Todd C. Miller 06d52c97c2 The fix for matching when no sudoRunAsUser is present in a sudoRole ...

was incomplete.  If no -g option was specified on the command line
but sudoRunAsGroup is present in a sudoRole, we need to treat the
group match as failed instead of missing.

2017-09-01 11:36:15 -06:00

..

auth

When deciding which prompt to use (PAM's or sudo's) treat the PAM

2017-07-20 16:06:47 -06:00

po

sync with translationproject.org

2017-08-20 19:07:07 -06:00

regress

Add some patterns that could result in exponential run time for

2017-05-18 13:10:52 -06:00

alias.c

Store the file/lineno for alias and userspec entries so we can

2016-11-12 19:22:32 -07:00

audit.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

base64.c

Make base64 decoding table-driven.

2016-06-01 12:43:02 -06:00

boottime.c

Sprinkle debugging for boottime.

2015-07-09 10:10:34 -06:00

bsm_audit.c

Only fall back to deprecated getaudit() on FreeBSD. Fixes compiler warnings on macOS.

2017-05-23 13:19:50 -06:00

bsm_audit.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

check.c

Sprinkle a few more debugging printfs.

2017-09-01 09:22:31 -06:00

check.h

Lock individual records in the timestamp file instead of the entire

2015-09-07 06:06:08 -06:00

def_data.c

Replace tty_tickets option with timestamp_type which can be

2017-08-01 16:14:54 -06:00

def_data.h

Replace tty_tickets option with timestamp_type which can be

2017-08-01 16:14:54 -06:00

def_data.in

Replace tty_tickets option with timestamp_type which can be

2017-08-01 16:14:54 -06:00

defaults.c

Sprinkle a few more debugging printfs.

2017-09-01 09:22:31 -06:00

defaults.h

Add support for command timeouts in sudoers. After the timeout,

2017-02-14 15:56:34 -07:00

digestname.c

Move the file digest code out of match.c and into filedigest.c.

2017-02-20 16:44:12 -07:00

editor.c

Fix memory leaks in resolve_editor() in the error path.

2016-05-06 09:23:22 -06:00

env_pattern.c

Add support for multiple '*' in env_keep, env_check and env_delete

2017-05-12 10:02:17 -06:00

env.c

Instead of hard-coding a check for bash functions in env_should_delete(),

2017-06-03 08:43:32 -06:00

filedigest_gcrypt.c

Add support for using the message digest functions in libgcrypt

2017-02-20 16:44:12 -07:00

filedigest_openssl.c

fix copyright years

2017-02-21 09:03:57 -07:00

filedigest.c

fix copyright years

2017-02-21 09:03:57 -07:00

find_path.c

There's no need to conditionalize the #include <unistd.h>, we require

2015-07-02 09:08:28 -06:00

gc.c

Fix logic inversion in sudoers_gc_remove(), currently unused.

2016-05-07 04:33:45 -06:00

gentime.c

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

getdate.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

getdate.y

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

getspwuid.c

Add support for getpwnam_shadow() on OpenBSD

2016-11-17 17:55:44 -07:00

gmtoff.c

Check for gmtime() or localtime() returning NULL and just use a

2017-02-20 16:44:02 -07:00

goodpath.c

Use sys/stat.h defines instead of bare octal values.

2016-11-07 13:36:05 -07:00

gram.c

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

gram.h

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

gram.y

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

group_plugin.c

Load sudoers group plugin via an early callback.

2016-08-09 13:14:31 -06:00

hexchar.c

Go back to a 2 args debug_decl and just use the "default" instance,

2015-02-01 08:24:49 -07:00

ins_2001.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ins_classic.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ins_csops.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ins_goons.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

insults.h

Add definition of nitems for those without it and use it throughout.

2016-06-23 10:58:07 -06:00

interfaces.c

Fix crash in visudo introduced in sudo 1.8.9 when an IP address or

2017-01-07 19:50:05 -07:00

interfaces.h

Use non-exiting allocatings in the sudoers plugin.

2015-06-17 06:49:59 -06:00

iolog_path.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

iolog.c

Log window size change events in the sudoers I/O plugin.

2017-07-12 05:47:28 -06:00

iolog.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ldap.c

The fix for matching when no sudoRunAsUser is present in a sudoRole

2017-09-01 11:36:15 -06:00

linux_audit.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

linux_audit.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

locale.c

Move sudoers locale callback function to locale.c and user it in

2016-07-20 14:16:00 -06:00

logging.c

Add syslog_pid sudoers option to log sudo's process ID when logging

2017-07-20 16:33:12 -06:00

logging.h

Add forward decl of union sudo_defs_val to silence a gcc warning.

