                   34979:        * aclocal.m4:
                   34980:        added SUDO_PROG_MV
                   34981:        [76dda3bdd816]
                   34982: 
                   34983:        * configure.in:
                   34984:        added SUDO_PROG_MV added riscos and isc os types took out
                   34985:        -DSHORT_MESSAGE from --with-csops since it is now the default
                   34986:        [68c206ad976e]
                   34987: 
                   34988:        * sudo.c:
                   34989:        move the include of id.h to compat.h now includes options.h
                   34990:        [45a1eaafb3a8]
                   34991: 
                   34992:        * sudo.h:
                   34993:        moved compatibility #defines to compat.h
                   34994:        [0eee27057698]
                   34995: 
                   34996:        * pathnames.h.in:
                   34997:        added _PATH_MV
                   34998:        [e830797ab320]
                   34999: 
                   35000:        * config.h.in:
                   35001:        move __P to compat.h
                   35002:        [188e12e0ba93]
                   35003: 
                   35004:        * getcwd.c, getwd.c, putenv.c:
                   35005:        now includes compat.h
                   35006:        [c72cb6d73981]
                   35007: 
                   35008:        * compat.h:
                   35009:        Initial revision
                   35010:        [d4d2f359ae03]
                   35011: 
                   35012: 1995-01-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35013: 
                   35014:        * sudo.h:
                   35015:        pull user-configurable stuff out and put in options.h
                   35016:        [ef929467b070]
                   35017: 
                   35018: 1995-01-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35019: 
                   35020:        * parse.lex, parse.yacc, visudo.c:
                   35021:        now includes options.h
                   35022:        [e36d7c82add1]
                   35023: 
                   35024:        * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
                   35025:        sudo_setenv.c:
                   35026:        now includes options.h
                   35027:        [f186ba03de07]
                   35028: 
                   35029:        * Makefile.in:
                   35030:        added visudoers/options.h
                   35031:        [e5350c476494]
                   35032: 
                   35033:        * OPTIONS, options.h:
                   35034:        Initial revision
                   35035:        [9b6b5001e318]
                   35036: 
                   35037:        * Makefile.in:
                   35038:        added OPTIONS and options.h
                   35039:        [25448341e16a]
                   35040: 
                   35041:        * logging.c:
                   35042:        changed #ifdef's to use LOGGING and SLOG_SYSLOG/SLOG_FILE
                   35043:        [5dd6385dd1d3]
                   35044: 
                   35045:        * check.c, sudo.h:
                   35046:        changed PASSWORD_TIMEOUT to minutes
                   35047:        [0ec6aab98738]
                   35048: 
                   35049: 1994-12-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35050: 
                   35051:        * visudo.c:
                   35052:        now only do Editor +line_num if line_num != 0
                   35053:        [b69f04b5e3c7]
                   35054: 
                   35055: 1994-12-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35056: 
                   35057:        * visudo.c:
                   35058:        now use mv if rename(2) fails
                   35059:        [83210dca1bab]
                   35060: 
                   35061:        * BUGS:
                   35062:        added a visudo bug
                   35063:        [d61a806f9aa7]
                   35064: 
                   35065:        * check.c:
                   35066:        expanded comment
                   35067:        [641f2cba94cb]
                   35068: 
                   35069: 1994-11-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35070: 
                   35071:        * check.c:
                   35072:        fixed user_is_exempt to return 0 if EXEMPTGROUP is not set
                   35073:        [7a11135039a8]
                   35074: 
                   35075: 1994-11-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35076: 
                   35077:        * sudo.c:
                   35078:        added mips & isc support
                   35079:        [e258dc053119]
                   35080: 
                   35081:        * parse.c:
                   35082:        added support for non-root owned sudoers file
                   35083:        [fea07e65a0fc]
                   35084: 
                   35085:        * check.c:
                   35086:        added exempt group support
                   35087:        [928fb4bd9ad5]
                   35088: 
                   35089:        * sudo.h:
                   35090:        added set_perms() support added SUDOERS_OWNER so can have non-root
                   35091:        own sudoers file added exempt group support added isc support
                   35092:        [61c578d31fc1]
                   35093: 
                   35094:        * visudo.c:
                   35095:        now copy sudoers to temp file via read/write (not stdio) now chown
                   35096:        new sudoers file to SUDOERS_OWNER
                   35097:        [a5176c59df70]
                   35098: 
                   35099: 1994-11-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35100: 
                   35101:        * configure.in:
                   35102:        added skey support
                   35103:        [35a8d2fabdb7]
                   35104: 
                   35105:        * sudo_realpath.c:
                   35106:        be_* -> setperms()
                   35107:        [a1631d686e1c]
                   35108: 
                   35109:        * sudo.h:
                   35110:        fixed typo added set_perms support added skey support added
                   35111:        seteuid()/setegid() emulation for AIX
                   35112:        [c0c8d6771406]
                   35113: 
                   35114:        * sudo.c:
                   35115:        be_* -> setperms() now check to make sure sudoers file is owned by
                   35116:        root nread/write by only root
                   35117:        [13ab1e261f1a]
                   35118: 
                   35119:        * logging.c, parse.c:
                   35120:        be_* -> setperms()
                   35121:        [21499d845c8f]
                   35122: 
                   35123:        * check.c:
                   35124:        be_* -> set_perms() added skey support
                   35125:        [df51b56871c1]
                   35126: 
                   35127: 1994-11-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35128: 
                   35129:        * Makefile.in:
                   35130:        ++version
                   35131:        [3c1abbe4e43c]
                   35132: 
                   35133:        * version.h:
                   35134:        ++
                   35135:        [1d2f9b540a95]
                   35136: 
                   35137: 1994-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35138: 
                   35139:        * sudo.c:
                   35140:        now sets IFS
                   35141:        [eabbb41b9f08]
                   35142: 
                   35143:        * insults.h:
                   35144:        fixed typo
                   35145:        [c7997f19216e]
                   35146: 
                   35147: 1994-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35148: 
                   35149:        * config.h.in:
                   35150:        added HAVE_SKEY
                   35151:        [da948ec4186b]
                   35152: 
                   35153: 1994-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35154: 
                   35155:        * CHANGES:
                   35156:        updated
                   35157:        [f4b55ab007ea]
                   35158: 
                   35159:        * Makefile.in:
                   35160:        ++version
                   35161:        [0489068b8c95]
                   35162: 
                   35163:        * version.h:
                   35164:        ++
                   35165:        [d189faedf423]
                   35166: 
                   35167:        * sudo.c:
                   35168:        now bail if ARgv[1] > MAXPATHLEN
                   35169:        [0cea8ecc9dc2]
                   35170: 
                   35171:        * configure.in:
                   35172:        added function check for tcgetattr(3)
                   35173:        [e03289b22c2f]
                   35174: 
                   35175:        * config.h.in:
                   35176:        only define HAVE_TERMIOS_H if you have tcgetattr(3)
                   35177:        [757eab83d1a2]
                   35178: 
                   35179:        * config.h.in:
                   35180:        added check for tcgetattr
                   35181:        [c5ae92715930]
                   35182: 
                   35183: 1994-09-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35184: 
                   35185:        * CHANGES:
                   35186:        updated
                   35187:        [cbc419883108]
                   35188: 
                   35189: 1994-09-22  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35190: 
                   35191:        * parse.lex:
                   35192:        now only include unistd.h for linux
                   35193:        [e9adeab95ef0]
                   35194: 
                   35195: 1994-09-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35196: 
                   35197:        * Makefile.in:
                   35198:        added visudo.8 generation
                   35199:        [d6a3f0f887f8]
                   35200: 
                   35201:        * configure.in:
                   35202:        added -Wl,-bI:./aixcrypt.exp to aix flags
                   35203:        [72594a21edcf]
                   35204: 
                   35205: 1994-09-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35206: 
                   35207:        * BUGS:
                   35208:        added one
                   35209:        [9993a349e096]
                   35210: 
                   35211:        * CHANGES:
                   35212:        updated
                   35213:        [297b31ec4cdd]
                   35214: 
                   35215:        * README:
                   35216:        added mailing list info
                   35217:        [10372f94a2b2]
                   35218: 
                   35219:        * parse.yacc:
                   35220:        now use sudolineno instead of yylineno fixed bison warnings
                   35221:        [25a83e62057b]
                   35222: 
                   35223:        * configure.in:
                   35224:        now use -no_library_replacement for osf don't make a static binary
                   35225:        for hpux >= 9.0
                   35226:        [1fa7b892f1a3]
                   35227: 
                   35228:        * tgetpass.c:
                   35229:        added string.h/strings.h inclusion
                   35230:        [71faa98fc0a1]
                   35231: 
                   35232:        * config.h.in:
                   35233:        added ssize_t def
                   35234:        [406284bd1ac0]
                   35235: 
                   35236:        * parse.lex:
                   35237:        added inclusion of string.h/strings.h
                   35238:        [6985b1df5d09]
                   35239: 
                   35240:        * aclocal.m4:
                   35241:        fixed uname | sed (needed to quote the '[')
                   35242:        [4cd2d3415c1a]
                   35243: 
                   35244:        * parse.lex:
                   35245:        replaced yylineno with sudolineno fixed bison syntax errors
                   35246:        [0bd31a5fab26]
                   35247: 
                   35248:        * visudo.c:
                   35249:        changed yylineno to sudolineno since yylineno cannot be counted
                   35250:        upon.
