Commit Graph

963 Commits

Author SHA1 Message Date
Todd C. Miller
e3cd512bfa regen 2010-12-27 14:45:13 -05:00
Todd C. Miller
05807cf5e1 Document iolog_file and supported escape sequences for sudoers.
Clarify that iolog_file can contain directories.
2010-12-27 14:43:50 -05:00
Todd C. Miller
5d59c10b95 Give the policy module fine-grained control over what the I/O plugin
logs.
2010-12-21 17:43:18 -05:00
Todd C. Miller
ad41fb497e Clarify umask option description. From Reuben Thomas. 2010-12-21 10:23:45 -05:00
Todd C. Miller
93e9635842 Pick last match in LDAP sudoers too 2010-12-20 16:37:44 -05:00
Todd C. Miller
4294e4db8b Document iolog_file, iolog_dir and use_pty 2010-12-20 16:29:08 -05:00
Todd C. Miller
b2a6984606 Make I/O log dir configurable. 2010-12-10 14:14:35 -05:00
Todd C. Miller
6c23688511 Rename io_logdir to iolog_dir 2010-12-10 14:13:51 -05:00
Todd C. Miller
3f605ebfaa Clarify ordering of entries and attributes. 2010-11-30 15:05:44 -05:00
Todd C. Miller
23df0b6fa9 Fix typo and editing goof. 2010-11-30 13:40:25 -05:00
Todd C. Miller
feb02ed406 Merge in ordered LDAP entry support from Andreas Mueller. 2010-11-30 13:34:31 -05:00
Todd C. Miller
bb4a8a4dc2 fix typo; from Michael T Hunter 2010-11-22 15:45:10 -05:00
Todd C. Miller
901ca2a12c regen 2010-11-19 16:57:21 -05:00
Todd C. Miller
ab651135d2 Mention that sudo needs "ar" to build. 2010-11-16 10:07:46 -05:00
Todd C. Miller
2b0fca31c0 Add timed entry support from Andreas Mueller. 2010-11-12 15:26:35 -05:00
Todd C. Miller
8528827500 Bump version to 1.8.0b2 2010-11-08 11:27:20 -05:00
Todd C. Miller
361cd29073 Add local copy of zlib for systems that lack it. 2010-10-28 11:17:40 -04:00
Todd C. Miller
b51afe6249 Implement --with-umask-override configure flag. 2010-09-14 17:18:55 -04:00
Todd C. Miller
bd1884bb43 sudo_plugin is in section 8; from Ted Percival 2010-09-11 09:07:53 -04:00
Todd C. Miller
f601085de4 Make "visudo -c -f -" check the standard input. 2010-09-09 17:10:23 -04:00
Todd C. Miller
b91a12988a set_home and always_set_home have an effect if HOME is present in
the env_keep list.
2010-09-09 16:22:26 -04:00
Todd C. Miller
1009d7a3e6 Query local network interfaces in the main sudo driver and pass to
the plugin as "network_addrs" in the settings list.
2010-09-08 14:20:11 -04:00
Todd C. Miller
df8ec6fc25 Add support for multiple URI lines by joining the contents and passing
the result to ldap_initialize.
2010-09-04 20:43:51 -04:00
Todd C. Miller
4feaf3c264 Document sudo_conv_t function and sudo_printf_t return values. 2010-08-12 10:29:43 -04:00
Todd C. Miller
7b011cf152 fix typo 2010-08-04 08:42:05 -04:00
Todd C. Miller
a4b3a6d966 Remove sudo docdir completely 2010-07-23 12:22:10 -04:00
Todd C. Miller
084ae523ac Add sample sudo.conf 2010-07-23 12:21:22 -04:00
Todd C. Miller
c016ecf006 Install sudoers2ldif in the doc dir 2010-07-23 09:12:03 -04:00
Todd C. Miller
8660b5ea35 Change the default syslog facility from local2 to authpriv (or auth
if the operating system doesn't support authpriv).
2010-07-22 17:50:21 -04:00
Todd C. Miller
bdecb14ea6 Mention that 127.0.0.1 will not match, nor will localhost unless
that is the actual host name.
2010-07-21 15:19:56 -04:00
Todd C. Miller
a72965e64c Rename WHATSNEW -> NEWS 2010-07-21 15:00:14 -04:00
Todd C. Miller
f45f57dca5 Add commented out line to add HOME to env_keep and add a warning
to the note about the HOME change in UPGRADE.
2010-07-21 09:51:43 -04:00
Todd C. Miller
2675524c32 The tty_tickets option is now on by default. 2010-07-20 13:20:53 -04:00
Todd C. Miller
ee7221f1fe Reset HOME when env_reset is enabled unless it is in env_keep 2010-07-19 15:35:47 -04:00
Todd C. Miller
c31e1227f1 The default for set_logname has been "true" for some time now. 2010-07-19 14:12:03 -04:00
Todd C. Miller
69ecb34581 If env_reset is enabled, set the MAIL environment variable based
on the target user unless MAIL is explicitly preserved in sudoers.
2010-07-19 12:50:59 -04:00
Todd C. Miller
225de60639 The tag is NOSETENV, not UNSETENV. From Petr Uzel. 2010-07-16 05:58:01 -04:00
Todd C. Miller
c2c15aa4e5 Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo. 2010-07-14 14:57:32 -04:00
Todd C. Miller
eccbde77da Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR environment
variable.
2010-07-14 14:09:34 -04:00
Todd C. Miller
de3cfa25f4 Remove spurious "and"; from debian 2010-07-14 09:34:39 -04:00
Todd C. Miller
26ca852a98 Substitute the value of EDITOR into the sudoers and visudo manuals. 2010-07-14 09:33:53 -04:00
Todd C. Miller
a33996e740 install-man -> install-doc 2010-07-13 08:36:19 -04:00
Todd C. Miller
7bcbce2078 Use http://rc.quest.com/topics/polypkg/ for packaging 2010-07-13 08:33:46 -04:00
Todd C. Miller
432d27573d TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses TLS_CACERT,
not TLS_CACERTFILE in its ldap.conf.  Other LDAP client code, such as
nss_ldap, uses TLS_CACERTFILE.  Also document why you should avoid
disabling TLS_CHECKPEER is possible.
2010-07-08 09:02:03 -04:00
Todd C. Miller
5b1420b6d4 Make sudo_plugin format a bit more like a man page 2010-07-07 16:59:06 -04:00
Todd C. Miller
3f33f75b7a Add uninstall target 2010-07-07 11:42:36 -04:00
Todd C. Miller
3906967771 Fix typo. 2010-07-06 13:24:00 -04:00
Todd C. Miller
2822c6c8ce Document group_plugin syntax. 2010-07-02 15:37:47 -04:00
Todd C. Miller
9d17312617 Document the sudoers group plugin. 2010-07-02 13:42:53 -04:00
Todd C. Miller
e6b48d415c Replace built-in non-unix group support with a sudoers group plugin.
Include a sample plugin that can read Unix-format group files.
2010-07-02 11:11:25 -04:00