embedaddon/sudo/ChangeLog - view

File: [ELWIX - Embedded LightWeight unIX -] / embedaddon / sudo / ChangeLog
Revision 1.1: download - view: text, annotated - select for diffs - revision graph
Tue Feb 21 16:23:01 2012 UTC (12 years, 4 months ago) by misho
CVS tags: MAIN, HEAD

Initial revision

1: 2012-01-24 Todd C. Miller <Todd.Miller@courtesan.com> 2: 3: * src/sudo.c: 4: Fixed a format string vulnerability when the sudo binary (or a 5: symbolic link to the sudo binary) contains printf format escapes 6: and the -D (debugging) flag is used. 7: 8: 2012-01-13 Todd C. Miller <Todd.Miller@courtesan.com> 9: 10: * sudo.pp: 11: Include parent directories in case they don't already exist. This 12: fixes a directory permissions problem with the AIX package when the 13: /usr/local directories don't already exist. 14: 15: 2011-10-25 Todd C. Miller <Todd.Miller@courtesan.com> 16: 17: * plugins/sudoers/Makefile.in: 18: check_addr needs to link with the network libraries on Solaris 19: [322bd70e316e] 20: 21: * plugins/sudoers/match.c: 22: When matching a RunasAlias for a runas group, pass the alias in as 23: the group_list, not the user_list. From Daniel Kopecek. 24: [766545edf141] 25: 26: * plugins/sudoers/check.c, plugins/sudoers/sudoers.c: 27: We need to init the auth system regardless of whether we need a 28: password since we will be closing the PAM session in the monitor 29: process. Fixes a crash in the monitor on Solaris; bugzilla #518 30: [e82809f86fb3] 31: 32: 2011-10-21 Todd C. Miller <Todd.Miller@courtesan.com> 33: 34: * .hgtags: 35: Added tag SUDO_1_8_3 for changeset 82bec4d3a203 36: [6c953ef6f577] <1.8> 37: 38: * Update Japanese sudoers translation from translationproject.org 39: [82bec4d3a203] [SUDO_1_8_3] <1.8> 40: 41: 2011-10-12 Todd C. Miller <Todd.Miller@courtesan.com> 42: 43: * configure, configure.in: 44: Override and ignore the --disable-static option. Sudo already runs 45: libtool with -tag=disable-static where applicable and we need non- 46: PIC objects to build the executables. 47: [dff177464029] <1.8> 48: 49: 2011-10-10 Todd C. Miller <Todd.Miller@courtesan.com> 50: 51: * NEWS: 52: Add sudoedit fix 53: [3238dc7e4fb2] <1.8> 54: 55: * plugins/sudoers/po/sudoers.pot: 56: regen pot files 57: [7981d6cbf1ab] <1.8> 58: 59: * Ignore set_logname (which is now the default) for sudoedit since we 60: want the LOGNAME, USER and USERNAME environment variables to refer 61: to the calling user since that is who the editor runs as. This 62: allows the editor to find the user's startup files. Fixes bugzilla 63: #515 64: [3b9486e5fddb] <1.8> 65: 66: * Instead of trying to grow the buffer in make_grlist_item(), simply 67: increase the total length, free the old buffer and allocate a new 68: one. This is less error prone and saves us from having to adjust 69: all the pointers in the buffer. This code path is only taken when 70: there are groups longer than the length of the user field in struct 71: utmp or utmpx, which should be quite rare. 72: [cb7c5ac834b5] <1.8> 73: 74: * Add Italian translation for sudo from translationproject.org 75: [c7876fccbc38] <1.8> 76: 77: * NEWS: 78: Japanese translation for sudo and sudoers from 79: translationproject.org 80: [9945a3ef7ff7] <1.8> 81: 82: 2011-10-07 Todd C. Miller <Todd.Miller@courtesan.com> 83: 84: * sudoreplay depends on timestr.lo too; from Mike Frysinger 85: [ad9ae493205f] <1.8> 86: 87: 2011-10-04 Todd C. Miller <Todd.Miller@courtesan.com> 88: 89: * plugins/sudoers/po/sudoers.pot: 90: Regen sudoers pot file. 91: [2c4d99361994] <1.8> 92: 93: * NEWS: 94: Update with latest sudo 1.8.3 news 95: [4e7f59d339d4] <1.8> 96: 97: * ldap_start_tls_s() on Debian (at least) sets the effective and saved 98: uids to the same value as the real uid. This prevents sudo from 99: setting the uid or gid later on. As a workaround, we now set perms 100: to root during sudoers_policy_open(). 101: [eb4c4f15833a] <1.8> 102: 103: * Better warning message on setuid() failure for the setreuid() 104: version of set_perms(). 105: [308c72f601e4] <1.8> 106: 107: 2011-10-02 Todd C. Miller <Todd.Miller@courtesan.com> 108: 109: * NEWS: 110: Combine new translations in NEWS item 111: [0aa07471a5e6] <1.8> 112: 113: 2011-09-27 Todd C. Miller <Todd.Miller@courtesan.com> 114: 115: * Delref auth_pw at the end of check_user() instead of getting a ref 116: twice. 117: [1c882f2fb46c] <1.8> 118: 119: * Make sudo_auth_{init,cleanup} return TRUE on success and check for 120: sudo_auth_init() return value in check_user(). 121: [573bf35ecac9] <1.8> 122: 123: * Do not return without restoring permissions. 124: [2444a0b96469] <1.8> 125: 126: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 127: regen pot files 128: [d286bce8dbb1] <1.8> 129: 130: * NEWS: 131: Update for latest release candidate 132: [63d184ba6263] <1.8> 133: 134: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 135: regen pot files 136: [ac3ec1315df7] <1.8> 137: 138: * Modify the authentication API such that the init and cleanup 139: functions are always called, regardless of whether or not we are 140: going to verify a password. This is needed for proper PAM session 141: support. 142: [ea281ca46d94] <1.8> 143: 144: * Add missing dependency for getspwgen other depends. 145: [9c124272910d] <1.8> 146: 147: * Fix a PAM_USER mismatch in session open/close. We update PAM_USER 148: to the target user immediately before setting resource limits, which 149: is after the monitor process has forked (so it has the old value). 150: Also, if the user did not authenticate, there is no pamh in the 151: monitor so we need to init pam here too. This means we end up 152: calling pam_start() twice, which should be fixed, but at least the 153: session is always properly closed now. 154: [d0866ee5f190] <1.8> 155: 156: * Add check for old being NULL in utmp_setid(); from Steven McDonald 157: [30cc283ac2b4] <1.8> 158: 159: 2011-09-25 Todd C. Miller <Todd.Miller@courtesan.com> 160: 161: * If the invoking user cannot be resolved by uid fake the struct 162: passwd and store it in the cache so we can delref it on exit. 163: [19d44f44d45d] <1.8> 164: 165: 2011-09-24 Todd C. Miller <Todd.Miller@courtesan.com> 166: 167: * Don't error out if the group plugin cannot be loaded, just warn. 168: [e91d9912c9a0] <1.8> 169: 170: 2011-09-23 Todd C. Miller <Todd.Miller@courtesan.com> 171: 172: * Quiet a false positive found by several static analysis tools. These 173: tools don't know that log_error() does not return (it longjmps to 174: error_jmp which returns to the sudo front-end). 175: [3cc319e31ed6] <1.8> 176: 177: 2011-09-22 Todd C. Miller <Todd.Miller@courtesan.com> 178: 179: * Add Italian translation for sudo from translationproject.org Regen 180: .mo files 181: [c0b27f9d7e57] <1.8> 182: 183: * .hgtags: 184: Added tag SUDO_1_8_2 for changeset 3682e51af1d0 185: [f0be566e9ea2] <1.8> 186: 187: 2011-09-21 Todd C. Miller <Todd.Miller@courtesan.com> 188: 189: * Update to current reality and add bit about ssh auth 190: [48dcb86ce9be] <1.8> 191: 192: * Make "verbose" static; fixes a namespace clash with 193: pam_ssh_agent_auth (and it doesn't need to be extern these days). 194: [b60fdd82de94] <1.8> 195: 196: * configure, configure.in: 197: FreeBSD has libutil.h not util.h 198: [c03b121e0193] <1.8> 199: 200: * configure, configure.in: 201: Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD 202: [002e3e0bb173] <1.8> 203: 204: * Update po files from translationproject.org 205: [2b36af902213] <1.8> 206: 207: 2011-09-16 Todd C. Miller <Todd.Miller@courtesan.com> 208: 209: * NEWS: 210: Mention DEREF support 211: [dfeb152f1686] <1.8> 212: 213: * plugins/sudoers/po/sudoers.pot: 214: sync pot files 215: [1fba22e927a3] <1.8> 216: 217: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in: 218: Add support for DEREF in ldap.conf. 219: [fe1cf6ad0add] <1.8> 220: 221: * Makefile.in: 222: install target should depend on ChangeLog too, not just install-doc 223: [f54e2ab633b8] <1.8> 224: 225: * NEWS, configure.in, doc/sudoers.cat, doc/sudoers.man.in: 226: Only iolog_file (not iolog_dir) supports mktemp-style suffixes. 227: [44a25099594e] <1.8> 228: 229: * configure.in, plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 230: regen pot files 231: [e14ee85cf49b] <1.8> 232: 233: * configure, configure.in: 234: Fix some square brackets in case statements that needed to be 235: doubled up. While here, use $OSMAJOR when it makes sense. 236: [853c6e5f994c] <1.8> 237: 238: * Fix a crash in make_grlist_item() on 64-bit machines with strict 239: alignment. 240: [e877c89ae32f] <1.8> 241: 242: * Remove list_options() function that is no longer used now that "sudo 243: -L" is gone. 244: [f31543c80b98] <1.8> 245: 246: * configure, configure.in: 247: Error message if user tries --with-CC 248: [0ed7558b8924] <1.8> 249: 250: * configure, configure.in: 251: Check for -libmldap too when looking for ldap libs, which is the 252: Tivoli Directory Server client library. 253: [831e32d1453c] <1.8> 254: 255: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 256: regen pot files for 1.8.3 257: [df2fb085cff2] <1.8> 258: 259: * NEWS, configure, configure.in, doc/sudo.cat, doc/sudo.man.in, 260: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat, 261: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in, 262: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat, 263: doc/visudo.man.in: 264: Update for version 1.8.3 265: [38cf153add0a] <1.8> 266: 267: 2011-09-09 Todd C. Miller <Todd.Miller@courtesan.com> 268: 269: * Honor NOPASSWD tag for denied commands too. 270: [f473c443ad54] <1.8> 271: 272: * INSTALL, configure, configure.in: 273: Remove --with-CC option; it doesn't work correctly now that we use 274: libtool. Users can get the same effect by setting the CC 275: environment variable when running configure. 276: [4f04869d74fd] <1.8> 277: 278: 2011-08-31 Todd C. Miller <Todd.Miller@courtesan.com> 279: 280: * configure, configure.in: 281: Assume all modern systems support fstat(2). 282: [0422b19dced3] <1.8> 283: 284: 2011-08-30 Todd C. Miller <Todd.Miller@courtesan.com> 285: 286: * configure, configure.in: 287: Add configure test for missing errno declaration and only declare it 288: ourselves if it is missing. 289: [6d26974f7e16] <1.8> 290: 291: * Include errno.h before sudo.h to avoid conflicting with the system 292: definition of errno. 293: [8000bdc0968f] <1.8> 294: 295: 2011-08-29 Todd C. Miller <Todd.Miller@courtesan.com> 296: 297: * Only print individual check status when there is a failure. 298: [bbdd669e7615] <1.8> 299: 300: * Add calls to setprogname() for test programs. 301: [c721f3466a3a] <1.8> 302: 303: * configure, configure.in: 304: Add -Wall and -Werror after all tests so they don't cause failures. 305: [20d75ce40086] <1.8> 306: 307: * Actually run check_addr in the check target 308: [dcd96ef0dc57] <1.8> 309: 310: * Split out address matching into its own file and add regression 311: tests for it. 312: [863f28589c24] <1.8> 313: 314: 2011-08-27 Todd C. Miller <Todd.Miller@courtesan.com> 315: 316: * Fix matching a network number with netmask when the network number 317: is not the first address in the CIDR block. 318: [719942c986e9] <1.8> 319: 320: 2011-08-26 Todd C. Miller <Todd.Miller@courtesan.com> 321: 322: * Don't assume all editors support the +linenumber command line 323: argument, use a whitelist of known good editors. 324: [d8d884af3b05] <1.8> 325: 326: 2011-08-23 Todd C. Miller <Todd.Miller@courtesan.com> 327: 328: * Silence compiler warnings on Solaris with gcc 3.4.3 329: [8047cdb5d6a1] <1.8> 330: 331: * Fix building on RHEL 3 332: [6bb0464a7450] <1.8> 333: 334: * INSTALL, configure, configure.in: 335: Add --enable-werror configure option. 336: [aa40fd459836] <1.8> 337: 338: * setgroups() proto lives in grp.h on RHEL4, perhaps others. 339: [92f98cbaebf0] <1.8> 340: 341: * configure, configure.in: 342: Use PAM by default on AIX 6 and higher. 343: [7ef53d5ac819] <1.8> 344: 345: 2011-08-22 Todd C. Miller <Todd.Miller@courtesan.com> 346: 347: * Add new Esperanto translation from translationproject.org 348: [109ed683b885] <1.8> 349: 350: 2011-08-19 Todd C. Miller <Todd.Miller@courtesan.com> 351: 352: * Quiet an innocuous valgrind warning. 353: [fc453e49f9dd] <1.8> 354: 355: 2011-08-18 Todd C. Miller <Todd.Miller@courtesan.com> 356: 357: * Fix expansion of strftime() escapes in log_dir and add a regress 358: test that exhibited the problem. 359: [784e60d21f11] <1.8> 360: 361: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 362: Fix "make check" return value. 363: [d3608efd8da6] <1.8> 364: 365: 2011-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 366: 367: * plugins/sudoers/po/sudoers.pot: 368: Regen pot files 369: [3682e51af1d0] [SUDO_1_8_2] <1.8> 370: 371: * Makefile.in: 372: Fix logic inversion in pot file up to date check. 373: [343dbbca9422] <1.8> 374: 375: * doc/sudo.cat, doc/sudo.man.in, doc/sudoers.cat, 376: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in, 377: doc/visudo.cat, doc/visudo.man.in: 378: regen docs 379: [96234478bde2] <1.8> 380: 381: 2011-08-15 Todd C. Miller <Todd.Miller@courtesan.com> 382: 383: * configure, configure.in: 384: Add caching for gettext() checks. 385: [4039d21424c3] <1.8> 386: 387: * configure, configure.in: 388: Better handling of libintl header and library mismatch. 389: [cc9faee8e486] <1.8> 390: 391: 2011-08-14 Todd C. Miller <Todd.Miller@courtesan.com> 392: 393: * NEWS: 394: sync 395: [73649a44d934] <1.8> 396: 397: 2011-08-13 Todd C. Miller <Todd.Miller@courtesan.com> 398: 399: * Also check sudoers gid if sudoers is group writable. 400: [3d345347f6ac] <1.8> 401: 402: * NEWS: 403: Update for 1.8.2 final 404: [441c22fea363] <1.8> 405: 406: 2011-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 407: 408: * configure, configure.in: 409: If dlopen is present but libtool doesn't find it, error out since it 410: probably means that libtool doesn't support the system. 411: [6fc7c0de4f6d] <1.8> 412: 413: * configure args on the command line should override builtin defaults. 414: Disable NLS for non-Linux/Solaris unless explicitly enabled. 415: [0ef165f892c2] <1.8> 416: 417: * Fix loop that calls authenticate(). If there was an error message 418: from authenticate(), display it. 419: [f0686011ff2e] <1.8> 420: 421: 2011-08-11 Todd C. Miller <Todd.Miller@courtesan.com> 422: 423: * configure, configure.in: 424: Update to autoconf 2.68 and libtool 2.4 425: [00df5f3647e1] <1.8> 426: 427: * Fix typo; OPT should be OTP 428: [31da1f989740] <1.8> 429: 430: * Rename libsudoers convenience library to libparsesudoers to avoid 431: libtool confusion. 432: [e9ae9d611dd5] <1.8> 433: 434: 2011-08-10 Todd C. Miller <Todd.Miller@courtesan.com> 435: 436: * Add Danish sudoers translation from translationproject.org 437: [fa9cd9758249] <1.8> 438: 439: * Add dedicated callback function for runas_default sudoers setting 440: that only sets runas_pw if no runas user or group was specified by 441: the user. 442: [3fb4b18525de] <1.8> 443: 444: 2011-08-09 Todd C. Miller <Todd.Miller@courtesan.com> 445: 446: * Update Finish, Polish, Russian and Ukrainian translations from 447: translationproject.org. 448: [0fcd8f6aff0a] <1.8> 449: 450: * Makefile.in: 451: Go back to using a callback for runas_default to keep runas_pw in 452: sync. This is needed to make per-entry runas_default settings work 453: with LDAP-based sudoers. Instead of declaring it a callback in 454: def_data.in, sudo and testsudoers poke sudo_defs_table[] which is a 455: bit naughty, but avoids requiring stub functions in visudo and the 456: tests. 457: [4e8e70832f06] <1.8> 458: 459: 2011-08-05 Todd C. Miller <Todd.Miller@courtesan.com> 460: 461: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 462: Regen pot files 463: [ca5c58c599a6] <1.8> 464: 465: * Makefile.in: 466: Add check for out of date message catalogs when doing "make dist". 467: [36414e5c762b] <1.8> 468: 469: 2011-08-02 Todd C. Miller <Todd.Miller@courtesan.com> 470: 471: * configure, configure.in: 472: Make sure compiler supports static-libgcc before using it. 473: [6c98e8809291] <1.8> 474: 475: 2011-08-01 Todd C. Miller <Todd.Miller@courtesan.com> 476: 477: * Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc 478: [a0a3a3fa6470] <1.8> 479: 480: 2011-07-30 Todd C. Miller <Todd.Miller@courtesan.com> 481: 482: * Add new Russian sudo translation from translationproject.org and 483: rebuild the other translation files. 484: [e953d7d1ca6d] <1.8> 485: 486: 2011-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 487: 488: * Update Finish and Polish translations from translationproject.org 489: [17e408d73c85] <1.8> 490: 491: * Go back to escaping the command args for "sudo -i" and "sudo -s" 492: before calling the plugin. Otherwise, spaces in the command args 493: are not treated properly. The sudoers plugin will unescape non- 494: spaces to make matching easier. 495: [f666191a4e80] <1.8> 496: 497: 2011-07-28 Todd C. Miller <Todd.Miller@courtesan.com> 498: 499: * Fix some potential problems found by the clang static analyzer, none 500: serious. 501: [c1ab4b940980] <1.8> 502: 503: * Updated Ukranian and Chinese (simplified) po files from 504: translationproject.org 505: [792a66672715] <1.8> 506: 507: 2011-07-27 Todd C. Miller <Todd.Miller@courtesan.com> 508: 509: * Updated Polish translation from translationproject.org 510: [5f434cc04482] <1.8> 511: 512: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 513: Rebuild pot files 514: [639230dbd741] <1.8> 515: 516: * Don't try to audit failure if the runas user does not exist. We 517: don't have the user's command at this point so there is nothing to 518: audit. Add a NULL check in audit_success() and audit_failure() just 519: to be on the safe side. 520: [2bfb96a32b00] <1.8> 521: 522: * Add -g to CFLAG for PIE builds. 523: [e4c94977ca4e] <1.8> 524: 525: 2011-07-25 Todd C. Miller <Todd.Miller@courtesan.com> 526: 527: * Remove fallback to per-group lookup when matching groups in sudoers. 528: The sudo front-end will now use getgrouplist() to get the user's 529: list of groups if getgroups() fails or returns zero groups so we 530: always have a list of the user's groups. For systems with 531: mbr_check_membership() which support more that NGROUPS_MAX groups 532: (Mac OS X), skip the call to getgroups() and use getgrouplist() so 533: we get all the groups. 534: [168d6d4a386b] <1.8> 535: 536: 2011-07-22 Todd C. Miller <Todd.Miller@courtesan.com> 537: 538: * Fix setgroups() fallback code on EINVAL. 539: [dd1310945ab3] <1.8> 540: 541: * Fix two PERM_INITIAL cases that were still using user_gids. 542: [d497d0d47a23] <1.8> 543: 544: * Add Polish sudo message catalog 545: [1a0aa3f9f179] <1.8> 546: 547: * user_group is no longer used, remove it 548: [379185a76094] <1.8> 549: 550: 2011-07-21 Todd C. Miller <Todd.Miller@courtesan.com> 551: 552: * Add Polish translation from translationproject.org 553: [2e7cdfe4ef41] <1.8> 554: 555: * Add a wrapper for setgroups() that trims off extra groups and 556: retries if setgroups() fails. Also add some missing addrefs for 557: PERM_USER and PERM_FULL_USER. 558: [bacb4170a510] <1.8> 559: 560: * configure, configure.in: 561: Instead of keeping separate groups and gids arrays, create struct 562: group_info and use it to store both, along with a count for each. 563: Cache group info on a per-user basis using getgrouplist() to get the 564: groups. We no longer need special to special case the user or list 565: user for user_in_group() and thus no longer need to reset the groups 566: list when listing another user. 567: [f1d8962821a0] <1.8> 568: 569: * Don't rely on NULL since we don't include a header for it. 570: [ed46286f848b] <1.8> 571: 572: * Fix typo 573: [a38b8fbb0e70] <1.8> 574: 575: * Do not shadow global sudo_mode with a local variable in set_cmnd() 576: [8e462ebafea4] <1.8> 577: 578: 2011-07-17 Todd C. Miller <Todd.Miller@courtesan.com> 579: 580: * bash 2.x doesd not support the -l flag and exits with an error if it 581: is specified so use --login instead. This causes an error with bash 582: 1.x (which uses -login instead) but this version is hopefully less 583: used than 2.x. 584: [73020a67b9d5] <1.8> 585: 586: * Add Polish translation from translationproject.org 587: [8cac0da9ffb1] <1.8> 588: 589: 2011-07-13 Todd C. Miller <Todd.Miller@courtesan.com> 590: 591: * Make error strings translatable. 592: [d1ff594f27b5] <1.8> 593: 594: * Only run configure with --with-pam-login for RHEL 5 and above. 595: [2f1a0ff5230e] <1.8> 596: 597: * Fix typo in summary 598: [1e1d7dcae9ab] <1.8> 599: 600: 2011-07-11 Todd C. Miller <Todd.Miller@courtesan.com> 601: 602: * Add missing logwrap.c 603: [abcd28c194d2] <1.8> 604: 605: * Split out log file word wrap code into its own file and add unit 606: tests. Fixes an off-by one in the word wrap when the log line 607: length matches loglinelen. 608: [0ae1c7aa9ef1] <1.8> 609: 610: 2011-07-05 Todd C. Miller <Todd.Miller@courtesan.com> 611: 612: * For SuSE, only use /usr/lib64 as libexec if generating 64-bit 613: binaries. 614: [4448fa1c639f] <1.8> 615: 616: * Fix build error when --without-noexec configure option is used. 617: [f6bfd748ae45] <1.8> 618: 619: * configure, configure.in: 620: Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX 621: 5.3 and above. 622: [9d957ae1840d] <1.8> 623: 624: 2011-07-03 Todd C. Miller <Todd.Miller@courtesan.com> 625: 626: * NEWS, doc/UPGRADE: 627: Document group lookup change and possible side effects. 628: [fe4b2d2701b2] <1.8> 629: 630: 2011-07-01 Todd C. Miller <Todd.Miller@courtesan.com> 631: 632: * Resolve the list of gids passed in from the sudo frontend (the 633: result of getgroups()) to names and store both the group names and 634: ids in the sudo_user struct. When matching groups in the sudoers 635: file, match based on the names in the groups list first and only do 636: a gid-based match when we absolutely have to. By matching on the 637: group name (as it is listed in sudoers) instead of id (which we 638: would have to resolve) we save a lot of group lookups for sudoers 639: files with a lot of groups in them. 640: [c10d208bd7e5] <1.8> 641: 642: 2011-06-29 Todd C. Miller <Todd.Miller@courtesan.com> 643: 644: * NEWS: 645: Update for 1.8.2rc5 646: [f6a3aa2edf7a] <1.8> 647: 648: 2011-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 649: 650: * Workaround for "sudo -i command" and newer versions of bash which 651: don't go into login mode when -c is specified unless -l is too. 652: [381e74d35006] <1.8> 653: 654: 2011-06-23 Todd C. Miller <Todd.Miller@courtesan.com> 655: 656: * Rewrite logfile word wrapping code to be more straight-forward and 657: actually wrap at the correct place. 658: [8a7862d6a82f] <1.8> 659: 660: 2011-06-22 Todd C. Miller <Todd.Miller@courtesan.com> 661: 662: * NEWS: 663: Fix typo 664: [2456ad2ad3e3] <1.8> 665: 666: * NEWS: 667: Mention use_pty bug fix 668: [f4eab5193452] <1.8> 669: 670: * Set use_pty=true in command details when use_pty is set in sudoers. 671: From Ludwig Nussel 672: [abaafc5793d9] <1.8> 673: 674: 2011-06-20 Todd C. Miller <Todd.Miller@courtesan.com> 675: 676: * Sync Chinese (simplified) PO files from translationproject.org 677: [a4cf84dd9ddf] <1.8> 678: 679: 2011-06-18 Todd C. Miller <Todd.Miller@courtesan.com> 680: 681: * Add Danish translation from translationproject.org and add missing 682: Basque mo files. 683: [672b88adcc34] <1.8> 684: 685: * Makefile.in, configure, configure.in: 686: No longer need to specify LINGUAS in configure, "make install-nls" 687: now just installs all the .mo files it finds. 688: [c226a39ece48] <1.8> 689: 690: 2011-06-17 Todd C. Miller <Todd.Miller@courtesan.com> 691: 692: * Build CONTRIBUTORS from newly-added contributors.pod 693: [b8871dd293ff] <1.8> 694: 695: * Rework the wording in the leading paragraph 696: [d8b081dedeb3] <1.8> 697: 698: 2011-06-16 Todd C. Miller <Todd.Miller@courtesan.com> 699: 700: * Add a CONTRIBUTORS file with the names of folks who have contributed 701: code or patches to sudo since I started maintaining it (plus the 702: original authors). 703: [8b064e8996af] <1.8> 704: 705: 2011-06-13 Todd C. Miller <Todd.Miller@courtesan.com> 706: 707: * Preserve SHELL variable for "sudo -s". Otherwise we can end up with 708: a situation where the SHELL variable and the actual shell being run 709: do not match. 710: [8f5bb61a8b76] <1.8> 711: 712: 2011-06-10 Todd C. Miller <Todd.Miller@courtesan.com> 713: 714: * configure, configure.in: 715: Only enable Solaris project support when setproject() is present in 716: libproject. 717: [bf370ff3c194] <1.8> 718: 719: * Explicitly set mode and owner of /etc/sudoers instead of relying on 720: "cp -p" to work in the postinstall script. On AIX 6.1 at least the 721: postinstall script runs before the final file permissions are set. 722: [7a4a87405349] <1.8> 723: 724: * Refer the user to the "Command Environment" section in description 725: of sudo's -i option. 726: [1a063eaf9670] <1.8> 727: 728: * Fix typo 729: [442c50370c44] <1.8> 730: 731: * If there is no old dependency for an object file, use the MANIFEST 732: to find its source. 733: [d95c77ad283f] <1.8> 734: 735: * Remove dependency for getgrouplist.lo as we don't ship that source 736: file. 737: [bbede77e6256] <1.8> 738: 739: * Do not declare yyparse() static as the actual function generated by 740: yacc is extern. 741: [8e615bd15a4c] <1.8> 742: 743: * Makefile.in: 744: Remove locale files in "make uninstall" 745: [9791be90d5ac] <1.8> 746: 747: 2011-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 748: 749: * configure.in: 750: Add Basque translation and sync Finish and Ukranian translations. 751: [64af34789164] <1.8> 752: 753: * NEWS: 754: Update PAM change to reflect latest checkin. 755: [657cddf2077a] <1.8> 756: 757: * configure, configure.in: 758: FreeBSD no longer needs the main sudo binary to link with -lpam now 759: that plug-ins are loaded with RTLD_GLOBAL. 760: [573a6f4b29af] <1.8> 761: 762: * Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes 763: problems with pam modules not having access to symbols provided by 764: libpam on some platforms. Affects FreeBSD and SLES 10 at least. 765: [4ec864fdba46] <1.8> 766: 767: * Makefile.in: 768: Move xgettext invocation out of update-po target into update-pot 769: [421ac1a073ea] <1.8> 770: 771: 2011-06-04 Todd C. Miller <Todd.Miller@courtesan.com> 772: 773: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 774: Regenerate .pot files for 1.8.2rc2 775: [d2a891e3d3dd] <1.8> 776: 777: * Makefile.in: 778: Move nls targets to the top level Makefile so the paths in the pot 779: file are saner 780: [6c256cb77f78] <1.8> 781: 782: * NEWS: 783: Update 1.8.2 news 784: [17bd04278b04] <1.8> 785: 786: * Add compiled version of sudo Finish translation 787: [ff9d20a02aa0] <1.8> 788: 789: * Update MANIFEST with .po and .mo files Rebuild sudoers fi and uk .mo 790: files 791: [60c4f3b3829c] <1.8> 792: 793: * configure, configure.in: 794: Add Finish translation from translationproject.org 795: [ade788a35521] <1.8> 796: 797: * The group named by exempt_group should not have a % prefix. 798: [1f74c691c1e1] <1.8> 799: 800: * Fix typo; "Defaults group_plugin" not "Defaults sudo_plugin" 801: [58d36c0e76f9] <1.8> 802: 803: * Fix compressed io log corruption in background mode by using _exit() 804: instead of exit() to avoid flushing buffers twice. 805: 806: Improved background mode support. When not allocating a pty, the 807: command is run in its own process group. This prevents write access 808: to the tty. When running in a pty, stdin is not hooked up and we 809: never read from /dev/tty, which results in similar behavior. 810: [fe50d6a5c5b9] <1.8> 811: 812: 2011-05-31 Todd C. Miller <Todd.Miller@courtesan.com> 813: 814: * Clean up regress files Generate proper dependencies for regress objs 815: in compat 816: [264196584549] <1.8> 817: 818: * Add missing dependency for check_fill.o. 819: [c41f4e6ff078] <1.8> 820: 821: 2011-05-30 Todd C. Miller <Todd.Miller@courtesan.com> 822: 823: * INSTALL, configure, configure.in: 824: Add support for --enable-nls[=location] 825: [0ea8e7bd1739] <1.8> 826: 827: 2011-05-28 Todd C. Miller <Todd.Miller@courtesan.com> 828: 829: * Include gettext.h 830: [fe8bab6403c6] <1.8> 831: 832: * Quiet gcc warnings. 833: [aa16d09710a7] <1.8> 834: 835: * configure, configure.in: 836: Don't install .mo files if gettext was not found. 837: [c6b233e829aa] <1.8> 838: 839: 2011-05-27 Todd C. Miller <Todd.Miller@courtesan.com> 840: 841: * Always allocate a pty when running a command in the background but 842: call setsid() after forking to make sure we don't end up with a 843: controlling tty. 844: [77c6b2923714] <1.8> 845: 846: * Add missing space between command name and the first command line 847: argument. 848: [d0a36b9c0f38] <1.8> 849: 850: * Quiet a compiler warning on some platforms. 851: [654e76cf0574] <1.8> 852: 853: * README file that directs people to translationproject.org 854: [5545e9a5ae37] <1.8> 855: 856: * Sync translations with TP 857: [b054ce577022] <1.8> 858: 859: * Makefile.in: 860: Add 'sync-po' target to top-level Makefile to rsync the po files 861: from translationproject.org. 862: [87a5011b0410] <1.8> 863: 864: * install nls files from install target 865: [a3feba9ef323] <1.8> 866: 867: * Makefile.in: 868: Include .mo files in sudo binary packags. 869: [bc3ee7e7fb44] <1.8> 870: 871: * configure, configure.in: 872: Add simplified chinese translation 873: [c22e6842c766] <1.8> 874: 875: 2011-05-26 Todd C. Miller <Todd.Miller@courtesan.com> 876: 877: * configure, configure.in: 878: Add ukranian translation 879: [0bb9e6437f0f] <1.8> 880: 881: * refer to siglist.c, not ./siglist.c since not all makes will treat 882: foo and ./foo the same. 883: [909051ff6061] <1.8> 884: 885: * Set def_preserve_groups before searching for the command when the -P 886: flag is specified. 887: [08e9378f50e4] <1.8> 888: 889: * Makefile.in: 890: Add dependency for siglist.lo in compat. This is a generated file 891: so "make depend" needs to depend on it. 892: [e6c0daf36af0] <1.8> 893: 894: * More dependency fixes. 895: [7fed03624689] <1.8> 896: 897: * Fix a few dependencies. 898: [7cb86c721961] <1.8> 899: 900: * Place compiled mo files in the src dir, not the build dir. When 901: installing compiled mo files, display a status message. 902: [b87aa18a9968] <1.8> 903: 904: 2011-05-25 Todd C. Miller <Todd.Miller@courtesan.com> 905: 906: * Tivoli Directory Server requires that seconds be present in a 907: timestamp, even though RFC 4517 states that they are optional. 908: [47ebf110ea7a] <1.8> 909: 910: * Add missing bit of copyright 911: [d05d28a91bc4] <1.8> 912: 913: * Mention cycle detection warnings 914: [ee8231aa1aed] <1.8> 915: 916: * When checking aliases, also check the contents of the alias in case 917: there are problems with an alias that is referenced inside another. 918: Replace the self reference check with real alias cycle detection. 919: [abcfe1bc95d8] <1.8> 920: 921: * Set errno to ELOOP in alias_find() if there is a cycle. Set errno to 922: ENOENT in alias_find() and alias_remove() if the entry could not be 923: found. 924: [e73d169f4e9b] <1.8> 925: 926: * Increment alias_seqno before calls to alias_remove_recursive() to 927: avoid false positives with the alias loop detection. Fixes spurious 928: warnings about unused aliases when they are nested. 929: [ac094820ef19] <1.8> 930: 931: * add mkdep.pl 932: [3721e9654ba6] <1.8> 933: 934: * Add dependency on convenience libs to binaries 935: [8a4db8226dfe] <1.8> 936: 937: * Makefile.in: 938: mkdep.pl only works when run from the src dir 939: [2480427a0680] <1.8> 940: 941: * Makefile.in: 942: Auto-generate Makefile dependencies with a perl script. 943: [ef5f56907d97] <1.8> 944: 945: 2011-05-23 Todd C. Miller <Todd.Miller@courtesan.com> 946: 947: * If the user specifies a runas group via sudo's -g option that 948: matches the runas user's group in the passwd database and that group 949: is not denied in the Runas_Spec, allow it. Thus, if user root's gid 950: in /etc/passwd is 0, then "sudo -u root -g root id" is allow even if 951: no groups are present in the Runas_Spec. 952: [942e1e7c5090] <1.8> 953: 954: 2011-05-22 Todd C. Miller <Todd.Miller@courtesan.com> 955: 956: * NEWS: 957: Mention what is new in 1.8.2 (for now) 958: [d44b26eceee5] <1.8> 959: 960: * Add dependencies on gettext.h 961: [32c61c6af852] <1.8> 962: 963: * Fix install-nls target with HP-UX sh when gettext is not present. 964: [3441cece9638] <1.8> 965: 966: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat, 967: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat, 968: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat, 969: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in: 970: Regen for sudo 1.8.2 971: [9ea124b542cc] <1.8> 972: 973: 2011-05-20 Todd C. Miller <Todd.Miller@courtesan.com> 974: 975: * plugins/sudoers/po/sudoers.pot, src/po/sudo.pot: 976: regenerate .pot files for lbuf changes 977: [a8a9cc62c3a5] <1.8> 978: 979: * configure, configure.in: 980: Add missing "checking" message for gettext when using the cache. 981: [4136bc346576] <1.8> 982: 983: * Add primitive format string support to the lbuf code to make 984: translations simpler. 985: [22fc74618d09] <1.8> 986: 987: * configure, configure.in, plugins/sudoers/po/sudoers.pot, 988: src/po/sudo.pot: 989: Bump version to 1.8.2 990: [999de1ac5b3e] <1.8> 991: 992: * Add message catalog template files for sudo and the sudoers module. 993: [6afad75e7afa] <1.8> 994: 995: * configure.in: 996: Add gettext.h convenience header. This is similar to but distinct 997: from the one included with the gettext package. 998: [5ae5a86e0d06] <1.8> 999: 1000: * configure, configure.in: 1001: Add checks for nroff -c and -Tascii flags 1002: [580c21905280] <1.8> 1003: 1004: * configure, configure.in: 1005: Add check for HP bundled C Compiler (which cannot create shared 1006: libs) 1007: [34f616cbb0f3] <1.8> 1008: 1009: * Fix C format warnings. 1010: [f20a43a817f0] <1.8> 1011: 1012: * Add __printflike 1013: [76bf8a4bf075] <1.8> 1014: 1015: * Translate help / usage strings. 1016: [16c5b7902d4c] <1.8> 1017: 1018: * Set --msgid-bugs-address to the bugzilla url 1019: [3e3cfa7b4ceb] <1.8> 1020: 1021: * INSTALL, Makefile.in, README, configure, configure.in: 1022: Add scaffolding to update .po files and install .mo files. 1023: [a51e60b35e47] <1.8> 1024: 1025: * Minor warning/error cleanup 1026: [593144ac87ff] <1.8> 1027: 1028: * configure.in: 1029: Emulate ngettext for the non-nls case 1030: [7cdf82de4dee] <1.8> 1031: 1032: * Do not mark untranslatable strings for translation 1033: [088271ed02d0] <1.8> 1034: 1035: * Use ROOT_UID not 0. 1036: [f901fa2fdaf2] <1.8> 1037: 1038: * Minor warning/error message cleanup 1039: [b99c7ef46236] <1.8> 1040: 1041: * cannot -> "unable to" in warning/error messages can't -> "unable to" 1042: in warning/error messages 1043: [5119140fabc7] <1.8> 1044: 1045: * configure, configure.in: 1046: FreeBSD needs the main sudo executable to link with -lpam when 1047: loading dynaic pam modules for some reason. 1048: [738b6778a505] <1.8> 1049: 1050: * We don't want to translate debugging messages. 1051: [357a575c2dfd] <1.8> 1052: 1053: * configure, configure.in: 1054: Add calls to bindtextdomain() and textdomain() Currently there are 1055: two domains, one for the sudo front-end and one for the sudoers 1056: plugin and its associated utilities. 1057: [907f39439d80] <1.8> 1058: 1059: * configure, configure.in: 1060: Fix caching of libc gettext check. 1061: [e229c21f412f] <1.8> 1062: 1063: * Mark defaults descriptions for translation 1064: [65e03d1f8203] <1.8> 1065: 1066: * NEWS: 1067: Update for sudo 1.8.1p2 1068: [89c31f2aa11e] <1.8> 1069: 1070: * Quiet compiler warning when SELinux is enabled. 1071: [51b1d7c8aa86] <1.8> 1072: 1073: * dd missing includes of libintl.h. 1074: [25662143d36d] <1.8> 1075: 1076: * Fix gettext marker. 1077: [7618856ba5de] <1.8> 1078: 1079: * Include libint.h where needed. 1080: [cc256b297b9d] <1.8> 1081: 1082: * Prepare sudoers module messages for translation. 1083: [1b7f0bbaa55f] <1.8> 1084: 1085: * Only check gid of sudoers file if it is group-readable. 1086: [f3cae943f35a] <1.8> 1087: 1088: * For AIX, keep calling authenticate() until reenter reaches 0. 1089: [e412676bac73] <1.8> 1090: 1091: * configure, configure.in: 1092: Cache the status of the initial gettext() check. 1093: [c32281768c0f] <1.8> 1094: 1095: * INSTALL, configure, configure.in: 1096: Add --disable-nls flag and improve checks for gettext. 1097: [b39674c1e538] <1.8> 1098: 1099: * configure, configure.in: 1100: When building with gcc on HP-UX, use -march=1.1 to produce portable 1101: binaries on a pa-risc2 host. Previously, the +Dportable option was 1102: used for the HP-UX C compiler but gcc always produced native 1103: binaries. 1104: [41351c23ad41] <1.8> 1105: 1106: * Prepare sudo front end messages for translation. 1107: [7807d6f74dac] <1.8> 1108: 1109: * configure, configure.in: 1110: Add initial scaffolding to support localization via gettext() 1111: [cdbbff7e6376] <1.8> 1112: 1113: 2011-05-19 Todd C. Miller <Todd.Miller@courtesan.com> 1114: 1115: * doc/license.pod: 1116: update copyright year 1117: [d681661f03cc] <1.8> 1118: 1119: * INSTALL, README: 1120: No need to include version number at the top of these files. 1121: [7e11f673f773] <1.8> 1122: 1123: * README: 1124: This is sudo 1.8.1 not 1.8.0 1125: [4d674f230d8a] <1.8> 1126: 1127: 2011-05-04 Todd C. Miller <Todd.Miller@courtesan.com> 1128: 1129: * Don't let the fnmatch/glob macros expand the function prototype. 1130: [d449e9a8f447] <1.8> 1131: 1132: 2011-05-03 Todd C. Miller <Todd.Miller@courtesan.com> 1133: 1134: * Resolve namespace collisions on HP-UX ia64 and possibly others by 1135: adding a rpl_ prefix to our fnmatch and glob replacements and 1136: #defining rpl_foo to foo in the header files. 1137: [d23889375b21] <1.8> 1138: 1139: 2011-04-29 Todd C. Miller <Todd.Miller@courtesan.com> 1140: 1141: * Split ALL, ROLE and TYPE into their own actions. Since you can only 1142: have #ifdefs inside of braces, ROLE and TYPE use a naughty goto in 1143: the non-SELinux case. This is safe because the actions are in one 1144: big switch() statement. 1145: [0bd9b7e37ab1] <1.8> 1146: 1147: * Fix regexp for matching a CIDR-style IPv4 netmask. From Marc Espie. 1148: [8dec97b359e0] <1.8> 1149: 1150: * askpass moved from sudoers to sudo.conf in sudo 1.8.0 1151: [1001d87d82ed] <1.8> 1152: 1153: * Remove obsolete warning about runas_default and ordering. Move 1154: syslog facility and priority lists into the section where the 1155: relevant options are described. 1156: [1286b9624021] <1.8> 1157: 1158: 2011-04-26 Todd C. Miller <Todd.Miller@courtesan.com> 1159: 1160: * Fix SIA support; we no longer have access to the real argc and argv 1161: so allocate space for a fake one and use the argv passed to the 1162: plugin with "sudo" for argv[0]. 1163: [7c11eeffb91c] <1.8> 1164: 1165: * Remove useless realloc when trying to get the buffer size right. 1166: [58128e7f4e28] <1.8> 1167: 1168: * Be explicit when setting euid to 0 before call to setreuid(0, 0) 1169: [95769a564ab8] <1.8> 1170: 1171: 2011-04-18 Todd C. Miller <Todd.Miller@courtesan.com> 1172: 1173: * NEWS: 1174: sudo 1.8.1p1 updates 1175: [de3d688b5bb1] <1.8> 1176: 1177: * configure, configure.in: 1178: Need to do checks for krb5_verify_user, krb5_init_secure_context and 1179: krb5_get_init_creds_opt_alloc regardless of whether or 1180: notkrb5-config is present. 1181: [456c4a9cd5d6] <1.8> 1182: 1183: 2011-04-15 Todd C. Miller <Todd.Miller@courtesan.com> 1184: 1185: * Work around weird AIX saved uid semantics on setuid() and 1186: setreuid(). On AIX, setuid() will only set the saved uid if the euid 1187: is already 0. 1188: [5d0a69e9d181] <1.8> 1189: 1190: 2011-04-14 Todd C. Miller <Todd.Miller@courtesan.com> 1191: 1192: * update copyright year 1193: [fa8da6d55783] <1.8> 1194: 1195: * Treat a missing includedir like an empty one and do not return an 1196: error. 1197: [5fd9fe004728] <1.8> 1198: 1199: 2011-04-12 Todd C. Miller <Todd.Miller@courtesan.com> 1200: 1201: * Fix ARCH setting in cross-compile Solaris packages. 1202: [8ce40940f6c9] <1.8> 1203: 1204: * Fix aix version setting. 1205: [02a9e25d46ba] <1.8> 1206: 1207: * Remove extraneous parens in LDAP filter when sudoers_search_filter 1208: is enabled that causes a search error. From Matthew Thomas. 1209: [b67be9b51ec6] <1.8> 1210: 1211: 2011-04-11 Todd C. Miller <Todd.Miller@courtesan.com> 1212: 1213: * Correct sizeof() to fix test failure. 1214: [a11b89fd13f9] <1.8> 1215: 1216: * "install" target should depend on "install-dirs". Fixes "make -j" 1217: problem and closes bz #487. From Chris Coleman. 1218: [06ab0558f848] <1.8> 1219: 1220: 2011-04-09 Todd C. Miller <Todd.Miller@courtesan.com> 1221: 1222: * .hgtags: 1223: Added tag SUDO_1_8_1 for changeset 0ed6281995f0 1224: [543d41a163e9] <1.8> 1225: 1226: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat, 1227: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat, 1228: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat, 1229: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in: 1230: Regen man pages for 1.8.1 1231: [0ed6281995f0] [SUDO_1_8_1] <1.8> 1232: 1233: 2011-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 1234: 1235: * Add HAVE_RFC1938_SKEYCHALLENGE 1236: [c0d7eb39799d] <1.8> 1237: 1238: 2011-04-06 Todd C. Miller <Todd.Miller@courtesan.com> 1239: 1240: * Mention plugin loading and libgcc changes 1241: [b74929cba37c] <1.8> 1242: 1243: * Load plugins after parsing arguments and potentially printing the 1244: version. That way, an error loading or initializing a plugin 1245: doesn't break "sudo -h" or "sudo -V". 1246: [c1ecb5979cf0] <1.8> 1247: 1248: * Makefile.in: 1249: When using a sub-shell to invoke the sub-make, exec make instead of 1250: running it inside the shell to avoid an extra process. 1251: [9439f016c993] <1.8> 1252: 1253: * Stop testing unspecified behavior in fnmatch Make glob test more 1254: portable 1255: [87a91d76fbff] <1.8> 1256: 1257: * No need to add current dir to include path and having it breaks the 1258: test programs that expect to get the system glob.h and fnmatch.h 1259: [3ae7f9e7b710] <1.8> 1260: 1261: * configure, configure.in: 1262: Fix and document --with-plugindir; partially from Diego Elio Petteno 1263: [0220a0c2606f] <1.8> 1264: 1265: * Fix fnmatch and glob tests to not use hard-coded flag values in the 1266: input file. Link test programs with libreplace so we get our 1267: replacement verions as needed. 1268: [66bab80241e0] <1.8> 1269: 1270: * Makefile.in: 1271: If make in a subdir fails, fail the target in the upper level 1272: Makefile too. Adapted from a patch from Diego Elio Petteno 1273: [bc35b7813507] <1.8> 1274: 1275: * configure, configure.in: 1276: Add check for NetBSD-style 4-argument skeychallenge() as Gentoo also 1277: has this. Adapted from a patch from Diego Elio Petteno 1278: [bb6228f484b9] <1.8> 1279: 1280: * Make SUDOERS_LDFLAGS reference $(LDFLAGS) instead of using @LDFLAGS@ 1281: directly. 1282: [47e6d5fadc6d] <1.8> 1283: 1284: * configure, configure.in: 1285: Fix warnings when -without-skey, --without-opie, --without-kerb4, 1286: --without-kerb5 or --without-SecurID were specified. 1287: [1b75035dd129] <1.8> 1288: 1289: * Add plugins/sudoers/sudoers_version.h 1290: [1d470c6033ca] <1.8> 1291: 1292: * configure, configure.in: 1293: Back out the --with-libpath addition to SUDOERS_LDFLAGS since that 1294: now include LDFLAGS in the sudoers Makefile.in. Add missing settng 1295: of @LDFLAGS@ in plugin Makefile.in files. 1296: [dd237f43aa12] <1.8> 1297: 1298: 2011-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 1299: 1300: * Mention %#gid support in User_List and Runas_List 1301: [37e259b9181b] <1.8> 1302: 1303: * Keep track of sudoers grammar version and report it in the -V 1304: output. 1305: [0e0b891dd8a4] <1.8> 1306: 1307: * Add multiple inclusion guard 1308: [ec6884f51ea8] <1.8> 1309: 1310: * configure, configure.in: 1311: The --with-libpath option now adds to SUDOERS_LDFLAGS as well as 1312: LDFLAGS. Remove old -static hack for HP-UX < 9. Add LTLDFLAGS and 1313: set it to -Wc,-static-libgcc if not using GNU ld so we don't 1314: have a dependency on the shared libgcc in sudoers.so. 1315: [28d03f3eb0d2] <1.8> 1316: 1317: * Fix typo; from Petr Uzel 1318: [d19b9bd92bd3] <1.8> 1319: 1320: 2011-04-01 Todd C. Miller <Todd.Miller@courtesan.com> 1321: 1322: * In dump-only mode, use "root" as the default username instead of 1323: "nobody" as the latter may not be available on all systems. 1324: [b304111616dd] <1.8> 1325: 1326: 2011-03-31 Todd C. Miller <Todd.Miller@courtesan.com> 1327: 1328: * Remove NewArgv/NewArgc, they are no longer needed. 1329: [c0a36a42a68c] <1.8> 1330: 1331: * Fix setting of user_args 1332: [529e79ea95d1] <1.8> 1333: 1334: * Add '!' token to lex tracing 1335: [aef295d428e7] <1.8> 1336: 1337: * Use group bin in test, not wheel as most systems have the bin group 1338: but the same is no longer true of wheel. 1339: [350347f09c1a] <1.8> 1340: 1341: * Avoid using pre or post increment in a parameter to a ctype(3) 1342: function as it might be a macro that causes the increment to happen 1343: more than once. 1344: [8a94ebdd53b8] <1.8> 1345: 1346: 2011-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 1347: 1348: * Strip off the beta or release candidate version when building AIX 1349: packages. 1350: [00ad950764e2] <1.8> 1351: 1352: * configure, configure.in: 1353: We need to include OSDEFS in CFLAGS when doing the utmp/utmpx 1354: structure checks for glibc which only has __e_termination visible 1355: when _GNU_SOURCE is *not* defined. 1356: [1d58420a4a4a] <1.8> 1357: 1358: * getuserattr(user, ...) will fall back to the "default" entry 1359: automatically, there's no need to check "default" manually. 1360: [cefffa82967d] <1.8> 1361: 1362: * Document parser changes. 1363: [5038238f60eb] <1.8> 1364: 1365: 2011-03-29 Todd C. Miller <Todd.Miller@courtesan.com> 1366: 1367: * Makefile.in: 1368: If there is an existing sudoers file, only install if it passes a 1369: syntax check. 1370: [b1e4c9c56fe0] <1.8> 1371: 1372: * Add runasgroup support to testsudoers 1373: [30838590e9de] <1.8> 1374: 1375: * For "make check", keep going even if a test fails. 1376: [d3a72f67227e] <1.8> 1377: 1378: * More useful exit codes: 1379: * 0 - parsed OK and command matched. 1380: * 1 - parse error 1381: * 2 - command not matched 1382: * 3 - command denied 1383: [59301e0769cd] <1.8> 1384: 1385: * Document %#gid, and %:#nonunix_gid syntax. 1386: [39ee15af58e9] <1.8> 1387: 1388: * Add support to user_in_group() for treating group names that begin 1389: with a '#' as gids. 1390: [0eb19980cf5f] <1.8> 1391: 1392: * configure, configure.in: 1393: Add explicit check for struct utmpx.ut_exit.e_termination and struct 1394: utmpx.ut_exit.__e_termination. HP-UX uses the latter. Only update 1395: ut_exit if we detect one or the other. 1396: [ab5b665fc04b] <1.8> 1397: 1398: 2011-03-28 Todd C. Miller <Todd.Miller@courtesan.com> 1399: 1400: * Add back missing #include of config.h 1401: [9c82bec81018] <1.8> 1402: 1403: * Avoid a NULL deref on unrecognized escapes. Collapse %% -> % like 1404: strftime() does. 1405: [1ae630470f8a] <1.8> 1406: 1407: * Quote first argument to AC_DEFUN(); from Elan Ruusamae 1408: [c467e9e3b399] <1.8> 1409: 1410: 2011-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 1411: 1412: * add new sudoers tests 1413: [05f2a0924acc] <1.8> 1414: 1415: * Add test for a newline in the middle of a string when no line 1416: continuation character is used. 1417: [24b79be5822b] <1.8> 1418: 1419: * Use bitwise AND instead of modulus to check for length being odd. A 1420: newline in the middle of a string is an error unless a line 1421: continuation character is used. 1422: [65c468599688] <1.8> 1423: 1424: * Move lexer globals initialization into init_lexer. 1425: [07a1171a1853] <1.8> 1426: 1427: * Fix a potential crash when a non-regular file is present in an 1428: includedir. Fixes bz #452 1429: [5057cb9516e4] <1.8> 1430: 1431: * On some Linux systems, "uname -p" contains detailed processor info 1432: so check "uname -m" first and then "uname -p" if needed. Recognize 1433: PLD Linux. 1434: [56226c84a060] <1.8> 1435: 1436: 2011-03-25 Todd C. Miller <Todd.Miller@courtesan.com> 1437: 1438: * Don't need all sudoers.h here. 1439: [43b6ae5999c5] <1.8> 1440: 1441: * Print sudo version early, in case policy plugin init fails. 1442: [620f2d0ec4b1] <1.8> 1443: 1444: 2011-03-24 Todd C. Miller <Todd.Miller@courtesan.com> 1445: 1446: * Update to match change in input. 1447: [69540f84721d] <1.8> 1448: 1449: * Make an empty group or netgroup a syntax error. 1450: [4b85bddc494e] <1.8> 1451: 1452: * An empty group or netgroup should be a syntax error. 1453: [6ec796972eff] <1.8> 1454: 1455: * Check that uids work in per-user and per-runas Defaults Check that 1456: uids and gids work in a Command_Spec 1457: [68cf62353420] <1.8> 1458: 1459: * Test empty string in User_Alias and Command_Spec 1460: [017d487c31be] <1.8> 1461: 1462: * Allow a group ID in the User_Spec. 1463: [37e0bf69c8d8] <1.8> 1464: 1465: * Return an error for the empty string when a word is expected. Allow 1466: an ID for per-user or per-runas Defaults. 1467: [4c9020779582] <1.8> 1468: 1469: 2011-03-23 Todd C. Miller <Todd.Miller@courtesan.com> 1470: 1471: * Fix printing "User_Alias FOO = ALL" 1472: [97c9fd7caeb7] <1.8> 1473: 1474: 2011-03-22 Todd C. Miller <Todd.Miller@courtesan.com> 1475: 1476: * Better error message about invalid -C argument 1477: [2301e7a3835b] <1.8> 1478: 1479: * fix typo 1480: [c5acde62a309] <1.8> 1481: 1482: * Fix placement of equal size ('=') in user specification summary. 1483: [4d0ffef77ae4] <1.8> 1484: 1485: 2011-03-21 Todd C. Miller <Todd.Miller@courtesan.com> 1486: 1487: * update to match sudoers regress 1488: [0efb8dc9092a] <1.8> 1489: 1490: * Restore ability to define TRACELEXER and have trace output go to 1491: stderr. 1492: [441c8b372217] <1.8> 1493: 1494: * Restore old behavior of setting sawspace = TRUE for command line 1495: args when a line continuation character is hit to avoid causing 1496: problems for existing sudoers files. 1497: [963ded6ce070] <1.8> 1498: 1499: * Add test for line continuation and aliases 1500: [5703d11a3c46] <1.8> 1501: 1502: * Make test output line up nicely for parse vs. toke 1503: [15321ce2d7d9] <1.8> 1504: 1505: * plugins/sudoers/regress/testsudoers/test1.ok, 1506: plugins/sudoers/regress/testsudoers/test2.out, 1507: plugins/sudoers/regress/testsudoers/test2.sh, 1508: plugins/sudoers/regress/testsudoers/test3.ok, 1509: plugins/sudoers/regress/testsudoers/test3.sh, 1510: plugins/sudoers/regress/visudo/test1.ok, 1511: plugins/sudoers/regress/visudo/test1.sh: 1512: Move parser tests to sudoers directory and test the tokenizer output 1513: too. 1514: [111c1ccda334] <1.8> 1515: 1516: * If we match a rule anchored to the beginning of a line after parsing 1517: a line continuation character, return an ERROR token. It would be 1518: nicer to use REJECT instead but that substantially slows down the 1519: lexer. 1520: [67e54b14aa9d] <1.8> 1521: 1522: * Move LEXTRACE macro to toke.h so we can use it in yyerror(). 1523: [e6e04037deed] <1.8> 1524: 1525: * Make lex tracing settable at run-time in testsudoers via the -t 1526: flag. Trace output goes to stderr. Will be used by regress tests 1527: to check lexer. 1528: [a973f43cc0c2] <1.8> 1529: 1530: * Allow whitespace after the modifier in a Defaults entry. E.g. 1531: "Defaults: username set_home" 1532: [bf876c9fc5bb] <1.8> 1533: 1534: 2011-03-18 Todd C. Miller <Todd.Miller@courtesan.com> 1535: 1536: * Don't set CC when cross-compiling. 1537: [d3c33dcb02f2] <1.8> 1538: 1539: * Credit Matthew Thomas for the sudoers_search_filter changes. 1540: [2209b80664af] <1.8> 1541: 1542: * Add the .sym files to the MANIFEST 1543: [bb452b28a009] <1.8> 1544: 1545: * Update for sudo 1.8.1 beta 1546: [700d42d80e00] <1.8> 1547: 1548: * user_shell -> run_shell to avoid confusion with the user's SHELL 1549: variable. 1550: [451b96d5f97e] <1.8> 1551: 1552: * Save the controlling tty process group before suspending in pty 1553: mode. Previously, we assumed that the child pgrp == child pid 1554: (which is usually, but not always, the case). 1555: [b0841d861191] <1.8> 1556: 1557: * Add support for sudoers_search_filter setting in ldap.conf. This 1558: can be used to restrict the set of records returned by the LDAP 1559: query. 1560: [70c5f496e2b3] <1.8> 1561: 1562: 2011-03-17 Todd C. Miller <Todd.Miller@courtesan.com> 1563: 1564: * configure, configure.in: 1565: Remove the hack to disable -g in CFLAGS unless --with-devel 1566: [9459839f50ba] <1.8> 1567: 1568: * The '@' character does not normally need to be quoted. 1569: [e66c4c64e514] <1.8> 1570: 1571: * We normaly transition from GOTDEFS to STARTDEFS on whitespace, but 1572: if that whitespace is followed by a comma, we want to treat it as 1573: part of a list and not transition. 1574: [52ae2df9959d] <1.8> 1575: 1576: * Add check for whitespace when a User_List is used for a per-user 1577: Defaults entry. 1578: [44a4db95be86] <1.8> 1579: 1580: * Expand quoted name checks to cover recent fixes. 1581: [bd494b5c2bed] <1.8> 1582: 1583: * Fix parsing of double-quoted names in Defaults and Aliases which was 1584: broken in 601d97ea8792. 1585: [dfdd58c3eb3b] <1.8> 1586: 1587: * toke_util.c lives in $(srcdir) not $(devdir) 1588: [94f8f024782e] <1.8> 1589: 1590: 2011-03-16 Todd C. Miller <Todd.Miller@courtesan.com> 1591: 1592: * configure, configure.in: 1593: Update version to 1.8.1 1594: [531a7d520f18] <1.8> 1595: 1596: * Document major changes in 1.8.1 and add upgrade notes. 1597: [116821646140] <1.8> 1598: 1599: * Be careful not to deref user_stat if it is NULL. This cannot 1600: currently happen in sudo but might in other programs using the 1601: parser. 1602: [d72a9c7151c4] <1.8> 1603: 1604: * configure will not add -O2 to CFLAGS if it is already defined to add 1605: -O2 to the CFLAGS we pass in when PIE is being used. 1606: [2c7fe82be93d] <1.8> 1607: 1608: * Warn about the dangers of log_input and mention iolog_file and 1609: iolog_dir in the log_input and log_output descriptions. 1610: [edc6aa59aa45] <1.8> 1611: 1612: * sync with git version 1613: [b121cf739c77] <1.8> 1614: 1615: * It seems that h comes after i 1616: [99ad15015f05] <1.8> 1617: 1618: * Move log_input and log_output to their proper, sorted, location. 1619: Document set_utmp and utmp_runas. 1620: [216ce8b0ae1a] <1.8> 1621: 1622: * Save the controlling tty process group before suspending so we can 1623: restore it when we resume. Fixes job control problems on Linux 1624: caused by the previous attemp to fix resuming a shell when I/O 1625: logging not enabled. 1626: [dfe038f733be] <1.8> 1627: 1628: * Fix printing of the remainder after a newline. Fixes "sudo -l" 1629: output corruption that could occur in some cases. 1630: [ab2f0a629e0d] <1.8> 1631: 1632: * Add support for ut_exit 1633: [7039ec6a73fa] <1.8> 1634: 1635: * Add support for controlling whether utmp is updated and which user 1636: is listed in the entry. 1637: [1b008ce71eab] <1.8> 1638: 1639: * Fix typo; tupple vs. tuple 1640: [67bb5c67ae3d] <1.8> 1641: 1642: * For legacy utmp, strip the /dev/ prefix before trying to determine 1643: slot since the ttys file does not include the /dev/ prefix. 1644: [8f597114381d] <1.8> 1645: 1646: * Add check for _PATH_UTMP 1647: [fe7e2456f017] <1.8> 1648: 1649: * Adapt check_iolog_path to sessid changes 1650: [3016201869b6] <1.8> 1651: 1652: * Redo utmp handling. If no getutent()/getutxent() is available, 1653: assume a ttyslot-based utmp. If getttyent() is available, use that 1654: directly instead of ttyslot() so we don't have to do the stdin dup2 1655: dance. 1656: [817490c7c20e] <1.8> 1657: 1658: * Move utmp handling into utmp.c 1659: [e4729d9259e9] <1.8> 1660: 1661: * Update copyright years. 1662: [1065afc00233] <1.8> 1663: 1664: 2011-03-11 Todd C. Miller <Todd.Miller@courtesan.com> 1665: 1666: * Add "user_shell" boolean as a way to indicate to the plugin that the 1667: -s flag was given. 1668: [6e8bc49b7ea7] <1.8> 1669: 1670: * Move sessid out of sudo_user. 1671: [00d67d5ba894] <1.8> 1672: 1673: * Log the TSID even if it is not a simple session ID. 1674: [490cf0adae29] <1.8> 1675: 1676: * Document noexec in sample.sudo.conf and add back noexec_file section 1677: in sudoers with a note that it is deprecated. 1678: [c7a2d8d0c563] <1.8> 1679: 1680: * Fix running commands as non-root on systems where setreuid() changes 1681: the saved uid based on the effective uid we are changing to. 1682: [f3b27db56ba6] <1.8> 1683: 1684: 2011-03-10 Todd C. Miller <Todd.Miller@courtesan.com> 1685: 1686: * Move noexec path into sudo.conf now that sudo itself handles noexec. 1687: Currently can be configured in sudoers too but is now undocumented 1688: and will be removed in a future release. 1689: [9c5f64709994] <1.8> 1690: 1691: * Document "Path noexec ..." in sudo.conf. No longer document 1692: noexec_file in sudoers, it will be removed in a future release. 1693: [959fa6b5217b] <1.8> 1694: 1695: * Move noexec handling to sudo front-end where it is documented as 1696: being. 1697: [ef6cd4a40c61] <1.8> 1698: 1699: * Add support for disabling exec via solaris privileges. Includes 1700: preparation for moving noexec support out of sudoers and into front 1701: end as documented. 1702: [d9c05ba9a24f] <1.8> 1703: 1704: * Only export the symbols corresponding to the plugin structs. 1705: [cb07af1d9b39] <1.8> 1706: 1707: * Install plugins manually instead of using libtool. This works 1708: around a problem on AIX where libtool will install a .a file 1709: containing the .so file instead of the .so file itself. 1710: [1ccf5af58c05] <1.8> 1711: 1712: * Makefile.in: 1713: Move check into its own rule since some versions of make will run 1714: both targets as the default rule. 1715: [7159f37eb552] <1.8> 1716: 1717: * Update to libtool 2.2.10 1718: [9e49773b32b7] <1.8> 1719: 1720: * In handle_signals(), restart the read() on EINTR to make sure we 1721: keep up with the signal pipe. Don't return -1 on EAGAIN, it just 1722: means we have emptied the pipe. 1723: [dc2926097b2d] <1.8> 1724: 1725: * Reorder functions to quiet a compiler warning. 1726: [5201367e5db4] <1.8> 1727: 1728: * Use the Sun Studio C compiler on Solaris if possible 1729: [b8d43b423fb9] <1.8> 1730: 1731: 2011-03-08 Todd C. Miller <Todd.Miller@courtesan.com> 1732: 1733: * Fix default setting of osversion variable. 1734: [e12905851be5] <1.8> 1735: 1736: * Make two login_class entris consistent. 1737: [0671d7b204be] <1.8> 1738: 1739: * Add support for adding a utmp entry when allocating a new pty. 1740: Requires the BSD login(3) or SYSV/POSIX getutent()/getutxent(). 1741: Currently only creates a new entry if the existing tty has a utmp 1742: entry. 1743: [40ff30099e79] <1.8> 1744: 1745: * Avoid pulling in headers we don't need on Linux For getutx?id(), 1746: call setutx?ent() first and always call endutx?ent(). 1747: [b86f7a13aae9] <1.8> 1748: 1749: * Add some more libs to SUDOERS_LIBS instead of relying on them to be 1750: pulled in by SUDO_LIBS. 1751: [bcbd16ec56c6] <1.8> 1752: 1753: * Fix return value of "sudo -l command" when command is not allowed, 1754: broken in [c7097ea22111]. The default return value is now TRUE and 1755: a bad: label is used when permission is denied. Also fixed missing 1756: permissions restoration on certain errors. On error()/errorx(), the 1757: password and group files are now closed before returning. 1758: [757c941a47b2] <1.8> 1759: 1760: 2011-03-07 Todd C. Miller <Todd.Miller@courtesan.com> 1761: 1762: * Fix passing of login class back to sudo front end. 1763: [5e649de6b7f5] <1.8> 1764: 1765: * Add --osversion flag to specify OS instead of running "pp 1766: --probeonly" 1767: [8a03943ac5e8] <1.8> 1768: 1769: * Fix expr usage w/ GNU expr 1770: [bdecfa1f54fc] <1.8> 1771: 1772: 2011-03-06 Todd C. Miller <Todd.Miller@courtesan.com> 1773: 1774: * Fix exit value for validate and list mode. 1775: [6f8b20199935] <1.8> 1776: 1777: * Fix non-interactive mode with sudoers plugin. 1778: [cf5aca4fcbcf] <1.8> 1779: 1780: 2011-03-05 Todd C. Miller <Todd.Miller@courtesan.com> 1781: 1782: * sudoreplay can now find IDs other than %{seq} and display the 1783: session. 1784: [60396b417633] <1.8> 1785: 1786: * Add support for replaying sessions when iolog_file is set to 1787: something other than %{seq}. 1788: [1cd2baa74d56] <1.8> 1789: 1790: 2011-03-04 Todd C. Miller <Todd.Miller@courtesan.com> 1791: 1792: * If we are killed by a signal, display the name of the signal that 1793: got us. 1794: [1b38c4d42282] <1.8> 1795: 1796: * Move libs used for authentication from SUDO_LIBS to SUDOERS_LIBS 1797: where they belong. 1798: [78e97a921104] <1.8> 1799: 1800: * Fix bug in skey/opie check that could cause a shell warning. 1801: [f20229a04f30] <1.8> 1802: 1803: * No longer need sudo_getepw() stubs. 1804: [795631ac7db0] <1.8> 1805: 1806: 2011-03-03 Todd C. Miller <Todd.Miller@courtesan.com> 1807: 1808: * Fix exit value of "sudo -l command" in sudoers module. 1809: [4a05d6019b3d] <1.8> 1810: 1811: 2011-03-02 Todd C. Miller <Todd.Miller@courtesan.com> 1812: 1813: * Use fgets() not fgetln() for portability. 1814: [1f2050745096] <1.8> 1815: 1816: * Don't use the beta or release candidate version as the rpm release. 1817: [a5b049477646] <1.8> 1818: 1819: 2011-02-25 Todd C. Miller <Todd.Miller@courtesan.com> 1820: 1821: * Makefile.in: 1822: Adjust ChangeLog rule now that 1.8 is branched 1823: [a994ac361e44] <1.8> 1824: 1825: * .hgtags: 1826: Added tag SUDO_1_8_0 for changeset f6530d56f6ae 1827: [99a2b3801419] <1.8> 1828: 1829: 2011-02-25 Todd C. Miller <Todd.Miller@courtesan.com> 1830: 1831: * configure, configure.in: 1832: version 1.8.0 1833: [f6530d56f6ae] [SUDO_1_8_0] 1834: 1835: * NEWS: 1836: update sudo 1.8 section 1837: [f2ee2cf95d18] 1838: 1839: 2011-02-23 Todd C. Miller <Todd.Miller@courtesan.com> 1840: 1841: * plugins/sudoers/regress/testsudoers/test2.sh: 1842: fix test description 1843: [cd5730fa9f09] 1844: 1845: * plugins/sudoers/regress/testsudoers/test2.out, 1846: plugins/sudoers/regress/testsudoers/test2.sh, 1847: plugins/sudoers/regress/visudo/test2.out, 1848: plugins/sudoers/regress/visudo/test2.sh: 1849: convert test2 to use testsudoers 1850: [b5ec3f0b69f1] 1851: 1852: * include/sudo_plugin.h, src/sudo_plugin_int.h: 1853: Move struct generic_plugin to sudo_plugin_int.h 1854: [6f7bc629329c] 1855: 1856: * plugins/sudoers/gram.c, plugins/sudoers/gram.y, 1857: plugins/sudoers/parse.c, plugins/sudoers/parse.h, 1858: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c, 1859: plugins/sudoers/sudoers.h: 1860: Allow sudoers file name, mode, uid and gid to be specified in the 1861: settings list. The sudo front end does not currently set these but 1862: may in the future. 1863: [22f38a0fda2a] 1864: 1865: 2011-02-21 Todd C. Miller <Todd.Miller@courtesan.com> 1866: 1867: * configure, configure.in, doc/sudo.cat, doc/sudo.man.in, 1868: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat, 1869: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in, 1870: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat, 1871: doc/visudo.man.in: 1872: 1.8.0rc1 1873: [5d4588b9c057] 1874: 1875: * doc/sudo.pod, doc/sudoreplay.pod, doc/visudo.pod, 1876: plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, 1877: src/parse_args.c, src/sudo.h: 1878: add help text to sudo, visudo and sudoreplay for the -h option 1879: [52e7378d8476] 1880: 1881: 2011-02-19 Todd C. Miller <Todd.Miller@courtesan.com> 1882: 1883: * compat/snprintf.c: 1884: avoid using "howmany" for a parameter name since it is a select- 1885: related macro 1886: [a14d565401a1] 1887: 1888: * doc/sudoers.pod: 1889: mention group_plugin when describing nonunix_group 1890: [e0d1d0034b17] 1891: 1892: * doc/sudo_plugin.pod: 1893: Add missing period at end of sentence 1894: [6744d7e9056d] 1895: 1896: * Makefile.in, doc/Makefile.in, include/Makefile.in, 1897: plugins/sample/Makefile.in, plugins/sample_group/Makefile.in, 1898: plugins/sudoers/Makefile.in, src/Makefile.in: 1899: add localstatedir; closes bug 471 1900: [7aefcab85088] 1901: 1902: * config.h.in, configure, configure.in, plugins/sudoers/sudoreplay.c, 1903: src/exec.c, src/exec_pty.c: 1904: The howmany macro lives in sys/sysmacros.h on SVR5 systems Closes 1905: Bug 470 1906: [927ed6740f32] 1907: 1908: * configure.in: 1909: add missing AH_TEMPLATE for ENV_RESET 1910: [16300010c986] 1911: 1912: * src/exec.c: 1913: SVR5 systems return non-zero for success on socketpair(), check for 1914: -1 instead. Closes Bug 469 1915: [4d276494bf8e] 1916: 1917: 2011-02-16 Todd C. Miller <Todd.Miller@courtesan.com> 1918: 1919: * configure, configure.in: 1920: 1.8.0b5 1921: [d611cd5d73d3] 1922: 1923: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat, 1924: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat, 1925: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat, 1926: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in: 1927: regen 1928: [85e96eeaed82] 1929: 1930: * doc/sudo.pod: 1931: Document that a sudo.conf file with no Pligin lines uses the default 1932: sudoers plugins. 1933: [88bd52da977f] 1934: 1935: * src/load_plugins.c: 1936: If sudo.conf contains no Plugin lines, use the default sudoers 1937: policy and I/O plugins. 1938: [fd8f4cb811ab] 1939: 1940: 2011-02-14 Todd C. Miller <Todd.Miller@courtesan.com> 1941: 1942: * plugins/sudoers/sudo_nss.c: 1943: Avoid printing empty "Runas and Command-specific defaults for user" 1944: line. 1945: [2dd330fe4f8b] 1946: 1947: * common/lbuf.c: 1948: Truncate the buffer at buf.len before printing in the non-wordwrap 1949: case. 1950: [901e9833f80d] 1951: 1952: * common/lbuf.c: 1953: Remove extra newline when the tty width is very small or unavailable 1954: [245c05506c0e] 1955: 1956: 2011-02-11 Todd C. Miller <Todd.Miller@courtesan.com> 1957: 1958: * plugins/sudoers/alias.c: 1959: Remove unneeded variable. 1960: [2c086d30b796] 1961: 1962: 2011-02-09 Todd C. Miller <Todd.Miller@courtesan.com> 1963: 1964: * configure, configure.in: 1965: Prefer getutxid over getutid 1966: [3f3322e9c93e] 1967: 1968: * plugins/sudoers/boottime.c: 1969: Include utmp.h / utmpx.h before missing.h as apparently including it 1970: afterwards causes a compilation problem on GNU Hurd. 1971: [a528029ae962] 1972: 1973: 2011-02-07 Todd C. Miller <Todd.Miller@courtesan.com> 1974: 1975: * plugins/sudoers/sudoreplay.c, plugins/sudoers/toke_util.c: 1976: #include "foo.h", not <foo.h> for local includes. 1977: [f65ec693998e] 1978: 1979: * src/parse_args.c: 1980: remove bogus XXX 1981: [9136c17d53ce] 1982: 1983: * compat/mksiglist.c: 1984: Fix typo 1985: [1a3bb7b455c9] 1986: 1987: * compat/glob.c, plugins/sudoers/ldap.c, plugins/sudoers/logging.c, 1988: plugins/sudoers/match.c: 1989: return foo not return(foo) 1990: [5c9e0647359a] 1991: 1992: 2011-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 1993: 1994: * src/exec.c: 1995: Remove duplicate FD_SET of signal_pipe[0] 1996: [3096527d2215] 1997: 1998: 2011-02-05 Todd C. Miller <Todd.Miller@courtesan.com> 1999: 2000: * compat/mksiglist.c: 2001: Use "missing.h" not <missing.h> in generated code. 2002: [d8e09cffbe09] 2003: 2004: 2011-02-04 Todd C. Miller <Todd.Miller@courtesan.com> 2005: 2006: * aclocal.m4, configure: 2007: fix --with-iologdir=no 2008: [a89699cb5f5f] 2009: 2010: * aclocal.m4, configure: 2011: fix typo that broke --with-iologdir 2012: [91b54eb22403] 2013: 2014: 2011-02-03 Todd C. Miller <Todd.Miller@courtesan.com> 2015: 2016: * configure, configure.in, doc/sudo.cat, doc/sudo.man.in, 2017: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.cat, 2018: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.man.in, 2019: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/visudo.cat, 2020: doc/visudo.man.in: 2021: Bump version to 1.8.0b4 2022: [e2b7f2cdc02e] 2023: 2024: * NEWS: 2025: sync 2026: [decf5a0a8a33] 2027: 2028: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 2029: Attempt to clarify how users and groups interact in Runas_Specs 2030: [e6fb3a2dbd77] 2031: 2032: * plugins/sudoers/regress/visudo/test2.out, 2033: plugins/sudoers/regress/visudo/test2.sh: 2034: Add test for quoted group that contains escaped double quotes 2035: [44596c48c629] 2036: 2037: * src/exec.c, src/exec_pty.c: 2038: Pass SIGUSR1/SIGUSR2 through to the child. 2039: [c3108a827b01] 2040: 2041: * src/exec_pty.c, src/sudo_exec.h: 2042: Use special values SIGCONT_FG and SIGCONT_BG instead of SIGUSR1 and 2043: SIGUSR2 to indicate whether the child should be continued in the 2044: foreground or background. 2045: [35ca47cc6785] 2046: 2047: * src/exec.c: 2048: Use pid_t not int and check the return value of kill() 2049: [36ae7d37d7f9] 2050: 2051: 2011-02-02 Todd C. Miller <Todd.Miller@courtesan.com> 2052: 2053: * src/exec_pty.c: 2054: Remove obsolete comment 2055: [baebef4919f6] 2056: 2057: * src/exec.c: 2058: In non-pty mode before continuing the child, make it the foreground 2059: pgrp if possible. Fixes resuming a shell. 2060: [fef5b1d02ddb] 2061: 2062: * src/exec_pty.c: 2063: If we get a signal other than SIGCHLD in the monitor, pass it 2064: directly to the child. 2065: [b3ecb28163a0] 2066: 2067: * src/exec.c, src/exec_pty.c, src/sudo.h: 2068: Save signal state before changing handlers and restore before we 2069: execute the command. 2070: [faf7475dc4bf] 2071: 2072: 2011-02-01 Todd C. Miller <Todd.Miller@courtesan.com> 2073: 2074: * plugins/sudoers/iolog.c: 2075: Use a char array to map a number to a base36 digit. 2076: [257576c51f8b] 2077: 2078: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod: 2079: Be clear about what versions of sudo support new LDAP attributes. 2080: Fix up some formatting of attribute names. Minor other tweaks. 2081: [39f65df71f65] 2082: 2083: 2011-01-31 Todd C. Miller <Todd.Miller@courtesan.com> 2084: 2085: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 2086: match quoted strings the same way whether in a Defaults line or as a 2087: user/group/netgroup name. Fixes escaped double quotes in quoted 2088: user/group/netgroup names. 2089: [601d97ea8792] 2090: 2091: * plugins/sudoers/Makefile.in: 2092: 'make check' depends on visudo and testsudoers 2093: [127c5a24df8f] 2094: 2095: * plugins/sudoers/sudoers2ldif: 2096: Add sudoOrder attribute to each entry Parse LOG_{INPUT,OUTPUT} tags 2097: [9029163a58c3] 2098: 2099: 2011-01-30 Todd C. Miller <Todd.Miller@courtesan.com> 2100: 2101: * doc/UPGRADE: 2102: Mention LDAP attribute compatibility status. 2103: [2c3595aaec63] 2104: 2105: 2011-01-28 Todd C. Miller <Todd.Miller@courtesan.com> 2106: 2107: * README.LDAP: 2108: Mention phpQLAdmin 2109: [9304c9064fbe] 2110: 2111: * INSTALL, NEWS, config.h.in, configure, configure.in, 2112: doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c: 2113: Add --disable-env-reset configure option. 2114: [8a753aa13a46] 2115: 2116: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 2117: Document that sudoers_locale also affects logging and email. 2118: [998d6ac11277] 2119: 2120: * NEWS, config.h.in, configure, configure.in, 2121: plugins/sudoers/logging.c: 2122: Do logging and email sending in the locale specified by the 2123: "sudoers_locale" setting ("C" by default). Email send by sudo 2124: includes MIME headers when the sudoers locale is not "C". 2125: [cb7e55408400] 2126: 2127: 2011-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 2128: 2129: * plugins/sudoers/check.c: 2130: Fix indentation 2131: [65ae7e92b9e4] 2132: 2133: 2011-01-25 Todd C. Miller <Todd.Miller@courtesan.com> 2134: 2135: * NEWS, src/parse_args.c, src/sudo.c: 2136: Perform command escaping for "sudo -s" and "sudo -i" after 2137: validating sudoers so the sudoers entries don't need to have all the 2138: backslashes. 2139: [4e168c103f4b] 2140: 2141: 2011-01-24 Todd C. Miller <Todd.Miller@courtesan.com> 2142: 2143: * plugins/sudoers/logging.c: 2144: Prepend "list " to the command logged when "sudo -l command" is used 2145: to make it clear that the command was listed, not run. 2146: [f392a6056cd6] 2147: 2148: * plugins/sudoers/parse.c: 2149: cosmetic change 2150: [7c0951dbc2dd] 2151: 2152: * common/aix.c, common/alloc.c, common/fileops.c, common/fmt_string.c, 2153: common/list.c, common/term.c, compat/fnmatch.c, compat/getcwd.c, 2154: compat/glob.c, compat/isblank.c, compat/memrchr.c, compat/mktemp.c, 2155: compat/nanosleep.c, compat/regress/glob/globtest.c, 2156: compat/snprintf.c, compat/strlcat.c, compat/strlcpy.c, 2157: compat/strsignal.c, compat/utimes.c, plugins/sample/sample_plugin.c, 2158: plugins/sample_group/getgrent.c, plugins/sample_group/plugin_test.c, 2159: plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c, 2160: plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c, 2161: plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c, 2162: plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c, 2163: plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c, 2164: plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c, 2165: plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c, 2166: plugins/sudoers/auth/sia.c, plugins/sudoers/bsm_audit.c, 2167: plugins/sudoers/check.c, plugins/sudoers/defaults.c, 2168: plugins/sudoers/find_path.c, plugins/sudoers/goodpath.c, 2169: plugins/sudoers/gram.c, plugins/sudoers/gram.y, 2170: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c, 2171: plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c, 2172: plugins/sudoers/parse.c, plugins/sudoers/pwutil.c, 2173: plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c, 2174: plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c, 2175: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 2176: plugins/sudoers/timestr.c, plugins/sudoers/toke.c, 2177: plugins/sudoers/toke.l, plugins/sudoers/toke_util.c, 2178: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c, 2179: src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c, 2180: src/sudo_noexec.c, src/tgetpass.c: 2181: standardize on "return foo;" rather than "return(foo);" or "return 2182: (foo);" 2183: [32d76c5aaf8c] 2184: 2185: * plugins/sudoers/sudoers.c: 2186: Do not reject sudoers file just because it is root-writable. 2187: [0febc579185b] 2188: 2189: 2011-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 2190: 2191: * NEWS: 2192: sync 2193: [1ab03f8278ff] 2194: 2195: * plugins/sudoers/sudo_nss.c: 2196: For "sudo -U user -l" if user is not authorized on the host, say so. 2197: [289afe6dd15c] 2198: 2199: * plugins/sudoers/ldap.c: 2200: In sudo_ldap_lookup(), always do the initial sudoers check as the 2201: invoking user. If we are listing another user's privs we will do a 2202: separate lookup using list_pw later. 2203: [e52bc15de76d] 2204: 2205: 2011-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 2206: 2207: * MANIFEST: 2208: add parser fill tests 2209: [4f65140d3515] 2210: 2211: * compat/regress/glob/globtest.c, compat/regress/glob/globtest.in: 2212: Don't test features not supported by the bundled glob() 2213: [8ec7ace11949] 2214: 2215: * Makefile.in, aclocal.m4, common/Makefile.in, common/term.c, 2216: compat/Makefile.in, configure.in, doc/LICENSE, doc/Makefile.in, 2217: doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 2218: doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, doc/sudoers.man.in, 2219: doc/sudoers.pod, include/Makefile.in, plugins/sample/Makefile.in, 2220: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 2221: plugins/sudoers/check.c, plugins/sudoers/defaults.c, 2222: plugins/sudoers/gram.c, plugins/sudoers/gram.y, 2223: plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c, 2224: plugins/sudoers/ldap.c, plugins/sudoers/match.c, 2225: plugins/sudoers/pwutil.c, plugins/sudoers/sudo_nss.c, 2226: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 2227: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 2228: plugins/sudoers/toke.c, plugins/sudoers/toke.l, 2229: plugins/sudoers/toke_util.c, src/Makefile.in, zlib/Makefile.in: 2230: Update copyright year to 2011 2231: [ac1b45cb1809] 2232: 2233: * plugins/sudoers/sudo_nss.c: 2234: When listing, use separate lbufs for the defaults and the privileges 2235: and only print something if the number of privileges is non-zero. 2236: Fixes extraneous Defaults output for "sudo -U unauthorized_user -l". 2237: [d0854d39f8ef] 2238: 2239: * plugins/sudoers/ldap.c: 2240: Stash pointer to user group vector in LDAP handle and only reuse the 2241: query if it has not changed. We always allocate a new buffer when 2242: we reset the group vector so a simple pointer check is sufficient. 2243: [88861d4eba69] 2244: 2245: * plugins/sudoers/sudo_nss.c: 2246: Check initgroups() return value. 2247: [3bdaf58408a7] 2248: 2249: * plugins/sudoers/Makefile.in, 2250: plugins/sudoers/regress/parser/check_fill.c: 2251: Add tests for the fill functions in toke_util.c 2252: [bca587ab4956] 2253: 2254: 2011-01-19 Todd C. Miller <Todd.Miller@courtesan.com> 2255: 2256: * plugins/sudoers/regress/iolog_path/check_iolog_path.c: 2257: fix copyright year 2258: [e2038cdaf055] 2259: 2260: * NEWS: 2261: sync 2262: [56ca5d5eaebe] 2263: 2264: 2011-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 2265: 2266: * common/term.c: 2267: Clear, don't set, OPOST in c_oflag as was intended in 506ad5ae9b4e. 2268: [b91f266624ec] 2269: 2270: 2011-01-14 Todd C. Miller <Todd.Miller@courtesan.com> 2271: 2272: * mkpkg, sudo.pp: 2273: Add Requires line for audit-libs >= 1.4 for RHEL5+ 2274: [6c02f976171b] 2275: 2276: * pp: 2277: sync with git version 2278: [d301c32d5865] 2279: 2280: 2011-01-13 Todd C. Miller <Todd.Miller@courtesan.com> 2281: 2282: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 2283: fix typo 2284: [39353f92976f] 2285: 2286: 2011-01-12 Todd C. Miller <Todd.Miller@courtesan.com> 2287: 2288: * NEWS: 2289: Update for sudo 1.7.4p5 2290: [b444da76901f] 2291: 2292: * doc/schema.OpenLDAP, doc/schema.iPlanet: 2293: Add sudoNotBefore and sudoNotAfter attributes as optional attributes 2294: to the sudoRole object class. From Andreas Mueller 2295: [dacfad7e7a95] 2296: 2297: 2011-01-11 Todd C. Miller <Todd.Miller@courtesan.com> 2298: 2299: * NEWS: 2300: Mention "sudo -g group" password check fix. 2301: [1eb8fb14e53b] 2302: 2303: * plugins/sudoers/sudoers.c: 2304: Fix "sudo -g" support in the sudoers module. 2305: [07d1b0ce530e] 2306: 2307: * plugins/sudoers/check.c: 2308: If the user is running sudo as himself but as a different group we 2309: need to prompt for a password. 2310: [caf1fcc9a117] 2311: 2312: 2011-01-10 Todd C. Miller <Todd.Miller@courtesan.com> 2313: 2314: * NEWS, config.h.in, configure, configure.in, doc/sudoers.ldap.cat, 2315: doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, 2316: plugins/sudoers/ldap.c: 2317: Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP 2318: LDAP_OPT_TIMEOUT. There is no corresponding option for mozilla- 2319: derived LDAP SDKs but we can pass the timeout parameter to 2320: ldap_search_ext_s() or ldap_search_st() when possible. 2321: [5537049991f7] 2322: 2323: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in: 2324: regen 2325: [5b361c3c4324] 2326: 2327: * NEWS, doc/sudoers.ldap.pod, plugins/sudoers/ldap.c: 2328: Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility 2329: with OpenLDAP ldap.conf files. 2330: [e97843bd16fb] 2331: 2332: * plugins/sudoers/pwutil.c: 2333: If user has no supplementary groups, fall back on checking the group 2334: file expliticly. 2335: [5223ad4eb690] 2336: 2337: 2011-01-08 Todd C. Miller <Todd.Miller@courtesan.com> 2338: 2339: * plugins/sudoers/toke.h, plugins/sudoers/toke_util.c: 2340: constify 2341: [6e132a4cca61] 2342: 2343: * plugins/sudoers/toke.c, plugins/sudoers/toke.h, 2344: plugins/sudoers/toke.l: 2345: Move fill macro to toke.h 2346: [623d430798cf] 2347: 2348: * MANIFEST, plugins/sudoers/Makefile.in, plugins/sudoers/toke.c, 2349: plugins/sudoers/toke.h, plugins/sudoers/toke.l, 2350: plugins/sudoers/toke_util.c: 2351: Split tokenizer utility functions out into toke_util.c 2352: [89a97bd51618] 2353: 2354: * plugins/sudoers/gram.c, plugins/sudoers/gram.y, 2355: plugins/sudoers/toke.c, plugins/sudoers/toke.l: 2356: ANSIfy 2357: [ca0eba1dfaa9] 2358: 2359: 2011-01-07 Todd C. Miller <Todd.Miller@courtesan.com> 2360: 2361: * MANIFEST: 2362: sync 2363: [a43f94064bb3] 2364: 2365: * plugins/sudoers/Makefile.in: 2366: Add visudo tests to check target 2367: [8c82fb4ed40f] 2368: 2369: * compat/Makefile.in, compat/regress/fnmatch/fnm_test.c, 2370: compat/regress/fnmatch/fnm_test.in, compat/regress/glob/files, 2371: compat/regress/glob/globtest.c, compat/regress/glob/globtest.in: 2372: Add my regress tests for fnmatch() and glob() from OpenBSD. 2373: [6e8c1f211723] 2374: 2375: * plugins/sudoers/regress/testsudoers/test1.sh, 2376: plugins/sudoers/regress/visudo/test1.ok, 2377: plugins/sudoers/regress/visudo/test1.sh: 2378: Add regress test for command tags using visudo -c 2379: [18b0ef207c0f] 2380: 2381: * plugins/sudoers/Makefile.in, 2382: plugins/sudoers/regress/testsudoers/test1.ok, 2383: plugins/sudoers/regress/testsudoers/test1.sh: 2384: Add support for regress tests using testsudoers 2385: [1fa94bd2671b] 2386: 2387: * plugins/sudoers/testsudoers.c: 2388: Need to set user_name explicitly due to internal changes made when 2389: converting sudoers to a plugin. 2390: [1fa54e86a364] 2391: 2392: 2011-01-06 Todd C. Miller <Todd.Miller@courtesan.com> 2393: 2394: * MANIFEST, Makefile.in, common/Makefile.in, compat/Makefile.in, 2395: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in, 2396: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 2397: plugins/sudoers/regress/iolog_path/check_iolog_path.c, 2398: plugins/sudoers/regress/iolog_path/data, src/Makefile.in, 2399: zlib/Makefile.in: 2400: Add regression tests for iolog_path() 2401: [afa4b416e559] 2402: 2403: * Makefile.in, common/Makefile.in, compat/Makefile.in, 2404: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in, 2405: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 2406: src/Makefile.in, zlib/Makefile.in: 2407: Add support for "make Makefile" to regenerate Makefile from 2408: Makefile.in 2409: [98bd2dda3294] 2410: 2411: * plugins/sudoers/iolog_path.c: 2412: Quiest a bogus compiler warning. 2413: [5ff932a7ad67] 2414: 2415: 2011-01-05 Todd C. Miller <Todd.Miller@courtesan.com> 2416: 2417: * plugins/sudoers/iolog_path.c: 2418: Protect call to setlocale() with HAVE_SETLOCALE 2419: [2c29ee3ccc81] 2420: 2421: 2011-01-04 Todd C. Miller <Todd.Miller@courtesan.com> 2422: 2423: * MANIFEST: 2424: mkstemps.c was renamed mktemp.c 2425: [ae299c3b1827] 2426: 2427: * NEWS: 2428: Update from 1.7 branch 2429: [20817d79717b] 2430: 2431: * Makefile.in: 2432: Use "mv -f" when regenerating ChangeLog 2433: [c163635206c6] 2434: 2435: * plugins/sudoers/match.c: 2436: Fix NULL dereference with "sudo -g group" when the sudoers rule has 2437: no runas user or group listed. Fixes RedHat bug Bug 667103. 2438: [41a6a1243d9e] 2439: 2440: 2011-01-03 Todd C. Miller <Todd.Miller@courtesan.com> 2441: 2442: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 2443: Correct the default sudo.conf example 2444: [4e791698cad1] 2445: 2446: 2010-12-31 Todd C. Miller <Todd.Miller@courtesan.com> 2447: 2448: * plugins/sudoers/iolog_path.c: 2449: Reset slashp if we allocate a new buffer for strftime() 2450: [e491daa4203b] 2451: 2452: * plugins/sudoers/iolog_path.c, plugins/sudoers/sudoers.c, 2453: plugins/sudoers/sudoers.h: 2454: Add extra out parameter to expand_iolog_path() to allow the caller 2455: to split the path into dir and file components if needed. 2456: [88346bc5ae39] 2457: 2458: 2010-12-30 Todd C. Miller <Todd.Miller@courtesan.com> 2459: 2460: * plugins/sudoers/iolog.c: 2461: mkdir_iopath() returns size_t now that it uses strlcpy() and not 2462: snprintf() 2463: [3c4c64d265eb] 2464: 2465: * plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c: 2466: Trim leading slashes from iolog_file and trailing slashes from 2467: iolog_dir 2468: [a803b51f8948] 2469: 2470: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 2471: plugins/sudoers/iolog.c, plugins/sudoers/iolog_path.c, 2472: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h: 2473: Pass a single I/O log file name in command_details instead of 2474: separate dir + file parameters. 2475: [d672a3e46e80] 2476: 2477: * plugins/sudoers/sudoreplay.c: 2478: change an error() to errorx() 2479: [8013dcfdd69d] 2480: 2481: * plugins/sudoers/iolog.c: 2482: Add missing cwd line to I/O log info file that got dropped when 2483: iolog_deserialize_info() was added 2484: [7cf84f208423] 2485: 2486: 2010-12-29 Todd C. Miller <Todd.Miller@courtesan.com> 2487: 2488: * plugins/sudoers/iolog.c: 2489: Avoid relying on globals filled in by the sudoers policy module for 2490: the sudoers I/O log module. The I/O log open function now pulls the 2491: bits it needs out of user_info and command_info. 2492: [c02f6951b0cc] 2493: 2494: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c, 2495: plugins/sudoers/sudoers.h: 2496: If no iolog file is specified by the policy plugin, use io_nextid() 2497: to determine the next file in the sequence. 2498: [faa1130b1020] 2499: 2500: 2010-12-28 Todd C. Miller <Todd.Miller@courtesan.com> 2501: 2502: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 2503: Document iolog_compress in command_info 2504: [58895c7d12f5] 2505: 2506: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c: 2507: Add support for the iolog_compress variable in command_info. 2508: [36f13a2fd1c1] 2509: 2510: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c: 2511: Add sigsetjmp() calls to all plugin entry points just to be safe. 2512: [3fa482355bc4] 2513: 2514: * src/sudo.c, src/sudo.h: 2515: Don't need iolog variables in struct command_details, they are for 2516: the I/O log plugins to handle. 2517: [5111579ffd9d] 2518: 2519: 2010-12-27 Todd C. Miller <Todd.Miller@courtesan.com> 2520: 2521: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 2522: Document use of mkdtemp() for iolog path teplates 2523: [5db6101408a9] 2524: 2525: * doc/sudo.cat, doc/sudo.man.in, doc/sudo_plugin.cat, 2526: doc/sudo_plugin.man.in, doc/sudoers.cat, doc/sudoers.ldap.cat, 2527: doc/sudoers.ldap.man.in, doc/sudoers.man.in, doc/sudoreplay.cat, 2528: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in: 2529: regen 2530: [1ee11fd6d4eb] 2531: 2532: * doc/sudo_plugin.pod, doc/sudoers.pod: 2533: Document iolog_file and supported escape sequences for sudoers. 2534: Clarify that iolog_file can contain directories. 2535: [da611dedcbdb] 2536: 2537: * compat/Makefile.in, configure, configure.in: 2538: Fix building of mkstemps/mkdtemp replacements. 2539: [793a5e303122] 2540: 2541: * compat/mkstemps.c, compat/mktemp.c, config.h.in, configure, 2542: configure.in, include/missing.h: 2543: Provide mkdtemp() for systems without it. 2544: [b0527dfa965c] 2545: 2546: * plugins/sudoers/iolog_path.c: 2547: Fix typo 2548: [277f6c514cba] 2549: 2550: * plugins/sudoers/iolog.c: 2551: Only use mkdtemp() if the path ends in at least 6 Xs since otherwise 2552: glibc mkdtemp() returns EINVAL. 2553: [2e7323b05579] 2554: 2555: * plugins/sudoers/Makefile.in, plugins/sudoers/def_data.c, 2556: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in, 2557: plugins/sudoers/defaults.c, plugins/sudoers/iolog.c, 2558: plugins/sudoers/iolog_path.c, plugins/sudoers/plugin_error.c, 2559: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h: 2560: Allow sudoers to specify the iolog file in addition to the iolog 2561: dir. Add escape sequence support to iolog file and dir: sequence 2562: number, user, group, runas_user, runas_group, hostname and 2563: command in addition to any escape sequence recognized by 2564: strftime(3). 2565: [75cd32ee0435] 2566: 2567: * plugins/sudoers/iolog.c: 2568: Add missing sigsetjmp() call in I/O plugin open function. Fixes a 2569: crash when the I/O plugin calls error(), errorx() or log_error(). 2570: [1a6718bd817d] 2571: 2572: 2010-12-21 Todd C. Miller <Todd.Miller@courtesan.com> 2573: 2574: * doc/sudo_plugin.pod, plugins/sudoers/iolog.c, 2575: plugins/sudoers/sudoers.c: 2576: Give the policy module fine-grained control over what the I/O plugin 2577: logs. 2578: [d29784fd2a66] 2579: 2580: * common/term.c: 2581: Clear OPOST from c_oflag like we used to. Fixes screen-based 2582: editors such as vi. 2583: [506ad5ae9b4e] 2584: 2585: * doc/sudoers.pod: 2586: Clarify umask option description. From Reuben Thomas. 2587: [1294ac84222b] 2588: 2589: 2010-12-20 Todd C. Miller <Todd.Miller@courtesan.com> 2590: 2591: * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c: 2592: Pick last match in LDAP sudoers too 2593: [fbfd8e85703b] 2594: 2595: * doc/sudo_plugin.pod: 2596: Document iolog_file, iolog_dir and use_pty 2597: [26120a59c20e] 2598: 2599: * plugins/sample/sample_plugin.c, plugins/sudoers/iolog.c, 2600: plugins/sudoers/sudoers.c: 2601: Adapt plugins to version I/O logging ABI 1.1 2602: [880dd64bc1e8] 2603: 2604: * src/exec.c, src/sudo.h: 2605: Add use_pty command_info flag for policies to indicate that a pty 2606: should be allocated even if no I/O logging is performed. 2607: [e7b167f8a6e5] 2608: 2609: * src/sudo.c: 2610: Add remaining plugin convenience functions 2611: [ffeaf96da031] 2612: 2613: * include/sudo_plugin.h, src/sudo.c, src/sudo.h, 2614: src/sudo_plugin_int.h: 2615: Change I/O log API to pass in command info to the I/O log open 2616: function. Add iolog_file and iolog_dir parameters to command info. 2617: This allows the policy plugin to specify the I/O log pathname. Add 2618: convenience functions for calling plugin functions that handle ABI 2619: backwards compatibility. 2620: [9b81dce76ce5] 2621: 2622: * compat/dlopen.c: 2623: Remove useless cast 2624: [7cecce969739] 2625: 2626: 2010-12-17 Todd C. Miller <Todd.Miller@courtesan.com> 2627: 2628: * configure, configure.in: 2629: Bump version to 1.8.0b3 2630: [1dc9f040aae0] 2631: 2632: 2010-12-13 Todd C. Miller <Todd.Miller@courtesan.com> 2633: 2634: * configure.in: 2635: Remove extraneous newline 2636: [71c94551eea5] 2637: 2638: 2010-12-10 Todd C. Miller <Todd.Miller@courtesan.com> 2639: 2640: * doc/sudoers.pod, plugins/sudoers/def_data.c, 2641: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in, 2642: plugins/sudoers/defaults.c, plugins/sudoers/iolog.c: 2643: Make I/O log dir configurable. 2644: [99b576667a38] 2645: 2646: * aclocal.m4, configure, configure.in, doc/sudoers.pod: 2647: Rename io_logdir to iolog_dir 2648: [0731662acc8d] 2649: 2650: 2010-12-07 Todd C. Miller <Todd.Miller@courtesan.com> 2651: 2652: * pp: 2653: Add missing '*' that prevented the generic ELF case from matching. 2654: [be77ca26bfb2] 2655: 2656: * pp: 2657: If file(1) can't identify the ELF binary type, try readelf(1). 2658: [38a18d32a9e3] 2659: 2660: 2010-11-30 Todd C. Miller <Todd.Miller@courtesan.com> 2661: 2662: * plugins/sudoers/auth/kerb4.c, plugins/sudoers/check.c, 2663: plugins/sudoers/env.c, plugins/sudoers/pwutil.c, 2664: plugins/sudoers/sudoers.c, src/sudo.c: 2665: Use %u to print uid/gid, not %lu and adjust casts to match. 2666: [03c43b8749cf] 2667: 2668: * doc/sudoers.ldap.pod: 2669: Clarify ordering of entries and attributes. 2670: [924e2a6bb603] 2671: 2672: * doc/sudoers.ldap.pod: 2673: Fix typo and editing goof. 2674: [79dc7ccd85a8] 2675: 2676: * doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet, 2677: doc/sudoers.ldap.pod: 2678: Merge in ordered LDAP entry support from Andreas Mueller. 2679: [ea5885989bad] 2680: 2681: * plugins/sudoers/ldap.c: 2682: Make sure we don't dereference a NULL handle. 2683: [1a9f9ee15371] 2684: 2685: 2010-11-24 Todd C. Miller <Todd.Miller@courtesan.com> 2686: 2687: * pp: 2688: Add support for RHEL 6 file modes that include a trailing dot on 2689: files with an SELinux security context 2690: [dc09be959547] 2691: 2692: 2010-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 2693: 2694: * src/sudo.c: 2695: exec_setup() does not need to setuid(0), the Ubuntu issue was in the 2696: sudoers module. 2697: [d6dd99fc6062] 2698: 2699: * plugins/sudoers/sudoers.c: 2700: create_admin_success_flag() should use restore_perms() rather than 2701: set_perms() to restore the uid. 2702: [eba7a91c1f57] 2703: 2704: * src/sudo.c: 2705: In exec_setup() call setuid(0) to make certain the subsequent uid 2706: and gid changes will succeed. Fixes a problem on Ubuntu. 2707: [c5d32abf0645] 2708: 2709: * src/sudo_edit.c: 2710: Error out if we cannot change to root's uid so we catch the failure 2711: early. 2712: [7a2e7f8f2c80] 2713: 2714: 2010-11-22 Todd C. Miller <Todd.Miller@courtesan.com> 2715: 2716: * doc/sudoers.pod: 2717: fix typo; from Michael T Hunter 2718: [a574a9d0db5b] 2719: 2720: * plugins/sudoers/match.c: 2721: In sudoedit mode, assume command line arguments are paths and pass 2722: FNM_PATHNAME to fnmatch(). 2723: [ce0abff8ce9f] 2724: 2725: 2010-11-20 Todd C. Miller <Todd.Miller@courtesan.com> 2726: 2727: * configure, configure.in: 2728: Add workaround for an error in sys/types.h on HP-UX 11.23 when large 2729: file support is enabled. Defining _XOPEN_SOURCE_EXTENDED avoids the 2730: broken bits of the header file. 2731: [e337217f097a] 2732: 2733: * aclocal.m4: 2734: Fix SUDO_MAILDIR usage of AC_LANG_PROGRAM 2735: [fbbcee28961f] 2736: 2737: * sudo.pp: 2738: For Tru64, strip off beta version. 2739: [eeccd762df5e] 2740: 2741: * MANIFEST, plugins/sudoers/testsudoers.c, 2742: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/tsgetgrpw.h: 2743: Avoid conflicts with system definitions in grp.h and pwd.h 2744: [b219ffe1da09] 2745: 2746: * zlib/gzguts.h: 2747: Include stdio.h after zlib.h, not before. We need the large file 2748: defines to come first. 2749: [21d6df39790f] 2750: 2751: 2010-11-19 Todd C. Miller <Todd.Miller@courtesan.com> 2752: 2753: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in: 2754: regen 2755: [3ff8750d0aac] 2756: 2757: * Makefile.in: 2758: Don't clean ChangeLog 2759: [ab0d30d289d4] 2760: 2761: * plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c: 2762: Add prototype for cleanup() 2763: [75626fd3769a] 2764: 2765: 2010-11-18 Todd C. Miller <Todd.Miller@courtesan.com> 2766: 2767: * plugins/sudoers/group_plugin.c: 2768: Avoid deferencing group_plugin if it is NULL in 2769: group_plugin_query(). This should not happen. 2770: [4f2933c8da7e] 2771: 2772: * plugins/sudoers/group_plugin.c: 2773: group plugin init function return TRUE when successful 2774: [198024477030] 2775: 2776: 2010-11-17 Todd C. Miller <Todd.Miller@courtesan.com> 2777: 2778: * plugins/sudoers/ldap.c: 2779: Enlarge the array of entry wrappers int blocks of 100 entries to 2780: save on allocation time. From Andreas Mueller 2781: [375c916bb03b] 2782: 2783: * plugins/sudoers/ldap.c: 2784: Add back call to sudo_ldap_timefilter() in sudo_ldap_build_pass2() 2785: that was mistakenly dropped. 2786: [1555f5bc132d] 2787: 2788: 2010-11-16 Todd C. Miller <Todd.Miller@courtesan.com> 2789: 2790: * doc/TROUBLESHOOTING: 2791: Mention that sudo needs "ar" to build. 2792: [65582ace2d09] 2793: 2794: * configure, configure.in: 2795: Fail with a more useful error if "ar" is not found. 2796: [d1cb83719c17] 2797: 2798: 2010-11-14 Todd C. Miller <Todd.Miller@courtesan.com> 2799: 2800: * plugins/sudoers/ldap.c: 2801: Merge in ordered LDAP entry support from Andreas Mueller and add 2802: local changes from the 1.7 branch. 2803: [bca29e461618] 2804: 2805: 2010-11-12 Todd C. Miller <Todd.Miller@courtesan.com> 2806: 2807: * doc/schema.ActiveDirectory, doc/schema.OpenLDAP, doc/schema.iPlanet, 2808: doc/sudoers.ldap.pod, plugins/sudoers/ldap.c: 2809: Add timed entry support from Andreas Mueller. 2810: [e18d1df46a8d] 2811: 2812: * plugins/sudoers/group_plugin.c: 2813: Don't try to unload if group_plugin is NULL. Don't call dlclose() if 2814: group_handle is NULL 2815: [de2273da37d5] 2816: 2817: * plugins/sudoers/sudoers.h: 2818: It is now plugin_cleanup(), not cleanup() 2819: [da62a4e1a78c] 2820: 2821: * plugins/sudoers/logging.c, plugins/sudoers/sudoers.c: 2822: Call plugin_cleanup(), not cleanup() 2823: [e800ad8b33ad] 2824: 2825: 2010-11-11 Todd C. Miller <Todd.Miller@courtesan.com> 2826: 2827: * plugins/sudoers/ldap.c: 2828: Use efree() not free() and remove malloc.h include since we never 2829: directly call malloc() or free(). 2830: [107fffd134bb] 2831: 2832: 2010-11-09 Todd C. Miller <Todd.Miller@courtesan.com> 2833: 2834: * sudo.pp: 2835: set PSTAMP for Solaris and move the backend-specific bits to their 2836: own %if [xxx] %endif blocks in %set. 2837: [a94ebe8920c1] 2838: 2839: * pp: 2840: sync with git repo 2841: [75ff509696b4] 2842: 2843: * configure, configure.in: 2844: Only substitute file zlib files when using the builtin zlib 2845: [6c8145b2deb4] 2846: 2847: * common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in, 2848: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 2849: src/Makefile.in, zlib/Makefile.in: 2850: Give up on using VPATH to find sources as it is implemented 2851: inconsistenly in different versions of make. 2852: [60517c69aaee] 2853: 2854: * plugins/sudoers/Makefile.in, plugins/sudoers/getdate.c, 2855: plugins/sudoers/gram.c, plugins/sudoers/toke.c: 2856: Include config.h before any other includes to make sure we get the 2857: right value for _FILE_OFFSET_BITS. 2858: [8fb007ca832e] 2859: 2860: * MANIFEST: 2861: Add zlib 2862: [04a3e23dfaa9] 2863: 2864: * zlib/Makefile.in: 2865: Add missing targets 2866: [40e45a177168] 2867: 2868: * src/Makefile.in: 2869: g/c unused $(GENERATED) 2870: [c8758068c1bc] 2871: 2872: 2010-11-08 Todd C. Miller <Todd.Miller@courtesan.com> 2873: 2874: * plugins/sudoers/group_plugin.c: 2875: Zero out group_plugin on unload just to be safe. 2876: [0b10f4d101ca] 2877: 2878: * plugins/sudoers/group_plugin.c: 2879: Unload group plugin if its init function fails. 2880: [6552cdac4b7c] 2881: 2882: * src/sudo.c: 2883: Only chdir to cwd if it is different from the current cwd or there 2884: is a new root (chroot). 2885: [b8203e875e84] 2886: 2887: * configure, configure.in, doc/sudo.cat, doc/sudo.man.in, 2888: doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudoers.ldap.cat, 2889: doc/sudoers.ldap.man.in, doc/visudo.cat, doc/visudo.man.in: 2890: Bump version to 1.8.0b2 2891: [6dadeb75a878] 2892: 2893: 2010-10-28 Todd C. Miller <Todd.Miller@courtesan.com> 2894: 2895: * INSTALL: 2896: Better --enable-zlib description 2897: [e0da54fa59a6] 2898: 2899: * mkpkg: 2900: Use system zlib on Linux Let configure decide on Solaris For all 2901: others, use builtin zlib 2902: [3d52eddb523c] 2903: 2904: * zlib/zconf.h.in: 2905: Add large file support. 2906: [bec01215270d] 2907: 2908: * config.h.in: 2909: Add large file support. 2910: [244e95b034ec] 2911: 2912: * Makefile.in, configure, configure.in, doc/LICENSE, doc/license.pod, 2913: zlib/Makefile.in, zlib/adler32.c, zlib/compress.c, zlib/crc32.c, 2914: zlib/crc32.h, zlib/deflate.c, zlib/deflate.h, zlib/gzclose.c, 2915: zlib/gzguts.h, zlib/gzlib.c, zlib/gzread.c, zlib/gzwrite.c, 2916: zlib/infback.c, zlib/inffast.c, zlib/inffast.h, zlib/inffixed.h, 2917: zlib/inflate.c, zlib/inflate.h, zlib/inftrees.c, zlib/inftrees.h, 2918: zlib/trees.c, zlib/trees.h, zlib/uncompr.c, zlib/zconf.h.in, 2919: zlib/zlib.h, zlib/zutil.c, zlib/zutil.h: 2920: Add local copy of zlib for systems that lack it. 2921: [7542ca465c5a] 2922: 2923: 2010-10-15 Todd C. Miller <Todd.Miller@courtesan.com> 2924: 2925: * src/exec.c: 2926: If perform_io() fails, kill the child before exiting so it doesn't 2927: complain about connection reset. We can get an I/O error if, for 2928: example, and we get EIO reading from stdin. 2929: [e59a05fa729f] 2930: 2931: 2010-10-12 Todd C. Miller <Todd.Miller@courtesan.com> 2932: 2933: * plugins/sudoers/sudoers.c, src/sudo.c: 2934: Fix complilation on systems with set_auth_parameters() Sprinkle 2935: volatile to quiet warnings from gcc 2.8.0 2936: [a34c2b924ba7] 2937: 2938: * compat/dlfcn.h, compat/dlopen.c: 2939: Avoid potential namespace issues with dlopen() emulation. 2940: [aedfababd6ca] 2941: 2942: * MANIFEST: 2943: sync 2944: [6afb97e6d308] 2945: 2946: * plugins/sudoers/interfaces.c: 2947: Use INADDR_NONE instead of casting -1 to in_addr_t (which may not 2948: exist). 2949: [ddfca5af1a36] 2950: 2951: * Makefile.in: 2952: Mark ChangeLog as PHONY Don't overwrite ChangeLog if we can't run hg 2953: [e9d04bfa4505] 2954: 2955: * configure, configure.in: 2956: HP-UX 10.20 libc has an incompatible getline 2957: [2e7bc202e78d] 2958: 2959: * plugins/sudoers/visudo.c: 2960: Quiet an HP-UX compiler warning. 2961: [55b9d587ac8c] 2962: 2963: * configure, configure.in: 2964: Check for vi even with --with-editor specified; the sample plugin 2965: needs it. 2966: [94dfc3643f76] 2967: 2968: 2010-10-11 Todd C. Miller <Todd.Miller@courtesan.com> 2969: 2970: * compat/dlopen.c: 2971: Fix remaining syntax errors. 2972: [9d729b5b577e] 2973: 2974: * src/Makefile.in: 2975: sudo binary depends on the libtool-generated libs 2976: [9e6148406adb] 2977: 2978: * plugins/sudoers/group_plugin.c, src/load_plugins.c: 2979: Use HAVE_DLOPEN instead of HAVE_DLFCN_H when determining whether to 2980: include the local or system dlfcn.h 2981: [68cfe4c1089b] 2982: 2983: * pp: 2984: Don't use run_as_superuser=false on HP-UX 2985: [532242370b09] 2986: 2987: * src/net_ifs.c: 2988: Use memset() instead of zero_bytes() since we don't include 2989: sudoers.h 2990: [a187c18c2472] 2991: 2992: * plugins/sudoers/interfaces.c: 2993: Fix pasto; AF_INET not AF_INET6 2994: [2d2e9d7dc6f9] 2995: 2996: * compat/dlopen.c: 2997: Actually call shl_load() 2998: [ed8153b8a3cd] 2999: 3000: * pp: 3001: Update from git repo. Debian: version numbers now compliant with 3002: policy section 5.6.12 HP-UX: minimal changes needed to work on HP-UX 3003: 10.20 3004: [ecf2692bceeb] 3005: 3006: * configure, configure.in: 3007: Fix dlopen() detection for systems where dlopen() is in a separate 3008: library. 3009: [fa6b175582b6] 3010: 3011: * plugins/sudoers/auth/pam.c: 3012: If pam_acct_mgmt() returns PAM_AUTH_ERR print a (hopefully) more 3013: useful message and return AUTH_FATAL so sudo does not keep trying to 3014: validate the user. 3015: [1be8857e5291] 3016: 3017: * src/preload.c: 3018: sudo_preload_table is an array 3019: [b7704e72a9da] 3020: 3021: * compat/dlopen.c: 3022: Quiet a compiler warning and fix sudo_preload_table external 3023: definition. 3024: [8234987664cc] 3025: 3026: * compat/dlfcn.h: 3027: Fix multiple inclusion guard in dlfcn.h and fix dlerror() prototype. 3028: [8bab6a4053cc] 3029: 3030: * plugins/sudoers/group_plugin.c: 3031: Make this compile correctly when no dlopen is available. 3032: [57643879bd2b] 3033: 3034: 2010-10-07 Todd C. Miller <Todd.Miller@courtesan.com> 3035: 3036: * plugins/sudoers/check.c: 3037: Having a timestamp file defined is no longer indicative of tty 3038: tickets being enabled. Check def_tty_tickets directly. 3039: [efcc11ad157f] 3040: 3041: * src/exec_pty.c, src/sudo.h, src/ttysize.c: 3042: Fix TCGETWINSZ compat. 3043: [da3a8b17cf7a] 3044: 3045: 2010-10-02 Todd C. Miller <Todd.Miller@courtesan.com> 3046: 3047: * src/exec_pty.c, src/ttysize.c: 3048: Prefer newer TIOCGWINSZ ioctl to old TIOCGSIZE 3049: [926492dd10a6] 3050: 3051: 2010-10-01 Todd C. Miller <Todd.Miller@courtesan.com> 3052: 3053: * plugins/sudoers/sudoers.c, src/sudo.c: 3054: Move set_project() from sudoers module into sudo proper. 3055: [beabafac03b4] 3056: 3057: * configure, configure.in: 3058: Fix typo and regenerate 3059: [4a3caf4234f3] 3060: 3061: * plugins/sudoers/ldap.c: 3062: When iterating over returned LDAP entries, keep looking at remaining 3063: matches even if we have a positive match. This catches negative 3064: matches that may exist in other entries and more closely match the 3065: sudoers file behavior. 3066: [f47db6e609b0] 3067: 3068: * pp: 3069: Add support for multiple package instances on Solaris. 3070: [7f2a8b942545] 3071: 3072: * src/exec.c: 3073: Add missing signal_pipe[0] to fdsr for the non-pty case. 3074: [79d01e11b19c] 3075: 3076: * mkpkg: 3077: Add --with-project for Solaris 3078: [ffa4c2bb93f7] 3079: 3080: * README: 3081: Need ar and ranlib too 3082: [5c2f679172ef] 3083: 3084: 2010-09-27 Todd C. Miller <Todd.Miller@courtesan.com> 3085: 3086: * plugins/sudoers/env.c: 3087: Preserve ODMDIR environment variable by default on AIX. 3088: [bd47cb1e804f] 3089: 3090: 2010-09-26 Todd C. Miller <Todd.Miller@courtesan.com> 3091: 3092: * Makefile.in, compat/Makefile.in, compat/dlfcn.h, compat/dlopen.c, 3093: config.h.in, configure, configure.in, plugins/sample/Makefile.in, 3094: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 3095: plugins/sudoers/group_plugin.c, plugins/sudoers/plugin_error.c, 3096: plugins/sudoers/sudoers.c, src/Makefile.in, src/load_plugins.c, 3097: src/preload.c: 3098: Add dlopen() emulation for systems without it. For HP-UX 10, emulate 3099: using shl_load(). For others, link sudoers plugin statically and use 3100: a lookup table to emulate dlsym(). 3101: [e92edfb3c642] 3102: 3103: 2010-09-24 Todd C. Miller <Todd.Miller@courtesan.com> 3104: 3105: * compat/fnmatch.c, compat/glob.c, compat/mksiglist.c, 3106: compat/nanosleep.c, compat/utimes.c: 3107: When including compat headers, use the compat dir as part of the 3108: path so we are sure to get the correct header. 3109: [6c2a45da6af5] 3110: 3111: 2010-09-21 Todd C. Miller <Todd.Miller@courtesan.com> 3112: 3113: * plugins/sudoers/linux_audit.c: 3114: Ignore ECONNREFUSED from audit_log_user_command() which will occur 3115: if auditd is not running. 3116: [d314fe4c8d03] 3117: 3118: 2010-09-17 Todd C. Miller <Todd.Miller@courtesan.com> 3119: 3120: * pp: 3121: Sync with git version 3122: [1c0357744222] 3123: 3124: 2010-09-16 Todd C. Miller <Todd.Miller@courtesan.com> 3125: 3126: * common/fileops.c, plugins/sudoers/defaults.c: 3127: Cast isblank argument to unsigned char. 3128: [c822dbb3ca54] 3129: 3130: 2010-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 3131: 3132: * INSTALL, config.h.in, configure, configure.in, doc/sudoers.cat, 3133: doc/sudoers.man.in, doc/sudoers.pod, plugins/sudoers/defaults.c: 3134: Implement --with-umask-override configure flag. 3135: [863e3047df22] 3136: 3137: * plugins/sudoers/env.c: 3138: Take MODE_LOGIN_SHELL into account when initially setting reset_home 3139: instead of special-casing it later. 3140: [5d6b16480fd6] 3141: 3142: * plugins/sudoers/sudoers.c: 3143: In login mode, make a copy of the runas user's pw_shell for 3144: NewArgv[0] because 1) we modify it and 2) it will runas_pw gets 3145: freed before exec. 3146: [1d1ccb568dfa] 3147: 3148: * plugins/sudoers/env.c: 3149: Reset HOME for "sudo -i" even if HOME was listed in env_keep. 3150: [c1c1c65a2d63] 3151: 3152: * src/sudo.c: 3153: Use SIG_SETMASK when resetting signal mask instead of SIG_UNBLOCK. 3154: [7443454e5f88] 3155: 3156: * src/sudo.c: 3157: Reset signal mask at sudo startup time; we need to be able to rely 3158: on normal signal delivery to control the child process. 3159: [95800163ff94] 3160: 3161: 2010-09-13 Todd C. Miller <Todd.Miller@courtesan.com> 3162: 3163: * install-sh: 3164: Use sed instead of expr to split a flag from its argument. Fixes a 3165: problem with expr interpreting its arguments as a flag when they 3166: start with a dash. 3167: [736065e14301] 3168: 3169: * common/lbuf.c: 3170: Do not need sys/time.h after all 3171: [91f6f668ccda] 3172: 3173: * common/lbuf.c: 3174: Include sys/time.h for utimes() and struct timeval. No longer need 3175: ioctl.h or termios.h 3176: [2d75273d3213] 3177: 3178: * compat/snprintf.c: 3179: Quiet bogus compiler warnings. 3180: [fe252e1968f5] 3181: 3182: * include/missing.h: 3183: Declare innetgr() for HP-UX which is missing a declaration. Declare 3184: domainname() for HP-UX and Solaris which are missing a declaration. 3185: [b37c50751138] 3186: 3187: * plugins/sudoers/bsm_audit.c: 3188: Use __sun for consistency with the rest of the sources. 3189: [6b086b61ccb6] 3190: 3191: * plugins/sudoers/group_plugin.c: 3192: Quiet a bogus compiler warning. 3193: [ebc069842c4a] 3194: 3195: * plugins/sudoers/pwutil.c: 3196: Don't try to delref a NULL group. 3197: [f6ff0838be21] 3198: 3199: * common/alloc.c, common/lbuf.c: 3200: Include memory.h on systems that need it. 3201: [4e676da81c6f] 3202: 3203: 2010-09-11 Todd C. Miller <Todd.Miller@courtesan.com> 3204: 3205: * src/exec.c: 3206: Quiet gcc warnings on glibc systems that use warn_unused_result for 3207: write(2). 3208: [0532da0b7cf7] 3209: 3210: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 3211: sudo_plugin is in section 8; from Ted Percival 3212: [b4506a0de87e] 3213: 3214: * plugins/sudoers/Makefile.in: 3215: testsudoers depends on libsudoers.la, not sudoreplay 3216: [cdb1cc3bf06a] 3217: 3218: 2010-09-10 Todd C. Miller <Todd.Miller@courtesan.com> 3219: 3220: * src/exec.c: 3221: Read as many signals on the signal pipe as we can before returning. 3222: [b181671da047] 3223: 3224: * src/exec.c, src/exec_pty.c, src/sudo_exec.h: 3225: Instead of using a array to store received signals, open a pipe and 3226: have the signal handler write the signal number to one end and 3227: select() on the other end. This makes it possible to handle signals 3228: similar to I/O without race conditions. 3229: [ee84d65c16b6] 3230: 3231: 2010-09-09 Todd C. Miller <Todd.Miller@courtesan.com> 3232: 3233: * doc/visudo.pod, plugins/sudoers/visudo.c: 3234: Make "visudo -c -f -" check the standard input. 3235: [195a3d2a9a26] 3236: 3237: * doc/sudoers.pod: 3238: set_home and always_set_home have an effect if HOME is present in 3239: the env_keep list. 3240: [159d0b9dc5c8] 3241: 3242: * plugins/sudoers/env.c: 3243: Make -H flag work when HOME is listed in env_keep. Also makes 3244: "set_home" and "always_set_home" override override HOME in env_keep. 3245: [a3e5b966193f] 3246: 3247: 2010-09-08 Todd C. Miller <Todd.Miller@courtesan.com> 3248: 3249: * plugins/sudoers/Makefile.in, plugins/sudoers/interfaces.c, 3250: plugins/sudoers/interfaces.h, plugins/sudoers/match.c, 3251: plugins/sudoers/sudoers.c, plugins/sudoers/testsudoers.c, 3252: plugins/sudoers/visudo.c, src/net_ifs.c: 3253: Convert sudoers plugin to use interface list passed in settings. 3254: [87d9b5f4f586] 3255: 3256: * doc/sudo_plugin.pod, src/Makefile.in, src/net_ifs.c, 3257: src/parse_args.c, src/sudo.h: 3258: Query local network interfaces in the main sudo driver and pass to 3259: the plugin as "network_addrs" in the settings list. 3260: [7f35bcfe77a7] 3261: 3262: * plugins/sudoers/bsm_audit.c: 3263: Solaris BSM audit return EINVAL when auditing is not enabled, 3264: whereas OpenBSM returns ENOSYS. 3265: [411b980ec58b] 3266: 3267: 2010-09-07 Todd C. Miller <Todd.Miller@courtesan.com> 3268: 3269: * compat/fnmatch.c: 3270: missing.h should come before most local includes 3271: [53921a7b8b5b] 3272: 3273: * plugins/sudoers/sudoreplay.c: 3274: missing.h should come before most local includes 3275: [e9abb0db1aac] 3276: 3277: * plugins/sudoers/sudoers.h: 3278: Make local includes consistent; use double quotes for local includes 3279: except for generated ones where we use angle brackets. 3280: [09de4faa9547] 3281: 3282: * plugins/sudoers/sudoers.c: 3283: Always fill in NewArgv for audit code. 3284: [7c3aca60519f] 3285: 3286: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 3287: Add missing LOG_INPUT/LOG_OUTPUT support in the lexer. 3288: [007cf6560f92] 3289: 3290: * common/alloc.c, common/atobool.c, common/fileops.c, 3291: common/fmt_string.c, common/lbuf.c, common/list.c, common/term.c, 3292: common/zero_bytes.c, compat/closefrom.c, compat/fnmatch.c, 3293: compat/getcwd.c, compat/getgrouplist.c, compat/getline.c, 3294: compat/getprogname.c, compat/glob.c, compat/isblank.c, 3295: compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c, 3296: compat/nanosleep.c, compat/setenv.c, compat/snprintf.c, 3297: compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c, 3298: compat/unsetenv.c, compat/utimes.c, include/compat.h, 3299: plugins/sample/sample_plugin.c, plugins/sample_group/getgrent.c, 3300: plugins/sample_group/plugin_test.c, 3301: plugins/sample_group/sample_group.c, plugins/sudoers/audit.c, 3302: plugins/sudoers/auth/afs.c, plugins/sudoers/boottime.c, 3303: plugins/sudoers/getdate.c, plugins/sudoers/getdate.y, 3304: plugins/sudoers/linux_audit.c, plugins/sudoers/match.c, 3305: plugins/sudoers/plugin_error.c, plugins/sudoers/sudoreplay.c, 3306: plugins/sudoers/timestr.c, src/error.c, src/sesh.c, src/sudo.h, 3307: src/sudo_noexec.c, src/ttysize.c: 3308: Make local includes consistent; use double quotes for local includes 3309: except for generated ones where we use angle brackets. Also g/c 3310: unused compat.h. 3311: [e57070dc8f04] 3312: 3313: 2010-09-06 Todd C. Miller <Todd.Miller@courtesan.com> 3314: 3315: * plugins/sudoers/match.c: 3316: When matching the runas user and runas group (-u and -g command line 3317: options), keep track of runas group and runas user matches 3318: separately. Only return a positive match if we have a match for 3319: both runas user and runas group (if specified). 3320: [815219e04cc8] 3321: 3322: 2010-09-04 Todd C. Miller <Todd.Miller@courtesan.com> 3323: 3324: * doc/sudoers.ldap.pod, plugins/sudoers/ldap.c: 3325: Add support for multiple URI lines by joining the contents and 3326: passing the result to ldap_initialize. 3327: [a47cae3b72e8] 3328: 3329: * plugins/sudoers/ldap.c, plugins/sudoers/parse.c: 3330: Do not return -1 on error from the display functions; the caller 3331: expects a return value >= 0. 3332: [101456a7dd00] 3333: 3334: * plugins/sudoers/sudoers.c: 3335: Do not set both MODE_EDIT and MODE_RUN 3336: [8faa36694d54] 3337: 3338: 2010-09-03 Todd C. Miller <Todd.Miller@courtesan.com> 3339: 3340: * include/missing.h: 3341: Move includes to the top of the file. 3342: [a51436798e8c] 3343: 3344: 2010-08-30 Todd C. Miller <Todd.Miller@courtesan.com> 3345: 3346: * plugins/sudoers/Makefile.in: 3347: Add missing definition of timedir 3348: [458a749c2c5e] 3349: 3350: * compat/fnmatch.c, compat/getprogname.c, compat/isblank.c, 3351: compat/mksiglist.c, compat/strsignal.c, 3352: plugins/sudoers/plugin_error.c, src/error.c, src/sudo_noexec.c: 3353: Add #include of sys/types.h for .c files that include missing.h to 3354: be sure that size_t and ssize_t are defined. 3355: [08e3132dbf4f] 3356: 3357: * plugins/sudoers/Makefile.in: 3358: Install sudoers file from the build dir not hte src dir. 3359: [ca89e962dbf4] 3360: 3361: 2010-08-26 Todd C. Miller <Todd.Miller@courtesan.com> 3362: 3363: * plugins/sudoers/set_perms.c: 3364: If runas_pw changes, reset the stashed runas aux group vector. 3365: Otherwise, if runas_default is set in a per-command Defaults 3366: statement, the command runs with root's aux group vector (i.e. the 3367: one that was used when locating the command). 3368: [24f9107cedd2] 3369: 3370: * plugins/sudoers/Makefile.in: 3371: Add target to generate sudoers file Remove generated sudoers file as 3372: part of distclean 3373: [fb7422e90f03] 3374: 3375: 2010-08-24 Todd C. Miller <Todd.Miller@courtesan.com> 3376: 3377: * src/exec.c: 3378: When not logging I/O install a handler for SIGCONT and deliver it to 3379: the command upon resume. Fixes bugzilla #431 3380: [495dce52a5aa] 3381: 3382: 2010-08-21 Todd C. Miller <Todd.Miller@courtesan.com> 3383: 3384: * plugins/sudoers/sudoers.h: 3385: g/c unused auth_pw extern definition 3386: [40eb7477ba17] 3387: 3388: * plugins/sudoers/check.c, plugins/sudoers/sudoers.c: 3389: Move get_auth() into check.c where it is actually used. 3390: [e31db0ce3a61] 3391: 3392: 2010-08-20 Todd C. Miller <Todd.Miller@courtesan.com> 3393: 3394: * common/lbuf.c: 3395: Convert a remaining puts() and putchar() to use the output function. 