isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
3,072 Commits 1 Branch 0 Tags
c4a8ab8b99dede94e33c9bd38daeaa4145ec4a09
Commit Graph

179 Commits

Author SHA1 Message Date
Todd C. Miller
2d21140a3d Add SET/CLR/ISSET 2004-01-22 00:02:36 +00:00
Todd C. Miller
f4a4d4c666 Add check for fchown(2) 2004-01-21 21:57:59 +00:00
Todd C. Miller
d55c3f63c7 Use closefrom() instead of doing the equivalent inline. 2004-01-12 19:03:54 +00:00
Todd C. Miller
149862cd9d Move PAM_CONST macro definition from config.h to pam.c where it belongs. 
We can't have this in config.h since that gets included too early.
 2004-01-09 19:39:00 +00:00
Todd C. Miller
aa4eb97ed5 Some PAM implementations put their headers in /usr/include/pam instead 
of /usr/include/security.
 2004-01-09 19:35:54 +00:00
Todd C. Miller
b106eabb4b Only OpenPAM and Linux PAM use const qualifiers. 2004-01-09 06:18:10 +00:00
Todd C. Miller
caf389c2fa Rename EXEC macro -> EXECV 2004-01-05 01:39:57 +00:00
Todd C. Miller
e52feabd48 s/HAVE_STOW/USE_STOW/ 2003-06-09 23:00:20 +00:00
Todd C. Miller
e6ec7f3374 builtin -> built-in; Jason McIntyre 2003-04-13 19:48:15 +00:00
Todd C. Miller
fab224f42f Check for heimdal even if we found krb5-config and define HAVE_HEIMDAL. 2003-04-04 17:45:24 +00:00
Todd C. Miller
d64a83b41e Add checks for getprognam(), __progname and err.h 2003-04-02 18:15:25 +00:00
Todd C. Miller
7b124c5dea Add support for --with-stow based on patches from Robert Uhl 2003-03-15 18:01:39 +00:00
Todd C. Miller
285791c42f Add stlc{at,py} for those w/o it. 2003-03-12 22:07:26 +00:00
Todd C. Miller
7a7a5fe2e0 not not; Anil Madhavapeddy 2003-03-01 18:21:20 +00:00
Todd C. Miller
dfd0d2829d Add missing "$HOME" 2003-01-20 20:58:48 +00:00
Todd C. Miller
2de61320b3 regen from configure.in 2002-11-22 19:08:10 +00:00
Todd C. Miller
35014b44bc Older BSDi releases lack freeifaddrs() so add a test for that and if 
it is not present just use free().
 2002-01-18 19:17:07 +00:00
Todd C. Miller
0aac4f03b7 Add --disable-root-mailer option to run the mailer as the user and not root. 2002-01-16 21:26:13 +00:00
Todd C. Miller
f039427253 Add a configure option to turn off use of POSIX saved IDs 2002-01-15 22:47:29 +00:00
Todd C. Miller
ce95eb80b6 now generated via autoheader 2002-01-02 22:40:14 +00:00
Todd C. Miller
313bbae1d3 use AC_SYS_POSIX_TERMIOS instead of rolling our own 2001-12-15 15:57:03 +00:00
Todd C. Miller
7be0cd14ae o Add HAVE_STDLIB_H and HAVE_MEMORY_H 
o Define HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe now
 2001-12-15 01:44:10 +00:00
Todd C. Miller
66d801055c Use new HAVE_SIGACTION_T define 2001-12-14 23:38:31 +00:00
Todd C. Miller
47dff37185 o Update copyright year 2001-12-14 19:54:56 +00:00
Todd C. Miller
86743d987e Add checks for volatile and sig_atomic_t 2001-12-14 06:52:44 +00:00
Todd C. Miller
f66fcb464b Add check for skeyaccess(3) 2001-12-12 19:43:23 +00:00
Todd C. Miller
46be666b32 Add check for isblank and a replacement macro if it doesn't exist. 2001-12-12 00:31:07 +00:00
Todd C. Miller
e6545c86fc add back HAVE_SIGACTION 2001-12-08 19:48:03 +00:00
Todd C. Miller
241cb64cc4 Kill POSIX_SIGNALS define and old signal support now that we emulate POSIX ones 
Also be sure to correctly initialize struct sigaction.
 2001-12-08 19:44:30 +00:00
Todd C. Miller
5481e22892 Add check + emulation for setegid (like seteuid). 2000-12-30 21:55:21 +00:00
Todd C. Miller
998631b73a New Defaults options: 
o stay_setuid - sudo will remain setuid if system has saved uids or setreuid(2)
 o env_reset - reset the environment to a sane default
 o env_keep - preserve environment variables that would otherwise be cleared

