isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
7,772 Commits 1 Branch 0 Tags
f9af2bc99e4b895b6b5650114dd7186b70eef8a5
Commit Graph

7772 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Todd C. Miller
f9af2bc99e Correct SECURE_PATH comment. 2015-02-20 06:30:41 -07:00
Todd C. Miller
93b52daaba Sudo 1.8.13 2015-02-20 06:29:41 -07:00
Todd C. Miller
be8dbeb22e Avoid using HOST_NAME_MAX directly and use sysconf(_SC_HOST_NAME_MAX) 
instead.
 2015-02-19 20:28:02 -07:00
Todd C. Miller
9b514ed83c Historically, crypt() returned the empty string on error, which 
ensured that crypt("", "") would return "", which supported matcing
empty encrypted passwords with no additional code.  Some modern
versions of crypt() (such as glibc) return NULL on error so we need
an explicit test to match an empty plaintext password and an empty
encrypted password.
 2015-02-19 14:17:57 -07:00
Todd C. Miller
615aee9d1e Sort tags lexically in the sudoers manual 2015-02-19 10:13:25 -07:00
Todd C. Miller
45548cf049 Add support for MAIL and NOMAIL command tags to toggle mail sending 
behavior on a per-command (or Cmnd_Alias) basis.
 2015-02-19 10:02:20 -07:00
Todd C. Miller
53ac30b63a Add mail_all_cmnds to always mail when a user runs a command (or 
tries to) including sudoedit.  The mail_always flag goes back to
its old semantic of always mailing when sudo is run.
 2015-02-15 20:30:11 -07:00
Todd C. Miller
8bb5897091 All modern systems should have LINE_MAX. 2015-02-19 09:59:25 -07:00
Todd C. Miller
96eddddc12 Almost no systems actually define OPEN_MAX since it is dynamic on 
modern OSes.  If sysconf(_SC_OPEN_MAX) ever fails, fall back on
_POSIX_OPEN_MAX instead.  We can assume modern systems have sysconf().
Also remove checks for strrchr() and strtoll() for which the HAVE_*
defines are no longer used.
 2015-02-19 09:59:25 -07:00
Todd C. Miller
7d1ee77136 Don't need to pass exampledir to polypkg now that it is just under 
docdir.
 2015-02-19 09:47:57 -07:00
Todd C. Miller
2ed7f2dd94 Fix packaging of the example dir. 2015-02-18 16:17:24 -07:00
Todd C. Miller
1ae2e55141 Fix mkstemps() extension handling. Sudoedit will now preserve the 
extension properly when the system libc lacks mkstemps().
 2015-02-18 06:24:31 -07:00
Todd C. Miller
166db8eeb4 Use weak symbols for sudo_warn_gettext() and sudo_warn_strerror() 
so distros using "-Wl,--no-undefined" in LDFLAGS don't run into
problems.
 2015-02-17 06:42:10 -07:00
Todd C. Miller
8cae9876f3 Include unistd.h in siglist.c and signame.c to get gid_t which 
is used by sudo_compat.h.  Bug #686
 2015-02-17 06:21:06 -07:00
Todd C. Miller
915e08eecc Minor change in description of TZ path handling. 2015-02-10 13:39:03 -07:00
Todd C. Miller
117a30face Move example dir under the doc dir to conform to Debian guidelines. 
Bug #682.
 2015-02-10 09:50:09 -07:00
Todd C. Miller
00f663d54d Document that a leading ':' is skipped when checking TZ for a 
fully-qualified path name.
 2015-02-10 09:37:10 -07:00
Todd C. Miller
9669abdafd Typo. 2015-02-09 16:21:52 -07:00
Todd C. Miller
0414ea4579 Fix typos. 2015-02-09 11:39:28 -07:00
Todd C. Miller
2e32bb10fe Fix compilation on systems w/o __dso_public 2015-02-09 08:52:19 -07:00
Todd C. Miller
9206ba54c5 Russian translation for sudoers from translationproject.org. 2015-02-07 07:47:39 -07:00
Todd C. Miller
cecdd7e728 Russian translation for sudoers from translationproject.org. 2015-02-06 15:28:04 -07:00
Todd C. Miller
3eb9a854d8 Add check for getresuid() declaration, which may be missing on HP-UX. 
When checking for getdomainname() prototype, look in netdb.h too.
 2015-02-06 11:33:30 -07:00
Todd C. Miller
c3c28773f5 Sanity check the TZ environment variable by special casing it in 
env_check.  The --with-tzdir configure option can be used to
specify the zoneinfo directory if configure doesn't find it.
