isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
11,089 Commits 1 Branch 0 Tags
0aedc965f88a08912eae945cd6cb15ca4f8faae2
Commit Graph

274 Commits

Author SHA1 Message Date
Todd C. Miller
7292e607fc Mention that rundir and vardir may be the same and what to do if they are. 2014-02-03 06:16:51 -07:00
Todd C. Miller
aeb5ceead8 Replace --with-timedir and --with-lecture_dir with --with-rundir 
and --with-vardir which are the parent directories of the time stamp
and lecture dirs.  These directories need to be searchable by
non-root so that the timestampowner setting can function.
 2014-02-01 05:57:34 -07:00
Todd C. Miller
659b1f0e34 Switch to new time stamp file format. Each user now has a single 
file which may contain multiple records when per-tty time stamps
are in use (the default).  The time stamps use a monotonic timer
where available and are once again stored in /var/run/sudo.  The
lecture status is now stored separately from the time stamps in a
different directory.
 2014-01-30 15:50:40 -07:00
Todd C. Miller
12f3bdf60e Add wrapper functions for dlopen() et al so that we can support 
statically compiling in the sudoers plugin but still allow other
plugins to be loaded.  The new --enable-static-sudoers configure
option will cause the sudoers plugin to be compiled statically into
the sudo binary.  This does not prevent other plugins from being
loaded as per sudo.conf.
 2013-11-22 16:35:15 -07:00
Todd C. Miller
79acd5db49 Simple event subsystem that uses poll() or select(). Basically a 
simplied subset of libevent2.  Currently only fd events are supported
(since that's all we need).  The poll() backend is used by default,
except on Mac OS X where poll() is broken for devices (including
/dev/tty and ptys).
 2013-10-12 05:53:43 -06:00
Todd C. Miller
67d8af4be5 Restrict default creation of PIE binaries (-fPIE and -pie) to Linux. 
OpenBSD also supports PIE but enables it by default so we don't
need to do anything.  This fixes problems on systems with a version
of GNU ld that accepts -pie but where the run-time linker doesn't
actually support PIE.  Also verify that a trivial PIE binary works
unless PIE is explicitly enabled.
 2013-05-28 14:40:45 -04:00
Todd C. Miller
d1580ff592 Error out in configure if the compiler doesn't support "long long". 2013-04-16 14:36:42 -04:00
Todd C. Miller
c8f630c060 Replace --with-rpath and --with-blibpath with --disable-rpath. 
Now that we use libtool for linking we can just use the -R
flag and have libtool translate it to the proper linker flag.
 2013-03-18 09:27:07 -04:00
Todd C. Miller
c715df98fa Reorganize configure options 2013-02-12 16:43:29 -05:00
Todd C. Miller
d18e050458 Remove obsolete OS notes and move build requirements to INSTALL. 2013-02-10 09:45:06 -05:00
Todd C. Miller
a94e94cf8c mention --disable-shared 2012-11-26 15:25:19 -05:00
Todd C. Miller
56857f7f01 Document Solaris 11 locale issues and workarounds. 2012-11-08 15:22:44 -05:00
Todd C. Miller
0586a5e28a Allow the user to specify and alternate libtool 2012-10-28 12:58:48 -04:00
Todd C. Miller
d89b1a6be2 Support for using SSSD (http://fedorahosted.org/sssd/) as a sudoers 
data source.  From Daniel Kopecek and Pavel Brezina.
 2012-08-10 11:59:26 -04:00
Todd C. Miller
90f2cfa589 Build .man.in and .cat files from .mdoc.in files. 
Add new --with-man and --with-mdoc configure options.
 2012-07-19 13:41:14 -04:00
Todd C. Miller
f8f0021710 Add configure check for building PIE executables instead of doing 
it in mkpkg.
 2012-07-02 10:12:41 -04:00
Todd C. Miller
e417fb3da1 Build with -fstack-protector and link with -zrelo where supported. 
Added --disable-hardening option to disable hardening options.
 2012-05-22 13:23:19 -04:00
Todd C. Miller
d29aede203 No longer throw an error if sudoers is a symbolic link. Deprecated 
the --with-stow option as that is now (effectively) the default.
 2012-05-21 13:30:59 -04:00
Todd C. Miller
025a309025 Fix capitalization 2012-05-15 12:15:30 -04:00
Todd C. Miller
d4259ef2ca Fix editor goof. 2012-03-08 13:19:39 -05:00
Todd C. Miller
241b1db873 Add --enable-kerb5-instance configure option to allow people using 
Kerberos V authentication to use a custom instance.  Adapted from
a diff by Michael E Burr.
