Todd C. Miller 5b51b7f11a Fix "sudo -l command" in the LDAP and SSS backends when the command ...

is not allowed.

2016-08-29 10:04:24 -06:00

..

auth

Return PAM_CONV_ERR from the conversation function if getpass returns

2016-06-01 14:48:31 -06:00

po

sync with translationproject.org

2016-08-21 19:23:52 -06:00

regress

Add regress for check_defaults() use-after-free bug.

2016-08-25 08:33:07 -06:00

aixcrypt.exp

…

alias.c

There's no need to conditionalize the #include <unistd.h>, we require

2015-07-02 09:08:28 -06:00

audit.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

base64.c

Make base64 decoding table-driven.

2016-06-01 12:43:02 -06:00

boottime.c

Sprinkle debugging for boottime.

2015-07-09 10:10:34 -06:00

bsm_audit.c

Add target for "make splint". A few files need extra guards to avoid

2015-05-21 11:07:13 -06:00

bsm_audit.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

check.c

Fix potential double free of the cookie when sudo is suspended at

2015-09-21 15:07:00 -06:00

check.h

Lock individual records in the timestamp file instead of the entire

2015-09-07 06:06:08 -06:00

def_data.c

Make the behavior when we cannot write to a log or audit file

2016-08-17 07:22:51 -06:00

def_data.h

Make the behavior when we cannot write to a log or audit file

2016-08-17 07:22:51 -06:00

def_data.in

Make the behavior when we cannot write to a log or audit file

2016-08-17 07:22:51 -06:00

defaults.c

Use sudo_strsplit() instead of doing the equivalent manually.

2016-08-26 11:07:19 -06:00

defaults.h

Avoid passing around struct defaults when it is not needed. As a

2016-08-08 20:09:59 -06:00

editor.c

Fix memory leaks in resolve_editor() in the error path.

2016-05-06 09:23:22 -06:00

env.c

Avoid a false positive. Coverity CID 104056.

2016-05-05 15:54:06 -06:00

find_path.c

There's no need to conditionalize the #include <unistd.h>, we require

2015-07-02 09:08:28 -06:00

gc.c

Fix logic inversion in sudoers_gc_remove(), currently unused.

2016-05-07 04:33:45 -06:00

getdate.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

getdate.y

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

getspwuid.c

There's no need to conditionalize the #include <unistd.h>, we require

2015-07-02 09:08:28 -06:00

goodpath.c

There's no need to conditionalize the #include <unistd.h>, we require

2015-07-02 09:08:28 -06:00

gram.c

new_digest was prototyped as static but not explicitly declared

2016-06-27 06:00:11 -06:00

gram.h

Do not follow symbolic links in sudoedit by default. This behavior

2015-08-06 13:20:01 -06:00

gram.y

new_digest was prototyped as static but not explicitly declared

2016-06-27 06:00:11 -06:00

group_plugin.c

Load sudoers group plugin via an early callback.

2016-08-09 13:14:31 -06:00

hexchar.c

Go back to a 2 args debug_decl and just use the "default" instance,

2015-02-01 08:24:49 -07:00

ins_2001.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ins_classic.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ins_csops.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ins_goons.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

insults.h

Add definition of nitems for those without it and use it throughout.

2016-06-23 10:58:07 -06:00

interfaces.c

Add some debugging printfs when malloc fails and we don't have an

2015-07-14 15:28:01 -06:00

interfaces.h

Use non-exiting allocatings in the sudoers plugin.

2015-06-17 06:49:59 -06:00

iolog_path.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

iolog.c

Move the ignoring of I/O log plugin errors into the I/O log plugin

2016-08-17 14:38:00 -06:00

iolog.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

ldap.c

Fix "sudo -l command" in the LDAP and SSS backends when the command

2016-08-29 10:04:24 -06:00

linux_audit.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

linux_audit.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

locale.c

Move sudoers locale callback function to locale.c and user it in

2016-07-20 14:16:00 -06:00

logging.c

Avoid duplicate warnings when we cannot write to the log file.

2016-08-17 14:51:20 -06:00

logging.h

Add forward decl of union sudo_defs_val to silence a gcc warning.

