Commit Graph

30 Commits

Author SHA1 Message Date
Todd C. Miller
b13e8006ec Add check for LONG_IS_QUAD
#undef MAXINT before including hpsecurity.h to silence an HP-UX warning
Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
1999-08-22 09:59:28 +00:00
Todd C. Miller
275c2fc980 Run most of the code as root, not the invoking user. It doesn't really
gain us anything to run as the user since an attacker can just have
an setuid(0) in their egg.  Running as root solves potential problems
wrt signalling.
1999-08-20 20:37:16 +00:00
Todd C. Miller
d40947c0b0 In struct sudo_auth, turn need_root and configured into flags and
add a flag to specify an auth method is running alone (the only
one).  Pass auth methods their sudo_auth pointer, not the data
pointer.  This allows us to get at the flags and tell if we are the
only auth method.  That, in turn, allows the method to be able to
decide what should/should not be a fatal error.  Currently only
rfc1938 uses it this way, which allows us to kill the OTP_ONLY
define and te hackery that went with it.  With access to the
sudo_auth struct, methods can also get at a string holding their
cannonical name (useful in error messages).
1999-08-14 15:36:47 +00:00
Todd C. Miller
d7ebfe06d1 o Digital UNIX needs to check for *snprintf() before -ldb is added to LIBS
since -ldb includes a bogus snprintf().
o Add forward refs for struct mbuf and struct rtentry for Digital UNIX.
o Reorder some functions in snprintf.c to fix -Wall
o Add missing includes to fix more -Wall
1999-08-12 16:24:10 +00:00
Todd C. Miller
2386dc1b45 o Add a "pedentic" flag to the parser. This makes sudo warn in cases
where an alias may be used before it is defined.  Only turned on for visudo
and testsudoers.
o Add --disable-authentication option that makes sudo not require
authentication by default.  The PASSWD tag can be used to require
authentication for an entry.  We no longer overload --without-passwd.
1999-08-12 14:37:27 +00:00
Todd C. Miller
5e72465522 Missed a prompt -> user_prompt conversion 1999-08-05 09:21:38 +00:00
Todd C. Miller
ef4302501f use tgetpass 1999-08-01 10:49:41 +00:00
Todd C. Miller
0d732401f4 add 4th term to license similar to term 5 in the apache license 1999-07-31 16:19:50 +00:00
Todd C. Miller
794f537eef there was a 1995 release too 1999-07-31 16:02:13 +00:00
Todd C. Miller
234f718e49 first cut at auth API description 1999-07-24 07:35:42 +00:00
Todd C. Miller
a1e0a8180a auth API change. There is now an init method that gets run before
the main loop.  This allows auth routines to differentiate between
initialization that happens once vs. setup that needs to run each time
through the loop.
1999-07-22 19:48:27 +00:00
Todd C. Miller
8d72a57eb9 use easprintf() and evasprintf() 1999-07-22 16:23:13 +00:00
Todd C. Miller
c47edcb887 o BSD-style copyright
o Add support for NO_PASSWD/WITHOUT_PASSWD options.
o skey/opie replaced by rfc1938 code
o new struct sudo_user global
1999-07-22 12:28:08 +00:00
Todd C. Miller
53543b6b7a BSD-style copyright and use new log functions 1999-07-22 12:25:16 +00:00
Todd C. Miller
43499ea5ea o BSD-style copyright
o Use new log functiongs
o Use asprintf() and snprintf() where sensible.
1999-07-22 12:24:42 +00:00
Todd C. Miller
55ced1ba25 BSD-style copyright 1999-07-22 11:02:34 +00:00
Todd C. Miller
5d0a0e44e3 Use snprintf() where it makes sense and add a BSD-style copyright 1999-07-22 11:02:24 +00:00
Todd C. Miller
f73c3fa0d8 BSD-style copyright 1999-07-22 11:00:49 +00:00
Todd C. Miller
68ee11667f remove missed ref to PAM_nullpw 1999-07-11 20:10:25 +00:00
Todd C. Miller
d0c6d75813 pasto 1999-07-11 20:10:00 +00:00
Todd C. Miller
baadc4ede3 more or less complete now--still untested 1999-07-11 19:19:18 +00:00
Todd C. Miller
61e798ffd0 don't use user_name macro, it will go away 1999-07-11 19:09:21 +00:00
Todd C. Miller
2ad09786a1 combine skey/opie code into rfc1938.c 1999-07-11 18:42:34 +00:00
Todd C. Miller
0e40c78886 DCE authentication method; basically unchanged from dce_pwent.c 1999-07-11 11:22:16 +00:00
Todd C. Miller
ce2573d997 AIX authenticate() support. Could probably be much better 1999-07-11 10:44:59 +00:00
Todd C. Miller
d1c145f41f Fix an uninitialized variable and some cleanup. Now works (tested) 1999-07-11 10:43:42 +00:00
Todd C. Miller
c9e9f07ac3 SIA support for digital unix 1999-07-11 09:37:19 +00:00
Todd C. Miller
14854258ab don't use prompt global, it will go away 1999-07-11 09:33:01 +00:00
Todd C. Miller
2d8417f59d correct copyright years 1999-07-11 09:32:52 +00:00
Todd C. Miller
169d85ac9e New authentication API and methods 1999-07-11 00:32:11 +00:00