Commit Graph

239 Commits

Author SHA1 Message Date
Todd C. Miller
c3373f03be SunOS 4.x is no longer supported 2016-11-17 08:09:06 -07:00
Todd C. Miller
9b027676c0 Use the value of ipa_hostname from /etc/sssd/sssd.conf if present
instead of the system hostname.
2016-06-04 19:52:10 -06:00
Todd C. Miller
8509229eb1 Add a note that --with-solaris-audit is only for Solaris 11 and
above.  Bug #737
2016-02-19 13:37:43 -07:00
Todd C. Miller
fd9f010064 mention --enable-asan 2016-01-27 16:49:24 -07:00
Todd C. Miller
8bc70a635c Instead of trying to make weak functions work on all platforms,
just use a registration function for a plugin-specific setlocale
function.  The sudoers version just wraps sudoers_setlocale().
2015-05-11 14:51:32 -06:00
Todd C. Miller
fa3552fa76 Create template tmpfiles.d/sudo.conf for installation instead of
creating one via echo commands in the Makefile.

Add --enable-tmpfiles.d configure option to enable/disable use of
tmpfiles.d and override the default directory.

Use --disable-tmpfiles.d in mkpkg so we no longer need to ignore
tmpfiles.d/sudo.conf in sudo.pp.
2015-04-07 15:35:01 -06:00
Todd C. Miller
d297f5fd84 Make exampledir configurable and default to DATAROOTDIR/examples/sudo
on BSD systems.
2015-04-06 15:10:26 -06:00
Todd C. Miller
5cfd0cff9c Add --disable-weak-symbols option to disable use of weak symbols
in libsudo_util.
2015-03-05 14:43:06 -07:00
Todd C. Miller
e11f32fd42 On AIX use the value of auth_type in /etc/security/login.cfg to
determine whether to use LAM or PAM unless the user specified the
--with-pam or --with-aixauth configure flags.
2015-02-23 11:12:43 -07:00
Todd C. Miller
c3c28773f5 Sanity check the TZ environment variable by special casing it in
env_check.  The --with-tzdir configure option can be used to
specify the zoneinfo directory if configure doesn't find it.
2015-02-06 11:01:05 -07:00
Todd C. Miller
9a9e865375 Add support for installing a shared zlib 2014-10-27 14:39:07 -06:00
Todd C. Miller
b91a91d289 Move sample.* files to a sudo examples dir 2014-10-24 14:25:12 -06:00
Todd C. Miller
76a6dad424 Add --disable-shared-libutil configure option. It may only be used
in conjunction with the --enable-static-sudoers option.
2014-08-08 11:03:24 -06:00
Todd C. Miller
18dbc52e4b Add Solaris audit support; from Gary Winiger at Oracle. 2014-06-27 16:01:40 -06:00
Todd C. Miller
53d9429b87 Talk about clearing files at boot time, not reboot time since it
happens when the system comes up, not down.
2014-02-17 10:27:20 -07:00
Todd C. Miller
7292e607fc Mention that rundir and vardir may be the same and what to do if they are. 2014-02-03 06:16:51 -07:00
Todd C. Miller
aeb5ceead8 Replace --with-timedir and --with-lecture_dir with --with-rundir
and --with-vardir which are the parent directories of the time stamp
and lecture dirs.  These directories need to be searchable by
non-root so that the timestampowner setting can function.
2014-02-01 05:57:34 -07:00
Todd C. Miller
659b1f0e34 Switch to new time stamp file format. Each user now has a single
file which may contain multiple records when per-tty time stamps
are in use (the default).  The time stamps use a monotonic timer
where available and are once again stored in /var/run/sudo.  The
lecture status is now stored separately from the time stamps in a
different directory.
2014-01-30 15:50:40 -07:00
Todd C. Miller
12f3bdf60e Add wrapper functions for dlopen() et al so that we can support
statically compiling in the sudoers plugin but still allow other
plugins to be loaded.  The new --enable-static-sudoers configure
option will cause the sudoers plugin to be compiled statically into
the sudo binary.  This does not prevent other plugins from being
loaded as per sudo.conf.
2013-11-22 16:35:15 -07:00
Todd C. Miller
79acd5db49 Simple event subsystem that uses poll() or select(). Basically a
simplied subset of libevent2.  Currently only fd events are supported
(since that's all we need).  The poll() backend is used by default,
except on Mac OS X where poll() is broken for devices (including
/dev/tty and ptys).
