Annotation of src/usr.bin/sudo/ChangeLog, Revision 1.14
1.14 ! millert 1: 2010-06-02 Todd C. Miller <Todd.Miller@courtesan.com>
! 2:
! 3: * auth/pam.c: Fix OpenPAM detection for newer versions.
! 4:
! 5: * vasgroups.c: Sync with Quest sudo git repo
! 6:
! 7: * aclocal.m4, configure, configure.in: Adapted from Quest sudo.
! 8: HP-UX ld uses +b instead of -R or -rpath.
! 9: Fix typo in libvas check.
! 10: libvas may need libdl for dlopen().
! 11: Add missing template for ENV_DEBUG.
! 12:
! 13: * README.LDAP:
! 14: Fix typos; from Quest Sudo
! 15:
! 16: * Makefile.in, configure.in:
! 17: Use value of SHELL from configure in Makefile
! 18:
! 19: 2010-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
! 20:
! 21: * env.c: Handle duplicate variables in the environment.
! 22: For unsetenv(), keep looking even after remove the first instance.
! 23: For sudo_putenv(), check for and remove dupes after we replace an
! 24: existing value.
! 25:
! 26: 2010-04-29 Todd C. Miller <Todd.Miller@courtesan.com>
! 27:
! 28: * visudo.c: Fix a crash when checking a sudoers file that has aliases
! 29: that reference themselves. Based on a diff from David Wood.
! 30:
! 31: 2010-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
! 32:
! 33: * alias.c: Fix use after free in error message when a duplicate
! 34: alias exists.
! 35:
! 36: 2010-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
! 37:
! 38: * visudo.c: Set errorfile to the sudoers path if we set parse_error
! 39: manually. This prevents a NULL dereference in printf() when
! 40: checking a sudoers file in strict mode when alias errors are present.
! 41:
1.13 millert 42: 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
43:
1.14 ! millert 44: * configure, configure.in: Fix installation of sudoers.ldap
! 45: in "make install" when --with-ldap was specified without a
! 46: directory. From Prof. Dr. Andreas Mueller
1.13 millert 47:
48: 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
49:
1.14 ! millert 50: * find_path.c: Qualify the command even if it is in the
! 51: current working directory, e.g. "./foo" instead of just
! 52: returning "foo". This removes an ambiguity between real
! 53: commands and possible pseudo-commands in command matching.
1.13 millert 54:
55: 2010-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
56:
1.14 ! millert 57: * sudoers.cat, sudoers.man.in, sudoers.pod: Add a note about
! 58: the security implications of the fast_glob option.
1.13 millert 59:
60: * memrchr.c: Remove duplicate includes
61:
62: 2010-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
63:
1.14 ! millert 64: * sudo.c: Fix a bug introduced with def_closefrom. The value
! 65: of def_closefrom already includes the +1.
1.13 millert 66:
67: 2010-03-09 Todd C. Miller <Todd.Miller@courtesan.com>
68:
1.14 ! millert 69: * match.c: When doing a glob match, short circuit if
! 70: gl.gl_pathc is 0. From Mark Kettenis.
1.13 millert 71:
1.12 millert 72: 2010-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
73:
1.14 ! millert 74: * match.c: Check for pseudo-command by looking at the first
! 75: character of the command in sudoers instead of checking the
! 76: user-supplied command for a slash.
1.12 millert 77:
1.11 millert 78: 2010-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
1.12 millert 79:
1.11 millert 80: * toke.l: Fix size arg when realloc()ing include stack.
81: From Daniel Kopecek
82:
83: * toke.l: Avoid a duplicate fclose() of the sudoers file.
84:
85: 2010-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
86:
87: * aix.c, config.h.in, configure, configure.in: Use setrlimit64(),
88: if available, instead of setrlimit() when setting AIX resource
89: limits since rlim_t is 32bits.
90:
91: * logging.c: Fix use after free when sending error messages.
92: From Timo Juhani Lindfors
93:
94: 2009-12-17 15:02 millert
95:
96: * parse.c: Fix printing of entries with multiple host entries on
97: a single line.
98:
99: 2009-12-09 16:05 millert
100:
101: * logging.c: fix typo in last commit
102:
103: 2009-12-08 22:19 millert
104:
105: * logging.c: Convert fmt_first and fmt_confd into macros.
106:
1.10 millert 107: 2009-11-23 10:56 millert
108:
109: * match.c: cmnd_matches() already deals with negation so
110: _cmndlist_matches() does not need to do so itself. Fixes a bug
111: with negated entries in a Cmnd_List.
112:
113: 2009-11-22 11:12 millert
114:
115: * sudo.c: Don't exit() from open_sudoers, just return NULL for all
116: errors.
117:
118: 2009-11-22 09:54 millert
119:
120: * toke.c, toke.l: Add missing extern def for parse_error
121:
122: 2009-11-20 19:11 millert
123:
124: * toke.c, toke.l: Avoid a parse error when #includedir doesn't find
125: any files. Closes bug #375
126:
127: 2009-11-20 19:03 millert
128:
129: * Makefile.in: Include sudo.man.pl and sudoers.man.pl in the
130: distribution tarball.
131:
132: 2009-11-04 09:42 millert
133:
134: * configure, configure.in: Fix a few typos in the descriptions;
135: from Jeff Makey Only do the check for
136: krb5_get_init_creds_opt_free() taking two arguments if we find
137: krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
138: positive when using our own krb5_get_init_creds_opt_free which
139: takes only a single argument.
140:
141: 2009-11-03 09:58 millert
142:
143: * configure, configure.in: Remove a spurious comma in the kerb5
144: bits.
145:
146: 2009-11-03 09:51 millert
147:
148: * auth/kerb5.c: Call krb5_get_init_creds_opt_init() in our emulated
149: krb5_get_init_creds_opt_alloc() for MIT kerberos.
150:
151: 2009-09-30 09:50 millert
152:
153: * sudo_edit.c: Always update the stashed mtime of the temp file
154: instead of using what we have for the original because the time
155: resolution of the filesystem the temporary is on may not match
156: that of the filesystem that holds the original. Should fix bz
157: #371 found by Philippe Levan.
158:
159: 2009-09-24 21:11 millert
160:
161: * configure, configure.in, sudoers.man.pl, sudoers.pod: Substitute
162: in default value for secure_path
163:
164: 2009-09-24 20:31 millert
165:
166: * sudo.pod: Mention that the password must be followed by a newline
167: with the -S option.
168:
169: 2009-08-07 10:21 millert
170:
171: * auth/pam.c: Set PAM_RUSER and PAM_RHOST early so they can be used
172: during authentication. Based on a patch from Jamie Beverly.
173:
174: 2009-08-07 09:25 millert
175:
176: * match.c: Close dir before returning if strlcpy() reports
177: overflow. From Martynas Venckus.
178:
179: 2009-07-18 09:55 millert
180:
181: * toke.c, toke.l: Fix expansion of %h in #include names. Fixes
182: bugzilla 363
183:
184: 2009-07-12 17:17 millert
185:
186: * mkdefaults: If no arg assume def_data.in
187:
188: 2009-07-11 21:27 millert
189:
190: * README, WHATSNEW: Update for 1.7.2
191:
192: 2009-07-11 21:12 millert
193:
194: * ChangeLog: sync
195:
1.9 millert 196: 2009-06-30 08:41 millert
197:
198: * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
199: quotes around a colon in Runas_Spec definition. From Elias
200: Benali.
201:
1.8 millert 202: 2009-06-29 09:36 millert
203:
204: * redblack.c: In rbrepair, re-color the root or the first non-block
205: node we find to be black. Re-coloring the root is probably not
206: needed but won't hurt.
207:
208: 2009-06-29 09:35 millert
209:
210: * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
211:
212: 2009-06-26 16:40 millert
213:
214: * redblack.c: When repairing the tree, don't touch the root node.
215:
216: 2009-06-25 08:44 millert
217:
218: * set_perms.c: Protect call to setegid in runas_setup with #ifdef
219: HAVE_SETEUID. Reported by Josef Schmid.
220:
1.7 millert 221: 2009-06-23 14:29 millert
222:
223: * sudoers.pod: Document that we accept env_pam-style environment
224: files
225:
226: 2009-06-23 14:24 millert
227:
228: * env.c: Adapt to accept pam_env-style /etc/environment which
229: allows shell-style lines such as: export EDITOR="/usr/bin/vi"
230:
231: 2009-06-23 12:22 millert
232:
233: * sudoers.pod: Make it clear that env_delete only works when
234: !env_reset. From Loïc Minier
235:
1.6 millert 236: 2009-06-15 17:19 millert
237:
238: * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
239: Quest
240:
241: 2009-06-15 17:18 millert
242:
243: * Makefile.in: build the .cat page in the current working dir, not
244: the src dir
245:
246: 2009-06-15 09:10 millert
247:
248: * env.c: Return EINVAL in setenv() if var is NULL or the empty
249: string to match glibc behavior.
250:
251: 2009-06-13 16:52 millert
252:
253: * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
254: AC_ARG_ENABLE
255:
256: 2009-06-11 16:29 millert
257:
258: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
259: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
260: regen
261:
262: 2009-06-09 10:08 millert
263:
264: * INSTALL: Document --with-libvas and --with-libvas-rpath
265:
266: 2009-05-29 09:43 millert
267:
268: * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
269: and key paths may be a directory or a file. However, version 5.0
270: of the SDK only seems to support using a directory. If
271: ldapssl_clientauth_init fails and the cert or key paths look like
272: they could be files, strip off the last path element and try
273: again.
274:
275: 2009-05-29 09:40 millert
276:
277: * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
278: in path to flex.
279:
280: 2009-05-26 20:49 millert
281:
282: * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
283: non-Unix group support from Quest, as reworked by me.
284:
285: 2009-05-26 20:47 millert
286:
287: * toke.c: regen
288:
289: 2009-05-26 20:46 millert
290:
291: * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
292: space.
293:
294: 2009-05-25 08:02 millert
295:
296: * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
297: fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
298: logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
299: pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
300: sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
301: testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
302: auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
303: years.
304:
305: 2009-05-24 08:33 millert
306:
307: * interfaces.c, lbuf.c: Minor fixes for Minix-3
308:
309: 2009-05-22 06:37 millert
310:
311: * set_perms.c: Handle getgroups() returning 0. Also add missing
312: check for HAVE_GETGROUPS.
313:
314: 2009-05-19 17:24 millert
315:
316: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
317: version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
318: via AC_INIT in configure.
319:
320: 2009-05-18 06:33 millert
321:
322: * set_perms.c: Remove group setting code in setusercontext case, we
323: will do it ourselves later on in runas_setup. Set the gid after
324: initgroups/setgroups is called, since on Mac OS X it seems to
325: change the egid.
326:
327: 2009-05-17 18:19 millert
328:
329: * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
330: vasgroups.c: Initial bits of non-unix group support using Quest
331: Authentication Services
332:
333: 2009-05-17 16:52 millert
334:
335: * toke.c, toke.l: Accept %:foo as a non-Unix group
336:
337: 2009-05-17 16:22 millert
338:
339: * toke.c, toke.l: Allow user/group to be double quoted in the case
340: of non-Unix groups which contain spaces.
341:
342: 2009-05-11 12:47 millert
343:
344: * match.c: Don't allow the user to specify the default runas user
345: if their sudoers entry only allows them to run as a group.
346:
347: 2009-05-10 07:59 millert
348:
349: * sudo.c: Must call audit_success before we change uids.
350:
351: 2009-05-10 07:52 millert
352:
353: * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
354: set_perm to not exit on failure and use this in the logging
355: routines.
356:
357: 2009-05-10 07:33 millert
358:
359: * parse.c: In -l mode, if the user is only allowed to run as a
360: group, display the user's name, not root's before the allowed
361: group.
362:
363: 2009-05-09 21:00 millert
364:
365: * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
366: effect of setting the runas user to root unilaterally.
367:
368: 2009-05-08 16:19 millert
369:
370: * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
371: F_SETLKW.
372:
373: 2009-05-08 13:07 millert
374:
375: * pwutil.c: Only cache by the method we fetched for pwd and grp
376: lookups. Previously we cached both by namd and id but this can
377: cause problems for entries that share the same id. Also add more
378: info in the error message in case the insert fails (which should
379: now be impossible).
380:
381: 2009-04-30 15:04 millert
382:
383: * sudoers.pod: Add a clarification from Nick Sieger
384:
385: 2009-04-25 12:49 millert
386:
387: * env.c: Inline the setting of the environment string.
388:
389: 2009-04-24 14:53 millert
390:
391: * env.c: setenv(3) in Linux treats a NUL value as the empty string
392: setenv(3) in BSD doesn't return an error if the name has '=' in
393: it, it just treats the '=' as end of string.
394:
395: 2009-04-22 16:32 millert
396:
397: * toke.c, toke.l: Not all systems have d_namlen
398:
399: 2009-04-20 13:53 millert
400:
401: * sudoers.pod: Fix up some pod2html issues.
402:
403: 2009-04-19 14:09 millert
404:
405: * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
406: from a diff from Quest Software.
407:
408: 2009-04-19 09:01 millert
409:
410: * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
411: files)
412:
413: 2009-04-19 08:56 millert
414:
415: * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
416: backup files)
417:
418: 2009-04-18 19:37 millert
419:
420: * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
421: #includedir, ignore any file containing a dot
422:
423: 2009-04-18 19:25 millert
424:
425: * Makefile.in, version.h: Bump version
426:
427: 2009-04-18 19:25 millert
428:
429: * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
430: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
431: visudo.c: Implement #includedir directive. Files in an
432: includedir are not edited by visudo unless they contain a syntax
433: error.
434:
435: 2009-04-18 12:06 millert
436:
437: * ChangeLog: sync
438:
1.5 millert 439: 2009-04-18 10:27 millert
440:
441: * WHATSNEW: Forgot umask_override
442:
443: 2009-04-18 09:25 millert
444:
445: * ChangeLog, TODO: sync
446:
447: 2009-04-16 08:22 millert
448:
449: * visudo.c: Rewind stream if we fdopen sudoers since it may not be
450: at the beginning. Set the keepopen flag on already-open files
451: too so the lexer doesn't close them out from under us.
452:
453: 2009-04-16 08:18 millert
454:
455: * visudo.c: Print the proper file name when there is a parse error
456: in an include file.
457:
458: 2009-04-11 07:45 millert
459:
460: * WHATSNEW: Sync
461:
1.4 millert 462: 2009-04-10 16:59 millert
463:
464: * configure, configure.in: Fix a warning when --without-ldap is
465: specified.
466:
467: 2009-04-05 12:25 millert
468:
469: * alias.c, parse.h, visudo.c: Store aliases that we remove during
470: check_aliases in a freelist and free them at the end so we don't
471: leak memory.
472:
473: 2009-03-28 09:30 millert
474:
475: * visudo.c: Check aliases in -c mode too.
476:
477: 2009-03-28 09:09 millert
478:
479: * alias.c, parse.h, visudo.c: Make alias_remove return the alias
480: struct instead of freeing it directly. Fixes a use after free in
481: alias_remove_recursive, the only consumer.
482:
483: 2009-03-28 09:07 millert
484:
485: * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
486: -> alias_find for consistency.
487:
488: 2009-03-27 19:29 millert
489:
490: * visudo.c: When checking for unused aliases, recurse if the alias
491: points to another alias.
492:
493: 2009-03-16 12:11 millert
494:
495: * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
496: support will be done later after some refactoring.
497:
498: 2009-03-14 12:02 millert
499:
500: * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
501:
502: 2009-03-13 21:04 millert
503:
504: * configure, configure.in: Only check for
505: ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
506: compilation with ldapux.
507:
508: 2009-03-11 20:03 millert
509:
510: * fileops.c: fix char subscript
511:
512: 2009-03-11 19:19 millert
513:
514: * Makefile.in: remove errant carriage returns
515:
516: 2009-03-11 19:01 millert
517:
518: * audit.c, env.c: fix K&R compilation
519:
520: 2009-03-11 12:12 millert
521:
522: * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
523: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
524: regen
525:
526: 2009-03-10 17:34 millert
527:
528: * config.h.in: Add missing HAVE_BSM_AUDIT
529:
530: 2009-03-10 17:21 millert
531:
532: * WHATSNEW: Add 1.7.1 features
533:
534: 2009-03-10 17:10 millert
535:
536: * INSTALL: Mention --with-netsvc
537:
538: 2009-03-10 17:08 millert
539:
540: * sudoers.ldap.pod: Document netsvc.conf support
541:
542: 2009-03-10 16:44 millert
543:
544: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
545: sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
546:
547: 2009-03-08 16:57 millert
548:
549: * configure, config.h.in, configure.in, env.c: Add
550: --enable-env-debug flag to enable environment sanity checks.
551:
552: 2009-03-08 11:51 millert
553:
554: * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
555:
556: 2009-03-07 17:10 millert
557:
558: * env.c: Only sync environ for putenv, setenv, and unsetenv. We
559: need to make sure that sudo_putenv and sudo_setenv only modify
560: env.envp, not environ.
561:
562: 2009-03-02 14:19 millert
563:
564: * env.c: Really fix UNSETENV_VOID
565:
566: 2009-03-02 14:18 millert
567:
568: * env.c: Fix unsetenv when UNSETENV_VOID
569:
570: 2009-03-02 08:00 millert
571:
572: * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
573:
574: 2009-03-02 07:36 millert
575:
576: * ldap.c: tivoli-based ldap does not have ldapssl_err2string
577:
578: 2009-03-02 07:30 millert
579:
580: * configure: regen
581:
582: 2009-03-01 16:20 millert
583:
584: * config.h.in, configure, configure.in, ldap.c: Add support for
585: Tivoli-based LDAP start TLS as seen in AIX. Untested.
586:
587: 2009-03-01 08:52 millert
588:
589: * env.c: Add sanity checks for setenv/unsetenv
590:
591: 2009-02-28 20:17 millert
592:
593: * Makefile.in: Include bsm_audit.h in the tarball
594:
595: 2009-02-28 20:00 millert
596:
597: * Makefile.in, version.h: bump version for sudo 1.7.1
598:
599: 2009-02-28 19:58 millert
600:
601: * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
602: sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
603: calls to setenv/unsetenv and provide our own
604: setenv/unsetenv/putenv that operates on own env pointer. Make
605: sync_env() inline in setenv/unsetenv/putenv functions.
606:
607: 2009-02-25 07:33 millert
608:
609: * sudo.c: Make "sudoedit -h" work as expected
610:
611: 2009-02-25 07:21 millert
612:
613: * auth/pam.c: Make sure def_prompt is always defined. This is a
614: workaround for pam configs that prompt for a password in the
615: session but don't have an auth line. A better fix is to expand
616: the sudo prompt earlier and set def_prompt to that when
617: initializing.
618:
619: 2009-02-25 06:17 millert
620:
621: * sudo.pod: Mention that the helper for -A may be graphical.
622:
623: 2009-02-25 06:16 millert
624:
625: * TROUBLESHOOTING: Document what happens if there is no tty.
626:
627: 2009-02-25 06:05 millert
628:
629: * sudo.c: cosmetic changes
630:
631: 2009-02-25 05:47 millert
632:
633: * term.c: Fix term_restore
634:
635: 2009-02-24 20:23 millert
636:
637: * sudo.c: Fix "sudo -k" with no other args
638:
639: 2009-02-24 08:04 millert
640:
641: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
642: be specified in conjunction with a command or another option that
643: may require authentication.
644:
645: 2009-02-23 09:18 millert
646:
647: * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
648: from Diego E. 'Flameeyes'
649:
650: 2009-02-23 09:15 millert
651:
652: * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
653:
654: 2009-02-21 17:03 millert
655:
656: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
657: Implement umask_override
658:
659: 2009-02-21 16:51 millert
660:
661: * toke.c: regen
662:
663: 2009-02-21 16:49 millert
664:
665: * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
666: include filenames.
667:
668: 2009-02-21 08:43 millert
669:
670: * audit.c: Need to include compat.h
671:
672: 2009-02-21 08:37 millert
673:
674: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
675: sudo.c: Make audit_success and audit_failure generic functions in
676: preparation for integrating linux audit support.
677:
678: 2009-02-21 08:06 millert
679:
680: * term.c: remove duplicate include
681:
682: 2009-02-20 16:13 millert
683:
684: * bsm_audit.c: Add missing include
685:
686: 2009-02-20 15:55 millert
687:
688: * sudo.c: May need to update the runas user after parsing
689: command-based defaults.
690:
691: 2009-02-18 10:53 millert
692:
693: * glob.c: Add missing pair of braces introduced with character
694: class support.
695:
696: 2009-02-15 15:53 millert
697:
698: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
699: Rename pwstars to pwfeedback
700:
701: 2009-02-10 20:25 millert
702:
703: * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
704:
705: 2009-02-10 20:18 millert
706:
707: * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
708: sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
709: S.J. Peron
710:
711: 2009-02-10 19:58 millert
712:
713: * term.c: This is new code, no DARPA notice.
714:
715: 2009-02-10 14:04 millert
716:
717: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
718: simple_glob -> fast_glob
719:
720: 2009-02-10 09:39 millert
721:
722: * match.c: g/c unused var
723:
724: 2009-02-10 08:09 millert
725:
726: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
727: simple_glob option to use fnmatch() instead of glob(). This is
728: useful when you need to specify patterns that reference network
729: file systems.
730:
731: 2009-02-10 07:58 millert
732:
733: * tgetpass.c: add term_* proto
734:
735: 2009-02-10 07:51 millert
736:
737: * sudoers.pod: mention glob()
738:
739: 2009-02-09 07:59 millert
740:
741: * tgetpass.c: Delete any pwstars we wrote after the user hits
742: return. That way there is no record on screen as to the user's
743: password length.
744:
745: 2009-02-08 10:27 millert
746:
747: * term.c: Move terminal setting bits from tgetpass.c to term.c
748:
749: 2009-02-07 19:50 millert
750:
751: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
752: tgetpass.c: Add pwstars sudoers option that causes sudo to print
753: a star every time the user presses a key.
754:
755: 2009-02-03 10:10 millert
756:
757: * Makefile.in: Fix up F<> brokenness for visudo.man.in and
758: sudoers.ldap.man.in.
759:
760: 2009-01-27 11:54 millert
761:
762: * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
763: not -1, to indicate no limit. From Mark Janssen.
764:
765: 2009-01-17 17:36 millert
766:
767: * toke.c, toke.l: Comments that begin with #- should not be parsed
768: as uids.
769:
770: 2009-01-08 19:13 millert
771:
772: * sudo.c: Do not try to set the close on exec flag if we didn't
773: actually open sudoers.
774:
775: 2008-12-19 12:40 millert
776:
777: * ChangeLog: regen
778:
1.3 millert 779: 2008-12-14 17:40 millert
780:
781: * TODO: sync
782:
783: 2008-12-09 18:48 millert
784:
785: * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
786: enters ^C at the password prompt.
787:
788: 2008-12-09 16:13 millert
789:
790: * configure.in, configure: Don't try to build sudo_noexec.so on
791: HP-UX with the bundled compiler as it cannot generate shared
792: objects.
793:
794: 2008-12-09 15:55 millert
795:
796: * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
797: fixes
798:
799: 2008-12-09 08:49 millert
800:
801: * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
802: it clear that we are not short-circuiting on last match. When
803: pwcheck is 'all', initialize nopass to TRUE and override it with
804: the first non-TRUE entry.
805:
806: 2008-12-08 10:02 millert
807:
808: * parse.c: Do not short circuit pseudo commands when we get a match
809: since, depending on the settings, we may need to examine all
810: commands for tags.
811:
812: 2008-12-03 15:58 millert
813:
814: * sudoers.cat, sudoers.man.in: regen
815:
816: 2008-12-03 15:57 millert
817:
818: * sudoers.pod: hostnames may also contain wildcards
819:
820: 2008-12-03 15:40 millert
821:
822: * Makefile.in: remove stamp-* files and linux core files in clean
823: target
824:
825: 2008-12-02 12:30 millert
826:
827: * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
828: HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
829:
830: 2008-11-26 15:10 millert
831:
832: * configure, configure.in: correctly enable SIA on Digital UNIX
833:
834: 2008-11-25 20:06 millert
835:
836: * TODO: checkpoint
837:
838: 2008-11-25 20:05 millert
839:
840: * ChangeLog: sync
841:
842: 2008-11-25 12:01 millert
843:
844: * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
845: ttys we may still have /dev/tty available to us.
846:
847: 2008-11-24 10:09 millert
848:
849: * sudoers.cat, sudoers.man.in: regen
850:
851: 2008-11-24 10:08 millert
852:
853: * sudoers.pod: fix typos; Markus Lude
854:
855: 2008-11-24 07:08 millert
856:
857: * ChangeLog: sync
858:
1.2 millert 859: 2008-11-23 19:42 millert
860:
861: * toke.c: regen
862:
863: 2008-11-23 19:41 millert
864:
865: * toke.l: Fix matching of a line that only consists of a comment
866: char
867:
868: 2008-11-22 13:17 millert
869:
870: * auth/pam.c: MacOS pam will retry conversation function if it
871: fails so just treat ^C as an empty password.
872:
873: 2008-11-22 10:12 millert
874:
875: * visudo.c: When checking for alias use, also check defaults
876: bindings.
877:
878: 2008-11-22 10:01 millert
879:
880: * redblack.c: unused var
881:
882: 2008-11-22 09:42 millert
883:
884: * redblack.c: Replace my rbdelete with Emin's version (which
885: actually works ;-)
886:
887: 2008-11-19 12:01 millert
888:
889: * testsudoers.c: malloc debugging
890:
891: 2008-11-19 07:37 millert
892:
893: * visudo.c: malloc options in devel mode for visudo too
894:
895: 2008-11-18 10:57 millert
896:
897: * sudo.c: fix compilation on non-C99; from Theo
898:
899: 2008-11-18 10:50 millert
900:
901: * visudo.c: fix check_aliases
902:
903: 2008-11-18 08:29 millert
904:
905: * alias.c: when destroying an alias, free the correct data pointer
906:
907: 2008-11-18 07:54 millert
908:
909: * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
910:
911: 2008-11-15 13:34 millert
912:
913: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
914: visudo.man.in: regen
915:
916: 2008-11-15 13:34 millert
917:
918: * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
919: 'option' for command line options (not flag)
920:
921: 2008-11-14 06:18 millert
922:
923: * INSTALL: Add note on configuring HP-UX pam
924:
925: 2008-11-11 13:28 millert
926:
927: * check.c, sudo.c: Move tty checks into check_user() so we only do
928: them if we actually need a password.
929:
930: 2008-11-11 12:34 millert
931:
932: * sudo.c: Don't error out if no tty or askpass unless we actually
933: need to authenticate.
934:
935: 2008-11-10 15:20 millert
936:
937: * ChangeLog: regen
938:
1.1 millert 939: 2008-11-10 08:07 millert
940:
941: * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
942: Stoeckmann
943:
944: 2008-11-09 15:18 millert
945:
946: * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
947:
948: 2008-11-09 09:15 millert
949:
950: * gram.c, toke.c: regen
951:
952: 2008-11-09 09:13 millert
953:
954: * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
955: env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
956: interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
957: logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
958: redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
959: sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
960: version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
961: visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
962: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
963: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
964: sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
965: years.
966:
967: 2008-11-09 08:48 millert
968:
969: * fnmatch.c, glob.c, emul/charclass.h: add my copyright
970:
971: 2008-11-08 10:40 millert
972:
973: * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
974: far past the end, resulting in a NUL being written immediately
975: after the buffer end.
976:
977: 2008-11-08 10:31 millert
978:
979: * UPGRADE, WHATSNEW: add sections on tgetpass changes
980:
981: 2008-11-08 10:30 millert
982:
983: * tgetpass.c: Treat EOF w/o newline as an error.
984:
985: 2008-11-07 17:42 millert
986:
987: * parse.c: Fix "sudo -v" when NOPASSWD is set.
988:
989: 2008-11-07 12:45 millert
990:
991: * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
992: longer treat an empty password at the prompt as special. To quit
993: out of sudo you now need to hit ^C at the password prompt.
994:
995: 2008-11-06 21:07 millert
996:
997: * sudoers.cat, sudoers.man.in: regen
998:
999: 2008-11-06 21:06 millert
1000:
1001: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
1002: will now refuse to run if no tty is present unless the new
1003: visiblepw sudoers flag is set.
1004:
1005: 2008-11-05 19:42 millert
1006:
1007: * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
1008: RLIM_SAVED_MAX not defined
1009:
1010: 2008-11-05 19:40 millert
1011:
1012: * aix.c: fix fallback value for RLIM_SAVED_MAX
1013:
1014: 2008-11-05 19:14 millert
1015:
1016: * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
1017: aixauth_cleanup.
1018:
1019: 2008-11-05 19:08 millert
1020:
1021: * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
1022: authenticate() as it may not be correct for the user we are
1023: running the command as.
1024:
1025: 2008-11-05 19:05 millert
1026:
1027: * isblank.c: Add isblank() function for systems without it. Needed
1028: for POSIX character class matching in fnmatch.c and glob.c.
1029:
1030: 2008-11-05 11:02 millert
1031:
1032: * TROUBLESHOOTING: expound on sudo and cd
1033:
1034: 2008-11-04 15:52 millert
1035:
1036: * ChangeLog: regen
1037:
1038: 2008-11-04 15:46 millert
1039:
1040: * sudoers.cat, sudoers.man.in: regen
1041:
1042: 2008-11-04 15:45 millert
1043:
1044: * sudoers.pod: mention defauts parse order
1045:
1046: 2008-11-03 13:19 millert
1047:
1048: * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
1049: function for systems without it. Needed for POSIX character
1050: class matching in fnmatch.c and glob.c.
1051:
1052: 2008-11-03 12:54 millert
1053:
1054: * Makefile.in: add emul/charclass.h to HDRS
1055:
1056: 2008-11-02 14:08 millert
1057:
1058: * TODO: checkpoint
1059:
1060: 2008-11-02 14:06 millert
1061:
1062: * parse.c, defaults.c, testsudoers.c, visudo.c: Move
1063: update_defaults into defaults.c and call it properly from visudo
1064: and testsudoers.
1065:
1066: 2008-11-02 09:51 millert
1067:
1068: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
1069: tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
1070: consistency
1071:
1072: 2008-11-02 09:45 millert
1073:
1074: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
1075: tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
1076: has non-standard entries.
1077:
1078: 2008-11-02 09:35 millert
1079:
1080: * match.c: quiet gcc
1081:
1082: 2008-11-02 09:28 millert
1083:
1084: * match.c: Short circuit glob() checks if basename(pattern) !=
1085: basename(command). Refactor code that checks for a command in a
1086: directory and use it in the glob case if the resolved pattern
1087: ends in a '/'.
1088:
1089: 2008-11-01 09:20 millert
1090:
1091: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
1092: setting runas defaults until after runaspw/gr is setup.
1093:
1094: 2008-10-29 13:26 millert
1095:
1096: * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
1097: allocating host/domain name since some systems do not include
1098: space for the NUL in the size. Also manually NUL-terminate
1099: buffer from gethostname() since POSIX is wishy-washy on this.
1100:
1101: 2008-10-26 17:13 millert
1102:
1103: * sudo.c, sudoers.pod: When setting the umask, use the union of the
1104: user's umask and the default value set in sudoers so that we
1105: never lower the user's umask when running a command.
1106:
1107: 2008-10-26 16:43 millert
1108:
1109: * sudo.c: Don't try to read from a zero-length sudoers file.
1110: Remove the bogus Solaris work-around for EAGAIN. Since we now
1111: use fgetc() it should not be a problem.
1112:
1113: 2008-10-25 09:22 millert
1114:
1115: * parse.c: In update_defaults() check the return value of
1116: user*_matches against ALLOW so we don't inadvertantly match on
1117: UNSPEC.
1118:
1119: 2008-10-24 09:52 millert
1120:
1121: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1122: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1123: regen man pages; no more hyphenation
1124:
1125: 2008-10-24 09:49 millert
1126:
1127: * sudo.c: Don't error out on a zero-length sudoers file. With the
1128: advent of #include the user could create a situation where sudo
1129: is unusable.
1130:
1131: 2008-10-23 12:06 millert
1132:
1133: * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
1134: has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
1135: Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
1136: Add configure tests to handle all the cases.
1137:
1138: 2008-10-08 17:28 millert
1139:
1140: * sudo.pod: resort ENVIRONMENT
1141:
1142: 2008-10-08 17:09 millert
1143:
1144: * sudoers.pod: document sudoers_locale
1145:
1146: 2008-10-08 16:56 millert
1147:
1148: * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
1149: uses in preference to VISUAL or EDITOR
1150:
1151: 2008-10-08 14:27 millert
1152:
1153: * toke.c, toke.l: In fill_cmnd(), collapse any escaped
1154: sudo-specific characters. Allows character classes to be used in
1155: pathnames.
1156:
1157: 2008-10-03 16:02 millert
1158:
1159: * lbuf.c: fix typo in non-C89 function declaration
1160:
1161: 2008-10-03 15:56 millert
1162:
1163: * sudoers.pod: Mention POSIX characters classes now that out
1164: fnmatch() and glob() support them.
1165:
1166: 2008-10-03 15:55 millert
1167:
1168: * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
1169: UTF8) with [A-Za-z] which is locale agnostic.
1170:
1171: 2008-10-03 10:02 millert
1172:
1173: * parse.h: use __signed char if we are going to assign a negative
1174: value since on Power, char is unsigned by default
1175:
1176: 2008-10-03 09:59 millert
1177:
1178: * configure, configure.in, config.h.in: Add tests for __signed char
1179: and signed char.
1180:
1181: 2008-10-03 09:19 millert
1182:
1183: * aix.c: Fix AIX limit setting. getuserattr() returns values in
1184: disk blocks rather than bytes. The default hard stack size in
1185: newer AIX is RLIM_SAVED_MAX. From Dale King.
1186:
1187: 2008-09-26 17:13 millert
1188:
1189: * fnmatch.c, glob.c, emul/charclass.h: Add character class support
1190: to included glob(3) and fnmatch(3).
1191:
1192: 2008-09-16 08:28 millert
1193:
1194: * emul/fnmatch.h: Remove UCB advertising clause and some
1195: compatibility defines.
1196:
1197: 2008-09-14 16:07 millert
1198:
1199: * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1200: re-invoking itself or sudo. This allows one to set EDITOR to
1201: sudoedit without getting into an infinite loop of sudoedit
1202: running itself until the path gets too big.
1203:
1204: 2008-09-13 20:45 millert
1205:
1206: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1207: sudoers_locale Defaults option to override the default sudoers
1208: locale of "C".
1209:
1210: 2008-09-13 14:09 millert
1211:
1212: * sudo.c: Set locale to system default except for during sudoers
1213: parse.
1214:
1215: 2008-09-12 09:34 millert
1216:
1217: * match.c: Redo change in 1.34 to use pointer arithmetic.
1218:
1219: 2008-09-11 07:06 millert
1220:
1221: * match.c: Fix a dereference (read) of a freed pointer. Reported
1222: by Patrick Williams.
1223:
1224: 2008-08-23 19:09 millert
1225:
1226: * sudo.c: Set locale to "C" to avoid interpretation issues with
1227: character ranges in sudoers. May want to make the locale a
1228: sudoers option in the future.
1229:
1230: 2008-08-20 07:45 millert
1231:
1232: * config.h.in: we no longer use setproctitle
1233:
1234: 2008-08-20 07:41 millert
1235:
1236: * sudo.h: remove #if 1
1237:
1238: 2008-08-20 07:40 millert
1239:
1240: * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1241: package.
1242:
1243: 2008-07-12 08:53 millert
1244:
1245: * gram.c: regen with yacc skeleton bug fixed
1246:
1247: 2008-07-12 08:48 millert
1248:
1249: * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1250:
1251: 2008-07-02 06:27 millert
1252:
1253: * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1254: passwd entry used for running commands as a uid not listed in the
1255: passwd database. Fixes an issue with some PAM modules.
1256:
1257: 2008-07-01 07:57 millert
1258:
1259: * sudo.c: Error out in -i mode if the user has no shell. This can
1260: happen when running commands as a uid with no password entry.
1261:
1262: 2008-06-26 07:49 millert
1263:
1264: * toke.c, toke.l: Better fix for line continuation inside double
1265: quotes. Now accepts whitespace between the backslash and the
1266: newline like the main lexer.
1267:
1268: 2008-06-25 14:31 millert
1269:
1270: * toke.c, toke.l: Fix line continuation in strings. It was only
1271: being honored if preceded by whitespace.
1272:
1273: 2008-06-22 16:19 millert
1274:
1275: * config.h.in, configure, configure.in, logging.c: Replace the
1276: double fork with a fork + daemonize.
1277:
1278: 2008-06-21 14:59 millert
1279:
1280: * env.c, sudo.c: The -i flag should imply env_reset. This got
1281: broken in sudo 1.6.9.
1282:
1283: 2008-06-20 20:34 millert
1284:
1285: * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1286: is waited for. Instead of having a SIGCHLD handler, use the
1287: double fork trick to orphan the child that opens the pipe to
1288: sendmail. Fixes a problem running su on some Linux distros.
1289:
1290: 2008-06-20 17:16 millert
1291:
1292: * configure, configure.in: Fix configure test for dirfd() on Linux
1293: where DIR is opaque.
1294:
1295: 2008-06-17 17:42 millert
1296:
1297: * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1298: QNX still has this problem we'll need to revisit this again.
1299:
1300: 2008-06-10 21:13 millert
1301:
1302: * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1303: the mailer. If we only block the signal it may be delivered
1304: later when we unblock. Also, there is no need to block SIGCHLD
1305: since we no longer do the double fork. The normal SIGCHLD
1306: handler is sufficient.
1307:
1308: 2008-06-08 17:37 millert
1309:
1310: * configure, configure.in: Add description for NO_PAM_SESSION, from
1311: a redhat patch.
1312:
1313: 2008-06-06 09:36 millert
1314:
1315: * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1316:
1317: 2008-05-18 13:54 millert
1318:
1319: * configure, configure.in: Redo the test for dgettext() in a way
1320: that hopefully will work around the libintl_dgettext() undefined
1321: problem.
1322:
1323: 2008-05-11 09:21 millert
1324:
1325: * schema.ActiveDirectory: change filename in comment
1326:
1327: 2008-05-10 09:18 millert
1328:
1329: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1330: sudoers.ldap.pod: Reference schema.ActiveDirectory
1331:
1332: 2008-05-09 14:49 millert
1333:
1334: * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1335:
1336: 2008-05-09 14:48 millert
1337:
1338: * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1339:
1340: 2008-05-09 14:01 millert
1341:
1342: * schema.ActiveDirectory: Active Directory schema by Chantal
1343: Paradis and Eric Paquet
1344:
1345: 2008-05-08 17:54 millert
1346:
1347: * parse.c: remove an XXX that was fixed
1348:
1349: 2008-05-08 12:53 millert
1350:
1351: * ChangeLog: sync
1352:
1353: 2008-05-08 12:49 millert
1354:
1355: * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1356: mode. This fixes a problem where the tag value printed was
1357: influenced by defaults set in the first pass through the parser.
1358:
1359: 2008-05-03 21:29 millert
1360:
1361: * Makefile.in, sudo.psf: No point in packaging the TODO file
1362:
1363: 2008-05-03 21:24 millert
1364:
1365: * ChangeLog: sync
1366:
1367: 2008-05-02 20:53 millert
1368:
1369: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1370: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1371: Defaults option that is similar to /etc/environment on some
1372: systems.
1373:
1374: 2008-05-02 16:38 millert
1375:
1376: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1377: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1378: sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1379: version to 1.7.0
1380:
1381: 2008-05-02 16:37 millert
1382:
1383: * UPGRADE: initial valgrind pass done
1384:
1385: 2008-04-23 08:30 millert
1386:
1387: * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1388: the secret.
1389:
1390: 2008-04-11 10:03 millert
1391:
1392: * ldap.c: define LDAPS_PORT if the system headers do not
1393:
1394: 2008-04-10 14:54 millert
1395:
1396: * gram.c, gram.y: Fix another memory leak in init_parser().
1397:
1398: 2008-04-10 12:51 millert
1399:
1400: * configure, configure.in: There was a missing space before the
1401: ldap libs in SUDO_LIBS for some configurations.
1402:
1403: 2008-04-10 11:28 millert
1404:
1405: * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1406: leaks pointed out by valgrind.
1407:
1408: 2008-04-07 14:39 millert
1409:
1410: * sudo.c: fix "sudo -s" broken by mode/flags breakout
1411:
1412: 2008-04-07 14:26 millert
1413:
1414: * configure, configure.in: remove duplicate check for dgettext
1415:
1416: 2008-04-05 15:54 millert
1417:
1418: * aix.c: Fall back to default stanza if no user-specific limit is
1419: found.
1420:
1421: 2008-04-02 15:56 millert
1422:
1423: * snprintf.c: include stdint.h if present
1424:
1425: 2008-04-02 15:28 millert
1426:
1427: * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1428:
1429: 2008-04-01 19:18 millert
1430:
1431: * sudoers.ldap.pod: fix cut and pasto
1432:
1433: 2008-03-31 11:24 millert
1434:
1435: * pwutil.c: Add #ifdef PURITY
1436:
1437: 2008-03-30 17:36 millert
1438:
1439: * auth/bsdauth.c: remove useless cast
1440:
1441: 2008-03-27 19:07 millert
1442:
1443: * ChangeLog: sync
1444:
1445: 2008-03-27 19:04 millert
1446:
1447: * TODO: sync
1448:
1449: 2008-03-27 19:01 millert
1450:
1451: * sudo.h: Split MODE_* defines into primary and flags.
1452:
1453: 2008-03-26 13:11 millert
1454:
1455: * aix.c: It turns out the logic for getting AIX limits is more
1456: convoluted than I realized and differs depending on whether the
1457: soft and/or hard limits are defined.
1458:
1459: 2008-03-23 10:18 millert
1460:
1461: * Makefile.in, configure, configure.in: Back out AIX-specific
1462: change to set the sudo_noexec path to the .a file, we do really
1463: want to use the .so file. Since libtool doesn't do that
1464: correctly, just install the .so file ourselves in the Makefile.
1465:
1466: 2008-03-23 10:12 millert
1467:
1468: * install-sh: If the file given to install is a path, only use the
1469: basename of the file when building the destination path.
1470:
1471: 2008-03-18 16:08 millert
1472:
1473: * sudo.c: parse_args() cleanup: Sort command line options in the
1474: getopt() switch The -U option requires a parameter Normalize a
1475: few ISSET calls Split mode into mode and flags and retire the
1476: now-obsolete excl variable
1477:
1478: 2008-03-18 16:04 millert
1479:
1480: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1481: sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1482:
1483: 2008-03-18 15:59 millert
1484:
1485: * sudo.c: Move version printing, etc. into a separate function.
1486:
1487: 2008-03-18 15:57 millert
1488:
1489: * sudo.c: Don't try to cleanup nsswitch if it has not been
1490: initialized.
1491:
1492: 2008-03-17 11:09 millert
1493:
1494: * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1495: a problem executing the mailer.
1496:
1497: 2008-03-14 08:11 millert
1498:
1499: * configure.in, configure: AIX shared libs end in .a, not .so.
1500:
1501: 2008-03-13 07:34 millert
1502:
1503: * env.c: Preserve HOME by default too. Matches documentation and
1504: previous behavior.
1505:
1506: 2008-03-12 19:42 millert
1507:
1508: * sudo.c: Use getopt() to parse the command line. We need to be
1509: able to intersperse env variables and options yet still honor
1510: "--"" which complicates things slightly.
1511:
1512: 2008-03-06 14:46 millert
1513:
1514: * ChangeLog: sync
1515:
1516: 2008-03-06 14:43 millert
1517:
1518: * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1519:
1520: 2008-03-06 14:32 millert
1521:
1522: * config.guess, config.sub: update from libtool-1.5.26 distribution
1523:
1524: 2008-03-06 13:18 millert
1525:
1526: * aix.c, sudo.h: attempt to fix compilation errors on AIX
1527:
1528: 2008-03-06 13:08 millert
1529:
1530: * Makefile.in: fix typo in last commit
1531:
1532: 2008-03-06 13:07 millert
1533:
1534: * Makefile.in: Add WHATSNEW file to the distribution
1535:
1536: 2008-03-06 12:43 millert
1537:
1538: * visudo.c: use warningx instead of fprintf(stderr, ...)
1539:
1540: 2008-03-06 12:31 millert
1541:
1542: * list.c: add DEBUG to list2tq
1543:
1544: 2008-03-06 12:28 millert
1545:
1546: * ChangeLog, TODO: sync
1547:
1548: 2008-03-06 12:21 millert
1549:
1550: * WHATSNEW: mention mailfrom
1551:
1552: 2008-03-06 12:19 millert
1553:
1554: * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1555: sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1556: using a combination of getuserattr() and setrlimit(). Currently
1557: untested.
1558:
1559: 2008-03-05 16:52 millert
1560:
1561: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1562: sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1563: sets the value of the From: field in the warning/error mail. If
1564: unset the login name of the invoking user is used.
1565:
1566: 2008-03-05 16:18 millert
1567:
1568: * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1569: that is freeable
1570:
1571: 2008-03-05 15:19 millert
1572:
1573: * gram.c, gram.y: When adding a default, only call list2tq() once
1574: to do the list to tq conversion. It is not legal to call list2tq
1575: multiple times on the same list since list2tq consumes and
1576: modifies the list argument.
1577:
1578: 2008-03-05 09:38 millert
1579:
1580: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1581: out XXXs for now
1582:
1583: 2008-03-05 09:36 millert
1584:
1585: * WHATSNEW: mention askpass
1586:
1587: 2008-03-04 17:20 millert
1588:
1589: * sudo.c: Error out if both -A and -S are specified Error out if -A
1590: is specified but no askpass is configured
1591:
1592: 2008-03-04 17:16 millert
1593:
1594: * configure, configure.in: we are not going to ship a sudo-specific
1595: askpass
1596:
1597: 2008-03-03 14:30 millert
1598:
1599: * sudo.h: fix definition of TGP_ASKPASS
1600:
1601: 2008-03-03 13:54 millert
1602:
1603: * def_data.c, def_data.in: make askpass boolean-capable
1604:
1605: 2008-03-03 13:53 millert
1606:
1607: * INSTALL: document --with-askpass
1608:
1609: 2008-03-02 19:27 millert
1610:
1611: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1612: sudoers.ldap.cat, visudo.cat: regen
1613:
1614: 2008-03-02 17:31 millert
1615:
1616: * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1617:
1618: 2008-03-02 09:31 millert
1619:
1620: * check.c, configure, configure.in, def_data.c, def_data.h,
1621: def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1622: sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1623: running a helper program to read the password when no tty is
1624: present (or when specified with the -A flag). TODO: docs.
1625:
1626: 2008-03-02 08:38 millert
1627:
1628: * def_data.c, def_data.in: add missing printf format to SELinux
1629: role and type strings
1630:
1631: 2008-02-27 09:26 millert
1632:
1633: * INSTALL, configure, configure.in: Disable use of
1634: gss_krb5_ccache_name() by default and add
1635: --enable-gss-krb5-ccache-name configure option to enable it. It
1636: seems that gss_krb5_ccache_name() doesn't work properly with some
1637: combinations of Heimdal and OpenLDAP.
1638:
1639: 2008-02-22 15:33 millert
1640:
1641: * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1642: add a call to setkeycreatecon() (though this is probably
1643: insufficient). From Dan Walsh.
1644:
1645: 2008-02-22 15:19 millert
1646:
1647: * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1648: conversation function may be called for non-password reading
1649: purposes so we must be careful not to use def_prompt in cases
1650: where it may not be set.
1651:
1652: 2008-02-20 12:00 millert
1653:
1654: * selinux.c: Don't free the new tty context, we need to keep it
1655: around when we restore the tty context after the command
1656: completes
1657:
1658: 2008-02-19 16:04 millert
1659:
1660: * selinux.c: s/newrole/sudo/
1661:
1662: 2008-02-19 13:21 millert
1663:
1664: * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1665: if we have login.conf support
1666:
1667: 2008-02-18 11:05 millert
1668:
1669: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1670: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1671: regen
1672:
1673: 2008-02-18 10:53 millert
1674:
1675: * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1676: sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1677: lines partaining to login.conf, BSD auth and SELinux and only
1678: enable them if pertinent.
1679:
1680: 2008-02-18 10:42 millert
1681:
1682: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1683: Remove the =cut on the first line (above the copyright notice) to
1684: quiet pod2man. Also remove the hackery in the FILES section and
1685: just deal with the fact that there will a newline between each
1686: pathname.
1687:
1688: 2008-02-17 08:19 millert
1689:
1690: * Makefile.in: run sudo.man.pl when generating sudo.man.in
1691:
1692: 2008-02-17 08:11 millert
1693:
1694: * configure, configure.in, sudo.man.pl: comment out SELinux manual
1695: bits unless --with-selinux was specified
1696:
1697: 2008-02-17 08:04 millert
1698:
1699: * sudoers.pod: document role and type defaults for SELinux
1700:
1701: 2008-02-16 20:26 millert
1702:
1703: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1704: Document "sudo -ll" and make "sudo -l -l" be equivalent.
1705:
1706: 2008-02-15 15:23 millert
1707:
1708: * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1709: Fixes compilation problems on Debian GNU/kFreeBSD.
1710:
1711: 2008-02-13 17:17 millert
1712:
1713: * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1714: rewrite of verify_krb_v5_tgt()
1715:
1716: 2008-02-13 07:28 millert
1717:
1718: * logging.c, logging.h, sudo.c: Remove dependence on
1719: VALIDATE_NOT_OK in logging functions. Split log_auth() into
1720: log_allowed() and log_denial() Replace mail_auth() with
1721: should_mail() and a call to send_mail()
1722:
1723: 2008-02-10 18:06 millert
1724:
1725: * ldap.c: Add debugging so we can tell if the krb5 ccache is
1726: accessible
1727:
1728: 2008-02-10 17:34 millert
1729:
1730: * INSTALL: mention --with-selinux
1731:
1732: 2008-02-09 09:48 millert
1733:
1734: * configure: regen
1735:
1736: 2008-02-09 09:43 millert
1737:
1738: * selinux.c: add Sudo tag
1739:
1740: 2008-02-09 09:30 millert
1741:
1742: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1743: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1744: pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1745: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1746: sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1747: toke.l: Add support for SELinux RBAC. Sudoers entries may
1748: specify a role and type. There are also role and type defaults
1749: that may be used. To make sure a transition occurs, when using
1750: RBAC commands are executed via the new sesh binary. Based on
1751: initial changes from Dan Walsh.
1752:
1753: 2008-02-08 08:18 millert
1754:
1755: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1756: list (sudo -ll) support for printing verbose LDAP and sudoers
1757: file entries. Still need to update manual.
1758:
1759: 2008-02-03 10:43 millert
1760:
1761: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1762: output for file and ldap based sudoers and use lbufs for both.
1763: The ldap output does not currently include options that cannot be
1764: represented as tags. This will be remedied in a long list output
1765: mode to come.
1766:
1767: 2008-01-27 16:37 millert
1768:
1769: * set_perms.c: Use a specific error message for errno == EAGAIN
1770: when setuid() et al fails. On Linux systems setuid() will fail
1771: with errno set to EAGAIN if changing to the new uid would result
1772: in a resource limit violation.
1773:
1774: 2008-01-27 16:34 millert
1775:
1776: * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1777: family of syscalls causes the nroc resource limit to be checked.
1778: The limits will be reset by pam_limits.so when PAM is used. In
1779: the non-PAM case the nproc limit will remain unlimited but there
1780: doesn't seem to be a way around that other than having sudo parse
1781: /etc/security/limits.conf directly.
1782:
1783: 2008-01-27 16:31 millert
1784:
1785: * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1786: AIX
1787:
1788: 2008-01-23 06:33 millert
1789:
1790: * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1791: AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1792: from going into config.h. Avoid single quotes in variable
1793: expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1794: of bash they will end up literally in the resulting define.
1795:
1796: 2008-01-21 13:22 millert
1797:
1798: * README.LDAP: mention --with-nsswitch=no
1799:
1800: 2008-01-21 11:43 millert
1801:
1802: * configure, configure.in: ldap_ssl.h depends on ldap.h being
1803: included first
1804:
1805: 2008-01-21 11:07 millert
1806:
1807: * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1808: if we can find it. Needed for the ldapssl_set_strength defines
1809: on HP-UX at least.
1810:
1811: 2008-01-21 10:02 millert
1812:
1813: * TODO, sudoers.ldap.pod: sync
1814:
1815: 2008-01-21 10:01 millert
1816:
1817: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1818: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1819: regen
1820:
1821: 2008-01-21 10:00 millert
1822:
1823: * Makefile.in: Use 78n line length when formatting cat pages.
1824:
1825: 2008-01-21 09:50 millert
1826:
1827: * README.LDAP: Remove redundant info that is now in
1828: sudoers.ldap.pod
1829:
1830: 2008-01-20 16:18 millert
1831:
1832: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1833: Reorganize the first section a bit. Substitute the proper path
1834: for /etc/sudoers.
1835:
1836: 2008-01-20 10:17 millert
1837:
1838: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1839: Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1840: Move schema into EXAMPLES
1841:
1842: 2008-01-20 10:15 millert
1843:
1844: * configure.in, configure: Substitute values for ldap.conf,
1845: ldap.secret and nsswitch.conf into sudoers.ldap.man.
1846:
1847: 2008-01-19 20:35 millert
1848:
1849: * configure, configure.in: substitute for sudoers.ldap.man
1850:
1851: 2008-01-19 20:34 millert
1852:
1853: * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1854: man page.
1855:
1856: 2008-01-19 20:25 millert
1857:
1858: * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1859: some of the missing pieces. Still needs some reorganization and
1860: editing.
1861:
1862: 2008-01-19 15:06 millert
1863:
1864: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1865: sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1866: Currently, much of the information is adapted from README.LDAP.
1867:
1868: 2008-01-18 17:32 millert
1869:
1870: * pwutil.c: When copying gr_mem we must guarantee that the storage
1871: space for gr_mem is properly aligned. The simplest way to do
1872: this is to simply store gr_mem directly after struct group. This
1873: is not a problem for gr_passwd or gr_name as they are simple
1874: strings.
1875:
1876: 2008-01-18 16:47 millert
1877:
1878: * ldap.c: Fix a typo/thinko in one of the calls to
1879: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1880:
1881: 2008-01-17 15:44 millert
1882:
1883: * config.h.in, configure, configure.in, ldap.c: include
1884: <mps/ldap_ssl.h> in ldap.c if available
1885:
1886: 2008-01-16 18:20 millert
1887:
1888: * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1889: skeleton.c
1890:
1891: 2008-01-16 13:03 millert
1892:
1893: * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1894: echo) to guarantee that any pending output is discarded
1895:
1896: 2008-01-15 17:18 millert
1897:
1898: * sudoers: no longer need to specify SETENV when user has sudo ALL
1899:
1900: 2008-01-15 09:40 millert
1901:
1902: * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1903: group option, renaming old -g to -G Add set_runasgr() and
1904: set_runaspw() and use them
1905:
1906: 2008-01-15 09:23 millert
1907:
1908: * sudo.h, sudo.c: Make set_runaspw static void
1909:
1910: 2008-01-15 09:17 millert
1911:
1912: * testsudoers.c, visudo.c: g/c set_runaspw stub
1913:
1914: 2008-01-15 07:28 millert
1915:
1916: * configure, configure.in: Don't add -llber twice.
1917:
1918: 2008-01-14 06:40 millert
1919:
1920: * ldap.c: fix typo
1921:
1922: 2008-01-13 15:39 millert
1923:
1924: * gram.c: regen
1925:
1926: 2008-01-13 14:57 millert
1927:
1928: * configure, configure.in: Fix check that determines whether -llber
1929: is required.
1930:
1931: 2008-01-13 14:22 millert
1932:
1933: * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1934: netscape-based LDAP, use ldapssl_set_strength() to implement the
1935: checkpeer ldap.conf option.
1936:
1937: 2008-01-13 09:49 millert
1938:
1939: * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1940: to use the cred cache, which is what krb5_verify_user() does.
1941: Better cleanup on failure.
1942:
1943: 2008-01-12 12:40 millert
1944:
1945: * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1946: krb5_verify_user() does.
1947:
1948: 2008-01-09 14:58 millert
1949:
1950: * gram.c: The U suffix on constants is an ANSI feature
1951:
1952: 2008-01-09 12:08 millert
1953:
1954: * configure.in, configure: Add check for ber_set_option() in -llber
1955:
1956: 2008-01-06 19:02 millert
1957:
1958: * README.LDAP: default if no nsswitch.conf is files only
1959:
1960: 2008-01-06 17:28 millert
1961:
1962: * README.LDAP: don't tell people to mail aaron about LDAP stuff
1963:
1964: 2008-01-06 12:32 millert
1965:
1966: * README.LDAP: timelimit and bind_timelimit
1967:
1968: 2008-01-06 08:54 millert
1969:
1970: * ChangeLog: sync
1971:
1972: 2008-01-06 07:56 millert
1973:
1974: * ldap.c: Move ldap.secret reading into a separate function.
1975:
1976: 2008-01-05 19:09 millert
1977:
1978: * check.c: user_runas -> runas_pw
1979:
1980: 2008-01-05 18:59 millert
1981:
1982: * TODO: sync
1983:
1984: 2008-01-05 18:59 millert
1985:
1986: * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1987: the password prompt. Based on a patch from Patrick Schoenfeld.
1988:
1989: 2008-01-05 18:25 millert
1990:
1991: * ldap.c: Check strlcpy() return values.
1992:
1993: 2008-01-05 18:12 millert
1994:
1995: * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1996:
1997: 2008-01-05 16:35 millert
1998:
1999: * README.LDAP: Make it clear that host and uri can take multiple
2000: parameters. URI is now supported for more than just openldap
2001: nsswitch.conf does't accept "compat"
2002:
2003: 2008-01-05 16:27 millert
2004:
2005: * sudo.c: comment cleanup and update (c) year
2006:
2007: 2008-01-05 16:25 millert
2008:
2009: * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
2010: parse.c to sudo_nss.c. This should make it possible to build an
2011: LDAP-only sudo binary.
2012:
2013: 2008-01-05 13:27 millert
2014:
2015: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
2016: multiple sudoers sources by passing in the previous return value
2017: to the next in the chain
2018:
2019: 2008-01-05 13:26 millert
2020:
2021: * gram.y: Free up parser data structures in sudo_file_close().
2022:
2023: 2008-01-05 08:13 millert
2024:
2025: * gram.c, parse.c: Free up parser data structures in
2026: sudo_file_close().
2027:
2028: 2008-01-05 07:59 millert
2029:
2030: * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
2031: ldap_create() instead of deprecated ldap_init() Use
2032: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
2033:
2034: 2008-01-05 07:56 millert
2035:
2036: * config.h.in, configure, configure.in: Add check for
2037: ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
2038:
2039: 2008-01-04 09:56 millert
2040:
2041: * configure.in, configure, config.h.in: add check for ldap_create
2042:
2043: 2008-01-03 16:11 millert
2044:
2045: * config.h.in, configure, configure.in, ldap.c: Add
2046: sudo_ldap_get_first_rdn() to return the first rdn of an entry's
2047: dn using the mechanism appropriate for the LDAP SDK in use. Use
2048: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
2049: Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
2050: without them.
2051:
2052: 2008-01-03 16:02 millert
2053:
2054: * lbuf.c: include unistd.h
2055:
2056: 2008-01-03 11:05 millert
2057:
2058: * config.h.in, configure.in: fix typo in mtim_getnsec
2059:
2060: 2008-01-02 15:29 millert
2061:
2062: * config.h.in, configure.in, configure: add check for st__tim in
2063: struct stat as used by SCO
2064:
2065: 2008-01-02 11:05 millert
2066:
2067: * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
2068:
2069: 2008-01-02 10:09 millert
2070:
2071: * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
2072:
2073: 2008-01-01 19:04 millert
2074:
2075: * ldap.c: Replace deprecated ldap_explode_dn() with calls to
2076: ldap_str2dn() and ldap_rdn2str().
2077:
2078: 2008-01-01 18:37 millert
2079:
2080: * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
2081: of the deprecated ldap_get_values()/ldap_value_free().
2082:
2083: 2008-01-01 17:07 millert
2084:
2085: * TODO, ChangeLog: sync
2086:
2087: 2008-01-01 17:06 millert
2088:
2089: * gettime.c, sudo.c: Remove some already fixed XXXs
2090:
2091: 2008-01-01 17:03 millert
2092:
2093: * ldap.c: Same return value as non-existent sudoers if LDAP was
2094: unable to connect.
2095:
2096: 2008-01-01 16:52 millert
2097:
2098: * sudo.pod: mention /etc/environment
2099:
2100: 2008-01-01 16:42 millert
2101:
2102: * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
2103: developments.
2104:
2105: 2008-01-01 16:42 millert
2106:
2107: * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
2108: -V output.
2109:
2110: 2008-01-01 16:25 millert
2111:
2112: * ldap.c: When building up a query don't list groups in the aux
2113: group vector that are the same as the passwd file group. On most
2114: systems the first gid in the group vector is the same as the
2115: passwd entry gid.
2116:
2117: 2008-01-01 14:01 millert
2118:
2119: * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
2120: to disable user ldaprc and system defaults that could affect how
2121: LDAP works.
2122:
2123: 2008-01-01 13:21 millert
2124:
2125: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
2126: sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
2127: --with-nsswitch to allow users to specify nsswitch.conf path or
2128: disable it. If --with-nsswitch=no but --with-ldap, order is
2129: LDAP, then sudoers. Fix --with-ldap-conf-file and
2130: --with-ldap-secret-file
2131:
2132: 2008-01-01 13:12 millert
2133:
2134: * parse.c: Honor def_ignore_local_sudoers
2135:
2136: 2007-12-31 16:44 millert
2137:
2138: * ldap.c: no longer need to check def_ignore_local_sudoers here
2139:
2140: 2007-12-31 16:36 millert
2141:
2142: * parse.c: Refactor group vector resetting into a function and also
2143: call it from display_cmnd. Stop after the first sucessful match
2144: in display_cmnd. Print a newline between each display_privs
2145: method.
2146:
2147: 2007-12-31 16:23 millert
2148:
2149: * parse.c: fix double free introduced in rev 1.218
2150:
2151: 2007-12-31 16:10 millert
2152:
2153: * ldap.c: belt and suspenders; zero out result after freeing it
2154:
2155: 2007-12-31 15:04 millert
2156:
2157: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
2158: reading into a separate function, sudo_parseln(), which removes
2159: comments, leading/trailing whitespace and newlines. May want to
2160: rethink the use of sudo_parseln() for /etc/ldap.secret
2161:
2162: 2007-12-31 14:26 millert
2163:
2164: * parse.c, sudo.c: Make the inability to read the sudoers file a
2165: non-fatal error if there are other sudoers sources available.
2166: sudoers_file_lookup now returns "not OK" if sudoers was not
2167: present
2168:
2169: 2007-12-31 14:24 millert
2170:
2171: * ldap.c: make it clear that the global options are from LDAP
2172:
2173: 2007-12-31 14:13 millert
2174:
2175: * logging.c: allocate proper amount of space for error string
2176:
2177: 2007-12-31 10:24 millert
2178:
2179: * sudo_nss.c, sudo_nss.h: actual sudo nss code
2180:
2181: 2007-12-31 10:08 millert
2182:
2183: * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
2184: display_cmnd.
2185:
2186: 2007-12-31 07:54 millert
2187:
2188: * defaults.c, parse.c, testsudoers.c, visudo.c: move
2189: update_defaults() to parse.c
2190:
2191: 2007-12-31 07:39 millert
2192:
2193: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
2194: Use nsswitch to hide some sudoers vs. ldap implementation details
2195: and reduce the number of #ifdef LDAP TODO: fix display routines
2196: and error handling
2197:
2198: 2007-12-28 11:20 millert
2199:
2200: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2201: First cut at nsswitch.conf support. Further reorganizaton and
2202: related changes are forthcoming.
2203:
2204: 2007-12-21 16:53 millert
2205:
2206: * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2207: and /etc/environment file. Still needs to be documented and
2208: should probably only applies to OSes that have it (AIX and Linux,
2209: maybe others).
2210:
2211: 2007-12-21 16:20 millert
2212:
2213: * ldap.c: include limits.h
2214:
2215: 2007-12-20 10:02 millert
2216:
2217: * WHATSNEW: reword LDAP SASL
2218:
2219: 2007-12-19 16:40 millert
2220:
2221: * TODO: sync
2222:
2223: 2007-12-19 16:39 millert
2224:
2225: * README.LDAP: Add an example sudoRole, clarify netscape vs.
2226: openldap a bit more
2227:
2228: 2007-12-19 14:42 millert
2229:
2230: * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2231:
2232: 2007-12-19 14:28 millert
2233:
2234: * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2235: for ldaps support instead of trying to do it manually with
2236: ldap_init() + ldapssl_install_routines(). Use tls_cert and
2237: tls_key for cert7.db and key3.db respectively. Don't print
2238: debugging info for options that are not set. Add warning if
2239: start_tls specified when not supported.
2240:
2241: 2007-12-19 14:25 millert
2242:
2243: * ldap.c: fix compilation on solaris
2244:
2245: 2007-12-19 14:23 millert
2246:
2247: * Makefile.in: add missing .h and .c files for missing lib objs
2248:
2249: 2007-12-18 09:54 millert
2250:
2251: * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2252:
2253: 2007-12-17 20:10 millert
2254:
2255: * ldap.c: fix compilation on Solaris
2256:
2257: 2007-12-17 10:14 millert
2258:
2259: * configure, configure.in: fix typo
2260:
2261: 2007-12-17 08:08 millert
2262:
2263: * README.LDAP: try to clear up which variables are for OpenLDAP and
2264: which are for netscape-derived SDKs
2265:
2266: 2007-12-17 07:31 millert
2267:
2268: * config.h.in, configure, configure.in, ldap.c: Add support for
2269: "ssl on" in both netscape and openldap flavors. Only the
2270: OpenLDAP flavor has been tested.
2271:
2272: 2007-12-17 07:28 millert
2273:
2274: * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2275: log_error() instead of calling sudo_ldap_close() directly.
2276: ldap_conn can now be static to sudo.c
2277:
2278: 2007-12-16 20:02 millert
2279:
2280: * sudo.c: ld -> ldap_conn
2281:
2282: 2007-12-16 14:42 millert
2283:
2284: * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2285:
2286: 2007-12-16 14:08 millert
2287:
2288: * ldap.c: Distinguish between LDAP conf settings that are
2289: connection-specific (which take an ld pointer) and those that are
2290: default settings (which do not).
2291:
2292: 2007-12-14 16:46 millert
2293:
2294: * ldap.c: Improved warnings on error.
2295:
2296: 2007-12-14 15:59 millert
2297:
2298: * ldap.c: Make ldap config table driven and set the config *after*
2299: we open the connection.
2300:
2301: 2007-12-13 16:41 millert
2302:
2303: * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2304:
2305: 2007-12-13 09:13 millert
2306:
2307: * configure, configure.in: some operating systems need to link with
2308: -lkrb5support when using krb5
2309:
2310: 2007-12-10 17:12 millert
2311:
2312: * WHATSNEW: minor update
2313:
2314: 2007-12-10 10:56 millert
2315:
2316: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2317:
2318: 2007-12-07 19:17 millert
2319:
2320: * TODO, ChangeLog: sync
2321:
2322: 2007-12-07 19:09 millert
2323:
2324: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2325: support for LDAP
2326:
2327: 2007-12-03 11:36 millert
2328:
2329: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2330: can now take an optional command.
2331:
2332: 2007-12-02 12:13 millert
2333:
2334: * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2335: sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2336: that will cause the prompt to be overridden in all cases. This
2337: flag is also set when the user specifies the -p flag.
2338:
2339: 2007-12-01 19:51 millert
2340:
2341: * sudo.c: Move setting of login class until after sudoers has been
2342: parsed. Set NewArgv[0] for -i after runas_pw has been set.
2343:
2344: 2007-12-01 19:34 millert
2345:
2346: * configure, configure.in: Move the dgettext check.
2347:
2348: 2007-12-01 11:22 millert
2349:
2350: * config.h.in, configure, configure.in, auth/pam.c: Add basic
2351: support for looking up the string "Password: " in the PAM
2352: localized text db. This allows us to determine whether the PAM
2353: prompt is the default "Password: " one even if it has been
2354: localized.
2355:
2356: TODO: concatenate non-std PAM prompts and user-specified sudo
2357: prompts.
2358:
2359: 2007-11-27 18:40 millert
2360:
2361: * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2362: sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2363: home-grown attempt that was insufficient.
2364:
2365: 2007-11-27 12:13 millert
2366:
2367: * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2368: Martynas Venckus
2369:
2370: 2007-11-25 19:26 millert
2371:
2372: * set_perms.c: Don't assume runas_pw is set; it may not be in the
2373: -g case.
2374:
2375: 2007-11-25 08:07 millert
2376:
2377: * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2378: restore group vector for PERM_ROOT if we previously changed it.
2379: Stash the runas group vector so we don't have to call initgroups
2380: more than once. Also add no-op check to check_perms.
2381:
2382: 2007-11-21 15:11 millert
2383:
2384: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2385: gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2386: parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2387: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2388: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2389: visudo.cat, visudo.man.in: Add support for runas groups. This
2390: allows the user to run a command with a different effective
2391: group. If the -g option is specified without -u the command will
2392: be run as the current user (only the group will change). the -g
2393: and -u options may be used together. TODO: implement runas group
2394: for ldap improve runas group documentation add
2395: testsudoers support
2396:
2397: 2007-11-21 15:02 millert
2398:
2399: * configure, configure.in: fix setting of mandir
2400:
2401: 2007-11-21 14:26 millert
2402:
2403: * sudo.pod, sudoers.pod: document that ALL implies SETENV
2404:
2405: 2007-11-21 13:50 millert
2406:
2407: * ldap.c: s/setenv_ok/setenv_implied/g
2408:
2409: 2007-11-21 13:44 millert
2410:
2411: * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2412:
2413: 2007-11-21 13:26 millert
2414:
2415: * ldap.c: use strcmp, not strcasecmp when comparing ALL
2416:
2417: 2007-11-21 11:41 millert
2418:
2419: * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2420: file-based sudoers this does affect all the commands in the
2421: sudoRole.
2422:
2423: 2007-11-21 11:05 millert
2424:
2425: * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2426: SETENV tag but, unlike an explicit tag, it is not passed on to
2427: other commands in the list.
2428:
2429: 2007-11-21 11:02 millert
2430:
2431: * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2432: Also use sudo_getpwuid() instead of getpwuid().
2433:
2434: 2007-11-15 11:16 millert
2435:
2436: * sudoers: Expand on the dangers of not using visudo to edit
2437: sudoers.
2438:
2439: 2007-11-08 07:24 millert
2440:
2441: * parse.c: Don't quote *?[]! on output since the lexer does not
2442: strip off the backslash when reading those in.
2443:
2444: 2007-11-07 13:16 millert
2445:
2446: * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2447: compatibility issues.
2448:
2449: 2007-11-04 08:33 millert
2450:
2451: * logging.c: Refactor log line generation in to new_logline().
2452:
2453: 2007-10-25 09:23 millert
2454:
2455: * TROUBLESHOOTING: fix typo
2456:
2457: 2007-10-24 12:41 millert
2458:
2459: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2460: match.c: Add configure check for struct in6_addr instead of
2461: relying on AF_INET6 since some systems define AF_INET6 but do not
2462: include IPv6 support.
2463:
2464: 2007-10-21 09:29 millert
2465:
2466: * configure, configure.in: Fix block to add -lutil for FreeBSD and
2467: NetBSD when logincap is in use.
2468:
2469: 2007-10-19 22:28 millert
2470:
2471: * configure, configure.in: POSIX states that struct timespec be
2472: declared in time.h so check there regardless of the value of
2473: TIME_WITH_SYS_TIME.
2474:
2475: 2007-10-17 11:37 millert
2476:
2477: * tgetpass.c: Instead of defining a macro to call the appropriate
2478: method for turning on/off echo, just define tc[gs]etattr() and
2479: the related defines that use the correct terminal ioctls if
2480: needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2481: all but QNX.
2482:
2483: 2007-10-08 20:18 millert
2484:
2485: * Makefile.in: g/c @ALLOCA@
2486:
2487: 2007-10-08 20:07 millert
2488:
2489: * configure: regen
2490:
2491: 2007-10-08 20:04 millert
2492:
2493: * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2494: --disable-pam-session configure option to disable calling
2495: pam_{open,close}_session. May work around bugs in some PAM
2496: implementations.
