isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
5,892 Commits 1 Branch 0 Tags
b743b77a0d1a8742b43bf72f74ea8fd00d1752be
Commit Graph

5892 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
b743b77a0d Better warning message on setuid() failure for the setreuid() 
version of set_perms().
 2011-10-04 11:13:28 -04:00
Todd C. Miller
45ad681cd6 Delref auth_pw at the end of check_user() instead of getting a ref 
twice.
 2011-09-27 16:21:21 -04:00
Todd C. Miller
1e93d1fbb6 Make sudo_auth_{init,cleanup} return TRUE on success and check for 
sudo_auth_init() return value in check_user().
 2011-09-27 15:41:22 -04:00
Todd C. Miller
4540a7525e Do not return without restoring permissions. 2011-09-27 15:22:08 -04:00
Todd C. Miller
de684e5d2c regen pot files 2011-09-27 14:07:18 -04:00
Todd C. Miller
bceb5df158 Modify the authentication API such that the init and cleanup functions 
are always called, regardless of whether or not we are going to
verify a password.  This is needed for proper PAM session support.
 2011-09-27 13:18:46 -04:00
Todd C. Miller
c21595044d Add missing dependency for getspwuid.lo and regen other depends. 2011-09-27 13:15:48 -04:00
Todd C. Miller
c5f8dc95c6 Fix a PAM_USER mismatch in session open/close. We update PAM_USER 
to the target user immediately before setting resource limits, which
is after the monitor process has forked (so it has the old value).
Also, if the user did not authenticate, there is no pamh in the
monitor so we need to init pam here too.  This means we end up
calling pam_start() twice, which should be fixed, but at least the
session is always properly closed now.
 2011-09-27 11:13:44 -04:00
Todd C. Miller
7304bc744e Add check for old being NULL in utmp_setid(); from Steven McDonald 2011-09-27 09:30:59 -04:00
Todd C. Miller
05bfd66693 If the invoking user cannot be resolved by uid fake the struct 
passwd and store it in the cache so we can delref it on exit.
 2011-09-25 06:35:40 -04:00
Todd C. Miller
842526d71f Don't error out if the group plugin cannot be loaded, just warn. 2011-09-24 10:24:40 -04:00
Todd C. Miller
0775147894 Quiet a false positive found by several static analysis tools. 
These tools don't know that log_error() does not return (it longjmps
to error_jmp which returns to the sudo front-end).
 2011-09-23 19:37:21 -04:00
Todd C. Miller
6028afae83 Add Italian translation for sudo from translationproject.org 
Regen .mo files
 2011-09-22 14:56:43 -04:00
Todd C. Miller
a898356b1e Update to current reality and add bit about ssh auth 2011-09-21 12:30:09 -04:00
Todd C. Miller
de33689ae6 Make "verbose" static; fixes a namespace clash with pam_ssh_agent_auth 
(and it doesn't need to be extern these days).
 2011-09-21 10:15:13 -04:00
Todd C. Miller
4724e313e0 FreeBSD has libutil.h not util.h 2011-09-21 09:52:33 -04:00
Todd C. Miller
441abee4e8 Define _BSD_SOURCE on FreeBSD, OpenBSD and DragonflyBSD 2011-09-21 09:46:52 -04:00
Todd C. Miller
32c1ae8f7e Update po files from translationproject.org 2011-09-20 14:57:43 -04:00
Todd C. Miller
3bcc9048c3 Add support for DEREF in ldap.conf. 2011-09-16 16:50:04 -04:00
Todd C. Miller
0f95023e9a install target should depend on ChangeLog too, not just install-doc 2011-09-16 14:20:15 -04:00
Todd C. Miller
e5e1bb24fa Only iolog_file (not iolog_dir) supports mktemp-style suffixes. 2011-09-16 14:05:44 -04:00
Todd C. Miller
62991b0cf0 Sync with 1.8 branch for sudo 1.8.2 and 1.8.3 changes. 2011-09-16 13:30:16 -04:00
Todd C. Miller
ed26d7a59e Document group lookup change and possible side effects. 2011-09-16 13:29:50 -04:00
Todd C. Miller
647e087cd3 Fix some square brackets in case statements that needed to be doubled 
up.  While here, use $OSMAJOR when it makes sense.
