isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,329 Commits 1 Branch 0 Tags
c5513388e0a1d7d2c44c12912d9d3485fc87cd36
Commit Graph

162 Commits

Author SHA1 Message Date
Todd C. Miller
f96b0a7432 Implement umask_override 2009-02-21 22:03:47 +00:00
Todd C. Miller
0d7f771778 Implement %h escape in sudoers include filenames. 2009-02-21 21:49:19 +00:00
Todd C. Miller
dd56fbadb4 Rename pwstars to pwfeedback 2009-02-15 20:53:49 +00:00
Todd C. Miller
108d53548b Rename simple_glob -> fast_glob 2009-02-10 19:04:02 +00:00
Todd C. Miller
7207b4cd60 Add simple_glob option to use fnmatch() instead of glob(). This is 
useful when you need to specify patterns that reference network file
systems.
 2009-02-10 13:09:14 +00:00
Todd C. Miller
eec86958b8 mention glob() 2009-02-10 12:51:20 +00:00
Todd C. Miller
38c225af03 Add pwstars sudoers option that causes sudo to print a star every 
time the user presses a key.
 2009-02-08 00:50:48 +00:00
Todd C. Miller
3f92c8740f hostnames may also contain wildcards 2008-12-03 20:57:13 +00:00
Todd C. Miller
42771539e2 fix typos; Markus Lude 2008-11-24 15:08:16 +00:00
Todd C. Miller
59302128df standardize on the term 'option' for command line options (not flag) 2008-11-15 18:34:01 +00:00
Todd C. Miller
840acbd3ac Update copyright years. 2008-11-09 14:13:13 +00:00
Todd C. Miller
535ed3817c Sudo will now refuse to run if no tty is present unless the new 
visiblepw sudoers flag is set.
 2008-11-07 02:06:48 +00:00
Todd C. Miller
e2fb6dbb0f mention defauts parse order 2008-11-04 20:45:45 +00:00
Todd C. Miller
9b5e94cef9 When setting the umask, use the union of the user's umask and the 
default value set in sudoers so that we never lower the user's umask
when running a command.
 2008-10-26 21:13:03 +00:00
Todd C. Miller
ce67f22495 document sudoers_locale 2008-10-08 21:09:07 +00:00
Todd C. Miller
22103775cb Mention POSIX characters classes now that out fnmatch() and glob() 
support them.
 2008-10-03 19:56:40 +00:00
Todd C. Miller
5446cd3ae6 Replace [A-z] (which won't match in UTF8) with [A-Za-z] which is 
locale agnostic.
 2008-10-03 19:55:57 +00:00
Todd C. Miller
8f38cfbe90 Remove duplicate "as root". From Martin Toft. 2008-07-12 12:48:21 +00:00
Todd C. Miller
b85a28aba9 Add env_file Defaults option that is similar to /etc/environment on some 
systems.
 2008-05-03 00:53:21 +00:00
Todd C. Miller
0f9e7f96f4 Add mailfrom Defaults option that sets the value of the From: 
field in the warning/error mail.  If unset the login name of
the invoking user is used.
 2008-03-05 21:52:19 +00:00
Todd C. Miller
143691e6d7 document -A and askpass 2008-03-02 22:31:08 +00:00
Todd C. Miller
b072179192 Substitute in comment characters for lines partaining to login.conf, 
BSD auth and SELinux and only enable them if pertinent.
 2008-02-18 15:53:33 +00:00
Todd C. Miller
7a1e2dfb59 Remove the =cut on the first line (above the copyright notice) to quiet 
pod2man.  Also remove the hackery in the FILES section and just deal
with the fact that there will a newline between each pathname.
 2008-02-18 15:42:43 +00:00
Todd C. Miller
229b231461 document role and type defaults for SELinux 2008-02-17 13:04:45 +00:00
Todd C. Miller
0fc0e3c86d Add and document the %p escape in the password prompt. 
Based on a patch from Patrick Schoenfeld.