3396: [d69e363a506b] 3397: 3398: * plugins/sudoers/plugin_error.c: 3399: Plug memory leak 3400: [68895469ea8d] 3401: 3402: 2010-08-18 Todd C. Miller <Todd.Miller@courtesan.com> 3403: 3404: * plugins/sudoers/env.c: 3405: Set dupcheck to TRUE when setting new HOME value if !env_reset but 3406: always_set_home is true. Prevents a duplicate HOME in the 3407: environment (old value plus the new one) introduced in f421f8827340. 3408: [9ca19183794f] 3409: 3410: * configure, configure.in, plugins/sudoers/sudoers, 3411: plugins/sudoers/sudoers.in: 3412: Substitute sysconfdir in the installed sudoers file to get the 3413: correct path for sudoers.d. 3414: [86072b6cd55d] 3415: 3416: 2010-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 3417: 3418: * src/get_pty.c: 3419: Fix typo that prevented compilation on Irix; Friedrich Haubensak 3420: [b48be51b65fc] 3421: 3422: 2010-08-16 Todd C. Miller <Todd.Miller@courtesan.com> 3423: 3424: * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c, 3425: common/atobool.c, common/fileops.c, common/fmt_string.c, 3426: common/lbuf.c, common/list.c, common/term.c, common/zero_bytes.c, 3427: compat/Makefile.in, compat/closefrom.c, compat/fnmatch.c, 3428: compat/getcwd.c, compat/getgrouplist.c, compat/getline.c, 3429: compat/getprogname.c, compat/glob.c, compat/isblank.c, 3430: compat/memrchr.c, compat/mksiglist.c, compat/mkstemps.c, 3431: compat/nanosleep.c, compat/setenv.c, compat/snprintf.c, 3432: compat/strlcat.c, compat/strlcpy.c, compat/strsignal.c, 3433: compat/unsetenv.c, compat/utimes.c, include/compat.h, 3434: include/missing.h, plugins/sample/sample_plugin.c, 3435: plugins/sample_group/getgrent.c, 3436: plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in, 3437: plugins/sudoers/audit.c, plugins/sudoers/boottime.c, 3438: plugins/sudoers/getdate.c, plugins/sudoers/getdate.y, 3439: plugins/sudoers/linux_audit.c, plugins/sudoers/plugin_error.c, 3440: plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c, 3441: plugins/sudoers/timestr.c, src/Makefile.in, src/error.c, src/sesh.c, 3442: src/sudo.h, src/sudo_noexec.c, src/ttysize.c: 3443: Merge compat.h and missing.h into missing.h 3444: [572909ae9716] 3445: 3446: 2010-08-14 Todd C. Miller <Todd.Miller@courtesan.com> 3447: 3448: * plugins/sudoers/auth/pam.c: 3449: If the user hits ^C while a password is being read, error out before 3450: reading any further passwords in the pam conversation function. 3451: Otherwise, if multiple PAM auth methods are required, the user will 3452: have to hit ^C for each one. 3453: [23782631748c] 3454: 3455: 2010-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 3456: 3457: * plugins/sudoers/check.c: 3458: Update comment 3459: [a5296cb3a20a] 3460: 3461: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 3462: Document sudo_conv_t function and sudo_printf_t return values. 3463: [745c0017814c] 3464: 3465: * src/conversation.c: 3466: Make _sudo_printf return the number of characters printed on success 3467: like printf(3). 3468: [8eeefe8d7e77] 3469: 3470: 2010-08-10 Todd C. Miller <Todd.Miller@courtesan.com> 3471: 3472: * plugins/sudoers/sudoers.c: 3473: sudoers.h includes sudo_plugin.h for us 3474: [cabe68e07807] 3475: 3476: * common/Makefile.in, common/gettime.c, compat/mkstemps.c, 3477: plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/sudo.h, 3478: src/sudo_edit.c: 3479: Use gettimeofday() directly instead of via the gettime() wrapper. 3480: [7490426c99ae] 3481: 3482: * common/gettime.c, compat/snprintf.c, compat/strcasecmp.c, 3483: compat/strerror.c, config.h.in, configure, configure.in, 3484: include/compat.h, include/missing.h, plugins/sudoers/logging.c, 3485: plugins/sudoers/sudoers.c, plugins/sudoers/visudo.c, src/sudo.c: 3486: Remove some obsolete configure tests, ancient Unix systems are no 3487: longer supported. 3488: [2be6218c3a36] 3489: 3490: 2010-08-07 Todd C. Miller <Todd.Miller@courtesan.com> 3491: 3492: * sudo.pp: 3493: Set pp_kit_version and strip off patch level 3494: [aacfda1b676d] 3495: 3496: * sudo.pp: 3497: Better handling of versions with a patchlevel. For rpm and deb, use 3498: the patchlevel+1 as the release. For AIX, use the patchlevel as the 3499: 4th version number. For the rest, just leave the patchlevel in the 3500: version string. 3501: [638bd35f2346] 3502: 3503: 2010-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 3504: 3505: * plugins/sudoers/auth/sudo_auth.c: 3506: For non-standalone auth methods, stop reading the password if the 3507: user enters ^C at the prompt. 3508: [82c2911bb264] 3509: 3510: * configure, configure.in, plugins/sudoers/Makefile.in, 3511: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/secureware.c, 3512: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h, 3513: plugins/sudoers/pwutil.c: 3514: No need to look up shadow password unless we are doing password- 3515: style authentication. This moves the shadow password lookup to the 3516: auth functions that need it. 3517: [ba9e3eba2b72] 3518: 3519: * plugins/sudoers/sudoers.c: 3520: Retain final passwd/group refs until the policy close() function. 3521: Note that this doesn't get called in all cases so putting this in a 3522: cleanup function is probably better. 3523: [bbe214cb4119] 3524: 3525: * plugins/sudoers/check.c: 3526: Fix mismerge 3527: [395115f89dd6] 3528: 3529: * plugins/sudoers/check.c: 3530: When removing/resetting the timestamp file ignore the tty ticket 3531: contents. 3532: [b709f5667a0b] 3533: 3534: * plugins/sudoers/sudoers.c: 3535: delref sudo_user.pw, runas_pw and runas_gr immediately before we 3536: return. 3537: [4d67d15dfd3b] 3538: 3539: 2010-08-04 Todd C. Miller <Todd.Miller@courtesan.com> 3540: 3541: * plugins/sudoers/check.c, plugins/sudoers/ldap.c, 3542: plugins/sudoers/match.c, plugins/sudoers/pwutil.c, 3543: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h: 3544: Reference count cached passwd and group structs. The cache holds 3545: one reference itself and another is added by sudo_getgr{gid,nam} and 3546: sudo_getpw{uid,nam}. The final ref on the runas and user passwd and 3547: group structs are persistent for now. 3548: [e544685523c3] 3549: 3550: * doc/UPGRADE: 3551: fix typo 3552: [e32f2d35e6c9] 3553: 3554: 2010-08-03 Todd C. Miller <Todd.Miller@courtesan.com> 3555: 3556: * plugins/sudoers/check.c: 3557: Do not produce a warning for "sudo -k" if the ticket file does not 3558: exist. 3559: [1598f6061b75] 3560: 3561: * plugins/sudoers/pwutil.c: 3562: Instead of caching struct passwd and struct group in the red-black 3563: tree, store a struct cache_item which includes both the key and 3564: datum. This allows us to user the actual name that was looked up as 3565: the key instead of the contents of struct passwd or struct group. 3566: This matters because the name in the database may not match what we 3567: looked up, due either to case folding or truncation (historically at 3568: 8 characters). Also mark the disabled calls to sudo_freepwcache() 3569: and sudo_freegrcache() as broken since we use cached data for things 3570: like set_perms() and the logging functions. Fixing this would 3571: require making a copy of the structs for user and runas or adding a 3572: reference count (better). 3573: [225d4a22f60e] 3574: 3575: * plugins/sudoers/Makefile.in: 3576: Fix path to mkinstalldirs 3577: [b4968379b12d] 3578: 3579: * plugins/sudoers/check.c, plugins/sudoers/logging.c, 3580: plugins/sudoers/sudoreplay.c, plugins/sudoers/visudo.c, 3581: src/exec_pty.c, src/get_pty.c, src/tgetpass.c: 3582: Quiet gcc warnings on glibc systems that use warn_unused_result for 3583: write(2) and others. 3584: [c99f138960e0] 3585: 3586: 2010-08-02 Todd C. Miller <Todd.Miller@courtesan.com> 3587: 3588: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 3589: Add %option noinput 3590: [72b9cd49b4f1] 3591: 3592: * aclocal.m4, configure, configure.in: 3593: Add cross-compile defaults for remaining AC_TRY_RUN usage. Also add 3594: back getgroups() check since AC_FUNC_GETGROUPS defaults to "no" when 3595: cross-compiling. 3596: [e385c176d0ee] 3597: 3598: 2010-07-31 Todd C. Miller <Todd.Miller@courtesan.com> 3599: 3600: * aclocal.m4, compat/snprintf.c, config.h.in, configure, configure.in: 3601: Use AC_CHECK_MEMBER in SUDO_SOCK_SA_LEN Use AC_TYPE_LONG_LONG_INT 3602: and AC_CHECK_SIZEOF([long int]) instead of rolling our own. 3603: [cf3e60d9c440] 3604: 3605: 2010-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 3606: 3607: * pp: 3608: Update to latest version 3609: [32f93be33961] 3610: 3611: 2010-07-28 Todd C. Miller <Todd.Miller@courtesan.com> 3612: 3613: * sudo.pp: 3614: Let pp determine pp_aix_version itself. 3615: [7cf0245d84ed] 3616: 3617: * INSTALL, config.h.in, configure, configure.in, mkpkg, 3618: plugins/sudoers/sudoers.c: 3619: Add support for Ubuntu admin flag file and enable it when building 3620: Ubuntu packages. 3621: [00e27cff2dfb] 3622: 3623: * plugins/sudoers/sudoers, sudo.pp: 3624: Add commented out SuSE-like targetpw settings 3625: [4605d47b7413] 3626: 3627: * configure, configure.in: 3628: Only try to use +DAportable for non-GCC on hppa 3629: [75d0f284ccf7] 3630: 3631: * configure, configure.in: 3632: Prevent configure from adding the -g flag unless in devel mode 3633: [b1fd3f8d45c0] 3634: 3635: 2010-07-27 Todd C. Miller <Todd.Miller@courtesan.com> 3636: 3637: * sudo.pp: 3638: Go back to sudo-flavor to match existing packages and only use an 3639: underscore for those that need it. 3640: [d737069d1e1c] 3641: 3642: * sudo.pp: 3643: Use sudo_$flavor instead of sudo-$flavor since that causes the least 3644: amount of trouble for the various package managers. 3645: [71f547af35fc] 3646: 3647: * mkpkg: 3648: Fix handling of the ldap flavor Remove destdir unless --debug was 3649: specified Make distclean before running configure if there is a 3650: Makefile present 3651: [6316f08de7d3] 3652: 3653: * sudo.pp: 3654: Add back include file. 3655: [195627bf68b8] 3656: 3657: * mkpkg: 3658: Pass extra args on to configure on HP-UX, if we don't have the HP C 3659: compiler, disable zlib to prevent gcc from finding it in 3660: /usr/local/lib. 3661: [473efa0e2bac] 3662: 3663: * mkpkg: 3664: Use the HP ANSI C compiler on HP-UX if possible 3665: [fb249b6b175d] 3666: 3667: * plugins/sudoers/sudoreplay.c: 3668: Some getline() implementations (FreeBSD 8.0) do not ignore the 3669: length pointer when the line pointer is NULL as they should. 3670: [2410a1a3543c] 3671: 3672: * plugins/sudoers/sudoreplay.c: 3673: Don't need to check for *cp being non-zero, isdigit() will do that. 3674: [7df11ea8a487] 3675: 3676: * plugins/sudoers/sudoreplay.c: 3677: Add setlocale() so the command line arguments that use floating 3678: point work in different locales. Since sudo now logs the timing 3679: data in the C locale we must Parse the seconds in the timing file 3680: manually instead of using strtod(). Furthermore, sudo 1.7.3 logged 3681: the number of seconds with the user's locale so if the decimal point 3682: is not '.' try using the locale-specific version. 3683: [4d385765f23b] 3684: 3685: * src/exec.c: 3686: Do I/O logging in the C locale so the floating point numbers in the 3687: timing file are not locale-dependent. 3688: [5961cec044ec] 3689: 3690: * plugins/sudoers/sudoreplay.c: 3691: Use errorx() not error() for thingsthat don't set errno. 3692: [0fe5e692af84] 3693: 3694: 2010-07-26 Todd C. Miller <Todd.Miller@courtesan.com> 3695: 3696: * pp: 3697: Better support for 1.2.3 style versions in Tru64 kits 3698: [997c549bb777] 3699: 3700: * sudo.pp: 3701: Add Tru64 kit support 3702: [e273a954f981] 3703: 3704: * pp: 3705: Remove apparently unnecessary use of sudo 3706: [be8840d85125] 3707: 3708: * Makefile.in, plugins/sudoers/Makefile.in: 3709: Create timedir as part of install-dirs target. 3710: [c736bc2fb14f] 3711: 3712: * src/exec_pty.c: 3713: Handle ENXIO from read/write which can occur when reading/writing a 3714: pty that has gone away. 3715: [fa2e8059879f] 3716: 3717: * plugins/sudoers/pwutil.c: 3718: sudo_pwdup() was not expanding an empty pw_shell to _PATH_BSHELL 3719: [3a045475d5ee] 3720: 3721: * mkpkg: 3722: platform is a pp flag not a variable 3723: [12eba39a47c1] 3724: 3725: * Makefile.in, mkpkg, sudo.pp: 3726: Add simple arg parsing for mkpkg so we can set debug, flavor or 3727: platform. 3728: [ada839fe252d] 3729: 3730: * pp: 3731: Make rpm backend work on AIX 5.x 3732: [549a76d11393] 3733: 3734: 2010-07-25 Todd C. Miller <Todd.Miller@courtesan.com> 3735: 3736: * plugins/sudoers/sudoers: 3737: Add commented out Defaults entry for log_output 3738: [7e67d7588900] 3739: 3740: 2010-07-23 Todd C. Miller <Todd.Miller@courtesan.com> 3741: 3742: * doc/Makefile.in: 3743: Remove sudo docdir completely 3744: [dce8e82878ef] 3745: 3746: * doc/sample.sudo.conf: 3747: Add sample sudo.conf 3748: [aafdba3fc411] 3749: 3750: 2010-07-22 Todd C. Miller <Todd.Miller@courtesan.com> 3751: 3752: * plugins/sudoers/Makefile.in: 3753: Add PACKAGE_TARNAME for docdir 3754: [930c92b8f8f0] 3755: 3756: 2010-07-23 Todd C. Miller <Todd.Miller@courtesan.com> 3757: 3758: * src/Makefile.in: 3759: Pass install-sh -b~ here too. 3760: [c3f5eb446c38] 3761: 3762: * plugins/sample/Makefile.in, plugins/sample_group/Makefile.in, 3763: plugins/sudoers/Makefile.in, src/Makefile.in: 3764: Install binary files with -b~ to make a backup. Fixes "text file 3765: busy" error on HP-UX during install. 3766: [81f306f54f8c] 3767: 3768: * install-sh: 3769: "mv -f" on HP-UX doesn't unlink the destination first so add an 3770: explicit rm before moving the temporary into place. 3771: [fb719a79582d] 3772: 3773: * configure, configure.in: 3774: Some more ${foo} -> $(foo) conversion for consistent Makefiles. 3775: [0aa098770074] 3776: 3777: * doc/Makefile.in, plugins/sudoers/Makefile.in: 3778: Install sudoers2ldif in the doc dir 3779: [33ac3b53d7f5] 3780: 3781: 2010-07-22 Todd C. Miller <Todd.Miller@courtesan.com> 3782: 3783: * pathnames.h.in: 3784: Add missing include of maillock.h for Solaris 3785: [5a58883be23a] 3786: 3787: * NEWS, configure, configure.in, doc/TROUBLESHOOTING, doc/UPGRADE, 3788: doc/sample.syslog.conf, doc/sudoers.cat: 3789: Change the default syslog facility from local2 to authpriv (or auth 3790: if the operating system doesn't support authpriv). 3791: [3b70ba514f49] 3792: 3793: * Makefile.in, sudo.pp: 3794: Install sudoers as /etc/sudoers on RPM and debian systems where the 3795: package manager will not replace a user-modified configuration file. 3796: This fixes upgrades from the vendor sudo packages. 3797: [d886b6d60b5b] 3798: 3799: * pp: 3800: RPM: use %config(noreplace) instead of %config for volatile This 3801: results in the new file being installed with a .rpmnew suffix 3802: instead of the file being replaced and the old one renamed with a 3803: .rpmsave suffix. 3804: [58be2119f8e8] 3805: 3806: 2010-07-21 Todd C. Miller <Todd.Miller@courtesan.com> 3807: 3808: * compat/mkstemps.c, plugins/sudoers/boottime.c: 3809: Include time.h for struct timeval 3810: [ddf8b04f0276] 3811: 3812: * src/exec_pty.c: 3813: The return value of strsignal() may be const and should be treated 3814: as const regardless. 3815: [620074ae1e77] 3816: 3817: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 3818: Mention that 127.0.0.1 will not match, nor will localhost unless 3819: that is the actual host name. 3820: [8b574122eb8f] 3821: 3822: * MANIFEST, NEWS, README, WHATSNEW, doc/Makefile.in, doc/UPGRADE: 3823: Rename WHATSNEW -> NEWS 3824: [d1a2c8c47d89] 3825: 3826: * pp: 3827: Updated pp with latest patches 3828: [98e16b9b8f62] 3829: 3830: * WHATSNEW: 3831: Sync with 1.7.4 3832: [65ac4dafeef7] 3833: 3834: * doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod, 3835: plugins/sudoers/sudoers: 3836: Add commented out line to add HOME to env_keep and add a warning to 3837: the note about the HOME change in UPGRADE. 3838: [0d6a775bb6c8] 3839: 3840: 2010-07-20 Todd C. Miller <Todd.Miller@courtesan.com> 3841: 3842: * plugins/sudoers/sudoreplay.c: 3843: Add LINE_MAX define for those without it. 3844: [446d9dbe7859] 3845: 3846: * INSTALL, WHATSNEW, config.h.in, configure, configure.in, 3847: doc/UPGRADE, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod, 3848: plugins/sudoers/defaults.c: 3849: The tty_tickets option is now on by default. 3850: [a01c48206d80] 3851: 3852: * WHATSNEW: 3853: Mention that AIX authdb support has been fixed. 3854: [87bd7f4eba6a] 3855: 3856: * common/aix.c: 3857: setauthdb() only sets the "old" registry if it was set by a previous 3858: call to setauthdb(). To restore the original value, passing NULL 3859: (or an empty string) to setauthdb() is sufficient. 3860: [470da190a254] 3861: 3862: 2010-07-19 Todd C. Miller <Todd.Miller@courtesan.com> 3863: 3864: * WHATSNEW, doc/UPGRADE, doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, 3865: doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod, 3866: plugins/sudoers/env.c: 3867: Reset HOME when env_reset is enabled unless it is in env_keep 3868: [f421f8827340] 3869: 3870: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 3871: The default for set_logname has been "true" for some time now. 3872: [f489da5674c3] 3873: 3874: * plugins/sudoers/boottime.c: 3875: Add missing include of time.h 3876: [624d7014932f] 3877: 3878: * plugins/sudoers/logging.c: 3879: Fix check for dup2() return value. 3880: [140ea2d50d20] 3881: 3882: * plugins/sudoers/env.c: 3883: Add PYTHONUSERBASE to initial_badenv_table 3884: [3149aae5b12c] 3885: 3886: * plugins/sudoers/visudo.c: 3887: Treat an unknown defaults entry as a parse error. 3888: [b3ebad73efb2] 3889: 3890: * plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c: 3891: Check return value of setdefs() but don't stop setting defaults if 3892: we hit an unknown one. 3893: [945e752239ab] 3894: 3895: * WHATSNEW, aclocal.m4, config.h.in, configure, configure.in, 3896: doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat, 3897: doc/sudoers.man.in, doc/sudoers.pod, pathnames.h.in, 3898: plugins/sudoers/env.c: 3899: If env_reset is enabled, set the MAIL environment variable based on 3900: the target user unless MAIL is explicitly preserved in sudoers. 3901: [a1b03e2e0e96] 3902: 3903: 2010-07-17 Todd C. Miller <Todd.Miller@courtesan.com> 3904: 3905: * pp: 3906: decode debian code names 3907: [8741280d9960] 3908: 3909: * WHATSNEW: 3910: fix typo 3911: [a8a19451110b] 3912: 3913: 2010-07-16 Todd C. Miller <Todd.Miller@courtesan.com> 3914: 3915: * WHATSNEW: 3916: Merge with 1.7.4 3917: [9348fa7e15b8] 3918: 3919: * src/sudo.c: 3920: Restore RLIMIT_NPROC after the uid switch if it appears that 3921: runas_setup() did not do it for us. Fixes a bash script problem on 3922: SuSE with RLIMIT_NPROC set to RLIM_INFINITY. 3923: [786fb272e5fd] 3924: 3925: 2010-07-15 Todd C. Miller <Todd.Miller@courtesan.com> 3926: 3927: * mkpkg, pp, sudo.pp: 3928: Restore the dot removal in the os version reported by polypkg. Adapt 3929: mkpkg and sudo.pp to the change. 3930: [dcafdd53b88f] 3931: 3932: 2010-07-16 Todd C. Miller <Todd.Miller@courtesan.com> 3933: 3934: * INSTALL: 3935: document --with-pam-login 3936: [ea93e4c6873c] 3937: 3938: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 3939: The tag is NOSETENV, not UNSETENV. From Petr Uzel. 3940: [2ac90d8de36e] 3941: 3942: 2010-07-15 Todd C. Miller <Todd.Miller@courtesan.com> 3943: 3944: * sudo.pp: 3945: Include flavor in solaris package name 3946: [e605f6364c9f] 3947: 3948: * mkpkg: 3949: Older shells don't support IFS= so set explictly to space, tab, 3950: newline. 3951: [7773960bc8a0] 3952: 3953: * mkpkg: 3954: Use '=' not '==' in test 3955: [c99d42bc48e6] 3956: 3957: * mkpkg: 3958: Fix typo that prevented debian from matching 3959: [84421078fcb7] 3960: 3961: * mkpkg: 3962: Add missing prefix setting for debian 3963: [6466f23de4aa] 3964: 3965: * sudo.pp: 3966: Use tab indents to reduce the chance of problem with <<- Fix the 3967: debian %set section, pp does not set pp_deb_distro Uncomment %sudo 3968: line in sudoers for debian Uncomment some env_keep lines for RHEL, 3969: SLES and debian to more closely match the vendor sudoers files. 3970: Add /etc/pam.d to %files Remove the /etc/sudo-ldap.conf symlink on 3971: debian for ldap flavor 3972: [c5b49feb1a0c] 3973: 3974: * plugins/sudoers/sudoers: 3975: Add commented out env_keep entries, sample Aliases and a %sudo line 3976: for debian. 3977: [387719e52d0f] 3978: 3979: * configure, configure.in: 3980: Move zlib check later on in the script to avoid a strange shell 3981: problem on SLES11. 3982: [1a3153bb1291] 3983: 3984: * configure.in: 3985: Remove check for egrep; configure has its own 3986: [a3b9d98cb5d2] 3987: 3988: 2010-07-14 Todd C. Miller <Todd.Miller@courtesan.com> 3989: 3990: * mkpkg: 3991: Enable zlib for linux distros 3992: [8fa51a1405a4] 3993: 3994: * mkpkg: 3995: Add ldap flavor to default build 3996: [97644f5a555f] 3997: 3998: * mkpkg, sudo.pp: 3999: Simplify rpm linux distro settings 4000: [b9dcf10cdf20] 4001: 4002: * aclocal.m4, configure, configure.in, doc/UPGRADE, doc/sudoers.cat: 4003: Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo. 4004: [2c549c1acde9] 4005: 4006: * Makefile.in: 4007: Fix ChangeLog creation from build dir 4008: [3d0c7904f173] 4009: 4010: * plugins/sudoers/sudoers.c: 4011: Handle getcwd() failure. 4012: [aef7bef87394] 4013: 4014: * doc/Makefile.in, mkpkg, sudo.pp: 4015: Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR 4016: environment variable. 4017: [be6ed611b7a8] 4018: 4019: * sudo.pp: 4020: Create sudo group on debian 4021: [6ed6c032042e] 4022: 4023: * mkpkg, sudo.pp: 4024: Add debian 4/5/6 and use the dot when doing version matches 4025: [6bcb664d1f4f] 4026: 4027: * aclocal.m4, configure: 4028: Use a loop when searching for mv, sendmail and sh 4029: [d5e9369f8d13] 4030: 4031: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 4032: Remove spurious "and"; from debian 4033: [a21e6f7c5b99] 4034: 4035: * aclocal.m4, configure, configure.in, doc/sudoers.cat, 4036: doc/sudoers.man.in, doc/sudoers.pod, doc/visudo.cat, 4037: doc/visudo.man.in, doc/visudo.pod: 4038: Substitute the value of EDITOR into the sudoers and visudo manuals. 4039: [cd79e587dd7f] 4040: 4041: 2010-07-13 Todd C. Miller <Todd.Miller@courtesan.com> 4042: 4043: * mkpkg, pp, sudo.pp: 4044: Initial support for debian 4.0 4045: [ac6707915fa8] 4046: 4047: * mkpkg: 4048: Some platforms need -fPIE instead of -fpie 4049: [fd6be19e5bc2] 4050: 4051: * plugins/sudoers/auth/pam.c: 4052: Only set PAM_RHOST for Solaris, where it is needed to avoid a bug. 4053: On Linux it causes a DNS lookup via libaudit. 4054: [1e10105ade5b] 4055: 4056: * MANIFEST: 4057: Update MANIFEST to match packaging changes 4058: [ef86ee557b5b] 4059: 4060: * sudo.psf: 4061: We now use pp to generate HP-UX packages 4062: [f7aa8da7844e] 4063: 4064: * INSTALL.binary, plugins/sudoers/Makefile.binary.in: 4065: Remove vestiges of old binary package bits. 4066: [afffd005452f] 4067: 4068: * INSTALL, Makefile.in, common/Makefile.in, compat/Makefile.in, 4069: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in, 4070: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 4071: src/Makefile.in: 4072: install-man -> install-doc 4073: [99b5fa05567c] 4074: 4075: * Makefile.in, doc/Makefile.in, include/Makefile.in, mkpkg, 4076: plugins/sudoers/Makefile.in, pp, src/Makefile.in, sudo.pp: 4077: Use http://rc.quest.com/topics/polypkg/ for packaging 4078: [5ca8eb75b223] 4079: 4080: * install-sh: 4081: Just ignore the -c option, it is the default Add support for -d 4082: option 4083: [a8b6b0a131e8] 4084: 4085: 2010-07-12 Todd C. Miller <Todd.Miller@courtesan.com> 4086: 4087: * pathnames.h.in, plugins/sudoers/env.c, plugins/sudoers/logging.c: 4088: Use _PATH_STDPATH instead of _PATH_DEFPATH 4089: [137fa911908e] 4090: 4091: * plugins/sudoers/Makefile.in, src/Makefile.in: 4092: Do not strip binaries. 4093: [20166e287176] 4094: 4095: * INSTALL, configure, configure.in: 4096: Add --insults=disabled configure option to allow people to build in 4097: insult support but have the insults disabled unless explicitly 4098: enabled in sudoers. 4099: [523b8c552e90] 4100: 4101: * compat/mkstemps.c: 4102: Add prototype for gettime() 4103: [275eee40473b] 4104: 4105: * config.h.in, configure, configure.in, plugins/sudoers/auth/pam.c, 4106: plugins/sudoers/env.c, plugins/sudoers/sudoers.c, 4107: plugins/sudoers/sudoers.h: 4108: Add support for a sudo-i pam.d file to be used for "sudo -i". 4109: Adapted from a RedHat patch. 4110: [06d34f16520b] 4111: 4112: 2010-07-09 Todd C. Miller <Todd.Miller@courtesan.com> 4113: 4114: * include/missing.h: 4115: Fix mkstemps() prototype 4116: [2421841e815b] 4117: 4118: * MANIFEST, compat/Makefile.in, compat/mkstemp.c, compat/mkstemps.c, 4119: config.h.in, configure, configure.in, include/missing.h, 4120: src/sudo_edit.c: 4121: Use mkstemps() instead of mkstemp() in sudoedit. This allows 4122: sudoedit to preserve the file extension (if any) which may be used 4123: by the editor (like emacs) to choose the editing mode. 4124: [d33172d2c086] 4125: 4126: 2010-07-08 Todd C. Miller <Todd.Miller@courtesan.com> 4127: 4128: * doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, 4129: plugins/sudoers/ldap.c: 4130: TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses 4131: TLS_CACERT, not TLS_CACERTFILE in its ldap.conf. Other LDAP client 4132: code, such as nss_ldap, uses TLS_CACERTFILE. Also document why you 4133: should avoid disabling TLS_CHECKPEER is possible. 4134: [196622436212] 4135: 4136: 2010-07-07 Todd C. Miller <Todd.Miller@courtesan.com> 4137: 4138: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 4139: Make sudo_plugin format a bit more like a man page 4140: [048d596e32da] 4141: 4142: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 4143: Add suport for negated user/host/command lists in a Defaults entry. 4144: E.g. Defaults:!baduser noexec 4145: [d41112cf0342] 4146: 4147: * Makefile.in, common/Makefile.in, compat/Makefile.in, 4148: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in, 4149: plugins/sample_group/Makefile.in, plugins/sudoers/Makefile.in, 4150: src/Makefile.in: 4151: Add uninstall target 4152: [fea66ebf136a] 4153: 4154: * common/Makefile.in, compat/Makefile.in: 4155: Remove unused AR, SED and RANLIB variables 4156: [2ff9928bfdb3] 4157: 4158: * Makefile.in: 4159: Do not install sample plugins 4160: [5443b87bd1c3] 4161: 4162: 2010-07-06 Todd C. Miller <Todd.Miller@courtesan.com> 4163: 4164: * MANIFEST, aclocal.m4, compat/setenv.c, compat/unsetenv.c, configure, 4165: configure.in, plugins/sudoers/env.c: 4166: Now that sudoers is a dynamically loaded module we cannot override 4167: the libc environment functions because the symbols may already have 4168: been resolved via libc. Remove getenv/putenv/setenv/unsetenv 4169: replacements from sudoers and add replacements for setenv/unsetenv 4170: for systems that lack them. 4171: [3f2b43cb8851] 4172: 4173: * configure, configure.in, plugins/sudoers/Makefile.in: 4174: Link testsudoers with -ldl when needed 4175: [f79606f9fcd7] 4176: 4177: * plugins/sample_group/plugin_test.c: 4178: Remove unused time.h and add limits.h for PATH_MAX 4179: [3f5d0074d621] 4180: 4181: * doc/sudoers.ldap.pod: 4182: Fix typo. 4183: [bc855fd57397] 4184: 4185: 2010-07-05 Todd C. Miller <Todd.Miller@courtesan.com> 4186: 4187: * plugins/sample_group/plugin_test.c: 4188: Do not depend on strlcpy/strlcat 4189: [6e7e2b5af051] 4190: 4191: * plugins/sample_group/plugin_test.c: 4192: Standalone test driver for sudoers group plugin. 4193: [eb1235fc3b8e] 4194: 4195: 2010-07-02 Todd C. Miller <Todd.Miller@courtesan.com> 4196: 4197: * plugins/sudoers/group_plugin.c, src/load_plugins.c: 4198: Use RTLD_LAZY instead of RTLD_NOW; was using RTLD_NOW as a debugging 4199: aid. 4200: [2a34e616229b] 4201: 4202: * plugins/sample_group/sample_group.c: 4203: Fix style nit in function declarations 4204: [ab87c7c76bf9] 4205: 4206: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 4207: Document group_plugin syntax. 4208: [ed1faf72ddcb] 4209: 4210: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 4211: Document the sudoers group plugin. 4212: [f19a62dc8cfc] 4213: 4214: * INSTALL, MANIFEST, Makefile.in, config.h.in, configure, 4215: configure.in, doc/LICENSE, doc/license.pod, include/sudo_plugin.h, 4216: plugins/sample_group/Makefile.in, plugins/sample_group/getgrent.c, 4217: plugins/sample_group/sample_group.c, plugins/sudoers/Makefile.in, 4218: plugins/sudoers/def_data.c, plugins/sudoers/def_data.h, 4219: plugins/sudoers/def_data.in, plugins/sudoers/group_plugin.c, 4220: plugins/sudoers/match.c, plugins/sudoers/nonunix.h, 4221: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c, 4222: plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c, 4223: plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c, src/sudo.c: 4224: Replace built-in non-unix group support with a sudoers group plugin. 4225: Include a sample plugin that can read Unix-format group files. 4226: [8fc58ce0b1a8] 4227: 4228: * configure, configure.in, src/load_plugins.c: 4229: Add a trailing slash to _PATH_SUDO_PLUGIN_DIR to simplify usage. 4230: [5c491dddb8ef] 4231: 4232: 2010-07-01 Todd C. Miller <Todd.Miller@courtesan.com> 4233: 4234: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudoers.cat, 4235: doc/sudoers.man.in, doc/sudoers.pod: 4236: Move sudoers-specific bits out of sudo(8) and into sudoers(5) 4237: [e8a5a5830cfe] 4238: 4239: * aclocal.m4, configure, configure.in: 4240: Substitute @io_logdir@ for the sudoers I/O log directory. 4241: [21a75ca7b0ab] 4242: 4243: 2010-06-29 Todd C. Miller <Todd.Miller@courtesan.com> 4244: 4245: * MANIFEST, common/Makefile.in, common/aix.c, common/alloc.c, 4246: common/atobool.c, common/fileops.c, common/fmt_string.c, 4247: common/lbuf.c, common/term.c, compat/fnmatch.c, compat/getcwd.c, 4248: compat/getgrouplist.c, compat/getline.c, compat/glob.c, 4249: compat/snprintf.c, config.h.in, configure, configure.in, 4250: include/fileops.h, plugins/sample/sample_plugin.c, 4251: plugins/sudoers/alias.c, plugins/sudoers/auth/afs.c, 4252: plugins/sudoers/auth/aix_auth.c, plugins/sudoers/auth/bsdauth.c, 4253: plugins/sudoers/auth/dce.c, plugins/sudoers/auth/fwtk.c, 4254: plugins/sudoers/auth/kerb4.c, plugins/sudoers/auth/kerb5.c, 4255: plugins/sudoers/auth/pam.c, plugins/sudoers/auth/passwd.c, 4256: plugins/sudoers/auth/rfc1938.c, plugins/sudoers/auth/secureware.c, 4257: plugins/sudoers/auth/securid.c, plugins/sudoers/auth/securid5.c, 4258: plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.c, 4259: plugins/sudoers/boottime.c, plugins/sudoers/check.c, 4260: plugins/sudoers/defaults.c, plugins/sudoers/env.c, 4261: plugins/sudoers/find_path.c, plugins/sudoers/getdate.c, 4262: plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c, 4263: plugins/sudoers/goodpath.c, plugins/sudoers/gram.c, 4264: plugins/sudoers/gram.y, plugins/sudoers/interfaces.c, 4265: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c, 4266: plugins/sudoers/logging.c, plugins/sudoers/match.c, 4267: plugins/sudoers/parse.c, plugins/sudoers/pwutil.c, 4268: plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c, 4269: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 4270: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 4271: plugins/sudoers/toke.c, plugins/sudoers/toke.l, 4272: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/visudo.c, 4273: src/Makefile.in, src/aix.c, src/conversation.c, src/exec.c, 4274: src/exec_pty.c, src/get_pty.c, src/load_plugins.c, src/parse_args.c, 4275: src/sudo.c, src/sudo.h, src/sudo_edit.c, src/tgetpass.c: 4276: Set usrinfo for AIX Set adminstrative domain for the process when 4277: looking up user's password or group info and when preparing for 4278: execve(). Include strings.h even if string.h exists since they may 4279: define different things. Fixes warnings on AIX and others. 4280: [cf8b93e872c9] 4281: 4282: * Makefile.in: 4283: Add a separate all target for AIX make which was using the entire 4284: LHS (not just the first entry) of the first target as the implicit 4285: target. 4286: [a45b980a01ef] 4287: 4288: * plugins/sudoers/env.c: 4289: Do not rely on env.env_len when unsetting a variable, just use the 4290: NULL terminator. 4291: [ca6eb239c829] 4292: 4293: * plugins/sudoers/env.c: 4294: In unsetenv() check for NULL or empty name as per POSIX 1003.1-2008 4295: [7046ba7caa4e] 4296: 4297: 2010-06-25 Todd C. Miller <Todd.Miller@courtesan.com> 4298: 4299: * plugins/sudoers/vasgroups.c: 4300: Use warningx() instead of log_error() since the latter is not 4301: available to visudo or testsudoers. This does mean that they don't 4302: end up in syslog. 4303: [152b7c50f426] 4304: 4305: * plugins/sudoers/sudoers.c: 4306: Defer call to sudo_nonunix_groupcheck_cleanup() until after we have 4307: closed the sudoers sources. From Quest sudo. 4308: [c1cd573bab94] 4309: 4310: * plugins/sudoers/pwutil.c: 4311: Ignore case when matching user/group names in the cache. From Quest 4312: sudo. 4313: [2aa4ecc7d7f5] 4314: 4315: 2010-06-24 Todd C. Miller <Todd.Miller@courtesan.com> 4316: 4317: * config.h.in, configure, configure.in, src/selinux.c: 4318: Add check for setkeycreatecon() when --with-selinux is specified. 4319: [affae247b4e0] 4320: 4321: * configure, configure.in: 4322: Error out if libaudit.h is missing or ununable when --with-linux- 4323: audit was specified 4324: [d82e743fac04] 4325: 4326: * doc/HISTORY, doc/history.pod: 4327: Add =head3 entries, mostly for the html version 4328: [ee93112d0308] 4329: 4330: 2010-06-22 Todd C. Miller <Todd.Miller@courtesan.com> 4331: 4332: * doc/HISTORY, doc/history.pod: 4333: Mention when LDAP was incorporate. 4334: [2923dc17f79c] 4335: 4336: 2010-06-21 Todd C. Miller <Todd.Miller@courtesan.com> 4337: 4338: * configure, configure.in: 4339: Define _LINUX_SOURCE_COMPAT on AIX for strsignal() prototype, it is 4340: not covered by _ALL_SOURCE. 4341: [c92fd69809d0] 4342: 4343: 2010-06-18 Todd C. Miller <Todd.Miller@courtesan.com> 4344: 4345: * plugins/sudoers/iolog.c: 4346: Add a cast to quiet a compiler warning. 4347: [a200e07ee1bc] 4348: 4349: * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y: 4350: Quiet a compiler warning. 4351: [c9acfc927cea] 4352: 4353: * plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c: 4354: Call set_fqdn() after sudoers has parsed instead of inline as a 4355: callback. 4356: [5f4e5d075f2d] 4357: 4358: * WHATSNEW, plugins/sudoers/sudoers.c: 4359: Do not call set_fqdn() until sudoers parses (where is gets run as a 4360: callback). 4361: [09040fca6d40] 4362: 4363: * WHATSNEW: 4364: mention the change in tty ticket behavior when there is no tty 4365: [575a1fd98f05] 4366: 4367: * plugins/sudoers/check.c: 4368: Do not update tty ticket if there is no tty. 4369: [63f9c33ce6a7] 4370: 4371: * doc/LICENSE, doc/license.pod: 4372: Update copyright year 4373: [0722ab5d404b] 4374: 4375: * doc/Makefile.in: 4376: Do not rely on BSD make's $> 4377: [936a86398bd9] 4378: 4379: * configure, configure.in: 4380: Set timedir to /var/db/sudo for darwin to match Apple sudo's 4381: location 4382: [d5b9b03096f1] 4383: 4384: 2010-06-16 Todd C. Miller <Todd.Miller@courtesan.com> 4385: 4386: * plugins/sudoers/sudoers.h: 4387: Add stub declarations for struct stat and struct timeval 4388: [f6d90551a4fd] 4389: 4390: * MANIFEST: 4391: Remove compat/sigaction.c 4392: [d0ed6d9a770e] 4393: 4394: * config.h.in, configure, configure.in, plugins/sudoers/defaults.c, 4395: plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c: 4396: Check for zlib.h in addition to libz. 4397: [6e191b4a6065] 4398: 4399: * MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h, 4400: src/sudo_exec.h: 4401: Move functions and symbols shared between exec.c and exec_pty.c into 4402: sudo_exec.h. 4403: [14ae63403544] 4404: 4405: * doc/Makefile.in: 4406: Comment out rules to build .man.in and .cat files unless --with- 4407: devel 4408: [3cf7e5606a85] 4409: 4410: * doc/Makefile.in: 4411: Comment out rules to build .man.in and .cat files unless --with- 4412: devel 4413: [d30495b0e29e] 4414: 4415: * src/parse_args.c: 4416: Quote any non-alphanumeric characters other than '_' or '-' when 4417: passing a command to be run via the shell for the -s and -i options. 4418: [d633f74fe2d9] 4419: 4420: * doc/Makefile.in: 4421: Add back .man suffix 4422: [6e63b60a2739] 4423: 4424: * INSTALL, MANIFEST, WHATSNEW, config.h.in, configure, configure.in, 4425: plugins/sudoers/Makefile.in, plugins/sudoers/audit.c, 4426: plugins/sudoers/bsm_audit.c, plugins/sudoers/linux_audit.c, 4427: plugins/sudoers/linux_audit.h, plugins/sudoers/logging.h, 4428: src/selinux.c: 4429: Add Linux audit support. 4430: [5a2f445e0bd4] 4431: 4432: 2010-06-15 Todd C. Miller <Todd.Miller@courtesan.com> 4433: 4434: * plugins/sudoers/iolog.c: 4435: Remove an XXX 4436: [a170cbe651d1] 4437: 4438: * doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod, 4439: plugins/sudoers/sudoreplay.c: 4440: Add -f (filter) option to sudoreplay to allow certain streams to be 4441: replayed and others ignored. 4442: [62e51b432ea1] 4443: 4444: * src/load_plugins.c, src/parse_args.c, src/sudo.c, src/sudo.h, 4445: src/tgetpass.c: 4446: Fix -A flag when askpass is specified in sudo.conf or if sudo 4447: doesn't need to read a password. 4448: [2e401e4a00e3] 4449: 4450: * src/exec.c, src/exec_pty.c, src/parse_args.c, src/sudo.c, 4451: src/sudo.h, src/sudo_edit.c, src/tgetpass.c: 4452: Clean up some XXXs 4453: [689f0b002d3d] 4454: 4455: * WHATSNEW, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, 4456: doc/sudoers.ldap.pod, plugins/sudoers/ldap.c: 4457: Add support for multiple sudoers_base entries in ldap.conf. From 4458: Joachim Henke 4459: [e3e4a3c2bd5b] 4460: 4461: * config.h.in, configure, configure.in, plugins/sudoers/logging.c, 4462: src/exec_pty.c: 4463: remove setsid check, we require a POSIX system 4464: [cc73cb9e22c0] 4465: 4466: * plugins/sudoers/logging.c, src/exec_pty.c, src/selinux.c, 4467: src/sudo.c, src/tgetpass.c: 4468: Check for dup2() failure. 4469: [5d46d66794f5] 4470: 4471: * config.h.in, configure, configure.in: 4472: Remove dup2() check, it is not optional. 4473: [5f1d56de4384] 4474: 4475: 2010-06-14 Todd C. Miller <Todd.Miller@courtesan.com> 4476: 4477: * WHATSNEW: 4478: sync with sudo 1.7.3 4479: [88e5c0bd6d59] 4480: 4481: * INSTALL: 4482: SunOS does not ship with an ANSI compiler 4483: [f13c85c67069] 4484: 4485: * INSTALL: 4486: Update OS specific notes. Delete some really ancient ones and move 4487: older ones to the end of the list. 4488: [59ce592c4c52] 4489: 4490: * README: 4491: Sudo can be downloaded from the web site too Mention "OS dependent 4492: notes" section in INSTALL 4493: [191871538984] 4494: 4495: * src/exec_pty.c, src/selinux.c: 4496: Call selinux_restore_tty() as part of cleanup() so it gets called 4497: from error()/errorx() 4498: [bb017da6b6da] 4499: 4500: * MANIFEST, doc/PORTING: 4501: Remove obsolete porting guide 4502: [321e35591344] 4503: 4504: * plugins/sudoers/interfaces.h, plugins/sudoers/match.c: 4505: Move union sudo_in_addr_un into interfaces.h 4506: [b2c8b19ee094] 4507: 4508: * doc/Makefile.in: 4509: Remove useless circular dependencies 4510: [5682181b59cf] 4511: 4512: * plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c, 4513: plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c, 4514: plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c, 4515: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c, 4516: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c, 4517: plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c, 4518: plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c: 4519: Convert to ANSI C function declarations 4520: [a4f76927d034] 4521: 4522: * common/alloc.c, common/fileops.c, common/gettime.c, common/list.c, 4523: common/zero_bytes.c, compat/charclass.h, compat/closefrom.c, 4524: compat/fnmatch.c, compat/glob.c, compat/isblank.c, compat/memrchr.c, 4525: compat/mkstemp.c, compat/nanosleep.c, compat/snprintf.c, 4526: compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c, 4527: compat/strlcpy.c, compat/timespec.h, compat/utime.h, 4528: compat/utimes.c, doc/HISTORY, doc/history.pod, doc/license.pod, 4529: include/alloc.h, include/error.h, include/lbuf.h, include/list.h, 4530: include/missing.h, pathnames.h.in, plugins/sudoers/alias.c, 4531: plugins/sudoers/audit.c, plugins/sudoers/auth/sudo_auth.h, 4532: plugins/sudoers/boottime.c, plugins/sudoers/bsm_audit.c, 4533: plugins/sudoers/bsm_audit.h, plugins/sudoers/defaults.c, 4534: plugins/sudoers/defaults.h, plugins/sudoers/find_path.c, 4535: plugins/sudoers/getspwuid.c, plugins/sudoers/goodpath.c, 4536: plugins/sudoers/gram.y, plugins/sudoers/interfaces.c, 4537: plugins/sudoers/interfaces.h, plugins/sudoers/logging.c, 4538: plugins/sudoers/logging.h, plugins/sudoers/match.c, 4539: plugins/sudoers/parse.h, plugins/sudoers/plugin_error.c, 4540: plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c, 4541: plugins/sudoers/redblack.h, plugins/sudoers/sudo_nss.h, 4542: plugins/sudoers/sudoers.h, plugins/sudoers/sudoreplay.c, 4543: plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c, 4544: plugins/sudoers/toke.l, plugins/sudoers/visudo.c, src/aix.c, 4545: src/conversation.c, src/error.c, src/load_plugins.c, 4546: src/parse_args.c, src/sesh.c, src/sudo.h, src/sudo_noexec.c, 4547: src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c: 4548: Update copyright year 4549: [26ac7991f7d8] 4550: 4551: * doc/Makefile.in: 4552: Fix commented DEVDOCS when not in devel mode. 4553: [e0a97eaf3793] 4554: 4555: * plugins/sudoers/match.c: 4556: Quiet a compiler warning. 4557: [b2a17ebd5d38] 4558: 4559: * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y: 4560: Quiet a compiler warning. 4561: [687843bc593d] 4562: 4563: * plugins/sudoers/ldap.c, plugins/sudoers/sudoers.h: 4564: Make all functions in ldap.c static 4565: [b2111e89eeba] 4566: 4567: * doc/schema.ActiveDirectory: 4568: Updates from Alain Roy to provide better examples for importing the 4569: schema and to fix problems caused by Windows validating attributes 4570: which have not yet been added before committing the changes. 4571: [69f4c5ccaf89] 4572: 4573: 2010-06-11 Todd C. Miller <Todd.Miller@courtesan.com> 4574: 4575: * configure, configure.in, doc/Makefile.in, doc/sudo.cat, 4576: doc/sudo.man.in, doc/sudo_plugin.cat, doc/sudo_plugin.man.in, 4577: doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, 4578: doc/sudoers.man.in, doc/sudoreplay.cat, doc/sudoreplay.man.in, 4579: doc/visudo.cat, doc/visudo.man.in: 4580: Leave rules to build .man.in and .cat files uncommented but only 4581: make them part of the "all" rule in devel mode. Generate .cat files 4582: directly from .man.in instead of .man using default values in 4583: configure.in 4584: [c3054a44f6a5] 4585: 4586: * configure, configure.in: 4587: Bump sudo version to 1.8.0b1 4588: [8f79c85135e1] 4589: 4590: * configure, configure.in, src/sudo.c, src/sudo_usage.h.in: 4591: Print configure args with verbose version information. 4592: [1ce690660ed2] 4593: 4594: * TODO, plugins/sudoers/visudo.c: 4595: Remove tfd from struct sudoersfile; it is not used. Add prev pointer 4596: to struct sudoersfile. Declare list of sudoersfile using TQ_DECLARE. 4597: Use tq_append to append sudoers entries to the tail queue. 4598: [1743f9a286e4] 4599: 4600: 2010-06-10 Todd C. Miller <Todd.Miller@courtesan.com> 4601: 4602: * WHATSNEW: 4603: Describe tty timestamp improvements 4604: [e214e863a313] 4605: 4606: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 4607: A comment character may not be part of a command line argument 4608: unless it is quoted with a backslash. Fixes parsing of: 4609: testuser ALL=NOPASSWD: /usr/bin/wl #comment foo bar closes bz #441 4610: [ea2e990f85ed] 4611: 4612: * doc/sudoers.pod: 4613: Make this read a little bit better when passwd_timeout is 0. 4614: [39d362757f31] 4615: 4616: * doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod: 4617: Attempt to handle a default password prompt timeout of zero more 4618: gracefully. 4619: [ea47d43acf5b] 4620: 4621: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 4622: Do not override value of keepopen global, instead restore it to the 4623: value we pushed onto the stack when popping. 4624: [fe282e5a3402] 4625: 4626: * plugins/sudoers/Makefile.in: 4627: Add dependency for utility programs on libreplace and libcommon 4628: [2339aba64928] 4629: 4630: * compat/sigaction.c, config.h.in, configure.in, include/compat.h, 4631: plugins/sudoers/logging.c, plugins/sudoers/mon_systrace.c, 4632: src/exec.c, src/exec_pty.c, src/tgetpass.c: 4633: Remove sigaction emulation Use SA_INTERRUPT in sa_flags 4634: [7dd61f1bd8d2] 4635: 4636: * MANIFEST, config.h.in, configure, configure.in, include/missing.h: 4637: We don't use getgrouplist() at the moment so there's no need to 4638: provide a compat version. 4639: [1597536fbada] 4640: 4641: * TODO: 4642: sync with reality 4643: [9e1a874e7885] 4644: 4645: * include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c, 4646: src/conversation.c, src/sudo.h, src/tgetpass.c: 4647: Fix visiblepw sudoers option; the plugin API portion still needs 4648: documenting 4649: [60b6933ef5e0] 4650: 4651: * src/sudo.c: 4652: Print sudo version as well. 4653: [987ed459b459] 4654: 4655: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c: 4656: Use sudo_printf for I/O log version Clarify policy plugin version 4657: string 4658: [5a58b7e8c80b] 4659: 4660: * plugins/sudoers/getdate.c, plugins/sudoers/getdate.y, 4661: plugins/sudoers/ldap.c, plugins/sudoers/sudoreplay.c: 4662: Silence some compiler warnings 4663: [afb1eba90915] 4664: 4665: * src/load_plugins.c, src/tgetpass.c: 4666: Store askpass path in a global instead of uses setenv() which many 4667: systems lack. 4668: [b440bcc0e660] 4669: 4670: 2010-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 4671: 4672: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat, 4673: doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 4674: plugins/sudoers/check.c, plugins/sudoers/def_data.c, 4675: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in, 4676: plugins/sudoers/defaults.c, plugins/sudoers/sudoers.c, 4677: plugins/sudoers/sudoers.h, src/load_plugins.c, src/parse_args.c, 4678: src/tgetpass.c: 4679: Move askpass path specification from sudoers to sudo.conf. 4680: [5507ab867c26] 4681: 4682: * src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h: 4683: Use a flag bit in struct command_details for selinux instead of a 4684: separate field. 4685: [c59ca4acded9] 4686: 4687: * src/exec.c, src/exec_pty.c, src/sudo.c, src/sudo.h: 4688: Implement background mode. If I/O logging we use pipes instead of a 4689: pty. 4690: [c07a4b356cbd] 4691: 4692: * compat/mksiglist.c, compat/strsignal.c, include/compat.h, 4693: src/exec.c, src/exec_pty.c, src/tgetpass.c: 4694: Move compat definition of NSIG to compat.h 4695: [ab0385467f25] 4696: 4697: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.cat, 4698: doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 4699: Mention plugins in the sudo manual and add some missing path 4700: substitution in the sudo_plugin manual. 4701: [570f831f47a3] 4702: 4703: * src/Makefile.in: 4704: Set _PATH_SUDO_CONF based on $(sysconfdir) 4705: [fde51869cf07] 4706: 4707: * common/lbuf.c, common/term.c, config.h.in, configure, configure.in, 4708: src/exec.c, src/exec_pty.c, src/ttysize.c: 4709: Require POSIX termios to build sudo 4710: [9ec6b41f3f95] 4711: 4712: * src/tgetpass.c: 4713: Ignore SIGPIPE for "sudo -S" 4714: [7ad27fde0c06] 4715: 4716: * src/tgetpass.c: 4717: Fix uninitialized variable in TGP_ECHO case and print a newline if 4718: the user interrupted password input. 4719: [ce19204d8dd4] 4720: 4721: * src/tgetpass.c: 4722: Make TGP_ECHO override TGP_MASK and don't try to restore the 4723: terminal if we didn't modify it. 4724: [a7e11abfe7e4] 4725: 4726: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 4727: include/sudo_plugin.h, plugins/sudoers/auth/sudo_auth.c, 4728: src/conversation.c, src/sudo.h, src/tgetpass.c: 4729: Add SUDO_CONV_PROMPT_MASK define which corresponds to the 4730: "pwfeedback" sudoers option. Do not disable echo if TGP_ECHO is 4731: set. 4732: [e0550590cabe] 4733: 4734: * src/exec_pty.c: 4735: Use POSIX tcgetpgrp() instead of BSD TIOCGPGRP ioctl 4736: [762448182fe3] 4737: 4738: 2010-06-08 Todd C. Miller <Todd.Miller@courtesan.com> 4739: 4740: * src/exec.c, src/exec_pty.c, src/selinux.c, src/sudo.c, src/sudo.h: 4741: Add selinux_enabled flag into struct command_details and set it in 4742: command_info_to_details(). Return an error from selinux_setup() 4743: instead of exiting. Call selinux_setup() from exec_setup(). 4744: [011bea23a5a0] 4745: 4746: 2010-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 4747: 4748: * src/exec_pty.c: 4749: Remove commented out copy of old sudo_execve() function. 4750: [9c5e21380472] 4751: 4752: 2010-06-08 Todd C. Miller <Todd.Miller@courtesan.com> 4753: 4754: * plugins/sudoers/sudoers.c: 4755: Fix setting selinux type on command line. 4756: [814b20a0b3be] 4757: 4758: * plugins/sudoers/iolog.c: 4759: In sudoers_io_close(), skip NULL io_fds[] elements. 4760: [4011ff7d4daf] 4761: 4762: * include/compat.h: 4763: No longer need NGROUPS_MAX define 4764: [cae4c49d7077] 4765: 4766: * compat/nanosleep.c, config.h.in, configure, configure.in, 4767: include/compat.h, plugins/sudoers/check.c, plugins/sudoers/iolog.c, 4768: plugins/sudoers/visudo.c, src/sudo_edit.c: 4769: Replace timerfoo macros with timevalfoo since the timer macros are 4770: known to be busted on some systems. 4771: [4f97d79f2d41] 4772: 4773: * src/exec_pty.c: 4774: Remove duplicate call to selinux_setup(). 4775: [82bd52764e21] 4776: 4777: * plugins/sudoers/auth/pam.c: 4778: If pam_open_session() fails, pass its status to pam_end. 4779: [1d8de4cf8ff3] 4780: 4781: * plugins/sudoers/toke.c, plugins/sudoers/toke.l: 4782: If a file in a #includedir has improper permissions or owner just 4783: skip it. This prevents packages that incorrectly install a file 4784: into /etc/sudoers.d from breaking sudo so easily. Syntax errors in 4785: #includedir files still result in a parse error (for now). 4786: [ade99a4549a4] 4787: 4788: * WHATSNEW, doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod, 4789: plugins/sudoers/def_data.c, plugins/sudoers/def_data.h, 4790: plugins/sudoers/def_data.in, plugins/sudoers/iolog.c: 4791: Add use_pty sudoers option to force use of a pty even when not 4792: logging I/O. 4793: [b280a8972a79] 4794: 4795: * plugins/sudoers/env.c, plugins/sudoers/sudoers.h: 4796: Make env_init() void as it never fails. 4797: [d3890e55daa7] 4798: 4799: * plugins/sudoers/env.c: 4800: No longer use _NSGetEnviron so don't need crt_externs.h 4801: [9b4e0e139881] 4802: 4803: * plugins/sudoers/env.c: 4804: Remove unused VNULL define 4805: [a42cacb263e3] 4806: 4807: 2010-06-07 Todd C. Miller <Todd.Miller@courtesan.com> 4808: 4809: * plugins/sudoers/iolog.c: 4810: Add #define for maximum session id 4811: [9e18c17a28c2] 4812: 4813: * MANIFEST, src/Makefile.in, src/exec.c, src/exec_pty.c, src/sudo.h: 4814: Split exec.c into exec.c and exec_pty.c 4815: [d52376327332] 4816: 4817: * MANIFEST: 4818: Sync with source file moves. 4819: [4a62c6c9e846] 4820: 4821: * src/Makefile.in, src/get_pty.c, src/pty.c: 4822: Rename pty.c -> get_pty.c 4823: [5696a12bd29b] 4824: 4825: 2010-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 4826: 4827: * plugins/sudoers/iolog.c: 4828: Only use I/O input log file if def_log_input is set and output file 4829: if def_log_output is set. 4830: [d866992f1681] 4831: 4832: 2010-06-04 Todd C. Miller <Todd.Miller@courtesan.com> 4833: 4834: * compat/strsignal.c: 4835: Update copyright year 4836: [a96f2593fd4e] 4837: 4838: * src/pty.c: 4839: uid -> ttyuid 4840: [c3454d74ebcb] 4841: 4842: * plugins/sudoers/sudoers.c: 4843: For sudoedit, make a local copy of editor string si become part of 4844: argv. If no editor environment variable, split def_editor on ':' 4845: since it may be a colon-delimited path. 4846: [2ee298506a6e] 4847: 4848: * src/sudo_edit.c: 4849: Remove unneeded endpwent()/endgrent() 4850: [623f6743d101] 4851: 4852: * doc/Makefile.in: 4853: Use value of nroff from configure 4854: [b2ce649125ab] 4855: 4856: * src/exec.c: 4857: Add missing const to I/O log action function 4858: [d764a3955e04] 4859: 4860: * plugins/sudoers/check.c: 4861: Update copyright year and fix whitespace 4862: [e648c35b16be] 4863: 4864: * configure, configure.in: 4865: Fix typo 4866: [8e0bdfc47da4] 4867: 4868: * plugins/sudoers/iolog.c: 4869: Remove redundant tty signal blocking in log function. 4870: [f17f575dabd4] 4871: 4872: 2010-06-03 Todd C. Miller <Todd.Miller@courtesan.com> 4873: 4874: * plugins/sudoers/iolog.c: 4875: Place static keyword where it belongs 4876: [b01aec7c86b4] 4877: 4878: * plugins/sudoers/logging.c: 4879: Always use a printf format string for send_mail() 4880: [13b1ada644c9] 4881: 4882: * common/atobool.c, plugins/sudoers/ldap.c: 4883: Extend atobool() so we can use it in the LDAP code. 4884: [73f8e6807044] 4885: 4886: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod: 4887: Sudo now stashes tty ctime for tty_tickets on Solaris too. 4888: [e82df13ad3fd] 4889: 4890: * plugins/sudoers/boottime.c: 4891: Fix dummy version of get_boottime() 4892: [01d69c06013b] 4893: 4894: 2010-06-02 Todd C. Miller <Todd.Miller@courtesan.com> 4895: 4896: * plugins/sudoers/check.c: 4897: Enable tty_is_devpts() support for Solaris with the "devices" 4898: filesystem. 4899: [237c6b25fa84] 4900: 4901: * src/exec.c: 4902: Unbreak the non-io logging case. 4903: [4822b9f709fb] 4904: 4905: * src/conversation.c, src/sudo.c, src/sudo_plugin_int.h: 4906: Fix symbol name conflict with sudo_printf. 4907: [0d44eab0a8f6] 4908: 4909: * plugins/sudoers/auth/pam.c: 4910: Fix OpenPAM detection for newer versions. 4911: [1b2abed232d8] 4912: 4913: * plugins/sudoers/vasgroups.c: 4914: Sync with Quest sudo git repo 4915: [f1d98b3cba02] 4916: 4917: * aclocal.m4, configure, configure.in: 4918: HP-UX ld uses +b instead or -R or -rpath Fix typo in libvas check 4919: Add missing template for ENV_DEBUG Adapted from Quest sudo 4920: [695dbd7b28f4] 4921: 4922: * README.LDAP: 4923: Fix typos; from Quest Sudo 4924: [4eba9da33b8e] 4925: 4926: 2010-06-01 Todd C. Miller <Todd.Miller@courtesan.com> 4927: 4928: * plugins/sudoers/Makefile.in: 4929: Add back -I$(top_srcdir); we need it for including compat/foo.h 4930: since we cannot rely on "foo.h" being found relative to the source 4931: file when the cwd is different. 4932: [bbf24695f325] 4933: 4934: * src/exec.c: 4935: Fix a bug where we could treat EAGAIN as a permanent error. Also set 4936: cstat if perform_io() returns an error. 4937: [200475c4326f] 4938: 4939: * common/alloc.c, plugins/sudoers/boottime.c, 4940: plugins/sudoers/sudoers.c: 4941: Add casts to quiet compiler warnings. 4942: [85eb1c336697] 4943: 4944: * plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 4945: plugins/sudoers/visudo.c: 4946: Fix typo in ternary operator usage. 4947: [6492ac1450e2] 4948: 4949: 2010-05-30 Todd C. Miller <Todd.Miller@courtesan.com> 4950: 4951: * INSTALL, configure, configure.in: 4952: Add --enable-warnings and fix typo in SUDO_IO_LOGDIR 4953: [92121d693b30] 4954: 4955: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod, 4956: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod: 4957: Update docs to match sudoers I/O logging changes 4958: [18d651989e49] 4959: 4960: * INSTALL, WHATSNEW, aclocal.m4, configure, configure.in, 4961: pathnames.h.in, plugins/sudoers/def_data.c, 4962: plugins/sudoers/def_data.h, plugins/sudoers/def_data.in, 4963: plugins/sudoers/defaults.c, plugins/sudoers/gram.c, 4964: plugins/sudoers/gram.h, plugins/sudoers/gram.y, 4965: plugins/sudoers/iolog.c, plugins/sudoers/parse.c, 4966: plugins/sudoers/parse.h, plugins/sudoers/sudoers.c, 4967: plugins/sudoers/sudoreplay.c: 4968: Break sudoers transcript feature up into log_input and log_output. 4969: [db3c1248d2ad] 4970: 4971: * plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 4972: plugins/sudoers/visudo.c: 4973: Use setprogname() as needed. 4974: [6beee63a4553] 4975: 4976: * plugins/sudoers/iolog.c, plugins/sudoers/sudoreplay.c: 4977: Adapt sudoreplay to iolog changes. 4978: [581f52c05f0f] 4979: 4980: 2010-05-29 Todd C. Miller <Todd.Miller@courtesan.com> 4981: 4982: * plugins/sudoers/iolog.c: 4983: Log all input and output into separate files and store a number on 4984: each timing file line to indicate which file the data is in. 4985: [fb460c5273dd] 4986: 4987: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c, 4988: plugins/sudoers/sudoers.h: 4989: Make sudoers_io functions static to iolog.c 4990: [b2df3cc3eecb] 4991: 4992: 2010-05-28 Todd C. Miller <Todd.Miller@courtesan.com> 4993: 4994: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, src/parse_args.c, 4995: src/sudo_usage.h.in: 4996: Completely remove the -L flag from the sudo front end. 4997: [3d220030b720] 4998: 4999: * plugins/sudoers/sudoreplay.c: 5000: Fix EAGAIN handling when writing to stdout. 5001: [4766d77cea49] 5002: 5003: * plugins/sudoers/sudoers.c: 5004: Eliminate unused variables 5005: [83bd711e79c4] 5006: 5007: * plugins/sudoers/sudoers.c, src/exec.c, src/sudo.c: 5008: Re-enable cleanup functions in sudoers plugin and sudo driver for 5009: error()/errorx(). 5010: [43093f937dd8] 5011: 5012: * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/defaults.c, 5013: plugins/sudoers/interfaces.c, plugins/sudoers/iolog.c, 5014: plugins/sudoers/parse.c, plugins/sudoers/sudoers.c, 5015: plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c: 5016: Use sudo_printf to display verbose version information. 5017: [435cc9f8d4a2] 5018: 5019: * common/Makefile.in, compat/Makefile.in, plugins/sample/Makefile.in, 5020: plugins/sudoers/Makefile.in, src/Makefile.in: 5021: Minor Makefile cleanup: fix a typo, change the removal order in the 5022: clean targets, and remove a superfluous include path for the sudoers 5023: plugin. 5024: [6e3b2d6b4437] 5025: 5026: * plugins/sudoers/env.c: 5027: Handle duplicate variables in the environment. For unsetenv(), keep 5028: looking even after remove the first instance. For sudo_putenv(), 5029: check for and remove dupes after we replace an existing value. 5030: [c1bbb88d0435] 5031: 5032: 2010-05-27 Todd C. Miller <Todd.Miller@courtesan.com> 5033: 5034: * plugins/sudoers/Makefile.in: 5035: Use explicit path to source file instead of $< for files that live 5036: in devdir and top_srcdir. 5037: [358ab7f6cc64] 5038: 5039: * plugins/sudoers/Makefile.in: 5040: Add explicit rules to compile gram.c and toke.c for HP-UX Pevent 5041: ending LIBSUDOERS_OBJS with a backslash 5042: [481a5c96d47e] 5043: 5044: * plugins/sudoers/Makefile.in, src/Makefile.in: 5045: Link libcommon before libreplace since libcommon may use functions 5046: only present in libreplace. 5047: [1847c496ff5b] 5048: 5049: * common/Makefile.in: 5050: Move code common to sudo and the sudoers plugin to a convenience 5051: library, libcommon. Removes the need to make links in the sudoers 5052: plugin dir and reduces re-compilation of duplicate object files. 5053: [4c8986352937] 5054: 5055: * Makefile.in, common/alloc.c, common/atobool.c, common/fileops.c, 5056: common/fmt_string.c, common/gettime.c, common/lbuf.c, common/list.c, 5057: common/term.c, common/zero_bytes.c, configure, configure.in, 5058: plugins/sample/Makefile.in, plugins/sudoers/Makefile.in, 5059: src/Makefile.in, src/alloc.c, src/atobool.c, src/fileops.c, 5060: src/fmt_string.c, src/gettime.c, src/lbuf.c, src/list.c, src/term.c, 5061: src/zero_bytes.c: 5062: Move code common to sudo and the sudoers plugin to a convenience 5063: library, libcommon. Removes the need to make links in the sudoers 5064: plugin dir and reduces re-compilation of duplicate object files. 5065: [1d1d98bd55b9] 5066: 5067: * src/exec.c, src/sudo.c, src/sudo.h: 5068: Rename script_execve to sudo_execve and rename script_foo in exec.c 5069: [a35ec80de96a] 5070: 5071: * MANIFEST, src/Makefile.in, src/exec.c, src/script.c: 5072: rename script.c exec.c and fix up the MANIFEST file 5073: [36bc3bff9578] 5074: 5075: * src/script.c, src/sudo.c, src/sudo.h: 5076: Rename script_setup() to pty_setup() and call from script_execve() 5077: directly. 5078: [899b0fb2a14d] 5079: 5080: * configure, configure.in: 5081: bump version to 1.8.0a2 5082: [0b1c1ca9d4e5] 5083: 5084: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 5085: Document init_session 5086: [b5324785a406] 5087: 5088: * plugins/sudoers/auth/API, plugins/sudoers/auth/sudo_auth.c, 5089: plugins/sudoers/auth/sudo_auth.h: 5090: Clean up the sudoers auth API a bit and update the docs. 5091: [c40fd4cb6e68] 5092: 5093: * include/sudo_plugin.h, plugins/sudoers/auth/pam.c, 5094: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c, 5095: plugins/sudoers/sudoers.h, src/script.c, src/sudo.c: 5096: Add init_session function to struct policy_plugin that gets called 5097: before the uid/gid/etc changes. A struct passwd pointer is passed 5098: in,which may be NULL if the user does not exist in the passwd 5099: database.The sudoers module uses init_session to open the pam 5100: session as needed. 5101: [d71723320ee8] 5102: 5103: 2010-05-26 Todd C. Miller <Todd.Miller@courtesan.com> 5104: 5105: * plugins/sudoers/auth/pam.c, plugins/sudoers/auth/sudo_auth.c, 5106: plugins/sudoers/auth/sudo_auth.h, plugins/sudoers/set_perms.c, 5107: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h: 5108: Add open/close session to sudo auth, only used by PAM. This allows 5109: us to open (and close) the PAM session from sudoers. 5110: [2665e2920d0d] 5111: 5112: * plugins/sudoers/Makefile.in: 5113: Add explicit rule to build getdate.o for HP-UX make. 5114: [7f049e989956] 5115: 5116: * plugins/sudoers/Makefile.in: 5117: Back out most of change 45e406ebdea2. Create dummy .l.c and .y.c 5118: rules as an alternate way to prevent HP-UX make (and others) from 5119: trying to rebuild the parser in non-dev mode. 5120: [f84badad98c5] 5121: 5122: * plugins/sudoers/sudoers.c: 5123: Re-enable PATH_MAX check for command 5124: [40d8a50da136] 5125: 5126: * Makefile.in: 5127: For distclean, clean the main directory last since the subdirs need 5128: to be able to run libtool to clean things. 5129: [8949a9861634] 5130: 5131: * compat/Makefile.in: 5132: Fix generation of mksiglist.h 5133: [b7cdc9b36650] 5134: 5135: * src/script.c: 5136: Now that we defer sending cstat until the end of script_child() we 5137: cannot reuse cstat when reading command status from parent. 5138: [25c882643466] 5139: 5140: 2010-05-25 Todd C. Miller <Todd.Miller@courtesan.com> 5141: 5142: * configure, configure.in, doc/sudo.man.in, doc/sudo.man.pl, 5143: doc/sudoers.cat, doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, 5144: doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoreplay.cat, 5145: doc/sudoreplay.man.in, doc/visudo.cat, doc/visudo.man.in: 5146: Use numeric registers to handle conditionals instead of trying to do 5147: it all with text processing. 5148: [478079c3fd4b] 5149: 5150: * doc/sudoers.pod: 5151: Document per-command SELinux settings 5152: [13840d566805] 5153: 5154: * plugins/sudoers/sudoers.c: 5155: Repair "sudo -l -U username" 5156: [10a0dcdf2ddf] 5157: 5158: * plugins/sudoers/sudoers.c: 5159: Set selinux role and type in command details. 5160: [8ae6d35a126d] 5161: 5162: * src/script.c, src/selinux.c, src/sudo.h: 5163: Rework SELinux support. 5164: [83279cc94bf2] 5165: 5166: 2010-05-24 Todd C. Miller <Todd.Miller@courtesan.com> 5167: 5168: * src/script.c, src/selinux.c, src/sudo.h: 5169: Make SELinux support compile again. Needs more work to be complete. 5170: [3d3addebcf82] 5171: 5172: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 5173: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 5174: src/parse_args.c, src/script.c, src/selinux.c, src/sudo.c, 5175: src/sudo.h: 5176: Bring back closefrom settings. 5177: [b1c6257d4bbb] 5178: 5179: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c, 5180: plugins/sudoers/sudoers.h: 5181: If running a command or sudoedit in transcript mode, call 5182: io_nextid() before log_allowed() so the session id is logged. 5183: [c42f3ae40150] 5184: 5185: * configure, configure.in: 5186: Use mandoc(1) if nroff(1) is not present. 5187: [daad4bbd04af] 5188: 5189: * doc/Makefile.in: 5190: Use the --file argument to config.status instead of setting 5191: CONFIG_FILES in the environment. 5192: [c89411a8bf70] 5193: 5194: * plugins/sudoers/Makefile.in: 5195: We cannot conditionally update gram.h or the dependency ordering 5196: gets messed up in devel mode. 5197: [c938953231d9] 5198: 5199: 2010-05-21 Todd C. Miller <Todd.Miller@courtesan.com> 5200: 5201: * Makefile.in, compat/Makefile.in, configure, configure.in, 5202: doc/Makefile.in, include/Makefile.in, plugins/sample/Makefile.in, 5203: plugins/sudoers/Makefile.in, src/Makefile.in: 5204: Substitute @SHELL@ into Makefiles 5205: [36aa6a095335] 5206: 5207: * config.sub: 5208: Fix typo 5209: [16d294d26b58] 5210: 5211: * config.guess, config.sub, configure, configure.in: 5212: Update to autoconf 2.65 5213: [4fa6ea8caea3] 5214: 5215: * Makefile.in: 5216: Fix libtool target (space vs. tabs) 5217: [755cf3892618] 5218: 5219: * config.h.in, plugins/sudoers/logging.h, plugins/sudoers/visudo.c: 5220: Remove use of RETSIGTYPE; all modern systems have signal handlers 5221: that return void. 5222: [42b4e3aee668] 5223: 5224: * Makefile.in, aclocal.m4, acsite.m4, configure, configure.in, 5225: ltmain.sh, m4/libtool.m4, m4/ltoptions.m4, m4/ltsugar.m4, 5226: m4/ltversion.m4, m4/lt~obsolete.m4, plugins/sample/Makefile.in, 5227: plugins/sudoers/Makefile.in, src/Makefile.in: 5228: Update to libtool-2.2.6b. I haven't made any local modifications 5229: this time, which should be OK since we install sudo_noexec.so by 5230: hand now. 5231: [6f79ced593bb] 5232: 5233: * compat/Makefile.in, plugins/sample/Makefile.in, 5234: plugins/sudoers/Makefile.in, src/Makefile.in: 5235: Use libtool to clean objects 5236: [1581057d6472] 5237: 5238: * include/Makefile.in: 5239: Install sudo_plugin.h as part of "make install" and make other 5240: install targets callable from the top-level Makefile 5241: [aaaeb027d774] 5242: 5243: * configure, configure.in: 5244: regen with autoupdate to eliminate AC_TRY_LINK 5245: [5d5541c230f5] 5246: 5247: * Makefile.in, compat/Makefile.in, configure, configure.in, 5248: doc/Makefile.in, plugins/sample/Makefile.in, 5249: plugins/sudoers/Makefile.in, src/Makefile.in: 5250: Install sudo_plugin.h as part of "make install" and make other 5251: install targets callable from the top-level Makefile 5252: [b258b8401b1c] 5253: 5254: * plugins/sample/sample_plugin.c: 5255: The sample plugin doesn't support being run with no args so return a 5256: usage error in this case. 5257: [473b3cf965be] 5258: 5259: * plugins/sudoers/iolog.c: 5260: Set close on exec flag for descriptors used for I/O logging so they 5261: are not present in the command being run. 5262: [2c7e8708df76] 5263: 5264: * plugins/sudoers/tsgetgrpw.c: 5265: Set close on exec flag in private versions of setpwent() and 5266: setgrent(). 5267: [64fef78cb833] 5268: 5269: * src/script.c: 5270: Close the I/O pipes aftering dup2()ing them to std{in,out,err}. 5271: Fixes extra fds being present in the command when it is part of a 5272: pipeline. 5273: [060451617713] 5274: 5275: * plugins/sudoers/sudoers.c: 5276: Set user_tty to "unknown" if there is no tty, like sudo 1.7 does (it 5277: is used when logging). Note that user_ttypath will still be NULL if 5278: there is no tty. 5279: [31b69a6ecda7] 5280: 5281: * src/script.c, src/sudo.h: 5282: Cosmetic changes: add comments, remove orphaned prototype and 5283: make a global static. 5284: [f7851af0143e] 5285: 5286: 2010-05-20 Todd C. Miller <Todd.Miller@courtesan.com> 5287: 5288: * src/script.c: 5289: Move check for maxfd == -1 to flush_output where it belongs. 5290: [b826a95b4491] 5291: 5292: * src/script.c: 5293: Break out of select loop if all the fds we want to select on are -1. 5294: [f5b387024238] 5295: 5296: * src/sudo.c: 5297: Avoid possible malloc(0) if plugin returns an empty groups list. 5298: [9765a8fe5ce7] 5299: 5300: * src/sudo.c: 5301: Add debugging info when calling plugin close function 5302: [95a273c7ff66] 5303: 5304: * src/script.c: 5305: Avoid closing stdin/stdout/stderr when we are piping output. 5306: [330e76423caf] 5307: 5308: * src/script.c: 5309: When execve() of the command fails, it is possible to receive 5310: SIGCHLD before we've read the error status from the pipe. Re-order 5311: things such that we send the final status at the very end and prefer 5312: error status over wait status. 5313: [b0dcf825244f] 5314: 5315: 2010-05-19 Todd C. Miller <Todd.Miller@courtesan.com> 5316: 5317: * plugins/sudoers/auth/sudo_auth.c: 5318: Fix compilation for non PAM/BSD auth/AIX auth 5319: [e382b39d2e4f] 5320: 5321: 2010-05-18 Todd C. Miller <Todd.Miller@courtesan.com> 5322: 5323: * src/script.c: 5324: Additional checks to make sure we don't close /dev/tty by mistake. 5325: When flushing, sleep in select as long as we have buffers that need 5326: to be written out. 5327: [8139cbd3dd54] 5328: 5329: * src/script.c: 5330: Now that we can use pipes for stdin/stdout/stderr there is no longer 5331: a need to error out when there is no tty. We just need to make sure 5332: we don't try to use the tty fd if it is -1. 5333: [666621635d26] 5334: 5335: 2010-05-17 Todd C. Miller <Todd.Miller@courtesan.com> 5336: 5337: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 5338: include/sudo_plugin.h, plugins/sample/sample_plugin.c, 5339: plugins/sudoers/iolog.c, plugins/sudoers/sudoers.h, src/sudo.c: 5340: Add argc and argv to I/O logger open function. 5341: [0d7faa007d27] 5342: 5343: * doc/sudo_plugin.man.in, doc/sudo_plugin.pod, include/sudo_plugin.h, 5344: plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c, 5345: src/parse_args.c, src/sudo.c, src/sudo_edit.c: 5346: Remove check_sudoedit function pointer in struct sudo_policy. 5347: Instead, sudo will set sudoedit=true in the settings array. The 5348: plugin should check for this and modify argv_out as appropriate in 5349: check_policy. 5350: [c0328e3276b8] 5351: 5352: 2010-05-16 Todd C. Miller <Todd.Miller@courtesan.com> 5353: 5354: * plugins/sample/sample_plugin.c, src/sudo.c, src/sudo.h, 5355: src/sudo_edit.c: 5356: If plugin sets "sudoedit=true" in the command info, enable sudoedit 5357: mode even if not invoked as sudoedit. This allows a plugin to 5358: enable sudoedit when the user runs an editor. 5359: [96d67b99e42e] 5360: 5361: 2010-05-15 Todd C. Miller <Todd.Miller@courtesan.com> 5362: 5363: * plugins/sudoers/Makefile.in: 5364: gram.h must not depend on gram.y if we want to avoid unnecessary 5365: rebuilding of targets dependent on gram.h when gram.y changes. 5366: [9db4b767fdca] 5367: 5368: * plugins/sample/sample_plugin.c: 5369: Refactor common bits of check_policy and check_edit 5370: [ac4d366a04cf] 5371: 5372: * plugins/sample/sample_plugin.c: 5373: Add sudoedit support 5374: [a1a6cc4c0cef] 5375: 5376: 2010-05-14 Todd C. Miller <Todd.Miller@courtesan.com> 5377: 5378: * plugins/sudoers/Makefile.in: 5379: Rely more on VPATH; fixes a dependency issue with the parser. 5380: [45e406ebdea2] 5381: 5382: * include/compat.h: 5383: Fix typo introduced in last commit 5384: [3ccb0f853d11] 5385: 5386: * include/compat.h: 5387: Emulate seteuid using setreuid() or setresuid() as needed. There are 5388: still a few places that call seteuid() directly. 5389: [36e8efa3a99d] 5390: 5391: * src/parse_args.c, src/sudo_edit.c: 5392: Attempt to fix building on systems that only have setuid. 5393: [8e9ba4083318] 5394: 5395: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 5396: Clarify sudoedit a tad. 5397: [d39dfaa14ade] 5398: 5399: 2010-05-13 Todd C. Miller <Todd.Miller@courtesan.com> 5400: 5401: * src/sudo_edit.c: 5402: Fix compilation on HP-UX 5403: [f6e47843d139] 5404: 5405: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 5406: Document sudoedit 5407: [4cbf5196d993] 5408: 5409: * plugins/sudoers/sudoers.c, src/sudo.c, src/sudo.h, src/sudo_edit.c: 5410: Change how we handle the sudoedit argv. We now require that there 5411: be a "--" in argv to separate the editor and any command line 5412: arguments from the files to be edited. 5413: [20623d549a3c] 5414: 5415: * include/sudo_plugin.h, plugins/sample/sample_plugin.c, 5416: plugins/sudoers/Makefile.in, plugins/sudoers/gettime.c, 5417: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c, 5418: src/Makefile.in, src/gettime.c, src/parse_args.c, src/sudo.c, 5419: src/sudo.h, src/sudo_edit.c: 5420: Work in progress support for sudoedit. The actual interface used by 5421: the plugin for sudoedit is likely to change. 5422: [c31262a31997] 5423: 5424: * plugins/sudoers/find_path.c, plugins/sudoers/sudoers.c, 5425: plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c: 5426: Make find_path() a little more generic by not checking def_foo 5427: variables inside it. Instead, pass in ignore_dot as a function 5428: argument. 5429: [9c23101a094d] 5430: 5431: * plugins/sudoers/env.c: 5432: Add version of getenv(3) that uses our own environ pointer. 5433: [0e3783e63534] 5434: 5435: 2010-05-12 Todd C. Miller <Todd.Miller@courtesan.com> 5436: 5437: * src/script.c: 5438: Avoid a potential race condition if SIGCHLD is received immediately 5439: before we call select(). 5440: [99adc5ea7f0a] 5441: 5442: * plugins/sudoers/sudoers.c: 5443: Call env_init() before we open the sudoers sources as those may call 5444: our setenv() replacement. 5445: [5f82601f5ab0] 5446: 5447: * plugins/sudoers/env.c: 5448: Initialize env_len in env_init() 5449: [7ae02b3029b5] 5450: 5451: 2010-05-11 Todd C. Miller <Todd.Miller@courtesan.com> 5452: 5453: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod: 5454: Document time stamp shortcomings under SECURITY NOTES Use "time 5455: stamp" instead of timestamp. 5456: [2b86120815b2] 5457: 5458: * doc/Makefile.in: 5459: Make sed substitution of mansectsu and mansectform global. 5460: [94588632dba0] 5461: 5462: * plugins/sudoers/check.c: 5463: If the tty lives on a devpts filesystem, stash the ctime in the tty 5464: ticket file, as it is not updated when the tty is written to. This 5465: helps us determine when a tty has been reused without the user 5466: authenticating again with sudo. 5467: [0e62a31bceb0] 5468: 5469: * src/tgetpass.c: 5470: Fix pasto in mulitple signal fix and use _NSIG not NSIG since that 5471: is what our compat checks set. 5472: [df50f0a040c9] 5473: 5474: * configure, configure.in: 5475: Add check for whether sudo need to link with -ldl to get dlopen(). 5476: This is a bit of a hack that will get reworked when libtool is 5477: updated. 5478: [63bdcf579533] 5479: 5480: * plugins/sudoers/check.c: 5481: Fix timestamp removal with -k/-K 5482: [6b4639fef973] 5483: 5484: * plugins/sudoers/Makefile.in: 5485: audit.c is now private to the sudoers plugin 5486: [1974f342ae0b] 5487: 5488: * configure, configure.in: 5489: Link with -lpthread on HP-UX since a plugin may be linked with 5490: -lpthread and dlopen() will fail if the shared object has a 5491: dependency on -lpthread but the main program is not linked with it. 5492: [d42139391263] 5493: 5494: * config.h.in, configure, configure.in, plugins/sudoers/set_perms.c: 5495: Add separate test for getresuid() since HP-UX has setresuid() but no 5496: getresuid(). 5497: [910fe727a374] 5498: 5499: * doc/Makefile.in: 5500: Remove errant backslash 5501: [dd5464257c69] 5502: 5503: * src/script.c: 5504: Fix SIGPIPE handling. Now that we use may use pipes for 5505: stdin/stdout we need to pass any SIGPIPE we receive to the running 5506: command. 5507: [3f6b1991f4fd] 5508: 5509: * src/script.c: 5510: Also start the command in the background if stdin is not a tty. 5511: [d93bc33a3740] 5512: 5513: 2010-05-10 Todd C. Miller <Todd.Miller@courtesan.com> 5514: 5515: * plugins/sudoers/sudoreplay.c, src/script.c, src/sudo.h, src/term.c: 5516: No need to use pseudo-cbreak mode now that we use pipes when stdout 5517: is not a tty. Instead, check whether stdin is a tty and if not, 5518: delay setting the tty to raw mode until the command tries to access 5519: it itself (and receives SIGTTIN or SIGTTOU). 5520: [e68315cf8c6b] 5521: 5522: * src/tgetpass.c: 5523: Use an array for signals received instead of a single variable so we 5524: don't lose any when there are multiple different signals. 5525: [2ac726dac864] 5526: 5527: * src/tgetpass.c: 5528: Do signal setup after turning off echo, not before. If we are using 5529: a tty but are not the foreground pgrp this will generate SIGTTOU so 5530: we want the default action to be taken (suspend process). 5531: [bebb6209c795] 5532: 5533: 2010-05-07 Todd C. Miller <Todd.Miller@courtesan.com> 5534: 5535: * src/script.c: 5536: Flush the iobufs on suspend or child exit using the same logic as 5537: the main event loop. 5538: [c627feee1035] 5539: 5540: * src/script.c: 5541: Free memory after we are done with it. 5542: [8db9b611b45a] 5543: 5544: 2010-05-06 Todd C. Miller <Todd.Miller@courtesan.com> 5545: 5546: * doc/HISTORY: 5547: Quest now sponsors Sudo development 5548: [6cc490083bc7] 5549: 5550: 2010-05-05 Todd C. Miller <Todd.Miller@courtesan.com> 5551: 5552: * doc/Makefile.in: 5553: Install sudo_plugin man page. 5554: [c253729790b2] 5555: 5556: * src/script.c: 5557: Go back to reseting io_buffer offset and length (and now also the 5558: EOF handling) in the loop we do the FD_SET, not after we drain the 5559: buffer after write() since we don't know what order reads and writes 5560: will occur in. 5561: [5f38bfa8497f] 5562: 5563: * MANIFEST: 5564: audit files moved to sudoers plugin directory 5565: [b1ead182428e] 5566: 5567: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 5568: Document plugin_printf and new logging functions. 5569: [fe9430b60ab5] 5570: 5571: * src/script.c: 5572: Add support for logging stdin when it is not a tty. There is still a 5573: bug where "cat | sudo cat" has problems because both cat and sudo 5574: are trying to read from the tty. 5575: [04c9c59fcfba] 5576: 5577: * include/sudo_plugin.h, plugins/sample/sample_plugin.c, 5578: plugins/sudoers/sudoers.c, src/script.c: 5579: Add separate I/O logging functions for tty in/out and 5580: stdin/stdout/stderr. NOTE: stdin logging does not currently work and 5581: is disabled for now. 5582: [a36dfd4ca935] 5583: 5584: 2010-05-04 Todd C. Miller <Todd.Miller@courtesan.com> 5585: 5586: * include/sudo_plugin.h, plugins/sample/sample_plugin.c, 5587: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c, 5588: plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c, 5589: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 5590: src/conversation.c, src/sudo.c, src/sudo_plugin_int.h: 5591: Add pointer to a printf like function to plugin open functon. This 5592: can be used instead of the conversation function to display info and 5593: error messages. 5594: [98734eea8ef1] 5595: 5596: * Makefile.in: 5597: Stop if make in a subdir fails 5598: [228bb3ad2dbc] 5599: 5600: * src/script.c: 5601: Only set user's tty to blocking mode when doing the final flush. 5602: Flush pipes as well as pty master when the process is done. 5603: [20ff67218666] 5604: 5605: 2010-05-03 Todd C. Miller <Todd.Miller@courtesan.com> 5606: 5607: * plugins/sudoers/ldap.c: 5608: Use print_error() when displaying ldap config info in debugging 5609: mode. 5610: [d142e0cacb22] 5611: 5612: * compat/Makefile.in, compat/strdup.c, compat/strndup.c: 5613: No longer need strdup() or strndup() replacements. 5614: [df53697174ec] 5615: 5616: * plugins/sudoers/logging.c, plugins/sudoers/plugin_error.c, 5617: plugins/sudoers/sudoers.h: 5618: Add print_error() function that uses the conversation function to 5619: print a variable number of error strings and use it in log_error(). 5620: [b1fa2861b575] 5621: 5622: * src/script.c, src/sudo.h, src/term.c: 5623: Do not need the opost flag to term_copy() now that we use pipes for 5624: stdout/stderr when they are not a tty. 5625: [f42811f70a19] 5626: 5627: * src/script.c: 5628: Use pipes to the sudo process if stdout or stderr is not a tty. 5629: Still needs some polishing and a decision as to whether it is 5630: desirable to add additonal entry points for logging 5631: stdout/stderr/stdin when they are not ttys. That would allow a 5632: replay program to keep things separate and to know whether the 5633: terminal needs to be in raw mode at replay time. 5634: [1a945e0ab2da] 5635: 5636: 2010-04-30 Todd C. Miller <Todd.Miller@courtesan.com> 5637: 5638: * plugins/sudoers/Makefile.in, plugins/sudoers/audit.c, 5639: plugins/sudoers/bsm_audit.c, plugins/sudoers/bsm_audit.h, 5640: src/audit.c, src/bsm_audit.c, src/bsm_audit.h: 5641: Move audit sources into the sudoers plugin dir; the driver does not 5642: use them. 5643: [50ec36422cd0] 5644: 5645: * compat/getline.c, compat/mksiglist.c, compat/nanosleep.c, 5646: compat/strdup.c, compat/strndup.c, plugins/sample/sample_plugin.c, 5647: plugins/sudoers/boottime.c, plugins/sudoers/getdate.c, 5648: plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c, 5649: plugins/sudoers/timestr.c, plugins/sudoers/vasgroups.c, src/alloc.c, 5650: src/atobool.c, src/audit.c, src/lbuf.c, src/list.c, src/sesh.c, 5651: src/term.c, src/ttysize.c: 5652: Use angle brackets when including headers that can only be found 5653: when an -I flag is specified. The files in the compat dir could get 5654: away with double quotes here but I've converted all the source files 5655: to use angle brackets for consistency. 5656: [9e30a8fc6d4b] 5657: 5658: * plugins/sudoers/Makefile.in: 5659: Add missing -I$(top_srcdir) to CPPFLAGS so includes in the compat 5660: dir can be found when building outside the source tree. 5661: [1150934b79dd] 5662: 5663: * plugins/sudoers/Makefile.in: 5664: Clean up links in distclean 5665: [78595028be8b] 5666: 5667: * plugins/sudoers/Makefile.in: 5668: Hack around VPATH semantic differences by symlinking files we need 5669: from ../../src into the current directory and build those. A better 5670: fix would be to either make a .a or .la file with those files in it 5671: or simply use a single, flat, Makefile instead of per-subdirs 5672: Makefiles. 5673: [892c332d3f05] 5674: 5675: * plugins/sudoers/Makefile.in, src/Makefile.in, src/fmt_string.c: 5676: fmt_string is used by the sudoers plugin too so do not include 5677: sudo.h (which is not really needed here anyway) 5678: [231c35e3941f] 5679: 5680: * compat/Makefile.in, plugins/sample/Makefile.in, 5681: plugins/sudoers/Makefile.in, src/Makefile.in: 5682: Fix building with non-BSD versions of make such as GNU make. 5683: Requires VPATH support, which should be in any non-neolithic make. 5684: [dc174f135919] 5685: 5686: * configure, configure.in, plugins/sudoers/Makefile.in, 5687: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/sudoers.c, 5688: src/Makefile.in: 5689: Re-enable bsm audit. Currently auditing is done within the sudoers 5690: plugin itself. If possible, this should really be done in the main 5691: driver but we don't presently have the needed data to do that. This 5692: will be re-evaluated when Linux audit support is added. 5693: [1d05a3236bfe] 5694: 5695: * compat/Makefile.in, plugins/sample/Makefile.in, 5696: plugins/sudoers/Makefile.in, src/Makefile.in: 5697: Remove extraneous $srcdir and use more .c.lo and .c.o rules instead 5698: of explicit rules in the dependency. 5699: [88f80efd25f0] 5700: 5701: * plugins/sudoers/visudo.c: 5702: Fix mismerge; alias_remove_recursive() now returns int 5703: [6257a4849641] 5704: 5705: 2010-04-29 Todd C. Miller <Todd.Miller@courtesan.com> 5706: 5707: * plugins/sudoers/visudo.c: 5708: Fix a crash when checking a sudoers file that has aliases that 5709: reference themselves. Based on a diff from David Wood. 5710: [545d194484a7] 5711: 5712: * src/script.c: 5713: Print signal info after restoring the tty mode, not before. 5714: [a68618e67435] 5715: 5716: * src/script.c: 5717: Defer call to alarm() until after we fork the child. Pass correct 5718: pid to terminate_child() If the command exits due to signal, set 5719: alive to false like we do when it exits normally. Add missing 5720: check for errpipe[0] != -1 before using it in FD_ISSET 5721: [22f0a1549391] 5722: 5723: 2010-04-28 Todd C. Miller <Todd.Miller@courtesan.com> 5724: 5725: * plugins/sudoers/boottime.c: 5726: Use 1/0 instead of TRUE/FALSE so we don't need sudoers.h 5727: [0e627170c6e8] 5728: 5729: 2010-04-27 Todd C. Miller <Todd.Miller@courtesan.com> 5730: 5731: * src/Makefile.in: 5732: Simplify dependencies by using .c.o and .c.lo rules. 5733: [6abcaef5d1ac] 5734: 5735: * configure, configure.in, plugins/sudoers/Makefile.in, 5736: src/Makefile.in: 5737: Substitute in @PROGS@ into src/Makefile to add sesh 5738: [cc46d3b6208f] 5739: 5740: 2010-04-26 Todd C. Miller <Todd.Miller@courtesan.com> 5741: 5742: * plugins/sudoers/sudoers.c: 5743: Add back calls to log_denial() if sudoers does not allow the 5744: command. 5745: [9783316207f0] 5746: 5747: * plugins/sudoers/sudoers.c: 5748: Pass in correct pwflag for list and validate. 5749: [973dd56d4b81] 5750: 5751: * plugins/sudoers/env.c: 5752: Add missing check for NULL in validate_env_vars 5753: [1d6eb6957824] 5754: 5755: * src/Makefile.in: 5756: Add sudo_noexec.la to "all" target, otherwise it only gets built at 5757: install time. 5758: [644a9694d2ef] 5759: 5760: * plugins/sudoers/sudoers.c: 5761: Only set sudo_user.env_vars if the env_add list is empty. 5762: [fccdf6f0e0e2] 5763: 5764: * plugins/sudoers/sudoers.c: 5765: Set sudo_user.env_vars so that environment variables specified on 5766: the command line get logged correctly. 5767: [9b51012c491e] 5768: 5769: * plugins/sudoers/env.c, plugins/sudoers/logging.c, 5770: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h: 5771: Re-enable environment files and setting environment variables on the 5772: command line. 5773: [5662d5645dbd] 5774: 5775: 2010-04-24 Todd C. Miller <Todd.Miller@courtesan.com> 5776: 5777: * plugins/sudoers/check.c: 5778: Fix typo in last commit (ifndef vs ifdef) Make sure we pass ctime() 5779: a pointer to time_t as tv_sec in struct timeval may be long. 5780: [4de0c46e788e] 5781: 5782: * plugins/sudoers/check.c: 5783: Don't stash ctime in on-disk tty ticket info for now; on many 5784: (most?) systems the ctime is updated when the tty is written to. 5785: Once I have a better idea of what systems do not update ctime on 5786: ttys (and have a way to test for this) the ctime stash will be 5787: conditionally re-enabled. 5788: [a90eeec0f648] 5789: 5790: 2010-04-23 Todd C. Miller <Todd.Miller@courtesan.com> 5791: 5792: * MANIFEST, Makefile.in: 5793: Add back "dist" target, this time using a MANIFEST file 5794: [29277c05499f] 5795: 5796: * Makefile.in: 5797: Remove Makefile in distclean target 5798: [83d695f4f450] 5799: 5800: * Makefile.in, src/Makefile.in: 5801: Update clean and cleandir targets 5802: [ad7b2afeb9c1] 5803: 5804: * include/fileops.h, plugins/sudoers/sudoers.h, src/fileops.c, 5805: src/sudo.h: 5806: Move fileops.c defines and prototypes to filesops.h 5807: [4545e9b6892d] 5808: 5809: * plugins/sudoers/check.c: 5810: Lock the tty timestamp when writing. We shouldn't have to lock when 5811: reading since the file is updated via a single write system call. 5812: [0c7276f02696] 5813: 5814: 2010-04-22 Todd C. Miller <Todd.Miller@courtesan.com> 5815: 5816: * plugins/sudoers/alias.c, plugins/sudoers/check.c, 5817: plugins/sudoers/defaults.c, plugins/sudoers/find_path.c, 5818: plugins/sudoers/getspwuid.c, plugins/sudoers/gettime.c, 5819: plugins/sudoers/goodpath.c, plugins/sudoers/interfaces.c, 5820: plugins/sudoers/iolog.c, plugins/sudoers/ldap.c, 5821: plugins/sudoers/logging.c, plugins/sudoers/match.c, 5822: plugins/sudoers/nonunix.h, plugins/sudoers/parse.c, 5823: plugins/sudoers/pwutil.c, plugins/sudoers/redblack.c, 5824: plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c, 5825: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 5826: plugins/sudoers/timestr.c, plugins/sudoers/tsgetgrpw.c, 5827: plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c: 5828: Convert to ANSI C function declarations 5829: [9c45def57cf7] 5830: 5831: * plugins/sudoers/sudoers.h: 5832: Remove extraneous bits and classify by source file. 5833: [e8ea9f109ebb] 5834: 5835: * include/compat.h: 5836: Add timercmp macro for systems without it 5837: [d3bf87b1d08e] 5838: 5839: * plugins/sudoers/boottime.c, plugins/sudoers/check.c, 5840: plugins/sudoers/sudoers.h: 5841: get_boottime() now fills in a timeval struct 5842: [3573c3f44e11] 5843: 5844: * plugins/sudoers/check.c: 5845: Store info from stat(2)ing the tty in the tty ticket when tty 5846: tickets are in use. On most systems, this closes the loophole 5847: whereby a user can log out of a tty, log back in and still have the 5848: timestamp be valid. 5849: [53380f9f5242] 5850: 5851: * config.h.in, configure.in: 5852: Add timespec2timeval and use it when getting ctime/mtime 5853: [4cb7f7caec2c] 5854: 5855: 2010-04-20 Todd C. Miller <Todd.Miller@courtesan.com> 5856: 5857: * plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/set_perms.c, 5858: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 5859: plugins/sudoers/testsudoers.c: 5860: Convert perm setting to push/pop model; still needs some work Use 5861: the stashed runas groups instead of using getgrouplist() Reset perms 5862: to the initial value on error 5863: [09c072ebde8b] 5864: 5865: * config.h.in, configure.in: 5866: fix ctim_get and mtim_get macros 5867: [58773dc1e360] 5868: 5869: * config.h.in, configure, configure.in, include/compat.h, 5870: plugins/sudoers/check.c, plugins/sudoers/gettime.c, 5871: plugins/sudoers/sudoers.h, plugins/sudoers/visudo.c, src/fileops.c: 5872: Use timeval directly instead of converting to timespec when dealing 5873: with file times and time of day. 5874: [a0ce1ae00a67] 5875: 5876: * plugins/sudoers/Makefile.in: 5877: Don't like sudoreplay with libsudoers.la due to a yacc symbol 5878: conflict. 5879: [f1a59cc63a15] 5880: 5881: 2010-04-18 Todd C. Miller <Todd.Miller@courtesan.com> 5882: 5883: * configure, configure.in: 5884: Darwin >= 9.x has real setreuid(2) 5885: [7ec942a64275] 5886: 5887: 2010-04-17 Todd C. Miller <Todd.Miller@courtesan.com> 5888: 5889: * plugins/sudoers/env.c, plugins/sudoers/sudoers.h: 5890: Ansify env.c 5891: [f58551bad10a] 5892: 5893: * plugins/sudoers/env.c, plugins/sudoers/sudoers.c, 5894: plugins/sudoers/sudoers.h: 5895: Remove remaining references to the environ pointer. 5896: [96faa530816a] 5897: 5898: 2010-04-16 Todd C. Miller <Todd.Miller@courtesan.com> 5899: 5900: * config.h.in, configure, configure.in, plugins/sudoers/env.c: 5901: Don't change the environ directly in the sudoers plugin 5902: [6db48ed3f7e0] 5903: 5904: 2010-04-15 Todd C. Miller <Todd.Miller@courtesan.com> 5905: 5906: * plugins/sudoers/sudoers.c: 5907: Fix typo 5908: [4aa452b07f8f] 5909: 5910: * plugins/sudoers/alias.c: 5911: Fix use after free in error message when a duplicate alias exists. 5912: [ce1d2812ee34] 5913: 5914: 2010-04-14 Todd C. Miller <Todd.Miller@courtesan.com> 5915: 5916: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 5917: src/parse_args.c: 5918: Add a "noninteractive" boolean to the settings passed in to the 5919: plugin's open function that is set when the user specifies the -n 5920: flag. 5921: [68f8d9d6d4d0] 5922: 5923: * config.h.in, configure, configure.in, plugins/sudoers/env.c: 5924: Add workaround for the lack of the environ pointer on Mac OS X in 5925: dlopen()ed modules. Use of environ in the sudoers plugin should 5926: ultimately be removed but this will do for the moment. 5927: [80c61647434f] 5928: 5929: * plugins/sudoers/visudo.c: 5930: Set errorfile to the sudoers path if we set parse_error manually. 5931: This prevents a NULL dereference in printf() when checking a sudoers 5932: file in strict mode when alias errors are present. 5933: [45e249ca99f7] 5934: 5935: * plugins/sudoers/sudoers.c: 5936: Main sudo no longer print "unable to execute" on exec failure so do 5937: it here. 5938: [50aaf62b43b5] 5939: 5940: 2010-04-13 Todd C. Miller <Todd.Miller@courtesan.com> 5941: 5942: * src/script.c: 5943: Use a pipe to pass back errno to the parent if execve() fails. If we 5944: get an error in script_child(), kill the command and exit. 5945: [dc3bf870f91b] 5946: 5947: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 5948: src/parse_args.c, src/sudo.c: 5949: Handle plugin's open function returning -2 (usage error). 5950: [aadf900c1de8] 5951: 5952: * src/script.c: 5953: If execve() fails, leave it to the plugin to print an error string. 5954: [e25748f2d5b9] 5955: 5956: * src/script.c: 5957: If execve fails in logging mode, pass the errno directly to the 5958: grandparent on the backchannel and exit. The immediate parent will 5959: get SIGCHLD and try to report that status but its parent will no 5960: longer be listening. It would probably be cleaner to pass this over 5961: a pipe in script_child(). 5962: [cb122acc81a8] 5963: 5964: * plugins/sudoers/sudoers.c: 5965: Don't override rval with results of check_user() unless it failed. 5966: [46fb7e87ac7d] 5967: 5968: 2010-04-12 Todd C. Miller <Todd.Miller@courtesan.com> 5969: 5970: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 5971: Fix typo 5972: [ccd0b693f3da] 5973: 5974: * src/parse_args.c: 5975: NULL-terminate env_add 5976: [2c534368a0c3] 5977: 5978: 2010-04-11 Todd C. Miller <Todd.Miller@courtesan.com> 5979: 5980: * src/sudo.c: 5981: Call the I/O log open function before the I/O version function. 5982: [e88bf898990b] 5983: 5984: * plugins/sudoers/iolog.c: 5985: Remove io_conv and just use sudo_conv 5986: [a280052468eb] 5987: 5988: * plugins/sudoers/set_perms.c: 5989: Fix set/restore perms for systems w/o setresuid 5990: [4160517f6666] 5991: 5992: 2010-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 5993: 5994: * plugins/sudoers/check.c, plugins/sudoers/logging.c, 5995: plugins/sudoers/parse.c, plugins/sudoers/set_perms.c, 5996: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h: 5997: Primitive set/restore permissions. Will be replaced by a push/pop 5998: model. 5999: [aae102290866] 6000: 6001: * src/script.c: 6002: Only need to take action on SIGCHLD in parent if no I/O logger. If 6003: there is an I/O logger we will receive ECONNRESET or EPIPE when we 6004: try to read from the socketpair. 6005: [e1e4560401f6] 6006: 6007: 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com> 6008: 6009: * compat/memrchr.c, doc/sudoers.cat, doc/sudoers.man.in, 6010: doc/sudoers.pod, plugins/sudoers/find_path.c: 6011: Merge fb4d571495fa from the 1.7 branch to trunk. 6012: [c8fb424ad4d2] 6013: 6014: 2010-04-08 Todd C. Miller <Todd.Miller@courtesan.com> 6015: 6016: * src/script.c: 6017: Don't set SA_RESTART when registering SIGALRM handler. Do set 6018: SA_RESTART when registering SIGWINCH handler. 6019: [173472b76525] 6020: 6021: * doc/Makefile.in: 6022: Add dev targets for *.man.in and *.cat that don't specfify the 6023: $(srcdir) prefix. 6024: [b62f425da2e4] 6025: 6026: * src/script.c: 6027: If log_input or log_output returns false, terminate the command. 6028: [074f4c0c34a0] 6029: 6030: * src/script.c: 6031: Better signal handling. Instead of using a single variable to store 6032: the received signal, use an array so we can't lose a signal when 6033: multiple are sent. Fix process termination by SIGALRM in non-I/O 6034: logger mode. Fix relaying terminal signals to the child in non-I/O 6035: logger mode. 6036: [7a4723aca99d] 6037: 6038: * src/script.c: 6039: Fix a race between when we get the child pid in the parent and when 6040: the child process exits. The problem exhibited as a hang after a 6041: short-lived process, e.g. "sudo id" when no IO logger was enabled. 6042: [80bcc0aca70b] 6043: 6044: 2010-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 6045: 6046: * doc/sudoers.cat, doc/sudoers.man.in, doc/sudoers.pod: 6047: Add a note about the security implications of the fast_glob option. 6048: [c37a92ab7c93] 6049: 6050: 2010-04-06 Todd C. Miller <Todd.Miller@courtesan.com> 6051: 6052: * config.h.in, configure, configure.in: 6053: Fix up some AC_DEFINE descriptions and regen config.h.in 6054: [f4655adc0db3] 6055: 6056: 2010-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 6057: 6058: * include/missing.h: 6059: No longer check for strdup or strndup for LIBOBJ replacement. 6060: [fdc764ee8109] 6061: 6062: * src/script.c: 6063: Avoid installing signal handlers that are io-logger specific. Fixes 6064: job control when no io logger is enabled. 6065: [0853dd0906d4] 6066: 6067: * doc/Makefile.in: 6068: Only regen man pages from pod when configured with --with-devel 6069: [ab1995f8103d] 6070: 6071: 2010-04-04 Todd C. Miller <Todd.Miller@courtesan.com> 6072: 6073: * Makefile, Makefile.in, configure, configure.in: 6074: Top-level Makefile.in. Nothing is currently substituted but this is 6075: needed for separate build dirs. 6076: [e80873cbd201] 6077: 6078: * compat/Makefile.in, doc/Makefile.in, plugins/sample/Makefile.in, 6079: plugins/sudoers/Makefile.in, src/Makefile.in: 6080: Fix out-of-tree builds 6081: [59a35bef07b8] 6082: 6083: * Merge 6084: [386b848047e9] 6085: 6086: * doc/Makefile.in: 6087: We always install sudoreplay in 1.8 6088: [ce52ba6617c9] 6089: 6090: 2010-04-03 Todd C. Miller <Todd.Miller@courtesan.com> 6091: 6092: * compat/siglist.in: 6093: SIGPOLL is sometimes the same as SIGIO (like on HP-UX) 6094: [6d69e1b05faf] 6095: 6096: 2010-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 6097: 6098: * configure, configure.in: 6099: No need to provide strdup() or strndup(), sudo uses estrdup() and 6100: estrndup() 6101: [57ec23b72958] 6102: 6103: 2010-04-04 Todd C. Miller <Todd.Miller@courtesan.com> 6104: 6105: * plugins/sudoers/iolog.c, plugins/sudoers/sudoers.c: 6106: Free str after using it in the version method. Use sudo_conv, not 6107: io_conv since we don't have the IO conversation function pointer in 6108: the I/O version method anymore now that io_open is delayed. 6109: [f2ed132adeb0] 6110: 6111: 2010-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 6112: 6113: * compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h, 6114: compat/siglist.in: 6115: Add license to mksiglist.c and note that the bits from pdksh are 6116: public domain 6117: [d8121a2467e8] 6118: 6119: * compat/Makefile.in: 6120: Fix LIBOBJDIR vs. srcdir wrt the siglist bits 6121: [164160148421] 6122: 6123: * plugins/sudoers/Makefile.in: 6124: Add sudoreplay testsudoers and visudo to clean target 6125: [138a17e51c0c] 6126: 6127: * compat/Makefile.in, compat/mksiglist.c, compat/mksiglist.h, 6128: compat/siglist.in, compat/strsignal.c, configure, configure.in, 6129: include/missing.h, src/script.c: 6130: Create our own sys_siglist for systems without it for use by 6131: strsignal() 6132: [2e5da011ebc3] 6133: 6134: * compat/Makefile.in: 6135: Remove duplicate $(LIBOBJDIR) 6136: [adf9abc9432f] 6137: 6138: 2010-04-01 Todd C. Miller <Todd.Miller@courtesan.com> 6139: 6140: * plugins/sudoers/sudoers.c, src/sudo.c, src/sudo_edit.c: 6141: Main sudo should not block signals; the plugin should do this in 6142: check_policy. 6143: [3f3736a7c5ed] 6144: 6145: 2010-03-31 Todd C. Miller <Todd.Miller@courtesan.com> 6146: 6147: * src/script.c: 6148: Fix a sizeof(ptr) vs. sizeof(*ptr) 6149: [aa1bcf5afcce] 6150: 6151: * src/script.c: 6152: Unlike most operating systems, HP-UX select() is not interrupted by 6153: SIGCHLD when the signal is registered with SA_RESTART. If we clear 6154: SA_RESTART when calling sigaction() for SIGCHLD we get the expected 6155: behavior and the code in the select() loops already handles EINTR 6156: correctly. 6157: [9eba0115e35a] 6158: 6159: * compat/getprogname.c: 6160: progname should be const 6161: [130228f062b7] 6162: 6163: * plugins/sudoers/Makefile.in: 6164: Move --tag=disable-static to when we link sudoers.la, not when we 6165: install. 6166: [ceb5e6c3b78b] 6167: 6168: * src/load_plugins.c: 6169: Load the sudoers I/O plugin by default too now that it is hooked up. 6170: [ea38befd0742] 6171: 6172: 2010-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 6173: 6174: * src/pty.c: 6175: It looks like AIX doesn't need to push STREAMS modules for ptys. 6176: [22da618ba0a1] 6177: 6178: 2010-03-28 Todd C. Miller <Todd.Miller@courtesan.com> 6179: 6180: * src/parse_args.c, src/sudo.c: 6181: Delay calling the I/O plugin open function until the policy plugin 6182: returns success. 6183: [f3297c325b48] 6184: 6185: 2010-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 6186: 6187: * plugins/sudoers/Makefile.in, plugins/sudoers/iolog.c, 6188: plugins/sudoers/set_perms.c, plugins/sudoers/sudoers.c, 6189: plugins/sudoers/sudoers.h: 6190: Add back io logging (transcript) support. Currently, the open 6191: function runs too early and it is not possible to use the io module 6192: independently of the policy module. 6193: [9bd932f66226] 6194: 6195: * plugins/sudoers/set_perms.c: 6196: Comment out dead code; will be removed when set_perms is rewritten. 6197: [af7a995284f8] 6198: 6199: 2010-03-23 Todd C. Miller <Todd.Miller@courtesan.com> 6200: 6201: * plugins/sudoers/sudoers.c: 6202: Fix off by one error when allocating user_groups. 6203: [6281fcf9c3bb] 6204: 6205: 2010-03-22 Todd C. Miller <Todd.Miller@courtesan.com> 6206: 6207: * configure, configure.in, plugins/sudoers/Makefile.in: 6208: Add REPLAY_LIBS for sudoreplay and add -lrt to it on Solaris. 6209: [fbce3e9eda3a] 6210: 6211: * plugins/sudoers/sudoers.c: 6212: Fix typo in preserve groups case 6213: [1fd72024fb5a] 6214: 6215: * plugins/sudoers/sudoers.c: 6216: In command_info it is "runas_groups" not "groups". 6217: [5c64dce4f285] 6218: 6219: * src/sudo.c: 6220: Fix iteration over runas_groups list. 6221: [b3c45a0cd643] 6222: 6223: * configure, configure.in, plugins/sudoers/env.c, 6224: plugins/sudoers/match.c, src/script.c: 6225: Merge 5177a284b9ff 549f8f7c2463 88f3181692fe from 1.7 branch. 6226: [a8108a0776c2] 6227: 6228: * compat/getgrouplist.c: 6229: getgrouplist(3) for those without it 6230: [4ab4d21e3b16] 6231: 6232: * plugins/sudoers/sudoers.c: 6233: Set preserve_groups or groups list in command_info 6234: [1266119ad654] 6235: 6236: * src/sudo.c: 6237: Fix setting of groups list 6238: [e75315e40bd4] 6239: 6240: * config.h.in, configure, configure.in, include/compat.h, 6241: include/missing.h: 6242: Add checks for getgrset and getgrouplist and use replacement 6243: getgrouplist if the system doesn't support it. 6244: [a62b8ba50863] 6245: 6246: * src/parse_args.c: 6247: Pass in preserve_groups when the -P flag is specified as per the 6248: design 6249: [7420c5d15474] 6250: 6251: * plugins/sudoers/sudoers.c: 6252: Check preserve_groups and ignore_ticket args with atobool instead of 6253: assuming they are true if present. 6254: [71c905702697] 6255: 6256: 2010-03-21 Todd C. Miller <Todd.Miller@courtesan.com> 6257: 6258: * plugins/sudoers/Makefile.in, plugins/sudoers/error.c, 6259: plugins/sudoers/plugin_error.c: 6260: Rename plugin-specific error.c to plugin_error.c Wire up visudo, 6261: sudoreplay and testsudoers in the build 6262: [9d581d5fa4d4] 6263: 6264: * src/Makefile.in, src/term.c: 6265: term.c does not needto include sudo.h 6266: [f6683cdcd2dd] 6267: 6268: * TODO, doc/sudo_plugin.cat, doc/sudo_plugin.man.in, 6269: doc/sudo_plugin.pod: 6270: Document the -2 return in the check_policy section too 6271: [e9cb4c34bbcf] 6272: 6273: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod, 6274: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 6275: src/parse_args.c, src/sudo.c, src/sudo.h: 6276: Fix the -s and -i flags and add support for the "implied_shell" 6277: option. If the user does not specify a command, sudo will now pass 6278: in the path to the user's shell and set impied_shell=true. The 6279: plugin can them either check the command normally or return -2 to 6280: cause sudo to print a usage message and exit. 6281: [bf889c38f229] 6282: 6283: 2010-03-19 Todd C. Miller <Todd.Miller@courtesan.com> 6284: 6285: * config.h.in, configure, configure.in, src/load_plugins.c: 6286: Bring back SUDOERS_PLUGIN but add .dylib -> .so conversion for 6287: Darwin where libraries end in .dylib but modules end in .so 6288: [2c56aaa38e21] 6289: 6290: * plugins/sudoers/parse.c: 6291: Better prefix determination now that we can't rely on len==0 to tell 6292: the beginning on an entry. 6293: [622bf18179e9] 6294: 6295: * plugins/sudoers/ldap.c: 6296: display_bound_defaults() stub should return 0, not 1 since it is a 6297: count, not a boolean. 6298: [0327a6c3d55d] 6299: 6300: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 6301: Document progname in settings 6302: [42031d56a2e3] 6303: 6304: * compat/getprogname.c, include/compat.h, 6305: plugins/sample/sample_plugin.c, plugins/sudoers/sudoers.c, 6306: src/parse_args.c, src/sudo.c: 6307: Rewrite compat/getprogname.c and add setprogname(). The progname is 6308: now passed to the plugin via the settings array. 6309: [25d8663e6006] 6310: 6311: * configure, configure.in, plugins/sudoers/Makefile.in: 6312: Fix --with-ldap 6313: [b64b633f426d] 6314: 6315: * plugins/sudoers/sudo_nss.c: 6316: Add missing whitespace for Runas and Command-specific defaults 6317: [65f4ddf5545e] 6318: 6319: * plugins/sudoers/ldap.c, plugins/sudoers/parse.c, 6320: plugins/sudoers/sudo_nss.c: 6321: Use embedded newlines in lbuf instead of multiple calls to 6322: lbuf_print. 6323: [eed3af9cc3e1] 6324: 6325: * src/lbuf.c: 6326: Add support for embedded newlines. 6327: [e11f79b18deb] 6328: 6329: 2010-03-18 Todd C. Miller <Todd.Miller@courtesan.com> 6330: 6331: * compat/getprogname.c: 6332: If system doesn't support getprogname or __programe and we are 6333: building a shared object don't bother with Argc/Argv, just return 6334: "sudo" 6335: [aebde9062be7] 6336: 6337: * config.h.in, configure, configure.in, src/load_plugins.c: 6338: Hard-code sudoers.so instead of using SUDOERS_PLUGIN since libtool 6339: appears to always install a shared object with the .so suffix. 6340: [f9bbd0c0e9d3] 6341: 6342: * compat/Makefile.in, configure, configure.in, 6343: plugins/sample/Makefile.in, plugins/sudoers/Makefile.in, 6344: src/Makefile.in: 6345: Play more nicely with libtool and let it build libreplace (was 6346: libmissing) for us. 6347: [a4c6ebb2495c] 6348: 6349: * include/missing.h: 6350: Include stdarg.h for va_list rather than requiring all consumers of 6351: missing.h to include stdarg.h themselves. 6352: [37382df948de] 6353: 6354: * include/lbuf.h, plugins/sudoers/auth/sudo_auth.c, 6355: plugins/sudoers/check.c, plugins/sudoers/sudo_nss.c, 6356: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c, 6357: src/parse_args.c: 6358: Pass in output function to lbuf_init() instead of writing to stdout. 6359: A side effect is that the usage info can now go to stderr as it 6360: should. 6361: [6d261261a072] 6362: 6363: 2010-03-17 Todd C. Miller <Todd.Miller@courtesan.com> 6364: 6365: * include/lbuf.h, plugins/sudoers/sudo_nss.c, 6366: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, src/lbuf.c, 6367: src/parse_args.c, src/sudo.c: 6368: Use number of tty columns that is passed in user_info instead of 6369: getting it directly in the lbuf code. 6370: [8a16635c2638] 6371: 6372: * plugins/sudoers/alias.c, plugins/sudoers/auth/dce.c, 6373: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c, 6374: plugins/sudoers/auth/sia.c, plugins/sudoers/auth/sudo_auth.h, 6375: plugins/sudoers/check.c, plugins/sudoers/defaults.c, 6376: plugins/sudoers/defaults.h, plugins/sudoers/env.c, 6377: plugins/sudoers/getdate.c, plugins/sudoers/getdate.y, 6378: plugins/sudoers/gram.c, plugins/sudoers/gram.y, 6379: plugins/sudoers/interfaces.h, plugins/sudoers/logging.c, 6380: plugins/sudoers/logging.h, plugins/sudoers/match.c, 6381: plugins/sudoers/mon_systrace.h, plugins/sudoers/parse.c, 6382: plugins/sudoers/parse.h, plugins/sudoers/pwutil.c, 6383: plugins/sudoers/redblack.c, plugins/sudoers/redblack.h, 6384: plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.h, 6385: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 6386: plugins/sudoers/sudoreplay.c, plugins/sudoers/testsudoers.c, 6387: plugins/sudoers/timestr.c, plugins/sudoers/toke.c, 6388: plugins/sudoers/toke.l, plugins/sudoers/tsgetgrpw.c, 6389: plugins/sudoers/visudo.c: 6390: Kill __P in sudoers 6391: [63601e6cb171] 6392: 6393: * config.h.in, configure, configure.in, src/load_plugins.c: 6394: Set the sudoers plugin name in configure so we get the extension 6395: right. 6396: [edad89924cd1] 6397: 6398: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 6399: Document lines/cols in user_info 6400: [a808872394f3] 6401: 6402: * src/Makefile.in, src/sudo.c, src/sudo.h, src/ttysize.c: 6403: Add tty size to user info 6404: [23f3d27e77a7] 6405: 6406: * src/script.c: 6407: Use TIOCGSIZE/TIOCSSIZE instead of TIOCGWINSZ/TIOCSWINSZ 6408: [a2208dd09051] 6409: 6410: 2010-03-16 Todd C. Miller <Todd.Miller@courtesan.com> 6411: 6412: * plugins/sudoers/sudoers.c: 6413: Kill dead code Add missing sigsetjmp in sudo_policy_invalidate Error 6414: out if we fail to lookup the user's name that is passed in 6415: [e4e3728ed482] 6416: 6417: * plugins/sudoers/error.c: 6418: Pass the error value back via siglongjmp. 6419: [667b8ad575ce] 6420: 6421: * plugins/sudoers/check.c: 6422: Use conversation function for lecture. 6423: [1ab4719f509b] 6424: 6425: * plugins/sudoers/check.c: 6426: Don't update ticket file if verify_user returns FALSE. 6427: [2bbc46a39a2b] 6428: 6429: 2010-03-15 Todd C. Miller <Todd.Miller@courtesan.com> 6430: 6431: * plugins/sudoers/sudoers.c, src/sudo.c: 6432: Wire up invalidate and validate methods for sudoers 6433: [c0630c7bca47] 6434: 6435: * plugins/sudoers/check.c, plugins/sudoers/sudoers.c, 6436: plugins/sudoers/sudoers.h: 6437: Add support for -k flag with a command. 6438: [edad239b098b] 6439: 6440: * src/parse_args.c: 6441: Allow -k to be specified with a command. 6442: [43a45add9974] 6443: 6444: * plugins/sudoers/sudoers.c: 6445: Wire up policy_list 6446: [27cc35699eca] 6447: 6448: * plugins/sudoers/error.c: 6449: Add newline at the end of message and space after the colon in 6450: warning message 6451: [5a591aa8e744] 6452: 6453: * plugins/sudoers/auth/sudo_auth.c: 6454: Add missing newline after pass password warning 6455: [337dba3870a7] 6456: 6457: * plugins/sudoers/sudoers.c: 6458: Set user_groups and user_ngroups based on user_info 6459: [61bee85128c8] 6460: 6461: * plugins/sudoers/error.c: 6462: Make this compile 6463: [7041c441e1c8] 6464: 6465: * plugins/sudoers/error.c, plugins/sudoers/sudoers.c: 6466: Make _warning in error.c use the conversation function and remove 6467: commented out warning/warningx in sudoers.c. 6468: [7c9b09024b63] 6469: 6470: * plugins/sudoers/logging.c: 6471: Use siglongjmp() in log_error for fatal errors 6472: [b50e26f1c73f] 6473: 6474: * plugins/sample/Makefile.in, plugins/sudoers/Makefile.in: 6475: Quiet a libtool warning 6476: [b2331fb006bc] 6477: 6478: * Makefile: 6479: Build sudoers plugin 6480: [5cdf06e66978] 6481: 6482: * plugins/sudoers/gram.c, plugins/sudoers/gram.y: 6483: Use warningx in yyerror() so the conversation function gets used 6484: when built as part of sudoers. 6485: [85f964215eef] 6486: 6487: 2010-03-14 Todd C. Miller <Todd.Miller@courtesan.com> 6488: 6489: * plugins/sudoers/auth/pam.c: 6490: Rename sudo_conv to conversation to avoid a namespace conflict. 6491: [1ad359d36be9] 6492: 6493: * plugins/sudoers/Makefile.in, plugins/sudoers/alias.c, 6494: plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c, 6495: plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c, 6496: plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c, 6497: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c, 6498: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c, 6499: plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c, 6500: plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c, 6501: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h, 6502: plugins/sudoers/check.c, plugins/sudoers/defaults.c, 6503: plugins/sudoers/env.c, plugins/sudoers/error.c, 6504: plugins/sudoers/find_path.c, plugins/sudoers/getspwuid.c, 6505: plugins/sudoers/goodpath.c, plugins/sudoers/gram.c, 6506: plugins/sudoers/gram.y, plugins/sudoers/interfaces.c, 6507: plugins/sudoers/ldap.c, plugins/sudoers/logging.c, 6508: plugins/sudoers/match.c, plugins/sudoers/mon_systrace.c, 6509: plugins/sudoers/parse.c, plugins/sudoers/pwutil.c, 6510: plugins/sudoers/redblack.c, plugins/sudoers/set_perms.c, 6511: plugins/sudoers/sudo_nss.c, plugins/sudoers/sudoers.c, 6512: plugins/sudoers/sudoers.h, plugins/sudoers/testsudoers.c, 6513: plugins/sudoers/toke.c, plugins/sudoers/tsgetgrpw.c, 6514: plugins/sudoers/vasgroups.c, plugins/sudoers/visudo.c: 6515: Initial bits of sudoers plugin; still needs work. 6516: [af2a2c59a952] 6517: 6518: * config.h.in: 6519: Add HAVE_STRDUP and HAVE_STRNDUP 6520: [50a3c0dd510f] 6521: 6522: * compat/Makefile.in, configure, configure.in: 6523: Build libmissing in two flavors (one PIC one non-PIC) and link with 6524: the appropriate one. 6525: [b62f411a4c18] 6526: 6527: * Makefile, compat/fnmatch.c, compat/glob.c, compat/nanosleep.c, 6528: compat/utimes.c, plugins/sample/Makefile.in, src/Makefile.in: 6529: Build libmissing in two flavors (one PIC one non-PIC) and link with 6530: the appropriate one. 6531: [e1e04972b5fe] 6532: 6533: 2010-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 6534: 6535: * include/missing.h: 6536: Add strdup and strndup and fix strsignal 6537: [c159babe2896] 6538: 6539: 2010-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 6540: 6541: * compat/strdup.c, compat/strndup.c, configure, configure.in, 6542: plugins/sample/Makefile.in, src/Makefile.in: 6543: Add strdup and strndup to compat 6544: [25c9fd399a4d] 6545: 6546: * plugins/sample/sample_plugin.c: 6547: Need to include compat.h before missing.h 6548: [c94f7aad380f] 6549: 6550: * compat/strsignal.c: 6551: Must check HAVE_DECL_SYS_SIGLIST == 1 (not just if defined) since if 6552: it doesn't exist configure will set it to 0. 6553: [384580566389] 6554: 6555: * compat/glob.c: 6556: Fix botched ANSI C coversion of globexp2() 6557: [4a344b8cbe49] 6558: 6559: * configure, configure.in: 6560: Remove redundant getgroups check 6561: [0b16ec210c81] 6562: 6563: * configure, configure.in, src/lbuf.c, src/script.c, src/term.c: 6564: Require either termios or termio, no more sgtty. 6565: [9b2fa2f17a1c] 6566: 6567: * compat/strsignal.c, config.h.in, configure, configure.in: 6568: Change the sys_siglist check to use AC_CHECK_DECLS and also check 6569: for _sys_siglist and__sys_siglist 6570: [2e078fed2408] 6571: 6572: 2010-03-11 Todd C. Miller <Todd.Miller@courtesan.com> 6573: 6574: * configure, configure.in, src/Makefile.in: 6575: Change SUDO_LDFLAGS to SUDOERS_LDFLAGS and add SUDOERS_OBJS. We now 6576: use SUDO_OBJS for the main driver as part of OBJS. 6577: [9ae4a80a5ade] 6578: 6579: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 6580: Mention in the conversation function section that a newline is not 6581: implicit. 6582: [04a233b6c491] 6583: 6584: * include/compat.h: 6585: Add definition of WCOREDUMP for systems without it. This is known 6586: to work on AIX and SunOS 4, but may be incorrect on other systems 6587: that lack WCOREDUMP. 