isa/sudo
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
Files
b40f74cb24c5ecd377bd35b69d503d615c67b0a5
sudo/plugins/sudoers
History
Todd C. Miller f9d3f46fa7 Add intercept_allow_setid sudoers option, disabled by default. 
With this change, a shell in intercept mode cannot run a setuid or
setgid binary by default.  On most systems, the dynamic loader will
ignore LD_PRELOAD for setuid/setgid binaries such as sudo which
would effectively disable intercept mode.
2021-08-18 15:43:26 -06:00
..
auth
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
po
Update .pot files for 1.9.8.
2021-08-16 10:46:34 -06:00
regress
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
alias.c
Move reference-counted string code from sudoers to libsudo_util.
2021-04-06 14:44:19 -06:00
audit.c
log_server_accept: fix memory leak of evlog when logging a sub-command.
2021-08-14 09:11:02 -06:00
b64_decode.c
Split base64 encode/decode functions into separate source files.
2021-02-24 12:20:36 -07:00
b64_encode.c
Split base64 encode/decode functions into separate source files.
2021-02-24 12:20:36 -07:00
boottime.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
bsm_audit.c
Fix some warnings from pvs-studio
2020-08-12 13:45:09 -06:00
bsm_audit.h
Defer logging of the successful command until approval plugins have run.
2020-06-02 09:07:46 -06:00
check_aliases.c
Move reference-counted string code from sudoers to libsudo_util.
2021-04-06 14:44:19 -06:00
check.c
Add intercept_authenticate sudoers option, defaults to false.
2021-08-09 15:50:26 -06:00
check.h
Move create_admin_success_flag() to timestamp.c.
2021-02-13 15:48:21 -07:00
cvtsudoers_json.c
Add "intercept" Defaults setting to allow interception of sub-commands.
2021-08-09 15:50:25 -06:00
cvtsudoers_ldif.c
Add "intercept" Defaults setting to allow interception of sub-commands.
2021-08-09 15:50:25 -06:00
cvtsudoers_pwutil.c
Quiet some clang 10 analyzer warnings.
2020-08-07 14:22:56 -06:00
cvtsudoers.c
Move reference-counted string code from sudoers to libsudo_util.
2021-04-06 14:44:19 -06:00
cvtsudoers.h
…
def_data.c
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
def_data.h
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
def_data.in
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
defaults.c
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
defaults.h
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
digestname.c
We no longer need to include headers we don't use for sudo*.h files.
2020-05-18 06:47:04 -06:00
editor.c
resolve_editor: sudoers_gc_remove(editor) before freeing it.
2021-08-11 07:45:26 -06:00
env_pattern.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
env.c
Move env hooks into sudoers_hooks.c.
2021-02-24 19:09:46 -07:00
exptilde.c
Fix tilde expansion of paths with no user like ~/foo.
2021-02-16 13:19:58 -07:00
file.c
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
filedigest.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
find_path.c
Add some debugging info to find_path()
2021-08-02 08:57:35 -06:00
fmtsudoers_cvt.c
Split fmtsudoers.c into the parts used by sudoers plugin and cvtsudoers.
2021-02-24 17:14:51 -07:00
fmtsudoers.c
Add "intercept" Defaults setting to allow interception of sub-commands.
2021-08-09 15:50:25 -06:00
gc.c
Add garbage collection to resolve_editor().
2021-08-10 12:58:18 -06:00
gentime.c
Strict tz offset parsing.
2021-01-30 09:29:31 -07:00
getdate.c
Suppress PVS Studio false positives.
2021-01-06 14:27:09 -07:00
getdate.y
Suppress PVS Studio false positives.
2021-01-06 14:27:09 -07:00
getspwuid.c
Close the passwd db before calling getpwnam_shadow(3).
2020-09-23 08:55:43 -06:00
gmtoff.c
Fix -Wshadow warnings.
2020-09-25 15:09:45 -06:00
goodpath.c
Suppress PVS Studio false positives.
2021-01-06 14:27:09 -07:00
gram.c
Always allocate a struct sudo_command for the command, even for ALL.
2021-08-18 09:12:19 -06:00
gram.h
Add "intercept" Defaults setting to allow interception of sub-commands.
2021-08-09 15:50:25 -06:00
gram.y
Always allocate a struct sudo_command for the command, even for ALL.
2021-08-18 09:12:19 -06:00
group_plugin.c
Apply Google inclusive language guidelines.
2020-10-30 10:15:30 -06:00
hexchar.c
We no longer need to include headers we don't use for sudo*.h files.
2020-05-18 06:47:04 -06:00
ins_2001.h
…
ins_classic.h
…
ins_csops.h
…
ins_goons.h
…
ins_python.h
…
insults.h
…
interfaces.c
Move definition of INADDR_NONE from interfaces.c to net_ifs.c.
2021-06-21 10:09:32 -06:00
interfaces.h
…
iolog_path_escapes.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
iolog.c
Fix logging intercepted commands to a log server in sudoers.
2021-08-09 15:50:26 -06:00
ldap_conf.c
Update copyright year on some files where it was out of date.
2020-08-31 14:09:36 -06:00
ldap_util.c
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
ldap.c
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
linux_audit.c
Check the return value of fcntl() when setting FD_CLOEXEC.
2021-01-06 10:16:00 -07:00
linux_audit.h
Add missing const to linux_audit_command()'s argv function argument.
2020-06-03 20:22:25 -06:00
locale.c
Use libeventlog in sudoers instead of doing our own logging.
2020-10-26 16:10:40 -06:00
log_client.c
Call shutdown() on sockets before closing() if they are connected.
