Commit Graph

3867 Commits

Author SHA1 Message Date
Todd C. Miller
8d97a8d20f If the user enters ^C at the password prompt, abort instead of
trying to authenticate with an empty password (which causes an
annoying delay).
2006-09-29 14:53:42 +00:00
Todd C. Miller
cad6de7d73 Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by
Darren Tucker.
2006-08-17 15:26:54 +00:00
Todd C. Miller
5994797e4d pw_free() is only used by sudo_freepwcache() so ifdef it out too. 2006-08-17 15:25:07 +00:00
Todd C. Miller
6e9df267cc Update to latest versions from cvs.savannah.gnu.org 2006-08-04 15:34:19 +00:00
Todd C. Miller
884b70acc9 Move password/group cache cleaning out of sudo_end{pw,grp}ent() so
we can close the passwd/group files early.
2006-07-31 17:51:44 +00:00
Todd C. Miller
ea8c5d5d2d Add seteuid() flavor of set_perms() for systems without setreuid()
or setresuid() that have a working seteuid().  Tested on Darwin.
2006-07-31 17:50:06 +00:00
Todd C. Miller
7276bf7b9b systrace_read() returns ssize_t 2006-07-30 19:56:11 +00:00
Todd C. Miller
be3a220f7d Fix typo, -lldap vs. -ldap; from Tim Knox. 2006-07-30 19:53:52 +00:00
Todd C. Miller
bbe7ab84b5 Fix typo; Matt Ackeret 2006-07-28 17:12:49 +00:00
Todd C. Miller
c28a289f11 Print sudoers path in -V mode for root. 2006-07-17 12:25:07 +00:00
Todd C. Miller
296680928d Do a sub tree search instead of a base search (one level in the
tree only) for sudo right objects.  This allows system administrators
to categorize the rights in a tree to make them easier to manage.
2006-06-15 18:44:42 +00:00
Todd C. Miller
b6e3fb008f fix typo 2005-12-28 18:52:45 +00:00
Todd C. Miller
7c588a0143 Convert GET_OPT and GET_OPTI to use just 2 args.
Add timelimit and bind_timelimit support; adapted from gentoo.
2005-12-04 17:16:36 +00:00
Todd C. Miller
920c811687 Support comments that start in the middle of a line 2005-11-23 23:57:10 +00:00
Todd C. Miller
bce8fbdd62 Define LDAP_DEPRECATED until we start using ldap_get_values_len() 2005-11-23 23:56:52 +00:00
Todd C. Miller
ab076942e8 Silence gcc -Wsign-compare; djm@openbsd.org 2005-11-18 14:55:24 +00:00
Todd C. Miller
2d282cd226 cleanup() now takes an int as an arg so it can be used as a signal
handler too.
2005-11-18 01:39:59 +00:00
Todd C. Miller
c7140895af Make a copy of the shell field in the passwd struct for NewArgv to avoid
a use after free situation after sudo_endpwent() is called.
2005-11-18 01:38:32 +00:00
Todd C. Miller
8efcb40512 Add mkstemp() for those poor souls without it. 2005-11-17 01:36:48 +00:00
Todd C. Miller
6ac7edb6e3 Add mkstemp() for those poor souls without it. 2005-11-17 01:36:47 +00:00
Todd C. Miller
7a8ed8e07a Add mkstemp() for those poor souls without it. 2005-11-17 01:36:47 +00:00
Todd C. Miller
be9d490e1a Add PERL5DB to list of environment variables to remove. 2005-11-15 14:25:03 +00:00
Todd C. Miller
3553eee07e Instead of calling the check function twice with a state cookie use
separate check/log functions.

Check more ioctl() calls for failure.

systrace_{read,write} now return the number of bytes read/written
or -1 on error.
2005-11-13 20:49:35 +00:00
Todd C. Miller
b9f34a5a3f Add more environment variables to remove; from gentoo linux
Add some comments about what bad env variables go to what (more to do)
2005-11-13 19:51:43 +00:00
Todd C. Miller
b2a32d13c0 Move sudo_end{gr,pw}ent() until just before the exec since they
free up our cached copy of the passwd structs, including sudo_user
and sudo_runas.  Fixes a use-after-free bug.
2005-11-11 22:23:08 +00:00
Todd C. Miller
0b3b32ab9a Close all fd's before executing editor. 2005-11-11 22:19:53 +00:00
Todd C. Miller
69c627658f Enable malloc debugging on OpenBSD when SUDO_DEVEL is set. 2005-11-11 22:17:59 +00:00
Todd C. Miller
50004e00b8 Fix fd leak when lecture file option is enabled. From Jerry Brown 2005-11-11 16:22:58 +00:00
Todd C. Miller
3c6d0cc871 Add PERLLIB, PERL5LIB and PERL5OPT to the default list of environment
variables to remove.  From Charles Morris
2005-11-07 16:02:22 +00:00
Todd C. Miller
ce8f2b10e4 add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5 2005-11-01 18:24:47 +00:00
Todd C. Miller
096a289d94 add PS4 and SHELLOPTS to initial_badenv_table for bash 2005-10-28 00:35:33 +00:00
Todd C. Miller
2c3be532a0 Fix typo; Toby Peterson 2005-08-15 00:32:08 +00:00
Todd C. Miller
f758302279 Make return buffers static so they don't get clobbered 2005-08-02 13:57:55 +00:00
Todd C. Miller
26523a7ce6 Fix securid5 authentication, was not checking for ACM_OK. Also add
default cases for the two switch()es.  Problem noted by ccon at worldbank
2005-07-28 01:14:14 +00:00
Todd C. Miller
4e86b1d74a Remove ncat() in favor of just counting bytes and pre-allocating what is
needed.
2005-06-27 00:10:06 +00:00
Todd C. Miller
73730b872b Fix up some comments
Add missing fclose() for the rootbinddn case
2005-06-26 23:44:30 +00:00
Todd C. Miller
380d3c8c7b align struct ldap_config 2005-06-26 23:38:44 +00:00
Todd C. Miller
76f3c652d6 use LINE_MAX for max conf file line size 2005-06-26 23:37:54 +00:00
Todd C. Miller
e0ac56ae6f add _PATH_LDAP_SECRET 2005-06-26 22:36:51 +00:00
Todd C. Miller
69be475791 Mention rootbinddn
Give example ou=SUDOers container
2005-06-26 22:36:09 +00:00
Todd C. Miller
3b30d7514a Support rootbinddn in ldap.conf 2005-06-25 22:03:10 +00:00
Todd C. Miller
8f90cfbd89 Preserve DISPLAY environment variable by default. 2005-06-25 21:46:16 +00:00
Todd C. Miller
485fa9b662 set need_lib_prefix=no for all cases; this is safe for LD_PRELOAD 2005-06-25 20:39:56 +00:00
Todd C. Miller
c09bfd6380 set need_version=no for all cases; this is safe for LD_PRELOAD 2005-06-25 20:15:55 +00:00
Todd C. Miller
c8f360fd5f typo 2005-06-25 18:45:09 +00:00
Todd C. Miller
1ddff11130 Add dragonfly 2005-06-25 18:33:01 +00:00
Todd C. Miller
d281ff77e2 Fix call to pam_end() when pam_open_session() fails. 2005-06-25 18:29:17 +00:00
Todd C. Miller
94ab741824 regen 2005-06-25 18:21:09 +00:00
Todd C. Miller
a2c0309301 rebuild acsite.m4 from libtool 1.9f libtool.m4 ltoptions.m4 ltsugar.m4 ltversion.m4 2005-06-25 18:20:43 +00:00
Todd C. Miller
f8b3770bee merge in local changes:
config.guess:
 o better openbsd support
config.sub:
 o hiuxmpp support
ltmain.sh
 o remove requirement that libs must begin with "lib"
 o don't print a bunch of crap about library installs
 o don't run ldconfig
2005-06-25 18:08:10 +00:00