Commit Graph

2335 Commits

Author SHA1 Message Date
Todd C. Miller
625e3e46d0 Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l w/o a passwd
if there is *any* entry for the user on the host with a NOPASSWD flag.
For -v, only allow w/o a passwd if *all* entries for the user on the host
w/ the specified runas user have the NOPASSWD flag set.
2000-01-03 04:43:33 +00:00
Todd C. Miller
df297922c5 add check target 2000-01-03 04:26:17 +00:00
Todd C. Miller
a720dfa30a Treat EOF at whatnow prompt like 'x' instead of looping. 1999-12-16 18:02:14 +00:00
Todd C. Miller
7db5ff9f55 recent changes 1999-12-10 05:09:47 +00:00
Todd C. Miller
ac67ced558 Add check for initgroups() since old SYSV lacks this. 1999-12-09 04:04:47 +00:00
Todd C. Miller
957fa7941d o Kill HAVE_FNMATCH_H
o Only define HAVE_FNMATCH if <fnmatch.h> exists.
1999-12-09 03:54:57 +00:00
Todd C. Miller
8446da40fb Don't allow insults to be enabled if the insults[] array is empty.
Otherwise there would be division by zero.
1999-12-06 06:47:19 +00:00
Todd C. Miller
423f6d5abe Don't allow insults to be enabled if the insults[] array is empty.
Otherwise there would be division by zero.
1999-12-06 06:47:13 +00:00
Todd C. Miller
baf50ee07a Don't allow insults to be enabled if the insults[] array is empty.
Otherwise there would be division by zero.
1999-12-06 06:47:13 +00:00
Todd C. Miller
06f517bace Don't care about USE_INSULTS #define since the insult stuff may be
overridden at runtime.
1999-12-06 06:25:29 +00:00
Todd C. Miller
c85a0b9bc4 Honor insults flag. 1999-12-06 06:23:29 +00:00
Todd C. Miller
b937889e88 Don't ask the user for a password if the user is not allowed to run
the command and the authenticate flag (in sudoers) is false.
1999-12-06 00:14:54 +00:00
Todd C. Miller
2eb9882339 o Whenever we get a bare newline we change to the INITIAL state.
o Enter GOTRUNAS when we see Runas_Alias

This allows #uid to work in a RunasAlias.
1999-12-06 00:05:53 +00:00
Todd C. Miller
34d793254d fix parsing of runas lists:
o oprunasuser and runaslist now return a value
o in a runasspec, if a runaslist does not return TRUE, set runas_matches to
  FALSE.  Normally, a runaslist only returns FALSE for explicitly denied
  users.
o since runaslist does not modify the stack there is no need for a push/pop
  in runasalias.
1999-12-05 19:06:09 +00:00
Todd C. Miller
12f5216097 Don't kill the user's tickets until after sudoers has been parsed
since tty_tickets and ticket_dir could be set in sudoers.
1999-12-05 02:54:20 +00:00
Todd C. Miller
c6136f9764 crank version to 1.6 1999-12-05 02:18:47 +00:00
Todd C. Miller
a183816d27 add set_fqdn() stub 1999-12-05 02:18:17 +00:00
Todd C. Miller
449f67f776 o Kill shell_noargs option, it cannot work since the command needs to
be set before sudoers is parsed.
o Fix the "set_home" sudoers option (only worked at compile time).
o Fix "fqdn" sudoers option.  We now set host/shost via set_fqdn which
  gets called when the "fqdn" option is set in sudoers.
o Move the openlog() to store_syslogfac() so this gets overridden
  correctly from the sudoers file.
1999-12-02 20:31:25 +00:00
Todd C. Miller
a6a2b564d0 SecurID support should compile now. 1999-12-02 20:21:31 +00:00
Todd C. Miller
df7c6e0bff fix some syntactic goofs 1999-11-29 01:57:05 +00:00
Todd C. Miller
96ffd91ec5 No longer need the .html files as they are generated automatically
on the web site.
1999-11-28 23:51:54 +00:00
Todd C. Miller
da14eb97d6 kill characters that made wml unhappy 1999-11-28 23:49:58 +00:00
Todd C. Miller
b47fea38a5 typo 1999-11-28 23:34:53 +00:00
Todd C. Miller
395e56a86f majordomo@cs.colorado.edu -> majordomo@courtesan.com 1999-11-25 17:05:24 +00:00
Todd C. Miller
22bb6197d4 Wrap script execution w/ /bin/sh for the benefit of ctm 1999-11-25 00:43:44 +00:00
Todd C. Miller
6713b85dc6 Make the -s flag be exclusive too. Also reorder the flags in
the exclusive usage message so they are alphabetical.
1999-11-24 03:52:34 +00:00
Todd C. Miller
1c5e61db4b make pam errors other than PAM_PERM_DENIED fatal 1999-11-23 18:27:00 +00:00
Todd C. Miller
4fd3e643bf fix typo 1999-11-23 18:07:16 +00:00
Todd C. Miller
1fe397ae5d make it clear that /etc/pam.d/sudo is required on linux 1999-11-23 18:07:02 +00:00
Todd C. Miller
dab213c3ee fix a warning on redhat and spew an error if pam_authenticate() returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED 1999-11-23 18:06:45 +00:00
Todd C. Miller
1f0fa1814b Be very clear that the password required is the user's not root's 1999-11-23 05:43:16 +00:00
Todd C. Miller
c977b43ca6 add sample.syslog.conf to DISTFILES and BINFILES 1999-11-20 02:04:12 +00:00
Todd C. Miller
93cda3a23d updates from Brian Jackson + some formatting 1999-11-19 00:13:56 +00:00
Todd C. Miller
c7dc5c099a o One RUNSon update
o Changes for automating real binary releases
1999-11-18 02:39:50 +00:00
Todd C. Miller
5e742c68d3 Add bindist target 1999-11-18 02:38:58 +00:00
Todd C. Miller
ee9af29746 talk about run-time options in addition to compile-time options 1999-11-16 21:26:09 +00:00
Todd C. Miller
3e6f6697c7 fix typos 1999-11-16 06:16:39 +00:00
Todd C. Miller
1976aec18c need sys/time.h if HAVE_SETRLIMIT 1999-11-16 06:09:23 +00:00
Todd C. Miller
d00a8de2f0 get rid of references to sudo-bugs. Now mention the web site or the sudo@ alias 1999-11-16 05:42:28 +00:00
Todd C. Miller
3299d72a5c repair pod2html damage 1999-11-16 05:35:53 +00:00
Todd C. Miller
d6a034cf76 Update for 1.6 release 1999-11-16 05:28:45 +00:00
Todd C. Miller
42f7c6f3f4 Add warning about using ALL in a command context. 1999-11-16 05:23:41 +00:00
Todd C. Miller
bbc51dac5c Call yyrestart() on a parse error to reset the lexer state. 1999-11-09 20:12:20 +00:00
Todd C. Miller
818bbacb5d Don't need YY_FLUSH_BUFFER after all
Move yyrestart() into visudo.c since it might not get called in yywrap
    if we get a parse error (and we only reread the file on error anyway).
1999-11-09 20:06:53 +00:00
Todd C. Miller
95eb54d99c Call YY_FLUSH_BUFFER macro in yywrap() to clean up any buffers that
might still exist.
Call yyrestart() instead of using the deprecated YY_NEW_FILE macro.
1999-11-09 19:32:41 +00:00
Todd C. Miller
f03cac3b87 flex doesn't need %N table size declarations 1999-11-09 17:13:46 +00:00
Todd C. Miller
afe809a31c Mention what characters need to be escaped in names. 1999-11-09 00:00:29 +00:00
Todd C. Miller
701c55c08c regen 1999-11-08 23:59:53 +00:00
Todd C. Miller
a5b437605f clarify Mac OS X entry 1999-11-08 23:59:12 +00:00
Todd C. Miller
c02b05acd3 update 1999-11-08 23:59:01 +00:00