2021-08-11 14:08:48 -06:00
log_client.h
Fix logging intercepted commands to a log server in sudoers.
2021-08-09 15:50:26 -06:00
logging.c
For intercepted commands, log an offset into the current I/O log.
2021-08-13 16:00:00 -06:00
logging.h
Use a separate uuid for intercepted commands.
2021-08-09 15:50:26 -06:00
Makefile.in
Add garbage collection to resolve_editor().
2021-08-10 12:58:18 -06:00
match_addr.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
match_command.c
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
match_digest.c
Improve SUDOERS_NAME_MATCH support.
2021-02-28 19:51:46 -07:00
match.c
Always allocate a struct sudo_command for the command, even for ALL.
2021-08-18 09:12:19 -06:00
mkdefaults
Fix indentation of enum def_tuple.
2020-09-29 21:16:34 -06:00
parse_ldif.c
Don't close fp in sudoers_parse_ldif()
2021-02-02 15:06:38 -07:00
parse.c
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
parse.h
Add intercept_allow_setid sudoers option, disabled by default.
2021-08-18 15:43:26 -06:00
policy.c
Avoid some double frees in the fuzzer
2021-08-09 15:50:26 -06:00
prompt.c
expand_prompt: use correct strlcpy() size parameter
2021-08-09 08:19:40 -06:00
pwutil_impl.c
Support passing sudo_make_gidlist_item() an array of gids.
2021-02-22 12:33:21 -07:00
pwutil.c
Cast NULL terminator argument to char * when calling sudo_mkgrent().
2021-04-06 18:57:33 -06:00
pwutil.h
Apply spelling fixes.
2020-05-06 09:27:43 -06:00
redblack.c
Suppress PVS Studio false positives.
2021-01-06 14:27:09 -07:00
redblack.h
…
set_perms.c
Allow set_perms(PERM_INITIAL) to be called more than once.
2021-08-09 15:50:25 -06:00
solaris_audit.c
Fix Solaris and BSM audit warnings.
2020-06-04 14:41:28 -06:00
solaris_audit.h
Defer logging of the successful command until approval plugins have run.
2020-06-02 09:07:46 -06:00
sssd.c
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
starttime.c
Quiet a few harmless cppcheck warnings.
2021-01-06 13:01:10 -07:00
strlcpy_unesc.c
Add strlcpy_unescape() function to undo escaping from front-end.
2021-01-27 15:41:54 -07:00
strlist.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
strlist.h
…
strvec_join.c
Fix compilation on systems without a native strlcpy() function.
2021-01-28 09:15:36 -07:00
stubs.c
Return NOT_FOUND from the set_cmnd_path() stub since we don't set user_cmnd.
2021-02-22 19:53:08 -07:00
sudo_ldap_conf.h
Set pp_ignore_define_body=false in uncrustify config.
2020-11-23 10:47:47 -07:00
sudo_ldap.h
Make it possible to call the sudoers policy check function multiple times.
2021-08-09 15:50:25 -06:00
sudo_nss.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
sudo_nss.h
…
sudo_printf.c
Use the fallthrough attribute instead of /* FALLTHROUGH */ comments.
2020-08-01 13:10:50 -06:00
sudoers_debug.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
sudoers_debug.h
…
sudoers_hooks.c
Move env hooks into sudoers_hooks.c.
2021-02-24 19:09:46 -07:00
sudoers_version.h
Detect when a reserved word is used when declaring an alias.
2020-09-25 12:24:45 -06:00
sudoers.c
Add garbage collection to resolve_editor().
2021-08-10 12:58:18 -06:00
sudoers.exp
Export sudoers_audit symbol for compilers without symbol visibility.
2020-07-06 13:28:21 -06:00
sudoers.h
Add garbage collection to resolve_editor().
2021-08-10 12:58:18 -06:00
sudoers.in
Replace #includedir with @includedir in default sudoers file.
2020-07-06 08:45:04 -06:00
sudoreplay.c
Add support for an optional offset when parsing the ID to replay.
2021-08-13 16:00:00 -06:00
testsudoers_pwutil.c
Do not redefine system group and passwd functions for testsudoers.
2021-03-18 11:39:54 -06:00
testsudoers.c
Do not redefine system group and passwd functions for testsudoers.
2021-03-18 11:39:54 -06:00
timeout.c
Include string.h unconditionally and only use strings.h for strn?casecmp()
2020-05-18 07:59:24 -06:00
timestamp.c
Sanity check struct timespec in timestamp file.
2021-04-07 11:10:17 -06:00
timestr.c
We no longer need to include headers we don't use for sudo*.h files.
2020-05-18 06:47:04 -06:00
toke_util.c
Silence a clang analyzer false positive.
2021-02-08 16:06:08 -07:00
toke.c
Add "intercept" Defaults setting to allow interception of sub-commands.
2021-08-09 15:50:25 -06:00
toke.h
The lexer now sets an error string before returning ERROR.
2021-02-08 13:43:49 -07:00
toke.l
Add "intercept" Defaults setting to allow interception of sub-commands.
2021-08-09 15:50:25 -06:00
tsdump.c
Update copyright year on some files where it was out of date.
2020-08-31 14:09:36 -06:00
tsgetgrpw.c
Do not redefine system group and passwd functions for testsudoers.
2021-03-18 11:39:54 -06:00
tsgetgrpw.h
Do not redefine system group and passwd functions for testsudoers.
2021-03-18 11:39:54 -06:00
visudo.c
Plug memory leak in error path when sudoers cannot be opened.
2021-07-29 15:26:04 -06:00