6588: [c85b3ce6b77d] 6589: 6590: 2010-03-09 Todd C. Miller <Todd.Miller@courtesan.com> 6591: 6592: * plugins/sample/sample_plugin.c, src/conversation.c: 6593: conversation function no longer puts a newline at the end of info or 6594: error messages. 6595: [c534cae1ac4a] 6596: 6597: 2010-03-07 Todd C. Miller <Todd.Miller@courtesan.com> 6598: 6599: * src/script.c: 6600: Use parent process group id instead of parent process id when 6601: checking foreground status and suspending parent. Fixes an issue 6602: when running commands under /usr/bin/time and others. 6603: [564f528c3bb7] 6604: 6605: 2010-03-06 Todd C. Miller <Todd.Miller@courtesan.com> 6606: 6607: * aclocal.m4: 6608: transcript option is now --with not --enable 6609: [0646fac4cf93] 6610: 6611: * plugins/sample/sample_plugin.c: 6612: Add support to -u and -g flags Check fmt_string retval Add timeout 6613: for debugging purposes 6614: [cfefa4fa60b5] 6615: 6616: * src/script.c, src/sudo.c: 6617: Wire up SIGALRM handler Set close on exec flag for child side of the 6618: socketpair Fix signal handling when not doing I/O logging 6619: [379581ec7272] 6620: 6621: * src/sudo.c: 6622: g/c unused SIGCHLD handler 6623: [0afa03912dce] 6624: 6625: * src/fmt_string.c, src/parse_args.c, src/sudo.c: 6626: Don't use emalloc() in fmt_string(); we want to be able to use it 6627: from a plugin. 6628: [ade64d368147] 6629: 6630: * include/list.h: 6631: tq_remove not list_remove 6632: [0e0e1fd5c31c] 6633: 6634: * configure, configure.in: 6635: AUTH_OBJS should contain .lo files not .o files. 6636: [c64c82c9d5a2] 6637: 6638: 2010-03-05 Todd C. Miller <Todd.Miller@courtesan.com> 6639: 6640: * src/parse_args.c: 6641: Simplify conversion of command line args to name=value pairs. 6642: [75ab127c6a94] 6643: 6644: * plugins/sample/sample_plugin.c: 6645: Handle NULL reply from conversation function 6646: [6ce09b6cb204] 6647: 6648: * compat/getline.c: 6649: Don't depend on emalloc/erealloc 6650: [73df09e2109f] 6651: 6652: * plugins/sample/Makefile.in: 6653: Use $(OBJS) instead of sample_plugin.lo 6654: [2d995db9aa99] 6655: 6656: * plugins/sample/sample_plugin.c: 6657: runas_user is in settings not user_info 6658: [7ee12068bc57] 6659: 6660: * src/parse_args.c: 6661: Fix a mismatch between sudo_settings and settings_pairs that causes 6662: some settings to get the wrong values. 6663: [b1bc6d81a65f] 6664: 6665: 2010-03-04 Todd C. Miller <Todd.Miller@courtesan.com> 6666: 6667: * src/Makefile.in, src/aix.c, src/alloc.c, src/atobool.c, src/error.c, 6668: src/fileops.c, src/lbuf.c, src/list.c, src/pty.c, src/sesh.c, 6669: src/sudo.c, src/sudo_edit.c, src/term.c, src/zero_bytes.c: 6670: Convert to ANSI C 6671: [d03b6e4a3b75] 6672: 6673: * src/load_plugins.c: 6674: Fix strlcpy() return value check. 6675: [7cd66999a374] 6676: 6677: * INSTALL, configure, configure.in: 6678: No longer need to substitute in script.o and pty.o; I/O logging 6679: support is always built. 6680: [45250024c5dc] 6681: 6682: 2010-02-28 Todd C. Miller <Todd.Miller@courtesan.com> 6683: 6684: * src/script.c: 6685: Add fallback to /bin/sh when execve() fails with ENOEXEC. 6686: [7684a15a1352] 6687: 6688: * include/alloc.h, src/alloc.c: 6689: Add estrndup() 6690: [47621c83bed9] 6691: 6692: 2010-02-27 Todd C. Miller <Todd.Miller@courtesan.com> 6693: 6694: * src/script.c, src/sudo.c: 6695: Refactor script_execve() a bit so that it can be used in non-script 6696: mode. Needs more cleanup. 6697: [f09e022d547c] 6698: 6699: * src/sudo.c: 6700: Ignore empty entries in command_info list 6701: [1eea9a8de21c] 6702: 6703: * include/list.h, src/list.c: 6704: Add tq_remove 6705: [40908a617cb2] 6706: 6707: * src/conversation.c: 6708: Pass timeout to tgetpass() 6709: [9e66c918b771] 6710: 6711: * Makefile: 6712: Add ChangeLog target 6713: [da4a39150838] 6714: 6715: * README, WHATSNEW: 6716: Bump version and update things slightly for sudo 1.8.0 6717: [4b73cc45e2d4] 6718: 6719: * configure, configure.in: 6720: Sudo now requires an ANSI/ISO C compiler 6721: [1e51f72e6964] 6722: 6723: * src/alloc.c, src/audit.c, src/error.c, src/lbuf.c, 6724: src/sudo_noexec.c: 6725: Convert to ANSI C 6726: [5cbd315dbde8] 6727: 6728: * include/alloc.h, include/compat.h, include/error.h, include/lbuf.h, 6729: include/list.h, include/missing.h: 6730: Convert to ANSI C 6731: [3f5016ff64f4] 6732: 6733: * compat/charclass.h, compat/closefrom.c, compat/fnmatch.c, 6734: compat/fnmatch.h, compat/getcwd.c, compat/getline.c, 6735: compat/getprogname.c, compat/glob.c, compat/glob.h, 6736: compat/isblank.c, compat/memrchr.c, compat/mkstemp.c, 6737: compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c, 6738: compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c, 6739: compat/strlcpy.c, compat/strsignal.c, compat/utime.h, 6740: compat/utimes.c: 6741: Convert to ANSI C 6742: [0d635c85461c] 6743: 6744: 2010-02-24 Todd C. Miller <Todd.Miller@courtesan.com> 6745: 6746: * src/sudo.c, src/tgetpass.c: 6747: Make user_details extern so tgetpass can get at the uid and gid. Set 6748: uid/gid to user before executing askpass program. Check environment 6749: for SUDO_ASKPASS and use that if set. TODO: a way for the policy to 6750: set the askpass program itself 6751: [d33606396176] 6752: 6753: * src/sudo.c: 6754: No longer need sudo_usage.h in sudo.c 6755: [063e2946c382] 6756: 6757: * doc/sudo.cat, doc/sudo.man.in, doc/sudo.pod, doc/sudo_plugin.man.in, 6758: doc/sudo_plugin.pod, src/Makefile.in, src/parse_args.c, 6759: src/sudo_usage.h.in: 6760: Document -D level command line flag which maps to the debug_level 6761: setting. 6762: [61f1e2ab3ac1] 6763: 6764: * doc/sudo_plugin.cat, doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 6765: Document debug_level in plugin doc. Still need to document the -D 6766: flag in sudo itself. 6767: [8c62daea3e9b] 6768: 6769: 2010-02-21 Todd C. Miller <Todd.Miller@courtesan.com> 6770: 6771: * plugins/sample/sample_plugin.c: 6772: include missing,h for vasprintf 6773: [92503de49b39] 6774: 6775: * doc/Makefile.in, doc/plugin.pod, doc/sudo_plugin.cat, 6776: doc/sudo_plugin.man.in, doc/sudo_plugin.pod: 6777: Rename plugin.pod -> sudo_plugin.pod and wire into Makefile 6778: [14cfb4775238] 6779: 6780: * plugins/sample/sample_plugin.c: 6781: Need to include limits.h 6782: [bda7f74343d2] 6783: 6784: * compat/glob.c: 6785: No more sudo_getpw* 6786: [232e52907634] 6787: 6788: * plugins/sample/Makefile.in, src/Makefile.in: 6789: Add missing compat bits 6790: [4843dd000e08] 6791: 6792: * compat/closefrom.c, compat/mkstemp.c, plugins/sample/Makefile.in: 6793: compat files should not include sudo.h wire up compat in sample 6794: plugin 6795: [a175b8185e0f] 6796: 6797: * Makefile, configure, configure.in, doc/Makefile.in, src/Makefile.in: 6798: Fix up compat dependencies. Fix distclean target in doc/Makefile.in 6799: [57e49bc20857] 6800: 6801: * configure, configure.in: 6802: Fix typo 6803: [333655e3d5fe] 6804: 6805: * plugins/sample/sample_plugin.c: 6806: Log input and output to temp files for proof of concept. 6807: [ae1dfc34f7d6] 6808: 6809: * Makefile, configure, configure.in, doc/Makefile.in: 6810: Add doc Makefile.in and wire it up 6811: [6a310443c87d] 6812: 6813: * src/script.c: 6814: Handle SIGSTOP in addition to SIGTSTP. Fixes a problem with 6815: suspending a shell with the "suspend" builtint. 6816: [3d65f182819a] 6817: 6818: * src/script.c: 6819: In child, handle parent side of the pipe going away. 6820: [a29c14d78cd9] 6821: 6822: * src/script.c: 6823: No longer need to check for explicit death of the child (process #2) 6824: since if it dies we will get EPIPE from the socketpair. Fix a 6825: sizeof() that was causing a spurious error. Convert SCRIPT_DEBUG to 6826: sudo_debug. 6827: [24c55dd4ff60] 6828: 6829: * src/sudo.c: 6830: Make sudo_debug do a single vfprintf() which will result in a single 6831: write call on most systems. Avoids problems with interleaved debug 6832: printf from different processes. Also remove an extraneous error 6833: case since recv() can't return a short read and add some more XXX. 6834: [b37a8533ef1e] 6835: 6836: 2010-02-20 Todd C. Miller <Todd.Miller@courtesan.com> 6837: 6838: * src/script.c: 6839: Fix uninitialized variable. 6840: [e012a0a30890] 6841: 6842: * src/Makefile.in: 6843: Fix sudo install target 6844: [1417fa4b4ab9] 6845: 6846: * src/parse_args.c, src/sudo.c, src/sudo.h: 6847: Wire up debug_level 6848: [144fab289c73] 6849: 6850: * src/Makefile.in: 6851: Fix dependencies 6852: [5170940af2ce] 6853: 6854: * configure, configure.in: 6855: Fix setting of plugin dir 6856: [144eda170a72] 6857: 6858: * Makefile: 6859: add clean targets 6860: [d53f6f6f5c3a] 6861: 6862: * src/atobool.c: 6863: Add missing source for sudo front end 6864: [42487de9c489] 6865: 6866: * plugins/sample/Makefile.in, plugins/sample/sample_plugin.c: 6867: Sample plugin demonstrating the sudo plugin API 6868: [f1fd62d7644f] 6869: 6870: * Makefile, configure, configure.in, install-sh, pathnames.h.in, 6871: plugins/sudoers/install-sh, src/Makefile.in, src/conversation.c, 6872: src/fileops.c, src/fmt_string.c, src/load_plugins.c, 6873: src/parse_args.c, src/pty.c, src/script.c, src/sudo.c, src/sudo.h, 6874: src/sudo_plugin_int.h, src/sudo_usage.h.in, src/tgetpass.c, 6875: sudo_usage.h.in: 6876: Modular sudo front-end which loads policy and I/O plugins that do 6877: most the actual work. Currently relies on dynamic loading using 6878: dlopen(). See doc/plugin.pod for the plugin API. 6879: [924f6eb2fbba] 6880: 6881: * doc/plugin.pod, include/sudo_plugin.h: 6882: Sudo plugin API 6883: [374ccbbd24ae] 6884: 6885: * compat/fnmatch.c, compat/glob.c, compat/nanosleep.c, 6886: compat/utimes.c, plugins/sudoers/check.c, plugins/sudoers/gettime.c, 6887: plugins/sudoers/match.c, plugins/sudoers/sudoreplay.c, 6888: plugins/sudoers/testsudoers.c, plugins/sudoers/visudo.c, 6889: src/fileops.c, src/sudo_edit.c: 6890: Replace emul/include.h with compat/include.h to match new source 6891: tree layout. 6892: [7eccd10449a1] 6893: 6894: * src/lbuf.c: 6895: Include missing.h for memrchr() proto 6896: [03abd63a8a33] 6897: 6898: * HISTORY, LICENSE, Makefile.binary.in, Makefile.in, PORTING, 6899: TROUBLESHOOTING, UPGRADE, aix.c, aixcrypt.exp, alias.c, alloc.c, 6900: alloc.h, audit.c, auth/API, auth/afs.c, auth/aix_auth.c, 6901: auth/bsdauth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, 6902: auth/pam.c, auth/passwd.c, auth/rfc1938.c, auth/secureware.c, 6903: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c, 6904: auth/sudo_auth.h, boottime.c, bsm_audit.c, bsm_audit.h, check.c, 6905: closefrom.c, compat.h, compat/charclass.h, compat/closefrom.c, 6906: compat/fnmatch.c, compat/fnmatch.h, compat/getcwd.c, 6907: compat/getline.c, compat/getprogname.c, compat/glob.c, 6908: compat/glob.h, compat/isblank.c, compat/memrchr.c, compat/mkstemp.c, 6909: compat/nanosleep.c, compat/sigaction.c, compat/snprintf.c, 6910: compat/strcasecmp.c, compat/strerror.c, compat/strlcat.c, 6911: compat/strlcpy.c, compat/strsignal.c, compat/timespec.h, 6912: compat/utime.h, compat/utimes.c, def_data.c, def_data.h, 6913: def_data.in, defaults.c, defaults.h, doc/HISTORY, doc/LICENSE, 6914: doc/PORTING, doc/TROUBLESHOOTING, doc/UPGRADE, doc/history.pod, 6915: doc/license.pod, doc/sample.pam, doc/sample.sudoers, 6916: doc/sample.syslog.conf, doc/schema.ActiveDirectory, 6917: doc/schema.OpenLDAP, doc/schema.iPlanet, doc/sudo.cat, 6918: doc/sudo.man.in, doc/sudo.man.pl, doc/sudo.pod, doc/sudoers.cat, 6919: doc/sudoers.ldap.cat, doc/sudoers.ldap.man.in, doc/sudoers.ldap.pod, 6920: doc/sudoers.man.in, doc/sudoers.man.pl, doc/sudoers.pod, 6921: doc/sudoreplay.cat, doc/sudoreplay.man.in, doc/sudoreplay.pod, 6922: doc/visudo.cat, doc/visudo.man.in, doc/visudo.pod, emul/charclass.h, 6923: emul/fnmatch.h, emul/glob.h, emul/timespec.h, emul/utime.h, env.c, 6924: error.c, error.h, fileops.c, find_path.c, fnmatch.c, getcwd.c, 6925: getdate.c, getdate.y, getline.c, getprogname.c, getspwuid.c, 6926: gettime.c, glob.c, goodpath.c, gram.c, gram.h, gram.y, history.pod, 6927: include/alloc.h, include/compat.h, include/error.h, include/lbuf.h, 6928: include/list.h, include/missing.h, ins_2001.h, ins_classic.h, 6929: ins_csops.h, ins_goons.h, install-sh, insults.h, interfaces.c, 6930: interfaces.h, isblank.c, lbuf.c, lbuf.h, ldap.c, license.pod, 6931: list.c, list.h, logging.c, logging.h, match.c, memrchr.c, missing.h, 6932: mkdefaults, mkstemp.c, mon_systrace.c, mon_systrace.h, nanosleep.c, 6933: nonunix.h, parse.c, parse.h, plugins/sudoers/Makefile.binary.in, 6934: plugins/sudoers/Makefile.in, plugins/sudoers/aixcrypt.exp, 6935: plugins/sudoers/alias.c, plugins/sudoers/auth/API, 6936: plugins/sudoers/auth/afs.c, plugins/sudoers/auth/aix_auth.c, 6937: plugins/sudoers/auth/bsdauth.c, plugins/sudoers/auth/dce.c, 6938: plugins/sudoers/auth/fwtk.c, plugins/sudoers/auth/kerb4.c, 6939: plugins/sudoers/auth/kerb5.c, plugins/sudoers/auth/pam.c, 6940: plugins/sudoers/auth/passwd.c, plugins/sudoers/auth/rfc1938.c, 6941: plugins/sudoers/auth/secureware.c, plugins/sudoers/auth/securid.c, 6942: plugins/sudoers/auth/securid5.c, plugins/sudoers/auth/sia.c, 6943: plugins/sudoers/auth/sudo_auth.c, plugins/sudoers/auth/sudo_auth.h, 6944: plugins/sudoers/boottime.c, plugins/sudoers/check.c, 6945: plugins/sudoers/def_data.c, plugins/sudoers/def_data.h, 6946: plugins/sudoers/def_data.in, plugins/sudoers/defaults.c, 6947: plugins/sudoers/defaults.h, plugins/sudoers/env.c, 6948: plugins/sudoers/find_path.c, plugins/sudoers/getdate.c, 6949: plugins/sudoers/getdate.y, plugins/sudoers/getspwuid.c, 6950: plugins/sudoers/gettime.c, plugins/sudoers/goodpath.c, 6951: plugins/sudoers/gram.c, plugins/sudoers/gram.h, 6952: plugins/sudoers/gram.y, plugins/sudoers/ins_2001.h, 6953: plugins/sudoers/ins_classic.h, plugins/sudoers/ins_csops.h, 6954: plugins/sudoers/ins_goons.h, plugins/sudoers/install-sh, 6955: plugins/sudoers/insults.h, plugins/sudoers/interfaces.c, 6956: plugins/sudoers/interfaces.h, plugins/sudoers/ldap.c, 6957: plugins/sudoers/logging.c, plugins/sudoers/logging.h, 6958: plugins/sudoers/match.c, plugins/sudoers/mkdefaults, 6959: plugins/sudoers/mon_systrace.c, plugins/sudoers/mon_systrace.h, 6960: plugins/sudoers/nonunix.h, plugins/sudoers/parse.c, 6961: plugins/sudoers/parse.h, plugins/sudoers/pwutil.c, 6962: plugins/sudoers/redblack.c, plugins/sudoers/redblack.h, 6963: plugins/sudoers/set_perms.c, plugins/sudoers/sudo_nss.c, 6964: plugins/sudoers/sudo_nss.h, plugins/sudoers/sudoers, 6965: plugins/sudoers/sudoers.c, plugins/sudoers/sudoers.h, 6966: plugins/sudoers/sudoers2ldif, plugins/sudoers/sudoreplay.c, 6967: plugins/sudoers/testsudoers.c, plugins/sudoers/timestr.c, 6968: plugins/sudoers/toke.c, plugins/sudoers/toke.l, 6969: plugins/sudoers/tsgetgrpw.c, plugins/sudoers/vasgroups.c, 6970: plugins/sudoers/visudo.c, pty.c, pwutil.c, redblack.c, redblack.h, 6971: sample.pam, sample.sudoers, sample.syslog.conf, 6972: schema.ActiveDirectory, schema.OpenLDAP, schema.iPlanet, script.c, 6973: selinux.c, sesh.c, set_perms.c, sigaction.c, snprintf.c, src/aix.c, 6974: src/alloc.c, src/audit.c, src/bsm_audit.c, src/bsm_audit.h, 6975: src/error.c, src/fileops.c, src/lbuf.c, src/list.c, src/pty.c, 6976: src/script.c, src/selinux.c, src/sesh.c, src/sudo_edit.c, 6977: src/sudo_noexec.c, src/term.c, src/tgetpass.c, src/zero_bytes.c, 6978: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, strsignal.c, sudo.c, 6979: sudo.cat, sudo.h, sudo.man.in, sudo.man.pl, sudo.pod, sudo_edit.c, 6980: sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudoers, sudoers.cat, 6981: sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod, 6982: sudoers.man.in, sudoers.man.pl, sudoers.pod, sudoers2ldif, 6983: sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod, 6984: term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l, 6985: tsgetgrpw.c, utimes.c, vasgroups.c, visudo.c, visudo.cat, 6986: visudo.man.in, visudo.pod, zero_bytes.c: 6987: Rework source layout in preparation for modular sudo. 6988: [7fc1978c6ad5] 6989: 6990: 2010-02-13 Todd C. Miller <Todd.Miller@courtesan.com> 6991: 6992: * Avoid a duplicate fclose() of the sudoers file. 6993: [5dba851088c1] 6994: 6995: * Fix size arg when realloc()ing include stack. From Daniel Kopecek 6996: [0a2935061e33] 6997: 6998: * Use setrlimit64(), if available, instead of setrlimit() when setting 6999: AIX resource limits since rlim_t is 32bits. 7000: [353db89bac61] 7001: 7002: * Fix use after free when sending error messages. From Timo Juhani 7003: Lindfors 7004: [e50dbd902382] 7005: 7006: * ChangeLog, Makefile.in: 7007: Generate the ChangeLog as part of "make dist" instead of having it 7008: in the repo. 7009: [251b70964673] 7010: 7011: 2010-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 7012: 7013: * Makefile.binary.in, Makefile.in, aix.c, alias.c, alloc.c, alloc.h, 7014: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, 7015: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c, 7016: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c, 7017: auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c, 7018: closefrom.c, compat.h, configure.in, defaults.c, defaults.h, 7019: emul/charclass.h, emul/timespec.h, env.c, error.c, error.h, 7020: fileops.c, find_path.c, getcwd.c, getprogname.c, getspwuid.c, 7021: gettime.c, goodpath.c, gram.c, gram.y, ins_2001.h, ins_classic.h, 7022: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h, 7023: isblank.c, lbuf.c, lbuf.h, ldap.c, list.c, list.h, logging.c, 7024: logging.h, match.c, memrchr.c, missing.h, mkinstalldirs, mkstemp.c, 7025: mon_systrace.c, nanosleep.c, parse.c, parse.h, pathnames.h.in, 7026: pty.c, pwutil.c, redblack.c, redblack.h, sample.pam, sample.sudoers, 7027: sample.syslog.conf, script.c, selinux.c, sesh.c, set_perms.c, 7028: sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c, 7029: strlcpy.c, strsignal.c, sudo.c, sudo.h, sudo.man.in, sudo.pod, 7030: sudo_edit.c, sudo_noexec.c, sudo_nss.c, sudo_nss.h, sudo_usage.h.in, 7031: sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod, 7032: sudoers2ldif, sudoreplay.c, sudoreplay.man.in, sudoreplay.pod, 7033: term.c, testsudoers.c, tgetpass.c, timestr.c, toke.c, toke.l, 7034: utimes.c, visudo.c, visudo.man.in, visudo.pod, zero_bytes.c: 7035: Remove CVS $Sudo$ tags. 7036: [de683a8b31f5] 7037: 7038: 2010-01-18 convert-repo <convert-repo> 7039: 7040: * .hgtags: 7041: update tags 7042: [9b7aa44ae436] 7043: 7044: 2009-12-26 Todd C. Miller <Todd.Miller@courtesan.com> 7045: 7046: * sudo_usage.h.in: 7047: make this match sudoers SYNOPSIS 7048: [c74ba66944c2] 7049: 7050: * lbuf.c, parse.c: 7051: Print a newline between Runas and Command-specific defaults in sudo 7052: -l. 7053: [b5bdfcc9ce4b] 7054: 7055: * term.c: 7056: Use SET and CLR macros in term_raw 7057: [50ca42609d6c] 7058: 7059: * sudoreplay.c: 7060: Set stdin to non-blocking mode early instead of in check_input. Use 7061: term_raw instead of term_cbreak since the data we get has already 7062: been expanded via OPOST. 7063: [51c47e803d62] 7064: 7065: 2009-12-23 Todd C. Miller <Todd.Miller@courtesan.com> 7066: 7067: * script.c, term.c: 7068: Enable/disable all postprocessing instead of just nl->crnl 7069: processing since things like tab expansion matter too. However, if 7070: stdout is a tty leave postprocessing on in the pty since we run into 7071: problems doing it only on the real stdout with .e.g nvi. 7072: [62666e309673] 7073: 7074: 2009-12-19 Todd C. Miller <Todd.Miller@courtesan.com> 7075: 7076: * check.c: 7077: If tty_tickets is enabled and there is no tty, prompt for a 7078: password. Do not lecture user for "sudo -k command" if user has a 7079: timestamp. 7080: [5880200c5f6b] 7081: 7082: * INSTALL: 7083: Document missing options: --with-efence and --with-bsm-audit 7084: [d83afcdf9ff3] 7085: 7086: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.ldap.cat, 7087: sudoers.ldap.man.in, sudoers.ldap.pod, sudoers.man.in, sudoers.pod, 7088: sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod, visudo.cat, 7089: visudo.man.in, visudo.pod: 7090: username -> user name groupname -> group name hostname -> host name 7091: [10c85646f45d] 7092: 7093: * INSTALL, README.LDAP, sudoers.pod: 7094: filename -> file name like the rest of the docs 7095: [1ef8ab5a9018] 7096: 7097: 2009-12-17 Todd C. Miller <Todd.Miller@courtesan.com> 7098: 7099: * parse.c: 7100: Fix printing of entries with multiple host entries on a single line. 7101: [226ceaf91d8d] 7102: 7103: 2009-12-14 Todd C. Miller <Todd.Miller@courtesan.com> 7104: 7105: * sudoers.pod: 7106: Mention that targetpw affects the timestamp file name. 7107: [a26e22e4f72e] 7108: 7109: * def_data.c, def_data.h, def_data.in, defaults.c, script.c, 7110: sudoers.pod: 7111: Add compress_transcript option. 7112: [6e94f8cb9dfb] 7113: 7114: 2009-12-13 Todd C. Miller <Todd.Miller@courtesan.com> 7115: 7116: * configure, configure.in: 7117: bump to 1.7.3b2 7118: [906d7e347d15] 7119: 7120: * pwutil.c, set_perms.c, sudo.c, sudo_nss.c: 7121: Better split of membership vs. traditional group check in 7122: user_in_group(). Allow user_ngroups to be < 0 if getgroups() fails. 7123: [6ebc55d4716b] 7124: 7125: 2009-12-12 Todd C. Miller <Todd.Miller@courtesan.com> 7126: 7127: * pwutil.c: 7128: Fix pasto and add default return value. 7129: [7973b5e4599c] 7130: 7131: * check.c, match.c, pwutil.c, sudo.h: 7132: refactor group member checking into user_in_group() 7133: [48ca8c2eddf8] 7134: 7135: * check.c, config.h.in, configure, configure.in, match.c, sudo.c, 7136: sudo.h: 7137: Add support for mbr_check_membership() as present in darwin. 7138: [5501aed02b9f] 7139: 7140: 2009-12-10 Todd C. Miller <Todd.Miller@courtesan.com> 7141: 7142: * match.c: 7143: Rename label to be accurate 7144: [3af17dd960f7] 7145: 7146: * Makefile.in, boottime.c, check.c, config.h.in, configure, 7147: configure.in, sudo.h: 7148: Treat timestamp files from before we booted as old. Idea from and 7149: Apple patch. 7150: [5c96e484c05a] 7151: 7152: 2009-12-09 Todd C. Miller <Todd.Miller@courtesan.com> 7153: 7154: * sudo.c, sudo.pod, sudo_usage.h.in: 7155: Allow the -u flag to be used in conjunction with the -v flag as per 7156: older versions of sudo. 7157: [591e9fc13c1a] 7158: 7159: * logging.c: 7160: fix typo in last commit 7161: [4fd0c692dcf0] 7162: 7163: 2009-12-08 Todd C. Miller <Todd.Miller@courtesan.com> 7164: 7165: * logging.c: 7166: Convert fmt_first and fmt_confd into macros. 7167: [32e870158b29] 7168: 7169: * sudoers.pod: 7170: timeouts can be floats now 7171: [89de639a9679] 7172: 7173: * WHATSNEW, def_data.c, def_data.h, def_data.in, defaults.c, 7174: defaults.h, mkdefaults: 7175: Add support for floating point timeout values (e.g. 2.5 minutes). 7176: [210ffa291733] 7177: 7178: 2009-12-07 Todd C. Miller <Todd.Miller@courtesan.com> 7179: 7180: * sudo.pod: 7181: The -L flag will be removed in sudo 1.7.4 7182: [ffd026084333] 7183: 7184: 2009-12-06 Todd C. Miller <Todd.Miller@courtesan.com> 7185: 7186: * sudoreplay.c: 7187: Fix a bug due to order of operators. 7188: [938d34464283] 7189: 7190: 2009-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 7191: 7192: * match.c: 7193: cmnd_matches() already deals with negation so _cmndlist_matches() 7194: does not need to do so itself. Fixes a bug with negated entries in 7195: a Cmnd_List. 7196: [71c845f6ce73] 7197: 7198: 2009-11-22 Todd C. Miller <Todd.Miller@courtesan.com> 7199: 7200: * sudo.c: 7201: Don't exit() from open_sudoers, just return NULL for all errors. 7202: [8cfa832f972a] 7203: 7204: * script.c: 7205: Can't rely on the shell sending us SIGCONT when transitioning from 7206: backgroup to foreground process. 7207: [3c6c5b6cb4b3] 7208: 7209: * toke.c, toke.l: 7210: Add missing extern def for parse_error 7211: [45b7b59d03b7] 7212: 7213: 2009-11-21 Todd C. Miller <Todd.Miller@courtesan.com> 7214: 7215: * toke.c, toke.l: 7216: Avoid a parse error when #includedir doesn't find any files. Closes 7217: bug #375 7218: [1ce1b850e9e6] 7219: 7220: * Makefile.in: 7221: Include sudo.man.pl and sudoers.man.pl in the distribution tarball. 7222: [6a22e32da108] 7223: 7224: 2009-11-15 Todd C. Miller <Todd.Miller@courtesan.com> 7225: 7226: * script.c: 7227: Start command out in foreground mode if stdout is a tty. Works 7228: around issues with some curses-based programs that don't handle 7229: tcsetattr getting interrupted by a signal. Still allows us to avoid 7230: hogging the tty if the command is part of a pipeline. 7231: [1c32f2b94769] 7232: 7233: * script.c, sudo.c, sudo.h, sudoreplay.c, term.c, tgetpass.c: 7234: Use a socketpair to pass signals from parent to child. Child will 7235: now pass command status change info back via the socketpair. This 7236: allows the parent to distinguish between signals it has been sent 7237: directly and signals the command has received. It also means the 7238: parent can once again print the signal notifications to the tty so 7239: all writes to the pty master occur in the parent. The command is 7240: now always started in background mode with tty signals handled by 7241: the parent. 7242: [c6790b82986d] 7243: 7244: 2009-11-04 Todd C. Miller <Todd.Miller@courtesan.com> 7245: 7246: * configure, configure.in: 7247: Fix a few typos in the descriptions; from Jeff Makey Only do the 7248: check for krb5_get_init_creds_opt_free() taking two arguments if we 7249: find krb5_get_init_creds_opt_alloc(). Otherwise we will get a false 7250: positive when using our own krb5_get_init_creds_opt_free which takes 7251: only a single argument. 7252: [845a9ff6f93d] 7253: 7254: 2009-11-03 Todd C. Miller <Todd.Miller@courtesan.com> 7255: 7256: * configure, configure.in: 7257: Remove a spurious comma in the kerb5 bits. 7258: [3433eab083db] 7259: 7260: * auth/kerb5.c: 7261: Call krb5_get_init_creds_opt_init() in our emulated 7262: krb5_get_init_creds_opt_alloc() for MIT kerberos. 7263: [7ffb40bf43e9] 7264: 7265: 2009-11-01 Todd C. Miller <Todd.Miller@courtesan.com> 7266: 7267: * config.h.in: 7268: Add HAVE_ZLIB 7269: [9297bde61ecc] 7270: 7271: * script.c: 7272: Need to ignore SIGTT{IN,OU} in child when running the command in the 7273: background. Also some minor cleanup. 7274: [dc208d982319] 7275: 7276: 2009-10-31 Todd C. Miller <Todd.Miller@courtesan.com> 7277: 7278: * script.c: 7279: Instead of calling sigsuspend when waiting for SIGUSR[12] from 7280: parent, install the signal handlers w/o SA_RESTART and let them 7281: interrupt waitpid(). 7282: [759c7d18203b] 7283: 7284: * script.c: 7285: Pass along SIGHUP and SIGTERM from parent to child. 7286: [035b0e254568] 7287: 7288: * script.c: 7289: Close unused bits of script_fds in processes that don't need them. 7290: Restore default SIGCONT handler in child. 7291: [e037378ab0c1] 7292: 7293: * script.c: 7294: Update foreground/background status in SIGCONT handler in parent 7295: process. 7296: [3f7f91333264] 7297: 7298: 2009-10-25 Todd C. Miller <Todd.Miller@courtesan.com> 7299: 7300: * script.c: 7301: Defer setting terminal into raw mode until just before we fork() and 7302: only do it if sudo is the foreground process. If we get SIGTT{IN,OU} 7303: and sudo is already in the foreground be sure to set raw mode before 7304: continuing the child. 7305: [1102ef40832c] 7306: 7307: 2009-10-24 Todd C. Miller <Todd.Miller@courtesan.com> 7308: 7309: * script.c: 7310: Fix handling of SIGTTOU/SIGTTIN in program being run. We now only 7311: give the command the controlling tty if the main sudo process is the 7312: foreground process. 7313: [cf3a91cb5682] 7314: 7315: * script.c: 7316: Don't bother with sudo_waitpid() here for now. 7317: [9086de480c2d] 7318: 7319: * script.c: 7320: fix non-zlib case 7321: [a258bff0f9a6] 7322: 7323: 2009-10-23 Todd C. Miller <Todd.Miller@courtesan.com> 7324: 7325: * script.c: 7326: Remove non-wroking code that crept into rev 1.55 7327: [2802dd55cff5] 7328: 7329: 2009-10-22 Todd C. Miller <Todd.Miller@courtesan.com> 7330: 7331: * INSTALL, configure, configure.in, script.c, sudoreplay.c: 7332: First pass at zlib support for transcript data files 7333: [5d10260807da] 7334: 7335: * Makefile.in: 7336: remove vestiges of ZLDFLAGS 7337: [1fa0caf1c0fb] 7338: 7339: * script.c: 7340: Add missing variable declaration for when TIOCSCTTY is not defined. 7341: Need to include sys/termio.h for TIOCSCTTY on some systems. 7342: [ee7f41ac2709] 7343: 7344: * script.c: 7345: when resuming command, send SIGCONT to its pgrp not just pid 7346: [5cd63c1d565b] 7347: 7348: * selinux.c: 7349: remove unused variable 7350: [df67df4be228] 7351: 7352: * script.c: 7353: include selinux.h for is_selinux_enabled() proto 7354: [85ebaa880cc1] 7355: 7356: * script.c: 7357: Don't use log_error() in the child process. 7358: [def65fe2a433] 7359: 7360: * script.c: 7361: Do I/O in parent instead of child since the parent can have both 7362: /dev/tty as well as the pty fds open. The child just sets things up 7363: and waits for its grandchild and writes the signal description to 7364: the pty master if the command was killed by a signal. 7365: [95e473208982] 7366: 7367: 2009-10-18 Todd C. Miller <Todd.Miller@courtesan.com> 7368: 7369: * missing.h, sudo.h: 7370: Move two struct forward declarations from sudo.h to missing.h 7371: [90ad28294a8c] 7372: 7373: * script.c: 7374: Make comment at the top of script_exec() match reality. 7375: [c5042d27dbe0] 7376: 7377: * sudo.c: 7378: if neither stdin nor stdout is a tty, check stderr 7379: [c532ff20c8d8] 7380: 7381: * Makefile.in: 7382: Add back dependecy of gram.h on gram.y 7383: [c58382b7fcca] 7384: 7385: * script.c: 7386: Make transcript mode work as long as we can figure out our tty, even 7387: if it is not stdin. We'd like to use /dev/tty but that won't be 7388: valid after the setsid(). 7389: [7b8bba8d99e7] 7390: 7391: 2009-10-17 Todd C. Miller <Todd.Miller@courtesan.com> 7392: 7393: * config.h.in, configure, configure.in, pty.c: 7394: Add support for IRIX-style dynamic ptys 7395: [bedc9bac44c1] 7396: 7397: * Makefile.in, alloc.h, getline.c, sudo.h, sudoreplay.c: 7398: Move alloc.c protos into alloc.h 7399: [b6a90649617d] 7400: 7401: * missing.h: 7402: Move prototypes for missing libc functions to missing.h 7403: [dda9ae1ccaf8] 7404: 7405: * Makefile.in, sudo.h, sudoreplay.c: 7406: Move prototypes for missing libc functions to missing.h 7407: [7483166b577b] 7408: 7409: 2009-10-16 Todd C. Miller <Todd.Miller@courtesan.com> 7410: 7411: * config.h.in, configure, configure.in: 7412: Disable transcript support if no tcsetpgrp until we support older 7413: BSD-style job control. 7414: [27ac1d8163df] 7415: 7416: * configure, configure.in, pty.c, script.c: 7417: Break out pty code into pty.c 7418: [e85509b25d41] 7419: 7420: * compat.h, config.h.in, configure, configure.in: 7421: add killpg macro if no killpg function 7422: [3a125f4a51f0] 7423: 7424: * config.h.in, configure, configure.in, script.c: 7425: Push ptem and ldterm for STERAMS-based systems when allocating a 7426: pty. 7427: [36bb39b30ff2] 7428: 7429: 2009-10-15 Todd C. Miller <Todd.Miller@courtesan.com> 7430: 7431: * script.c: 7432: Sprinkle some more O_NOCTTY and call grantpt() before unlockpt() 7433: [d94bd5c9bf4e] 7434: 7435: * script.c: 7436: Call tcgetpgrp() in the parent, not the child and have the child 7437: spin until it is granted. Fixes a race on darwin. 7438: [6e8d435339ce] 7439: 7440: * script.c: 7441: Only use TIOCNOTTY in the non-setsid case. If no TIOCSCTTY, just 7442: reopen slave. 7443: [0bdc63c019ca] 7444: 7445: 2009-10-14 Todd C. Miller <Todd.Miller@courtesan.com> 7446: 7447: * script.c: 7448: In script mode, if the command is killed by a signal, print the 7449: signal description as well as a core dump notification like the 7450: shell does. 7451: [9df61738df07] 7452: 7453: * Makefile.in, config.h.in, configure, configure.in, strsignal.c, 7454: sudo.h: 7455: Add check for strsignal() and a simple implementation if it is not 7456: there but sys_siglist is 7457: [61421a188ef4] 7458: 7459: * script.c: 7460: Add missing WUNTRACED and store the signal that stopped the 7461: grandchild in suspended, not signo. 7462: [df65042b200e] 7463: 7464: * script.c: 7465: g/c unused code 7466: [40d8cb5c9203] 7467: 7468: * script.c: 7469: Associate the grandchild's pgrp with the tty instead of the child's 7470: and just get suspend notifications via SIGCHLD instead of directly. 7471: This fixes a hang with programs that try to set terminal attributes 7472: and is more consistent with how the shell handles things. 7473: [6865abff7e94] 7474: 7475: 2009-10-12 Todd C. Miller <Todd.Miller@courtesan.com> 7476: 7477: * script.c: 7478: Move setpgid() of child into the parent side of the fork() where it 7479: belongs. 7480: [3defa782777c] 7481: 7482: 2009-10-11 Todd C. Miller <Todd.Miller@courtesan.com> 7483: 7484: * script.c: 7485: fix typo 7486: [b6a612b3622c] 7487: 7488: * script.c: 7489: Run command in its own pgrp (like the shell does) for easier 7490: signalling. No need to relay SIGINT or SIGQUIT to parent, just send 7491: to grandchild. Don't want grandchild stopped events in the child 7492: (only termination). Flush output after suspending grandchild before 7493: signalling parent. 7494: [db556bf2176f] 7495: 7496: * script.c: 7497: Back out revision 1.34; the problem lies elsewhere. 7498: [85f590a03275] 7499: 7500: * script.c: 7501: Don't set stdout to blocking mode when flushing remaining output. 7502: It can cause us to hang when trying to exit. Need to investigate 7503: why. 7504: [6f803a3e33ca] 7505: 7506: * script.c: 7507: Handle SIGTTOU and remove some debugging. 7508: [52d17279053e] 7509: 7510: * term.c: 7511: Back out revision 1.10 as the signal that interrupts us may be 7512: SIGTTOU or SIGTTIN which the caller must handle. 7513: [7e2fa9107975] 7514: 7515: * script.c: 7516: Apparently we need to send SIGSTOP to the command as well as ourself 7517: when we get SIGTSTP, the kernel doesn't automatically stop the 7518: process for us. 7519: [1a936e9309c4] 7520: 7521: * script.c: 7522: Use an extra process to act as the glue bewteen the sessions 7523: associated with the user's controlling tty (what the shell uses) and 7524: the tty that sudo is using to do its logging. Basically, this means 7525: that if we get, e.g. SIGTSTP from the process sudo is running, we 7526: relay the signal to the parent so it's shell can do the job control. 7527: [6dd296988060] 7528: 7529: * term.c: 7530: Handle getting/setting terminal attributes when the fd is in non- 7531: blocking mode. 7532: [ae5ae535ea7b] 7533: 7534: 2009-10-07 Todd C. Miller <Todd.Miller@courtesan.com> 7535: 7536: * sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod: 7537: Add support for pausing and changing the speed in interactive mode. 7538: [72a2063780a7] 7539: 7540: * script.c: 7541: Already define O_NOCTTY in compat.h, don't need it here 7542: [b5d80ed3e5ce] 7543: 7544: 2009-10-06 Todd C. Miller <Todd.Miller@courtesan.com> 7545: 7546: * sudoreplay.c: 7547: Add missing protos 7548: [c4cb4e7f4d8a] 7549: 7550: 2009-09-30 Todd C. Miller <Todd.Miller@courtesan.com> 7551: 7552: * sudo_edit.c: 7553: Always update the stashed mtime of the temp file instead of using 7554: what we have for the original because the time resolution of the 7555: filesystem the temporary is on may not match that of the filesystem 7556: that holds the original. Should fix bz #371 found by Philippe Levan. 7557: [c86ca4bec60c] 7558: 7559: * sudoreplay.c: 7560: Use cbreak mode instead of raw mode and add signal handlers to 7561: restore the tty on interrupt. 7562: [84dd283da41c] 7563: 7564: * script.c, sudo.h, term.c: 7565: Retain NL to NLCR conversion on the real tty and skip it on the pty 7566: we allocate. That way, if stdout is not a pty there are no extra 7567: carriage returns. 7568: [32e4f570414e] 7569: 7570: * script.c: 7571: Fix log_output(); just pass in a string and a length. 7572: [ca980cc0a3fb] 7573: 7574: 2009-09-28 Todd C. Miller <Todd.Miller@courtesan.com> 7575: 7576: * script.c: 7577: do not use errno when complaining out lack of a tty 7578: [8f9b8c55ab8e] 7579: 7580: 2009-09-27 Todd C. Miller <Todd.Miller@courtesan.com> 7581: 7582: * Makefile.in, sudoreplay.c, term.c: 7583: Instead of messing with line endings, just set terminal to raw mode 7584: in sudoreplay. 7585: [90943fa87acb] 7586: 7587: * term.c: 7588: When copying the terminal attributes to the pty, be sure not to set 7589: ONLCR. This prevents extra carriage returns from ending up in the 7590: script output file. 7591: [e6b5475ac2aa] 7592: 7593: * script.c: 7594: Convert a do {} while into a while 7595: [e461310d2c77] 7596: 7597: * Makefile.in: 7598: Use if then instead of test && when installing binaries that may not 7599: exist. 7600: [ad4f9490d971] 7601: 7602: * script.c: 7603: Add O_NOCTTY when opening a tty device. Explicitly disconnect from 7604: old tty before associatng with new one. 7605: [0e0ca634b80c] 7606: 7607: * script.c, selinux.c, sudo.c, sudo.h: 7608: First cut at refactoring some of the selinux code so it can be used 7609: in conjunction with sudo's transcript support. 7610: [779b0d8f9d29] 7611: 7612: 2009-09-26 Todd C. Miller <Todd.Miller@courtesan.com> 7613: 7614: * aclocal.m4, configure, configure.in: 7615: Fix default case of transcript_enabled being unset. 7616: [f8aa96186e6b] 7617: 7618: * script.c, sudoreplay.c: 7619: Use _PATH_SUDO_TRANSCRIPT instead of _PATH_SUDO_SESSDIR 7620: [2844a7a851fa] 7621: 7622: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.c: 7623: Hook up --disable-transcript and --enable-transcript=DIR 7624: [b3fa7e6b2480] 7625: 7626: 2009-09-25 Todd C. Miller <Todd.Miller@courtesan.com> 7627: 7628: * aclocal.m4, configure, configure.in, pathnames.h.in: 7629: _PATH_SUDO_SESSDIR -> _PATH_SUDO_TRANSCRIPT Add --enable- 7630: transcript=DIR option to specify the directory 7631: [b0bb76d43cda] 7632: 7633: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: 7634: regen 7635: [c7a8a0a9027c] 7636: 7637: * configure, configure.in, sudoers.man.pl, sudoers.pod: 7638: Substitute in default value for secure_path 7639: [c8f9ac6dbf93] 7640: 7641: * sudo.pod: 7642: Mention that the password must be followed by a newline with the -S 7643: option. 7644: [2fc589a3ee7e] 7645: 7646: 2009-09-20 Todd C. Miller <Todd.Miller@courtesan.com> 7647: 7648: * script.c: 7649: Go back to dropping out of the select() loop when the process dies; 7650: Linux ptys apparently don't behave the same as BSD in regards to 7651: select(). No need to flush remaining output to the transcript, only 7652: to stdout. Add back code to check the master pty for additional data 7653: when we exit the main select loop. 7654: [abed9a9cbc6b] 7655: 7656: 2009-09-19 Todd C. Miller <Todd.Miller@courtesan.com> 7657: 7658: * Makefile.in: 7659: Add getline.o to COMMON_OBJS 7660: [04ef7643cbc2] 7661: 7662: * Makefile.in: 7663: sudoreplay depends on libsudo.a 7664: [142bd0472631] 7665: 7666: * Makefile.in: 7667: More pwutil.o into COMMON_OBJS 7668: [4a016b933629] 7669: 7670: * pwutil.c, testsudoers.c, tsgetgrpw.c: 7671: Remove my_* redirection in pwutil.c for testsudoers and just use the 7672: normal libc get{pw,gr}* names. 7673: [9b76d637d86b] 7674: 7675: * sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod: 7676: More time and date examples 7677: [c6ee0175ec56] 7678: 7679: * Makefile.in, configure, configure.in, nanosleep.c, sudoreplay.c: 7680: Move nanosleep() emulation into its own file Check librt.a for 7681: nanosleep if we don't find it in libc 7682: [4da0cc26aad7] 7683: 7684: * Makefile.in, configure, configure.in: 7685: Build libsudo with the common bits and link things against that. 7686: [2b53bc0b081a] 7687: 7688: * script.c: 7689: Fix final flush. 7690: [6da287d833da] 7691: 7692: * script.c: 7693: Keep reading from the pty master -> log file until read returns <= 7694: 0. Do our best to write everything to stdout when flushing any 7695: remaining bits. 7696: [2a45d4ae280c] 7697: 7698: * sudoreplay.c: 7699: Use unbuffered I/O when writing to stdout and make sure we write the 7700: entire buffer. 7701: [f39ef9844a47] 7702: 7703: 2009-09-18 Todd C. Miller <Todd.Miller@courtesan.com> 7704: 7705: * sudoreplay.c: 7706: Only use max_wait if it is non-zero 7707: [f6c10604d2e8] 7708: 7709: * getdate.c, getdate.y, getline.c: 7710: Need compat.h here 7711: [5d6722e225a0] 7712: 7713: * sudoreplay.c: 7714: Fix nanosleep emulation 7715: [34e5e5d72a76] 7716: 7717: * script.c: 7718: Fix comment after #endif 7719: [bd1347718b25] 7720: 7721: * sudoreplay.c: 7722: Add protos for missing libc bits 7723: [644f496427a2] 7724: 7725: * configure, configure.in: 7726: add missing line continuation char 7727: [db13c0d402cd] 7728: 7729: * config.h.in, configure, configure.in, getline.c: 7730: Implement getline() in terms of fgetln() if we have it. 7731: [3ab786eaadc5] 7732: 7733: * sudoreplay.c: 7734: Print year when formatting log line 7735: [90be669e3443] 7736: 7737: * sudoreplay.pod: 7738: Document cwd, attempt to document time/date formats. 7739: [6290fb9b65c6] 7740: 7741: * sudoreplay.c: 7742: Fix getline return value check. 7743: [d696d6657261] 7744: 7745: * Makefile.in, config.h.in, configure, configure.in, getline.c, 7746: sudoreplay.c: 7747: Use getline() if the system has it, else use provide our own for 7748: sudoreplay. 7749: [afca1d6fbe5e] 7750: 7751: * script.c: 7752: Refactor code to update output and timing files. 7753: [361491332b1a] 7754: 7755: 2009-09-17 Todd C. Miller <Todd.Miller@courtesan.com> 7756: 7757: * sudoreplay.c: 7758: Make sudo_getln() behave more like glibc getline. 7759: [40c9f2ea29e6] 7760: 7761: * script.c: 7762: When flushing remaining output, also update timing file. 7763: [5a9a5a627549] 7764: 7765: * sudoreplay.c: 7766: Use get_timestr() and make the -l output look like the regular sudo 7767: log. 7768: [452ba9d436c9] 7769: 7770: * logging.c, sudo.h, timestr.c: 7771: Make get_timestr() take a time_t so we can use it properly in 7772: sudoreplay. 7773: [82e67cc53c9c] 7774: 7775: * script.c: 7776: Create session dir earlier now that we update the seq number early. 7777: [797fe8d6dc61] 7778: 7779: 2009-09-16 Todd C. Miller <Todd.Miller@courtesan.com> 7780: 7781: * sudoreplay.c: 7782: Use fromdate and todate as the keywords instead of from and to; the 7783: short forms will still be accepted. 7784: [d14d9b116df4] 7785: 7786: * sudoreplay.c: 7787: Fix reading long liensin sudo_getln() 7788: [58dadd74118c] 7789: 7790: * script.c, sudoreplay.c: 7791: Log the cwd in the script log file. Add sudo_getln() to read 7792: arbitrarily long lines. 7793: [faceb802ab8f] 7794: 7795: * Makefile.in, logging.c, sudo.h, timestr.c: 7796: Move get_timestr() into its own source file so sudoreplay can use 7797: it. 7798: [99b054bfa20a] 7799: 7800: 2009-09-15 Todd C. Miller <Todd.Miller@courtesan.com> 7801: 7802: * sudoreplay.c: 7803: Add to and from perdicates (date ranges); needs documentation 7804: [1d629174dcf4] 7805: 7806: 2009-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 7807: 7808: * Makefile.in, getdate.c, getdate.y: 7809: Fix warning and add generated getdate.c 7810: [b877a86b5a03] 7811: 7812: * Makefile.in, getdate.y: 7813: Add getdate.y to be used for sudoreplay date parsing. 7814: [b8e26fbb7a40] 7815: 7816: 2009-09-13 Todd C. Miller <Todd.Miller@courtesan.com> 7817: 7818: * sudoreplay.c: 7819: Check more than just the first character of a predicate 7820: [4fe53728adb1] 7821: 7822: * sudoreplay.cat, sudoreplay.man.in, sudoreplay.pod: 7823: Add examples, sort predicates 7824: [70f8075cbccc] 7825: 7826: * Makefile.in, sudoreplay.c, sudoreplay.cat, sudoreplay.man.in, 7827: sudoreplay.pod: 7828: Implement search expressions in sudoreplay similar in concept to 7829: what find or tcpdump uses. TODO: date ranges 7830: [f7ce4fb4cf3a] 7831: 7832: 2009-09-07 Todd C. Miller <Todd.Miller@courtesan.com> 7833: 7834: * script.c: 7835: Remove vhangup as it was hanging up the wrong tty. Should really 7836: vhangup in the child after it as set its tty. 7837: [2eed9df73010] 7838: 7839: * sudoers.pod: 7840: Fix cut at documenting transcript support. 7841: [e6c533a5568a] 7842: 7843: * logging.c: 7844: ID= -> TSID= for transcript ID 7845: [1bf755a35333] 7846: 7847: 2009-09-06 Todd C. Miller <Todd.Miller@courtesan.com> 7848: 7849: * sudoers.pod: 7850: Move fast_glob description to where it belongs in sorted order 7851: [5901cfb0d25f] 7852: 7853: * def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y, 7854: parse.c, parse.h, sudo.c: 7855: Rename script -> transcript 7856: [e06cf823122c] 7857: 7858: 2009-09-03 Todd C. Miller <Todd.Miller@courtesan.com> 7859: 7860: * compat.h: 7861: Add timeradd and timersub for those without them 7862: [929f8aa06c2b] 7863: 7864: * script.c: 7865: Sanity check sessid before using it. 7866: [aa8ca5211d43] 7867: 7868: * sudo.c: 7869: Only set the session id if we are running a command or editing a 7870: file. 7871: [7205d717c098] 7872: 7873: * script.c: 7874: Actually. qsort is fine since most versions fal back to a cheaper 7875: sort when the number of elements to sort is small (like in our 7876: case). 7877: [d11c7cd352fe] 7878: 7879: * config.h.in, configure, configure.in, script.c: 7880: Check for dup2 and use dup instead if we don't have it. 7881: [98bd89830f8a] 7882: 7883: * script.c, sudo.c, sudo.h: 7884: Move the code to dup2 the script fds to low numbered descriptors 7885: into script_duplow() and fix the fd sorting. 7886: [9453fdc5fba6] 7887: 7888: * script.c, sudo.c, sudo.h: 7889: Move script_setup() back to immediately before we drop privs and 7890: call the new script_nextid() in its place, which will set 7891: sudo_user.sessid for the logging functions. 7892: [8434d0c8ff08] 7893: 7894: 2009-09-01 Todd C. Miller <Todd.Miller@courtesan.com> 7895: 7896: * Makefile.in: 7897: Install sudoreplay 7898: [6acf2cdb4d3f] 7899: 7900: * sudoreplay.c: 7901: remove unused variable 7902: [2316360bb992] 7903: 7904: 2009-08-30 Todd C. Miller <Todd.Miller@courtesan.com> 7905: 7906: * logging.c, script.c, sudo.c, sudo.h: 7907: Log the session ID, if there is one. Currently logs ID=XXXXXX, 7908: perhaps should be SESSIONID or SESSID. 7909: [53976905b0a6] 7910: 7911: * Makefile.in, configure, configure.in, sudoreplay.cat, 7912: sudoreplay.man.in, sudoreplay.pod: 7913: Add sudoreplay docs 7914: [da4f14f0e64c] 7915: 7916: * sudoreplay.c: 7917: add -V (version) flag 7918: [b5e743639ee3] 7919: 7920: * sudoreplay.c: 7921: Hook up max_wait. 7922: [2ec5697a92ba] 7923: 7924: * script.c, sudoreplay.c: 7925: Use base36 number for the ID and store script files with paths like 7926: /var/log/sudo-session/00/00/00{,.tim,.scr}. This gives us 36^6 7927: (2,176,782,336) unique IDs. 7928: [6aab019d07aa] 7929: 7930: 2009-08-23 Todd C. Miller <Todd.Miller@courtesan.com> 7931: 7932: * config.h.in, configure.in: 7933: Add check for regcomp 7934: [44c3ebd7ff34] 7935: 7936: * sudoreplay.c: 7937: Add support for selecting by pattern and tty when listing. 7938: [66189f840c52] 7939: 7940: 2009-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 7941: 7942: * sudoreplay.c: 7943: The beginnings of a list mode. 7944: [8d0150b4a52c] 7945: 7946: 2009-08-16 Todd C. Miller <Todd.Miller@courtesan.com> 7947: 7948: * Makefile.in: 7949: fix pasto 7950: [616b4640b8a8] 7951: 7952: * Makefile.in, config.h.in, configure.in: 7953: Add scaffolding for building sudoreplay 7954: [a32958505dbe] 7955: 7956: * sudoreplay.c: 7957: include error.h first arg to nanotime is const 7958: [fe5a7bb31bc5] 7959: 7960: * sudoreplay.c: 7961: Initial cut at sudoreplay; replay a sudo session. 7962: [f149fba372bd] 7963: 7964: 2009-08-08 Todd C. Miller <Todd.Miller@courtesan.com> 7965: 7966: * script.c: 7967: Fix wait() usage and use correct wait status. 7968: [f4745ed7ad05] 7969: 7970: * sudo.c, sudo.h, tgetpass.c: 7971: Add protos for term_* to sudo.h 7972: [14fe1abd7e7b] 7973: 7974: * script.c: 7975: Fix detection of the child process exiting. Since the child is in 7976: its own session we should only ever get SIGCHLD for that process but 7977: better safe than sorry. 7978: [7edfdadd8505] 7979: 7980: * config.h.in: 7981: Add UNIX98 pty support. 7982: [82f4b53a0e8f] 7983: 7984: * configure, configure.in, script.c: 7985: Add UNIX98 pty support. 7986: [795b8bb0a3a1] 7987: 7988: 2009-08-07 Todd C. Miller <Todd.Miller@courtesan.com> 7989: 7990: * term.c: 7991: For raw mode, don't bother clearing BRKINT or PARMRK and clear IUCLC 7992: if it is defined. 7993: [40f8b83baf69] 7994: 7995: * auth/pam.c: 7996: Set PAM_RUSER and PAM_RHOST early so they can be used during 7997: authentication. Based on a patch from Jamie Beverly. 7998: [3d567b453a6a] 7999: 8000: * match.c: 8001: Close dir before returning if strlcpy() reports overflow. From 8002: Martynas Venckus. 8003: [6a82f96473e5] 8004: 8005: * config.h.in, configure, configure.in, script.c: 8006: On Linux, the openpty proto libes in pty.h 8007: [98643a018d1c] 8008: 8009: * script.c: 8010: Call vhangup on exit if the system has it Use setpgrp() if no 8011: setsid() 8012: [3a9e13149829] 8013: 8014: 2009-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 8015: 8016: * config.h.in, configure, configure.in: 8017: Add checks for revoke and vhangup if we don't have openpty 8018: [fcb04572e994] 8019: 8020: * script.c: 8021: Session logging guts that got forgotten in the previous commit. 8022: [c2af08a63ea9] 8023: 8024: * Makefile.in, aclocal.m4, compat.h, config.h.in, configure, 8025: configure.in, def_data.c, def_data.h, def_data.in, gram.c, gram.h, 8026: gram.y, parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, term.c, 8027: tgetpass.c: 8028: First cut at session logging for sudo. Still need to write 8029: get_pty() for Unix 98 and old-style BSD ptys. Also needs 8030: documentation and general cleanup. 8031: [77e3f5e25738] 8032: 8033: 2009-08-05 Todd C. Miller <Todd.Miller@courtesan.com> 8034: 8035: * sudo.c, sudo_edit.c: 8036: Fix a bug introduced with def_closefrom. The value of def_closefrom 8037: already includes the +1. 8038: [7291c136300d] 8039: 8040: 2009-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 8041: 8042: * Makefile.in: 8043: Generate sudo distributions with pax in ustar mode. No longer need 8044: to use a temp file or have the source dir name match the version. 8045: [9778177a8272] 8046: 8047: 2009-07-18 Todd C. Miller <Todd.Miller@courtesan.com> 8048: 8049: * toke.c, toke.l: 8050: Fix expansion of %h in #include names. Fixes bugzilla 363 8051: [6e346879ba24] 8052: 8053: 2009-07-12 Todd C. Miller <Todd.Miller@courtesan.com> 8054: 8055: * mkdefaults: 8056: If no arg assume def_data.in 8057: [c1dd28c0e675] 8058: 8059: * README, WHATSNEW: 8060: Update for 1.7.2 8061: [f5ad45f69f05] [SUDO_1_7_2] 8062: 8063: * ChangeLog: 8064: sync 8065: [6283549396ff] 8066: 8067: 2009-06-30 Todd C. Miller <Todd.Miller@courtesan.com> 8068: 8069: * sudoers.cat, sudoers.man.in, sudoers.pod: 8070: Add missing single quotes around a colon in Runas_Spec definition. 8071: From Elias Benali. 8072: [ccc6ee4fca83] 8073: 8074: 2009-06-29 Todd C. Miller <Todd.Miller@courtesan.com> 8075: 8076: * sudo.man.in, sudoers.man.in: 8077: regen 8078: [546e75304ebf] 8079: 8080: * redblack.c: 8081: In rbrepair, re-color the root or the first non-block node we find 8082: to be black. Re-coloring the root is probably not needed but won't 8083: hurt. 8084: [34d01ebe241b] 8085: 8086: * sudo.cat, sudoers.cat: 8087: regen 8088: [bebf5a39f54f] 8089: 8090: 2009-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 8091: 8092: * redblack.c: 8093: When repairing the tree, don't touch the root node. 8094: [9841f0d5d789] 8095: 8096: 2009-06-25 Todd C. Miller <Todd.Miller@courtesan.com> 8097: 8098: * set_perms.c: 8099: Protect call to setegid in runas_setup with #ifdef HAVE_SETEUID. 8100: Reported by Josef Schmid. 8101: [ed044b1eb879] 8102: 8103: 2009-06-23 Todd C. Miller <Todd.Miller@courtesan.com> 8104: 8105: * sudoers.pod: 8106: Document that we accept env_pam-style environment files 8107: [e3b545456352] 8108: 8109: * env.c: 8110: Adapt to accept pam_env-style /etc/environment which allows shell- 8111: style lines such as: export EDITOR="/usr/bin/vi" 8112: [752eb75bf007] 8113: 8114: * sudoers.pod: 8115: Make it clear that env_delete only works when !env_reset. From Lo??c 8116: Minier 8117: [3bd3f8e351ba] 8118: 8119: 2009-06-15 Todd C. Miller <Todd.Miller@courtesan.com> 8120: 8121: * sudo.pod, sudoers.pod: 8122: Add non-unix group bits, adapted from Quest 8123: [8ce427de8dea] 8124: 8125: * Makefile.in: 8126: build the .cat page in the current working dir, not the src dir 8127: [00e87a307674] 8128: 8129: * env.c: 8130: Return EINVAL in setenv() if var is NULL or the empty string to 8131: match glibc behavior. 8132: [23fd7c247142] 8133: 8134: 2009-06-13 Todd C. Miller <Todd.Miller@courtesan.com> 8135: 8136: * configure, configure.in: 8137: Use AS_HELP_STRING for AC_ARG_WITH and AC_ARG_ENABLE 8138: [fedd4a3e2a85] 8139: 8140: 2009-06-11 Todd C. Miller <Todd.Miller@courtesan.com> 8141: 8142: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat, 8143: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in: 8144: regen 8145: [7b9f461a40b3] 8146: 8147: 2009-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 8148: 8149: * INSTALL: 8150: Document --with-libvas and --with-libvas-rpath 8151: [a071e6d96c89] 8152: 8153: 2009-05-29 Todd C. Miller <Todd.Miller@courtesan.com> 8154: 8155: * ldap.c, sudoers.ldap.pod: 8156: For netscape-derived LDAP SDKs the cert and key paths may be a 8157: directory or a file. However, version 5.0 of the SDK only seems to 8158: support using a directory. If ldapssl_clientauth_init fails and the 8159: cert or key paths look like they could be files, strip off the last 8160: path element and try again. 8161: [ac4e49d83043] 8162: 8163: * Makefile.in: 8164: Add non-Unix group .o to COMMON_OBJS and substitute in path to flex. 8165: [4547cc1a335f] 8166: 8167: 2009-05-27 Todd C. Miller <Todd.Miller@courtesan.com> 8168: 8169: * configure, configure.in, match.c, sudo.c, vasgroups.c: 8170: Update non-Unix group support from Quest, as reworked by me. 8171: [1abafce29dc6] 8172: 8173: * toke.c: 8174: regen 8175: [01bfca9148b7] 8176: 8177: * toke.l: 8178: Add support for escaped hex chars in names, e.g. \x20 for space. 8179: [3c7be8e58a39] 8180: 8181: 2009-05-25 Todd C. Miller <Todd.Miller@courtesan.com> 8182: 8183: * LICENSE, Makefile.in, aclocal.m4, alias.c, auth/aix_auth.c, 8184: auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c, env.c, 8185: fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c, logging.c, 8186: logging.h, match.c, parse.c, parse.h, pathnames.h.in, pwutil.c, 8187: set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c, sudo_nss.h, 8188: sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod, testsudoers.c, 8189: tgetpass.c, toke.l, visudo.c: 8190: Update copyright years. 8191: [e615f676c764] 8192: 8193: 2009-05-24 Todd C. Miller <Todd.Miller@courtesan.com> 8194: 8195: * interfaces.c, lbuf.c: 8196: Minor fixes for Minix-3 8197: [898c510d23f9] 8198: 8199: 2009-05-22 Todd C. Miller <Todd.Miller@courtesan.com> 8200: 8201: * set_perms.c: 8202: Handle getgroups() returning 0. Also add missing check for 8203: HAVE_GETGROUPS. 8204: [d73b958f9ffd] 8205: 8206: 2009-05-19 Todd C. Miller <Todd.Miller@courtesan.com> 8207: 8208: * Makefile.in, config.h.in, configure, configure.in, sudo.c, 8209: version.h, visudo.c: 8210: Replace version.h with PACKAGE_VERSION set via AC_INIT in configure. 8211: [5050579a264d] 8212: 8213: 2009-05-18 Todd C. Miller <Todd.Miller@courtesan.com> 8214: 8215: * set_perms.c: 8216: Remove group setting code in setusercontext case, we will do it 8217: ourselves later on in runas_setup. Set the gid after 8218: initgroups/setgroups is called, since on Mac OS X it seems to change 8219: the egid. 8220: [09dc21d8b42d] 8221: 8222: 2009-05-17 Todd C. Miller <Todd.Miller@courtesan.com> 8223: 8224: * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c, 8225: vasgroups.c: 8226: Initial bits of non-unix group support using Quest Authentication 8227: Services 8228: [1eecab0ff27e] 8229: 8230: * toke.c, toke.l: 8231: Accept %:foo as a non-Unix group 8232: [4c4b5dd899a6] 8233: 8234: * toke.c, toke.l: 8235: Allow user/group to be double quoted in the case of non-Unix groups 8236: which contain spaces. 8237: [47a3d568b7e8] 8238: 8239: 2009-05-11 Todd C. Miller <Todd.Miller@courtesan.com> 8240: 8241: * match.c: 8242: Don't allow the user to specify the default runas user if their 8243: sudoers entry only allows them to run as a group. 8244: [4d726177227c] 8245: 8246: 2009-05-10 Todd C. Miller <Todd.Miller@courtesan.com> 8247: 8248: * sudo.c: 8249: Must call audit_success before we change uids. 8250: [04a9e6ce6e55] 8251: 8252: * logging.c, set_perms.c, sudo.h, testsudoers.c: 8253: Add option for set_perm to not exit on failure and use this in the 8254: logging routines. 8255: [833dce7b7f42] 8256: 8257: * parse.c: 8258: In -l mode, if the user is only allowed to run as a group, display 8259: the user's name, not root's before the allowed group. 8260: [ef92ff99d265] 8261: 8262: * sudo.c: 8263: Fix -g mode, broken by rev 1.503 which had the side effect of 8264: setting the runas user to root unilaterally. 8265: [50a2f7df4385] 8266: 8267: 2009-05-08 Todd C. Miller <Todd.Miller@courtesan.com> 8268: 8269: * fileops.c: 8270: When unlocking a file with fcntl, use F_SETLK, not F_SETLKW. 8271: [30fbe832dcf3] 8272: 8273: * pwutil.c: 8274: Only cache by the method we fetched for pwd and grp lookups. 8275: Previously we cached both by namd and id but this can cause problems 8276: for entries that share the same id. Also add more info in the error 8277: message in case the insert fails (which should now be impossible). 8278: [ef95a4f0bab5] 8279: 8280: 2009-04-30 Todd C. Miller <Todd.Miller@courtesan.com> 8281: 8282: * sudoers.pod: 8283: Add a clarification from Nick Sieger 8284: [1eadad329561] 8285: 8286: 2009-04-25 Todd C. Miller <Todd.Miller@courtesan.com> 8287: 8288: * env.c: 8289: Inline the setting of the environment string. 8290: [9515d11c6295] 8291: 8292: 2009-04-24 Todd C. Miller <Todd.Miller@courtesan.com> 8293: 8294: * env.c: 8295: setenv(3) in Linux treats a NUL value as the empty string setenv(3) 8296: in BSD doesn't return an error if the name has '=' in it, it just 8297: treats the '=' as end of string. 8298: [941260bf94d2] 8299: 8300: 2009-04-22 Todd C. Miller <Todd.Miller@courtesan.com> 8301: 8302: * toke.c, toke.l: 8303: Not all systems have d_namlen 8304: [e377b18d8e2d] 8305: 8306: 2009-04-20 Todd C. Miller <Todd.Miller@courtesan.com> 8307: 8308: * sudoers.pod: 8309: Fix up some pod2html issues. 8310: [823a1f10ab60] 8311: 8312: 2009-04-19 Todd C. Miller <Todd.Miller@courtesan.com> 8313: 8314: * interfaces.c: 8315: Check for NULL ifa_addr and ifa_netmask. Adapted from a diff from 8316: Quest Software. 8317: [73de36653131] 8318: 8319: * sudoers.pod: 8320: Ignore files ending in '~' in sudo.d (emacs backup files) 8321: [7871fad702db] 8322: 8323: * toke.c, toke.l: 8324: Ignore files ending in '~' in sudo.d (emacs backup files) 8325: [53fded2a469f] 8326: 8327: 2009-04-18 Todd C. Miller <Todd.Miller@courtesan.com> 8328: 8329: * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: 8330: For #includedir, ignore any file containing a dot 8331: [a7daa1bce6c2] 8332: 8333: * Makefile.in, version.h: 8334: Bump version 8335: [ef60f14ffc44] 8336: 8337: * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat, 8338: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l, 8339: visudo.c: 8340: Implement #includedir directive. Files in an includedir are not 8341: edited by visudo unless they contain a syntax error. 8342: [3923d85a6c79] 8343: 8344: * ChangeLog: 8345: sync 8346: [8741ed61a78b] [SUDO_1_7_1] 8347: 8348: * WHATSNEW: 8349: Forgot umask_override 8350: [7c86a21a5504] 8351: 8352: * ChangeLog, TODO: 8353: sync 8354: [57339ca6bccf] 8355: 8356: 2009-04-16 Todd C. Miller <Todd.Miller@courtesan.com> 8357: 8358: * visudo.c: 8359: Rewind stream if we fdopen sudoers since it may not be at the 8360: beginning. Set the keepopen flag on already-open files too so the 8361: lexer doesn't close them out from under us. 8362: [61292d819aff] 8363: 8364: * visudo.c: 8365: Print the proper file name when there is a parse error in an include 8366: file. 8367: [b0e85d4aedde] 8368: 8369: 2009-04-11 Todd C. Miller <Todd.Miller@courtesan.com> 8370: 8371: * WHATSNEW: 8372: Sync 8373: [997e5d485ea3] 8374: 8375: 2009-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 8376: 8377: * configure, configure.in: 8378: Fix a warning when --without-ldap is specified. 8379: [d91fd9481b30] 8380: 8381: 2009-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 8382: 8383: * alias.c, parse.h, visudo.c: 8384: Store aliases that we remove during check_aliases in a freelist and 8385: free them at the end so we don't leak memory. 8386: [805e2272f6a3] 8387: 8388: 2009-03-28 Todd C. Miller <Todd.Miller@courtesan.com> 8389: 8390: * visudo.c: 8391: Check aliases in -c mode too. 8392: [9199e188d9f2] 8393: 8394: * alias.c, parse.h, visudo.c: 8395: Make alias_remove return the alias struct instead of freeing it 8396: directly. Fixes a use after free in alias_remove_recursive, the only 8397: consumer. 8398: [a04b61804800] 8399: 8400: * alias.c, match.c, parse.c, parse.h, visudo.c: 8401: Rename find_alias -> alias_find for consistency. 8402: [48b0a82924f3] 8403: 8404: 2009-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 8405: 8406: * visudo.c: 8407: When checking for unused aliases, recurse if the alias points to 8408: another alias. 8409: [2d4d1a7f3a41] 8410: 8411: 2009-03-16 Todd C. Miller <Todd.Miller@courtesan.com> 8412: 8413: * ldap.c: 8414: Back out rev 1.105 for now. Real ldapux_client.conf support will be 8415: done later after some refactoring. 8416: [8ad72e69b277] 8417: 8418: 2009-03-14 Todd C. Miller <Todd.Miller@courtesan.com> 8419: 8420: * ldap.c: 8421: Treat ldap_hostport the same as "host" for ldapux. 8422: [3281dcc66da8] 8423: 8424: * configure, configure.in: 8425: Only check for ldap_sasl_interactive_bind_s if we can find sasl.h. 8426: Fixes compilation with ldapux. 8427: [ca1ed585ef0e] 8428: 8429: 2009-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 8430: 8431: * fileops.c: 8432: fix char subscript 8433: [41e51f080d00] 8434: 8435: 2009-03-11 Todd C. Miller <Todd.Miller@courtesan.com> 8436: 8437: * Makefile.in: 8438: remove errant carriage returns 8439: [e9e258a31c7b] 8440: 8441: * audit.c, env.c: 8442: fix K&R compilation 8443: [d182e8920f13] 8444: 8445: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat, 8446: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in: 8447: regen 8448: [791a5cbf04e5] 8449: 8450: 2009-03-10 Todd C. Miller <Todd.Miller@courtesan.com> 8451: 8452: * config.h.in: 8453: Add missing HAVE_BSM_AUDIT 8454: [49ad1bb96f04] 8455: 8456: * WHATSNEW: 8457: Add 1.7.1 features 8458: [f107f1604c61] 8459: 8460: * INSTALL: 8461: Mention --with-netsvc 8462: [d1e90d147795] 8463: 8464: * sudoers.ldap.pod: 8465: Document netsvc.conf support 8466: [e78f8abce6af] 8467: 8468: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c, 8469: sudo_nss.h: 8470: Add support for AIX netsvc.conf (like nsswitch.conf). 8471: [1df56a84dee5] 8472: 8473: 2009-03-08 Todd C. Miller <Todd.Miller@courtesan.com> 8474: 8475: * config.h.in, configure, configure.in, env.c: 8476: Add --enable-env-debug flag to enable environment sanity checks. 8477: [128cdd8832e7] 8478: 8479: * sudoers.ldap.pod, sudoers.pod: 8480: Work around some pod2html issue. 8481: [e733b9609bd2] 8482: 8483: 2009-03-07 Todd C. Miller <Todd.Miller@courtesan.com> 8484: 8485: * env.c: 8486: Only sync environ for putenv, setenv, and unsetenv. We need to make 8487: sure that sudo_putenv and sudo_setenv only modify env.envp, not 8488: environ. 8489: [be3ac732243c] 8490: 8491: 2009-03-02 Todd C. Miller <Todd.Miller@courtesan.com> 8492: 8493: * env.c: 8494: Really fix UNSETENV_VOID 8495: [08ab7e882507] 8496: 8497: * env.c: 8498: Fix unsetenv when UNSETENV_VOID 8499: [d3038b3f2f15] 8500: 8501: * aclocal.m4, configure: 8502: Fix SUDO_FUNC_PUTENV_CONST 8503: [de35569c572b] 8504: 8505: * ldap.c: 8506: tivoli-based ldap does not have ldapssl_err2string 8507: [c63fd90d5e99] 8508: 8509: * configure: 8510: regen 8511: [f38f1ee828ad] 8512: 8513: 2009-03-01 Todd C. Miller <Todd.Miller@courtesan.com> 8514: 8515: * config.h.in, configure, configure.in, ldap.c: 8516: Add support for Tivoli-based LDAP start TLS as seen in AIX. 8517: Untested. 8518: [8f8771829f85] 8519: 8520: * env.c: 8521: Add sanity checks for setenv/unsetenv 8522: [adbd1d95856b] 8523: 8524: * Makefile.in: 8525: Include bsm_audit.h in the tarball 8526: [4a4aa02b2c32] 8527: 8528: * Makefile.in, version.h: 8529: bump version for sudo 1.7.1 8530: [362c71d21595] 8531: 8532: * aclocal.m4, auth/aix_auth.c, config.h.in, configure, configure.in, 8533: env.c, ldap.c, sudo.h: 8534: Replace sudo_setenv/sudo_unsetenv with calls to setenv/unsetenv and 8535: provide our own setenv/unsetenv/putenv that operates on own env 8536: pointer. Make sync_env() inline in setenv/unsetenv/putenv functions. 8537: [276edcd23032] 8538: 8539: 2009-02-25 Todd C. Miller <Todd.Miller@courtesan.com> 8540: 8541: * sudo.c: 8542: Make "sudoedit -h" work as expected 8543: [2bcbbb45d389] 8544: 8545: * auth/pam.c: 8546: Make sure def_prompt is always defined. This is a workaround for 8547: pam configs that prompt for a password in the session but don't have 8548: an auth line. A better fix is to expand the sudo prompt earlier and 8549: set def_prompt to that when initializing. 8550: [ee073c04aec3] 8551: 8552: * sudo.pod: 8553: Mention that the helper for -A may be graphical. 8554: [b64a940c4082] 8555: 8556: * TROUBLESHOOTING: 8557: Document what happens if there is no tty. 8558: [313d58a856a5] 8559: 8560: * sudo.c: 8561: cosmetic changes 8562: [894f5e3b0c3e] 8563: 8564: * term.c: 8565: Fix term_restore 8566: [6c6315ff14bc] 8567: 8568: * sudo.c: 8569: Fix "sudo -k" with no other args 8570: [59e94dc419c6] 8571: 8572: 2009-02-24 Todd C. Miller <Todd.Miller@courtesan.com> 8573: 8574: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: 8575: Allow the -k flag to be specified in conjunction with a command or 8576: another option that may require authentication. 8577: [5960ff20355d] 8578: 8579: 2009-02-23 Todd C. Miller <Todd.Miller@courtesan.com> 8580: 8581: * configure, configure.in: 8582: Remove unneeded AC_CANONICAL_TARGET; from Diego E. 'Flameeyes' 8583: [e86ab69c4a57] 8584: 8585: * Makefile.in: 8586: Parallel make fix. From Diego E. 'Flameeyes' 8587: [1289d7ee27db] 8588: 8589: 2009-02-21 Todd C. Miller <Todd.Miller@courtesan.com> 8590: 8591: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: 8592: Implement umask_override 8593: [8b87a3f7c5aa] 8594: 8595: * toke.c: 8596: regen 8597: [79d7ca9ac873] 8598: 8599: * sudoers.pod, toke.l, visudo.c: 8600: Implement %h escape in sudoers include filenames. 8601: [a7f288dd64f0] 8602: 8603: * audit.c: 8604: Need to include compat.h 8605: [c0dc07ce2f70] 8606: 8607: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h, sudo.c: 8608: Make audit_success and audit_failure generic functions in 8609: preparation for integrating linux audit support. 8610: [7df020a8fd6f] 8611: 8612: * term.c: 8613: remove duplicate include 8614: [1dfcd01a7e46] 8615: 8616: 2009-02-20 Todd C. Miller <Todd.Miller@courtesan.com> 8617: 8618: * bsm_audit.c: 8619: Add missing include 8620: [fb56e08c37ee] 8621: 8622: * sudo.c: 8623: May need to update the runas user after parsing command-based 8624: defaults. 8625: [246f130d7802] 8626: 8627: 2009-02-18 Todd C. Miller <Todd.Miller@courtesan.com> 8628: 8629: * glob.c: 8630: Add missing pair of braces introduced with character class support. 8631: [0e2afa2e03e9] 8632: 8633: 2009-02-15 Todd C. Miller <Todd.Miller@courtesan.com> 8634: 8635: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c: 8636: Rename pwstars to pwfeedback 8637: [a9f85a57ebac] 8638: 8639: 2009-02-11 Todd C. Miller <Todd.Miller@courtesan.com> 8640: 8641: * bsm_audit.c, bsm_audit.h: 8642: Add const to make MacOS happy. 8643: [4274432d6627] 8644: 8645: * Makefile.in, auth/sudo_auth.c, bsm_audit.c, bsm_audit.h, configure, 8646: configure.in, sudo.c: 8647: Add bsm audit support from Christian S.J. Peron 8648: [bef61cd8693d] 8649: 8650: * term.c: 8651: This is new code, no DARPA notice. 8652: [ec6ad09b9c23] 8653: 8654: 2009-02-10 Todd C. Miller <Todd.Miller@courtesan.com> 8655: 8656: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: 8657: Rename simple_glob -> fast_glob 8658: [68d9ed803cc1] 8659: 8660: * match.c: 8661: g/c unused var 8662: [693fa0464eb6] 8663: 8664: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: 8665: Add simple_glob option to use fnmatch() instead of glob(). This is 8666: useful when you need to specify patterns that reference network file 8667: systems. 8668: [77ba634f6949] 8669: 8670: * tgetpass.c: 8671: add term_* proto 8672: [520f5149d073] 8673: 8674: * sudoers.pod: 8675: mention glob() 8676: [ddaab8e03c52] 8677: 8678: 2009-02-09 Todd C. Miller <Todd.Miller@courtesan.com> 8679: 8680: * tgetpass.c: 8681: Delete any pwstars we wrote after the user hits return. That way 8682: there is no record on screen as to the user's password length. 8683: [fae25cda762b] 8684: 8685: 2009-02-08 Todd C. Miller <Todd.Miller@courtesan.com> 8686: 8687: * term.c: 8688: Move terminal setting bits from tgetpass.c to term.c 8689: [03d43325ee99] 8690: 8691: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod, 8692: tgetpass.c: 8693: Add pwstars sudoers option that causes sudo to print a star every 8694: time the user presses a key. 8695: [7aab417e184d] 8696: 8697: 2009-02-03 Todd C. Miller <Todd.Miller@courtesan.com> 8698: 8699: * Makefile.in: 8700: Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in. 8701: [64f70e879816] 8702: 8703: 2009-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 8704: 8705: * ldap.c: 8706: For ldap_search_ext_s() the sizelimit param should be 0, not -1, to 8707: indicate no limit. From Mark Janssen. 8708: [e2c5732d54f5] 8709: 8710: 2009-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 8711: 8712: * toke.c, toke.l: 8713: Comments that begin with #- should not be parsed as uids. 8714: [a72a50f12f41] 8715: 8716: 2009-01-09 Todd C. Miller <Todd.Miller@courtesan.com> 8717: 8718: * sudo.c: 8719: Do not try to set the close on exec flag if we didn't actually open 8720: sudoers. 8721: [ece3ca256904] 8722: 8723: 2008-12-19 Todd C. Miller <Todd.Miller@courtesan.com> 8724: 8725: * ChangeLog: 8726: regen 8727: [e11f0e4c1bdd] [SUDO_1_7_0] 8728: 8729: 2008-12-14 Todd C. Miller <Todd.Miller@courtesan.com> 8730: 8731: * TODO: 8732: sync 8733: [5b8954462bb3] 8734: 8735: 2008-12-09 Todd C. Miller <Todd.Miller@courtesan.com> 8736: 8737: * auth/pam.c: 8738: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user enters ^C at the 8739: password prompt. 8740: [8563601cb3de] 8741: 8742: * configure, configure.in: 8743: Don't try to build sudo_noexec.so on HP-UX with the bundled compiler 8744: as it cannot generate shared objects. 8745: [6d4262ef9669] 8746: 8747: * emul/charclass.h, glob.c, lbuf.c, tgetpass.c: 8748: K&R compilation fixes 8749: [77921678d17c] 8750: 8751: * parse.c: 8752: Use tq_foreach_fwd when checking pseudo-commands to make it clear 8753: that we are not short-circuiting on last match. When pwcheck is 8754: 'all', initialize nopass to TRUE and override it with the first non- 8755: TRUE entry. 8756: [96b209f4778f] 8757: 8758: 2008-12-08 Todd C. Miller <Todd.Miller@courtesan.com> 8759: 8760: * parse.c: 8761: Do not short circuit pseudo commands when we get a match since, 8762: depending on the settings, we may need to examine all commands for 8763: tags. 8764: [fdbaf89d6f35] 8765: 8766: 2008-12-03 Todd C. Miller <Todd.Miller@courtesan.com> 8767: 8768: * sudoers.cat, sudoers.man.in: 8769: regen 8770: [1ecce7c1b841] 8771: 8772: * sudoers.pod: 8773: hostnames may also contain wildcards 8774: [82b76695601c] 8775: 8776: * Makefile.in: 8777: remove stamp-* files and linux core files in clean target 8778: [22003f091467] 8779: 8780: 2008-12-02 Todd C. Miller <Todd.Miller@courtesan.com> 8781: 8782: * auth/sudo_auth.h, config.h.in, configure, configure.in: 8783: Use HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX 8784: [6905bede8410] 8785: 8786: 2008-11-26 Todd C. Miller <Todd.Miller@courtesan.com> 8787: 8788: * configure, configure.in: 8789: correctly enable SIA on Digital UNIX 8790: [a51881d13995] 8791: 8792: * TODO: 8793: checkpoint 8794: [af0fe8d94d42] 8795: 8796: * ChangeLog: 8797: sync 8798: [831f623cf99c] 8799: 8800: 2008-11-25 Todd C. Miller <Todd.Miller@courtesan.com> 8801: 8802: * check.c, sudo.h, tgetpass.c: 8803: Even if neither stdin nor stdout are ttys we may still have /dev/tty 8804: available to us. 8805: [20f306ba883b] 8806: 8807: 2008-11-24 Todd C. Miller <Todd.Miller@courtesan.com> 8808: 8809: * sudoers.cat, sudoers.man.in: 8810: regen 8811: [76d97c4c318f] 8812: 8813: * sudoers.pod: 8814: fix typos; Markus Lude 8815: [bff8bc1e2066] 8816: 8817: * ChangeLog: 8818: sync 8819: [f108552531cd] 8820: 8821: * toke.c: 8822: regen 8823: [de828413c67e] 8824: 8825: * toke.l: 8826: Fix matching of a line that only consists of a comment char 8827: [09c953d8d5ca] 8828: 8829: 2008-11-22 Todd C. Miller <Todd.Miller@courtesan.com> 8830: 8831: * auth/pam.c: 8832: MacOS pam will retry conversation function if it fails so just treat 8833: ^C as an empty password. 8834: [d056058930bc] 8835: 8836: * visudo.c: 8837: When checking for alias use, also check defaults bindings. 8838: [2647f82c7dbd] 8839: 8840: * redblack.c: 8841: unused var 8842: [b7ff71c17c18] 8843: 8844: * redblack.c: 8845: Replace my rbdelete with Emin's version (which actually works ;-) 8846: [21b133dd0c72] 8847: 8848: 2008-11-19 Todd C. Miller <Todd.Miller@courtesan.com> 8849: 8850: * testsudoers.c: 8851: malloc debugging 8852: [0fb446fa3279] 8853: 8854: * visudo.c: 8855: malloc options in devel mode for visudo too 8856: [98d06c6afeef] 8857: 8858: 2008-11-18 Todd C. Miller <Todd.Miller@courtesan.com> 8859: 8860: * sudo.c: 8861: fix compilation on non-C99; from Theo 8862: [7c304e16c536] 8863: 8864: * visudo.c: 8865: fix check_aliases 8866: [83f30a3b1765] 8867: 8868: * alias.c: 8869: when destroying an alias, free the correct data pointer 8870: [6e1a8bd86c01] 8871: 8872: * auth/sudo_auth.h: 8873: add proto for aixauth_cleanup; from Dale King 8874: [eba94ffc8f63] 8875: 8876: 2008-11-15 Todd C. Miller <Todd.Miller@courtesan.com> 8877: 8878: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 8879: visudo.man.in: 8880: regen 8881: [409fa57fff83] 8882: 8883: * sudo.pod, sudoers.pod, visudo.pod: 8884: standardize on the term 'option' for command line options (not flag) 8885: [228caefc2e36] 8886: 8887: 2008-11-14 Todd C. Miller <Todd.Miller@courtesan.com> 8888: 8889: * INSTALL: 8890: Add note on configuring HP-UX pam 8891: [f7674a581baf] 8892: 8893: 2008-11-11 Todd C. Miller <Todd.Miller@courtesan.com> 8894: 8895: * check.c, sudo.c: 8896: Move tty checks into check_user() so we only do them if we actually 8897: need a password. 8898: [7d997d7106d6] 8899: 8900: * sudo.c: 8901: Don't error out if no tty or askpass unless we actually need to 8902: authenticate. 8903: [9f23b83ed66c] 8904: 8905: 2008-11-10 Todd C. Miller <Todd.Miller@courtesan.com> 8906: 8907: * ChangeLog: 8908: regen 8909: [23f9aef32da6] 8910: 8911: * pathnames.h.in, sudo.c: 8912: s/overriden/overridden/; from Tobias Stoeckmann 8913: [9f7459a8fac5] 8914: 8915: 2008-11-09 Todd C. Miller <Todd.Miller@courtesan.com> 8916: 8917: * WHATSNEW, visudo.c: 8918: check sudoers owner and mode in strict mode 8919: [a3468c5ac1c4] 8920: 8921: * gram.c, toke.c: 8922: regen 8923: [7d6b515a5443] 8924: 8925: * sudo.man.in, sudoers.man.in, visudo.man.in: 8926: Update copyright years. 8927: [52d340cb8cba] 8928: 8929: * LICENSE, alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, 8930: auth/bsdauth.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, 8931: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h, 8932: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c, 8933: gettime.c, gram.y, ins_csops.h, insults.h, interfaces.c, 8934: interfaces.h, lbuf.c, license.pod, list.c, logging.c, logging.h, 8935: parse.c, parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c, 8936: sudo.c, sudo.pod, sudo_edit.c, sudo_nss.h, sudoers.pod, 8937: testsudoers.c, toke.l, tsgetgrpw.c, utimes.c, version.h, visudo.c, 8938: visudo.pod, zero_bytes.c: 8939: Update copyright years. 8940: [b4e6bf2beafa] 8941: 8942: * emul/charclass.h, fnmatch.c, glob.c: 8943: add my copyright 8944: [28681385014a] 8945: 8946: 2008-11-08 Todd C. Miller <Todd.Miller@courtesan.com> 8947: 8948: * toke.c, toke.l: 8949: The loop in fill_cmnd() was going one byte too far past the end, 8950: resulting in a NUL being written immediately after the buffer end. 8951: [a5a49d603cd7] 8952: 8953: * UPGRADE, WHATSNEW: 8954: add sections on tgetpass changes 8955: [2e6929b6a102] 8956: 8957: * tgetpass.c: 8958: Treat EOF w/o newline as an error. 8959: [aa02b1db9240] 8960: 8961: 2008-11-07 Todd C. Miller <Todd.Miller@courtesan.com> 8962: 8963: * parse.c: 8964: Fix "sudo -v" when NOPASSWD is set. 8965: [f4914711ea80] 8966: 8967: * auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c, 8968: auth/sudo_auth.h: 8969: No longer treat an empty password at the prompt as special. To quit 8970: out of sudo you now need to hit ^C at the password prompt. 8971: [980f760ad419] 8972: 8973: * sudoers.cat, sudoers.man.in: 8974: regen 8975: [6ca21a2cd869] 8976: 8977: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: 8978: Sudo will now refuse to run if no tty is present unless the new 8979: visiblepw sudoers flag is set. 8980: [0cc56943252e] 8981: 8982: 2008-11-06 Todd C. Miller <Todd.Miller@courtesan.com> 8983: 8984: * aix.c: 8985: just use RLIM_INFINITY for RLIM_SAVED_MAX if RLIM_SAVED_MAX not 8986: defined 8987: [24fc6f712d5c] 8988: 8989: * aix.c: 8990: fix fallback value for RLIM_SAVED_MAX 8991: [e09e04e1af89] 8992: 8993: * auth/aix_auth.c, auth/sudo_auth.h: 8994: Move clearing of AUTHSTATE into aixauth_cleanup. 8995: [e14ae7bd259c] 8996: 8997: * auth/aix_auth.c, env.c: 8998: Unset AUTHSTATE after calling authenticate() as it may not be 8999: correct for the user we are running the command as. 9000: [d14f68f1b0ab] 9001: 9002: * isblank.c: 9003: Add isblank() function for systems without it. Needed for POSIX 9004: character class matching in fnmatch.c and glob.c. 9005: [16cba30b283f] 9006: 9007: 2008-11-05 Todd C. Miller <Todd.Miller@courtesan.com> 9008: 9009: * TROUBLESHOOTING: 9010: expound on sudo and cd 9011: [8e0fa9033637] 9012: 9013: 2008-11-04 Todd C. Miller <Todd.Miller@courtesan.com> 9014: 9015: * ChangeLog: 9016: regen 9017: [40cf320a10fc] 9018: 9019: * sudoers.cat, sudoers.man.in: 9020: regen 9021: [7cac761ae2c6] 9022: 9023: * sudoers.pod: 9024: mention defauts parse order 9025: [4e2ce86d1394] 9026: 9027: 2008-11-03 Todd C. Miller <Todd.Miller@courtesan.com> 9028: 9029: * Makefile.in, aclocal.m4, compat.h, configure: 9030: Add isblank() function for systems without it. Needed for POSIX 9031: character class matching in fnmatch.c and glob.c. 9032: [a1ab55da8424] 9033: 9034: * Makefile.in: 9035: add emul/charclass.h to HDRS 9036: [7e8a019dcaa4] 9037: 9038: 2008-11-02 Todd C. Miller <Todd.Miller@courtesan.com> 9039: 9040: * TODO: 9041: checkpoint 9042: [afeb9bc1baed] 9043: 9044: * defaults.c, parse.c, testsudoers.c, visudo.c: 9045: Move update_defaults into defaults.c and call it properly from 9046: visudo and testsudoers. 9047: [f4dbb369461f] 9048: 9049: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c, tgetpass.c, 9050: tsgetgrpw.c: 9051: use zero_bytes() instead of memset() for consistency 9052: [4cee0465f4a8] 9053: 9054: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c, tgetpass.c, 9055: visudo.c: 9056: Zero out sigaction_t before use in case it has non-standard entries. 9057: [120092225459] 9058: 9059: * match.c: 9060: quiet gcc 9061: [098a1df49b23] 9062: 9063: * match.c: 9064: Short circuit glob() checks if basename(pattern) != 9065: basename(command). Refactor code that checks for a command in a 9066: directory and use it in the glob case if the resolved pattern ends 9067: in a '/'. 9068: [3c46fd317acb] 9069: 9070: 2008-11-01 Todd C. Miller <Todd.Miller@courtesan.com> 9071: 9072: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: 9073: Defer setting runas defaults until after runaspw/gr is setup. 9074: [12e75ee49c0c] 9075: 9076: 2008-10-29 Todd C. Miller <Todd.Miller@courtesan.com> 9077: 9078: * match.c, sudo.c, testsudoers.c: 9079: Use MAXHOSTNAMELEN+1 when allocating host/domain name since some 9080: systems do not include space for the NUL in the size. Also manually 9081: NUL-terminate buffer from gethostname() since POSIX is wishy-washy 9082: on this. 9083: [7266ab3296a3] 9084: 9085: 2008-10-26 Todd C. Miller <Todd.Miller@courtesan.com> 9086: 9087: * sudo.c, sudoers.pod: 9088: When setting the umask, use the union of the user's umask and the 9089: default value set in sudoers so that we never lower the user's umask 9090: when running a command. 9091: [4e804b004e38] 9092: 9093: * sudo.c: 9094: Don't try to read from a zero-length sudoers file. Remove the bogus 9095: Solaris work-around for EAGAIN. Since we now use fgetc() it should 9096: not be a problem. 9097: [bb8e5f68d944] 9098: 9099: 2008-10-25 Todd C. Miller <Todd.Miller@courtesan.com> 9100: 9101: * parse.c: 9102: In update_defaults() check the return value of user*_matches against 9103: ALLOW so we don't inadvertantly match on UNSPEC. 9104: [4e422fa1527e] 9105: 9106: 2008-10-24 Todd C. Miller <Todd.Miller@courtesan.com> 9107: 9108: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat, 9109: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in: 9110: regen man pages; no more hyphenation 9111: [15de4fe2fe01] 9112: 9113: * sudo.c: 9114: Don't error out on a zero-length sudoers file. With the advent of 9115: #include the user could create a situation where sudo is unusable. 9116: [6eb461319fa5] 9117: 9118: 2008-10-23 Todd C. Miller <Todd.Miller@courtesan.com> 9119: 9120: * auth/kerb5.c, config.h.in, configure, configure.in: 9121: Newer heimdal has 2-argument krb5_get_init_creds_opt_free() like MIT 9122: krb5. Really old heimdal has no krb5_get_init_creds_opt_alloc() at 9123: all. Add configure tests to handle all the cases. 9124: [4b554a98470d] 9125: 9126: 2008-10-08 Todd C. Miller <Todd.Miller@courtesan.com> 9127: 9128: * sudo.pod: 9129: resort ENVIRONMENT 9130: [f4f20f40653e] 9131: 9132: * sudoers.pod: 9133: document sudoers_locale 9134: [0bffd2dbe806] 9135: 9136: * sudo.pod, sudo_edit.c: 9137: add SUDO_EDITOR variable that sudoedit uses in preference to VISUAL 9138: or EDITOR 9139: [0ef8cb248cee] 9140: 9141: * toke.c, toke.l: 9142: In fill_cmnd(), collapse any escaped sudo-specific characters. 9143: Allows character classes to be used in pathnames. 9144: [5685244c8e44] 9145: 9146: 2008-10-03 Todd C. Miller <Todd.Miller@courtesan.com> 9147: 9148: * lbuf.c: 9149: fix typo in non-C89 function declaration 9150: [99a7113b3a05] 9151: 9152: * sudoers.pod: 9153: Mention POSIX characters classes now that out fnmatch() and glob() 9154: support them. 9155: [9c916f1230c3] 9156: 9157: * sample.sudoers, sudoers.pod: 9158: Replace [A-z] (which won't match in UTF8) with [A-Za-z] which is 9159: locale agnostic. 9160: [a60a62bec244] 9161: 9162: * parse.h: 9163: use __signed char if we are going to assign a negative value since 9164: on Power, char is unsigned by default 9165: [2877b319df17] 9166: 9167: * config.h.in, configure, configure.in: 9168: Add tests for __signed char and signed char. 9169: [5eb874fdf1d4] 9170: 9171: * aix.c: 9172: Fix AIX limit setting. getuserattr() returns values in disk blocks 9173: rather than bytes. The default hard stack size in newer AIX is 9174: RLIM_SAVED_MAX. From Dale King. 9175: [3db67415ecc3] 9176: 9177: 2008-09-26 Todd C. Miller <Todd.Miller@courtesan.com> 9178: 9179: * emul/charclass.h, fnmatch.c, glob.c: 9180: Add character class support to included glob(3) and fnmatch(3). 9181: [6b5b4ad77899] 9182: 9183: 2008-09-16 Todd C. Miller <Todd.Miller@courtesan.com> 9184: 9185: * emul/fnmatch.h: 9186: Remove UCB advertising clause and some compatibility defines. 9187: [2ade7bee74e1] 9188: 9189: 2008-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 9190: 9191: * sudo_edit.c: 9192: Check EDITOR/VISUAL to make sure sudoedit is not re-invoking itself 9193: or sudo. This allows one to set EDITOR to sudoedit without getting 9194: into an infinite loop of sudoedit running itself until the path gets 9195: too big. 9196: [aa49ab68f82d] 9197: 9198: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: 9199: Add sudoers_locale Defaults option to override the default sudoers 9200: locale of "C". 9201: [0639886a35bf] 9202: 9203: 2008-09-13 Todd C. Miller <Todd.Miller@courtesan.com> 9204: 9205: * sudo.c: 9206: Set locale to system default except for during sudoers parse. 9207: [016dd2736728] 9208: 9209: 2008-09-12 Todd C. Miller <Todd.Miller@courtesan.com> 9210: 9211: * match.c: 9212: Redo change in 1.34 to use pointer arithmetic. 9213: [f9e7b63bb450] 9214: 9215: 2008-09-11 Todd C. Miller <Todd.Miller@courtesan.com> 9216: 9217: * match.c: 9218: Fix a dereference (read) of a freed pointer. Reported by Patrick 9219: Williams. 9220: [69877b633753] 9221: 9222: 2008-08-23 Todd C. Miller <Todd.Miller@courtesan.com> 9223: 9224: * sudo.c: 9225: Set locale to "C" to avoid interpretation issues with character 9226: ranges in sudoers. May want to make the locale a sudoers option in 9227: the future. 9228: [098a95de1746] 9229: 9230: 2008-08-20 Todd C. Miller <Todd.Miller@courtesan.com> 9231: 9232: * config.h.in: 9233: we no longer use setproctitle 9234: [c7f20fb747ea] 9235: 9236: * sudo.h: 9237: remove #if 1 9238: [a368ee6816c6] 9239: 9240: * LICENSE, mkstemp.c: 9241: Use my replacement mkstemp() from the mktemp package. 9242: [d07c2beb0f9e] 9243: 9244: 2008-07-12 Todd C. Miller <Todd.Miller@courtesan.com> 9245: 9246: * gram.c: 9247: regen with yacc skeleton bug fixed 9248: [24784571cbb8] 9249: 9250: * sudoers.pod: 9251: Remove duplicate "as root". From Martin Toft. 9252: [97241acfee5e] 9253: 9254: 2008-07-02 Todd C. Miller <Todd.Miller@courtesan.com> 9255: 9256: * pwutil.c, sudo.c, sudo.h, testsudoers.c: 9257: Flesh out the fake passwd entry used for running commands as a uid 9258: not listed in the passwd database. Fixes an issue with some PAM 9259: modules. 9260: [a6648227f3f2] 9261: 9262: 2008-07-01 Todd C. Miller <Todd.Miller@courtesan.com> 9263: 9264: * sudo.c: 9265: Error out in -i mode if the user has no shell. This can happen when 9266: running commands as a uid with no password entry. 9267: [0c174bef36ff] 9268: 9269: 2008-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 9270: 9271: * toke.c, toke.l: 9272: Better fix for line continuation inside double quotes. Now accepts 9273: whitespace between the backslash and the newline like the main 9274: lexer. 9275: [64efcdf86d31] 9276: 9277: 2008-06-25 Todd C. Miller <Todd.Miller@courtesan.com> 9278: 9279: * toke.c, toke.l: 9280: Fix line continuation in strings. It was only being honored if 9281: preceded by whitespace. 9282: [96c21271a3e4] 9283: 9284: 2008-06-22 Todd C. Miller <Todd.Miller@courtesan.com> 9285: 9286: * config.h.in, configure, configure.in, logging.c: 9287: Replace the double fork with a fork + daemonize. 9288: [328505441e67] 9289: 9290: 2008-06-21 Todd C. Miller <Todd.Miller@courtesan.com> 9291: 9292: * env.c, sudo.c: 9293: The -i flag should imply env_reset. This got broken in sudo 1.6.9. 9294: [3caedfeaec87] 9295: 9296: * logging.c, sudo.c, sudo_edit.c, visudo.c: 9297: Change how the mailer is waited for. Instead of having a SIGCHLD 9298: handler, use the double fork trick to orphan the child that opens 9299: the pipe to sendmail. Fixes a problem running su on some Linux 9300: distros. 9301: [b59ce60a393d] 9302: 9303: 2008-06-20 Todd C. Miller <Todd.Miller@courtesan.com> 9304: 9305: * configure, configure.in: 9306: Fix configure test for dirfd() on Linux where DIR is opaque. 9307: [b8f729cdfecc] 9308: 9309: 2008-06-17 Todd C. Miller <Todd.Miller@courtesan.com> 9310: 9311: * tgetpass.c: 9312: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If QNX still has 9313: this problem we'll need to revisit this again. 9314: [c17fee8ad530] 9315: 9316: 2008-06-11 Todd C. Miller <Todd.Miller@courtesan.com> 9317: 9318: * logging.c: 9319: Ignore SIGPIPE instead of blocking it when piping to the mailer. If 9320: we only block the signal it may be delivered later when we unblock. 9321: Also, there is no need to block SIGCHLD since we no longer do the 9322: double fork. The normal SIGCHLD handler is sufficient. 9323: [e94a49e992e5] 9324: 9325: 2008-06-08 Todd C. Miller <Todd.Miller@courtesan.com> 9326: 9327: * configure, configure.in: 9328: Add description for NO_PAM_SESSION, from a redhat patch. 9329: [b9e4c939ec09] 9330: 9331: 2008-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 9332: 9333: * sudo.cat, sudo.man.in, sudo.pod: 9334: Fix typos in -i usage 9335: [2d7ce5de0235] 9336: 9337: 2008-05-18 Todd C. Miller <Todd.Miller@courtesan.com> 9338: 9339: * configure, configure.in: 9340: Redo the test for dgettext() in a way that hopefully will work 9341: around the libintl_dgettext() undefined problem. 9342: [d27beb0cf85e] 9343: 9344: 2008-05-11 Todd C. Miller <Todd.Miller@courtesan.com> 9345: 9346: * schema.ActiveDirectory: 9347: change filename in comment 9348: [733da4ee9ac5] 9349: 9350: 2008-05-10 Todd C. Miller <Todd.Miller@courtesan.com> 9351: 9352: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in, 9353: sudoers.ldap.pod: 9354: Reference schema.ActiveDirectory 9355: [d6aec537800e] 9356: 9357: 2008-05-09 Todd C. Miller <Todd.Miller@courtesan.com> 9358: 9359: * schema.OpenLDAP, schema.iPlanet: 9360: Mark sudoRunAs as deprecated. 9361: [00c50df807af] 9362: 9363: * schema.ActiveDirectory: 9364: add sudoRunAsUser and sudoRunAsGroup 9365: [19bcce6f72fb] 9366: 9367: * schema.ActiveDirectory: 9368: Active Directory schema by Chantal Paradis and Eric Paquet 9369: [06a09c92c6a5] 9370: 9371: 2008-05-08 Todd C. Miller <Todd.Miller@courtesan.com> 9372: 9373: * parse.c: 9374: remove an XXX that was fixed 9375: [b88038062fa2] 9376: 9377: * ChangeLog: 9378: sync 9379: [8fc27c17270e] 9380: 9381: * parse.c: 9382: Initialize tags to UNSPEC instead of def_* in "sudo -l" mode. This 9383: fixes a problem where the tag value printed was influenced by 9384: defaults set in the first pass through the parser. 9385: [588ccd630367] 9386: 9387: 2008-05-04 Todd C. Miller <Todd.Miller@courtesan.com> 9388: 9389: * Makefile.in, sudo.psf: 9390: No point in packaging the TODO file 9391: [9590248fffe1] 9392: 9393: * ChangeLog: 9394: sync 9395: [152acf4c6813] 9396: 9397: 2008-05-03 Todd C. Miller <Todd.Miller@courtesan.com> 9398: 9399: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c, 9400: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: 9401: Add env_file Defaults option that is similar to /etc/environment on 9402: some systems. 9403: [1daf53d51e18] 9404: 9405: 2008-05-02 Todd C. Miller <Todd.Miller@courtesan.com> 9406: 9407: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in, 9408: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.man.in, 9409: version.h, visudo.cat, visudo.man.in: 9410: change version to 1.7.0 9411: [d41d126b9bd8] 9412: 9413: * UPGRADE: 9414: initial valgrind pass done 9415: [c59c3876d8ca] 9416: 9417: 2008-04-23 Todd C. Miller <Todd.Miller@courtesan.com> 9418: 9419: * ldap.c: 9420: Fix typo/think in sudo_ldap_read_secret() when storing the secret. 9421: [830d246c09b0] 9422: 9423: 2008-04-11 Todd C. Miller <Todd.Miller@courtesan.com> 9424: 9425: * ldap.c: 9426: define LDAPS_PORT if the system headers do not 9427: [247b12325701] 9428: 9429: 2008-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 9430: 9431: * gram.c, gram.y: 9432: Fix another memory leak in init_parser(). 9433: [7bba47deba11] 9434: 9435: * configure, configure.in: 9436: There was a missing space before the ldap libs in SUDO_LIBS for some 9437: configurations. 9438: [7524cfc93759] 9439: 9440: * alias.c, gram.c, gram.y, toke.c, toke.l: 9441: Clean up some memory leaks pointed out by valgrind. 9442: [a965866ece1a] 9443: 9444: 2008-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 9445: 9446: * sudo.c: 9447: fix "sudo -s" broken by mode/flags breakout 9448: [acffe984d408] 9449: 9450: * configure, configure.in: 9451: remove duplicate check for dgettext 9452: [58145529133c] 9453: 9454: 2008-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 9455: 9456: * aix.c: 9457: Fall back to default stanza if no user-specific limit is found. 9458: [7b8cb29123ee] 9459: 9460: 2008-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 9461: 9462: * snprintf.c: 9463: include stdint.h if present 9464: [f0ec38529306] 9465: 9466: * snprintf.c: 9467: Use LLONG_MAX, not the old QUAD_MAX 9468: [01041ce508fb] 9469: 9470: 2008-04-01 Todd C. Miller <Todd.Miller@courtesan.com> 9471: 9472: * sudoers.ldap.pod: 9473: fix cut and pasto 9474: [34240fdef5ab] 9475: 9476: 2008-03-31 Todd C. Miller <Todd.Miller@courtesan.com> 9477: 9478: * pwutil.c: 9479: Add #ifdef PURITY 9480: [ce1b571ad526] 9481: 9482: 2008-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 9483: 9484: * auth/bsdauth.c: 9485: remove useless cast 9486: [494f8a862e1d] 9487: 9488: 2008-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 9489: 9490: * ChangeLog: 9491: sync 9492: [f5c97ffaabcc] 9493: 9494: * TODO: 9495: sync 9496: [96ff1c44c182] 9497: 9498: * sudo.h: 9499: Split MODE_* defines into primary and flags. 9500: [c02ee3027cb9] 9501: 9502: 2008-03-26 Todd C. Miller <Todd.Miller@courtesan.com> 9503: 9504: * aix.c: 9505: It turns out the logic for getting AIX limits is more convoluted 9506: than I realized and differs depending on whether the soft and/or 9507: hard limits are defined. 9508: [cf8d3f85d395] 9509: 9510: 2008-03-23 Todd C. Miller <Todd.Miller@courtesan.com> 9511: 9512: * Makefile.in, configure, configure.in: 9513: Back out AIX-specific change to set the sudo_noexec path to the .a 9514: file, we do really want to use the .so file. Since libtool doesn't 9515: do that correctly, just install the .so file ourselves in the 9516: Makefile. 9517: [05c6f33177d9] 9518: 9519: * install-sh: 9520: If the file given to install is a path, only use the basename of the 9521: file when building the destination path. 9522: [695ba4e429ce] 9523: 9524: 2008-03-18 Todd C. Miller <Todd.Miller@courtesan.com> 9525: 9526: * sudo.c: 9527: parse_args() cleanup: Sort command line options in the getopt() 9528: switch The -U option requires a parameter Normalize a few ISSET 9529: calls Split mode into mode and flags and retire the now-obsolete 9530: excl variable 9531: [0d156835f861] 9532: 9533: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod, 9534: sudo_usage.h.in: 9535: Add -n (non-interactive) flag. 9536: [e3e50400d32d] 9537: 9538: * sudo.c: 9539: Move version printing, etc. into a separate function. 9540: [18c91b476e2c] 9541: 9542: * sudo.c: 9543: Don't try to cleanup nsswitch if it has not been initialized. 9544: [aeb1ca1b399d] 9545: 9546: 2008-03-17 Todd C. Miller <Todd.Miller@courtesan.com> 9547: 9548: * logging.c: 9549: Block SIGPIPE in send_mail() so sudo is not killed by a problem 9550: executing the mailer. 9551: [f130e7924cca] 9552: 9553: 2008-03-14 Todd C. Miller <Todd.Miller@courtesan.com> 9554: 9555: * configure, configure.in: 9556: AIX shared libs end in .a, not .so. 9557: [a5deb07020d8] 9558: 9559: 2008-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 9560: 9561: * env.c: 9562: Preserve HOME by default too. Matches documentation and previous 9563: behavior. 9564: [c16f17f1047c] 9565: 9566: 2008-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 9567: 9568: * sudo.c: 9569: Use getopt() to parse the command line. We need to be able to 9570: intersperse env variables and options yet still honor "--"" which 9571: complicates things slightly. 9572: [60f271ce5c16] 9573: 9574: 2008-03-06 Todd C. Miller <Todd.Miller@courtesan.com> 9575: 9576: * ChangeLog: 9577: sync 9578: [685e67964eda] 9579: 9580: * acsite.m4, configure, ltmain.sh: 9581: update to libtool-1.5.26 9582: [4c9a8c3d3b40] 9583: 9584: * config.guess, config.sub: 9585: update from libtool-1.5.26 distribution 9586: [c6641aef2527] 9587: 9588: * aix.c, sudo.h: 9589: attempt to fix compilation errors on AIX 9590: [edb13e5b2184] 9591: 9592: * Makefile.in: 9593: fix typo in last commit 9594: [25ba7f7ceae4] 9595: 9596: * Makefile.in: 9597: Add WHATSNEW file to the distribution 9598: [213f4115de8f] 9599: 9600: * visudo.c: 9601: use warningx instead of fprintf(stderr, ...) 9602: [a3494b8ccb19] 9603: 9604: * list.c: 9605: add DEBUG to list2tq 9606: [115d24a3000c] 9607: 9608: * ChangeLog, TODO: 9609: sync 9610: [60e6f4d1fac0] 9611: 9612: * WHATSNEW: 9613: mention mailfrom 9614: [e2498f9e18d6] 9615: 9616: * Makefile.in, aix.c, config.h.in, configure, configure.in, 9617: set_perms.c, sudo.h: 9618: Add aix_setlimits() to set resource limits on AIX using a 9619: combination of getuserattr() and setrlimit(). Currently untested. 9620: [9b1441fd89ca] 9621: 9622: 2008-03-05 Todd C. Miller <Todd.Miller@courtesan.com> 9623: 9624: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat, 9625: sudoers.man.in, sudoers.pod: 9626: Add mailfrom Defaults option that sets the value of the From: field 9627: in the warning/error mail. If unset the login name of the invoking 9628: user is used. 9629: [029b9f05d3d9] 9630: 9631: * defaults.c: 9632: store a copy of _PATH_SUDO_ASKPASS in def_askpass that is freeable 9633: [a90e407d5e00] 9634: 9635: * gram.c, gram.y: 9636: When adding a default, only call list2tq() once to do the list to tq 9637: conversion. It is not legal to call list2tq multiple times on the 9638: same list since list2tq consumes and modifies the list argument. 9639: [fbc25d245c4a] 9640: 9641: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: 9642: comment out XXXs for now 9643: [595a1d43309d] 9644: 9645: * WHATSNEW: 9646: mention askpass 9647: [b993e0837c22] 9648: 9649: 2008-03-04 Todd C. Miller <Todd.Miller@courtesan.com> 9650: 9651: * sudo.c: 9652: Error out if both -A and -S are specified Error out if -A is 9653: specified but no askpass is configured 9654: [24f1df2638f6] 9655: 9656: * configure, configure.in: 9657: we are not going to ship a sudo-specific askpass 9658: [61949e7a3943] 9659: 9660: 2008-03-03 Todd C. Miller <Todd.Miller@courtesan.com> 9661: 9662: * sudo.h: 9663: fix definition of TGP_ASKPASS 9664: [0447c57ba4c3] 9665: 9666: * def_data.c, def_data.in: 9667: make askpass boolean-capable 9668: [e0885893a325] 9669: 9670: * INSTALL: 9671: document --with-askpass 9672: [c76e15ba97cf] 9673: 9674: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat, 9675: sudoers.man.in, visudo.cat: 9676: regen 9677: [8d16242980b7] 9678: 9679: 2008-03-02 Todd C. Miller <Todd.Miller@courtesan.com> 9680: 9681: * sudo.pod, sudo_usage.h.in, sudoers.pod: 9682: document -A and askpass 9683: [02c07505a78c] 9684: 9685: * auth/sudo_auth.c, check.c, configure, configure.in, def_data.c, 9686: def_data.h, def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h, 9687: sudo_usage.h.in, tgetpass.c: 9688: Add support for running a helper program to read the password when 9689: no tty is present (or when specified with the -A flag). TODO: docs. 9690: [05780f5f71fd] 9691: 9692: * def_data.c, def_data.in: 9693: add missing printf format to SELinux role and type strings 9694: [2b32774715e7] 9695: 9696: 2008-02-27 Todd C. Miller <Todd.Miller@courtesan.com> 9697: 9698: * INSTALL, configure, configure.in: 9699: Disable use of gss_krb5_ccache_name() by default and add 9700: --enable-gss-krb5-ccache-name configure option to enable it. It 9701: seems that gss_krb5_ccache_name() doesn't work properly with some 9702: combinations of Heimdal and OpenLDAP. 9703: [f61ebd3b19bd] 9704: 9705: 2008-02-22 Todd C. Miller <Todd.Miller@courtesan.com> 9706: 9707: * selinux.c: 9708: Ignore setexeccon() failing in permissive mode. Also add a call to 9709: setkeycreatecon() (though this is probably insufficient). From Dan 9710: Walsh. 9711: [52564fc1c069] 9712: 9713: * auth/pam.c: 9714: Only set std_prompt for the PAM_PROMPT_* cases. The conversation 9715: function may be called for non-password reading purposes so we must 9716: be careful not to use def_prompt in cases where it may not be set. 9717: [29d88ca575ba] 9718: 9719: 2008-02-20 Todd C. Miller <Todd.Miller@courtesan.com> 9720: 9721: * selinux.c: 9722: Don't free the new tty context, we need to keep it around when we 9723: restore the tty context after the command completes 9724: [5b4bd39b6ea8] 9725: 9726: 2008-02-19 Todd C. Miller <Todd.Miller@courtesan.com> 9727: 9728: * selinux.c: 9729: s/newrole/sudo/ 9730: [21b8a96ff8df] 9731: 9732: * sudo.man.pl, sudo.pod: 9733: Only put login_cap(3) in SEE ALSO section if we have login.conf 9734: support 9735: [05250ddff2c0] 9736: 9737: 2008-02-18 Todd C. Miller <Todd.Miller@courtesan.com> 9738: 9739: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat, 9740: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in: 9741: regen 9742: [301e5c5ccdbe] 9743: 9744: * sudoers.pod: 9745: Substitute in comment characters for lines partaining to login.conf, 9746: BSD auth and SELinux and only enable them if pertinent. 9747: [c1c98fa163ce] 9748: 9749: * sudoers.man.pl: 9750: Substitute in comment characters for lines partaining to login.conf, 9751: BSD auth and SELinux and only enable them if pertinent. 9752: [6c88f30b878a] 9753: 9754: * sudo.pod: 9755: Substitute in comment characters for lines partaining to login.conf, 9756: BSD auth and SELinux and only enable them if pertinent. 9757: [acdbdfd24e1d] 9758: 9759: * sudo.man.pl: 9760: Substitute in comment characters for lines partaining to login.conf, 9761: BSD auth and SELinux and only enable them if pertinent. 9762: [0c56d4750ac3] 9763: 9764: * Makefile.in, configure, configure.in: 9765: Substitute in comment characters for lines partaining to login.conf, 9766: BSD auth and SELinux and only enable them if pertinent. 9767: [9a02bd6a6658] 9768: 9769: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod: 9770: Remove the =cut on the first line (above the copyright notice) to 9771: quiet pod2man. Also remove the hackery in the FILES section and 9772: just deal with the fact that there will a newline between each 9773: pathname. 9774: [2ac1ab191835] 9775: 9776: 2008-02-17 Todd C. Miller <Todd.Miller@courtesan.com> 9777: 9778: * Makefile.in: 9779: run sudo.man.pl when generating sudo.man.in 9780: [859727369168] 9781: 9782: * configure, configure.in, sudo.man.pl: 9783: comment out SELinux manual bits unless --with-selinux was specified 9784: [97ff4212b649] 9785: 9786: * sudoers.pod: 9787: document role and type defaults for SELinux 9788: [870f303366b3] 9789: 9790: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in: 9791: Document "sudo -ll" and make "sudo -l -l" be equivalent. 9792: [3ce6dc429ea3] 9793: 9794: 2008-02-15 Todd C. Miller <Todd.Miller@courtesan.com> 9795: 9796: * configure, configure.in: 9797: Treat k*bsd*-gnu like Linux, not BSD. Fixes compilation problems on 9798: Debian GNU/kFreeBSD. 9799: [c4efa567a328] 9800: 9801: 2008-02-13 Todd C. Miller <Todd.Miller@courtesan.com> 9802: 9803: * auth/kerb5.c: 9804: Avoid Heimdal'isms introduced in the rev 1.32 rewrite of 9805: verify_krb_v5_tgt() 9806: [f80538e5a6fa] 9807: 9808: * logging.c, logging.h, sudo.c: 9809: Remove dependence on VALIDATE_NOT_OK in logging functions. Split 9810: log_auth() into log_allowed() and log_denial() Replace mail_auth() 9811: with should_mail() and a call to send_mail() 9812: [58aac9997557] 9813: 9814: 2008-02-10 Todd C. Miller <Todd.Miller@courtesan.com> 9815: 9816: * ldap.c: 9817: Add debugging so we can tell if the krb5 ccache is accessible 9818: [c679322527bb] 9819: 9820: * INSTALL: 9821: mention --with-selinux 9822: [9efbe0b52194] 9823: 9824: 2008-02-09 Todd C. Miller <Todd.Miller@courtesan.com> 9825: 9826: * configure: 9827: regen 9828: [467a834f867c] 9829: 9830: * selinux.c: 9831: add Sudo tag 9832: [d004ee669bed] 9833: 9834: * sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod, sudo_usage.h.in, 9835: sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod, 9836: testsudoers.c, toke.c, toke.l: 9837: Add support for SELinux RBAC. Sudoers entries may specify a role 9838: and type. There are also role and type defaults that may be used. 9839: To make sure a transition occurs, when using RBAC commands are 9840: executed via the new sesh binary. Based on initial changes from Dan 9841: Walsh. 9842: [1d4abfe2c004] 9843: 9844: * sesh.c: 9845: Add support for SELinux RBAC. Sudoers entries may specify a role 9846: and type. There are also role and type defaults that may be used. 9847: To make sure a transition occurs, when using RBAC commands are 9848: executed via the new sesh binary. Based on initial changes from Dan 9849: Walsh. 9850: [1e3b395ce049] 9851: 9852: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h, 9853: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h, 9854: pathnames.h.in, selinux.c: 9855: Add support for SELinux RBAC. Sudoers entries may specify a role 9856: and type. There are also role and type defaults that may be used. 9857: To make sure a transition occurs, when using RBAC commands are 9858: executed via the new sesh binary. Based on initial changes from Dan 9859: Walsh. 9860: [6b421948286e] 9861: 9862: 2008-02-08 Todd C. Miller <Todd.Miller@courtesan.com> 9863: 9864: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: 9865: Add long list (sudo -ll) support for printing verbose LDAP and 9866: sudoers file entries. Still need to update manual. 9867: [2875be37935c] 9868: 9869: 2008-02-03 Todd C. Miller <Todd.Miller@courtesan.com> 9870: 9871: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: 9872: Unify the -l output for file and ldap based sudoers and use lbufs 9873: for both. The ldap output does not currently include options that 9874: cannot be represented as tags. This will be remedied in a long list 9875: output mode to come. 9876: [b2e429456596] 9877: 9878: 2008-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 9879: 9880: * set_perms.c: 9881: Use a specific error message for errno == EAGAIN when setuid() et al 9882: fails. On Linux systems setuid() will fail with errno set to EAGAIN 9883: if changing to the new uid would result in a resource limit 9884: violation. 9885: [08d0aecd9f03] 9886: 9887: * sudo.c: 9888: Unlimit nproc on Linux systems where calling the setuid() family of 9889: syscalls causes the nroc resource limit to be checked. The limits 9890: will be reset by pam_limits.so when PAM is used. In the non-PAM 9891: case the nproc limit will remain unlimited but there doesn't seem to 9892: be a way around that other than having sudo parse 9893: /etc/security/limits.conf directly. 9894: [df024b415a8d] 9895: 9896: * env.c, sudo.c, sudo.pod: 9897: Only read /etc/environment on Linux and AIX 9898: [90669e2aefdb] 9899: 9900: 2008-01-23 Todd C. Miller <Todd.Miller@courtesan.com> 9901: 9902: * configure, configure.in: 9903: Use SUDO_DEFINE_UNQUOTED instead of AC_DEFINE_UNQUOTED to prevent 9904: ldap.conf and ldap.secret paths from going into config.h. Avoid 9905: single quotes in variable expansion when using SUDO_DEFINE_UNQUOTED 9906: since in some versions of bash they will end up literally in the 9907: resulting define. 9908: [25390f3ef10a] 9909: 9910: 2008-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 9911: 9912: * README.LDAP: 9913: mention --with-nsswitch=no 9914: [c509df927263] 9915: 9916: * configure, configure.in: 9917: ldap_ssl.h depends on ldap.h being included first 9918: [d96d90e9b21f] 9919: 9920: * config.h.in, configure, configure.in, ldap.c: 9921: Include ldap_ssl.h if we can find it. Needed for the 9922: ldapssl_set_strength defines on HP-UX at least. 9923: [9e530470948a] 9924: 9925: * sudoers.ldap.pod: 9926: sync 9927: [b9d101f4673a] 9928: 9929: * TODO: 9930: sync 9931: [2ce951b2ecd0] 9932: 9933: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat, 9934: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in: 9935: regen 9936: [b61d793987e0] 9937: 9938: * Makefile.in: 9939: Use 78n line length when formatting cat pages. 9940: [761bee9d5759] 9941: 9942: * README.LDAP: 9943: Remove redundant info that is now in sudoers.ldap.pod 9944: [01828dcce59e] 9945: 9946: 2008-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 9947: 9948: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: 9949: Reorganize the first section a bit. Substitute the proper path for 9950: /etc/sudoers. 9951: [11ae165e065d] 9952: 9953: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: 9954: Substitute values for ldap.conf, ldap.secret and nsswitch.conf Move 9955: schema into EXAMPLES 9956: [ab6509d1dde7] 9957: 9958: * configure, configure.in: 9959: Substitute values for ldap.conf, ldap.secret and nsswitch.conf into 9960: sudoers.ldap.man. 9961: [6e689972f465] 9962: 9963: * configure, configure.in: 9964: substitute for sudoers.ldap.man 9965: [5a4a25766dee] 9966: 9967: * Makefile.in: 9968: Fix cut & pasto introduced when adding sudoers.ldap man page. 9969: [a7b069af8894] 9970: 9971: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: 9972: Fill in some of the missing pieces. Still needs some reorganization 9973: and editing. 9974: [5e7331722166] 9975: 9976: 2008-01-19 Todd C. Miller <Todd.Miller@courtesan.com> 9977: 9978: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in, 9979: sudoers.ldap.pod: 9980: Beginnings of a sudoers.ldap man page. Currently, much of the 9981: information is adapted from README.LDAP. 9982: [aad28c8a922d] 9983: 9984: 2008-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 9985: 9986: * pwutil.c: 9987: When copying gr_mem we must guarantee that the storage space for 9988: gr_mem is properly aligned. The simplest way to do this is to 9989: simply store gr_mem directly after struct group. This is not a 9990: problem for gr_passwd or gr_name as they are simple strings. 9991: [af58fc76f1ed] 9992: 9993: * ldap.c: 9994: Fix a typo/thinko in one of the calls to 9995: sudo_ldap_check_user_netgroup(). From Marco van Wieringen. 9996: [70b2eb8097f5] 9997: 9998: 2008-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 9999: 10000: * config.h.in, configure, configure.in, ldap.c: 10001: include <mps/ldap_ssl.h> in ldap.c if available 10002: [34346206ef16] 10003: 10004: 2008-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 10005: 10006: * gram.c, gram.y: 10007: Make sure we define SIZE_MAX for yacc's skeleton.c 10008: [d8a45c7a3c42] 10009: 10010: * tgetpass.c: 10011: Use TCSAFLUSH when restoring terminal settings (and echo) to 10012: guarantee that any pending output is discarded 10013: [549a184479e5] 10014: 10015: 2008-01-15 Todd C. Miller <Todd.Miller@courtesan.com> 10016: 10017: * sudoers: 10018: no longer need to specify SETENV when user has sudo ALL 10019: [3051b41f8032] 10020: 10021: * testsudoers.c: 10022: sync user_args size calculation with sudo.c Add -g group option, 10023: renaming old -g to -G Add set_runasgr() and set_runaspw() and use 10024: them 10025: [0850325180f0] 10026: 10027: * sudo.c, sudo.h: 10028: Make set_runaspw static void 10029: [5d44d7a340ce] 10030: 10031: * testsudoers.c, visudo.c: 10032: g/c set_runaspw stub 10033: [79ebb5e2cc38] 10034: 10035: * configure, configure.in: 10036: Don't add -llber twice. 10037: [4356d302eef4] 10038: 10039: 2008-01-14 Todd C. Miller <Todd.Miller@courtesan.com> 10040: 10041: * ldap.c: 10042: fix typo 10043: [249cecc557e9] 10044: 10045: 2008-01-13 Todd C. Miller <Todd.Miller@courtesan.com> 10046: 10047: * gram.c: 10048: regen 10049: [2f94ea375b67] 10050: 10051: * configure, configure.in: 10052: Fix check that determines whether -llber is required. 10053: [6afa99523379] 10054: 10055: * README.LDAP, config.h.in, configure, configure.in, ldap.c: 10056: For netscape-based LDAP, use ldapssl_set_strength() to implement the 10057: checkpeer ldap.conf option. 10058: [16ae24d73795] 10059: 10060: * auth/kerb5.c: 10061: Delay krb5_cc_initialize() until we actually need to use the cred 10062: cache, which is what krb5_verify_user() does. Better cleanup on 10063: failure. 10064: [d12e5f1695b8] 10065: 10066: 2008-01-12 Todd C. Miller <Todd.Miller@courtesan.com> 10067: 10068: * auth/kerb5.c: 10069: Rewrite verify_krb_v5_tgt() based on what heimdal's 10070: krb5_verify_user() does. 10071: [05b5815f86c9] 10072: 10073: 2008-01-09 Todd C. Miller <Todd.Miller@courtesan.com> 10074: 10075: * gram.c: 10076: The U suffix on constants is an ANSI feature 10077: [c6dfce3167f1] 10078: 10079: * configure, configure.in: 10080: Add check for ber_set_option() in -llber 10081: [43d0c0566074] 10082: 10083: 2008-01-07 Todd C. Miller <Todd.Miller@courtesan.com> 10084: 10085: * README.LDAP: 10086: default if no nsswitch.conf is files only 10087: [c13001d9c998] 10088: 10089: 2008-01-06 Todd C. Miller <Todd.Miller@courtesan.com> 10090: 10091: * README.LDAP: 10092: don't tell people to mail aaron about LDAP stuff 10093: [8165ec1ef0c6] 10094: 10095: * README.LDAP: 10096: timelimit and bind_timelimit 10097: [44f74cbed167] 10098: 10099: * ChangeLog: 10100: sync 10101: [aba1a0ab02bd] 10102: 10103: * ldap.c: 10104: Move ldap.secret reading into a separate function. 10105: [1948acc9f7a4] 10106: 10107: * check.c: 10108: user_runas -> runas_pw 10109: [334490fc2bae] 10110: 10111: 2008-01-05 Todd C. Miller <Todd.Miller@courtesan.com> 10112: 10113: * TODO: 10114: sync 10115: [c7b165cc47c6] 10116: 10117: * check.c, sudo.pod, sudoers.pod: 10118: Add and document the %p escape in the password prompt. Based on a 10119: patch from Patrick Schoenfeld. 10120: [3972d4f31ffa] 10121: 10122: * ldap.c: 10123: Check strlcpy() return values. 10124: [9b42f3ae8ff1] 10125: 10126: * ldap.c: 10127: refactor ldap binding code into sudo_ldap_bind_s() 10128: [cb0c66a4d955] 10129: 10130: * README.LDAP: 10131: Make it clear that host and uri can take multiple parameters. URI is 10132: now supported for more than just openldap nsswitch.conf does't 10133: accept "compat" 10134: [f610dea656d6] 10135: 10136: * sudo.c: 10137: comment cleanup and update (c) year 10138: [6cd69c810ca5] 10139: 10140: * parse.c, sudo_nss.c: 10141: Move display_privs() and display_cmnd() from parse.c to sudo_nss.c. 10142: This should make it possible to build an LDAP-only sudo binary. 10143: [61c3f27066a0] 10144: 10145: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: 10146: Improve chaining of multiple sudoers sources by passing in the 10147: previous return value to the next in the chain 10148: [2c0b722b1b2d] 10149: 10150: * gram.y: 10151: Free up parser data structures in sudo_file_close(). 10152: [2251531d4519] 10153: 10154: * gram.c, parse.c: 10155: Free up parser data structures in sudo_file_close(). 