Todd C. Miller
625e3e46d0
Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l w/o a passwd
...
if there is *any* entry for the user on the host with a NOPASSWD flag.
For -v, only allow w/o a passwd if *all* entries for the user on the host
w/ the specified runas user have the NOPASSWD flag set.
2000-01-03 04:43:33 +00:00
Todd C. Miller
df297922c5
add check target
2000-01-03 04:26:17 +00:00
Todd C. Miller
a720dfa30a
Treat EOF at whatnow prompt like 'x' instead of looping.
1999-12-16 18:02:14 +00:00
Todd C. Miller
7db5ff9f55
recent changes
1999-12-10 05:09:47 +00:00
Todd C. Miller
ac67ced558
Add check for initgroups() since old SYSV lacks this.
1999-12-09 04:04:47 +00:00
Todd C. Miller
957fa7941d
o Kill HAVE_FNMATCH_H
...
o Only define HAVE_FNMATCH if <fnmatch.h> exists.
1999-12-09 03:54:57 +00:00
Todd C. Miller
8446da40fb
Don't allow insults to be enabled if the insults[] array is empty.
...
Otherwise there would be division by zero.
1999-12-06 06:47:19 +00:00
Todd C. Miller
423f6d5abe
Don't allow insults to be enabled if the insults[] array is empty.
...
Otherwise there would be division by zero.
1999-12-06 06:47:13 +00:00
Todd C. Miller
baf50ee07a
Don't allow insults to be enabled if the insults[] array is empty.
...
Otherwise there would be division by zero.
1999-12-06 06:47:13 +00:00
Todd C. Miller
06f517bace
Don't care about USE_INSULTS #define since the insult stuff may be
...
overridden at runtime.
1999-12-06 06:25:29 +00:00
Todd C. Miller
c85a0b9bc4
Honor insults flag.
1999-12-06 06:23:29 +00:00
Todd C. Miller
b937889e88
Don't ask the user for a password if the user is not allowed to run
...
the command and the authenticate flag (in sudoers) is false.
1999-12-06 00:14:54 +00:00
Todd C. Miller
2eb9882339
o Whenever we get a bare newline we change to the INITIAL state.
...
o Enter GOTRUNAS when we see Runas_Alias
This allows #uid to work in a RunasAlias.
1999-12-06 00:05:53 +00:00
Todd C. Miller
34d793254d
fix parsing of runas lists:
...
o oprunasuser and runaslist now return a value
o in a runasspec, if a runaslist does not return TRUE, set runas_matches to
FALSE. Normally, a runaslist only returns FALSE for explicitly denied
users.
o since runaslist does not modify the stack there is no need for a push/pop
in runasalias.
1999-12-05 19:06:09 +00:00
Todd C. Miller
12f5216097
Don't kill the user's tickets until after sudoers has been parsed
...
since tty_tickets and ticket_dir could be set in sudoers.
1999-12-05 02:54:20 +00:00
Todd C. Miller
c6136f9764
crank version to 1.6
1999-12-05 02:18:47 +00:00
Todd C. Miller
a183816d27
add set_fqdn() stub
1999-12-05 02:18:17 +00:00
Todd C. Miller
449f67f776
o Kill shell_noargs option, it cannot work since the command needs to
...
be set before sudoers is parsed.
o Fix the "set_home" sudoers option (only worked at compile time).
o Fix "fqdn" sudoers option. We now set host/shost via set_fqdn which
gets called when the "fqdn" option is set in sudoers.
o Move the openlog() to store_syslogfac() so this gets overridden
correctly from the sudoers file.
1999-12-02 20:31:25 +00:00
Todd C. Miller
a6a2b564d0
SecurID support should compile now.
1999-12-02 20:21:31 +00:00
Todd C. Miller
df7c6e0bff
fix some syntactic goofs
1999-11-29 01:57:05 +00:00
Todd C. Miller
96ffd91ec5
No longer need the .html files as they are generated automatically
...
on the web site.
1999-11-28 23:51:54 +00:00
Todd C. Miller
da14eb97d6
kill characters that made wml unhappy
1999-11-28 23:49:58 +00:00
Todd C. Miller
b47fea38a5
typo
1999-11-28 23:34:53 +00:00
Todd C. Miller
395e56a86f
majordomo@cs.colorado.edu -> majordomo@courtesan.com
1999-11-25 17:05:24 +00:00
Todd C. Miller
22bb6197d4
Wrap script execution w/ /bin/sh for the benefit of ctm
1999-11-25 00:43:44 +00:00
Todd C. Miller
6713b85dc6
Make the -s flag be exclusive too. Also reorder the flags in
...
the exclusive usage message so they are alphabetical.
1999-11-24 03:52:34 +00:00
Todd C. Miller
1c5e61db4b
make pam errors other than PAM_PERM_DENIED fatal
1999-11-23 18:27:00 +00:00
Todd C. Miller
4fd3e643bf
fix typo
1999-11-23 18:07:16 +00:00
Todd C. Miller
1fe397ae5d
make it clear that /etc/pam.d/sudo is required on linux
1999-11-23 18:07:02 +00:00
Todd C. Miller
dab213c3ee
fix a warning on redhat and spew an error if pam_authenticate() returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED
1999-11-23 18:06:45 +00:00
Todd C. Miller
1f0fa1814b
Be very clear that the password required is the user's not root's
1999-11-23 05:43:16 +00:00
Todd C. Miller
c977b43ca6
add sample.syslog.conf to DISTFILES and BINFILES
1999-11-20 02:04:12 +00:00
Todd C. Miller
93cda3a23d
updates from Brian Jackson + some formatting
1999-11-19 00:13:56 +00:00
Todd C. Miller
c7dc5c099a
o One RUNSon update
...
o Changes for automating real binary releases
1999-11-18 02:39:50 +00:00
Todd C. Miller
5e742c68d3
Add bindist target
1999-11-18 02:38:58 +00:00
Todd C. Miller
ee9af29746
talk about run-time options in addition to compile-time options
1999-11-16 21:26:09 +00:00
Todd C. Miller
3e6f6697c7
fix typos
1999-11-16 06:16:39 +00:00
Todd C. Miller
1976aec18c
need sys/time.h if HAVE_SETRLIMIT
1999-11-16 06:09:23 +00:00
Todd C. Miller
d00a8de2f0
get rid of references to sudo-bugs. Now mention the web site or the sudo@ alias
1999-11-16 05:42:28 +00:00
Todd C. Miller
3299d72a5c
repair pod2html damage
1999-11-16 05:35:53 +00:00
Todd C. Miller
d6a034cf76
Update for 1.6 release
1999-11-16 05:28:45 +00:00
Todd C. Miller
42f7c6f3f4
Add warning about using ALL in a command context.
1999-11-16 05:23:41 +00:00
Todd C. Miller
bbc51dac5c
Call yyrestart() on a parse error to reset the lexer state.
1999-11-09 20:12:20 +00:00
Todd C. Miller
818bbacb5d
Don't need YY_FLUSH_BUFFER after all
...
Move yyrestart() into visudo.c since it might not get called in yywrap
if we get a parse error (and we only reread the file on error anyway).
1999-11-09 20:06:53 +00:00
Todd C. Miller
95eb54d99c
Call YY_FLUSH_BUFFER macro in yywrap() to clean up any buffers that
...
might still exist.
Call yyrestart() instead of using the deprecated YY_NEW_FILE macro.
1999-11-09 19:32:41 +00:00
Todd C. Miller
f03cac3b87
flex doesn't need %N table size declarations
1999-11-09 17:13:46 +00:00
Todd C. Miller
afe809a31c
Mention what characters need to be escaped in names.
1999-11-09 00:00:29 +00:00
Todd C. Miller
701c55c08c
regen
1999-11-08 23:59:53 +00:00
Todd C. Miller
a5b437605f
clarify Mac OS X entry
1999-11-08 23:59:12 +00:00
Todd C. Miller
c02b05acd3
update
1999-11-08 23:59:01 +00:00