Annotation of src/usr.bin/sudo/ChangeLog, Revision 1.15
1.15 ! millert 1: 2010-06-29 Todd C. Miller <Todd.Miller@courtesan.com>
! 2:
! 3: * env.c: In unsetenv() check for NULL or empty name as per
! 4: POSIX 1003.1-2008
! 5:
! 6: * env.c: Do not rely on env.env_len when unsetting a variable,
! 7: just use the NULL terminator.
! 8:
! 9: 2010-06-25 Todd C. Miller <Todd.Miller@courtesan.com>
! 10:
! 11: * env.c: In unsetenv(), do not assign ep early as we may
! 12: end up reallocating env.envp which could result in ep
! 13: pointing to freed memory if the environ pointer is out
! 14: of sync with env.envp.
! 15:
! 16: * pwutil.c: Ignore case when matching user/group names in
! 17: the cache. From Quest sudo.
! 18:
! 19: * sudo.c: Defer call to sudo_nonunix_groupcheck_cleanup()
! 20: until after we have closed the sudoers sources. From Quest
! 21: sudo.
! 22:
! 23: * vasgroups.c: Use warningx() instead of log_error() since
! 24: the latter is not available to visudo or testsudoers. This
! 25: does mean that they don't end up in syslog.
! 26:
1.14 millert 27: 2010-06-02 Todd C. Miller <Todd.Miller@courtesan.com>
28:
29: * auth/pam.c: Fix OpenPAM detection for newer versions.
30:
31: * vasgroups.c: Sync with Quest sudo git repo
32:
33: * aclocal.m4, configure, configure.in: Adapted from Quest sudo.
34: HP-UX ld uses +b instead of -R or -rpath.
35: Fix typo in libvas check.
36: libvas may need libdl for dlopen().
37: Add missing template for ENV_DEBUG.
38:
39: * README.LDAP:
40: Fix typos; from Quest Sudo
41:
42: * Makefile.in, configure.in:
43: Use value of SHELL from configure in Makefile
44:
45: 2010-05-28 Todd C. Miller <Todd.Miller@courtesan.com>
46:
47: * env.c: Handle duplicate variables in the environment.
48: For unsetenv(), keep looking even after remove the first instance.
49: For sudo_putenv(), check for and remove dupes after we replace an
50: existing value.
51:
52: 2010-04-29 Todd C. Miller <Todd.Miller@courtesan.com>
53:
54: * visudo.c: Fix a crash when checking a sudoers file that has aliases
55: that reference themselves. Based on a diff from David Wood.
56:
57: 2010-04-15 Todd C. Miller <Todd.Miller@courtesan.com>
58:
59: * alias.c: Fix use after free in error message when a duplicate
60: alias exists.
61:
62: 2010-04-14 Todd C. Miller <Todd.Miller@courtesan.com>
63:
64: * visudo.c: Set errorfile to the sudoers path if we set parse_error
65: manually. This prevents a NULL dereference in printf() when
66: checking a sudoers file in strict mode when alias errors are present.
67:
1.13 millert 68: 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
69:
1.14 millert 70: * configure, configure.in: Fix installation of sudoers.ldap
71: in "make install" when --with-ldap was specified without a
72: directory. From Prof. Dr. Andreas Mueller
1.13 millert 73:
74: 2010-04-09 Todd C. Miller <Todd.Miller@courtesan.com>
75:
1.14 millert 76: * find_path.c: Qualify the command even if it is in the
77: current working directory, e.g. "./foo" instead of just
78: returning "foo". This removes an ambiguity between real
79: commands and possible pseudo-commands in command matching.
1.13 millert 80:
81: 2010-04-07 Todd C. Miller <Todd.Miller@courtesan.com>
82:
1.14 millert 83: * sudoers.cat, sudoers.man.in, sudoers.pod: Add a note about
84: the security implications of the fast_glob option.
1.13 millert 85:
86: * memrchr.c: Remove duplicate includes
87:
88: 2010-03-10 Todd C. Miller <Todd.Miller@courtesan.com>
89:
1.14 millert 90: * sudo.c: Fix a bug introduced with def_closefrom. The value
91: of def_closefrom already includes the +1.
1.13 millert 92:
93: 2010-03-09 Todd C. Miller <Todd.Miller@courtesan.com>
94:
1.14 millert 95: * match.c: When doing a glob match, short circuit if
96: gl.gl_pathc is 0. From Mark Kettenis.
1.13 millert 97:
1.12 millert 98: 2010-02-22 Todd C. Miller <Todd.Miller@courtesan.com>
99:
1.14 millert 100: * match.c: Check for pseudo-command by looking at the first
101: character of the command in sudoers instead of checking the
102: user-supplied command for a slash.
1.12 millert 103:
1.11 millert 104: 2010-02-09 Todd C. Miller <Todd.Miller@courtesan.com>
1.12 millert 105:
1.11 millert 106: * toke.l: Fix size arg when realloc()ing include stack.
107: From Daniel Kopecek
108:
109: * toke.l: Avoid a duplicate fclose() of the sudoers file.
110:
111: 2010-02-06 Todd C. Miller <Todd.Miller@courtesan.com>
112:
113: * aix.c, config.h.in, configure, configure.in: Use setrlimit64(),
114: if available, instead of setrlimit() when setting AIX resource
115: limits since rlim_t is 32bits.
116:
117: * logging.c: Fix use after free when sending error messages.
118: From Timo Juhani Lindfors
119:
120: 2009-12-17 15:02 millert
121:
122: * parse.c: Fix printing of entries with multiple host entries on
123: a single line.
124:
125: 2009-12-09 16:05 millert
126:
127: * logging.c: fix typo in last commit
128:
129: 2009-12-08 22:19 millert
130:
131: * logging.c: Convert fmt_first and fmt_confd into macros.
132:
1.10 millert 133: 2009-11-23 10:56 millert
134:
135: * match.c: cmnd_matches() already deals with negation so
136: _cmndlist_matches() does not need to do so itself. Fixes a bug
137: with negated entries in a Cmnd_List.
138:
139: 2009-11-22 11:12 millert
140:
141: * sudo.c: Don't exit() from open_sudoers, just return NULL for all
142: errors.
143:
144: 2009-11-22 09:54 millert
145:
146: * toke.c, toke.l: Add missing extern def for parse_error
147:
148: 2009-11-20 19:11 millert
149:
150: * toke.c, toke.l: Avoid a parse error when #includedir doesn't find
151: any files. Closes bug #375
152:
153: 2009-11-20 19:03 millert
154:
155: * Makefile.in: Include sudo.man.pl and sudoers.man.pl in the
156: distribution tarball.
157:
158: 2009-11-04 09:42 millert
159:
160: * configure, configure.in: Fix a few typos in the descriptions;
161: from Jeff Makey Only do the check for
162: krb5_get_init_creds_opt_free() taking two arguments if we find
163: krb5_get_init_creds_opt_alloc(). Otherwise we will get a false
164: positive when using our own krb5_get_init_creds_opt_free which
165: takes only a single argument.
166:
167: 2009-11-03 09:58 millert
168:
169: * configure, configure.in: Remove a spurious comma in the kerb5
170: bits.
171:
172: 2009-11-03 09:51 millert
173:
174: * auth/kerb5.c: Call krb5_get_init_creds_opt_init() in our emulated
175: krb5_get_init_creds_opt_alloc() for MIT kerberos.
176:
177: 2009-09-30 09:50 millert
178:
179: * sudo_edit.c: Always update the stashed mtime of the temp file
180: instead of using what we have for the original because the time
181: resolution of the filesystem the temporary is on may not match
182: that of the filesystem that holds the original. Should fix bz
183: #371 found by Philippe Levan.
184:
185: 2009-09-24 21:11 millert
186:
187: * configure, configure.in, sudoers.man.pl, sudoers.pod: Substitute
188: in default value for secure_path
189:
190: 2009-09-24 20:31 millert
191:
192: * sudo.pod: Mention that the password must be followed by a newline
193: with the -S option.
194:
195: 2009-08-07 10:21 millert
196:
197: * auth/pam.c: Set PAM_RUSER and PAM_RHOST early so they can be used
198: during authentication. Based on a patch from Jamie Beverly.
199:
200: 2009-08-07 09:25 millert
201:
202: * match.c: Close dir before returning if strlcpy() reports
203: overflow. From Martynas Venckus.
204:
205: 2009-07-18 09:55 millert
206:
207: * toke.c, toke.l: Fix expansion of %h in #include names. Fixes
208: bugzilla 363
209:
210: 2009-07-12 17:17 millert
211:
212: * mkdefaults: If no arg assume def_data.in
213:
214: 2009-07-11 21:27 millert
215:
216: * README, WHATSNEW: Update for 1.7.2
217:
218: 2009-07-11 21:12 millert
219:
220: * ChangeLog: sync
221:
1.9 millert 222: 2009-06-30 08:41 millert
223:
224: * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
225: quotes around a colon in Runas_Spec definition. From Elias
226: Benali.
227:
1.8 millert 228: 2009-06-29 09:36 millert
229:
230: * redblack.c: In rbrepair, re-color the root or the first non-block
231: node we find to be black. Re-coloring the root is probably not
232: needed but won't hurt.
233:
234: 2009-06-29 09:35 millert
235:
236: * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
237:
238: 2009-06-26 16:40 millert
239:
240: * redblack.c: When repairing the tree, don't touch the root node.
241:
242: 2009-06-25 08:44 millert
243:
244: * set_perms.c: Protect call to setegid in runas_setup with #ifdef
245: HAVE_SETEUID. Reported by Josef Schmid.
246:
1.7 millert 247: 2009-06-23 14:29 millert
248:
249: * sudoers.pod: Document that we accept env_pam-style environment
250: files
251:
252: 2009-06-23 14:24 millert
253:
254: * env.c: Adapt to accept pam_env-style /etc/environment which
255: allows shell-style lines such as: export EDITOR="/usr/bin/vi"
256:
257: 2009-06-23 12:22 millert
258:
259: * sudoers.pod: Make it clear that env_delete only works when
260: !env_reset. From Loïc Minier
261:
1.6 millert 262: 2009-06-15 17:19 millert
263:
264: * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
265: Quest
266:
267: 2009-06-15 17:18 millert
268:
269: * Makefile.in: build the .cat page in the current working dir, not
270: the src dir
271:
272: 2009-06-15 09:10 millert
273:
274: * env.c: Return EINVAL in setenv() if var is NULL or the empty
275: string to match glibc behavior.
276:
277: 2009-06-13 16:52 millert
278:
279: * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
280: AC_ARG_ENABLE
281:
282: 2009-06-11 16:29 millert
283:
284: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
285: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
286: regen
287:
288: 2009-06-09 10:08 millert
289:
290: * INSTALL: Document --with-libvas and --with-libvas-rpath
291:
292: 2009-05-29 09:43 millert
293:
294: * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
295: and key paths may be a directory or a file. However, version 5.0
296: of the SDK only seems to support using a directory. If
297: ldapssl_clientauth_init fails and the cert or key paths look like
298: they could be files, strip off the last path element and try
299: again.
300:
301: 2009-05-29 09:40 millert
302:
303: * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
304: in path to flex.
305:
306: 2009-05-26 20:49 millert
307:
308: * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
309: non-Unix group support from Quest, as reworked by me.
310:
311: 2009-05-26 20:47 millert
312:
313: * toke.c: regen
314:
315: 2009-05-26 20:46 millert
316:
317: * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
318: space.
319:
320: 2009-05-25 08:02 millert
321:
322: * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
323: fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
324: logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
325: pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
326: sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
327: testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
328: auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
329: years.
330:
331: 2009-05-24 08:33 millert
332:
333: * interfaces.c, lbuf.c: Minor fixes for Minix-3
334:
335: 2009-05-22 06:37 millert
336:
337: * set_perms.c: Handle getgroups() returning 0. Also add missing
338: check for HAVE_GETGROUPS.
339:
340: 2009-05-19 17:24 millert
341:
342: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
343: version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
344: via AC_INIT in configure.
345:
346: 2009-05-18 06:33 millert
347:
348: * set_perms.c: Remove group setting code in setusercontext case, we
349: will do it ourselves later on in runas_setup. Set the gid after
350: initgroups/setgroups is called, since on Mac OS X it seems to
351: change the egid.
352:
353: 2009-05-17 18:19 millert
354:
355: * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
356: vasgroups.c: Initial bits of non-unix group support using Quest
357: Authentication Services
358:
359: 2009-05-17 16:52 millert
360:
361: * toke.c, toke.l: Accept %:foo as a non-Unix group
362:
363: 2009-05-17 16:22 millert
364:
365: * toke.c, toke.l: Allow user/group to be double quoted in the case
366: of non-Unix groups which contain spaces.
367:
368: 2009-05-11 12:47 millert
369:
370: * match.c: Don't allow the user to specify the default runas user
371: if their sudoers entry only allows them to run as a group.
372:
373: 2009-05-10 07:59 millert
374:
375: * sudo.c: Must call audit_success before we change uids.
376:
377: 2009-05-10 07:52 millert
378:
379: * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
380: set_perm to not exit on failure and use this in the logging
381: routines.
382:
383: 2009-05-10 07:33 millert
384:
385: * parse.c: In -l mode, if the user is only allowed to run as a
386: group, display the user's name, not root's before the allowed
387: group.
388:
389: 2009-05-09 21:00 millert
390:
391: * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
392: effect of setting the runas user to root unilaterally.
393:
394: 2009-05-08 16:19 millert
395:
396: * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
397: F_SETLKW.
398:
399: 2009-05-08 13:07 millert
400:
401: * pwutil.c: Only cache by the method we fetched for pwd and grp
402: lookups. Previously we cached both by namd and id but this can
403: cause problems for entries that share the same id. Also add more
404: info in the error message in case the insert fails (which should
405: now be impossible).
406:
407: 2009-04-30 15:04 millert
408:
409: * sudoers.pod: Add a clarification from Nick Sieger
410:
411: 2009-04-25 12:49 millert
412:
413: * env.c: Inline the setting of the environment string.
414:
415: 2009-04-24 14:53 millert
416:
417: * env.c: setenv(3) in Linux treats a NUL value as the empty string
418: setenv(3) in BSD doesn't return an error if the name has '=' in
419: it, it just treats the '=' as end of string.
420:
421: 2009-04-22 16:32 millert
422:
423: * toke.c, toke.l: Not all systems have d_namlen
424:
425: 2009-04-20 13:53 millert
426:
427: * sudoers.pod: Fix up some pod2html issues.
428:
429: 2009-04-19 14:09 millert
430:
431: * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
432: from a diff from Quest Software.
433:
434: 2009-04-19 09:01 millert
435:
436: * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
437: files)
438:
439: 2009-04-19 08:56 millert
440:
441: * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
442: backup files)
443:
444: 2009-04-18 19:37 millert
445:
446: * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
447: #includedir, ignore any file containing a dot
448:
449: 2009-04-18 19:25 millert
450:
451: * Makefile.in, version.h: Bump version
452:
453: 2009-04-18 19:25 millert
454:
455: * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
456: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
457: visudo.c: Implement #includedir directive. Files in an
458: includedir are not edited by visudo unless they contain a syntax
459: error.
460:
461: 2009-04-18 12:06 millert
462:
463: * ChangeLog: sync
464:
1.5 millert 465: 2009-04-18 10:27 millert
466:
467: * WHATSNEW: Forgot umask_override
468:
469: 2009-04-18 09:25 millert
470:
471: * ChangeLog, TODO: sync
472:
473: 2009-04-16 08:22 millert
474:
475: * visudo.c: Rewind stream if we fdopen sudoers since it may not be
476: at the beginning. Set the keepopen flag on already-open files
477: too so the lexer doesn't close them out from under us.
478:
479: 2009-04-16 08:18 millert
480:
481: * visudo.c: Print the proper file name when there is a parse error
482: in an include file.
483:
484: 2009-04-11 07:45 millert
485:
486: * WHATSNEW: Sync
487:
1.4 millert 488: 2009-04-10 16:59 millert
489:
490: * configure, configure.in: Fix a warning when --without-ldap is
491: specified.
492:
493: 2009-04-05 12:25 millert
494:
495: * alias.c, parse.h, visudo.c: Store aliases that we remove during
496: check_aliases in a freelist and free them at the end so we don't
497: leak memory.
498:
499: 2009-03-28 09:30 millert
500:
501: * visudo.c: Check aliases in -c mode too.
502:
503: 2009-03-28 09:09 millert
504:
505: * alias.c, parse.h, visudo.c: Make alias_remove return the alias
506: struct instead of freeing it directly. Fixes a use after free in
507: alias_remove_recursive, the only consumer.
508:
509: 2009-03-28 09:07 millert
510:
511: * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
512: -> alias_find for consistency.
513:
514: 2009-03-27 19:29 millert
515:
516: * visudo.c: When checking for unused aliases, recurse if the alias
517: points to another alias.
518:
519: 2009-03-16 12:11 millert
520:
521: * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
522: support will be done later after some refactoring.
523:
524: 2009-03-14 12:02 millert
525:
526: * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
527:
528: 2009-03-13 21:04 millert
529:
530: * configure, configure.in: Only check for
531: ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
532: compilation with ldapux.
533:
534: 2009-03-11 20:03 millert
535:
536: * fileops.c: fix char subscript
537:
538: 2009-03-11 19:19 millert
539:
540: * Makefile.in: remove errant carriage returns
541:
542: 2009-03-11 19:01 millert
543:
544: * audit.c, env.c: fix K&R compilation
545:
546: 2009-03-11 12:12 millert
547:
548: * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
549: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
550: regen
551:
552: 2009-03-10 17:34 millert
553:
554: * config.h.in: Add missing HAVE_BSM_AUDIT
555:
556: 2009-03-10 17:21 millert
557:
558: * WHATSNEW: Add 1.7.1 features
559:
560: 2009-03-10 17:10 millert
561:
562: * INSTALL: Mention --with-netsvc
563:
564: 2009-03-10 17:08 millert
565:
566: * sudoers.ldap.pod: Document netsvc.conf support
567:
568: 2009-03-10 16:44 millert
569:
570: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
571: sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
572:
573: 2009-03-08 16:57 millert
574:
575: * configure, config.h.in, configure.in, env.c: Add
576: --enable-env-debug flag to enable environment sanity checks.
577:
578: 2009-03-08 11:51 millert
579:
580: * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
581:
582: 2009-03-07 17:10 millert
583:
584: * env.c: Only sync environ for putenv, setenv, and unsetenv. We
585: need to make sure that sudo_putenv and sudo_setenv only modify
586: env.envp, not environ.
587:
588: 2009-03-02 14:19 millert
589:
590: * env.c: Really fix UNSETENV_VOID
591:
592: 2009-03-02 14:18 millert
593:
594: * env.c: Fix unsetenv when UNSETENV_VOID
595:
596: 2009-03-02 08:00 millert
597:
598: * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
599:
600: 2009-03-02 07:36 millert
601:
602: * ldap.c: tivoli-based ldap does not have ldapssl_err2string
603:
604: 2009-03-02 07:30 millert
605:
606: * configure: regen
607:
608: 2009-03-01 16:20 millert
609:
610: * config.h.in, configure, configure.in, ldap.c: Add support for
611: Tivoli-based LDAP start TLS as seen in AIX. Untested.
612:
613: 2009-03-01 08:52 millert
614:
615: * env.c: Add sanity checks for setenv/unsetenv
616:
617: 2009-02-28 20:17 millert
618:
619: * Makefile.in: Include bsm_audit.h in the tarball
620:
621: 2009-02-28 20:00 millert
622:
623: * Makefile.in, version.h: bump version for sudo 1.7.1
624:
625: 2009-02-28 19:58 millert
626:
627: * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
628: sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
629: calls to setenv/unsetenv and provide our own
630: setenv/unsetenv/putenv that operates on own env pointer. Make
631: sync_env() inline in setenv/unsetenv/putenv functions.
632:
633: 2009-02-25 07:33 millert
634:
635: * sudo.c: Make "sudoedit -h" work as expected
636:
637: 2009-02-25 07:21 millert
638:
639: * auth/pam.c: Make sure def_prompt is always defined. This is a
640: workaround for pam configs that prompt for a password in the
641: session but don't have an auth line. A better fix is to expand
642: the sudo prompt earlier and set def_prompt to that when
643: initializing.
644:
645: 2009-02-25 06:17 millert
646:
647: * sudo.pod: Mention that the helper for -A may be graphical.
648:
649: 2009-02-25 06:16 millert
650:
651: * TROUBLESHOOTING: Document what happens if there is no tty.
652:
653: 2009-02-25 06:05 millert
654:
655: * sudo.c: cosmetic changes
656:
657: 2009-02-25 05:47 millert
658:
659: * term.c: Fix term_restore
660:
661: 2009-02-24 20:23 millert
662:
663: * sudo.c: Fix "sudo -k" with no other args
664:
665: 2009-02-24 08:04 millert
666:
667: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
668: be specified in conjunction with a command or another option that
669: may require authentication.
670:
671: 2009-02-23 09:18 millert
672:
673: * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
674: from Diego E. 'Flameeyes'
675:
676: 2009-02-23 09:15 millert
677:
678: * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
679:
680: 2009-02-21 17:03 millert
681:
682: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
683: Implement umask_override
684:
685: 2009-02-21 16:51 millert
686:
687: * toke.c: regen
688:
689: 2009-02-21 16:49 millert
690:
691: * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
692: include filenames.
693:
694: 2009-02-21 08:43 millert
695:
696: * audit.c: Need to include compat.h
697:
698: 2009-02-21 08:37 millert
699:
700: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
701: sudo.c: Make audit_success and audit_failure generic functions in
702: preparation for integrating linux audit support.
703:
704: 2009-02-21 08:06 millert
705:
706: * term.c: remove duplicate include
707:
708: 2009-02-20 16:13 millert
709:
710: * bsm_audit.c: Add missing include
711:
712: 2009-02-20 15:55 millert
713:
714: * sudo.c: May need to update the runas user after parsing
715: command-based defaults.
716:
717: 2009-02-18 10:53 millert
718:
719: * glob.c: Add missing pair of braces introduced with character
720: class support.
721:
722: 2009-02-15 15:53 millert
723:
724: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
725: Rename pwstars to pwfeedback
726:
727: 2009-02-10 20:25 millert
728:
729: * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
730:
731: 2009-02-10 20:18 millert
732:
733: * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
734: sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
735: S.J. Peron
736:
737: 2009-02-10 19:58 millert
738:
739: * term.c: This is new code, no DARPA notice.
740:
741: 2009-02-10 14:04 millert
742:
743: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
744: simple_glob -> fast_glob
745:
746: 2009-02-10 09:39 millert
747:
748: * match.c: g/c unused var
749:
750: 2009-02-10 08:09 millert
751:
752: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
753: simple_glob option to use fnmatch() instead of glob(). This is
754: useful when you need to specify patterns that reference network
755: file systems.
756:
757: 2009-02-10 07:58 millert
758:
759: * tgetpass.c: add term_* proto
760:
761: 2009-02-10 07:51 millert
762:
763: * sudoers.pod: mention glob()
764:
765: 2009-02-09 07:59 millert
766:
767: * tgetpass.c: Delete any pwstars we wrote after the user hits
768: return. That way there is no record on screen as to the user's
769: password length.
770:
771: 2009-02-08 10:27 millert
772:
773: * term.c: Move terminal setting bits from tgetpass.c to term.c
774:
775: 2009-02-07 19:50 millert
776:
777: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
778: tgetpass.c: Add pwstars sudoers option that causes sudo to print
779: a star every time the user presses a key.
780:
781: 2009-02-03 10:10 millert
782:
783: * Makefile.in: Fix up F<> brokenness for visudo.man.in and
784: sudoers.ldap.man.in.
785:
786: 2009-01-27 11:54 millert
787:
788: * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
789: not -1, to indicate no limit. From Mark Janssen.
790:
791: 2009-01-17 17:36 millert
792:
793: * toke.c, toke.l: Comments that begin with #- should not be parsed
794: as uids.
795:
796: 2009-01-08 19:13 millert
797:
798: * sudo.c: Do not try to set the close on exec flag if we didn't
799: actually open sudoers.
800:
801: 2008-12-19 12:40 millert
802:
803: * ChangeLog: regen
804:
1.3 millert 805: 2008-12-14 17:40 millert
806:
807: * TODO: sync
808:
809: 2008-12-09 18:48 millert
810:
811: * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
812: enters ^C at the password prompt.
813:
814: 2008-12-09 16:13 millert
815:
816: * configure.in, configure: Don't try to build sudo_noexec.so on
817: HP-UX with the bundled compiler as it cannot generate shared
818: objects.
819:
820: 2008-12-09 15:55 millert
821:
822: * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
823: fixes
824:
825: 2008-12-09 08:49 millert
826:
827: * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
828: it clear that we are not short-circuiting on last match. When
829: pwcheck is 'all', initialize nopass to TRUE and override it with
830: the first non-TRUE entry.
831:
832: 2008-12-08 10:02 millert
833:
834: * parse.c: Do not short circuit pseudo commands when we get a match
835: since, depending on the settings, we may need to examine all
836: commands for tags.
837:
838: 2008-12-03 15:58 millert
839:
840: * sudoers.cat, sudoers.man.in: regen
841:
842: 2008-12-03 15:57 millert
843:
844: * sudoers.pod: hostnames may also contain wildcards
845:
846: 2008-12-03 15:40 millert
847:
848: * Makefile.in: remove stamp-* files and linux core files in clean
849: target
850:
851: 2008-12-02 12:30 millert
852:
853: * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
854: HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
855:
856: 2008-11-26 15:10 millert
857:
858: * configure, configure.in: correctly enable SIA on Digital UNIX
859:
860: 2008-11-25 20:06 millert
861:
862: * TODO: checkpoint
863:
864: 2008-11-25 20:05 millert
865:
866: * ChangeLog: sync
867:
868: 2008-11-25 12:01 millert
869:
870: * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
871: ttys we may still have /dev/tty available to us.
872:
873: 2008-11-24 10:09 millert
874:
875: * sudoers.cat, sudoers.man.in: regen
876:
877: 2008-11-24 10:08 millert
878:
879: * sudoers.pod: fix typos; Markus Lude
880:
881: 2008-11-24 07:08 millert
882:
883: * ChangeLog: sync
884:
1.2 millert 885: 2008-11-23 19:42 millert
886:
887: * toke.c: regen
888:
889: 2008-11-23 19:41 millert
890:
891: * toke.l: Fix matching of a line that only consists of a comment
892: char
893:
894: 2008-11-22 13:17 millert
895:
896: * auth/pam.c: MacOS pam will retry conversation function if it
897: fails so just treat ^C as an empty password.
898:
899: 2008-11-22 10:12 millert
900:
901: * visudo.c: When checking for alias use, also check defaults
902: bindings.
903:
904: 2008-11-22 10:01 millert
905:
906: * redblack.c: unused var
907:
908: 2008-11-22 09:42 millert
909:
910: * redblack.c: Replace my rbdelete with Emin's version (which
911: actually works ;-)
912:
913: 2008-11-19 12:01 millert
914:
915: * testsudoers.c: malloc debugging
916:
917: 2008-11-19 07:37 millert
918:
919: * visudo.c: malloc options in devel mode for visudo too
920:
921: 2008-11-18 10:57 millert
922:
923: * sudo.c: fix compilation on non-C99; from Theo
924:
925: 2008-11-18 10:50 millert
926:
927: * visudo.c: fix check_aliases
928:
929: 2008-11-18 08:29 millert
930:
931: * alias.c: when destroying an alias, free the correct data pointer
932:
933: 2008-11-18 07:54 millert
934:
935: * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
936:
937: 2008-11-15 13:34 millert
938:
939: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
940: visudo.man.in: regen
941:
942: 2008-11-15 13:34 millert
943:
944: * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
945: 'option' for command line options (not flag)
946:
947: 2008-11-14 06:18 millert
948:
949: * INSTALL: Add note on configuring HP-UX pam
950:
951: 2008-11-11 13:28 millert
952:
953: * check.c, sudo.c: Move tty checks into check_user() so we only do
954: them if we actually need a password.
955:
956: 2008-11-11 12:34 millert
957:
958: * sudo.c: Don't error out if no tty or askpass unless we actually
959: need to authenticate.
960:
961: 2008-11-10 15:20 millert
962:
963: * ChangeLog: regen
964:
1.1 millert 965: 2008-11-10 08:07 millert
966:
967: * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
968: Stoeckmann
969:
970: 2008-11-09 15:18 millert
971:
972: * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
973:
974: 2008-11-09 09:15 millert
975:
976: * gram.c, toke.c: regen
977:
978: 2008-11-09 09:13 millert
979:
980: * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
981: env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
982: interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
983: logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
984: redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
985: sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
986: version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
987: visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
988: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
989: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
990: sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
991: years.
992:
993: 2008-11-09 08:48 millert
994:
995: * fnmatch.c, glob.c, emul/charclass.h: add my copyright
996:
997: 2008-11-08 10:40 millert
998:
999: * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
1000: far past the end, resulting in a NUL being written immediately
1001: after the buffer end.
1002:
1003: 2008-11-08 10:31 millert
1004:
1005: * UPGRADE, WHATSNEW: add sections on tgetpass changes
1006:
1007: 2008-11-08 10:30 millert
1008:
1009: * tgetpass.c: Treat EOF w/o newline as an error.
1010:
1011: 2008-11-07 17:42 millert
1012:
1013: * parse.c: Fix "sudo -v" when NOPASSWD is set.
1014:
1015: 2008-11-07 12:45 millert
1016:
1017: * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
1018: longer treat an empty password at the prompt as special. To quit
1019: out of sudo you now need to hit ^C at the password prompt.
1020:
1021: 2008-11-06 21:07 millert
1022:
1023: * sudoers.cat, sudoers.man.in: regen
1024:
1025: 2008-11-06 21:06 millert
1026:
1027: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
1028: will now refuse to run if no tty is present unless the new
1029: visiblepw sudoers flag is set.
1030:
1031: 2008-11-05 19:42 millert
1032:
1033: * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
1034: RLIM_SAVED_MAX not defined
1035:
1036: 2008-11-05 19:40 millert
1037:
1038: * aix.c: fix fallback value for RLIM_SAVED_MAX
1039:
1040: 2008-11-05 19:14 millert
1041:
1042: * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
1043: aixauth_cleanup.
1044:
1045: 2008-11-05 19:08 millert
1046:
1047: * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
1048: authenticate() as it may not be correct for the user we are
1049: running the command as.
1050:
1051: 2008-11-05 19:05 millert
1052:
1053: * isblank.c: Add isblank() function for systems without it. Needed
1054: for POSIX character class matching in fnmatch.c and glob.c.
1055:
1056: 2008-11-05 11:02 millert
1057:
1058: * TROUBLESHOOTING: expound on sudo and cd
1059:
1060: 2008-11-04 15:52 millert
1061:
1062: * ChangeLog: regen
1063:
1064: 2008-11-04 15:46 millert
1065:
1066: * sudoers.cat, sudoers.man.in: regen
1067:
1068: 2008-11-04 15:45 millert
1069:
1070: * sudoers.pod: mention defauts parse order
1071:
1072: 2008-11-03 13:19 millert
1073:
1074: * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
1075: function for systems without it. Needed for POSIX character
1076: class matching in fnmatch.c and glob.c.
1077:
1078: 2008-11-03 12:54 millert
1079:
1080: * Makefile.in: add emul/charclass.h to HDRS
1081:
1082: 2008-11-02 14:08 millert
1083:
1084: * TODO: checkpoint
1085:
1086: 2008-11-02 14:06 millert
1087:
1088: * parse.c, defaults.c, testsudoers.c, visudo.c: Move
1089: update_defaults into defaults.c and call it properly from visudo
1090: and testsudoers.
1091:
1092: 2008-11-02 09:51 millert
1093:
1094: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
1095: tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
1096: consistency
1097:
1098: 2008-11-02 09:45 millert
1099:
1100: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
1101: tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
1102: has non-standard entries.
1103:
1104: 2008-11-02 09:35 millert
1105:
1106: * match.c: quiet gcc
1107:
1108: 2008-11-02 09:28 millert
1109:
1110: * match.c: Short circuit glob() checks if basename(pattern) !=
1111: basename(command). Refactor code that checks for a command in a
1112: directory and use it in the glob case if the resolved pattern
1113: ends in a '/'.
1114:
1115: 2008-11-01 09:20 millert
1116:
1117: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
1118: setting runas defaults until after runaspw/gr is setup.
1119:
1120: 2008-10-29 13:26 millert
1121:
1122: * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
1123: allocating host/domain name since some systems do not include
1124: space for the NUL in the size. Also manually NUL-terminate
1125: buffer from gethostname() since POSIX is wishy-washy on this.
1126:
1127: 2008-10-26 17:13 millert
1128:
1129: * sudo.c, sudoers.pod: When setting the umask, use the union of the
1130: user's umask and the default value set in sudoers so that we
1131: never lower the user's umask when running a command.
1132:
1133: 2008-10-26 16:43 millert
1134:
1135: * sudo.c: Don't try to read from a zero-length sudoers file.
1136: Remove the bogus Solaris work-around for EAGAIN. Since we now
1137: use fgetc() it should not be a problem.
1138:
1139: 2008-10-25 09:22 millert
1140:
1141: * parse.c: In update_defaults() check the return value of
1142: user*_matches against ALLOW so we don't inadvertantly match on
1143: UNSPEC.
1144:
1145: 2008-10-24 09:52 millert
1146:
1147: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1148: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1149: regen man pages; no more hyphenation
1150:
1151: 2008-10-24 09:49 millert
1152:
1153: * sudo.c: Don't error out on a zero-length sudoers file. With the
1154: advent of #include the user could create a situation where sudo
1155: is unusable.
1156:
1157: 2008-10-23 12:06 millert
1158:
1159: * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
1160: has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
1161: Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
1162: Add configure tests to handle all the cases.
1163:
1164: 2008-10-08 17:28 millert
1165:
1166: * sudo.pod: resort ENVIRONMENT
1167:
1168: 2008-10-08 17:09 millert
1169:
1170: * sudoers.pod: document sudoers_locale
1171:
1172: 2008-10-08 16:56 millert
1173:
1174: * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
1175: uses in preference to VISUAL or EDITOR
1176:
1177: 2008-10-08 14:27 millert
1178:
1179: * toke.c, toke.l: In fill_cmnd(), collapse any escaped
1180: sudo-specific characters. Allows character classes to be used in
1181: pathnames.
1182:
1183: 2008-10-03 16:02 millert
1184:
1185: * lbuf.c: fix typo in non-C89 function declaration
1186:
1187: 2008-10-03 15:56 millert
1188:
1189: * sudoers.pod: Mention POSIX characters classes now that out
1190: fnmatch() and glob() support them.
1191:
1192: 2008-10-03 15:55 millert
1193:
1194: * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
1195: UTF8) with [A-Za-z] which is locale agnostic.
1196:
1197: 2008-10-03 10:02 millert
1198:
1199: * parse.h: use __signed char if we are going to assign a negative
1200: value since on Power, char is unsigned by default
1201:
1202: 2008-10-03 09:59 millert
1203:
1204: * configure, configure.in, config.h.in: Add tests for __signed char
1205: and signed char.
1206:
1207: 2008-10-03 09:19 millert
1208:
1209: * aix.c: Fix AIX limit setting. getuserattr() returns values in
1210: disk blocks rather than bytes. The default hard stack size in
1211: newer AIX is RLIM_SAVED_MAX. From Dale King.
1212:
1213: 2008-09-26 17:13 millert
1214:
1215: * fnmatch.c, glob.c, emul/charclass.h: Add character class support
1216: to included glob(3) and fnmatch(3).
1217:
1218: 2008-09-16 08:28 millert
1219:
1220: * emul/fnmatch.h: Remove UCB advertising clause and some
1221: compatibility defines.
1222:
1223: 2008-09-14 16:07 millert
1224:
1225: * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1226: re-invoking itself or sudo. This allows one to set EDITOR to
1227: sudoedit without getting into an infinite loop of sudoedit
1228: running itself until the path gets too big.
1229:
1230: 2008-09-13 20:45 millert
1231:
1232: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1233: sudoers_locale Defaults option to override the default sudoers
1234: locale of "C".
1235:
1236: 2008-09-13 14:09 millert
1237:
1238: * sudo.c: Set locale to system default except for during sudoers
1239: parse.
1240:
1241: 2008-09-12 09:34 millert
1242:
1243: * match.c: Redo change in 1.34 to use pointer arithmetic.
1244:
1245: 2008-09-11 07:06 millert
1246:
1247: * match.c: Fix a dereference (read) of a freed pointer. Reported
1248: by Patrick Williams.
1249:
1250: 2008-08-23 19:09 millert
1251:
1252: * sudo.c: Set locale to "C" to avoid interpretation issues with
1253: character ranges in sudoers. May want to make the locale a
1254: sudoers option in the future.
1255:
1256: 2008-08-20 07:45 millert
1257:
1258: * config.h.in: we no longer use setproctitle
1259:
1260: 2008-08-20 07:41 millert
1261:
1262: * sudo.h: remove #if 1
1263:
1264: 2008-08-20 07:40 millert
1265:
1266: * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1267: package.
1268:
1269: 2008-07-12 08:53 millert
1270:
1271: * gram.c: regen with yacc skeleton bug fixed
1272:
1273: 2008-07-12 08:48 millert
1274:
1275: * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1276:
1277: 2008-07-02 06:27 millert
1278:
1279: * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1280: passwd entry used for running commands as a uid not listed in the
1281: passwd database. Fixes an issue with some PAM modules.
1282:
1283: 2008-07-01 07:57 millert
1284:
1285: * sudo.c: Error out in -i mode if the user has no shell. This can
1286: happen when running commands as a uid with no password entry.
1287:
1288: 2008-06-26 07:49 millert
1289:
1290: * toke.c, toke.l: Better fix for line continuation inside double
1291: quotes. Now accepts whitespace between the backslash and the
1292: newline like the main lexer.
1293:
1294: 2008-06-25 14:31 millert
1295:
1296: * toke.c, toke.l: Fix line continuation in strings. It was only
1297: being honored if preceded by whitespace.
1298:
1299: 2008-06-22 16:19 millert
1300:
1301: * config.h.in, configure, configure.in, logging.c: Replace the
1302: double fork with a fork + daemonize.
1303:
1304: 2008-06-21 14:59 millert
1305:
1306: * env.c, sudo.c: The -i flag should imply env_reset. This got
1307: broken in sudo 1.6.9.
1308:
1309: 2008-06-20 20:34 millert
1310:
1311: * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1312: is waited for. Instead of having a SIGCHLD handler, use the
1313: double fork trick to orphan the child that opens the pipe to
1314: sendmail. Fixes a problem running su on some Linux distros.
1315:
1316: 2008-06-20 17:16 millert
1317:
1318: * configure, configure.in: Fix configure test for dirfd() on Linux
1319: where DIR is opaque.
1320:
1321: 2008-06-17 17:42 millert
1322:
1323: * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1324: QNX still has this problem we'll need to revisit this again.
1325:
1326: 2008-06-10 21:13 millert
1327:
1328: * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1329: the mailer. If we only block the signal it may be delivered
1330: later when we unblock. Also, there is no need to block SIGCHLD
1331: since we no longer do the double fork. The normal SIGCHLD
1332: handler is sufficient.
1333:
1334: 2008-06-08 17:37 millert
1335:
1336: * configure, configure.in: Add description for NO_PAM_SESSION, from
1337: a redhat patch.
1338:
1339: 2008-06-06 09:36 millert
1340:
1341: * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1342:
1343: 2008-05-18 13:54 millert
1344:
1345: * configure, configure.in: Redo the test for dgettext() in a way
1346: that hopefully will work around the libintl_dgettext() undefined
1347: problem.
1348:
1349: 2008-05-11 09:21 millert
1350:
1351: * schema.ActiveDirectory: change filename in comment
1352:
1353: 2008-05-10 09:18 millert
1354:
1355: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1356: sudoers.ldap.pod: Reference schema.ActiveDirectory
1357:
1358: 2008-05-09 14:49 millert
1359:
1360: * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1361:
1362: 2008-05-09 14:48 millert
1363:
1364: * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1365:
1366: 2008-05-09 14:01 millert
1367:
1368: * schema.ActiveDirectory: Active Directory schema by Chantal
1369: Paradis and Eric Paquet
1370:
1371: 2008-05-08 17:54 millert
1372:
1373: * parse.c: remove an XXX that was fixed
1374:
1375: 2008-05-08 12:53 millert
1376:
1377: * ChangeLog: sync
1378:
1379: 2008-05-08 12:49 millert
1380:
1381: * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1382: mode. This fixes a problem where the tag value printed was
1383: influenced by defaults set in the first pass through the parser.
1384:
1385: 2008-05-03 21:29 millert
1386:
1387: * Makefile.in, sudo.psf: No point in packaging the TODO file
1388:
1389: 2008-05-03 21:24 millert
1390:
1391: * ChangeLog: sync
1392:
1393: 2008-05-02 20:53 millert
1394:
1395: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1396: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1397: Defaults option that is similar to /etc/environment on some
1398: systems.
1399:
1400: 2008-05-02 16:38 millert
1401:
1402: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1403: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1404: sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1405: version to 1.7.0
1406:
1407: 2008-05-02 16:37 millert
1408:
1409: * UPGRADE: initial valgrind pass done
1410:
1411: 2008-04-23 08:30 millert
1412:
1413: * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1414: the secret.
1415:
1416: 2008-04-11 10:03 millert
1417:
1418: * ldap.c: define LDAPS_PORT if the system headers do not
1419:
1420: 2008-04-10 14:54 millert
1421:
1422: * gram.c, gram.y: Fix another memory leak in init_parser().
1423:
1424: 2008-04-10 12:51 millert
1425:
1426: * configure, configure.in: There was a missing space before the
1427: ldap libs in SUDO_LIBS for some configurations.
1428:
1429: 2008-04-10 11:28 millert
1430:
1431: * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1432: leaks pointed out by valgrind.
1433:
1434: 2008-04-07 14:39 millert
1435:
1436: * sudo.c: fix "sudo -s" broken by mode/flags breakout
1437:
1438: 2008-04-07 14:26 millert
1439:
1440: * configure, configure.in: remove duplicate check for dgettext
1441:
1442: 2008-04-05 15:54 millert
1443:
1444: * aix.c: Fall back to default stanza if no user-specific limit is
1445: found.
1446:
1447: 2008-04-02 15:56 millert
1448:
1449: * snprintf.c: include stdint.h if present
1450:
1451: 2008-04-02 15:28 millert
1452:
1453: * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1454:
1455: 2008-04-01 19:18 millert
1456:
1457: * sudoers.ldap.pod: fix cut and pasto
1458:
1459: 2008-03-31 11:24 millert
1460:
1461: * pwutil.c: Add #ifdef PURITY
1462:
1463: 2008-03-30 17:36 millert
1464:
1465: * auth/bsdauth.c: remove useless cast
1466:
1467: 2008-03-27 19:07 millert
1468:
1469: * ChangeLog: sync
1470:
1471: 2008-03-27 19:04 millert
1472:
1473: * TODO: sync
1474:
1475: 2008-03-27 19:01 millert
1476:
1477: * sudo.h: Split MODE_* defines into primary and flags.
1478:
1479: 2008-03-26 13:11 millert
1480:
1481: * aix.c: It turns out the logic for getting AIX limits is more
1482: convoluted than I realized and differs depending on whether the
1483: soft and/or hard limits are defined.
1484:
1485: 2008-03-23 10:18 millert
1486:
1487: * Makefile.in, configure, configure.in: Back out AIX-specific
1488: change to set the sudo_noexec path to the .a file, we do really
1489: want to use the .so file. Since libtool doesn't do that
1490: correctly, just install the .so file ourselves in the Makefile.
1491:
1492: 2008-03-23 10:12 millert
1493:
1494: * install-sh: If the file given to install is a path, only use the
1495: basename of the file when building the destination path.
1496:
1497: 2008-03-18 16:08 millert
1498:
1499: * sudo.c: parse_args() cleanup: Sort command line options in the
1500: getopt() switch The -U option requires a parameter Normalize a
1501: few ISSET calls Split mode into mode and flags and retire the
1502: now-obsolete excl variable
1503:
1504: 2008-03-18 16:04 millert
1505:
1506: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1507: sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1508:
1509: 2008-03-18 15:59 millert
1510:
1511: * sudo.c: Move version printing, etc. into a separate function.
1512:
1513: 2008-03-18 15:57 millert
1514:
1515: * sudo.c: Don't try to cleanup nsswitch if it has not been
1516: initialized.
1517:
1518: 2008-03-17 11:09 millert
1519:
1520: * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1521: a problem executing the mailer.
1522:
1523: 2008-03-14 08:11 millert
1524:
1525: * configure.in, configure: AIX shared libs end in .a, not .so.
1526:
1527: 2008-03-13 07:34 millert
1528:
1529: * env.c: Preserve HOME by default too. Matches documentation and
1530: previous behavior.
1531:
1532: 2008-03-12 19:42 millert
1533:
1534: * sudo.c: Use getopt() to parse the command line. We need to be
1535: able to intersperse env variables and options yet still honor
1536: "--"" which complicates things slightly.
1537:
1538: 2008-03-06 14:46 millert
1539:
1540: * ChangeLog: sync
1541:
1542: 2008-03-06 14:43 millert
1543:
1544: * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1545:
1546: 2008-03-06 14:32 millert
1547:
1548: * config.guess, config.sub: update from libtool-1.5.26 distribution
1549:
1550: 2008-03-06 13:18 millert
1551:
1552: * aix.c, sudo.h: attempt to fix compilation errors on AIX
1553:
1554: 2008-03-06 13:08 millert
1555:
1556: * Makefile.in: fix typo in last commit
1557:
1558: 2008-03-06 13:07 millert
1559:
1560: * Makefile.in: Add WHATSNEW file to the distribution
1561:
1562: 2008-03-06 12:43 millert
1563:
1564: * visudo.c: use warningx instead of fprintf(stderr, ...)
1565:
1566: 2008-03-06 12:31 millert
1567:
1568: * list.c: add DEBUG to list2tq
1569:
1570: 2008-03-06 12:28 millert
1571:
1572: * ChangeLog, TODO: sync
1573:
1574: 2008-03-06 12:21 millert
1575:
1576: * WHATSNEW: mention mailfrom
1577:
1578: 2008-03-06 12:19 millert
1579:
1580: * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1581: sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1582: using a combination of getuserattr() and setrlimit(). Currently
1583: untested.
1584:
1585: 2008-03-05 16:52 millert
1586:
1587: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1588: sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1589: sets the value of the From: field in the warning/error mail. If
1590: unset the login name of the invoking user is used.
1591:
1592: 2008-03-05 16:18 millert
1593:
1594: * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1595: that is freeable
1596:
1597: 2008-03-05 15:19 millert
1598:
1599: * gram.c, gram.y: When adding a default, only call list2tq() once
1600: to do the list to tq conversion. It is not legal to call list2tq
1601: multiple times on the same list since list2tq consumes and
1602: modifies the list argument.
1603:
1604: 2008-03-05 09:38 millert
1605:
1606: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1607: out XXXs for now
1608:
1609: 2008-03-05 09:36 millert
1610:
1611: * WHATSNEW: mention askpass
1612:
1613: 2008-03-04 17:20 millert
1614:
1615: * sudo.c: Error out if both -A and -S are specified Error out if -A
1616: is specified but no askpass is configured
1617:
1618: 2008-03-04 17:16 millert
1619:
1620: * configure, configure.in: we are not going to ship a sudo-specific
1621: askpass
1622:
1623: 2008-03-03 14:30 millert
1624:
1625: * sudo.h: fix definition of TGP_ASKPASS
1626:
1627: 2008-03-03 13:54 millert
1628:
1629: * def_data.c, def_data.in: make askpass boolean-capable
1630:
1631: 2008-03-03 13:53 millert
1632:
1633: * INSTALL: document --with-askpass
1634:
1635: 2008-03-02 19:27 millert
1636:
1637: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1638: sudoers.ldap.cat, visudo.cat: regen
1639:
1640: 2008-03-02 17:31 millert
1641:
1642: * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1643:
1644: 2008-03-02 09:31 millert
1645:
1646: * check.c, configure, configure.in, def_data.c, def_data.h,
1647: def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1648: sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1649: running a helper program to read the password when no tty is
1650: present (or when specified with the -A flag). TODO: docs.
1651:
1652: 2008-03-02 08:38 millert
1653:
1654: * def_data.c, def_data.in: add missing printf format to SELinux
1655: role and type strings
1656:
1657: 2008-02-27 09:26 millert
1658:
1659: * INSTALL, configure, configure.in: Disable use of
1660: gss_krb5_ccache_name() by default and add
1661: --enable-gss-krb5-ccache-name configure option to enable it. It
1662: seems that gss_krb5_ccache_name() doesn't work properly with some
1663: combinations of Heimdal and OpenLDAP.
1664:
1665: 2008-02-22 15:33 millert
1666:
1667: * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1668: add a call to setkeycreatecon() (though this is probably
1669: insufficient). From Dan Walsh.
1670:
1671: 2008-02-22 15:19 millert
1672:
1673: * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1674: conversation function may be called for non-password reading
1675: purposes so we must be careful not to use def_prompt in cases
1676: where it may not be set.
1677:
1678: 2008-02-20 12:00 millert
1679:
1680: * selinux.c: Don't free the new tty context, we need to keep it
1681: around when we restore the tty context after the command
1682: completes
1683:
1684: 2008-02-19 16:04 millert
1685:
1686: * selinux.c: s/newrole/sudo/
1687:
1688: 2008-02-19 13:21 millert
1689:
1690: * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1691: if we have login.conf support
1692:
1693: 2008-02-18 11:05 millert
1694:
1695: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1696: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1697: regen
1698:
1699: 2008-02-18 10:53 millert
1700:
1701: * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1702: sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1703: lines partaining to login.conf, BSD auth and SELinux and only
1704: enable them if pertinent.
1705:
1706: 2008-02-18 10:42 millert
1707:
1708: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1709: Remove the =cut on the first line (above the copyright notice) to
1710: quiet pod2man. Also remove the hackery in the FILES section and
1711: just deal with the fact that there will a newline between each
1712: pathname.
1713:
1714: 2008-02-17 08:19 millert
1715:
1716: * Makefile.in: run sudo.man.pl when generating sudo.man.in
1717:
1718: 2008-02-17 08:11 millert
1719:
1720: * configure, configure.in, sudo.man.pl: comment out SELinux manual
1721: bits unless --with-selinux was specified
1722:
1723: 2008-02-17 08:04 millert
1724:
1725: * sudoers.pod: document role and type defaults for SELinux
1726:
1727: 2008-02-16 20:26 millert
1728:
1729: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1730: Document "sudo -ll" and make "sudo -l -l" be equivalent.
1731:
1732: 2008-02-15 15:23 millert
1733:
1734: * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1735: Fixes compilation problems on Debian GNU/kFreeBSD.
1736:
1737: 2008-02-13 17:17 millert
1738:
1739: * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1740: rewrite of verify_krb_v5_tgt()
1741:
1742: 2008-02-13 07:28 millert
1743:
1744: * logging.c, logging.h, sudo.c: Remove dependence on
1745: VALIDATE_NOT_OK in logging functions. Split log_auth() into
1746: log_allowed() and log_denial() Replace mail_auth() with
1747: should_mail() and a call to send_mail()
1748:
1749: 2008-02-10 18:06 millert
1750:
1751: * ldap.c: Add debugging so we can tell if the krb5 ccache is
1752: accessible
1753:
1754: 2008-02-10 17:34 millert
1755:
1756: * INSTALL: mention --with-selinux
1757:
1758: 2008-02-09 09:48 millert
1759:
1760: * configure: regen
1761:
1762: 2008-02-09 09:43 millert
1763:
1764: * selinux.c: add Sudo tag
1765:
1766: 2008-02-09 09:30 millert
1767:
1768: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1769: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1770: pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1771: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1772: sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1773: toke.l: Add support for SELinux RBAC. Sudoers entries may
1774: specify a role and type. There are also role and type defaults
1775: that may be used. To make sure a transition occurs, when using
1776: RBAC commands are executed via the new sesh binary. Based on
1777: initial changes from Dan Walsh.
1778:
1779: 2008-02-08 08:18 millert
1780:
1781: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1782: list (sudo -ll) support for printing verbose LDAP and sudoers
1783: file entries. Still need to update manual.
1784:
1785: 2008-02-03 10:43 millert
1786:
1787: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1788: output for file and ldap based sudoers and use lbufs for both.
1789: The ldap output does not currently include options that cannot be
1790: represented as tags. This will be remedied in a long list output
1791: mode to come.
1792:
1793: 2008-01-27 16:37 millert
1794:
1795: * set_perms.c: Use a specific error message for errno == EAGAIN
1796: when setuid() et al fails. On Linux systems setuid() will fail
1797: with errno set to EAGAIN if changing to the new uid would result
1798: in a resource limit violation.
1799:
1800: 2008-01-27 16:34 millert
1801:
1802: * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1803: family of syscalls causes the nroc resource limit to be checked.
1804: The limits will be reset by pam_limits.so when PAM is used. In
1805: the non-PAM case the nproc limit will remain unlimited but there
1806: doesn't seem to be a way around that other than having sudo parse
1807: /etc/security/limits.conf directly.
1808:
1809: 2008-01-27 16:31 millert
1810:
1811: * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1812: AIX
1813:
1814: 2008-01-23 06:33 millert
1815:
1816: * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1817: AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1818: from going into config.h. Avoid single quotes in variable
1819: expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1820: of bash they will end up literally in the resulting define.
1821:
1822: 2008-01-21 13:22 millert
1823:
1824: * README.LDAP: mention --with-nsswitch=no
1825:
1826: 2008-01-21 11:43 millert
1827:
1828: * configure, configure.in: ldap_ssl.h depends on ldap.h being
1829: included first
1830:
1831: 2008-01-21 11:07 millert
1832:
1833: * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1834: if we can find it. Needed for the ldapssl_set_strength defines
1835: on HP-UX at least.
1836:
1837: 2008-01-21 10:02 millert
1838:
1839: * TODO, sudoers.ldap.pod: sync
1840:
1841: 2008-01-21 10:01 millert
1842:
1843: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1844: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1845: regen
1846:
1847: 2008-01-21 10:00 millert
1848:
1849: * Makefile.in: Use 78n line length when formatting cat pages.
1850:
1851: 2008-01-21 09:50 millert
1852:
1853: * README.LDAP: Remove redundant info that is now in
1854: sudoers.ldap.pod
1855:
1856: 2008-01-20 16:18 millert
1857:
1858: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1859: Reorganize the first section a bit. Substitute the proper path
1860: for /etc/sudoers.
1861:
1862: 2008-01-20 10:17 millert
1863:
1864: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1865: Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1866: Move schema into EXAMPLES
1867:
1868: 2008-01-20 10:15 millert
1869:
1870: * configure.in, configure: Substitute values for ldap.conf,
1871: ldap.secret and nsswitch.conf into sudoers.ldap.man.
1872:
1873: 2008-01-19 20:35 millert
1874:
1875: * configure, configure.in: substitute for sudoers.ldap.man
1876:
1877: 2008-01-19 20:34 millert
1878:
1879: * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1880: man page.
1881:
1882: 2008-01-19 20:25 millert
1883:
1884: * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1885: some of the missing pieces. Still needs some reorganization and
1886: editing.
1887:
1888: 2008-01-19 15:06 millert
1889:
1890: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1891: sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1892: Currently, much of the information is adapted from README.LDAP.
1893:
1894: 2008-01-18 17:32 millert
1895:
1896: * pwutil.c: When copying gr_mem we must guarantee that the storage
1897: space for gr_mem is properly aligned. The simplest way to do
1898: this is to simply store gr_mem directly after struct group. This
1899: is not a problem for gr_passwd or gr_name as they are simple
1900: strings.
1901:
1902: 2008-01-18 16:47 millert
1903:
1904: * ldap.c: Fix a typo/thinko in one of the calls to
1905: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1906:
1907: 2008-01-17 15:44 millert
1908:
1909: * config.h.in, configure, configure.in, ldap.c: include
1910: <mps/ldap_ssl.h> in ldap.c if available
1911:
1912: 2008-01-16 18:20 millert
1913:
1914: * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1915: skeleton.c
1916:
1917: 2008-01-16 13:03 millert
1918:
1919: * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1920: echo) to guarantee that any pending output is discarded
1921:
1922: 2008-01-15 17:18 millert
1923:
1924: * sudoers: no longer need to specify SETENV when user has sudo ALL
1925:
1926: 2008-01-15 09:40 millert
1927:
1928: * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1929: group option, renaming old -g to -G Add set_runasgr() and
1930: set_runaspw() and use them
1931:
1932: 2008-01-15 09:23 millert
1933:
1934: * sudo.h, sudo.c: Make set_runaspw static void
1935:
1936: 2008-01-15 09:17 millert
1937:
1938: * testsudoers.c, visudo.c: g/c set_runaspw stub
1939:
1940: 2008-01-15 07:28 millert
1941:
1942: * configure, configure.in: Don't add -llber twice.
1943:
1944: 2008-01-14 06:40 millert
1945:
1946: * ldap.c: fix typo
1947:
1948: 2008-01-13 15:39 millert
1949:
1950: * gram.c: regen
1951:
1952: 2008-01-13 14:57 millert
1953:
1954: * configure, configure.in: Fix check that determines whether -llber
1955: is required.
1956:
1957: 2008-01-13 14:22 millert
1958:
1959: * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1960: netscape-based LDAP, use ldapssl_set_strength() to implement the
1961: checkpeer ldap.conf option.
1962:
1963: 2008-01-13 09:49 millert
1964:
1965: * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1966: to use the cred cache, which is what krb5_verify_user() does.
1967: Better cleanup on failure.
1968:
1969: 2008-01-12 12:40 millert
1970:
1971: * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1972: krb5_verify_user() does.
1973:
1974: 2008-01-09 14:58 millert
1975:
1976: * gram.c: The U suffix on constants is an ANSI feature
1977:
1978: 2008-01-09 12:08 millert
1979:
1980: * configure.in, configure: Add check for ber_set_option() in -llber
1981:
1982: 2008-01-06 19:02 millert
1983:
1984: * README.LDAP: default if no nsswitch.conf is files only
1985:
1986: 2008-01-06 17:28 millert
1987:
1988: * README.LDAP: don't tell people to mail aaron about LDAP stuff
1989:
1990: 2008-01-06 12:32 millert
1991:
1992: * README.LDAP: timelimit and bind_timelimit
1993:
1994: 2008-01-06 08:54 millert
1995:
1996: * ChangeLog: sync
1997:
1998: 2008-01-06 07:56 millert
1999:
2000: * ldap.c: Move ldap.secret reading into a separate function.
2001:
2002: 2008-01-05 19:09 millert
2003:
2004: * check.c: user_runas -> runas_pw
2005:
2006: 2008-01-05 18:59 millert
2007:
2008: * TODO: sync
2009:
2010: 2008-01-05 18:59 millert
2011:
2012: * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
2013: the password prompt. Based on a patch from Patrick Schoenfeld.
2014:
2015: 2008-01-05 18:25 millert
2016:
2017: * ldap.c: Check strlcpy() return values.
2018:
2019: 2008-01-05 18:12 millert
2020:
2021: * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
2022:
2023: 2008-01-05 16:35 millert
2024:
2025: * README.LDAP: Make it clear that host and uri can take multiple
2026: parameters. URI is now supported for more than just openldap
2027: nsswitch.conf does't accept "compat"
2028:
2029: 2008-01-05 16:27 millert
2030:
2031: * sudo.c: comment cleanup and update (c) year
2032:
2033: 2008-01-05 16:25 millert
2034:
2035: * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
2036: parse.c to sudo_nss.c. This should make it possible to build an
2037: LDAP-only sudo binary.
2038:
2039: 2008-01-05 13:27 millert
2040:
2041: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
2042: multiple sudoers sources by passing in the previous return value
2043: to the next in the chain
2044:
2045: 2008-01-05 13:26 millert
2046:
2047: * gram.y: Free up parser data structures in sudo_file_close().
2048:
2049: 2008-01-05 08:13 millert
2050:
2051: * gram.c, parse.c: Free up parser data structures in
2052: sudo_file_close().
2053:
2054: 2008-01-05 07:59 millert
2055:
2056: * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
2057: ldap_create() instead of deprecated ldap_init() Use
2058: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
2059:
2060: 2008-01-05 07:56 millert
2061:
2062: * config.h.in, configure, configure.in: Add check for
2063: ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
2064:
2065: 2008-01-04 09:56 millert
2066:
2067: * configure.in, configure, config.h.in: add check for ldap_create
2068:
2069: 2008-01-03 16:11 millert
2070:
2071: * config.h.in, configure, configure.in, ldap.c: Add
2072: sudo_ldap_get_first_rdn() to return the first rdn of an entry's
2073: dn using the mechanism appropriate for the LDAP SDK in use. Use
2074: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
2075: Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
2076: without them.
2077:
2078: 2008-01-03 16:02 millert
2079:
2080: * lbuf.c: include unistd.h
2081:
2082: 2008-01-03 11:05 millert
2083:
2084: * config.h.in, configure.in: fix typo in mtim_getnsec
2085:
2086: 2008-01-02 15:29 millert
2087:
2088: * config.h.in, configure.in, configure: add check for st__tim in
2089: struct stat as used by SCO
2090:
2091: 2008-01-02 11:05 millert
2092:
2093: * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
2094:
2095: 2008-01-02 10:09 millert
2096:
2097: * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
2098:
2099: 2008-01-01 19:04 millert
2100:
2101: * ldap.c: Replace deprecated ldap_explode_dn() with calls to
2102: ldap_str2dn() and ldap_rdn2str().
2103:
2104: 2008-01-01 18:37 millert
2105:
2106: * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
2107: of the deprecated ldap_get_values()/ldap_value_free().
2108:
2109: 2008-01-01 17:07 millert
2110:
2111: * TODO, ChangeLog: sync
2112:
2113: 2008-01-01 17:06 millert
2114:
2115: * gettime.c, sudo.c: Remove some already fixed XXXs
2116:
2117: 2008-01-01 17:03 millert
2118:
2119: * ldap.c: Same return value as non-existent sudoers if LDAP was
2120: unable to connect.
2121:
2122: 2008-01-01 16:52 millert
2123:
2124: * sudo.pod: mention /etc/environment
2125:
2126: 2008-01-01 16:42 millert
2127:
2128: * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
2129: developments.
2130:
2131: 2008-01-01 16:42 millert
2132:
2133: * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
2134: -V output.
2135:
2136: 2008-01-01 16:25 millert
2137:
2138: * ldap.c: When building up a query don't list groups in the aux
2139: group vector that are the same as the passwd file group. On most
2140: systems the first gid in the group vector is the same as the
2141: passwd entry gid.
2142:
2143: 2008-01-01 14:01 millert
2144:
2145: * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
2146: to disable user ldaprc and system defaults that could affect how
2147: LDAP works.
2148:
2149: 2008-01-01 13:21 millert
2150:
2151: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
2152: sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
2153: --with-nsswitch to allow users to specify nsswitch.conf path or
2154: disable it. If --with-nsswitch=no but --with-ldap, order is
2155: LDAP, then sudoers. Fix --with-ldap-conf-file and
2156: --with-ldap-secret-file
2157:
2158: 2008-01-01 13:12 millert
2159:
2160: * parse.c: Honor def_ignore_local_sudoers
2161:
2162: 2007-12-31 16:44 millert
2163:
2164: * ldap.c: no longer need to check def_ignore_local_sudoers here
2165:
2166: 2007-12-31 16:36 millert
2167:
2168: * parse.c: Refactor group vector resetting into a function and also
2169: call it from display_cmnd. Stop after the first sucessful match
2170: in display_cmnd. Print a newline between each display_privs
2171: method.
2172:
2173: 2007-12-31 16:23 millert
2174:
2175: * parse.c: fix double free introduced in rev 1.218
2176:
2177: 2007-12-31 16:10 millert
2178:
2179: * ldap.c: belt and suspenders; zero out result after freeing it
2180:
2181: 2007-12-31 15:04 millert
2182:
2183: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
2184: reading into a separate function, sudo_parseln(), which removes
2185: comments, leading/trailing whitespace and newlines. May want to
2186: rethink the use of sudo_parseln() for /etc/ldap.secret
2187:
2188: 2007-12-31 14:26 millert
2189:
2190: * parse.c, sudo.c: Make the inability to read the sudoers file a
2191: non-fatal error if there are other sudoers sources available.
2192: sudoers_file_lookup now returns "not OK" if sudoers was not
2193: present
2194:
2195: 2007-12-31 14:24 millert
2196:
2197: * ldap.c: make it clear that the global options are from LDAP
2198:
2199: 2007-12-31 14:13 millert
2200:
2201: * logging.c: allocate proper amount of space for error string
2202:
2203: 2007-12-31 10:24 millert
2204:
2205: * sudo_nss.c, sudo_nss.h: actual sudo nss code
2206:
2207: 2007-12-31 10:08 millert
2208:
2209: * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
2210: display_cmnd.
2211:
2212: 2007-12-31 07:54 millert
2213:
2214: * defaults.c, parse.c, testsudoers.c, visudo.c: move
2215: update_defaults() to parse.c
2216:
2217: 2007-12-31 07:39 millert
2218:
2219: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
2220: Use nsswitch to hide some sudoers vs. ldap implementation details
2221: and reduce the number of #ifdef LDAP TODO: fix display routines
2222: and error handling
2223:
2224: 2007-12-28 11:20 millert
2225:
2226: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2227: First cut at nsswitch.conf support. Further reorganizaton and
2228: related changes are forthcoming.
2229:
2230: 2007-12-21 16:53 millert
2231:
2232: * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2233: and /etc/environment file. Still needs to be documented and
2234: should probably only applies to OSes that have it (AIX and Linux,
2235: maybe others).
2236:
2237: 2007-12-21 16:20 millert
2238:
2239: * ldap.c: include limits.h
2240:
2241: 2007-12-20 10:02 millert
2242:
2243: * WHATSNEW: reword LDAP SASL
2244:
2245: 2007-12-19 16:40 millert
2246:
2247: * TODO: sync
2248:
2249: 2007-12-19 16:39 millert
2250:
2251: * README.LDAP: Add an example sudoRole, clarify netscape vs.
2252: openldap a bit more
2253:
2254: 2007-12-19 14:42 millert
2255:
2256: * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2257:
2258: 2007-12-19 14:28 millert
2259:
2260: * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2261: for ldaps support instead of trying to do it manually with
2262: ldap_init() + ldapssl_install_routines(). Use tls_cert and
2263: tls_key for cert7.db and key3.db respectively. Don't print
2264: debugging info for options that are not set. Add warning if
2265: start_tls specified when not supported.
2266:
2267: 2007-12-19 14:25 millert
2268:
2269: * ldap.c: fix compilation on solaris
2270:
2271: 2007-12-19 14:23 millert
2272:
2273: * Makefile.in: add missing .h and .c files for missing lib objs
2274:
2275: 2007-12-18 09:54 millert
2276:
2277: * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2278:
2279: 2007-12-17 20:10 millert
2280:
2281: * ldap.c: fix compilation on Solaris
2282:
2283: 2007-12-17 10:14 millert
2284:
2285: * configure, configure.in: fix typo
2286:
2287: 2007-12-17 08:08 millert
2288:
2289: * README.LDAP: try to clear up which variables are for OpenLDAP and
2290: which are for netscape-derived SDKs
2291:
2292: 2007-12-17 07:31 millert
2293:
2294: * config.h.in, configure, configure.in, ldap.c: Add support for
2295: "ssl on" in both netscape and openldap flavors. Only the
2296: OpenLDAP flavor has been tested.
2297:
2298: 2007-12-17 07:28 millert
2299:
2300: * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2301: log_error() instead of calling sudo_ldap_close() directly.
2302: ldap_conn can now be static to sudo.c
2303:
2304: 2007-12-16 20:02 millert
2305:
2306: * sudo.c: ld -> ldap_conn
2307:
2308: 2007-12-16 14:42 millert
2309:
2310: * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2311:
2312: 2007-12-16 14:08 millert
2313:
2314: * ldap.c: Distinguish between LDAP conf settings that are
2315: connection-specific (which take an ld pointer) and those that are
2316: default settings (which do not).
2317:
2318: 2007-12-14 16:46 millert
2319:
2320: * ldap.c: Improved warnings on error.
2321:
2322: 2007-12-14 15:59 millert
2323:
2324: * ldap.c: Make ldap config table driven and set the config *after*
2325: we open the connection.
2326:
2327: 2007-12-13 16:41 millert
2328:
2329: * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2330:
2331: 2007-12-13 09:13 millert
2332:
2333: * configure, configure.in: some operating systems need to link with
2334: -lkrb5support when using krb5
2335:
2336: 2007-12-10 17:12 millert
2337:
2338: * WHATSNEW: minor update
2339:
2340: 2007-12-10 10:56 millert
2341:
2342: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2343:
2344: 2007-12-07 19:17 millert
2345:
2346: * TODO, ChangeLog: sync
2347:
2348: 2007-12-07 19:09 millert
2349:
2350: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2351: support for LDAP
2352:
2353: 2007-12-03 11:36 millert
2354:
2355: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2356: can now take an optional command.
2357:
2358: 2007-12-02 12:13 millert
2359:
2360: * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2361: sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2362: that will cause the prompt to be overridden in all cases. This
2363: flag is also set when the user specifies the -p flag.
2364:
2365: 2007-12-01 19:51 millert
2366:
2367: * sudo.c: Move setting of login class until after sudoers has been
2368: parsed. Set NewArgv[0] for -i after runas_pw has been set.
2369:
2370: 2007-12-01 19:34 millert
2371:
2372: * configure, configure.in: Move the dgettext check.
2373:
2374: 2007-12-01 11:22 millert
2375:
2376: * config.h.in, configure, configure.in, auth/pam.c: Add basic
2377: support for looking up the string "Password: " in the PAM
2378: localized text db. This allows us to determine whether the PAM
2379: prompt is the default "Password: " one even if it has been
2380: localized.
2381:
2382: TODO: concatenate non-std PAM prompts and user-specified sudo
2383: prompts.
2384:
2385: 2007-11-27 18:40 millert
2386:
2387: * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2388: sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2389: home-grown attempt that was insufficient.
2390:
2391: 2007-11-27 12:13 millert
2392:
2393: * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2394: Martynas Venckus
2395:
2396: 2007-11-25 19:26 millert
2397:
2398: * set_perms.c: Don't assume runas_pw is set; it may not be in the
2399: -g case.
2400:
2401: 2007-11-25 08:07 millert
2402:
2403: * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2404: restore group vector for PERM_ROOT if we previously changed it.
2405: Stash the runas group vector so we don't have to call initgroups
2406: more than once. Also add no-op check to check_perms.
2407:
2408: 2007-11-21 15:11 millert
2409:
2410: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2411: gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2412: parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2413: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2414: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2415: visudo.cat, visudo.man.in: Add support for runas groups. This
2416: allows the user to run a command with a different effective
2417: group. If the -g option is specified without -u the command will
2418: be run as the current user (only the group will change). the -g
2419: and -u options may be used together. TODO: implement runas group
2420: for ldap improve runas group documentation add
2421: testsudoers support
2422:
2423: 2007-11-21 15:02 millert
2424:
2425: * configure, configure.in: fix setting of mandir
2426:
2427: 2007-11-21 14:26 millert
2428:
2429: * sudo.pod, sudoers.pod: document that ALL implies SETENV
2430:
2431: 2007-11-21 13:50 millert
2432:
2433: * ldap.c: s/setenv_ok/setenv_implied/g
2434:
2435: 2007-11-21 13:44 millert
2436:
2437: * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2438:
2439: 2007-11-21 13:26 millert
2440:
2441: * ldap.c: use strcmp, not strcasecmp when comparing ALL
2442:
2443: 2007-11-21 11:41 millert
2444:
2445: * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2446: file-based sudoers this does affect all the commands in the
2447: sudoRole.
2448:
2449: 2007-11-21 11:05 millert
2450:
2451: * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2452: SETENV tag but, unlike an explicit tag, it is not passed on to
2453: other commands in the list.
2454:
2455: 2007-11-21 11:02 millert
2456:
2457: * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2458: Also use sudo_getpwuid() instead of getpwuid().
2459:
2460: 2007-11-15 11:16 millert
2461:
2462: * sudoers: Expand on the dangers of not using visudo to edit
2463: sudoers.
2464:
2465: 2007-11-08 07:24 millert
2466:
2467: * parse.c: Don't quote *?[]! on output since the lexer does not
2468: strip off the backslash when reading those in.
2469:
2470: 2007-11-07 13:16 millert
2471:
2472: * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2473: compatibility issues.