10156: [8371f130f401] 10157: 10158: * ldap.c: 10159: Parse uri ourself if no ldap_initialize() is present Use 10160: ldap_create() instead of deprecated ldap_init() Use 10161: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s() 10162: [85d3825b1953] 10163: 10164: * config.h.in, configure, configure.in: 10165: Add check for ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from 10166: CFLAGS 10167: [240524512bc5] 10168: 10169: 2008-01-04 Todd C. Miller <Todd.Miller@courtesan.com> 10170: 10171: * config.h.in, configure, configure.in: 10172: add check for ldap_create 10173: [3089badd73b8] 10174: 10175: 2008-01-03 Todd C. Miller <Todd.Miller@courtesan.com> 10176: 10177: * config.h.in, configure, configure.in, ldap.c: 10178: Add sudo_ldap_get_first_rdn() to return the first rdn of an entry's 10179: dn using the mechanism appropriate for the LDAP SDK in use. Use 10180: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s(). Emulate 10181: ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's without them. 10182: [6deeca3d00cc] 10183: 10184: * lbuf.c: 10185: include unistd.h 10186: [8419ed0bae7f] 10187: 10188: * config.h.in, configure.in: 10189: fix typo in mtim_getnsec 10190: [2d5f21230a60] 10191: 10192: 2008-01-02 Todd C. Miller <Todd.Miller@courtesan.com> 10193: 10194: * config.h.in, configure, configure.in: 10195: add check for st__tim in struct stat as used by SCO 10196: [587060ea2a89] 10197: 10198: * ldap.c: 10199: use ldap_search_ext_s instead of deprecated ldap_search_s 10200: [5fc44fe3b44c] 10201: 10202: * Makefile.in, TODO, sudo.cat, sudo.man.in: 10203: add sudo_nss.h to HDRS 10204: [86f01a70ff29] 10205: 10206: * ldap.c: 10207: Replace deprecated ldap_explode_dn() with calls to ldap_str2dn() and 10208: ldap_rdn2str(). 10209: [aa217002cfae] 10210: 10211: 2008-01-01 Todd C. Miller <Todd.Miller@courtesan.com> 10212: 10213: * ldap.c: 10214: Use ldap_get_values_len()/ldap_value_free_len() instead of the 10215: deprecated ldap_get_values()/ldap_value_free(). 10216: [e22dceb85e57] 10217: 10218: * ChangeLog: 10219: sync 10220: [adad27b36107] 10221: 10222: * TODO: 10223: sync 10224: [c449eb47e0ef] 10225: 10226: * gettime.c, sudo.c: 10227: Remove some already fixed XXXs 10228: [532788d0e6da] 10229: 10230: * ldap.c: 10231: Same return value as non-existent sudoers if LDAP was unable to 10232: connect. 10233: [5819810e8e4e] 10234: 10235: * sudo.pod: 10236: mention /etc/environment 10237: [ea8e6102f853] 10238: 10239: * README.LDAP, UPGRADE, WHATSNEW: 10240: Update to reflect recent developments. 10241: [ed1fb026fe77] 10242: 10243: * sudo.c: 10244: Print nsswitch.conf, ldap.conf and ldap.secret paths in -V output. 10245: [55b68a58260d] 10246: 10247: * ldap.c: 10248: When building up a query don't list groups in the aux group vector 10249: that are the same as the passwd file group. On most systems the 10250: first gid in the group vector is the same as the passwd entry gid. 10251: [4bb51e297e0d] 10252: 10253: * env.c, ldap.c: 10254: Define LDAPNOINIT before calling ldap_init(), etc. to disable user 10255: ldaprc and system defaults that could affect how LDAP works. 10256: [ce5036440db2] 10257: 10258: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c, 10259: sudo_nss.c, sudo_nss.h: 10260: Rename read_nss -> sudo_read_nss Add --with-nsswitch to allow users 10261: to specify nsswitch.conf path or disable it. If --with-nsswitch=no 10262: but --with-ldap, order is LDAP, then sudoers. Fix --with-ldap-conf- 10263: file and --with-ldap-secret-file 10264: [ea5d7704381f] 10265: 10266: * parse.c: 10267: Honor def_ignore_local_sudoers 10268: [f38e1121fae1] 10269: 10270: 2007-12-31 Todd C. Miller <Todd.Miller@courtesan.com> 10271: 10272: * ldap.c: 10273: no longer need to check def_ignore_local_sudoers here 10274: [fce2a72f96fb] 10275: 10276: * parse.c: 10277: Refactor group vector resetting into a function and also call it 10278: from display_cmnd. Stop after the first sucessful match in 10279: display_cmnd. Print a newline between each display_privs method. 10280: [981b37b5adff] 10281: 10282: * parse.c: 10283: fix double free introduced in rev 1.218 10284: [c574b02d8747] 10285: 10286: * ldap.c: 10287: belt and suspenders; zero out result after freeing it 10288: [7732988d4620] 10289: 10290: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: 10291: Refactor line reading into a separate function, sudo_parseln(), 10292: which removes comments, leading/trailing whitespace and newlines. 10293: May want to rethink the use of sudo_parseln() for /etc/ldap.secret 10294: [61d9068f0645] 10295: 10296: * parse.c, sudo.c: 10297: Make the inability to read the sudoers file a non-fatal error if 10298: there are other sudoers sources available. sudoers_file_lookup now 10299: returns "not OK" if sudoers was not present 10300: [643babf597a8] 10301: 10302: * ldap.c: 10303: make it clear that the global options are from LDAP 10304: [9ff950349463] 10305: 10306: * logging.c: 10307: allocate proper amount of space for error string 10308: [8bebb7d46d19] 10309: 10310: * sudo_nss.c, sudo_nss.h: 10311: actual sudo nss code 10312: [5bd7d52d7738] 10313: 10314: * ldap.c, parse.c, sudo.c, sudo.h: 10315: nss-ify display_privs and display_cmnd. 10316: [cccfdd3253f2] 10317: 10318: * defaults.c, parse.c, testsudoers.c, visudo.c: 10319: move update_defaults() to parse.c 10320: [ace144b958a9] 10321: 10322: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h: 10323: Use nsswitch to hide some sudoers vs. ldap implementation details 10324: and reduce the number of #ifdef LDAP TODO: fix display routines and 10325: error handling 10326: [6225edde89a6] 10327: 10328: 2007-12-28 Todd C. Miller <Todd.Miller@courtesan.com> 10329: 10330: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h: 10331: First cut at nsswitch.conf support. Further reorganizaton and 10332: related changes are forthcoming. 10333: [717f59d0790b] 10334: 10335: 2007-12-21 Todd C. Miller <Todd.Miller@courtesan.com> 10336: 10337: * env.c, pathnames.h.in, sudo.c, sudo.h: 10338: Add support for reading and /etc/environment file. Still needs to 10339: be documented and should probably only applies to OSes that have it 10340: (AIX and Linux, maybe others). 10341: [15d3edae27e4] 10342: 10343: * ldap.c: 10344: include limits.h 10345: [e19875ef0f82] 10346: 10347: 2007-12-20 Todd C. Miller <Todd.Miller@courtesan.com> 10348: 10349: * WHATSNEW: 10350: reword LDAP SASL 10351: [7ec3c4ec31b5] 10352: 10353: 2007-12-19 Todd C. Miller <Todd.Miller@courtesan.com> 10354: 10355: * TODO: 10356: sync 10357: [87c5a7aea7bf] 10358: 10359: * README.LDAP: 10360: Add an example sudoRole, clarify netscape vs. openldap a bit more 10361: [6f96c0ca8107] 10362: 10363: * README.LDAP: 10364: Be clear on what is OpenLDAP vs. Netscape-derived 10365: [a33c8314dec5] 10366: 10367: * config.h.in, configure, configure.in, ldap.c: 10368: Use ldapssl_init() for ldaps support instead of trying to do it 10369: manually with ldap_init() + ldapssl_install_routines(). Use tls_cert 10370: and tls_key for cert7.db and key3.db respectively. Don't print 10371: debugging info for options that are not set. Add warning if 10372: start_tls specified when not supported. 10373: [abb62dc7e4a3] 10374: 10375: * ldap.c: 10376: fix compilation on solaris 10377: [03d449684e80] 10378: 10379: * Makefile.in: 10380: add missing .h and .c files for missing lib objs 10381: [8b37825bdfc7] 10382: 10383: 2007-12-18 Todd C. Miller <Todd.Miller@courtesan.com> 10384: 10385: * ldap.c: 10386: fix LDAP_OPT_NETWORK_TIMEOUT setting 10387: [226eba89c0ad] 10388: 10389: * ldap.c: 10390: fix compilation on Solaris 10391: [917d47639eb6] 10392: 10393: 2007-12-17 Todd C. Miller <Todd.Miller@courtesan.com> 10394: 10395: * configure, configure.in: 10396: fix typo 10397: [009d5c81b225] 10398: 10399: * README.LDAP: 10400: try to clear up which variables are for OpenLDAP and which are for 10401: netscape-derived SDKs 10402: [f8d9823ee73c] 10403: 10404: * config.h.in, configure, configure.in, ldap.c: 10405: Add support for "ssl on" in both netscape and openldap flavors. Only 10406: the OpenLDAP flavor has been tested. 10407: [952745829ec5] 10408: 10409: * logging.c, sudo.c, sudo.h: 10410: Call cleanup() before exit in log_error() instead of calling 10411: sudo_ldap_close() directly. ldap_conn can now be static to sudo.c 10412: [da02d1b67a2c] 10413: 10414: * sudo.c: 10415: ld -> ldap_conn 10416: [01afa6d927cc] 10417: 10418: 2007-12-16 Todd C. Miller <Todd.Miller@courtesan.com> 10419: 10420: * logging.c, sudo.c, sudo.h: 10421: Better ldap cleanup. 10422: [25b9abe2d617] 10423: 10424: * ldap.c: 10425: Distinguish between LDAP conf settings that are connection-specific 10426: (which take an ld pointer) and those that are default settings 10427: (which do not). 10428: [d48dc6c9c3b4] 10429: 10430: 2007-12-14 Todd C. Miller <Todd.Miller@courtesan.com> 10431: 10432: * ldap.c: 10433: Improved warnings on error. 10434: [c8dce7b4feb4] 10435: 10436: * ldap.c: 10437: Make ldap config table driven and set the config *after* we open the 10438: connection. 10439: [d9698b5a2681] 10440: 10441: 2007-12-13 Todd C. Miller <Todd.Miller@courtesan.com> 10442: 10443: * ldap.c: 10444: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define 10445: [598c6df06660] 10446: 10447: * configure, configure.in: 10448: some operating systems need to link with -lkrb5support when using 10449: krb5 10450: [8896365dde9e] 10451: 10452: 2007-12-10 Todd C. Miller <Todd.Miller@courtesan.com> 10453: 10454: * WHATSNEW: 10455: minor update 10456: [acfeeb7f4886] 10457: 10458: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: 10459: regen 10460: [a3c6699674f9] 10461: 10462: 2007-12-08 Todd C. Miller <Todd.Miller@courtesan.com> 10463: 10464: * ChangeLog, TODO: 10465: sync 10466: [138e99b925ee] 10467: 10468: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: 10469: add -g support for LDAP 10470: [8fc27dbe9287] 10471: 10472: 2007-12-03 Todd C. Miller <Todd.Miller@courtesan.com> 10473: 10474: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: 10475: The -i and -s flags can now take an optional command. 10476: [6afec104ee77] 10477: 10478: 2007-12-02 Todd C. Miller <Todd.Miller@courtesan.com> 10479: 10480: * auth/pam.c, def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod, 10481: sudoers.pod: 10482: Add passprompt_override flag to sudoers that will cause the prompt 10483: to be overridden in all cases. This flag is also set when the user 10484: specifies the -p flag. 10485: [e4c5402131a6] 10486: 10487: * sudo.c: 10488: Move setting of login class until after sudoers has been parsed. Set 10489: NewArgv[0] for -i after runas_pw has been set. 10490: [62a48c8c56fa] 10491: 10492: * configure, configure.in: 10493: Move the dgettext check. 10494: [5fd8a4712d1c] 10495: 10496: 2007-12-01 Todd C. Miller <Todd.Miller@courtesan.com> 10497: 10498: * auth/pam.c, config.h.in, configure, configure.in: 10499: Add basic support for looking up the string "Password: " in the PAM 10500: localized text db. This allows us to determine whether the PAM 10501: prompt is the default "Password: " one even if it has been 10502: localized. 10503: 10504: TODO: concatenate non-std PAM prompts and user-specified sudo 10505: prompts. 10506: [81c25a415d41] 10507: 10508: 2007-11-27 Todd C. Miller <Todd.Miller@courtesan.com> 10509: 10510: * Makefile.in, config.h.in, configure, configure.in, parse.c, 10511: set_perms.c, sudo.c, sudo.h: 10512: Use AC_FUNC_GETGROUPS instead of a home-grown attempt that was 10513: insufficient. 10514: [1cce6ec1a91e] 10515: 10516: * acsite.m4, configure, interfaces.c, memrchr.c: 10517: Fix typos; Martynas Venckus 10518: [be1233cca11a] 10519: 10520: 2007-11-26 Todd C. Miller <Todd.Miller@courtesan.com> 10521: 10522: * set_perms.c: 10523: Don't assume runas_pw is set; it may not be in the -g case. 10524: [aa11bd2193ac] 10525: 10526: 2007-11-25 Todd C. Miller <Todd.Miller@courtesan.com> 10527: 10528: * logging.c, set_perms.c: 10529: Set aux group vector for PERM_RUNAS and restore group vector for 10530: PERM_ROOT if we previously changed it. Stash the runas group vector 10531: so we don't have to call initgroups more than once. Also add no-op 10532: check to check_perms. 10533: [53837fc755f7] 10534: 10535: 2007-11-21 Todd C. Miller <Todd.Miller@courtesan.com> 10536: 10537: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h, gram.y, 10538: ldap.c, logging.c, match.c, mon_systrace.c, parse.c, parse.h, 10539: pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, 10540: sudo.pod, sudo_usage.h.in, sudoers.cat, sudoers.man.in, sudoers.pod, 10541: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: 10542: Add support for runas groups. This allows the user to run a command 10543: with a different effective group. If the -g option is specified 10544: without -u the command will be run as the current user (only the 10545: group will change). the -g and -u options may be used together. 10546: TODO: implement runas group for ldap improve runas group 10547: documentation add testsudoers support 10548: [9019309df6d0] 10549: 10550: * configure, configure.in: 10551: fix setting of mandir 10552: [2c60f269399f] 10553: 10554: * sudo.pod, sudoers.pod: 10555: document that ALL implies SETENV 10556: [bcc8e5b703b9] 10557: 10558: * ldap.c: 10559: s/setenv_ok/setenv_implied/g 10560: [f005df2c2eea] 10561: 10562: * ldap.c: 10563: hostname_matches() returns TRUE on match in sudo 1.7. 10564: [c3d4377b6e8b] 10565: 10566: * ldap.c: 10567: use strcmp, not strcasecmp when comparing ALL 10568: [e486024574a1] 10569: 10570: * ldap.c: 10571: Make sudo ALL imply setenv. Note that unlike with file-based 10572: sudoers this does affect all the commands in the sudoRole. 10573: [bc12f54321d1] 10574: 10575: * gram.c, gram.y, parse.c, parse.h: 10576: sudo "ALL" now implies the SETENV tag but, unlike an explicit tag, 10577: it is not passed on to other commands in the list. 10578: [026e2cb40680] 10579: 10580: * visudo.c: 10581: Add missing sudo_setpwent() and sudo_setgrent() calls. Also use 10582: sudo_getpwuid() instead of getpwuid(). 10583: [86f30a8fbd49] 10584: 10585: 2007-11-15 Todd C. Miller <Todd.Miller@courtesan.com> 10586: 10587: * sudoers: 10588: Expand on the dangers of not using visudo to edit sudoers. 10589: [e434e8057d02] 10590: 10591: 2007-11-08 Todd C. Miller <Todd.Miller@courtesan.com> 10592: 10593: * parse.c: 10594: Don't quote *?[]! on output since the lexer does not strip off the 10595: backslash when reading those in. 10596: [561da4a13afa] 10597: 10598: 2007-11-07 Todd C. Miller <Todd.Miller@courtesan.com> 10599: 10600: * glob.c: 10601: expand "u_foo" types to "unsigned foo" to avoid compatibility 10602: issues. 10603: [b0d7c64d78c3] 10604: 10605: 2007-11-04 Todd C. Miller <Todd.Miller@courtesan.com> 10606: 10607: * logging.c: 10608: Refactor log line generation in to new_logline(). 10609: [6a9b9730615d] 10610: 10611: 2007-10-25 Todd C. Miller <Todd.Miller@courtesan.com> 10612: 10613: * TROUBLESHOOTING: 10614: fix typo 10615: [9e19d4f86e47] 10616: 10617: 2007-10-24 Todd C. Miller <Todd.Miller@courtesan.com> 10618: 10619: * config.h.in, configure, configure.in, interfaces.c, interfaces.h, 10620: match.c: 10621: Add configure check for struct in6_addr instead of relying on 10622: AF_INET6 since some systems define AF_INET6 but do not include IPv6 10623: support. 10624: [e24082c416bd] 10625: 10626: 2007-10-21 Todd C. Miller <Todd.Miller@courtesan.com> 10627: 10628: * configure, configure.in: 10629: Fix block to add -lutil for FreeBSD and NetBSD when logincap is in 10630: use. 10631: [76a9df4a63be] 10632: 10633: 2007-10-20 Todd C. Miller <Todd.Miller@courtesan.com> 10634: 10635: * configure, configure.in: 10636: POSIX states that struct timespec be declared in time.h so check 10637: there regardless of the value of TIME_WITH_SYS_TIME. 10638: [e42c55ec9daf] 10639: 10640: 2007-10-17 Todd C. Miller <Todd.Miller@courtesan.com> 10641: 10642: * tgetpass.c: 10643: Instead of defining a macro to call the appropriate method for 10644: turning on/off echo, just define tc[gs]etattr() and the related 10645: defines that use the correct terminal ioctls if needed. Also go back 10646: to using TCSAFLUSH instead of TCSADRAIN on all but QNX. 10647: [5dfb2379d995] 10648: 10649: 2007-10-09 Todd C. Miller <Todd.Miller@courtesan.com> 10650: 10651: * Makefile.in: 10652: g/c @ALLOCA@ 10653: [e6946c2e3820] 10654: 10655: * configure: 10656: regen 10657: [9bac7159a138] 10658: 10659: * INSTALL, auth/pam.c, config.h.in, configure.in: 10660: Add --disable-pam-session configure option to disable calling 10661: pam_{open,close}_session. May work around bugs in some PAM 10662: implementations. 10663: [273d0fdb4a9d] 10664: 10665: 2007-10-08 Todd C. Miller <Todd.Miller@courtesan.com> 10666: 10667: * tgetpass.c: 10668: quiet gcc warnings 10669: [325565c5a579] 10670: 10671: * tgetpass.c: 10672: Avoid printing the prompt if we are already backgrounded. E.g. if 10673: the user runs "sudo foo &" from the shell. In this case, the call 10674: to tcsetattr() will cause SIGTTOU to be delivered. 10675: [db2139a8d8b8] 10676: 10677: 2007-09-15 Todd C. Miller <Todd.Miller@courtesan.com> 10678: 10679: * def_data.c, def_data.h, def_data.in: 10680: Reorder things such that the definition of env_reset come right 10681: before the env variable lists. 10682: [e0d8e22a581a] 10683: 10684: * parse.h: 10685: Shrink type and seqno in struct alias from int to u_short 10686: [9425263dd565] 10687: 10688: * alias.c, match.c, parse.c, parse.h: 10689: Add a sequence number in the aliases for loop detection. If we find 10690: an alias with the seqno already set to the current (global) value we 10691: know we've visited it before so ignore it. 10692: [301a0548ffff] 10693: 10694: 2007-09-13 Todd C. Miller <Todd.Miller@courtesan.com> 10695: 10696: * TODO, auth/pam.c, sudo.c, sudo.h: 10697: PAM wants the full tty path so add user_ttypath which holds the full 10698: path to the tty or is NULL if no tty was present. 10699: [c7c1dd4b36c8] 10700: 10701: * auth/pam.c: 10702: Set PAM_RHOST to work around a bug in Solaris 7 and lower that 10703: results in a segv. 10704: [3a8865b3a357] 10705: 10706: 2007-09-11 Todd C. Miller <Todd.Miller@courtesan.com> 10707: 10708: * gram.c: 10709: regen 10710: [5647be127950] 10711: 10712: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c, 10713: parse.h, testsudoers.c, visudo.c: 10714: rename lh_ -> tq_ 10715: [8f500c542c4a] 10716: 10717: 2007-09-10 Todd C. Miller <Todd.Miller@courtesan.com> 10718: 10719: * alloc.c: 10720: remove some useless casts 10721: [409a448b23f5] 10722: 10723: * alloc.c: 10724: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since inttypes.h 10725: predates the final C99 spec and the standard specifies that it shall 10726: include stdint.h anyway 10727: [ae478fdef61a] 10728: 10729: 2007-09-06 Todd C. Miller <Todd.Miller@courtesan.com> 10730: 10731: * Makefile.in, alloca.c, configure.in: 10732: Since we ship with a pre-generated parser there is no need to ship a 10733: bogus alloca implementation. 10734: [3f611a7cc0e5] 10735: 10736: * configure: 10737: regen 10738: [771eccf5269c] 10739: 10740: * configure.in: 10741: remove initial setting of CHECKSIA, we require that it be unset if 10742: not used 10743: [a2e91adc5aa2] 10744: 10745: * Makefile.in: 10746: add list.c to SRCS 10747: [7db0e56cf5b9] 10748: 10749: * configure: 10750: regen 10751: [3716ec30172e] 10752: 10753: * configure.in: 10754: only do SIA checks on Digital Unix 10755: [6a96e1af2597] 10756: 10757: 2007-09-05 Todd C. Miller <Todd.Miller@courtesan.com> 10758: 10759: * sudoers.cat, sudoers.man.in: 10760: regen 10761: [ac1dc29de72b] 10762: 10763: * ChangeLog, TODO: 10764: sync 10765: [781effce0a2d] 10766: 10767: * auth/kerb5.c: 10768: Remove call to krb5_cc_register() as it is not needed for modern 10769: kerb5. 10770: [351b8b764f16] 10771: 10772: * configure: 10773: regen 10774: [ac21dbcc9c2c] 10775: 10776: * aclocal.m4, configure.in: 10777: New method for setting the default authentication type and avoiding 10778: conflicts in auth types. 10779: [5fb15be11f78] 10780: 10781: * match.c, parse.c, testsudoers.c: 10782: Each entry in a cmndlist now has an associated runaslist so no need 10783: to keep track of the most recent non-NULL one. 10784: [582e015786b0] 10785: 10786: 2007-09-04 Todd C. Miller <Todd.Miller@courtesan.com> 10787: 10788: * ldap.c: 10789: back out partial ldaps support mistakenly committed 10790: [357703e94b2d] 10791: 10792: * ldap.c: 10793: Add support for unix groups and netgroups in sudoRunas 10794: [2f04eb91c6d0] 10795: 10796: 2007-09-03 Todd C. Miller <Todd.Miller@courtesan.com> 10797: 10798: * sudo_edit.c: 10799: Fix sudoedit of a non-existent file. From Tilo Stritzky. 10800: [a5488a03bddd] 10801: 10802: 2007-09-02 Todd C. Miller <Todd.Miller@courtesan.com> 10803: 10804: * configure: 10805: regen 10806: [541177376ee1] 10807: 10808: * INSTALL: 10809: update --passprompt escape info 10810: [6d57db4cd538] 10811: 10812: * configure.in: 10813: remove now-bogus comment and update copyright date 10814: [6a4af45fa331] 10815: 10816: * configure.in: 10817: Fix up use of with_passwd 10818: [7c79d8640f77] 10819: 10820: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh: 10821: Update to autoconf-2.61 andf libtool-1.5.24 10822: [045259b0b439] 10823: 10824: * Makefile.in: 10825: "cmp -s" not just cmp Add @datarootdir@ to quiet autoconf-2.61 10826: [f5b6a7afb817] 10827: 10828: 2007-09-01 Todd C. Miller <Todd.Miller@courtesan.com> 10829: 10830: * gram.c: 10831: regen 10832: [b5b78e71d2cb] 10833: 10834: * gram.y: 10835: move tags and runaslist propagation to be earlier 10836: [94f7805f4489] 10837: 10838: * visudo.c: 10839: If -f flag given use the permissions of the original file as a 10840: template 10841: [9303d22bddb0] 10842: 10843: * gram.y: 10844: prevent a double free() when re-initing the parser 10845: [5b3907c4de5a] 10846: 10847: 2007-08-31 Todd C. Miller <Todd.Miller@courtesan.com> 10848: 10849: * configure: 10850: regen 10851: [49a90b19a17d] 10852: 10853: * aclocal.m4, alias.c, alloc.c, auth/API, auth/afs.c, auth/bsdauth.c, 10854: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/securid.c, 10855: auth/securid5.c, auth/sia.c, auth/sudo_auth.h, config.h.in, 10856: configure.in, env.c, ldap.c, list.c, list.h, memrchr.c, parse.c, 10857: parse.h, pwutil.c, redblack.c, redblack.h, snprintf.c, sudo.c, 10858: sudo.h, testsudoers.c, visudo.c, zero_bytes.c: 10859: Remove support for compilers that don't support void * 10860: [35e1d01ae197] 10861: 10862: * gram.c: 10863: regen 10864: [70ce412a458a] 10865: 10866: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h, match.c, 10867: parse.c, parse.h, testsudoers.c, visudo.c: 10868: Move list manipulation macros to list.h and create C versions of the 10869: more complex ones in list.c. The names have been down-cased so they 10870: appear more like normal functions. 10871: [9cea0e281148] 10872: 10873: * Makefile.in: 10874: Fix cmp command when regenerating parser. Make gram.o the first 10875: dependency for all programs so gram.h will be generated before 10876: anything that needs it. 10877: [429ea065abf1] 10878: 10879: * gram.y, parse.h: 10880: Convert NEW_DEFAULT anf NEW_MEMBER into static functions. 10881: [2f3433833589] 10882: 10883: * match.c, parse.c, testsudoers.c: 10884: Use LH_FOREACH_REV when checking permission and short-circuit on the 10885: first non-UNSPEC hit we get for the command. This means that 10886: instead of cycling through the all the parsed sudoers entries we 10887: start at the end and work backwards and quit after the first 10888: positive or negative match. 10889: [881474532f3e] 10890: 10891: * gram.c: 10892: regen 10893: [9152a19d4188] 10894: 10895: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c: 10896: Change list head macros to take a pointer, not a struct. 10897: [054f1dcce4cc] 10898: 10899: * gram.c: 10900: regen 10901: [be154aae6235] 10902: 10903: * gram.y: 10904: Propagate the runasspec from one command to the next in a cmndspec. 10905: [4957b1cb03a3] 10906: 10907: 2007-08-30 Todd C. Miller <Todd.Miller@courtesan.com> 10908: 10909: * match.c: 10910: Replace has_meta() with a macro that calls strpbrk(). 10911: [a2e58846a542] 10912: 10913: * regen 10914: [5a932a5c9451] 10915: 10916: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h, 10917: testsudoers.c, visudo.c: 10918: Use a list head struct when storing the semi-circular lists and 10919: convert to tail queues in the process. This will allow us to 10920: reverse foreach loops more easily and it makes it clearer which 10921: functions expect a list as opposed to a single member. 10922: 10923: Add macros for manipulating lists. Some of these should become 10924: functions. 10925: 10926: When freeing up a list, just pop off the last item in the queue 10927: instead of going from head to tail. This is simpler since we don't 10928: have to stash a pointer to the next member, we always just use the 10929: last one in the queue until the queue is empty. 10930: 10931: Rename match functions that take a list to have list in the name. 10932: Break cmnd_matches() into cmnd_matches() and cmndlist_matches. 10933: [7c37b271607a] 10934: 10935: * parse.c: 10936: Fix pasto, append "!" not negated (which is an int) for sudo -l 10937: output. 10938: [93a444c3997f] 10939: 10940: * Makefile.in: 10941: Remove the dependency of gram .h on gram.y, the .c dependency is 10942: enough. Only move y.tab.h to gram.h if it is different; avoids 10943: needless rebuilding. 10944: [67bf4ea2a2e5] 10945: 10946: 2007-08-27 Todd C. Miller <Todd.Miller@courtesan.com> 10947: 10948: * sudoers.pod: 10949: Defaults lines may be associated with lists of users, hosts, 10950: commands and runas users, not just single entries. 10951: [795effacb6be] 10952: 10953: 2007-08-26 Todd C. Miller <Todd.Miller@courtesan.com> 10954: 10955: * Makefile.in: 10956: Revert the "cmp" portion of the last diff, it doesn't make sense. 10957: [26f34bf4e2e3] 10958: 10959: * Makefile.in: 10960: Remove *.lo for clean: When generating the parser, only move the 10961: generated files into place if they differ from the existing ones. 10962: [84673fea371b] 10963: 10964: 2007-08-25 Todd C. Miller <Todd.Miller@courtesan.com> 10965: 10966: * toke.c, toke.l: 10967: Replace IPV6 regexp with a much simpler (readable) one and add an 10968: extra check when it matches to make sure we have a valid address. 10969: [592e9f690556] 10970: 10971: * match.c: 10972: Fix thinko introduced when merging IPV6 support. 10973: [da38cd5eb8c7] 10974: 10975: 2007-08-24 Todd C. Miller <Todd.Miller@courtesan.com> 10976: 10977: * HISTORY, LICENSE: 10978: regen 10979: [0d7b27b90634] 10980: 10981: * license.pod: 10982: add 2007 10983: [510e5048ae1a] 10984: 10985: * UPGRADE: 10986: mention #uid vs. comment pitfall 10987: [4d2861898bcc] 10988: 10989: * acsite.m4: 10990: Merge in a patch from the libtool cvs that fixes a problem with the 10991: latest autoconf. From Stepan Kasal. 10992: [0c279ae7df3e] 10993: 10994: * parse.h: 10995: Back out he XOR swap trick, it is slower than a temp variable on 10996: modern CPUs. 10997: [91c4b024e317] 10998: 10999: * gram.c: 11000: regen 11001: [cb6d4106fb74] 11002: 11003: * gram.y, parse.h: 11004: Convert the tail queue to a semi-circle queue and use the XOR swap 11005: trick to swap the prev pointers during append. 11006: [8bf4d9fbee58] 11007: 11008: 2007-08-23 Todd C. Miller <Todd.Miller@courtesan.com> 11009: 11010: * parse.h: 11011: remove useless statement 11012: [421ec1dd73e6] 11013: 11014: * toke.c, toke.l: 11015: Refactor #include parsing into a separate function and return 11016: unparsed chars (such as newline or comment) back to the lexer. 11017: [64166917aa3d] 11018: 11019: 2007-08-22 Todd C. Miller <Todd.Miller@courtesan.com> 11020: 11021: * WHATSNEW: 11022: mention better uid support 11023: [56f510e7f2ec] 11024: 11025: * sudoers.pod: 11026: Users may now consist of a uid. 11027: [5fd31b2c55ed] 11028: 11029: * gram.c, gram.h, toke.c: 11030: regen 11031: [599e58af6dc1] 11032: 11033: * parse.c: 11034: Use lbuf_append_quoted() for sudo -l output to quote characters that 11035: would require quoting in sudoers. 11036: [3132d05c990a] 11037: 11038: * lbuf.c, lbuf.h: 11039: Add lbuf_append_quoted() which takes a set of characters which 11040: should be quoted with a backslash when displayed. 11041: [ab09bebb1d65] 11042: 11043: * toke.l: 11044: Require that the first character after a comment not be a digit or a 11045: dash. This allows us to remove the GOTRUNAS state and treat 11046: uid/gids similar to other words. It also means that we can now 11047: specify uids in User_Lists and a User_Spec may now contain a uid. 11048: [461fe01f8392] 11049: 11050: * gram.y, toke.l: 11051: Replace RUNAS token with '(' and ')' tokens to make the runas 11052: portion of the grammar more natural. 11053: [e0c383b4684d] 11054: 11055: * BUGS: 11056: The BUGS file is history 11057: [4d9a809585c7] 11058: 11059: * Makefile.in, README: 11060: The BUGS file is history 11061: [d9500e261172] 11062: 11063: 2007-08-21 Todd C. Miller <Todd.Miller@courtesan.com> 11064: 11065: * toke.c, toke.l: 11066: Allow comments after a RunasAlias as long as the character after the 11067: pound sign isn't a digit or a dash. 11068: [d7f3bd94eeda] 11069: 11070: * WHATSNEW: 11071: Glob support was back-ported to 1.6.9 11072: [d1d5cfd46228] 11073: 11074: 2007-08-20 Todd C. Miller <Todd.Miller@courtesan.com> 11075: 11076: * Makefile.in: 11077: remove sudo_usage.h in distclean 11078: [df05ce9c4127] 11079: 11080: * parse.c: 11081: If a Defaults value contains a blank, double-quote the string. 11082: [9057a910daad] 11083: 11084: * toke.c, toke.l: 11085: Properly deal with Defaults double-quoted strings that span multiple 11086: lines using the line continuation char. Previously, the entire 11087: thing, including the continuation char, newline, and spaces was 11088: stored as-is. 11089: [4a4e8eacefe6] 11090: 11091: * sudo.c: 11092: Be consistent when using single quotes and backticks. 11093: [d010b83a0fa1] 11094: 11095: 2007-08-19 Todd C. Miller <Todd.Miller@courtesan.com> 11096: 11097: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c, 11098: sudo.c, sudo_usage.h.in: 11099: Add new linebuf code to do appends of dynamically allocated strings 11100: and word-wrapped output. Currently used for sudo's usage() and sudo 11101: -l output. Sudo usage strings are now in sudo_usage.h which is 11102: generated at configure time. 11103: [4dfd0ee8d961] 11104: 11105: 2007-08-18 Todd C. Miller <Todd.Miller@courtesan.com> 11106: 11107: * parse.c, sudo.c, sudo.h: 11108: Fix line wrapping in usage() and use the actual tty width instead of 11109: assuming 80. 11110: [700eab37c5a6] 11111: 11112: 2007-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 11113: 11114: * history.pod: 11115: some more info 11116: [8140112a8ae1] 11117: 11118: * history.pod: 11119: Mentioned Chris Jepeway's parser and also the new one that is in 11120: sudo 1.7. 11121: [2132d00f0597] 11122: 11123: 2007-08-16 Todd C. Miller <Todd.Miller@courtesan.com> 11124: 11125: * sudo.pod, visudo.pod: 11126: For the options list, add flag args where appropriate and increase 11127: the indent level so there is room for them. 11128: [2b60fb572e12] 11129: 11130: 2007-08-15 Todd C. Miller <Todd.Miller@courtesan.com> 11131: 11132: * parse.c: 11133: Fix some spacing in "sudo -l" and add a comment about some bogosity 11134: in the line wrapping. 11135: [b59b056f5ee2] 11136: 11137: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 11138: visudo.man.in: 11139: regen 11140: [5fb719f18ebc] 11141: 11142: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in, 11143: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y, 11144: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod, 11145: testsudoers.c, toke.c, toke.l: 11146: Remove monitor support until there is a versino of systrace that 11147: uses a lookaside buffer (or we have a better mechanism to use). 11148: [61ff76878e4a] 11149: 11150: * config.h.in, configure, configure.in, sudo.c: 11151: use getaddrinfo() instead of gethostbyname() if it is available 11152: [cc33c136aa6a] 11153: 11154: 2007-08-14 Todd C. Miller <Todd.Miller@courtesan.com> 11155: 11156: * parse.c, sudo.c: 11157: Deal with OSes where sizeof(gid_t) < sizeof(int). 11158: [130a89cbdfba] 11159: 11160: * interfaces.c: 11161: repair non-getifaddrs() code after ipv6 integration 11162: [7ae7a89e2236] 11163: 11164: * sudo.c: 11165: If we can open sudoers but fail to read the first byte, close the 11166: file stream before trying again. 11167: [6f31272fae7b] 11168: 11169: 2007-08-13 Todd C. Miller <Todd.Miller@courtesan.com> 11170: 11171: * toke.c: 11172: regen 11173: [4d7afe0aa6fa] 11174: 11175: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l: 11176: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki 11177: [4e6ff2965a42] 11178: 11179: * sudo.pod, sudoers.pod, visudo.pod: 11180: Add some missing markup Update copyright 11181: [7e6d3c686b5e] 11182: 11183: 2007-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 11184: 11185: * configure, configure.in: 11186: fix sudo_noexec extension which got broken in the libtool update 11187: [3a5b447df861] 11188: 11189: 2007-08-10 Todd C. Miller <Todd.Miller@courtesan.com> 11190: 11191: * Makefile.in: 11192: explicitly specify -Tascii to nroff 11193: [45c8da4cbefe] 11194: 11195: 2007-08-08 Todd C. Miller <Todd.Miller@courtesan.com> 11196: 11197: * logging.c: 11198: remove an ANSI-ism that crept in 11199: [29086f87b2ca] 11200: 11201: 2007-08-07 Todd C. Miller <Todd.Miller@courtesan.com> 11202: 11203: * sudo.pod: 11204: Adjust list indents Prevent -- from being turned into an em dash Use 11205: a list for the environment instead of a literal paragraph 11206: [c3abcd8f76f4] 11207: 11208: * visudo.pod: 11209: Use a list for the environment instead of an indented literal 11210: paragraph. 11211: [0ffcfcb7349f] 11212: 11213: * sudoers.pod: 11214: Adjust list indentation 11215: [615c89e3123a] 11216: 11217: * license.pod: 11218: add =head3 11219: [8b2e0d38c0bd] 11220: 11221: 2007-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 11222: 11223: * sudo.pod: 11224: mention that when specifying a uid for the -u option the shell may 11225: require that the # be escaped 11226: [3e3a17bff150] 11227: 11228: 2007-08-02 Todd C. Miller <Todd.Miller@courtesan.com> 11229: 11230: * match.c: 11231: Fix off by one in group matching. 11232: [b529602b7fba] 11233: 11234: 2007-07-31 Todd C. Miller <Todd.Miller@courtesan.com> 11235: 11236: * env.c: 11237: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From David Krause. 11238: [ffbf8907c6e7] 11239: 11240: 2007-07-30 Todd C. Miller <Todd.Miller@courtesan.com> 11241: 11242: * configure, configure.in: 11243: Add missing define of HAVE_GSS_KRB5_CCACHE_NAME for the 11244: -lgssapi_krb5 case. 11245: [2b85a89c2252] 11246: 11247: * aclocal.m4, configure, configure.in: 11248: Fix link tests such that new gcc doesn't optimize away the test. 11249: [83484ec95cba] 11250: 11251: 2007-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 11252: 11253: * sudo.pod, sudoers.pod, visudo.pod: 11254: add missing over/back 11255: [251a12c89b91] 11256: 11257: * sudo.pod, sudoers.pod, visudo.pod: 11258: Change FILES section to use =item 11259: [60b9efc3a0b2] 11260: 11261: * env.c: 11262: Add back allocation of the env struct in rebuild_env but save a copy 11263: of the old pointer and free it before returning. 11264: [1100cd4fa997] 11265: 11266: * env.c: 11267: Don't init the private environment in rebuild_env() since it may 11268: have already been done implicitly sudo_setenv/sudo_unsetenv. 11269: 11270: Multiply length by sizeof(char *) in memcpy/memmove when copying the 11271: environment so we copy the full thing. 11272: 11273: Add missing set of parens so we deref the right pointer in 11274: sudo_unsetenv when searching for a matching variable. 11275: [9086a8f756b1] 11276: 11277: 2007-07-26 Todd C. Miller <Todd.Miller@courtesan.com> 11278: 11279: * sudo.pod, sudoers.pod, visudo.pod: 11280: Use file markup for paths in the FILES section 11281: [940d99f731f2] 11282: 11283: * sudo.pod, sudoers.pod, visudo.pod: 11284: Don't capitalize sudo/visudo 11285: [f067a455d44b] 11286: 11287: * sudoers.pod: 11288: Sort sudoers options; based on a diff from Igor Sobrado. 11289: [a9b9befe85ac] 11290: 11291: 2007-07-25 Todd C. Miller <Todd.Miller@courtesan.com> 11292: 11293: * sudo.pod, sudoers.pod, visudo.pod: 11294: Use 8 and 5 instead of @mansectsu@ and @mansectform@ since the 11295: latter confuses pod2man. The Makefile rules for the .man.in file 11296: will add @mansectsu@ and @mansectform@ back in after pod2man is done 11297: anyway. 11298: [b50ea0db727c] 11299: 11300: 2007-07-22 Todd C. Miller <Todd.Miller@courtesan.com> 11301: 11302: * LICENSE, Makefile.in, license.pod: 11303: Move license info to pod format 11304: [25bdd82e592b] 11305: 11306: * configure, configure.in, sudoers.pod: 11307: Substitute value of path_info into sudoers man page. 11308: [9ba661a82798] 11309: 11310: * WHATSNEW: 11311: remove features that were back-ported to 1.6.9 11312: [e76d756cbe65] 11313: 11314: * sudo.c, sudo.pod, visudo.c, visudo.pod: 11315: Sort SYNOPSIS and sync usage. From Igor Sobrado. 11316: [4970386c9e54] 11317: 11318: * env.c: 11319: Only need sudo_setenv/sudo_unsetenv if we are going to use 11320: ldap_sasl_interactive_bind_s() but don't have 11321: gss_krb5_ccache_name(). 11322: [f1a73d8b35c5] 11323: 11324: * ChangeLog: 11325: rebuild without branch info 11326: [5d5a33494677] 11327: 11328: * Makefile.in: 11329: Add ChangeLog target 11330: [a702034fdd89] 11331: 11332: * auth/pam.c: 11333: Run cleanup code if the user hits ^C at the password prompt. 11334: [9cf87768e921] 11335: 11336: * auth/pam.c: 11337: Some versions of pam_lastlog have a bug that will cause a crash if 11338: PAM_TTY is not set so if there is no tty, set PAM_TTY to the empty 11339: string. 11340: [5b63f6c88866] 11341: 11342: 2007-07-20 Todd C. Miller <Todd.Miller@courtesan.com> 11343: 11344: * Makefile.in: 11345: ChageLog not Changelog 11346: [1243d8473ceb] 11347: 11348: * ChangeLog: 11349: sync 11350: [d887df98c6b0] 11351: 11352: * Makefile.in: 11353: CHANGE -> Changelog 11354: [917738df30dd] 11355: 11356: * TODO: 11357: sync 11358: [cd382f7d1948] 11359: 11360: 2007-07-19 Todd C. Miller <Todd.Miller@courtesan.com> 11361: 11362: * config.h.in, configure, configure.in, ldap.c: 11363: Add configure hooks for gss_krb5_ccache_name() and the gssapi 11364: headers. 11365: [139606209991] 11366: 11367: 2007-07-18 Todd C. Miller <Todd.Miller@courtesan.com> 11368: 11369: * env.c, sudo.c: 11370: rebuild_env() and insert_env_vars() no longer return environment 11371: pointer, they set environ directly. 11372: 11373: No longer need to pass around an envp pointer since we just operate 11374: on environ now. 11375: 11376: Add dosync argument to insert_env() that indicates whether it should 11377: reset environ when realloc()ing env.envp. 11378: 11379: Use an initial size of 128 for the environment. 11380: [4735fd5fddb8] 11381: 11382: * env.c: 11383: Split sudo_setenv() into an external version and a version only for 11384: use by rebuild_env(). 11385: [fda7d655adb1] 11386: 11387: 2007-07-16 Todd C. Miller <Todd.Miller@courtesan.com> 11388: 11389: * ldap.c: 11390: Add support for using gss_krb5_ccache_name() instead of setting 11391: KRB5CCNAME. Also use sudo_unsetenv() in the non- 11392: gss_krb5_ccache_name() case if there was no KRB5CCNAME in the 11393: original environment. TODO: configure setup for 11394: gss_krb5_ccache_name() 11395: [fcafa5a49caf] 11396: 11397: * README.LDAP: 11398: add krb5_ccname 11399: [fceb8f883886] 11400: 11401: * README.LDAP, ldap.c: 11402: Add support for sasl_secprops in ldap.conf 11403: [1f06f4bf7347] 11404: 11405: * env.c, sudo.h: 11406: Add sudo_unsetenv() and refactor private env syncing code into 11407: sync_env(). 11408: [045ecb3fd22b] 11409: 11410: * README.LDAP, ldap.c: 11411: The ldap.conf variable is sasl_auth_id not sasl_authid. 11412: [a5f98491311b] 11413: 11414: 2007-07-15 Todd C. Miller <Todd.Miller@courtesan.com> 11415: 11416: * ldap.c, sudo.c, sudo.h: 11417: Add support for krb5_ccname in ldap.conf. If specified, it will 11418: override the default value of KRB5CCNAME in the environment for the 11419: duration of the call to ldap_sasl_interactive_bind_s(). 11420: [b08a10c3045b] 11421: 11422: * env.c, sudo.h: 11423: Remove format_env() Add sudo_setenv() to replace most format_env() + 11424: insert_env() combinations. insert_env() no longer takes a struct 11425: environment * 11426: [131da52f43f3] 11427: 11428: * ldap.c: 11429: Fix use_sasl vs. rootuse_sasl logic. 11430: [0c0417b6918c] 11431: 11432: * README.LDAP, config.h.in, configure, configure.in, ldap.c: 11433: Add support for SASL auth when connecting to an LDAP server. Adapted 11434: from a diff by Tom McLaughlin. 11435: [a6285f1356ea] 11436: 11437: 2007-07-14 Todd C. Miller <Todd.Miller@courtesan.com> 11438: 11439: * configure, configure.in: 11440: Only enable AIX or BSD auth if no other exclusive auth method has 11441: been chosen. Allows people to e.g., use PAM on AIX without adding 11442: --without-aixauth. A better solution is needed to deal with default 11443: authentication since if a non-exclusive method is chosen we will 11444: still get an error. 11445: [83f7afdc0ec3] 11446: 11447: 2007-07-11 Todd C. Miller <Todd.Miller@courtesan.com> 11448: 11449: * HISTORY, Makefile.in, history.pod: 11450: Generate HISTORY from history.pod (which is also used for web pages) 11451: [60bcd5164931] 11452: 11453: 2007-07-09 Todd C. Miller <Todd.Miller@courtesan.com> 11454: 11455: * sudo.man.in, sudoers.man.in: 11456: regen 11457: [63956a366191] 11458: 11459: * sudo.pod: 11460: Better explanation of environment handling in the sudo man page. 11461: [6c247742f7ee] 11462: 11463: * env.c, sudo.c: 11464: Defer setting user-specified env vars until after authentication. 11465: [4750b79323ee] 11466: 11467: * env.c: 11468: honor def_default_path for PATH set on the command line 11469: [6db31d9b6d65] 11470: 11471: * env.c, sudo.c, sudo.pod, sudoers.pod: 11472: Allow user to set environment variables on the command line as long 11473: as they are allowed by env_keep and env_check. Ie: apply the same 11474: restrictions as normal environment variables. TODO: deal with 11475: secure_path 11476: [26c0da3840cf] 11477: 11478: 2007-07-08 Todd C. Miller <Todd.Miller@courtesan.com> 11479: 11480: * sudo.c, sudo_edit.c: 11481: Call rebuild_env() in call cases. Pass original envp to sudo_edit(). 11482: Don't allow -E or env var setting in sudoedit mode. More accurate 11483: usage() when called as sudoedit. 11484: [a4af20658361] 11485: 11486: * ldap.c: 11487: warn -> warning 11488: [d87d1192b048] 11489: 11490: * sudo.pod: 11491: add -c option to sudoedit synopsis 11492: [15b596a7e2db] 11493: 11494: * TODO: 11495: udpate to reality 11496: [e2f8fde89db1] 11497: 11498: * parse.c: 11499: Use ALLOW/DENY instead of TRUE/FALSE when dealing with the return 11500: value from {user,host,runas,cmnd}_matches(). Rename *matches 11501: variables -> *match. Purely cosmetic. 11502: [e54a44c00a88] 11503: 11504: * parse.c: 11505: Move setting of FLAG_NO_CHECK into the if(pwflag) block. No change 11506: in behavior. 11507: [c6272b4f2127] 11508: 11509: * sudoers: 11510: add SETENV tag 11511: [3a3066bb6788] 11512: 11513: 2007-07-06 Todd C. Miller <Todd.Miller@courtesan.com> 11514: 11515: * parse.c: 11516: Make pwcheck local to the pwflag block. Use pwcheck even if user 11517: didn't match since Defaults options may still apply. 11518: [45da9efbbafd] 11519: 11520: * check.c, sudo.c: 11521: Do not update timestamp if user not validated by sudoers. 11522: [a4a9d4364827] 11523: 11524: * set_perms.c: 11525: for PERM_RUNAS, set the egid to the runas user's gid and restore to 11526: the user's original in PERM_ROOT 11527: [1514bfb32847] 11528: 11529: * logging.c, mon_systrace.c, set_perms.c, sudo.h: 11530: PERM_FULL_ROOT is now no different than PERM_ROOT so remove 11531: PERM_FULL_ROOT 11532: [b9d047a3178c] 11533: 11534: * check.c: 11535: don't check timestamp mtime if we are just going to remove it 11536: [5d2470bc6cbd] 11537: 11538: * sudoers.pod: 11539: Move sudoers defaults parameters into their own section. 11540: [54701fbc0ff3] 11541: 11542: * testsudoers.c: 11543: Reduce a level of indent by a few placed continue statements. 11544: [5d5a9838c8ef] 11545: 11546: * parse.c: 11547: Make matching but negated commands/hosts/runas entries override a 11548: previous match as expected. Also reduce some levels of indent by a 11549: few placed continue statements. 11550: [dd59fa4b91a1] 11551: 11552: 2007-07-05 Todd C. Miller <Todd.Miller@courtesan.com> 11553: 11554: * parse.c: 11555: Print default runas in "sudo -l" if sudoers don't specify one. 11556: [07d408c400bd] 11557: 11558: * match.c: 11559: Less hacky way of testing whether the domain was set. 11560: [a537059776e5] 11561: 11562: 2007-07-04 Todd C. Miller <Todd.Miller@courtesan.com> 11563: 11564: * INSTALL: 11565: Mention pam-devel and openldap-devel for Linux 11566: [9e708c54ecc3] 11567: 11568: 2007-07-03 Todd C. Miller <Todd.Miller@courtesan.com> 11569: 11570: * README.LDAP: 11571: or vs. are 11572: [abe8c0f3a410] 11573: 11574: 2007-07-01 Todd C. Miller <Todd.Miller@courtesan.com> 11575: 11576: * sudo.c: 11577: fix typo in Solaris project support 11578: [2ffeb2d80959] 11579: 11580: * HISTORY: 11581: update 11582: [df162b36f120] 11583: 11584: * sudo.c: 11585: Make -- on the command line match the manual page. The implied shell 11586: case has been simplified as a result. 11587: [cd217a1f6694] 11588: 11589: 2007-06-28 Todd C. Miller <Todd.Miller@courtesan.com> 11590: 11591: * sudoers2ldif: 11592: add simplistic support for sudoRunas; note that if a sudoers entry 11593: contains multiple Runas users, all will apply to the sudoRole 11594: [65b11421f5c8] 11595: 11596: * sudoers2ldif: 11597: honor SETENV and NOSETENV tags 11598: [2c0d5ba7a09b] 11599: 11600: 2007-06-24 Todd C. Miller <Todd.Miller@courtesan.com> 11601: 11602: * mon_systrace.c: 11603: Redo setting of user_args. We now build up a private copy of argv 11604: first and then replace the NULs?with spaces. 11605: [ccbba72ea112] 11606: 11607: * mon_systrace.c: 11608: getcwd() returns NULL on failure, not 0 on success 11609: [88cd9e66e530] 11610: 11611: * mon_systrace.c: 11612: allow chunksiz to reach 1 before erroring out 11613: [619d68f14964] 11614: 11615: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 11616: visudo.man.in: 11617: regen 11618: [8db512d3caf0] 11619: 11620: 2007-06-23 Todd C. Miller <Todd.Miller@courtesan.com> 11621: 11622: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h, gram.y, 11623: logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod, sudoers.pod, 11624: toke.c, toke.l: 11625: Add support for setting environment variables on the command line. 11626: This is only allowed if the setenv sudoers options is enabled or if 11627: the command is prefixed with the SETENV tag. 11628: [5744caebd969] 11629: 11630: * README.LDAP: 11631: replace Aaron's email address with the sudo-workers list 11632: [2ffce5f9afc0] 11633: 11634: * configure: 11635: regen 11636: [8013dff82c0c] 11637: 11638: 2007-06-22 Todd C. Miller <Todd.Miller@courtesan.com> 11639: 11640: * schema.OpenLDAP, schema.iPlanet: 11641: Break schema out into separate files. 11642: [15e598e4c60b] 11643: 11644: * Makefile.in, README.LDAP: 11645: Break schema out into separate files. 11646: [1a53966ca1fa] 11647: 11648: 2007-06-21 Todd C. Miller <Todd.Miller@courtesan.com> 11649: 11650: * auth/aix_auth.c: 11651: free message if set by authenticate() 11652: [849c220c1236] 11653: 11654: * match.c: 11655: deal with NULL gr_mem 11656: [49e4d74f0bbe] 11657: 11658: 2007-06-20 Todd C. Miller <Todd.Miller@courtesan.com> 11659: 11660: * config.h.in: 11661: regen 11662: [fead999ad3e9] 11663: 11664: * configure.in: 11665: add template for HAVE_PROJECT_H 11666: [e6c42c2eaad1] 11667: 11668: * closefrom.c: 11669: include fcntl.h 11670: [54d98b382f03] 11671: 11672: 2007-06-19 Todd C. Miller <Todd.Miller@courtesan.com> 11673: 11674: * INSTALL: 11675: mention --with-project 11676: [d3ea3baad7c5] 11677: 11678: * config.h.in, configure.in, sudo.c: 11679: Add Solaris 10 "project" support. From Michael Brantley. 11680: [f14f3c8c6554] 11681: 11682: * sudoers.pod: 11683: fix typo 11684: [50db81a19787] 11685: 11686: * configure: 11687: regen 11688: [ea71afd3e564] 11689: 11690: * configure.in: 11691: Fix preservation of LDFLAGS in the LDAP case. 11692: [40a3a47e8059] 11693: 11694: * memrchr.c: 11695: Remove dependecy on NULL 11696: [c957ae5e1733] 11697: 11698: * configure: 11699: regen 11700: [4955ce0c6912] 11701: 11702: * aclocal.m4, configure.in: 11703: Can't use the regular autoconf fnmatch() check since we need 11704: FNM_CASEFOLD so go back to our custom one. 11705: [f10d76237486] 11706: 11707: * env.c: 11708: Fix preserving of variables in env_keep. 11709: [d040049d6b84] 11710: 11711: * env.c: 11712: add XAUTHORIZATION 11713: [0d589a5fe015] 11714: 11715: * UPGRADE: 11716: expand upon env resetting and mention that it began in 1.6.9 not 11717: 1.7. 11718: [dba251655c76] 11719: 11720: * sudoers.pod: 11721: Update descriptions of env_keep and env_check to match current 11722: reality. 11723: [dba77357954b] 11724: 11725: 2007-06-18 Todd C. Miller <Todd.Miller@courtesan.com> 11726: 11727: * env.c: 11728: Add LINGUAS to initial_checkenv_table. Add COLORS, HOSTNAME, 11729: LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to intial_keepenv_table. 11730: [eec4632bd190] 11731: 11732: * env.c, logging.c: 11733: Treat USERNAME environemnt variable like LOGNAME/USER 11734: [09f52dcfd70c] 11735: 11736: * env.c: 11737: Don't need to populate keepenv table with the contents of the 11738: checkenv table. 11739: [527a14afd973] 11740: 11741: * sudo.c: 11742: Don't force sudo into the C locale. 11743: [8a5bd301ef96] 11744: 11745: * env.c: 11746: Make env_check apply when env_reset it true. Environment variables 11747: are passed through unless they contain '/' or '%'. There is no need 11748: to have a variable in both env_check and env_keep. 11749: [840c802721e4] 11750: 11751: 2007-06-16 Todd C. Miller <Todd.Miller@courtesan.com> 11752: 11753: * visudo.c: 11754: Remove an duplicate lock_file() call and add a comment. 11755: [5af9dcdf0eb6] 11756: 11757: * UPGRADE: 11758: Add sudo 1.6.9 upgrade note. 11759: [1585149f2914] 11760: 11761: 2007-06-14 Todd C. Miller <Todd.Miller@courtesan.com> 11762: 11763: * interfaces.c: 11764: Solaris will return EINVAL if the buffer used in SIOCGIFCONF is too 11765: small. From Klaus Wagner. 11766: [d6899fc44f77] 11767: 11768: * logging.c, sudo.h: 11769: Redo the long syslog line splitting based on a patch from Eygene 11770: Ryabinkin. Include memrchr() for systems without it. 11771: [66a50e8d553a] 11772: 11773: * memrchr.c: 11774: Redo the long syslog line splitting based on a patch from Eygene 11775: Ryabinkin. Include memrchr() for systems without it. 11776: [2f6702b7d41b] 11777: 11778: * Makefile.in, config.h.in, configure, configure.in: 11779: Redo the long syslog line splitting based on a patch from Eygene 11780: Ryabinkin. Include memrchr() for systems without it. 11781: [407a46190921] 11782: 11783: * configure.in: 11784: Since we need to be able to convert timespec to timeval for utimes() 11785: the last 3 digits in the tv_nsec are not significant. This makes the 11786: sudoedit file date comparison work again. 11787: [9d0258849fa9] 11788: 11789: 2007-06-13 Todd C. Miller <Todd.Miller@courtesan.com> 11790: 11791: * aclocal.m4, configure, configure.in: 11792: Add SUDO_ADD_AUTH macro to deal with adding things to AUTH_OBJS. 11793: This deals with exclusive authentication methods in a simple way. 11794: [7d70072c0f35] 11795: 11796: 2007-06-12 Todd C. Miller <Todd.Miller@courtesan.com> 11797: 11798: * LICENSE: 11799: mkstemp.c is BSD code too. 11800: [29e236d98162] 11801: 11802: * sudo.pod, sudoers.pod, visudo.pod: 11803: No commercial support for now. 11804: [7c76b3e192dd] 11805: 11806: 2007-06-11 Todd C. Miller <Todd.Miller@courtesan.com> 11807: 11808: * sudo.c: 11809: cleanenv() is no more. 11810: [518080514408] 11811: 11812: 2007-06-10 Todd C. Miller <Todd.Miller@courtesan.com> 11813: 11814: * ChangeLog: 11815: Display branch info in Changelog 11816: [44e3b27427c7] 11817: 11818: * utimes.c: 11819: Include config.h early so we have it for TIME_WITH_SYS_TIME 11820: [4bf1a00d0703] 11821: 11822: * ChangeLog: 11823: Fix Changelog generation and update. 11824: [6e960dbcbece] 11825: 11826: 2007-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 11827: 11828: * closefrom.c: 11829: Use /proc/self/fd instead of /proc/$$/fd 11830: 11831: Move old-style fd closing into closefrom_fallback() and call that if 11832: /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails 11833: [faa7e4810758] 11834: 11835: * auth/kerb5.c, config.h.in, configure.in: 11836: o use krb5_verify_user() if available instead of doing it by hand o 11837: use krb5_init_secure_context() if we have it o pass an encryption 11838: type of 0 to krb5_kt_read_service_key() instead of 11839: ENCTYPE_DES_CBC_MD5 to let kerberos choose. 11840: [df7acf72bd7c] 11841: 11842: * env.c: 11843: Check TERM and COLORTERM for '%' and '/' characters. From Debian. 11844: [f92d05197e40] 11845: 11846: * configure.in: 11847: Fix closefrom() substitution in the Makefile 11848: [b642b13fcc5c] 11849: 11850: * TROUBLESHOOTING: 11851: Mention alternate sudo pronunciation. 11852: [7c71dc73409f] 11853: 11854: 2007-06-07 Todd C. Miller <Todd.Miller@courtesan.com> 11855: 11856: * env.c: 11857: Remove KRB5_KTNAME from environment. Allow COLORTERM. 11858: [70f35a79f780] 11859: 11860: * auth/kerb5.c: 11861: If we cannot get a valid service key using the default keytab it is 11862: a fatal error. Fixes a bug where sudo could be tricked into 11863: allowing access when it should not by a fake KDC. From Thor Lancelot 11864: Simon. 11865: [a3ae6a47cb23] 11866: 11867: 2007-05-12 Todd C. Miller <Todd.Miller@courtesan.com> 11868: 11869: * aclocal.m4, configure, configure.in: 11870: Update long long checks to use AC_CHECK_TYPES and to cache values. 11871: [047318eaaeb2] 11872: 11873: * aclocal.m4, configure.in: 11874: Use AC_FUNC_FNMATCH instead of a homebrew fnmatch checker. We can't 11875: use AC_REPLACE_FNMATCH since that assumes replacing with GNU 11876: fnmatch. 11877: [80513a1003ea] 11878: 11879: 2007-05-11 Todd C. Miller <Todd.Miller@courtesan.com> 11880: 11881: * configure, configure.in: 11882: Add closefrom() to LIB_OBJS not SUDO_OBJS if it is missing since we 11883: need it for visudo now too. 11884: [50837c7c2b5e] 11885: 11886: 2007-04-24 Todd C. Miller <Todd.Miller@courtesan.com> 11887: 11888: * sudoers.pod: 11889: Attempt to clarify the bit talking about network numbers w/o 11890: netmasks. 11891: [211e68c1d034] 11892: 11893: * sudo.pod: 11894: Clarify timestamp dir ownership sentence. 11895: [9178f132c7f7] 11896: 11897: 2007-04-20 Todd C. Miller <Todd.Miller@courtesan.com> 11898: 11899: * auth/pam.c: 11900: Linux PAM now defines __LINUX_PAM__, not __LIBPAM_VERSION. From 11901: Dmitry V. Levin. 11902: [81fce91667bc] 11903: 11904: 2007-04-16 Todd C. Miller <Todd.Miller@courtesan.com> 11905: 11906: * sudo.c: 11907: -i is also one of the mutually exclusive options to list it in the 11908: warning message. Noted by Chris Pepper. 11909: [7da73fb248e9] 11910: 11911: 2007-04-12 Todd C. Miller <Todd.Miller@courtesan.com> 11912: 11913: * visudo.pod: 11914: The sudoers variable is env_editor, not enveditor. From Jean- 11915: Francois Saucier. 11916: [2a86ec09a6db] 11917: 11918: 2007-03-29 Todd C. Miller <Todd.Miller@courtesan.com> 11919: 11920: * redblack.c: 11921: I tracked down the original author so credit him and include his 11922: license info. 11923: [3733553a1bba] 11924: 11925: 2007-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 11926: 11927: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, 11928: sudoers.pod: 11929: Fix typos; from Jason McIntyre. 11930: [1ee4ce2512f2] 11931: 11932: * logging.c: 11933: Restore signal mask before calling reapchild(). Fixes a possible 11934: race condition that could prevent sudo from properly waiting for the 11935: child. 11936: [9ee4192385dc] 11937: 11938: 2007-01-31 Todd C. Miller <Todd.Miller@courtesan.com> 11939: 11940: * pwutil.c: 11941: Don't declare pw_free() if we are not going to use it. 11942: [adb79a4289ca] 11943: 11944: * env.c: 11945: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD and 11946: LDR_PRELOAD64. The 64-bit version is not currently supported. 11947: Remove zero_env() prototype as it no longer exists. 11948: [b4fe65027fb6] 11949: 11950: 2006-12-11 Todd C. Miller <Todd.Miller@courtesan.com> 11951: 11952: * logging.c: 11953: Add "Auto-Submitted: auto-generated" line to sudo mail for rfc 3834. 11954: [78002ad90f7b] 11955: 11956: 2006-09-29 Todd C. Miller <Todd.Miller@courtesan.com> 11957: 11958: * auth/pam.c: 11959: If the user enters ^C at the password prompt, abort instead of 11960: trying to authenticate with an empty password (which causes an 11961: annoying delay). 11962: [da3f27b747c7] 11963: 11964: 2006-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 11965: 11966: * closefrom.c, config.h.in, configure, configure.in: 11967: Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by 11968: Darren Tucker. 11969: [0331b7780759] 11970: 11971: * pwutil.c: 11972: pw_free() is only used by sudo_freepwcache() so ifdef it out too. 11973: [0014c0d9eeba] 11974: 11975: 2006-08-04 Todd C. Miller <Todd.Miller@courtesan.com> 11976: 11977: * config.guess, config.sub: 11978: Update to latest versions from cvs.savannah.gnu.org 11979: [aa0143101c20] 11980: 11981: 2006-07-31 Todd C. Miller <Todd.Miller@courtesan.com> 11982: 11983: * pwutil.c, sudo_edit.c: 11984: Move password/group cache cleaning out of sudo_end{pw,grp}ent() so 11985: we can close the passwd/group files early. 11986: [559074bd7eb7] 11987: 11988: * config.h.in, configure, configure.in, set_perms.c: 11989: Add seteuid() flavor of set_perms() for systems without setreuid() 11990: or setresuid() that have a working seteuid(). Tested on Darwin. 11991: [508d8da99189] 11992: 11993: 2006-07-30 Todd C. Miller <Todd.Miller@courtesan.com> 11994: 11995: * mon_systrace.c: 11996: systrace_read() returns ssize_t 11997: [9f97d1d1a59d] 11998: 11999: * configure, configure.in: 12000: Fix typo, -lldap vs. -ldap; from Tim Knox. 12001: [a8cc43c3bb2a] 12002: 12003: 2006-07-28 Todd C. Miller <Todd.Miller@courtesan.com> 12004: 12005: * HISTORY: 12006: Fix typo; Matt Ackeret 12007: [86964ee3dfbd] 12008: 12009: 2006-07-17 Todd C. Miller <Todd.Miller@courtesan.com> 12010: 12011: * sudo.c: 12012: Print sudoers path in -V mode for root. 12013: [dc43f2d75bd9] 12014: 12015: 2006-06-15 Todd C. Miller <Todd.Miller@courtesan.com> 12016: 12017: * ldap.c: 12018: Do a sub tree search instead of a base search (one level in the tree 12019: only) for sudo right objects. This allows system administrators to 12020: categorize the rights in a tree to make them easier to manage. 12021: [6d2d9abf996e] 12022: 12023: 2005-12-28 Todd C. Miller <Todd.Miller@courtesan.com> 12024: 12025: * sudo.pod: 12026: fix typo 12027: [1473413bcbda] 12028: 12029: 2005-12-04 Todd C. Miller <Todd.Miller@courtesan.com> 12030: 12031: * ldap.c: 12032: Convert GET_OPT and GET_OPTI to use just 2 args. Add timelimit and 12033: bind_timelimit support; adapted from gentoo. 12034: [afc816093026] 12035: 12036: 2005-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 12037: 12038: * ldap.c: 12039: Support comments that start in the middle of a line 12040: [c25df6ee3db8] 12041: 12042: * configure, configure.in: 12043: Define LDAP_DEPRECATED until we start using ldap_get_values_len() 12044: [ee249bfe230a] 12045: 12046: 2005-11-18 Todd C. Miller <Todd.Miller@courtesan.com> 12047: 12048: * closefrom.c: 12049: Silence gcc -Wsign-compare; djm@openbsd.org 12050: [28769ce6418d] 12051: 12052: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: 12053: cleanup() now takes an int as an arg so it can be used as a signal 12054: handler too. 12055: [2bb0df34d09c] 12056: 12057: * sudo.c: 12058: Make a copy of the shell field in the passwd struct for NewArgv to 12059: avoid a use after free situation after sudo_endpwent() is called. 12060: [5dcc9ffd362e] 12061: 12062: 2005-11-17 Todd C. Miller <Todd.Miller@courtesan.com> 12063: 12064: * config.h.in, configure, configure.in: 12065: Add mkstemp() for those poor souls without it. 12066: [5fdd02e863e0] 12067: 12068: * mkstemp.c: 12069: Add mkstemp() for those poor souls without it. 12070: [c99401207860] 12071: 12072: * Makefile.in: 12073: Add mkstemp() for those poor souls without it. 12074: [9c1cf2678f24] 12075: 12076: 2005-11-15 Todd C. Miller <Todd.Miller@courtesan.com> 12077: 12078: * env.c: 12079: Add PERL5DB to list of environment variables to remove. 12080: [7375c27ecf75] 12081: 12082: 2005-11-13 Todd C. Miller <Todd.Miller@courtesan.com> 12083: 12084: * mon_systrace.c, mon_systrace.h: 12085: Instead of calling the check function twice with a state cookie use 12086: separate check/log functions. 12087: 12088: Check more ioctl() calls for failure. 12089: 12090: systrace_{read,write} now return the number of bytes read/written or 12091: -1 on error. 12092: [3dc8946d90e9] 12093: 12094: * env.c: 12095: Add more environment variables to remove; from gentoo linux Add some 12096: comments about what bad env variables go to what (more to do) 12097: [6918110a6b82] 12098: 12099: 2005-11-11 Todd C. Miller <Todd.Miller@courtesan.com> 12100: 12101: * sudo.c, sudo_edit.c: 12102: Move sudo_end{gr,pw}ent() until just before the exec since they free 12103: up our cached copy of the passwd structs, including sudo_user and 12104: sudo_runas. Fixes a use-after-free bug. 12105: [54de3778bad0] 12106: 12107: * visudo.c: 12108: Close all fd's before executing editor. 12109: [4fcc05e1bec8] 12110: 12111: * sudo.c: 12112: Enable malloc debugging on OpenBSD when SUDO_DEVEL is set. 12113: [ef0e8ffa5c9f] 12114: 12115: * check.c: 12116: Fix fd leak when lecture file option is enabled. From Jerry Brown 12117: [ce97f9207cd8] 12118: 12119: 2005-11-07 Todd C. Miller <Todd.Miller@courtesan.com> 12120: 12121: * env.c: 12122: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of 12123: environment variables to remove. From Charles Morris 12124: [c96e1367d1c1] 12125: 12126: 2005-11-01 Todd C. Miller <Todd.Miller@courtesan.com> 12127: 12128: * env.c: 12129: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5 12130: [72a6a1571226] 12131: 12132: 2005-10-28 Todd C. Miller <Todd.Miller@courtesan.com> 12133: 12134: * env.c: 12135: add PS4 and SHELLOPTS to initial_badenv_table for bash 12136: [89dfb3f318f3] 12137: 12138: 2005-08-15 Todd C. Miller <Todd.Miller@courtesan.com> 12139: 12140: * sudoers.pod: 12141: Fix typo; Toby Peterson 12142: [b7a3222b23f4] 12143: 12144: 2005-08-02 Todd C. Miller <Todd.Miller@courtesan.com> 12145: 12146: * tsgetgrpw.c: 12147: Make return buffers static so they don't get clobbered 12148: [13323a39b9f5] 12149: 12150: 2005-07-28 Todd C. Miller <Todd.Miller@courtesan.com> 12151: 12152: * auth/securid5.c: 12153: Fix securid5 authentication, was not checking for ACM_OK. Also add 12154: default cases for the two switch()es. Problem noted by ccon at 12155: worldbank 12156: [14091e418333] 12157: 12158: 2005-06-27 Todd C. Miller <Todd.Miller@courtesan.com> 12159: 12160: * ldap.c: 12161: Remove ncat() in favor of just counting bytes and pre-allocating 12162: what is needed. 12163: [25b8712adb61] 12164: 12165: 2005-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 12166: 12167: * ldap.c: 12168: Fix up some comments Add missing fclose() for the rootbinddn case 12169: [ae95c8a89711] 12170: 12171: * ldap.c: 12172: align struct ldap_config 12173: [35d0d64c76f8] 12174: 12175: * ldap.c: 12176: use LINE_MAX for max conf file line size 12177: [da116cb8853d] 12178: 12179: * pathnames.h.in: 12180: add _PATH_LDAP_SECRET 12181: [128b04ecfab7] 12182: 12183: * README.LDAP: 12184: Mention rootbinddn Give example ou=SUDOers container 12185: [852edc69bd1c] 12186: 12187: 2005-06-25 Todd C. Miller <Todd.Miller@courtesan.com> 12188: 12189: * INSTALL, configure, configure.in, ldap.c: 12190: Support rootbinddn in ldap.conf 12191: [1615c91522a1] 12192: 12193: * env.c, sudo.pod, sudoers.pod: 12194: Preserve DISPLAY environment variable by default. 12195: [05f503d5f438] 12196: 12197: * acsite.m4, configure: 12198: set need_lib_prefix=no for all cases; this is safe for LD_PRELOAD 12199: [18a04dea8d05] 12200: 12201: * acsite.m4, configure: 12202: set need_version=no for all cases; this is safe for LD_PRELOAD 12203: [b542560e1a73] 12204: 12205: * aclocal.m4: 12206: typo 12207: [c040df0fcd5a] 12208: 12209: * configure, configure.in: 12210: Add dragonfly 12211: [f13794618636] 12212: 12213: * auth/pam.c: 12214: Fix call to pam_end() when pam_open_session() fails. 12215: [0be47cdfdef1] 12216: 12217: * configure: 12218: regen 12219: [7f5c13b4b800] 12220: 12221: * acsite.m4: 12222: rebuild acsite.m4 from libtool 1.9f libtool.m4 ltoptions.m4 12223: ltsugar.m4 ltversion.m4 12224: [a7ba9fd1a2ab] 12225: 12226: * config.guess, config.sub, ltmain.sh: 12227: merge in local changes: config.guess: o better openbsd support 12228: config.sub: o hiuxmpp support ltmain.sh o remove requirement that 12229: libs must begin with "lib" o don't print a bunch of crap about 12230: library installs o don't run ldconfig 12231: [f4149f2c720f] 12232: 12233: * config.guess, config.sub, ltmain.sh: 12234: libtool 1.9f 12235: [82a534e7121f] 12236: 12237: * configure.in: 12238: Update with autoupdate and make minor changes for libtool 1.9f 12239: [11b5ae5c1428] 12240: 12241: 2005-06-23 Todd C. Miller <Todd.Miller@courtesan.com> 12242: 12243: * parse.c: 12244: don't call sudo_ldap_display_cmnd if ldap not setup 12245: [8bcf6c094ffe] 12246: 12247: * sudo_edit.c, visudo.c: 12248: Move declatation of struct timespec to its own include files for 12249: systems without it since it needs time_t defined. 12250: [b95c333299a0] 12251: 12252: * gettime.c: 12253: Move declatation of struct timespec to its own include files for 12254: systems without it since it needs time_t defined. 12255: [021b4569cc0c] 12256: 12257: * fileops.c: 12258: Move declatation of struct timespec to its own include files for 12259: systems without it since it needs time_t defined. 12260: [dd8573b2ee7d] 12261: 12262: * emul/timespec.h: 12263: Move declatation of struct timespec to its own include files for 12264: systems without it since it needs time_t defined. 12265: [f95137771564] 12266: 12267: * check.c, compat.h: 12268: Move declatation of struct timespec to its own include files for 12269: systems without it since it needs time_t defined. 12270: [2ef2ace8fe85] 12271: 12272: * ldap.c: 12273: Don't set safe_cmnd for the "sudo ALL" case. 12274: [ad7fa9e07da0] 12275: 12276: 2005-05-27 Todd C. Miller <Todd.Miller@courtesan.com> 12277: 12278: * auth/pam.c: 12279: Call pam_open_session() and pam_close_session() to give pam_limits a 12280: chance to run. Idea from Karel Zak. 12281: [fed46d471350] 12282: 12283: 2005-04-24 Todd C. Miller <Todd.Miller@courtesan.com> 12284: 12285: * check.c, sudo.c: 12286: Add explicit cast from mode_t -> u_int in printf to silence warnings 12287: on Solaris 12288: [17bb961fe22d] 12289: 12290: * parse.c: 12291: include grp.h to silence a warning on Solaris 12292: [14386fbab640] 12293: 12294: 2005-04-23 Todd C. Miller <Todd.Miller@courtesan.com> 12295: 12296: * parse.c: 12297: Fix printing of += and -= defaults. 12298: [a667604c56cd] 12299: 12300: 2005-04-17 Todd C. Miller <Todd.Miller@courtesan.com> 12301: 12302: * mon_systrace.c: 12303: Sanity check number of syscall args with argsize. Not really needed 12304: but a little paranoia never hurts. 12305: [6bb455a2c2d6] 12306: 12307: * mon_systrace.c, mon_systrace.h: 12308: Don't do pointer arithmetic on void * Use int, not size_t/ssize_t 12309: for systrace lengths (since it uses int) 12310: [3cafccffcffd] 12311: 12312: 2005-04-16 Todd C. Miller <Todd.Miller@courtesan.com> 12313: 12314: * mon_systrace.c: 12315: Add some memsets for paranoia Fix namespace collsion w/ error Check 12316: rval of decode_args() and update_env() Remove improper setting of 12317: validated variable 12318: [3d385158354d] 12319: 12320: 2005-04-12 Todd C. Miller <Todd.Miller@courtesan.com> 12321: 12322: * parse.c, sudo.c, sudo.h: 12323: In -l mode, only check local sudoers file if def_ignore_sudoers is 12324: not set and call LDAP versions from display_privs() and 12325: display_cmnd() instead of directly from main(). Because of this we 12326: need to defer closing the ldap connection until after -l processing 12327: has ocurred and we must pass in the ldap pointer to display_privs() 12328: and display_cmnd(). 12329: [1dfc2e8c9f2b] 12330: 12331: * ldap.c: 12332: Reorganize LDAP code to better match normal sudoers parsing. 12333: Instead of storing strings for later printing in -l mode we do 12334: another query since the authenticating user and the user being 12335: listed may not be the same (the new -U flag). Also add support for 12336: "sudo -l command". 12337: 12338: There is still a fair bit if duplicated code that can probably be 12339: refactored. 12340: [e9568f19bde5] 12341: 12342: 2005-04-11 Todd C. Miller <Todd.Miller@courtesan.com> 12343: 12344: * ldap.c: 12345: Replace pass variable with do_netgr for better readability. 12346: [1bba841b6e79] 12347: 12348: * ldap.c: 12349: use DPRINTF macro 12350: [02b159b66bb5] 12351: 12352: * ldap.c: 12353: estrdup, not strdup 12354: [22cdee7973c1] 12355: 12356: 2005-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 12357: 12358: * parse.c: 12359: Add macro to test if the tag changed to improve readability. 12360: [4e11b4819556] 12361: 12362: * parse.c: 12363: Avoid printing defaults header if there are no defaults to print... 12364: [41a28627df03] 12365: 12366: * glob.c: 12367: Fix a warning on systems without strlcpy(). 12368: [6814e0f0e4f4] 12369: 12370: * pwutil.c: 12371: Use macros where possible for sudo_grdup() like sudo_pwdup(). 12372: [30f201ff35cd] 12373: 12374: 2005-04-08 Todd C. Miller <Todd.Miller@courtesan.com> 12375: 12376: * utimes.c: 12377: It is possible for tv_usec to hold >= 1000000 usecs so add in 12378: tv_usec / 1000000. 12379: [794ac4d53a65] 12380: 12381: 2005-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 12382: 12383: * auth/kerb5.c: 12384: The component in krb5_principal_get_comp_string() should be 1, not 0 12385: for Heimdal. From Alex Plotnick. 12386: [fefa351c5044] 12387: 12388: 2005-03-29 Todd C. Miller <Todd.Miller@courtesan.com> 12389: 12390: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c, gram.y, 12391: interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c, pwutil.c, 12392: redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c: 12393: Add efree() for consistency with emalloc() et al. Allows us to rely 12394: on C89 behavior (free(NULL) is valid) even on K&R. 12395: [7876bb80d87c] 12396: 12397: * parse.c, sudo.c: 12398: Move initgroups() for -U option into display_privs() so group 12399: matching in sudoers works correctly. 12400: [b074428ad2ca] 12401: 12402: 2005-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 12403: 12404: * ldap.c: 12405: Removed duplicate call to ldap_unbind_s introduced along with 12406: sudo_ldap_close. 12407: [19acc1c20f7c] 12408: 12409: * parse.c: 12410: Add missing space in Defaults printing 12411: [95d2935bf6d4] 12412: 12413: 2005-03-25 Todd C. Miller <Todd.Miller@courtesan.com> 12414: 12415: * pwutil.c: 12416: Sync sudo_pwdup with OpenBSD changes: use macros for size computaton 12417: and string copies. 12418: [6b6b241495e5] 12419: 12420: 2005-03-19 Todd C. Miller <Todd.Miller@courtesan.com> 12421: 12422: * pwutil.c: 12423: Zero old pw_passwd before replacing with version from shadow file. 12424: [3251b349dfe1] 12425: 12426: * configure, configure.in: 12427: Only attempt shadow password detection if PAM is not being used Add 12428: shadow_* variables to make shadow password detection more generic. 12429: [d498a3423ac9] 12430: 12431: * configure.in: 12432: Use OSDEFS for os-specific -D_FOO_BAR stuff rather than CPPFLAGS 12433: [04d55bbd5e35] 12434: 12435: 2005-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 12436: 12437: * sudoers.pod: 12438: use a non-breaking space to avoid a double space after e.g. 12439: [11cdb54bdf7b] 12440: 12441: * sudo.pod: 12442: commna, not colon after e.g. 12443: [8d5875ff72e0] 12444: 12445: 2005-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 12446: 12447: * sudo_noexec.c: 12448: Add __ variants of the exec functions. GNU libc at least uses 12449: __execve() internally. 12450: [d1880473d790] 12451: 12452: * indent.pro: 12453: Match reality a bit more. 12454: [633e3fa875a7] 12455: 12456: * pwutil.c: 12457: Missed piece from rev. 1.6, fix sudo_getpwnam() too. 12458: [128f7b21c2ee] 12459: 12460: * pwutil.c: 12461: Store shadow password after making a local copy of struct passwd in 12462: case normal and shadow routines use the same internal buffer in 12463: libc. 12464: [f806052a6ffc] 12465: 12466: 2005-03-11 Todd C. Miller <Todd.Miller@courtesan.com> 12467: 12468: * alloc.c, logging.c: 12469: Make varargs usage consistent with the rest of the code. 12470: [3d45affc9851] 12471: 12472: 2005-03-10 Todd C. Miller <Todd.Miller@courtesan.com> 12473: 12474: * sudo_noexec.c: 12475: Wrap more of the exec family since on Linux the others do not appear 12476: to go through the normal execve() path. 12477: [8167769b4e19] 12478: 12479: * visudo.c: 12480: make print_unused static like proto says 12481: [ecf10e1bae55] 12482: 12483: * glob.c: 12484: silence a warning on K&R systems 12485: [2e00425f1a5c] 12486: 12487: * alias.c, error.c: 12488: make this build in K&R land 12489: [156f65f8525a] 12490: 12491: * parse.c: 12492: make this build in K&R land 12493: [6fc9276889cb] 12494: 12495: 2005-03-08 Todd C. Miller <Todd.Miller@courtesan.com> 12496: 12497: * toke.c: 12498: regen 12499: [3b349748cd21] 12500: 12501: 2005-03-06 Todd C. Miller <Todd.Miller@courtesan.com> 12502: 12503: * ldap.c: 12504: return(foo) not return foo optimize _atobool() slightly 12505: [11d09d154ed5] 12506: 12507: * ldap.c: 12508: Use TRUE/FALSE 12509: [53999320d98f] 12510: 12511: * ldap.c: 12512: Reformat to match the rest of sudo's code. 12513: [1bd0f2afa0e7] 12514: 12515: * sudo.pod: 12516: I am the primary author 12517: [5d311ecd85c6] 12518: 12519: 2005-02-23 Todd C. Miller <Todd.Miller@courtesan.com> 12520: 12521: * Makefile.in, README, RUNSON: 12522: The RUNSON file is toast--it confused too many people and really 12523: isn't needed in a configure-oriented world. 12524: [96a6ef7bbc08] 12525: 12526: * INSTALL: 12527: alternate -> alternative 12528: [b65015c5d0a2] 12529: 12530: * tgetpass.c: 12531: Use TCSADRAIN instead of TCSAFLUSH since some OSes have issues with 12532: TCSAFLUSH. 12533: [c66b4763ffdc] 12534: 12535: * toke.l: 12536: Allow leading blanks before Defaults and Foo_Alias definitions 12537: [2add513d9277] 12538: 12539: * Makefile.in: 12540: fix rules to build toke.o and gram.o in devel mode 12541: [96cbb414ebd3] 12542: 12543: 2005-02-20 Todd C. Miller <Todd.Miller@courtesan.com> 12544: 12545: * sudoers.pod: 12546: env_keep overrides set_logname 12547: [401877193a15] 12548: 12549: * env.c: 12550: Fix disabling set_logname and make env_keep override set_logname. 12551: [0906e7a5ed93] 12552: 12553: * compat.h, config.h.in, configure, configure.in: 12554: No longer need memmove() 12555: [43bdb6efe3f2] 12556: 12557: * env.c, sudo.c: 12558: Just clean the environment once. This assumes that any further 12559: setenv/putenv will be able to handle the fact that we replaced 12560: environ with our own malloc'd copy but all the implementations I've 12561: checked do. 12562: [11658fe92ba2] 12563: 12564: 2005-02-16 Todd C. Miller <Todd.Miller@courtesan.com> 12565: 12566: * env.c, sudo.c: 12567: In -i mode, base the value of insert_env()'s dupcheck flag on 12568: DID_FOO flags. Move checks for $HOME resetting into rebuild_env() 12569: [8365b0bd0c71] 12570: 12571: 2005-02-13 Todd C. Miller <Todd.Miller@courtesan.com> 12572: 12573: * env.c, sudo.c: 12574: Move setting of user_path, user_shell, user_prompt and prev_user 12575: into init_vars() since user_shell at least is needed there. 12576: [37e22dce66e9] 12577: 12578: 2005-02-12 Todd C. Miller <Todd.Miller@courtesan.com> 12579: 12580: * Makefile.in: 12581: fix devel builds 12582: [9fbb15ef164c] 12583: 12584: * sudo.c: 12585: Fix some printf format mismatches on error. 12586: [ffc1c3f11740] 12587: 12588: * check.c: 12589: Fix some printf format mismatches on error. 12590: [7b3b508adf50] 12591: 12592: * configure, gram.c, toke.c: 12593: regen 12594: [aa76f9d8b02a] 12595: 12596: * Makefile.in, aclocal.m4, alias.c, alloc.c, auth/afs.c, 12597: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c, 12598: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c, 12599: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/securid5.c, 12600: auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, check.c, 12601: closefrom.c, compat.h, configure.in, defaults.c, defaults.h, 12602: emul/utime.h, env.c, error.c, fileops.c, find_path.c, getprogname.c, 12603: getspwuid.c, gettime.c, goodpath.c, gram.y, interfaces.c, 12604: interfaces.h, ldap.c, logging.c, logging.h, match.c, mon_systrace.c, 12605: parse.c, redblack.c, redblack.h, set_perms.c, sigaction.c, 12606: snprintf.c, strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c, 12607: sudo.h, sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.pod, 12608: testsudoers.c, tgetpass.c, toke.l, utimes.c, version.h, visudo.c, 12609: visudo.pod, zero_bytes.c: 12610: Update copyright years. 12611: [0610c3654739] 12612: 12613: * Makefile.binary.in: 12614: Update copyright years. 12615: [d78ffc9f2e2b] 12616: 12617: * LICENSE: 12618: Update copyright years. 12619: [f60473bca4b1] 12620: 12621: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in: 12622: version 1.7 12623: [aa977a544ca1] 12624: 12625: * WHATSNEW: 12626: What's new in sudo 1.7, based on the 1.7 CHANGES entries. 12627: [ecfcf7269c14] 12628: 12629: 2005-02-11 Todd C. Miller <Todd.Miller@courtesan.com> 12630: 12631: * compat.h, logging.h, sudo.h: 12632: Add __printflike and use it with gcc to warn about printf-like 12633: format mismatches 12634: [b192ad4a0548] 12635: 12636: 2005-02-10 Todd C. Miller <Todd.Miller@courtesan.com> 12637: 12638: * CHANGES, ChangeLog: 12639: Replaced CHANGES file with ChangeLog generated from cvs logs 12640: [d9ace9dab98f] 12641: 12642: * set_perms.c: 12643: Use warning/error instead of perror/fatal. 12644: [e33259df7738] 12645: 12646: * config.guess: 12647: Update OpenBSD section 12648: [9d2c23de6801] 12649: 12650: * UPGRADE: 12651: Add upgrading noted for 1.7 12652: [1fb6b6d6df07] 12653: 12654: * env.c, sudo.c, sudoers.pod: 12655: Instead of zeroing out the environment, just prune out entries based 12656: on the env_delete and env_check lists. Base building up the new 12657: environment on the current environment and the variables we removed 12658: initially. 12659: [fc192df8fd15] 12660: 12661: * config.h.in, configure, configure.in, sudo.c: 12662: Set locale to "C" if locales are supported, just to be safe. 12663: [91fbaa98f02e] 12664: 12665: * toke.c, toke.l: 12666: Cast?argument to ctype functions to unsigned char. 12667: [e096b4d65796] 12668: 12669: 2005-02-08 Todd C. Miller <Todd.Miller@courtesan.com> 12670: 12671: * env.c: 12672: correct value for DID_USER 12673: [b5b05d36ec15] 12674: 12675: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: 12676: #include <compat.h> not "compat.h" 12677: [7a0ad9a0ccd7] 12678: 12679: * defaults.c: 12680: Reset the environment by default. 12681: [4ecc6423e0f0] 12682: 12683: * sudo.c: 12684: Alloc an extra slot in NewArgv. Removes the need to malloc an new 12685: vector if execve() fails. 12686: [83dfb6f584a7] 12687: 12688: 2005-02-07 Todd C. Miller <Todd.Miller@courtesan.com> 12689: 12690: * INSTALL, config.h.in, configure, configure.in, sudo.c: 12691: Use execve(2) and wrap the command in sh if we get ENOEXEC. 12692: [c0c6af4e2a21] 12693: 12694: 2005-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 12695: 12696: * sudo_noexec.c: 12697: Only include time.h on systems that lack struct timespec which gets 12698: defind in compat.h (using time_t). 12699: [e373e518b4cb] 12700: 12701: * sudo_noexec.c: 12702: Include time.h for time_t in compat.h for systems w/o struct 12703: timespec. 12704: [a34b5637e458] 12705: 12706: * compat.h, config.h.in, configure, configure.in: 12707: use bcopy on systems w/o memmove 12708: [f835eafd78c6] 12709: 12710: * compat.h: 12711: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1 so limit its 12712: use to gcc >= 2.8. 12713: [1cb9a4e58566] 12714: 12715: * Makefile.in: 12716: Add explicit rule to build sudo_noexec.lo 12717: [df1dfcf8dd77] 12718: 12719: 2005-02-05 Todd C. Miller <Todd.Miller@courtesan.com> 12720: 12721: * INSTALL.configure, Makefile.in: 12722: No longer depend on VPATH; pointed out a bunch of missed 12723: dependencies. 12724: [601a45d4af6b] 12725: 12726: * TROUBLESHOOTING: 12727: Help for PAM when account section is missing 12728: [9b8221256756] 12729: 12730: * auth/pam.c: 12731: Give user a clue when there is a missing "account" section in the 12732: PAM config. 12733: [2529625c0495] 12734: 12735: * auth/pam.c: 12736: Better error handling. 12737: [518c9bda23d8] 12738: 12739: * config.h.in, configure, configure.in: 12740: Move _FOO_SOURCE to CPPFLAGS so it takes effect as early as 12741: possible. Silences a warning about isblank() on linux. 12742: [19c94d7ecdc8] 12743: 12744: * auth/pam.c: 12745: Fix typo (missing comma) that caused an incorrect number of args to 12746: be passed to log_error(). 12747: [0099dfec560f] 12748: 12749: 2005-02-01 Todd C. Miller <Todd.Miller@courtesan.com> 12750: 12751: * pwutil.c: 12752: Don't try to destroy a tree we didn't create. 12753: [d43c4fe03aa4] 12754: 12755: 2005-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 12756: 12757: * alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, 12758: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, 12759: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c, 12760: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c, 12761: compat.h, defaults.c, env.c, error.c, fileops.c, find_path.c, 12762: fnmatch.c, getcwd.c, getprogname.c, getspwuid.c, gettime.c, 12763: goodpath.c, gram.c, gram.y, interfaces.c, ldap.c, logging.c, 12764: match.c, mon_systrace.c, parse.c, pwutil.c, set_perms.c, 12765: sigaction.c, snprintf.c, strcasecmp.c, strerror.c, strlcat.c, 12766: strlcpy.c, sudo.c, sudo_edit.c, sudo_noexec.c, testsudoers.c, 12767: tgetpass.c, toke.c, toke.l, utimes.c, visudo.c, zero_bytes.c: 12768: Add __unused to rcsids 12769: [ad6b4ac45705] 12770: 12771: 2005-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 12772: 12773: * configure, configure.in: 12774: Fix error message when mixing invalid auth types 12775: [68069b3ff5bc] 12776: 12777: * INSTALL: 12778: PAM, AIX auth, BSD auth and login_cap are now on by default if the 12779: OS supports them. 12780: [4e44e9098cf0] 12781: 12782: * auth/sudo_auth.h, config.h.in: 12783: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g 12784: [2d569b43b23e] 12785: 12786: * configure.in: 12787: Better checking for conflicting authentication methods Display the 12788: authentication methods used at the end of configure Rename --with- 12789: authenticate -> --with-aixauth Use --with-aixauth, --with-bsdauth, 12790: --with-pam, --with-logincap by default on systems that support them 12791: unless disabled. Add OSMAJOR variable that replaces old OSREV; now 12792: OSREV has full version number 12793: [a21115b6fe9f] 12794: 12795: 2005-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 12796: 12797: * def_data.c, def_data.in, sudo.c, sudoers.pod: 12798: s/-O/-C/ 12799: [ee73f1b81923] 12800: 12801: 2005-01-14 Todd C. Miller <Todd.Miller@courtesan.com> 12802: 12803: * configure.in: 12804: Replace: test -n "$FOO" || FOO="bar" 12805: 12806: With: : ${FOO='bar'} 12807: [37552d9054fc] 12808: 12809: 2005-01-09 Todd C. Miller <Todd.Miller@courtesan.com> 12810: 12811: * pwutil.c, testsudoers.c, tsgetgrpw.c: 12812: Use function pointers to only call private passwd/group routines 12813: when using a nonstandard passwd/group file. 12814: [215908681dfb] 12815: 12816: 2005-01-06 Todd C. Miller <Todd.Miller@courtesan.com> 12817: 12818: * CHANGES: 12819: sync 12820: [2e55c03f5790] 12821: 12822: * tsgetgrpw.c: 12823: Can't use strtok() since it doesn't handle empty fields so add 12824: getpwent()/getgrent() functions and call those. 12825: [bdaa5b0db70e] 12826: 12827: 2005-01-05 Todd C. Miller <Todd.Miller@courtesan.com> 12828: 12829: * Makefile.in: 12830: Fix dummied out toke.c and gram.c dependencies. 12831: [4b909c8b2ebe] 12832: 12833: * Makefile.in: 12834: Rename PARSESRCS -> GENERATED since it is only used in the clean 12835: target Add devdir variable and use it to specify the path to parser 12836: sources 12837: [f27b3f41ca23] 12838: 12839: * configure: 12840: regen 12841: [22c6435dbd46] 12842: 12843: * configure.in: 12844: Add a devdir variables that defaults to $(srcdir) and is set to . if 12845: --devel was specified. Allows for proper dependecies building the 12846: parser. 12847: [a36d694c6d21] 12848: 12849: * testsudoers.c: 12850: Add support for custom passwd/group files. 12851: [296549ff4b87] 12852: 12853: * Makefile.in: 12854: Build private copy of pwutil.o for testsudoers with MYPW defined so 12855: it uses our own passwd/group routines. 12856: [bafa54ec78ca] 12857: 12858: * visudo.c: 12859: Remove sudo_*{pw,gr}* stubs and add sudo_setspent/sudo_endspent 12860: stubs instead. We can now just use the caching sudo_*{pw,gr}* 12861: functions in pwutil.c Add comment about wanting to call 12862: sudo_endpwent/sudo_endgrent in cleanup() 12863: [7e59d6b5510d] 12864: 12865: * tsgetgrpw.c: 12866: Remove caching; we will just use what is in pwutil.c Use global 12867: buffers for passwd/group structs Rename functions from sudo_* to 12868: my_* 12869: [8c1e068f574c] 12870: 12871: * logging.c, sudo.c: 12872: g/c pwcache_init/pwcache_destroy 12873: [60a24909b947] 12874: 12875: * sudo.h: 12876: Undo last commit and add sudo_setspent and sudo_endspent instead. 12877: [bac80db08296] 12878: 12879: * getspwuid.c, pwutil.c: 12880: Move all but the shadow stuff from getspwuid.c to pwutil.c and 12881: pwcache_get and pwcache_put as they are no longer needed. Also add 12882: preprocessor magic to use private versions of the passwd and group 12883: routines if MYPW is defined (for use by testsudoers). 12884: [a16b8678a426] 12885: 12886: * tsgetgrpw.c: 12887: zero out struct passwd/group before filling it in so if there are 12888: fields we don't handle they end up as 0. 12889: [274cb6a93301] 12890: 12891: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: 12892: Adapt to pwutil.c 12893: [43ebd04c8b82] 12894: 12895: * Makefile.in: 12896: Add tsgetgrpw.c and pwutil.c Rename the *OBJ variables for better 12897: readability. 12898: [7f88c6061e2d] 12899: 12900: * tsgetgrpw.c: 12901: Passwd and group lookup routines for testsudoers that support 12902: alternate passwd and group files. 12903: [d7803101d34e] 12904: 12905: * getspwuid.c, pwutil.c: 12906: Split off pw/gr cache and dup code into its own file. This allows 12907: visudo and testsudoers to use the pw/gr cache too. 12908: [ef333d3ffedf] 12909: 12910: 2005-01-02 Todd C. Miller <Todd.Miller@courtesan.com> 12911: 12912: * parse.c: 12913: Print Defaults info in "sudo -l" output and wrap lines based on the 12914: terminal width. 12915: [e559eae4250e] 12916: 12917: 2005-01-01 Todd C. Miller <Todd.Miller@courtesan.com> 12918: 12919: * match.c, testsudoers.c, visudo.c: 12920: Only check group vector in usergr_matches() if we are matching the 12921: invoking or list user. Always check the group members, even if 12922: there was a group vector. 12923: [d0c7ceb2a041] 12924: 12925: 2004-12-17 Todd C. Miller <Todd.Miller@courtesan.com> 12926: 12927: * LICENSE, Makefile.in, fnmatch.3: 12928: No longer bundle fnmatch.3 12929: [72db4a4ff4e1] 12930: 12931: * CHANGES, TODO: 12932: checkpoint 12933: [e92781bfd99c] 12934: 12935: 2004-12-16 Todd C. Miller <Todd.Miller@courtesan.com> 12936: 12937: * sudo.c: 12938: sort usage 12939: [15e3b876ec2c] 12940: 12941: * sudo.pod: 12942: Sort command line options 12943: [c1fa56584bc4] 12944: 12945: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c, sudo.c, 12946: sudo.pod, sudoers.pod: 12947: Add closefrom sudoers option to start closing at a point other than 12948: 3. Add closefrom_override sudoers option and -C sudo flag to allow 12949: the user to specify a different closefrom starting point. 12950: [370652b099d1] 12951: 12952: * pathnames.h.in: 12953: Add _PATH_DEVNULL for those without it. 12954: [0c4c3e0ceb8b] 12955: 12956: * LICENSE: 12957: no more UCB strcasecmp 12958: [397a6298e07f] 12959: 12960: * strcasecmp.c: 12961: replace BSD licensed one with version derived from pdksh 12962: [d7cfda8c57a2] 12963: 12964: 2004-12-10 Todd C. Miller <Todd.Miller@courtesan.com> 12965: 12966: * sudo.c: 12967: Fix last commit. 12968: [7afb9a180532] 12969: 12970: * sudo.c: 12971: Make sure stdin, stdout and stderr are open and dup them to 12972: /dev/null if not. 12973: [590f387068bd] 12974: 12975: 2004-12-03 Todd C. Miller <Todd.Miller@courtesan.com> 12976: 12977: * ldap.c, mon_systrace.c, sudo.c, sudo.h: 12978: add sudo_ldap_close 12979: [4273a36765a7] 12980: 12981: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c: 12982: Use TIME_WITH_SYS_TIME 12983: [c32b59bf15fb] 12984: 12985: * config.h.in, configure, configure.in: 12986: Add TIME_WITH_SYS_TIME_H 12987: [57cb146f451d] 12988: 12989: 2004-12-02 Todd C. Miller <Todd.Miller@courtesan.com> 12990: 12991: * env.c: 12992: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE being set 12993: unconditionally on darwin. From Toby Peterson. 12994: [d69959681c87] 12995: 12996: * getspwuid.c: 12997: Check rbinsert() return value. In the case of faked up entries 12998: there is usually a negative response cached that we need to 12999: overwrite. 13000: 13001: In pwfree() don't try to zero out a NULL pw_passwd pointer. 13002: [00b32d1a48c1] 13003: 13004: * mon_systrace.c: 13005: Use the double fork trick to avoid the monitor process being waited 13006: for by the main program run through sudo. 13007: [e0ce556712ff] 13008: 13009: 2004-11-29 Todd C. Miller <Todd.Miller@courtesan.com> 13010: 13011: * sudo.c: 13012: Call initgroups() in -U mode so group matches work normally. 13013: [2235bea15283] 13014: 13015: * def_data.h, mkdefaults: 13016: Don't print a trailing comma for the last entry in enum def_tupple 13017: [c43a96bb31df] 13018: 13019: 2004-11-28 Todd C. Miller <Todd.Miller@courtesan.com> 13020: 13021: * sudoers.cat, sudoers.man.in, sudoers.pod: 13022: Mention values when lecture, listpw and verifypw are used in boolean 13023: context. 13024: [a0b5c0abaccf] 13025: 13026: * def_data.c, def_data.in: 13027: verifypw when used in a boolean TRUE context should be "all", not 13028: "any". 13029: [2eb076ddd5e2] 13030: 13031: 2004-11-26 Todd C. Miller <Todd.Miller@courtesan.com> 13032: 13033: * def_data.in, defaults.c: 13034: Allow tuples that can be used as booleans to be used as boolean 13035: TRUE. In this case the 2nd possible value of the tuple is used for 13036: TRUE. 13037: [bd99aa77e88b] 13038: 13039: 2004-11-25 Todd C. Miller <Todd.Miller@courtesan.com> 13040: 13041: * configure, configure.in: 13042: Correct the test for 2-parameter timespecsub 13043: [d41c9cb26b97] 13044: 13045: * sudo.h: 13046: Add strub struct definitions for passwd, timeval and timespec 13047: [c4ce5c43d8c5] 13048: 13049: * config.h.in, configure, configure.in, sudo_edit.c, visudo.c: 13050: Add check for 2-argument form of timespecsub (FreeBSD and BSD/OS) 13051: and fix a typo in the gettimeofday check. 13052: [8ac9893057ce] 13053: 13054: 2004-11-24 Todd C. Miller <Todd.Miller@courtesan.com> 13055: 13056: * match.c, testsudoers.c: 13057: Deal with user_stat being NULL as it is for visudo and testsudoers. 13058: [3605a6ff64d0] 13059: 13060: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: 13061: Add -U option to use in conjunction with -l instead of -u. Add 13062: support for "sudo -l command" to test a specific command. 13063: [99638789d415] 13064: 13065: * gram.c, gram.y, sudo.c: 13066: Set safe_cmnd after sudoers_lookup() if it has not been set. 13067: Previously it was set by sudo "ALL" in the parser but at that point 13068: the fully-qualified pathname has not yet been found. 13069: [ac30d98f8225] 13070: 13071: 2004-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 13072: 13073: * parse.c, testsudoers.c: 13074: Correctly handle multiple privileges per userspec and runas 13075: inheritence. 13076: [a98a965181af] 13077: 13078: 2004-11-21 Todd C. Miller <Todd.Miller@courtesan.com> 13079: 13080: * defaults.c: 13081: Zero out sd_un for each entry in sudo_defs_table in init_defaults. 13082: [031d3cd4a848] 13083: 13084: 2004-11-19 Todd C. Miller <Todd.Miller@courtesan.com> 13085: 13086: * toke.c, toke.l: 13087: make per-command defaults work with sudoedit 13088: [e56fe33db916] 13089: 13090: * ldap.c, parse.c, sudo.c, sudo.h: 13091: Remove the FLAG_NOPASS, FLAG_NOEXEC and FLAG_MONITOR flags. 13092: Instead, we just set the approriate defaults variable. 13093: [756eeecc1d86] 13094: 13095: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod: 13096: Document per-command Defaults. 13097: [92a0f84b91c1] 13098: 13099: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c, 13100: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: 13101: Add support for command-specific Defaults entries. E.g. 13102: Defaults!/usr/bin/vi noexec 13103: [be3d52bf01cf] 13104: 13105: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: 13106: Change an occurence of user_matches() -> runas_matches() missed 13107: previously runas_matches(), host_matches() and cmnd_matches() only 13108: really need to pass in a list of members. user_matches() still 13109: needs to pass in a passwd struct because of "sudo -l" 13110: [833b22fc6fa0] 13111: 13112: * parse.c: 13113: Check def_authenticate, def_noexec and def_monitor when setting 13114: return flags. XXX May be better to just set the defaults directly 13115: and get rid of those flags. 13116: [b6db22b59d69] 13117: 13118: * alias.c, alloc.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, 13119: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, 13120: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c, 13121: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, check.c, closefrom.c, 13122: defaults.c, env.c, error.c, fileops.c, find_path.c, fnmatch.c, 13123: getcwd.c, getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c, 13124: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c, 13125: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c, 13126: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo_edit.c, 13127: sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c, toke.l, utimes.c, 13128: visudo.c, zero_bytes.c: 13129: Use: #include <config.h> Not: #include "config.h" That way we get 13130: the correct config.h when build dir != src dir 13131: [97e5670a442b] 13132: 13133: * Makefile.in: 13134: Back out part of rev 1.263; fix -I order 13135: [197ea01cad5d] 13136: 13137: * toke.c, toke.l: 13138: More robust parsing if #include; could be much better still. 13139: [31bc3cd8f045] 13140: 13141: * sudo_edit.c, visudo.c: 13142: Make arg splitting in visudo and sudoedit consistent. 13143: [7bc74485f246] 13144: 13145: * Makefile.in, alias.c, gram.c, gram.y, parse.h: 13146: Split alias routines out into their own file. 13147: [d90f633cf9ae] 13148: 13149: * error.h: 13150: __attribute__ is already defined in compat.h 13151: [676ed3fe9203] 13152: 13153: * visudo.c: 13154: quit() should not be __noreturn__ as it is non-void on some 13155: platforms. 13156: [e528c2b6ba10] 13157: 13158: * auth/fwtk.c, auth/rfc1938.c, auth/securid.c, auth/securid5.c: 13159: Add local error/warning functions like err/warn but that call an 13160: additional cleanup routine in the error case. This means we no 13161: longer need to compile a special version of alloc.o for visudo. 13162: [e78e8aae882e] 13163: 13164: * parse.h: 13165: Clarify comments about the data structures 13166: [ae894e266701] 13167: 13168: 2004-11-18 Todd C. Miller <Todd.Miller@courtesan.com> 13169: 13170: * visudo.c: 13171: Add support for VISUAL and EDITOR containing command line args. If 13172: env_editor is not set any args in VISUAL and EDITOR are ignored. 13173: Arguments are also now supported in def_editor. 13174: [ff7303b8e298] 13175: 13176: 2004-11-17 Todd C. Miller <Todd.Miller@courtesan.com> 13177: 13178: * parse.h: 13179: alias_matches() is no more 13180: [b59825e28084] 13181: 13182: * CHANGES, TODO: 13183: sync 13184: [2b8f5f63c1de] 13185: 13186: * Makefile.in: 13187: When regenerating the parser, don't replace gram.h unless it has 13188: changed. 13189: [819949668018] 13190: 13191: * Makefile.in: 13192: remove Makefile.binary for distclean 13193: [351eec8d00b2] 13194: 13195: * env.c: 13196: Preserve KRB5CCNAME in zero_env() and add a paranoia check to make 13197: sure we can't overflow new_env. 13198: [3284d17b9c6d] 13199: 13200: * sudo_edit.c: 13201: paranoia when stripping trailing slashes from tempdir. 13202: [012f1aa2b81f] 13203: 13204: * sudo.c: 13205: Set user_ngroups to 0 if getgroups() returns an error. 13206: [c46d43e9449a] 13207: 13208: 2004-11-16 Todd C. Miller <Todd.Miller@courtesan.com> 13209: 13210: * config.h.in, configure, configure.in, sudo.c: 13211: Add configure check for getgroups() 13212: [5d8a214e2cef] 13213: 13214: * ldap.c: 13215: Use supplementary group vector in struct sudo_user. 13216: [3d0c463c034d] 13217: 13218: * match.c: 13219: Only do string comparisons on the group members if there is no 13220: supplemental group list. 13221: [be1c8362f7ef] 13222: 13223: * CHANGES, TODO: 13224: sync 13225: [db188bc5b975] 13226: 13227: * sudo_edit.c: 13228: On Digital UNIX _PATH_VAR_TMP doesn't end with a trailing slash so 13229: chop off any trailing slashes we see and add an explicit one. 13230: [e1b477dafee1] 13231: 13232: * match.c: 13233: remove bogus XXX comment 13234: [8aecb8a28d40] 13235: 13236: * match.c: 13237: Get rid of alias_matches and correctly fall through to the non-alias 13238: cases when there is no alias with the specified name. 13239: [2cd555246f09] 13240: 13241: * getspwuid.c: 13242: Cache non-existent passwd/group entries too. 13243: [8de9a467d271] 13244: 13245: * gram.c: 13246: regen 13247: [9ece18c58f36] 13248: 13249: * getspwuid.c: 13250: fix typo 13251: [9a7ae371eac1] 13252: 13253: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c, 13254: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c: 13255: Implement group caching and use the passwd and group caches 13256: throughout. 13257: [f1d8c5015169] 13258: 13259: 2004-11-15 Todd C. Miller <Todd.Miller@courtesan.com> 13260: 13261: * match.c: 13262: Properly negate the return value of alias_matches() when 13263: appropriate. 13264: [ce59c4ce77ad] 13265: 13266: * match.c: 13267: Make hostname_matches() return TRUE for a match, else FALSE like the 13268: caller expects. 13269: [1dc03902d3a2] 13270: 13271: * Makefile.in: 13272: Add missing dependencies on gram.h 13273: [4f94bbb1d50c] 13274: 13275: * match.c: 13276: Use runas_matches in alias_matches() now that we have it. 13277: [284d22e91178] 13278: 13279: * parse.c, parse.h: 13280: Expand aliases in "sudo -l" mode 13281: [f67a38b79c44] 13282: 13283: * gram.y, match.c: 13284: Use ALIAS for the member type when storing an alias instead of 13285: HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since match.c relies on the 13286: more generic type. Expand runas_matches instead of calling 13287: user_matches() inside of it since user_matches() looks up 13288: USERALIASes, not RUNASALIASes. 13289: [52004d75232b] 13290: 13291: * CHANGES, getspwuid.c: 13292: Paranoia; zero out pw_passwd before freeing passwd entry. 13293: [bd1b22638f00] 13294: 13295: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure, 13296: configure.in, defaults.c, emul/err.h, env.c, err.c, error.c, 13297: error.h, find_path.c, interfaces.c, logging.c, mon_systrace.c, 13298: sudo.c, sudo.h, sudo_edit.c, testsudoers.c, visudo.c: 13299: Add local error/warning functions like err/warn but that call an 13300: additional cleanup routine in the error case. This means we no 13301: longer need to compile a special version of alloc.o for visudo. 13302: [25000b676cfe] 13303: 13304: * match.c: 13305: Use userpw_matches() to compare usernames, not strcmp(), since the 13306: latter checks for "#uid". 13307: [fcbe4b859f66] 13308: 13309: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: 13310: Cache passwd db entries in 2 reb-black trees; one indexed by uid, 13311: the other by user name. The data returned from the cache should be 13312: considered read-only and is destroyed by sudo_endpwent(). 13313: [ee2418ff3f86] 13314: 13315: * match.c: 13316: add cast to uid_t 13317: [eb6415302d84] 13318: 13319: * gram.y: 13320: missing free in alias_destroy 13321: [572ecb680ad8] 13322: 13323: * redblack.c: 13324: Can't use rbapply() for rbdestroy since the destructor is passed a 13325: data pointer, not a node pointer. 13326: [11ce713830c0] 13327: 13328: * getspwuid.c, logging.c, sudo.c, sudo.h: 13329: Create and use private versions of setpwent() and endpwent() that 13330: set/end the shadow password file too. 13331: [616bc76d23bf] 13332: 13333: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c, visudo.c: 13334: Store aliases in a red-black tree. 13335: [ce017d540416] 13336: 13337: * Makefile.in, redblack.c, redblack.h: 13338: red-black tree implementation 13339: [cd5586e8f48b] 13340: 13341: * visudo.c: 13342: Edit all sudoers file if there were unused or undefined aliases and 13343: we are in strict mode. 13344: [b6d5f5bb7262] 13345: 13346: 2004-11-12 Todd C. Miller <Todd.Miller@courtesan.com> 13347: 13348: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c, 13349: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c: 13350: Bring back the "secure_path" Defaults option now that Defaults take 13351: effect before the path is searched. 13352: [2e52c0e27606] 13353: 13354: 2004-11-11 Todd C. Miller <Todd.Miller@courtesan.com> 13355: 13356: * logging.c, parse.c: 13357: A user can always list their own entries, even with -u. Better error 13358: message when failing to list another user's entries. 13359: [e2e24deb0071] 13360: 13361: * parse.c, sudo.c, sudo.h: 13362: The syntax to list another user's entries is now "-u otheruser -l". 13363: Only root or users with sudo "ALL" may list other user's entries. 13364: [3c0657e8f5fe] 13365: 13366: * sudo.cat, sudo.man.in, sudo.pod: 13367: Update env variable info in SECURITY NOTES 13368: [299716071024] 13369: 13370: * env.c: 13371: strip CDPATH too 13372: [9b97643b26f9] 13373: 13374: * env.c: 13375: strip exported bash functions from the environment. 13376: [9e5090c8284f] 13377: 13378: 2004-10-27 Todd C. Miller <Todd.Miller@courtesan.com> 13379: 13380: * sudo.c: 13381: Only reset sudo_user.pw based on SUDO_USER environment variables for 13382: real commands and sudoedit. This avoids a confusing message when a 13383: user tries "sudo -l" or "sudo -v" and is denied. 13384: [3ea6d0053274] 13385: 13386: * gram.c, gram.y, parse.h: 13387: Extend LIST_APPEND to deal with appending lists too 13388: [d963e42f622f] 13389: 13390: 2004-10-26 Todd C. Miller <Todd.Miller@courtesan.com> 13391: 13392: * logging.c: 13393: Convert some bitwise AND to ISSET 13394: [130dc40d268e] 13395: 13396: * lex.yy.c, toke.c: 13397: toke.c replaces lex.yy.c 13398: [048858df79e7] 13399: 13400: * CHANGES, TODO: 13401: sync 13402: [d19e7abf251c] 13403: 13404: * BUGS: 13405: new parser fixes most of the outstanding bugs 13406: [0891f66e3758] 13407: 13408: * configure: 13409: regen 13410: [1a3358cc7283] 13411: 13412: * visudo.c: 13413: Rework for the new parser. Now checks for unused aliases in sudoers. 13414: [ad462ede3094] 13415: 13416: * testsudoers.c: 13417: Rewrite for the new parser. Now supports a -d flag (dump) and adds 13418: a -h flag (host). It now defaults to the local hostname unless 13419: otherwise specified. 13420: [1b69685cc601] 13421: 13422: * sudo.h: 13423: Add new prototypes. Remove NOMATCH/UNSPEC (now in parse.h) 13424: [2e4fb3abfef0] 13425: 13426: * sudo.c: 13427: Update for new parse. We now call find_path() *after* we have 13428: updated the global defaults based on sudoers. Also adds support for 13429: listing other user's privs if you are root. 13430: [cf3db9fc3024] 13431: 13432: * mon_systrace.c: 13433: Working LDAP support; also remove a now-unneeded rewind(). 13434: [649ecf1baf6b] 13435: 13436: * logging.c, logging.h: 13437: Add NO_STDERR flag. 13438: [6cb935af94e0] 13439: 13440: * ldap.c: 13441: Split sudo_ldap_check() into three pieces: sudo_ldap_open(), 13442: udo_ldap_update_defaults() and sudo_ldap_check(). This allows us to 13443: connecto to LDAP, apply the default options, find the command in the 13444: user's path, and then check whether the user is allowed to run it. 13445: The important thing here is that the default runas user may be 13446: specified as a default option and that needs to be set before we 13447: search for the command. 13448: [fc0426abc6f1] 13449: 13450: * ldap.c: 13451: Add casts to unsigned char for isspace() to quiet a gcc warning. 13452: [e5358e3df439] 13453: 13454: * defaults.h: 13455: Add prototype for update_defaults() 13456: [564dac3db74e] 13457: 13458: * defaults.c: 13459: Don't warn about line numbers now that we operate on a set of data 13460: structures (or LDAP) and not a file. 13461: [bcd9ffb9b67c] 13462: 13463: * config.h.in: 13464: No long use lsearch() 13465: [9d048c587319] 13466: 13467: * Makefile.in: 13468: Update for new and changed file names. 13469: [6f424a7c4515] 13470: 13471: * LICENSE: 13472: no more BSD lsearch.c 13473: [463a96d89026] 13474: 13475: * match.c: 13476: foo_matches() routines now live in match.c Added user_matches(), 13477: runas_matches(), host_matches(), cmnd_matches() and alias_matches() 13478: that operate on the parsed sudoers file. 13479: [b14da8a0567e] 13480: 13481: * parse.lex, toke.l: 13482: Move parse.lex -> toke.l Rename buffer_frob() -> switch_buffer() 13483: WORD no longer needs to exclude '@' kill yywrap() 13484: [a922294eb7b7] 13485: 13486: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.c, 13487: sudo.tab.h: 13488: Rewritten parser that converts sudoers into a set of data 13489: structures. This eliminates ordering issues and makes it possible to 13490: apply sudoers Defaults entries before searching for the command. 13491: [30d2ec4d203c] 13492: 13493: * configure.in, emul/search.h, lsearch.c: 13494: We won't be using lsearch() any longer. 13495: [29c4d54bfac0] 13496: 13497: * ldap.c: 13498: sudo should not send mail if someone who runs 'sudo -l' has no 13499: entry. 13500: [6fc27a69fd9c] 13501: 13502: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 13503: visudo.man.in: 13504: regen 13505: [8166347917f3] 13506: 13507: * visudo.pod: 13508: Update warnings to match new visudo 13509: [004c0766798f] 13510: 13511: * sudoers.pod: 13512: The new parser doesn't have the old ordering constraints. 13513: [ffd43bd08661] 13514: 13515: * sudo.pod: 13516: Document that -l now takes an optional username argument 13517: [278f9557de8b] 13518: 13519: 2004-10-25 Todd C. Miller <Todd.Miller@courtesan.com> 13520: 13521: * RUNSON: 13522: AIX 5.2.0.0 works 13523: [523acd29d858] 13524: 13525: * ldap.c: 13526: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS instead. Fixes 13527: a compilation problem with Solaris 9's native LDAP. 13528: 13529: Set FLAG_MONITOR when needed. 13530: [35824ade672d] 13531: 13532: 2004-10-23 Todd C. Miller <Todd.Miller@courtesan.com> 13533: 13534: * mon_systrace.c: 13535: Call sudo_goodpath() *after* changing the cwd to match the traced 13536: process. Fixes relative paths. 13537: [12ee111d0ad7] 13538: 13539: 2004-10-21 Todd C. Miller <Todd.Miller@courtesan.com> 13540: 13541: * testsudoers.c: 13542: Kill set_perms() stub--it is no longer needed. 13543: [116ed702935d] 13544: 13545: 2004-10-13 Todd C. Miller <Todd.Miller@courtesan.com> 13546: 13547: * sudoers.cat, sudoers.man.in, sudoers.pod: 13548: stay_setuid now requires set_reuid() or setresuid() 13549: [8511f67e25d5] 13550: 13551: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure, 13552: configure.in, set_perms.c, sudo.c, sudo.h: 13553: Kill use of POSIX saved uids; they aren't worth bothering with. 13554: [b3b1f19f18c1] 13555: 13556: 2004-10-07 Todd C. Miller <Todd.Miller@courtesan.com> 13557: 13558: * glob.c: 13559: remove call to issetugid() 13560: [63f2e492c08f] 13561: 13562: * sudoers.cat, sudoers.man.in, sudoers.pod: 13563: Remove warning about wildcards. Now that we use glob() the bug is 13564: fixed. 13565: [b15729d32266] 13566: 13567: * parse.c: 13568: Use glob(3) instead of fnmatch(3) for matching pathnames and stat 13569: each result that matches the basename of the user's command. This 13570: makes "cd /usr/bin ; sudo ./blah" work when sudoers allows 13571: /usr/bin/blah. Fixes bug #143. 13572: [e31eb6310340] 13573: 13574: * config.h.in, configure, configure.in: 13575: Define HAVE_EXTENDED_GLOB for extended glob (GLOB_TILDE and 13576: GLOB_BRACE) 13577: [677ed6661e17] 13578: 13579: * config.h.in, configure, configure.in: 13580: Check for a glob() that supports GLOB_BRACE and GLOB_TILDE 13581: [aaa2329dd266] 13582: 13583: * LICENSE: 13584: reference glob 13585: [bedc9a923423] 13586: 13587: * glob.c: 13588: 4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions 13589: removed. 13590: [81799451473c] 13591: 13592: * emul/glob.h: 13593: 4.4BSD glob(3) with fixes from OpenBSD and some unneeded extensions 13594: removed. 13595: [0335cf31fb1e] 13596: 13597: 2004-10-05 Todd C. Miller <Todd.Miller@courtesan.com> 13598: 13599: * mon_systrace.c: 13600: Just return if STRIOCINJECT or STRIOCREPLACE fail. It probably 13601: means we are out of space in the stack gap... 13602: [5b02b702021e] 13603: 13604: * CHANGES: 13605: sync 13606: [be3826273e56] 13607: 13608: * mon_systrace.c: 13609: Take a stab at ldap sudoers support here. 13610: [9d023695b0de] 13611: 13612: * mon_systrace.c, mon_systrace.h: 13613: Detach from tracee on SIGHUP, SIGINT and SIGTERM. Now "sudo reboot" 13614: doesn't cause reboot to inadvertanly kill itself. 13615: [d4aab2365610] 13616: 13617: * mon_systrace.c: 13618: put "monitor" in the proctitle, not "systrace" 13619: [9a9025767d86] 13620: 13621: * mon_systrace.c: 13622: When modifying the environment, don't replace envp when we can get 13623: away with just rewriting pointers in the traced process. 13624: [c03622f7a2e2] 13625: 13626: * mon_systrace.c, mon_systrace.h: 13627: Add environment updating via STRIOCINJECT (if available). 13628: [037291016870] 13629: 13630: * sudoers.cat, sudoers.man.in: 13631: regen 13632: [869acc511046] 13633: 13634: 2004-10-04 Todd C. Miller <Todd.Miller@courtesan.com> 13635: 13636: * lex.yy.c: 13637: regen 13638: [4e61a9bd3c97] 13639: 13640: * parse.lex: 13641: Fix bug introduced in unput() removal; want yyless(0) not yyless(1) 13642: [b70d7bd6e147] 13643: 13644: * mon_systrace.c: 13645: Include file is now mon_systrace.h 13646: [ead4e36d92ae] 13647: 13648: * Makefile.in, configure, configure.in, def_data.c, def_data.h, 13649: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, 13650: sudo.c, sudo.h, sudo.tab.c, sudo.tab.h, sudoers.pod: 13651: No longer call it tracing, it is now "monitoring" which should be 13652: more a obvious name to non-hackers. 13653: [aa811ded0789] 13654: 13655: 2004-10-01 Todd C. Miller <Todd.Miller@courtesan.com> 13656: 13657: * mon_systrace.c, mon_systrace.h: 13658: Fix some XXX 13659: [a271072dacc6] 13660: 13661: * mon_systrace.c, mon_systrace.h: 13662: No need to include syscall.h, use 1024 as the max # of entries (the 13663: max that systrace(4) allows). 13664: 13665: Only need to use SYSTR_POLICY_ASSIGN once 13666: 13667: Change check_syscall() -> find_handler() and have it return the 13668: handler instead of just running it. We need this since handler now 13669: have two parts: one part that generates and answer and another that 13670: gets called after the answer is accepted (to do logging). 13671: 13672: Add some missing check_exec for emul execv 13673: [a89d243f0525] 13674: 13675: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: 13676: Add $Sudo$ tags. 13677: [6f3fedb0daba] 13678: 13679: * config.h.in: 13680: Add missing HAVE_LINUX_SYSTRACE_H 13681: [ff75ab7bfc53] 13682: 13683: * Makefile.in: 13684: add trace_systrace.o dependency 13685: [88a408668ab2] 13686: 13687: 2004-09-30 Todd C. Miller <Todd.Miller@courtesan.com> 13688: 13689: * configure, configure.in: 13690: Also look for systrace.h in /usr/include/linux 13691: [98b98b436cf3] 13692: 13693: * mon_systrace.c, mon_systrace.h: 13694: Move all struct defs and prototypes into trace_systrace.h and mark 13695: all but systace_attach() static. 13696: [85511253b570] 13697: 13698: * mon_systrace.c, mon_systrace.h: 13699: Add support for tracing emulations. At the moment, all emulations 13700: are compiled in. It might make sense to #ifdef them in the future, 13701: though this impeeds readability. 13702: [87bb50abf277] 13703: 13704: * Makefile.in, configure, configure.in: 13705: rename systrace.c -> trace_systrace.c 13706: [31cfa4407d93] 13707: 13708: * parse.yacc, sudo.tab.c: 13709: Allow this to build with a K&R compiler again 13710: [32876af5bb98] 13711: 13712: * TODO: 13713: sync 13714: [46865bd70f7c] 13715: 13716: * compat.h, sudo.c, visudo.c: 13717: Use __attribute__((__noreturn__)) 13718: [65bbad71fe89] 13719: 13720: * visudo.c: 13721: Exit() takes a negative value to indicate it was not called via 13722: signal. 13723: [b93032ed7b60] 13724: 13725: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 13726: visudo.man.in: 13727: regen 13728: [45bcf4661558] 13729: 13730: * Makefile.in, visudo.c: 13731: Define Err() and Errx() that are like err() and errx() but call 13732: Exit() instead of exit(). Build private copy of alloc.o for visudo 13733: that calls Err() and Errx(). 13734: [c6d02bf42edd] 13735: 13736: 2004-09-29 Todd C. Miller <Todd.Miller@courtesan.com> 13737: 13738: * lex.yy.c, sudo.tab.c: 13739: regen 13740: [39de7e7c59da] 13741: 13742: * CHANGES: 13743: sync 13744: [ba481d9ed1aa] 13745: 13746: * visudo.c: 13747: Overhaul visudo for editing multiple files: o visudo has been 13748: broken out into functions (more work needed here) o each file is 13749: now edited before sudoers is re-parsed o if a #include line is 13750: added that file will be edited too 13751: 13752: TODO: o cleanup temp files when exiting via err() or errx() o 13753: continue breaking things out into separate functions 13754: [80c35cf534eb] 13755: 13756: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: 13757: Add keepopen arg to open_sudoers that open_sudoers can use to 13758: indicate to the caller that the fd should not be closed when it is 13759: done with it. To be used by visudo to keep locked fds from being 13760: closed prematurely (and thus losing the lock). 13761: [f330fe632470] 13762: 13763: * parse.yacc, sudo.c: 13764: Add errorfile global that contains the name of the file that caused 13765: the error. 13766: [98079c7a37ed] 13767: 13768: * parse.lex: 13769: return COMMENT to yacc grammar for a #include line 13770: [2024a8de4fa8] 13771: 13772: * parse.lex: 13773: Remove us of unput() in favor of yyless() which is cheaper. 13774: [c61291902beb] 13775: 13776: * parse.yacc: 13777: Allow an empty sudoers file. 13778: [62fb111db2e7] 13779: 13780: 2004-09-28 Todd C. Miller <Todd.Miller@courtesan.com> 13781: 13782: * mon_systrace.c: 13783: Rewind sudoers_fp now that sudoers_lookup() doesn't do it for us. 13784: [9e15869ef597] 13785: 13786: * lex.yy.c, sudo.tab.c: 13787: regen 13788: [c29bdd43bfad] 13789: 13790: * visudo.c: 13791: Do signal setup before calling edit_sudoers(). Don't shadow the 13792: "quiet" global. 