Commit Graph

2350 Commits

Author SHA1 Message Date
Todd C. Miller
d26184f303 updates 2000-01-17 23:45:37 +00:00
Todd C. Miller
20e44882b7 aix fix 2000-01-17 23:45:28 +00:00
Todd C. Miller
0ab8ad3c64 Crank version to 1.6.2 2000-01-17 23:42:19 +00:00
Todd C. Miller
5d24e69ba4 Crank version to 1.6.2 2000-01-17 23:11:26 +00:00
Todd C. Miller
217cae528a When using rlimit check for RLIM_INFINITY
When computing the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
2000-01-17 22:46:32 +00:00
Todd C. Miller
903bd6ecab recent changes 2000-01-17 17:32:51 +00:00
Todd C. Miller
6d6c22b4b4 Crank version to 1.6.2 2000-01-17 17:28:41 +00:00
Todd C. Miller
ccb808da31 Add 'shell_noargs' runtime option back in. We have to defer checking
until after the sudoers file has been parsed but since there are now
other options that operate that way this one can too.  Based on a patch
from bguillory@email.com.
2000-01-17 17:25:10 +00:00
Todd C. Miller
f68cc2f628 Add "listpw" and "verifypw" options. 2000-01-17 04:05:18 +00:00
Todd C. Miller
a597c4ad55 o Fix some typos/omissions
o Add section on verifypw and listpw
o Define how NOPASSWD interacts with the -v and -l flags
2000-01-17 03:57:26 +00:00
Todd C. Miller
26f5aa6f24 For HP-UX cc, add -Aa to CPPFLAGS.
For HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
2000-01-14 17:39:00 +00:00
Todd C. Miller
b1a9b1e672 In struct sudo_defs_types, move the union to the end and don't initialize
the union member since that only works with an ANSI compiler.  We set
the value of the union by hand in init_defaults() anyway.  This allows
sudo to compile on a K&R compiler again.
2000-01-14 17:29:35 +00:00
Todd C. Miller
0b59a0974d netgr_matches needs to check shost as well as host since they may be different. 2000-01-11 18:20:41 +00:00
Todd C. Miller
58fb4fc86b End on \r as well as \n 2000-01-11 18:17:50 +00:00
Todd C. Miller
038dea2d3d Update statbuf.st_mode based on SUDOERS_MODE when we are chaning from
0400 to whatever SUDOERS_MODE is (converting from the old sudoers mode).
Assumes that SUDOERS_MODE is less restrictive than 0400 which should
always be the case.
2000-01-03 04:53:35 +00:00
Todd C. Miller
625e3e46d0 Make treatment of -l and -v sane wrt NOPASSWD flags. Now allow -l w/o a passwd
if there is *any* entry for the user on the host with a NOPASSWD flag.
For -v, only allow w/o a passwd if *all* entries for the user on the host
w/ the specified runas user have the NOPASSWD flag set.
2000-01-03 04:43:33 +00:00
Todd C. Miller
df297922c5 add check target 2000-01-03 04:26:17 +00:00
Todd C. Miller
a720dfa30a Treat EOF at whatnow prompt like 'x' instead of looping. 1999-12-16 18:02:14 +00:00
Todd C. Miller
7db5ff9f55 recent changes 1999-12-10 05:09:47 +00:00
Todd C. Miller
ac67ced558 Add check for initgroups() since old SYSV lacks this. 1999-12-09 04:04:47 +00:00
Todd C. Miller
957fa7941d o Kill HAVE_FNMATCH_H
o Only define HAVE_FNMATCH if <fnmatch.h> exists.
1999-12-09 03:54:57 +00:00
Todd C. Miller
8446da40fb Don't allow insults to be enabled if the insults[] array is empty.
Otherwise there would be division by zero.
1999-12-06 06:47:19 +00:00
Todd C. Miller
423f6d5abe Don't allow insults to be enabled if the insults[] array is empty.
Otherwise there would be division by zero.
1999-12-06 06:47:13 +00:00
Todd C. Miller
baf50ee07a Don't allow insults to be enabled if the insults[] array is empty.
Otherwise there would be division by zero.
1999-12-06 06:47:13 +00:00
Todd C. Miller
06f517bace Don't care about USE_INSULTS #define since the insult stuff may be
overridden at runtime.
1999-12-06 06:25:29 +00:00
Todd C. Miller
c85a0b9bc4 Honor insults flag. 1999-12-06 06:23:29 +00:00
Todd C. Miller
b937889e88 Don't ask the user for a password if the user is not allowed to run
the command and the authenticate flag (in sudoers) is false.
1999-12-06 00:14:54 +00:00
Todd C. Miller
2eb9882339 o Whenever we get a bare newline we change to the INITIAL state.
o Enter GOTRUNAS when we see Runas_Alias

