Commit Graph

3902 Commits

Author SHA1 Message Date
Todd C. Miller
db084676e5 Remove an duplicate lock_file() call and add a comment. 2007-06-16 11:31:56 +00:00
Todd C. Miller
a162c16345 Add sudo 1.6.9 upgrade note. 2007-06-16 01:16:38 +00:00
Todd C. Miller
f58f637707 Solaris will return EINVAL if the buffer used in SIOCGIFCONF is too
small.  From Klaus Wagner.
2007-06-14 16:23:57 +00:00
Todd C. Miller
49cb30aa5b Redo the long syslog line splitting based on a patch from Eygene Ryabinkin.
Include memrchr() for systems without it.
2007-06-14 16:06:25 +00:00
Todd C. Miller
889f928e5f Redo the long syslog line splitting based on a patch from Eygene Ryabinkin.
Include memrchr() for systems without it.
2007-06-14 16:03:53 +00:00
Todd C. Miller
c22096ac33 Redo the long syslog line splitting based on a patch from Eygene Ryabinkin.
Include memrchr() for systems without it.
2007-06-14 16:03:53 +00:00
Todd C. Miller
1f38301a5d Since we need to be able to convert timespec to timeval for
utimes() the last 3 digits in the tv_nsec are not significant.
This makes the sudoedit file date comparison work again.
2007-06-14 11:09:49 +00:00
Todd C. Miller
4a7c81886e Add SUDO_ADD_AUTH macro to deal with adding things to AUTH_OBJS.
This deals with exclusive authentication methods in a simple way.
2007-06-13 17:41:44 +00:00
Todd C. Miller
927c229b90 mkstemp.c is BSD code too. 2007-06-12 17:08:21 +00:00
Todd C. Miller
3f2230617e No commercial support for now. 2007-06-12 13:21:40 +00:00
Todd C. Miller
7fb914ea0a cleanenv() is no more. 2007-06-11 22:27:43 +00:00
Todd C. Miller
214f7d07fb Display branch info in Changelog 2007-06-10 22:37:15 +00:00
Todd C. Miller
ce92c1cf6a Include config.h early so we have it for TIME_WITH_SYS_TIME 2007-06-10 22:18:46 +00:00
Todd C. Miller
7b73bcbb8a Fix Changelog generation and update. 2007-06-10 22:00:57 +00:00
Todd C. Miller
8ae409b8f2 Use /proc/self/fd instead of /proc/$$/fd
Move old-style fd closing into closefrom_fallback() and call
that if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
2007-06-09 11:26:43 +00:00
Todd C. Miller
fc38e7c21e o use krb5_verify_user() if available instead of doing it by hand
o use krb5_init_secure_context() if we have it
 o pass an encryption type of 0 to krb5_kt_read_service_key() instead of
   ENCTYPE_DES_CBC_MD5 to let kerberos choose.
2007-06-09 11:24:49 +00:00
Todd C. Miller
f221ba2300 Check TERM and COLORTERM for '%' and '/' characters. From Debian. 2007-06-09 11:20:59 +00:00
Todd C. Miller
4d04baaee8 Fix closefrom() substitution in the Makefile 2007-06-09 11:17:34 +00:00
Todd C. Miller
7323cbb504 Mention alternate sudo pronunciation. 2007-06-09 11:15:10 +00:00
Todd C. Miller
30e57038d4 Remove KRB5_KTNAME from environment. Allow COLORTERM. 2007-06-07 11:52:44 +00:00
Todd C. Miller
8d97321150 If we cannot get a valid service key using the default keytab it
is a fatal error.  Fixes a bug where sudo could be tricked into
allowing access when it should not by a fake KDC.
From Thor Lancelot Simon.
2007-06-07 11:22:22 +00:00
Todd C. Miller
bd221e2eb3 Update long long checks to use AC_CHECK_TYPES and to cache values. 2007-05-12 12:56:46 +00:00
Todd C. Miller
1c824fb367 Use AC_FUNC_FNMATCH instead of a homebrew fnmatch checker. We can't
use AC_REPLACE_FNMATCH since that assumes replacing with GNU fnmatch.
2007-05-12 12:07:11 +00:00
Todd C. Miller
1488331d75 Add closefrom() to LIB_OBJS not SUDO_OBJS if it is missing since we
need it for visudo now too.