13793: [74252efd09ff] 13794: 13795: * visudo.c: 13796: If a sudoers file includes other files, edit those too. Does not yes 13797: deal with creating the new includes files itself. 13798: [06af7b9c173f] 13799: 13800: * testsudoers.c: 13801: init_parser now takes a path 13802: [b5ee186eb192] 13803: 13804: * parse.c, parse.h, parse.lex, parse.yacc: 13805: More scaffolding for dealing with multiple sudoers files: o 13806: init_parser() now takes a path used to populate the sudoers global 13807: o the sudoers global is used to print the correct file in yyerror() 13808: o when switching to a new sudoers file, perserve old file name and 13809: line number 13810: [d9be4970b8bd] 13811: 13812: * Makefile.in, pathnames.h.in: 13813: Kill _PATH_SUDOERS_TMP; it is not meaningful now that we can have 13814: multiple sudoers files. 13815: [6ccc4e921c43] 13816: 13817: * parse.c, sudo.c: 13818: Rewind sudoers_fp in open_sudoers() instead of sudoers_lookup() so 13819: we start at the right file position when reading include files. 13820: [91fcb961e7a4] 13821: 13822: * sudoers.pod: 13823: document #include 13824: [fbb92a25a726] 13825: 13826: * lex.yy.c: 13827: regen 13828: [50cd7a4c9dff] 13829: 13830: * parse.lex: 13831: Add max depth of 128 for the include stack to avoid loops. 13832: 13833: Since yyerror() doesn't stop parsing, pass return values back to 13834: yylex and call yyterminate() on error. 13835: [e79dbffb729d] 13836: 13837: 2004-09-27 Todd C. Miller <Todd.Miller@courtesan.com> 13838: 13839: * sudoers.pod: 13840: document tracing 13841: [165a467eadd8] 13842: 13843: * sudo.pod: 13844: Mention PREVENTING SHELL ESCAPES section of sudoers man page 13845: [3217ccecd834] 13846: 13847: * lex.yy.c, sudo.tab.c: 13848: regen 13849: [fbd58d1d3a76] 13850: 13851: * parse.lex: 13852: Add support for #include in sudoers (visudo support TBD) 13853: [a78015ca81af] 13854: 13855: * parse.yacc: 13856: make yyerror()'s argument const 13857: [7d8e168c019a] 13858: 13859: * testsudoers.c, visudo.c: 13860: Add open_sudoers() stubs. 13861: [087466787198] 13862: 13863: * sudo.c, sudo.h: 13864: Rename check_sudoers() open_sudoers() and make it return a FILE * 13865: [142fc511fc65] 13866: 13867: 2004-09-26 Todd C. Miller <Todd.Miller@courtesan.com> 13868: 13869: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in, 13870: version.h: 13871: Crank version 13872: [1adc3f839480] 13873: 13874: * Makefile.in, sudo.psf: 13875: Better HP-UX depot construction 13876: [2d952b000e63] 13877: 13878: 2004-09-25 Todd C. Miller <Todd.Miller@courtesan.com> 13879: 13880: * mon_systrace.c: 13881: o Made children global so check_exec() can lookup a child. o 13882: Replaced uid in struct childinfo with struct passwd * (for runas) o 13883: new_child() now takes a parent pid so the runas info can be 13884: inherited o Added find_child() to lookup a child by its pid o 13885: update_child() now fills in a struct passwd o Converted the big 13886: if/else mess in set_policy to a switch o Syscalls that change uid 13887: are now "ask" so we get SYSTR_MSG_UGID events 13888: [29b9ea3f09a3] 13889: 13890: * getspwuid.c: 13891: Add flag to sudo_pwdup that indicates whether or not to lookup the 13892: shadow password. Will be used to a struct passwd that has the 13893: shadow password already filled in. 13894: [e19d43dd7238] 13895: 13896: * mon_systrace.c: 13897: add missing increment of addr in read_string() 13898: [f9eb0f060cb6] 13899: 13900: * mon_systrace.c: 13901: Remove bogus call to update_child() and some cosmetic fixes 13902: [701ab0b97fef] 13903: 13904: * mon_systrace.c: 13905: Don't leak /dev/systrace fd to tracee Make initialized global for 13906: simplicity If STRIOCATTACH returns EBUSY we are already being traced 13907: Check for user_args == NULL in setproctitle() call Add missing calls 13908: to STRIOCANSWER 13909: [1956edf9bc3a] 13910: 13911: * sudo.c: 13912: g/c sudo_pwdup proto 13913: [b7c4d6249ecb] 13914: 13915: * Makefile.in, sudo.psf: 13916: Add target for building a depot file 13917: [357019efd99b] 13918: 13919: * mon_systrace.c: 13920: trim includes 13921: [501534428471] 13922: 13923: 2004-09-24 Todd C. Miller <Todd.Miller@courtesan.com> 13924: 13925: * lex.yy.c, sudo.tab.c, sudo.tab.h: 13926: regen 13927: [52fd250c6986] 13928: 13929: * INSTALL: 13930: document --with-systrace 13931: [79623927c94e] 13932: 13933: * config.h.in, configure, configure.in: 13934: Add check for setproctitle 13935: [1730cf1c26ed] 13936: 13937: * mon_systrace.c: 13938: pass struct str_msg_ask in to syscall checker so it can set the 13939: error code 13940: [1703fd2fdef6] 13941: 13942: * mon_systrace.c: 13943: systrace(4) support for sudo. On systems with the systrace(4) 13944: kernel facility (OpenBSD, NetBSD, Linux w/ patches) sudo can 13945: intercept exec calls and check the exec args against the sudoers 13946: file. In other words, sudo can now control subcommands and shell 13947: escapes. 13948: [928c9217c386] 13949: 13950: * sudo.c, sudo.h: 13951: Call systrace_attach() if FLAG_TRACE is set. 13952: [014ba9402fa5] 13953: 13954: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: 13955: Add trace Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE 13956: [a99904db5e56] 13957: 13958: * parse.c, sudo.c: 13959: Don't close sudoers_fp, keep it open and set close on exec flag 13960: instead. 13961: [43a9fec60bee] 13962: 13963: * def_data.c, def_data.h, def_data.in: 13964: Add trace option 13965: [5b643b86730a] 13966: 13967: * Makefile.in: 13968: Add systrace 13969: [47a0519c427c] 13970: 13971: * INSTALL: 13972: SunOS /bin/sh blows up with configure 13973: [005a23cc5615] 13974: 13975: * configure, configure.in: 13976: Include sys/param.h before systrace.h 13977: [9345bc8efecf] 13978: 13979: * configure: 13980: regen 13981: [a8f53fcbb254] 13982: 13983: * pathnames.h.in: 13984: _PATH_DEV_SYSTRACE 13985: [d2ad1e492a00] 13986: 13987: * configure.in: 13988: line up options in --help 13989: [fa51f2821d09] 13990: 13991: * config.h.in, configure.in: 13992: Add --with-systrace 13993: [a264d54bc413] 13994: 13995: 2004-09-23 Todd C. Miller <Todd.Miller@courtesan.com> 13996: 13997: * configure: 13998: regen 13999: [a4dad0bcc523] 14000: 14001: * aclocal.m4, configure.in: 14002: make this work with autoconf-2.59 14003: [c4a92b6a684a] 14004: 14005: 2004-09-16 Todd C. Miller <Todd.Miller@courtesan.com> 14006: 14007: * sudo_edit.c: 14008: Simplify logic around open & stat of files and do sanity on edited 14009: file even if we lack fstat (still racable but worth doing). 14010: [adda65ade70c] 14011: 14012: 2004-09-15 Todd C. Miller <Todd.Miller@courtesan.com> 14013: 14014: * HISTORY: 14015: Add support url 14016: [bf6590fbde9f] 14017: 14018: * Makefile.in: 14019: versino 1.6.8p1 14020: [b84ebfaf1552] [SUDO_1_6_8p1] 14021: 14022: * CHANGES: 14023: more changes for 1.6.8p1 14024: [e23a9c0393b6] 14025: 14026: * version.h: 14027: 1.6.8p1 14028: [872f14504b5f] 14029: 14030: * CHANGES, sudo_edit.c: 14031: Add sanity check so we don't try to edit something other than a 14032: regular file. 14033: [350134ec6d4e] 14034: 14035: 2004-09-15 Aaron Spangler <aaron777@gmail.com> 14036: 14037: * CHANGES: 14038: sync 14039: [3091ca9eae00] 14040: 14041: * INSTALL: 14042: document --with-ldap-conf-file 14043: [0e2cd6b896f1] 14044: 14045: 2004-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 14046: 14047: * CHANGES, ins_csops.h: 14048: political correctness strikes again 14049: [428e8bc77f55] 14050: 14051: * RUNSON: 14052: sync 14053: [27f44bd423dc] 14054: 14055: 2004-09-12 Todd C. Miller <Todd.Miller@courtesan.com> 14056: 14057: * Makefile.binary.in, Makefile.in: 14058: Install sudoedit man link 14059: [19a55234fc1f] 14060: 14061: * INSTALL: 14062: Update PAM note and mention where HP-UX users can download gcc 14063: binaries. 14064: [d37cdbbabfd4] 14065: 14066: * Makefile.in: 14067: libtool wants to install stuff from .libs so fake one up for binary 14068: installations. 14069: [a681bc6fcfba] 14070: 14071: * Makefile.binary.in: 14072: rm -f old sudoedit link instead of using ln -f set LIBTOOL correctly 14073: [3e0c4b3372cc] 14074: 14075: * Makefile.in: 14076: Deal with "uname -m" having slashes in it rm -f old sudoedit link 14077: instead of using ln -f 14078: [cff33fb97e5b] 14079: 14080: * Makefile.binary, Makefile.binary.in: 14081: Makefile.binary -> Makefile.binary.in for config.status substitution 14082: Add support for installing noexec bits 14083: [37d8bb3483c6] 14084: 14085: * Makefile.in: 14086: Copy noexec bits into binary dists too No longer use my old arch 14087: script for making binary dists 14088: [e7058bab9e33] 14089: 14090: * Makefile.binary: 14091: Install sudoedit link. 14092: [417d1e101711] 14093: 14094: 2004-09-11 Todd C. Miller <Todd.Miller@courtesan.com> 14095: 14096: * emul/utime.h: 14097: avoid __P so there is no need for compat.h to be included 14098: [6d8d1f1abf7d] 14099: 14100: * utimes.c: 14101: Don't use HAVE_UTIME_H before including config.h. 14102: [013b7bb61181] 14103: 14104: 2004-09-10 Todd C. Miller <Todd.Miller@courtesan.com> 14105: 14106: * compat.h: 14107: Fix Solatis futimes macro 14108: [d4eda2ca0d29] 14109: 14110: 2004-09-09 Todd C. Miller <Todd.Miller@courtesan.com> 14111: 14112: * sudo_edit.c: 14113: Rename ots -> omtim for improved readability. 14114: [127ca5bb297c] 14115: 14116: 2004-09-08 Todd C. Miller <Todd.Miller@courtesan.com> 14117: 14118: * sudo_edit.c: 14119: Redo changes in revision 1.7. Don't really need to keep the temp 14120: file open; re-opening it with the invoking user's euid is 14121: sufficient. 14122: [55a883165a95] 14123: 14124: * CHANGES: 14125: sync 14126: [9015b291170d] 14127: 14128: * sudo.cat, sudo.man.in: 14129: regen 14130: [c0313f6ed783] 14131: 14132: * sudo.pod: 14133: back out revision 1.70; it is no long applicable 14134: [b641d503aff6] 14135: 14136: * env.c: 14137: Let the loader initialize nep 14138: [bec192139b02] 14139: 14140: * config.h.in, configure, configure.in: 14141: Removed unneed check for fchown Add check for gettimeofday Move 14142: autoheader template stuff into separate AH_TEMPLATE lines 14143: [bfc0edbd43f2] 14144: 14145: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: 14146: Use timespec throughout. 14147: [1a178a23b69b] 14148: 14149: * Makefile.in: 14150: gettime.[co] 14151: [6aeb48a7ab7f] 14152: 14153: * gettime.c: 14154: function to return the current time in a struct timespec 14155: [bf8eb12cb63f] 14156: 14157: * utimes.c: 14158: Not a darpa-sponsored file. 14159: [121ce5e2036c] 14160: 14161: 2004-09-07 Todd C. Miller <Todd.Miller@courtesan.com> 14162: 14163: * compat.h, config.h.in, configure, configure.in: 14164: Add a check for struct timespec and provide it for those without. 14165: [42124055030d] 14166: 14167: * config.h.in, configure, configure.in, sudo_edit.c: 14168: Add checks for st_mtim and st_mtimespec and add macros for pulling 14169: the mtime sec and nsec out of struct stat. These are used in 14170: sudo_edit() to better tell whether or not the file has changed. 14171: [23debfbb3fab] 14172: 14173: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: 14174: Add an extra param to touch() for nsec 14175: [56f7a4ba8ddb] 14176: 14177: * sudo_edit.c: 14178: Call mkstemp() as the in invoking user so we don't have to chown the 14179: file later. Only touch() the temp file if we can do it via the file 14180: descriptor. Don't check for modification of the temp file if we lack 14181: fstat(). Catch errors read()ing the temp file. 14182: [665f52c70836] 14183: 14184: * fileops.c: 14185: If path is NULL and fd == -1 return -1. 14186: [757a518a824c] 14187: 14188: * sudo_edit.c: 14189: closefrom() is overkill, the only extra fds are the ones we opened 14190: so just close those in the child. 14191: [f361c9d2a1f4] 14192: 14193: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in, configure, 14194: configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c, utimes.c, 14195: visudo.c: 14196: Use utimes() and futimes() instead of utime() in touch(), emulating 14197: as needed. Not all systems are able to support setting the times of 14198: an fd so touch() takes both an fd and a file name as arguments. 14199: [3d9276f29717] 14200: 14201: 2004-09-07 Aaron Spangler <aaron777@gmail.com> 14202: 14203: * env.c: 14204: Rare SEGV 14205: [8995f828782d] 14206: 14207: 2004-09-06 Todd C. Miller <Todd.Miller@courtesan.com> 14208: 14209: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 14210: visudo.man.in: 14211: regen 14212: [b8e9406711c5] 14213: 14214: * sudo.pod, sudoers.pod, visudo.pod: 14215: Add SUPPORT section and re-order some of the sections to match the 14216: order we use in OpenBSD. 14217: [fa37bd917e2c] 14218: 14219: 2004-09-06 Aaron Spangler <aaron777@gmail.com> 14220: 14221: * env.c: 14222: Openldap ~/.ldaprc fix 14223: [1a37afe6850f] 14224: 14225: 2004-09-06 Todd C. Miller <Todd.Miller@courtesan.com> 14226: 14227: * sudo.pod: 14228: Talk about how the editor must write its changes to the original 14229: file and not just use rename(2). 14230: [c55ed91c5ee9] 14231: 14232: * CHANGES: 14233: sync 14234: [62af26bd37a2] 14235: 14236: * sudo_edit.c: 14237: Keep the temp file open instead of re-opening after the editor has 14238: exited. 14239: [de41eeb6dcf2] 14240: 14241: * sample.pam: 14242: Update for current redhat/fedora core. 14243: [8cf083077333] 14244: 14245: 2004-09-03 Aaron Spangler <aaron777@gmail.com> 14246: 14247: * README.LDAP: 14248: tls_ examples 14249: [ba783d88a034] 14250: 14251: 2004-09-02 Aaron Spangler <aaron777@gmail.com> 14252: 14253: * ldap.c: 14254: config tls_* options 14255: [0b0e0797b3b9] 14256: 14257: 2004-08-29 Todd C. Miller <Todd.Miller@courtesan.com> 14258: 14259: * configure, configure.in: 14260: No need for -lcrypt when using pam. 14261: [41fff3a53e68] 14262: 14263: 2004-08-27 Todd C. Miller <Todd.Miller@courtesan.com> 14264: 14265: * configure: 14266: regen 14267: [75820aecce2c] 14268: 14269: 2004-08-27 Aaron Spangler <aaron777@gmail.com> 14270: 14271: * configure.in, ldap.c, pathnames.h.in: 14272: Allow --with-ldap-conf-file option to override LDAP_CONF 14273: [c9909bc484a5] 14274: 14275: * ldap.c: 14276: cleanup debug message 14277: [1f6ca4824d8d] 14278: 14279: 2004-08-26 Aaron Spangler <aaron777@gmail.com> 14280: 14281: * README.LDAP: 14282: more config info 14283: [f2e7147fd507] 14284: 14285: 2004-08-24 Todd C. Miller <Todd.Miller@courtesan.com> 14286: 14287: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c: 14288: Add cmnd_base to struct sudo_user and set it in init_vars(). Add 14289: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No 14290: longer use gross statics in command_matches(). Also rename some 14291: variables for improved clarity. 14292: [7169a6c7bea4] 14293: 14294: 2004-08-21 Todd C. Miller <Todd.Miller@courtesan.com> 14295: 14296: * INSTALL: 14297: document HP's crippled compiler deficiency. 14298: [c405ea5a8d4c] 14299: 14300: * INSTALL: 14301: Fix some thinkos in --with-editor and --with-env-editor 14302: descriptions. Noticed by Norihiko Murase. 14303: [dd781de1c985] 14304: 14305: * configure, configure.in: 14306: --with-noexec takes an optional PATH argument. 14307: [8f6ab77f22cc] 14308: 14309: * INSTALL: 14310: document --with-noexec 14311: [50cb1fc627ce] 14312: 14313: 2004-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 14314: 14315: * RUNSON, TODO: 14316: sync 14317: [f2503bd13373] [SUDO_1_6_8] 14318: 14319: * sudo_edit.c: 14320: Better warning message when sudoedit is unable to write to the 14321: destination file. 14322: [f78c18f2ffa8] 14323: 14324: * sudo.cat, sudo.man.in: 14325: regen 14326: [7e2bf63d6d9a] 14327: 14328: * sudo.pod: 14329: Don't italicize the string "sudoedit" 14330: [c691643bd269] 14331: 14332: 2004-08-16 Todd C. Miller <Todd.Miller@courtesan.com> 14333: 14334: * HISTORY: 14335: Mention GratiSoft. 14336: [dc53de581b2d] 14337: 14338: 2004-08-11 Todd C. Miller <Todd.Miller@courtesan.com> 14339: 14340: * sudo.tab.c: 14341: regen 14342: [8ae0484dfc38] 14343: 14344: * parse.yacc: 14345: Reset used_runas to FALSE when re-intializing the parser. 14346: [b7403f353a02] 14347: 14348: 2004-08-09 Todd C. Miller <Todd.Miller@courtesan.com> 14349: 14350: * config.guess: 14351: Correct OpenBSD mips support 14352: [314fc7afc165] 14353: 14354: * config.guess: 14355: Add OpenBSD/mips 14356: [ac87d0a773ef] 14357: 14358: 2004-08-07 Aaron Spangler <aaron777@gmail.com> 14359: 14360: * README.LDAP: 14361: More behavior notes 14362: [13be1d212b47] 14363: 14364: * README.LDAP: 14365: Updates on current behavior 14366: [d498a8866d6f] 14367: 14368: 2004-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 14369: 14370: * sudoers.pod: 14371: =back does not take an indentlevel (makes no difference to formatted 14372: files). 14373: [9c8523bb382a] 14374: 14375: * sudo.pod: 14376: =back does not take an indentlevel (makes no difference to formatted 14377: files). 14378: [e5f479e24fa8] 14379: 14380: * CHANGES: 14381: new 14382: [2dbd9aba8b33] 14383: 14384: * sudo.c: 14385: Consistency. Use same error for bad -u #uid when targetpw is set as 14386: we do when a bad -u username is specified. 14387: [922961c4a9d6] 14388: 14389: * TODO: 14390: Add checksum idea from Steve Mancini 14391: [e6ece1b766ba] 14392: 14393: * sudoers.cat, sudoers.man.in: 14394: regen 14395: [370d2317829f] 14396: 14397: * sudo.cat, sudo.man.in: 14398: regen 14399: [f93d41fc38b1] 14400: 14401: * sudo.pod, sudoers.pod: 14402: Document the restriction on uids specified via -u when targetpw is 14403: set. 14404: [878fedb455db] 14405: 14406: * sudo.c: 14407: Error out when targetpw is enabled and sudo is run with -u #uid but 14408: #uid does not exist in the passwd database. We can't do target 14409: authentication when the target is not in passwd! 14410: [27c5888c86eb] 14411: 14412: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: 14413: regen 14414: [ceb65711050c] 14415: 14416: * TODO: 14417: Some more todo for the next release. 14418: [7b7417be7601] 14419: 14420: * INSTALL: 14421: Make it clear that PAM should be used for DCE support when possible. 14422: [7502029fd385] 14423: 14424: * sudoers.pod: 14425: o Document problems with wildcards and relative paths. o Make the 14426: order requirements more prominent. o Change a "set" to "reset" for 14427: clarity. 14428: [bacdd181b33f] 14429: 14430: 2004-08-05 Todd C. Miller <Todd.Miller@courtesan.com> 14431: 14432: * sudo.pod: 14433: Mention --with-secure-path, not SECURE_PATH. 14434: [41283ddde5e1] 14435: 14436: 2004-08-03 Aaron Spangler <aaron777@gmail.com> 14437: 14438: * ldap.c: 14439: reflect changes to parse.c 14440: [8880fe9b724d] 14441: 14442: 2004-08-02 Todd C. Miller <Todd.Miller@courtesan.com> 14443: 14444: * sudo.tab.c: 14445: regen 14446: [a57658ca9177] 14447: 14448: * parse.c, parse.h, testsudoers.c, visudo.c: 14449: Don't pass user_cmnd and user_args to command_matches(), just use 14450: the globals there. Since we keep state with statics anyway it is 14451: misleading to pretend that passing in different cmnd and cmnd_args 14452: will work. 14453: [0a2544991fd6] 14454: 14455: * parse.yacc: 14456: Don't pass user_cmnd and user_args to command_matches(), just use 14457: the globals there. Since we keep state with statics anyway it is 14458: misleading to pretend that passing in different cmnd and cmnd_args 14459: will work. 14460: [a4910bf6032b] 14461: 14462: * parse.c: 14463: Fix a bug introduced in rev. 1.149. When checking for pseudo- 14464: commands check for a '/' anywhere in cmnd, not just the first 14465: character. 14466: [ce98142f03ca] 14467: 14468: 2004-07-31 Aaron Spangler <aaron777@gmail.com> 14469: 14470: * sudo.man.in, sudo.pod: 14471: Clarification thanks to Olivier Blin <oblin@mandrakesoft.com> 14472: [a91800e094b1] 14473: 14474: * sudoers.man.in, sudoers.pod: 14475: Add ignore_local_sudoers 14476: [741ddcbf7083] 14477: 14478: * README.LDAP: 14479: Sun One schema definition by Andreas.Bussjaeger@t-systems.com and 14480: janth@moldung.no 14481: [742c02e07cd9] 14482: 14483: 2004-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 14484: 14485: * CHANGES: 14486: typo 14487: [e7cdefbd7a9a] 14488: 14489: 2004-07-23 Todd C. Miller <Todd.Miller@courtesan.com> 14490: 14491: * CHANGES: 14492: sync 14493: [734dafc4a85e] 14494: 14495: * parse.c: 14496: Parse sudoers file as PERM_RUNAS not PERM_ROOT and remove a useless 14497: PERM_SUDOERS. Restore to PERM_ROOT upon exit of the parse. 14498: [151b7f593568] 14499: 14500: 2004-07-08 Todd C. Miller <Todd.Miller@courtesan.com> 14501: 14502: * CHANGES: 14503: PAM change 14504: [d8fb6d6a22d0] 14505: 14506: 2004-07-08 Aaron Spangler <aaron777@gmail.com> 14507: 14508: * ldap.c: 14509: Better debugging of ALL command 14510: [9db3e84029dc] 14511: 14512: 2004-07-08 Todd C. Miller <Todd.Miller@courtesan.com> 14513: 14514: * parse.c: 14515: When matching for "sudoedit" in sudoers check both the command the 14516: user typed *and* the command that is listed in the sudoers entry. 14517: [f36ca1f94095] 14518: 14519: 2004-07-04 Aaron Spangler <aaron777@gmail.com> 14520: 14521: * ldap.c: 14522: Added !command feature 14523: [ed539574611b] 14524: 14525: 2004-06-28 Todd C. Miller <Todd.Miller@courtesan.com> 14526: 14527: * auth/pam.c: 14528: Use pam_acct_mgmt() to check for disabled accounts; Brian Farrell 14529: [2be8e0e8813a] 14530: 14531: 2004-06-11 Todd C. Miller <Todd.Miller@courtesan.com> 14532: 14533: * LICENSE: 14534: License is ISC-style, not BSD-style 14535: [ac0589e1dd5d] 14536: 14537: * CHANGES: 14538: sync 14539: [16058a30f404] 14540: 14541: 2004-06-10 Todd C. Miller <Todd.Miller@courtesan.com> 14542: 14543: * sudo.cat, sudo.man.in: 14544: regen 14545: [8820eb9c809b] 14546: 14547: * sudo.pod: 14548: o Update some out of date bits to reality o Change the shell promt 14549: in examples to bourne-shell style o Clarify some details o Add a 14550: CAVEAT about "sudo cd /foo" 14551: [b0af373214b6] 14552: 14553: * check.c: 14554: Don't ask for a password if invoking user == target user. 14555: [dd5c96141132] 14556: 14557: * sudo.c: 14558: typo in comment 14559: [278d20f9b249] 14560: 14561: 2004-06-08 Todd C. Miller <Todd.Miller@courtesan.com> 14562: 14563: * sudoers.cat, sudoers.man.in: 14564: regen 14565: [9036c6f39eff] 14566: 14567: * sudoers.pod: 14568: Expand on NOEXEC a little. 14569: [9a13756aebe4] 14570: 14571: * TODO: 14572: sync 14573: [8d2c1af48de8] 14574: 14575: * visudo.cat, visudo.man.in: 14576: regen 14577: [3921f01607c8] 14578: 14579: * sudo.tab.c: 14580: regen 14581: [9338c3d68250] 14582: 14583: * visudo.pod: 14584: Add a check in visudo for runas_default being set after it has 14585: already been used. 14586: [6700358d7ad8] 14587: 14588: * CHANGES, parse.yacc, visudo.c: 14589: Add a check in visudo for runas_default being set after it has 14590: already been used. 14591: [803560986a8a] 14592: 14593: * sudo.tab.c: 14594: regen 14595: [b60636e2cf63] 14596: 14597: * parse.yacc: 14598: Add a MATCHED macro for testing whether foo_matches has been set to 14599: TRUE or FALSE. This is more readable than checking for >=0 or < 0. 14600: Doesn't change the actual code generated. 14601: [f376da8ccdc8] 14602: 14603: 2004-06-07 Todd C. Miller <Todd.Miller@courtesan.com> 14604: 14605: * sudoers.cat: 14606: regen 14607: [6cceb6d6c9bd] 14608: 14609: * sudoers.man.in: 14610: regen 14611: [5acd12b730b3] 14612: 14613: * sudoers.pod: 14614: Correct description of where Defaults specs should go. 14615: [6b11ff53d7ad] 14616: 14617: * sudoers: 14618: Correct description of where Defaults specs should go. 14619: [868db857630d] 14620: 14621: * testsudoers.c, visudo.c: 14622: update (c) year 14623: [272c8a53604c] 14624: 14625: * logging.h: 14626: update (c) year 14627: [3cec76d400ce] 14628: 14629: * ldap.c: 14630: update (c) year 14631: [f264632488a0] 14632: 14633: * find_path.c: 14634: update (c) year 14635: [40c227af9227] 14636: 14637: * auth/pam.c: 14638: update (c) year 14639: [87149e0eed50] 14640: 14641: * auth/bsdauth.c, auth/kerb5.c: 14642: update (c) year 14643: [d72eb434c068] 14644: 14645: 2004-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 14646: 14647: * sudo.tab.c: 14648: regen 14649: [83408d9e9d2e] 14650: 14651: * auth/bsdauth.c, auth/kerb5.c, auth/pam.c, visudo.c: 14652: Remove trailing spaces, no actual code changes. 14653: [4c3bf2819293] 14654: 14655: * tgetpass.c: 14656: Remove trailing spaces, no actual code changes. 14657: [96f6e0a24c26] 14658: 14659: * ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c: 14660: Remove trailing spaces, no actual code changes. 14661: [c7075d1cbed5] 14662: 14663: * getcwd.c: 14664: Remove trailing spaces, no actual code changes. 14665: [776cc0374547] 14666: 14667: * find_path.c: 14668: Remove trailing spaces, no actual code changes. 14669: [7ed7099f3c71] 14670: 14671: * compat.h, defaults.c, env.c: 14672: Remove trailing spaces, no actual code changes. 14673: [893e83c33795] 14674: 14675: * check.c: 14676: Remove trailing spaces, no actual code changes. 14677: [f77750f8803b] 14678: 14679: * sudo.tab.c: 14680: regen 14681: [62e0ed883b31] 14682: 14683: * parse.yacc: 14684: Fix a >=0 that should be <0 that was improperly converted when 14685: UNSPEC was added. 14686: [ad1531a55a49] 14687: 14688: * parse.yacc: 14689: Add do {} while(0) around pop macro Set cmnd_matches to UNSPEC, not 14690: NOMATCH when resetting it. 14691: [ae017a12870a] 14692: 14693: * parse.yacc: 14694: Fix pastos introduced in SETNMATCH addition. 14695: [6ea1c9d80681] 14696: 14697: 2004-06-05 Todd C. Miller <Todd.Miller@courtesan.com> 14698: 14699: * README.LDAP: 14700: Update for configure changes 14701: [637a635da287] 14702: 14703: * sudo.tab.c: 14704: regen 14705: [4753c2788713] 14706: 14707: * sudo.h: 14708: Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use 14709: these in parse.yacc. Also in parse.yacc initialize the *_matches 14710: vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use 14711: when setting *_matches to a value that may be 14712: NOMATCH/UNSPEC/TRUE/FALSE. 14713: [2ba622e15a4d] 14714: 14715: * parse.yacc: 14716: Add NOMATCH and UNSPEC defines (-1 and -2 respectively) and use 14717: these in parse.yacc. Also in parse.yacc initialize the *_matches 14718: vars to UNSPEC and add two macros, SETMATCH and SETNMATCH for use 14719: when setting *_matches to a value that may be 14720: NOMATCH/UNSPEC/TRUE/FALSE. 14721: [746b519e41a6] 14722: 14723: * parse.yacc: 14724: Initialize runas to -2, not -1 since we need to be able to 14725: distinguish between the initialized value and the value of a non- 14726: match when passing along the runas value to multiple commands. 14727: 14728: The result of this is that an unmatched runas is now set to -1, not 14729: 0. This is required now that parse.c treats a FALSE value for runas 14730: as being explicitly denied. 14731: [7791ed3621f6] 14732: 14733: 2004-06-03 Todd C. Miller <Todd.Miller@courtesan.com> 14734: 14735: * sudo.c, visudo.c: 14736: Error out if argc < 1. 14737: [ce6b2a9eda3c] 14738: 14739: * getprogname.c: 14740: Error out if argc < 1. 14741: [c566cce8dc78] 14742: 14743: * configure, configure.in: 14744: Add tests for what libs we need to link with for ldap and for 14745: whether or not lber.h needs to be explicitly included. 14746: [b2e9729cc4e7] 14747: 14748: 2004-06-03 Aaron Spangler <aaron777@gmail.com> 14749: 14750: * ldap.c: 14751: Solaris native LDAP build fix 14752: [39929e40eb11] 14753: 14754: 2004-06-01 Todd C. Miller <Todd.Miller@courtesan.com> 14755: 14756: * ldap.c: 14757: Set edn to NULL is ldap_get_dn() fails to avoid potential use of an 14758: unset variable. 14759: [6a4c20a66f98] 14760: 14761: * sudo.h: 14762: Add prototype for sudo_ldap_list_matches 14763: [443b007a8dab] 14764: 14765: * configure, configure.in: 14766: Better check for dirfd macro--we now set HAVE_DIRFD for the macro 14767: version too. Added check for dd_fd in `DIR' if no dirfd is found; 14768: this is now used to confitionally define the dirfd macro in 14769: compat.h. 14770: [567656978f7e] 14771: 14772: * config.h.in: 14773: Better check for dirfd macro--we now set HAVE_DIRFD for the macro 14774: version too. Added check for dd_fd in `DIR' if no dirfd is found; 14775: this is now used to confitionally define the dirfd macro in 14776: compat.h. 14777: [34eace4faec8] 14778: 14779: * compat.h: 14780: Better check for dirfd macro--we now set HAVE_DIRFD for the macro 14781: version too. Added check for dd_fd in `DIR' if no dirfd is found; 14782: this is now used to confitionally define the dirfd macro in 14783: compat.h. 14784: [8d50ff1bbf2a] 14785: 14786: * closefrom.c: 14787: Only check /proc/$$/fd if we have the dirfd function/macro. 14788: [15e3ccce7553] 14789: 14790: * compat.h, config.h.in, configure, configure.in: 14791: Add a check for a dirfd() function (like Linux) and add a dirfd 14792: macro in compat.h if there is no dirfd() function or macro. 14793: [1e95756edb50] 14794: 14795: * closefrom.c, getcwd.c: 14796: dirfd() is now defined in compat.h as needed. 14797: [bb1d79271188] 14798: 14799: * CHANGES: 14800: Clarify closefrom() note. 14801: [f4e4a5508dda] 14802: 14803: * parse.c: 14804: When checking for a command in the directory, only copy the base dir 14805: once. 14806: [7a3276808b87] 14807: 14808: * closefrom.c: 14809: If there is a /proc/$$/fd directory, behave like the Solaris 14810: closefrom() and only close the descriptors listed therein. 14811: [19de23779e84] 14812: 14813: * alloc.c: 14814: compat.h guarantees INT_MAX is defined. 14815: [1bf0c79d4606] 14816: 14817: * compat.h: 14818: Add definitions of OPEN_MAX and INT_MAX for those without it and 14819: remove definition of RLIM_INFINITY (now unused). 14820: [f827d1ebf96e] 14821: 14822: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c, parse.c, 14823: sudo.c, sudo.h, visudo.c: 14824: Use PATH_MAX, not MAXPATHLEN since the former is standardized. 14825: [59788f211c24] 14826: 14827: 2004-05-31 Todd C. Miller <Todd.Miller@courtesan.com> 14828: 14829: * CHANGES: 14830: sync 14831: [d32fa124f1ad] 14832: 14833: * RUNSON: 14834: Add some entries that were mailed in a while ago 14835: [ff8d5bfec54e] 14836: 14837: * closefrom.c: 14838: o sysconf returns a long, not an int. o check for negative return 14839: value from sysconf/getdtablesize and use OPEN_MAX in this case. o 14840: define OPEN_MAX to 256 for those without it (a fair guess...) 14841: [ccf81ae6deb2] 14842: 14843: 2004-05-30 Todd C. Miller <Todd.Miller@courtesan.com> 14844: 14845: * UPGRADE: 14846: Mention change in parse order for RunAs entries. 14847: [dc73b0bca617] 14848: 14849: * configure: 14850: regen 14851: [07cce8e0534e] 14852: 14853: 2004-05-29 Todd C. Miller <Todd.Miller@courtesan.com> 14854: 14855: * INSTALL, README.LDAP, config.h.in, configure.in: 14856: o --with-ldap now takes an optional dir as a parameter o added 14857: check for ldap_initialize() and start_tls_s() 14858: [2b846c7974c6] 14859: 14860: * README.LDAP: 14861: Fix some typos, word choice and formatting issues. 14862: [00dc8ca84b10] 14863: 14864: 2004-05-28 Todd C. Miller <Todd.Miller@courtesan.com> 14865: 14866: * tgetpass.c: 14867: Use SA_INTERRUPT so SunOS works correctly, avoid stdio and just use 14868: read/write as it is simpler. 14869: [30f5446ee8b0] 14870: 14871: * configure, configure.in: 14872: Remove hack overriding cross-compiler check. It should no longer be 14873: needed. 14874: [22a6cbd88608] 14875: 14876: * compat.h: 14877: Remove select() compat bits since we no longer use select(). 14878: [d7bbf7cd36f5] 14879: 14880: * CHANGES, tgetpass.c: 14881: Use alarm() instead of select() for the timeout for systems that 14882: don't fully/properly implement select(). 14883: [d7cc60f15800] 14884: 14885: 2004-05-27 Todd C. Miller <Todd.Miller@courtesan.com> 14886: 14887: * CHANGES: 14888: synbc 14889: [132a39788e07] 14890: 14891: * RUNSON: 14892: update 14893: [61ef508380c6] 14894: 14895: * set_perms.c: 14896: Deal with systems that have no way of setting the effective uid such 14897: as nsr-tandem-nsk. 14898: [306e00e9b5a4] 14899: 14900: * configure, configure.in: 14901: Define NO_SAVED_IDS if we don't find seteuid() 14902: [8588f18345cf] 14903: 14904: * config.h.in, configure, configure.in: 14905: Add back check for setreuid() since NSK doesn't have it. 14906: [43127bd703d1] 14907: 14908: * sudoers.cat, sudoers.man.in: 14909: regen 14910: [af4f4b20e422] 14911: 14912: * CHANGES: 14913: sync 14914: [29ca3b699c24] 14915: 14916: * BUGS: 14917: sync 14918: [3593f17f72ed] 14919: 14920: * parse.c: 14921: In sudoers_lookup() return VALIDATE_NOT_OK if the runas user was 14922: explicitly denied and the command matched. This fixes a long- 14923: standing bug and makes: foo machine = (ALL) /usr/bin/blah 14924: foo machine = (!bar) /usr/bin/blah 14925: 14926: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah 14927: [2f5ee244985a] 14928: 14929: * sudoers.pod: 14930: Clarify mail_noperm 14931: [3238b2d41989] 14932: 14933: 2004-05-20 Aaron Spangler <aaron777@gmail.com> 14934: 14935: * Makefile.in: 14936: Missing DESTDIR in make install for sudo_noexec.la 14937: [91431e821525] 14938: 14939: 2004-05-17 Todd C. Miller <Todd.Miller@courtesan.com> 14940: 14941: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 14942: visudo.man.in: 14943: regen 14944: [cdfde0dcb556] 14945: 14946: * TODO: 14947: sync 14948: [4799b7d8b62c] 14949: 14950: * sudoers.pod: 14951: Remove fastboot/fasthalt (who still remembers these?) and add a 14952: minimal sudoedit example. 14953: [19d299f233cd] 14954: 14955: * sample.sudoers: 14956: Remove fastboot/fasthalt (who still remembers these?) and add a 14957: minimal sudoedit example. 14958: [b1bca73d6250] 14959: 14960: * UPGRADE, sudo.c, visudo.c: 14961: filesystem -> file system 14962: [1e1afaf30469] 14963: 14964: * TROUBLESHOOTING: 14965: filesystem -> file system 14966: [39fb594e9338] 14967: 14968: * CHANGES, INSTALL: 14969: filesystem -> file system 14970: [85948b608ffe] 14971: 14972: * sudo.pod, sudoers.pod: 14973: Fix some minor typos and formatting goofs 14974: [e94d243a0b90] 14975: 14976: * lex.yy.c: 14977: regen 14978: [2eed0ab1f4c4] 14979: 14980: * visudo.pod: 14981: remove my email addr 14982: [b63262c0389b] 14983: 14984: * sudo.pod, sudoers.pod, visudo.pod: 14985: Use @mansectform@ and @mansectsu@ everywhere Make man page 14986: references links with L<> 14987: [f459f4b9ddb9] 14988: 14989: * parse.lex: 14990: Accept quoted globbing characters and pass them verbatim for 14991: fnmatch() 14992: [8248b86e9380] 14993: 14994: * UPGRADE: 14995: Document that /tmp/.odus is gone. 14996: [3667b66af5bb] 14997: 14998: * pathnames.h.in: 14999: No longer use /tmp/.odus as a possible timestamp dir unless 15000: specifically configured to do so. Instead, if no /var/run exists, 15001: use /var/adm/sudo or /usr/adm/sudo. 15002: [48d94c9f9ad4] 15003: 15004: * configure: 15005: No longer use /tmp/.odus as a possible timestamp dir unless 15006: specifically configured to do so. Instead, if no /var/run exists, 15007: use /var/adm/sudo or /usr/adm/sudo. 15008: [058d7b8cf07b] 15009: 15010: * aclocal.m4: 15011: No longer use /tmp/.odus as a possible timestamp dir unless 15012: specifically configured to do so. Instead, if no /var/run exists, 15013: use /var/adm/sudo or /usr/adm/sudo. 15014: [cf52c4c2803f] 15015: 15016: * CHANGES: 15017: No longer use /tmp/.odus as a possible timestamp dir unless 15018: specifically configured to do so. Instead, if no /var/run exists, 15019: use /var/adm/sudo or /usr/adm/sudo. 15020: [6058c4cefcec] 15021: 15022: * set_perms.c, sudo.c, tgetpass.c, visudo.c: 15023: Preliminary changes to support nsr-tandem-nsk. Based on patches 15024: from Tom Bates. 15025: [2e5f81834383] 15026: 15027: * logging.c: 15028: Preliminary changes to support nsr-tandem-nsk. Based on patches 15029: from Tom Bates. 15030: [934bbe6872b6] 15031: 15032: * check.c, compat.h: 15033: Preliminary changes to support nsr-tandem-nsk. Based on patches 15034: from Tom Bates. 15035: [390b698b5924] 15036: 15037: 2004-05-16 Todd C. Miller <Todd.Miller@courtesan.com> 15038: 15039: * CHANGES: 15040: There was no 1.6.7p6. 15041: [8013d2e6b062] 15042: 15043: * BUGS, CHANGES: 15044: sync 15045: [c38b41f32857] 15046: 15047: * Makefile.in: 15048: add missing files to DISTFILES 15049: [e6a80ad03039] 15050: 15051: * sudo.cat, sudoers.cat, visudo.cat: 15052: regen 15053: [027bc9746dd5] 15054: 15055: * sudoers.man.in: 15056: regen 15057: [f5e85ef686cf] 15058: 15059: * Makefile.in: 15060: Fix some line wrap and update (c) year 15061: [bad1f46aa1ca] 15062: 15063: 2004-04-28 Aaron Spangler <aaron777@gmail.com> 15064: 15065: * README.LDAP: 15066: Build Note 15067: [7a061248249b] 15068: 15069: 2004-04-07 Aaron Spangler <aaron777@gmail.com> 15070: 15071: * Makefile.in: 15072: Fix install-dirs 15073: [be0726dd92e7] 15074: 15075: 2004-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 15076: 15077: * sudo.tab.c: 15078: regen 15079: [3f4f0d1ab8b9] 15080: 15081: * visudo.c: 15082: In Exit() when used as a signal handler, emsg is a pointer so 15083: sizeof() is wrong so make it a #define instead. Also avoid using a 15084: negative exit value. Found by Aaron Campbell 15085: [78716a3a3fdc] 15086: 15087: 2004-03-24 Todd C. Miller <Todd.Miller@courtesan.com> 15088: 15089: * sudoers.pod: 15090: Remove bogus sentence about uids in a User_List. Document usernames 15091: vs. uid parsing in a Runas_List. 15092: [7ca510b5031c] 15093: 15094: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: 15095: If the user specified a uid with the -u flag and the uid exists in 15096: the passwd file, set runas_user to the name, not the uid. 15097: 15098: When comparing usernames in sudoers, if a name is really a uid 15099: (starts with '#') compare it numerically to pw_uid. 15100: [8d6935d04673] 15101: 15102: 2004-03-22 Todd C. Miller <Todd.Miller@courtesan.com> 15103: 15104: * auth/kerb5.c: 15105: krb5_mcc_ops should be const; Johnny C. Lam 15106: [aa8c753e426e] 15107: 15108: 2004-02-28 Aaron Spangler <aaron777@gmail.com> 15109: 15110: * CHANGES, config.h.in, ldap.c: 15111: Added start_tls support 15112: [7ef864c15b69] 15113: 15114: 2004-02-14 Todd C. Miller <Todd.Miller@courtesan.com> 15115: 15116: * Makefile.in: 15117: Clean up libtool stuff for 'make distclean' and add def_data.c, 15118: def_data.h to PARSESRCS. 15119: [bf9bb6bb06ab] 15120: 15121: 2004-02-14 Aaron Spangler <aaron777@gmail.com> 15122: 15123: * strlcat.c, strlcpy.c: 15124: Un-Fix last license munge 15125: [42654b77ac71] 15126: 15127: 2004-02-13 Todd C. Miller <Todd.Miller@courtesan.com> 15128: 15129: * configure: 15130: regen 15131: [e4de6b23a4dc] 15132: 15133: * CHANGES, RUNSON, TODO: 15134: checkpoint 15135: [94e1ace84d5c] 15136: 15137: * lex.yy.c, sudo.tab.c: 15138: regen 15139: [8ce784505643] 15140: 15141: * auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c, 15142: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h, 15143: emul/search.h, emul/utime.h: 15144: More to a less restrictive, ISC-style license. 15145: [a31b20e48003] 15146: 15147: * auth/kerb5.c, auth/pam.c: 15148: More to a less restrictive, ISC-style license. 15149: [e41f92b41216] 15150: 15151: * auth/dce.c, auth/fwtk.c, auth/kerb4.c: 15152: More to a less restrictive, ISC-style license. 15153: [87534c164a52] 15154: 15155: * auth/bsdauth.c: 15156: More to a less restrictive, ISC-style license. 15157: [e21be6594b58] 15158: 15159: * auth/afs.c, auth/aix_auth.c, zero_bytes.c: 15160: More to a less restrictive, ISC-style license. 15161: [6d234be91c5e] 15162: 15163: * sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, visudo.c, 15164: visudo.man.in, visudo.pod: 15165: More to a less restrictive, ISC-style license. 15166: [b02aea324fd6] 15167: 15168: * sudo_noexec.c: 15169: More to a less restrictive, ISC-style license. 15170: [a6da7631e0b2] 15171: 15172: * strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in, sudo.pod, 15173: sudo_edit.c: 15174: More to a less restrictive, ISC-style license. 15175: [71cdcc241e94] 15176: 15177: * sigaction.c, strerror.c: 15178: More to a less restrictive, ISC-style license. 15179: [4bccdedca58a] 15180: 15181: * ldap.c, logging.c, logging.h, parse.c, parse.h, pathnames.h.in, 15182: set_perms.c: 15183: More to a less restrictive, ISC-style license. 15184: [64d772d70ab3] 15185: 15186: * getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, 15187: ins_goons.h, insults.h, interfaces.c, interfaces.h: 15188: More to a less restrictive, ISC-style license. 15189: [520381c60a54] 15190: 15191: * find_path.c, getprogname.c: 15192: More to a less restrictive, ISC-style license. 15193: [f605d5eab6f1] 15194: 15195: * fileops.c: 15196: More to a less restrictive, ISC-style license. 15197: [4129a8b38a67] 15198: 15199: * env.c: 15200: More to a less restrictive, ISC-style license. 15201: [d5bd859757de] 15202: 15203: * defaults.h: 15204: More to a less restrictive, ISC-style license. 15205: [008f5d5743f5] 15206: 15207: * LICENSE, Makefile.in, alloc.c, check.c, closefrom.c, compat.h, 15208: defaults.c: 15209: More to a less restrictive, ISC-style license. 15210: [d8d7bfc8a18b] 15211: 15212: * utime.c, version.h: 15213: More to a less restrictive, ISC-style license. 15214: [e2e038ad8209] 15215: 15216: * parse.lex, parse.yacc: 15217: More to a less restrictive, ISC-style license. 15218: [2f5942e847a1] 15219: 15220: * Makefile.binary: 15221: More to a less restrictive, ISC-style license. 15222: [1ed561734535] 15223: 15224: 2004-02-13 Aaron Spangler <aaron777@gmail.com> 15225: 15226: * sudoers2ldif: 15227: Merged in LDAP Support 15228: [3994c4d05947] 15229: 15230: * ldap.c, sudo.c, sudo.h: 15231: Merged in LDAP Support 15232: [547eaa346fcc] 15233: 15234: * def_data.c, def_data.h, def_data.in: 15235: Merged in LDAP Support 15236: [8fb255280e42] 15237: 15238: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in: 15239: Merged in LDAP Support 15240: [1038092a161e] 15241: 15242: 2004-02-08 Todd C. Miller <Todd.Miller@courtesan.com> 15243: 15244: * sudo.h, sudo_noexec.c: 15245: Only do "extern int errno" if errno is not a macro. 15246: [b2e02a08be8b] 15247: 15248: 2004-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 15249: 15250: * set_perms.c: 15251: setreuid(0, 0) fails on QNX if the euid is not already 0 so set the 15252: euid first, then just call setuid(0) to set the real uid too. 15253: [f08546e2e0ee] 15254: 15255: * set_perms.c: 15256: Use setresuid() and setreuid() for PERM_RUNAS when appropriate 15257: instead of seteuid() which may not exist. 15258: [ba508581befb] 15259: 15260: 2004-02-04 Todd C. Miller <Todd.Miller@courtesan.com> 15261: 15262: * LICENSE: 15263: 2004 15264: [37425513a342] 15265: 15266: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: 15267: Add --with-pc-insults configure option 15268: [7daa5294c17b] 15269: 15270: * visudo.man.in: 15271: Prefer VISUAL over EDITOR like old vipw did. 15272: [996252a4ab65] 15273: 15274: 2004-02-01 Todd C. Miller <Todd.Miller@courtesan.com> 15275: 15276: * sudo.man.in, sudoers.man.in: 15277: regen 15278: [a247f1c52eb9] 15279: 15280: * sudoers.pod: 15281: Add a note that noexec is not a cure-all. 15282: [9e7fc535367d] 15283: 15284: * sudoers.pod: 15285: Mention that disabling "root_sudo" is pretty pointless. 15286: [f38a415afba0] 15287: 15288: * configure, configure.in: 15289: Substitute for root_sudo in sudoers.pod 15290: [ce483cfc86be] 15291: 15292: * sudo.pod: 15293: Add sudoedit to the NAME section 15294: [51bc453ec2f6] 15295: 15296: * sudoers.pod: 15297: Document that fact that setting ignore_dot in sudoers has no effect 15298: due to the fact that find_path() is called *before* sudoers is read. 15299: [6808df7e417c] 15300: 15301: 2004-01-30 Todd C. Miller <Todd.Miller@courtesan.com> 15302: 15303: * sudo_edit.c: 15304: Do not require _PATH_USRTMP to be set. 15305: [546f3270dd10] 15306: 15307: * BUGS, CHANGES, TODO: 15308: sync 15309: [4205ddeab781] 15310: 15311: * sudo.man.in: 15312: regen 15313: [e2143690a88a] 15314: 15315: * sudo.pod: 15316: Clarify that when sudo is run by root with the SUDO_USER variable 15317: set, the sudoers lookup happens for root and not the SUDO_USER user. 15318: [47207bec1bdf] 15319: 15320: 2004-01-29 Todd C. Miller <Todd.Miller@courtesan.com> 15321: 15322: * auth/pam.c, auth/sudo_auth.c, interfaces.c, logging.c, parse.c, 15323: set_perms.c, sigaction.c, sudo.c, tgetpass.c: 15324: Use the SET, CLR and ISSET macros. 15325: [a8b0d7f1e8fd] 15326: 15327: * fnmatch.c: 15328: Use the SET, CLR and ISSET macros. 15329: [1afbcba22ba6] 15330: 15331: * defaults.c, env.c: 15332: Use the SET, CLR and ISSET macros. 15333: [2f39431e0a49] 15334: 15335: * interfaces.h: 15336: MAIN was replaced with _SUDO_MAIN some time ago. 15337: [ea1b38f2ac9d] 15338: 15339: * sudo.c: 15340: Don't look at prev_user until after we've parsed sudoers and done 15341: the password check. That way, if sudo/sudoedit is run from a root 15342: process that was invoked by sudo, we check sudoers for root, not the 15343: previous user. This makes sudoedit much more useful and means that 15344: for the sudo case, we get correct logging on who actually ran the 15345: command. 15346: [431dfbf20552] 15347: 15348: 2004-01-23 Todd C. Miller <Todd.Miller@courtesan.com> 15349: 15350: * sudo_edit.c: 15351: Add a comment describing why we need to be notified about our child 15352: stopping. 15353: [0bec3ce4b49d] 15354: 15355: 2004-01-22 Todd C. Miller <Todd.Miller@courtesan.com> 15356: 15357: * def_data.c, def_data.in: 15358: Update the noexec variable descriptions 15359: [9cb7f1aa0e57] 15360: 15361: * sudoers.man.in, sudoers.pod: 15362: noexec now replaces more than just execve() 15363: [23cbdc0ee95c] 15364: 15365: * sudo_noexec.c: 15366: Alas, all the world does not go through execve(2). Many systems 15367: still have an execv(2) system call, Linux 2.6 provides fexecve(2) 15368: and it is not uncommon for libc to have underscore ('_') versions of 15369: the functions to be used internally by the library. Instead of 15370: stubbing all these out by hand, define a macro and let it do the 15371: work. Extra exec functions pointed out by Reznic Valery. 15372: [9fa0cd871b0c] 15373: 15374: * sudo.c, sudo_edit.c: 15375: Fix suspending the editor in -e mode. Because we do a fork() first 15376: we need to be notified when the child has been stopped and then send 15377: that same signal to ourself so the shell can do its job control 15378: thing. 15379: [773165eb6057] 15380: 15381: * visudo.c: 15382: Use WIFEXITED and WEXITSTATUS macros. If there are systems out 15383: there that want to run sudo that still don't support these we can 15384: try to deal with that later. 15385: [6af68e4aff60] 15386: 15387: * lex.yy.c: 15388: regen 15389: [403435317d5d] 15390: 15391: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: 15392: Document sudo -e / sudoedit 15393: [a80f6ea910af] 15394: 15395: * configure, configure.in: 15396: fix typo 15397: [5020fcdc27f4] 15398: 15399: * config.h.in, configure.in: 15400: Add SET/CLR/ISSET 15401: [03ff57286e7e] 15402: 15403: 2004-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 15404: 15405: * sudo.c: 15406: Allow non-exclusive flags when invoked as sudoedit. Pretty print the 15407: long usage() line to not wrap (assumes 80 char display) 15408: [3941fa4004bb] 15409: 15410: * Makefile.in, sudo.c: 15411: If sudo is invoked as "sudoedit" the -e flag is implied and no other 15412: flags are permitted. 15413: [929670b01293] 15414: 15415: * sudo.h: 15416: Add a new flag, -e, that makes it possible to give users the ability 15417: to edit files with the editor of their choice as the invoking user, 15418: not the runas user. Temporary files are used for the actual edit 15419: and the temp file is copied over the original after the editor is 15420: done. 15421: [c4051414c1f4] 15422: 15423: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: 15424: Add a new flag, -e, that makes it possible to give users the ability 15425: to edit files with the editor of their choice as the invoking user, 15426: not the runas user. Temporary files are used for the actual edit 15427: and the temp file is copied over the original after the editor is 15428: done. 15429: [37ac05c8ac3c] 15430: 15431: * env.c, sudo.c: 15432: If real uid == 0 and the SUDO_USER environment variables is set, use 15433: that to determine the invoking user's true identity. That way the 15434: proper info gets logged by someone who has done "sudo su" but still 15435: uses sudo to as root. We can't do this for non-root users since 15436: that would open up a security hole, though perhaps it would be 15437: acceptable to use getlogin(2) on OSes where this a system call (and 15438: doesn't just look in the utmp file). 15439: [c2f9198708a1] 15440: 15441: * pathnames.h.in: 15442: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP 15443: [7d9e5768df93] 15444: 15445: * config.h.in, configure, configure.in: 15446: Add check for fchown(2) 15447: [a85df18798ed] 15448: 15449: 2004-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 15450: 15451: * sudo.c: 15452: Back out portions of the -i commit that set NewArgv[0] in 15453: set_runaspw. It is far to late to set NewArgv[0] there and will have 15454: no effect anyway as cmnd and safe_cmnd have already been set. 15455: [c2d343430c1c] 15456: 15457: * visudo.c, visudo.pod: 15458: Prefer VISUAL over EDITOR like old vipw did. 15459: [ae32f477cea3] 15460: 15461: 2004-01-19 Todd C. Miller <Todd.Miller@courtesan.com> 15462: 15463: * env.c, sudo.c: 15464: In -i mode always set new environment based on the runas user's 15465: passwd entry. 15466: [fa653b7887a8] 15467: 15468: 2004-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 15469: 15470: * sudo.man.in, sudo.pod: 15471: Document the new -i flag and sync SYNOPSIS section with usage() in 15472: sudo.c. Also sort the flags in the OPTIONS section. 15473: [6aabc0ffc47e] 15474: 15475: * sudo.c, sudo.h: 15476: o Add -i that acts similar to "su -", based on patches from David J. 15477: MacKenzie o Sort the flags in the usage message 15478: [c0fe7d6beffd] 15479: 15480: * sudoers.man.in, sudoers.pod: 15481: Add a missing @runas_default@ substitution. 15482: [60516fe2d090] 15483: 15484: 2004-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 15485: 15486: * sudo.c: 15487: Change euid to runas user before calling find_path(). 15488: Unfortunately, though runas_user can be modified in sudoers we 15489: haven't parsed sudoers yet. 15490: [f469fdf2e313] 15491: 15492: * sudoers.man.in, sudoers.pod: 15493: Add missing defintion of Parameter_List and use single pipes in the 15494: Defaults EBNF definition. 15495: [f7bed6e909bf] 15496: 15497: * sudo.c: 15498: Fix a bug when set_runaspw() is used as a callback. We don't want 15499: to reset the contents of runas_pw if the user specified a user via 15500: the -u flag. 15501: 15502: Avoid unnecessary passwd lookups in set_authpw(). In most cases we 15503: already have the info in runas_pw. 15504: [efc35623ba09] 15505: 15506: 2004-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 15507: 15508: * check.c: 15509: Add Stan Lee / Uncle Ben quote to the lecture from RedHat 15510: [ebd5a76ccd7e] 15511: 15512: * sudo.h: 15513: Update sudo_getepw() proto and add one for set_runaspw() 15514: [6ed65795c17f] 15515: 15516: * parse.c: 15517: If we can't stat the command as root, try as the runas user instead. 15518: [ae713fca0e15] 15519: 15520: * testsudoers.c, visudo.c: 15521: Add stub set_runaspw() function 15522: [42aa37050053] 15523: 15524: * sudo.c: 15525: Add set_runaspw() function to fill in runas_pw. This will be used 15526: as a callback to update runas_pw when the runas user changes. 15527: [e570aa0088d0] 15528: 15529: * env.c, sudo.c: 15530: PERM_RUNAS -> PERM_FULL_RUNAS 15531: [51eec6f9e89a] 15532: 15533: * set_perms.c, sudo.h: 15534: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add a PERM_RUNAS that just 15535: changes the euid. 15536: [877c6fe4d12c] 15537: 15538: * getspwuid.c: 15539: Make sudo_pwdup() act like OpenBSD pw_dup() and allocate memory in 15540: one chunk for easy free()ing. Also change it from static to extern. 15541: [ab503260a7ec] 15542: 15543: * defaults.c, defaults.h: 15544: Add callback support 15545: [a61c4ca983fb] 15546: 15547: * mkdefaults: 15548: Add a callback field and use it for runas_default 15549: [96b69c27df5e] 15550: 15551: * def_data.c, def_data.in: 15552: Add a callback field and use it for runas_default 15553: [d3e9f06872b8] 15554: 15555: 2004-01-15 Todd C. Miller <Todd.Miller@courtesan.com> 15556: 15557: * auth/fwtk.c: 15558: Add support for chalnecho and display server responses used by fwtk 15559: >= 2.0 15560: [b1870f7aaf0d] 15561: 15562: 2004-01-12 Todd C. Miller <Todd.Miller@courtesan.com> 15563: 15564: * sudoers.man.in, sudoers.pod: 15565: ld.so is ld.so.1 on solaris 15566: [2bf9a123fa4c] 15567: 15568: * Makefile.in, config.h.in, configure, configure.in, sudo.c, sudo.h: 15569: Use closefrom() instead of doing the equivalent inline. 15570: [7e3ef6072884] 15571: 15572: * closefrom.c: 15573: closefrom(3) for systems w/o it 15574: [35caf58bb636] 15575: 15576: 2004-01-09 Todd C. Miller <Todd.Miller@courtesan.com> 15577: 15578: * sudoers.man.in: 15579: Update from .pod file. 15580: [d4c94fc0e0c9] 15581: 15582: * configure, configure.in: 15583: Substitute noexec_file for the sudoers man page 15584: [203d3376a551] 15585: 15586: * sudo.man.in, sudo.pod: 15587: Mention noexec 15588: [014375ddbb06] 15589: 15590: * sudoers.man.in, sudoers.pod: 15591: Document noexec 15592: [49a65d06201f] 15593: 15594: * auth/pam.c, config.h.in, configure.in: 15595: Move PAM_CONST macro definition from config.h to pam.c where it 15596: belongs. We can't have this in config.h since that gets included too 15597: early. 15598: [e64748071637] 15599: 15600: * auth/pam.c, config.h.in, configure, configure.in: 15601: Some PAM implementations put their headers in /usr/include/pam 15602: instead of /usr/include/security. 15603: [8cc749e9575c] 15604: 15605: * configure.in: 15606: I missed changing the EXEC macro -> EXECV here when I changed this 15607: in config.h.in and sudo.c a while ago. 15608: [6f5afac7789f] 15609: 15610: * acsite.m4: 15611: OpenBSD vax/m88k/hppa don't do shared libs 15612: [e4901d958bb7] 15613: 15614: * configure, configure.in: 15615: o merge the hpux case entries into a single entry w/ its own sub- 15616: case statement. o HP-UX >= 11 support getspnam(), use it in 15617: preference to getprpwuid() 15618: [0caad428894e] 15619: 15620: * configure, configure.in: 15621: eval $shrext so that it expands nicely on MacOS X 15622: [40419343eef8] 15623: 15624: * Makefile.in: 15625: Don't lie about making a module, it does the wrong thing on mach 15626: [7629b28f5688] 15627: 15628: * ltmain.sh: 15629: Remove requirement that libs must begin with "lib". They don't when 15630: we point directly at the lib using LD_PRELOAD or its equivalent. 15631: [d66f3de6ec85] 15632: 15633: * acsite.m4: 15634: Disable support for c++, f77 and java. We don't need it, it takes a 15635: lot of time, and it hosed our check for shared lib support. 15636: [4f5749c52ce4] 15637: 15638: * configure: 15639: regen 15640: [160865e9d15f] 15641: 15642: * configure.in: 15643: Call AC_ENABLE_SHARED and check the status of enable_shared to know 15644: when shared libs are available. 15645: [42504c1668fc] 15646: 15647: * acsite.m4: 15648: Duh, OpenBSD suports shared libs too 15649: [8e3cd9417475] 15650: 15651: * config.h.in, configure.in: 15652: Only OpenPAM and Linux PAM use const qualifiers. 15653: [b2f76476e866] 15654: 15655: * configure, configure.in: 15656: o No need to check for sed, libtool config does that for us o move 15657: check for --with-noexec until after libtool magic is run so we can 15658: use $can_build_shared and $shrext 15659: [668c656e89cc] 15660: 15661: * ltmain.sh: 15662: Don't print a bunch of crap about library installs since we are not 15663: really installing a library. 15664: [83fbcad29fe4] 15665: 15666: * env.c: 15667: Make format_env() varargs Add noexec support for Darwin, MacOS X, 15668: Irix, and Tru64 15669: [468885d75d10] 15670: 15671: * acsite.m4, ltconfig, ltmain.sh: 15672: Update to libtool 1.5 with local changes: o no ldconfig in the 15673: finish step o assume no libprefix or version is needed 15674: [4961cffc3797] 15675: 15676: * sudo_noexec.c: 15677: Fix compilation under K&R 15678: [8b309bf0b1b2] 15679: 15680: 2004-01-06 Todd C. Miller <Todd.Miller@courtesan.com> 15681: 15682: * CHANGES: 15683: checkpoint 15684: [3c368badab32] 15685: 15686: * sudo_noexec.c: 15687: stub execve() that just returns EACCES; used for noexec 15688: functionality 15689: [1297acae283a] 15690: 15691: * sudo.tab.h: 15692: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with 15693: generated code. 15694: [dcab78c49273] 15695: 15696: * sudo.tab.c: 15697: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2 issue with 15698: generated code. 15699: [0a61c735eabe] 15700: 15701: 2004-01-05 Todd C. Miller <Todd.Miller@courtesan.com> 15702: 15703: * def_data.c, def_data.h, def_data.in: 15704: Move the environment defaults to the end and shorten a few of the 15705: descriptions. 15706: [66787b9c612c] 15707: 15708: * configure, configure.in: 15709: no shared libs on ultris or convexos 15710: [2c5f3c456e32] 15711: 15712: * Makefile.in, configure, configure.in: 15713: Build sudo_noexec shared object using libtool; could use some 15714: cleanup. 15715: [373f483555dd] 15716: 15717: * acsite.m4, ltconfig, ltmain.sh: 15718: libtool scaffolding 15719: [c903a42e3d90] 15720: 15721: * parse.yacc, sudo.tab.c: 15722: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so that order is not 15723: important. 15724: [c6e8a34639a4] 15725: 15726: * defaults.c, env.c, lex.yy.c, parse.c, parse.h, parse.lex, 15727: parse.yacc, pathnames.h.in, sudo.c, sudo.h, sudo.tab.c: 15728: update copyright year 15729: [a16372ae1711] 15730: 15731: * configure, configure.in, defaults.c, env.c, pathnames.h.in: 15732: Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure 15733: option. The default value of noexec_file is set to this. 15734: [7d88e1d3c494] 15735: 15736: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c, 15737: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c, 15738: sudo.tab.h: 15739: Add support for preloading a shared object containing a dummy 15740: execve() function that just sets error and returns -1. This adds a 15741: "noexec_file" option to load the filename as well as a "noexec" flag 15742: to enable it unconditionally. There is also a NOEXEC tag that can 15743: be attached to specific commands and an EXEC tag to disable it. 15744: [c8b6712feb91] 15745: 15746: * mkdefaults: 15747: add missing newline to usage statement 15748: [e84746618362] 15749: 15750: * config.h.in, sudo.c: 15751: Rename EXEC macro -> EXECV 15752: [ddaa0c027299] 15753: 15754: * logging.c: 15755: Don't truncate usernames to 8 characters in the log message. 15756: [f62a20f27075] 15757: 15758: * check.c, sudoers.man.in, sudoers.pod: 15759: Update copyright year 15760: [ca9964054085] 15761: 15762: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in, 15763: sudoers.pod: 15764: Add a new option, lecture_file, that can be used to point to a 15765: custom sudo lecture. 15766: [940133231216] 15767: 15768: 2003-12-31 Todd C. Miller <Todd.Miller@courtesan.com> 15769: 15770: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c, 15771: auth/sudo_auth.c: 15772: Add a zero_bytes() function to do the equivalent of bzero in such a 15773: way that will heopfully not be optimized away by sneaky compilers. 15774: [161b6d74bfb4] 15775: 15776: * zero_bytes.c: 15777: Add a zero_bytes() function to do the equivalent of bzero in such a 15778: way that will heopfully not be optimized away by sneaky compilers. 15779: [d035abf0af94] 15780: 15781: * Makefile.in, sudo.h: 15782: Add a zero_bytes() function to do the equivalent of bzero in such a 15783: way that will heopfully not be optimized away by sneaky compilers. 15784: [ff136de3e255] 15785: 15786: * err.c: 15787: Use #ifdef __STDC__, not #if __STDC__. 15788: [6889dd6bc51a] 15789: 15790: 2003-12-30 Todd C. Miller <Todd.Miller@courtesan.com> 15791: 15792: * mkdefaults: 15793: Always put at least one space between the def_* macro name and its 15794: definition. 15795: [6b3ad0e6619a] 15796: 15797: * configure, configure.in: 15798: Adjust code for --without-lecture to match new values. 15799: [062aa788a6b9] 15800: 15801: * visudo.man.in: 15802: regen after pasto fix 15803: [3deec16906c0] 15804: 15805: * sudoers.man.in, sudoers.pod: 15806: Document that "lecture" has changed from a flag to a tuple. 15807: [e2c03062b533] 15808: 15809: * check.c, def_data.c, def_data.h, def_data.in, defaults.c, 15810: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: 15811: Add support for tuples in def_data.in; these are implemented as an 15812: enum type. Currently there is only a single tuple enum but in the 15813: future we may have one tuple enum per T_TUPLE entry in def_data.in. 15814: Currently listpw, verifypw and lecture are tuples. This avoids the 15815: need to have two entries (one ival, one str) for pwflags and syslog 15816: values. 15817: 15818: lecture is now a tuple with the following values: never, once, 15819: always 15820: 15821: We no longer use both an int and string entry for syslog facilities 15822: and priorities. Instead, there are logfac2str() and logpri2str() 15823: functions that get used when we need to print the string values. 15824: [5293f946c836] 15825: 15826: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c, 15827: auth/rfc1938.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.c, 15828: check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c, 15829: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c, 15830: sudo.tab.c, visudo.c: 15831: Create def_* macros for each defaults value so we no longer need the 15832: def_{flag,ival,str,list,mode} macros (which have been removed). This 15833: is a step toward more flexible data types in def_data.in. 15834: [009c02934106] 15835: 15836: * TODO: 15837: checkpoint 15838: [0a99a4bb5d15] 15839: 15840: 2003-12-23 Todd C. Miller <Todd.Miller@courtesan.com> 15841: 15842: * sudo.c: 15843: If we are in -k/-K mode, just spew to stderr. It is not unusual for 15844: users to place "sudo -k" in a .logout file which can cause sudo to 15845: be run during reboot after the YP/NIS/NIS+/LDAP/etc daemon has died. 15846: Previously, this would result in useless mail and logging. 15847: [d282e7ed63af] 15848: 15849: 2003-12-16 Todd C. Miller <Todd.Miller@courtesan.com> 15850: 15851: * visudo.pod: 15852: fix pasto in VISUAL description 15853: [1c6a6148b5f9] 15854: 15855: 2003-12-10 Todd C. Miller <Todd.Miller@courtesan.com> 15856: 15857: * configure: 15858: regen 15859: [f44312c63799] 15860: 15861: * CHANGES: 15862: checkpoint 15863: [0c42e38f78d5] 15864: 15865: * TROUBLESHOOTING: 15866: Some OSes (like Solaris) allow export w/ nosuid too 15867: [973ce85ffa12] 15868: 15869: 2003-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 15870: 15871: * compat.h: 15872: We don't use FD_ZERO anymore so just define FD_SET (if not already 15873: there). 15874: [d1c8c11905cd] 15875: 15876: 2003-06-29 Todd C. Miller <Todd.Miller@courtesan.com> 15877: 15878: * auth/pam.c: 15879: Fix a core dump on Solaris by preserving the pam_handle_t we used 15880: during authentication for pam_prep_user(). If we didn't 15881: authenticate (ie: ticket still valid), we call pam_init() from 15882: pam_prep_user(). This is something of a hack; it may be better to 15883: change the auth API and add an auth_final() function that acts like 15884: pam_prep_user(). 15885: [f787de49b175] 15886: 15887: 2003-06-21 Todd C. Miller <Todd.Miller@courtesan.com> 15888: 15889: * set_perms.c: 15890: Add explicit declaration of printerr variable in function header 15891: (was defaulting to int which is OK but oh so K&R :-). From Theo. 15892: [492c2358783f] 15893: 15894: 2003-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 15895: 15896: * config.h.in, configure.in: 15897: s/HAVE_STOW/USE_STOW/ 15898: [4b99e1824ece] 15899: 15900: * logging.c: 15901: Also exit waitpid() loop when pid == 0. Fixes a problem where the 15902: sudo process would spin eating up CPU until sendmail finished when 15903: it has to send mail. 15904: [ec3d5792b9b4] 15905: 15906: 2003-05-30 Todd C. Miller <Todd.Miller@courtesan.com> 15907: 15908: * fnmatch.c: 15909: Remove advertising clause, UCB has disavowed it 15910: [43a26bbd6628] 15911: 15912: * fnmatch.3: 15913: Remove advertising clause, UCB has disavowed it 15914: [3ff24291bcfa] 15915: 15916: 2003-05-22 Todd C. Miller <Todd.Miller@courtesan.com> 15917: 15918: * parse.c: 15919: Don't assume that getgrnam() calls don't modify contents of struct 15920: passwd returned by getpwnam(). On FreeBSD w/ NIS this can happen. 15921: Based on a patch from Kirk Webb. 15922: [5574c68f60f3] 15923: 15924: 2003-05-06 Todd C. Miller <Todd.Miller@courtesan.com> 15925: 15926: * configure.in: 15927: missing ;; 15928: [22378f2a9d31] 15929: 15930: * configure.in: 15931: darwin has a broken setreuid() in at least some versions 15932: [d572aed930d2] 15933: 15934: * env.c: 15935: Fix an off by one error when reallocating the environment; Kevin Pye 15936: [3d98e7cf097a] 15937: 15938: 2003-04-30 Todd C. Miller <Todd.Miller@courtesan.com> 15939: 15940: * sudoers.pod: 15941: Fix User_Spec definition; SEKINE Tatsuo 15942: [49b0da65e090] 15943: 15944: 2003-04-28 Todd C. Miller <Todd.Miller@courtesan.com> 15945: 15946: * HISTORY: 15947: More info on the early days from Coggs. 15948: [9381ca10b06b] 15949: 15950: 2003-04-21 Todd C. Miller <Todd.Miller@courtesan.com> 15951: 15952: * auth/kerb5.c: 15953: remove errant semicolon that prevented compilation under heimdal 15954: [d2f2bb73a598] 15955: 15956: 2003-04-16 Todd C. Miller <Todd.Miller@courtesan.com> 15957: 15958: * testsudoers.c, tgetpass.c, visudo.c, visudo.man.in, visudo.pod: 15959: add DARPA credit on affected files 15960: [7020785ee50d] 15961: 15962: * sudoers.pod: 15963: add DARPA credit on affected files 15964: [83b46318750b] 15965: 15966: * sigaction.c, strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod, 15967: sudoers.man.in: 15968: add DARPA credit on affected files 15969: [d8adf1c2ba22] 15970: 15971: * set_perms.c: 15972: add DARPA credit on affected files 15973: [3d79fdabb582] 15974: 15975: * pathnames.h.in: 15976: add DARPA credit on affected files 15977: [e334cdda422f] 15978: 15979: * logging.c, parse.c: 15980: add DARPA credit on affected files 15981: [8f75f822755b] 15982: 15983: * auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c, 15984: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, fileops.c, 15985: find_path.c, getprogname.c, getspwuid.c, goodpath.c, interfaces.c, 15986: interfaces.h: 15987: add DARPA credit on affected files 15988: [da66e28fb3f5] 15989: 15990: * auth/kerb5.c, auth/pam.c: 15991: add DARPA credit on affected files 15992: [15da3021b49c] 15993: 15994: * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, 15995: auth/fwtk.c, auth/kerb4.c, parse.lex, parse.yacc, utime.c, 15996: version.h: 15997: add DARPA credit on affected files 15998: [868d54cbddea] 15999: 16000: * env.c: 16001: add DARPA credit on affected files 16002: [90239f51ef0a] 16003: 16004: * defaults.c, defaults.h: 16005: add DARPA credit on affected files 16006: [6a64205fd1eb] 16007: 16008: * compat.h: 16009: add DARPA credit on affected files 16010: [316a735783c4] 16011: 16012: * Makefile.in, alloc.c, check.c: 16013: add DARPA credit on affected files 16014: [cd939e05c810] 16015: 16016: * LICENSE: 16017: slightly different wording for the darpa credit 16018: [e468909c4a21] 16019: 16020: 2003-04-15 Todd C. Miller <Todd.Miller@courtesan.com> 16021: 16022: * LICENSE: 16023: Add DARPA credit 16024: [8eb20e2cd63e] 16025: 16026: 2003-04-14 Todd C. Miller <Todd.Miller@courtesan.com> 16027: 16028: * auth/kerb5.c: 16029: Use krb5_princ_component() instead of krb5_princ_realm() for MIT 16030: Kerberos like we did before I messed things up ;-) 16031: 16032: Use krb5_principal_get_comp_string() to do the same thing w/ 16033: Heimdal. I'm not sure if the component should be 0 or 1 in this 16034: case. 16035: 16036: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since 16037: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there 16038: should be a configure check for this I guess. 16039: [74919a3933fe] 16040: 16041: 2003-04-13 Todd C. Miller <Todd.Miller@courtesan.com> 16042: 16043: * sample.sudoers: 16044: builtin -> built-in; Jason McIntyre 16045: [027f2187923e] 16046: 16047: * TROUBLESHOOTING, config.h.in, configure, configure.in: 16048: builtin -> built-in; Jason McIntyre 16049: [70b81ac48943] 16050: 16051: * sudoers.pod: 16052: built in -> built-in; Jason McIntyre 16053: [da658ef5138d] 16054: 16055: 2003-04-09 Todd C. Miller <Todd.Miller@courtesan.com> 16056: 16057: * CHANGES: 16058: checkpoint for 1.6.7p3 16059: [da85f989fadf] 16060: 16061: * HISTORY: 16062: Update info on the early years @ SUNY-Buffalo from Cliff Spencer. 16063: Amazingly, sudo source from 1985 is available via groups.google.com 16064: [39e0fc85b89f] 16065: 16066: * sudo.c: 16067: Don't change rl.rlim_max for RLIMIT_CORE. We need only set 16068: rl.rlim_cur to 0 to turn off core dumps. This may be needed for the 16069: RLIMIT_CORE restoration on some OSes. 16070: [7e2c1a7adfd8] 16071: 16072: 2003-04-04 Todd C. Miller <Todd.Miller@courtesan.com> 16073: 16074: * auth/kerb5.c: 16075: Make this compile on Heimdal and MIT Kerberos 5 16076: [44c07d615868] 16077: 16078: * config.h.in, configure, configure.in: 16079: Check for heimdal even if we found krb5-config and define 16080: HAVE_HEIMDAL. 16081: [aba0126f0059] 16082: 16083: * auth/kerb5.c: 16084: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5. The former is 16085: no longer defined by MIT kerb5 (though it used to be and indeed 16086: remains so in Heimdal). 16087: [e5a6c64d7cd5] 16088: 16089: 2003-04-03 Todd C. Miller <Todd.Miller@courtesan.com> 16090: 16091: * mkinstalldirs: 16092: Remove newer stuff that passes multiple (possibly duplicate) 16093: directories to "mkdir -p" since that seems to break on Tru64 Unix at 16094: least. This basically brings back what shipped with sudo 1.6.6. 16095: [f2a1abd872b3] 16096: 16097: 2003-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 16098: 16099: * auth/kerb5.c: 16100: Correct number of args to krb5_principal_get_realm() and fix an 16101: unclosed comment that hid the bug. 16102: [0b37f8ce7824] 16103: 16104: * configure: 16105: regen 16106: [1876cb840fe0] 16107: 16108: * configure.in: 16109: ++version 16110: [480aff7c048e] 16111: 16112: * README: 16113: ++version 16114: [488e0bbff613] 16115: 16116: * Makefile.in: 16117: ++version 16118: [97ef63cedc38] 16119: 16120: * INSTALL.binary: 16121: ++version 16122: [a506204e77d0] 16123: 16124: * INSTALL: 16125: ++version 16126: [555aeba5c2bf] 16127: 16128: * CHANGES, version.h: 16129: ++version 16130: [f66985a64063] 16131: 16132: * BUGS: 16133: ++version 16134: [ea3573432412] 16135: 16136: * configure.in: 16137: use krb5-config to determine Kerberos V details if it exists 16138: [7b46bbdaf774] 16139: 16140: * alloc.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c, 16141: auth/securid5.c, auth/sia.c, check.c, compat.h, defaults.c, env.c, 16142: find_path.c, interfaces.c, logging.c, parse.c, sudo.c, sudo.h, 16143: testsudoers.c, visudo.c: 16144: Use warn/err and getprogname() throughout. The main exception is 16145: openlog(). Since the admin may be filtering logs based on the 16146: program name in the log files, hard code this to "sudo". 16147: [9f180d015cfa] 16148: 16149: * Makefile.in: 16150: Add getprogname.c and err.c 16151: [d411c54a07dc] 16152: 16153: * configure: 16154: regen 16155: [6d585d391acc] 16156: 16157: * config.h.in, configure.in: 16158: Add checks for getprognam(), __progname and err.h 16159: [bcbccf61d34a] 16160: 16161: * emul/err.h: 16162: For systems withour err/warn functions. 16163: [1b33118884d9] 16164: 16165: * err.c: 16166: For systems withour err/warn functions. 16167: [26721f6b041f] 16168: 16169: * getprogname.c: 16170: For systems neither getprogname() nor __progname; uses Argv[0]. 16171: [841cf42af1eb] 16172: 16173: 2003-04-01 Todd C. Miller <Todd.Miller@courtesan.com> 16174: 16175: * CHANGES: 16176: checkpoint for 1.6.7p1 16177: [5bfdaf441dce] 16178: 16179: * sudo.c, testsudoers.c: 16180: fix strlcpy() rval check (innocuous) 16181: [e05ac7e0d1f3] 16182: 16183: * check.c: 16184: oflow detection in expand_prompt() was faulty (false positives). The 16185: count was based on strlcat() return value which includes the length 16186: of the entire string. 16187: [086c5a0acb25] 16188: 16189: 2003-03-31 Todd C. Miller <Todd.Miller@courtesan.com> 16190: 16191: * RUNSON, TODO: 16192: checkpoint for the sudo 1.6.7 release 16193: [096bab4da29a] [SUDO_1_6_7] 16194: 16195: * CHANGES: 16196: checkpoint for the sudo 1.6.7 release 16197: [87322187ed78] 16198: 16199: 2003-03-24 Todd C. Miller <Todd.Miller@courtesan.com> 16200: 16201: * logging.c: 16202: g/c unused variable 16203: [c57cd4a17765] 16204: 16205: * configure: 16206: regen 16207: [e7c1f581dfac] 16208: 16209: * configure.in: 16210: use man sections 8 and 5 for csops 16211: [87de581bda88] 16212: 16213: 2003-03-21 Todd C. Miller <Todd.Miller@courtesan.com> 16214: 16215: * configure: 16216: regen 16217: [cb1433a9c7a1] 16218: 16219: * configure.in: 16220: Add -lskey or -lopie directly to SUDO_LIBS instead of having 16221: AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage. 16222: [ac5667978939] 16223: 16224: * configure: 16225: regen 16226: [638459118a2a] 16227: 16228: * configure.in: 16229: Add --with-blibpath for AIX. An alternate libpath may be specified 16230: or 16231: -blibpath support can be disabled. Also change conifgure such that 16232: -blibpath is not specified if no -L libpaths were added to 16233: SUDO_LDFLAGS. 16234: [c7d17b480cad] 16235: 16236: * aclocal.m4: 16237: Add --with-blibpath for AIX. An alternate libpath may be specified 16238: or 16239: -blibpath support can be disabled. Also change conifgure such that 16240: -blibpath is not specified if no -L libpaths were added to 16241: SUDO_LDFLAGS. 16242: [37022e991575] 16243: 16244: * INSTALL: 16245: Add --with-blibpath for AIX. An alternate libpath may be specified 16246: or 16247: -blibpath support can be disabled. Also change conifgure such that 16248: -blibpath is not specified if no -L libpaths were added to 16249: SUDO_LDFLAGS. 16250: [4b4bbe5bbe1b] 16251: 16252: * configure.in: 16253: add AIX blibpath support 16254: [16ba788bf086] 16255: 16256: * INSTALL, configure.in: 16257: --with-skey and --with-opie now take an option directory argument 16258: This obsoletes a --with-csops hack (/tools/cs/skey) 16259: 16260: Also remove the remaining direct uses of "echo" 16261: [5b4986a90c03] 16262: 16263: 2003-03-20 Todd C. Miller <Todd.Miller@courtesan.com> 16264: 16265: * configure.in: 16266: Detect KTH Kerberos IV and deal with it. Also make -lroken optional 16267: for KTH Kerberos IV and V. 16268: [119f97b48e18] 16269: 16270: * aclocal.m4: 16271: Add SUDO_APPEND_LIBPATH function that add -L/path/to/dir (and 16272: -R/path/to/dir if $with_rpath) to the specified variable. 16273: [e55e49d076ce] 16274: 16275: * INSTALL, configure.in: 16276: Add -R/path/to/libs for Solaris and SVR4. There is a new configure 16277: option, --with-rpath to control this behavior. 16278: [d4730c5399ab] 16279: 16280: * configure.in: 16281: for kerb4 put libdes after libkrb on the link line 16282: [5c566100eab6] 16283: 16284: * auth/kerb4.c: 16285: typo 16286: [6541b72b64a3] 16287: 16288: * configure.in: 16289: fix kerberos lib check when a path is specified 16290: [ae833a914c6f] 16291: 16292: * logging.c: 16293: Fix boolean thinko in SIGCHLD reaper and call reapchild after 16294: sending mail instead of doing a conditional sudo_waitpid. 16295: [86fa9a35df5a] 16296: 16297: 2003-03-19 Todd C. Miller <Todd.Miller@courtesan.com> 16298: 16299: * configure: 16300: regen 16301: [e6275cf528ba] 16302: 16303: * configure.in: 16304: replace =DIR with [=DIR] where sensible 16305: [c39a59173b38] 16306: 16307: * configure.in: 16308: o Use AC_MSG_* instead of "echo" o New Kerberos include/lib 16309: detection based on openssh's configure.in 16310: [5b7a340912df] 16311: 16312: * INSTALL: 16313: --with-kerb4 and --with-kerb5 now take an optional argument. 16314: [71ed87fc9c64] 16315: 16316: 2003-03-16 Todd C. Miller <Todd.Miller@courtesan.com> 16317: 16318: * auth/securid.c: 16319: Kill remaining strcpy(), the programmer's guide says username is 32 16320: bytes. 16321: [bdba70fcd08d] 16322: 16323: * auth/kerb4.c: 16324: trat uid_t as unsigned long for printf and use snprintf, not sprintf 16325: [8072f5f8966d] 16326: 16327: * auth/rfc1938.c: 16328: use snprintf 16329: [fc0c70c665fe] 16330: 16331: 2003-03-15 Todd C. Miller <Todd.Miller@courtesan.com> 16332: 16333: * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, 16334: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c, 16335: auth/rfc1938.c, auth/sudo_auth.c: 16336: update copyright year 16337: [b0a10ccb1d0e] 16338: 16339: * sudo.man.in, sudoers.man.in, visudo.man.in: 16340: update copyright year 16341: [8fce0034eb51] 16342: 16343: * LICENSE, Makefile.in, aclocal.m4, alloc.c, check.c, compat.h, 16344: configure.in, env.c, find_path.c, interfaces.c, logging.c, parse.c, 16345: parse.lex, parse.yacc, set_perms.c, sudo.c, sudo.h, sudo.pod, 16346: sudoers.pod, testsudoers.c, version.h, visudo.c, visudo.pod: 16347: update copyright year 16348: [d541e75fe520] 16349: 16350: * check.c, env.c, sudo.c: 16351: Cast [ug]ids to unsigned long and printf with %lu 16352: [2ede64d3592b] 16353: 16354: * configure: 16355: regen 16356: [c7c3245bdf3e] 16357: 16358: * configure.in: 16359: correct error messages for --with-sudoers-{mode,uid,gid} 16360: [77fc15b1c9db] 16361: 16362: * alloc.c: 16363: make the malloc(0) error specific to each function to aid tracking 16364: down bugs. 16365: [a58c34374b4b] 16366: 16367: * alloc.c: 16368: deal with platforms where size_t is signed and there is no SIZE_MAX 16369: or SIZE_T_MAX 16370: [7192abb4ab4e] 16371: 16372: * auth/kerb5.c: 16373: Make this compile w/ Heimdal and fix some gcc warnings. 16374: [f52f026f31c2] 16375: 16376: * sudo.c: 16377: Use stat_sudoers macro so --with-stow can work 16378: [c3674735c139] 16379: 16380: * INSTALL, config.h.in, configure, configure.in: 16381: Add support for --with-stow based on patches from Robert Uhl 16382: [b274cc1dd52c] 16383: 16384: * env.c: 16385: fix indentation 16386: [110d9f1721b1] 16387: 16388: * configure.in: 16389: back out rev 1.352 16390: [1eee91c83f11] 16391: 16392: * lex.yy.c: 16393: regen 16394: [72fba1c9590b] 16395: 16396: * parse.lex: 16397: use strlcpy, not strncpy 16398: [4faccbaeccef] 16399: 16400: * set_perms.c: 16401: Fix typo; check pw_uid, not pw_gid after setusercontext() failure. 16402: [33bf0d18fdc1] 16403: 16404: * logging.c: 16405: use pid_t 16406: [3e0536993d2c] 16407: 16408: 2003-03-14 Todd C. Miller <Todd.Miller@courtesan.com> 16409: 16410: * strlcat.c, strlcpy.c: 16411: Make gcc shutup about unused rcsid 16412: [1669a0c74e9e] 16413: 16414: * interfaces.c: 16415: Move the n == 0 check for the non-getifaddrs cas 16416: [2460be061b2a] 16417: 16418: * auth/rfc1938.c: 16419: skeychallenge() on NetBSD take a size parameter 16420: [05acc2012801] 16421: 16422: * configure: 16423: regen 16424: [24bccf4749e8] 16425: 16426: * configure.in: 16427: put -ldl after -lpam, not before; fixes static linking on Linux 16428: [7f06b7b2b4d8] 16429: 16430: * interfaces.c: 16431: Avoid malloc(0) and fix the loop invariant for the getifaddrs() 16432: case. 16433: [239a55068646] 16434: 16435: * sudo.cat, sudoers.cat, visudo.cat: 16436: regen 16437: [4a2eed3981ca] 16438: 16439: * sudo.man.in, sudoers.man.in, visudo.man.in: 16440: regen 16441: [2c96ea2cf930] 16442: 16443: * Makefile.in: 16444: Preserve copyright notice from .pod file in .man.in file 16445: [519fbd09aebc] 16446: 16447: * visudo.pod: 16448: Add sudoers(5) to SEE ALSO 16449: [77ecfe3aedf1] 16450: 16451: 2003-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 16452: 16453: * lex.yy.c: 16454: regen 16455: [6f5751ce0b74] 16456: 16457: * parse.lex: 16458: Don't assume libc can realloc() a NULL string. If malloc/realloc 16459: fails, make sure we just return; yyerror() is not terminal. 16460: [1b8618623708] 16461: 16462: * lex.yy.c: 16463: regen 16464: [5d31b46191c6] 16465: 16466: * parse.lex: 16467: simplify fill_args a little and use strlcpy for paranoia 16468: [0ea35a55542b] 16469: 16470: * sudo.tab.c: 16471: regen 16472: [5a8d508d708b] 16473: 16474: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c, 16475: testsudoers.c: 16476: Use strlc{at,py} for paranoia's sake and exit on overflow. In all 16477: cases the strings were either pre-allocated to the correct size of 16478: length checks were done before the copy but a little paranoia can go 16479: a long way. 16480: [e73d28f1d14e] 16481: 16482: * sudo.h: 16483: Add strlc{at,py} protos 16484: [748ffc7fc7f4] 16485: 16486: * env.c, interfaces.c: 16487: Use erealloc3() 16488: [47f2cb46aba8] 16489: 16490: * configure: 16491: regen 16492: [e7e2fb79f935] 16493: 16494: * alloc.c: 16495: Oflow test of nmemb > SIZE_MAX / size is fine (don't need >=). Use 16496: memcpy() instead of strcpy() in estrdup() so this is strcpy()-free. 16497: [7e0fa4d6fc1d] 16498: 16499: * sudo.c: 16500: snprintf() a uid as %lu, not %ld to match the MAX_UID_T_LEN test in 16501: configure. 16502: [09ea4d3959e9] 16503: 16504: * aclocal.m4: 16505: In MAX_UID_T_LEN test cast uid_t to unsigned long, just unsigned. 16506: [31b4fdfdb8bf] 16507: 16508: 2003-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 16509: 16510: * sudo.c: 16511: Use snprintf() for paranoia 16512: [a2659ceb46de] 16513: 16514: * parse.yacc: 16515: Use emalloc2 and erealloc3 16516: [90a069842401] 16517: 16518: * Makefile.in: 16519: strlc{at,py} for those w/o it 16520: [bac82dc916ee] 16521: 16522: * strlcat.c, strlcpy.c: 16523: stlc{at,py} for those w/o it. 16524: [ce7254f5db09] 16525: 16526: * config.h.in, configure, configure.in: 16527: Add stlc{at,py} for those w/o it. 16528: [00f08219657a] 16529: 16530: * alloc.c, sudo.h: 16531: Add erealloc3(), a realloc() version of emalloc2(). 16532: [c96eaf08bbed] 16533: 16534: * interfaces.c, sudo.c: 16535: Use emalloc2() to allocate N things of a certain size. 16536: [1e0aba365555] 16537: 16538: * alloc.c, sudo.h: 16539: Add emalloc2() -- like calloc() but w/o the bzero and with 16540: error/oflow checking. 16541: [292150bc4153] 16542: 16543: * alloc.c: 16544: Error out on malloc(0); suggested by theo 16545: [995279e81326] 16546: 16547: 2003-03-10 Todd C. Miller <Todd.Miller@courtesan.com> 16548: 16549: * configure, configure.in: 16550: fix a typo; David Krause 16551: [f161213a17ab] 16552: 16553: 2003-03-07 Todd C. Miller <Todd.Miller@courtesan.com> 16554: 16555: * sudo.pod: 16556: fix typo 16557: [3ae5ad9a351a] 16558: 16559: 2003-03-04 Todd C. Miller <Todd.Miller@courtesan.com> 16560: 16561: * env.c: 16562: Remove DYLD_ from the environment for MacOS X; from bbraun 16563: [38caad5a3935] 16564: 16565: 2003-03-01 Todd C. Miller <Todd.Miller@courtesan.com> 16566: 16567: * config.h.in, configure.in: 16568: not not; Anil Madhavapeddy 16569: [d4f4f0bfc66b] 16570: 16571: 2003-01-23 Todd C. Miller <Todd.Miller@courtesan.com> 16572: 16573: * sudo.pod, sudoers.pod, visudo.pod: 16574: typos; jmc@openbsd.org 16575: [868c0f09bf9e] 16576: 16577: 2003-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 16578: 16579: * parse.yacc: 16580: Add some missing ';' rule terminators that bison warns about. 16581: [535b0b8dcce5] 16582: 16583: * config.sub: 16584: fix typo I introduced in last merge 16585: [81db4e4f43fe] 16586: 16587: * configure: 16588: regenerate with autoconf 2.57 16589: [ca0c1e9564f8] 16590: 16591: * config.h.in: 16592: Add missing "$HOME" 16593: [209186197ad1] 16594: 16595: * configure.in: 16596: Add some more square backets to make autoconf 2.57 happy 16597: [b5639c14faf7] 16598: 16599: * config.sub, mkinstalldirs: 16600: Updates from autoconf-2.57 16601: [36be35eb331b] 16602: 16603: * config.guess: 16604: Updates from autoconf-2.57 16605: [ea0f8ca622af] 16606: 16607: 2003-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 16608: 16609: * sudo.tab.h: 16610: regen 16611: [13a65a421567] 16612: 16613: * lex.yy.c, sudo.tab.c: 16614: regen 16615: [0b529db7cb6d] 16616: 16617: * parse.lex, parse.yacc, sudoers.pod: 16618: Add support for Defaults>RunasUser 16619: [20d726373175] 16620: 16621: 2003-01-07 Todd C. Miller <Todd.Miller@courtesan.com> 16622: 16623: * visudo.c: 16624: fclose() yyin after each yyparse() is done and use fopen() instead 16625: of using freopen(). 16626: [587f8a2df857] 16627: 16628: * parse.lex: 16629: Better fix for sudoers files w/o a newline before EOF. It looks 16630: like the issue is that yyrestart() does not reset the start 16631: condition to INITIAL which is an issue since we parse sudoers 16632: multiple times. 16633: [920f8326968a] 16634: 16635: 2003-01-06 Todd C. Miller <Todd.Miller@courtesan.com> 16636: 16637: * parse.lex: 16638: Work around what appears to be a flex bug when dealing with files 16639: that lack a final newline before EOF. This adds a rule to match EOF 16640: in the non-initial states which resets the state to INITIAL and 16641: throws an error. 16642: [b94943bb1f81] 16643: 16644: * visudo.c: 16645: o The parser needs sudoers to end with a newline but some editors 16646: (emacs) may not add one. Check for a missing newline at EOF and 16647: add one if needed. o Set quiet flag during initial sudoers parse (to 16648: get options) o Move yyrestart() call and always use freopen() to 16649: open yyin after initial sudoers parse. 16650: [12d12f9b07aa] 16651: 16652: 2002-12-15 Todd C. Miller <Todd.Miller@courtesan.com> 16653: 16654: * set_perms.c: 16655: Fix pasto/thinko in setresgid()/setregid() usage. Want to set 16656: effective gid, not real gid, when reading sudoers. 16657: [c7d18b810fcd] 16658: 16659: * set_perms.c: 16660: don't compile set_perms_posix if we have setreuid or setresuid 16661: [b9cea7a81a29] 16662: 16663: 2002-12-14 Todd C. Miller <Todd.Miller@courtesan.com> 16664: 16665: * sudo.pod, sudoers.pod: 16666: document new prompt escapes 16667: [2f088076b640] 16668: 16669: * check.c: 16670: Add %U and %H escapes and redo prompt rewriting. "%%" now gets 16671: collapsed to "%" as was originally intended. This also gets rid of 16672: lastchar (does lookahead instead of lookback) which should simplify 16673: the logic slightly. 16674: [4b707b77b3c7] 16675: 16676: 2002-12-13 Todd C. Miller <Todd.Miller@courtesan.com> 16677: 16678: * tgetpass.c: 16679: Write the prompt *after* turning off echo to avoid some password 16680: characters being echoed on heavily-loaded machines with fast 16681: typists. 16682: [d38c57775915] 16683: 16684: * config.sub: 16685: Add support for mipseb; wiz@danbala.tuwien.ac.at 16686: [cfdac87ed5c8] 16687: 16688: * configure.in: 16689: Fix IRIX fallout from name changes in man dir/sect Makefile 16690: variables. Patch from erici AT motown DOT cc DOT utexas DOT edu 16691: [9a7618755c23] 16692: 16693: * auth/pam.c: 16694: Keep a local copy of tgetpass_flags so we don't add in TGP_ECHO to 16695: the global copy. Problem noted by Peter Pentchev. 16696: [d0a3e189cb06] 16697: 16698: 2002-11-28 Todd C. Miller <Todd.Miller@courtesan.com> 16699: 16700: * sudo.tab.c: 16701: regen 16702: [23b931359087] 16703: 16704: * parse.yacc: 16705: Add missing yyerror() calls; YYERROR does not seem to call this for 16706: us. 16707: [0be7aeb3ac57] 16708: 16709: 2002-11-26 Todd C. Miller <Todd.Miller@courtesan.com> 16710: 16711: * sudo.c: 16712: fix typo in comment; Pedro Bastos 16713: [d7406c460e99] 16714: 16715: 2002-11-22 Todd C. Miller <Todd.Miller@courtesan.com> 16716: 16717: * INSTALL: 16718: document --disable-setresuid 16719: [fbd03d03a027] 16720: 16721: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c, 16722: auth/sudo_auth.c: 16723: Sprinkle some volatile qualifiers to prevent over-enthusiastic 16724: optimizers from removing memset() calls. 16725: [5370ac0e6129] 16726: 16727: * logging.c, parse.yacc: 16728: minor sign fixes pointed out by gcc -Wsign-compare 16729: [db872438337f] 16730: 16731: * set_perms.c, sudo.c, sudo.h: 16732: Revamp set_perms. We now use a version based on setresuid() or 16733: setreuid() when possible since that allows us to support the 16734: stay_setuid option and we always know exactly what the semantics 16735: will be (various Linux kernels have broken POSIX saved uid support). 16736: [523bc212396c] 16737: 16738: * config.h.in, configure: 16739: regen from configure.in 16740: [351877ea2624] 16741: 16742: * configure.in: 16743: Add checks for setresuid() and a way to disable using it 16744: [a5b21653d169] 16745: 16746: * compat.h: 16747: No long need to emulate set*[ug]id() via setres[ug]id() or 16748: setre[ug]id(). The new set_perms stuff only uses things it knows are 16749: there. 16750: [47884bd5d1d9] 16751: 16752: * sudo.c: 16753: Before exec, restore state of signal handlers to be the same as when 16754: we were initialy invoked instead of just reseting to SIG_DFL. Fixes 16755: a problem when using sudo with nohup. Based on a patch from Paul 16756: Markham. 16757: [f8f5a1484faa] 16758: 16759: * sudo.c: 16760: o timestamp_uid should be uid_t, not int o clarify error message 16761: when sudo is run by root and no_root_sudo is set 16762: [19dda0734264] 16763: 16764: 2002-09-19 Todd C. Miller <Todd.Miller@courtesan.com> 16765: 16766: * README: 16767: update ftp link for bison 16768: [98bc191016e3] 16769: 16770: 2002-07-20 Todd C. Miller <Todd.Miller@courtesan.com> 16771: 16772: * set_perms.c: 16773: Error out if setusercontext() fails and the runas user is not root. 16774: [089f9ade4686] 16775: 16776: 2002-05-20 Todd C. Miller <Todd.Miller@courtesan.com> 16777: 16778: * auth/securid5.c: 16779: Fix rcsid 16780: [07e9e85dcc2f] 16781: 16782: * configure.in: 16783: Fix SecurID API test 16784: [5ec201f454a5] 16785: 16786: 2002-05-17 Todd C. Miller <Todd.Miller@courtesan.com> 16787: 16788: * env.c: 16789: typo in comment 16790: [9d385c9ac533] 16791: 16792: * configure.in: 16793: securid5 stuff needs pthreads. Just adding -lpthread is suboptimal 16794: but I don't see a better way at the moment. 16795: [f89e55cbb313] 16796: 16797: * Makefile.in, auth/securid5.c: 16798: SecurID API version 5 support from Michael Stroucken 16799: [68500ac7e531] 16800: 16801: * configure.in: 16802: Add check for SecurID 5.0 API 16803: [1ee242e6de6b] 16804: 16805: 2002-05-08 Todd C. Miller <Todd.Miller@courtesan.com> 16806: 16807: * strerror.c: 16808: We actually do still need config.h to get the 'const' definition for 16809: K&R C. 16810: [d9c982032d85] 16811: 16812: 2002-05-05 Todd C. Miller <Todd.Miller@courtesan.com> 16813: 16814: * configure: 16815: regen with autoconf 2.5.3 16816: [c71fc086eef5] 16817: 16818: * configure.in: 16819: Don't set sysconfdir to '/etc' if the user has specified a --prefix. 16820: [d90da1efafd9] 16821: 16822: * configure.in: 16823: Some fixes for autoconf 2.53 from Robert Uhl o don't AC_SUBST 16824: LIBOBJS o force a 4th arg for AC_CHECK_HEADER() to workaround a bug 16825: [dd67afefa90d] 16826: 16827: * env.c, sudo.c, sudo.h: 16828: No need for dump_badenv() now that dump_defaults() knows how to dump 16829: lists. 16830: [6bcda468501d] 16831: 16832: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in, 16833: version.h: 16834: ++version 16835: [44e3b8f95f0b] 16836: 16837: * sudoers.pod: 16838: document timestampowner 16839: [37ebd69e9dd1] 16840: 16841: * check.c: 16842: Don't call set_perms() when doing timestamp stuff unless 16843: timestamp_uid != 0. 16844: [63a63d41d18c] 16845: 16846: * auth/sudo_auth.c, check.c, logging.c, parse.c, set_perms.c, sudo.c, 16847: sudo.h, testsudoers.c: 16848: g/c second arg to set_perms--it is no longer used 16849: [7ac4ce50c612] 16850: 16851: 2002-05-03 Todd C. Miller <Todd.Miller@courtesan.com> 16852: 16853: * check.c, set_perms.c, sudo.c, sudo.h: 16854: Add support for non-root timestamp dirs. This allows the timestamp 16855: dir to be shared via NFS (though this is not recommended). 16856: [faa83dd2b7fb] 16857: 16858: * def_data.c, def_data.h, def_data.in: 16859: Add timestampowner, "Owner of the authentication timestamp dir" 16860: [d47640d4c86a] 16861: 16862: 2002-05-02 Todd C. Miller <Todd.Miller@courtesan.com> 16863: 16864: * env.c: 16865: Don't try to pre-compute the size of the new envp, just allocate 16866: space up front and realloc as needed. Changes to the new env 16867: pointer must all be made through insert_env() which now keeps track 16868: of spaced used and allocates as needed. 16869: [39bc934a9f2c] 16870: 16871: 2002-04-26 Todd C. Miller <Todd.Miller@courtesan.com> 16872: 16873: * configure: 16874: regen 16875: [0e12c09bb790] 16876: 16877: * configure.in: 16878: Fix two typo/pastos; from jrj@purdue.edu 16879: [b718a4bf1181] 16880: 16881: 2002-04-25 Todd C. Miller <Todd.Miller@courtesan.com> 16882: 16883: * INSTALL.binary, README: 16884: ++version 16885: [a1e33027278c] [SUDO_1_6_6] 16886: 16887: * configure, sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, 16888: visudo.cat, visudo.man.in: 16889: regen 16890: [19eb2be283ef] 16891: 16892: * CHANGES, RUNSON, TODO: 16893: Sync with 1.6.6 16894: [2ff9a9087f63] 16895: 16896: * check.c: 16897: The the loop used to expand %h and %u, the lastchar variable was not 16898: being initialized. This means that if the last char in the prompt 16899: is '%' and the first char is 'h' or 'u' a extra copy of the host or 16900: user name would be copied, for which space had not been allocated. 16901: [b2e27197857d] 16902: 16903: 2002-04-18 Todd C. Miller <Todd.Miller@courtesan.com> 16904: 16905: * BUGS, INSTALL, Makefile.in, configure.in, version.h: 16906: crank version to 1.6.6 16907: [cfd08689e597] 16908: 16909: * auth/afs.c: 16910: #undef VOID to get rid of an AFS warning 16911: [b40760564dc1] 16912: 16913: * env.c: 16914: Use easprintf instead of emalloc + sprintf for some things. 16915: [e7bfe2e69a03] 16916: 16917: 2002-03-16 Todd C. Miller <Todd.Miller@courtesan.com> 16918: 16919: * lex.yy.c, sudo.tab.c: 16920: regen 16921: [35327104383d] 16922: 16923: * parse.c, parse.lex, parse.yacc, testsudoers.c: 16924: Remove Chris Jepeway's email address so people don't bug him ;-) 16925: [c03410747a69] 16926: 16927: 2002-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 16928: 16929: * sudo.c: 16930: Move endpwent() to be after set_perms(PERM_RUNAS, ...) and also call 16931: endgrent() at the same time. 16932: [28b6097d5d1a] 16933: 16934: 2002-02-22 Todd C. Miller <Todd.Miller@courtesan.com> 16935: 16936: * INSTALL: 16937: Make it clear which configure options take arguments. 16938: [38529e7efad0] 16939: 16940: 2002-01-25 Todd C. Miller <Todd.Miller@courtesan.com> 16941: 16942: * compat.h: 16943: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there is no 16944: RLIM_INFINITY, just pretend it is -1. This works because we only 16945: check for RLIM_INFINITY and do not set anything to that value. 16946: [53173d34e6eb] 16947: 16948: 2002-01-22 Todd C. Miller <Todd.Miller@courtesan.com> 16949: 16950: * auth/pam.c: 16951: Zero and free allocated memory when there is a conversation error. 16952: [e342133db579] 16953: 16954: * auth/bsdauth.c: 16955: Use sigaction() not signal() 16956: [126c2790561f] 16957: 16958: * INSTALL: 16959: Mention that some linux kernels have broken POSIX saved ID support 16960: [571ef1a893d3] 16961: 16962: * CHANGES: 16963: checkpoint for 1.6.5p2 16964: [9e9e456f7f43] 16965: 16966: * configure: 16967: regen 16968: [d53703a46708] 16969: 16970: * configure.in: 16971: Add --disable-setreuid flag 16972: [3b9f2679cb55] 16973: 16974: * INSTALL: 16975: Document new --disable-setreuid option and change description for 16976: --disable-saved-ids to match new error message. 16977: [14fd3e5f60a5] 16978: 16979: * set_perms.c: 16980: fatal() now takes an argument that determines whether or not to call 16981: perror(). 16982: [d826b25e62ff] 16983: 16984: * TROUBLESHOOTING: 16985: Update for new error messages from set_perms() 16986: [78007c3f76a9] 16987: 16988: * PORTING: 16989: Update for new error messages from set_perms() 16990: [60c545a6bcff] 16991: 16992: 2002-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 16993: 16994: * auth/pam.c: 16995: Make this compile w/o warnings 16996: [b90843a29af5] 16997: 16998: * auth/pam.c: 16999: Mention that we can't use pam_acct_mgmt() 17000: [1dfc5a6e0479] 17001: 17002: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c: 17003: The user's password was not zeroed after use when AIX 17004: authentication, BSD authentication, FWTK or PAM was in use. 17005: [b18fff30b1e7] 17006: 17007: 2002-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 17008: 17009: * auth/pam.c: 17010: Avoid giving PAM a NULL password response, use the empty string 17011: instead. This avoids a log warning when the user hits ^C at the 17012: password prompt when PAM is in use. 17013: [c3315805e4e4] 17014: 17015: * auth/pam.c: 17016: Don't check the return value of pam_setcred(). In Linux-PAM 0.75 17017: pam_setcred() returns the last saved return code, not the return 17018: code for the setcred module. Because we haven't called 17019: pam_authenticate(), this is not set and so pam_setcred() returns 17020: PAM_PERM_DENIED. 17021: [73db145fa179] 17022: 17023: * Makefile.in: 17024: Don't need a '/' between $(DESTDIR) and a directory. 17025: [0901ca618176] 17026: 17027: * Makefile.binary: 17028: Don't need a '/' between $(DESTDIR) and a directory. 17029: [cd7eb6098b87] 17030: 17031: 2002-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 17032: 17033: * configure: 17034: regen 17035: [41b12c039282] 17036: 17037: * configure.in: 17038: o BSDi also has a bogus setreuid() o Old FreeBSD has a bogus 17039: setreuid() o new NetBSD has a real setreuid() o add check for 17040: freeifaddrs() if getifaddrs() exists. 17041: [a82ee3b01733] 17042: 17043: * config.h.in, interfaces.c: 17044: Older BSDi releases lack freeifaddrs() so add a test for that and if 17045: it is not present just use free(). 17046: [6270671ea9d5] 17047: 17048: 2002-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 17049: 17050: * CHANGES, RUNSON: 17051: Checkpoint for 1.6.5p1 17052: [26134ecf9b36] 17053: 17054: * auth/passwd.c: 17055: Return AUTH_FAILURE in passwd_init() if skeyaccess() denies access 17056: to normal passwords, not AUTH_FATAL (which just causes an exit). 17057: [785e0f4bc0e2] 17058: 17059: * visudo.c: 17060: Don't use memory after it has been freed. 17061: [c60492739fdb] 17062: 17063: * auth/passwd.c: 17064: skeyaccess() wants a struct passwd * not a char *; Patch from 17065: Phillip E. Lobbes 17066: [65a1d3806fcd] [SUDO_1_6_5] 17067: 17068: * BUGS: 17069: ++version 17070: [b2e1825e692e] 17071: 17072: * CHANGES, RUNSON, TODO: 17073: checkpoint for sudo 1.6.5 17074: [d730945622e7] 17075: 17076: 2002-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 17077: 17078: * configure: 17079: regen 17080: [49744c403ac9] 17081: 17082: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in: 17083: version 1.6.5 17084: [ec30a5f7fc45] 17085: 17086: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 17087: visudo.man.in: 17088: sudo version 1.6.5 17089: [458a3bed535d] 17090: 17091: * logging.c: 17092: o when invoking the mailer as root use a hard-coded environment that 17093: doesn't include any info from the user's environment. Basically 17094: paranoia. 17095: 17096: o Add support for the NO_ROOT_MAILER compile-time option and run the 17097: mailer as the user and not root if NO_ROOT_MAILER is defined. 17098: [4df351ec92ce] 17099: 17100: * set_perms.c, sudo.h: 17101: Bring back PERM_FULL_USER 17102: [edb6039bb284] 17103: 17104: * configure: 17105: regen 17106: [3eb2943afa03] 17107: 17108: * version.h: 17109: version 1.6.5 17110: [044fc9a0c72b] 17111: 17112: * INSTALL, config.h.in, configure.in: 17113: Add --disable-root-mailer option to run the mailer as the user and 17114: not root. 17115: [e9f805397963] 17116: 17117: * CHANGES: 17118: checkpoint for 1.6.4p2 17119: [b58aae5aa98a] 17120: 17121: * PORTING: 17122: Mention the "seteuid(0): Operation not permitted" problem here too 17123: just for good measure. 17124: [90135b37a691] 17125: 17126: 2002-01-15 Todd C. Miller <Todd.Miller@courtesan.com> 17127: 17128: * env.c, getspwuid.c, sudo.c: 17129: The SHELL environment variable was preserved from the user's 17130: environment instead of being reset based on the passwd database when 17131: the "env_reset" option was used. Now it is reset as it should be. 17132: [300066ef3c71] 17133: 17134: * configure: 17135: regen 17136: [a47d779e6552] 17137: 17138: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c, 17139: sudo.c: 17140: Add a configure option to turn off use of POSIX saved IDs 17141: [fb18cc8e94d0] 17142: 17143: * configure: 17144: regen 17145: [d4f2f20025b6] 17146: 17147: * configure.in: 17148: add --with-efence option 17149: [45c4f33a8e88] 17150: 17151: * sudo.c: 17152: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a problem where 17153: "sudo -l" would not work if always_set_home was set. 17154: [c3a6de6c4800] 17155: 17156: * lex.yy.c: 17157: regen 17158: [417424452998] 17159: 17160: * parse.lex: 17161: Quoted commas were not being treated correctly in command line 17162: arguments. 17163: [753415541b37] 17164: 17165: * sudo.c: 17166: o Move the call to rebuild_env() until after MODE_RESET_HOME is set. 17167: Otherwise, the set_home option has no effect. 17168: 17169: o Fix use of freed memory when the "fqdn" flag is set. This was 17170: introduced by the fix for the "segv when gethostbynam() fails" bug. 17171: Also, we no longer call set_fqdn() if the "fqdn" flag is not set so 17172: there is no need to check the "fqdn" flag in set_fqdn() itself. 17173: [4b6a4245c04e] 17174: 17175: * env.c: 17176: Add 'continue' statements to optimize the switch statement. From 17177: Solar. 17178: [a82c76975ae5] 17179: 17180: 2002-01-13 Todd C. Miller <Todd.Miller@courtesan.com> 17181: 17182: * sudoers.cat, sudoers.man.in: 17183: Regen from new sudoers.pod 17184: [6ecc07b3d0e1] [SUDO_1_6_4] 17185: 17186: * sudoers.pod: 17187: Add caveat about stay_setuid flag 17188: [9d228a7bea1b] 17189: 17190: * sudo.c: 17191: If set_perms == set_perms_posix and the stay_setuid flag is not set, 17192: set all uids to 0 and use set_perms_fallback(). 17193: [c4e54d1ec86f] 17194: 17195: * set_perms.c, sudo.h: 17196: Remove PERM_FULL_USER (which is no longer used) and add 17197: PERM_FULL_ROOT (used when exec'ing the mailer). 17198: [15406c522ea2] 17199: 17200: * logging.c: 17201: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the mailer since we 17202: never want to run the mailer setuid. 17203: [2294853e0666] 17204: 17205: 2002-01-12 Todd C. Miller <Todd.Miller@courtesan.com> 17206: 17207: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in, 17208: visudo.pod: 17209: Use sudo.ws instead of courtesan.com in URLs 17210: [55204002a308] 17211: 17212: * Makefile.binary, Makefile.in: 17213: Fix mansect substitution 17214: [b7b5cbc3aa91] 17215: 17216: * Makefile.in: 17217: Substitute man sections in Makefile.binary 17218: [040deb785e56] 17219: 17220: * Makefile.binary: 17221: Sync install targets with Makefile.in and substitute in man 17222: sections. 17223: [77882a275281] 17224: 17225: * INSTALL, INSTALL.binary: 17226: version is 1.6.4 17227: [0f87aabbcb70] 17228: 17229: * Makefile.in: 17230: Repair bindist target 17231: [8d43bfe7e2d1] 17232: 17233: * CHANGES: 17234: sync for 1.6.4 17235: [13ca3d4a0a72] 17236: 17237: 2002-01-10 Todd C. Miller <Todd.Miller@courtesan.com> 17238: 17239: * install-sh: 17240: Fix case where neither whoami nor id are found 17241: [424dd270bc47] 17242: 17243: 2002-01-09 Todd C. Miller <Todd.Miller@courtesan.com> 17244: 17245: * install-sh: 17246: If neither whoami nor id exists, just assume we are root. 17247: [2d2644e42c53] 17248: 17249: * alloc.c: 17250: Add explicit cast to (VOID *) on malloc/realloc. Seems to be needed 17251: on AIX which for some reason isn't pulling in the malloc prototype. 17252: [231440d2ee3b] 17253: 17254: 2002-01-08 Todd C. Miller <Todd.Miller@courtesan.com> 17255: 17256: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: 17257: (c) 2002 17258: [700e3b41a68e] 17259: 17260: * CHANGES: 17261: checkpoint 17262: [33e604bd8d5b] 17263: 17264: * sudo.c: 17265: Defer assigning new environment until right before the exec. 17266: [f13c49e75c1c] 17267: 17268: * parse.c: 17269: kill extra blank line 17270: [12ef22e9dae3] 17271: 17272: 2002-01-07 Todd C. Miller <Todd.Miller@courtesan.com> 17273: 17274: * configure: 17275: regen 17276: [a6cd2d788f74] 17277: 17278: * configure.in: 17279: Use -O not -O2 for m88k-motorola-sysv* since motorola gcc-derived 17280: compiler doesn't recognise -O2. 17281: [5234aa543692] 17282: 17283: * HISTORY: 17284: Clarify origins of Root Group sudo a bit based on info from 17285: billp@rootgroup.com 17286: [4deef01c4208] 17287: 17288: 2002-01-03 Todd C. Miller <Todd.Miller@courtesan.com> 17289: 17290: * LICENSE: 17291: 2002 17292: [6c8e089dbd1a] 17293: 17294: * CHANGES: 17295: checkpoint for 1.6.4rc1 17296: [3349eb87a49f] 17297: 17298: 2002-01-02 Todd C. Miller <Todd.Miller@courtesan.com> 17299: 17300: * config.h.in: 17301: now generated via autoheader 17302: [84657d303cb9] 17303: 17304: * configure: 17305: regen 17306: [207bfa6a13f6] 17307: 17308: * compat.h: 17309: Move in some stuff that was previously in config.h. 17310: [e576d8b6480f] 17311: 17312: * aclocal.m4, configure.in: 17313: Add info for autoheader. 17314: [0549cd5da27c] 17315: 17316: 2002-01-01 Todd C. Miller <Todd.Miller@courtesan.com> 17317: 17318: * Makefile.in: 17319: o Add DESTDIR support o Use -M, -O, and -G instead of -m, -o, and 17320: -g to facilitate non-root installs 17321: [619216038f56] 17322: 17323: * install-sh: 17324: Add -M option (like -m but only for root) If we can't find "whoami", 17325: use "id" w/ some sed. 17326: [b39121c8b792] 17327: 17328: * configure: 17329: regen 17330: [b39b93ff9804] 17331: 17332: * configure.in: 17333: allow user to always override mansectsu and mansectform 17334: [0fca5e63bd90] 17335: 17336: 2001-12-31 Todd C. Miller <Todd.Miller@courtesan.com> 17337: 17338: * mkinstalldirs: 17339: update from autoconf 2.52 17340: [07bd75a508c3] 17341: 17342: * config.guess, config.sub: 17343: Update from autoconf 2.52 17344: [857b90fe31b7] 17345: 17346: * configure: 17347: regen with autoconf 2.52 17348: [08e7d1ea2aeb] 17349: 17350: * configure.in: 17351: o Call AC_PROG_CC_STDC to find out how to run the compiler in ANSI 17352: mode o Remove compiler-specific checks for HP-UX now that we use 17353: AC_PROG_CC_STDC 17354: [d433a70b6208] 17355: 17356: * RUNSON: 17357: Checkpoint 17358: [babf6d2235d1] 17359: 17360: * auth/pam.c: 17361: o Add pam_prep_user function to call pam_setcred() for the target 17362: user; on Linux this often sets resource limits. o When calling 17363: pam_end(), try to convert the auth->result to a PAM_FOO value. 17364: This is a hack--we really need to stash the last PAM_FOO value 17365: received and use that instead. 17366: [6ad6f340dd2a] 17367: 17368: * set_perms.c, sudo.h: 17369: o Add pam_prep_user function to call pam_setcred() for the target 17370: user; on Linux this often sets resource limits. 17371: [67795421ac82] 17372: 17373: * env.c: 17374: Fix off by one error in number of bytes allocated via malloc (does 17375: not affected any released version of sudo). 17376: [5f5915360111] 17377: 17378: 2001-12-30 Todd C. Miller <Todd.Miller@courtesan.com> 17379: 17380: * lex.yy.c: 17381: regen 17382: [8208c0277775] 17383: 17384: * parse.lex: 17385: Allow '@', '(', ')', ':' in arguments to a defaults variable w/o 17386: requiring that they be quoted. 17387: [ae59bc8f68dd] 17388: 17389: * sudoers.cat, sudoers.man.in, sudoers.pod: 17390: Mention that no double quotes are needed when 17391: adding/deleting/assigning a single value to a list. 17392: [25efc940a1f0] 17393: 17394: * Makefile.in: 17395: Don't rely on mkdefaults being executable, call perl explicitly. 17396: [6edc97ba5f1d] 17397: 17398: * sudo.tab.c: 17399: regen 17400: [49130b2e7e4d] 17401: 17402: * parse.yacc: 17403: Remove some XXX that are no longer relevant. 17404: [d460ac0d3767] 17405: 17406: * defaults.c: 17407: o Roll our own loop instead of using strpbrk() for better 17408: grokability o When adding to a list we must malloc() and use 17409: memcpy(), not strdup() since we must only copy len bytes from str. 17410: [649bef08e1f0] 17411: 17412: 2001-12-21 Todd C. Miller <Todd.Miller@courtesan.com> 17413: 17414: * sudo.tab.c: 17415: regen 17416: [f0bbf2c38c0e] 17417: 17418: * parse.yacc: 17419: typo in comment 17420: [2563711ff593] 17421: 17422: 2001-12-19 Todd C. Miller <Todd.Miller@courtesan.com> 17423: 17424: * CHANGES: 17425: checkpoint 17426: [a6d8a29fb30e] 17427: 17428: * configure: 17429: regen 17430: [bdfcaaf3bd13] 17431: 17432: * configure.in: 17433: avoid the -g flag unless --with-devel was specified 17434: [a976707bef30] 17435: 17436: * Makefile.in: 17437: mkdefaults, def_data.in and sigaction.c were missing from the 17438: tarball 17439: [6917ffbaa412] 17440: 17441: * Makefile.in: 17442: def_data.c was missing 17443: [87c78b11453d] 17444: 17445: 2001-12-18 Todd C. Miller <Todd.Miller@courtesan.com> 17446: 17447: * env.c: 17448: Fix setting of $USER and $LOGNAME in the non-reset_env case. Also 17449: allow HOME, SHELL, LOGNAME, and USER to be specified in keep_env 17450: [fc8698e6a45e] 17451: 17452: * TODO: 17453: Another TODO item 17454: [6f251d6cd466] 17455: 17456: * sudoers: 17457: Add comment for Default section so folks know where it should go. 17458: [7edba626f392] 17459: 17460: 2001-12-17 Todd C. Miller <Todd.Miller@courtesan.com> 17461: 17462: * tgetpass.c: 17463: Use TCSETAF, not TCSETA to set terminal in termio case 17464: [fbd172f6c5d3] 17465: 17466: * sudoers.cat, sudoers.man.in: 17467: regen from sudoers.pod 17468: [64edd2de816e] 17469: 17470: * sudoers.pod: 17471: o Typo, Runas_User_List should be Runas_List o a User_List can not 17472: contain a uid o mention that the Defaults section should come after 17473: Alias definitions but before the user specifications 17474: [54070ba2092b] 17475: 17476: 2001-12-15 Todd C. Miller <Todd.Miller@courtesan.com> 17477: 17478: * sudoers.cat, sudoers.man.in: 17479: regen 17480: [e62d1d97693c] 17481: 17482: * sudoers.pod: 17483: Fix listpw and verifypw sections, they were not being formatted 17484: properly. 17485: [123868c2f3e9] 17486: 17487: * sudoers.cat, sudoers.man.in: 17488: regen 17489: [f94841f8b374] 17490: 17491: * sudoers.pod: 17492: fix typos 17493: [f278f1c1184e] 17494: 17495: * configure: 17496: regen 17497: [d2270049ba9f] 17498: 17499: * config.h.in, configure.in: 17500: use AC_SYS_POSIX_TERMIOS instead of rolling our own 17501: [c1a13f1354b9] 17502: 17503: * README: 17504: Reference sudo.ws not courtesan.com 17505: [ca13be67ebd7] 17506: 17507: * PORTING: 17508: Add notes on shadow passwords 17509: [aa13863f2314] 17510: 17511: * BUGS: 17512: In list mode (sudo -l), characters escaped with a backslash are 17513: shown verbatim with the backslash. 17514: [1a75a2858be2] 17515: 17516: * sudoers: 17517: Add simple examples from OpenBSD (Marc Espie) 17518: [3ae9a9ae4125] 17519: 17520: * tgetpass.c: 17521: Catch SIGTTIN and SIGTTOU too and treat them like SIGTSTP. 17522: [f8817699ee10] 17523: 17524: * CHANGES: 17525: minor prettyification 17526: [f523587929b9] 17527: 17528: * CHANGES: 17529: Updated change log 17530: [39d9010ee7a8] 17531: 17532: * testsudoers.c: 17533: Fix CIDR handling here too. 17534: [c91db8344c32] 17535: 17536: * auth/pam.c: 17537: Apparently a NULL response is OK 17538: [83bae61078d9] 17539: 17540: * TODO: 17541: Checkpoint for upcoming beta release 17542: [efb95c09df2a] 17543: 17544: * TROUBLESHOOTING: 17545: Many people believe that adding a runas spec should obviate the need 17546: for the -u flag. It does not. 17547: [c698bad85b0e] 17548: 17549: * RUNSON: 17550: checkpoint update for upcoming 1.6.4 beta 17551: [009e465a0a45] 17552: 17553: * config.h.in: 17554: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define HAVE_STRINGS_H even 17555: if HAVE_STRING_H is defined -- this is safe now 17556: [d27c035f4e14] 17557: 17558: * PORTING: 17559: Add signals section 17560: [2d24c13cb3c8] 17561: 17562: * configure: 17563: regen 17564: [2b80a939e2ed] 17565: 17566: * configure.in: 17567: Fix check for sigaction_t 17568: [6fa41c89ab20] 17569: 17570: * sudo.c: 17571: XXX - should call find_path() as runas user, not root. Can't do 17572: that until the parser changes though. 17573: [f0b4f85651bd] 17574: 17575: * sudo.c: 17576: If find_path() fails as root, try again as the invoking user (useful 17577: for NFS). Idea from Chip Capelik. 17578: [e03fa7872692] 17579: 17580: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: 17581: Regenerate after pod file changes 17582: [48e4bd75ec21] 17583: 17584: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h, 17585: sudo.pod, sudoers.pod: 17586: Add new sudoers option "preserve_groups". Previously sudo would not 17587: call initgroups() if the target user was root. Now it always calls 17588: initgroups() unless the -P command line option or the 17589: "preserve_groups" sudoers option is set. Idea from TJ Saunders. 17590: [4f730359f101] 17591: 17592: 2001-12-14 Todd C. Miller <Todd.Miller@courtesan.com> 17593: 17594: * compat.h, config.h.in: 17595: Use new HAVE_SIGACTION_T define 17596: [dfb25f3cae5b] 17597: 17598: * logging.c: 17599: Fix compilation on K&C 17600: [7355e3275e34] 17601: 17602: * configure: 17603: regen 17604: [a710584f92f0] 17605: 17606: * configure.in: 17607: Add check for sigaction_t -- IRIX already defines this so don't 17608: redefine it. 17609: [df9c5737f6da] 17610: 17611: * snprintf.c: 17612: fix typo 17613: [3d782b8134c8] 17614: 17615: * interfaces.c: 17616: need stdlib.h here too 17617: [c789d8973ab2] 17618: 17619: * configure: 17620: regen 17621: [44822856bf46] 17622: 17623: * configure.in: 17624: Remove redundant checks for string.h, strings.h and unistd.h 17625: [933c94f8bbf4] 17626: 17627: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 17628: visudo.man.in: 17629: Regen from pod files 17630: [ad18c590f638] 17631: 17632: * BUGS: 17633: Update for 1.6.4 17634: [26bc88b69d22] 17635: 17636: * configure, lex.yy.c, sudo.tab.c: 17637: regen 17638: [bef89fd6fa2d] 17639: 17640: * strerror.c: 17641: Return EINVAL if errnum > sys_nerr 17642: [0512374e6661] 17643: 17644: * auth/sudo_auth.h: 17645: o Update copyright year 17646: [a877016db6e2] 17647: 17648: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h, 17649: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h, 17650: sudo.pod: 17651: o Update copyright year 17652: [e15a1b39039f] 17653: 17654: * configure.in: 17655: o Don't define STDC_HEADERS unconditionally for IRIX o Update 17656: copyright year 17657: [82a8cb819e07] 17658: 17659: * README: 17660: update version 17661: [d82e523a16b4] 17662: 17663: * auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, 17664: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c, 17665: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c, 17666: auth/sudo_auth.c, logging.c, parse.c, parse.lex, parse.yacc, 17667: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c, utime.c, 17668: visudo.c: 17669: o Reorder some headers and use STDC_HEADERS define properly o Update 17670: copyright year 17671: [fe39f76b3795] 17672: 17673: * lsearch.c: 17674: o Reorder some headers and use STDC_HEADERS define properly o Update 17675: copyright year 17676: [764ba3d4fa13] 17677: 17678: * getspwuid.c, goodpath.c, interfaces.c: 17679: o Reorder some headers and use STDC_HEADERS define properly o Update 17680: copyright year 17681: [fb46d46140d4] 17682: 17683: * getcwd.c: 17684: o Reorder some headers and use STDC_HEADERS define properly o Update 17685: copyright year 17686: [b199d70ac7ab] 17687: 17688: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c, 17689: fnmatch.c: 17690: o Reorder some headers and use STDC_HEADERS define properly o Update 17691: copyright year 17692: [dab8f192a3ed] 17693: 17694: * configure: 17695: regen 17696: [156658f25cea] 17697: 17698: * tgetpass.c: 17699: flags set in signal handlers should be volatile sig_atomic_t 17700: [c22931a5535e] 17701: 17702: * config.h.in, configure.in: 17703: Add checks for volatile and sig_atomic_t 17704: [b03b3341381d] 17705: 17706: * configure, lex.yy.c: 17707: regen 17708: [ed9daba88217] 17709: 17710: * def_data.c, def_data.h, def_data.in, defaults.c, env.c, find_path.c, 17711: sudo.c, sudoers.pod: 17712: Remove "secure_path" Defaults option since it cannot work with the 17713: existing parser. 