8 Commits

Author	SHA1	Message	Date
Todd C. Miller	521ef37aea	Push non-interactive mode checking down into the auth methods. ... For "sudo -n" we only want to reject a command if user input is actually required. In the case of PAM at least, we may not need to interact with the user. Bug #956, GitHub issue #83	2022-01-04 18:57:36 -07:00
Todd C. Miller	ec3fdd3aa8	Add a force flag to sudo_auth_cleanup() to force immediate cleanup. ... This is used for PAM authentication to make sure pam_end() is called via sudo_auth_cleanup() when the user authenticates successfully but sudoers denies the command. Debian bug #669687	2020-04-01 14:41:38 -06:00
Todd C. Miller	594c2d4efd	Add an approval function to the sudo auth API which is run after ... the user's password has been verified. The approval function is run even if no password is required. This is currently only used for PAM (use pam_acct_mgmt) and BSD auth (auth_approval).	2018-01-16 10:27:58 -07:00
Todd C. Miller	4e3e5077e1	Remove unused FLAG_USER auth flag. We have no auth methods that ... require that authentication be run as the invoking user.	2014-02-27 15:51:40 -07:00
Todd C. Miller	2c3a4e0354	The NO_EXIT flag was removed a while ago.	2013-04-18 14:13:05 -04:00
Todd C. Miller	bceb5df158	Modify the authentication API such that the init and cleanup functions ... are always called, regardless of whether or not we are going to verify a password. This is needed for proper PAM session support.	2011-09-27 13:18:46 -04:00
Todd C. Miller	b2ed46652b	Clean up the sudoers auth API a bit and update the docs.	2010-05-27 14:53:11 -04:00
Todd C. Miller	e90fa482f9	Rework source layout in preparation for modular sudo.	2010-02-20 09:14:01 -05:00