Commit Graph

4461 Commits

Author SHA1 Message Date
Todd C. Miller
b0c1c7979f The loop in fill_cmnd() was going one byte too far past the end, resulting
in a NUL being written immediately after the buffer end.
2008-11-08 15:40:33 +00:00
Todd C. Miller
b8742114ce add sections on tgetpass changes 2008-11-08 15:31:47 +00:00
Todd C. Miller
80ca3a9723 Treat EOF w/o newline as an error. 2008-11-08 15:30:42 +00:00
Todd C. Miller
54a07b5e8b Fix "sudo -v" when NOPASSWD is set. 2008-11-07 22:42:11 +00:00
Todd C. Miller
ff175f7f0a No longer treat an empty password at the prompt as special. To
quit out of sudo you now need to hit ^C at the password prompt.
2008-11-07 17:45:52 +00:00
Todd C. Miller
213eaef4c5 regen 2008-11-07 02:07:11 +00:00
Todd C. Miller
535ed3817c Sudo will now refuse to run if no tty is present unless the new
visiblepw sudoers flag is set.
2008-11-07 02:06:48 +00:00
Todd C. Miller
5c48403659 just use RLIM_INFINITY for RLIM_SAVED_MAX if RLIM_SAVED_MAX not defined 2008-11-06 00:42:37 +00:00
Todd C. Miller
c60c4c71c6 fix fallback value for RLIM_SAVED_MAX 2008-11-06 00:40:01 +00:00
Todd C. Miller
51fae2c9c3 Move clearing of AUTHSTATE into aixauth_cleanup. 2008-11-06 00:14:45 +00:00
Todd C. Miller
50d8974753 Unset AUTHSTATE after calling authenticate() as it may not be correct for
the user we are running the command as.
2008-11-06 00:08:24 +00:00
Todd C. Miller
8654dec3c0 Add isblank() function for systems without it. Needed for POSIX
character class matching in fnmatch.c and glob.c.
2008-11-06 00:05:24 +00:00
Todd C. Miller
b909652ad4 expound on sudo and cd 2008-11-05 16:02:44 +00:00
Todd C. Miller
e94d951ac7 regen 2008-11-04 20:52:50 +00:00
Todd C. Miller
fd4065a837 regen 2008-11-04 20:46:21 +00:00
Todd C. Miller
e2fb6dbb0f mention defauts parse order 2008-11-04 20:45:45 +00:00
Todd C. Miller
48329f0e43 Add isblank() function for systems without it. Needed for POSIX
character class matching in fnmatch.c and glob.c.
2008-11-03 18:19:14 +00:00
Todd C. Miller
49611b132a add emul/charclass.h to HDRS 2008-11-03 17:54:30 +00:00
Todd C. Miller
ffb9f65b2c checkpoint 2008-11-02 19:08:42 +00:00
Todd C. Miller
f201db90f3 Move update_defaults into defaults.c and call it properly from
visudo and testsudoers.
2008-11-02 19:06:37 +00:00
Todd C. Miller
3cb9d538f9 use zero_bytes() instead of memset() for consistency 2008-11-02 14:51:16 +00:00
Todd C. Miller
4afceb8e92 Zero out sigaction_t before use in case it has non-standard entries. 2008-11-02 14:45:31 +00:00
Todd C. Miller
1cc431c42f quiet gcc 2008-11-02 14:35:37 +00:00
Todd C. Miller
4c7a96ba14 Short circuit glob() checks if basename(pattern) != basename(command).
Refactor code that checks for a command in a directory and use it in the
glob case if the resolved pattern ends in a '/'.
2008-11-02 14:28:03 +00:00
Todd C. Miller
8ba6fa2ae3 Defer setting runas defaults until after runaspw/gr is setup. 2008-11-01 13:20:01 +00:00
Todd C. Miller
efb510a9dc Use MAXHOSTNAMELEN+1 when allocating host/domain name since some
systems do not include space for the NUL in the size.  Also manually
NUL-terminate buffer from gethostname() since POSIX is wishy-washy on this.
