isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
6,862 Commits 1 Branch 0 Tags
61c0a24c85c486b53347d16056fbe5598e30b55c
Commit Graph

6862 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
b0df32a771 Bump SUDOERS_GRAMMAR_VERSION for new digest support. 2013-04-15 15:14:07 -04:00
Todd C. Miller
e715841fc2 Sanity check digest in parser so visudo can catch errors. 
Add base64 support
 2013-04-15 15:12:00 -04:00
Todd C. Miller
89759fa36c For big endian architectures just use memcpy() instead of BE macros 
in a loop.
 2013-04-15 11:05:52 -04:00
Todd C. Miller
35375a2b7e Initial implementation of checksum support in sudoers. 
Currently supports SHA-224, SHA-256, SHA-384, SHA-512.
TODO: checksum format validation in parser and base64 support.
      checksum support for ldap sudoers
 2013-04-14 07:00:21 -04:00
Todd C. Miller
1aa4903520 SHA-224, SHA-256, SHA-384 and SHA-512. Derived from the public 
domain SHA-1 and SHA-2 implementations by Steve Reid and Wei Dai
respectively.
 2013-04-13 07:05:06 -04:00
Todd C. Miller
22c8c12170 Add sudo 1.8.6p8 2013-04-11 15:56:10 -04:00
Todd C. Miller
bce9a96a6d Add missing "not" in error message when mixing standalone and 
non-standalone authentication methods.
 2013-04-11 15:55:32 -04:00
Todd C. Miller
6f718ee3cd Check for crypt() returning NULL. Traditionally, crypt() never returned 
NULL but newer versions of eglibc have a crypt() that does.  Bug #598
 2013-04-11 13:10:40 -04:00
Todd C. Miller
e9726e5974 Better PAM error messages 2013-04-11 09:09:53 -04:00
Todd C. Miller
c00cc3bfe3 Better error messages 2013-04-11 09:03:37 -04:00
Todd C. Miller
8d2c791806 Use same error message for getauid() failure. 2013-04-11 08:54:39 -04:00
Todd C. Miller
236f306a2b Start warning with a lower case letter for consistency and to match 
existing translated strings.
 2013-04-11 06:38:12 -04:00
Todd C. Miller
8ffac2aa6f Disable PIE on Solaris where it is not really supported. 2013-04-10 16:26:41 -04:00
Todd C. Miller
42313adc0d AIX may have a 64-bit pr_ttydev that we need to convert to 32-bit 
before we try to match it against st_rdev.
 2013-04-10 12:30:16 -04:00
Todd C. Miller
54f092c3e6 Break out of the loop if sudo_ttyname_scan() returns non-NULL. 
Fixes a problem finding the tty name when it is not in /dev/pts.
 2013-04-10 12:11:12 -04:00
Todd C. Miller
e3b61c11f1 Support %lld and %llu 2013-04-10 11:17:41 -04:00
Todd C. Miller
ec32194152 Add ttyname test. 2013-04-10 09:39:49 -04:00
Todd C. Miller
c3b9c94e87 Sync with translationproject.org 2013-04-09 14:39:44 -04:00
Todd C. Miller
5555b86d7e Log timestampfile to debug file. 2013-04-09 14:17:59 -04:00
Todd C. Miller
9914cd8a76 Don't add the "Password: " string we look up in the PAM text domain 
to the sudoers.pot file.
 2013-04-09 09:40:36 -04:00
Todd C. Miller
e2ed8cc9f1 Synce with regcomp() error message change. 2013-04-08 15:41:55 -04:00
Todd C. Miller
b6d644b300 Be consistent with error message when regcomp() fails. 2013-04-08 15:41:09 -04:00
Todd C. Miller
e17267b5e1 Use group -1 instead of 1 as the invalid group since the running 
user might have group 1 as their default group.