                   35251:        [38c30104d0ae]
                   35252: 
                   35253:        * TODO:
                   35254:        updated
                   35255:        [5d4746f1a752]
                   35256: 
                   35257:        * parse.c:
                   35258:        added code to support command listings
                   35259:        [030172e133fd]
                   35260: 
                   35261:        * sudo.c:
                   35262:        added code for -l flag
                   35263:        [801dbbc82778]
                   35264: 
                   35265:        * sudo.man:
                   35266:        fixed typo added info for -l flag
                   35267:        [8916ca945d65]
                   35268: 
                   35269:        * configure.in:
                   35270:        AC_SSIZE_T -> SUDO_SSIZE_T
                   35271:        [c61f7f47013f]
                   35272: 
                   35273:        * aclocal.m4:
                   35274:        added SUDO_SSIZE_T
                   35275:        [0ccdb77be84d]
                   35276: 
                   35277:        * sudo.h:
                   35278:        added MODE_LIST
                   35279:        [9b2bd844c76c]
                   35280: 
                   35281:        * configure.in:
                   35282:        added AC_SSIZE_T
                   35283:        [35cca208f9b5]
                   35284: 
                   35285:        * find_path.c, sudo_realpath.c:
                   35286:        readlink() is now declared as returning ssize~_t
                   35287:        [0640a08d1407]
                   35288: 
                   35289:        * configure.in:
                   35290:        added -laud for OSF c2
                   35291:        [b7539c905efc]
                   35292: 
                   35293: 1994-09-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35294: 
                   35295:        * Makefile.in, visudo.c:
                   35296:        changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu
                   35297:        [067fd9bcb5e1]
                   35298: 
                   35299:        * config.h.in, parse.lex, parse.yacc, pathnames.h.in:
                   35300:        changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu
                   35301:        [fc46e7c7110a]
                   35302: 
                   35303:        * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
                   35304:        parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
                   35305:        sudo_setenv.c, tgetpass.c, version.h:
                   35306:        changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
                   35307:        [d1d4fbc53a98]
                   35308: 
                   35309: 1994-09-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35310: 
                   35311:        * Makefile.in:
                   35312:        ++version
                   35313:        [b7066d97633f]
                   35314: 
                   35315:        * version.h:
                   35316:        ++
                   35317:        [65ec69d88110]
                   35318: 
                   35319:        * logging.c:
                   35320:        added host to alertmail messages
                   35321:        [d973c19ce777]
                   35322: 
                   35323:        * CHANGES, TODO:
                   35324:        udpated
                   35325:        [5a65eb16faeb]
                   35326: 
                   35327:        * logging.c:
                   35328:        fixed logging problem where mail would not say which user it was
                   35329:        [35723edcc5d2]
                   35330: 
                   35331:        * configure.in:
                   35332:        added -laud for gcc if osf & c2
                   35333:        [18f1e0ae5548]
                   35334: 
                   35335:        * check.c:
                   35336:        moved set_auth_parameters to sudo.c
                   35337:        [d23112fe01db]
                   35338: 
                   35339:        * sudo.c:
                   35340:        added set_auth_parameters for osf
                   35341:        [eb70f65214ac]
                   35342: 
                   35343:        * configure.in:
                   35344:        cleaned up -static stuff
                   35345:        [01e9575f0422]
                   35346: 
                   35347:        * Makefile.in:
                   35348:        ++version
                   35349:        [7ac3bff5c770]
                   35350: 
                   35351:        * version.h:
                   35352:        ++
                   35353:        [10a4ff478469]
                   35354: 
                   35355:        * sudo.c:
                   35356:        changed setenv() to sudo_setenv()
                   35357:        [40a78abb9946]
                   35358: 
                   35359:        * check.c:
                   35360:        fixed osf problem
                   35361:        [3d69b118efb8]
                   35362: 
                   35363:        * configure.in:
                   35364:        added OSF C2 stuff
                   35365:        [38cff3ad4093]
                   35366: 
                   35367:        * CHANGES:
                   35368:        updated
                   35369:        [cd341dd0581a]
                   35370: 
                   35371:        * check.c:
                   35372:        added osf auth support & removed some extra spaces
                   35373:        [a448cdd81514]
                   35374: 
                   35375:        * INSTALL, SUPPORTED:
                   35376:        added osf C2 stuff
                   35377:        [f70484796146]
                   35378: 
                   35379: 1994-08-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35380: 
                   35381:        * TODO:
                   35382:        added 2 suggestions
                   35383:        [695fbdbd86e6]
                   35384: 
                   35385:        * Makefile.in:
                   35386:        removed README.v1.3.1 and added VERSION stuff
                   35387:        [f69403eb04c6]
                   35388: 
                   35389:        * version.h:
                   35390:        pl1
                   35391:        [21580c0f8cb1]
                   35392: 
                   35393: 1994-08-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35394: 
                   35395:        * version.h:
                   35396:        1.3.1final
                   35397:        [630114970298]
                   35398: 
                   35399:        * Makefile.in:
                   35400:        added HISTORY
                   35401:        [901bff251614]
                   35402: 
                   35403:        * sudo.man:
                   35404:        mention HISTPRY file
                   35405:        [86dbcfd4326e]
                   35406: 
                   35407:        * sudo.c:
                   35408:        use sizeof instead of a constant in 1 place
                   35409:        [d819604c68ca]
                   35410: 
                   35411:        * parse.yacc:
                   35412:        added unistd.h
                   35413:        [6f9500f9fe7e]
                   35414: 
                   35415:        * parse.lex:
                   35416:        added unistd.h
                   35417:        [468b81a276eb]
                   35418: 
                   35419:        * README:
                   35420:        udpated
                   35421:        [7e275618923a]
                   35422: 
                   35423:        * HISTORY:
                   35424:        Initial revision
                   35425:        [5db1b0a3939b]
                   35426: 
                   35427: 1994-08-17  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35428: 
                   35429:        * version.h:
                   35430:        ++
                   35431:        [7dfbb4a810bb] [SUDO_1_3_1]
                   35432: 
                   35433:        * CHANGES:
                   35434:        updated
                   35435:        [7820ee610bf8]
                   35436: 
                   35437:        * sudo_setenv.c:
                   35438:        added unistd.h include
                   35439:        [30cf2b654525]
                   35440: 
                   35441: 1994-08-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35442: 
                   35443:        * sudo.c:
                   35444:        added sys/time.h for AIX
                   35445:        [199fc8caf3a3]
                   35446: 
                   35447: 1994-08-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35448: 
                   35449:        * configure.in:
                   35450:        added check for -lsocket and sys/sockio.h
                   35451:        [f9abfbb31031]
                   35452: 
                   35453:        * config.h.in:
                   35454:        took out libshadow check and added in sys/sockio.h check
                   35455:        [0c4b0393ac80]
                   35456: 
                   35457:        * sudo.c:
                   35458:        now include sockio.h instead of ioctl.h if it exists "sudo -" now
                   35459:        gets a better error message
                   35460:        [53041bea5483]
                   35461: 
                   35462:        * sample.sudoers:
                   35463:        now has a dir and subnet entry
                   35464:        [56b820f65438]
                   35465: 
                   35466: 1994-08-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35467: 
                   35468:        * sudo.c:
                   35469:        removed if_ether.h
                   35470:        [b4f64507493e]
                   35471: 
                   35472:        * TODO:
                   35473:        added an item
                   35474:        [ea2a1bb6922a]
                   35475: 
                   35476:        * sudo.man:
                   35477:        added network and ip addresses to man page
                   35478:        [01c85016511f]
                   35479: 
                   35480:        * sudo.c:
                   35481:        no error if can't get interfaces or netmask since networking may not
                   35482:        be in the kernel.
                   35483:        [50b8890e2134]
                   35484: 
                   35485:        * parse.c:
                   35486:        nwo check for interfaces == NULL
                   35487:        [dc1b3eef0db2]
                   35488: 
                   35489:        * parse.c:
                   35490:        fixed a bug that caused directory specs in a Cmnd_Alias to fail if
                   35491:        the last entry in the spec failed (ie: it was only looking at the
                   35492:        last entry). CLeaned things up by adding the cmndcmp() function--all
                   35493:        neat & tidy
                   35494:        [007e93578e5e]
                   35495: 
                   35496:        * CHANGES:
                   35497:        added one
                   35498:        [40e8a2cef497]
                   35499: 
                   35500: 1994-08-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35501: 
                   35502:        * sudo.c:
                   35503:        now do two passes to skip bogus interfaces (lo0, etc)
                   35504:        [465e30aecaf7]
                   35505: 
                   35506:        * parse.lex, parse.yacc, visudo.c:
                   35507:        added include of netinet/in.h
                   35508:        [11e3816ed362]
                   35509: 
                   35510:        * logging.c, sudo_realpath.c, sudo_setenv.c:
                   35511:        added ninclude of netinet/in.h
                   35512:        [daccfa40fe1e]
                   35513: 
                   35514:        * check.c, find_path.c, getcwd.c, getwd.c:
                   35515:        added include of netinet/in.h
                   35516:        [0222f95e06ad]
                   35517: 
                   35518:        * version.h:
                   35519:        ++
                   35520:        [d6b0cfa35a38]
                   35521: 
                   35522:        * sudo.h:
                   35523:        added interfaces global
                   35524:        [ba52fa8ad75e]
                   35525: 
                   35526:        * parse.c:
                   35527:        now uses new interfaces global
                   35528:        [17473ad5ecba]
                   35529: 
                   35530:        * sudo.c:
                   35531:        now ip addresses are gleaned fw/o dns
                   35532:        [8828bb2007e0]
                   35533: 
                   35534: 1994-08-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35535: 
                   35536:        * sudo.c:
                   35537:        added load_ip_addrs() to load the ip_addrs global var
                   35538:        [60c825f04238]
                   35539: 
                   35540:        * parse.c:
                   35541:        added hostcmp() to compare hostnames, ip addrs, and network addrs
                   35542:        [ab0e40e37537]
                   35543: 
                   35544:        * sudo.h:
                   35545:        added ip_addrs def added load_ip_addrs prototype
                   35546:        [c41c565d0777]
                   35547: 
