Annotation of src/usr.bin/sudo/ChangeLog, Revision 1.4
1.4 ! millert 1: 2009-04-10 16:59 millert
! 2:
! 3: * configure, configure.in: Fix a warning when --without-ldap is
! 4: specified.
! 5:
! 6: 2009-04-05 12:25 millert
! 7:
! 8: * alias.c, parse.h, visudo.c: Store aliases that we remove during
! 9: check_aliases in a freelist and free them at the end so we don't
! 10: leak memory.
! 11:
! 12: 2009-03-28 09:30 millert
! 13:
! 14: * visudo.c: Check aliases in -c mode too.
! 15:
! 16: 2009-03-28 09:09 millert
! 17:
! 18: * alias.c, parse.h, visudo.c: Make alias_remove return the alias
! 19: struct instead of freeing it directly. Fixes a use after free in
! 20: alias_remove_recursive, the only consumer.
! 21:
! 22: 2009-03-28 09:07 millert
! 23:
! 24: * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
! 25: -> alias_find for consistency.
! 26:
! 27: 2009-03-27 19:29 millert
! 28:
! 29: * visudo.c: When checking for unused aliases, recurse if the alias
! 30: points to another alias.
! 31:
! 32: 2009-03-16 12:11 millert
! 33:
! 34: * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
! 35: support will be done later after some refactoring.
! 36:
! 37: 2009-03-14 12:02 millert
! 38:
! 39: * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
! 40:
! 41: 2009-03-13 21:04 millert
! 42:
! 43: * configure, configure.in: Only check for
! 44: ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
! 45: compilation with ldapux.
! 46:
! 47: 2009-03-11 20:03 millert
! 48:
! 49: * fileops.c: fix char subscript
! 50:
! 51: 2009-03-11 19:19 millert
! 52:
! 53: * Makefile.in: remove errant carriage returns
! 54:
! 55: 2009-03-11 19:01 millert
! 56:
! 57: * audit.c, env.c: fix K&R compilation
! 58:
! 59: 2009-03-11 12:12 millert
! 60:
! 61: * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
! 62: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
! 63: regen
! 64:
! 65: 2009-03-10 17:34 millert
! 66:
! 67: * config.h.in: Add missing HAVE_BSM_AUDIT
! 68:
! 69: 2009-03-10 17:21 millert
! 70:
! 71: * WHATSNEW: Add 1.7.1 features
! 72:
! 73: 2009-03-10 17:10 millert
! 74:
! 75: * INSTALL: Mention --with-netsvc
! 76:
! 77: 2009-03-10 17:08 millert
! 78:
! 79: * sudoers.ldap.pod: Document netsvc.conf support
! 80:
! 81: 2009-03-10 16:44 millert
! 82:
! 83: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
! 84: sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
! 85:
! 86: 2009-03-08 16:57 millert
! 87:
! 88: * configure, config.h.in, configure.in, env.c: Add
! 89: --enable-env-debug flag to enable environment sanity checks.
! 90:
! 91: 2009-03-08 11:51 millert
! 92:
! 93: * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
! 94:
! 95: 2009-03-07 17:10 millert
! 96:
! 97: * env.c: Only sync environ for putenv, setenv, and unsetenv. We
! 98: need to make sure that sudo_putenv and sudo_setenv only modify
! 99: env.envp, not environ.
! 100:
! 101: 2009-03-02 14:19 millert
! 102:
! 103: * env.c: Really fix UNSETENV_VOID
! 104:
! 105: 2009-03-02 14:18 millert
! 106:
! 107: * env.c: Fix unsetenv when UNSETENV_VOID
! 108:
! 109: 2009-03-02 08:00 millert
! 110:
! 111: * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
! 112:
! 113: 2009-03-02 07:36 millert
! 114:
! 115: * ldap.c: tivoli-based ldap does not have ldapssl_err2string
! 116:
! 117: 2009-03-02 07:30 millert
! 118:
! 119: * configure: regen
! 120:
! 121: 2009-03-01 16:20 millert
! 122:
! 123: * config.h.in, configure, configure.in, ldap.c: Add support for
! 124: Tivoli-based LDAP start TLS as seen in AIX. Untested.
! 125:
! 126: 2009-03-01 08:52 millert
! 127:
! 128: * env.c: Add sanity checks for setenv/unsetenv
! 129:
! 130: 2009-02-28 20:17 millert
! 131:
! 132: * Makefile.in: Include bsm_audit.h in the tarball
! 133:
! 134: 2009-02-28 20:00 millert
! 135:
! 136: * Makefile.in, version.h: bump version for sudo 1.7.1
! 137:
! 138: 2009-02-28 19:58 millert
! 139:
! 140: * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
! 141: sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
! 142: calls to setenv/unsetenv and provide our own
! 143: setenv/unsetenv/putenv that operates on own env pointer. Make
! 144: sync_env() inline in setenv/unsetenv/putenv functions.
! 145:
! 146: 2009-02-25 07:33 millert
! 147:
! 148: * sudo.c: Make "sudoedit -h" work as expected
! 149:
! 150: 2009-02-25 07:21 millert
! 151:
! 152: * auth/pam.c: Make sure def_prompt is always defined. This is a
! 153: workaround for pam configs that prompt for a password in the
! 154: session but don't have an auth line. A better fix is to expand
! 155: the sudo prompt earlier and set def_prompt to that when
! 156: initializing.
! 157:
! 158: 2009-02-25 06:17 millert
! 159:
! 160: * sudo.pod: Mention that the helper for -A may be graphical.
! 161:
! 162: 2009-02-25 06:16 millert
! 163:
! 164: * TROUBLESHOOTING: Document what happens if there is no tty.
! 165:
! 166: 2009-02-25 06:05 millert
! 167:
! 168: * sudo.c: cosmetic changes
! 169:
! 170: 2009-02-25 05:47 millert
! 171:
! 172: * term.c: Fix term_restore
! 173:
! 174: 2009-02-24 20:23 millert
! 175:
! 176: * sudo.c: Fix "sudo -k" with no other args
! 177:
! 178: 2009-02-24 08:04 millert
! 179:
! 180: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
! 181: be specified in conjunction with a command or another option that
! 182: may require authentication.
! 183:
! 184: 2009-02-23 09:18 millert
! 185:
! 186: * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
! 187: from Diego E. 'Flameeyes'
! 188:
! 189: 2009-02-23 09:15 millert
! 190:
! 191: * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
! 192:
! 193: 2009-02-21 17:03 millert
! 194:
! 195: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
! 196: Implement umask_override
! 197:
! 198: 2009-02-21 16:51 millert
! 199:
! 200: * toke.c: regen
! 201:
! 202: 2009-02-21 16:49 millert
! 203:
! 204: * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
! 205: include filenames.
! 206:
! 207: 2009-02-21 08:43 millert
! 208:
! 209: * audit.c: Need to include compat.h
! 210:
! 211: 2009-02-21 08:37 millert
! 212:
! 213: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
! 214: sudo.c: Make audit_success and audit_failure generic functions in
! 215: preparation for integrating linux audit support.
! 216:
! 217: 2009-02-21 08:06 millert
! 218:
! 219: * term.c: remove duplicate include
! 220:
! 221: 2009-02-20 16:13 millert
! 222:
! 223: * bsm_audit.c: Add missing include
! 224:
! 225: 2009-02-20 15:55 millert
! 226:
! 227: * sudo.c: May need to update the runas user after parsing
! 228: command-based defaults.
! 229:
! 230: 2009-02-18 10:53 millert
! 231:
! 232: * glob.c: Add missing pair of braces introduced with character
! 233: class support.
! 234:
! 235: 2009-02-15 15:53 millert
! 236:
! 237: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
! 238: Rename pwstars to pwfeedback
! 239:
! 240: 2009-02-10 20:25 millert
! 241:
! 242: * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
! 243:
! 244: 2009-02-10 20:18 millert
! 245:
! 246: * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
! 247: sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
! 248: S.J. Peron
! 249:
! 250: 2009-02-10 19:58 millert
! 251:
! 252: * term.c: This is new code, no DARPA notice.
! 253:
! 254: 2009-02-10 14:04 millert
! 255:
! 256: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
! 257: simple_glob -> fast_glob
! 258:
! 259: 2009-02-10 09:39 millert
! 260:
! 261: * match.c: g/c unused var
! 262:
! 263: 2009-02-10 08:09 millert
! 264:
! 265: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
! 266: simple_glob option to use fnmatch() instead of glob(). This is
! 267: useful when you need to specify patterns that reference network
! 268: file systems.
! 269:
! 270: 2009-02-10 07:58 millert
! 271:
! 272: * tgetpass.c: add term_* proto
! 273:
! 274: 2009-02-10 07:51 millert
! 275:
! 276: * sudoers.pod: mention glob()
! 277:
! 278: 2009-02-09 07:59 millert
! 279:
! 280: * tgetpass.c: Delete any pwstars we wrote after the user hits
! 281: return. That way there is no record on screen as to the user's
! 282: password length.
! 283:
! 284: 2009-02-08 10:27 millert
! 285:
! 286: * term.c: Move terminal setting bits from tgetpass.c to term.c
! 287:
! 288: 2009-02-07 19:50 millert
! 289:
! 290: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
! 291: tgetpass.c: Add pwstars sudoers option that causes sudo to print
! 292: a star every time the user presses a key.
! 293:
! 294: 2009-02-03 10:10 millert
! 295:
! 296: * Makefile.in: Fix up F<> brokenness for visudo.man.in and
! 297: sudoers.ldap.man.in.
! 298:
! 299: 2009-01-27 11:54 millert
! 300:
! 301: * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
! 302: not -1, to indicate no limit. From Mark Janssen.
! 303:
! 304: 2009-01-17 17:36 millert
! 305:
! 306: * toke.c, toke.l: Comments that begin with #- should not be parsed
! 307: as uids.
! 308:
! 309: 2009-01-08 19:13 millert
! 310:
! 311: * sudo.c: Do not try to set the close on exec flag if we didn't
! 312: actually open sudoers.
! 313:
! 314: 2008-12-19 12:40 millert
! 315:
! 316: * ChangeLog: regen
! 317:
1.3 millert 318: 2008-12-14 17:40 millert
319:
320: * TODO: sync
321:
322: 2008-12-09 18:48 millert
323:
324: * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
325: enters ^C at the password prompt.
326:
327: 2008-12-09 16:13 millert
328:
329: * configure.in, configure: Don't try to build sudo_noexec.so on
330: HP-UX with the bundled compiler as it cannot generate shared
331: objects.
332:
333: 2008-12-09 15:55 millert
334:
335: * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
336: fixes
337:
338: 2008-12-09 08:49 millert
339:
340: * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
341: it clear that we are not short-circuiting on last match. When
342: pwcheck is 'all', initialize nopass to TRUE and override it with
343: the first non-TRUE entry.
344:
345: 2008-12-08 10:02 millert
346:
347: * parse.c: Do not short circuit pseudo commands when we get a match
348: since, depending on the settings, we may need to examine all
349: commands for tags.
350:
351: 2008-12-03 15:58 millert
352:
353: * sudoers.cat, sudoers.man.in: regen
354:
355: 2008-12-03 15:57 millert
356:
357: * sudoers.pod: hostnames may also contain wildcards
358:
359: 2008-12-03 15:40 millert
360:
361: * Makefile.in: remove stamp-* files and linux core files in clean
362: target
363:
364: 2008-12-02 12:30 millert
365:
366: * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
367: HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
368:
369: 2008-11-26 15:10 millert
370:
371: * configure, configure.in: correctly enable SIA on Digital UNIX
372:
373: 2008-11-25 20:06 millert
374:
375: * TODO: checkpoint
376:
377: 2008-11-25 20:05 millert
378:
379: * ChangeLog: sync
380:
381: 2008-11-25 12:01 millert
382:
383: * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
384: ttys we may still have /dev/tty available to us.
385:
386: 2008-11-24 10:09 millert
387:
388: * sudoers.cat, sudoers.man.in: regen
389:
390: 2008-11-24 10:08 millert
391:
392: * sudoers.pod: fix typos; Markus Lude
393:
394: 2008-11-24 07:08 millert
395:
396: * ChangeLog: sync
397:
1.2 millert 398: 2008-11-23 19:42 millert
399:
400: * toke.c: regen
401:
402: 2008-11-23 19:41 millert
403:
404: * toke.l: Fix matching of a line that only consists of a comment
405: char
406:
407: 2008-11-22 13:17 millert
408:
409: * auth/pam.c: MacOS pam will retry conversation function if it
410: fails so just treat ^C as an empty password.
411:
412: 2008-11-22 10:12 millert
413:
414: * visudo.c: When checking for alias use, also check defaults
415: bindings.
416:
417: 2008-11-22 10:01 millert
418:
419: * redblack.c: unused var
420:
421: 2008-11-22 09:42 millert
422:
423: * redblack.c: Replace my rbdelete with Emin's version (which
424: actually works ;-)
425:
426: 2008-11-19 12:01 millert
427:
428: * testsudoers.c: malloc debugging
429:
430: 2008-11-19 07:37 millert
431:
432: * visudo.c: malloc options in devel mode for visudo too
433:
434: 2008-11-18 10:57 millert
435:
436: * sudo.c: fix compilation on non-C99; from Theo
437:
438: 2008-11-18 10:50 millert
439:
440: * visudo.c: fix check_aliases
441:
442: 2008-11-18 08:29 millert
443:
444: * alias.c: when destroying an alias, free the correct data pointer
445:
446: 2008-11-18 07:54 millert
447:
448: * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
449:
450: 2008-11-15 13:34 millert
451:
452: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
453: visudo.man.in: regen
454:
455: 2008-11-15 13:34 millert
456:
457: * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
458: 'option' for command line options (not flag)
459:
460: 2008-11-14 06:18 millert
461:
462: * INSTALL: Add note on configuring HP-UX pam
463:
464: 2008-11-11 13:28 millert
465:
466: * check.c, sudo.c: Move tty checks into check_user() so we only do
467: them if we actually need a password.
468:
469: 2008-11-11 12:34 millert
470:
471: * sudo.c: Don't error out if no tty or askpass unless we actually
472: need to authenticate.
473:
474: 2008-11-10 15:20 millert
475:
476: * ChangeLog: regen
477:
1.1 millert 478: 2008-11-10 08:07 millert
479:
480: * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
481: Stoeckmann
482:
483: 2008-11-09 15:18 millert
484:
485: * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
486:
487: 2008-11-09 09:15 millert
488:
489: * gram.c, toke.c: regen
490:
491: 2008-11-09 09:13 millert
492:
493: * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
494: env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
495: interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
496: logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
497: redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
498: sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
499: version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
500: visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
501: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
502: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
503: sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
504: years.
505:
506: 2008-11-09 08:48 millert
507:
508: * fnmatch.c, glob.c, emul/charclass.h: add my copyright
509:
510: 2008-11-08 10:40 millert
511:
512: * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
513: far past the end, resulting in a NUL being written immediately
514: after the buffer end.
515:
516: 2008-11-08 10:31 millert
517:
518: * UPGRADE, WHATSNEW: add sections on tgetpass changes
519:
520: 2008-11-08 10:30 millert
521:
522: * tgetpass.c: Treat EOF w/o newline as an error.
523:
524: 2008-11-07 17:42 millert
525:
526: * parse.c: Fix "sudo -v" when NOPASSWD is set.
527:
528: 2008-11-07 12:45 millert
529:
530: * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
531: longer treat an empty password at the prompt as special. To quit
532: out of sudo you now need to hit ^C at the password prompt.
533:
534: 2008-11-06 21:07 millert
535:
536: * sudoers.cat, sudoers.man.in: regen
537:
538: 2008-11-06 21:06 millert
539:
540: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
541: will now refuse to run if no tty is present unless the new
542: visiblepw sudoers flag is set.
543:
544: 2008-11-05 19:42 millert
545:
546: * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
547: RLIM_SAVED_MAX not defined
548:
549: 2008-11-05 19:40 millert
550:
551: * aix.c: fix fallback value for RLIM_SAVED_MAX
552:
553: 2008-11-05 19:14 millert
554:
555: * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
556: aixauth_cleanup.
557:
558: 2008-11-05 19:08 millert
559:
560: * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
561: authenticate() as it may not be correct for the user we are
562: running the command as.
563:
564: 2008-11-05 19:05 millert
565:
566: * isblank.c: Add isblank() function for systems without it. Needed
567: for POSIX character class matching in fnmatch.c and glob.c.
568:
569: 2008-11-05 11:02 millert
570:
571: * TROUBLESHOOTING: expound on sudo and cd
572:
573: 2008-11-04 15:52 millert
574:
575: * ChangeLog: regen
576:
577: 2008-11-04 15:46 millert
578:
579: * sudoers.cat, sudoers.man.in: regen
580:
581: 2008-11-04 15:45 millert
582:
583: * sudoers.pod: mention defauts parse order
584:
585: 2008-11-03 13:19 millert
586:
587: * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
588: function for systems without it. Needed for POSIX character
589: class matching in fnmatch.c and glob.c.
