isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

no more USE_REALPATH

Browse Source
This commit is contained in:
Todd C. Miller
1995-03-26 06:17:37 +00:00
parent ee49c5c242
commit 5509c7763b
2 changed files with 1 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
options.h
View File

@@ -53,7 +53,6 @@
#define INCORRECT_PASSWORD "Sorry, try again." /* message for bad passwd */ #define INCORRECT_PASSWORD "Sorry, try again." /* message for bad passwd */
#define MAILSUBJECT "*** SECURITY information ***" /* subject of mail sent */ #define MAILSUBJECT "*** SECURITY information ***" /* subject of mail sent */
/*#define SECURE_PATH "/bin:/usr/ucb:/usr/bin:/usr/etc:/etc" /* secure path */ /*#define SECURE_PATH "/bin:/usr/ucb:/usr/bin:/usr/etc:/etc" /* secure path */
/*#define USE_REALPATH /* use sudo_realpath() to expand paths */
/********** You probably don't want to modify anything below here ***********/ /********** You probably don't want to modify anything below here ***********/

35
parse.c
View File

@@ -79,7 +79,6 @@ int parse_error = FALSE;
* this routine is called from the sudo.c module and tries to validate * this routine is called from the sudo.c module and tries to validate
* the user, host and command triplet. * the user, host and command triplet.
*/ */
int validate() int validate()
{ {
FILE *sudoers_fp; FILE *sudoers_fp;
@@ -135,39 +134,7 @@ int validate()
return(VALIDATE_NOT_OK); return(VALIDATE_NOT_OK);
} }
/*
* return TRUE if cmnd matches, in the sudo sense,
* the pathname in path; otherwise, return FALSE
*/
#ifdef USE_REALPATH
int
path_matches(cmnd, path)
char *cmnd, *path;
{
int clen, plen;
if (cmnd == NULL)
return(FALSE);
plen = strlen(path);
if (path[plen] != '/')
return(strcmp(cmnd, path) == 0);
clen = strlen(cmnd);
if (clen < plen + 1)
/* path cannot be the parent dir of cmnd */
return(FALSE);
if (strchr(cmnd + plen + 1, '/') != NULL)
/* path could only be an ancestor of cmnd -- */
/* ignoring, of course, things like // & /./ */
return(FALSE);
/* see whether path is the prefix of cmnd */
return(strncmp(cmnd, path, plen) == 0);
}
#else
/* /*
* If path doesn't end in /, return TRUE iff cmnd & path name the same inode; * If path doesn't end in /, return TRUE iff cmnd & path name the same inode;
@@ -215,7 +182,7 @@ char *cmnd, *path;
return(dent != NULL); return(dent != NULL);
} }
#endif /* USE_REALPATH */
int int
ntwk_matches(n) ntwk_matches(n)