                   35548: 1994-08-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35549: 
                   35550:        * CHANGES:
                   35551:        updated
                   35552:        [2a128dbe9bcb]
                   35553: 
                   35554:        * Makefile.in:
                   35555:        removed multiple entries in DISTFILES
                   35556:        [2490f4f371e6]
                   35557: 
                   35558:        * visudo.c:
                   35559:        ansified the !STDC_HEADERS decls
                   35560:        [646ba06d17ae]
                   35561: 
                   35562:        * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c:
                   35563:        don't do malloc decl if gnuc
                   35564:        [f1bad1925f98]
                   35565: 
                   35566:        * sudo.c:
                   35567:        can't use getopt(3) since it munges args to the command to be run as
                   35568:        root don't do malloc decl if gnuc
                   35569:        [38e78f6da14e]
                   35570: 
                   35571:        * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
                   35572:        sudo_realpath.c, sudo_setenv.c:
                   35573:        ansi-fied !STDC_HEADER function prottypes
                   35574:        [51d8cad89976]
                   35575: 
                   35576:        * getcwd.c, getwd.c:
                   35577:        added missing paren
                   35578:        [6a1fae70e27e]
                   35579: 
                   35580:        * Makefile.in:
                   35581:        added putenv.c to DISTFILES
                   35582:        [a5e4523eabbb]
                   35583: 
                   35584:        * sudo_setenv.c:
                   35585:        added params to func decls when STDC_HEADERS is not defined now can
                   35586:        count on putenv() being there
                   35587:        [fd587796189b]
                   35588: 
                   35589:        * sudo_realpath.c:
                   35590:        took out errno decl since sudo.h does it for us fixed up a next cc
                   35591:        warning added params to func decls when STDC_HEADERS is not defined
                   35592:        [70fa5152ace6]
                   35593: 
                   35594:        * sudo.h:
                   35595:        took out environ extern added local declaratio of putenv() if local
                   35596:        version is needed
                   35597:        [a84bae6c020d]
                   35598: 
                   35599:        * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c:
                   35600:        added params to func decls when STDC_HEADERS is not defined
                   35601:        [f406f0e47ac0]
                   35602: 
                   35603:        * config.h.in:
                   35604:        added memcpy check check to see that ansi vs bsd macros are ntot
                   35605:        already defiend before defining (ie: avoid redefinition)
                   35606:        [879ae026e19f]
                   35607: 
                   35608:        * configure.in:
                   35609:        removed fluff setenv check plus check w/ replace for putenv if also
                   35610:        no setenv
                   35611:        [e3c03814ad4b]
                   35612: 
                   35613:        * putenv.c:
                   35614:        Initial revision
                   35615:        [3cff63e2dc1b]
                   35616: 
                   35617: 1994-08-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35618: 
                   35619:        * sudo_setenv.c:
                   35620:        Initial revision
                   35621:        [4d637631fa6b]
                   35622: 
                   35623:        * sudo.h:
                   35624:        rm'd s realp[ath added sudo_realpath and sudo_setenv
                   35625:        [07ba001ff57e]
                   35626: 
                   35627:        * sudo.c:
                   35628:        now use sudo_setenvc
                   35629:        [fd81e04d5ef0]
                   35630: 
                   35631:        * configure.in:
                   35632:        added puteenv and setenv, removed realpath
                   35633:        [27bfacfb513b]
                   35634: 
                   35635:        * config.h.in:
                   35636:        added putenv & setenv
                   35637:        [515f14eaf6e4]
                   35638: 
                   35639:        * Makefile.in:
                   35640:        added sudo_setenv
                   35641:        [217731a717c5]
                   35642: 
                   35643:        * version.h:
                   35644:        ++
                   35645:        [eadb346d7129]
                   35646: 
                   35647: 1994-08-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35648: 
                   35649:        * configure.in:
                   35650:        added MAN_POSTINSTALL and /usr/share/catman for irix
                   35651:        [2a9496c1bdba]
                   35652: 
                   35653:        * Makefile.in:
                   35654:        added MAN_POSTINSTALL
                   35655:        [89b0d4695529]
                   35656: 
                   35657:        * CHANGES:
                   35658:        added
                   35659:        [48c021ba8a70]
                   35660: 
                   35661:        * sudo.man:
                   35662:        added SUDO_* plus new options
                   35663:        [c0759cff5683]
                   35664: 
                   35665:        * CHANGES:
                   35666:        added one
                   35667:        [7d44a3922d56]
                   35668: 
                   35669:        * configure.in:
                   35670:        took out shadow lib
                   35671:        [07cf3de18701]
                   35672: 
                   35673:        * TODO:
                   35674:        adde done
                   35675:        [a27a578e8afe]
                   35676: 
                   35677:        * visudo.c:
                   35678:        now use yyrestart() if flex now reset yylineno to 0
                   35679:        [77d67ce0b677]
                   35680: 
                   35681:        * Makefile.in:
                   35682:        support for installing a cat page instead of a man page if no nroff
                   35683:        [44671c0fc0fa]
                   35684: 
                   35685:        * configure.in:
                   35686:        now defines HAVE_FLEX fixed up man stuff so that it looks for nroff
                   35687:        to determine whether or not to install a cat or man page
                   35688:        [0562d069c135]
                   35689: 
                   35690:        * config.h.in:
                   35691:        added HAVE_FLEX
                   35692:        [c5490bae39d3]
                   35693: 
                   35694:        * sudo.c:
                   35695:        not set ret to MODE_RUN initially
                   35696:        [88b4983c195b]
                   35697: 
                   35698:        * find_path.c:
                   35699:        made command (and therefor cmnd dynamically allocated)
                   35700:        [95b82e32b6de]
                   35701: 
                   35702:        * TODO:
                   35703:        did #8
                   35704:        [fb6f41308cdf]
                   35705: 
                   35706:        * version.h:
                   35707:        ++
                   35708:        [14112ecab5ae]
                   35709: 
                   35710:        * sudo_realpath.c:
                   35711:        changed bufs from MAXPATHLEN to MAXPATHLEN+1
                   35712:        [0ad4f34e55c0]
                   35713: 
                   35714:        * sudo.h:
                   35715:        added MODE_ removed validate_only and added remove_timestamp()
                   35716:        [dd5f99c57728]
                   35717: 
                   35718:        * sudo.c:
                   35719:        usage() now takes an int (exit value) added parse_args() to parse
                   35720:        command line arguments moved call to find_path() from load_globals
                   35721:        to new function load_cmnd() removed validate_only global -- now use
                   35722:        the concept of "modes" added -h and -k options
                   35723:        [c3887090b28a]
                   35724: 
                   35725:        * parse.c:
                   35726:        no longer use global validate_only now checks for command called
                   35727:        "validate" removed check for non-fully qualified commands since that
                   35728:        is done by find_path
                   35729:        [7d56fbd26369]
                   35730: 
                   35731:        * find_path.c:
                   35732:        changed MAXPATHLEN r to MAXPATHLEN+1
                   35733:        [a86e8664d971]
                   35734: 
                   35735:        * find_path.c:
                   35736:        fixed off by one error with MAXPATHLEN and fixed a comment
                   35737:        [58adcef8c981]
                   35738: 
                   35739:        * check.c:
                   35740:        check_timestamp no longer runs reminder(), it is implied in the
                   35741:        return val added remove_timestamp()
                   35742:        [42ab5a77066f]
                   35743: 
                   35744:        * CHANGES:
                   35745:        updated
                   35746:        [8e69b31df024]
                   35747: 
                   35748: 1994-08-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35749: 
                   35750:        * BUGS:
                   35751:        fixed on
                   35752:        [bc34f1ac4280]
                   35753: 
                   35754:        * sudo_realpath.c:
                   35755:        took out old_errno
                   35756:        [a168d00a0768]
                   35757: 
                   35758:        * CHANGES:
                   35759:        updated
                   35760:        [04ba80922df7]
                   35761: 
                   35762: 1994-08-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35763: 
                   35764:        * logging.c:
                   35765:        moved send_mail to after syslog
                   35766:        [4d4188087834]
                   35767: 
                   35768:        * sudo.c:
                   35769:        now set SUDO_ envariables
                   35770:        [e5963f1bd3bb]
                   35771: 
                   35772: 1994-08-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35773: 
                   35774:        * version.h:
                   35775:        ++
                   35776:        [2a4534845d8c]
                   35777: 
                   35778:        * sudo_realpath.c:
                   35779:        now print error if chdir fails
                   35780:        [0d75c8973d49]
                   35781: 
                   35782:        * find_path.c:
                   35783:        removed an XXX
                   35784:        [e2077bcb35aa]
                   35785: 
                   35786: 1994-07-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35787: 
                   35788:        * CHANGES:
                   35789:        updated
                   35790:        [e30a2b39b41a]
                   35791: 
                   35792:        * configure.in:
                   35793:        no more static binaries for aix
                   35794:        [77a0beb6bd80]
                   35795: 
                   35796: 1994-07-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35797: 
                   35798:        * INSTALL:
                   35799:        fixed typo
                   35800:        [ba5e0d391bc4]
                   35801: 
                   35802:        * sudo_realpath.c:
                   35803:        took out stuff not needed for sudo now does be_root/be_user itself
                   35804:        now uses cwd global
                   35805:        [4f6d4641d793]
                   35806: 
                   35807:        * version.h:
                   35808:        +=2
                   35809:        [97da927b297c]
                   35810: 
                   35811:        * logging.c, sudo.c:
                   35812:        be_root/be_user is now down in sudo_realpath()
                   35813:        [f331662fa50f]
                   35814: 
                   35815:        * logging.c, sudo.h:
                   35816:        now works with 4.2BSD syslog (blech)
                   35817:        [98e39d89dd36]
                   35818: 
                   35819:        * find_path.c:
                   35820:        now use sudo_realpath()
                   35821:        [ab436a8ebd02]
                   35822: 
                   35823:        * config.h.in:
                   35824:        took out realpth() stuff since we now use sudo_realpath()
                   35825:        [8de5ef9f6044]
                   35826: 
                   35827:        * configure.in:
                   35828:        ultrix enhanced sec
                   35829:        [815fb7fffcc0]
                   35830: 
                   35831:        * SUPPORTED:
                   35832:        added ultrix enhanced sec.
                   35833:        [6466766c8062]
                   35834: 
                   35835:        * INSTALL:
                   35836:        updated
                   35837:        [d681a634297a]
                   35838: 
                   35839:        * check.c:
                   35840:        ultrix enhanced security suport
                   35841:        [f10c8decbcc2]
                   35842: 
                   35843:        * Makefile.in:
                   35844:        added sudo_realpath.c
                   35845:        [6b9bcd3be022]
                   35846: 
                   35847:        * CHANGES:
                   35848:        updated
                   35849:        [2fa8084c1b53]
                   35850: 
                   35851:        * tgetpass.c:
                   35852:        increased passwd len to 24 for c2 security
                   35853:        [ec64838be62d]
                   35854: 
                   35855:        * BUGS:
                   35856:        updated BUGS
                   35857:        [ca00d8fec2ce]
                   35858: 
                   35859: 1994-07-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35860: 
                   35861:        * check.c:
                   35862:        now use user global var
                   35863:        [568769719013]
                   35864: 
                   35865:        * configure.in:
                   35866:        took out -ls
                   35867:        [490a44180d5f]
                   35868: 
                   35869: 1994-07-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35870: 
                   35871:        * configure.in:
                   35872:        added AFS libs
                   35873:        [4fb40c8c01ba]
                   35874: 
                   35875:        * sudo.h:
                   35876:        user is now a char * added epasswd
                   35877:        [27a919fafdfb]
                   35878: 
                   35879:        * sudo.c:
                   35880:        added tzset() to load_globals added epasswd (encrypted password)
                   35881:        global made user dynamically allocated
                   35882:        [b99ef9bdbfce]
                   35883: 
                   35884:        * configure.in:
                   35885:        added tzset test
                   35886:        [27592dd1214b]
                   35887: 
                   35888:        * config.h.in:
                   35889:        added HAVE_TZSET
                   35890:        [b13f4213f3d0]
                   35891: 
                   35892:        * check.c:
                   35893:        cleaned up encrypted passwd grab somewhat
                   35894:        [c8ba9a4db38a]
                   35895: 
                   35896:        * configure.in:
                   35897:        fixed AFS typo
                   35898:        [2bfcbce237b6]
                   35899: 
                   35900:        * INSTALL:
                   35901:        added AFS not
                   35902:        [80c67329393c]
                   35903: 
                   35904:        * CHANGES:
                   35905:        udpated
                   35906:        [2f09ecdd5d31]
                   35907: 
                   35908:        * logging.c:
                   35909:        can now log to both syslog & a file
                   35910:        [4d5c0932bc01]
                   35911: 
                   35912:        * sudo.h:
                   35913:        added BOTH_LOGS
                   35914:        [623c539be824]
                   35915: 
                   35916:        * CHANGES:
                   35917:        updated
                   35918:        [a1c7f5ef3616]
                   35919: 
                   35920:        * configure.in:
                   35921:        --with-AFS
                   35922:        [28718d8f5daf]
                   35923: 
                   35924:        * config.h.in:
                   35925:        added HAVE_AFS
                   35926:        [2e32bb4e63e4]
                   35927: 
                   35928:        * check.c:
                   35929:        added afs changes
                   35930:        [fe4d0ff320a2]
                   35931: 
                   35932:        * sudo.h:
                   35933:        removed AFS stuff :-)
                   35934:        [a40387e6fa27]
                   35935: 
                   35936:        * tgetpass.c:
                   35937:        include sys/select for AIX
                   35938:        [f32c5a8f2c84]
                   35939: 
                   35940:        * sudo.h:
                   35941:        added AFS
                   35942:        [da2ab3dd0348]
                   35943: 
                   35944:        * version.h:
                   35945:        ++
                   35946:        [452d4dfe25af]
                   35947: 
                   35948: 1994-07-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   35949: 
                   35950:        * CHANGES, SUPPORTED:
                   35951:        updated
                   35952:        [e7dfe6f23a37]
                   35953: 
                   35954:        * logging.c:
                   35955:        can now have MAILER undefined
                   35956:        [1d33b98b35e1]
                   35957: 
                   35958:        * INSTALL:
                   35959:        new sub-note about MAILER
                   35960:        [d35c636a0574]
                   35961: 
                   35962:        * sudo.man:
                   35963:        added blurb about password timeout
                   35964:        [70c2ee50de20]
                   35965: 
                   35966:        * configure.in:
                   35967:        convex c2 changes
                   35968:        [367138a6232e]
                   35969: 
                   35970:        * aclocal.m4:
                   35971:        took out duplicate define of _CONVEX_SOURCE
                   35972:        [647182138450]
                   35973: 
                   35974:        * Makefile.in:
                   35975:        added OSDEFS
                   35976:        [7fdcd50602d1]
                   35977: 
                   35978:        * config.h.in:
                   35979:        added spaces
                   35980:        [f2b8a05e48f3]
                   35981: 
                   35982:        * tgetpass.c:
                   35983:        added a goto if fgets fails
                   35984:        [68a6586d9c45]
                   35985: 
                   35986:        * sudo.h:
                   35987:        use __hpux not hpux convex c2 stuff
                   35988:        [5c377a8d5f34]
                   35989: 
                   35990:        * sudo.c:
                   35991:        use __hpux not hpux
                   35992:        [9363bc0f9f9e]
                   35993: 
                   35994:        * logging.c:
                   35995:        convex c2 stuff
                   35996:        [ea5630975ac4]
                   35997: 
                   35998:        * config.h.in:
                   35999:        define ansi-ish cpp os defines if non-ansi are defined for hpux &
                   36000:        convex
                   36001:        [664f53a5e786]
                   36002: 
                   36003:        * INSTALL:
                   36004:        updated to say we support sonvex C2
                   36005:        [5f2f8b87013e]
                   36006: 
                   36007:        * check.c:
                   36008:        added convex c2 support
                   36009:        [9a665d4918fa]
                   36010: 
                   36011: 1994-07-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36012: 
                   36013:        * tgetpass.c:
                   36014:        no more ioctl never returns NULL uses fgets() and select() to
                   36015:        timeout
                   36016:        [b333e6d63e97]
                   36017: 
                   36018: 1994-06-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36019: 
                   36020:        * configure.in:
                   36021:        things were testing -n "$GCC" instead of -z "$GCC"
                   36022:        [059a9b15ede2]
                   36023: 
                   36024:        * tgetpass.c:
                   36025:        now works + uses fgets()
                   36026:        [353d7ebcb7bb]
                   36027: 
                   36028: 1994-06-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36029: 
                   36030:        * tgetpass.c:
                   36031:        select doesn't seem to recognize a single '\n' as input waiting so
                   36032:        we can;t use it, sigh.
                   36033:        [f76e3218b835]
                   36034: 
                   36035: 1994-06-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36036: 
                   36037:        * PORTING:
                   36038:        updated tgetpass() blurb
                   36039:        [95baac736b49]
                   36040: 
                   36041:        * configure.in:
                   36042:        added --with-getpass
                   36043:        [42ac0bdf58ed]
                   36044: 
                   36045:        * Makefile.in:
                   36046:        added tgetpass stuff
                   36047:        [e2b38c635663]
                   36048: 
                   36049:        * tgetpass.c:
                   36050:        now uses stdio
                   36051:        [36af8ff66e35]
                   36052: 
                   36053:        * version.h:
                   36054:        ++
                   36055:        [4e81c9db19bd]
                   36056: 
                   36057: 1994-06-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36058: 
                   36059:        * PORTING:
                   36060:        updated ,.
                   36061:        [54f523770a05]
                   36062: 
                   36063:        * config.h.in:
                   36064:        added USE_GETPASS && HAVE_C2_SECURITY
                   36065:        [86b355cb2953]
                   36066: 
                   36067:        * configure.in:
                   36068:        fixed a test aded --with-C2 and --with-tgetpass
                   36069:        [abf6181588ef]
                   36070: 
                   36071:        * check.c:
                   36072:        added hpux C2 shit
                   36073:        [20d4177ffa88]
                   36074: 
                   36075:        * Makefile.in:
                   36076:        took out tgetpass.*
                   36077:        [cc82fd9984b4]
                   36078: 
                   36079:        * INSTALL:
                   36080:        added C2 blurb
                   36081:        [1d2bfc35e4b6]
                   36082: 
                   36083: 1994-06-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36084: 
                   36085:        * configure.in:
                   36086:        no termio(s) for ultrix since it is broken
                   36087:        [d3e82e835350]
                   36088: 
                   36089:        * check.c:
                   36090:        added a space (yeah, anal)
                   36091:        [05e4b31ca68c]
                   36092: 
                   36093:        * realpath.c, sudo_realpath.c:
                   36094:        fixed it (duh, rtfm)
                   36095:        [f13097cb8cb6]
                   36096: 
                   36097: 1994-06-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36098: 
                   36099:        * config.h.in:
                   36100:        took out bsd signal stuff for irix
                   36101:        [e179cdafc97a]
                   36102: 
                   36103:        * visudo.c:
                   36104:        comments in #endif
                   36105:        [e3a629190f5e]
                   36106: 
                   36107:        * configure.in:
                   36108:        don't define BSD signals for irix
                   36109:        [3ce57bffb7f0]
                   36110: 
                   36111:        * TODO:
                   36112:        did some...
                   36113:        [274241cd0f74]
                   36114: 
                   36115:        * CHANGES:
                   36116:        updated
                   36117:        [8f29fc755faf]
                   36118: 
                   36119:        * realpath.c, sudo_realpath.c:
                   36120:        took out unneeded code by changing where a strings was terminated
                   36121:        [b5564d62d30e]
                   36122: 
                   36123: 1994-06-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36124: 
                   36125:        * realpath.c, sudo_realpath.c:
                   36126:        fix bug where /dirname would return NULL
                   36127:        [b85f470daf26]
                   36128: 
                   36129:        * sudo.h:
                   36130:        move __P to config.h
                   36131:        [7763c0ff3f28]
                   36132: 
                   36133:        * getcwd.c, getwd.c, realpath.c, sudo_realpath.c:
                   36134:        added errno definition
                   36135:        [4cc9d2d9782a]
                   36136: 
                   36137:        * config.h.in:
                   36138:        added __P
                   36139:        [ca06f5aa58f3]
                   36140: 
                   36141:        * config.h.in:
                   36142:        added HAVE_FCHDIR
                   36143:        [206d714641e0]
                   36144: 
                   36145:        * strdup.c:
                   36146:        now include stdio
                   36147:        [0d8458da0e1d]
                   36148: 
                   36149:        * realpath.c, sudo_realpath.c:
                   36150:        now works if no fchdir
                   36151:        [e035911b6722]
                   36152: 
                   36153:        * visudo.c:
                   36154:        define SA_RESETHAND to null if not defined
                   36155:        [afec03e84342]
                   36156: 
                   36157:        * configure.in:
                   36158:        added check & replace
                   36159:        [c1a65481441c]
                   36160: 
                   36161:        * configure.in:
                   36162:        took out -static for nextstep -- it doesn't work
                   36163:        [fa1a1a611743]
                   36164: 
                   36165: 1994-06-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36166: 
                   36167:        * logging.c:
                   36168:        moved #endif to where it belongs
                   36169:        [07d3a8972097]
                   36170: 
                   36171:        * SUPPORTED:
                   36172:        correction
                   36173:        [0c1ecba3e5a3]
                   36174: 
                   36175:        * configure.in:
                   36176:        now checks for strdup realpath getcwd bzero
                   36177:        [f029a1917515]
                   36178: 
                   36179:        * config.h.in:
                   36180:        emulate bzero
                   36181:        [d792352e44a3]
                   36182: 
                   36183:        * visudo.c:
                   36184:        added posic signals
                   36185:        [2ed0005f90fc]
                   36186: 
                   36187:        * tgetpass.c:
                   36188:        bzero cast
                   36189:        [6d91b1a1526f]
                   36190: 
                   36191:        * logging.c:
                   36192:        added posix signals
                   36193:        [67ede9c22a05]
                   36194: 
                   36195:        * configure.in:
                   36196:        removed BROKEN_GETPASS added new srcs toreplace missing functions
                   36197:        [cf44274bb1c8]
                   36198: 
                   36199:        * config.h.in:
                   36200:        added posix signal stuff
                   36201:        [a3c1c98fe8ef]
                   36202: 
                   36203:        * Makefile.in:
                   36204:        added new srcs
                   36205:        [b6a079afee47]
                   36206: 
                   36207:        * visudo.c:
                   36208:        updated useag
                   36209:        [589ed091c44f]
                   36210: 
                   36211:        * tgetpass.c:
                   36212:        now uses posix signals
                   36213:        [30f74964074f]
                   36214: 
                   36215:        * PORTING:
                   36216:        updated sto reflect major changes
                   36217:        [bcfc309e017b]
                   36218: 
                   36219:        * CHANGES, TODO:
                   36220:        updated
                   36221:        [23aacbd54278]
                   36222: 
                   36223:        * tgetpass.c:
                   36224:        uses sysconf() if available
                   36225:        [a27431c90bab]
                   36226: 
                   36227:        * sudo.h:
                   36228:        added PASSWORD_TIMEOUT + prototypes for new functions
                   36229:        [d7473c2f77c4]
                   36230: 
                   36231:        * realpath.c, sudo_realpath.c:
                   36232:        for those w/o this in libc
                   36233:        [1e47aa7a9d46]
                   36234: 
                   36235:        * getcwd.c, getwd.c:
                   36236:        Initial revision
                   36237:        [c90dea57a84f]
                   36238: 
                   36239:        * find_path.c:
                   36240:        rewrote to use realpath(3) - nis now all my code
                   36241:        [d2c3bb8fb37d]
                   36242: 
                   36243:        * config.h.in:
                   36244:        added HAVE_REALPATH
                   36245:        [02c10352a8c7]
                   36246: 
                   36247:        * check.c:
                   36248:        now use tgetpass
                   36249:        [b5c021fc179f]
                   36250: 
                   36251:        * Makefile.in:
                   36252:        added LIBOBJS use tgetpass.c
                   36253:        [230a7b3eeaa3]
                   36254: 
                   36255: 1994-06-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36256: 
                   36257:        * tgetpass.c:
                   36258:        works now :-)
                   36259:        [025e7a3875ba]
                   36260: 
                   36261:        * tgetpass.c:
                   36262:        Initial revision
                   36263:        [3316ab33b230]
                   36264: 
                   36265:        * pathnames.h.in:
                   36266:        added /dev/tty
                   36267:        [29242585e53f]
                   36268: 
                   36269: 1994-06-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36270: 
                   36271:        * version.h:
                   36272:        incremented
                   36273:        [f2e54b48280f]
                   36274: 
                   36275:        * sudo.c:
                   36276:        always use getcwd
                   36277:        [c6068e8a4029]
                   36278: 
                   36279:        * config.h.in:
                   36280:        added check for getwd
                   36281:        [ab1e102ad673]
                   36282: 
                   36283:        * configure.in:
                   36284:        replace strdup & realpath & getcwd if missing
                   36285:        [b0eb14f2a1c3]
                   36286: 
                   36287:        * pathnames.h.in:
                   36288:        added _PATH_PWD
                   36289:        [309d2388f69a]
                   36290: 
                   36291:        * aclocal.m4:
                   36292:        added SUDO_PROG_PWD
                   36293:        [e16e85deb96c]
                   36294: 
                   36295:        * strdup.c:
                   36296:        Initial revision
                   36297:        [810efdc15007]
                   36298: 
                   36299:        * realpath.c, sudo_realpath.c:
                   36300:        Initial revision
                   36301:        [d85eee438e09]
                   36302: 
                   36303: 1994-06-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36304: 
                   36305:        * configure.in:
                   36306:        quoted quare brackets
                   36307:        [d0e7ca111d98]
                   36308: 
                   36309: 1994-06-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36310: 
                   36311:        * sudo.c:
                   36312:        no need to strdup() a constant
                   36313:        [a8c44712df9a]
                   36314: 
                   36315:        * CHANGES:
                   36316:        updated
                   36317:        [71364129cca0]
                   36318: 
                   36319:        * sudo.man:
                   36320:        added validate
                   36321:        [0bb198095a26]
                   36322: 
                   36323:        * sudo.c:
                   36324:        added -v to usage
                   36325:        [31ea71f11dbb]
                   36326: 
                   36327:        * parse.c, sudo.c, sudo.h:
                   36328:        added validate_only stuff
                   36329:        [9bcd853d3c90]
                   36330: 
                   36331: 1994-05-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36332: 
                   36333:        * configure.in:
                   36334:        now finds sed
                   36335:        [6374bb0d3f28]
                   36336: 
                   36337:        * aclocal.m4:
                   36338:        $OSREV is now an int
                   36339:        [ace0666d66cf]
                   36340: 
                   36341: 1994-05-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36342: 
                   36343:        * configure.in:
                   36344:        added mtxinu to caser
                   36345:        [73a776887b16]
                   36346: 
                   36347:        * sudo.h:
                   36348:        added EXEC macro
                   36349:        [2e8eb28b710a]
                   36350: 
                   36351:        * sudo.c:
                   36352:        now use the EXEC nmacro now only do a gethostbyname() if FQDN is set
                   36353:        [56afb4f658d5]
                   36354: 
                   36355:        * logging.c:
                   36356:        changed mail_argv[] def now use EXEC() macro
                   36357:        [ddcabd28edb1]
                   36358: 
                   36359:        * check.c:
                   36360:        took out crypt() definition
                   36361:        [0e657724cf5f]
                   36362: 
                   36363:        * version.h:
                   36364:        upped the version
                   36365:        [62c5d66119fc]
                   36366: 
                   36367:        * configure.in:
                   36368:        always look for -lnsl
                   36369:        [d7b594f0313b]
                   36370: 
                   36371:        * aclocal.m4:
                   36372:        added an echo
                   36373:        [1caae3491dc5]
                   36374: 
                   36375:        * sudo.h:
                   36376:        SHORT_MESSAGE is now the default
                   36377:        [cfce35c3119a]
                   36378: 
                   36379:        * config.h.in:
                   36380:        fixed typo
                   36381:        [6499a564bf75]
                   36382: 
                   36383:        * configure.in:
                   36384:        added missing AC_DEFINE(SVR4) for solaris
                   36385:        [feef0b17b94f]
                   36386: 
                   36387:        * sudo.man:
                   36388:        documented the -v flag
                   36389:        [a6429f2bc2cf]
                   36390: 
                   36391:        * SUPPORTED:
                   36392:        updated
                   36393:        [088886e79540]
                   36394: 
                   36395:        * check.c:
                   36396:        proto-ized crypt()
                   36397:        [801e4ff5b121]
                   36398: 
                   36399:        * config.h.in:
                   36400:        added LIBSHADOW undef
                   36401:        [8df588e9ee2b]
                   36402: 
                   36403:        * configure.in:
                   36404:        nwo set OS to be lowercase
                   36405:        [561ebed833e4]
                   36406: 
                   36407: 1994-05-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36408: 
                   36409:        * configure.in:
                   36410:        now use SUDO_OSTYPE to set $OS
                   36411:        [0e60aee23098]
                   36412: 
                   36413:        * aclocal.m4:
                   36414:        now use uname to determine os
                   36415:        [99705e58d400]
                   36416: 
                   36417:        * visudo.c:
                   36418:        added prototypes & moved sig handler around
                   36419:        [1f0bc8d23b51]
                   36420: 
                   36421:        * sudo.h:
                   36422:        added prototyppes
                   36423:        [be3935a2b163]
                   36424: 
                   36425:        * check.c, logging.c, sudo.c:
                   36426:        added prototypes
                   36427:        [2079b4605ab8]
                   36428: 
                   36429:        * parse.c:
                   36430:        added comment
                   36431:        [a34d147d8399]
                   36432: 
                   36433:        * config.h.in:
                   36434:        nwo use _BSD_SIGNALS not _BSD_COMPAT
                   36435:        [63663195f047]
                   36436: 
                   36437:        * aixcrypt.exp:
                   36438:        Initial revision
                   36439:        [890aed08357e]
                   36440: 
                   36441:        * Makefile.in:
                   36442:        added aixcrypt.exp
                   36443:        [1005a183105f]
                   36444: 
                   36445:        * parse.lex, parse.yacc:
                   36446:        moved config.h to top of includes
                   36447:        [9569c49aa5f3]
                   36448: 
                   36449: 1994-05-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36450: 
                   36451:        * find_path.c:
                   36452:        now don't bitch if get EACCESS (treat like EPERM)
                   36453:        [dbeffb638de4]
                   36454: 
                   36455:        * visudo.c:
                   36456:        added -v flag and usage()
                   36457:        [4d44ed60ed75]
                   36458: 
                   36459:        * version.h:
                   36460:        fixed a typo
                   36461:        [cf3f9347ae41]
                   36462: 
                   36463:        * sudo.c:
                   36464:        cast Argv to a const for exec added -v flag
                   36465:        [d11b6efc0e45]
                   36466: 
                   36467:        * logging.c:
                   36468:        mail_argv is now a const
                   36469:        [93bb5d90bb6f]
                   36470: 
                   36471:        * configure.in:
                   36472:        only set RETSIGTYPE if it is not set already
                   36473:        [c97aac260b77]
                   36474: 
                   36475:        * aclocal.m4:
                   36476:        now defines & STDC_HEADERS for Irix
                   36477:        [9c2b24ad1fc5]
                   36478: 
                   36479:        * Makefile.in:
                   36480:        added version.h
                   36481:        [9f79e880229a]
                   36482: 
                   36483:        * insults.h, sudo.h:
                   36484:        prevent multiple inclusion
                   36485:        [d68c8a9243ce]
                   36486: 
                   36487:        * version.h:
                   36488:        Initial revision
                   36489:        [dbb39c5ef8d9]
                   36490: 
                   36491:        * parse.lex, parse.yacc:
                   36492:        now includes config.h
                   36493:        [f117e036a56b]
                   36494: 
                   36495:        * aclocal.m4:
                   36496:        now talks about sunos 4.x
                   36497:        [c9054aa92d4e]
                   36498: 
                   36499:        * visudo.c:
                   36500:        calls to Exit now pass an arg
                   36501:        [a92104670551]
                   36502: 
                   36503: 1994-05-24  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36504: 
                   36505:        * visudo.c:
                   36506:        signal handler now takes an int argument
                   36507:        [26f480c41523]
                   36508: 
                   36509:        * CHANGES:
                   36510:        updated
                   36511:        [8c166a9d796b]
                   36512: 
                   36513:        * sudo.c:
                   36514:        ok, the getcwd() is now *really* done as the user
                   36515:        [ab86cf85134a]
                   36516: 
                   36517:        * configure.in:
                   36518:        changed AIX STATIC_FLAGS
                   36519:        [b9c0a3ba5663]
                   36520: 
                   36521:        * aclocal.m4:
                   36522:        solaris now defines SVR4
                   36523:        [c3e20cac96f5]
                   36524: 
                   36525:        * sudo.h:
                   36526:        added cwd and fixed stupid core dump that makes no sense. sigh.
                   36527:        [7a9755436dbb]
                   36528: 
                   36529:        * sudo.c:
                   36530:        moved getcwd stuff into load_globals
                   36531:        [ec2bc90df1f3]
                   36532: 
                   36533:        * parse.c:
                   36534:        took out externs that are in suod.h
                   36535:        [93c4b3f856d7]
                   36536: 
                   36537:        * logging.c:
                   36538:        moved cwd into load_globals
                   36539:        [050de754d228]
                   36540: 
                   36541:        * find_path.c:
                   36542:        moved cwd stuff
                   36543:        [22f3f3b4c34d]
                   36544: 
                   36545:        * Makefile.in:
                   36546:        fixed make distclean & realclean
                   36547:        [c9964d89bcef]
                   36548: 
                   36549:        * TODO:
                   36550:        updated .,
                   36551:        [e513581ef0e3]
                   36552: 
                   36553:        * CHANGES:
                   36554:        added solaris changes
                   36555:        [505d930daf27]
                   36556: 
                   36557:        * aclocal.m4:
                   36558:        added solaris changes, need to rework
                   36559:        [33f20fb16c49]
                   36560: 
                   36561:        * configure.in:
                   36562:        cleaned up for solaris
                   36563:        [2fb8cfa05d0f]
                   36564: 
                   36565:        * logging.c:
                   36566:        reinstall reapchild signal handler for non-bsd signals
                   36567:        [3d1dc545113d]
                   36568: 
                   36569:        * sudo.h:
                   36570:        took out getdtablesize() emulation for HP-UX (no longer needed)
                   36571:        [1fc83d170f34]
                   36572: 
                   36573:        * sudo.c:
                   36574:        support for HAVE_SYSCONF
                   36575:        [50ca2a7a224a]
                   36576: 
                   36577:        * visudo.c:
                   36578:        added <fcntl.h> for solaris & reorg'd the includes + minor prettying
                   36579:        up /
                   36580:        [0a570e826dd4]
                   36581: 
                   36582:        * config.h.in:
                   36583:        added HAVE_SYSCONF
                   36584:        [2b9a9f3a4e94]
                   36585: 
                   36586: 1994-05-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36587: 
                   36588:        * configure.in:
                   36589:        now tells you what os you are running /.
                   36590:        [06c6332a895b]
                   36591: 
                   36592:        * aclocal.m4:
                   36593:        took out extra ','
                   36594:        [e8c75ce59f4a]
                   36595: 
                   36596: 1994-05-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36597: 
                   36598:        * config.h.in:
                   36599:        added _BSD_COMPAT
                   36600:        [73c5099806c2]
                   36601: 
                   36602:        * aclocal.m4:
                   36603:        fixed for irix5
                   36604:        [1047d1f6c0eb]
                   36605: 
                   36606:        * CHANGES:
                   36607:        updated
                   36608:        [1bc4969fee96]
                   36609: 
                   36610:        * sudo.c:
                   36611:        uid seinitialized to -2
                   36612:        [8d7812b1878b]
                   36613: 
                   36614: 1994-04-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36615: 
                   36616:        * sudo.c:
                   36617:        now removes LIBPATH for AIX
                   36618:        [075392eb1dd9]
                   36619: 
                   36620: 1994-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36621: 
                   36622:        * configure.in:
                   36623:        now uses ufc if it finds it
                   36624:        [ab6ce30a5958]
                   36625: 
                   36626: 1994-03-12  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36627: 
                   36628:        * sudo.h:
                   36629:        no longer define yyval & yylval since yacc does it
                   36630:        [09d250aea50a]
                   36631: 
                   36632:        * parse.lex:
                   36633:        now defines yylval as extenr
                   36634:        [8ec2b88952bc]
                   36635: 
                   36636:        * configure.in:
                   36637:        BROKEN_GETPASS is now an OPTION
                   36638:        [3714f4bb8312]
                   36639: 
                   36640:        * config.h.in:
                   36641:        took out BROKEN_GETPASS
                   36642:        [9c4f6aa50137]
                   36643: 
                   36644:        * Makefile.in:
                   36645:        took out big comment
                   36646:        [4c13cff0e556]
                   36647: 
                   36648:        * README:
                   36649:        updated
                   36650:        [b8b9902b620d]
                   36651: 
                   36652:        * Makefile.in:
                   36653:        took out README.beta
                   36654:        [ed2cd861e82b]
                   36655: 
                   36656:        * SUPPORTED:
                   36657:        Initial revision
                   36658:        [2fffc51e6606]
                   36659: 
                   36660:        * INSTALL:
                   36661:        now reference SUPPORTED .,
                   36662:        [d112c30be1f2]
                   36663: 
                   36664:        * config.h.in:
                   36665:        now check for convex OR __convex__
                   36666:        [a0e5701a3069]
                   36667: 
                   36668:        * aclocal.m4:
                   36669:        now check for convex or __convex__
                   36670:        [5dae2bfbe3bc]
                   36671: 
                   36672:        * Makefile.in:
                   36673:        added dist target
                   36674:        [400a54de57db]
                   36675: 
                   36676:        * aclocal.m4:
                   36677:        use __convex__
                   36678:        [58a19470ed0b]
                   36679: 
                   36680:        * find_path.c:
                   36681:        now use _S_* stat stuff to be ansi-like
                   36682:        [28cce560e048]
                   36683: 
                   36684:        * INSTALL:
                   36685:        updated for configure directions
                   36686:        [a034ccc7c30a]
                   36687: 
                   36688:        * Makefile.in:
                   36689:        distclean now removes config.h and pathnames.h
                   36690:        [300f2349b4ab]
                   36691: 
                   36692:        * CHANGES:
                   36693:        updated
                   36694:        [646f7e9430c1]
                   36695: 
                   36696:        * TODO:
                   36697:        fixed typoe
                   36698:        [70fd6361b2bc]
                   36699: 
                   36700:        * visudo.c:
                   36701:        updated version
                   36702:        [cf13d87d789f]
                   36703: 
                   36704:        * Makefile.in:
                   36705:        updated version
                   36706:        [8c5dacc27a7a]
                   36707: 
                   36708:        * config.h.in, pathnames.h.in:
                   36709:        added copyright header
                   36710:        [747ce3d3d6b7]
                   36711: 
                   36712:        * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
                   36713:        parse.yacc, sudo.c, sudo.h:
                   36714:        udpated version
                   36715:        [4751c39bad18]
                   36716: 
                   36717:        * visudo.c:
                   36718:        udpated to use configure + pathnames.h
                   36719:        [d45dff76a1cd]
                   36720: 
                   36721:        * aclocal.m4:
                   36722:        updated
                   36723:        [f05a367a55be]
                   36724: 
                   36725:        * Makefile.in, config.h.in, configure.in:
                   36726:        updated
                   36727:        [524778598879]
                   36728: 
                   36729:        * sudo.h:
                   36730:        now works with configure
                   36731:        [83fc40e533f4]
                   36732: 
                   36733:        * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
                   36734:        updated to work with configure + pathnames.h
                   36735:        [cb67fa6ab52d]
                   36736: 
                   36737:        * Makefile.in:
                   36738:        added LEXLIB
                   36739:        [f43cad4ab0a2]
                   36740: 
                   36741: 1994-03-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36742: 
                   36743:        * COPYING:
                   36744:        updated gnu general licence to versio 2
                   36745:        [2b0b56112ddc]
                   36746: 
                   36747:        * config.h.in, pathnames.h.in:
                   36748:        Initial revision
                   36749:        [4b586f39ec2d]
                   36750: 
                   36751:        * sudo.h:
                   36752:        changed to work with configure
                   36753:        [13f3506ddf16]
                   36754: 
                   36755: 1994-03-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36756: 
                   36757:        * Makefile.in, aclocal.m4, configure.in:
                   36758:        Initial revision
                   36759:        [a8636ae77371]
                   36760: 
                   36761:        * visudo.c:
                   36762:        now uses defines used by configure
                   36763:        [de438d118993]
                   36764: 
                   36765: 1994-03-01  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36766: 
                   36767:        * find_path.c:
                   36768:        sudo won't bitch about EPERM now, for real
                   36769:        [ce26d9ef7e3f]
                   36770: 
                   36771: 1994-02-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36772: 
                   36773:        * logging.c:
                   36774:        renamed exec_argv to eliminate a libc name clash with ksros
                   36775:        [bcb4350d8411]
                   36776: 
                   36777:        * CHANGES:
                   36778:        corrected
                   36779:        [dae68d422efd]
                   36780: 
                   36781:        * logging.c, sudo.c, sudo.h:
                   36782:        execve -> execv
                   36783:        [40cc2c4bdb15]
                   36784: 
                   36785:        * TODO:
                   36786:        upated
                   36787:        [9275a8b8fc45]
                   36788: 
                   36789:        * PORTING:
                   36790:        added 2 mroe items
                   36791:        [6cbb5c56993c]
                   36792: 
                   36793:        * CHANGES:
                   36794:        updated
                   36795:        [73f34f8e571a]
                   36796: 
                   36797:        * sudo.h:
                   36798:        added UMASK and mode_t declaration
                   36799:        [7c2015e1d171]
                   36800: 
                   36801:        * sudo.c:
                   36802:        added UMASK
                   36803:        [d37be7523680]
                   36804: 
                   36805:        * logging.c:
                   36806:        now opens log file with mode 077
                   36807:        [0825cc3ee841]
                   36808: 
                   36809:        * check.c:
                   36810:        saved current umask ans restores it
                   36811:        [659c1aaae8e8]
                   36812: 
                   36813:        * sudo.h:
                   36814:        added MAXLOGFILELEN
                   36815:        [34331c7dee90]
                   36816: 
                   36817:        * logging.c:
                   36818:        split long log lines. FOr syslog, split into multiple entries, for
                   36819:        a log file, indent the extra for readability
                   36820:        [72c9e4cdba6e]
                   36821: 
                   36822: 1994-02-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36823: 
                   36824:        * CHANGES:
                   36825:        added changes
                   36826:        [81196833673d]
                   36827: 
                   36828:        * sudo.h:
                   36829:        MAXLOGLEN & MAXSYSLOGLEN are now different (as they should be)
                   36830:        [1aa69e903840]
                   36831: 
                   36832: 1994-02-25  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36833: 
                   36834:        * TODO:
                   36835:        added input from Brett M Hogden <hogden@rge.com>
                   36836:        [80f01fc88ce9]
                   36837: 
                   36838: 1994-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36839: 
                   36840:        * sudo.c:
                   36841:        added rmenv() to remove stuff from environ. can now uses execvp()
                   36842:        OR execve() becuase of this.
                   36843:        [e7fc2535bd67]
                   36844: 
                   36845:        * logging.c:
                   36846:        now uses execvp() OR execve()
                   36847:        [56391aa1f99d]
                   36848: 
                   36849:        * sudo.h:
                   36850:        added USE_EXECVE
                   36851:        [f21f38050b95]
                   36852: 
                   36853:        * sudo.h:
                   36854:        added environ
                   36855:        [6b805e23c6f6]
                   36856: 
                   36857:        * find_path.c:
                   36858:        now ignore EPERM
                   36859:        [c8fd7117a1d7]
                   36860: 
                   36861:        * sudo.h:
                   36862:        moved some func decls out of sudo.h and into sudo.c as statics /.
