isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Strings in dictionary files need to be quoted.

Browse Source
This commit is contained in:
Todd C. Miller
2021-02-23 12:38:02 -07:00
parent 081e219e23
commit 03e610dab5
5 changed files with 264 additions and 264 deletions
Download Patch File Download Diff File Expand all files Collapse all files

32
lib/iolog/regress/fuzz/fuzz_iolog_json.dict
View File

@@ -1,17 +1,17 @@
# I/O log JSON keywords # I/O log JSON keywords
\"columns\" "\"columns\""
\"command\" "\"command\""
\"lines\" "\"lines\""
\"runargv\" "\"runargv\""
\"runenv\" "\"runenv\""
\"rungid\" "\"rungid\""
\"rungroup\" "\"rungroup\""
\"runuid\" "\"runuid\""
\"runuser\" "\"runuser\""
\"runchroot\" "\"runchroot\""
\"runcwd\" "\"runcwd\""
\"submitcwd\" "\"submitcwd\""
\"submithost\" "\"submithost\""
\"submituser\" "\"submituser\""
\"timestamp\" "\"timestamp\""
\"ttyname\" "\"ttyname\"""

28
lib/util/regress/fuzz/fuzz_sudo_conf.dict
View File

@@ -1,19 +1,19 @@
# sudo.conf keywords # sudo.conf keywords
Debug "Debug"
Path "Path"
Plugin "Plugin"
Set "Set"
# Paths # Paths
askpass "askpass"
sesh "sesh"
noexec "noexec"
plugin_dir "plugin_dir"
devsearch "devsearch"
# Variables # Variables
developer_mode "developer_mode"
disable_coredump "disable_coredump"
group_source "group_source"
max_groups "max_groups"
probe_interfaces "probe_interfaces"

88
plugins/sudoers/regress/fuzz/fuzz_policy.dict
View File

@@ -1,51 +1,51 @@
# Policy plugin keywords (all are keyword = value) # Policy plugin keywords (all are keyword = value)
# sudoers plugin options from sudo.conf # sudoers plugin options from sudo.conf
error_recovery "error_recovery"
sudoers_file "sudoers_file"
sudoers_uid "sudoers_uid"
sudoers_gid "sudoers_gid"
sudoers_mode "sudoers_mode"
ldap_conf "ldap_conf"
ldap_secret "ldap_secret"
# command line settings from front-end # command line settings from front-end
closefrom "closefrom"
cmnd_chroot "cmnd_chroot"
cmnd_cwd "cmnd_cwd"
runas_user "runas_user"
runas_group "runas_group"
prompt "prompt"
set_home "set_home"
preserve_environment "preserve_environment"
run_shell "run_shell"
login_shell "login_shell"
implied_shell "implied_shell"
preserve_groups "preserve_groups"
ignore_ticket "ignore_ticket"
noninteractive "noninteractive"
sudoedit "sudoedit"
login_class "login_class"
runas_privs "runas_privs"
runas_limitprivs "runas_limitprivs"
selinux_role "selinux_role"
selinux_type "selinux_type"
bsdauth_type "bsdauth_type"
network_addrs "network_addrs"
max_groups "max_groups"
remote_host "remote_host"
timeout "timeout"
plugin_dir "plugin_dir"
# user information from front-end # user information from front-end
user "user"
uid "uid"
gid "gid"
groups "groups"
cwd "cwd"
tty "tty"
host "host"
lines "lines"
cols "cols"
sid "sid"
umask "umask"