 2015-02-06 11:01:05 -07:00
Todd C. Miller
de11816198 Mention crash fixes. 2015-02-06 10:56:52 -07:00
Todd C. Miller
0008747bef Bail with usage() early if argc <= 0. 2015-02-06 09:17:39 -07:00
Todd C. Miller
c299cdd665 Remove extraneous casts of node->data (which is void *). 2015-02-05 15:01:25 -07:00
Todd C. Miller
5218f74e86 Add Stephane Chazelas 2015-02-05 14:57:04 -07:00
Todd C. Miller
cebd92a88e Fix a potential crash when getpwnam() of the running user fails 
and we don't replace the negative cached entry with a faked up one.
From Stephane Chazelas
 2015-02-05 11:17:26 -07:00
Todd C. Miller
67eba7e534 Don't assume argv[0] is set without first checking argc. 2015-02-05 11:17:25 -07:00
Todd C. Miller
b727d4309c Handle sudo_get_grlist() returning NULL which can happen if 
getgrouplist() fails even after allocating the appropriate amount
of memory.  From Stephane Chazelas
 2015-02-05 11:17:24 -07:00
Todd C. Miller
6d71b488b6 Call setprogname("sudo") if getprogname() returns NULL or the empty 
string.
 2015-02-05 11:17:24 -07:00
Todd C. Miller
88f79588e0 Remove configure checks for strrchr() and strtoll() for which the 
HAVE_* defines are no longer used.
 2015-02-05 11:17:22 -07:00
Todd C. Miller
a3435e7d12 Require POSIX regular expression support for sudoreplay. 2015-02-05 11:16:06 -07:00
Todd C. Miller
1e30824a1a The plugin no longer needs to call initprogname() now that it links 
with the same libsudo_util as sudo.
 2015-02-05 11:08:55 -07:00
Todd C. Miller
1bb633a210 Check whether getdomainname(), innetgr(), setresuid() and setresgid() 
are declared and add prototypes in sudo_compat.h as needed.
 2015-02-05 11:08:55 -07:00
Todd C. Miller
3f82c8e578 Add /usr/local/share/examples/ directory to parentdirs so it is 
explicitly added to the package.
 2015-02-04 09:38:25 -07:00
Todd C. Miller
ed4ffa6265 Don't send mail about pseudo-command failure unless it is an 
authentication failure.
 2015-02-02 15:01:06 -07:00
Todd C. Miller
dfb369198a Sync with translationproject.org 2015-02-04 06:28:31 -07:00
Todd C. Miller
d1ce08369a Sync with translationproject.org 2015-02-04 06:23:57 -07:00
Todd C. Miller
2033be83c6 Regen with yacc skeleton that the clang analyzer doesn't complain about. 2015-02-03 15:58:09 -07:00
Todd C. Miller
a9bf105eda Use stdint.h to get SIZE_MAX as inttypes.h on some pre-C99 HP-UX 
systems doesn't include stdint.h itself.
 2015-02-03 10:00:30 -07:00
Todd C. Miller
a17d562fdb SIZE_MAX may be in limits.h on pre-C99 compilers. 2015-02-03 07:33:26 -07:00
Todd C. Miller
f2a554f297 Add missing prototypes for usrinfo() and setauthdb() for AIX. 2015-02-03 07:33:25 -07:00
Todd C. Miller
536c83cec3 Solaris uses sysinfo(SI_SRPC_DOMAIN) instead of getdomainname() to 
get the host's NIS domain.
 2015-02-03 07:33:24 -07:00
Todd C. Miller
7fdbbf16a4 Remove AC_PROG_GCC_TRADITIONAL and add AC_PROG_CC_STDC since we 
need C99.
 2015-02-02 20:10:50 -07:00
Todd C. Miller
15717c518e Actually use the check for prior initialization in sudo_getdomainname(). 2015-02-02 15:38:03 -07:00
Todd C. Miller
109a866fb5 We need to add OSDEFS to CFLAGS to expose LLONG_MAX et al on glibc 
when not explicitly asking for c99.
 2015-02-02 15:36:12 -07:00
Todd C. Miller
bb19428fce Fix check for SIZE_MAX, which should be in stdint.h not limits.h. 2015-02-02 14:36:38 -07:00
Todd C. Miller
fd149e632e Need to include inttypes.h for SIZE_MAX 2015-02-02 14:20:24 -07:00