2497:
2498: 2007-10-08 12:00 millert
2499:
2500: * tgetpass.c: quiet gcc warnings
2501:
2502: 2007-10-08 08:41 millert
2503:
2504: * tgetpass.c: Avoid printing the prompt if we are already
2505: backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2506: In this case, the call to tcsetattr() will cause SIGTTOU to be
2507: delivered.
2508:
2509: 2007-09-15 16:07 millert
2510:
2511: * def_data.c, def_data.h, def_data.in: Reorder things such that the
2512: definition of env_reset come right before the env variable lists.
2513:
2514: 2007-09-15 07:50 millert
2515:
2516: * parse.h: Shrink type and seqno in struct alias from int to
2517: u_short
2518:
2519: 2007-09-15 07:24 millert
2520:
2521: * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2522: aliases for loop detection. If we find an alias with the seqno
2523: already set to the current (global) value we know we've visited
2524: it before so ignore it.
2525:
2526: 2007-09-13 19:05 millert
2527:
2528: * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2529: add user_ttypath which holds the full path to the tty or is NULL
2530: if no tty was present.
2531:
2532: 2007-09-13 18:42 millert
2533:
2534: * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2535: lower that results in a segv.
2536:
2537: 2007-09-11 15:43 millert
2538:
2539: * gram.c: regen
2540:
2541: 2007-09-11 15:42 millert
2542:
2543: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2544: parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2545:
2546: 2007-09-10 17:33 millert
2547:
2548: * alloc.c: remove some useless casts
2549:
2550: 2007-09-10 17:32 millert
2551:
2552: * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2553: inttypes.h predates the final C99 spec and the standard specifies
2554: that it shall include stdint.h anyway
2555:
2556: 2007-09-06 12:39 millert
2557:
2558: * Makefile.in, alloca.c, configure.in: Since we ship with a
2559: pre-generated parser there is no need to ship a bogus alloca
2560: implementation.
2561:
2562: 2007-09-06 12:22 millert
2563:
2564: * configure: regen
2565:
2566: 2007-09-06 12:19 millert
2567:
2568: * configure.in: remove initial setting of CHECKSIA, we require that
2569: it be unset if not used
2570:
2571: 2007-09-06 11:55 millert
2572:
2573: * Makefile.in: add list.c to SRCS
2574:
2575: 2007-09-06 07:18 millert
2576:
2577: * configure: regen
2578:
2579: 2007-09-06 07:17 millert
2580:
2581: * configure.in: only do SIA checks on Digital Unix
2582:
2583: 2007-09-05 18:50 millert
2584:
2585: * sudoers.cat, sudoers.man.in: regen
2586:
2587: 2007-09-05 18:48 millert
2588:
2589: * ChangeLog, TODO: sync
2590:
2591: 2007-09-05 18:39 millert
2592:
2593: * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2594: needed for modern kerb5.
2595:
2596: 2007-09-05 18:16 millert
2597:
2598: * configure: regen
2599:
2600: 2007-09-05 18:16 millert
2601:
2602: * configure.in, aclocal.m4: New method for setting the default
2603: authentication type and avoiding conflicts in auth types.
2604:
2605: 2007-09-05 14:45 millert
2606:
2607: * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2608: an associated runaslist so no need to keep track of the most
2609: recent non-NULL one.
2610:
2611: 2007-09-04 18:51 millert
2612:
2613: * ldap.c: back out partial ldaps support mistakenly committed
2614:
2615: 2007-09-04 10:57 millert
2616:
2617: * ldap.c: Add support for unix groups and netgroups in sudoRunas
2618:
2619: 2007-09-03 16:28 millert
2620:
2621: * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2622: Stritzky.
2623:
2624: 2007-09-02 17:05 millert
2625:
2626: * configure: regen
2627:
2628: 2007-09-02 17:05 millert
2629:
2630: * INSTALL: update --passprompt escape info
2631:
2632: 2007-09-02 17:03 millert
2633:
2634: * configure.in: remove now-bogus comment and update copyright date
2635:
2636: 2007-09-02 16:35 millert
2637:
2638: * configure.in: Fix up use of with_passwd
2639:
2640: 2007-09-02 16:25 millert
2641:
2642: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2643: Update to autoconf-2.61 andf libtool-1.5.24
2644:
2645: 2007-09-02 16:17 millert
2646:
2647: * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2648: autoconf-2.61
2649:
2650: 2007-09-01 17:39 millert
2651:
2652: * gram.c: regen
2653:
2654: 2007-09-01 17:39 millert
2655:
2656: * gram.y: move tags and runaslist propagation to be earlier
2657:
2658: 2007-09-01 09:34 millert
2659:
2660: * visudo.c: If -f flag given use the permissions of the original
2661: file as a template
2662:
2663: 2007-09-01 08:45 millert
2664:
2665: * gram.y: prevent a double free() when re-initing the parser
2666:
2667: 2007-08-31 19:30 millert
2668:
2669: * configure: regen
2670:
2671: 2007-08-31 19:30 millert
2672:
2673: * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2674: ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2675: redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2676: testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2677: auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2678: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2679: Remove support for compilers that don't support void *
2680:
2681: 2007-08-31 19:14 millert
2682:
2683: * gram.c: regen
2684:
2685: 2007-08-31 19:13 millert
2686:
2687: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2688: match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2689: manipulation macros to list.h and create C versions of the more
2690: complex ones in list.c. The names have been down-cased so they
2691: appear more like normal functions.
2692:
2693: 2007-08-31 17:21 millert
2694:
2695: * Makefile.in: Fix cmp command when regenerating parser. Make
2696: gram.o the first dependency for all programs so gram.h will be
2697: generated before anything that needs it.
2698:
2699: 2007-08-31 13:56 millert
2700:
2701: * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2702: functions.
2703:
2704: 2007-08-30 21:21 millert
2705:
2706: * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2707: permission and short-circuit on the first non-UNSPEC hit we get
2708: for the command. This means that instead of cycling through the
2709: all the parsed sudoers entries we start at the end and work
2710: backwards and quit after the first positive or negative match.
2711:
2712: 2007-08-30 21:13 millert
2713:
2714: * gram.c: regen
2715:
2716: 2007-08-30 21:12 millert
2717:
2718: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2719: Change list head macros to take a pointer, not a struct.
2720:
2721: 2007-08-30 20:46 millert
2722:
2723: * gram.c: regen
2724:
2725: 2007-08-30 20:46 millert
2726:
2727: * gram.y: Propagate the runasspec from one command to the next in a
2728: cmndspec.
2729:
2730: 2007-08-30 16:15 millert
2731:
2732: * match.c: Replace has_meta() with a macro that calls strpbrk().
2733:
2734: 2007-08-30 16:04 millert
2735:
2736: * gram.c: regen
2737:
2738: 2007-08-30 13:26 millert
2739:
2740: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2741: testsudoers.c, visudo.c: Use a list head struct when storing the
2742: semi-circular lists and convert to tail queues in the process.
2743: This will allow us to reverse foreach loops more easily and it
2744: makes it clearer which functions expect a list as opposed to a
2745: single member.
2746:
2747: Add macros for manipulating lists. Some of these should become
2748: functions.
2749:
2750: When freeing up a list, just pop off the last item in the queue
2751: instead of going from head to tail. This is simpler since we
2752: don't have to stash a pointer to the next member, we always just
2753: use the last one in the queue until the queue is empty.
2754:
2755: Rename match functions that take a list to have list in the name.
2756: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2757:
2758: 2007-08-30 13:12 millert
2759:
2760: * parse.c: Fix pasto, append "!" not negated (which is an int) for
2761: sudo -l output.
2762:
2763: 2007-08-30 12:45 millert
2764:
2765: * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2766: dependency is enough. Only move y.tab.h to gram.h if it is
2767: different; avoids needless rebuilding.
2768:
2769: 2007-08-27 15:51 millert
2770:
2771: * sudoers.pod: Defaults lines may be associated with lists of
2772: users, hosts, commands and runas users, not just single entries.
2773:
2774: 2007-08-26 17:42 millert
2775:
2776: * Makefile.in: Revert the "cmp" portion of the last diff, it
2777: doesn't make sense.
2778:
2779: 2007-08-26 17:10 millert
2780:
2781: * Makefile.in: Remove *.lo for clean: When generating the parser,
2782: only move the generated files into place if they differ from the
2783: existing ones.
2784:
2785: 2007-08-24 22:47 millert
2786:
2787: * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2788: (readable) one and add an extra check when it matches to make
2789: sure we have a valid address.
2790:
2791: 2007-08-24 22:36 millert
2792:
2793: * match.c: Fix thinko introduced when merging IPV6 support.
2794:
2795: 2007-08-24 14:23 millert
2796:
2797: * HISTORY, LICENSE: regen
2798:
2799: 2007-08-24 14:23 millert
2800:
2801: * license.pod: add 2007
2802:
2803: 2007-08-24 14:19 millert
2804:
2805: * UPGRADE: mention #uid vs. comment pitfall
2806:
2807: 2007-08-24 09:50 millert
2808:
2809: * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2810: problem with the latest autoconf. From Stepan Kasal.
2811:
2812: 2007-08-23 20:28 millert
2813:
2814: * parse.h: Back out he XOR swap trick, it is slower than a temp
2815: variable on modern CPUs.
2816:
2817: 2007-08-23 20:14 millert
2818:
2819: * gram.c: regen
2820:
2821: 2007-08-23 20:14 millert
2822:
2823: * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2824: and use the XOR swap trick to swap the prev pointers during
2825: append.
2826:
2827: 2007-08-23 15:31 millert
2828:
2829: * parse.h: remove useless statement
2830:
2831: 2007-08-23 07:47 millert
2832:
2833: * toke.c, toke.l: Refactor #include parsing into a separate
2834: function and return unparsed chars (such as newline or comment)
2835: back to the lexer.
2836:
2837: 2007-08-22 18:56 millert
2838:
2839: * WHATSNEW: mention better uid support
2840:
2841: 2007-08-22 18:55 millert
2842:
2843: * sudoers.pod: Users may now consist of a uid.
2844:
2845: 2007-08-22 18:39 millert
2846:
2847: * gram.c, gram.h, toke.c: regen
2848:
2849: 2007-08-22 18:32 millert
2850:
2851: * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2852: characters that would require quoting in sudoers.
2853:
2854: 2007-08-22 18:31 millert
2855:
2856: * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2857: characters which should be quoted with a backslash when
2858: displayed.
2859:
2860: 2007-08-22 18:28 millert
2861:
2862: * toke.l: Require that the first character after a comment not be a
2863: digit or a dash. This allows us to remove the GOTRUNAS state and
2864: treat uid/gids similar to other words. It also means that we can
2865: now specify uids in User_Lists and a User_Spec may now contain a
2866: uid.
2867:
2868: 2007-08-22 18:23 millert
2869:
2870: * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2871: make the runas portion of the grammar more natural.
2872:
2873: 2007-08-22 06:35 millert
2874:
2875: * Makefile.in, README, BUGS: The BUGS file is history
2876:
2877: 2007-08-21 09:19 millert
2878:
2879: * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2880: character after the pound sign isn't a digit or a dash.
2881:
2882: 2007-08-20 20:43 millert
2883:
2884: * WHATSNEW: Glob support was back-ported to 1.6.9
2885:
2886: 2007-08-20 19:59 millert
2887:
2888: * Makefile.in: remove sudo_usage.h in distclean
2889:
2890: 2007-08-20 19:24 millert
2891:
2892: * parse.c: If a Defaults value contains a blank, double-quote the
2893: string.
2894:
2895: 2007-08-20 19:19 millert
2896:
2897: * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2898: that span multiple lines using the line continuation char.
2899: Previously, the entire thing, including the continuation char,
2900: newline, and spaces was stored as-is.
2901:
2902: 2007-08-20 10:46 millert
2903:
2904: * sudo.c: Be consistent when using single quotes and backticks.
2905:
2906: 2007-08-19 16:48 millert
2907:
2908: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2909: sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2910: dynamically allocated strings and word-wrapped output. Currently
2911: used for sudo's usage() and sudo -l output. Sudo usage strings
2912: are now in sudo_usage.h which is generated at configure time.
2913:
2914: 2007-08-18 08:22 millert
2915:
2916: * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2917: actual tty width instead of assuming 80.
2918:
2919: 2007-08-17 18:32 millert
2920:
2921: * history.pod: some more info
2922:
2923: 2007-08-17 17:28 millert
2924:
2925: * history.pod: Mentioned Chris Jepeway's parser and also the new
2926: one that is in sudo 1.7.
2927:
2928: 2007-08-16 09:38 millert
2929:
2930: * sudo.pod, visudo.pod: For the options list, add flag args where
2931: appropriate and increase the indent level so there is room for
2932: them.
2933:
2934: 2007-08-15 13:49 millert
2935:
2936: * parse.c: Fix some spacing in "sudo -l" and add a comment about
2937: some bogosity in the line wrapping.
2938:
2939: 2007-08-15 11:21 millert
2940:
2941: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2942: visudo.man.in, visudo.cat: regen
2943:
2944: 2007-08-15 11:20 millert
2945:
2946: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2947: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2948: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2949: testsudoers.c, toke.c, toke.l: Remove monitor support until there
2950: is a versino of systrace that uses a lookaside buffer (or we have
2951: a better mechanism to use).
2952:
2953: 2007-08-15 09:22 millert
2954:
2955: * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2956: instead of gethostbyname() if it is available
2957:
2958: 2007-08-14 15:27 millert
2959:
2960: * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2961: sizeof(int).
2962:
2963: 2007-08-14 11:19 millert
2964:
2965: * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2966:
2967: 2007-08-14 10:04 millert
2968:
2969: * sudo.c: If we can open sudoers but fail to read the first byte,
2970: close the file stream before trying again.
2971:
2972: 2007-08-13 12:34 millert
2973:
2974: * gram.c, toke.c: regen
2975:
2976: 2007-08-13 12:29 millert
2977:
2978: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2979: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2980:
2981: 2007-08-13 12:23 millert
2982:
2983: * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2984: copyright
2985:
2986: 2007-08-12 18:55 millert
2987:
2988: * configure, configure.in: fix sudo_noexec extension which got
2989: broken in the libtool update
2990:
2991: 2007-08-10 10:41 millert
2992:
2993: * Makefile.in: explicitly specify -Tascii to nroff
2994:
2995: 2007-08-08 16:07 millert
2996:
2997: * logging.c: remove an ANSI-ism that crept in
2998:
2999: 2007-08-06 20:37 millert
3000:
3001: * sudo.pod: Adjust list indents Prevent -- from being turned into
3002: an em dash Use a list for the environment instead of a literal
3003: paragraph
3004:
3005: 2007-08-06 20:36 millert
3006:
3007: * visudo.pod: Use a list for the environment instead of an indented
3008: literal paragraph.
3009:
3010: 2007-08-06 20:33 millert
3011:
3012: * sudoers.pod: Adjust list indentation
3013:
3014: 2007-08-06 20:31 millert
3015:
3016: * license.pod: add =head3
3017:
3018: 2007-08-06 10:24 millert
3019:
3020: * sudo.pod: mention that when specifying a uid for the -u option
3021: the shell may require that the # be escaped
3022:
3023: 2007-08-01 22:08 millert
3024:
3025: * match.c: Fix off by one in group matching.
3026:
3027: 2007-07-31 14:04 millert
3028:
3029: * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
3030: David Krause.
3031:
3032: 2007-07-30 10:45 millert
3033:
3034: * configure, configure.in: Add missing define of
3035: HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
3036:
3037: 2007-07-30 09:29 millert
3038:
3039: * aclocal.m4, configure.in, configure: Fix link tests such that new
3040: gcc doesn't optimize away the test.
3041:
3042: 2007-07-29 19:21 millert
3043:
3044: * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
3045:
3046: 2007-07-29 19:09 millert
3047:
3048: * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
3049: =item
3050:
3051: 2007-07-29 18:32 millert
3052:
3053: * env.c: Add back allocation of the env struct in rebuild_env but
3054: save a copy of the old pointer and free it before returning.
3055:
3056: 2007-07-29 16:09 millert
3057:
3058: * env.c: Don't init the private environment in rebuild_env() since
3059: it may have already been done implicitly
3060: sudo_setenv/sudo_unsetenv.
3061:
3062: Multiply length by sizeof(char *) in memcpy/memmove when copying
3063: the environment so we copy the full thing.
3064:
3065: Add missing set of parens so we deref the right pointer in
3066: sudo_unsetenv when searching for a matching variable.
3067:
3068: 2007-07-26 16:35 millert
3069:
3070: * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
3071: the FILES section
3072:
3073: 2007-07-26 10:04 millert
3074:
3075: * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
3076:
3077: 2007-07-26 07:28 millert
3078:
3079: * sudoers.pod: Sort sudoers options; based on a diff from Igor
3080: Sobrado.
3081:
3082: 2007-07-25 16:19 millert
3083:
3084: * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
3085: @mansectsu@ and @mansectform@ since the latter confuses pod2man.
3086: The Makefile rules for the .man.in file will add @mansectsu@ and
3087: @mansectform@ back in after pod2man is done anyway.
3088:
3089: 2007-07-22 19:09 millert
3090:
3091: * LICENSE, Makefile.in, license.pod: Move license info to pod
3092: format
3093:
3094: 2007-07-22 18:43 millert
3095:
3096: * configure, configure.in, sudoers.pod: Substitute value of
3097: path_info into sudoers man page.
3098:
3099: 2007-07-22 16:40 millert
3100:
3101: * WHATSNEW: remove features that were back-ported to 1.6.9
3102:
3103: 2007-07-22 15:20 millert
3104:
3105: * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
3106: usage. From Igor Sobrado.
3107:
3108: 2007-07-22 15:19 millert
3109:
3110: * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
3111: ldap_sasl_interactive_bind_s() but don't have
3112: gss_krb5_ccache_name().
3113:
3114: 2007-07-22 08:23 millert
3115:
3116: * ChangeLog: rebuild without branch info
3117:
3118: 2007-07-22 08:23 millert
3119:
3120: * Makefile.in: Add ChangeLog target
3121:
3122: 2007-07-22 08:14 millert
3123:
3124: * auth/pam.c: Run cleanup code if the user hits ^C at the password
3125: prompt.
3126:
3127: 2007-07-22 08:13 millert
3128:
3129: * auth/pam.c: Some versions of pam_lastlog have a bug that will
3130: cause a crash if PAM_TTY is not set so if there is no tty, set
3131: PAM_TTY to the empty string.
3132:
3133: 2007-07-20 09:32 millert
3134:
3135: * Makefile.in: ChageLog not Changelog
3136:
3137: 2007-07-20 09:31 millert
3138:
3139: * ChangeLog: sync
3140:
3141: 2007-07-20 09:29 millert
3142:
3143: * Makefile.in: CHANGE -> Changelog
3144:
3145: 2007-07-19 20:23 millert
3146:
3147: * TODO: sync
3148:
3149: 2007-07-19 19:53 millert
3150:
3151: * config.h.in, configure.in, configure, ldap.c: Add configure hooks
3152: for gss_krb5_ccache_name() and the gssapi headers.
3153:
3154: 2007-07-18 12:57 millert
3155:
3156: * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
3157: return environment pointer, they set environ directly.
3158:
3159: No longer need to pass around an envp pointer since we just
3160: operate on environ now.
3161:
3162: Add dosync argument to insert_env() that indicates whether it
3163: should reset environ when realloc()ing env.envp.
3164:
3165: Use an initial size of 128 for the environment.
3166:
3167: 2007-07-18 12:41 millert
3168:
3169: * env.c: Split sudo_setenv() into an external version and a version
3170: only for use by rebuild_env().
3171:
3172: 2007-07-16 19:40 millert
3173:
3174: * ldap.c: Add support for using gss_krb5_ccache_name() instead of
3175: setting KRB5CCNAME. Also use sudo_unsetenv() in the
3176: non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
3177: original environment. TODO: configure setup for
3178: gss_krb5_ccache_name()
3179:
3180: 2007-07-16 18:44 millert
3181:
3182: * README.LDAP: add krb5_ccname
3183:
3184: 2007-07-16 18:44 millert
3185:
3186: * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
3187:
3188: 2007-07-16 18:39 millert
3189:
3190: * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
3191: syncing code into sync_env().
3192:
3193: 2007-07-16 07:27 millert
3194:
3195: * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3196: sasl_authid.
3197:
3198: 2007-07-15 15:44 millert
3199:
3200: * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3201: If specified, it will override the default value of KRB5CCNAME
3202: in the environment for the duration of the call to
3203: ldap_sasl_interactive_bind_s().
3204:
3205: 2007-07-15 15:41 millert
3206:
3207: * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3208: most format_env() + insert_env() combinations. insert_env() no
3209: longer takes a struct environment *
3210:
3211: 2007-07-15 12:47 millert
3212:
3213: * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3214:
3215: 2007-07-15 09:23 millert
3216:
3217: * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3218: support for SASL auth when connecting to an LDAP server. Adapted
3219: from a diff by Tom McLaughlin.
3220:
3221: 2007-07-14 16:32 millert
3222:
3223: * configure, configure.in: Only enable AIX or BSD auth if no other
3224: exclusive auth method has been chosen. Allows people to e.g.,
3225: use PAM on AIX without adding --without-aixauth. A better
3226: solution is needed to deal with default authentication since if a
3227: non-exclusive method is chosen we will still get an error.
3228:
3229: 2007-07-11 11:23 millert
3230:
3231: * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3232: history.pod (which is also used for web pages)
3233:
3234: 2007-07-09 19:40 millert
3235:
3236: * sudo.man.in, sudoers.man.in: regen
3237:
3238: 2007-07-09 19:25 millert
3239:
3240: * sudo.pod: Better explanation of environment handling in the sudo
3241: man page.
3242:
3243: 2007-07-09 15:13 millert
3244:
3245: * env.c, sudo.c: Defer setting user-specified env vars until after
3246: authentication.
3247:
3248: 2007-07-09 13:25 millert
3249:
3250: * env.c: honor def_default_path for PATH set on the command line
3251:
3252: 2007-07-09 13:22 millert
3253:
3254: * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3255: environment variables on the command line as long as they are
3256: allowed by env_keep and env_check. Ie: apply the same
3257: restrictions as normal environment variables. TODO: deal with
3258: secure_path
3259:
3260: 2007-07-08 14:44 millert
3261:
3262: * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3263: original envp to sudo_edit(). Don't allow -E or env var setting
3264: in sudoedit mode. More accurate usage() when called as sudoedit.
3265:
3266: 2007-07-08 14:41 millert
3267:
3268: * ldap.c: warn -> warning
3269:
3270: 2007-07-08 14:11 millert
3271:
3272: * sudo.pod: add -c option to sudoedit synopsis
3273:
3274: 2007-07-08 10:27 millert
3275:
3276: * TODO: udpate to reality
3277:
3278: 2007-07-08 09:43 millert
3279:
3280: * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3281: the return value from {user,host,runas,cmnd}_matches(). Rename
3282: *matches variables -> *match. Purely cosmetic.
3283:
3284: 2007-07-08 09:30 millert
3285:
3286: * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3287: No change in behavior.
3288:
3289: 2007-07-08 09:17 millert
3290:
3291: * sudoers: add SETENV tag
3292:
3293: 2007-07-06 15:51 millert
3294:
3295: * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3296: even if user didn't match since Defaults options may still apply.
3297:
3298: 2007-07-06 14:51 millert
3299:
3300: * check.c, sudo.c: Do not update timestamp if user not validated by
3301: sudoers.
3302:
3303: 2007-07-06 10:14 millert
3304:
3305: * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3306: and restore to the user's original in PERM_ROOT
3307:
3308: 2007-07-06 10:04 millert
3309:
3310: * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3311: now no different than PERM_ROOT so remove PERM_FULL_ROOT
3312:
3313: 2007-07-06 09:49 millert
3314:
3315: * check.c: don't check timestamp mtime if we are just going to
3316: remove it
3317:
3318: 2007-07-06 09:33 millert
3319:
3320: * sudoers.pod: Move sudoers defaults parameters into their own
3321: section.
3322:
3323: 2007-07-05 20:21 millert
3324:
3325: * testsudoers.c: Reduce a level of indent by a few placed continue
3326: statements.
3327:
3328: 2007-07-05 20:20 millert
3329:
3330: * parse.c: Make matching but negated commands/hosts/runas entries
3331: override a previous match as expected. Also reduce some levels
3332: of indent by a few placed continue statements.
3333:
3334: 2007-07-05 16:34 millert
3335:
3336: * parse.c: Print default runas in "sudo -l" if sudoers don't
3337: specify one.
3338:
3339: 2007-07-05 15:46 millert
3340:
3341: * match.c: Less hacky way of testing whether the domain was set.
3342:
3343: 2007-07-04 15:50 millert
3344:
3345: * INSTALL: Mention pam-devel and openldap-devel for Linux
3346:
3347: 2007-07-03 19:38 millert
3348:
3349: * README.LDAP: or vs. are
3350:
3351: 2007-07-01 16:55 millert
3352:
3353: * sudo.c: fix typo in Solaris project support
3354:
3355: 2007-07-01 09:40 millert
3356:
3357: * HISTORY: update
3358:
3359: 2007-07-01 09:07 millert
3360:
3361: * sudo.c: Make -- on the command line match the manual page. The
3362: implied shell case has been simplified as a result.
3363:
3364: 2007-06-28 10:44 millert
3365:
3366: * sudoers2ldif: add simplistic support for sudoRunas; note that if
3367: a sudoers entry contains multiple Runas users, all will apply to
3368: the sudoRole
3369:
3370: 2007-06-28 10:42 millert
3371:
3372: * sudoers2ldif: honor SETENV and NOSETENV tags
3373:
3374: 2007-06-24 09:25 millert
3375:
3376: * mon_systrace.c: Redo setting of user_args. We now build up a
3377: private copy of argv first and then replace the NULs with spaces.
3378:
3379: 2007-06-24 09:19 millert
3380:
3381: * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3382: success
3383:
3384: 2007-06-24 07:39 millert
3385:
3386: * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3387:
3388: 2007-06-23 20:00 millert
3389:
3390: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3391: visudo.man.in: regen
3392:
3393: 2007-06-23 19:58 millert
3394:
3395: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3396: gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3397: sudoers.pod, toke.c, toke.l: Add support for setting environment
3398: variables on the command line. This is only allowed if the
3399: setenv sudoers options is enabled or if the command is prefixed
3400: with the SETENV tag.
3401:
3402: 2007-06-23 19:57 millert
3403:
3404: * README.LDAP: replace Aaron's email address with the sudo-workers
3405: list
3406:
3407: 2007-06-23 19:55 millert
3408:
3409: * configure: regen
3410:
3411: 2007-06-21 20:35 millert
3412:
3413: * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3414: schema out into separate files.
3415:
3416: 2007-06-21 18:28 millert
3417:
3418: * auth/aix_auth.c: free message if set by authenticate()
3419:
3420: 2007-06-21 13:03 millert
3421:
3422: * match.c: deal with NULL gr_mem
3423:
3424: 2007-06-20 15:04 millert
3425:
3426: * config.h.in: regen
3427:
3428: 2007-06-20 15:04 millert
3429:
3430: * configure.in: add template for HAVE_PROJECT_H
3431:
3432: 2007-06-20 07:06 millert
3433:
3434: * closefrom.c: include fcntl.h
3435:
3436: 2007-06-19 19:37 millert
3437:
3438: * INSTALL: mention --with-project
3439:
3440: 2007-06-19 18:24 millert
3441:
3442: * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3443: support. From Michael Brantley.
3444:
3445: 2007-06-19 17:27 millert
3446:
3447: * sudoers.pod: fix typo
3448:
3449: 2007-06-19 17:22 millert
3450:
3451: * configure: regen
3452:
3453: 2007-06-19 17:21 millert
3454:
3455: * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3456:
3457: 2007-06-19 17:00 millert
3458:
3459: * memrchr.c: Remove dependecy on NULL
3460:
3461: 2007-06-19 15:37 millert
3462:
3463: * configure: regen
3464:
3465: 2007-06-19 15:37 millert
3466:
3467: * aclocal.m4, configure.in: Can't use the regular autoconf
3468: fnmatch() check since we need FNM_CASEFOLD so go back to our
3469: custom one.
3470:
3471: 2007-06-19 12:52 millert
3472:
3473: * env.c: Fix preserving of variables in env_keep.
3474:
3475: 2007-06-19 07:10 millert
3476:
3477: * env.c: add XAUTHORIZATION
3478:
3479: 2007-06-18 20:41 millert
3480:
3481: * UPGRADE: expand upon env resetting and mention that it began in
3482: 1.6.9 not 1.7.
3483:
3484: 2007-06-18 20:33 millert
3485:
3486: * sudoers.pod: Update descriptions of env_keep and env_check to
3487: match current reality.
3488:
3489: 2007-06-18 17:33 millert
3490:
3491: * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3492: HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3493: intial_keepenv_table.
3494:
3495: 2007-06-18 17:23 millert
3496:
3497: * env.c, logging.c: Treat USERNAME environemnt variable like
3498: LOGNAME/USER
3499:
3500: 2007-06-18 17:21 millert
3501:
3502: * env.c: Don't need to populate keepenv table with the contents of
3503: the checkenv table.
3504:
3505: 2007-06-18 08:57 millert
3506:
3507: * sudo.c: Don't force sudo into the C locale.
3508:
3509: 2007-06-18 08:56 millert
3510:
3511: * env.c: Make env_check apply when env_reset it true. Environment
3512: variables are passed through unless they contain '/' or '%'.
3513: There is no need to have a variable in both env_check and
3514: env_keep.
3515:
3516: 2007-06-16 07:31 millert
3517:
3518: * visudo.c: Remove an duplicate lock_file() call and add a comment.
3519:
3520: 2007-06-15 21:16 millert
3521:
3522: * UPGRADE: Add sudo 1.6.9 upgrade note.
3523:
3524: 2007-06-14 12:23 millert
3525:
3526: * interfaces.c: Solaris will return EINVAL if the buffer used in
3527: SIOCGIFCONF is too small. From Klaus Wagner.
3528:
3529: 2007-06-14 12:03 millert
3530:
3531: * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3532: logging.c, sudo.h: Redo the long syslog line splitting based on a
3533: patch from Eygene Ryabinkin. Include memrchr() for systems
3534: without it.
3535:
3536: 2007-06-14 07:09 millert
3537:
3538: * configure.in: Since we need to be able to convert timespec to
3539: timeval for utimes() the last 3 digits in the tv_nsec are not
3540: significant. This makes the sudoedit file date comparison work
3541: again.
3542:
3543: 2007-06-13 13:41 millert
3544:
3545: * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3546: deal with adding things to AUTH_OBJS. This deals with exclusive
3547: authentication methods in a simple way.
3548:
3549: 2007-06-12 13:08 millert
3550:
3551: * LICENSE: mkstemp.c is BSD code too.
3552:
3553: 2007-06-12 09:21 millert
3554:
3555: * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3556:
3557: 2007-06-11 18:27 millert
3558:
3559: * sudo.c: cleanenv() is no more.
3560:
3561: 2007-06-10 18:37 millert
3562:
3563: * ChangeLog: Display branch info in Changelog
3564:
3565: 2007-06-10 18:18 millert
3566:
3567: * utimes.c: Include config.h early so we have it for
3568: TIME_WITH_SYS_TIME
3569:
3570: 2007-06-10 18:00 millert
3571:
3572: * ChangeLog: Fix Changelog generation and update.
3573:
3574: 2007-06-09 07:26 millert
3575:
3576: * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3577:
3578: Move old-style fd closing into closefrom_fallback() and call that
3579: if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3580:
3581: 2007-06-09 07:24 millert
3582:
3583: * config.h.in, configure.in, auth/kerb5.c: o use
3584: krb5_verify_user() if available instead of doing it by hand
3585: o use krb5_init_secure_context() if we have it
3586: o pass an encryption type of 0 to krb5_kt_read_service_key()
3587: instead of
3588: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3589:
3590: 2007-06-09 07:20 millert
3591:
3592: * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3593: Debian.
3594:
3595: 2007-06-09 07:17 millert
3596:
3597: * configure.in: Fix closefrom() substitution in the Makefile
3598:
3599: 2007-06-09 07:15 millert
3600:
3601: * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3602:
3603: 2007-06-07 07:52 millert
3604:
3605: * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3606:
3607: 2007-06-07 07:22 millert
3608:
3609: * auth/kerb5.c: If we cannot get a valid service key using the
3610: default keytab it is a fatal error. Fixes a bug where sudo could
3611: be tricked into allowing access when it should not by a fake KDC.
3612: From Thor Lancelot Simon.
3613:
3614: 2007-05-12 08:56 millert
3615:
3616: * aclocal.m4, configure, configure.in: Update long long checks to
3617: use AC_CHECK_TYPES and to cache values.
3618:
3619: 2007-05-12 08:07 millert
3620:
3621: * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3622: homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3623: that assumes replacing with GNU fnmatch.
3624:
3625: 2007-05-11 17:05 millert
3626:
3627: * configure, configure.in: Add closefrom() to LIB_OBJS not
3628: SUDO_OBJS if it is missing since we need it for visudo now too.
3629:
3630: 2007-04-24 14:44 millert
3631:
3632: * sudoers.pod: Attempt to clarify the bit talking about network
3633: numbers w/o netmasks.
3634:
3635: 2007-04-24 14:25 millert
3636:
3637: * sudo.pod: Clarify timestamp dir ownership sentence.
3638:
3639: 2007-04-20 12:40 millert
3640:
3641: * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3642: __LIBPAM_VERSION. From Dmitry V. Levin.
3643:
3644: 2007-04-16 12:13 millert
3645:
3646: * sudo.c: -i is also one of the mutually exclusive options to list
3647: it in the warning message. Noted by Chris Pepper.
3648:
3649: 2007-04-12 11:18 millert
3650:
3651: * visudo.pod: The sudoers variable is env_editor, not enveditor.
3652: From Jean-Francois Saucier.
3653:
3654: 2007-03-29 13:30 millert
3655:
3656: * redblack.c: I tracked down the original author so credit him and
3657: include his license info.
3658:
3659: 2007-02-06 13:25 millert
3660:
3661: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3662: sudoers.pod: Fix typos; from Jason McIntyre.
3663:
3664: 2007-02-06 13:23 millert
3665:
3666: * logging.c: Restore signal mask before calling reapchild(). Fixes
3667: a possible race condition that could prevent sudo from properly
3668: waiting for the child.
3669:
3670: 2007-01-31 10:02 millert
3671:
3672: * pwutil.c: Don't declare pw_free() if we are not going to use it.
3673:
3674: 2007-01-31 10:00 millert
3675:
3676: * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3677: and LDR_PRELOAD64. The 64-bit version is not currently
3678: supported. Remove zero_env() prototype as it no longer exists.
3679:
3680: 2006-12-11 13:21 millert
3681:
3682: * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3683: for rfc 3834.
3684:
3685: 2006-09-29 10:53 millert
3686:
3687: * auth/pam.c: If the user enters ^C at the password prompt, abort
3688: instead of trying to authenticate with an empty password (which
3689: causes an annoying delay).
3690:
3691: 2006-08-17 11:26 millert
3692:
3693: * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3694: F_CLOSEM support to closefrom(); adapted from a diff by Darren
3695: Tucker.
3696:
3697: 2006-08-17 11:25 millert
3698:
3699: * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3700: it out too.
3701:
3702: 2006-08-04 11:34 millert
3703:
3704: * config.sub, config.guess: Update to latest versions from
3705: cvs.savannah.gnu.org
3706:
3707: 2006-07-31 13:51 millert
3708:
3709: * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3710: sudo_end{pw,grp}ent() so we can close the passwd/group files
3711: early.
3712:
3713: 2006-07-31 13:50 millert
3714:
3715: * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3716: flavor of set_perms() for systems without setreuid() or
3717: setresuid() that have a working seteuid(). Tested on Darwin.
3718:
3719: 2006-07-30 15:56 millert
3720:
3721: * mon_systrace.c: systrace_read() returns ssize_t
3722:
3723: 2006-07-30 15:53 millert
3724:
3725: * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3726: Knox.
3727:
3728: 2006-07-28 13:12 millert
3729:
3730: * HISTORY: Fix typo; Matt Ackeret
3731:
3732: 2006-07-17 08:25 millert
3733:
3734: * sudo.c: Print sudoers path in -V mode for root.
3735:
3736: 2006-06-15 14:44 millert
3737:
3738: * ldap.c: Do a sub tree search instead of a base search (one level
3739: in the tree only) for sudo right objects. This allows system
3740: administrators to categorize the rights in a tree to make them
3741: easier to manage.
3742:
3743: 2005-12-28 13:52 millert
3744:
3745: * sudo.pod: fix typo
3746:
3747: 2005-12-04 12:16 millert
3748:
3749: * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3750: timelimit and bind_timelimit support; adapted from gentoo.
3751:
3752: 2005-11-23 18:57 millert
3753:
3754: * ldap.c: Support comments that start in the middle of a line
3755:
3756: 2005-11-23 18:56 millert
3757:
3758: * configure.in, configure: Define LDAP_DEPRECATED until we start
3759: using ldap_get_values_len()
3760:
3761: 2005-11-18 09:55 millert
3762:
3763: * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3764:
3765: 2005-11-17 20:39 millert
3766:
3767: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3768: takes an int as an arg so it can be used as a signal handler too.
3769:
3770: 2005-11-17 20:38 millert
3771:
3772: * sudo.c: Make a copy of the shell field in the passwd struct for
3773: NewArgv to avoid a use after free situation after sudo_endpwent()
3774: is called.
3775:
3776: 2005-11-16 20:36 millert
3777:
3778: * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3779: mkstemp() for those poor souls without it.
3780:
3781: 2005-11-15 09:25 millert
3782:
3783: * env.c: Add PERL5DB to list of environment variables to remove.
3784:
3785: 2005-11-13 15:49 millert
3786:
3787: * mon_systrace.c, mon_systrace.h: Instead of calling the check
3788: function twice with a state cookie use separate check/log
3789: functions.
3790:
3791: Check more ioctl() calls for failure.
3792:
3793: systrace_{read,write} now return the number of bytes read/written
3794: or -1 on error.
3795:
3796: 2005-11-13 14:51 millert
3797:
3798: * env.c: Add more environment variables to remove; from gentoo
3799: linux Add some comments about what bad env variables go to what
3800: (more to do)
3801:
3802: 2005-11-11 17:23 millert
3803:
3804: * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3805: the exec since they free up our cached copy of the passwd
3806: structs, including sudo_user and sudo_runas. Fixes a
3807: use-after-free bug.
3808:
3809: 2005-11-11 17:19 millert
3810:
3811: * visudo.c: Close all fd's before executing editor.
3812:
3813: 2005-11-11 17:17 millert
3814:
3815: * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3816: set.
3817:
3818: 2005-11-11 11:22 millert
3819:
3820: * check.c: Fix fd leak when lecture file option is enabled. From
3821: Jerry Brown
3822:
3823: 2005-11-07 11:02 millert
3824:
3825: * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3826: environment variables to remove. From Charles Morris
3827:
3828: 2005-11-01 13:24 millert
3829:
3830: * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3831:
3832: 2005-10-27 20:35 millert
3833:
3834: * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3835:
3836: 2005-08-14 20:32 millert
3837:
3838: * sudoers.pod: Fix typo; Toby Peterson
3839:
3840: 2005-08-02 09:57 millert
3841:
3842: * tsgetgrpw.c: Make return buffers static so they don't get
3843: clobbered
3844:
3845: 2005-07-27 21:14 millert
3846:
3847: * auth/securid5.c: Fix securid5 authentication, was not checking
3848: for ACM_OK. Also add default cases for the two switch()es.
3849: Problem noted by ccon at worldbank
3850:
3851: 2005-06-26 20:10 millert
3852:
3853: * ldap.c: Remove ncat() in favor of just counting bytes and
3854: pre-allocating what is needed.
3855:
3856: 2005-06-26 19:44 millert
3857:
3858: * ldap.c: Fix up some comments Add missing fclose() for the
3859: rootbinddn case
3860:
3861: 2005-06-26 19:38 millert
3862:
3863: * ldap.c: align struct ldap_config
3864:
3865: 2005-06-26 19:37 millert
3866:
3867: * ldap.c: use LINE_MAX for max conf file line size
3868:
3869: 2005-06-26 18:36 millert
3870:
3871: * pathnames.h.in: add _PATH_LDAP_SECRET
3872:
3873: 2005-06-26 18:36 millert
3874:
3875: * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3876:
3877: 2005-06-25 18:03 millert
3878:
3879: * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3880: ldap.conf
3881:
3882: 2005-06-25 17:46 millert
3883:
3884: * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3885: variable by default.
3886:
3887: 2005-06-25 16:39 millert
3888:
3889: * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3890: is safe for LD_PRELOAD
3891:
3892: 2005-06-25 16:15 millert
3893:
3894: * acsite.m4, configure: set need_version=no for all cases; this is
3895: safe for LD_PRELOAD
3896:
3897: 2005-06-25 14:45 millert
3898:
3899: * aclocal.m4: typo
3900:
3901: 2005-06-25 14:33 millert
3902:
3903: * configure, configure.in: Add dragonfly
3904:
3905: 2005-06-25 14:29 millert
3906:
3907: * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3908:
3909: 2005-06-25 14:21 millert
3910:
3911: * configure: regen
3912:
3913: 2005-06-25 14:20 millert
3914:
3915: * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3916: ltoptions.m4 ltsugar.m4 ltversion.m4
3917:
3918: 2005-06-25 14:08 millert
3919:
3920: * config.guess, config.sub, ltmain.sh: merge in local changes:
3921: config.guess: o better openbsd support config.sub: o hiuxmpp
3922: support ltmain.sh o remove requirement that libs must begin with
3923: "lib" o don't print a bunch of crap about library installs o
3924: don't run ldconfig
3925:
3926: 2005-06-25 14:05 millert
3927:
3928: * config.guess, config.sub, ltmain.sh: libtool 1.9f
3929:
3930: 2005-06-25 14:04 millert
3931:
3932: * configure.in: Update with autoupdate and make minor changes for
3933: libtool 1.9f
3934:
3935: 2005-06-22 23:19 millert
3936:
3937: * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3938:
3939: 2005-06-22 23:04 millert
3940:
3941: * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3942: emul/timespec.h: Move declatation of struct timespec to its own
3943: include files for systems without it since it needs time_t
3944: defined.
3945:
3946: 2005-06-22 22:57 millert
3947:
3948: * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3949:
3950: 2005-05-27 01:59 millert
3951:
3952: * auth/pam.c: Call pam_open_session() and pam_close_session() to
3953: give pam_limits a chance to run. Idea from Karel Zak.
3954:
3955: 2005-04-24 19:24 millert
3956:
3957: * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3958: to silence warnings on Solaris
3959:
3960: 2005-04-24 19:22 millert
3961:
3962: * parse.c: include grp.h to silence a warning on Solaris
3963:
3964: 2005-04-23 15:10 millert
3965:
3966: * parse.c: Fix printing of += and -= defaults.
3967:
3968: 2005-04-17 01:21 millert
3969:
3970: * mon_systrace.c: Sanity check number of syscall args with argsize.
3971: Not really needed but a little paranoia never hurts.
3972:
3973: 2005-04-17 01:18 millert
3974:
3975: * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3976: void * Use int, not size_t/ssize_t for systrace lengths (since it
3977: uses int)
3978:
3979: 2005-04-16 03:14 millert
3980:
3981: * mon_systrace.c: Add some memsets for paranoia Fix namespace
3982: collsion w/ error Check rval of decode_args() and update_env()
3983: Remove improper setting of validated variable
3984:
3985: 2005-04-11 21:37 millert
3986:
3987: * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3988: file if def_ignore_sudoers is not set and call LDAP versions from
3989: display_privs() and display_cmnd() instead of directly from
3990: main(). Because of this we need to defer closing the ldap
3991: connection until after -l processing has ocurred and we must pass
3992: in the ldap pointer to display_privs() and display_cmnd().
3993:
3994: 2005-04-11 21:33 millert
3995:
3996: * ldap.c: Reorganize LDAP code to better match normal sudoers
3997: parsing. Instead of storing strings for later printing in -l
3998: mode we do another query since the authenticating user and the
3999: user being listed may not be the same (the new -U flag). Also
4000: add support for "sudo -l command".
4001:
4002: There is still a fair bit if duplicated code that can probably be
4003: refactored.
4004:
4005: 2005-04-11 00:37 millert
4006:
4007: * ldap.c: Replace pass variable with do_netgr for better
4008: readability.
4009:
4010: 2005-04-10 23:49 millert
4011:
4012: * ldap.c: use DPRINTF macro
4013:
4014: 2005-04-10 23:18 millert
4015:
4016: * ldap.c: estrdup, not strdup
4017:
4018: 2005-04-10 17:44 millert
4019:
4020: * parse.c: Add macro to test if the tag changed to improve
4021: readability.
4022:
4023: 2005-04-10 17:40 millert
4024:
4025: * parse.c: Avoid printing defaults header if there are no defaults
4026: to print...
4027:
4028: 2005-04-10 15:29 millert
4029:
4030: * glob.c: Fix a warning on systems without strlcpy().
4031:
4032: 2005-04-10 13:32 millert
4033:
4034: * pwutil.c: Use macros where possible for sudo_grdup() like
4035: sudo_pwdup().
4036:
4037: 2005-04-08 17:04 millert
4038:
4039: * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
4040: add in tv_usec / 1000000.
4041:
4042: 2005-03-29 23:38 millert
4043:
4044: * auth/kerb5.c: The component in krb5_principal_get_comp_string()
4045: should be 1, not 0 for Heimdal. From Alex Plotnick.
4046:
4047: 2005-03-29 09:29 millert
4048:
4049: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
4050: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4051: pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
4052: Add efree() for consistency with emalloc() et al. Allows us to
4053: rely on C89 behavior (free(NULL) is valid) even on K&R.
4054:
4055: 2005-03-28 22:33 millert
4056:
4057: * parse.c, sudo.c: Move initgroups() for -U option into
4058: display_privs() so group matching in sudoers works correctly.
4059:
4060: 2005-03-26 21:34 millert
4061:
4062: * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
4063: with sudo_ldap_close.
4064:
4065: 2005-03-26 20:01 millert
4066:
4067: * parse.c: Add missing space in Defaults printing
4068:
4069: 2005-03-25 12:36 millert
4070:
4071: * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
4072: size computaton and string copies.
4073:
4074: 2005-03-18 22:08 millert
4075:
4076: * pwutil.c: Zero old pw_passwd before replacing with version from
4077: shadow file.
4078:
4079: 2005-03-18 22:07 millert
4080:
4081: * configure, configure.in: Only attempt shadow password detection
4082: if PAM is not being used Add shadow_* variables to make shadow
4083: password detection more generic.
4084:
4085: 2005-03-18 21:46 millert
4086:
4087: * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
4088: than CPPFLAGS
4089:
4090: 2005-03-12 19:27 millert
4091:
4092: * sudoers.pod: use a non-breaking space to avoid a double space
4093: after e.g.
4094:
4095: 2005-03-12 19:26 millert
4096:
4097: * sudo.pod: commna, not colon after e.g.
4098:
4099: 2005-03-12 18:43 millert
4100:
4101: * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
4102: at least uses __execve() internally.
4103:
4104: 2005-03-12 12:29 millert
4105:
4106: * indent.pro: Match reality a bit more.
4107:
4108: 2005-03-12 12:27 millert
4109:
4110: * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
4111:
4112: 2005-03-11 23:42 millert
4113:
4114: * pwutil.c: Store shadow password after making a local copy of
4115: struct passwd in case normal and shadow routines use the same
4116: internal buffer in libc.
4117:
4118: 2005-03-10 20:57 millert
4119:
4120: * alloc.c, logging.c: Make varargs usage consistent with the rest
4121: of the code.
4122:
4123: 2005-03-10 10:09 millert
4124:
4125: * sudo_noexec.c: Wrap more of the exec family since on Linux the
4126: others do not appear to go through the normal execve() path.
4127:
4128: 2005-03-10 09:57 millert
4129:
4130: * visudo.c: make print_unused static like proto says
4131:
4132: 2005-03-10 09:55 millert
4133:
4134: * glob.c: silence a warning on K&R systems
4135:
4136: 2005-03-10 09:51 millert
4137:
4138: * parse.c, alias.c, error.c: make this build in K&R land
4139:
4140: 2005-03-07 22:21 millert
4141:
4142: * toke.c: regen
4143:
4144: 2005-03-05 22:46 millert
4145:
4146: * ldap.c: return(foo) not return foo optimize _atobool() slightly
4147:
4148: 2005-03-05 22:40 millert
4149:
4150: * ldap.c: Use TRUE/FALSE
4151:
4152: 2005-03-05 22:31 millert
4153:
4154: * ldap.c: Reformat to match the rest of sudo's code.
4155:
4156: 2005-03-05 19:33 millert
4157:
4158: * sudo.pod: I am the primary author
4159:
4160: 2005-02-22 22:28 millert
4161:
4162: * README, RUNSON, Makefile.in: The RUNSON file is toast--it
4163: confused too many people and really isn't needed in a
4164: configure-oriented world.
4165:
4166: 2005-02-22 22:28 millert
4167:
4168: * INSTALL: alternate -> alternative
4169:
4170: 2005-02-22 22:26 millert
4171:
4172: * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
4173: have issues with TCSAFLUSH.
4174:
4175: 2005-02-22 22:16 millert
4176:
4177: * toke.l: Allow leading blanks before Defaults and Foo_Alias
4178: definitions
4179:
4180: 2005-02-22 22:14 millert
4181:
4182: * Makefile.in: fix rules to build toke.o and gram.o in devel mode
4183:
4184: 2005-02-20 13:00 millert
4185:
4186: * sudoers.pod: env_keep overrides set_logname
4187:
4188: 2005-02-20 12:57 millert
4189:
4190: * env.c: Fix disabling set_logname and make env_keep override
4191: set_logname.
4192:
4193: 2005-02-20 12:28 millert
4194:
4195: * compat.h, config.h.in, configure, configure.in: No longer need
4196: memmove()
4197:
4198: 2005-02-20 11:48 millert
4199:
4200: * env.c, sudo.c: Just clean the environment once. This assumes
4201: that any further setenv/putenv will be able to handle the fact
4202: that we replaced environ with our own malloc'd copy but all the
4203: implementations I've checked do.
4204:
4205: 2005-02-15 23:16 millert
4206:
4207: * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4208: dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4209: into rebuild_env()
4210:
4211: 2005-02-13 00:33 millert
4212:
4213: * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4214: and prev_user into init_vars() since user_shell at least is
4215: needed there.
4216:
4217: 2005-02-12 18:51 millert
4218:
4219: * Makefile.in: fix devel builds
4220:
4221: 2005-02-12 18:46 millert
4222:
4223: * check.c, sudo.c: Fix some printf format mismatches on error.
4224:
4225: 2005-02-12 18:33 millert
4226:
4227: * configure, gram.c, toke.c: regen
4228:
4229: 2005-02-12 17:56 millert
4230:
4231: * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4232: alloc.c, check.c, closefrom.c, compat.h, configure.in,
4233: defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4234: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4235: interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4236: match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4237: set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4238: strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4239: sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4240: utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4241: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4242: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4243: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4244: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4245: emul/utime.h: Update copyright years.
4246:
4247: 2005-02-12 16:46 millert
4248:
4249: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4250: version 1.7
4251:
4252: 2005-02-12 16:16 millert
4253:
4254: * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4255: entries.
4256:
4257: 2005-02-11 18:06 millert
4258:
4259: * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4260: to warn about printf-like format mismatches
4261:
4262: 2005-02-10 00:16 millert
4263:
4264: * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4265: generated from cvs logs
4266:
4267: 2005-02-10 00:03 millert
4268:
4269: * set_perms.c: Use warning/error instead of perror/fatal.
4270:
4271: 2005-02-09 23:13 millert
4272:
4273: * config.guess: Update OpenBSD section
4274:
4275: 2005-02-09 23:10 millert
4276:
4277: * UPGRADE: Add upgrading noted for 1.7
4278:
4279: 2005-02-09 23:00 millert
4280:
4281: * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4282: environment, just prune out entries based on the env_delete and
4283: env_check lists. Base building up the new environment on the
4284: current environment and the variables we removed initially.
4285:
4286: 2005-02-09 22:23 millert
4287:
4288: * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4289: if locales are supported, just to be safe.
4290:
4291: 2005-02-09 22:19 millert
4292:
4293: * toke.c, toke.l: Cast argument to ctype functions to unsigned
4294: char.
4295:
4296: 2005-02-07 22:56 millert
4297:
4298: * env.c: correct value for DID_USER
4299:
4300: 2005-02-07 22:55 millert
4301:
4302: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4303: <compat.h> not "compat.h"
4304:
4305: 2005-02-07 22:51 millert
4306:
4307: * defaults.c: Reset the environment by default.
4308:
4309: 2005-02-07 22:50 millert
4310:
4311: * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4312: malloc an new vector if execve() fails.
4313:
4314: 2005-02-06 23:16 millert
4315:
4316: * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4317: execve(2) and wrap the command in sh if we get ENOEXEC.
4318:
4319: 2005-02-05 23:01 millert
4320:
4321: * sudo_noexec.c: Only include time.h on systems that lack struct
4322: timespec which gets defind in compat.h (using time_t).
4323:
4324: 2005-02-05 22:59 millert
4325:
4326: * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4327: w/o struct timespec.
4328:
4329: 2005-02-05 22:56 millert
4330:
4331: * configure, compat.h, config.h.in, configure.in: use bcopy on
4332: systems w/o memmove
4333:
4334: 2005-02-05 22:31 millert
4335:
4336: * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4337: so limit its use to gcc >= 2.8.
4338:
4339: 2005-02-05 21:21 millert
4340:
4341: * Makefile.in: Add explicit rule to build sudo_noexec.lo
4342:
4343: 2005-02-05 17:56 millert
4344:
4345: * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4346: pointed out a bunch of missed dependencies.
4347:
4348: 2005-02-05 13:18 millert
4349:
4350: * TROUBLESHOOTING: Help for PAM when account section is missing
4351:
4352: 2005-02-05 13:01 millert
4353:
4354: * auth/pam.c: Give user a clue when there is a missing "account"
4355: section in the PAM config.
4356:
4357: 2005-02-05 10:22 millert
4358:
4359: * auth/pam.c: Better error handling.
4360:
4361: 2005-02-05 09:57 millert
4362:
4363: * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4364: CPPFLAGS so it takes effect as early as possible. Silences a
4365: warning about isblank() on linux.
4366:
4367: 2005-02-04 21:49 millert
4368:
4369: * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4370: number of args to be passed to log_error().
4371:
4372: 2005-01-31 23:03 millert
4373:
4374: * pwutil.c: Don't try to destroy a tree we didn't create.
4375:
4376: 2005-01-27 10:42 millert
4377:
4378: * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4379: env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4380: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4381: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4382: parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4383: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4384: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4385: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4386: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4387: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4388: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4389: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4390: rcsids
4391:
4392: 2005-01-21 10:34 millert
4393:
4394: * configure, configure.in: Fix error message when mixing invalid
4395: auth types
4396:
4397: 2005-01-21 10:32 millert
4398:
4399: * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4400: default if the OS supports them.
4401:
4402: 2005-01-21 10:29 millert
4403:
4404: * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4405:
4406: 2005-01-21 10:29 millert
4407:
4408: * configure.in: Better checking for conflicting authentication
4409: methods Display the authentication methods used at the end of
4410: configure Rename --with-authenticate -> --with-aixauth Use
4411: --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4412: default on systems that support them unless disabled. Add
4413: OSMAJOR variable that replaces old OSREV; now OSREV has full
4414: version number
4415:
4416: 2005-01-17 19:40 millert
4417:
4418: * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4419:
4420: 2005-01-14 13:35 millert
4421:
4422: * configure.in: Replace: test -n "$FOO" || FOO="bar"
4423:
4424: With: : ${FOO='bar'}
4425:
4426: 2005-01-09 18:58 millert
4427:
4428: * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4429: only call private passwd/group routines when using a nonstandard
4430: passwd/group file.
4431:
4432: 2005-01-06 10:34 millert
4433:
4434: * CHANGES: sync
4435:
4436: 2005-01-05 22:16 millert
4437:
4438: * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4439: fields so add getpwent()/getgrent() functions and call those.
4440:
4441: 2005-01-05 17:29 millert
4442:
4443: * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4444:
4445: 2005-01-05 17:18 millert
4446:
4447: * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4448: in the clean target Add devdir variable and use it to specify the
4449: path to parser sources
4450:
4451: 2005-01-05 17:17 millert
4452:
4453: * configure: regen
4454:
4455: 2005-01-05 17:17 millert
4456:
4457: * configure.in: Add a devdir variables that defaults to $(srcdir)
4458: and is set to . if --devel was specified. Allows for proper
4459: dependecies building the parser.
4460:
4461: 2005-01-05 14:50 millert
4462:
4463: * testsudoers.c: Add support for custom passwd/group files.
4464:
4465: 2005-01-05 14:47 millert
4466:
4467: * Makefile.in: Build private copy of pwutil.o for testsudoers with
4468: MYPW defined so it uses our own passwd/group routines.
4469:
4470: 2005-01-05 14:46 millert
4471:
4472: * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4473: sudo_setspent/sudo_endspent stubs instead. We can now just use
4474: the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4475: about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4476:
4477: 2005-01-05 14:44 millert
4478:
4479: * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4480: Use global buffers for passwd/group structs Rename functions from
4481: sudo_* to my_*
4482:
4483: 2005-01-05 14:43 millert
4484:
4485: * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4486:
4487: 2005-01-05 14:42 millert
4488:
4489: * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4490: instead.
4491:
4492: 2005-01-05 14:41 millert
4493:
4494: * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4495: getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4496: are no longer needed. Also add preprocessor magic to use private
4497: versions of the passwd and group routines if MYPW is defined (for
4498: use by testsudoers).
4499:
4500: 2005-01-04 22:40 millert
4501:
4502: * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4503: if there are fields we don't handle they end up as 0.
4504:
4505: 2005-01-04 20:10 millert
4506:
4507: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4508: pwutil.c
4509:
4510: 2005-01-04 20:09 millert
4511:
4512: * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4513: variables for better readability.
4514:
4515: 2005-01-04 20:08 millert
4516:
4517: * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4518: that support alternate passwd and group files.
4519:
4520: 2005-01-04 20:07 millert
4521:
4522: * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4523: its own file. This allows visudo and testsudoers to use the
4524: pw/gr cache too.
4525:
4526: 2005-01-01 19:31 millert
4527:
4528: * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4529: based on the terminal width.
4530:
4531: 2005-01-01 12:41 millert
4532:
4533: * match.c, visudo.c, testsudoers.c: Only check group vector in
4534: usergr_matches() if we are matching the invoking or list user.
4535: Always check the group members, even if there was a group vector.
4536:
4537: 2004-12-17 17:24 millert
4538:
4539: * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4540:
4541: 2004-12-17 13:12 millert
4542:
4543: * CHANGES, TODO: checkpoint
4544:
4545: 2004-12-16 14:20 millert
4546:
4547: * sudo.c: sort usage
4548:
4549: 2004-12-16 14:20 millert
4550:
4551: * sudo.pod: Sort command line options
4552:
4553: 2004-12-16 13:33 millert
4554:
4555: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4556: sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4557: start closing at a point other than 3. Add closefrom_override
4558: sudoers option and -C sudo flag to allow the user to specify a
4559: different closefrom starting point.
4560:
4561: 2004-12-16 13:25 millert
4562:
4563: * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4564:
4565: 2004-12-15 22:55 millert
4566:
4567: * LICENSE: no more UCB strcasecmp
4568:
4569: 2004-12-15 22:54 millert
4570:
4571: * strcasecmp.c: replace BSD licensed one with version derived from
4572: pdksh
4573:
4574: 2004-12-09 21:07 millert
4575:
4576: * sudo.c: Fix last commit.
4577:
4578: 2004-12-09 19:26 millert
4579:
4580: * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4581: to /dev/null if not.
4582:
4583: 2004-12-03 13:57 millert
4584:
4585: * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4586:
4587: 2004-12-03 13:52 millert
4588:
4589: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4590: Use TIME_WITH_SYS_TIME
4591:
4592: 2004-12-03 13:48 millert
4593:
4594: * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4595:
4596: 2004-12-02 11:18 millert
4597:
4598: * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4599: being set unconditionally on darwin. From Toby Peterson.
4600:
4601: 2004-12-02 10:40 millert
4602:
4603: * getspwuid.c: Check rbinsert() return value. In the case of faked
4604: up entries there is usually a negative response cached that we
4605: need to overwrite.
4606:
4607: In pwfree() don't try to zero out a NULL pw_passwd pointer.
4608:
4609: 2004-12-02 09:53 millert
4610:
4611: * mon_systrace.c: Use the double fork trick to avoid the monitor
4612: process being waited for by the main program run through sudo.
4613:
4614: 2004-11-29 12:52 millert
4615:
4616: * sudo.c: Call initgroups() in -U mode so group matches work
4617: normally.
4618:
4619: 2004-11-29 12:34 millert
4620:
4621: * def_data.h, mkdefaults: Don't print a trailing comma for the last
4622: entry in enum def_tupple
4623:
4624: 2004-11-28 16:08 millert
4625:
4626: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4627: lecture, listpw and verifypw are used in boolean context.
4628:
4629: 2004-11-28 16:05 millert
4630:
4631: * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4632: context should be "all", not "any".
4633:
4634: 2004-11-26 14:21 millert
4635:
4636: * def_data.in, defaults.c: Allow tuples that can be used as
4637: booleans to be used as boolean TRUE. In this case the 2nd
4638: possible value of the tuple is used for TRUE.
4639:
4640: 2004-11-25 12:23 millert
4641:
4642: * configure, configure.in: Correct the test for 2-parameter
4643: timespecsub
4644:
4645: 2004-11-25 12:20 millert
4646:
4647: * sudo.h: Add strub struct definitions for passwd, timeval and
4648: timespec
4649:
4650: 2004-11-25 12:09 millert
4651:
4652: * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4653: check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4654: fix a typo in the gettimeofday check.
4655:
4656: 2004-11-24 16:44 millert
4657:
4658: * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4659: for visudo and testsudoers.
4660:
4661: 2004-11-24 16:31 millert
4662:
4663: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4664: option to use in conjunction with -l instead of -u. Add support
4665: for "sudo -l command" to test a specific command.
4666:
4667: 2004-11-24 16:28 millert
4668:
4669: * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4670: it has not been set. Previously it was set by sudo "ALL" in the
4671: parser but at that point the fully-qualified pathname has not yet
4672: been found.
4673:
4674: 2004-11-23 18:18 millert
4675:
4676: * parse.c, testsudoers.c: Correctly handle multiple privileges per
4677: userspec and runas inheritence.
4678:
4679: 2004-11-21 14:09 millert
4680:
4681: * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4682: init_defaults.
4683:
4684: 2004-11-19 18:04 millert
4685:
4686: * toke.c, toke.l: make per-command defaults work with sudoedit
4687:
4688: 2004-11-19 18:00 millert
4689:
4690: * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4691: FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4692: approriate defaults variable.
4693:
4694: 2004-11-19 17:09 millert
4695:
4696: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4697: Document per-command Defaults.
4698:
4699: 2004-11-19 16:35 millert
4700:
4701: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4702: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4703: command-specific Defaults entries. E.g.
4704: Defaults!/usr/bin/vi noexec
4705:
4706: 2004-11-19 15:03 millert
4707:
4708: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4709: occurence of user_matches() -> runas_matches() missed previously
4710: runas_matches(), host_matches() and cmnd_matches() only really
4711: need to pass in a list of members. user_matches() still needs to
4712: pass in a passwd struct because of "sudo -l"
4713:
4714: 2004-11-19 14:46 millert
4715:
4716: * parse.c: Check def_authenticate, def_noexec and def_monitor when
4717: setting return flags. XXX May be better to just set the defaults
4718: directly and get rid of those flags.
4719:
4720: 2004-11-19 13:39 millert
4721:
4722: * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4723: error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4724: getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4725: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4726: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4727: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4728: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4729: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4730: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4731: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4732: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4733: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4734: <config.h> Not: #include "config.h" That way we get the correct
4735: config.h when build dir != src dir
4736:
4737: 2004-11-19 13:30 millert
4738:
4739: * Makefile.in: Back out part of rev 1.263; fix -I order
4740:
4741: 2004-11-19 13:12 millert
4742:
4743: * toke.c, toke.l: More robust parsing if #include; could be much
4744: better still.
4745:
4746: 2004-11-19 12:55 millert
4747:
4748: * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4749: consistent.
4750:
4751: 2004-11-19 12:35 millert
4752:
4753: * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4754: routines out into their own file.
4755:
4756: 2004-11-19 12:32 millert
4757:
4758: * error.h: __attribute__ is already defined in compat.h
4759:
4760: 2004-11-19 12:30 millert
4761:
4762: * visudo.c: quit() should not be __noreturn__ as it is non-void on
4763: some platforms.
4764:
4765: 2004-11-19 12:24 millert
4766:
4767: * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4768: error/warning functions like err/warn but that call an additional
4769: cleanup routine in the error case. This means we no longer need
4770: to compile a special version of alloc.o for visudo.
4771:
4772: 2004-11-19 11:54 millert
4773:
4774: * parse.h: Clarify comments about the data structures
4775:
4776: 2004-11-18 15:28 millert
4777:
4778: * visudo.c: Add support for VISUAL and EDITOR containing command
4779: line args. If env_editor is not set any args in VISUAL and
4780: EDITOR are ignored. Arguments are also now supported in
4781: def_editor.
4782:
4783: 2004-11-17 14:25 millert
4784:
4785: * parse.h: alias_matches() is no more
4786:
4787: 2004-11-17 14:09 millert
4788:
4789: * CHANGES, TODO: sync
4790:
4791: 2004-11-17 13:19 millert
4792:
4793: * Makefile.in: When regenerating the parser, don't replace gram.h
4794: unless it has changed.
4795:
4796: 2004-11-17 11:56 millert
4797:
4798: * Makefile.in: remove Makefile.binary for distclean
4799:
4800: 2004-11-17 11:18 millert
4801:
4802: * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4803: to make sure we can't overflow new_env.
4804:
4805: 2004-11-17 10:33 millert
4806:
4807: * sudo_edit.c: paranoia when stripping trailing slashes from
4808: tempdir.
4809:
4810: 2004-11-16 19:00 millert
4811:
4812: * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4813:
4814: 2004-11-16 18:59 millert
4815:
4816: * configure, configure.in, config.h.in, sudo.c: Add configure check
4817: for getgroups()
4818:
4819: 2004-11-16 18:55 millert
4820:
4821: * ldap.c: Use supplementary group vector in struct sudo_user.
4822:
4823: 2004-11-16 18:40 millert
4824:
4825: * match.c: Only do string comparisons on the group members if there
4826: is no supplemental group list.
4827:
4828: 2004-11-16 16:10 millert
4829:
4830: * CHANGES, TODO: sync
4831:
4832: 2004-11-16 15:54 millert
4833:
4834: * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4835: trailing slash so chop off any trailing slashes we see and add an
4836: explicit one.
4837:
4838: 2004-11-16 12:02 millert
4839:
4840: * match.c: remove bogus XXX comment
4841:
4842: 2004-11-16 11:10 millert
4843:
4844: * match.c: Get rid of alias_matches and correctly fall through to
4845: the non-alias cases when there is no alias with the specified
4846: name.
4847:
4848: 2004-11-16 10:47 millert
4849:
4850: * getspwuid.c: Cache non-existent passwd/group entries too.
4851:
4852: 2004-11-16 10:45 millert
4853:
4854: * gram.c: regen
4855:
4856: 2004-11-15 23:32 millert
4857:
4858: * getspwuid.c: fix typo
4859:
4860: 2004-11-15 23:24 millert
4861:
4862: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4863: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4864: Implement group caching and use the passwd and group caches
4865: throughout.
4866:
4867: 2004-11-15 14:43 millert
4868:
4869: * match.c: Properly negate the return value of alias_matches() when
4870: appropriate.
4871:
4872: 2004-11-15 14:38 millert
4873:
4874: * match.c: Make hostname_matches() return TRUE for a match, else
4875: FALSE like the caller expects.
4876:
4877: 2004-11-15 13:24 millert
4878:
4879: * Makefile.in: Add missing dependencies on gram.h
4880:
4881: 2004-11-15 13:06 millert
4882:
4883: * match.c: Use runas_matches in alias_matches() now that we have
4884: it.
4885:
4886: 2004-11-15 13:00 millert
4887:
4888: * parse.c, parse.h: Expand aliases in "sudo -l" mode
4889:
4890: 2004-11-15 12:33 millert
4891:
4892: * gram.y, match.c: Use ALIAS for the member type when storing an
4893: alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4894: match.c relies on the more generic type. Expand runas_matches
4895: instead of calling user_matches() inside of it since
4896: user_matches() looks up USERALIASes, not RUNASALIASes.
4897:
4898: 2004-11-15 12:05 millert
4899:
4900: * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4901: passwd entry.
4902:
4903: 2004-11-15 10:53 millert
4904:
4905: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4906: configure.in, err.c, error.c, error.h, defaults.c, env.c,
4907: find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4908: sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4909: local error/warning functions like err/warn but that call an
4910: additional cleanup routine in the error case. This means we no
4911: longer need to compile a special version of alloc.o for visudo.
4912:
4913: 2004-11-15 09:59 millert
4914:
4915: * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4916: since the latter checks for "#uid".
4917:
4918: 2004-11-15 09:53 millert
4919:
4920: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4921: db entries in 2 reb-black trees; one indexed by uid, the other by
4922: user name. The data returned from the cache should be considered
4923: read-only and is destroyed by sudo_endpwent().
4924:
4925: 2004-11-15 09:50 millert
4926:
4927: * match.c: add cast to uid_t
4928:
4929: 2004-11-15 09:49 millert
4930:
4931: * gram.y: missing free in alias_destroy
4932:
4933: 2004-11-15 09:49 millert
4934:
4935: * redblack.c: Can't use rbapply() for rbdestroy since the
4936: destructor is passed a data pointer, not a node pointer.
4937:
4938: 2004-11-14 23:06 millert
4939:
4940: * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4941: versions of setpwent() and endpwent() that set/end the shadow
4942: password file too.
4943:
4944: 2004-11-14 22:55 millert
4945:
4946: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4947: visudo.c: Store aliases in a red-black tree.
4948:
4949: 2004-11-14 22:52 millert
4950:
4951: * Makefile.in, redblack.c, redblack.h: red-black tree
4952: implementation
4953:
4954: 2004-11-14 22:37 millert
4955:
4956: * visudo.c: Edit all sudoers file if there were unused or undefined
4957: aliases and we are in strict mode.
4958:
4959: 2004-11-12 11:19 millert
4960:
4961: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4962: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4963: Bring back the "secure_path" Defaults option now that Defaults
4964: take effect before the path is searched.
4965:
4966: 2004-11-11 12:22 millert
4967:
4968: * logging.c, parse.c: A user can always list their own entries,
4969: even with -u. Better error message when failing to list another
4970: user's entries.
4971:
4972: 2004-11-11 12:12 millert
4973:
4974: * parse.c, sudo.c, sudo.h: The syntax to list another user's
4975: entries is now "-u otheruser -l". Only root or users with sudo
4976: "ALL" may list other user's entries.
4977:
4978: 2004-11-11 11:30 millert
4979:
4980: * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4981: SECURITY NOTES
4982:
4983: 2004-11-11 11:25 millert
4984:
4985: * env.c: strip CDPATH too
4986:
4987: 2004-11-11 11:20 millert
4988:
4989: * env.c: strip exported bash functions from the environment.
4990:
4991: 2004-10-27 12:16 millert
4992:
4993: * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4994: variables for real commands and sudoedit. This avoids a
4995: confusing message when a user tries "sudo -l" or "sudo -v" and is
4996: denied.
4997:
4998: 2004-10-27 12:06 millert
4999:
5000: * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
5001: appending lists too
5002:
5003: 2004-10-26 18:39 millert
5004:
5005: * logging.c: Convert some bitwise AND to ISSET
5006:
5007: 2004-10-26 18:29 millert
5008:
5009: * lex.yy.c, toke.c: toke.c replaces lex.yy.c
5010:
5011: 2004-10-26 18:29 millert
5012:
5013: * CHANGES, TODO: sync
5014:
5015: 2004-10-26 18:28 millert
5016:
5017: * BUGS: new parser fixes most of the outstanding bugs
5018:
5019: 2004-10-26 18:27 millert
5020:
5021: * configure: regen
5022:
5023: 2004-10-26 18:26 millert
5024:
5025: * visudo.c: Rework for the new parser. Now checks for unused
5026: aliases in sudoers.