590:
591: 2008-11-03 12:54 millert
592:
593: * Makefile.in: add emul/charclass.h to HDRS
594:
595: 2008-11-02 14:08 millert
596:
597: * TODO: checkpoint
598:
599: 2008-11-02 14:06 millert
600:
601: * parse.c, defaults.c, testsudoers.c, visudo.c: Move
602: update_defaults into defaults.c and call it properly from visudo
603: and testsudoers.
604:
605: 2008-11-02 09:51 millert
606:
607: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
608: tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
609: consistency
610:
611: 2008-11-02 09:45 millert
612:
613: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
614: tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
615: has non-standard entries.
616:
617: 2008-11-02 09:35 millert
618:
619: * match.c: quiet gcc
620:
621: 2008-11-02 09:28 millert
622:
623: * match.c: Short circuit glob() checks if basename(pattern) !=
624: basename(command). Refactor code that checks for a command in a
625: directory and use it in the glob case if the resolved pattern
626: ends in a '/'.
627:
628: 2008-11-01 09:20 millert
629:
630: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
631: setting runas defaults until after runaspw/gr is setup.
632:
633: 2008-10-29 13:26 millert
634:
635: * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
636: allocating host/domain name since some systems do not include
637: space for the NUL in the size. Also manually NUL-terminate
638: buffer from gethostname() since POSIX is wishy-washy on this.
639:
640: 2008-10-26 17:13 millert
641:
642: * sudo.c, sudoers.pod: When setting the umask, use the union of the
643: user's umask and the default value set in sudoers so that we
644: never lower the user's umask when running a command.
645:
646: 2008-10-26 16:43 millert
647:
648: * sudo.c: Don't try to read from a zero-length sudoers file.
649: Remove the bogus Solaris work-around for EAGAIN. Since we now
650: use fgetc() it should not be a problem.
651:
652: 2008-10-25 09:22 millert
653:
654: * parse.c: In update_defaults() check the return value of
655: user*_matches against ALLOW so we don't inadvertantly match on
656: UNSPEC.
657:
658: 2008-10-24 09:52 millert
659:
660: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
661: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
662: regen man pages; no more hyphenation
663:
664: 2008-10-24 09:49 millert
665:
666: * sudo.c: Don't error out on a zero-length sudoers file. With the
667: advent of #include the user could create a situation where sudo
668: is unusable.
669:
670: 2008-10-23 12:06 millert
671:
672: * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
673: has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
674: Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
675: Add configure tests to handle all the cases.
676:
677: 2008-10-08 17:28 millert
678:
679: * sudo.pod: resort ENVIRONMENT
680:
681: 2008-10-08 17:09 millert
682:
683: * sudoers.pod: document sudoers_locale
684:
685: 2008-10-08 16:56 millert
686:
687: * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
688: uses in preference to VISUAL or EDITOR
689:
690: 2008-10-08 14:27 millert
691:
692: * toke.c, toke.l: In fill_cmnd(), collapse any escaped
693: sudo-specific characters. Allows character classes to be used in
694: pathnames.
695:
696: 2008-10-03 16:02 millert
697:
698: * lbuf.c: fix typo in non-C89 function declaration
699:
700: 2008-10-03 15:56 millert
701:
702: * sudoers.pod: Mention POSIX characters classes now that out
703: fnmatch() and glob() support them.
704:
705: 2008-10-03 15:55 millert
706:
707: * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
708: UTF8) with [A-Za-z] which is locale agnostic.
709:
710: 2008-10-03 10:02 millert
711:
712: * parse.h: use __signed char if we are going to assign a negative
713: value since on Power, char is unsigned by default
714:
715: 2008-10-03 09:59 millert
716:
717: * configure, configure.in, config.h.in: Add tests for __signed char
718: and signed char.
719:
720: 2008-10-03 09:19 millert
721:
722: * aix.c: Fix AIX limit setting. getuserattr() returns values in
723: disk blocks rather than bytes. The default hard stack size in
724: newer AIX is RLIM_SAVED_MAX. From Dale King.
725:
726: 2008-09-26 17:13 millert
727:
728: * fnmatch.c, glob.c, emul/charclass.h: Add character class support
729: to included glob(3) and fnmatch(3).
730:
731: 2008-09-16 08:28 millert
732:
733: * emul/fnmatch.h: Remove UCB advertising clause and some
734: compatibility defines.
735:
736: 2008-09-14 16:07 millert
737:
738: * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
739: re-invoking itself or sudo. This allows one to set EDITOR to
740: sudoedit without getting into an infinite loop of sudoedit
741: running itself until the path gets too big.
742:
743: 2008-09-13 20:45 millert
744:
745: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
746: sudoers_locale Defaults option to override the default sudoers
747: locale of "C".
748:
749: 2008-09-13 14:09 millert
750:
751: * sudo.c: Set locale to system default except for during sudoers
752: parse.
753:
754: 2008-09-12 09:34 millert
755:
756: * match.c: Redo change in 1.34 to use pointer arithmetic.
757:
758: 2008-09-11 07:06 millert
759:
760: * match.c: Fix a dereference (read) of a freed pointer. Reported
761: by Patrick Williams.
762:
763: 2008-08-23 19:09 millert
764:
765: * sudo.c: Set locale to "C" to avoid interpretation issues with
766: character ranges in sudoers. May want to make the locale a
767: sudoers option in the future.
768:
769: 2008-08-20 07:45 millert
770:
771: * config.h.in: we no longer use setproctitle
772:
773: 2008-08-20 07:41 millert
774:
775: * sudo.h: remove #if 1
776:
777: 2008-08-20 07:40 millert
778:
779: * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
780: package.
781:
782: 2008-07-12 08:53 millert
783:
784: * gram.c: regen with yacc skeleton bug fixed
785:
786: 2008-07-12 08:48 millert
787:
788: * sudoers.pod: Remove duplicate "as root". From Martin Toft.
789:
790: 2008-07-02 06:27 millert
791:
792: * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
793: passwd entry used for running commands as a uid not listed in the
794: passwd database. Fixes an issue with some PAM modules.
795:
796: 2008-07-01 07:57 millert
797:
798: * sudo.c: Error out in -i mode if the user has no shell. This can
799: happen when running commands as a uid with no password entry.
800:
801: 2008-06-26 07:49 millert
802:
803: * toke.c, toke.l: Better fix for line continuation inside double
804: quotes. Now accepts whitespace between the backslash and the
805: newline like the main lexer.
806:
807: 2008-06-25 14:31 millert
808:
809: * toke.c, toke.l: Fix line continuation in strings. It was only
810: being honored if preceded by whitespace.
811:
812: 2008-06-22 16:19 millert
813:
814: * config.h.in, configure, configure.in, logging.c: Replace the
815: double fork with a fork + daemonize.
816:
817: 2008-06-21 14:59 millert
818:
819: * env.c, sudo.c: The -i flag should imply env_reset. This got
820: broken in sudo 1.6.9.
821:
822: 2008-06-20 20:34 millert
823:
824: * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
825: is waited for. Instead of having a SIGCHLD handler, use the
826: double fork trick to orphan the child that opens the pipe to
827: sendmail. Fixes a problem running su on some Linux distros.
828:
829: 2008-06-20 17:16 millert
830:
831: * configure, configure.in: Fix configure test for dirfd() on Linux
832: where DIR is opaque.
833:
834: 2008-06-17 17:42 millert
835:
836: * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
837: QNX still has this problem we'll need to revisit this again.
838:
839: 2008-06-10 21:13 millert
840:
841: * logging.c: Ignore SIGPIPE instead of blocking it when piping to
842: the mailer. If we only block the signal it may be delivered
843: later when we unblock. Also, there is no need to block SIGCHLD
844: since we no longer do the double fork. The normal SIGCHLD
845: handler is sufficient.
846:
847: 2008-06-08 17:37 millert
848:
849: * configure, configure.in: Add description for NO_PAM_SESSION, from
850: a redhat patch.
851:
852: 2008-06-06 09:36 millert
853:
854: * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
855:
856: 2008-05-18 13:54 millert
857:
858: * configure, configure.in: Redo the test for dgettext() in a way
859: that hopefully will work around the libintl_dgettext() undefined
860: problem.
861:
862: 2008-05-11 09:21 millert
863:
864: * schema.ActiveDirectory: change filename in comment
865:
866: 2008-05-10 09:18 millert
867:
868: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
869: sudoers.ldap.pod: Reference schema.ActiveDirectory
870:
871: 2008-05-09 14:49 millert
872:
873: * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
874:
875: 2008-05-09 14:48 millert
876:
877: * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
878:
879: 2008-05-09 14:01 millert
880:
881: * schema.ActiveDirectory: Active Directory schema by Chantal
882: Paradis and Eric Paquet
883:
884: 2008-05-08 17:54 millert
885:
886: * parse.c: remove an XXX that was fixed
887:
888: 2008-05-08 12:53 millert
889:
890: * ChangeLog: sync
891:
892: 2008-05-08 12:49 millert
893:
894: * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
895: mode. This fixes a problem where the tag value printed was
896: influenced by defaults set in the first pass through the parser.
897:
898: 2008-05-03 21:29 millert
899:
900: * Makefile.in, sudo.psf: No point in packaging the TODO file
901:
902: 2008-05-03 21:24 millert
903:
904: * ChangeLog: sync
905:
906: 2008-05-02 20:53 millert
907:
908: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
909: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
910: Defaults option that is similar to /etc/environment on some
911: systems.
912:
913: 2008-05-02 16:38 millert
914:
915: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
916: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
917: sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
918: version to 1.7.0
919:
920: 2008-05-02 16:37 millert
921:
922: * UPGRADE: initial valgrind pass done
923:
924: 2008-04-23 08:30 millert
925:
926: * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
927: the secret.
928:
929: 2008-04-11 10:03 millert
930:
931: * ldap.c: define LDAPS_PORT if the system headers do not
932:
933: 2008-04-10 14:54 millert
934:
935: * gram.c, gram.y: Fix another memory leak in init_parser().
936:
937: 2008-04-10 12:51 millert
938:
939: * configure, configure.in: There was a missing space before the
940: ldap libs in SUDO_LIBS for some configurations.
941:
942: 2008-04-10 11:28 millert
943:
944: * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
945: leaks pointed out by valgrind.
946:
947: 2008-04-07 14:39 millert
948:
949: * sudo.c: fix "sudo -s" broken by mode/flags breakout
950:
951: 2008-04-07 14:26 millert
952:
953: * configure, configure.in: remove duplicate check for dgettext
954:
955: 2008-04-05 15:54 millert
956:
957: * aix.c: Fall back to default stanza if no user-specific limit is
958: found.
959:
960: 2008-04-02 15:56 millert
961:
962: * snprintf.c: include stdint.h if present
963:
964: 2008-04-02 15:28 millert
965:
966: * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
967:
968: 2008-04-01 19:18 millert
969:
970: * sudoers.ldap.pod: fix cut and pasto
971:
972: 2008-03-31 11:24 millert
973:
974: * pwutil.c: Add #ifdef PURITY
975:
976: 2008-03-30 17:36 millert
977:
978: * auth/bsdauth.c: remove useless cast
979:
980: 2008-03-27 19:07 millert
981:
982: * ChangeLog: sync
983:
984: 2008-03-27 19:04 millert
985:
986: * TODO: sync
987:
988: 2008-03-27 19:01 millert
989:
990: * sudo.h: Split MODE_* defines into primary and flags.
991:
992: 2008-03-26 13:11 millert
993:
994: * aix.c: It turns out the logic for getting AIX limits is more
995: convoluted than I realized and differs depending on whether the
996: soft and/or hard limits are defined.
997:
998: 2008-03-23 10:18 millert
999:
1000: * Makefile.in, configure, configure.in: Back out AIX-specific
1001: change to set the sudo_noexec path to the .a file, we do really
1002: want to use the .so file. Since libtool doesn't do that
1003: correctly, just install the .so file ourselves in the Makefile.
1004:
1005: 2008-03-23 10:12 millert
1006:
1007: * install-sh: If the file given to install is a path, only use the
1008: basename of the file when building the destination path.
1009:
1010: 2008-03-18 16:08 millert
1011:
1012: * sudo.c: parse_args() cleanup: Sort command line options in the
1013: getopt() switch The -U option requires a parameter Normalize a
1014: few ISSET calls Split mode into mode and flags and retire the
1015: now-obsolete excl variable
1016:
1017: 2008-03-18 16:04 millert
1018:
1019: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1020: sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1021:
1022: 2008-03-18 15:59 millert
1023:
1024: * sudo.c: Move version printing, etc. into a separate function.
1025:
1026: 2008-03-18 15:57 millert
1027:
1028: * sudo.c: Don't try to cleanup nsswitch if it has not been
1029: initialized.
1030:
1031: 2008-03-17 11:09 millert
1032:
1033: * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1034: a problem executing the mailer.
1035:
1036: 2008-03-14 08:11 millert
1037:
1038: * configure.in, configure: AIX shared libs end in .a, not .so.
1039:
1040: 2008-03-13 07:34 millert
1041:
1042: * env.c: Preserve HOME by default too. Matches documentation and
1043: previous behavior.
1044:
1045: 2008-03-12 19:42 millert
1046:
1047: * sudo.c: Use getopt() to parse the command line. We need to be
1048: able to intersperse env variables and options yet still honor
1049: "--"" which complicates things slightly.
1050:
1051: 2008-03-06 14:46 millert
1052:
1053: * ChangeLog: sync
1054:
1055: 2008-03-06 14:43 millert
1056:
1057: * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1058:
1059: 2008-03-06 14:32 millert
1060:
1061: * config.guess, config.sub: update from libtool-1.5.26 distribution
1062:
1063: 2008-03-06 13:18 millert
1064:
1065: * aix.c, sudo.h: attempt to fix compilation errors on AIX
1066:
1067: 2008-03-06 13:08 millert
1068:
1069: * Makefile.in: fix typo in last commit
1070:
1071: 2008-03-06 13:07 millert
1072:
1073: * Makefile.in: Add WHATSNEW file to the distribution
1074:
1075: 2008-03-06 12:43 millert
1076:
1077: * visudo.c: use warningx instead of fprintf(stderr, ...)
1078:
1079: 2008-03-06 12:31 millert
1080:
1081: * list.c: add DEBUG to list2tq
1082:
1083: 2008-03-06 12:28 millert
1084:
1085: * ChangeLog, TODO: sync
1086:
1087: 2008-03-06 12:21 millert
1088:
1089: * WHATSNEW: mention mailfrom
1090:
1091: 2008-03-06 12:19 millert
1092:
1093: * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1094: sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1095: using a combination of getuserattr() and setrlimit(). Currently
1096: untested.
1097:
1098: 2008-03-05 16:52 millert
1099:
1100: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1101: sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1102: sets the value of the From: field in the warning/error mail. If
1103: unset the login name of the invoking user is used.
1104:
1105: 2008-03-05 16:18 millert
1106:
1107: * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1108: that is freeable
1109:
1110: 2008-03-05 15:19 millert
1111:
1112: * gram.c, gram.y: When adding a default, only call list2tq() once
1113: to do the list to tq conversion. It is not legal to call list2tq
1114: multiple times on the same list since list2tq consumes and
1115: modifies the list argument.
1116:
1117: 2008-03-05 09:38 millert
1118:
1119: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1120: out XXXs for now
1121:
1122: 2008-03-05 09:36 millert
1123:
1124: * WHATSNEW: mention askpass
1125:
1126: 2008-03-04 17:20 millert
1127:
1128: * sudo.c: Error out if both -A and -S are specified Error out if -A
1129: is specified but no askpass is configured
1130:
1131: 2008-03-04 17:16 millert
1132:
1133: * configure, configure.in: we are not going to ship a sudo-specific
1134: askpass
1135:
1136: 2008-03-03 14:30 millert
1137:
1138: * sudo.h: fix definition of TGP_ASKPASS
1139:
1140: 2008-03-03 13:54 millert
1141:
1142: * def_data.c, def_data.in: make askpass boolean-capable
1143:
1144: 2008-03-03 13:53 millert
1145:
1146: * INSTALL: document --with-askpass
1147:
1148: 2008-03-02 19:27 millert
1149:
1150: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1151: sudoers.ldap.cat, visudo.cat: regen
1152:
1153: 2008-03-02 17:31 millert
1154:
1155: * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1156:
1157: 2008-03-02 09:31 millert
1158:
1159: * check.c, configure, configure.in, def_data.c, def_data.h,
1160: def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1161: sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1162: running a helper program to read the password when no tty is
1163: present (or when specified with the -A flag). TODO: docs.