2474:
2475: 2007-11-04 08:33 millert
2476:
2477: * logging.c: Refactor log line generation in to new_logline().
2478:
2479: 2007-10-25 09:23 millert
2480:
2481: * TROUBLESHOOTING: fix typo
2482:
2483: 2007-10-24 12:41 millert
2484:
2485: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2486: match.c: Add configure check for struct in6_addr instead of
2487: relying on AF_INET6 since some systems define AF_INET6 but do not
2488: include IPv6 support.
2489:
2490: 2007-10-21 09:29 millert
2491:
2492: * configure, configure.in: Fix block to add -lutil for FreeBSD and
2493: NetBSD when logincap is in use.
2494:
2495: 2007-10-19 22:28 millert
2496:
2497: * configure, configure.in: POSIX states that struct timespec be
2498: declared in time.h so check there regardless of the value of
2499: TIME_WITH_SYS_TIME.
2500:
2501: 2007-10-17 11:37 millert
2502:
2503: * tgetpass.c: Instead of defining a macro to call the appropriate
2504: method for turning on/off echo, just define tc[gs]etattr() and
2505: the related defines that use the correct terminal ioctls if
2506: needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2507: all but QNX.
2508:
2509: 2007-10-08 20:18 millert
2510:
2511: * Makefile.in: g/c @ALLOCA@
2512:
2513: 2007-10-08 20:07 millert
2514:
2515: * configure: regen
2516:
2517: 2007-10-08 20:04 millert
2518:
2519: * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2520: --disable-pam-session configure option to disable calling
2521: pam_{open,close}_session. May work around bugs in some PAM
2522: implementations.
2523:
2524: 2007-10-08 12:00 millert
2525:
2526: * tgetpass.c: quiet gcc warnings
2527:
2528: 2007-10-08 08:41 millert
2529:
2530: * tgetpass.c: Avoid printing the prompt if we are already
2531: backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2532: In this case, the call to tcsetattr() will cause SIGTTOU to be
2533: delivered.
2534:
2535: 2007-09-15 16:07 millert
2536:
2537: * def_data.c, def_data.h, def_data.in: Reorder things such that the
2538: definition of env_reset come right before the env variable lists.
2539:
2540: 2007-09-15 07:50 millert
2541:
2542: * parse.h: Shrink type and seqno in struct alias from int to
2543: u_short
2544:
2545: 2007-09-15 07:24 millert
2546:
2547: * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2548: aliases for loop detection. If we find an alias with the seqno
2549: already set to the current (global) value we know we've visited
2550: it before so ignore it.
2551:
2552: 2007-09-13 19:05 millert
2553:
2554: * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2555: add user_ttypath which holds the full path to the tty or is NULL
2556: if no tty was present.
2557:
2558: 2007-09-13 18:42 millert
2559:
2560: * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2561: lower that results in a segv.
2562:
2563: 2007-09-11 15:43 millert
2564:
2565: * gram.c: regen
2566:
2567: 2007-09-11 15:42 millert
2568:
2569: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2570: parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2571:
2572: 2007-09-10 17:33 millert
2573:
2574: * alloc.c: remove some useless casts
2575:
2576: 2007-09-10 17:32 millert
2577:
2578: * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2579: inttypes.h predates the final C99 spec and the standard specifies
2580: that it shall include stdint.h anyway
2581:
2582: 2007-09-06 12:39 millert
2583:
2584: * Makefile.in, alloca.c, configure.in: Since we ship with a
2585: pre-generated parser there is no need to ship a bogus alloca
2586: implementation.
2587:
2588: 2007-09-06 12:22 millert
2589:
2590: * configure: regen
2591:
2592: 2007-09-06 12:19 millert
2593:
2594: * configure.in: remove initial setting of CHECKSIA, we require that
2595: it be unset if not used
2596:
2597: 2007-09-06 11:55 millert
2598:
2599: * Makefile.in: add list.c to SRCS
2600:
2601: 2007-09-06 07:18 millert
2602:
2603: * configure: regen
2604:
2605: 2007-09-06 07:17 millert
2606:
2607: * configure.in: only do SIA checks on Digital Unix
2608:
2609: 2007-09-05 18:50 millert
2610:
2611: * sudoers.cat, sudoers.man.in: regen
2612:
2613: 2007-09-05 18:48 millert
2614:
2615: * ChangeLog, TODO: sync
2616:
2617: 2007-09-05 18:39 millert
2618:
2619: * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2620: needed for modern kerb5.
2621:
2622: 2007-09-05 18:16 millert
2623:
2624: * configure: regen
2625:
2626: 2007-09-05 18:16 millert
2627:
2628: * configure.in, aclocal.m4: New method for setting the default
2629: authentication type and avoiding conflicts in auth types.
2630:
2631: 2007-09-05 14:45 millert
2632:
2633: * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2634: an associated runaslist so no need to keep track of the most
2635: recent non-NULL one.
2636:
2637: 2007-09-04 18:51 millert
2638:
2639: * ldap.c: back out partial ldaps support mistakenly committed
2640:
2641: 2007-09-04 10:57 millert
2642:
2643: * ldap.c: Add support for unix groups and netgroups in sudoRunas
2644:
2645: 2007-09-03 16:28 millert
2646:
2647: * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2648: Stritzky.
2649:
2650: 2007-09-02 17:05 millert
2651:
2652: * configure: regen
2653:
2654: 2007-09-02 17:05 millert
2655:
2656: * INSTALL: update --passprompt escape info
2657:
2658: 2007-09-02 17:03 millert
2659:
2660: * configure.in: remove now-bogus comment and update copyright date
2661:
2662: 2007-09-02 16:35 millert
2663:
2664: * configure.in: Fix up use of with_passwd
2665:
2666: 2007-09-02 16:25 millert
2667:
2668: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2669: Update to autoconf-2.61 andf libtool-1.5.24
2670:
2671: 2007-09-02 16:17 millert
2672:
2673: * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2674: autoconf-2.61
2675:
2676: 2007-09-01 17:39 millert
2677:
2678: * gram.c: regen
2679:
2680: 2007-09-01 17:39 millert
2681:
2682: * gram.y: move tags and runaslist propagation to be earlier
2683:
2684: 2007-09-01 09:34 millert
2685:
2686: * visudo.c: If -f flag given use the permissions of the original
2687: file as a template
2688:
2689: 2007-09-01 08:45 millert
2690:
2691: * gram.y: prevent a double free() when re-initing the parser
2692:
2693: 2007-08-31 19:30 millert
2694:
2695: * configure: regen
2696:
2697: 2007-08-31 19:30 millert
2698:
2699: * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2700: ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2701: redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2702: testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2703: auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2704: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2705: Remove support for compilers that don't support void *
2706:
2707: 2007-08-31 19:14 millert
2708:
2709: * gram.c: regen
2710:
2711: 2007-08-31 19:13 millert
2712:
2713: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2714: match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2715: manipulation macros to list.h and create C versions of the more
2716: complex ones in list.c. The names have been down-cased so they
2717: appear more like normal functions.
2718:
2719: 2007-08-31 17:21 millert
2720:
2721: * Makefile.in: Fix cmp command when regenerating parser. Make
2722: gram.o the first dependency for all programs so gram.h will be
2723: generated before anything that needs it.
2724:
2725: 2007-08-31 13:56 millert
2726:
2727: * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2728: functions.
2729:
2730: 2007-08-30 21:21 millert
2731:
2732: * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2733: permission and short-circuit on the first non-UNSPEC hit we get
2734: for the command. This means that instead of cycling through the
2735: all the parsed sudoers entries we start at the end and work
2736: backwards and quit after the first positive or negative match.
2737:
2738: 2007-08-30 21:13 millert
2739:
2740: * gram.c: regen
2741:
2742: 2007-08-30 21:12 millert
2743:
2744: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2745: Change list head macros to take a pointer, not a struct.
2746:
2747: 2007-08-30 20:46 millert
2748:
2749: * gram.c: regen
2750:
2751: 2007-08-30 20:46 millert
2752:
2753: * gram.y: Propagate the runasspec from one command to the next in a
2754: cmndspec.
2755:
2756: 2007-08-30 16:15 millert
2757:
2758: * match.c: Replace has_meta() with a macro that calls strpbrk().
2759:
2760: 2007-08-30 16:04 millert
2761:
2762: * gram.c: regen
2763:
2764: 2007-08-30 13:26 millert
2765:
2766: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2767: testsudoers.c, visudo.c: Use a list head struct when storing the
2768: semi-circular lists and convert to tail queues in the process.
2769: This will allow us to reverse foreach loops more easily and it
2770: makes it clearer which functions expect a list as opposed to a
2771: single member.
2772:
2773: Add macros for manipulating lists. Some of these should become
2774: functions.
2775:
2776: When freeing up a list, just pop off the last item in the queue
2777: instead of going from head to tail. This is simpler since we
2778: don't have to stash a pointer to the next member, we always just
2779: use the last one in the queue until the queue is empty.
2780:
2781: Rename match functions that take a list to have list in the name.
2782: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2783:
2784: 2007-08-30 13:12 millert
2785:
2786: * parse.c: Fix pasto, append "!" not negated (which is an int) for
2787: sudo -l output.
2788:
2789: 2007-08-30 12:45 millert
2790:
2791: * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2792: dependency is enough. Only move y.tab.h to gram.h if it is
2793: different; avoids needless rebuilding.
2794:
2795: 2007-08-27 15:51 millert
2796:
2797: * sudoers.pod: Defaults lines may be associated with lists of
2798: users, hosts, commands and runas users, not just single entries.
2799:
2800: 2007-08-26 17:42 millert
2801:
2802: * Makefile.in: Revert the "cmp" portion of the last diff, it
2803: doesn't make sense.
2804:
2805: 2007-08-26 17:10 millert
2806:
2807: * Makefile.in: Remove *.lo for clean: When generating the parser,
2808: only move the generated files into place if they differ from the
2809: existing ones.
2810:
2811: 2007-08-24 22:47 millert
2812:
2813: * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2814: (readable) one and add an extra check when it matches to make
2815: sure we have a valid address.
2816:
2817: 2007-08-24 22:36 millert
2818:
2819: * match.c: Fix thinko introduced when merging IPV6 support.
2820:
2821: 2007-08-24 14:23 millert
2822:
2823: * HISTORY, LICENSE: regen
2824:
2825: 2007-08-24 14:23 millert
2826:
2827: * license.pod: add 2007
2828:
2829: 2007-08-24 14:19 millert
2830:
2831: * UPGRADE: mention #uid vs. comment pitfall
2832:
2833: 2007-08-24 09:50 millert
2834:
2835: * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2836: problem with the latest autoconf. From Stepan Kasal.
2837:
2838: 2007-08-23 20:28 millert
2839:
2840: * parse.h: Back out he XOR swap trick, it is slower than a temp
2841: variable on modern CPUs.
2842:
2843: 2007-08-23 20:14 millert
2844:
2845: * gram.c: regen
2846:
2847: 2007-08-23 20:14 millert
2848:
2849: * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2850: and use the XOR swap trick to swap the prev pointers during
2851: append.
2852:
2853: 2007-08-23 15:31 millert
2854:
2855: * parse.h: remove useless statement
2856:
2857: 2007-08-23 07:47 millert
2858:
2859: * toke.c, toke.l: Refactor #include parsing into a separate
2860: function and return unparsed chars (such as newline or comment)
2861: back to the lexer.
2862:
2863: 2007-08-22 18:56 millert
2864:
2865: * WHATSNEW: mention better uid support
2866:
2867: 2007-08-22 18:55 millert
2868:
2869: * sudoers.pod: Users may now consist of a uid.
2870:
2871: 2007-08-22 18:39 millert
2872:
2873: * gram.c, gram.h, toke.c: regen
2874:
2875: 2007-08-22 18:32 millert
2876:
2877: * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2878: characters that would require quoting in sudoers.
2879:
2880: 2007-08-22 18:31 millert
2881:
2882: * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2883: characters which should be quoted with a backslash when
2884: displayed.
2885:
2886: 2007-08-22 18:28 millert
2887:
2888: * toke.l: Require that the first character after a comment not be a
2889: digit or a dash. This allows us to remove the GOTRUNAS state and
2890: treat uid/gids similar to other words. It also means that we can
2891: now specify uids in User_Lists and a User_Spec may now contain a
2892: uid.
2893:
2894: 2007-08-22 18:23 millert
2895:
2896: * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2897: make the runas portion of the grammar more natural.
2898:
2899: 2007-08-22 06:35 millert
2900:
2901: * Makefile.in, README, BUGS: The BUGS file is history
2902:
2903: 2007-08-21 09:19 millert
2904:
2905: * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2906: character after the pound sign isn't a digit or a dash.
2907:
2908: 2007-08-20 20:43 millert
2909:
2910: * WHATSNEW: Glob support was back-ported to 1.6.9
2911:
2912: 2007-08-20 19:59 millert
2913:
2914: * Makefile.in: remove sudo_usage.h in distclean
2915:
2916: 2007-08-20 19:24 millert
2917:
2918: * parse.c: If a Defaults value contains a blank, double-quote the
2919: string.
2920:
2921: 2007-08-20 19:19 millert
2922:
2923: * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2924: that span multiple lines using the line continuation char.
2925: Previously, the entire thing, including the continuation char,
2926: newline, and spaces was stored as-is.
2927:
2928: 2007-08-20 10:46 millert
2929:
2930: * sudo.c: Be consistent when using single quotes and backticks.
2931:
2932: 2007-08-19 16:48 millert
2933:
2934: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2935: sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2936: dynamically allocated strings and word-wrapped output. Currently
2937: used for sudo's usage() and sudo -l output. Sudo usage strings
2938: are now in sudo_usage.h which is generated at configure time.
2939:
2940: 2007-08-18 08:22 millert
2941:
2942: * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2943: actual tty width instead of assuming 80.
2944:
2945: 2007-08-17 18:32 millert
2946:
2947: * history.pod: some more info
2948:
2949: 2007-08-17 17:28 millert
2950:
2951: * history.pod: Mentioned Chris Jepeway's parser and also the new
2952: one that is in sudo 1.7.
2953:
2954: 2007-08-16 09:38 millert
2955:
2956: * sudo.pod, visudo.pod: For the options list, add flag args where
2957: appropriate and increase the indent level so there is room for
2958: them.
2959:
2960: 2007-08-15 13:49 millert
2961:
2962: * parse.c: Fix some spacing in "sudo -l" and add a comment about
2963: some bogosity in the line wrapping.
2964:
2965: 2007-08-15 11:21 millert
2966:
2967: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2968: visudo.man.in, visudo.cat: regen
2969:
2970: 2007-08-15 11:20 millert
2971:
2972: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2973: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2974: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2975: testsudoers.c, toke.c, toke.l: Remove monitor support until there
2976: is a versino of systrace that uses a lookaside buffer (or we have
2977: a better mechanism to use).
2978:
2979: 2007-08-15 09:22 millert
2980:
2981: * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2982: instead of gethostbyname() if it is available
2983:
2984: 2007-08-14 15:27 millert
2985:
2986: * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2987: sizeof(int).
2988:
2989: 2007-08-14 11:19 millert
2990:
2991: * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2992:
2993: 2007-08-14 10:04 millert
2994:
2995: * sudo.c: If we can open sudoers but fail to read the first byte,
2996: close the file stream before trying again.
2997:
2998: 2007-08-13 12:34 millert
2999:
3000: * gram.c, toke.c: regen
3001:
3002: 2007-08-13 12:29 millert
3003:
3004: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
3005: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
3006:
3007: 2007-08-13 12:23 millert
3008:
3009: * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
3010: copyright
3011:
3012: 2007-08-12 18:55 millert
3013:
3014: * configure, configure.in: fix sudo_noexec extension which got
3015: broken in the libtool update
3016:
3017: 2007-08-10 10:41 millert
3018:
3019: * Makefile.in: explicitly specify -Tascii to nroff
3020:
3021: 2007-08-08 16:07 millert
3022:
3023: * logging.c: remove an ANSI-ism that crept in
3024:
3025: 2007-08-06 20:37 millert
3026:
3027: * sudo.pod: Adjust list indents Prevent -- from being turned into
3028: an em dash Use a list for the environment instead of a literal
3029: paragraph
3030:
3031: 2007-08-06 20:36 millert
3032:
3033: * visudo.pod: Use a list for the environment instead of an indented
3034: literal paragraph.
3035:
3036: 2007-08-06 20:33 millert
3037:
3038: * sudoers.pod: Adjust list indentation
3039:
3040: 2007-08-06 20:31 millert
3041:
3042: * license.pod: add =head3
3043:
3044: 2007-08-06 10:24 millert
3045:
3046: * sudo.pod: mention that when specifying a uid for the -u option
3047: the shell may require that the # be escaped
3048:
3049: 2007-08-01 22:08 millert
3050:
3051: * match.c: Fix off by one in group matching.
3052:
3053: 2007-07-31 14:04 millert
3054:
3055: * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
3056: David Krause.
3057:
3058: 2007-07-30 10:45 millert
3059:
3060: * configure, configure.in: Add missing define of
3061: HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
3062:
3063: 2007-07-30 09:29 millert
3064:
3065: * aclocal.m4, configure.in, configure: Fix link tests such that new
3066: gcc doesn't optimize away the test.
3067:
3068: 2007-07-29 19:21 millert
3069:
3070: * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
3071:
3072: 2007-07-29 19:09 millert
3073:
3074: * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
3075: =item
3076:
3077: 2007-07-29 18:32 millert
3078:
3079: * env.c: Add back allocation of the env struct in rebuild_env but
3080: save a copy of the old pointer and free it before returning.
3081:
3082: 2007-07-29 16:09 millert
3083:
3084: * env.c: Don't init the private environment in rebuild_env() since
3085: it may have already been done implicitly
3086: sudo_setenv/sudo_unsetenv.
3087:
3088: Multiply length by sizeof(char *) in memcpy/memmove when copying
3089: the environment so we copy the full thing.
3090:
3091: Add missing set of parens so we deref the right pointer in
3092: sudo_unsetenv when searching for a matching variable.
3093:
3094: 2007-07-26 16:35 millert
3095:
3096: * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
3097: the FILES section
3098:
3099: 2007-07-26 10:04 millert
3100:
3101: * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
3102:
3103: 2007-07-26 07:28 millert
3104:
3105: * sudoers.pod: Sort sudoers options; based on a diff from Igor
3106: Sobrado.
3107:
3108: 2007-07-25 16:19 millert
3109:
3110: * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
3111: @mansectsu@ and @mansectform@ since the latter confuses pod2man.
3112: The Makefile rules for the .man.in file will add @mansectsu@ and
3113: @mansectform@ back in after pod2man is done anyway.
3114:
3115: 2007-07-22 19:09 millert
3116:
3117: * LICENSE, Makefile.in, license.pod: Move license info to pod
3118: format
3119:
3120: 2007-07-22 18:43 millert
3121:
3122: * configure, configure.in, sudoers.pod: Substitute value of
3123: path_info into sudoers man page.
3124:
3125: 2007-07-22 16:40 millert
3126:
3127: * WHATSNEW: remove features that were back-ported to 1.6.9
3128:
3129: 2007-07-22 15:20 millert
3130:
3131: * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
3132: usage. From Igor Sobrado.
3133:
3134: 2007-07-22 15:19 millert
3135:
3136: * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
3137: ldap_sasl_interactive_bind_s() but don't have
3138: gss_krb5_ccache_name().
3139:
3140: 2007-07-22 08:23 millert
3141:
3142: * ChangeLog: rebuild without branch info
3143:
3144: 2007-07-22 08:23 millert
3145:
3146: * Makefile.in: Add ChangeLog target
3147:
3148: 2007-07-22 08:14 millert
3149:
3150: * auth/pam.c: Run cleanup code if the user hits ^C at the password
3151: prompt.
3152:
3153: 2007-07-22 08:13 millert
3154:
3155: * auth/pam.c: Some versions of pam_lastlog have a bug that will
3156: cause a crash if PAM_TTY is not set so if there is no tty, set
3157: PAM_TTY to the empty string.
3158:
3159: 2007-07-20 09:32 millert
3160:
3161: * Makefile.in: ChageLog not Changelog
3162:
3163: 2007-07-20 09:31 millert
3164:
3165: * ChangeLog: sync
3166:
3167: 2007-07-20 09:29 millert
3168:
3169: * Makefile.in: CHANGE -> Changelog
3170:
3171: 2007-07-19 20:23 millert
3172:
3173: * TODO: sync
3174:
3175: 2007-07-19 19:53 millert
3176:
3177: * config.h.in, configure.in, configure, ldap.c: Add configure hooks
3178: for gss_krb5_ccache_name() and the gssapi headers.
3179:
3180: 2007-07-18 12:57 millert
3181:
3182: * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
3183: return environment pointer, they set environ directly.
3184:
3185: No longer need to pass around an envp pointer since we just
3186: operate on environ now.
3187:
3188: Add dosync argument to insert_env() that indicates whether it
3189: should reset environ when realloc()ing env.envp.
3190:
3191: Use an initial size of 128 for the environment.
3192:
3193: 2007-07-18 12:41 millert
3194:
3195: * env.c: Split sudo_setenv() into an external version and a version
3196: only for use by rebuild_env().
3197:
3198: 2007-07-16 19:40 millert
3199:
3200: * ldap.c: Add support for using gss_krb5_ccache_name() instead of
3201: setting KRB5CCNAME. Also use sudo_unsetenv() in the
3202: non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
3203: original environment. TODO: configure setup for
3204: gss_krb5_ccache_name()
3205:
3206: 2007-07-16 18:44 millert
3207:
3208: * README.LDAP: add krb5_ccname
3209:
3210: 2007-07-16 18:44 millert
3211:
3212: * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
3213:
3214: 2007-07-16 18:39 millert
3215:
3216: * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
3217: syncing code into sync_env().
3218:
3219: 2007-07-16 07:27 millert
3220:
3221: * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3222: sasl_authid.
3223:
3224: 2007-07-15 15:44 millert
3225:
3226: * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3227: If specified, it will override the default value of KRB5CCNAME
3228: in the environment for the duration of the call to
3229: ldap_sasl_interactive_bind_s().
3230:
3231: 2007-07-15 15:41 millert
3232:
3233: * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3234: most format_env() + insert_env() combinations. insert_env() no
3235: longer takes a struct environment *
3236:
3237: 2007-07-15 12:47 millert
3238:
3239: * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3240:
3241: 2007-07-15 09:23 millert
3242:
3243: * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3244: support for SASL auth when connecting to an LDAP server. Adapted
3245: from a diff by Tom McLaughlin.
3246:
3247: 2007-07-14 16:32 millert
3248:
3249: * configure, configure.in: Only enable AIX or BSD auth if no other
3250: exclusive auth method has been chosen. Allows people to e.g.,
3251: use PAM on AIX without adding --without-aixauth. A better
3252: solution is needed to deal with default authentication since if a
3253: non-exclusive method is chosen we will still get an error.
3254:
3255: 2007-07-11 11:23 millert
3256:
3257: * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3258: history.pod (which is also used for web pages)
3259:
3260: 2007-07-09 19:40 millert
3261:
3262: * sudo.man.in, sudoers.man.in: regen
3263:
3264: 2007-07-09 19:25 millert
3265:
3266: * sudo.pod: Better explanation of environment handling in the sudo
3267: man page.
3268:
3269: 2007-07-09 15:13 millert
3270:
3271: * env.c, sudo.c: Defer setting user-specified env vars until after
3272: authentication.
3273:
3274: 2007-07-09 13:25 millert
3275:
3276: * env.c: honor def_default_path for PATH set on the command line
3277:
3278: 2007-07-09 13:22 millert
3279:
3280: * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3281: environment variables on the command line as long as they are
3282: allowed by env_keep and env_check. Ie: apply the same
3283: restrictions as normal environment variables. TODO: deal with
3284: secure_path
3285:
3286: 2007-07-08 14:44 millert
3287:
3288: * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3289: original envp to sudo_edit(). Don't allow -E or env var setting
3290: in sudoedit mode. More accurate usage() when called as sudoedit.
3291:
3292: 2007-07-08 14:41 millert
3293:
3294: * ldap.c: warn -> warning
3295:
3296: 2007-07-08 14:11 millert
3297:
3298: * sudo.pod: add -c option to sudoedit synopsis
3299:
3300: 2007-07-08 10:27 millert
3301:
3302: * TODO: udpate to reality
3303:
3304: 2007-07-08 09:43 millert
3305:
3306: * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3307: the return value from {user,host,runas,cmnd}_matches(). Rename
3308: *matches variables -> *match. Purely cosmetic.
3309:
3310: 2007-07-08 09:30 millert
3311:
3312: * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3313: No change in behavior.
3314:
3315: 2007-07-08 09:17 millert
3316:
3317: * sudoers: add SETENV tag
3318:
3319: 2007-07-06 15:51 millert
3320:
3321: * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3322: even if user didn't match since Defaults options may still apply.
3323:
3324: 2007-07-06 14:51 millert
3325:
3326: * check.c, sudo.c: Do not update timestamp if user not validated by
3327: sudoers.
3328:
3329: 2007-07-06 10:14 millert
3330:
3331: * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3332: and restore to the user's original in PERM_ROOT
3333:
3334: 2007-07-06 10:04 millert
3335:
3336: * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3337: now no different than PERM_ROOT so remove PERM_FULL_ROOT
3338:
3339: 2007-07-06 09:49 millert
3340:
3341: * check.c: don't check timestamp mtime if we are just going to
3342: remove it
3343:
3344: 2007-07-06 09:33 millert
3345:
3346: * sudoers.pod: Move sudoers defaults parameters into their own
3347: section.
3348:
3349: 2007-07-05 20:21 millert
3350:
3351: * testsudoers.c: Reduce a level of indent by a few placed continue
3352: statements.
3353:
3354: 2007-07-05 20:20 millert
3355:
3356: * parse.c: Make matching but negated commands/hosts/runas entries
3357: override a previous match as expected. Also reduce some levels
3358: of indent by a few placed continue statements.
3359:
3360: 2007-07-05 16:34 millert
3361:
3362: * parse.c: Print default runas in "sudo -l" if sudoers don't
3363: specify one.
3364:
3365: 2007-07-05 15:46 millert
3366:
3367: * match.c: Less hacky way of testing whether the domain was set.
3368:
3369: 2007-07-04 15:50 millert
3370:
3371: * INSTALL: Mention pam-devel and openldap-devel for Linux
3372:
3373: 2007-07-03 19:38 millert
3374:
3375: * README.LDAP: or vs. are
3376:
3377: 2007-07-01 16:55 millert
3378:
3379: * sudo.c: fix typo in Solaris project support
3380:
3381: 2007-07-01 09:40 millert
3382:
3383: * HISTORY: update
3384:
3385: 2007-07-01 09:07 millert
3386:
3387: * sudo.c: Make -- on the command line match the manual page. The
3388: implied shell case has been simplified as a result.
3389:
3390: 2007-06-28 10:44 millert
3391:
3392: * sudoers2ldif: add simplistic support for sudoRunas; note that if
3393: a sudoers entry contains multiple Runas users, all will apply to
3394: the sudoRole
3395:
3396: 2007-06-28 10:42 millert
3397:
3398: * sudoers2ldif: honor SETENV and NOSETENV tags
3399:
3400: 2007-06-24 09:25 millert
3401:
3402: * mon_systrace.c: Redo setting of user_args. We now build up a
3403: private copy of argv first and then replace the NULs with spaces.
3404:
3405: 2007-06-24 09:19 millert
3406:
3407: * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3408: success
3409:
3410: 2007-06-24 07:39 millert
3411:
3412: * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3413:
3414: 2007-06-23 20:00 millert
3415:
3416: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3417: visudo.man.in: regen
3418:
3419: 2007-06-23 19:58 millert
3420:
3421: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3422: gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3423: sudoers.pod, toke.c, toke.l: Add support for setting environment
3424: variables on the command line. This is only allowed if the
3425: setenv sudoers options is enabled or if the command is prefixed
3426: with the SETENV tag.
3427:
3428: 2007-06-23 19:57 millert
3429:
3430: * README.LDAP: replace Aaron's email address with the sudo-workers
3431: list
3432:
3433: 2007-06-23 19:55 millert
3434:
3435: * configure: regen
3436:
3437: 2007-06-21 20:35 millert
3438:
3439: * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3440: schema out into separate files.
3441:
3442: 2007-06-21 18:28 millert
3443:
3444: * auth/aix_auth.c: free message if set by authenticate()
3445:
3446: 2007-06-21 13:03 millert
3447:
3448: * match.c: deal with NULL gr_mem
3449:
3450: 2007-06-20 15:04 millert
3451:
3452: * config.h.in: regen
3453:
3454: 2007-06-20 15:04 millert
3455:
3456: * configure.in: add template for HAVE_PROJECT_H
3457:
3458: 2007-06-20 07:06 millert
3459:
3460: * closefrom.c: include fcntl.h
3461:
3462: 2007-06-19 19:37 millert
3463:
3464: * INSTALL: mention --with-project
3465:
3466: 2007-06-19 18:24 millert
3467:
3468: * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3469: support. From Michael Brantley.
3470:
3471: 2007-06-19 17:27 millert
3472:
3473: * sudoers.pod: fix typo
3474:
3475: 2007-06-19 17:22 millert
3476:
3477: * configure: regen
3478:
3479: 2007-06-19 17:21 millert
3480:
3481: * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3482:
3483: 2007-06-19 17:00 millert
3484:
3485: * memrchr.c: Remove dependecy on NULL
3486:
3487: 2007-06-19 15:37 millert
3488:
3489: * configure: regen
3490:
3491: 2007-06-19 15:37 millert
3492:
3493: * aclocal.m4, configure.in: Can't use the regular autoconf
3494: fnmatch() check since we need FNM_CASEFOLD so go back to our
3495: custom one.
3496:
3497: 2007-06-19 12:52 millert
3498:
3499: * env.c: Fix preserving of variables in env_keep.
3500:
3501: 2007-06-19 07:10 millert
3502:
3503: * env.c: add XAUTHORIZATION
3504:
3505: 2007-06-18 20:41 millert
3506:
3507: * UPGRADE: expand upon env resetting and mention that it began in
3508: 1.6.9 not 1.7.
3509:
3510: 2007-06-18 20:33 millert
3511:
3512: * sudoers.pod: Update descriptions of env_keep and env_check to
3513: match current reality.
3514:
3515: 2007-06-18 17:33 millert
3516:
3517: * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3518: HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3519: intial_keepenv_table.
3520:
3521: 2007-06-18 17:23 millert
3522:
3523: * env.c, logging.c: Treat USERNAME environemnt variable like
3524: LOGNAME/USER
3525:
3526: 2007-06-18 17:21 millert
3527:
3528: * env.c: Don't need to populate keepenv table with the contents of
3529: the checkenv table.
3530:
3531: 2007-06-18 08:57 millert
3532:
3533: * sudo.c: Don't force sudo into the C locale.
3534:
3535: 2007-06-18 08:56 millert
3536:
3537: * env.c: Make env_check apply when env_reset it true. Environment
3538: variables are passed through unless they contain '/' or '%'.
3539: There is no need to have a variable in both env_check and
3540: env_keep.
3541:
3542: 2007-06-16 07:31 millert
3543:
3544: * visudo.c: Remove an duplicate lock_file() call and add a comment.
3545:
3546: 2007-06-15 21:16 millert
3547:
3548: * UPGRADE: Add sudo 1.6.9 upgrade note.
3549:
3550: 2007-06-14 12:23 millert
3551:
3552: * interfaces.c: Solaris will return EINVAL if the buffer used in
3553: SIOCGIFCONF is too small. From Klaus Wagner.
3554:
3555: 2007-06-14 12:03 millert
3556:
3557: * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3558: logging.c, sudo.h: Redo the long syslog line splitting based on a
3559: patch from Eygene Ryabinkin. Include memrchr() for systems
3560: without it.
3561:
3562: 2007-06-14 07:09 millert
3563:
3564: * configure.in: Since we need to be able to convert timespec to
3565: timeval for utimes() the last 3 digits in the tv_nsec are not
3566: significant. This makes the sudoedit file date comparison work
3567: again.
3568:
3569: 2007-06-13 13:41 millert
3570:
3571: * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3572: deal with adding things to AUTH_OBJS. This deals with exclusive
3573: authentication methods in a simple way.
3574:
3575: 2007-06-12 13:08 millert
3576:
3577: * LICENSE: mkstemp.c is BSD code too.
3578:
3579: 2007-06-12 09:21 millert
3580:
3581: * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3582:
3583: 2007-06-11 18:27 millert
3584:
3585: * sudo.c: cleanenv() is no more.
3586:
3587: 2007-06-10 18:37 millert
3588:
3589: * ChangeLog: Display branch info in Changelog
3590:
3591: 2007-06-10 18:18 millert
3592:
3593: * utimes.c: Include config.h early so we have it for
3594: TIME_WITH_SYS_TIME
3595:
3596: 2007-06-10 18:00 millert
3597:
3598: * ChangeLog: Fix Changelog generation and update.
3599:
3600: 2007-06-09 07:26 millert
3601:
3602: * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3603:
3604: Move old-style fd closing into closefrom_fallback() and call that
3605: if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3606:
3607: 2007-06-09 07:24 millert
3608:
3609: * config.h.in, configure.in, auth/kerb5.c: o use
3610: krb5_verify_user() if available instead of doing it by hand
3611: o use krb5_init_secure_context() if we have it
3612: o pass an encryption type of 0 to krb5_kt_read_service_key()
3613: instead of
3614: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3615:
3616: 2007-06-09 07:20 millert
3617:
3618: * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3619: Debian.
3620:
3621: 2007-06-09 07:17 millert
3622:
3623: * configure.in: Fix closefrom() substitution in the Makefile
3624:
3625: 2007-06-09 07:15 millert
3626:
3627: * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3628:
3629: 2007-06-07 07:52 millert
3630:
3631: * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3632:
3633: 2007-06-07 07:22 millert
3634:
3635: * auth/kerb5.c: If we cannot get a valid service key using the
3636: default keytab it is a fatal error. Fixes a bug where sudo could
3637: be tricked into allowing access when it should not by a fake KDC.
3638: From Thor Lancelot Simon.
3639:
3640: 2007-05-12 08:56 millert
3641:
3642: * aclocal.m4, configure, configure.in: Update long long checks to
3643: use AC_CHECK_TYPES and to cache values.
3644:
3645: 2007-05-12 08:07 millert
3646:
3647: * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3648: homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3649: that assumes replacing with GNU fnmatch.
3650:
3651: 2007-05-11 17:05 millert
3652:
3653: * configure, configure.in: Add closefrom() to LIB_OBJS not
3654: SUDO_OBJS if it is missing since we need it for visudo now too.
3655:
3656: 2007-04-24 14:44 millert
3657:
3658: * sudoers.pod: Attempt to clarify the bit talking about network
3659: numbers w/o netmasks.
3660:
3661: 2007-04-24 14:25 millert
3662:
3663: * sudo.pod: Clarify timestamp dir ownership sentence.
3664:
3665: 2007-04-20 12:40 millert
3666:
3667: * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3668: __LIBPAM_VERSION. From Dmitry V. Levin.
3669:
3670: 2007-04-16 12:13 millert
3671:
3672: * sudo.c: -i is also one of the mutually exclusive options to list
3673: it in the warning message. Noted by Chris Pepper.
3674:
3675: 2007-04-12 11:18 millert
3676:
3677: * visudo.pod: The sudoers variable is env_editor, not enveditor.
3678: From Jean-Francois Saucier.
3679:
3680: 2007-03-29 13:30 millert
3681:
3682: * redblack.c: I tracked down the original author so credit him and
3683: include his license info.
3684:
3685: 2007-02-06 13:25 millert
3686:
3687: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3688: sudoers.pod: Fix typos; from Jason McIntyre.
3689:
3690: 2007-02-06 13:23 millert
3691:
3692: * logging.c: Restore signal mask before calling reapchild(). Fixes
3693: a possible race condition that could prevent sudo from properly
3694: waiting for the child.
3695:
3696: 2007-01-31 10:02 millert
3697:
3698: * pwutil.c: Don't declare pw_free() if we are not going to use it.
3699:
3700: 2007-01-31 10:00 millert
3701:
3702: * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3703: and LDR_PRELOAD64. The 64-bit version is not currently
3704: supported. Remove zero_env() prototype as it no longer exists.
3705:
3706: 2006-12-11 13:21 millert
3707:
3708: * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3709: for rfc 3834.
3710:
3711: 2006-09-29 10:53 millert
3712:
3713: * auth/pam.c: If the user enters ^C at the password prompt, abort
3714: instead of trying to authenticate with an empty password (which
3715: causes an annoying delay).
3716:
3717: 2006-08-17 11:26 millert
3718:
3719: * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3720: F_CLOSEM support to closefrom(); adapted from a diff by Darren
3721: Tucker.
3722:
3723: 2006-08-17 11:25 millert
3724:
3725: * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3726: it out too.
3727:
3728: 2006-08-04 11:34 millert
3729:
3730: * config.sub, config.guess: Update to latest versions from
3731: cvs.savannah.gnu.org
3732:
3733: 2006-07-31 13:51 millert
3734:
3735: * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3736: sudo_end{pw,grp}ent() so we can close the passwd/group files
3737: early.
3738:
3739: 2006-07-31 13:50 millert
3740:
3741: * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3742: flavor of set_perms() for systems without setreuid() or
3743: setresuid() that have a working seteuid(). Tested on Darwin.
3744:
3745: 2006-07-30 15:56 millert
3746:
3747: * mon_systrace.c: systrace_read() returns ssize_t
3748:
3749: 2006-07-30 15:53 millert
3750:
3751: * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3752: Knox.
3753:
3754: 2006-07-28 13:12 millert
3755:
3756: * HISTORY: Fix typo; Matt Ackeret
3757:
3758: 2006-07-17 08:25 millert
3759:
3760: * sudo.c: Print sudoers path in -V mode for root.
3761:
3762: 2006-06-15 14:44 millert
3763:
3764: * ldap.c: Do a sub tree search instead of a base search (one level
3765: in the tree only) for sudo right objects. This allows system
3766: administrators to categorize the rights in a tree to make them
3767: easier to manage.
3768:
3769: 2005-12-28 13:52 millert
3770:
3771: * sudo.pod: fix typo
3772:
3773: 2005-12-04 12:16 millert
3774:
3775: * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3776: timelimit and bind_timelimit support; adapted from gentoo.
3777:
3778: 2005-11-23 18:57 millert
3779:
3780: * ldap.c: Support comments that start in the middle of a line
3781:
3782: 2005-11-23 18:56 millert
3783:
3784: * configure.in, configure: Define LDAP_DEPRECATED until we start
3785: using ldap_get_values_len()
3786:
3787: 2005-11-18 09:55 millert
3788:
3789: * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3790:
3791: 2005-11-17 20:39 millert
3792:
3793: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3794: takes an int as an arg so it can be used as a signal handler too.
3795:
3796: 2005-11-17 20:38 millert
3797:
3798: * sudo.c: Make a copy of the shell field in the passwd struct for
3799: NewArgv to avoid a use after free situation after sudo_endpwent()
3800: is called.
3801:
3802: 2005-11-16 20:36 millert
3803:
3804: * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3805: mkstemp() for those poor souls without it.
3806:
3807: 2005-11-15 09:25 millert
3808:
3809: * env.c: Add PERL5DB to list of environment variables to remove.
3810:
3811: 2005-11-13 15:49 millert
3812:
3813: * mon_systrace.c, mon_systrace.h: Instead of calling the check
3814: function twice with a state cookie use separate check/log
3815: functions.
3816:
3817: Check more ioctl() calls for failure.
3818:
3819: systrace_{read,write} now return the number of bytes read/written
3820: or -1 on error.
3821:
3822: 2005-11-13 14:51 millert
3823:
3824: * env.c: Add more environment variables to remove; from gentoo
3825: linux Add some comments about what bad env variables go to what
3826: (more to do)
3827:
3828: 2005-11-11 17:23 millert
3829:
3830: * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3831: the exec since they free up our cached copy of the passwd
3832: structs, including sudo_user and sudo_runas. Fixes a
3833: use-after-free bug.
3834:
3835: 2005-11-11 17:19 millert
3836:
3837: * visudo.c: Close all fd's before executing editor.
3838:
3839: 2005-11-11 17:17 millert
3840:
3841: * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3842: set.
3843:
3844: 2005-11-11 11:22 millert
3845:
3846: * check.c: Fix fd leak when lecture file option is enabled. From
3847: Jerry Brown
3848:
3849: 2005-11-07 11:02 millert
3850:
3851: * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3852: environment variables to remove. From Charles Morris
3853:
3854: 2005-11-01 13:24 millert
3855:
3856: * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3857:
3858: 2005-10-27 20:35 millert
3859:
3860: * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3861:
3862: 2005-08-14 20:32 millert
3863:
3864: * sudoers.pod: Fix typo; Toby Peterson
3865:
3866: 2005-08-02 09:57 millert
3867:
3868: * tsgetgrpw.c: Make return buffers static so they don't get
3869: clobbered
3870:
3871: 2005-07-27 21:14 millert
3872:
3873: * auth/securid5.c: Fix securid5 authentication, was not checking
3874: for ACM_OK. Also add default cases for the two switch()es.
3875: Problem noted by ccon at worldbank
3876:
3877: 2005-06-26 20:10 millert
3878:
3879: * ldap.c: Remove ncat() in favor of just counting bytes and
3880: pre-allocating what is needed.
3881:
3882: 2005-06-26 19:44 millert
3883:
3884: * ldap.c: Fix up some comments Add missing fclose() for the
3885: rootbinddn case
3886:
3887: 2005-06-26 19:38 millert
3888:
3889: * ldap.c: align struct ldap_config
3890:
3891: 2005-06-26 19:37 millert
3892:
3893: * ldap.c: use LINE_MAX for max conf file line size
3894:
3895: 2005-06-26 18:36 millert
3896:
3897: * pathnames.h.in: add _PATH_LDAP_SECRET
3898:
3899: 2005-06-26 18:36 millert
3900:
3901: * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3902:
3903: 2005-06-25 18:03 millert
3904:
3905: * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3906: ldap.conf
3907:
3908: 2005-06-25 17:46 millert
3909:
3910: * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3911: variable by default.
3912:
3913: 2005-06-25 16:39 millert
3914:
3915: * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3916: is safe for LD_PRELOAD
3917:
3918: 2005-06-25 16:15 millert
3919:
3920: * acsite.m4, configure: set need_version=no for all cases; this is
3921: safe for LD_PRELOAD
3922:
3923: 2005-06-25 14:45 millert
3924:
3925: * aclocal.m4: typo
3926:
3927: 2005-06-25 14:33 millert
3928:
3929: * configure, configure.in: Add dragonfly
3930:
3931: 2005-06-25 14:29 millert
3932:
3933: * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3934:
3935: 2005-06-25 14:21 millert
3936:
3937: * configure: regen
3938:
3939: 2005-06-25 14:20 millert
3940:
3941: * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3942: ltoptions.m4 ltsugar.m4 ltversion.m4
3943:
3944: 2005-06-25 14:08 millert
3945:
3946: * config.guess, config.sub, ltmain.sh: merge in local changes:
3947: config.guess: o better openbsd support config.sub: o hiuxmpp
3948: support ltmain.sh o remove requirement that libs must begin with
3949: "lib" o don't print a bunch of crap about library installs o
3950: don't run ldconfig
3951:
3952: 2005-06-25 14:05 millert
3953:
3954: * config.guess, config.sub, ltmain.sh: libtool 1.9f
3955:
3956: 2005-06-25 14:04 millert
3957:
3958: * configure.in: Update with autoupdate and make minor changes for
3959: libtool 1.9f
3960:
3961: 2005-06-22 23:19 millert
3962:
3963: * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3964:
3965: 2005-06-22 23:04 millert
3966:
3967: * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3968: emul/timespec.h: Move declatation of struct timespec to its own
3969: include files for systems without it since it needs time_t
3970: defined.
3971:
3972: 2005-06-22 22:57 millert
3973:
3974: * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3975:
3976: 2005-05-27 01:59 millert
3977:
3978: * auth/pam.c: Call pam_open_session() and pam_close_session() to
3979: give pam_limits a chance to run. Idea from Karel Zak.
3980:
3981: 2005-04-24 19:24 millert
3982:
3983: * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3984: to silence warnings on Solaris
3985:
3986: 2005-04-24 19:22 millert
3987:
3988: * parse.c: include grp.h to silence a warning on Solaris
3989:
3990: 2005-04-23 15:10 millert
3991:
3992: * parse.c: Fix printing of += and -= defaults.
3993:
3994: 2005-04-17 01:21 millert
3995:
3996: * mon_systrace.c: Sanity check number of syscall args with argsize.
3997: Not really needed but a little paranoia never hurts.
3998:
3999: 2005-04-17 01:18 millert
4000:
4001: * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
4002: void * Use int, not size_t/ssize_t for systrace lengths (since it
4003: uses int)
4004:
4005: 2005-04-16 03:14 millert
4006:
4007: * mon_systrace.c: Add some memsets for paranoia Fix namespace
4008: collsion w/ error Check rval of decode_args() and update_env()
4009: Remove improper setting of validated variable
4010:
4011: 2005-04-11 21:37 millert
4012:
4013: * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
4014: file if def_ignore_sudoers is not set and call LDAP versions from
4015: display_privs() and display_cmnd() instead of directly from
4016: main(). Because of this we need to defer closing the ldap
4017: connection until after -l processing has ocurred and we must pass
4018: in the ldap pointer to display_privs() and display_cmnd().
4019:
4020: 2005-04-11 21:33 millert
4021:
4022: * ldap.c: Reorganize LDAP code to better match normal sudoers
4023: parsing. Instead of storing strings for later printing in -l
4024: mode we do another query since the authenticating user and the
4025: user being listed may not be the same (the new -U flag). Also
4026: add support for "sudo -l command".
4027:
4028: There is still a fair bit if duplicated code that can probably be
4029: refactored.
4030:
4031: 2005-04-11 00:37 millert
4032:
4033: * ldap.c: Replace pass variable with do_netgr for better
4034: readability.
4035:
4036: 2005-04-10 23:49 millert
4037:
4038: * ldap.c: use DPRINTF macro
4039:
4040: 2005-04-10 23:18 millert
4041:
4042: * ldap.c: estrdup, not strdup
4043:
4044: 2005-04-10 17:44 millert
4045:
4046: * parse.c: Add macro to test if the tag changed to improve
4047: readability.
4048:
4049: 2005-04-10 17:40 millert
4050:
4051: * parse.c: Avoid printing defaults header if there are no defaults
4052: to print...
4053:
4054: 2005-04-10 15:29 millert
4055:
4056: * glob.c: Fix a warning on systems without strlcpy().
4057:
4058: 2005-04-10 13:32 millert
4059:
4060: * pwutil.c: Use macros where possible for sudo_grdup() like
4061: sudo_pwdup().
4062:
4063: 2005-04-08 17:04 millert
4064:
4065: * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
4066: add in tv_usec / 1000000.
4067:
4068: 2005-03-29 23:38 millert
4069:
4070: * auth/kerb5.c: The component in krb5_principal_get_comp_string()
4071: should be 1, not 0 for Heimdal. From Alex Plotnick.
4072:
4073: 2005-03-29 09:29 millert
4074:
4075: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
4076: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4077: pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
4078: Add efree() for consistency with emalloc() et al. Allows us to
4079: rely on C89 behavior (free(NULL) is valid) even on K&R.
4080:
4081: 2005-03-28 22:33 millert
4082:
4083: * parse.c, sudo.c: Move initgroups() for -U option into
4084: display_privs() so group matching in sudoers works correctly.
4085:
4086: 2005-03-26 21:34 millert
4087:
4088: * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
4089: with sudo_ldap_close.
4090:
4091: 2005-03-26 20:01 millert
4092:
4093: * parse.c: Add missing space in Defaults printing
4094:
4095: 2005-03-25 12:36 millert
4096:
4097: * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
4098: size computaton and string copies.
4099:
4100: 2005-03-18 22:08 millert
4101:
4102: * pwutil.c: Zero old pw_passwd before replacing with version from
4103: shadow file.
4104:
4105: 2005-03-18 22:07 millert
4106:
4107: * configure, configure.in: Only attempt shadow password detection
4108: if PAM is not being used Add shadow_* variables to make shadow
4109: password detection more generic.
4110:
4111: 2005-03-18 21:46 millert
4112:
4113: * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
4114: than CPPFLAGS
4115:
4116: 2005-03-12 19:27 millert
4117:
4118: * sudoers.pod: use a non-breaking space to avoid a double space
4119: after e.g.
4120:
4121: 2005-03-12 19:26 millert
4122:
4123: * sudo.pod: commna, not colon after e.g.
4124:
4125: 2005-03-12 18:43 millert
4126:
4127: * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
4128: at least uses __execve() internally.
4129:
4130: 2005-03-12 12:29 millert
4131:
4132: * indent.pro: Match reality a bit more.
4133:
4134: 2005-03-12 12:27 millert
4135:
4136: * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
4137:
4138: 2005-03-11 23:42 millert
4139:
4140: * pwutil.c: Store shadow password after making a local copy of
4141: struct passwd in case normal and shadow routines use the same
4142: internal buffer in libc.
4143:
4144: 2005-03-10 20:57 millert
4145:
4146: * alloc.c, logging.c: Make varargs usage consistent with the rest
4147: of the code.
4148:
4149: 2005-03-10 10:09 millert
4150:
4151: * sudo_noexec.c: Wrap more of the exec family since on Linux the
4152: others do not appear to go through the normal execve() path.
4153:
4154: 2005-03-10 09:57 millert
4155:
4156: * visudo.c: make print_unused static like proto says
4157:
4158: 2005-03-10 09:55 millert
4159:
4160: * glob.c: silence a warning on K&R systems
4161:
4162: 2005-03-10 09:51 millert
4163:
4164: * parse.c, alias.c, error.c: make this build in K&R land
4165:
4166: 2005-03-07 22:21 millert
4167:
4168: * toke.c: regen
4169:
4170: 2005-03-05 22:46 millert
4171:
4172: * ldap.c: return(foo) not return foo optimize _atobool() slightly
4173:
4174: 2005-03-05 22:40 millert
4175:
4176: * ldap.c: Use TRUE/FALSE
4177:
4178: 2005-03-05 22:31 millert
4179:
4180: * ldap.c: Reformat to match the rest of sudo's code.
4181:
4182: 2005-03-05 19:33 millert
4183:
4184: * sudo.pod: I am the primary author
4185:
4186: 2005-02-22 22:28 millert
4187:
4188: * README, RUNSON, Makefile.in: The RUNSON file is toast--it
4189: confused too many people and really isn't needed in a
4190: configure-oriented world.
4191:
4192: 2005-02-22 22:28 millert
4193:
4194: * INSTALL: alternate -> alternative
4195:
4196: 2005-02-22 22:26 millert
4197:
4198: * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
4199: have issues with TCSAFLUSH.
4200:
4201: 2005-02-22 22:16 millert
4202:
4203: * toke.l: Allow leading blanks before Defaults and Foo_Alias
4204: definitions
4205:
4206: 2005-02-22 22:14 millert
4207:
4208: * Makefile.in: fix rules to build toke.o and gram.o in devel mode
4209:
4210: 2005-02-20 13:00 millert
4211:
4212: * sudoers.pod: env_keep overrides set_logname
4213:
4214: 2005-02-20 12:57 millert
4215:
4216: * env.c: Fix disabling set_logname and make env_keep override
4217: set_logname.
4218:
4219: 2005-02-20 12:28 millert
4220:
4221: * compat.h, config.h.in, configure, configure.in: No longer need
4222: memmove()
4223:
4224: 2005-02-20 11:48 millert
4225:
4226: * env.c, sudo.c: Just clean the environment once. This assumes
4227: that any further setenv/putenv will be able to handle the fact
4228: that we replaced environ with our own malloc'd copy but all the
4229: implementations I've checked do.
4230:
4231: 2005-02-15 23:16 millert
4232:
4233: * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4234: dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4235: into rebuild_env()
4236:
4237: 2005-02-13 00:33 millert
4238:
4239: * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4240: and prev_user into init_vars() since user_shell at least is
4241: needed there.
4242:
4243: 2005-02-12 18:51 millert
4244:
4245: * Makefile.in: fix devel builds
4246:
4247: 2005-02-12 18:46 millert
4248:
4249: * check.c, sudo.c: Fix some printf format mismatches on error.
4250:
4251: 2005-02-12 18:33 millert
4252:
4253: * configure, gram.c, toke.c: regen
4254:
4255: 2005-02-12 17:56 millert
4256:
4257: * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4258: alloc.c, check.c, closefrom.c, compat.h, configure.in,
4259: defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4260: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4261: interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4262: match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4263: set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4264: strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4265: sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4266: utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4267: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4268: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4269: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4270: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4271: emul/utime.h: Update copyright years.
4272:
4273: 2005-02-12 16:46 millert
4274:
4275: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4276: version 1.7
4277:
4278: 2005-02-12 16:16 millert
4279:
4280: * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4281: entries.
4282:
4283: 2005-02-11 18:06 millert
4284:
4285: * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4286: to warn about printf-like format mismatches
4287:
4288: 2005-02-10 00:16 millert
4289:
4290: * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4291: generated from cvs logs
4292:
4293: 2005-02-10 00:03 millert
4294:
4295: * set_perms.c: Use warning/error instead of perror/fatal.
4296:
4297: 2005-02-09 23:13 millert
4298:
4299: * config.guess: Update OpenBSD section
4300:
4301: 2005-02-09 23:10 millert
4302:
4303: * UPGRADE: Add upgrading noted for 1.7
4304:
4305: 2005-02-09 23:00 millert
4306:
4307: * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4308: environment, just prune out entries based on the env_delete and
4309: env_check lists. Base building up the new environment on the
4310: current environment and the variables we removed initially.
4311:
4312: 2005-02-09 22:23 millert
4313:
4314: * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4315: if locales are supported, just to be safe.
4316:
4317: 2005-02-09 22:19 millert
4318:
4319: * toke.c, toke.l: Cast argument to ctype functions to unsigned
4320: char.
4321:
4322: 2005-02-07 22:56 millert
4323:
4324: * env.c: correct value for DID_USER
4325:
4326: 2005-02-07 22:55 millert
4327:
4328: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4329: <compat.h> not "compat.h"
4330:
4331: 2005-02-07 22:51 millert
4332:
4333: * defaults.c: Reset the environment by default.
4334:
4335: 2005-02-07 22:50 millert
4336:
4337: * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4338: malloc an new vector if execve() fails.
4339:
4340: 2005-02-06 23:16 millert
4341:
4342: * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4343: execve(2) and wrap the command in sh if we get ENOEXEC.
4344:
4345: 2005-02-05 23:01 millert
4346:
4347: * sudo_noexec.c: Only include time.h on systems that lack struct
4348: timespec which gets defind in compat.h (using time_t).
4349:
4350: 2005-02-05 22:59 millert
4351:
4352: * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4353: w/o struct timespec.
4354:
4355: 2005-02-05 22:56 millert
4356:
4357: * configure, compat.h, config.h.in, configure.in: use bcopy on
4358: systems w/o memmove
4359:
4360: 2005-02-05 22:31 millert
4361:
4362: * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4363: so limit its use to gcc >= 2.8.
4364:
4365: 2005-02-05 21:21 millert
4366:
4367: * Makefile.in: Add explicit rule to build sudo_noexec.lo
4368:
4369: 2005-02-05 17:56 millert
4370:
4371: * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4372: pointed out a bunch of missed dependencies.
4373:
4374: 2005-02-05 13:18 millert
4375:
4376: * TROUBLESHOOTING: Help for PAM when account section is missing
4377:
4378: 2005-02-05 13:01 millert
4379:
4380: * auth/pam.c: Give user a clue when there is a missing "account"
4381: section in the PAM config.
4382:
4383: 2005-02-05 10:22 millert
4384:
4385: * auth/pam.c: Better error handling.
4386:
4387: 2005-02-05 09:57 millert
4388:
4389: * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4390: CPPFLAGS so it takes effect as early as possible. Silences a
4391: warning about isblank() on linux.
4392:
4393: 2005-02-04 21:49 millert
4394:
4395: * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4396: number of args to be passed to log_error().
4397:
4398: 2005-01-31 23:03 millert
4399:
4400: * pwutil.c: Don't try to destroy a tree we didn't create.
4401:
4402: 2005-01-27 10:42 millert
4403:
4404: * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4405: env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4406: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4407: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4408: parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4409: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4410: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4411: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4412: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4413: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4414: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4415: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4416: rcsids
4417:
4418: 2005-01-21 10:34 millert
4419:
4420: * configure, configure.in: Fix error message when mixing invalid
4421: auth types
4422:
4423: 2005-01-21 10:32 millert
4424:
4425: * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4426: default if the OS supports them.
4427:
4428: 2005-01-21 10:29 millert
4429:
4430: * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4431:
4432: 2005-01-21 10:29 millert
4433:
4434: * configure.in: Better checking for conflicting authentication
4435: methods Display the authentication methods used at the end of
4436: configure Rename --with-authenticate -> --with-aixauth Use
4437: --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4438: default on systems that support them unless disabled. Add
4439: OSMAJOR variable that replaces old OSREV; now OSREV has full
4440: version number
4441:
4442: 2005-01-17 19:40 millert
4443:
4444: * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4445:
4446: 2005-01-14 13:35 millert
4447:
4448: * configure.in: Replace: test -n "$FOO" || FOO="bar"
4449:
4450: With: : ${FOO='bar'}
4451:
4452: 2005-01-09 18:58 millert
4453:
4454: * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4455: only call private passwd/group routines when using a nonstandard
4456: passwd/group file.
4457:
4458: 2005-01-06 10:34 millert
4459:
4460: * CHANGES: sync
4461:
4462: 2005-01-05 22:16 millert
4463:
4464: * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4465: fields so add getpwent()/getgrent() functions and call those.
4466:
4467: 2005-01-05 17:29 millert
4468:
4469: * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4470:
4471: 2005-01-05 17:18 millert
4472:
4473: * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4474: in the clean target Add devdir variable and use it to specify the
4475: path to parser sources
4476:
4477: 2005-01-05 17:17 millert
4478:
4479: * configure: regen
4480:
4481: 2005-01-05 17:17 millert
4482:
4483: * configure.in: Add a devdir variables that defaults to $(srcdir)
4484: and is set to . if --devel was specified. Allows for proper
4485: dependecies building the parser.
4486:
4487: 2005-01-05 14:50 millert
4488:
4489: * testsudoers.c: Add support for custom passwd/group files.
4490:
4491: 2005-01-05 14:47 millert
4492:
4493: * Makefile.in: Build private copy of pwutil.o for testsudoers with
4494: MYPW defined so it uses our own passwd/group routines.
4495:
4496: 2005-01-05 14:46 millert
4497:
4498: * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4499: sudo_setspent/sudo_endspent stubs instead. We can now just use
4500: the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4501: about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4502:
4503: 2005-01-05 14:44 millert
4504:
4505: * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4506: Use global buffers for passwd/group structs Rename functions from
4507: sudo_* to my_*
4508:
4509: 2005-01-05 14:43 millert
4510:
4511: * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4512:
4513: 2005-01-05 14:42 millert
4514:
4515: * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4516: instead.
4517:
4518: 2005-01-05 14:41 millert
4519:
4520: * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4521: getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4522: are no longer needed. Also add preprocessor magic to use private
4523: versions of the passwd and group routines if MYPW is defined (for
4524: use by testsudoers).
4525:
4526: 2005-01-04 22:40 millert
4527:
4528: * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4529: if there are fields we don't handle they end up as 0.
4530:
4531: 2005-01-04 20:10 millert
4532:
4533: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4534: pwutil.c
4535:
4536: 2005-01-04 20:09 millert
4537:
4538: * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4539: variables for better readability.
4540:
4541: 2005-01-04 20:08 millert
4542:
4543: * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4544: that support alternate passwd and group files.
4545:
4546: 2005-01-04 20:07 millert
4547:
4548: * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4549: its own file. This allows visudo and testsudoers to use the
4550: pw/gr cache too.
4551:
4552: 2005-01-01 19:31 millert
4553:
4554: * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4555: based on the terminal width.
4556:
4557: 2005-01-01 12:41 millert
4558:
4559: * match.c, visudo.c, testsudoers.c: Only check group vector in
4560: usergr_matches() if we are matching the invoking or list user.
4561: Always check the group members, even if there was a group vector.
4562:
4563: 2004-12-17 17:24 millert
4564:
4565: * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4566:
4567: 2004-12-17 13:12 millert
4568:
4569: * CHANGES, TODO: checkpoint
4570:
4571: 2004-12-16 14:20 millert
4572:
4573: * sudo.c: sort usage
4574:
4575: 2004-12-16 14:20 millert
4576:
4577: * sudo.pod: Sort command line options
4578:
4579: 2004-12-16 13:33 millert
4580:
4581: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4582: sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4583: start closing at a point other than 3. Add closefrom_override
4584: sudoers option and -C sudo flag to allow the user to specify a
4585: different closefrom starting point.
4586:
4587: 2004-12-16 13:25 millert
4588:
4589: * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4590:
4591: 2004-12-15 22:55 millert
4592:
4593: * LICENSE: no more UCB strcasecmp
4594:
4595: 2004-12-15 22:54 millert
4596:
4597: * strcasecmp.c: replace BSD licensed one with version derived from
4598: pdksh
4599:
4600: 2004-12-09 21:07 millert
4601:
4602: * sudo.c: Fix last commit.
4603:
4604: 2004-12-09 19:26 millert
4605:
4606: * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4607: to /dev/null if not.
4608:
4609: 2004-12-03 13:57 millert
4610:
4611: * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4612:
4613: 2004-12-03 13:52 millert
4614:
4615: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4616: Use TIME_WITH_SYS_TIME
4617:
4618: 2004-12-03 13:48 millert
4619:
4620: * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4621:
4622: 2004-12-02 11:18 millert
4623:
4624: * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4625: being set unconditionally on darwin. From Toby Peterson.
4626:
4627: 2004-12-02 10:40 millert
4628:
4629: * getspwuid.c: Check rbinsert() return value. In the case of faked
4630: up entries there is usually a negative response cached that we
4631: need to overwrite.
4632:
4633: In pwfree() don't try to zero out a NULL pw_passwd pointer.
4634:
4635: 2004-12-02 09:53 millert
4636:
4637: * mon_systrace.c: Use the double fork trick to avoid the monitor
4638: process being waited for by the main program run through sudo.
4639:
4640: 2004-11-29 12:52 millert
4641:
4642: * sudo.c: Call initgroups() in -U mode so group matches work
4643: normally.
4644:
4645: 2004-11-29 12:34 millert
4646:
4647: * def_data.h, mkdefaults: Don't print a trailing comma for the last
4648: entry in enum def_tupple
4649:
4650: 2004-11-28 16:08 millert
4651:
4652: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4653: lecture, listpw and verifypw are used in boolean context.
4654:
4655: 2004-11-28 16:05 millert
4656:
4657: * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4658: context should be "all", not "any".
4659:
4660: 2004-11-26 14:21 millert
4661:
4662: * def_data.in, defaults.c: Allow tuples that can be used as
4663: booleans to be used as boolean TRUE. In this case the 2nd
4664: possible value of the tuple is used for TRUE.
4665:
4666: 2004-11-25 12:23 millert
4667:
4668: * configure, configure.in: Correct the test for 2-parameter
4669: timespecsub
4670:
4671: 2004-11-25 12:20 millert
4672:
4673: * sudo.h: Add strub struct definitions for passwd, timeval and
4674: timespec
4675:
4676: 2004-11-25 12:09 millert
4677:
4678: * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4679: check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4680: fix a typo in the gettimeofday check.
4681:
4682: 2004-11-24 16:44 millert
4683:
4684: * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4685: for visudo and testsudoers.
4686:
4687: 2004-11-24 16:31 millert
4688:
4689: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4690: option to use in conjunction with -l instead of -u. Add support
4691: for "sudo -l command" to test a specific command.
4692:
4693: 2004-11-24 16:28 millert
4694:
4695: * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4696: it has not been set. Previously it was set by sudo "ALL" in the
4697: parser but at that point the fully-qualified pathname has not yet
4698: been found.
4699:
4700: 2004-11-23 18:18 millert
4701:
4702: * parse.c, testsudoers.c: Correctly handle multiple privileges per
4703: userspec and runas inheritence.
4704:
4705: 2004-11-21 14:09 millert
4706:
4707: * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4708: init_defaults.
4709:
4710: 2004-11-19 18:04 millert
4711:
4712: * toke.c, toke.l: make per-command defaults work with sudoedit
4713:
4714: 2004-11-19 18:00 millert
4715:
4716: * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4717: FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4718: approriate defaults variable.
4719:
4720: 2004-11-19 17:09 millert
4721:
4722: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4723: Document per-command Defaults.
4724:
4725: 2004-11-19 16:35 millert
4726:
4727: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4728: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4729: command-specific Defaults entries. E.g.
4730: Defaults!/usr/bin/vi noexec
4731:
4732: 2004-11-19 15:03 millert
4733:
4734: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4735: occurence of user_matches() -> runas_matches() missed previously
4736: runas_matches(), host_matches() and cmnd_matches() only really
4737: need to pass in a list of members. user_matches() still needs to
4738: pass in a passwd struct because of "sudo -l"
4739:
4740: 2004-11-19 14:46 millert
4741:
4742: * parse.c: Check def_authenticate, def_noexec and def_monitor when
4743: setting return flags. XXX May be better to just set the defaults
4744: directly and get rid of those flags.
4745:
4746: 2004-11-19 13:39 millert
4747:
4748: * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4749: error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4750: getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4751: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4752: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4753: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4754: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4755: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4756: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4757: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4758: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4759: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4760: <config.h> Not: #include "config.h" That way we get the correct
4761: config.h when build dir != src dir
4762:
4763: 2004-11-19 13:30 millert
4764:
4765: * Makefile.in: Back out part of rev 1.263; fix -I order
4766:
4767: 2004-11-19 13:12 millert
4768:
4769: * toke.c, toke.l: More robust parsing if #include; could be much
4770: better still.
4771:
4772: 2004-11-19 12:55 millert
4773:
4774: * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4775: consistent.
4776:
4777: 2004-11-19 12:35 millert
4778:
4779: * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4780: routines out into their own file.
4781:
4782: 2004-11-19 12:32 millert
4783:
4784: * error.h: __attribute__ is already defined in compat.h
4785:
4786: 2004-11-19 12:30 millert
4787:
4788: * visudo.c: quit() should not be __noreturn__ as it is non-void on
4789: some platforms.
4790:
4791: 2004-11-19 12:24 millert
4792:
4793: * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4794: error/warning functions like err/warn but that call an additional
4795: cleanup routine in the error case. This means we no longer need
4796: to compile a special version of alloc.o for visudo.
4797:
4798: 2004-11-19 11:54 millert
4799:
4800: * parse.h: Clarify comments about the data structures
4801:
4802: 2004-11-18 15:28 millert
4803:
4804: * visudo.c: Add support for VISUAL and EDITOR containing command
4805: line args. If env_editor is not set any args in VISUAL and
4806: EDITOR are ignored. Arguments are also now supported in
4807: def_editor.
4808:
4809: 2004-11-17 14:25 millert
4810:
4811: * parse.h: alias_matches() is no more
4812:
4813: 2004-11-17 14:09 millert
4814:
4815: * CHANGES, TODO: sync
4816:
4817: 2004-11-17 13:19 millert
4818:
4819: * Makefile.in: When regenerating the parser, don't replace gram.h
4820: unless it has changed.
4821:
4822: 2004-11-17 11:56 millert
4823:
4824: * Makefile.in: remove Makefile.binary for distclean
4825:
4826: 2004-11-17 11:18 millert
4827:
4828: * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4829: to make sure we can't overflow new_env.
4830:
4831: 2004-11-17 10:33 millert
4832:
4833: * sudo_edit.c: paranoia when stripping trailing slashes from
4834: tempdir.
4835:
4836: 2004-11-16 19:00 millert
4837:
4838: * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4839:
4840: 2004-11-16 18:59 millert
4841:
4842: * configure, configure.in, config.h.in, sudo.c: Add configure check
4843: for getgroups()
4844:
4845: 2004-11-16 18:55 millert
4846:
4847: * ldap.c: Use supplementary group vector in struct sudo_user.
4848:
4849: 2004-11-16 18:40 millert
4850:
4851: * match.c: Only do string comparisons on the group members if there
4852: is no supplemental group list.
4853:
4854: 2004-11-16 16:10 millert
4855:
4856: * CHANGES, TODO: sync
4857:
4858: 2004-11-16 15:54 millert
4859:
4860: * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4861: trailing slash so chop off any trailing slashes we see and add an
4862: explicit one.
4863:
4864: 2004-11-16 12:02 millert
4865:
4866: * match.c: remove bogus XXX comment
4867:
4868: 2004-11-16 11:10 millert
4869:
4870: * match.c: Get rid of alias_matches and correctly fall through to
4871: the non-alias cases when there is no alias with the specified
4872: name.
4873:
4874: 2004-11-16 10:47 millert
4875:
4876: * getspwuid.c: Cache non-existent passwd/group entries too.
4877:
4878: 2004-11-16 10:45 millert
4879:
4880: * gram.c: regen
4881:
4882: 2004-11-15 23:32 millert
4883:
4884: * getspwuid.c: fix typo
4885:
4886: 2004-11-15 23:24 millert
4887:
4888: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4889: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4890: Implement group caching and use the passwd and group caches
4891: throughout.
4892:
4893: 2004-11-15 14:43 millert
4894:
4895: * match.c: Properly negate the return value of alias_matches() when
4896: appropriate.
4897:
4898: 2004-11-15 14:38 millert
4899:
4900: * match.c: Make hostname_matches() return TRUE for a match, else
4901: FALSE like the caller expects.
4902:
4903: 2004-11-15 13:24 millert
4904:
4905: * Makefile.in: Add missing dependencies on gram.h
4906:
4907: 2004-11-15 13:06 millert
4908:
4909: * match.c: Use runas_matches in alias_matches() now that we have
4910: it.
4911:
4912: 2004-11-15 13:00 millert
4913:
4914: * parse.c, parse.h: Expand aliases in "sudo -l" mode
4915:
4916: 2004-11-15 12:33 millert
4917:
4918: * gram.y, match.c: Use ALIAS for the member type when storing an
4919: alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4920: match.c relies on the more generic type. Expand runas_matches
4921: instead of calling user_matches() inside of it since
4922: user_matches() looks up USERALIASes, not RUNASALIASes.
4923:
4924: 2004-11-15 12:05 millert
4925:
4926: * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4927: passwd entry.
4928:
4929: 2004-11-15 10:53 millert
4930:
4931: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4932: configure.in, err.c, error.c, error.h, defaults.c, env.c,
4933: find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4934: sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4935: local error/warning functions like err/warn but that call an
4936: additional cleanup routine in the error case. This means we no
4937: longer need to compile a special version of alloc.o for visudo.
4938:
4939: 2004-11-15 09:59 millert
4940:
4941: * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4942: since the latter checks for "#uid".
4943:
4944: 2004-11-15 09:53 millert
4945:
4946: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4947: db entries in 2 reb-black trees; one indexed by uid, the other by
4948: user name. The data returned from the cache should be considered
4949: read-only and is destroyed by sudo_endpwent().
4950:
4951: 2004-11-15 09:50 millert
4952:
4953: * match.c: add cast to uid_t
4954:
4955: 2004-11-15 09:49 millert
4956:
4957: * gram.y: missing free in alias_destroy
4958:
4959: 2004-11-15 09:49 millert
4960:
4961: * redblack.c: Can't use rbapply() for rbdestroy since the
4962: destructor is passed a data pointer, not a node pointer.
4963:
4964: 2004-11-14 23:06 millert
4965:
4966: * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4967: versions of setpwent() and endpwent() that set/end the shadow
4968: password file too.
4969:
4970: 2004-11-14 22:55 millert
4971:
4972: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4973: visudo.c: Store aliases in a red-black tree.
4974:
4975: 2004-11-14 22:52 millert
4976:
4977: * Makefile.in, redblack.c, redblack.h: red-black tree
4978: implementation
4979:
4980: 2004-11-14 22:37 millert
4981:
4982: * visudo.c: Edit all sudoers file if there were unused or undefined
4983: aliases and we are in strict mode.
4984:
4985: 2004-11-12 11:19 millert
4986:
4987: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4988: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4989: Bring back the "secure_path" Defaults option now that Defaults
4990: take effect before the path is searched.
4991:
4992: 2004-11-11 12:22 millert
4993:
4994: * logging.c, parse.c: A user can always list their own entries,
4995: even with -u. Better error message when failing to list another
4996: user's entries.