5027:
5028: 2004-10-26 18:25 millert
5029:
5030: * testsudoers.c: Rewrite for the new parser. Now supports a -d
5031: flag (dump) and adds a -h flag (host). It now defaults to the
5032: local hostname unless otherwise specified.
5033:
5034: 2004-10-26 18:23 millert
5035:
5036: * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
5037: parse.h)
5038:
5039: 2004-10-26 18:22 millert
5040:
5041: * sudo.c: Update for new parse. We now call find_path() *after* we
5042: have updated the global defaults based on sudoers. Also adds
5043: support for listing other user's privs if you are root.
5044:
5045: 2004-10-26 18:21 millert
5046:
5047: * mon_systrace.c: Working LDAP support; also remove a now-unneeded
5048: rewind().
5049:
5050: 2004-10-26 18:20 millert
5051:
5052: * logging.c, logging.h: Add NO_STDERR flag.
5053:
5054: 2004-10-26 18:19 millert
5055:
5056: * ldap.c: Split sudo_ldap_check() into three pieces:
5057: sudo_ldap_open(), udo_ldap_update_defaults() and
5058: sudo_ldap_check(). This allows us to connecto to LDAP, apply the
5059: default options, find the command in the user's path, and then
5060: check whether the user is allowed to run it. The important thing
5061: here is that the default runas user may be specified as a default
5062: option and that needs to be set before we search for the command.
5063:
5064: 2004-10-26 18:17 millert
5065:
5066: * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
5067: warning.
5068:
5069: 2004-10-26 18:16 millert
5070:
5071: * defaults.h: Add prototype for update_defaults()
5072:
5073: 2004-10-26 18:16 millert
5074:
5075: * defaults.c: Don't warn about line numbers now that we operate on
5076: a set of data structures (or LDAP) and not a file.
5077:
5078: 2004-10-26 18:15 millert
5079:
5080: * config.h.in: No long use lsearch()
5081:
5082: 2004-10-26 18:14 millert
5083:
5084: * Makefile.in: Update for new and changed file names.
5085:
5086: 2004-10-26 18:14 millert
5087:
5088: * LICENSE: no more BSD lsearch.c
5089:
5090: 2004-10-26 18:14 millert
5091:
5092: * match.c: foo_matches() routines now live in match.c Added
5093: user_matches(), runas_matches(), host_matches(), cmnd_matches()
5094: and alias_matches() that operate on the parsed sudoers file.
5095:
5096: 2004-10-26 18:12 millert
5097:
5098: * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
5099: -> switch_buffer() WORD no longer needs to exclude '@' kill
5100: yywrap()
5101:
5102: 2004-10-26 18:10 millert
5103:
5104: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
5105: Rewritten parser that converts sudoers into a set of data
5106: structures. This eliminates ordering issues and makes it
5107: possible to apply sudoers Defaults entries before searching for
5108: the command.
5109:
5110: 2004-10-26 18:09 millert
5111:
5112: * configure.in, lsearch.c, emul/search.h: We won't be using
5113: lsearch() any longer.
5114:
5115: 2004-10-26 18:07 millert
5116:
5117: * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
5118: has no entry.
5119:
5120: 2004-10-26 16:09 millert
5121:
5122: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5123: visudo.man.in: regen
5124:
5125: 2004-10-26 16:09 millert
5126:
5127: * visudo.pod: Update warnings to match new visudo
5128:
5129: 2004-10-26 16:08 millert
5130:
5131: * sudoers.pod: The new parser doesn't have the old ordering
5132: constraints.
5133:
5134: 2004-10-26 16:08 millert
5135:
5136: * sudo.pod: Document that -l now takes an optional username
5137: argument
5138:
5139: 2004-10-25 13:44 millert
5140:
5141: * RUNSON: AIX 5.2.0.0 works
5142:
5143: 2004-10-25 13:38 millert
5144:
5145: * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
5146: instead. Fixes a compilation problem with Solaris 9's native
5147: LDAP.
5148:
5149: Set FLAG_MONITOR when needed.
5150:
5151: 2004-10-23 13:32 millert
5152:
5153: * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
5154: match the traced process. Fixes relative paths.
5155:
5156: 2004-10-21 12:31 millert
5157:
5158: * testsudoers.c: Kill set_perms() stub--it is no longer needed.
5159:
5160: 2004-10-13 12:52 millert
5161:
5162: * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
5163: requires set_reuid() or setresuid()
5164:
5165: 2004-10-13 12:46 millert
5166:
5167: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
5168: configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
5169: saved uids; they aren't worth bothering with.
5170:
5171: 2004-10-07 16:23 millert
5172:
5173: * glob.c: remove call to issetugid()
5174:
5175: 2004-10-07 14:57 millert
5176:
5177: * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
5178: wildcards. Now that we use glob() the bug is fixed.
5179:
5180: 2004-10-07 14:52 millert
5181:
5182: * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
5183: and stat each result that matches the basename of the user's
5184: command. This makes "cd /usr/bin ; sudo ./blah" work when
5185: sudoers allows /usr/bin/blah. Fixes bug #143.
5186:
5187: 2004-10-07 14:27 millert
5188:
5189: * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
5190: for extended glob (GLOB_TILDE and GLOB_BRACE)
5191:
5192: 2004-10-07 12:59 millert
5193:
5194: * config.h.in, configure, configure.in: Check for a glob() that
5195: supports GLOB_BRACE and GLOB_TILDE
5196:
5197: 2004-10-07 12:51 millert
5198:
5199: * LICENSE: reference glob
5200:
5201: 2004-10-07 12:50 millert
5202:
5203: * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5204: some unneeded extensions removed.
5205:
5206: 2004-10-05 17:26 millert
5207:
5208: * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5209: fail. It probably means we are out of space in the stack gap...
5210:
5211: 2004-10-05 17:20 millert
5212:
5213: * CHANGES: sync
5214:
5215: 2004-10-05 16:53 millert
5216:
5217: * mon_systrace.c: Take a stab at ldap sudoers support here.
5218:
5219: 2004-10-05 15:13 millert
5220:
5221: * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5222: SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5223: inadvertanly kill itself.
5224:
5225: 2004-10-05 14:21 millert
5226:
5227: * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5228:
5229: 2004-10-05 14:15 millert
5230:
5231: * mon_systrace.c: When modifying the environment, don't replace
5232: envp when we can get away with just rewriting pointers in the
5233: traced process.
5234:
5235: 2004-10-05 13:46 millert
5236:
5237: * mon_systrace.c, mon_systrace.h: Add environment updating via
5238: STRIOCINJECT (if available).
5239:
5240: 2004-10-05 10:22 millert
5241:
5242: * sudoers.cat, sudoers.man.in: regen
5243:
5244: 2004-10-04 16:15 millert
5245:
5246: * lex.yy.c: regen
5247:
5248: 2004-10-04 16:15 millert
5249:
5250: * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5251: not yyless(1)
5252:
5253: 2004-10-04 12:09 millert
5254:
5255: * mon_systrace.c: Include file is now mon_systrace.h
5256:
5257: 2004-10-04 12:07 millert
5258:
5259: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5260: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5261: sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5262: tracing, it is now "monitoring" which should be more a obvious
5263: name to non-hackers.
5264:
5265: 2004-10-01 15:06 millert
5266:
5267: * mon_systrace.c, mon_systrace.h: Fix some XXX
5268:
5269: 2004-10-01 14:30 millert
5270:
5271: * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5272: 1024 as the max # of entries (the max that systrace(4) allows).
5273:
5274: Only need to use SYSTR_POLICY_ASSIGN once
5275:
5276: Change check_syscall() -> find_handler() and have it return the
5277: handler instead of just running it. We need this since handler
5278: now have two parts: one part that generates and answer and
5279: another that gets called after the answer is accepted (to do
5280: logging).
5281:
5282: Add some missing check_exec for emul execv
5283:
5284: 2004-10-01 10:58 millert
5285:
5286: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
1.6 millert 5287: $Sudo$ tags.
1.1 millert 5288:
5289: 2004-10-01 10:47 millert
5290:
5291: * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5292:
5293: 2004-09-30 20:46 millert
5294:
5295: * Makefile.in: add trace_systrace.o dependency
5296:
5297: 2004-09-30 19:00 millert
5298:
5299: * configure, configure.in: Also look for systrace.h in
5300: /usr/include/linux
5301:
5302: 2004-09-30 18:27 millert
5303:
5304: * mon_systrace.c, mon_systrace.h: Move all struct defs and
5305: prototypes into trace_systrace.h and mark all but
5306: systace_attach() static.
5307:
5308: 2004-09-30 18:14 millert
5309:
5310: * mon_systrace.c, mon_systrace.h: Add support for tracing
5311: emulations. At the moment, all emulations are compiled in. It
5312: might make sense to #ifdef them in the future, though this
5313: impeeds readability.
5314:
5315: 2004-09-30 17:07 millert
5316:
5317: * Makefile.in, configure.in, configure: rename systrace.c ->
5318: trace_systrace.c
5319:
5320: 2004-09-30 15:58 millert
5321:
5322: * parse.yacc: Allow this to build with a K&R compiler again
5323:
5324: 2004-09-30 13:58 millert
5325:
5326: * TODO: sync
5327:
5328: 2004-09-30 13:55 millert
5329:
5330: * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5331:
5332: 2004-09-30 13:44 millert
5333:
5334: * visudo.c: Exit() takes a negative value to indicate it was not
5335: called via signal.
5336:
5337: 2004-09-30 13:25 millert
5338:
5339: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5340: visudo.man.in: regen
5341:
5342: 2004-09-30 13:22 millert
5343:
5344: * Makefile.in, visudo.c: Define Err() and Errx() that are like
5345: err() and errx() but call Exit() instead of exit(). Build
5346: private copy of alloc.o for visudo that calls Err() and Errx().
5347:
5348: 2004-09-29 15:22 millert
5349:
5350: * lex.yy.c: regen
5351:
5352: 2004-09-29 15:22 millert
5353:
5354: * CHANGES: sync
5355:
5356: 2004-09-29 14:41 millert
5357:
5358: * visudo.c: Overhaul visudo for editing multiple files: o visudo
5359: has been broken out into functions (more work needed here) o
5360: each file is now edited before sudoers is re-parsed o if a
5361: #include line is added that file will be edited too
5362:
5363: TODO: o cleanup temp files when exiting via err() or errx() o
5364: continue breaking things out into separate functions
5365:
5366: 2004-09-29 14:36 millert
5367:
5368: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5369: arg to open_sudoers that open_sudoers can use to indicate to the
5370: caller that the fd should not be closed when it is done with it.
5371: To be used by visudo to keep locked fds from being closed
5372: prematurely (and thus losing the lock).
5373:
5374: 2004-09-29 14:33 millert
5375:
5376: * parse.yacc, sudo.c: Add errorfile global that contains the name
5377: of the file that caused the error.
5378:
5379: 2004-09-29 14:30 millert
5380:
5381: * parse.lex: return COMMENT to yacc grammar for a #include line
5382:
5383: 2004-09-29 14:29 millert
5384:
5385: * parse.lex: Remove us of unput() in favor of yyless() which is
5386: cheaper.
5387:
5388: 2004-09-29 14:28 millert
5389:
5390: * parse.yacc: Allow an empty sudoers file.
5391:
5392: 2004-09-28 16:50 millert
5393:
5394: * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5395: doesn't do it for us.
5396:
5397: 2004-09-28 14:37 millert
5398:
5399: * lex.yy.c: regen
5400:
5401: 2004-09-28 14:36 millert
5402:
5403: * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5404: shadow the "quiet" global.
5405:
5406: 2004-09-28 14:33 millert
5407:
5408: * visudo.c: If a sudoers file includes other files, edit those too.
5409: Does not yes deal with creating the new includes files itself.
5410:
5411: 2004-09-28 14:31 millert
5412:
5413: * testsudoers.c: init_parser now takes a path
5414:
5415: 2004-09-28 14:31 millert
5416:
5417: * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5418: dealing with multiple sudoers files: o init_parser() now takes a
5419: path used to populate the sudoers global o the sudoers global is
5420: used to print the correct file in yyerror() o when switching to
5421: a new sudoers file, perserve old file name and line number
5422:
5423: 2004-09-28 14:29 millert
5424:
5425: * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5426: meaningful now that we can have multiple sudoers files.
5427:
5428: 2004-09-28 13:52 millert
5429:
5430: * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5431: sudoers_lookup() so we start at the right file position when
5432: reading include files.
5433:
5434: 2004-09-27 21:04 millert
5435:
5436: * sudoers.pod: document #include
5437:
5438: 2004-09-27 20:47 millert
5439:
5440: * lex.yy.c: regen
5441:
5442: 2004-09-27 20:47 millert
5443:
5444: * parse.lex: Add max depth of 128 for the include stack to avoid
5445: loops.
5446:
5447: Since yyerror() doesn't stop parsing, pass return values back to
5448: yylex and call yyterminate() on error.
5449:
5450: 2004-09-27 14:06 millert
5451:
5452: * sudoers.pod: document tracing
5453:
5454: 2004-09-27 14:05 millert
5455:
5456: * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5457: page
5458:
5459: 2004-09-27 12:08 millert
5460:
5461: * lex.yy.c: regen
5462:
5463: 2004-09-27 12:03 millert
5464:
5465: * parse.lex: Add support for #include in sudoers (visudo support
5466: TBD)
5467:
5468: 2004-09-27 12:02 millert
5469:
5470: * parse.yacc: make yyerror()'s argument const
5471:
5472: 2004-09-27 12:02 millert
5473:
5474: * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5475:
5476: 2004-09-27 12:01 millert
5477:
5478: * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5479: return a FILE *
5480:
5481: 2004-09-26 12:35 millert
5482:
5483: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5484: version.h: Crank version
5485:
5486: 2004-09-26 12:33 millert
5487:
5488: * Makefile.in, sudo.psf: Better HP-UX depot construction
5489:
5490: 2004-09-25 17:08 millert
5491:
5492: * mon_systrace.c: o Made children global so check_exec() can lookup
5493: a child. o Replaced uid in struct childinfo with struct passwd *
5494: (for runas) o new_child() now takes a parent pid so the runas
5495: info can be inherited o Added find_child() to lookup a child by
5496: its pid o update_child() now fills in a struct passwd o Converted
5497: the big if/else mess in set_policy to a switch o Syscalls that
5498: change uid are now "ask" so we get SYSTR_MSG_UGID events
5499:
5500: 2004-09-25 17:01 millert
5501:
5502: * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5503: to lookup the shadow password. Will be used to a struct passwd
5504: that has the shadow password already filled in.
5505:
5506: 2004-09-25 16:58 millert
5507:
5508: * mon_systrace.c: add missing increment of addr in read_string()
5509:
5510: 2004-09-25 16:15 millert
5511:
5512: * mon_systrace.c: Remove bogus call to update_child() and some
5513: cosmetic fixes
5514:
5515: 2004-09-25 16:11 millert
5516:
5517: * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5518: initialized global for simplicity If STRIOCATTACH returns EBUSY
5519: we are already being traced Check for user_args == NULL in
5520: setproctitle() call Add missing calls to STRIOCANSWER
5521:
5522: 2004-09-25 13:15 millert
5523:
5524: * sudo.c: g/c sudo_pwdup proto
5525:
5526: 2004-09-24 20:21 millert
5527:
5528: * Makefile.in, sudo.psf: Add target for building a depot file
5529:
5530: 2004-09-24 20:07 millert
5531:
5532: * mon_systrace.c: trim includes
5533:
5534: 2004-09-24 14:11 millert
5535:
5536: * lex.yy.c, sudo.tab.h: regen
5537:
5538: 2004-09-24 14:10 millert
5539:
5540: * INSTALL: document --with-systrace
5541:
5542: 2004-09-24 14:10 millert
5543:
5544: * config.h.in, configure, configure.in: Add check for setproctitle
5545:
5546: 2004-09-24 14:09 millert
5547:
5548: * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5549: it can set the error code
5550:
5551: 2004-09-24 13:30 millert
5552:
5553: * mon_systrace.c: systrace(4) support for sudo. On systems with
5554: the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5555: patches) sudo can intercept exec calls and check the exec args
5556: against the sudoers file. In other words, sudo can now control
5557: subcommands and shell escapes.
5558:
5559: 2004-09-24 13:17 millert
5560:
5561: * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5562:
5563: 2004-09-24 13:15 millert
5564:
5565: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5566: Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5567:
5568: 2004-09-24 13:13 millert
5569:
5570: * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5571: close on exec flag instead.
5572:
5573: 2004-09-24 13:11 millert
5574:
5575: * def_data.c, def_data.h, def_data.in: Add trace option
5576:
5577: 2004-09-23 20:24 millert
5578:
5579: * Makefile.in: Add systrace
5580:
5581: 2004-09-23 20:23 millert
5582:
5583: * INSTALL: SunOS /bin/sh blows up with configure
5584:
5585: 2004-09-23 20:23 millert
5586:
5587: * configure, configure.in: Include sys/param.h before systrace.h
5588:
5589: 2004-09-23 20:15 millert
5590:
5591: * configure: regen
5592:
5593: 2004-09-23 20:15 millert
5594:
5595: * pathnames.h.in: _PATH_DEV_SYSTRACE
5596:
5597: 2004-09-23 20:14 millert
5598:
5599: * configure.in: line up options in --help
5600:
5601: 2004-09-23 20:11 millert
5602:
5603: * config.h.in, configure.in: Add --with-systrace
5604:
5605: 2004-09-23 13:35 millert
5606:
5607: * configure: regen
5608:
5609: 2004-09-23 13:35 millert
5610:
5611: * aclocal.m4, configure.in: make this work with autoconf-2.59
5612:
5613: 2004-09-16 12:58 millert
5614:
5615: * sudo_edit.c: Simplify logic around open & stat of files and do
5616: sanity on edited file even if we lack fstat (still racable but
5617: worth doing).
5618:
5619: 2004-09-15 18:47 millert
5620:
5621: * HISTORY: Add support url
5622:
5623: 2004-09-15 16:11 millert
5624:
5625: * Makefile.in: versino 1.6.8p1
5626:
5627: 2004-09-15 15:20 millert
5628:
5629: * CHANGES: more changes for 1.6.8p1
5630:
5631: 2004-09-15 15:18 millert
5632:
5633: * version.h: 1.6.8p1
5634:
5635: 2004-09-15 12:16 millert
5636:
5637: * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5638: something other than a regular file.
5639:
5640: 2004-09-14 20:55 aaron
5641:
5642: * CHANGES: sync
5643:
5644: 2004-09-14 20:21 aaron
5645:
5646: * INSTALL: document --with-ldap-conf-file
5647:
5648: 2004-09-14 17:43 millert
5649:
5650: * CHANGES, ins_csops.h: political correctness strikes again
5651:
5652: 2004-09-14 15:09 millert
5653:
5654: * RUNSON: sync
5655:
5656: 2004-09-12 19:50 millert
5657:
5658: * Makefile.binary.in, Makefile.in: Install sudoedit man link
5659:
5660: 2004-09-12 14:25 millert
5661:
5662: * INSTALL: Update PAM note and mention where HP-UX users can
5663: download gcc binaries.
5664:
5665: 2004-09-12 12:08 millert
5666:
5667: * Makefile.in: libtool wants to install stuff from .libs so fake
5668: one up for binary installations.
5669:
5670: 2004-09-12 11:53 millert
5671:
5672: * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5673: -f set LIBTOOL correctly
5674:
5675: 2004-09-12 11:53 millert
5676:
5677: * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5678: sudoedit link instead of using ln -f
5679:
5680: 2004-09-12 10:22 millert
5681:
5682: * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5683: Makefile.binary.in for config.status substitution Add support for
5684: installing noexec bits
5685:
5686: 2004-09-12 10:21 millert
5687:
5688: * Makefile.in: Copy noexec bits into binary dists too No longer use
5689: my old arch script for making binary dists
5690:
5691: 2004-09-12 09:36 millert
5692:
5693: * Makefile.binary: Install sudoedit link.
5694:
5695: 2004-09-11 12:25 millert
5696:
5697: * emul/utime.h: avoid __P so there is no need for compat.h to be
5698: included
5699:
5700: 2004-09-11 12:24 millert
5701:
5702: * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5703:
5704: 2004-09-10 12:31 millert
5705:
5706: * compat.h: Fix Solatis futimes macro
5707:
5708: 2004-09-09 11:02 millert
5709:
5710: * sudo_edit.c: Rename ots -> omtim for improved readability.
5711:
5712: 2004-09-08 14:38 millert
5713:
5714: * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5715: keep the temp file open; re-opening it with the invoking user's
5716: euid is sufficient.
5717:
5718: 2004-09-08 14:36 millert
5719:
5720: * CHANGES: sync
5721:
5722: 2004-09-08 14:35 millert
5723:
5724: * sudo.cat, sudo.man.in: regen
5725:
5726: 2004-09-08 14:34 millert
5727:
5728: * sudo.pod: back out revision 1.70; it is no long applicable
5729:
5730: 2004-09-08 11:57 millert
5731:
5732: * env.c: Let the loader initialize nep
5733:
5734: 2004-09-08 11:49 millert
5735:
5736: * configure, configure.in, config.h.in: Removed unneed check for
5737: fchown Add check for gettimeofday Move autoheader template stuff
5738: into separate AH_TEMPLATE lines
5739:
5740: 2004-09-08 11:48 millert
5741:
5742: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5743: timespec throughout.
5744:
5745: 2004-09-08 11:47 millert
5746:
5747: * Makefile.in: gettime.[co]
5748:
5749: 2004-09-08 11:47 millert
5750:
5751: * gettime.c: function to return the current time in a struct
5752: timespec
5753:
5754: 2004-09-08 10:51 millert
5755:
5756: * utimes.c: Not a darpa-sponsored file.
5757:
5758: 2004-09-07 16:36 millert
5759:
5760: * compat.h, config.h.in, configure, configure.in: Add a check for
5761: struct timespec and provide it for those without.
5762:
5763: 2004-09-07 15:56 millert
5764:
5765: * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5766: st_mtim and st_mtimespec and add macros for pulling the mtime sec
5767: and nsec out of struct stat. These are used in sudo_edit() to
5768: better tell whether or not the file has changed.
5769:
5770: 2004-09-07 15:55 millert
5771:
5772: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5773: param to touch() for nsec
5774:
5775: 2004-09-07 14:06 millert
5776:
5777: * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5778: have to chown the file later. Only touch() the temp file if we
5779: can do it via the file descriptor. Don't check for modification
5780: of the temp file if we lack fstat(). Catch errors read()ing the
5781: temp file.
5782:
5783: 2004-09-07 14:04 millert
5784:
5785: * fileops.c: If path is NULL and fd == -1 return -1.
5786:
5787: 2004-09-07 13:31 millert
5788:
5789: * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5790: ones we opened so just close those in the child.
5791:
5792: 2004-09-07 13:14 millert
5793:
5794: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5795: configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5796: utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5797: in touch(), emulating as needed. Not all systems are able to
5798: support setting the times of an fd so touch() takes both an fd
5799: and a file name as arguments.
5800:
5801: 2004-09-06 21:12 aaron
5802:
5803: * env.c: Rare SEGV
5804:
5805: 2004-09-06 16:46 millert
5806:
5807: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5808: visudo.man.in: regen
5809:
5810: 2004-09-06 16:45 millert
5811:
5812: * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5813: re-order some of the sections to match the order we use in
5814: OpenBSD.
5815:
5816: 2004-09-06 15:05 aaron
5817:
5818: * env.c: Openldap ~/.ldaprc fix
5819:
5820: 2004-09-06 12:18 millert
5821:
5822: * sudo.pod: Talk about how the editor must write its changes to the
5823: original file and not just use rename(2).
5824:
5825: 2004-09-06 12:12 millert
5826:
5827: * CHANGES: sync
5828:
5829: 2004-09-06 12:11 millert
5830:
5831: * sudo_edit.c: Keep the temp file open instead of re-opening after
5832: the editor has exited.
5833:
5834: 2004-09-06 12:10 millert
5835:
5836: * sample.pam: Update for current redhat/fedora core.
5837:
5838: 2004-09-02 21:56 aaron
5839:
5840: * README.LDAP: tls_ examples
5841:
5842: 2004-09-02 00:03 aaron
5843:
5844: * ldap.c: config tls_* options
5845:
5846: 2004-08-29 11:39 millert
5847:
5848: * configure, configure.in: No need for -lcrypt when using pam.
5849:
5850: 2004-08-26 23:57 millert
5851:
5852: * configure: regen
5853:
5854: 2004-08-26 23:44 aaron
5855:
5856: * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5857: option to override LDAP_CONF
5858:
5859: 2004-08-26 22:08 aaron
5860:
5861: * ldap.c: cleanup debug message
5862:
5863: 2004-08-26 19:29 aaron
5864:
5865: * README.LDAP: more config info
5866:
5867: 2004-08-24 14:01 millert
5868:
5869: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5870: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5871: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5872: longer use gross statics in command_matches(). Also rename some
5873: variables for improved clarity.
5874:
5875: 2004-08-21 14:33 millert
5876:
5877: * INSTALL: document HP's crippled compiler deficiency.
5878:
5879: 2004-08-21 14:25 millert
5880:
5881: * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5882: descriptions. Noticed by Norihiko Murase.
5883:
5884: 2004-08-21 14:20 millert
5885:
5886: * configure, configure.in: --with-noexec takes an optional PATH
5887: argument.
5888:
5889: 2004-08-21 14:20 millert
5890:
5891: * INSTALL: document --with-noexec
5892:
5893: 2004-08-17 16:21 millert
5894:
5895: * RUNSON, TODO: sync
5896:
5897: 2004-08-17 15:11 millert
5898:
5899: * sudo_edit.c: Better warning message when sudoedit is unable to
5900: write to the destination file.
5901:
5902: 2004-08-17 14:53 millert
5903:
5904: * sudo.cat, sudo.man.in: regen
5905:
5906: 2004-08-17 14:53 millert
5907:
5908: * sudo.pod: Don't italicize the string "sudoedit"
5909:
5910: 2004-08-16 18:45 millert
5911:
5912: * HISTORY: Mention GratiSoft.
5913:
5914: 2004-08-11 14:29 millert
5915:
5916: * parse.yacc: Reset used_runas to FALSE when re-intializing the
5917: parser.
5918:
5919: 2004-08-09 19:04 millert
5920:
5921: * config.guess: Correct OpenBSD mips support
5922:
5923: 2004-08-09 17:28 millert
5924:
5925: * config.guess: Add OpenBSD/mips
5926:
5927: 2004-08-06 23:43 aaron
5928:
5929: * README.LDAP: More behavior notes
5930:
5931: 2004-08-06 23:36 aaron
5932:
5933: * README.LDAP: Updates on current behavior
5934:
5935: 2004-08-06 19:56 millert
5936:
5937: * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5938: no difference to formatted files).
5939:
5940: 2004-08-06 19:48 millert
5941:
5942: * CHANGES: new
5943:
5944: 2004-08-06 19:42 millert
5945:
5946: * sudo.c: Consistency. Use same error for bad -u #uid when
5947: targetpw is set as we do when a bad -u username is specified.
5948:
5949: 2004-08-06 19:33 millert
5950:
5951: * TODO: Add checksum idea from Steve Mancini
5952:
5953: 2004-08-06 19:32 millert
5954:
5955: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5956:
5957: 2004-08-06 19:31 millert
5958:
5959: * sudo.pod, sudoers.pod: Document the restriction on uids specified
5960: via -u when targetpw is set.
5961:
5962: 2004-08-06 19:24 millert
5963:
5964: * sudo.c: Error out when targetpw is enabled and sudo is run with
5965: -u #uid but #uid does not exist in the passwd database. We can't
5966: do target authentication when the target is not in passwd!
5967:
5968: 2004-08-05 21:16 millert
5969:
5970: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5971:
5972: 2004-08-05 21:14 millert
5973:
5974: * TODO: Some more todo for the next release.
5975:
5976: 2004-08-05 21:13 millert
5977:
5978: * INSTALL: Make it clear that PAM should be used for DCE support
5979: when possible.
5980:
5981: 2004-08-05 21:13 millert
5982:
5983: * sudoers.pod: o Document problems with wildcards and relative
5984: paths. o Make the order requirements more prominent. o Change a
5985: "set" to "reset" for clarity.
5986:
5987: 2004-08-05 14:29 millert
5988:
5989: * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5990:
5991: 2004-08-02 22:34 aaron
5992:
5993: * ldap.c: reflect changes to parse.c
5994:
5995: 2004-08-02 14:44 millert
5996:
5997: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5998: user_cmnd and user_args to command_matches(), just use the
5999: globals there. Since we keep state with statics anyway it is
6000: misleading to pretend that passing in different cmnd and
6001: cmnd_args will work.
6002:
6003: 2004-08-02 14:40 millert
6004:
6005: * parse.c: Fix a bug introduced in rev. 1.149. When checking for
6006: pseudo-commands check for a '/' anywhere in cmnd, not just the
6007: first character.
6008:
6009: 2004-07-30 23:07 aaron
6010:
6011: * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
6012: <oblin@mandrakesoft.com>
6013:
6014: 2004-07-30 22:41 aaron
6015:
6016: * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
6017:
6018: 2004-07-30 22:06 aaron
6019:
6020: * README.LDAP: Sun One schema definition by
6021: Andreas.Bussjaeger@t-systems.com and janth@moldung.no
6022:
6023: 2004-07-29 11:57 millert
6024:
6025: * CHANGES: typo
6026:
6027: 2004-07-23 16:44 millert
6028:
6029: * CHANGES: sync
6030:
6031: 2004-07-23 16:43 millert
6032:
6033: * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
6034: remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
6035: the parse.
6036:
6037: 2004-07-08 10:20 millert
6038:
6039: * CHANGES: PAM change
6040:
6041: 2004-07-07 21:04 aaron
6042:
6043: * ldap.c: Better debugging of ALL command
6044:
6045: 2004-07-07 20:15 millert
6046:
6047: * parse.c: When matching for "sudoedit" in sudoers check both the
6048: command the user typed *and* the command that is listed in the
6049: sudoers entry.
6050:
6051: 2004-07-04 19:59 aaron
6052:
6053: * ldap.c: Added !command feature
6054:
6055: 2004-06-28 10:51 millert
6056:
6057: * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
6058: Brian Farrell
6059:
6060: 2004-06-10 23:11 millert
6061:
6062: * LICENSE: License is ISC-style, not BSD-style
6063:
6064: 2004-06-10 20:58 millert
6065:
6066: * CHANGES: sync
6067:
6068: 2004-06-10 16:54 millert
6069:
6070: * sudo.man.in, sudo.cat: regen
6071:
6072: 2004-06-10 16:53 millert
6073:
6074: * sudo.pod: o Update some out of date bits to reality o Change the
6075: shell promt in examples to bourne-shell style o Clarify some
6076: details o Add a CAVEAT about "sudo cd /foo"
6077:
6078: 2004-06-10 16:19 millert
6079:
6080: * check.c: Don't ask for a password if invoking user == target
6081: user.
6082:
6083: 2004-06-10 12:32 millert
6084:
6085: * sudo.c: typo in comment
6086:
6087: 2004-06-08 19:20 millert
6088:
6089: * sudoers.man.in, sudoers.cat: regen
6090:
6091: 2004-06-08 19:19 millert
6092:
6093: * sudoers.pod: Expand on NOEXEC a little.
6094:
6095: 2004-06-08 16:20 millert
6096:
6097: * TODO: sync
6098:
6099: 2004-06-08 15:58 millert
6100:
6101: * visudo.man.in, visudo.cat: regen
6102:
6103: 2004-06-08 15:55 millert
6104:
6105: * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
6106: for runas_default being set after it has already been used.
6107:
6108: 2004-06-08 13:53 millert
6109:
6110: * parse.yacc: Add a MATCHED macro for testing whether foo_matches
6111: has been set to TRUE or FALSE. This is more readable than
6112: checking for >=0 or < 0. Doesn't change the actual code
6113: generated.
6114:
6115: 2004-06-06 20:11 millert
6116:
6117: * sudoers.man.in, sudoers.cat: regen
6118:
6119: 2004-06-06 20:07 millert
6120:
6121: * sudoers, sudoers.pod: Correct description of where Defaults specs
6122: should go.
6123:
6124: 2004-06-06 20:02 millert
6125:
6126: * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
6127: auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
6128:
6129: 2004-06-06 19:58 millert
6130:
6131: * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
6132: ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
6133: tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
6134: Remove trailing spaces, no actual code changes.
6135:
6136: 2004-06-06 16:22 millert
6137:
6138: * parse.yacc: Fix a >=0 that should be <0 that was improperly
6139: converted when UNSPEC was added.
6140:
6141: 2004-06-06 15:54 millert
6142:
6143: * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
6144: to UNSPEC, not NOMATCH when resetting it.
6145:
6146: 2004-06-06 15:39 millert
6147:
6148: * parse.yacc: Fix pastos introduced in SETNMATCH addition.
6149:
6150: 2004-06-05 13:55 millert
6151:
6152: * README.LDAP: Update for configure changes
6153:
6154: 2004-06-05 13:42 millert
6155:
6156: * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
6157: respectively) and use these in parse.yacc. Also in parse.yacc
6158: initialize the *_matches vars to UNSPEC and add two macros,
6159: SETMATCH and SETNMATCH for use when setting *_matches to a value
6160: that may be NOMATCH/UNSPEC/TRUE/FALSE.
6161:
6162: 2004-06-05 11:17 millert
6163:
6164: * parse.yacc: Initialize runas to -2, not -1 since we need to be
6165: able to distinguish between the initialized value and the value
6166: of a non-match when passing along the runas value to multiple
6167: commands.
6168:
6169: The result of this is that an unmatched runas is now set to -1,
6170: not 0. This is required now that parse.c treats a FALSE value
6171: for runas as being explicitly denied.
6172:
6173: 2004-06-03 16:21 millert
6174:
6175: * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
6176:
6177: 2004-06-03 12:37 millert
6178:
6179: * configure, configure.in: Add tests for what libs we need to link
6180: with for ldap and for whether or not lber.h needs to be
6181: explicitly included.
6182:
6183: 2004-06-02 20:30 aaron
6184:
6185: * ldap.c: Solaris native LDAP build fix
6186:
6187: 2004-06-01 16:56 millert
6188:
6189: * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
6190: use of an unset variable.
6191:
6192: 2004-06-01 16:56 millert
6193:
6194: * sudo.h: Add prototype for sudo_ldap_list_matches
6195:
6196: 2004-06-01 16:53 millert
6197:
6198: * compat.h, config.h.in, configure, configure.in: Better check for
6199: dirfd macro--we now set HAVE_DIRFD for the macro version too.
6200: Added check for dd_fd in `DIR' if no dirfd is found; this is now
6201: used to confitionally define the dirfd macro in compat.h.
6202:
6203: 2004-06-01 16:51 millert
6204:
6205: * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6206: function/macro.
6207:
6208: 2004-06-01 15:13 millert
6209:
6210: * compat.h, config.h.in, configure, configure.in: Add a check for a
6211: dirfd() function (like Linux) and add a dirfd macro in compat.h
6212: if there is no dirfd() function or macro.
6213:
6214: 2004-06-01 14:59 millert
6215:
6216: * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6217: needed.
6218:
6219: 2004-06-01 14:30 millert
6220:
6221: * CHANGES: Clarify closefrom() note.
6222:
6223: 2004-06-01 12:51 millert
6224:
6225: * parse.c: When checking for a command in the directory, only copy
6226: the base dir once.
6227:
6228: 2004-06-01 12:44 millert
6229:
6230: * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6231: Solaris closefrom() and only close the descriptors listed
6232: therein.
6233:
6234: 2004-06-01 12:23 millert
6235:
6236: * alloc.c: compat.h guarantees INT_MAX is defined.
6237:
6238: 2004-06-01 12:23 millert
6239:
6240: * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6241: without it and remove definition of RLIM_INFINITY (now unused).
6242:
6243: 2004-05-31 21:22 millert
6244:
6245: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6246: parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6247: since the former is standardized.
6248:
6249: 2004-05-31 19:18 millert
6250:
6251: * CHANGES: sync
6252:
6253: 2004-05-31 19:10 millert
6254:
6255: * RUNSON: Add some entries that were mailed in a while ago
6256:
6257: 2004-05-31 14:16 millert
6258:
6259: * closefrom.c: o sysconf returns a long, not an int. o check for
6260: negative return value from sysconf/getdtablesize and use
6261: OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6262: without it (a fair guess...)
6263:
6264: 2004-05-30 12:25 millert
6265:
6266: * UPGRADE: Mention change in parse order for RunAs entries.
6267:
6268: 2004-05-30 12:15 millert
6269:
6270: * configure: regen
6271:
6272: 2004-05-29 18:29 millert
6273:
6274: * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6275: now takes an optional dir as a parameter
6276: o added check for ldap_initialize() and start_tls_s()
6277:
6278: 2004-05-29 14:54 millert
6279:
6280: * README.LDAP: Fix some typos, word choice and formatting issues.
6281:
6282: 2004-05-28 18:06 millert
6283:
6284: * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6285: stdio and just use read/write as it is simpler.
6286:
6287: 2004-05-28 16:27 millert
6288:
6289: * configure, configure.in: Remove hack overriding cross-compiler
6290: check. It should no longer be needed.
6291:
6292: 2004-05-28 16:26 millert
6293:
6294: * compat.h: Remove select() compat bits since we no longer use
6295: select().
6296:
6297: 2004-05-28 16:24 millert
6298:
6299: * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6300: timeout for systems that don't fully/properly implement select().
6301:
6302: 2004-05-27 19:14 millert
6303:
6304: * CHANGES: synbc
6305:
6306: 2004-05-27 19:12 millert
6307:
6308: * RUNSON: update
6309:
6310: 2004-05-27 19:12 millert
6311:
6312: * set_perms.c: Deal with systems that have no way of setting the
6313: effective uid such as nsr-tandem-nsk.
6314:
6315: 2004-05-27 19:01 millert
6316:
6317: * configure, configure.in: Define NO_SAVED_IDS if we don't find
6318: seteuid()
6319:
6320: 2004-05-27 18:21 millert
6321:
6322: * config.h.in, configure, configure.in: Add back check for
6323: setreuid() since NSK doesn't have it.
6324:
6325: 2004-05-27 15:57 millert
6326:
6327: * sudoers.cat, sudoers.man.in: regen
6328:
6329: 2004-05-27 15:56 millert
6330:
6331: * BUGS, CHANGES: sync
6332:
6333: 2004-05-27 15:55 millert
6334:
6335: * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6336: user was explicitly denied and the command matched. This fixes a
6337: long-standing bug and makes: foo machine = (ALL)
6338: /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6339:
6340: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6341:
6342: 2004-05-27 15:52 millert
6343:
6344: * sudoers.pod: Clarify mail_noperm
6345:
6346: 2004-05-19 21:25 aaron
6347:
6348: * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6349:
6350: 2004-05-17 18:32 millert
6351:
6352: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6353: sudoers.cat, visudo.cat: regen
6354:
6355: 2004-05-17 18:31 millert
6356:
6357: * TODO: sync
6358:
6359: 2004-05-17 18:31 millert
6360:
6361: * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6362: remembers these?) and add a minimal sudoedit example.
6363:
6364: 2004-05-17 18:21 millert
6365:
6366: * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6367: filesystem -> file system
6368:
6369: 2004-05-17 18:19 millert
6370:
6371: * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6372:
6373: 2004-05-17 18:10 millert
6374:
6375: * lex.yy.c: regen
6376:
6377: 2004-05-17 17:57 millert
6378:
6379: * visudo.pod: remove my email addr
6380:
6381: 2004-05-17 17:55 millert
6382:
6383: * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6384: @mansectsu@ everywhere Make man page references links with L<>
6385:
6386: 2004-05-17 16:51 millert
6387:
6388: * parse.lex: Accept quoted globbing characters and pass them
6389: verbatim for fnmatch()
6390:
6391: 2004-05-17 16:50 millert
6392:
6393: * UPGRADE: Document that /tmp/.odus is gone.
6394:
6395: 2004-05-17 16:28 millert
6396:
6397: * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6398: /tmp/.odus as a possible timestamp dir unless specifically
6399: configured to do so. Instead, if no /var/run exists, use
6400: /var/adm/sudo or /usr/adm/sudo.
6401:
6402: 2004-05-17 16:08 millert
6403:
6404: * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6405: visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6406: on patches from Tom Bates.
6407:
6408: 2004-05-16 18:47 millert
6409:
6410: * CHANGES: There was no 1.6.7p6.
6411:
6412: 2004-05-16 16:38 millert
6413:
6414: * BUGS, CHANGES: sync
6415:
6416: 2004-05-16 16:36 millert
6417:
6418: * Makefile.in: add missing files to DISTFILES
6419:
6420: 2004-05-16 16:23 millert
6421:
6422: * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6423:
6424: 2004-05-16 16:20 millert
6425:
6426: * Makefile.in: Fix some line wrap and update (c) year
6427:
6428: 2004-04-28 15:05 aaron
6429:
6430: * README.LDAP: Build Note
6431:
6432: 2004-04-06 22:03 aaron
6433:
6434: * Makefile.in: Fix install-dirs
6435:
6436: 2004-04-04 20:27 millert
6437:
6438: * visudo.c: In Exit() when used as a signal handler, emsg is a
6439: pointer so sizeof() is wrong so make it a #define instead. Also
6440: avoid using a negative exit value. Found by Aaron Campbell
6441:
6442: 2004-03-24 18:23 millert
6443:
6444: * sudoers.pod: Remove bogus sentence about uids in a User_List.
6445: Document usernames vs. uid parsing in a Runas_List.
6446:
6447: 2004-03-24 18:06 millert
6448:
6449: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6450: the user specified a uid with the -u flag and the uid exists in
6451: the passwd file, set runas_user to the name, not the uid.
6452:
6453: When comparing usernames in sudoers, if a name is really a uid
6454: (starts with '#') compare it numerically to pw_uid.
6455:
6456: 2004-03-22 13:35 millert
6457:
6458: * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6459:
6460: 2004-02-28 18:54 aaron
6461:
6462: * CHANGES, config.h.in, ldap.c: Added start_tls support
6463:
6464: 2004-02-14 18:04 millert
6465:
6466: * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6467: def_data.c, def_data.h to PARSESRCS.
6468:
6469: 2004-02-14 10:13 aaron
6470:
6471: * strlcat.c, strlcpy.c: Un-Fix last license munge
6472:
6473: 2004-02-13 16:37 millert
6474:
6475: * CHANGES, RUNSON, TODO: checkpoint
6476:
6477: 2004-02-13 16:37 millert
6478:
6479: * lex.yy.c, configure: regen
6480:
6481: 2004-02-13 16:36 millert
6482:
6483: * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6484: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6485: find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6486: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6487: interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6488: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6489: strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6490: sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6491: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6492: visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6493: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6494: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6495: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6496: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6497: emul/search.h, emul/utime.h: More to a less restrictive,
6498: ISC-style license.
6499:
6500: 2004-02-12 21:08 aaron
6501:
6502: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6503: def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6504: sudoers2ldif: Merged in LDAP Support
6505:
6506: 2004-02-08 15:53 millert
6507:
6508: * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6509: a macro.
6510:
6511: 2004-02-06 18:08 millert
6512:
6513: * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6514: already 0 so set the euid first, then just call setuid(0) to set
6515: the real uid too.
6516:
6517: 2004-02-06 14:52 millert
6518:
6519: * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6520: appropriate instead of seteuid() which may not exist.
6521:
6522: 2004-02-04 14:58 millert
6523:
6524: * LICENSE: 2004
6525:
6526: 2004-02-03 23:38 millert
6527:
6528: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6529: --with-pc-insults configure option
6530:
6531: 2004-02-03 23:32 millert
6532:
6533: * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6534:
6535: 2004-02-01 15:45 millert
6536:
6537: * sudo.man.in, sudoers.man.in: regen
6538:
6539: 2004-02-01 15:44 millert
6540:
6541: * sudoers.pod: Add a note that noexec is not a cure-all.
6542:
6543: 2004-02-01 15:20 millert
6544:
6545: * sudoers.pod: Mention that disabling "root_sudo" is pretty
6546: pointless.
6547:
6548: 2004-02-01 15:20 millert
6549:
6550: * configure, configure.in: Substitute for root_sudo in sudoers.pod
6551:
6552: 2004-02-01 15:03 millert
6553:
6554: * sudo.pod: Add sudoedit to the NAME section
6555:
6556: 2004-02-01 15:00 millert
6557:
6558: * sudoers.pod: Document that fact that setting ignore_dot in
6559: sudoers has no effect due to the fact that find_path() is called
6560: *before* sudoers is read.
6561:
6562: 2004-01-29 19:50 millert
6563:
6564: * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6565:
6566: 2004-01-29 19:42 millert
6567:
6568: * BUGS, CHANGES, TODO: sync
6569:
6570: 2004-01-29 19:42 millert
6571:
6572: * sudo.man.in: regen
6573:
6574: 2004-01-29 19:41 millert
6575:
6576: * sudo.pod: Clarify that when sudo is run by root with the
6577: SUDO_USER variable set, the sudoers lookup happens for root and
6578: not the SUDO_USER user.
6579:
6580: 2004-01-29 17:33 millert
6581:
6582: * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6583: set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6584: auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6585:
6586: 2004-01-29 16:22 millert
6587:
6588: * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6589:
6590: 2004-01-29 16:15 millert
6591:
6592: * sudo.c: Don't look at prev_user until after we've parsed sudoers
6593: and done the password check. That way, if sudo/sudoedit is run
6594: from a root process that was invoked by sudo, we check sudoers
6595: for root, not the previous user. This makes sudoedit much more
6596: useful and means that for the sudo case, we get correct logging
6597: on who actually ran the command.
6598:
6599: 2004-01-22 19:22 millert
6600:
6601: * sudo_edit.c: Add a comment describing why we need to be notified
6602: about our child stopping.
6603:
6604: 2004-01-22 16:06 millert
6605:
6606: * def_data.c, def_data.in: Update the noexec variable descriptions
6607:
6608: 2004-01-22 14:18 millert
6609:
6610: * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6611: execve()
6612:
6613: 2004-01-22 12:14 millert
6614:
6615: * sudo_noexec.c: Alas, all the world does not go through execve(2).
6616: Many systems still have an execv(2) system call, Linux 2.6
6617: provides fexecve(2) and it is not uncommon for libc to have
6618: underscore ('_') versions of the functions to be used internally
6619: by the library. Instead of stubbing all these out by hand,
6620: define a macro and let it do the work. Extra exec functions
6621: pointed out by Reznic Valery.
6622:
6623: 2004-01-21 21:57 millert
6624:
6625: * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6626: Because we do a fork() first we need to be notified when the
6627: child has been stopped and then send that same signal to ourself
6628: so the shell can do its job control thing.
6629:
6630: 2004-01-21 21:44 millert
6631:
6632: * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6633: systems out there that want to run sudo that still don't support
6634: these we can try to deal with that later.
6635:
6636: 2004-01-21 20:03 millert
6637:
6638: * lex.yy.c: regen
6639:
6640: 2004-01-21 20:00 millert
6641:
6642: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6643: -e / sudoedit
6644:
6645: 2004-01-21 19:08 millert
6646:
6647: * configure, configure.in: fix typo
6648:
6649: 2004-01-21 19:02 millert
6650:
6651: * config.h.in, configure.in: Add SET/CLR/ISSET
6652:
6653: 2004-01-21 18:55 millert
6654:
6655: * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6656: Pretty print the long usage() line to not wrap (assumes 80 char
6657: display)
6658:
6659: 2004-01-21 18:01 millert
6660:
6661: * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6662: is implied and no other flags are permitted.
6663:
6664: 2004-01-21 18:00 millert
6665:
6666: * sudo.h: Add a new flag, -e, that makes it possible to give users
6667: the ability to edit files with the editor of their choice as the
6668: invoking user, not the runas user. Temporary files are used for
6669: the actual edit and the temp file is copied over the original
6670: after the editor is done.
6671:
6672: 2004-01-21 17:25 millert
6673:
6674: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6675: flag, -e, that makes it possible to give users the ability to
6676: edit files with the editor of their choice as the invoking user,
6677: not the runas user. Temporary files are used for the actual edit
6678: and the temp file is copied over the original after the editor is
6679: done.
6680:
6681: 2004-01-21 17:06 millert
6682:
6683: * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6684: variables is set, use that to determine the invoking user's true
6685: identity. That way the proper info gets logged by someone who
6686: has done "sudo su" but still uses sudo to as root. We can't do
6687: this for non-root users since that would open up a security hole,
6688: though perhaps it would be acceptable to use getlogin(2) on OSes
6689: where this a system call (and doesn't just look in the utmp
6690: file).
6691:
6692: 2004-01-21 16:58 millert
6693:
6694: * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6695:
6696: 2004-01-21 16:57 millert
6697:
6698: * configure, config.h.in, configure.in: Add check for fchown(2)
6699:
6700: 2004-01-20 14:22 millert
6701:
6702: * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6703: set_runaspw. It is far to late to set NewArgv[0] there and will
6704: have no effect anyway as cmnd and safe_cmnd have already been
6705: set.
6706:
6707: 2004-01-20 14:18 millert
6708:
6709: * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6710: did.
6711:
6712: 2004-01-18 20:17 millert
6713:
6714: * env.c, sudo.c: In -i mode always set new environment based on the
6715: runas user's passwd entry.
6716:
6717: 2004-01-18 17:56 millert
6718:
6719: * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6720: section with usage() in sudo.c. Also sort the flags in the
6721: OPTIONS section.
6722:
6723: 2004-01-18 17:55 millert
6724:
6725: * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6726: patches from David J. MacKenzie o Sort the flags in the usage
6727: message
6728:
6729: 2004-01-18 17:22 millert
6730:
6731: * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6732: substitution.
6733:
6734: 2004-01-17 16:34 millert
6735:
6736: * sudo.c: Change euid to runas user before calling find_path().
6737: Unfortunately, though runas_user can be modified in sudoers we
6738: haven't parsed sudoers yet.
6739:
6740: 2004-01-17 16:25 millert
6741:
6742: * sudoers.man.in, sudoers.pod: Add missing defintion of
6743: Parameter_List and use single pipes in the Defaults EBNF
6744: definition.
6745:
6746: 2004-01-17 13:49 millert
6747:
6748: * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6749: don't want to reset the contents of runas_pw if the user
6750: specified a user via the -u flag.
6751:
6752: Avoid unnecessary passwd lookups in set_authpw(). In most cases
6753: we already have the info in runas_pw.
6754:
6755: 2004-01-16 18:16 millert
6756:
6757: * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6758: RedHat
6759:
6760: 2004-01-16 18:12 millert
6761:
6762: * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6763:
6764: 2004-01-16 18:10 millert
6765:
6766: * parse.c: If we can't stat the command as root, try as the runas
6767: user instead.
6768:
6769: 2004-01-16 18:09 millert
6770:
6771: * testsudoers.c, visudo.c: Add stub set_runaspw() function
6772:
6773: 2004-01-16 18:09 millert
6774:
6775: * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6776: will be used as a callback to update runas_pw when the runas user
6777: changes.
6778:
6779: 2004-01-16 18:07 millert
6780:
6781: * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6782:
6783: 2004-01-16 18:05 millert
6784:
6785: * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6786: a PERM_RUNAS that just changes the euid.
6787:
6788: 2004-01-16 18:04 millert
6789:
6790: * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6791: allocate memory in one chunk for easy free()ing. Also change it
6792: from static to extern.
6793:
6794: 2004-01-16 18:03 millert
6795:
6796: * defaults.c, defaults.h: Add callback support
6797:
6798: 2004-01-16 18:02 millert
6799:
6800: * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6801: it for runas_default
6802:
6803: 2004-01-15 15:13 millert
6804:
6805: * auth/fwtk.c: Add support for chalnecho and display server
6806: responses used by fwtk >= 2.0
6807:
6808: 2004-01-12 18:39 millert
6809:
6810: * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6811:
6812: 2004-01-12 14:03 millert
6813:
6814: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6815: sudo.h: Use closefrom() instead of doing the equivalent inline.
6816:
6817: 2004-01-12 13:55 millert
6818:
6819: * closefrom.c: closefrom(3) for systems w/o it
6820:
6821: 2004-01-09 16:29 millert
6822:
6823: * sudoers.man.in: Update from .pod file.
6824:
6825: 2004-01-09 16:26 millert
6826:
6827: * configure, configure.in: Substitute noexec_file for the sudoers
6828: man page
6829:
6830: 2004-01-09 16:24 millert
6831:
6832: * sudo.man.in, sudo.pod: Mention noexec
6833:
6834: 2004-01-09 16:16 millert
6835:
6836: * sudoers.man.in, sudoers.pod: Document noexec
6837:
6838: 2004-01-09 14:38 millert
6839:
6840: * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6841: definition from config.h to pam.c where it belongs. We can't
6842: have this in config.h since that gets included too early.
6843:
6844: 2004-01-09 14:35 millert
6845:
6846: * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6847: implementations put their headers in /usr/include/pam instead of
6848: /usr/include/security.
6849:
6850: 2004-01-09 14:32 millert
6851:
6852: * configure.in: I missed changing the EXEC macro -> EXECV here when
6853: I changed this in config.h.in and sudo.c a while ago.
6854:
6855: 2004-01-09 13:15 millert
6856:
6857: * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6858:
6859: 2004-01-09 03:29 millert
6860:
6861: * configure, configure.in: o merge the hpux case entries into a
6862: single entry w/ its own sub-case statement. o HP-UX >= 11
6863: support getspnam(), use it in preference to getprpwuid()
6864:
6865: 2004-01-09 02:58 millert
6866:
6867: * configure, configure.in: eval $shrext so that it expands nicely
6868: on MacOS X
6869:
6870: 2004-01-09 02:50 millert
6871:
6872: * Makefile.in: Don't lie about making a module, it does the wrong
6873: thing on mach
6874:
6875: 2004-01-09 02:49 millert
6876:
6877: * ltmain.sh: Remove requirement that libs must begin with "lib".
6878: They don't when we point directly at the lib using LD_PRELOAD or
6879: its equivalent.
6880:
6881: 2004-01-09 02:01 millert
6882:
6883: * acsite.m4: Disable support for c++, f77 and java. We don't need
6884: it, it takes a lot of time, and it hosed our check for shared lib
6885: support.
6886:
6887: 2004-01-09 02:00 millert
6888:
6889: * configure: regen
6890:
6891: 2004-01-09 02:00 millert
6892:
6893: * configure.in: Call AC_ENABLE_SHARED and check the status of
6894: enable_shared to know when shared libs are available.
6895:
6896: 2004-01-09 01:37 millert
6897:
6898: * acsite.m4: Duh, OpenBSD suports shared libs too
6899:
6900: 2004-01-09 01:18 millert
6901:
6902: * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6903: qualifiers.
6904:
6905: 2004-01-09 01:15 millert
6906:
6907: * configure, configure.in: o No need to check for sed, libtool
6908: config does that for us o move check for --with-noexec until
6909: after libtool magic is run so we can use $can_build_shared and
6910: $shrext
6911:
6912: 2004-01-09 01:14 millert
6913:
6914: * ltmain.sh: Don't print a bunch of crap about library installs
6915: since we are not really installing a library.
6916:
6917: 2004-01-09 00:38 millert
6918:
6919: * env.c: Make format_env() varargs Add noexec support for Darwin,
6920: MacOS X, Irix, and Tru64
6921:
6922: 2004-01-09 00:32 millert
6923:
6924: * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6925: changes: o no ldconfig in the finish step o assume no libprefix
6926: or version is needed
6927:
6928: 2004-01-09 00:15 millert
6929:
6930: * sudo_noexec.c: Fix compilation under K&R
6931:
6932: 2004-01-06 09:31 millert
6933:
6934: * CHANGES: checkpoint
6935:
6936: 2004-01-06 09:28 millert
6937:
6938: * sudo_noexec.c: stub execve() that just returns EACCES; used for
6939: noexec functionality
6940:
6941: 2004-01-06 01:42 millert
6942:
6943: * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6944: issue with generated code.
6945:
6946: 2004-01-05 16:10 millert
6947:
6948: * def_data.c, def_data.h, def_data.in: Move the environment
6949: defaults to the end and shorten a few of the descriptions.
6950:
6951: 2004-01-05 15:05 millert
6952:
6953: * configure.in, configure: no shared libs on ultris or convexos
6954:
6955: 2004-01-05 15:03 millert
6956:
6957: * Makefile.in, configure, configure.in: Build sudo_noexec shared
6958: object using libtool; could use some cleanup.
6959:
6960: 2004-01-05 14:59 millert
6961:
6962: * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6963:
6964: 2004-01-05 14:56 millert
6965:
6966: * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6967: that order is not important.
6968:
6969: 2004-01-05 12:15 millert
6970:
6971: * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6972: pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6973:
6974: 2004-01-04 22:58 millert
6975:
6976: * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6977: _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6978: option. The default value of noexec_file is set to this.
6979:
6980: 2004-01-04 21:48 millert
6981:
6982: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6983: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6984: support for preloading a shared object containing a dummy
6985: execve() function that just sets error and returns -1. This adds
6986: a "noexec_file" option to load the filename as well as a "noexec"
6987: flag to enable it unconditionally. There is also a NOEXEC tag
6988: that can be attached to specific commands and an EXEC tag to
6989: disable it.
6990:
6991: 2004-01-04 21:40 millert
6992:
6993: * mkdefaults: add missing newline to usage statement
6994:
6995: 2004-01-04 20:39 millert
6996:
6997: * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6998:
6999: 2004-01-04 20:16 millert
7000:
7001: * logging.c: Don't truncate usernames to 8 characters in the log
7002: message.
7003:
7004: 2004-01-04 20:13 millert
7005:
7006: * check.c, sudoers.man.in, sudoers.pod: Update copyright year
7007:
7008: 2004-01-04 20:12 millert
7009:
7010: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
7011: sudoers.pod: Add a new option, lecture_file, that can be used to
7012: point to a custom sudo lecture.
7013:
7014: 2003-12-31 17:46 millert
7015:
7016: * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
7017: auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
7018: zero_bytes() function to do the equivalent of bzero in such a way
7019: that will heopfully not be optimized away by sneaky compilers.
7020:
7021: 2003-12-31 13:35 millert
7022:
7023: * err.c: Use #ifdef __STDC__, not #if __STDC__.
7024:
7025: 2003-12-30 17:41 millert
7026:
7027: * mkdefaults: Always put at least one space between the def_* macro
7028: name and its definition.
7029:
7030: 2003-12-30 17:34 millert
7031:
7032: * configure, configure.in: Adjust code for --without-lecture to
7033: match new values.
7034:
7035: 2003-12-30 17:33 millert
7036:
7037: * visudo.man.in: regen after pasto fix
7038:
7039: 2003-12-30 17:31 millert
7040:
7041: * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
7042: from a flag to a tuple.
7043:
7044: 2003-12-30 17:31 millert
7045:
7046: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
7047: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
7048: support for tuples in def_data.in; these are implemented as an
7049: enum type. Currently there is only a single tuple enum but in
7050: the future we may have one tuple enum per T_TUPLE entry in
7051: def_data.in. Currently listpw, verifypw and lecture are tuples.
7052: This avoids the need to have two entries (one ival, one str) for
7053: pwflags and syslog values.
7054:
7055: lecture is now a tuple with the following values: never, once,
7056: always
7057:
7058: We no longer use both an int and string entry for syslog
7059: facilities and priorities. Instead, there are logfac2str() and
7060: logpri2str() functions that get used when we need to print the
7061: string values.
7062:
7063: 2003-12-30 17:20 millert
7064:
7065: * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
7066: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
7067: visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
7068: auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
7069: auth/sudo_auth.c: Create def_* macros for each defaults value so
7070: we no longer need the def_{flag,ival,str,list,mode} macros (which
7071: have been removed). This is a step toward more flexible data
7072: types in def_data.in.
7073:
7074: 2003-12-30 15:55 millert
7075:
7076: * TODO: checkpoint
7077:
7078: 2003-12-22 21:18 millert
7079:
7080: * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
7081: unusual for users to place "sudo -k" in a .logout file which can
7082: cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
7083: daemon has died. Previously, this would result in useless mail
7084: and logging.
7085:
7086: 2003-12-16 13:51 millert
7087:
7088: * visudo.pod: fix pasto in VISUAL description
7089:
7090: 2003-12-09 22:09 millert
7091:
7092: * configure: regen
7093:
7094: 2003-12-09 22:08 millert
7095:
7096: * CHANGES: checkpoint
7097:
7098: 2003-12-09 22:02 millert
7099:
7100: * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
7101: too
7102:
7103: 2003-08-12 16:45 millert
7104:
7105: * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
7106: not already there).
7107:
7108: 2003-06-28 21:31 millert
7109:
7110: * auth/pam.c: Fix a core dump on Solaris by preserving the
7111: pam_handle_t we used during authentication for pam_prep_user().
7112: If we didn't authenticate (ie: ticket still valid), we call
7113: pam_init() from pam_prep_user(). This is something of a hack; it
7114: may be better to change the auth API and add an auth_final()
7115: function that acts like pam_prep_user().
7116:
7117: 2003-06-21 12:50 millert
7118:
7119: * set_perms.c: Add explicit declaration of printerr variable in
7120: function header (was defaulting to int which is OK but oh so K&R
7121: :-). From Theo.
7122:
7123: 2003-06-09 19:00 millert
7124:
7125: * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
7126:
7127: 2003-06-09 16:07 millert
7128:
7129: * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
7130: problem where the sudo process would spin eating up CPU until
7131: sendmail finished when it has to send mail.
7132:
7133: 2003-05-30 16:22 millert
7134:
7135: * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
7136: disavowed it
7137:
7138: 2003-05-21 21:53 millert
7139:
7140: * parse.c: Don't assume that getgrnam() calls don't modify contents
7141: of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
7142: can happen. Based on a patch from Kirk Webb.
7143:
7144: 2003-05-06 11:25 millert
7145:
7146: * configure.in: missing ;;
7147:
7148: 2003-05-06 00:53 millert
7149:
7150: * configure.in: darwin has a broken setreuid() in at least some
7151: versions
7152:
7153: 2003-05-06 00:31 millert
7154:
7155: * env.c: Fix an off by one error when reallocating the environment;
7156: Kevin Pye
7157:
7158: 2003-04-30 14:04 millert
7159:
7160: * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
7161:
7162: 2003-04-28 19:30 millert
7163:
7164: * HISTORY: More info on the early days from Coggs.
7165:
7166: 2003-04-21 14:47 millert
7167:
7168: * auth/kerb5.c: remove errant semicolon that prevented compilation
7169: under heimdal
7170:
7171: 2003-04-15 20:42 millert
7172:
7173: * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
7174: env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
7175: goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
7176: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
7177: strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7178: sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
7179: version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
7180: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
7181: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7182: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7183: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
7184: on affected files
7185:
7186: 2003-04-15 20:25 millert
7187:
7188: * LICENSE: slightly different wording for the darpa credit
7189:
7190: 2003-04-15 14:37 millert
7191:
7192: * LICENSE: Add DARPA credit
7193:
7194: 2003-04-14 16:49 millert
7195:
7196: * auth/kerb5.c: Use krb5_princ_component() instead of
7197: krb5_princ_realm() for MIT Kerberos like we did before I messed
7198: things up ;-)
7199:
7200: Use krb5_principal_get_comp_string() to do the same thing w/
7201: Heimdal. I'm not sure if the component should be 0 or 1 in this
7202: case.
7203:
7204: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7205: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7206: should be a configure check for this I guess.
7207:
7208: 2003-04-13 15:48 millert
7209:
7210: * TROUBLESHOOTING, config.h.in, configure, configure.in,
7211: sample.sudoers: builtin -> built-in; Jason McIntyre
7212:
7213: 2003-04-13 15:45 millert
7214:
7215: * sudoers.pod: built in -> built-in; Jason McIntyre
7216:
7217: 2003-04-09 16:14 millert
7218:
7219: * CHANGES: checkpoint for 1.6.7p3
7220:
7221: 2003-04-09 16:14 millert
7222:
7223: * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7224: Spencer. Amazingly, sudo source from 1985 is available via
7225: groups.google.com
7226:
7227: 2003-04-09 16:13 millert
7228:
7229: * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7230: set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7231: for the RLIMIT_CORE restoration on some OSes.
7232:
7233: 2003-04-04 12:46 millert
7234:
7235: * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7236:
7237: 2003-04-04 12:45 millert
7238:
7239: * config.h.in, configure, configure.in: Check for heimdal even if
7240: we found krb5-config and define HAVE_HEIMDAL.
7241:
7242: 2003-04-03 22:04 millert
7243:
7244: * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7245: The former is no longer defined by MIT kerb5 (though it used to
7246: be and indeed remains so in Heimdal).
7247:
7248: 2003-04-03 10:16 millert
7249:
7250: * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7251: duplicate) directories to "mkdir -p" since that seems to break on
7252: Tru64 Unix at least. This basically brings back what shipped
7253: with sudo 1.6.6.
7254:
7255: 2003-04-02 13:57 millert
7256:
7257: * auth/kerb5.c: Correct number of args to
7258: krb5_principal_get_realm() and fix an unclosed comment that hid
7259: the bug.
7260:
7261: 2003-04-02 13:45 millert
7262:
7263: * configure: regen
7264:
7265: 2003-04-02 13:45 millert
7266:
7267: * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7268: configure.in, version.h: ++version
7269:
7270: 2003-04-02 13:44 millert
7271:
7272: * configure.in: use krb5-config to determine Kerberos V details if
7273: it exists
7274:
7275: 2003-04-02 13:25 millert
7276:
7277: * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7278: interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7279: visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7280: auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7281: throughout. The main exception is openlog(). Since the admin
7282: may be filtering logs based on the program name in the log files,
7283: hard code this to "sudo".
7284:
7285: 2003-04-02 13:16 millert
7286:
7287: * Makefile.in: Add getprogname.c and err.c
7288:
7289: 2003-04-02 13:15 millert
7290:
7291: * configure: regen
7292:
7293: 2003-04-02 13:15 millert
7294:
7295: * configure.in, config.h.in: Add checks for getprognam(),
7296: __progname and err.h
7297:
7298: 2003-04-02 13:14 millert
7299:
7300: * err.c, emul/err.h: For systems withour err/warn functions.
7301:
7302: 2003-04-02 13:14 millert
7303:
7304: * getprogname.c: For systems neither getprogname() nor __progname;
7305: uses Argv[0].
7306:
7307: 2003-04-01 10:09 millert
7308:
7309: * CHANGES: checkpoint for 1.6.7p1
7310:
7311: 2003-04-01 10:02 millert
7312:
7313: * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7314:
7315: 2003-04-01 09:58 millert
7316:
7317: * check.c: oflow detection in expand_prompt() was faulty (false
7318: positives). The count was based on strlcat() return value which
7319: includes the length of the entire string.
7320:
7321: 2003-03-30 19:02 millert
7322:
7323: * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7324:
7325: 2003-03-24 16:09 millert
7326:
7327: * logging.c: g/c unused variable
7328:
7329: 2003-03-24 11:06 millert
7330:
7331: * configure: regen
7332:
7333: 2003-03-24 11:05 millert
7334:
7335: * configure.in: use man sections 8 and 5 for csops
7336:
7337: 2003-03-21 18:11 millert
7338:
7339: * configure: regen
7340:
7341: 2003-03-21 15:10 millert
7342:
7343: * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7344: of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7345:
7346: 2003-03-21 14:02 millert
7347:
7348: * configure: regen
7349:
7350: 2003-03-21 14:01 millert
7351:
7352: * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7353: An alternate libpath may be specified or -blibpath support can be
7354: disabled. Also change conifgure such that -blibpath is not
7355: specified if no -L libpaths were added to SUDO_LDFLAGS.
7356:
7357: 2003-03-20 22:05 millert
7358:
7359: * configure.in: add AIX blibpath support
7360:
7361: 2003-03-20 20:28 millert
7362:
7363: * INSTALL, configure.in: --with-skey and --with-opie now take an
7364: option directory argument This obsoletes a --with-csops hack
7365: (/tools/cs/skey)
7366:
7367: Also remove the remaining direct uses of "echo"
7368:
7369: 2003-03-20 17:44 millert
7370:
7371: * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7372: -lroken optional for KTH Kerberos IV and V.
7373:
7374: 2003-03-20 14:42 millert
7375:
7376: * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7377: -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7378: specified variable.
7379:
7380: 2003-03-20 14:40 millert
7381:
7382: * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7383: There is a new configure option, --with-rpath to control this
7384: behavior.
7385:
7386: 2003-03-19 23:50 millert
7387:
7388: * configure.in: for kerb4 put libdes after libkrb on the link line
7389:
7390: 2003-03-19 23:49 millert
7391:
7392: * auth/kerb4.c: typo
7393:
7394: 2003-03-19 23:33 millert
7395:
7396: * configure.in: fix kerberos lib check when a path is specified
7397:
7398: 2003-03-19 21:04 millert
7399:
7400: * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7401: reapchild after sending mail instead of doing a conditional
7402: sudo_waitpid.
7403:
7404: 2003-03-19 16:20 millert
7405:
7406: * configure: regen
7407:
7408: 2003-03-19 16:19 millert
7409:
7410: * configure.in: replace =DIR with [=DIR] where sensible
7411:
7412: 2003-03-19 16:16 millert
7413:
7414: * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7415: include/lib detection based on openssh's configure.in
7416:
7417: 2003-03-19 15:58 millert
7418:
7419: * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7420: argument.
7421:
7422: 2003-03-15 22:03 millert
7423:
7424: * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7425: says username is 32 bytes.
7426:
7427: 2003-03-15 21:18 millert
7428:
7429: * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7430: snprintf, not sprintf
7431:
7432: 2003-03-15 21:18 millert
7433:
7434: * auth/rfc1938.c: use snprintf
7435:
7436: 2003-03-15 15:37 millert
7437:
7438: * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7439: kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7440: copyright year
7441:
7442: 2003-03-15 15:31 millert
7443:
7444: * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7445: Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7446: logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7447: sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7448: visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7449: copyright year
7450:
7451: 2003-03-15 15:19 millert
7452:
7453: * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7454: with %lu
7455:
7456: 2003-03-15 15:17 millert
7457:
7458: * configure: regen
7459:
7460: 2003-03-15 15:16 millert
7461:
7462: * configure.in: correct error messages for
7463: --with-sudoers-{mode,uid,gid}
7464:
7465: 2003-03-15 15:10 millert
7466:
7467: * alloc.c: make the malloc(0) error specific to each function to
7468: aid tracking down bugs.
7469:
7470: 2003-03-15 14:49 millert
7471:
7472: * alloc.c: deal with platforms where size_t is signed and there is
7473: no SIZE_MAX or SIZE_T_MAX
7474:
7475: 2003-03-15 14:10 millert
7476:
7477: * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7478: warnings.
7479:
7480: 2003-03-15 13:02 millert
7481:
7482: * sudo.c: Use stat_sudoers macro so --with-stow can work
7483:
7484: 2003-03-15 13:01 millert
7485:
7486: * INSTALL, config.h.in, configure, configure.in: Add support for
7487: --with-stow based on patches from Robert Uhl
7488:
7489: 2003-03-15 12:51 millert
7490:
7491: * env.c: fix indentation
7492:
7493: 2003-03-15 00:21 millert
7494:
7495: * configure.in: back out rev 1.352
7496:
7497: 2003-03-14 20:11 millert
7498:
7499: * lex.yy.c: regen
7500:
7501: 2003-03-14 20:11 millert
7502:
7503: * parse.lex: use strlcpy, not strncpy
7504:
7505: 2003-03-14 19:48 millert
7506:
7507: * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7508: setusercontext() failure.
7509:
7510: 2003-03-14 19:43 millert
7511:
7512: * logging.c: use pid_t
7513:
7514: 2003-03-14 10:43 millert
7515:
7516: * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7517:
7518: 2003-03-14 10:35 millert
7519:
7520: * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7521:
7522: 2003-03-13 21:47 millert
7523:
7524: * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7525:
7526: 2003-03-13 21:38 millert
7527:
7528: * configure: regen
7529:
7530: 2003-03-13 21:38 millert
7531:
7532: * configure.in: put -ldl after -lpam, not before; fixes static
7533: linking on Linux
7534:
7535: 2003-03-13 21:17 millert
7536:
7537: * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7538: getifaddrs() case.
7539:
7540: 2003-03-13 20:24 millert
7541:
7542: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7543: sudoers.cat, visudo.cat: regen
7544:
7545: 2003-03-13 20:23 millert
7546:
7547: * Makefile.in: Preserve copyright notice from .pod file in .man.in
7548: file
7549:
7550: 2003-03-13 20:01 millert
7551:
7552: * visudo.pod: Add sudoers(5) to SEE ALSO
7553:
7554: 2003-03-13 15:27 millert
7555:
7556: * lex.yy.c: regen
7557:
7558: 2003-03-13 15:27 millert
7559:
7560: * parse.lex: Don't assume libc can realloc() a NULL string. If
7561: malloc/realloc fails, make sure we just return; yyerror() is not
7562: terminal.
7563:
7564: 2003-03-13 15:17 millert
7565:
7566: * lex.yy.c: regen
7567:
7568: 2003-03-13 15:17 millert
7569:
7570: * parse.lex: simplify fill_args a little and use strlcpy for
7571: paranoia
7572:
7573: 2003-03-13 15:00 millert
7574:
7575: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7576: testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7577: overflow. In all cases the strings were either pre-allocated to
7578: the correct size of length checks were done before the copy but a
7579: little paranoia can go a long way.
7580:
7581: 2003-03-13 12:54 millert
7582:
7583: * sudo.h: Add strlc{at,py} protos
7584:
7585: 2003-03-13 12:03 millert
7586:
7587: * env.c, interfaces.c: Use erealloc3()
7588:
7589: 2003-03-13 12:00 millert
7590:
7591: * configure: regen
7592:
7593: 2003-03-13 12:00 millert
7594:
7595: * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7596: need >=). Use memcpy() instead of strcpy() in estrdup() so this
7597: is strcpy()-free.
7598:
7599: 2003-03-13 11:58 millert
7600:
7601: * sudo.c: snprintf() a uid as %lu, not %ld to match the
7602: MAX_UID_T_LEN test in configure.
7603:
7604: 2003-03-13 11:56 millert
7605:
7606: * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7607: just unsigned.
7608:
7609: 2003-03-12 18:46 millert
7610:
7611: * sudo.c: Use snprintf() for paranoia
7612:
7613: 2003-03-12 17:16 millert
7614:
7615: * parse.yacc: Use emalloc2 and erealloc3
7616:
7617: 2003-03-12 17:08 millert
7618:
7619: * Makefile.in: strlc{at,py} for those w/o it
7620:
7621: 2003-03-12 17:07 millert
7622:
7623: * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7624:
7625: 2003-03-12 17:07 millert
7626:
7627: * config.h.in, configure, configure.in: Add stlc{at,py} for those
7628: w/o it.
7629:
7630: 2003-03-12 16:51 millert
7631:
7632: * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7633: emalloc2().
7634:
7635: 2003-03-12 16:45 millert
7636:
7637: * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7638: certain size.
7639:
7640: 2003-03-12 16:41 millert
7641:
7642: * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7643: bzero and with error/oflow checking.
7644:
7645: 2003-03-12 16:23 millert
7646:
7647: * alloc.c: Error out on malloc(0); suggested by theo
7648:
7649: 2003-03-09 19:34 millert
7650:
7651: * configure, configure.in: fix a typo; David Krause
7652:
7653: 2003-03-07 10:46 millert
7654:
7655: * sudo.pod: fix typo
7656:
7657: 2003-03-03 21:47 millert
7658:
7659: * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7660:
7661: 2003-03-01 13:20 millert
7662:
7663: * configure.in, config.h.in: not not; Anil Madhavapeddy
7664:
7665: 2003-01-23 03:03 millert
7666:
7667: * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7668:
7669: 2003-01-20 16:13 millert
7670:
7671: * parse.yacc: Add some missing ';' rule terminators that bison
7672: warns about.
7673:
7674: 2003-01-20 16:07 millert
7675:
7676: * config.sub: fix typo I introduced in last merge
7677:
7678: 2003-01-20 15:59 millert
7679:
7680: * configure: regenerate with autoconf 2.57
7681:
7682: 2003-01-20 15:58 millert
7683:
7684: * config.h.in: Add missing "$HOME"
7685:
7686: 2003-01-20 15:57 millert
7687:
7688: * configure.in: Add some more square backets to make autoconf 2.57
7689: happy
7690:
7691: 2003-01-20 14:39 millert
7692:
7693: * config.guess, config.sub, mkinstalldirs: Updates from
7694: autoconf-2.57
7695:
7696: 2003-01-17 18:10 millert
7697:
7698: * lex.yy.c, sudo.tab.h: regen
7699:
7700: 2003-01-17 18:09 millert
7701:
7702: * parse.lex, parse.yacc, sudoers.pod: Add support for
7703: Defaults>RunasUser
7704:
7705: 2003-01-06 19:10 millert
7706:
7707: * visudo.c: fclose() yyin after each yyparse() is done and use
7708: fopen() instead of using freopen().
7709:
7710: 2003-01-06 19:02 millert
7711:
7712: * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7713: It looks like the issue is that yyrestart() does not reset the
7714: start condition to INITIAL which is an issue since we parse
7715: sudoers multiple times.
7716:
7717: 2003-01-06 18:47 millert
7718:
7719: * parse.lex: Work around what appears to be a flex bug when dealing
7720: with files that lack a final newline before EOF. This adds a
7721: rule to match EOF in the non-initial states which resets the
7722: state to INITIAL and throws an error.
7723:
7724: 2003-01-06 15:06 millert
7725:
7726: * visudo.c: o The parser needs sudoers to end with a newline but
7727: some editors (emacs) may not add one. Check for a missing
7728: newline at EOF and add one if needed. o Set quiet flag during
7729: initial sudoers parse (to get options) o Move yyrestart() call
7730: and always use freopen() to open yyin after initial sudoers
7731: parse.
7732:
7733: 2002-12-15 11:24 millert
7734:
7735: * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7736: Want to set effective gid, not real gid, when reading sudoers.
7737:
7738: 2002-12-15 11:08 millert
7739:
7740: * set_perms.c: don't compile set_perms_posix if we have setreuid or
7741: setresuid
7742:
7743: 2002-12-14 14:21 millert
7744:
7745: * sudo.pod, sudoers.pod: document new prompt escapes
7746:
7747: 2002-12-14 14:15 millert
7748:
7749: * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7750: now gets collapsed to "%" as was originally intended. This also
7751: gets rid of lastchar (does lookahead instead of lookback) which
7752: should simplify the logic slightly.
7753:
7754: 2002-12-13 13:20 millert
7755:
7756: * tgetpass.c: Write the prompt *after* turning off echo to avoid
7757: some password characters being echoed on heavily-loaded machines
7758: with fast typists.
7759:
7760: 2002-12-13 13:09 millert
7761:
7762: * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7763:
7764: 2002-12-13 12:48 millert
7765:
7766: * configure.in: Fix IRIX fallout from name changes in man dir/sect
7767: Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7768: DOT edu
7769:
7770: 2002-12-13 11:33 millert
7771:
7772: * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7773: in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7774:
7775: 2002-11-28 18:43 millert
7776:
7777: * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7778: call this for us.
7779:
7780: 2002-11-26 12:09 millert
7781:
7782: * sudo.c: fix typo in comment; Pedro Bastos
7783:
7784: 2002-11-22 14:41 millert
7785:
7786: * INSTALL: document --disable-setresuid
7787:
7788: 2002-11-22 14:41 millert
7789:
7790: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7791: Sprinkle some volatile qualifiers to prevent over-enthusiastic
7792: optimizers from removing memset() calls.
7793:
7794: 2002-11-22 14:11 millert
7795:
7796: * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7797: -Wsign-compare
7798:
7799: 2002-11-22 14:09 millert
7800:
7801: * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7802: version based on setresuid() or setreuid() when possible since
7803: that allows us to support the stay_setuid option and we always
7804: know exactly what the semantics will be (various Linux kernels
7805: have broken POSIX saved uid support).
7806:
7807: 2002-11-22 14:08 millert
7808:
7809: * config.h.in, configure: regen from configure.in
7810:
7811: 2002-11-22 14:07 millert
7812:
7813: * configure.in: Add checks for setresuid() and a way to disable
7814: using it
7815:
7816: 2002-11-22 14:05 millert
7817:
7818: * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7819: or setre[ug]id(). The new set_perms stuff only uses things it
7820: knows are there.
7821:
7822: 2002-11-22 13:33 millert
7823:
7824: * sudo.c: Before exec, restore state of signal handlers to be the
7825: same as when we were initialy invoked instead of just reseting to
7826: SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7827: patch from Paul Markham.
7828:
7829: 2002-11-22 13:23 millert
7830:
7831: * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7832: message when sudo is run by root and no_root_sudo is set
7833:
7834: 2002-09-19 17:27 millert
7835:
7836: * README: update ftp link for bison
7837:
7838: 2002-07-20 08:30 millert
7839:
7840: * set_perms.c: Error out if setusercontext() fails and the runas
7841: user is not root.
7842:
7843: 2002-05-20 16:51 millert
7844:
7845: * auth/securid5.c: Fix rcsid
7846:
7847: 2002-05-20 16:50 millert
7848:
7849: * configure.in: Fix SecurID API test
7850:
7851: 2002-05-17 13:20 millert
7852:
7853: * env.c: typo in comment
7854:
7855: 2002-05-17 13:20 millert
7856:
7857: * configure.in: securid5 stuff needs pthreads. Just adding
7858: -lpthread is suboptimal but I don't see a better way at the
7859: moment.
7860:
7861: 2002-05-17 13:04 millert
7862:
7863: * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7864: Michael Stroucken
7865:
7866: 2002-05-17 13:02 millert
7867:
7868: * configure.in: Add check for SecurID 5.0 API
7869:
7870: 2002-05-08 16:46 millert
7871:
7872: * strerror.c: We actually do still need config.h to get the 'const'
7873: definition for K&R C.
7874:
7875: 2002-05-05 16:43 millert
7876:
7877: * configure: regen with autoconf 2.5.3
7878:
7879: 2002-05-05 16:25 millert
7880:
7881: * configure.in: Don't set sysconfdir to '/etc' if the user has
7882: specified a --prefix.
7883:
7884: 2002-05-05 16:14 millert
7885:
7886: * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7887: don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7888: to workaround a bug
7889:
7890: 2002-05-05 15:58 millert
7891:
7892: * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7893: dump_defaults() knows how to dump lists.
7894:
7895: 2002-05-04 21:31 millert
7896:
7897: * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7898: INSTALL.binary, README: ++version
7899:
7900: 2002-05-04 20:57 millert
7901:
7902: * sudoers.pod: document timestampowner
7903:
7904: 2002-05-04 20:45 millert
7905:
7906: * check.c: Don't call set_perms() when doing timestamp stuff unless
7907: timestamp_uid != 0.
7908:
7909: 2002-05-04 20:43 millert
7910:
7911: * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7912: testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7913: is no longer used
7914:
7915: 2002-05-03 18:48 millert
7916:
7917: * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7918: timestamp dirs. This allows the timestamp dir to be shared via
7919: NFS (though this is not recommended).
7920:
7921: 2002-05-03 18:47 millert
7922:
7923: * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7924: of the authentication timestamp dir"
7925:
7926: 2002-05-02 15:40 millert
7927:
7928: * env.c: Don't try to pre-compute the size of the new envp, just
7929: allocate space up front and realloc as needed. Changes to the
7930: new env pointer must all be made through insert_env() which now
7931: keeps track of spaced used and allocates as needed.
7932:
7933: 2002-04-26 15:12 millert
7934:
7935: * configure: regen
7936:
7937: 2002-04-26 15:12 millert
7938:
7939: * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7940:
7941: 2002-04-25 11:36 millert
7942:
7943: * INSTALL.binary, README: ++version
7944:
7945: 2002-04-25 11:35 millert
7946:
7947: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7948: visudo.man.in, configure: regen
7949:
7950: 2002-04-25 11:31 millert
7951:
7952: * CHANGES, RUNSON, TODO: Sync with 1.6.6
7953:
7954: 2002-04-25 11:30 millert
7955:
7956: * check.c: The the loop used to expand %h and %u, the lastchar
7957: variable was not being initialized. This means that if the last
7958: char in the prompt is '%' and the first char is 'h' or 'u' a
7959: extra copy of the host or user name would be copied, for which
7960: space had not been allocated.
7961:
7962: 2002-04-18 11:41 millert
7963:
7964: * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7965: version to 1.6.6
7966:
7967: 2002-04-18 11:39 millert
7968:
7969: * auth/afs.c: #undef VOID to get rid of an AFS warning
7970:
7971: 2002-04-18 11:38 millert
7972:
7973: * env.c: Use easprintf instead of emalloc + sprintf for some
7974: things.
7975:
7976: 2002-03-15 19:45 millert
7977:
7978: * lex.yy.c: regen
7979:
7980: 2002-03-15 19:44 millert
7981:
7982: * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7983: Jepeway's email address so people don't bug him ;-)
7984:
7985: 2002-03-11 22:19 millert
7986:
7987: * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7988: and also call endgrent() at the same time.
7989:
7990: 2002-02-21 22:23 millert
7991:
7992: * INSTALL: Make it clear which configure options take arguments.
7993:
7994: 2002-01-25 13:38 millert
7995:
7996: * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7997: is no RLIM_INFINITY, just pretend it is -1. This works because
7998: we only check for RLIM_INFINITY and do not set anything to that
7999: value.
8000:
8001: 2002-01-22 11:43 millert
8002:
8003: * auth/pam.c: Zero and free allocated memory when there is a
8004: conversation error.
8005:
8006: 2002-01-21 22:37 millert
8007:
8008: * auth/bsdauth.c: Use sigaction() not signal()
8009:
8010: 2002-01-21 22:26 millert
8011:
8012: * INSTALL: Mention that some linux kernels have broken POSIX saved
8013: ID support
8014:
8015: 2002-01-21 21:03 millert
8016:
8017: * CHANGES: checkpoint for 1.6.5p2
8018:
8019: 2002-01-21 21:01 millert
8020:
8021: * configure: regen
8022:
8023: 2002-01-21 21:01 millert
8024:
8025: * configure.in: Add --disable-setreuid flag
8026:
8027: 2002-01-21 21:00 millert
8028:
8029: * INSTALL: Document new --disable-setreuid option and change
8030: description for --disable-saved-ids to match new error message.
8031:
8032: 2002-01-21 21:00 millert
8033:
8034: * set_perms.c: fatal() now takes an argument that determines
8035: whether or not to call perror().
8036:
8037: 2002-01-21 20:58 millert
8038:
8039: * PORTING, TROUBLESHOOTING: Update for new error messages from
8040: set_perms()
8041:
8042: 2002-01-21 17:46 millert
8043:
8044: * auth/pam.c: Make this compile w/o warnings
8045:
8046: 2002-01-21 17:36 millert
8047:
8048: * auth/pam.c: Mention that we can't use pam_acct_mgmt()
8049:
8050: 2002-01-21 17:25 millert
8051:
8052: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
8053: was not zeroed after use when AIX authentication, BSD
8054: authentication, FWTK or PAM was in use.
8055:
8056: 2002-01-20 14:21 millert
8057:
8058: * auth/pam.c: Avoid giving PAM a NULL password response, use the
8059: empty string instead. This avoids a log warning when the user
8060: hits ^C at the password prompt when PAM is in use.
8061:
8062: 2002-01-19 19:46 millert
8063:
8064: * auth/pam.c: Don't check the return value of pam_setcred(). In
8065: Linux-PAM 0.75 pam_setcred() returns the last saved return code,
8066: not the return code for the setcred module. Because we haven't
8067: called pam_authenticate(), this is not set and so pam_setcred()
8068: returns PAM_PERM_DENIED.
8069:
8070: 2002-01-19 19:43 millert
8071:
8072: * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
8073: and a directory.
8074:
8075: 2002-01-18 14:18 millert
8076:
8077: * configure: regen
8078:
8079: 2002-01-18 14:18 millert
8080:
8081: * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
8082: has a bogus setreuid() o new NetBSD has a real setreuid() o add
8083: check for freeifaddrs() if getifaddrs() exists.
8084:
8085: 2002-01-18 14:17 millert
8086:
8087: * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
8088: so add a test for that and if it is not present just use free().
8089:
8090: 2002-01-17 11:30 millert
8091:
8092: * CHANGES, RUNSON: Checkpoint for 1.6.5p1
8093:
8094: 2002-01-17 10:56 millert
8095:
8096: * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
8097: skeyaccess() denies access to normal passwords, not AUTH_FATAL
8098: (which just causes an exit).
8099:
8100: 2002-01-17 10:35 millert
8101:
8102: * visudo.c: Don't use memory after it has been freed.
8103:
8104: 2002-01-17 00:24 millert
8105:
8106: * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
8107: Patch from Phillip E. Lobbes
8108:
8109: 2002-01-16 20:00 millert
8110:
8111: * BUGS: ++version
8112:
8113: 2002-01-16 19:53 millert
8114:
8115: * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
8116:
8117: 2002-01-16 18:37 millert
8118:
8119: * configure: regen
8120:
8121: 2002-01-16 18:37 millert
8122:
8123: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
8124: version 1.6.5
8125:
8126: 2002-01-16 18:37 millert
8127:
8128: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8129: visudo.man.in: sudo version 1.6.5
8130:
8131: 2002-01-16 16:28 millert
8132:
8133: * logging.c: o when invoking the mailer as root use a hard-coded
8134: environment that doesn't include any info from the user's
8135: environment. Basically paranoia.
8136:
8137: o Add support for the NO_ROOT_MAILER compile-time option and run
8138: the mailer as the user and not root if NO_ROOT_MAILER is
8139: defined.
8140:
8141: 2002-01-16 16:27 millert
8142:
8143: * set_perms.c, sudo.h: Bring back PERM_FULL_USER
8144:
8145: 2002-01-16 16:26 millert
8146:
8147: * configure: regen
8148:
8149: 2002-01-16 16:26 millert
8150:
8151: * version.h: version 1.6.5
8152:
8153: 2002-01-16 16:26 millert
8154:
8155: * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
8156: option to run the mailer as the user and not root.
8157:
8158: 2002-01-16 12:44 millert
8159:
8160: * CHANGES: checkpoint for 1.6.4p2
8161:
8162: 2002-01-15 19:22 millert
8163:
8164: * PORTING: Mention the "seteuid(0): Operation not permitted"
8165: problem here too just for good measure.
8166:
8167: 2002-01-15 18:43 millert
8168:
8169: * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
8170: preserved from the user's environment instead of being reset
8171: based on the passwd database when the "env_reset" option was
8172: used. Now it is reset as it should be.
8173:
8174: 2002-01-15 17:47 millert
8175:
8176: * configure: regen
8177:
8178: 2002-01-15 17:47 millert
8179:
8180: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
8181: sudo.c: Add a configure option to turn off use of POSIX saved IDs
8182:
8183: 2002-01-15 15:48 millert
8184:
8185: * configure: regen
8186:
8187: 2002-01-15 15:48 millert
8188:
8189: * configure.in: add --with-efence option
8190:
8191: 2002-01-15 15:39 millert
8192:
8193: * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
8194: problem where "sudo -l" would not work if always_set_home was
8195: set.
8196:
8197: 2002-01-15 13:16 millert
8198:
8199: * lex.yy.c: regen
8200:
8201: 2002-01-15 13:16 millert
8202:
8203: * parse.lex: Quoted commas were not being treated correctly in
8204: command line arguments.
8205:
8206: 2002-01-14 20:53 millert
8207:
8208: * sudo.c: o Move the call to rebuild_env() until after
8209: MODE_RESET_HOME is set. Otherwise, the set_home option has no
8210: effect.
8211:
8212: o Fix use of freed memory when the "fqdn" flag is set. This was
8213: introduced by the fix for the "segv when gethostbynam() fails"
8214: bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8215: not set so there is no need to check the "fqdn" flag in
8216: set_fqdn() itself.
8217:
8218: 2002-01-14 20:45 millert
8219:
8220: * env.c: Add 'continue' statements to optimize the switch
8221: statement. From Solar.
8222:
8223: 2002-01-13 13:42 millert
8224:
8225: * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8226:
8227: 2002-01-13 13:36 millert
8228:
8229: * sudoers.pod: Add caveat about stay_setuid flag
8230:
8231: 2002-01-13 13:29 millert
8232:
8233: * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8234: is not set, set all uids to 0 and use set_perms_fallback().
8235:
8236: 2002-01-13 13:28 millert
8237:
8238: * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8239: used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8240:
8241: 2002-01-13 13:27 millert
8242:
8243: * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8244: mailer since we never want to run the mailer setuid.
8245:
8246: 2002-01-12 17:55 millert
8247:
8248: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8249: visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8250:
8251: 2002-01-12 14:00 millert
8252:
8253: * Makefile.in, Makefile.binary: Fix mansect substitution
8254:
8255: 2002-01-12 13:15 millert
8256:
8257: * Makefile.in: Substitute man sections in Makefile.binary
8258:
8259: 2002-01-12 13:15 millert
8260:
8261: * Makefile.binary: Sync install targets with Makefile.in and
8262: substitute in man sections.
8263:
8264: 2002-01-12 13:09 millert
8265:
8266: * INSTALL, INSTALL.binary: version is 1.6.4
8267:
8268: 2002-01-12 12:59 millert
8269:
8270: * Makefile.in: Repair bindist target
8271:
8272: 2002-01-12 11:43 millert
8273:
8274: * CHANGES: sync for 1.6.4
8275:
8276: 2002-01-10 13:00 millert
8277:
8278: * install-sh: Fix case where neither whoami nor id are found
8279:
8280: 2002-01-09 12:35 millert
8281:
8282: * install-sh: If neither whoami nor id exists, just assume we are
8283: root.
8284:
8285: 2002-01-09 11:56 millert
8286:
8287: * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8288: to be needed on AIX which for some reason isn't pulling in the
8289: malloc prototype.
8290:
8291: 2002-01-08 10:00 millert
8292:
8293: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8294:
8295: 2002-01-08 09:21 millert
8296:
8297: * CHANGES: checkpoint
8298:
8299: 2002-01-08 09:20 millert
8300:
8301: * sudo.c: Defer assigning new environment until right before the
8302: exec.
8303:
8304: 2002-01-08 09:08 millert
8305:
8306: * parse.c: kill extra blank line
8307:
8308: 2002-01-07 13:59 millert
8309:
8310: * configure: regen
8311:
8312: 2002-01-07 13:59 millert
8313:
8314: * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8315: motorola gcc-derived compiler doesn't recognise -O2.
8316:
8317: 2002-01-06 23:02 millert
8318:
8319: * HISTORY: Clarify origins of Root Group sudo a bit based on info
8320: from billp@rootgroup.com
8321:
8322: 2002-01-02 22:41 millert
8323:
8324: * LICENSE: 2002
8325:
8326: 2002-01-02 22:26 millert
8327:
8328: * CHANGES: checkpoint for 1.6.4rc1
8329:
8330: 2002-01-02 17:40 millert
8331:
8332: * config.h.in: now generated via autoheader
8333:
8334: 2002-01-02 17:40 millert
8335:
8336: * configure: regen
8337:
8338: 2002-01-02 17:37 millert
8339:
8340: * compat.h: Move in some stuff that was previously in config.h.
8341:
8342: 2002-01-02 17:36 millert
8343:
8344: * configure.in, aclocal.m4: Add info for autoheader.
8345:
8346: 2002-01-01 16:53 millert
8347:
8348: * Makefile.in: o Add DESTDIR support
8349: o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8350: non-root installs
8351:
8352: 2002-01-01 16:48 millert
8353:
8354: * install-sh: Add -M option (like -m but only for root) If we can't
8355: find "whoami", use "id" w/ some sed.
8356:
8357: 2002-01-01 14:01 millert
8358:
8359: * configure: regen
8360:
8361: 2002-01-01 14:00 millert
8362:
8363: * configure.in: allow user to always override mansectsu and
8364: mansectform
8365:
8366: 2001-12-31 17:05 millert
8367:
8368: * mkinstalldirs: update from autoconf 2.52
8369:
8370: 2001-12-31 17:03 millert
8371:
8372: * config.guess, config.sub: Update from autoconf 2.52
8373:
8374: 2001-12-31 16:57 millert
8375:
8376: * configure: regen with autoconf 2.52
8377:
8378: 2001-12-31 16:57 millert
8379:
8380: * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8381: compiler in ANSI mode
8382: o Remove compiler-specific checks for HP-UX now that we use
8383: AC_PROG_CC_STDC
8384:
8385: 2001-12-31 12:19 millert
8386:
8387: * RUNSON: Checkpoint
8388:
8389: 2001-12-31 12:18 millert
8390:
8391: * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8392: for the target user; on Linux this often sets resource limits.
8393: o When calling pam_end(), try to convert the auth->result to a
8394: PAM_FOO value. This is a hack--we really need to stash the
8395: last PAM_FOO value received and use that instead.
8396:
8397: 2001-12-31 12:18 millert
8398:
8399: * set_perms.c, sudo.h: o Add pam_prep_user function to call
8400: pam_setcred() for the target user; on Linux this often sets
8401: resource limits.
8402:
8403: 2001-12-31 00:53 millert
8404:
8405: * env.c: Fix off by one error in number of bytes allocated via
8406: malloc (does not affected any released version of sudo).
8407:
8408: 2001-12-30 17:12 millert
8409:
8410: * lex.yy.c: regen
8411:
8412: 2001-12-30 17:12 millert
8413:
8414: * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8415: variable w/o requiring that they be quoted.
8416:
8417: 2001-12-30 14:26 millert
8418:
8419: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8420: quotes are needed when adding/deleting/assigning a single value
8421: to a list.
8422:
8423: 2001-12-30 13:58 millert
8424:
8425: * Makefile.in: Don't rely on mkdefaults being executable, call perl
8426: explicitly.
8427:
8428: 2001-12-30 13:41 millert
8429:
8430: * parse.yacc: Remove some XXX that are no longer relevant.
8431:
8432: 2001-12-30 13:40 millert
8433:
8434: * defaults.c: o Roll our own loop instead of using strpbrk() for
8435: better grokability o When adding to a list we must malloc() and
8436: use memcpy(), not strdup() since we must only copy len bytes
8437: from str.
8438:
8439: 2001-12-21 16:49 millert
8440:
8441: * parse.yacc: typo in comment
8442:
8443: 2001-12-19 11:50 millert
8444:
8445: * CHANGES: checkpoint
8446:
8447: 2001-12-19 10:56 millert
8448:
8449: * configure: regen
8450:
8451: 2001-12-19 10:56 millert
8452:
8453: * configure.in: avoid the -g flag unless --with-devel was specified
8454:
8455: 2001-12-19 10:04 millert
8456:
8457: * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8458: from the tarball
8459:
8460: 2001-12-19 09:46 millert
8461:
8462: * Makefile.in: def_data.c was missing
8463:
8464: 2001-12-18 12:42 millert
8465:
8466: * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8467: case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8468: in keep_env
8469:
8470: 2001-12-17 20:48 millert
8471:
8472: * TODO: Another TODO item
8473:
8474: 2001-12-17 19:50 millert
8475:
8476: * sudoers: Add comment for Default section so folks know where it
8477: should go.
8478:
8479: 2001-12-17 18:56 millert
8480:
8481: * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8482: case
8483:
8484: 2001-12-17 18:35 millert
8485:
8486: * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8487:
8488: 2001-12-17 18:33 millert
8489:
8490: * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8491: o a User_List can not contain a uid
8492: o mention that the Defaults section should come after Alias
8493: definitions but before the user specifications
8494:
8495: 2001-12-15 11:51 millert
8496:
8497: * sudoers.cat, sudoers.man.in: regen
8498:
8499: 2001-12-15 11:51 millert
8500:
8501: * sudoers.pod: Fix listpw and verifypw sections, they were not
8502: being formatted properly.
8503:
8504: 2001-12-15 11:39 millert
8505:
8506: * sudoers.cat, sudoers.man.in: regen
8507:
8508: 2001-12-15 11:38 millert
8509:
8510: * sudoers.pod: fix typos
8511:
8512: 2001-12-15 10:57 millert
8513:
8514: * configure: regen
8515:
8516: 2001-12-15 10:57 millert
8517:
8518: * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8519: rolling our own
8520:
8521: 2001-12-15 10:33 millert
8522:
8523: * README: Reference sudo.ws not courtesan.com
8524:
8525: 2001-12-15 10:29 millert
8526:
8527: * PORTING: Add notes on shadow passwords
8528:
8529: 2001-12-15 00:48 millert
8530:
8531: * BUGS: In list mode (sudo -l), characters escaped with a backslash
8532: are shown verbatim with the backslash.
8533:
8534: 2001-12-15 00:44 millert
8535:
8536: * sudoers: Add simple examples from OpenBSD (Marc Espie)
8537:
8538: 2001-12-15 00:40 millert
8539:
8540: * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8541: SIGTSTP.
8542:
8543: 2001-12-14 21:53 millert
8544:
8545: * CHANGES: minor prettyification
8546:
8547: 2001-12-14 21:43 millert
8548:
8549: * CHANGES: Updated change log
8550:
8551: 2001-12-14 21:27 millert
8552:
8553: * testsudoers.c: Fix CIDR handling here too.
8554:
8555: 2001-12-14 21:21 millert
8556:
8557: * auth/pam.c: Apparently a NULL response is OK
8558:
8559: 2001-12-14 21:19 millert
8560:
8561: * TODO: Checkpoint for upcoming beta release
8562:
8563: 2001-12-14 21:17 millert
8564:
8565: * TROUBLESHOOTING: Many people believe that adding a runas spec
8566: should obviate the need for the -u flag. It does not.
8567:
8568: 2001-12-14 21:11 millert
8569:
8570: * RUNSON: checkpoint update for upcoming 1.6.4 beta
8571:
8572: 2001-12-14 20:44 millert
8573:
8574: * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8575: HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8576: now
8577:
8578: 2001-12-14 20:07 millert
8579:
8580: * PORTING: Add signals section
8581:
8582: 2001-12-14 20:00 millert
8583:
8584: * configure: regen
8585:
8586: 2001-12-14 20:00 millert
8587:
8588: * configure.in: Fix check for sigaction_t
8589:
8590: 2001-12-14 19:45 millert
8591:
8592: * sudo.c: XXX - should call find_path() as runas user, not root.
8593: Can't do that until the parser changes though.
8594:
8595: 2001-12-14 19:38 millert
8596:
8597: * sudo.c: If find_path() fails as root, try again as the invoking
8598: user (useful for NFS). Idea from Chip Capelik.
8599:
8600: 2001-12-14 19:28 millert
8601:
8602: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8603: after pod file changes
8604:
8605: 2001-12-14 19:24 millert
8606:
8607: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8608: sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8609: Previously sudo would not call initgroups() if the target user
8610: was root. Now it always calls initgroups() unless the -P command
8611: line option or the "preserve_groups" sudoers option is set. Idea
8612: from TJ Saunders.
8613:
8614: 2001-12-14 18:38 millert
8615:
8616: * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8617:
8618: 2001-12-14 18:33 millert
8619:
8620: * logging.c: Fix compilation on K&C
8621:
8622: 2001-12-14 18:14 millert
8623:
8624: * configure: regen
8625:
8626: 2001-12-14 18:14 millert
8627:
8628: * configure.in: Add check for sigaction_t -- IRIX already defines
8629: this so don't redefine it.
8630:
8631: 2001-12-14 17:15 millert
8632:
8633: * snprintf.c: fix typo
8634:
8635: 2001-12-14 17:12 millert
8636:
8637: * interfaces.c: need stdlib.h here too
8638:
8639: 2001-12-14 15:31 millert
8640:
8641: * configure: regen
8642:
8643: 2001-12-14 15:31 millert
8644:
8645: * configure.in: Remove redundant checks for string.h, strings.h and
8646: unistd.h
8647:
8648: 2001-12-14 15:29 millert
8649:
8650: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8651: visudo.man.in: Regen from pod files
8652:
8653: 2001-12-14 15:03 millert
8654:
8655: * BUGS: Update for 1.6.4
8656:
8657: 2001-12-14 14:59 millert
8658:
8659: * configure, lex.yy.c: regen
8660:
8661: 2001-12-14 14:56 millert
8662:
8663: * strerror.c: Return EINVAL if errnum > sys_nerr
8664:
8665: 2001-12-14 14:54 millert
8666:
8667: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8668: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8669: sudo.pod, auth/sudo_auth.h: o Update copyright year
8670:
8671: 2001-12-14 14:54 millert
8672:
8673: * configure.in: o Don't define STDC_HEADERS unconditionally for
8674: IRIX o Update copyright year
8675:
8676: 2001-12-14 14:53 millert
8677:
8678: * README: update version
8679:
8680: 2001-12-14 14:52 millert
8681:
8682: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8683: fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8684: logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8685: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8686: utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8687: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8688: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8689: auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8690: STDC_HEADERS define properly o Update copyright year
8691:
8692: 2001-12-14 01:53 millert
8693:
8694: * configure: regen
8695:
8696: 2001-12-14 01:53 millert
8697:
8698: * tgetpass.c: flags set in signal handlers should be volatile
8699: sig_atomic_t
8700:
8701: 2001-12-14 01:52 millert
8702:
8703: * config.h.in, configure.in: Add checks for volatile and
8704: sig_atomic_t
8705:
8706: 2001-12-14 01:42 millert
8707:
8708: * lex.yy.c, configure: regen
8709:
8710: 2001-12-14 01:40 millert
8711:
8712: * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8713: find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8714: option since it cannot work with the existing parser.
8715:
8716: 2001-12-14 01:26 millert
8717:
8718: * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8719:
8720: 2001-12-14 01:24 millert
8721:
8722: * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8723: not listed in env_keep o If no PATH is in the environment use a
8724: default value o If TERM is not set in the non-reset case also
8725: give it a default value.
8726:
8727: 2001-12-14 01:17 millert
8728:
8729: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8730: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8731: on systems that define in paths.h
8732:
8733: 2001-12-14 01:15 millert
8734:
8735: * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8736: skeyaccess(3) if it is present in libskey.
8737:
8738: 2001-12-12 21:42 millert
8739:
8740: * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8741:
8742: 2001-12-12 21:24 millert
8743:
8744: * parse.lex: '\\' is a perfectly legal character to have in a
8745: command line argument.
8746:
8747: 2001-12-12 20:24 millert
8748:
8749: * sudo.c: o Defer call to set_fqdn() until it is safe to use
8750: log_error() o Don't print errno string value if gethostbyname
8751: fails, it is not relevant
8752:
8753: 2001-12-12 20:07 millert
8754:
8755: * parse.c: Fix CIDR -> in_addr_t conversion.
8756:
8757: 2001-12-12 16:21 millert
8758:
8759: * sudoers.pod: Remove an extra "User_List" in the User_Spec
8760: definition From ybertrand AT snoopymail.com
8761:
8762: 2001-12-12 16:00 millert
8763:
8764: * parse.c: Make 'listpw=never' work for users who are not
8765: explicitly mentioned in sudoers.
8766:
8767: 2001-12-12 15:40 millert
8768:
8769: * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8770:
8771: 2001-12-12 15:34 millert
8772:
8773: * sudoers.pod: Document new list Defaults type and convert env_keep
8774: and env_delete to lists. Document new env_check option.
8775:
8776: 2001-12-12 15:11 millert
8777:
8778: * lex.yy.c, sudo.tab.h: regen parser
8779:
8780: 2001-12-12 14:56 millert
8781:
8782: * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8783: a Runas spec to #[0-9-]+.
8784:
8785: 2001-12-12 14:55 millert
8786:
8787: * configure: regen
8788:
8789: 2001-12-12 14:55 millert
8790:
8791: * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8792:
8793: 2001-12-12 14:43 millert
8794:
8795: * config.h.in, configure.in: Add check for skeyaccess(3)
8796:
8797: 2001-12-11 19:47 millert
8798:
8799: * visudo.pod: Document new -c, -f, and -q options
8800:
8801: 2001-12-11 19:41 millert
8802:
8803: * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8804: use getopt(3)
8805:
8806: 2001-12-11 19:31 millert
8807:
8808: * configure: regen
8809:
8810: 2001-12-11 19:31 millert
8811:
8812: * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8813: a replacement macro if it doesn't exist.
8814:
8815: 2001-12-11 18:22 millert
8816:
8817: * visudo.c: In check-only mode, don't create sudoers if it does not
8818: already exist.
8819:
8820: 2001-12-11 18:06 millert
8821:
8822: * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8823: variable name
8824: o Add support for "+=" and "-=" list operators
8825: o replace some 1 and 0 with TRUE and FALSE for greater
8826: legibility.
8827:
8828: 2001-12-11 18:05 millert
8829:
8830: * parse.lex: o Use exclusive start conditions to remove some
8831: ambiguity in the
8832: lexer. Also reorder some things for clarity.
8833: o Add support for "+=" and "-=" list operators.
8834: o Use the new DEFVAR token to denote a Defaults variable name.
8835:
8836: 2001-12-11 18:03 millert
8837:
8838: * sudo.h: Prototype init_envtables()
8839:
8840: 2001-12-11 18:02 millert
8841:
8842: * env.c: o Convert environment handling to use lists instead of
8843: strings.
8844: This greatly simplifies routines that need to do "foreach"
8845: type
8846: operations.
8847: o Add new init_envtables() function to set env_check and
8848: env_delete
8849: defaults based on initial_badenv_table and
8850: initial_checkenv_table
8851: (formerly sudo_badenv_table).
8852:
8853: 2001-12-11 18:00 millert
8854:
8855: * defaults.c, defaults.h: o Add a new LIST type and functions to
8856: manipulate it.
8857: o This is for use with environment handling variables.
8858: o Call new init_envtables() routine inside init_defaults() to
8859: initialize the environment lists.
8860:
8861: 2001-12-11 17:57 millert
8862:
8863: * def_data.c, def_data.h, def_data.in: Convert environment options
8864: to use the new LIST type and add a new one, env_check that only
8865: deletes if the sanity check fails.
8866:
8867: 2001-12-11 17:55 millert
8868:
8869: * testsudoers.c: Add dummy version of init_envtables()
8870:
8871: 2001-12-11 17:53 millert
8872:
8873: * parse.yacc: honor quiet mode
8874:
8875: 2001-12-11 17:51 millert
8876:
8877: * visudo.c: Add check-only mode
8878:
8879: 2001-12-10 20:27 millert
8880:
8881: * mkdefaults: Fix generation of entries with NULL descriptions.
8882:
8883: 2001-12-09 00:27 millert
8884:
8885: * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8886:
8887: 2001-12-09 00:20 millert
8888:
8889: * sudo.c: Must reset signal handlers before we exec
8890:
8891: 2001-12-09 00:16 millert
8892:
8893: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8894: carefule now that tgetpass() can return NULL (user hit ^C). PAM
8895: version needs testing. Set SIGTSTP to SIG_DFL during password
8896: entry so user can suspend us.
8897:
8898: 2001-12-09 00:14 millert
8899:
8900: * tgetpass.c: Add support for interrupting/suspending tgetpass via
8901: keyboard input. If you suspend sudo from the password prompt and
8902: resume it will re-prompt you.
8903:
8904: 2001-12-09 00:09 millert
8905:
8906: * sudo.c: Don't block keyboard interrupt signals, just set them to
8907: SIG_IGN.
8908:
8909: 2001-12-08 14:48 millert
8910:
8911: * config.h.in: add back HAVE_SIGACTION
8912:
8913: 2001-12-08 14:44 millert
8914:
8915: * configure: regen
8916:
8917: 2001-12-08 14:44 millert
8918:
8919: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8920: POSIX_SIGNALS define and old signal support now that we emulate
8921: POSIX ones Also be sure to correctly initialize struct sigaction.
8922:
8923: 2001-12-08 14:42 millert
8924:
8925: * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8926: wrapper.
8927:
8928: 2001-12-08 14:39 millert
8929:
8930: * compat.h: Add scaffolding for POSIX signal emulation
8931:
8932: 2001-12-08 14:36 millert
8933:
8934: * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8935: since we don't include stdio.h
8936:
8937: 2001-12-08 14:23 millert
8938:
8939: * sigaction.c: Emulate sigaction() using sigvec()
8940:
8941: 2001-11-12 19:32 millert
8942:
8943: * sudoers.pod: Document new behavior of negative values of
8944: timestamp_timeout Fix a typo
8945:
8946: 2001-11-12 19:31 millert
8947:
8948: * sudo.pod: Add security note about command not being logged after
8949: 'sudo su' and friends.
8950:
8951: 2001-11-12 19:19 millert
8952:
8953: * sudo.pod: Mention that -V prints default values when run as root,
8954: including the list of environment variables to clear.
8955:
8956: 2001-11-12 19:14 millert
8957:
8958: * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8959: quoting of C<> entries.
8960:
8961: 2001-11-12 13:12 millert
8962:
8963: * def_data.c, def_data.h, def_data.in, sudoers.pod,
8964: auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8965: behavior to also send mail when the password is wrong
8966:
8967: 2001-11-12 13:08 millert
8968:
8969: * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8970: is run by root.
8971:
8972: 2001-11-11 23:52 millert
8973:
8974: * sudoers.pod: document env_delete
8975:
8976: 2001-11-11 23:51 millert
8977:
8978: * env.c: Add support for '*' in env_keep when not resetting the
8979: environment (ie: the normal case).
8980:
8981: 2001-11-11 23:47 millert
8982:
8983: * env.c: Add env_delete variable that lets the user replace/add to
8984: the bad_env_table. Allow '*' wildcard in env_keep entries.
8985:
8986: 2001-11-06 13:59 millert
8987:
8988: * mkinstalldirs: Force umask to 022 to guarantee sane directory
8989: permissions.
8990:
8991: 2001-11-02 18:09 millert
8992:
8993: * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8994: dependency
8995:
8996: 2001-11-02 17:25 millert
8997:
8998: * mkdefaults: fix breakage in last commit
8999:
9000: 2001-11-02 17:18 millert
9001:
9002: * Makefile.in: acsite.m4 -> aclocal.m4
9003:
9004: 2001-11-02 15:59 millert
9005:
9006: * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
9007: previous commit
9008:
9009: 2001-11-02 15:57 millert
9010:
9011: * def_data.c: regenerated from def_data.in
9012:
9013: 2001-11-02 15:56 millert
9014:
9015: * check.c, defaults.c, defaults.h: Add new T_UINT type that most
9016: things use instead of T_INT If timestamp_timeout is < 0 then
9017: treat the ticket as never expiring (to be expired manually by the
9018: user).
9019:
9020: 2001-11-02 15:51 millert
9021:
9022: * def_data.in: change most T_INT -> T_UINT
9023:
9024: 2001-11-02 15:51 millert
9025:
9026: * mkdefaults: fix warning when no args
9027:
9028: 2001-11-02 12:52 millert
9029:
9030: * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
9031: call _exit() if we are a signal handler. We no longer print the
9032: signal number but the user can just check the exit value for
9033: that.
9034:
9035: 2001-10-16 01:35 millert
9036:
9037: * logging.c: when setting up pipes in child process check for case
9038: where stdin == pipe fd 0
9039:
9040: 2001-10-11 13:20 millert
9041:
9042: * visudo.c: Ignore editor exit value since XPG4 says vi's exit
9043: value is the count of editing errors made (failed searches, etc).
9044:
9045: 2001-10-05 16:39 millert
9046:
9047: * configure: regen
9048:
9049: 2001-10-05 16:39 millert
9050:
9051: * configure.in: sco now is identified by config.guess as *-sco-*
9052:
9053: 2001-10-05 16:24 millert
9054:
9055: * configure.in: Check for getspnam() in -lgen if not in -lc for
9056: UnixWare.
9057:
9058: 2001-09-17 21:48 millert
9059:
9060: * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
9061:
9062: 2001-09-17 21:32 millert
9063:
9064: * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
9065:
9066: 2001-08-28 10:26 millert
9067:
9068: * sudoers.pod: Missing word (specify); krapht@secureops.com
9069:
9070: 2001-08-23 17:43 millert
9071:
9072: * sudo.c: If we fail to lookup a login class, apply the default
9073: one.
9074:
9075: 2001-08-23 17:42 millert
9076:
9077: * logging.c: In log_error() free message, not logline
9078: unconditionally, then free logline if it is not the same as
9079: message. No function change but this mirrors how they are
9080: allocated.
9081:
9082: 2001-07-16 23:33 millert
9083:
9084: * configure: regenerate
9085:
9086: 2001-07-16 23:33 millert
9087:
9088: * configure.in: remove some backslash quotes that are unneeded
9089:
9090: 2001-07-16 23:30 millert
9091:
9092: * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
9093: AC_LIBOBJ instead of changing LIBOBJS directly o Use
9094: AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
9095: AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
9096:
9097: 2001-07-16 23:28 millert
9098:
9099: * config.guess, config.sub: Updated from autoconf-2.50
9100:
9101: 2001-05-22 19:11 millert
9102:
9103: * README: Update mailing list section. We use mailman now, not
9104: majordomo.
9105:
9106: 2001-05-10 14:55 millert
9107:
9108: * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
9109: the shadow variants to make sure we don't inadvertantly leak an
9110: fd to the child. Apparently Linux's shadow routines leave the fd
9111: open even if you don't call setspent(). Reported by
9112: mike@gistnet.com; different patch used.
9113:
9114: 2001-04-12 21:43 millert
9115:
9116: * sudoers.pod: s/eg./e.g./
9117:
9118: 2001-04-12 21:42 millert
9119:
9120: * tgetpass.c: select() may return EAGAIN. If so, continue like we
9121: do for EINTR.
9122:
9123: 2001-04-12 21:41 millert
9124:
9125: * logging.c: Fix a non-exploitable buffer overflow in the word
9126: splitting code. This should really be rewritten.
9127:
9128: 2001-04-12 21:41 millert
9129:
9130: * Makefile.in: FAQ link goes away
9131:
9132: 2001-04-12 21:40 millert
9133:
9134: * INSTALL: Tell people to look in sample.syslog.conf for examples,
9135: not FAQ
9136:
9137: 2001-04-12 21:40 millert
9138:
9139: * TROUBLESHOOTING: Update list of env vars that are cleared
9140:
9141: 2001-04-12 21:36 millert
9142:
9143: * sudo.c: remove struct env_table decl since that stuff has all
9144: moved to env.c
9145:
9146: 2001-04-04 13:17 millert
9147:
9148: * fileops.c: Fix a pasto in flock-style unlocking and include
9149: <sys/file.h> for flock on older systems; twetzel@gwdg.de
9150:
9151: 2001-04-04 13:14 millert
9152:
9153: * configure: regen to get NeXT lockf/flock fix
9154:
9155: 2001-04-04 13:14 millert
9156:
9157: * configure.in: force NeXT to use flock since lockf is broken
9158:
9159: 2001-03-30 08:54 millert
9160:
9161: * check.c: Use stashed user_gid when checking against exempt gid
9162: since sudo sets its gid to a a value that makes sudoers readable.
9163: Previously if you used gid 0 as the exempt group everyone would
9164: be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
9165:
9166: 2001-03-29 13:14 millert
9167:
9168: * configure: regen
9169:
9170: 2001-03-29 13:08 millert
9171:
9172: * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
9173: aparently defines some types (such as ssize_t) therein.
9174:
9175: 2001-03-02 09:09 millert
9176:
9177: * defaults.c: Fix negation of paths in a boolean context. Problem
9178: found by apt@UH.EDU
9179:
9180: 2001-02-23 13:03 millert
9181:
9182: * visudo.c: pasto
9183:
9184: 2001-02-17 16:11 millert
9185:
9186: * visudo.c: SA_RESETHAND means the opposite of what I was
9187: thinking--oops To block all signals in old-style signals use ~0,
9188: not 0xffffffff
9189:
9190: 2001-02-04 11:16 millert
9191:
9192: * defaults.c: coerce difference of pointers to int when used in a
9193: string length printf format; deraadt@openbsd.org
9194:
9195: 2001-01-17 11:34 millert
9196:
9197: * visudo.c: Block all signals in Exit() to avoid a signal race.
9198: There is still a tiny window but I'm not going to worry about it.
9199:
9200: 2001-01-07 13:57 millert
9201:
9202: * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9203: Designer
9204:
9205: 2001-01-07 13:55 millert
9206:
9207: * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9208: from clobbering by isatty().
9209:
9210: 2000-12-30 20:39 millert
9211:
9212: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9213: Some defaults I_ defines got renamed.
9214:
9215: 2000-12-30 20:38 millert
9216:
9217: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9218: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9219: set_perms.c, sudo.c: Move defaults info into its own files from
9220: which we generate .h and .c files. This makes adding or
9221: rearranging variables much simpler.
9222:
9223: 2000-12-30 16:58 millert
9224:
9225: * configure, configure.in: fix typo in last commit
9226:
9227: 2000-12-30 16:55 millert
9228:
9229: * compat.h, config.h.in, configure, configure.in: Add check +
9230: emulation for setegid (like seteuid).
9231:
9232: 2000-12-30 16:22 millert
9233:
9234: * env.c: Make env_keep override badenv_table as documented Fix
9235: traversal of badenv_table (broken in last commit)
9236:
9237: 2000-12-29 22:59 millert
9238:
9239: * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9240: version of set_perms on systems w/o them. Rename
9241: set_perms_saved_uid() -> set_perms_posix() Make
9242: set_perms_setreuid simply be set_perms_fallback() and simply
9243: include the appropriate function at compile time (setreuid()
9244: vs. setuid()).
9245:
9246: 2000-12-29 22:45 millert
9247:
9248: * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9249: when env_reset is in effect
9250:
9251: 2000-12-29 22:29 millert
9252:
9253: * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9254: configure, configure.in, defaults.c, defaults.h, find_path.c,
9255: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9256: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9257: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9258: options: o stay_setuid - sudo will remain setuid if system has
9259: saved uids or setreuid(2) o env_reset - reset the environment to
9260: a sane default o env_keep - preserve environment variables that
9261: would otherwise be cleared
9262:
9263: No longer use getenv/putenv/setenv functions--do environment
9264: munging by hand. Potentially dangerous environment variables can
9265: be cleared only if they contain '/' pr '%' characters to protect
9266: buggy programs. Moved environment routines into env.c (new file)
9267:
9268: 2000-12-29 22:17 millert
9269:
9270: * INSTALL: Clear up --without-passwd description
9271:
9272: 2000-12-29 19:39 millert
9273:
9274: * sudo_setenv.c, putenv.c: We now build up a new environment from
9275: scratch and assign it to "environ".
9276:
9277: 2000-12-18 22:35 millert
9278:
9279: * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9280:
9281: 2000-12-14 23:19 millert
9282:
9283: * visudo.c: If there was a syntax error and the user just wants to
9284: quit, unlink sudoers if it is zero length.
9285:
9286: 2000-12-14 23:10 millert
9287:
9288: * visudo.c: 'Q' means ignore parse error, not 'q'
9289:
9290: 2000-12-14 22:57 millert
9291:
9292: * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9293: Dimitry Andric <dim@xs4all.nl>
9294:
9295: 2000-12-13 12:23 millert
9296:
9297: * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9298: ayamura@ayamura.org
9299:
9300: 2000-12-09 11:46 millert
9301:
9302: * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9303: Sanchez <wsanchez@apple.com>
9304:
9305: 2000-11-03 09:36 millert
9306:
9307: * sudo.c, visudo.c: Use exit(127), not exit(-1)
9308:
9309: 2000-11-03 00:37 millert
9310:
9311: * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9312: set_perms() to its own file and use POSIX saved uid or setreuid()
9313: if available.
9314:
9315: Added stay_setuid option for systems that have libraries that
9316: perform extra paranoia checks in system libraries for setuid
9317: programs (ie: anything with issetugid(2)).
9318:
9319: 2000-11-02 20:28 millert
9320:
9321: * sudo.c: strip more bits from the environment and add a facility
9322: for stripping things only if they contain '/' or '%' to address
9323: printf format string vulnerabilities in other programs.
9324:
9325: 2000-11-02 12:55 millert
9326:
9327: * configure: regen
9328:
9329: 2000-11-02 12:55 millert
9330:
9331: * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9332: the existence of strcasecmp().
9333:
9334: 2000-11-02 12:46 millert
9335:
9336: * configure: regen
9337:
9338: 2000-11-02 12:46 millert
9339:
9340: * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9341:
9342: 2000-11-01 10:22 millert
9343:
9344: * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9345:
9346: 2000-11-01 10:17 millert
9347:
9348: * configure: regen
9349:
9350: 2000-11-01 10:17 millert
9351:
9352: * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9353: since NCR systems have that instead of innetgr(3).
9354:
9355: 2000-10-31 14:16 millert
9356:
9357: * auth/securid.c: check return value of creadcfg() call sd_close()
9358: after sd_auth() store username in sd->username so we don't rely
9359: on the USER env variable
9360:
9361: 2000-10-29 23:00 millert
9362:
9363: * INSTALL: document --with-bsdauth
9364:
9365: 2000-10-29 22:57 millert
9366:
9367: * configure: regen
9368:
9369: 2000-10-29 22:56 millert
9370:
9371: * configure.in: --with-bsdauth assumes --with-logincap
9372:
9373: 2000-10-29 22:45 millert
9374:
9375: * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9376: challenge, if the user just hits return then reprompt with echo
9377: turned on.
9378:
9379: 2000-10-29 17:31 millert
9380:
9381: * sudo.c: Remove debugging code that should not have been
9382: committed, oops.
9383:
9384: 2000-10-29 17:31 millert
9385:
9386: * auth/bsdauth.c: Use lower-level routines and get the password
9387: ourselves. Checks for a challenge and if there is one echo is
9388: not turned off.
9389:
9390: 2000-10-29 17:30 millert
9391:
9392: * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9393: changes
9394:
9395: 2000-10-27 18:41 millert
9396:
9397: * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9398: fails by deferring the call to log_error() until things are
9399: better setup.
9400:
9401: Fix return value of set_loginclass() in non-BSD-auth case.
9402:
9403: Hard-code 'sudo' in the usage message so we can fit more options
9404: on a line
9405:
9406: 2000-10-27 18:35 millert
9407:
9408: * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9409:
9410: 2000-10-26 13:03 millert
9411:
9412: * sudo.cat, sudo.man.in: regen
9413:
9414: 2000-10-26 13:01 millert
9415:
9416: * sudo.pod: Document -a flag
9417:
9418: 2000-10-26 12:42 millert
9419:
9420: * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9421: sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9422: authentication.
9423:
9424: 2000-10-19 10:09 millert
9425:
9426: * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9427:
9428: 2000-10-12 09:49 millert
9429:
9430: * sudoers.pod: Mention negating umask
9431:
9432: 2000-10-12 01:30 millert
9433:
9434: * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9435:
9436: 2000-10-08 21:46 millert
9437:
9438: * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9439: history.
9440:
9441: 2000-10-08 12:25 millert
9442:
9443: * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9444:
9445: 2000-09-14 16:48 millert
9446:
9447: * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9448: alloc failure instead of returning -1.
9449:
9450: 2000-09-07 17:41 millert
9451:
9452: * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9453: for FreeBSD and possibly others.
9454:
9455: 2000-09-07 10:43 millert
9456:
9457: * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9458: it. This means that "%m" won't be expanded but we don't use that
9459: anyway since the logging routines may splat to stderr as well.
9460:
9461: 2000-09-06 21:35 millert
9462:
9463: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9464: sudoers.pod: Add always_set_home variable
9465:
9466: 2000-09-06 21:24 millert
9467:
9468: * configure, configure.in: Have to hard code default values in help
9469: since the defaults are set _after_ the help stuff.
9470:
9471: 2000-08-31 13:08 millert
9472:
9473: * lex.yy.c, parse.lex: Allow special characters (including '#') to
9474: be embedded in pathnames if quoted by a '\\'. The quoted chars
9475: will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9476: prints the '\\'.
9477:
9478: 2000-08-13 17:10 millert
9479:
9480: * install-sh: Better path searching for programs we need.
9481:
9482: 2000-08-13 17:10 millert
9483:
9484: * TROUBLESHOOTING: Add section on "C compiler cannot create
9485: executables" errors.
9486:
9487: 2000-08-13 17:10 millert
9488:
9489: * Makefile.binary, Makefile.in, version.h: Crank version
9490:
9491: 2000-08-13 17:09 millert
9492:
9493: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9494: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9495: visudo.man.in, visudo.pod: Substitute values from configure into
9496: man pages.
9497:
9498: 2000-08-12 16:48 millert
9499:
9500: * parse.c, sudo.c: The listpw and verifypw sudoers options would
9501: not take effect because the value of the default was checked
9502: *before* sudoers was parsed. Instead of passing in the value of
9503: PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9504: the check can be deferred until after sudoers is parsed.
9505:
9506: 2000-08-11 15:41 millert
9507:
9508: * tgetpass.c: When writing prompt, no need to write the NUL as
9509: well; hag@linnaean.org
9510:
9511: 2000-06-09 12:25 millert
9512:
9513: * install-sh: When looking for chown, check in /sbin too
9514:
9515: 2000-06-04 22:57 millert
9516:
9517: * visudo.c: Remove extraneous call to init_defaults() and set
9518: runas_user to NULL betweem parses so init_defaults will reset it
9519: each time, thus avoiding a reference to free()d data.
9520:
9521: 2000-06-04 19:57 millert
9522:
9523: * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9524: using getifaddrs() to get the list of ip addr / netmask pairs.
9525: Currently IPv4-only.
9526:
9527: 2000-06-04 19:51 millert
9528:
9529: * visudo.c: Add a missing check for UserEditor == NULL Add missing
9530: '+' before line number when invoking editor to fix a syntax error
9531:
9532: 2000-05-12 16:55 millert
9533:
9534: * sudo.c: Call clean_env very early in main() for paranoia's sake.
9535: Idea from Marc Esipovich.
9536:
9537: 2000-05-10 01:11 millert
9538:
9539: * sudo.h: Update proto for evasprintf and easprintf
9540:
9541: 2000-05-10 01:10 millert
9542:
9543: * alloc.c: Make easprintf() and evasprintf() return an int.
9544:
9545: 2000-05-10 00:56 millert
9546:
9547: * check.c: If the targetpw flag is set, use target username as part
9548: of the timestamp path. If tty tickets are in effect cat the tty
9549: and the target username with a ':' as the separator.
9550:
9551: 2000-05-09 12:05 millert
9552:
9553: * auth/pam.c: Backout part of last change; setting PAM_USER to the
9554: invoking user breaks things like targetpw.
9555:
9556: 2000-05-09 11:52 millert
9557:
9558: * auth/pam.c: set tty and username via pam_set_item
9559:
9560: 2000-05-09 11:42 millert
9561:
9562: * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9563: runas, and target authentication for non-passwd file auth
9564: methods.
9565:
9566: 2000-04-22 14:15 millert
9567:
9568: * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9569: sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9570: C<-Z> for command line flags in all places. This is more
9571: consistent and works around a bug in Pod::Man.
9572:
9573: 2000-04-22 13:59 millert
9574:
9575: * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9576: 'semicolon' that should be 'colon'
9577:
9578: 2000-04-19 15:30 millert
9579:
9580: * configure, configure.in: Fix --with-badpri help line
9581:
9582: 2000-04-17 14:01 millert
9583:
9584: * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9585: openlog() and closelog() since some authentication methods (like
9586: PAM) may do their own logging via syslog. Since we don't use
9587: syslog much (usually just once per session) this doesn't really
9588: incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9589:
9590: 2000-04-15 16:32 millert
9591:
9592: * sudo.c: Fix -H flag. runas_homedir is only valid after
9593: set_perms(PERM_RUNAS, mode)
9594:
9595: 2000-04-12 18:56 millert
9596:
9597: * INSTALL: Clarify the fact that insults are not enabled just by
9598: including them in the binary.
9599:
9600: 2000-04-07 10:39 millert
9601:
9602: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9603: sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9604:
9605: 2000-04-07 10:38 millert
9606:
9607: * Makefile.in: Give date string to pod2man since its default is
9608: ugly and it ain't got no alibi.
9609:
9610: 2000-04-07 10:27 millert
9611:
9612: * Makefile.in: Do section substitution on the output of pod2man and
9613: remove hack needed for old pod2man.
9614:
9615: 2000-04-07 10:26 millert
9616:
9617: * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9618: will do the substitution later.
9619:
9620: 2000-04-02 11:44 millert
9621:
9622: * configure, configure.in: Don't bother checking for the path to vi
9623: if user specified --with-editor
9624:
9625: 2000-04-01 17:25 millert
9626:
9627: * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9628: calling system(3).
9629:
9630: 2000-04-01 16:23 millert
9631:
9632: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9633: sudoers.pod, visudo.c: Visudo now checks for the existence of an
9634: editor and gives a sensible error if it does not exist.
9635:
9636: The path to the editor for visudo is now a colon-separated list
9637: of allowable editors. If the user has $EDITOR set and it matches
9638: one of the allowed editors that editor will be used. If not, the
9639: first editor in the list that actually exists is used.
9640:
9641: 2000-04-01 16:22 millert
9642:
9643: * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9644: return value.
9645:
9646: 2000-03-27 12:08 millert
9647:
9648: * Makefile.in: Strip sudo and visudo for bindist target
9649:
9650: 2000-03-26 22:26 millert
9651:
9652: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9653: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9654: @mansectsu@ and @mansectform@ in the man page bodies as well.
9655:
9656: 2000-03-26 22:07 millert
9657:
9658: * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9659: @sysconfdir@
9660:
9661: 2000-03-26 21:57 millert
9662:
9663: * Makefile.in: 'make dist' should not cause any files to be
9664: modified so remove its dependencies.
9665:
9666: 2000-03-26 21:43 millert
9667:
9668: * CHANGES: Whoops, forgot to add release marker
9669:
9670: 2000-03-26 11:57 millert
9671:
9672: * CHANGES: Final change for 1.6.3 (or so I hope)
9673:
9674: 2000-03-26 11:57 millert
9675:
9676: * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9677: BSD systems will have nroff...
9678:
9679: 2000-03-24 18:58 millert
9680:
9681: * parse.yacc: When checking to see if the host/user matches in a
9682: defaults spec, check against TRUE, not just non-zero since it
9683: might be -1.
9684:
9685: 2000-03-24 15:14 millert
9686:
9687: * configure.in, configure: OSF/1 puts file formats in section 4,
9688: not 5.
9689:
9690: 2000-03-24 15:13 millert
9691:
9692: * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9693:
9694: 2000-03-23 20:24 millert
9695:
9696: * RUNSON: Update for 1.6.3
9697:
9698: 2000-03-23 20:23 millert
9699:
9700: * configure, configure.in: If there is no inet_addr but there *is*
9701: an __inet_addr that's ok since inet_addr is probably just a macro
9702: then. The better thing to do would be to look for the macro, but
9703: this is fine for now.
9704:
9705: 2000-03-23 19:50 millert
9706:
9707: * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9708:
9709: 2000-03-23 19:40 millert
9710:
9711: * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9712: lives in $(srcdir), add a @mansrcdir@ configure variable so we
9713: can deal with this. Also, only remove *.man for 'distclean' not
9714: 'clean'.
9715:
9716: 2000-03-23 19:16 millert
9717:
9718: * sudo.c: set_loginclass() should be static like the proto says
9719:
9720: 2000-03-23 14:14 millert
9721:
9722: * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9723: header to avoid promotion of test to int, thus violating the
9724: prototype. Gcc handles this gracefully but more std ANSI
9725: compilers will complain.
9726:
9727: 2000-03-23 10:11 millert
9728:
9729: * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9730: FNM_CASEFOLD
9731:
9732: 2000-03-23 10:11 millert
9733:
9734: * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9735: fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9736: configure
9737:
9738: 2000-03-22 23:41 millert
9739:
9740: * CHANGES, TODO: update for 1.6.3
9741:
9742: 2000-03-22 23:38 millert
9743:
9744: * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9745: testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9746: not matching the FQHOST token type. There's really no need for a
9747: separate token for fully-qualified vs. unqualified anymore so
9748: FQHOST is now history and hostname_matches now decides which
9749: hostname (short or long) to check based on whether or not the
9750: pattern contains a '.'.
9751:
9752: 2000-03-22 23:09 millert
9753:
9754: * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9755: visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9756: in the hostname.
9757:
9758: 2000-03-22 22:50 millert
9759:
9760: * Makefile.in: Add targets for *.man.in, using config.status to
9761: generate *.man from *.man.in
9762:
9763: 2000-03-22 22:20 millert
9764:
9765: * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9766: option and enbolden refs to sudo and visudo.
9767:
9768: 2000-03-22 19:35 millert
9769:
9770: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9771: sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9772: visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9773: FreeBSD login.conf support (untested on BSD/OS) based on a patch
9774: from Michael D. Marchionna. configure now does substitution on
9775: the man pages, allowing us to fix up the paths and set the
9776: section correctly. Based on an idea from Michael D. Marchionna.
9777:
9778: 2000-03-22 19:27 millert
9779:
9780: * auth/passwd.c: Better fix for handling HP-UX aging info.
9781:
9782: 2000-03-22 19:20 millert
9783:
9784: * sudo.c: Add support for set_logname run-time default
9785:
9786: 2000-03-22 19:17 millert
9787:
9788: * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9789: substitution on these to produce *.man
9790:
9791: 2000-03-22 19:16 millert
9792:
9793: * sudo.man, sudoers.man, visudo.man: These files now get generated
9794: from *.man.in at configure time.
9795:
9796: 2000-03-22 18:40 millert
9797:
9798: * defaults.c, defaults.h: Add set_logname option so users can turn
9799: off setting of LOGNAME/USER environment variables.
9800:
9801: 2000-03-22 10:53 millert
9802:
9803: * testsudoers.c, lsearch.c, parse.c: kill register
9804:
9805: 2000-03-13 15:52 millert
9806:
9807: * auth/passwd.c: HP-UX adds extra info at the end for password
9808: aging so when comparing the result of crypt to pw_passwd we only
9809: compare the first len(epass) bytes *unless* the user entered an
9810: empty string for a password.
9811:
9812: 2000-03-13 11:05 millert
9813:
9814: * logging.c: Get rid of grandchild hack, it was causing problems
9815: and there is really no need for it. This fixes a bug where we
9816: spin eating up CPU when the user runs a long-running process like
9817: a shell.
9818:
9819: 2000-03-07 14:26 millert
9820:
9821: * sudo.c: User can always specify a login class if he/she is
9822: already root.
9823:
9824: 2000-03-06 23:29 millert
9825:
9826: * config.h.in, configure, configure.in, defaults.c, defaults.h,
9827: sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9828:
9829: 2000-03-06 14:42 millert
9830:
9831: * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9832: secureware support
9833:
9834: 2000-03-03 18:04 millert
9835:
9836: * auth/passwd.c: Truncate unencrypted password to 8 chars if
9837: encrypted password is exactly 13 characters (indicateing standard
9838: a DES password). Many versions of crypt() do this for you, but
9839: not all (like HP-UX's).
9840:
9841: 2000-03-01 21:01 millert
9842:
9843: * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9844:
9845: 2000-02-29 17:46 millert
9846:
9847: * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9848: via defaults.c
9849:
9850: 2000-02-29 17:41 millert
9851:
9852: * defaults.c: Use Argv[0] as the first arg to openlog() since
9853: visudo uses this too.
9854:
9855: 2000-02-28 18:58 millert
9856:
9857: * sudo.c: Stash coredumpsize resource limit and retsore it before
9858: the exec() Otherwise the child ends up with a coredumpsize of 0.
9859:
9860: 2000-02-26 22:56 millert
9861:
9862: * sudo.cat, sudo.man, sudo.pod: document -S flag
9863:
9864: 2000-02-26 22:54 millert
9865:
9866: * sudo.c: fix usage string
9867:
9868: 2000-02-26 22:48 millert
9869:
9870: * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9871: auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9872: -S flag (read passwd from stdin) and tgetpass_flags global that
9873: holds flags to be passed in to tgetpass(). Change echo_off param
9874: to tgetpass() into a flags field. There are currently 2 possible
9875: flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9876: abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9877: but echo is not set on the terminal, but sure to set it.
9878:
9879: 2000-02-26 22:11 millert
9880:
9881: * tgetpass.c: Fixed a bug that caused an infinite loop when the
9882: password timeout was disabled.
9883:
9884: 2000-02-18 12:56 millert
9885:
9886: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9887: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9888: runaspw, and targetpw options.
9889:
9890: 2000-02-18 12:11 millert
9891:
9892: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9893: visudo.c: enveditor -> env_editor
9894:
9895: 2000-02-15 19:07 millert
9896:
9897: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9898: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9899: visudo.cat, visudo.man: crank versino to 1.6.3
9900:
9901: 2000-02-15 19:03 millert
9902:
9903: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9904: sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9905: defaults and make visudo honor them. This means that visudo will
9906: now parse the sudoers file *before* it is edited so a bogus
9907: sudoers file will cause a warning to go to stderr. Also, visudo
9908: checks the variables once--it does not check them after each
9909: editor run since that could be confusing.
9910:
9911: 2000-02-15 18:49 millert
9912:
9913: * RUNSON: 1.6.2 -> 1.6.2p1
9914:
9915: 2000-02-15 18:36 millert
9916:
9917: * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9918: sudo.h
9919:
9920: 2000-02-13 13:38 millert
9921:
9922: * configure, configure.in: Fix thinko, some && should have been ||
9923: in the last commit
9924:
9925: 2000-02-13 13:28 millert
9926:
9927: * configure, configure.in: Don't initialized Makefile variables to
9928: be NULL since the user may want to import variables from their
9929: environment.
9930:
9931: 2000-02-03 21:09 millert
9932:
9933: * configure, configure.in: typo
9934:
9935: 2000-01-27 15:01 millert
9936:
9937: * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9938: 11.0;jaearick@colby.edu
9939:
9940: 2000-01-27 15:01 millert
9941:
9942: * CHANGES: recent changes; prepare for 1.6.2p1
9943:
9944: 2000-01-26 23:31 millert
9945:
9946: * find_path.c: Don't apply SECURE_PATH if user is example;
9947: jmknoble@pobox.com
9948:
9949: 2000-01-26 16:21 millert
9950:
9951: * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9952: 'defaults' options based on INSTALL file info.
9953:
9954: 2000-01-26 16:21 millert
9955:
9956: * INSTALL: Fix some while lies
9957:
9958: 2000-01-24 10:48 millert
9959:
9960: * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9961: instead of copying.
9962:
9963: 2000-01-23 22:57 millert
9964:
9965: * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9966:
9967: 2000-01-23 22:42 millert
9968:
9969: * RUNSON: Last minute updates
9970:
9971: 2000-01-23 22:26 millert
9972:
9973: * TROUBLESHOOTING: PAM entry
9974:
9975: 2000-01-23 22:23 millert
9976:
9977: * auth/pam.c: correct a comment
9978:
9979: 2000-01-23 22:03 millert
9980:
9981: * CHANGES, RUNSON: update for 1.6.2
9982:
9983: 2000-01-23 21:59 millert
9984:
9985: * auth/pam.c: Better detection of PAM errors and fix custom prompts
9986: with PAM. Based on patches from "Cloyce D. Spradling"
9987: <cloyce@headgear.org>
9988:
9989: 2000-01-20 11:15 millert
9990:
9991: * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9992: to an unsigned long long value.
9993:
9994: 2000-01-19 14:07 millert
9995:
9996: * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9997: sudoers locking in visudo. We now lock the sudoers file itself,
9998: not the temp file (since locking the temp file can foul up
9999: editors). The previous locking scheme didn't work because the fd
10000: was closed too early.
10001:
10002: 2000-01-19 13:37 millert
10003:
10004: * configure, config.h.in, configure.in: Don't need test for
10005: ftruncate() any more.
10006:
10007: 2000-01-18 21:23 millert
10008:
10009: * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
10010: cc. Fixes compilation with the unbundled HP-UX cc.
10011:
10012: 2000-01-18 17:00 millert
10013:
10014: * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
10015: Campbell <aaron@cs.dal.ca>
10016:
10017: 2000-01-17 18:46 millert
10018:
10019: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
10020: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
10021: tgetpass.c, version.h, visudo.c: update copyright year on changed
10022: files
10023:
10024: 2000-01-17 18:45 millert
10025:
10026: * RUNSON: updates
10027:
10028: 2000-01-17 18:45 millert
10029:
10030: * CHANGES: aix fix
10031:
10032: 2000-01-17 18:42 millert
10033:
10034: * INSTALL: Crank version to 1.6.2
10035:
10036: 2000-01-17 18:11 millert
10037:
10038: * configure: Crank version to 1.6.2
10039:
10040: 2000-01-17 17:46 millert
10041:
10042: * sudo.c: When using rlimit check for RLIM_INFINITY When computing
10043: the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
10044:
10045: 2000-01-17 12:32 millert
10046:
10047: * CHANGES: recent changes
10048:
10049: 2000-01-17 12:28 millert
10050:
10051: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
10052: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
10053: Crank version to 1.6.2
10054:
10055: 2000-01-17 12:25 millert
10056:
10057: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
10058: 'shell_noargs' runtime option back in. We have to defer checking
10059: until after the sudoers file has been parsed but since there are
10060: now other options that operate that way this one can too. Based
10061: on a patch from bguillory@email.com.
10062:
10063: 2000-01-16 23:05 millert
10064:
10065: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
10066: "verifypw" options.
10067:
10068: 2000-01-16 22:57 millert
10069:
10070: * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
10071: o Add section on verifypw and listpw o Define how NOPASSWD
10072: interacts with the -v and -l flags
10073:
10074: 2000-01-14 12:39 millert
10075:
10076: * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
10077: HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
10078:
10079: 2000-01-14 12:29 millert
10080:
10081: * defaults.c, defaults.h: In struct sudo_defs_types, move the union
10082: to the end and don't initialize the union member since that only
10083: works with an ANSI compiler. We set the value of the union by
10084: hand in init_defaults() anyway. This allows sudo to compile on a
10085: K&R compiler again.
10086:
10087: 2000-01-11 13:20 millert
10088:
10089: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
10090: netgr_matches needs to check shost as well as host since they may
10091: be different.
10092:
10093: 2000-01-11 13:17 millert
10094:
10095: * tgetpass.c: End on \r as well as \n
10096:
10097: 2000-01-02 23:53 millert
10098:
10099: * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
10100: chaning from 0400 to whatever SUDOERS_MODE is (converting from
10101: the old sudoers mode). Assumes that SUDOERS_MODE is less
10102: restrictive than 0400 which should always be the case.
10103:
10104: 2000-01-02 23:43 millert
10105:
10106: * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
10107: sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
10108: *any* entry for the user on the host with a NOPASSWD flag. For
10109: -v, only allow w/o a passwd if *all* entries for the user on the
10110: host w/ the specified runas user have the NOPASSWD flag set.
10111:
10112: 2000-01-02 23:26 millert
10113:
10114: * Makefile.in: add check target
10115:
10116: 1999-12-16 13:02 millert
10117:
10118: * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
10119: looping.
10120:
10121: 1999-12-10 00:09 millert
10122:
10123: * CHANGES: recent changes
10124:
10125: 1999-12-08 23:04 millert
10126:
10127: * config.h.in, configure, configure.in, sudo.c: Add check for
10128: initgroups() since old SYSV lacks this.
10129:
10130: 1999-12-08 22:54 millert
10131:
10132: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
10133: configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
10134: Only define HAVE_FNMATCH if <fnmatch.h> exists.
10135:
10136: 1999-12-06 01:47 millert
10137:
10138: * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
10139: to be enabled if the insults[] array is empty. Otherwise there
10140: would be division by zero.
10141:
10142: 1999-12-06 01:25 millert
10143:
10144: * insults.h: Don't care about USE_INSULTS #define since the insult
10145: stuff may be overridden at runtime.
10146:
10147: 1999-12-06 01:23 millert
10148:
10149: * auth/sudo_auth.c: Honor insults flag.
10150:
10151: 1999-12-05 19:14 millert
10152:
10153: * CHANGES, parse.c: Don't ask the user for a password if the user
10154: is not allowed to run the command and the authenticate flag (in
10155: sudoers) is false.
10156:
10157: 1999-12-05 19:05 millert
10158:
10159: * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
10160: newline we change to the INITIAL state. o Enter GOTRUNAS when we
10161: see Runas_Alias
10162:
10163: This allows #uid to work in a RunasAlias.
10164:
10165: 1999-12-05 14:06 millert
10166:
10167: * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
10168: and runaslist now return a value o in a runasspec, if a runaslist
10169: does not return TRUE, set runas_matches to FALSE. Normally, a
10170: runaslist only returns FALSE for explicitly denied users. o
10171: since runaslist does not modify the stack there is no need for a
10172: push/pop in runasalias.
10173:
10174: 1999-12-04 21:54 millert
10175:
10176: * check.c, sudo.c: Don't kill the user's tickets until after
10177: sudoers has been parsed since tty_tickets and ticket_dir could be
10178: set in sudoers.
10179:
10180: 1999-12-04 21:18 millert
10181:
10182: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
10183: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
10184: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
10185: version to 1.6
10186:
10187: 1999-12-04 21:18 millert
10188:
10189: * testsudoers.c: add set_fqdn() stub
10190:
10191: 1999-12-02 15:31 millert
10192:
10193: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
10194: sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10195: it cannot work since the command needs to be set before sudoers
10196: is parsed. o Fix the "set_home" sudoers option (only worked at
10197: compile time). o Fix "fqdn" sudoers option. We now set
10198: host/shost via set_fqdn which gets called when the "fqdn"
10199: option is set in sudoers. o Move the openlog() to
10200: store_syslogfac() so this gets overridden correctly from the
10201: sudoers file.
10202:
10203: 1999-12-02 15:21 millert
10204:
10205: * auth/securid.c: SecurID support should compile now.
10206:
10207: 1999-11-28 20:56 millert
10208:
10209: * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10210: visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10211:
10212: 1999-11-28 18:51 millert
10213:
10214: * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10215: the .html files as they are generated automatically on the web
10216: site.
10217:
10218: 1999-11-28 18:49 millert
10219:
10220: * CHANGES, LICENSE: kill characters that made wml unhappy
10221:
10222: 1999-11-28 18:34 millert
10223:
10224: * HISTORY: typo
10225:
10226: 1999-11-25 12:05 millert
10227:
10228: * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10229:
10230: 1999-11-24 19:43 millert
10231:
10232: * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10233: benefit of ctm
10234:
10235: 1999-11-23 22:52 millert
10236:
10237: * sudo.c: Make the -s flag be exclusive too. Also reorder the
10238: flags in the exclusive usage message so they are alphabetical.
10239:
10240: 1999-11-23 13:27 millert
10241:
10242: * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10243:
10244: 1999-11-23 13:07 millert
10245:
10246: * auth/API: fix typo
10247:
10248: 1999-11-23 13:07 millert
10249:
10250: * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10251:
10252: 1999-11-23 13:06 millert
10253:
10254: * auth/pam.c: fix a warning on redhat and spew an error if
10255: pam_authenticate() returns an error other than AUTH_SUCCESS or
10256: PAM_PERM_DENIED
10257:
10258: 1999-11-23 00:43 millert
10259:
10260: * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10261: password required is the user's not root's
10262:
10263: 1999-11-19 21:04 millert
10264:
10265: * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10266:
10267: 1999-11-18 19:13 millert
10268:
10269: * RUNSON: updates from Brian Jackson + some formatting
10270:
10271: 1999-11-17 21:39 millert
10272:
10273: * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10274: update o Changes for automating real binary releases
10275:
10276: 1999-11-17 21:38 millert
10277:
10278: * Makefile.in: Add bindist target
10279:
10280: 1999-11-16 16:26 millert
10281:
10282: * TROUBLESHOOTING: talk about run-time options in addition to
10283: compile-time options
10284:
10285: 1999-11-16 01:16 millert
10286:
10287: * CHANGES: fix typos
10288:
10289: 1999-11-16 01:09 millert
10290:
10291: * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10292:
10293: 1999-11-16 00:42 millert
10294:
10295: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10296: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10297: rid of references to sudo-bugs. Now mention the web site or the
10298: sudo@ alias
10299:
10300: 1999-11-16 00:35 millert
10301:
10302: * sudoers.html: repair pod2html damage
10303:
10304: 1999-11-16 00:28 millert
10305:
10306: * RUNSON, TODO: Update for 1.6 release
10307:
10308: 1999-11-16 00:23 millert
10309:
10310: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10311: about using ALL in a command context.
10312:
10313: 1999-11-09 15:12 millert
10314:
10315: * visudo.c: Call yyrestart() on a parse error to reset the lexer
10316: state.
10317:
10318: 1999-11-09 15:06 millert
10319:
10320: * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10321: yyrestart() into visudo.c since it might not get called in yywrap
10322: if we get a parse error (and we only reread the file on error
10323: anyway).
10324:
10325: 1999-11-09 14:32 millert
10326:
10327: * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10328: clean up any buffers that might still exist. Call yyrestart()
10329: instead of using the deprecated YY_NEW_FILE macro.
10330:
10331: 1999-11-09 12:13 millert
10332:
10333: * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10334:
10335: 1999-11-08 19:00 millert
10336:
10337: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10338: characters need to be escaped in names.
10339:
10340: 1999-11-08 18:59 millert
10341:
10342: * configure: regen
10343:
10344: 1999-11-08 18:59 millert
10345:
10346: * INSTALL: clarify Mac OS X entry
10347:
10348: 1999-11-08 18:59 millert
10349:
10350: * RUNSON: update
10351:
10352: 1999-11-08 17:45 millert
10353:
10354: * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10355: configure options for danity
10356:
10357: 1999-11-05 17:11 millert
10358:
10359: * defaults.c: Fix printing of type T_MODE in dump_defaults()
10360:
10361: 1999-11-05 12:00 millert
10362:
10363: * strcasecmp.c: missing sys/types.h
10364:
10365: 1999-11-05 00:42 millert
10366:
10367: * INSTALL: Break out options that may be overridden at run time
10368: into their own section. Add a not about Max OS X and correct
10369: some lies.
10370:
10371: 1999-11-04 14:01 millert
10372:
10373: * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10374: getrlimit to find the highest fd when closing all non-std fd's o
10375: Turn off core dumps via setrlimit for the sake of paranoia
10376:
10377: 1999-11-04 13:57 millert
10378:
10379: * RUNSON: updates
10380:
10381: 1999-11-01 10:59 millert
10382:
10383: * CHANGES: updates
10384:
10385: 1999-11-01 10:58 millert
10386:
10387: * tgetpass.c: When read()'ing, do a single character at a time to
10388: be sure we don't go oast the newline.
10389:
10390: 1999-11-01 10:43 millert
10391:
10392: * sudo.c: For the sudo_root option, check against user_uid, not
10393: getuid() since at this point, ruid == euid == 0.
10394:
10395: 1999-10-31 23:14 millert
10396:
10397: * RUNSON: some updates
10398:
10399: 1999-10-31 23:14 millert
10400:
10401: * logging.h: Fix compilation problem when --with-logging=file was
10402: specified. This means that syslog is now required to build sudo
10403: but that should not be a problem. If it is it can be fixed
10404: trivially with a configure check for syslog() or syslog.h.
10405:
10406: 1999-10-31 23:00 millert
10407:
10408: * tgetpass.c: Make this work again for things like "sudo echo hi |
10409: more" where the tty gets put into character at a time mode. We
10410: read until we read end of line or we run out of space (similar to
10411: fgets(3)).
10412:
10413: 1999-10-20 11:23 millert
10414:
10415: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10416: to bold
10417:
10418: 1999-10-20 11:23 millert
10419:
10420: * RUNSON: update
10421:
10422: 1999-10-16 13:56 millert
10423:
10424: * defaults.c: Error out if syslog parameters are given without a
10425: value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10426: since there are no facilities in the 4.2BSD syslog.
10427:
10428: 1999-10-15 16:37 millert
10429:
10430: * defaults.c: Ignore the syslog facility for systems w/ old syslog
10431: like Ultrix.
10432:
10433: 1999-10-15 12:51 millert
10434:
10435: * TROUBLESHOOTING: people with "." early in their path can have
10436: problems running sudo from the build dir ;-)
10437:
10438: 1999-10-13 00:18 millert
10439:
10440: * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10441:
10442: 1999-10-12 22:34 millert
10443:
10444: * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10445: auth/sudo_auth.h: New krb5 code from Frank Cusack
10446: <fcusack@iconnet.net>.
10447:
10448: 1999-10-12 22:33 millert
10449:
10450: * CHANGES: update to reality
10451:
10452: 1999-10-11 20:53 millert
10453:
10454: * auth/fwtk.c: include <auth.h> to get function prototypes.
10455:
10456: 1999-10-11 20:05 millert
10457:
10458: * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10459:
10460: 1999-10-11 19:42 millert
10461:
10462: * sudo.c: in set_perms(), always call setuid(0) before changing the
10463: ruid/euid so we always know it will succeed.
10464:
10465: 1999-10-11 12:24 millert
10466:
10467: * defaults.h: #undef T_FOO to avoid conflicts with system defines
10468: (like on ULTRIX).
10469:
10470: 1999-10-11 11:55 millert
10471:
10472: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10473: sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10474: needs some fleshing out but this is a start.
10475:
10476: 1999-10-10 17:21 millert
10477:
10478: * defaults.c: use strtol, not strtoul since not everyone has not
10479: strtoul
10480:
10481: 1999-10-10 15:01 millert
10482:
10483: * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10484: INITIAL state
10485:
10486: 1999-10-10 14:38 millert
10487:
10488: * lex.yy.c, parse.lex: o Add support for escaped characters in the
10489: WORD macro o Modify fill() to squash escape chars
10490:
10491: 1999-10-10 13:56 millert
10492:
10493: * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10494: checks for default values that are supposed to be pathnames. o
10495: Fix a duplicate free when visudo finds an error.
10496:
10497: 1999-10-09 01:01 millert
10498:
10499: * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10500:
10501: 1999-10-07 21:12 millert
10502:
10503: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10504: requiretty option o Move O_NOCTTY to compat.h
10505:
10506: 1999-10-07 21:12 millert
10507:
10508: * logging.c: The exit() in log_error() was mistakenly removed in a
10509: previous version. Put it back...
10510:
10511: 1999-10-07 17:20 millert
10512:
10513: * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10514: defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10515: logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10516: auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10517: Change defaults stuff to put the value right in the struct. o
10518: Implement mailer_flags o Store syslog stuff both in int and
10519: string form. Setting the string form magically updates the int
10520: version. o Add boolean attribute to strings where it makes sense
10521: to say !foo
10522:
10523: 1999-10-07 17:13 millert
10524:
10525: * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10526:
10527: 1999-10-06 00:48 millert
10528:
10529: * auth/API: cleanup function no longer takes a status arg
10530:
10531: 1999-10-06 00:48 millert
10532:
10533: * INSTALL: the the
10534:
10535: 1999-09-15 05:15 millert
10536:
10537: * TODO, config.h.in, configure, configure.in, logging.c: Use
10538: strftime() instead of ctime() if it is available.
10539:
10540: 1999-09-14 12:58 millert
10541:
10542: * defaults.c: fix copyright date
10543:
10544: 1999-09-14 12:57 millert
10545:
10546: * RUNSON: update ReliantUNIX entry
10547:
10548: 1999-09-14 12:56 millert
10549:
10550: * defaults.c, defaults.h, logging.c: add log_year option
10551:
10552: 1999-09-14 04:01 millert
10553:
10554: * configure, configure.in: add --without-sendmail to help output
10555:
10556: 1999-09-14 03:42 millert
10557:
10558: * configure, configure.in: enforce an otctal arg for
10559: --with-suoders-mode
10560:
10561: 1999-09-08 04:06 millert
10562:
10563: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10564: config.h.in, configure, configure.in, defaults.c, defaults.h,
10565: find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10566: sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10567: auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10568: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10569: "Defaults" line in sudoers to make configuration variables
10570: changable at runtime (and on a global, per-host and per-user
10571: basis). Both the names and the internal representation are still
10572: subject to change. It was necessary to make sudo_user.runas but
10573: a char ** instead of a char * since this value can be changed by
10574: a Defaults line. There is a similar (but more complicated) issue
10575: with sudo_user.prompt but it is handled differently at the
10576: moment.
10577:
10578: Add a "-L" flag to list the name of options with their
10579: descriptions. This may only be temporary.
10580:
10581: Move some prototypes to parse.h
10582:
10583: Be much less restrictive on what is allowed for a username.
10584:
10585: 1999-09-08 04:01 millert
10586:
10587: * sample.syslog.conf: Add more info
10588:
10589: 1999-09-04 03:09 millert
10590:
10591: * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10592: strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10593: from their license.
10594:
10595: 1999-08-31 05:39 millert
10596:
10597: * auth/sudo_auth.h: move dce_verofy proto to correct section
10598:
10599: 1999-08-31 05:39 millert
10600:
10601: * auth/dce.c: remove XXX
10602:
10603: 1999-08-28 06:00 millert
10604:
10605: * emul/fnmatch.h: Add fnmatch() prototype
10606:
10607: 1999-08-28 06:00 millert
10608:
10609: * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10610: emul/fnmatch.h to be after sudo.h for __P
10611:
10612: 1999-08-28 05:59 millert
10613:
10614: * sudo.h: add strcasecmp proto
10615:
10616: 1999-08-28 05:50 millert
10617:
10618: * auth/sudo_auth.c: add check for case where there are no auth
10619: methods
10620:
10621: 1999-08-28 05:36 millert
10622:
10623: * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10624: __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10625:
10626: 1999-08-28 05:24 millert
10627:
10628: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10629: everywhere we include string.h
10630:
10631: 1999-08-28 05:22 millert
10632:
10633: * version.c: nicer output when showing auth methods
10634:
10635: 1999-08-28 05:00 millert
10636:
10637: * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10638:
10639: 1999-08-28 04:49 millert
10640:
10641: * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10642:
10643: 1999-08-28 04:22 millert
10644:
10645: * parse.lex, lex.yy.c: fix definition of OCTECT
10646:
10647: 1999-08-28 04:10 millert
10648:
10649: * configure, configure.in: aix_auth.o not authenticate.o
10650:
10651: 1999-08-27 17:02 millert
10652:
10653: * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10654: generated from the keyboard). Since we run with ruid/euid == 0
10655: the user can't really signal us in nasty ways.
10656:
10657: 1999-08-27 17:01 millert
10658:
10659: * visudo.c: Don't need to worry about catching too many signals
10660: since we do locking on the tmp file. If a lockfile is really
10661: stale, it will be detected and overwritten.
10662:
10663: 1999-08-27 16:09 millert
10664:
10665: * INSTALL, Makefile.in: include auth/API in tarball
10666:
10667: 1999-08-27 16:09 millert
10668:
10669: * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10670: loop and only do the memset if we are *not* in standalone mode.
10671:
10672: 1999-08-27 13:46 millert
10673:
10674: * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10675:
10676: 1999-08-27 11:53 millert
10677:
10678: * sudo.c: fix --enable-noargs-shell
10679:
10680: 1999-08-27 11:06 millert
10681:
10682: * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10683:
10684: 1999-08-27 10:54 millert
10685:
10686: * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10687:
10688: 1999-08-27 10:50 millert
10689:
10690: * auth/dce.c: there were still some return(0)'s hanging around,
10691: make them AUTH_FAILURE
10692:
10693: 1999-08-27 10:39 millert
10694:
10695: * parse.c: typo in comment
10696:
10697: 1999-08-27 10:03 millert
10698:
10699: * version.c: add missing semicolon
10700:
10701: 1999-08-27 08:31 millert
10702:
10703: * auth/sudo_auth.h: missing backslash
10704:
10705: 1999-08-26 17:24 millert
10706:
10707: * CHANGES, config.h.in, configure, configure.in: Kill
10708: _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10709:
10710: 1999-08-26 09:21 millert
10711:
10712: * Makefile.in: add parse.h to HDRS
10713:
10714: 1999-08-26 09:16 millert
10715:
10716: * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10717: VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10718: in LIBS, commong ld flags go in LDFLAGS and network libs like
10719: -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10720: on Solaris and is a bit cleaner in general.
10721:
10722: 1999-08-26 06:56 millert
10723:
10724: * UPGRADE: mention ptmp -> sudoers.tmp
10725:
10726: 1999-08-26 06:12 millert
10727:
10728: * configure.in, configure, config.h.in: Define
10729: _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10730:
10731: 1999-08-26 05:37 millert
10732:
10733: * RUNSON: add 2 reports
10734:
10735: 1999-08-26 05:20 millert
10736:
10737: * auth/kerb5.c: Minor changes, mostly cosmetic.
10738: verify_krb_v5_tgt() changed to return a value more like a system
10739: function
10740:
10741: 1999-08-26 05:19 millert
10742:
10743: * auth/dce.c: Add an XXX
10744:
10745: 1999-08-26 05:19 millert
10746:
10747: * TODO: more things todo!
10748:
10749: 1999-08-26 05:18 millert
10750:
10751: * sample.sudoers: update based on what is in the man page
10752:
10753: 1999-08-26 05:10 millert
10754:
10755: * parse.yacc: minor change to first line printed in -l mode
10756:
10757: 1999-08-26 05:10 millert
10758:
10759: * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10760: VARIABLES" section to "ENVIRONMENT" to be more standard and add
10761: "EXAMPLES" section
10762:
10763: 1999-08-26 05:08 millert
10764:
10765: * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10766: "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10767: standard
10768:
10769: 1999-08-26 05:06 millert
10770:
10771: * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10772:
10773: 1999-08-26 05:05 millert
10774:
10775: * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10776:
10777: 1999-08-26 05:04 millert
10778:
10779: * UPGRADE: mention timestamp changes
10780:
10781: 1999-08-26 05:04 millert
10782:
10783: * PORTING: cosmetic cleanup
10784:
10785: 1999-08-26 05:00 millert
10786:
10787: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10788: sudoers(8) man page
10789:
10790: 1999-08-24 13:45 millert
10791:
10792: * version.c: Update comments about syslog name tables
10793:
10794: 1999-08-24 13:37 millert
10795:
10796: * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10797: configure.in, parse.yacc: include strcasecmp() for those without
10798: it
10799:
10800: 1999-08-24 12:43 millert
10801:
10802: * sample.sudoers: Use the : operator some more and fix a typo
10803:
10804: 1999-08-24 12:43 millert
10805:
10806: * HISTORY: update the history of sudo
10807:
10808: 1999-08-24 12:42 millert
10809:
10810: * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10811:
10812: 1999-08-24 12:41 millert
10813:
10814: * CHANGES: recent changes
10815:
10816: 1999-08-24 12:40 millert
10817:
10818: * sudo.tab.h: these should be generated with byacc, not bison
10819:
10820: 1999-08-24 12:40 millert
10821:
10822: * lex.yy.c: regen
10823:
10824: 1999-08-24 11:58 millert
10825:
10826: * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10827: the stored (expanded) alias was not stored with the contents.
10828: This could lead to incorrect output if the sudoers file had
10829: different alias types with the same name. Normal parsing (ie:
10830: not in '-l' mode) is unaffected.
10831:
10832: 1999-08-23 12:47 millert
10833:
10834: * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10835: proto on some systems
10836:
10837: 1999-08-22 13:10 millert
10838:
10839: * snprintf.c: fix comment
10840:
10841: 1999-08-22 13:09 millert
10842:
10843: * tgetpass.c: don't need limits.h
10844:
10845: 1999-08-22 07:36 millert
10846:
10847: * snprintf.c: kill bogus reference to vfprintf
10848:
10849: 1999-08-22 07:26 millert
10850:
10851: * sample.sudoers, sudoers: better examples
10852:
10853: 1999-08-22 07:23 millert
10854:
10855: * snprintf.c: Add some const in the K&R defs. This is safe since
10856: we define const away if the compiler doesn't grok it.
10857:
10858: 1999-08-22 07:22 millert
10859:
10860: * aclocal.m4, configure: Better test for working long long support.
10861: Ultrix compiler supports basic long long but not all operations
10862: on them.
10863:
10864: 1999-08-22 05:59 millert
10865:
10866: * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10867: sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10868: MAXINT before including hpsecurity.h to silence an HP-UX warning
10869: Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10870:
10871: 1999-08-21 15:00 millert
10872:
10873: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10874: snprintf.c: UCB-derived snprintf + asprintf support. Supports
10875: quads if the compiler does. No floating point yet, perhaps
10876: later...
10877:
10878: 1999-08-20 16:37 millert
10879:
10880: * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10881: auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10882: code as root, not the invoking user. It doesn't really gain us
10883: anything to run as the user since an attacker can just have an
10884: setuid(0) in their egg. Running as root solves potential
10885: problems wrt signalling.
10886:
10887: 1999-08-19 13:45 millert
10888:
10889: * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10890: let the signal handler get it if we are still running, else let
10891: init reap it for us. The extra time it takes to wait lets the
10892: user know that mail is being sent.
10893:
10894: Install SIGCHLD handler in main() and for POSIX signals, block
10895: everything *except* SIGCHLD.
10896:
10897: 1999-08-19 12:30 millert
10898:
10899: * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10900: INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10901: a bitmap instead of an int. This makes it possible to express
10902: things like "failed to validate because user not listed for this
10903: host". Some thigns that were previously VALIDATE_FOO are now
10904: FLAG_FOO. This may change later on.
10905:
10906: Reorganized code in log_auth() and sudo.c to deal with above
10907: changes.
10908:
10909: Safer versions of push/pushcp with in the do { ... } while (0)
10910: style
10911:
10912: parse.yacc now saves info on the stack to allow parse.c to
10913: determine if a user was listed, but not for the host he/she tried
10914: to run on.
10915:
10916: Added --with-mail-if-no-host option
10917:
10918: 1999-08-17 11:29 millert
10919:
10920: * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10921: visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10922: externally visible. o If pedantic > 1, it is a parse error. o
10923: Add -s (strict) option to visudo which sets pedantic to 2.
10924:
10925: 1999-08-17 11:26 millert
10926:
10927: * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10928:
10929: 1999-08-17 11:20 millert
10930:
10931: * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10932:
10933: 1999-08-17 10:29 millert
10934:
10935: * configure, configure.in, Makefile.in: Add testsudoers to default
10936: build target if --with-devel Don't clean generated parser files
10937: unless "distclean".
10938:
10939: 1999-08-17 08:47 millert
10940:
10941: * parse.yacc: In pedantic mode we need to save *all* the aliases,
10942: not just those that match, or we get spurious warnings.
10943:
10944: 1999-08-17 05:32 millert
10945:
10946: * TROUBLESHOOTING: reference samples.sylog.conf
10947:
10948: 1999-08-14 11:50 millert
10949:
10950: * sample.syslog.conf: Sample entries for syslog.conf
10951:
10952: 1999-08-14 11:40 millert
10953:
10954: * CHANGES: recent changes
10955:
10956: 1999-08-14 11:36 millert
10957:
10958: * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10959: pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10960: sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10961: configured into flags and add a flag to specify an auth method is
10962: running alone (the only one). Pass auth methods their sudo_auth
10963: pointer, not the data pointer. This allows us to get at the
10964: flags and tell if we are the only auth method. That, in turn,
10965: allows the method to be able to decide what should/should not be
10966: a fatal error. Currently only rfc1938 uses it this way, which
10967: allows us to kill the OTP_ONLY define and te hackery that went
10968: with it. With access to the sudo_auth struct, methods can also
10969: get at a string holding their cannonical name (useful in error
10970: messages).
10971:
10972: 1999-08-14 11:34 millert
10973:
10974: * Makefile.in, INSTALL, README, config.h.in, configure,
10975: configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10976: sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10977: o real dependencies in the Makefile o --with-devel option to
10978: enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10979: "foo->bar" o ALL goes back to being a token, not a string but
10980: don't leak memory o rename hsotspec -> host in parse.yacc
10981:
10982: 1999-08-12 12:26 millert
10983:
10984: * BUGS, CHANGES: recent changes
10985:
10986: 1999-08-12 12:24 millert
10987:
10988: * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10989: sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10990: *snprintf() before -ldb is added to LIBS since -ldb includes a
10991: bogus snprintf(). o Add forward refs for struct mbuf and struct
10992: rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10993: to fix -Wall o Add missing includes to fix more -Wall
10994:
10995: 1999-08-12 10:37 millert
10996:
10997: * INSTALL, check.c, config.h.in, configure, configure.in,
10998: parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10999: o Add a "pedentic" flag to the parser. This makes sudo warn in
11000: cases where an alias may be used before it is defined. Only
11001: turned on for visudo and testsudoers. o Add
11002: --disable-authentication option that makes sudo not require
11003: authentication by default. The PASSWD tag can be used to require
11004: authentication for an entry. We no longer overload
11005: --without-passwd.
11006:
11007: 1999-08-12 10:29 millert
11008:
11009: * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
11010: USERNAME. These days a username can contain just about anything
11011: so be very permissive. Also drop the unused \. punctuation.
11012:
11013: 1999-08-09 18:25 millert
11014:
11015: * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
11016: parse.h o find_alias() now returns an aliasinfo * instead of
11017: boolean o add_alias() now takes a value parameter to store in the
11018: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
11019: return: 1) positive match 0) negative match (due to '!') -1) no
11020: match This means setting $$ explicitly in all cases, which I
11021: should have done in the first place. It also means that we
11022: always store a value that is != -1 and when we see a '!' we can
11023: set *_matches to !rv if rv != -1. The upshot of all of this is
11024: that '!' now works the way it should in lists and some of the
11025: rules are more uniform and sensible.
11026:
11027: 1999-08-09 18:17 millert
11028:
11029: * Makefile.in: add parse.h dependency
11030:
11031: 1999-08-09 18:17 millert
11032:
11033: * parse.h: kill unused *_matched macros
11034:
11035: 1999-08-09 10:35 millert
11036:
11037: * parse.yacc: Allow a list of users as the first thing in a user
11038: spec, not just a single entry. This makes things more uniform,
11039: though it does allow you to write user specs that are hard to
11040: read.
11041:
11042: 1999-08-09 10:08 millert
11043:
11044: * configure: regen
11045:
11046: 1999-08-09 10:08 millert
11047:
11048: * configure.in: fix check for crypt() in libufc
11049:
11050: 1999-08-07 14:03 millert
11051:
11052: * README: sudo-users list now exists
11053:
11054: 1999-08-07 07:46 millert
11055:
11056: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
11057: reality.
11058:
11059: 1999-08-07 05:59 millert
11060:
11061: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
11062: config.h.in, configure.in, logging.c, sudo.h, version.c,
11063: visudo.c, configure, fileops.c: o Move lock_file() and touch()
11064: into fileops.c so visudo can use them o Visudo now locks the
11065: sudoers temp file instead of bailing when the temp file already
11066: exists. This fixes the problem of stale temp files but it does
11067: *require* that you not try to put the temp file in a
11068: world-writable directory. This shoud not be an issue as the temp
11069: file should live in the same dir as sudoers. o Visudo now only
11070: installs the temp file as sudoers if it changed.
11071:
11072: 1999-08-06 09:49 millert
11073:
11074: * logging.c: add fcntl locking
11075:
11076: 1999-08-06 09:33 millert
11077:
11078: * configure, config.h.in, configure.in, logging.c: Lock the log
11079: file.
11080:
11081: 1999-08-06 05:36 millert
11082:
11083: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
11084: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
11085: /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
11086: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
11087: _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
11088:
11089: 1999-08-05 17:38 millert
11090:
11091: * INSTALL, check.c, config.h.in, configure, configure.in,
11092: version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
11093: more things to root sudo -V config reporting
11094:
11095: 1999-08-05 10:56 millert
11096:
11097: * configure, configure.in: aix_auth.o not authenticate.o
11098:
11099: 1999-08-05 10:48 millert
11100:
11101: * config.h.in: Add --with-goodpri and --with-badpri configure
11102: options to specify the syslog priority to use.
11103:
11104: 1999-08-05 10:30 millert
11105:
11106: * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
11107: and --with-badpri configure options to specify the syslog
11108: priority to use.
11109:
11110: 1999-08-05 10:25 millert
11111:
11112: * compat.h: kill crufty AIX stuff
11113:
11114: 1999-08-05 06:55 millert
11115:
11116: * Makefile.in: Sigh, some versions of make (like Solaris's) don't
11117: deal with $< like I would expect. Both GNU and BSD makes get
11118: this right but... So, we just expand $< inline at the cost of
11119: some ugliness.
11120:
11121: 1999-08-05 06:52 millert
11122:
11123: * version.c: If the invoking user is root, sudo will now print
11124: configure info in -V mode. Currently just prints logging info,
11125: to be expanded later.
11126:
11127: 1999-08-05 06:51 millert
11128:
11129: * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
11130: facility and priority o use new print_version() functino for -V
11131: mode
11132:
11133: 1999-08-05 06:49 millert
11134:
11135: * check.c: Don't need version.c
11136:
11137: 1999-08-05 06:21 millert
11138:
11139: * configure, configure.in, aclocal.m4, config.h.in: Add check for
11140: syslog facilities and priorities tables in syslog.h
11141:
11142: 1999-08-05 05:23 millert
11143:
11144: * Makefile.in: o authenticate -> aix_auth o add version.c
11145:
11146: 1999-08-05 05:21 millert
11147:
11148: * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
11149:
11150: 1999-08-04 13:32 millert
11151:
11152: * TODO: sudo should lock its logfile
11153:
11154: 1999-08-04 13:28 millert
11155:
11156: * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
11157: shortcut macros for append() to make things more readable. o The
11158: separator in append() is now a string instead of a char. o In
11159: append(), only prepend the separator if the last char is not a
11160: '!'. This is a hack but it greatly simplifies '!' handling. o
11161: In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
11162: inherited across entries in a list (matches current behavior).
11163: o Fix formatting in -l mode such that items in a list are
11164: separated by a space. Greatlt improves readability. o Space
11165: for name field in struct aliasinfo is now allocated dyanically
11166: instead of using a (big) buffer. o In add_alias(), only search
11167: the list once (lsearch instead of lfind + lsearch)
11168:
11169: 1999-08-04 11:31 millert
11170:
11171: * lex.yy.c, sudo.tab.h: regen
11172:
11173: 1999-08-04 10:54 millert
11174:
11175: * configure, configure.in: Solais pam doesn't require anye xtra
11176: setup
11177:
11178: 1999-08-04 05:35 millert
11179:
11180: * parse.yacc: o Simpler '!' support now that the lexer deals with
11181: multiple !'s for us. o In the case of opFOO, have FOO give a
11182: boolean return value and set foo_matches in opFOO, not FOO. o
11183: Treat 'ALL' as a string since it gets fill()'d in
11184: parse.lex--fixes a small memory leak. In the long run it may
11185: be better to just fix parse.lex and make ALL back into a token.
11186: However, having it be a string is useful since it can be
11187: easily passed back to the parent rule if we so desire.
11188:
11189: 1999-08-04 03:54 millert
11190:
11191: * parse.lex: o Remove some unnecessary backslashes o collapse
11192: multiple !'s by using !+ and checking if yyleng is even or odd.
11193: this allows us to simplify ! handling in parse.yacc
11194:
11195: 1999-08-04 03:53 millert
11196:
11197: * sudo.c: -u flag was being ignored
11198:
11199: 1999-08-01 13:04 millert
11200:
11201: * Makefile.in: correct fix
11202:
11203: 1999-08-01 12:37 millert
11204:
11205: * Makefile.in: work around pod2man stupididy
11206:
11207: 1999-08-01 12:35 millert
11208:
11209: * Makefile.in: correct dependencies for .cat
11210:
11211: 1999-08-01 12:26 millert
11212:
11213: * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11214:
11215: 1999-08-01 12:25 millert
11216:
11217: * sudo.pod, visudo.pod: Add copyright Update to reality
11218:
11219: 1999-08-01 11:42 millert
11220:
11221: * parse.c, sudo.c, sudo.h: rename validate() to the more
11222: descriptive sudoers_lookup()
11223:
11224: 1999-08-01 06:49 millert
11225:
11226: * auth/aix_auth.c: use tgetpass
11227:
11228: 1999-07-31 12:32 millert
11229:
11230: * CHANGES: updates
11231:
11232: 1999-07-31 12:31 millert
11233:
11234: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11235: configure, configure.in, sudo.c: Sudo, not CU Sudo
11236:
11237: 1999-07-31 12:19 millert
11238:
11239: * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11240: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11241: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11242: lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11243: parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11244: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11245: visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11246: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11247: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11248: auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11249: LICENSE: add 4th term to license similar to term 5 in the apache
11250: license
11251:
11252: 1999-07-31 12:02 millert
11253:
11254: * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11255: sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11256:
11257: 1999-07-28 05:24 millert
11258:
11259: * CHANGES: updates
11260:
11261: 1999-07-28 05:21 millert
11262:
11263: * check.c: Use dirs instead of files for timestamp. This allows
11264: tty and non-tty schemes to coexist reasonably. Note, however,
11265: that when you update a tty ticket, the mtime on the user dir gets
11266: updated as well.
11267:
11268: 1999-07-28 05:17 millert
11269:
11270: * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11271: to link with "-lprot -lx" when linking test program, not just
11272: -lprot. Also add check for getspnam(). The SCO docs indicate
11273: that /etc/shadow can be used but this may be a lie.
11274:
11275: 1999-07-24 03:35 millert
11276:
11277: * auth/API: first cut at auth API description
11278:
11279: 1999-07-22 15:48 millert
11280:
11281: * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11282: securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11283: now an init method that gets run before the main loop. This
11284: allows auth routines to differentiate between initialization that
11285: happens once vs. setup that needs to run each time through the
11286: loop.
11287:
11288: 1999-07-22 12:23 millert
11289:
11290: * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11291:
11292: 1999-07-22 12:22 millert
11293:
11294: * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11295: versions of asprintf() and vasprintf()
11296:
11297: 1999-07-22 09:14 millert
11298:
11299: * TODO: remove 2 items. One done, one won't do.
11300:
11301: 1999-07-22 09:10 millert
11302:
11303: * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11304: visudo.cat, visudo.html, configure, lex.yy.c: regen
11305:
11306: 1999-07-22 09:06 millert
11307:
11308: * CHANGES: new changes
11309:
11310: 1999-07-22 09:01 millert
11311:
11312: * sudo.pod: o Document -K flag and update meaning of -k flag. o
11313: BSD-style copyright o Document clearing of BIND resolver
11314: environment variables o Clarify bit about shared libs o suggest
11315: rc files create /tmp/.odus if your OS gives away files
11316:
11317: 1999-07-22 08:59 millert
11318:
11319: * visudo.pod: BSD license
11320:
11321: 1999-07-22 08:58 millert
11322:
11323: * tgetpass.c: o BSD copyright o no need to block signals, we now do
11324: that in main() o cosmetic changes
11325:
11326: 1999-07-22 08:57 millert
11327:
11328: * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11329: sudo_user" instead of old globals. o some cometic cleanup
11330:
11331: 1999-07-22 08:56 millert
11332:
11333: * sudo_setenv.c, version.h: BSD-style copyright
11334:
11335: 1999-07-22 08:56 millert
11336:
11337: * sudo.h: o BSD copyright o logging and parser bits moved to their
11338: own .h files o new "struct sudo_user" to encapsulate many of the
11339: old globals.
11340:
11341: 1999-07-22 08:55 millert
11342:
11343: * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11344: use new logging routines o simplified flow of control o BIND
11345: resolver additions to badenv_table
11346:
11347: 1999-07-22 08:53 millert
11348:
11349: * strerror.c: BSD-style copyright
11350:
11351: 1999-07-22 08:53 millert
11352:
11353: * snprintf.c: Now compiles on more K&R compilers
11354:
11355: 1999-07-22 08:52 millert
11356:
11357: * putenv.c: BSD-style copyright, cosmetic changes
11358:
11359: 1999-07-22 08:51 millert
11360:
11361: * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11362: Move parser-specific defines and structs into parse.h + other
11363: cosmetic changes
11364:
11365: 1999-07-22 08:51 millert
11366:
11367: * logging.h: defines for logging routines
11368:
11369: 1999-07-22 08:49 millert
11370:
11371: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11372: interfaces.h, pathnames.h.in: BSD-style copyright
11373:
11374: 1999-07-22 08:48 millert
11375:
11376: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11377: copyright, cosmetic changes
11378:
11379: 1999-07-22 08:46 millert
11380:
11381: * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11382: add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11383: changes to fill in AUTH_OBJS for new auth api o check for
11384: strerror(), v?snprintf() and v?asprintf() o replace
11385: --with-AuthSRV with --with-fwtk
11386:
11387: 1999-07-22 08:43 millert
11388:
11389: * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11390: HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11391: HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11392: NO_PASSWD
11393:
11394: 1999-07-22 08:42 millert
11395:
11396: * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11397: are missing.
11398:
11399: 1999-07-22 08:39 millert
11400:
11401: * alloc.c: BSD-style copyright
11402:
11403: 1999-07-22 08:38 millert
11404:
11405: * TROUBLESHOOTING: no more --with-getpass
11406:
11407: 1999-07-22 08:34 millert
11408:
11409: * TODO: Take out things I've done...
11410:
11411: 1999-07-22 08:34 millert
11412:
11413: * README: Refer to LICENSE
11414:
11415: 1999-07-22 08:34 millert
11416:
11417: * PORTING: --with-getpass no longer exists
11418:
11419: 1999-07-22 08:33 millert
11420:
11421: * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11422: new files and new auth modules.
11423:
11424: 1999-07-22 08:32 millert
11425:
11426: * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11427: --with-fwtk and --without-passwd.
11428:
11429: 1999-07-22 08:31 millert
11430:
11431: * HISTORY: Update history a bit
11432:
11433: 1999-07-22 08:29 millert
11434:
11435: * COPYING, LICENSE: Now distributed under a BSD-style license
11436:
11437: 1999-07-22 08:28 millert
11438:
11439: * auth/sudo_auth.c: o BSD-style copyright o Add support for
11440: NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11441: rfc1938 code o new struct sudo_user global
11442:
11443: 1999-07-22 08:25 millert
11444:
11445: * auth/: pam.c, sia.c: BSD-style copyright and use new log
11446: functions
11447:
11448: 1999-07-22 08:24 millert
11449:
11450: * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11451: Use asprintf() and snprintf() where sensible.
11452:
11453: 1999-07-22 08:19 millert
11454:
11455: * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11456: handling is now done more reasonably--better sanity checks and
11457: tty-based stamps are now done as files in a directory with the
11458: same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11459: It is not currently possible to mix tty and non-tty based ticket
11460: schemes but this may change in the future (it requires sudo to
11461: use a directory instead of a file in the non-tty case). Also,
11462: ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11463: really deletes the file. That way you don't get the lecture
11464: again just because you killed your ticket in .logout. BSD-style
11465: copyright now.
11466:
11467: 1999-07-22 08:13 millert
11468:
11469: * logging.c: o rewritten logging routines. log_error() now takes
11470: printf-style varargs and log_auth() for the return value of
11471: validate(). o BSD-style copyright
11472:
11473: 1999-07-22 07:04 millert
11474:
11475: * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11476: auth API
11477:
11478: 1999-07-22 07:02 millert
11479:
11480: * auth/fwtk.c: Use snprintf() where it makes sense and add a
11481: BSD-style copyright
11482:
11483: 1999-07-22 07:00 millert
11484:
11485: * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11486: secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11487: copyright
11488:
11489: 1999-07-22 06:57 millert
11490:
11491: * emul/utime.h, utime.c: BSD-style copyright
11492:
11493: 1999-07-22 06:57 millert
11494:
11495: * emul/search.h: this has been rewritten so use my BSD-style
11496: copyright
11497:
11498: 1999-07-15 11:21 millert
11499:
11500: * snprintf.c: include malloc.h if no stdlib.h
11501:
11502: 1999-07-15 10:21 millert
11503:
11504: * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11505:
11506: 1999-07-15 10:20 millert
11507:
11508: * strerror.c: strerror() for systems w/o it
11509:
11510: 1999-07-12 06:53 millert
11511:
11512: * visudo.c: stylistic changes
11513:
11514: 1999-07-12 06:25 millert
11515:
11516: * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11517: comment
11518:
11519: 1999-07-11 16:10 millert
11520:
11521: * auth/pam.c: remove missed ref to PAM_nullpw
11522:
11523: 1999-07-11 16:10 millert
11524:
11525: * auth/sudo_auth.h: pasto
11526:
11527: 1999-07-11 15:19 millert
11528:
11529: * auth/kerb5.c: more or less complete now--still untested
11530:
11531: 1999-07-11 15:09 millert
11532:
11533: * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11534:
11535: 1999-07-11 14:42 millert
11536:
11537: * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11538: code into rfc1938.c
11539:
11540: 1999-07-11 07:22 millert
11541:
11542: * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11543: unchanged from dce_pwent.c
11544:
11545: 1999-07-11 06:44 millert
11546:
11547: * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11548: Could probably be much better
11549:
11550: 1999-07-11 06:43 millert
11551:
11552: * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11553: works (tested)
11554:
11555: 1999-07-11 05:37 millert
11556:
11557: * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11558:
11559: 1999-07-11 05:33 millert
11560:
11561: * auth/pam.c: don't use prompt global, it will go away
11562:
11563: 1999-07-11 05:32 millert
11564:
11565: * auth/secureware.c: correct copyright years
11566:
11567: 1999-07-10 20:32 millert
11568:
11569: * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11570: pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11571: New authentication API and methods
11572:
11573: 1999-07-08 06:46 millert
11574:
11575: * parse.yacc: only save an entry if user_matches && host_matches,
11576: even if the stack is empty (fix for previous commit)
11577:
11578: 1999-07-08 06:35 millert
11579:
11580: * parse.yacc: 1) Always save an entry on the stack if it is empty.
11581: This fixes the -l and -v flags that were broken by earlier parser
11582: changes.
11583:
11584: 2) In a Runas list, don't negate FALSE -> TRUE since that would
11585: make !foo match any time the user specified a runas user (via -u)
11586: other than foo.
11587:
11588: 1999-07-08 05:45 millert
11589:
11590: * testsudoers.c: interfaces and num_interfaces are now auto, not
11591: extern
11592:
11593: 1999-07-07 14:09 millert
11594:
11595: * auth.c: use a static global to keep stae about empty passwords
11596:
11597: 1999-07-07 14:08 millert
11598:
11599: * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11600: other modules
11601:
11602: 1999-07-05 16:53 millert
11603:
11604: * auth.c: PAM prompt code was wrong, looks like we have to kludge
11605: it after all.
11606:
11607: 1999-07-05 16:35 millert
11608:
11609: * auth.c: In the PAM code, when a user hits return at the first
11610: password prompt, exit without a warning just like the normal auth
11611: code
11612:
11613: 1999-07-05 16:15 millert
11614:
11615: * configure, configure.in: kludge around cross-compiler false
11616: positives
11617:
11618: 1999-07-05 16:14 millert
11619:
11620: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11621: (correct) PAM code Tgetpass now takes an echo flag for use with
11622: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11623: useless umask setting Change error from BAD_ALLOCATION ->
11624: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11625: auth.c for consistency
11626:
11627: 1999-07-05 16:11 millert
11628:
11629: * sudo.c: Some -Wall and kill some trailing spaces
11630:
11631: 1999-07-05 16:10 millert
11632:
11633: * configure.in: define -D__EXTENSIONS__ for solaris so we get
11634: crypt() proto
11635:
11636: 1999-06-22 09:42 millert
11637:
11638: * RUNSON: add Dynix 4.4.4
11639:
11640: 1999-06-22 09:30 millert
11641:
11642: * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11643: version, fall back on old kerb4 auth code
11644:
11645: 1999-06-22 06:41 millert
11646:
11647: * INSTALL: clarify some things
11648:
11649: 1999-06-22 06:38 millert
11650:
11651: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11652:
11653: 1999-06-14 19:47 millert
11654:
11655: * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11656:
11657: 1999-06-03 12:34 millert
11658:
11659: * tgetpass.c: Fix open(2) return value checking, was NULL for
11660: fopen, should be -1 for open
11661:
11662: 1999-06-03 12:06 millert
11663:
11664: * configure: regen
11665:
11666: 1999-06-03 12:06 millert
11667:
11668: * configure.in: better wording for solaris pam notice
11669:
11670: 1999-06-03 11:52 millert
11671:
11672: * CHANGES: document recent changes
11673:
11674: 1999-06-03 11:52 millert
11675:
11676: * TROUBLESHOOTING: Update shadow password section
11677:
11678: 1999-06-03 11:51 millert
11679:
11680: * auth.c: move authentication code from check.c to auth.c
11681:
11682: 1999-06-03 11:51 millert
11683:
11684: * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11685:
11686: 1999-05-16 21:36 millert
11687:
11688: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11689: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11690: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11691: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11692: interface-related defines to interfaces.h so we don't have to
11693: include <netinet/in.h> everywhere.
11694:
11695: 1999-05-14 12:30 millert
11696:
11697: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11698: logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11699: braindeath with our own SUDO_MAX_PASS.
11700: It turns out the old DES crypt does the right thing with
11701: passwords
11702: longert than 8 characters.
11703: o Fix common typo (necesary -> necessary)
11704: o Update TODO list
11705:
11706: 1999-05-03 12:00 millert
11707:
11708: * sudo.c: set $LOGNAME when we set $USER
11709:
11710: 1999-04-27 00:00 millert
11711:
11712: * INSTALL: add comment about digital unix and interfaces.c warning
11713: with gcc
11714:
11715: 1999-04-15 01:12 millert
11716:
11717: * sample.sudoers: use modern paths and give examples for some of
11718: the new parser features
11719:
11720: 1999-04-10 13:03 millert
11721:
11722: * parse.c: fix comment
11723:
11724: 1999-04-10 00:49 millert
11725:
11726: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11727: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11728: parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11729: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11730: Function names should be flush with the start of the line so they
11731: can be found trivially in an editor and with grep
11732:
11733: 1999-04-10 00:40 millert
11734:
11735: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11736: parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11737: is already void, no need to cast it
11738:
11739: 1999-04-10 00:37 millert
11740:
11741: * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11742: (this should not be possible)
11743:
11744: 1999-04-10 00:10 millert
11745:
11746: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11747: testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11748: listed in sudoers) to the command instead of stashing the struct
11749: stat. Should be safer.
11750:
11751: 1999-04-08 19:56 millert
11752:
11753: * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11754: release
11755:
11756: 1999-04-07 20:20 millert
11757:
11758: * CHANGES: updated
11759:
11760: 1999-04-07 19:18 millert
11761:
11762: * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11763: sudoers.pod: You can now specifiy a host list instead of just a
11764: host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11765: now works.
11766:
11767: 1999-04-07 02:59 millert
11768:
11769: * testsudoers.c: Quiet -Wall
11770:
11771: 1999-04-07 02:50 millert
11772:
11773: * parse.yacc: Move the push from the beginning of cmndspec to the
11774: end. This means we no longer have to do a push at the end of
11775: privilege, just reset some values.
11776:
11777: 1999-04-06 20:24 millert
11778:
11779: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11780: and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11781: most everywhere
11782:
11783: 1999-04-06 14:12 millert
11784:
11785: * sudoers.pod: modernize paths and update su example based on
11786: sample.sudoers one
11787:
11788: 1999-04-06 14:06 millert
11789:
11790: * sample.sudoers: New runas semantics
11791:
11792: 1999-04-06 13:54 millert
11793:
11794: * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11795: configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11796: ourselves so we don't need to rely on the system strdup(3) which
11797: may or may not exist. There is now no need to provide strdup()
11798: for those w/o it. Also, the prototype for estrdup() was wrong,
11799: it returns char * and its param is const.
11800:
11801: 1999-04-06 13:40 millert
11802:
11803: * getcwd.c: $Sudo tag
11804:
11805: 1999-04-06 13:20 millert
11806:
11807: * check.c: buf should be prompt; Michael Robokoff
11808: <mrobo@networkcs.com>
11809:
11810: 1999-04-06 01:40 millert
11811:
11812: * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11813: operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11814: and User_Alias.
11815:
11816: 1999-04-06 01:38 millert
11817:
11818: * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11819: GLOBAL_PROBLEM
11820:
11821: 1999-04-06 01:08 millert
11822:
11823: * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11824: as subscript.
11825:
11826: 1999-04-06 01:00 millert
11827:
11828: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11829: VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11830: command but the NOPASSWD flag was set. Make runasspec,
11831: runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11832: support for '!' in the runas list Fix double printing of '%' and
11833: '+' for groups and netgroups respectively Add *_matched macros
11834: (no need for local stack variable). Should only be used directly
11835: after a pop (since top must be >= 2).
11836:
11837: 1999-04-05 23:25 millert
11838:
11839: * aclocal.m4, configure.in: Add copyright, somewhat silly
11840:
11841: 1999-04-05 16:57 millert
11842:
11843: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11844: check_sia.c, compat.h, config.h.in, configure, configure.in,
11845: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11846: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11847: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11848: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11849: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11850: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11851: visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11852: 1.6 and combine copyright statements
11853:
11854: 1999-04-05 16:30 millert
11855:
11856: * sample.sudoers: Use ! not ^ to do negation
11857:
11858: 1999-04-05 16:29 millert
11859:
11860: * lex.yy.c: regen
11861:
11862: 1999-04-05 16:28 millert
11863:
11864: * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11865: across entris in a command list. Add a PASSWD tag to reverse
11866: NOPASSWD. When you override a runas or *PASSWD tag the value
11867: given becomes the new default for the rest of the command list.
11868:
11869: 1999-04-02 16:03 millert
11870:
11871: * CHANGES, RUNSON: update for 1.5.9
11872:
11873: 1999-04-02 16:02 millert
11874:
11875: * visudo.c: Shift return value of system(3) by 8 to get real exit
11876: value and if it is not 1 or 0 print the retval along with the
11877: error message.
11878:
11879: 1999-03-30 16:45 millert
11880:
11881: * Makefile.in: testsudoers needs LIBOBJS too
11882:
11883: 1999-03-30 12:17 millert
11884:
11885: * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11886: like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11887: would not allow millert to run ls as root.
11888:
11889: 1999-03-30 01:08 millert
11890:
11891: * CHANGES: new change
11892:
11893: 1999-03-30 01:03 millert
11894:
11895: * parse.yacc: Save entries that match a ! command on the matching
11896: stack too
11897:
11898: 1999-03-30 01:01 millert
11899:
11900: * sudo.c: Make sudo's usage info better when mutually exclusive
11901: args are given and don't rely on argument order to detect this;
11902: nick@zeta.org.au
11903:
11904: 1999-03-29 15:03 millert
11905:
11906: * CHANGES, Makefile.in, RUNSON: updates from CU
11907:
11908: 1999-03-28 23:38 millert
11909:
11910: * Makefile.in: use gzip
11911:
11912: 1999-03-28 23:31 millert
11913:
11914: * parse.yacc: Fix off by one error introduced in *alloc changes
11915:
11916: 1999-03-28 23:05 millert
11917:
11918: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11919: check_sia.c, compat.h, config.h.in, configure, configure.in,
11920: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11921: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11922: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11923: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11924: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11925: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11926: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11927: emul/utime.h: ++version
11928:
11929: 1999-03-28 21:59 millert
11930:
11931: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11932: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11933: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11934: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11935: emalloc/erealloc/estrdup
11936:
11937: 1999-03-28 20:29 millert
11938:
11939: * alloc.c: error checking memory allocation routines
11940:
11941: 1999-03-28 19:23 millert
11942:
11943: * parse.yacc: Still not right, this fixes it for real
11944:
11945: 1999-03-28 19:08 millert
11946:
11947: * parse.yacc: Fix for previous commit
11948:
11949: 1999-03-28 19:05 millert
11950:
11951: * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11952: when mixing different runas specs and ! commands. For example:
11953: millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11954: allow millert to run whoami as root as well as daemon when it
11955: should just allow daemon. The problem was that comma-separated
11956: commands in a list shared the same entry on the matching stack.
11957: Now they get their own entry iff there is a full match. It may
11958: be better to just make the runas spec persistent across all
11959: commands in a list like the user and host entries of the matching
11960: stack. However, since that is a fairly major change it should
11961: gets its own minor rev increase.
11962:
11963: 1999-03-28 13:50 millert
11964:
11965: * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11966: warning on Linux
11967:
11968: 1999-03-26 13:17 millert
11969:
11970: * CHANGES: updates
11971:
11972: 1999-03-26 13:12 millert
11973:
11974: * sample.sudoers: better su entry
11975:
11976: 1999-03-26 13:10 millert
11977:
11978: * configure: regen
11979:
11980: 1999-03-26 13:09 millert
11981:
11982: * check.c, configure.in: new pam code that works on solaris, should
11983: work on linux too; aelberg@home.com
11984:
11985: 1999-03-19 14:44 millert
11986:
11987: * RUNSON: more entries
11988:
11989: 1999-03-19 14:43 millert
11990:
11991: * config.h.in: only include strings.h if there is no string.h
11992:
11993: 1999-03-17 15:25 millert
11994:
11995: * config.guess: Sinix is now being called ReliantUNIX;
11996: bjjackso@us.oracle.com
11997:
11998: 1999-03-13 13:37 millert
11999:
12000: * sudo.c: shost must be set before log functions are called #ifdef
12001: HOST_IN_LOG
12002:
12003: 1999-03-07 18:34 millert
12004:
12005: * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
12006: command args. Stop processing an arg when you hit a backslash so
12007: the quoted-character detection can catch it.
12008:
12009: 1999-02-26 01:19 millert
12010:
12011: * interfaces.c: include sys/time.h; aparently AIX needs it.
12012: ppz@cdu.elektra.ru
12013:
12014: 1999-02-23 19:43 millert
12015:
12016: * configure, configure.in: add missing case statement so
12017: --without-sendmail works
12018:
12019: 1999-02-22 21:51 millert
12020:
12021: * CHANGES: more
12022:
12023: 1999-02-22 15:10 millert
12024:
12025: * configure, configure.in: only search for -lsun in irix <= 4.x
12026:
12027: 1999-02-22 15:01 millert
12028:
12029: * configure, configure.in: back out last configure.in change now
12030: that I've hacked autoconf to fix the real problem and add a
12031: missing newline
12032:
12033: 1999-02-22 14:32 millert
12034:
12035: * CHANGES: updated
12036:
12037: 1999-02-22 14:05 millert
12038:
12039: * getcwd.c: add def of dirfd() for those without it
12040:
12041: 1999-02-22 10:58 millert
12042:
12043: * configure.in, configure: When falling back to checking for
12044: socket() when linking with "-lsocket -lnsl" check for main()
12045: instead since autoconf has already cached the results of checking
12046: for socket() in -lsocket. This is really an autoconf bug as it
12047: should use the extra libs as part of the cache variable name.
12048:
12049: 1999-02-22 10:47 millert
12050:
12051: * configure.in: typo
12052:
12053: 1999-02-21 15:18 millert
12054:
12055: * configure.in: fix occurrence of $with_timeout that should be
12056: $with_password_timeout;
12057: Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
12058:
12059: 1999-02-17 11:40 millert
12060:
12061: * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
12062: espie@openbsd.org
12063:
12064: 1999-02-11 01:41 millert
12065:
12066: * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
12067: it does not have it
12068:
12069: 1999-02-09 13:11 millert
12070:
12071: * configure, configure.in: define for_BSD_TYPES irix
12072:
12073: 1999-02-06 19:47 millert
12074:
12075: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
12076: clear that it is the user's password, not root's, that we want.
12077:
12078: 1999-02-06 19:43 millert
12079:
12080: * check.c, sudo.h: If the user enters an empty password and really
12081: has no password, accept the empty password they entered.
12082: Perviously, they could enter anything *but* an empty password.
12083: Also, add GETPASS macro that calls either tgetpass() or getpass()
12084: depending on how sudo was configured. Problem noted by
12085: jdg@maths.qmw.ac.uk
12086:
12087: 1999-02-02 23:32 millert
12088:
12089: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12090: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12091: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12092: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12093: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
12094: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
12095: emul/utime.h: add explicate copyright
12096:
12097: 1999-02-02 23:16 millert
12098:
12099: * CHANGES: mention -lsocket, -lnsl configure changes
12100:
12101: 1999-02-02 17:54 millert
12102:
12103: * sudo.c: Don't clobber errno after calling check_sudoers().
12104:
12105: 1999-01-31 19:46 millert
12106:
12107: * configure.in, configure: When linking with both -lsocket and
12108: -lnsl be sure to do so in that order. Also, when we can't find
12109: socket() or inet_addr() and have to try linking with both libs,
12110: issue a warning.
12111:
12112: 1999-01-31 19:45 millert
12113:
12114: * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
12115:
12116: 1999-01-23 12:18 millert
12117:
12118: * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
12119: entry
12120:
12121: 1999-01-22 13:13 millert
12122:
12123: * configure, CHANGES, INSTALL, configure.in: fix and correctly
12124: document --with-umask; problem noted by adap@adap.org
12125:
12126: 1999-01-19 20:38 millert
12127:
12128: * configure.in, configure: only use /usr/{man,catman}/local to
12129: store man pages if suer didn't override prefix or mandir
12130:
12131: 1999-01-19 20:24 millert
12132:
12133: * configure, INSTALL, configure.in: fix typo, make --with-SecurID
12134: take an arg
12135:
12136: 1999-01-18 21:53 millert
12137:
12138: * RUNSON: updates from users
12139:
12140: 1999-01-18 21:04 millert
12141:
12142: * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
12143: 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
12144:
12145: 1999-01-18 20:00 millert
12146:
12147: * configure, configure.in: better fix for the problem of unresolved
12148: symbols in -lnsl or -lsocket
12149:
12150: 1999-01-18 19:39 millert
12151:
12152: * configure, configure.in: when checking for functions in -lnsl and
12153: -lsocket link with both of them to avoid unresolved symbols on
12154: some weirdo systems
12155:
12156: 1999-01-17 20:49 millert
12157:
12158: * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
12159: RCS before the RCS->CVS switch
12160:
12161: 1999-01-17 18:16 millert
12162:
12163: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12164: configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
12165: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12166: interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
12167: parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
12168: sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
12169: tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
12170: emul/utime.h: add sudo tags
12171:
12172: 1999-01-17 17:53 millert
12173:
12174: * version.h, sudo.h: testing Sudo tag
12175:
12176: 1999-01-17 17:40 millert
12177:
12178: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
12179: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
12180: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
12181: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
12182: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12183: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
12184: sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
12185: tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
12186: emul/utime.h: crank version and regen files
12187:
12188: 1999-01-17 17:27 millert
12189:
12190: * Makefile.in: kill rcs goop in update_version and fix now that
12191: version is a const
12192:
12193: 1999-01-17 17:08 millert
12194:
12195: * INSTALL, check.c, config.h.in, configure, configure.in,
12196: logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12197: fcusack@iconnet.net
12198:
12199: 1999-01-17 16:45 millert
12200:
12201: * realpath.c, sudo_realpath.c: we no longer use realpath
12202:
12203: 1999-01-17 16:44 millert
12204:
12205: * qualify.c: replaced by find_path.c
12206:
12207: 1999-01-17 16:43 millert
12208:
12209: * options.h: all options are now configure flags
12210:
12211: 1999-01-17 16:42 millert
12212:
12213: * lex.yy.c: regen
12214:
12215: 1999-01-17 16:41 millert
12216:
12217: * getwd.c: superceded by getcwd.c
12218:
12219: 1999-01-17 16:36 millert
12220:
12221: * getpass.c: superceded by tgetpass.c
12222:
12223: 1999-01-17 16:36 millert
12224:
12225: * SUPPORTED: superceded by RUNSON
12226:
12227: 1999-01-17 16:33 millert
12228:
12229: * OPTIONS: No longer used now that we have configure options for
12230: everything.
12231:
12232: 1999-01-17 16:32 millert
12233:
12234: * configure: regen based on configure.in
12235:
12236: 1999-01-17 16:31 millert
12237:
12238: * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12239: sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12240: on sudo.pod, sudoers.pod, and visudo.pod
12241:
12242: 1998-12-11 12:16 millert
12243:
12244: * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12245:
12246: 1998-12-07 16:16 millert
12247:
12248: * interfaces.c: close sock when we are done with it
12249:
12250: 1998-11-27 19:37 millert
12251:
12252: * parse.yacc: never say "error on line -1"
12253:
12254: 1998-11-23 23:38 millert
12255:
12256: * configure.in: check for -lnsl before -lsocket
12257:
12258: 1998-11-23 23:29 millert
12259:
12260: * configure.in: quote '[', ']' used in ranges correctly
12261:
12262: 1998-11-21 17:54 millert
12263:
12264: * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12265:
12266: 1998-11-20 18:33 millert
12267:
12268: * version.h: 1.5.7
12269:
12270: 1998-11-20 18:33 millert
12271:
12272: * INSTALL: more info for 1.5.7
12273:
12274: 1998-11-20 18:30 millert
12275:
12276: * README: update for 1.5.7
12277:
12278: 1998-11-20 14:26 millert
12279:
12280: * parse.yacc: make increases of cm_list_size and ga_list_size be
12281: similar to increases of stacksize (ie: >= not > in initial
12282: compare).
12283:
12284: 1998-11-20 14:22 millert
12285:
12286: * parse.yacc: when we get a syntax error, report it for the
12287: previous line since that's generally where the error occurred.
12288:
12289: 1998-11-18 15:31 millert
12290:
12291: * config.h.in, configure.in, interfaces.c: add back check for
12292: sys/sockio.h but only use it if SIOCGIFCONF is not defined
12293:
12294: 1998-11-18 15:25 millert
12295:
12296: * config.h.in: define BSD_COMP for svr4
12297:
12298: 1998-11-17 23:16 millert
12299:
12300: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12301: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12302: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12303: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12304: -Wall
12305:
12306: 1998-11-17 23:10 millert
12307:
12308: * configure.in: kill check for sockio,h
12309:
12310: 1998-11-17 23:10 millert
12311:
12312: * config.h.in: no more HAVE_SYS_SOCKIO_H
12313:
12314: 1998-11-17 22:51 millert
12315:
12316: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12317: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12318: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12319: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12320: -Wall
12321:
12322: 1998-11-16 17:38 millert
12323:
12324: * sudo.c: add missing inform_user()
12325:
12326: 1998-11-13 19:21 millert
12327:
12328: * find_path.c: return NOT_FOUND if given fully qualified path and
12329: it does not exist previously it would perror(ENOENT) which
12330: bypasses the option to not leak path info
12331:
12332: 1998-11-13 19:20 millert
12333:
12334: * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12335: for kerb, check for -ldes
12336:
12337: 1998-11-13 14:19 millert
12338:
12339: * INSTALL: tty tickets are user:tty now
12340:
12341: 1998-11-13 14:10 millert
12342:
12343: * check.c: when using tty tickets make it user:tty not user.tty as
12344: a username could have a '.' in it
12345:
12346: 1998-11-09 19:15 millert
12347:
12348: * sudo.c: add "ignoring foo found in ." for auth successful case
12349:
12350: 1998-11-09 17:57 millert
12351:
12352: * sudo.c: add missing printf param
12353:
12354: 1998-11-08 15:56 millert
12355:
12356: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12357: go back to printing "command not found" unless
12358: --disable-path-info specified. Also, tell user when we ignore
12359: '.' in their path and it would have been used but for
12360: --with-ignore-dot.
12361:
12362: 1998-11-08 13:51 millert
12363:
12364: * check.c, sudo.c: Only one space after a colon, not two, in
12365: printf's
12366:
12367: 1998-11-05 12:59 millert
12368:
12369: * sudo.pod: document setting $USER
12370:
12371: 1998-11-04 22:24 millert
12372:
12373: * check.c: fix bugs with prompt expansion
12374:
12375: 1998-11-04 21:21 millert
12376:
12377: * sudo.c: set $USER for root too
12378:
12379: 1998-11-04 17:13 millert
12380:
12381: * getspwuid.c: typo
12382:
12383: 1998-11-04 17:07 millert
12384:
12385: * configure.in: HP-UX's iscomsec is in -lsec, not libc
12386:
12387: 1998-11-03 22:24 millert
12388:
12389: * configure.in: remove some entries in the OS case statement that
12390: did nothing
12391:
12392: 1998-11-03 22:19 millert
12393:
12394: * TROUBLESHOOTING: add "cd" section and flush out syslog section
12395:
12396: 1998-11-03 20:51 millert
12397:
12398: * Makefile.in: no more sudo-lex.yy.c
12399:
12400: 1998-11-03 20:50 millert
12401:
12402: * check_sia.c: add custom prompt support
12403:
12404: 1998-11-03 20:40 millert
12405:
12406: * sudo.c: kill perror("malloc") since we already have a good error
12407: messages pw_ent -> pw for brevity set $USER if -u specified
12408:
12409: 1998-11-03 20:39 millert
12410:
12411: * parse.c: kill perror("malloc") since we already have a good error
12412: messages pw_ent -> pw for brevity when checking if %group
12413: matches, look up user in password file so that %groups works in a
12414: RunAs spec.
12415:
12416: 1998-11-03 20:39 millert
12417:
12418: * logging.c, parse.yacc: kill perror("malloc") since we already
12419: have a good error messages
12420:
12421: 1998-11-03 20:38 millert
12422:
12423: * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12424: perror("malloc") since we already have a good error messages
12425: pw_ent -> pw for brevity
12426:
12427: 1998-11-03 15:03 millert
12428:
12429: * tgetpass.c: the prompt is expanded before tgetpass is called
12430:
12431: 1998-11-03 15:03 millert
12432:
12433: * sudo.h: tgetpass now has the same args as getpass again
12434:
12435: 1998-11-03 15:02 millert
12436:
12437: * getspwuid.c: add iscomsec, issecure support
12438:
12439: 1998-11-03 15:02 millert
12440:
12441: * check.c: we now expand any %h or %u in the prompt before passing
12442: to tgetpass
12443:
12444: 1998-11-03 14:58 millert
12445:
12446: * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12447:
12448: 1998-11-03 14:56 millert
12449:
12450: * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12451:
12452: 1998-11-03 14:55 millert
12453:
12454: * configure.in: add check for iscomsec in HP-UX
12455:
12456: 1998-11-03 14:51 millert
12457:
12458: * configure.in: check for issecure if we have getpwanam on SunOS
12459: some options are incompatible with DUNIX SIA check for dispcrypt
12460: on DUNIX
12461:
12462: 1998-10-25 15:21 millert
12463:
12464: * config.h.in: add HAVE_DISPCRYPT
12465:
12466: 1998-10-25 15:21 millert
12467:
12468: * secureware.c: add back support for non-dispcrypt based checking
12469: for older DUNIX
12470:
12471: 1998-10-25 00:51 millert
12472:
12473: * INSTALL: sia changes
12474:
12475: 1998-10-25 00:48 millert
12476:
12477: * configure.in: SIA becomes the default on Digital UNIX now havbe
12478: --disable-sia to turn it off...
12479:
12480: 1998-10-24 23:52 millert
12481:
12482: * check.c: move local includes after system ones
12483:
12484: 1998-10-24 19:28 millert
12485:
12486: * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12487: INCORRECT_PASSWORD or an insult to stderr
12488:
12489: 1998-10-24 19:07 millert
12490:
12491: * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12492: password. Only the first iteration was working.
12493:
12494: 1998-10-21 21:00 millert
12495:
12496: * aclocal.m4: don't trust UID_MAX or MAXUID
12497:
12498: 1998-10-21 20:35 millert
12499:
12500: * configure.in: fix two pastos
12501:
12502: 1998-10-21 20:30 millert
12503:
12504: * configure.in: fix typo
12505:
12506: 1998-10-21 20:19 millert
12507:
12508: * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12509: legal to be negative in DUNX 5.0
12510:
12511: 1998-10-21 20:15 millert
12512:
12513: * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12514: -lm but check for -ldb since DUNX < 4.0 lacks it
12515:
12516: 1998-10-21 19:50 millert
12517:
12518: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12519: secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12520: 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12521: exist).
12522:
12523: 1998-10-20 17:22 millert
12524:
12525: * INSTALL: updated --with-editor blurb
12526:
12527: 1998-10-20 17:21 millert
12528:
12529: * TROUBLESHOOTING: tell how to put sudoers in a different dir
12530:
12531: 1998-10-20 16:22 millert
12532:
12533: * configure.in: add missing quotes around $with_editor
12534:
12535: 1998-10-20 14:00 millert
12536:
12537: * configure.in: typo in --with-editor bits
12538:
12539: 1998-10-20 01:24 millert
12540:
12541: * INSTALL: I don't expect it to work on Solaris
12542:
12543: 1998-10-20 01:24 millert
12544:
12545: * check.c: add back security/pam_misc.h
12546:
12547: 1998-10-19 17:13 millert
12548:
12549: * INSTALL: remove dunix note since configure checks for this now
12550:
12551: 1998-10-19 16:30 millert
12552:
12553: * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12554: bad)
12555:
12556: 1998-10-19 14:32 millert
12557:
12558: * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12559: dispcrypt(3)
12560:
12561: 1998-10-19 14:32 millert
12562:
12563: * config.h.in: add HAVE_INITPRIVS
12564:
12565: 1998-10-19 14:31 millert
12566:
12567: * sudo.c: call initprivs() if we have it for getprpwuid later on
12568:
12569: 1998-10-19 14:30 millert
12570:
12571: * Makefile.in: clean pathnames.h too
12572:
12573: 1998-10-19 14:28 millert
12574:
12575: * configure.in: quote "Sorry, try again." with [] since it has a
12576: comma in it set LIBS when we add stuff to SUDO_LIBS set
12577: SECUREWARE when we find getprpwuid() so we can check for
12578: bigcrypt, set_auth_parameters, and initprivs later.