1164:
1165: 2008-03-02 08:38 millert
1166:
1167: * def_data.c, def_data.in: add missing printf format to SELinux
1168: role and type strings
1169:
1170: 2008-02-27 09:26 millert
1171:
1172: * INSTALL, configure, configure.in: Disable use of
1173: gss_krb5_ccache_name() by default and add
1174: --enable-gss-krb5-ccache-name configure option to enable it. It
1175: seems that gss_krb5_ccache_name() doesn't work properly with some
1176: combinations of Heimdal and OpenLDAP.
1177:
1178: 2008-02-22 15:33 millert
1179:
1180: * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1181: add a call to setkeycreatecon() (though this is probably
1182: insufficient). From Dan Walsh.
1183:
1184: 2008-02-22 15:19 millert
1185:
1186: * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1187: conversation function may be called for non-password reading
1188: purposes so we must be careful not to use def_prompt in cases
1189: where it may not be set.
1190:
1191: 2008-02-20 12:00 millert
1192:
1193: * selinux.c: Don't free the new tty context, we need to keep it
1194: around when we restore the tty context after the command
1195: completes
1196:
1197: 2008-02-19 16:04 millert
1198:
1199: * selinux.c: s/newrole/sudo/
1200:
1201: 2008-02-19 13:21 millert
1202:
1203: * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1204: if we have login.conf support
1205:
1206: 2008-02-18 11:05 millert
1207:
1208: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1209: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1210: regen
1211:
1212: 2008-02-18 10:53 millert
1213:
1214: * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1215: sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1216: lines partaining to login.conf, BSD auth and SELinux and only
1217: enable them if pertinent.
1218:
1219: 2008-02-18 10:42 millert
1220:
1221: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1222: Remove the =cut on the first line (above the copyright notice) to
1223: quiet pod2man. Also remove the hackery in the FILES section and
1224: just deal with the fact that there will a newline between each
1225: pathname.
1226:
1227: 2008-02-17 08:19 millert
1228:
1229: * Makefile.in: run sudo.man.pl when generating sudo.man.in
1230:
1231: 2008-02-17 08:11 millert
1232:
1233: * configure, configure.in, sudo.man.pl: comment out SELinux manual
1234: bits unless --with-selinux was specified
1235:
1236: 2008-02-17 08:04 millert
1237:
1238: * sudoers.pod: document role and type defaults for SELinux
1239:
1240: 2008-02-16 20:26 millert
1241:
1242: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1243: Document "sudo -ll" and make "sudo -l -l" be equivalent.
1244:
1245: 2008-02-15 15:23 millert
1246:
1247: * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1248: Fixes compilation problems on Debian GNU/kFreeBSD.
1249:
1250: 2008-02-13 17:17 millert
1251:
1252: * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1253: rewrite of verify_krb_v5_tgt()
1254:
1255: 2008-02-13 07:28 millert
1256:
1257: * logging.c, logging.h, sudo.c: Remove dependence on
1258: VALIDATE_NOT_OK in logging functions. Split log_auth() into
1259: log_allowed() and log_denial() Replace mail_auth() with
1260: should_mail() and a call to send_mail()
1261:
1262: 2008-02-10 18:06 millert
1263:
1264: * ldap.c: Add debugging so we can tell if the krb5 ccache is
1265: accessible
1266:
1267: 2008-02-10 17:34 millert
1268:
1269: * INSTALL: mention --with-selinux
1270:
1271: 2008-02-09 09:48 millert
1272:
1273: * configure: regen
1274:
1275: 2008-02-09 09:43 millert
1276:
1277: * selinux.c: add Sudo tag
1278:
1279: 2008-02-09 09:30 millert
1280:
1281: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1282: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1283: pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1284: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1285: sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1286: toke.l: Add support for SELinux RBAC. Sudoers entries may
1287: specify a role and type. There are also role and type defaults
1288: that may be used. To make sure a transition occurs, when using
1289: RBAC commands are executed via the new sesh binary. Based on
1290: initial changes from Dan Walsh.
1291:
1292: 2008-02-08 08:18 millert
1293:
1294: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1295: list (sudo -ll) support for printing verbose LDAP and sudoers
1296: file entries. Still need to update manual.
1297:
1298: 2008-02-03 10:43 millert
1299:
1300: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1301: output for file and ldap based sudoers and use lbufs for both.
1302: The ldap output does not currently include options that cannot be
1303: represented as tags. This will be remedied in a long list output
1304: mode to come.
1305:
1306: 2008-01-27 16:37 millert
1307:
1308: * set_perms.c: Use a specific error message for errno == EAGAIN
1309: when setuid() et al fails. On Linux systems setuid() will fail
1310: with errno set to EAGAIN if changing to the new uid would result
1311: in a resource limit violation.
1312:
1313: 2008-01-27 16:34 millert
1314:
1315: * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1316: family of syscalls causes the nroc resource limit to be checked.
1317: The limits will be reset by pam_limits.so when PAM is used. In
1318: the non-PAM case the nproc limit will remain unlimited but there
1319: doesn't seem to be a way around that other than having sudo parse
1320: /etc/security/limits.conf directly.
1321:
1322: 2008-01-27 16:31 millert
1323:
1324: * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1325: AIX
1326:
1327: 2008-01-23 06:33 millert
1328:
1329: * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1330: AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1331: from going into config.h. Avoid single quotes in variable
1332: expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1333: of bash they will end up literally in the resulting define.
1334:
1335: 2008-01-21 13:22 millert
1336:
1337: * README.LDAP: mention --with-nsswitch=no
1338:
1339: 2008-01-21 11:43 millert
1340:
1341: * configure, configure.in: ldap_ssl.h depends on ldap.h being
1342: included first
1343:
1344: 2008-01-21 11:07 millert
1345:
1346: * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1347: if we can find it. Needed for the ldapssl_set_strength defines
1348: on HP-UX at least.
1349:
1350: 2008-01-21 10:02 millert
1351:
1352: * TODO, sudoers.ldap.pod: sync
1353:
1354: 2008-01-21 10:01 millert
1355:
1356: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1357: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1358: regen
1359:
1360: 2008-01-21 10:00 millert
1361:
1362: * Makefile.in: Use 78n line length when formatting cat pages.
1363:
1364: 2008-01-21 09:50 millert
1365:
1366: * README.LDAP: Remove redundant info that is now in
1367: sudoers.ldap.pod
1368:
1369: 2008-01-20 16:18 millert
1370:
1371: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1372: Reorganize the first section a bit. Substitute the proper path
1373: for /etc/sudoers.
1374:
1375: 2008-01-20 10:17 millert
1376:
1377: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1378: Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1379: Move schema into EXAMPLES
1380:
1381: 2008-01-20 10:15 millert
1382:
1383: * configure.in, configure: Substitute values for ldap.conf,
1384: ldap.secret and nsswitch.conf into sudoers.ldap.man.
1385:
1386: 2008-01-19 20:35 millert
1387:
1388: * configure, configure.in: substitute for sudoers.ldap.man
1389:
1390: 2008-01-19 20:34 millert
1391:
1392: * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1393: man page.
1394:
1395: 2008-01-19 20:25 millert
1396:
1397: * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1398: some of the missing pieces. Still needs some reorganization and
1399: editing.
1400:
1401: 2008-01-19 15:06 millert
1402:
1403: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1404: sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1405: Currently, much of the information is adapted from README.LDAP.
1406:
1407: 2008-01-18 17:32 millert
1408:
1409: * pwutil.c: When copying gr_mem we must guarantee that the storage
1410: space for gr_mem is properly aligned. The simplest way to do
1411: this is to simply store gr_mem directly after struct group. This
1412: is not a problem for gr_passwd or gr_name as they are simple
1413: strings.
1414:
1415: 2008-01-18 16:47 millert
1416:
1417: * ldap.c: Fix a typo/thinko in one of the calls to
1418: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1419:
1420: 2008-01-17 15:44 millert
1421:
1422: * config.h.in, configure, configure.in, ldap.c: include
1423: <mps/ldap_ssl.h> in ldap.c if available
1424:
1425: 2008-01-16 18:20 millert
1426:
1427: * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1428: skeleton.c
1429:
1430: 2008-01-16 13:03 millert
1431:
1432: * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1433: echo) to guarantee that any pending output is discarded
1434:
1435: 2008-01-15 17:18 millert
1436:
1437: * sudoers: no longer need to specify SETENV when user has sudo ALL
1438:
1439: 2008-01-15 09:40 millert
1440:
1441: * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1442: group option, renaming old -g to -G Add set_runasgr() and
1443: set_runaspw() and use them
1444:
1445: 2008-01-15 09:23 millert
1446:
1447: * sudo.h, sudo.c: Make set_runaspw static void
1448:
1449: 2008-01-15 09:17 millert
1450:
1451: * testsudoers.c, visudo.c: g/c set_runaspw stub
1452:
1453: 2008-01-15 07:28 millert
1454:
1455: * configure, configure.in: Don't add -llber twice.
1456:
1457: 2008-01-14 06:40 millert
1458:
1459: * ldap.c: fix typo
1460:
1461: 2008-01-13 15:39 millert
1462:
1463: * gram.c: regen
1464:
1465: 2008-01-13 14:57 millert
1466:
1467: * configure, configure.in: Fix check that determines whether -llber
1468: is required.
1469:
1470: 2008-01-13 14:22 millert
1471:
1472: * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1473: netscape-based LDAP, use ldapssl_set_strength() to implement the
1474: checkpeer ldap.conf option.
1475:
1476: 2008-01-13 09:49 millert
1477:
1478: * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1479: to use the cred cache, which is what krb5_verify_user() does.
1480: Better cleanup on failure.
1481:
1482: 2008-01-12 12:40 millert
1483:
1484: * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1485: krb5_verify_user() does.
1486:
1487: 2008-01-09 14:58 millert
1488:
1489: * gram.c: The U suffix on constants is an ANSI feature
1490:
1491: 2008-01-09 12:08 millert
1492:
1493: * configure.in, configure: Add check for ber_set_option() in -llber
1494:
1495: 2008-01-06 19:02 millert
1496:
1497: * README.LDAP: default if no nsswitch.conf is files only
1498:
1499: 2008-01-06 17:28 millert
1500:
1501: * README.LDAP: don't tell people to mail aaron about LDAP stuff
1502:
1503: 2008-01-06 12:32 millert
1504:
1505: * README.LDAP: timelimit and bind_timelimit
1506:
1507: 2008-01-06 08:54 millert
1508:
1509: * ChangeLog: sync
1510:
1511: 2008-01-06 07:56 millert
1512:
1513: * ldap.c: Move ldap.secret reading into a separate function.
1514:
1515: 2008-01-05 19:09 millert
1516:
1517: * check.c: user_runas -> runas_pw
1518:
1519: 2008-01-05 18:59 millert
1520:
1521: * TODO: sync
1522:
1523: 2008-01-05 18:59 millert
1524:
1525: * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1526: the password prompt. Based on a patch from Patrick Schoenfeld.
1527:
1528: 2008-01-05 18:25 millert
1529:
1530: * ldap.c: Check strlcpy() return values.
1531:
1532: 2008-01-05 18:12 millert
1533:
1534: * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1535:
1536: 2008-01-05 16:35 millert
1537:
1538: * README.LDAP: Make it clear that host and uri can take multiple
1539: parameters. URI is now supported for more than just openldap
1540: nsswitch.conf does't accept "compat"
1541:
1542: 2008-01-05 16:27 millert
1543:
1544: * sudo.c: comment cleanup and update (c) year
1545:
1546: 2008-01-05 16:25 millert
1547:
1548: * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1549: parse.c to sudo_nss.c. This should make it possible to build an
1550: LDAP-only sudo binary.
1551:
1552: 2008-01-05 13:27 millert
1553:
1554: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1555: multiple sudoers sources by passing in the previous return value
1556: to the next in the chain
1557:
1558: 2008-01-05 13:26 millert
1559:
1560: * gram.y: Free up parser data structures in sudo_file_close().
1561:
1562: 2008-01-05 08:13 millert
1563:
1564: * gram.c, parse.c: Free up parser data structures in
1565: sudo_file_close().
1566:
1567: 2008-01-05 07:59 millert
1568:
1569: * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1570: ldap_create() instead of deprecated ldap_init() Use
1571: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1572:
1573: 2008-01-05 07:56 millert
1574:
1575: * config.h.in, configure, configure.in: Add check for
1576: ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1577:
1578: 2008-01-04 09:56 millert
1579:
1580: * configure.in, configure, config.h.in: add check for ldap_create
1581:
1582: 2008-01-03 16:11 millert
1583:
1584: * config.h.in, configure, configure.in, ldap.c: Add
1585: sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1586: dn using the mechanism appropriate for the LDAP SDK in use. Use
1587: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1588: Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1589: without them.
1590:
1591: 2008-01-03 16:02 millert
1592:
1593: * lbuf.c: include unistd.h
1594:
1595: 2008-01-03 11:05 millert
1596:
1597: * config.h.in, configure.in: fix typo in mtim_getnsec
1598:
1599: 2008-01-02 15:29 millert
1600:
1601: * config.h.in, configure.in, configure: add check for st__tim in
1602: struct stat as used by SCO
1603:
1604: 2008-01-02 11:05 millert
1605:
1606: * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1607:
1608: 2008-01-02 10:09 millert
1609:
1610: * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1611:
1612: 2008-01-01 19:04 millert
1613:
1614: * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1615: ldap_str2dn() and ldap_rdn2str().
1616:
1617: 2008-01-01 18:37 millert
1618:
1619: * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1620: of the deprecated ldap_get_values()/ldap_value_free().
1621:
1622: 2008-01-01 17:07 millert
1623:
1624: * TODO, ChangeLog: sync
1625:
1626: 2008-01-01 17:06 millert
1627:
1628: * gettime.c, sudo.c: Remove some already fixed XXXs
1629:
1630: 2008-01-01 17:03 millert
1631:
1632: * ldap.c: Same return value as non-existent sudoers if LDAP was
1633: unable to connect.
1634:
1635: 2008-01-01 16:52 millert
1636:
1637: * sudo.pod: mention /etc/environment
1638:
1639: 2008-01-01 16:42 millert
1640:
1641: * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1642: developments.
1643:
1644: 2008-01-01 16:42 millert
1645:
1646: * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1647: -V output.
1648:
1649: 2008-01-01 16:25 millert
1650:
1651: * ldap.c: When building up a query don't list groups in the aux
1652: group vector that are the same as the passwd file group. On most
1653: systems the first gid in the group vector is the same as the
1654: passwd entry gid.
1655:
1656: 2008-01-01 14:01 millert
1657:
1658: * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1659: to disable user ldaprc and system defaults that could affect how
1660: LDAP works.
1661:
1662: 2008-01-01 13:21 millert
1663:
1664: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1665: sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1666: --with-nsswitch to allow users to specify nsswitch.conf path or
1667: disable it. If --with-nsswitch=no but --with-ldap, order is
1668: LDAP, then sudoers. Fix --with-ldap-conf-file and
1669: --with-ldap-secret-file
1670:
1671: 2008-01-01 13:12 millert
1672:
1673: * parse.c: Honor def_ignore_local_sudoers
1674:
1675: 2007-12-31 16:44 millert
1676:
1677: * ldap.c: no longer need to check def_ignore_local_sudoers here
1678:
1679: 2007-12-31 16:36 millert
1680:
1681: * parse.c: Refactor group vector resetting into a function and also
1682: call it from display_cmnd. Stop after the first sucessful match
1683: in display_cmnd. Print a newline between each display_privs
1684: method.
1685:
1686: 2007-12-31 16:23 millert
1687:
1688: * parse.c: fix double free introduced in rev 1.218
1689:
1690: 2007-12-31 16:10 millert
1691:
1692: * ldap.c: belt and suspenders; zero out result after freeing it
1693:
1694: 2007-12-31 15:04 millert
1695:
1696: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1697: reading into a separate function, sudo_parseln(), which removes
1698: comments, leading/trailing whitespace and newlines. May want to
1699: rethink the use of sudo_parseln() for /etc/ldap.secret
1700:
1701: 2007-12-31 14:26 millert
1702:
1703: * parse.c, sudo.c: Make the inability to read the sudoers file a
1704: non-fatal error if there are other sudoers sources available.
1705: sudoers_file_lookup now returns "not OK" if sudoers was not
1706: present
1707:
1708: 2007-12-31 14:24 millert
1709:
1710: * ldap.c: make it clear that the global options are from LDAP
1711:
1712: 2007-12-31 14:13 millert
1713:
1714: * logging.c: allocate proper amount of space for error string
1715:
1716: 2007-12-31 10:24 millert
1717:
1718: * sudo_nss.c, sudo_nss.h: actual sudo nss code
1719:
1720: 2007-12-31 10:08 millert
1721:
1722: * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
1723: display_cmnd.