17714: [c9e54a0f5971] 17715: 17716: * find_path.c, sudo.c: 17717: Unset "secure_path" if user_is_exempt() 17718: [fb7544565ae8] 17719: 17720: * env.c, pathnames.h.in: 17721: o Remove assumption that PATH and TERM are not listed in env_keep o 17722: If no PATH is in the environment use a default value o If TERM is 17723: not set in the non-reset case also give it a default value. 17724: [c987eb7df268] 17725: 17726: * aclocal.m4, configure.in, defaults.c, pathnames.h.in: 17727: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works on 17728: systems that define in paths.h 17729: [51865b0cdebf] 17730: 17731: * auth/passwd.c, auth/sudo_auth.c, auth/sudo_auth.h: 17732: Add support for skeyaccess(3) if it is present in libskey. 17733: [8add77c7d3e7] 17734: 17735: 2001-12-13 Todd C. Miller <Todd.Miller@courtesan.com> 17736: 17737: * sudo.c: 17738: Only need to do 'lc = login_getclass(NULL)' if lc == NULL 17739: [5a3d3cbf2c6d] 17740: 17741: * parse.lex: 17742: '\\' is a perfectly legal character to have in a command line 17743: argument. 17744: [c15a466ef00e] 17745: 17746: * sudo.c: 17747: o Defer call to set_fqdn() until it is safe to use log_error() o 17748: Don't print errno string value if gethostbyname fails, it is not 17749: relevant 17750: [c0c6bcf08bcb] 17751: 17752: * parse.c: 17753: Fix CIDR -> in_addr_t conversion. 17754: [2f307ebeb63f] 17755: 17756: 2001-12-12 Todd C. Miller <Todd.Miller@courtesan.com> 17757: 17758: * sudoers.pod: 17759: Remove an extra "User_List" in the User_Spec definition From 17760: ybertrand AT snoopymail.com 17761: [97bde59ea280] 17762: 17763: * parse.c: 17764: Make 'listpw=never' work for users who are not explicitly mentioned 17765: in sudoers. 17766: [258f0f30a428] 17767: 17768: * sudoers.pod: 17769: Remove gratuitous '=' in EBNF grammar; era AT iki.fi 17770: [4b0f03872ee1] 17771: 17772: * sudoers.pod: 17773: Document new list Defaults type and convert env_keep and env_delete 17774: to lists. Document new env_check option. 17775: [a07f1f079fe3] 17776: 17777: * lex.yy.c, sudo.tab.c, sudo.tab.h: 17778: regen parser 17779: [e39ac6c6581b] 17780: 17781: * parse.lex: 17782: Don't let '#' appear in a {WORD} and restrict #foo in a Runas spec 17783: to #[0-9-]+. 17784: [69c5388908f3] 17785: 17786: * configure: 17787: regen 17788: [0f1877b88cb3] 17789: 17790: * aclocal.m4: 17791: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK 17792: [6545503ae361] 17793: 17794: * config.h.in, configure.in: 17795: Add check for skeyaccess(3) 17796: [6caf69fe6359] 17797: 17798: * visudo.pod: 17799: Document new -c, -f, and -q options 17800: [13d0203c21d3] 17801: 17802: * visudo.c: 17803: o Add -f option (alternate sudoers file) o Convert to use getopt(3) 17804: [4c2b664d617d] 17805: 17806: * configure: 17807: regen 17808: [6d5bd932e7b5] 17809: 17810: * aclocal.m4, config.h.in, configure.in: 17811: Add check for isblank and a replacement macro if it doesn't exist. 17812: [b524f5e4f953] 17813: 17814: 2001-12-11 Todd C. Miller <Todd.Miller@courtesan.com> 17815: 17816: * visudo.c: 17817: In check-only mode, don't create sudoers if it does not already 17818: exist. 17819: [c748a2d5acad] 17820: 17821: * parse.yacc: 17822: o Add a new token, DEFVAR, to indicate a Defaults variable name o 17823: Add support for "+=" and "-=" list operators o replace some 1 and 0 17824: with TRUE and FALSE for greater legibility. 17825: [554cb174b37e] 17826: 17827: * parse.lex: 17828: o Use exclusive start conditions to remove some ambiguity in the 17829: lexer. Also reorder some things for clarity. o Add support for 17830: "+=" and "-=" list operators. o Use the new DEFVAR token to denote 17831: a Defaults variable name. 17832: [3a2cf8323e26] 17833: 17834: * sudo.h: 17835: Prototype init_envtables() 17836: [b74916469dab] 17837: 17838: * env.c: 17839: o Convert environment handling to use lists instead of strings. 17840: This greatly simplifies routines that need to do "foreach" type 17841: operations. o Add new init_envtables() function to set env_check 17842: and env_delete defaults based on initial_badenv_table and 17843: initial_checkenv_table (formerly sudo_badenv_table). 17844: [0a8b404658b6] 17845: 17846: * defaults.c, defaults.h: 17847: o Add a new LIST type and functions to manipulate it. o This is for 17848: use with environment handling variables. o Call new 17849: init_envtables() routine inside init_defaults() to initialize the 17850: environment lists. 17851: [ae73e64f0902] 17852: 17853: * def_data.c, def_data.h, def_data.in: 17854: Convert environment options to use the new LIST type and add a new 17855: one, env_check that only deletes if the sanity check fails. 17856: [3019503936de] 17857: 17858: * testsudoers.c: 17859: Add dummy version of init_envtables() 17860: [9d9e3ee609d9] 17861: 17862: * parse.yacc: 17863: honor quiet mode 17864: [8330fba6167c] 17865: 17866: * visudo.c: 17867: Add check-only mode 17868: [dab411bc8c35] 17869: 17870: * mkdefaults: 17871: Fix generation of entries with NULL descriptions. 17872: [ea75b9fed02e] 17873: 17874: 2001-12-09 Todd C. Miller <Todd.Miller@courtesan.com> 17875: 17876: * tgetpass.c: 17877: Use sigaction_t and quiet a gcc warning. 17878: [6f67d719c452] 17879: 17880: * sudo.c: 17881: Must reset signal handlers before we exec 17882: [300418120e1a] 17883: 17884: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c, 17885: auth/sudo_auth.c: 17886: Be carefule now that tgetpass() can return NULL (user hit ^C). PAM 17887: version needs testing. Set SIGTSTP to SIG_DFL during password entry 17888: so user can suspend us. 17889: [00304aa58747] 17890: 17891: * tgetpass.c: 17892: Add support for interrupting/suspending tgetpass via keyboard input. 17893: If you suspend sudo from the password prompt and resume it will re- 17894: prompt you. 17895: [4af2b5101d32] 17896: 17897: * sudo.c: 17898: Don't block keyboard interrupt signals, just set them to SIG_IGN. 17899: [d46d7f67ef6b] 17900: 17901: 2001-12-08 Todd C. Miller <Todd.Miller@courtesan.com> 17902: 17903: * config.h.in: 17904: add back HAVE_SIGACTION 17905: [c9c7702c603e] 17906: 17907: * configure: 17908: regen 17909: [09fe669d337f] 17910: 17911: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: 17912: Kill POSIX_SIGNALS define and old signal support now that we emulate 17913: POSIX ones Also be sure to correctly initialize struct sigaction. 17914: [4bc2a6dbb2be] 17915: 17916: * strerror.c: 17917: Don't need config.h or "#ifndef HAVE_STRERROR" wrapper. 17918: [1ad64a19f328] 17919: 17920: * compat.h: 17921: Add scaffolding for POSIX signal emulation 17922: [945861d4c93b] 17923: 17924: * sigaction.c: 17925: o Add missing ';' so this compiles o Can't use NULL since we don't 17926: include stdio.h 17927: [04d0cac7438f] 17928: 17929: * sigaction.c: 17930: Emulate sigaction() using sigvec() 17931: [d0b54a989875] 17932: 17933: 2001-11-13 Todd C. Miller <Todd.Miller@courtesan.com> 17934: 17935: * sudoers.pod: 17936: Document new behavior of negative values of timestamp_timeout Fix a 17937: typo 17938: [4c0716570d01] 17939: 17940: * sudo.pod: 17941: Add security note about command not being logged after 'sudo su' and 17942: friends. 17943: [43294851a33c] 17944: 17945: * sudo.pod: 17946: Mention that -V prints default values when run as root, including 17947: the list of environment variables to clear. 17948: [d9e5e550a8c3] 17949: 17950: * Makefile.in: 17951: Run pod2man with --quotes=none to avoid stupid quoting of C<> 17952: entries. 17953: [997b23c35dbe] 17954: 17955: 2001-11-12 Todd C. Miller <Todd.Miller@courtesan.com> 17956: 17957: * auth/sudo_auth.c, def_data.c, def_data.h, def_data.in, sudoers.pod: 17958: Add mail_badpass option Also modify mail_always behavior to also 17959: send mail when the password is wrong 17960: [838d40ccafce] 17961: 17962: * env.c, sudo.c, sudo.h: 17963: Dump default bad env table when 'sudo -V' is run by root. 17964: [f67f1b8048b0] 17965: 17966: * sudoers.pod: 17967: document env_delete 17968: [d74f893663a2] 17969: 17970: * env.c: 17971: Add support for '*' in env_keep when not resetting the environment 17972: (ie: the normal case). 17973: [fd4fb62ea8fd] 17974: 17975: * env.c: 17976: Add env_delete variable that lets the user replace/add to the 17977: bad_env_table. Allow '*' wildcard in env_keep entries. 17978: [aa728bc35e29] 17979: 17980: 2001-11-06 Todd C. Miller <Todd.Miller@courtesan.com> 17981: 17982: * mkinstalldirs: 17983: Force umask to 022 to guarantee sane directory permissions. 17984: [9ab3cfe70569] 17985: 17986: 2001-11-02 Todd C. Miller <Todd.Miller@courtesan.com> 17987: 17988: * Makefile.in: 17989: add sudo.tab.h and sudo.tab.c to sudo.tab.o dependency 17990: [671010465e6f] 17991: 17992: * mkdefaults: 17993: fix breakage in last commit 17994: [8318f8851e56] 17995: 17996: * Makefile.in: 17997: acsite.m4 -> aclocal.m4 17998: [30c146873a01] 17999: 18000: * check.c: 18001: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in previous commit 18002: [4dc8b39954da] 18003: 18004: * def_data.c: 18005: regenerated from def_data.in 18006: [915ea16ce1eb] 18007: 18008: * check.c, defaults.c, defaults.h: 18009: Add new T_UINT type that most things use instead of T_INT If 18010: timestamp_timeout is < 0 then treat the ticket as never expiring (to 18011: be expired manually by the user). 18012: [3a3a636a2a5d] 18013: 18014: * def_data.in: 18015: change most T_INT -> T_UINT 18016: [a2228d2457af] 18017: 18018: * mkdefaults: 18019: fix warning when no args 18020: [ca70a5394af5] 18021: 18022: * visudo.c: 18023: Change 2 Exit() -> exit() Avoid stdio in Exit() and call _exit() if 18024: we are a signal handler. We no longer print the signal number but 18025: the user can just check the exit value for that. 18026: [dc424f631fef] 18027: 18028: 2001-10-16 Todd C. Miller <Todd.Miller@courtesan.com> 18029: 18030: * logging.c: 18031: when setting up pipes in child process check for case where stdin == 18032: pipe fd 0 18033: [518112d76184] 18034: 18035: 2001-10-11 Todd C. Miller <Todd.Miller@courtesan.com> 18036: 18037: * visudo.c: 18038: Ignore editor exit value since XPG4 says vi's exit value is the 18039: count of editing errors made (failed searches, etc). 18040: [b9d952284865] 18041: 18042: 2001-10-05 Todd C. Miller <Todd.Miller@courtesan.com> 18043: 18044: * configure: 18045: regen 18046: [cb3aa586f03b] 18047: 18048: * configure.in: 18049: sco now is identified by config.guess as *-sco-* 18050: [46664bbdea61] 18051: 18052: * configure.in: 18053: Check for getspnam() in -lgen if not in -lc for UnixWare. 18054: [0f152ad1ba93] 18055: 18056: 2001-09-18 Todd C. Miller <Todd.Miller@courtesan.com> 18057: 18058: * sudoers.pod, visudo.pod: 18059: "upper case" -> "uppercase" 18060: [f9151f232326] 18061: 18062: * sudoers.pod: 18063: fix typos and grammar; pjanzen@foatdi.harvard.edu 18064: [2855d73d0237] 18065: 18066: 2001-08-28 Todd C. Miller <Todd.Miller@courtesan.com> 18067: 18068: * sudoers.pod: 18069: Missing word (specify); krapht@secureops.com 18070: [65523eb37a2c] 18071: 18072: 2001-08-23 Todd C. Miller <Todd.Miller@courtesan.com> 18073: 18074: * sudo.c: 18075: If we fail to lookup a login class, apply the default one. 18076: [d4869faa6816] 18077: 18078: * logging.c: 18079: In log_error() free message, not logline unconditionally, then free 18080: logline if it is not the same as message. No function change but 18081: this mirrors how they are allocated. 18082: [565e5f6cc643] 18083: 18084: 2001-07-17 Todd C. Miller <Todd.Miller@courtesan.com> 18085: 18086: * configure: 18087: regenerate 18088: [834a48f548a2] 18089: 18090: * configure.in: 18091: remove some backslash quotes that are unneeded 18092: [50d401d6e2ca] 18093: 18094: * configure.in: 18095: o Tweaks to make this work with autoconf-2.50 o Use AC_LIBOBJ 18096: instead of changing LIBOBJS directly o Use AC_REPLACE_FUNCS where we 18097: can o Use AC_CHECK_FUNCS instead of AC_CHECK_FUNC so we don't have 18098: to AC_DEFINE things manually. 18099: [f502c5f15f92] 18100: 18101: * config.guess, config.sub: 18102: Updated from autoconf-2.50 18103: [6140205915ef] 18104: 18105: 2001-05-22 Todd C. Miller <Todd.Miller@courtesan.com> 18106: 18107: * README: 18108: Update mailing list section. We use mailman now, not majordomo. 18109: [b9a8ca45e6dc] 18110: 18111: 2001-05-10 Todd C. Miller <Todd.Miller@courtesan.com> 18112: 18113: * getspwuid.c, logging.c, sudo.c: 18114: Use setpwent()/endpwent() + all the shadow variants to make sure we 18115: don't inadvertantly leak an fd to the child. Apparently Linux's 18116: shadow routines leave the fd open even if you don't call setspent(). 18117: Reported by mike@gistnet.com; different patch used. 18118: [d33792ef6c01] 18119: 18120: 2001-04-13 Todd C. Miller <Todd.Miller@courtesan.com> 18121: 18122: * sudoers.pod: 18123: s/eg./e.g./ 18124: [bd32a0acaf93] 18125: 18126: * tgetpass.c: 18127: select() may return EAGAIN. If so, continue like we do for EINTR. 18128: [5f202c943818] 18129: 18130: * logging.c: 18131: Fix a non-exploitable buffer overflow in the word splitting code. 18132: This should really be rewritten. 18133: [4c724363863a] 18134: 18135: * Makefile.in: 18136: FAQ link goes away 18137: [1d26dd6c8972] 18138: 18139: * INSTALL: 18140: Tell people to look in sample.syslog.conf for examples, not FAQ 18141: [affcae3f43ca] 18142: 18143: * TROUBLESHOOTING: 18144: Update list of env vars that are cleared 18145: [234e56f1435a] 18146: 18147: * sudo.c: 18148: remove struct env_table decl since that stuff has all moved to env.c 18149: [5dd923148777] 18150: 18151: 2001-04-04 Todd C. Miller <Todd.Miller@courtesan.com> 18152: 18153: * fileops.c: 18154: Fix a pasto in flock-style unlocking and include <sys/file.h> for 18155: flock on older systems; twetzel@gwdg.de 18156: [d5420d9d2861] 18157: 18158: * configure: 18159: regen to get NeXT lockf/flock fix 18160: [d3ba6ed70e15] 18161: 18162: * configure.in: 18163: force NeXT to use flock since lockf is broken 18164: [bd5391dca1bb] 18165: 18166: 2001-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 18167: 18168: * check.c: 18169: Use stashed user_gid when checking against exempt gid since sudo 18170: sets its gid to a a value that makes sudoers readable. Previously 18171: if you used gid 0 as the exempt group everyone would be exempt. From 18172: Paul Kranenburg <pk@cs.few.eur.nl> 18173: [0b140cc3a817] 18174: 18175: 2001-03-29 Todd C. Miller <Todd.Miller@courtesan.com> 18176: 18177: * configure: 18178: regen 18179: [cc455408f32b] 18180: 18181: * aclocal.m4: 18182: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6 aparently defines 18183: some types (such as ssize_t) therein. 18184: [b6aee85ca331] 18185: 18186: 2001-03-02 Todd C. Miller <Todd.Miller@courtesan.com> 18187: 18188: * defaults.c: 18189: Fix negation of paths in a boolean context. Problem found by 18190: apt@UH.EDU 18191: [8aee217a7cdf] 18192: 18193: 2001-02-23 Todd C. Miller <Todd.Miller@courtesan.com> 18194: 18195: * visudo.c: 18196: pasto 18197: [ad32b277bf68] 18198: 18199: 2001-02-17 Todd C. Miller <Todd.Miller@courtesan.com> 18200: 18201: * visudo.c: 18202: SA_RESETHAND means the opposite of what I was thinking--oops To 18203: block all signals in old-style signals use ~0, not 0xffffffff 18204: [6ecdd793590a] 18205: 18206: 2001-02-04 Todd C. Miller <Todd.Miller@courtesan.com> 18207: 18208: * defaults.c: 18209: coerce difference of pointers to int when used in a string length 18210: printf format; deraadt@openbsd.org 18211: [a9d10f07180d] 18212: 18213: 2001-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 18214: 18215: * visudo.c: 18216: Block all signals in Exit() to avoid a signal race. There is still 18217: a tiny window but I'm not going to worry about it. 18218: [6661805c0458] 18219: 18220: 2001-01-07 Todd C. Miller <Todd.Miller@courtesan.com> 18221: 18222: * env.c: 18223: glibc uses the LANGUAGE env var so clear that too; Solar Designer 18224: [d4ba95628afb] 18225: 18226: * lex.yy.c: 18227: Regenerate with a fix to flex.skl that preserves errno from 18228: clobbering by isatty(). 18229: [607eec736e19] 18230: 18231: 2000-12-31 Todd C. Miller <Todd.Miller@courtesan.com> 18232: 18233: * auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c, auth/pam.c, 18234: auth/sia.c, auth/sudo_auth.c: 18235: Some defaults I_ defines got renamed. 18236: [ec19b23caaf3] 18237: 18238: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in, 18239: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc, 18240: set_perms.c, sudo.c, sudo.tab.c: 18241: Move defaults info into its own files from which we generate .h and 18242: .c files. This makes adding or rearranging variables much simpler. 18243: [e91b880b5043] 18244: 18245: 2000-12-30 Todd C. Miller <Todd.Miller@courtesan.com> 18246: 18247: * configure, configure.in: 18248: fix typo in last commit 18249: [10a6ee2bae71] 18250: 18251: * compat.h, config.h.in, configure, configure.in: 18252: Add check + emulation for setegid (like seteuid). 18253: [29492092bd2f] 18254: 18255: * env.c: 18256: Make env_keep override badenv_table as documented Fix traversal of 18257: badenv_table (broken in last commit) 18258: [37c9f0d22673] 18259: 18260: * set_perms.c, sudo.c, sudo.h: 18261: Don't try and build saved uid version of set_perms on systems w/o 18262: them. Rename set_perms_saved_uid() -> set_perms_posix() Make 18263: set_perms_setreuid simply be set_perms_fallback() and simply include 18264: the appropriate function at compile time (setreuid() vs. setuid()). 18265: [3107333c062c] 18266: 18267: * sudoers.cat, sudoers.man.in, sudoers.pod: 18268: PATH is also preserved when env_reset is in effect 18269: [90e45c5711ff] 18270: 18271: * CHANGES, Makefile.in, check.c, compat.h, config.h.in, configure, 18272: configure.in, defaults.c, defaults.h, env.c, find_path.c, 18273: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, 18274: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, testsudoers.c, 18275: visudo.c, visudo.cat, visudo.man.in: 18276: New Defaults options: o stay_setuid - sudo will remain setuid if 18277: system has saved uids or setreuid(2) o env_reset - reset the 18278: environment to a sane default o env_keep - preserve environment 18279: variables that would otherwise be cleared 18280: 18281: No longer use getenv/putenv/setenv functions--do environment munging 18282: by hand. Potentially dangerous environment variables can be cleared 18283: only if they contain '/' pr '%' characters to protect buggy 18284: programs. Moved environment routines into env.c (new file) 18285: [c2f97651db4c] 18286: 18287: * INSTALL: 18288: Clear up --without-passwd description 18289: [2f336dab6733] 18290: 18291: * putenv.c, sudo_setenv.c: 18292: We now build up a new environment from scratch and assign it to 18293: "environ". 18294: [6ae6152f2238] 18295: 18296: 2000-12-19 Todd C. Miller <Todd.Miller@courtesan.com> 18297: 18298: * sudo.pod, visudo.pod: 18299: Grammatical fixes from Paul Janzen 18300: [e03ead2e56f8] 18301: 18302: 2000-12-15 Todd C. Miller <Todd.Miller@courtesan.com> 18303: 18304: * visudo.c: 18305: If there was a syntax error and the user just wants to quit, unlink 18306: sudoers if it is zero length. 18307: [74ba7921f520] 18308: 18309: * visudo.c: 18310: 'Q' means ignore parse error, not 'q' 18311: [e8d0e4491fe6] 18312: 18313: * visudo.c: 18314: Open sudoers for writing with mode SUDOERS_MODE From Dimitry Andric 18315: <dim@xs4all.nl> 18316: [b24990a72491] 18317: 18318: 2000-12-13 Todd C. Miller <Todd.Miller@courtesan.com> 18319: 18320: * set_perms.c: 18321: Add missing #ifdef HAVE_LOGIN_CAP_H; ayamura@ayamura.org 18322: [41a8db10e076] 18323: 18324: 2000-12-09 Todd C. Miller <Todd.Miller@courtesan.com> 18325: 18326: * config.guess, config.sub: 18327: Darwin / Mac OS X support from Wilfredo Sanchez <wsanchez@apple.com> 18328: [6052da895d2e] 18329: 18330: 2000-11-03 Todd C. Miller <Todd.Miller@courtesan.com> 18331: 18332: * sudo.c, visudo.c: 18333: Use exit(127), not exit(-1) 18334: [9ff0c3eada34] 18335: 18336: * Makefile.in, defaults.c, defaults.h, set_perms.c, sudo.c: 18337: Move set_perms() to its own file and use POSIX saved uid or 18338: setreuid() if available. 18339: 18340: Added stay_setuid option for systems that have libraries that 18341: perform extra paranoia checks in system libraries for setuid 18342: programs (ie: anything with issetugid(2)). 18343: [28960f842698] 18344: 18345: * sudo.c: 18346: strip more bits from the environment and add a facility for 18347: stripping things only if they contain '/' or '%' to address printf 18348: format string vulnerabilities in other programs. 18349: [b98d6375f299] 18350: 18351: 2000-11-02 Todd C. Miller <Todd.Miller@courtesan.com> 18352: 18353: * configure: 18354: regen 18355: [7e74e5c91049] 18356: 18357: * configure.in: 18358: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache the existence of 18359: strcasecmp(). 18360: [a418e9e70442] 18361: 18362: * configure: 18363: regen 18364: [bbff244a52bc] 18365: 18366: * configure.in: 18367: Check for strcasecmp(3) in -lc89 for NCR Unix 18368: [361c99576681] 18369: 18370: 2000-11-01 Todd C. Miller <Todd.Miller@courtesan.com> 18371: 18372: * config.h.in: 18373: Define HAVE_INNETGR #ifdef HAVE__INNETGR 18374: [473cdb92b6db] 18375: 18376: * configure: 18377: regen 18378: [4e6364a195e0] 18379: 18380: * compat.h, config.h.in, configure.in: 18381: Add check for _innetgr(3) since NCR systems have that instead of 18382: innetgr(3). 18383: [25e6852e7494] 18384: 18385: 2000-10-31 Todd C. Miller <Todd.Miller@courtesan.com> 18386: 18387: * auth/securid.c: 18388: check return value of creadcfg() call sd_close() after sd_auth() 18389: store username in sd->username so we don't rely on the USER env 18390: variable 18391: [d106b4f42722] 18392: 18393: 2000-10-30 Todd C. Miller <Todd.Miller@courtesan.com> 18394: 18395: * INSTALL: 18396: document --with-bsdauth 18397: [f1518ecc2ee9] 18398: 18399: * configure: 18400: regen 18401: [dceb35071ea8] 18402: 18403: * configure.in: 18404: --with-bsdauth assumes --with-logincap 18405: [4200778083fd] 18406: 18407: * auth/bsdauth.c, auth/fwtk.c: 18408: When prompting for a response to a challenge, if the user just hits 18409: return then reprompt with echo turned on. 18410: [a539b6474a97] 18411: 18412: 2000-10-29 Todd C. Miller <Todd.Miller@courtesan.com> 18413: 18414: * sudo.c: 18415: Remove debugging code that should not have been committed, oops. 18416: [9862607b77a7] 18417: 18418: * auth/bsdauth.c: 18419: Use lower-level routines and get the password ourselves. Checks for 18420: a challenge and if there is one echo is not turned off. 18421: [2d8fcd166baa] 18422: 18423: * auth/pam.c, auth/sudo_auth.h: 18424: minor housekeeping, no real code changes 18425: [d0074a277fb4] 18426: 18427: 2000-10-27 Todd C. Miller <Todd.Miller@courtesan.com> 18428: 18429: * sudo.c: 18430: Fix a coredump in the logging functions if gethostname(2) fails by 18431: deferring the call to log_error() until things are better setup. 18432: 18433: Fix return value of set_loginclass() in non-BSD-auth case. 18434: 18435: Hard-code 'sudo' in the usage message so we can fit more options on 18436: a line 18437: [d9d1b7579818] 18438: 18439: * logging.c: 18440: Fix errant ';' (typo) that broken MSG_ONLY 18441: [849b2276a470] 18442: 18443: 2000-10-26 Todd C. Miller <Todd.Miller@courtesan.com> 18444: 18445: * sudo.cat, sudo.man.in: 18446: regen 18447: [bb3c8c6704d1] 18448: 18449: * sudo.pod: 18450: Document -a flag 18451: [e18316cebaac] 18452: 18453: * Makefile.in, auth/bsdauth.c, auth/sudo_auth.h, config.h.in, 18454: configure, configure.in, getspwuid.c, sudo.c: 18455: Add support for BSD authentication. 18456: [f374cfd9ca0d] 18457: 18458: 2000-10-19 Todd C. Miller <Todd.Miller@courtesan.com> 18459: 18460: * sudoers.pod: 18461: Fix typo; from sato@complex.eng.hokudai.ac.jp 18462: [3085fee9766e] 18463: 18464: 2000-10-12 Todd C. Miller <Todd.Miller@courtesan.com> 18465: 18466: * sudoers.pod: 18467: Mention negating umask 18468: [c9e410294dae] 18469: 18470: * defaults.c: 18471: Allow user to specify umask of 0777 (same as !umask) 18472: [bb771daa96fe] 18473: 18474: 2000-10-09 Todd C. Miller <Todd.Miller@courtesan.com> 18475: 18476: * sudo.pod, visudo.pod: 18477: Fix a typo and give a URL for the sudo history. 18478: [77f73199aedb] 18479: 18480: 2000-10-08 Todd C. Miller <Todd.Miller@courtesan.com> 18481: 18482: * defaults.c, sudo.pod: 18483: fix typos; pepper@reppep.com 18484: [5532c7421340] 18485: 18486: 2000-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 18487: 18488: * sudo.c, sudo.h, sudo_setenv.c: 18489: sudo_setenv() now exits on memory alloc failure instead of returning 18490: -1. 18491: [71f1cf18f47b] 18492: 18493: 2000-09-07 Todd C. Miller <Todd.Miller@courtesan.com> 18494: 18495: * sudo.c: 18496: Strip out NLSPATH and PATH_LOCALE from the environment for FreeBSD 18497: and possibly others. 18498: [b69d985b0d22] 18499: 18500: * logging.c: 18501: Don't use vsyslog(3) since HP-UX (and others?) lack it. This means 18502: that "%m" won't be expanded but we don't use that anyway since the 18503: logging routines may splat to stderr as well. 18504: [8d37a544d0c0] 18505: 18506: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in, 18507: sudoers.pod: 18508: Add always_set_home variable 18509: [dbcaff646e07] 18510: 18511: * configure, configure.in: 18512: Have to hard code default values in help since the defaults are set 18513: _after_ the help stuff. 18514: [7b5d6d72f55c] 18515: 18516: 2000-08-31 Todd C. Miller <Todd.Miller@courtesan.com> 18517: 18518: * lex.yy.c, parse.lex: 18519: Allow special characters (including '#') to be embedded in pathnames 18520: if quoted by a '\\'. The quoted chars will be dealt with by 18521: fnmatch(). Unfortunately, 'sudo -l' still prints the '\\'. 18522: [3ed33cf09977] 18523: 18524: 2000-08-13 Todd C. Miller <Todd.Miller@courtesan.com> 18525: 18526: * install-sh: 18527: Better path searching for programs we need. 18528: [60517cb1f0d6] 18529: 18530: * TROUBLESHOOTING: 18531: Add section on "C compiler cannot create executables" errors. 18532: [e4ada6eaee59] 18533: 18534: * Makefile.binary, Makefile.in, version.h: 18535: Crank version 18536: [93d1bd5b7f5e] 18537: 18538: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in, 18539: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat, 18540: visudo.man.in, visudo.pod: 18541: Substitute values from configure into man pages. 18542: [619854c356c1] 18543: 18544: 2000-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 18545: 18546: * parse.c, sudo.c: 18547: The listpw and verifypw sudoers options would not take effect 18548: because the value of the default was checked *before* sudoers was 18549: parsed. Instead of passing in the value of PWCHECK_* to 18550: sudoers_lookup(), pass in the arg for def_ival() so the check can be 18551: deferred until after sudoers is parsed. 18552: [4f596e358f72] 18553: 18554: 2000-08-11 Todd C. Miller <Todd.Miller@courtesan.com> 18555: 18556: * tgetpass.c: 18557: When writing prompt, no need to write the NUL as well; 18558: hag@linnaean.org 18559: [fbcdd7b431ee] 18560: 18561: 2000-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 18562: 18563: * install-sh: 18564: When looking for chown, check in /sbin too 18565: [657ba6653f8c] 18566: 18567: 2000-06-05 Todd C. Miller <Todd.Miller@courtesan.com> 18568: 18569: * visudo.c: 18570: Remove extraneous call to init_defaults() and set runas_user to NULL 18571: betweem parses so init_defaults will reset it each time, thus 18572: avoiding a reference to free()d data. 18573: [7421fcd692af] 18574: 18575: 2000-06-04 Todd C. Miller <Todd.Miller@courtesan.com> 18576: 18577: * config.h.in, interfaces.c, interfaces.h, sudo.c: 18578: Add support for using getifaddrs() to get the list of ip addr / 18579: netmask pairs. Currently IPv4-only. 18580: [a35bc4f7306d] 18581: 18582: * visudo.c: 18583: Add a missing check for UserEditor == NULL Add missing '+' before 18584: line number when invoking editor to fix a syntax error 18585: [f0d4635f6082] 18586: 18587: 2000-05-12 Todd C. Miller <Todd.Miller@courtesan.com> 18588: 18589: * sudo.c: 18590: Call clean_env very early in main() for paranoia's sake. Idea from 18591: Marc Esipovich. 18592: [f8d72ebd0115] 18593: 18594: 2000-05-10 Todd C. Miller <Todd.Miller@courtesan.com> 18595: 18596: * sudo.h: 18597: Update proto for evasprintf and easprintf 18598: [d147d6e58419] 18599: 18600: * alloc.c: 18601: Make easprintf() and evasprintf() return an int. 18602: [b2ca5d089667] 18603: 18604: * check.c: 18605: If the targetpw flag is set, use target username as part of the 18606: timestamp path. If tty tickets are in effect cat the tty and the 18607: target username with a ':' as the separator. 18608: [de11abc693c2] 18609: 18610: 2000-05-09 Todd C. Miller <Todd.Miller@courtesan.com> 18611: 18612: * auth/pam.c: 18613: Backout part of last change; setting PAM_USER to the invoking user 18614: breaks things like targetpw. 18615: [427218a7387f] 18616: 18617: * auth/pam.c: 18618: set tty and username via pam_set_item 18619: [85d1922dbcc9] 18620: 18621: * auth/sudo_auth.c, check.c, getspwuid.c, sudo.c, sudo.h: 18622: Fix root, runas, and target authentication for non-passwd file auth 18623: methods. 18624: [a14535e7b30c] 18625: 18626: 2000-04-22 Todd C. Miller <Todd.Miller@courtesan.com> 18627: 18628: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, 18629: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: 18630: Use B<-Z> not C<-Z> for command line flags in all places. This is 18631: more consistent and works around a bug in Pod::Man. 18632: [64b5a05f30c5] 18633: 18634: * sudoers.cat, sudoers.man.in, sudoers.pod: 18635: Fix an occurence of 'semicolon' that should be 'colon' 18636: [4ea5aacae3fb] 18637: 18638: 2000-04-19 Todd C. Miller <Todd.Miller@courtesan.com> 18639: 18640: * configure, configure.in: 18641: Fix --with-badpri help line 18642: [3cc40977c043] 18643: 18644: 2000-04-17 Todd C. Miller <Todd.Miller@courtesan.com> 18645: 18646: * defaults.c, logging.c, sudo.c: 18647: Bracket calls to syslog with an openlog() and closelog() since some 18648: authentication methods (like PAM) may do their own logging via 18649: syslog. Since we don't use syslog much (usually just once per 18650: session) this doesn't really incur a performance penalty. It also 18651: Fixes a SEGV with pam_kafs. 18652: [fe1cc28529f6] 18653: 18654: 2000-04-15 Todd C. Miller <Todd.Miller@courtesan.com> 18655: 18656: * sudo.c: 18657: Fix -H flag. runas_homedir is only valid after 18658: set_perms(PERM_RUNAS, mode) 18659: [ce9b1c6f68a6] 18660: 18661: 2000-04-12 Todd C. Miller <Todd.Miller@courtesan.com> 18662: 18663: * INSTALL: 18664: Clarify the fact that insults are not enabled just by including them 18665: in the binary. 18666: [d5a31d48320c] 18667: 18668: 2000-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 18669: 18670: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat, 18671: visudo.man.in: 18672: Regenerated with perl 5.6.0 pod2man 18673: [21751433768b] 18674: 18675: * Makefile.in: 18676: Give date string to pod2man since its default is ugly and it ain't 18677: got no alibi. 18678: [0080b2f6298f] 18679: 18680: * Makefile.in: 18681: Do section substitution on the output of pod2man and remove hack 18682: needed for old pod2man. 18683: [1ef843d5c78b] 18684: 18685: * sudo.pod, sudoers.pod, visudo.pod: 18686: Put back real man sections, we will do the substitution later. 18687: [f728c1abad7e] 18688: 18689: 2000-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 18690: 18691: * configure, configure.in: 18692: Don't bother checking for the path to vi if user specified --with- 18693: editor 18694: [bf698487e0d5] 18695: 18696: 2000-04-01 Todd C. Miller <Todd.Miller@courtesan.com> 18697: 18698: * CHANGES, visudo.c: 18699: Visudo now does its own fork/exec instead of calling system(3). 18700: [99bbcd88863b] 18701: 18702: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in, 18703: sudoers.pod, visudo.c: 18704: Visudo now checks for the existence of an editor and gives a 18705: sensible error if it does not exist. 18706: 18707: The path to the editor for visudo is now a colon-separated list of 18708: allowable editors. If the user has $EDITOR set and it matches one 18709: of the allowed editors that editor will be used. If not, the first 18710: editor in the list that actually exists is used. 18711: [cc86eb9f5440] 18712: 18713: * sudo.cat, sudo.man.in, sudo.pod: 18714: Clear up confusion wrt sudo's return value. 18715: [9385b12d8e79] 18716: 18717: 2000-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 18718: 18719: * Makefile.in: 18720: Strip sudo and visudo for bindist target 18721: [a995ddd79177] 18722: 18723: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, 18724: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: 18725: Use @mansectsu@ and @mansectform@ in the man page bodies as well. 18726: [5eb9e60a726f] [SUDO_1_6_3] 18727: 18728: * visudo.cat, visudo.man.in, visudo.pod: 18729: Typo: @sysconf@ -> @sysconfdir@ 18730: [f07f52fcd099] 18731: 18732: * Makefile.in: 18733: 'make dist' should not cause any files to be modified so remove its 18734: dependencies. 18735: [7f44a2666a9c] 18736: 18737: * CHANGES: 18738: Whoops, forgot to add release marker 18739: [16c0f16b35b8] 18740: 18741: 2000-03-26 Todd C. Miller <Todd.Miller@courtesan.com> 18742: 18743: * CHANGES: 18744: Final change for 1.6.3 (or so I hope) 18745: [473c89da6123] 18746: 18747: * sudo.cat, sudoers.cat, visudo.cat: 18748: Use SYSV man sections since BSD systems will have nroff... 18749: [0a6bd154324e] 18750: 18751: 2000-03-24 Todd C. Miller <Todd.Miller@courtesan.com> 18752: 18753: * parse.yacc, sudo.tab.c: 18754: When checking to see if the host/user matches in a defaults spec, 18755: check against TRUE, not just non-zero since it might be -1. 18756: [41f2b7ad3fdd] 18757: 18758: * configure, configure.in: 18759: OSF/1 puts file formats in section 4, not 5. 18760: [d77c1301afa9] 18761: 18762: * CHANGES, INSTALL, sudo.c: 18763: Make login class support work on BSD/OS 18764: [e9bbe3c08ade] 18765: 18766: * RUNSON: 18767: Update for 1.6.3 18768: [c40ce1d76c4d] 18769: 18770: * configure, configure.in: 18771: If there is no inet_addr but there *is* an __inet_addr that's ok 18772: since inet_addr is probably just a macro then. The better thing to 18773: do would be to look for the macro, but this is fine for now. 18774: [1b8865ae4d68] 18775: 18776: * configure, configure.in: 18777: Don't use shlicc for BSD/OS 4.x 18778: [83fbf6dedd2c] 18779: 18780: * Makefile.in, configure, configure.in: 18781: *.man lives in cwd, *.cat lives in $(srcdir), add a @mansrcdir@ 18782: configure variable so we can deal with this. Also, only remove *.man 18783: for 'distclean' not 'clean'. 18784: [30d56e6de214] 18785: 18786: * sudo.c: 18787: set_loginclass() should be static like the proto says 18788: [d570a2d55fb8] 18789: 18790: 2000-03-23 Todd C. Miller <Todd.Miller@courtesan.com> 18791: 18792: * fnmatch.c: 18793: Add #ifdef __STDC__ around the rangematch function header to avoid 18794: promotion of test to int, thus violating the prototype. Gcc handles 18795: this gracefully but more std ANSI compilers will complain. 18796: [7d98c3e332b2] 18797: 18798: * emul/fnmatch.h: 18799: Pull in newer fnmatch(3) that supports FNM_CASEFOLD 18800: [4e1320852f8b] 18801: 18802: * aclocal.m4, configure, fnmatch.3, fnmatch.c: 18803: Pull in newer fnmatch(3) that supports FNM_CASEFOLD Check for 18804: FNM_CASEFOLD in configure 18805: [9ef952bf1896] 18806: 18807: * CHANGES, TODO: 18808: update for 1.6.3 18809: [e4ba6368a0c5] 18810: 18811: * sudo.tab.c, sudo.tab.h, testsudoers.c, visudo.c: 18812: Fully qualified hosts w/ wildcards were not matching the FQHOST 18813: token type. There's really no need for a separate token for fully- 18814: qualified vs. unqualified anymore so FQHOST is now history and 18815: hostname_matches now decides which hostname (short or long) to check 18816: based on whether or not the pattern contains a '.'. 18817: [fbd2887d9811] 18818: 18819: * parse.h: 18820: Fully qualified hosts w/ wildcards were not matching the FQHOST 18821: token type. There's really no need for a separate token for fully- 18822: qualified vs. unqualified anymore so FQHOST is now history and 18823: hostname_matches now decides which hostname (short or long) to check 18824: based on whether or not the pattern contains a '.'. 18825: [dd7bbe223461] 18826: 18827: * lex.yy.c, parse.c, parse.lex, parse.yacc: 18828: Fully qualified hosts w/ wildcards were not matching the FQHOST 18829: token type. There's really no need for a separate token for fully- 18830: qualified vs. unqualified anymore so FQHOST is now history and 18831: hostname_matches now decides which hostname (short or long) to check 18832: based on whether or not the pattern contains a '.'. 18833: [630d9d205397] 18834: 18835: * parse.c, parse.h, parse.yacc, sudo.tab.c, sudoers.cat, 18836: sudoers.man.in, sudoers.pod, testsudoers.c, visudo.c: 18837: Add support for wildcards in the hostname. 18838: [d8d821ed4238] 18839: 18840: * Makefile.in: 18841: Add targets for *.man.in, using config.status to generate *.man from 18842: *.man.in 18843: [640e50ede485] 18844: 18845: * sudoers.cat, sudoers.man.in, sudoers.pod: 18846: Document set_logname option and enbolden refs to sudo and visudo. 18847: [9622b3a48707] 18848: 18849: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in, sudo.cat, 18850: sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, 18851: visudo.cat, visudo.man.in, visudo.pod: 18852: Add FreeBSD login.conf support (untested on BSD/OS) based on a patch 18853: from Michael D. Marchionna. configure now does substitution on the 18854: man pages, allowing us to fix up the paths and set the section 18855: correctly. Based on an idea from Michael D. Marchionna. 18856: [463e928a0a2f] 18857: 18858: * auth/passwd.c: 18859: Better fix for handling HP-UX aging info. 18860: [3950f42d8549] 18861: 18862: * sudo.c: 18863: Add support for set_logname run-time default 18864: [c6a7cc76b8b4] 18865: 18866: * sudo.man.in, sudoers.man.in, visudo.man.in: 18867: configure does substitution on these to produce *.man 18868: [b83fc3c1bfc9] 18869: 18870: * sudo.man, sudoers.man, visudo.man: 18871: These files now get generated from *.man.in at configure time. 18872: [c499061f79e0] 18873: 18874: 2000-03-22 Todd C. Miller <Todd.Miller@courtesan.com> 18875: 18876: * defaults.c, defaults.h: 18877: Add set_logname option so users can turn off setting of LOGNAME/USER 18878: environment variables. 18879: [6316869180b8] 18880: 18881: * lsearch.c, parse.c, testsudoers.c: 18882: kill register 18883: [6e104e653748] 18884: 18885: 2000-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 18886: 18887: * auth/passwd.c: 18888: HP-UX adds extra info at the end for password aging so when 18889: comparing the result of crypt to pw_passwd we only compare the first 18890: len(epass) bytes *unless* the user entered an empty string for a 18891: password. 18892: [3d24d4e4e889] 18893: 18894: * logging.c: 18895: Get rid of grandchild hack, it was causing problems and there is 18896: really no need for it. This fixes a bug where we spin eating up CPU 18897: when the user runs a long-running process like a shell. 18898: [5743b10b1e81] 18899: 18900: 2000-03-07 Todd C. Miller <Todd.Miller@courtesan.com> 18901: 18902: * sudo.c: 18903: User can always specify a login class if he/she is already root. 18904: [710d160cef9f] 18905: 18906: * config.h.in, configure, configure.in, defaults.c, defaults.h, 18907: sudo.c, sudo.h: 18908: FreeBSD login class (login.conf) support. 18909: [026b981d6328] 18910: 18911: 2000-03-06 Todd C. Miller <Todd.Miller@courtesan.com> 18912: 18913: * auth/sudo_auth.c: 18914: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes secureware support 18915: [9cd4929f1a78] 18916: 18917: 2000-03-03 Todd C. Miller <Todd.Miller@courtesan.com> 18918: 18919: * auth/passwd.c: 18920: Truncate unencrypted password to 8 chars if encrypted password is 18921: exactly 13 characters (indicateing standard a DES password). Many 18922: versions of crypt() do this for you, but not all (like HP-UX's). 18923: [a9d0259cb193] 18924: 18925: 2000-03-02 Todd C. Miller <Todd.Miller@courtesan.com> 18926: 18927: * INSTALL, RUNSON: 18928: Mention that gcc on dynix may have problems 18929: [77b97fa5bf1b] 18930: 18931: 2000-02-29 Todd C. Miller <Todd.Miller@courtesan.com> 18932: 18933: * Makefile.in: 18934: Link visudo with NET_LIBS since we now call syslog via defaults.c 18935: [9e3830b277cc] 18936: 18937: * defaults.c: 18938: Use Argv[0] as the first arg to openlog() since visudo uses this 18939: too. 18940: [e61078f328ec] 18941: 18942: 2000-02-28 Todd C. Miller <Todd.Miller@courtesan.com> 18943: 18944: * sudo.c: 18945: Stash coredumpsize resource limit and retsore it before the exec() 18946: Otherwise the child ends up with a coredumpsize of 0. 18947: [f6a4783835a3] 18948: 18949: 2000-02-27 Todd C. Miller <Todd.Miller@courtesan.com> 18950: 18951: * sudo.cat, sudo.man, sudo.pod: 18952: document -S flag 18953: [3ebd805b7142] 18954: 18955: * sudo.c: 18956: fix usage string 18957: [66b2dfa47fe8] 18958: 18959: * CHANGES, RUNSON, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c, 18960: auth/sudo_auth.c, sudo.c, sudo.h, tgetpass.c: 18961: Added -S flag (read passwd from stdin) and tgetpass_flags global 18962: that holds flags to be passed in to tgetpass(). Change echo_off 18963: param to tgetpass() into a flags field. There are currently 2 18964: possible flags for tgetpass(): TGP_ECHO and TGP_STDIN. In 18965: tgetpass(), abstract the echo set/clear via macros and if (flags & 18966: TGP_ECHO) but echo is not set on the terminal, but sure to set it. 18967: [a4fcbb712cd0] 18968: 18969: * tgetpass.c: 18970: Fixed a bug that caused an infinite loop when the password timeout 18971: was disabled. 18972: [2be1ffc5a39f] 18973: 18974: 2000-02-18 Todd C. Miller <Todd.Miller@courtesan.com> 18975: 18976: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h, 18977: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: 18978: Add rootpw, runaspw, and targetpw options. 18979: [2d4563e46df7] 18980: 18981: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod, 18982: visudo.c: 18983: enveditor -> env_editor 18984: [ddc5f856e583] 18985: 18986: 2000-02-16 Todd C. Miller <Todd.Miller@courtesan.com> 18987: 18988: * BUGS, INSTALL, Makefile.in, README, configure, configure.in, 18989: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h, visudo.cat, 18990: visudo.man: 18991: crank versino to 1.6.3 18992: [a5f7d3e74360] 18993: 18994: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man, 18995: sudoers.pod, visudo.c: 18996: Add 'editor' and 'enveditor' sudoers defaults and make visudo honor 18997: them. This means that visudo will now parse the sudoers file 18998: *before* it is edited so a bogus sudoers file will cause a warning 18999: to go to stderr. Also, visudo checks the variables once--it does not 19000: check them after each editor run since that could be confusing. 19001: [9f5af18e9212] 19002: 19003: 2000-02-15 Todd C. Miller <Todd.Miller@courtesan.com> 19004: 19005: * RUNSON: 19006: 1.6.2 -> 1.6.2p1 19007: [e25b74f1d1af] 19008: 19009: * check.c, sudo.c, sudo.h: 19010: Move user_is_exempt prototype into sudo.h 19011: [daf26a6ded8a] 19012: 19013: 2000-02-13 Todd C. Miller <Todd.Miller@courtesan.com> 19014: 19015: * configure, configure.in: 19016: Fix thinko, some && should have been || in the last commit 19017: [4b9b2d487ded] 19018: 19019: * configure, configure.in: 19020: Don't initialized Makefile variables to be NULL since the user may 19021: want to import variables from their environment. 19022: [7be019f4422c] 19023: 19024: 2000-02-04 Todd C. Miller <Todd.Miller@courtesan.com> 19025: 19026: * configure, configure.in: 19027: typo 19028: [38f4d8971f0a] 19029: 19030: 2000-01-28 Todd C. Miller <Todd.Miller@courtesan.com> 19031: 19032: * sudo.tab.c: 19033: fix a yacc (skeleton.c) warning 19034: [a2da228a937b] 19035: 19036: 2000-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 19037: 19038: * INSTALL, RUNSON, configure, configure.in: 19039: Make pam work on HP-UX 11.0;jaearick@colby.edu 19040: [b94de0ff6f42] 19041: 19042: * CHANGES: 19043: recent changes; prepare for 1.6.2p1 19044: [b291635ea141] 19045: 19046: * find_path.c: 19047: Don't apply SECURE_PATH if user is example; jmknoble@pobox.com 19048: [4306285c4f6e] 19049: 19050: 2000-01-26 Todd C. Miller <Todd.Miller@courtesan.com> 19051: 19052: * sudo.tab.c: 19053: Regen with yacc that has a memory leak plugged. 19054: [e26383a04eb7] 19055: 19056: * sudoers.cat, sudoers.man, sudoers.pod: 19057: Expanded docs on sudoers 'defaults' options based on INSTALL file 19058: info. 19059: [54c3d62d6c74] 19060: 19061: * INSTALL: 19062: Fix some while lies 19063: [d15311782150] 19064: 19065: 2000-01-24 Todd C. Miller <Todd.Miller@courtesan.com> 19066: 19067: * Makefile.in: 19068: When making a bindist, link FAQ to TROUBLESHOOTING instead of 19069: copying. 19070: [2d88a6ac88cf] 19071: 19072: * sudoers.cat, sudoers.man, sudoers.pod: 19073: Add netgroup caveat 19074: [28d119f466e3] [SUDO_1_6_2] 19075: 19076: * RUNSON: 19077: Last minute updates 19078: [89fb4ed22d52] 19079: 19080: * TROUBLESHOOTING: 19081: PAM entry 19082: [a9fd59f39457] 19083: 19084: * auth/pam.c: 19085: correct a comment 19086: [a29627225ba9] 19087: 19088: * CHANGES, RUNSON: 19089: update for 1.6.2 19090: [b7f1c40ea732] 19091: 19092: * auth/pam.c: 19093: Better detection of PAM errors and fix custom prompts with PAM. 19094: Based on patches from "Cloyce D. Spradling" <cloyce@headgear.org> 19095: [ff69234b94a5] 19096: 19097: 2000-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 19098: 19099: * snprintf.c: 19100: Cast ULONG_MAX to unsigned long long when comparing to an unsigned 19101: long long value. 19102: [9d918c3a2ecd] 19103: 19104: 2000-01-19 Todd C. Miller <Todd.Miller@courtesan.com> 19105: 19106: * CHANGES, config.h.in, configure, configure.in, visudo.c: 19107: Fix sudoers locking in visudo. We now lock the sudoers file itself, 19108: not the temp file (since locking the temp file can foul up editors). 19109: The previous locking scheme didn't work because the fd was closed 19110: too early. 19111: [de2011bb11ed] 19112: 19113: * config.h.in, configure, configure.in: 19114: Don't need test for ftruncate() any more. 19115: [e5f71c848104] 19116: 19117: * configure, configure.in: 19118: Add a test for the -Aa flag w/ HP-UX's cc. Fixes compilation with 19119: the unbundled HP-UX cc. 19120: [2c373612c644] 19121: 19122: 2000-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 19123: 19124: * sudoers.cat, sudoers.man, sudoers.pod: 19125: "a a" -> "a"; Aaron Campbell <aaron@cs.dal.ca> 19126: [05360d2c314e] 19127: 19128: 2000-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 19129: 19130: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h, 19131: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c, tgetpass.c, 19132: version.h, visudo.c: 19133: update copyright year on changed files 19134: [5792a2a28a4c] 19135: 19136: * RUNSON: 19137: updates 19138: [edf8f19aa403] 19139: 19140: * CHANGES: 19141: aix fix 19142: [4d4a243b31e2] 19143: 19144: * INSTALL: 19145: Crank version to 1.6.2 19146: [bcb5cb411624] 19147: 19148: * configure: 19149: Crank version to 1.6.2 19150: [32a19f33427f] 19151: 19152: * sudo.c: 19153: When using rlimit check for RLIM_INFINITY When computing the value 19154: of maxfd, use min(getdtablesize(), RLIMIT_NOFILE) 19155: [8c16166802e5] 19156: 19157: * CHANGES: 19158: recent changes 19159: [09fc7112e44d] 19160: 19161: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man, 19162: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man: 19163: Crank version to 1.6.2 19164: [055fa61a7c61] 19165: 19166: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: 19167: Add 'shell_noargs' runtime option back in. We have to defer 19168: checking until after the sudoers file has been parsed but since 19169: there are now other options that operate that way this one can too. 19170: Based on a patch from bguillory@email.com. 19171: [231db7a007a6] 19172: 19173: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: 19174: Add "listpw" and "verifypw" options. 19175: [190683bac878] 19176: 19177: * sudoers.cat, sudoers.man, sudoers.pod: 19178: o Fix some typos/omissions o Add section on verifypw and listpw o 19179: Define how NOPASSWD interacts with the -v and -l flags 19180: [6feb7350eb79] 19181: 19182: 2000-01-14 Todd C. Miller <Todd.Miller@courtesan.com> 19183: 19184: * configure, configure.in: 19185: For HP-UX cc, add -Aa to CPPFLAGS. For HP-UX always add 19186: -D_HPUX_SOURCE to CPPFLAGS. 19187: [06cc35d89dc8] 19188: 19189: * defaults.c, defaults.h: 19190: In struct sudo_defs_types, move the union to the end and don't 19191: initialize the union member since that only works with an ANSI 19192: compiler. We set the value of the union by hand in init_defaults() 19193: anyway. This allows sudo to compile on a K&R compiler again. 19194: [623487e1fcfa] 19195: 19196: 2000-01-11 Todd C. Miller <Todd.Miller@courtesan.com> 19197: 19198: * parse.c, parse.h, parse.yacc, sudo.tab.c, testsudoers.c, visudo.c: 19199: netgr_matches needs to check shost as well as host since they may be 19200: different. 19201: [3f43ace23d3e] 19202: 19203: * tgetpass.c: 19204: End on \r as well as \n 19205: [cb7c6e6f4202] 19206: 19207: 2000-01-03 Todd C. Miller <Todd.Miller@courtesan.com> 19208: 19209: * sudo.c: 19210: Update statbuf.st_mode based on SUDOERS_MODE when we are chaning 19211: from 0400 to whatever SUDOERS_MODE is (converting from the old 19212: sudoers mode). Assumes that SUDOERS_MODE is less restrictive than 19213: 0400 which should always be the case. 19214: [34cd83d49d20] 19215: 19216: * parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c: 19217: Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l 19218: w/o a passwd if there is *any* entry for the user on the host with a 19219: NOPASSWD flag. For -v, only allow w/o a passwd if *all* entries for 19220: the user on the host w/ the specified runas user have the NOPASSWD 19221: flag set. 19222: [4b3b85697653] 19223: 19224: * Makefile.in: 19225: add check target 19226: [3d24d34a76fd] 19227: 19228: 1999-12-16 Todd C. Miller <Todd.Miller@courtesan.com> 19229: 19230: * visudo.c: 19231: Treat EOF at whatnow prompt like 'x' instead of looping. 19232: [5deffc27114c] 19233: 19234: 1999-12-10 Todd C. Miller <Todd.Miller@courtesan.com> 19235: 19236: * CHANGES: 19237: recent changes 19238: [5836a9452568] [SUDO_1_6_1] 19239: 19240: 1999-12-09 Todd C. Miller <Todd.Miller@courtesan.com> 19241: 19242: * config.h.in, configure, configure.in, sudo.c: 19243: Add check for initgroups() since old SYSV lacks this. 19244: [657a6005a569] 19245: 19246: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure, configure.in, 19247: parse.c, testsudoers.c: 19248: o Kill HAVE_FNMATCH_H o Only define HAVE_FNMATCH if <fnmatch.h> 19249: exists. 19250: [17d081e917d6] 19251: 19252: 1999-12-06 Todd C. Miller <Todd.Miller@courtesan.com> 19253: 19254: * auth/sudo_auth.c: 19255: Don't allow insults to be enabled if the insults[] array is empty. 19256: Otherwise there would be division by zero. 19257: [b20c14db6029] 19258: 19259: * insults.h: 19260: Don't allow insults to be enabled if the insults[] array is empty. 19261: Otherwise there would be division by zero. 19262: [028f130204b0] 19263: 19264: * CHANGES, RUNSON: 19265: Don't allow insults to be enabled if the insults[] array is empty. 19266: Otherwise there would be division by zero. 19267: [974f4780254b] 19268: 19269: * insults.h: 19270: Don't care about USE_INSULTS #define since the insult stuff may be 19271: overridden at runtime. 19272: [b873df8b299c] 19273: 19274: * auth/sudo_auth.c: 19275: Honor insults flag. 19276: [756111640fdc] 19277: 19278: * CHANGES, parse.c: 19279: Don't ask the user for a password if the user is not allowed to run 19280: the command and the authenticate flag (in sudoers) is false. 19281: [cea9fdc09c76] 19282: 19283: * CHANGES, RUNSON, lex.yy.c, parse.lex: 19284: o Whenever we get a bare newline we change to the INITIAL state. o 19285: Enter GOTRUNAS when we see Runas_Alias 19286: 19287: This allows #uid to work in a RunasAlias. 19288: [a475513e7c7a] 19289: 19290: 1999-12-05 Todd C. Miller <Todd.Miller@courtesan.com> 19291: 19292: * CHANGES, parse.yacc, sudo.tab.c: 19293: fix parsing of runas lists: o oprunasuser and runaslist now return a 19294: value o in a runasspec, if a runaslist does not return TRUE, set 19295: runas_matches to FALSE. Normally, a runaslist only returns FALSE 19296: for explicitly denied users. o since runaslist does not modify the 19297: stack there is no need for a push/pop in runasalias. 19298: [82b305b34a8c] 19299: 19300: * check.c, sudo.c: 19301: Don't kill the user's tickets until after sudoers has been parsed 19302: since tty_tickets and ticket_dir could be set in sudoers. 19303: [f43e25367f3a] 19304: 19305: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON, 19306: configure, configure.in, sudo.cat, sudo.man, sudoers.cat, 19307: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: 19308: crank version to 1.6 19309: [95f8bdcf9bb2] 19310: 19311: * testsudoers.c: 19312: add set_fqdn() stub 19313: [bbc81af5b41a] 19314: 19315: 1999-12-02 Todd C. Miller <Todd.Miller@courtesan.com> 19316: 19317: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat, 19318: sudoers.man, sudoers.pod, visudo.c: 19319: o Kill shell_noargs option, it cannot work since the command needs 19320: to be set before sudoers is parsed. o Fix the "set_home" sudoers 19321: option (only worked at compile time). o Fix "fqdn" sudoers option. 19322: We now set host/shost via set_fqdn which gets called when the 19323: "fqdn" option is set in sudoers. o Move the openlog() to 19324: store_syslogfac() so this gets overridden correctly from the 19325: sudoers file. 19326: [3dca861f0f5d] 19327: 19328: * auth/securid.c: 19329: SecurID support should compile now. 19330: [a544e5c6ea34] 19331: 19332: 1999-11-29 Todd C. Miller <Todd.Miller@courtesan.com> 19333: 19334: * sudo.cat, sudo.man, sudo.pod, sudoers.cat, sudoers.man, visudo.cat, 19335: visudo.man, visudo.pod: 19336: fix some syntactic goofs 19337: [b3451f0d5239] 19338: 19339: 1999-11-28 Todd C. Miller <Todd.Miller@courtesan.com> 19340: 19341: * Makefile.in, sudo.html, sudoers.html, visudo.html: 19342: No longer need the .html files as they are generated automatically 19343: on the web site. 19344: [1b4aa4204584] 19345: 19346: * CHANGES, LICENSE: 19347: kill characters that made wml unhappy 19348: [b988fbc6da56] 19349: 19350: * HISTORY: 19351: typo 19352: [a418963f7fce] 19353: 19354: 1999-11-25 Todd C. Miller <Todd.Miller@courtesan.com> 19355: 19356: * README: 19357: majordomo@cs.colorado.edu -> majordomo@courtesan.com 19358: [5d151e8ffd3b] 19359: 19360: * Makefile.in, configure: 19361: Wrap script execution w/ /bin/sh for the benefit of ctm 19362: [3a9c4766b2c3] 19363: 19364: 1999-11-24 Todd C. Miller <Todd.Miller@courtesan.com> 19365: 19366: * sudo.c: 19367: Make the -s flag be exclusive too. Also reorder the flags in the 19368: exclusive usage message so they are alphabetical. 19369: [4c7af200db34] 19370: 19371: 1999-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 19372: 19373: * auth/pam.c: 19374: make pam errors other than PAM_PERM_DENIED fatal 19375: [64bcb3fd2baf] 19376: 19377: * auth/API: 19378: fix typo 19379: [f3134c88b12e] 19380: 19381: * INSTALL: 19382: make it clear that /etc/pam.d/sudo is required on linux 19383: [213cc3eaad82] 19384: 19385: * auth/pam.c: 19386: fix a warning on redhat and spew an error if pam_authenticate() 19387: returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED 19388: [7e46dd19da89] 19389: 19390: * sudo.cat, sudo.html, sudo.man, sudo.pod: 19391: Be very clear that the password required is the user's not root's 19392: [a6da127347e5] 19393: 19394: 1999-11-20 Todd C. Miller <Todd.Miller@courtesan.com> 19395: 19396: * Makefile.in: 19397: add sample.syslog.conf to DISTFILES and BINFILES 19398: [8661c27c007e] 19399: 19400: 1999-11-19 Todd C. Miller <Todd.Miller@courtesan.com> 19401: 19402: * RUNSON: 19403: updates from Brian Jackson + some formatting 19404: [6d31c6fa63f8] 19405: 19406: 1999-11-18 Todd C. Miller <Todd.Miller@courtesan.com> 19407: 19408: * INSTALL.binary, Makefile.binary, README, RUNSON: 19409: o One RUNSon update o Changes for automating real binary releases 19410: [dd9585f4406c] 19411: 19412: * Makefile.in: 19413: Add bindist target 19414: [546ed3fa94bb] 19415: 19416: 1999-11-16 Todd C. Miller <Todd.Miller@courtesan.com> 19417: 19418: * TROUBLESHOOTING: 19419: talk about run-time options in addition to compile-time options 19420: [1eb813ff0a9a] [SUDO_1_6_0] 19421: 19422: * CHANGES: 19423: fix typos 19424: [65e92bb70a7b] 19425: 19426: * sudo.c: 19427: need sys/time.h if HAVE_SETRLIMIT 19428: [ce31655a8a60] 19429: 19430: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man, 19431: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: 19432: get rid of references to sudo-bugs. Now mention the web site or the 19433: sudo@ alias 19434: [a9db861fd8c6] 19435: 19436: * sudoers.html: 19437: repair pod2html damage 19438: [62ece4277f1f] 19439: 19440: * RUNSON, TODO: 19441: Update for 1.6 release 19442: [98569c57ba2a] 19443: 19444: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: 19445: Add warning about using ALL in a command context. 19446: [6c77685ab280] 19447: 19448: 1999-11-09 Todd C. Miller <Todd.Miller@courtesan.com> 19449: 19450: * visudo.c: 19451: Call yyrestart() on a parse error to reset the lexer state. 19452: [1370a27acdb2] 19453: 19454: * lex.yy.c, parse.lex: 19455: Don't need YY_FLUSH_BUFFER after all Move yyrestart() into visudo.c 19456: since it might not get called in yywrap if we get a parse error 19457: (and we only reread the file on error anyway). 19458: [37f4b449e28e] 19459: 19460: * lex.yy.c, parse.lex: 19461: Call YY_FLUSH_BUFFER macro in yywrap() to clean up any buffers that 19462: might still exist. Call yyrestart() instead of using the deprecated 19463: YY_NEW_FILE macro. 19464: [7d0d873046c6] 19465: 19466: * lex.yy.c, parse.lex: 19467: flex doesn't need %N table size declarations 19468: [268b020fd60a] 19469: 19470: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: 19471: Mention what characters need to be escaped in names. 19472: [72ccbb6b0f31] 19473: 19474: 1999-11-08 Todd C. Miller <Todd.Miller@courtesan.com> 19475: 19476: * configure: 19477: regen 19478: [65827abb5c7b] 19479: 19480: * INSTALL: 19481: clarify Mac OS X entry 19482: [8da1549a71f5] 19483: 19484: * RUNSON: 19485: update 19486: [0cff8df7459f] 19487: 19488: * configure.in: 19489: o Use AC_MSG_ERROR throughout o Check syslog configure options for 19490: danity 19491: [4cb81e642e5c] 19492: 19493: 1999-11-05 Todd C. Miller <Todd.Miller@courtesan.com> 19494: 19495: * defaults.c: 19496: Fix printing of type T_MODE in dump_defaults() 19497: [a868bb6f5515] 19498: 19499: * strcasecmp.c: 19500: missing sys/types.h 19501: [ca694ca325b6] 19502: 19503: * INSTALL: 19504: Break out options that may be overridden at run time into their own 19505: section. Add a not about Max OS X and correct some lies. 19506: [d8bcfd120593] 19507: 19508: 1999-11-04 Todd C. Miller <Todd.Miller@courtesan.com> 19509: 19510: * CHANGES, config.h.in, configure, configure.in, sudo.c: 19511: o Now use getrlimit to find the highest fd when closing all non-std 19512: fd's o Turn off core dumps via setrlimit for the sake of paranoia 19513: [dd9f651b6def] 19514: 19515: * RUNSON: 19516: updates 19517: [f581841fe615] 19518: 19519: 1999-11-01 Todd C. Miller <Todd.Miller@courtesan.com> 19520: 19521: * CHANGES: 19522: updates 19523: [553baa1d44c7] 19524: 19525: * tgetpass.c: 19526: When read()'ing, do a single character at a time to be sure we don't 19527: go oast the newline. 19528: [907d33f55bb4] 19529: 19530: * sudo.c: 19531: For the sudo_root option, check against user_uid, not getuid() since 19532: at this point, ruid == euid == 0. 19533: [92d5c51939b4] 19534: 19535: * RUNSON: 19536: some updates 19537: [e3ed0c1f312b] 19538: 19539: * logging.h: 19540: Fix compilation problem when --with-logging=file was specified. 19541: This means that syslog is now required to build sudo but that should 19542: not be a problem. If it is it can be fixed trivially with a 19543: configure check for syslog() or syslog.h. 19544: [839a4b069190] 19545: 19546: * tgetpass.c: 19547: Make this work again for things like "sudo echo hi | more" where the 19548: tty gets put into character at a time mode. We read until we read 19549: end of line or we run out of space (similar to fgets(3)). 19550: [c8f746df2e63] 19551: 19552: 1999-10-20 Todd C. Miller <Todd.Miller@courtesan.com> 19553: 19554: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: 19555: change ital to bold 19556: [f860978e530a] 19557: 19558: * RUNSON: 19559: update 19560: [9bcfbb405568] 19561: 19562: 1999-10-16 Todd C. Miller <Todd.Miller@courtesan.com> 19563: 19564: * defaults.c: 19565: Error out if syslog parameters are given without a value. For 19566: Ultrix or 4.2BSD "syslog" is allowed without a value since there are 19567: no facilities in the 4.2BSD syslog. 19568: [69e7a686f5f0] 19569: 19570: 1999-10-15 Todd C. Miller <Todd.Miller@courtesan.com> 19571: 19572: * defaults.c: 19573: Ignore the syslog facility for systems w/ old syslog like Ultrix. 19574: [5c250adbbb84] 19575: 19576: * TROUBLESHOOTING: 19577: people with "." early in their path can have problems running sudo 19578: from the build dir ;-) 19579: [20a1744a24a4] 19580: 19581: 1999-10-13 Todd C. Miller <Todd.Miller@courtesan.com> 19582: 19583: * sudo.cat, sudo.html, sudo.man, sudo.pod: 19584: Remove -r realm option 19585: [127caa537f95] 19586: 19587: * auth/kerb5.c, auth/sudo_auth.c, auth/sudo_auth.h, configure, 19588: configure.in, sudo.c: 19589: New krb5 code from Frank Cusack <fcusack@iconnet.net>. 19590: [7177a3893a62] 19591: 19592: * CHANGES: 19593: update to reality 19594: [766cfbb512d6] 19595: 19596: 1999-10-12 Todd C. Miller <Todd.Miller@courtesan.com> 19597: 19598: * auth/fwtk.c: 19599: include <auth.h> to get function prototypes. 19600: [d6c7c12d09fe] 19601: 19602: * sudo.cat, sudo.html, sudo.man, sudo.pod: 19603: document -L flag 19604: [dc803e1ce0d7] 19605: 19606: 1999-10-11 Todd C. Miller <Todd.Miller@courtesan.com> 19607: 19608: * sudo.c: 19609: in set_perms(), always call setuid(0) before changing the ruid/euid 19610: so we always know it will succeed. 19611: [8cced1b862bf] 19612: 19613: * defaults.h: 19614: #undef T_FOO to avoid conflicts with system defines (like on 19615: ULTRIX). 19616: [d9f0aac092b0] 19617: 19618: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man, 19619: sudoers.pod: 19620: Docuement "Defaults" lines in /etc/sudoers. Still needs some 19621: fleshing out but this is a start. 19622: [521a1e629bbc] 19623: 19624: 1999-10-10 Todd C. Miller <Todd.Miller@courtesan.com> 19625: 19626: * use strtol, not strtoul since not everyone has not strtoul 19627: [988462f093cc] 19628: 19629: * defaults.c: 19630: use strtol, not strtoul since not everyone has not strtoul 19631: [fce835ce62e3] 19632: 19633: * lex.yy.c, parse.lex: 19634: last {WORD} rule should only apply in the INITIAL state 19635: [9b57570bfa83] 19636: 19637: * lex.yy.c, parse.lex: 19638: o Add support for escaped characters in the WORD macro o Modify 19639: fill() to squash escape chars 19640: [87572d59e4e0] 19641: 19642: * defaults.c, defaults.h: 19643: o Add T_PATH flag to allow simple sanity checks for default values 19644: that are supposed to be pathnames. o Fix a duplicate free when 19645: visudo finds an error. 19646: [bdc6855a6c6d] 19647: 19648: 1999-10-09 Todd C. Miller <Todd.Miller@courtesan.com> 19649: 19650: * defaults.c, defaults.h, logging.c: 19651: mail_if_foo -> mail_foo 19652: [cbee9415875d] 19653: 19654: 1999-10-08 Todd C. Miller <Todd.Miller@courtesan.com> 19655: 19656: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: 19657: o Add requiretty option o Move O_NOCTTY to compat.h 19658: [65b8bf0e1795] 19659: 19660: * logging.c: 19661: The exit() in log_error() was mistakenly removed in a previous 19662: version. Put it back... 19663: [9473449130a4] 19664: 19665: 1999-10-07 Todd C. Miller <Todd.Miller@courtesan.com> 19666: 19667: * INSTALL, TODO, auth/aix_auth.c, auth/fwtk.c, auth/pam.c, 19668: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c, check.c, config.h.in, 19669: configure, configure.in, defaults.c, defaults.h, find_path.c, 19670: getspwuid.c, logging.c, parse.yacc, sudo.c, sudo.tab.c: 19671: o Change defaults stuff to put the value right in the struct. o 19672: Implement mailer_flags o Store syslog stuff both in int and string 19673: form. Setting the string form magically updates the int version. 19674: o Add boolean attribute to strings where it makes sense to say !foo 19675: [4698953f9a36] 19676: 19677: * tgetpass.c: 19678: add O_NOCTTY when opening /dev/tty just in case 19679: [4c6d1d1bb300] 19680: 19681: 1999-10-06 Todd C. Miller <Todd.Miller@courtesan.com> 19682: 19683: * auth/API: 19684: cleanup function no longer takes a status arg 19685: [0819edbfe7f8] 19686: 19687: * INSTALL: 19688: the the 19689: [19aadb65ea28] 19690: 19691: 1999-09-15 Todd C. Miller <Todd.Miller@courtesan.com> 19692: 19693: * TODO, config.h.in, configure, configure.in, logging.c: 19694: Use strftime() instead of ctime() if it is available. 19695: [fb60ea63b514] 19696: 19697: 1999-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 19698: 19699: * defaults.c: 19700: fix copyright date 19701: [4a53b54aa72f] 19702: 19703: * RUNSON: 19704: update ReliantUNIX entry 19705: [de618a4f67d9] 19706: 19707: * defaults.c, defaults.h, logging.c: 19708: add log_year option 19709: [251a9e20568a] 19710: 19711: * configure, configure.in: 19712: add --without-sendmail to help output 19713: [93162f199902] 19714: 19715: * configure, configure.in: 19716: enforce an otctal arg for --with-suoders-mode 19717: [45e1b04ccad3] 19718: 19719: 1999-09-08 Todd C. Miller <Todd.Miller@courtesan.com> 19720: 19721: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, auth/aix_auth.c, 19722: auth/fwtk.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c, auth/sia.c, 19723: auth/sudo_auth.c, check.c, config.h.in, configure, configure.in, 19724: defaults.c, defaults.h, find_path.c, lex.yy.c, logging.c, parse.h, 19725: parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.c, sudo.tab.h, 19726: testsudoers.c, version.c, visudo.c: 19727: Add support for "Defaults" line in sudoers to make configuration 19728: variables changable at runtime (and on a global, per-host and per- 19729: user basis). Both the names and the internal representation are 19730: still subject to change. It was necessary to make sudo_user.runas 19731: but a char ** instead of a char * since this value can be changed by 19732: a Defaults line. There is a similar (but more complicated) issue 19733: with sudo_user.prompt but it is handled differently at the moment. 19734: 19735: Add a "-L" flag to list the name of options with their descriptions. 19736: This may only be temporary. 19737: 19738: Move some prototypes to parse.h 19739: 19740: Be much less restrictive on what is allowed for a username. 19741: [f71abf7ba80c] 19742: 19743: * sample.syslog.conf: 19744: Add more info 19745: [e952e6f42d4d] 19746: 19747: 1999-09-04 Todd C. Miller <Todd.Miller@courtesan.com> 19748: 19749: * LICENSE, fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c, 19750: strcasecmp.c: 19751: UCB has dropped the advertising clause from their license. 19752: [a5602b36a341] 19753: 19754: 1999-08-31 Todd C. Miller <Todd.Miller@courtesan.com> 19755: 19756: * auth/sudo_auth.h: 19757: move dce_verofy proto to correct section 19758: [972c815af558] 19759: 19760: * auth/dce.c: 19761: remove XXX 19762: [820631855be0] 19763: 19764: 1999-08-28 Todd C. Miller <Todd.Miller@courtesan.com> 19765: 19766: * emul/fnmatch.h: 19767: Add fnmatch() prototype 19768: [79e84576d92a] 19769: 19770: * fnmatch.c, parse.c, testsudoers.c: 19771: Move inclusion of emul/fnmatch.h to be after sudo.h for __P 19772: [1182c89fa811] 19773: 19774: * sudo.h: 19775: add strcasecmp proto 19776: [512d1d8a6a0c] 19777: 19778: * auth/sudo_auth.c: 19779: add check for case where there are no auth methods 19780: [e4af2b91b43e] 19781: 19782: * configure, configure.in: 19783: Define _XOPEN_EXTENDED_SOURCE on AIX and __USE_FIXED_PROTOTYPES__ on 19784: SunOS4 w/ gcc 19785: [746ce8bcec23] 19786: 19787: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c: 19788: include strings.h everywhere we include string.h 19789: [6f7d5d437e7b] 19790: 19791: * version.c: 19792: nicer output when showing auth methods 19793: [0eac4b977f9d] 19794: 19795: * version.c: 19796: Add support for SEND_MAIL_WHEN_NO_HOST 19797: [9f20a3a3fae6] 19798: 19799: * config.h.in, configure, configure.in: 19800: Add _GNU_SOURCE for Linux 19801: [c7bd8c511847] 19802: 19803: * lex.yy.c, parse.lex: 19804: fix definition of OCTECT 19805: [4af30e63244d] 19806: 19807: * configure, configure.in: 19808: aix_auth.o not authenticate.o 19809: [fe95dfb08df4] 19810: 19811: 1999-08-27 Todd C. Miller <Todd.Miller@courtesan.com> 19812: 19813: * sudo.c: 19814: Only block SIGINT, SIGQUIT, SIGTSTP (which can be generated from the 19815: keyboard). Since we run with ruid/euid == 0 the user can't really 19816: signal us in nasty ways. 19817: [a7f6487c0f48] 19818: 19819: * visudo.c: 19820: Don't need to worry about catching too many signals since we do 19821: locking on the tmp file. If a lockfile is really stale, it will be 19822: detected and overwritten. 19823: [28983db3e749] 19824: 19825: * INSTALL, Makefile.in: 19826: include auth/API in tarball 19827: [014991600252] 19828: 19829: * auth/sudo_auth.c: 19830: move memset() of plaintext pw outside of verify loop and only do the 19831: memset if we are *not* in standalone mode. 19832: [66f8e87567e2] 19833: 19834: * auth/sudo_auth.c, auth/sudo_auth.h: 19835: DCE is not a standalone method 19836: [34963e2d8a1b] 19837: 19838: * sudo.c: 19839: fix --enable-noargs-shell 19840: [4234062abbb0] 19841: 19842: * snprintf.c: 19843: "#ifdef __STDC__" not "#if __STDC__" (I missed one) 19844: [c430b80454c6] 19845: 19846: * auth/fwtk.c, auth/sia.c: 19847: _cleanup() function returns an int. 19848: [d1a1cc071ec1] 19849: 19850: * auth/dce.c: 19851: there were still some return(0)'s hanging around, make them 19852: AUTH_FAILURE 19853: [1002aa1962c3] 19854: 19855: * parse.c: 19856: typo in comment 19857: [5abc410dbfd2] 19858: 19859: * version.c: 19860: add missing semicolon 19861: [a262283b52a5] 19862: 19863: * auth/sudo_auth.h: 19864: missing backslash 19865: [bf89f6bd2900] 19866: 19867: 1999-08-26 Todd C. Miller <Todd.Miller@courtesan.com> 19868: 19869: * CHANGES, config.h.in, configure, configure.in: 19870: Kill _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes 19871: [f1a9bca0cf67] 19872: 19873: * Makefile.in: 19874: add parse.h to HDRS 19875: [a3d054987766] 19876: 19877: * Makefile.in, configure, configure.in: 19878: Kill VISUDO_LIBS and VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and 19879: LDFLAGS. Common libs go in LIBS, commong ld flags go in LDFLAGS and 19880: network libs like -lsocket, -lnsl go in NET_LIBS. This allows 19881: testsudoers to build on Solaris and is a bit cleaner in general. 19882: [4e6239e97002] 19883: 19884: * UPGRADE: 19885: mention ptmp -> sudoers.tmp 19886: [ec3baa0fe8a1] 19887: 19888: * config.h.in, configure, configure.in: 19889: Define _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE 19890: [6f93dc7f39f5] 19891: 19892: * RUNSON: 19893: add 2 reports 19894: [ce0fcc00ee4e] 19895: 19896: * auth/kerb5.c: 19897: Minor changes, mostly cosmetic. verify_krb_v5_tgt() changed to 19898: return a value more like a system function 19899: [0dd56aa21424] 19900: 19901: * auth/dce.c: 19902: Add an XXX 19903: [58fc8562c212] 19904: 19905: * TODO: 19906: more things todo! 19907: [5a459d0cf339] 19908: 19909: * sample.sudoers: 19910: update based on what is in the man page 19911: [1a0477db96fa] 19912: 19913: * parse.yacc, sudo.tab.c: 19914: minor change to first line printed in -l mode 19915: [69eb57d96952] 19916: 19917: * sudo.cat, sudo.html, sudo.man, sudo.pod: 19918: rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more 19919: standard and add "EXAMPLES" section 19920: [7e543335ebe1] 19921: 19922: * visudo.cat, visudo.html, visudo.man, visudo.pod: 19923: rename "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more 19924: standard 19925: [f82d87ed65c2] 19926: 19927: * logging.c, parse.c, sudo.h: 19928: add FLAG_NO_CHECK 19929: [c7d69176a2d7] 19930: 19931: * lex.yy.c, parse.lex: 19932: make an OCTET really be limited to 0-255 19933: [6ee568dd6a02] 19934: 19935: * UPGRADE: 19936: mention timestamp changes 19937: [e44d5302bf60] 19938: 19939: * PORTING: 19940: cosmetic cleanup 19941: [36fa3a2664dd] 19942: 19943: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: 19944: new sudoers(8) man page 19945: [e674d06283d0] 19946: 19947: 1999-08-24 Todd C. Miller <Todd.Miller@courtesan.com> 19948: 19949: * version.c: 19950: Update comments about syslog name tables 19951: [63830a782dcb] 19952: 19953: * CHANGES, LICENSE, Makefile.in, configure, configure.in, parse.yacc, 19954: strcasecmp.c, sudo.tab.c: 19955: include strcasecmp() for those without it 19956: [a0d8e2488bbc] 19957: 19958: * sample.sudoers: 19959: Use the : operator some more and fix a typo 19960: [18804c70da86] 19961: 19962: * HISTORY: 19963: update the history of sudo 19964: [9d9b3d5279b3] 19965: 19966: * parse.c, parse.lex, testsudoers.c: 19967: CIDR-style netmask support 19968: [768644467353] 19969: 19970: * CHANGES: 19971: recent changes 19972: [a4319e9d07cb] 19973: 19974: * sudo.tab.c, sudo.tab.h: 19975: these should be generated with byacc, not bison 19976: [f57b9489b752] 19977: 19978: * lex.yy.c: 19979: regen 19980: [522461f95dfa] 19981: 19982: * parse.h, parse.yacc, sudo.tab.c, sudo.tab.h: 19983: In "sudo -l" mode, the type of the stored (expanded) alias was not 19984: stored with the contents. This could lead to incorrect output if 19985: the sudoers file had different alias types with the same name. 19986: Normal parsing (ie: not in '-l' mode) is unaffected. 19987: [823fe2bc4b79] 19988: 19989: 1999-08-23 Todd C. Miller <Todd.Miller@courtesan.com> 19990: 19991: * configure, configure.in: 19992: define _XOPEN_SOURCE to get at crypt() proto on some systems 19993: [1b3769b86fb9] 19994: 19995: 1999-08-22 Todd C. Miller <Todd.Miller@courtesan.com> 19996: 19997: * snprintf.c: 19998: fix comment 19999: [fc1264df00f7] 20000: 20001: * tgetpass.c: 20002: don't need limits.h 20003: [f1631829af45] 20004: 20005: * snprintf.c: 20006: kill bogus reference to vfprintf 20007: [a0b99b25d389] 20008: 20009: * sample.sudoers, sudoers: 20010: better examples 20011: [b4d87ea64cc8] 20012: 20013: * snprintf.c: 20014: Add some const in the K&R defs. This is safe since we define const 20015: away if the compiler doesn't grok it. 20016: [614d6e83d45e] 20017: 20018: * aclocal.m4, configure: 20019: Better test for working long long support. Ultrix compiler supports 20020: basic long long but not all operations on them. 20021: [5da1508710ed] 20022: 20023: * aclocal.m4, auth/secureware.c, config.h.in, configure, getspwuid.c, 20024: snprintf.c, sudo.c: 20025: Add check for LONG_IS_QUAD #undef MAXINT before including 20026: hpsecurity.h to silence an HP-UX warning Check for U?LONG_LONG_MAX 20027: in snprintf.c and use LONG_IS_QUAD 20028: [a1f7993367fc] 20029: 20030: 1999-08-21 Todd C. Miller <Todd.Miller@courtesan.com> 20031: 20032: * LICENSE, aclocal.m4, config.h.in, configure, configure.in, 20033: snprintf.c: 20034: UCB-derived snprintf + asprintf support. Supports quads if the 20035: compiler does. No floating point yet, perhaps later... 20036: [0caf05aba945] 20037: 20038: 1999-08-20 Todd C. Miller <Todd.Miller@courtesan.com> 20039: 20040: * auth/API, auth/sudo_auth.c, auth/sudo_auth.h, check.c, find_path.c, 20041: goodpath.c, logging.c, parse.c, sudo.c: 20042: Run most of the code as root, not the invoking user. It doesn't 20043: really gain us anything to run as the user since an attacker can 20044: just have an setuid(0) in their egg. Running as root solves 20045: potential problems wrt signalling. 20046: [408e530dda01] 20047: 20048: * sudo.tab.c: 20049: regen 20050: [f8cfb37e37de] 20051: 20052: 1999-08-19 Todd C. Miller <Todd.Miller@courtesan.com> 20053: 20054: * logging.c, sudo.c: 20055: Don't wait for child to finish in log_error(), let the signal 20056: handler get it if we are still running, else let init reap it for 20057: us. The extra time it takes to wait lets the user know that mail is 20058: being sent. 20059: 20060: Install SIGCHLD handler in main() and for POSIX signals, block 20061: everything 20062: *except* SIGCHLD. 20063: [d2b6ab0ef3be] 20064: 20065: * INSTALL, config.h.in, configure, configure.in, logging.c, parse.c, 20066: parse.yacc, sudo.c, sudo.h: 20067: sudoers_lookup() now returns a bitmap instead of an int. This makes 20068: it possible to express things like "failed to validate because user 20069: not listed for this host". Some thigns that were previously 20070: VALIDATE_FOO are now FLAG_FOO. This may change later on. 20071: 20072: Reorganized code in log_auth() and sudo.c to deal with above 20073: changes. 20074: 20075: Safer versions of push/pushcp with in the do { ... } while (0) style 20076: 20077: parse.yacc now saves info on the stack to allow parse.c to determine 20078: if a user was listed, but not for the host he/she tried to run on. 20079: 20080: Added --with-mail-if-no-host option 20081: [63326cb01efc] 20082: 20083: 1999-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 20084: 20085: * parse.yacc, sudo.h, sudo.tab.c, visudo.c, visudo.cat, visudo.html, 20086: visudo.man, visudo.pod: 20087: o NewArgv and NewArgc don't need to be externally visible. o If 20088: pedantic > 1, it is a parse error. o Add -s (strict) option to 20089: visudo which sets pedantic to 2. 20090: [5d7d81b55cd5] 20091: 20092: * HISTORY, INSTALL: 20093: Just have sudo-bugs contact info in one place 20094: [e7f6588ea683] 20095: 20096: * sudo.cat, sudo.html, sudo.man, sudo.pod: 20097: Add BUGS section 20098: [6607d96ea510] 20099: 20100: * Makefile.in, configure, configure.in: 20101: Add testsudoers to default build target if --with-devel Don't clean 20102: generated parser files unless "distclean". 20103: [5827b769dc57] 20104: 20105: * parse.yacc, sudo.tab.c: 20106: In pedantic mode we need to save *all* the aliases, not just those 20107: that match, or we get spurious warnings. 20108: [24f5b1f0e1de] 20109: 20110: * TROUBLESHOOTING: 20111: reference samples.sylog.conf 20112: [11841668380a] 20113: 20114: 1999-08-14 Todd C. Miller <Todd.Miller@courtesan.com> 20115: 20116: * sample.syslog.conf: 20117: Sample entries for syslog.conf 20118: [0f7697d878a1] 20119: 20120: * CHANGES: 20121: recent changes 20122: [8bca8810c6bd] 20123: 20124: * auth/API, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c, 20125: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c, 20126: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c, 20127: auth/sudo_auth.c, auth/sudo_auth.h: 20128: In struct sudo_auth, turn need_root and configured into flags and 20129: add a flag to specify an auth method is running alone (the only 20130: one). Pass auth methods their sudo_auth pointer, not the data 20131: pointer. This allows us to get at the flags and tell if we are the 20132: only auth method. That, in turn, allows the method to be able to 20133: decide what should/should not be a fatal error. Currently only 20134: rfc1938 uses it this way, which allows us to kill the OTP_ONLY 20135: define and te hackery that went with it. With access to the 20136: sudo_auth struct, methods can also get at a string holding their 20137: cannonical name (useful in error messages). 20138: [b7e320fc6511] 20139: 20140: * INSTALL, Makefile.in, README, config.h.in, configure, configure.in, 20141: getspwuid.c, lex.yy.c, parse.lex, parse.yacc, sudo.tab.c, 20142: sudo.tab.h: 20143: o --with-otp deprecated, use --without-passwd instead o real 20144: dependencies in the Makefile o --with-devel option to enable yacc, 20145: lex, and -Wall o style -- "foo -> bar" becomes "foo->bar" o ALL goes 20146: back to being a token, not a string but don't leak memory o rename 20147: hsotspec -> host in parse.yacc 20148: [912c45226cb2] 20149: 20150: 1999-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 20151: 20152: * BUGS, CHANGES: 20153: recent changes 20154: [801fa6e55687] 20155: 20156: * auth/sudo_auth.c, configure, configure.in, interfaces.c, snprintf.c, 20157: sudo.c, sudo.h: 20158: o Digital UNIX needs to check for *snprintf() before -ldb is added 20159: to LIBS since -ldb includes a bogus snprintf(). o Add forward refs 20160: for struct mbuf and struct rtentry for Digital UNIX. o Reorder some 20161: functions in snprintf.c to fix -Wall o Add missing includes to fix 20162: more -Wall 20163: [8d207203e126] 20164: 20165: * INSTALL, auth/sudo_auth.c, check.c, config.h.in, configure, 20166: configure.in, parse.yacc, sudo.tab.c, testsudoers.c, version.c, 20167: visudo.c: 20168: o Add a "pedentic" flag to the parser. This makes sudo warn in 20169: cases where an alias may be used before it is defined. Only turned 20170: on for visudo and testsudoers. o Add --disable-authentication option 20171: that makes sudo not require authentication by default. The PASSWD 20172: tag can be used to require authentication for an entry. We no 20173: longer overload --without-passwd. 20174: [f307e09adf98] 20175: 20176: * lex.yy.c, parse.lex: 20177: Break 'WORD' regexp def into HOSTNAME and USERNAME. These days a 20178: username can contain just about anything so be very permissive. Also 20179: drop the unused \. punctuation. 20180: [06a50614ff89] 20181: 20182: 1999-08-09 Todd C. Miller <Todd.Miller@courtesan.com> 20183: 20184: * parse.yacc, sudo.tab.c: 20185: o add a 'val' element to aliasinfo struct and move -> parse.h o 20186: find_alias() now returns an aliasinfo * instead of boolean o 20187: add_alias() now takes a value parameter to store in the 20188: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now 20189: return: 1) positive match 0) negative match (due to '!') 20190: -1) no match This means setting $$ explicitly in all cases, which I 20191: should have done in the first place. It also means that we always 20192: store a value that is != -1 and when we see a '!' we can set 20193: *_matches to !rv if rv != -1. The upshot of all of this is that '!' 20194: now works the way it should in lists and some of the rules are more 20195: uniform and sensible. 20196: [ad8e73b5d581] 20197: 20198: * Makefile.in: 20199: add parse.h dependency 20200: [4ccccd464d30] 20201: 20202: * parse.h: 20203: kill unused *_matched macros 20204: [02cba6dcb732] 20205: 20206: * parse.yacc: 20207: Allow a list of users as the first thing in a user spec, not just a 20208: single entry. This makes things more uniform, though it does allow 20209: you to write user specs that are hard to read. 20210: [3c4c91c508ca] 20211: 20212: * sudo.tab.c: 20213: parse.yacc 20214: [feca81881bb6] 20215: 20216: * configure: 20217: regen 20218: [6f247010bb3b] 20219: 20220: * configure.in: 20221: fix check for crypt() in libufc 20222: [82770736f4b0] 20223: 20224: 1999-08-07 Todd C. Miller <Todd.Miller@courtesan.com> 20225: 20226: * README: 20227: sudo-users list now exists 20228: [4716d2bb0bbf] 20229: 20230: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: 20231: Update to reality. 20232: [1eda2d57e42a] 20233: 20234: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h, 20235: config.h.in, configure, configure.in, fileops.c, logging.c, sudo.h, 20236: version.c, visudo.c: 20237: o Move lock_file() and touch() into fileops.c so visudo can use them 20238: o Visudo now locks the sudoers temp file instead of bailing when the 20239: temp file already exists. This fixes the problem of stale temp 20240: files but it does *require* that you not try to put the temp file in 20241: a world-writable directory. This shoud not be an issue as the temp 20242: file should live in the same dir as sudoers. o Visudo now only 20243: installs the temp file as sudoers if it changed. 20244: [2517cd06c070] 20245: 20246: 1999-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 20247: 20248: * logging.c: 20249: add fcntl locking 20250: [c304adeaf515] 20251: 20252: * config.h.in, configure, configure.in, logging.c: 20253: Lock the log file. 20254: [d8652704fbdf] 20255: 20256: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c, 20257: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: 20258: o /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow 20259: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and _PATH_SUDO_STMP 20260: -> _PATH_SUDOERS_TMP 20261: [68cad8975807] 20262: 20263: 1999-08-05 Todd C. Miller <Todd.Miller@courtesan.com> 20264: 20265: * INSTALL, check.c, config.h.in, configure, configure.in, version.c: 20266: o Kill *_MESSAGE and replace with NO_LECTURE o Add more things to 20267: root sudo -V config reporting 20268: [cdd2613a9dcf] 20269: 20270: * configure, configure.in: 20271: aix_auth.o not authenticate.o 20272: [d972e35f6730] 20273: 20274: * config.h.in: 20275: Add --with-goodpri and --with-badpri configure options to specify 20276: the syslog priority to use. 20277: [2595ae50ab86] 20278: 20279: * INSTALL, configure, configure.in, logging.h: 20280: Add --with-goodpri and --with-badpri configure options to specify 20281: the syslog priority to use. 20282: [8276ee9b2b49] 20283: 20284: * compat.h: 20285: kill crufty AIX stuff 20286: [a4f35ef9854e] 20287: 20288: * Makefile.in: 20289: Sigh, some versions of make (like Solaris's) don't deal with $< like 20290: I would expect. Both GNU and BSD makes get this right but... So, we 20291: just expand $< inline at the cost of some ugliness. 20292: [b1b456f8801f] 20293: 20294: * version.c: 20295: If the invoking user is root, sudo will now print configure info in 20296: -V mode. Currently just prints logging info, to be expanded later. 20297: [392f7ed99267] 20298: 20299: * logging.c, logging.h, sudo.c, sudo.h: 20300: o new defines for syslog facility and priority o use new 20301: print_version() functino for -V mode 20302: [78abc5142985] 20303: 20304: * check.c: 20305: Don't need version.c 20306: [db9a830ad893] 20307: 20308: * aclocal.m4, config.h.in, configure, configure.in: 20309: Add check for syslog facilities and priorities tables in syslog.h 20310: [b86213e5fc5c] 20311: 20312: * Makefile.in: 20313: o authenticate -> aix_auth o add version.c 20314: [44b6b9a8d0f5] 20315: 20316: * auth/sudo_auth.c: 20317: Missed a prompt -> user_prompt conversion 20318: [e4c60b1f210c] 20319: 20320: 1999-08-04 Todd C. Miller <Todd.Miller@courtesan.com> 20321: 20322: * TODO: 20323: sudo should lock its logfile 20324: [6d2830b28b07] 20325: 20326: * parse.yacc, sudo.tab.c: 20327: o Add '!' correctly when expanding Aliases. o Add shortcut macros 20328: for append() to make things more readable. o The separator in 20329: append() is now a string instead of a char. o In append(), only 20330: prepend the separator if the last char is not a '!'. This is a 20331: hack but it greatly simplifies '!' handling. o In -l mode, Runas 20332: lists and NOPASSWD/PASSWD tags are now inherited across entries in 20333: a list (matches current behavior). o Fix formatting in -l mode such 20334: that items in a list are separated by a space. Greatlt improves 20335: readability. o Space for name field in struct aliasinfo is now 20336: allocated dyanically instead of using a (big) buffer. o In 20337: add_alias(), only search the list once (lsearch instead of lfind + 20338: lsearch) 20339: [51f7e07addb9] 20340: 20341: * lex.yy.c, sudo.tab.c, sudo.tab.h: 20342: regen 20343: [5c19bb05dc21] 20344: 20345: * configure, configure.in: 20346: Solais pam doesn't require anye xtra setup 20347: [a25ba03d91d1] 20348: 20349: * parse.yacc: 20350: o Simpler '!' support now that the lexer deals with multiple !'s for 20351: us. o In the case of opFOO, have FOO give a boolean return value and 20352: set foo_matches in opFOO, not FOO. o Treat 'ALL' as a string since 20353: it gets fill()'d in parse.lex--fixes a small memory leak. In the 20354: long run it may be better to just fix parse.lex and make ALL back 20355: into a token. However, having it be a string is useful since it 20356: can be easily passed back to the parent rule if we so desire. 20357: [b3c64b443018] 20358: 20359: * parse.lex: 20360: o Remove some unnecessary backslashes o collapse multiple !'s by 20361: using !+ and checking if yyleng is even or odd. this allows us to 20362: simplify ! handling in parse.yacc 20363: [76330e8da8e3] 20364: 20365: * sudo.c: 20366: -u flag was being ignored 20367: [e30283207585] 20368: 20369: 1999-08-01 Todd C. Miller <Todd.Miller@courtesan.com> 20370: 20371: * Makefile.in: 20372: correct fix 20373: [a0e2377dec8f] 20374: 20375: * Makefile.in: 20376: work around pod2man stupididy 20377: [7c755640b67f] 20378: 20379: * Makefile.in: 20380: correct dependencies for .cat 20381: [5ed7b0653b68] 20382: 20383: * sudo.cat, sudo.man, visudo.cat, visudo.man: 20384: regen 20385: [b74510dd6a0a] 20386: 20387: * sudo.pod, visudo.pod: 20388: Add copyright Update to reality 20389: [188e9b046c15] 20390: 20391: * parse.c, sudo.c, sudo.h: 20392: rename validate() to the more descriptive sudoers_lookup() 20393: [7a1cb652f379] 20394: 20395: * auth/aix_auth.c: 20396: use tgetpass 20397: [b8ba5daec40a] 20398: 20399: 1999-07-31 Todd C. Miller <Todd.Miller@courtesan.com> 20400: 20401: * CHANGES: 20402: updates 20403: [e61460cdf4a0] 20404: 20405: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING, 20406: configure, configure.in, sudo.c: 20407: Sudo, not CU Sudo 20408: [9061b3573c0c] 20409: 20410: * LICENSE: 20411: add 4th term to license similar to term 5 in the apache license 20412: [92712e895afb] 20413: 20414: * emul/search.h, emul/utime.h: 20415: add 4th term to license similar to term 5 in the apache license 20416: [4f93a8b9396e] 20417: 20418: * auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c, auth/kerb4.c, 20419: auth/kerb5.c, auth/pam.c, auth/passwd.c, auth/rfc1938.c, 20420: auth/secureware.c, auth/securid.c, auth/sia.c, auth/sudo_auth.c, 20421: auth/sudo_auth.h, insults.h, interfaces.c, interfaces.h, lex.yy.c, 20422: logging.c, logging.h, parse.c, parse.h, parse.lex, parse.yacc, 20423: pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h, sudo.tab.c, 20424: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h, 20425: visudo.c: 20426: add 4th term to license similar to term 5 in the apache license 20427: [afae9f2bf9ec] 20428: 20429: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h: 20430: add 4th term to license similar to term 5 in the apache license 20431: [c389d3fdafac] 20432: 20433: * Makefile.in, alloc.c, check.c, compat.h, config.h.in, find_path.c, 20434: getspwuid.c, goodpath.c: 20435: add 4th term to license similar to term 5 in the apache license 20436: [969e63dbd38e] 20437: 20438: * LICENSE, aclocal.m4, auth/rfc1938.c, check.c, configure.in, 20439: insults.h, logging.c, sudo.c, sudo.h: 20440: there was a 1995 release too 20441: [5963fd89457a] 20442: 20443: 1999-07-28 Todd C. Miller <Todd.Miller@courtesan.com> 20444: 20445: * CHANGES: 20446: updates 20447: [254b794f16ab] 20448: 20449: * check.c: 20450: Use dirs instead of files for timestamp. This allows tty and non- 20451: tty schemes to coexist reasonably. Note, however, that when you 20452: update a tty ticket, the mtime on the user dir gets updated as well. 20453: [44bfac32f799] 20454: 20455: * configure, configure.in: 20456: Fix getprpwnam() checking on SCO. Need to link with "-lprot -lx" 20457: when linking test program, not just -lprot. Also add check for 20458: getspnam(). The SCO docs indicate that /etc/shadow can be used but 20459: this may be a lie. 20460: [2ba21d36cc1e] 20461: 20462: 1999-07-24 Todd C. Miller <Todd.Miller@courtesan.com> 20463: 20464: * auth/API: 20465: first cut at auth API description 20466: [3d10df021eb8] 20467: 20468: 1999-07-22 Todd C. Miller <Todd.Miller@courtesan.com> 20469: 20470: * auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/rfc1938.c, 20471: auth/secureware.c, auth/securid.c, auth/sudo_auth.c, 20472: auth/sudo_auth.h: 20473: auth API change. There is now an init method that gets run before 20474: the main loop. This allows auth routines to differentiate between 20475: initialization that happens once vs. setup that needs to run each 20476: time through the loop. 20477: [76df1c0d3478] 20478: 20479: * auth/kerb5.c, logging.c: 20480: use easprintf() and evasprintf() 20481: [fd97d96dc12f] 20482: 20483: * alloc.c, sudo.h: 20484: add easprintf() and evasprintf(), error checking versions of 20485: asprintf() and vasprintf() 20486: [f54385de20b7] 20487: 20488: * TODO: 20489: remove 2 items. One done, one won't do. 20490: [64513b47bc7a] 20491: 20492: * lex.yy.c, sudo.tab.c: 20493: regen 20494: [4aa299de2752] 20495: 20496: * configure, sudo.cat, sudo.html, sudo.man, sudoers.html, visudo.cat, 20497: visudo.html, visudo.man: 20498: regen 20499: [553c0d1209be] 20500: 20501: * CHANGES: 20502: new changes 20503: [d7be00b7e36b] 20504: 20505: * sudo.pod: 20506: o Document -K flag and update meaning of -k flag. o BSD-style 20507: copyright o Document clearing of BIND resolver environment variables 20508: o Clarify bit about shared libs o suggest rc files create /tmp/.odus 20509: if your OS gives away files 20510: [4a4092be1455] 20511: 20512: * visudo.pod: 20513: BSD license 20514: [ad0bfd0a4630] 20515: 20516: * version.h: 20517: BSD-style copyright 20518: [ecc6479325be] 20519: 20520: * tgetpass.c: 20521: o BSD copyright o no need to block signals, we now do that in main() 20522: o cosmetic changes 20523: [61958beda7ab] 20524: 20525: * testsudoers.c, visudo.c: 20526: o BSD-style copyright o Use "struct sudo_user" instead of old 20527: globals. o some cometic cleanup 20528: [88c0c6924082] 20529: 20530: * sudo_setenv.c: 20531: BSD-style copyright 20532: [df20290129a0] 20533: 20534: * sudo.h: 20535: o BSD copyright o logging and parser bits moved to their own .h 20536: files o new "struct sudo_user" to encapsulate many of the old 20537: globals. 20538: [50fc86bf25cb] 20539: 20540: * sudo.c: 20541: o no longer contains sudo 1.1/1.2 code o BSD copyright o use new 20542: logging routines o simplified flow of control o BIND resolver 20543: additions to badenv_table 20544: [8c53f15bfcb0] 20545: 20546: * strerror.c: 20547: BSD-style copyright 20548: [7c906c3a82ac] 20549: 20550: * snprintf.c: 20551: Now compiles on more K&R compilers 20552: [07ab1d3231c7] 20553: 20554: * putenv.c: 20555: BSD-style copyright, cosmetic changes 20556: [c42371295881] 20557: 20558: * pathnames.h.in: 20559: BSD-style copyright 20560: [e5c34ebd4cf1] 20561: 20562: * parse.c, parse.h, parse.lex, parse.yacc: 20563: BSD-style copyright. Move parser-specific defines and structs into 20564: parse.h + other cosmetic changes 20565: [d3088efb6228] 20566: 20567: * logging.h: 20568: defines for logging routines 20569: [13147941c02d] 20570: 20571: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: 20572: BSD-style copyright, cosmetic changes 20573: [e8205e91a4fa] 20574: 20575: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 20576: interfaces.h: 20577: BSD-style copyright 20578: [b9499da7cdce] 20579: 20580: * configure.in: 20581: o tgetpass.c is no longer optional o kill DCE_OBJS, add AUTH_OBJS o 20582: kill --disable-tgetpass o add --without-passwd o changes to fill in 20583: AUTH_OBJS for new auth api o check for strerror(), v?snprintf() and 20584: v?asprintf() o replace --with-AuthSRV with --with-fwtk 20585: [9a3f39b9c128] 20586: 20587: * config.h.in: 20588: BSD-style copyright. Remove USE_GETPASS and HAVE_UTIME_NULL. Add 20589: HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF, HAVE_VSNPRINTF, 20590: HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and NO_PASSWD 20591: [9a09054db53a] 20592: 20593: * compat.h: 20594: BSD-style copyright; Add S_IFLNK and MIN/MAX id they are missing. 20595: [25509c566975] 20596: 20597: * alloc.c: 20598: BSD-style copyright 20599: [4967be892363] 20600: 20601: * TROUBLESHOOTING: 20602: no more --with-getpass 20603: [afd5b670c196] 20604: 20605: * TODO: 20606: Take out things I've done... 20607: [375420c8270e] 20608: 20609: * README: 20610: Refer to LICENSE 20611: [c486c8db30f6] 20612: 20613: * PORTING: 20614: --with-getpass no longer exists 20615: [db48202df1bb] 20616: 20617: * Makefile.in: 20618: BSD-style copyright. Update to reflect reality wrt new files and 20619: new auth modules. 20620: [61a2ca7940fb] 20621: 20622: * INSTALL: 20623: Remove --with-AuthSRV and --disable-tgetpass. Add --with-fwtk and 20624: --without-passwd. 20625: [64e8f9e1c05e] 20626: 20627: * HISTORY: 20628: Update history a bit 20629: [df60c0a871b8] 20630: 20631: * COPYING, LICENSE: 20632: Now distributed under a BSD-style license 20633: [d1a184ccabe1] 20634: 20635: * auth/sudo_auth.c: 20636: o BSD-style copyright o Add support for NO_PASSWD/WITHOUT_PASSWD 20637: options. o skey/opie replaced by rfc1938 code o new struct sudo_user 20638: global 20639: [891b57060868] 20640: 20641: * auth/pam.c, auth/sia.c: 20642: BSD-style copyright and use new log functions 20643: [65c44445ea84] 20644: 20645: * auth/kerb5.c: 20646: o BSD-style copyright o Use new log functiongs o Use asprintf() and 20647: snprintf() where sensible. 20648: [1ff0feaacf95] 20649: 20650: * check.c: 20651: Rewrote all the old sudo 1.1/1.2 code. Timestamp handling is now 20652: done more reasonably--better sanity checks and tty-based stamps are 20653: now done as files in a directory with the same name as the invoking 20654: user, eg. /var/run/sudo/millert/ttyp1. It is not currently possible 20655: to mix tty and non-tty based ticket schemes but this may change in 20656: the future (it requires sudo to use a directory instead of a file in 20657: the non-tty case). Also, ``sudo -k'' now sets the ticket back to 20658: the epoch and ``sudo -K'' really deletes the file. That way you 20659: don't get the lecture again just because you killed your ticket in 20660: .logout. BSD-style copyright now. 20661: [ec3460f85be8] 20662: 20663: * logging.c: 20664: o rewritten logging routines. log_error() now takes printf-style 20665: varargs and log_auth() for the return value of validate(). o BSD- 20666: style copyright 20667: [438292025c4e] 20668: 20669: * auth.c, check_sia.c, dce_pwent.c, secureware.c: 20670: superceded by new auth API 20671: [412060590da7] 20672: 20673: * auth/kerb4.c: 20674: BSD-style copyright 20675: [cc4e800833c7] 20676: 20677: * auth/fwtk.c: 20678: Use snprintf() where it makes sense and add a BSD-style copyright 20679: [1b7502388a74] 20680: 20681: * auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/passwd.c, 20682: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sudo_auth.h: 20683: BSD-style copyright 20684: [42583bedae5c] 20685: 20686: * emul/utime.h, utime.c: 20687: BSD-style copyright 20688: [3985c90aba47] 20689: 20690: * emul/search.h: 20691: this has been rewritten so use my BSD-style copyright 20692: [176df1b0de6f] 20693: 20694: 1999-07-15 Todd C. Miller <Todd.Miller@courtesan.com> 20695: 20696: * snprintf.c: 20697: include malloc.h if no stdlib.h 20698: [7b123f1d1d03] 20699: 20700: * snprintf.c: 20701: KTH snprintf()/asprintf() for systems w/o them 20702: [3ca9aefb9d01] 20703: 20704: * strerror.c: 20705: strerror() for systems w/o it 20706: [7f0bd8a1c1b4] 20707: 20708: 1999-07-12 Todd C. Miller <Todd.Miller@courtesan.com> 20709: 20710: * visudo.c: 20711: stylistic changes 20712: [6f99aceb7170] 20713: 20714: * parse.c, parse.lex, parse.yacc: 20715: Add contribution info in the main comment 20716: [e50cec10acd6] 20717: 20718: 1999-07-11 Todd C. Miller <Todd.Miller@courtesan.com> 20719: 20720: * auth/pam.c: 20721: remove missed ref to PAM_nullpw 20722: [a43e59692cdb] 20723: 20724: * auth/sudo_auth.h: 20725: pasto 20726: [891ff138ab89] 20727: 20728: * auth/kerb5.c: 20729: more or less complete now--still untested 20730: [21036732faa0] 20731: 20732: * auth/afs.c, auth/pam.c: 20733: don't use user_name macro, it will go away 20734: [def7cf727349] 20735: 20736: * auth/opie.c, auth/rfc1938.c, auth/skey.c, auth/sudo_auth.h: 20737: combine skey/opie code into rfc1938.c 20738: [44d88ca93d3e] 20739: 20740: * auth/dce.c, auth/sudo_auth.h: 20741: DCE authentication method; basically unchanged from dce_pwent.c 20742: [4d468473dd6f] 20743: 20744: * auth/aix_auth.c, auth/sudo_auth.h: 20745: AIX authenticate() support. Could probably be much better 20746: [000013321a33] 20747: 20748: * auth/sia.c: 20749: Fix an uninitialized variable and some cleanup. Now works (tested) 20750: [fd6ad88ff055] 20751: 20752: * auth/sia.c, auth/sudo_auth.h: 20753: SIA support for digital unix 20754: [5335f3e70eab] 20755: 20756: * auth/pam.c: 20757: don't use prompt global, it will go away 20758: [fadd22dd6ce4] 20759: 20760: * auth/secureware.c: 20761: correct copyright years 20762: [6aa07c49f51b] 20763: 20764: * auth/afs.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/opie.c, 20765: auth/pam.c, auth/passwd.c, auth/secureware.c, auth/securid.c, 20766: auth/skey.c, auth/sudo_auth.c, auth/sudo_auth.h: 20767: New authentication API and methods 20768: [9debe9b59c79] 20769: 20770: 1999-07-08 Todd C. Miller <Todd.Miller@courtesan.com> 20771: 20772: * sudo.tab.c: 20773: regen 20774: [84578e82c1a6] 20775: 20776: * parse.yacc: 20777: only save an entry if user_matches && host_matches, even if the 20778: stack is empty (fix for previous commit) 20779: [00984b078d8a] 20780: 20781: * sudo.tab.c: 20782: regen 20783: [66acf160b4b7] 20784: 20785: * parse.yacc: 20786: 1) Always save an entry on the stack if it is empty. This fixes the 20787: -l and -v flags that were broken by earlier parser changes. 20788: 20789: 2) In a Runas list, don't negate FALSE -> TRUE since that would make 20790: !foo match any time the user specified a runas user (via -u) other 20791: than foo. 20792: [f322eb54b015] 20793: 20794: * testsudoers.c: 20795: interfaces and num_interfaces are now auto, not extern 20796: [113add5c6518] 20797: 20798: 1999-07-07 Todd C. Miller <Todd.Miller@courtesan.com> 20799: 20800: * auth.c: 20801: use a static global to keep stae about empty passwords 20802: [bc02e30807d8] 20803: 20804: * check_sia.c: 20805: make PASSWORD_NOT_CORRECT logging consistent with other modules 20806: [21962549d5fd] 20807: 20808: 1999-07-05 Todd C. Miller <Todd.Miller@courtesan.com> 20809: 20810: * auth.c: 20811: PAM prompt code was wrong, looks like we have to kludge it after 20812: all. 20813: [91f246155ead] 20814: 20815: * auth.c: 20816: In the PAM code, when a user hits return at the first password 20817: prompt, exit without a warning just like the normal auth code 20818: [918f59bacdb7] 20819: 20820: * configure, configure.in: 20821: kludge around cross-compiler false positives 20822: [5e5fc8356400] 20823: 20824: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: 20825: New (correct) PAM code Tgetpass now takes an echo flag for use with 20826: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a 20827: useless umask setting Change error from BAD_ALLOCATION -> 20828: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to auth.c 20829: for consistency 20830: [e71397f09dd8] 20831: 20832: * sudo.c: 20833: Some -Wall and kill some trailing spaces 20834: [8229b43d5c4e] 20835: 20836: * configure.in: 20837: define -D__EXTENSIONS__ for solaris so we get crypt() proto 20838: [7533e4436cab] 20839: 20840: 1999-06-22 Todd C. Miller <Todd.Miller@courtesan.com> 20841: 20842: * RUNSON: 20843: add Dynix 4.4.4 20844: [b69f773efbce] 20845: 20846: * INSTALL, config.h.in, configure, configure.in: 20847: for kerberos V < version, fall back on old kerb4 auth code 20848: [d685ed3a1d8e] 20849: 20850: * INSTALL: 20851: clarify some things 20852: [2f5ba2e8e53a] 20853: 20854: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: 20855: typos 20856: [8925a109c093] 20857: 20858: 1999-06-14 Todd C. Miller <Todd.Miller@courtesan.com> 20859: 20860: * sudo.c: 20861: mention why DONT_LEAK_PATH_INFO is not the default 20862: [0346260cb4ec] 20863: 20864: 1999-06-03 Todd C. Miller <Todd.Miller@courtesan.com> 20865: 20866: * tgetpass.c: 20867: Fix open(2) return value checking, was NULL for fopen, should be -1 20868: for open 20869: [355878bf6d8a] 20870: 20871: * configure: 20872: regen 20873: [68bf82871862] 20874: 20875: * configure.in: 20876: better wording for solaris pam notice 20877: [04e88c7a6c42] 20878: 20879: * CHANGES: 20880: document recent changes 20881: [7c922c5622ef] 20882: 20883: * TROUBLESHOOTING: 20884: Update shadow password section 20885: [e8448bae7d66] 20886: 20887: * auth.c: 20888: move authentication code from check.c to auth.c 20889: [e9f6ecae2399] 20890: 20891: * Makefile.in, check.c, sudo.h: 20892: move authentication code to auth.c 20893: [124cded85f46] 20894: 20895: 1999-05-17 Todd C. Miller <Todd.Miller@courtesan.com> 20896: 20897: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c, 20898: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c, 20899: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c, 20900: sudo.h, sudo.tab.c, sudo_setenv.c, testsudoers.c, tgetpass.c, 20901: visudo.c: 20902: Move interface-related defines to interfaces.h so we don't have to 20903: include <netinet/in.h> everywhere. 20904: [e7599d8ea0bf] 20905: 20906: 1999-05-14 Todd C. Miller <Todd.Miller@courtesan.com> 20907: 20908: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c, logging.c, 20909: parse.yacc, sudo.c, sudo.tab.c, tgetpass.c: 20910: o Replace _PASSWD_LEN braindeath with our own SUDO_MAX_PASS. It 20911: turns out the old DES crypt does the right thing with passwords 20912: longert than 8 characters. o Fix common typo (necesary -> 20913: necessary) o Update TODO list 20914: [ad75007a6f13] 20915: 20916: 1999-05-03 Todd C. Miller <Todd.Miller@courtesan.com> 20917: 20918: * sudo.c: 20919: set $LOGNAME when we set $USER 20920: [391596210fd7] 20921: 20922: 1999-04-27 Todd C. Miller <Todd.Miller@courtesan.com> 20923: 20924: * INSTALL: 20925: add comment about digital unix and interfaces.c warning with gcc 20926: [e20f815901cc] 20927: 20928: 1999-04-15 Todd C. Miller <Todd.Miller@courtesan.com> 20929: 20930: * sample.sudoers: 20931: use modern paths and give examples for some of the new parser 20932: features 20933: [e7b2e507c695] 20934: 20935: 1999-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 20936: 20937: * parse.c: 20938: fix comment 20939: [5eb0d005a65f] 20940: 20941: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c, 20942: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c, parse.c, 20943: parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c, sudo.tab.c, 20944: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: 20945: Function names should be flush with the start of the line so they 20946: can be found trivially in an editor and with grep 20947: [3c400abde574] 20948: 20949: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex, parse.yacc, 20950: sudo.c, sudo.tab.c, testsudoers.c, tgetpass.c, visudo.c: 20951: free(3) is already void, no need to cast it 20952: [6981e1ebda0f] 20953: 20954: * logging.c, sudo.c, sudo.h: 20955: catch case where cmnd_safe is not set (this should not be possible) 20956: [3e1e3038546c] 20957: 20958: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c, 20959: testsudoers.c, visudo.c: 20960: Stash the "safe" path (ie: the one listed in sudoers) to the command 20961: instead of stashing the struct stat. Should be safer. 20962: [aa2883fcf57e] 20963: 20964: 1999-04-08 Todd C. Miller <Todd.Miller@courtesan.com> 20965: 20966: * INSTALL, Makefile.in, UPGRADE: 20967: notes on updating from an earlier release 20968: [df9fffa4ab2c] 20969: 20970: * CHANGES: 20971: updated 20972: [574f5065d15a] 20973: 20974: 1999-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 20975: 20976: * parse.yacc, sudo.tab.c, sudo.tab.h, sudoers.cat, sudoers.html, 20977: sudoers.man, sudoers.pod: 20978: You can now specifiy a host list instead of just a host or alias. 20979: Ie: user = host1,host2,ALIAS,!host3 my_command now works. 20980: [e3942bb78021] 20981: 20982: * testsudoers.c: 20983: Quiet -Wall 20984: [a3edc8b08c3a] 20985: 20986: * parse.yacc, sudo.tab.c: 20987: Move the push from the beginning of cmndspec to the end. This means 20988: we no longer have to do a push at the end of privilege, just reset 20989: some values. 20990: [8ea66e5860c6] 20991: 20992: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: 20993: runas-lists and NOPASSWD/PASSWD modifiers are now sticky and you can 20994: use "!" most everywhere 20995: [aadae4d1c9d5] 20996: 20997: 1999-04-06 Todd C. Miller <Todd.Miller@courtesan.com> 20998: 20999: * sudoers.pod: 21000: modernize paths and update su example based on sample.sudoers one 21001: [3f6a37e16c83] 21002: 21003: * sample.sudoers: 21004: New runas semantics 21005: [756ee92865b7] 21006: 21007: * CHANGES, Makefile.in, alloc.c, config.h.in, configure, configure.in, 21008: strdup.c, sudo.h: 21009: In estrdup(), do the malloc ourselves so we don't need to rely on 21010: the system strdup(3) which may or may not exist. There is now no 21011: need to provide strdup() for those w/o it. Also, the prototype for 21012: estrdup() was wrong, it returns char * and its param is const. 21013: [5f1f984da8e3] 21014: 21015: * getcwd.c: 21016: $Sudo tag 21017: [e4188a35e68c] 21018: 21019: * check.c: 21020: buf should be prompt; Michael Robokoff <mrobo@networkcs.com> 21021: [2aec87c86cde] 21022: 21023: * CHANGES, TODO, parse.yacc, sudo.tab.c: 21024: It is now possible to use the '!' operator in a runas list as well 21025: as in a Cmnd_Alias, Host_Alias and User_Alias. 21026: [a4fdaabda990] 21027: 21028: * logging.c, sudo.h: 21029: Kill GLOBAL_NO_SPW_ENT (not used) and crank GLOBAL_PROBLEM 21030: [73d0376785ae] 21031: 21032: * sudo.h: 21033: Definitions of *_matched were wrong--user top, not top-2 as 21034: subscript. 21035: [5f8350a57362] 21036: 21037: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h, sudo.tab.c: 21038: Add VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a 21039: command but the NOPASSWD flag was set. Make runasspec, runaslist, 21040: runasuser, and nopasswd typeless in parse.yacc Add support for '!' 21041: in the runas list Fix double printing of '%' and '+' for groups and 21042: netgroups respectively Add *_matched macros (no need for local stack 21043: variable). Should only be used directly after a pop (since top must 21044: be >= 2). 21045: [392b1400c4e6] 21046: 21047: * aclocal.m4, configure.in: 21048: Add copyright, somewhat silly 21049: [55c2cdd82dca] 21050: 21051: 1999-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 21052: 21053: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c, check_sia.c, 21054: compat.h, config.h.in, configure, configure.in, dce_pwent.c, 21055: emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h, 21056: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c, 21057: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, 21058: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h, 21059: sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat, sudoers.man, 21060: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, 21061: visudo.man: 21062: Crank version to 1.6 and combine copyright statements 21063: [0e1c791658ae] 21064: 21065: * sample.sudoers: 21066: Use ! not ^ to do negation 21067: [1480a0761730] 21068: 21069: * lex.yy.c, sudo.tab.c: 21070: regen 21071: [89ca5a46684b] 21072: 21073: * parse.lex, parse.yacc: 21074: Make runas and NOPASSWD tags persistent across entris in a command 21075: list. Add a PASSWD tag to reverse NOPASSWD. When you override a 21076: runas or *PASSWD tag the value given becomes the new default for the 21077: rest of the command list. 21078: [f1bbb4066542] 21079: 21080: 1999-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 21081: 21082: * CHANGES, RUNSON: 21083: update for 1.5.9 21084: [a1ae9d4a7d54] [SUDO_1_5_9] 21085: 21086: * visudo.c: 21087: Shift return value of system(3) by 8 to get real exit value and if 21088: it is not 1 or 0 print the retval along with the error message. 21089: [c1ff50d743fb] 21090: 21091: 1999-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 21092: 21093: * Makefile.in: 21094: testsudoers needs LIBOBJS too 21095: [972571b4e4bf] 21096: 21097: * parse.c, parse.yacc, sudo.tab.c: 21098: Fix another parser bug. For a sudoers entry like this: millert 21099: ALL=/bin/ls,(daemon) !/bin/ls sudo would not allow millert to run ls 21100: as root. 21101: [51968e1eb33d] 21102: 21103: * CHANGES: 21104: new change 21105: [271c6110bb62] 21106: 21107: * parse.yacc, sudo.tab.c: 21108: Save entries that match a ! command on the matching stack too 21109: [5afb5107116c] 21110: 21111: * sudo.c: 21112: Make sudo's usage info better when mutually exclusive args are given 21113: and don't rely on argument order to detect this; nick@zeta.org.au 21114: [2422753c88fd] 21115: 21116: 1999-03-29 Todd C. Miller <Todd.Miller@courtesan.com> 21117: 21118: * CHANGES, Makefile.in, RUNSON: 21119: updates from CU 21120: [b37381e3dafb] 21121: 21122: * Makefile.in: 21123: use gzip 21124: [94a64e52a166] 21125: 21126: * parse.yacc, sudo.tab.c: 21127: Fix off by one error introduced in *alloc changes 21128: [95ede581153a] 21129: 21130: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c, 21131: check_sia.c, compat.h, config.h.in, configure, configure.in, 21132: dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c, 21133: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 21134: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc, 21135: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, 21136: sudo.h, sudo.man, sudo.tab.c, sudo_setenv.c, sudoers.cat, 21137: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h, 21138: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: 21139: ++version 21140: [c6d88f024e37] 21141: 21142: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c, 21143: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc, 21144: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo.tab.c, 21145: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: 21146: Use emalloc/erealloc/estrdup 21147: [44221d97361a] 21148: 21149: * alloc.c: 21150: error checking memory allocation routines 21151: [5f8c1e7bbc71] 21152: 21153: * parse.yacc, sudo.tab.c: 21154: Still not right, this fixes it for real 21155: [ad553b6f5339] 21156: 21157: * parse.yacc, sudo.tab.c: 21158: Fix for previous commit 21159: [4d6f989f9bf2] 21160: 21161: * CHANGES, INSTALL, parse.yacc: 21162: Fix a parser bug that was exposed when mixing different runas specs 21163: and ! commands. For example: millert ALL=(daemon) 21164: /usr/bin/whoami,!