Todd C. Miller
91f04dc3b4
Add --enable-env-debug flag to enable environment sanity checks.
2009-03-08 20:57:01 +00:00
Todd C. Miller
9e85f3754b
Work around some pod2html issue.
2009-03-08 15:51:01 +00:00
Todd C. Miller
f641253684
Only sync environ for putenv, setenv, and unsetenv. We need to make
...
sure that sudo_putenv and sudo_setenv only modify env.envp, not environ.
2009-03-07 22:10:44 +00:00
Todd C. Miller
0fee90c190
Really fix UNSETENV_VOID
2009-03-02 19:19:35 +00:00
Todd C. Miller
a7a53b5f47
Fix unsetenv when UNSETENV_VOID
2009-03-02 19:18:35 +00:00
Todd C. Miller
e43e319ae3
Fix SUDO_FUNC_PUTENV_CONST
2009-03-02 13:00:37 +00:00
Todd C. Miller
4210f536c6
tivoli-based ldap does not have ldapssl_err2string
2009-03-02 12:36:06 +00:00
Todd C. Miller
237d4e922f
regen
2009-03-02 12:30:16 +00:00
Todd C. Miller
ef071fa655
Add support for Tivoli-based LDAP start TLS as seen in AIX. Untested.
2009-03-01 21:20:37 +00:00
Todd C. Miller
3c8acdd649
Add sanity checks for setenv/unsetenv
2009-03-01 13:52:28 +00:00
Todd C. Miller
aafea55f24
Include bsm_audit.h in the tarball
2009-03-01 01:17:25 +00:00
Todd C. Miller
dff0b6b52a
bump version for sudo 1.7.1
2009-03-01 01:00:28 +00:00
Todd C. Miller
6fed38f323
Replace sudo_setenv/sudo_unsetenv with calls to setenv/unsetenv and
...
provide our own setenv/unsetenv/putenv that operates on own env pointer.
Make sync_env() inline in setenv/unsetenv/putenv functions.
2009-03-01 00:58:41 +00:00
Todd C. Miller
a25aee9cb9
Make "sudoedit -h" work as expected
2009-02-25 12:33:11 +00:00
Todd C. Miller
536ba5e23a
Make sure def_prompt is always defined. This is a workaround for
...
pam configs that prompt for a password in the session but don't
have an auth line. A better fix is to expand the sudo prompt earlier
and set def_prompt to that when initializing.
2009-02-25 12:21:11 +00:00
Todd C. Miller
0c05609759
Mention that the helper for -A may be graphical.
2009-02-25 11:17:26 +00:00
Todd C. Miller
4929b51609
Document what happens if there is no tty.
2009-02-25 11:16:54 +00:00
Todd C. Miller
0390504c34
cosmetic changes
2009-02-25 11:05:01 +00:00
Todd C. Miller
2e8d722ae4
Fix term_restore
2009-02-25 10:47:12 +00:00
Todd C. Miller
710e72ecb3
Fix "sudo -k" with no other args
2009-02-25 01:23:07 +00:00
Todd C. Miller
15975b83ce
Allow the -k flag to be specified in conjunction with a command or
...
another option that may require authentication.
2009-02-24 13:04:39 +00:00
Todd C. Miller
e7ee38d62c
Remove unneeded AC_CANONICAL_TARGET; from Diego E. 'Flameeyes'
2009-02-23 14:18:46 +00:00
Todd C. Miller
c5513388e0
Parallel make fix. From Diego E. 'Flameeyes'
2009-02-23 14:15:29 +00:00
Todd C. Miller
f96b0a7432
Implement umask_override
2009-02-21 22:03:47 +00:00
Todd C. Miller
030b39958e
regen
2009-02-21 21:51:42 +00:00
Todd C. Miller
0d7f771778
Implement %h escape in sudoers include filenames.
2009-02-21 21:49:19 +00:00
Todd C. Miller
ceaa7a38cf
Need to include compat.h
2009-02-21 13:43:27 +00:00
Todd C. Miller
6491696ca6
Make audit_success and audit_failure generic functions in preparation
...
for integrating linux audit support.
2009-02-21 13:37:47 +00:00
Todd C. Miller
380c953e6a
remove duplicate include
2009-02-21 13:06:34 +00:00
Todd C. Miller
c29881ef16
Add missing include
2009-02-20 21:13:32 +00:00
Todd C. Miller
f4bc42d637
May need to update the runas user after parsing command-based defaults.
2009-02-20 20:55:32 +00:00
Todd C. Miller
a9caa43805
Add missing pair of braces introduced with character class support.
2009-02-18 15:53:38 +00:00
Todd C. Miller
dd56fbadb4
Rename pwstars to pwfeedback
2009-02-15 20:53:49 +00:00
Todd C. Miller
d1bbb48f19
Add const to make MacOS happy.
2009-02-11 01:25:27 +00:00
Todd C. Miller
f492e53056
Add bsm audit support from Christian S.J. Peron
2009-02-11 01:18:02 +00:00
Todd C. Miller
bd05b56a8d
This is new code, no DARPA notice.
2009-02-11 00:58:17 +00:00
Todd C. Miller
108d53548b
Rename simple_glob -> fast_glob
2009-02-10 19:04:02 +00:00
Todd C. Miller
cfb9ec7baf
g/c unused var
2009-02-10 14:39:15 +00:00
Todd C. Miller
7207b4cd60
Add simple_glob option to use fnmatch() instead of glob(). This is
...
useful when you need to specify patterns that reference network file
systems.
2009-02-10 13:09:14 +00:00
Todd C. Miller
5df16f86b7
add term_* proto
2009-02-10 12:58:08 +00:00
Todd C. Miller
eec86958b8
mention glob()
2009-02-10 12:51:20 +00:00
Todd C. Miller
e58df973a9
Delete any pwstars we wrote after the user hits return. That way
...
there is no record on screen as to the user's password length.
2009-02-09 12:59:39 +00:00
Todd C. Miller
2c8e1a45eb
Move terminal setting bits from tgetpass.c to term.c
2009-02-08 15:27:51 +00:00
Todd C. Miller
38c225af03
Add pwstars sudoers option that causes sudo to print a star every
...
time the user presses a key.
2009-02-08 00:50:48 +00:00
Todd C. Miller
6d88a04a06
Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in.
2009-02-03 15:10:43 +00:00
Todd C. Miller
da769cd429
For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
...
indicate no limit. From Mark Janssen.
2009-01-27 16:54:23 +00:00
Todd C. Miller
2d4aebed6e
Comments that begin with #- should not be parsed as uids.
2009-01-17 22:36:09 +00:00
Todd C. Miller
77794f27aa
Do not try to set the close on exec flag if we didn't actually open sudoers.
2009-01-09 00:13:37 +00:00
Todd C. Miller
930f3ac487
regen
2008-12-19 17:40:39 +00:00
Todd C. Miller
36ba7133c6
sync
2008-12-14 22:40:11 +00:00