1724:
1725: 2007-12-31 07:54 millert
1726:
1727: * defaults.c, parse.c, testsudoers.c, visudo.c: move
1728: update_defaults() to parse.c
1729:
1730: 2007-12-31 07:39 millert
1731:
1732: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
1733: Use nsswitch to hide some sudoers vs. ldap implementation details
1734: and reduce the number of #ifdef LDAP TODO: fix display routines
1735: and error handling
1736:
1737: 2007-12-28 11:20 millert
1738:
1739: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
1740: First cut at nsswitch.conf support. Further reorganizaton and
1741: related changes are forthcoming.
1742:
1743: 2007-12-21 16:53 millert
1744:
1745: * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
1746: and /etc/environment file. Still needs to be documented and
1747: should probably only applies to OSes that have it (AIX and Linux,
1748: maybe others).
1749:
1750: 2007-12-21 16:20 millert
1751:
1752: * ldap.c: include limits.h
1753:
1754: 2007-12-20 10:02 millert
1755:
1756: * WHATSNEW: reword LDAP SASL
1757:
1758: 2007-12-19 16:40 millert
1759:
1760: * TODO: sync
1761:
1762: 2007-12-19 16:39 millert
1763:
1764: * README.LDAP: Add an example sudoRole, clarify netscape vs.
1765: openldap a bit more
1766:
1767: 2007-12-19 14:42 millert
1768:
1769: * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
1770:
1771: 2007-12-19 14:28 millert
1772:
1773: * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
1774: for ldaps support instead of trying to do it manually with
1775: ldap_init() + ldapssl_install_routines(). Use tls_cert and
1776: tls_key for cert7.db and key3.db respectively. Don't print
1777: debugging info for options that are not set. Add warning if
1778: start_tls specified when not supported.
1779:
1780: 2007-12-19 14:25 millert
1781:
1782: * ldap.c: fix compilation on solaris
1783:
1784: 2007-12-19 14:23 millert
1785:
1786: * Makefile.in: add missing .h and .c files for missing lib objs
1787:
1788: 2007-12-18 09:54 millert
1789:
1790: * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
1791:
1792: 2007-12-17 20:10 millert
1793:
1794: * ldap.c: fix compilation on Solaris
1795:
1796: 2007-12-17 10:14 millert
1797:
1798: * configure, configure.in: fix typo
1799:
1800: 2007-12-17 08:08 millert
1801:
1802: * README.LDAP: try to clear up which variables are for OpenLDAP and
1803: which are for netscape-derived SDKs
1804:
1805: 2007-12-17 07:31 millert
1806:
1807: * config.h.in, configure, configure.in, ldap.c: Add support for
1808: "ssl on" in both netscape and openldap flavors. Only the
1809: OpenLDAP flavor has been tested.
1810:
1811: 2007-12-17 07:28 millert
1812:
1813: * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
1814: log_error() instead of calling sudo_ldap_close() directly.
1815: ldap_conn can now be static to sudo.c
1816:
1817: 2007-12-16 20:02 millert
1818:
1819: * sudo.c: ld -> ldap_conn
1820:
1821: 2007-12-16 14:42 millert
1822:
1823: * logging.c, sudo.c, sudo.h: Better ldap cleanup.
1824:
1825: 2007-12-16 14:08 millert
1826:
1827: * ldap.c: Distinguish between LDAP conf settings that are
1828: connection-specific (which take an ld pointer) and those that are
1829: default settings (which do not).
1830:
1831: 2007-12-14 16:46 millert
1832:
1833: * ldap.c: Improved warnings on error.
1834:
1835: 2007-12-14 15:59 millert
1836:
1837: * ldap.c: Make ldap config table driven and set the config *after*
1838: we open the connection.
1839:
1840: 2007-12-13 16:41 millert
1841:
1842: * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
1843:
1844: 2007-12-13 09:13 millert
1845:
1846: * configure, configure.in: some operating systems need to link with
1847: -lkrb5support when using krb5
1848:
1849: 2007-12-10 17:12 millert
1850:
1851: * WHATSNEW: minor update
1852:
1853: 2007-12-10 10:56 millert
1854:
1855: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
1856:
1857: 2007-12-07 19:17 millert
1858:
1859: * TODO, ChangeLog: sync
1860:
1861: 2007-12-07 19:09 millert
1862:
1863: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
1864: support for LDAP
1865:
1866: 2007-12-03 11:36 millert
1867:
1868: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
1869: can now take an optional command.
1870:
1871: 2007-12-02 12:13 millert
1872:
1873: * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
1874: sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
1875: that will cause the prompt to be overridden in all cases. This
1876: flag is also set when the user specifies the -p flag.
1877:
1878: 2007-12-01 19:51 millert
1879:
1880: * sudo.c: Move setting of login class until after sudoers has been
1881: parsed. Set NewArgv[0] for -i after runas_pw has been set.
1882:
1883: 2007-12-01 19:34 millert
1884:
1885: * configure, configure.in: Move the dgettext check.
1886:
1887: 2007-12-01 11:22 millert
1888:
1889: * config.h.in, configure, configure.in, auth/pam.c: Add basic
1890: support for looking up the string "Password: " in the PAM
1891: localized text db. This allows us to determine whether the PAM
1892: prompt is the default "Password: " one even if it has been
1893: localized.
1894:
1895: TODO: concatenate non-std PAM prompts and user-specified sudo
1896: prompts.
1897:
1898: 2007-11-27 18:40 millert
1899:
1900: * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
1901: sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
1902: home-grown attempt that was insufficient.
1903:
1904: 2007-11-27 12:13 millert
1905:
1906: * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
1907: Martynas Venckus
1908:
1909: 2007-11-25 19:26 millert
1910:
1911: * set_perms.c: Don't assume runas_pw is set; it may not be in the
1912: -g case.
1913:
1914: 2007-11-25 08:07 millert
1915:
1916: * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
1917: restore group vector for PERM_ROOT if we previously changed it.
1918: Stash the runas group vector so we don't have to call initgroups
1919: more than once. Also add no-op check to check_perms.
1920:
1921: 2007-11-21 15:11 millert
1922:
1923: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
1924: gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
1925: parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
1926: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
1927: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
1928: visudo.cat, visudo.man.in: Add support for runas groups. This
1929: allows the user to run a command with a different effective
1930: group. If the -g option is specified without -u the command will
1931: be run as the current user (only the group will change). the -g
1932: and -u options may be used together. TODO: implement runas group
1933: for ldap improve runas group documentation add
1934: testsudoers support
1935:
1936: 2007-11-21 15:02 millert
1937:
1938: * configure, configure.in: fix setting of mandir
1939:
1940: 2007-11-21 14:26 millert
1941:
1942: * sudo.pod, sudoers.pod: document that ALL implies SETENV
1943:
1944: 2007-11-21 13:50 millert
1945:
1946: * ldap.c: s/setenv_ok/setenv_implied/g
1947:
1948: 2007-11-21 13:44 millert
1949:
1950: * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
1951:
1952: 2007-11-21 13:26 millert
1953:
1954: * ldap.c: use strcmp, not strcasecmp when comparing ALL
1955:
1956: 2007-11-21 11:41 millert
1957:
1958: * ldap.c: Make sudo ALL imply setenv. Note that unlike with
1959: file-based sudoers this does affect all the commands in the
1960: sudoRole.
1961:
1962: 2007-11-21 11:05 millert
1963:
1964: * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
1965: SETENV tag but, unlike an explicit tag, it is not passed on to
1966: other commands in the list.
1967:
1968: 2007-11-21 11:02 millert
1969:
1970: * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
1971: Also use sudo_getpwuid() instead of getpwuid().
1972:
1973: 2007-11-15 11:16 millert
1974:
1975: * sudoers: Expand on the dangers of not using visudo to edit
1976: sudoers.
1977:
1978: 2007-11-08 07:24 millert
1979:
1980: * parse.c: Don't quote *?[]! on output since the lexer does not
1981: strip off the backslash when reading those in.
1982:
1983: 2007-11-07 13:16 millert
1984:
1985: * glob.c: expand "u_foo" types to "unsigned foo" to avoid
1986: compatibility issues.
1987:
1988: 2007-11-04 08:33 millert
1989:
1990: * logging.c: Refactor log line generation in to new_logline().
1991:
1992: 2007-10-25 09:23 millert
1993:
1994: * TROUBLESHOOTING: fix typo
1995:
1996: 2007-10-24 12:41 millert
1997:
1998: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
1999: match.c: Add configure check for struct in6_addr instead of
2000: relying on AF_INET6 since some systems define AF_INET6 but do not
2001: include IPv6 support.
2002:
2003: 2007-10-21 09:29 millert
2004:
2005: * configure, configure.in: Fix block to add -lutil for FreeBSD and
2006: NetBSD when logincap is in use.
2007:
2008: 2007-10-19 22:28 millert
2009:
2010: * configure, configure.in: POSIX states that struct timespec be
2011: declared in time.h so check there regardless of the value of
2012: TIME_WITH_SYS_TIME.
2013:
2014: 2007-10-17 11:37 millert
2015:
2016: * tgetpass.c: Instead of defining a macro to call the appropriate
2017: method for turning on/off echo, just define tc[gs]etattr() and
2018: the related defines that use the correct terminal ioctls if
2019: needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2020: all but QNX.
2021:
2022: 2007-10-08 20:18 millert
2023:
2024: * Makefile.in: g/c @ALLOCA@
2025:
2026: 2007-10-08 20:07 millert
2027:
2028: * configure: regen
2029:
2030: 2007-10-08 20:04 millert
2031:
2032: * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2033: --disable-pam-session configure option to disable calling
2034: pam_{open,close}_session. May work around bugs in some PAM
2035: implementations.
2036:
2037: 2007-10-08 12:00 millert
2038:
2039: * tgetpass.c: quiet gcc warnings
2040:
2041: 2007-10-08 08:41 millert
2042:
2043: * tgetpass.c: Avoid printing the prompt if we are already
2044: backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2045: In this case, the call to tcsetattr() will cause SIGTTOU to be
2046: delivered.
2047:
2048: 2007-09-15 16:07 millert
2049:
2050: * def_data.c, def_data.h, def_data.in: Reorder things such that the
2051: definition of env_reset come right before the env variable lists.
2052:
2053: 2007-09-15 07:50 millert
2054:
2055: * parse.h: Shrink type and seqno in struct alias from int to
2056: u_short
2057:
2058: 2007-09-15 07:24 millert
2059:
2060: * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2061: aliases for loop detection. If we find an alias with the seqno
2062: already set to the current (global) value we know we've visited
2063: it before so ignore it.
2064:
2065: 2007-09-13 19:05 millert
2066:
2067: * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2068: add user_ttypath which holds the full path to the tty or is NULL
2069: if no tty was present.
2070:
2071: 2007-09-13 18:42 millert
2072:
2073: * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2074: lower that results in a segv.
2075:
2076: 2007-09-11 15:43 millert
2077:
2078: * gram.c: regen
2079:
2080: 2007-09-11 15:42 millert
2081:
2082: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2083: parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2084:
2085: 2007-09-10 17:33 millert
2086:
2087: * alloc.c: remove some useless casts
2088:
2089: 2007-09-10 17:32 millert
2090:
2091: * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2092: inttypes.h predates the final C99 spec and the standard specifies
2093: that it shall include stdint.h anyway
2094:
2095: 2007-09-06 12:39 millert
2096:
2097: * Makefile.in, alloca.c, configure.in: Since we ship with a
2098: pre-generated parser there is no need to ship a bogus alloca
2099: implementation.
2100:
2101: 2007-09-06 12:22 millert
2102:
2103: * configure: regen
2104:
2105: 2007-09-06 12:19 millert
2106:
2107: * configure.in: remove initial setting of CHECKSIA, we require that
2108: it be unset if not used
2109:
2110: 2007-09-06 11:55 millert
2111:
2112: * Makefile.in: add list.c to SRCS
2113:
2114: 2007-09-06 07:18 millert
2115:
2116: * configure: regen
2117:
2118: 2007-09-06 07:17 millert
2119:
2120: * configure.in: only do SIA checks on Digital Unix
2121:
2122: 2007-09-05 18:50 millert
2123:
2124: * sudoers.cat, sudoers.man.in: regen
2125:
2126: 2007-09-05 18:48 millert
2127:
2128: * ChangeLog, TODO: sync
2129:
2130: 2007-09-05 18:39 millert
2131:
2132: * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2133: needed for modern kerb5.
2134:
2135: 2007-09-05 18:16 millert
2136:
2137: * configure: regen
2138:
2139: 2007-09-05 18:16 millert
2140:
2141: * configure.in, aclocal.m4: New method for setting the default
2142: authentication type and avoiding conflicts in auth types.
2143:
2144: 2007-09-05 14:45 millert
2145:
2146: * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2147: an associated runaslist so no need to keep track of the most
2148: recent non-NULL one.
2149:
2150: 2007-09-04 18:51 millert
2151:
2152: * ldap.c: back out partial ldaps support mistakenly committed
2153:
2154: 2007-09-04 10:57 millert
2155:
2156: * ldap.c: Add support for unix groups and netgroups in sudoRunas
2157:
2158: 2007-09-03 16:28 millert
2159:
2160: * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2161: Stritzky.
2162:
2163: 2007-09-02 17:05 millert
2164:
2165: * configure: regen
2166:
2167: 2007-09-02 17:05 millert
2168:
2169: * INSTALL: update --passprompt escape info
2170:
2171: 2007-09-02 17:03 millert
2172:
2173: * configure.in: remove now-bogus comment and update copyright date
2174:
2175: 2007-09-02 16:35 millert
2176:
2177: * configure.in: Fix up use of with_passwd
2178:
2179: 2007-09-02 16:25 millert
2180:
2181: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2182: Update to autoconf-2.61 andf libtool-1.5.24
2183:
2184: 2007-09-02 16:17 millert
2185:
2186: * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2187: autoconf-2.61
2188:
2189: 2007-09-01 17:39 millert
2190:
2191: * gram.c: regen
2192:
2193: 2007-09-01 17:39 millert
2194:
2195: * gram.y: move tags and runaslist propagation to be earlier
2196:
2197: 2007-09-01 09:34 millert
2198:
2199: * visudo.c: If -f flag given use the permissions of the original
2200: file as a template
2201:
2202: 2007-09-01 08:45 millert
2203:
2204: * gram.y: prevent a double free() when re-initing the parser
2205:
2206: 2007-08-31 19:30 millert
2207:
2208: * configure: regen
2209:
2210: 2007-08-31 19:30 millert
2211:
2212: * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2213: ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2214: redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2215: testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2216: auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2217: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2218: Remove support for compilers that don't support void *
2219:
2220: 2007-08-31 19:14 millert
2221:
2222: * gram.c: regen
2223:
2224: 2007-08-31 19:13 millert
2225:
2226: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2227: match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2228: manipulation macros to list.h and create C versions of the more
2229: complex ones in list.c. The names have been down-cased so they
2230: appear more like normal functions.
2231:
2232: 2007-08-31 17:21 millert
2233:
2234: * Makefile.in: Fix cmp command when regenerating parser. Make
2235: gram.o the first dependency for all programs so gram.h will be
2236: generated before anything that needs it.
2237:
2238: 2007-08-31 13:56 millert
2239:
2240: * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2241: functions.
2242:
2243: 2007-08-30 21:21 millert
2244:
2245: * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2246: permission and short-circuit on the first non-UNSPEC hit we get
2247: for the command. This means that instead of cycling through the
2248: all the parsed sudoers entries we start at the end and work
2249: backwards and quit after the first positive or negative match.
2250:
2251: 2007-08-30 21:13 millert
2252:
2253: * gram.c: regen
2254:
2255: 2007-08-30 21:12 millert
2256:
2257: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2258: Change list head macros to take a pointer, not a struct.
2259:
2260: 2007-08-30 20:46 millert
2261:
2262: * gram.c: regen
2263:
2264: 2007-08-30 20:46 millert
2265:
2266: * gram.y: Propagate the runasspec from one command to the next in a
2267: cmndspec.
2268:
2269: 2007-08-30 16:15 millert
2270:
2271: * match.c: Replace has_meta() with a macro that calls strpbrk().
2272:
2273: 2007-08-30 16:04 millert
2274:
2275: * gram.c: regen
2276:
2277: 2007-08-30 13:26 millert
2278:
2279: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2280: testsudoers.c, visudo.c: Use a list head struct when storing the
2281: semi-circular lists and convert to tail queues in the process.
2282: This will allow us to reverse foreach loops more easily and it
2283: makes it clearer which functions expect a list as opposed to a
2284: single member.
2285:
2286: Add macros for manipulating lists. Some of these should become
2287: functions.