/bin/ls would allow millert to run whoami as root 21165: as well as daemon when it should just allow daemon. The problem was 21166: that comma-separated commands in a list shared the same entry on the 21167: matching stack. Now they get their own entry iff there is a full 21168: match. It may be better to just make the runas spec persistent 21169: across all commands in a list like the user and host entries of the 21170: matching stack. However, since that is a fairly major change it 21171: should gets its own minor rev increase. 21172: [c4b939cdcc8e] 21173: 21174: 1999-03-28 Todd C. Miller <Todd.Miller@courtesan.com> 21175: 21176: * check.c, config.h.in: 21177: Simplify PAM code and fix a PAM-related warning on Linux 21178: [2468399523b6] 21179: 21180: 1999-03-26 Todd C. Miller <Todd.Miller@courtesan.com> 21181: 21182: * CHANGES: 21183: updates 21184: [29d4a997769c] 21185: 21186: * sample.sudoers: 21187: better su entry 21188: [76d8285a72ba] 21189: 21190: * configure: 21191: regen 21192: [b7450cc6975d] 21193: 21194: * check.c, configure.in: 21195: new pam code that works on solaris, should work on linux too; 21196: aelberg@home.com 21197: [84c16c0ff259] 21198: 21199: 1999-03-19 Todd C. Miller <Todd.Miller@courtesan.com> 21200: 21201: * RUNSON: 21202: more entries 21203: [b6bef8660759] 21204: 21205: * config.h.in: 21206: only include strings.h if there is no string.h 21207: [b66054a32b00] 21208: 21209: 1999-03-17 Todd C. Miller <Todd.Miller@courtesan.com> 21210: 21211: * config.guess: 21212: Sinix is now being called ReliantUNIX; bjjackso@us.oracle.com 21213: [c086d2fe63af] 21214: 21215: 1999-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 21216: 21217: * sudo.c: 21218: shost must be set before log functions are called #ifdef HOST_IN_LOG 21219: [d49a7944358f] 21220: 21221: 1999-03-07 Todd C. Miller <Todd.Miller@courtesan.com> 21222: 21223: * CHANGES, lex.yy.c, parse.lex: 21224: Fix a bug wrt quoting characters in command args. Stop processing 21225: an arg when you hit a backslash so the quoted-character detection 21226: can catch it. 21227: [2281438d7f41] 21228: 21229: 1999-02-26 Todd C. Miller <Todd.Miller@courtesan.com> 21230: 21231: * interfaces.c: 21232: include sys/time.h; aparently AIX needs it. ppz@cdu.elektra.ru 21233: [31118a9e9916] 21234: 21235: 1999-02-24 Todd C. Miller <Todd.Miller@courtesan.com> 21236: 21237: * configure, configure.in: 21238: add missing case statement so --without-sendmail works 21239: [ca25614f7dd9] 21240: 21241: 1999-02-23 Todd C. Miller <Todd.Miller@courtesan.com> 21242: 21243: * CHANGES: 21244: more 21245: [4d70e44f7f93] 21246: 21247: 1999-02-22 Todd C. Miller <Todd.Miller@courtesan.com> 21248: 21249: * configure, configure.in: 21250: only search for -lsun in irix <= 4.x 21251: [e604238317b1] 21252: 21253: * configure, configure.in: 21254: back out last configure.in change now that I've hacked autoconf to 21255: fix the real problem and add a missing newline 21256: [2dabf59a79b5] 21257: 21258: * CHANGES: 21259: updated 21260: [bb35d526552f] 21261: 21262: * getcwd.c: 21263: add def of dirfd() for those without it 21264: [95f0173d8441] 21265: 21266: * configure, configure.in: 21267: When falling back to checking for socket() when linking with 21268: "-lsocket -lnsl" check for main() instead since autoconf has already 21269: cached the results of checking for socket() in -lsocket. This is 21270: really an autoconf bug as it should use the extra libs as part of 21271: the cache variable name. 21272: [a845f8b710ad] 21273: 21274: * configure.in: 21275: typo 21276: [a7d62f62a478] 21277: 21278: 1999-02-21 Todd C. Miller <Todd.Miller@courtesan.com> 21279: 21280: * configure.in: 21281: fix occurrence of $with_timeout that should be 21282: $with_password_timeout; Michael.Neef@neuroinformatik.ruhr-uni- 21283: bochum.de 21284: [8c4da2cf73d1] 21285: 21286: 1999-02-17 Todd C. Miller <Todd.Miller@courtesan.com> 21287: 21288: * sudo.cat, sudo.html, sudo.man, sudo.pod: 21289: fix grammar; espie@openbsd.org 21290: [7031d9dfbc3e] [SUDO_1_5_8] 21291: 21292: 1999-02-11 Todd C. Miller <Todd.Miller@courtesan.com> 21293: 21294: * parse.yacc, sudo.c, testsudoers.c: 21295: add cast for strdup in places it does not have it 21296: [7ce4478d3b0f] 21297: 21298: 1999-02-09 Todd C. Miller <Todd.Miller@courtesan.com> 21299: 21300: * configure, configure.in: 21301: define for_BSD_TYPES irix 21302: [858337ff4af8] 21303: 21304: 1999-02-07 Todd C. Miller <Todd.Miller@courtesan.com> 21305: 21306: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: 21307: Make it clear that it is the user's password, not root's, that we 21308: want. 21309: [ae0f51b35ee4] 21310: 21311: * check.c, sudo.h: 21312: If the user enters an empty password and really has no password, 21313: accept the empty password they entered. Perviously, they could 21314: enter anything 21315: *but* an empty password. Also, add GETPASS macro that calls either 21316: tgetpass() or getpass() depending on how sudo was configured. 21317: Problem noted by jdg@maths.qmw.ac.uk 21318: [2fde21ce94c1] 21319: 21320: 1999-02-03 Todd C. Miller <Todd.Miller@courtesan.com> 21321: 21322: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in, 21323: dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, goodpath.c, 21324: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 21325: interfaces.c, logging.c, parse.c, parse.lex, parse.yacc, 21326: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, 21327: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h, 21328: visudo.c: 21329: add explicate copyright 21330: [d3b4449834a5] 21331: 21332: * CHANGES: 21333: mention -lsocket, -lnsl configure changes 21334: [9140af4ad8ae] 21335: 21336: 1999-02-02 Todd C. Miller <Todd.Miller@courtesan.com> 21337: 21338: * sudo.c: 21339: Don't clobber errno after calling check_sudoers(). 21340: [59bd581b2654] 21341: 21342: 1999-02-01 Todd C. Miller <Todd.Miller@courtesan.com> 21343: 21344: * configure, configure.in: 21345: When linking with both -lsocket and -lnsl be sure to do so in that 21346: order. Also, when we can't find socket() or inet_addr() and have to 21347: try linking with both libs, issue a warning. 21348: [0ee547163067] 21349: 21350: * sudo.cat, sudo.man, sudo.pod: 21351: clarify bad timestamp and fmt 21352: [70e42cf56c75] 21353: 21354: 1999-01-23 Todd C. Miller <Todd.Miller@courtesan.com> 21355: 21356: * INSTALL, RUNSON: 21357: be clear that pam is linux-only and add a RUNSON entry 21358: [7fdeab875e0d] 21359: 21360: 1999-01-22 Todd C. Miller <Todd.Miller@courtesan.com> 21361: 21362: * CHANGES, INSTALL, configure, configure.in: 21363: fix and correctly document --with-umask; problem noted by 21364: adap@adap.org 21365: [11cd0481d63a] 21366: 21367: 1999-01-20 Todd C. Miller <Todd.Miller@courtesan.com> 21368: 21369: * configure, configure.in: 21370: only use /usr/{man,catman}/local to store man pages if suer didn't 21371: override prefix or mandir 21372: [781ad2cbe9be] 21373: 21374: * INSTALL, configure, configure.in: 21375: fix typo, make --with-SecurID take an arg 21376: [026a9b4014fc] 21377: 21378: 1999-01-19 Todd C. Miller <Todd.Miller@courtesan.com> 21379: 21380: * RUNSON: 21381: updates from users 21382: [2286982b31e6] 21383: 21384: * CHANGES, INSTALL, check.c, configure, configure.in: 21385: FWTK 'authsrv' support from Kevin Kadow <kadow@MSG.NET> 21386: [23aa4e5c6b02] 21387: 21388: * configure, configure.in: 21389: better fix for the problem of unresolved symbols in -lnsl or 21390: -lsocket 21391: [82fe70fc287f] 21392: 21393: * configure, configure.in: 21394: when checking for functions in -lnsl and -lsocket link with both of 21395: them to avoid unresolved symbols on some weirdo systems 21396: [1734a591808e] 21397: 21398: 1999-01-18 Todd C. Miller <Todd.Miller@courtesan.com> 21399: 21400: * BUGS, CHANGES, RUNSON, TODO: 21401: old changes that didn't make it into RCS before the RCS->CVS switch 21402: [846eb2b8f9aa] 21403: 21404: 1999-01-17 Todd C. Miller <Todd.Miller@courtesan.com> 21405: 21406: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in, 21407: configure.in, dce_pwent.c, emul/search.h, emul/utime.h, find_path.c, 21408: getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, 21409: ins_goons.h, insults.h, interfaces.c, lex.yy.c, logging.c, 21410: lsearch.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c, 21411: secureware.c, strdup.c, sudo.c, sudo.pod, sudo_setenv.c, 21412: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, visudo.c, 21413: visudo.pod: 21414: add sudo tags 21415: [962f81eaa5ab] 21416: 21417: * sudo.h: 21418: testing Sudo tag 21419: [e84cbc521129] 21420: 21421: * version.h: 21422: testing Sudo tag 21423: [a8c3a3998b88] 21424: 21425: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c, compat.h, 21426: config.h.in, configure, configure.in, dce_pwent.c, emul/utime.h, 21427: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h, 21428: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c, 21429: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c, 21430: secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h, sudo.man, 21431: sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c, tgetpass.c, 21432: utime.c, version.h, visudo.c, visudo.cat, visudo.man: 21433: crank version and regen files 21434: [23eacf00a1a4] 21435: 21436: * Makefile.in: 21437: kill rcs goop in update_version and fix now that version is a const 21438: [e6e50bd8d1e1] 21439: 21440: * INSTALL, check.c, config.h.in, configure, configure.in, logging.c, 21441: sudo.c, sudo.h, sudo.pod: 21442: kerb5 support from fcusack@iconnet.net 21443: [8134027986e2] 21444: 21445: * realpath.c, sudo_realpath.c: 21446: we no longer use realpath 21447: [0f5f64abc646] 21448: 21449: * qualify.c: 21450: replaced by find_path.c 21451: [9e32a87e09c4] 21452: 21453: * options.h: 21454: all options are now configure flags 21455: [ee6bd9610102] 21456: 21457: * lex.yy.c: 21458: regen 21459: [bdbf8a18161f] 21460: 21461: * getwd.c: 21462: superceded by getcwd.c 21463: [1e54ee0990b4] 21464: 21465: * getpass.c: 21466: superceded by tgetpass.c 21467: [4e0d1edc30e3] 21468: 21469: * SUPPORTED: 21470: superceded by RUNSON 21471: [854c5a21cb53] 21472: 21473: * OPTIONS: 21474: No longer used now that we have configure options for everything. 21475: [9b1ae1c89259] 21476: 21477: * configure: 21478: regen based on configure.in 21479: [3a4d73936973] 21480: 21481: * sudo.cat, sudo.html, sudo.man, sudoers.cat, sudoers.html, 21482: sudoers.man, visudo.cat, visudo.html, visudo.man: 21483: regen based on sudo.pod, sudoers.pod, and visudo.pod 21484: [c267beb90778] 21485: 21486: 1998-12-11 Todd C. Miller <Todd.Miller@courtesan.com> 21487: 21488: * check.c: 21489: fix tty tickets in remove_timestamp (didn't use ':') 21490: [fd964a74a32b] 21491: 21492: 1998-12-07 Todd C. Miller <Todd.Miller@courtesan.com> 21493: 21494: * interfaces.c: 21495: close sock when we are done with it 21496: [95de0380f8a4] 21497: 21498: 1998-11-28 Todd C. Miller <Todd.Miller@courtesan.com> 21499: 21500: * parse.yacc: 21501: never say "error on line -1" 21502: [361db1491121] 21503: 21504: 1998-11-24 Todd C. Miller <Todd.Miller@courtesan.com> 21505: 21506: * configure.in: 21507: check for -lnsl before -lsocket 21508: [8e966d6bbcb5] 21509: 21510: * configure.in: 21511: quote '[', ']' used in ranges correctly 21512: [fa4f9c6ff651] 21513: 21514: 1998-11-21 Todd C. Miller <Todd.Miller@courtesan.com> 21515: 21516: * config.h.in: 21517: add missing NO_ROOT_SUDO noted by drno@tsd.edu 21518: [c969f25d1667] 21519: 21520: 1998-11-20 Todd C. Miller <Todd.Miller@courtesan.com> 21521: 21522: * version.h: 21523: 1.5.7 21524: [7a22de0bc148] 21525: 21526: * INSTALL: 21527: more info for 1.5.7 21528: [30ad9e784799] 21529: 21530: * README: 21531: update for 1.5.7 21532: [cd03a0a27cd2] 21533: 21534: * parse.yacc: 21535: make increases of cm_list_size and ga_list_size be similar to 21536: increases of stacksize (ie: >= not > in initial compare). 21537: [6bd450a896c7] 21538: 21539: * parse.yacc: 21540: when we get a syntax error, report it for the previous line since 21541: that's generally where the error occurred. 21542: [c4ac84058f0b] 21543: 21544: 1998-11-18 Todd C. Miller <Todd.Miller@courtesan.com> 21545: 21546: * config.h.in, configure.in, interfaces.c: 21547: add back check for sys/sockio.h but only use it if SIOCGIFCONF is 21548: not defined 21549: [d197f31fd1e4] [SUDO_1_5_7] 21550: 21551: * config.h.in: 21552: define BSD_COMP for svr4 21553: [87ac1147ff79] 21554: 21555: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c, 21556: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex, 21557: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c, 21558: testsudoers.c, tgetpass.c, utime.c, visudo.c: 21559: more -Wall 21560: [d98e2d32db2a] 21561: 21562: * configure.in: 21563: kill check for sockio,h 21564: [4399779014c1] 21565: 21566: * config.h.in: 21567: no more HAVE_SYS_SOCKIO_H 21568: [67484528e347] 21569: 21570: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c, 21571: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c, parse.lex, 21572: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo_setenv.c, 21573: testsudoers.c, tgetpass.c, utime.c, visudo.c: 21574: -Wall 21575: [2b7e83976788] 21576: 21577: 1998-11-16 Todd C. Miller <Todd.Miller@courtesan.com> 21578: 21579: * sudo.c: 21580: add missing inform_user() 21581: [8689528c6d55] 21582: 21583: 1998-11-14 Todd C. Miller <Todd.Miller@courtesan.com> 21584: 21585: * find_path.c: 21586: return NOT_FOUND if given fully qualified path and it does not exist 21587: previously it would perror(ENOENT) which bypasses the option to not 21588: leak path info 21589: [ccbc3d0130ae] 21590: 21591: * configure.in: 21592: for kerb5, check for -lkerb4, fall back on -lkrb for kerb, check for 21593: -ldes 21594: [c77d3b484ece] 21595: 21596: 1998-11-13 Todd C. Miller <Todd.Miller@courtesan.com> 21597: 21598: * INSTALL: 21599: tty tickets are user:tty now 21600: [a53a303a614d] 21601: 21602: * check.c: 21603: when using tty tickets make it user:tty not user.tty as a username 21604: could have a '.' in it 21605: [3160b3f5c890] 21606: 21607: 1998-11-10 Todd C. Miller <Todd.Miller@courtesan.com> 21608: 21609: * sudo.c: 21610: add "ignoring foo found in ." for auth successful case 21611: [24257169e0bd] 21612: 21613: 1998-11-09 Todd C. Miller <Todd.Miller@courtesan.com> 21614: 21615: * sudo.c: 21616: add missing printf param 21617: [8c905124f777] 21618: 21619: 1998-11-08 Todd C. Miller <Todd.Miller@courtesan.com> 21620: 21621: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h: 21622: go back to printing "command not found" unless --disable-path-info 21623: specified. Also, tell user when we ignore '.' in their path and it 21624: would have been used but for --with-ignore-dot. 21625: [066e118c11e4] 21626: 21627: * check.c, sudo.c: 21628: Only one space after a colon, not two, in printf's 21629: [38452f4c8007] 21630: 21631: 1998-11-05 Todd C. Miller <Todd.Miller@courtesan.com> 21632: 21633: * sudo.pod: 21634: document setting $USER 21635: [80557fe6aede] 21636: 21637: * check.c: 21638: fix bugs with prompt expansion 21639: [44c4fca5f009] 21640: 21641: * sudo.c: 21642: set $USER for root too 21643: [4b525e1c6269] 21644: 21645: 1998-11-04 Todd C. Miller <Todd.Miller@courtesan.com> 21646: 21647: * getspwuid.c: 21648: typo 21649: [5107446f43e0] 21650: 21651: * configure.in: 21652: HP-UX's iscomsec is in -lsec, not libc 21653: [03c9f700b795] 21654: 21655: * configure.in: 21656: remove some entries in the OS case statement that did nothing 21657: [ea96e7e0f624] 21658: 21659: * TROUBLESHOOTING: 21660: add "cd" section and flush out syslog section 21661: [5107f7363b78] 21662: 21663: * Makefile.in: 21664: no more sudo-lex.yy.c 21665: [ed50826efbbc] 21666: 21667: * check_sia.c: 21668: add custom prompt support 21669: [6a285cea10b7] 21670: 21671: * testsudoers.c: 21672: kill perror("malloc") since we already have a good error messages 21673: pw_ent -> pw for brevity 21674: [eee31052921e] 21675: 21676: * sudo.c: 21677: kill perror("malloc") since we already have a good error messages 21678: pw_ent -> pw for brevity set $USER if -u specified 21679: [9f3753461f8a] 21680: 21681: * parse.yacc: 21682: kill perror("malloc") since we already have a good error messages 21683: [849459088ac3] 21684: 21685: * parse.c: 21686: kill perror("malloc") since we already have a good error messages 21687: pw_ent -> pw for brevity when checking if %group matches, look up 21688: user in password file so that %groups works in a RunAs spec. 21689: [0489b4ecc59a] 21690: 21691: * logging.c: 21692: kill perror("malloc") since we already have a good error messages 21693: [3191a18b3526] 21694: 21695: * check.c, getspwuid.c, interfaces.c: 21696: kill perror("malloc") since we already have a good error messages 21697: pw_ent -> pw for brevity 21698: [7193fdb38cf9] 21699: 21700: 1998-11-03 Todd C. Miller <Todd.Miller@courtesan.com> 21701: 21702: * tgetpass.c: 21703: the prompt is expanded before tgetpass is called 21704: [0f408f508041] 21705: 21706: * sudo.h: 21707: tgetpass now has the same args as getpass again 21708: [b6778cd9d79f] 21709: 21710: * getspwuid.c: 21711: add iscomsec, issecure support 21712: [007be7ec7ae7] 21713: 21714: * check.c: 21715: we now expand any %h or %u in the prompt before passing to tgetpass 21716: [f3db8c9ee387] 21717: 21718: * configure.in: 21719: add check for syslog(3) in -lsocket, -lnsl, -linet 21720: [5a96f902ce00] 21721: 21722: * config.h.in: 21723: add HAVE_ISCOMSEC and HAVE_ISSECURE 21724: [f640b0d4cf05] 21725: 21726: * configure.in: 21727: add check for iscomsec in HP-UX 21728: [b28b249040f0] 21729: 21730: * configure.in: 21731: check for issecure if we have getpwanam on SunOS some options are 21732: incompatible with DUNIX SIA check for dispcrypt on DUNIX 21733: [a49d05d9c913] 21734: 21735: 1998-10-25 Todd C. Miller <Todd.Miller@courtesan.com> 21736: 21737: * config.h.in: 21738: add HAVE_DISPCRYPT 21739: [7376d543d8d6] 21740: 21741: * secureware.c: 21742: add back support for non-dispcrypt based checking for older DUNIX 21743: [977b98e936be] 21744: 21745: * INSTALL: 21746: sia changes 21747: [c5387c06e30f] 21748: 21749: * configure.in: 21750: SIA becomes the default on Digital UNIX now havbe --disable-sia to 21751: turn it off... 21752: [3b647558ea13] 21753: 21754: * check.c: 21755: move local includes after system ones 21756: [b2abad4c4aef] 21757: 21758: 1998-10-24 Todd C. Miller <Todd.Miller@courtesan.com> 21759: 21760: * check.c, check_sia.c, sudo.h: 21761: add pass_warn() which prints out INCORRECT_PASSWORD or an insult to 21762: stderr 21763: [547cbf299661] 21764: 21765: * check_sia.c: 21766: fix while loop in sia_attempt_auth() that checks the password. Only 21767: the first iteration was working. 21768: [1886fd1ac831] 21769: 21770: 1998-10-22 Todd C. Miller <Todd.Miller@courtesan.com> 21771: 21772: * aclocal.m4: 21773: don't trust UID_MAX or MAXUID 21774: [2aeddb1654d8] 21775: 21776: * configure.in: 21777: fix two pastos 21778: [c18f0a10b75d] 21779: 21780: * configure.in: 21781: fix typo 21782: [1eb3190ef12d] 21783: 21784: * getspwuid.c, secureware.c: 21785: init crypt_type to INT_MAX since it is legal to be negative in DUNX 21786: 5.0 21787: [cefbde04822d] 21788: 21789: * configure.in: 21790: for secureware on dunix, use -lsecurity -ldb -laud -lm but check for 21791: -ldb since DUNX < 4.0 lacks it 21792: [e6b11d971068] 21793: 21794: 1998-10-21 Todd C. Miller <Todd.Miller@courtesan.com> 21795: 21796: * check.c, compat.h, config.h.in, configure.in, getspwuid.c, 21797: secureware.c, sudo.c, tgetpass.c: 21798: getprpwuid is broken in HP-UX 10.20 at least (it sleeps for 2 21799: minutes if the shadow files don't exist). 21800: [2f297d095004] 21801: 21802: 1998-10-20 Todd C. Miller <Todd.Miller@courtesan.com> 21803: 21804: * INSTALL: 21805: updated --with-editor blurb 21806: [77d8a3ea7328] 21807: 21808: * TROUBLESHOOTING: 21809: tell how to put sudoers in a different dir 21810: [456cd20eb1d0] 21811: 21812: * configure.in: 21813: add missing quotes around $with_editor 21814: [22881748ab1b] 21815: 21816: * configure.in: 21817: typo in --with-editor bits 21818: [ab6964580681] 21819: 21820: * INSTALL: 21821: I don't expect it to work on Solaris 21822: [1c2fceaaf56e] 21823: 21824: * check.c: 21825: add back security/pam_misc.h 21826: [6ffd30033c1e] 21827: 21828: 1998-10-19 Todd C. Miller <Todd.Miller@courtesan.com> 21829: 21830: * INSTALL: 21831: remove dunix note since configure checks for this now 21832: [e9904512b8e8] 21833: 21834: * configure.in: 21835: add check for broken dunix prot.h (4.0 < 4.0D is bad) 21836: [8a4c1e6aef3b] 21837: 21838: * getspwuid.c, secureware.c, tgetpass.c: 21839: new dunix shadow code, use dispcrypt(3) 21840: [1b936bc7268c] 21841: 21842: * config.h.in: 21843: add HAVE_INITPRIVS 21844: [4369f4c4f914] 21845: 21846: * sudo.c: 21847: call initprivs() if we have it for getprpwuid later on 21848: [11cf5915d826] 21849: 21850: * Makefile.in: 21851: clean pathnames.h too 21852: [5f1df3262613] 21853: 21854: * configure.in: 21855: quote "Sorry, try again." with [] since it has a comma in it set 21856: LIBS when we add stuff to SUDO_LIBS set SECUREWARE when we find 21857: getprpwuid() so we can check for bigcrypt, set_auth_parameters, and 21858: initprivs later. 21859: [e226b0a3f250] 21860: 21861: * INSTALL: 21862: update Digital UNIX note about acl.h 21863: [80132b71d73a] 21864: 21865: * INSTALL: 21866: add --with-sia 21867: --without-root-sudo -> --disable-root-sudo some reordering 21868: [198386358818] 21869: 21870: * secureware.c: 21871: add whitespace 21872: [4aadaf1a54b0] 21873: 21874: * Makefile.in, check.c, config.h.in, configure.in, logging.c, sudo.h: 21875: add SIA support 21876: [fa3ddbb9cc51] 21877: 21878: * check_sia.c: 21879: Initial revision 21880: [2968551d40e4] 21881: 21882: 1998-10-18 Todd C. Miller <Todd.Miller@courtesan.com> 21883: 21884: * configure.in: 21885: when checking for -lsocket, -lnsl, and -linet, check for the 21886: specific functions we need from them. 21887: [8d33e64362a3] 21888: 21889: * config.h.in, sudo.h: 21890: move Syslog_* defs into sudo.h 21891: [03d1774f25c7] 21892: 21893: * Makefile.in, sudo.h: 21894: added check_secureware 21895: [e46e3cbb9a97] 21896: 21897: * configure.in: 21898: finished adding AC_MSG_CHECKING and AC_MSG_RESULT bits 21899: [dbefe1856503] 21900: 21901: * insults.h: 21902: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no other sets 21903: defined. configure now does that for us 21904: [e4520ea0581f] 21905: 21906: * configure.in: 21907: move some --with options around change a bunch of echo's to 21908: AC_MSG_CHECKING, AC_MSG_RESULT pairs 21909: [ffdf6869fdd7] 21910: 21911: * configure.in: 21912: change $with_foo-bar -> $with_foo_bar kill extra " that caused a 21913: syntax error add some echo verbage 21914: [3278c49bf74b] 21915: 21916: 1998-10-17 Todd C. Miller <Todd.Miller@courtesan.com> 21917: 21918: * check.c: 21919: moved SecureWare stuff into secureware.c 21920: [42d3d3ac35dc] 21921: 21922: * secureware.c: 21923: Initial revision 21924: [aa7f72a249cf] 21925: 21926: * INSTALL: 21927: update url to solaris gcc bins 21928: [36a3eb668777] 21929: 21930: * INSTALL: 21931: change option formatter and flesh out someentries 21932: [6fbd1db4a8ad] 21933: 21934: * TROUBLESHOOTING, sudo.pod, visudo.pod: 21935: environmental variable -> environment variable 21936: [6f14d708e32d] 21937: 21938: * BUGS: 21939: everything is now done via configure 21940: [c217858f58ab] 21941: 21942: * README: 21943: prev rev was 1.5.6 21944: [7b4177103c35] 21945: 21946: * Makefile.in: 21947: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID correctly 21948: [31c6b0a5e0e2] 21949: 21950: * config.h.in: 21951: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from the Makefile 21952: [d406a1ef6d25] 21953: 21954: * Makefile.in: 21955: merge OSDEFS and OPTIONS into DEFS get sudoers_uid, sudoers_gid, 21956: sudoers_mode from configure 21957: [1c509500655a] 21958: 21959: * configure.in: 21960: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get substituted into 21961: the Makefile, not config.h 21962: [d4482f1492fe] 21963: 21964: * INSTALL: 21965: document all --with/--enable options 21966: [22d81b312d7f] 21967: 21968: 1998-10-15 Todd C. Miller <Todd.Miller@courtesan.com> 21969: 21970: * insults.h: 21971: options.h is no more 21972: [560946a33f7f] 21973: 21974: * config.h.in: 21975: assimilated options.h 21976: [dd8ce74613c1] 21977: 21978: * configure.in: 21979: moved options from options.h to configure 21980: [d39662f71b4e] 21981: 21982: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c, 21983: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod, 21984: sudo_setenv.c, visudo.c: 21985: no more options.h 21986: [43924bf0858d] 21987: 21988: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: 21989: remove references to options.h 21990: [ef3474295395] 21991: 21992: * dce_pwent.c, interfaces.c, sudo.c: 21993: kill sys/time.h 21994: [4d833f0034e4] 21995: 21996: * tgetpass.c: 21997: if select return < -1 still prompt for pw 21998: [e0009e5c93a2] 21999: 22000: * options.h: 22001: convert LOGGING, LOGFAC, MAXLOGFILELEN, IGNORE_DOT_PATH into 22002: configure options 22003: [e60a1e546516] 22004: 22005: * parse.c: 22006: FAST_MATCH is no longer an optino 22007: [c448dbb3464b] 22008: 22009: * check.c: 22010: remove_timestamp() if timestamp is preposterous 22011: [70d9a86c6ecd] 22012: 22013: * options.h: 22014: convert more options to --with/--enable 22015: [34646d9b09dc] 22016: 22017: * INSTALL, aclocal.m4: 22018: logfile -> logpath 22019: [42de502bc637] 22020: 22021: * configure.in: 22022: convert more options into --with and --enable 22023: [92d0898c9844] 22024: 22025: * tgetpass.c: 22026: catch EINTR in select and restart 22027: [f045d2f234d7] 22028: 22029: * logging.c: 22030: sys/errno -> errno 22031: [7f0c5beab6f2] 22032: 22033: 1998-09-24 Todd C. Miller <Todd.Miller@courtesan.com> 22034: 22035: * sudo.c: 22036: UMASK -> SUDO_UMASK. 22037: [48f308661514] 22038: 22039: * check.c, logging.c: 22040: time.h, not sys/time.h 22041: [91de049c79e4] 22042: 22043: 1998-09-21 Todd C. Miller <Todd.Miller@courtesan.com> 22044: 22045: * logging.c: 22046: MAILER -> _PATH_SENDMAIL 22047: [df65d6896639] 22048: 22049: * INSTALL, configure.in: 22050: no more --with-C2, now it is --disable-shadow 22051: [18bfcab3b9ab] 22052: 22053: * aclocal.m4, check.c, compat.h, config.h.in, configure.in, 22054: getspwuid.c, sudo.c, tgetpass.c: 22055: new shadow password scheme. Always include shadow support if the 22056: platform supports it and the user did not disable it via configure 22057: [2135d93bb4a9] 22058: 22059: 1998-09-20 Todd C. Miller <Todd.Miller@courtesan.com> 22060: 22061: * configure.in: 22062: --with-getpass -> --{enable,disable}-tgetpass 22063: [451b33fdd4c7] 22064: 22065: * Makefile.in: 22066: pathnames.h -> pathnames.h.in 22067: [b109022eca69] 22068: 22069: * check.c: 22070: fix version string 22071: [761b25c314ea] 22072: 22073: * check.c: 22074: move pam_conv to be static to auth function remove pam_misc.h 22075: (solaris doesn't have one) 22076: [a682e4da987a] 22077: 22078: * aclocal.m4: 22079: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill SUDO_PROG_PWD 22080: [e6005d0599b5] 22081: 22082: * configure.in: 22083: munge pathnames.h.in -> pathnames.h kill SUDO_PROG_PWD 22084: [24c0ac2155ef] 22085: 22086: * pathnames.h.in: 22087: convert to pathnames.h.in 22088: [013bddf7f684] 22089: 22090: 1998-09-19 Todd C. Miller <Todd.Miller@courtesan.com> 22091: 22092: * configure.in: 22093: fix typo in sysv4 matching case /. 22094: [2994c4f88cf5] 22095: 22096: 1998-09-18 Todd C. Miller <Todd.Miller@courtesan.com> 22097: 22098: * check.c: 22099: pam stuff needs to run as root, not user, for shadow passwords 22100: [d94ff75de503] 22101: 22102: 1998-09-17 Todd C. Miller <Todd.Miller@courtesan.com> 22103: 22104: * BUGS, INSTALL, README, configure.in: 22105: updated version 22106: [775adc7de7ac] 22107: 22108: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c, 22109: emul/utime.h, find_path.c, getspwuid.c, goodpath.c, ins_2001.h, 22110: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c, 22111: logging.c, options.h, parse.c, parse.lex, parse.yacc, 22112: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 22113: testsudoers.c, tgetpass.c, utime.c, visudo.c: 22114: updated version 22115: [5ca599fb6b93] 22116: 22117: * check.c: 22118: user version.h for long message 22119: [47a52ac7e542] 22120: 22121: * check.c: 22122: this is version 1.5.6 22123: [8451ac79eee2] 22124: 22125: 1998-09-16 Todd C. Miller <Todd.Miller@courtesan.com> 22126: 22127: * Makefile.in: 22128: remove errant backslash 22129: [0222a8a650ff] 22130: 22131: 1998-09-15 Todd C. Miller <Todd.Miller@courtesan.com> 22132: 22133: * options.h, parse.yacc, pathnames.h.in: 22134: fix version string 22135: [fdee73255d64] [SUDO_1_5_6] 22136: 22137: * BUGS, CHANGES, TODO: 22138: updtaed for 1.5.6 22139: [752443bf7f26] 22140: 22141: * RUNSON: 22142: updated for 1.5.6 22143: [0f878123fe6a] 22144: 22145: 1998-09-14 Todd C. Miller <Todd.Miller@courtesan.com> 22146: 22147: * interfaces.c: 22148: kill unused localhost_mask var copy if name to ifr_tmp after we zero 22149: it 22150: [8e89c364cef2] 22151: 22152: 1998-09-13 Todd C. Miller <Todd.Miller@courtesan.com> 22153: 22154: * INSTALL: 22155: Better description of new vs. old sudoers modes fix some typos 22156: better description of /usr/ucb/cc gotchas on slowaris 22157: [c00b2a6fc1e8] 22158: 22159: * Makefile.in: 22160: add sample.pam 22161: [ec7f6cc19b00] 22162: 22163: * sudo.c: 22164: set NewArgv[0] to user_shell, not basename(user_shell) 22165: [1e907cbc9f7b] 22166: 22167: 1998-09-12 Todd C. Miller <Todd.Miller@courtesan.com> 22168: 22169: * README: 22170: mention TROUBLESHOOTING more fix some typos 22171: [2c2e6907d4a4] 22172: 22173: * configure.in: 22174: move --enable/--disable to be after --with 22175: [9b30097f76c1] 22176: 22177: * INSTALL: 22178: document --enable/--disable 22179: [c522362e38a8] 22180: 22181: * INSTALL: 22182: document --with-pam 22183: [7e38932c78ac] 22184: 22185: 1998-09-11 Todd C. Miller <Todd.Miller@courtesan.com> 22186: 22187: * configure.in: 22188: Add message for pam users 22189: [d224f277e3cd] 22190: 22191: * sample.pam: 22192: Initial revision 22193: [3a84d7045f54] 22194: 22195: * config.h.in: 22196: fix HAVE_PAM 22197: [2f0f303ebd88] 22198: 22199: * check.c, config.h.in, configure.in: 22200: pam support, from Gary Calvin <GCalvin@kenwoodusa.com> 22201: [ea3e0a72d707] 22202: 22203: 1998-09-10 Todd C. Miller <Todd.Miller@courtesan.com> 22204: 22205: * config.h.in: 22206: add HOST_IN_LOG and WRAP_LOG 22207: [822c36eeb6a8] 22208: 22209: * logging.c: 22210: add WRAP_LOG and HOST_IN_LOG 22211: [3cf6052bd27e] 22212: 22213: * configure.in: 22214: add --enable-log-host and --enable-log-wrap 22215: [c968cc12b353] 22216: 22217: * aclocal.m4: 22218: use AC_DEFINE_UNQUOTED for --with-logfile and --with-timedir 22219: [915fef7e11a1] 22220: 22221: 1998-09-09 Todd C. Miller <Todd.Miller@courtesan.com> 22222: 22223: * compat.h: 22224: add howmany macro 22225: [9107a057a7c8] 22226: 22227: * tgetpass.c: 22228: include sys/param.h to get howmany macro 22229: [7e908b5e1f32] 22230: 22231: 1998-09-08 Todd C. Miller <Todd.Miller@courtesan.com> 22232: 22233: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: 22234: add RUNAS_DEFAULT 22235: [1e76398ea3fd] 22236: 22237: 1998-09-07 Todd C. Miller <Todd.Miller@courtesan.com> 22238: 22239: * fnmatch.c: 22240: bring in stdio.h for NULL 22241: [69c016610cbb] 22242: 22243: * aclocal.m4: 22244: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh 22245: [15ab2972f8d0] 22246: 22247: * sudo.c: 22248: use HAVE_SET_AUTH_PARAMETERS 22249: [8abfdc8c80f7] 22250: 22251: * config.h.in: 22252: add HAVE_SET_AUTH_PARAMETERS 22253: [673a5ebd5539] 22254: 22255: * configure.in: 22256: add *-*-hiuxmpp* add test for set_auth_parameters() if secureware 22257: [a401f5a7469a] 22258: 22259: * config.sub: 22260: add support for HI-UX/MPP SR220001 02-03 0 SR2201 22261: [cb657b7acaae] 22262: 22263: * interfaces.c: 22264: initialize previfname 22265: [26a1902f56dc] 22266: 22267: * interfaces.c: 22268: Don't use SIOCGIFADDR, we don't need it Use SIOCGIFFLAGS if we have 22269: it check ifr_flags against IFF_UP and IFF_LOOPBACK instead of 22270: kludging it 22271: [fa5c890c313b] 22272: 22273: * configure.in: 22274: typo 22275: [bff579fbe95c] 22276: 22277: * Makefile.in: 22278: don't need special build line for sudo.tab.o 22279: [10c0a0a912e4] 22280: 22281: * Makefile.in: 22282: don't clean sudo.tab.[ch] 22283: [c40d5968efbb] 22284: 22285: * sudo.c: 22286: Sudo should prompt for a password before telling the user that a 22287: command could not be found. 22288: [d718c85a0047] 22289: 22290: * BUGS: 22291: for 1.5.6 22292: [0cc1fe5b9129] 22293: 22294: * INSTALL, README: 22295: no longer require yacc 22296: [d9096fc5b8b6] 22297: 22298: * Makefile.in: 22299: typo 22300: [70feb1aefbd5] 22301: 22302: * Makefile.in: 22303: y.tab -> sudo.tab include pre-yacc'd parse.yacc 22304: [cc802025fd44] 22305: 22306: * parse.lex: 22307: include sudo.tab.h, not y.tab.h don't break out of command args if 22308: you get a '=' 22309: [728ad26dbda5] 22310: 22311: * insults.h: 22312: fix version , 22313: [242bbce1b2d4] 22314: 22315: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h: 22316: fix version 22317: [2bb9086fea1e] 22318: 22319: * compat.h: 22320: fix version 22321: [7e634d498ce6] 22322: 22323: * getcwd.c: 22324: getcwd(3) from OpenBSD for those without it. 22325: [6c68d0df8f6c] 22326: 22327: * sudo.h: 22328: HAVE_GETWD -> HAVE_GETCWD 22329: [2ad1e64d60c0] 22330: 22331: * configure.in: 22332: pretend sunos doesn't have getcwd(3) since it opens a pipe to 22333: getpwd! 22334: [677992ba5a6a] 22335: 22336: * parse.c: 22337: use NAMLEN() macro 22338: [8f5685aa3165] 22339: 22340: * fnmatch.c: 22341: remove duplicate include of string.h 22342: [6024f3051ac3] 22343: 22344: * configure.in: 22345: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T 22346: [3d82a9c22cc2] 22347: 22348: * aclocal.m4: 22349: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T 22350: [53fbc47282f9] 22351: 22352: * config.h.in: 22353: add dev_t and ino_t 22354: [5929bb0c7e1a] 22355: 22356: 1998-07-28 Todd C. Miller <Todd.Miller@courtesan.com> 22357: 22358: * check.c: 22359: fix OTP_ONLY for opie 22360: [7edcfa78f2ec] 22361: 22362: 1998-06-24 Todd C. Miller <Todd.Miller@courtesan.com> 22363: 22364: * testsudoers.c, tgetpass.c: 22365: include stdlib.h for malloc proto 22366: [c9f4b99a2fe9] 22367: 22368: 1998-05-19 Todd C. Miller <Todd.Miller@courtesan.com> 22369: 22370: * Makefile.in: 22371: make update_version saner 22372: [d522f93ee04a] 22373: 22374: * config.h.in: 22375: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid() 22376: [c9a2d21dc608] 22377: 22378: * configure.in: 22379: check for waitpid and wait3 or no waitpid 22380: [1f18c3224184] 22381: 22382: * logging.c: 22383: used waitpid or wait3 if we have 'em 22384: [391c3279ee65] 22385: 22386: 1998-05-02 Todd C. Miller <Todd.Miller@courtesan.com> 22387: 22388: * visudo.c: 22389: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel Faigon) 22390: [fbf53b18178f] 22391: 22392: 1998-04-28 Todd C. Miller <Todd.Miller@courtesan.com> 22393: 22394: * configure.in: 22395: don't need to explicately mention -lsocket -lnsl for sequent 22396: [1898dc055352] 22397: 22398: 1998-04-25 Todd C. Miller <Todd.Miller@courtesan.com> 22399: 22400: * configure.in: 22401: dynix should not link with -linet 22402: [278a4b9cfe2a] 22403: 22404: 1998-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 22405: 22406: * INSTALL: 22407: mention that HP-UX doesn't ship with yacc 22408: [bde5147198c0] 22409: 22410: 1998-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 22411: 22412: * check.c: 22413: ignore kerberos if we can't get the local realm 22414: [1e311a091a27] 22415: 22416: 1998-04-06 Todd C. Miller <Todd.Miller@courtesan.com> 22417: 22418: * BUGS, INSTALL, README, configure.in: 22419: ++version 22420: [499ffc746018] 22421: 22422: * version.h: 22423: ++ 22424: [35ba1ee01bd3] 22425: 22426: * Makefile.in, check.c, config.h.in, dce_pwent.c, emul/utime.h, 22427: find_path.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c, 22428: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c, sudo.h, 22429: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: 22430: updated version 22431: [b4990a513f31] 22432: 22433: * check.c, sudo.h: 22434: fix version 22435: [5710795834e8] 22436: 22437: * getcwd.c: 22438: don't use popen/pclose. Do it inline. 22439: [29e57b0646a4] 22440: 22441: * lsearch.c: 22442: add rcsid 22443: [b2b55c39858d] 22444: 22445: * sudo.c: 22446: typo 22447: [d381ac39ed0f] 22448: 22449: * check.c, compat.h, ins_2001.h, ins_classic.h, ins_csops.h, 22450: ins_goons.h, insults.h, options.h, parse.yacc, pathnames.h.in, 22451: sudo.h: 22452: updated version 22453: [462d6e1a2d75] 22454: 22455: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: 22456: MAX* + 1 -> MAX* 22457: [2c2eeb78d34f] 22458: 22459: * Makefile.in: 22460: getwd.c -> getcwd.c 22461: [7d718c32fc02] 22462: 22463: * config.h.in: 22464: kill HAVE_GETWD 22465: [6ad3d702343f] 22466: 22467: * configure.in: 22468: getcwd, not getwd 22469: [33e5b9841f58] 22470: 22471: * getcwd.c: 22472: use MAX* not MAX* + 1 always run pwd as using getwd() defeats the 22473: purpose 22474: [24e58d340161] 22475: 22476: 1998-03-31 Todd C. Miller <Todd.Miller@courtesan.com> 22477: 22478: * OPTIONS, options.h: 22479: add STUB_LOAD_INTERFACES 22480: [d747cb23ca83] 22481: 22482: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c, 22483: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c, 22484: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 22485: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc, 22486: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 22487: testsudoers.c, tgetpass.c, utime.c, visudo.c: 22488: updated version 22489: [0798229312cc] 22490: 22491: * configure.in: 22492: support *-ccur-sysv4 and fix two typos 22493: [24a823ad7cc9] 22494: 22495: 1998-03-28 Todd C. Miller <Todd.Miller@courtesan.com> 22496: 22497: * configure.in: 22498: don't echo about with_logfile and with_timedir 22499: [31e4a1e2d9ad] 22500: 22501: * INSTALL: 22502: document --with-logfile and --with-timedir 22503: [674f811a40e0] 22504: 22505: * aclocal.m4: 22506: support --with-logfile and --with-timedir 22507: [2fc36b35db12] 22508: 22509: * configure.in: 22510: Add --with-logfile and --with-timedir 22511: [09045bf07e29] 22512: 22513: * sudo.c: 22514: change size computation of NewArgv for UNICOS 22515: [b50df07da3a1] 22516: 22517: 1998-02-19 Todd C. Miller <Todd.Miller@courtesan.com> 22518: 22519: * configure.in: 22520: treate -*-sysv4* like *-*-svr4 22521: [471b7ef4dbf2] 22522: 22523: 1998-02-18 Todd C. Miller <Todd.Miller@courtesan.com> 22524: 22525: * configure.in: 22526: fix spacing for --with-authenticate help 22527: [8321cb37c410] 22528: 22529: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c, 22530: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c, 22531: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 22532: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc, 22533: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 22534: testsudoers.c, tgetpass.c, utime.c, visudo.c: 22535: updated version 22536: [dc1ab97312eb] 22537: 22538: * parse.yacc: 22539: fix off by one error in push macro 22540: [bece59c8c3a9] 22541: 22542: 1998-02-17 Todd C. Miller <Todd.Miller@courtesan.com> 22543: 22544: * configure.in: 22545: removed bogus alloca hack 22546: [a68dd720462d] 22547: 22548: * check.c: 22549: added AIX 4.x authenticate() support 22550: [12985eb448a0] 22551: 22552: * parse.yacc: 22553: include alloca.h if using bison and not gcc and it exists. fixes an 22554: alloca problem on hpux 10.x 22555: [e3b5c4f26072] 22556: 22557: * INSTALL: 22558: mention --with-authenticate 22559: [78a1c96820e7] 22560: 22561: * configure.in: 22562: added AIX authenticate() support 22563: [c983193ec252] 22564: 22565: * config.h.in: 22566: add HAVE_AUTHENTICATE 22567: [7b0e5f5db5d9] 22568: 22569: * interfaces.c: 22570: dynamically size ifconf buffer 22571: [10afb0e9b2f9] 22572: 22573: * configure.in: 22574: quote '[' and ']' 22575: [8fc38a4defad] 22576: 22577: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c, 22578: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c, 22579: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 22580: logging.c, options.h, parse.c, parse.lex, parse.yacc, 22581: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 22582: testsudoers.c, tgetpass.c, utime.c, visudo.c: 22583: updated version 22584: [5f66de71ec61] 22585: 22586: * visudo.pod: 22587: add ERRORS section 22588: [3df3edb73cf6] 22589: 22590: 1998-02-16 Todd C. Miller <Todd.Miller@courtesan.com> 22591: 22592: * TROUBLESHOOTING: 22593: add busy stmp file explanation 22594: [6c555d469b6f] 22595: 22596: 1998-02-15 Todd C. Miller <Todd.Miller@courtesan.com> 22597: 22598: * configure.in: 22599: the name of the cached var that signals whether or not you are cross 22600: compiling changed. It is now ac_cv_prog_cc_cross 22601: [123911c0658c] 22602: 22603: 1998-02-11 Todd C. Miller <Todd.Miller@courtesan.com> 22604: 22605: * INSTALL: 22606: mention glibc 2.07 is fixed wrt lsearch()\. 22607: [ded758524582] 22608: 22609: 1998-02-07 Todd C. Miller <Todd.Miller@courtesan.com> 22610: 22611: * sample.sudoers, sudoers.pod: 22612: better example of su but not root su 22613: [b3199610be21] 22614: 22615: 1998-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 22616: 22617: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c, 22618: emul/utime.h, find_path.c, getspwuid.c, getwd.c, goodpath.c, 22619: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 22620: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc, 22621: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 22622: testsudoers.c, tgetpass.c, utime.c, visudo.c: 22623: updated version 22624: [46922b84e86b] 22625: 22626: * Makefile.in: 22627: correct regexp for updating version 22628: [8032728b2a8a] 22629: 22630: * tgetpass.c: 22631: remove bogus flush of stderr spew prompt before turning off echo. 22632: Seems to fix a weird problem where if sudo complained about a bogus 22633: stamp file the user would sometimes not have a chance to enter a 22634: password 22635: [7aa1493cc141] 22636: 22637: * check.c: 22638: fix bogus flush of stderr 22639: [6d047871c5e8] 22640: 22641: * sudo.c: 22642: close fd's <=2 not <=3 and move that chunk of code up 22643: [553e4faac195] 22644: 22645: * configure.in: 22646: support hpux1[0-9] not just hpux10 22647: [5a34a000ff8a] 22648: 22649: 1998-01-30 Todd C. Miller <Todd.Miller@courtesan.com> 22650: 22651: * parse.c: 22652: set sudoers_fp to nil after closing 22653: [221a8b4bbf34] 22654: 22655: 1998-01-24 Todd C. Miller <Todd.Miller@courtesan.com> 22656: 22657: * config.guess, config.sub: 22658: updated from autoconf 2.12 22659: [6fc86a0fc61b] 22660: 22661: * configure.in: 22662: add *-*-svr4 rule 22663: [38f0427f7c9d] 22664: 22665: 1998-01-23 Todd C. Miller <Todd.Miller@courtesan.com> 22666: 22667: * tgetpass.c: 22668: fix select usage for high fd's (dynamically allocate readfds) 22669: [c2d1f76e0321] 22670: 22671: * check.c: 22672: kill extra whitespace 22673: [d784b6c9c514] 22674: 22675: * sudo.c: 22676: do an initgroups() before running a command, unless the target user 22677: is root. 22678: [4ca561287480] 22679: 22680: 1998-01-22 Todd C. Miller <Todd.Miller@courtesan.com> 22681: 22682: * TROUBLESHOOTING: 22683: tell people to use tabs, not spaces, in syslog.conf 22684: [8ae90a205134] 22685: 22686: 1998-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 22687: 22688: * Makefile.in, config.h.in, dce_pwent.c, emul/utime.h, getwd.c, 22689: parse.lex, putenv.c, strdup.c, testsudoers.c, utime.c: 22690: updated version 22691: [4d855ff5de26] 22692: 22693: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c, 22694: logging.c, parse.c, sudo.c, sudo_setenv.c, tgetpass.c, visudo.c: 22695: updated version 22696: [8e007e178b33] 22697: 22698: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, 22699: insults.h, options.h, parse.yacc, pathnames.h.in, sudo.h: 22700: updated version 22701: [9ddea5c8814d] 22702: 22703: * Makefile.in: 22704: more tweaks to update_version 22705: [047698752855] 22706: 22707: * Makefile.in: 22708: fixed up update_version rule 22709: [47b6fa34b77f] 22710: 22711: * configure.in: 22712: ++version 22713: [c1ca664e30b7] 22714: 22715: * Makefile.in: 22716: removed supe of check.c 22717: [8f340a05296a] 22718: 22719: * INSTALL: 22720: ++version I missed 22721: [a298e6c17491] 22722: 22723: * RUNSON: 22724: updated 22725: [a14f6057bc15] 22726: 22727: * BUGS, INSTALL, Makefile.in, README, check.c, compat.h, config.h.in, 22728: dce_pwent.c, emul/utime.h, find_path.c, getspwuid.c, getwd.c, 22729: goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, 22730: insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex, 22731: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, 22732: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h, 22733: visudo.c: 22734: updated version 22735: [02231b1a3ab3] 22736: 22737: * CHANGES: 22738: updated for 1.5.5 22739: [634e5fcaf40b] 22740: 22741: * Makefile.in: 22742: add rules to update version stuff in files so I don't need to do it 22743: by hand 22744: [3620ad60485a] 22745: 22746: * sudo.h: 22747: sudoers_fp is now extern 22748: [88c6e9b9ea84] 22749: 22750: * sudo.c: 22751: in check_sudoers, cache the sudoers file handle in sudoers_fp so we 22752: don't have to open it again in the parse. This may help with weird 22753: solaris problems where EAGAIN sometime occurrs. 22754: [d3c26451ed1d] 22755: 22756: * parse.c: 22757: sudoers file open is now done only in check_sudoers() so we just do 22758: a rewind() instead of an open. May help people on solaris who were 22759: getting EAGAIN. 22760: [c8b8c7722fa5] 22761: 22762: 1998-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 22763: 22764: * INSTALL: 22765: mention that newer glibc is fixed 22766: [20f06f5d3ef3] 22767: 22768: 1998-01-13 Todd C. Miller <Todd.Miller@courtesan.com> 22769: 22770: * sudo.c: 22771: newer irix uses _RLDN32_* envariables for 32-bit binaries so ignore 22772: _RLD* instead of _RLD_* 22773: [1e22c588d602] 22774: 22775: * parse.c: 22776: typo 22777: [d0b7cb85f08a] 22778: 22779: * parse.c: 22780: fix that bug for real 22781: [5a6eeca6d04b] 22782: 22783: * INSTALL: 22784: document Linux's libc6 brokenness. 22785: [0246c1aa64ee] 22786: 22787: * parse.yacc: 22788: -Wall 22789: [d0e452fb1e2d] 22790: 22791: * RUNSON: 22792: updated 22793: [4949a1bbd0a9] [SUDO_1_5_4] 22794: 22795: * TROUBLESHOOTING: 22796: remind people to HUP syslogd 22797: [590962faa4f0] 22798: 22799: * Makefile.in: 22800: add -O flag to tar 22801: [622d02de339d] 22802: 22803: * RUNSON: 22804: updated 22805: [a72930d6e615] 22806: 22807: * TODO: 22808: updated 22809: [4a51bd458390] 22810: 22811: * sudo.pod: 22812: remove author's email addr. people should mail sudo-bugs 22813: [9b6bbdb3a6d9] 22814: 22815: * INSTALL: 22816: fix version 22817: [246274c6c8af] 22818: 22819: * README, check.c, compat.h, config.h.in, configure.in, dce_pwent.c, 22820: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h, 22821: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c, 22822: logging.c, options.h, parse.c, parse.lex, parse.yacc, 22823: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 22824: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c: 22825: ++version 22826: [f532ff4ee766] 22827: 22828: * RUNSON: 22829: updated 22830: [62d5c71358b5] 22831: 22832: * INSTALL, Makefile.in: 22833: ++version 22834: [1a7c7628edfc] 22835: 22836: * CHANGES: 22837: updated fort 1.5.4 22838: [7e4873508c99] 22839: 22840: * check.c: 22841: exit(1) if user enters no passwd 22842: [f382c0e35e4e] 22843: 22844: * BUGS: 22845: ++version 22846: [fab6a867ab67] 22847: 22848: * parse.c: 22849: commands can start with ./* not just /* -- fixes a serious security 22850: hole. 22851: [244d2fe35ee3] 22852: 22853: 1997-12-21 Todd C. Miller <Todd.Miller@courtesan.com> 22854: 22855: * sudo.c: 22856: Don't set the tty variable to NULL when we lack a tty, leave it as 22857: "unknown". 22858: [193b26daba03] 22859: 22860: 1997-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 22861: 22862: * sample.sudoers: 22863: fix usage of (username) in conjunction with , and ! 22864: [7ae68607f68f] 22865: 22866: * visudo.c: 22867: catch the case where the user is not in the passwd file 22868: [31650258deb0] 22869: 22870: * tgetpass.c: 22871: use fileno(input) + 1 instead of getdtablesize() as the nfds arg to 22872: select(2) 22873: [60ab2d9a9ee8] 22874: 22875: * sudo.c: 22876: define tty global to an initial value to avoid dumping core in 22877: logging functions when passwd file is unavailable. 22878: [77056c7bc908] 22879: 22880: * sudo.c: 22881: do the set_perms(PERM_USER, sudo_mode) after we have gotten the 22882: passwd entry 22883: [1fdb8e579a5a] 22884: 22885: * sudo.pod: 22886: talk about problem of ALL 22887: [1cd1905c9f6f] 22888: 22889: 1997-10-10 Todd C. Miller <Todd.Miller@courtesan.com> 22890: 22891: * README: 22892: new web location 22893: [d24dc26f6da5] 22894: 22895: * INSTALL: 22896: fdesc bug is fixed in Open/Net BSD 22897: [7d4d81b08ac3] 22898: 22899: * HISTORY: 22900: updates from Nieusma 22901: [3a43769a1b78] 22902: 22903: 1997-10-09 Todd C. Miller <Todd.Miller@courtesan.com> 22904: 22905: * dce_pwent.c: 22906: move compat.h after the system includes 22907: [5ea43a5968ac] 22908: 22909: 1997-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 22910: 22911: * logging.c: 22912: save errno from being clobbered by wait(). From Theo 22913: [f2d1c48cd592] 22914: 22915: 1997-05-21 Todd C. Miller <Todd.Miller@courtesan.com> 22916: 22917: * compat.h: 22918: fix an occurence of setresuid -> setreuid (typo) 22919: [394de35c9b1c] 22920: 22921: 1997-03-19 Todd C. Miller <Todd.Miller@courtesan.com> 22922: 22923: * install-sh: 22924: check for path to strip 22925: [2b7ef824bd55] 22926: 22927: 1997-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 22928: 22929: * logging.c: 22930: deal with maxfilelen < 0 case 22931: [f0af095178d7] 22932: 22933: * OPTIONS: 22934: fixed descriptin 22935: [629f60bd4b5f] 22936: 22937: 1996-12-12 Todd C. Miller <Todd.Miller@courtesan.com> 22938: 22939: * sudo.c: 22940: correct error message if mode/owner wrong and not statable by owner 22941: but is statable by root. 22942: [cb631ce2e85e] 22943: 22944: 1996-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 22945: 22946: * config.guess, config.sub: 22947: autoconf 2.11 22948: [f3cbe59e0756] 22949: 22950: 1996-11-16 Todd C. Miller <Todd.Miller@courtesan.com> 22951: 22952: * CHANGES, RUNSON, TODO: 22953: sudo 1.5.3. 22954: [2be3229b8626] 22955: 22956: 1996-11-14 Todd C. Miller <Todd.Miller@courtesan.com> 22957: 22958: * parse.yacc, sudo.h: 22959: command_alias -> generic_alias 22960: [c404ca8c510d] [SUDO_1_5_3] 22961: 22962: * sample.sudoers: 22963: added Runas_Alias example and fixed syntax errors 22964: [c304053f4a8a] 22965: 22966: * OPTIONS, options.h: 22967: updated MAILSUBJECT 22968: [18d1573fcd2a] 22969: 22970: * logging.c: 22971: added %h expansion 22972: [a4bff9b284fd] 22973: 22974: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in, 22975: configure.in, dce_pwent.c, find_path.c, getspwuid.c, getwd.c, 22976: goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, 22977: insults.h, interfaces.c, logging.c, options.h, parse.c, parse.lex, 22978: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, 22979: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h, 22980: visudo.c: 22981: ++version 22982: [211ff20f956f] 22983: 22984: * BUGS, emul/utime.h: 22985: ++version 22986: [cde5376579e3] 22987: 22988: * sudoers.pod: 22989: document Runas_Alias 22990: [b1a58f28fb2c] 22991: 22992: * visudo.pod: 22993: q (uid) -> Q 22994: [d256649a0e6b] 22995: 22996: * visudo.c: 22997: buffer oflow checking q (uit) -> Q if yyparse() fails drop into 22998: whatnow 22999: [1cb183d15626] 23000: 23001: * parse.yacc: 23002: add size params to sprintf 23003: [9228f698921f] 23004: 23005: * parse.lex: 23006: allow trailing space after '\\' but before '\n' 23007: [f51dbbf69fdf] 23008: 23009: * find_path.c: 23010: off by one error in path size check 23011: [a6d75ccd7632] 23012: 23013: * check.c: 23014: sprintf paranoia 23015: [3ffb12d198dd] 23016: 23017: 1996-11-12 Todd C. Miller <Todd.Miller@courtesan.com> 23018: 23019: * parse.yacc: 23020: fixed more_aliases 23021: [aab12f2a50af] 23022: 23023: * visudo.c: 23024: now warns if killed by signal ./ 23025: [310c186a0fd7] 23026: 23027: 1996-11-11 Todd C. Miller <Todd.Miller@courtesan.com> 23028: 23029: * parse.yacc: 23030: fix Runas_Alias stuff Alias's in runas list now get expanded (but it 23031: is gross) 23032: [45590b83120f] 23033: 23034: * sudo.c: 23035: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE == 0400 23036: [d53e01c14c58] 23037: 23038: * parse.yacc: 23039: add Runas_Alias support change FOO to FOO_ALIAS (ie: USER_ALIAS) 23040: [7a4a040aae2d] 23041: 23042: * parse.lex: 23043: Add Runas_Alias and simplify a rule. 23044: [6f794a769a37] 23045: 23046: * parse.yacc: 23047: always store User_Alias's since they can be used inside of a runas 23048: list. Sigh. Really need a Runas_Alias instead. 23049: [3bab058a873e] 23050: 23051: 1996-10-30 Todd C. Miller <Todd.Miller@courtesan.com> 23052: 23053: * visudo.c: 23054: deal with case where there is no sudoers file 23055: [fa38b3bb244d] 23056: 23057: 1996-10-12 Todd C. Miller <Todd.Miller@courtesan.com> 23058: 23059: * TROUBLESHOOTING: 23060: added one 23061: [e61346d06725] 23062: 23063: 1996-10-11 Todd C. Miller <Todd.Miller@courtesan.com> 23064: 23065: * HISTORY, testsudoers.c: 23066: developement -> development 23067: [4df55e293941] 23068: 23069: * INSTALL: 23070: added a note 23071: [3845fb83dbc0] 23072: 23073: * RUNSON: 23074: for 1.5.2 23075: [5489b7298942] 23076: 23077: * CHANGES: 23078: updated 23079: [0741834929e6] 23080: 23081: 1996-10-10 Todd C. Miller <Todd.Miller@courtesan.com> 23082: 23083: * PORTING: 23084: removed seteuid() notes 23085: [1010a60f281d] [SUDO_1_5_2] 23086: 23087: 1996-10-09 Todd C. Miller <Todd.Miller@courtesan.com> 23088: 23089: * compat.h: 23090: better seteuid() emulatino 23091: [e807623b662c] 23092: 23093: * configure.in: 23094: added check for seteuid 23095: [8cf9fabc6f4f] 23096: 23097: * config.h.in: 23098: added HAVE_SETEUID 23099: [596db46aa828] 23100: 23101: 1996-10-08 Todd C. Miller <Todd.Miller@courtesan.com> 23102: 23103: * configure.in: 23104: first stab at sequent support 23105: [b85a7bfcac76] 23106: 23107: * config.h.in: 23108: added HAVE_SYS_SELECT_H 23109: [93ecdd042463] 23110: 23111: * compat.h: 23112: sequent -> _SEQUENT_ 23113: [63a38b6da98c] 23114: 23115: * compat.h: 23116: added seteuid() macro for DYNIX 23117: [695bd63c5ea6] 23118: 23119: * tgetpass.c: 23120: _AIX -> HAVE_SYS_SELECT_H 23121: [b31221211bc2] 23122: 23123: 1996-10-07 Todd C. Miller <Todd.Miller@courtesan.com> 23124: 23125: * BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in, logging.c, 23126: parse.c, parse.lex, parse.yacc, putenv.c, strdup.c, sudo_setenv.c, 23127: testsudoers.c, tgetpass.c, utime.c, visudo.c: 23128: ++version 23129: [8052992fd453] 23130: 23131: * check.c, compat.h, dce_pwent.c, emul/utime.h, find_path.c, 23132: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h, 23133: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h, 23134: pathnames.h.in, version.h: 23135: ++version 23136: [f7ad15e1598a] 23137: 23138: * sudo.pod: 23139: added -H and SUDO_PS1 23140: [bb965241e30c] 23141: 23142: * configure.in: 23143: use SUDO_FUNC_FNMATCH 23144: [6a8350d85fb2] 23145: 23146: * aclocal.m4: 23147: added SUDO_FUNC_FNMATCH 23148: [45b32c91c4ba] 23149: 23150: * sudo.c: 23151: added -H flag 23152: [11ebc6872fd6] 23153: 23154: * sudo.h: 23155: added MODE_RESET_HOME / 23156: [67a7f8bcbbd6] 23157: 23158: 1996-10-05 Todd C. Miller <Todd.Miller@courtesan.com> 23159: 23160: * INSTALL: 23161: mention OPIE 23162: [5723515d5bbd] 23163: 23164: * options.h: 23165: SKEY -> OTP 23166: [c1d268130bc4] 23167: 23168: * configure.in: 23169: added opie support 23170: [123872b41b20] 23171: 23172: * compat.h, config.h.in: 23173: added HAVE_OPIE 23174: [528c71afc1e5] 23175: 23176: * check.c: 23177: added HAVE_OPIE and changed to *_OTP_* 23178: [4c62f5db872a] 23179: 23180: * OPTIONS: 23181: SKEY -> OTP 23182: [bd858e5e9652] 23183: 23184: 1996-10-04 Todd C. Miller <Todd.Miller@courtesan.com> 23185: 23186: * check.c: 23187: moved fclose() in skey stuff. 23188: [11f7dc8431a6] 23189: 23190: 1996-10-03 Todd C. Miller <Todd.Miller@courtesan.com> 23191: 23192: * putenv.c: 23193: index -> strchr remove unnecesary stuff 23194: [af2d05238062] 23195: 23196: * check.c: 23197: now call skeychallenge() to get challenge instead of making one up 23198: ourselves. this way, we get extra goodies in the prompt. 23199: [49b770d98d3a] 23200: 23201: 1996-09-10 Todd C. Miller <Todd.Miller@courtesan.com> 23202: 23203: * CHANGES: 23204: added one 23205: [3f5149357e2a] [SUDO_1_5_1] 23206: 23207: * parse.lex: 23208: allow logins to start with a number (YUCK!) 23209: [7ed7ef324741] 23210: 23211: 1996-09-08 Todd C. Miller <Todd.Miller@courtesan.com> 23212: 23213: * TROUBLESHOOTING: 23214: added soalris 2.5 vs 2.4 note 23215: [16160a251aae] 23216: 23217: * configure.in: 23218: DUNIX doesn't need -lnsl 23219: [be924cc322c3] 23220: 23221: * CHANGES: 23222: *** empty log message *** 23223: [1b2937521981] 23224: 23225: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c, 23226: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h, 23227: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c, 23228: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c, 23229: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, 23230: utime.c, version.h, visudo.c: 23231: courtesan 23232: [5f203589bbfe] 23233: 23234: * PORTING, README, RUNSON: 23235: courtesan 23236: [d72517f4937e] 23237: 23238: * INSTALL, Makefile.in, TROUBLESHOOTING: 23239: courtesan 23240: [5c007e3c7a71] 23241: 23242: * visudo.pod: 23243: *** empty log message *** 23244: [37ebe85bd4e1] 23245: 23246: * sudo.pod, visudo.pod: 23247: courtesan 23248: [37f02e2130ea] 23249: 23250: 1996-09-07 Todd C. Miller <Todd.Miller@courtesan.com> 23251: 23252: * HISTORY: 23253: added courtesan ./ 23254: [b01435226276] 23255: 23256: 1996-09-06 Todd C. Miller <Todd.Miller@courtesan.com> 23257: 23258: * sudo.c: 23259: added $SUDO_PROMPT support 23260: [cb1fa72c093d] 23261: 23262: 1996-09-04 Todd C. Miller <Todd.Miller@courtesan.com> 23263: 23264: * check.c: 23265: print long skey challemged to stderr, not stdout 23266: [750fc775b3b2] 23267: 23268: 1996-09-01 Todd C. Miller <Todd.Miller@courtesan.com> 23269: 23270: * CHANGES: 23271: updated for 1.5.1 23272: [9b615f393057] 23273: 23274: * emul/utime.h: 23275: ++version 23276: [a94de18deafb] 23277: 23278: 1996-08-31 Todd C. Miller <Todd.Miller@courtesan.com> 23279: 23280: * RUNSON: 23281: updated for 1.5.1 23282: [4092f20ab634] 23283: 23284: 1996-08-30 Todd C. Miller <Todd.Miller@courtesan.com> 23285: 23286: * check.c: 23287: use shost, not host for tgetpass 23288: [6061c49ff9be] 23289: 23290: * sudo.pod: 23291: documented %u and %h 23292: [6d2922d29897] 23293: 23294: * OPTIONS: 23295: documented %u and %h 23296: [1a71da13a864] 23297: 23298: * configure.in: 23299: fixed typo 23300: [1230dec2b062] 23301: 23302: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in, 23303: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c, 23304: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 23305: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc, 23306: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 23307: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c: 23308: ++version 23309: [65ce8eabf77a] 23310: 23311: * BUGS: 23312: ++version 23313: [afecab53aab7] 23314: 23315: 1996-08-29 Todd C. Miller <Todd.Miller@courtesan.com> 23316: 23317: * Makefile.in, configure.in, version.h: 23318: ++version 23319: [fb3ff940d672] 23320: 23321: * sudo.h: 23322: new tgetpass() params 23323: [9eccc5b0f8ae] 23324: 23325: * check.c: 23326: pass use and host to tgetpass 23327: [c56d9d13c401] 23328: 23329: * tgetpass.c: 23330: added %u and %h escapes 23331: [04ae775d3e5d] 23332: 23333: * OPTIONS, check.c, options.h: 23334: added NO_MESSAGE 23335: [3927dad19057] 23336: 23337: * configure.in: 23338: added cray (unicos) support 23339: [1122210c5fb1] 23340: 23341: 1996-08-27 Todd C. Miller <Todd.Miller@courtesan.com> 23342: 23343: * OPTIONS, options.h, sudo.c: 23344: added SHELL_SETS_HOME 23345: [0b26909b0929] 23346: 23347: 1996-08-25 Todd C. Miller <Todd.Miller@courtesan.com> 23348: 23349: * INSTALL: 23350: added note about "make install" 23351: [7e56ea76d4b4] 23352: 23353: * parse.yacc: 23354: changed length/size params from int to size_t 23355: [5654e5ceb1b3] 23356: 23357: * OPTIONS: 23358: now get CSOPS insults as well by default 23359: [297323d0179a] 23360: 23361: * insults.h: 23362: use csops insults too by default 23363: [07fafc136169] 23364: 23365: * INSTALL, Makefile.in, README, config.h.in, configure.in, version.h: 23366: version = 1.5 23367: [4b8772b11e3b] 23368: 23369: * sudo.c: 23370: added runas_homedir 23371: [b0e0d4417a15] 23372: 23373: * TODO: 23374: updated for 1.5 23375: [66259df825d5] 23376: 23377: * RUNSON: 23378: updated for 1.5 23379: [e08bc9ebfe95] 23380: 23381: * CHANGES: 23382: 1.5 release 23383: [8c16942fea41] 23384: 23385: * INSTALL: 23386: added "upgrading" notes 23387: [210d968964ff] 23388: 23389: 1996-08-22 Todd C. Miller <Todd.Miller@courtesan.com> 23390: 23391: * visudo.c: 23392: now do chmod and chown after edit of temp file and before rename 23393: [de174e34faa7] [SUDO_1_5_0] 23394: 23395: 1996-08-18 Todd C. Miller <Todd.Miller@courtesan.com> 23396: 23397: * Makefile.in: 23398: ++version added INSTALL.configure 23399: [c9e9214f52ae] 23400: 23401: * configure.in, version.h: 23402: ++version 23403: [5985abed3eb2] 23404: 23405: * TROUBLESHOOTING: 23406: *** empty log message *** 23407: [d65c540ec52e] 23408: 23409: * parse.yacc: 23410: added missing cast 23411: [e7247319a7d5] 23412: 23413: * sudo.c: 23414: sets $HOME to pw_dir of runas user 23415: [d3f7f4d05752] 23416: 23417: * sudo.pod: 23418: document $HOME change 23419: [854454d458c4] 23420: 23421: 1996-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 23422: 23423: * sudo.pod: 23424: fixed up some wording 23425: [b0c8582f2c97] 23426: 23427: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c, 23428: interfaces.c, logging.c, parse.c, parse.lex, parse.yacc, putenv.c, 23429: strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, 23430: visudo.c: 23431: ++version 23432: [748be723fd8b] 23433: 23434: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, 23435: insults.h, options.h, pathnames.h.in, sudo.h: 23436: ++version 23437: [acdf8b1b2a1b] 23438: 23439: * emul/utime.h: 23440: ++version 23441: [b3f35298ab8d] 23442: 23443: * sudo.h: 23444: name nad type changes 23445: [db24ab3da141] 23446: 23447: * testsudoers.c: 23448: now works with new sudo 23449: [379346c42cc2] 23450: 23451: * parse.yacc: 23452: fixed some XXX 23453: [f5fe4c990052] 23454: 23455: * parse.yacc: 23456: some variable name changes + comment headers for functions. 23457: [3dc3bd9aa73d] 23458: 23459: * tgetpass.c: 23460: added extra paren's to make compilers happy 23461: [9e4968a34d56] 23462: 23463: * sudo.c: 23464: *** empty log message *** 23465: [70c924c1ed69] 23466: 23467: * parse.c: 23468: now uses init_parser() if not in sudoers and tries "list" or 23469: "validate" scold but don't be nasty. 23470: [c0d8fb3f8c9e] 23471: 23472: * TROUBLESHOOTING: 23473: now can use upper case login names 23474: [c772fffcefe5] 23475: 23476: * visudo.c: 23477: now uses init_parser() 23478: [b9efae7243fd] 23479: 23480: * INSTALL, README: 23481: updated 23482: [27dc8283fdc8] 23483: 23484: * PORTING: 23485: added info about PASSWORD_TIMEOUT 23486: [980e15d892f8] 23487: 23488: * INSTALL.configure: 23489: Initial revision 23490: [8292e89a08d3] 23491: 23492: * BUGS: 23493: fixed a bug , 23494: [c6e46f5624f9] 23495: 23496: * parse.yacc: 23497: now dynamically allocates memory for the stacks -- no more 23498: overflows! 23499: [8615c35b6ad3] 23500: 23501: * sudo.pod: 23502: -l now explands command aliases 23503: [39f45605935d] 23504: 23505: * parse.yacc: 23506: hacks to expand command aliases for `sudo -l' 23507: [e4eb752608f9] 23508: 23509: * sudo.c: 23510: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh, and bash) 23511: [01327ca5084b] 23512: 23513: * sudo.h: 23514: added struct command_alias 23515: [dd2f32764082] 23516: 23517: * sudo.pod: 23518: fixed a bug 23519: [e708ff08d2eb] 23520: 23521: * lsearch.c: 23522: in compar() key should be first arg 23523: [fc14c3fa62ee] 23524: 23525: 1996-08-15 Todd C. Miller <Todd.Miller@courtesan.com> 23526: 23527: * BUGS: 23528: fixed some bugs 23529: [639dfe425bd5] 23530: 23531: * parse.yacc: 23532: can now deal with upcase HOST and USER names 23533: [c6aa7bcfb00d] 23534: 23535: * sudo.c: 23536: don't yell too loudly at non-sudoers if they do "sudo -l" 23537: [4ef146128d89] 23538: 23539: * sudo.pod: 23540: fixed thinko 23541: [830f2f0f22e7] 23542: 23543: * parse.c: 23544: fix comment 23545: [d20ce9e17ddc] 23546: 23547: 1996-08-09 Todd C. Miller <Todd.Miller@courtesan.com> 23548: 23549: * parse.c, parse.yacc: 23550: added support for new `sudo -l' stuff 23551: [7dceaef3c733] 23552: 23553: * sudo.c: 23554: now uses list_matches() 23555: [293364821b61] 23556: 23557: * sudo.h: 23558: added struct sudo_match 23559: [b2684179d179] 23560: 23561: * configure.in: 23562: now more -lgnumalloc 23563: [4f8ae42617d8] 23564: 23565: 1996-08-01 Todd C. Miller <Todd.Miller@courtesan.com> 23566: 23567: * install-sh: 23568: added more paths for chown and whoami 23569: [6e685a19426c] 23570: 23571: 1996-07-31 Todd C. Miller <Todd.Miller@courtesan.com> 23572: 23573: * check.c: 23574: typo 23575: [3adfa01c04bc] 23576: 23577: 1996-07-30 Todd C. Miller <Todd.Miller@courtesan.com> 23578: 23579: * aclocal.m4: 23580: fixed DUNIX check for shadow pw 23581: [c25324bcd27b] 23582: 23583: * tgetpass.c: 23584: now only turn off echo if it is already on. this fixes a race when 23585: you use sudo in a pipelin 23586: [28388c2de21c] 23587: 23588: * INSTALL: 23589: updated 23590: [b45ac9366b7e] 23591: 23592: * configure.in: 23593: changed "test -z $foo && do_this" to if; then construct 23594: [2183c4426bca] 23595: 23596: 1996-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 23597: 23598: * configure.in: 23599: added missing defines of SHADOW_TYPE 23600: [be89ea68a7f3] 23601: 23602: 1996-07-26 Todd C. Miller <Todd.Miller@courtesan.com> 23603: 23604: * check.c: 23605: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since they are 23606: only in dunix 4.x 23607: [1e7c1c677263] 23608: 23609: * getspwuid.c: 23610: added AUTH_CRYPT_C1CRYPT support 23611: [88d6b0058b20] 23612: 23613: * parse.c: 23614: no longer return VALIDATE_NOT_OK if there was a runas that didn't 23615: match. Now we can have runas stuff on more than one line. 23616: [52b68920d7b7] 23617: 23618: * getspwuid.c, sudo.c, tgetpass.c: 23619: use SHADOW_TYPE instead of HAVE_C2_SECURITY 23620: [cf401dfcbc06] 23621: 23622: * configure.in: 23623: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always defined to 23624: something 23625: [c7a233c4dd93] 23626: 23627: * config.h.in: 23628: removed HAVE_C2_SECURITY added SPW_BSD 23629: [8314405e9754] 23630: 23631: * compat.h: 23632: use SHADOW_TYPE instead of HAVE_C2_SECURITY 23633: [6f94870df17f] 23634: 23635: * check.c: 23636: SHADOW_TYPE is always defined so just against its value 23637: [72c69a55d02f] 23638: 23639: * aclocal.m4: 23640: added SUDO_CHECK_SHADOW_DUNIX 23641: [ef025ae9d496] 23642: 23643: 1996-07-25 Todd C. Miller <Todd.Miller@courtesan.com> 23644: 23645: * sudoers.pod: 23646: * -> ?* in one example added another instance of (runas) and one of 23647: NOPASSWD: 23648: [d74fe1dcbe7d] 23649: 23650: 1996-07-24 Todd C. Miller <Todd.Miller@courtesan.com> 23651: 23652: * configure.in: 23653: added back check for config.cache from other host type 23654: [0ba87871f585] 23655: 23656: * parse.lex: 23657: removed an instance of \" 23658: [1e008d3709f6] 23659: 23660: * sample.sudoers: 23661: added an example 23662: [dbfcf68ee330] 23663: 23664: * sudoers.pod: 23665: updated wrt new wildcard matching 23666: [193fa44a475b] 23667: 23668: * configure.in: 23669: new check for shadow passwords if we don't know anything 23670: [67465df7dc9a] 23671: 23672: * aclocal.m4: 23673: new SUDO_CHECK_SHADOW_GENERIC 23674: [3563b16a41b8] 23675: 23676: * configure.in: 23677: added back check for -lsocket (oops) 23678: [a80882ee1cb6] 23679: 23680: * configure.in: 23681: better (working) check for shadow passwd type if we know to use C2. 23682: [3cdd2a59a641] 23683: 23684: * configure.in: 23685: now uses AC_CANONICAL_HOST to figure out os type 23686: [80db7fe6e704] 23687: 23688: * Makefile.in: 23689: added config.{guess,sub} 23690: [c6be7e3ca384] 23691: 23692: * aclocal.m4: 23693: removed unused stuff to figure out os type 23694: [c9a0f3b57123] 23695: 23696: * config.sub: 23697: added openbsd 23698: [bfc6bfec3668] 23699: 23700: * config.sub: 23701: Initial revision 23702: [e6e06ce0d17d] 23703: 23704: * config.guess: 23705: Initial revision 23706: [99dd06f79199] 23707: 23708: * testsudoers.c: 23709: don't call fnmatch() with FNM_PATHNAME flag unless it can only be a 23710: pathname. need to check against sudoers_args even if user_args is 23711: nil 23712: [66e6cf77f5d6] 23713: 23714: * parse.c: 23715: don't call fnmatch() with FNM_PATHNAME flag unless it can only be a 23716: pathname need to check against sudoers_args even if user_args is nil 23717: [74374df17311] 23718: 23719: 1996-07-23 Todd C. Miller <Todd.Miller@courtesan.com> 23720: 23721: * check.c: 23722: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2 23723: [cbb00261c415] 23724: 23725: * testsudoers.c: 23726: now takes command line args and uses cmnd_args 23727: [f0c2fd35a527] 23728: 23729: * parse.lex: 23730: fill_args was adding an extra leading space 23731: [692fc999b2e8] 23732: 23733: 1996-07-22 Todd C. Miller <Todd.Miller@courtesan.com> 23734: 23735: * visudo.c: 23736: fixed dummy command_matches() 23737: [93d9543db6e2] 23738: 23739: * parse.yacc: 23740: fixed prototype 23741: [7b0addfbd429] 23742: 23743: * sudo.h: 23744: added cmnd_args 23745: [8f47c4ae65ef] 23746: 23747: * parse.yacc: 23748: now uses flat args string 23749: [016e65877da3] 23750: 23751: * parse.c, parse.lex: 23752: now uses flat arg string 23753: [5b5f2e3f4c09] 23754: 23755: * visudo.c: 23756: added cmnd_args def 23757: [876867134775] 23758: 23759: * sudo.c: 23760: now sets cmnd_args global 23761: [e6fee70cb59b] 23762: 23763: * logging.c: 23764: cmnd_args is now exported from sudo.[ch] 23765: [7a9cd36e356f] 23766: 23767: 1996-07-21 Todd C. Miller <Todd.Miller@courtesan.com> 23768: 23769: * parse.yacc: 23770: can't rely on cmnd_matches as much as I thought -- added some $$ 23771: stuff back in to prevent namespace pollution problems. 23772: [3c45fedb5af3] 23773: 23774: * parse.yacc: 23775: Simplified parse rules wrt runas and NOPASSWD (more consistent). 23776: [e6d838c8a4c7] 23777: 23778: 1996-07-20 Todd C. Miller <Todd.Miller@courtesan.com> 23779: 23780: * parse.lex: 23781: NOPASSWD may now have blanks before the ':' '(' only starts a 23782: 'runas' if in the initial state to avoid collision with command args 23783: [c5c01172f499] 23784: 23785: * configure.in: 23786: added checks for specific shadow passwd schemes 23787: [b7e3d1f7b84f] 23788: 23789: * aclocal.m4: 23790: added routines to check for specific shadow passwd types 23791: [e5e1d19960a6] 23792: 23793: 1996-07-18 Todd C. Miller <Todd.Miller@courtesan.com> 23794: 23795: * configure.in: 23796: added support for ncr boxen 23797: [bea9dc5aae7f] 23798: 23799: * aclocal.m4: 23800: added support for detecting ncr boxen 23801: [8653a158a924] 23802: 23803: 1996-07-16 Todd C. Miller <Todd.Miller@courtesan.com> 23804: 23805: * configure.in: 23806: added sinix support 23807: [5de2b2173ee1] 23808: 23809: 1996-07-14 Todd C. Miller <Todd.Miller@courtesan.com> 23810: 23811: * TROUBLESHOOTING: 23812: added info about "config.cache from other other" error. 23813: [845b10198e0b] 23814: 23815: * aclocal.m4: 23816: now makes sure you don't have a config.cache file from another OS 23817: [4fe32571c021] 23818: 23819: * configure.in: 23820: now sets $LIBS when needed to configure links with libs when doing 23821: tests hpux10 now uses SPW_SECUREWARE for C2 added check for 23822: bigcrypt(3) if SPW_SECUREWARE 23823: [2df6b8ca538f] 23824: 23825: * getspwuid.c: 23826: fixed typo 23827: [fe1cb1d792d6] 23828: 23829: * tgetpass.c: 23830: now include stuff for SPW_SECUREWARE to get AUTH_MAX_PASSWD_LENGTH 23831: [f71138372c07] 23832: 23833: * getspwuid.c: 23834: no more SPW_HPUX10 23835: [cfdeb18bc16b] 23836: 23837: * config.h.in: 23838: no more SPW_HPUX10 added HAVE_BIGCRYPT 23839: [00d296479a61] 23840: 23841: * compat.h: 23842: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE 23843: [6c6d9e680417] 23844: 23845: * check.c: 23846: SPW_SECUREWARE now uses bigcrypt 23847: [be71fc66690f] 23848: 23849: 1996-07-13 Todd C. Miller <Todd.Miller@courtesan.com> 23850: 23851: * sample.sudoers: 23852: fixed 2 syntax errors 23853: [45eee19ef4ac] 23854: 23855: * sudoers: 23856: root may now run ALL as ALL 23857: [1b54c6b9b212] 23858: 23859: 1996-07-12 Todd C. Miller <Todd.Miller@courtesan.com> 23860: 23861: * interfaces.c: 23862: fixed a typo/thinko that broke BSD's with sa_len 23863: [603438360126] 23864: 23865: 1996-07-08 Todd C. Miller <Todd.Miller@courtesan.com> 23866: 23867: * check.c, configure.in: 23868: updated AFS support 23869: [e572eb8d177a] 23870: 23871: * TROUBLESHOOTING: 23872: added entry about /usr/ucb/cc 23873: [025b353aa9d3] 23874: 23875: * INSTALL: 23876: prep no longer holds gcc binaries 23877: [8b0942958049] 23878: 23879: * INSTALL: 23880: updated AFS note 23881: [7af6efd5abe4] 23882: 23883: * Makefile.in: 23884: added @AFS_LIBS@ 23885: [97b6fe6ad7d6] 23886: 23887: * compat.h: 23888: AFS allows long passwords 23889: [5fb17122c302] 23890: 23891: * testsudoers.c: 23892: fixed -u user support 23893: [b1a0c1648639] 23894: 23895: * parse.c: 23896: sudo -v now groks VALIDATE_OK_NOPASS 23897: [74fc03fffe7e] 23898: 23899: * parse.yacc: 23900: fixed no_passwd vs. runas_matched 23901: [549a9b791a6a] 23902: 23903: * TROUBLESHOOTING: 23904: took out stuff about NFS-mounting since it is no longer an issue 23905: [d95ab7fbbc61] 23906: 23907: * INSTALL: 23908: added --with-libraries > --with-libpath --with-incpath 23909: [d5d15a7a0f4c] 23910: 23911: * parse.yacc: 23912: was setting runas_matches to -1 in wrong place 23913: [db2b1deb8d33] 23914: 23915: * check.c: 23916: removed usersec.h which is not present in new AFS versions 23917: [618b016dd17f] 23918: 23919: * tgetpass.c: 23920: now deals with timeout <= 0 23921: [ba53a1257255] 23922: 23923: * OPTIONS: 23924: updated 23925: [75093bd8fdca] 23926: 23927: * configure.in: 23928: BSD/OS >= 2.0 now uses shlicc instead of just gcc 23929: [ff6dbf7825c2] 23930: 23931: * sudo.c: 23932: fixed backwards compatibility with sudo 1.4 sudoers mode for root 23933: readable/writable filesystems 23934: [2694ed627221] 23935: 23936: * Makefile.in: 23937: now gives INSTALL -c flag 23938: [63db055a2fd1] 23939: 23940: * parse.yacc: 23941: slightly simpler initialization of no_passwd and runas_matches 23942: [463a1b5fa323] 23943: 23944: * testsudoers.c: 23945: added -u username support 23946: [38b072fcd6b3] 23947: 23948: * configure.in: 23949: improved --with-libraries support 23950: [047dbc5f0af2] 23951: 23952: 1996-07-07 Todd C. Miller <Todd.Miller@courtesan.com> 23953: 23954: * configure.in: 23955: added --with-incpath, --with-libpath, --with-libraries 23956: [20f20d6c718c] 23957: 23958: * parse.yacc: 23959: now initializes some fields that weren't getting set to -1 pretty 23960: gross -- need a rewrite. 23961: [021c160390c6] 23962: 23963: 1996-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 23964: 23965: * alloca.c: 23966: removed emacs'isms 23967: [9d4ec2efe057] 23968: 23969: * configure.in: 23970: no longer add -lPW to *_LIBS since we include alloca.c 23971: [a626d1bbea80] 23972: 23973: * config.h.in: 23974: added HAVE_ALLOCA_H 23975: [15491e2a6cff] 23976: 23977: * Makefile.in: 23978: added alloca.c 23979: [0400f25e1fe4] 23980: 23981: * alloca.c: 23982: Initial revision 23983: [06d033aa4882] 23984: 23985: * configure.in: 23986: ++version 23987: [f52c0fb98f90] 23988: 23989: 1996-06-25 Todd C. Miller <Todd.Miller@courtesan.com> 23990: 23991: * sudo.c: 23992: now set uid to 1 instead of nobody for PERM_SUDOERS since nobody is 23993: not always set to a valid uid. 23994: [c2669f77704d] 23995: 23996: * OPTIONS: 23997: fixed entry for SUDO_MODE 23998: [d7272f6035b8] 23999: 24000: * sudo.c: 24001: Fixed NFS-mounted sudoers file under solaris both uid *and* gid were 24002: being set to -2. Now beat NFS to the punch and set uid to "nobody" 24003: ourselves, preserving group 0 to read sudoers. 24004: [b1fbc5dd1e34] 24005: 24006: * parse.c: 24007: moved set_perms(PERM_ROOT) to be before yyparse() 24008: [7619d8080735] 24009: 24010: * logging.c: 24011: fixed a typo 24012: [318acc48cde0] 24013: 24014: * configure.in: 24015: no longer need AC_PROG_INSTALL 24016: [de01b1336dc8] 24017: 24018: * Makefile.in: 24019: always use install-sh to avoid install(1)'s that use get{pw,gr}nam 24020: [ea2351986406] 24021: 24022: * INSTALL: 24023: make clean -> make distclean 24024: [704a98e8ba10] 24025: 24026: 1996-06-20 Todd C. Miller <Todd.Miller@courtesan.com> 24027: 24028: * parse.yacc: 24029: removed some unnecsary if's 24030: [f00db6508132] 24031: 24032: * Makefile.in, version.h: 24033: ++version 24034: [bdb6740b24c8] 24035: 24036: * parse.c, testsudoers.c: 24037: now includes netgroup.h 24038: [93f5a06352bc] 24039: 24040: * interfaces.c: 24041: removed cats of ioctl to int since they didn't shut up -Wall 24042: [83e9f912cd7a] 24043: 24044: * interfaces.c: 24045: explicately cast ioctl() to int since it it not always declared 24046: [2ff9294e469e] 24047: 24048: * sudo.h: 24049: added declarations for yyparse() and yylex() 24050: [6071321ab771] 24051: 24052: * parse.yacc: 24053: fixed an occurence of '==' -> '=' 24054: [2c46d2e11d57] 24055: 24056: * config.h.in, configure.in: 24057: added check for netgroup.h 24058: [73403050f4e3] 24059: 24060: * sudo.c: 24061: fixed 2 compiler warnings 24062: [680929b0bd97] 24063: 24064: * sudo.c: 24065: SHELL_IF_NO_ARGS caused core dump since NewArg[cv] weren't being 24066: initialized 24067: [18707ecd07c2] 24068: 24069: 1996-06-19 Todd C. Miller <Todd.Miller@courtesan.com> 24070: 24071: * sudo.pod: 24072: fixed a typo 24073: [e4b5c12aa130] 24074: 24075: 1996-06-17 Todd C. Miller <Todd.Miller@courtesan.com> 24076: 24077: * parse.yacc: 24078: fixed a formatting thingie 24079: [c79327b6f19b] 24080: 24081: * parse.c, parse.yacc: 24082: fixed -u support with multiple user lists on a line 24083: [e4d1066adca2] 24084: 24085: * configure.in: 24086: unixware needs -lgen 24087: [b5bf9bca63cc] 24088: 24089: * README: 24090: updated ftp location 24091: [b25a033f7921] 24092: 24093: * sudoers.pod: 24094: add net_addr/netmask support 24095: [674e83516d1e] 24096: 24097: * sample.sudoers: 24098: added net_addr/mask example 24099: [774878e89b28] 24100: 24101: * parse.c, parse.lex: 24102: added support for net_addr/netmask 24103: [e33de27325d8] 24104: 24105: 1996-06-16 Todd C. Miller <Todd.Miller@courtesan.com> 24106: 24107: * sudoers.pod: 24108: ^ -> ! 24109: [1a084950d6ef] 24110: 24111: 1996-06-15 Todd C. Miller <Todd.Miller@courtesan.com> 24112: 24113: * RUNSON: 24114: updated for 1.4.3 24115: [c82019025d09] 24116: 24117: * CHANGES: 24118: udpated for 1.4.3 24119: [ceaa81adb8f0] 24120: 24121: * BUGS, TODO, TROUBLESHOOTING: 24122: updated 24123: [ff94fae4b853] 24124: 24125: * sample.sudoers: 24126: updated with examples of new stuff 24127: [99d0b4cb4c9c] 24128: 24129: * INSTALL, README: 24130: ++version 24131: [b763b80fe836] 24132: 24133: * sudoers.pod: 24134: updated wrt -u and NOPASSWD 24135: [0b5b722ea0f4] 24136: 24137: * sudo.pod: 24138: updated wrt -u and CAVEATS 24139: [71d5d53b5d18] 24140: 24141: 1996-06-09 Todd C. Miller <Todd.Miller@courtesan.com> 24142: 24143: * sudo.c: 24144: fixed usage() 24145: [114c7d09b550] 24146: 24147: * parse.lex: 24148: now use :foo: character classes (makes no diff for generated lexer) 24149: [7b0aeb737a02] 24150: 24151: 1996-06-07 Todd C. Miller <Todd.Miller@courtesan.com> 24152: 24153: * check.c: 24154: fixed LONG_SKEY_PROMPT stuff 24155: [0efe78b4bdda] 24156: 24157: 1996-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 24158: 24159: * visudo.c: 24160: fixed a comment 24161: [3d289017104b] 24162: 24163: * lsearch.c: 24164: make more like NetBSD one -- now compiles w/o warnings 24165: [932206296a54] 24166: 24167: * emul/search.h: 24168: fixed decls of lsearch() 24169: [c58cf4584c45] 24170: 24171: * config.h.in, configure.in, getspwuid.c: 24172: added SPW_HPUX10 24173: [d74e5eaa5f17] 24174: 24175: * check.c: 24176: hpux 10 uses bigcrypt() if C2 24177: [359eb63f4021] 24178: 24179: 1996-06-04 Todd C. Miller <Todd.Miller@courtesan.com> 24180: 24181: * parse.c: 24182: now always uses fnmatch to match args 24183: [a9d91f35256a] 24184: 24185: * tgetpass.c: 24186: back to using stdio instead of raw i/o since that caused some 24187: problems 24188: [e7ce2bc92974] 24189: 24190: 1996-05-29 Todd C. Miller <Todd.Miller@courtesan.com> 24191: 24192: * sudo.c: 24193: now give usage warning if use -l,-v,-k with args 24194: [6b48180c4fea] 24195: 24196: 1996-05-28 Todd C. Miller <Todd.Miller@courtesan.com> 24197: 24198: * sudo.c: 24199: NewArgc is now set to 1 for -l, -v, -k 24200: [7497cb1416a8] 24201: 24202: * sudo.c: 24203: now sets sudoers to correct group if mode is 0400 24204: [484c43d99718] 24205: 24206: * install-sh: 24207: updated to version used by inn and bind 24208: [28683ad8725a] 24209: 24210: * configure.in: 24211: now uses -lgnumalloc if it exists 24212: [3651ca4415a2] 24213: 24214: * Makefile.in: 24215: "make install" now sets uid/gid and mode on sudoers if it exists 24216: [1f5216191ae9] 24217: 24218: * sudo.c: 24219: rmeoved debugging statements 24220: [aeda278e2c26] 24221: 24222: * parse.yacc: 24223: added a missing free() 24224: [592c9482a159] 24225: 24226: * sudo.c: 24227: now uses user_gid instead of getegid (which was wrong anyway) to set 24228: SUDO_GID Now sets command line args in SUDO_COMMAND envariabled 24229: (logging.c depends on args being in the environment) 24230: [9f5328a3b942] 24231: 24232: * logging.c: 24233: now uses SUDO_COMMAND envariable to get command args rather than 24234: building it up again. 24235: [7f8edc5bccb7] 24236: 24237: * parse.c: 24238: now uses user_gid 24239: [4b9303ae45fe] 24240: 24241: * sudo.c: 24242: fixed off by one error in allocation NewArgv 24243: [921ea1a4e7c6] 24244: 24245: * parse.c: 24246: in sudoers, 'command ""' now means command with no args 24247: [a5273648ace2] 24248: 24249: * configure.in: 24250: added check for fnmatch(3) and fnmatch.h 24251: [258916a7866f] 24252: 24253: * config.h.in: 24254: added HAVE_FNMATCH 24255: [b9860d361e93] 24256: 24257: * Makefile.in: 24258: replaced wildcat.* with fnmatch.* 24259: [03ad9ee21a1c] 24260: 24261: * testsudoers.c: 24262: now uses fnmatch() 24263: [5a7f7de987a9] 24264: 24265: 1996-05-27 Todd C. Miller <Todd.Miller@courtesan.com> 24266: 24267: * parse.c: 24268: now uses fnmatch() instead of wildmat a trailing star (*) by itself 24269: now matches multiple args added support for wildcards in the 24270: pathname in sudoers 24271: [1f7fb950b868] 24272: 24273: 1996-05-25 Todd C. Miller <Todd.Miller@courtesan.com> 24274: 24275: * fnmatch.c: 24276: now includes compat.h and config.h 24277: [090206b95cf8] 24278: 24279: * config.h.in: 24280: added HAVE_FNMATCH_H 24281: [90eb42150173] 24282: 24283: * configure.in: 24284: now checks for alloca() (if needed by bison or dce) and links with 24285: -lPW if it contains alloca() and libv and compiler do not. 24286: [cfa2b3cef49a] 24287: 24288: * emul/fnmatch.h, fnmatch.3, fnmatch.c: 24289: Initial revision 24290: [20b1f762a32a] 24291: 24292: 1996-04-29 Todd C. Miller <Todd.Miller@courtesan.com> 24293: 24294: * sudo.c: 24295: now fixes mode on sudoers if set to 0400 to aid in upgrade 24296: [d4bdfd521820] 24297: 24298: 1996-04-28 Todd C. Miller <Todd.Miller@courtesan.com> 24299: 24300: * Makefile.in: 24301: fixed pod2man usage 24302: [5adf2ec77b27] 24303: 24304: * Makefile.in, configure.in, version.h: 24305: ++version 24306: [b4029de876d0] 24307: 24308: * testsudoers.c, visudo.c: 24309: runas_user is now initialized to "root" 24310: [8537d97bff39] 24311: 24312: * sudo.h: 24313: removed PERM_FULL_ROOT 24314: [241f8bbf647f] 24315: 24316: * sudo.c: 24317: runas_user defaults to "root" so no more need to PERM_RUNAS 24318: [fc0c0dfc72ba] 24319: 24320: * parse.c: 24321: will now only running commands as root if there was no runas list 24322: (or if root is in the runas list) 24323: [40c587666c81] 24324: 24325: * logging.c: 24326: now logs "USER=%s" 24327: [b733504c87fd] 24328: 24329: * parse.yacc: 24330: runas_matches is now set to false if we get a negative match 24331: [5495b150b300] 24332: 24333: * parse.lex: 24334: make #uid work + some minor cleanup 24335: [07851bbce03a] 24336: 24337: * sample.sudoers: 24338: added support for NOPASSWD and "runas" from garp@opustel.com / 24339: [7a9c67b51fa5] 24340: 24341: * visudo.c: 24342: added support for "runas" from garp@opustel.com replaced 24343: SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added support for 24344: SUDOERS_MODE 24345: [e714209b9885] 24346: 24347: * testsudoers.c: 24348: added support for "runas" from garp@opustel.com 24349: [b837f856da10] 24350: 24351: * sudo.h: 24352: added support for NO_PASSWD and runas from garp@opustel.com replaced 24353: SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support 24354: fro SUDOERS_MODE 24355: [cea6f26679b7] 24356: 24357: * sudo.c: 24358: added support for NO_PASSWD and runas from garp@opustel.com replaced 24359: SUDOERS_OWNER with SUDOERS_UID and SUDOERS_GID and added support fro 24360: SUDOERS_MODE 24361: [61b5434237c5] 24362: 24363: * parse.yacc: 24364: added support for NO_PASSWD and runas from garp@opustel.com 24365: [72ebd3056f22] 24366: 24367: * parse.c, parse.lex: 24368: added support for NO_PASSWD and runas from garp@opustel.com 24369: [fef6dbdd114d] 24370: 24371: * logging.c: 24372: added support for SUDOERS_WRONG_MODE and "runas" 24373: [e794efc2b443] 24374: 24375: * configure.in: 24376: added --with-CC only link with -lshadow on linux (with shadow pw) if 24377: libc lacks getspnam() 24378: [3ecf4ae21002] 24379: 24380: * OPTIONS, options.h: 24381: removed NO_PASSWD since it is not possible to do this in the sudoers 24382: file itself. Replaced SUDOERS_OWNER with SUDOERS_UID and 24383: SUDOERS_GID. Added SUDOERS_MODE. 24384: [2eaa4891ef48] 24385: 24386: * Makefile.in: 24387: now uses SUDOERS_UID and SUDOERS_GID 24388: [8d615f0fdb2a] 24389: 24390: 1996-04-27 Todd C. Miller <Todd.Miller@courtesan.com> 24391: 24392: * INSTALL: 24393: added --with-CC 24394: [a1b8286a81b8] 24395: 24396: 1996-04-06 Todd C. Miller <Todd.Miller@courtesan.com> 24397: 24398: * parse.lex: 24399: added double quote support 24400: [a5e4fc7e3a2b] 24401: 24402: * sudoers.pod: 24403: documented double quoting 24404: [c6ea47969a44] 24405: 24406: 1996-04-05 Todd C. Miller <Todd.Miller@courtesan.com> 24407: 24408: * mkinstalldirs: 24409: Initial revision 24410: [dcb86d65ad8f] 24411: 24412: * check.c: 24413: fixed some indentation 24414: [4d1c5ab8072b] 24415: 24416: * Makefile.in: 24417: fixed a typo 24418: [0d27eebc7227] 24419: 24420: * Makefile.in: 24421: added install-dirs . 24422: [f499b99b8be7] 24423: 24424: 1996-04-04 Todd C. Miller <Todd.Miller@courtesan.com> 24425: 24426: * dce_pwent.c: 24427: new version from "Jeff A. Earickson" <jaearick@colby.edu> 24428: [422481be5fbd] 24429: 24430: 1996-04-03 Todd C. Miller <Todd.Miller@courtesan.com> 24431: 24432: * configure.in: 24433: $CSOPS -> $with_csops (whoops, missed one) 24434: [b04c6948130e] 24435: 24436: * BUGS: 24437: updated 24438: [c4d5713e227d] 24439: 24440: * parse.lex: 24441: FQHOST now has same constraints as non-FQHOST 24442: [e1c3bf2381d1] 24443: 24444: * INSTALL: 24445: added note about OS's w/ shadow passwords turned on by default 24446: [166257f43be4] 24447: 24448: 1996-04-02 Todd C. Miller <Todd.Miller@courtesan.com> 24449: 24450: * configure.in: 24451: fixed a typo 24452: [e5c3e2e9a359] 24453: 24454: * configure.in: 24455: added support for --without-THING sanitized shadow pw situtation by 24456: adding support for 24457: --without-C2 24458: [65dc6bf64cce] 24459: 24460: * tgetpass.c: 24461: fixed a typo wrt placement of an end paren 24462: [a8780f818231] 24463: 24464: * check.c: 24465: was closing an fd that may not have been opened 24466: [760271c7bdc9] 24467: 24468: 1996-03-22 Todd C. Miller <Todd.Miller@courtesan.com> 24469: 24470: * OPTIONS, options.h, sudo.c: 24471: added NO_PASSWD 24472: [28ff1dc93d7a] 24473: 24474: 1996-03-20 Todd C. Miller <Todd.Miller@courtesan.com> 24475: 24476: * configure.in: 24477: now always use shadow pw on some arches 24478: [069161ccffda] 24479: 24480: 1996-03-19 Todd C. Miller <Todd.Miller@courtesan.com> 24481: 24482: * configure.in: 24483: added pyramid support 24484: [a0eb57a3a531] 24485: 24486: * configure.in: 24487: no longer check for C2 if alternate passwd method is used no longer 24488: check for some libs twice 24489: [2d0c3c902b40] 24490: 24491: * parse.yacc: 24492: moved fqdn stuff into parse.lex (FQHOST) 24493: [d9c9abd481d8] 24494: 24495: * parse.lex: 24496: added FQHOST rules 24497: [4a1695acff6d] 24498: 24499: * tgetpass.c: 24500: now define TCSASOFT in necesary 24501: [3fac2e21c9ab] 24502: 24503: * tgetpass.c: 24504: now uses read/write instead of stdio string goop to avoid problems 24505: with select(2) 24506: [67fd174e518c] 24507: 24508: * OPTIONS, find_path.c, options.h: 24509: -DNO_DOT_PATH -> -DIGNORE_DOT_PATH 24510: [d05ba5100d28] 24511: 24512: 1996-03-17 Todd C. Miller <Todd.Miller@courtesan.com> 24513: 24514: * INSTALL: 24515: added note about no shadow auto-detect if using alternate auth 24516: schemes 24517: [b425592232a3] 24518: 24519: * configure.in: 24520: don't check for C2 if AFS or DCE (unless they said --with-C2) 24521: [61342962171a] 24522: 24523: * testsudoers.c: 24524: now groks shost 24525: [85dda17303f6] 24526: 24527: * OPTIONS, find_path.c, options.h: 24528: added NO_DOT_PATH 24529: [c261ca1fb196] 24530: 24531: 1996-03-16 Todd C. Miller <Todd.Miller@courtesan.com> 24532: 24533: * find_path.c: 24534: checkdot now works correctly 24535: [3bc4835bb3e9] 24536: 24537: 1996-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 24538: 24539: * configure.in: 24540: can't have DCE and C2 passwords both... 24541: [fb9a8ab7ca66] 24542: 24543: 1996-03-11 Todd C. Miller <Todd.Miller@courtesan.com> 24544: 24545: * parse.yacc, sudo.c, sudo.h, visudo.c: 24546: now uses shost even if not FQDN 24547: [87f7498b3a1f] 24548: 24549: * configure.in: 24550: now looks for skey in /usr/lib and doesn't require libskey to be in 24551: /usr/local/lib just because skey.h is (for my netbsd box :-) 24552: [ceb1763e37d2] 24553: 24554: * aclocal.m4, config.h.in, pathnames.h.in: 24555: _SUDO_PATH_ -> _CONFIG_PATH_ 24556: [84d97ad13d75] 24557: 24558: * aclocal.m4, sudo.pod: 24559: /var/run/.odus -> /var/run/sudo 24560: [922da220b8f5] 24561: 24562: * pathnames.h.in: 24563: now uses _SUDO_PATH_TIMEDIR 24564: [5ecab0155fdf] 24565: 24566: * OPTIONS: 24567: udpated FQDN 24568: [361b6f7440c0] 24569: 24570: * aclocal.m4, configure.in: 24571: added SUDO_TIMEDIR 24572: [368c95c8c950] 24573: 24574: * config.h.in: 24575: added _SUDO_PATH_TIMEDIR 24576: [3879864d808c] 24577: 24578: * sudo.pod: 24579: updated wrt /var/run/sudo 24580: [9e14f2a429d3] 24581: 24582: * sudo.c, sudo.h: 24583: added support for shost if FQDN 24584: [51a3f51a09a1] 24585: 24586: * parse.yacc, visudo.c: 24587: now uses shost if FQDN 24588: [d19da2e92b42] 24589: 24590: * check.c: 24591: Now use skeylookup() instead off skeychallenge() 24592: [4c7438bb2ae0] 24593: 24594: 1996-02-28 Todd C. Miller <Todd.Miller@courtesan.com> 24595: 24596: * logging.c: 24597: mail_argv should not contain ALERTMAIL as it includes "-t" 24598: [67ffaaa8f843] 24599: 24600: 1996-02-22 Todd C. Miller <Todd.Miller@courtesan.com> 24601: 24602: * INSTALL, Makefile.in, README, configure.in, version.h: 24603: ++version 24604: [e08fd4a809fc] 24605: 24606: * compat.h: 24607: added more _PASSWD_LEN stuff -- now uses PASS_MAX too 24608: [2f20c3153689] 24609: 24610: * tgetpass.c: 24611: now includes limits.h moved _PASSWD_LEN -> compat.h 24612: [b1ca3cafdacc] 24613: 24614: 1996-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 24615: 24616: * INSTALL, README: 24617: ++version 24618: [3eacf32803f5] 24619: 24620: * Makefile.in: 24621: ++versoin 24622: [3b91c317630a] 24623: 24624: * Makefile.in: 24625: fixed a typo 24626: [3661ac4a7803] 24627: 24628: * configure.in: 24629: ++version 24630: [60e842973745] 24631: 24632: 1996-02-05 Todd C. Miller <Todd.Miller@courtesan.com> 24633: 24634: * RUNSON: 24635: updated 24636: [def2c3c24195] 24637: 24638: * CHANGES: 24639: done for 1.4.1 (I hope) 24640: [2ab543769a40] 24641: 24642: * sudoers.pod: 24643: added info on wildcards 24644: [ce3bd41bc063] 24645: 24646: * sample.sudoers: 24647: added wildcard example 24648: [762feb0577bd] 24649: 24650: * Makefile.in: 24651: now uses *.pod to build *.man and *.cat & *.html 24652: [3ec14962028b] 24653: 24654: * configure.in: 24655: addedSUDO_PROG_BSHELL !ll 24656: [3c80b320bf16] 24657: 24658: * visudo.pod: 24659: fixed up some formatting 24660: [12166c434526] 24661: 24662: * sudoers.pod: 24663: redid section describing sample sudoers stuff 24664: [b8065cceec71] 24665: 24666: * sudo.pod: 24667: fixed some formatting 24668: [aa9a681add0f] 24669: 24670: * getspwuid.c: 24671: now treats "" as bourne shell 24672: [30194a72ad56] 24673: 24674: * Makefile.in: 24675: TESTOBJS nwo includes wildmat.o 24676: [86cc6500f84d] 24677: 24678: * testsudoers.c: 24679: now works with NewArg[cv] 24680: [2f72674ce942] 24681: 24682: * sudo.c: 24683: removed an XXX (fixed it in getspwuid.c) 24684: [e791ee0d1a68] 24685: 24686: * aclocal.m4: 24687: added check for bourne shell 24688: [a2fd51676b8a] 24689: 24690: * pathnames.h.in: 24691: added _PATH_BSHELL 24692: [e7c10011d47b] 24693: 24694: * config.h.in: 24695: added _SUDO_PATH_BSHELL 24696: [6a1182898de9] 24697: 24698: 1996-02-04 Todd C. Miller <Todd.Miller@courtesan.com> 24699: 24700: * visudo.c: 24701: unixware vi returns 256 instead of 0 24702: [234ffc7c6786] 24703: 24704: * INSTALL: 24705: added Linux note 24706: [5f85efcd2b58] 24707: 24708: * logging.c: 24709: fixed up some XXX's. file log format now looks a little more like 24710: real syslog(3) format. 24711: [6df55707bfc3] 24712: 24713: * README, TROUBLESHOOTING: 24714: updated wrt lex/flex 24715: [eb787d69156b] 24716: 24717: * Makefile.in: 24718: commented out rule to build lex.yy.c from parse.lex since we ship 24719: with a pre-flex'd parser 24720: [7507e2ce4a95] 24721: 24722: * parse.c, parse.yacc, visudo.c: 24723: path_matches -> command_matches 24724: [0bd469424f86] 24725: 24726: * logging.c: 24727: eliminated some strcat()'s 24728: [9878a79bc374] 24729: 24730: * configure.in: 24731: no longer checks for lex/flex (now assumes flex) 24732: [a086ccc73798] 24733: 24734: * configure.in: 24735: now checks for $kerb_dir_candidate/krb.h instead of just 24736: kerb_dir_candidate 24737: [9133bc3c5208] 24738: 24739: 1996-02-03 Todd C. Miller <Todd.Miller@courtesan.com> 24740: 24741: * parse.yacc: 24742: now use a 'hook' expression instead of an iffy one :-) 24743: [9560df01b8c0] 24744: 24745: 1996-02-02 Todd C. Miller <Todd.Miller@courtesan.com> 24746: 24747: * visudo.c: 24748: now works with new sudo arg stuff 24749: [310a0d43ddad] 24750: 24751: * parse.yacc: 24752: fixed dereferencing deadbeef 24753: [474ef8a8006b] 24754: 24755: * sudo.c: 24756: changed an occurrence of Argv to NewArgv 24757: [205b012b7691] 24758: 24759: * parse.lex: 24760: took out support for quoted commands since there is no need... 24761: [5c5036d353b1] 24762: 24763: * parse.c: 24764: fixed a typo in a for() loop 24765: [7e8d5283c43b] 24766: 24767: * logging.c: 24768: protected against dereferencing rogue pointers 24769: [56debd517717] 24770: 24771: * sudo.c: 24772: now uses NewArgv amd NewArgc so cmnd_aegs is no longer needed this 24773: also allows us to eliminate some kludges in parse_args() and 24774: eliminate superfluous code. 24775: [5122f66ad150] 24776: 24777: * logging.c: 24778: no longer uses cmnd_args, now uses NewArgv instead. 24779: [abddd23cf068] 24780: 24781: * sudo.h: 24782: added struct sudo_command, NewArgc, and NewArgv removed cmnd_args 24783: (no longer used) 24784: [78410984fb05] 24785: 24786: * Makefile.in: 24787: added wildmat.c to SRCS & SUDOBJS 24788: [3800efb41794] 24789: 24790: * parse.yacc: 24791: COMMAND is now a struct containing the path and args 24792: [5c32822c5b94] 24793: 24794: * parse.lex: 24795: replaced append() with fill_cmnd() and fill_args. command args from 24796: a sudoers entry are now stored in an arrary for easy matching. 24797: [a981d7f4eb0d] 24798: 24799: * parse.c: 24800: command line args from sudoers file are now in an array like ones 24801: passed in from the command line 24802: [1d9e37e84519] 24803: 24804: 1996-02-01 Todd C. Miller <Todd.Miller@courtesan.com> 24805: 24806: * parse.c: 24807: wildwat stuff now works 24808: [49d16488531f] 24809: 24810: 1996-01-29 Todd C. Miller <Todd.Miller@courtesan.com> 24811: 24812: * version.h: 24813: ++version 24814: [53e55463ef89] 24815: 24816: * Makefile.in: 24817: ++version added wildmat.* 24818: [0508297a4711] 24819: 24820: 1996-01-28 Todd C. Miller <Todd.Miller@courtesan.com> 24821: 24822: * parse.lex: 24823: added support for quoted commands (w/ or w/o args) 24824: [b9a637155673] 24825: 24826: 1996-01-22 Todd C. Miller <Todd.Miller@courtesan.com> 24827: 24828: * sudo.pod, visudo.pod: 24829: cleaned up formatting 24830: [4591d4195437] 24831: 24832: * sudo.pod, visudo.pod: 24833: Initial revision 24834: [7564a8242750] 24835: 24836: 1996-01-21 Todd C. Miller <Todd.Miller@courtesan.com> 24837: 24838: * sudoers.pod: 24839: looks reasonable, could be mroe readable 24840: [a5be2d19d9e0] 24841: 24842: * sudoers.pod: 24843: Initial revision 24844: [957888be31a6] 24845: 24846: 1996-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 24847: 24848: * RUNSON: 24849: updated 24850: [633743aa924b] 24851: 24852: * OPTIONS: 24853: updated NO_ROOT_SUDO entry 24854: [f1c15b1dec9e] 24855: 24856: 1996-01-15 Todd C. Miller <Todd.Miller@courtesan.com> 24857: 24858: * RUNSON: 24859: *** empty log message *** 24860: [5b63de579ff7] [SUDO_1_4_0] 24861: 24862: * sudo.c: 24863: fixed SECURE_PATH 24864: [6002889f606d] 24865: 24866: * RUNSON: 24867: udpa`ted for 1.4 24868: [6014a8592815] 24869: 24870: * configure.in: 24871: AIX aixcrypt.exp now uses $(srcdir) 24872: [b0d57674fef4] 24873: 24874: * TROUBLESHOOTING: 24875: added entry for anal ansi compilers 24876: [4193cec1c6b1] 24877: 24878: 1996-01-14 Todd C. Miller <Todd.Miller@courtesan.com> 24879: 24880: * INSTALL: 24881: added info on libcrypt_i for SCO 24882: [575497d56698] 24883: 24884: * TODO: 24885: *** empty log message *** 24886: [d0aaf67b9913] 24887: 24888: * sample.sudoers: 24889: added comments 24890: [a7773f7eda8d] 24891: 24892: * TODO: 24893: 1.4 release 24894: [1dade29e9fd9] 24895: 24896: * CHANGES: 24897: ++version 24898: [67241be40780] 24899: 24900: * INSTALL, OPTIONS, README, config.h.in, configure.in: 24901: ++version 24902: [2e0a37897f68] 24903: 24904: * BUGS: 24905: ++version and fixed ISC 24906: [78963f01a0e3] 24907: 24908: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c, getwd.c, 24909: goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, 24910: insults.h, logging.c, options.h, pathnames.h.in, putenv.c, strdup.c, 24911: sudo.c, sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, 24912: visudo.c: 24913: ++version 24914: [b6227f29b3d9] 24915: 24916: * interfaces.c: 24917: added STUB_LOAD_INTERFACES ++version 24918: [d8150a3fd577] 24919: 24920: * Makefile.in, emul/utime.h, parse.c, parse.lex, parse.yacc, 24921: version.h: 24922: ++version 24923: [da9e90e69bdc] 24924: 24925: * PORTING: 24926: added info about fd_set in tgetpass added info on interfaces.c 24927: [a39902febd17] 24928: 24929: 1996-01-11 Todd C. Miller <Todd.Miller@courtesan.com> 24930: 24931: * dce_pwent.c: 24932: added sudo header 24933: [fc0f2c48682e] 24934: 24935: * tgetpass.c: 24936: fixed a typo 24937: [43d40b72ee8f] 24938: 24939: * Makefile.in: 24940: tgetpass.o is now only linked in with sudo (not visudo) 24941: [7407c5ff11f8] 24942: 24943: 1996-01-09 Todd C. Miller <Todd.Miller@courtesan.com> 24944: 24945: * BUGS, INSTALL, Makefile.in, OPTIONS, README, config.h.in, 24946: configure.in: 24947: ++version 24948: [9b82ad805d6b] 24949: 24950: * emul/utime.h: 24951: added copyright notice 24952: [4380f16cd075] 24953: 24954: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c, 24955: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h, 24956: interfaces.c, logging.c, options.h, parse.c, parse.lex, parse.yacc, 24957: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, 24958: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c: 24959: ++version 24960: [32717fdb5d05] 24961: 24962: * tgetpass.c: 24963: minor cleanup and now includes sys/bsdtypes for svr4'ish boxen 24964: [326864428da2] 24965: 24966: * configure.in: 24967: ISC now gets -lcrypt now check for sys/bsdtypes.h 24968: [e064799c054b] 24969: 24970: * config.h.in: 24971: added check for sys/bsdtypes.h 24972: [9adb9533c363] 24973: 24974: 1996-01-07 Todd C. Miller <Todd.Miller@courtesan.com> 24975: 24976: * parse.yacc: 24977: removed debugging stuff (setting freed ptr to NULL) 24978: [02fe8eec63a0] 24979: 24980: * TROUBLESHOOTING: 24981: added 2 entries 24982: [02884e2733e2] 24983: 24984: * Makefile.in: 24985: added FAQ 24986: [074d8dfcf28d] 24987: 24988: * TROUBLESHOOTING: 24989: added section on syslog 24990: [e6bc02a22b86] 24991: 24992: * configure.in: 24993: added AC_ISC_POSIX for better ISC support 24994: [8436b3e12af2] 24995: 24996: * config.h.in: 24997: fixed typo 24998: [f1b3922babf4] 24999: 25000: * config.h.in: 25001: added define for _POSIX_SOURCE 25002: [ded6d92b34f9] 25003: 25004: 1996-01-04 Todd C. Miller <Todd.Miller@courtesan.com> 25005: 25006: * configure.in: 25007: fixed check for lsearch() 25008: [75baa5bc28a3] 25009: 25010: 1995-12-22 Todd C. Miller <Todd.Miller@courtesan.com> 25011: 25012: * interfaces.c: 25013: fixed for AIX now deal if num_interfaces == 0 (should not happen) 25014: [ae450e859227] 25015: 25016: 1995-12-20 Todd C. Miller <Todd.Miller@courtesan.com> 25017: 25018: * configure.in: 25019: now only define HAVE_LSEARCH if there is a corresponding search.h 25020: [8ce645c5d17f] 25021: 25022: * interfaces.c: 25023: works on ISC again 25024: [ccac920d424c] 25025: 25026: 1995-12-18 Todd C. Miller <Todd.Miller@courtesan.com> 25027: 25028: * configure.in: 25029: now define HAVE_LSEARCH if we find lsearch() in libcompat 25030: [7343e4313a87] 25031: 25032: * lsearch.c: 25033: char * -> const char * 25034: [1c0b11c2300a] 25035: 25036: * configure.in: 25037: now looks in -lcompat for lsearch() 25038: [a1cc1d6fcd09] 25039: 25040: * Makefile.in: 25041: remove sudo.core visudo.core for clan target 25042: [b523456a85df] 25043: 25044: * aclocal.m4: 25045: added UID_MAX support in check for MAX_UID_T_LEN 25046: [7ab262b1173f] 25047: 25048: * Makefile.in: 25049: fixed another occurence of sudo_getpwuid.* 25050: [fb5809c07da2] 25051: 25052: * Makefile.in, getspwuid.c: 25053: sudo_getpwuid.c -> getspwuid.c 25054: [875f2ef808b4] 25055: 25056: * configure.in: 25057: moved the "echo" 25058: [ad7b8f966076] 25059: 25060: * BUGS, CHANGES, INSTALL, Makefile.in, OPTIONS, README, check.c, 25061: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c, 25062: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, 25063: ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c, 25064: parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, 25065: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, 25066: version.h, visudo.c: 25067: ++version 25068: [ee57c6410ffa] 25069: 25070: * testsudoers.c: 25071: added group support 25072: [54d8097df8bd] 25073: 25074: * sample.sudoers: 25075: added group entry 25076: [50994d31fd49] 25077: 25078: * sudoers.man: 25079: documented group support 25080: [0a16707f8fed] 25081: 25082: * parse.c, parse.lex, parse.yacc, visudo.c: 25083: added group support 25084: [427218c879c8] 25085: 25086: 1995-12-15 Todd C. Miller <Todd.Miller@courtesan.com> 25087: 25088: * check.c: 25089: tkfile was too short and overflowed the kerberos realm 25090: [53823a1ff5af] 25091: 25092: 1995-12-11 Todd C. Miller <Todd.Miller@courtesan.com> 25093: 25094: * sudo.c: 25095: now copy command args directly from Argv 25096: [77408278b6fd] 25097: 25098: * sudo.c: 25099: replaced code to copy cmnd_args so that is does not use realloc 25100: since most realloc()'s really stink 25101: [b29a0ff73fb6] 25102: 25103: 1995-12-08 Todd C. Miller <Todd.Miller@courtesan.com> 25104: 25105: * configure.in: 25106: syslog() fixed in hpux 10.01 25107: [2648e6f0cdb0] 25108: 25109: 1995-12-06 Todd C. Miller <Todd.Miller@courtesan.com> 25110: 25111: * configure.in: 25112: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS if appropriate) 25113: [8f108b8d8711] 25114: 25115: * configure.in: 25116: better error if cannot find skey incs or libs 25117: [5887662ee9d3] 25118: 25119: * aclocal.m4: 25120: now use a temp file for determining max len of uid_t in string form. 25121: the old hacky way broke on netbsd 25122: [b68f470fa9f8] 25123: 25124: * sudo.c: 25125: added set of parens and a space 25126: [8a3d4826d022] 25127: 25128: 1995-12-05 Todd C. Miller <Todd.Miller@courtesan.com> 25129: 25130: * dce_pwent.c: 25131: fixes from Jeff Earickson <jaearick@colby.edu> , 25132: [bde0f0b756ec] 25133: 25134: * check.c: 25135: modified a comment 25136: [e2a97f1afbbe] 25137: 25138: * Makefile.in: 25139: fixed up testsudoers target 25140: [d39c4e7bb609] 25141: 25142: * configure.in: 25143: DCE changes from Jeff Earickson <jaearick@colby.edu> LIBS -> 25144: SUDO_LIBS and VISUDO_LIBS LDFLAGS -> SUDO_FDFLAGS and VISUDO_LDFLAGS 25145: [da7a1c433828] 25146: 25147: * Makefile.in: 25148: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS -> SUDO_LDFLAGS, 25149: VISUDO_LDFLAGS 25150: [4b69503e8487] 25151: 25152: 1995-11-28 Todd C. Miller <Todd.Miller@courtesan.com> 25153: 25154: * configure.in: 25155: fix for C2 on hpux 10 now uses -linet if it exists 25156: [8d300112263d] 25157: 25158: * check.c: 25159: LONG_SKEY_PROMPT is less of a klusge / 25160: [dcc144abaac3] 25161: 25162: * configure.in: 25163: fixed typos w/ dce stuff 25164: [f7dfd6d4e149] 25165: 25166: * Makefile.in: 25167: added dce_pwent.c 25168: [79047acdc516] 25169: 25170: 1995-11-26 Todd C. Miller <Todd.Miller@courtesan.com> 25171: 25172: * INSTALL: 25173: amended section on combining authentication mechanisms 25174: [dc5138c7c716] 25175: 25176: * PORTING: 25177: minor updates for 1.3.6 25178: [fe80c13bd994] 25179: 25180: * TROUBLESHOOTING: 25181: added 2 more entries 25182: [c7201439a0f5] 25183: 25184: * BUGS: 25185: updated for 1.3.6 25186: [979b414d2a2d] 25187: 25188: * README: 25189: overhauled 25190: [3af8b60eb594] 25191: 25192: * INSTALL: 25193: rewrote for sudo 1.3.6 25194: [b16027b9c726] 25195: 25196: * TROUBLESHOOTING: 25197: added 3 entries 25198: [934c9ee3f153] 25199: 25200: 1995-11-25 Todd C. Miller <Todd.Miller@courtesan.com> 25201: 25202: * find_path.c, getspwuid.c, sudo.c: 25203: added explict casts for strdup since many includes don't prototype 25204: it. gag me. 25205: [3e19a11f2fcc] 25206: 25207: * sudo.h: 25208: removed prototype for sudo_getpwuid() since convex C compiler choked 25209: on it. 25210: [c3ea74ca67b0] 25211: 25212: * sudo.c: 25213: added prototype for sudo_getpwuid() 25214: [4a8e3cdc2b98] 25215: 25216: * lsearch.c: 25217: now compiles on strict ANSI compilers 25218: [3ce5d72d0b08] 25219: 25220: * check.c: 25221: added LONG_SKEY_PROMPT support 25222: [48a18b8a2332] 25223: 25224: * Makefile.in: 25225: added extra $'s for make to eat up, yum. 25226: [2995b214e12b] 25227: 25228: * OPTIONS, options.h: 25229: added LONG_SKEY_PROMPT 25230: [f23ae799b5a4] 25231: 25232: 1995-11-24 Todd C. Miller <Todd.Miller@courtesan.com> 25233: 25234: * check.c: 25235: s/key support now works with normal s/key as well as logdaemon 25236: [d67573f523bf] 25237: 25238: * OPTIONS, options.h: 25239: added SKEY_ONLY 25240: [bbf07654e0de] 25241: 25242: * compat.h: 25243: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY 25244: [205895b96a36] 25245: 25246: * INSTALL: 25247: added DCE note added more AIX notes 25248: [6345403b3522] 25249: 25250: * sudo.c: 25251: now include pthread.h for DCE support 25252: [6fe02865f679] 25253: 25254: * check.c: 25255: dce_pwent() is ok after all ., 25256: [d26a8746a55d] 25257: 25258: * logging.c: 25259: now uses SYSLOG() macro that equates to either syslog() or 25260: syslog_wrapper 25261: [42ac4cff8045] 25262: 25263: * dce_pwent.c: 25264: minor formatting changes. renamed check() to somthing less generic 25265: [71859f217be1] 25266: 25267: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c, 25268: visudo.c: 25269: now uses user_pw_ent and simple macros to get at the contents 25270: [f4cbf3e7145a] 25271: 25272: 1995-11-23 Todd C. Miller <Todd.Miller@courtesan.com> 25273: 25274: * check.c: 25275: simpler dec unix C2 support 25276: [86bc8f75250e] 25277: 25278: * getspwuid.c: 25279: now sets crypt_type for DEC unix C2 25280: [99aeadd18266] 25281: 25282: 1995-11-21 Todd C. Miller <Todd.Miller@courtesan.com> 25283: 25284: * configure.in: 25285: added csops paths for skey 25286: [b8ca672e2117] 25287: 25288: * getspwuid.c: 25289: now includes string.h for strdup() prototype 25290: [3605259c3620] 25291: 25292: * getspwuid.c: 25293: fixed a few typos 25294: [46c97e4ea417] 25295: 25296: * check.c: 25297: now includes skey.h 25298: [11e611ce1b61] 25299: 25300: * getspwuid.c: 25301: fixed up comments 25302: [223dac56f0c8] 25303: 25304: * check.c: 25305: moved a lot of the shadow passwd crap to sudo_getpwuid() 25306: [97d8887fb7d3] 25307: 25308: * sudo.c: 25309: now uses sudo_pw_ent 25310: [d014dadbef48] 25311: 25312: * testsudoers.c: 25313: now uses sudo_pw_ent 25314: [d92936ed7e34] 25315: 25316: * visudo.c: 25317: now sets sudo_pw_ent 25318: [ff75cdfcf8b3] 25319: 25320: * getspwuid.c: 25321: Initial revision 25322: [6deb6df9d7bc] 25323: 25324: * tgetpass.c: 25325: moved dce stuff into compat.h 25326: [1124284396e7] 25327: 25328: * logging.c, sudo.h: 25329: now uses sudo_pw_ent 25330: [404ff20a5067] 25331: 25332: * Makefile.in: 25333: added sudo_getpwuid.c 25334: [6666d0644512] 25335: 25336: * compat.h: 25337: added dce support 25338: [3c3b36a7ce0e] 25339: 25340: * parse.yacc: 25341: now uses sudo_pw_ent 25342: [9f5e8d11bd68] 25343: 25344: 1995-11-20 Todd C. Miller <Todd.Miller@courtesan.com> 25345: 25346: * check.c: 25347: fixed exempt_group stuff for OS's that don't put base gid in group 25348: vector 25349: [003f153bd396] 25350: 25351: * check.c: 25352: S/Key support now works with sunos4 shadow passwords 25353: [1eb64a5efff1] 25354: 25355: * Makefile.in: 25356: fixed clean rule 25357: [5695a2c62816] 25358: 25359: * config.h.in, configure.in: 25360: added DCE support 25361: [f53c766c1947] 25362: 25363: * tgetpass.c: 25364: DCE & KERB support 25365: [904cf436506a] 25366: 25367: * check.c: 25368: first stab at dce support 25369: [aea5ca07b1e3] 25370: 25371: * dce_pwent.c: 25372: now smells like sudo 25373: [8b3d609b49cd] 25374: 25375: * dce_pwent.c: 25376: Initial revision 25377: [b573555f2399] 25378: 25379: * check.c: 25380: skey'd sudo now works w/ normal password as well 25381: [8d038f9f6e94] 25382: 25383: 1995-11-19 Todd C. Miller <Todd.Miller@courtesan.com> 25384: 25385: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in, find_path.c, 25386: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h, 25387: ins_goons.h, insults.h, interfaces.c, logging.c, options.h, parse.c, 25388: parse.lex, parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, 25389: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, 25390: version.h, visudo.c: 25391: updated version number 25392: [ba7e346d7904] 25393: 25394: * README: 25395: updated to reflect version change 25396: [1d15cf1d8cc8] 25397: 25398: * configure.in: 25399: --with options now line up ++version 25400: [08ebf625fbca] 25401: 25402: * sudo.h: 25403: removed unecesary S/Key stuff 25404: [68188cba90af] 25405: 25406: * configure.in: 25407: fixed S/Key support 25408: [f6d9cbc36618] 25409: 25410: * Makefile.in: 25411: -I stuff now goes in CPPFLAGS 25412: [7b8e53c5b046] 25413: 25414: * check.c: 25415: fixed SKey support 25416: [52c1a5cf4435] 25417: 25418: * README: 25419: updated version 25420: [bed6498a10bb] 25421: 25422: * OPTIONS: 25423: fixed description of EXEMPTGROUP 25424: [cfeead55edc2] 25425: 25426: * sudo.c: 25427: more people use _RLD_ than just alphas... 25428: [6a3c7090a6f6] 25429: 25430: * Makefile.in: 25431: replaced $man_prefix with $mandir 25432: [dc4b36a550e2] 25433: 25434: * configure.in: 25435: fixed a typo 25436: [a38a4acddcaf] 25437: 25438: * Makefile.in: 25439: now use more GNU'ish dir names 25440: [c5498391a520] 25441: 25442: * configure.in: 25443: now set *dir correctly (can override from command line) 25444: [523ff98fd438] 25445: 25446: * sudo.c: 25447: now deal with situations where we getwd() fails 25448: [88a9e61dccbb] 25449: 25450: 1995-11-17 Todd C. Miller <Todd.Miller@courtesan.com> 25451: 25452: * Makefile.in: 25453: added etc_dir, bin_dir, sbin_dir 25454: [75fd08d92842] 25455: 25456: * configure.in: 25457: added sbin_dir 25458: [3cb318c0d8d1] 25459: 25460: * Makefile.in: 25461: now ship a flex-generated lex.yy.c 25462: [4d083ed70dce] 25463: 25464: * Makefile.in: 25465: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP, SUDOERS_OWNER 25466: [4d51dc9c3780] 25467: 25468: * pathnames.h.in: 25469: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now overridden via Makefile 25470: [773fd163d52f] 25471: 25472: * options.h: 25473: no more error for redefining SUDOERS_OWNER 25474: [4ba336644c6a] 25475: 25476: * OPTIONS: 25477: expanded SUDOERS_OWNER section 25478: [12fae405759e] 25479: 25480: 1995-11-16 Todd C. Miller <Todd.Miller@courtesan.com> 25481: 25482: * visudo.c: 25483: now warn if chown(2) failed 25484: [d0d1db6e3a1f] 25485: 25486: * logging.c: 25487: better default warning for NO_SUDOERS_FILE 25488: [5260b458ac64] 25489: 25490: * sudo.c: 25491: added missing set_perms() no more cryptic message if the sudoers 25492: file is zero length, now just give a parse error 25493: [b81ea724838a] 25494: 25495: * logging.c: 25496: better diagnostics if NO_SUDOERS_FILE 25497: [877e878663c5] 25498: 25499: * sudo.c: 25500: check_sudoers() now catches sudoers files that are not readable (but 25501: are stat'able). 