12579:
12580: 1998-10-19 13:48 millert
12581:
12582: * INSTALL: update Digital UNIX note about acl.h
12583:
12584: 1998-10-18 20:26 millert
12585:
12586: * INSTALL: add --with-sia --without-root-sudo ->
12587: --disable-root-sudo some reordering
12588:
12589: 1998-10-18 20:22 millert
12590:
12591: * secureware.c: add whitespace
12592:
12593: 1998-10-18 20:22 millert
12594:
12595: * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12596: sudo.h: add SIA support
12597:
12598: 1998-10-18 20:21 millert
12599:
12600: * check_sia.c: Initial revision
12601:
12602: 1998-10-18 19:42 millert
12603:
12604: * configure.in: when checking for -lsocket, -lnsl, and -linet,
12605: check for the specific functions we need from them.
12606:
12607: 1998-10-18 19:10 millert
12608:
12609: * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12610:
12611: 1998-10-18 18:15 millert
12612:
12613: * sudo.h, Makefile.in: added check_secureware
12614:
12615: 1998-10-18 18:12 millert
12616:
12617: * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12618: bits
12619:
12620: 1998-10-18 18:00 millert
12621:
12622: * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12623: other sets defined. configure now does that for us
12624:
12625: 1998-10-18 17:45 millert
12626:
12627: * configure.in: move some --with options around change a bunch of
12628: echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12629:
12630: 1998-10-18 01:09 millert
12631:
12632: * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12633: that caused a syntax error add some echo verbage
12634:
12635: 1998-10-17 18:08 millert
12636:
12637: * check.c: moved SecureWare stuff into secureware.c
12638:
12639: 1998-10-17 18:07 millert
12640:
12641: * secureware.c: Initial revision
12642:
12643: 1998-10-17 17:02 millert
12644:
12645: * INSTALL: update url to solaris gcc bins
12646:
12647: 1998-10-17 16:39 millert
12648:
12649: * INSTALL: change option formatter and flesh out someentries
12650:
12651: 1998-10-17 16:18 millert
12652:
12653: * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12654: environment variable
12655:
12656: 1998-10-17 16:01 millert
12657:
12658: * BUGS: everything is now done via configure
12659:
12660: 1998-10-17 16:00 millert
12661:
12662: * README: prev rev was 1.5.6
12663:
12664: 1998-10-17 00:33 millert
12665:
12666: * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12667: correctly
12668:
12669: 1998-10-17 00:32 millert
12670:
12671: * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12672: the Makefile
12673:
12674: 1998-10-17 00:31 millert
12675:
12676: * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12677: sudoers_gid, sudoers_mode from configure
12678:
12679: 1998-10-17 00:30 millert
12680:
12681: * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12682: substituted into the Makefile, not config.h
12683:
12684: 1998-10-17 00:30 millert
12685:
12686: * INSTALL: document all --with/--enable options
12687:
12688: 1998-10-15 02:25 millert
12689:
12690: * insults.h: options.h is no more
12691:
12692: 1998-10-15 02:25 millert
12693:
12694: * config.h.in: assimilated options.h
12695:
12696: 1998-10-15 02:24 millert
12697:
12698: * configure.in: moved options from options.h to configure
12699:
12700: 1998-10-15 01:41 millert
12701:
12702: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12703: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12704: sudo_setenv.c, visudo.c: no more options.h
12705:
12706: 1998-10-15 01:39 millert
12707:
12708: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12709: to options.h
12710:
12711: 1998-10-15 01:32 millert
12712:
12713: * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12714:
12715: 1998-10-15 00:10 millert
12716:
12717: * tgetpass.c: if select return < -1 still prompt for pw
12718:
12719: 1998-10-15 00:03 millert
12720:
12721: * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12722: IGNORE_DOT_PATH into configure options
12723:
12724: 1998-10-14 23:57 millert
12725:
12726: * parse.c: FAST_MATCH is no longer an optino
12727:
12728: 1998-10-14 23:52 millert
12729:
12730: * check.c: remove_timestamp() if timestamp is preposterous
12731:
12732: 1998-10-14 23:36 millert
12733:
12734: * options.h: convert more options to --with/--enable
12735:
12736: 1998-10-14 23:36 millert
12737:
12738: * INSTALL, aclocal.m4: logfile -> logpath
12739:
12740: 1998-10-14 23:31 millert
12741:
12742: * configure.in: convert more options into --with and --enable
12743:
12744: 1998-10-14 23:28 millert
12745:
12746: * tgetpass.c: catch EINTR in select and restart
12747:
12748: 1998-10-14 23:15 millert
12749:
12750: * logging.c: sys/errno -> errno
12751:
12752: 1998-09-24 11:40 millert
12753:
12754: * sudo.c: UMASK -> SUDO_UMASK.
12755:
12756: 1998-09-24 11:36 millert
12757:
12758: * check.c, logging.c: time.h, not sys/time.h
12759:
12760: 1998-09-21 19:52 millert
12761:
12762: * logging.c: MAILER -> _PATH_SENDMAIL
12763:
12764: 1998-09-21 00:06 millert
12765:
12766: * INSTALL, configure.in: no more --with-C2, now it is
12767: --disable-shadow
12768:
12769: 1998-09-21 00:00 millert
12770:
12771: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12772: getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12773: Always include shadow support if the platform supports it and the
12774: user did not disable it via configure
12775:
12776: 1998-09-20 19:48 millert
12777:
12778: * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12779:
12780: 1998-09-20 19:16 millert
12781:
12782: * Makefile.in: pathnames.h -> pathnames.h.in
12783:
12784: 1998-09-20 19:14 millert
12785:
12786: * check.c: fix version string
12787:
12788: 1998-09-20 19:12 millert
12789:
12790: * check.c: move pam_conv to be static to auth function remove
12791: pam_misc.h (solaris doesn't have one)
12792:
12793: 1998-09-20 19:10 millert
12794:
12795: * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12796: SUDO_PROG_PWD
12797:
12798: 1998-09-20 19:10 millert
12799:
12800: * configure.in: munge pathnames.h.in -> pathnames.h kill
12801: SUDO_PROG_PWD
12802:
12803: 1998-09-20 19:10 millert
12804:
12805: * pathnames.h.in: convert to pathnames.h.in
12806:
12807: 1998-09-18 20:20 millert
12808:
12809: * configure.in: fix typo in sysv4 matching case /.
12810:
12811: 1998-09-18 01:29 millert
12812:
12813: * check.c: pam stuff needs to run as root, not user, for shadow
12814: passwords
12815:
12816: 1998-09-17 12:26 millert
12817:
12818: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12819: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12820: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12821: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12822: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12823: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12824: BUGS, INSTALL, README, configure.in: updated version
12825:
12826: 1998-09-17 12:13 millert
12827:
12828: * check.c: user version.h for long message
12829:
12830: 1998-09-17 11:53 millert
12831:
12832: * check.c: this is version 1.5.6
12833:
12834: 1998-09-16 13:42 millert
12835:
12836: * Makefile.in: remove errant backslash
12837:
12838: 1998-09-14 22:25 millert
12839:
12840: * options.h, parse.yacc, pathnames.h.in: fix version string
12841:
12842: 1998-09-14 22:02 millert
12843:
12844: * BUGS, CHANGES, TODO: updtaed for 1.5.6
12845:
12846: 1998-09-14 22:02 millert
12847:
12848: * RUNSON: updated for 1.5.6
12849:
12850: 1998-09-14 11:48 millert
12851:
12852: * interfaces.c: kill unused localhost_mask var copy if name to
12853: ifr_tmp after we zero it
12854:
12855: 1998-09-13 15:50 millert
12856:
12857: * INSTALL: Better description of new vs. old sudoers modes fix some
12858: typos better description of /usr/ucb/cc gotchas on slowaris
12859:
12860: 1998-09-13 15:49 millert
12861:
12862: * Makefile.in: add sample.pam
12863:
12864: 1998-09-13 15:32 millert
12865:
12866: * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12867:
12868: 1998-09-12 11:10 millert
12869:
12870: * README: mention TROUBLESHOOTING more fix some typos
12871:
12872: 1998-09-11 20:30 millert
12873:
12874: * configure.in: move --enable/--disable to be after --with
12875:
12876: 1998-09-11 20:30 millert
12877:
12878: * INSTALL: document --enable/--disable
12879:
12880: 1998-09-11 20:26 millert
12881:
12882: * INSTALL: document --with-pam
12883:
12884: 1998-09-11 19:47 millert
12885:
12886: * configure.in: Add message for pam users
12887:
12888: 1998-09-11 19:27 millert
12889:
12890: * sample.pam: Initial revision
12891:
12892: 1998-09-11 19:23 millert
12893:
12894: * config.h.in: fix HAVE_PAM
12895:
12896: 1998-09-11 19:19 millert
12897:
12898: * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12899: <GCalvin@kenwoodusa.com>
12900:
12901: 1998-09-10 18:51 millert
12902:
12903: * config.h.in: add HOST_IN_LOG and WRAP_LOG
12904:
12905: 1998-09-10 18:51 millert
12906:
12907: * logging.c: add WRAP_LOG and HOST_IN_LOG
12908:
12909: 1998-09-10 18:37 millert
12910:
12911: * configure.in: add --enable-log-host and --enable-log-wrap
12912:
12913: 1998-09-10 18:32 millert
12914:
12915: * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12916: --with-timedir
12917:
12918: 1998-09-08 20:45 millert
12919:
12920: * compat.h: add howmany macro
12921:
12922: 1998-09-08 20:43 millert
12923:
12924: * tgetpass.c: include sys/param.h to get howmany macro
12925:
12926: 1998-09-07 20:42 millert
12927:
12928: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12929: add RUNAS_DEFAULT
12930:
12931: 1998-09-07 12:51 millert
12932:
12933: * fnmatch.c: bring in stdio.h for NULL
12934:
12935: 1998-09-07 12:50 millert
12936:
12937: * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12938:
12939: 1998-09-07 12:43 millert
12940:
12941: * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12942:
12943: 1998-09-07 12:42 millert
12944:
12945: * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12946:
12947: 1998-09-07 12:41 millert
12948:
12949: * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12950: if secureware
12951:
12952: 1998-09-07 12:39 millert
12953:
12954: * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12955:
12956: 1998-09-07 12:06 millert
12957:
12958: * interfaces.c: initialize previfname
12959:
12960: 1998-09-07 11:51 millert
12961:
12962: * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12963: SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12964: IFF_LOOPBACK instead of kludging it
12965:
12966: 1998-09-07 11:49 millert
12967:
12968: * configure.in: typo
12969:
12970: 1998-09-07 00:01 millert
12971:
12972: * Makefile.in: don't need special build line for sudo.tab.o
12973:
12974: 1998-09-06 23:58 millert
12975:
12976: * Makefile.in: don't clean sudo.tab.[ch]
12977:
12978: 1998-09-06 23:48 millert
12979:
12980: * sudo.c: Sudo should prompt for a password before telling the user
12981: that a command could not be found.
12982:
12983: 1998-09-06 23:47 millert
12984:
12985: * BUGS: for 1.5.6
12986:
12987: 1998-09-06 23:25 millert
12988:
12989: * INSTALL, README: no longer require yacc
12990:
12991: 1998-09-06 23:19 millert
12992:
12993: * Makefile.in: typo
12994:
12995: 1998-09-06 23:18 millert
12996:
12997: * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12998:
12999: 1998-09-06 23:09 millert
13000:
13001: * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
13002: command args if you get a '='
13003:
13004: 1998-09-06 22:59 millert
13005:
13006: * insults.h: fix version ,
13007:
13008: 1998-09-06 22:57 millert
13009:
13010: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
13011: fix version
13012:
13013: 1998-09-06 22:55 millert
13014:
13015: * getcwd.c: getcwd(3) from OpenBSD for those without it.
13016:
13017: 1998-09-06 22:51 millert
13018:
13019: * sudo.h: HAVE_GETWD -> HAVE_GETCWD
13020:
13021: 1998-09-06 22:49 millert
13022:
13023: * configure.in: pretend sunos doesn't have getcwd(3) since it opens
13024: a pipe to getpwd!
13025:
13026: 1998-09-06 22:41 millert
13027:
13028: * parse.c: use NAMLEN() macro
13029:
13030: 1998-09-06 22:34 millert
13031:
13032: * fnmatch.c: remove duplicate include of string.h
13033:
13034: 1998-09-06 22:28 millert
13035:
13036: * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
13037:
13038: 1998-09-06 22:28 millert
13039:
13040: * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
13041:
13042: 1998-09-06 22:28 millert
13043:
13044: * config.h.in: add dev_t and ino_t
13045:
13046: 1998-07-28 12:44 millert
13047:
13048: * check.c: fix OTP_ONLY for opie
13049:
13050: 1998-06-24 12:22 millert
13051:
13052: * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
13053:
13054: 1998-05-19 00:10 millert
13055:
13056: * Makefile.in: make update_version saner
13057:
13058: 1998-05-18 23:32 millert
13059:
13060: * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
13061:
13062: 1998-05-18 23:32 millert
13063:
13064: * configure.in: check for waitpid and wait3 or no waitpid
13065:
13066: 1998-05-18 23:31 millert
13067:
13068: * logging.c: used waitpid or wait3 if we have 'em
13069:
13070: 1998-05-02 14:16 millert
13071:
13072: * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
13073: Faigon)
13074:
13075: 1998-04-27 20:09 millert
13076:
13077: * configure.in: don't need to explicately mention -lsocket -lnsl
13078: for sequent
13079:
13080: 1998-04-25 01:56 millert
13081:
13082: * configure.in: dynix should not link with -linet
13083:
13084: 1998-04-10 15:32 millert
13085:
13086: * INSTALL: mention that HP-UX doesn't ship with yacc
13087:
13088: 1998-04-06 22:35 millert
13089:
13090: * check.c: ignore kerberos if we can't get the local realm
13091:
13092: 1998-04-05 23:37 millert
13093:
13094: * configure.in, BUGS, INSTALL, README: ++version
13095:
13096: 1998-04-05 23:36 millert
13097:
13098: * version.h: ++
13099:
13100: 1998-04-05 23:35 millert
13101:
13102: * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
13103: find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
13104: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
13105: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
13106: visudo.c: updated version
13107:
13108: 1998-04-05 23:34 millert
13109:
13110: * check.c, sudo.h: fix version
13111:
13112: 1998-04-05 23:33 millert
13113:
13114: * getcwd.c: don't use popen/pclose. Do it inline.
13115:
13116: 1998-04-05 23:25 millert
13117:
13118: * lsearch.c: add rcsid
13119:
13120: 1998-04-05 23:21 millert
13121:
13122: * sudo.c: typo
13123:
13124: 1998-04-05 23:17 millert
13125:
13126: * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
13127: insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13128: check.c: updated version
13129:
13130: 1998-04-05 23:15 millert
13131:
13132: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
13133: MAX*
13134:
13135: 1998-04-05 23:14 millert
13136:
13137: * Makefile.in: getwd.c -> getcwd.c
13138:
13139: 1998-04-05 22:49 millert
13140:
13141: * config.h.in: kill HAVE_GETWD
13142:
13143: 1998-04-05 22:49 millert
13144:
13145: * configure.in: getcwd, not getwd
13146:
13147: 1998-04-05 22:48 millert
13148:
13149: * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
13150: defeats the purpose
13151:
13152: 1998-03-31 00:15 millert
13153:
13154: * OPTIONS, options.h: add STUB_LOAD_INTERFACES
13155:
13156: 1998-03-31 00:05 millert
13157:
13158: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13159: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13160: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13161: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13162: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13163: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13164: updated version
13165:
13166: 1998-03-30 23:54 millert
13167:
13168: * configure.in: support *-ccur-sysv4 and fix two typos
13169:
13170: 1998-03-27 19:52 millert
13171:
13172: * configure.in: don't echo about with_logfile and with_timedir
13173:
13174: 1998-03-27 19:49 millert
13175:
13176: * INSTALL: document --with-logfile and --with-timedir
13177:
13178: 1998-03-27 19:46 millert
13179:
13180: * aclocal.m4: support --with-logfile and --with-timedir
13181:
13182: 1998-03-27 19:46 millert
13183:
13184: * configure.in: Add --with-logfile and --with-timedir
13185:
13186: 1998-03-27 19:27 millert
13187:
13188: * sudo.c: change size computation of NewArgv for UNICOS
13189:
13190: 1998-02-18 20:10 millert
13191:
13192: * configure.in: treate -*-sysv4* like *-*-svr4
13193:
13194: 1998-02-18 18:19 millert
13195:
13196: * configure.in: fix spacing for --with-authenticate help
13197:
13198: 1998-02-18 16:39 millert
13199:
13200: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13201: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13202: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13203: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13204: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13205: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13206: updated version
13207:
13208: 1998-02-18 16:23 millert
13209:
13210: * parse.yacc: fix off by one error in push macro
13211:
13212: 1998-02-17 01:15 millert
13213:
13214: * configure.in: removed bogus alloca hack
13215:
13216: 1998-02-17 01:15 millert
13217:
13218: * check.c: added AIX 4.x authenticate() support
13219:
13220: 1998-02-17 01:11 millert
13221:
13222: * parse.yacc: include alloca.h if using bison and not gcc and it
13223: exists. fixes an alloca problem on hpux 10.x
13224:
13225: 1998-02-17 00:39 millert
13226:
13227: * INSTALL: mention --with-authenticate
13228:
13229: 1998-02-17 00:37 millert
13230:
13231: * configure.in: added AIX authenticate() support
13232:
13233: 1998-02-17 00:22 millert
13234:
13235: * config.h.in: add HAVE_AUTHENTICATE
13236:
13237: 1998-02-16 23:58 millert
13238:
13239: * interfaces.c: dynamically size ifconf buffer
13240:
13241: 1998-02-16 23:56 millert
13242:
13243: * configure.in: quote '[' and ']'
13244:
13245: 1998-02-16 21:42 millert
13246:
13247: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13248: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13249: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13250: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13251: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13252: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13253: updated version
13254:
13255: 1998-02-16 19:06 millert
13256:
13257: * visudo.pod: add ERRORS section
13258:
13259: 1998-02-16 18:57 millert
13260:
13261: * TROUBLESHOOTING: add busy stmp file explanation
13262:
13263: 1998-02-15 18:49 millert
13264:
13265: * configure.in: the name of the cached var that signals whether or
13266: not you are cross compiling changed. It is now
13267: ac_cv_prog_cc_cross
13268:
13269: 1998-02-11 16:26 millert
13270:
13271: * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13272:
13273: 1998-02-06 21:55 millert
13274:
13275: * sample.sudoers, sudoers.pod: better example of su but not root su
13276:
13277: 1998-02-06 15:49 millert
13278:
13279: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13280: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13281: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13282: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13283: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13284: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13285: updated version
13286:
13287: 1998-02-06 15:48 millert
13288:
13289: * Makefile.in: correct regexp for updating version
13290:
13291: 1998-02-06 14:05 millert
13292:
13293: * tgetpass.c: remove bogus flush of stderr spew prompt before
13294: turning off echo. Seems to fix a weird problem where if sudo
13295: complained about a bogus stamp file the user would sometimes not
13296: have a chance to enter a password
13297:
13298: 1998-02-06 14:05 millert
13299:
13300: * check.c: fix bogus flush of stderr
13301:
13302: 1998-02-05 19:19 millert
13303:
13304: * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13305:
13306: 1998-02-05 19:18 millert
13307:
13308: * configure.in: support hpux1[0-9] not just hpux10
13309:
13310: 1998-01-30 14:59 millert
13311:
13312: * parse.c: set sudoers_fp to nil after closing
13313:
13314: 1998-01-24 01:05 millert
13315:
13316: * config.guess, config.sub: updated from autoconf 2.12
13317:
13318: 1998-01-24 00:50 millert
13319:
13320: * configure.in: add *-*-svr4 rule
13321:
13322: 1998-01-22 22:53 millert
13323:
13324: * tgetpass.c: fix select usage for high fd's (dynamically allocate
13325: readfds)
13326:
13327: 1998-01-22 22:49 millert
13328:
13329: * check.c: kill extra whitespace
13330:
13331: 1998-01-22 19:28 millert
13332:
13333: * sudo.c: do an initgroups() before running a command, unless the
13334: target user is root.
13335:
13336: 1998-01-22 12:22 millert
13337:
13338: * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13339: syslog.conf
13340:
13341: 1998-01-21 01:56 millert
13342:
13343: * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13344: emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13345: version
13346:
13347: 1998-01-21 01:32 millert
13348:
13349: * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13350: updated version
13351:
13352: 1998-01-21 01:29 millert
13353:
13354: * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13355: ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13356: check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13357: updated version
13358:
13359: 1998-01-21 01:20 millert
13360:
13361: * Makefile.in: more tweaks to update_version
13362:
13363: 1998-01-21 01:19 millert
13364:
13365: * Makefile.in: fixed up update_version rule
13366:
13367: 1998-01-21 00:55 millert
13368:
13369: * configure.in: ++version
13370:
13371: 1998-01-21 00:53 millert
13372:
13373: * Makefile.in: removed supe of check.c
13374:
13375: 1998-01-21 00:51 millert
13376:
13377: * INSTALL: ++version I missed
13378:
13379: 1998-01-21 00:51 millert
13380:
13381: * RUNSON: updated
13382:
13383: 1998-01-21 00:48 millert
13384:
13385: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13386: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13387: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13388: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13389: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13390: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13391: visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13392:
13393: 1998-01-21 00:47 millert
13394:
13395: * CHANGES: updated for 1.5.5
13396:
13397: 1998-01-21 00:35 millert
13398:
13399: * Makefile.in: add rules to update version stuff in files so I
13400: don't need to do it by hand
13401:
13402: 1998-01-21 00:04 millert
13403:
13404: * sudo.h: sudoers_fp is now extern
13405:
13406: 1998-01-21 00:03 millert
13407:
13408: * sudo.c: in check_sudoers, cache the sudoers file handle in
13409: sudoers_fp so we don't have to open it again in the parse. This
13410: may help with weird solaris problems where EAGAIN sometime
13411: occurrs.
13412:
13413: 1998-01-21 00:02 millert
13414:
13415: * parse.c: sudoers file open is now done only in check_sudoers() so
13416: we just do a rewind() instead of an open. May help people on
13417: solaris who were getting EAGAIN.
13418:
13419: 1998-01-16 11:43 millert
13420:
13421: * INSTALL: mention that newer glibc is fixed
13422:
13423: 1998-01-13 12:58 millert
13424:
13425: * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13426: so ignore _RLD* instead of _RLD_*
13427:
13428: 1998-01-13 10:32 millert
13429:
13430: * parse.c: typo
13431:
13432: 1998-01-13 10:19 millert
13433:
13434: * parse.c: fix that bug for real
13435:
13436: 1998-01-13 02:39 millert
13437:
13438: * INSTALL: document Linux's libc6 brokenness.
13439:
13440: 1998-01-13 02:00 millert
13441:
13442: * parse.yacc: -Wall
13443:
13444: 1998-01-13 01:22 millert
13445:
13446: * RUNSON: updated
13447:
13448: 1998-01-13 00:50 millert
13449:
13450: * TROUBLESHOOTING: remind people to HUP syslogd
13451:
13452: 1998-01-13 00:05 millert
13453:
13454: * Makefile.in: add -O flag to tar
13455:
13456: 1998-01-13 00:00 millert
13457:
13458: * TODO, RUNSON: updated
13459:
13460: 1998-01-12 23:59 millert
13461:
13462: * sudo.pod: remove author's email addr. people should mail
13463: sudo-bugs
13464:
13465: 1998-01-12 23:49 millert
13466:
13467: * INSTALL: fix version
13468:
13469: 1998-01-12 23:48 millert
13470:
13471: * README, check.c, compat.h, config.h.in, configure.in,
13472: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13473: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13474: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13475: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13476: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13477: visudo.c: ++version
13478:
13479: 1998-01-12 23:44 millert
13480:
13481: * RUNSON: updated
13482:
13483: 1998-01-12 23:42 millert
13484:
13485: * INSTALL, Makefile.in: ++version
13486:
13487: 1998-01-12 23:41 millert
13488:
13489: * CHANGES: updated fort 1.5.4
13490:
13491: 1998-01-12 23:41 millert
13492:
13493: * check.c: exit(1) if user enters no passwd
13494:
13495: 1998-01-12 23:37 millert
13496:
13497: * BUGS: ++version
13498:
13499: 1998-01-12 23:10 millert
13500:
13501: * parse.c: commands can start with ./* not just /* -- fixes a
13502: serious security hole.
13503:
13504: 1997-12-21 18:17 millert
13505:
13506: * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13507: leave it as "unknown".
13508:
13509: 1997-11-23 13:29 millert
13510:
13511: * sample.sudoers: fix usage of (username) in conjunction with , and
13512: !
13513:
13514: 1997-11-23 13:28 millert
13515:
13516: * visudo.c: catch the case where the user is not in the passwd file
13517:
13518: 1997-11-23 13:24 millert
13519:
13520: * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13521: the nfds arg to select(2)
13522:
13523: 1997-11-23 01:53 millert
13524:
13525: * sudo.c: define tty global to an initial value to avoid dumping
13526: core in logging functions when passwd file is unavailable.
13527:
13528: 1997-11-23 01:51 millert
13529:
13530: * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13531: gotten the passwd entry
13532:
13533: 1997-11-23 00:21 millert
13534:
13535: * sudo.pod: talk about problem of ALL
13536:
13537: 1997-10-10 00:54 millert
13538:
13539: * README: new web location
13540:
13541: 1997-10-10 00:54 millert
13542:
13543: * INSTALL: fdesc bug is fixed in Open/Net BSD
13544:
13545: 1997-10-10 00:52 millert
13546:
13547: * HISTORY: updates from Nieusma
13548:
13549: 1997-10-09 18:37 millert
13550:
13551: * dce_pwent.c: move compat.h after the system includes
13552:
13553: 1997-08-06 14:58 millert
13554:
13555: * logging.c: save errno from being clobbered by wait(). From Theo
13556:
13557: 1997-05-21 11:57 millert
13558:
13559: * compat.h: fix an occurence of setresuid -> setreuid (typo)
13560:
13561: 1997-03-19 17:45 millert
13562:
13563: * install-sh: check for path to strip
13564:
13565: 1997-01-15 19:05 millert
13566:
13567: * logging.c: deal with maxfilelen < 0 case
13568:
13569: 1997-01-15 19:05 millert
13570:
13571: * OPTIONS: fixed descriptin
13572:
13573: 1996-12-11 23:10 millert
13574:
13575: * sudo.c: correct error message if mode/owner wrong and not
13576: statable by owner but is statable by root.
13577:
13578: 1996-11-23 02:18 millert
13579:
13580: * config.guess, config.sub: autoconf 2.11
13581:
13582: 1996-11-16 14:42 millert
13583:
13584: * CHANGES, RUNSON, TODO: sudo 1.5.3.
13585:
13586: 1996-11-14 15:08 millert
13587:
13588: * sudo.h, parse.yacc: command_alias -> generic_alias
13589:
13590: 1996-11-13 22:50 millert
13591:
13592: * sample.sudoers: added Runas_Alias example and fixed syntax errors
13593:
13594: 1996-11-13 22:50 millert
13595:
13596: * OPTIONS, options.h: updated MAILSUBJECT
13597:
13598: 1996-11-13 22:49 millert
13599:
13600: * logging.c: added %h expansion
13601:
13602: 1996-11-13 21:37 millert
13603:
13604: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13605: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13606: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13607: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13608: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13609: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13610: visudo.c, INSTALL, README, configure.in: ++version
13611:
13612: 1996-11-13 20:01 millert
13613:
13614: * emul/utime.h, BUGS: ++version
13615:
13616: 1996-11-13 19:45 millert
13617:
13618: * sudoers.pod: document Runas_Alias
13619:
13620: 1996-11-13 19:22 millert
13621:
13622: * visudo.pod: q (uid) -> Q
13623:
13624: 1996-11-13 19:21 millert
13625:
13626: * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13627: drop into whatnow
13628:
13629: 1996-11-13 19:05 millert
13630:
13631: * parse.yacc: add size params to sprintf
13632:
13633: 1996-11-13 19:04 millert
13634:
13635: * parse.lex: allow trailing space after '\\' but before '\n'
13636:
13637: 1996-11-13 19:04 millert
13638:
13639: * find_path.c: off by one error in path size check
13640:
13641: 1996-11-13 19:03 millert
13642:
13643: * check.c: sprintf paranoia
13644:
13645: 1996-11-12 11:59 millert
13646:
13647: * parse.yacc: fixed more_aliases
13648:
13649: 1996-11-12 11:58 millert
13650:
13651: * visudo.c: now warns if killed by signal ./
13652:
13653: 1996-11-11 10:49 millert
13654:
13655: * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13656: expanded (but it is gross)
13657:
13658: 1996-11-10 20:32 millert
13659:
13660: * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13661: 0400
13662:
13663: 1996-11-10 20:08 millert
13664:
13665: * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13666: USER_ALIAS)
13667:
13668: 1996-11-10 20:02 millert
13669:
13670: * parse.lex: Add Runas_Alias and simplify a rule.
13671:
13672: 1996-11-10 19:15 millert
13673:
13674: * parse.yacc: always store User_Alias's since they can be used
13675: inside of a runas list. Sigh. Really need a Runas_Alias
13676: instead.
13677:
13678: 1996-10-30 18:04 millert
13679:
13680: * visudo.c: deal with case where there is no sudoers file
13681:
13682: 1996-10-11 23:01 millert
13683:
13684: * TROUBLESHOOTING: added one
13685:
13686: 1996-10-10 22:11 millert
13687:
13688: * HISTORY, testsudoers.c: developement -> development
13689:
13690: 1996-10-10 22:08 millert
13691:
13692: * INSTALL: added a note
13693:
13694: 1996-10-10 20:36 millert
13695:
13696: * RUNSON: for 1.5.2
13697:
13698: 1996-10-10 20:36 millert
13699:
13700: * CHANGES: updated
13701:
13702: 1996-10-10 00:56 millert
13703:
13704: * PORTING: removed seteuid() notes
13705:
13706: 1996-10-09 13:37 millert
13707:
13708: * compat.h: better seteuid() emulatino
13709:
13710: 1996-10-09 13:36 millert
13711:
13712: * configure.in: added check for seteuid
13713:
13714: 1996-10-09 13:36 millert
13715:
13716: * config.h.in: added HAVE_SETEUID
13717:
13718: 1996-10-08 19:22 millert
13719:
13720: * configure.in: first stab at sequent support
13721:
13722: 1996-10-08 19:21 millert
13723:
13724: * config.h.in: added HAVE_SYS_SELECT_H
13725:
13726: 1996-10-08 19:21 millert
13727:
13728: * compat.h: sequent -> _SEQUENT_
13729:
13730: 1996-10-08 19:11 millert
13731:
13732: * compat.h: added seteuid() macro for DYNIX
13733:
13734: 1996-10-08 18:54 millert
13735:
13736: * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13737:
13738: 1996-10-07 01:05 millert
13739:
13740: * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13741: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13742: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13743: pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13744: README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13745: putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13746: visudo.c, tgetpass.c: ++version
13747:
13748: 1996-10-07 00:59 millert
13749:
13750: * sudo.pod: added -H and SUDO_PS1
13751:
13752: 1996-10-07 00:55 millert
13753:
13754: * configure.in: use SUDO_FUNC_FNMATCH
13755:
13756: 1996-10-07 00:54 millert
13757:
13758: * aclocal.m4: added SUDO_FUNC_FNMATCH
13759:
13760: 1996-10-07 00:53 millert
13761:
13762: * sudo.c: added -H flag
13763:
13764: 1996-10-07 00:53 millert
13765:
13766: * sudo.h: added MODE_RESET_HOME /
13767:
13768: 1996-10-05 00:00 millert
13769:
13770: * INSTALL: mention OPIE
13771:
13772: 1996-10-04 23:59 millert
13773:
13774: * configure.in: added opie support
13775:
13776: 1996-10-04 23:59 millert
13777:
13778: * check.c: added HAVE_OPIE and changed to *_OTP_*
13779:
13780: 1996-10-04 23:58 millert
13781:
13782: * compat.h, config.h.in: added HAVE_OPIE
13783:
13784: 1996-10-04 23:58 millert
13785:
13786: * OPTIONS, options.h: SKEY -> OTP
13787:
13788: 1996-10-03 23:27 millert
13789:
13790: * check.c: moved fclose() in skey stuff.
13791:
13792: 1996-10-03 19:53 millert
13793:
13794: * putenv.c: index -> strchr remove unnecesary stuff
13795:
13796: 1996-10-03 19:43 millert
13797:
13798: * check.c: now call skeychallenge() to get challenge instead of
13799: making one up ourselves. this way, we get extra goodies in the
13800: prompt.
13801:
13802: 1996-09-10 00:32 millert
13803:
13804: * CHANGES: added one
13805:
13806: 1996-09-10 00:18 millert
13807:
13808: * parse.lex: allow logins to start with a number (YUCK!)
13809:
13810: 1996-09-08 15:18 millert
13811:
13812: * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13813:
13814: 1996-09-08 15:15 millert
13815:
13816: * configure.in: DUNIX doesn't need -lnsl
13817:
13818: 1996-09-07 20:22 millert
13819:
13820: * CHANGES: [no log message]
13821:
13822: 1996-09-07 20:21 millert
13823:
13824: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13825: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13826: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13827: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13828: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13829: tgetpass.c, utime.c, version.h, visudo.c: courtesan
13830:
13831: 1996-09-07 20:13 millert
13832:
13833: * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13834: courtesan
13835:
13836: 1996-09-07 20:12 millert
13837:
13838: * visudo.pod: [no log message]
13839:
13840: 1996-09-07 20:00 millert
13841:
13842: * sudo.pod, visudo.pod: courtesan
13843:
13844: 1996-09-07 19:45 millert
13845:
13846: * HISTORY: added courtesan ./
13847:
13848: 1996-09-06 00:12 millert
13849:
13850: * sudo.c: added $SUDO_PROMPT support
13851:
13852: 1996-09-04 17:19 millert
13853:
13854: * check.c: print long skey challemged to stderr, not stdout
13855:
13856: 1996-08-31 23:10 millert
13857:
13858: * CHANGES: updated for 1.5.1
13859:
13860: 1996-08-31 23:07 millert
13861:
13862: * emul/utime.h: ++version
13863:
13864: 1996-08-31 12:34 millert
13865:
13866: * RUNSON: updated for 1.5.1
13867:
13868: 1996-08-30 10:49 millert
13869:
13870: * check.c: use shost, not host for tgetpass
13871:
13872: 1996-08-30 00:21 millert
13873:
13874: * OPTIONS, sudo.pod: documented %u and %h
13875:
13876: 1996-08-29 20:40 millert
13877:
13878: * configure.in: fixed typo
13879:
13880: 1996-08-29 20:37 millert
13881:
13882: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13883: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13884: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13885: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13886: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13887: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13888: visudo.c: ++version
13889:
13890: 1996-08-29 20:30 millert
13891:
13892: * BUGS: ++version
13893:
13894: 1996-08-29 18:32 millert
13895:
13896: * configure.in, Makefile.in, version.h: ++version
13897:
13898: 1996-08-29 17:58 millert
13899:
13900: * sudo.h: new tgetpass() params
13901:
13902: 1996-08-29 17:58 millert
13903:
13904: * check.c: pass use and host to tgetpass
13905:
13906: 1996-08-29 17:57 millert
13907:
13908: * tgetpass.c: added %u and %h escapes
13909:
13910: 1996-08-29 16:56 millert
13911:
13912: * OPTIONS, options.h, check.c: added NO_MESSAGE
13913:
13914: 1996-08-29 16:23 millert
13915:
13916: * configure.in: added cray (unicos) support
13917:
13918: 1996-08-27 11:36 millert
13919:
13920: * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13921:
13922: 1996-08-25 17:56 millert
13923:
13924: * INSTALL: added note about "make install"
13925:
13926: 1996-08-25 17:50 millert
13927:
13928: * parse.yacc: changed length/size params from int to size_t
13929:
13930: 1996-08-25 13:35 millert
13931:
13932: * OPTIONS: now get CSOPS insults as well by default
13933:
13934: 1996-08-25 13:33 millert
13935:
13936: * insults.h: use csops insults too by default
13937:
13938: 1996-08-25 13:31 millert
13939:
13940: * INSTALL, Makefile.in, README, config.h.in, configure.in,
13941: version.h: version = 1.5
13942:
13943: 1996-08-25 13:27 millert
13944:
13945: * sudo.c: added runas_homedir
13946:
13947: 1996-08-25 13:27 millert
13948:
13949: * TODO: updated for 1.5
13950:
13951: 1996-08-25 13:23 millert
13952:
13953: * RUNSON: updated for 1.5
13954:
13955: 1996-08-25 13:19 millert
13956:
13957: * CHANGES: 1.5 release
13958:
13959: 1996-08-25 13:17 millert
13960:
13961: * INSTALL: added "upgrading" notes
13962:
13963: 1996-08-22 14:00 millert
13964:
13965: * visudo.c: now do chmod and chown after edit of temp file and
13966: before rename
13967:
13968: 1996-08-18 12:52 millert
13969:
13970: * Makefile.in: ++version added INSTALL.configure
13971:
13972: 1996-08-18 12:52 millert
13973:
13974: * version.h, configure.in: ++version
13975:
13976: 1996-08-18 12:51 millert
13977:
13978: * TROUBLESHOOTING: [no log message]
13979:
13980: 1996-08-18 12:50 millert
13981:
13982: * parse.yacc: added missing cast
13983:
13984: 1996-08-17 20:37 millert
13985:
13986: * sudo.c: sets $HOME to pw_dir of runas user
13987:
13988: 1996-08-17 20:02 millert
13989:
13990: * sudo.pod: document $HOME change
13991:
13992: 1996-08-17 19:43 millert
13993:
13994: * sudo.pod: fixed up some wording
13995:
13996: 1996-08-17 19:25 millert
13997:
13998: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13999: goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
14000: parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
14001: testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
14002:
14003: 1996-08-17 19:19 millert
14004:
14005: * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
14006: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
14007: ++version
14008:
14009: 1996-08-17 19:18 millert
14010:
14011: * sudo.h: name nad type changes
14012:
14013: 1996-08-17 19:17 millert
14014:
14015: * testsudoers.c: now works with new sudo
14016:
14017: 1996-08-17 19:07 millert
14018:
14019: * parse.yacc: fixed some XXX
14020:
14021: 1996-08-17 18:52 millert
14022:
14023: * parse.yacc: some variable name changes + comment headers for
14024: functions.
14025:
14026: 1996-08-17 18:41 millert
14027:
14028: * tgetpass.c: added extra paren's to make compilers happy
14029:
14030: 1996-08-17 18:34 millert
14031:
14032: * sudo.c: [no log message]
14033:
14034: 1996-08-17 18:30 millert
14035:
14036: * parse.c: now uses init_parser() if not in sudoers and tries
14037: "list" or "validate" scold but don't be nasty.
14038:
14039: 1996-08-17 18:29 millert
14040:
14041: * TROUBLESHOOTING: now can use upper case login names
14042:
14043: 1996-08-17 18:29 millert
14044:
14045: * visudo.c: now uses init_parser()
14046:
14047: 1996-08-17 18:28 millert
14048:
14049: * PORTING: added info about PASSWORD_TIMEOUT
14050:
14051: 1996-08-17 18:28 millert
14052:
14053: * INSTALL, README: updated
14054:
14055: 1996-08-17 18:28 millert
14056:
14057: * INSTALL.configure: Initial revision
14058:
14059: 1996-08-17 18:27 millert
14060:
14061: * BUGS: fixed a bug ,
14062:
14063: 1996-08-17 18:27 millert
14064:
14065: * parse.yacc: now dynamically allocates memory for the stacks -- no
14066: more overflows!
14067:
14068: 1996-08-17 18:26 millert
14069:
14070: * sudo.pod: -l now explands command aliases
14071:
14072: 1996-08-17 13:22 millert
14073:
14074: * parse.yacc: hacks to expand command aliases for `sudo -l'
14075:
14076: 1996-08-17 13:22 millert
14077:
14078: * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
14079: and bash)
14080:
14081: 1996-08-17 13:22 millert
14082:
14083: * sudo.h: added struct command_alias
14084:
14085: 1996-08-17 13:20 millert
14086:
14087: * sudo.pod: fixed a bug
14088:
14089: 1996-08-17 13:15 millert
14090:
14091: * lsearch.c: in compar() key should be first arg
14092:
14093: 1996-08-15 15:48 millert
14094:
14095: * BUGS: fixed some bugs
14096:
14097: 1996-08-15 15:47 millert
14098:
14099: * parse.yacc: can now deal with upcase HOST and USER names
14100:
14101: 1996-08-15 15:47 millert
14102:
14103: * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
14104:
14105: 1996-08-15 15:46 millert
14106:
14107: * sudo.pod: fixed thinko
14108:
14109: 1996-08-15 15:46 millert
14110:
14111: * parse.c: fix comment
14112:
14113: 1996-08-09 18:07 millert
14114:
14115: * parse.c, parse.yacc: added support for new `sudo -l' stuff
14116:
14117: 1996-08-09 18:06 millert
14118:
14119: * sudo.c: now uses list_matches()
14120:
14121: 1996-08-09 18:06 millert
14122:
14123: * sudo.h: added struct sudo_match
14124:
14125: 1996-08-09 17:37 millert
14126:
14127: * configure.in: now more -lgnumalloc
14128:
14129: 1996-08-01 13:12 millert
14130:
14131: * install-sh: added more paths for chown and whoami
14132:
14133: 1996-07-31 10:41 millert
14134:
14135: * check.c: typo
14136:
14137: 1996-07-30 13:45 millert
14138:
14139: * aclocal.m4: fixed DUNIX check for shadow pw
14140:
14141: 1996-07-30 13:41 millert
14142:
14143: * tgetpass.c: now only turn off echo if it is already on. this
14144: fixes a race when you use sudo in a pipelin
14145:
14146: 1996-07-30 12:53 millert
14147:
14148: * INSTALL: updated
14149:
14150: 1996-07-29 22:29 millert
14151:
14152: * configure.in: changed "test -z $foo && do_this" to if; then
14153: construct
14154:
14155: 1996-07-28 22:47 millert
14156:
14157: * configure.in: added missing defines of SHADOW_TYPE
14158:
14159: 1996-07-26 14:10 millert
14160:
14161: * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
14162: they are only in dunix 4.x
14163:
14164: 1996-07-26 14:09 millert
14165:
14166: * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
14167:
14168: 1996-07-26 13:23 millert
14169:
14170: * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
14171: that didn't match. Now we can have runas stuff on more than one
14172: line.
14173:
14174: 1996-07-25 23:45 millert
14175:
14176: * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
14177: defined to something
14178:
14179: 1996-07-25 23:45 millert
14180:
14181: * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
14182:
14183: 1996-07-25 23:44 millert
14184:
14185: * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
14186: instead of HAVE_C2_SECURITY
14187:
14188: 1996-07-25 23:44 millert
14189:
14190: * check.c: SHADOW_TYPE is always defined so just against its value
14191:
14192: 1996-07-25 23:44 millert
14193:
14194: * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14195:
14196: 1996-07-25 18:47 millert
14197:
14198: * sudoers.pod: * -> ?* in one example added another instance of
14199: (runas) and one of NOPASSWD:
14200:
14201: 1996-07-24 13:02 millert
14202:
14203: * configure.in: added back check for config.cache from other host
14204: type
14205:
14206: 1996-07-24 12:49 millert
14207:
14208: * parse.lex: removed an instance of \"
14209:
14210: 1996-07-24 12:49 millert
14211:
14212: * sample.sudoers: added an example
14213:
14214: 1996-07-24 12:44 millert
14215:
14216: * sudoers.pod: updated wrt new wildcard matching
14217:
14218: 1996-07-24 10:28 millert
14219:
14220: * configure.in: new check for shadow passwords if we don't know
14221: anything
14222:
14223: 1996-07-24 10:28 millert
14224:
14225: * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14226:
14227: 1996-07-24 02:19 millert
14228:
14229: * configure.in: added back check for -lsocket (oops)
14230:
14231: 1996-07-24 02:16 millert
14232:
14233: * configure.in: better (working) check for shadow passwd type if we
14234: know to use C2.
14235:
14236: 1996-07-24 01:59 millert
14237:
14238: * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14239:
14240: 1996-07-24 01:59 millert
14241:
14242: * Makefile.in: added config.{guess,sub}
14243:
14244: 1996-07-24 01:58 millert
14245:
14246: * aclocal.m4: removed unused stuff to figure out os type
14247:
14248: 1996-07-23 22:58 millert
14249:
14250: * config.sub: added openbsd
14251:
14252: 1996-07-23 22:54 millert
14253:
14254: * config.sub: Initial revision
14255:
14256: 1996-07-23 22:40 millert
14257:
14258: * config.guess: Initial revision
14259:
14260: 1996-07-23 21:18 millert
14261:
14262: * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14263: it can only be a pathname. need to check against sudoers_args
14264: even if user_args is nil
14265:
14266: 1996-07-23 21:18 millert
14267:
14268: * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14269: can only be a pathname need to check against sudoers_args even if
14270: user_args is nil
14271:
14272: 1996-07-23 18:52 millert
14273:
14274: * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14275:
14276: 1996-07-23 01:18 millert
14277:
14278: * testsudoers.c: now takes command line args and uses cmnd_args
14279:
14280: 1996-07-23 01:10 millert
14281:
14282: * parse.lex: fill_args was adding an extra leading space
14283:
14284: 1996-07-22 15:50 millert
14285:
14286: * visudo.c: fixed dummy command_matches()
14287:
14288: 1996-07-22 15:50 millert
14289:
14290: * parse.yacc: fixed prototype
14291:
14292: 1996-07-22 15:31 millert
14293:
14294: * sudo.h: added cmnd_args
14295:
14296: 1996-07-22 15:31 millert
14297:
14298: * parse.yacc: now uses flat args string
14299:
14300: 1996-07-22 15:30 millert
14301:
14302: * parse.c, parse.lex: now uses flat arg string
14303:
14304: 1996-07-22 15:29 millert
14305:
14306: * visudo.c: added cmnd_args def
14307:
14308: 1996-07-22 14:30 millert
14309:
14310: * sudo.c: now sets cmnd_args global
14311:
14312: 1996-07-22 14:30 millert
14313:
14314: * logging.c: cmnd_args is now exported from sudo.[ch]
14315:
14316: 1996-07-21 18:41 millert
14317:
14318: * parse.yacc: can't rely on cmnd_matches as much as I thought --
14319: added some $$ stuff back in to prevent namespace pollution
14320: problems.
14321:
14322: 1996-07-21 18:01 millert
14323:
14324: * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14325: consistent).
14326:
14327: 1996-07-20 00:45 millert
14328:
14329: * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14330: starts a 'runas' if in the initial state to avoid collision with
14331: command args
14332:
14333: 1996-07-20 00:23 millert
14334:
14335: * configure.in: added checks for specific shadow passwd schemes
14336:
14337: 1996-07-20 00:18 millert
14338:
14339: * aclocal.m4: added routines to check for specific shadow passwd
14340: types
14341:
14342: 1996-07-18 18:27 millert
14343:
14344: * configure.in: added support for ncr boxen
14345:
14346: 1996-07-18 18:26 millert
14347:
14348: * aclocal.m4: added support for detecting ncr boxen
14349:
14350: 1996-07-16 14:57 millert
14351:
14352: * configure.in: added sinix support
14353:
14354: 1996-07-13 22:29 millert
14355:
14356: * TROUBLESHOOTING: added info about "config.cache from other other"
14357: error.
14358:
14359: 1996-07-13 22:22 millert
14360:
14361: * aclocal.m4: now makes sure you don't have a config.cache file
14362: from another OS
14363:
14364: 1996-07-13 21:36 millert
14365:
14366: * configure.in: now sets $LIBS when needed to configure links with
14367: libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14368: check for bigcrypt(3) if SPW_SECUREWARE
14369:
14370: 1996-07-13 21:30 millert
14371:
14372: * getspwuid.c: fixed typo
14373:
14374: 1996-07-13 21:05 millert
14375:
14376: * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14377: AUTH_MAX_PASSWD_LENGTH
14378:
14379: 1996-07-13 21:05 millert
14380:
14381: * getspwuid.c: no more SPW_HPUX10
14382:
14383: 1996-07-13 21:04 millert
14384:
14385: * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14386:
14387: 1996-07-13 21:04 millert
14388:
14389: * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14390:
14391: 1996-07-13 21:04 millert
14392:
14393: * check.c: SPW_SECUREWARE now uses bigcrypt
14394:
14395: 1996-07-13 18:24 millert
14396:
14397: * sample.sudoers: fixed 2 syntax errors
14398:
14399: 1996-07-13 18:24 millert
14400:
14401: * sudoers: root may now run ALL as ALL
14402:
14403: 1996-07-11 20:59 millert
14404:
14405: * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14406:
14407: 1996-07-08 16:08 millert
14408:
14409: * check.c, configure.in: updated AFS support
14410:
14411: 1996-07-08 16:07 millert
14412:
14413: * TROUBLESHOOTING: added entry about /usr/ucb/cc
14414:
14415: 1996-07-08 16:06 millert
14416:
14417: * INSTALL: prep no longer holds gcc binaries
14418:
14419: 1996-07-08 15:48 millert
14420:
14421: * INSTALL: updated AFS note
14422:
14423: 1996-07-08 15:43 millert
14424:
14425: * Makefile.in: added @AFS_LIBS@
14426:
14427: 1996-07-08 15:33 millert
14428:
14429: * compat.h: AFS allows long passwords
14430:
14431: 1996-07-08 14:16 millert
14432:
14433: * testsudoers.c: fixed -u user support
14434:
14435: 1996-07-08 14:16 millert
14436:
14437: * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14438:
14439: 1996-07-08 13:30 millert
14440:
14441: * parse.yacc: fixed no_passwd vs. runas_matched
14442:
14443: 1996-07-08 10:30 millert
14444:
14445: * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14446: longer an issue
14447:
14448: 1996-07-08 10:30 millert
14449:
14450: * INSTALL: added --with-libraries > --with-libpath --with-incpath
14451:
14452: 1996-07-08 10:21 millert
14453:
14454: * parse.yacc: was setting runas_matches to -1 in wrong place
14455:
14456: 1996-07-08 09:58 millert
14457:
14458: * check.c: removed usersec.h which is not present in new AFS
14459: versions
14460:
14461: 1996-07-08 09:55 millert
14462:
14463: * tgetpass.c: now deals with timeout <= 0
14464:
14465: 1996-07-08 09:51 millert
14466:
14467: * OPTIONS: updated
14468:
14469: 1996-07-08 00:04 millert
14470:
14471: * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14472:
14473: 1996-07-07 22:30 millert
14474:
14475: * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14476: for root readable/writable filesystems
14477:
14478: 1996-07-07 20:49 millert
14479:
14480: * Makefile.in: now gives INSTALL -c flag
14481:
14482: 1996-07-07 20:34 millert
14483:
14484: * parse.yacc: slightly simpler initialization of no_passwd and
14485: runas_matches
14486:
14487: 1996-07-07 20:33 millert
14488:
14489: * testsudoers.c: added -u username support
14490:
14491: 1996-07-07 20:32 millert
14492:
14493: * configure.in: improved --with-libraries support
14494:
14495: 1996-07-07 16:27 millert
14496:
14497: * configure.in: added --with-incpath, --with-libpath,
14498: --with-libraries
14499:
14500: 1996-07-07 16:01 millert
14501:
14502: * parse.yacc: now initializes some fields that weren't getting set
14503: to -1 pretty gross -- need a rewrite.
14504:
14505: 1996-06-25 23:19 millert
14506:
14507: * alloca.c: removed emacs'isms
14508:
14509: 1996-06-25 22:29 millert
14510:
14511: * configure.in: no longer add -lPW to *_LIBS since we include
14512: alloca.c
14513:
14514: 1996-06-25 22:29 millert
14515:
14516: * config.h.in: added HAVE_ALLOCA_H
14517:
14518: 1996-06-25 22:28 millert
14519:
14520: * Makefile.in: added alloca.c
14521:
14522: 1996-06-25 22:18 millert
14523:
14524: * alloca.c: Initial revision
14525:
14526: 1996-06-25 21:58 millert
14527:
14528: * configure.in: ++version
14529:
14530: 1996-06-25 19:32 millert
14531:
14532: * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14533: nobody is not always set to a valid uid.
14534:
14535: 1996-06-25 19:31 millert
14536:
14537: * OPTIONS: fixed entry for SUDO_MODE
14538:
14539: 1996-06-25 18:02 millert
14540:
14541: * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14542: *and* gid were being set to -2. Now beat NFS to the punch and
14543: set uid to "nobody" ourselves, preserving group 0 to read
14544: sudoers.
14545:
14546: 1996-06-25 18:02 millert
14547:
14548: * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14549:
14550: 1996-06-25 18:00 millert
14551:
14552: * logging.c: fixed a typo
14553:
14554: 1996-06-25 18:00 millert
14555:
14556: * configure.in: no longer need AC_PROG_INSTALL
14557:
14558: 1996-06-25 17:59 millert
14559:
14560: * Makefile.in: always use install-sh to avoid install(1)'s that use
14561: get{pw,gr}nam
14562:
14563: 1996-06-25 16:07 millert
14564:
14565: * INSTALL: make clean -> make distclean
14566:
14567: 1996-06-20 01:17 millert
14568:
14569: * parse.yacc: removed some unnecsary if's
14570:
14571: 1996-06-20 01:16 millert
14572:
14573: * Makefile.in, version.h: ++version
14574:
14575: 1996-06-20 01:16 millert
14576:
14577: * parse.c, testsudoers.c: now includes netgroup.h
14578:
14579: 1996-06-20 00:45 millert
14580:
14581: * interfaces.c: removed cats of ioctl to int since they didn't shut
14582: up -Wall
14583:
14584: 1996-06-20 00:43 millert
14585:
14586: * interfaces.c: explicately cast ioctl() to int since it it not
14587: always declared
14588:
14589: 1996-06-20 00:41 millert
14590:
14591: * sudo.h: added declarations for yyparse() and yylex()
14592:
14593: 1996-06-20 00:27 millert
14594:
14595: * parse.yacc: fixed an occurence of '==' -> '='
14596:
14597: 1996-06-20 00:22 millert
14598:
14599: * config.h.in, configure.in: added check for netgroup.h
14600:
14601: 1996-06-20 00:20 millert
14602:
14603: * sudo.c: fixed 2 compiler warnings
14604:
14605: 1996-06-20 00:08 millert
14606:
14607: * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14608: weren't being initialized
14609:
14610: 1996-06-19 13:53 millert
14611:
14612: * sudo.pod: fixed a typo
14613:
14614: 1996-06-17 12:19 millert
14615:
14616: * parse.yacc: fixed a formatting thingie
14617:
14618: 1996-06-17 12:16 millert
14619:
14620: * parse.c, parse.yacc: fixed -u support with multiple user lists on
14621: a line
14622:
14623: 1996-06-17 10:23 millert
14624:
14625: * configure.in: unixware needs -lgen
14626:
14627: 1996-06-17 10:23 millert
14628:
14629: * README: updated ftp location
14630:
14631: 1996-06-17 00:08 millert
14632:
14633: * sudoers.pod: add net_addr/netmask support
14634:
14635: 1996-06-17 00:07 millert
14636:
14637: * sample.sudoers: added net_addr/mask example
14638:
14639: 1996-06-17 00:02 millert
14640:
14641: * parse.lex, parse.c: added support for net_addr/netmask
14642:
14643: 1996-06-15 20:13 millert
14644:
14645: * sudoers.pod: ^ -> !
14646:
14647: 1996-06-15 18:12 millert
14648:
14649: * RUNSON: updated for 1.4.3
14650:
14651: 1996-06-15 18:12 millert
14652:
14653: * CHANGES: udpated for 1.4.3
14654:
14655: 1996-06-15 18:11 millert
14656:
14657: * TROUBLESHOOTING, TODO, BUGS: updated
14658:
14659: 1996-06-15 18:11 millert
14660:
14661: * sample.sudoers: updated with examples of new stuff
14662:
14663: 1996-06-15 18:10 millert
14664:
14665: * INSTALL, README: ++version
14666:
14667: 1996-06-15 18:01 millert
14668:
14669: * sudoers.pod: updated wrt -u and NOPASSWD
14670:
14671: 1996-06-15 17:58 millert
14672:
14673: * sudo.pod: updated wrt -u and CAVEATS
14674:
14675: 1996-06-08 23:15 millert
14676:
14677: * sudo.c: fixed usage()
14678:
14679: 1996-06-08 22:57 millert
14680:
14681: * parse.lex: now use :foo: character classes (makes no diff for
14682: generated lexer)
14683:
14684: 1996-06-07 14:33 millert
14685:
14686: * check.c: fixed LONG_SKEY_PROMPT stuff
14687:
14688: 1996-06-06 15:35 millert
14689:
14690: * visudo.c: fixed a comment
14691:
14692: 1996-06-06 15:03 millert
14693:
14694: * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14695:
14696: 1996-06-06 15:02 millert
14697:
14698: * emul/search.h: fixed decls of lsearch()
14699:
14700: 1996-06-05 22:20 millert
14701:
14702: * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14703:
14704: 1996-06-05 22:20 millert
14705:
14706: * check.c: hpux 10 uses bigcrypt() if C2
14707:
14708: 1996-06-04 19:57 millert
14709:
14710: * parse.c: now always uses fnmatch to match args
14711:
14712: 1996-06-04 19:40 millert
14713:
14714: * tgetpass.c: back to using stdio instead of raw i/o since that
14715: caused some problems
14716:
14717: 1996-05-28 22:14 millert
14718:
14719: * sudo.c: now give usage warning if use -l,-v,-k with args
14720:
14721: 1996-05-28 18:22 millert
14722:
14723: * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14724:
14725: 1996-05-28 12:50 millert
14726:
14727: * sudo.c: now sets sudoers to correct group if mode is 0400
14728:
14729: 1996-05-28 12:02 millert
14730:
14731: * install-sh: updated to version used by inn and bind
14732:
14733: 1996-05-28 00:08 millert
14734:
14735: * configure.in: now uses -lgnumalloc if it exists
14736:
14737: 1996-05-28 00:02 millert
14738:
14739: * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14740: if it exists
14741:
14742: 1996-05-28 00:01 millert
14743:
14744: * sudo.c: rmeoved debugging statements
14745:
14746: 1996-05-28 00:00 millert
14747:
14748: * parse.yacc: added a missing free()
14749:
14750: 1996-05-27 23:58 millert
14751:
14752: * sudo.c: now uses user_gid instead of getegid (which was wrong
14753: anyway) to set SUDO_GID Now sets command line args in
14754: SUDO_COMMAND envariabled (logging.c depends on args being in the
14755: environment)
14756:
14757: 1996-05-27 23:57 millert
14758:
14759: * logging.c: now uses SUDO_COMMAND envariable to get command args
14760: rather than building it up again.
14761:
14762: 1996-05-27 22:42 millert
14763:
14764: * parse.c: now uses user_gid
14765:
14766: 1996-05-27 20:02 millert
14767:
14768: * sudo.c: fixed off by one error in allocation NewArgv
14769:
14770: 1996-05-27 20:01 millert
14771:
14772: * parse.c: in sudoers, 'command ""' now means command with no args
14773:
14774: 1996-05-27 20:01 millert
14775:
14776: * configure.in: added check for fnmatch(3) and fnmatch.h
14777:
14778: 1996-05-27 20:01 millert
14779:
14780: * config.h.in: added HAVE_FNMATCH
14781:
14782: 1996-05-27 20:00 millert
14783:
14784: * Makefile.in: replaced wildcat.* with fnmatch.*
14785:
14786: 1996-05-27 20:00 millert
14787:
14788: * testsudoers.c: now uses fnmatch()
14789:
14790: 1996-05-27 19:38 millert
14791:
14792: * parse.c: now uses fnmatch() instead of wildmat a trailing star
14793: (*) by itself now matches multiple args added support for
14794: wildcards in the pathname in sudoers
14795:
14796: 1996-05-25 19:23 millert
14797:
14798: * fnmatch.c: now includes compat.h and config.h
14799:
14800: 1996-05-25 18:09 millert
14801:
14802: * config.h.in: added HAVE_FNMATCH_H
14803:
14804: 1996-05-25 18:07 millert
14805:
14806: * configure.in: now checks for alloca() (if needed by bison or dce)
14807: and links with -lPW if it contains alloca() and libv and compiler
14808: do not.
14809:
14810: 1996-05-25 18:03 millert
14811:
14812: * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14813:
14814: 1996-04-28 22:38 millert
14815:
14816: * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14817: upgrade
14818:
14819: 1996-04-28 17:44 millert
14820:
14821: * Makefile.in: fixed pod2man usage
14822:
14823: 1996-04-28 17:40 millert
14824:
14825: * configure.in, Makefile.in, version.h: ++version
14826:
14827: 1996-04-28 17:20 millert
14828:
14829: * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14830:
14831: 1996-04-28 17:20 millert
14832:
14833: * sudo.h: removed PERM_FULL_ROOT
14834:
14835: 1996-04-28 17:18 millert
14836:
14837: * sudo.c: runas_user defaults to "root" so no more need to
14838: PERM_RUNAS
14839:
14840: 1996-04-28 17:16 millert
14841:
14842: * parse.c: will now only running commands as root if there was no
14843: runas list (or if root is in the runas list)
14844:
14845: 1996-04-28 17:15 millert
14846:
14847: * logging.c: now logs "USER=%s"
14848:
14849: 1996-04-28 17:12 millert
14850:
14851: * parse.yacc: runas_matches is now set to false if we get a
14852: negative match
14853:
14854: 1996-04-28 15:01 millert
14855:
14856: * parse.lex: make #uid work + some minor cleanup
14857:
14858: 1996-04-27 21:04 millert
14859:
14860: * sample.sudoers: added support for NOPASSWD and "runas" from
14861: garp@opustel.com /
14862:
14863: 1996-04-27 21:03 millert
14864:
14865: * visudo.c: added support for "runas" from garp@opustel.com
14866: replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14867: support for SUDOERS_MODE
14868:
14869: 1996-04-27 21:03 millert
14870:
14871: * testsudoers.c: added support for "runas" from garp@opustel.com
14872:
14873: 1996-04-27 21:02 millert
14874:
14875: * sudo.h: added support for NO_PASSWD and runas from
14876: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14877: SUDOERS_GID and added support fro SUDOERS_MODE
14878:
14879: 1996-04-27 21:00 millert
14880:
14881: * sudo.c: added support for NO_PASSWD and runas from
14882: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14883: SUDOERS_GID and added support fro SUDOERS_MODE
14884:
14885: 1996-04-27 21:00 millert
14886:
14887: * parse.yacc: added support for NO_PASSWD and runas from
14888: garp@opustel.com
14889:
14890: 1996-04-27 20:58 millert
14891:
14892: * parse.c, parse.lex: added support for NO_PASSWD and runas from
14893: garp@opustel.com
14894:
14895: 1996-04-27 20:56 millert
14896:
14897: * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14898:
14899: 1996-04-27 20:40 millert
14900:
14901: * configure.in: added --with-CC only link with -lshadow on linux
14902: (with shadow pw) if libc lacks getspnam()
14903:
14904: 1996-04-27 20:39 millert
14905:
14906: * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14907: do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14908: SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14909:
14910: 1996-04-27 20:26 millert
14911:
14912: * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14913:
14914: 1996-04-27 11:20 millert
14915:
14916: * INSTALL: added --with-CC
14917:
14918: 1996-04-06 16:31 millert
14919:
14920: * parse.lex: added double quote support
14921:
14922: 1996-04-06 16:29 millert
14923:
14924: * sudoers.pod: documented double quoting
14925:
14926: 1996-04-05 16:53 millert
14927:
14928: * mkinstalldirs: Initial revision
14929:
14930: 1996-04-05 16:53 millert
14931:
14932: * check.c: fixed some indentation
14933:
14934: 1996-04-05 16:48 millert
14935:
14936: * Makefile.in: fixed a typo
14937:
14938: 1996-04-04 19:39 millert
14939:
14940: * Makefile.in: added install-dirs .
14941:
14942: 1996-04-04 14:16 millert
14943:
14944: * dce_pwent.c: new version from "Jeff A. Earickson"
14945: <jaearick@colby.edu>
14946:
14947: 1996-04-03 13:40 millert
14948:
14949: * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14950:
14951: 1996-04-03 13:40 millert
14952:
14953: * BUGS: updated
14954:
14955: 1996-04-03 13:36 millert
14956:
14957: * parse.lex: FQHOST now has same constraints as non-FQHOST
14958:
14959: 1996-04-02 19:00 millert
14960:
14961: * INSTALL: added note about OS's w/ shadow passwords turned on by
14962: default
14963:
14964: 1996-04-02 18:58 millert
14965:
14966: * configure.in: fixed a typo
14967:
14968: 1996-04-02 18:48 millert
14969:
14970: * configure.in: added support for --without-THING sanitized shadow
14971: pw situtation by adding support for --without-C2
14972:
14973: 1996-04-02 16:42 millert
14974:
14975: * tgetpass.c: fixed a typo wrt placement of an end paren
14976:
14977: 1996-04-02 14:57 millert
14978:
14979: * check.c: was closing an fd that may not have been opened
14980:
14981: 1996-03-21 19:55 millert
14982:
14983: * sudo.c, OPTIONS, options.h: added NO_PASSWD
14984:
14985: 1996-03-19 19:40 millert
14986:
14987: * configure.in: now always use shadow pw on some arches
14988:
14989: 1996-03-19 17:07 millert
14990:
14991: * configure.in: added pyramid support
14992:
14993: 1996-03-19 17:04 millert
14994:
14995: * configure.in: no longer check for C2 if alternate passwd method
14996: is used no longer check for some libs twice
14997:
14998: 1996-03-19 17:00 millert
14999:
15000: * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
15001:
15002: 1996-03-19 17:00 millert
15003:
15004: * parse.lex: added FQHOST rules
15005:
15006: 1996-03-18 20:57 millert
15007:
15008: * tgetpass.c: now define TCSASOFT in necesary
15009:
15010: 1996-03-18 20:31 millert
15011:
15012: * tgetpass.c: now uses read/write instead of stdio string goop to
15013: avoid problems with select(2)
15014:
15015: 1996-03-18 19:37 millert
15016:
15017: * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
15018: -DIGNORE_DOT_PATH
15019:
15020: 1996-03-17 16:18 millert
15021:
15022: * INSTALL: added note about no shadow auto-detect if using
15023: alternate auth schemes
15024:
15025: 1996-03-17 15:33 millert
15026:
15027: * configure.in: don't check for C2 if AFS or DCE (unless they said
15028: --with-C2)
15029:
15030: 1996-03-17 15:08 millert
15031:
15032: * testsudoers.c: now groks shost
15033:
15034: 1996-03-17 15:01 millert
15035:
15036: * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
15037:
15038: 1996-03-16 14:43 millert
15039:
15040: * find_path.c: checkdot now works correctly
15041:
15042: 1996-03-12 18:01 millert
15043:
15044: * configure.in: can't have DCE and C2 passwords both...
15045:
15046: 1996-03-11 14:05 millert
15047:
15048: * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
15049: FQDN
15050:
15051: 1996-03-11 14:04 millert
15052:
15053: * configure.in: now looks for skey in /usr/lib and doesn't require
15054: libskey to be in /usr/local/lib just because skey.h is (for my
15055: netbsd box :-)
15056:
15057: 1996-03-11 02:00 millert
15058:
15059: * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
15060: _CONFIG_PATH_
15061:
15062: 1996-03-10 21:01 millert
15063:
15064: * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
15065:
15066: 1996-03-10 20:59 millert
15067:
15068: * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
15069:
15070: 1996-03-10 20:59 millert
15071:
15072: * OPTIONS: udpated FQDN
15073:
15074: 1996-03-10 20:58 millert
15075:
15076: * config.h.in: added _SUDO_PATH_TIMEDIR
15077:
15078: 1996-03-10 20:58 millert
15079:
15080: * aclocal.m4, configure.in: added SUDO_TIMEDIR
15081:
15082: 1996-03-10 20:58 millert
15083:
15084: * sudo.pod: updated wrt /var/run/sudo
15085:
15086: 1996-03-10 20:16 millert
15087:
15088: * sudo.c, sudo.h: added support for shost if FQDN
15089:
15090: 1996-03-10 20:14 millert
15091:
15092: * parse.yacc, visudo.c: now uses shost if FQDN
15093:
15094: 1996-03-10 20:12 millert
15095:
15096: * check.c: Now use skeylookup() instead off skeychallenge()
15097:
15098: 1996-02-27 20:41 millert
15099:
15100: * logging.c: mail_argv should not contain ALERTMAIL as it includes
15101: "-t"
15102:
15103: 1996-02-22 17:06 millert
15104:
15105: * INSTALL, Makefile.in, README, version.h, configure.in: ++version
15106:
15107: 1996-02-22 16:27 millert
15108:
15109: * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
15110:
15111: 1996-02-22 16:27 millert
15112:
15113: * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
15114:
15115: 1996-02-05 19:20 millert
15116:
15117: * README, INSTALL: ++version
15118:
15119: 1996-02-05 19:20 millert
15120:
15121: * Makefile.in: ++versoin
15122:
15123: 1996-02-05 19:16 millert
15124:
15125: * Makefile.in: fixed a typo
15126:
15127: 1996-02-05 19:16 millert
15128:
15129: * configure.in: ++version
15130:
15131: 1996-02-05 18:53 millert
15132:
15133: * RUNSON: updated
15134:
15135: 1996-02-05 18:47 millert
15136:
15137: * CHANGES: done for 1.4.1 (I hope)
15138:
15139: 1996-02-05 18:45 millert
15140:
15141: * sudoers.pod: added info on wildcards
15142:
15143: 1996-02-05 18:39 millert
15144:
15145: * sample.sudoers: added wildcard example
15146:
15147: 1996-02-05 17:03 millert
15148:
15149: * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
15150:
15151: 1996-02-05 17:03 millert
15152:
15153: * configure.in: addedSUDO_PROG_BSHELL !ll
15154:
15155: 1996-02-05 16:10 millert
15156:
15157: * visudo.pod: fixed up some formatting
15158:
15159: 1996-02-05 16:10 millert
15160:
15161: * sudoers.pod: redid section describing sample sudoers stuff
15162:
15163: 1996-02-05 16:10 millert
15164:
15165: * sudo.pod: fixed some formatting
15166:
15167: 1996-02-04 22:50 millert
15168:
15169: * getspwuid.c: now treats "" as bourne shell
15170:
15171: 1996-02-04 22:49 millert
15172:
15173: * Makefile.in: TESTOBJS nwo includes wildmat.o
15174:
15175: 1996-02-04 22:48 millert
15176:
15177: * testsudoers.c: now works with NewArg[cv]
15178:
15179: 1996-02-04 21:59 millert
15180:
15181: * sudo.c: removed an XXX (fixed it in getspwuid.c)
15182:
15183: 1996-02-04 21:58 millert
15184:
15185: * aclocal.m4: added check for bourne shell
15186:
15187: 1996-02-04 21:58 millert
15188:
15189: * pathnames.h.in: added _PATH_BSHELL
15190:
15191: 1996-02-04 21:58 millert
15192:
15193: * config.h.in: added _SUDO_PATH_BSHELL
15194:
15195: 1996-02-04 16:36 millert
15196:
15197: * visudo.c: unixware vi returns 256 instead of 0
15198:
15199: 1996-02-04 16:24 millert
15200:
15201: * INSTALL: added Linux note
15202:
15203: 1996-02-04 16:13 millert
15204:
15205: * logging.c: fixed up some XXX's. file log format now looks a
15206: little more like real syslog(3) format.
