Todd C. Miller
cf76450aef
Add some more square backets to make autoconf 2.57 happy
2003-01-20 20:57:51 +00:00
Todd C. Miller
fe79cba0b3
Updates from autoconf-2.57
2003-01-20 19:39:04 +00:00
Todd C. Miller
e73dd504b3
Updates from autoconf-2.57
2003-01-20 19:39:04 +00:00
Todd C. Miller
270e6cab72
regen
2003-01-17 23:10:05 +00:00
Todd C. Miller
26d9f4856f
regen
2003-01-17 23:10:05 +00:00
Todd C. Miller
a8153f4d5d
Add support for Defaults>RunasUser
2003-01-17 23:09:45 +00:00
Todd C. Miller
6e118c64b5
fclose() yyin after each yyparse() is done and use fopen() instead of
...
using freopen().
2003-01-07 00:10:04 +00:00
Todd C. Miller
8b3c38d20c
Better fix for sudoers files w/o a newline before EOF. It looks
...
like the issue is that yyrestart() does not reset the start condition
to INITIAL which is an issue since we parse sudoers multiple times.
2003-01-07 00:02:33 +00:00
Todd C. Miller
cce84a1811
Work around what appears to be a flex bug when dealing with files
...
that lack a final newline before EOF. This adds a rule to match
EOF in the non-initial states which resets the state to INITIAL and
throws an error.
2003-01-06 23:47:04 +00:00
Todd C. Miller
35cf881d76
o The parser needs sudoers to end with a newline but some editors (emacs) may
...
not add one. Check for a missing newline at EOF and add one if needed.
o Set quiet flag during initial sudoers parse (to get options)
o Move yyrestart() call and always use freopen() to open yyin after
initial sudoers parse.
2003-01-06 20:06:12 +00:00
Todd C. Miller
e27e963f2b
Fix pasto/thinko in setresgid()/setregid() usage.
...
Want to set effective gid, not real gid, when reading sudoers.
2002-12-15 16:24:24 +00:00
Todd C. Miller
1996179bf2
don't compile set_perms_posix if we have setreuid or setresuid
2002-12-15 16:08:32 +00:00
Todd C. Miller
3bfbd4b1e3
document new prompt escapes
2002-12-14 19:21:27 +00:00
Todd C. Miller
0b0f8d6d32
Add %U and %H escapes and redo prompt rewriting. "%%" now gets collapsed
...
to "%" as was originally intended. This also gets rid of lastchar (does
lookahead instead of lookback) which should simplify the logic slightly.
2002-12-14 19:15:30 +00:00
Todd C. Miller
4f9ed308f0
Write the prompt *after* turning off echo to avoid some password characters
...
being echoed on heavily-loaded machines with fast typists.
2002-12-13 18:20:34 +00:00
Todd C. Miller
412151ce7a
Add support for mipseb; wiz@danbala.tuwien.ac.at
2002-12-13 18:09:04 +00:00
Todd C. Miller
c8fa231120
Fix IRIX fallout from name changes in man dir/sect Makefile variables.
...
Patch from erici AT motown DOT cc DOT utexas DOT edu
2002-12-13 17:48:11 +00:00
Todd C. Miller
b49046433a
Keep a local copy of tgetpass_flags so we don't add in TGP_ECHO to
...
the global copy. Problem noted by Peter Pentchev.
2002-12-13 16:33:26 +00:00
Todd C. Miller
d26b608279
regen
2002-11-28 23:43:35 +00:00
Todd C. Miller
5bf742d282
Add missing yyerror() calls; YYERROR does not seem to call this for us.
2002-11-28 23:43:22 +00:00
Todd C. Miller
897b551372
fix typo in comment; Pedro Bastos
2002-11-26 17:09:59 +00:00
Todd C. Miller
f7e9532012
document --disable-setresuid
2002-11-22 19:41:31 +00:00
Todd C. Miller
abb4e1ad35
Sprinkle some volatile qualifiers to prevent over-enthusiastic
...
optimizers from removing memset() calls.
2002-11-22 19:41:13 +00:00
Todd C. Miller
fd140ff5da
minor sign fixes pointed out by gcc -Wsign-compare
2002-11-22 19:11:47 +00:00
Todd C. Miller
b152da4cdb
Revamp set_perms. We now use a version based on setresuid() or setreuid()
...
when possible since that allows us to support the stay_setuid option and
we always know exactly what the semantics will be (various Linux kernels
have broken POSIX saved uid support).
