isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,566 Commits 1 Branch 0 Tags
6be0a820d0ff23b73b81fd63044ebf17e9df29e4
Commit Graph

694 Commits

Author SHA1 Message Date
Todd C. Miller
c952155b77 Prefer /usr/bin/sh to /bin/sh to match modern systems. 2014-09-20 09:03:26 -06:00
Todd C. Miller
696080917c Avoid building/running the check_symbols test program unless we are 
building a shared sudoers plugin.
 2014-08-08 11:19:20 -06:00
Todd C. Miller
76a6dad424 Add --disable-shared-libutil configure option. It may only be used 
in conjunction with the --enable-static-sudoers option.
 2014-08-08 11:03:24 -06:00
Todd C. Miller
d75d22e98a Fix exporting of asprintf/vasprintf symbols. 2014-07-30 15:47:15 -06:00
Todd C. Miller
0a9e9016f1 Don't export getaddrinfo symbols if we found the function in a library. 2014-07-30 15:08:05 -06:00
Todd C. Miller
f29880c1c7 If getaddrinfo() is missing libsudoutil may need to pull in networking 
libraries.
 2014-07-29 13:06:18 -06:00
Todd C. Miller
daf634b728 Only include functions in util.exp that are actually in the library. 
Fixes a problem on Solaris where undefined functions that are listed
as exported in the map file result in a link error.
Also make sure we use our glob.c if the system is missing glob().
 2014-07-29 10:52:43 -06:00
Todd C. Miller
f99a910236 Make sure shadow libs don't end up in LIBS, only SUDOERS_LIBS (and 
SUDO_LIBS if set_auth_parameters() or initprivs() are present.
 2014-07-29 09:30:25 -06:00
Todd C. Miller
99ae71452a Replace use of HAVE_GETCWD with PREFER_PORTABLE_GETCWD. 
It is safe to assume getcwd() exists, we just need to handle broken ones.
 2014-07-28 16:36:43 -06:00
Todd C. Miller
b0a09fb671 Add check for inet_ntoa() since it may live in libnsl. 
Make getcwd() replacement private to the SunOS 4 section.
 2014-07-28 16:11:39 -06:00
Todd C. Miller
96d1967ab0 Avoid passing -no-fast-install to libtool as this results in the 
build dir being left in the library path of the installed executable.
Instead, we remove the "lt-" prefix from the program name in
initprogname() so that the regress test output is unaffected by
libtool's binary wrapper.
 2014-07-14 09:08:50 -06:00
Todd C. Miller
00bac387b3 Force libtool to use runtime linking on AIX so that it installs the 
plugins as .so files and not .a files.
 2014-07-13 20:14:02 -06:00
Todd C. Miller
78d2b42b7e Remove @SOEXT@ and @SHLIB_EXT@ now that we use libtool to install 
shared objects.  Instead, use the new @SHLIB_ENABLE@ that is set
to the value of $enable_dlopen.  For sudo_noexec.so there is nothing
special to do since the install-noexec target is only called when
noexec is enabled by configure.
 2014-07-08 20:19:09 -06:00
Todd C. Miller
e806b96511 Make dynamic shared objects non-writable on HP-UX. Using writable 
DSOs can substantially increase the load time.
 2014-07-08 10:03:47 -06:00
Todd C. Miller
4ad98300d4 regen 2014-07-01 20:37:11 -06:00
Todd C. Miller
4e1e76a4b1 Use libtool to install/uninstall the plugins and sudo_noexec. 2014-06-29 20:45:36 -06:00
Todd C. Miller
da13a14303 Do not set an internal name for HP-UX modules, only archives. This 
works around a problem with some versions of HP-UX ld where setting
an internal name that doesn't end in .sl causes link errors.
 2014-07-01 17:14:50 -06:00
Todd C. Miller
67efcf0926 Fix my typos in the HP-UX libtool patch 2014-06-29 07:34:51 -06:00
Todd C. Miller
18dbc52e4b Add Solaris audit support; from Gary Winiger at Oracle. 2014-06-27 16:01:40 -06:00
Todd C. Miller
36e828b59f Sudo 1.8.11 2014-06-26 15:51:15 -06:00
Todd C. Miller
87c2fe5a31 Prefix all libc replacements with sudo_ and #define the real name 
to the sudo_ version.  That way we don't pollute the libc namespace.
 2014-06-26 15:51:08 -06:00
Todd C. Miller
4d37a4a162 Top level directory reorg 
Move src/po -> po
Combine common and compat -> lib/util
Move zlib -> lib/zlib
 2014-06-26 15:51:02 -06:00
Todd C. Miller
d41276f171 libtool patches for HP-UX to support DESTDIR 2014-06-26 15:50:56 -06:00
Todd C. Miller
e2efec5b3c lockf() is broken on the Hurd -- use flock instead 
Bug #647
 2014-05-09 10:03:17 -06:00
Todd C. Miller
4902f4e3ec Solaris 8 doesn't export _nss_initf_group() so we need to provide 
out own for getgrouplist().
 2014-05-07 09:03:02 -06:00
Todd C. Miller
e54fe5a269 Sudo 1.8.10p3 2014-05-06 08:46:56 -06:00
Todd C. Miller
218aa1e598 Move the sha2 code into libreplace and add configure checks for 
SHA224Update in libc and libmd.  Solaris uses "void *" where we use
"unsigned char *" so we need a check for that too.  Solaris sha2.h
defines SHA224, SHA256, SHA384, and SHA512 so rename those tokens.
Adapted from changes from Vladimir Marek in bug #641.
 2014-04-09 16:31:13 -06:00
Todd C. Miller
122257e095 Sudo 1.8.10p2 2014-03-17 08:09:39 -06:00
Todd C. Miller
01cf646a77 Sudo 1.8.10p1 2014-03-13 14:41:36 -06:00
Todd C. Miller
0cf7f404a4 Check whether ber.h is needed before ldap.h even if we are not using 
any ber functions.  Needed for older versions of nss ldap.
 2014-03-06 15:26:09 -07:00
Todd C. Miller
9c17914bf9 Try -libmldap before -lldap in case there is no link from libibmldap.so 
to libldap.so.  Since IBM ldap is installed under /opt we should only
be able to reach it if --with-ldap was given an explicit path.

