Commit Graph

3095 Commits

Author SHA1 Message Date
Todd C. Miller
8e421c95b8 update copyright year 2004-01-05 17:15:32 +00:00
Todd C. Miller
626e2cd209 Add _PATH_SUDO_NOEXEC and corresponding --with-noexec configure option.
The default value of noexec_file is set to this.
2004-01-05 03:58:39 +00:00
Todd C. Miller
7536a781f0 Add support for preloading a shared object containing a dummy execve()
function that just sets error and returns -1.  This adds a
"noexec_file" option to load the filename as well as a "noexec" flag
to enable it unconditionally.  There is also a NOEXEC tag that can
be attached to specific commands and an EXEC tag to disable it.
2004-01-05 02:48:09 +00:00
Todd C. Miller
4d5ce6761f add missing newline to usage statement 2004-01-05 02:40:02 +00:00
Todd C. Miller
caf389c2fa Rename EXEC macro -> EXECV 2004-01-05 01:39:57 +00:00
Todd C. Miller
e987e1152b Don't truncate usernames to 8 characters in the log message. 2004-01-05 01:16:24 +00:00
Todd C. Miller
9eba370a09 Update copyright year 2004-01-05 01:13:50 +00:00
Todd C. Miller
b289f73870 Add a new option, lecture_file, that can be used to point to a custom
sudo lecture.
2004-01-05 01:12:22 +00:00
Todd C. Miller
3944237480 Add a zero_bytes() function to do the equivalent of bzero in such a
way that will heopfully not be optimized away by sneaky compilers.
2003-12-31 22:46:10 +00:00
Todd C. Miller
de5e16b22f Add a zero_bytes() function to do the equivalent of bzero in such a
way that will heopfully not be optimized away by sneaky compilers.
2003-12-31 22:46:08 +00:00
Todd C. Miller
b2550741c1 Add a zero_bytes() function to do the equivalent of bzero in such a
way that will heopfully not be optimized away by sneaky compilers.
2003-12-31 22:46:08 +00:00
Todd C. Miller
617ac8a3c3 Use #ifdef __STDC__, not #if __STDC__. 2003-12-31 18:35:02 +00:00
Todd C. Miller
1cb5703273 Always put at least one space between the def_* macro name and its
definition.
2003-12-30 22:41:52 +00:00
Todd C. Miller
ffbc43afb3 Adjust code for --without-lecture to match new values. 2003-12-30 22:34:28 +00:00
Todd C. Miller
e34adcc2c3 regen after pasto fix 2003-12-30 22:33:50 +00:00
Todd C. Miller
3062ac6657 Document that "lecture" has changed from a flag to a tuple. 2003-12-30 22:31:56 +00:00
Todd C. Miller
02f37dc2da Add support for tuples in def_data.in; these are implemented as an
enum type.  Currently there is only a single tuple enum but in the
future we may have one tuple enum per T_TUPLE entry in def_data.in.
Currently listpw, verifypw and lecture are tuples.  This avoids the
need to have two entries (one ival, one str) for pwflags and syslog
values.

lecture is now a tuple with the following values: never, once, always

We no longer use both an int and string entry for syslog facilities
and priorities.  Instead, there are logfac2str() and logpri2str()
functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
Todd C. Miller
6ad252765b Create def_* macros for each defaults value so we no longer need
the def_{flag,ival,str,list,mode} macros (which have been removed).
This is a step toward more flexible data types in def_data.in.
2003-12-30 22:20:21 +00:00
Todd C. Miller
45fe0a6cc6 checkpoint 2003-12-30 20:55:17 +00:00
Todd C. Miller
7f773be1fe If we are in -k/-K mode, just spew to stderr. It is not unusual for
users to place "sudo -k" in a .logout file which can cause sudo to
be run during reboot after the YP/NIS/NIS+/LDAP/etc daemon has died.
Previously, this would result in useless mail and logging.
2003-12-23 02:18:13 +00:00
Todd C. Miller
ccef4e3340 fix pasto in VISUAL description 2003-12-16 18:51:45 +00:00
Todd C. Miller
0ce9403a4f regen 2003-12-10 03:09:00 +00:00
Todd C. Miller
cb081ff5ed checkpoint 2003-12-10 03:08:16 +00:00
Todd C. Miller
53a38fc560 Some OSes (like Solaris) allow export w/ nosuid too 2003-12-10 03:02:09 +00:00
Todd C. Miller
769b205c00 We don't use FD_ZERO anymore so just define FD_SET (if not already there). 2003-08-12 20:45:22 +00:00
Todd C. Miller
d619fd43a1 Fix a core dump on Solaris by preserving the pam_handle_t we used
during authentication for pam_prep_user().  If we didn't authenticate
(ie: ticket still valid), we call pam_init() from pam_prep_user().
This is something of a hack; it may be better to change the auth
API and add an auth_final() function that acts like pam_prep_user().
2003-06-29 01:31:55 +00:00
Todd C. Miller
8cd9f4f1ec Add explicit declaration of printerr variable in function header
(was defaulting to int which is OK but oh so K&R :-).  From Theo.
2003-06-21 16:50:56 +00:00
Todd C. Miller
e52feabd48 s/HAVE_STOW/USE_STOW/ 2003-06-09 23:00:20 +00:00
Todd C. Miller
27ad285a03 Also exit waitpid() loop when pid == 0. Fixes a problem where the sudo
process would spin eating up CPU until sendmail finished when it has
to send mail.
2003-06-09 20:07:56 +00:00
Todd C. Miller
7e53863e55 Remove advertising clause, UCB has disavowed it 2003-05-30 20:22:31 +00:00
Todd C. Miller
bdb69602e2 Remove advertising clause, UCB has disavowed it 2003-05-30 20:22:31 +00:00
Todd C. Miller
40b63be2fc Don't assume that getgrnam() calls don't modify contents of
struct passwd returned by getpwnam().  On FreeBSD w/ NIS this
can happen.  Based on a patch from Kirk Webb.
2003-05-22 01:53:01 +00:00
Todd C. Miller
61e7453f8d missing ;; 2003-05-06 15:25:36 +00:00
Todd C. Miller
8dc823861f darwin has a broken setreuid() in at least some versions 2003-05-06 04:53:21 +00:00
Todd C. Miller
684f62dd0f Fix an off by one error when reallocating the environment; Kevin Pye 2003-05-06 04:31:24 +00:00
Todd C. Miller
c917da1ccc Fix User_Spec definition; SEKINE Tatsuo 2003-04-30 18:04:58 +00:00
Todd C. Miller
04b4026624 More info on the early days from Coggs. 2003-04-28 23:30:32 +00:00
Todd C. Miller
c03ffb1972 remove errant semicolon that prevented compilation under heimdal 2003-04-21 18:47:05 +00:00
Todd C. Miller
4e74e8c530 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
58db015778 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
f13528b0b1 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
69ac0e56c2 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
58596112cc add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
a76a79f6d7 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
505b424a56 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
8b45d6459c add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
94567681a7 add DARPA credit on affected files 2003-04-16 00:42:10 +00:00
Todd C. Miller
c6c8c99515 add DARPA credit on affected files 2003-04-16 00:42:09 +00:00
Todd C. Miller
34479303ad add DARPA credit on affected files 2003-04-16 00:42:09 +00:00
Todd C. Miller
492367bd62 add DARPA credit on affected files 2003-04-16 00:42:09 +00:00