Todd C. Miller
|
0d7f771778
|
Implement %h escape in sudoers include filenames.
|
2009-02-21 21:49:19 +00:00 |
|
Todd C. Miller
|
ceaa7a38cf
|
Need to include compat.h
|
2009-02-21 13:43:27 +00:00 |
|
Todd C. Miller
|
6491696ca6
|
Make audit_success and audit_failure generic functions in preparation
for integrating linux audit support.
|
2009-02-21 13:37:47 +00:00 |
|
Todd C. Miller
|
380c953e6a
|
remove duplicate include
|
2009-02-21 13:06:34 +00:00 |
|
Todd C. Miller
|
c29881ef16
|
Add missing include
|
2009-02-20 21:13:32 +00:00 |
|
Todd C. Miller
|
f4bc42d637
|
May need to update the runas user after parsing command-based defaults.
|
2009-02-20 20:55:32 +00:00 |
|
Todd C. Miller
|
a9caa43805
|
Add missing pair of braces introduced with character class support.
|
2009-02-18 15:53:38 +00:00 |
|
Todd C. Miller
|
dd56fbadb4
|
Rename pwstars to pwfeedback
|
2009-02-15 20:53:49 +00:00 |
|
Todd C. Miller
|
d1bbb48f19
|
Add const to make MacOS happy.
|
2009-02-11 01:25:27 +00:00 |
|
Todd C. Miller
|
f492e53056
|
Add bsm audit support from Christian S.J. Peron
|
2009-02-11 01:18:02 +00:00 |
|
Todd C. Miller
|
bd05b56a8d
|
This is new code, no DARPA notice.
|
2009-02-11 00:58:17 +00:00 |
|
Todd C. Miller
|
108d53548b
|
Rename simple_glob -> fast_glob
|
2009-02-10 19:04:02 +00:00 |
|
Todd C. Miller
|
cfb9ec7baf
|
g/c unused var
|
2009-02-10 14:39:15 +00:00 |
|
Todd C. Miller
|
7207b4cd60
|
Add simple_glob option to use fnmatch() instead of glob(). This is
useful when you need to specify patterns that reference network file
systems.
|
2009-02-10 13:09:14 +00:00 |
|
Todd C. Miller
|
5df16f86b7
|
add term_* proto
|
2009-02-10 12:58:08 +00:00 |
|
Todd C. Miller
|
eec86958b8
|
mention glob()
|
2009-02-10 12:51:20 +00:00 |
|
Todd C. Miller
|
e58df973a9
|
Delete any pwstars we wrote after the user hits return. That way
there is no record on screen as to the user's password length.
|
2009-02-09 12:59:39 +00:00 |
|
Todd C. Miller
|
2c8e1a45eb
|
Move terminal setting bits from tgetpass.c to term.c
|
2009-02-08 15:27:51 +00:00 |
|
Todd C. Miller
|
38c225af03
|
Add pwstars sudoers option that causes sudo to print a star every
time the user presses a key.
|
2009-02-08 00:50:48 +00:00 |
|
Todd C. Miller
|
6d88a04a06
|
Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in.
|
2009-02-03 15:10:43 +00:00 |
|
Todd C. Miller
|
da769cd429
|
For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
indicate no limit. From Mark Janssen.
|
2009-01-27 16:54:23 +00:00 |
|
Todd C. Miller
|
2d4aebed6e
|
Comments that begin with #- should not be parsed as uids.
|
2009-01-17 22:36:09 +00:00 |
|
Todd C. Miller
|
77794f27aa
|
Do not try to set the close on exec flag if we didn't actually open sudoers.
|
2009-01-09 00:13:37 +00:00 |
|
Todd C. Miller
|
930f3ac487
|
regen
|
2008-12-19 17:40:39 +00:00 |
|
Todd C. Miller
|
36ba7133c6
|
sync
|
2008-12-14 22:40:11 +00:00 |
|
Todd C. Miller
|
743c624954
|
Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user enters ^C at the
password prompt.