2013-10-12 05:53:43 -06:00
Todd C. Miller
67d8af4be5 Restrict default creation of PIE binaries (-fPIE and -pie) to Linux.
OpenBSD also supports PIE but enables it by default so we don't
need to do anything.  This fixes problems on systems with a version
of GNU ld that accepts -pie but where the run-time linker doesn't
actually support PIE.  Also verify that a trivial PIE binary works
unless PIE is explicitly enabled.
2013-05-28 14:40:45 -04:00
Todd C. Miller
d1580ff592 Error out in configure if the compiler doesn't support "long long". 2013-04-16 14:36:42 -04:00
Todd C. Miller
c8f630c060 Replace --with-rpath and --with-blibpath with --disable-rpath.
Now that we use libtool for linking we can just use the -R
flag and have libtool translate it to the proper linker flag.
2013-03-18 09:27:07 -04:00
Todd C. Miller
c715df98fa Reorganize configure options 2013-02-12 16:43:29 -05:00
Todd C. Miller
d18e050458 Remove obsolete OS notes and move build requirements to INSTALL. 2013-02-10 09:45:06 -05:00
Todd C. Miller
a94e94cf8c mention --disable-shared 2012-11-26 15:25:19 -05:00
Todd C. Miller
56857f7f01 Document Solaris 11 locale issues and workarounds. 2012-11-08 15:22:44 -05:00
Todd C. Miller
0586a5e28a Allow the user to specify and alternate libtool 2012-10-28 12:58:48 -04:00
Todd C. Miller
d89b1a6be2 Support for using SSSD (http://fedorahosted.org/sssd/) as a sudoers
data source.  From Daniel Kopecek and Pavel Brezina.
2012-08-10 11:59:26 -04:00
Todd C. Miller
90f2cfa589 Build .man.in and .cat files from .mdoc.in files.
Add new --with-man and --with-mdoc configure options.
2012-07-19 13:41:14 -04:00
Todd C. Miller
f8f0021710 Add configure check for building PIE executables instead of doing
it in mkpkg.
2012-07-02 10:12:41 -04:00
Todd C. Miller
e417fb3da1 Build with -fstack-protector and link with -zrelo where supported.
Added --disable-hardening option to disable hardening options.
2012-05-22 13:23:19 -04:00
Todd C. Miller
d29aede203 No longer throw an error if sudoers is a symbolic link. Deprecated
the --with-stow option as that is now (effectively) the default.
2012-05-21 13:30:59 -04:00
Todd C. Miller
025a309025 Fix capitalization 2012-05-15 12:15:30 -04:00
Todd C. Miller
d4259ef2ca Fix editor goof. 2012-03-08 13:19:39 -05:00
Todd C. Miller
241b1db873 Add --enable-kerb5-instance configure option to allow people using
Kerberos V authentication to use a custom instance.  Adapted from
a diff by Michael E Burr.
2012-01-05 15:39:05 -05:00
Todd C. Miller
edd32aa8df Mention how to configure pam_hpsec on HP-UX to play nicely with sudo. 2011-12-08 09:10:07 -05:00
Todd C. Miller
5c29710f35 Remove obsolete securid auth method. 2011-11-13 11:54:06 -05:00
Todd C. Miller
c86561e502 Remove the old Kerberos IV support 2011-11-13 09:12:43 -05:00
Todd C. Miller
b3b268c3a4 Remove --with-CC option; it doesn't work correctly now that we use
libtool.  Users can get the same effect by setting the CC environment
variable when running configure.
2011-09-08 09:36:24 -04:00
Todd C. Miller
e4956d22e1 Add --enable-werror configure option. 2011-08-23 10:15:28 -04:00
Todd C. Miller
88cfbd51a5 Add support for --enable-nls[=location] 2011-05-29 14:33:18 -04:00
Todd C. Miller
6b856c7790 No need to include version number at the top of these files. 2011-05-19 13:17:31 -04:00
Todd C. Miller
1994db70da Add --disable-nls flag and improve checks for gettext. 2011-05-09 10:58:52 -04:00
Todd C. Miller
f52a6ccae4 Fix and document --with-plugindir; partially from Diego Elio Petteno 2011-04-06 12:02:49 -04:00
Todd C. Miller
ed8e30cf6e Add --disable-env-reset configure option. 2011-01-28 16:52:25 -05:00
Todd C. Miller
d54dd245a8 Better --enable-zlib description 2010-10-28 14:31:00 -04:00
Todd C. Miller
b51afe6249 Implement --with-umask-override configure flag. 2010-09-14 17:18:55 -04:00
Todd C. Miller
6d0395ee68 Add support for Ubuntu admin flag file and enable it when building
Ubuntu packages.
2010-07-28 16:34:11 -04:00
Todd C. Miller
2675524c32 The tty_tickets option is now on by default. 2010-07-20 13:20:53 -04:00