isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,917 Commits 1 Branch 0 Tags
ab803d88b511024515dd67d9d9c8958ea23151b0
Commit Graph

5917 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
bd6ce7ee3a Updated Polish translation from translationproject.org 2011-07-27 14:47:31 -04:00
Todd C. Miller
3606fc4419 Rebuild pot files 2011-07-27 14:23:45 -04:00
Todd C. Miller
35d26ae34f Don't try to audit failure if the runas user does not exist. We don't 
have the user's command at this point so there is nothing to audit.
Add a NULL check in audit_success() and audit_failure() just to be
on the safe side.
 2011-07-27 12:11:33 -04:00
Todd C. Miller
8ebf7a95cf Add -g to CFLAG for PIE builds. 2011-07-27 12:00:24 -04:00
Todd C. Miller
80138c88ba Remove fallback to per-group lookup when matching groups in sudoers. 
The sudo front-end will now use getgrouplist() to get the user's
list of groups if getgroups() fails or returns zero groups so we
always have a list of the user's groups.  For systems with
mbr_check_membership() which support more that NGROUPS_MAX groups
(Mac OS X), skip the call to getgroups() and use getgrouplist() so
we get all the groups.
 2011-07-25 09:17:18 -04:00
Todd C. Miller
cb63967bfd Fix setgroups() fallback code on EINVAL. 2011-07-22 15:33:33 -04:00
Todd C. Miller
1f9fb7609f Fix two PERM_INITIAL cases that were still using user_gids. 2011-07-22 15:13:35 -04:00
Todd C. Miller
043b976c69 Add Polish sudo message catalog 2011-07-22 12:56:33 -04:00
Todd C. Miller
3dde167cf6 user_group is no longer used, remove it 2011-07-22 09:29:49 -04:00
Todd C. Miller
0b91073953 Add Polish translation from translationproject.org 2011-07-20 16:55:57 -04:00
Todd C. Miller
022591f4bf Add a wrapper for setgroups() that trims off extra groups and retries 
if setgroups() fails.  Also add some missing addrefs for PERM_USER
and PERM_FULL_USER.
 2011-07-20 16:54:12 -04:00
Todd C. Miller
b124635b04 Instead of keeping separate groups and gids arrays, create struct 
group_info and use it to store both, along with a count for each.
Cache group info on a per-user basis using getgrouplist() to get
the groups.  We no longer need special to special case the user or
list user for user_in_group() and thus no longer need to reset the
groups list when listing another user.
 2011-07-20 11:58:45 -04:00
Todd C. Miller
906cede7ae Don't rely on NULL since we don't include a header for it. 2011-07-20 10:15:59 -04:00
Todd C. Miller
9e7c364ed4 Fix typo 2011-07-19 12:31:53 -04:00
Todd C. Miller
6d8788a6cd Do not shadow global sudo_mode with a local variable in set_cmnd() 2011-07-18 16:23:38 -04:00
Todd C. Miller
54bf162e60 bash 2.x doesd not support the -l flag and exits with an error if 
it is specified so use --login instead.  This causes an error with
bash 1.x (which uses -login instead) but this version is hopefully
less used than 2.x.
 2011-07-17 10:37:15 -04:00
Todd C. Miller
27316e6c53 Add Polish translation from translationproject.org 2011-07-17 10:12:10 -04:00
Todd C. Miller
37873051a8 Make error strings translatable. 2011-07-13 16:50:25 -04:00
Todd C. Miller
94f7c4a291 Only run configure with --with-pam-login for RHEL 5 and above. 2011-07-13 15:51:26 -04:00
Todd C. Miller
d090d67865 Fix typo in summary 2011-07-13 11:41:26 -04:00
Todd C. Miller
d7c0798865 Add missing logwrap.c 2011-07-11 15:57:13 -04:00
Todd C. Miller
f90731596a Split out log file word wrap code into its own file and add unit 
tests.  Fixes an off-by one in the word wrap when the log line
length matches loglinelen.
 2011-07-11 15:22:25 -04:00
Todd C. Miller
ee1b41f847 For SuSE, only use /usr/lib64 as libexec if generating 64-bit 
binaries.
 2011-07-05 12:42:55 -04:00
Todd C. Miller
76f427e8d7 Fix build error when --without-noexec configure option is used. 2011-07-05 12:20:10 -04:00
Todd C. Miller
ae34052542 Disable noexec for AIX < 5. LDR_PRELOAD is only available in AIX 
5.3 and above.