2016-07-20 16:39:26 -06:00

logwrap.c

Check fprintf() return value in writeln_wrap() and return the number

2016-05-14 19:38:23 -06:00

Makefile.in

regen

2017-08-01 15:45:20 -06:00

match_addr.c

Solaris 2.6 has the prototypes for inet_pton() and inet_ntop() in

2015-07-09 10:11:25 -06:00

match.c

Move the file digest code out of match.c and into filedigest.c.

2017-02-20 16:44:12 -07:00

mkdefaults

Add support for command timeouts in sudoers. After the timeout,

2017-02-14 15:56:34 -07:00

mkdir_parents.c

Use debug logging instead of ignore_result() where possible.

2017-05-12 10:02:18 -06:00

parse.c

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

parse.h

avoid padding in struct cmndspec

2017-06-09 08:58:44 -06:00

policy.c

When examining environment variables or variables passed in from

2017-07-20 12:02:22 -06:00

prompt.c

Check restore_perms() return value in all cases, pushing the

2015-06-25 11:12:36 -06:00

pwutil_impl.c

Use getgrouplist_2() on macOS if available.

2016-12-13 10:39:32 -07:00

pwutil.c

Be consistent with the naming of the variable used to store the

2016-09-08 16:38:08 -06:00

pwutil.h

Cache the user's group IDs and group names separately and only

2016-08-13 16:27:44 -06:00

rcstr.c

Use HAVE_STDBOOL_H to detect systems w/o stdbool.h.

2017-03-10 11:49:07 -07:00

redblack.c

Add some debugging printfs when malloc fails and we don't have an

2015-07-14 15:28:01 -06:00

redblack.h

Use non-exiting allocators in the redblack tree and fix the fallout.

2015-05-27 09:51:54 -06:00

set_perms.c

Use debug logging instead of ignore_result() where possible.

2017-05-12 10:02:18 -06:00

solaris_audit.c

Add target for "make splint". A few files need extra guards to avoid

2015-05-21 11:07:13 -06:00

solaris_audit.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

sssd.c

The fix for matching when no sudoRunAsUser is present in a sudoRole

2017-09-01 11:36:15 -06:00

sudo_nss.c

Go back to returning true from display_privs() on non-error. This

2017-08-31 11:29:19 -06:00

sudo_nss.h

display_privs() and display_cmnd() may need to return -1 on error.

2015-06-26 10:33:28 -06:00

sudo_printf.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

sudoers2ldif

Add support for ROLE, TYPE, PRIVS, LIMITPRIVS, TIMEOUT, NOTBEFORE

2017-02-18 16:44:56 -07:00

sudoers_debug.c

Add SUDO_DEBUG_INSTANCE_ERROR return value for sudo_debug_register()

2016-11-21 06:37:23 -10:00

sudoers_debug.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

sudoers_version.h

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

sudoers.c

Replace tty_tickets option with timestamp_type which can be

2017-08-01 16:14:54 -06:00

sudoers.exp

…

sudoers.h

Add support for multiple '*' in env_keep, env_check and env_delete

2017-05-12 10:02:17 -06:00

sudoers.in

Update Debian/Ubuntu packages to be more like the vendor ones. One

2015-07-08 16:15:53 -06:00

sudoreplay.c

Fix replaying sessions that contain input logs. When the inter-record

2017-09-01 09:00:17 -06:00

testsudoers.c

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

timeout.c

set errno to ERANGE not EOVERFLOW on range error

2017-02-15 10:51:39 -07:00

timestamp.c

Replace tty_tickets option with timestamp_type which can be

2017-08-01 16:14:54 -06:00

timestr.c

strftime() was in C89 so use it unconditionally.

2017-02-18 16:23:40 -07:00

toke_util.c

Fix typo introduced in last commit to fix fill_args() overflow check.

2016-07-16 20:59:59 -06:00

toke.c

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

toke.h

In fill_args(), replace loop that increments arg_size() with

2016-05-04 16:59:04 -06:00

toke.l

Add NOTBEFORE and NOTAFTER command options similar to what is

2017-02-18 15:35:48 -07:00

tsgetgrpw.c

Cast the return value of fcntl() to void when setting FD_CLOEXEC.

2016-05-05 16:16:24 -06:00

tsgetgrpw.h

…

visudo_json.c

Move the file digest code out of match.c and into filedigest.c.

2017-02-20 16:44:12 -07:00

visudo.c

When examining environment variables or variables passed in from

2017-07-20 12:02:22 -06:00