2288:
2289: When freeing up a list, just pop off the last item in the queue
2290: instead of going from head to tail. This is simpler since we
2291: don't have to stash a pointer to the next member, we always just
2292: use the last one in the queue until the queue is empty.
2293:
2294: Rename match functions that take a list to have list in the name.
2295: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2296:
2297: 2007-08-30 13:12 millert
2298:
2299: * parse.c: Fix pasto, append "!" not negated (which is an int) for
2300: sudo -l output.
2301:
2302: 2007-08-30 12:45 millert
2303:
2304: * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2305: dependency is enough. Only move y.tab.h to gram.h if it is
2306: different; avoids needless rebuilding.
2307:
2308: 2007-08-27 15:51 millert
2309:
2310: * sudoers.pod: Defaults lines may be associated with lists of
2311: users, hosts, commands and runas users, not just single entries.
2312:
2313: 2007-08-26 17:42 millert
2314:
2315: * Makefile.in: Revert the "cmp" portion of the last diff, it
2316: doesn't make sense.
2317:
2318: 2007-08-26 17:10 millert
2319:
2320: * Makefile.in: Remove *.lo for clean: When generating the parser,
2321: only move the generated files into place if they differ from the
2322: existing ones.
2323:
2324: 2007-08-24 22:47 millert
2325:
2326: * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2327: (readable) one and add an extra check when it matches to make
2328: sure we have a valid address.
2329:
2330: 2007-08-24 22:36 millert
2331:
2332: * match.c: Fix thinko introduced when merging IPV6 support.
2333:
2334: 2007-08-24 14:23 millert
2335:
2336: * HISTORY, LICENSE: regen
2337:
2338: 2007-08-24 14:23 millert
2339:
2340: * license.pod: add 2007
2341:
2342: 2007-08-24 14:19 millert
2343:
2344: * UPGRADE: mention #uid vs. comment pitfall
2345:
2346: 2007-08-24 09:50 millert
2347:
2348: * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2349: problem with the latest autoconf. From Stepan Kasal.
2350:
2351: 2007-08-23 20:28 millert
2352:
2353: * parse.h: Back out he XOR swap trick, it is slower than a temp
2354: variable on modern CPUs.
2355:
2356: 2007-08-23 20:14 millert
2357:
2358: * gram.c: regen
2359:
2360: 2007-08-23 20:14 millert
2361:
2362: * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2363: and use the XOR swap trick to swap the prev pointers during
2364: append.
2365:
2366: 2007-08-23 15:31 millert
2367:
2368: * parse.h: remove useless statement
2369:
2370: 2007-08-23 07:47 millert
2371:
2372: * toke.c, toke.l: Refactor #include parsing into a separate
2373: function and return unparsed chars (such as newline or comment)
2374: back to the lexer.
2375:
2376: 2007-08-22 18:56 millert
2377:
2378: * WHATSNEW: mention better uid support
2379:
2380: 2007-08-22 18:55 millert
2381:
2382: * sudoers.pod: Users may now consist of a uid.
2383:
2384: 2007-08-22 18:39 millert
2385:
2386: * gram.c, gram.h, toke.c: regen
2387:
2388: 2007-08-22 18:32 millert
2389:
2390: * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2391: characters that would require quoting in sudoers.
2392:
2393: 2007-08-22 18:31 millert
2394:
2395: * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2396: characters which should be quoted with a backslash when
2397: displayed.
2398:
2399: 2007-08-22 18:28 millert
2400:
2401: * toke.l: Require that the first character after a comment not be a
2402: digit or a dash. This allows us to remove the GOTRUNAS state and
2403: treat uid/gids similar to other words. It also means that we can
2404: now specify uids in User_Lists and a User_Spec may now contain a
2405: uid.
2406:
2407: 2007-08-22 18:23 millert
2408:
2409: * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2410: make the runas portion of the grammar more natural.
2411:
2412: 2007-08-22 06:35 millert
2413:
2414: * Makefile.in, README, BUGS: The BUGS file is history
2415:
2416: 2007-08-21 09:19 millert
2417:
2418: * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2419: character after the pound sign isn't a digit or a dash.
2420:
2421: 2007-08-20 20:43 millert
2422:
2423: * WHATSNEW: Glob support was back-ported to 1.6.9
2424:
2425: 2007-08-20 19:59 millert
2426:
2427: * Makefile.in: remove sudo_usage.h in distclean
2428:
2429: 2007-08-20 19:24 millert
2430:
2431: * parse.c: If a Defaults value contains a blank, double-quote the
2432: string.
2433:
2434: 2007-08-20 19:19 millert
2435:
2436: * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2437: that span multiple lines using the line continuation char.
2438: Previously, the entire thing, including the continuation char,
2439: newline, and spaces was stored as-is.
2440:
2441: 2007-08-20 10:46 millert
2442:
2443: * sudo.c: Be consistent when using single quotes and backticks.
2444:
2445: 2007-08-19 16:48 millert
2446:
2447: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2448: sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2449: dynamically allocated strings and word-wrapped output. Currently
2450: used for sudo's usage() and sudo -l output. Sudo usage strings
2451: are now in sudo_usage.h which is generated at configure time.
2452:
2453: 2007-08-18 08:22 millert
2454:
2455: * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2456: actual tty width instead of assuming 80.
2457:
2458: 2007-08-17 18:32 millert
2459:
2460: * history.pod: some more info
2461:
2462: 2007-08-17 17:28 millert
2463:
2464: * history.pod: Mentioned Chris Jepeway's parser and also the new
2465: one that is in sudo 1.7.
2466:
2467: 2007-08-16 09:38 millert
2468:
2469: * sudo.pod, visudo.pod: For the options list, add flag args where
2470: appropriate and increase the indent level so there is room for
2471: them.
2472:
2473: 2007-08-15 13:49 millert
2474:
2475: * parse.c: Fix some spacing in "sudo -l" and add a comment about
2476: some bogosity in the line wrapping.
2477:
2478: 2007-08-15 11:21 millert
2479:
2480: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2481: visudo.man.in, visudo.cat: regen
2482:
2483: 2007-08-15 11:20 millert
2484:
2485: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2486: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2487: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2488: testsudoers.c, toke.c, toke.l: Remove monitor support until there
2489: is a versino of systrace that uses a lookaside buffer (or we have
2490: a better mechanism to use).
2491:
2492: 2007-08-15 09:22 millert
2493:
2494: * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2495: instead of gethostbyname() if it is available
2496:
2497: 2007-08-14 15:27 millert
2498:
2499: * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2500: sizeof(int).
2501:
2502: 2007-08-14 11:19 millert
2503:
2504: * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2505:
2506: 2007-08-14 10:04 millert
2507:
2508: * sudo.c: If we can open sudoers but fail to read the first byte,
2509: close the file stream before trying again.
2510:
2511: 2007-08-13 12:34 millert
2512:
2513: * gram.c, toke.c: regen
2514:
2515: 2007-08-13 12:29 millert
2516:
2517: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2518: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2519:
2520: 2007-08-13 12:23 millert
2521:
2522: * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2523: copyright
2524:
2525: 2007-08-12 18:55 millert
2526:
2527: * configure, configure.in: fix sudo_noexec extension which got
2528: broken in the libtool update
2529:
2530: 2007-08-10 10:41 millert
2531:
2532: * Makefile.in: explicitly specify -Tascii to nroff
2533:
2534: 2007-08-08 16:07 millert
2535:
2536: * logging.c: remove an ANSI-ism that crept in
2537:
2538: 2007-08-06 20:37 millert
2539:
2540: * sudo.pod: Adjust list indents Prevent -- from being turned into
2541: an em dash Use a list for the environment instead of a literal
2542: paragraph
2543:
2544: 2007-08-06 20:36 millert
2545:
2546: * visudo.pod: Use a list for the environment instead of an indented
2547: literal paragraph.
2548:
2549: 2007-08-06 20:33 millert
2550:
2551: * sudoers.pod: Adjust list indentation
2552:
2553: 2007-08-06 20:31 millert
2554:
2555: * license.pod: add =head3
2556:
2557: 2007-08-06 10:24 millert
2558:
2559: * sudo.pod: mention that when specifying a uid for the -u option
2560: the shell may require that the # be escaped
2561:
2562: 2007-08-01 22:08 millert
2563:
2564: * match.c: Fix off by one in group matching.
2565:
2566: 2007-07-31 14:04 millert
2567:
2568: * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2569: David Krause.
2570:
2571: 2007-07-30 10:45 millert
2572:
2573: * configure, configure.in: Add missing define of
2574: HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2575:
2576: 2007-07-30 09:29 millert
2577:
2578: * aclocal.m4, configure.in, configure: Fix link tests such that new
2579: gcc doesn't optimize away the test.
2580:
2581: 2007-07-29 19:21 millert
2582:
2583: * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2584:
2585: 2007-07-29 19:09 millert
2586:
2587: * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2588: =item
2589:
2590: 2007-07-29 18:32 millert
2591:
2592: * env.c: Add back allocation of the env struct in rebuild_env but
2593: save a copy of the old pointer and free it before returning.
2594:
2595: 2007-07-29 16:09 millert
2596:
2597: * env.c: Don't init the private environment in rebuild_env() since
2598: it may have already been done implicitly
2599: sudo_setenv/sudo_unsetenv.
2600:
2601: Multiply length by sizeof(char *) in memcpy/memmove when copying
2602: the environment so we copy the full thing.
2603:
2604: Add missing set of parens so we deref the right pointer in
2605: sudo_unsetenv when searching for a matching variable.
2606:
2607: 2007-07-26 16:35 millert
2608:
2609: * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2610: the FILES section
2611:
2612: 2007-07-26 10:04 millert
2613:
2614: * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2615:
2616: 2007-07-26 07:28 millert
2617:
2618: * sudoers.pod: Sort sudoers options; based on a diff from Igor
2619: Sobrado.
2620:
2621: 2007-07-25 16:19 millert
2622:
2623: * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2624: @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2625: The Makefile rules for the .man.in file will add @mansectsu@ and
2626: @mansectform@ back in after pod2man is done anyway.
2627:
2628: 2007-07-22 19:09 millert
2629:
2630: * LICENSE, Makefile.in, license.pod: Move license info to pod
2631: format
2632:
2633: 2007-07-22 18:43 millert
2634:
2635: * configure, configure.in, sudoers.pod: Substitute value of
2636: path_info into sudoers man page.
2637:
2638: 2007-07-22 16:40 millert
2639:
2640: * WHATSNEW: remove features that were back-ported to 1.6.9
2641:
2642: 2007-07-22 15:20 millert
2643:
2644: * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2645: usage. From Igor Sobrado.
2646:
2647: 2007-07-22 15:19 millert
2648:
2649: * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2650: ldap_sasl_interactive_bind_s() but don't have
2651: gss_krb5_ccache_name().
2652:
2653: 2007-07-22 08:23 millert
2654:
2655: * ChangeLog: rebuild without branch info
2656:
2657: 2007-07-22 08:23 millert
2658:
2659: * Makefile.in: Add ChangeLog target
2660:
2661: 2007-07-22 08:14 millert
2662:
2663: * auth/pam.c: Run cleanup code if the user hits ^C at the password
2664: prompt.
2665:
2666: 2007-07-22 08:13 millert
2667:
2668: * auth/pam.c: Some versions of pam_lastlog have a bug that will
2669: cause a crash if PAM_TTY is not set so if there is no tty, set
2670: PAM_TTY to the empty string.
2671:
2672: 2007-07-20 09:32 millert
2673:
2674: * Makefile.in: ChageLog not Changelog
2675:
2676: 2007-07-20 09:31 millert
2677:
2678: * ChangeLog: sync
2679:
2680: 2007-07-20 09:29 millert
2681:
2682: * Makefile.in: CHANGE -> Changelog
2683:
2684: 2007-07-19 20:23 millert
2685:
2686: * TODO: sync
2687:
2688: 2007-07-19 19:53 millert
2689:
2690: * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2691: for gss_krb5_ccache_name() and the gssapi headers.
2692:
2693: 2007-07-18 12:57 millert
2694:
2695: * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2696: return environment pointer, they set environ directly.
2697:
2698: No longer need to pass around an envp pointer since we just
2699: operate on environ now.
2700:
2701: Add dosync argument to insert_env() that indicates whether it
2702: should reset environ when realloc()ing env.envp.
2703:
2704: Use an initial size of 128 for the environment.
2705:
2706: 2007-07-18 12:41 millert
2707:
2708: * env.c: Split sudo_setenv() into an external version and a version
2709: only for use by rebuild_env().
2710:
2711: 2007-07-16 19:40 millert
2712:
2713: * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2714: setting KRB5CCNAME. Also use sudo_unsetenv() in the
2715: non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2716: original environment. TODO: configure setup for
2717: gss_krb5_ccache_name()
2718:
2719: 2007-07-16 18:44 millert
2720:
2721: * README.LDAP: add krb5_ccname
2722:
2723: 2007-07-16 18:44 millert
2724:
2725: * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
2726:
2727: 2007-07-16 18:39 millert
2728:
2729: * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
2730: syncing code into sync_env().
2731:
2732: 2007-07-16 07:27 millert
2733:
2734: * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
2735: sasl_authid.
2736:
2737: 2007-07-15 15:44 millert
2738:
2739: * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
2740: If specified, it will override the default value of KRB5CCNAME
2741: in the environment for the duration of the call to
2742: ldap_sasl_interactive_bind_s().
2743:
2744: 2007-07-15 15:41 millert
2745:
2746: * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
2747: most format_env() + insert_env() combinations. insert_env() no
2748: longer takes a struct environment *
2749:
2750: 2007-07-15 12:47 millert
2751:
2752: * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
2753:
2754: 2007-07-15 09:23 millert
2755:
2756: * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
2757: support for SASL auth when connecting to an LDAP server. Adapted
2758: from a diff by Tom McLaughlin.
2759:
2760: 2007-07-14 16:32 millert
2761:
2762: * configure, configure.in: Only enable AIX or BSD auth if no other
2763: exclusive auth method has been chosen. Allows people to e.g.,
2764: use PAM on AIX without adding --without-aixauth. A better
2765: solution is needed to deal with default authentication since if a
2766: non-exclusive method is chosen we will still get an error.
2767:
2768: 2007-07-11 11:23 millert
2769:
2770: * HISTORY, Makefile.in, history.pod: Generate HISTORY from
2771: history.pod (which is also used for web pages)
2772:
2773: 2007-07-09 19:40 millert
2774:
2775: * sudo.man.in, sudoers.man.in: regen
2776:
2777: 2007-07-09 19:25 millert
2778:
2779: * sudo.pod: Better explanation of environment handling in the sudo
2780: man page.
2781:
2782: 2007-07-09 15:13 millert
2783:
2784: * env.c, sudo.c: Defer setting user-specified env vars until after
2785: authentication.
2786:
2787: 2007-07-09 13:25 millert
2788:
2789: * env.c: honor def_default_path for PATH set on the command line
2790:
2791: 2007-07-09 13:22 millert
2792:
2793: * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
2794: environment variables on the command line as long as they are
2795: allowed by env_keep and env_check. Ie: apply the same
2796: restrictions as normal environment variables. TODO: deal with
2797: secure_path
2798:
2799: 2007-07-08 14:44 millert
2800:
2801: * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
2802: original envp to sudo_edit(). Don't allow -E or env var setting
2803: in sudoedit mode. More accurate usage() when called as sudoedit.
2804:
2805: 2007-07-08 14:41 millert
2806:
2807: * ldap.c: warn -> warning
2808:
2809: 2007-07-08 14:11 millert
2810:
2811: * sudo.pod: add -c option to sudoedit synopsis
2812:
2813: 2007-07-08 10:27 millert
2814:
2815: * TODO: udpate to reality
2816:
2817: 2007-07-08 09:43 millert
2818:
2819: * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
2820: the return value from {user,host,runas,cmnd}_matches(). Rename
2821: *matches variables -> *match. Purely cosmetic.
2822:
2823: 2007-07-08 09:30 millert
2824:
2825: * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
2826: No change in behavior.
2827:
2828: 2007-07-08 09:17 millert
2829:
2830: * sudoers: add SETENV tag
2831:
2832: 2007-07-06 15:51 millert
2833:
2834: * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
2835: even if user didn't match since Defaults options may still apply.
2836:
2837: 2007-07-06 14:51 millert
2838:
2839: * check.c, sudo.c: Do not update timestamp if user not validated by
2840: sudoers.
2841:
2842: 2007-07-06 10:14 millert
2843:
2844: * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
2845: and restore to the user's original in PERM_ROOT
2846:
2847: 2007-07-06 10:04 millert
2848:
2849: * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
2850: now no different than PERM_ROOT so remove PERM_FULL_ROOT
2851:
2852: 2007-07-06 09:49 millert
2853:
2854: * check.c: don't check timestamp mtime if we are just going to
2855: remove it
2856:
2857: 2007-07-06 09:33 millert
2858:
2859: * sudoers.pod: Move sudoers defaults parameters into their own
2860: section.
