isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,709 Commits 1 Branch 0 Tags
6c28af15568b9dfdde8ed07366e3407e91bcc92d
Commit Graph

159 Commits

Author SHA1 Message Date
Todd C. Miller
8a76ddfef5 askpass moved from sudoers to sudo.conf in sudo 1.8.0 2011-04-27 11:48:46 -04:00
Todd C. Miller
38f7dd359b Remove obsolete warning about runas_default and ordering. 
Move syslog facility and priority lists into the section where
the relevant options are described.
 2011-04-27 11:42:46 -04:00
Todd C. Miller
e55bbb1833 Fix typo; from Petr Uzel 2011-04-05 09:13:18 -04:00
Todd C. Miller
51c8123868 Document parser changes. 2011-03-29 17:57:46 -04:00
Todd C. Miller
44c763c728 If there is an existing sudoers file, only install if it passes a 
syntax check.
 2011-03-29 15:20:32 -04:00
Todd C. Miller
335abe3a10 Document %#gid, and %:#nonunix_gid syntax. 2011-03-29 12:53:37 -04:00
Todd C. Miller
97b8dc7fe1 Fix placement of equal size ('=') in user specification summary. 2011-03-22 09:40:24 -04:00
Todd C. Miller
33516ed826 user_shell -> run_shell to avoid confusion with the user's SHELL variable. 2011-03-18 10:23:35 -04:00
Todd C. Miller
e8776da730 Add support for sudoers_search_filter setting in ldap.conf. This 
can be used to restrict the set of records returned by the LDAP
query.
 2011-03-18 09:38:42 -04:00
Todd C. Miller
c91d2a08a2 The '@' character does not normally need to be quoted. 2011-03-17 16:45:09 -04:00
Todd C. Miller
53ddb01f39 Document major changes in 1.8.1 and add upgrade notes. 2011-03-16 16:06:16 -04:00
Todd C. Miller
aa29582acc Warn about the dangers of log_input and mention iolog_file and iolog_dir 
in the log_input and log_output descriptions.
 2011-03-16 13:26:27 -04:00
Todd C. Miller
639903f132 It seems that h comes after i 2011-03-16 12:07:03 -04:00
Todd C. Miller
09f9796ea3 Move log_input and log_output to their proper, sorted, location. 
Document set_utmp and utmp_runas.
 2011-03-16 12:05:32 -04:00
Todd C. Miller
3506f01077 Add support for controlling whether utmp is updated and which user is 
listed in the entry.
 2011-03-15 15:53:49 -04:00
Todd C. Miller
53da5e8cdf Update copyright years. 2011-03-11 15:34:35 -05:00
Todd C. Miller
cde2cb00f0 Add "user_shell" boolean as a way to indicate to the plugin that 
the -s flag was given.
 2011-03-11 15:02:13 -05:00
Todd C. Miller
9660f08e32 Document noexec in sample.sudo.conf and add back noexec_file section 
in sudoers with a note that it is deprecated.
 2011-03-11 11:34:11 -05:00
Todd C. Miller
dc8012265f Document "Path noexec ..." in sudo.conf. 
No longer document noexec_file in sudoers, it will be removed in a future
release.
 2011-03-10 16:06:16 -05:00
Todd C. Miller
32cfe08a12 Make two login_class entris consistent. 2011-03-08 15:38:06 -05:00
Todd C. Miller
6968367cb1 sudoreplay can now find IDs other than %{seq} and display the session. 2011-03-05 15:34:30 -05:00
Todd C. Miller
74c4252c1b 1.8.0rc1 2011-02-21 13:36:24 -05:00
Todd C. Miller
59515a4a6d add help text to sudo, visudo and sudoreplay for the -h option 2011-02-21 11:33:36 -05:00
Todd C. Miller
315e54fd61 mention group_plugin when describing nonunix_group 2011-02-19 18:40:00 -05:00
Todd C. Miller
0122e3be28 Add missing period at end of sentence 2011-02-19 18:39:27 -05:00
Todd C. Miller
435e44808d add localstatedir; closes bug 471 2011-02-19 08:29:21 -05:00
Todd C. Miller
6983d782c1 regen 2011-02-16 12:22:38 -05:00
Todd C. Miller
b0d0e163c3 Document that a sudo.conf file with no Pligin lines uses the default 
sudoers plugins.
 2011-02-16 12:22:31 -05:00
Todd C. Miller
7f277d1558 Bump version to 1.8.0b4 2011-02-03 14:26:58 -05:00
Todd C. Miller
521ee9c539 Attempt to clarify how users and groups interact in Runas_Specs 2011-02-03 13:20:43 -05:00
Todd C. Miller
6fd9d853a8 Be clear about what versions of sudo support new LDAP attributes. 
Fix up some formatting of attribute names.  Minor other tweaks.
 2011-02-01 14:31:04 -05:00
Todd C. Miller
d9c72b224a Mention LDAP attribute compatibility status. 2011-01-30 15:43:24 -05:00
Todd C. Miller
ed8e30cf6e Add --disable-env-reset configure option. 2011-01-28 16:52:25 -05:00
Todd C. Miller
180b31764e Document that sudoers_locale also affects logging and email. 2011-01-28 16:15:57 -05:00
Todd C. Miller
f7f8b6867e Update copyright year to 2011 2011-01-20 16:46:56 -05:00
Todd C. Miller
0726c8fe24 fix typo 2011-01-13 13:10:15 -05:00
Todd C. Miller
12895f77aa Add sudoNotBefore and sudoNotAfter attributes as optional attributes 
to the sudoRole object class.  From Andreas Mueller
 2011-01-12 09:25:24 -05:00
Todd C. Miller
49409b7c5d Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP 
LDAP_OPT_TIMEOUT.  There is no corresponding option for mozilla-derived
LDAP SDKs but we can pass the timeout parameter to ldap_search_ext_s()
or ldap_search_st() when possible.
 2011-01-10 10:33:22 -05:00
Todd C. Miller
a628fee981 regen 2011-01-10 09:28:53 -05:00
Todd C. Miller
823e812723 Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility 
with OpenLDAP ldap.conf files.
 2011-01-10 09:27:58 -05:00
Todd C. Miller
1defd7b456 Add regression tests for iolog_path() 2011-01-06 11:05:28 -05:00
Todd C. Miller
f8de3f6327 Add support for "make Makefile" to regenerate Makefile from Makefile.in 2011-01-06 10:44:28 -05:00
Todd C. Miller
33201c04e8 Correct the default sudo.conf example 2011-01-03 13:09:03 -05:00
Todd C. Miller
25036d7a75 Pass a single I/O log file name in command_details instead of 
separate dir + file parameters.
 2010-12-30 17:09:01 -05:00
Todd C. Miller
3f6f61f852 Document iolog_compress in command_info 2010-12-28 12:25:06 -05:00
Todd C. Miller
21dd6af796 Document use of mkdtemp() for iolog path teplates 2010-12-27 15:43:01 -05:00
Todd C. Miller
e3cd512bfa regen 2010-12-27 14:45:13 -05:00
Todd C. Miller
05807cf5e1 Document iolog_file and supported escape sequences for sudoers. 
Clarify that iolog_file can contain directories.
 2010-12-27 14:43:50 -05:00
Todd C. Miller
5d59c10b95 Give the policy module fine-grained control over what the I/O plugin 
logs.
 2010-12-21 17:43:18 -05:00
Todd C. Miller
ad41fb497e Clarify umask option description. From Reuben Thomas. 2010-12-21 10:23:45 -05:00