4997:
4998: 2004-11-11 12:12 millert
4999:
5000: * parse.c, sudo.c, sudo.h: The syntax to list another user's
5001: entries is now "-u otheruser -l". Only root or users with sudo
5002: "ALL" may list other user's entries.
5003:
5004: 2004-11-11 11:30 millert
5005:
5006: * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
5007: SECURITY NOTES
5008:
5009: 2004-11-11 11:25 millert
5010:
5011: * env.c: strip CDPATH too
5012:
5013: 2004-11-11 11:20 millert
5014:
5015: * env.c: strip exported bash functions from the environment.
5016:
5017: 2004-10-27 12:16 millert
5018:
5019: * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
5020: variables for real commands and sudoedit. This avoids a
5021: confusing message when a user tries "sudo -l" or "sudo -v" and is
5022: denied.
5023:
5024: 2004-10-27 12:06 millert
5025:
5026: * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
5027: appending lists too
5028:
5029: 2004-10-26 18:39 millert
5030:
5031: * logging.c: Convert some bitwise AND to ISSET
5032:
5033: 2004-10-26 18:29 millert
5034:
5035: * lex.yy.c, toke.c: toke.c replaces lex.yy.c
5036:
5037: 2004-10-26 18:29 millert
5038:
5039: * CHANGES, TODO: sync
5040:
5041: 2004-10-26 18:28 millert
5042:
5043: * BUGS: new parser fixes most of the outstanding bugs
5044:
5045: 2004-10-26 18:27 millert
5046:
5047: * configure: regen
5048:
5049: 2004-10-26 18:26 millert
5050:
5051: * visudo.c: Rework for the new parser. Now checks for unused
5052: aliases in sudoers.
5053:
5054: 2004-10-26 18:25 millert
5055:
5056: * testsudoers.c: Rewrite for the new parser. Now supports a -d
5057: flag (dump) and adds a -h flag (host). It now defaults to the
5058: local hostname unless otherwise specified.
5059:
5060: 2004-10-26 18:23 millert
5061:
5062: * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
5063: parse.h)
5064:
5065: 2004-10-26 18:22 millert
5066:
5067: * sudo.c: Update for new parse. We now call find_path() *after* we
5068: have updated the global defaults based on sudoers. Also adds
5069: support for listing other user's privs if you are root.
5070:
5071: 2004-10-26 18:21 millert
5072:
5073: * mon_systrace.c: Working LDAP support; also remove a now-unneeded
5074: rewind().
5075:
5076: 2004-10-26 18:20 millert
5077:
5078: * logging.c, logging.h: Add NO_STDERR flag.
5079:
5080: 2004-10-26 18:19 millert
5081:
5082: * ldap.c: Split sudo_ldap_check() into three pieces:
5083: sudo_ldap_open(), udo_ldap_update_defaults() and
5084: sudo_ldap_check(). This allows us to connecto to LDAP, apply the
5085: default options, find the command in the user's path, and then
5086: check whether the user is allowed to run it. The important thing
5087: here is that the default runas user may be specified as a default
5088: option and that needs to be set before we search for the command.
5089:
5090: 2004-10-26 18:17 millert
5091:
5092: * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
5093: warning.
5094:
5095: 2004-10-26 18:16 millert
5096:
5097: * defaults.h: Add prototype for update_defaults()
5098:
5099: 2004-10-26 18:16 millert
5100:
5101: * defaults.c: Don't warn about line numbers now that we operate on
5102: a set of data structures (or LDAP) and not a file.
5103:
5104: 2004-10-26 18:15 millert
5105:
5106: * config.h.in: No long use lsearch()
5107:
5108: 2004-10-26 18:14 millert
5109:
5110: * Makefile.in: Update for new and changed file names.
5111:
5112: 2004-10-26 18:14 millert
5113:
5114: * LICENSE: no more BSD lsearch.c
5115:
5116: 2004-10-26 18:14 millert
5117:
5118: * match.c: foo_matches() routines now live in match.c Added
5119: user_matches(), runas_matches(), host_matches(), cmnd_matches()
5120: and alias_matches() that operate on the parsed sudoers file.
5121:
5122: 2004-10-26 18:12 millert
5123:
5124: * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
5125: -> switch_buffer() WORD no longer needs to exclude '@' kill
5126: yywrap()
5127:
5128: 2004-10-26 18:10 millert
5129:
5130: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
5131: Rewritten parser that converts sudoers into a set of data
5132: structures. This eliminates ordering issues and makes it
5133: possible to apply sudoers Defaults entries before searching for
5134: the command.
5135:
5136: 2004-10-26 18:09 millert
5137:
5138: * configure.in, lsearch.c, emul/search.h: We won't be using
5139: lsearch() any longer.
5140:
5141: 2004-10-26 18:07 millert
5142:
5143: * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
5144: has no entry.
5145:
5146: 2004-10-26 16:09 millert
5147:
5148: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5149: visudo.man.in: regen
5150:
5151: 2004-10-26 16:09 millert
5152:
5153: * visudo.pod: Update warnings to match new visudo
5154:
5155: 2004-10-26 16:08 millert
5156:
5157: * sudoers.pod: The new parser doesn't have the old ordering
5158: constraints.
5159:
5160: 2004-10-26 16:08 millert
5161:
5162: * sudo.pod: Document that -l now takes an optional username
5163: argument
5164:
5165: 2004-10-25 13:44 millert
5166:
5167: * RUNSON: AIX 5.2.0.0 works
5168:
5169: 2004-10-25 13:38 millert
5170:
5171: * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
5172: instead. Fixes a compilation problem with Solaris 9's native
5173: LDAP.
5174:
5175: Set FLAG_MONITOR when needed.
5176:
5177: 2004-10-23 13:32 millert
5178:
5179: * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
5180: match the traced process. Fixes relative paths.
5181:
5182: 2004-10-21 12:31 millert
5183:
5184: * testsudoers.c: Kill set_perms() stub--it is no longer needed.
5185:
5186: 2004-10-13 12:52 millert
5187:
5188: * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
5189: requires set_reuid() or setresuid()
5190:
5191: 2004-10-13 12:46 millert
5192:
5193: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
5194: configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
5195: saved uids; they aren't worth bothering with.
5196:
5197: 2004-10-07 16:23 millert
5198:
5199: * glob.c: remove call to issetugid()
5200:
5201: 2004-10-07 14:57 millert
5202:
5203: * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
5204: wildcards. Now that we use glob() the bug is fixed.
5205:
5206: 2004-10-07 14:52 millert
5207:
5208: * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
5209: and stat each result that matches the basename of the user's
5210: command. This makes "cd /usr/bin ; sudo ./blah" work when
5211: sudoers allows /usr/bin/blah. Fixes bug #143.
5212:
5213: 2004-10-07 14:27 millert
5214:
5215: * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
5216: for extended glob (GLOB_TILDE and GLOB_BRACE)
5217:
5218: 2004-10-07 12:59 millert
5219:
5220: * config.h.in, configure, configure.in: Check for a glob() that
5221: supports GLOB_BRACE and GLOB_TILDE
5222:
5223: 2004-10-07 12:51 millert
5224:
5225: * LICENSE: reference glob
5226:
5227: 2004-10-07 12:50 millert
5228:
5229: * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5230: some unneeded extensions removed.
5231:
5232: 2004-10-05 17:26 millert
5233:
5234: * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5235: fail. It probably means we are out of space in the stack gap...
5236:
5237: 2004-10-05 17:20 millert
5238:
5239: * CHANGES: sync
5240:
5241: 2004-10-05 16:53 millert
5242:
5243: * mon_systrace.c: Take a stab at ldap sudoers support here.
5244:
5245: 2004-10-05 15:13 millert
5246:
5247: * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5248: SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5249: inadvertanly kill itself.
5250:
5251: 2004-10-05 14:21 millert
5252:
5253: * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5254:
5255: 2004-10-05 14:15 millert
5256:
5257: * mon_systrace.c: When modifying the environment, don't replace
5258: envp when we can get away with just rewriting pointers in the
5259: traced process.
5260:
5261: 2004-10-05 13:46 millert
5262:
5263: * mon_systrace.c, mon_systrace.h: Add environment updating via
5264: STRIOCINJECT (if available).
5265:
5266: 2004-10-05 10:22 millert
5267:
5268: * sudoers.cat, sudoers.man.in: regen
5269:
5270: 2004-10-04 16:15 millert
5271:
5272: * lex.yy.c: regen
5273:
5274: 2004-10-04 16:15 millert
5275:
5276: * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5277: not yyless(1)
5278:
5279: 2004-10-04 12:09 millert
5280:
5281: * mon_systrace.c: Include file is now mon_systrace.h
5282:
5283: 2004-10-04 12:07 millert
5284:
5285: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5286: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5287: sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5288: tracing, it is now "monitoring" which should be more a obvious
5289: name to non-hackers.
5290:
5291: 2004-10-01 15:06 millert
5292:
5293: * mon_systrace.c, mon_systrace.h: Fix some XXX
5294:
5295: 2004-10-01 14:30 millert
5296:
5297: * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5298: 1024 as the max # of entries (the max that systrace(4) allows).
5299:
5300: Only need to use SYSTR_POLICY_ASSIGN once
5301:
5302: Change check_syscall() -> find_handler() and have it return the
5303: handler instead of just running it. We need this since handler
5304: now have two parts: one part that generates and answer and
5305: another that gets called after the answer is accepted (to do
5306: logging).
5307:
5308: Add some missing check_exec for emul execv
5309:
5310: 2004-10-01 10:58 millert
5311:
5312: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
1.6 millert 5313: $Sudo$ tags.
1.1 millert 5314:
5315: 2004-10-01 10:47 millert
5316:
5317: * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5318:
5319: 2004-09-30 20:46 millert
5320:
5321: * Makefile.in: add trace_systrace.o dependency
5322:
5323: 2004-09-30 19:00 millert
5324:
5325: * configure, configure.in: Also look for systrace.h in
5326: /usr/include/linux
5327:
5328: 2004-09-30 18:27 millert
5329:
5330: * mon_systrace.c, mon_systrace.h: Move all struct defs and
5331: prototypes into trace_systrace.h and mark all but
5332: systace_attach() static.
5333:
5334: 2004-09-30 18:14 millert
5335:
5336: * mon_systrace.c, mon_systrace.h: Add support for tracing
5337: emulations. At the moment, all emulations are compiled in. It
5338: might make sense to #ifdef them in the future, though this
5339: impeeds readability.
5340:
5341: 2004-09-30 17:07 millert
5342:
5343: * Makefile.in, configure.in, configure: rename systrace.c ->
5344: trace_systrace.c
5345:
5346: 2004-09-30 15:58 millert
5347:
5348: * parse.yacc: Allow this to build with a K&R compiler again
5349:
5350: 2004-09-30 13:58 millert
5351:
5352: * TODO: sync
5353:
5354: 2004-09-30 13:55 millert
5355:
5356: * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5357:
5358: 2004-09-30 13:44 millert
5359:
5360: * visudo.c: Exit() takes a negative value to indicate it was not
5361: called via signal.
5362:
5363: 2004-09-30 13:25 millert
5364:
5365: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5366: visudo.man.in: regen
5367:
5368: 2004-09-30 13:22 millert
5369:
5370: * Makefile.in, visudo.c: Define Err() and Errx() that are like
5371: err() and errx() but call Exit() instead of exit(). Build
5372: private copy of alloc.o for visudo that calls Err() and Errx().
5373:
5374: 2004-09-29 15:22 millert
5375:
5376: * lex.yy.c: regen
5377:
5378: 2004-09-29 15:22 millert
5379:
5380: * CHANGES: sync
5381:
5382: 2004-09-29 14:41 millert
5383:
5384: * visudo.c: Overhaul visudo for editing multiple files: o visudo
5385: has been broken out into functions (more work needed here) o
5386: each file is now edited before sudoers is re-parsed o if a
5387: #include line is added that file will be edited too
5388:
5389: TODO: o cleanup temp files when exiting via err() or errx() o
5390: continue breaking things out into separate functions
5391:
5392: 2004-09-29 14:36 millert
5393:
5394: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5395: arg to open_sudoers that open_sudoers can use to indicate to the
5396: caller that the fd should not be closed when it is done with it.
5397: To be used by visudo to keep locked fds from being closed
5398: prematurely (and thus losing the lock).
5399:
5400: 2004-09-29 14:33 millert
5401:
5402: * parse.yacc, sudo.c: Add errorfile global that contains the name
5403: of the file that caused the error.
5404:
5405: 2004-09-29 14:30 millert
5406:
5407: * parse.lex: return COMMENT to yacc grammar for a #include line
5408:
5409: 2004-09-29 14:29 millert
5410:
5411: * parse.lex: Remove us of unput() in favor of yyless() which is
5412: cheaper.
5413:
5414: 2004-09-29 14:28 millert
5415:
5416: * parse.yacc: Allow an empty sudoers file.
5417:
5418: 2004-09-28 16:50 millert
5419:
5420: * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5421: doesn't do it for us.
5422:
5423: 2004-09-28 14:37 millert
5424:
5425: * lex.yy.c: regen
5426:
5427: 2004-09-28 14:36 millert
5428:
5429: * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5430: shadow the "quiet" global.
5431:
5432: 2004-09-28 14:33 millert
5433:
5434: * visudo.c: If a sudoers file includes other files, edit those too.
5435: Does not yes deal with creating the new includes files itself.
5436:
5437: 2004-09-28 14:31 millert
5438:
5439: * testsudoers.c: init_parser now takes a path
5440:
5441: 2004-09-28 14:31 millert
5442:
5443: * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5444: dealing with multiple sudoers files: o init_parser() now takes a
5445: path used to populate the sudoers global o the sudoers global is
5446: used to print the correct file in yyerror() o when switching to
5447: a new sudoers file, perserve old file name and line number
5448:
5449: 2004-09-28 14:29 millert
5450:
5451: * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5452: meaningful now that we can have multiple sudoers files.
5453:
5454: 2004-09-28 13:52 millert
5455:
5456: * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5457: sudoers_lookup() so we start at the right file position when
5458: reading include files.
5459:
5460: 2004-09-27 21:04 millert
5461:
5462: * sudoers.pod: document #include
5463:
5464: 2004-09-27 20:47 millert
5465:
5466: * lex.yy.c: regen
5467:
5468: 2004-09-27 20:47 millert
5469:
5470: * parse.lex: Add max depth of 128 for the include stack to avoid
5471: loops.
5472:
5473: Since yyerror() doesn't stop parsing, pass return values back to
5474: yylex and call yyterminate() on error.
5475:
5476: 2004-09-27 14:06 millert
5477:
5478: * sudoers.pod: document tracing
5479:
5480: 2004-09-27 14:05 millert
5481:
5482: * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5483: page
5484:
5485: 2004-09-27 12:08 millert
5486:
5487: * lex.yy.c: regen
5488:
5489: 2004-09-27 12:03 millert
5490:
5491: * parse.lex: Add support for #include in sudoers (visudo support
5492: TBD)
5493:
5494: 2004-09-27 12:02 millert
5495:
5496: * parse.yacc: make yyerror()'s argument const
5497:
5498: 2004-09-27 12:02 millert
5499:
5500: * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5501:
5502: 2004-09-27 12:01 millert
5503:
5504: * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5505: return a FILE *
5506:
5507: 2004-09-26 12:35 millert
5508:
5509: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5510: version.h: Crank version
5511:
5512: 2004-09-26 12:33 millert
5513:
5514: * Makefile.in, sudo.psf: Better HP-UX depot construction
5515:
5516: 2004-09-25 17:08 millert
5517:
5518: * mon_systrace.c: o Made children global so check_exec() can lookup
5519: a child. o Replaced uid in struct childinfo with struct passwd *
5520: (for runas) o new_child() now takes a parent pid so the runas
5521: info can be inherited o Added find_child() to lookup a child by
5522: its pid o update_child() now fills in a struct passwd o Converted
5523: the big if/else mess in set_policy to a switch o Syscalls that
5524: change uid are now "ask" so we get SYSTR_MSG_UGID events
5525:
5526: 2004-09-25 17:01 millert
5527:
5528: * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5529: to lookup the shadow password. Will be used to a struct passwd
5530: that has the shadow password already filled in.
5531:
5532: 2004-09-25 16:58 millert
5533:
5534: * mon_systrace.c: add missing increment of addr in read_string()
5535:
5536: 2004-09-25 16:15 millert
5537:
5538: * mon_systrace.c: Remove bogus call to update_child() and some
5539: cosmetic fixes
5540:
5541: 2004-09-25 16:11 millert
5542:
5543: * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5544: initialized global for simplicity If STRIOCATTACH returns EBUSY
5545: we are already being traced Check for user_args == NULL in
5546: setproctitle() call Add missing calls to STRIOCANSWER
5547:
5548: 2004-09-25 13:15 millert
5549:
5550: * sudo.c: g/c sudo_pwdup proto
5551:
5552: 2004-09-24 20:21 millert
5553:
5554: * Makefile.in, sudo.psf: Add target for building a depot file
5555:
5556: 2004-09-24 20:07 millert
5557:
5558: * mon_systrace.c: trim includes
5559:
5560: 2004-09-24 14:11 millert
5561:
5562: * lex.yy.c, sudo.tab.h: regen
5563:
5564: 2004-09-24 14:10 millert
5565:
5566: * INSTALL: document --with-systrace
5567:
5568: 2004-09-24 14:10 millert
5569:
5570: * config.h.in, configure, configure.in: Add check for setproctitle
5571:
5572: 2004-09-24 14:09 millert
5573:
5574: * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5575: it can set the error code
5576:
5577: 2004-09-24 13:30 millert
5578:
5579: * mon_systrace.c: systrace(4) support for sudo. On systems with
5580: the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5581: patches) sudo can intercept exec calls and check the exec args
5582: against the sudoers file. In other words, sudo can now control
5583: subcommands and shell escapes.
5584:
5585: 2004-09-24 13:17 millert
5586:
5587: * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5588:
5589: 2004-09-24 13:15 millert
5590:
5591: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5592: Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5593:
5594: 2004-09-24 13:13 millert
5595:
5596: * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5597: close on exec flag instead.
5598:
5599: 2004-09-24 13:11 millert
5600:
5601: * def_data.c, def_data.h, def_data.in: Add trace option
5602:
5603: 2004-09-23 20:24 millert
5604:
5605: * Makefile.in: Add systrace
5606:
5607: 2004-09-23 20:23 millert
5608:
5609: * INSTALL: SunOS /bin/sh blows up with configure
5610:
5611: 2004-09-23 20:23 millert
5612:
5613: * configure, configure.in: Include sys/param.h before systrace.h
5614:
5615: 2004-09-23 20:15 millert
5616:
5617: * configure: regen
5618:
5619: 2004-09-23 20:15 millert
5620:
5621: * pathnames.h.in: _PATH_DEV_SYSTRACE
5622:
5623: 2004-09-23 20:14 millert
5624:
5625: * configure.in: line up options in --help
5626:
5627: 2004-09-23 20:11 millert
5628:
5629: * config.h.in, configure.in: Add --with-systrace
5630:
5631: 2004-09-23 13:35 millert
5632:
5633: * configure: regen
5634:
5635: 2004-09-23 13:35 millert
5636:
5637: * aclocal.m4, configure.in: make this work with autoconf-2.59
5638:
5639: 2004-09-16 12:58 millert
5640:
5641: * sudo_edit.c: Simplify logic around open & stat of files and do
5642: sanity on edited file even if we lack fstat (still racable but
5643: worth doing).
5644:
5645: 2004-09-15 18:47 millert
5646:
5647: * HISTORY: Add support url
5648:
5649: 2004-09-15 16:11 millert
5650:
5651: * Makefile.in: versino 1.6.8p1
5652:
5653: 2004-09-15 15:20 millert
5654:
5655: * CHANGES: more changes for 1.6.8p1
5656:
5657: 2004-09-15 15:18 millert
5658:
5659: * version.h: 1.6.8p1
5660:
5661: 2004-09-15 12:16 millert
5662:
5663: * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5664: something other than a regular file.
5665:
5666: 2004-09-14 20:55 aaron
5667:
5668: * CHANGES: sync
5669:
5670: 2004-09-14 20:21 aaron
5671:
5672: * INSTALL: document --with-ldap-conf-file
5673:
5674: 2004-09-14 17:43 millert
5675:
5676: * CHANGES, ins_csops.h: political correctness strikes again
5677:
5678: 2004-09-14 15:09 millert
5679:
5680: * RUNSON: sync
5681:
5682: 2004-09-12 19:50 millert
5683:
5684: * Makefile.binary.in, Makefile.in: Install sudoedit man link
5685:
5686: 2004-09-12 14:25 millert
5687:
5688: * INSTALL: Update PAM note and mention where HP-UX users can
5689: download gcc binaries.
5690:
5691: 2004-09-12 12:08 millert
5692:
5693: * Makefile.in: libtool wants to install stuff from .libs so fake
5694: one up for binary installations.
5695:
5696: 2004-09-12 11:53 millert
5697:
5698: * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5699: -f set LIBTOOL correctly
5700:
5701: 2004-09-12 11:53 millert
5702:
5703: * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5704: sudoedit link instead of using ln -f
5705:
5706: 2004-09-12 10:22 millert
5707:
5708: * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5709: Makefile.binary.in for config.status substitution Add support for
5710: installing noexec bits
5711:
5712: 2004-09-12 10:21 millert
5713:
5714: * Makefile.in: Copy noexec bits into binary dists too No longer use
5715: my old arch script for making binary dists
5716:
5717: 2004-09-12 09:36 millert
5718:
5719: * Makefile.binary: Install sudoedit link.
5720:
5721: 2004-09-11 12:25 millert
5722:
5723: * emul/utime.h: avoid __P so there is no need for compat.h to be
5724: included
5725:
5726: 2004-09-11 12:24 millert
5727:
5728: * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5729:
5730: 2004-09-10 12:31 millert
5731:
5732: * compat.h: Fix Solatis futimes macro
5733:
5734: 2004-09-09 11:02 millert
5735:
5736: * sudo_edit.c: Rename ots -> omtim for improved readability.
5737:
5738: 2004-09-08 14:38 millert
5739:
5740: * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5741: keep the temp file open; re-opening it with the invoking user's
5742: euid is sufficient.
5743:
5744: 2004-09-08 14:36 millert
5745:
5746: * CHANGES: sync
5747:
5748: 2004-09-08 14:35 millert
5749:
5750: * sudo.cat, sudo.man.in: regen
5751:
5752: 2004-09-08 14:34 millert
5753:
5754: * sudo.pod: back out revision 1.70; it is no long applicable
5755:
5756: 2004-09-08 11:57 millert
5757:
5758: * env.c: Let the loader initialize nep
5759:
5760: 2004-09-08 11:49 millert
5761:
5762: * configure, configure.in, config.h.in: Removed unneed check for
5763: fchown Add check for gettimeofday Move autoheader template stuff
5764: into separate AH_TEMPLATE lines
5765:
5766: 2004-09-08 11:48 millert
5767:
5768: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5769: timespec throughout.
5770:
5771: 2004-09-08 11:47 millert
5772:
5773: * Makefile.in: gettime.[co]
5774:
5775: 2004-09-08 11:47 millert
5776:
5777: * gettime.c: function to return the current time in a struct
5778: timespec
5779:
5780: 2004-09-08 10:51 millert
5781:
5782: * utimes.c: Not a darpa-sponsored file.
5783:
5784: 2004-09-07 16:36 millert
5785:
5786: * compat.h, config.h.in, configure, configure.in: Add a check for
5787: struct timespec and provide it for those without.
5788:
5789: 2004-09-07 15:56 millert
5790:
5791: * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5792: st_mtim and st_mtimespec and add macros for pulling the mtime sec
5793: and nsec out of struct stat. These are used in sudo_edit() to
5794: better tell whether or not the file has changed.
5795:
5796: 2004-09-07 15:55 millert
5797:
5798: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5799: param to touch() for nsec
5800:
5801: 2004-09-07 14:06 millert
5802:
5803: * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5804: have to chown the file later. Only touch() the temp file if we
5805: can do it via the file descriptor. Don't check for modification
5806: of the temp file if we lack fstat(). Catch errors read()ing the
5807: temp file.
5808:
5809: 2004-09-07 14:04 millert
5810:
5811: * fileops.c: If path is NULL and fd == -1 return -1.
5812:
5813: 2004-09-07 13:31 millert
5814:
5815: * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5816: ones we opened so just close those in the child.
5817:
5818: 2004-09-07 13:14 millert
5819:
5820: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5821: configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5822: utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5823: in touch(), emulating as needed. Not all systems are able to
5824: support setting the times of an fd so touch() takes both an fd
5825: and a file name as arguments.
5826:
5827: 2004-09-06 21:12 aaron
5828:
5829: * env.c: Rare SEGV
5830:
5831: 2004-09-06 16:46 millert
5832:
5833: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5834: visudo.man.in: regen
5835:
5836: 2004-09-06 16:45 millert
5837:
5838: * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5839: re-order some of the sections to match the order we use in
5840: OpenBSD.
5841:
5842: 2004-09-06 15:05 aaron
5843:
5844: * env.c: Openldap ~/.ldaprc fix
5845:
5846: 2004-09-06 12:18 millert
5847:
5848: * sudo.pod: Talk about how the editor must write its changes to the
5849: original file and not just use rename(2).
5850:
5851: 2004-09-06 12:12 millert
5852:
5853: * CHANGES: sync
5854:
5855: 2004-09-06 12:11 millert
5856:
5857: * sudo_edit.c: Keep the temp file open instead of re-opening after
5858: the editor has exited.
5859:
5860: 2004-09-06 12:10 millert
5861:
5862: * sample.pam: Update for current redhat/fedora core.
5863:
5864: 2004-09-02 21:56 aaron
5865:
5866: * README.LDAP: tls_ examples
5867:
5868: 2004-09-02 00:03 aaron
5869:
5870: * ldap.c: config tls_* options
5871:
5872: 2004-08-29 11:39 millert
5873:
5874: * configure, configure.in: No need for -lcrypt when using pam.
5875:
5876: 2004-08-26 23:57 millert
5877:
5878: * configure: regen
5879:
5880: 2004-08-26 23:44 aaron
5881:
5882: * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5883: option to override LDAP_CONF
5884:
5885: 2004-08-26 22:08 aaron
5886:
5887: * ldap.c: cleanup debug message
5888:
5889: 2004-08-26 19:29 aaron
5890:
5891: * README.LDAP: more config info
5892:
5893: 2004-08-24 14:01 millert
5894:
5895: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5896: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5897: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5898: longer use gross statics in command_matches(). Also rename some
5899: variables for improved clarity.
5900:
5901: 2004-08-21 14:33 millert
5902:
5903: * INSTALL: document HP's crippled compiler deficiency.
5904:
5905: 2004-08-21 14:25 millert
5906:
5907: * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5908: descriptions. Noticed by Norihiko Murase.
5909:
5910: 2004-08-21 14:20 millert
5911:
5912: * configure, configure.in: --with-noexec takes an optional PATH
5913: argument.
5914:
5915: 2004-08-21 14:20 millert
5916:
5917: * INSTALL: document --with-noexec
5918:
5919: 2004-08-17 16:21 millert
5920:
5921: * RUNSON, TODO: sync
5922:
5923: 2004-08-17 15:11 millert
5924:
5925: * sudo_edit.c: Better warning message when sudoedit is unable to
5926: write to the destination file.
5927:
5928: 2004-08-17 14:53 millert
5929:
5930: * sudo.cat, sudo.man.in: regen
5931:
5932: 2004-08-17 14:53 millert
5933:
5934: * sudo.pod: Don't italicize the string "sudoedit"
5935:
5936: 2004-08-16 18:45 millert
5937:
5938: * HISTORY: Mention GratiSoft.
5939:
5940: 2004-08-11 14:29 millert
5941:
5942: * parse.yacc: Reset used_runas to FALSE when re-intializing the
5943: parser.
5944:
5945: 2004-08-09 19:04 millert
5946:
5947: * config.guess: Correct OpenBSD mips support
5948:
5949: 2004-08-09 17:28 millert
5950:
5951: * config.guess: Add OpenBSD/mips
5952:
5953: 2004-08-06 23:43 aaron
5954:
5955: * README.LDAP: More behavior notes
5956:
5957: 2004-08-06 23:36 aaron
5958:
5959: * README.LDAP: Updates on current behavior
5960:
5961: 2004-08-06 19:56 millert
5962:
5963: * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5964: no difference to formatted files).
5965:
5966: 2004-08-06 19:48 millert
5967:
5968: * CHANGES: new
5969:
5970: 2004-08-06 19:42 millert
5971:
5972: * sudo.c: Consistency. Use same error for bad -u #uid when
5973: targetpw is set as we do when a bad -u username is specified.
5974:
5975: 2004-08-06 19:33 millert
5976:
5977: * TODO: Add checksum idea from Steve Mancini
5978:
5979: 2004-08-06 19:32 millert
5980:
5981: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5982:
5983: 2004-08-06 19:31 millert
5984:
5985: * sudo.pod, sudoers.pod: Document the restriction on uids specified
5986: via -u when targetpw is set.
5987:
5988: 2004-08-06 19:24 millert
5989:
5990: * sudo.c: Error out when targetpw is enabled and sudo is run with
5991: -u #uid but #uid does not exist in the passwd database. We can't
5992: do target authentication when the target is not in passwd!
5993:
5994: 2004-08-05 21:16 millert
5995:
5996: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5997:
5998: 2004-08-05 21:14 millert
5999:
6000: * TODO: Some more todo for the next release.
6001:
6002: 2004-08-05 21:13 millert
6003:
6004: * INSTALL: Make it clear that PAM should be used for DCE support
6005: when possible.
6006:
6007: 2004-08-05 21:13 millert
6008:
6009: * sudoers.pod: o Document problems with wildcards and relative
6010: paths. o Make the order requirements more prominent. o Change a
6011: "set" to "reset" for clarity.
6012:
6013: 2004-08-05 14:29 millert
6014:
6015: * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
6016:
6017: 2004-08-02 22:34 aaron
6018:
6019: * ldap.c: reflect changes to parse.c
6020:
6021: 2004-08-02 14:44 millert
6022:
6023: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
6024: user_cmnd and user_args to command_matches(), just use the
6025: globals there. Since we keep state with statics anyway it is
6026: misleading to pretend that passing in different cmnd and
6027: cmnd_args will work.
6028:
6029: 2004-08-02 14:40 millert
6030:
6031: * parse.c: Fix a bug introduced in rev. 1.149. When checking for
6032: pseudo-commands check for a '/' anywhere in cmnd, not just the
6033: first character.
6034:
6035: 2004-07-30 23:07 aaron
6036:
6037: * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
6038: <oblin@mandrakesoft.com>
6039:
6040: 2004-07-30 22:41 aaron
6041:
6042: * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
6043:
6044: 2004-07-30 22:06 aaron
6045:
6046: * README.LDAP: Sun One schema definition by
6047: Andreas.Bussjaeger@t-systems.com and janth@moldung.no
6048:
6049: 2004-07-29 11:57 millert
6050:
6051: * CHANGES: typo
6052:
6053: 2004-07-23 16:44 millert
6054:
6055: * CHANGES: sync
6056:
6057: 2004-07-23 16:43 millert
6058:
6059: * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
6060: remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
6061: the parse.
6062:
6063: 2004-07-08 10:20 millert
6064:
6065: * CHANGES: PAM change
6066:
6067: 2004-07-07 21:04 aaron
6068:
6069: * ldap.c: Better debugging of ALL command
6070:
6071: 2004-07-07 20:15 millert
6072:
6073: * parse.c: When matching for "sudoedit" in sudoers check both the
6074: command the user typed *and* the command that is listed in the
6075: sudoers entry.
6076:
6077: 2004-07-04 19:59 aaron
6078:
6079: * ldap.c: Added !command feature
6080:
6081: 2004-06-28 10:51 millert
6082:
6083: * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
6084: Brian Farrell
6085:
6086: 2004-06-10 23:11 millert
6087:
6088: * LICENSE: License is ISC-style, not BSD-style
6089:
6090: 2004-06-10 20:58 millert
6091:
6092: * CHANGES: sync
6093:
6094: 2004-06-10 16:54 millert
6095:
6096: * sudo.man.in, sudo.cat: regen
6097:
6098: 2004-06-10 16:53 millert
6099:
6100: * sudo.pod: o Update some out of date bits to reality o Change the
6101: shell promt in examples to bourne-shell style o Clarify some
6102: details o Add a CAVEAT about "sudo cd /foo"
6103:
6104: 2004-06-10 16:19 millert
6105:
6106: * check.c: Don't ask for a password if invoking user == target
6107: user.
6108:
6109: 2004-06-10 12:32 millert
6110:
6111: * sudo.c: typo in comment
6112:
6113: 2004-06-08 19:20 millert
6114:
6115: * sudoers.man.in, sudoers.cat: regen
6116:
6117: 2004-06-08 19:19 millert
6118:
6119: * sudoers.pod: Expand on NOEXEC a little.
6120:
6121: 2004-06-08 16:20 millert
6122:
6123: * TODO: sync
6124:
6125: 2004-06-08 15:58 millert
6126:
6127: * visudo.man.in, visudo.cat: regen
6128:
6129: 2004-06-08 15:55 millert
6130:
6131: * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
6132: for runas_default being set after it has already been used.
6133:
6134: 2004-06-08 13:53 millert
6135:
6136: * parse.yacc: Add a MATCHED macro for testing whether foo_matches
6137: has been set to TRUE or FALSE. This is more readable than
6138: checking for >=0 or < 0. Doesn't change the actual code
6139: generated.
6140:
6141: 2004-06-06 20:11 millert
6142:
6143: * sudoers.man.in, sudoers.cat: regen
6144:
6145: 2004-06-06 20:07 millert
6146:
6147: * sudoers, sudoers.pod: Correct description of where Defaults specs
6148: should go.
6149:
6150: 2004-06-06 20:02 millert
6151:
6152: * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
6153: auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
6154:
6155: 2004-06-06 19:58 millert
6156:
6157: * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
6158: ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
6159: tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
6160: Remove trailing spaces, no actual code changes.
6161:
6162: 2004-06-06 16:22 millert
6163:
6164: * parse.yacc: Fix a >=0 that should be <0 that was improperly
6165: converted when UNSPEC was added.
6166:
6167: 2004-06-06 15:54 millert
6168:
6169: * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
6170: to UNSPEC, not NOMATCH when resetting it.
6171:
6172: 2004-06-06 15:39 millert
6173:
6174: * parse.yacc: Fix pastos introduced in SETNMATCH addition.
6175:
6176: 2004-06-05 13:55 millert
6177:
6178: * README.LDAP: Update for configure changes
6179:
6180: 2004-06-05 13:42 millert
6181:
6182: * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
6183: respectively) and use these in parse.yacc. Also in parse.yacc
6184: initialize the *_matches vars to UNSPEC and add two macros,
6185: SETMATCH and SETNMATCH for use when setting *_matches to a value
6186: that may be NOMATCH/UNSPEC/TRUE/FALSE.
6187:
6188: 2004-06-05 11:17 millert
6189:
6190: * parse.yacc: Initialize runas to -2, not -1 since we need to be
6191: able to distinguish between the initialized value and the value
6192: of a non-match when passing along the runas value to multiple
6193: commands.
6194:
6195: The result of this is that an unmatched runas is now set to -1,
6196: not 0. This is required now that parse.c treats a FALSE value
6197: for runas as being explicitly denied.
6198:
6199: 2004-06-03 16:21 millert
6200:
6201: * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
6202:
6203: 2004-06-03 12:37 millert
6204:
6205: * configure, configure.in: Add tests for what libs we need to link
6206: with for ldap and for whether or not lber.h needs to be
6207: explicitly included.
6208:
6209: 2004-06-02 20:30 aaron
6210:
6211: * ldap.c: Solaris native LDAP build fix
6212:
6213: 2004-06-01 16:56 millert
6214:
6215: * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
6216: use of an unset variable.
6217:
6218: 2004-06-01 16:56 millert
6219:
6220: * sudo.h: Add prototype for sudo_ldap_list_matches
6221:
6222: 2004-06-01 16:53 millert
6223:
6224: * compat.h, config.h.in, configure, configure.in: Better check for
6225: dirfd macro--we now set HAVE_DIRFD for the macro version too.
6226: Added check for dd_fd in `DIR' if no dirfd is found; this is now
6227: used to confitionally define the dirfd macro in compat.h.
6228:
6229: 2004-06-01 16:51 millert
6230:
6231: * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6232: function/macro.
6233:
6234: 2004-06-01 15:13 millert
6235:
6236: * compat.h, config.h.in, configure, configure.in: Add a check for a
6237: dirfd() function (like Linux) and add a dirfd macro in compat.h
6238: if there is no dirfd() function or macro.
6239:
6240: 2004-06-01 14:59 millert
6241:
6242: * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6243: needed.
6244:
6245: 2004-06-01 14:30 millert
6246:
6247: * CHANGES: Clarify closefrom() note.
6248:
6249: 2004-06-01 12:51 millert
6250:
6251: * parse.c: When checking for a command in the directory, only copy
6252: the base dir once.
6253:
6254: 2004-06-01 12:44 millert
6255:
6256: * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6257: Solaris closefrom() and only close the descriptors listed
6258: therein.
6259:
6260: 2004-06-01 12:23 millert
6261:
6262: * alloc.c: compat.h guarantees INT_MAX is defined.
6263:
6264: 2004-06-01 12:23 millert
6265:
6266: * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6267: without it and remove definition of RLIM_INFINITY (now unused).
6268:
6269: 2004-05-31 21:22 millert
6270:
6271: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6272: parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6273: since the former is standardized.
6274:
6275: 2004-05-31 19:18 millert
6276:
6277: * CHANGES: sync
6278:
6279: 2004-05-31 19:10 millert
6280:
6281: * RUNSON: Add some entries that were mailed in a while ago
6282:
6283: 2004-05-31 14:16 millert
6284:
6285: * closefrom.c: o sysconf returns a long, not an int. o check for
6286: negative return value from sysconf/getdtablesize and use
6287: OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6288: without it (a fair guess...)
6289:
6290: 2004-05-30 12:25 millert
6291:
6292: * UPGRADE: Mention change in parse order for RunAs entries.
6293:
6294: 2004-05-30 12:15 millert
6295:
6296: * configure: regen
6297:
6298: 2004-05-29 18:29 millert
6299:
6300: * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6301: now takes an optional dir as a parameter
6302: o added check for ldap_initialize() and start_tls_s()
6303:
6304: 2004-05-29 14:54 millert
6305:
6306: * README.LDAP: Fix some typos, word choice and formatting issues.
6307:
6308: 2004-05-28 18:06 millert
6309:
6310: * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6311: stdio and just use read/write as it is simpler.
6312:
6313: 2004-05-28 16:27 millert
6314:
6315: * configure, configure.in: Remove hack overriding cross-compiler
6316: check. It should no longer be needed.
6317:
6318: 2004-05-28 16:26 millert
6319:
6320: * compat.h: Remove select() compat bits since we no longer use
6321: select().
6322:
6323: 2004-05-28 16:24 millert
6324:
6325: * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6326: timeout for systems that don't fully/properly implement select().
6327:
6328: 2004-05-27 19:14 millert
6329:
6330: * CHANGES: synbc
6331:
6332: 2004-05-27 19:12 millert
6333:
6334: * RUNSON: update
6335:
6336: 2004-05-27 19:12 millert
6337:
6338: * set_perms.c: Deal with systems that have no way of setting the
6339: effective uid such as nsr-tandem-nsk.
6340:
6341: 2004-05-27 19:01 millert
6342:
6343: * configure, configure.in: Define NO_SAVED_IDS if we don't find
6344: seteuid()
6345:
6346: 2004-05-27 18:21 millert
6347:
6348: * config.h.in, configure, configure.in: Add back check for
6349: setreuid() since NSK doesn't have it.
6350:
6351: 2004-05-27 15:57 millert
6352:
6353: * sudoers.cat, sudoers.man.in: regen
6354:
6355: 2004-05-27 15:56 millert
6356:
6357: * BUGS, CHANGES: sync
6358:
6359: 2004-05-27 15:55 millert
6360:
6361: * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6362: user was explicitly denied and the command matched. This fixes a
6363: long-standing bug and makes: foo machine = (ALL)
6364: /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6365:
6366: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6367:
6368: 2004-05-27 15:52 millert
6369:
6370: * sudoers.pod: Clarify mail_noperm
6371:
6372: 2004-05-19 21:25 aaron
6373:
6374: * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6375:
6376: 2004-05-17 18:32 millert
6377:
6378: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6379: sudoers.cat, visudo.cat: regen
6380:
6381: 2004-05-17 18:31 millert
6382:
6383: * TODO: sync
6384:
6385: 2004-05-17 18:31 millert
6386:
6387: * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6388: remembers these?) and add a minimal sudoedit example.
6389:
6390: 2004-05-17 18:21 millert
6391:
6392: * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6393: filesystem -> file system
6394:
6395: 2004-05-17 18:19 millert
6396:
6397: * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6398:
6399: 2004-05-17 18:10 millert
6400:
6401: * lex.yy.c: regen
6402:
6403: 2004-05-17 17:57 millert
6404:
6405: * visudo.pod: remove my email addr
6406:
6407: 2004-05-17 17:55 millert
6408:
6409: * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6410: @mansectsu@ everywhere Make man page references links with L<>
6411:
6412: 2004-05-17 16:51 millert
6413:
6414: * parse.lex: Accept quoted globbing characters and pass them
6415: verbatim for fnmatch()
6416:
6417: 2004-05-17 16:50 millert
6418:
6419: * UPGRADE: Document that /tmp/.odus is gone.
6420:
6421: 2004-05-17 16:28 millert
6422:
6423: * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6424: /tmp/.odus as a possible timestamp dir unless specifically
6425: configured to do so. Instead, if no /var/run exists, use
6426: /var/adm/sudo or /usr/adm/sudo.
6427:
6428: 2004-05-17 16:08 millert
6429:
6430: * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6431: visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6432: on patches from Tom Bates.
6433:
6434: 2004-05-16 18:47 millert
6435:
6436: * CHANGES: There was no 1.6.7p6.
6437:
6438: 2004-05-16 16:38 millert
6439:
6440: * BUGS, CHANGES: sync
6441:
6442: 2004-05-16 16:36 millert
6443:
6444: * Makefile.in: add missing files to DISTFILES
6445:
6446: 2004-05-16 16:23 millert
6447:
6448: * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6449:
6450: 2004-05-16 16:20 millert
6451:
6452: * Makefile.in: Fix some line wrap and update (c) year
6453:
6454: 2004-04-28 15:05 aaron
6455:
6456: * README.LDAP: Build Note
6457:
6458: 2004-04-06 22:03 aaron
6459:
6460: * Makefile.in: Fix install-dirs
6461:
6462: 2004-04-04 20:27 millert
6463:
6464: * visudo.c: In Exit() when used as a signal handler, emsg is a
6465: pointer so sizeof() is wrong so make it a #define instead. Also
6466: avoid using a negative exit value. Found by Aaron Campbell
6467:
6468: 2004-03-24 18:23 millert
6469:
6470: * sudoers.pod: Remove bogus sentence about uids in a User_List.
6471: Document usernames vs. uid parsing in a Runas_List.
6472:
6473: 2004-03-24 18:06 millert
6474:
6475: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6476: the user specified a uid with the -u flag and the uid exists in
6477: the passwd file, set runas_user to the name, not the uid.
6478:
6479: When comparing usernames in sudoers, if a name is really a uid
6480: (starts with '#') compare it numerically to pw_uid.
6481:
6482: 2004-03-22 13:35 millert
6483:
6484: * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6485:
6486: 2004-02-28 18:54 aaron
6487:
6488: * CHANGES, config.h.in, ldap.c: Added start_tls support
6489:
6490: 2004-02-14 18:04 millert
6491:
6492: * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6493: def_data.c, def_data.h to PARSESRCS.
6494:
6495: 2004-02-14 10:13 aaron
6496:
6497: * strlcat.c, strlcpy.c: Un-Fix last license munge
6498:
6499: 2004-02-13 16:37 millert
6500:
6501: * CHANGES, RUNSON, TODO: checkpoint
6502:
6503: 2004-02-13 16:37 millert
6504:
6505: * lex.yy.c, configure: regen
6506:
6507: 2004-02-13 16:36 millert
6508:
6509: * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6510: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6511: find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6512: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6513: interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6514: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6515: strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6516: sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6517: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6518: visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6519: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6520: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6521: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6522: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6523: emul/search.h, emul/utime.h: More to a less restrictive,
6524: ISC-style license.
6525:
6526: 2004-02-12 21:08 aaron
6527:
6528: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6529: def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6530: sudoers2ldif: Merged in LDAP Support
6531:
6532: 2004-02-08 15:53 millert
6533:
6534: * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6535: a macro.
6536:
6537: 2004-02-06 18:08 millert
6538:
6539: * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6540: already 0 so set the euid first, then just call setuid(0) to set
6541: the real uid too.
6542:
6543: 2004-02-06 14:52 millert
6544:
6545: * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6546: appropriate instead of seteuid() which may not exist.
6547:
6548: 2004-02-04 14:58 millert
6549:
6550: * LICENSE: 2004
6551:
6552: 2004-02-03 23:38 millert
6553:
6554: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6555: --with-pc-insults configure option
6556:
6557: 2004-02-03 23:32 millert
6558:
6559: * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6560:
6561: 2004-02-01 15:45 millert
6562:
6563: * sudo.man.in, sudoers.man.in: regen
6564:
6565: 2004-02-01 15:44 millert
6566:
6567: * sudoers.pod: Add a note that noexec is not a cure-all.
6568:
6569: 2004-02-01 15:20 millert
6570:
6571: * sudoers.pod: Mention that disabling "root_sudo" is pretty
6572: pointless.
6573:
6574: 2004-02-01 15:20 millert
6575:
6576: * configure, configure.in: Substitute for root_sudo in sudoers.pod
6577:
6578: 2004-02-01 15:03 millert
6579:
6580: * sudo.pod: Add sudoedit to the NAME section
6581:
6582: 2004-02-01 15:00 millert
6583:
6584: * sudoers.pod: Document that fact that setting ignore_dot in
6585: sudoers has no effect due to the fact that find_path() is called
6586: *before* sudoers is read.
6587:
6588: 2004-01-29 19:50 millert
6589:
6590: * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6591:
6592: 2004-01-29 19:42 millert
6593:
6594: * BUGS, CHANGES, TODO: sync
6595:
6596: 2004-01-29 19:42 millert
6597:
6598: * sudo.man.in: regen
6599:
6600: 2004-01-29 19:41 millert
6601:
6602: * sudo.pod: Clarify that when sudo is run by root with the
6603: SUDO_USER variable set, the sudoers lookup happens for root and
6604: not the SUDO_USER user.
6605:
6606: 2004-01-29 17:33 millert
6607:
6608: * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6609: set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6610: auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6611:
6612: 2004-01-29 16:22 millert
6613:
6614: * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6615:
6616: 2004-01-29 16:15 millert
6617:
6618: * sudo.c: Don't look at prev_user until after we've parsed sudoers
6619: and done the password check. That way, if sudo/sudoedit is run
6620: from a root process that was invoked by sudo, we check sudoers
6621: for root, not the previous user. This makes sudoedit much more
6622: useful and means that for the sudo case, we get correct logging
6623: on who actually ran the command.
6624:
6625: 2004-01-22 19:22 millert
6626:
6627: * sudo_edit.c: Add a comment describing why we need to be notified
6628: about our child stopping.
6629:
6630: 2004-01-22 16:06 millert
6631:
6632: * def_data.c, def_data.in: Update the noexec variable descriptions
6633:
6634: 2004-01-22 14:18 millert
6635:
6636: * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6637: execve()
6638:
6639: 2004-01-22 12:14 millert
6640:
6641: * sudo_noexec.c: Alas, all the world does not go through execve(2).
6642: Many systems still have an execv(2) system call, Linux 2.6
6643: provides fexecve(2) and it is not uncommon for libc to have
6644: underscore ('_') versions of the functions to be used internally
6645: by the library. Instead of stubbing all these out by hand,
6646: define a macro and let it do the work. Extra exec functions
6647: pointed out by Reznic Valery.
6648:
6649: 2004-01-21 21:57 millert
6650:
6651: * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6652: Because we do a fork() first we need to be notified when the
6653: child has been stopped and then send that same signal to ourself
6654: so the shell can do its job control thing.
6655:
6656: 2004-01-21 21:44 millert
6657:
6658: * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6659: systems out there that want to run sudo that still don't support
6660: these we can try to deal with that later.
6661:
6662: 2004-01-21 20:03 millert
6663:
6664: * lex.yy.c: regen
6665:
6666: 2004-01-21 20:00 millert
6667:
6668: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6669: -e / sudoedit
6670:
6671: 2004-01-21 19:08 millert
6672:
6673: * configure, configure.in: fix typo
6674:
6675: 2004-01-21 19:02 millert
6676:
6677: * config.h.in, configure.in: Add SET/CLR/ISSET
6678:
6679: 2004-01-21 18:55 millert
6680:
6681: * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6682: Pretty print the long usage() line to not wrap (assumes 80 char
6683: display)
6684:
6685: 2004-01-21 18:01 millert
6686:
6687: * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6688: is implied and no other flags are permitted.
6689:
6690: 2004-01-21 18:00 millert
6691:
6692: * sudo.h: Add a new flag, -e, that makes it possible to give users
6693: the ability to edit files with the editor of their choice as the
6694: invoking user, not the runas user. Temporary files are used for
6695: the actual edit and the temp file is copied over the original
6696: after the editor is done.
6697:
6698: 2004-01-21 17:25 millert
6699:
6700: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6701: flag, -e, that makes it possible to give users the ability to
6702: edit files with the editor of their choice as the invoking user,
6703: not the runas user. Temporary files are used for the actual edit
6704: and the temp file is copied over the original after the editor is
6705: done.
6706:
6707: 2004-01-21 17:06 millert
6708:
6709: * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6710: variables is set, use that to determine the invoking user's true
6711: identity. That way the proper info gets logged by someone who
6712: has done "sudo su" but still uses sudo to as root. We can't do
6713: this for non-root users since that would open up a security hole,
6714: though perhaps it would be acceptable to use getlogin(2) on OSes
6715: where this a system call (and doesn't just look in the utmp
6716: file).
6717:
6718: 2004-01-21 16:58 millert
6719:
6720: * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6721:
6722: 2004-01-21 16:57 millert
6723:
6724: * configure, config.h.in, configure.in: Add check for fchown(2)
6725:
6726: 2004-01-20 14:22 millert
6727:
6728: * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6729: set_runaspw. It is far to late to set NewArgv[0] there and will
6730: have no effect anyway as cmnd and safe_cmnd have already been
6731: set.
6732:
6733: 2004-01-20 14:18 millert
6734:
6735: * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6736: did.
6737:
6738: 2004-01-18 20:17 millert
6739:
6740: * env.c, sudo.c: In -i mode always set new environment based on the
6741: runas user's passwd entry.
6742:
6743: 2004-01-18 17:56 millert
6744:
6745: * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6746: section with usage() in sudo.c. Also sort the flags in the
6747: OPTIONS section.
6748:
6749: 2004-01-18 17:55 millert
6750:
6751: * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6752: patches from David J. MacKenzie o Sort the flags in the usage
6753: message
6754:
6755: 2004-01-18 17:22 millert
6756:
6757: * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6758: substitution.
6759:
6760: 2004-01-17 16:34 millert
6761:
6762: * sudo.c: Change euid to runas user before calling find_path().
6763: Unfortunately, though runas_user can be modified in sudoers we
6764: haven't parsed sudoers yet.
6765:
6766: 2004-01-17 16:25 millert
6767:
6768: * sudoers.man.in, sudoers.pod: Add missing defintion of
6769: Parameter_List and use single pipes in the Defaults EBNF
6770: definition.
6771:
6772: 2004-01-17 13:49 millert
6773:
6774: * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6775: don't want to reset the contents of runas_pw if the user
6776: specified a user via the -u flag.
6777:
6778: Avoid unnecessary passwd lookups in set_authpw(). In most cases
6779: we already have the info in runas_pw.
6780:
6781: 2004-01-16 18:16 millert
6782:
6783: * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6784: RedHat
6785:
6786: 2004-01-16 18:12 millert
6787:
6788: * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6789:
6790: 2004-01-16 18:10 millert
6791:
6792: * parse.c: If we can't stat the command as root, try as the runas
6793: user instead.
6794:
6795: 2004-01-16 18:09 millert
6796:
6797: * testsudoers.c, visudo.c: Add stub set_runaspw() function
6798:
6799: 2004-01-16 18:09 millert
6800:
6801: * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6802: will be used as a callback to update runas_pw when the runas user
6803: changes.
6804:
6805: 2004-01-16 18:07 millert
6806:
6807: * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6808:
6809: 2004-01-16 18:05 millert
6810:
6811: * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6812: a PERM_RUNAS that just changes the euid.
6813:
6814: 2004-01-16 18:04 millert
6815:
6816: * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6817: allocate memory in one chunk for easy free()ing. Also change it
6818: from static to extern.
6819:
6820: 2004-01-16 18:03 millert
6821:
6822: * defaults.c, defaults.h: Add callback support
6823:
6824: 2004-01-16 18:02 millert
6825:
6826: * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6827: it for runas_default
6828:
6829: 2004-01-15 15:13 millert
6830:
6831: * auth/fwtk.c: Add support for chalnecho and display server
6832: responses used by fwtk >= 2.0
6833:
6834: 2004-01-12 18:39 millert
6835:
6836: * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6837:
6838: 2004-01-12 14:03 millert
6839:
6840: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6841: sudo.h: Use closefrom() instead of doing the equivalent inline.
6842:
6843: 2004-01-12 13:55 millert
6844:
6845: * closefrom.c: closefrom(3) for systems w/o it
6846:
6847: 2004-01-09 16:29 millert
6848:
6849: * sudoers.man.in: Update from .pod file.
6850:
6851: 2004-01-09 16:26 millert
6852:
6853: * configure, configure.in: Substitute noexec_file for the sudoers
6854: man page
6855:
6856: 2004-01-09 16:24 millert
6857:
6858: * sudo.man.in, sudo.pod: Mention noexec
6859:
6860: 2004-01-09 16:16 millert
6861:
6862: * sudoers.man.in, sudoers.pod: Document noexec
6863:
6864: 2004-01-09 14:38 millert
6865:
6866: * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6867: definition from config.h to pam.c where it belongs. We can't
6868: have this in config.h since that gets included too early.
6869:
6870: 2004-01-09 14:35 millert
6871:
6872: * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6873: implementations put their headers in /usr/include/pam instead of
6874: /usr/include/security.
6875:
6876: 2004-01-09 14:32 millert
6877:
6878: * configure.in: I missed changing the EXEC macro -> EXECV here when
6879: I changed this in config.h.in and sudo.c a while ago.
6880:
6881: 2004-01-09 13:15 millert
6882:
6883: * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6884:
6885: 2004-01-09 03:29 millert
6886:
6887: * configure, configure.in: o merge the hpux case entries into a
6888: single entry w/ its own sub-case statement. o HP-UX >= 11
6889: support getspnam(), use it in preference to getprpwuid()
6890:
6891: 2004-01-09 02:58 millert
6892:
6893: * configure, configure.in: eval $shrext so that it expands nicely
6894: on MacOS X
6895:
6896: 2004-01-09 02:50 millert
6897:
6898: * Makefile.in: Don't lie about making a module, it does the wrong
6899: thing on mach
6900:
6901: 2004-01-09 02:49 millert
6902:
6903: * ltmain.sh: Remove requirement that libs must begin with "lib".
6904: They don't when we point directly at the lib using LD_PRELOAD or
6905: its equivalent.
6906:
6907: 2004-01-09 02:01 millert
6908:
6909: * acsite.m4: Disable support for c++, f77 and java. We don't need
6910: it, it takes a lot of time, and it hosed our check for shared lib
6911: support.
6912:
6913: 2004-01-09 02:00 millert
6914:
6915: * configure: regen
6916:
6917: 2004-01-09 02:00 millert
6918:
6919: * configure.in: Call AC_ENABLE_SHARED and check the status of
6920: enable_shared to know when shared libs are available.
6921:
6922: 2004-01-09 01:37 millert
6923:
6924: * acsite.m4: Duh, OpenBSD suports shared libs too
6925:
6926: 2004-01-09 01:18 millert
6927:
6928: * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6929: qualifiers.
6930:
6931: 2004-01-09 01:15 millert
6932:
6933: * configure, configure.in: o No need to check for sed, libtool
6934: config does that for us o move check for --with-noexec until
6935: after libtool magic is run so we can use $can_build_shared and
6936: $shrext
6937:
6938: 2004-01-09 01:14 millert
6939:
6940: * ltmain.sh: Don't print a bunch of crap about library installs
6941: since we are not really installing a library.
6942:
6943: 2004-01-09 00:38 millert
6944:
6945: * env.c: Make format_env() varargs Add noexec support for Darwin,
6946: MacOS X, Irix, and Tru64
6947:
6948: 2004-01-09 00:32 millert
6949:
6950: * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6951: changes: o no ldconfig in the finish step o assume no libprefix
6952: or version is needed
6953:
6954: 2004-01-09 00:15 millert
6955:
6956: * sudo_noexec.c: Fix compilation under K&R
6957:
6958: 2004-01-06 09:31 millert
6959:
6960: * CHANGES: checkpoint
6961:
6962: 2004-01-06 09:28 millert
6963:
6964: * sudo_noexec.c: stub execve() that just returns EACCES; used for
6965: noexec functionality
6966:
6967: 2004-01-06 01:42 millert
6968:
6969: * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6970: issue with generated code.
6971:
6972: 2004-01-05 16:10 millert
6973:
6974: * def_data.c, def_data.h, def_data.in: Move the environment
6975: defaults to the end and shorten a few of the descriptions.
6976:
6977: 2004-01-05 15:05 millert
6978:
6979: * configure.in, configure: no shared libs on ultris or convexos
6980:
6981: 2004-01-05 15:03 millert
6982:
6983: * Makefile.in, configure, configure.in: Build sudo_noexec shared
6984: object using libtool; could use some cleanup.
6985:
6986: 2004-01-05 14:59 millert
6987:
6988: * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6989:
6990: 2004-01-05 14:56 millert
6991:
6992: * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6993: that order is not important.
6994:
6995: 2004-01-05 12:15 millert
6996:
6997: * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6998: pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6999:
7000: 2004-01-04 22:58 millert
7001:
7002: * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
7003: _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
7004: option. The default value of noexec_file is set to this.
7005:
7006: 2004-01-04 21:48 millert
7007:
7008: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
7009: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
7010: support for preloading a shared object containing a dummy
7011: execve() function that just sets error and returns -1. This adds
7012: a "noexec_file" option to load the filename as well as a "noexec"
7013: flag to enable it unconditionally. There is also a NOEXEC tag
7014: that can be attached to specific commands and an EXEC tag to
7015: disable it.
7016:
7017: 2004-01-04 21:40 millert
7018:
7019: * mkdefaults: add missing newline to usage statement
7020:
7021: 2004-01-04 20:39 millert
7022:
7023: * config.h.in, sudo.c: Rename EXEC macro -> EXECV
7024:
7025: 2004-01-04 20:16 millert
7026:
7027: * logging.c: Don't truncate usernames to 8 characters in the log
7028: message.
7029:
7030: 2004-01-04 20:13 millert
7031:
7032: * check.c, sudoers.man.in, sudoers.pod: Update copyright year
7033:
7034: 2004-01-04 20:12 millert
7035:
7036: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
7037: sudoers.pod: Add a new option, lecture_file, that can be used to
7038: point to a custom sudo lecture.
7039:
7040: 2003-12-31 17:46 millert
7041:
7042: * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
7043: auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
7044: zero_bytes() function to do the equivalent of bzero in such a way
7045: that will heopfully not be optimized away by sneaky compilers.
7046:
7047: 2003-12-31 13:35 millert
7048:
7049: * err.c: Use #ifdef __STDC__, not #if __STDC__.
7050:
7051: 2003-12-30 17:41 millert
7052:
7053: * mkdefaults: Always put at least one space between the def_* macro
7054: name and its definition.
7055:
7056: 2003-12-30 17:34 millert
7057:
7058: * configure, configure.in: Adjust code for --without-lecture to
7059: match new values.
7060:
7061: 2003-12-30 17:33 millert
7062:
7063: * visudo.man.in: regen after pasto fix
7064:
7065: 2003-12-30 17:31 millert
7066:
7067: * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
7068: from a flag to a tuple.
7069:
7070: 2003-12-30 17:31 millert
7071:
7072: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
7073: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
7074: support for tuples in def_data.in; these are implemented as an
7075: enum type. Currently there is only a single tuple enum but in
7076: the future we may have one tuple enum per T_TUPLE entry in
7077: def_data.in. Currently listpw, verifypw and lecture are tuples.
7078: This avoids the need to have two entries (one ival, one str) for
7079: pwflags and syslog values.
7080:
7081: lecture is now a tuple with the following values: never, once,
7082: always
7083:
7084: We no longer use both an int and string entry for syslog
7085: facilities and priorities. Instead, there are logfac2str() and
7086: logpri2str() functions that get used when we need to print the
7087: string values.
7088:
7089: 2003-12-30 17:20 millert
7090:
7091: * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
7092: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
7093: visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
7094: auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
7095: auth/sudo_auth.c: Create def_* macros for each defaults value so
7096: we no longer need the def_{flag,ival,str,list,mode} macros (which
7097: have been removed). This is a step toward more flexible data
7098: types in def_data.in.
7099:
7100: 2003-12-30 15:55 millert
7101:
7102: * TODO: checkpoint
7103:
7104: 2003-12-22 21:18 millert
7105:
7106: * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
7107: unusual for users to place "sudo -k" in a .logout file which can
7108: cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
7109: daemon has died. Previously, this would result in useless mail
7110: and logging.
7111:
7112: 2003-12-16 13:51 millert
7113:
7114: * visudo.pod: fix pasto in VISUAL description
7115:
7116: 2003-12-09 22:09 millert
7117:
7118: * configure: regen
7119:
7120: 2003-12-09 22:08 millert
7121:
7122: * CHANGES: checkpoint
7123:
7124: 2003-12-09 22:02 millert
7125:
7126: * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
7127: too
7128:
7129: 2003-08-12 16:45 millert
7130:
7131: * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
7132: not already there).
7133:
7134: 2003-06-28 21:31 millert
7135:
7136: * auth/pam.c: Fix a core dump on Solaris by preserving the
7137: pam_handle_t we used during authentication for pam_prep_user().
7138: If we didn't authenticate (ie: ticket still valid), we call
7139: pam_init() from pam_prep_user(). This is something of a hack; it
7140: may be better to change the auth API and add an auth_final()
7141: function that acts like pam_prep_user().
7142:
7143: 2003-06-21 12:50 millert
7144:
7145: * set_perms.c: Add explicit declaration of printerr variable in
7146: function header (was defaulting to int which is OK but oh so K&R
7147: :-). From Theo.
7148:
7149: 2003-06-09 19:00 millert
7150:
7151: * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
7152:
7153: 2003-06-09 16:07 millert
7154:
7155: * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
7156: problem where the sudo process would spin eating up CPU until
7157: sendmail finished when it has to send mail.
7158:
7159: 2003-05-30 16:22 millert
7160:
7161: * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
7162: disavowed it
7163:
7164: 2003-05-21 21:53 millert
7165:
7166: * parse.c: Don't assume that getgrnam() calls don't modify contents
7167: of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
7168: can happen. Based on a patch from Kirk Webb.
7169:
7170: 2003-05-06 11:25 millert
7171:
7172: * configure.in: missing ;;
7173:
7174: 2003-05-06 00:53 millert
7175:
7176: * configure.in: darwin has a broken setreuid() in at least some
7177: versions
7178:
7179: 2003-05-06 00:31 millert
7180:
7181: * env.c: Fix an off by one error when reallocating the environment;
7182: Kevin Pye
7183:
7184: 2003-04-30 14:04 millert
7185:
7186: * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
7187:
7188: 2003-04-28 19:30 millert
7189:
7190: * HISTORY: More info on the early days from Coggs.
7191:
7192: 2003-04-21 14:47 millert
7193:
7194: * auth/kerb5.c: remove errant semicolon that prevented compilation
7195: under heimdal
7196:
7197: 2003-04-15 20:42 millert
7198:
7199: * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
7200: env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
7201: goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
7202: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
7203: strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7204: sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
7205: version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
7206: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
7207: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7208: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7209: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
7210: on affected files
7211:
7212: 2003-04-15 20:25 millert
7213:
7214: * LICENSE: slightly different wording for the darpa credit
7215:
7216: 2003-04-15 14:37 millert
7217:
7218: * LICENSE: Add DARPA credit
7219:
7220: 2003-04-14 16:49 millert
7221:
7222: * auth/kerb5.c: Use krb5_princ_component() instead of
7223: krb5_princ_realm() for MIT Kerberos like we did before I messed
7224: things up ;-)
7225:
7226: Use krb5_principal_get_comp_string() to do the same thing w/
7227: Heimdal. I'm not sure if the component should be 0 or 1 in this
7228: case.
7229:
7230: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7231: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7232: should be a configure check for this I guess.
7233:
7234: 2003-04-13 15:48 millert
7235:
7236: * TROUBLESHOOTING, config.h.in, configure, configure.in,
7237: sample.sudoers: builtin -> built-in; Jason McIntyre
7238:
7239: 2003-04-13 15:45 millert
7240:
7241: * sudoers.pod: built in -> built-in; Jason McIntyre
7242:
7243: 2003-04-09 16:14 millert
7244:
7245: * CHANGES: checkpoint for 1.6.7p3
7246:
7247: 2003-04-09 16:14 millert
7248:
7249: * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7250: Spencer. Amazingly, sudo source from 1985 is available via
7251: groups.google.com
7252:
7253: 2003-04-09 16:13 millert
7254:
7255: * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7256: set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7257: for the RLIMIT_CORE restoration on some OSes.
7258:
7259: 2003-04-04 12:46 millert
7260:
7261: * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7262:
7263: 2003-04-04 12:45 millert
7264:
7265: * config.h.in, configure, configure.in: Check for heimdal even if
7266: we found krb5-config and define HAVE_HEIMDAL.
7267:
7268: 2003-04-03 22:04 millert
7269:
7270: * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7271: The former is no longer defined by MIT kerb5 (though it used to
7272: be and indeed remains so in Heimdal).
7273:
7274: 2003-04-03 10:16 millert
7275:
7276: * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7277: duplicate) directories to "mkdir -p" since that seems to break on
7278: Tru64 Unix at least. This basically brings back what shipped
7279: with sudo 1.6.6.
7280:
7281: 2003-04-02 13:57 millert
7282:
7283: * auth/kerb5.c: Correct number of args to
7284: krb5_principal_get_realm() and fix an unclosed comment that hid
7285: the bug.
7286:
7287: 2003-04-02 13:45 millert
7288:
7289: * configure: regen
7290:
7291: 2003-04-02 13:45 millert
7292:
7293: * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7294: configure.in, version.h: ++version
7295:
7296: 2003-04-02 13:44 millert
7297:
7298: * configure.in: use krb5-config to determine Kerberos V details if
7299: it exists
7300:
7301: 2003-04-02 13:25 millert
7302:
7303: * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7304: interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7305: visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7306: auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7307: throughout. The main exception is openlog(). Since the admin
7308: may be filtering logs based on the program name in the log files,
7309: hard code this to "sudo".
7310:
7311: 2003-04-02 13:16 millert
7312:
7313: * Makefile.in: Add getprogname.c and err.c
7314:
7315: 2003-04-02 13:15 millert
7316:
7317: * configure: regen
7318:
7319: 2003-04-02 13:15 millert
7320:
7321: * configure.in, config.h.in: Add checks for getprognam(),
7322: __progname and err.h
7323:
7324: 2003-04-02 13:14 millert
7325:
7326: * err.c, emul/err.h: For systems withour err/warn functions.
7327:
7328: 2003-04-02 13:14 millert
7329:
7330: * getprogname.c: For systems neither getprogname() nor __progname;
7331: uses Argv[0].
7332:
7333: 2003-04-01 10:09 millert
7334:
7335: * CHANGES: checkpoint for 1.6.7p1
7336:
7337: 2003-04-01 10:02 millert
7338:
7339: * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7340:
7341: 2003-04-01 09:58 millert
7342:
7343: * check.c: oflow detection in expand_prompt() was faulty (false
7344: positives). The count was based on strlcat() return value which
7345: includes the length of the entire string.
7346:
7347: 2003-03-30 19:02 millert
7348:
7349: * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7350:
7351: 2003-03-24 16:09 millert
7352:
7353: * logging.c: g/c unused variable
7354:
7355: 2003-03-24 11:06 millert
7356:
7357: * configure: regen
7358:
7359: 2003-03-24 11:05 millert
7360:
7361: * configure.in: use man sections 8 and 5 for csops
7362:
7363: 2003-03-21 18:11 millert
7364:
7365: * configure: regen
7366:
7367: 2003-03-21 15:10 millert
7368:
7369: * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7370: of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7371:
7372: 2003-03-21 14:02 millert
7373:
7374: * configure: regen
7375:
7376: 2003-03-21 14:01 millert
7377:
7378: * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7379: An alternate libpath may be specified or -blibpath support can be
7380: disabled. Also change conifgure such that -blibpath is not
7381: specified if no -L libpaths were added to SUDO_LDFLAGS.
7382:
7383: 2003-03-20 22:05 millert
7384:
7385: * configure.in: add AIX blibpath support
7386:
7387: 2003-03-20 20:28 millert
7388:
7389: * INSTALL, configure.in: --with-skey and --with-opie now take an
7390: option directory argument This obsoletes a --with-csops hack
7391: (/tools/cs/skey)
7392:
7393: Also remove the remaining direct uses of "echo"
7394:
7395: 2003-03-20 17:44 millert
7396:
7397: * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7398: -lroken optional for KTH Kerberos IV and V.
7399:
7400: 2003-03-20 14:42 millert
7401:
7402: * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7403: -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7404: specified variable.
7405:
7406: 2003-03-20 14:40 millert
7407:
7408: * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7409: There is a new configure option, --with-rpath to control this
7410: behavior.
7411:
7412: 2003-03-19 23:50 millert
7413:
7414: * configure.in: for kerb4 put libdes after libkrb on the link line
7415:
7416: 2003-03-19 23:49 millert
7417:
7418: * auth/kerb4.c: typo
7419:
7420: 2003-03-19 23:33 millert
7421:
7422: * configure.in: fix kerberos lib check when a path is specified
7423:
7424: 2003-03-19 21:04 millert
7425:
7426: * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7427: reapchild after sending mail instead of doing a conditional
7428: sudo_waitpid.
7429:
7430: 2003-03-19 16:20 millert
7431:
7432: * configure: regen
7433:
7434: 2003-03-19 16:19 millert
7435:
7436: * configure.in: replace =DIR with [=DIR] where sensible
7437:
7438: 2003-03-19 16:16 millert
7439:
7440: * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7441: include/lib detection based on openssh's configure.in
7442:
7443: 2003-03-19 15:58 millert
7444:
7445: * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7446: argument.
7447:
7448: 2003-03-15 22:03 millert
7449:
7450: * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7451: says username is 32 bytes.
7452:
7453: 2003-03-15 21:18 millert
7454:
7455: * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7456: snprintf, not sprintf
7457:
7458: 2003-03-15 21:18 millert
7459:
7460: * auth/rfc1938.c: use snprintf
7461:
7462: 2003-03-15 15:37 millert
7463:
7464: * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7465: kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7466: copyright year
7467:
7468: 2003-03-15 15:31 millert
7469:
7470: * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7471: Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7472: logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7473: sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7474: visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7475: copyright year
7476:
7477: 2003-03-15 15:19 millert
7478:
7479: * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7480: with %lu
7481:
7482: 2003-03-15 15:17 millert
7483:
7484: * configure: regen
7485:
7486: 2003-03-15 15:16 millert
7487:
7488: * configure.in: correct error messages for
7489: --with-sudoers-{mode,uid,gid}
7490:
7491: 2003-03-15 15:10 millert
7492:
7493: * alloc.c: make the malloc(0) error specific to each function to
7494: aid tracking down bugs.
7495:
7496: 2003-03-15 14:49 millert
7497:
7498: * alloc.c: deal with platforms where size_t is signed and there is
7499: no SIZE_MAX or SIZE_T_MAX
7500:
7501: 2003-03-15 14:10 millert
7502:
7503: * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7504: warnings.
