isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,302 Commits 1 Branch 0 Tags
b51afe62493d7edc4ef1766733a04356d0575b0f
Commit Graph

96 Commits

Author SHA1 Message Date
Todd C. Miller
b51afe6249 Implement --with-umask-override configure flag. 2010-09-14 17:18:55 -04:00
Todd C. Miller
bd1884bb43 sudo_plugin is in section 8; from Ted Percival 2010-09-11 09:07:53 -04:00
Todd C. Miller
f601085de4 Make "visudo -c -f -" check the standard input. 2010-09-09 17:10:23 -04:00
Todd C. Miller
b91a12988a set_home and always_set_home have an effect if HOME is present in 
the env_keep list.
 2010-09-09 16:22:26 -04:00
Todd C. Miller
1009d7a3e6 Query local network interfaces in the main sudo driver and pass to 
the plugin as "network_addrs" in the settings list.
 2010-09-08 14:20:11 -04:00
Todd C. Miller
df8ec6fc25 Add support for multiple URI lines by joining the contents and passing 
the result to ldap_initialize.
 2010-09-04 20:43:51 -04:00
Todd C. Miller
4feaf3c264 Document sudo_conv_t function and sudo_printf_t return values. 2010-08-12 10:29:43 -04:00
Todd C. Miller
7b011cf152 fix typo 2010-08-04 08:42:05 -04:00
Todd C. Miller
a4b3a6d966 Remove sudo docdir completely 2010-07-23 12:22:10 -04:00
Todd C. Miller
084ae523ac Add sample sudo.conf 2010-07-23 12:21:22 -04:00
Todd C. Miller
c016ecf006 Install sudoers2ldif in the doc dir 2010-07-23 09:12:03 -04:00
Todd C. Miller
8660b5ea35 Change the default syslog facility from local2 to authpriv (or auth 
if the operating system doesn't support authpriv).
 2010-07-22 17:50:21 -04:00
Todd C. Miller
bdecb14ea6 Mention that 127.0.0.1 will not match, nor will localhost unless 
that is the actual host name.
 2010-07-21 15:19:56 -04:00
Todd C. Miller
a72965e64c Rename WHATSNEW -> NEWS 2010-07-21 15:00:14 -04:00
Todd C. Miller
f45f57dca5 Add commented out line to add HOME to env_keep and add a warning 
to the note about the HOME change in UPGRADE.
 2010-07-21 09:51:43 -04:00
Todd C. Miller
2675524c32 The tty_tickets option is now on by default. 2010-07-20 13:20:53 -04:00
Todd C. Miller
ee7221f1fe Reset HOME when env_reset is enabled unless it is in env_keep 2010-07-19 15:35:47 -04:00
Todd C. Miller
c31e1227f1 The default for set_logname has been "true" for some time now. 2010-07-19 14:12:03 -04:00
Todd C. Miller
69ecb34581 If env_reset is enabled, set the MAIL environment variable based 
on the target user unless MAIL is explicitly preserved in sudoers.
 2010-07-19 12:50:59 -04:00
Todd C. Miller
225de60639 The tag is NOSETENV, not UNSETENV. From Petr Uzel. 2010-07-16 05:58:01 -04:00
Todd C. Miller
c2c15aa4e5 Move time stamp files from /var/run/sudo to /var/{db,lib,adm}/sudo. 2010-07-14 14:57:32 -04:00
Todd C. Miller
eccbde77da Add ldap "flavor" for debian, controlled by the SUDO_FLAVOR environment 
variable.
 2010-07-14 14:09:34 -04:00
Todd C. Miller
de3cfa25f4 Remove spurious "and"; from debian 2010-07-14 09:34:39 -04:00
Todd C. Miller
26ca852a98 Substitute the value of EDITOR into the sudoers and visudo manuals. 2010-07-14 09:33:53 -04:00
Todd C. Miller
a33996e740 install-man -> install-doc 2010-07-13 08:36:19 -04:00
Todd C. Miller
7bcbce2078 Use http://rc.quest.com/topics/polypkg/ for packaging 2010-07-13 08:33:46 -04:00
Todd C. Miller
432d27573d TLS_CACERT is now an alias for TLS_CACERTFILE. OpenLDAP uses TLS_CACERT, 
not TLS_CACERTFILE in its ldap.conf.  Other LDAP client code, such as
nss_ldap, uses TLS_CACERTFILE.  Also document why you should avoid
disabling TLS_CHECKPEER is possible.
 2010-07-08 09:02:03 -04:00
Todd C. Miller
5b1420b6d4 Make sudo_plugin format a bit more like a man page 2010-07-07 16:59:06 -04:00
Todd C. Miller
3f33f75b7a Add uninstall target 2010-07-07 11:42:36 -04:00
Todd C. Miller
3906967771 Fix typo. 2010-07-06 13:24:00 -04:00
Todd C. Miller
2822c6c8ce Document group_plugin syntax. 2010-07-02 15:37:47 -04:00
Todd C. Miller
9d17312617 Document the sudoers group plugin. 2010-07-02 13:42:53 -04:00
Todd C. Miller
e6b48d415c Replace built-in non-unix group support with a sudoers group plugin. 
Include a sample plugin that can read Unix-format group files.
 2010-07-02 11:11:25 -04:00
Todd C. Miller
454534eff2 Move sudoers-specific bits out of sudo(8) and into sudoers(5) 2010-07-01 13:51:06 -04:00
Todd C. Miller
175760a44b Add =head3 entries, mostly for the html version 2010-06-24 09:59:06 -04:00
Todd C. Miller
e873644374 Mention when LDAP was incorporate. 2010-06-22 13:38:43 -04:00
Todd C. Miller
c4da73db17 Update copyright year 2010-06-18 09:57:01 -04:00
Todd C. Miller
cf1d8359c3 Do not rely on BSD make's $> 2010-06-18 09:53:17 -04:00
Todd C. Miller
ede8a5fad3 Comment out rules to build .man.in and .cat files unless --with-devel 2010-06-16 16:01:51 -04:00
Todd C. Miller
c1bd1dd604 Comment out rules to build .man.in and .cat files unless --with-devel 2010-06-16 15:59:52 -04:00
Todd C. Miller
6363305b30 Add back .man suffix 2010-06-16 12:19:23 -04:00
Todd C. Miller
1025a2ec06 Add -f (filter) option to sudoreplay to allow certain streams to 
be replayed and others ignored.
 2010-06-15 16:11:25 -04:00
Todd C. Miller
d92c82ea3f Add support for multiple sudoers_base entries in ldap.conf. 
From Joachim Henke
 2010-06-15 10:33:30 -04:00
Todd C. Miller
e1e0ac22b2 Remove obsolete porting guide 2010-06-14 14:56:45 -04:00
Todd C. Miller
7484676705 Remove useless circular dependencies 2010-06-14 12:35:06 -04:00
Todd C. Miller
b72a530fd0 Update copyright year 2010-06-14 12:19:49 -04:00
Todd C. Miller
a7a4ec6fbf Fix commented DEVDOCS when not in devel mode. 2010-06-14 12:19:29 -04:00
Todd C. Miller
93d48cfc60 Updates from Alain Roy to provide better examples for importing the 
schema and to fix problems caused by Windows validating attributes
which have not yet been added before committing the changes.
 2010-06-14 10:20:41 -04:00
Todd C. Miller
ec77318e32 Leave rules to build .man.in and .cat files uncommented but only make 
them part of the "all" rule in devel mode.
Generate .cat files directly from .man.in instead of .man using default
values in configure.in
 2010-06-11 18:34:24 -04:00
Todd C. Miller
f67ac02af5 Make this read a little bit better when passwd_timeout is 0. 2010-06-10 17:38:56 -04:00