356
plugins/sudoers/regress/fuzz/fuzz_sudoers.dict
View File

@@ -1,195 +1,195 @@
# Sudoers policy keywords (all are keyword = value) # Sudoers policy keywords (all are keyword = value)
# Aliases # Aliases
Cmnd_Alias "Cmnd_Alias"
Cmd_Alias "Cmd_Alias"
Host_Alias "Host_Alias"
Runas_Alias "Runas_Alias"
User_Alias "User_Alias"
# Special keywords # Special keywords
ALL "ALL"
(ALL:ALL) "(ALL:ALL)"
sudoedit "sudoedit"
# Date_Spec # Date_Spec
20170214083000Z "20170214083000Z"
2017021408Z "2017021408Z"
20160315220000-0500 "20160315220000-0500"
20151201235900 "20151201235900"
# Timeout_Spec # Timeout_Spec
7d8h30m10s "7d8h30m10s"
14d "14d"
8h30m "8h30m"
600s "600s"
3600 "3600"
# Command digests # Command digests
sha224: "sha224:"
sha256: "sha256:"
sha384: "sha384:"
sha512: "sha512:"
# Command tags # Command tags
NOPASSWD "NOPASSWD"
PASSWD "PASSWD"
NOEXEC "NOEXEC"
EXEC "EXEC"
SETENV "SETENV"
NOSETENV "NOSETENV"
LOG_INPUT "LOG_INPUT"
NOLOG_INPUT "NOLOG_INPUT"
LOG_OUTPUT "LOG_OUTPUT"
NOLOG_OUTPUT "NOLOG_OUTPUT"
FOLLOWLNK "FOLLOWLNK"
NOFOLLOWLNK "NOFOLLOWLNK"
MAIL "MAIL"
NOMAIL "NOMAIL"
# Command options # Command options
CHROOT "CHROOT"
CWD "CWD"
CMND_TIMEOUT "CMND_TIMEOUT"
NOTBEFORE "NOTBEFORE"
NOTAFTER "NOTAFTER"
ROLE "ROLE"
TYPE "TYPE"
PRIVS "PRIVS"
LIMITPRIVS "LIMITPRIVS"
# Defaults settings # Defaults settings
Defaults "Defaults"
syslog "syslog"
syslog_goodpri "syslog_goodpri"
syslog_badpri "syslog_badpri"
long_otp_prompt "long_otp_prompt"
ignore_dot "ignore_dot"
mail_always "mail_always"
mail_badpass "mail_badpass"
mail_no_user "mail_no_user"
mail_no_host "mail_no_host"
mail_no_perms "mail_no_perms"
mail_all_cmnds "mail_all_cmnds"
tty_tickets "tty_tickets"
lecture "lecture"
lecture_file "lecture_file"
authenticate "authenticate"
root_sudo "root_sudo"
log_host "log_host"
log_year "log_year"
shell_noargs "shell_noargs"
set_home "set_home"
always_set_home "always_set_home"
path_info "path_info"
fqdn "fqdn"
insults "insults"
requiretty "requiretty"
env_editor "env_editor"
rootpw "rootpw"
runaspw "runaspw"
targetpw "targetpw"
use_loginclass "use_loginclass"
set_logname "set_logname"
stay_setuid "stay_setuid"
preserve_groups "preserve_groups"
loglinelen "loglinelen"
timestamp_timeout "timestamp_timeout"
passwd_timeout "passwd_timeout"
passwd_tries "passwd_tries"
umask "umask"
logfile "logfile"
mailerpath "mailerpath"
mailerflags "mailerflags"
mailto "mailto"
mailfrom "mailfrom"
mailsub "mailsub"
badpass_message "badpass_message"
lecture_status_dir "lecture_status_dir"
timestampdir "timestampdir"
timestampowner "timestampowner"
exempt_group "exempt_group"
passprompt "passprompt"
passprompt_override "passprompt_override"
runas_default "runas_default"
secure_path "secure_path"
editor "editor"
listpw "listpw"
verifypw "verifypw"
noexec "noexec"
ignore_local_sudoers "ignore_local_sudoers"
closefrom "closefrom"
closefrom_override "closefrom_override"
setenv "setenv"
env_reset "env_reset"
env_check "env_check"
env_delete "env_delete"
env_keep "env_keep"
role "role"
type "type"
env_file "env_file"
restricted_env_file "restricted_env_file"
sudoers_locale "sudoers_locale"
visiblepw "visiblepw"
pwfeedback "pwfeedback"
fast_glob "fast_glob"
umask_override "umask_override"
log_input "log_input"
log_output "log_output"
compress_io "compress_io"
use_pty "use_pty"
group_plugin "group_plugin"
iolog_dir "iolog_dir"
iolog_file "iolog_file"
set_utmp "set_utmp"
utmp_runas "utmp_runas"
privs "privs"
limitprivs "limitprivs"
exec_background "exec_background"
pam_service "pam_service"
pam_login_service "pam_login_service"
pam_setcred "pam_setcred"
pam_session "pam_session"
pam_acct_mgmt "pam_acct_mgmt"
maxseq "maxseq"
use_netgroups "use_netgroups"
sudoedit_checkdir "sudoedit_checkdir"
sudoedit_follow "sudoedit_follow"
always_query_group_plugin "always_query_group_plugin"
netgroup_tuple "netgroup_tuple"
ignore_audit_errors "ignore_audit_errors"
ignore_iolog_errors "ignore_iolog_errors"
ignore_logfile_errors "ignore_logfile_errors"
match_group_by_gid "match_group_by_gid"
syslog_maxlen "syslog_maxlen"
iolog_user "iolog_user"
iolog_group "iolog_group"
iolog_mode "iolog_mode"
fdexec "fdexec"
ignore_unknown_defaults "ignore_unknown_defaults"
command_timeout "command_timeout"
user_command_timeouts "user_command_timeouts"
iolog_flush "iolog_flush"
syslog_pid "syslog_pid"
timestamp_type "timestamp_type"
authfail_message "authfail_message"
case_insensitive_user "case_insensitive_user"
case_insensitive_group "case_insensitive_group"
log_allowed "log_allowed"
log_denied "log_denied"
log_servers "log_servers"
log_server_timeout "log_server_timeout"
log_server_keepalive "log_server_keepalive"
log_server_cabundle "log_server_cabundle"
log_server_peer_cert "log_server_peer_cert"
log_server_peer_key "log_server_peer_key"
log_server_verify "log_server_verify"
runas_allow_unknown_id "runas_allow_unknown_id"
runas_check_shell "runas_check_shell"
pam_ruser "pam_ruser"
pam_rhost "pam_rhost"
runcwd "runcwd"
runchroot "runchroot"
log_format "log_format"
selinux "selinux"
admin_flag "admin_flag"

24
plugins/sudoers/regress/fuzz/fuzz_sudoers_ldif.dict
View File

@@ -1,14 +1,14 @@
# Sudoers LDIF attributes # Sudoers LDIF attributes
description "description"
objectClass "objectClass"
organizationalRole "organizationalRole"
sudoCommand "sudoCommand"
sudoHost "sudoHost"
sudoOption "sudoOption"
sudoOption "sudoOption"
sudoOrder "sudoOrder"
sudoRunAs "sudoRunAs"
sudoRunAsGroup "sudoRunAsGroup"
sudoRunAsUser "sudoRunAsUser"
sudoUser "sudoUser"