Only check for ber_set_option() if LBER_OPT_DEBUG_LEVEL is defined.
 2014-02-28 11:05:13 -07:00
Todd C. Miller
cb3cea3fa9 Fix INIT_DIR for real this time. 2014-02-16 14:49:15 -07:00
Todd C. Miller
0bf299c690 Use correct init.d dir on HP-UX. 
Fix pp warnings from rc.d and init.d dirs.
 2014-02-16 11:00:41 -07:00
Todd C. Miller
96d87d55dd First cut add installing an init.d file for HP-UX and AIX to remove 
old sudo timestamp files at boot time.
 2014-02-16 10:22:43 -07:00
Todd C. Miller
85598f77b2 Use inet_pton() instead of inet_aton() and include a version from 
BIND for those without it.
 2014-02-05 10:00:07 -07:00
Todd C. Miller
249becb1ac Warn the user if the rundir needs to be cleared in the rc files. 
Neither AIX not HP-UX clear /var/run (if it even exists).
 2014-02-04 15:14:48 -07:00
Todd C. Miller
b590182abf Check libraries for inet_pton() if not in libc. 2014-02-03 05:42:39 -07:00
Todd C. Miller
719e58740b Fix clock_gettime() detection when it lives in librt. 
Some systems have inet_aton() in libresolv (older Solaris).
 2014-02-02 08:34:53 -07:00
Todd C. Miller
aeb5ceead8 Replace --with-timedir and --with-lecture_dir with --with-rundir 
and --with-vardir which are the parent directories of the time stamp
and lecture dirs.  These directories need to be searchable by
non-root so that the timestampowner setting can function.
 2014-02-01 05:57:34 -07:00
Todd C. Miller
659b1f0e34 Switch to new time stamp file format. Each user now has a single 
file which may contain multiple records when per-tty time stamps
are in use (the default).  The time stamps use a monotonic timer
where available and are once again stored in /var/run/sudo.  The
lecture status is now stored separately from the time stamps in a
different directory.
 2014-01-30 15:50:40 -07:00
Todd C. Miller
aaecd326e4 Use inet_aton() instead of inet_addr() as it allows us to distinguish 
between the address (or mask 255.255.255.255) and an error.  In the
future we may consider switching to inet_pton() for IPv4 too.
 2014-01-26 13:23:09 -07:00
Todd C. Miller
cf6bca1390 Add explicit dependency on sudoers.la to sudo target when sudoers 
is compiled statically into the sudo binary.
 2014-01-22 14:47:27 -07:00
Todd C. Miller
2de0115cb8 Update for sudo 1.8.9p4 2014-01-15 06:01:54 -07:00
Todd C. Miller
50c7e759d9 Update for sudo 1.8.9p3 2014-01-13 11:09:00 -07:00
Todd C. Miller
bf7a513890 Update for sudo 1.8.9p2 2014-01-09 15:25:51 -07:00
Todd C. Miller
a2a029ecfe Update to libtool-2.4.2.418 2014-01-09 15:23:15 -07:00
Todd C. Miller
a3d88b9db7 Update for sudo 1.8.9p1 2014-01-07 10:44:35 -07:00
Todd C. Miller
483e6972f6 Use -fstack-protector-strong in preference to -fstack-protector-all 
or -fstack-protector.
 2013-12-30 08:49:34 -07:00
Todd C. Miller
eb44a5ba5c No need to use __signed. 2013-12-17 16:08:18 -07:00
Todd C. Miller
cbf41b8b96 The OpenBSD strtonum() uses very short error strings that can't 
be translated usefully.  Convert them to longer strings on error.
Also use the longer strings for atomode() and atoid().
 2013-12-11 13:43:10 -07:00