isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,546 Commits 1 Branch 0 Tags
02aa965a2d77753b404f68fde9581cd8f7d76ded
Commit Graph

6546 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
af8a211e4b Move the check for -static-libgcc until after AC_LANG_WERROR 
has been called and use AX_CHECK_COMPILE_FLAG().
 2012-06-18 14:10:50 -04:00
Todd C. Miller
2ef0cc73fc Sudo defines HAVE_SETLOCALE not HAVE_LOCALE_H 2012-06-18 14:03:39 -04:00
Todd C. Miller
5ac272c03e Fix gcc 2.x variant macro support. 2012-06-18 14:03:11 -04:00
Todd C. Miller
45fea137f9 Fix compilation on gcc 2.95 and other compilers that only allow 
variable declarations at the beginning of a block.
 2012-06-18 13:47:01 -04:00
Todd C. Miller
fdcc8e1fce Link check_symbols with SUDO_LIBS to make sure we link with the 
requisite libraries to successfully dlopen sudoers.so.  This is
needed on HP-UX where a program dlopen()ing a shared object that
uses pthreads must also be linked with pthreads (and HP-UX LDAP
uses pthreads).
 2012-06-18 10:21:05 -04:00
Todd C. Miller
86cececc16 Add check for exported local symbols. This will cause a "make 
check" failure on systems where we don't support symbol hiding.
 2012-06-18 10:21:01 -04:00
Todd C. Miller
7e67a9153a Additional ${foo} -> $(foo) Makefile tweaks. 2012-06-18 09:50:42 -04:00
Todd C. Miller
437978bd35 No need to provide a name for the scope in the map file since we 
don't use the it for versioning.
 2012-06-18 09:25:29 -04:00
Todd C. Miller
2a83d1c6d5 Add regress test for symbol visibility. 2012-06-17 20:23:21 -04:00
Todd C. Miller
0888101bb3 sudo 1.8.6 2012-06-15 14:34:15 -04:00
Todd C. Miller
60a3019483 Add support for controlling symbol visibility using the HP and 
Solaris C compilers.
 2012-06-15 14:18:23 -04:00
Todd C. Miller
203abd98b9 Use the expanded io log dir when updating the sequence number. 
Includes a workaround for older versions of sudo where the
sequence number was stored in the unexpanded io log dir.
 2012-06-15 12:33:12 -04:00
Todd C. Miller
85c6078659 Simplify "sudo -s" argv rewriting. 2012-06-14 16:17:15 -04:00
Todd C. Miller
47abbb90a2 Don't use a map file for sudo_noexec.so since Solaris ld doesn't 
allow '*' in the global section.  The libtool export flag is now
added to LT_LDFLAGS instead of commenting/uncommenting lines.
 2012-06-14 11:35:02 -04:00
Todd C. Miller
1fe3f9f40f The visibility attribute was actually added in gcc 3.3.x, not 4.0. 
Just assume that if -fvisibility=hidden works that the attribute
is usable.
 2012-06-13 16:57:49 -04:00
Todd C. Miller
649edc3192 Export group cache from sudoers.so for system_group.so to use. 2012-06-13 16:21:45 -04:00
Todd C. Miller
6f6b0dec6c Use gcc's visibility attribute to specify when symbols are visible 
or hidden, if available.  If not available, use an ELF version
script if it is supported.  If all else fails, fall back to using
libtool's -export-symbols.
 2012-06-13 14:01:16 -04:00
Todd C. Miller
60eafc971f Add mode for installed locale files but leave the directories with 
default mode and owner.
 2012-06-12 13:52:20 -04:00
Todd C. Miller
c498235578 Install AIX packages under /opt/freeware with links in /usr/bin and 
/usr/sbin.  This matches the layout of the sudo package from AIX
freeware.
 2012-06-11 15:07:16 -04:00
Todd C. Miller
a8e0687ca9 Install shared objects with mode 0644 except on HP-UX which needs 
the executable bit set.
 2012-06-11 10:45:34 -04:00
Todd C. Miller
c131cb36f5 Make installed file modes consistent with the file modes in the 
sudo package.
 2012-06-11 10:17:19 -04:00
Todd C. Miller
642b7e8873 Add "%:" prefix when talking about QAS non-Unix group support. 2012-06-08 13:28:47 -04:00
Todd C. Miller
f5948149e0 Fix packaging of symbolic links on HP-UX when the link source already 
exists in the filesystem.
 2012-06-08 13:27:16 -04:00
Todd C. Miller
db9f50f13c Only specify prefix if we are overriding the default value. 
Fixes the man dir (/usr/local/man vs. /usr/local/share/man).