7505:
7506: 2003-03-15 13:02 millert
7507:
7508: * sudo.c: Use stat_sudoers macro so --with-stow can work
7509:
7510: 2003-03-15 13:01 millert
7511:
7512: * INSTALL, config.h.in, configure, configure.in: Add support for
7513: --with-stow based on patches from Robert Uhl
7514:
7515: 2003-03-15 12:51 millert
7516:
7517: * env.c: fix indentation
7518:
7519: 2003-03-15 00:21 millert
7520:
7521: * configure.in: back out rev 1.352
7522:
7523: 2003-03-14 20:11 millert
7524:
7525: * lex.yy.c: regen
7526:
7527: 2003-03-14 20:11 millert
7528:
7529: * parse.lex: use strlcpy, not strncpy
7530:
7531: 2003-03-14 19:48 millert
7532:
7533: * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7534: setusercontext() failure.
7535:
7536: 2003-03-14 19:43 millert
7537:
7538: * logging.c: use pid_t
7539:
7540: 2003-03-14 10:43 millert
7541:
7542: * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7543:
7544: 2003-03-14 10:35 millert
7545:
7546: * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7547:
7548: 2003-03-13 21:47 millert
7549:
7550: * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7551:
7552: 2003-03-13 21:38 millert
7553:
7554: * configure: regen
7555:
7556: 2003-03-13 21:38 millert
7557:
7558: * configure.in: put -ldl after -lpam, not before; fixes static
7559: linking on Linux
7560:
7561: 2003-03-13 21:17 millert
7562:
7563: * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7564: getifaddrs() case.
7565:
7566: 2003-03-13 20:24 millert
7567:
7568: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7569: sudoers.cat, visudo.cat: regen
7570:
7571: 2003-03-13 20:23 millert
7572:
7573: * Makefile.in: Preserve copyright notice from .pod file in .man.in
7574: file
7575:
7576: 2003-03-13 20:01 millert
7577:
7578: * visudo.pod: Add sudoers(5) to SEE ALSO
7579:
7580: 2003-03-13 15:27 millert
7581:
7582: * lex.yy.c: regen
7583:
7584: 2003-03-13 15:27 millert
7585:
7586: * parse.lex: Don't assume libc can realloc() a NULL string. If
7587: malloc/realloc fails, make sure we just return; yyerror() is not
7588: terminal.
7589:
7590: 2003-03-13 15:17 millert
7591:
7592: * lex.yy.c: regen
7593:
7594: 2003-03-13 15:17 millert
7595:
7596: * parse.lex: simplify fill_args a little and use strlcpy for
7597: paranoia
7598:
7599: 2003-03-13 15:00 millert
7600:
7601: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7602: testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7603: overflow. In all cases the strings were either pre-allocated to
7604: the correct size of length checks were done before the copy but a
7605: little paranoia can go a long way.
7606:
7607: 2003-03-13 12:54 millert
7608:
7609: * sudo.h: Add strlc{at,py} protos
7610:
7611: 2003-03-13 12:03 millert
7612:
7613: * env.c, interfaces.c: Use erealloc3()
7614:
7615: 2003-03-13 12:00 millert
7616:
7617: * configure: regen
7618:
7619: 2003-03-13 12:00 millert
7620:
7621: * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7622: need >=). Use memcpy() instead of strcpy() in estrdup() so this
7623: is strcpy()-free.
7624:
7625: 2003-03-13 11:58 millert
7626:
7627: * sudo.c: snprintf() a uid as %lu, not %ld to match the
7628: MAX_UID_T_LEN test in configure.
7629:
7630: 2003-03-13 11:56 millert
7631:
7632: * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7633: just unsigned.
7634:
7635: 2003-03-12 18:46 millert
7636:
7637: * sudo.c: Use snprintf() for paranoia
7638:
7639: 2003-03-12 17:16 millert
7640:
7641: * parse.yacc: Use emalloc2 and erealloc3
7642:
7643: 2003-03-12 17:08 millert
7644:
7645: * Makefile.in: strlc{at,py} for those w/o it
7646:
7647: 2003-03-12 17:07 millert
7648:
7649: * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7650:
7651: 2003-03-12 17:07 millert
7652:
7653: * config.h.in, configure, configure.in: Add stlc{at,py} for those
7654: w/o it.
7655:
7656: 2003-03-12 16:51 millert
7657:
7658: * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7659: emalloc2().
7660:
7661: 2003-03-12 16:45 millert
7662:
7663: * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7664: certain size.
7665:
7666: 2003-03-12 16:41 millert
7667:
7668: * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7669: bzero and with error/oflow checking.
7670:
7671: 2003-03-12 16:23 millert
7672:
7673: * alloc.c: Error out on malloc(0); suggested by theo
7674:
7675: 2003-03-09 19:34 millert
7676:
7677: * configure, configure.in: fix a typo; David Krause
7678:
7679: 2003-03-07 10:46 millert
7680:
7681: * sudo.pod: fix typo
7682:
7683: 2003-03-03 21:47 millert
7684:
7685: * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7686:
7687: 2003-03-01 13:20 millert
7688:
7689: * configure.in, config.h.in: not not; Anil Madhavapeddy
7690:
7691: 2003-01-23 03:03 millert
7692:
7693: * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7694:
7695: 2003-01-20 16:13 millert
7696:
7697: * parse.yacc: Add some missing ';' rule terminators that bison
7698: warns about.
7699:
7700: 2003-01-20 16:07 millert
7701:
7702: * config.sub: fix typo I introduced in last merge
7703:
7704: 2003-01-20 15:59 millert
7705:
7706: * configure: regenerate with autoconf 2.57
7707:
7708: 2003-01-20 15:58 millert
7709:
7710: * config.h.in: Add missing "$HOME"
7711:
7712: 2003-01-20 15:57 millert
7713:
7714: * configure.in: Add some more square backets to make autoconf 2.57
7715: happy
7716:
7717: 2003-01-20 14:39 millert
7718:
7719: * config.guess, config.sub, mkinstalldirs: Updates from
7720: autoconf-2.57
7721:
7722: 2003-01-17 18:10 millert
7723:
7724: * lex.yy.c, sudo.tab.h: regen
7725:
7726: 2003-01-17 18:09 millert
7727:
7728: * parse.lex, parse.yacc, sudoers.pod: Add support for
7729: Defaults>RunasUser
7730:
7731: 2003-01-06 19:10 millert
7732:
7733: * visudo.c: fclose() yyin after each yyparse() is done and use
7734: fopen() instead of using freopen().
7735:
7736: 2003-01-06 19:02 millert
7737:
7738: * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7739: It looks like the issue is that yyrestart() does not reset the
7740: start condition to INITIAL which is an issue since we parse
7741: sudoers multiple times.
7742:
7743: 2003-01-06 18:47 millert
7744:
7745: * parse.lex: Work around what appears to be a flex bug when dealing
7746: with files that lack a final newline before EOF. This adds a
7747: rule to match EOF in the non-initial states which resets the
7748: state to INITIAL and throws an error.
7749:
7750: 2003-01-06 15:06 millert
7751:
7752: * visudo.c: o The parser needs sudoers to end with a newline but
7753: some editors (emacs) may not add one. Check for a missing
7754: newline at EOF and add one if needed. o Set quiet flag during
7755: initial sudoers parse (to get options) o Move yyrestart() call
7756: and always use freopen() to open yyin after initial sudoers
7757: parse.
7758:
7759: 2002-12-15 11:24 millert
7760:
7761: * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7762: Want to set effective gid, not real gid, when reading sudoers.
7763:
7764: 2002-12-15 11:08 millert
7765:
7766: * set_perms.c: don't compile set_perms_posix if we have setreuid or
7767: setresuid
7768:
7769: 2002-12-14 14:21 millert
7770:
7771: * sudo.pod, sudoers.pod: document new prompt escapes
7772:
7773: 2002-12-14 14:15 millert
7774:
7775: * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7776: now gets collapsed to "%" as was originally intended. This also
7777: gets rid of lastchar (does lookahead instead of lookback) which
7778: should simplify the logic slightly.
7779:
7780: 2002-12-13 13:20 millert
7781:
7782: * tgetpass.c: Write the prompt *after* turning off echo to avoid
7783: some password characters being echoed on heavily-loaded machines
7784: with fast typists.
7785:
7786: 2002-12-13 13:09 millert
7787:
7788: * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7789:
7790: 2002-12-13 12:48 millert
7791:
7792: * configure.in: Fix IRIX fallout from name changes in man dir/sect
7793: Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7794: DOT edu
7795:
7796: 2002-12-13 11:33 millert
7797:
7798: * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7799: in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7800:
7801: 2002-11-28 18:43 millert
7802:
7803: * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7804: call this for us.
7805:
7806: 2002-11-26 12:09 millert
7807:
7808: * sudo.c: fix typo in comment; Pedro Bastos
7809:
7810: 2002-11-22 14:41 millert
7811:
7812: * INSTALL: document --disable-setresuid
7813:
7814: 2002-11-22 14:41 millert
7815:
7816: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7817: Sprinkle some volatile qualifiers to prevent over-enthusiastic
7818: optimizers from removing memset() calls.
7819:
7820: 2002-11-22 14:11 millert
7821:
7822: * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7823: -Wsign-compare
7824:
7825: 2002-11-22 14:09 millert
7826:
7827: * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7828: version based on setresuid() or setreuid() when possible since
7829: that allows us to support the stay_setuid option and we always
7830: know exactly what the semantics will be (various Linux kernels
7831: have broken POSIX saved uid support).
7832:
7833: 2002-11-22 14:08 millert
7834:
7835: * config.h.in, configure: regen from configure.in
7836:
7837: 2002-11-22 14:07 millert
7838:
7839: * configure.in: Add checks for setresuid() and a way to disable
7840: using it
7841:
7842: 2002-11-22 14:05 millert
7843:
7844: * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7845: or setre[ug]id(). The new set_perms stuff only uses things it
7846: knows are there.
7847:
7848: 2002-11-22 13:33 millert
7849:
7850: * sudo.c: Before exec, restore state of signal handlers to be the
7851: same as when we were initialy invoked instead of just reseting to
7852: SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7853: patch from Paul Markham.
7854:
7855: 2002-11-22 13:23 millert
7856:
7857: * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7858: message when sudo is run by root and no_root_sudo is set
7859:
7860: 2002-09-19 17:27 millert
7861:
7862: * README: update ftp link for bison
7863:
7864: 2002-07-20 08:30 millert
7865:
7866: * set_perms.c: Error out if setusercontext() fails and the runas
7867: user is not root.
7868:
7869: 2002-05-20 16:51 millert
7870:
7871: * auth/securid5.c: Fix rcsid
7872:
7873: 2002-05-20 16:50 millert
7874:
7875: * configure.in: Fix SecurID API test
7876:
7877: 2002-05-17 13:20 millert
7878:
7879: * env.c: typo in comment
7880:
7881: 2002-05-17 13:20 millert
7882:
7883: * configure.in: securid5 stuff needs pthreads. Just adding
7884: -lpthread is suboptimal but I don't see a better way at the
7885: moment.
7886:
7887: 2002-05-17 13:04 millert
7888:
7889: * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7890: Michael Stroucken
7891:
7892: 2002-05-17 13:02 millert
7893:
7894: * configure.in: Add check for SecurID 5.0 API
7895:
7896: 2002-05-08 16:46 millert
7897:
7898: * strerror.c: We actually do still need config.h to get the 'const'
7899: definition for K&R C.
7900:
7901: 2002-05-05 16:43 millert
7902:
7903: * configure: regen with autoconf 2.5.3
7904:
7905: 2002-05-05 16:25 millert
7906:
7907: * configure.in: Don't set sysconfdir to '/etc' if the user has
7908: specified a --prefix.
7909:
7910: 2002-05-05 16:14 millert
7911:
7912: * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7913: don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7914: to workaround a bug
7915:
7916: 2002-05-05 15:58 millert
7917:
7918: * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7919: dump_defaults() knows how to dump lists.
7920:
7921: 2002-05-04 21:31 millert
7922:
7923: * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7924: INSTALL.binary, README: ++version
7925:
7926: 2002-05-04 20:57 millert
7927:
7928: * sudoers.pod: document timestampowner
7929:
7930: 2002-05-04 20:45 millert
7931:
7932: * check.c: Don't call set_perms() when doing timestamp stuff unless
7933: timestamp_uid != 0.
7934:
7935: 2002-05-04 20:43 millert
7936:
7937: * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7938: testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7939: is no longer used
7940:
7941: 2002-05-03 18:48 millert
7942:
7943: * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7944: timestamp dirs. This allows the timestamp dir to be shared via
7945: NFS (though this is not recommended).
7946:
7947: 2002-05-03 18:47 millert
7948:
7949: * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7950: of the authentication timestamp dir"
7951:
7952: 2002-05-02 15:40 millert
7953:
7954: * env.c: Don't try to pre-compute the size of the new envp, just
7955: allocate space up front and realloc as needed. Changes to the
7956: new env pointer must all be made through insert_env() which now
7957: keeps track of spaced used and allocates as needed.
7958:
7959: 2002-04-26 15:12 millert
7960:
7961: * configure: regen
7962:
7963: 2002-04-26 15:12 millert
7964:
7965: * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7966:
7967: 2002-04-25 11:36 millert
7968:
7969: * INSTALL.binary, README: ++version
7970:
7971: 2002-04-25 11:35 millert
7972:
7973: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7974: visudo.man.in, configure: regen
7975:
7976: 2002-04-25 11:31 millert
7977:
7978: * CHANGES, RUNSON, TODO: Sync with 1.6.6
7979:
7980: 2002-04-25 11:30 millert
7981:
7982: * check.c: The the loop used to expand %h and %u, the lastchar
7983: variable was not being initialized. This means that if the last
7984: char in the prompt is '%' and the first char is 'h' or 'u' a
7985: extra copy of the host or user name would be copied, for which
7986: space had not been allocated.
7987:
7988: 2002-04-18 11:41 millert
7989:
7990: * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7991: version to 1.6.6
7992:
7993: 2002-04-18 11:39 millert
7994:
7995: * auth/afs.c: #undef VOID to get rid of an AFS warning
7996:
7997: 2002-04-18 11:38 millert
7998:
7999: * env.c: Use easprintf instead of emalloc + sprintf for some
8000: things.
8001:
8002: 2002-03-15 19:45 millert
8003:
8004: * lex.yy.c: regen
8005:
8006: 2002-03-15 19:44 millert
8007:
8008: * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
8009: Jepeway's email address so people don't bug him ;-)
8010:
8011: 2002-03-11 22:19 millert
8012:
8013: * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
8014: and also call endgrent() at the same time.
8015:
8016: 2002-02-21 22:23 millert
8017:
8018: * INSTALL: Make it clear which configure options take arguments.
8019:
8020: 2002-01-25 13:38 millert
8021:
8022: * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
8023: is no RLIM_INFINITY, just pretend it is -1. This works because
8024: we only check for RLIM_INFINITY and do not set anything to that
8025: value.
8026:
8027: 2002-01-22 11:43 millert
8028:
8029: * auth/pam.c: Zero and free allocated memory when there is a
8030: conversation error.
8031:
8032: 2002-01-21 22:37 millert
8033:
8034: * auth/bsdauth.c: Use sigaction() not signal()
8035:
8036: 2002-01-21 22:26 millert
8037:
8038: * INSTALL: Mention that some linux kernels have broken POSIX saved
8039: ID support
8040:
8041: 2002-01-21 21:03 millert
8042:
8043: * CHANGES: checkpoint for 1.6.5p2
8044:
8045: 2002-01-21 21:01 millert
8046:
8047: * configure: regen
8048:
8049: 2002-01-21 21:01 millert
8050:
8051: * configure.in: Add --disable-setreuid flag
8052:
8053: 2002-01-21 21:00 millert
8054:
8055: * INSTALL: Document new --disable-setreuid option and change
8056: description for --disable-saved-ids to match new error message.
8057:
8058: 2002-01-21 21:00 millert
8059:
8060: * set_perms.c: fatal() now takes an argument that determines
8061: whether or not to call perror().
8062:
8063: 2002-01-21 20:58 millert
8064:
8065: * PORTING, TROUBLESHOOTING: Update for new error messages from
8066: set_perms()
8067:
8068: 2002-01-21 17:46 millert
8069:
8070: * auth/pam.c: Make this compile w/o warnings
8071:
8072: 2002-01-21 17:36 millert
8073:
8074: * auth/pam.c: Mention that we can't use pam_acct_mgmt()
8075:
8076: 2002-01-21 17:25 millert
8077:
8078: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
8079: was not zeroed after use when AIX authentication, BSD
8080: authentication, FWTK or PAM was in use.
8081:
8082: 2002-01-20 14:21 millert
8083:
8084: * auth/pam.c: Avoid giving PAM a NULL password response, use the
8085: empty string instead. This avoids a log warning when the user
8086: hits ^C at the password prompt when PAM is in use.
8087:
8088: 2002-01-19 19:46 millert
8089:
8090: * auth/pam.c: Don't check the return value of pam_setcred(). In
8091: Linux-PAM 0.75 pam_setcred() returns the last saved return code,
8092: not the return code for the setcred module. Because we haven't
8093: called pam_authenticate(), this is not set and so pam_setcred()
8094: returns PAM_PERM_DENIED.
8095:
8096: 2002-01-19 19:43 millert
8097:
8098: * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
8099: and a directory.
8100:
8101: 2002-01-18 14:18 millert
8102:
8103: * configure: regen
8104:
8105: 2002-01-18 14:18 millert
8106:
8107: * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
8108: has a bogus setreuid() o new NetBSD has a real setreuid() o add
8109: check for freeifaddrs() if getifaddrs() exists.
8110:
8111: 2002-01-18 14:17 millert
8112:
8113: * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
8114: so add a test for that and if it is not present just use free().
8115:
8116: 2002-01-17 11:30 millert
8117:
8118: * CHANGES, RUNSON: Checkpoint for 1.6.5p1
8119:
8120: 2002-01-17 10:56 millert
8121:
8122: * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
8123: skeyaccess() denies access to normal passwords, not AUTH_FATAL
8124: (which just causes an exit).
8125:
8126: 2002-01-17 10:35 millert
8127:
8128: * visudo.c: Don't use memory after it has been freed.
8129:
8130: 2002-01-17 00:24 millert
8131:
8132: * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
8133: Patch from Phillip E. Lobbes
8134:
8135: 2002-01-16 20:00 millert
8136:
8137: * BUGS: ++version
8138:
8139: 2002-01-16 19:53 millert
8140:
8141: * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
8142:
8143: 2002-01-16 18:37 millert
8144:
8145: * configure: regen
8146:
8147: 2002-01-16 18:37 millert
8148:
8149: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
8150: version 1.6.5
8151:
8152: 2002-01-16 18:37 millert
8153:
8154: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8155: visudo.man.in: sudo version 1.6.5
8156:
8157: 2002-01-16 16:28 millert
8158:
8159: * logging.c: o when invoking the mailer as root use a hard-coded
8160: environment that doesn't include any info from the user's
8161: environment. Basically paranoia.
8162:
8163: o Add support for the NO_ROOT_MAILER compile-time option and run
8164: the mailer as the user and not root if NO_ROOT_MAILER is
8165: defined.
8166:
8167: 2002-01-16 16:27 millert
8168:
8169: * set_perms.c, sudo.h: Bring back PERM_FULL_USER
8170:
8171: 2002-01-16 16:26 millert
8172:
8173: * configure: regen
8174:
8175: 2002-01-16 16:26 millert
8176:
8177: * version.h: version 1.6.5
8178:
8179: 2002-01-16 16:26 millert
8180:
8181: * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
8182: option to run the mailer as the user and not root.
8183:
8184: 2002-01-16 12:44 millert
8185:
8186: * CHANGES: checkpoint for 1.6.4p2
8187:
8188: 2002-01-15 19:22 millert
8189:
8190: * PORTING: Mention the "seteuid(0): Operation not permitted"
8191: problem here too just for good measure.
8192:
8193: 2002-01-15 18:43 millert
8194:
8195: * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
8196: preserved from the user's environment instead of being reset
8197: based on the passwd database when the "env_reset" option was
8198: used. Now it is reset as it should be.
8199:
8200: 2002-01-15 17:47 millert
8201:
8202: * configure: regen
8203:
8204: 2002-01-15 17:47 millert
8205:
8206: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
8207: sudo.c: Add a configure option to turn off use of POSIX saved IDs
8208:
8209: 2002-01-15 15:48 millert
8210:
8211: * configure: regen
8212:
8213: 2002-01-15 15:48 millert
8214:
8215: * configure.in: add --with-efence option
8216:
8217: 2002-01-15 15:39 millert
8218:
8219: * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
8220: problem where "sudo -l" would not work if always_set_home was
8221: set.
8222:
8223: 2002-01-15 13:16 millert
8224:
8225: * lex.yy.c: regen
8226:
8227: 2002-01-15 13:16 millert
8228:
8229: * parse.lex: Quoted commas were not being treated correctly in
8230: command line arguments.
8231:
8232: 2002-01-14 20:53 millert
8233:
8234: * sudo.c: o Move the call to rebuild_env() until after
8235: MODE_RESET_HOME is set. Otherwise, the set_home option has no
8236: effect.
8237:
8238: o Fix use of freed memory when the "fqdn" flag is set. This was
8239: introduced by the fix for the "segv when gethostbynam() fails"
8240: bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8241: not set so there is no need to check the "fqdn" flag in
8242: set_fqdn() itself.
8243:
8244: 2002-01-14 20:45 millert
8245:
8246: * env.c: Add 'continue' statements to optimize the switch
8247: statement. From Solar.
8248:
8249: 2002-01-13 13:42 millert
8250:
8251: * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8252:
8253: 2002-01-13 13:36 millert
8254:
8255: * sudoers.pod: Add caveat about stay_setuid flag
8256:
8257: 2002-01-13 13:29 millert
8258:
8259: * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8260: is not set, set all uids to 0 and use set_perms_fallback().
8261:
8262: 2002-01-13 13:28 millert
8263:
8264: * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8265: used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8266:
8267: 2002-01-13 13:27 millert
8268:
8269: * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8270: mailer since we never want to run the mailer setuid.
8271:
8272: 2002-01-12 17:55 millert
8273:
8274: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8275: visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8276:
8277: 2002-01-12 14:00 millert
8278:
8279: * Makefile.in, Makefile.binary: Fix mansect substitution
8280:
8281: 2002-01-12 13:15 millert
8282:
8283: * Makefile.in: Substitute man sections in Makefile.binary
8284:
8285: 2002-01-12 13:15 millert
8286:
8287: * Makefile.binary: Sync install targets with Makefile.in and
8288: substitute in man sections.
8289:
8290: 2002-01-12 13:09 millert
8291:
8292: * INSTALL, INSTALL.binary: version is 1.6.4
8293:
8294: 2002-01-12 12:59 millert
8295:
8296: * Makefile.in: Repair bindist target
8297:
8298: 2002-01-12 11:43 millert
8299:
8300: * CHANGES: sync for 1.6.4
8301:
8302: 2002-01-10 13:00 millert
8303:
8304: * install-sh: Fix case where neither whoami nor id are found
8305:
8306: 2002-01-09 12:35 millert
8307:
8308: * install-sh: If neither whoami nor id exists, just assume we are
8309: root.
8310:
8311: 2002-01-09 11:56 millert
8312:
8313: * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8314: to be needed on AIX which for some reason isn't pulling in the
8315: malloc prototype.
8316:
8317: 2002-01-08 10:00 millert
8318:
8319: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8320:
8321: 2002-01-08 09:21 millert
8322:
8323: * CHANGES: checkpoint
8324:
8325: 2002-01-08 09:20 millert
8326:
8327: * sudo.c: Defer assigning new environment until right before the
8328: exec.
8329:
8330: 2002-01-08 09:08 millert
8331:
8332: * parse.c: kill extra blank line
8333:
8334: 2002-01-07 13:59 millert
8335:
8336: * configure: regen
8337:
8338: 2002-01-07 13:59 millert
8339:
8340: * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8341: motorola gcc-derived compiler doesn't recognise -O2.
8342:
8343: 2002-01-06 23:02 millert
8344:
8345: * HISTORY: Clarify origins of Root Group sudo a bit based on info
8346: from billp@rootgroup.com
8347:
8348: 2002-01-02 22:41 millert
8349:
8350: * LICENSE: 2002
8351:
8352: 2002-01-02 22:26 millert
8353:
8354: * CHANGES: checkpoint for 1.6.4rc1
8355:
8356: 2002-01-02 17:40 millert
8357:
8358: * config.h.in: now generated via autoheader
8359:
8360: 2002-01-02 17:40 millert
8361:
8362: * configure: regen
8363:
8364: 2002-01-02 17:37 millert
8365:
8366: * compat.h: Move in some stuff that was previously in config.h.
8367:
8368: 2002-01-02 17:36 millert
8369:
8370: * configure.in, aclocal.m4: Add info for autoheader.
8371:
8372: 2002-01-01 16:53 millert
8373:
8374: * Makefile.in: o Add DESTDIR support
8375: o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8376: non-root installs
8377:
8378: 2002-01-01 16:48 millert
8379:
8380: * install-sh: Add -M option (like -m but only for root) If we can't
8381: find "whoami", use "id" w/ some sed.
8382:
8383: 2002-01-01 14:01 millert
8384:
8385: * configure: regen
8386:
8387: 2002-01-01 14:00 millert
8388:
8389: * configure.in: allow user to always override mansectsu and
8390: mansectform
8391:
8392: 2001-12-31 17:05 millert
8393:
8394: * mkinstalldirs: update from autoconf 2.52
8395:
8396: 2001-12-31 17:03 millert
8397:
8398: * config.guess, config.sub: Update from autoconf 2.52
8399:
8400: 2001-12-31 16:57 millert
8401:
8402: * configure: regen with autoconf 2.52
8403:
8404: 2001-12-31 16:57 millert
8405:
8406: * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8407: compiler in ANSI mode
8408: o Remove compiler-specific checks for HP-UX now that we use
8409: AC_PROG_CC_STDC
8410:
8411: 2001-12-31 12:19 millert
8412:
8413: * RUNSON: Checkpoint
8414:
8415: 2001-12-31 12:18 millert
8416:
8417: * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8418: for the target user; on Linux this often sets resource limits.
8419: o When calling pam_end(), try to convert the auth->result to a
8420: PAM_FOO value. This is a hack--we really need to stash the
8421: last PAM_FOO value received and use that instead.
8422:
8423: 2001-12-31 12:18 millert
8424:
8425: * set_perms.c, sudo.h: o Add pam_prep_user function to call
8426: pam_setcred() for the target user; on Linux this often sets
8427: resource limits.
8428:
8429: 2001-12-31 00:53 millert
8430:
8431: * env.c: Fix off by one error in number of bytes allocated via
8432: malloc (does not affected any released version of sudo).
8433:
8434: 2001-12-30 17:12 millert
8435:
8436: * lex.yy.c: regen
8437:
8438: 2001-12-30 17:12 millert
8439:
8440: * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8441: variable w/o requiring that they be quoted.
8442:
8443: 2001-12-30 14:26 millert
8444:
8445: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8446: quotes are needed when adding/deleting/assigning a single value
8447: to a list.
8448:
8449: 2001-12-30 13:58 millert
8450:
8451: * Makefile.in: Don't rely on mkdefaults being executable, call perl
8452: explicitly.
8453:
8454: 2001-12-30 13:41 millert
8455:
8456: * parse.yacc: Remove some XXX that are no longer relevant.
8457:
8458: 2001-12-30 13:40 millert
8459:
8460: * defaults.c: o Roll our own loop instead of using strpbrk() for
8461: better grokability o When adding to a list we must malloc() and
8462: use memcpy(), not strdup() since we must only copy len bytes
8463: from str.
8464:
8465: 2001-12-21 16:49 millert
8466:
8467: * parse.yacc: typo in comment
8468:
8469: 2001-12-19 11:50 millert
8470:
8471: * CHANGES: checkpoint
8472:
8473: 2001-12-19 10:56 millert
8474:
8475: * configure: regen
8476:
8477: 2001-12-19 10:56 millert
8478:
8479: * configure.in: avoid the -g flag unless --with-devel was specified
8480:
8481: 2001-12-19 10:04 millert
8482:
8483: * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8484: from the tarball
8485:
8486: 2001-12-19 09:46 millert
8487:
8488: * Makefile.in: def_data.c was missing
8489:
8490: 2001-12-18 12:42 millert
8491:
8492: * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8493: case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8494: in keep_env
8495:
8496: 2001-12-17 20:48 millert
8497:
8498: * TODO: Another TODO item
8499:
8500: 2001-12-17 19:50 millert
8501:
8502: * sudoers: Add comment for Default section so folks know where it
8503: should go.
8504:
8505: 2001-12-17 18:56 millert
8506:
8507: * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8508: case
8509:
8510: 2001-12-17 18:35 millert
8511:
8512: * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8513:
8514: 2001-12-17 18:33 millert
8515:
8516: * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8517: o a User_List can not contain a uid
8518: o mention that the Defaults section should come after Alias
8519: definitions but before the user specifications
8520:
8521: 2001-12-15 11:51 millert
8522:
8523: * sudoers.cat, sudoers.man.in: regen
8524:
8525: 2001-12-15 11:51 millert
8526:
8527: * sudoers.pod: Fix listpw and verifypw sections, they were not
8528: being formatted properly.
8529:
8530: 2001-12-15 11:39 millert
8531:
8532: * sudoers.cat, sudoers.man.in: regen
8533:
8534: 2001-12-15 11:38 millert
8535:
8536: * sudoers.pod: fix typos
8537:
8538: 2001-12-15 10:57 millert
8539:
8540: * configure: regen
8541:
8542: 2001-12-15 10:57 millert
8543:
8544: * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8545: rolling our own
8546:
8547: 2001-12-15 10:33 millert
8548:
8549: * README: Reference sudo.ws not courtesan.com
8550:
8551: 2001-12-15 10:29 millert
8552:
8553: * PORTING: Add notes on shadow passwords
8554:
8555: 2001-12-15 00:48 millert
8556:
8557: * BUGS: In list mode (sudo -l), characters escaped with a backslash
8558: are shown verbatim with the backslash.
8559:
8560: 2001-12-15 00:44 millert
8561:
8562: * sudoers: Add simple examples from OpenBSD (Marc Espie)
8563:
8564: 2001-12-15 00:40 millert
8565:
8566: * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8567: SIGTSTP.
8568:
8569: 2001-12-14 21:53 millert
8570:
8571: * CHANGES: minor prettyification
8572:
8573: 2001-12-14 21:43 millert
8574:
8575: * CHANGES: Updated change log
8576:
8577: 2001-12-14 21:27 millert
8578:
8579: * testsudoers.c: Fix CIDR handling here too.
8580:
8581: 2001-12-14 21:21 millert
8582:
8583: * auth/pam.c: Apparently a NULL response is OK
8584:
8585: 2001-12-14 21:19 millert
8586:
8587: * TODO: Checkpoint for upcoming beta release
8588:
8589: 2001-12-14 21:17 millert
8590:
8591: * TROUBLESHOOTING: Many people believe that adding a runas spec
8592: should obviate the need for the -u flag. It does not.
8593:
8594: 2001-12-14 21:11 millert
8595:
8596: * RUNSON: checkpoint update for upcoming 1.6.4 beta
8597:
8598: 2001-12-14 20:44 millert
8599:
8600: * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8601: HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8602: now
8603:
8604: 2001-12-14 20:07 millert
8605:
8606: * PORTING: Add signals section
8607:
8608: 2001-12-14 20:00 millert
8609:
8610: * configure: regen
8611:
8612: 2001-12-14 20:00 millert
8613:
8614: * configure.in: Fix check for sigaction_t
8615:
8616: 2001-12-14 19:45 millert
8617:
8618: * sudo.c: XXX - should call find_path() as runas user, not root.
8619: Can't do that until the parser changes though.
8620:
8621: 2001-12-14 19:38 millert
8622:
8623: * sudo.c: If find_path() fails as root, try again as the invoking
8624: user (useful for NFS). Idea from Chip Capelik.
8625:
8626: 2001-12-14 19:28 millert
8627:
8628: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8629: after pod file changes
8630:
8631: 2001-12-14 19:24 millert
8632:
8633: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8634: sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8635: Previously sudo would not call initgroups() if the target user
8636: was root. Now it always calls initgroups() unless the -P command
8637: line option or the "preserve_groups" sudoers option is set. Idea
8638: from TJ Saunders.
8639:
8640: 2001-12-14 18:38 millert
8641:
8642: * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8643:
8644: 2001-12-14 18:33 millert
8645:
8646: * logging.c: Fix compilation on K&C
8647:
8648: 2001-12-14 18:14 millert
8649:
8650: * configure: regen
8651:
8652: 2001-12-14 18:14 millert
8653:
8654: * configure.in: Add check for sigaction_t -- IRIX already defines
8655: this so don't redefine it.
8656:
8657: 2001-12-14 17:15 millert
8658:
8659: * snprintf.c: fix typo
8660:
8661: 2001-12-14 17:12 millert
8662:
8663: * interfaces.c: need stdlib.h here too
8664:
8665: 2001-12-14 15:31 millert
8666:
8667: * configure: regen
8668:
8669: 2001-12-14 15:31 millert
8670:
8671: * configure.in: Remove redundant checks for string.h, strings.h and
8672: unistd.h
8673:
8674: 2001-12-14 15:29 millert
8675:
8676: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8677: visudo.man.in: Regen from pod files
8678:
8679: 2001-12-14 15:03 millert
8680:
8681: * BUGS: Update for 1.6.4
8682:
8683: 2001-12-14 14:59 millert
8684:
8685: * configure, lex.yy.c: regen
8686:
8687: 2001-12-14 14:56 millert
8688:
8689: * strerror.c: Return EINVAL if errnum > sys_nerr
8690:
8691: 2001-12-14 14:54 millert
8692:
8693: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8694: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8695: sudo.pod, auth/sudo_auth.h: o Update copyright year
8696:
8697: 2001-12-14 14:54 millert
8698:
8699: * configure.in: o Don't define STDC_HEADERS unconditionally for
8700: IRIX o Update copyright year
8701:
8702: 2001-12-14 14:53 millert
8703:
8704: * README: update version
8705:
8706: 2001-12-14 14:52 millert
8707:
8708: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8709: fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8710: logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8711: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8712: utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8713: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8714: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8715: auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8716: STDC_HEADERS define properly o Update copyright year
8717:
8718: 2001-12-14 01:53 millert
8719:
8720: * configure: regen
8721:
8722: 2001-12-14 01:53 millert
8723:
8724: * tgetpass.c: flags set in signal handlers should be volatile
8725: sig_atomic_t
8726:
8727: 2001-12-14 01:52 millert
8728:
8729: * config.h.in, configure.in: Add checks for volatile and
8730: sig_atomic_t
8731:
8732: 2001-12-14 01:42 millert
8733:
8734: * lex.yy.c, configure: regen
8735:
8736: 2001-12-14 01:40 millert
8737:
8738: * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8739: find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8740: option since it cannot work with the existing parser.
8741:
8742: 2001-12-14 01:26 millert
8743:
8744: * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8745:
8746: 2001-12-14 01:24 millert
8747:
8748: * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8749: not listed in env_keep o If no PATH is in the environment use a
8750: default value o If TERM is not set in the non-reset case also
8751: give it a default value.
8752:
8753: 2001-12-14 01:17 millert
8754:
8755: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8756: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8757: on systems that define in paths.h
8758:
8759: 2001-12-14 01:15 millert
8760:
8761: * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8762: skeyaccess(3) if it is present in libskey.
8763:
8764: 2001-12-12 21:42 millert
8765:
8766: * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8767:
8768: 2001-12-12 21:24 millert
8769:
8770: * parse.lex: '\\' is a perfectly legal character to have in a
8771: command line argument.
8772:
8773: 2001-12-12 20:24 millert
8774:
8775: * sudo.c: o Defer call to set_fqdn() until it is safe to use
8776: log_error() o Don't print errno string value if gethostbyname
8777: fails, it is not relevant
8778:
8779: 2001-12-12 20:07 millert
8780:
8781: * parse.c: Fix CIDR -> in_addr_t conversion.
8782:
8783: 2001-12-12 16:21 millert
8784:
8785: * sudoers.pod: Remove an extra "User_List" in the User_Spec
8786: definition From ybertrand AT snoopymail.com
8787:
8788: 2001-12-12 16:00 millert
8789:
8790: * parse.c: Make 'listpw=never' work for users who are not
8791: explicitly mentioned in sudoers.
8792:
8793: 2001-12-12 15:40 millert
8794:
8795: * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8796:
8797: 2001-12-12 15:34 millert
8798:
8799: * sudoers.pod: Document new list Defaults type and convert env_keep
8800: and env_delete to lists. Document new env_check option.
8801:
8802: 2001-12-12 15:11 millert
8803:
8804: * lex.yy.c, sudo.tab.h: regen parser
8805:
8806: 2001-12-12 14:56 millert
8807:
8808: * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8809: a Runas spec to #[0-9-]+.
8810:
8811: 2001-12-12 14:55 millert
8812:
8813: * configure: regen
8814:
8815: 2001-12-12 14:55 millert
8816:
8817: * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8818:
8819: 2001-12-12 14:43 millert
8820:
8821: * config.h.in, configure.in: Add check for skeyaccess(3)
8822:
8823: 2001-12-11 19:47 millert
8824:
8825: * visudo.pod: Document new -c, -f, and -q options
8826:
8827: 2001-12-11 19:41 millert
8828:
8829: * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8830: use getopt(3)
8831:
8832: 2001-12-11 19:31 millert
8833:
8834: * configure: regen
8835:
8836: 2001-12-11 19:31 millert
8837:
8838: * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8839: a replacement macro if it doesn't exist.
8840:
8841: 2001-12-11 18:22 millert
8842:
8843: * visudo.c: In check-only mode, don't create sudoers if it does not
8844: already exist.
8845:
8846: 2001-12-11 18:06 millert
8847:
8848: * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8849: variable name
8850: o Add support for "+=" and "-=" list operators
8851: o replace some 1 and 0 with TRUE and FALSE for greater
8852: legibility.
8853:
8854: 2001-12-11 18:05 millert
8855:
8856: * parse.lex: o Use exclusive start conditions to remove some
8857: ambiguity in the
8858: lexer. Also reorder some things for clarity.
8859: o Add support for "+=" and "-=" list operators.
8860: o Use the new DEFVAR token to denote a Defaults variable name.
8861:
8862: 2001-12-11 18:03 millert
8863:
8864: * sudo.h: Prototype init_envtables()
8865:
8866: 2001-12-11 18:02 millert
8867:
8868: * env.c: o Convert environment handling to use lists instead of
8869: strings.
8870: This greatly simplifies routines that need to do "foreach"
8871: type
8872: operations.
8873: o Add new init_envtables() function to set env_check and
8874: env_delete
8875: defaults based on initial_badenv_table and
8876: initial_checkenv_table
8877: (formerly sudo_badenv_table).
8878:
8879: 2001-12-11 18:00 millert
8880:
8881: * defaults.c, defaults.h: o Add a new LIST type and functions to
8882: manipulate it.
8883: o This is for use with environment handling variables.
8884: o Call new init_envtables() routine inside init_defaults() to
8885: initialize the environment lists.
8886:
8887: 2001-12-11 17:57 millert
8888:
8889: * def_data.c, def_data.h, def_data.in: Convert environment options
8890: to use the new LIST type and add a new one, env_check that only
8891: deletes if the sanity check fails.
8892:
8893: 2001-12-11 17:55 millert
8894:
8895: * testsudoers.c: Add dummy version of init_envtables()
8896:
8897: 2001-12-11 17:53 millert
8898:
8899: * parse.yacc: honor quiet mode
8900:
8901: 2001-12-11 17:51 millert
8902:
8903: * visudo.c: Add check-only mode
8904:
8905: 2001-12-10 20:27 millert
8906:
8907: * mkdefaults: Fix generation of entries with NULL descriptions.
8908:
8909: 2001-12-09 00:27 millert
8910:
8911: * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8912:
8913: 2001-12-09 00:20 millert
8914:
8915: * sudo.c: Must reset signal handlers before we exec
8916:
8917: 2001-12-09 00:16 millert
8918:
8919: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8920: carefule now that tgetpass() can return NULL (user hit ^C). PAM
8921: version needs testing. Set SIGTSTP to SIG_DFL during password
8922: entry so user can suspend us.
8923:
8924: 2001-12-09 00:14 millert
8925:
8926: * tgetpass.c: Add support for interrupting/suspending tgetpass via
8927: keyboard input. If you suspend sudo from the password prompt and
8928: resume it will re-prompt you.
8929:
8930: 2001-12-09 00:09 millert
8931:
8932: * sudo.c: Don't block keyboard interrupt signals, just set them to
8933: SIG_IGN.
8934:
8935: 2001-12-08 14:48 millert
8936:
8937: * config.h.in: add back HAVE_SIGACTION
8938:
8939: 2001-12-08 14:44 millert
8940:
8941: * configure: regen
8942:
8943: 2001-12-08 14:44 millert
8944:
8945: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8946: POSIX_SIGNALS define and old signal support now that we emulate
8947: POSIX ones Also be sure to correctly initialize struct sigaction.
8948:
8949: 2001-12-08 14:42 millert
8950:
8951: * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8952: wrapper.
8953:
8954: 2001-12-08 14:39 millert
8955:
8956: * compat.h: Add scaffolding for POSIX signal emulation
8957:
8958: 2001-12-08 14:36 millert
8959:
8960: * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8961: since we don't include stdio.h
8962:
8963: 2001-12-08 14:23 millert
8964:
8965: * sigaction.c: Emulate sigaction() using sigvec()
8966:
8967: 2001-11-12 19:32 millert
8968:
8969: * sudoers.pod: Document new behavior of negative values of
8970: timestamp_timeout Fix a typo
8971:
8972: 2001-11-12 19:31 millert
8973:
8974: * sudo.pod: Add security note about command not being logged after
8975: 'sudo su' and friends.
8976:
8977: 2001-11-12 19:19 millert
8978:
8979: * sudo.pod: Mention that -V prints default values when run as root,
8980: including the list of environment variables to clear.
8981:
8982: 2001-11-12 19:14 millert
8983:
8984: * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8985: quoting of C<> entries.
8986:
8987: 2001-11-12 13:12 millert
8988:
8989: * def_data.c, def_data.h, def_data.in, sudoers.pod,
8990: auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8991: behavior to also send mail when the password is wrong
8992:
8993: 2001-11-12 13:08 millert
8994:
8995: * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8996: is run by root.
8997:
8998: 2001-11-11 23:52 millert
8999:
9000: * sudoers.pod: document env_delete
9001:
9002: 2001-11-11 23:51 millert
9003:
9004: * env.c: Add support for '*' in env_keep when not resetting the
9005: environment (ie: the normal case).
9006:
9007: 2001-11-11 23:47 millert
9008:
9009: * env.c: Add env_delete variable that lets the user replace/add to
9010: the bad_env_table. Allow '*' wildcard in env_keep entries.
9011:
9012: 2001-11-06 13:59 millert
9013:
9014: * mkinstalldirs: Force umask to 022 to guarantee sane directory
9015: permissions.
9016:
9017: 2001-11-02 18:09 millert
9018:
9019: * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
9020: dependency
9021:
9022: 2001-11-02 17:25 millert
9023:
9024: * mkdefaults: fix breakage in last commit
9025:
9026: 2001-11-02 17:18 millert
9027:
9028: * Makefile.in: acsite.m4 -> aclocal.m4
9029:
9030: 2001-11-02 15:59 millert
9031:
9032: * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
9033: previous commit
9034:
9035: 2001-11-02 15:57 millert
9036:
9037: * def_data.c: regenerated from def_data.in
9038:
9039: 2001-11-02 15:56 millert
9040:
9041: * check.c, defaults.c, defaults.h: Add new T_UINT type that most
9042: things use instead of T_INT If timestamp_timeout is < 0 then
9043: treat the ticket as never expiring (to be expired manually by the
9044: user).
9045:
9046: 2001-11-02 15:51 millert
9047:
9048: * def_data.in: change most T_INT -> T_UINT
9049:
9050: 2001-11-02 15:51 millert
9051:
9052: * mkdefaults: fix warning when no args
9053:
9054: 2001-11-02 12:52 millert
9055:
9056: * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
9057: call _exit() if we are a signal handler. We no longer print the
9058: signal number but the user can just check the exit value for
9059: that.
9060:
9061: 2001-10-16 01:35 millert
9062:
9063: * logging.c: when setting up pipes in child process check for case
9064: where stdin == pipe fd 0
9065:
9066: 2001-10-11 13:20 millert
9067:
9068: * visudo.c: Ignore editor exit value since XPG4 says vi's exit
9069: value is the count of editing errors made (failed searches, etc).
9070:
9071: 2001-10-05 16:39 millert
9072:
9073: * configure: regen
9074:
9075: 2001-10-05 16:39 millert
9076:
9077: * configure.in: sco now is identified by config.guess as *-sco-*
9078:
9079: 2001-10-05 16:24 millert
9080:
9081: * configure.in: Check for getspnam() in -lgen if not in -lc for
9082: UnixWare.
9083:
9084: 2001-09-17 21:48 millert
9085:
9086: * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
9087:
9088: 2001-09-17 21:32 millert
9089:
9090: * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
9091:
9092: 2001-08-28 10:26 millert
9093:
9094: * sudoers.pod: Missing word (specify); krapht@secureops.com
9095:
9096: 2001-08-23 17:43 millert
9097:
9098: * sudo.c: If we fail to lookup a login class, apply the default
9099: one.
9100:
9101: 2001-08-23 17:42 millert
9102:
9103: * logging.c: In log_error() free message, not logline
9104: unconditionally, then free logline if it is not the same as
9105: message. No function change but this mirrors how they are
9106: allocated.
9107:
9108: 2001-07-16 23:33 millert
9109:
9110: * configure: regenerate
9111:
9112: 2001-07-16 23:33 millert
9113:
9114: * configure.in: remove some backslash quotes that are unneeded
9115:
9116: 2001-07-16 23:30 millert
9117:
9118: * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
9119: AC_LIBOBJ instead of changing LIBOBJS directly o Use
9120: AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
9121: AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
9122:
9123: 2001-07-16 23:28 millert
9124:
9125: * config.guess, config.sub: Updated from autoconf-2.50
9126:
9127: 2001-05-22 19:11 millert
9128:
9129: * README: Update mailing list section. We use mailman now, not
9130: majordomo.
9131:
9132: 2001-05-10 14:55 millert
9133:
9134: * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
9135: the shadow variants to make sure we don't inadvertantly leak an
9136: fd to the child. Apparently Linux's shadow routines leave the fd
9137: open even if you don't call setspent(). Reported by
9138: mike@gistnet.com; different patch used.
9139:
9140: 2001-04-12 21:43 millert
9141:
9142: * sudoers.pod: s/eg./e.g./
9143:
9144: 2001-04-12 21:42 millert
9145:
9146: * tgetpass.c: select() may return EAGAIN. If so, continue like we
9147: do for EINTR.
9148:
9149: 2001-04-12 21:41 millert
9150:
9151: * logging.c: Fix a non-exploitable buffer overflow in the word
9152: splitting code. This should really be rewritten.
9153:
9154: 2001-04-12 21:41 millert
9155:
9156: * Makefile.in: FAQ link goes away
9157:
9158: 2001-04-12 21:40 millert
9159:
9160: * INSTALL: Tell people to look in sample.syslog.conf for examples,
9161: not FAQ
9162:
9163: 2001-04-12 21:40 millert
9164:
9165: * TROUBLESHOOTING: Update list of env vars that are cleared
9166:
9167: 2001-04-12 21:36 millert
9168:
9169: * sudo.c: remove struct env_table decl since that stuff has all
9170: moved to env.c
9171:
9172: 2001-04-04 13:17 millert
9173:
9174: * fileops.c: Fix a pasto in flock-style unlocking and include
9175: <sys/file.h> for flock on older systems; twetzel@gwdg.de
9176:
9177: 2001-04-04 13:14 millert
9178:
9179: * configure: regen to get NeXT lockf/flock fix
9180:
9181: 2001-04-04 13:14 millert
9182:
9183: * configure.in: force NeXT to use flock since lockf is broken
9184:
9185: 2001-03-30 08:54 millert
9186:
9187: * check.c: Use stashed user_gid when checking against exempt gid
9188: since sudo sets its gid to a a value that makes sudoers readable.
9189: Previously if you used gid 0 as the exempt group everyone would
9190: be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
9191:
9192: 2001-03-29 13:14 millert
9193:
9194: * configure: regen
9195:
9196: 2001-03-29 13:08 millert
9197:
9198: * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
9199: aparently defines some types (such as ssize_t) therein.
9200:
9201: 2001-03-02 09:09 millert
9202:
9203: * defaults.c: Fix negation of paths in a boolean context. Problem
9204: found by apt@UH.EDU
9205:
9206: 2001-02-23 13:03 millert
9207:
9208: * visudo.c: pasto
9209:
9210: 2001-02-17 16:11 millert
9211:
9212: * visudo.c: SA_RESETHAND means the opposite of what I was
9213: thinking--oops To block all signals in old-style signals use ~0,
9214: not 0xffffffff
9215:
9216: 2001-02-04 11:16 millert
9217:
9218: * defaults.c: coerce difference of pointers to int when used in a
9219: string length printf format; deraadt@openbsd.org
9220:
9221: 2001-01-17 11:34 millert
9222:
9223: * visudo.c: Block all signals in Exit() to avoid a signal race.
9224: There is still a tiny window but I'm not going to worry about it.
9225:
9226: 2001-01-07 13:57 millert
9227:
9228: * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9229: Designer
9230:
9231: 2001-01-07 13:55 millert
9232:
9233: * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9234: from clobbering by isatty().
9235:
9236: 2000-12-30 20:39 millert
9237:
9238: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9239: Some defaults I_ defines got renamed.
9240:
9241: 2000-12-30 20:38 millert
9242:
9243: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9244: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9245: set_perms.c, sudo.c: Move defaults info into its own files from
9246: which we generate .h and .c files. This makes adding or
9247: rearranging variables much simpler.
9248:
9249: 2000-12-30 16:58 millert
9250:
9251: * configure, configure.in: fix typo in last commit
9252:
9253: 2000-12-30 16:55 millert
9254:
9255: * compat.h, config.h.in, configure, configure.in: Add check +
9256: emulation for setegid (like seteuid).
9257:
9258: 2000-12-30 16:22 millert
9259:
9260: * env.c: Make env_keep override badenv_table as documented Fix
9261: traversal of badenv_table (broken in last commit)
9262:
9263: 2000-12-29 22:59 millert
9264:
9265: * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9266: version of set_perms on systems w/o them. Rename
9267: set_perms_saved_uid() -> set_perms_posix() Make
9268: set_perms_setreuid simply be set_perms_fallback() and simply
9269: include the appropriate function at compile time (setreuid()
9270: vs. setuid()).
9271:
9272: 2000-12-29 22:45 millert
9273:
9274: * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9275: when env_reset is in effect
9276:
9277: 2000-12-29 22:29 millert
9278:
9279: * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9280: configure, configure.in, defaults.c, defaults.h, find_path.c,
9281: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9282: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9283: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9284: options: o stay_setuid - sudo will remain setuid if system has
9285: saved uids or setreuid(2) o env_reset - reset the environment to
9286: a sane default o env_keep - preserve environment variables that
9287: would otherwise be cleared
9288:
9289: No longer use getenv/putenv/setenv functions--do environment
9290: munging by hand. Potentially dangerous environment variables can
9291: be cleared only if they contain '/' pr '%' characters to protect
9292: buggy programs. Moved environment routines into env.c (new file)
9293:
9294: 2000-12-29 22:17 millert
9295:
9296: * INSTALL: Clear up --without-passwd description
9297:
9298: 2000-12-29 19:39 millert
9299:
9300: * sudo_setenv.c, putenv.c: We now build up a new environment from
9301: scratch and assign it to "environ".
9302:
9303: 2000-12-18 22:35 millert
9304:
9305: * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9306:
9307: 2000-12-14 23:19 millert
9308:
9309: * visudo.c: If there was a syntax error and the user just wants to
9310: quit, unlink sudoers if it is zero length.
9311:
9312: 2000-12-14 23:10 millert
9313:
9314: * visudo.c: 'Q' means ignore parse error, not 'q'
9315:
9316: 2000-12-14 22:57 millert
9317:
9318: * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9319: Dimitry Andric <dim@xs4all.nl>
9320:
9321: 2000-12-13 12:23 millert
9322:
9323: * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9324: ayamura@ayamura.org
9325:
9326: 2000-12-09 11:46 millert
9327:
9328: * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9329: Sanchez <wsanchez@apple.com>
9330:
9331: 2000-11-03 09:36 millert
9332:
9333: * sudo.c, visudo.c: Use exit(127), not exit(-1)
9334:
9335: 2000-11-03 00:37 millert
9336:
9337: * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9338: set_perms() to its own file and use POSIX saved uid or setreuid()
9339: if available.
9340:
9341: Added stay_setuid option for systems that have libraries that
9342: perform extra paranoia checks in system libraries for setuid
9343: programs (ie: anything with issetugid(2)).
9344:
9345: 2000-11-02 20:28 millert
9346:
9347: * sudo.c: strip more bits from the environment and add a facility
9348: for stripping things only if they contain '/' or '%' to address
9349: printf format string vulnerabilities in other programs.
9350:
9351: 2000-11-02 12:55 millert
9352:
9353: * configure: regen
9354:
9355: 2000-11-02 12:55 millert
9356:
9357: * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9358: the existence of strcasecmp().
9359:
9360: 2000-11-02 12:46 millert
9361:
9362: * configure: regen
9363:
9364: 2000-11-02 12:46 millert
9365:
9366: * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9367:
9368: 2000-11-01 10:22 millert
9369:
9370: * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9371:
9372: 2000-11-01 10:17 millert
9373:
9374: * configure: regen
9375:
9376: 2000-11-01 10:17 millert
9377:
9378: * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9379: since NCR systems have that instead of innetgr(3).
9380:
9381: 2000-10-31 14:16 millert
9382:
9383: * auth/securid.c: check return value of creadcfg() call sd_close()
9384: after sd_auth() store username in sd->username so we don't rely
9385: on the USER env variable
9386:
9387: 2000-10-29 23:00 millert
9388:
9389: * INSTALL: document --with-bsdauth
9390:
9391: 2000-10-29 22:57 millert
9392:
9393: * configure: regen
9394:
9395: 2000-10-29 22:56 millert
9396:
9397: * configure.in: --with-bsdauth assumes --with-logincap
9398:
9399: 2000-10-29 22:45 millert
9400:
9401: * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9402: challenge, if the user just hits return then reprompt with echo
9403: turned on.
9404:
9405: 2000-10-29 17:31 millert
9406:
9407: * sudo.c: Remove debugging code that should not have been
9408: committed, oops.
9409:
9410: 2000-10-29 17:31 millert
9411:
9412: * auth/bsdauth.c: Use lower-level routines and get the password
9413: ourselves. Checks for a challenge and if there is one echo is
9414: not turned off.
9415:
9416: 2000-10-29 17:30 millert
9417:
9418: * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9419: changes
9420:
9421: 2000-10-27 18:41 millert
9422:
9423: * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9424: fails by deferring the call to log_error() until things are
9425: better setup.
9426:
9427: Fix return value of set_loginclass() in non-BSD-auth case.
9428:
9429: Hard-code 'sudo' in the usage message so we can fit more options
9430: on a line
9431:
9432: 2000-10-27 18:35 millert
9433:
9434: * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9435:
9436: 2000-10-26 13:03 millert
9437:
9438: * sudo.cat, sudo.man.in: regen
9439:
9440: 2000-10-26 13:01 millert
9441:
9442: * sudo.pod: Document -a flag
9443:
9444: 2000-10-26 12:42 millert
9445:
9446: * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9447: sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9448: authentication.
9449:
9450: 2000-10-19 10:09 millert
9451:
9452: * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9453:
9454: 2000-10-12 09:49 millert
9455:
9456: * sudoers.pod: Mention negating umask
9457:
9458: 2000-10-12 01:30 millert
9459:
9460: * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9461:
9462: 2000-10-08 21:46 millert
9463:
9464: * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9465: history.
9466:
9467: 2000-10-08 12:25 millert
9468:
9469: * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9470:
9471: 2000-09-14 16:48 millert
9472:
9473: * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9474: alloc failure instead of returning -1.
9475:
9476: 2000-09-07 17:41 millert
9477:
9478: * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9479: for FreeBSD and possibly others.
9480:
9481: 2000-09-07 10:43 millert
9482:
9483: * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9484: it. This means that "%m" won't be expanded but we don't use that
9485: anyway since the logging routines may splat to stderr as well.
9486:
9487: 2000-09-06 21:35 millert
9488:
9489: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9490: sudoers.pod: Add always_set_home variable
9491:
9492: 2000-09-06 21:24 millert
9493:
9494: * configure, configure.in: Have to hard code default values in help
9495: since the defaults are set _after_ the help stuff.
9496:
9497: 2000-08-31 13:08 millert
9498:
9499: * lex.yy.c, parse.lex: Allow special characters (including '#') to
9500: be embedded in pathnames if quoted by a '\\'. The quoted chars
9501: will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9502: prints the '\\'.
9503:
9504: 2000-08-13 17:10 millert
9505:
9506: * install-sh: Better path searching for programs we need.
9507:
9508: 2000-08-13 17:10 millert
9509:
9510: * TROUBLESHOOTING: Add section on "C compiler cannot create
9511: executables" errors.
9512:
9513: 2000-08-13 17:10 millert
9514:
9515: * Makefile.binary, Makefile.in, version.h: Crank version
9516:
9517: 2000-08-13 17:09 millert
9518:
9519: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9520: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9521: visudo.man.in, visudo.pod: Substitute values from configure into
9522: man pages.
9523:
9524: 2000-08-12 16:48 millert
9525:
9526: * parse.c, sudo.c: The listpw and verifypw sudoers options would
9527: not take effect because the value of the default was checked
9528: *before* sudoers was parsed. Instead of passing in the value of
9529: PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9530: the check can be deferred until after sudoers is parsed.
9531:
9532: 2000-08-11 15:41 millert
9533:
9534: * tgetpass.c: When writing prompt, no need to write the NUL as
9535: well; hag@linnaean.org
9536:
9537: 2000-06-09 12:25 millert
9538:
9539: * install-sh: When looking for chown, check in /sbin too
9540:
9541: 2000-06-04 22:57 millert
9542:
9543: * visudo.c: Remove extraneous call to init_defaults() and set
9544: runas_user to NULL betweem parses so init_defaults will reset it
9545: each time, thus avoiding a reference to free()d data.
9546:
9547: 2000-06-04 19:57 millert
9548:
9549: * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9550: using getifaddrs() to get the list of ip addr / netmask pairs.
9551: Currently IPv4-only.
9552:
9553: 2000-06-04 19:51 millert
9554:
9555: * visudo.c: Add a missing check for UserEditor == NULL Add missing
9556: '+' before line number when invoking editor to fix a syntax error
9557:
9558: 2000-05-12 16:55 millert
9559:
9560: * sudo.c: Call clean_env very early in main() for paranoia's sake.
9561: Idea from Marc Esipovich.
9562:
9563: 2000-05-10 01:11 millert
9564:
9565: * sudo.h: Update proto for evasprintf and easprintf
9566:
9567: 2000-05-10 01:10 millert
9568:
9569: * alloc.c: Make easprintf() and evasprintf() return an int.
9570:
9571: 2000-05-10 00:56 millert
9572:
9573: * check.c: If the targetpw flag is set, use target username as part
9574: of the timestamp path. If tty tickets are in effect cat the tty
9575: and the target username with a ':' as the separator.
9576:
9577: 2000-05-09 12:05 millert
9578:
9579: * auth/pam.c: Backout part of last change; setting PAM_USER to the
9580: invoking user breaks things like targetpw.
9581:
9582: 2000-05-09 11:52 millert
9583:
9584: * auth/pam.c: set tty and username via pam_set_item
9585:
9586: 2000-05-09 11:42 millert
9587:
9588: * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9589: runas, and target authentication for non-passwd file auth
9590: methods.
9591:
9592: 2000-04-22 14:15 millert
9593:
9594: * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9595: sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9596: C<-Z> for command line flags in all places. This is more
9597: consistent and works around a bug in Pod::Man.
9598:
9599: 2000-04-22 13:59 millert
9600:
9601: * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9602: 'semicolon' that should be 'colon'
9603:
9604: 2000-04-19 15:30 millert
9605:
9606: * configure, configure.in: Fix --with-badpri help line
9607:
9608: 2000-04-17 14:01 millert
9609:
9610: * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9611: openlog() and closelog() since some authentication methods (like
9612: PAM) may do their own logging via syslog. Since we don't use
9613: syslog much (usually just once per session) this doesn't really
9614: incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9615:
9616: 2000-04-15 16:32 millert
9617:
9618: * sudo.c: Fix -H flag. runas_homedir is only valid after
9619: set_perms(PERM_RUNAS, mode)
9620:
9621: 2000-04-12 18:56 millert
9622:
9623: * INSTALL: Clarify the fact that insults are not enabled just by
9624: including them in the binary.
9625:
9626: 2000-04-07 10:39 millert
9627:
9628: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9629: sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9630:
9631: 2000-04-07 10:38 millert
9632:
9633: * Makefile.in: Give date string to pod2man since its default is
9634: ugly and it ain't got no alibi.
9635:
9636: 2000-04-07 10:27 millert
9637:
9638: * Makefile.in: Do section substitution on the output of pod2man and
9639: remove hack needed for old pod2man.
9640:
9641: 2000-04-07 10:26 millert
9642:
9643: * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9644: will do the substitution later.
9645:
9646: 2000-04-02 11:44 millert
9647:
9648: * configure, configure.in: Don't bother checking for the path to vi
9649: if user specified --with-editor
9650:
9651: 2000-04-01 17:25 millert
9652:
9653: * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9654: calling system(3).
9655:
9656: 2000-04-01 16:23 millert
9657:
9658: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9659: sudoers.pod, visudo.c: Visudo now checks for the existence of an
9660: editor and gives a sensible error if it does not exist.
9661:
9662: The path to the editor for visudo is now a colon-separated list
9663: of allowable editors. If the user has $EDITOR set and it matches
9664: one of the allowed editors that editor will be used. If not, the
9665: first editor in the list that actually exists is used.
9666:
9667: 2000-04-01 16:22 millert
9668:
9669: * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9670: return value.
9671:
9672: 2000-03-27 12:08 millert
9673:
9674: * Makefile.in: Strip sudo and visudo for bindist target
9675:
9676: 2000-03-26 22:26 millert
9677:
9678: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9679: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9680: @mansectsu@ and @mansectform@ in the man page bodies as well.
9681:
9682: 2000-03-26 22:07 millert
9683:
9684: * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9685: @sysconfdir@
9686:
9687: 2000-03-26 21:57 millert
9688:
9689: * Makefile.in: 'make dist' should not cause any files to be
9690: modified so remove its dependencies.
9691:
9692: 2000-03-26 21:43 millert
9693:
9694: * CHANGES: Whoops, forgot to add release marker
9695:
9696: 2000-03-26 11:57 millert
9697:
9698: * CHANGES: Final change for 1.6.3 (or so I hope)
9699:
9700: 2000-03-26 11:57 millert
9701:
9702: * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9703: BSD systems will have nroff...
9704:
9705: 2000-03-24 18:58 millert
9706:
9707: * parse.yacc: When checking to see if the host/user matches in a
9708: defaults spec, check against TRUE, not just non-zero since it
9709: might be -1.
9710:
9711: 2000-03-24 15:14 millert
9712:
9713: * configure.in, configure: OSF/1 puts file formats in section 4,
9714: not 5.
9715:
9716: 2000-03-24 15:13 millert
9717:
9718: * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9719:
9720: 2000-03-23 20:24 millert
9721:
9722: * RUNSON: Update for 1.6.3
9723:
9724: 2000-03-23 20:23 millert
9725:
9726: * configure, configure.in: If there is no inet_addr but there *is*
9727: an __inet_addr that's ok since inet_addr is probably just a macro
9728: then. The better thing to do would be to look for the macro, but
9729: this is fine for now.
9730:
9731: 2000-03-23 19:50 millert
9732:
9733: * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9734:
9735: 2000-03-23 19:40 millert
9736:
9737: * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9738: lives in $(srcdir), add a @mansrcdir@ configure variable so we
9739: can deal with this. Also, only remove *.man for 'distclean' not
9740: 'clean'.
9741:
9742: 2000-03-23 19:16 millert
9743:
9744: * sudo.c: set_loginclass() should be static like the proto says
9745:
9746: 2000-03-23 14:14 millert
9747:
9748: * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9749: header to avoid promotion of test to int, thus violating the
9750: prototype. Gcc handles this gracefully but more std ANSI
9751: compilers will complain.
9752:
9753: 2000-03-23 10:11 millert
9754:
9755: * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9756: FNM_CASEFOLD
9757:
9758: 2000-03-23 10:11 millert
9759:
9760: * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9761: fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9762: configure
9763:
9764: 2000-03-22 23:41 millert
9765:
9766: * CHANGES, TODO: update for 1.6.3
9767:
9768: 2000-03-22 23:38 millert
9769:
9770: * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9771: testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9772: not matching the FQHOST token type. There's really no need for a
9773: separate token for fully-qualified vs. unqualified anymore so
9774: FQHOST is now history and hostname_matches now decides which
9775: hostname (short or long) to check based on whether or not the
9776: pattern contains a '.'.
9777:
9778: 2000-03-22 23:09 millert
9779:
9780: * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9781: visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9782: in the hostname.
9783:
9784: 2000-03-22 22:50 millert
9785:
9786: * Makefile.in: Add targets for *.man.in, using config.status to
9787: generate *.man from *.man.in
9788:
9789: 2000-03-22 22:20 millert
9790:
9791: * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9792: option and enbolden refs to sudo and visudo.
9793:
9794: 2000-03-22 19:35 millert
9795:
9796: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9797: sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9798: visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9799: FreeBSD login.conf support (untested on BSD/OS) based on a patch
9800: from Michael D. Marchionna. configure now does substitution on
9801: the man pages, allowing us to fix up the paths and set the
9802: section correctly. Based on an idea from Michael D. Marchionna.
9803:
9804: 2000-03-22 19:27 millert
9805:
9806: * auth/passwd.c: Better fix for handling HP-UX aging info.
9807:
9808: 2000-03-22 19:20 millert
9809:
9810: * sudo.c: Add support for set_logname run-time default
9811:
9812: 2000-03-22 19:17 millert
9813:
9814: * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9815: substitution on these to produce *.man
9816:
9817: 2000-03-22 19:16 millert
9818:
9819: * sudo.man, sudoers.man, visudo.man: These files now get generated
9820: from *.man.in at configure time.
9821:
9822: 2000-03-22 18:40 millert
9823:
9824: * defaults.c, defaults.h: Add set_logname option so users can turn
9825: off setting of LOGNAME/USER environment variables.
9826:
9827: 2000-03-22 10:53 millert
9828:
9829: * testsudoers.c, lsearch.c, parse.c: kill register
9830:
9831: 2000-03-13 15:52 millert
9832:
9833: * auth/passwd.c: HP-UX adds extra info at the end for password
9834: aging so when comparing the result of crypt to pw_passwd we only
9835: compare the first len(epass) bytes *unless* the user entered an
9836: empty string for a password.
9837:
9838: 2000-03-13 11:05 millert
9839:
9840: * logging.c: Get rid of grandchild hack, it was causing problems
9841: and there is really no need for it. This fixes a bug where we
9842: spin eating up CPU when the user runs a long-running process like
9843: a shell.
9844:
9845: 2000-03-07 14:26 millert
9846:
9847: * sudo.c: User can always specify a login class if he/she is
9848: already root.
9849:
9850: 2000-03-06 23:29 millert
9851:
9852: * config.h.in, configure, configure.in, defaults.c, defaults.h,
9853: sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9854:
9855: 2000-03-06 14:42 millert
9856:
9857: * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9858: secureware support
9859:
9860: 2000-03-03 18:04 millert
9861:
9862: * auth/passwd.c: Truncate unencrypted password to 8 chars if
9863: encrypted password is exactly 13 characters (indicateing standard
9864: a DES password). Many versions of crypt() do this for you, but
9865: not all (like HP-UX's).
9866:
9867: 2000-03-01 21:01 millert
9868:
9869: * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9870:
9871: 2000-02-29 17:46 millert
9872:
9873: * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9874: via defaults.c
9875:
9876: 2000-02-29 17:41 millert
9877:
9878: * defaults.c: Use Argv[0] as the first arg to openlog() since
9879: visudo uses this too.
9880:
9881: 2000-02-28 18:58 millert
9882:
9883: * sudo.c: Stash coredumpsize resource limit and retsore it before
9884: the exec() Otherwise the child ends up with a coredumpsize of 0.
9885:
9886: 2000-02-26 22:56 millert
9887:
9888: * sudo.cat, sudo.man, sudo.pod: document -S flag
9889:
9890: 2000-02-26 22:54 millert
9891:
9892: * sudo.c: fix usage string
9893:
9894: 2000-02-26 22:48 millert
9895:
9896: * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9897: auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9898: -S flag (read passwd from stdin) and tgetpass_flags global that
9899: holds flags to be passed in to tgetpass(). Change echo_off param
9900: to tgetpass() into a flags field. There are currently 2 possible
9901: flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9902: abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9903: but echo is not set on the terminal, but sure to set it.
9904:
9905: 2000-02-26 22:11 millert
9906:
9907: * tgetpass.c: Fixed a bug that caused an infinite loop when the
9908: password timeout was disabled.
9909:
9910: 2000-02-18 12:56 millert
9911:
9912: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9913: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9914: runaspw, and targetpw options.
9915:
9916: 2000-02-18 12:11 millert
9917:
9918: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9919: visudo.c: enveditor -> env_editor
9920:
9921: 2000-02-15 19:07 millert
9922:
9923: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9924: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9925: visudo.cat, visudo.man: crank versino to 1.6.3
9926:
9927: 2000-02-15 19:03 millert
9928:
9929: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9930: sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9931: defaults and make visudo honor them. This means that visudo will
9932: now parse the sudoers file *before* it is edited so a bogus
9933: sudoers file will cause a warning to go to stderr. Also, visudo
9934: checks the variables once--it does not check them after each
9935: editor run since that could be confusing.
9936:
9937: 2000-02-15 18:49 millert
9938:
9939: * RUNSON: 1.6.2 -> 1.6.2p1
9940:
9941: 2000-02-15 18:36 millert
9942:
9943: * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9944: sudo.h
9945:
9946: 2000-02-13 13:38 millert
9947:
9948: * configure, configure.in: Fix thinko, some && should have been ||
9949: in the last commit
9950:
9951: 2000-02-13 13:28 millert
9952:
9953: * configure, configure.in: Don't initialized Makefile variables to
9954: be NULL since the user may want to import variables from their
9955: environment.
9956:
9957: 2000-02-03 21:09 millert
9958:
9959: * configure, configure.in: typo
9960:
9961: 2000-01-27 15:01 millert
9962:
9963: * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9964: 11.0;jaearick@colby.edu
9965:
9966: 2000-01-27 15:01 millert
9967:
9968: * CHANGES: recent changes; prepare for 1.6.2p1
9969:
9970: 2000-01-26 23:31 millert
9971:
9972: * find_path.c: Don't apply SECURE_PATH if user is example;
9973: jmknoble@pobox.com
9974:
9975: 2000-01-26 16:21 millert
9976:
9977: * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9978: 'defaults' options based on INSTALL file info.
9979:
9980: 2000-01-26 16:21 millert
9981:
9982: * INSTALL: Fix some while lies
9983:
9984: 2000-01-24 10:48 millert
9985:
9986: * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9987: instead of copying.
9988:
9989: 2000-01-23 22:57 millert
9990:
9991: * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9992:
9993: 2000-01-23 22:42 millert
9994:
9995: * RUNSON: Last minute updates
9996:
9997: 2000-01-23 22:26 millert
9998:
9999: * TROUBLESHOOTING: PAM entry
10000:
10001: 2000-01-23 22:23 millert
10002:
10003: * auth/pam.c: correct a comment
10004:
10005: 2000-01-23 22:03 millert
10006:
10007: * CHANGES, RUNSON: update for 1.6.2
10008:
10009: 2000-01-23 21:59 millert
10010:
10011: * auth/pam.c: Better detection of PAM errors and fix custom prompts
10012: with PAM. Based on patches from "Cloyce D. Spradling"
10013: <cloyce@headgear.org>
10014:
10015: 2000-01-20 11:15 millert
10016:
10017: * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
10018: to an unsigned long long value.
10019:
10020: 2000-01-19 14:07 millert
10021:
10022: * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
10023: sudoers locking in visudo. We now lock the sudoers file itself,
10024: not the temp file (since locking the temp file can foul up
10025: editors). The previous locking scheme didn't work because the fd
10026: was closed too early.
10027:
10028: 2000-01-19 13:37 millert
10029:
10030: * configure, config.h.in, configure.in: Don't need test for
10031: ftruncate() any more.