 2011-09-16 13:05:21 -04:00
Todd C. Miller
fd2d709bd2 Fix a crash in make_grlist_item() on 64-bit machines with strict 
alignment.
 2011-09-16 09:05:37 -04:00
Todd C. Miller
cab1968da2 Remove list_options() function that is no longer used now that "sudo 
-L" is gone.
 2011-09-16 09:05:17 -04:00
Todd C. Miller
523492af52 Error message if user tries --with-CC 2011-09-16 09:04:58 -04:00
Todd C. Miller
ba331ebfb6 Check for -libmldap too when looking for ldap libs, which is the 
Tivoli Directory Server client library.
 2011-09-16 09:04:27 -04:00
Todd C. Miller
dacb1e47f3 Honor NOPASSWD tag for denied commands too. 2011-09-09 09:57:39 -04:00
Todd C. Miller
b3b268c3a4 Remove --with-CC option; it doesn't work correctly now that we use 
libtool.  Users can get the same effect by setting the CC environment
variable when running configure.
 2011-09-08 09:36:24 -04:00
Todd C. Miller
f730cb7873 Assume all modern systems support fstat(2). 2011-08-31 11:19:10 -04:00
Todd C. Miller
47af0fc2b8 Add configure test for missing errno declaration and only 
declare it ourselves if it is missing.
 2011-08-30 10:05:30 -04:00
Todd C. Miller
55896f636e Include errno.h before sudo.h to avoid conflicting with the system 
definition of errno.
 2011-08-30 09:46:12 -04:00
Todd C. Miller
0cd4648093 Only print individual check status when there is a failure. 2011-08-29 14:53:47 -04:00
Todd C. Miller
f478f84066 Add calls to setprogname() for test programs. 2011-08-29 14:51:12 -04:00
Todd C. Miller
3e0e0fc385 Add -Wall and -Werror after all tests so they don't cause failures. 2011-08-29 14:49:10 -04:00
Todd C. Miller
7945166bb5 Actually run check_addr in the check target 2011-08-29 14:48:09 -04:00
Todd C. Miller
1a259de176 Split out address matching into its own file and add regression 
tests for it.
 2011-08-29 14:10:18 -04:00
Todd C. Miller
a47f005437 When matching an address with a netmask in sudoers, AND the mask 
and addr before checking against the local addresses.
 2011-08-27 12:09:30 -04:00
Todd C. Miller
526a61004d Fix netmask matching. 2011-08-26 16:01:39 -04:00
Todd C. Miller
e3cda80202 Don't assume all editors support the +linenumber command line argument, 
use a whitelist of known good editors.
 2011-08-26 14:03:49 -04:00
Todd C. Miller
d81c14005f Silence compiler warnings on Solaris with gcc 3.4.3 2011-08-23 16:42:18 -04:00
Todd C. Miller
335901388e Fix building on RHEL 3 2011-08-23 15:24:55 -04:00
Todd C. Miller
e4956d22e1 Add --enable-werror configure option. 2011-08-23 10:15:28 -04:00
Todd C. Miller
da95b0ea58 setgroups() proto lives in grp.h on RHEL4, perhaps others. 2011-08-23 10:14:52 -04:00
Todd C. Miller
64a57a2ee9 Use PAM by default on AIX 6 and higher. 2011-08-23 09:50:40 -04:00
Todd C. Miller
8fb53f5e4b Add new Esperanto translation from translationproject.org 2011-08-22 08:26:50 -04:00
Todd C. Miller
5a13dd2b76 Quiet an innocuous valgrind warning. 2011-08-19 09:32:25 -04:00
Todd C. Miller
bfc84b01f3 Fix expansion of strftime() escapes in log_dir and add a regress test 
that exhibited the problem.
 2011-08-18 13:41:40 -04:00
Todd C. Miller
367b659006 Fix "make check" return value. 2011-08-18 12:09:34 -04:00