 2012-06-08 13:26:16 -04:00
Todd C. Miller
94049aa532 Fix setting of sudoedit_man variable. 2012-06-08 09:37:43 -04:00
Todd C. Miller
afbf68d6a3 Echo the command when linking the sudoedit manual. 2012-06-08 09:37:08 -04:00
Todd C. Miller
4c88e08c87 Build .deb packages with selinux support. 2012-06-07 13:59:36 -04:00
Todd C. Miller
13472d7a8e Don't list paths for unstripped binaries in the lintial overrides. 2012-06-04 15:06:04 -04:00
Todd C. Miller
37db1a4dcb Add support for Installed-Size header in control file, required by 
newer debian versions.
 2012-06-04 14:53:47 -04:00
Todd C. Miller
0a66c24392 Fix extended description in .deb files. 2012-06-04 13:22:47 -04:00
Todd C. Miller
dab474b938 Add Depends, Replaces and Conflicts headers for .deb packages. 2012-06-04 13:13:38 -04:00
Todd C. Miller
54cfac04d1 If there are no privs to print, write the message to the lbuf instead 
of printing it directly.
 2012-06-01 16:27:17 -04:00
Todd C. Miller
f6f64ce04f Set -e in %pos and %preun for debian to quiet a lintian warning. 2012-05-31 16:10:44 -04:00
Todd C. Miller
61a3ed1c10 Install sudoedit and the sudoedit manual as symbolic links, not 
hard links and package them as such.
 2012-05-31 15:50:16 -04:00
Todd C. Miller
3076dc2a4f Make sudo binary permissions 755 instead of 111 
Add lintian overrides file for .deb files.
 2012-05-31 14:26:16 -04:00
Todd C. Miller
8d4c6bbbd0 Replace out of date MAN_POSTINSTALL with MANCOMPRESS and MANCOMPRESSEXT 
which can be used to compress the installed manual pages.
Compress the man pages for .deb files to appease lintian.
 2012-05-31 14:03:41 -04:00
Todd C. Miller
b5ee0ab910 Debian fixes: 
* fix modes to be more in line with what Debian expects
 * add section
 * install LICENSE as copyright and ChangeLog as changelog
 * create stub changelog.debian
 2012-05-31 14:02:26 -04:00
Todd C. Miller
8b38f45841 Fix find command to properly skip files in the DEBIAN dir when 
building md5sums.
 2012-05-31 14:00:38 -04:00
Todd C. Miller
7391c7562f Use a debian-compliant package maintainer field. 2012-05-31 10:20:40 -04:00
Todd C. Miller
b406b51da0 No need to loop over atomic_writev(), it guarantees to write all 
data or return an error.

Fix handling of stdout/stderr that contains "\r\n" and handle a
"\r\n" pair that spans a buffer.
 2012-05-30 10:46:02 -04:00
Todd C. Miller
01da613793 Update for sudo 1.8.5p2 2012-05-29 14:28:42 -04:00
Todd C. Miller
12be3e7f54 Instead of doing extra write()s when replaying stdout, build up a 
vector for writev() instead.  This results in far fewer system
calls.
 2012-05-29 13:46:28 -04:00
Todd C. Miller
af9492d117 Provide unhooked version of getenv() and use it when looking up 
DISPLAY and SUDO_ASKPASS in the environment.
 2012-05-27 12:48:55 -04:00
Todd C. Miller
7a6cad5026 When replaying a log of stdout or stderr, do newline to carriage 
return + linefeed conversion.  We cannot have termios do this for
us since we've disabled output postprocessing (POST) when setting
raw mode.
 2012-05-25 16:24:42 -04:00
Todd C. Miller
7720a7fc89 When checking for -fstack-protector, treat warnings as fatal errors. 2012-05-24 11:03:10 -04:00
Todd C. Miller
e54a007263 Fix test for -z relro 2012-05-22 15:45:50 -04:00
Todd C. Miller
ca89eb59ea Add m4/ax_check_compile_flag.m4 and m4/ax_check_link_flag.m4 2012-05-22 13:26:02 -04:00
Todd C. Miller
e417fb3da1 Build with -fstack-protector and link with -zrelo where supported. 
Added --disable-hardening option to disable hardening options.
 2012-05-22 13:23:19 -04:00
Todd C. Miller
ca9331d498 Add tests for sudoers mode, owner and group checks. 2012-05-21 15:39:24 -04:00
Todd C. Miller
0d82c4c7ee If sudoers_mode is group-readable but the actual sudoers file is 
not, open the file as uid 0, not uid 1.  This fixes a problem when
sudoers has a more restrictive mode than what sudo expects to find.
In older versions, sudo would silently chmod the file to add the
group-readable bit.
 2012-05-21 13:59:02 -04:00