25502: [fea05663b3de] 25503: 25504: 1995-11-13 Todd C. Miller <Todd.Miller@courtesan.com> 25505: 25506: * configure.in: 25507: now add -D__STDC__ for convex cc (not gcc) 25508: [c80fc53ff51b] 25509: 25510: * configure.in: 25511: MAN_PREFIX -> man_prefix now sets prefix and exec_prefix 25512: [fe238226a057] 25513: 25514: * Makefile.in: 25515: now uses exec_prefix & prefix from configure 25516: [f62fca5f56bd] 25517: 25518: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c, parse.c, 25519: parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c, tgetpass.c, 25520: utime.c, visudo.c: 25521: options.h is now <> instead of "" so shadow build trees can have a 25522: custom copy of options.h 25523: [e6782676099c] 25524: 25525: * check.c: 25526: user_is_exempt() is no longer a hack, it now uses getgrnam() 25527: [287f8d5356f7] 25528: 25529: * options.h: 25530: EXEMPTGROUP is now "sudo" 25531: [61487304dbe1] 25532: 25533: * configure.in: 25534: MAN_POSTINSTALL now contains a leading space 25535: [eaad4ac34012] 25536: 25537: * Makefile.in: 25538: removed leading tab if @MAN_POSTINSTALL@ not defined now removes 25539: testsudoers in clean: 25540: [e01711baceb8] 25541: 25542: * tgetpass.c: 25543: includes pwd.h to get _PASSWD_LEN definition 25544: [8ec174f263f1] 25545: 25546: 1995-10-30 Todd C. Miller <Todd.Miller@courtesan.com> 25547: 25548: * sudo.c: 25549: unset the KRB_CONF envariable if using kerberos so we don't get 25550: spoofed into using a bogus server 25551: [2561a0274fca] 25552: 25553: 1995-09-29 Todd C. Miller <Todd.Miller@courtesan.com> 25554: 25555: * parse.yacc: 25556: now explicately initialize match[] tp be FALSE 25557: [0e45e5c47766] 25558: 25559: 1995-09-23 Todd C. Miller <Todd.Miller@courtesan.com> 25560: 25561: * sudo.c: 25562: removed unused variable now passes -Wall 25563: [3452508bc16d] 25564: 25565: * parse.yacc: 25566: yyerror and dumpaliases are now void's now passes -Wall 25567: [2769dfb51993] 25568: 25569: * parse.lex: 25570: added prototype for yyerror 25571: [1f3f0c1b4ab4] 25572: 25573: * check.c, logging.c, parse.c: 25574: now passes -Wall 25575: [eab57e5e81d2] 25576: 25577: * interfaces.c: 25578: rmeoved unused cruft now passes -Wall 25579: [7a47e1866f4b] 25580: 25581: * Makefile.in: 25582: fixed headers that moved to emul dir 25583: [e680c1e5049b] 25584: 25585: * logging.c: 25586: fixed deref of nil pointer if no args 25587: [973b9bea432f] 25588: 25589: 1995-09-15 Todd C. Miller <Todd.Miller@courtesan.com> 25590: 25591: * OPTIONS: 25592: added a caveat to FQDN section 25593: [dcf6e2a5fff4] 25594: 25595: 1995-09-13 Todd C. Miller <Todd.Miller@courtesan.com> 25596: 25597: * Makefile.in: 25598: more $srcdir support for install targets 25599: [f6eac78436dd] 25600: 25601: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc, putenv.c, 25602: strdup.c, sudo.c, sudo_setenv.c, testsudoers.c, visudo.c: 25603: don't include malloc.h if we include stdlib.h 25604: [fca2ff307cd8] 25605: 25606: * parse.yacc: 25607: local search.h now lives in emul 25608: [51c458904424] 25609: 25610: * check.c, utime.c: 25611: local utime.h now lives in emul dir 25612: [f92fc9e8c8de] 25613: 25614: * lsearch.c: 25615: local search.h now lives in emul 25616: [579efc407439] 25617: 25618: * Makefile.in: 25619: added support for building in other than the sourcedir 25620: [2ab53a43f7d4] 25621: 25622: 1995-09-10 Todd C. Miller <Todd.Miller@courtesan.com> 25623: 25624: * OPTIONS: 25625: annotated CSOPS_INSULTS option 25626: [9e57d45a0afa] 25627: 25628: * TROUBLESHOOTING: 25629: updated shadow passwords blurb 25630: [39b785bc7253] 25631: 25632: * sudo.c: 25633: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a shell and 25634: passes along foo as the arguments 25635: [a91077aa8fc5] 25636: 25637: 1995-09-09 Todd C. Miller <Todd.Miller@courtesan.com> 25638: 25639: * parse.lex: 25640: collapsed pathname and dir sections into one -- its now less 25641: expensive 25642: [89caa03bec25] 25643: 25644: * parse.lex: 25645: fixed spacing quoting [,:\\=] now works correctly append() and 25646: fill() now take args to make the above work 25647: [09d023d9ef3a] 25648: 25649: * sudo.c: 25650: fixed a typo that caused commands with no tty on fd 0 but a tty on 25651: fd 1 to erroneously have "none" as their tty 25652: [07d2c0e7977c] 25653: 25654: 1995-09-04 Todd C. Miller <Todd.Miller@courtesan.com> 25655: 25656: * check.c: 25657: timestampfile is now a global static removed decl of timestampfile 25658: in remove_timestamp since we can just use the global one 25659: [f0cbdc6aab1c] 25660: 25661: * check.c: 25662: created touch() to update timestamps added USE_TTY_TICKETS support 25663: (bit of a kludge) 25664: [cee1dd0318f8] 25665: 25666: * compat.h: 25667: added _S_IFDIR and S_ISDIR 25668: [b4a51cc9628e] 25669: 25670: * OPTIONS, options.h: 25671: added USE_TTY_TICKETS 25672: [b4e22f81f25e] 25673: 25674: * parse.yacc: 25675: removed const from casts for lsearch() & lfind() to placate irix 4.x 25676: C compiler 25677: [5003081f76ea] 25678: 25679: 1995-09-03 Todd C. Miller <Todd.Miller@courtesan.com> 25680: 25681: * sudo.c: 25682: now only strip '/dev/' off of a tty if it starts with '/dev/' 25683: [7f62bcd24039] 25684: 25685: * pathnames.h.in: 25686: added _PATH_DEV 25687: [6375f44d1910] 25688: 25689: * configure.in: 25690: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for tcgetattr only if 25691: have termios.h 25692: [9c60391235fd] 25693: 25694: * tgetpass.c: 25695: fixed incorrect #ifdef termio uses "unsigned short" not int for 25696: c_?flag 25697: [d032e6a29845] 25698: 25699: * parse.lex, parse.yacc: 25700: fixed a spelling error 25701: [cad6a944c7b1] 25702: 25703: * Makefile.in: 25704: fixed typo 25705: [204a65403e7c] 25706: 25707: 1995-09-02 Todd C. Miller <Todd.Miller@courtesan.com> 25708: 25709: * Makefile.in: 25710: fixed a comment 25711: [268f760e57ad] 25712: 25713: * parse.yacc: 25714: added dotcat() to cat 2 strings w/ a dot effeciently now that we 25715: dynamically allocate strings they need to be free()'d 25716: [ec2e2152f415] 25717: 25718: * parse.lex: 25719: dynamically allocates space for strings 25720: [d10ac3533d66] 25721: 25722: * sudo.h: 25723: no more MAXCOMMANDLENGTH 25724: [e2e1219bff8a] 25725: 25726: * sudo.h: 25727: added decl of tty 25728: [c8ae81303ee5] 25729: 25730: * logging.c, sudo.c: 25731: moved tty stuff into sudo.c 25732: [e028abefeb07] 25733: 25734: 1995-09-01 Todd C. Miller <Todd.Miller@courtesan.com> 25735: 25736: * parse.c: 25737: fixed a logic bug. Was denying a command if user gave command line 25738: args but there were none in the sudoers file which is wrong. 25739: [7489a99b8e8a] 25740: 25741: * sudo.h: 25742: MAXCOMMMANDLEN dropped down to 1K 25743: [38ef54ba290b] 25744: 25745: * parse.lex: 25746: return foo; -> return(foo); 25747: [0e8be1b57001] 25748: 25749: * parse.yacc: 25750: fixed netgr_matches() prototype 25751: [e69f15910464] 25752: 25753: * parse.lex: 25754: added support for escaping "termination" characters 25755: [8bd4ef50f35c] 25756: 25757: * parse.c: 25758: buf is now of size MAXPATHLEN+1 since it never holds command args 25759: [2ce4b763058c] 25760: 25761: * sudo.c: 25762: fixed comments 25763: [0c74a3d2ebb0] 25764: 25765: * goodpath.c: 25766: fixed negation problem (doh!) 25767: [782814e3a2d1] 25768: 25769: * parse.yacc: 25770: fixed 2nd parameter to lfind() 25771: [63d7b1623c08] 25772: 25773: * parse.lex: 25774: now do bounds checking in fill() and append() 25775: [54381b563251] 25776: 25777: * sudo.c: 25778: include netdb.h as we should added a missing void cast added 25779: SHELL_IF_NO_ARGS support now use realloc() properly. would fail if 25780: realloc actually moved the string instead of shrinking it 25781: [897ccdec9c06] 25782: 25783: * sample.sudoers: 25784: updated with examples of new features 25785: [9b3ed00e8aa6] 25786: 25787: * goodpath.c: 25788: now set errno to EACCES if not a regular file or not executable 25789: [2d069548a5ea] 25790: 25791: * find_path.c: 25792: if given a fully-qualified or relative path we now check it with 25793: sudo_goodpath() and error out with the appropriate error message if 25794: the file does not exist or is not executable 25795: [590f89dd8dec] 25796: 25797: * emul/search.h, lsearch.c: 25798: now use correct args for lfind 25799: [fccdcdbf020e] 25800: 25801: * logging.c: 25802: added a comment 25803: [fab9f49708ea] 25804: 25805: * insults.h: 25806: added in CSOps insults 25807: [ad8eb1862adc] 25808: 25809: * ins_csops.h: 25810: Initial revision 25811: [de5a475ec018] 25812: 25813: * tgetpass.c: 25814: added RCS id 25815: [c3ffd550a482] 25816: 25817: * sudo.h: 25818: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD -> HAVE_GETWD 25819: [aba25c90d08a] 25820: 25821: * OPTIONS: 25822: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS 25823: [e27bd62e9ccf] 25824: 25825: * sudo.c: 25826: fixed -k load_interfaces() now gets called if FQDN is set 25827: -p now works with -s 25828: [07ca2a34bae8] 25829: 25830: * parse.c: 25831: don't try to stat() "pseudo commands" like "validate" 25832: [75527045984b] 25833: 25834: * options.h: 25835: added CLASSIC_INSULTS added CSOPS_INSULTS added SHELL_IF_NO_ARGS 25836: [07b157a0eafd] 25837: 25838: * configure.in: 25839: added SecurID support added other insults to --with-csops 25840: [6c992ceb244c] 25841: 25842: * config.h.in: 25843: added HAVE_SECURID 25844: [e734ff617fe8] 25845: 25846: * Makefile.in: 25847: added clobber target added ins_csops.h now gets CFLAGS from 25848: configure 25849: [d1e29c7cec25] 25850: 25851: * aclocal.m4: 25852: relaxed SUDO_FULL_VOID 25853: [fb4084f27406] 25854: 25855: * visudo.c: 25856: function comment blocks are now in same style as rest of code 25857: [04a2931354c5] 25858: 25859: * testsudoers.c: 25860: added support for command line args in /etc/sudoers 25861: [bfe4e1bcc655] 25862: 25863: * sudoers.man: 25864: updated to have command args in the sudoers file 25865: [1cd34355e9ea] 25866: 25867: * sudo.man: 25868: added -s and -- flags added SHELL to ENVIRONMENT VARIABLES section 25869: [930b48023b68] 25870: 25871: 1995-08-19 Todd C. Miller <Todd.Miller@courtesan.com> 25872: 25873: * parse.yacc: 25874: PATH renamed to COMMAND 25875: [4e109a6de3cd] 25876: 25877: * parse.lex: 25878: it is now a parse error for directories to have args attached to 25879: them 25880: [2ab10a146b54] 25881: 25882: * logging.c: 25883: now say command args if telling user to buzz off 25884: [933de26ded8b] 25885: 25886: * sudo.c: 25887: -s no longer indicates end of args sped up loading on cmnd_args in 25888: load_cmnd() 25889: [eac99a4da862] 25890: 25891: * parse.c: 25892: removed an unreachable statement 25893: [634302623c49] 25894: 25895: * parse.lex: 25896: made more efficient by pulling out the terminators when in GOTCMND 25897: state and making them their own rule 25898: [80798f1e1166] 25899: 25900: 1995-08-14 Todd C. Miller <Todd.Miller@courtesan.com> 25901: 25902: * sudo.h: 25903: removed MAXLOGLEN since it is no longer used 25904: [102824196b71] 25905: 25906: * parse.lex: 25907: now allows command args 25908: [d29dfa1e5254] 25909: 25910: * parse.c: 25911: now groks command arguments 25912: [6c414cb7f105] 25913: 25914: * logging.c: 25915: now sets tty correctly when piped input 25916: [de46a30c0406] 25917: 25918: * sudo.c: 25919: fixed loading of cmnd_args (was including command name too) 25920: [15319a425ea6] 25921: 25922: * logging.c: 25923: fixed a core dump due to incorrect if construct 25924: [582363c7d7fa] 25925: 25926: 1995-08-13 Todd C. Miller <Todd.Miller@courtesan.com> 25927: 25928: * configure.in: 25929: only add -lsun is irix < 5 don't look for -lnsl or -lsocket if irix 25930: [da591fe9b931] 25931: 25932: * aclocal.m4: 25933: fixed check for ISC 25934: [52e59f2082a7] 25935: 25936: * sudo.c: 25937: now sets cmnd_args used by log_error() and that will be used by the 25938: parse to check against command args 25939: [c6804389723b] 25940: 25941: * sudo.h: 25942: added cmnd_args 25943: [4d00446b4a8d] 25944: 25945: * logging.c: 25946: now dynamically allocate logline since we can guess at its size 25947: [4bed8c8446aa] 25948: 25949: 1995-08-05 Todd C. Miller <Todd.Miller@courtesan.com> 25950: 25951: * logging.c: 25952: cleaned up a bunch of unnecesary #ifdef's eliminated a buffer remove 25953: "register" since the compiler knows more than I do now do a 25954: "basename" of the tty 25955: [3b1bbf0b3da1] 25956: 25957: 1995-07-31 Todd C. Miller <Todd.Miller@courtesan.com> 25958: 25959: * configure.in: 25960: ++version 25961: [5ce552f9a5f1] 25962: 25963: * sudo.h: 25964: added shell extern changed MODE_* to be bit masks to allow for 25965: several options together 25966: [06f9dc4f400c] 25967: 25968: * sudo.c: 25969: added -s (shell) option made MODE_* masks so we can do bitwise & and 25970: | to see if multiple flags are set. 25971: [01f8143010ad] 25972: 25973: * check.c: 25974: added securid support 25975: [909e078005fe] 25976: 25977: 1995-07-30 Todd C. Miller <Todd.Miller@courtesan.com> 25978: 25979: * logging.c: 25980: removed a bunch of unnecesary strncpy()'s and replaced with strcat() 25981: [644506b57d61] 25982: 25983: 1995-07-29 Todd C. Miller <Todd.Miller@courtesan.com> 25984: 25985: * Makefile.in, version.h: 25986: ++version 25987: [3cd6f1fbc3d9] 25988: 25989: 1995-07-27 Todd C. Miller <Todd.Miller@courtesan.com> 25990: 25991: * parse.yacc: 25992: fixed free() of an uninitialized pointer (yuck) 25993: [8c404ee502ee] 25994: 25995: * testsudoers.c: 25996: added netgr_matches 25997: [e7c9fa2f774c] 25998: 25999: * parse.c: 26000: cleaned up netgr_matches 26001: [8108f00b810e] 26002: 26003: 1995-07-26 Todd C. Miller <Todd.Miller@courtesan.com> 26004: 26005: * RUNSON: 26006: updated for 1.3.4 26007: [4741704310a1] 26008: 26009: 1995-07-25 Todd C. Miller <Todd.Miller@courtesan.com> 26010: 26011: * Makefile.in: 26012: now installs sudoers.man -- really should clean this up though. 26013: [455631d45a1d] 26014: 26015: * Makefile.in: 26016: added sudoers.cat and sudoers.man 26017: [0bdedd6c7363] 26018: 26019: * sudo.man: 26020: pulled out stuff on the sudoers file format into a separate man page 26021: [de215d999cb9] 26022: 26023: * sudoers.man: 26024: Initial revision 26025: [f25eafbb7095] 26026: 26027: * HISTORY: 26028: fixed up my email address 26029: [254fbf80be74] 26030: 26031: * configure.in: 26032: added checks for innetgr and getdomainname 26033: [24a99cb7e97e] 26034: 26035: * visudo.c: 26036: added dummy netgr_matches function 26037: [1841ff2c01da] 26038: 26039: * parse.c: 26040: added netgr_matches 26041: [ec90db6a97b8] 26042: 26043: * parse.lex, parse.yacc: 26044: added NETGROUP support 26045: [c9dd93e3bc4b] 26046: 26047: * config.h.in: 26048: added HAVE_INNETGR & HAVE_GETDOMAINNAME 26049: [14abd494d875] 26050: 26051: 1995-07-24 Todd C. Miller <Todd.Miller@courtesan.com> 26052: 26053: * sudo.c: 26054: rewrote clean_env() that has rm_env() builtin 26055: [55cb43818a95] 26056: 26057: 1995-07-23 Todd C. Miller <Todd.Miller@courtesan.com> 26058: 26059: * check.c: 26060: now cast uid to long in sprintf 26061: [b549eea40aeb] 26062: 26063: * OPTIONS: 26064: added _INSULTS suffix to HAL & GOONS end 26065: [ed620d0aad30] 26066: 26067: * options.h: 26068: added _INSULTS suffix to HAL & GOONS 26069: [9f72e9b83afd] 26070: 26071: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: 26072: converted to new scheme of insult "unions" end 26073: [2f6d2b412132] 26074: 26075: * sudo.c: 26076: now uses MAX_UID_T_LEN 26077: [c1df79e0f389] 26078: 26079: * configure.in: 26080: added SUDO_UID_T_LEN !l 26081: [195f0b9f5f84] 26082: 26083: * config.h.in: 26084: added MAX_UID_T_LEN 26085: [73f42ae4f14d] 26086: 26087: * check.c: 26088: now use MAX_UID_T_LEN 26089: [df9c063234cb] 26090: 26091: * aclocal.m4: 26092: added check for max len of uid_t fixed sco vs. isc check 26093: [d558f36d2223] 26094: 26095: 1995-07-19 Todd C. Miller <Todd.Miller@courtesan.com> 26096: 26097: * configure.in: 26098: corrected version 26099: [828dd1571e86] 26100: 26101: * configure.in: 26102: added sco support 26103: [af1e2f616638] 26104: 26105: * aclocal.m4: 26106: hack to check for sco 26107: [549ab99a9a43] 26108: 26109: * interfaces.c: 26110: removed #include <net/route.h> since it was hosing some OS's 26111: [ac78a7c04005] 26112: 26113: 1995-07-18 Todd C. Miller <Todd.Miller@courtesan.com> 26114: 26115: * find_path.c: 26116: fixed prreadlink() prototype 26117: [b380fe1f2b11] 26118: 26119: * check.c: 26120: added parens in #if's 26121: [e96ade691b82] 26122: 26123: * configure.in: 26124: added SPW_ prefix 26125: [a302683a1483] 26126: 26127: * sudo.h: 26128: moved SPW_* to config.h.in 26129: [6b3be70e34cf] 26130: 26131: * sudo.c: 26132: added a set of parens 26133: [8188d735d695] 26134: 26135: * config.h.in: 26136: added SPW_* 26137: [5ead6371cf60] 26138: 26139: * sudo.h: 26140: added SPW_* reordered error codes 26141: [dead25b4ed0a] 26142: 26143: * check.c: 26144: moved SPW_* to sudo.h 26145: [ca51fb04caf4] 26146: 26147: 1995-07-17 Todd C. Miller <Todd.Miller@courtesan.com> 26148: 26149: * sudo.c: 26150: SPW_AUTH -> SPW_SECUREWARE 26151: [6b512b2bc5dc] 26152: 26153: * logging.c: 26154: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT 26155: [defdd0944e2f] 26156: 26157: * configure.in: 26158: AUTH -> SECUREWARE 26159: [d1f8a17001dd] 26160: 26161: * check.c: 26162: SPW_AUTH -> SPW_SECUREWARE 26163: [af0e8d8b89b2] 26164: 26165: * check.c: 26166: now uses SHADOW_TYPE to make shadow pw support more readable and 26167: modular. It's a start... 26168: [8c2a59667014] 26169: 26170: * configure.in: 26171: added autodetection of shadow passwords 26172: [85f81fa54b1b] 26173: 26174: * sudo.c: 26175: now uses SHADOW_TYPE define 26176: [355e5dc09b07] 26177: 26178: * config.h.in: 26179: added SHADOW_TYPE which replaces SUNOS4 & __svr4__ defines 26180: [c0c06e83e483] 26181: 26182: * aclocal.m4: 26183: added SUDO_CHECK_SHADOW 26184: [464301301639] 26185: 26186: 1995-07-12 Todd C. Miller <Todd.Miller@courtesan.com> 26187: 26188: * configure.in: 26189: define SVR4 for ISC define BROKEN_SYSLOG for hpux took out test for 26190: memmove() since we dno longer use it... 26191: [8aefa87d7d31] 26192: 26193: * CHANGES: 26194: updated 26195: [ce97b3fd7182] 26196: 26197: * logging.c: 26198: added BROKEN_SYSLOG support 26199: [a45c3bca36f6] 26200: 26201: * config.h.in: 26202: added BROKEN_SYSLOG 26203: [6f6abf0a6268] 26204: 26205: * check.c: 26206: now only bitch it timestamp > time_now + 2 * timeout to allow for a 26207: machine udpating its time from a server 26208: [546bc8d35325] 26209: 26210: * sudo.man: 26211: added 2 security notes updated Nieusma's email addr 26212: [616756c56977] 26213: 26214: * lsearch.c: 26215: changed a memmove() to memcpy() since we don't have to worry about 26216: overlapping segments. 26217: [30baa478526b] 26218: 26219: 1995-07-11 Todd C. Miller <Todd.Miller@courtesan.com> 26220: 26221: * interfaces.c: 26222: cleanup up the loop when interfaces are groped in so that it is 26223: readable 26224: [1fa39446bd69] 26225: 26226: * Makefile.in, version.h: 26227: ++version 26228: [b46bd2b1770f] 26229: 26230: 1995-07-09 Todd C. Miller <Todd.Miller@courtesan.com> 26231: 26232: * CHANGES: 26233: annotated 124-126 26234: [b82a2b3ec7ce] 26235: 26236: 1995-07-07 Todd C. Miller <Todd.Miller@courtesan.com> 26237: 26238: * check.c: 26239: fixed permissions check on /tmp/.odus 26240: [cc2431a65468] 26241: 26242: 1995-07-06 Todd C. Miller <Todd.Miller@courtesan.com> 26243: 26244: * check.c: 26245: fixed some comments 26246: [8896d09b4fda] 26247: 26248: * check.c: 26249: now checks owner & mode of timedir also checks for bogus dates on 26250: timestamp file 26251: [a0fad5df5b0a] 26252: 26253: * OPTIONS: 26254: updated TIMEOUT info 26255: [033cc22d9e04] 26256: 26257: * logging.c, sudo.h: 26258: added BAD_STAMPDIR and BAD_STAMPFILE 26259: [31d9ce691101] 26260: 26261: * compat.h: 26262: added definition of S_IRWXU 26263: [ff2dab091a9b] 26264: 26265: * CHANGES: 26266: updated 26267: [a40df90284f1] 26268: 26269: 1995-07-03 Todd C. Miller <Todd.Miller@courtesan.com> 26270: 26271: * interfaces.c: 26272: added #ifdef to make it compile on strange arches 26273: [4a127f12afce] 26274: 26275: 1995-07-02 Todd C. Miller <Todd.Miller@courtesan.com> 26276: 26277: * aclocal.m4: 26278: fixed check for fulkl void impl. 26279: [b6f2a4a361d8] 26280: 26281: * check.c: 26282: added mssing "static" 26283: [520552f2772b] 26284: 26285: * insults.h: 26286: replaced #elif with #else #if constructs for ancient C compilers 26287: [39ab2d365b57] 26288: 26289: * INSTALL: 26290: updated irix c2 & kerb5 info 26291: [ae79b99b4905] 26292: 26293: * configure.in: 26294: added shadow pw support for irix 26295: [632469d9c528] 26296: 26297: 1995-07-01 Todd C. Miller <Todd.Miller@courtesan.com> 26298: 26299: * BUGS, TODO: 26300: updated 26301: [2a96bb18ac30] 26302: 26303: * CHANGES: 26304: last changes for sudo 1.3.3 26305: [c1c0cd1034b8] 26306: 26307: * configure.in: 26308: now calls SUDO_SOCK_SA_LEN 26309: [14ea78159d45] 26310: 26311: * config.h.in: 26312: added HAVE_SA_LEN 26313: [cc2a346aa905] 26314: 26315: * aclocal.m4: 26316: added SUDO_SOCK_SA_LEN 26317: [456a2025644a] 26318: 26319: * interfaces.c: 26320: now works with ip implementations that use sa_len in sockaddr 26321: [90be6e028077] 26322: 26323: * INSTALL: 26324: added note about buggy AIX compiler 26325: [c0f6d427e4e4] 26326: 26327: * interfaces.c: 26328: now include sys/time.h for AIX 26329: [2510858ab38b] 26330: 26331: 1995-06-28 Todd C. Miller <Todd.Miller@courtesan.com> 26332: 26333: * Makefile.in: 26334: getcwd -> getwd 26335: [66085ebca98e] 26336: 26337: * interfaces.c: 26338: now works for ISC and others. yay. 26339: [f336d4ffc927] 26340: 26341: 1995-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 26342: 26343: * Makefile.in, version.h: 26344: version++ 26345: [836cffc2078d] 26346: 26347: 1995-06-23 Todd C. Miller <Todd.Miller@courtesan.com> 26348: 26349: * aclocal.m4: 26350: fixed test for full void impl 26351: [fb004107e7b9] 26352: 26353: * sudo.c: 26354: now check to see that st_dev is non-zero before assuming that we are 26355: being spoofed 26356: [1b0e1c30c506] 26357: 26358: 1995-06-20 Todd C. Miller <Todd.Miller@courtesan.com> 26359: 26360: * aclocal.m4, configure.in: 26361: SUDO_FUNC_UTIME_NULL -> AC_FUNC_UTIME_NULL 26362: [4953379bfb01] 26363: 26364: 1995-06-19 Todd C. Miller <Todd.Miller@courtesan.com> 26365: 26366: * aclocal.m4: 26367: fixed include file order for SUDO_FUNC_UTIME_POSIX 26368: [ff64ab7df44f] 26369: 26370: * logging.c: 26371: added cast for ttyname() 26372: [444f05f56758] 26373: 26374: * configure.in: 26375: fixed typo 26376: [de068e748431] 26377: 26378: * check.c: 26379: now deal correctly with all known variation of utime() -- yippe 26380: [b778a4195a89] 26381: 26382: * configure.in: 26383: added SUDO_FUNC_UTIME_POSIX 26384: [cf635f2269d6] 26385: 26386: * aclocal.m4: 26387: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX 26388: [d79593be4b73] 26389: 26390: * config.h.in: 26391: added HAVE_UTIME_POSIX 26392: [c67b4ac0dca5] 26393: 26394: * check.c: 26395: fixed a typo 26396: [b14df5680f59] 26397: 26398: * check.c: 26399: no longer assume !HAVE_UTIME_NULL means old BSD utime() 26400: [0aeaf4b2f38b] 26401: 26402: * check.c: 26403: fixed fascist C compiler warning 26404: [c61ddf2f1f93] 26405: 26406: * interfaces.c: 26407: now set strioctl.ic_timout in STRSET() now initialize num_interfaces 26408: to 0 (just to be anal) 26409: [c54cc2ba0052] 26410: 26411: 1995-06-18 Todd C. Miller <Todd.Miller@courtesan.com> 26412: 26413: * sudo.h: 26414: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname 26415: [74cf585a54fb] 26416: 26417: * logging.c: 26418: added tty logging 26419: [e27d8dcfbd78] 26420: 26421: * interfaces.c: 26422: reworked the ISC code 26423: [bcf57ce8ae69] 26424: 26425: * Makefile.in, version.h: 26426: updated version 26427: [032941c9b94d] 26428: 26429: * check.c: 26430: now expect old-style utime(3) if utime() can't take NULL as an arg 26431: [018dd4a73030] 26432: 26433: * configure.in: 26434: added check for utime.h 26435: [0b76e8feb618] 26436: 26437: * config.h.in: 26438: added HAVE_UTIME_H 26439: [62ee42feda46] 26440: 26441: * Makefile.in: 26442: added CPPFLAGS STATIC_FLAGS -> LDFLAGS 26443: [fa3201d294e1] 26444: 26445: * configure.in: 26446: now search for kerb libs and includes 26447: [cc332401e571] 26448: 26449: * check.c: 26450: added support for utime(2)'s that can't take a NULL parameter 26451: [98797fedf69f] 26452: 26453: * utime.c: 26454: moved HAVE_UTIME_NULL stuff to update_timestamp() where t belongs 26455: [6ce6d825fb44] 26456: 26457: * configure.in: 26458: added utime(s) stuff 26459: [a2afb744403e] 26460: 26461: * check.c: 26462: now use utime() 26463: [48902240a51e] 26464: 26465: * config.h.in: 26466: added HAVE_UTIME and HAVE_UTIME_NULL 26467: [9a56ab65d4f4] 26468: 26469: 1995-06-17 Todd C. Miller <Todd.Miller@courtesan.com> 26470: 26471: * utime.c: 26472: now use HAVE_UTIME_NULL 26473: [e3944de09a92] 26474: 26475: * emul/utime.h, utime.c: 26476: Initial revision 26477: [a2cbf2ef3427] 26478: 26479: * check.c: 26480: need to setuid(0) to make kerb4 stuff work. 26481: [c6cfda4039d7] 26482: 26483: * tgetpass.c: 26484: no more special case for kerberos 26485: [4a5c33145be9] 26486: 26487: * config.h.in: 26488: took out setreuid and setresuid stuff added kerb5 stuff (use kerb4 26489: emulation) 26490: [a607ee43e650] 26491: 26492: * compat.h: 26493: no longer need setreuid() emulation now set _PASSWD_LEN to 128 if 26494: kerberos 26495: [02fb274cc136] 26496: 26497: * check.c: 26498: now use private ticket file for kerberos support to avoid trouncing 26499: on system one 26500: [28d8b6b812c7] 26501: 26502: 1995-06-15 Todd C. Miller <Todd.Miller@courtesan.com> 26503: 26504: * sudo.h: 26505: added SPOOF_ATTEMPT & cmnd_st 26506: [d3b42a1f4d0d] 26507: 26508: * sudo.c: 26509: added anti-spoofing support 26510: [ab1e2aa44a57] 26511: 26512: * parse.c: 26513: now use global cmnd_st 26514: [47018265a1a6] 26515: 26516: * logging.c: 26517: added SPOOF_ATTEMPT suypport 26518: [7bbe9dd2a021] 26519: 26520: * testsudoers.c, visudo.c: 26521: added void casts where appropriate 26522: [f191441ba333] 26523: 26524: * parse.yacc: 26525: fixed up spacing and added void casts where appropriate 26526: [15d886fc809c] 26527: 26528: * sudo.c: 26529: fixed problem with "-p prompt" but no args 26530: [6fc048261a3e] 26531: 26532: 1995-06-14 Todd C. Miller <Todd.Miller@courtesan.com> 26533: 26534: * sudo.man: 26535: added BUGS and annotated -l description 26536: [e5c506de2603] 26537: 26538: * sudo.h: 26539: validate() now takes a flag 26540: [26627becc60a] 26541: 26542: * sudo.c: 26543: validate() now takes a flag added -l 26544: [a4f7bb97fe54] 26545: 26546: * parse.yacc: 26547: added support for -l 26548: [e7a9b10b0ad3] 26549: 26550: * parse.c: 26551: validate() now takes a flag that says whether or not to check the 26552: command 26553: [9e1e67f4e281] 26554: 26555: 1995-06-08 Todd C. Miller <Todd.Miller@courtesan.com> 26556: 26557: * logging.c: 26558: now deals with Argv == 1 26559: [0acb637ab635] 26560: 26561: * sudo.man: 26562: added -p option 26563: [e60382fc0561] 26564: 26565: * sudo.c: 26566: added prompt support reworked parse_args() 26567: [2f605267ed4a] 26568: 26569: * sudo.h: 26570: added prompt 26571: [5ab021bdb419] 26572: 26573: * options.h: 26574: added PASSPROMPT 26575: [614727ff44a2] 26576: 26577: * check.c: 26578: now use BUFSIZ as length of kerb password added kpass so pass is 26579: always a char * now use prompt global when asking for a password 26580: [76be09af784f] 26581: 26582: * tgetpass.c: 26583: now use BUFSIZ as _PASSWD_LEN if using kerberos 26584: [1e907eed312b] 26585: 26586: * OPTIONS: 26587: added PASSPROMPT 26588: [ddb2f405ce40] 26589: 26590: 1995-06-07 Todd C. Miller <Todd.Miller@courtesan.com> 26591: 26592: * configure.in: 26593: only look for -lufc or -lcrypt if crypt() not in libc 26594: [9717d315661f] 26595: 26596: * check.c: 26597: don't exit on kerb error, just warn if k_errno == KDC_PR_UNKNOWN 26598: (unknown user) silently fail 26599: [2b48693d4ee9] 26600: 26601: * INSTALL: 26602: added kerb4 note 26603: [986e393f740c] 26604: 26605: * tgetpass.c: 26606: HAVE_KERBEROS -> HAVE_KERB4 26607: [e438bfb5e6aa] 26608: 26609: * check.c: 26610: removed debugging printf 26611: [1cf9f5cbffa5] 26612: 26613: * configure.in: 26614: KERBEROS -> KERB4 added checks for setreuid & setresuid 26615: [01e9945beb1e] 26616: 26617: * config.h.in: 26618: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and HAVE_SETRESUID 26619: [0e0bb5b8ac3e] 26620: 26621: * compat.h: 26622: added deif of UID_NO_CHANGE & GID_NO_CHANGE added setreuid emulation 26623: with setresuid if applic 26624: [9dae24c47696] 26625: 26626: * check.c: 26627: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid chown() hack if 26628: no setreuid() or a broken one 26629: [1fca642bdb8e] 26630: 26631: 1995-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 26632: 26633: * configure.in: 26634: added kerberos support 26635: [da5639b9b8e7] 26636: 26637: * config.h.in: 26638: added HAVE_KERBEROS 26639: [fcc5be550e65] 26640: 26641: * tgetpass.c: 26642: added KERBEROS support (long passwords) 26643: [303ba6924dd2] 26644: 26645: * check.c: 26646: added kerberos support 26647: [e40afe98fc1d] 26648: 26649: 1995-06-03 Todd C. Miller <Todd.Miller@courtesan.com> 26650: 26651: * sudo.h: 26652: added MODE_BACKGROUND 26653: [9b483c932016] 26654: 26655: * sudo.man: 26656: escaped dashes added -b option 26657: [62e84f1a7714] 26658: 26659: * sudo.c: 26660: added -b option 26661: [7e78aaefeb95] 26662: 26663: * check.c: 26664: added crypt() for osf/1 3.x enhanced secuiry 26665: [e9aa5abdb7d5] 26666: 26667: * configure.in: 26668: now check for -lcrypt 26669: [5cb9c67e9fa2] 26670: 26671: * interfaces.c: 26672: added ENXIO like EADDRNOTAVAIL 26673: [74223bb1ba75] 26674: 26675: 1995-05-08 Todd C. Miller <Todd.Miller@courtesan.com> 26676: 26677: * configure.in: 26678: now emulate getwd(), not getcwd() 26679: [3e5439d9a5f4] 26680: 26681: * sudo.c: 26682: getcwd() -> getwd() 26683: [6392a96a658e] 26684: 26685: * getwd.c: 26686: getcwd -> getwd 26687: [1b0ab9bae11e] 26688: 26689: 1995-05-02 Todd C. Miller <Todd.Miller@courtesan.com> 26690: 26691: * ins_2001.h, ins_classic.h, ins_goons.h: 26692: Initial revision 26693: [86db60d8cf00] 26694: 26695: * insults.h: 26696: broke out insults into separate include files 26697: [0a01993bd38a] 26698: 26699: * OPTIONS, options.h: 26700: added GOONS 26701: [e283203c6515] 26702: 26703: * Makefile.in: 26704: added ins_2001.h ins_classic.h ins_goons.h 26705: [2a39cd6a4cd2] 26706: 26707: * Makefile.in, version.h: 26708: ++version 26709: [05ebf4f5e41a] 26710: 26711: * visudo.c: 26712: moved signal handler setup to setup_signals() 26713: [3dd976c04540] 26714: 26715: * sudo.h: 26716: added load_interfaces() 26717: [af2d473b09e2] 26718: 26719: * sudo.c: 26720: moved load_interfaces to interfaces.c 26721: [5c8c138e5d4c] 26722: 26723: * parse.yacc: 26724: added clearaliases 26725: [aeb4ff301daa] 26726: 26727: * OPTIONS, options.h: 26728: added FAST_MATCH 26729: [f49ea3d1b525] 26730: 26731: * parse.lex: 26732: now uses clearaliases variable 26733: [a2dda415bf61] 26734: 26735: * interfaces.c: 26736: Initial revision 26737: [a1990e3f5c69] 26738: 26739: * Makefile.in: 26740: added interfaces.[co] 26741: [1e8e5984de97] 26742: 26743: * testsudoers.c: 26744: now uses ip addrs and netmasks via load_interfaces() 26745: [54b8f7a6835e] 26746: 26747: * sudo.c: 26748: now remove IFS instead of setting to "sane" value 26749: [ce7eec9f115e] 26750: 26751: 1995-05-01 Todd C. Miller <Todd.Miller@courtesan.com> 26752: 26753: * parse.c: 26754: added FAST_MATCH 26755: [816d4f5fe81a] 26756: 26757: 1995-04-30 Todd C. Miller <Todd.Miller@courtesan.com> 26758: 26759: * Makefile.in: 26760: sudo_goodpath.c-> goodpath.c 26761: [a5072c4e1de2] 26762: 26763: * sudo.c: 26764: added Andy's new ISC changes 26765: [caa6bbee358e] 26766: 26767: 1995-04-14 Todd C. Miller <Todd.Miller@courtesan.com> 26768: 26769: * OPTIONS: 26770: added a sentence to SECURE_PATH info 26771: [cad6e1569d15] 26772: 26773: * BUGS: 26774: added one 26775: [4b35cf699a83] 26776: 26777: * CHANGES: 26778: updated 26779: [5fded9dc62f0] 26780: 26781: * RUNSON: 26782: updated 26783: [33cb993cfd39] 26784: 26785: 1995-04-13 Todd C. Miller <Todd.Miller@courtesan.com> 26786: 26787: * RUNSON: 26788: updated for beta3 26789: [a05dc6a91995] 26790: 26791: * Makefile.in, version.h: 26792: ++version 26793: [54aaf3fadc75] 26794: 26795: * aclocal.m4: 26796: sendmail is now looked for in /usr/ucblib 26797: [231ac1a4662f] 26798: 26799: * sudo.c: 26800: fixed indentation 26801: [fb137400c8c2] 26802: 26803: * aclocal.m4: 26804: fixed a typo 26805: [e03f1acc468b] 26806: 26807: * sudo.c: 26808: updated ISC mods 26809: [070290d4754b] 26810: 26811: * configure.in: 26812: added unixware case 26813: [e90250bae0d9] 26814: 26815: * check.c: 26816: user_is_exempt is no longer hidden 26817: [1a341765b8af] 26818: 26819: * RUNSON: 26820: updated 26821: [a9c4898b26dd] 26822: 26823: * aclocal.m4: 26824: isc and riscos changes 26825: [98b5d86585d1] 26826: 26827: * OPTIONS: 26828: added NOTE about new interaction of EXEMPTGROUP and SECURE_PATH 26829: [e1ecc464ce4b] 26830: 26831: * Makefile.in: 26832: fixed a typo and added testsudoers stuff 26833: [435d60e163dc] 26834: 26835: * testsudoers.c: 26836: Initial revision 26837: [6ce14a448662] 26838: 26839: 1995-04-12 Todd C. Miller <Todd.Miller@courtesan.com> 26840: 26841: * parse.yacc: 26842: applied fixed patch from Chris 26843: [cd6144203d13] 26844: 26845: 1995-04-11 Todd C. Miller <Todd.Miller@courtesan.com> 26846: 26847: * Makefile.in: 26848: fixed a typo 26849: [34f8a54ba041] 26850: 26851: * parse.yacc: 26852: added a set of braces for bison 26853: [f0e43b938914] 26854: 26855: * parse.yacc: 26856: merged in Chris' changes to dekludge the parser. 26857: [82d6e373ab1c] 26858: 26859: * logging.c: 26860: send_mail() was calling find_path() which is wrong since find_path() 26861: stores cmnd in a static var. Anyhow, it doesn't make much sense 26862: since MAILER should always be fully qualified 26863: [6eae6a0b8098] 26864: 26865: 1995-04-10 Todd C. Miller <Todd.Miller@courtesan.com> 26866: 26867: * sample.sudoers: 26868: added User_Alias stuff 26869: [aaba8c8e918d] 26870: 26871: * aclocal.m4: 26872: SUDO_NEXT now looks for /usr/lib/NextStep/software_version 26873: [52bd81f34b32] 26874: 26875: * RUNSON: 26876: added DEC UNIX 3.0 w/ gcc 26877: [7daf570775b5] 26878: 26879: * visudo.c: 26880: Exit was being used in places where exit should be used 26881: [6026a89c07ed] 26882: 26883: * sudoers: 26884: added "User alias specification" 26885: [a487b6e234f8] 26886: 26887: * parse.yacc: 26888: fixed probs caused by making nslots and naliases a size_t 26889: [0be919384f3f] 26890: 26891: * RUNSON: 26892: added KSR, upped rev to 1.3.1b2 26893: [ce04ee6faadf] 26894: 26895: * logging.c, parse.yacc: 26896: 1024 -> BUFSIZ 26897: [cd6dda45fa11] 26898: 26899: * parse.yacc: 26900: void * -> VOID * naliases and nslots are now size_t to appease 26901: lsearch on 64-bit machines 26902: [bf2f807c0dc1] 26903: 26904: 1995-04-09 Todd C. Miller <Todd.Miller@courtesan.com> 26905: 26906: * TODO: 26907: did a bunch of things and added a bunch :-) 26908: [42afd957b829] 26909: 26910: * PORTING: 26911: updated 26912: [972f95c85776] 26913: 26914: * visudo.man: 26915: closer to BSD manpage style 26916: [07ae88f50325] 26917: 26918: * sudo.man: 26919: closer to standard BSD man format 26920: [372c28dcc135] 26921: 26922: * compat.h, config.h.in, emul/search.h, insults.h, options.h, 26923: pathnames.h.in, sudo.h, version.h: 26924: added RCS id 26925: [c0ec90b81002] 26926: 26927: * sudo.h: 26928: removed crufty #defines that are no longer used 26929: [35e2b4b477f0] 26930: 26931: * BUGS: 26932: fixed a bug 26933: [5bb3e1bee85e] 26934: 26935: * sudo.man: 26936: updated based on sudo changes 26937: [e65de1cae438] 26938: 26939: * parse.yacc: 26940: now allow ALL keyword in User_Aliases now allow ALL keyword as well 26941: as a NAME or ALIAS 26942: [1fb31404dd0f] 26943: 26944: * CHANGES: 26945: updated 26946: [b24018ac610b] 26947: 26948: * sudo.c: 26949: now sets SUDO_COMMAND and SUDO_GID envariables. 26950: [e9d791557fb7] 26951: 26952: * aclocal.m4: 26953: fixed bug with full void impl check 26954: [35715301023c] 26955: 26956: * parse.yacc: 26957: fixed User_Alias supoprt 26958: [4c30dfbaaa07] 26959: 26960: * parse.yacc: 26961: added stubs for User_Alias support 26962: [f4afbd247edf] 26963: 26964: * sudo.c: 26965: now sets removes # bogus interfaces from num_interfaces 26966: [6f077fac9ab1] 26967: 26968: * parse.lex: 26969: added User_Alias support 26970: [bc7997e5df85] 26971: 26972: 1995-04-08 Todd C. Miller <Todd.Miller@courtesan.com> 26973: 26974: * Makefile.in: 26975: removed extraneous TODO 26976: [bc87a3b14d6d] 26977: 26978: 1995-04-07 Todd C. Miller <Todd.Miller@courtesan.com> 26979: 26980: * visudo.c: 26981: ntwk_matches -> addr_matches 26982: [475044e288b8] 26983: 26984: * parse.yacc: 26985: ntwk_matches -> addr_matches 26986: [dd1f4093fd2d] 26987: 26988: * parse.c: 26989: ntwk_matches -> addr_matches now use inet_addr() not inet_network() 26990: (which expects octet boundaries) fixes for OSF (sizeof(int) != 26991: sizeof(long)) 26992: [acd2f556940f] 26993: 26994: * sudo.c: 26995: took out debugging info 26996: [044023063eca] 26997: 26998: * aclocal.m4: 26999: OS was being set to unknown before non-uname based host checks. 27000: This caused no checks to happen since $OS was not zero-length. 27001: [335a7267479d] 27002: 27003: * sudo.c: 27004: fixed loading of interfaces struct still has debugging info in 27005: though 27006: [2d1a18998c1e] 27007: 27008: * parse.c: 27009: fixed typo 27010: [175674a3a9fa] 27011: 27012: 1995-04-06 Todd C. Miller <Todd.Miller@courtesan.com> 27013: 27014: * Makefile.in: 27015: ++version 27016: [55d191b5daa3] 27017: 27018: * version.h: 27019: ++ 27020: [d7d1f115696a] 27021: 27022: * visudo.c: 27023: removed extraneous extern decl of "top 27024: [50355621047d] 27025: 27026: * visudo.c: 27027: now zeros "top" 27028: [4e683210345b] 27029: 27030: * parse.yacc: 27031: removed parser_cleanup (no need for it now) 27032: [afa59f222b6c] 27033: 27034: * parse.lex: 27035: now calls reset_aliases() directly 27036: [3a23cbd60fc0] 27037: 27038: 1995-04-04 Todd C. Miller <Todd.Miller@courtesan.com> 27039: 27040: * OPTIONS: 27041: added a sentence to SECURE_PATH description 27042: [c5bf75b85af0] 27043: 27044: * parse.c: 27045: fixed my stupid bug where I used NAMLEN on something I wanted to 27046: just get the name from. argh. 27047: [111f460f6540] 27048: 27049: 1995-04-03 Todd C. Miller <Todd.Miller@courtesan.com> 27050: 27051: * lsearch.c: 27052: fixed argument order of memmove() that i hosed when converting from 27053: bcopy(). arghh. 27054: [2f5336045c8b] 27055: 27056: * Makefile.in: 27057: finally fixed DISTFILES line 27058: [a1b419e73a63] 27059: 27060: * Makefile.in: 27061: tabs -> spaces 27062: [280fb03e5764] 27063: 27064: * Makefile.in: 27065: added missing files to DISTFILES 27066: [991fc1cd2263] 27067: 27068: * Makefile.in: 27069: SUPPORTED -> RUNSON 27070: [7580e65b05fb] 27071: 27072: 1995-04-01 Todd C. Miller <Todd.Miller@courtesan.com> 27073: 27074: * TODO: 27075: updated 27076: [fe764a29c1cc] 27077: 27078: * RUNSON: 27079: updated for pl5b1 release 27080: [aefc35bd2291] 27081: 27082: * BUGS, TODO: 27083: updated 27084: [8f0ea249b687] 27085: 27086: * check.c: 27087: fixed bug where if you hit return at first sudo prompt it would 27088: still log as a failure 27089: [24539c854692] 27090: 27091: * CHANGES: 27092: updated 27093: [251cc7b3ede4] 27094: 27095: * aclocal.m4: 27096: better test for bogus void * implementation 27097: [efe23180cb88] 27098: 27099: * logging.c: 27100: added PASSWORDS_NOT_CORRECT 27101: [bd12c73f83f7] 27102: 27103: * check.c: 27104: added PASSWORDS_NOT_CORRECT stuff] 27105: [90de391a979f] 27106: 27107: * sudo.h: 27108: added PASSWORDS_NOT_CORRECT 27109: [727fbeb76fc5] 27110: 27111: * tgetpass.c: 27112: moved pathnames.h 27113: [4f910e5a8df7] 27114: 27115: * sudo.c: 27116: removed some unused vars and fixed up uid2str 27117: [70e92c7f9076] 27118: 27119: * putenv.c: 27120: moved compat.h 27121: [b271091586f6] 27122: 27123: * getcwd.c, getwd.c: 27124: added pathnames.h 27125: [6f25218f133f] 27126: 27127: 1995-03-31 Todd C. Miller <Todd.Miller@courtesan.com> 27128: 27129: * parse.yacc: 27130: fixed a typo I introduced in the last checkin :-( 27131: [62c3af75c4fe] 27132: 27133: * parse.lex: 27134: can't have #ifdef's where N is defined so just do this the broken 27135: way for AIX 27136: [c5648a5594e4] 27137: 27138: * parse.yacc: 27139: better hack from Chris (but still a hack) 27140: [6b6d8aed93f3] 27141: 27142: * parse.lex: 27143: stupid hack for broken aix lex 27144: [efc3f9e5280e] 27145: 27146: * tgetpass.c: 27147: now includes compat.h 27148: [401822173f77] 27149: 27150: * visudo.c: 27151: now includes fcntl.h 27152: [63865c2f8ac6] 27153: 27154: * compat.h: 27155: added FD_SET and FD_ZERO for 4.2BSD 27156: [00c5597c0bb0] 27157: 27158: * parse.yacc: 27159: dirty hack to fix parser bug. i don't really like this but it works 27160: for now... 27161: [5b8bbdc81569] 27162: 27163: * sudo.c: 27164: uid2str is now static like the prototype says 27165: [f2a97b5cb870] 27166: 27167: 1995-03-30 Todd C. Miller <Todd.Miller@courtesan.com> 27168: 27169: * CHANGES, SUPPORTED, TODO, TROUBLESHOOTING: 27170: updated 27171: [6f79c3e92716] 27172: 27173: * RUNSON: 27174: Initial revision 27175: [12a09ef9e884] 27176: 27177: * sudo.c: 27178: check_sudoers now returns an error code and sudo calls inform_user 27179: and log_error based on the return value. 27180: [340eca188d9a] 27181: 27182: * logging.c, sudo.h: 27183: added entries for new errors 27184: [6050d8542e1f] 27185: 27186: * parse.c: 27187: now set uid to that of SUDOERS_OWNER while parsing sudoers file 27188: [3683c42bc9b0] 27189: 27190: * Makefile.in: 27191: took out testsudoers 27192: [65317d49db48] 27193: 27194: * sudo.c: 27195: now explicately checks that it is setuid root 27196: [2fe1be60ef6a] 27197: 27198: * sudo.c: 27199: If a user has no passwd entry sudo would segv (writing to a garbage 27200: pointer). Now allocate space before writing :-) 27201: [d08e7eb5e5ef] 27202: 27203: * configure.in: 27204: reordered AC_CHECK_FUNCS 27205: [4c82e56c6f4f] 27206: 27207: * config.h.in: 27208: fixed memset macro 27209: [77ede6b714ab] 27210: 27211: * tgetpass.c, visudo.c: 27212: bzero -> memset 27213: [1a005bb322c8] 27214: 27215: * logging.c: 27216: bzero -> memset when a parse error is logged the line number of the 27217: error is now logged too 27218: [a42d68047723] 27219: 27220: * INSTALL: 27221: added Sunos to blurb about c2 security 27222: [af750a1d131e] 27223: 27224: * configure.in: 27225: added a SUN4 define for C2 security 27226: [6ad5b23a3eb0] 27227: 27228: * config.h.in: 27229: bcopy -> memmove bzero -> memset 27230: [5494460c8464] 27231: 27232: * lsearch.c: 27233: bcopy -> memmove char * -> VOID * 27234: [a15f5c316e16] 27235: 27236: * check.c: 27237: added support for sunos with C2 security 27238: [03fea5bb21e6] 27239: 27240: * OPTIONS, options.h: 27241: reordered 27242: [1686265af3e1] 27243: 27244: * pathnames.h.in: 27245: _PATH_SUDO_LOGFILE now set based on configure 27246: [5867b58e4a04] 27247: 27248: * configure.in: 27249: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T 27250: [1984d9fd1b5c] 27251: 27252: * config.h.in: 27253: added _SUDO_PATH_LOGFILE 27254: [dd3eebe62580] 27255: 27256: * aclocal.m4: 27257: added SUDO_LOGFILE to find where to put sudo.log added 27258: SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h too) added 27259: SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE) 27260: [c589a515a99a] 27261: 27262: 1995-03-29 Todd C. Miller <Todd.Miller@courtesan.com> 27263: 27264: * TROUBLESHOOTING: 27265: Initial revision 27266: [f42f1baba3a8] 27267: 27268: * sudo.c: 27269: now do set_perms(PERM_ROOT) before the getpwuid() in load_global() 27270: to work around a problem is trusted hpux shadow passwords. yuck. 27271: [ae1f13b54687] 27272: 27273: * parse.yacc: 27274: backed out a change in malloc/realloc 27275: [ab868db0ad69] 27276: 27277: * parse.yacc: 27278: now include stdlib.h 27279: [957eef0631eb] 27280: 27281: * visudo.c: 27282: now do an freopen() of the stmp file so that yyin will always point 27283: to the same thing. This is important for flex since we are doing a 27284: YY_NEWFILE 27285: [44558922fd3e] 27286: 27287: * parse.yacc: 27288: replaced yywrap() with parser_cleanup() since yywrap() needs to be 27289: in parse.lex to be able to use YY_NEW_FILE. sigh. 27290: [12dd09921074] 27291: 27292: * parse.lex: 27293: now have a rule that matches anything that doesn't match an 27294: explicite rule. well, you know what i mean (. matches anything not 27295: yet matched). However, this means that there is input still queued 27296: up so we need to do a YY_NEW_FILE; in yywrap. So, yywrap has moved 27297: into parse.lex and it calls parser_cleanup() which is most of the 27298: old yywrap() sigh. 27299: [7f4042bc48d6] 27300: 27301: * SUPPORTED: 27302: no longer used 27303: [8f220be4da94] 27304: 27305: * getcwd.c, getwd.c: 27306: moved compat.h to be the last include file 27307: [9f3a65e2d485] 27308: 27309: * parse.yacc: 27310: fixed type of aliascmp() args 27311: [1c27eb989bdf] 27312: 27313: * find_path.c: 27314: NULL -> '\0' 27315: [5c8d8cf1692e] 27316: 27317: * parse.yacc: 27318: added casts to lfind and lsearch args for irix 27319: [61027ddeecf8] 27320: 27321: * Makefile.in: 27322: bsdinstall -> install-sh 27323: [61de6612c5a5] 27324: 27325: * INSTALL: 27326: added info about make realclean 27327: [29c6324d727f] 27328: 27329: * Makefile.in: 27330: updated VERSION added dependencies for visudo.cat 27331: [09077d7229d4] 27332: 27333: * version.h: 27334: -> pl5b1 27335: [5d21c7ad1a41] 27336: 27337: * sudo.c: 27338: took out -l 27339: [fc1478d81b38] 27340: 27341: * Makefile.in: 27342: now there is a real visudo.man and visudo.cat 27343: [58aeac43a6dd] 27344: 27345: * sudo.man: 27346: took out visudo stuff 27347: [4a6ac4393343] 27348: 27349: * visudo.man: 27350: Initial revision 27351: [cba348843db8] 27352: 27353: * parse.c, parse.lex, parse.yacc: 27354: updated copyright 27355: [ffa16b70944a] 27356: 27357: * README: 27358: updated for pl5 27359: [a26e423e9e5f] 27360: 27361: * sudo.man: 27362: updated Nieusma & Hieb email addresses 27363: [f0083e71989d] 27364: 27365: * INSTALL: 27366: updated to include options.h and OPTIONS 27367: [ee59e2b76c94] 27368: 27369: * CHANGES, TODO: 27370: updated 27371: [51e011ad5220] 27372: 27373: * BUGS: 27374: eliminated bug #1 (yay) 27375: [e7e88515494e] 27376: 27377: * configure.in: 27378: sunos no longer gets linked statically 27379: [2e5b3ff3108f] 27380: 27381: 1995-03-28 Todd C. Miller <Todd.Miller@courtesan.com> 27382: 27383: * parse.lex: 27384: prototype now uses __P() 27385: [68ecdcab4c70] 27386: 27387: * parse.lex: 27388: make fill() non-ansi 27389: [d6509972260b] 27390: 27391: * parse.c: 27392: made -v (validate) work 27393: [13c9d520638c] 27394: 27395: * logging.c: 27396: now gives host 27397: [f04859cdba5a] 27398: 27399: * find_path.c: 27400: don't check for execute/statable if fq or relative path given 27401: [4bbe851f3973] 27402: 27403: * parse.c: 27404: added a cast 27405: [345c308f72f3] 27406: 27407: * visudo.c: 27408: now include ctype.h for islower and tolower macros 27409: [582c0aa332d5] 27410: 27411: * goodpath.c: 27412: moved _S_IFMT & _S_ISREG to compat.h 27413: [828e4ca4e7b4] 27414: 27415: * sudo.c: 27416: moved a set of parens 27417: [5783474ecf37] 27418: 27419: * strdup.c: 27420: now include compat.h 27421: [75e2036b94af] 27422: 27423: * emul/search.h: 27424: void * -> VOID * 27425: [cedcfaf04161] 27426: 27427: * parse.yacc: 27428: now cast malloc & realloc return vals added search for HAVE_LSEARCH 27429: now use strcmp if no strcasecmp available 27430: [d6a42bc3d4ae] 27431: 27432: * lsearch.c: 27433: void * -> VOID * 27434: [886adc44f607] 27435: 27436: * config.h.in: 27437: removed HAVE_FLEX added VOID added HAVE_DIRENT_H, HAVE_SYS_NDIR_H, 27438: HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH 27439: [3b50d7fb4349] 27440: 27441: * compat.h: 27442: added _S_IFMT, _S_IFREG, and S_ISREG 27443: [73d506c7d53c] 27444: 27445: * aclocal.m4: 27446: took out SUDO_PROG_INSTALL 1.x to 2.x changes added echo and results 27447: to most SUDO_* macros 27448: [8442155f5936] 27449: 27450: * Makefile.in: 27451: no more -I. 27452: [63462f195bd4] 27453: 27454: * configure.in: 27455: various 1.x ro 2.x autoconf changes now check for strcasecmp now use 27456: AC_INSTALL_PROG instead of custom one added check for fully woorking 27457: void implementation 27458: [5ac6b6e6230f] 27459: 27460: * Makefile.in: 27461: added lsearch & search.h visudo links into $(LIBOBJS) 27462: [bc119cda4598] 27463: 27464: * aclocal.m4: 27465: partial 1.x to 2.x changes added SUDO_FULL_VOID 27466: [1194d01fa5c5] 27467: 27468: * visudo.c: 27469: whatnow_help was prototyped to be static be was not declared as 27470: such 27471: [0f85489dd426] 27472: 27473: * configure.in: 27474: autoconf 2.x changes took out HAVE_FLEX (no longer used) added check 27475: for dirent/dir/ndir.h 27476: [7408f3854948] 27477: 27478: * parse.c: 27479: now use groovy gnu autoconf macro AC_HEADER_DIRENT 27480: [e465db9f5dfa] 27481: 27482: * getcwd.c, getwd.c: 27483: MAXPATHLEN -> MAXPATHLEN+1 27484: [714d87424e21] 27485: 27486: * emul/search.h, lsearch.c: 27487: Initial revision 27488: [55d79482c535] 27489: 27490: 1995-03-27 Todd C. Miller <Todd.Miller@courtesan.com> 27491: 27492: * parse.yacc: 27493: eliminated bison warnings 27494: [61ca0a96da22] 27495: 27496: * parse.lex: 27497: added missing case 27498: [6be0f849747c] 27499: 27500: * visudo.c: 27501: now iincludes signal.h 27502: [221e0fcc144f] 27503: 27504: * parse.yacc: 27505: only clear data structures on a parse error 27506: [7b1c0f1a4527] 27507: 27508: * visudo.c: 27509: whatnow() now gives help on invalid input 27510: [e5a4cd88c587] 27511: 27512: * visudo.c: 27513: added a whatnow() function (sort of like mh) 27514: [932d9b145f1c] 27515: 27516: * parse.yacc: 27517: kill_aliases -> reset_aliases yywrap() now cleans up by calling 27518: reset_aliases() and clearing top took reset stuff out of yyerror() 27519: since it doesn't beling there (and doesn't work anyway). errorlineno 27520: is now initially set to -1 so we can set it to the first error that 27521: occurrs (it was getting set to the last) 27522: [2f71f95a974c] 27523: 27524: * parse.lex: 27525: added a void cast 27526: [18ae6042dce4] 27527: 27528: * visudo.c: 27529: rewrote from scratch based on 4.3BSD vipw.c 27530: [2f6814f18576] 27531: 27532: 1995-03-26 Todd C. Miller <Todd.Miller@courtesan.com> 27533: 27534: * sudo.c, sudo.h: 27535: removed ocmnd 27536: [a31735f41ad4] 27537: 27538: * sudo.h: 27539: no more sudo_realpath() and find_path() changed params 27540: [8e85c3b39159] 27541: 27542: * sudo.c: 27543: find_path() changed since no more realpath() 27544: [b25366c7f2ee] 27545: 27546: * parse.yacc: 27547: on error, errorlineno is set to the line where the error occurred 27548: added kill_aliases() to free the aliases struct now clean up in 27549: yyerror() so we can reparse cleanly 27550: [2342f578c27a] 27551: 27552: * options.h, parse.c: 27553: no more USE_REALPATH 27554: [cfc59babeaff] 27555: 27556: * logging.c: 27557: changed to use new find_path() 27558: [91c7a38e7751] 27559: 27560: * find_path.c: 27561: removed all the realpath() stuff 27562: [cc21a43a8562] 27563: 27564: * Makefile.in: 27565: sudo_realpath.c -> sudo_goodpath.c 27566: [03a9b1ddec2f] 27567: 27568: * visudo.c: 27569: now works correctly with utk parser 27570: [08aa554a0ce8] 27571: 27572: * goodpath.c: 27573: Initial revision 27574: [1ea607e1ffb2] 27575: 27576: * sudo_realpath.c: 27577: eliminated a compiler warning 27578: [198bcccc55b6] 27579: 27580: * sudo.c: 27581: elinated compiler warning 27582: [e2384f9a878b] 27583: 27584: * sudo_realpath.c: 27585: added sudo_goodpath() 27586: [43878c4cc540] 27587: 27588: * sudo.h: 27589: added prototype for sudo_goodpath 27590: [23e8627a2265] 27591: 27592: * parse.c: 27593: added support for /sys/dir.h 27594: [eca897087741] 27595: 27596: * options.h: 27597: USE_REALPATH turned off 27598: [620ac8b63d85] 27599: 27600: * find_path.c: 27601: added calls to sudo_goodpath() 27602: [ad170904fbcd] 27603: 27604: * configure.in: 27605: added check for dirent.h 27606: [7964a8c26855] 27607: 27608: * config.h.in: 27609: added HAVE_DIRENT_H 27610: [1f785fec7e19] 27611: 27612: * configure.in: 27613: added in linux shadow pass stuff 27614: [e585a5785f50] 27615: 27616: 1995-03-24 Todd C. Miller <Todd.Miller@courtesan.com> 27617: 27618: * visudo.c: 27619: added back host, user, cmnd, parse_error 27620: [0ec19f3d64f4] 27621: 27622: * visudo.c: 27623: added in utk changes plus some minor cosmetic changes 27624: [c5c1921c8a58] 27625: 27626: * sudo.c, sudo_realpath.c: 27627: added void casts for printf's 27628: [9c6ff11c0082] 27629: 27630: * options.h: 27631: added a define of USE_REALPATH 27632: [db3711c9efc5] 27633: 27634: * configure.in: 27635: there is no more visudoers/Makefile 27636: [36e1bc1f78d0] 27637: 27638: * Makefile.in: 27639: added in utk changes (visudo is now built from the toplevel) 27640: [76203d4b345d] 27641: 27642: * find_path.c: 27643: added (void) casts to printf's 27644: [dd5cb1e060ac] 27645: 27646: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: 27647: merged in utk changes 27648: [35563307fd8e] 27649: 27650: 1995-03-23 Todd C. Miller <Todd.Miller@courtesan.com> 27651: 27652: * find_path.c: 27653: now check to see that what we are trying to run is a file (or a link 27654: to a file, we do a stat(2) so there is no diff) 27655: [05889c4bcace] 27656: 27657: 1995-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 27658: 27659: * CHANGES: 27660: updated 27661: [3e8047bb26fb] 27662: 27663: * Makefile.in: 27664: aclocal.m4 -> acsite.m4 make realclean updated for new autoconf 27665: [0bdbaa7c4c7d] 27666: 27667: * sudo.man: 27668: added myself as maintainer 27669: [77a9d75aab84] 27670: 27671: 1995-02-17 Todd C. Miller <Todd.Miller@courtesan.com> 27672: 27673: * sudo.c: 27674: changed setegid -> setgid 27675: [7f4788d73b6f] 27676: 27677: 1995-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 27678: 27679: * configure.in: 27680: fixed the test for irix 5.x to skip bad libs 27681: [bfef896de013] 27682: 27683: * aclocal.m4: 27684: now initialize OS and OSREV 27685: [cc302756e440] 27686: 27687: 1995-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 27688: 27689: * configure.in: 27690: irix5 changes 27691: [ac985b23f5f2] 27692: 27693: * configure.in: 27694: AC_WITH -> AC_ARG_WITH changes other misc changes for autoconf 2.1 27695: compatibility 27696: [0cf8c92a06d7] 27697: 27698: 1995-01-19 Todd C. Miller <Todd.Miller@courtesan.com> 27699: 27700: * visudo.c: 27701: use YY_NEW_FILE, not yyrestart since OSF flex doesn't do the righ 27702: thing wrt yyrestart (grrrr) 27703: [18e8eabfbb82] 27704: 27705: 1995-01-16 Todd C. Miller <Todd.Miller@courtesan.com> 27706: 27707: * Makefile.in: 27708: added visudoers/compat.h to DISTFILES 27709: [db23b574b034] 27710: 27711: * configure.in: 27712: fixed an echo 27713: [7cbc0462b89d] 27714: 27715: * sudo.c: 27716: added ocmnd declaration adjusted for find_path()'s new parameters 27717: [d929cd156474] 27718: 27719: * sudo.h: 27720: added ocmnd extern adjusted find_path() prototype 27721: [e0004daf5d3c] 27722: 27723: * parse.c: 27724: cmndcmp() now takes 3 arguments and checks against the qualified as 27725: well as the unqualified pathname. more code that should use 27726: cmndcmp() but did not, now does 27727: [6f70a8c17bee] 27728: 27729: * options.h: 27730: added to a comment 27731: [7a78680426b2] 27732: 27733: * logging.c: 27734: changed to use new find_path() parameter passing 27735: [840981d30db4] 27736: 27737: * find_path.c: 27738: find_path() now takes 2 copyout parameters (one for the qualified 27739: pathname and one for the unqualified pathname). The third parameter 27740: may be NULL. 27741: [851503b005e9] 27742: 27743: * configure.in: 27744: no longer munge pathnames.h 27745: [427d8796c5a9] 27746: 27747: * pathnames.h.in: 27748: changed _PATH_* to use _SUDO_PATH_* (which are defined in config.h) 27749: as a result, pathnames.h does not need to be run through configure 27750: and the user can override the configured values easily. 27751: [2e378f2ebe88] 27752: 27753: * config.h.in: 27754: added _SUDO_PATH_* entries 27755: [0857de7cebab] 27756: 27757: * aclocal.m4: 27758: _PATH* -> _SUDO_PATH_* 27759: [7601193f56cc] 27760: 27761: * Makefile.in: 27762: updated DISTFILES and HDRS .o's now depend on config.h 27763: [39d8601965cf] 27764: 27765: 1995-01-13 Todd C. Miller <Todd.Miller@courtesan.com> 27766: 27767: * compat.h: 27768: removed extraneous #endif 27769: [27d4c5f2ce7e] 27770: 27771: * aclocal.m4: 27772: added SUDO_PROG_MV 27773: [76dda3bdd816] 27774: 27775: * configure.in: 27776: added SUDO_PROG_MV added riscos and isc os types took out 27777: -DSHORT_MESSAGE from --with-csops since it is now the default 27778: [68c206ad976e] 27779: 27780: * sudo.c: 27781: move the include of id.h to compat.h now includes options.h 27782: [45a1eaafb3a8] 27783: 27784: * sudo.h: 27785: moved compatibility #defines to compat.h 27786: [0eee27057698] 27787: 27788: * pathnames.h.in: 27789: added _PATH_MV 27790: [e830797ab320] 27791: 27792: * config.h.in: 27793: move __P to compat.h 27794: [188e12e0ba93] 27795: 27796: * getcwd.c, getwd.c, putenv.c: 27797: now includes compat.h 27798: [c72cb6d73981] 27799: 27800: * compat.h: 27801: Initial revision 27802: [d4d2f359ae03] 27803: 27804: 1995-01-12 Todd C. Miller <Todd.Miller@courtesan.com> 27805: 27806: * sudo.h: 27807: pull user-configurable stuff out and put in options.h 27808: [ef929467b070] 27809: 27810: 1995-01-11 Todd C. Miller <Todd.Miller@courtesan.com> 27811: 27812: * parse.lex, parse.yacc, visudo.c: 27813: now includes options.h 27814: [e36d7c82add1] 27815: 27816: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c, 27817: sudo_setenv.c: 27818: now includes options.h 27819: [f186ba03de07] 27820: 27821: * Makefile.in: 27822: added visudoers/options.h 27823: [e5350c476494] 27824: 27825: * OPTIONS, options.h: 27826: Initial revision 27827: [9b6b5001e318] 27828: 27829: * Makefile.in: 27830: added OPTIONS and options.h 27831: [25448341e16a] 27832: 27833: * logging.c: 27834: changed #ifdef's to use LOGGING and SLOG_SYSLOG/SLOG_FILE 27835: [5dd6385dd1d3] 27836: 27837: * check.c, sudo.h: 27838: changed PASSWORD_TIMEOUT to minutes 27839: [0ec6aab98738] 27840: 27841: 1994-12-17 Todd C. Miller <Todd.Miller@courtesan.com> 27842: 27843: * visudo.c: 27844: now only do Editor +line_num if line_num != 0 27845: [b69f04b5e3c7] 27846: 27847: 1994-12-16 Todd C. Miller <Todd.Miller@courtesan.com> 27848: 27849: * visudo.c: 27850: now use mv if rename(2) fails 27851: [83210dca1bab] 27852: 27853: * BUGS: 27854: added a visudo bug 27855: [d61a806f9aa7] 27856: 27857: * check.c: 27858: expanded comment 27859: [641f2cba94cb] 27860: 27861: 1994-11-12 Todd C. Miller <Todd.Miller@courtesan.com> 27862: 27863: * check.c: 27864: fixed user_is_exempt to return 0 if EXEMPTGROUP is not set 27865: [7a11135039a8] 27866: 27867: 1994-11-10 Todd C. Miller <Todd.Miller@courtesan.com> 27868: 27869: * sudo.c: 27870: added mips & isc support 27871: [e258dc053119] 27872: 27873: * parse.c: 27874: added support for non-root owned sudoers file 27875: [fea07e65a0fc] 27876: 27877: * check.c: 27878: added exempt group support 27879: [928fb4bd9ad5] 27880: 27881: * sudo.h: 27882: added set_perms() support added SUDOERS_OWNER so can have non-root 27883: own sudoers file added exempt group support added isc support 27884: [61c578d31fc1] 27885: 27886: * visudo.c: 27887: now copy sudoers to temp file via read/write (not stdio) now chown 27888: new sudoers file to SUDOERS_OWNER 27889: [a5176c59df70] 27890: 27891: 1994-11-08 Todd C. Miller <Todd.Miller@courtesan.com> 27892: 27893: * configure.in: 27894: added skey support 27895: [35a8d2fabdb7] 27896: 27897: * sudo_realpath.c: 27898: be_* -> setperms() 27899: [a1631d686e1c] 27900: 27901: * sudo.h: 27902: fixed typo added set_perms support added skey support added 27903: seteuid()/setegid() emulation for AIX 27904: [c0c8d6771406] 27905: 27906: * sudo.c: 27907: be_* -> setperms() now check to make sure sudoers file is owned by 27908: root nread/write by only root 27909: [13ab1e261f1a] 27910: 27911: * logging.c, parse.c: 27912: be_* -> setperms() 27913: [21499d845c8f] 27914: 27915: * check.c: 27916: be_* -> set_perms() added skey support 27917: [df51b56871c1] 27918: 27919: 1994-11-06 Todd C. Miller <Todd.Miller@courtesan.com> 27920: 27921: * Makefile.in: 27922: ++version 27923: [3c1abbe4e43c] 27924: 27925: * version.h: 27926: ++ 27927: [1d2f9b540a95] 27928: 27929: 1994-10-21 Todd C. Miller <Todd.Miller@courtesan.com> 27930: 27931: * sudo.c: 27932: now sets IFS 27933: [eabbb41b9f08] 27934: 27935: * insults.h: 27936: fixed typo 27937: [c7997f19216e] 27938: 27939: 1994-10-15 Todd C. Miller <Todd.Miller@courtesan.com> 27940: 27941: * config.h.in: 27942: added HAVE_SKEY 27943: [da948ec4186b] 27944: 27945: 1994-10-04 Todd C. Miller <Todd.Miller@courtesan.com> 27946: 27947: * CHANGES: 27948: updated 27949: [f4b55ab007ea] 27950: 27951: * Makefile.in: 27952: ++version 27953: [0489068b8c95] 27954: 27955: * version.h: 27956: ++ 27957: [d189faedf423] 27958: 27959: * sudo.c: 27960: now bail if ARgv[1] > MAXPATHLEN 27961: [0cea8ecc9dc2] 27962: 27963: * configure.in: 27964: added function check for tcgetattr(3) 27965: [e03289b22c2f] 27966: 27967: * config.h.in: 27968: only define HAVE_TERMIOS_H if you have tcgetattr(3) 27969: [757eab83d1a2] 27970: 27971: * config.h.in: 27972: added check for tcgetattr 27973: [c5ae92715930] 27974: 27975: 1994-09-26 Todd C. Miller <Todd.Miller@courtesan.com> 27976: 27977: * CHANGES: 27978: updated 27979: [cbc419883108] 27980: 27981: 1994-09-22 Todd C. Miller <Todd.Miller@courtesan.com> 27982: 27983: * parse.lex: 27984: now only include unistd.h for linux 27985: [e9adeab95ef0] 27986: 27987: 1994-09-21 Todd C. Miller <Todd.Miller@courtesan.com> 27988: 27989: * Makefile.in: 27990: added visudo.8 generation 27991: [d6a3f0f887f8] 27992: 27993: * configure.in: 27994: added -Wl,-bI:./aixcrypt.exp to aix flags 27995: [72594a21edcf] 27996: 27997: 1994-09-20 Todd C. Miller <Todd.Miller@courtesan.com> 27998: 27999: * BUGS: 28000: added one 28001: [9993a349e096] 28002: 28003: * CHANGES: 28004: updated 28005: [297b31ec4cdd] 28006: 28007: * README: 28008: added mailing list info 28009: [10372f94a2b2] 28010: 28011: * parse.yacc: 28012: now use sudolineno instead of yylineno fixed bison warnings 28013: [25a83e62057b] 28014: 28015: * configure.in: 28016: now use -no_library_replacement for osf don't make a static binary 28017: for hpux >= 9.0 28018: [1fa7b892f1a3] 28019: 28020: * tgetpass.c: 28021: added string.h/strings.h inclusion 28022: [71faa98fc0a1] 28023: 28024: * config.h.in: 28025: added ssize_t def 28026: [406284bd1ac0] 28027: 28028: * parse.lex: 28029: added inclusion of string.h/strings.h 28030: [6985b1df5d09] 28031: 28032: * aclocal.m4: 28033: fixed uname | sed (needed to quote the '[') 28034: [4cd2d3415c1a] 28035: 28036: * parse.lex: 28037: replaced yylineno with sudolineno fixed bison syntax errors 28038: [0bd31a5fab26] 28039: 28040: * visudo.c: 28041: changed yylineno to sudolineno since yylineno cannot be counted 28042: upon. 28043: [38c30104d0ae] 28044: 28045: * TODO: 28046: updated 28047: [5d4746f1a752] 28048: 28049: * parse.c: 28050: added code to support command listings 28051: [030172e133fd] 28052: 28053: * sudo.c: 28054: added code for -l flag 28055: [801dbbc82778] 28056: 28057: * sudo.man: 28058: fixed typo added info for -l flag 28059: [8916ca945d65] 28060: 28061: * configure.in: 28062: AC_SSIZE_T -> SUDO_SSIZE_T 28063: [c61f7f47013f] 28064: 28065: * aclocal.m4: 28066: added SUDO_SSIZE_T 28067: [0ccdb77be84d] 28068: 28069: * sudo.h: 28070: added MODE_LIST 28071: [9b2bd844c76c] 28072: 28073: * configure.in: 28074: added AC_SSIZE_T 28075: [35cca208f9b5] 28076: 28077: * find_path.c, sudo_realpath.c: 28078: readlink() is now declared as returning ssize~_t 28079: [0640a08d1407] 28080: 28081: * configure.in: 28082: added -laud for OSF c2 28083: [b7539c905efc] 28084: 28085: 1994-09-02 Todd C. Miller <Todd.Miller@courtesan.com> 28086: 28087: * Makefile.in, visudo.c: 28088: changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu 28089: [067fd9bcb5e1] 28090: 28091: * config.h.in, parse.lex, parse.yacc, pathnames.h.in: 28092: changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.edu 28093: [fc46e7c7110a] 28094: 28095: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c, 28096: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c, 28097: sudo_setenv.c, tgetpass.c, version.h: 28098: changed sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed 28099: [d1d4fbc53a98] 28100: 28101: 1994-09-01 Todd C. Miller <Todd.Miller@courtesan.com> 28102: 28103: * Makefile.in: 28104: ++version 28105: [b7066d97633f] 28106: 28107: * version.h: 28108: ++ 28109: [65ec69d88110] 28110: 28111: * logging.c: 28112: added host to alertmail messages 28113: [d973c19ce777] 28114: 28115: * CHANGES, TODO: 28116: udpated 28117: [5a65eb16faeb] 28118: 28119: * logging.c: 28120: fixed logging problem where mail would not say which user it was 28121: [35723edcc5d2] 28122: 28123: * configure.in: 28124: added -laud for gcc if osf & c2 28125: [18f1e0ae5548] 28126: 28127: * check.c: 28128: moved set_auth_parameters to sudo.c 28129: [d23112fe01db] 28130: 28131: * sudo.c: 28132: added set_auth_parameters for osf 28133: [eb70f65214ac] 28134: 28135: * configure.in: 28136: cleaned up -static stuff 28137: [01e9575f0422] 28138: 28139: * Makefile.in: 28140: ++version 28141: [7ac3bff5c770] 28142: 28143: * version.h: 28144: ++ 28145: [10a4ff478469] 28146: 28147: * sudo.c: 28148: changed setenv() to sudo_setenv() 28149: [40a78abb9946] 28150: 28151: * check.c: 28152: fixed osf problem 28153: [3d69b118efb8] 28154: 28155: * configure.in: 28156: added OSF C2 stuff 28157: [38cff3ad4093] 28158: 28159: * CHANGES: 28160: updated 28161: [cd341dd0581a] 28162: 28163: * check.c: 28164: added osf auth support & removed some extra spaces 28165: [a448cdd81514] 28166: 28167: * INSTALL, SUPPORTED: 28168: added osf C2 stuff 28169: [f70484796146] 28170: 28171: 1994-08-31 Todd C. Miller <Todd.Miller@courtesan.com> 28172: 28173: * TODO: 28174: added 2 suggestions 28175: [695fbdbd86e6] 28176: 28177: * Makefile.in: 28178: removed README.v1.3.1 and added VERSION stuff 28179: [f69403eb04c6] 28180: 28181: * version.h: 28182: pl1 28183: [21580c0f8cb1] 28184: 28185: 1994-08-30 Todd C. Miller <Todd.Miller@courtesan.com> 28186: 28187: * version.h: 28188: 1.3.1final 28189: [630114970298] 28190: 28191: * Makefile.in: 28192: added HISTORY 28193: [901bff251614] 28194: 28195: * sudo.man: 28196: mention HISTPRY file 28197: [86dbcfd4326e] 28198: 28199: * sudo.c: 28200: use sizeof instead of a constant in 1 place 28201: [d819604c68ca] 28202: 28203: * parse.yacc: 28204: added unistd.h 28205: [6f9500f9fe7e] 28206: 28207: * parse.lex: 28208: added unistd.h 28209: [468b81a276eb] 28210: 28211: * README: 28212: udpated 28213: [7e275618923a] 28214: 28215: * HISTORY: 28216: Initial revision 28217: [5db1b0a3939b] 28218: 28219: 1994-08-17 Todd C. Miller <Todd.Miller@courtesan.com> 28220: 28221: * version.h: 28222: ++ 28223: [7dfbb4a810bb] [SUDO_1_3_1] 28224: 28225: * CHANGES: 28226: updated 28227: [7820ee610bf8] 28228: 28229: * sudo_setenv.c: 28230: added unistd.h include 28231: [30cf2b654525] 28232: 28233: 1994-08-16 Todd C. Miller <Todd.Miller@courtesan.com> 28234: 28235: * sudo.c: 28236: added sys/time.h for AIX 28237: [199fc8caf3a3] 28238: 28239: 1994-08-15 Todd C. Miller <Todd.Miller@courtesan.com> 28240: 28241: * configure.in: 28242: added check for -lsocket and sys/sockio.h 28243: [f9abfbb31031] 28244: 28245: * config.h.in: 28246: took out libshadow check and added in sys/sockio.h check 28247: [0c4b0393ac80] 28248: 28249: * sudo.c: 28250: now include sockio.h instead of ioctl.h if it exists "sudo -" now 28251: gets a better error message 28252: [53041bea5483] 28253: 28254: * sample.sudoers: 28255: now has a dir and subnet entry 28256: [56b820f65438] 28257: 28258: 1994-08-13 Todd C. Miller <Todd.Miller@courtesan.com> 28259: 28260: * sudo.c: 28261: removed if_ether.h 28262: [b4f64507493e] 28263: 28264: * TODO: 28265: added an item 28266: [ea2a1bb6922a] 28267: 28268: * sudo.man: 28269: added network and ip addresses to man page 28270: [01c85016511f] 28271: 28272: * sudo.c: 28273: no error if can't get interfaces or netmask since networking may not 28274: be in the kernel. 28275: [50b8890e2134] 28276: 28277: * parse.c: 28278: nwo check for interfaces == NULL 28279: [dc1b3eef0db2] 28280: 28281: * parse.c: 28282: fixed a bug that caused directory specs in a Cmnd_Alias to fail if 28283: the last entry in the spec failed (ie: it was only looking at the 28284: last entry). CLeaned things up by adding the cmndcmp() function--all 28285: neat & tidy 28286: [007e93578e5e] 28287: 28288: * CHANGES: 28289: added one 28290: [40e8a2cef497] 28291: 28292: 1994-08-12 Todd C. Miller <Todd.Miller@courtesan.com> 28293: 28294: * sudo.c: 28295: now do two passes to skip bogus interfaces (lo0, etc) 28296: [465e30aecaf7] 28297: 28298: * parse.lex, parse.yacc, visudo.c: 28299: added include of netinet/in.h 28300: [11e3816ed362] 28301: 28302: * logging.c, sudo_realpath.c, sudo_setenv.c: 28303: added ninclude of netinet/in.h 28304: [daccfa40fe1e] 28305: 28306: * check.c, find_path.c, getcwd.c, getwd.c: 28307: added include of netinet/in.h 28308: [0222f95e06ad] 28309: 28310: * version.h: 28311: ++ 28312: [d6b0cfa35a38] 28313: 28314: * sudo.h: 28315: added interfaces global 28316: [ba52fa8ad75e] 28317: 28318: * parse.c: 28319: now uses new interfaces global 28320: [17473ad5ecba] 28321: 28322: * sudo.c: 28323: now ip addresses are gleaned fw/o dns 28324: [8828bb2007e0] 28325: 28326: 1994-08-10 Todd C. Miller <Todd.Miller@courtesan.com> 28327: 28328: * sudo.c: 28329: added load_ip_addrs() to load the ip_addrs global var 28330: [60c825f04238] 28331: 28332: * parse.c: 28333: added hostcmp() to compare hostnames, ip addrs, and network addrs 28334: [ab0e40e37537] 28335: 28336: * sudo.h: 28337: added ip_addrs def added load_ip_addrs prototype 28338: [c41c565d0777] 28339: 28340: 1994-08-08 Todd C. Miller <Todd.Miller@courtesan.com> 28341: 28342: * CHANGES: 28343: updated 28344: [2a128dbe9bcb] 28345: 28346: * Makefile.in: 28347: removed multiple entries in DISTFILES 28348: [2490f4f371e6] 28349: 28350: * visudo.c: 28351: ansified the !STDC_HEADERS decls 28352: [646ba06d17ae] 28353: 28354: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: 28355: don't do malloc decl if gnuc 28356: [f1bad1925f98] 28357: 28358: * sudo.c: 28359: can't use getopt(3) since it munges args to the command to be run as 28360: root don't do malloc decl if gnuc 28361: [38e78f6da14e] 28362: 28363: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c, 28364: sudo_realpath.c, sudo_setenv.c: 28365: ansi-fied !STDC_HEADER function prottypes 28366: [51d8cad89976] 28367: 28368: * getcwd.c, getwd.c: 28369: added missing paren 28370: [6a1fae70e27e] 28371: 28372: * Makefile.in: 28373: added putenv.c to DISTFILES 28374: [a5e4523eabbb] 28375: 28376: * sudo_setenv.c: 28377: added params to func decls when STDC_HEADERS is not defined now can 28378: count on putenv() being there 28379: [fd587796189b] 28380: 28381: * sudo_realpath.c: 28382: took out errno decl since sudo.h does it for us fixed up a next cc 28383: warning added params to func decls when STDC_HEADERS is not defined 28384: [70fa5152ace6] 28385: 28386: * sudo.h: 28387: took out environ extern added local declaratio of putenv() if local 28388: version is needed 28389: [a84bae6c020d] 28390: 28391: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: 28392: added params to func decls when STDC_HEADERS is not defined 28393: [f406f0e47ac0] 28394: 28395: * config.h.in: 28396: added memcpy check check to see that ansi vs bsd macros are ntot 28397: already defiend before defining (ie: avoid redefinition) 28398: [879ae026e19f] 28399: 28400: * configure.in: 28401: removed fluff setenv check plus check w/ replace for putenv if also 28402: no setenv 28403: [e3c03814ad4b] 28404: 28405: * putenv.c: 28406: Initial revision 28407: [3cff63e2dc1b] 28408: 28409: 1994-08-06 Todd C. Miller <Todd.Miller@courtesan.com> 28410: 28411: * sudo_setenv.c: 28412: Initial revision 28413: [4d637631fa6b] 28414: 28415: * sudo.h: 28416: rm'd s realp[ath added sudo_realpath and sudo_setenv 28417: [07ba001ff57e] 28418: 28419: * sudo.c: 28420: now use sudo_setenvc 28421: [fd81e04d5ef0] 28422: 28423: * configure.in: 28424: added puteenv and setenv, removed realpath 28425: [27bfacfb513b] 28426: 28427: * config.h.in: 28428: added putenv & setenv 28429: [515f14eaf6e4] 28430: 28431: * Makefile.in: 28432: added sudo_setenv 28433: [217731a717c5] 28434: 28435: * version.h: 28436: ++ 28437: [eadb346d7129] 28438: 28439: 1994-08-05 Todd C. Miller <Todd.Miller@courtesan.com> 28440: 28441: * configure.in: 28442: added MAN_POSTINSTALL and /usr/share/catman for irix 28443: [2a9496c1bdba] 28444: 28445: * Makefile.in: 28446: added MAN_POSTINSTALL 28447: [89b0d4695529] 28448: 28449: * CHANGES: 28450: added 28451: [48c021ba8a70] 28452: 28453: * sudo.man: 28454: added SUDO_* plus new options 28455: [c0759cff5683] 28456: 28457: * CHANGES: 28458: added one 28459: [7d44a3922d56] 28460: 28461: * configure.in: 28462: took out shadow lib 28463: [07cf3de18701] 28464: 28465: * TODO: 28466: adde done 28467: [a27a578e8afe] 28468: 28469: * visudo.c: 28470: now use yyrestart() if flex now reset yylineno to 0 28471: [77d67ce0b677] 28472: 28473: * Makefile.in: 28474: support for installing a cat page instead of a man page if no nroff 28475: [44671c0fc0fa] 28476: 28477: * configure.in: 28478: now defines HAVE_FLEX fixed up man stuff so that it looks for nroff 28479: to determine whether or not to install a cat or man page 28480: [0562d069c135] 28481: 28482: * config.h.in: 28483: added HAVE_FLEX 28484: [c5490bae39d3] 28485: 28486: * sudo.c: 28487: not set ret to MODE_RUN initially 28488: [88b4983c195b] 28489: 28490: * find_path.c: 28491: made command (and therefor cmnd dynamically allocated) 28492: [95b82e32b6de] 28493: 28494: * TODO: 28495: did #8 28496: [fb6f41308cdf] 28497: 28498: * version.h: 28499: ++ 28500: [14112ecab5ae] 28501: 28502: * sudo_realpath.c: 28503: changed bufs from MAXPATHLEN to MAXPATHLEN+1 28504: [0ad4f34e55c0] 28505: 28506: * sudo.h: 28507: added MODE_ removed validate_only and added remove_timestamp() 28508: [dd5f99c57728] 28509: 28510: * sudo.c: 28511: usage() now takes an int (exit value) added parse_args() to parse 28512: command line arguments moved call to find_path() from load_globals 28513: to new function load_cmnd() removed validate_only global -- now use 28514: the concept of "modes" added -h and -k options 28515: [c3887090b28a] 28516: 28517: * parse.c: 28518: no longer use global validate_only now checks for command called 28519: "validate" removed check for non-fully qualified commands since that 28520: is done by find_path 28521: [7d56fbd26369] 28522: 28523: * find_path.c: 28524: changed MAXPATHLEN r to MAXPATHLEN+1 28525: [a86e8664d971] 28526: 28527: * find_path.c: 28528: fixed off by one error with MAXPATHLEN and fixed a comment 28529: [58adcef8c981] 28530: 28531: * check.c: 28532: check_timestamp no longer runs reminder(), it is implied in the 28533: return val added remove_timestamp() 28534: [42ab5a77066f] 28535: 28536: * CHANGES: 28537: updated 28538: [8e69b31df024] 28539: 28540: 1994-08-04 Todd C. Miller <Todd.Miller@courtesan.com> 28541: 28542: * BUGS: 28543: fixed on 28544: [bc34f1ac4280] 28545: 28546: * sudo_realpath.c: 28547: took out old_errno 28548: [a168d00a0768] 28549: 28550: * CHANGES: 28551: updated 28552: [04ba80922df7] 28553: 28554: 1994-08-03 Todd C. Miller <Todd.Miller@courtesan.com> 28555: 28556: * logging.c: 28557: moved send_mail to after syslog 28558: [4d4188087834] 28559: 28560: * sudo.c: 28561: now set SUDO_ envariables 28562: [e5963f1bd3bb] 28563: 28564: 1994-08-01 Todd C. Miller <Todd.Miller@courtesan.com> 28565: 28566: * version.h: 28567: ++ 28568: [2a4534845d8c] 28569: 28570: * sudo_realpath.c: 28571: now print error if chdir fails 28572: [0d75c8973d49] 28573: 28574: * find_path.c: 28575: removed an XXX 28576: [e2077bcb35aa] 28577: 28578: 1994-07-26 Todd C. Miller <Todd.Miller@courtesan.com> 28579: 28580: * CHANGES: 28581: updated 28582: [e30a2b39b41a] 28583: 28584: * configure.in: 28585: no more static binaries for aix 28586: [77a0beb6bd80] 28587: 28588: 1994-07-25 Todd C. Miller <Todd.Miller@courtesan.com> 28589: 28590: * INSTALL: 28591: fixed typo 28592: [ba5e0d391bc4] 28593: 28594: * sudo_realpath.c: 28595: took out stuff not needed for sudo now does be_root/be_user itself 28596: now uses cwd global 28597: [4f6d4641d793] 28598: 28599: * version.h: 28600: +=2 28601: [97da927b297c] 28602: 28603: * logging.c, sudo.c: 28604: be_root/be_user is now down in sudo_realpath() 28605: [f331662fa50f] 28606: 28607: * logging.c, sudo.h: 28608: now works with 4.2BSD syslog (blech) 28609: [98e39d89dd36] 28610: 28611: * find_path.c: 28612: now use sudo_realpath() 28613: [ab436a8ebd02] 28614: 28615: * config.h.in: 28616: took out realpth() stuff since we now use sudo_realpath() 28617: [8de5ef9f6044] 28618: 28619: * configure.in: 28620: ultrix enhanced sec 28621: [815fb7fffcc0] 28622: 28623: * SUPPORTED: 28624: added ultrix enhanced sec. 28625: [6466766c8062] 28626: 28627: * INSTALL: 28628: updated 28629: [d681a634297a] 28630: 28631: * check.c: 28632: ultrix enhanced security suport 28633: [f10c8decbcc2] 28634: 28635: * Makefile.in: 28636: added sudo_realpath.c 28637: [6b9bcd3be022] 28638: 28639: * CHANGES: 28640: updated 28641: [2fa8084c1b53] 28642: 28643: * tgetpass.c: 28644: increased passwd len to 24 for c2 security 28645: [ec64838be62d] 28646: 28647: * BUGS: 28648: updated BUGS 28649: [ca00d8fec2ce] 28650: 28651: 1994-07-15 Todd C. Miller <Todd.Miller@courtesan.com> 28652: 28653: * check.c: 28654: now use user global var 28655: [568769719013] 28656: 28657: * configure.in: 28658: took out -ls 28659: [490a44180d5f] 28660: 28661: 1994-07-14 Todd C. Miller <Todd.Miller@courtesan.com> 28662: 28663: * configure.in: 28664: added AFS libs 28665: [4fb40c8c01ba] 28666: 28667: * sudo.h: 28668: user is now a char * added epasswd 28669: [27a919fafdfb] 28670: 28671: * sudo.c: 28672: added tzset() to load_globals added epasswd (encrypted password) 28673: global made user dynamically allocated 28674: [b99ef9bdbfce] 28675: 28676: * configure.in: 28677: added tzset test 28678: [27592dd1214b] 28679: 28680: * config.h.in: 28681: added HAVE_TZSET 28682: [b13f4213f3d0] 28683: 28684: * check.c: 28685: cleaned up encrypted passwd grab somewhat 28686: [c8ba9a4db38a] 28687: 28688: * configure.in: 28689: fixed AFS typo 28690: [2bfcbce237b6] 28691: 28692: * INSTALL: 28693: added AFS not 28694: [80c67329393c] 28695: 28696: * CHANGES: 28697: udpated 28698: [2f09ecdd5d31] 28699: 28700: * logging.c: 28701: can now log to both syslog & a file 28702: [4d5c0932bc01] 28703: 28704: * sudo.h: 28705: added BOTH_LOGS 28706: [623c539be824] 28707: 28708: * CHANGES: 28709: updated 28710: [a1c7f5ef3616] 28711: 28712: * configure.in: 28713: --with-AFS 28714: [28718d8f5daf] 28715: 28716: * config.h.in: 28717: added HAVE_AFS 28718: [2e32bb4e63e4] 28719: 28720: * check.c: 28721: added afs changes 28722: [fe4d0ff320a2] 28723: 28724: * sudo.h: 28725: removed AFS stuff :-) 28726: [a40387e6fa27] 28727: 28728: * tgetpass.c: 28729: include sys/select for AIX 28730: [f32c5a8f2c84] 28731: 28732: * sudo.h: 28733: added AFS 28734: [da2ab3dd0348] 28735: 28736: * version.h: 28737: ++ 28738: [452d4dfe25af] 28739: 28740: 1994-07-07 Todd C. Miller <Todd.Miller@courtesan.com> 28741: 28742: * CHANGES, SUPPORTED: 28743: updated 28744: [e7dfe6f23a37] 28745: 28746: * logging.c: 28747: can now have MAILER undefined 28748: [1d33b98b35e1] 28749: 28750: * INSTALL: 28751: new sub-note about MAILER 28752: [d35c636a0574] 28753: 28754: * sudo.man: 28755: added blurb about password timeout 28756: [70c2ee50de20] 28757: 28758: * configure.in: 28759: convex c2 changes 28760: [367138a6232e] 28761: 28762: * aclocal.m4: 28763: took out duplicate define of _CONVEX_SOURCE 28764: [647182138450] 28765: 28766: * Makefile.in: 28767: added OSDEFS 28768: [7fdcd50602d1] 28769: 28770: * config.h.in: 28771: added spaces 28772: [f2b8a05e48f3] 28773: 28774: * tgetpass.c: 28775: added a goto if fgets fails 28776: [68a6586d9c45] 28777: 28778: * sudo.h: 28779: use __hpux not hpux convex c2 stuff 28780: [5c377a8d5f34] 28781: 28782: * sudo.c: 28783: use __hpux not hpux 28784: [9363bc0f9f9e] 28785: 28786: * logging.c: 28787: convex c2 stuff 28788: [ea5630975ac4] 28789: 28790: * config.h.in: 28791: define ansi-ish cpp os defines if non-ansi are defined for hpux & 28792: convex 28793: [664f53a5e786] 28794: 28795: * INSTALL: 28796: updated to say we support sonvex C2 28797: [5f2f8b87013e] 28798: 28799: * check.c: 28800: added convex c2 support 28801: [9a665d4918fa] 28802: 28803: 1994-07-01 Todd C. Miller <Todd.Miller@courtesan.com> 28804: 28805: * tgetpass.c: 28806: no more ioctl never returns NULL uses fgets() and select() to 28807: timeout 28808: [b333e6d63e97] 28809: 28810: 1994-06-29 Todd C. Miller <Todd.Miller@courtesan.com> 28811: 28812: * configure.in: 28813: things were testing -n "$GCC" instead of -z "$GCC" 28814: [059a9b15ede2] 28815: 28816: * tgetpass.c: 28817: now works + uses fgets() 28818: [353d7ebcb7bb] 28819: 28820: 1994-06-28 Todd C. Miller <Todd.Miller@courtesan.com> 28821: 28822: * tgetpass.c: 28823: select doesn't seem to recognize a single '\n' as input waiting so 28824: we can;t use it, sigh. 28825: [f76e3218b835] 28826: 28827: 1994-06-26 Todd C. Miller <Todd.Miller@courtesan.com> 28828: 28829: * PORTING: 28830: updated tgetpass() blurb 28831: [95baac736b49] 28832: 28833: * configure.in: 28834: added --with-getpass 28835: [42ac0bdf58ed] 28836: 28837: * Makefile.in: 28838: added tgetpass stuff 28839: [e2b38c635663] 28840: 28841: * tgetpass.c: 28842: now uses stdio 28843: [36af8ff66e35] 28844: 28845: * version.h: 28846: ++ 28847: [4e81c9db19bd] 28848: 28849: 1994-06-24 Todd C. Miller <Todd.Miller@courtesan.com> 28850: 28851: * PORTING: 28852: updated ,. 28853: [54f523770a05] 28854: 28855: * config.h.in: 28856: added USE_GETPASS && HAVE_C2_SECURITY 28857: [86b355cb2953] 28858: 28859: * configure.in: 28860: fixed a test aded --with-C2 and --with-tgetpass 28861: [abf6181588ef] 28862: 28863: * check.c: 28864: added hpux C2 shit 28865: [20d4177ffa88] 28866: 28867: * Makefile.in: 28868: took out tgetpass.* 28869: [cc82fd9984b4] 28870: 28871: * INSTALL: 28872: added C2 blurb 28873: [1d2bfc35e4b6] 28874: 28875: 1994-06-13 Todd C. Miller <Todd.Miller@courtesan.com> 28876: 28877: * configure.in: 28878: no termio(s) for ultrix since it is broken 28879: [d3e82e835350] 28880: 28881: * check.c: 28882: added a space (yeah, anal) 28883: [05e4b31ca68c] 28884: 28885: * realpath.c, sudo_realpath.c: 28886: fixed it (duh, rtfm) 28887: [f13097cb8cb6] 28888: 28889: 1994-06-08 Todd C. Miller <Todd.Miller@courtesan.com> 28890: 28891: * config.h.in: 28892: took out bsd signal stuff for irix 28893: [e179cdafc97a] 28894: 28895: * visudo.c: 28896: comments in #endif 28897: [e3a629190f5e] 28898: 28899: * configure.in: 28900: don't define BSD signals for irix 28901: [3ce57bffb7f0] 28902: 28903: * TODO: 28904: did some... 28905: [274241cd0f74] 28906: 28907: * CHANGES: 28908: updated 28909: [8f29fc755faf] 28910: 28911: * realpath.c, sudo_realpath.c: 28912: took out unneeded code by changing where a strings was terminated 28913: [b5564d62d30e] 28914: 28915: 1994-06-07 Todd C. Miller <Todd.Miller@courtesan.com> 28916: 28917: * realpath.c, sudo_realpath.c: 28918: fix bug where /dirname would return NULL 28919: [b85f470daf26] 28920: 28921: * sudo.h: 28922: move __P to config.h 28923: [7763c0ff3f28] 28924: 28925: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: 28926: added errno definition 28927: [4cc9d2d9782a] 28928: 28929: * config.h.in: 28930: added __P 28931: [ca06f5aa58f3] 28932: 28933: * config.h.in: 28934: added HAVE_FCHDIR 28935: [206d714641e0] 28936: 28937: * strdup.c: 28938: now include stdio 28939: [0d8458da0e1d] 28940: 28941: * realpath.c, sudo_realpath.c: 28942: now works if no fchdir 28943: [e035911b6722] 28944: 28945: * visudo.c: 28946: define SA_RESETHAND to null if not defined 28947: [afec03e84342] 28948: 28949: * configure.in: 28950: added check & replace 28951: [c1a65481441c] 28952: 28953: * configure.in: 28954: took out -static for nextstep -- it doesn't work 28955: [fa1a1a611743] 28956: 28957: 1994-06-06 Todd C. Miller <Todd.Miller@courtesan.com> 28958: 28959: * logging.c: 28960: moved #endif to where it belongs 28961: [07d3a8972097] 28962: 28963: * SUPPORTED: 28964: correction 28965: [0c1ecba3e5a3] 28966: 28967: * configure.in: 28968: now checks for strdup realpath getcwd bzero 28969: [f029a1917515] 28970: 28971: * config.h.in: 28972: emulate bzero 28973: [d792352e44a3] 28974: 28975: * visudo.c: 28976: added posic signals 28977: [2ed0005f90fc] 28978: 28979: * tgetpass.c: 28980: bzero cast 28981: [6d91b1a1526f] 28982: 28983: * logging.c: 28984: added posix signals 28985: [67ede9c22a05] 28986: 28987: * configure.in: 28988: removed BROKEN_GETPASS added new srcs toreplace missing functions 28989: [cf44274bb1c8] 28990: 28991: * config.h.in: 28992: added posix signal stuff 28993: [a3c1c98fe8ef] 28994: 28995: * Makefile.in: 28996: added new srcs 28997: [b6a079afee47] 28998: 28999: * visudo.c: 29000: updated useag 29001: [589ed091c44f] 29002: 29003: * tgetpass.c: 29004: now uses posix signals 29005: [30f74964074f] 29006: 29007: * PORTING: 29008: updated sto reflect major changes 29009: [bcfc309e017b] 29010: 29011: * CHANGES, TODO: 29012: updated 29013: [23aacbd54278] 29014: 29015: * tgetpass.c: 29016: uses sysconf() if available 29017: [a27431c90bab] 29018: 29019: * sudo.h: 29020: added PASSWORD_TIMEOUT + prototypes for new functions 29021: [d7473c2f77c4] 29022: 29023: * realpath.c, sudo_realpath.c: 29024: for those w/o this in libc 29025: [1e47aa7a9d46] 29026: 29027: * getcwd.c, getwd.c: 29028: Initial revision 29029: [c90dea57a84f] 29030: 29031: * find_path.c: 29032: rewrote to use realpath(3) - nis now all my code 29033: [d2c3bb8fb37d] 29034: 29035: * config.h.in: 29036: added HAVE_REALPATH 29037: [02c10352a8c7] 29038: 29039: * check.c: 29040: now use tgetpass 29041: [b5c021fc179f] 29042: 29043: * Makefile.in: 29044: added LIBOBJS use tgetpass.c 29045: [230a7b3eeaa3] 29046: 29047: 1994-06-05 Todd C. Miller <Todd.Miller@courtesan.com> 29048: 29049: * tgetpass.c: 29050: works now :-) 29051: [025e7a3875ba] 29052: 29053: * tgetpass.c: 29054: Initial revision 29055: [3316ab33b230] 29056: 29057: * pathnames.h.in: 29058: added /dev/tty 29059: [29242585e53f] 29060: 29061: 1994-06-04 Todd C. Miller <Todd.Miller@courtesan.com> 29062: 29063: * version.h: 29064: incremented 29065: [f2e54b48280f] 29066: 29067: * sudo.c: 29068: always use getcwd 29069: [c6068e8a4029] 29070: 29071: * config.h.in: 29072: added check for getwd 29073: [ab1e102ad673] 29074: 29075: * configure.in: 29076: replace strdup & realpath & getcwd if missing 29077: [b0eb14f2a1c3] 29078: 29079: * pathnames.h.in: 29080: added _PATH_PWD 29081: [309d2388f69a] 29082: 29083: * aclocal.m4: 29084: added SUDO_PROG_PWD 29085: [e16e85deb96c] 29086: 29087: * strdup.c: 29088: Initial revision 29089: [810efdc15007] 29090: 29091: * realpath.c, sudo_realpath.c: 29092: Initial revision 29093: [d85eee438e09] 29094: 29095: 1994-06-03 Todd C. Miller <Todd.Miller@courtesan.com> 29096: 29097: * configure.in: 29098: quoted quare brackets 29099: [d0e7ca111d98] 29100: 29101: 1994-06-02 Todd C. Miller <Todd.Miller@courtesan.com> 29102: 29103: * sudo.c: 29104: no need to strdup() a constant 29105: [a8c44712df9a] 29106: 29107: * CHANGES: 29108: updated 29109: [71364129cca0] 29110: 29111: * sudo.man: 29112: added validate 29113: [0bb198095a26] 29114: 29115: * sudo.c: 29116: added -v to usage 29117: [31ea71f11dbb] 29118: 29119: * parse.c, sudo.c, sudo.h: 29120: added validate_only stuff 29121: [9bcd853d3c90] 29122: 29123: 1994-05-30 Todd C. Miller <Todd.Miller@courtesan.com> 29124: 29125: * configure.in: 29126: now finds sed 29127: [6374bb0d3f28] 29128: 29129: * aclocal.m4: 29130: $OSREV is now an int 29131: [ace0666d66cf] 29132: 29133: 1994-05-29 Todd C. Miller <Todd.Miller@courtesan.com> 29134: 29135: * configure.in: 29136: added mtxinu to caser 29137: [73a776887b16] 29138: 29139: * sudo.h: 29140: added EXEC macro 29141: [2e8eb28b710a] 29142: 29143: * sudo.c: 29144: now use the EXEC nmacro now only do a gethostbyname() if FQDN is set 29145: [56afb4f658d5] 29146: 29147: * logging.c: 29148: changed mail_argv[] def now use EXEC() macro 29149: [ddcabd28edb1] 29150: 29151: * check.c: 29152: took out crypt() definition 29153: [0e657724cf5f] 29154: 29155: * version.h: 29156: upped the version 29157: [62c5d66119fc] 29158: 29159: * configure.in: 29160: always look for -lnsl 29161: [d7b594f0313b] 29162: 29163: * aclocal.m4: 29164: added an echo 29165: [1caae3491dc5] 29166: 29167: * sudo.h: 29168: SHORT_MESSAGE is now the default 29169: [cfce35c3119a] 29170: 29171: * config.h.in: 29172: fixed typo 29173: [6499a564bf75] 29174: 29175: * configure.in: 29176: added missing AC_DEFINE(SVR4) for solaris 29177: [feef0b17b94f] 29178: 29179: * sudo.man: 29180: documented the -v flag 29181: [a6429f2bc2cf] 29182: 29183: * SUPPORTED: 29184: updated 29185: [088886e79540] 29186: 29187: * check.c: 29188: proto-ized crypt() 29189: [801e4ff5b121] 29190: 29191: * config.h.in: 29192: added LIBSHADOW undef 29193: [8df588e9ee2b] 29194: 29195: * configure.in: 29196: nwo set OS to be lowercase 29197: [561ebed833e4] 29198: 29199: 1994-05-28 Todd C. Miller <Todd.Miller@courtesan.com> 29200: 29201: * configure.in: 29202: now use SUDO_OSTYPE to set $OS 29203: [0e60aee23098] 29204: 29205: * aclocal.m4: 29206: now use uname to determine os 29207: [99705e58d400] 29208: 29209: * visudo.c: 29210: added prototypes & moved sig handler around 29211: [1f0bc8d23b51] 29212: 29213: * sudo.h: 29214: added prototyppes 29215: [be3935a2b163] 29216: 29217: * check.c, logging.c, sudo.c: 29218: added prototypes 29219: [2079b4605ab8] 29220: 29221: * parse.c: 29222: added comment 29223: [a34d147d8399] 29224: 29225: * config.h.in: 29226: nwo use _BSD_SIGNALS not _BSD_COMPAT 29227: [63663195f047] 29228: 29229: * aixcrypt.exp: 29230: Initial revision 29231: [890aed08357e] 29232: 29233: * Makefile.in: 29234: added aixcrypt.exp 29235: [1005a183105f] 29236: 29237: * parse.lex, parse.yacc: 29238: moved config.h to top of includes 29239: [9569c49aa5f3] 29240: 29241: 1994-05-25 Todd C. Miller <Todd.Miller@courtesan.com> 29242: 29243: * find_path.c: 29244: now don't bitch if get EACCESS (treat like EPERM) 29245: [dbeffb638de4] 29246: 29247: * visudo.c: 29248: added -v flag and usage() 29249: [4d44ed60ed75] 29250: 29251: * version.h: 29252: fixed a typo 29253: [cf3f9347ae41] 29254: 29255: * sudo.c: 29256: cast Argv to a const for exec added -v flag 29257: [d11b6efc0e45] 29258: 29259: * logging.c: 29260: mail_argv is now a const 29261: [93bb5d90bb6f] 29262: 29263: * configure.in: 29264: only set RETSIGTYPE if it is not set already 29265: [c97aac260b77] 29266: 29267: * aclocal.m4: 29268: now defines & STDC_HEADERS for Irix 29269: [9c2b24ad1fc5] 29270: 29271: * Makefile.in: 29272: added version.h 29273: [9f79e880229a] 29274: 29275: * insults.h, sudo.h: 29276: prevent multiple inclusion 29277: [d68c8a9243ce] 29278: 29279: * version.h: 29280: Initial revision 29281: [dbb39c5ef8d9] 29282: 29283: * parse.lex, parse.yacc: 29284: now includes config.h 29285: [f117e036a56b] 29286: 29287: * aclocal.m4: 29288: now talks about sunos 4.x 29289: [c9054aa92d4e] 29290: 29291: * visudo.c: 29292: calls to Exit now pass an arg 29293: [a92104670551] 29294: 29295: 1994-05-24 Todd C. Miller <Todd.Miller@courtesan.com> 29296: 29297: * visudo.c: 29298: signal handler now takes an int argument 29299: [26f480c41523] 29300: 29301: * CHANGES: 29302: updated 29303: [8c166a9d796b] 29304: 29305: * sudo.c: 29306: ok, the getcwd() is now *really* done as the user 29307: [ab86cf85134a] 29308: 29309: * configure.in: 29310: changed AIX STATIC_FLAGS 29311: [b9c0a3ba5663] 29312: 29313: * aclocal.m4: 29314: solaris now defines SVR4 29315: [c3e20cac96f5] 29316: 29317: * sudo.h: 29318: added cwd and fixed stupid core dump that makes no sense. sigh. 29319: [7a9755436dbb] 29320: 29321: * sudo.c: 29322: moved getcwd stuff into load_globals 29323: [ec2bc90df1f3] 29324: 29325: * parse.c: 29326: took out externs that are in suod.h 29327: [93c4b3f856d7] 29328: 29329: * logging.c: 29330: moved cwd into load_globals 29331: [050de754d228] 29332: 29333: * find_path.c: 29334: moved cwd stuff 29335: [22f3f3b4c34d] 29336: 29337: * Makefile.in: 29338: fixed make distclean & realclean 29339: [c9964d89bcef] 29340: 29341: * TODO: 29342: updated ., 29343: [e513581ef0e3] 29344: 29345: * CHANGES: 29346: added solaris changes 29347: [505d930daf27] 29348: 29349: * aclocal.m4: 29350: added solaris changes, need to rework 29351: [33f20fb16c49] 29352: 29353: * configure.in: 29354: cleaned up for solaris 29355: [2fb8cfa05d0f] 29356: 29357: * logging.c: 29358: reinstall reapchild signal handler for non-bsd signals 29359: [3d1dc545113d] 29360: 29361: * sudo.h: 29362: took out getdtablesize() emulation for HP-UX (no longer needed) 29363: [1fc83d170f34] 29364: 29365: * sudo.c: 29366: support for HAVE_SYSCONF 29367: [50ca2a7a224a] 29368: 29369: * visudo.c: 29370: added <fcntl.h> for solaris & reorg'd the includes + minor prettying 29371: up / 29372: [0a570e826dd4] 29373: 29374: * config.h.in: 29375: added HAVE_SYSCONF 29376: [2b9a9f3a4e94] 29377: 29378: 1994-05-16 Todd C. Miller <Todd.Miller@courtesan.com> 29379: 29380: * configure.in: 29381: now tells you what os you are running /. 29382: [06c6332a895b] 29383: 29384: * aclocal.m4: 29385: took out extra ',' 29386: [e8c75ce59f4a] 29387: 29388: 1994-05-14 Todd C. Miller <Todd.Miller@courtesan.com> 29389: 29390: * config.h.in: 29391: added _BSD_COMPAT 29392: [73c5099806c2] 29393: 29394: * aclocal.m4: 29395: fixed for irix5 29396: [1047d1f6c0eb] 29397: 29398: * CHANGES: 29399: updated 29400: [1bc4969fee96] 29401: 29402: * sudo.c: 29403: uid seinitialized to -2 29404: [8d7812b1878b] 29405: 29406: 1994-04-28 Todd C. Miller <Todd.Miller@courtesan.com> 29407: 29408: * sudo.c: 29409: now removes LIBPATH for AIX 29410: [075392eb1dd9] 29411: 29412: 1994-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 29413: 29414: * configure.in: 29415: now uses ufc if it finds it 29416: [ab6ce30a5958] 29417: 29418: 1994-03-12 Todd C. Miller <Todd.Miller@courtesan.com> 29419: 29420: * sudo.h: 29421: no longer define yyval & yylval since yacc does it 29422: [09d250aea50a] 29423: 29424: * parse.lex: 29425: now defines yylval as extenr 29426: [8ec2b88952bc] 29427: 29428: * configure.in: 29429: BROKEN_GETPASS is now an OPTION 29430: [3714f4bb8312] 29431: 29432: * config.h.in: 29433: took out BROKEN_GETPASS 29434: [9c4f6aa50137] 29435: 29436: * Makefile.in: 29437: took out big comment 29438: [4c13cff0e556] 29439: 29440: * README: 29441: updated 29442: [b8b9902b620d] 29443: 29444: * Makefile.in: 29445: took out README.beta 29446: [ed2cd861e82b] 29447: 29448: * SUPPORTED: 29449: Initial revision 29450: [2fffc51e6606] 29451: 29452: * INSTALL: 29453: now reference SUPPORTED ., 29454: [d112c30be1f2] 29455: 29456: * config.h.in: 29457: now check for convex OR __convex__ 29458: [a0e5701a3069] 29459: 29460: * aclocal.m4: 29461: now check for convex or __convex__ 29462: [5dae2bfbe3bc] 29463: 29464: * Makefile.in: 29465: added dist target 29466: [400a54de57db] 29467: 29468: * aclocal.m4: 29469: use __convex__ 29470: [58a19470ed0b] 29471: 29472: * find_path.c: 29473: now use _S_* stat stuff to be ansi-like 29474: [28cce560e048] 29475: 29476: * INSTALL: 29477: updated for configure directions 29478: [a034ccc7c30a] 29479: 29480: * Makefile.in: 29481: distclean now removes config.h and pathnames.h 29482: [300f2349b4ab] 29483: 29484: * CHANGES: 29485: updated 29486: [646f7e9430c1] 29487: 29488: * TODO: 29489: fixed typoe 29490: [70fd6361b2bc] 29491: 29492: * visudo.c: 29493: updated version 29494: [cf13d87d789f] 29495: 29496: * Makefile.in: 29497: updated version 29498: [8c5dacc27a7a] 29499: 29500: * config.h.in, pathnames.h.in: 29501: added copyright header 29502: [747ce3d3d6b7] 29503: 29504: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex, 29505: parse.yacc, sudo.c, sudo.h: 29506: udpated version 29507: [4751c39bad18] 29508: 29509: * visudo.c: 29510: udpated to use configure + pathnames.h 29511: [d45dff76a1cd] 29512: 29513: * aclocal.m4: 29514: updated 29515: [f05a367a55be] 29516: 29517: * Makefile.in, config.h.in, configure.in: 29518: updated 29519: [524778598879] 29520: 29521: * sudo.h: 29522: now works with configure 29523: [83fc40e533f4] 29524: 29525: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c: 29526: updated to work with configure + pathnames.h 29527: [cb67fa6ab52d] 29528: 29529: * Makefile.in: 29530: added LEXLIB 29531: [f43cad4ab0a2] 29532: 29533: 1994-03-10 Todd C. Miller <Todd.Miller@courtesan.com> 29534: 29535: * COPYING: 29536: updated gnu general licence to versio 2 29537: [2b0b56112ddc] 29538: 29539: * config.h.in, pathnames.h.in: 29540: Initial revision 29541: [4b586f39ec2d] 29542: 29543: * sudo.h: 29544: changed to work with configure 29545: [13f3506ddf16] 29546: 29547: 1994-03-09 Todd C. Miller <Todd.Miller@courtesan.com> 29548: 29549: * Makefile.in, aclocal.m4, configure.in: 29550: Initial revision 29551: [a8636ae77371] 29552: 29553: * visudo.c: 29554: now uses defines used by configure 29555: [de438d118993] 29556: 29557: 1994-03-01 Todd C. Miller <Todd.Miller@courtesan.com> 29558: 29559: * find_path.c: 29560: sudo won't bitch about EPERM now, for real 29561: [ce26d9ef7e3f] 29562: 29563: 1994-02-28 Todd C. Miller <Todd.Miller@courtesan.com> 29564: 29565: * logging.c: 29566: renamed exec_argv to eliminate a libc name clash with ksros 29567: [bcb4350d8411] 29568: 29569: * CHANGES: 29570: corrected 29571: [dae68d422efd] 29572: 29573: * logging.c, sudo.c, sudo.h: 29574: execve -> execv 29575: [40cc2c4bdb15] 29576: 29577: * TODO: 29578: upated 29579: [9275a8b8fc45] 29580: 29581: * PORTING: 29582: added 2 mroe items 29583: [6cbb5c56993c] 29584: 29585: * CHANGES: 29586: updated 29587: [73f34f8e571a] 29588: 29589: * sudo.h: 29590: added UMASK and mode_t declaration 29591: [7c2015e1d171] 29592: 29593: * sudo.c: 29594: added UMASK 29595: [d37be7523680] 29596: 29597: * logging.c: 29598: now opens log file with mode 077 29599: [0825cc3ee841] 29600: 29601: * check.c: 29602: saved current umask ans restores it 29603: [659c1aaae8e8] 29604: 29605: * sudo.h: 29606: added MAXLOGFILELEN 29607: [34331c7dee90] 29608: 29609: * logging.c: 29610: split long log lines. FOr syslog, split into multiple entries, for 29611: a log file, indent the extra for readability 29612: [72c9e4cdba6e] 29613: 29614: 1994-02-27 Todd C. Miller <Todd.Miller@courtesan.com> 29615: 29616: * CHANGES: 29617: added changes 29618: [81196833673d] 29619: 29620: * sudo.h: 29621: MAXLOGLEN & MAXSYSLOGLEN are now different (as they should be) 29622: [1aa69e903840] 29623: 29624: 1994-02-25 Todd C. Miller <Todd.Miller@courtesan.com> 29625: 29626: * TODO: 29627: added input from Brett M Hogden <hogden@rge.com> 29628: [80f01fc88ce9] 29629: 29630: 1994-02-16 Todd C. Miller <Todd.Miller@courtesan.com> 29631: 29632: * sudo.c: 29633: added rmenv() to remove stuff from environ. can now uses execvp() 29634: OR execve() becuase of this. 29635: [e7fc2535bd67] 29636: 29637: * logging.c: 29638: now uses execvp() OR execve() 29639: [56391aa1f99d] 29640: 29641: * sudo.h: 29642: added USE_EXECVE 29643: [f21f38050b95] 29644: 29645: * sudo.h: 29646: added environ 29647: [6b805e23c6f6] 29648: 29649: * find_path.c: 29650: now ignore EPERM 29651: [c8fd7117a1d7] 29652: 29653: * sudo.h: 29654: moved some func decls out of sudo.h and into sudo.c as statics /. 29655: [5f555c267d27] 29656: 29657: * CHANGES: 29658: updated 29659: [431f478af320] 29660: 29661: * sudo.h: 29662: took out Envp 29663: [6f722be7793d] 29664: 29665: 1994-02-14 Todd C. Miller <Todd.Miller@courtesan.com> 29666: 29667: * BUGS: 29668: Initial revision 29669: [4a8ecf0da95c] 29670: 29671: 1994-02-10 Todd C. Miller <Todd.Miller@courtesan.com> 29672: 29673: * CHANGES: 29674: added SECURE_PATH 29675: [1c72cb222609] 29676: 29677: * sudo.c, sudo.h: 29678: added SECURE_PATH 29679: [5bf5357a63c5] 29680: 29681: * sudo.h: 29682: added SECURE_PATH 29683: [3976a74405ac] 29684: 29685: * INSTALL: 29686: added sample.sudoers note 29687: [1b395d29aaeb] 29688: 29689: * sudoers: 29690: Initial revision 29691: [485888d07477] 29692: 29693: 1994-02-09 Todd C. Miller <Todd.Miller@courtesan.com> 29694: 29695: * find_path.c: 29696: fixed typo 29697: [bfc3cc4d41ca] 29698: 29699: * PORTING: 29700: took out SAVED_UID garbage 29701: [b7c2d3469661] [SUDO_1_3_0] 29702: 29703: * INSTALL: 29704: mentioned HAL 29705: [253d6695df90] 29706: 29707: * sudo.h: 29708: added HAL line 29709: [29ec1a4ac6de] 29710: 29711: * insults.h: 29712: added HAL insults 29713: [7d7c96d77c74] 29714: 29715: * TODO: 29716: updated 29717: [aa2ed9790586] 29718: 29719: * logging.c: 29720: more verbose error if mailer not found 29721: [fca47fd00cb6] 29722: 29723: * check.c: 29724: now do getpwent as root for soem shadow password systems (bsdi) 29725: [e0339e110d46] 29726: 29727: 1994-02-08 Todd C. Miller <Todd.Miller@courtesan.com> 29728: 29729: * sudo.h: 29730: took out SAVED_UID garbade 29731: [fcb0e81dcdb5] 29732: 29733: * sudo.c: 29734: took out SAVED_UID garbage since it don't work 29735: [507e9513e9c2] 29736: 29737: 1994-02-06 Todd C. Miller <Todd.Miller@courtesan.com> 29738: 29739: * README: 29740: updated 29741: [d2b6b253dae5] 29742: 29743: * insults.h: 29744: added a missing space :-) 29745: [8940ea991f87] 29746: 29747: * sudo.c, sudo.h: 29748: took out multimax cruft 29749: [c2606b365181] 29750: 29751: * INSTALL: 29752: minor update 29753: [05fb6ee73131] 29754: 29755: * PORTING: 29756: finished 29757: [c4ac47c84dc5] 29758: 29759: * sudo.c: 29760: fixed a typo + indentation 29761: [7eab40aae8fa] 29762: 29763: 1994-02-05 Todd C. Miller <Todd.Miller@courtesan.com> 29764: 29765: * sudo.h: 29766: took outumoved some defines to the config file ,. ,. 29767: [defff05beb52] 29768: 29769: * PORTING: 29770: Initial revision 29771: [c803e9127959] 29772: 29773: * TODO: 29774: did #6 29775: [c6fa1c946c31] 29776: 29777: * sudo.h: 29778: added HAS_SAVED_UID 29779: [6a88a39c0a07] 29780: 29781: * sudo.c: 29782: put back AIX cruft 29783: [a24d2507ddd4] 29784: 29785: 1994-02-03 Todd C. Miller <Todd.Miller@courtesan.com> 29786: 29787: * sudo.c: 29788: aix changes 29789: [1663915f754a] 29790: 29791: 1994-02-02 Todd C. Miller <Todd.Miller@courtesan.com> 29792: 29793: * CHANGES: 29794: updated 29795: [a8cc73747cae] 29796: 29797: * check.c, logging.c, parse.c, sudo.c, sudo.h: 29798: now is only root when abs necesary 29799: [3c9d12c5cdfe] 29800: 29801: * check.c: 29802: added missing %s\n 29803: [609320b72d89] 29804: 29805: 1994-01-31 Todd C. Miller <Todd.Miller@courtesan.com> 29806: 29807: * install-sh: 29808: Initial revision 29809: [b5bba140a175] 29810: 29811: * TODO: 29812: updated 29813: [c9d2eba602af] 29814: 29815: * CHANGES: 29816: updated 29817: [932f1fc3bb14] 29818: 29819: * sudo.c: 29820: now removed _RLD_* for alphas 29821: [54a36e648158] 29822: 29823: * INSTALL: 29824: updated for new config scheme 29825: [61c8ae800444] 29826: 29827: * find_path.c: 29828: more verbose eror messages 29829: [b4fd123db42d] 29830: 29831: 1994-01-27 Todd C. Miller <Todd.Miller@courtesan.com> 29832: 29833: * TODO: 29834: now have solaris 29835: [371002fbf266] 29836: 29837: * sudo.h: 29838: define __svr4__ for SOLARIS 29839: [0b5cf5ed936d] 29840: 29841: * check.c: 29842: added svr4 junk for shadow pws for solaris 2.x 29843: [91ed58f21618] 29844: 29845: * check.c, sudo.c: 29846: took out setuid(0) and setreuid(udi) garbage. Its not needed since 29847: we start out setuid with the correct perms. 29848: [07689e782b0b] 29849: 29850: * check.c, sudo.c, sudo.h: 29851: now use setreuid() 29852: [7d64d685d78e] 29853: 29854: 1994-01-26 Todd C. Miller <Todd.Miller@courtesan.com> 29855: 29856: * sudo.man: 29857: revised AUTHORS secrtion & added ENV_EDITOR stuff to VARIABLES 29858: sectoin 29859: [b26967b1e19b] 29860: 29861: * visudo.c: 29862: now uses ENV_EDITOR if you want to use the EDITOR envar 29863: [a4f8fcb9bd1d] 29864: 29865: * sudo.h: 29866: now uses ENV_EDITOR if you want to use the EDITOR envar >> . 29867: [028cc55c4328] 29868: 29869: 1993-12-07 Todd C. Miller <Todd.Miller@courtesan.com> 29870: 29871: * INSTALL: 29872: rewrote most of this 29873: [a6750923f9c9] 29874: 29875: * README: 29876: minor update + spell fix 29877: [a411717a7249] 29878: 29879: * sudo.h: 29880: added all options that are in the Makefile 29881: [6db3b3b841b3] 29882: 29883: * getpass.c: 29884: now use USE_TERMIO #define for sgi & hpux 29885: [b91f89ae6be1] 29886: 29887: * TODO: 29888: todo: posix sigs 29889: [4548a56eb2ef] 29890: 29891: 1993-12-06 Todd C. Miller <Todd.Miller@courtesan.com> 29892: 29893: * check.c, find_path.c: 29894: always include strings.h 29895: [1fc20bda92c0] 29896: 29897: * visudo.c: 29898: added STATICEDITOR 29899: [0596f820716e] 29900: 29901: * sudo.h: 29902: sgi has vi in /usr/bin too 29903: [94203b62bfd9] 29904: 29905: * sudo.man: 29906: added VISUAL 29907: [87c2844c4cac] 29908: 29909: 1993-12-03 Todd C. Miller <Todd.Miller@courtesan.com> 29910: 29911: * sudo.h: 29912: sue /usr/bin/vi on some systems 29913: [e3ad9190f35e] 29914: 29915: * sudo.c: 29916: fixed warning (include strings.h) 29917: [0b896de4d8a0] 29918: 29919: * sudo.man: 29920: added John_Rouillard@dl5000.bc.edu's changes (new features) 29921: [f41b4205a8cf] 29922: 29923: * CHANGES: 29924: changes from John_Rouillard@dl5000.bc.edu 29925: [6bdef8e948d5] 29926: 29927: * visudo.c: 29928: added EDITOR envar 29929: [5c4bf716de21] 29930: 29931: * check.c, find_path.c, parse.c, sudo.c: 29932: added patches from John_Rouillard directory spec 29933: uses EDITOR 29934: [f62a435f8c41] 29935: 29936: 1993-12-02 Todd C. Miller <Todd.Miller@courtesan.com> 29937: 29938: * getpass.c: 29939: added flush for hpux 29940: [07cfdd6a7b55] 29941: 29942: 1993-11-30 Todd C. Miller <Todd.Miller@courtesan.com> 29943: 29944: * sudo.c: 29945: no longer assume malloc returns a char * 29946: [7480bd2756f3] 29947: 29948: * sudo.c: 29949: alpha change to remove LD_-like thing fixed SHLIB_PATH stuff -- now 29950: gets removed correctly 29951: [8587166c6ac8] 29952: 29953: * sudo.h: 29954: added STD_HEADERS macro 29955: [480f5a9a516c] 29956: 29957: * sudo.c: 29958: now uses STD_HEADERS macor for ansi 29959: [c5018806fd59] 29960: 29961: * find_path.c: 29962: now uses STD_HEADERS macro 29963: [ad821e0788ea] 29964: 29965: * check.c: 29966: niceties for C compiler bitches -- no real change 29967: [0fc0b1a5fb64] 29968: 29969: 1993-11-29 Todd C. Miller <Todd.Miller@courtesan.com> 29970: 29971: * visudo.c: 29972: now doesn't fclose a file never opened. 29973: [ee888ec9427d] 29974: 29975: 1993-11-28 Todd C. Miller <Todd.Miller@courtesan.com> 29976: 29977: * sudo.man: 29978: added visudo line 29979: [698d51c66407] 29980: 29981: * sudo.man: 29982: added error stuff added me in there... 29983: [d202fd34b906] 29984: 29985: * CHANGES: 29986: noted insults 29987: [998a22c2230c] 29988: 29989: * INSTALL: 29990: added blurb about reading stuff 29991: [e71db100798f] 29992: 29993: * sudo.h: 29994: added insults 29995: [c110431cec56] 29996: 29997: * insults.h: 29998: corrected somments and removed newlines 29999: [493706fd488c] 30000: 30001: * check.c: 30002: now uses insults 30003: [6d23cf06a0ef] 30004: 30005: * insults.h: 30006: Initial revision 30007: [83153c26b4a3] 30008: 30009: * INSTALL: 30010: added dec syslog note 30011: [555437273237] 30012: 30013: * sample.sudoers: 30014: added real stuff in there 30015: [53442a7fba78] 30016: 30017: * TODO: 30018: added a todo 30019: [c630472bd4dc] 30020: 30021: * TODO: 30022: added one 30023: [806464453284] 30024: 30025: 1993-11-27 Todd C. Miller <Todd.Miller@courtesan.com> 30026: 30027: * sample.sudoers: 30028: Initial revision 30029: [7db0a9f1ca8f] 30030: 30031: * sudo.man: 30032: updated with changes 30033: [d9bf254c6c08] 30034: 30035: * sudo.man: 30036: Initial revision 30037: [dd6f11174ac6] 30038: 30039: * indent.pro: 30040: Initial revision 30041: [dbfbb494fad9] 30042: 30043: * CHANGES, COPYING, INSTALL, README, TODO: 30044: Initial revision 30045: [6d98f489a079] 30046: 30047: * visudo.c: 30048: updated version number and took out jeff's old addr since it is no 30049: good 30050: [ee47c24818cb] 30051: 30052: * check.c, find_path.c, logging.c, parse.c, parse.lex, parse.yacc, 30053: sudo.c, sudo.h: 30054: updated version number and took out jeff's email (since it is 30055: invalid) 30056: [54616458a52e] 30057: 30058: 1993-10-28 Todd C. Miller <Todd.Miller@courtesan.com> 30059: 30060: * check.c: 30061: added fflush() 30062: [145c881f4fb4] 30063: 30064: 1993-10-23 Todd C. Miller <Todd.Miller@courtesan.com> 30065: 30066: * find_path.c: 30067: now return NULL instead pfof exiting for nopnn-fatal errors 30068: [8bc74f8cb1ae] 30069: 30070: 1993-10-21 Todd C. Miller <Todd.Miller@courtesan.com> 30071: 30072: * check.c: 30073: new banner 30074: [5387ab2af516] 30075: 30076: * parse.lex: 30077: now sudo.h gets included first 30078: [2acb01c18e18] 30079: 30080: 1993-10-18 Todd C. Miller <Todd.Miller@courtesan.com> 30081: 30082: * parse.lex: 30083: now can use flex 30084: [164d3839adf0] 30085: 30086: * sudo.h: 30087: linux patch 30088: [f1b6b1b1a2ca] 30089: 30090: * sudo.c: 30091: hpux 9 fix, removes SHLIB_PATH linux patch 30092: [67611dc1737f] 30093: 30094: * check.c: 30095: linux diff 30096: [c24536682397] 30097: 30098: 1993-10-15 Todd C. Miller <Todd.Miller@courtesan.com> 30099: 30100: * find_path.c: 30101: stat now ignores EINVAL 30102: [c7761a5dc642] 30103: 30104: 1993-10-06 Todd C. Miller <Todd.Miller@courtesan.com> 30105: 30106: * find_path.c, sudo.c: 30107: now declare strdup as extern 30108: [6b7d6f8784b5] 30109: 30110: 1993-10-04 Todd C. Miller <Todd.Miller@courtesan.com> 30111: 30112: * visudo.c: 30113: reformatted with indent + by hand 30114: [9d43084e4990] 30115: 30116: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c, sudo.h: 30117: used indent to "fix" coding style 30118: [489ffacbdc70] 30119: 30120: * find_path.c: 30121: now checks '.' or '.' or '' in PATH -- but does it LAST should maybe 30122: move the code that does this into the loop body. makes it messier 30123: tho. hmmm. 30124: [c4d22b48da9a] 30125: 30126: 1993-09-08 Todd C. Miller <Todd.Miller@courtesan.com> 30127: 30128: * find_path.c: 30129: redid the fix for non-executable files in an easier to read way plus 30130: some minor aethetic changes 30131: [84fe337f1426] 30132: 30133: * find_path.c: 30134: fixed bug with non-executable tings of same name in path introduced 30135: by checkig errno after stat(2). 30136: [c2a812cfcbc1] 30137: 30138: 1993-09-05 Todd C. Miller <Todd.Miller@courtesan.com> 30139: 30140: * sudo.c: 30141: fixed off by one error 30142: [fabb7cee0041] 30143: 30144: * find_path.c: 30145: now handles decending below '/' correctly 30146: [5d2ddfc0b220] 30147: 30148: * sudo.c: 30149: now actually builds Envp instead of munging envp 30150: [bdc4b08f6898] 30151: 30152: 1993-09-04 Todd C. Miller <Todd.Miller@courtesan.com> 30153: 30154: * parse.yacc: 30155: now includes sys/param.h 30156: [efbb494ab4de] 30157: 30158: * visudo.c: 30159: now includes sys/param.h 30160: [ad6c91d59958] 30161: 30162: * sudo.h: 30163: fixed ifndef -> ifdef 30164: [7aebe822d863] 30165: 30166: * qualify.c: 30167: make more like find_path.c 30168: [853b2dab2e03] 30169: 30170: * find_path.c: 30171: rewritten by millert 30172: [c6a043cc11b3] 30173: 30174: * sudo.h: 30175: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP added info 30176: about new defines in the comment 30177: [39ffefce3aec] 30178: 30179: * logging.c: 30180: now uses USE_CWD 30181: [fa0f3b118bb3] 30182: 30183: * sudo.h: 30184: added delc for clean_envp() and Envp 30185: [a12034e300c2] 30186: 30187: * sudo.c: 30188: now rips LD_* env vars out of envp and passed sanitized Envp to exec 30189: [d201a218e056] 30190: 30191: * logging.c: 30192: now uses execve() 30193: [f3e01032cd33] 30194: 30195: * find_path.c: 30196: ENOTDIR is ok now too (in case part of the path is bogus) 30197: [b5cbbb201bb5] 30198: 30199: * qualify.c: 30200: now works correctly (ttaltotal rewrite) 30201: [0c25d64a5c68] 30202: 30203: * parse.lex: 30204: now includes sys/param.h didn't match trailing / -- fix from 30205: rouilj@cs.umb.edu 30206: [b6363ba110af] 30207: 30208: 1993-06-11 Todd C. Miller <Todd.Miller@courtesan.com> 30209: 30210: * sudo.c: 30211: moved around the #ifndef _AIX 30212: [7d4330950c20] 30213: 30214: * check.c, logging.c, parse.c: 30215: Initial revision 30216: [c101e9572d7f] 30217: 30218: 1993-03-20 Todd C. Miller <Todd.Miller@courtesan.com> 30219: 30220: * qualify.c: 30221: Initial revision 30222: [5a5f21d0e0bf] 30223: 30224: 1993-03-13 Todd C. Miller <Todd.Miller@courtesan.com> 30225: 30226: * find_path.c: 30227: now works if you do sudo bin/test 30228: [07835120ce43] 30229: 30230: * find_path.c: 30231: works 30232: [c3da8b5efa20] 30233: 30234: 1993-03-02 Todd C. Miller <Todd.Miller@courtesan.com> 30235: 30236: * sudo.h: 30237: Initial revision 30238: [28a1caa38b72] 30239: 30240: * visudo.c: 30241: Initial revision 30242: [0e5cd7c3cdbe] 30243: 30244: * parse.lex, parse.yacc: 30245: Initial revision 30246: [5f2d0cccb06b] 30247: 30248: 1993-02-16 Todd C. Miller <Todd.Miller@courtesan.com> 30249: 30250: * sudo.c: 30251: took out errno.h 30252: [7466431a2655] 30253: 30254: * sudo.c: 30255: now spews error if exec fails and exits with -1 30256: [e5c41ea725c1] 30257: 30258: * sudo.c: 30259: Initial revision 30260: [8aeabe39a0c2] 30261: 30262: * find_path.c: 30263: now only execs files with (an) executable bit set. 30264: [0a451f9c0e58] 30265: 30266: * find_path.c: 30267: Initial revision 30268: [02a534891a35] 30269: 30270: 1993-02-15 Todd C. Miller <Todd.Miller@courtesan.com> 30271: 30272: * getpass.c: 30273: added nice comment 30274: [ea8b2aaa9389] 30275: 30276: * getpass.c: 30277: now works on sgi's 30278: [bf2b7c6d0960] 30279: 30280: * getpass.c: 30281: Initial revision 30282: [9f4de251c1b5] 30283: