isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,909 Commits 1 Branch 0 Tags
ab75dd2e306a92e491bc4fae9876c84d311a166c
Commit Graph

5909 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
0cd4648093 Only print individual check status when there is a failure. 2011-08-29 14:53:47 -04:00
Todd C. Miller
f478f84066 Add calls to setprogname() for test programs. 2011-08-29 14:51:12 -04:00
Todd C. Miller
3e0e0fc385 Add -Wall and -Werror after all tests so they don't cause failures. 2011-08-29 14:49:10 -04:00
Todd C. Miller
7945166bb5 Actually run check_addr in the check target 2011-08-29 14:48:09 -04:00
Todd C. Miller
1a259de176 Split out address matching into its own file and add regression 
tests for it.
 2011-08-29 14:10:18 -04:00
Todd C. Miller
a47f005437 When matching an address with a netmask in sudoers, AND the mask 
and addr before checking against the local addresses.
 2011-08-27 12:09:30 -04:00
Todd C. Miller
526a61004d Fix netmask matching. 2011-08-26 16:01:39 -04:00
Todd C. Miller
e3cda80202 Don't assume all editors support the +linenumber command line argument, 
use a whitelist of known good editors.
 2011-08-26 14:03:49 -04:00
Todd C. Miller
d81c14005f Silence compiler warnings on Solaris with gcc 3.4.3 2011-08-23 16:42:18 -04:00
Todd C. Miller
335901388e Fix building on RHEL 3 2011-08-23 15:24:55 -04:00
Todd C. Miller
e4956d22e1 Add --enable-werror configure option. 2011-08-23 10:15:28 -04:00
Todd C. Miller
da95b0ea58 setgroups() proto lives in grp.h on RHEL4, perhaps others. 2011-08-23 10:14:52 -04:00
Todd C. Miller
64a57a2ee9 Use PAM by default on AIX 6 and higher. 2011-08-23 09:50:40 -04:00
Todd C. Miller
8fb53f5e4b Add new Esperanto translation from translationproject.org 2011-08-22 08:26:50 -04:00
Todd C. Miller
5a13dd2b76 Quiet an innocuous valgrind warning. 2011-08-19 09:32:25 -04:00
Todd C. Miller
bfc84b01f3 Fix expansion of strftime() escapes in log_dir and add a regress test 
that exhibited the problem.
 2011-08-18 13:41:40 -04:00
Todd C. Miller
367b659006 Fix "make check" return value. 2011-08-18 12:09:34 -04:00
Todd C. Miller
a6224a7342 Regen pot files 2011-08-17 11:40:14 -04:00
Todd C. Miller
27257d9cf5 Fix logic inversion in pot file up to date check. 2011-08-17 11:38:53 -04:00
Todd C. Miller
366cb19273 Add caching for gettext() checks. 2011-08-15 13:41:58 -04:00
Todd C. Miller
8f8738ff37 Better handling of libintl header and library mismatch. 2011-08-15 10:21:13 -04:00
Todd C. Miller
d56a17165a Also check sudoers gid if sudoers is group writable. 2011-08-13 18:34:37 -04:00
Todd C. Miller
6b9d80b106 If dlopen is present but libtool doesn't find it, error out since it 
probably means that libtool doesn't support the system.
 2011-08-12 13:00:55 -04:00
Todd C. Miller
13591340bb configure args on the command line should override builtin defaults. 
Disable NLS for non-Linux/Solaris unless explicitly enabled.
 2011-08-12 11:04:25 -04:00
Todd C. Miller
7f4a0d095e Fix loop that calls authenticate(). 
If there was an error message from authenticate(), display it.
 2011-08-12 11:02:53 -04:00
Todd C. Miller
027cd522c3 Update to autoconf 2.68 and libtool 2.4 2011-08-11 14:32:23 -04:00
Todd C. Miller
c8fb440848 Update to autoconf 2.68 and libtool 2.4 2011-08-11 14:25:01 -04:00
Todd C. Miller
6b1e752524 Fix typo; OPT should be OTP 2011-08-11 13:25:08 -04:00
Todd C. Miller
179b34d9eb Rename libsudoers convenience library to libparsesudoers to avoid 
libtool confusion.