                   36863:        [5f555c267d27]
                   36864: 
                   36865:        * CHANGES:
                   36866:        updated
                   36867:        [431f478af320]
                   36868: 
                   36869:        * sudo.h:
                   36870:        took out Envp
                   36871:        [6f722be7793d]
                   36872: 
                   36873: 1994-02-14  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36874: 
                   36875:        * BUGS:
                   36876:        Initial revision
                   36877:        [4a8ecf0da95c]
                   36878: 
                   36879: 1994-02-10  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36880: 
                   36881:        * CHANGES:
                   36882:        added SECURE_PATH
                   36883:        [1c72cb222609]
                   36884: 
                   36885:        * sudo.c, sudo.h:
                   36886:        added SECURE_PATH
                   36887:        [5bf5357a63c5]
                   36888: 
                   36889:        * sudo.h:
                   36890:        added SECURE_PATH
                   36891:        [3976a74405ac]
                   36892: 
                   36893:        * INSTALL:
                   36894:        added sample.sudoers note
                   36895:        [1b395d29aaeb]
                   36896: 
                   36897:        * sudoers:
                   36898:        Initial revision
                   36899:        [485888d07477]
                   36900: 
                   36901: 1994-02-09  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36902: 
                   36903:        * find_path.c:
                   36904:        fixed typo
                   36905:        [bfc3cc4d41ca]
                   36906: 
                   36907:        * PORTING:
                   36908:        took out SAVED_UID garbage
                   36909:        [b7c2d3469661] [SUDO_1_3_0]
                   36910: 
                   36911:        * INSTALL:
                   36912:        mentioned HAL
                   36913:        [253d6695df90]
                   36914: 
                   36915:        * sudo.h:
                   36916:        added HAL line
                   36917:        [29ec1a4ac6de]
                   36918: 
                   36919:        * insults.h:
                   36920:        added HAL insults
                   36921:        [7d7c96d77c74]
                   36922: 
                   36923:        * TODO:
                   36924:        updated
                   36925:        [aa2ed9790586]
                   36926: 
                   36927:        * logging.c:
                   36928:        more verbose error if mailer not found
                   36929:        [fca47fd00cb6]
                   36930: 
                   36931:        * check.c:
                   36932:        now do getpwent as root for soem shadow password systems (bsdi)
                   36933:        [e0339e110d46]
                   36934: 
                   36935: 1994-02-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36936: 
                   36937:        * sudo.h:
                   36938:        took out SAVED_UID garbade
                   36939:        [fcb0e81dcdb5]
                   36940: 
                   36941:        * sudo.c:
                   36942:        took out SAVED_UID garbage since it don't work
                   36943:        [507e9513e9c2]
                   36944: 
                   36945: 1994-02-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36946: 
                   36947:        * README:
                   36948:        updated
                   36949:        [d2b6b253dae5]
                   36950: 
                   36951:        * insults.h:
                   36952:        added a missing space :-)
                   36953:        [8940ea991f87]
                   36954: 
                   36955:        * sudo.c, sudo.h:
                   36956:        took out multimax cruft
                   36957:        [c2606b365181]
                   36958: 
                   36959:        * INSTALL:
                   36960:        minor update
                   36961:        [05fb6ee73131]
                   36962: 
                   36963:        * PORTING:
                   36964:        finished
                   36965:        [c4ac47c84dc5]
                   36966: 
                   36967:        * sudo.c:
                   36968:        fixed a typo + indentation
                   36969:        [7eab40aae8fa]
                   36970: 
                   36971: 1994-02-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36972: 
                   36973:        * sudo.h:
                   36974:        took outumoved some defines to the config file ,. ,.
                   36975:        [defff05beb52]
                   36976: 
                   36977:        * PORTING:
                   36978:        Initial revision
                   36979:        [c803e9127959]
                   36980: 
                   36981:        * TODO:
                   36982:        did #6
                   36983:        [c6fa1c946c31]
                   36984: 
                   36985:        * sudo.h:
                   36986:        added HAS_SAVED_UID
                   36987:        [6a88a39c0a07]
                   36988: 
                   36989:        * sudo.c:
                   36990:        put back AIX cruft
                   36991:        [a24d2507ddd4]
                   36992: 
                   36993: 1994-02-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   36994: 
                   36995:        * sudo.c:
                   36996:        aix changes
                   36997:        [1663915f754a]
                   36998: 
                   36999: 1994-02-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37000: 
                   37001:        * CHANGES:
                   37002:        updated
                   37003:        [a8cc73747cae]
                   37004: 
                   37005:        * check.c, logging.c, parse.c, sudo.c, sudo.h:
                   37006:        now is only root when abs necesary
                   37007:        [3c9d12c5cdfe]
                   37008: 
                   37009:        * check.c:
                   37010:        added missing %s\n
                   37011:        [609320b72d89]
                   37012: 
                   37013: 1994-01-31  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37014: 
                   37015:        * install-sh:
                   37016:        Initial revision
                   37017:        [b5bba140a175]
                   37018: 
                   37019:        * TODO:
                   37020:        updated
                   37021:        [c9d2eba602af]
                   37022: 
                   37023:        * CHANGES:
                   37024:        updated
                   37025:        [932f1fc3bb14]
                   37026: 
                   37027:        * sudo.c:
                   37028:        now removed _RLD_* for alphas
                   37029:        [54a36e648158]
                   37030: 
                   37031:        * INSTALL:
                   37032:        updated for new config scheme
                   37033:        [61c8ae800444]
                   37034: 
                   37035:        * find_path.c:
                   37036:        more verbose eror messages
                   37037:        [b4fd123db42d]
                   37038: 
                   37039: 1994-01-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37040: 
                   37041:        * TODO:
                   37042:        now have solaris
                   37043:        [371002fbf266]
                   37044: 
                   37045:        * sudo.h:
                   37046:        define __svr4__ for SOLARIS
                   37047:        [0b5cf5ed936d]
                   37048: 
                   37049:        * check.c:
                   37050:        added svr4 junk for shadow pws for solaris 2.x
                   37051:        [91ed58f21618]
                   37052: 
                   37053:        * check.c, sudo.c:
                   37054:        took out setuid(0) and setreuid(udi) garbage. Its not needed since
                   37055:        we start out setuid with the correct perms.
                   37056:        [07689e782b0b]
                   37057: 
                   37058:        * check.c, sudo.c, sudo.h:
                   37059:        now use setreuid()
                   37060:        [7d64d685d78e]
                   37061: 
                   37062: 1994-01-26  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37063: 
                   37064:        * sudo.man:
                   37065:        revised AUTHORS secrtion & added ENV_EDITOR stuff to VARIABLES
                   37066:        sectoin
                   37067:        [b26967b1e19b]
                   37068: 
                   37069:        * visudo.c:
                   37070:        now uses ENV_EDITOR if you want to use the EDITOR envar
                   37071:        [a4f8fcb9bd1d]
                   37072: 
                   37073:        * sudo.h:
                   37074:        now uses ENV_EDITOR if you want to use the EDITOR envar >> .
                   37075:        [028cc55c4328]
                   37076: 
                   37077: 1993-12-07  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37078: 
                   37079:        * INSTALL:
                   37080:        rewrote most of this
                   37081:        [a6750923f9c9]
                   37082: 
                   37083:        * README:
                   37084:        minor update + spell fix
                   37085:        [a411717a7249]
                   37086: 
                   37087:        * sudo.h:
                   37088:        added all options that are in the Makefile
                   37089:        [6db3b3b841b3]
                   37090: 
                   37091:        * getpass.c:
                   37092:        now use USE_TERMIO #define for sgi & hpux
                   37093:        [b91f89ae6be1]
                   37094: 
                   37095:        * TODO:
                   37096:        todo: posix sigs
                   37097:        [4548a56eb2ef]
                   37098: 
                   37099: 1993-12-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37100: 
                   37101:        * check.c, find_path.c:
                   37102:        always include strings.h
                   37103:        [1fc20bda92c0]
                   37104: 
                   37105:        * visudo.c:
                   37106:        added STATICEDITOR
                   37107:        [0596f820716e]
                   37108: 
                   37109:        * sudo.h:
                   37110:        sgi has vi in /usr/bin too
                   37111:        [94203b62bfd9]
                   37112: 
                   37113:        * sudo.man:
                   37114:        added VISUAL
                   37115:        [87c2844c4cac]
                   37116: 
                   37117: 1993-12-03  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37118: 
                   37119:        * sudo.h:
                   37120:        sue /usr/bin/vi on some systems
                   37121:        [e3ad9190f35e]
                   37122: 
                   37123:        * sudo.c:
                   37124:        fixed warning (include strings.h)
                   37125:        [0b896de4d8a0]
                   37126: 
                   37127:        * sudo.man:
                   37128:        added John_Rouillard@dl5000.bc.edu's changes (new features)
                   37129:        [f41b4205a8cf]
                   37130: 
                   37131:        * CHANGES:
                   37132:        changes from John_Rouillard@dl5000.bc.edu
                   37133:        [6bdef8e948d5]
                   37134: 
                   37135:        * visudo.c:
                   37136:        added EDITOR envar
                   37137:        [5c4bf716de21]
                   37138: 
                   37139:        * check.c, find_path.c, parse.c, sudo.c:
                   37140:        added patches from John_Rouillard directory spec
                   37141:        uses EDITOR
                   37142:        [f62a435f8c41]
                   37143: 
                   37144: 1993-12-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37145: 
                   37146:        * getpass.c:
                   37147:        added flush for hpux
                   37148:        [07cfdd6a7b55]
                   37149: 
                   37150: 1993-11-30  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37151: 
                   37152:        * sudo.c:
                   37153:        no longer assume malloc returns a char *
                   37154:        [7480bd2756f3]
                   37155: 
                   37156:        * sudo.c:
                   37157:        alpha change to remove LD_-like thing fixed SHLIB_PATH stuff -- now
                   37158:        gets removed correctly
                   37159:        [8587166c6ac8]
                   37160: 
                   37161:        * sudo.h:
                   37162:        added STD_HEADERS macro
                   37163:        [480f5a9a516c]
                   37164: 
                   37165:        * sudo.c:
                   37166:        now uses STD_HEADERS macor for ansi
                   37167:        [c5018806fd59]
                   37168: 
                   37169:        * find_path.c:
                   37170:        now uses STD_HEADERS macro
                   37171:        [ad821e0788ea]
                   37172: 
                   37173:        * check.c:
                   37174:        niceties for C compiler bitches -- no real change
                   37175:        [0fc0b1a5fb64]
                   37176: 
                   37177: 1993-11-29  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37178: 
                   37179:        * visudo.c:
                   37180:        now doesn't fclose a file never opened.