2008-10-29 17:26:42 +00:00
Todd C. Miller
9b5e94cef9 When setting the umask, use the union of the user's umask and the
default value set in sudoers so that we never lower the user's umask
when running a command.
2008-10-26 21:13:03 +00:00
Todd C. Miller
aa54053ad1 Don't try to read from a zero-length sudoers file. Remove the bogus
Solaris work-around for EAGAIN.  Since we now use fgetc() it should
not be a problem.
2008-10-26 20:43:59 +00:00
Todd C. Miller
ab32ede12a In update_defaults() check the return value of user*_matches against
ALLOW so we don't inadvertantly match on UNSPEC.
2008-10-25 13:22:41 +00:00
Todd C. Miller
b3349ed6bc regen man pages; no more hyphenation 2008-10-24 13:52:19 +00:00
Todd C. Miller
18e7644032 Don't error out on a zero-length sudoers file. With the advent of
#include the user could create a situation where sudo is unusable.
2008-10-24 13:49:10 +00:00
Todd C. Miller
13e2ccea68 Newer heimdal has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.  Add
configure tests to handle all the cases.
2008-10-23 16:06:23 +00:00
Todd C. Miller
cf9fa33eb3 resort ENVIRONMENT 2008-10-08 21:28:48 +00:00
Todd C. Miller
ce67f22495 document sudoers_locale 2008-10-08 21:09:07 +00:00
Todd C. Miller
7bb5160394 add SUDO_EDITOR variable that sudoedit uses in preference to VISUAL or EDITOR 2008-10-08 20:56:17 +00:00
Todd C. Miller
240339c051 In fill_cmnd(), collapse any escaped sudo-specific characters.
Allows character classes to be used in pathnames.
2008-10-08 18:27:35 +00:00
Todd C. Miller
55ed6f2c1d fix typo in non-C89 function declaration 2008-10-03 20:02:00 +00:00
Todd C. Miller
22103775cb Mention POSIX characters classes now that out fnmatch() and glob()
support them.
2008-10-03 19:56:40 +00:00
Todd C. Miller
5446cd3ae6 Replace [A-z] (which won't match in UTF8) with [A-Za-z] which is
locale agnostic.
2008-10-03 19:55:57 +00:00
Todd C. Miller
a71667af5b use __signed char if we are going to assign a negative value since on Power, char is unsigned by default 2008-10-03 14:02:31 +00:00
Todd C. Miller
99cdf6dc8d Add tests for __signed char and signed char. 2008-10-03 13:59:39 +00:00
Todd C. Miller
ad4dd3b223 Fix AIX limit setting. getuserattr() returns values in disk blocks rather
than bytes.  The default hard stack size in newer AIX is RLIM_SAVED_MAX.
From Dale King.
2008-10-03 13:19:31 +00:00
Todd C. Miller
0372d7dc2b Add character class support to included glob(3) and fnmatch(3). 2008-09-26 21:13:29 +00:00
Todd C. Miller
8c1e64b7dc Remove UCB advertising clause and some compatibility defines. 2008-09-16 12:28:35 +00:00
Todd C. Miller
8fa4ef591c Check EDITOR/VISUAL to make sure sudoedit is not re-invoking itself or sudo.
This allows one to set EDITOR to sudoedit without getting into an infinite
loop of sudoedit running itself until the path gets too big.
2008-09-14 20:07:49 +00:00
Todd C. Miller
b02daa8272 Add sudoers_locale Defaults option to override the default sudoers
locale of "C".
2008-09-14 00:45:24 +00:00
Todd C. Miller
508295b1f6 Set locale to system default except for during sudoers parse. 2008-09-13 18:09:28 +00:00
Todd C. Miller
65bce65551 Redo change in 1.34 to use pointer arithmetic. 2008-09-12 13:34:27 +00:00
Todd C. Miller
d0a44e437c Fix a dereference (read) of a freed pointer. Reported by Patrick Williams. 2008-09-11 11:06:37 +00:00
Todd C. Miller
a5245c2358 Set locale to "C" to avoid interpretation issues with character ranges
in sudoers.  May want to make the locale a sudoers option in the future.
2008-08-23 23:09:13 +00:00