2861:
2862: 2007-07-05 20:21 millert
2863:
2864: * testsudoers.c: Reduce a level of indent by a few placed continue
2865: statements.
2866:
2867: 2007-07-05 20:20 millert
2868:
2869: * parse.c: Make matching but negated commands/hosts/runas entries
2870: override a previous match as expected. Also reduce some levels
2871: of indent by a few placed continue statements.
2872:
2873: 2007-07-05 16:34 millert
2874:
2875: * parse.c: Print default runas in "sudo -l" if sudoers don't
2876: specify one.
2877:
2878: 2007-07-05 15:46 millert
2879:
2880: * match.c: Less hacky way of testing whether the domain was set.
2881:
2882: 2007-07-04 15:50 millert
2883:
2884: * INSTALL: Mention pam-devel and openldap-devel for Linux
2885:
2886: 2007-07-03 19:38 millert
2887:
2888: * README.LDAP: or vs. are
2889:
2890: 2007-07-01 16:55 millert
2891:
2892: * sudo.c: fix typo in Solaris project support
2893:
2894: 2007-07-01 09:40 millert
2895:
2896: * HISTORY: update
2897:
2898: 2007-07-01 09:07 millert
2899:
2900: * sudo.c: Make -- on the command line match the manual page. The
2901: implied shell case has been simplified as a result.
2902:
2903: 2007-06-28 10:44 millert
2904:
2905: * sudoers2ldif: add simplistic support for sudoRunas; note that if
2906: a sudoers entry contains multiple Runas users, all will apply to
2907: the sudoRole
2908:
2909: 2007-06-28 10:42 millert
2910:
2911: * sudoers2ldif: honor SETENV and NOSETENV tags
2912:
2913: 2007-06-24 09:25 millert
2914:
2915: * mon_systrace.c: Redo setting of user_args. We now build up a
2916: private copy of argv first and then replace the NULs with spaces.
2917:
2918: 2007-06-24 09:19 millert
2919:
2920: * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
2921: success
2922:
2923: 2007-06-24 07:39 millert
2924:
2925: * mon_systrace.c: allow chunksiz to reach 1 before erroring out
2926:
2927: 2007-06-23 20:00 millert
2928:
2929: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
2930: visudo.man.in: regen
2931:
2932: 2007-06-23 19:58 millert
2933:
2934: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
2935: gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
2936: sudoers.pod, toke.c, toke.l: Add support for setting environment
2937: variables on the command line. This is only allowed if the
2938: setenv sudoers options is enabled or if the command is prefixed
2939: with the SETENV tag.
2940:
2941: 2007-06-23 19:57 millert
2942:
2943: * README.LDAP: replace Aaron's email address with the sudo-workers
2944: list
2945:
2946: 2007-06-23 19:55 millert
2947:
2948: * configure: regen
2949:
2950: 2007-06-21 20:35 millert
2951:
2952: * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
2953: schema out into separate files.
2954:
2955: 2007-06-21 18:28 millert
2956:
2957: * auth/aix_auth.c: free message if set by authenticate()
2958:
2959: 2007-06-21 13:03 millert
2960:
2961: * match.c: deal with NULL gr_mem
2962:
2963: 2007-06-20 15:04 millert
2964:
2965: * config.h.in: regen
2966:
2967: 2007-06-20 15:04 millert
2968:
2969: * configure.in: add template for HAVE_PROJECT_H
2970:
2971: 2007-06-20 07:06 millert
2972:
2973: * closefrom.c: include fcntl.h
2974:
2975: 2007-06-19 19:37 millert
2976:
2977: * INSTALL: mention --with-project
2978:
2979: 2007-06-19 18:24 millert
2980:
2981: * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
2982: support. From Michael Brantley.
2983:
2984: 2007-06-19 17:27 millert
2985:
2986: * sudoers.pod: fix typo
2987:
2988: 2007-06-19 17:22 millert
2989:
2990: * configure: regen
2991:
2992: 2007-06-19 17:21 millert
2993:
2994: * configure.in: Fix preservation of LDFLAGS in the LDAP case.
2995:
2996: 2007-06-19 17:00 millert
2997:
2998: * memrchr.c: Remove dependecy on NULL
2999:
3000: 2007-06-19 15:37 millert
3001:
3002: * configure: regen
3003:
3004: 2007-06-19 15:37 millert
3005:
3006: * aclocal.m4, configure.in: Can't use the regular autoconf
3007: fnmatch() check since we need FNM_CASEFOLD so go back to our
3008: custom one.
3009:
3010: 2007-06-19 12:52 millert
3011:
3012: * env.c: Fix preserving of variables in env_keep.
3013:
3014: 2007-06-19 07:10 millert
3015:
3016: * env.c: add XAUTHORIZATION
3017:
3018: 2007-06-18 20:41 millert
3019:
3020: * UPGRADE: expand upon env resetting and mention that it began in
3021: 1.6.9 not 1.7.
3022:
3023: 2007-06-18 20:33 millert
3024:
3025: * sudoers.pod: Update descriptions of env_keep and env_check to
3026: match current reality.
3027:
3028: 2007-06-18 17:33 millert
3029:
3030: * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3031: HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3032: intial_keepenv_table.
3033:
3034: 2007-06-18 17:23 millert
3035:
3036: * env.c, logging.c: Treat USERNAME environemnt variable like
3037: LOGNAME/USER
3038:
3039: 2007-06-18 17:21 millert
3040:
3041: * env.c: Don't need to populate keepenv table with the contents of
3042: the checkenv table.
3043:
3044: 2007-06-18 08:57 millert
3045:
3046: * sudo.c: Don't force sudo into the C locale.
3047:
3048: 2007-06-18 08:56 millert
3049:
3050: * env.c: Make env_check apply when env_reset it true. Environment
3051: variables are passed through unless they contain '/' or '%'.
3052: There is no need to have a variable in both env_check and
3053: env_keep.
3054:
3055: 2007-06-16 07:31 millert
3056:
3057: * visudo.c: Remove an duplicate lock_file() call and add a comment.
3058:
3059: 2007-06-15 21:16 millert
3060:
3061: * UPGRADE: Add sudo 1.6.9 upgrade note.
3062:
3063: 2007-06-14 12:23 millert
3064:
3065: * interfaces.c: Solaris will return EINVAL if the buffer used in
3066: SIOCGIFCONF is too small. From Klaus Wagner.
3067:
3068: 2007-06-14 12:03 millert
3069:
3070: * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3071: logging.c, sudo.h: Redo the long syslog line splitting based on a
3072: patch from Eygene Ryabinkin. Include memrchr() for systems
3073: without it.
3074:
3075: 2007-06-14 07:09 millert
3076:
3077: * configure.in: Since we need to be able to convert timespec to
3078: timeval for utimes() the last 3 digits in the tv_nsec are not
3079: significant. This makes the sudoedit file date comparison work
3080: again.
3081:
3082: 2007-06-13 13:41 millert
3083:
3084: * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3085: deal with adding things to AUTH_OBJS. This deals with exclusive
3086: authentication methods in a simple way.
3087:
3088: 2007-06-12 13:08 millert
3089:
3090: * LICENSE: mkstemp.c is BSD code too.
3091:
3092: 2007-06-12 09:21 millert
3093:
3094: * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3095:
3096: 2007-06-11 18:27 millert
3097:
3098: * sudo.c: cleanenv() is no more.
3099:
3100: 2007-06-10 18:37 millert
3101:
3102: * ChangeLog: Display branch info in Changelog
3103:
3104: 2007-06-10 18:18 millert
3105:
3106: * utimes.c: Include config.h early so we have it for
3107: TIME_WITH_SYS_TIME
3108:
3109: 2007-06-10 18:00 millert
3110:
3111: * ChangeLog: Fix Changelog generation and update.
3112:
3113: 2007-06-09 07:26 millert
3114:
3115: * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3116:
3117: Move old-style fd closing into closefrom_fallback() and call that
3118: if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3119:
3120: 2007-06-09 07:24 millert
3121:
3122: * config.h.in, configure.in, auth/kerb5.c: o use
3123: krb5_verify_user() if available instead of doing it by hand
3124: o use krb5_init_secure_context() if we have it
3125: o pass an encryption type of 0 to krb5_kt_read_service_key()
3126: instead of
3127: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3128:
3129: 2007-06-09 07:20 millert
3130:
3131: * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3132: Debian.
3133:
3134: 2007-06-09 07:17 millert
3135:
3136: * configure.in: Fix closefrom() substitution in the Makefile
3137:
3138: 2007-06-09 07:15 millert
3139:
3140: * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3141:
3142: 2007-06-07 07:52 millert
3143:
3144: * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3145:
3146: 2007-06-07 07:22 millert
3147:
3148: * auth/kerb5.c: If we cannot get a valid service key using the
3149: default keytab it is a fatal error. Fixes a bug where sudo could
3150: be tricked into allowing access when it should not by a fake KDC.
3151: From Thor Lancelot Simon.
3152:
3153: 2007-05-12 08:56 millert
3154:
3155: * aclocal.m4, configure, configure.in: Update long long checks to
3156: use AC_CHECK_TYPES and to cache values.
3157:
3158: 2007-05-12 08:07 millert
3159:
3160: * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3161: homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3162: that assumes replacing with GNU fnmatch.
3163:
3164: 2007-05-11 17:05 millert
3165:
3166: * configure, configure.in: Add closefrom() to LIB_OBJS not
3167: SUDO_OBJS if it is missing since we need it for visudo now too.
3168:
3169: 2007-04-24 14:44 millert
3170:
3171: * sudoers.pod: Attempt to clarify the bit talking about network
3172: numbers w/o netmasks.
3173:
3174: 2007-04-24 14:25 millert
3175:
3176: * sudo.pod: Clarify timestamp dir ownership sentence.
3177:
3178: 2007-04-20 12:40 millert
3179:
3180: * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3181: __LIBPAM_VERSION. From Dmitry V. Levin.
3182:
3183: 2007-04-16 12:13 millert
3184:
3185: * sudo.c: -i is also one of the mutually exclusive options to list
3186: it in the warning message. Noted by Chris Pepper.
3187:
3188: 2007-04-12 11:18 millert
3189:
3190: * visudo.pod: The sudoers variable is env_editor, not enveditor.
3191: From Jean-Francois Saucier.
3192:
3193: 2007-03-29 13:30 millert
3194:
3195: * redblack.c: I tracked down the original author so credit him and
3196: include his license info.
3197:
3198: 2007-02-06 13:25 millert
3199:
3200: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3201: sudoers.pod: Fix typos; from Jason McIntyre.
3202:
3203: 2007-02-06 13:23 millert
3204:
3205: * logging.c: Restore signal mask before calling reapchild(). Fixes
3206: a possible race condition that could prevent sudo from properly
3207: waiting for the child.
3208:
3209: 2007-01-31 10:02 millert
3210:
3211: * pwutil.c: Don't declare pw_free() if we are not going to use it.
3212:
3213: 2007-01-31 10:00 millert
3214:
3215: * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3216: and LDR_PRELOAD64. The 64-bit version is not currently
3217: supported. Remove zero_env() prototype as it no longer exists.
3218:
3219: 2006-12-11 13:21 millert
3220:
3221: * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3222: for rfc 3834.
3223:
3224: 2006-09-29 10:53 millert
3225:
3226: * auth/pam.c: If the user enters ^C at the password prompt, abort
3227: instead of trying to authenticate with an empty password (which
3228: causes an annoying delay).
3229:
3230: 2006-08-17 11:26 millert
3231:
3232: * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3233: F_CLOSEM support to closefrom(); adapted from a diff by Darren
3234: Tucker.
3235:
3236: 2006-08-17 11:25 millert
3237:
3238: * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3239: it out too.
3240:
3241: 2006-08-04 11:34 millert
3242:
3243: * config.sub, config.guess: Update to latest versions from
3244: cvs.savannah.gnu.org
3245:
3246: 2006-07-31 13:51 millert
3247:
3248: * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3249: sudo_end{pw,grp}ent() so we can close the passwd/group files
3250: early.
3251:
3252: 2006-07-31 13:50 millert
3253:
3254: * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3255: flavor of set_perms() for systems without setreuid() or
3256: setresuid() that have a working seteuid(). Tested on Darwin.
3257:
3258: 2006-07-30 15:56 millert
3259:
3260: * mon_systrace.c: systrace_read() returns ssize_t
3261:
3262: 2006-07-30 15:53 millert
3263:
3264: * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3265: Knox.
3266:
3267: 2006-07-28 13:12 millert
3268:
3269: * HISTORY: Fix typo; Matt Ackeret
3270:
3271: 2006-07-17 08:25 millert
3272:
3273: * sudo.c: Print sudoers path in -V mode for root.
3274:
3275: 2006-06-15 14:44 millert
3276:
3277: * ldap.c: Do a sub tree search instead of a base search (one level
3278: in the tree only) for sudo right objects. This allows system
3279: administrators to categorize the rights in a tree to make them
3280: easier to manage.
3281:
3282: 2005-12-28 13:52 millert
3283:
3284: * sudo.pod: fix typo
3285:
3286: 2005-12-04 12:16 millert
3287:
3288: * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3289: timelimit and bind_timelimit support; adapted from gentoo.
3290:
3291: 2005-11-23 18:57 millert
3292:
3293: * ldap.c: Support comments that start in the middle of a line
3294:
3295: 2005-11-23 18:56 millert
3296:
3297: * configure.in, configure: Define LDAP_DEPRECATED until we start
3298: using ldap_get_values_len()
3299:
3300: 2005-11-18 09:55 millert
3301:
3302: * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3303:
3304: 2005-11-17 20:39 millert
3305:
3306: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3307: takes an int as an arg so it can be used as a signal handler too.
3308:
3309: 2005-11-17 20:38 millert
3310:
3311: * sudo.c: Make a copy of the shell field in the passwd struct for
3312: NewArgv to avoid a use after free situation after sudo_endpwent()
3313: is called.
3314:
3315: 2005-11-16 20:36 millert
3316:
3317: * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3318: mkstemp() for those poor souls without it.
3319:
3320: 2005-11-15 09:25 millert
3321:
3322: * env.c: Add PERL5DB to list of environment variables to remove.
3323:
3324: 2005-11-13 15:49 millert
3325:
3326: * mon_systrace.c, mon_systrace.h: Instead of calling the check
3327: function twice with a state cookie use separate check/log
3328: functions.
3329:
3330: Check more ioctl() calls for failure.
3331:
3332: systrace_{read,write} now return the number of bytes read/written
3333: or -1 on error.
3334:
3335: 2005-11-13 14:51 millert
3336:
3337: * env.c: Add more environment variables to remove; from gentoo
3338: linux Add some comments about what bad env variables go to what
3339: (more to do)
3340:
3341: 2005-11-11 17:23 millert
3342:
3343: * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3344: the exec since they free up our cached copy of the passwd
3345: structs, including sudo_user and sudo_runas. Fixes a
3346: use-after-free bug.
3347:
3348: 2005-11-11 17:19 millert
3349:
3350: * visudo.c: Close all fd's before executing editor.
3351:
3352: 2005-11-11 17:17 millert
3353:
3354: * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3355: set.
3356:
3357: 2005-11-11 11:22 millert
3358:
3359: * check.c: Fix fd leak when lecture file option is enabled. From
3360: Jerry Brown
3361:
3362: 2005-11-07 11:02 millert
3363:
3364: * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3365: environment variables to remove. From Charles Morris
3366:
3367: 2005-11-01 13:24 millert
3368:
3369: * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3370:
3371: 2005-10-27 20:35 millert
3372:
3373: * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3374:
3375: 2005-08-14 20:32 millert
3376:
3377: * sudoers.pod: Fix typo; Toby Peterson
3378:
3379: 2005-08-02 09:57 millert
3380:
3381: * tsgetgrpw.c: Make return buffers static so they don't get
3382: clobbered
3383:
3384: 2005-07-27 21:14 millert
3385:
3386: * auth/securid5.c: Fix securid5 authentication, was not checking
3387: for ACM_OK. Also add default cases for the two switch()es.
3388: Problem noted by ccon at worldbank
3389:
3390: 2005-06-26 20:10 millert
3391:
3392: * ldap.c: Remove ncat() in favor of just counting bytes and
3393: pre-allocating what is needed.