10032:
10033: 2000-01-18 21:23 millert
10034:
10035: * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
10036: cc. Fixes compilation with the unbundled HP-UX cc.
10037:
10038: 2000-01-18 17:00 millert
10039:
10040: * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
10041: Campbell <aaron@cs.dal.ca>
10042:
10043: 2000-01-17 18:46 millert
10044:
10045: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
10046: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
10047: tgetpass.c, version.h, visudo.c: update copyright year on changed
10048: files
10049:
10050: 2000-01-17 18:45 millert
10051:
10052: * RUNSON: updates
10053:
10054: 2000-01-17 18:45 millert
10055:
10056: * CHANGES: aix fix
10057:
10058: 2000-01-17 18:42 millert
10059:
10060: * INSTALL: Crank version to 1.6.2
10061:
10062: 2000-01-17 18:11 millert
10063:
10064: * configure: Crank version to 1.6.2
10065:
10066: 2000-01-17 17:46 millert
10067:
10068: * sudo.c: When using rlimit check for RLIM_INFINITY When computing
10069: the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
10070:
10071: 2000-01-17 12:32 millert
10072:
10073: * CHANGES: recent changes
10074:
10075: 2000-01-17 12:28 millert
10076:
10077: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
10078: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
10079: Crank version to 1.6.2
10080:
10081: 2000-01-17 12:25 millert
10082:
10083: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
10084: 'shell_noargs' runtime option back in. We have to defer checking
10085: until after the sudoers file has been parsed but since there are
10086: now other options that operate that way this one can too. Based
10087: on a patch from bguillory@email.com.
10088:
10089: 2000-01-16 23:05 millert
10090:
10091: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
10092: "verifypw" options.
10093:
10094: 2000-01-16 22:57 millert
10095:
10096: * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
10097: o Add section on verifypw and listpw o Define how NOPASSWD
10098: interacts with the -v and -l flags
10099:
10100: 2000-01-14 12:39 millert
10101:
10102: * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
10103: HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
10104:
10105: 2000-01-14 12:29 millert
10106:
10107: * defaults.c, defaults.h: In struct sudo_defs_types, move the union
10108: to the end and don't initialize the union member since that only
10109: works with an ANSI compiler. We set the value of the union by
10110: hand in init_defaults() anyway. This allows sudo to compile on a
10111: K&R compiler again.
10112:
10113: 2000-01-11 13:20 millert
10114:
10115: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
10116: netgr_matches needs to check shost as well as host since they may
10117: be different.
10118:
10119: 2000-01-11 13:17 millert
10120:
10121: * tgetpass.c: End on \r as well as \n
10122:
10123: 2000-01-02 23:53 millert
10124:
10125: * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
10126: chaning from 0400 to whatever SUDOERS_MODE is (converting from
10127: the old sudoers mode). Assumes that SUDOERS_MODE is less
10128: restrictive than 0400 which should always be the case.
10129:
10130: 2000-01-02 23:43 millert
10131:
10132: * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
10133: sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
10134: *any* entry for the user on the host with a NOPASSWD flag. For
10135: -v, only allow w/o a passwd if *all* entries for the user on the
10136: host w/ the specified runas user have the NOPASSWD flag set.
10137:
10138: 2000-01-02 23:26 millert
10139:
10140: * Makefile.in: add check target
10141:
10142: 1999-12-16 13:02 millert
10143:
10144: * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
10145: looping.
10146:
10147: 1999-12-10 00:09 millert
10148:
10149: * CHANGES: recent changes
10150:
10151: 1999-12-08 23:04 millert
10152:
10153: * config.h.in, configure, configure.in, sudo.c: Add check for
10154: initgroups() since old SYSV lacks this.
10155:
10156: 1999-12-08 22:54 millert
10157:
10158: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
10159: configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
10160: Only define HAVE_FNMATCH if <fnmatch.h> exists.
10161:
10162: 1999-12-06 01:47 millert
10163:
10164: * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
10165: to be enabled if the insults[] array is empty. Otherwise there
10166: would be division by zero.
10167:
10168: 1999-12-06 01:25 millert
10169:
10170: * insults.h: Don't care about USE_INSULTS #define since the insult
10171: stuff may be overridden at runtime.
10172:
10173: 1999-12-06 01:23 millert
10174:
10175: * auth/sudo_auth.c: Honor insults flag.
10176:
10177: 1999-12-05 19:14 millert
10178:
10179: * CHANGES, parse.c: Don't ask the user for a password if the user
10180: is not allowed to run the command and the authenticate flag (in
10181: sudoers) is false.
10182:
10183: 1999-12-05 19:05 millert
10184:
10185: * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
10186: newline we change to the INITIAL state. o Enter GOTRUNAS when we
10187: see Runas_Alias
10188:
10189: This allows #uid to work in a RunasAlias.
10190:
10191: 1999-12-05 14:06 millert
10192:
10193: * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
10194: and runaslist now return a value o in a runasspec, if a runaslist
10195: does not return TRUE, set runas_matches to FALSE. Normally, a
10196: runaslist only returns FALSE for explicitly denied users. o
10197: since runaslist does not modify the stack there is no need for a
10198: push/pop in runasalias.
10199:
10200: 1999-12-04 21:54 millert
10201:
10202: * check.c, sudo.c: Don't kill the user's tickets until after
10203: sudoers has been parsed since tty_tickets and ticket_dir could be
10204: set in sudoers.
10205:
10206: 1999-12-04 21:18 millert
10207:
10208: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
10209: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
10210: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
10211: version to 1.6
10212:
10213: 1999-12-04 21:18 millert
10214:
10215: * testsudoers.c: add set_fqdn() stub
10216:
10217: 1999-12-02 15:31 millert
10218:
10219: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
10220: sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10221: it cannot work since the command needs to be set before sudoers
10222: is parsed. o Fix the "set_home" sudoers option (only worked at
10223: compile time). o Fix "fqdn" sudoers option. We now set
10224: host/shost via set_fqdn which gets called when the "fqdn"
10225: option is set in sudoers. o Move the openlog() to
10226: store_syslogfac() so this gets overridden correctly from the
10227: sudoers file.
10228:
10229: 1999-12-02 15:21 millert
10230:
10231: * auth/securid.c: SecurID support should compile now.
10232:
10233: 1999-11-28 20:56 millert
10234:
10235: * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10236: visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10237:
10238: 1999-11-28 18:51 millert
10239:
10240: * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10241: the .html files as they are generated automatically on the web
10242: site.
10243:
10244: 1999-11-28 18:49 millert
10245:
10246: * CHANGES, LICENSE: kill characters that made wml unhappy
10247:
10248: 1999-11-28 18:34 millert
10249:
10250: * HISTORY: typo
10251:
10252: 1999-11-25 12:05 millert
10253:
10254: * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10255:
10256: 1999-11-24 19:43 millert
10257:
10258: * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10259: benefit of ctm
10260:
10261: 1999-11-23 22:52 millert
10262:
10263: * sudo.c: Make the -s flag be exclusive too. Also reorder the
10264: flags in the exclusive usage message so they are alphabetical.
10265:
10266: 1999-11-23 13:27 millert
10267:
10268: * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10269:
10270: 1999-11-23 13:07 millert
10271:
10272: * auth/API: fix typo
10273:
10274: 1999-11-23 13:07 millert
10275:
10276: * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10277:
10278: 1999-11-23 13:06 millert
10279:
10280: * auth/pam.c: fix a warning on redhat and spew an error if
10281: pam_authenticate() returns an error other than AUTH_SUCCESS or
10282: PAM_PERM_DENIED
10283:
10284: 1999-11-23 00:43 millert
10285:
10286: * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10287: password required is the user's not root's
10288:
10289: 1999-11-19 21:04 millert
10290:
10291: * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10292:
10293: 1999-11-18 19:13 millert
10294:
10295: * RUNSON: updates from Brian Jackson + some formatting
10296:
10297: 1999-11-17 21:39 millert
10298:
10299: * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10300: update o Changes for automating real binary releases
10301:
10302: 1999-11-17 21:38 millert
10303:
10304: * Makefile.in: Add bindist target
10305:
10306: 1999-11-16 16:26 millert
10307:
10308: * TROUBLESHOOTING: talk about run-time options in addition to
10309: compile-time options
10310:
10311: 1999-11-16 01:16 millert
10312:
10313: * CHANGES: fix typos
10314:
10315: 1999-11-16 01:09 millert
10316:
10317: * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10318:
10319: 1999-11-16 00:42 millert
10320:
10321: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10322: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10323: rid of references to sudo-bugs. Now mention the web site or the
10324: sudo@ alias
10325:
10326: 1999-11-16 00:35 millert
10327:
10328: * sudoers.html: repair pod2html damage
10329:
10330: 1999-11-16 00:28 millert
10331:
10332: * RUNSON, TODO: Update for 1.6 release
10333:
10334: 1999-11-16 00:23 millert
10335:
10336: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10337: about using ALL in a command context.
10338:
10339: 1999-11-09 15:12 millert
10340:
10341: * visudo.c: Call yyrestart() on a parse error to reset the lexer
10342: state.
10343:
10344: 1999-11-09 15:06 millert
10345:
10346: * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10347: yyrestart() into visudo.c since it might not get called in yywrap
10348: if we get a parse error (and we only reread the file on error
10349: anyway).
10350:
10351: 1999-11-09 14:32 millert
10352:
10353: * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10354: clean up any buffers that might still exist. Call yyrestart()
10355: instead of using the deprecated YY_NEW_FILE macro.
10356:
10357: 1999-11-09 12:13 millert
10358:
10359: * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10360:
10361: 1999-11-08 19:00 millert
10362:
10363: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10364: characters need to be escaped in names.
10365:
10366: 1999-11-08 18:59 millert
10367:
10368: * configure: regen
10369:
10370: 1999-11-08 18:59 millert
10371:
10372: * INSTALL: clarify Mac OS X entry
10373:
10374: 1999-11-08 18:59 millert
10375:
10376: * RUNSON: update
10377:
10378: 1999-11-08 17:45 millert
10379:
10380: * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10381: configure options for danity
10382:
10383: 1999-11-05 17:11 millert
10384:
10385: * defaults.c: Fix printing of type T_MODE in dump_defaults()
10386:
10387: 1999-11-05 12:00 millert
10388:
10389: * strcasecmp.c: missing sys/types.h
10390:
10391: 1999-11-05 00:42 millert
10392:
10393: * INSTALL: Break out options that may be overridden at run time
10394: into their own section. Add a not about Max OS X and correct
10395: some lies.
10396:
10397: 1999-11-04 14:01 millert
10398:
10399: * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10400: getrlimit to find the highest fd when closing all non-std fd's o
10401: Turn off core dumps via setrlimit for the sake of paranoia
10402:
10403: 1999-11-04 13:57 millert
10404:
10405: * RUNSON: updates
10406:
10407: 1999-11-01 10:59 millert
10408:
10409: * CHANGES: updates
10410:
10411: 1999-11-01 10:58 millert
10412:
10413: * tgetpass.c: When read()'ing, do a single character at a time to
10414: be sure we don't go oast the newline.
10415:
10416: 1999-11-01 10:43 millert
10417:
10418: * sudo.c: For the sudo_root option, check against user_uid, not
10419: getuid() since at this point, ruid == euid == 0.
10420:
10421: 1999-10-31 23:14 millert
10422:
10423: * RUNSON: some updates
10424:
10425: 1999-10-31 23:14 millert
10426:
10427: * logging.h: Fix compilation problem when --with-logging=file was
10428: specified. This means that syslog is now required to build sudo
10429: but that should not be a problem. If it is it can be fixed
10430: trivially with a configure check for syslog() or syslog.h.
10431:
10432: 1999-10-31 23:00 millert
10433:
10434: * tgetpass.c: Make this work again for things like "sudo echo hi |
10435: more" where the tty gets put into character at a time mode. We
10436: read until we read end of line or we run out of space (similar to
10437: fgets(3)).
10438:
10439: 1999-10-20 11:23 millert
10440:
10441: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10442: to bold
10443:
10444: 1999-10-20 11:23 millert
10445:
10446: * RUNSON: update
10447:
10448: 1999-10-16 13:56 millert
10449:
10450: * defaults.c: Error out if syslog parameters are given without a
10451: value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10452: since there are no facilities in the 4.2BSD syslog.
10453:
10454: 1999-10-15 16:37 millert
10455:
10456: * defaults.c: Ignore the syslog facility for systems w/ old syslog
10457: like Ultrix.
10458:
10459: 1999-10-15 12:51 millert
10460:
10461: * TROUBLESHOOTING: people with "." early in their path can have
10462: problems running sudo from the build dir ;-)
10463:
10464: 1999-10-13 00:18 millert
10465:
10466: * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10467:
10468: 1999-10-12 22:34 millert
10469:
10470: * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10471: auth/sudo_auth.h: New krb5 code from Frank Cusack
10472: <fcusack@iconnet.net>.
10473:
10474: 1999-10-12 22:33 millert
10475:
10476: * CHANGES: update to reality
10477:
10478: 1999-10-11 20:53 millert
10479:
10480: * auth/fwtk.c: include <auth.h> to get function prototypes.
10481:
10482: 1999-10-11 20:05 millert
10483:
10484: * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10485:
10486: 1999-10-11 19:42 millert
10487:
10488: * sudo.c: in set_perms(), always call setuid(0) before changing the
10489: ruid/euid so we always know it will succeed.
10490:
10491: 1999-10-11 12:24 millert
10492:
10493: * defaults.h: #undef T_FOO to avoid conflicts with system defines
10494: (like on ULTRIX).
10495:
10496: 1999-10-11 11:55 millert
10497:
10498: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10499: sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10500: needs some fleshing out but this is a start.
10501:
10502: 1999-10-10 17:21 millert
10503:
10504: * defaults.c: use strtol, not strtoul since not everyone has not
10505: strtoul
10506:
10507: 1999-10-10 15:01 millert
10508:
10509: * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10510: INITIAL state
10511:
10512: 1999-10-10 14:38 millert
10513:
10514: * lex.yy.c, parse.lex: o Add support for escaped characters in the
10515: WORD macro o Modify fill() to squash escape chars
10516:
10517: 1999-10-10 13:56 millert
10518:
10519: * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10520: checks for default values that are supposed to be pathnames. o
10521: Fix a duplicate free when visudo finds an error.
10522:
10523: 1999-10-09 01:01 millert
10524:
10525: * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10526:
10527: 1999-10-07 21:12 millert
10528:
10529: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10530: requiretty option o Move O_NOCTTY to compat.h
10531:
10532: 1999-10-07 21:12 millert
10533:
10534: * logging.c: The exit() in log_error() was mistakenly removed in a
10535: previous version. Put it back...
10536:
10537: 1999-10-07 17:20 millert
10538:
10539: * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10540: defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10541: logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10542: auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10543: Change defaults stuff to put the value right in the struct. o
10544: Implement mailer_flags o Store syslog stuff both in int and
10545: string form. Setting the string form magically updates the int
10546: version. o Add boolean attribute to strings where it makes sense
10547: to say !foo
10548:
10549: 1999-10-07 17:13 millert
10550:
10551: * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10552:
10553: 1999-10-06 00:48 millert
10554:
10555: * auth/API: cleanup function no longer takes a status arg
10556:
10557: 1999-10-06 00:48 millert
10558:
10559: * INSTALL: the the
10560:
10561: 1999-09-15 05:15 millert
10562:
10563: * TODO, config.h.in, configure, configure.in, logging.c: Use
10564: strftime() instead of ctime() if it is available.
10565:
10566: 1999-09-14 12:58 millert
10567:
10568: * defaults.c: fix copyright date
10569:
10570: 1999-09-14 12:57 millert
10571:
10572: * RUNSON: update ReliantUNIX entry
10573:
10574: 1999-09-14 12:56 millert
10575:
10576: * defaults.c, defaults.h, logging.c: add log_year option
10577:
10578: 1999-09-14 04:01 millert
10579:
10580: * configure, configure.in: add --without-sendmail to help output
10581:
10582: 1999-09-14 03:42 millert
10583:
10584: * configure, configure.in: enforce an otctal arg for
10585: --with-suoders-mode
10586:
10587: 1999-09-08 04:06 millert
10588:
10589: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10590: config.h.in, configure, configure.in, defaults.c, defaults.h,
10591: find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10592: sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10593: auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10594: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10595: "Defaults" line in sudoers to make configuration variables
10596: changable at runtime (and on a global, per-host and per-user
10597: basis). Both the names and the internal representation are still
10598: subject to change. It was necessary to make sudo_user.runas but
10599: a char ** instead of a char * since this value can be changed by
10600: a Defaults line. There is a similar (but more complicated) issue
10601: with sudo_user.prompt but it is handled differently at the
10602: moment.
10603:
10604: Add a "-L" flag to list the name of options with their
10605: descriptions. This may only be temporary.
10606:
10607: Move some prototypes to parse.h
10608:
10609: Be much less restrictive on what is allowed for a username.
10610:
10611: 1999-09-08 04:01 millert
10612:
10613: * sample.syslog.conf: Add more info
10614:
10615: 1999-09-04 03:09 millert
10616:
10617: * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10618: strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10619: from their license.
10620:
10621: 1999-08-31 05:39 millert
10622:
10623: * auth/sudo_auth.h: move dce_verofy proto to correct section
10624:
10625: 1999-08-31 05:39 millert
10626:
10627: * auth/dce.c: remove XXX
10628:
10629: 1999-08-28 06:00 millert
10630:
10631: * emul/fnmatch.h: Add fnmatch() prototype
10632:
10633: 1999-08-28 06:00 millert
10634:
10635: * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10636: emul/fnmatch.h to be after sudo.h for __P
10637:
10638: 1999-08-28 05:59 millert
10639:
10640: * sudo.h: add strcasecmp proto
10641:
10642: 1999-08-28 05:50 millert
10643:
10644: * auth/sudo_auth.c: add check for case where there are no auth
10645: methods
10646:
10647: 1999-08-28 05:36 millert
10648:
10649: * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10650: __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10651:
10652: 1999-08-28 05:24 millert
10653:
10654: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10655: everywhere we include string.h
10656:
10657: 1999-08-28 05:22 millert
10658:
10659: * version.c: nicer output when showing auth methods
10660:
10661: 1999-08-28 05:00 millert
10662:
10663: * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10664:
10665: 1999-08-28 04:49 millert
10666:
10667: * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10668:
10669: 1999-08-28 04:22 millert
10670:
10671: * parse.lex, lex.yy.c: fix definition of OCTECT
10672:
10673: 1999-08-28 04:10 millert
10674:
10675: * configure, configure.in: aix_auth.o not authenticate.o
10676:
10677: 1999-08-27 17:02 millert
10678:
10679: * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10680: generated from the keyboard). Since we run with ruid/euid == 0
10681: the user can't really signal us in nasty ways.
10682:
10683: 1999-08-27 17:01 millert
10684:
10685: * visudo.c: Don't need to worry about catching too many signals
10686: since we do locking on the tmp file. If a lockfile is really
10687: stale, it will be detected and overwritten.
10688:
10689: 1999-08-27 16:09 millert
10690:
10691: * INSTALL, Makefile.in: include auth/API in tarball
10692:
10693: 1999-08-27 16:09 millert
10694:
10695: * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10696: loop and only do the memset if we are *not* in standalone mode.
10697:
10698: 1999-08-27 13:46 millert
10699:
10700: * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10701:
10702: 1999-08-27 11:53 millert
10703:
10704: * sudo.c: fix --enable-noargs-shell
10705:
10706: 1999-08-27 11:06 millert
10707:
10708: * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10709:
10710: 1999-08-27 10:54 millert
10711:
10712: * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10713:
10714: 1999-08-27 10:50 millert
10715:
10716: * auth/dce.c: there were still some return(0)'s hanging around,
10717: make them AUTH_FAILURE
10718:
10719: 1999-08-27 10:39 millert
10720:
10721: * parse.c: typo in comment
10722:
10723: 1999-08-27 10:03 millert
10724:
10725: * version.c: add missing semicolon
10726:
10727: 1999-08-27 08:31 millert
10728:
10729: * auth/sudo_auth.h: missing backslash
10730:
10731: 1999-08-26 17:24 millert
10732:
10733: * CHANGES, config.h.in, configure, configure.in: Kill
10734: _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10735:
10736: 1999-08-26 09:21 millert
10737:
10738: * Makefile.in: add parse.h to HDRS
10739:
10740: 1999-08-26 09:16 millert
10741:
10742: * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10743: VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10744: in LIBS, commong ld flags go in LDFLAGS and network libs like
10745: -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10746: on Solaris and is a bit cleaner in general.
10747:
10748: 1999-08-26 06:56 millert
10749:
10750: * UPGRADE: mention ptmp -> sudoers.tmp
10751:
10752: 1999-08-26 06:12 millert
10753:
10754: * configure.in, configure, config.h.in: Define
10755: _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10756:
10757: 1999-08-26 05:37 millert
10758:
10759: * RUNSON: add 2 reports
10760:
10761: 1999-08-26 05:20 millert
10762:
10763: * auth/kerb5.c: Minor changes, mostly cosmetic.
10764: verify_krb_v5_tgt() changed to return a value more like a system
10765: function
10766:
10767: 1999-08-26 05:19 millert
10768:
10769: * auth/dce.c: Add an XXX
10770:
10771: 1999-08-26 05:19 millert
10772:
10773: * TODO: more things todo!
10774:
10775: 1999-08-26 05:18 millert
10776:
10777: * sample.sudoers: update based on what is in the man page
10778:
10779: 1999-08-26 05:10 millert
10780:
10781: * parse.yacc: minor change to first line printed in -l mode
10782:
10783: 1999-08-26 05:10 millert
10784:
10785: * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10786: VARIABLES" section to "ENVIRONMENT" to be more standard and add
10787: "EXAMPLES" section
10788:
10789: 1999-08-26 05:08 millert
10790:
10791: * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10792: "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10793: standard
10794:
10795: 1999-08-26 05:06 millert
10796:
10797: * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10798:
10799: 1999-08-26 05:05 millert
10800:
10801: * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10802:
10803: 1999-08-26 05:04 millert
10804:
10805: * UPGRADE: mention timestamp changes
10806:
10807: 1999-08-26 05:04 millert
10808:
10809: * PORTING: cosmetic cleanup
10810:
10811: 1999-08-26 05:00 millert
10812:
10813: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10814: sudoers(8) man page
10815:
10816: 1999-08-24 13:45 millert
10817:
10818: * version.c: Update comments about syslog name tables
10819:
10820: 1999-08-24 13:37 millert
10821:
10822: * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10823: configure.in, parse.yacc: include strcasecmp() for those without
10824: it
10825:
10826: 1999-08-24 12:43 millert
10827:
10828: * sample.sudoers: Use the : operator some more and fix a typo
10829:
10830: 1999-08-24 12:43 millert
10831:
10832: * HISTORY: update the history of sudo
10833:
10834: 1999-08-24 12:42 millert
10835:
10836: * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10837:
10838: 1999-08-24 12:41 millert
10839:
10840: * CHANGES: recent changes
10841:
10842: 1999-08-24 12:40 millert
10843:
10844: * sudo.tab.h: these should be generated with byacc, not bison
10845:
10846: 1999-08-24 12:40 millert
10847:
10848: * lex.yy.c: regen
10849:
10850: 1999-08-24 11:58 millert
10851:
10852: * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10853: the stored (expanded) alias was not stored with the contents.
10854: This could lead to incorrect output if the sudoers file had
10855: different alias types with the same name. Normal parsing (ie:
10856: not in '-l' mode) is unaffected.
10857:
10858: 1999-08-23 12:47 millert
10859:
10860: * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10861: proto on some systems
10862:
10863: 1999-08-22 13:10 millert
10864:
10865: * snprintf.c: fix comment
10866:
10867: 1999-08-22 13:09 millert
10868:
10869: * tgetpass.c: don't need limits.h
10870:
10871: 1999-08-22 07:36 millert
10872:
10873: * snprintf.c: kill bogus reference to vfprintf
10874:
10875: 1999-08-22 07:26 millert
10876:
10877: * sample.sudoers, sudoers: better examples
10878:
10879: 1999-08-22 07:23 millert
10880:
10881: * snprintf.c: Add some const in the K&R defs. This is safe since
10882: we define const away if the compiler doesn't grok it.
10883:
10884: 1999-08-22 07:22 millert
10885:
10886: * aclocal.m4, configure: Better test for working long long support.
10887: Ultrix compiler supports basic long long but not all operations
10888: on them.
10889:
10890: 1999-08-22 05:59 millert
10891:
10892: * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10893: sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10894: MAXINT before including hpsecurity.h to silence an HP-UX warning
10895: Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10896:
10897: 1999-08-21 15:00 millert
10898:
10899: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10900: snprintf.c: UCB-derived snprintf + asprintf support. Supports
10901: quads if the compiler does. No floating point yet, perhaps
10902: later...
10903:
10904: 1999-08-20 16:37 millert
10905:
10906: * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10907: auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10908: code as root, not the invoking user. It doesn't really gain us
10909: anything to run as the user since an attacker can just have an
10910: setuid(0) in their egg. Running as root solves potential
10911: problems wrt signalling.
10912:
10913: 1999-08-19 13:45 millert
10914:
10915: * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10916: let the signal handler get it if we are still running, else let
10917: init reap it for us. The extra time it takes to wait lets the
10918: user know that mail is being sent.
10919:
10920: Install SIGCHLD handler in main() and for POSIX signals, block
10921: everything *except* SIGCHLD.
10922:
10923: 1999-08-19 12:30 millert
10924:
10925: * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10926: INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10927: a bitmap instead of an int. This makes it possible to express
10928: things like "failed to validate because user not listed for this
10929: host". Some thigns that were previously VALIDATE_FOO are now
10930: FLAG_FOO. This may change later on.
10931:
10932: Reorganized code in log_auth() and sudo.c to deal with above
10933: changes.
10934:
10935: Safer versions of push/pushcp with in the do { ... } while (0)
10936: style
10937:
10938: parse.yacc now saves info on the stack to allow parse.c to
10939: determine if a user was listed, but not for the host he/she tried
10940: to run on.
10941:
10942: Added --with-mail-if-no-host option
10943:
10944: 1999-08-17 11:29 millert
10945:
10946: * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10947: visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10948: externally visible. o If pedantic > 1, it is a parse error. o
10949: Add -s (strict) option to visudo which sets pedantic to 2.
10950:
10951: 1999-08-17 11:26 millert
10952:
10953: * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10954:
10955: 1999-08-17 11:20 millert
10956:
10957: * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10958:
10959: 1999-08-17 10:29 millert
10960:
10961: * configure, configure.in, Makefile.in: Add testsudoers to default
10962: build target if --with-devel Don't clean generated parser files
10963: unless "distclean".
10964:
10965: 1999-08-17 08:47 millert
10966:
10967: * parse.yacc: In pedantic mode we need to save *all* the aliases,
10968: not just those that match, or we get spurious warnings.
10969:
10970: 1999-08-17 05:32 millert
10971:
10972: * TROUBLESHOOTING: reference samples.sylog.conf
10973:
10974: 1999-08-14 11:50 millert
10975:
10976: * sample.syslog.conf: Sample entries for syslog.conf
10977:
10978: 1999-08-14 11:40 millert
10979:
10980: * CHANGES: recent changes
10981:
10982: 1999-08-14 11:36 millert
10983:
10984: * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10985: pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10986: sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10987: configured into flags and add a flag to specify an auth method is
10988: running alone (the only one). Pass auth methods their sudo_auth
10989: pointer, not the data pointer. This allows us to get at the
10990: flags and tell if we are the only auth method. That, in turn,
10991: allows the method to be able to decide what should/should not be
10992: a fatal error. Currently only rfc1938 uses it this way, which
10993: allows us to kill the OTP_ONLY define and te hackery that went
10994: with it. With access to the sudo_auth struct, methods can also
10995: get at a string holding their cannonical name (useful in error
10996: messages).
10997:
10998: 1999-08-14 11:34 millert
10999:
11000: * Makefile.in, INSTALL, README, config.h.in, configure,
11001: configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
11002: sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
11003: o real dependencies in the Makefile o --with-devel option to
11004: enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
11005: "foo->bar" o ALL goes back to being a token, not a string but
11006: don't leak memory o rename hsotspec -> host in parse.yacc
11007:
11008: 1999-08-12 12:26 millert
11009:
11010: * BUGS, CHANGES: recent changes
11011:
11012: 1999-08-12 12:24 millert
11013:
11014: * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
11015: sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
11016: *snprintf() before -ldb is added to LIBS since -ldb includes a
11017: bogus snprintf(). o Add forward refs for struct mbuf and struct
11018: rtentry for Digital UNIX. o Reorder some functions in snprintf.c
11019: to fix -Wall o Add missing includes to fix more -Wall
11020:
11021: 1999-08-12 10:37 millert
11022:
11023: * INSTALL, check.c, config.h.in, configure, configure.in,
11024: parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
11025: o Add a "pedentic" flag to the parser. This makes sudo warn in
11026: cases where an alias may be used before it is defined. Only
11027: turned on for visudo and testsudoers. o Add
11028: --disable-authentication option that makes sudo not require
11029: authentication by default. The PASSWD tag can be used to require
11030: authentication for an entry. We no longer overload
11031: --without-passwd.
11032:
11033: 1999-08-12 10:29 millert
11034:
11035: * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
11036: USERNAME. These days a username can contain just about anything
11037: so be very permissive. Also drop the unused \. punctuation.
11038:
11039: 1999-08-09 18:25 millert
11040:
11041: * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
11042: parse.h o find_alias() now returns an aliasinfo * instead of
11043: boolean o add_alias() now takes a value parameter to store in the
11044: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
11045: return: 1) positive match 0) negative match (due to '!') -1) no
11046: match This means setting $$ explicitly in all cases, which I
11047: should have done in the first place. It also means that we
11048: always store a value that is != -1 and when we see a '!' we can
11049: set *_matches to !rv if rv != -1. The upshot of all of this is
11050: that '!' now works the way it should in lists and some of the
11051: rules are more uniform and sensible.
11052:
11053: 1999-08-09 18:17 millert
11054:
11055: * Makefile.in: add parse.h dependency
11056:
11057: 1999-08-09 18:17 millert
11058:
11059: * parse.h: kill unused *_matched macros
11060:
11061: 1999-08-09 10:35 millert
11062:
11063: * parse.yacc: Allow a list of users as the first thing in a user
11064: spec, not just a single entry. This makes things more uniform,
11065: though it does allow you to write user specs that are hard to
11066: read.
11067:
11068: 1999-08-09 10:08 millert
11069:
11070: * configure: regen
11071:
11072: 1999-08-09 10:08 millert
11073:
11074: * configure.in: fix check for crypt() in libufc
11075:
11076: 1999-08-07 14:03 millert
11077:
11078: * README: sudo-users list now exists
11079:
11080: 1999-08-07 07:46 millert
11081:
11082: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
11083: reality.
11084:
11085: 1999-08-07 05:59 millert
11086:
11087: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
11088: config.h.in, configure.in, logging.c, sudo.h, version.c,
11089: visudo.c, configure, fileops.c: o Move lock_file() and touch()
11090: into fileops.c so visudo can use them o Visudo now locks the
11091: sudoers temp file instead of bailing when the temp file already
11092: exists. This fixes the problem of stale temp files but it does
11093: *require* that you not try to put the temp file in a
11094: world-writable directory. This shoud not be an issue as the temp
11095: file should live in the same dir as sudoers. o Visudo now only
11096: installs the temp file as sudoers if it changed.
11097:
11098: 1999-08-06 09:49 millert
11099:
11100: * logging.c: add fcntl locking
11101:
11102: 1999-08-06 09:33 millert
11103:
11104: * configure, config.h.in, configure.in, logging.c: Lock the log
11105: file.
11106:
11107: 1999-08-06 05:36 millert
11108:
11109: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
11110: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
11111: /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
11112: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
11113: _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
11114:
11115: 1999-08-05 17:38 millert
11116:
11117: * INSTALL, check.c, config.h.in, configure, configure.in,
11118: version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
11119: more things to root sudo -V config reporting
11120:
11121: 1999-08-05 10:56 millert
11122:
11123: * configure, configure.in: aix_auth.o not authenticate.o
11124:
11125: 1999-08-05 10:48 millert
11126:
11127: * config.h.in: Add --with-goodpri and --with-badpri configure
11128: options to specify the syslog priority to use.
11129:
11130: 1999-08-05 10:30 millert
11131:
11132: * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
11133: and --with-badpri configure options to specify the syslog
11134: priority to use.
11135:
11136: 1999-08-05 10:25 millert
11137:
11138: * compat.h: kill crufty AIX stuff
11139:
11140: 1999-08-05 06:55 millert
11141:
11142: * Makefile.in: Sigh, some versions of make (like Solaris's) don't
11143: deal with $< like I would expect. Both GNU and BSD makes get
11144: this right but... So, we just expand $< inline at the cost of
11145: some ugliness.
11146:
11147: 1999-08-05 06:52 millert
11148:
11149: * version.c: If the invoking user is root, sudo will now print
11150: configure info in -V mode. Currently just prints logging info,
11151: to be expanded later.
11152:
11153: 1999-08-05 06:51 millert
11154:
11155: * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
11156: facility and priority o use new print_version() functino for -V
11157: mode
11158:
11159: 1999-08-05 06:49 millert
11160:
11161: * check.c: Don't need version.c
11162:
11163: 1999-08-05 06:21 millert
11164:
11165: * configure, configure.in, aclocal.m4, config.h.in: Add check for
11166: syslog facilities and priorities tables in syslog.h
11167:
11168: 1999-08-05 05:23 millert
11169:
11170: * Makefile.in: o authenticate -> aix_auth o add version.c
11171:
11172: 1999-08-05 05:21 millert
11173:
11174: * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
11175:
11176: 1999-08-04 13:32 millert
11177:
11178: * TODO: sudo should lock its logfile
11179:
11180: 1999-08-04 13:28 millert
11181:
11182: * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
11183: shortcut macros for append() to make things more readable. o The
11184: separator in append() is now a string instead of a char. o In
11185: append(), only prepend the separator if the last char is not a
11186: '!'. This is a hack but it greatly simplifies '!' handling. o
11187: In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
11188: inherited across entries in a list (matches current behavior).
11189: o Fix formatting in -l mode such that items in a list are
11190: separated by a space. Greatlt improves readability. o Space
11191: for name field in struct aliasinfo is now allocated dyanically
11192: instead of using a (big) buffer. o In add_alias(), only search
11193: the list once (lsearch instead of lfind + lsearch)
11194:
11195: 1999-08-04 11:31 millert
11196:
11197: * lex.yy.c, sudo.tab.h: regen
11198:
11199: 1999-08-04 10:54 millert
11200:
11201: * configure, configure.in: Solais pam doesn't require anye xtra
11202: setup
11203:
11204: 1999-08-04 05:35 millert
11205:
11206: * parse.yacc: o Simpler '!' support now that the lexer deals with
11207: multiple !'s for us. o In the case of opFOO, have FOO give a
11208: boolean return value and set foo_matches in opFOO, not FOO. o
11209: Treat 'ALL' as a string since it gets fill()'d in
11210: parse.lex--fixes a small memory leak. In the long run it may
11211: be better to just fix parse.lex and make ALL back into a token.
11212: However, having it be a string is useful since it can be
11213: easily passed back to the parent rule if we so desire.
11214:
11215: 1999-08-04 03:54 millert
11216:
11217: * parse.lex: o Remove some unnecessary backslashes o collapse
11218: multiple !'s by using !+ and checking if yyleng is even or odd.
11219: this allows us to simplify ! handling in parse.yacc
11220:
11221: 1999-08-04 03:53 millert
11222:
11223: * sudo.c: -u flag was being ignored
11224:
11225: 1999-08-01 13:04 millert
11226:
11227: * Makefile.in: correct fix
11228:
11229: 1999-08-01 12:37 millert
11230:
11231: * Makefile.in: work around pod2man stupididy
11232:
11233: 1999-08-01 12:35 millert
11234:
11235: * Makefile.in: correct dependencies for .cat
11236:
11237: 1999-08-01 12:26 millert
11238:
11239: * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11240:
11241: 1999-08-01 12:25 millert
11242:
11243: * sudo.pod, visudo.pod: Add copyright Update to reality
11244:
11245: 1999-08-01 11:42 millert
11246:
11247: * parse.c, sudo.c, sudo.h: rename validate() to the more
11248: descriptive sudoers_lookup()
11249:
11250: 1999-08-01 06:49 millert
11251:
11252: * auth/aix_auth.c: use tgetpass
11253:
11254: 1999-07-31 12:32 millert
11255:
11256: * CHANGES: updates
11257:
11258: 1999-07-31 12:31 millert
11259:
11260: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11261: configure, configure.in, sudo.c: Sudo, not CU Sudo
11262:
11263: 1999-07-31 12:19 millert
11264:
11265: * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11266: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11267: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11268: lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11269: parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11270: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11271: visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11272: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11273: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11274: auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11275: LICENSE: add 4th term to license similar to term 5 in the apache
11276: license
11277:
11278: 1999-07-31 12:02 millert
11279:
11280: * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11281: sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11282:
11283: 1999-07-28 05:24 millert
11284:
11285: * CHANGES: updates
11286:
11287: 1999-07-28 05:21 millert
11288:
11289: * check.c: Use dirs instead of files for timestamp. This allows
11290: tty and non-tty schemes to coexist reasonably. Note, however,
11291: that when you update a tty ticket, the mtime on the user dir gets
11292: updated as well.
11293:
11294: 1999-07-28 05:17 millert
11295:
11296: * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11297: to link with "-lprot -lx" when linking test program, not just
11298: -lprot. Also add check for getspnam(). The SCO docs indicate
11299: that /etc/shadow can be used but this may be a lie.
11300:
11301: 1999-07-24 03:35 millert
11302:
11303: * auth/API: first cut at auth API description
11304:
11305: 1999-07-22 15:48 millert
11306:
11307: * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11308: securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11309: now an init method that gets run before the main loop. This
11310: allows auth routines to differentiate between initialization that
11311: happens once vs. setup that needs to run each time through the
11312: loop.
11313:
11314: 1999-07-22 12:23 millert
11315:
11316: * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11317:
11318: 1999-07-22 12:22 millert
11319:
11320: * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11321: versions of asprintf() and vasprintf()
11322:
11323: 1999-07-22 09:14 millert
11324:
11325: * TODO: remove 2 items. One done, one won't do.
11326:
11327: 1999-07-22 09:10 millert
11328:
11329: * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11330: visudo.cat, visudo.html, configure, lex.yy.c: regen
11331:
11332: 1999-07-22 09:06 millert
11333:
11334: * CHANGES: new changes
11335:
11336: 1999-07-22 09:01 millert
11337:
11338: * sudo.pod: o Document -K flag and update meaning of -k flag. o
11339: BSD-style copyright o Document clearing of BIND resolver
11340: environment variables o Clarify bit about shared libs o suggest
11341: rc files create /tmp/.odus if your OS gives away files
11342:
11343: 1999-07-22 08:59 millert
11344:
11345: * visudo.pod: BSD license
11346:
11347: 1999-07-22 08:58 millert
11348:
11349: * tgetpass.c: o BSD copyright o no need to block signals, we now do
11350: that in main() o cosmetic changes
11351:
11352: 1999-07-22 08:57 millert
11353:
11354: * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11355: sudo_user" instead of old globals. o some cometic cleanup
11356:
11357: 1999-07-22 08:56 millert
11358:
11359: * sudo_setenv.c, version.h: BSD-style copyright
11360:
11361: 1999-07-22 08:56 millert
11362:
11363: * sudo.h: o BSD copyright o logging and parser bits moved to their
11364: own .h files o new "struct sudo_user" to encapsulate many of the
11365: old globals.
11366:
11367: 1999-07-22 08:55 millert
11368:
11369: * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11370: use new logging routines o simplified flow of control o BIND
11371: resolver additions to badenv_table
11372:
11373: 1999-07-22 08:53 millert
11374:
11375: * strerror.c: BSD-style copyright
11376:
11377: 1999-07-22 08:53 millert
11378:
11379: * snprintf.c: Now compiles on more K&R compilers
11380:
11381: 1999-07-22 08:52 millert
11382:
11383: * putenv.c: BSD-style copyright, cosmetic changes
11384:
11385: 1999-07-22 08:51 millert
11386:
11387: * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11388: Move parser-specific defines and structs into parse.h + other
11389: cosmetic changes
11390:
11391: 1999-07-22 08:51 millert
11392:
11393: * logging.h: defines for logging routines
11394:
11395: 1999-07-22 08:49 millert
11396:
11397: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11398: interfaces.h, pathnames.h.in: BSD-style copyright
11399:
11400: 1999-07-22 08:48 millert
11401:
11402: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11403: copyright, cosmetic changes
11404:
11405: 1999-07-22 08:46 millert
11406:
11407: * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11408: add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11409: changes to fill in AUTH_OBJS for new auth api o check for
11410: strerror(), v?snprintf() and v?asprintf() o replace
11411: --with-AuthSRV with --with-fwtk
11412:
11413: 1999-07-22 08:43 millert
11414:
11415: * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11416: HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11417: HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11418: NO_PASSWD
11419:
11420: 1999-07-22 08:42 millert
11421:
11422: * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11423: are missing.
11424:
11425: 1999-07-22 08:39 millert
11426:
11427: * alloc.c: BSD-style copyright
11428:
11429: 1999-07-22 08:38 millert
11430:
11431: * TROUBLESHOOTING: no more --with-getpass
11432:
11433: 1999-07-22 08:34 millert
11434:
11435: * TODO: Take out things I've done...
11436:
11437: 1999-07-22 08:34 millert
11438:
11439: * README: Refer to LICENSE
11440:
11441: 1999-07-22 08:34 millert
11442:
11443: * PORTING: --with-getpass no longer exists
11444:
11445: 1999-07-22 08:33 millert
11446:
11447: * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11448: new files and new auth modules.
11449:
11450: 1999-07-22 08:32 millert
11451:
11452: * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11453: --with-fwtk and --without-passwd.
11454:
11455: 1999-07-22 08:31 millert
11456:
11457: * HISTORY: Update history a bit
11458:
11459: 1999-07-22 08:29 millert
11460:
11461: * COPYING, LICENSE: Now distributed under a BSD-style license
11462:
11463: 1999-07-22 08:28 millert
11464:
11465: * auth/sudo_auth.c: o BSD-style copyright o Add support for
11466: NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11467: rfc1938 code o new struct sudo_user global
11468:
11469: 1999-07-22 08:25 millert
11470:
11471: * auth/: pam.c, sia.c: BSD-style copyright and use new log
11472: functions
11473:
11474: 1999-07-22 08:24 millert
11475:
11476: * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11477: Use asprintf() and snprintf() where sensible.
11478:
11479: 1999-07-22 08:19 millert
11480:
11481: * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11482: handling is now done more reasonably--better sanity checks and
11483: tty-based stamps are now done as files in a directory with the
11484: same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11485: It is not currently possible to mix tty and non-tty based ticket
11486: schemes but this may change in the future (it requires sudo to
11487: use a directory instead of a file in the non-tty case). Also,
11488: ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11489: really deletes the file. That way you don't get the lecture
11490: again just because you killed your ticket in .logout. BSD-style
11491: copyright now.
11492:
11493: 1999-07-22 08:13 millert
11494:
11495: * logging.c: o rewritten logging routines. log_error() now takes
11496: printf-style varargs and log_auth() for the return value of
11497: validate(). o BSD-style copyright
11498:
11499: 1999-07-22 07:04 millert
11500:
11501: * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11502: auth API
11503:
11504: 1999-07-22 07:02 millert
11505:
11506: * auth/fwtk.c: Use snprintf() where it makes sense and add a
11507: BSD-style copyright
11508:
11509: 1999-07-22 07:00 millert
11510:
11511: * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11512: secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11513: copyright
11514:
11515: 1999-07-22 06:57 millert
11516:
11517: * emul/utime.h, utime.c: BSD-style copyright
11518:
11519: 1999-07-22 06:57 millert
11520:
11521: * emul/search.h: this has been rewritten so use my BSD-style
11522: copyright
11523:
11524: 1999-07-15 11:21 millert
11525:
11526: * snprintf.c: include malloc.h if no stdlib.h
11527:
11528: 1999-07-15 10:21 millert
11529:
11530: * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11531:
11532: 1999-07-15 10:20 millert
11533:
11534: * strerror.c: strerror() for systems w/o it
11535:
11536: 1999-07-12 06:53 millert
11537:
11538: * visudo.c: stylistic changes
11539:
11540: 1999-07-12 06:25 millert
11541:
11542: * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11543: comment
11544:
11545: 1999-07-11 16:10 millert
11546:
11547: * auth/pam.c: remove missed ref to PAM_nullpw
11548:
11549: 1999-07-11 16:10 millert
11550:
11551: * auth/sudo_auth.h: pasto
11552:
11553: 1999-07-11 15:19 millert
11554:
11555: * auth/kerb5.c: more or less complete now--still untested
11556:
11557: 1999-07-11 15:09 millert
11558:
11559: * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11560:
11561: 1999-07-11 14:42 millert
11562:
11563: * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11564: code into rfc1938.c
11565:
11566: 1999-07-11 07:22 millert
11567:
11568: * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11569: unchanged from dce_pwent.c
11570:
11571: 1999-07-11 06:44 millert
11572:
11573: * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11574: Could probably be much better
11575:
11576: 1999-07-11 06:43 millert
11577:
11578: * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11579: works (tested)
11580:
11581: 1999-07-11 05:37 millert
11582:
11583: * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11584:
11585: 1999-07-11 05:33 millert
11586:
11587: * auth/pam.c: don't use prompt global, it will go away
11588:
11589: 1999-07-11 05:32 millert
11590:
11591: * auth/secureware.c: correct copyright years
11592:
11593: 1999-07-10 20:32 millert
11594:
11595: * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11596: pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11597: New authentication API and methods
11598:
11599: 1999-07-08 06:46 millert
11600:
11601: * parse.yacc: only save an entry if user_matches && host_matches,
11602: even if the stack is empty (fix for previous commit)
11603:
11604: 1999-07-08 06:35 millert
11605:
11606: * parse.yacc: 1) Always save an entry on the stack if it is empty.
11607: This fixes the -l and -v flags that were broken by earlier parser
11608: changes.
11609:
11610: 2) In a Runas list, don't negate FALSE -> TRUE since that would
11611: make !foo match any time the user specified a runas user (via -u)
11612: other than foo.
11613:
11614: 1999-07-08 05:45 millert
11615:
11616: * testsudoers.c: interfaces and num_interfaces are now auto, not
11617: extern
11618:
11619: 1999-07-07 14:09 millert
11620:
11621: * auth.c: use a static global to keep stae about empty passwords
11622:
11623: 1999-07-07 14:08 millert
11624:
11625: * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11626: other modules
11627:
11628: 1999-07-05 16:53 millert
11629:
11630: * auth.c: PAM prompt code was wrong, looks like we have to kludge
11631: it after all.
11632:
11633: 1999-07-05 16:35 millert
11634:
11635: * auth.c: In the PAM code, when a user hits return at the first
11636: password prompt, exit without a warning just like the normal auth
11637: code
11638:
11639: 1999-07-05 16:15 millert
11640:
11641: * configure, configure.in: kludge around cross-compiler false
11642: positives
11643:
11644: 1999-07-05 16:14 millert
11645:
11646: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11647: (correct) PAM code Tgetpass now takes an echo flag for use with
11648: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11649: useless umask setting Change error from BAD_ALLOCATION ->
11650: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11651: auth.c for consistency
11652:
11653: 1999-07-05 16:11 millert
11654:
11655: * sudo.c: Some -Wall and kill some trailing spaces
11656:
11657: 1999-07-05 16:10 millert
11658:
11659: * configure.in: define -D__EXTENSIONS__ for solaris so we get
11660: crypt() proto
11661:
11662: 1999-06-22 09:42 millert
11663:
11664: * RUNSON: add Dynix 4.4.4
11665:
11666: 1999-06-22 09:30 millert
11667:
11668: * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11669: version, fall back on old kerb4 auth code
11670:
11671: 1999-06-22 06:41 millert
11672:
11673: * INSTALL: clarify some things
11674:
11675: 1999-06-22 06:38 millert
11676:
11677: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11678:
11679: 1999-06-14 19:47 millert
11680:
11681: * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11682:
11683: 1999-06-03 12:34 millert
11684:
11685: * tgetpass.c: Fix open(2) return value checking, was NULL for
11686: fopen, should be -1 for open
11687:
11688: 1999-06-03 12:06 millert
11689:
11690: * configure: regen
11691:
11692: 1999-06-03 12:06 millert
11693:
11694: * configure.in: better wording for solaris pam notice
11695:
11696: 1999-06-03 11:52 millert
11697:
11698: * CHANGES: document recent changes
11699:
11700: 1999-06-03 11:52 millert
11701:
11702: * TROUBLESHOOTING: Update shadow password section
11703:
11704: 1999-06-03 11:51 millert
11705:
11706: * auth.c: move authentication code from check.c to auth.c
11707:
11708: 1999-06-03 11:51 millert
11709:
11710: * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11711:
11712: 1999-05-16 21:36 millert
11713:
11714: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11715: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11716: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11717: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11718: interface-related defines to interfaces.h so we don't have to
11719: include <netinet/in.h> everywhere.
11720:
11721: 1999-05-14 12:30 millert
11722:
11723: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11724: logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11725: braindeath with our own SUDO_MAX_PASS.
11726: It turns out the old DES crypt does the right thing with
11727: passwords
11728: longert than 8 characters.
11729: o Fix common typo (necesary -> necessary)
11730: o Update TODO list
11731:
11732: 1999-05-03 12:00 millert
11733:
11734: * sudo.c: set $LOGNAME when we set $USER
11735:
11736: 1999-04-27 00:00 millert
11737:
11738: * INSTALL: add comment about digital unix and interfaces.c warning
11739: with gcc
11740:
11741: 1999-04-15 01:12 millert
11742:
11743: * sample.sudoers: use modern paths and give examples for some of
11744: the new parser features
11745:
11746: 1999-04-10 13:03 millert
11747:
11748: * parse.c: fix comment
11749:
11750: 1999-04-10 00:49 millert
11751:
11752: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11753: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11754: parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11755: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11756: Function names should be flush with the start of the line so they
11757: can be found trivially in an editor and with grep
11758:
11759: 1999-04-10 00:40 millert
11760:
11761: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11762: parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11763: is already void, no need to cast it
11764:
11765: 1999-04-10 00:37 millert
11766:
11767: * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11768: (this should not be possible)
11769:
11770: 1999-04-10 00:10 millert
11771:
11772: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11773: testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11774: listed in sudoers) to the command instead of stashing the struct
11775: stat. Should be safer.
11776:
11777: 1999-04-08 19:56 millert
11778:
11779: * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11780: release
11781:
11782: 1999-04-07 20:20 millert
11783:
11784: * CHANGES: updated
11785:
11786: 1999-04-07 19:18 millert
11787:
11788: * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11789: sudoers.pod: You can now specifiy a host list instead of just a
11790: host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11791: now works.
11792:
11793: 1999-04-07 02:59 millert
11794:
11795: * testsudoers.c: Quiet -Wall
11796:
11797: 1999-04-07 02:50 millert
11798:
11799: * parse.yacc: Move the push from the beginning of cmndspec to the
11800: end. This means we no longer have to do a push at the end of
11801: privilege, just reset some values.
11802:
11803: 1999-04-06 20:24 millert
11804:
11805: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11806: and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11807: most everywhere
11808:
11809: 1999-04-06 14:12 millert
11810:
11811: * sudoers.pod: modernize paths and update su example based on
11812: sample.sudoers one
11813:
11814: 1999-04-06 14:06 millert
11815:
11816: * sample.sudoers: New runas semantics
11817:
11818: 1999-04-06 13:54 millert
11819:
11820: * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11821: configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11822: ourselves so we don't need to rely on the system strdup(3) which
11823: may or may not exist. There is now no need to provide strdup()
11824: for those w/o it. Also, the prototype for estrdup() was wrong,
11825: it returns char * and its param is const.
11826:
11827: 1999-04-06 13:40 millert
11828:
11829: * getcwd.c: $Sudo tag
11830:
11831: 1999-04-06 13:20 millert
11832:
11833: * check.c: buf should be prompt; Michael Robokoff
11834: <mrobo@networkcs.com>
11835:
11836: 1999-04-06 01:40 millert
11837:
11838: * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11839: operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11840: and User_Alias.
11841:
11842: 1999-04-06 01:38 millert
11843:
11844: * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11845: GLOBAL_PROBLEM
11846:
11847: 1999-04-06 01:08 millert
11848:
11849: * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11850: as subscript.
11851:
11852: 1999-04-06 01:00 millert
11853:
11854: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11855: VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11856: command but the NOPASSWD flag was set. Make runasspec,
11857: runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11858: support for '!' in the runas list Fix double printing of '%' and
11859: '+' for groups and netgroups respectively Add *_matched macros
11860: (no need for local stack variable). Should only be used directly
11861: after a pop (since top must be >= 2).
11862:
11863: 1999-04-05 23:25 millert
11864:
11865: * aclocal.m4, configure.in: Add copyright, somewhat silly
11866:
11867: 1999-04-05 16:57 millert
11868:
11869: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11870: check_sia.c, compat.h, config.h.in, configure, configure.in,
11871: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11872: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11873: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11874: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11875: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11876: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11877: visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11878: 1.6 and combine copyright statements
11879:
11880: 1999-04-05 16:30 millert
11881:
11882: * sample.sudoers: Use ! not ^ to do negation
11883:
11884: 1999-04-05 16:29 millert
11885:
11886: * lex.yy.c: regen
11887:
11888: 1999-04-05 16:28 millert
11889:
11890: * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11891: across entris in a command list. Add a PASSWD tag to reverse
11892: NOPASSWD. When you override a runas or *PASSWD tag the value
11893: given becomes the new default for the rest of the command list.
11894:
11895: 1999-04-02 16:03 millert
11896:
11897: * CHANGES, RUNSON: update for 1.5.9
11898:
11899: 1999-04-02 16:02 millert
11900:
11901: * visudo.c: Shift return value of system(3) by 8 to get real exit
11902: value and if it is not 1 or 0 print the retval along with the
11903: error message.
11904:
11905: 1999-03-30 16:45 millert
11906:
11907: * Makefile.in: testsudoers needs LIBOBJS too
11908:
11909: 1999-03-30 12:17 millert
11910:
11911: * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11912: like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11913: would not allow millert to run ls as root.
11914:
11915: 1999-03-30 01:08 millert
11916:
11917: * CHANGES: new change
11918:
11919: 1999-03-30 01:03 millert
11920:
11921: * parse.yacc: Save entries that match a ! command on the matching
11922: stack too
11923:
11924: 1999-03-30 01:01 millert
11925:
11926: * sudo.c: Make sudo's usage info better when mutually exclusive
11927: args are given and don't rely on argument order to detect this;
11928: nick@zeta.org.au
11929:
11930: 1999-03-29 15:03 millert
11931:
11932: * CHANGES, Makefile.in, RUNSON: updates from CU
11933:
11934: 1999-03-28 23:38 millert
11935:
11936: * Makefile.in: use gzip
11937:
11938: 1999-03-28 23:31 millert
11939:
11940: * parse.yacc: Fix off by one error introduced in *alloc changes
11941:
11942: 1999-03-28 23:05 millert
11943:
11944: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11945: check_sia.c, compat.h, config.h.in, configure, configure.in,
11946: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11947: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11948: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11949: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11950: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11951: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11952: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11953: emul/utime.h: ++version
11954:
11955: 1999-03-28 21:59 millert
11956:
11957: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11958: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11959: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11960: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11961: emalloc/erealloc/estrdup
11962:
11963: 1999-03-28 20:29 millert
11964:
11965: * alloc.c: error checking memory allocation routines
11966:
11967: 1999-03-28 19:23 millert
11968:
11969: * parse.yacc: Still not right, this fixes it for real
11970:
11971: 1999-03-28 19:08 millert
11972:
11973: * parse.yacc: Fix for previous commit
11974:
11975: 1999-03-28 19:05 millert
11976:
11977: * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11978: when mixing different runas specs and ! commands. For example:
11979: millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11980: allow millert to run whoami as root as well as daemon when it
11981: should just allow daemon. The problem was that comma-separated
11982: commands in a list shared the same entry on the matching stack.
11983: Now they get their own entry iff there is a full match. It may
11984: be better to just make the runas spec persistent across all
11985: commands in a list like the user and host entries of the matching
11986: stack. However, since that is a fairly major change it should
11987: gets its own minor rev increase.
11988:
11989: 1999-03-28 13:50 millert
11990:
11991: * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11992: warning on Linux
11993:
11994: 1999-03-26 13:17 millert
11995:
11996: * CHANGES: updates
11997:
11998: 1999-03-26 13:12 millert
11999:
12000: * sample.sudoers: better su entry
12001:
12002: 1999-03-26 13:10 millert
12003:
12004: * configure: regen
12005:
12006: 1999-03-26 13:09 millert
12007:
12008: * check.c, configure.in: new pam code that works on solaris, should
12009: work on linux too; aelberg@home.com
12010:
12011: 1999-03-19 14:44 millert
12012:
12013: * RUNSON: more entries
12014:
12015: 1999-03-19 14:43 millert
12016:
12017: * config.h.in: only include strings.h if there is no string.h
12018:
12019: 1999-03-17 15:25 millert
12020:
12021: * config.guess: Sinix is now being called ReliantUNIX;
12022: bjjackso@us.oracle.com
12023:
12024: 1999-03-13 13:37 millert
12025:
12026: * sudo.c: shost must be set before log functions are called #ifdef
12027: HOST_IN_LOG
12028:
12029: 1999-03-07 18:34 millert
12030:
12031: * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
12032: command args. Stop processing an arg when you hit a backslash so
12033: the quoted-character detection can catch it.
12034:
12035: 1999-02-26 01:19 millert
12036:
12037: * interfaces.c: include sys/time.h; aparently AIX needs it.
12038: ppz@cdu.elektra.ru
12039:
12040: 1999-02-23 19:43 millert
12041:
12042: * configure, configure.in: add missing case statement so
12043: --without-sendmail works
12044:
12045: 1999-02-22 21:51 millert
12046:
12047: * CHANGES: more
12048:
12049: 1999-02-22 15:10 millert
12050:
12051: * configure, configure.in: only search for -lsun in irix <= 4.x
12052:
12053: 1999-02-22 15:01 millert
12054:
12055: * configure, configure.in: back out last configure.in change now
12056: that I've hacked autoconf to fix the real problem and add a
12057: missing newline
12058:
12059: 1999-02-22 14:32 millert
12060:
12061: * CHANGES: updated
12062:
12063: 1999-02-22 14:05 millert
12064:
12065: * getcwd.c: add def of dirfd() for those without it
12066:
12067: 1999-02-22 10:58 millert
12068:
12069: * configure.in, configure: When falling back to checking for
12070: socket() when linking with "-lsocket -lnsl" check for main()
12071: instead since autoconf has already cached the results of checking
12072: for socket() in -lsocket. This is really an autoconf bug as it
12073: should use the extra libs as part of the cache variable name.
12074:
12075: 1999-02-22 10:47 millert
12076:
12077: * configure.in: typo
12078:
12079: 1999-02-21 15:18 millert
12080:
12081: * configure.in: fix occurrence of $with_timeout that should be
12082: $with_password_timeout;
12083: Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
12084:
12085: 1999-02-17 11:40 millert
12086:
12087: * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
12088: espie@openbsd.org
12089:
12090: 1999-02-11 01:41 millert
12091:
12092: * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
12093: it does not have it
12094:
12095: 1999-02-09 13:11 millert
12096:
12097: * configure, configure.in: define for_BSD_TYPES irix
12098:
12099: 1999-02-06 19:47 millert
12100:
12101: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
12102: clear that it is the user's password, not root's, that we want.
12103:
12104: 1999-02-06 19:43 millert
12105:
12106: * check.c, sudo.h: If the user enters an empty password and really
12107: has no password, accept the empty password they entered.
12108: Perviously, they could enter anything *but* an empty password.
12109: Also, add GETPASS macro that calls either tgetpass() or getpass()
12110: depending on how sudo was configured. Problem noted by
12111: jdg@maths.qmw.ac.uk
12112:
12113: 1999-02-02 23:32 millert
12114:
12115: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12116: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12117: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12118: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12119: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
12120: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
12121: emul/utime.h: add explicate copyright
12122:
12123: 1999-02-02 23:16 millert
12124:
12125: * CHANGES: mention -lsocket, -lnsl configure changes
12126:
12127: 1999-02-02 17:54 millert
12128:
12129: * sudo.c: Don't clobber errno after calling check_sudoers().
12130:
12131: 1999-01-31 19:46 millert
12132:
12133: * configure.in, configure: When linking with both -lsocket and
12134: -lnsl be sure to do so in that order. Also, when we can't find
12135: socket() or inet_addr() and have to try linking with both libs,
12136: issue a warning.
12137:
12138: 1999-01-31 19:45 millert
12139:
12140: * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
12141:
12142: 1999-01-23 12:18 millert
12143:
12144: * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
12145: entry
12146:
12147: 1999-01-22 13:13 millert
12148:
12149: * configure, CHANGES, INSTALL, configure.in: fix and correctly
12150: document --with-umask; problem noted by adap@adap.org
12151:
12152: 1999-01-19 20:38 millert
12153:
12154: * configure.in, configure: only use /usr/{man,catman}/local to
12155: store man pages if suer didn't override prefix or mandir
12156:
12157: 1999-01-19 20:24 millert
12158:
12159: * configure, INSTALL, configure.in: fix typo, make --with-SecurID
12160: take an arg
12161:
12162: 1999-01-18 21:53 millert
12163:
12164: * RUNSON: updates from users
12165:
12166: 1999-01-18 21:04 millert
12167:
12168: * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
12169: 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
12170:
12171: 1999-01-18 20:00 millert
12172:
12173: * configure, configure.in: better fix for the problem of unresolved
12174: symbols in -lnsl or -lsocket
12175:
12176: 1999-01-18 19:39 millert
12177:
12178: * configure, configure.in: when checking for functions in -lnsl and
12179: -lsocket link with both of them to avoid unresolved symbols on
12180: some weirdo systems
12181:
12182: 1999-01-17 20:49 millert
12183:
12184: * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
12185: RCS before the RCS->CVS switch
12186:
12187: 1999-01-17 18:16 millert
12188:
12189: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
12190: configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
12191: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12192: interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
12193: parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
12194: sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
12195: tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
12196: emul/utime.h: add sudo tags
12197:
12198: 1999-01-17 17:53 millert
12199:
12200: * version.h, sudo.h: testing Sudo tag
12201:
12202: 1999-01-17 17:40 millert
12203:
12204: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
12205: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
12206: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
12207: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
12208: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12209: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
12210: sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
12211: tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
12212: emul/utime.h: crank version and regen files
12213:
12214: 1999-01-17 17:27 millert
12215:
12216: * Makefile.in: kill rcs goop in update_version and fix now that
12217: version is a const
12218:
12219: 1999-01-17 17:08 millert
12220:
12221: * INSTALL, check.c, config.h.in, configure, configure.in,
12222: logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12223: fcusack@iconnet.net
12224:
12225: 1999-01-17 16:45 millert
12226:
12227: * realpath.c, sudo_realpath.c: we no longer use realpath
12228:
12229: 1999-01-17 16:44 millert
12230:
12231: * qualify.c: replaced by find_path.c
12232:
12233: 1999-01-17 16:43 millert
12234:
12235: * options.h: all options are now configure flags
12236:
12237: 1999-01-17 16:42 millert
12238:
12239: * lex.yy.c: regen
12240:
12241: 1999-01-17 16:41 millert
12242:
12243: * getwd.c: superceded by getcwd.c
12244:
12245: 1999-01-17 16:36 millert
12246:
12247: * getpass.c: superceded by tgetpass.c
12248:
12249: 1999-01-17 16:36 millert
12250:
12251: * SUPPORTED: superceded by RUNSON
12252:
12253: 1999-01-17 16:33 millert
12254:
12255: * OPTIONS: No longer used now that we have configure options for
12256: everything.
12257:
12258: 1999-01-17 16:32 millert
12259:
12260: * configure: regen based on configure.in
12261:
12262: 1999-01-17 16:31 millert
12263:
12264: * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12265: sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12266: on sudo.pod, sudoers.pod, and visudo.pod
12267:
12268: 1998-12-11 12:16 millert
12269:
12270: * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12271:
12272: 1998-12-07 16:16 millert
12273:
12274: * interfaces.c: close sock when we are done with it
12275:
12276: 1998-11-27 19:37 millert
12277:
12278: * parse.yacc: never say "error on line -1"
12279:
12280: 1998-11-23 23:38 millert
12281:
12282: * configure.in: check for -lnsl before -lsocket
12283:
12284: 1998-11-23 23:29 millert
12285:
12286: * configure.in: quote '[', ']' used in ranges correctly
12287:
12288: 1998-11-21 17:54 millert
12289:
12290: * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12291:
12292: 1998-11-20 18:33 millert
12293:
12294: * version.h: 1.5.7
12295:
12296: 1998-11-20 18:33 millert
12297:
12298: * INSTALL: more info for 1.5.7
12299:
12300: 1998-11-20 18:30 millert
12301:
12302: * README: update for 1.5.7
12303:
12304: 1998-11-20 14:26 millert
12305:
12306: * parse.yacc: make increases of cm_list_size and ga_list_size be
12307: similar to increases of stacksize (ie: >= not > in initial
12308: compare).
12309:
12310: 1998-11-20 14:22 millert
12311:
12312: * parse.yacc: when we get a syntax error, report it for the
12313: previous line since that's generally where the error occurred.
12314:
12315: 1998-11-18 15:31 millert
12316:
12317: * config.h.in, configure.in, interfaces.c: add back check for
12318: sys/sockio.h but only use it if SIOCGIFCONF is not defined
12319:
12320: 1998-11-18 15:25 millert
12321:
12322: * config.h.in: define BSD_COMP for svr4
12323:
12324: 1998-11-17 23:16 millert
12325:
12326: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12327: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12328: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12329: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12330: -Wall
12331:
12332: 1998-11-17 23:10 millert
12333:
12334: * configure.in: kill check for sockio,h
12335:
12336: 1998-11-17 23:10 millert
12337:
12338: * config.h.in: no more HAVE_SYS_SOCKIO_H
12339:
12340: 1998-11-17 22:51 millert
12341:
12342: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12343: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12344: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12345: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12346: -Wall
12347:
12348: 1998-11-16 17:38 millert
12349:
12350: * sudo.c: add missing inform_user()
12351:
12352: 1998-11-13 19:21 millert
12353:
12354: * find_path.c: return NOT_FOUND if given fully qualified path and
12355: it does not exist previously it would perror(ENOENT) which
12356: bypasses the option to not leak path info
12357:
12358: 1998-11-13 19:20 millert
12359:
12360: * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12361: for kerb, check for -ldes
12362:
12363: 1998-11-13 14:19 millert
12364:
12365: * INSTALL: tty tickets are user:tty now
12366:
12367: 1998-11-13 14:10 millert
12368:
12369: * check.c: when using tty tickets make it user:tty not user.tty as
12370: a username could have a '.' in it
12371:
12372: 1998-11-09 19:15 millert
12373:
12374: * sudo.c: add "ignoring foo found in ." for auth successful case
12375:
12376: 1998-11-09 17:57 millert
12377:
12378: * sudo.c: add missing printf param
12379:
12380: 1998-11-08 15:56 millert
12381:
12382: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12383: go back to printing "command not found" unless
12384: --disable-path-info specified. Also, tell user when we ignore
12385: '.' in their path and it would have been used but for
12386: --with-ignore-dot.
12387:
12388: 1998-11-08 13:51 millert
12389:
12390: * check.c, sudo.c: Only one space after a colon, not two, in
12391: printf's
12392:
12393: 1998-11-05 12:59 millert
12394:
12395: * sudo.pod: document setting $USER
12396:
12397: 1998-11-04 22:24 millert
12398:
12399: * check.c: fix bugs with prompt expansion
12400:
12401: 1998-11-04 21:21 millert
12402:
12403: * sudo.c: set $USER for root too
12404:
12405: 1998-11-04 17:13 millert
12406:
12407: * getspwuid.c: typo
12408:
12409: 1998-11-04 17:07 millert
12410:
12411: * configure.in: HP-UX's iscomsec is in -lsec, not libc
12412:
12413: 1998-11-03 22:24 millert
12414:
12415: * configure.in: remove some entries in the OS case statement that
12416: did nothing
12417:
12418: 1998-11-03 22:19 millert
12419:
12420: * TROUBLESHOOTING: add "cd" section and flush out syslog section
12421:
12422: 1998-11-03 20:51 millert
12423:
12424: * Makefile.in: no more sudo-lex.yy.c
12425:
12426: 1998-11-03 20:50 millert
12427:
12428: * check_sia.c: add custom prompt support
12429:
12430: 1998-11-03 20:40 millert
12431:
12432: * sudo.c: kill perror("malloc") since we already have a good error
12433: messages pw_ent -> pw for brevity set $USER if -u specified
12434:
12435: 1998-11-03 20:39 millert
12436:
12437: * parse.c: kill perror("malloc") since we already have a good error
12438: messages pw_ent -> pw for brevity when checking if %group
12439: matches, look up user in password file so that %groups works in a
12440: RunAs spec.
12441:
12442: 1998-11-03 20:39 millert
12443:
12444: * logging.c, parse.yacc: kill perror("malloc") since we already
12445: have a good error messages
12446:
12447: 1998-11-03 20:38 millert
12448:
12449: * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12450: perror("malloc") since we already have a good error messages
12451: pw_ent -> pw for brevity
12452:
12453: 1998-11-03 15:03 millert
12454:
12455: * tgetpass.c: the prompt is expanded before tgetpass is called
12456:
12457: 1998-11-03 15:03 millert
12458:
12459: * sudo.h: tgetpass now has the same args as getpass again
12460:
12461: 1998-11-03 15:02 millert
12462:
12463: * getspwuid.c: add iscomsec, issecure support
12464:
12465: 1998-11-03 15:02 millert
12466:
12467: * check.c: we now expand any %h or %u in the prompt before passing
12468: to tgetpass
12469:
12470: 1998-11-03 14:58 millert
12471:
12472: * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12473:
12474: 1998-11-03 14:56 millert
12475:
12476: * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12477:
12478: 1998-11-03 14:55 millert
12479:
12480: * configure.in: add check for iscomsec in HP-UX
12481:
12482: 1998-11-03 14:51 millert
12483:
12484: * configure.in: check for issecure if we have getpwanam on SunOS
12485: some options are incompatible with DUNIX SIA check for dispcrypt
12486: on DUNIX
12487:
12488: 1998-10-25 15:21 millert
12489:
12490: * config.h.in: add HAVE_DISPCRYPT
12491:
12492: 1998-10-25 15:21 millert
12493:
12494: * secureware.c: add back support for non-dispcrypt based checking
12495: for older DUNIX
12496:
12497: 1998-10-25 00:51 millert
12498:
12499: * INSTALL: sia changes
12500:
12501: 1998-10-25 00:48 millert
12502:
12503: * configure.in: SIA becomes the default on Digital UNIX now havbe
12504: --disable-sia to turn it off...
12505:
12506: 1998-10-24 23:52 millert
12507:
12508: * check.c: move local includes after system ones
12509:
12510: 1998-10-24 19:28 millert
12511:
12512: * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12513: INCORRECT_PASSWORD or an insult to stderr
12514:
12515: 1998-10-24 19:07 millert
12516:
12517: * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12518: password. Only the first iteration was working.
12519:
12520: 1998-10-21 21:00 millert
12521:
12522: * aclocal.m4: don't trust UID_MAX or MAXUID
12523:
12524: 1998-10-21 20:35 millert
12525:
12526: * configure.in: fix two pastos
12527:
12528: 1998-10-21 20:30 millert
12529:
12530: * configure.in: fix typo
12531:
12532: 1998-10-21 20:19 millert
12533:
12534: * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12535: legal to be negative in DUNX 5.0
12536:
12537: 1998-10-21 20:15 millert
12538:
12539: * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12540: -lm but check for -ldb since DUNX < 4.0 lacks it
12541:
12542: 1998-10-21 19:50 millert
12543:
12544: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12545: secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12546: 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12547: exist).