 2013-04-05 08:17:19 -04:00
Todd C. Miller
f1aed773ec PWD may be a shell builtin, use CWD instead. 2013-04-05 08:05:35 -04:00
Todd C. Miller
faf150c4d0 Split up check_user(). 2013-04-04 10:04:22 -04:00
Todd C. Miller
baa9041fed Cosmetic fixes in the comments. 2013-04-03 09:54:11 -04:00
Todd C. Miller
e003c793b3 Use AC_LINK_IFELSE instead of AC_TRY_LINK 
Fix printing of status message for visibility checks when the test fails.
 2013-04-02 16:56:59 -04:00
Todd C. Miller
9438c8ab36 regen 2013-04-02 16:54:39 -04:00
Todd C. Miller
4bd1b5e35c We no longer use mbr_check_membership() and setrlimit64() is 
AIX-specific.
 2013-04-02 16:52:59 -04:00
Todd C. Miller
09754a11aa The first (all) target must be by itself or some makes will choose 
the run the entire target list.
 2013-04-02 12:40:53 -04:00
Todd C. Miller
7364f0ce98 Do exec_prefix expansion when enable_shared even if noexec is 
not enabled.
 2013-04-02 12:25:54 -04:00
Todd C. Miller
b9bb50ff5b Use free() not efree() since we don't include alloc.h here 2013-04-02 11:23:31 -04:00
Todd C. Miller
382640839e regen 2013-04-02 10:40:16 -04:00
Todd C. Miller
46db7a20e4 Pass in expected gid to testsudoers in addition to the uid that 
matches the test sudoers files.
 2013-04-02 09:25:51 -04:00
Todd C. Miller
414fc377c9 Tru64 5.x does declare innetgr() and getdomainname(). 2013-04-01 16:39:30 -04:00
Todd C. Miller
cd980f0b4f Fix compilation when getdomainame() is not present. 2013-04-01 16:35:35 -04:00
Todd C. Miller
f7b62e8dc1 Move SET/CLR/ISSET from config.h.in to missing.h 2013-04-01 15:38:09 -04:00
Todd C. Miller
3a83dbafbe Fix getgrouplist() check. 2013-04-01 14:58:31 -04:00
Todd C. Miller
159664ad78 No more timestamp.h 2013-04-01 14:56:54 -04:00
Todd C. Miller
073989aa68 Neded sys/time.h for struct timeval in struct sudo_tty_info. 2013-04-01 14:48:00 -04:00
Todd C. Miller
e7e739f659 regen depends 2013-04-01 14:10:42 -04:00
Todd C. Miller
87e191787f Mention libibmldap on HP-UX 2013-04-01 14:10:37 -04:00
Todd C. Miller
e23ebd53c3 Instead of checking the domain name explicitly for "(none)", just 
check for illegal characters.
 2013-04-01 13:56:42 -04:00
Todd C. Miller
328994740e Only warn once when we are unable to open the sudoers file. 2013-04-01 11:23:29 -04:00
Todd C. Miller
41ab8da22c Fall back to opening /dev/tty to determine whether there is a tty 
if the system doesn't have kernel support for determing the tty.
 2013-04-01 10:40:17 -04:00
Todd C. Miller
afc95dd118 Update guard to take __progname into account 2013-04-01 10:23:36 -04:00
Todd C. Miller
d7ea8fead5 Some older systems have inttypes.h but not stdint.h 2013-04-01 10:23:18 -04:00
Todd C. Miller
98ffa51545 Add guards in compat source files. Not really needed since we only 
include them in the Makefile if they are needed but should not hurt
either.
 2013-04-01 10:19:26 -04:00
Todd C. Miller
d30008d580 Don't include gram.h in gram.y, its contents are already included. 
Move sudoerserror to the end of gram.y so COMMENT is declared
when we need to use it.
 2013-03-31 09:58:37 -04:00
Todd C. Miller
6b2a085a2c Remove some pre-ANSI cruft. 2013-03-29 16:30:27 -04:00