Commit Graph

4626 Commits

Author SHA1 Message Date
Todd C. Miller
0d7f771778 Implement %h escape in sudoers include filenames. 2009-02-21 21:49:19 +00:00
Todd C. Miller
ceaa7a38cf Need to include compat.h 2009-02-21 13:43:27 +00:00
Todd C. Miller
6491696ca6 Make audit_success and audit_failure generic functions in preparation
for integrating linux audit support.
2009-02-21 13:37:47 +00:00
Todd C. Miller
380c953e6a remove duplicate include 2009-02-21 13:06:34 +00:00
Todd C. Miller
c29881ef16 Add missing include 2009-02-20 21:13:32 +00:00
Todd C. Miller
f4bc42d637 May need to update the runas user after parsing command-based defaults. 2009-02-20 20:55:32 +00:00
Todd C. Miller
a9caa43805 Add missing pair of braces introduced with character class support. 2009-02-18 15:53:38 +00:00
Todd C. Miller
dd56fbadb4 Rename pwstars to pwfeedback 2009-02-15 20:53:49 +00:00
Todd C. Miller
d1bbb48f19 Add const to make MacOS happy. 2009-02-11 01:25:27 +00:00
Todd C. Miller
f492e53056 Add bsm audit support from Christian S.J. Peron 2009-02-11 01:18:02 +00:00
Todd C. Miller
bd05b56a8d This is new code, no DARPA notice. 2009-02-11 00:58:17 +00:00
Todd C. Miller
108d53548b Rename simple_glob -> fast_glob 2009-02-10 19:04:02 +00:00
Todd C. Miller
cfb9ec7baf g/c unused var 2009-02-10 14:39:15 +00:00
Todd C. Miller
7207b4cd60 Add simple_glob option to use fnmatch() instead of glob(). This is
useful when you need to specify patterns that reference network file
systems.
2009-02-10 13:09:14 +00:00
Todd C. Miller
5df16f86b7 add term_* proto 2009-02-10 12:58:08 +00:00
Todd C. Miller
eec86958b8 mention glob() 2009-02-10 12:51:20 +00:00
Todd C. Miller
e58df973a9 Delete any pwstars we wrote after the user hits return. That way
there is no record on screen as to the user's password length.
2009-02-09 12:59:39 +00:00
Todd C. Miller
2c8e1a45eb Move terminal setting bits from tgetpass.c to term.c 2009-02-08 15:27:51 +00:00
Todd C. Miller
38c225af03 Add pwstars sudoers option that causes sudo to print a star every
time the user presses a key.
2009-02-08 00:50:48 +00:00
Todd C. Miller
6d88a04a06 Fix up F<> brokenness for visudo.man.in and sudoers.ldap.man.in. 2009-02-03 15:10:43 +00:00
Todd C. Miller
da769cd429 For ldap_search_ext_s() the sizelimit param should be 0, not -1, to
indicate no limit.  From Mark Janssen.
2009-01-27 16:54:23 +00:00
Todd C. Miller
2d4aebed6e Comments that begin with #- should not be parsed as uids. 2009-01-17 22:36:09 +00:00
Todd C. Miller
77794f27aa Do not try to set the close on exec flag if we didn't actually open sudoers. 2009-01-09 00:13:37 +00:00
Todd C. Miller
930f3ac487 regen 2008-12-19 17:40:39 +00:00
Todd C. Miller
36ba7133c6 sync 2008-12-14 22:40:11 +00:00
Todd C. Miller
743c624954 Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user enters ^C at the
password prompt.
2008-12-09 23:48:19 +00:00
Todd C. Miller
0bfb3394bb Don't try to build sudo_noexec.so on HP-UX with the bundled compiler as
it cannot generate shared objects.
2008-12-09 21:13:02 +00:00
Todd C. Miller
761066ab02 K&R compilation fixes 2008-12-09 20:55:50 +00:00
Todd C. Miller
a93344d2b6 Use tq_foreach_fwd when checking pseudo-commands to make it clear that
we are not short-circuiting on last match.  When pwcheck is 'all',
initialize nopass to TRUE and override it with the first non-TRUE entry.
2008-12-09 13:49:55 +00:00
Todd C. Miller
96f1ea4701 Do not short circuit pseudo commands when we get a match since, depending
on the settings, we may need to examine all commands for tags.
2008-12-08 15:02:07 +00:00
Todd C. Miller
d488f2a034 regen 2008-12-03 20:58:41 +00:00
Todd C. Miller
3f92c8740f hostnames may also contain wildcards 2008-12-03 20:57:13 +00:00
Todd C. Miller
613b889eed remove stamp-* files and linux core files in clean target 2008-12-03 20:40:47 +00:00
Todd C. Miller
02a894a09c Use HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX 2008-12-02 17:30:39 +00:00
Todd C. Miller
2464ba1f58 correctly enable SIA on Digital UNIX 2008-11-26 20:10:23 +00:00
Todd C. Miller
498e00374a checkpoint 2008-11-26 01:06:15 +00:00
Todd C. Miller
bc1466519a sync 2008-11-26 01:05:53 +00:00
Todd C. Miller
b18eede622 Even if neither stdin nor stdout are ttys we may still have /dev/tty
available to us.
2008-11-25 17:01:34 +00:00
Todd C. Miller
30296d0500 regen 2008-11-24 15:09:56 +00:00
Todd C. Miller
42771539e2 fix typos; Markus Lude 2008-11-24 15:08:16 +00:00
Todd C. Miller
de66ff1afa sync 2008-11-24 12:08:55 +00:00
Todd C. Miller
13968b685c regen 2008-11-24 00:42:20 +00:00
Todd C. Miller
1c79dd537a Fix matching of a line that only consists of a comment char 2008-11-24 00:41:36 +00:00
Todd C. Miller
c3d3db62f4 MacOS pam will retry conversation function if it fails so just treat
^C as an empty password.
2008-11-22 18:17:44 +00:00
Todd C. Miller
c1a62bf88c When checking for alias use, also check defaults bindings. 2008-11-22 15:12:26 +00:00
Todd C. Miller
8811643f9e unused var 2008-11-22 15:01:25 +00:00
Todd C. Miller
b5a12039ac Replace my rbdelete with Emin's version (which actually works ;-) 2008-11-22 14:42:42 +00:00
Todd C. Miller
1939859a2e malloc debugging 2008-11-19 17:01:20 +00:00
Todd C. Miller
4ed7837195 malloc options in devel mode for visudo too 2008-11-19 12:37:05 +00:00
Todd C. Miller
68baa6346c fix compilation on non-C99; from Theo 2008-11-18 15:57:09 +00:00