12548:
12549: 1998-10-20 17:22 millert
12550:
12551: * INSTALL: updated --with-editor blurb
12552:
12553: 1998-10-20 17:21 millert
12554:
12555: * TROUBLESHOOTING: tell how to put sudoers in a different dir
12556:
12557: 1998-10-20 16:22 millert
12558:
12559: * configure.in: add missing quotes around $with_editor
12560:
12561: 1998-10-20 14:00 millert
12562:
12563: * configure.in: typo in --with-editor bits
12564:
12565: 1998-10-20 01:24 millert
12566:
12567: * INSTALL: I don't expect it to work on Solaris
12568:
12569: 1998-10-20 01:24 millert
12570:
12571: * check.c: add back security/pam_misc.h
12572:
12573: 1998-10-19 17:13 millert
12574:
12575: * INSTALL: remove dunix note since configure checks for this now
12576:
12577: 1998-10-19 16:30 millert
12578:
12579: * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12580: bad)
12581:
12582: 1998-10-19 14:32 millert
12583:
12584: * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12585: dispcrypt(3)
12586:
12587: 1998-10-19 14:32 millert
12588:
12589: * config.h.in: add HAVE_INITPRIVS
12590:
12591: 1998-10-19 14:31 millert
12592:
12593: * sudo.c: call initprivs() if we have it for getprpwuid later on
12594:
12595: 1998-10-19 14:30 millert
12596:
12597: * Makefile.in: clean pathnames.h too
12598:
12599: 1998-10-19 14:28 millert
12600:
12601: * configure.in: quote "Sorry, try again." with [] since it has a
12602: comma in it set LIBS when we add stuff to SUDO_LIBS set
12603: SECUREWARE when we find getprpwuid() so we can check for
12604: bigcrypt, set_auth_parameters, and initprivs later.
12605:
12606: 1998-10-19 13:48 millert
12607:
12608: * INSTALL: update Digital UNIX note about acl.h
12609:
12610: 1998-10-18 20:26 millert
12611:
12612: * INSTALL: add --with-sia --without-root-sudo ->
12613: --disable-root-sudo some reordering
12614:
12615: 1998-10-18 20:22 millert
12616:
12617: * secureware.c: add whitespace
12618:
12619: 1998-10-18 20:22 millert
12620:
12621: * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12622: sudo.h: add SIA support
12623:
12624: 1998-10-18 20:21 millert
12625:
12626: * check_sia.c: Initial revision
12627:
12628: 1998-10-18 19:42 millert
12629:
12630: * configure.in: when checking for -lsocket, -lnsl, and -linet,
12631: check for the specific functions we need from them.
12632:
12633: 1998-10-18 19:10 millert
12634:
12635: * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12636:
12637: 1998-10-18 18:15 millert
12638:
12639: * sudo.h, Makefile.in: added check_secureware
12640:
12641: 1998-10-18 18:12 millert
12642:
12643: * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12644: bits
12645:
12646: 1998-10-18 18:00 millert
12647:
12648: * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12649: other sets defined. configure now does that for us
12650:
12651: 1998-10-18 17:45 millert
12652:
12653: * configure.in: move some --with options around change a bunch of
12654: echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12655:
12656: 1998-10-18 01:09 millert
12657:
12658: * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12659: that caused a syntax error add some echo verbage
12660:
12661: 1998-10-17 18:08 millert
12662:
12663: * check.c: moved SecureWare stuff into secureware.c
12664:
12665: 1998-10-17 18:07 millert
12666:
12667: * secureware.c: Initial revision
12668:
12669: 1998-10-17 17:02 millert
12670:
12671: * INSTALL: update url to solaris gcc bins
12672:
12673: 1998-10-17 16:39 millert
12674:
12675: * INSTALL: change option formatter and flesh out someentries
12676:
12677: 1998-10-17 16:18 millert
12678:
12679: * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12680: environment variable
12681:
12682: 1998-10-17 16:01 millert
12683:
12684: * BUGS: everything is now done via configure
12685:
12686: 1998-10-17 16:00 millert
12687:
12688: * README: prev rev was 1.5.6
12689:
12690: 1998-10-17 00:33 millert
12691:
12692: * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12693: correctly
12694:
12695: 1998-10-17 00:32 millert
12696:
12697: * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12698: the Makefile
12699:
12700: 1998-10-17 00:31 millert
12701:
12702: * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12703: sudoers_gid, sudoers_mode from configure
12704:
12705: 1998-10-17 00:30 millert
12706:
12707: * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12708: substituted into the Makefile, not config.h
12709:
12710: 1998-10-17 00:30 millert
12711:
12712: * INSTALL: document all --with/--enable options
12713:
12714: 1998-10-15 02:25 millert
12715:
12716: * insults.h: options.h is no more
12717:
12718: 1998-10-15 02:25 millert
12719:
12720: * config.h.in: assimilated options.h
12721:
12722: 1998-10-15 02:24 millert
12723:
12724: * configure.in: moved options from options.h to configure
12725:
12726: 1998-10-15 01:41 millert
12727:
12728: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12729: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12730: sudo_setenv.c, visudo.c: no more options.h
12731:
12732: 1998-10-15 01:39 millert
12733:
12734: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12735: to options.h
12736:
12737: 1998-10-15 01:32 millert
12738:
12739: * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12740:
12741: 1998-10-15 00:10 millert
12742:
12743: * tgetpass.c: if select return < -1 still prompt for pw
12744:
12745: 1998-10-15 00:03 millert
12746:
12747: * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12748: IGNORE_DOT_PATH into configure options
12749:
12750: 1998-10-14 23:57 millert
12751:
12752: * parse.c: FAST_MATCH is no longer an optino
12753:
12754: 1998-10-14 23:52 millert
12755:
12756: * check.c: remove_timestamp() if timestamp is preposterous
12757:
12758: 1998-10-14 23:36 millert
12759:
12760: * options.h: convert more options to --with/--enable
12761:
12762: 1998-10-14 23:36 millert
12763:
12764: * INSTALL, aclocal.m4: logfile -> logpath
12765:
12766: 1998-10-14 23:31 millert
12767:
12768: * configure.in: convert more options into --with and --enable
12769:
12770: 1998-10-14 23:28 millert
12771:
12772: * tgetpass.c: catch EINTR in select and restart
12773:
12774: 1998-10-14 23:15 millert
12775:
12776: * logging.c: sys/errno -> errno
12777:
12778: 1998-09-24 11:40 millert
12779:
12780: * sudo.c: UMASK -> SUDO_UMASK.
12781:
12782: 1998-09-24 11:36 millert
12783:
12784: * check.c, logging.c: time.h, not sys/time.h
12785:
12786: 1998-09-21 19:52 millert
12787:
12788: * logging.c: MAILER -> _PATH_SENDMAIL
12789:
12790: 1998-09-21 00:06 millert
12791:
12792: * INSTALL, configure.in: no more --with-C2, now it is
12793: --disable-shadow
12794:
12795: 1998-09-21 00:00 millert
12796:
12797: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12798: getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12799: Always include shadow support if the platform supports it and the
12800: user did not disable it via configure
12801:
12802: 1998-09-20 19:48 millert
12803:
12804: * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12805:
12806: 1998-09-20 19:16 millert
12807:
12808: * Makefile.in: pathnames.h -> pathnames.h.in
12809:
12810: 1998-09-20 19:14 millert
12811:
12812: * check.c: fix version string
12813:
12814: 1998-09-20 19:12 millert
12815:
12816: * check.c: move pam_conv to be static to auth function remove
12817: pam_misc.h (solaris doesn't have one)
12818:
12819: 1998-09-20 19:10 millert
12820:
12821: * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12822: SUDO_PROG_PWD
12823:
12824: 1998-09-20 19:10 millert
12825:
12826: * configure.in: munge pathnames.h.in -> pathnames.h kill
12827: SUDO_PROG_PWD
12828:
12829: 1998-09-20 19:10 millert
12830:
12831: * pathnames.h.in: convert to pathnames.h.in
12832:
12833: 1998-09-18 20:20 millert
12834:
12835: * configure.in: fix typo in sysv4 matching case /.
12836:
12837: 1998-09-18 01:29 millert
12838:
12839: * check.c: pam stuff needs to run as root, not user, for shadow
12840: passwords
12841:
12842: 1998-09-17 12:26 millert
12843:
12844: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12845: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12846: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12847: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12848: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12849: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12850: BUGS, INSTALL, README, configure.in: updated version
12851:
12852: 1998-09-17 12:13 millert
12853:
12854: * check.c: user version.h for long message
12855:
12856: 1998-09-17 11:53 millert
12857:
12858: * check.c: this is version 1.5.6
12859:
12860: 1998-09-16 13:42 millert
12861:
12862: * Makefile.in: remove errant backslash
12863:
12864: 1998-09-14 22:25 millert
12865:
12866: * options.h, parse.yacc, pathnames.h.in: fix version string
12867:
12868: 1998-09-14 22:02 millert
12869:
12870: * BUGS, CHANGES, TODO: updtaed for 1.5.6
12871:
12872: 1998-09-14 22:02 millert
12873:
12874: * RUNSON: updated for 1.5.6
12875:
12876: 1998-09-14 11:48 millert
12877:
12878: * interfaces.c: kill unused localhost_mask var copy if name to
12879: ifr_tmp after we zero it
12880:
12881: 1998-09-13 15:50 millert
12882:
12883: * INSTALL: Better description of new vs. old sudoers modes fix some
12884: typos better description of /usr/ucb/cc gotchas on slowaris
12885:
12886: 1998-09-13 15:49 millert
12887:
12888: * Makefile.in: add sample.pam
12889:
12890: 1998-09-13 15:32 millert
12891:
12892: * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12893:
12894: 1998-09-12 11:10 millert
12895:
12896: * README: mention TROUBLESHOOTING more fix some typos
12897:
12898: 1998-09-11 20:30 millert
12899:
12900: * configure.in: move --enable/--disable to be after --with
12901:
12902: 1998-09-11 20:30 millert
12903:
12904: * INSTALL: document --enable/--disable
12905:
12906: 1998-09-11 20:26 millert
12907:
12908: * INSTALL: document --with-pam
12909:
12910: 1998-09-11 19:47 millert
12911:
12912: * configure.in: Add message for pam users
12913:
12914: 1998-09-11 19:27 millert
12915:
12916: * sample.pam: Initial revision
12917:
12918: 1998-09-11 19:23 millert
12919:
12920: * config.h.in: fix HAVE_PAM
12921:
12922: 1998-09-11 19:19 millert
12923:
12924: * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12925: <GCalvin@kenwoodusa.com>
12926:
12927: 1998-09-10 18:51 millert
12928:
12929: * config.h.in: add HOST_IN_LOG and WRAP_LOG
12930:
12931: 1998-09-10 18:51 millert
12932:
12933: * logging.c: add WRAP_LOG and HOST_IN_LOG
12934:
12935: 1998-09-10 18:37 millert
12936:
12937: * configure.in: add --enable-log-host and --enable-log-wrap
12938:
12939: 1998-09-10 18:32 millert
12940:
12941: * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12942: --with-timedir
12943:
12944: 1998-09-08 20:45 millert
12945:
12946: * compat.h: add howmany macro
12947:
12948: 1998-09-08 20:43 millert
12949:
12950: * tgetpass.c: include sys/param.h to get howmany macro
12951:
12952: 1998-09-07 20:42 millert
12953:
12954: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12955: add RUNAS_DEFAULT
12956:
12957: 1998-09-07 12:51 millert
12958:
12959: * fnmatch.c: bring in stdio.h for NULL
12960:
12961: 1998-09-07 12:50 millert
12962:
12963: * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12964:
12965: 1998-09-07 12:43 millert
12966:
12967: * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12968:
12969: 1998-09-07 12:42 millert
12970:
12971: * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12972:
12973: 1998-09-07 12:41 millert
12974:
12975: * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12976: if secureware
12977:
12978: 1998-09-07 12:39 millert
12979:
12980: * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12981:
12982: 1998-09-07 12:06 millert
12983:
12984: * interfaces.c: initialize previfname
12985:
12986: 1998-09-07 11:51 millert
12987:
12988: * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12989: SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12990: IFF_LOOPBACK instead of kludging it
12991:
12992: 1998-09-07 11:49 millert
12993:
12994: * configure.in: typo
12995:
12996: 1998-09-07 00:01 millert
12997:
12998: * Makefile.in: don't need special build line for sudo.tab.o
12999:
13000: 1998-09-06 23:58 millert
13001:
13002: * Makefile.in: don't clean sudo.tab.[ch]
13003:
13004: 1998-09-06 23:48 millert
13005:
13006: * sudo.c: Sudo should prompt for a password before telling the user
13007: that a command could not be found.
13008:
13009: 1998-09-06 23:47 millert
13010:
13011: * BUGS: for 1.5.6
13012:
13013: 1998-09-06 23:25 millert
13014:
13015: * INSTALL, README: no longer require yacc
13016:
13017: 1998-09-06 23:19 millert
13018:
13019: * Makefile.in: typo
13020:
13021: 1998-09-06 23:18 millert
13022:
13023: * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
13024:
13025: 1998-09-06 23:09 millert
13026:
13027: * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
13028: command args if you get a '='
13029:
13030: 1998-09-06 22:59 millert
13031:
13032: * insults.h: fix version ,
13033:
13034: 1998-09-06 22:57 millert
13035:
13036: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
13037: fix version
13038:
13039: 1998-09-06 22:55 millert
13040:
13041: * getcwd.c: getcwd(3) from OpenBSD for those without it.
13042:
13043: 1998-09-06 22:51 millert
13044:
13045: * sudo.h: HAVE_GETWD -> HAVE_GETCWD
13046:
13047: 1998-09-06 22:49 millert
13048:
13049: * configure.in: pretend sunos doesn't have getcwd(3) since it opens
13050: a pipe to getpwd!
13051:
13052: 1998-09-06 22:41 millert
13053:
13054: * parse.c: use NAMLEN() macro
13055:
13056: 1998-09-06 22:34 millert
13057:
13058: * fnmatch.c: remove duplicate include of string.h
13059:
13060: 1998-09-06 22:28 millert
13061:
13062: * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
13063:
13064: 1998-09-06 22:28 millert
13065:
13066: * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
13067:
13068: 1998-09-06 22:28 millert
13069:
13070: * config.h.in: add dev_t and ino_t
13071:
13072: 1998-07-28 12:44 millert
13073:
13074: * check.c: fix OTP_ONLY for opie
13075:
13076: 1998-06-24 12:22 millert
13077:
13078: * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
13079:
13080: 1998-05-19 00:10 millert
13081:
13082: * Makefile.in: make update_version saner
13083:
13084: 1998-05-18 23:32 millert
13085:
13086: * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
13087:
13088: 1998-05-18 23:32 millert
13089:
13090: * configure.in: check for waitpid and wait3 or no waitpid
13091:
13092: 1998-05-18 23:31 millert
13093:
13094: * logging.c: used waitpid or wait3 if we have 'em
13095:
13096: 1998-05-02 14:16 millert
13097:
13098: * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
13099: Faigon)
13100:
13101: 1998-04-27 20:09 millert
13102:
13103: * configure.in: don't need to explicately mention -lsocket -lnsl
13104: for sequent
13105:
13106: 1998-04-25 01:56 millert
13107:
13108: * configure.in: dynix should not link with -linet
13109:
13110: 1998-04-10 15:32 millert
13111:
13112: * INSTALL: mention that HP-UX doesn't ship with yacc
13113:
13114: 1998-04-06 22:35 millert
13115:
13116: * check.c: ignore kerberos if we can't get the local realm
13117:
13118: 1998-04-05 23:37 millert
13119:
13120: * configure.in, BUGS, INSTALL, README: ++version
13121:
13122: 1998-04-05 23:36 millert
13123:
13124: * version.h: ++
13125:
13126: 1998-04-05 23:35 millert
13127:
13128: * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
13129: find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
13130: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
13131: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
13132: visudo.c: updated version
13133:
13134: 1998-04-05 23:34 millert
13135:
13136: * check.c, sudo.h: fix version
13137:
13138: 1998-04-05 23:33 millert
13139:
13140: * getcwd.c: don't use popen/pclose. Do it inline.
13141:
13142: 1998-04-05 23:25 millert
13143:
13144: * lsearch.c: add rcsid
13145:
13146: 1998-04-05 23:21 millert
13147:
13148: * sudo.c: typo
13149:
13150: 1998-04-05 23:17 millert
13151:
13152: * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
13153: insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13154: check.c: updated version
13155:
13156: 1998-04-05 23:15 millert
13157:
13158: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
13159: MAX*
13160:
13161: 1998-04-05 23:14 millert
13162:
13163: * Makefile.in: getwd.c -> getcwd.c
13164:
13165: 1998-04-05 22:49 millert
13166:
13167: * config.h.in: kill HAVE_GETWD
13168:
13169: 1998-04-05 22:49 millert
13170:
13171: * configure.in: getcwd, not getwd
13172:
13173: 1998-04-05 22:48 millert
13174:
13175: * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
13176: defeats the purpose
13177:
13178: 1998-03-31 00:15 millert
13179:
13180: * OPTIONS, options.h: add STUB_LOAD_INTERFACES
13181:
13182: 1998-03-31 00:05 millert
13183:
13184: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13185: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13186: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13187: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13188: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13189: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13190: updated version
13191:
13192: 1998-03-30 23:54 millert
13193:
13194: * configure.in: support *-ccur-sysv4 and fix two typos
13195:
13196: 1998-03-27 19:52 millert
13197:
13198: * configure.in: don't echo about with_logfile and with_timedir
13199:
13200: 1998-03-27 19:49 millert
13201:
13202: * INSTALL: document --with-logfile and --with-timedir
13203:
13204: 1998-03-27 19:46 millert
13205:
13206: * aclocal.m4: support --with-logfile and --with-timedir
13207:
13208: 1998-03-27 19:46 millert
13209:
13210: * configure.in: Add --with-logfile and --with-timedir
13211:
13212: 1998-03-27 19:27 millert
13213:
13214: * sudo.c: change size computation of NewArgv for UNICOS
13215:
13216: 1998-02-18 20:10 millert
13217:
13218: * configure.in: treate -*-sysv4* like *-*-svr4
13219:
13220: 1998-02-18 18:19 millert
13221:
13222: * configure.in: fix spacing for --with-authenticate help
13223:
13224: 1998-02-18 16:39 millert
13225:
13226: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13227: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13228: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13229: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13230: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13231: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13232: updated version
13233:
13234: 1998-02-18 16:23 millert
13235:
13236: * parse.yacc: fix off by one error in push macro
13237:
13238: 1998-02-17 01:15 millert
13239:
13240: * configure.in: removed bogus alloca hack
13241:
13242: 1998-02-17 01:15 millert
13243:
13244: * check.c: added AIX 4.x authenticate() support
13245:
13246: 1998-02-17 01:11 millert
13247:
13248: * parse.yacc: include alloca.h if using bison and not gcc and it
13249: exists. fixes an alloca problem on hpux 10.x
13250:
13251: 1998-02-17 00:39 millert
13252:
13253: * INSTALL: mention --with-authenticate
13254:
13255: 1998-02-17 00:37 millert
13256:
13257: * configure.in: added AIX authenticate() support
13258:
13259: 1998-02-17 00:22 millert
13260:
13261: * config.h.in: add HAVE_AUTHENTICATE
13262:
13263: 1998-02-16 23:58 millert
13264:
13265: * interfaces.c: dynamically size ifconf buffer
13266:
13267: 1998-02-16 23:56 millert
13268:
13269: * configure.in: quote '[' and ']'
13270:
13271: 1998-02-16 21:42 millert
13272:
13273: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13274: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13275: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13276: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13277: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13278: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13279: updated version
13280:
13281: 1998-02-16 19:06 millert
13282:
13283: * visudo.pod: add ERRORS section
13284:
13285: 1998-02-16 18:57 millert
13286:
13287: * TROUBLESHOOTING: add busy stmp file explanation
13288:
13289: 1998-02-15 18:49 millert
13290:
13291: * configure.in: the name of the cached var that signals whether or
13292: not you are cross compiling changed. It is now
13293: ac_cv_prog_cc_cross
13294:
13295: 1998-02-11 16:26 millert
13296:
13297: * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13298:
13299: 1998-02-06 21:55 millert
13300:
13301: * sample.sudoers, sudoers.pod: better example of su but not root su
13302:
13303: 1998-02-06 15:49 millert
13304:
13305: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13306: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13307: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13308: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13309: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13310: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13311: updated version
13312:
13313: 1998-02-06 15:48 millert
13314:
13315: * Makefile.in: correct regexp for updating version
13316:
13317: 1998-02-06 14:05 millert
13318:
13319: * tgetpass.c: remove bogus flush of stderr spew prompt before
13320: turning off echo. Seems to fix a weird problem where if sudo
13321: complained about a bogus stamp file the user would sometimes not
13322: have a chance to enter a password
13323:
13324: 1998-02-06 14:05 millert
13325:
13326: * check.c: fix bogus flush of stderr
13327:
13328: 1998-02-05 19:19 millert
13329:
13330: * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13331:
13332: 1998-02-05 19:18 millert
13333:
13334: * configure.in: support hpux1[0-9] not just hpux10
13335:
13336: 1998-01-30 14:59 millert
13337:
13338: * parse.c: set sudoers_fp to nil after closing
13339:
13340: 1998-01-24 01:05 millert
13341:
13342: * config.guess, config.sub: updated from autoconf 2.12
13343:
13344: 1998-01-24 00:50 millert
13345:
13346: * configure.in: add *-*-svr4 rule
13347:
13348: 1998-01-22 22:53 millert
13349:
13350: * tgetpass.c: fix select usage for high fd's (dynamically allocate
13351: readfds)
13352:
13353: 1998-01-22 22:49 millert
13354:
13355: * check.c: kill extra whitespace
13356:
13357: 1998-01-22 19:28 millert
13358:
13359: * sudo.c: do an initgroups() before running a command, unless the
13360: target user is root.
13361:
13362: 1998-01-22 12:22 millert
13363:
13364: * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13365: syslog.conf
13366:
13367: 1998-01-21 01:56 millert
13368:
13369: * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13370: emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13371: version
13372:
13373: 1998-01-21 01:32 millert
13374:
13375: * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13376: updated version
13377:
13378: 1998-01-21 01:29 millert
13379:
13380: * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13381: ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13382: check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13383: updated version
13384:
13385: 1998-01-21 01:20 millert
13386:
13387: * Makefile.in: more tweaks to update_version
13388:
13389: 1998-01-21 01:19 millert
13390:
13391: * Makefile.in: fixed up update_version rule
13392:
13393: 1998-01-21 00:55 millert
13394:
13395: * configure.in: ++version
13396:
13397: 1998-01-21 00:53 millert
13398:
13399: * Makefile.in: removed supe of check.c
13400:
13401: 1998-01-21 00:51 millert
13402:
13403: * INSTALL: ++version I missed
13404:
13405: 1998-01-21 00:51 millert
13406:
13407: * RUNSON: updated
13408:
13409: 1998-01-21 00:48 millert
13410:
13411: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13412: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13413: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13414: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13415: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13416: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13417: visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13418:
13419: 1998-01-21 00:47 millert
13420:
13421: * CHANGES: updated for 1.5.5
13422:
13423: 1998-01-21 00:35 millert
13424:
13425: * Makefile.in: add rules to update version stuff in files so I
13426: don't need to do it by hand
13427:
13428: 1998-01-21 00:04 millert
13429:
13430: * sudo.h: sudoers_fp is now extern
13431:
13432: 1998-01-21 00:03 millert
13433:
13434: * sudo.c: in check_sudoers, cache the sudoers file handle in
13435: sudoers_fp so we don't have to open it again in the parse. This
13436: may help with weird solaris problems where EAGAIN sometime
13437: occurrs.
13438:
13439: 1998-01-21 00:02 millert
13440:
13441: * parse.c: sudoers file open is now done only in check_sudoers() so
13442: we just do a rewind() instead of an open. May help people on
13443: solaris who were getting EAGAIN.
13444:
13445: 1998-01-16 11:43 millert
13446:
13447: * INSTALL: mention that newer glibc is fixed
13448:
13449: 1998-01-13 12:58 millert
13450:
13451: * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13452: so ignore _RLD* instead of _RLD_*
13453:
13454: 1998-01-13 10:32 millert
13455:
13456: * parse.c: typo
13457:
13458: 1998-01-13 10:19 millert
13459:
13460: * parse.c: fix that bug for real
13461:
13462: 1998-01-13 02:39 millert
13463:
13464: * INSTALL: document Linux's libc6 brokenness.
13465:
13466: 1998-01-13 02:00 millert
13467:
13468: * parse.yacc: -Wall
13469:
13470: 1998-01-13 01:22 millert
13471:
13472: * RUNSON: updated
13473:
13474: 1998-01-13 00:50 millert
13475:
13476: * TROUBLESHOOTING: remind people to HUP syslogd
13477:
13478: 1998-01-13 00:05 millert
13479:
13480: * Makefile.in: add -O flag to tar
13481:
13482: 1998-01-13 00:00 millert
13483:
13484: * TODO, RUNSON: updated
13485:
13486: 1998-01-12 23:59 millert
13487:
13488: * sudo.pod: remove author's email addr. people should mail
13489: sudo-bugs
13490:
13491: 1998-01-12 23:49 millert
13492:
13493: * INSTALL: fix version
13494:
13495: 1998-01-12 23:48 millert
13496:
13497: * README, check.c, compat.h, config.h.in, configure.in,
13498: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13499: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13500: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13501: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13502: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13503: visudo.c: ++version
13504:
13505: 1998-01-12 23:44 millert
13506:
13507: * RUNSON: updated
13508:
13509: 1998-01-12 23:42 millert
13510:
13511: * INSTALL, Makefile.in: ++version
13512:
13513: 1998-01-12 23:41 millert
13514:
13515: * CHANGES: updated fort 1.5.4
13516:
13517: 1998-01-12 23:41 millert
13518:
13519: * check.c: exit(1) if user enters no passwd
13520:
13521: 1998-01-12 23:37 millert
13522:
13523: * BUGS: ++version
13524:
13525: 1998-01-12 23:10 millert
13526:
13527: * parse.c: commands can start with ./* not just /* -- fixes a
13528: serious security hole.
13529:
13530: 1997-12-21 18:17 millert
13531:
13532: * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13533: leave it as "unknown".
13534:
13535: 1997-11-23 13:29 millert
13536:
13537: * sample.sudoers: fix usage of (username) in conjunction with , and
13538: !
13539:
13540: 1997-11-23 13:28 millert
13541:
13542: * visudo.c: catch the case where the user is not in the passwd file
13543:
13544: 1997-11-23 13:24 millert
13545:
13546: * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13547: the nfds arg to select(2)
13548:
13549: 1997-11-23 01:53 millert
13550:
13551: * sudo.c: define tty global to an initial value to avoid dumping
13552: core in logging functions when passwd file is unavailable.
13553:
13554: 1997-11-23 01:51 millert
13555:
13556: * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13557: gotten the passwd entry
13558:
13559: 1997-11-23 00:21 millert
13560:
13561: * sudo.pod: talk about problem of ALL
13562:
13563: 1997-10-10 00:54 millert
13564:
13565: * README: new web location
13566:
13567: 1997-10-10 00:54 millert
13568:
13569: * INSTALL: fdesc bug is fixed in Open/Net BSD
13570:
13571: 1997-10-10 00:52 millert
13572:
13573: * HISTORY: updates from Nieusma
13574:
13575: 1997-10-09 18:37 millert
13576:
13577: * dce_pwent.c: move compat.h after the system includes
13578:
13579: 1997-08-06 14:58 millert
13580:
13581: * logging.c: save errno from being clobbered by wait(). From Theo
13582:
13583: 1997-05-21 11:57 millert
13584:
13585: * compat.h: fix an occurence of setresuid -> setreuid (typo)
13586:
13587: 1997-03-19 17:45 millert
13588:
13589: * install-sh: check for path to strip
13590:
13591: 1997-01-15 19:05 millert
13592:
13593: * logging.c: deal with maxfilelen < 0 case
13594:
13595: 1997-01-15 19:05 millert
13596:
13597: * OPTIONS: fixed descriptin
13598:
13599: 1996-12-11 23:10 millert
13600:
13601: * sudo.c: correct error message if mode/owner wrong and not
13602: statable by owner but is statable by root.
13603:
13604: 1996-11-23 02:18 millert
13605:
13606: * config.guess, config.sub: autoconf 2.11
13607:
13608: 1996-11-16 14:42 millert
13609:
13610: * CHANGES, RUNSON, TODO: sudo 1.5.3.
13611:
13612: 1996-11-14 15:08 millert
13613:
13614: * sudo.h, parse.yacc: command_alias -> generic_alias
13615:
13616: 1996-11-13 22:50 millert
13617:
13618: * sample.sudoers: added Runas_Alias example and fixed syntax errors
13619:
13620: 1996-11-13 22:50 millert
13621:
13622: * OPTIONS, options.h: updated MAILSUBJECT
13623:
13624: 1996-11-13 22:49 millert
13625:
13626: * logging.c: added %h expansion
13627:
13628: 1996-11-13 21:37 millert
13629:
13630: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13631: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13632: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13633: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13634: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13635: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13636: visudo.c, INSTALL, README, configure.in: ++version
13637:
13638: 1996-11-13 20:01 millert
13639:
13640: * emul/utime.h, BUGS: ++version
13641:
13642: 1996-11-13 19:45 millert
13643:
13644: * sudoers.pod: document Runas_Alias
13645:
13646: 1996-11-13 19:22 millert
13647:
13648: * visudo.pod: q (uid) -> Q
13649:
13650: 1996-11-13 19:21 millert
13651:
13652: * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13653: drop into whatnow
13654:
13655: 1996-11-13 19:05 millert
13656:
13657: * parse.yacc: add size params to sprintf
13658:
13659: 1996-11-13 19:04 millert
13660:
13661: * parse.lex: allow trailing space after '\\' but before '\n'
13662:
13663: 1996-11-13 19:04 millert
13664:
13665: * find_path.c: off by one error in path size check
13666:
13667: 1996-11-13 19:03 millert
13668:
13669: * check.c: sprintf paranoia
13670:
13671: 1996-11-12 11:59 millert
13672:
13673: * parse.yacc: fixed more_aliases
13674:
13675: 1996-11-12 11:58 millert
13676:
13677: * visudo.c: now warns if killed by signal ./
13678:
13679: 1996-11-11 10:49 millert
13680:
13681: * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13682: expanded (but it is gross)
13683:
13684: 1996-11-10 20:32 millert
13685:
13686: * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13687: 0400
13688:
13689: 1996-11-10 20:08 millert
13690:
13691: * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13692: USER_ALIAS)
13693:
13694: 1996-11-10 20:02 millert
13695:
13696: * parse.lex: Add Runas_Alias and simplify a rule.
13697:
13698: 1996-11-10 19:15 millert
13699:
13700: * parse.yacc: always store User_Alias's since they can be used
13701: inside of a runas list. Sigh. Really need a Runas_Alias
13702: instead.
13703:
13704: 1996-10-30 18:04 millert
13705:
13706: * visudo.c: deal with case where there is no sudoers file
13707:
13708: 1996-10-11 23:01 millert
13709:
13710: * TROUBLESHOOTING: added one
13711:
13712: 1996-10-10 22:11 millert
13713:
13714: * HISTORY, testsudoers.c: developement -> development
13715:
13716: 1996-10-10 22:08 millert
13717:
13718: * INSTALL: added a note
13719:
13720: 1996-10-10 20:36 millert
13721:
13722: * RUNSON: for 1.5.2
13723:
13724: 1996-10-10 20:36 millert
13725:
13726: * CHANGES: updated
13727:
13728: 1996-10-10 00:56 millert
13729:
13730: * PORTING: removed seteuid() notes
13731:
13732: 1996-10-09 13:37 millert
13733:
13734: * compat.h: better seteuid() emulatino
13735:
13736: 1996-10-09 13:36 millert
13737:
13738: * configure.in: added check for seteuid
13739:
13740: 1996-10-09 13:36 millert
13741:
13742: * config.h.in: added HAVE_SETEUID
13743:
13744: 1996-10-08 19:22 millert
13745:
13746: * configure.in: first stab at sequent support
13747:
13748: 1996-10-08 19:21 millert
13749:
13750: * config.h.in: added HAVE_SYS_SELECT_H
13751:
13752: 1996-10-08 19:21 millert
13753:
13754: * compat.h: sequent -> _SEQUENT_
13755:
13756: 1996-10-08 19:11 millert
13757:
13758: * compat.h: added seteuid() macro for DYNIX
13759:
13760: 1996-10-08 18:54 millert
13761:
13762: * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13763:
13764: 1996-10-07 01:05 millert
13765:
13766: * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13767: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13768: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13769: pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13770: README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13771: putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13772: visudo.c, tgetpass.c: ++version
13773:
13774: 1996-10-07 00:59 millert
13775:
13776: * sudo.pod: added -H and SUDO_PS1
13777:
13778: 1996-10-07 00:55 millert
13779:
13780: * configure.in: use SUDO_FUNC_FNMATCH
13781:
13782: 1996-10-07 00:54 millert
13783:
13784: * aclocal.m4: added SUDO_FUNC_FNMATCH
13785:
13786: 1996-10-07 00:53 millert
13787:
13788: * sudo.c: added -H flag
13789:
13790: 1996-10-07 00:53 millert
13791:
13792: * sudo.h: added MODE_RESET_HOME /
13793:
13794: 1996-10-05 00:00 millert
13795:
13796: * INSTALL: mention OPIE
13797:
13798: 1996-10-04 23:59 millert
13799:
13800: * configure.in: added opie support
13801:
13802: 1996-10-04 23:59 millert
13803:
13804: * check.c: added HAVE_OPIE and changed to *_OTP_*
13805:
13806: 1996-10-04 23:58 millert
13807:
13808: * compat.h, config.h.in: added HAVE_OPIE
13809:
13810: 1996-10-04 23:58 millert
13811:
13812: * OPTIONS, options.h: SKEY -> OTP
13813:
13814: 1996-10-03 23:27 millert
13815:
13816: * check.c: moved fclose() in skey stuff.
13817:
13818: 1996-10-03 19:53 millert
13819:
13820: * putenv.c: index -> strchr remove unnecesary stuff
13821:
13822: 1996-10-03 19:43 millert
13823:
13824: * check.c: now call skeychallenge() to get challenge instead of
13825: making one up ourselves. this way, we get extra goodies in the
13826: prompt.
13827:
13828: 1996-09-10 00:32 millert
13829:
13830: * CHANGES: added one
13831:
13832: 1996-09-10 00:18 millert
13833:
13834: * parse.lex: allow logins to start with a number (YUCK!)
13835:
13836: 1996-09-08 15:18 millert
13837:
13838: * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13839:
13840: 1996-09-08 15:15 millert
13841:
13842: * configure.in: DUNIX doesn't need -lnsl
13843:
13844: 1996-09-07 20:22 millert
13845:
13846: * CHANGES: [no log message]
13847:
13848: 1996-09-07 20:21 millert
13849:
13850: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13851: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13852: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13853: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13854: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13855: tgetpass.c, utime.c, version.h, visudo.c: courtesan
13856:
13857: 1996-09-07 20:13 millert
13858:
13859: * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13860: courtesan
13861:
13862: 1996-09-07 20:12 millert
13863:
13864: * visudo.pod: [no log message]
13865:
13866: 1996-09-07 20:00 millert
13867:
13868: * sudo.pod, visudo.pod: courtesan
13869:
13870: 1996-09-07 19:45 millert
13871:
13872: * HISTORY: added courtesan ./
13873:
13874: 1996-09-06 00:12 millert
13875:
13876: * sudo.c: added $SUDO_PROMPT support
13877:
13878: 1996-09-04 17:19 millert
13879:
13880: * check.c: print long skey challemged to stderr, not stdout
13881:
13882: 1996-08-31 23:10 millert
13883:
13884: * CHANGES: updated for 1.5.1
13885:
13886: 1996-08-31 23:07 millert
13887:
13888: * emul/utime.h: ++version
13889:
13890: 1996-08-31 12:34 millert
13891:
13892: * RUNSON: updated for 1.5.1
13893:
13894: 1996-08-30 10:49 millert
13895:
13896: * check.c: use shost, not host for tgetpass
13897:
13898: 1996-08-30 00:21 millert
13899:
13900: * OPTIONS, sudo.pod: documented %u and %h
13901:
13902: 1996-08-29 20:40 millert
13903:
13904: * configure.in: fixed typo
13905:
13906: 1996-08-29 20:37 millert
13907:
13908: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13909: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13910: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13911: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13912: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13913: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13914: visudo.c: ++version
13915:
13916: 1996-08-29 20:30 millert
13917:
13918: * BUGS: ++version
13919:
13920: 1996-08-29 18:32 millert
13921:
13922: * configure.in, Makefile.in, version.h: ++version
13923:
13924: 1996-08-29 17:58 millert
13925:
13926: * sudo.h: new tgetpass() params
13927:
13928: 1996-08-29 17:58 millert
13929:
13930: * check.c: pass use and host to tgetpass
13931:
13932: 1996-08-29 17:57 millert
13933:
13934: * tgetpass.c: added %u and %h escapes
13935:
13936: 1996-08-29 16:56 millert
13937:
13938: * OPTIONS, options.h, check.c: added NO_MESSAGE
13939:
13940: 1996-08-29 16:23 millert
13941:
13942: * configure.in: added cray (unicos) support
13943:
13944: 1996-08-27 11:36 millert
13945:
13946: * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13947:
13948: 1996-08-25 17:56 millert
13949:
13950: * INSTALL: added note about "make install"
13951:
13952: 1996-08-25 17:50 millert
13953:
13954: * parse.yacc: changed length/size params from int to size_t
13955:
13956: 1996-08-25 13:35 millert
13957:
13958: * OPTIONS: now get CSOPS insults as well by default
13959:
13960: 1996-08-25 13:33 millert
13961:
13962: * insults.h: use csops insults too by default
13963:
13964: 1996-08-25 13:31 millert
13965:
13966: * INSTALL, Makefile.in, README, config.h.in, configure.in,
13967: version.h: version = 1.5
13968:
13969: 1996-08-25 13:27 millert
13970:
13971: * sudo.c: added runas_homedir
13972:
13973: 1996-08-25 13:27 millert
13974:
13975: * TODO: updated for 1.5
13976:
13977: 1996-08-25 13:23 millert
13978:
13979: * RUNSON: updated for 1.5
13980:
13981: 1996-08-25 13:19 millert
13982:
13983: * CHANGES: 1.5 release
13984:
13985: 1996-08-25 13:17 millert
13986:
13987: * INSTALL: added "upgrading" notes
13988:
13989: 1996-08-22 14:00 millert
13990:
13991: * visudo.c: now do chmod and chown after edit of temp file and
13992: before rename
13993:
13994: 1996-08-18 12:52 millert
13995:
13996: * Makefile.in: ++version added INSTALL.configure
13997:
13998: 1996-08-18 12:52 millert
13999:
14000: * version.h, configure.in: ++version
14001:
14002: 1996-08-18 12:51 millert
14003:
14004: * TROUBLESHOOTING: [no log message]
14005:
14006: 1996-08-18 12:50 millert
14007:
14008: * parse.yacc: added missing cast
14009:
14010: 1996-08-17 20:37 millert
14011:
14012: * sudo.c: sets $HOME to pw_dir of runas user
14013:
14014: 1996-08-17 20:02 millert
14015:
14016: * sudo.pod: document $HOME change
14017:
14018: 1996-08-17 19:43 millert
14019:
14020: * sudo.pod: fixed up some wording
14021:
14022: 1996-08-17 19:25 millert
14023:
14024: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
14025: goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
14026: parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
14027: testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
14028:
14029: 1996-08-17 19:19 millert
14030:
14031: * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
14032: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
14033: ++version
14034:
14035: 1996-08-17 19:18 millert
14036:
14037: * sudo.h: name nad type changes
14038:
14039: 1996-08-17 19:17 millert
14040:
14041: * testsudoers.c: now works with new sudo
14042:
14043: 1996-08-17 19:07 millert
14044:
14045: * parse.yacc: fixed some XXX
14046:
14047: 1996-08-17 18:52 millert
14048:
14049: * parse.yacc: some variable name changes + comment headers for
14050: functions.
14051:
14052: 1996-08-17 18:41 millert
14053:
14054: * tgetpass.c: added extra paren's to make compilers happy
14055:
14056: 1996-08-17 18:34 millert
14057:
14058: * sudo.c: [no log message]
14059:
14060: 1996-08-17 18:30 millert
14061:
14062: * parse.c: now uses init_parser() if not in sudoers and tries
14063: "list" or "validate" scold but don't be nasty.
14064:
14065: 1996-08-17 18:29 millert
14066:
14067: * TROUBLESHOOTING: now can use upper case login names
14068:
14069: 1996-08-17 18:29 millert
14070:
14071: * visudo.c: now uses init_parser()
14072:
14073: 1996-08-17 18:28 millert
14074:
14075: * PORTING: added info about PASSWORD_TIMEOUT
14076:
14077: 1996-08-17 18:28 millert
14078:
14079: * INSTALL, README: updated
14080:
14081: 1996-08-17 18:28 millert
14082:
14083: * INSTALL.configure: Initial revision
14084:
14085: 1996-08-17 18:27 millert
14086:
14087: * BUGS: fixed a bug ,
14088:
14089: 1996-08-17 18:27 millert
14090:
14091: * parse.yacc: now dynamically allocates memory for the stacks -- no
14092: more overflows!
14093:
14094: 1996-08-17 18:26 millert
14095:
14096: * sudo.pod: -l now explands command aliases
14097:
14098: 1996-08-17 13:22 millert
14099:
14100: * parse.yacc: hacks to expand command aliases for `sudo -l'
14101:
14102: 1996-08-17 13:22 millert
14103:
14104: * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
14105: and bash)
14106:
14107: 1996-08-17 13:22 millert
14108:
14109: * sudo.h: added struct command_alias
14110:
14111: 1996-08-17 13:20 millert
14112:
14113: * sudo.pod: fixed a bug
14114:
14115: 1996-08-17 13:15 millert
14116:
14117: * lsearch.c: in compar() key should be first arg
14118:
14119: 1996-08-15 15:48 millert
14120:
14121: * BUGS: fixed some bugs
14122:
14123: 1996-08-15 15:47 millert
14124:
14125: * parse.yacc: can now deal with upcase HOST and USER names
14126:
14127: 1996-08-15 15:47 millert
14128:
14129: * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
14130:
14131: 1996-08-15 15:46 millert
14132:
14133: * sudo.pod: fixed thinko
14134:
14135: 1996-08-15 15:46 millert
14136:
14137: * parse.c: fix comment
14138:
14139: 1996-08-09 18:07 millert
14140:
14141: * parse.c, parse.yacc: added support for new `sudo -l' stuff
14142:
14143: 1996-08-09 18:06 millert
14144:
14145: * sudo.c: now uses list_matches()
14146:
14147: 1996-08-09 18:06 millert
14148:
14149: * sudo.h: added struct sudo_match
14150:
14151: 1996-08-09 17:37 millert
14152:
14153: * configure.in: now more -lgnumalloc
14154:
14155: 1996-08-01 13:12 millert
14156:
14157: * install-sh: added more paths for chown and whoami
14158:
14159: 1996-07-31 10:41 millert
14160:
14161: * check.c: typo
14162:
14163: 1996-07-30 13:45 millert
14164:
14165: * aclocal.m4: fixed DUNIX check for shadow pw
14166:
14167: 1996-07-30 13:41 millert
14168:
14169: * tgetpass.c: now only turn off echo if it is already on. this
14170: fixes a race when you use sudo in a pipelin
14171:
14172: 1996-07-30 12:53 millert
14173:
14174: * INSTALL: updated
14175:
14176: 1996-07-29 22:29 millert
14177:
14178: * configure.in: changed "test -z $foo && do_this" to if; then
14179: construct
14180:
14181: 1996-07-28 22:47 millert
14182:
14183: * configure.in: added missing defines of SHADOW_TYPE
14184:
14185: 1996-07-26 14:10 millert
14186:
14187: * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
14188: they are only in dunix 4.x
14189:
14190: 1996-07-26 14:09 millert
14191:
14192: * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
14193:
14194: 1996-07-26 13:23 millert
14195:
14196: * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
14197: that didn't match. Now we can have runas stuff on more than one
14198: line.
14199:
14200: 1996-07-25 23:45 millert
14201:
14202: * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
14203: defined to something
14204:
14205: 1996-07-25 23:45 millert
14206:
14207: * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
14208:
14209: 1996-07-25 23:44 millert
14210:
14211: * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
14212: instead of HAVE_C2_SECURITY
14213:
14214: 1996-07-25 23:44 millert
14215:
14216: * check.c: SHADOW_TYPE is always defined so just against its value
14217:
14218: 1996-07-25 23:44 millert
14219:
14220: * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14221:
14222: 1996-07-25 18:47 millert
14223:
14224: * sudoers.pod: * -> ?* in one example added another instance of
14225: (runas) and one of NOPASSWD:
14226:
14227: 1996-07-24 13:02 millert
14228:
14229: * configure.in: added back check for config.cache from other host
14230: type
14231:
14232: 1996-07-24 12:49 millert
14233:
14234: * parse.lex: removed an instance of \"
14235:
14236: 1996-07-24 12:49 millert
14237:
14238: * sample.sudoers: added an example
14239:
14240: 1996-07-24 12:44 millert
14241:
14242: * sudoers.pod: updated wrt new wildcard matching
14243:
14244: 1996-07-24 10:28 millert
14245:
14246: * configure.in: new check for shadow passwords if we don't know
14247: anything
14248:
14249: 1996-07-24 10:28 millert
14250:
14251: * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14252:
14253: 1996-07-24 02:19 millert
14254:
14255: * configure.in: added back check for -lsocket (oops)
14256:
14257: 1996-07-24 02:16 millert
14258:
14259: * configure.in: better (working) check for shadow passwd type if we
14260: know to use C2.
14261:
14262: 1996-07-24 01:59 millert
14263:
14264: * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14265:
14266: 1996-07-24 01:59 millert
14267:
14268: * Makefile.in: added config.{guess,sub}
14269:
14270: 1996-07-24 01:58 millert
14271:
14272: * aclocal.m4: removed unused stuff to figure out os type
14273:
14274: 1996-07-23 22:58 millert
14275:
14276: * config.sub: added openbsd
14277:
14278: 1996-07-23 22:54 millert
14279:
14280: * config.sub: Initial revision
14281:
14282: 1996-07-23 22:40 millert
14283:
14284: * config.guess: Initial revision
14285:
14286: 1996-07-23 21:18 millert
14287:
14288: * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14289: it can only be a pathname. need to check against sudoers_args
14290: even if user_args is nil
14291:
14292: 1996-07-23 21:18 millert
14293:
14294: * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14295: can only be a pathname need to check against sudoers_args even if
14296: user_args is nil
14297:
14298: 1996-07-23 18:52 millert
14299:
14300: * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14301:
14302: 1996-07-23 01:18 millert
14303:
14304: * testsudoers.c: now takes command line args and uses cmnd_args
14305:
14306: 1996-07-23 01:10 millert
14307:
14308: * parse.lex: fill_args was adding an extra leading space
14309:
14310: 1996-07-22 15:50 millert
14311:
14312: * visudo.c: fixed dummy command_matches()
14313:
14314: 1996-07-22 15:50 millert
14315:
14316: * parse.yacc: fixed prototype
14317:
14318: 1996-07-22 15:31 millert
14319:
14320: * sudo.h: added cmnd_args
14321:
14322: 1996-07-22 15:31 millert
14323:
14324: * parse.yacc: now uses flat args string
14325:
14326: 1996-07-22 15:30 millert
14327:
14328: * parse.c, parse.lex: now uses flat arg string
14329:
14330: 1996-07-22 15:29 millert
14331:
14332: * visudo.c: added cmnd_args def
14333:
14334: 1996-07-22 14:30 millert
14335:
14336: * sudo.c: now sets cmnd_args global
14337:
14338: 1996-07-22 14:30 millert
14339:
14340: * logging.c: cmnd_args is now exported from sudo.[ch]
14341:
14342: 1996-07-21 18:41 millert
14343:
14344: * parse.yacc: can't rely on cmnd_matches as much as I thought --
14345: added some $$ stuff back in to prevent namespace pollution
14346: problems.
14347:
14348: 1996-07-21 18:01 millert
14349:
14350: * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14351: consistent).
14352:
14353: 1996-07-20 00:45 millert
14354:
14355: * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14356: starts a 'runas' if in the initial state to avoid collision with
14357: command args
14358:
14359: 1996-07-20 00:23 millert
14360:
14361: * configure.in: added checks for specific shadow passwd schemes
14362:
14363: 1996-07-20 00:18 millert
14364:
14365: * aclocal.m4: added routines to check for specific shadow passwd
14366: types
14367:
14368: 1996-07-18 18:27 millert
14369:
14370: * configure.in: added support for ncr boxen
14371:
14372: 1996-07-18 18:26 millert
14373:
14374: * aclocal.m4: added support for detecting ncr boxen
14375:
14376: 1996-07-16 14:57 millert
14377:
14378: * configure.in: added sinix support
14379:
14380: 1996-07-13 22:29 millert
14381:
14382: * TROUBLESHOOTING: added info about "config.cache from other other"
14383: error.
14384:
14385: 1996-07-13 22:22 millert
14386:
14387: * aclocal.m4: now makes sure you don't have a config.cache file
14388: from another OS
14389:
14390: 1996-07-13 21:36 millert
14391:
14392: * configure.in: now sets $LIBS when needed to configure links with
14393: libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14394: check for bigcrypt(3) if SPW_SECUREWARE
14395:
14396: 1996-07-13 21:30 millert
14397:
14398: * getspwuid.c: fixed typo
14399:
14400: 1996-07-13 21:05 millert
14401:
14402: * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14403: AUTH_MAX_PASSWD_LENGTH
14404:
14405: 1996-07-13 21:05 millert
14406:
14407: * getspwuid.c: no more SPW_HPUX10
14408:
14409: 1996-07-13 21:04 millert
14410:
14411: * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14412:
14413: 1996-07-13 21:04 millert
14414:
14415: * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14416:
14417: 1996-07-13 21:04 millert
14418:
14419: * check.c: SPW_SECUREWARE now uses bigcrypt
14420:
14421: 1996-07-13 18:24 millert
14422:
14423: * sample.sudoers: fixed 2 syntax errors
14424:
14425: 1996-07-13 18:24 millert
14426:
14427: * sudoers: root may now run ALL as ALL
14428:
14429: 1996-07-11 20:59 millert
14430:
14431: * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14432:
14433: 1996-07-08 16:08 millert
14434:
14435: * check.c, configure.in: updated AFS support
14436:
14437: 1996-07-08 16:07 millert
14438:
14439: * TROUBLESHOOTING: added entry about /usr/ucb/cc
14440:
14441: 1996-07-08 16:06 millert
14442:
14443: * INSTALL: prep no longer holds gcc binaries
14444:
14445: 1996-07-08 15:48 millert
14446:
14447: * INSTALL: updated AFS note
14448:
14449: 1996-07-08 15:43 millert
14450:
14451: * Makefile.in: added @AFS_LIBS@
14452:
14453: 1996-07-08 15:33 millert
14454:
14455: * compat.h: AFS allows long passwords
14456:
14457: 1996-07-08 14:16 millert
14458:
14459: * testsudoers.c: fixed -u user support
14460:
14461: 1996-07-08 14:16 millert
14462:
14463: * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14464:
14465: 1996-07-08 13:30 millert
14466:
14467: * parse.yacc: fixed no_passwd vs. runas_matched
14468:
14469: 1996-07-08 10:30 millert
14470:
14471: * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14472: longer an issue
14473:
14474: 1996-07-08 10:30 millert
14475:
14476: * INSTALL: added --with-libraries > --with-libpath --with-incpath
14477:
14478: 1996-07-08 10:21 millert
14479:
14480: * parse.yacc: was setting runas_matches to -1 in wrong place
14481:
14482: 1996-07-08 09:58 millert
14483:
14484: * check.c: removed usersec.h which is not present in new AFS
14485: versions
14486:
14487: 1996-07-08 09:55 millert
14488:
14489: * tgetpass.c: now deals with timeout <= 0
14490:
14491: 1996-07-08 09:51 millert
14492:
14493: * OPTIONS: updated
14494:
14495: 1996-07-08 00:04 millert
14496:
14497: * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14498:
14499: 1996-07-07 22:30 millert
14500:
14501: * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14502: for root readable/writable filesystems
14503:
14504: 1996-07-07 20:49 millert
14505:
14506: * Makefile.in: now gives INSTALL -c flag
14507:
14508: 1996-07-07 20:34 millert
14509:
14510: * parse.yacc: slightly simpler initialization of no_passwd and
14511: runas_matches
14512:
14513: 1996-07-07 20:33 millert
14514:
14515: * testsudoers.c: added -u username support
14516:
14517: 1996-07-07 20:32 millert
14518:
14519: * configure.in: improved --with-libraries support
14520:
14521: 1996-07-07 16:27 millert
14522:
14523: * configure.in: added --with-incpath, --with-libpath,
14524: --with-libraries
14525:
14526: 1996-07-07 16:01 millert
14527:
14528: * parse.yacc: now initializes some fields that weren't getting set
14529: to -1 pretty gross -- need a rewrite.
14530:
14531: 1996-06-25 23:19 millert
14532:
14533: * alloca.c: removed emacs'isms
14534:
14535: 1996-06-25 22:29 millert
14536:
14537: * configure.in: no longer add -lPW to *_LIBS since we include
14538: alloca.c
14539:
14540: 1996-06-25 22:29 millert
14541:
14542: * config.h.in: added HAVE_ALLOCA_H
14543:
14544: 1996-06-25 22:28 millert
14545:
14546: * Makefile.in: added alloca.c
14547:
14548: 1996-06-25 22:18 millert
14549:
14550: * alloca.c: Initial revision
14551:
14552: 1996-06-25 21:58 millert
14553:
14554: * configure.in: ++version
14555:
14556: 1996-06-25 19:32 millert
14557:
14558: * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14559: nobody is not always set to a valid uid.
14560:
14561: 1996-06-25 19:31 millert
14562:
14563: * OPTIONS: fixed entry for SUDO_MODE
14564:
14565: 1996-06-25 18:02 millert
14566:
14567: * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14568: *and* gid were being set to -2. Now beat NFS to the punch and
14569: set uid to "nobody" ourselves, preserving group 0 to read
14570: sudoers.
14571:
14572: 1996-06-25 18:02 millert
14573:
14574: * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14575:
14576: 1996-06-25 18:00 millert
14577:
14578: * logging.c: fixed a typo
14579:
14580: 1996-06-25 18:00 millert
14581:
14582: * configure.in: no longer need AC_PROG_INSTALL
14583:
14584: 1996-06-25 17:59 millert
14585:
14586: * Makefile.in: always use install-sh to avoid install(1)'s that use
14587: get{pw,gr}nam
14588:
14589: 1996-06-25 16:07 millert
14590:
14591: * INSTALL: make clean -> make distclean
14592:
14593: 1996-06-20 01:17 millert
14594:
14595: * parse.yacc: removed some unnecsary if's
14596:
14597: 1996-06-20 01:16 millert
14598:
14599: * Makefile.in, version.h: ++version
14600:
14601: 1996-06-20 01:16 millert
14602:
14603: * parse.c, testsudoers.c: now includes netgroup.h
14604:
14605: 1996-06-20 00:45 millert
14606:
14607: * interfaces.c: removed cats of ioctl to int since they didn't shut
14608: up -Wall
14609:
14610: 1996-06-20 00:43 millert
14611:
14612: * interfaces.c: explicately cast ioctl() to int since it it not
14613: always declared
14614:
14615: 1996-06-20 00:41 millert
14616:
14617: * sudo.h: added declarations for yyparse() and yylex()
14618:
14619: 1996-06-20 00:27 millert
14620:
14621: * parse.yacc: fixed an occurence of '==' -> '='
14622:
14623: 1996-06-20 00:22 millert
14624:
14625: * config.h.in, configure.in: added check for netgroup.h
14626:
14627: 1996-06-20 00:20 millert
14628:
14629: * sudo.c: fixed 2 compiler warnings
14630:
14631: 1996-06-20 00:08 millert
14632:
14633: * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14634: weren't being initialized
14635:
14636: 1996-06-19 13:53 millert
14637:
14638: * sudo.pod: fixed a typo
14639:
14640: 1996-06-17 12:19 millert
14641:
14642: * parse.yacc: fixed a formatting thingie
14643:
14644: 1996-06-17 12:16 millert
14645:
14646: * parse.c, parse.yacc: fixed -u support with multiple user lists on
14647: a line
14648:
14649: 1996-06-17 10:23 millert
14650:
14651: * configure.in: unixware needs -lgen
14652:
14653: 1996-06-17 10:23 millert
14654:
14655: * README: updated ftp location
14656:
14657: 1996-06-17 00:08 millert
14658:
14659: * sudoers.pod: add net_addr/netmask support
14660:
14661: 1996-06-17 00:07 millert
14662:
14663: * sample.sudoers: added net_addr/mask example
14664:
14665: 1996-06-17 00:02 millert
14666:
14667: * parse.lex, parse.c: added support for net_addr/netmask
14668:
14669: 1996-06-15 20:13 millert
14670:
14671: * sudoers.pod: ^ -> !
14672:
14673: 1996-06-15 18:12 millert
14674:
14675: * RUNSON: updated for 1.4.3
14676:
14677: 1996-06-15 18:12 millert
14678:
14679: * CHANGES: udpated for 1.4.3
14680:
14681: 1996-06-15 18:11 millert
14682:
14683: * TROUBLESHOOTING, TODO, BUGS: updated
14684:
14685: 1996-06-15 18:11 millert
14686:
14687: * sample.sudoers: updated with examples of new stuff
14688:
14689: 1996-06-15 18:10 millert
14690:
14691: * INSTALL, README: ++version
14692:
14693: 1996-06-15 18:01 millert
14694:
14695: * sudoers.pod: updated wrt -u and NOPASSWD
14696:
14697: 1996-06-15 17:58 millert
14698:
14699: * sudo.pod: updated wrt -u and CAVEATS
14700:
14701: 1996-06-08 23:15 millert
14702:
14703: * sudo.c: fixed usage()
14704:
14705: 1996-06-08 22:57 millert
14706:
14707: * parse.lex: now use :foo: character classes (makes no diff for
14708: generated lexer)
14709:
14710: 1996-06-07 14:33 millert
14711:
14712: * check.c: fixed LONG_SKEY_PROMPT stuff
14713:
14714: 1996-06-06 15:35 millert
14715:
14716: * visudo.c: fixed a comment
14717:
14718: 1996-06-06 15:03 millert
14719:
14720: * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14721:
14722: 1996-06-06 15:02 millert
14723:
14724: * emul/search.h: fixed decls of lsearch()
14725:
14726: 1996-06-05 22:20 millert
14727:
14728: * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14729:
14730: 1996-06-05 22:20 millert
14731:
14732: * check.c: hpux 10 uses bigcrypt() if C2
14733:
14734: 1996-06-04 19:57 millert
14735:
14736: * parse.c: now always uses fnmatch to match args
14737:
14738: 1996-06-04 19:40 millert
14739:
14740: * tgetpass.c: back to using stdio instead of raw i/o since that
14741: caused some problems
14742:
14743: 1996-05-28 22:14 millert
14744:
14745: * sudo.c: now give usage warning if use -l,-v,-k with args
14746:
14747: 1996-05-28 18:22 millert
14748:
14749: * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14750:
14751: 1996-05-28 12:50 millert
14752:
14753: * sudo.c: now sets sudoers to correct group if mode is 0400
14754:
14755: 1996-05-28 12:02 millert
14756:
14757: * install-sh: updated to version used by inn and bind
14758:
14759: 1996-05-28 00:08 millert
14760:
14761: * configure.in: now uses -lgnumalloc if it exists
14762:
14763: 1996-05-28 00:02 millert
14764:
14765: * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14766: if it exists
14767:
14768: 1996-05-28 00:01 millert
14769:
14770: * sudo.c: rmeoved debugging statements
14771:
14772: 1996-05-28 00:00 millert
14773:
14774: * parse.yacc: added a missing free()
14775:
14776: 1996-05-27 23:58 millert
14777:
14778: * sudo.c: now uses user_gid instead of getegid (which was wrong
14779: anyway) to set SUDO_GID Now sets command line args in
14780: SUDO_COMMAND envariabled (logging.c depends on args being in the
14781: environment)
14782:
14783: 1996-05-27 23:57 millert
14784:
14785: * logging.c: now uses SUDO_COMMAND envariable to get command args
14786: rather than building it up again.
14787:
14788: 1996-05-27 22:42 millert
14789:
14790: * parse.c: now uses user_gid
14791:
14792: 1996-05-27 20:02 millert
14793:
14794: * sudo.c: fixed off by one error in allocation NewArgv
14795:
14796: 1996-05-27 20:01 millert
14797:
14798: * parse.c: in sudoers, 'command ""' now means command with no args
14799:
14800: 1996-05-27 20:01 millert
14801:
14802: * configure.in: added check for fnmatch(3) and fnmatch.h
14803:
14804: 1996-05-27 20:01 millert
14805:
14806: * config.h.in: added HAVE_FNMATCH
14807:
14808: 1996-05-27 20:00 millert
14809:
14810: * Makefile.in: replaced wildcat.* with fnmatch.*
14811:
14812: 1996-05-27 20:00 millert
14813:
14814: * testsudoers.c: now uses fnmatch()
14815:
14816: 1996-05-27 19:38 millert
14817:
14818: * parse.c: now uses fnmatch() instead of wildmat a trailing star
14819: (*) by itself now matches multiple args added support for
14820: wildcards in the pathname in sudoers
14821:
14822: 1996-05-25 19:23 millert
14823:
14824: * fnmatch.c: now includes compat.h and config.h
14825:
14826: 1996-05-25 18:09 millert
14827:
14828: * config.h.in: added HAVE_FNMATCH_H
14829:
14830: 1996-05-25 18:07 millert
14831:
14832: * configure.in: now checks for alloca() (if needed by bison or dce)
14833: and links with -lPW if it contains alloca() and libv and compiler
14834: do not.
14835:
14836: 1996-05-25 18:03 millert
14837:
14838: * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14839:
14840: 1996-04-28 22:38 millert
14841:
14842: * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14843: upgrade
14844:
14845: 1996-04-28 17:44 millert
14846:
14847: * Makefile.in: fixed pod2man usage
14848:
14849: 1996-04-28 17:40 millert
14850:
14851: * configure.in, Makefile.in, version.h: ++version
14852:
14853: 1996-04-28 17:20 millert
14854:
14855: * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14856:
14857: 1996-04-28 17:20 millert
14858:
14859: * sudo.h: removed PERM_FULL_ROOT
14860:
14861: 1996-04-28 17:18 millert
14862:
14863: * sudo.c: runas_user defaults to "root" so no more need to
14864: PERM_RUNAS
14865:
14866: 1996-04-28 17:16 millert
14867:
14868: * parse.c: will now only running commands as root if there was no
14869: runas list (or if root is in the runas list)
14870:
14871: 1996-04-28 17:15 millert
14872:
14873: * logging.c: now logs "USER=%s"
14874:
14875: 1996-04-28 17:12 millert
14876:
14877: * parse.yacc: runas_matches is now set to false if we get a
14878: negative match
14879:
14880: 1996-04-28 15:01 millert
14881:
14882: * parse.lex: make #uid work + some minor cleanup
14883:
14884: 1996-04-27 21:04 millert
14885:
14886: * sample.sudoers: added support for NOPASSWD and "runas" from
14887: garp@opustel.com /
14888:
14889: 1996-04-27 21:03 millert
14890:
14891: * visudo.c: added support for "runas" from garp@opustel.com
14892: replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14893: support for SUDOERS_MODE
14894:
14895: 1996-04-27 21:03 millert
14896:
14897: * testsudoers.c: added support for "runas" from garp@opustel.com
14898:
14899: 1996-04-27 21:02 millert
14900:
14901: * sudo.h: added support for NO_PASSWD and runas from
14902: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14903: SUDOERS_GID and added support fro SUDOERS_MODE
14904:
14905: 1996-04-27 21:00 millert
14906:
14907: * sudo.c: added support for NO_PASSWD and runas from
14908: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14909: SUDOERS_GID and added support fro SUDOERS_MODE
14910:
14911: 1996-04-27 21:00 millert
14912:
14913: * parse.yacc: added support for NO_PASSWD and runas from
14914: garp@opustel.com
14915:
14916: 1996-04-27 20:58 millert
14917:
14918: * parse.c, parse.lex: added support for NO_PASSWD and runas from
14919: garp@opustel.com
14920:
14921: 1996-04-27 20:56 millert
14922:
14923: * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14924:
14925: 1996-04-27 20:40 millert
14926:
14927: * configure.in: added --with-CC only link with -lshadow on linux
14928: (with shadow pw) if libc lacks getspnam()
14929:
14930: 1996-04-27 20:39 millert
14931:
14932: * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14933: do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14934: SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14935:
14936: 1996-04-27 20:26 millert
14937:
14938: * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14939:
14940: 1996-04-27 11:20 millert
14941:
14942: * INSTALL: added --with-CC
14943:
14944: 1996-04-06 16:31 millert
14945:
14946: * parse.lex: added double quote support
14947:
14948: 1996-04-06 16:29 millert
14949:
14950: * sudoers.pod: documented double quoting
14951:
14952: 1996-04-05 16:53 millert
14953:
14954: * mkinstalldirs: Initial revision
14955:
14956: 1996-04-05 16:53 millert
14957:
14958: * check.c: fixed some indentation
14959:
14960: 1996-04-05 16:48 millert
14961:
14962: * Makefile.in: fixed a typo
14963:
14964: 1996-04-04 19:39 millert
14965:
14966: * Makefile.in: added install-dirs .
14967:
14968: 1996-04-04 14:16 millert
14969:
14970: * dce_pwent.c: new version from "Jeff A. Earickson"
14971: <jaearick@colby.edu>
14972:
14973: 1996-04-03 13:40 millert
14974:
14975: * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14976:
14977: 1996-04-03 13:40 millert
14978:
14979: * BUGS: updated
14980:
14981: 1996-04-03 13:36 millert
14982:
14983: * parse.lex: FQHOST now has same constraints as non-FQHOST
14984:
14985: 1996-04-02 19:00 millert
14986:
14987: * INSTALL: added note about OS's w/ shadow passwords turned on by
14988: default
14989:
14990: 1996-04-02 18:58 millert
14991:
14992: * configure.in: fixed a typo
14993:
14994: 1996-04-02 18:48 millert
14995:
14996: * configure.in: added support for --without-THING sanitized shadow
14997: pw situtation by adding support for --without-C2
14998:
14999: 1996-04-02 16:42 millert
15000:
15001: * tgetpass.c: fixed a typo wrt placement of an end paren
15002:
15003: 1996-04-02 14:57 millert
15004:
15005: * check.c: was closing an fd that may not have been opened
15006:
15007: 1996-03-21 19:55 millert
15008:
15009: * sudo.c, OPTIONS, options.h: added NO_PASSWD
15010:
15011: 1996-03-19 19:40 millert
15012:
15013: * configure.in: now always use shadow pw on some arches
15014:
15015: 1996-03-19 17:07 millert
15016:
15017: * configure.in: added pyramid support
15018:
15019: 1996-03-19 17:04 millert
15020:
15021: * configure.in: no longer check for C2 if alternate passwd method
15022: is used no longer check for some libs twice
15023:
15024: 1996-03-19 17:00 millert
15025:
15026: * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
15027:
15028: 1996-03-19 17:00 millert
15029:
15030: * parse.lex: added FQHOST rules
15031:
15032: 1996-03-18 20:57 millert
15033:
15034: * tgetpass.c: now define TCSASOFT in necesary
15035:
15036: 1996-03-18 20:31 millert
15037:
15038: * tgetpass.c: now uses read/write instead of stdio string goop to
15039: avoid problems with select(2)
15040:
15041: 1996-03-18 19:37 millert
15042:
15043: * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
15044: -DIGNORE_DOT_PATH
15045:
15046: 1996-03-17 16:18 millert
15047:
15048: * INSTALL: added note about no shadow auto-detect if using
15049: alternate auth schemes
15050:
15051: 1996-03-17 15:33 millert
15052:
15053: * configure.in: don't check for C2 if AFS or DCE (unless they said
15054: --with-C2)
15055:
15056: 1996-03-17 15:08 millert
15057:
15058: * testsudoers.c: now groks shost
15059:
15060: 1996-03-17 15:01 millert
15061:
15062: * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
15063:
15064: 1996-03-16 14:43 millert
15065:
15066: * find_path.c: checkdot now works correctly
15067:
15068: 1996-03-12 18:01 millert
15069:
15070: * configure.in: can't have DCE and C2 passwords both...
15071:
15072: 1996-03-11 14:05 millert
15073:
15074: * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
15075: FQDN
15076:
15077: 1996-03-11 14:04 millert
15078:
15079: * configure.in: now looks for skey in /usr/lib and doesn't require
15080: libskey to be in /usr/local/lib just because skey.h is (for my
15081: netbsd box :-)
15082:
15083: 1996-03-11 02:00 millert
15084:
15085: * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
15086: _CONFIG_PATH_
15087:
15088: 1996-03-10 21:01 millert
15089:
15090: * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
15091:
15092: 1996-03-10 20:59 millert
15093:
15094: * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
15095:
15096: 1996-03-10 20:59 millert
15097:
15098: * OPTIONS: udpated FQDN
15099:
15100: 1996-03-10 20:58 millert
15101:
15102: * config.h.in: added _SUDO_PATH_TIMEDIR
15103:
15104: 1996-03-10 20:58 millert
15105:
15106: * aclocal.m4, configure.in: added SUDO_TIMEDIR
15107:
15108: 1996-03-10 20:58 millert
15109:
15110: * sudo.pod: updated wrt /var/run/sudo
15111:
15112: 1996-03-10 20:16 millert
15113:
15114: * sudo.c, sudo.h: added support for shost if FQDN
15115:
15116: 1996-03-10 20:14 millert
15117:
15118: * parse.yacc, visudo.c: now uses shost if FQDN
15119:
15120: 1996-03-10 20:12 millert
15121:
15122: * check.c: Now use skeylookup() instead off skeychallenge()
15123:
15124: 1996-02-27 20:41 millert
15125:
15126: * logging.c: mail_argv should not contain ALERTMAIL as it includes
15127: "-t"
15128:
15129: 1996-02-22 17:06 millert
15130:
15131: * INSTALL, Makefile.in, README, version.h, configure.in: ++version
15132:
15133: 1996-02-22 16:27 millert
15134:
15135: * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
15136:
15137: 1996-02-22 16:27 millert
15138:
15139: * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
15140:
15141: 1996-02-05 19:20 millert
15142:
15143: * README, INSTALL: ++version
15144:
15145: 1996-02-05 19:20 millert
15146:
15147: * Makefile.in: ++versoin
15148:
15149: 1996-02-05 19:16 millert
15150:
15151: * Makefile.in: fixed a typo
15152:
15153: 1996-02-05 19:16 millert
15154:
15155: * configure.in: ++version
15156:
15157: 1996-02-05 18:53 millert
15158:
15159: * RUNSON: updated
15160:
15161: 1996-02-05 18:47 millert
15162:
15163: * CHANGES: done for 1.4.1 (I hope)
15164:
15165: 1996-02-05 18:45 millert
15166:
15167: * sudoers.pod: added info on wildcards
15168:
15169: 1996-02-05 18:39 millert
15170:
15171: * sample.sudoers: added wildcard example
15172:
15173: 1996-02-05 17:03 millert
15174:
15175: * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
15176:
15177: 1996-02-05 17:03 millert
15178:
15179: * configure.in: addedSUDO_PROG_BSHELL !ll
15180:
15181: 1996-02-05 16:10 millert
15182:
15183: * visudo.pod: fixed up some formatting
15184:
15185: 1996-02-05 16:10 millert
15186:
15187: * sudoers.pod: redid section describing sample sudoers stuff
15188:
15189: 1996-02-05 16:10 millert
15190:
15191: * sudo.pod: fixed some formatting
15192:
15193: 1996-02-04 22:50 millert
15194:
15195: * getspwuid.c: now treats "" as bourne shell
15196:
15197: 1996-02-04 22:49 millert
15198:
15199: * Makefile.in: TESTOBJS nwo includes wildmat.o
15200:
15201: 1996-02-04 22:48 millert
15202:
15203: * testsudoers.c: now works with NewArg[cv]
15204:
15205: 1996-02-04 21:59 millert
15206:
15207: * sudo.c: removed an XXX (fixed it in getspwuid.c)
15208:
15209: 1996-02-04 21:58 millert
15210:
15211: * aclocal.m4: added check for bourne shell
15212:
15213: 1996-02-04 21:58 millert
15214:
15215: * pathnames.h.in: added _PATH_BSHELL
15216:
15217: 1996-02-04 21:58 millert
15218:
15219: * config.h.in: added _SUDO_PATH_BSHELL
15220:
15221: 1996-02-04 16:36 millert
15222:
15223: * visudo.c: unixware vi returns 256 instead of 0
15224:
15225: 1996-02-04 16:24 millert
15226:
15227: * INSTALL: added Linux note
15228:
15229: 1996-02-04 16:13 millert
15230:
15231: * logging.c: fixed up some XXX's. file log format now looks a
15232: little more like real syslog(3) format.