This allows #uid to work in a RunasAlias.
1999-12-06 00:05:53 +00:00
Todd C. Miller
34d793254d fix parsing of runas lists:
o oprunasuser and runaslist now return a value
o in a runasspec, if a runaslist does not return TRUE, set runas_matches to
  FALSE.  Normally, a runaslist only returns FALSE for explicitly denied
  users.
o since runaslist does not modify the stack there is no need for a push/pop
  in runasalias.
1999-12-05 19:06:09 +00:00
Todd C. Miller
12f5216097 Don't kill the user's tickets until after sudoers has been parsed
since tty_tickets and ticket_dir could be set in sudoers.
1999-12-05 02:54:20 +00:00
Todd C. Miller
c6136f9764 crank version to 1.6 1999-12-05 02:18:47 +00:00
Todd C. Miller
a183816d27 add set_fqdn() stub 1999-12-05 02:18:17 +00:00
Todd C. Miller
449f67f776 o Kill shell_noargs option, it cannot work since the command needs to
be set before sudoers is parsed.
o Fix the "set_home" sudoers option (only worked at compile time).
o Fix "fqdn" sudoers option.  We now set host/shost via set_fqdn which
  gets called when the "fqdn" option is set in sudoers.
o Move the openlog() to store_syslogfac() so this gets overridden
  correctly from the sudoers file.
1999-12-02 20:31:25 +00:00
Todd C. Miller
a6a2b564d0 SecurID support should compile now. 1999-12-02 20:21:31 +00:00
Todd C. Miller
df7c6e0bff fix some syntactic goofs 1999-11-29 01:57:05 +00:00
Todd C. Miller
96ffd91ec5 No longer need the .html files as they are generated automatically
on the web site.
1999-11-28 23:51:54 +00:00
Todd C. Miller
da14eb97d6 kill characters that made wml unhappy 1999-11-28 23:49:58 +00:00
Todd C. Miller
b47fea38a5 typo 1999-11-28 23:34:53 +00:00
Todd C. Miller
395e56a86f majordomo@cs.colorado.edu -> majordomo@courtesan.com 1999-11-25 17:05:24 +00:00
Todd C. Miller
22bb6197d4 Wrap script execution w/ /bin/sh for the benefit of ctm 1999-11-25 00:43:44 +00:00
Todd C. Miller
6713b85dc6 Make the -s flag be exclusive too. Also reorder the flags in
the exclusive usage message so they are alphabetical.
1999-11-24 03:52:34 +00:00
Todd C. Miller
1c5e61db4b make pam errors other than PAM_PERM_DENIED fatal 1999-11-23 18:27:00 +00:00
Todd C. Miller
4fd3e643bf fix typo 1999-11-23 18:07:16 +00:00
Todd C. Miller
1fe397ae5d make it clear that /etc/pam.d/sudo is required on linux 1999-11-23 18:07:02 +00:00
Todd C. Miller
dab213c3ee fix a warning on redhat and spew an error if pam_authenticate() returns an error other than AUTH_SUCCESS or PAM_PERM_DENIED 1999-11-23 18:06:45 +00:00
Todd C. Miller
1f0fa1814b Be very clear that the password required is the user's not root's 1999-11-23 05:43:16 +00:00
Todd C. Miller
c977b43ca6 add sample.syslog.conf to DISTFILES and BINFILES 1999-11-20 02:04:12 +00:00
Todd C. Miller
93cda3a23d updates from Brian Jackson + some formatting 1999-11-19 00:13:56 +00:00
Todd C. Miller
c7dc5c099a o One RUNSon update
o Changes for automating real binary releases
1999-11-18 02:39:50 +00:00
Todd C. Miller
5e742c68d3 Add bindist target 1999-11-18 02:38:58 +00:00