15207:
15208: 1996-02-04 16:13 millert
15209:
15210: * README, TROUBLESHOOTING: updated wrt lex/flex
15211:
15212: 1996-02-04 16:11 millert
15213:
15214: * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15215: since we ship with a pre-flex'd parser
15216:
15217: 1996-02-04 16:09 millert
15218:
15219: * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15220:
15221: 1996-02-04 02:28 millert
15222:
15223: * logging.c: eliminated some strcat()'s
15224:
15225: 1996-02-04 02:10 millert
15226:
15227: * configure.in: no longer checks for lex/flex (now assumes flex)
15228:
15229: 1996-02-04 02:08 millert
15230:
15231: * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15232: just kerb_dir_candidate
15233:
15234: 1996-02-02 20:48 millert
15235:
15236: * parse.yacc: now use a 'hook' expression instead of an iffy one
15237: :-)
15238:
15239: 1996-02-02 01:14 millert
15240:
15241: * visudo.c: now works with new sudo arg stuff
15242:
15243: 1996-02-02 01:14 millert
15244:
15245: * parse.yacc: fixed dereferencing deadbeef
15246:
15247: 1996-02-01 23:53 millert
15248:
15249: * sudo.c: changed an occurrence of Argv to NewArgv
15250:
15251: 1996-02-01 23:53 millert
15252:
15253: * parse.lex: took out support for quoted commands since there is no
15254: need...
15255:
15256: 1996-02-01 23:52 millert
15257:
15258: * parse.c: fixed a typo in a for() loop
15259:
15260: 1996-02-01 23:52 millert
15261:
15262: * logging.c: protected against dereferencing rogue pointers
15263:
15264: 1996-02-01 22:34 millert
15265:
15266: * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15267: needed this also allows us to eliminate some kludges in
15268: parse_args() and eliminate superfluous code.
15269:
15270: 1996-02-01 22:34 millert
15271:
15272: * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15273:
15274: 1996-02-01 22:32 millert
15275:
15276: * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15277: cmnd_args (no longer used)
15278:
15279: 1996-02-01 22:31 millert
15280:
15281: * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15282:
15283: 1996-02-01 22:30 millert
15284:
15285: * parse.yacc: COMMAND is now a struct containing the path and args
15286:
15287: 1996-02-01 22:30 millert
15288:
15289: * parse.lex: replaced append() with fill_cmnd() and fill_args.
15290: command args from a sudoers entry are now stored in an arrary for
15291: easy matching.
15292:
15293: 1996-02-01 22:28 millert
15294:
15295: * parse.c: command line args from sudoers file are now in an array
15296: like ones passed in from the command line
15297:
15298: 1996-01-31 20:59 millert
15299:
15300: * parse.c: wildwat stuff now works
15301:
15302: 1996-01-29 00:44 millert
15303:
15304: * version.h: ++version
15305:
15306: 1996-01-29 00:44 millert
15307:
15308: * Makefile.in: ++version added wildmat.*
15309:
15310: 1996-01-28 17:55 millert
15311:
15312: * parse.lex: added support for quoted commands (w/ or w/o args)
15313:
15314: 1996-01-22 01:55 millert
15315:
15316: * sudo.pod, visudo.pod: cleaned up formatting
15317:
15318: 1996-01-21 20:53 millert
15319:
15320: * sudo.pod, visudo.pod: Initial revision
15321:
15322: 1996-01-21 02:07 millert
15323:
15324: * sudoers.pod: looks reasonable, could be mroe readable
15325:
15326: 1996-01-20 23:47 millert
15327:
15328: * sudoers.pod: Initial revision
15329:
15330: 1996-01-16 14:38 millert
15331:
15332: * RUNSON: updated
15333:
15334: 1996-01-16 14:37 millert
15335:
15336: * OPTIONS: updated NO_ROOT_SUDO entry
15337:
15338: 1996-01-15 11:37 millert
15339:
15340: * RUNSON: [no log message]
15341:
15342: 1996-01-15 11:34 millert
15343:
15344: * sudo.c: fixed SECURE_PATH
15345:
15346: 1996-01-14 20:55 millert
15347:
15348: * RUNSON: udpa`ted for 1.4
15349:
15350: 1996-01-14 20:52 millert
15351:
15352: * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15353:
15354: 1996-01-14 20:32 millert
15355:
15356: * TROUBLESHOOTING: added entry for anal ansi compilers
15357:
15358: 1996-01-14 16:13 millert
15359:
15360: * INSTALL: added info on libcrypt_i for SCO
15361:
15362: 1996-01-14 16:05 millert
15363:
15364: * TODO: [no log message]
15365:
15366: 1996-01-14 15:39 millert
15367:
15368: * sample.sudoers: added comments
15369:
15370: 1996-01-14 15:25 millert
15371:
15372: * TODO: 1.4 release
15373:
15374: 1996-01-14 15:22 millert
15375:
15376: * README, config.h.in, configure.in, CHANGES: ++version
15377:
15378: 1996-01-14 15:21 millert
15379:
15380: * BUGS: ++version and fixed ISC
15381:
15382: 1996-01-14 15:19 millert
15383:
15384: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15385: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15386: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15387: logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15388: testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15389: ++version
15390:
15391: 1996-01-14 15:16 millert
15392:
15393: * interfaces.c: added STUB_LOAD_INTERFACES ++version
15394:
15395: 1996-01-14 15:14 millert
15396:
15397: * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15398: emul/utime.h: ++version
15399:
15400: 1996-01-14 15:13 millert
15401:
15402: * PORTING: added info about fd_set in tgetpass added info on
15403: interfaces.c
15404:
15405: 1996-01-11 13:22 millert
15406:
15407: * dce_pwent.c: added sudo header
15408:
15409: 1996-01-11 13:04 millert
15410:
15411: * tgetpass.c: fixed a typo
15412:
15413: 1996-01-11 13:01 millert
15414:
15415: * Makefile.in: tgetpass.o is now only linked in with sudo (not
15416: visudo)
15417:
15418: 1996-01-09 12:56 millert
15419:
15420: * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15421: configure.in: ++version
15422:
15423: 1996-01-09 12:54 millert
15424:
15425: * emul/utime.h: added copyright notice
15426:
15427: 1996-01-09 12:52 millert
15428:
15429: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15430: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15431: interfaces.c, logging.c, options.h, parse.c, parse.lex,
15432: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15433: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15434: visudo.c: ++version
15435:
15436: 1996-01-09 12:46 millert
15437:
15438: * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15439: svr4'ish boxen
15440:
15441: 1996-01-09 12:42 millert
15442:
15443: * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15444:
15445: 1996-01-09 12:41 millert
15446:
15447: * config.h.in: added check for sys/bsdtypes.h
15448:
15449: 1996-01-07 16:00 millert
15450:
15451: * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15452:
15453: 1996-01-07 15:55 millert
15454:
15455: * TROUBLESHOOTING: added 2 entries
15456:
15457: 1996-01-07 15:55 millert
15458:
15459: * Makefile.in: added FAQ
15460:
15461: 1996-01-07 14:26 millert
15462:
15463: * TROUBLESHOOTING: added section on syslog
15464:
15465: 1996-01-07 14:25 millert
15466:
15467: * configure.in: added AC_ISC_POSIX for better ISC support
15468:
15469: 1996-01-07 14:25 millert
15470:
15471: * config.h.in: fixed typo
15472:
15473: 1996-01-07 14:25 millert
15474:
15475: * config.h.in: added define for _POSIX_SOURCE
15476:
15477: 1996-01-04 00:41 millert
15478:
15479: * configure.in: fixed check for lsearch()
15480:
15481: 1995-12-21 21:53 millert
15482:
15483: * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15484: (should not happen)
15485:
15486: 1995-12-20 17:02 millert
15487:
15488: * configure.in: now only define HAVE_LSEARCH if there is a
15489: corresponding search.h
15490:
15491: 1995-12-20 15:52 millert
15492:
15493: * interfaces.c: works on ISC again
15494:
15495: 1995-12-18 17:36 millert
15496:
15497: * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15498: libcompat
15499:
15500: 1995-12-18 17:32 millert
15501:
15502: * lsearch.c: char * -> const char *
15503:
15504: 1995-12-18 17:29 millert
15505:
15506: * configure.in: now looks in -lcompat for lsearch()
15507:
15508: 1995-12-18 17:23 millert
15509:
15510: * Makefile.in: remove sudo.core visudo.core for clan target
15511:
15512: 1995-12-17 22:53 millert
15513:
15514: * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15515:
15516: 1995-12-17 22:36 millert
15517:
15518: * Makefile.in: fixed another occurence of sudo_getpwuid.*
15519:
15520: 1995-12-17 22:30 millert
15521:
15522: * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15523:
15524: 1995-12-17 22:22 millert
15525:
15526: * configure.in: moved the "echo"
15527:
15528: 1995-12-17 22:09 millert
15529:
15530: * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15531: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15532: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15533: ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15534: parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15535: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15536: tgetpass.c, utime.c, version.h, visudo.c: ++version
15537:
15538: 1995-12-17 22:04 millert
15539:
15540: * testsudoers.c: added group support
15541:
15542: 1995-12-17 22:00 millert
15543:
15544: * sample.sudoers: added group entry
15545:
15546: 1995-12-17 21:59 millert
15547:
15548: * sudoers.man: documented group support
15549:
15550: 1995-12-17 21:50 millert
15551:
15552: * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15553:
15554: 1995-12-15 17:45 millert
15555:
15556: * check.c: tkfile was too short and overflowed the kerberos realm
15557:
15558: 1995-12-11 17:09 millert
15559:
15560: * sudo.c: now copy command args directly from Argv
15561:
15562: 1995-12-11 15:55 millert
15563:
15564: * sudo.c: replaced code to copy cmnd_args so that is does not use
15565: realloc since most realloc()'s really stink
15566:
15567: 1995-12-08 14:11 millert
15568:
15569: * configure.in: syslog() fixed in hpux 10.01
15570:
15571: 1995-12-06 17:45 millert
15572:
15573: * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15574: if appropriate)
15575:
15576: 1995-12-06 17:30 millert
15577:
15578: * configure.in: better error if cannot find skey incs or libs
15579:
15580: 1995-12-06 17:26 millert
15581:
15582: * aclocal.m4: now use a temp file for determining max len of uid_t
15583: in string form. the old hacky way broke on netbsd
15584:
15585: 1995-12-05 19:02 millert
15586:
15587: * sudo.c: added set of parens and a space
15588:
15589: 1995-12-05 18:58 millert
15590:
15591: * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15592:
15593: 1995-12-05 18:58 millert
15594:
15595: * check.c: modified a comment
15596:
15597: 1995-12-05 18:57 millert
15598:
15599: * Makefile.in: fixed up testsudoers target
15600:
15601: 1995-12-05 18:56 millert
15602:
15603: * configure.in: DCE changes from Jeff Earickson
15604: <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15605: SUDO_FDFLAGS and VISUDO_LDFLAGS
15606:
15607: 1995-12-05 18:17 millert
15608:
15609: * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15610: SUDO_LDFLAGS, VISUDO_LDFLAGS
15611:
15612: 1995-11-27 23:32 millert
15613:
15614: * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15615:
15616: 1995-11-27 23:17 millert
15617:
15618: * check.c: LONG_SKEY_PROMPT is less of a klusge /
15619:
15620: 1995-11-27 23:17 millert
15621:
15622: * configure.in: fixed typos w/ dce stuff
15623:
15624: 1995-11-27 23:14 millert
15625:
15626: * Makefile.in: added dce_pwent.c
15627:
15628: 1995-11-26 13:48 millert
15629:
15630: * INSTALL: amended section on combining authentication mechanisms
15631:
15632: 1995-11-26 13:48 millert
15633:
15634: * PORTING: minor updates for 1.3.6
15635:
15636: 1995-11-26 13:47 millert
15637:
15638: * TROUBLESHOOTING: added 2 more entries
15639:
15640: 1995-11-26 13:39 millert
15641:
15642: * BUGS: updated for 1.3.6
15643:
15644: 1995-11-26 13:39 millert
15645:
15646: * README: overhauled
15647:
15648: 1995-11-25 21:23 millert
15649:
15650: * INSTALL: rewrote for sudo 1.3.6
15651:
15652: 1995-11-25 21:23 millert
15653:
15654: * TROUBLESHOOTING: added 3 entries
15655:
15656: 1995-11-25 13:53 millert
15657:
15658: * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15659: since many includes don't prototype it. gag me.
15660:
15661: 1995-11-25 13:23 millert
15662:
15663: * sudo.h: removed prototype for sudo_getpwuid() since convex C
15664: compiler choked on it.
15665:
15666: 1995-11-25 13:23 millert
15667:
15668: * sudo.c: added prototype for sudo_getpwuid()
15669:
15670: 1995-11-25 13:23 millert
15671:
15672: * lsearch.c: now compiles on strict ANSI compilers
15673:
15674: 1995-11-24 23:56 millert
15675:
15676: * check.c: added LONG_SKEY_PROMPT support
15677:
15678: 1995-11-24 23:55 millert
15679:
15680: * Makefile.in: added extra $'s for make to eat up, yum.
15681:
15682: 1995-11-24 23:38 millert
15683:
15684: * OPTIONS, options.h: added LONG_SKEY_PROMPT
15685:
15686: 1995-11-24 18:48 millert
15687:
15688: * check.c: s/key support now works with normal s/key as well as
15689: logdaemon
15690:
15691: 1995-11-24 18:46 millert
15692:
15693: * options.h, OPTIONS: added SKEY_ONLY
15694:
15695: 1995-11-24 18:46 millert
15696:
15697: * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15698:
15699: 1995-11-24 00:42 millert
15700:
15701: * INSTALL: added DCE note added more AIX notes
15702:
15703: 1995-11-24 00:39 millert
15704:
15705: * sudo.c: now include pthread.h for DCE support
15706:
15707: 1995-11-23 22:22 millert
15708:
15709: * check.c: dce_pwent() is ok after all .,
15710:
15711: 1995-11-23 22:21 millert
15712:
15713: * logging.c: now uses SYSLOG() macro that equates to either
15714: syslog() or syslog_wrapper
15715:
15716: 1995-11-23 21:44 millert
15717:
15718: * dce_pwent.c: minor formatting changes. renamed check() to
15719: somthing less generic
15720:
15721: 1995-11-23 21:27 millert
15722:
15723: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15724: visudo.c: now uses user_pw_ent and simple macros to get at the
15725: contents
15726:
15727: 1995-11-22 20:35 millert
15728:
15729: * check.c: simpler dec unix C2 support
15730:
15731: 1995-11-22 20:35 millert
15732:
15733: * getspwuid.c: now sets crypt_type for DEC unix C2
15734:
15735: 1995-11-21 18:00 millert
15736:
15737: * configure.in: added csops paths for skey
15738:
15739: 1995-11-21 16:27 millert
15740:
15741: * getspwuid.c: now includes string.h for strdup() prototype
15742:
15743: 1995-11-21 01:47 millert
15744:
15745: * getspwuid.c: fixed a few typos
15746:
15747: 1995-11-20 22:59 millert
15748:
15749: * check.c: now includes skey.h
15750:
15751: 1995-11-20 22:10 millert
15752:
15753: * getspwuid.c: fixed up comments
15754:
15755: 1995-11-20 22:04 millert
15756:
15757: * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15758:
15759: 1995-11-20 22:01 millert
15760:
15761: * sudo.c: now uses sudo_pw_ent
15762:
15763: 1995-11-20 21:50 millert
15764:
15765: * testsudoers.c: now uses sudo_pw_ent
15766:
15767: 1995-11-20 21:40 millert
15768:
15769: * visudo.c: now sets sudo_pw_ent
15770:
15771: 1995-11-20 21:28 millert
15772:
15773: * getspwuid.c: Initial revision
15774:
15775: 1995-11-20 21:28 millert
15776:
15777: * tgetpass.c: moved dce stuff into compat.h
15778:
15779: 1995-11-20 21:27 millert
15780:
15781: * sudo.h, logging.c: now uses sudo_pw_ent
15782:
15783: 1995-11-20 21:27 millert
15784:
15785: * Makefile.in: added sudo_getpwuid.c
15786:
15787: 1995-11-20 21:25 millert
15788:
15789: * compat.h: added dce support
15790:
15791: 1995-11-20 21:13 millert
15792:
15793: * parse.yacc: now uses sudo_pw_ent
15794:
15795: 1995-11-20 14:40 millert
15796:
15797: * check.c: fixed exempt_group stuff for OS's that don't put base
15798: gid in group vector
15799:
15800: 1995-11-20 01:39 millert
15801:
15802: * check.c: S/Key support now works with sunos4 shadow passwords
15803:
15804: 1995-11-19 22:31 millert
15805:
15806: * Makefile.in: fixed clean rule
15807:
15808: 1995-11-19 22:31 millert
15809:
15810: * config.h.in, configure.in: added DCE support
15811:
15812: 1995-11-19 22:30 millert
15813:
15814: * tgetpass.c: DCE & KERB support
15815:
15816: 1995-11-19 22:30 millert
15817:
15818: * check.c: first stab at dce support
15819:
15820: 1995-11-19 22:24 millert
15821:
15822: * dce_pwent.c: now smells like sudo
15823:
15824: 1995-11-19 22:11 millert
15825:
15826: * dce_pwent.c: Initial revision
15827:
15828: 1995-11-19 21:36 millert
15829:
15830: * check.c: skey'd sudo now works w/ normal password as well
15831:
15832: 1995-11-19 18:37 millert
15833:
15834: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15835: find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15836: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15837: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15838: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15839: tgetpass.c, utime.c, version.h, visudo.c: updated version number
15840:
15841: 1995-11-19 18:32 millert
15842:
15843: * README: updated to reflect version change
15844:
15845: 1995-11-19 18:27 millert
15846:
15847: * configure.in: --with options now line up ++version
15848:
15849: 1995-11-19 18:26 millert
15850:
15851: * sudo.h: removed unecesary S/Key stuff
15852:
15853: 1995-11-19 18:25 millert
15854:
15855: * configure.in: fixed S/Key support
15856:
15857: 1995-11-19 18:24 millert
15858:
15859: * Makefile.in: -I stuff now goes in CPPFLAGS
15860:
15861: 1995-11-19 18:23 millert
15862:
15863: * check.c: fixed SKey support
15864:
15865: 1995-11-19 15:23 millert
15866:
15867: * README: updated version
15868:
15869: 1995-11-19 13:59 millert
15870:
15871: * OPTIONS: fixed description of EXEMPTGROUP
15872:
15873: 1995-11-19 10:47 millert
15874:
15875: * sudo.c: more people use _RLD_ than just alphas...
15876:
15877: 1995-11-18 21:35 millert
15878:
15879: * Makefile.in: replaced $man_prefix with $mandir
15880:
15881: 1995-11-18 21:30 millert
15882:
15883: * configure.in: fixed a typo
15884:
15885: 1995-11-18 21:28 millert
15886:
15887: * Makefile.in: now use more GNU'ish dir names
15888:
15889: 1995-11-18 21:27 millert
15890:
15891: * configure.in: now set *dir correctly (can override from command
15892: line)
15893:
15894: 1995-11-18 19:17 millert
15895:
15896: * sudo.c: now deal with situations where we getwd() fails
15897:
15898: 1995-11-17 00:37 millert
15899:
15900: * Makefile.in: added etc_dir, bin_dir, sbin_dir
15901:
15902: 1995-11-17 00:37 millert
15903:
15904: * configure.in: added sbin_dir
15905:
15906: 1995-11-16 21:28 millert
15907:
15908: * Makefile.in: now ship a flex-generated lex.yy.c
15909:
15910: 1995-11-16 21:09 millert
15911:
15912: * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15913: SUDOERS_OWNER
15914:
15915: 1995-11-16 21:06 millert
15916:
15917: * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15918: overridden via Makefile
15919:
15920: 1995-11-16 21:05 millert
15921:
15922: * options.h: no more error for redefining SUDOERS_OWNER
15923:
15924: 1995-11-16 21:05 millert
15925:
15926: * OPTIONS: expanded SUDOERS_OWNER section
15927:
15928: 1995-11-16 03:05 millert
15929:
15930: * visudo.c: now warn if chown(2) failed
15931:
15932: 1995-11-16 02:55 millert
15933:
15934: * logging.c: better default warning for NO_SUDOERS_FILE
15935:
15936: 1995-11-16 02:54 millert
15937:
15938: * sudo.c: added missing set_perms() no more cryptic message if the
15939: sudoers file is zero length, now just give a parse error
15940:
15941: 1995-11-16 02:42 millert
15942:
15943: * logging.c: better diagnostics if NO_SUDOERS_FILE
15944:
15945: 1995-11-16 02:41 millert
15946:
15947: * sudo.c: check_sudoers() now catches sudoers files that are not
15948: readable (but are stat'able).
15949:
15950: 1995-11-13 01:12 millert
15951:
15952: * configure.in: now add -D__STDC__ for convex cc (not gcc)
15953:
15954: 1995-11-13 00:52 millert
15955:
15956: * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15957: exec_prefix
15958:
15959: 1995-11-13 00:52 millert
15960:
15961: * Makefile.in: now uses exec_prefix & prefix from configure
15962:
15963: 1995-11-13 00:16 millert
15964:
15965: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15966: parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15967: tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15968: so shadow build trees can have a custom copy of options.h
15969:
15970: 1995-11-13 00:15 millert
15971:
15972: * check.c: user_is_exempt() is no longer a hack, it now uses
15973: getgrnam()
15974:
15975: 1995-11-12 23:56 millert
15976:
15977: * options.h: EXEMPTGROUP is now "sudo"
15978:
15979: 1995-11-12 22:25 millert
15980:
15981: * configure.in: MAN_POSTINSTALL now contains a leading space
15982:
15983: 1995-11-12 22:25 millert
15984:
15985: * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15986: now removes testsudoers in clean:
15987:
15988: 1995-11-12 22:24 millert
15989:
15990: * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15991:
15992: 1995-10-30 15:51 millert
15993:
15994: * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15995: don't get spoofed into using a bogus server
15996:
15997: 1995-09-29 17:50 millert
15998:
15999: * parse.yacc: now explicately initialize match[] tp be FALSE
16000:
16001: 1995-09-23 16:48 millert
16002:
16003: * sudo.c: removed unused variable now passes -Wall
16004:
16005: 1995-09-23 16:48 millert
16006:
16007: * parse.yacc: yyerror and dumpaliases are now void's now passes
16008: -Wall
16009:
16010: 1995-09-23 16:48 millert
16011:
16012: * parse.lex: added prototype for yyerror
16013:
16014: 1995-09-23 16:47 millert
16015:
16016: * interfaces.c: rmeoved unused cruft now passes -Wall
16017:
16018: 1995-09-23 16:47 millert
16019:
16020: * check.c, logging.c, parse.c: now passes -Wall
16021:
16022: 1995-09-23 16:46 millert
16023:
16024: * Makefile.in: fixed headers that moved to emul dir
16025:
16026: 1995-09-23 12:05 millert
16027:
16028: * logging.c: fixed deref of nil pointer if no args
16029:
16030: 1995-09-15 19:18 millert
16031:
16032: * OPTIONS: added a caveat to FQDN section
16033:
16034: 1995-09-13 19:48 millert
16035:
16036: * Makefile.in: more $srcdir support for install targets
16037:
16038: 1995-09-13 17:17 millert
16039:
16040: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
16041: putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
16042: visudo.c: don't include malloc.h if we include stdlib.h
16043:
16044: 1995-09-12 21:44 millert
16045:
16046: * parse.yacc: local search.h now lives in emul
16047:
16048: 1995-09-12 21:41 millert
16049:
16050: * lsearch.c: local search.h now lives in emul
16051:
16052: 1995-09-12 21:41 millert
16053:
16054: * check.c, utime.c: local utime.h now lives in emul dir
16055:
16056: 1995-09-12 21:38 millert
16057:
16058: * Makefile.in: added support for building in other than the
16059: sourcedir
16060:
16061: 1995-09-10 14:01 millert
16062:
16063: * OPTIONS: annotated CSOPS_INSULTS option
16064:
16065: 1995-09-10 13:56 millert
16066:
16067: * TROUBLESHOOTING: updated shadow passwords blurb
16068:
16069: 1995-09-09 21:00 millert
16070:
16071: * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
16072: shell and passes along foo as the arguments
16073:
16074: 1995-09-09 18:52 millert
16075:
16076: * parse.lex: collapsed pathname and dir sections into one -- its
16077: now less expensive
16078:
16079: 1995-09-09 18:34 millert
16080:
16081: * parse.lex: fixed spacing quoting [,:\\=] now works correctly
16082: append() and fill() now take args to make the above work
16083:
16084: 1995-09-08 20:51 millert
16085:
16086: * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
16087: a tty on fd 1 to erroneously have "none" as their tty
16088:
16089: 1995-09-04 15:35 millert
16090:
16091: * check.c: timestampfile is now a global static removed decl of
16092: timestampfile in remove_timestamp since we can just use the
16093: global one
16094:
16095: 1995-09-04 15:28 millert
16096:
16097: * check.c: created touch() to update timestamps added
16098: USE_TTY_TICKETS support (bit of a kludge)
16099:
16100: 1995-09-04 15:28 millert
16101:
16102: * compat.h: added _S_IFDIR and S_ISDIR
16103:
16104: 1995-09-04 15:22 millert
16105:
16106: * OPTIONS, options.h: added USE_TTY_TICKETS
16107:
16108: 1995-09-04 00:38 millert
16109:
16110: * parse.yacc: removed const from casts for lsearch() & lfind() to
16111: placate irix 4.x C compiler
16112:
16113: 1995-09-03 14:12 millert
16114:
16115: * sudo.c: now only strip '/dev/' off of a tty if it starts with
16116: '/dev/'
16117:
16118: 1995-09-03 14:12 millert
16119:
16120: * pathnames.h.in: added _PATH_DEV
16121:
16122: 1995-09-03 14:11 millert
16123:
16124: * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
16125: tcgetattr only if have termios.h
16126:
16127: 1995-09-03 14:09 millert
16128:
16129: * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
16130: not int for c_?flag
16131:
16132: 1995-09-03 13:19 millert
16133:
16134: * parse.lex, parse.yacc: fixed a spelling error
16135:
16136: 1995-09-03 13:17 millert
16137:
16138: * Makefile.in: fixed typo
16139:
16140: 1995-09-02 12:55 millert
16141:
16142: * Makefile.in: fixed a comment
16143:
16144: 1995-09-02 12:54 millert
16145:
16146: * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
16147: now that we dynamically allocate strings they need to be free()'d
16148:
16149: 1995-09-02 12:46 millert
16150:
16151: * parse.lex: dynamically allocates space for strings
16152:
16153: 1995-09-02 12:34 millert
16154:
16155: * sudo.h: no more MAXCOMMANDLENGTH
16156:
16157: 1995-09-01 22:25 millert
16158:
16159: * sudo.h: added decl of tty
16160:
16161: 1995-09-01 22:25 millert
16162:
16163: * logging.c, sudo.c: moved tty stuff into sudo.c
16164:
16165: 1995-09-01 14:18 millert
16166:
16167: * parse.c: fixed a logic bug. Was denying a command if user gave
16168: command line args but there were none in the sudoers file which
16169: is wrong.
16170:
16171: 1995-09-01 01:18 millert
16172:
16173: * sudo.h: MAXCOMMMANDLEN dropped down to 1K
16174:
16175: 1995-09-01 01:13 millert
16176:
16177: * parse.lex: return foo; -> return(foo);
16178:
16179: 1995-09-01 01:03 millert
16180:
16181: * parse.yacc: fixed netgr_matches() prototype
16182:
16183: 1995-09-01 01:02 millert
16184:
16185: * parse.lex: added support for escaping "termination" characters
16186:
16187: 1995-09-01 00:55 millert
16188:
16189: * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
16190: command args
16191:
16192: 1995-09-01 00:50 millert
16193:
16194: * sudo.c: fixed comments
16195:
16196: 1995-09-01 00:49 millert
16197:
16198: * goodpath.c: fixed negation problem (doh!)
16199:
16200: 1995-09-01 00:25 millert
16201:
16202: * parse.yacc: fixed 2nd parameter to lfind()
16203:
16204: 1995-09-01 00:24 millert
16205:
16206: * parse.lex: now do bounds checking in fill() and append()
16207:
16208: 1995-09-01 00:23 millert
16209:
16210: * sudo.c: include netdb.h as we should added a missing void cast
16211: added SHELL_IF_NO_ARGS support now use realloc() properly. would
16212: fail if realloc actually moved the string instead of shrinking it
16213:
16214: 1995-09-01 00:17 millert
16215:
16216: * sample.sudoers: updated with examples of new features
16217:
16218: 1995-09-01 00:05 millert
16219:
16220: * goodpath.c: now set errno to EACCES if not a regular file or not
16221: executable
16222:
16223: 1995-09-01 00:04 millert
16224:
16225: * find_path.c: if given a fully-qualified or relative path we now
16226: check it with sudo_goodpath() and error out with the appropriate
16227: error message if the file does not exist or is not executable
16228:
16229: 1995-09-01 00:03 millert
16230:
16231: * lsearch.c, emul/search.h: now use correct args for lfind
16232:
16233: 1995-09-01 00:03 millert
16234:
16235: * logging.c: added a comment
16236:
16237: 1995-08-31 23:52 millert
16238:
16239: * insults.h: added in CSOps insults
16240:
16241: 1995-08-31 23:51 millert
16242:
16243: * ins_csops.h: Initial revision
16244:
16245: 1995-08-31 23:35 millert
16246:
16247: * tgetpass.c: added RCS id
16248:
16249: 1995-08-31 22:56 millert
16250:
16251: * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16252: HAVE_GETWD
16253:
16254: 1995-08-31 22:55 millert
16255:
16256: * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16257:
16258: 1995-08-31 22:54 millert
16259:
16260: * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16261: -p now works with -s
16262:
16263: 1995-08-31 22:54 millert
16264:
16265: * parse.c: don't try to stat() "pseudo commands" like "validate"
16266:
16267: 1995-08-31 22:53 millert
16268:
16269: * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16270: SHELL_IF_NO_ARGS
16271:
16272: 1995-08-31 22:53 millert
16273:
16274: * configure.in: added SecurID support added other insults to
16275: --with-csops
16276:
16277: 1995-08-31 22:52 millert
16278:
16279: * config.h.in: added HAVE_SECURID
16280:
16281: 1995-08-31 22:52 millert
16282:
16283: * Makefile.in: added clobber target added ins_csops.h now gets
16284: CFLAGS from configure
16285:
16286: 1995-08-31 22:46 millert
16287:
16288: * aclocal.m4: relaxed SUDO_FULL_VOID
16289:
16290: 1995-08-31 22:44 millert
16291:
16292: * visudo.c: function comment blocks are now in same style as rest
16293: of code
16294:
16295: 1995-08-31 22:44 millert
16296:
16297: * testsudoers.c: added support for command line args in
16298: /etc/sudoers
16299:
16300: 1995-08-31 22:43 millert
16301:
16302: * sudoers.man: updated to have command args in the sudoers file
16303:
16304: 1995-08-31 22:42 millert
16305:
16306: * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16307: VARIABLES section
16308:
16309: 1995-08-19 19:32 millert
16310:
16311: * parse.yacc: PATH renamed to COMMAND
16312:
16313: 1995-08-19 19:31 millert
16314:
16315: * parse.lex: it is now a parse error for directories to have args
16316: attached to them
16317:
16318: 1995-08-19 19:30 millert
16319:
16320: * logging.c: now say command args if telling user to buzz off
16321:
16322: 1995-08-19 19:30 millert
16323:
16324: * sudo.c: -s no longer indicates end of args sped up loading on
16325: cmnd_args in load_cmnd()
16326:
16327: 1995-08-19 19:29 millert
16328:
16329: * parse.c: removed an unreachable statement
16330:
16331: 1995-08-19 17:53 millert
16332:
16333: * parse.lex: made more efficient by pulling out the terminators
16334: when in GOTCMND state and making them their own rule
16335:
16336: 1995-08-14 00:07 millert
16337:
16338: * sudo.h: removed MAXLOGLEN since it is no longer used
16339:
16340: 1995-08-14 00:07 millert
16341:
16342: * parse.lex: now allows command args
16343:
16344: 1995-08-14 00:06 millert
16345:
16346: * parse.c: now groks command arguments
16347:
16348: 1995-08-13 23:39 millert
16349:
16350: * logging.c: now sets tty correctly when piped input
16351:
16352: 1995-08-13 23:35 millert
16353:
16354: * sudo.c: fixed loading of cmnd_args (was including command name
16355: too)
16356:
16357: 1995-08-13 23:34 millert
16358:
16359: * logging.c: fixed a core dump due to incorrect if construct
16360:
16361: 1995-08-13 00:33 millert
16362:
16363: * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16364: -lsocket if irix
16365:
16366: 1995-08-13 00:33 millert
16367:
16368: * aclocal.m4: fixed check for ISC
16369:
16370: 1995-08-13 00:32 millert
16371:
16372: * sudo.c: now sets cmnd_args used by log_error() and that will be
16373: used by the parse to check against command args
16374:
16375: 1995-08-13 00:32 millert
16376:
16377: * sudo.h: added cmnd_args
16378:
16379: 1995-08-13 00:31 millert
16380:
16381: * logging.c: now dynamically allocate logline since we can guess at
16382: its size
16383:
16384: 1995-08-05 13:52 millert
16385:
16386: * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16387: buffer remove "register" since the compiler knows more than I do
16388: now do a "basename" of the tty
16389:
16390: 1995-07-31 18:20 millert
16391:
16392: * configure.in: ++version
16393:
16394: 1995-07-30 22:37 millert
16395:
16396: * sudo.h: added shell extern changed MODE_* to be bit masks to
16397: allow for several options together
16398:
16399: 1995-07-30 22:36 millert
16400:
16401: * sudo.c: added -s (shell) option made MODE_* masks so we can do
16402: bitwise & and | to see if multiple flags are set.
16403:
16404: 1995-07-30 22:01 millert
16405:
16406: * check.c: added securid support
16407:
16408: 1995-07-30 14:38 millert
16409:
16410: * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16411: with strcat()
16412:
16413: 1995-07-29 17:17 millert
16414:
16415: * Makefile.in, version.h: ++version
16416:
16417: 1995-07-27 06:52 millert
16418:
16419: * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16420:
16421: 1995-07-26 22:00 millert
16422:
16423: * testsudoers.c: added netgr_matches
16424:
16425: 1995-07-26 21:29 millert
16426:
16427: * parse.c: cleaned up netgr_matches
16428:
16429: 1995-07-26 00:26 millert
16430:
16431: * RUNSON: updated for 1.3.4
16432:
16433: 1995-07-24 21:51 millert
16434:
16435: * Makefile.in: now installs sudoers.man -- really should clean this
16436: up though.
16437:
16438: 1995-07-24 21:18 millert
16439:
16440: * Makefile.in: added sudoers.cat and sudoers.man
16441:
16442: 1995-07-24 21:15 millert
16443:
16444: * sudo.man: pulled out stuff on the sudoers file format into a
16445: separate man page
16446:
16447: 1995-07-24 21:14 millert
16448:
16449: * sudoers.man: Initial revision
16450:
16451: 1995-07-24 21:04 millert
16452:
16453: * HISTORY: fixed up my email address
16454:
16455: 1995-07-24 20:03 millert
16456:
16457: * configure.in: added checks for innetgr and getdomainname
16458:
16459: 1995-07-24 20:02 millert
16460:
16461: * visudo.c: added dummy netgr_matches function
16462:
16463: 1995-07-24 20:01 millert
16464:
16465: * parse.c: added netgr_matches
16466:
16467: 1995-07-24 20:01 millert
16468:
16469: * parse.lex, parse.yacc: added NETGROUP support
16470:
16471: 1995-07-24 20:01 millert
16472:
16473: * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16474:
16475: 1995-07-24 18:07 millert
16476:
16477: * sudo.c: rewrote clean_env() that has rm_env() builtin
16478:
16479: 1995-07-23 19:58 millert
16480:
16481: * check.c: now cast uid to long in sprintf
16482:
16483: 1995-07-23 19:58 millert
16484:
16485: * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16486:
16487: 1995-07-23 19:57 millert
16488:
16489: * options.h: added _INSULTS suffix to HAL & GOONS
16490:
16491: 1995-07-23 19:35 millert
16492:
16493: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16494: new scheme of insult "unions" end
16495:
16496: 1995-07-23 17:48 millert
16497:
16498: * sudo.c: now uses MAX_UID_T_LEN
16499:
16500: 1995-07-23 17:48 millert
16501:
16502: * configure.in: added SUDO_UID_T_LEN !l
16503:
16504: 1995-07-23 17:48 millert
16505:
16506: * config.h.in: added MAX_UID_T_LEN
16507:
16508: 1995-07-23 17:47 millert
16509:
16510: * check.c: now use MAX_UID_T_LEN
16511:
16512: 1995-07-23 17:47 millert
16513:
16514: * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16515: check
16516:
16517: 1995-07-19 19:05 millert
16518:
16519: * configure.in: corrected version
16520:
16521: 1995-07-19 17:29 millert
16522:
16523: * configure.in: added sco support
16524:
16525: 1995-07-19 17:29 millert
16526:
16527: * aclocal.m4: hack to check for sco
16528:
16529: 1995-07-18 21:27 millert
16530:
16531: * interfaces.c: removed #include <net/route.h> since it was hosing
16532: some OS's
16533:
16534: 1995-07-18 13:35 millert
16535:
16536: * find_path.c: fixed prreadlink() prototype
16537:
16538: 1995-07-17 23:54 millert
16539:
16540: * check.c: added parens in #if's
16541:
16542: 1995-07-17 23:53 millert
16543:
16544: * configure.in: added SPW_ prefix
16545:
16546: 1995-07-17 23:20 millert
16547:
16548: * sudo.h: moved SPW_* to config.h.in
16549:
16550: 1995-07-17 23:19 millert
16551:
16552: * sudo.c: added a set of parens
16553:
16554: 1995-07-17 23:19 millert
16555:
16556: * config.h.in: added SPW_*
16557:
16558: 1995-07-17 22:50 millert
16559:
16560: * sudo.h: added SPW_* reordered error codes
16561:
16562: 1995-07-17 22:49 millert
16563:
16564: * check.c: moved SPW_* to sudo.h
16565:
16566: 1995-07-17 14:29 millert
16567:
16568: * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16569:
16570: 1995-07-17 14:29 millert
16571:
16572: * configure.in: AUTH -> SECUREWARE
16573:
16574: 1995-07-17 14:29 millert
16575:
16576: * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16577:
16578: 1995-07-17 00:22 millert
16579:
16580: * check.c: now uses SHADOW_TYPE to make shadow pw support more
16581: readable and modular. It's a start...
16582:
16583: 1995-07-17 00:21 millert
16584:
16585: * configure.in: added autodetection of shadow passwords
16586:
16587: 1995-07-17 00:20 millert
16588:
16589: * sudo.c: now uses SHADOW_TYPE define
16590:
16591: 1995-07-17 00:19 millert
16592:
16593: * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16594: defines
16595:
16596: 1995-07-17 00:19 millert
16597:
16598: * aclocal.m4: added SUDO_CHECK_SHADOW
16599:
16600: 1995-07-12 17:09 millert
16601:
16602: * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16603: took out test for memmove() since we dno longer use it...
16604:
16605: 1995-07-12 17:08 millert
16606:
16607: * CHANGES: updated
16608:
16609: 1995-07-12 17:05 millert
16610:
16611: * logging.c: added BROKEN_SYSLOG support
16612:
16613: 1995-07-12 17:05 millert
16614:
16615: * config.h.in: added BROKEN_SYSLOG
16616:
16617: 1995-07-12 17:04 millert
16618:
16619: * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16620: allow for a machine udpating its time from a server
16621:
16622: 1995-07-12 17:04 millert
16623:
16624: * sudo.man: added 2 security notes updated Nieusma's email addr
16625:
16626: 1995-07-12 14:18 millert
16627:
16628: * lsearch.c: changed a memmove() to memcpy() since we don't have to
16629: worry about overlapping segments.
16630:
16631: 1995-07-11 15:41 millert
16632:
16633: * interfaces.c: cleanup up the loop when interfaces are groped in
16634: so that it is readable
16635:
16636: 1995-07-11 14:52 millert
16637:
16638: * Makefile.in, version.h: ++version
16639:
16640: 1995-07-09 18:17 millert
16641:
16642: * CHANGES: annotated 124-126
16643:
16644: 1995-07-07 16:06 millert
16645:
16646: * check.c: fixed permissions check on /tmp/.odus
16647:
16648: 1995-07-06 19:35 millert
16649:
16650: * check.c: fixed some comments
16651:
16652: 1995-07-06 14:49 millert
16653:
16654: * check.c: now checks owner & mode of timedir also checks for bogus
16655: dates on timestamp file
16656:
16657: 1995-07-06 14:49 millert
16658:
16659: * OPTIONS: updated TIMEOUT info
16660:
16661: 1995-07-06 14:48 millert
16662:
16663: * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16664:
16665: 1995-07-06 14:47 millert
16666:
16667: * compat.h: added definition of S_IRWXU
16668:
16669: 1995-07-06 14:47 millert
16670:
16671: * CHANGES: updated
16672:
16673: 1995-07-03 14:16 millert
16674:
16675: * interfaces.c: added #ifdef to make it compile on strange arches
16676:
16677: 1995-07-02 18:13 millert
16678:
16679: * aclocal.m4: fixed check for fulkl void impl.
16680:
16681: 1995-07-02 09:56 millert
16682:
16683: * check.c: added mssing "static"
16684:
16685: 1995-07-01 20:41 millert
16686:
16687: * insults.h: replaced #elif with #else #if constructs for ancient C
16688: compilers
16689:
16690: 1995-07-01 20:18 millert
16691:
16692: * INSTALL: updated irix c2 & kerb5 info
16693:
16694: 1995-07-01 20:15 millert
16695:
16696: * configure.in: added shadow pw support for irix
16697:
16698: 1995-07-01 16:07 millert
16699:
16700: * CHANGES: last changes for sudo 1.3.3
16701:
16702: 1995-07-01 16:07 millert
16703:
16704: * TODO, BUGS: updated
16705:
16706: 1995-07-01 16:04 millert
16707:
16708: * configure.in: now calls SUDO_SOCK_SA_LEN
16709:
16710: 1995-07-01 16:04 millert
16711:
16712: * config.h.in: added HAVE_SA_LEN
16713:
16714: 1995-07-01 16:04 millert
16715:
16716: * aclocal.m4: added SUDO_SOCK_SA_LEN
16717:
16718: 1995-07-01 15:49 millert
16719:
16720: * interfaces.c: now works with ip implementations that use sa_len
16721: in sockaddr
16722:
16723: 1995-07-01 14:26 millert
16724:
16725: * INSTALL: added note about buggy AIX compiler
16726:
16727: 1995-07-01 14:24 millert
16728:
16729: * interfaces.c: now include sys/time.h for AIX
16730:
16731: 1995-06-27 22:35 millert
16732:
16733: * Makefile.in: getcwd -> getwd
16734:
16735: 1995-06-27 21:28 millert
16736:
16737: * interfaces.c: now works for ISC and others. yay.
16738:
16739: 1995-06-26 14:24 millert
16740:
16741: * Makefile.in, version.h: version++
16742:
16743: 1995-06-22 20:26 millert
16744:
16745: * aclocal.m4: fixed test for full void impl
16746:
16747: 1995-06-22 20:25 millert
16748:
16749: * sudo.c: now check to see that st_dev is non-zero before assuming
16750: that we are being spoofed
16751:
16752: 1995-06-20 16:56 millert
16753:
16754: * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16755: AC_FUNC_UTIME_NULL
16756:
16757: 1995-06-19 16:32 millert
16758:
16759: * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16760:
16761: 1995-06-19 16:10 millert
16762:
16763: * logging.c: added cast for ttyname()
16764:
16765: 1995-06-19 15:23 millert
16766:
16767: * configure.in: fixed typo
16768:
16769: 1995-06-19 15:19 millert
16770:
16771: * check.c: now deal correctly with all known variation of utime()
16772: -- yippe
16773:
16774: 1995-06-19 15:19 millert
16775:
16776: * configure.in: added SUDO_FUNC_UTIME_POSIX
16777:
16778: 1995-06-19 15:19 millert
16779:
16780: * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16781:
16782: 1995-06-19 15:14 millert
16783:
16784: * config.h.in: added HAVE_UTIME_POSIX
16785:
16786: 1995-06-19 13:38 millert
16787:
16788: * check.c: fixed a typo
16789:
16790: 1995-06-19 13:29 millert
16791:
16792: * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16793:
16794: 1995-06-19 13:20 millert
16795:
16796: * check.c: fixed fascist C compiler warning
16797:
16798: 1995-06-18 23:14 millert
16799:
16800: * interfaces.c: now set strioctl.ic_timout in STRSET() now
16801: initialize num_interfaces to 0 (just to be anal)
16802:
16803: 1995-06-18 18:06 millert
16804:
16805: * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16806:
16807: 1995-06-18 18:05 millert
16808:
16809: * logging.c: added tty logging
16810:
16811: 1995-06-18 16:04 millert
16812:
16813: * interfaces.c: reworked the ISC code
16814:
16815: 1995-06-18 15:27 millert
16816:
16817: * Makefile.in, version.h: updated version
16818:
16819: 1995-06-18 15:24 millert
16820:
16821: * check.c: now expect old-style utime(3) if utime() can't take NULL
16822: as an arg
16823:
16824: 1995-06-18 15:08 millert
16825:
16826: * configure.in: added check for utime.h
16827:
16828: 1995-06-18 15:08 millert
16829:
16830: * config.h.in: added HAVE_UTIME_H
16831:
16832: 1995-06-18 14:48 millert
16833:
16834: * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16835:
16836: 1995-06-18 13:58 millert
16837:
16838: * configure.in: now search for kerb libs and includes
16839:
16840: 1995-06-18 13:03 millert
16841:
16842: * check.c: added support for utime(2)'s that can't take a NULL
16843: parameter
16844:
16845: 1995-06-18 13:03 millert
16846:
16847: * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16848: t belongs
16849:
16850: 1995-06-17 20:46 millert
16851:
16852: * configure.in: added utime(s) stuff
16853:
16854: 1995-06-17 20:46 millert
16855:
16856: * check.c: now use utime()
16857:
16858: 1995-06-17 20:46 millert
16859:
16860: * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16861:
16862: 1995-06-17 19:12 millert
16863:
16864: * utime.c: now use HAVE_UTIME_NULL
16865:
16866: 1995-06-17 19:02 millert
16867:
16868: * utime.c, emul/utime.h: Initial revision
16869:
16870: 1995-06-17 18:24 millert
16871:
16872: * check.c: need to setuid(0) to make kerb4 stuff work.
16873:
16874: 1995-06-17 18:14 millert
16875:
16876: * tgetpass.c: no more special case for kerberos
16877:
16878: 1995-06-17 18:13 millert
16879:
16880: * config.h.in: took out setreuid and setresuid stuff added kerb5
16881: stuff (use kerb4 emulation)
16882:
16883: 1995-06-17 18:13 millert
16884:
16885: * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16886: to 128 if kerberos
16887:
16888: 1995-06-17 18:12 millert
16889:
16890: * check.c: now use private ticket file for kerberos support to
16891: avoid trouncing on system one
16892:
16893: 1995-06-15 00:48 millert
16894:
16895: * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16896:
16897: 1995-06-15 00:47 millert
16898:
16899: * sudo.c: added anti-spoofing support
16900:
16901: 1995-06-15 00:47 millert
16902:
16903: * parse.c: now use global cmnd_st
16904:
16905: 1995-06-15 00:47 millert
16906:
16907: * logging.c: added SPOOF_ATTEMPT suypport
16908:
16909: 1995-06-14 23:41 millert
16910:
16911: * testsudoers.c, visudo.c: added void casts where appropriate
16912:
16913: 1995-06-14 23:40 millert
16914:
16915: * parse.yacc: fixed up spacing and added void casts where
16916: appropriate
16917:
16918: 1995-06-14 23:27 millert
16919:
16920: * sudo.c: fixed problem with "-p prompt" but no args
16921:
16922: 1995-06-14 04:43 millert
16923:
16924: * sudo.man: added BUGS and annotated -l description
16925:
16926: 1995-06-14 04:43 millert
16927:
16928: * sudo.h: validate() now takes a flag
16929:
16930: 1995-06-14 04:43 millert
16931:
16932: * sudo.c: validate() now takes a flag added -l
16933:
16934: 1995-06-14 04:42 millert
16935:
16936: * parse.yacc: added support for -l
16937:
16938: 1995-06-14 04:41 millert
16939:
16940: * parse.c: validate() now takes a flag that says whether or not to
16941: check the command
16942:
16943: 1995-06-07 21:36 millert
16944:
16945: * logging.c: now deals with Argv == 1
16946:
16947: 1995-06-07 21:34 millert
16948:
16949: * sudo.man: added -p option
16950:
16951: 1995-06-07 21:27 millert
16952:
16953: * sudo.c: added prompt support reworked parse_args()
16954:
16955: 1995-06-07 20:49 millert
16956:
16957: * sudo.h: added prompt
16958:
16959: 1995-06-07 20:49 millert
16960:
16961: * options.h: added PASSPROMPT
16962:
16963: 1995-06-07 20:48 millert
16964:
16965: * check.c: now use BUFSIZ as length of kerb password added kpass so
16966: pass is always a char * now use prompt global when asking for a
16967: password
16968:
16969: 1995-06-07 20:47 millert
16970:
16971: * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16972:
16973: 1995-06-07 20:43 millert
16974:
16975: * OPTIONS: added PASSPROMPT
16976:
16977: 1995-06-07 01:44 millert
16978:
16979: * configure.in: only look for -lufc or -lcrypt if crypt() not in
16980: libc
16981:
16982: 1995-06-07 01:43 millert
16983:
16984: * check.c: don't exit on kerb error, just warn if k_errno ==
16985: KDC_PR_UNKNOWN (unknown user) silently fail
16986:
16987: 1995-06-06 22:44 millert
16988:
16989: * INSTALL: added kerb4 note
16990:
16991: 1995-06-06 22:43 millert
16992:
16993: * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16994:
16995: 1995-06-06 22:41 millert
16996:
16997: * check.c: removed debugging printf
16998:
16999: 1995-06-06 22:33 millert
17000:
17001: * configure.in: KERBEROS -> KERB4 added checks for setreuid &
17002: setresuid
17003:
17004: 1995-06-06 22:32 millert
17005:
17006: * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
17007: HAVE_SETRESUID
17008:
17009: 1995-06-06 22:32 millert
17010:
17011: * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
17012: setreuid emulation with setresuid if applic
17013:
17014: 1995-06-06 22:31 millert
17015:
17016: * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
17017: chown() hack if no setreuid() or a broken one
17018:
17019: 1995-06-05 23:44 millert
17020:
17021: * config.h.in: added HAVE_KERBEROS
17022:
17023: 1995-06-05 23:43 millert
17024:
17025: * tgetpass.c: added KERBEROS support (long passwords)
17026:
17027: 1995-06-05 23:42 millert
17028:
17029: * check.c, configure.in: added kerberos support
17030:
17031: 1995-06-03 19:36 millert
17032:
17033: * sudo.h: added MODE_BACKGROUND
17034:
17035: 1995-06-03 19:36 millert
17036:
17037: * sudo.man: escaped dashes added -b option
17038:
17039: 1995-06-03 19:34 millert
17040:
17041: * sudo.c: added -b option
17042:
17043: 1995-06-03 18:52 millert
17044:
17045: * check.c: added crypt() for osf/1 3.x enhanced secuiry
17046:
17047: 1995-06-03 18:18 millert
17048:
17049: * configure.in: now check for -lcrypt
17050:
17051: 1995-06-03 18:00 millert
17052:
17053: * interfaces.c: added ENXIO like EADDRNOTAVAIL
17054:
17055: 1995-05-07 23:14 millert
17056:
17057: * configure.in: now emulate getwd(), not getcwd()
17058:
17059: 1995-05-07 23:13 millert
17060:
17061: * sudo.c: getcwd() -> getwd()
17062:
17063: 1995-05-07 23:12 millert
17064:
17065: * getwd.c: getcwd -> getwd
17066:
17067: 1995-05-02 01:34 millert
17068:
17069: * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
17070:
17071: 1995-05-02 01:34 millert
17072:
17073: * insults.h: broke out insults into separate include files
17074:
17075: 1995-05-02 01:32 millert
17076:
17077: * options.h, OPTIONS: added GOONS
17078:
17079: 1995-05-02 01:32 millert
17080:
17081: * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
17082:
17083: 1995-05-01 23:34 millert
17084:
17085: * Makefile.in, version.h: ++version
17086:
17087: 1995-05-01 23:34 millert
17088:
17089: * visudo.c: moved signal handler setup to setup_signals()
17090:
17091: 1995-05-01 23:33 millert
17092:
17093: * sudo.h: added load_interfaces()
17094:
17095: 1995-05-01 23:33 millert
17096:
17097: * sudo.c: moved load_interfaces to interfaces.c
17098:
17099: 1995-05-01 23:33 millert
17100:
17101: * parse.yacc: added clearaliases
17102:
17103: 1995-05-01 23:33 millert
17104:
17105: * OPTIONS, options.h: added FAST_MATCH
17106:
17107: 1995-05-01 23:32 millert
17108:
17109: * parse.lex: now uses clearaliases variable
17110:
17111: 1995-05-01 23:31 millert
17112:
17113: * interfaces.c: Initial revision
17114:
17115: 1995-05-01 23:31 millert
17116:
17117: * Makefile.in: added interfaces.[co]
17118:
17119: 1995-05-01 23:30 millert
17120:
17121: * testsudoers.c: now uses ip addrs and netmasks via
17122: load_interfaces()
17123:
17124: 1995-05-01 22:47 millert
17125:
17126: * sudo.c: now remove IFS instead of setting to "sane" value
17127:
17128: 1995-05-01 16:30 millert
17129:
17130: * parse.c: added FAST_MATCH
17131:
17132: 1995-04-29 20:19 millert
17133:
17134: * Makefile.in: sudo_goodpath.c-> goodpath.c
17135:
17136: 1995-04-29 20:15 millert
17137:
17138: * sudo.c: added Andy's new ISC changes
17139:
17140: 1995-04-14 14:06 millert
17141:
17142: * OPTIONS: added a sentence to SECURE_PATH info
17143:
17144: 1995-04-14 13:57 millert
17145:
17146: * BUGS: added one
17147:
17148: 1995-04-14 13:54 millert
17149:
17150: * RUNSON, CHANGES: updated
17151:
17152: 1995-04-13 17:04 millert
17153:
17154: * RUNSON: updated for beta3
17155:
17156: 1995-04-13 14:32 millert
17157:
17158: * Makefile.in, version.h: ++version
17159:
17160: 1995-04-13 13:56 millert
17161:
17162: * aclocal.m4: sendmail is now looked for in /usr/ucblib
17163:
17164: 1995-04-13 13:54 millert
17165:
17166: * sudo.c: fixed indentation
17167:
17168: 1995-04-13 13:35 millert
17169:
17170: * aclocal.m4: fixed a typo
17171:
17172: 1995-04-13 13:19 millert
17173:
17174: * sudo.c: updated ISC mods
17175:
17176: 1995-04-13 13:19 millert
17177:
17178: * configure.in: added unixware case
17179:
17180: 1995-04-13 13:19 millert
17181:
17182: * check.c: user_is_exempt is no longer hidden
17183:
17184: 1995-04-13 13:19 millert
17185:
17186: * RUNSON: updated
17187:
17188: 1995-04-13 13:19 millert
17189:
17190: * aclocal.m4: isc and riscos changes
17191:
17192: 1995-04-13 13:18 millert
17193:
17194: * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17195: SECURE_PATH
17196:
17197: 1995-04-13 13:18 millert
17198:
17199: * Makefile.in: fixed a typo and added testsudoers stuff
17200:
17201: 1995-04-13 12:34 millert
17202:
17203: * testsudoers.c: Initial revision
17204:
17205: 1995-04-12 19:31 millert
17206:
17207: * parse.yacc: applied fixed patch from Chris
17208:
17209: 1995-04-11 14:30 millert
17210:
17211: * Makefile.in: fixed a typo
17212:
17213: 1995-04-11 14:14 millert
17214:
17215: * parse.yacc: added a set of braces for bison
17216:
17217: 1995-04-11 14:01 millert
17218:
17219: * parse.yacc: merged in Chris' changes to dekludge the parser.
17220:
17221: 1995-04-11 00:38 millert
17222:
17223: * logging.c: send_mail() was calling find_path() which is wrong
17224: since find_path() stores cmnd in a static var. Anyhow, it
17225: doesn't make much sense since MAILER should always be fully
17226: qualified
17227:
17228: 1995-04-10 19:51 millert
17229:
17230: * sample.sudoers: added User_Alias stuff
17231:
17232: 1995-04-10 19:50 millert
17233:
17234: * aclocal.m4: SUDO_NEXT now looks for
17235: /usr/lib/NextStep/software_version
17236:
17237: 1995-04-10 19:50 millert
17238:
17239: * RUNSON: added DEC UNIX 3.0 w/ gcc
17240:
17241: 1995-04-10 19:49 millert
17242:
17243: * visudo.c: Exit was being used in places where exit should be used
17244:
17245: 1995-04-10 19:44 millert
17246:
17247: * sudoers: added "User alias specification"
17248:
17249: 1995-04-10 18:04 millert
17250:
17251: * parse.yacc: fixed probs caused by making nslots and naliases a
17252: size_t
17253:
17254: 1995-04-10 15:09 millert
17255:
17256: * RUNSON: added KSR, upped rev to 1.3.1b2
17257:
17258: 1995-04-10 15:07 millert
17259:
17260: * logging.c, parse.yacc: 1024 -> BUFSIZ
17261:
17262: 1995-04-10 15:05 millert
17263:
17264: * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17265: to appease lsearch on 64-bit machines
17266:
17267: 1995-04-09 19:30 millert
17268:
17269: * TODO: did a bunch of things and added a bunch :-)
17270:
17271: 1995-04-09 19:30 millert
17272:
17273: * PORTING: updated
17274:
17275: 1995-04-09 19:24 millert
17276:
17277: * visudo.man: closer to BSD manpage style
17278:
17279: 1995-04-09 19:15 millert
17280:
17281: * sudo.man: closer to standard BSD man format
17282:
17283: 1995-04-09 18:58 millert
17284:
17285: * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17286: sudo.h, version.h, emul/search.h: added RCS id
17287:
17288: 1995-04-09 17:35 millert
17289:
17290: * sudo.h: removed crufty #defines that are no longer used
17291:
17292: 1995-04-09 17:13 millert
17293:
17294: * BUGS: fixed a bug
17295:
17296: 1995-04-09 17:12 millert
17297:
17298: * sudo.man: updated based on sudo changes
17299:
17300: 1995-04-09 17:11 millert
17301:
17302: * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17303: keyword as well as a NAME or ALIAS
17304:
17305: 1995-04-09 17:11 millert
17306:
17307: * CHANGES: updated
17308:
17309: 1995-04-09 17:04 millert
17310:
17311: * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17312:
17313: 1995-04-09 15:24 millert
17314:
17315: * aclocal.m4: fixed bug with full void impl check
17316:
17317: 1995-04-08 23:11 millert
17318:
17319: * parse.yacc: fixed User_Alias supoprt
17320:
17321: 1995-04-08 22:27 millert
17322:
17323: * parse.yacc: added stubs for User_Alias support
17324:
17325: 1995-04-08 22:27 millert
17326:
17327: * sudo.c: now sets removes # bogus interfaces from num_interfaces
17328:
17329: 1995-04-08 22:26 millert
17330:
17331: * parse.lex: added User_Alias support
17332:
17333: 1995-04-07 21:10 millert
17334:
17335: * Makefile.in: removed extraneous TODO
17336:
17337: 1995-04-07 19:48 millert
17338:
17339: * visudo.c: ntwk_matches -> addr_matches
17340:
17341: 1995-04-07 15:38 millert
17342:
17343: * parse.yacc: ntwk_matches -> addr_matches
17344:
17345: 1995-04-07 15:37 millert
17346:
17347: * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17348: inet_network() (which expects octet boundaries) fixes for OSF
17349: (sizeof(int) != sizeof(long))
17350:
17351: 1995-04-07 15:08 millert
17352:
17353: * sudo.c: took out debugging info
17354:
17355: 1995-04-06 23:45 millert
17356:
17357: * aclocal.m4: OS was being set to unknown before non-uname based
17358: host checks. This caused no checks to happen since $OS was not
17359: zero-length.
17360:
17361: 1995-04-06 23:30 millert
17362:
17363: * sudo.c: fixed loading of interfaces struct still has debugging
17364: info in though
17365:
17366: 1995-04-06 22:23 millert
17367:
17368: * parse.c: fixed typo
17369:
17370: 1995-04-06 16:17 millert
17371:
17372: * Makefile.in: ++version
17373:
17374: 1995-04-06 16:16 millert
17375:
17376: * version.h: ++
17377:
17378: 1995-04-06 16:16 millert
17379:
17380: * visudo.c: removed extraneous extern decl of "top
17381:
17382: 1995-04-06 16:14 millert
17383:
17384: * visudo.c: now zeros "top"
17385:
17386: 1995-04-06 16:13 millert
17387:
17388: * parse.yacc: removed parser_cleanup (no need for it now)
17389:
17390: 1995-04-06 16:13 millert
17391:
17392: * parse.lex: now calls reset_aliases() directly
17393:
17394: 1995-04-04 18:21 millert
17395:
17396: * OPTIONS: added a sentence to SECURE_PATH description
17397:
17398: 1995-04-04 18:17 millert
17399:
17400: * parse.c: fixed my stupid bug where I used NAMLEN on something I
17401: wanted to just get the name from. argh.
17402:
17403: 1995-04-03 16:58 millert
17404:
17405: * lsearch.c: fixed argument order of memmove() that i hosed when
17406: converting from bcopy(). arghh.
17407:
17408: 1995-04-03 15:33 millert
17409:
17410: * Makefile.in: finally fixed DISTFILES line
17411:
17412: 1995-04-03 15:21 millert
17413:
17414: * Makefile.in: tabs -> spaces
17415:
17416: 1995-04-03 15:15 millert
17417:
17418: * Makefile.in: added missing files to DISTFILES
17419:
17420: 1995-04-03 14:50 millert
17421:
17422: * Makefile.in: SUPPORTED -> RUNSON
17423:
17424: 1995-04-01 03:12 millert
17425:
17426: * TODO: updated
17427:
17428: 1995-04-01 01:54 millert
17429:
17430: * RUNSON: updated for pl5b1 release
17431:
17432: 1995-04-01 01:53 millert
17433:
17434: * BUGS, TODO: updated
17435:
17436: 1995-04-01 01:52 millert
17437:
17438: * check.c: fixed bug where if you hit return at first sudo prompt
17439: it would still log as a failure
17440:
17441: 1995-04-01 01:29 millert
17442:
17443: * CHANGES: updated
17444:
17445: 1995-04-01 01:25 millert
17446:
17447: * aclocal.m4: better test for bogus void * implementation
17448:
17449: 1995-03-31 20:33 millert
17450:
17451: * logging.c: added PASSWORDS_NOT_CORRECT
17452:
17453: 1995-03-31 20:32 millert
17454:
17455: * check.c: added PASSWORDS_NOT_CORRECT stuff]
17456:
17457: 1995-03-31 20:30 millert
17458:
17459: * sudo.h: added PASSWORDS_NOT_CORRECT
17460:
17461: 1995-03-31 19:16 millert
17462:
17463: * tgetpass.c: moved pathnames.h
17464:
17465: 1995-03-31 19:16 millert
17466:
17467: * sudo.c: removed some unused vars and fixed up uid2str
17468:
17469: 1995-03-31 19:15 millert
17470:
17471: * putenv.c: moved compat.h
17472:
17473: 1995-03-31 19:14 millert
17474:
17475: * getcwd.c, getwd.c: added pathnames.h
17476:
17477: 1995-03-31 18:18 millert
17478:
17479: * parse.yacc: fixed a typo I introduced in the last checkin :-(
17480:
17481: 1995-03-31 18:11 millert
17482:
17483: * parse.lex: can't have #ifdef's where N is defined so just do this
17484: the broken way for AIX
17485:
17486: 1995-03-31 18:08 millert
17487:
17488: * parse.yacc: better hack from Chris (but still a hack)
17489:
17490: 1995-03-31 18:05 millert
17491:
17492: * parse.lex: stupid hack for broken aix lex
17493:
17494: 1995-03-31 17:47 millert
17495:
17496: * tgetpass.c: now includes compat.h
17497:
17498: 1995-03-31 17:27 millert
17499:
17500: * visudo.c: now includes fcntl.h
17501:
17502: 1995-03-31 17:27 millert
17503:
17504: * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17505:
17506: 1995-03-31 16:12 millert
17507:
17508: * parse.yacc: dirty hack to fix parser bug. i don't really like
17509: this but it works for now...
17510:
17511: 1995-03-31 16:12 millert
17512:
17513: * sudo.c: uid2str is now static like the prototype says
17514:
17515: 1995-03-29 23:48 millert
17516:
17517: * RUNSON: Initial revision
17518:
17519: 1995-03-29 23:47 millert
17520:
17521: * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17522:
17523: 1995-03-29 23:46 millert
17524:
17525: * sudo.c: check_sudoers now returns an error code and sudo calls
17526: inform_user and log_error based on the return value.
17527:
17528: 1995-03-29 23:45 millert
17529:
17530: * logging.c, sudo.h: added entries for new errors
17531:
17532: 1995-03-29 23:03 millert
17533:
17534: * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17535: sudoers file
17536:
17537: 1995-03-29 22:52 millert
17538:
17539: * Makefile.in: took out testsudoers
17540:
17541: 1995-03-29 22:36 millert
17542:
17543: * sudo.c: now explicately checks that it is setuid root
17544:
17545: 1995-03-29 22:28 millert
17546:
17547: * sudo.c: If a user has no passwd entry sudo would segv (writing to
17548: a garbage pointer). Now allocate space before writing :-)
17549:
17550: 1995-03-29 22:06 millert
17551:
17552: * configure.in: reordered AC_CHECK_FUNCS
17553:
17554: 1995-03-29 22:06 millert
17555:
17556: * config.h.in: fixed memset macro
17557:
17558: 1995-03-29 21:47 millert
17559:
17560: * logging.c: bzero -> memset when a parse error is logged the line
17561: number of the error is now logged too
17562:
17563: 1995-03-29 21:46 millert
17564:
17565: * tgetpass.c, visudo.c: bzero -> memset
17566:
17567: 1995-03-29 21:46 millert
17568:
17569: * INSTALL: added Sunos to blurb about c2 security
17570:
17571: 1995-03-29 21:45 millert
17572:
17573: * configure.in: added a SUN4 define for C2 security
17574:
17575: 1995-03-29 21:44 millert
17576:
17577: * config.h.in: bcopy -> memmove bzero -> memset
17578:
17579: 1995-03-29 21:43 millert
17580:
17581: * lsearch.c: bcopy -> memmove char * -> VOID *
17582:
17583: 1995-03-29 21:30 millert
17584:
17585: * check.c: added support for sunos with C2 security
17586:
17587: 1995-03-29 21:12 millert
17588:
17589: * OPTIONS, options.h: reordered
17590:
17591: 1995-03-29 21:12 millert
17592:
17593: * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17594:
17595: 1995-03-29 21:12 millert
17596:
17597: * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17598:
17599: 1995-03-29 21:12 millert
17600:
17601: * config.h.in: added _SUDO_PATH_LOGFILE
17602:
17603: 1995-03-29 21:11 millert
17604:
17605: * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17606: added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17607: too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17608:
17609: 1995-03-29 18:17 millert
17610:
17611: * TROUBLESHOOTING: Initial revision
17612:
17613: 1995-03-29 17:59 millert
17614:
17615: * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17616: load_global() to work around a problem is trusted hpux shadow
17617: passwords. yuck.
17618:
17619: 1995-03-29 17:41 millert
17620:
17621: * parse.yacc: backed out a change in malloc/realloc
17622:
17623: 1995-03-29 17:38 millert
17624:
17625: * parse.yacc: now include stdlib.h
17626:
17627: 1995-03-29 17:22 millert
17628:
17629: * visudo.c: now do an freopen() of the stmp file so that yyin will
17630: always point to the same thing. This is important for flex since
17631: we are doing a YY_NEWFILE
17632:
17633: 1995-03-29 17:20 millert
17634:
17635: * parse.yacc: replaced yywrap() with parser_cleanup() since
17636: yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17637: sigh.
17638:
17639: 1995-03-29 17:18 millert
17640:
17641: * parse.lex: now have a rule that matches anything that doesn't
17642: match an explicite rule. well, you know what i mean (. matches
17643: anything not yet matched). However, this means that there is
17644: input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17645: So, yywrap has moved into parse.lex and it calls parser_cleanup()
17646: which is most of the old yywrap() sigh.
17647:
17648: 1995-03-29 17:17 millert
17649:
17650: * SUPPORTED: no longer used
17651:
17652: 1995-03-29 16:13 millert
17653:
17654: * getcwd.c, getwd.c: moved compat.h to be the last include file
17655:
17656: 1995-03-29 16:11 millert
17657:
17658: * parse.yacc: fixed type of aliascmp() args
17659:
17660: 1995-03-29 15:58 millert
17661:
17662: * find_path.c: NULL -> '\0'
17663:
17664: 1995-03-29 15:42 millert
17665:
17666: * parse.yacc: added casts to lfind and lsearch args for irix
17667:
17668: 1995-03-29 08:20 millert
17669:
17670: * Makefile.in: bsdinstall -> install-sh
17671:
17672: 1995-03-29 08:20 millert
17673:
17674: * INSTALL: added info about make realclean
17675:
17676: 1995-03-29 08:17 millert
17677:
17678: * Makefile.in: updated VERSION added dependencies for visudo.cat
17679:
17680: 1995-03-29 08:17 millert
17681:
17682: * version.h: -> pl5b1
17683:
17684: 1995-03-29 08:16 millert
17685:
17686: * sudo.c: took out -l
17687:
17688: 1995-03-29 00:03 millert
17689:
17690: * Makefile.in: now there is a real visudo.man and visudo.cat
17691:
17692: 1995-03-28 23:54 millert
17693:
17694: * sudo.man: took out visudo stuff
17695:
17696: 1995-03-28 23:54 millert
17697:
17698: * visudo.man: Initial revision
17699:
17700: 1995-03-28 23:12 millert
17701:
17702: * parse.c, parse.lex, parse.yacc: updated copyright
17703:
17704: 1995-03-28 23:05 millert
17705:
17706: * README: updated for pl5
17707:
17708: 1995-03-28 20:02 millert
17709:
17710: * sudo.man: updated Nieusma & Hieb email addresses
17711:
17712: 1995-03-28 19:57 millert
17713:
17714: * INSTALL: updated to include options.h and OPTIONS
17715:
17716: 1995-03-28 19:35 millert
17717:
17718: * CHANGES, TODO: updated
17719:
17720: 1995-03-28 19:35 millert
17721:
17722: * BUGS: eliminated bug #1 (yay)
17723:
17724: 1995-03-28 19:31 millert
17725:
17726: * configure.in: sunos no longer gets linked statically
17727:
17728: 1995-03-28 18:58 millert
17729:
17730: * parse.lex: prototype now uses __P()
17731:
17732: 1995-03-28 18:49 millert
17733:
17734: * parse.lex: make fill() non-ansi
17735:
17736: 1995-03-28 15:26 millert
17737:
17738: * parse.c: made -v (validate) work
17739:
17740: 1995-03-28 15:26 millert
17741:
17742: * logging.c: now gives host
17743:
17744: 1995-03-28 10:34 millert
17745:
17746: * find_path.c: don't check for execute/statable if fq or relative
17747: path given
17748:
17749: 1995-03-28 01:07 millert
17750:
17751: * parse.c: added a cast
17752:
17753: 1995-03-28 00:49 millert
17754:
17755: * visudo.c: now include ctype.h for islower and tolower macros
17756:
17757: 1995-03-28 00:48 millert
17758:
17759: * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17760:
17761: 1995-03-28 00:48 millert
17762:
17763: * sudo.c: moved a set of parens
17764:
17765: 1995-03-28 00:48 millert
17766:
17767: * strdup.c: now include compat.h
17768:
17769: 1995-03-28 00:47 millert
17770:
17771: * parse.yacc: now cast malloc & realloc return vals added search
17772: for HAVE_LSEARCH now use strcmp if no strcasecmp available
17773:
17774: 1995-03-28 00:46 millert
17775:
17776: * lsearch.c, emul/search.h: void * -> VOID *
17777:
17778: 1995-03-28 00:45 millert
17779:
17780: * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17781: HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17782:
17783: 1995-03-28 00:44 millert
17784:
17785: * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17786:
17787: 1995-03-28 00:44 millert
17788:
17789: * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17790: echo and results to most SUDO_* macros
17791:
17792: 1995-03-28 00:43 millert
17793:
17794: * Makefile.in: no more -I.