3394:
3395: 2005-06-26 19:44 millert
3396:
3397: * ldap.c: Fix up some comments Add missing fclose() for the
3398: rootbinddn case
3399:
3400: 2005-06-26 19:38 millert
3401:
3402: * ldap.c: align struct ldap_config
3403:
3404: 2005-06-26 19:37 millert
3405:
3406: * ldap.c: use LINE_MAX for max conf file line size
3407:
3408: 2005-06-26 18:36 millert
3409:
3410: * pathnames.h.in: add _PATH_LDAP_SECRET
3411:
3412: 2005-06-26 18:36 millert
3413:
3414: * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3415:
3416: 2005-06-25 18:03 millert
3417:
3418: * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3419: ldap.conf
3420:
3421: 2005-06-25 17:46 millert
3422:
3423: * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3424: variable by default.
3425:
3426: 2005-06-25 16:39 millert
3427:
3428: * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3429: is safe for LD_PRELOAD
3430:
3431: 2005-06-25 16:15 millert
3432:
3433: * acsite.m4, configure: set need_version=no for all cases; this is
3434: safe for LD_PRELOAD
3435:
3436: 2005-06-25 14:45 millert
3437:
3438: * aclocal.m4: typo
3439:
3440: 2005-06-25 14:33 millert
3441:
3442: * configure, configure.in: Add dragonfly
3443:
3444: 2005-06-25 14:29 millert
3445:
3446: * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3447:
3448: 2005-06-25 14:21 millert
3449:
3450: * configure: regen
3451:
3452: 2005-06-25 14:20 millert
3453:
3454: * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3455: ltoptions.m4 ltsugar.m4 ltversion.m4
3456:
3457: 2005-06-25 14:08 millert
3458:
3459: * config.guess, config.sub, ltmain.sh: merge in local changes:
3460: config.guess: o better openbsd support config.sub: o hiuxmpp
3461: support ltmain.sh o remove requirement that libs must begin with
3462: "lib" o don't print a bunch of crap about library installs o
3463: don't run ldconfig
3464:
3465: 2005-06-25 14:05 millert
3466:
3467: * config.guess, config.sub, ltmain.sh: libtool 1.9f
3468:
3469: 2005-06-25 14:04 millert
3470:
3471: * configure.in: Update with autoupdate and make minor changes for
3472: libtool 1.9f
3473:
3474: 2005-06-22 23:19 millert
3475:
3476: * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3477:
3478: 2005-06-22 23:04 millert
3479:
3480: * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3481: emul/timespec.h: Move declatation of struct timespec to its own
3482: include files for systems without it since it needs time_t
3483: defined.
3484:
3485: 2005-06-22 22:57 millert
3486:
3487: * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3488:
3489: 2005-05-27 01:59 millert
3490:
3491: * auth/pam.c: Call pam_open_session() and pam_close_session() to
3492: give pam_limits a chance to run. Idea from Karel Zak.
3493:
3494: 2005-04-24 19:24 millert
3495:
3496: * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3497: to silence warnings on Solaris
3498:
3499: 2005-04-24 19:22 millert
3500:
3501: * parse.c: include grp.h to silence a warning on Solaris
3502:
3503: 2005-04-23 15:10 millert
3504:
3505: * parse.c: Fix printing of += and -= defaults.
3506:
3507: 2005-04-17 01:21 millert
3508:
3509: * mon_systrace.c: Sanity check number of syscall args with argsize.
3510: Not really needed but a little paranoia never hurts.
3511:
3512: 2005-04-17 01:18 millert
3513:
3514: * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3515: void * Use int, not size_t/ssize_t for systrace lengths (since it
3516: uses int)
3517:
3518: 2005-04-16 03:14 millert
3519:
3520: * mon_systrace.c: Add some memsets for paranoia Fix namespace
3521: collsion w/ error Check rval of decode_args() and update_env()
3522: Remove improper setting of validated variable
3523:
3524: 2005-04-11 21:37 millert
3525:
3526: * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3527: file if def_ignore_sudoers is not set and call LDAP versions from
3528: display_privs() and display_cmnd() instead of directly from
3529: main(). Because of this we need to defer closing the ldap
3530: connection until after -l processing has ocurred and we must pass
3531: in the ldap pointer to display_privs() and display_cmnd().
3532:
3533: 2005-04-11 21:33 millert
3534:
3535: * ldap.c: Reorganize LDAP code to better match normal sudoers
3536: parsing. Instead of storing strings for later printing in -l
3537: mode we do another query since the authenticating user and the
3538: user being listed may not be the same (the new -U flag). Also
3539: add support for "sudo -l command".
3540:
3541: There is still a fair bit if duplicated code that can probably be
3542: refactored.
3543:
3544: 2005-04-11 00:37 millert
3545:
3546: * ldap.c: Replace pass variable with do_netgr for better
3547: readability.
3548:
3549: 2005-04-10 23:49 millert
3550:
3551: * ldap.c: use DPRINTF macro
3552:
3553: 2005-04-10 23:18 millert
3554:
3555: * ldap.c: estrdup, not strdup
3556:
3557: 2005-04-10 17:44 millert
3558:
3559: * parse.c: Add macro to test if the tag changed to improve
3560: readability.
3561:
3562: 2005-04-10 17:40 millert
3563:
3564: * parse.c: Avoid printing defaults header if there are no defaults
3565: to print...
3566:
3567: 2005-04-10 15:29 millert
3568:
3569: * glob.c: Fix a warning on systems without strlcpy().
3570:
3571: 2005-04-10 13:32 millert
3572:
3573: * pwutil.c: Use macros where possible for sudo_grdup() like
3574: sudo_pwdup().
3575:
3576: 2005-04-08 17:04 millert
3577:
3578: * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3579: add in tv_usec / 1000000.
3580:
3581: 2005-03-29 23:38 millert
3582:
3583: * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3584: should be 1, not 0 for Heimdal. From Alex Plotnick.
3585:
3586: 2005-03-29 09:29 millert
3587:
3588: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3589: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3590: pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3591: Add efree() for consistency with emalloc() et al. Allows us to
3592: rely on C89 behavior (free(NULL) is valid) even on K&R.
3593:
3594: 2005-03-28 22:33 millert
3595:
3596: * parse.c, sudo.c: Move initgroups() for -U option into
3597: display_privs() so group matching in sudoers works correctly.
3598:
3599: 2005-03-26 21:34 millert
3600:
3601: * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3602: with sudo_ldap_close.
3603:
3604: 2005-03-26 20:01 millert
3605:
3606: * parse.c: Add missing space in Defaults printing
3607:
3608: 2005-03-25 12:36 millert
3609:
3610: * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3611: size computaton and string copies.
3612:
3613: 2005-03-18 22:08 millert
3614:
3615: * pwutil.c: Zero old pw_passwd before replacing with version from
3616: shadow file.
3617:
3618: 2005-03-18 22:07 millert
3619:
3620: * configure, configure.in: Only attempt shadow password detection
3621: if PAM is not being used Add shadow_* variables to make shadow
3622: password detection more generic.
3623:
3624: 2005-03-18 21:46 millert
3625:
3626: * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3627: than CPPFLAGS
3628:
3629: 2005-03-12 19:27 millert
3630:
3631: * sudoers.pod: use a non-breaking space to avoid a double space
3632: after e.g.
3633:
3634: 2005-03-12 19:26 millert
3635:
3636: * sudo.pod: commna, not colon after e.g.
3637:
3638: 2005-03-12 18:43 millert
3639:
3640: * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3641: at least uses __execve() internally.
3642:
3643: 2005-03-12 12:29 millert
3644:
3645: * indent.pro: Match reality a bit more.
3646:
3647: 2005-03-12 12:27 millert
3648:
3649: * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3650:
3651: 2005-03-11 23:42 millert
3652:
3653: * pwutil.c: Store shadow password after making a local copy of
3654: struct passwd in case normal and shadow routines use the same
3655: internal buffer in libc.
3656:
3657: 2005-03-10 20:57 millert
3658:
3659: * alloc.c, logging.c: Make varargs usage consistent with the rest
3660: of the code.
3661:
3662: 2005-03-10 10:09 millert
3663:
3664: * sudo_noexec.c: Wrap more of the exec family since on Linux the
3665: others do not appear to go through the normal execve() path.
3666:
3667: 2005-03-10 09:57 millert
3668:
3669: * visudo.c: make print_unused static like proto says
3670:
3671: 2005-03-10 09:55 millert
3672:
3673: * glob.c: silence a warning on K&R systems
3674:
3675: 2005-03-10 09:51 millert
3676:
3677: * parse.c, alias.c, error.c: make this build in K&R land
3678:
3679: 2005-03-07 22:21 millert
3680:
3681: * toke.c: regen
3682:
3683: 2005-03-05 22:46 millert
3684:
3685: * ldap.c: return(foo) not return foo optimize _atobool() slightly
3686:
3687: 2005-03-05 22:40 millert
3688:
3689: * ldap.c: Use TRUE/FALSE
3690:
3691: 2005-03-05 22:31 millert
3692:
3693: * ldap.c: Reformat to match the rest of sudo's code.
3694:
3695: 2005-03-05 19:33 millert
3696:
3697: * sudo.pod: I am the primary author
3698:
3699: 2005-02-22 22:28 millert
3700:
3701: * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3702: confused too many people and really isn't needed in a
3703: configure-oriented world.
3704:
3705: 2005-02-22 22:28 millert
3706:
3707: * INSTALL: alternate -> alternative
3708:
3709: 2005-02-22 22:26 millert
3710:
3711: * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3712: have issues with TCSAFLUSH.
3713:
3714: 2005-02-22 22:16 millert
3715:
3716: * toke.l: Allow leading blanks before Defaults and Foo_Alias
3717: definitions
3718:
3719: 2005-02-22 22:14 millert
3720:
3721: * Makefile.in: fix rules to build toke.o and gram.o in devel mode
3722:
3723: 2005-02-20 13:00 millert
3724:
3725: * sudoers.pod: env_keep overrides set_logname
3726:
3727: 2005-02-20 12:57 millert
3728:
3729: * env.c: Fix disabling set_logname and make env_keep override
3730: set_logname.
3731:
3732: 2005-02-20 12:28 millert
3733:
3734: * compat.h, config.h.in, configure, configure.in: No longer need
3735: memmove()
3736:
3737: 2005-02-20 11:48 millert
3738:
3739: * env.c, sudo.c: Just clean the environment once. This assumes
3740: that any further setenv/putenv will be able to handle the fact
3741: that we replaced environ with our own malloc'd copy but all the
3742: implementations I've checked do.
3743:
3744: 2005-02-15 23:16 millert
3745:
3746: * env.c, sudo.c: In -i mode, base the value of insert_env()'s
3747: dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
3748: into rebuild_env()
3749:
3750: 2005-02-13 00:33 millert
3751:
3752: * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
3753: and prev_user into init_vars() since user_shell at least is
3754: needed there.
3755:
3756: 2005-02-12 18:51 millert
3757:
3758: * Makefile.in: fix devel builds
3759:
3760: 2005-02-12 18:46 millert
3761:
3762: * check.c, sudo.c: Fix some printf format mismatches on error.
3763:
3764: 2005-02-12 18:33 millert
3765:
3766: * configure, gram.c, toke.c: regen
3767:
3768: 2005-02-12 17:56 millert
3769:
3770: * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
3771: alloc.c, check.c, closefrom.c, compat.h, configure.in,
3772: defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
3773: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
3774: interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
3775: match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
3776: set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
3777: strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
3778: sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
3779: utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
3780: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
3781: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
3782: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3783: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
3784: emul/utime.h: Update copyright years.
3785:
3786: 2005-02-12 16:46 millert
3787:
3788: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
3789: version 1.7
3790:
3791: 2005-02-12 16:16 millert
3792:
3793: * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
3794: entries.
3795:
3796: 2005-02-11 18:06 millert
3797:
3798: * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
3799: to warn about printf-like format mismatches
3800:
3801: 2005-02-10 00:16 millert
3802:
3803: * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
3804: generated from cvs logs
3805:
3806: 2005-02-10 00:03 millert
3807:
3808: * set_perms.c: Use warning/error instead of perror/fatal.
3809:
3810: 2005-02-09 23:13 millert
3811:
3812: * config.guess: Update OpenBSD section
3813:
3814: 2005-02-09 23:10 millert
3815:
3816: * UPGRADE: Add upgrading noted for 1.7
3817:
3818: 2005-02-09 23:00 millert
3819:
3820: * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
3821: environment, just prune out entries based on the env_delete and
3822: env_check lists. Base building up the new environment on the
3823: current environment and the variables we removed initially.
3824:
3825: 2005-02-09 22:23 millert
3826:
3827: * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
3828: if locales are supported, just to be safe.
3829:
3830: 2005-02-09 22:19 millert
3831:
3832: * toke.c, toke.l: Cast argument to ctype functions to unsigned
3833: char.
3834:
3835: 2005-02-07 22:56 millert
3836:
3837: * env.c: correct value for DID_USER
3838:
3839: 2005-02-07 22:55 millert
3840:
3841: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
3842: <compat.h> not "compat.h"
3843:
3844: 2005-02-07 22:51 millert
3845:
3846: * defaults.c: Reset the environment by default.
3847:
3848: 2005-02-07 22:50 millert
3849:
3850: * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
3851: malloc an new vector if execve() fails.
3852:
3853: 2005-02-06 23:16 millert
3854:
3855: * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
3856: execve(2) and wrap the command in sh if we get ENOEXEC.
3857:
3858: 2005-02-05 23:01 millert
3859:
3860: * sudo_noexec.c: Only include time.h on systems that lack struct
3861: timespec which gets defind in compat.h (using time_t).
3862:
3863: 2005-02-05 22:59 millert
3864:
3865: * sudo_noexec.c: Include time.h for time_t in compat.h for systems
3866: w/o struct timespec.
3867:
3868: 2005-02-05 22:56 millert
3869:
3870: * configure, compat.h, config.h.in, configure.in: use bcopy on
3871: systems w/o memmove
3872:
3873: 2005-02-05 22:31 millert
3874:
3875: * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
3876: so limit its use to gcc >= 2.8.
3877:
3878: 2005-02-05 21:21 millert
3879:
3880: * Makefile.in: Add explicit rule to build sudo_noexec.lo
3881:
3882: 2005-02-05 17:56 millert
3883:
3884: * INSTALL.configure, Makefile.in: No longer depend on VPATH;
3885: pointed out a bunch of missed dependencies.
3886:
3887: 2005-02-05 13:18 millert
3888:
3889: * TROUBLESHOOTING: Help for PAM when account section is missing
3890:
3891: 2005-02-05 13:01 millert
3892:
3893: * auth/pam.c: Give user a clue when there is a missing "account"
3894: section in the PAM config.
3895:
3896: 2005-02-05 10:22 millert
3897:
3898: * auth/pam.c: Better error handling.
3899:
3900: 2005-02-05 09:57 millert
3901:
3902: * configure, config.h.in, configure.in: Move _FOO_SOURCE to
3903: CPPFLAGS so it takes effect as early as possible. Silences a
3904: warning about isblank() on linux.
3905:
3906: 2005-02-04 21:49 millert
3907:
3908: * auth/pam.c: Fix typo (missing comma) that caused an incorrect
3909: number of args to be passed to log_error().
3910:
3911: 2005-01-31 23:03 millert
3912:
3913: * pwutil.c: Don't try to destroy a tree we didn't create.
3914:
3915: 2005-01-27 10:42 millert
3916:
3917: * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
3918: env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
3919: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
3920: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3921: parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
3922: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
3923: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
3924: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
3925: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
3926: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
3927: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3928: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
3929: rcsids
3930:
3931: 2005-01-21 10:34 millert
3932:
3933: * configure, configure.in: Fix error message when mixing invalid
3934: auth types
3935:
3936: 2005-01-21 10:32 millert
3937:
3938: * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
3939: default if the OS supports them.
3940:
3941: 2005-01-21 10:29 millert
3942:
3943: * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
3944:
3945: 2005-01-21 10:29 millert
3946:
3947: * configure.in: Better checking for conflicting authentication
3948: methods Display the authentication methods used at the end of
3949: configure Rename --with-authenticate -> --with-aixauth Use
3950: --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
3951: default on systems that support them unless disabled. Add
3952: OSMAJOR variable that replaces old OSREV; now OSREV has full
3953: version number
3954:
3955: 2005-01-17 19:40 millert
3956:
3957: * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
3958:
3959: 2005-01-14 13:35 millert
3960:
3961: * configure.in: Replace: test -n "$FOO" || FOO="bar"
3962:
3963: With: : ${FOO='bar'}
3964:
3965: 2005-01-09 18:58 millert
3966:
3967: * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
3968: only call private passwd/group routines when using a nonstandard
3969: passwd/group file.
3970:
3971: 2005-01-06 10:34 millert
3972:
3973: * CHANGES: sync
3974:
3975: 2005-01-05 22:16 millert
3976:
3977: * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
3978: fields so add getpwent()/getgrent() functions and call those.
