Todd C. Miller
db084676e5
Remove an duplicate lock_file() call and add a comment.
2007-06-16 11:31:56 +00:00
Todd C. Miller
a162c16345
Add sudo 1.6.9 upgrade note.
2007-06-16 01:16:38 +00:00
Todd C. Miller
f58f637707
Solaris will return EINVAL if the buffer used in SIOCGIFCONF is too
...
small. From Klaus Wagner.
2007-06-14 16:23:57 +00:00
Todd C. Miller
49cb30aa5b
Redo the long syslog line splitting based on a patch from Eygene Ryabinkin.
...
Include memrchr() for systems without it.
2007-06-14 16:06:25 +00:00
Todd C. Miller
889f928e5f
Redo the long syslog line splitting based on a patch from Eygene Ryabinkin.
...
Include memrchr() for systems without it.
2007-06-14 16:03:53 +00:00
Todd C. Miller
c22096ac33
Redo the long syslog line splitting based on a patch from Eygene Ryabinkin.
...
Include memrchr() for systems without it.
2007-06-14 16:03:53 +00:00
Todd C. Miller
1f38301a5d
Since we need to be able to convert timespec to timeval for
...
utimes() the last 3 digits in the tv_nsec are not significant.
This makes the sudoedit file date comparison work again.
2007-06-14 11:09:49 +00:00
Todd C. Miller
4a7c81886e
Add SUDO_ADD_AUTH macro to deal with adding things to AUTH_OBJS.
...
This deals with exclusive authentication methods in a simple way.
2007-06-13 17:41:44 +00:00
Todd C. Miller
927c229b90
mkstemp.c is BSD code too.
2007-06-12 17:08:21 +00:00
Todd C. Miller
3f2230617e
No commercial support for now.
2007-06-12 13:21:40 +00:00
Todd C. Miller
7fb914ea0a
cleanenv() is no more.
2007-06-11 22:27:43 +00:00
Todd C. Miller
214f7d07fb
Display branch info in Changelog
2007-06-10 22:37:15 +00:00
Todd C. Miller
ce92c1cf6a
Include config.h early so we have it for TIME_WITH_SYS_TIME
2007-06-10 22:18:46 +00:00
Todd C. Miller
7b73bcbb8a
Fix Changelog generation and update.
2007-06-10 22:00:57 +00:00
Todd C. Miller
8ae409b8f2
Use /proc/self/fd instead of /proc/$$/fd
...
Move old-style fd closing into closefrom_fallback() and call
that if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
2007-06-09 11:26:43 +00:00
Todd C. Miller
fc38e7c21e
o use krb5_verify_user() if available instead of doing it by hand
...
o use krb5_init_secure_context() if we have it
o pass an encryption type of 0 to krb5_kt_read_service_key() instead of
ENCTYPE_DES_CBC_MD5 to let kerberos choose.
2007-06-09 11:24:49 +00:00
Todd C. Miller
f221ba2300
Check TERM and COLORTERM for '%' and '/' characters. From Debian.
2007-06-09 11:20:59 +00:00
Todd C. Miller
4d04baaee8
Fix closefrom() substitution in the Makefile
2007-06-09 11:17:34 +00:00
Todd C. Miller
7323cbb504
Mention alternate sudo pronunciation.
2007-06-09 11:15:10 +00:00
Todd C. Miller
30e57038d4
Remove KRB5_KTNAME from environment. Allow COLORTERM.
2007-06-07 11:52:44 +00:00
Todd C. Miller
8d97321150
If we cannot get a valid service key using the default keytab it
...
is a fatal error. Fixes a bug where sudo could be tricked into
allowing access when it should not by a fake KDC.
From Thor Lancelot Simon.
2007-06-07 11:22:22 +00:00
Todd C. Miller
bd221e2eb3
Update long long checks to use AC_CHECK_TYPES and to cache values.
2007-05-12 12:56:46 +00:00
Todd C. Miller
1c824fb367
Use AC_FUNC_FNMATCH instead of a homebrew fnmatch checker. We can't
...
use AC_REPLACE_FNMATCH since that assumes replacing with GNU fnmatch.
2007-05-12 12:07:11 +00:00
Todd C. Miller
1488331d75
Add closefrom() to LIB_OBJS not SUDO_OBJS if it is missing since we
...
need it for visudo now too.