17795:
17796: 1995-03-28 00:22 millert
17797:
17798: * configure.in: various 1.x ro 2.x autoconf changes now check for
17799: strcasecmp now use AC_INSTALL_PROG instead of custom one added
17800: check for fully woorking void implementation
17801:
17802: 1995-03-28 00:02 millert
17803:
17804: * Makefile.in: added lsearch & search.h visudo links into
17805: $(LIBOBJS)
17806:
17807: 1995-03-27 23:43 millert
17808:
17809: * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17810:
17811: 1995-03-27 23:40 millert
17812:
17813: * visudo.c: whatnow_help was prototyped to be static be was not
17814: declared as such
17815:
17816: 1995-03-27 21:15 millert
17817:
17818: * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17819: used) added check for dirent/dir/ndir.h
17820:
17821: 1995-03-27 21:09 millert
17822:
17823: * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17824:
17825: 1995-03-27 20:38 millert
17826:
17827: * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17828:
17829: 1995-03-27 20:23 millert
17830:
17831: * emul/search.h, lsearch.c: Initial revision
17832:
17833: 1995-03-27 18:26 millert
17834:
17835: * parse.yacc: eliminated bison warnings
17836:
17837: 1995-03-27 17:10 millert
17838:
17839: * parse.lex: added missing case
17840:
17841: 1995-03-27 17:04 millert
17842:
17843: * visudo.c: now iincludes signal.h
17844:
17845: 1995-03-27 15:16 millert
17846:
17847: * parse.yacc: only clear data structures on a parse error
17848:
17849: 1995-03-27 15:01 millert
17850:
17851: * visudo.c: whatnow() now gives help on invalid input
17852:
17853: 1995-03-27 14:54 millert
17854:
17855: * visudo.c: added a whatnow() function (sort of like mh)
17856:
17857: 1995-03-27 14:53 millert
17858:
17859: * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17860: by calling reset_aliases() and clearing top took reset stuff out
17861: of yyerror() since it doesn't beling there (and doesn't work
17862: anyway). errorlineno is now initially set to -1 so we can set it
17863: to the first error that occurrs (it was getting set to the last)
17864:
17865: 1995-03-27 14:53 millert
17866:
17867: * parse.lex: added a void cast
17868:
17869: 1995-03-27 13:26 millert
17870:
17871: * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17872:
17873: 1995-03-26 01:33 millert
17874:
17875: * sudo.c, sudo.h: removed ocmnd
17876:
17877: 1995-03-26 01:19 millert
17878:
17879: * sudo.h: no more sudo_realpath() and find_path() changed params
17880:
17881: 1995-03-26 01:19 millert
17882:
17883: * sudo.c: find_path() changed since no more realpath()
17884:
17885: 1995-03-26 01:18 millert
17886:
17887: * parse.yacc: on error, errorlineno is set to the line where the
17888: error occurred added kill_aliases() to free the aliases struct
17889: now clean up in yyerror() so we can reparse cleanly
17890:
17891: 1995-03-26 01:17 millert
17892:
17893: * logging.c: changed to use new find_path()
17894:
17895: 1995-03-26 01:17 millert
17896:
17897: * options.h, parse.c: no more USE_REALPATH
17898:
17899: 1995-03-26 01:16 millert
17900:
17901: * find_path.c: removed all the realpath() stuff
17902:
17903: 1995-03-26 01:16 millert
17904:
17905: * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17906:
17907: 1995-03-26 01:12 millert
17908:
17909: * visudo.c: now works correctly with utk parser
17910:
17911: 1995-03-26 00:04 millert
17912:
17913: * goodpath.c: Initial revision
17914:
17915: 1995-03-25 23:23 millert
17916:
17917: * sudo_realpath.c: eliminated a compiler warning
17918:
17919: 1995-03-25 21:56 millert
17920:
17921: * sudo.c: elinated compiler warning
17922:
17923: 1995-03-25 20:40 millert
17924:
17925: * sudo_realpath.c: added sudo_goodpath()
17926:
17927: 1995-03-25 20:40 millert
17928:
17929: * sudo.h: added prototype for sudo_goodpath
17930:
17931: 1995-03-25 20:39 millert
17932:
17933: * parse.c: added support for /sys/dir.h
17934:
17935: 1995-03-25 20:39 millert
17936:
17937: * options.h: USE_REALPATH turned off
17938:
17939: 1995-03-25 20:39 millert
17940:
17941: * find_path.c: added calls to sudo_goodpath()
17942:
17943: 1995-03-25 20:39 millert
17944:
17945: * configure.in: added check for dirent.h
17946:
17947: 1995-03-25 20:38 millert
17948:
17949: * config.h.in: added HAVE_DIRENT_H
17950:
17951: 1995-03-25 19:27 millert
17952:
17953: * configure.in: added in linux shadow pass stuff
17954:
17955: 1995-03-24 14:43 millert
17956:
17957: * visudo.c: added back host, user, cmnd, parse_error
17958:
17959: 1995-03-24 14:19 millert
17960:
17961: * visudo.c: added in utk changes plus some minor cosmetic changes
17962:
17963: 1995-03-24 14:17 millert
17964:
17965: * sudo.c, sudo_realpath.c: added void casts for printf's
17966:
17967: 1995-03-24 14:17 millert
17968:
17969: * options.h: added a define of USE_REALPATH
17970:
17971: 1995-03-24 14:17 millert
17972:
17973: * configure.in: there is no more visudoers/Makefile
17974:
17975: 1995-03-24 14:16 millert
17976:
17977: * Makefile.in: added in utk changes (visudo is now built from the
17978: toplevel)
17979:
17980: 1995-03-24 14:15 millert
17981:
17982: * find_path.c: added (void) casts to printf's
17983:
17984: 1995-03-23 22:32 millert
17985:
17986: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17987: in utk changes
17988:
17989: 1995-03-22 23:13 millert
17990:
17991: * find_path.c: now check to see that what we are trying to run is a
17992: file (or a link to a file, we do a stat(2) so there is no diff)
17993:
17994: 1995-03-13 15:56 millert
17995:
17996: * CHANGES: updated
17997:
17998: 1995-03-13 15:56 millert
17999:
18000: * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
18001: new autoconf
18002:
18003: 1995-03-13 15:11 millert
18004:
18005: * sudo.man: added myself as maintainer
18006:
18007: 1995-02-16 23:31 millert
18008:
18009: * sudo.c: changed setegid -> setgid
18010:
18011: 1995-02-06 17:43 millert
18012:
18013: * configure.in: fixed the test for irix 5.x to skip bad libs
18014:
18015: 1995-02-06 17:43 millert
18016:
18017: * aclocal.m4: now initialize OS and OSREV
18018:
18019: 1995-01-26 20:52 millert
18020:
18021: * configure.in: irix5 changes
18022:
18023: 1995-01-26 20:28 millert
18024:
18025: * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
18026: for autoconf 2.1 compatibility
18027:
18028: 1995-01-18 19:49 millert
18029:
18030: * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
18031: do the righ thing wrt yyrestart (grrrr)
18032:
18033: 1995-01-16 18:44 millert
18034:
18035: * Makefile.in: added visudoers/compat.h to DISTFILES
18036:
18037: 1995-01-16 17:01 millert
18038:
18039: * configure.in: fixed an echo
18040:
18041: 1995-01-16 16:36 millert
18042:
18043: * sudo.c: added ocmnd declaration adjusted for find_path()'s new
18044: parameters
18045:
18046: 1995-01-16 16:35 millert
18047:
18048: * sudo.h: added ocmnd extern adjusted find_path() prototype
18049:
18050: 1995-01-16 16:34 millert
18051:
18052: * parse.c: cmndcmp() now takes 3 arguments and checks against the
18053: qualified as well as the unqualified pathname. more code that
18054: should use cmndcmp() but did not, now does
18055:
18056: 1995-01-16 16:34 millert
18057:
18058: * options.h: added to a comment
18059:
18060: 1995-01-16 16:33 millert
18061:
18062: * logging.c: changed to use new find_path() parameter passing
18063:
18064: 1995-01-16 16:32 millert
18065:
18066: * find_path.c: find_path() now takes 2 copyout parameters (one for
18067: the qualified pathname and one for the unqualified pathname).
18068: The third parameter may be NULL.
18069:
18070: 1995-01-16 16:31 millert
18071:
18072: * configure.in: no longer munge pathnames.h
18073:
18074: 1995-01-16 16:30 millert
18075:
18076: * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
18077: defined in config.h) as a result, pathnames.h does not need to be
18078: run through configure and the user can override the configured
18079: values easily.
18080:
18081: 1995-01-16 16:30 millert
18082:
18083: * config.h.in: added _SUDO_PATH_* entries
18084:
18085: 1995-01-16 16:30 millert
18086:
18087: * aclocal.m4: _PATH* -> _SUDO_PATH_*
18088:
18089: 1995-01-16 16:28 millert
18090:
18091: * Makefile.in: updated DISTFILES and HDRS .o's now depend on
18092: config.h
18093:
18094: 1995-01-13 12:52 millert
18095:
18096: * compat.h: removed extraneous #endif
18097:
18098: 1995-01-13 12:48 millert
18099:
18100: * aclocal.m4: added SUDO_PROG_MV
18101:
18102: 1995-01-13 12:47 millert
18103:
18104: * configure.in: added SUDO_PROG_MV added riscos and isc os types
18105: took out -DSHORT_MESSAGE from --with-csops since it is now the
18106: default
18107:
18108: 1995-01-13 12:46 millert
18109:
18110: * sudo.c: move the include of id.h to compat.h now includes
18111: options.h
18112:
18113: 1995-01-13 12:45 millert
18114:
18115: * sudo.h: moved compatibility #defines to compat.h
18116:
18117: 1995-01-13 12:45 millert
18118:
18119: * pathnames.h.in: added _PATH_MV
18120:
18121: 1995-01-13 12:43 millert
18122:
18123: * config.h.in: move __P to compat.h
18124:
18125: 1995-01-13 12:39 millert
18126:
18127: * getcwd.c, getwd.c, putenv.c: now includes compat.h
18128:
18129: 1995-01-13 12:39 millert
18130:
18131: * compat.h: Initial revision
18132:
18133: 1995-01-11 19:11 millert
18134:
18135: * sudo.h: pull user-configurable stuff out and put in options.h
18136:
18137: 1995-01-11 18:43 millert
18138:
18139: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
18140: sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
18141: options.h
18142:
18143: 1995-01-11 18:41 millert
18144:
18145: * Makefile.in: added visudoers/options.h
18146:
18147: 1995-01-11 18:40 millert
18148:
18149: * options.h, OPTIONS: Initial revision
18150:
18151: 1995-01-11 18:39 millert
18152:
18153: * Makefile.in: added OPTIONS and options.h
18154:
18155: 1995-01-11 18:36 millert
18156:
18157: * logging.c: changed #ifdef's to use LOGGING and
18158: SLOG_SYSLOG/SLOG_FILE
18159:
18160: 1995-01-11 11:02 millert
18161:
18162: * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
18163:
18164: 1994-12-17 18:18 millert
18165:
18166: * visudo.c: now only do Editor +line_num if line_num != 0
18167:
18168: 1994-12-15 21:06 millert
18169:
18170: * visudo.c: now use mv if rename(2) fails
18171:
18172: 1994-12-15 20:32 millert
18173:
18174: * BUGS: added a visudo bug
18175:
18176: 1994-12-15 19:46 millert
18177:
18178: * check.c: expanded comment
18179:
18180: 1994-11-12 18:33 millert
18181:
18182: * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
18183: set
18184:
18185: 1994-11-09 19:49 millert
18186:
18187: * sudo.c: added mips & isc support
18188:
18189: 1994-11-09 19:49 millert
18190:
18191: * parse.c: added support for non-root owned sudoers file
18192:
18193: 1994-11-09 19:48 millert
18194:
18195: * check.c: added exempt group support
18196:
18197: 1994-11-09 19:47 millert
18198:
18199: * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18200: non-root own sudoers file added exempt group support added isc
18201: support
18202:
18203: 1994-11-09 19:46 millert
18204:
18205: * visudo.c: now copy sudoers to temp file via read/write (not
18206: stdio) now chown new sudoers file to SUDOERS_OWNER
18207:
18208: 1994-11-07 20:40 millert
18209:
18210: * configure.in: added skey support
18211:
18212: 1994-11-07 20:39 millert
18213:
18214: * sudo.h: fixed typo added set_perms support added skey support
18215: added seteuid()/setegid() emulation for AIX
18216:
18217: 1994-11-07 20:38 millert
18218:
18219: * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18220: owned by root nread/write by only root
18221:
18222: 1994-11-07 20:38 millert
18223:
18224: * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18225:
18226: 1994-11-07 20:38 millert
18227:
18228: * check.c: be_* -> set_perms() added skey support
18229:
18230: 1994-11-06 18:59 millert
18231:
18232: * Makefile.in: ++version
18233:
18234: 1994-11-06 18:59 millert
18235:
18236: * version.h: ++
18237:
18238: 1994-10-21 13:16 millert
18239:
18240: * sudo.c: now sets IFS
18241:
18242: 1994-10-21 12:02 millert
18243:
18244: * insults.h: fixed typo
18245:
18246: 1994-10-15 15:48 millert
18247:
18248: * config.h.in: added HAVE_SKEY
18249:
18250: 1994-10-04 13:00 millert
18251:
18252: * CHANGES: updated
18253:
18254: 1994-10-04 12:57 millert
18255:
18256: * Makefile.in: ++version
18257:
18258: 1994-10-04 12:57 millert
18259:
18260: * version.h: ++
18261:
18262: 1994-10-04 12:56 millert
18263:
18264: * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18265:
18266: 1994-10-04 12:56 millert
18267:
18268: * configure.in: added function check for tcgetattr(3)
18269:
18270: 1994-10-04 12:55 millert
18271:
18272: * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18273:
18274: 1994-10-04 12:53 millert
18275:
18276: * config.h.in: added check for tcgetattr
18277:
18278: 1994-09-26 17:38 millert
18279:
18280: * CHANGES: updated
18281:
18282: 1994-09-22 13:30 millert
18283:
18284: * parse.lex: now only include unistd.h for linux
18285:
18286: 1994-09-21 14:29 millert
18287:
18288: * Makefile.in: added visudo.8 generation
18289:
18290: 1994-09-21 14:07 millert
18291:
18292: * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18293:
18294: 1994-09-20 19:39 millert
18295:
18296: * BUGS: added one
18297:
18298: 1994-09-20 19:39 millert
18299:
18300: * CHANGES: updated
18301:
18302: 1994-09-20 19:38 millert
18303:
18304: * README: added mailing list info
18305:
18306: 1994-09-20 19:37 millert
18307:
18308: * parse.yacc: now use sudolineno instead of yylineno fixed bison
18309: warnings
18310:
18311: 1994-09-20 19:37 millert
18312:
18313: * configure.in: now use -no_library_replacement for osf don't make
18314: a static binary for hpux >= 9.0
18315:
18316: 1994-09-20 19:21 millert
18317:
18318: * tgetpass.c: added string.h/strings.h inclusion
18319:
18320: 1994-09-20 19:21 millert
18321:
18322: * config.h.in: added ssize_t def
18323:
18324: 1994-09-20 19:18 millert
18325:
18326: * parse.lex: added inclusion of string.h/strings.h
18327:
18328: 1994-09-20 18:48 millert
18329:
18330: * aclocal.m4: fixed uname | sed (needed to quote the '[')
18331:
18332: 1994-09-20 18:42 millert
18333:
18334: * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18335: errors
18336:
18337: 1994-09-20 18:13 millert
18338:
18339: * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18340: counted upon.
18341:
18342: 1994-09-20 18:10 millert
18343:
18344: * TODO: updated
18345:
18346: 1994-09-20 17:52 millert
18347:
18348: * parse.c: added code to support command listings
18349:
18350: 1994-09-20 17:36 millert
18351:
18352: * sudo.c: added code for -l flag
18353:
18354: 1994-09-20 17:35 millert
18355:
18356: * sudo.man: fixed typo added info for -l flag
18357:
18358: 1994-09-20 14:45 millert
18359:
18360: * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18361:
18362: 1994-09-20 14:45 millert
18363:
18364: * aclocal.m4: added SUDO_SSIZE_T
18365:
18366: 1994-09-20 14:44 millert
18367:
18368: * sudo.h: added MODE_LIST
18369:
18370: 1994-09-20 14:43 millert
18371:
18372: * configure.in: added AC_SSIZE_T
18373:
18374: 1994-09-19 20:53 millert
18375:
18376: * find_path.c, sudo_realpath.c: readlink() is now declared as
18377: returning ssize~_t
18378:
18379: 1994-09-19 20:44 millert
18380:
18381: * configure.in: added -laud for OSF c2
18382:
18383: 1994-09-02 15:55 millert
18384:
18385: * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18386: Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18387: sudo-bugs@cs.colorado.edu
18388:
18389: 1994-09-02 15:54 millert
18390:
18391: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18392: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18393: sudo_setenv.c, tgetpass.c, version.h: changed
18394: sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18395:
18396: 1994-09-01 15:56 millert
18397:
18398: * Makefile.in: ++version
18399:
18400: 1994-09-01 15:55 millert
18401:
18402: * version.h: ++
18403:
18404: 1994-09-01 15:55 millert
18405:
18406: * logging.c: added host to alertmail messages
18407:
18408: 1994-09-01 15:55 millert
18409:
18410: * CHANGES, TODO: udpated
18411:
18412: 1994-09-01 15:26 millert
18413:
18414: * logging.c: fixed logging problem where mail would not say which
18415: user it was
18416:
18417: 1994-09-01 13:45 millert
18418:
18419: * configure.in: added -laud for gcc if osf & c2
18420:
18421: 1994-09-01 13:39 millert
18422:
18423: * check.c: moved set_auth_parameters to sudo.c
18424:
18425: 1994-09-01 13:38 millert
18426:
18427: * sudo.c: added set_auth_parameters for osf
18428:
18429: 1994-09-01 13:22 millert
18430:
18431: * configure.in: cleaned up -static stuff
18432:
18433: 1994-09-01 13:15 millert
18434:
18435: * Makefile.in: ++version
18436:
18437: 1994-09-01 13:15 millert
18438:
18439: * version.h: ++
18440:
18441: 1994-09-01 13:15 millert
18442:
18443: * sudo.c: changed setenv() to sudo_setenv()
18444:
18445: 1994-09-01 13:12 millert
18446:
18447: * check.c: fixed osf problem
18448:
18449: 1994-08-31 22:17 millert
18450:
18451: * configure.in: added OSF C2 stuff
18452:
18453: 1994-08-31 22:00 millert
18454:
18455: * CHANGES: updated
18456:
18457: 1994-08-31 21:56 millert
18458:
18459: * check.c: added osf auth support & removed some extra spaces
18460:
18461: 1994-08-31 21:52 millert
18462:
18463: * INSTALL, SUPPORTED: added osf C2 stuff
18464:
18465: 1994-08-31 19:52 millert
18466:
18467: * TODO: added 2 suggestions
18468:
18469: 1994-08-31 19:33 millert
18470:
18471: * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18472:
18473: 1994-08-31 18:48 millert
18474:
18475: * version.h: pl1
18476:
18477: 1994-08-30 18:31 millert
18478:
18479: * version.h: 1.3.1final
18480:
18481: 1994-08-30 18:30 millert
18482:
18483: * Makefile.in: added HISTORY
18484:
18485: 1994-08-30 18:30 millert
18486:
18487: * sudo.man: mention HISTPRY file
18488:
18489: 1994-08-30 18:30 millert
18490:
18491: * sudo.c: use sizeof instead of a constant in 1 place
18492:
18493: 1994-08-30 18:30 millert
18494:
18495: * parse.yacc: added unistd.h
18496:
18497: 1994-08-30 18:29 millert
18498:
18499: * parse.lex: added unistd.h
18500:
18501: 1994-08-30 18:27 millert
18502:
18503: * README: udpated
18504:
18505: 1994-08-30 18:15 millert
18506:
18507: * HISTORY: Initial revision
18508:
18509: 1994-08-17 12:45 millert
18510:
18511: * version.h: ++
18512:
18513: 1994-08-17 12:39 millert
18514:
18515: * CHANGES: updated
18516:
18517: 1994-08-17 12:36 millert
18518:
18519: * sudo_setenv.c: added unistd.h include
18520:
18521: 1994-08-16 15:46 millert
18522:
18523: * sudo.c: added sys/time.h for AIX
18524:
18525: 1994-08-14 21:22 millert
18526:
18527: * configure.in: added check for -lsocket and sys/sockio.h
18528:
18529: 1994-08-14 21:21 millert
18530:
18531: * config.h.in: took out libshadow check and added in sys/sockio.h
18532: check
18533:
18534: 1994-08-14 21:21 millert
18535:
18536: * sudo.c: now include sockio.h instead of ioctl.h if it exists
18537: "sudo -" now gets a better error message
18538:
18539: 1994-08-14 20:47 millert
18540:
18541: * sample.sudoers: now has a dir and subnet entry
18542:
18543: 1994-08-13 18:15 millert
18544:
18545: * sudo.c: removed if_ether.h
18546:
18547: 1994-08-13 17:16 millert
18548:
18549: * TODO: added an item
18550:
18551: 1994-08-13 17:15 millert
18552:
18553: * sudo.man: added network and ip addresses to man page
18554:
18555: 1994-08-13 17:09 millert
18556:
18557: * sudo.c: no error if can't get interfaces or netmask since
18558: networking may not be in the kernel.
18559:
18560: 1994-08-13 17:08 millert
18561:
18562: * parse.c: nwo check for interfaces == NULL
18563:
18564: 1994-08-12 21:22 millert
18565:
18566: * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18567: to fail if the last entry in the spec failed (ie: it was only
18568: looking at the last entry). CLeaned things up by adding the
18569: cmndcmp() function--all neat & tidy
18570:
18571: 1994-08-12 21:21 millert
18572:
18573: * CHANGES: added one
18574:
18575: 1994-08-11 23:42 millert
18576:
18577: * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18578:
18579: 1994-08-11 21:58 millert
18580:
18581: * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18582: netinet/in.h
18583:
18584: 1994-08-11 21:58 millert
18585:
18586: * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18587: visudo.c: added include of netinet/in.h
18588:
18589: 1994-08-11 21:57 millert
18590:
18591: * version.h: ++
18592:
18593: 1994-08-11 21:57 millert
18594:
18595: * sudo.h: added interfaces global
18596:
18597: 1994-08-11 21:56 millert
18598:
18599: * parse.c: now uses new interfaces global
18600:
18601: 1994-08-11 21:56 millert
18602:
18603: * sudo.c: now ip addresses are gleaned fw/o dns
18604:
18605: 1994-08-10 19:21 millert
18606:
18607: * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18608:
18609: 1994-08-10 19:21 millert
18610:
18611: * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18612: network addrs
18613:
18614: 1994-08-10 19:20 millert
18615:
18616: * sudo.h: added ip_addrs def added load_ip_addrs prototype
18617:
18618: 1994-08-08 16:03 millert
18619:
18620: * CHANGES: updated
18621:
18622: 1994-08-08 15:57 millert
18623:
18624: * Makefile.in: removed multiple entries in DISTFILES
18625:
18626: 1994-08-08 13:05 millert
18627:
18628: * visudo.c: ansified the !STDC_HEADERS decls
18629:
18630: 1994-08-08 13:05 millert
18631:
18632: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18633: malloc decl if gnuc
18634:
18635: 1994-08-08 13:04 millert
18636:
18637: * sudo.c: can't use getopt(3) since it munges args to the command
18638: to be run as root don't do malloc decl if gnuc
18639:
18640: 1994-08-08 00:41 millert
18641:
18642: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18643: sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18644: prottypes
18645:
18646: 1994-08-08 00:27 millert
18647:
18648: * getcwd.c, getwd.c: added missing paren
18649:
18650: 1994-08-08 00:23 millert
18651:
18652: * Makefile.in: added putenv.c to DISTFILES
18653:
18654: 1994-08-08 00:08 millert
18655:
18656: * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18657: not defined now can count on putenv() being there
18658:
18659: 1994-08-08 00:08 millert
18660:
18661: * sudo_realpath.c: took out errno decl since sudo.h does it for us
18662: fixed up a next cc warning added params to func decls when
18663: STDC_HEADERS is not defined
18664:
18665: 1994-08-08 00:07 millert
18666:
18667: * sudo.h: took out environ extern added local declaratio of
18668: putenv() if local version is needed
18669:
18670: 1994-08-08 00:05 millert
18671:
18672: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18673: func decls when STDC_HEADERS is not defined
18674:
18675: 1994-08-08 00:04 millert
18676:
18677: * config.h.in: added memcpy check check to see that ansi vs bsd
18678: macros are ntot already defiend before defining (ie: avoid
18679: redefinition)
18680:
18681: 1994-08-08 00:03 millert
18682:
18683: * configure.in: removed fluff setenv check plus check w/ replace
18684: for putenv if also no setenv
18685:
18686: 1994-08-08 00:01 millert
18687:
18688: * putenv.c: Initial revision
18689:
18690: 1994-08-06 19:19 millert
18691:
18692: * sudo_setenv.c: Initial revision
18693:
18694: 1994-08-06 19:19 millert
18695:
18696: * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18697:
18698: 1994-08-06 19:19 millert
18699:
18700: * sudo.c: now use sudo_setenvc
18701:
18702: 1994-08-06 19:18 millert
18703:
18704: * configure.in: added puteenv and setenv, removed realpath
18705:
18706: 1994-08-06 19:18 millert
18707:
18708: * config.h.in: added putenv & setenv
18709:
18710: 1994-08-06 19:18 millert
18711:
18712: * Makefile.in: added sudo_setenv
18713:
18714: 1994-08-06 19:16 millert
18715:
18716: * version.h: ++
18717:
18718: 1994-08-05 19:43 millert
18719:
18720: * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18721: irix
18722:
18723: 1994-08-05 19:43 millert
18724:
18725: * Makefile.in: added MAN_POSTINSTALL
18726:
18727: 1994-08-05 19:43 millert
18728:
18729: * CHANGES: added
18730:
18731: 1994-08-05 19:10 millert
18732:
18733: * sudo.man: added SUDO_* plus new options
18734:
18735: 1994-08-05 19:10 millert
18736:
18737: * CHANGES: added one
18738:
18739: 1994-08-05 19:07 millert
18740:
18741: * configure.in: took out shadow lib
18742:
18743: 1994-08-05 18:35 millert
18744:
18745: * TODO: adde done
18746:
18747: 1994-08-05 17:52 millert
18748:
18749: * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18750:
18751: 1994-08-05 17:49 millert
18752:
18753: * Makefile.in: support for installing a cat page instead of a man
18754: page if no nroff
18755:
18756: 1994-08-05 17:48 millert
18757:
18758: * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18759: looks for nroff to determine whether or not to install a cat or
18760: man page
18761:
18762: 1994-08-05 17:48 millert
18763:
18764: * config.h.in: added HAVE_FLEX
18765:
18766: 1994-08-05 16:14 millert
18767:
18768: * sudo.c: not set ret to MODE_RUN initially
18769:
18770: 1994-08-05 16:12 millert
18771:
18772: * find_path.c: made command (and therefor cmnd dynamically
18773: allocated)
18774:
18775: 1994-08-04 20:25 millert
18776:
18777: * TODO: did #8
18778:
18779: 1994-08-04 20:24 millert
18780:
18781: * version.h: ++
18782:
18783: 1994-08-04 20:24 millert
18784:
18785: * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18786:
18787: 1994-08-04 20:24 millert
18788:
18789: * sudo.h: added MODE_ removed validate_only and added
18790: remove_timestamp()
18791:
18792: 1994-08-04 20:22 millert
18793:
18794: * sudo.c: usage() now takes an int (exit value) added parse_args()
18795: to parse command line arguments moved call to find_path() from
18796: load_globals to new function load_cmnd() removed validate_only
18797: global -- now use the concept of "modes" added -h and -k options
18798:
18799: 1994-08-04 20:21 millert
18800:
18801: * parse.c: no longer use global validate_only now checks for
18802: command called "validate" removed check for non-fully qualified
18803: commands since that is done by find_path
18804:
18805: 1994-08-04 20:20 millert
18806:
18807: * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18808:
18809: 1994-08-04 20:17 millert
18810:
18811: * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18812: comment
18813:
18814: 1994-08-04 20:17 millert
18815:
18816: * check.c: check_timestamp no longer runs reminder(), it is implied
18817: in the return val added remove_timestamp()
18818:
18819: 1994-08-04 20:16 millert
18820:
18821: * CHANGES: updated
18822:
18823: 1994-08-04 16:38 millert
18824:
18825: * BUGS: fixed on
18826:
18827: 1994-08-04 16:38 millert
18828:
18829: * sudo_realpath.c: took out old_errno
18830:
18831: 1994-08-04 16:37 millert
18832:
18833: * CHANGES: updated
18834:
18835: 1994-08-03 12:08 millert
18836:
18837: * logging.c: moved send_mail to after syslog
18838:
18839: 1994-08-02 22:41 millert
18840:
18841: * sudo.c: now set SUDO_ envariables
18842:
18843: 1994-08-01 13:40 millert
18844:
18845: * version.h: ++
18846:
18847: 1994-08-01 13:39 millert
18848:
18849: * sudo_realpath.c: now print error if chdir fails
18850:
18851: 1994-08-01 13:39 millert
18852:
18853: * find_path.c: removed an XXX
18854:
18855: 1994-07-25 20:40 millert
18856:
18857: * CHANGES: updated
18858:
18859: 1994-07-25 20:36 millert
18860:
18861: * configure.in: no more static binaries for aix
18862:
18863: 1994-07-25 18:37 millert
18864:
18865: * INSTALL: fixed typo
18866:
18867: 1994-07-25 18:33 millert
18868:
18869: * sudo_realpath.c: took out stuff not needed for sudo now does
18870: be_root/be_user itself now uses cwd global
18871:
18872: 1994-07-25 18:32 millert
18873:
18874: * version.h: +=2
18875:
18876: 1994-07-25 18:31 millert
18877:
18878: * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18879:
18880: 1994-07-25 18:26 millert
18881:
18882: * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18883:
18884: 1994-07-25 18:25 millert
18885:
18886: * find_path.c: now use sudo_realpath()
18887:
18888: 1994-07-25 18:25 millert
18889:
18890: * config.h.in: took out realpth() stuff since we now use
18891: sudo_realpath()
18892:
18893: 1994-07-25 18:25 millert
18894:
18895: * configure.in: ultrix enhanced sec
18896:
18897: 1994-07-25 18:25 millert
18898:
18899: * SUPPORTED: added ultrix enhanced sec.
18900:
18901: 1994-07-25 18:24 millert
18902:
18903: * INSTALL: updated
18904:
18905: 1994-07-25 18:21 millert
18906:
18907: * check.c: ultrix enhanced security suport
18908:
18909: 1994-07-25 18:20 millert
18910:
18911: * Makefile.in: added sudo_realpath.c
18912:
18913: 1994-07-25 18:18 millert
18914:
18915: * CHANGES: updated
18916:
18917: 1994-07-25 14:28 millert
18918:
18919: * tgetpass.c: increased passwd len to 24 for c2 security
18920:
18921: 1994-07-25 13:17 millert
18922:
18923: * BUGS: updated BUGS
18924:
18925: 1994-07-15 11:49 millert
18926:
18927: * check.c: now use user global var
18928:
18929: 1994-07-15 11:48 millert
18930:
18931: * configure.in: took out -ls
18932:
18933: 1994-07-14 19:11 millert
18934:
18935: * configure.in: added AFS libs
18936:
18937: 1994-07-14 17:45 millert
18938:
18939: * sudo.h: user is now a char * added epasswd
18940:
18941: 1994-07-14 17:43 millert
18942:
18943: * sudo.c: added tzset() to load_globals added epasswd (encrypted
18944: password) global made user dynamically allocated
18945:
18946: 1994-07-14 17:43 millert
18947:
18948: * configure.in: added tzset test
18949:
18950: 1994-07-14 17:43 millert
18951:
18952: * config.h.in: added HAVE_TZSET
18953:
18954: 1994-07-14 17:42 millert
18955:
18956: * check.c: cleaned up encrypted passwd grab somewhat
18957:
18958: 1994-07-14 12:34 millert
18959:
18960: * configure.in: fixed AFS typo
18961:
18962: 1994-07-14 12:34 millert
18963:
18964: * INSTALL: added AFS not
18965:
18966: 1994-07-14 12:34 millert
18967:
18968: * CHANGES: udpated
18969:
18970: 1994-07-14 12:33 millert
18971:
18972: * logging.c: can now log to both syslog & a file
18973:
18974: 1994-07-14 12:12 millert
18975:
18976: * sudo.h: added BOTH_LOGS
18977:
18978: 1994-07-14 11:34 millert
18979:
18980: * CHANGES: updated
18981:
18982: 1994-07-14 11:32 millert
18983:
18984: * configure.in: --with-AFS
18985:
18986: 1994-07-14 11:32 millert
18987:
18988: * config.h.in: added HAVE_AFS
18989:
18990: 1994-07-14 11:31 millert
18991:
18992: * check.c: added afs changes
18993:
18994: 1994-07-14 11:21 millert
18995:
18996: * sudo.h: removed AFS stuff :-)
18997:
18998: 1994-07-14 11:19 millert
18999:
19000: * tgetpass.c: include sys/select for AIX
19001:
19002: 1994-07-14 11:17 millert
19003:
19004: * sudo.h: added AFS
19005:
19006: 1994-07-14 11:16 millert
19007:
19008: * version.h: ++
19009:
19010: 1994-07-07 14:45 millert
19011:
19012: * SUPPORTED, CHANGES: updated
19013:
19014: 1994-07-07 14:44 millert
19015:
19016: * logging.c: can now have MAILER undefined
19017:
19018: 1994-07-07 14:37 millert
19019:
19020: * INSTALL: new sub-note about MAILER
19021:
19022: 1994-07-06 23:11 millert
19023:
19024: * sudo.man: added blurb about password timeout
19025:
19026: 1994-07-06 20:52 millert
19027:
19028: * configure.in: convex c2 changes
19029:
19030: 1994-07-06 20:52 millert
19031:
19032: * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
19033:
19034: 1994-07-06 20:51 millert
19035:
19036: * Makefile.in: added OSDEFS
19037:
19038: 1994-07-06 20:46 millert
19039:
19040: * config.h.in: added spaces
19041:
19042: 1994-07-06 20:08 millert
19043:
19044: * tgetpass.c: added a goto if fgets fails
19045:
19046: 1994-07-06 20:08 millert
19047:
19048: * sudo.h: use __hpux not hpux convex c2 stuff
19049:
19050: 1994-07-06 20:08 millert
19051:
19052: * sudo.c: use __hpux not hpux
19053:
19054: 1994-07-06 20:08 millert
19055:
19056: * logging.c: convex c2 stuff
19057:
19058: 1994-07-06 20:07 millert
19059:
19060: * config.h.in: define ansi-ish cpp os defines if non-ansi are
19061: defined for hpux & convex
19062:
19063: 1994-07-06 20:07 millert
19064:
19065: * INSTALL: updated to say we support sonvex C2
19066:
19067: 1994-07-06 20:05 millert
19068:
19069: * check.c: added convex c2 support
19070:
19071: 1994-07-01 12:06 millert
19072:
19073: * tgetpass.c: no more ioctl never returns NULL uses fgets() and
19074: select() to timeout
19075:
19076: 1994-06-29 17:04 millert
19077:
19078: * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
19079:
19080: 1994-06-29 16:39 millert
19081:
19082: * tgetpass.c: now works + uses fgets()
19083:
19084: 1994-06-28 18:25 millert
19085:
19086: * tgetpass.c: select doesn't seem to recognize a single '\n' as
19087: input waiting so we can;t use it, sigh.
19088:
19089: 1994-06-26 16:38 millert
19090:
19091: * PORTING: updated tgetpass() blurb
19092:
19093: 1994-06-26 16:35 millert
19094:
19095: * configure.in: added --with-getpass
19096:
19097: 1994-06-26 16:35 millert
19098:
19099: * Makefile.in: added tgetpass stuff
19100:
19101: 1994-06-26 15:25 millert
19102:
19103: * tgetpass.c: now uses stdio
19104:
19105: 1994-06-26 15:17 millert
19106:
19107: * version.h: ++
19108:
19109: 1994-06-24 19:48 millert
19110:
19111: * PORTING: updated ,.
19112:
19113: 1994-06-24 19:46 millert
19114:
19115: * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
19116:
19117: 1994-06-24 19:45 millert
19118:
19119: * configure.in: fixed a test aded --with-C2 and --with-tgetpass
19120:
19121: 1994-06-24 19:45 millert
19122:
19123: * check.c: added hpux C2 shit
19124:
19125: 1994-06-24 19:45 millert
19126:
19127: * Makefile.in: took out tgetpass.*
19128:
19129: 1994-06-24 19:45 millert
19130:
19131: * INSTALL: added C2 blurb
19132:
19133: 1994-06-13 15:54 millert
19134:
19135: * configure.in: no termio(s) for ultrix since it is broken
19136:
19137: 1994-06-13 15:41 millert
19138:
19139: * check.c: added a space (yeah, anal)
19140:
19141: 1994-06-13 15:17 millert
19142:
19143: * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
19144:
19145: 1994-06-08 14:34 millert
19146:
19147: * config.h.in: took out bsd signal stuff for irix
19148:
19149: 1994-06-08 14:26 millert
19150:
19151: * visudo.c: comments in #endif
19152:
19153: 1994-06-08 14:09 millert
19154:
19155: * configure.in: don't define BSD signals for irix
19156:
19157: 1994-06-08 12:57 millert
19158:
19159: * TODO: did some...
19160:
19161: 1994-06-08 12:57 millert
19162:
19163: * CHANGES: updated
19164:
19165: 1994-06-08 12:56 millert
19166:
19167: * realpath.c, sudo_realpath.c: took out unneeded code by changing
19168: where a strings was terminated
19169:
19170: 1994-06-07 19:21 millert
19171:
19172: * realpath.c, sudo_realpath.c: fix bug where /dirname would return
19173: NULL
19174:
19175: 1994-06-07 17:40 millert
19176:
19177: * sudo.h: move __P to config.h
19178:
19179: 1994-06-07 17:40 millert
19180:
19181: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
19182: definition
19183:
19184: 1994-06-07 17:40 millert
19185:
19186: * config.h.in: added __P
19187:
19188: 1994-06-07 17:21 millert
19189:
19190: * config.h.in: added HAVE_FCHDIR
19191:
19192: 1994-06-07 17:18 millert
19193:
19194: * strdup.c: now include stdio
19195:
19196: 1994-06-07 14:55 millert
19197:
19198: * realpath.c, sudo_realpath.c: now works if no fchdir
19199:
19200: 1994-06-07 14:55 millert
19201:
19202: * visudo.c: define SA_RESETHAND to null if not defined
19203:
19204: 1994-06-07 14:54 millert
19205:
19206: * configure.in: added check & replace
19207:
19208: 1994-06-06 20:05 millert
19209:
19210: * configure.in: took out -static for nextstep -- it doesn't work
19211:
19212: 1994-06-06 19:59 millert
19213:
19214: * logging.c: moved #endif to where it belongs
19215:
19216: 1994-06-06 19:54 millert
19217:
19218: * SUPPORTED: correction
19219:
19220: 1994-06-06 19:42 millert
19221:
19222: * configure.in: now checks for strdup realpath getcwd bzero
19223:
19224: 1994-06-06 19:31 millert
19225:
19226: * config.h.in: emulate bzero
19227:
19228: 1994-06-06 16:57 millert
19229:
19230: * visudo.c: added posic signals
19231:
19232: 1994-06-06 16:57 millert
19233:
19234: * tgetpass.c: bzero cast
19235:
19236: 1994-06-06 16:57 millert
19237:
19238: * logging.c: added posix signals
19239:
19240: 1994-06-06 16:56 millert
19241:
19242: * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19243: missing functions
19244:
19245: 1994-06-06 16:56 millert
19246:
19247: * config.h.in: added posix signal stuff
19248:
19249: 1994-06-06 16:56 millert
19250:
19251: * Makefile.in: added new srcs
19252:
19253: 1994-06-06 12:53 millert
19254:
19255: * visudo.c: updated useag
19256:
19257: 1994-06-06 12:39 millert
19258:
19259: * tgetpass.c: now uses posix signals
19260:
19261: 1994-06-05 20:17 millert
19262:
19263: * PORTING: updated sto reflect major changes
19264:
19265: 1994-06-05 20:05 millert
19266:
19267: * TODO, CHANGES: updated
19268:
19269: 1994-06-05 20:04 millert
19270:
19271: * tgetpass.c: uses sysconf() if available
19272:
19273: 1994-06-05 20:04 millert
19274:
19275: * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19276:
19277: 1994-06-05 20:04 millert
19278:
19279: * realpath.c, sudo_realpath.c: for those w/o this in libc
19280:
19281: 1994-06-05 20:03 millert
19282:
19283: * getcwd.c, getwd.c: Initial revision
19284:
19285: 1994-06-05 20:03 millert
19286:
19287: * find_path.c: rewrote to use realpath(3) - nis now all my code
19288:
19289: 1994-06-05 20:02 millert
19290:
19291: * config.h.in: added HAVE_REALPATH
19292:
19293: 1994-06-05 20:02 millert
19294:
19295: * check.c: now use tgetpass
19296:
19297: 1994-06-05 20:02 millert
19298:
19299: * Makefile.in: added LIBOBJS use tgetpass.c
19300:
19301: 1994-06-05 18:55 millert
19302:
19303: * tgetpass.c: works now :-)
19304:
19305: 1994-06-05 18:27 millert
19306:
19307: * tgetpass.c: Initial revision
19308:
19309: 1994-06-05 17:17 millert
19310:
19311: * pathnames.h.in: added /dev/tty
19312:
19313: 1994-06-04 17:12 millert
19314:
19315: * version.h: incremented
19316:
19317: 1994-06-04 15:29 millert
19318:
19319: * sudo.c: always use getcwd
19320:
19321: 1994-06-04 14:49 millert
19322:
19323: * config.h.in: added check for getwd
19324:
19325: 1994-06-04 14:48 millert
19326:
19327: * configure.in: replace strdup & realpath & getcwd if missing
19328:
19329: 1994-06-04 14:47 millert
19330:
19331: * pathnames.h.in: added _PATH_PWD
19332:
19333: 1994-06-04 14:46 millert
19334:
19335: * aclocal.m4: added SUDO_PROG_PWD
19336:
19337: 1994-06-04 14:37 millert
19338:
19339: * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19340:
19341: 1994-06-03 11:31 millert
19342:
19343: * configure.in: quoted quare brackets
19344:
19345: 1994-06-02 17:49 millert
19346:
19347: * sudo.c: no need to strdup() a constant
19348:
19349: 1994-06-02 15:45 millert
19350:
19351: * CHANGES: updated
19352:
19353: 1994-06-02 15:44 millert
19354:
19355: * sudo.man: added validate
19356:
19357: 1994-06-02 15:42 millert
19358:
19359: * sudo.c: added -v to usage
19360:
19361: 1994-06-02 15:41 millert
19362:
19363: * parse.c, sudo.c, sudo.h: added validate_only stuff
19364:
19365: 1994-05-29 21:29 millert
19366:
19367: * configure.in: now finds sed
19368:
19369: 1994-05-29 21:28 millert
19370:
19371: * aclocal.m4: $OSREV is now an int
19372:
19373: 1994-05-29 19:13 millert
19374:
19375: * configure.in: added mtxinu to caser
19376:
19377: 1994-05-29 18:37 millert
19378:
19379: * sudo.h: added EXEC macro
19380:
19381: 1994-05-29 18:36 millert
19382:
19383: * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19384: FQDN is set
19385:
19386: 1994-05-29 18:36 millert
19387:
19388: * logging.c: changed mail_argv[] def now use EXEC() macro
19389:
19390: 1994-05-29 18:35 millert
19391:
19392: * check.c: took out crypt() definition
19393:
19394: 1994-05-29 17:23 millert
19395:
19396: * version.h: upped the version
19397:
19398: 1994-05-29 15:52 millert
19399:
19400: * configure.in: always look for -lnsl
19401:
19402: 1994-05-29 15:29 millert
19403:
19404: * aclocal.m4: added an echo
19405:
19406: 1994-05-29 15:25 millert
19407:
19408: * sudo.h: SHORT_MESSAGE is now the default
19409:
19410: 1994-05-29 15:18 millert
19411:
19412: * config.h.in: fixed typo
19413:
19414: 1994-05-29 01:29 millert
19415:
19416: * configure.in: added missing AC_DEFINE(SVR4) for solaris
19417:
19418: 1994-05-28 20:42 millert
19419:
19420: * sudo.man: documented the -v flag
19421:
19422: 1994-05-28 20:34 millert
19423:
19424: * SUPPORTED: updated
19425:
19426: 1994-05-28 20:31 millert
19427:
19428: * check.c: proto-ized crypt()
19429:
19430: 1994-05-28 20:28 millert
19431:
19432: * config.h.in: added LIBSHADOW undef
19433:
19434: 1994-05-28 20:18 millert
19435:
19436: * configure.in: nwo set OS to be lowercase
19437:
19438: 1994-05-28 19:36 millert
19439:
19440: * configure.in: now use SUDO_OSTYPE to set $OS
19441:
19442: 1994-05-28 19:36 millert
19443:
19444: * aclocal.m4: now use uname to determine os
19445:
19446: 1994-05-28 16:23 millert
19447:
19448: * visudo.c: added prototypes & moved sig handler around
19449:
19450: 1994-05-28 15:13 millert
19451:
19452: * sudo.h: added prototyppes
19453:
19454: 1994-05-28 15:13 millert
19455:
19456: * parse.c: added comment
19457:
19458: 1994-05-28 15:12 millert
19459:
19460: * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19461:
19462: 1994-05-28 15:11 millert
19463:
19464: * check.c, logging.c, sudo.c: added prototypes
19465:
19466: 1994-05-28 15:11 millert
19467:
19468: * aixcrypt.exp: Initial revision
19469:
19470: 1994-05-28 15:11 millert
19471:
19472: * Makefile.in: added aixcrypt.exp
19473:
19474: 1994-05-28 13:21 millert
19475:
19476: * parse.lex, parse.yacc: moved config.h to top of includes
19477:
19478: 1994-05-25 15:48 millert
19479:
19480: * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19481:
19482: 1994-05-24 23:08 millert
19483:
19484: * visudo.c: added -v flag and usage()
19485:
19486: 1994-05-24 23:08 millert
19487:
19488: * version.h: fixed a typo
19489:
19490: 1994-05-24 23:08 millert
19491:
19492: * sudo.c: cast Argv to a const for exec added -v flag
19493:
19494: 1994-05-24 23:07 millert
19495:
19496: * logging.c: mail_argv is now a const
19497:
19498: 1994-05-24 23:07 millert
19499:
19500: * configure.in: only set RETSIGTYPE if it is not set already
19501:
19502: 1994-05-24 23:07 millert
19503:
19504: * aclocal.m4: now defines & STDC_HEADERS for Irix
19505:
19506: 1994-05-24 23:07 millert
19507:
19508: * Makefile.in: added version.h
19509:
19510: 1994-05-24 21:25 millert
19511:
19512: * insults.h, sudo.h: prevent multiple inclusion
19513:
19514: 1994-05-24 21:20 millert
19515:
19516: * version.h: Initial revision
19517:
19518: 1994-05-24 21:09 millert
19519:
19520: * parse.lex, parse.yacc: now includes config.h
19521:
19522: 1994-05-24 20:54 millert
19523:
19524: * aclocal.m4: now talks about sunos 4.x
19525:
19526: 1994-05-24 20:23 millert
19527:
19528: * visudo.c: calls to Exit now pass an arg
19529:
19530: 1994-05-24 18:00 millert
19531:
19532: * visudo.c: signal handler now takes an int argument
19533:
19534: 1994-05-24 18:00 millert
19535:
19536: * CHANGES: updated
19537:
19538: 1994-05-24 17:44 millert
19539:
19540: * sudo.c: ok, the getcwd() is now *really* done as the user
19541:
19542: 1994-05-24 17:44 millert
19543:
19544: * configure.in: changed AIX STATIC_FLAGS
19545:
19546: 1994-05-24 16:27 millert
19547:
19548: * aclocal.m4: solaris now defines SVR4
19549:
19550: 1994-05-24 16:18 millert
19551:
19552: * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19553: sigh.
19554:
19555: 1994-05-24 16:18 millert
19556:
19557: * sudo.c: moved getcwd stuff into load_globals
19558:
19559: 1994-05-24 16:18 millert
19560:
19561: * parse.c: took out externs that are in suod.h
19562:
19563: 1994-05-24 16:18 millert
19564:
19565: * logging.c: moved cwd into load_globals
19566:
19567: 1994-05-24 16:17 millert
19568:
19569: * find_path.c: moved cwd stuff
19570:
19571: 1994-05-24 15:55 millert
19572:
19573: * Makefile.in: fixed make distclean & realclean
19574:
19575: 1994-05-24 12:51 millert
19576:
19577: * TODO: updated .,
19578:
19579: 1994-05-24 12:51 millert
19580:
19581: * CHANGES: added solaris changes
19582:
19583: 1994-05-24 12:51 millert
19584:
19585: * aclocal.m4: added solaris changes, need to rework
19586:
19587: 1994-05-24 12:50 millert
19588:
19589: * configure.in: cleaned up for solaris
19590:
19591: 1994-05-24 12:13 millert
19592:
19593: * logging.c: reinstall reapchild signal handler for non-bsd signals
19594:
19595: 1994-05-24 12:03 millert
19596:
19597: * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19598: needed)
19599:
19600: 1994-05-24 12:03 millert
19601:
19602: * sudo.c: support for HAVE_SYSCONF
19603:
19604: 1994-05-24 12:02 millert
19605:
19606: * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19607: minor prettying up /
19608:
19609: 1994-05-23 20:26 millert
19610:
19611: * config.h.in: added HAVE_SYSCONF
19612:
19613: 1994-05-16 18:57 millert
19614:
19615: * configure.in: now tells you what os you are running /.
19616:
19617: 1994-05-16 18:56 millert
19618:
19619: * aclocal.m4: took out extra ','
19620:
19621: 1994-05-14 17:56 millert
19622:
19623: * config.h.in: added _BSD_COMPAT
19624:
19625: 1994-05-14 17:56 millert
19626:
19627: * aclocal.m4: fixed for irix5
19628:
19629: 1994-05-14 17:55 millert
19630:
19631: * CHANGES: updated
19632:
19633: 1994-05-14 17:27 millert
19634:
19635: * sudo.c: uid seinitialized to -2
19636:
19637: 1994-04-28 12:36 millert
19638:
19639: * sudo.c: now removes LIBPATH for AIX
19640:
19641: 1994-03-12 20:41 millert
19642:
19643: * configure.in: now uses ufc if it finds it
19644:
19645: 1994-03-12 17:42 millert
19646:
19647: * sudo.h: no longer define yyval & yylval since yacc does it
19648:
19649: 1994-03-12 17:42 millert
19650:
19651: * parse.lex: now defines yylval as extenr
19652:
19653: 1994-03-12 17:41 millert
19654:
19655: * configure.in: BROKEN_GETPASS is now an OPTION
19656:
19657: 1994-03-12 17:41 millert
19658:
19659: * config.h.in: took out BROKEN_GETPASS
19660:
19661: 1994-03-12 17:20 millert
19662:
19663: * Makefile.in: took out big comment
19664:
19665: 1994-03-12 16:24 millert
19666:
19667: * README: updated
19668:
19669: 1994-03-12 16:20 millert
19670:
19671: * Makefile.in: took out README.beta
19672:
19673: 1994-03-12 16:19 millert
19674:
19675: * SUPPORTED: Initial revision
19676:
19677: 1994-03-12 16:19 millert
19678:
19679: * INSTALL: now reference SUPPORTED .,
19680:
19681: 1994-03-12 16:17 millert
19682:
19683: * config.h.in: now check for convex OR __convex__
19684:
19685: 1994-03-12 16:16 millert
19686:
19687: * aclocal.m4: now check for convex or __convex__
19688:
19689: 1994-03-12 16:15 millert
19690:
19691: * Makefile.in: added dist target
19692:
19693: 1994-03-12 15:19 millert
19694:
19695: * aclocal.m4: use __convex__
19696:
19697: 1994-03-12 14:33 millert
19698:
19699: * find_path.c: now use _S_* stat stuff to be ansi-like
19700:
19701: 1994-03-12 14:11 millert
19702:
19703: * INSTALL: updated for configure directions
19704:
19705: 1994-03-12 14:05 millert
19706:
19707: * Makefile.in: distclean now removes config.h and pathnames.h
19708:
19709: 1994-03-12 14:03 millert
19710:
19711: * CHANGES: updated
19712:
19713: 1994-03-12 14:00 millert
19714:
19715: * TODO: fixed typoe
19716:
19717: 1994-03-12 13:57 millert
19718:
19719: * Makefile.in, visudo.c: updated version
19720:
19721: 1994-03-12 13:57 millert
19722:
19723: * config.h.in, pathnames.h.in: added copyright header
19724:
19725: 1994-03-12 13:55 millert
19726:
19727: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19728: parse.yacc, sudo.c, sudo.h: udpated version
19729:
19730: 1994-03-12 13:39 millert
19731:
19732: * visudo.c: udpated to use configure + pathnames.h
19733:
19734: 1994-03-12 13:37 millert
19735:
19736: * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19737:
19738: 1994-03-12 13:37 millert
19739:
19740: * sudo.h: now works with configure
19741:
19742: 1994-03-12 13:36 millert
19743:
19744: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19745: updated to work with configure + pathnames.h
19746:
19747: 1994-03-12 10:40 millert
19748:
19749: * Makefile.in: added LEXLIB
19750:
19751: 1994-03-10 03:18 millert
19752:
19753: * COPYING: updated gnu general licence to versio 2
19754:
19755: 1994-03-10 02:44 millert
19756:
19757: * pathnames.h.in, config.h.in: Initial revision
19758:
19759: 1994-03-10 01:43 millert
19760:
19761: * sudo.h: changed to work with configure
19762:
19763: 1994-03-09 18:51 millert
19764:
19765: * Makefile.in, aclocal.m4, configure.in: Initial revision
19766:
19767: 1994-03-09 17:36 millert
19768:
19769: * visudo.c: now uses defines used by configure
19770:
19771: 1994-03-01 16:31 millert
19772:
19773: * find_path.c: sudo won't bitch about EPERM now, for real
19774:
19775: 1994-02-28 00:36 millert
19776:
19777: * logging.c: renamed exec_argv to eliminate a libc name clash with
19778: ksros
19779:
19780: 1994-02-28 00:28 millert
19781:
19782: * CHANGES: corrected
19783:
19784: 1994-02-28 00:27 millert
19785:
19786: * logging.c, sudo.c, sudo.h: execve -> execv
19787:
19788: 1994-02-27 23:27 millert
19789:
19790: * TODO: upated
19791:
19792: 1994-02-27 23:19 millert
19793:
19794: * PORTING: added 2 mroe items
19795:
19796: 1994-02-27 23:12 millert
19797:
19798: * CHANGES: updated
19799:
19800: 1994-02-27 23:11 millert
19801:
19802: * sudo.h: added UMASK and mode_t declaration
19803:
19804: 1994-02-27 23:11 millert
19805:
19806: * sudo.c: added UMASK
19807:
19808: 1994-02-27 20:55 millert
19809:
19810: * logging.c: now opens log file with mode 077
19811:
19812: 1994-02-27 20:55 millert
19813:
19814: * check.c: saved current umask ans restores it
19815:
19816: 1994-02-27 20:36 millert
19817:
19818: * sudo.h: added MAXLOGFILELEN
19819:
19820: 1994-02-27 20:35 millert
19821:
19822: * logging.c: split long log lines. FOr syslog, split into multiple
19823: entries, for a log file, indent the extra for readability
19824:
19825: 1994-02-27 17:22 millert
19826:
19827: * CHANGES: added changes
19828:
19829: 1994-02-27 17:18 millert
19830:
19831: * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19832: should be)
19833:
19834: 1994-02-25 16:04 millert
19835:
19836: * TODO: added input from Brett M Hogden <hogden@rge.com>
19837:
19838: 1994-02-16 13:35 millert
19839:
19840: * sudo.c: added rmenv() to remove stuff from environ. can now uses
19841: execvp() OR execve() becuase of this.
19842:
19843: 1994-02-16 13:35 millert
19844:
19845: * logging.c: now uses execvp() OR execve()
19846:
19847: 1994-02-16 13:31 millert
19848:
19849: * sudo.h: added USE_EXECVE
19850:
19851: 1994-02-16 13:27 millert
19852:
19853: * sudo.h: added environ
19854:
19855: 1994-02-16 12:53 millert
19856:
19857: * find_path.c: now ignore EPERM
19858:
19859: 1994-02-15 23:52 millert
19860:
19861: * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19862: statics /.
19863:
19864: 1994-02-15 23:52 millert
19865:
19866: * CHANGES: updated
19867:
19868: 1994-02-15 23:40 millert
19869:
19870: * sudo.h: took out Envp
19871:
19872: 1994-02-14 12:28 millert
19873:
19874: * BUGS: Initial revision
19875:
19876: 1994-02-10 14:29 millert
19877:
19878: * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19879:
19880: 1994-02-10 14:05 millert
19881:
19882: * sudo.h: added SECURE_PATH
19883:
19884: 1994-02-10 13:50 millert
19885:
19886: * INSTALL: added sample.sudoers note
19887:
19888: 1994-02-10 13:47 millert
19889:
19890: * sudoers: Initial revision
19891:
19892: 1994-02-09 14:54 millert
19893:
19894: * find_path.c: fixed typo
19895:
19896: 1994-02-08 23:06 millert
19897:
19898: * PORTING: took out SAVED_UID garbage
19899:
19900: 1994-02-08 22:55 millert
19901:
19902: * INSTALL: mentioned HAL
19903:
19904: 1994-02-08 22:50 millert
19905:
19906: * sudo.h: added HAL line
19907:
19908: 1994-02-08 22:48 millert
19909:
19910: * insults.h: added HAL insults
19911:
19912: 1994-02-08 22:48 millert
19913:
19914: * TODO: updated
19915:
19916: 1994-02-08 22:02 millert
19917:
19918: * logging.c: more verbose error if mailer not found
19919:
19920: 1994-02-08 22:02 millert
19921:
19922: * check.c: now do getpwent as root for soem shadow password systems
19923: (bsdi)
19924:
19925: 1994-02-08 13:22 millert
19926:
19927: * sudo.h: took out SAVED_UID garbade
19928:
19929: 1994-02-08 13:21 millert
19930:
19931: * sudo.c: took out SAVED_UID garbage since it don't work
19932:
19933: 1994-02-06 17:43 millert
19934:
19935: * README: updated
19936:
19937: 1994-02-06 17:40 millert
19938:
19939: * insults.h: added a missing space :-)
19940:
19941: 1994-02-05 19:48 millert
19942:
19943: * sudo.c, sudo.h: took out multimax cruft
19944:
19945: 1994-02-05 19:30 millert
19946:
19947: * INSTALL: minor update
19948:
19949: 1994-02-05 19:30 millert
19950:
19951: * PORTING: finished
19952:
19953: 1994-02-05 19:19 millert
19954:
19955: * sudo.c: fixed a typo + indentation
19956:
19957: 1994-02-05 18:43 millert
19958:
19959: * sudo.h: took outumoved some defines to the config file ,. ,.
19960:
19961: 1994-02-05 15:17 millert
19962:
19963: * PORTING: Initial revision
19964:
19965: 1994-02-05 15:17 millert
19966:
19967: * TODO: did #6
19968:
19969: 1994-02-05 15:16 millert
19970:
19971: * sudo.h: added HAS_SAVED_UID
19972:
19973: 1994-02-05 15:16 millert
19974:
19975: * sudo.c: put back AIX cruft
19976:
19977: 1994-02-03 00:44 millert
19978:
19979: * sudo.c: aix changes
19980:
19981: 1994-02-02 01:31 millert
19982:
19983: * CHANGES: updated
19984:
19985: 1994-02-02 01:30 millert
19986:
19987: * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19988: when abs necesary
19989:
19990: 1994-02-01 22:21 millert
19991:
19992: * check.c: added missing %s\n
19993:
19994: 1994-01-31 02:06 millert
19995:
19996: * install-sh: Initial revision
19997:
19998: 1994-01-31 01:58 millert
19999:
20000: * CHANGES, TODO: updated
20001:
20002: 1994-01-31 01:56 millert
20003:
20004: * sudo.c: now removed _RLD_* for alphas
20005:
20006: 1994-01-31 01:50 millert
20007:
20008: * INSTALL: updated for new config scheme
20009:
20010: 1994-01-30 19:42 millert
20011:
20012: * find_path.c: more verbose eror messages
20013:
20014: 1994-01-27 14:08 millert
20015:
20016: * TODO: now have solaris
20017:
20018: 1994-01-27 14:07 millert
20019:
20020: * sudo.h: define __svr4__ for SOLARIS
20021:
20022: 1994-01-27 14:07 millert
20023:
20024: * check.c: added svr4 junk for shadow pws for solaris 2.x
20025:
20026: 1994-01-27 13:19 millert
20027:
20028: * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
20029: Its not needed since we start out setuid with the correct perms.
20030:
20031: 1994-01-26 19:51 millert
20032:
20033: * check.c, sudo.c, sudo.h: now use setreuid()
20034:
20035: 1994-01-26 18:58 millert
20036:
20037: * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
20038: VARIABLES sectoin
20039:
20040: 1994-01-26 18:52 millert
20041:
20042: * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
20043:
20044: 1994-01-26 18:52 millert
20045:
20046: * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
20047: >> .
20048:
20049: 1993-12-07 01:33 millert
20050:
20051: * README: minor update + spell fix
20052:
20053: 1993-12-07 01:33 millert
20054:
20055: * INSTALL: rewrote most of this
20056:
20057: 1993-12-07 01:13 millert
20058:
20059: * sudo.h: added all options that are in the Makefile
20060:
20061: 1993-12-07 00:23 millert
20062:
20063: * getpass.c: now use USE_TERMIO #define for sgi & hpux
20064:
20065: 1993-12-06 23:19 millert
20066:
20067: * TODO: todo: posix sigs
20068:
20069: 1993-12-06 01:12 millert
20070:
20071: * check.c, find_path.c: always include strings.h
20072:
20073: 1993-12-05 20:34 millert
20074:
20075: * visudo.c: added STATICEDITOR
20076:
20077: 1993-12-05 20:30 millert
20078:
20079: * sudo.h: sgi has vi in /usr/bin too
20080:
20081: 1993-12-05 20:23 millert
20082:
20083: * sudo.man: added VISUAL
20084:
20085: 1993-12-02 22:20 millert
20086:
20087: * sudo.h: sue /usr/bin/vi on some systems
20088:
20089: 1993-12-02 22:19 millert
20090:
20091: * sudo.c: fixed warning (include strings.h)
20092:
20093: 1993-12-02 22:06 millert
20094:
20095: * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
20096: features)
20097:
20098: 1993-12-02 21:38 millert
20099:
20100: * CHANGES: changes from John_Rouillard@dl5000.bc.edu
20101:
20102: 1993-12-02 21:35 millert
20103:
20104: * visudo.c: added EDITOR envar
20105:
20106: 1993-12-02 21:34 millert
20107:
20108: * check.c, find_path.c, parse.c, sudo.c: added patches from
20109: John_Rouillard directory spec uses EDITOR
20110:
20111: 1993-12-01 19:32 millert
20112:
20113: * getpass.c: added flush for hpux
20114:
20115: 1993-11-30 13:37 millert
20116:
20117: * sudo.c: no longer assume malloc returns a char *
20118:
20119: 1993-11-29 20:35 millert
20120:
20121: * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
20122: stuff -- now gets removed correctly
20123:
20124: 1993-11-29 19:31 millert
20125:
20126: * sudo.h: added STD_HEADERS macro
20127:
20128: 1993-11-29 19:14 millert
20129:
20130: * sudo.c: now uses STD_HEADERS macor for ansi
20131:
20132: 1993-11-29 19:14 millert
20133:
20134: * find_path.c: now uses STD_HEADERS macro
20135:
20136: 1993-11-29 19:13 millert
20137:
20138: * check.c: niceties for C compiler bitches -- no real change
20139:
20140: 1993-11-29 13:04 millert
20141:
20142: * visudo.c: now doesn't fclose a file never opened.
20143:
20144: 1993-11-28 16:35 millert
20145:
20146: * sudo.man: added visudo line
20147:
20148: 1993-11-28 16:31 millert
20149:
20150: * sudo.man: added error stuff added me in there...
20151:
20152: 1993-11-28 03:12 millert
20153:
20154: * CHANGES: noted insults
20155:
20156: 1993-11-28 03:01 millert
20157:
20158: * INSTALL: added blurb about reading stuff
20159:
20160: 1993-11-28 03:00 millert
20161:
20162: * sudo.h: added insults
20163:
20164: 1993-11-28 03:00 millert
20165:
20166: * insults.h: corrected somments and removed newlines
20167:
20168: 1993-11-28 03:00 millert
20169:
20170: * check.c: now uses insults
20171:
20172: 1993-11-28 02:45 millert
20173:
20174: * insults.h: Initial revision
20175:
20176: 1993-11-27 19:46 millert
20177:
20178: * INSTALL: added dec syslog note
20179:
20180: 1993-11-27 19:25 millert
20181:
20182: * sample.sudoers: added real stuff in there
20183:
20184: 1993-11-27 19:24 millert
20185:
20186: * TODO: added a todo
20187:
20188: 1993-11-27 19:10 millert
20189:
20190: * TODO: added one
20191:
20192: 1993-11-27 18:59 millert
20193:
20194: * sample.sudoers: Initial revision
20195:
20196: 1993-11-27 18:59 millert
20197:
20198: * sudo.man: updated with changes
20199:
20200: 1993-11-27 18:52 millert
20201:
20202: * sudo.man: Initial revision
20203:
20204: 1993-11-27 18:48 millert
20205:
20206: * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20207: revision
20208:
20209: 1993-11-27 18:46 millert
20210:
20211: * visudo.c: updated version number and took out jeff's old addr
20212: since it is no good
20213:
20214: 1993-11-27 18:42 millert
20215:
20216: * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20217: parse.yacc, sudo.c: updated version number and took out jeff's
20218: email (since it is invalid)
20219:
20220: 1993-10-28 09:36 millert
20221:
20222: * check.c: added fflush()
20223:
20224: 1993-10-22 20:46 millert
20225:
20226: * find_path.c: now return NULL instead pfof exiting for
20227: nopnn-fatal errors
20228:
20229: 1993-10-21 16:57 millert
20230:
20231: * check.c: new banner
20232:
20233: 1993-10-21 16:42 millert
20234:
20235: * parse.lex: now sudo.h gets included first
20236:
20237: 1993-10-17 20:31 millert
20238:
20239: * parse.lex: now can use flex
20240:
20241: 1993-10-17 20:31 millert
20242:
20243: * sudo.h: linux patch
20244:
20245: 1993-10-17 20:30 millert
20246:
20247: * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20248:
20249: 1993-10-17 20:30 millert
20250:
20251: * check.c: linux diff
20252:
20253: 1993-10-15 16:03 millert
20254:
20255: * find_path.c: stat now ignores EINVAL
20256:
20257: 1993-10-05 21:48 millert
20258:
20259: * find_path.c, sudo.c: now declare strdup as extern
20260:
20261: 1993-10-04 15:23 millert
20262:
20263: * visudo.c: reformatted with indent + by hand
20264:
20265: 1993-10-04 15:10 millert
20266:
20267: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20268: sudo.h: used indent to "fix" coding style
20269:
20270: 1993-10-03 20:12 millert
20271:
20272: * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20273: LAST should maybe move the code that does this into the loop
20274: body. makes it messier tho. hmmm.
20275:
20276: 1993-09-08 11:53 millert
20277:
20278: * find_path.c: redid the fix for non-executable files in an easier
20279: to read way plus some minor aethetic changes
20280:
20281: 1993-09-08 11:39 millert
20282:
20283: * find_path.c: fixed bug with non-executable tings of same name in
20284: path introduced by checkig errno after stat(2).
20285:
20286: 1993-09-05 10:02 millert
20287:
20288: * sudo.c: fixed off by one error
20289:
20290: 1993-09-05 09:55 millert
20291:
20292: * find_path.c: now handles decending below '/' correctly
20293:
20294: 1993-09-05 08:35 millert
20295:
20296: * sudo.c: now actually builds Envp instead of munging envp
20297:
20298: 1993-09-04 15:42 millert
20299:
20300: * parse.yacc: now includes sys/param.h
20301:
20302: 1993-09-04 15:41 millert
20303:
20304: * visudo.c: now includes sys/param.h
20305:
20306: 1993-09-04 15:30 millert
20307:
20308: * sudo.h: fixed ifndef -> ifdef
20309:
20310: 1993-09-04 15:19 millert
20311:
20312: * qualify.c: make more like find_path.c
20313:
20314: 1993-09-04 15:18 millert
20315:
20316: * find_path.c: rewritten by millert
20317:
20318: 1993-09-04 15:17 millert
20319:
20320: * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20321: added info about new defines in the comment
20322:
20323: 1993-09-04 15:15 millert
20324:
20325: * logging.c: now uses USE_CWD
20326:
20327: 1993-09-04 14:10 millert
20328:
20329: * sudo.h: added delc for clean_envp() and Envp
20330:
20331: 1993-09-04 14:09 millert
20332:
20333: * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20334: Envp to exec
20335:
20336: 1993-09-04 14:09 millert
20337:
20338: * logging.c: now uses execve()
20339:
20340: 1993-09-04 14:08 millert
20341:
20342: * find_path.c: ENOTDIR is ok now too (in case part of the path is
20343: bogus)
20344:
20345: 1993-09-04 08:17 millert
20346:
20347: * qualify.c: now works correctly (ttaltotal rewrite)
20348:
20349: 1993-09-04 07:59 millert
20350:
20351: * parse.lex: now includes sys/param.h didn't match trailing / --
20352: fix from rouilj@cs.umb.edu
20353:
20354: 1993-06-11 18:04 millert
20355:
20356: * sudo.c: moved around the #ifndef _AIX
20357:
20358: 1993-06-11 18:03 millert
20359:
20360: * check.c, logging.c, parse.c: Initial revision
20361:
20362: 1993-03-20 07:57 millert
20363:
20364: * qualify.c: Initial revision
20365:
20366: 1993-03-13 15:09 millert
20367:
20368: * find_path.c: now works if you do sudo bin/test
20369:
20370: 1993-03-13 14:20 millert
20371:
20372: * find_path.c: works
20373:
20374: 1993-03-02 18:28 millert
20375:
20376: * sudo.h: Initial revision
20377:
20378: 1993-03-02 11:35 millert
20379:
20380: * visudo.c: Initial revision
20381:
20382: 1993-03-02 11:32 millert
20383:
20384: * parse.lex, parse.yacc: Initial revision
20385:
20386: 1993-02-16 13:24 millert
20387:
20388: * sudo.c: took out errno.h
20389:
20390: 1993-02-16 13:22 millert
20391:
20392: * sudo.c: now spews error if exec fails and exits with -1
20393:
20394: 1993-02-16 12:07 millert
20395:
20396: * sudo.c: Initial revision
20397:
20398: 1993-02-15 22:27 millert
20399:
20400: * find_path.c: now only execs files with (an) executable bit set.
20401:
20402: 1993-02-15 22:01 millert
20403:
20404: * find_path.c: Initial revision
20405:
20406: 1993-02-15 14:32 millert
20407:
20408: * getpass.c: added nice comment
20409:
20410: 1993-02-15 14:19 millert
20411:
20412: * getpass.c: now works on sgi's
20413:
20414: 1993-02-15 13:57 millert
20415:
20416: * getpass.c: Initial revision
20417: