Commit Graph

8201 Commits

Author SHA1 Message Date
Todd C. Miller
55a34e6941 Avoid inadvertantly defining things like PATH_MAX simply because
the source file doesn't include limits.h.
2015-01-15 17:01:30 -07:00
Todd C. Miller
078ba38067 Update to libtool 2.4.4 + HP-UX patches 2015-01-14 17:00:16 -07:00
Todd C. Miller
acea28b9a5 Document why we need sys/param.h. 2015-01-14 11:01:41 -07:00
Todd C. Miller
532a0e6cc7 Don't need sys/param.h. 2015-01-14 11:00:01 -07:00
Todd C. Miller
19a8a69a92 Don't appear to need sys/param.h for pstat_getproc() on HP-UX even
though the man page lists it.
2015-01-14 10:58:32 -07:00
Todd C. Miller
6bd40c622b Should not need sys/param.h here. 2015-01-14 10:55:42 -07:00
Todd C. Miller
cb09010da5 Use standard CIDR -> netmask conversion and disallow 0-bit CIDRs. 2014-12-31 15:47:33 -07:00
Todd C. Miller
86fbde75b2 Update link to gq LDAP editor, now on sourceforge. 2014-12-24 08:05:22 -07:00
Todd C. Miller
237f3c9dfe Add support for GLOB_LIMIT from OpenBSD (not currently used) and
also a limit on the max recursion depth for glob().
2014-12-16 17:04:13 -07:00
Todd C. Miller
b633e88c12 Quiet compiler sign compare warning. 2014-12-16 10:46:25 -07:00
Todd C. Miller
88c4a9668e fnmatch fix 2014-12-10 14:06:34 -07:00
Todd C. Miller
d0c333969a Remove artificial limit on length of pattern and string. It is
possible to use fnmatch() on things other than paths (such as
arguments) so a limit of PATH_MAX does not make sense.  Fixes a bug
where rules would fail to match if the length of the arguments were
larger than PATH_MAX (usually 1024).
2014-12-10 14:00:12 -07:00
Todd C. Miller
b1dc5c54d8 Remove the extra /sudo in sudo.ws urls 2014-12-04 17:00:38 -07:00
Todd C. Miller
9d3fe082fc Reference bugzilla.sudo.ws 2014-11-27 09:51:06 -07:00
Todd C. Miller
e0d927a98a sync 2014-11-20 13:34:17 -07:00
Todd C. Miller
c287419788 Require that a digest be specified with a real command, not an alias
or pseudo-command.  Found via a crash by afl.
2014-11-19 17:07:24 -07:00
Todd C. Miller
034ad90e16 sync 2014-11-19 15:20:18 -07:00
Todd C. Miller
02b3fa2fdd French translation for sudoers from translationproject.org. 2014-11-19 15:20:11 -07:00
Todd C. Miller
29039859b7 Defer registration of the SIGCHLD handler until just before we exec
the command.  Fixes a problem where pam_gnome_keyring installs its
own SIGCHLD handler and may not restore the original one.  As a
result, we now have to explicitly wait for the askpass helper to
finish.  Bug #657
2014-11-18 14:05:51 -07:00
Todd C. Miller
552dbe5253 Mention sssd support in the sudoers.ldap manual and cross-reference
sssd-sudo(5).
2014-11-17 15:26:12 -07:00
Todd C. Miller
eab8a28abf Reorder an entry. 2014-11-16 07:30:55 -07:00
Todd C. Miller
bc6269e58b Prevent cppcheck from getting confused by our compat definition of
the va_copy macro for pre-C99.
2014-11-15 06:32:39 -07:00
Todd C. Miller
3870fdf622 Fix potential NULL pointer deref found by cppcheck. 2014-11-14 16:31:56 -07:00
Todd C. Miller
0c88ecd3bc Quiet a cppcheck false positive. 2014-11-14 16:31:30 -07:00
Todd C. Miller
cbe917c540 If there are multiple outputs, ap will be re-used so make a copy
and operate on it instead.
2014-11-14 16:30:22 -07:00
Todd C. Miller
1c96c5ec39 Fix typo in hook return value check. 2014-11-14 14:56:29 -07:00
Todd C. Miller
cafd7baa2d Mention visudo use of sudoers plugin args to set default sudoers
file name and owner/mode.
2014-11-14 14:17:01 -07:00
Todd C. Miller
d956785e96 Mention fix for bug #678 2014-11-14 13:11:11 -07:00
Todd C. Miller
b4432df5e2 Sync with translationproject.org 2014-11-10 12:37:58 -07:00
Todd C. Miller
832a4dee6b In set_fqdn() we neeed to set user_runhost/user_srunhost at the
same time we set user_host/user_shost since that is what
hostlist_matches() uses.  Bug #678
2014-11-12 20:33:41 -07:00
Todd C. Miller
ae00eb719e Do not call sudo_warnx() on invalid value from the env hook functions
as the printf() family may call getenv() for locale reasons.
2014-11-11 15:31:16 -07:00
Todd C. Miller
4d04c5644b No need to keep specifying ".Nm foo" since the Nm macro remembers
the argument it was first called with and uses it if none is
specified.  Also fix a few minor formatting errors and
regen bulleted lists in the .man.in files.
2014-11-11 15:29:19 -07:00
Todd C. Miller
fbac05467b Add sudo.conf to SEE ALSO and rename section on sudo.conf 2014-11-11 14:18:07 -07:00
Todd C. Miller
328429832d Mention sudo.conf use for debugging 2014-11-11 14:15:47 -07:00
Todd C. Miller
e71c646c9a regen 2014-11-11 13:56:01 -07:00
Todd C. Miller
bc7cbcb556 Document sudo.conf usage now that visudo will parse the sudoers arguments. 2014-11-11 13:55:40 -07:00
Todd C. Miller
5c13889f26 Use sudoers.so args from sudo.conf to set sudoers_file, sudoers_uid,
sudoers_gid, and sudoers_mode in visudo.
2014-11-10 20:12:47 -07:00
Todd C. Miller
9d4589abd0 Use sudoers_file, sudoers_uid, sudoers_gid, and sudoers_mode
symbols from toke.l instead of the upper case defines.
2014-11-10 15:23:51 -07:00
Todd C. Miller
04d803c79c Use SSP_LDFLAGS when creating shared objects. 2014-11-10 14:58:46 -07:00
Todd C. Miller
d00142f552 We only build .lo (not .o) files for libsudo_util 2014-11-10 14:58:45 -07:00
Todd C. Miller
57b50b4705 sync 2014-11-06 09:25:26 -07:00
Todd C. Miller
21166d4da9 Make sure that SIGCHLD is not treated as a user-generated signal
in which case it could be ignored.  Bug #676
2014-11-04 09:24:41 -07:00
Todd C. Miller
be2de71df4 Update to libtool 2.4.3 + HP-UX patches 2014-10-30 07:09:02 -06:00
Todd C. Miller
2040d4dde5 Use arc4random() for mkstemp/mkdtemp if available. If not, try to
seed from /dev/urandom before falling back to the gettimeofday seed.
2014-10-31 06:57:19 -06:00
Todd C. Miller
ccc210eddb If a system lacks mkdtemp() or mkstemps(), use our own mkdtemp()
and mkstemps().  Previously we only exposed the missing one but
since the guts are the same we might as well use them.
2014-10-29 13:03:39 -06:00
Todd C. Miller
2eed956396 Use a static buffer for sudo_debug_execve2() if possible. 2014-10-31 06:57:17 -06:00
Todd C. Miller
55098ff6ec Mark the putenv(), setenv() and unsetenv() symbols as global, not
hidden.  Fixes a mismatch where a plugin (or its loaded dso) would
call setenv() to set a variables but be unable to find it later
with getenv().
2014-10-29 10:54:40 -06:00
Todd C. Miller
bbf3c08320 Fix install-nls target from builddir. 2014-10-28 14:45:39 -06:00
Todd C. Miller
53d4a02a45 Fix dependency on sudo.pp, it needs to relative to srcdir. 2014-10-28 14:14:22 -06:00
Todd C. Miller
ef6dfb3ced Adapt to new debug subsystem registration. 2014-10-28 07:36:08 -06:00