isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,336 Commits 1 Branch 0 Tags
60a3019483debecd4e512a66a7cac23f70f62d1c
Commit Graph

6336 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
60a3019483 Add support for controlling symbol visibility using the HP and 
Solaris C compilers.
 2012-06-15 14:18:23 -04:00
Todd C. Miller
203abd98b9 Use the expanded io log dir when updating the sequence number. 
Includes a workaround for older versions of sudo where the
sequence number was stored in the unexpanded io log dir.
 2012-06-15 12:33:12 -04:00
Todd C. Miller
85c6078659 Simplify "sudo -s" argv rewriting. 2012-06-14 16:17:15 -04:00
Todd C. Miller
47abbb90a2 Don't use a map file for sudo_noexec.so since Solaris ld doesn't 
allow '*' in the global section.  The libtool export flag is now
added to LT_LDFLAGS instead of commenting/uncommenting lines.
 2012-06-14 11:35:02 -04:00
Todd C. Miller
1fe3f9f40f The visibility attribute was actually added in gcc 3.3.x, not 4.0. 
Just assume that if -fvisibility=hidden works that the attribute
is usable.
 2012-06-13 16:57:49 -04:00
Todd C. Miller
649edc3192 Export group cache from sudoers.so for system_group.so to use. 2012-06-13 16:21:45 -04:00
Todd C. Miller
6f6b0dec6c Use gcc's visibility attribute to specify when symbols are visible 
or hidden, if available.  If not available, use an ELF version
script if it is supported.  If all else fails, fall back to using
libtool's -export-symbols.
 2012-06-13 14:01:16 -04:00
Todd C. Miller
60eafc971f Add mode for installed locale files but leave the directories with 
default mode and owner.
 2012-06-12 13:52:20 -04:00
Todd C. Miller
c498235578 Install AIX packages under /opt/freeware with links in /usr/bin and 
/usr/sbin.  This matches the layout of the sudo package from AIX
freeware.
 2012-06-11 15:07:16 -04:00
Todd C. Miller
a8e0687ca9 Install shared objects with mode 0644 except on HP-UX which needs 
the executable bit set.
 2012-06-11 10:45:34 -04:00
Todd C. Miller
c131cb36f5 Make installed file modes consistent with the file modes in the 
sudo package.
 2012-06-11 10:17:19 -04:00
Todd C. Miller
642b7e8873 Add "%:" prefix when talking about QAS non-Unix group support. 2012-06-08 13:28:47 -04:00
Todd C. Miller
f5948149e0 Fix packaging of symbolic links on HP-UX when the link source already 
exists in the filesystem.
 2012-06-08 13:27:16 -04:00
Todd C. Miller
db9f50f13c Only specify prefix if we are overriding the default value. 
Fixes the man dir (/usr/local/man vs. /usr/local/share/man).
 2012-06-08 13:26:16 -04:00
Todd C. Miller
94049aa532 Fix setting of sudoedit_man variable. 2012-06-08 09:37:43 -04:00
Todd C. Miller
afbf68d6a3 Echo the command when linking the sudoedit manual. 2012-06-08 09:37:08 -04:00
Todd C. Miller
4c88e08c87 Build .deb packages with selinux support. 2012-06-07 13:59:36 -04:00
Todd C. Miller
13472d7a8e Don't list paths for unstripped binaries in the lintial overrides. 2012-06-04 15:06:04 -04:00
Todd C. Miller
37db1a4dcb Add support for Installed-Size header in control file, required by 
newer debian versions.
 2012-06-04 14:53:47 -04:00
Todd C. Miller
0a66c24392 Fix extended description in .deb files. 2012-06-04 13:22:47 -04:00
Todd C. Miller
dab474b938 Add Depends, Replaces and Conflicts headers for .deb packages. 2012-06-04 13:13:38 -04:00
Todd C. Miller
54cfac04d1 If there are no privs to print, write the message to the lbuf instead 
of printing it directly.
 2012-06-01 16:27:17 -04:00
Todd C. Miller
f6f64ce04f Set -e in %pos and %preun for debian to quiet a lintian warning. 2012-05-31 16:10:44 -04:00
Todd C. Miller
61a3ed1c10 Install sudoedit and the sudoedit manual as symbolic links, not 
hard links and package them as such.
 2012-05-31 15:50:16 -04:00
Todd C. Miller
3076dc2a4f Make sudo binary permissions 755 instead of 111 
Add lintian overrides file for .deb files.
 2012-05-31 14:26:16 -04:00
Todd C. Miller
8d4c6bbbd0 Replace out of date MAN_POSTINSTALL with MANCOMPRESS and MANCOMPRESSEXT 
which can be used to compress the installed manual pages.
Compress the man pages for .deb files to appease lintian.
 2012-05-31 14:03:41 -04:00
Todd C. Miller
b5ee0ab910 Debian fixes: 
* fix modes to be more in line with what Debian expects
 * add section
 * install LICENSE as copyright and ChangeLog as changelog
 * create stub changelog.debian
 2012-05-31 14:02:26 -04:00
Todd C. Miller
8b38f45841 Fix find command to properly skip files in the DEBIAN dir when 
building md5sums.
 2012-05-31 14:00:38 -04:00
Todd C. Miller
7391c7562f Use a debian-compliant package maintainer field. 2012-05-31 10:20:40 -04:00
Todd C. Miller
b406b51da0 No need to loop over atomic_writev(), it guarantees to write all 
data or return an error.

Fix handling of stdout/stderr that contains "\r\n" and handle a
"\r\n" pair that spans a buffer.
 2012-05-30 10:46:02 -04:00
Todd C. Miller
01da613793 Update for sudo 1.8.5p2 2012-05-29 14:28:42 -04:00
Todd C. Miller
12be3e7f54 Instead of doing extra write()s when replaying stdout, build up a 
vector for writev() instead.  This results in far fewer system
calls.
 2012-05-29 13:46:28 -04:00
Todd C. Miller
af9492d117 Provide unhooked version of getenv() and use it when looking up 
DISPLAY and SUDO_ASKPASS in the environment.
 2012-05-27 12:48:55 -04:00
Todd C. Miller
7a6cad5026 When replaying a log of stdout or stderr, do newline to carriage 
return + linefeed conversion.  We cannot have termios do this for
us since we've disabled output postprocessing (POST) when setting
raw mode.
 2012-05-25 16:24:42 -04:00
Todd C. Miller
7720a7fc89 When checking for -fstack-protector, treat warnings as fatal errors. 2012-05-24 11:03:10 -04:00
Todd C. Miller
e54a007263 Fix test for -z relro 2012-05-22 15:45:50 -04:00
Todd C. Miller
ca89eb59ea Add m4/ax_check_compile_flag.m4 and m4/ax_check_link_flag.m4 2012-05-22 13:26:02 -04:00
Todd C. Miller
e417fb3da1 Build with -fstack-protector and link with -zrelo where supported. 
Added --disable-hardening option to disable hardening options.
 2012-05-22 13:23:19 -04:00
Todd C. Miller
ca9331d498 Add tests for sudoers mode, owner and group checks. 2012-05-21 15:39:24 -04:00
Todd C. Miller
0d82c4c7ee If sudoers_mode is group-readable but the actual sudoers file is 
not, open the file as uid 0, not uid 1.  This fixes a problem when
sudoers has a more restrictive mode than what sudo expects to find.
In older versions, sudo would silently chmod the file to add the
group-readable bit.
 2012-05-21 13:59:02 -04:00
Todd C. Miller
d29aede203 No longer throw an error if sudoers is a symbolic link. Deprecated 
the --with-stow option as that is now (effectively) the default.
 2012-05-21 13:30:59 -04:00
Todd C. Miller
4f296fe211 Add basic tests for #include and #includedir 2012-05-18 14:29:55 -04:00
Todd C. Miller
b35cd75533 Add -U sudoers_uid option to testsudoers. 2012-05-18 14:29:29 -04:00
Todd C. Miller
fe5bf03061 Update for 1.8.5p1 2012-05-17 15:53:37 -04:00
Todd C. Miller
8a7ac44590 Fix #includedir; from Mike Frysinger 2012-05-17 15:42:57 -04:00
Todd C. Miller
2b7659f709 Don't prompt for a password if the user is in the exempt group, is 
root, or is running the command as themselves even if the -k option
was specified.  This makes "sudo -k command" consistent with the
behavior one would get if the user ran "sudo -k" immediately before
running the command.
 2012-05-17 10:20:14 -04:00
Todd C. Miller
025a309025 Fix capitalization 2012-05-15 12:15:30 -04:00
Todd C. Miller
071256a838 Build PIE executable on Mac OS X 10.5 and above. 2012-05-15 12:08:22 -04:00
Todd C. Miller
3d55aaa8be Update for sudo 1.8.4p5 2012-05-14 14:48:18 -04:00
Todd C. Miller
0d5a941319 Add missing break between AF_INET and AF_INET6 in addr_matches_if_netmask() 2012-05-14 14:47:48 -04:00