 2011-08-11 13:14:44 -04:00
Todd C. Miller
1adef5ec36 Add Danish sudoers translation from translationproject.org 2011-08-10 09:50:52 -04:00
Todd C. Miller
6099e1bc42 Add dedicated callback function for runas_default sudoers setting 
that only sets runas_pw if no runas user or group was specified by
the user.
 2011-08-10 09:02:37 -04:00
Todd C. Miller
aaaa5d05d9 Update Finish, Polish, Russian and Ukrainian translations from 
translationproject.org.
 2011-08-09 14:57:57 -04:00
Todd C. Miller
01ae3d4771 Go back to using a callback for runas_default to keep runas_pw in 
sync.  This is needed to make per-entry runas_default settings work
with LDAP-based sudoers.  Instead of declaring it a callback in
def_data.in, sudo and testsudoers poke sudo_defs_table[] which is
a bit naughty, but avoids requiring stub functions in visudo and
the tests.
 2011-08-09 14:54:42 -04:00
Todd C. Miller
53656020f7 Add check for out of date message catalogs when doing "make dist". 2011-08-05 12:33:40 -04:00
Todd C. Miller
f922678360 regen 2011-08-02 16:14:11 -04:00
Todd C. Miller
00b846cd1f Make sure compiler supports static-libgcc before using it. 2011-08-02 16:13:18 -04:00
Todd C. Miller
fecb397343 Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc 2011-08-01 19:02:16 -04:00
Todd C. Miller
eb09c303a1 Add new Russian sudo translation from translationproject.org 
and rebuild the other translation files.
 2011-07-30 09:35:56 -04:00
Todd C. Miller
4f726ddcd5 Update Finish and Polish translations from translationproject.org 2011-07-29 16:40:29 -04:00
Todd C. Miller
8255ed69b9 Go back to escaping the command args for "sudo -i" and "sudo -s" 
before calling the plugin.  Otherwise, spaces in the command args
are not treated properly.  The sudoers plugin will unescape non-spaces
to make matching easier.
 2011-07-29 10:10:40 -04:00
Todd C. Miller
4f9a93f658 Fix some potential problems found by the clang static analyzer, 
none serious.
 2011-07-28 10:59:37 -04:00
Todd C. Miller
6365c779c0 Updated Ukranian and Chinese (simplified) po files from 
translationproject.org
 2011-07-28 09:08:50 -04:00
Todd C. Miller
bd6ce7ee3a Updated Polish translation from translationproject.org 2011-07-27 14:47:31 -04:00
Todd C. Miller
3606fc4419 Rebuild pot files 2011-07-27 14:23:45 -04:00
Todd C. Miller
35d26ae34f Don't try to audit failure if the runas user does not exist. We don't 
have the user's command at this point so there is nothing to audit.
Add a NULL check in audit_success() and audit_failure() just to be
on the safe side.
 2011-07-27 12:11:33 -04:00
Todd C. Miller
8ebf7a95cf Add -g to CFLAG for PIE builds. 2011-07-27 12:00:24 -04:00
Todd C. Miller
80138c88ba Remove fallback to per-group lookup when matching groups in sudoers. 
The sudo front-end will now use getgrouplist() to get the user's
list of groups if getgroups() fails or returns zero groups so we
always have a list of the user's groups.  For systems with
mbr_check_membership() which support more that NGROUPS_MAX groups
(Mac OS X), skip the call to getgroups() and use getgrouplist() so
we get all the groups.
 2011-07-25 09:17:18 -04:00
Todd C. Miller
cb63967bfd Fix setgroups() fallback code on EINVAL. 2011-07-22 15:33:33 -04:00
Todd C. Miller
1f9fb7609f Fix two PERM_INITIAL cases that were still using user_gids. 2011-07-22 15:13:35 -04:00
Todd C. Miller
043b976c69 Add Polish sudo message catalog 2011-07-22 12:56:33 -04:00