Commit Graph

144 Commits

Author SHA1 Message Date
Todd C. Miller
53da5e8cdf Update copyright years. 2011-03-11 15:34:35 -05:00
Todd C. Miller
cde2cb00f0 Add "user_shell" boolean as a way to indicate to the plugin that
the -s flag was given.
2011-03-11 15:02:13 -05:00
Todd C. Miller
9660f08e32 Document noexec in sample.sudo.conf and add back noexec_file section
in sudoers with a note that it is deprecated.
2011-03-11 11:34:11 -05:00
Todd C. Miller
dc8012265f Document "Path noexec ..." in sudo.conf.
No longer document noexec_file in sudoers, it will be removed in a future
release.
2011-03-10 16:06:16 -05:00
Todd C. Miller
32cfe08a12 Make two login_class entris consistent. 2011-03-08 15:38:06 -05:00
Todd C. Miller
6968367cb1 sudoreplay can now find IDs other than %{seq} and display the session. 2011-03-05 15:34:30 -05:00
Todd C. Miller
74c4252c1b 1.8.0rc1 2011-02-21 13:36:24 -05:00
Todd C. Miller
59515a4a6d add help text to sudo, visudo and sudoreplay for the -h option 2011-02-21 11:33:36 -05:00
Todd C. Miller
315e54fd61 mention group_plugin when describing nonunix_group 2011-02-19 18:40:00 -05:00
Todd C. Miller
0122e3be28 Add missing period at end of sentence 2011-02-19 18:39:27 -05:00
Todd C. Miller
435e44808d add localstatedir; closes bug 471 2011-02-19 08:29:21 -05:00
Todd C. Miller
6983d782c1 regen 2011-02-16 12:22:38 -05:00
Todd C. Miller
b0d0e163c3 Document that a sudo.conf file with no Pligin lines uses the default
sudoers plugins.
2011-02-16 12:22:31 -05:00
Todd C. Miller
7f277d1558 Bump version to 1.8.0b4 2011-02-03 14:26:58 -05:00
Todd C. Miller
521ee9c539 Attempt to clarify how users and groups interact in Runas_Specs 2011-02-03 13:20:43 -05:00
Todd C. Miller
6fd9d853a8 Be clear about what versions of sudo support new LDAP attributes.
Fix up some formatting of attribute names.  Minor other tweaks.
2011-02-01 14:31:04 -05:00
Todd C. Miller
d9c72b224a Mention LDAP attribute compatibility status. 2011-01-30 15:43:24 -05:00
Todd C. Miller
ed8e30cf6e Add --disable-env-reset configure option. 2011-01-28 16:52:25 -05:00
Todd C. Miller
180b31764e Document that sudoers_locale also affects logging and email. 2011-01-28 16:15:57 -05:00
Todd C. Miller
f7f8b6867e Update copyright year to 2011 2011-01-20 16:46:56 -05:00
Todd C. Miller
0726c8fe24 fix typo 2011-01-13 13:10:15 -05:00
Todd C. Miller
12895f77aa Add sudoNotBefore and sudoNotAfter attributes as optional attributes
to the sudoRole object class.  From Andreas Mueller
2011-01-12 09:25:24 -05:00
Todd C. Miller
49409b7c5d Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP
LDAP_OPT_TIMEOUT.  There is no corresponding option for mozilla-derived
LDAP SDKs but we can pass the timeout parameter to ldap_search_ext_s()
or ldap_search_st() when possible.
2011-01-10 10:33:22 -05:00
Todd C. Miller
a628fee981 regen 2011-01-10 09:28:53 -05:00
Todd C. Miller
823e812723 Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility
with OpenLDAP ldap.conf files.
2011-01-10 09:27:58 -05:00
Todd C. Miller
1defd7b456 Add regression tests for iolog_path() 2011-01-06 11:05:28 -05:00
Todd C. Miller
f8de3f6327 Add support for "make Makefile" to regenerate Makefile from Makefile.in 2011-01-06 10:44:28 -05:00
Todd C. Miller
33201c04e8 Correct the default sudo.conf example 2011-01-03 13:09:03 -05:00
Todd C. Miller
25036d7a75 Pass a single I/O log file name in command_details instead of
separate dir + file parameters.
2010-12-30 17:09:01 -05:00
Todd C. Miller
3f6f61f852 Document iolog_compress in command_info 2010-12-28 12:25:06 -05:00
Todd C. Miller
21dd6af796 Document use of mkdtemp() for iolog path teplates 2010-12-27 15:43:01 -05:00
Todd C. Miller
e3cd512bfa regen 2010-12-27 14:45:13 -05:00
Todd C. Miller
05807cf5e1 Document iolog_file and supported escape sequences for sudoers.
Clarify that iolog_file can contain directories.
2010-12-27 14:43:50 -05:00
Todd C. Miller
5d59c10b95 Give the policy module fine-grained control over what the I/O plugin
logs.
2010-12-21 17:43:18 -05:00
Todd C. Miller
ad41fb497e Clarify umask option description. From Reuben Thomas. 2010-12-21 10:23:45 -05:00
Todd C. Miller
93e9635842 Pick last match in LDAP sudoers too 2010-12-20 16:37:44 -05:00
Todd C. Miller
4294e4db8b Document iolog_file, iolog_dir and use_pty 2010-12-20 16:29:08 -05:00
Todd C. Miller
b2a6984606 Make I/O log dir configurable. 2010-12-10 14:14:35 -05:00
Todd C. Miller
6c23688511 Rename io_logdir to iolog_dir 2010-12-10 14:13:51 -05:00
Todd C. Miller
3f605ebfaa Clarify ordering of entries and attributes. 2010-11-30 15:05:44 -05:00
Todd C. Miller
23df0b6fa9 Fix typo and editing goof. 2010-11-30 13:40:25 -05:00
Todd C. Miller
feb02ed406 Merge in ordered LDAP entry support from Andreas Mueller. 2010-11-30 13:34:31 -05:00
Todd C. Miller
bb4a8a4dc2 fix typo; from Michael T Hunter 2010-11-22 15:45:10 -05:00
Todd C. Miller
901ca2a12c regen 2010-11-19 16:57:21 -05:00
Todd C. Miller
ab651135d2 Mention that sudo needs "ar" to build. 2010-11-16 10:07:46 -05:00
Todd C. Miller
2b0fca31c0 Add timed entry support from Andreas Mueller. 2010-11-12 15:26:35 -05:00
Todd C. Miller
8528827500 Bump version to 1.8.0b2 2010-11-08 11:27:20 -05:00
Todd C. Miller
361cd29073 Add local copy of zlib for systems that lack it. 2010-10-28 11:17:40 -04:00
Todd C. Miller
b51afe6249 Implement --with-umask-override configure flag. 2010-09-14 17:18:55 -04:00
Todd C. Miller
bd1884bb43 sudo_plugin is in section 8; from Ted Percival 2010-09-11 09:07:53 -04:00