 2012-01-05 15:39:05 -05:00
Todd C. Miller
edd32aa8df Mention how to configure pam_hpsec on HP-UX to play nicely with sudo. 2011-12-08 09:10:07 -05:00
Todd C. Miller
5c29710f35 Remove obsolete securid auth method. 2011-11-13 11:54:06 -05:00
Todd C. Miller
c86561e502 Remove the old Kerberos IV support 2011-11-13 09:12:43 -05:00
Todd C. Miller
b3b268c3a4 Remove --with-CC option; it doesn't work correctly now that we use 
libtool.  Users can get the same effect by setting the CC environment
variable when running configure.
 2011-09-08 09:36:24 -04:00
Todd C. Miller
e4956d22e1 Add --enable-werror configure option. 2011-08-23 10:15:28 -04:00
Todd C. Miller
88cfbd51a5 Add support for --enable-nls[=location] 2011-05-29 14:33:18 -04:00
Todd C. Miller
6b856c7790 No need to include version number at the top of these files. 2011-05-19 13:17:31 -04:00
Todd C. Miller
1994db70da Add --disable-nls flag and improve checks for gettext. 2011-05-09 10:58:52 -04:00
Todd C. Miller
f52a6ccae4 Fix and document --with-plugindir; partially from Diego Elio Petteno 2011-04-06 12:02:49 -04:00
Todd C. Miller
ed8e30cf6e Add --disable-env-reset configure option. 2011-01-28 16:52:25 -05:00
Todd C. Miller
d54dd245a8 Better --enable-zlib description 2010-10-28 14:31:00 -04:00
Todd C. Miller
b51afe6249 Implement --with-umask-override configure flag. 2010-09-14 17:18:55 -04:00
Todd C. Miller
6d0395ee68 Add support for Ubuntu admin flag file and enable it when building 
Ubuntu packages.
 2010-07-28 16:34:11 -04:00
Todd C. Miller
2675524c32 The tty_tickets option is now on by default. 2010-07-20 13:20:53 -04:00
Todd C. Miller
33c029c8ce document --with-pam-login 2010-07-16 07:10:22 -04:00
Todd C. Miller
a33996e740 install-man -> install-doc 2010-07-13 08:36:19 -04:00
Todd C. Miller
7910281697 Add --insults=disabled configure option to allow people to build 
in insult support but have the insults disabled unless explicitly
enabled in sudoers.
 2010-07-12 18:04:16 -04:00
Todd C. Miller
e6b48d415c Replace built-in non-unix group support with a sudoers group plugin. 
Include a sample plugin that can read Unix-format group files.
 2010-07-02 11:11:25 -04:00
Todd C. Miller
2cd108304d Add Linux audit support. 2010-06-16 11:17:02 -04:00
Todd C. Miller
65307f89bc SunOS does not ship with an ANSI compiler 2010-06-14 16:14:19 -04:00
Todd C. Miller
96e4b0e20f Update OS specific notes. Delete some really ancient ones and move 
older ones to the end of the list.
 2010-06-14 16:11:01 -04:00
Todd C. Miller
9425527982 Add --enable-warnings and fix typo in SUDO_IO_LOGDIR 2010-05-30 11:16:31 -04:00
Todd C. Miller
2dd29bf64d Break sudoers transcript feature up into log_input and log_output. 2010-05-30 10:31:38 -04:00
Todd C. Miller
cf07bde706 No longer need to substitute in script.o and pty.o; I/O logging support 
is always built.
 2010-03-04 08:12:36 -05:00
Todd C. Miller
2df5bd857a Document missing options: --with-efence and --with-bsm-audit 2009-12-19 21:57:33 +00:00
Todd C. Miller
00c89f0145 filename -> file name like the rest of the docs 2009-12-19 21:33:25 +00:00
Todd C. Miller
602a62c01e First pass at zlib support for transcript data files 2009-10-22 23:50:16 +00:00
Todd C. Miller
8a6dcebd8a Hook up --disable-transcript and --enable-transcript=DIR 2009-09-26 15:34:46 +00:00
Todd C. Miller
54c599d714 Document --with-libvas and --with-libvas-rpath 2009-06-09 14:08:55 +00:00