                   37181:        [ee888ec9427d]
                   37182: 
                   37183: 1993-11-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37184: 
                   37185:        * sudo.man:
                   37186:        added visudo line
                   37187:        [698d51c66407]
                   37188: 
                   37189:        * sudo.man:
                   37190:        added error stuff added me in there...
                   37191:        [d202fd34b906]
                   37192: 
                   37193:        * CHANGES:
                   37194:        noted insults
                   37195:        [998a22c2230c]
                   37196: 
                   37197:        * INSTALL:
                   37198:        added blurb about reading stuff
                   37199:        [e71db100798f]
                   37200: 
                   37201:        * sudo.h:
                   37202:        added insults
                   37203:        [c110431cec56]
                   37204: 
                   37205:        * insults.h:
                   37206:        corrected somments and removed newlines
                   37207:        [493706fd488c]
                   37208: 
                   37209:        * check.c:
                   37210:        now uses insults
                   37211:        [6d23cf06a0ef]
                   37212: 
                   37213:        * insults.h:
                   37214:        Initial revision
                   37215:        [83153c26b4a3]
                   37216: 
                   37217:        * INSTALL:
                   37218:        added dec syslog note
                   37219:        [555437273237]
                   37220: 
                   37221:        * sample.sudoers:
                   37222:        added real stuff in there
                   37223:        [53442a7fba78]
                   37224: 
                   37225:        * TODO:
                   37226:        added a todo
                   37227:        [c630472bd4dc]
                   37228: 
                   37229:        * TODO:
                   37230:        added one
                   37231:        [806464453284]
                   37232: 
                   37233: 1993-11-27  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37234: 
                   37235:        * sample.sudoers:
                   37236:        Initial revision
                   37237:        [7db0a9f1ca8f]
                   37238: 
                   37239:        * sudo.man:
                   37240:        updated with changes
                   37241:        [d9bf254c6c08]
                   37242: 
                   37243:        * sudo.man:
                   37244:        Initial revision
                   37245:        [dd6f11174ac6]
                   37246: 
                   37247:        * indent.pro:
                   37248:        Initial revision
                   37249:        [dbfbb494fad9]
                   37250: 
                   37251:        * CHANGES, COPYING, INSTALL, README, TODO:
                   37252:        Initial revision
                   37253:        [6d98f489a079]
                   37254: 
                   37255:        * visudo.c:
                   37256:        updated version number and took out jeff's old addr since it is no
                   37257:        good
                   37258:        [ee47c24818cb]
                   37259: 
                   37260:        * check.c, find_path.c, logging.c, parse.c, parse.lex, parse.yacc,
                   37261:        sudo.c, sudo.h:
                   37262:        updated version number and took out jeff's email (since it is
                   37263:        invalid)
                   37264:        [54616458a52e]
                   37265: 
                   37266: 1993-10-28  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37267: 
                   37268:        * check.c:
                   37269:        added fflush()
                   37270:        [145c881f4fb4]
                   37271: 
                   37272: 1993-10-23  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37273: 
                   37274:        * find_path.c:
                   37275:        now return NULL instead pfof exiting for nopnn-fatal errors
                   37276:        [8bc74f8cb1ae]
                   37277: 
                   37278: 1993-10-21  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37279: 
                   37280:        * check.c:
                   37281:        new banner
                   37282:        [5387ab2af516]
                   37283: 
                   37284:        * parse.lex:
                   37285:        now sudo.h gets included first
                   37286:        [2acb01c18e18]
                   37287: 
                   37288: 1993-10-18  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37289: 
                   37290:        * parse.lex:
                   37291:        now can use flex
                   37292:        [164d3839adf0]
                   37293: 
                   37294:        * sudo.h:
                   37295:        linux patch
                   37296:        [f1b6b1b1a2ca]
                   37297: 
                   37298:        * sudo.c:
                   37299:        hpux 9 fix, removes SHLIB_PATH linux patch
                   37300:        [67611dc1737f]
                   37301: 
                   37302:        * check.c:
                   37303:        linux diff
                   37304:        [c24536682397]
                   37305: 
                   37306: 1993-10-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37307: 
                   37308:        * find_path.c:
                   37309:        stat now ignores EINVAL
                   37310:        [c7761a5dc642]
                   37311: 
                   37312: 1993-10-06  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37313: 
                   37314:        * find_path.c, sudo.c:
                   37315:        now declare strdup as extern
                   37316:        [6b7d6f8784b5]
                   37317: 
                   37318: 1993-10-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37319: 
                   37320:        * visudo.c:
                   37321:        reformatted with indent + by hand
                   37322:        [9d43084e4990]
                   37323: 
                   37324:        * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c, sudo.h:
                   37325:        used indent to "fix" coding style
                   37326:        [489ffacbdc70]
                   37327: 
                   37328:        * find_path.c:
                   37329:        now checks '.' or '.' or '' in PATH -- but does it LAST should maybe
                   37330:        move the code that does this into the loop body. makes it messier
                   37331:        tho. hmmm.
                   37332:        [c4d22b48da9a]
                   37333: 
                   37334: 1993-09-08  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37335: 
                   37336:        * find_path.c:
                   37337:        redid the fix for non-executable files in an easier to read way plus
                   37338:        some minor aethetic changes
                   37339:        [84fe337f1426]
                   37340: 
                   37341:        * find_path.c:
                   37342:        fixed bug with non-executable tings of same name in path introduced
                   37343:        by checkig errno after stat(2).
                   37344:        [c2a812cfcbc1]
                   37345: 
                   37346: 1993-09-05  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37347: 
                   37348:        * sudo.c:
                   37349:        fixed off by one error
                   37350:        [fabb7cee0041]
                   37351: 
                   37352:        * find_path.c:
                   37353:        now handles decending below '/' correctly
                   37354:        [5d2ddfc0b220]
                   37355: 
                   37356:        * sudo.c:
                   37357:        now actually builds Envp instead of munging envp
                   37358:        [bdc4b08f6898]
                   37359: 
                   37360: 1993-09-04  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37361: 
                   37362:        * parse.yacc:
                   37363:        now includes sys/param.h
                   37364:        [efbb494ab4de]
                   37365: 
                   37366:        * visudo.c:
                   37367:        now includes sys/param.h
                   37368:        [ad6c91d59958]
                   37369: 
                   37370:        * sudo.h:
                   37371:        fixed ifndef -> ifdef
                   37372:        [7aebe822d863]
                   37373: 
                   37374:        * qualify.c:
                   37375:        make more like find_path.c
                   37376:        [853b2dab2e03]
                   37377: 
                   37378:        * find_path.c:
                   37379:        rewritten by millert
                   37380:        [c6a043cc11b3]
                   37381: 
                   37382:        * sudo.h:
                   37383:        fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP added info
                   37384:        about new defines in the comment
                   37385:        [39ffefce3aec]
                   37386: 
                   37387:        * logging.c:
                   37388:        now uses USE_CWD
                   37389:        [fa0f3b118bb3]
                   37390: 
                   37391:        * sudo.h:
                   37392:        added delc for clean_envp() and Envp
                   37393:        [a12034e300c2]
                   37394: 
                   37395:        * sudo.c:
                   37396:        now rips LD_* env vars out of envp and passed sanitized Envp to exec
                   37397:        [d201a218e056]
                   37398: 
                   37399:        * logging.c:
                   37400:        now uses execve()
                   37401:        [f3e01032cd33]
                   37402: 
                   37403:        * find_path.c:
                   37404:        ENOTDIR is ok now too (in case part of the path is bogus)
                   37405:        [b5cbbb201bb5]
                   37406: 
                   37407:        * qualify.c:
                   37408:        now works correctly (ttaltotal rewrite)
                   37409:        [0c25d64a5c68]
                   37410: 
                   37411:        * parse.lex:
                   37412:        now includes sys/param.h didn't match trailing / -- fix from
                   37413:        rouilj@cs.umb.edu
                   37414:        [b6363ba110af]
                   37415: 
                   37416: 1993-06-11  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37417: 
                   37418:        * sudo.c:
                   37419:        moved around the #ifndef _AIX
                   37420:        [7d4330950c20]
                   37421: 
                   37422:        * check.c, logging.c, parse.c:
                   37423:        Initial revision
                   37424:        [c101e9572d7f]
                   37425: 
                   37426: 1993-03-20  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37427: 
                   37428:        * qualify.c:
                   37429:        Initial revision
                   37430:        [5a5f21d0e0bf]
                   37431: 
                   37432: 1993-03-13  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37433: 
                   37434:        * find_path.c:
                   37435:        now works if you do sudo bin/test
                   37436:        [07835120ce43]
                   37437: 
                   37438:        * find_path.c:
                   37439:        works
                   37440:        [c3da8b5efa20]
                   37441: 
                   37442: 1993-03-02  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37443: 
                   37444:        * sudo.h:
                   37445:        Initial revision
                   37446:        [28a1caa38b72]
                   37447: 
                   37448:        * visudo.c:
                   37449:        Initial revision
                   37450:        [0e5cd7c3cdbe]
                   37451: 
                   37452:        * parse.lex, parse.yacc:
                   37453:        Initial revision
                   37454:        [5f2d0cccb06b]
                   37455: 
                   37456: 1993-02-16  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37457: 
                   37458:        * sudo.c:
                   37459:        took out errno.h
                   37460:        [7466431a2655]
                   37461: 
                   37462:        * sudo.c:
                   37463:        now spews error if exec fails and exits with -1
                   37464:        [e5c41ea725c1]
                   37465: 
                   37466:        * sudo.c:
                   37467:        Initial revision
                   37468:        [8aeabe39a0c2]
                   37469: 
                   37470:        * find_path.c:
                   37471:        now only execs files with (an) executable bit set.
                   37472:        [0a451f9c0e58]
                   37473: 
                   37474:        * find_path.c:
                   37475:        Initial revision
                   37476:        [02a534891a35]
                   37477: 
                   37478: 1993-02-15  Todd C. Miller  <Todd.Miller@courtesan.com>
                   37479: 
                   37480:        * getpass.c:
                   37481:        added nice comment
                   37482:        [ea8b2aaa9389]
                   37483: 
                   37484:        * getpass.c:
                   37485:        now works on sgi's
                   37486:        [bf2b7c6d0960]
                   37487: 
                   37488:        * getpass.c:
                   37489:        Initial revision
                   37490:        [9f4de251c1b5]
                   37491: 

FreeBSD-CVSweb <freebsd-cvsweb@FreeBSD.org>