2002-11-22 19:09:49 +00:00
Todd C. Miller
2de61320b3
regen from configure.in
2002-11-22 19:08:10 +00:00
Todd C. Miller
736660571d
Add checks for setresuid() and a way to disable using it
2002-11-22 19:07:04 +00:00
Todd C. Miller
351fcc1386
No long need to emulate set*[ug]id() via setres[ug]id() or setre[ug]id().
...
The new set_perms stuff only uses things it knows are there.
2002-11-22 19:05:02 +00:00
Todd C. Miller
faabf3bac7
Before exec, restore state of signal handlers to be the same as
...
when we were initialy invoked instead of just reseting to SIG_DFL.
Fixes a problem when using sudo with nohup. Based on a patch from
Paul Markham.
2002-11-22 18:33:47 +00:00
Todd C. Miller
4f2d87e28c
o timestamp_uid should be uid_t, not int
...
o clarify error message when sudo is run by root and no_root_sudo is set
2002-11-22 18:23:24 +00:00
Todd C. Miller
06cd79be8e
update ftp link for bison
2002-09-19 21:27:59 +00:00
Todd C. Miller
d497949e68
Error out if setusercontext() fails and the runas user is not root.
2002-07-20 12:30:45 +00:00
Todd C. Miller
3437e96a38
Fix rcsid
2002-05-20 20:51:23 +00:00
Todd C. Miller
9c2e0aedab
Fix SecurID API test
2002-05-20 20:50:41 +00:00
Todd C. Miller
f3ddf66e07
typo in comment
2002-05-17 17:20:57 +00:00
Todd C. Miller
ef8c99a5f7
securid5 stuff needs pthreads. Just adding -lpthread is suboptimal
...
but I don't see a better way at the moment.
2002-05-17 17:20:09 +00:00
Todd C. Miller
16547b2ef8
SecurID API version 5 support from Michael Stroucken
2002-05-17 17:04:10 +00:00
Todd C. Miller
1039ff788c
Add check for SecurID 5.0 API
2002-05-17 17:02:35 +00:00
Todd C. Miller
09f5d0a46e
We actually do still need config.h to get the 'const' definition for K&R C.
2002-05-08 20:46:47 +00:00
Todd C. Miller
1091557263
regen with autoconf 2.5.3
2002-05-05 20:43:15 +00:00
Todd C. Miller
80f50dbc43
Don't set sysconfdir to '/etc' if the user has specified a --prefix.
2002-05-05 20:25:10 +00:00
Todd C. Miller
ac8ca82f0e
Some fixes for autoconf 2.53 from Robert Uhl
...
o don't AC_SUBST LIBOBJS
o force a 4th arg for AC_CHECK_HEADER() to workaround a bug
2002-05-05 20:14:59 +00:00
Todd C. Miller
0f60107a1c
No need for dump_badenv() now that dump_defaults() knows how to dump lists.
2002-05-05 19:58:29 +00:00
Todd C. Miller
ed4f749c7b
++version
2002-05-05 01:31:57 +00:00
Todd C. Miller
cd4ec1d2bf
document timestampowner
2002-05-05 00:57:47 +00:00
Todd C. Miller
982218c343
Don't call set_perms() when doing timestamp stuff unless timestamp_uid != 0.
2002-05-05 00:45:51 +00:00
Todd C. Miller
c289159953
g/c second arg to set_perms--it is no longer used
2002-05-05 00:43:38 +00:00
Todd C. Miller
a30951d34c
Add support for non-root timestamp dirs. This allows the timestamp
...
dir to be shared via NFS (though this is not recommended).
2002-05-03 22:48:17 +00:00
Todd C. Miller
15965c2ce7
Add timestampowner, "Owner of the authentication timestamp dir"
2002-05-03 22:47:29 +00:00
Todd C. Miller
3f7d801880
Don't try to pre-compute the size of the new envp, just allocate
...
space up front and realloc as needed. Changes to the new env pointer
must all be made through insert_env() which now keeps track of
spaced used and allocates as needed.
2002-05-02 19:40:25 +00:00