 2008-01-05 23:59:28 +00:00
Todd C. Miller
74c5dc4fad Add passprompt_override flag to sudoers that will cause the prompt 
to be overridden in all cases.  This flag is also set when the
user specifies the -p flag.
 2007-12-02 17:13:48 +00:00
Todd C. Miller
f9f4aca556 Add support for runas groups. This allows the user to run a command 
with a different effective group.  If the -g option is specified
without -u the command will be run as the current user (only the
group will change).  the -g and -u options may be used together.
TODO: implement runas group for ldap
      improve runas group documentation
      add testsudoers support
 2007-11-21 20:12:00 +00:00
Todd C. Miller
c9f393e4de document that ALL implies SETENV 2007-11-21 19:26:06 +00:00
Todd C. Miller
aaacf16ee0 Defaults lines may be associated with lists of users, hosts, commands 
and runas users, not just single entries.
 2007-08-27 19:51:58 +00:00
Todd C. Miller
94922dbae5 Users may now consist of a uid. 2007-08-22 22:55:46 +00:00
Todd C. Miller
317e600f41 Remove monitor support until there is a versino of systrace that 
uses a lookaside buffer (or we have a better mechanism to use).
 2007-08-15 15:20:01 +00:00
Todd C. Miller
d65602ca6f Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki 2007-08-13 16:29:25 +00:00
Todd C. Miller
0a96fe4076 Add some missing markup 
Update copyright
 2007-08-13 16:23:14 +00:00
Todd C. Miller
6c2448ed2a Adjust list indentation 2007-08-07 00:33:04 +00:00
Todd C. Miller
a08b9a1072 add missing over/back 2007-07-29 23:21:37 +00:00
Todd C. Miller
c3a1e75b06 Change FILES section to use =item 2007-07-29 23:09:23 +00:00
Todd C. Miller
2e147dc73b Use file markup for paths in the FILES section 2007-07-26 20:35:53 +00:00
Todd C. Miller
e5cc89e01b Don't capitalize sudo/visudo 2007-07-26 14:04:44 +00:00
Todd C. Miller
b925712f94 Sort sudoers options; based on a diff from Igor Sobrado. 2007-07-26 11:28:45 +00:00
Todd C. Miller
d947abaa35 Use 8 and 5 instead of @mansectsu@ and @mansectform@ since the latter 
confuses pod2man.  The Makefile rules for the .man.in file will add
@mansectsu@ and @mansectform@ back in after pod2man is done anyway.
 2007-07-25 20:19:37 +00:00
Todd C. Miller
5c6880f1ef Substitute value of path_info into sudoers man page. 2007-07-22 22:43:28 +00:00
Todd C. Miller
87a95bb3a6 Allow user to set environment variables on the command line as long 
as they are allowed by env_keep and env_check.  Ie: apply the same
restrictions as normal environment variables.
TODO: deal with secure_path
 2007-07-09 17:22:55 +00:00
Todd C. Miller
95df3fa678 Move sudoers defaults parameters into their own section. 2007-07-06 13:33:47 +00:00
Todd C. Miller
879c46e4dd Add support for setting environment variables on the command line. 
This is only allowed if the setenv sudoers options is enabled or if
the command is prefixed with the SETENV tag.
 2007-06-23 23:58:54 +00:00
Todd C. Miller
459b9cb1dd fix typo 2007-06-19 21:27:14 +00:00
Todd C. Miller
a922ff68ac Update descriptions of env_keep and env_check to match current reality. 2007-06-19 00:33:55 +00:00
Todd C. Miller
3f2230617e No commercial support for now. 2007-06-12 13:21:40 +00:00
Todd C. Miller
0ea35c0d32 Attempt to clarify the bit talking about network numbers w/o netmasks. 2007-04-24 18:44:19 +00:00
Todd C. Miller
7a96eb86e6 Fix typos; from Jason McIntyre. 2007-02-06 18:25:35 +00:00
Todd C. Miller
2c3be532a0 Fix typo; Toby Peterson 2005-08-15 00:32:08 +00:00