|
2008-12-09 23:48:19 +00:00 |
|
Todd C. Miller
|
0bfb3394bb
|
Don't try to build sudo_noexec.so on HP-UX with the bundled compiler as
it cannot generate shared objects.
|
2008-12-09 21:13:02 +00:00 |
|
Todd C. Miller
|
761066ab02
|
K&R compilation fixes
|
2008-12-09 20:55:50 +00:00 |
|
Todd C. Miller
|
a93344d2b6
|
Use tq_foreach_fwd when checking pseudo-commands to make it clear that
we are not short-circuiting on last match. When pwcheck is 'all',
initialize nopass to TRUE and override it with the first non-TRUE entry.
|
2008-12-09 13:49:55 +00:00 |
|
Todd C. Miller
|
96f1ea4701
|
Do not short circuit pseudo commands when we get a match since, depending
on the settings, we may need to examine all commands for tags.
|
2008-12-08 15:02:07 +00:00 |
|
Todd C. Miller
|
d488f2a034
|
regen
|
2008-12-03 20:58:41 +00:00 |
|
Todd C. Miller
|
3f92c8740f
|
hostnames may also contain wildcards
|
2008-12-03 20:57:13 +00:00 |
|
Todd C. Miller
|
613b889eed
|
remove stamp-* files and linux core files in clean target
|
2008-12-03 20:40:47 +00:00 |
|
Todd C. Miller
|
02a894a09c
|
Use HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
|
2008-12-02 17:30:39 +00:00 |
|
Todd C. Miller
|
2464ba1f58
|
correctly enable SIA on Digital UNIX
|
2008-11-26 20:10:23 +00:00 |
|
Todd C. Miller
|
498e00374a
|
checkpoint
|
2008-11-26 01:06:15 +00:00 |
|
Todd C. Miller
|
bc1466519a
|
sync
|
2008-11-26 01:05:53 +00:00 |
|
Todd C. Miller
|
b18eede622
|
Even if neither stdin nor stdout are ttys we may still have /dev/tty
available to us.
|
2008-11-25 17:01:34 +00:00 |
|
Todd C. Miller
|
30296d0500
|
regen
|
2008-11-24 15:09:56 +00:00 |
|
Todd C. Miller
|
42771539e2
|
fix typos; Markus Lude
|
2008-11-24 15:08:16 +00:00 |
|
Todd C. Miller
|
de66ff1afa
|
sync
|
2008-11-24 12:08:55 +00:00 |
|
Todd C. Miller
|
13968b685c
|
regen
|
2008-11-24 00:42:20 +00:00 |
|
Todd C. Miller
|
1c79dd537a
|
Fix matching of a line that only consists of a comment char
|
2008-11-24 00:41:36 +00:00 |
|
Todd C. Miller
|
c3d3db62f4
|
MacOS pam will retry conversation function if it fails so just treat
^C as an empty password.
|
2008-11-22 18:17:44 +00:00 |
|
Todd C. Miller
|
c1a62bf88c
|
When checking for alias use, also check defaults bindings.
|
2008-11-22 15:12:26 +00:00 |
|
Todd C. Miller
|
8811643f9e
|
unused var
|
2008-11-22 15:01:25 +00:00 |
|
Todd C. Miller
|
b5a12039ac
|
Replace my rbdelete with Emin's version (which actually works ;-)
|
2008-11-22 14:42:42 +00:00 |
|
Todd C. Miller
|
1939859a2e
|
malloc debugging
|
2008-11-19 17:01:20 +00:00 |
|
Todd C. Miller
|
4ed7837195
|
malloc options in devel mode for visudo too
|
2008-11-19 12:37:05 +00:00 |
|
Todd C. Miller
|
68baa6346c
|
fix compilation on non-C99; from Theo
|
2008-11-18 15:57:09 +00:00 |
|