2016-07-20 16:39:26 -06:00

logwrap.c

Check fprintf() return value in writeln_wrap() and return the number

2016-05-14 19:38:23 -06:00

Makefile.in

Only remove backup files as part of "make uninstall" when INSTALL_BACKUP

2016-07-08 12:56:47 -06:00

match_addr.c

Solaris 2.6 has the prototypes for inet_pton() and inet_ntop() in

2015-07-09 10:11:25 -06:00

match.c

Set runas_pw early and adjust runaslist_matches() to deal. Since

2016-08-10 10:56:05 -06:00

mkdefaults

Now that we have proper number parsing functions we should store

2013-12-11 14:43:04 -07:00

parse.c

Set runas_pw early and adjust runaslist_matches() to deal. Since

2016-08-10 10:56:05 -06:00

parse.h

Remove unnecessary NULL checks in the RUNAS_CHANGED macro. The

2016-05-10 06:32:55 -06:00

policy.c

Make the behavior when we cannot write to a log or audit file

2016-08-17 07:22:51 -06:00

prompt.c

Check restore_perms() return value in all cases, pushing the

2015-06-25 11:12:36 -06:00

pwutil_impl.c

Cache the user's group IDs and group names separately and only

2016-08-13 16:27:44 -06:00

pwutil.c

Separate out the supplemental group ID checks from the supplemental

2016-08-13 21:12:22 -06:00

pwutil.h

Cache the user's group IDs and group names separately and only

2016-08-13 16:27:44 -06:00

redblack.c

Add some debugging printfs when malloc fails and we don't have an

2015-07-14 15:28:01 -06:00

redblack.h

Use non-exiting allocators in the redblack tree and fix the fallout.

2015-05-27 09:51:54 -06:00

set_perms.c

Cache the user's group IDs and group names separately and only

2016-08-13 16:27:44 -06:00

solaris_audit.c

Add target for "make splint". A few files need extra guards to avoid

2015-05-21 11:07:13 -06:00

solaris_audit.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

sssd.c

Fix "sudo -l command" in the LDAP and SSS backends when the command

2016-08-29 10:04:24 -06:00

sudo_nss.c

Add a struct sudo_conv_callback that contains on_suspend and on_resume

2015-09-07 06:06:08 -06:00

sudo_nss.h

display_privs() and display_cmnd() may need to return -1 on error.

2015-06-26 10:33:28 -06:00

sudo_printf.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

sudoers2ldif

Fix documented bug with duplicate role names and turn on perl warnings.

2016-02-22 11:07:33 -07:00

sudoers_debug.c

Add definition of nitems for those without it and use it throughout.

2016-06-23 10:58:07 -06:00

sudoers_debug.h

Avoid using a leading underbar in defines as they are reserved in

2015-05-21 11:13:20 -06:00

sudoers_version.h

Add directory writability checks for sudoedit.

2015-10-23 14:04:35 -06:00

sudoers.c

Make the behavior when we cannot write to a log or audit file

2016-08-17 07:22:51 -06:00

sudoers.exp

…

sudoers.h

Cache the user's group IDs and group names separately and only

2016-08-13 16:27:44 -06:00

sudoers.in

Update Debian/Ubuntu packages to be more like the vendor ones. One

2015-07-08 16:15:53 -06:00

sudoreplay.c

In replay_session() free iov at the end of the function (if needed)

2016-05-09 14:54:26 -06:00

testsudoers.c

Set runas_pw early and adjust runaslist_matches() to deal. Since

2016-08-10 10:56:05 -06:00

timestamp.c

In ts_mkdirs(), change the order from stat then mkdir, to mkdir then stat.

2016-05-06 16:37:20 -06:00

timestr.c

Only include stddef.h where it is needed.

2015-06-20 05:34:35 -06:00

toke_util.c

Fix typo introduced in last commit to fix fill_args() overflow check.

2016-07-16 20:59:59 -06:00

toke.c

Ignore a missing or insecure #includedir, it is not a fatal error.

2016-07-03 06:19:43 -06:00

toke.h

In fill_args(), replace loop that increments arg_size() with

2016-05-04 16:59:04 -06:00

toke.l

Ignore a missing or insecure #includedir, it is not a fatal error.

2016-07-03 06:19:43 -06:00

tsgetgrpw.c

Cast the return value of fcntl() to void when setting FD_CLOEXEC.

2016-05-05 16:16:24 -06:00

tsgetgrpw.h

…

visudo_json.c

There's no need to escape forward slashes in JSON output. While

2016-05-23 11:29:17 -06:00

visudo.c

Only check SUDO_USER if euid is 0

2016-07-31 18:47:36 -06:00