No longer use getenv/putenv/setenv functions--do environment munging by hand.
Potentially dangerous environment variables can be cleared only if they
contain '/' pr '%' characters to protect buggy programs.
Moved environment routines into env.c (new file)
 2000-12-30 03:29:47 +00:00
Todd C. Miller
43905f4d7b Define HAVE_INNETGR #ifdef HAVE__INNETGR 2000-11-01 15:22:08 +00:00
Todd C. Miller
4fdb825a09 Add check for _innetgr(3) since NCR systems have that instead of 
innetgr(3).
 2000-11-01 15:17:25 +00:00
Todd C. Miller
0208b22686 Add support for BSD authentication. 2000-10-26 16:42:40 +00:00
Todd C. Miller
d7050d5615 Add support for using getifaddrs() to get the list of ip addr / netmask 
pairs.  Currently IPv4-only.
 2000-06-04 23:57:22 +00:00
Todd C. Miller
935a51e76a FreeBSD login class (login.conf) support. 2000-03-07 04:29:46 +00:00
Todd C. Miller
d9790399b3 Fix sudoers locking in visudo. We now lock the sudoers file itself, not 
the temp file (since locking the temp file can foul up editors).  The
previous locking scheme didn't work because the fd was closed too early.
 2000-01-19 19:07:24 +00:00
Todd C. Miller
90371b1c03 Don't need test for ftruncate() any more. 2000-01-19 18:37:51 +00:00
Todd C. Miller
ac67ced558 Add check for initgroups() since old SYSV lacks this. 1999-12-09 04:04:47 +00:00
Todd C. Miller
957fa7941d o Kill HAVE_FNMATCH_H 
o Only define HAVE_FNMATCH if <fnmatch.h> exists.
 1999-12-09 03:54:57 +00:00
Todd C. Miller
59666aca78 o Now use getrlimit to find the highest fd when closing all non-std fd's 
o Turn off core dumps via setrlimit for the sake of paranoia
 1999-11-04 19:01:11 +00:00
Todd C. Miller
7769bf6a32 o Change defaults stuff to put the value right in the struct. 
o Implement mailer_flags
o Store syslog stuff both in int and string form.  Setting the string
  form magically updates the int version.
o Add boolean attribute to strings where it makes sense to say !foo
 1999-10-07 21:21:08 +00:00
Todd C. Miller
f7e23611be Use strftime() instead of ctime() if it is available. 1999-09-15 09:15:33 +00:00
Todd C. Miller
13bf42675d Add support for "Defaults" line in sudoers to make configuration variables 
changable at runtime (and on a global, per-host and per-user basis).
Both the names and the internal representation are still subject to change.
It was necessary to make sudo_user.runas but a char ** instead of a
char * since this value can be changed by a Defaults line.  There is a
similar (but more complicated) issue with sudo_user.prompt but it
is handled differently at the moment.

Add a "-L" flag to list the name of options with their descriptions.  This
may only be temporary.

Move some prototypes to parse.h

Be much less restrictive on what is allowed for a username.
 1999-09-08 08:06:28 +00:00
Todd C. Miller
fda4a9709f Add _GNU_SOURCE for Linux 1999-08-28 08:49:08 +00:00
Todd C. Miller
359b5be92d Kill _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes 1999-08-26 21:24:50 +00:00
Todd C. Miller
ff95bb1d77 Define _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE 1999-08-26 10:12:46 +00:00
Todd C. Miller
b13e8006ec Add check for LONG_IS_QUAD 
#undef MAXINT before including hpsecurity.h to silence an HP-UX warning
Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
 1999-08-22 09:59:28 +00:00
Todd C. Miller
ab0c1eae13 UCB-derived snprintf + asprintf support. Supports quads if the compiler 
does.  No floating point yet, perhaps later...
 1999-08-21 19:00:53 +00:00
Todd C. Miller
0598093e2c sudoers_lookup() now returns a bitmap instead of an int. This makes it 
possible to express things like "failed to validate because user not listed
for this host".  Some thigns that were previously VALIDATE_FOO are now
FLAG_FOO.  This may change later on.

Reorganized code in log_auth() and sudo.c to deal with above changes.

Safer versions of push/pushcp with in the do { ... } while (0) style

parse.yacc now saves info on the stack to allow parse.c to determine
if a user was listed, but not for the host he/she tried to run on.

Added --with-mail-if-no-host option
 1999-08-19 16:30:09 +00:00