Commit Graph

5849 Commits

Author SHA1 Message Date
Todd C. Miller
e4956d22e1 Add --enable-werror configure option. 2011-08-23 10:15:28 -04:00
Todd C. Miller
da95b0ea58 setgroups() proto lives in grp.h on RHEL4, perhaps others. 2011-08-23 10:14:52 -04:00
Todd C. Miller
64a57a2ee9 Use PAM by default on AIX 6 and higher. 2011-08-23 09:50:40 -04:00
Todd C. Miller
8fb53f5e4b Add new Esperanto translation from translationproject.org 2011-08-22 08:26:50 -04:00
Todd C. Miller
5a13dd2b76 Quiet an innocuous valgrind warning. 2011-08-19 09:32:25 -04:00
Todd C. Miller
bfc84b01f3 Fix expansion of strftime() escapes in log_dir and add a regress test
that exhibited the problem.
2011-08-18 13:41:40 -04:00
Todd C. Miller
367b659006 Fix "make check" return value. 2011-08-18 12:09:34 -04:00
Todd C. Miller
a6224a7342 Regen pot files 2011-08-17 11:40:14 -04:00
Todd C. Miller
27257d9cf5 Fix logic inversion in pot file up to date check. 2011-08-17 11:38:53 -04:00
Todd C. Miller
366cb19273 Add caching for gettext() checks. 2011-08-15 13:41:58 -04:00
Todd C. Miller
8f8738ff37 Better handling of libintl header and library mismatch. 2011-08-15 10:21:13 -04:00
Todd C. Miller
d56a17165a Also check sudoers gid if sudoers is group writable. 2011-08-13 18:34:37 -04:00
Todd C. Miller
6b9d80b106 If dlopen is present but libtool doesn't find it, error out since it
probably means that libtool doesn't support the system.
2011-08-12 13:00:55 -04:00
Todd C. Miller
13591340bb configure args on the command line should override builtin defaults.
Disable NLS for non-Linux/Solaris unless explicitly enabled.
2011-08-12 11:04:25 -04:00
Todd C. Miller
7f4a0d095e Fix loop that calls authenticate().
If there was an error message from authenticate(), display it.
2011-08-12 11:02:53 -04:00
Todd C. Miller
027cd522c3 Update to autoconf 2.68 and libtool 2.4 2011-08-11 14:32:23 -04:00
Todd C. Miller
c8fb440848 Update to autoconf 2.68 and libtool 2.4 2011-08-11 14:25:01 -04:00
Todd C. Miller
6b1e752524 Fix typo; OPT should be OTP 2011-08-11 13:25:08 -04:00
Todd C. Miller
179b34d9eb Rename libsudoers convenience library to libparsesudoers to avoid
libtool confusion.
2011-08-11 13:14:44 -04:00
Todd C. Miller
1adef5ec36 Add Danish sudoers translation from translationproject.org 2011-08-10 09:50:52 -04:00
Todd C. Miller
6099e1bc42 Add dedicated callback function for runas_default sudoers setting
that only sets runas_pw if no runas user or group was specified by
the user.
2011-08-10 09:02:37 -04:00
Todd C. Miller
aaaa5d05d9 Update Finish, Polish, Russian and Ukrainian translations from
translationproject.org.
2011-08-09 14:57:57 -04:00
Todd C. Miller
01ae3d4771 Go back to using a callback for runas_default to keep runas_pw in
sync.  This is needed to make per-entry runas_default settings work
with LDAP-based sudoers.  Instead of declaring it a callback in
def_data.in, sudo and testsudoers poke sudo_defs_table[] which is
a bit naughty, but avoids requiring stub functions in visudo and
the tests.
2011-08-09 14:54:42 -04:00
Todd C. Miller
53656020f7 Add check for out of date message catalogs when doing "make dist". 2011-08-05 12:33:40 -04:00
Todd C. Miller
f922678360 regen 2011-08-02 16:14:11 -04:00
Todd C. Miller
00b846cd1f Make sure compiler supports static-libgcc before using it. 2011-08-02 16:13:18 -04:00
Todd C. Miller
fecb397343 Link libsudo_noexec.la with LDLDFLAGS for -static-libgcc 2011-08-01 19:02:16 -04:00
Todd C. Miller
eb09c303a1 Add new Russian sudo translation from translationproject.org
and rebuild the other translation files.
