isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
2,012 Commits 1 Branch 0 Tags
59b0cff8cf5b6a0f276f4100aac62964cc0d595c
Commit Graph

106 Commits

Author SHA1 Message Date
Todd C. Miller
59b0cff8cf Stash the "safe" path (ie: the one listed in sudoers) to the command instead 
of stashing the struct stat.  Should be safer.
 1999-04-10 04:10:01 +00:00
Todd C. Miller
499e869237 Add VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a command 
but the NOPASSWD flag was set.
Make runasspec, runaslist, runasuser, and nopasswd typeless in parse.yacc
Add support for '!' in the runas list
Fix double printing of '%' and '+' for groups and netgroups respectively
Add *_matched macros (no need for local stack variable).  Should only be
used directly after a pop (since top must be >= 2).
 1999-04-06 05:00:29 +00:00
Todd C. Miller
e6deacb6c4 Crank version to 1.6 and combine copyright statements 1999-04-05 20:57:25 +00:00
Todd C. Miller
49c5a12d8c Fix another parser bug. For a sudoers entry like this: 
millert	ALL=/bin/ls,(daemon) !/bin/ls
sudo would not allow millert to run ls as root.
 1999-03-30 17:17:54 +00:00
Todd C. Miller
79c46d1c81 ++version 1999-03-29 04:05:15 +00:00
Todd C. Miller
382ef75493 Use emalloc/erealloc/estrdup 1999-03-29 02:59:34 +00:00
Todd C. Miller
52916f16ac add explicate copyright 1999-02-03 04:32:19 +00:00
Todd C. Miller
826fe213f2 add sudo tags 1999-01-17 23:16:20 +00:00
Todd C. Miller
d3aaf52283 crank version and regen files 1999-01-17 22:40:55 +00:00
Todd C. Miller
62dba8f4d1 more -Wall 1998-11-18 04:16:13 +00:00
Todd C. Miller
c253188f55 -Wall 1998-11-18 03:51:10 +00:00
Todd C. Miller
4f461199af kill perror("malloc") since we already have a good error messages 
pw_ent -> pw for brevity
when checking if %group matches, look up user in password file so
that %groups works in a RunAs spec.
 1998-11-04 01:39:40 +00:00
Todd C. Miller
5bfb481ca7 no more options.h 1998-10-15 05:41:26 +00:00
Todd C. Miller
581cfa1406 FAST_MATCH is no longer an optino 1998-10-15 03:57:14 +00:00
Todd C. Miller
0ef9f25d7e updated version 1998-09-17 16:27:15 +00:00
Todd C. Miller
a1c5148c34 use NAMLEN() macro 1998-09-07 02:41:33 +00:00
Todd C. Miller
12477fd6e6 updated version 1998-04-06 03:35:50 +00:00
Todd C. Miller
c27d678ff7 MAX* + 1 -> MAX* 1998-04-06 03:15:39 +00:00
Todd C. Miller
e37e1e56b6 updated version 1998-03-31 05:05:49 +00:00
Todd C. Miller
c866646cdf updated version 1998-02-18 21:39:31 +00:00
Todd C. Miller
2fc787d5f6 updated version 1998-02-17 02:43:17 +00:00
Todd C. Miller
bc7803cd08 updated version 1998-02-06 20:49:24 +00:00
Todd C. Miller
3e52d3a117 set sudoers_fp to nil after closing 1998-01-30 19:59:03 +00:00
Todd C. Miller
0c362fb216 updated version 1998-01-21 06:33:06 +00:00
Todd C. Miller
bb6a33e080 updated version 1998-01-21 05:50:58 +00:00
Todd C. Miller
cae4b9d3e3 sudoers file open is now done only in check_sudoers() so 
we just do a rewind() instead of an open.  May help people on
solaris who were getting EAGAIN.
 1998-01-21 05:02:59 +00:00
Todd C. Miller
6523933184 typo 1998-01-13 15:32:41 +00:00
Todd C. Miller
6a2b6895f4 fix that bug for real 1998-01-13 15:19:08 +00:00
Todd C. Miller
166789a1dd ++version 1998-01-13 04:48:42 +00:00
Todd C. Miller
ab9b352455 commands can start with ./* not just /* -- fixes a serious security hole. 1998-01-13 04:10:08 +00:00
Todd C. Miller
5e723efe75 ++version 1996-11-14 02:37:56 +00:00
Todd C. Miller
b0248f15df ++version 1996-10-07 05:07:09 +00:00
Todd C. Miller
6a230806a8 courtesan 1996-09-08 00:21:42 +00:00
Todd C. Miller
d189849b44 ++version 1996-08-30 00:37:04 +00:00
Todd C. Miller
35825133a7 ++version 1996-08-17 23:25:40 +00:00
Todd C. Miller
7d272a7ff0 now uses init_parser() 
if not in sudoers and tries "list" or "validate" scold but don't
be nasty.
 1996-08-17 22:30:48 +00:00
Todd C. Miller
8c35fa2ec6 fix comment 1996-08-15 19:46:04 +00:00
Todd C. Miller
4fb2f4ca9a added support for new `sudo -l' stuff 1996-08-09 22:07:51 +00:00
Todd C. Miller
89784f6556 no longer return VALIDATE_NOT_OK if there was a runas that didn't 
match.  Now we can have runas stuff on more than one line.
 1996-07-26 17:23:40 +00:00
Todd C. Miller
d7ae14e4d7 don't call fnmatch() with FNM_PATHNAME flag unless it can only 
be a pathname
need to check against sudoers_args even if user_args is nil
 1996-07-24 01:18:01 +00:00
Todd C. Miller
8a177073ef now uses flat arg string 1996-07-22 19:30:42 +00:00
Todd C. Miller
54d39940b3 sudo -v now groks VALIDATE_OK_NOPASS 1996-07-08 18:16:21 +00:00
Todd C. Miller
d60779d01b moved set_perms(PERM_ROOT) to be before yyparse() 1996-06-25 22:02:22 +00:00
Todd C. Miller
082d9aed0e now includes netgroup.h 1996-06-20 05:16:36 +00:00
Todd C. Miller
8b66b61169 fixed -u support with multiple user lists on a line 1996-06-17 16:16:11 +00:00
Todd C. Miller
f66eb18a5d added support for net_addr/netmask 1996-06-17 04:02:33 +00:00
Todd C. Miller
6737221aa5 now always uses fnmatch to match args 1996-06-04 23:57:30 +00:00
Todd C. Miller
d1c239718c now uses user_gid 1996-05-28 02:42:57 +00:00
Todd C. Miller
9ec0715a31 in sudoers, 'command ""' now means command with no args 1996-05-28 00:01:53 +00:00
Todd C. Miller
a062a35c7e now uses fnmatch() instead of wildmat 
a trailing star (*) by itself now matches multiple args
added support for wildcards in the pathname  in sudoers
 1996-05-27 23:38:46 +00:00