 2011-07-05 11:42:39 -04:00
Todd C. Miller
56321ec778 Resolve the list of gids passed in from the sudo frontend (the 
result of getgroups()) to names and store both the group names and
ids in the sudo_user struct.  When matching groups in the sudoers
file, match based on the names in the groups list first and
only do a gid-based match when we absolutely have to.  By matching
on the group name (as it is listed in sudoers) instead of id
(which we would have to resolve) we save a lot of group lookups
for sudoers files with a lot of groups in them.
 2011-07-01 14:13:47 -04:00
Todd C. Miller
20972da410 Workaround for "sudo -i command" and newer versions of bash which 
don't go into login mode when -c is specified unless -l is too.
 2011-06-26 18:02:09 -04:00
Todd C. Miller
9ba98ef7b5 Rewrite logfile word wrapping code to be more straight-forward 
and actually wrap at the correct place.
 2011-06-23 14:17:38 -04:00
Todd C. Miller
39be82e32f Set use_pty=true in command details when use_pty is set in sudoers. 
From Ludwig Nussel
 2011-06-22 10:06:35 -04:00
Todd C. Miller
2bd874febc Sync Chinese (simplified) PO files from translationproject.org 2011-06-20 08:30:10 -04:00
Todd C. Miller
26ec20f8b1 Add Danish translation from translationproject.org and add missing 
Basque mo files.
 2011-06-18 13:21:48 -04:00
Todd C. Miller
210e091d81 No longer need to specify LINGUAS in configure, "make install-nls" 
now just installs all the .mo files it finds.
 2011-06-18 13:11:27 -04:00
Todd C. Miller
de6df7cc81 Build CONTRIBUTORS from newly-added contributors.pod 2011-06-17 09:39:27 -04:00
Todd C. Miller
aeac9c738b Rework the wording in the leading paragraph 2011-06-17 09:07:49 -04:00
Todd C. Miller
7de94d3a2e Add a CONTRIBUTORS file with the names of folks who have contributed 
code or patches to sudo since I started maintaining it (plus the
original authors).
 2011-06-14 16:53:26 -04:00
Todd C. Miller
7a06f32cbb Preserve SHELL variable for "sudo -s". Otherwise we can end up 
with a situation where the SHELL variable and the actual shell being
run do not match.
 2011-06-13 07:20:28 -04:00
Todd C. Miller
b4a48510cd Only enable Solaris project support when setproject() is present in 
libproject.
 2011-06-10 15:28:58 -04:00
Todd C. Miller
f0e941a396 Explicitly set mode and owner of /etc/sudoers instead of relying 
on "cp -p" to work in the postinstall script.  On AIX 6.1 at least
the postinstall script runs before the final file permissions are set.
 2011-06-10 15:26:35 -04:00
Todd C. Miller
0c292a56bf Refer the user to the "Command Environment" section in description 
of sudo's -i option.
 2011-06-09 12:52:51 -04:00
Todd C. Miller
47d908abab Fix typo 2011-06-09 08:54:46 -04:00
Todd C. Miller
9fd93f433d If there is no old dependency for an object file, use the MANIFEST 
to find its source.
 2011-06-08 13:18:23 -04:00
Todd C. Miller
44ab717acd Remove dependency for getgrouplist.lo as we don't ship that source file. 2011-06-08 13:17:51 -04:00
Todd C. Miller
2c4a5e905c Do not declare yyparse() static as the actual function generated 
by yacc is extern.
 2011-06-07 11:45:06 -04:00
Todd C. Miller
900de1bdec Remove locale files in "make uninstall" 2011-06-06 14:40:42 -04:00
Todd C. Miller
e95c7130d7 Add Basque translation and sync Finish and Ukranian translations. 2011-06-06 13:38:54 -04:00
Todd C. Miller
0562e492aa FreeBSD no longer needs the main sudo binary to link with -lpam 
now that plug-ins are loaded with RTLD_GLOBAL.
 2011-06-06 11:02:52 -04:00
Todd C. Miller
4f22a39803 Load plugins with RTLD_GLOBAL instead of RTLD_LOCAL. This fixes 
problems with pam modules not having access to symbols provided by
libpam on some platforms.  Affects FreeBSD and SLES 10 at least.
 2011-06-06 10:53:58 -04:00
Todd C. Miller
878c770000 Move xgettext invocation out of update-po target into update-pot 2011-06-06 08:46:50 -04:00
Todd C. Miller
750c0d2ebe Regenerate .pot files for 1.8.2rc2 2011-06-04 18:27:59 -04:00
Todd C. Miller
e66169b3ed Move nls targets to the top level Makefile so the paths in 
the pot file are saner
 2011-06-04 18:27:13 -04:00