15233:
15234: 1996-02-04 16:13 millert
15235:
15236: * README, TROUBLESHOOTING: updated wrt lex/flex
15237:
15238: 1996-02-04 16:11 millert
15239:
15240: * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15241: since we ship with a pre-flex'd parser
15242:
15243: 1996-02-04 16:09 millert
15244:
15245: * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15246:
15247: 1996-02-04 02:28 millert
15248:
15249: * logging.c: eliminated some strcat()'s
15250:
15251: 1996-02-04 02:10 millert
15252:
15253: * configure.in: no longer checks for lex/flex (now assumes flex)
15254:
15255: 1996-02-04 02:08 millert
15256:
15257: * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15258: just kerb_dir_candidate
15259:
15260: 1996-02-02 20:48 millert
15261:
15262: * parse.yacc: now use a 'hook' expression instead of an iffy one
15263: :-)
15264:
15265: 1996-02-02 01:14 millert
15266:
15267: * visudo.c: now works with new sudo arg stuff
15268:
15269: 1996-02-02 01:14 millert
15270:
15271: * parse.yacc: fixed dereferencing deadbeef
15272:
15273: 1996-02-01 23:53 millert
15274:
15275: * sudo.c: changed an occurrence of Argv to NewArgv
15276:
15277: 1996-02-01 23:53 millert
15278:
15279: * parse.lex: took out support for quoted commands since there is no
15280: need...
15281:
15282: 1996-02-01 23:52 millert
15283:
15284: * parse.c: fixed a typo in a for() loop
15285:
15286: 1996-02-01 23:52 millert
15287:
15288: * logging.c: protected against dereferencing rogue pointers
15289:
15290: 1996-02-01 22:34 millert
15291:
15292: * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15293: needed this also allows us to eliminate some kludges in
15294: parse_args() and eliminate superfluous code.
15295:
15296: 1996-02-01 22:34 millert
15297:
15298: * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15299:
15300: 1996-02-01 22:32 millert
15301:
15302: * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15303: cmnd_args (no longer used)
15304:
15305: 1996-02-01 22:31 millert
15306:
15307: * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15308:
15309: 1996-02-01 22:30 millert
15310:
15311: * parse.yacc: COMMAND is now a struct containing the path and args
15312:
15313: 1996-02-01 22:30 millert
15314:
15315: * parse.lex: replaced append() with fill_cmnd() and fill_args.
15316: command args from a sudoers entry are now stored in an arrary for
15317: easy matching.
15318:
15319: 1996-02-01 22:28 millert
15320:
15321: * parse.c: command line args from sudoers file are now in an array
15322: like ones passed in from the command line
15323:
15324: 1996-01-31 20:59 millert
15325:
15326: * parse.c: wildwat stuff now works
15327:
15328: 1996-01-29 00:44 millert
15329:
15330: * version.h: ++version
15331:
15332: 1996-01-29 00:44 millert
15333:
15334: * Makefile.in: ++version added wildmat.*
15335:
15336: 1996-01-28 17:55 millert
15337:
15338: * parse.lex: added support for quoted commands (w/ or w/o args)
15339:
15340: 1996-01-22 01:55 millert
15341:
15342: * sudo.pod, visudo.pod: cleaned up formatting
15343:
15344: 1996-01-21 20:53 millert
15345:
15346: * sudo.pod, visudo.pod: Initial revision
15347:
15348: 1996-01-21 02:07 millert
15349:
15350: * sudoers.pod: looks reasonable, could be mroe readable
15351:
15352: 1996-01-20 23:47 millert
15353:
15354: * sudoers.pod: Initial revision
15355:
15356: 1996-01-16 14:38 millert
15357:
15358: * RUNSON: updated
15359:
15360: 1996-01-16 14:37 millert
15361:
15362: * OPTIONS: updated NO_ROOT_SUDO entry
15363:
15364: 1996-01-15 11:37 millert
15365:
15366: * RUNSON: [no log message]
15367:
15368: 1996-01-15 11:34 millert
15369:
15370: * sudo.c: fixed SECURE_PATH
15371:
15372: 1996-01-14 20:55 millert
15373:
15374: * RUNSON: udpa`ted for 1.4
15375:
15376: 1996-01-14 20:52 millert
15377:
15378: * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15379:
15380: 1996-01-14 20:32 millert
15381:
15382: * TROUBLESHOOTING: added entry for anal ansi compilers
15383:
15384: 1996-01-14 16:13 millert
15385:
15386: * INSTALL: added info on libcrypt_i for SCO
15387:
15388: 1996-01-14 16:05 millert
15389:
15390: * TODO: [no log message]
15391:
15392: 1996-01-14 15:39 millert
15393:
15394: * sample.sudoers: added comments
15395:
15396: 1996-01-14 15:25 millert
15397:
15398: * TODO: 1.4 release
15399:
15400: 1996-01-14 15:22 millert
15401:
15402: * README, config.h.in, configure.in, CHANGES: ++version
15403:
15404: 1996-01-14 15:21 millert
15405:
15406: * BUGS: ++version and fixed ISC
15407:
15408: 1996-01-14 15:19 millert
15409:
15410: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15411: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15412: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15413: logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15414: testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15415: ++version
15416:
15417: 1996-01-14 15:16 millert
15418:
15419: * interfaces.c: added STUB_LOAD_INTERFACES ++version
15420:
15421: 1996-01-14 15:14 millert
15422:
15423: * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15424: emul/utime.h: ++version
15425:
15426: 1996-01-14 15:13 millert
15427:
15428: * PORTING: added info about fd_set in tgetpass added info on
15429: interfaces.c
15430:
15431: 1996-01-11 13:22 millert
15432:
15433: * dce_pwent.c: added sudo header
15434:
15435: 1996-01-11 13:04 millert
15436:
15437: * tgetpass.c: fixed a typo
15438:
15439: 1996-01-11 13:01 millert
15440:
15441: * Makefile.in: tgetpass.o is now only linked in with sudo (not
15442: visudo)
15443:
15444: 1996-01-09 12:56 millert
15445:
15446: * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15447: configure.in: ++version
15448:
15449: 1996-01-09 12:54 millert
15450:
15451: * emul/utime.h: added copyright notice
15452:
15453: 1996-01-09 12:52 millert
15454:
15455: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15456: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15457: interfaces.c, logging.c, options.h, parse.c, parse.lex,
15458: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15459: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15460: visudo.c: ++version
15461:
15462: 1996-01-09 12:46 millert
15463:
15464: * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15465: svr4'ish boxen
15466:
15467: 1996-01-09 12:42 millert
15468:
15469: * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15470:
15471: 1996-01-09 12:41 millert
15472:
15473: * config.h.in: added check for sys/bsdtypes.h
15474:
15475: 1996-01-07 16:00 millert
15476:
15477: * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15478:
15479: 1996-01-07 15:55 millert
15480:
15481: * TROUBLESHOOTING: added 2 entries
15482:
15483: 1996-01-07 15:55 millert
15484:
15485: * Makefile.in: added FAQ
15486:
15487: 1996-01-07 14:26 millert
15488:
15489: * TROUBLESHOOTING: added section on syslog
15490:
15491: 1996-01-07 14:25 millert
15492:
15493: * configure.in: added AC_ISC_POSIX for better ISC support
15494:
15495: 1996-01-07 14:25 millert
15496:
15497: * config.h.in: fixed typo
15498:
15499: 1996-01-07 14:25 millert
15500:
15501: * config.h.in: added define for _POSIX_SOURCE
15502:
15503: 1996-01-04 00:41 millert
15504:
15505: * configure.in: fixed check for lsearch()
15506:
15507: 1995-12-21 21:53 millert
15508:
15509: * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15510: (should not happen)
15511:
15512: 1995-12-20 17:02 millert
15513:
15514: * configure.in: now only define HAVE_LSEARCH if there is a
15515: corresponding search.h
15516:
15517: 1995-12-20 15:52 millert
15518:
15519: * interfaces.c: works on ISC again
15520:
15521: 1995-12-18 17:36 millert
15522:
15523: * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15524: libcompat
15525:
15526: 1995-12-18 17:32 millert
15527:
15528: * lsearch.c: char * -> const char *
15529:
15530: 1995-12-18 17:29 millert
15531:
15532: * configure.in: now looks in -lcompat for lsearch()
15533:
15534: 1995-12-18 17:23 millert
15535:
15536: * Makefile.in: remove sudo.core visudo.core for clan target
15537:
15538: 1995-12-17 22:53 millert
15539:
15540: * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15541:
15542: 1995-12-17 22:36 millert
15543:
15544: * Makefile.in: fixed another occurence of sudo_getpwuid.*
15545:
15546: 1995-12-17 22:30 millert
15547:
15548: * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15549:
15550: 1995-12-17 22:22 millert
15551:
15552: * configure.in: moved the "echo"
15553:
15554: 1995-12-17 22:09 millert
15555:
15556: * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15557: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15558: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15559: ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15560: parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15561: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15562: tgetpass.c, utime.c, version.h, visudo.c: ++version
15563:
15564: 1995-12-17 22:04 millert
15565:
15566: * testsudoers.c: added group support
15567:
15568: 1995-12-17 22:00 millert
15569:
15570: * sample.sudoers: added group entry
15571:
15572: 1995-12-17 21:59 millert
15573:
15574: * sudoers.man: documented group support
15575:
15576: 1995-12-17 21:50 millert
15577:
15578: * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15579:
15580: 1995-12-15 17:45 millert
15581:
15582: * check.c: tkfile was too short and overflowed the kerberos realm
15583:
15584: 1995-12-11 17:09 millert
15585:
15586: * sudo.c: now copy command args directly from Argv
15587:
15588: 1995-12-11 15:55 millert
15589:
15590: * sudo.c: replaced code to copy cmnd_args so that is does not use
15591: realloc since most realloc()'s really stink
15592:
15593: 1995-12-08 14:11 millert
15594:
15595: * configure.in: syslog() fixed in hpux 10.01
15596:
15597: 1995-12-06 17:45 millert
15598:
15599: * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15600: if appropriate)
15601:
15602: 1995-12-06 17:30 millert
15603:
15604: * configure.in: better error if cannot find skey incs or libs
15605:
15606: 1995-12-06 17:26 millert
15607:
15608: * aclocal.m4: now use a temp file for determining max len of uid_t
15609: in string form. the old hacky way broke on netbsd
15610:
15611: 1995-12-05 19:02 millert
15612:
15613: * sudo.c: added set of parens and a space
15614:
15615: 1995-12-05 18:58 millert
15616:
15617: * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15618:
15619: 1995-12-05 18:58 millert
15620:
15621: * check.c: modified a comment
15622:
15623: 1995-12-05 18:57 millert
15624:
15625: * Makefile.in: fixed up testsudoers target
15626:
15627: 1995-12-05 18:56 millert
15628:
15629: * configure.in: DCE changes from Jeff Earickson
15630: <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15631: SUDO_FDFLAGS and VISUDO_LDFLAGS
15632:
15633: 1995-12-05 18:17 millert
15634:
15635: * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15636: SUDO_LDFLAGS, VISUDO_LDFLAGS
15637:
15638: 1995-11-27 23:32 millert
15639:
15640: * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15641:
15642: 1995-11-27 23:17 millert
15643:
15644: * check.c: LONG_SKEY_PROMPT is less of a klusge /
15645:
15646: 1995-11-27 23:17 millert
15647:
15648: * configure.in: fixed typos w/ dce stuff
15649:
15650: 1995-11-27 23:14 millert
15651:
15652: * Makefile.in: added dce_pwent.c
15653:
15654: 1995-11-26 13:48 millert
15655:
15656: * INSTALL: amended section on combining authentication mechanisms
15657:
15658: 1995-11-26 13:48 millert
15659:
15660: * PORTING: minor updates for 1.3.6
15661:
15662: 1995-11-26 13:47 millert
15663:
15664: * TROUBLESHOOTING: added 2 more entries
15665:
15666: 1995-11-26 13:39 millert
15667:
15668: * BUGS: updated for 1.3.6
15669:
15670: 1995-11-26 13:39 millert
15671:
15672: * README: overhauled
15673:
15674: 1995-11-25 21:23 millert
15675:
15676: * INSTALL: rewrote for sudo 1.3.6
15677:
15678: 1995-11-25 21:23 millert
15679:
15680: * TROUBLESHOOTING: added 3 entries
15681:
15682: 1995-11-25 13:53 millert
15683:
15684: * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15685: since many includes don't prototype it. gag me.
15686:
15687: 1995-11-25 13:23 millert
15688:
15689: * sudo.h: removed prototype for sudo_getpwuid() since convex C
15690: compiler choked on it.
15691:
15692: 1995-11-25 13:23 millert
15693:
15694: * sudo.c: added prototype for sudo_getpwuid()
15695:
15696: 1995-11-25 13:23 millert
15697:
15698: * lsearch.c: now compiles on strict ANSI compilers
15699:
15700: 1995-11-24 23:56 millert
15701:
15702: * check.c: added LONG_SKEY_PROMPT support
15703:
15704: 1995-11-24 23:55 millert
15705:
15706: * Makefile.in: added extra $'s for make to eat up, yum.
15707:
15708: 1995-11-24 23:38 millert
15709:
15710: * OPTIONS, options.h: added LONG_SKEY_PROMPT
15711:
15712: 1995-11-24 18:48 millert
15713:
15714: * check.c: s/key support now works with normal s/key as well as
15715: logdaemon
15716:
15717: 1995-11-24 18:46 millert
15718:
15719: * options.h, OPTIONS: added SKEY_ONLY
15720:
15721: 1995-11-24 18:46 millert
15722:
15723: * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15724:
15725: 1995-11-24 00:42 millert
15726:
15727: * INSTALL: added DCE note added more AIX notes
15728:
15729: 1995-11-24 00:39 millert
15730:
15731: * sudo.c: now include pthread.h for DCE support
15732:
15733: 1995-11-23 22:22 millert
15734:
15735: * check.c: dce_pwent() is ok after all .,
15736:
15737: 1995-11-23 22:21 millert
15738:
15739: * logging.c: now uses SYSLOG() macro that equates to either
15740: syslog() or syslog_wrapper
15741:
15742: 1995-11-23 21:44 millert
15743:
15744: * dce_pwent.c: minor formatting changes. renamed check() to
15745: somthing less generic
15746:
15747: 1995-11-23 21:27 millert
15748:
15749: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15750: visudo.c: now uses user_pw_ent and simple macros to get at the
15751: contents
15752:
15753: 1995-11-22 20:35 millert
15754:
15755: * check.c: simpler dec unix C2 support
15756:
15757: 1995-11-22 20:35 millert
15758:
15759: * getspwuid.c: now sets crypt_type for DEC unix C2
15760:
15761: 1995-11-21 18:00 millert
15762:
15763: * configure.in: added csops paths for skey
15764:
15765: 1995-11-21 16:27 millert
15766:
15767: * getspwuid.c: now includes string.h for strdup() prototype
15768:
15769: 1995-11-21 01:47 millert
15770:
15771: * getspwuid.c: fixed a few typos
15772:
15773: 1995-11-20 22:59 millert
15774:
15775: * check.c: now includes skey.h
15776:
15777: 1995-11-20 22:10 millert
15778:
15779: * getspwuid.c: fixed up comments
15780:
15781: 1995-11-20 22:04 millert
15782:
15783: * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15784:
15785: 1995-11-20 22:01 millert
15786:
15787: * sudo.c: now uses sudo_pw_ent
15788:
15789: 1995-11-20 21:50 millert
15790:
15791: * testsudoers.c: now uses sudo_pw_ent
15792:
15793: 1995-11-20 21:40 millert
15794:
15795: * visudo.c: now sets sudo_pw_ent
15796:
15797: 1995-11-20 21:28 millert
15798:
15799: * getspwuid.c: Initial revision
15800:
15801: 1995-11-20 21:28 millert
15802:
15803: * tgetpass.c: moved dce stuff into compat.h
15804:
15805: 1995-11-20 21:27 millert
15806:
15807: * sudo.h, logging.c: now uses sudo_pw_ent
15808:
15809: 1995-11-20 21:27 millert
15810:
15811: * Makefile.in: added sudo_getpwuid.c
15812:
15813: 1995-11-20 21:25 millert
15814:
15815: * compat.h: added dce support
15816:
15817: 1995-11-20 21:13 millert
15818:
15819: * parse.yacc: now uses sudo_pw_ent
15820:
15821: 1995-11-20 14:40 millert
15822:
15823: * check.c: fixed exempt_group stuff for OS's that don't put base
15824: gid in group vector
15825:
15826: 1995-11-20 01:39 millert
15827:
15828: * check.c: S/Key support now works with sunos4 shadow passwords
15829:
15830: 1995-11-19 22:31 millert
15831:
15832: * Makefile.in: fixed clean rule
15833:
15834: 1995-11-19 22:31 millert
15835:
15836: * config.h.in, configure.in: added DCE support
15837:
15838: 1995-11-19 22:30 millert
15839:
15840: * tgetpass.c: DCE & KERB support
15841:
15842: 1995-11-19 22:30 millert
15843:
15844: * check.c: first stab at dce support
15845:
15846: 1995-11-19 22:24 millert
15847:
15848: * dce_pwent.c: now smells like sudo
15849:
15850: 1995-11-19 22:11 millert
15851:
15852: * dce_pwent.c: Initial revision
15853:
15854: 1995-11-19 21:36 millert
15855:
15856: * check.c: skey'd sudo now works w/ normal password as well
15857:
15858: 1995-11-19 18:37 millert
15859:
15860: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15861: find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15862: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15863: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15864: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15865: tgetpass.c, utime.c, version.h, visudo.c: updated version number
15866:
15867: 1995-11-19 18:32 millert
15868:
15869: * README: updated to reflect version change
15870:
15871: 1995-11-19 18:27 millert
15872:
15873: * configure.in: --with options now line up ++version
15874:
15875: 1995-11-19 18:26 millert
15876:
15877: * sudo.h: removed unecesary S/Key stuff
15878:
15879: 1995-11-19 18:25 millert
15880:
15881: * configure.in: fixed S/Key support
15882:
15883: 1995-11-19 18:24 millert
15884:
15885: * Makefile.in: -I stuff now goes in CPPFLAGS
15886:
15887: 1995-11-19 18:23 millert
15888:
15889: * check.c: fixed SKey support
15890:
15891: 1995-11-19 15:23 millert
15892:
15893: * README: updated version
15894:
15895: 1995-11-19 13:59 millert
15896:
15897: * OPTIONS: fixed description of EXEMPTGROUP
15898:
15899: 1995-11-19 10:47 millert
15900:
15901: * sudo.c: more people use _RLD_ than just alphas...
15902:
15903: 1995-11-18 21:35 millert
15904:
15905: * Makefile.in: replaced $man_prefix with $mandir
15906:
15907: 1995-11-18 21:30 millert
15908:
15909: * configure.in: fixed a typo
15910:
15911: 1995-11-18 21:28 millert
15912:
15913: * Makefile.in: now use more GNU'ish dir names
15914:
15915: 1995-11-18 21:27 millert
15916:
15917: * configure.in: now set *dir correctly (can override from command
15918: line)
15919:
15920: 1995-11-18 19:17 millert
15921:
15922: * sudo.c: now deal with situations where we getwd() fails
15923:
15924: 1995-11-17 00:37 millert
15925:
15926: * Makefile.in: added etc_dir, bin_dir, sbin_dir
15927:
15928: 1995-11-17 00:37 millert
15929:
15930: * configure.in: added sbin_dir
15931:
15932: 1995-11-16 21:28 millert
15933:
15934: * Makefile.in: now ship a flex-generated lex.yy.c
15935:
15936: 1995-11-16 21:09 millert
15937:
15938: * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15939: SUDOERS_OWNER
15940:
15941: 1995-11-16 21:06 millert
15942:
15943: * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15944: overridden via Makefile
15945:
15946: 1995-11-16 21:05 millert
15947:
15948: * options.h: no more error for redefining SUDOERS_OWNER
15949:
15950: 1995-11-16 21:05 millert
15951:
15952: * OPTIONS: expanded SUDOERS_OWNER section
15953:
15954: 1995-11-16 03:05 millert
15955:
15956: * visudo.c: now warn if chown(2) failed
15957:
15958: 1995-11-16 02:55 millert
15959:
15960: * logging.c: better default warning for NO_SUDOERS_FILE
15961:
15962: 1995-11-16 02:54 millert
15963:
15964: * sudo.c: added missing set_perms() no more cryptic message if the
15965: sudoers file is zero length, now just give a parse error
15966:
15967: 1995-11-16 02:42 millert
15968:
15969: * logging.c: better diagnostics if NO_SUDOERS_FILE
15970:
15971: 1995-11-16 02:41 millert
15972:
15973: * sudo.c: check_sudoers() now catches sudoers files that are not
15974: readable (but are stat'able).
15975:
15976: 1995-11-13 01:12 millert
15977:
15978: * configure.in: now add -D__STDC__ for convex cc (not gcc)
15979:
15980: 1995-11-13 00:52 millert
15981:
15982: * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15983: exec_prefix
15984:
15985: 1995-11-13 00:52 millert
15986:
15987: * Makefile.in: now uses exec_prefix & prefix from configure
15988:
15989: 1995-11-13 00:16 millert
15990:
15991: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15992: parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15993: tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15994: so shadow build trees can have a custom copy of options.h
15995:
15996: 1995-11-13 00:15 millert
15997:
15998: * check.c: user_is_exempt() is no longer a hack, it now uses
15999: getgrnam()
16000:
16001: 1995-11-12 23:56 millert
16002:
16003: * options.h: EXEMPTGROUP is now "sudo"
16004:
16005: 1995-11-12 22:25 millert
16006:
16007: * configure.in: MAN_POSTINSTALL now contains a leading space
16008:
16009: 1995-11-12 22:25 millert
16010:
16011: * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
16012: now removes testsudoers in clean:
16013:
16014: 1995-11-12 22:24 millert
16015:
16016: * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
16017:
16018: 1995-10-30 15:51 millert
16019:
16020: * sudo.c: unset the KRB_CONF envariable if using kerberos so we
16021: don't get spoofed into using a bogus server
16022:
16023: 1995-09-29 17:50 millert
16024:
16025: * parse.yacc: now explicately initialize match[] tp be FALSE
16026:
16027: 1995-09-23 16:48 millert
16028:
16029: * sudo.c: removed unused variable now passes -Wall
16030:
16031: 1995-09-23 16:48 millert
16032:
16033: * parse.yacc: yyerror and dumpaliases are now void's now passes
16034: -Wall
16035:
16036: 1995-09-23 16:48 millert
16037:
16038: * parse.lex: added prototype for yyerror
16039:
16040: 1995-09-23 16:47 millert
16041:
16042: * interfaces.c: rmeoved unused cruft now passes -Wall
16043:
16044: 1995-09-23 16:47 millert
16045:
16046: * check.c, logging.c, parse.c: now passes -Wall
16047:
16048: 1995-09-23 16:46 millert
16049:
16050: * Makefile.in: fixed headers that moved to emul dir
16051:
16052: 1995-09-23 12:05 millert
16053:
16054: * logging.c: fixed deref of nil pointer if no args
16055:
16056: 1995-09-15 19:18 millert
16057:
16058: * OPTIONS: added a caveat to FQDN section
16059:
16060: 1995-09-13 19:48 millert
16061:
16062: * Makefile.in: more $srcdir support for install targets
16063:
16064: 1995-09-13 17:17 millert
16065:
16066: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
16067: putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
16068: visudo.c: don't include malloc.h if we include stdlib.h
16069:
16070: 1995-09-12 21:44 millert
16071:
16072: * parse.yacc: local search.h now lives in emul
16073:
16074: 1995-09-12 21:41 millert
16075:
16076: * lsearch.c: local search.h now lives in emul
16077:
16078: 1995-09-12 21:41 millert
16079:
16080: * check.c, utime.c: local utime.h now lives in emul dir
16081:
16082: 1995-09-12 21:38 millert
16083:
16084: * Makefile.in: added support for building in other than the
16085: sourcedir
16086:
16087: 1995-09-10 14:01 millert
16088:
16089: * OPTIONS: annotated CSOPS_INSULTS option
16090:
16091: 1995-09-10 13:56 millert
16092:
16093: * TROUBLESHOOTING: updated shadow passwords blurb
16094:
16095: 1995-09-09 21:00 millert
16096:
16097: * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
16098: shell and passes along foo as the arguments
16099:
16100: 1995-09-09 18:52 millert
16101:
16102: * parse.lex: collapsed pathname and dir sections into one -- its
16103: now less expensive
16104:
16105: 1995-09-09 18:34 millert
16106:
16107: * parse.lex: fixed spacing quoting [,:\\=] now works correctly
16108: append() and fill() now take args to make the above work
16109:
16110: 1995-09-08 20:51 millert
16111:
16112: * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
16113: a tty on fd 1 to erroneously have "none" as their tty
16114:
16115: 1995-09-04 15:35 millert
16116:
16117: * check.c: timestampfile is now a global static removed decl of
16118: timestampfile in remove_timestamp since we can just use the
16119: global one
16120:
16121: 1995-09-04 15:28 millert
16122:
16123: * check.c: created touch() to update timestamps added
16124: USE_TTY_TICKETS support (bit of a kludge)
16125:
16126: 1995-09-04 15:28 millert
16127:
16128: * compat.h: added _S_IFDIR and S_ISDIR
16129:
16130: 1995-09-04 15:22 millert
16131:
16132: * OPTIONS, options.h: added USE_TTY_TICKETS
16133:
16134: 1995-09-04 00:38 millert
16135:
16136: * parse.yacc: removed const from casts for lsearch() & lfind() to
16137: placate irix 4.x C compiler
16138:
16139: 1995-09-03 14:12 millert
16140:
16141: * sudo.c: now only strip '/dev/' off of a tty if it starts with
16142: '/dev/'
16143:
16144: 1995-09-03 14:12 millert
16145:
16146: * pathnames.h.in: added _PATH_DEV
16147:
16148: 1995-09-03 14:11 millert
16149:
16150: * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
16151: tcgetattr only if have termios.h
16152:
16153: 1995-09-03 14:09 millert
16154:
16155: * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
16156: not int for c_?flag
16157:
16158: 1995-09-03 13:19 millert
16159:
16160: * parse.lex, parse.yacc: fixed a spelling error
16161:
16162: 1995-09-03 13:17 millert
16163:
16164: * Makefile.in: fixed typo
16165:
16166: 1995-09-02 12:55 millert
16167:
16168: * Makefile.in: fixed a comment
16169:
16170: 1995-09-02 12:54 millert
16171:
16172: * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
16173: now that we dynamically allocate strings they need to be free()'d
16174:
16175: 1995-09-02 12:46 millert
16176:
16177: * parse.lex: dynamically allocates space for strings
16178:
16179: 1995-09-02 12:34 millert
16180:
16181: * sudo.h: no more MAXCOMMANDLENGTH
16182:
16183: 1995-09-01 22:25 millert
16184:
16185: * sudo.h: added decl of tty
16186:
16187: 1995-09-01 22:25 millert
16188:
16189: * logging.c, sudo.c: moved tty stuff into sudo.c
16190:
16191: 1995-09-01 14:18 millert
16192:
16193: * parse.c: fixed a logic bug. Was denying a command if user gave
16194: command line args but there were none in the sudoers file which
16195: is wrong.
16196:
16197: 1995-09-01 01:18 millert
16198:
16199: * sudo.h: MAXCOMMMANDLEN dropped down to 1K
16200:
16201: 1995-09-01 01:13 millert
16202:
16203: * parse.lex: return foo; -> return(foo);
16204:
16205: 1995-09-01 01:03 millert
16206:
16207: * parse.yacc: fixed netgr_matches() prototype
16208:
16209: 1995-09-01 01:02 millert
16210:
16211: * parse.lex: added support for escaping "termination" characters
16212:
16213: 1995-09-01 00:55 millert
16214:
16215: * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
16216: command args
16217:
16218: 1995-09-01 00:50 millert
16219:
16220: * sudo.c: fixed comments
16221:
16222: 1995-09-01 00:49 millert
16223:
16224: * goodpath.c: fixed negation problem (doh!)
16225:
16226: 1995-09-01 00:25 millert
16227:
16228: * parse.yacc: fixed 2nd parameter to lfind()
16229:
16230: 1995-09-01 00:24 millert
16231:
16232: * parse.lex: now do bounds checking in fill() and append()
16233:
16234: 1995-09-01 00:23 millert
16235:
16236: * sudo.c: include netdb.h as we should added a missing void cast
16237: added SHELL_IF_NO_ARGS support now use realloc() properly. would
16238: fail if realloc actually moved the string instead of shrinking it
16239:
16240: 1995-09-01 00:17 millert
16241:
16242: * sample.sudoers: updated with examples of new features
16243:
16244: 1995-09-01 00:05 millert
16245:
16246: * goodpath.c: now set errno to EACCES if not a regular file or not
16247: executable
16248:
16249: 1995-09-01 00:04 millert
16250:
16251: * find_path.c: if given a fully-qualified or relative path we now
16252: check it with sudo_goodpath() and error out with the appropriate
16253: error message if the file does not exist or is not executable
16254:
16255: 1995-09-01 00:03 millert
16256:
16257: * lsearch.c, emul/search.h: now use correct args for lfind
16258:
16259: 1995-09-01 00:03 millert
16260:
16261: * logging.c: added a comment
16262:
16263: 1995-08-31 23:52 millert
16264:
16265: * insults.h: added in CSOps insults
16266:
16267: 1995-08-31 23:51 millert
16268:
16269: * ins_csops.h: Initial revision
16270:
16271: 1995-08-31 23:35 millert
16272:
16273: * tgetpass.c: added RCS id
16274:
16275: 1995-08-31 22:56 millert
16276:
16277: * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16278: HAVE_GETWD
16279:
16280: 1995-08-31 22:55 millert
16281:
16282: * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16283:
16284: 1995-08-31 22:54 millert
16285:
16286: * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16287: -p now works with -s
16288:
16289: 1995-08-31 22:54 millert
16290:
16291: * parse.c: don't try to stat() "pseudo commands" like "validate"
16292:
16293: 1995-08-31 22:53 millert
16294:
16295: * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16296: SHELL_IF_NO_ARGS
16297:
16298: 1995-08-31 22:53 millert
16299:
16300: * configure.in: added SecurID support added other insults to
16301: --with-csops
16302:
16303: 1995-08-31 22:52 millert
16304:
16305: * config.h.in: added HAVE_SECURID
16306:
16307: 1995-08-31 22:52 millert
16308:
16309: * Makefile.in: added clobber target added ins_csops.h now gets
16310: CFLAGS from configure
16311:
16312: 1995-08-31 22:46 millert
16313:
16314: * aclocal.m4: relaxed SUDO_FULL_VOID
16315:
16316: 1995-08-31 22:44 millert
16317:
16318: * visudo.c: function comment blocks are now in same style as rest
16319: of code
16320:
16321: 1995-08-31 22:44 millert
16322:
16323: * testsudoers.c: added support for command line args in
16324: /etc/sudoers
16325:
16326: 1995-08-31 22:43 millert
16327:
16328: * sudoers.man: updated to have command args in the sudoers file
16329:
16330: 1995-08-31 22:42 millert
16331:
16332: * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16333: VARIABLES section
16334:
16335: 1995-08-19 19:32 millert
16336:
16337: * parse.yacc: PATH renamed to COMMAND
16338:
16339: 1995-08-19 19:31 millert
16340:
16341: * parse.lex: it is now a parse error for directories to have args
16342: attached to them
16343:
16344: 1995-08-19 19:30 millert
16345:
16346: * logging.c: now say command args if telling user to buzz off
16347:
16348: 1995-08-19 19:30 millert
16349:
16350: * sudo.c: -s no longer indicates end of args sped up loading on
16351: cmnd_args in load_cmnd()
16352:
16353: 1995-08-19 19:29 millert
16354:
16355: * parse.c: removed an unreachable statement
16356:
16357: 1995-08-19 17:53 millert
16358:
16359: * parse.lex: made more efficient by pulling out the terminators
16360: when in GOTCMND state and making them their own rule
16361:
16362: 1995-08-14 00:07 millert
16363:
16364: * sudo.h: removed MAXLOGLEN since it is no longer used
16365:
16366: 1995-08-14 00:07 millert
16367:
16368: * parse.lex: now allows command args
16369:
16370: 1995-08-14 00:06 millert
16371:
16372: * parse.c: now groks command arguments
16373:
16374: 1995-08-13 23:39 millert
16375:
16376: * logging.c: now sets tty correctly when piped input
16377:
16378: 1995-08-13 23:35 millert
16379:
16380: * sudo.c: fixed loading of cmnd_args (was including command name
16381: too)
16382:
16383: 1995-08-13 23:34 millert
16384:
16385: * logging.c: fixed a core dump due to incorrect if construct
16386:
16387: 1995-08-13 00:33 millert
16388:
16389: * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16390: -lsocket if irix
16391:
16392: 1995-08-13 00:33 millert
16393:
16394: * aclocal.m4: fixed check for ISC
16395:
16396: 1995-08-13 00:32 millert
16397:
16398: * sudo.c: now sets cmnd_args used by log_error() and that will be
16399: used by the parse to check against command args
16400:
16401: 1995-08-13 00:32 millert
16402:
16403: * sudo.h: added cmnd_args
16404:
16405: 1995-08-13 00:31 millert
16406:
16407: * logging.c: now dynamically allocate logline since we can guess at
16408: its size
16409:
16410: 1995-08-05 13:52 millert
16411:
16412: * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16413: buffer remove "register" since the compiler knows more than I do
16414: now do a "basename" of the tty
16415:
16416: 1995-07-31 18:20 millert
16417:
16418: * configure.in: ++version
16419:
16420: 1995-07-30 22:37 millert
16421:
16422: * sudo.h: added shell extern changed MODE_* to be bit masks to
16423: allow for several options together
16424:
16425: 1995-07-30 22:36 millert
16426:
16427: * sudo.c: added -s (shell) option made MODE_* masks so we can do
16428: bitwise & and | to see if multiple flags are set.
16429:
16430: 1995-07-30 22:01 millert
16431:
16432: * check.c: added securid support
16433:
16434: 1995-07-30 14:38 millert
16435:
16436: * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16437: with strcat()
16438:
16439: 1995-07-29 17:17 millert
16440:
16441: * Makefile.in, version.h: ++version
16442:
16443: 1995-07-27 06:52 millert
16444:
16445: * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16446:
16447: 1995-07-26 22:00 millert
16448:
16449: * testsudoers.c: added netgr_matches
16450:
16451: 1995-07-26 21:29 millert
16452:
16453: * parse.c: cleaned up netgr_matches
16454:
16455: 1995-07-26 00:26 millert
16456:
16457: * RUNSON: updated for 1.3.4
16458:
16459: 1995-07-24 21:51 millert
16460:
16461: * Makefile.in: now installs sudoers.man -- really should clean this
16462: up though.
16463:
16464: 1995-07-24 21:18 millert
16465:
16466: * Makefile.in: added sudoers.cat and sudoers.man
16467:
16468: 1995-07-24 21:15 millert
16469:
16470: * sudo.man: pulled out stuff on the sudoers file format into a
16471: separate man page
16472:
16473: 1995-07-24 21:14 millert
16474:
16475: * sudoers.man: Initial revision
16476:
16477: 1995-07-24 21:04 millert
16478:
16479: * HISTORY: fixed up my email address
16480:
16481: 1995-07-24 20:03 millert
16482:
16483: * configure.in: added checks for innetgr and getdomainname
16484:
16485: 1995-07-24 20:02 millert
16486:
16487: * visudo.c: added dummy netgr_matches function
16488:
16489: 1995-07-24 20:01 millert
16490:
16491: * parse.c: added netgr_matches
16492:
16493: 1995-07-24 20:01 millert
16494:
16495: * parse.lex, parse.yacc: added NETGROUP support
16496:
16497: 1995-07-24 20:01 millert
16498:
16499: * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16500:
16501: 1995-07-24 18:07 millert
16502:
16503: * sudo.c: rewrote clean_env() that has rm_env() builtin
16504:
16505: 1995-07-23 19:58 millert
16506:
16507: * check.c: now cast uid to long in sprintf
16508:
16509: 1995-07-23 19:58 millert
16510:
16511: * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16512:
16513: 1995-07-23 19:57 millert
16514:
16515: * options.h: added _INSULTS suffix to HAL & GOONS
16516:
16517: 1995-07-23 19:35 millert
16518:
16519: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16520: new scheme of insult "unions" end
16521:
16522: 1995-07-23 17:48 millert
16523:
16524: * sudo.c: now uses MAX_UID_T_LEN
16525:
16526: 1995-07-23 17:48 millert
16527:
16528: * configure.in: added SUDO_UID_T_LEN !l
16529:
16530: 1995-07-23 17:48 millert
16531:
16532: * config.h.in: added MAX_UID_T_LEN
16533:
16534: 1995-07-23 17:47 millert
16535:
16536: * check.c: now use MAX_UID_T_LEN
16537:
16538: 1995-07-23 17:47 millert
16539:
16540: * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16541: check
16542:
16543: 1995-07-19 19:05 millert
16544:
16545: * configure.in: corrected version
16546:
16547: 1995-07-19 17:29 millert
16548:
16549: * configure.in: added sco support
16550:
16551: 1995-07-19 17:29 millert
16552:
16553: * aclocal.m4: hack to check for sco
16554:
16555: 1995-07-18 21:27 millert
16556:
16557: * interfaces.c: removed #include <net/route.h> since it was hosing
16558: some OS's
16559:
16560: 1995-07-18 13:35 millert
16561:
16562: * find_path.c: fixed prreadlink() prototype
16563:
16564: 1995-07-17 23:54 millert
16565:
16566: * check.c: added parens in #if's
16567:
16568: 1995-07-17 23:53 millert
16569:
16570: * configure.in: added SPW_ prefix
16571:
16572: 1995-07-17 23:20 millert
16573:
16574: * sudo.h: moved SPW_* to config.h.in
16575:
16576: 1995-07-17 23:19 millert
16577:
16578: * sudo.c: added a set of parens
16579:
16580: 1995-07-17 23:19 millert
16581:
16582: * config.h.in: added SPW_*
16583:
16584: 1995-07-17 22:50 millert
16585:
16586: * sudo.h: added SPW_* reordered error codes
16587:
16588: 1995-07-17 22:49 millert
16589:
16590: * check.c: moved SPW_* to sudo.h
16591:
16592: 1995-07-17 14:29 millert
16593:
16594: * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16595:
16596: 1995-07-17 14:29 millert
16597:
16598: * configure.in: AUTH -> SECUREWARE
16599:
16600: 1995-07-17 14:29 millert
16601:
16602: * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16603:
16604: 1995-07-17 00:22 millert
16605:
16606: * check.c: now uses SHADOW_TYPE to make shadow pw support more
16607: readable and modular. It's a start...
16608:
16609: 1995-07-17 00:21 millert
16610:
16611: * configure.in: added autodetection of shadow passwords
16612:
16613: 1995-07-17 00:20 millert
16614:
16615: * sudo.c: now uses SHADOW_TYPE define
16616:
16617: 1995-07-17 00:19 millert
16618:
16619: * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16620: defines
16621:
16622: 1995-07-17 00:19 millert
16623:
16624: * aclocal.m4: added SUDO_CHECK_SHADOW
16625:
16626: 1995-07-12 17:09 millert
16627:
16628: * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16629: took out test for memmove() since we dno longer use it...
16630:
16631: 1995-07-12 17:08 millert
16632:
16633: * CHANGES: updated
16634:
16635: 1995-07-12 17:05 millert
16636:
16637: * logging.c: added BROKEN_SYSLOG support
16638:
16639: 1995-07-12 17:05 millert
16640:
16641: * config.h.in: added BROKEN_SYSLOG
16642:
16643: 1995-07-12 17:04 millert
16644:
16645: * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16646: allow for a machine udpating its time from a server
16647:
16648: 1995-07-12 17:04 millert
16649:
16650: * sudo.man: added 2 security notes updated Nieusma's email addr
16651:
16652: 1995-07-12 14:18 millert
16653:
16654: * lsearch.c: changed a memmove() to memcpy() since we don't have to
16655: worry about overlapping segments.
16656:
16657: 1995-07-11 15:41 millert
16658:
16659: * interfaces.c: cleanup up the loop when interfaces are groped in
16660: so that it is readable
16661:
16662: 1995-07-11 14:52 millert
16663:
16664: * Makefile.in, version.h: ++version
16665:
16666: 1995-07-09 18:17 millert
16667:
16668: * CHANGES: annotated 124-126
16669:
16670: 1995-07-07 16:06 millert
16671:
16672: * check.c: fixed permissions check on /tmp/.odus
16673:
16674: 1995-07-06 19:35 millert
16675:
16676: * check.c: fixed some comments
16677:
16678: 1995-07-06 14:49 millert
16679:
16680: * check.c: now checks owner & mode of timedir also checks for bogus
16681: dates on timestamp file
16682:
16683: 1995-07-06 14:49 millert
16684:
16685: * OPTIONS: updated TIMEOUT info
16686:
16687: 1995-07-06 14:48 millert
16688:
16689: * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16690:
16691: 1995-07-06 14:47 millert
16692:
16693: * compat.h: added definition of S_IRWXU
16694:
16695: 1995-07-06 14:47 millert
16696:
16697: * CHANGES: updated
16698:
16699: 1995-07-03 14:16 millert
16700:
16701: * interfaces.c: added #ifdef to make it compile on strange arches
16702:
16703: 1995-07-02 18:13 millert
16704:
16705: * aclocal.m4: fixed check for fulkl void impl.
16706:
16707: 1995-07-02 09:56 millert
16708:
16709: * check.c: added mssing "static"
16710:
16711: 1995-07-01 20:41 millert
16712:
16713: * insults.h: replaced #elif with #else #if constructs for ancient C
16714: compilers
16715:
16716: 1995-07-01 20:18 millert
16717:
16718: * INSTALL: updated irix c2 & kerb5 info
16719:
16720: 1995-07-01 20:15 millert
16721:
16722: * configure.in: added shadow pw support for irix
16723:
16724: 1995-07-01 16:07 millert
16725:
16726: * CHANGES: last changes for sudo 1.3.3
16727:
16728: 1995-07-01 16:07 millert
16729:
16730: * TODO, BUGS: updated
16731:
16732: 1995-07-01 16:04 millert
16733:
16734: * configure.in: now calls SUDO_SOCK_SA_LEN
16735:
16736: 1995-07-01 16:04 millert
16737:
16738: * config.h.in: added HAVE_SA_LEN
16739:
16740: 1995-07-01 16:04 millert
16741:
16742: * aclocal.m4: added SUDO_SOCK_SA_LEN
16743:
16744: 1995-07-01 15:49 millert
16745:
16746: * interfaces.c: now works with ip implementations that use sa_len
16747: in sockaddr
16748:
16749: 1995-07-01 14:26 millert
16750:
16751: * INSTALL: added note about buggy AIX compiler
16752:
16753: 1995-07-01 14:24 millert
16754:
16755: * interfaces.c: now include sys/time.h for AIX
16756:
16757: 1995-06-27 22:35 millert
16758:
16759: * Makefile.in: getcwd -> getwd
16760:
16761: 1995-06-27 21:28 millert
16762:
16763: * interfaces.c: now works for ISC and others. yay.
16764:
16765: 1995-06-26 14:24 millert
16766:
16767: * Makefile.in, version.h: version++
16768:
16769: 1995-06-22 20:26 millert
16770:
16771: * aclocal.m4: fixed test for full void impl
16772:
16773: 1995-06-22 20:25 millert
16774:
16775: * sudo.c: now check to see that st_dev is non-zero before assuming
16776: that we are being spoofed
16777:
16778: 1995-06-20 16:56 millert
16779:
16780: * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16781: AC_FUNC_UTIME_NULL
16782:
16783: 1995-06-19 16:32 millert
16784:
16785: * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16786:
16787: 1995-06-19 16:10 millert
16788:
16789: * logging.c: added cast for ttyname()
16790:
16791: 1995-06-19 15:23 millert
16792:
16793: * configure.in: fixed typo
16794:
16795: 1995-06-19 15:19 millert
16796:
16797: * check.c: now deal correctly with all known variation of utime()
16798: -- yippe
16799:
16800: 1995-06-19 15:19 millert
16801:
16802: * configure.in: added SUDO_FUNC_UTIME_POSIX
16803:
16804: 1995-06-19 15:19 millert
16805:
16806: * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16807:
16808: 1995-06-19 15:14 millert
16809:
16810: * config.h.in: added HAVE_UTIME_POSIX
16811:
16812: 1995-06-19 13:38 millert
16813:
16814: * check.c: fixed a typo
16815:
16816: 1995-06-19 13:29 millert
16817:
16818: * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16819:
16820: 1995-06-19 13:20 millert
16821:
16822: * check.c: fixed fascist C compiler warning
16823:
16824: 1995-06-18 23:14 millert
16825:
16826: * interfaces.c: now set strioctl.ic_timout in STRSET() now
16827: initialize num_interfaces to 0 (just to be anal)
16828:
16829: 1995-06-18 18:06 millert
16830:
16831: * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16832:
16833: 1995-06-18 18:05 millert
16834:
16835: * logging.c: added tty logging
16836:
16837: 1995-06-18 16:04 millert
16838:
16839: * interfaces.c: reworked the ISC code
16840:
16841: 1995-06-18 15:27 millert
16842:
16843: * Makefile.in, version.h: updated version
16844:
16845: 1995-06-18 15:24 millert
16846:
16847: * check.c: now expect old-style utime(3) if utime() can't take NULL
16848: as an arg
16849:
16850: 1995-06-18 15:08 millert
16851:
16852: * configure.in: added check for utime.h
16853:
16854: 1995-06-18 15:08 millert
16855:
16856: * config.h.in: added HAVE_UTIME_H
16857:
16858: 1995-06-18 14:48 millert
16859:
16860: * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16861:
16862: 1995-06-18 13:58 millert
16863:
16864: * configure.in: now search for kerb libs and includes
16865:
16866: 1995-06-18 13:03 millert
16867:
16868: * check.c: added support for utime(2)'s that can't take a NULL
16869: parameter
16870:
16871: 1995-06-18 13:03 millert
16872:
16873: * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16874: t belongs
16875:
16876: 1995-06-17 20:46 millert
16877:
16878: * configure.in: added utime(s) stuff
16879:
16880: 1995-06-17 20:46 millert
16881:
16882: * check.c: now use utime()
16883:
16884: 1995-06-17 20:46 millert
16885:
16886: * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16887:
16888: 1995-06-17 19:12 millert
16889:
16890: * utime.c: now use HAVE_UTIME_NULL
16891:
16892: 1995-06-17 19:02 millert
16893:
16894: * utime.c, emul/utime.h: Initial revision
16895:
16896: 1995-06-17 18:24 millert
16897:
16898: * check.c: need to setuid(0) to make kerb4 stuff work.
16899:
16900: 1995-06-17 18:14 millert
16901:
16902: * tgetpass.c: no more special case for kerberos
16903:
16904: 1995-06-17 18:13 millert
16905:
16906: * config.h.in: took out setreuid and setresuid stuff added kerb5
16907: stuff (use kerb4 emulation)
16908:
16909: 1995-06-17 18:13 millert
16910:
16911: * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16912: to 128 if kerberos
16913:
16914: 1995-06-17 18:12 millert
16915:
16916: * check.c: now use private ticket file for kerberos support to
16917: avoid trouncing on system one
16918:
16919: 1995-06-15 00:48 millert
16920:
16921: * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16922:
16923: 1995-06-15 00:47 millert
16924:
16925: * sudo.c: added anti-spoofing support
16926:
16927: 1995-06-15 00:47 millert
16928:
16929: * parse.c: now use global cmnd_st
16930:
16931: 1995-06-15 00:47 millert
16932:
16933: * logging.c: added SPOOF_ATTEMPT suypport
16934:
16935: 1995-06-14 23:41 millert
16936:
16937: * testsudoers.c, visudo.c: added void casts where appropriate
16938:
16939: 1995-06-14 23:40 millert
16940:
16941: * parse.yacc: fixed up spacing and added void casts where
16942: appropriate
16943:
16944: 1995-06-14 23:27 millert
16945:
16946: * sudo.c: fixed problem with "-p prompt" but no args
16947:
16948: 1995-06-14 04:43 millert
16949:
16950: * sudo.man: added BUGS and annotated -l description
16951:
16952: 1995-06-14 04:43 millert
16953:
16954: * sudo.h: validate() now takes a flag
16955:
16956: 1995-06-14 04:43 millert
16957:
16958: * sudo.c: validate() now takes a flag added -l
16959:
16960: 1995-06-14 04:42 millert
16961:
16962: * parse.yacc: added support for -l
16963:
16964: 1995-06-14 04:41 millert
16965:
16966: * parse.c: validate() now takes a flag that says whether or not to
16967: check the command
16968:
16969: 1995-06-07 21:36 millert
16970:
16971: * logging.c: now deals with Argv == 1
16972:
16973: 1995-06-07 21:34 millert
16974:
16975: * sudo.man: added -p option
16976:
16977: 1995-06-07 21:27 millert
16978:
16979: * sudo.c: added prompt support reworked parse_args()
16980:
16981: 1995-06-07 20:49 millert
16982:
16983: * sudo.h: added prompt
16984:
16985: 1995-06-07 20:49 millert
16986:
16987: * options.h: added PASSPROMPT
16988:
16989: 1995-06-07 20:48 millert
16990:
16991: * check.c: now use BUFSIZ as length of kerb password added kpass so
16992: pass is always a char * now use prompt global when asking for a
16993: password
16994:
16995: 1995-06-07 20:47 millert
16996:
16997: * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16998:
16999: 1995-06-07 20:43 millert
17000:
17001: * OPTIONS: added PASSPROMPT
17002:
17003: 1995-06-07 01:44 millert
17004:
17005: * configure.in: only look for -lufc or -lcrypt if crypt() not in
17006: libc
17007:
17008: 1995-06-07 01:43 millert
17009:
17010: * check.c: don't exit on kerb error, just warn if k_errno ==
17011: KDC_PR_UNKNOWN (unknown user) silently fail
17012:
17013: 1995-06-06 22:44 millert
17014:
17015: * INSTALL: added kerb4 note
17016:
17017: 1995-06-06 22:43 millert
17018:
17019: * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
17020:
17021: 1995-06-06 22:41 millert
17022:
17023: * check.c: removed debugging printf
17024:
17025: 1995-06-06 22:33 millert
17026:
17027: * configure.in: KERBEROS -> KERB4 added checks for setreuid &
17028: setresuid
17029:
17030: 1995-06-06 22:32 millert
17031:
17032: * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
17033: HAVE_SETRESUID
17034:
17035: 1995-06-06 22:32 millert
17036:
17037: * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
17038: setreuid emulation with setresuid if applic
17039:
17040: 1995-06-06 22:31 millert
17041:
17042: * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
17043: chown() hack if no setreuid() or a broken one
17044:
17045: 1995-06-05 23:44 millert
17046:
17047: * config.h.in: added HAVE_KERBEROS
17048:
17049: 1995-06-05 23:43 millert
17050:
17051: * tgetpass.c: added KERBEROS support (long passwords)
17052:
17053: 1995-06-05 23:42 millert
17054:
17055: * check.c, configure.in: added kerberos support
17056:
17057: 1995-06-03 19:36 millert
17058:
17059: * sudo.h: added MODE_BACKGROUND
17060:
17061: 1995-06-03 19:36 millert
17062:
17063: * sudo.man: escaped dashes added -b option
17064:
17065: 1995-06-03 19:34 millert
17066:
17067: * sudo.c: added -b option
17068:
17069: 1995-06-03 18:52 millert
17070:
17071: * check.c: added crypt() for osf/1 3.x enhanced secuiry
17072:
17073: 1995-06-03 18:18 millert
17074:
17075: * configure.in: now check for -lcrypt
17076:
17077: 1995-06-03 18:00 millert
17078:
17079: * interfaces.c: added ENXIO like EADDRNOTAVAIL
17080:
17081: 1995-05-07 23:14 millert
17082:
17083: * configure.in: now emulate getwd(), not getcwd()
17084:
17085: 1995-05-07 23:13 millert
17086:
17087: * sudo.c: getcwd() -> getwd()
17088:
17089: 1995-05-07 23:12 millert
17090:
17091: * getwd.c: getcwd -> getwd
17092:
17093: 1995-05-02 01:34 millert
17094:
17095: * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
17096:
17097: 1995-05-02 01:34 millert
17098:
17099: * insults.h: broke out insults into separate include files
17100:
17101: 1995-05-02 01:32 millert
17102:
17103: * options.h, OPTIONS: added GOONS
17104:
17105: 1995-05-02 01:32 millert
17106:
17107: * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
17108:
17109: 1995-05-01 23:34 millert
17110:
17111: * Makefile.in, version.h: ++version
17112:
17113: 1995-05-01 23:34 millert
17114:
17115: * visudo.c: moved signal handler setup to setup_signals()
17116:
17117: 1995-05-01 23:33 millert
17118:
17119: * sudo.h: added load_interfaces()
17120:
17121: 1995-05-01 23:33 millert
17122:
17123: * sudo.c: moved load_interfaces to interfaces.c
17124:
17125: 1995-05-01 23:33 millert
17126:
17127: * parse.yacc: added clearaliases
17128:
17129: 1995-05-01 23:33 millert
17130:
17131: * OPTIONS, options.h: added FAST_MATCH
17132:
17133: 1995-05-01 23:32 millert
17134:
17135: * parse.lex: now uses clearaliases variable
17136:
17137: 1995-05-01 23:31 millert
17138:
17139: * interfaces.c: Initial revision
17140:
17141: 1995-05-01 23:31 millert
17142:
17143: * Makefile.in: added interfaces.[co]
17144:
17145: 1995-05-01 23:30 millert
17146:
17147: * testsudoers.c: now uses ip addrs and netmasks via
17148: load_interfaces()
17149:
17150: 1995-05-01 22:47 millert
17151:
17152: * sudo.c: now remove IFS instead of setting to "sane" value
17153:
17154: 1995-05-01 16:30 millert
17155:
17156: * parse.c: added FAST_MATCH
17157:
17158: 1995-04-29 20:19 millert
17159:
17160: * Makefile.in: sudo_goodpath.c-> goodpath.c
17161:
17162: 1995-04-29 20:15 millert
17163:
17164: * sudo.c: added Andy's new ISC changes
17165:
17166: 1995-04-14 14:06 millert
17167:
17168: * OPTIONS: added a sentence to SECURE_PATH info
17169:
17170: 1995-04-14 13:57 millert
17171:
17172: * BUGS: added one
17173:
17174: 1995-04-14 13:54 millert
17175:
17176: * RUNSON, CHANGES: updated
17177:
17178: 1995-04-13 17:04 millert
17179:
17180: * RUNSON: updated for beta3
17181:
17182: 1995-04-13 14:32 millert
17183:
17184: * Makefile.in, version.h: ++version
17185:
17186: 1995-04-13 13:56 millert
17187:
17188: * aclocal.m4: sendmail is now looked for in /usr/ucblib
17189:
17190: 1995-04-13 13:54 millert
17191:
17192: * sudo.c: fixed indentation
17193:
17194: 1995-04-13 13:35 millert
17195:
17196: * aclocal.m4: fixed a typo
17197:
17198: 1995-04-13 13:19 millert
17199:
17200: * sudo.c: updated ISC mods
17201:
17202: 1995-04-13 13:19 millert
17203:
17204: * configure.in: added unixware case
17205:
17206: 1995-04-13 13:19 millert
17207:
17208: * check.c: user_is_exempt is no longer hidden
17209:
17210: 1995-04-13 13:19 millert
17211:
17212: * RUNSON: updated
17213:
17214: 1995-04-13 13:19 millert
17215:
17216: * aclocal.m4: isc and riscos changes
17217:
17218: 1995-04-13 13:18 millert
17219:
17220: * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17221: SECURE_PATH
17222:
17223: 1995-04-13 13:18 millert
17224:
17225: * Makefile.in: fixed a typo and added testsudoers stuff
17226:
17227: 1995-04-13 12:34 millert
17228:
17229: * testsudoers.c: Initial revision
17230:
17231: 1995-04-12 19:31 millert
17232:
17233: * parse.yacc: applied fixed patch from Chris
17234:
17235: 1995-04-11 14:30 millert
17236:
17237: * Makefile.in: fixed a typo
17238:
17239: 1995-04-11 14:14 millert
17240:
17241: * parse.yacc: added a set of braces for bison
17242:
17243: 1995-04-11 14:01 millert
17244:
17245: * parse.yacc: merged in Chris' changes to dekludge the parser.
17246:
17247: 1995-04-11 00:38 millert
17248:
17249: * logging.c: send_mail() was calling find_path() which is wrong
17250: since find_path() stores cmnd in a static var. Anyhow, it
17251: doesn't make much sense since MAILER should always be fully
17252: qualified
17253:
17254: 1995-04-10 19:51 millert
17255:
17256: * sample.sudoers: added User_Alias stuff
17257:
17258: 1995-04-10 19:50 millert
17259:
17260: * aclocal.m4: SUDO_NEXT now looks for
17261: /usr/lib/NextStep/software_version
17262:
17263: 1995-04-10 19:50 millert
17264:
17265: * RUNSON: added DEC UNIX 3.0 w/ gcc
17266:
17267: 1995-04-10 19:49 millert
17268:
17269: * visudo.c: Exit was being used in places where exit should be used
17270:
17271: 1995-04-10 19:44 millert
17272:
17273: * sudoers: added "User alias specification"
17274:
17275: 1995-04-10 18:04 millert
17276:
17277: * parse.yacc: fixed probs caused by making nslots and naliases a
17278: size_t
17279:
17280: 1995-04-10 15:09 millert
17281:
17282: * RUNSON: added KSR, upped rev to 1.3.1b2
17283:
17284: 1995-04-10 15:07 millert
17285:
17286: * logging.c, parse.yacc: 1024 -> BUFSIZ
17287:
17288: 1995-04-10 15:05 millert
17289:
17290: * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17291: to appease lsearch on 64-bit machines
17292:
17293: 1995-04-09 19:30 millert
17294:
17295: * TODO: did a bunch of things and added a bunch :-)
17296:
17297: 1995-04-09 19:30 millert
17298:
17299: * PORTING: updated
17300:
17301: 1995-04-09 19:24 millert
17302:
17303: * visudo.man: closer to BSD manpage style
17304:
17305: 1995-04-09 19:15 millert
17306:
17307: * sudo.man: closer to standard BSD man format
17308:
17309: 1995-04-09 18:58 millert
17310:
17311: * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17312: sudo.h, version.h, emul/search.h: added RCS id
17313:
17314: 1995-04-09 17:35 millert
17315:
17316: * sudo.h: removed crufty #defines that are no longer used
17317:
17318: 1995-04-09 17:13 millert
17319:
17320: * BUGS: fixed a bug
17321:
17322: 1995-04-09 17:12 millert
17323:
17324: * sudo.man: updated based on sudo changes
17325:
17326: 1995-04-09 17:11 millert
17327:
17328: * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17329: keyword as well as a NAME or ALIAS
17330:
17331: 1995-04-09 17:11 millert
17332:
17333: * CHANGES: updated
17334:
17335: 1995-04-09 17:04 millert
17336:
17337: * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17338:
17339: 1995-04-09 15:24 millert
17340:
17341: * aclocal.m4: fixed bug with full void impl check
17342:
17343: 1995-04-08 23:11 millert
17344:
17345: * parse.yacc: fixed User_Alias supoprt
17346:
17347: 1995-04-08 22:27 millert
17348:
17349: * parse.yacc: added stubs for User_Alias support
17350:
17351: 1995-04-08 22:27 millert
17352:
17353: * sudo.c: now sets removes # bogus interfaces from num_interfaces
17354:
17355: 1995-04-08 22:26 millert
17356:
17357: * parse.lex: added User_Alias support
17358:
17359: 1995-04-07 21:10 millert
17360:
17361: * Makefile.in: removed extraneous TODO
17362:
17363: 1995-04-07 19:48 millert
17364:
17365: * visudo.c: ntwk_matches -> addr_matches
17366:
17367: 1995-04-07 15:38 millert
17368:
17369: * parse.yacc: ntwk_matches -> addr_matches
17370:
17371: 1995-04-07 15:37 millert
17372:
17373: * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17374: inet_network() (which expects octet boundaries) fixes for OSF
17375: (sizeof(int) != sizeof(long))
17376:
17377: 1995-04-07 15:08 millert
17378:
17379: * sudo.c: took out debugging info
17380:
17381: 1995-04-06 23:45 millert
17382:
17383: * aclocal.m4: OS was being set to unknown before non-uname based
17384: host checks. This caused no checks to happen since $OS was not
17385: zero-length.
17386:
17387: 1995-04-06 23:30 millert
17388:
17389: * sudo.c: fixed loading of interfaces struct still has debugging
17390: info in though
17391:
17392: 1995-04-06 22:23 millert
17393:
17394: * parse.c: fixed typo
17395:
17396: 1995-04-06 16:17 millert
17397:
17398: * Makefile.in: ++version
17399:
17400: 1995-04-06 16:16 millert
17401:
17402: * version.h: ++
17403:
17404: 1995-04-06 16:16 millert
17405:
17406: * visudo.c: removed extraneous extern decl of "top
17407:
17408: 1995-04-06 16:14 millert
17409:
17410: * visudo.c: now zeros "top"
17411:
17412: 1995-04-06 16:13 millert
17413:
17414: * parse.yacc: removed parser_cleanup (no need for it now)
17415:
17416: 1995-04-06 16:13 millert
17417:
17418: * parse.lex: now calls reset_aliases() directly
17419:
17420: 1995-04-04 18:21 millert
17421:
17422: * OPTIONS: added a sentence to SECURE_PATH description
17423:
17424: 1995-04-04 18:17 millert
17425:
17426: * parse.c: fixed my stupid bug where I used NAMLEN on something I
17427: wanted to just get the name from. argh.
17428:
17429: 1995-04-03 16:58 millert
17430:
17431: * lsearch.c: fixed argument order of memmove() that i hosed when
17432: converting from bcopy(). arghh.
17433:
17434: 1995-04-03 15:33 millert
17435:
17436: * Makefile.in: finally fixed DISTFILES line
17437:
17438: 1995-04-03 15:21 millert
17439:
17440: * Makefile.in: tabs -> spaces
17441:
17442: 1995-04-03 15:15 millert
17443:
17444: * Makefile.in: added missing files to DISTFILES
17445:
17446: 1995-04-03 14:50 millert
17447:
17448: * Makefile.in: SUPPORTED -> RUNSON
17449:
17450: 1995-04-01 03:12 millert
17451:
17452: * TODO: updated
17453:
17454: 1995-04-01 01:54 millert
17455:
17456: * RUNSON: updated for pl5b1 release
17457:
17458: 1995-04-01 01:53 millert
17459:
17460: * BUGS, TODO: updated
17461:
17462: 1995-04-01 01:52 millert
17463:
17464: * check.c: fixed bug where if you hit return at first sudo prompt
17465: it would still log as a failure
17466:
17467: 1995-04-01 01:29 millert
17468:
17469: * CHANGES: updated
17470:
17471: 1995-04-01 01:25 millert
17472:
17473: * aclocal.m4: better test for bogus void * implementation
17474:
17475: 1995-03-31 20:33 millert
17476:
17477: * logging.c: added PASSWORDS_NOT_CORRECT
17478:
17479: 1995-03-31 20:32 millert
17480:
17481: * check.c: added PASSWORDS_NOT_CORRECT stuff]
17482:
17483: 1995-03-31 20:30 millert
17484:
17485: * sudo.h: added PASSWORDS_NOT_CORRECT
17486:
17487: 1995-03-31 19:16 millert
17488:
17489: * tgetpass.c: moved pathnames.h
17490:
17491: 1995-03-31 19:16 millert
17492:
17493: * sudo.c: removed some unused vars and fixed up uid2str
17494:
17495: 1995-03-31 19:15 millert
17496:
17497: * putenv.c: moved compat.h
17498:
17499: 1995-03-31 19:14 millert
17500:
17501: * getcwd.c, getwd.c: added pathnames.h
17502:
17503: 1995-03-31 18:18 millert
17504:
17505: * parse.yacc: fixed a typo I introduced in the last checkin :-(
17506:
17507: 1995-03-31 18:11 millert
17508:
17509: * parse.lex: can't have #ifdef's where N is defined so just do this
17510: the broken way for AIX
17511:
17512: 1995-03-31 18:08 millert
17513:
17514: * parse.yacc: better hack from Chris (but still a hack)
17515:
17516: 1995-03-31 18:05 millert
17517:
17518: * parse.lex: stupid hack for broken aix lex
17519:
17520: 1995-03-31 17:47 millert
17521:
17522: * tgetpass.c: now includes compat.h
17523:
17524: 1995-03-31 17:27 millert
17525:
17526: * visudo.c: now includes fcntl.h
17527:
17528: 1995-03-31 17:27 millert
17529:
17530: * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17531:
17532: 1995-03-31 16:12 millert
17533:
17534: * parse.yacc: dirty hack to fix parser bug. i don't really like
17535: this but it works for now...
17536:
17537: 1995-03-31 16:12 millert
17538:
17539: * sudo.c: uid2str is now static like the prototype says
17540:
17541: 1995-03-29 23:48 millert
17542:
17543: * RUNSON: Initial revision
17544:
17545: 1995-03-29 23:47 millert
17546:
17547: * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17548:
17549: 1995-03-29 23:46 millert
17550:
17551: * sudo.c: check_sudoers now returns an error code and sudo calls
17552: inform_user and log_error based on the return value.
17553:
17554: 1995-03-29 23:45 millert
17555:
17556: * logging.c, sudo.h: added entries for new errors
17557:
17558: 1995-03-29 23:03 millert
17559:
17560: * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17561: sudoers file
17562:
17563: 1995-03-29 22:52 millert
17564:
17565: * Makefile.in: took out testsudoers
17566:
17567: 1995-03-29 22:36 millert
17568:
17569: * sudo.c: now explicately checks that it is setuid root
17570:
17571: 1995-03-29 22:28 millert
17572:
17573: * sudo.c: If a user has no passwd entry sudo would segv (writing to
17574: a garbage pointer). Now allocate space before writing :-)
17575:
17576: 1995-03-29 22:06 millert
17577:
17578: * configure.in: reordered AC_CHECK_FUNCS
17579:
17580: 1995-03-29 22:06 millert
17581:
17582: * config.h.in: fixed memset macro
17583:
17584: 1995-03-29 21:47 millert
17585:
17586: * logging.c: bzero -> memset when a parse error is logged the line
17587: number of the error is now logged too
17588:
17589: 1995-03-29 21:46 millert
17590:
17591: * tgetpass.c, visudo.c: bzero -> memset
17592:
17593: 1995-03-29 21:46 millert
17594:
17595: * INSTALL: added Sunos to blurb about c2 security
17596:
17597: 1995-03-29 21:45 millert
17598:
17599: * configure.in: added a SUN4 define for C2 security
17600:
17601: 1995-03-29 21:44 millert
17602:
17603: * config.h.in: bcopy -> memmove bzero -> memset
17604:
17605: 1995-03-29 21:43 millert
17606:
17607: * lsearch.c: bcopy -> memmove char * -> VOID *
17608:
17609: 1995-03-29 21:30 millert
17610:
17611: * check.c: added support for sunos with C2 security
17612:
17613: 1995-03-29 21:12 millert
17614:
17615: * OPTIONS, options.h: reordered
17616:
17617: 1995-03-29 21:12 millert
17618:
17619: * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17620:
17621: 1995-03-29 21:12 millert
17622:
17623: * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17624:
17625: 1995-03-29 21:12 millert
17626:
17627: * config.h.in: added _SUDO_PATH_LOGFILE
17628:
17629: 1995-03-29 21:11 millert
17630:
17631: * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17632: added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17633: too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17634:
17635: 1995-03-29 18:17 millert
17636:
17637: * TROUBLESHOOTING: Initial revision
17638:
17639: 1995-03-29 17:59 millert
17640:
17641: * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17642: load_global() to work around a problem is trusted hpux shadow
17643: passwords. yuck.
17644:
17645: 1995-03-29 17:41 millert
17646:
17647: * parse.yacc: backed out a change in malloc/realloc
17648:
17649: 1995-03-29 17:38 millert
17650:
17651: * parse.yacc: now include stdlib.h
17652:
17653: 1995-03-29 17:22 millert
17654:
17655: * visudo.c: now do an freopen() of the stmp file so that yyin will
17656: always point to the same thing. This is important for flex since
17657: we are doing a YY_NEWFILE
17658:
17659: 1995-03-29 17:20 millert
17660:
17661: * parse.yacc: replaced yywrap() with parser_cleanup() since
17662: yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17663: sigh.
17664:
17665: 1995-03-29 17:18 millert
17666:
17667: * parse.lex: now have a rule that matches anything that doesn't
17668: match an explicite rule. well, you know what i mean (. matches
17669: anything not yet matched). However, this means that there is
17670: input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17671: So, yywrap has moved into parse.lex and it calls parser_cleanup()
17672: which is most of the old yywrap() sigh.
17673:
17674: 1995-03-29 17:17 millert
17675:
17676: * SUPPORTED: no longer used
17677:
17678: 1995-03-29 16:13 millert
17679:
17680: * getcwd.c, getwd.c: moved compat.h to be the last include file
17681:
17682: 1995-03-29 16:11 millert
17683:
17684: * parse.yacc: fixed type of aliascmp() args
17685:
17686: 1995-03-29 15:58 millert
17687:
17688: * find_path.c: NULL -> '\0'
17689:
17690: 1995-03-29 15:42 millert
17691:
17692: * parse.yacc: added casts to lfind and lsearch args for irix
17693:
17694: 1995-03-29 08:20 millert
17695:
17696: * Makefile.in: bsdinstall -> install-sh
17697:
17698: 1995-03-29 08:20 millert
17699:
17700: * INSTALL: added info about make realclean
17701:
17702: 1995-03-29 08:17 millert
17703:
17704: * Makefile.in: updated VERSION added dependencies for visudo.cat
17705:
17706: 1995-03-29 08:17 millert
17707:
17708: * version.h: -> pl5b1
17709:
17710: 1995-03-29 08:16 millert
17711:
17712: * sudo.c: took out -l
17713:
17714: 1995-03-29 00:03 millert
17715:
17716: * Makefile.in: now there is a real visudo.man and visudo.cat
17717:
17718: 1995-03-28 23:54 millert
17719:
17720: * sudo.man: took out visudo stuff
17721:
17722: 1995-03-28 23:54 millert
17723:
17724: * visudo.man: Initial revision
17725:
17726: 1995-03-28 23:12 millert
17727:
17728: * parse.c, parse.lex, parse.yacc: updated copyright
17729:
17730: 1995-03-28 23:05 millert
17731:
17732: * README: updated for pl5
17733:
17734: 1995-03-28 20:02 millert
17735:
17736: * sudo.man: updated Nieusma & Hieb email addresses
17737:
17738: 1995-03-28 19:57 millert
17739:
17740: * INSTALL: updated to include options.h and OPTIONS
17741:
17742: 1995-03-28 19:35 millert
17743:
17744: * CHANGES, TODO: updated
17745:
17746: 1995-03-28 19:35 millert
17747:
17748: * BUGS: eliminated bug #1 (yay)
17749:
17750: 1995-03-28 19:31 millert
17751:
17752: * configure.in: sunos no longer gets linked statically
17753:
17754: 1995-03-28 18:58 millert
17755:
17756: * parse.lex: prototype now uses __P()
17757:
17758: 1995-03-28 18:49 millert
17759:
17760: * parse.lex: make fill() non-ansi
17761:
17762: 1995-03-28 15:26 millert
17763:
17764: * parse.c: made -v (validate) work
17765:
17766: 1995-03-28 15:26 millert
17767:
17768: * logging.c: now gives host
17769:
17770: 1995-03-28 10:34 millert
17771:
17772: * find_path.c: don't check for execute/statable if fq or relative
17773: path given
17774:
17775: 1995-03-28 01:07 millert
17776:
17777: * parse.c: added a cast
17778:
17779: 1995-03-28 00:49 millert
17780:
17781: * visudo.c: now include ctype.h for islower and tolower macros
17782:
17783: 1995-03-28 00:48 millert
17784:
17785: * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17786:
17787: 1995-03-28 00:48 millert
17788:
17789: * sudo.c: moved a set of parens
17790:
17791: 1995-03-28 00:48 millert
17792:
17793: * strdup.c: now include compat.h
17794:
17795: 1995-03-28 00:47 millert
17796:
17797: * parse.yacc: now cast malloc & realloc return vals added search
17798: for HAVE_LSEARCH now use strcmp if no strcasecmp available
17799:
17800: 1995-03-28 00:46 millert
17801:
17802: * lsearch.c, emul/search.h: void * -> VOID *
17803:
17804: 1995-03-28 00:45 millert
17805:
17806: * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17807: HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17808:
17809: 1995-03-28 00:44 millert
17810:
17811: * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17812:
17813: 1995-03-28 00:44 millert
17814:
17815: * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17816: echo and results to most SUDO_* macros
17817:
17818: 1995-03-28 00:43 millert
17819:
17820: * Makefile.in: no more -I.
17821:
17822: 1995-03-28 00:22 millert
17823:
17824: * configure.in: various 1.x ro 2.x autoconf changes now check for
17825: strcasecmp now use AC_INSTALL_PROG instead of custom one added
17826: check for fully woorking void implementation
17827:
17828: 1995-03-28 00:02 millert
17829:
17830: * Makefile.in: added lsearch & search.h visudo links into
17831: $(LIBOBJS)
17832:
17833: 1995-03-27 23:43 millert
17834:
17835: * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17836:
17837: 1995-03-27 23:40 millert
17838:
17839: * visudo.c: whatnow_help was prototyped to be static be was not
17840: declared as such
17841:
17842: 1995-03-27 21:15 millert
17843:
17844: * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17845: used) added check for dirent/dir/ndir.h
17846:
17847: 1995-03-27 21:09 millert
17848:
17849: * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17850:
17851: 1995-03-27 20:38 millert
17852:
17853: * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17854:
17855: 1995-03-27 20:23 millert
17856:
17857: * emul/search.h, lsearch.c: Initial revision
17858:
17859: 1995-03-27 18:26 millert
17860:
17861: * parse.yacc: eliminated bison warnings
17862:
17863: 1995-03-27 17:10 millert
17864:
17865: * parse.lex: added missing case
17866:
17867: 1995-03-27 17:04 millert
17868:
17869: * visudo.c: now iincludes signal.h
17870:
17871: 1995-03-27 15:16 millert
17872:
17873: * parse.yacc: only clear data structures on a parse error
17874:
17875: 1995-03-27 15:01 millert
17876:
17877: * visudo.c: whatnow() now gives help on invalid input
17878:
17879: 1995-03-27 14:54 millert
17880:
17881: * visudo.c: added a whatnow() function (sort of like mh)
17882:
17883: 1995-03-27 14:53 millert
17884:
17885: * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17886: by calling reset_aliases() and clearing top took reset stuff out
17887: of yyerror() since it doesn't beling there (and doesn't work
17888: anyway). errorlineno is now initially set to -1 so we can set it
17889: to the first error that occurrs (it was getting set to the last)
17890:
17891: 1995-03-27 14:53 millert
17892:
17893: * parse.lex: added a void cast
17894:
17895: 1995-03-27 13:26 millert
17896:
17897: * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17898:
17899: 1995-03-26 01:33 millert
17900:
17901: * sudo.c, sudo.h: removed ocmnd
17902:
17903: 1995-03-26 01:19 millert
17904:
17905: * sudo.h: no more sudo_realpath() and find_path() changed params
17906:
17907: 1995-03-26 01:19 millert
17908:
17909: * sudo.c: find_path() changed since no more realpath()
17910:
17911: 1995-03-26 01:18 millert
17912:
17913: * parse.yacc: on error, errorlineno is set to the line where the
17914: error occurred added kill_aliases() to free the aliases struct
17915: now clean up in yyerror() so we can reparse cleanly
17916:
17917: 1995-03-26 01:17 millert
17918:
17919: * logging.c: changed to use new find_path()
17920:
17921: 1995-03-26 01:17 millert
17922:
17923: * options.h, parse.c: no more USE_REALPATH
17924:
17925: 1995-03-26 01:16 millert
17926:
17927: * find_path.c: removed all the realpath() stuff
17928:
17929: 1995-03-26 01:16 millert
17930:
17931: * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17932:
17933: 1995-03-26 01:12 millert
17934:
17935: * visudo.c: now works correctly with utk parser
17936:
17937: 1995-03-26 00:04 millert
17938:
17939: * goodpath.c: Initial revision
17940:
17941: 1995-03-25 23:23 millert
17942:
17943: * sudo_realpath.c: eliminated a compiler warning
17944:
17945: 1995-03-25 21:56 millert
17946:
17947: * sudo.c: elinated compiler warning
17948:
17949: 1995-03-25 20:40 millert
17950:
17951: * sudo_realpath.c: added sudo_goodpath()
17952:
17953: 1995-03-25 20:40 millert
17954:
17955: * sudo.h: added prototype for sudo_goodpath
17956:
17957: 1995-03-25 20:39 millert
17958:
17959: * parse.c: added support for /sys/dir.h
17960:
17961: 1995-03-25 20:39 millert
17962:
17963: * options.h: USE_REALPATH turned off
17964:
17965: 1995-03-25 20:39 millert
17966:
17967: * find_path.c: added calls to sudo_goodpath()
17968:
17969: 1995-03-25 20:39 millert
17970:
17971: * configure.in: added check for dirent.h
17972:
17973: 1995-03-25 20:38 millert
17974:
17975: * config.h.in: added HAVE_DIRENT_H
17976:
17977: 1995-03-25 19:27 millert
17978:
17979: * configure.in: added in linux shadow pass stuff
17980:
17981: 1995-03-24 14:43 millert
17982:
17983: * visudo.c: added back host, user, cmnd, parse_error
17984:
17985: 1995-03-24 14:19 millert
17986:
17987: * visudo.c: added in utk changes plus some minor cosmetic changes
17988:
17989: 1995-03-24 14:17 millert
17990:
17991: * sudo.c, sudo_realpath.c: added void casts for printf's
17992:
17993: 1995-03-24 14:17 millert
17994:
17995: * options.h: added a define of USE_REALPATH
17996:
17997: 1995-03-24 14:17 millert
17998:
17999: * configure.in: there is no more visudoers/Makefile
18000:
18001: 1995-03-24 14:16 millert
18002:
18003: * Makefile.in: added in utk changes (visudo is now built from the
18004: toplevel)
18005:
18006: 1995-03-24 14:15 millert
18007:
18008: * find_path.c: added (void) casts to printf's
18009:
18010: 1995-03-23 22:32 millert
18011:
18012: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
18013: in utk changes
18014:
18015: 1995-03-22 23:13 millert
18016:
18017: * find_path.c: now check to see that what we are trying to run is a
18018: file (or a link to a file, we do a stat(2) so there is no diff)
18019:
18020: 1995-03-13 15:56 millert
18021:
18022: * CHANGES: updated
18023:
18024: 1995-03-13 15:56 millert
18025:
18026: * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
18027: new autoconf
18028:
18029: 1995-03-13 15:11 millert
18030:
18031: * sudo.man: added myself as maintainer
18032:
18033: 1995-02-16 23:31 millert
18034:
18035: * sudo.c: changed setegid -> setgid
18036:
18037: 1995-02-06 17:43 millert
18038:
18039: * configure.in: fixed the test for irix 5.x to skip bad libs
18040:
18041: 1995-02-06 17:43 millert
18042:
18043: * aclocal.m4: now initialize OS and OSREV
18044:
18045: 1995-01-26 20:52 millert
18046:
18047: * configure.in: irix5 changes
18048:
18049: 1995-01-26 20:28 millert
18050:
18051: * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
18052: for autoconf 2.1 compatibility
18053:
18054: 1995-01-18 19:49 millert
18055:
18056: * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
18057: do the righ thing wrt yyrestart (grrrr)
18058:
18059: 1995-01-16 18:44 millert
18060:
18061: * Makefile.in: added visudoers/compat.h to DISTFILES
18062:
18063: 1995-01-16 17:01 millert
18064:
18065: * configure.in: fixed an echo
18066:
18067: 1995-01-16 16:36 millert
18068:
18069: * sudo.c: added ocmnd declaration adjusted for find_path()'s new
18070: parameters
18071:
18072: 1995-01-16 16:35 millert
18073:
18074: * sudo.h: added ocmnd extern adjusted find_path() prototype
18075:
18076: 1995-01-16 16:34 millert
18077:
18078: * parse.c: cmndcmp() now takes 3 arguments and checks against the
18079: qualified as well as the unqualified pathname. more code that
18080: should use cmndcmp() but did not, now does
18081:
18082: 1995-01-16 16:34 millert
18083:
18084: * options.h: added to a comment
18085:
18086: 1995-01-16 16:33 millert
18087:
18088: * logging.c: changed to use new find_path() parameter passing
18089:
18090: 1995-01-16 16:32 millert
18091:
18092: * find_path.c: find_path() now takes 2 copyout parameters (one for
18093: the qualified pathname and one for the unqualified pathname).
18094: The third parameter may be NULL.
18095:
18096: 1995-01-16 16:31 millert
18097:
18098: * configure.in: no longer munge pathnames.h
18099:
18100: 1995-01-16 16:30 millert
18101:
18102: * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
18103: defined in config.h) as a result, pathnames.h does not need to be
18104: run through configure and the user can override the configured
18105: values easily.
18106:
18107: 1995-01-16 16:30 millert
18108:
18109: * config.h.in: added _SUDO_PATH_* entries
18110:
18111: 1995-01-16 16:30 millert
18112:
18113: * aclocal.m4: _PATH* -> _SUDO_PATH_*
18114:
18115: 1995-01-16 16:28 millert
18116:
18117: * Makefile.in: updated DISTFILES and HDRS .o's now depend on
18118: config.h
18119:
18120: 1995-01-13 12:52 millert
18121:
18122: * compat.h: removed extraneous #endif
18123:
18124: 1995-01-13 12:48 millert
18125:
18126: * aclocal.m4: added SUDO_PROG_MV
18127:
18128: 1995-01-13 12:47 millert
18129:
18130: * configure.in: added SUDO_PROG_MV added riscos and isc os types
18131: took out -DSHORT_MESSAGE from --with-csops since it is now the
18132: default
18133:
18134: 1995-01-13 12:46 millert
18135:
18136: * sudo.c: move the include of id.h to compat.h now includes
18137: options.h
18138:
18139: 1995-01-13 12:45 millert
18140:
18141: * sudo.h: moved compatibility #defines to compat.h
18142:
18143: 1995-01-13 12:45 millert
18144:
18145: * pathnames.h.in: added _PATH_MV
18146:
18147: 1995-01-13 12:43 millert
18148:
18149: * config.h.in: move __P to compat.h
18150:
18151: 1995-01-13 12:39 millert
18152:
18153: * getcwd.c, getwd.c, putenv.c: now includes compat.h
18154:
18155: 1995-01-13 12:39 millert
18156:
18157: * compat.h: Initial revision
18158:
18159: 1995-01-11 19:11 millert
18160:
18161: * sudo.h: pull user-configurable stuff out and put in options.h
18162:
18163: 1995-01-11 18:43 millert
18164:
18165: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
18166: sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
18167: options.h
18168:
18169: 1995-01-11 18:41 millert
18170:
18171: * Makefile.in: added visudoers/options.h
18172:
18173: 1995-01-11 18:40 millert
18174:
18175: * options.h, OPTIONS: Initial revision
18176:
18177: 1995-01-11 18:39 millert
18178:
18179: * Makefile.in: added OPTIONS and options.h
18180:
18181: 1995-01-11 18:36 millert
18182:
18183: * logging.c: changed #ifdef's to use LOGGING and
18184: SLOG_SYSLOG/SLOG_FILE
18185:
18186: 1995-01-11 11:02 millert
18187:
18188: * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
18189:
18190: 1994-12-17 18:18 millert
18191:
18192: * visudo.c: now only do Editor +line_num if line_num != 0
18193:
18194: 1994-12-15 21:06 millert
18195:
18196: * visudo.c: now use mv if rename(2) fails
18197:
18198: 1994-12-15 20:32 millert
18199:
18200: * BUGS: added a visudo bug
18201:
18202: 1994-12-15 19:46 millert
18203:
18204: * check.c: expanded comment
18205:
18206: 1994-11-12 18:33 millert
18207:
18208: * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
18209: set
18210:
18211: 1994-11-09 19:49 millert
18212:
18213: * sudo.c: added mips & isc support
18214:
18215: 1994-11-09 19:49 millert
18216:
18217: * parse.c: added support for non-root owned sudoers file
18218:
18219: 1994-11-09 19:48 millert
18220:
18221: * check.c: added exempt group support
18222:
18223: 1994-11-09 19:47 millert
18224:
18225: * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18226: non-root own sudoers file added exempt group support added isc
18227: support
18228:
18229: 1994-11-09 19:46 millert
18230:
18231: * visudo.c: now copy sudoers to temp file via read/write (not
18232: stdio) now chown new sudoers file to SUDOERS_OWNER
18233:
18234: 1994-11-07 20:40 millert
18235:
18236: * configure.in: added skey support
18237:
18238: 1994-11-07 20:39 millert
18239:
18240: * sudo.h: fixed typo added set_perms support added skey support
18241: added seteuid()/setegid() emulation for AIX
18242:
18243: 1994-11-07 20:38 millert
18244:
18245: * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18246: owned by root nread/write by only root
18247:
18248: 1994-11-07 20:38 millert
18249:
18250: * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18251:
18252: 1994-11-07 20:38 millert
18253:
18254: * check.c: be_* -> set_perms() added skey support
18255:
18256: 1994-11-06 18:59 millert
18257:
18258: * Makefile.in: ++version
18259:
18260: 1994-11-06 18:59 millert
18261:
18262: * version.h: ++
18263:
18264: 1994-10-21 13:16 millert
18265:
18266: * sudo.c: now sets IFS
18267:
18268: 1994-10-21 12:02 millert
18269:
18270: * insults.h: fixed typo
18271:
18272: 1994-10-15 15:48 millert
18273:
18274: * config.h.in: added HAVE_SKEY
18275:
18276: 1994-10-04 13:00 millert
18277:
18278: * CHANGES: updated
18279:
18280: 1994-10-04 12:57 millert
18281:
18282: * Makefile.in: ++version
18283:
18284: 1994-10-04 12:57 millert
18285:
18286: * version.h: ++
18287:
18288: 1994-10-04 12:56 millert
18289:
18290: * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18291:
18292: 1994-10-04 12:56 millert
18293:
18294: * configure.in: added function check for tcgetattr(3)
18295:
18296: 1994-10-04 12:55 millert
18297:
18298: * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18299:
18300: 1994-10-04 12:53 millert
18301:
18302: * config.h.in: added check for tcgetattr
18303:
18304: 1994-09-26 17:38 millert
18305:
18306: * CHANGES: updated
18307:
18308: 1994-09-22 13:30 millert
18309:
18310: * parse.lex: now only include unistd.h for linux
18311:
18312: 1994-09-21 14:29 millert
18313:
18314: * Makefile.in: added visudo.8 generation
18315:
18316: 1994-09-21 14:07 millert
18317:
18318: * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18319:
18320: 1994-09-20 19:39 millert
18321:
18322: * BUGS: added one
18323:
18324: 1994-09-20 19:39 millert
18325:
18326: * CHANGES: updated
18327:
18328: 1994-09-20 19:38 millert
18329:
18330: * README: added mailing list info
18331:
18332: 1994-09-20 19:37 millert
18333:
18334: * parse.yacc: now use sudolineno instead of yylineno fixed bison
18335: warnings
18336:
18337: 1994-09-20 19:37 millert
18338:
18339: * configure.in: now use -no_library_replacement for osf don't make
18340: a static binary for hpux >= 9.0
18341:
18342: 1994-09-20 19:21 millert
18343:
18344: * tgetpass.c: added string.h/strings.h inclusion
18345:
18346: 1994-09-20 19:21 millert
18347:
18348: * config.h.in: added ssize_t def
18349:
18350: 1994-09-20 19:18 millert
18351:
18352: * parse.lex: added inclusion of string.h/strings.h
18353:
18354: 1994-09-20 18:48 millert
18355:
18356: * aclocal.m4: fixed uname | sed (needed to quote the '[')
18357:
18358: 1994-09-20 18:42 millert
18359:
18360: * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18361: errors
18362:
18363: 1994-09-20 18:13 millert
18364:
18365: * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18366: counted upon.
18367:
18368: 1994-09-20 18:10 millert
18369:
18370: * TODO: updated
18371:
18372: 1994-09-20 17:52 millert
18373:
18374: * parse.c: added code to support command listings
18375:
18376: 1994-09-20 17:36 millert
18377:
18378: * sudo.c: added code for -l flag
18379:
18380: 1994-09-20 17:35 millert
18381:
18382: * sudo.man: fixed typo added info for -l flag
18383:
18384: 1994-09-20 14:45 millert
18385:
18386: * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18387:
18388: 1994-09-20 14:45 millert
18389:
18390: * aclocal.m4: added SUDO_SSIZE_T
18391:
18392: 1994-09-20 14:44 millert
18393:
18394: * sudo.h: added MODE_LIST
18395:
18396: 1994-09-20 14:43 millert
18397:
18398: * configure.in: added AC_SSIZE_T
18399:
18400: 1994-09-19 20:53 millert
18401:
18402: * find_path.c, sudo_realpath.c: readlink() is now declared as
18403: returning ssize~_t
18404:
18405: 1994-09-19 20:44 millert
18406:
18407: * configure.in: added -laud for OSF c2
18408:
18409: 1994-09-02 15:55 millert
18410:
18411: * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18412: Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18413: sudo-bugs@cs.colorado.edu
18414:
18415: 1994-09-02 15:54 millert
18416:
18417: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18418: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18419: sudo_setenv.c, tgetpass.c, version.h: changed
18420: sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18421:
18422: 1994-09-01 15:56 millert
18423:
18424: * Makefile.in: ++version
18425:
18426: 1994-09-01 15:55 millert
18427:
18428: * version.h: ++
18429:
18430: 1994-09-01 15:55 millert
18431:
18432: * logging.c: added host to alertmail messages
18433:
18434: 1994-09-01 15:55 millert
18435:
18436: * CHANGES, TODO: udpated
18437:
18438: 1994-09-01 15:26 millert
18439:
18440: * logging.c: fixed logging problem where mail would not say which
18441: user it was
18442:
18443: 1994-09-01 13:45 millert
18444:
18445: * configure.in: added -laud for gcc if osf & c2
18446:
18447: 1994-09-01 13:39 millert
18448:
18449: * check.c: moved set_auth_parameters to sudo.c
18450:
18451: 1994-09-01 13:38 millert
18452:
18453: * sudo.c: added set_auth_parameters for osf
18454:
18455: 1994-09-01 13:22 millert
18456:
18457: * configure.in: cleaned up -static stuff
18458:
18459: 1994-09-01 13:15 millert
18460:
18461: * Makefile.in: ++version
18462:
18463: 1994-09-01 13:15 millert
18464:
18465: * version.h: ++
18466:
18467: 1994-09-01 13:15 millert
18468:
18469: * sudo.c: changed setenv() to sudo_setenv()
18470:
18471: 1994-09-01 13:12 millert
18472:
18473: * check.c: fixed osf problem
18474:
18475: 1994-08-31 22:17 millert
18476:
18477: * configure.in: added OSF C2 stuff
18478:
18479: 1994-08-31 22:00 millert
18480:
18481: * CHANGES: updated
18482:
18483: 1994-08-31 21:56 millert
18484:
18485: * check.c: added osf auth support & removed some extra spaces
18486:
18487: 1994-08-31 21:52 millert
18488:
18489: * INSTALL, SUPPORTED: added osf C2 stuff
18490:
18491: 1994-08-31 19:52 millert
18492:
18493: * TODO: added 2 suggestions
18494:
18495: 1994-08-31 19:33 millert
18496:
18497: * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18498:
18499: 1994-08-31 18:48 millert
18500:
18501: * version.h: pl1
18502:
18503: 1994-08-30 18:31 millert
18504:
18505: * version.h: 1.3.1final
18506:
18507: 1994-08-30 18:30 millert
18508:
18509: * Makefile.in: added HISTORY
18510:
18511: 1994-08-30 18:30 millert
18512:
18513: * sudo.man: mention HISTPRY file
18514:
18515: 1994-08-30 18:30 millert
18516:
18517: * sudo.c: use sizeof instead of a constant in 1 place
18518:
18519: 1994-08-30 18:30 millert
18520:
18521: * parse.yacc: added unistd.h
18522:
18523: 1994-08-30 18:29 millert
18524:
18525: * parse.lex: added unistd.h
18526:
18527: 1994-08-30 18:27 millert
18528:
18529: * README: udpated
18530:
18531: 1994-08-30 18:15 millert
18532:
18533: * HISTORY: Initial revision
18534:
18535: 1994-08-17 12:45 millert
18536:
18537: * version.h: ++
18538:
18539: 1994-08-17 12:39 millert
18540:
18541: * CHANGES: updated
18542:
18543: 1994-08-17 12:36 millert
18544:
18545: * sudo_setenv.c: added unistd.h include
18546:
18547: 1994-08-16 15:46 millert
18548:
18549: * sudo.c: added sys/time.h for AIX
18550:
18551: 1994-08-14 21:22 millert
18552:
18553: * configure.in: added check for -lsocket and sys/sockio.h
18554:
18555: 1994-08-14 21:21 millert
18556:
18557: * config.h.in: took out libshadow check and added in sys/sockio.h
18558: check
18559:
18560: 1994-08-14 21:21 millert
18561:
18562: * sudo.c: now include sockio.h instead of ioctl.h if it exists
18563: "sudo -" now gets a better error message
18564:
18565: 1994-08-14 20:47 millert
18566:
18567: * sample.sudoers: now has a dir and subnet entry
18568:
18569: 1994-08-13 18:15 millert
18570:
18571: * sudo.c: removed if_ether.h
18572:
18573: 1994-08-13 17:16 millert
18574:
18575: * TODO: added an item
18576:
18577: 1994-08-13 17:15 millert
18578:
18579: * sudo.man: added network and ip addresses to man page
18580:
18581: 1994-08-13 17:09 millert
18582:
18583: * sudo.c: no error if can't get interfaces or netmask since
18584: networking may not be in the kernel.
18585:
18586: 1994-08-13 17:08 millert
18587:
18588: * parse.c: nwo check for interfaces == NULL
18589:
18590: 1994-08-12 21:22 millert
18591:
18592: * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18593: to fail if the last entry in the spec failed (ie: it was only
18594: looking at the last entry). CLeaned things up by adding the
18595: cmndcmp() function--all neat & tidy
18596:
18597: 1994-08-12 21:21 millert
18598:
18599: * CHANGES: added one
18600:
18601: 1994-08-11 23:42 millert
18602:
18603: * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18604:
18605: 1994-08-11 21:58 millert
18606:
18607: * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18608: netinet/in.h
18609:
18610: 1994-08-11 21:58 millert
18611:
18612: * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18613: visudo.c: added include of netinet/in.h
18614:
18615: 1994-08-11 21:57 millert
18616:
18617: * version.h: ++
18618:
18619: 1994-08-11 21:57 millert
18620:
18621: * sudo.h: added interfaces global
18622:
18623: 1994-08-11 21:56 millert
18624:
18625: * parse.c: now uses new interfaces global
18626:
18627: 1994-08-11 21:56 millert
18628:
18629: * sudo.c: now ip addresses are gleaned fw/o dns
18630:
18631: 1994-08-10 19:21 millert
18632:
18633: * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18634:
18635: 1994-08-10 19:21 millert
18636:
18637: * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18638: network addrs
18639:
18640: 1994-08-10 19:20 millert
18641:
18642: * sudo.h: added ip_addrs def added load_ip_addrs prototype
18643:
18644: 1994-08-08 16:03 millert
18645:
18646: * CHANGES: updated
18647:
18648: 1994-08-08 15:57 millert
18649:
18650: * Makefile.in: removed multiple entries in DISTFILES
18651:
18652: 1994-08-08 13:05 millert
18653:
18654: * visudo.c: ansified the !STDC_HEADERS decls
18655:
18656: 1994-08-08 13:05 millert
18657:
18658: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18659: malloc decl if gnuc
18660:
18661: 1994-08-08 13:04 millert
18662:
18663: * sudo.c: can't use getopt(3) since it munges args to the command
18664: to be run as root don't do malloc decl if gnuc
18665:
18666: 1994-08-08 00:41 millert
18667:
18668: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18669: sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18670: prottypes
18671:
18672: 1994-08-08 00:27 millert
18673:
18674: * getcwd.c, getwd.c: added missing paren
18675:
18676: 1994-08-08 00:23 millert
18677:
18678: * Makefile.in: added putenv.c to DISTFILES
18679:
18680: 1994-08-08 00:08 millert
18681:
18682: * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18683: not defined now can count on putenv() being there
18684:
18685: 1994-08-08 00:08 millert
18686:
18687: * sudo_realpath.c: took out errno decl since sudo.h does it for us
18688: fixed up a next cc warning added params to func decls when
18689: STDC_HEADERS is not defined
18690:
18691: 1994-08-08 00:07 millert
18692:
18693: * sudo.h: took out environ extern added local declaratio of
18694: putenv() if local version is needed
18695:
18696: 1994-08-08 00:05 millert
18697:
18698: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18699: func decls when STDC_HEADERS is not defined
18700:
18701: 1994-08-08 00:04 millert
18702:
18703: * config.h.in: added memcpy check check to see that ansi vs bsd
18704: macros are ntot already defiend before defining (ie: avoid
18705: redefinition)
18706:
18707: 1994-08-08 00:03 millert
18708:
18709: * configure.in: removed fluff setenv check plus check w/ replace
18710: for putenv if also no setenv
18711:
18712: 1994-08-08 00:01 millert
18713:
18714: * putenv.c: Initial revision
18715:
18716: 1994-08-06 19:19 millert
18717:
18718: * sudo_setenv.c: Initial revision
18719:
18720: 1994-08-06 19:19 millert
18721:
18722: * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18723:
18724: 1994-08-06 19:19 millert
18725:
18726: * sudo.c: now use sudo_setenvc
18727:
18728: 1994-08-06 19:18 millert
18729:
18730: * configure.in: added puteenv and setenv, removed realpath
18731:
18732: 1994-08-06 19:18 millert
18733:
18734: * config.h.in: added putenv & setenv
18735:
18736: 1994-08-06 19:18 millert
18737:
18738: * Makefile.in: added sudo_setenv
18739:
18740: 1994-08-06 19:16 millert
18741:
18742: * version.h: ++
18743:
18744: 1994-08-05 19:43 millert
18745:
18746: * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18747: irix
18748:
18749: 1994-08-05 19:43 millert
18750:
18751: * Makefile.in: added MAN_POSTINSTALL
18752:
18753: 1994-08-05 19:43 millert
18754:
18755: * CHANGES: added
18756:
18757: 1994-08-05 19:10 millert
18758:
18759: * sudo.man: added SUDO_* plus new options
18760:
18761: 1994-08-05 19:10 millert
18762:
18763: * CHANGES: added one
18764:
18765: 1994-08-05 19:07 millert
18766:
18767: * configure.in: took out shadow lib
18768:
18769: 1994-08-05 18:35 millert
18770:
18771: * TODO: adde done
18772:
18773: 1994-08-05 17:52 millert
18774:
18775: * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18776:
18777: 1994-08-05 17:49 millert
18778:
18779: * Makefile.in: support for installing a cat page instead of a man
18780: page if no nroff
18781:
18782: 1994-08-05 17:48 millert
18783:
18784: * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18785: looks for nroff to determine whether or not to install a cat or
18786: man page
18787:
18788: 1994-08-05 17:48 millert
18789:
18790: * config.h.in: added HAVE_FLEX
18791:
18792: 1994-08-05 16:14 millert
18793:
18794: * sudo.c: not set ret to MODE_RUN initially
18795:
18796: 1994-08-05 16:12 millert
18797:
18798: * find_path.c: made command (and therefor cmnd dynamically
18799: allocated)
18800:
18801: 1994-08-04 20:25 millert
18802:
18803: * TODO: did #8
18804:
18805: 1994-08-04 20:24 millert
18806:
18807: * version.h: ++
18808:
18809: 1994-08-04 20:24 millert
18810:
18811: * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18812:
18813: 1994-08-04 20:24 millert
18814:
18815: * sudo.h: added MODE_ removed validate_only and added
18816: remove_timestamp()
18817:
18818: 1994-08-04 20:22 millert
18819:
18820: * sudo.c: usage() now takes an int (exit value) added parse_args()
18821: to parse command line arguments moved call to find_path() from
18822: load_globals to new function load_cmnd() removed validate_only
18823: global -- now use the concept of "modes" added -h and -k options
18824:
18825: 1994-08-04 20:21 millert
18826:
18827: * parse.c: no longer use global validate_only now checks for
18828: command called "validate" removed check for non-fully qualified
18829: commands since that is done by find_path
18830:
18831: 1994-08-04 20:20 millert
18832:
18833: * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18834:
18835: 1994-08-04 20:17 millert
18836:
18837: * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18838: comment
18839:
18840: 1994-08-04 20:17 millert
18841:
18842: * check.c: check_timestamp no longer runs reminder(), it is implied
18843: in the return val added remove_timestamp()
18844:
18845: 1994-08-04 20:16 millert
18846:
18847: * CHANGES: updated
18848:
18849: 1994-08-04 16:38 millert
18850:
18851: * BUGS: fixed on
18852:
18853: 1994-08-04 16:38 millert
18854:
18855: * sudo_realpath.c: took out old_errno
18856:
18857: 1994-08-04 16:37 millert
18858:
18859: * CHANGES: updated
18860:
18861: 1994-08-03 12:08 millert
18862:
18863: * logging.c: moved send_mail to after syslog
18864:
18865: 1994-08-02 22:41 millert
18866:
18867: * sudo.c: now set SUDO_ envariables
18868:
18869: 1994-08-01 13:40 millert
18870:
18871: * version.h: ++
18872:
18873: 1994-08-01 13:39 millert
18874:
18875: * sudo_realpath.c: now print error if chdir fails
18876:
18877: 1994-08-01 13:39 millert
18878:
18879: * find_path.c: removed an XXX
18880:
18881: 1994-07-25 20:40 millert
18882:
18883: * CHANGES: updated
18884:
18885: 1994-07-25 20:36 millert
18886:
18887: * configure.in: no more static binaries for aix
18888:
18889: 1994-07-25 18:37 millert
18890:
18891: * INSTALL: fixed typo
18892:
18893: 1994-07-25 18:33 millert
18894:
18895: * sudo_realpath.c: took out stuff not needed for sudo now does
18896: be_root/be_user itself now uses cwd global
18897:
18898: 1994-07-25 18:32 millert
18899:
18900: * version.h: +=2
18901:
18902: 1994-07-25 18:31 millert
18903:
18904: * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18905:
18906: 1994-07-25 18:26 millert
18907:
18908: * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18909:
18910: 1994-07-25 18:25 millert
18911:
18912: * find_path.c: now use sudo_realpath()
18913:
18914: 1994-07-25 18:25 millert
18915:
18916: * config.h.in: took out realpth() stuff since we now use
18917: sudo_realpath()
18918:
18919: 1994-07-25 18:25 millert
18920:
18921: * configure.in: ultrix enhanced sec
18922:
18923: 1994-07-25 18:25 millert
18924:
18925: * SUPPORTED: added ultrix enhanced sec.
18926:
18927: 1994-07-25 18:24 millert
18928:
18929: * INSTALL: updated
18930:
18931: 1994-07-25 18:21 millert
18932:
18933: * check.c: ultrix enhanced security suport
18934:
18935: 1994-07-25 18:20 millert
18936:
18937: * Makefile.in: added sudo_realpath.c
18938:
18939: 1994-07-25 18:18 millert
18940:
18941: * CHANGES: updated
18942:
18943: 1994-07-25 14:28 millert
18944:
18945: * tgetpass.c: increased passwd len to 24 for c2 security
18946:
18947: 1994-07-25 13:17 millert
18948:
18949: * BUGS: updated BUGS
18950:
18951: 1994-07-15 11:49 millert
18952:
18953: * check.c: now use user global var
18954:
18955: 1994-07-15 11:48 millert
18956:
18957: * configure.in: took out -ls
18958:
18959: 1994-07-14 19:11 millert
18960:
18961: * configure.in: added AFS libs
18962:
18963: 1994-07-14 17:45 millert
18964:
18965: * sudo.h: user is now a char * added epasswd
18966:
18967: 1994-07-14 17:43 millert
18968:
18969: * sudo.c: added tzset() to load_globals added epasswd (encrypted
18970: password) global made user dynamically allocated
18971:
18972: 1994-07-14 17:43 millert
18973:
18974: * configure.in: added tzset test
18975:
18976: 1994-07-14 17:43 millert
18977:
18978: * config.h.in: added HAVE_TZSET
18979:
18980: 1994-07-14 17:42 millert
18981:
18982: * check.c: cleaned up encrypted passwd grab somewhat
18983:
18984: 1994-07-14 12:34 millert
18985:
18986: * configure.in: fixed AFS typo
18987:
18988: 1994-07-14 12:34 millert
18989:
18990: * INSTALL: added AFS not
18991:
18992: 1994-07-14 12:34 millert
18993:
18994: * CHANGES: udpated
18995:
18996: 1994-07-14 12:33 millert
18997:
18998: * logging.c: can now log to both syslog & a file
18999:
19000: 1994-07-14 12:12 millert
19001:
19002: * sudo.h: added BOTH_LOGS
19003:
19004: 1994-07-14 11:34 millert
19005:
19006: * CHANGES: updated
19007:
19008: 1994-07-14 11:32 millert
19009:
19010: * configure.in: --with-AFS
19011:
19012: 1994-07-14 11:32 millert
19013:
19014: * config.h.in: added HAVE_AFS
19015:
19016: 1994-07-14 11:31 millert
19017:
19018: * check.c: added afs changes
19019:
19020: 1994-07-14 11:21 millert
19021:
19022: * sudo.h: removed AFS stuff :-)
19023:
19024: 1994-07-14 11:19 millert
19025:
19026: * tgetpass.c: include sys/select for AIX
19027:
19028: 1994-07-14 11:17 millert
19029:
19030: * sudo.h: added AFS
19031:
19032: 1994-07-14 11:16 millert
19033:
19034: * version.h: ++
19035:
19036: 1994-07-07 14:45 millert
19037:
19038: * SUPPORTED, CHANGES: updated
19039:
19040: 1994-07-07 14:44 millert
19041:
19042: * logging.c: can now have MAILER undefined
19043:
19044: 1994-07-07 14:37 millert
19045:
19046: * INSTALL: new sub-note about MAILER
19047:
19048: 1994-07-06 23:11 millert
19049:
19050: * sudo.man: added blurb about password timeout
19051:
19052: 1994-07-06 20:52 millert
19053:
19054: * configure.in: convex c2 changes
19055:
19056: 1994-07-06 20:52 millert
19057:
19058: * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
19059:
19060: 1994-07-06 20:51 millert
19061:
19062: * Makefile.in: added OSDEFS
19063:
19064: 1994-07-06 20:46 millert
19065:
19066: * config.h.in: added spaces
19067:
19068: 1994-07-06 20:08 millert
19069:
19070: * tgetpass.c: added a goto if fgets fails
19071:
19072: 1994-07-06 20:08 millert
19073:
19074: * sudo.h: use __hpux not hpux convex c2 stuff
19075:
19076: 1994-07-06 20:08 millert
19077:
19078: * sudo.c: use __hpux not hpux
19079:
19080: 1994-07-06 20:08 millert
19081:
19082: * logging.c: convex c2 stuff
19083:
19084: 1994-07-06 20:07 millert
19085:
19086: * config.h.in: define ansi-ish cpp os defines if non-ansi are
19087: defined for hpux & convex
19088:
19089: 1994-07-06 20:07 millert
19090:
19091: * INSTALL: updated to say we support sonvex C2
19092:
19093: 1994-07-06 20:05 millert
19094:
19095: * check.c: added convex c2 support
19096:
19097: 1994-07-01 12:06 millert
19098:
19099: * tgetpass.c: no more ioctl never returns NULL uses fgets() and
19100: select() to timeout
19101:
19102: 1994-06-29 17:04 millert
19103:
19104: * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
19105:
19106: 1994-06-29 16:39 millert
19107:
19108: * tgetpass.c: now works + uses fgets()
19109:
19110: 1994-06-28 18:25 millert
19111:
19112: * tgetpass.c: select doesn't seem to recognize a single '\n' as
19113: input waiting so we can;t use it, sigh.
19114:
19115: 1994-06-26 16:38 millert
19116:
19117: * PORTING: updated tgetpass() blurb
19118:
19119: 1994-06-26 16:35 millert
19120:
19121: * configure.in: added --with-getpass
19122:
19123: 1994-06-26 16:35 millert
19124:
19125: * Makefile.in: added tgetpass stuff
19126:
19127: 1994-06-26 15:25 millert
19128:
19129: * tgetpass.c: now uses stdio
19130:
19131: 1994-06-26 15:17 millert
19132:
19133: * version.h: ++
19134:
19135: 1994-06-24 19:48 millert
19136:
19137: * PORTING: updated ,.
19138:
19139: 1994-06-24 19:46 millert
19140:
19141: * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
19142:
19143: 1994-06-24 19:45 millert
19144:
19145: * configure.in: fixed a test aded --with-C2 and --with-tgetpass
19146:
19147: 1994-06-24 19:45 millert
19148:
19149: * check.c: added hpux C2 shit
19150:
19151: 1994-06-24 19:45 millert
19152:
19153: * Makefile.in: took out tgetpass.*
19154:
19155: 1994-06-24 19:45 millert
19156:
19157: * INSTALL: added C2 blurb
19158:
19159: 1994-06-13 15:54 millert
19160:
19161: * configure.in: no termio(s) for ultrix since it is broken
19162:
19163: 1994-06-13 15:41 millert
19164:
19165: * check.c: added a space (yeah, anal)
19166:
19167: 1994-06-13 15:17 millert
19168:
19169: * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
19170:
19171: 1994-06-08 14:34 millert
19172:
19173: * config.h.in: took out bsd signal stuff for irix
19174:
19175: 1994-06-08 14:26 millert
19176:
19177: * visudo.c: comments in #endif
19178:
19179: 1994-06-08 14:09 millert
19180:
19181: * configure.in: don't define BSD signals for irix
19182:
19183: 1994-06-08 12:57 millert
19184:
19185: * TODO: did some...
19186:
19187: 1994-06-08 12:57 millert
19188:
19189: * CHANGES: updated
19190:
19191: 1994-06-08 12:56 millert
19192:
19193: * realpath.c, sudo_realpath.c: took out unneeded code by changing
19194: where a strings was terminated
19195:
19196: 1994-06-07 19:21 millert
19197:
19198: * realpath.c, sudo_realpath.c: fix bug where /dirname would return
19199: NULL
19200:
19201: 1994-06-07 17:40 millert
19202:
19203: * sudo.h: move __P to config.h
19204:
19205: 1994-06-07 17:40 millert
19206:
19207: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
19208: definition
19209:
19210: 1994-06-07 17:40 millert
19211:
19212: * config.h.in: added __P
19213:
19214: 1994-06-07 17:21 millert
19215:
19216: * config.h.in: added HAVE_FCHDIR
19217:
19218: 1994-06-07 17:18 millert
19219:
19220: * strdup.c: now include stdio
19221:
19222: 1994-06-07 14:55 millert
19223:
19224: * realpath.c, sudo_realpath.c: now works if no fchdir
19225:
19226: 1994-06-07 14:55 millert
19227:
19228: * visudo.c: define SA_RESETHAND to null if not defined
19229:
19230: 1994-06-07 14:54 millert
19231:
19232: * configure.in: added check & replace
19233:
19234: 1994-06-06 20:05 millert
19235:
19236: * configure.in: took out -static for nextstep -- it doesn't work
19237:
19238: 1994-06-06 19:59 millert
19239:
19240: * logging.c: moved #endif to where it belongs
19241:
19242: 1994-06-06 19:54 millert
19243:
19244: * SUPPORTED: correction
19245:
19246: 1994-06-06 19:42 millert
19247:
19248: * configure.in: now checks for strdup realpath getcwd bzero
19249:
19250: 1994-06-06 19:31 millert
19251:
19252: * config.h.in: emulate bzero
19253:
19254: 1994-06-06 16:57 millert
19255:
19256: * visudo.c: added posic signals
19257:
19258: 1994-06-06 16:57 millert
19259:
19260: * tgetpass.c: bzero cast
19261:
19262: 1994-06-06 16:57 millert
19263:
19264: * logging.c: added posix signals
19265:
19266: 1994-06-06 16:56 millert
19267:
19268: * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19269: missing functions
19270:
19271: 1994-06-06 16:56 millert
19272:
19273: * config.h.in: added posix signal stuff
19274:
19275: 1994-06-06 16:56 millert
19276:
19277: * Makefile.in: added new srcs
19278:
19279: 1994-06-06 12:53 millert
19280:
19281: * visudo.c: updated useag
19282:
19283: 1994-06-06 12:39 millert
19284:
19285: * tgetpass.c: now uses posix signals
19286:
19287: 1994-06-05 20:17 millert
19288:
19289: * PORTING: updated sto reflect major changes
19290:
19291: 1994-06-05 20:05 millert
19292:
19293: * TODO, CHANGES: updated
19294:
19295: 1994-06-05 20:04 millert
19296:
19297: * tgetpass.c: uses sysconf() if available
19298:
19299: 1994-06-05 20:04 millert
19300:
19301: * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19302:
19303: 1994-06-05 20:04 millert
19304:
19305: * realpath.c, sudo_realpath.c: for those w/o this in libc
19306:
19307: 1994-06-05 20:03 millert
19308:
19309: * getcwd.c, getwd.c: Initial revision
19310:
19311: 1994-06-05 20:03 millert
19312:
19313: * find_path.c: rewrote to use realpath(3) - nis now all my code
19314:
19315: 1994-06-05 20:02 millert
19316:
19317: * config.h.in: added HAVE_REALPATH
19318:
19319: 1994-06-05 20:02 millert
19320:
19321: * check.c: now use tgetpass
19322:
19323: 1994-06-05 20:02 millert
19324:
19325: * Makefile.in: added LIBOBJS use tgetpass.c
19326:
19327: 1994-06-05 18:55 millert
19328:
19329: * tgetpass.c: works now :-)
19330:
19331: 1994-06-05 18:27 millert
19332:
19333: * tgetpass.c: Initial revision
19334:
19335: 1994-06-05 17:17 millert
19336:
19337: * pathnames.h.in: added /dev/tty
19338:
19339: 1994-06-04 17:12 millert
19340:
19341: * version.h: incremented
19342:
19343: 1994-06-04 15:29 millert
19344:
19345: * sudo.c: always use getcwd
19346:
19347: 1994-06-04 14:49 millert
19348:
19349: * config.h.in: added check for getwd
19350:
19351: 1994-06-04 14:48 millert
19352:
19353: * configure.in: replace strdup & realpath & getcwd if missing
19354:
19355: 1994-06-04 14:47 millert
19356:
19357: * pathnames.h.in: added _PATH_PWD
19358:
19359: 1994-06-04 14:46 millert
19360:
19361: * aclocal.m4: added SUDO_PROG_PWD
19362:
19363: 1994-06-04 14:37 millert
19364:
19365: * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19366:
19367: 1994-06-03 11:31 millert
19368:
19369: * configure.in: quoted quare brackets
19370:
19371: 1994-06-02 17:49 millert
19372:
19373: * sudo.c: no need to strdup() a constant
19374:
19375: 1994-06-02 15:45 millert
19376:
19377: * CHANGES: updated
19378:
19379: 1994-06-02 15:44 millert
19380:
19381: * sudo.man: added validate
19382:
19383: 1994-06-02 15:42 millert
19384:
19385: * sudo.c: added -v to usage
19386:
19387: 1994-06-02 15:41 millert
19388:
19389: * parse.c, sudo.c, sudo.h: added validate_only stuff
19390:
19391: 1994-05-29 21:29 millert
19392:
19393: * configure.in: now finds sed
19394:
19395: 1994-05-29 21:28 millert
19396:
19397: * aclocal.m4: $OSREV is now an int
19398:
19399: 1994-05-29 19:13 millert
19400:
19401: * configure.in: added mtxinu to caser
19402:
19403: 1994-05-29 18:37 millert
19404:
19405: * sudo.h: added EXEC macro
19406:
19407: 1994-05-29 18:36 millert
19408:
19409: * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19410: FQDN is set
19411:
19412: 1994-05-29 18:36 millert
19413:
19414: * logging.c: changed mail_argv[] def now use EXEC() macro
19415:
19416: 1994-05-29 18:35 millert
19417:
19418: * check.c: took out crypt() definition
19419:
19420: 1994-05-29 17:23 millert
19421:
19422: * version.h: upped the version
19423:
19424: 1994-05-29 15:52 millert
19425:
19426: * configure.in: always look for -lnsl
19427:
19428: 1994-05-29 15:29 millert
19429:
19430: * aclocal.m4: added an echo
19431:
19432: 1994-05-29 15:25 millert
19433:
19434: * sudo.h: SHORT_MESSAGE is now the default
19435:
19436: 1994-05-29 15:18 millert
19437:
19438: * config.h.in: fixed typo
19439:
19440: 1994-05-29 01:29 millert
19441:
19442: * configure.in: added missing AC_DEFINE(SVR4) for solaris
19443:
19444: 1994-05-28 20:42 millert
19445:
19446: * sudo.man: documented the -v flag
19447:
19448: 1994-05-28 20:34 millert
19449:
19450: * SUPPORTED: updated
19451:
19452: 1994-05-28 20:31 millert
19453:
19454: * check.c: proto-ized crypt()
19455:
19456: 1994-05-28 20:28 millert
19457:
19458: * config.h.in: added LIBSHADOW undef
19459:
19460: 1994-05-28 20:18 millert
19461:
19462: * configure.in: nwo set OS to be lowercase
19463:
19464: 1994-05-28 19:36 millert
19465:
19466: * configure.in: now use SUDO_OSTYPE to set $OS
19467:
19468: 1994-05-28 19:36 millert
19469:
19470: * aclocal.m4: now use uname to determine os
19471:
19472: 1994-05-28 16:23 millert
19473:
19474: * visudo.c: added prototypes & moved sig handler around
19475:
19476: 1994-05-28 15:13 millert
19477:
19478: * sudo.h: added prototyppes
19479:
19480: 1994-05-28 15:13 millert
19481:
19482: * parse.c: added comment
19483:
19484: 1994-05-28 15:12 millert
19485:
19486: * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19487:
19488: 1994-05-28 15:11 millert
19489:
19490: * check.c, logging.c, sudo.c: added prototypes
19491:
19492: 1994-05-28 15:11 millert
19493:
19494: * aixcrypt.exp: Initial revision
19495:
19496: 1994-05-28 15:11 millert
19497:
19498: * Makefile.in: added aixcrypt.exp
19499:
19500: 1994-05-28 13:21 millert
19501:
19502: * parse.lex, parse.yacc: moved config.h to top of includes
19503:
19504: 1994-05-25 15:48 millert
19505:
19506: * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19507:
19508: 1994-05-24 23:08 millert
19509:
19510: * visudo.c: added -v flag and usage()
19511:
19512: 1994-05-24 23:08 millert
19513:
19514: * version.h: fixed a typo
19515:
19516: 1994-05-24 23:08 millert
19517:
19518: * sudo.c: cast Argv to a const for exec added -v flag
19519:
19520: 1994-05-24 23:07 millert
19521:
19522: * logging.c: mail_argv is now a const
19523:
19524: 1994-05-24 23:07 millert
19525:
19526: * configure.in: only set RETSIGTYPE if it is not set already
19527:
19528: 1994-05-24 23:07 millert
19529:
19530: * aclocal.m4: now defines & STDC_HEADERS for Irix
19531:
19532: 1994-05-24 23:07 millert
19533:
19534: * Makefile.in: added version.h
19535:
19536: 1994-05-24 21:25 millert
19537:
19538: * insults.h, sudo.h: prevent multiple inclusion
19539:
19540: 1994-05-24 21:20 millert
19541:
19542: * version.h: Initial revision
19543:
19544: 1994-05-24 21:09 millert
19545:
19546: * parse.lex, parse.yacc: now includes config.h
19547:
19548: 1994-05-24 20:54 millert
19549:
19550: * aclocal.m4: now talks about sunos 4.x
19551:
19552: 1994-05-24 20:23 millert
19553:
19554: * visudo.c: calls to Exit now pass an arg
19555:
19556: 1994-05-24 18:00 millert
19557:
19558: * visudo.c: signal handler now takes an int argument
19559:
19560: 1994-05-24 18:00 millert
19561:
19562: * CHANGES: updated
19563:
19564: 1994-05-24 17:44 millert
19565:
19566: * sudo.c: ok, the getcwd() is now *really* done as the user
19567:
19568: 1994-05-24 17:44 millert
19569:
19570: * configure.in: changed AIX STATIC_FLAGS
19571:
19572: 1994-05-24 16:27 millert
19573:
19574: * aclocal.m4: solaris now defines SVR4
19575:
19576: 1994-05-24 16:18 millert
19577:
19578: * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19579: sigh.
19580:
19581: 1994-05-24 16:18 millert
19582:
19583: * sudo.c: moved getcwd stuff into load_globals
19584:
19585: 1994-05-24 16:18 millert
19586:
19587: * parse.c: took out externs that are in suod.h
19588:
19589: 1994-05-24 16:18 millert
19590:
19591: * logging.c: moved cwd into load_globals
19592:
19593: 1994-05-24 16:17 millert
19594:
19595: * find_path.c: moved cwd stuff
19596:
19597: 1994-05-24 15:55 millert
19598:
19599: * Makefile.in: fixed make distclean & realclean
19600:
19601: 1994-05-24 12:51 millert
19602:
19603: * TODO: updated .,
19604:
19605: 1994-05-24 12:51 millert
19606:
19607: * CHANGES: added solaris changes
19608:
19609: 1994-05-24 12:51 millert
19610:
19611: * aclocal.m4: added solaris changes, need to rework
19612:
19613: 1994-05-24 12:50 millert
19614:
19615: * configure.in: cleaned up for solaris
19616:
19617: 1994-05-24 12:13 millert
19618:
19619: * logging.c: reinstall reapchild signal handler for non-bsd signals
19620:
19621: 1994-05-24 12:03 millert
19622:
19623: * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19624: needed)
19625:
19626: 1994-05-24 12:03 millert
19627:
19628: * sudo.c: support for HAVE_SYSCONF
19629:
19630: 1994-05-24 12:02 millert
19631:
19632: * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19633: minor prettying up /
19634:
19635: 1994-05-23 20:26 millert
19636:
19637: * config.h.in: added HAVE_SYSCONF
19638:
19639: 1994-05-16 18:57 millert
19640:
19641: * configure.in: now tells you what os you are running /.
19642:
19643: 1994-05-16 18:56 millert
19644:
19645: * aclocal.m4: took out extra ','
19646:
19647: 1994-05-14 17:56 millert
19648:
19649: * config.h.in: added _BSD_COMPAT
19650:
19651: 1994-05-14 17:56 millert
19652:
19653: * aclocal.m4: fixed for irix5
19654:
19655: 1994-05-14 17:55 millert
19656:
19657: * CHANGES: updated
19658:
19659: 1994-05-14 17:27 millert
19660:
19661: * sudo.c: uid seinitialized to -2
19662:
19663: 1994-04-28 12:36 millert
19664:
19665: * sudo.c: now removes LIBPATH for AIX
19666:
19667: 1994-03-12 20:41 millert
19668:
19669: * configure.in: now uses ufc if it finds it
19670:
19671: 1994-03-12 17:42 millert
19672:
19673: * sudo.h: no longer define yyval & yylval since yacc does it
19674:
19675: 1994-03-12 17:42 millert
19676:
19677: * parse.lex: now defines yylval as extenr
19678:
19679: 1994-03-12 17:41 millert
19680:
19681: * configure.in: BROKEN_GETPASS is now an OPTION
19682:
19683: 1994-03-12 17:41 millert
19684:
19685: * config.h.in: took out BROKEN_GETPASS
19686:
19687: 1994-03-12 17:20 millert
19688:
19689: * Makefile.in: took out big comment
19690:
19691: 1994-03-12 16:24 millert
19692:
19693: * README: updated
19694:
19695: 1994-03-12 16:20 millert
19696:
19697: * Makefile.in: took out README.beta
19698:
19699: 1994-03-12 16:19 millert
19700:
19701: * SUPPORTED: Initial revision
19702:
19703: 1994-03-12 16:19 millert
19704:
19705: * INSTALL: now reference SUPPORTED .,
19706:
19707: 1994-03-12 16:17 millert
19708:
19709: * config.h.in: now check for convex OR __convex__
19710:
19711: 1994-03-12 16:16 millert
19712:
19713: * aclocal.m4: now check for convex or __convex__
19714:
19715: 1994-03-12 16:15 millert
19716:
19717: * Makefile.in: added dist target
19718:
19719: 1994-03-12 15:19 millert
19720:
19721: * aclocal.m4: use __convex__
19722:
19723: 1994-03-12 14:33 millert
19724:
19725: * find_path.c: now use _S_* stat stuff to be ansi-like
19726:
19727: 1994-03-12 14:11 millert
19728:
19729: * INSTALL: updated for configure directions
19730:
19731: 1994-03-12 14:05 millert
19732:
19733: * Makefile.in: distclean now removes config.h and pathnames.h
19734:
19735: 1994-03-12 14:03 millert
19736:
19737: * CHANGES: updated
19738:
19739: 1994-03-12 14:00 millert
19740:
19741: * TODO: fixed typoe
19742:
19743: 1994-03-12 13:57 millert
19744:
19745: * Makefile.in, visudo.c: updated version
19746:
19747: 1994-03-12 13:57 millert
19748:
19749: * config.h.in, pathnames.h.in: added copyright header
19750:
19751: 1994-03-12 13:55 millert
19752:
19753: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19754: parse.yacc, sudo.c, sudo.h: udpated version
19755:
19756: 1994-03-12 13:39 millert
19757:
19758: * visudo.c: udpated to use configure + pathnames.h
19759:
19760: 1994-03-12 13:37 millert
19761:
19762: * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19763:
19764: 1994-03-12 13:37 millert
19765:
19766: * sudo.h: now works with configure
19767:
19768: 1994-03-12 13:36 millert
19769:
19770: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19771: updated to work with configure + pathnames.h
19772:
19773: 1994-03-12 10:40 millert
19774:
19775: * Makefile.in: added LEXLIB
19776:
19777: 1994-03-10 03:18 millert
19778:
19779: * COPYING: updated gnu general licence to versio 2
19780:
19781: 1994-03-10 02:44 millert
19782:
19783: * pathnames.h.in, config.h.in: Initial revision
19784:
19785: 1994-03-10 01:43 millert
19786:
19787: * sudo.h: changed to work with configure
19788:
19789: 1994-03-09 18:51 millert
19790:
19791: * Makefile.in, aclocal.m4, configure.in: Initial revision
19792:
19793: 1994-03-09 17:36 millert
19794:
19795: * visudo.c: now uses defines used by configure
19796:
19797: 1994-03-01 16:31 millert
19798:
19799: * find_path.c: sudo won't bitch about EPERM now, for real
19800:
19801: 1994-02-28 00:36 millert
19802:
19803: * logging.c: renamed exec_argv to eliminate a libc name clash with
19804: ksros
19805:
19806: 1994-02-28 00:28 millert
19807:
19808: * CHANGES: corrected
19809:
19810: 1994-02-28 00:27 millert
19811:
19812: * logging.c, sudo.c, sudo.h: execve -> execv
19813:
19814: 1994-02-27 23:27 millert
19815:
19816: * TODO: upated
19817:
19818: 1994-02-27 23:19 millert
19819:
19820: * PORTING: added 2 mroe items
19821:
19822: 1994-02-27 23:12 millert
19823:
19824: * CHANGES: updated
19825:
19826: 1994-02-27 23:11 millert
19827:
19828: * sudo.h: added UMASK and mode_t declaration
19829:
19830: 1994-02-27 23:11 millert
19831:
19832: * sudo.c: added UMASK
19833:
19834: 1994-02-27 20:55 millert
19835:
19836: * logging.c: now opens log file with mode 077
19837:
19838: 1994-02-27 20:55 millert
19839:
19840: * check.c: saved current umask ans restores it
19841:
19842: 1994-02-27 20:36 millert
19843:
19844: * sudo.h: added MAXLOGFILELEN
19845:
19846: 1994-02-27 20:35 millert
19847:
19848: * logging.c: split long log lines. FOr syslog, split into multiple
19849: entries, for a log file, indent the extra for readability
19850:
19851: 1994-02-27 17:22 millert
19852:
19853: * CHANGES: added changes
19854:
19855: 1994-02-27 17:18 millert
19856:
19857: * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19858: should be)
19859:
19860: 1994-02-25 16:04 millert
19861:
19862: * TODO: added input from Brett M Hogden <hogden@rge.com>
19863:
19864: 1994-02-16 13:35 millert
19865:
19866: * sudo.c: added rmenv() to remove stuff from environ. can now uses
19867: execvp() OR execve() becuase of this.
19868:
19869: 1994-02-16 13:35 millert
19870:
19871: * logging.c: now uses execvp() OR execve()
19872:
19873: 1994-02-16 13:31 millert
19874:
19875: * sudo.h: added USE_EXECVE
19876:
19877: 1994-02-16 13:27 millert
19878:
19879: * sudo.h: added environ
19880:
19881: 1994-02-16 12:53 millert
19882:
19883: * find_path.c: now ignore EPERM
19884:
19885: 1994-02-15 23:52 millert
19886:
19887: * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19888: statics /.
19889:
19890: 1994-02-15 23:52 millert
19891:
19892: * CHANGES: updated
19893:
19894: 1994-02-15 23:40 millert
19895:
19896: * sudo.h: took out Envp
19897:
19898: 1994-02-14 12:28 millert
19899:
19900: * BUGS: Initial revision
19901:
19902: 1994-02-10 14:29 millert
19903:
19904: * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19905:
19906: 1994-02-10 14:05 millert
19907:
19908: * sudo.h: added SECURE_PATH
19909:
19910: 1994-02-10 13:50 millert
19911:
19912: * INSTALL: added sample.sudoers note
19913:
19914: 1994-02-10 13:47 millert
19915:
19916: * sudoers: Initial revision
19917:
19918: 1994-02-09 14:54 millert
19919:
19920: * find_path.c: fixed typo
19921:
19922: 1994-02-08 23:06 millert
19923:
19924: * PORTING: took out SAVED_UID garbage
19925:
19926: 1994-02-08 22:55 millert
19927:
19928: * INSTALL: mentioned HAL
19929:
19930: 1994-02-08 22:50 millert
19931:
19932: * sudo.h: added HAL line
19933:
19934: 1994-02-08 22:48 millert
19935:
19936: * insults.h: added HAL insults
19937:
19938: 1994-02-08 22:48 millert
19939:
19940: * TODO: updated
19941:
19942: 1994-02-08 22:02 millert
19943:
19944: * logging.c: more verbose error if mailer not found
19945:
19946: 1994-02-08 22:02 millert
19947:
19948: * check.c: now do getpwent as root for soem shadow password systems
19949: (bsdi)
19950:
19951: 1994-02-08 13:22 millert
19952:
19953: * sudo.h: took out SAVED_UID garbade
19954:
19955: 1994-02-08 13:21 millert
19956:
19957: * sudo.c: took out SAVED_UID garbage since it don't work
19958:
19959: 1994-02-06 17:43 millert
19960:
19961: * README: updated
19962:
19963: 1994-02-06 17:40 millert
19964:
19965: * insults.h: added a missing space :-)
19966:
19967: 1994-02-05 19:48 millert
19968:
19969: * sudo.c, sudo.h: took out multimax cruft
19970:
19971: 1994-02-05 19:30 millert
19972:
19973: * INSTALL: minor update
19974:
19975: 1994-02-05 19:30 millert
19976:
19977: * PORTING: finished
19978:
19979: 1994-02-05 19:19 millert
19980:
19981: * sudo.c: fixed a typo + indentation
19982:
19983: 1994-02-05 18:43 millert
19984:
19985: * sudo.h: took outumoved some defines to the config file ,. ,.
19986:
19987: 1994-02-05 15:17 millert
19988:
19989: * PORTING: Initial revision
19990:
19991: 1994-02-05 15:17 millert
19992:
19993: * TODO: did #6
19994:
19995: 1994-02-05 15:16 millert
19996:
19997: * sudo.h: added HAS_SAVED_UID
19998:
19999: 1994-02-05 15:16 millert
20000:
20001: * sudo.c: put back AIX cruft
20002:
20003: 1994-02-03 00:44 millert
20004:
20005: * sudo.c: aix changes
20006:
20007: 1994-02-02 01:31 millert
20008:
20009: * CHANGES: updated
20010:
20011: 1994-02-02 01:30 millert
20012:
20013: * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
20014: when abs necesary
20015:
20016: 1994-02-01 22:21 millert
20017:
20018: * check.c: added missing %s\n
20019:
20020: 1994-01-31 02:06 millert
20021:
20022: * install-sh: Initial revision
20023:
20024: 1994-01-31 01:58 millert
20025:
20026: * CHANGES, TODO: updated
20027:
20028: 1994-01-31 01:56 millert
20029:
20030: * sudo.c: now removed _RLD_* for alphas
20031:
20032: 1994-01-31 01:50 millert
20033:
20034: * INSTALL: updated for new config scheme
20035:
20036: 1994-01-30 19:42 millert
20037:
20038: * find_path.c: more verbose eror messages
20039:
20040: 1994-01-27 14:08 millert
20041:
20042: * TODO: now have solaris
20043:
20044: 1994-01-27 14:07 millert
20045:
20046: * sudo.h: define __svr4__ for SOLARIS
20047:
20048: 1994-01-27 14:07 millert
20049:
20050: * check.c: added svr4 junk for shadow pws for solaris 2.x
20051:
20052: 1994-01-27 13:19 millert
20053:
20054: * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
20055: Its not needed since we start out setuid with the correct perms.
20056:
20057: 1994-01-26 19:51 millert
20058:
20059: * check.c, sudo.c, sudo.h: now use setreuid()
20060:
20061: 1994-01-26 18:58 millert
20062:
20063: * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
20064: VARIABLES sectoin
20065:
20066: 1994-01-26 18:52 millert
20067:
20068: * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
20069:
20070: 1994-01-26 18:52 millert
20071:
20072: * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
20073: >> .
20074:
20075: 1993-12-07 01:33 millert
20076:
20077: * README: minor update + spell fix
20078:
20079: 1993-12-07 01:33 millert
20080:
20081: * INSTALL: rewrote most of this
20082:
20083: 1993-12-07 01:13 millert
20084:
20085: * sudo.h: added all options that are in the Makefile
20086:
20087: 1993-12-07 00:23 millert
20088:
20089: * getpass.c: now use USE_TERMIO #define for sgi & hpux
20090:
20091: 1993-12-06 23:19 millert
20092:
20093: * TODO: todo: posix sigs
20094:
20095: 1993-12-06 01:12 millert
20096:
20097: * check.c, find_path.c: always include strings.h
20098:
20099: 1993-12-05 20:34 millert
20100:
20101: * visudo.c: added STATICEDITOR
20102:
20103: 1993-12-05 20:30 millert
20104:
20105: * sudo.h: sgi has vi in /usr/bin too
20106:
20107: 1993-12-05 20:23 millert
20108:
20109: * sudo.man: added VISUAL
20110:
20111: 1993-12-02 22:20 millert
20112:
20113: * sudo.h: sue /usr/bin/vi on some systems
20114:
20115: 1993-12-02 22:19 millert
20116:
20117: * sudo.c: fixed warning (include strings.h)
20118:
20119: 1993-12-02 22:06 millert
20120:
20121: * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
20122: features)
20123:
20124: 1993-12-02 21:38 millert
20125:
20126: * CHANGES: changes from John_Rouillard@dl5000.bc.edu
20127:
20128: 1993-12-02 21:35 millert
20129:
20130: * visudo.c: added EDITOR envar
20131:
20132: 1993-12-02 21:34 millert
20133:
20134: * check.c, find_path.c, parse.c, sudo.c: added patches from
20135: John_Rouillard directory spec uses EDITOR
20136:
20137: 1993-12-01 19:32 millert
20138:
20139: * getpass.c: added flush for hpux
20140:
20141: 1993-11-30 13:37 millert
20142:
20143: * sudo.c: no longer assume malloc returns a char *
20144:
20145: 1993-11-29 20:35 millert
20146:
20147: * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
20148: stuff -- now gets removed correctly
20149:
20150: 1993-11-29 19:31 millert
20151:
20152: * sudo.h: added STD_HEADERS macro
20153:
20154: 1993-11-29 19:14 millert
20155:
20156: * sudo.c: now uses STD_HEADERS macor for ansi
20157:
20158: 1993-11-29 19:14 millert
20159:
20160: * find_path.c: now uses STD_HEADERS macro
20161:
20162: 1993-11-29 19:13 millert
20163:
20164: * check.c: niceties for C compiler bitches -- no real change
20165:
20166: 1993-11-29 13:04 millert
20167:
20168: * visudo.c: now doesn't fclose a file never opened.
20169:
20170: 1993-11-28 16:35 millert
20171:
20172: * sudo.man: added visudo line
20173:
20174: 1993-11-28 16:31 millert
20175:
20176: * sudo.man: added error stuff added me in there...
20177:
20178: 1993-11-28 03:12 millert
20179:
20180: * CHANGES: noted insults
20181:
20182: 1993-11-28 03:01 millert
20183:
20184: * INSTALL: added blurb about reading stuff
20185:
20186: 1993-11-28 03:00 millert
20187:
20188: * sudo.h: added insults
20189:
20190: 1993-11-28 03:00 millert
20191:
20192: * insults.h: corrected somments and removed newlines
20193:
20194: 1993-11-28 03:00 millert
20195:
20196: * check.c: now uses insults
20197:
20198: 1993-11-28 02:45 millert
20199:
20200: * insults.h: Initial revision
20201:
20202: 1993-11-27 19:46 millert
20203:
20204: * INSTALL: added dec syslog note
20205:
20206: 1993-11-27 19:25 millert
20207:
20208: * sample.sudoers: added real stuff in there
20209:
20210: 1993-11-27 19:24 millert
20211:
20212: * TODO: added a todo
20213:
20214: 1993-11-27 19:10 millert
20215:
20216: * TODO: added one
20217:
20218: 1993-11-27 18:59 millert
20219:
20220: * sample.sudoers: Initial revision
20221:
20222: 1993-11-27 18:59 millert
20223:
20224: * sudo.man: updated with changes
20225:
20226: 1993-11-27 18:52 millert
20227:
20228: * sudo.man: Initial revision
20229:
20230: 1993-11-27 18:48 millert
20231:
20232: * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20233: revision
20234:
20235: 1993-11-27 18:46 millert
20236:
20237: * visudo.c: updated version number and took out jeff's old addr
20238: since it is no good
20239:
20240: 1993-11-27 18:42 millert
20241:
20242: * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20243: parse.yacc, sudo.c: updated version number and took out jeff's
20244: email (since it is invalid)
20245:
20246: 1993-10-28 09:36 millert
20247:
20248: * check.c: added fflush()
20249:
20250: 1993-10-22 20:46 millert
20251:
20252: * find_path.c: now return NULL instead pfof exiting for
20253: nopnn-fatal errors
20254:
20255: 1993-10-21 16:57 millert
20256:
20257: * check.c: new banner
20258:
20259: 1993-10-21 16:42 millert
20260:
20261: * parse.lex: now sudo.h gets included first
20262:
20263: 1993-10-17 20:31 millert
20264:
20265: * parse.lex: now can use flex
20266:
20267: 1993-10-17 20:31 millert
20268:
20269: * sudo.h: linux patch
20270:
20271: 1993-10-17 20:30 millert
20272:
20273: * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20274:
20275: 1993-10-17 20:30 millert
20276:
20277: * check.c: linux diff
20278:
20279: 1993-10-15 16:03 millert
20280:
20281: * find_path.c: stat now ignores EINVAL
20282:
20283: 1993-10-05 21:48 millert
20284:
20285: * find_path.c, sudo.c: now declare strdup as extern
20286:
20287: 1993-10-04 15:23 millert
20288:
20289: * visudo.c: reformatted with indent + by hand
20290:
20291: 1993-10-04 15:10 millert
20292:
20293: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20294: sudo.h: used indent to "fix" coding style
20295:
20296: 1993-10-03 20:12 millert
20297:
20298: * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20299: LAST should maybe move the code that does this into the loop
20300: body. makes it messier tho. hmmm.
20301:
20302: 1993-09-08 11:53 millert
20303:
20304: * find_path.c: redid the fix for non-executable files in an easier
20305: to read way plus some minor aethetic changes
20306:
20307: 1993-09-08 11:39 millert
20308:
20309: * find_path.c: fixed bug with non-executable tings of same name in
20310: path introduced by checkig errno after stat(2).
20311:
20312: 1993-09-05 10:02 millert
20313:
20314: * sudo.c: fixed off by one error
20315:
20316: 1993-09-05 09:55 millert
20317:
20318: * find_path.c: now handles decending below '/' correctly
20319:
20320: 1993-09-05 08:35 millert
20321:
20322: * sudo.c: now actually builds Envp instead of munging envp
20323:
20324: 1993-09-04 15:42 millert
20325:
20326: * parse.yacc: now includes sys/param.h
20327:
20328: 1993-09-04 15:41 millert
20329:
20330: * visudo.c: now includes sys/param.h
20331:
20332: 1993-09-04 15:30 millert
20333:
20334: * sudo.h: fixed ifndef -> ifdef
20335:
20336: 1993-09-04 15:19 millert
20337:
20338: * qualify.c: make more like find_path.c
20339:
20340: 1993-09-04 15:18 millert
20341:
20342: * find_path.c: rewritten by millert
20343:
20344: 1993-09-04 15:17 millert
20345:
20346: * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20347: added info about new defines in the comment
20348:
20349: 1993-09-04 15:15 millert
20350:
20351: * logging.c: now uses USE_CWD
20352:
20353: 1993-09-04 14:10 millert
20354:
20355: * sudo.h: added delc for clean_envp() and Envp
20356:
20357: 1993-09-04 14:09 millert
20358:
20359: * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20360: Envp to exec
20361:
20362: 1993-09-04 14:09 millert
20363:
20364: * logging.c: now uses execve()
20365:
20366: 1993-09-04 14:08 millert
20367:
20368: * find_path.c: ENOTDIR is ok now too (in case part of the path is
20369: bogus)
20370:
20371: 1993-09-04 08:17 millert
20372:
20373: * qualify.c: now works correctly (ttaltotal rewrite)
20374:
20375: 1993-09-04 07:59 millert
20376:
20377: * parse.lex: now includes sys/param.h didn't match trailing / --
20378: fix from rouilj@cs.umb.edu
20379:
20380: 1993-06-11 18:04 millert
20381:
20382: * sudo.c: moved around the #ifndef _AIX
20383:
20384: 1993-06-11 18:03 millert
20385:
20386: * check.c, logging.c, parse.c: Initial revision
20387:
20388: 1993-03-20 07:57 millert
20389:
20390: * qualify.c: Initial revision
20391:
20392: 1993-03-13 15:09 millert
20393:
20394: * find_path.c: now works if you do sudo bin/test
20395:
20396: 1993-03-13 14:20 millert
20397:
20398: * find_path.c: works
20399:
20400: 1993-03-02 18:28 millert
20401:
20402: * sudo.h: Initial revision
20403:
20404: 1993-03-02 11:35 millert
20405:
20406: * visudo.c: Initial revision
20407:
20408: 1993-03-02 11:32 millert
20409:
20410: * parse.lex, parse.yacc: Initial revision
20411:
20412: 1993-02-16 13:24 millert
20413:
20414: * sudo.c: took out errno.h
20415:
20416: 1993-02-16 13:22 millert
20417:
20418: * sudo.c: now spews error if exec fails and exits with -1
20419:
20420: 1993-02-16 12:07 millert
20421:
20422: * sudo.c: Initial revision
20423:
20424: 1993-02-15 22:27 millert
20425:
20426: * find_path.c: now only execs files with (an) executable bit set.
20427:
20428: 1993-02-15 22:01 millert
20429:
20430: * find_path.c: Initial revision
20431:
20432: 1993-02-15 14:32 millert
20433:
20434: * getpass.c: added nice comment
20435:
20436: 1993-02-15 14:19 millert
20437:
20438: * getpass.c: now works on sgi's
20439:
20440: 1993-02-15 13:57 millert
20441:
20442: * getpass.c: Initial revision
20443: