Commit Graph

4651 Commits

Author SHA1 Message Date
Todd C. Miller
91f04dc3b4 Add --enable-env-debug flag to enable environment sanity checks. 2009-03-08 20:57:01 +00:00
Todd C. Miller
9e85f3754b Work around some pod2html issue. 2009-03-08 15:51:01 +00:00
Todd C. Miller
f641253684 Only sync environ for putenv, setenv, and unsetenv. We need to make
sure that sudo_putenv and sudo_setenv only modify env.envp, not environ.
2009-03-07 22:10:44 +00:00
Todd C. Miller
0fee90c190 Really fix UNSETENV_VOID 2009-03-02 19:19:35 +00:00
Todd C. Miller
a7a53b5f47 Fix unsetenv when UNSETENV_VOID 2009-03-02 19:18:35 +00:00
Todd C. Miller
e43e319ae3 Fix SUDO_FUNC_PUTENV_CONST 2009-03-02 13:00:37 +00:00
Todd C. Miller
4210f536c6 tivoli-based ldap does not have ldapssl_err2string 2009-03-02 12:36:06 +00:00
Todd C. Miller
237d4e922f regen 2009-03-02 12:30:16 +00:00
Todd C. Miller
ef071fa655 Add support for Tivoli-based LDAP start TLS as seen in AIX. Untested. 2009-03-01 21:20:37 +00:00
Todd C. Miller
3c8acdd649 Add sanity checks for setenv/unsetenv 2009-03-01 13:52:28 +00:00
Todd C. Miller
aafea55f24 Include bsm_audit.h in the tarball 2009-03-01 01:17:25 +00:00
Todd C. Miller
dff0b6b52a bump version for sudo 1.7.1 2009-03-01 01:00:28 +00:00
Todd C. Miller
6fed38f323 Replace sudo_setenv/sudo_unsetenv with calls to setenv/unsetenv and
provide our own setenv/unsetenv/putenv that operates on own env pointer.
Make sync_env() inline in setenv/unsetenv/putenv functions.
2009-03-01 00:58:41 +00:00
Todd C. Miller
a25aee9cb9 Make "sudoedit -h" work as expected 2009-02-25 12:33:11 +00:00
Todd C. Miller
536ba5e23a Make sure def_prompt is always defined. This is a workaround for
pam configs that prompt for a password in the session but don't
have an auth line.  A better fix is to expand the sudo prompt earlier
and set def_prompt to that when initializing.
2009-02-25 12:21:11 +00:00
Todd C. Miller
0c05609759 Mention that the helper for -A may be graphical. 2009-02-25 11:17:26 +00:00
Todd C. Miller
4929b51609 Document what happens if there is no tty. 2009-02-25 11:16:54 +00:00
Todd C. Miller
0390504c34 cosmetic changes 2009-02-25 11:05:01 +00:00
Todd C. Miller
2e8d722ae4 Fix term_restore 2009-02-25 10:47:12 +00:00
Todd C. Miller
710e72ecb3 Fix "sudo -k" with no other args 2009-02-25 01:23:07 +00:00
Todd C. Miller
15975b83ce Allow the -k flag to be specified in conjunction with a command or
another option that may require authentication.
2009-02-24 13:04:39 +00:00
Todd C. Miller
e7ee38d62c Remove unneeded AC_CANONICAL_TARGET; from Diego E. 'Flameeyes' 2009-02-23 14:18:46 +00:00
Todd C. Miller
c5513388e0 Parallel make fix. From Diego E. 'Flameeyes' 2009-02-23 14:15:29 +00:00
Todd C. Miller
f96b0a7432 Implement umask_override 2009-02-21 22:03:47 +00:00
Todd C. Miller
030b39958e regen 2009-02-21 21:51:42 +00:00
Todd C. Miller
0d7f771778 Implement %h escape in sudoers include filenames. 2009-02-21 21:49:19 +00:00
Todd C. Miller
ceaa7a38cf Need to include compat.h 2009-02-21 13:43:27 +00:00
Todd C. Miller
6491696ca6 Make audit_success and audit_failure generic functions in preparation
for integrating linux audit support.
2009-02-21 13:37:47 +00:00
Todd C. Miller
380c953e6a remove duplicate include 2009-02-21 13:06:34 +00:00
Todd C. Miller
c29881ef16 Add missing include 2009-02-20 21:13:32 +00:00
Todd C. Miller
f4bc42d637 May need to update the runas user after parsing command-based defaults. 2009-02-20 20:55:32 +00:00
Todd C. Miller
a9caa43805 Add missing pair of braces introduced with character class support. 2009-02-18 15:53:38 +00:00
Todd C. Miller
dd56fbadb4 Rename pwstars to pwfeedback 2009-02-15 20:53:49 +00:00
Todd C. Miller
d1bbb48f19 Add const to make MacOS happy. 2009-02-11 01:25:27 +00:00
Todd C. Miller
f492e53056 Add bsm audit support from Christian S.J. Peron 2009-02-11 01:18:02 +00:00
Todd C. Miller
bd05b56a8d This is new code, no DARPA notice. 2009-02-11 00:58:17 +00:00
Todd C. Miller
108d53548b Rename simple_glob -> fast_glob 2009-02-10 19:04:02 +00:00
Todd C. Miller
cfb9ec7baf g/c unused var 2009-02-10 14:39:15 +00:00
Todd C. Miller
7207b4cd60 Add simple_glob option to use fnmatch() instead of glob(). This is
useful when you need to specify patterns that reference network file
systems.
2009-02-10 13:09:14 +00:00
Todd C. Miller
5df16f86b7 add term_* proto 2009-02-10 12:58:08 +00:00
Todd C. Miller
eec86958b8 mention glob() 2009-02-10 12:51:20 +00:00
Todd C. Miller
e58df973a9 Delete any pwstars we wrote after the user hits return. That way
there is no record on screen as to the user's password length.
2009-02-09 12:59:39 +00:00
Todd C. Miller
2c8e1a45eb Move terminal setting bits from tgetpass.c to term.c 2009-02-08 15:27:51 +00:00
Todd C. Miller
38c225af03 Add pwstars sudoers option that causes sudo to print a star every
time the user presses a key.
2009-02-08 00:50:48 +00:00
Todd C. Miller
6d88a04a06 Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in. 2009-02-03 15:10:43 +00:00
Todd C. Miller
da769cd429 For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
indicate no limit.  From Mark Janssen.
2009-01-27 16:54:23 +00:00
Todd C. Miller
2d4aebed6e Comments that begin with #- should not be parsed as uids. 2009-01-17 22:36:09 +00:00
Todd C. Miller
77794f27aa Do not try to set the close on exec flag if we didn't actually open sudoers. 2009-01-09 00:13:37 +00:00
Todd C. Miller
930f3ac487 regen 2008-12-19 17:40:39 +00:00
Todd C. Miller
36ba7133c6 sync 2008-12-14 22:40:11 +00:00