Commit Graph

166 Commits

Author SHA1 Message Date
Todd C. Miller
874d84f263 Mention what SHA-2 formats are supported. 2013-04-30 11:44:01 -04:00
Todd C. Miller
7c9aaa2f2f Document that sudoers will re-use existing I/O log paths unless
they are mktemp-style with trailing X's.
2013-04-25 15:11:06 -04:00
Todd C. Miller
fa6c857112 Allow ldap_conf and ldap_secret to be specified as plugin arguments
in sudo.conf
2013-04-25 14:49:02 -04:00
Todd C. Miller
ed6d6963de Document digest support. 2013-04-17 15:42:28 -04:00
Todd C. Miller
7d3ce01a05 Document group_file and system_group plugins. 2013-03-05 16:38:35 -05:00
Todd C. Miller
8397297de5 Try to clarify that sudoedit in sudoers should not include a
leading pathname.
2013-03-05 15:06:00 -05:00
Todd C. Miller
59692ad282 Add pam_session sudoers option. 2013-02-24 06:15:37 -05:00
Todd C. Miller
05e53aea0f Use the correct the sudoers policy symbol names and undo an editor
goof committed when adding max_groups to sudo.conf.
2013-02-20 13:54:31 -05:00
Todd C. Miller
e07280eeeb Rename sample_group plugin to group_file.
Install group_file and system_group plugins by default.
2013-02-18 15:32:36 -05:00
Todd C. Miller
b9159ecb26 Add maxseq sudoers option to limit the max number of I/O log files. 2013-02-18 15:06:23 -05:00
Todd C. Miller
14bf23c4a2 Remove duplicated sudo.conf info in the sudo, sudoers and sudo_plugin
manuals and cross-reference the new sudo.conf manual.
2013-02-05 16:12:39 -05:00
Todd C. Miller
0bd79612b1 Use PLUGINDIR in the manuals and fix a typo in the sample sudo.conf. 2013-02-05 10:56:58 -05:00
Todd C. Miller
9ed1f0287e Mention that exec_background is for 1.8.7 and higher only. 2013-01-27 13:43:02 -05:00
Todd C. Miller
9479bb623b Add exec_background option in plugin command info and a sudoers
option to match.  When set, commands are started in the background
and automatically foregrounded as needed.  There are issues with
some ill-mannered programs (like Linux su) so this is not the
default.
2013-01-11 14:34:09 -05:00
Todd C. Miller
3442a0aeae Use a list for the possible values of Tag_Spec with a minimal indent
to improve readability.  In the pod version, these were =head3.
Also use .St -p1003.1 instead of just POSIX when talking about
glob() and fnmatch().
2012-10-23 10:21:24 -04:00
Todd C. Miller
05896f9cfc Mention how !foo is not the same as ALL,!foo 2012-09-26 14:55:18 -04:00
Todd C. Miller
3c34c0a4b8 Document non-Unix group support in LDAP sudoers. 2012-09-15 14:00:30 -04:00
Todd C. Miller
2d3a0d14d3 Make the capitalization consistent for .Ss and .Sx 2012-08-21 15:11:43 -04:00
Todd C. Miller
7afcef8ee8 Cosmetic changes. 2012-08-17 15:58:06 -04:00
Todd C. Miller
82115dfa17 Expand description of fqdn to talk about systems where the hosts
file is searched before DNS.
2012-08-16 10:11:04 -04:00
Todd C. Miller
d764db707a Document sudoers log format. 2012-08-13 16:50:31 -04:00
Todd C. Miller
9ad4d48046 Do not modify the .Os section when building the .man.in file from
.mdoc.in.
2012-08-09 11:47:01 -04:00
Todd C. Miller
507df9d5c1 Add a note about wildcards matching multiple words and include an
example.  Also mention that for sudoedit, a wildcard in command
line args does not match a slash.
2012-08-09 11:36:25 -04:00
Todd C. Miller
61dfad9c52 Expand section on Solaris privileges. 2012-08-02 21:11:25 -04:00
Todd C. Miller
e2d210a340 Add support for parsing an empty Runas_List, which only allows the
command to be run as the invoking user.  This can be used in
conjunction with the Solaris Privilege Set support to grant privileges
without changing the user.
2012-08-02 14:02:54 -04:00
Todd C. Miller
37cfbc8eaa Use "Sudo VERSION" as the 4th arg to .TH instead of just "VERSION" 2012-08-01 10:54:09 -04:00
Todd C. Miller
4abd2a6cf4 Merge in Solaris privilege support by Darren Moffat and John Zolnowsky 2012-07-26 13:49:21 -04:00
Todd C. Miller
d29991f41b Regen .man.in files with my private mandoc. 2012-07-25 10:34:20 -04:00
Todd C. Miller
a06f7540f7 Regen .man.in files with hacked mandoc to avoid issues with historic
nroff.
2012-07-20 14:28:41 -04:00
Todd C. Miller
90f2cfa589 Build .man.in and .cat files from .mdoc.in files.
Add new --with-man and --with-mdoc configure options.
2012-07-19 13:41:14 -04:00
Todd C. Miller
c5b374fac6 More minor costmetic fixes. 2012-07-18 09:16:09 -04:00
Todd C. Miller
6cc8c161a2 Document that other mail_* flags have precedence over mail_badpass. 2012-07-10 14:42:57 -04:00
Todd C. Miller
2e36b1ef2b Regen for sudo 1.8.6 2012-06-29 16:11:27 -04:00
Todd C. Miller
bab4f2ce71 regen 2012-03-28 14:10:18 -04:00
Todd C. Miller
96f046c1ce Rename plugin "args" to "options" 2012-03-15 12:32:31 -04:00
Todd C. Miller
b61c0ab473 regen 2012-03-14 14:20:16 -04:00
Todd C. Miller
74c4252c1b 1.8.0rc1 2011-02-21 13:36:24 -05:00
Todd C. Miller
6983d782c1 regen 2011-02-16 12:22:38 -05:00
Todd C. Miller
7f277d1558 Bump version to 1.8.0b4 2011-02-03 14:26:58 -05:00
Todd C. Miller
521ee9c539 Attempt to clarify how users and groups interact in Runas_Specs 2011-02-03 13:20:43 -05:00
Todd C. Miller
ed8e30cf6e Add --disable-env-reset configure option. 2011-01-28 16:52:25 -05:00
Todd C. Miller
180b31764e Document that sudoers_locale also affects logging and email. 2011-01-28 16:15:57 -05:00
Todd C. Miller
f7f8b6867e Update copyright year to 2011 2011-01-20 16:46:56 -05:00
Todd C. Miller
0726c8fe24 fix typo 2011-01-13 13:10:15 -05:00
Todd C. Miller
21dd6af796 Document use of mkdtemp() for iolog path teplates 2010-12-27 15:43:01 -05:00
Todd C. Miller
e3cd512bfa regen 2010-12-27 14:45:13 -05:00
Todd C. Miller
b51afe6249 Implement --with-umask-override configure flag. 2010-09-14 17:18:55 -04:00
Todd C. Miller
bd1884bb43 sudo_plugin is in section 8; from Ted Percival 2010-09-11 09:07:53 -04:00
Todd C. Miller
bdecb14ea6 Mention that 127.0.0.1 will not match, nor will localhost unless
that is the actual host name.
2010-07-21 15:19:56 -04:00
Todd C. Miller
f45f57dca5 Add commented out line to add HOME to env_keep and add a warning
to the note about the HOME change in UPGRADE.
2010-07-21 09:51:43 -04:00