isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,989 Commits 1 Branch 0 Tags
13fd13e17c89e30a8af32cf353ee09b624d2be5c
Commit Graph

6989 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
adce34358c Remove old bits about sudo setuid problems that should have been 
cleaned up in changeset 7917:fa4894896d8a.  Also update the mode
of sudo to 04755 to match current packaging.
 2013-07-11 17:57:40 -04:00
Todd C. Miller
6dff70db03 Go back to ignoring the return value of pam_setcred() since with 
stacked PAM auth modules a failure from one module may override
PAM_SUCCESS from another.  If the first module in the stack fails,
the others may be run (and succeed) but an error will be returned.
This can cause a spurious warning on systems with non-local users
(e.g. pam_ldap or pam_sss) where pam_unix is consulted first.
 2013-07-11 17:50:03 -04:00
Todd C. Miller
f32a1c7edc Remove unused variable. 2013-07-11 17:47:39 -04:00
Todd C. Miller
a72d04c393 Fix typo 2013-07-11 16:31:36 -04:00
Todd C. Miller
4d6cb6efff Fix pasto; sudo_sss_extract_digest() not sudo_ldap_extract_digest(). 
From Dan Harnett.
 2013-07-09 10:35:26 -06:00
Todd C. Miller
bf9d823c27 Fix formatting typo; from Eric S. Raymond 2013-06-18 06:39:02 -04:00
Todd C. Miller
0799e96790 Use -gxcoff on aix so dbx can be used to debug sudo. 2013-06-17 16:48:32 -04:00
Todd C. Miller
e8046e4be8 Fix typo; bug 605 2013-06-12 09:15:11 -04:00
Todd C. Miller
8b44c5d42d Regen .mo files that were out of date. 2013-06-04 05:47:19 -04:00
Todd C. Miller
c057692da7 On Solaris 11 and higher, tag binaries for ASLR if supported by the 
linker.
 2013-05-30 09:29:36 -04:00
Todd C. Miller
d962673a74 No longer need to disable PIE on Solaris. 2013-05-30 09:11:30 -04:00
Todd C. Miller
67d8af4be5 Restrict default creation of PIE binaries (-fPIE and -pie) to Linux. 
OpenBSD also supports PIE but enables it by default so we don't
need to do anything.  This fixes problems on systems with a version
of GNU ld that accepts -pie but where the run-time linker doesn't
actually support PIE.  Also verify that a trivial PIE binary works
unless PIE is explicitly enabled.
 2013-05-28 14:40:45 -04:00
Todd C. Miller
521e17b13b Attempt to detect PIE failure on Solaris 10 with GNU as and GNU ld 
where we can end up crashing due to malloc() failures.  Sems OK
when Using Sun as and ld.
 2013-05-24 16:47:16 -04:00
Todd C. Miller
a6ee84b0ad Update with final changes. 2013-05-24 11:26:41 -04:00
Todd C. Miller
62c7945c00 Add -fPIE to PIE_LDFLAGS as per gcc manual. 2013-05-23 22:47:28 -04:00
Todd C. Miller
f9c4fb69de Add missing $(PIE_LDFLAGS) $(SSP_LDFLAGS) for test programs 2013-05-22 17:04:25 -04:00
Todd C. Miller
ab61c02546 Replace sequence number-based cycle detection in visudo with a 
"used" flag in struct alias.  The caller is required to call
alias_put() when it is done with the alias.  Inspired by a patch
from Daniel Kopecek.
 2013-05-22 11:32:08 -04:00
Todd C. Miller
8a57f129ac Eliminate a few relocations related to sudoers_io. 2013-05-20 11:06:13 -04:00
Todd C. Miller
32a29d596d Sync with translationproject.org 2013-05-20 10:20:04 -04:00
Todd C. Miller
5869916533 Clarify a comment. 2013-05-18 04:38:26 -04:00
Todd C. Miller
5549e44cd8 Handle d_type == DT_UNKNOWN when resolving the device to a name and 
sprinkle some more debugging.
 2013-05-16 10:18:13 -04:00
Todd C. Miller
2dd71e838a Add message about disabling PIE if sudo gets SIGSEGV. 2013-05-03 16:24:22 -04:00
Todd C. Miller
1e5e5fb440 No longer store the ctime of a devpts tty. The handling of ctime 
on devpts in Linux has been changed to conform to POSIX.  As a
result we can no longer assume that the ctime will stay unchanged
throughout the life of the session.  We store the session ID in the
time stamp file so there is a much smaller chance of the time stamp
file being reused by a new login.  While here, store the uid/gid
in the timestamp file too for good measure.