2011-07-30 09:35:56 -04:00
Todd C. Miller
4f726ddcd5 Update Finish and Polish translations from translationproject.org 2011-07-29 16:40:29 -04:00
Todd C. Miller
8255ed69b9 Go back to escaping the command args for "sudo -i" and "sudo -s"
before calling the plugin.  Otherwise, spaces in the command args
are not treated properly.  The sudoers plugin will unescape non-spaces
to make matching easier.
2011-07-29 10:10:40 -04:00
Todd C. Miller
4f9a93f658 Fix some potential problems found by the clang static analyzer,
none serious.
2011-07-28 10:59:37 -04:00
Todd C. Miller
6365c779c0 Updated Ukranian and Chinese (simplified) po files from
translationproject.org
2011-07-28 09:08:50 -04:00
Todd C. Miller
bd6ce7ee3a Updated Polish translation from translationproject.org 2011-07-27 14:47:31 -04:00
Todd C. Miller
3606fc4419 Rebuild pot files 2011-07-27 14:23:45 -04:00
Todd C. Miller
35d26ae34f Don't try to audit failure if the runas user does not exist. We don't
have the user's command at this point so there is nothing to audit.
Add a NULL check in audit_success() and audit_failure() just to be
on the safe side.
2011-07-27 12:11:33 -04:00
Todd C. Miller
8ebf7a95cf Add -g to CFLAG for PIE builds. 2011-07-27 12:00:24 -04:00
Todd C. Miller
80138c88ba Remove fallback to per-group lookup when matching groups in sudoers.
The sudo front-end will now use getgrouplist() to get the user's
list of groups if getgroups() fails or returns zero groups so we
always have a list of the user's groups.  For systems with
mbr_check_membership() which support more that NGROUPS_MAX groups
(Mac OS X), skip the call to getgroups() and use getgrouplist() so
we get all the groups.
2011-07-25 09:17:18 -04:00
Todd C. Miller
cb63967bfd Fix setgroups() fallback code on EINVAL. 2011-07-22 15:33:33 -04:00
Todd C. Miller
1f9fb7609f Fix two PERM_INITIAL cases that were still using user_gids. 2011-07-22 15:13:35 -04:00
Todd C. Miller
043b976c69 Add Polish sudo message catalog 2011-07-22 12:56:33 -04:00
Todd C. Miller
3dde167cf6 user_group is no longer used, remove it 2011-07-22 09:29:49 -04:00
Todd C. Miller
0b91073953 Add Polish translation from translationproject.org 2011-07-20 16:55:57 -04:00
Todd C. Miller
022591f4bf Add a wrapper for setgroups() that trims off extra groups and retries
if setgroups() fails.  Also add some missing addrefs for PERM_USER
and PERM_FULL_USER.
2011-07-20 16:54:12 -04:00
Todd C. Miller
b124635b04 Instead of keeping separate groups and gids arrays, create struct
group_info and use it to store both, along with a count for each.
Cache group info on a per-user basis using getgrouplist() to get
the groups.  We no longer need special to special case the user or
list user for user_in_group() and thus no longer need to reset the
groups list when listing another user.
2011-07-20 11:58:45 -04:00
Todd C. Miller
906cede7ae Don't rely on NULL since we don't include a header for it. 2011-07-20 10:15:59 -04:00
Todd C. Miller
9e7c364ed4 Fix typo 2011-07-19 12:31:53 -04:00
Todd C. Miller
6d8788a6cd Do not shadow global sudo_mode with a local variable in set_cmnd() 2011-07-18 16:23:38 -04:00
Todd C. Miller
54bf162e60 bash 2.x doesd not support the -l flag and exits with an error if
it is specified so use --login instead.  This causes an error with
bash 1.x (which uses -login instead) but this version is hopefully
less used than 2.x.
2011-07-17 10:37:15 -04:00
Todd C. Miller
27316e6c53 Add Polish translation from translationproject.org 2011-07-17 10:12:10 -04:00
Todd C. Miller
37873051a8 Make error strings translatable. 2011-07-13 16:50:25 -04:00