2007-05-11 21:05:12 +00:00
Todd C. Miller
0ea35c0d32 Attempt to clarify the bit talking about network numbers w/o netmasks. 2007-04-24 18:44:19 +00:00
Todd C. Miller
af80a3e578 Clarify timestamp dir ownership sentence. 2007-04-24 18:25:14 +00:00
Todd C. Miller
f2433e0368 Linux PAM now defines __LINUX_PAM__, not __LIBPAM_VERSION.
From Dmitry V. Levin.
2007-04-20 16:40:59 +00:00
Todd C. Miller
3f2b6b1460 -i is also one of the mutually exclusive options to list it in the
warning message.  Noted by Chris Pepper.
2007-04-16 16:13:33 +00:00
Todd C. Miller
b679cb930b The sudoers variable is env_editor, not enveditor.
From Jean-Francois Saucier.
2007-04-12 15:18:15 +00:00
Todd C. Miller
666c85dba2 I tracked down the original author so credit him and include his
license info.
2007-03-29 17:30:22 +00:00
Todd C. Miller
7a96eb86e6 Fix typos; from Jason McIntyre. 2007-02-06 18:25:35 +00:00
Todd C. Miller
832f4c3768 Restore signal mask before calling reapchild(). Fixes a possible race
condition that could prevent sudo from properly waiting for the child.
2007-02-06 18:23:45 +00:00
Todd C. Miller
51d61f148f Don't declare pw_free() if we are not going to use it. 2007-01-31 15:02:24 +00:00
Todd C. Miller
bf500a00d6 Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD and
LDR_PRELOAD64.  The 64-bit version is not currently supported.
Remove zero_env() prototype as it no longer exists.
2007-01-31 15:00:48 +00:00
Todd C. Miller
9d6695ed43 Add "Auto-Submitted: auto-generated" line to sudo mail for rfc 3834. 2006-12-11 18:21:29 +00:00
Todd C. Miller
8d97a8d20f If the user enters ^C at the password prompt, abort instead of
trying to authenticate with an empty password (which causes an
annoying delay).
2006-09-29 14:53:42 +00:00
Todd C. Miller
cad6de7d73 Add fcntl F_CLOSEM support to closefrom(); adapted from a diff by
Darren Tucker.
2006-08-17 15:26:54 +00:00
Todd C. Miller
5994797e4d pw_free() is only used by sudo_freepwcache() so ifdef it out too. 2006-08-17 15:25:07 +00:00
Todd C. Miller
6e9df267cc Update to latest versions from cvs.savannah.gnu.org 2006-08-04 15:34:19 +00:00
Todd C. Miller
884b70acc9 Move password/group cache cleaning out of sudo_end{pw,grp}ent() so
we can close the passwd/group files early.
2006-07-31 17:51:44 +00:00
Todd C. Miller
ea8c5d5d2d Add seteuid() flavor of set_perms() for systems without setreuid()
or setresuid() that have a working seteuid().  Tested on Darwin.
2006-07-31 17:50:06 +00:00
Todd C. Miller
7276bf7b9b systrace_read() returns ssize_t 2006-07-30 19:56:11 +00:00
Todd C. Miller
be3a220f7d Fix typo, -lldap vs. -ldap; from Tim Knox. 2006-07-30 19:53:52 +00:00
Todd C. Miller
bbe7ab84b5 Fix typo; Matt Ackeret 2006-07-28 17:12:49 +00:00
Todd C. Miller
c28a289f11 Print sudoers path in -V mode for root. 2006-07-17 12:25:07 +00:00
Todd C. Miller
296680928d Do a sub tree search instead of a base search (one level in the
tree only) for sudo right objects.  This allows system administrators
to categorize the rights in a tree to make them easier to manage.
2006-06-15 18:44:42 +00:00
Todd C. Miller
b6e3fb008f fix typo 2005-12-28 18:52:45 +00:00
Todd C. Miller
7c588a0143 Convert GET_OPT and GET_OPTI to use just 2 args.
Add timelimit and bind_timelimit support; adapted from gentoo.
2005-12-04 17:16:36 +00:00
Todd C. Miller
920c811687 Support comments that start in the middle of a line 2005-11-23 23:57:10 +00:00
Todd C. Miller
bce8fbdd62 Define LDAP_DEPRECATED until we start using ldap_get_values_len() 2005-11-23 23:56:52 +00:00