 2013-05-03 16:14:12 -04:00
Todd C. Miller
ca4f8d9495 PIE is broken on FreeBSD/arm 2013-05-03 14:33:26 -04:00
Todd C. Miller
04f9cedef4 Add explicit sendmail path for Linux since we may not have sendmail 
installed in the build chroot.
 2013-05-03 10:51:04 -04:00
Todd C. Miller
f6e8fb8b1c Quiet a few -Wunused-result compiler warnings. 2013-05-01 11:02:09 -04:00
Todd C. Miller
874d84f263 Mention what SHA-2 formats are supported. 2013-04-30 11:44:01 -04:00
Todd C. Miller
61c0a24c85 List code and translations separately. 2013-04-30 11:07:06 -04:00
Todd C. Miller
a971ac4233 Sync with translationproject.org 2013-04-29 14:04:51 -04:00
Todd C. Miller
8aaea60a79 regen 2013-04-29 14:02:23 -04:00
Todd C. Miller
cf5f505fb4 Fix c-format for fatal/fatalx 2013-04-29 14:00:50 -04:00
Todd C. Miller
368a6558ca Change some error/errorx -> fatal/fatalx in comments and xgettext 
flags.
 2013-04-26 16:06:05 -04:00
Todd C. Miller
08506b66ae There is now a Turkish translation of sudoers. 2013-04-26 09:16:43 -04:00
Todd C. Miller
e17e4c951a Updated translations from translationproject.org including new 
Turkish translation.
 2013-04-26 09:16:22 -04:00
Todd C. Miller
7c9aaa2f2f Document that sudoers will re-use existing I/O log paths unless 
they are mktemp-style with trailing X's.
 2013-04-25 15:11:06 -04:00
Todd C. Miller
fa6c857112 Allow ldap_conf and ldap_secret to be specified as plugin arguments 
in sudo.conf
 2013-04-25 14:49:02 -04:00
Todd C. Miller
67dad9a83c sudoers_debug is now deprecated in favor of the sudo debugging 
framework.
 2013-04-25 10:22:11 -04:00
Todd C. Miller
a40de4135e Replace DPRINTF with DPRINTF1 and DPRINTF2 macros that use 
SUDO_DEBUG_DIAG and SUDO_DEBUG_INFO respectively for logging to the
debug file with the ldap subsystem.
The sudoers_debug setting in ldap.conf is still honored for now but
will be removed in a future release.
 2013-04-25 10:12:42 -04:00
Todd C. Miller
8248fb3299 Add support for converting sudoers files with SHA-2 command digests. 2013-04-24 16:02:20 -04:00
Todd C. Miller
e05d2732aa Add copyright notice to scripts 2013-04-24 15:47:39 -04:00
Todd C. Miller
5a7e54d375 Add regress for SHA-2 digests. 2013-04-24 15:38:03 -04:00
Todd C. Miller
c5971524f1 Solaris maps negative gids to GID_NOBODY. 2013-04-24 15:24:24 -04:00
Todd C. Miller
50bdd5f131 Clear up an llvm checker warning which appears to be a false positive 
and fix an old XXX while I'm at it.
 2013-04-24 11:55:21 -04:00
Todd C. Miller
7ab68a35d8 Correct last change date 2013-04-24 11:14:06 -04:00
Todd C. Miller
8ca50e13b7 No need to translate this error message. 2013-04-24 11:11:21 -04:00
Todd C. Miller
ad019da9ef Mention .sl vs. .so extension handling on HP-UX 
Mention group membership changes
Fix typos
 2013-04-24 11:08:38 -04:00
Todd C. Miller
d6282d154a Update copyright years. 2013-04-24 09:35:02 -04:00
Todd C. Miller
7b4f990d1d Systrace support was removed long ago. 2013-04-24 09:17:11 -04:00
Todd C. Miller
2923a6652b Remove some files that were mistakenly added. 2013-04-23 16:37:52 -04:00
Todd C. Miller
95b50f84af Use time(&now) instead of now = time(NULL) when storing the current 
time in a time_t (better compiler error checking).
Better parsing and printing of 64-bit time_t on 32-bit platforms.
 2013-04-23 13:15:22 -04:00