Commit Graph

188 Commits

Author SHA1 Message Date
Todd C. Miller
74c2dc7806 Add execve failure in pty bug fix. 2016-06-09 11:00:02 -06:00
Todd C. Miller
bd8e3b5fb9 update for 1.8.17 final 2016-06-07 13:45:37 -06:00
Todd C. Miller
63dbb74250 Korean translation for sudo and sudoers from translationproject.org. 2016-05-25 08:41:27 -06:00
Todd C. Miller
5e1084c08a Ignore PAM_SESSION_ERR from pam_open_session() since this can
apparently happen on systems using Solaris-derived PAM.  Other
errors from pam_open_session() are treated as fatal.  This avoids
the "policy plugin failed session initialization" error message
seen on some systems.
2016-05-25 08:33:57 -06:00
Todd C. Miller
356e74e1db Don't read from stdin when flushing final buffers in blocking mode.
Reading from the pipe can block too if the other end is not closed.
2016-05-24 11:16:44 -06:00
Todd C. Miller
e3514817df Mention visudo -x change. 2016-05-23 11:32:01 -06:00
Todd C. Miller
ccece8c01d Better description of the I/O logging pipe issue. 2016-05-20 11:00:18 -06:00
Todd C. Miller
fb247aa76a I/O logging bug fix 2016-05-17 08:19:21 -06:00
Todd C. Miller
67eb6dad0f SELinux fixes in 1.8.17. 2016-05-14 19:40:12 -06:00
Todd C. Miller
3b4f2bbfff Update for 1.8.17 2016-05-06 09:44:52 -06:00
Todd C. Miller
48dff84081 Work around an ambiguity in the PAM spec with respect to the conversation
function.  It is not clear whether the "struct pam_message **msg" is an
array of pointers or a pointer to an array.  Linux-PAM and OpenPAM use
an array of pointers while Solaris/HP-UX/AIX uses a pointer to an array.
Bug #726.
2016-03-09 09:39:46 -07:00
Todd C. Miller
f5b8ad480e Bug #738 2016-02-27 16:56:56 -07:00
Todd C. Miller
d1a3da4175 sync 2016-02-26 10:58:52 -07:00
Todd C. Miller
1d796d629f update for 1.8.16 2016-02-22 17:03:42 -07:00
Todd C. Miller
647bfa4a9d Add 1.8.16 changes 2016-01-19 15:21:15 -07:00
Todd C. Miller
7fd8a7df3c Mention ssp configure fix. 2015-10-31 09:10:58 -06:00
Todd C. Miller
5d66b840d8 When creating a new file, sudoedit will now check that the file's
parent directory exists before running the editor.
2015-10-24 06:20:20 -06:00
Todd C. Miller
7761af6d7e Add always_query_group_plugin 2015-10-24 05:43:07 -06:00
Todd C. Miller
c50cead833 Add directory writability checks for sudoedit. 2015-10-23 14:04:35 -06:00
Todd C. Miller
54a10726c0 Latest. 2015-10-06 15:23:22 -06:00
Todd C. Miller
588460405f For env_reset, SHELL should be set based on the target user, not
the invoking user unless preserved via env_keep.
2015-10-06 10:25:43 -06:00
Todd C. Miller
507150d8f2 Hungarian and Slovak translations 2015-10-05 06:06:52 -06:00
Todd C. Miller
99322bcf31 Bug #722 2015-09-26 11:02:24 -06:00
Todd C. Miller
29a3fcd06c If some, but not all, of the LOGNAME, USER or USERNAME environment
variables have been preserved from the invoking user's environment,
sudo will now use the preserved value to set the remaining variables
instead of using the runas user.  This ensures that if, for example,
only LOGNAME is present in the env_keep list, that sudo will not
set USER and USERNAME to the runas user.
2015-09-25 11:15:22 -06:00
Todd C. Miller
43fd191cfc Bug #719 2015-09-15 13:36:34 -06:00
Todd C. Miller
b12500993d Mention visudo bug in 1.8.14 2015-09-15 09:50:35 -06:00
Todd C. Miller
69d51b7590 Bug #713 2015-09-09 10:52:23 -06:00
Todd C. Miller
3fd97f6bad Update with latest changes. 2015-09-09 06:23:29 -06:00
Todd C. Miller
333faa20e2 When parsing def_editor, break out of the loop when we find the
first valid editor.  Bug #714
2015-08-21 11:25:02 -06:00
Todd C. Miller
079167d2c4 Sudo 1.8.15 2015-08-06 13:15:00 -06:00
Todd C. Miller
620f8a33eb Sudo 1.8.14p3 2015-07-22 06:09:14 -06:00
Todd C. Miller
ef47c692c3 Sudo 1.8.14p2 2015-07-20 20:27:40 -06:00
Todd C. Miller
c0b8e71488 Sudo 1.8.14p1 2015-07-17 15:28:26 -06:00
Todd C. Miller
2f00f170fc Mention /proc/stat btime fix. 2015-07-09 10:45:33 -06:00
Todd C. Miller
4620bc31c8 Mention double-quoted sudoOption value support. 2015-07-07 11:28:49 -06:00
Todd C. Miller
7583e8d760 Bug #702 is the AIX timespec issue. 2015-07-02 14:06:16 -06:00
Todd C. Miller
a89dd2f469 Final changes in 1.8.14 2015-06-30 14:29:39 -06:00
Todd C. Miller
5c03b6b455 NLS now works on Mac OS X properly. 2015-05-15 15:50:00 -06:00
Todd C. Miller
0d418df037 The getenv() hook still doesn't work on Mac OS X. 2015-05-13 11:06:50 -06:00
Todd C. Miller
051bf0d55c Sudo 1.8.14 2015-05-11 16:51:27 -06:00
Todd C. Miller
cfeda97b0a Update for 1.8.13 final. 2015-03-18 11:04:43 -06:00
Todd C. Miller
480d267116 Update. 2015-03-02 15:38:47 -07:00
Todd C. Miller
e11f32fd42 On AIX use the value of auth_type in /etc/security/login.cfg to
determine whether to use LAM or PAM unless the user specified the
--with-pam or --with-aixauth configure flags.
2015-02-23 11:12:43 -07:00
Todd C. Miller
93b52daaba Sudo 1.8.13 2015-02-20 06:29:41 -07:00
Todd C. Miller
9206ba54c5 Russian translation for sudoers from translationproject.org. 2015-02-07 07:47:39 -07:00
Todd C. Miller
c3c28773f5 Sanity check the TZ environment variable by special casing it in
env_check.  The --with-tzdir configure option can be used to
specify the zoneinfo directory if configure doesn't find it.
2015-02-06 11:01:05 -07:00
Todd C. Miller
de11816198 Mention crash fixes. 2015-02-06 10:56:52 -07:00
Todd C. Miller
ed4ffa6265 Don't send mail about pseudo-command failure unless it is an
authentication failure.
2015-02-02 15:01:06 -07:00
Todd C. Miller
4dd2a3c6b8 Add support for querying netgroups directly via LDAP since there
is no other way to look up all the netgroups for a user (unlike
regular groups).  This introduces netgroup_base and netgroup_search_filter
options to ldap.conf.  Based on a diff from Steven Soulen.
2015-01-29 14:08:30 -07:00
Todd C. Miller
88c4a9668e fnmatch fix 2014-12-10 14:06:34 -07:00