2007-05-11 21:05:12 +00:00
Todd C. Miller
0ea35c0d32
Attempt to clarify the bit talking about network numbers w/o netmasks.
2007-04-24 18:44:19 +00:00
Todd C. Miller
af80a3e578
Clarify timestamp dir ownership sentence.
2007-04-24 18:25:14 +00:00
Todd C. Miller
f2433e0368
Linux PAM now defines __LINUX_PAM__, not __LIBPAM_VERSION.
...
From Dmitry V. Levin.
2007-04-20 16:40:59 +00:00
Todd C. Miller
3f2b6b1460
-i is also one of the mutually exclusive options to list it in the
...
warning message. Noted by Chris Pepper.
2007-04-16 16:13:33 +00:00
Todd C. Miller
b679cb930b
The sudoers variable is env_editor, not enveditor.
...
From Jean-Francois Saucier.
2007-04-12 15:18:15 +00:00
Todd C. Miller
666c85dba2
I tracked down the original author so credit him and include his
...
license info.
2007-03-29 17:30:22 +00:00
Todd C. Miller
7a96eb86e6
Fix typos; from Jason McIntyre.
2007-02-06 18:25:35 +00:00
Todd C. Miller
832f4c3768
Restore signal mask before calling reapchild(). Fixes a possible race
...
condition that could prevent sudo from properly waiting for the child.
2007-02-06 18:23:45 +00:00
Todd C. Miller
51d61f148f
Don't declare pw_free() if we are not going to use it.
2007-01-31 15:02:24 +00:00
Todd C. Miller
bf500a00d6
Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD and
...
LDR_PRELOAD64. The 64-bit version is not currently supported.
Remove zero_env() prototype as it no longer exists.
2007-01-31 15:00:48 +00:00
Todd C. Miller
9d6695ed43
Add "Auto-Submitted: auto-generated" line to sudo mail for rfc 3834.
2006-12-11 18:21:29 +00:00
Todd C. Miller
8d97a8d20f
If the user enters ^C at the password prompt, abort instead of
...
trying to authenticate with an empty password (which causes an
annoying delay).
2006-09-29 14:53:42 +00:00
Todd C. Miller
cad6de7d73
Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by
...
Darren Tucker.
2006-08-17 15:26:54 +00:00
Todd C. Miller
5994797e4d
pw_free() is only used by sudo_freepwcache() so ifdef it out too.
2006-08-17 15:25:07 +00:00
Todd C. Miller
6e9df267cc
Update to latest versions from cvs.savannah.gnu.org
2006-08-04 15:34:19 +00:00
Todd C. Miller
884b70acc9
Move password/group cache cleaning out of sudo_end{pw,grp}ent() so
...
we can close the passwd/group files early.
2006-07-31 17:51:44 +00:00
Todd C. Miller
ea8c5d5d2d
Add seteuid() flavor of set_perms() for systems without setreuid()
...
or setresuid() that have a working seteuid(). Tested on Darwin.
2006-07-31 17:50:06 +00:00
Todd C. Miller
7276bf7b9b
systrace_read() returns ssize_t
2006-07-30 19:56:11 +00:00
Todd C. Miller
be3a220f7d
Fix typo, -lldap vs. -ldap; from Tim Knox.
2006-07-30 19:53:52 +00:00
Todd C. Miller
bbe7ab84b5
Fix typo; Matt Ackeret
2006-07-28 17:12:49 +00:00
Todd C. Miller
c28a289f11
Print sudoers path in -V mode for root.
2006-07-17 12:25:07 +00:00
Todd C. Miller
296680928d
Do a sub tree search instead of a base search (one level in the
...
tree only) for sudo right objects. This allows system administrators
to categorize the rights in a tree to make them easier to manage.
2006-06-15 18:44:42 +00:00
Todd C. Miller
b6e3fb008f
fix typo
2005-12-28 18:52:45 +00:00
Todd C. Miller
7c588a0143
Convert GET_OPT and GET_OPTI to use just 2 args.
...
Add timelimit and bind_timelimit support; adapted from gentoo.
2005-12-04 17:16:36 +00:00
Todd C. Miller
920c811687
Support comments that start in the middle of a line
2005-11-23 23:57:10 +00:00
Todd C. Miller
bce8fbdd62
Define LDAP_DEPRECATED until we start using ldap_get_values_len()
2005-11-23 23:56:52 +00:00