3979:
3980: 2005-01-05 17:29 millert
3981:
3982: * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
3983:
3984: 2005-01-05 17:18 millert
3985:
3986: * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
3987: in the clean target Add devdir variable and use it to specify the
3988: path to parser sources
3989:
3990: 2005-01-05 17:17 millert
3991:
3992: * configure: regen
3993:
3994: 2005-01-05 17:17 millert
3995:
3996: * configure.in: Add a devdir variables that defaults to $(srcdir)
3997: and is set to . if --devel was specified. Allows for proper
3998: dependecies building the parser.
3999:
4000: 2005-01-05 14:50 millert
4001:
4002: * testsudoers.c: Add support for custom passwd/group files.
4003:
4004: 2005-01-05 14:47 millert
4005:
4006: * Makefile.in: Build private copy of pwutil.o for testsudoers with
4007: MYPW defined so it uses our own passwd/group routines.
4008:
4009: 2005-01-05 14:46 millert
4010:
4011: * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4012: sudo_setspent/sudo_endspent stubs instead. We can now just use
4013: the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4014: about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4015:
4016: 2005-01-05 14:44 millert
4017:
4018: * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4019: Use global buffers for passwd/group structs Rename functions from
4020: sudo_* to my_*
4021:
4022: 2005-01-05 14:43 millert
4023:
4024: * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4025:
4026: 2005-01-05 14:42 millert
4027:
4028: * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4029: instead.
4030:
4031: 2005-01-05 14:41 millert
4032:
4033: * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4034: getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4035: are no longer needed. Also add preprocessor magic to use private
4036: versions of the passwd and group routines if MYPW is defined (for
4037: use by testsudoers).
4038:
4039: 2005-01-04 22:40 millert
4040:
4041: * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4042: if there are fields we don't handle they end up as 0.
4043:
4044: 2005-01-04 20:10 millert
4045:
4046: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4047: pwutil.c
4048:
4049: 2005-01-04 20:09 millert
4050:
4051: * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4052: variables for better readability.
4053:
4054: 2005-01-04 20:08 millert
4055:
4056: * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4057: that support alternate passwd and group files.
4058:
4059: 2005-01-04 20:07 millert
4060:
4061: * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4062: its own file. This allows visudo and testsudoers to use the
4063: pw/gr cache too.
4064:
4065: 2005-01-01 19:31 millert
4066:
4067: * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4068: based on the terminal width.
4069:
4070: 2005-01-01 12:41 millert
4071:
4072: * match.c, visudo.c, testsudoers.c: Only check group vector in
4073: usergr_matches() if we are matching the invoking or list user.
4074: Always check the group members, even if there was a group vector.
4075:
4076: 2004-12-17 17:24 millert
4077:
4078: * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4079:
4080: 2004-12-17 13:12 millert
4081:
4082: * CHANGES, TODO: checkpoint
4083:
4084: 2004-12-16 14:20 millert
4085:
4086: * sudo.c: sort usage
4087:
4088: 2004-12-16 14:20 millert
4089:
4090: * sudo.pod: Sort command line options
4091:
4092: 2004-12-16 13:33 millert
4093:
4094: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4095: sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4096: start closing at a point other than 3. Add closefrom_override
4097: sudoers option and -C sudo flag to allow the user to specify a
4098: different closefrom starting point.
4099:
4100: 2004-12-16 13:25 millert
4101:
4102: * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4103:
4104: 2004-12-15 22:55 millert
4105:
4106: * LICENSE: no more UCB strcasecmp
4107:
4108: 2004-12-15 22:54 millert
4109:
4110: * strcasecmp.c: replace BSD licensed one with version derived from
4111: pdksh
4112:
4113: 2004-12-09 21:07 millert
4114:
4115: * sudo.c: Fix last commit.
4116:
4117: 2004-12-09 19:26 millert
4118:
4119: * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4120: to /dev/null if not.
4121:
4122: 2004-12-03 13:57 millert
4123:
4124: * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4125:
4126: 2004-12-03 13:52 millert
4127:
4128: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4129: Use TIME_WITH_SYS_TIME
4130:
4131: 2004-12-03 13:48 millert
4132:
4133: * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4134:
4135: 2004-12-02 11:18 millert
4136:
4137: * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4138: being set unconditionally on darwin. From Toby Peterson.
4139:
4140: 2004-12-02 10:40 millert
4141:
4142: * getspwuid.c: Check rbinsert() return value. In the case of faked
4143: up entries there is usually a negative response cached that we
4144: need to overwrite.
4145:
4146: In pwfree() don't try to zero out a NULL pw_passwd pointer.
4147:
4148: 2004-12-02 09:53 millert
4149:
4150: * mon_systrace.c: Use the double fork trick to avoid the monitor
4151: process being waited for by the main program run through sudo.
4152:
4153: 2004-11-29 12:52 millert
4154:
4155: * sudo.c: Call initgroups() in -U mode so group matches work
4156: normally.
4157:
4158: 2004-11-29 12:34 millert
4159:
4160: * def_data.h, mkdefaults: Don't print a trailing comma for the last
4161: entry in enum def_tupple
4162:
4163: 2004-11-28 16:08 millert
4164:
4165: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4166: lecture, listpw and verifypw are used in boolean context.
4167:
4168: 2004-11-28 16:05 millert
4169:
4170: * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4171: context should be "all", not "any".
4172:
4173: 2004-11-26 14:21 millert
4174:
4175: * def_data.in, defaults.c: Allow tuples that can be used as
4176: booleans to be used as boolean TRUE. In this case the 2nd
4177: possible value of the tuple is used for TRUE.
4178:
4179: 2004-11-25 12:23 millert
4180:
4181: * configure, configure.in: Correct the test for 2-parameter
4182: timespecsub
4183:
4184: 2004-11-25 12:20 millert
4185:
4186: * sudo.h: Add strub struct definitions for passwd, timeval and
4187: timespec
4188:
4189: 2004-11-25 12:09 millert
4190:
4191: * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4192: check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4193: fix a typo in the gettimeofday check.
4194:
4195: 2004-11-24 16:44 millert
4196:
4197: * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4198: for visudo and testsudoers.
4199:
4200: 2004-11-24 16:31 millert
4201:
4202: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4203: option to use in conjunction with -l instead of -u. Add support
4204: for "sudo -l command" to test a specific command.
4205:
4206: 2004-11-24 16:28 millert
4207:
4208: * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4209: it has not been set. Previously it was set by sudo "ALL" in the
4210: parser but at that point the fully-qualified pathname has not yet
4211: been found.
4212:
4213: 2004-11-23 18:18 millert
4214:
4215: * parse.c, testsudoers.c: Correctly handle multiple privileges per
4216: userspec and runas inheritence.
4217:
4218: 2004-11-21 14:09 millert
4219:
4220: * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4221: init_defaults.
4222:
4223: 2004-11-19 18:04 millert
4224:
4225: * toke.c, toke.l: make per-command defaults work with sudoedit
4226:
4227: 2004-11-19 18:00 millert
4228:
4229: * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4230: FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4231: approriate defaults variable.
4232:
4233: 2004-11-19 17:09 millert
4234:
4235: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4236: Document per-command Defaults.
4237:
4238: 2004-11-19 16:35 millert
4239:
4240: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4241: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4242: command-specific Defaults entries. E.g.
4243: Defaults!/usr/bin/vi noexec
4244:
4245: 2004-11-19 15:03 millert
4246:
4247: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4248: occurence of user_matches() -> runas_matches() missed previously
4249: runas_matches(), host_matches() and cmnd_matches() only really
4250: need to pass in a list of members. user_matches() still needs to
4251: pass in a passwd struct because of "sudo -l"
4252:
4253: 2004-11-19 14:46 millert
4254:
4255: * parse.c: Check def_authenticate, def_noexec and def_monitor when
4256: setting return flags. XXX May be better to just set the defaults
4257: directly and get rid of those flags.
4258:
4259: 2004-11-19 13:39 millert
4260:
4261: * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4262: error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4263: getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4264: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4265: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4266: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4267: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4268: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4269: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4270: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4271: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4272: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4273: <config.h> Not: #include "config.h" That way we get the correct
4274: config.h when build dir != src dir
4275:
4276: 2004-11-19 13:30 millert
4277:
4278: * Makefile.in: Back out part of rev 1.263; fix -I order
4279:
4280: 2004-11-19 13:12 millert
4281:
4282: * toke.c, toke.l: More robust parsing if #include; could be much
4283: better still.
4284:
4285: 2004-11-19 12:55 millert
4286:
4287: * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4288: consistent.
4289:
4290: 2004-11-19 12:35 millert
4291:
4292: * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4293: routines out into their own file.
4294:
4295: 2004-11-19 12:32 millert
4296:
4297: * error.h: __attribute__ is already defined in compat.h
4298:
4299: 2004-11-19 12:30 millert
4300:
4301: * visudo.c: quit() should not be __noreturn__ as it is non-void on
4302: some platforms.
4303:
4304: 2004-11-19 12:24 millert
4305:
4306: * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4307: error/warning functions like err/warn but that call an additional
4308: cleanup routine in the error case. This means we no longer need
4309: to compile a special version of alloc.o for visudo.
4310:
4311: 2004-11-19 11:54 millert
4312:
4313: * parse.h: Clarify comments about the data structures
4314:
4315: 2004-11-18 15:28 millert
4316:
4317: * visudo.c: Add support for VISUAL and EDITOR containing command
4318: line args. If env_editor is not set any args in VISUAL and
4319: EDITOR are ignored. Arguments are also now supported in
4320: def_editor.
4321:
4322: 2004-11-17 14:25 millert
4323:
4324: * parse.h: alias_matches() is no more
4325:
4326: 2004-11-17 14:09 millert
4327:
4328: * CHANGES, TODO: sync
4329:
4330: 2004-11-17 13:19 millert
4331:
4332: * Makefile.in: When regenerating the parser, don't replace gram.h
4333: unless it has changed.
4334:
4335: 2004-11-17 11:56 millert
4336:
4337: * Makefile.in: remove Makefile.binary for distclean
4338:
4339: 2004-11-17 11:18 millert
4340:
4341: * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4342: to make sure we can't overflow new_env.
4343:
4344: 2004-11-17 10:33 millert
4345:
4346: * sudo_edit.c: paranoia when stripping trailing slashes from
4347: tempdir.
4348:
4349: 2004-11-16 19:00 millert
4350:
4351: * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4352:
4353: 2004-11-16 18:59 millert
4354:
4355: * configure, configure.in, config.h.in, sudo.c: Add configure check
4356: for getgroups()
4357:
4358: 2004-11-16 18:55 millert
4359:
4360: * ldap.c: Use supplementary group vector in struct sudo_user.
4361:
4362: 2004-11-16 18:40 millert
4363:
4364: * match.c: Only do string comparisons on the group members if there
4365: is no supplemental group list.
4366:
4367: 2004-11-16 16:10 millert
4368:
4369: * CHANGES, TODO: sync
4370:
4371: 2004-11-16 15:54 millert
4372:
4373: * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4374: trailing slash so chop off any trailing slashes we see and add an
4375: explicit one.
4376:
4377: 2004-11-16 12:02 millert
4378:
4379: * match.c: remove bogus XXX comment
4380:
4381: 2004-11-16 11:10 millert
4382:
4383: * match.c: Get rid of alias_matches and correctly fall through to
4384: the non-alias cases when there is no alias with the specified
4385: name.
4386:
4387: 2004-11-16 10:47 millert
4388:
4389: * getspwuid.c: Cache non-existent passwd/group entries too.
4390:
4391: 2004-11-16 10:45 millert
4392:
4393: * gram.c: regen
4394:
4395: 2004-11-15 23:32 millert
4396:
4397: * getspwuid.c: fix typo
4398:
4399: 2004-11-15 23:24 millert
4400:
4401: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4402: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4403: Implement group caching and use the passwd and group caches
4404: throughout.
4405:
4406: 2004-11-15 14:43 millert
4407:
4408: * match.c: Properly negate the return value of alias_matches() when
4409: appropriate.
4410:
4411: 2004-11-15 14:38 millert
4412:
4413: * match.c: Make hostname_matches() return TRUE for a match, else
4414: FALSE like the caller expects.
4415:
4416: 2004-11-15 13:24 millert
4417:
4418: * Makefile.in: Add missing dependencies on gram.h
4419:
4420: 2004-11-15 13:06 millert
4421:
4422: * match.c: Use runas_matches in alias_matches() now that we have
4423: it.
4424:
4425: 2004-11-15 13:00 millert
4426:
4427: * parse.c, parse.h: Expand aliases in "sudo -l" mode
4428:
4429: 2004-11-15 12:33 millert
4430:
4431: * gram.y, match.c: Use ALIAS for the member type when storing an
4432: alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4433: match.c relies on the more generic type. Expand runas_matches
4434: instead of calling user_matches() inside of it since
4435: user_matches() looks up USERALIASes, not RUNASALIASes.
4436:
4437: 2004-11-15 12:05 millert
4438:
4439: * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4440: passwd entry.
4441:
4442: 2004-11-15 10:53 millert
4443:
4444: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4445: configure.in, err.c, error.c, error.h, defaults.c, env.c,
4446: find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4447: sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4448: local error/warning functions like err/warn but that call an
4449: additional cleanup routine in the error case. This means we no
4450: longer need to compile a special version of alloc.o for visudo.
4451:
4452: 2004-11-15 09:59 millert
4453:
4454: * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4455: since the latter checks for "#uid".
4456:
4457: 2004-11-15 09:53 millert
4458:
4459: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4460: db entries in 2 reb-black trees; one indexed by uid, the other by
4461: user name. The data returned from the cache should be considered
4462: read-only and is destroyed by sudo_endpwent().
4463:
4464: 2004-11-15 09:50 millert
4465:
4466: * match.c: add cast to uid_t
4467:
4468: 2004-11-15 09:49 millert
4469:
4470: * gram.y: missing free in alias_destroy
4471:
4472: 2004-11-15 09:49 millert
4473:
4474: * redblack.c: Can't use rbapply() for rbdestroy since the
4475: destructor is passed a data pointer, not a node pointer.
4476:
4477: 2004-11-14 23:06 millert
4478:
4479: * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4480: versions of setpwent() and endpwent() that set/end the shadow
4481: password file too.
4482:
4483: 2004-11-14 22:55 millert
4484:
4485: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4486: visudo.c: Store aliases in a red-black tree.
4487:
4488: 2004-11-14 22:52 millert
4489:
4490: * Makefile.in, redblack.c, redblack.h: red-black tree
4491: implementation
4492:
4493: 2004-11-14 22:37 millert
4494:
4495: * visudo.c: Edit all sudoers file if there were unused or undefined
4496: aliases and we are in strict mode.
4497:
4498: 2004-11-12 11:19 millert
4499:
4500: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4501: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4502: Bring back the "secure_path" Defaults option now that Defaults
4503: take effect before the path is searched.
4504:
4505: 2004-11-11 12:22 millert
4506:
4507: * logging.c, parse.c: A user can always list their own entries,
4508: even with -u. Better error message when failing to list another
4509: user's entries.
4510:
4511: 2004-11-11 12:12 millert
4512:
4513: * parse.c, sudo.c, sudo.h: The syntax to list another user's
4514: entries is now "-u otheruser -l". Only root or users with sudo
4515: "ALL" may list other user's entries.
4516:
4517: 2004-11-11 11:30 millert
4518:
4519: * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4520: SECURITY NOTES
4521:
4522: 2004-11-11 11:25 millert
4523:
4524: * env.c: strip CDPATH too
4525:
4526: 2004-11-11 11:20 millert
4527:
4528: * env.c: strip exported bash functions from the environment.
4529:
4530: 2004-10-27 12:16 millert
4531:
4532: * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4533: variables for real commands and sudoedit. This avoids a
4534: confusing message when a user tries "sudo -l" or "sudo -v" and is
4535: denied.
4536:
4537: 2004-10-27 12:06 millert
4538:
4539: * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4540: appending lists too
4541:
4542: 2004-10-26 18:39 millert
4543:
4544: * logging.c: Convert some bitwise AND to ISSET
4545:
4546: 2004-10-26 18:29 millert
4547:
4548: * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4549:
4550: 2004-10-26 18:29 millert
4551:
4552: * CHANGES, TODO: sync
4553:
4554: 2004-10-26 18:28 millert
4555:
4556: * BUGS: new parser fixes most of the outstanding bugs
4557:
4558: 2004-10-26 18:27 millert
4559:
4560: * configure: regen
4561:
4562: 2004-10-26 18:26 millert
4563:
4564: * visudo.c: Rework for the new parser. Now checks for unused
4565: aliases in sudoers.
4566:
4567: 2004-10-26 18:25 millert
4568:
4569: * testsudoers.c: Rewrite for the new parser. Now supports a -d
4570: flag (dump) and adds a -h flag (host). It now defaults to the
4571: local hostname unless otherwise specified.
4572:
4573: 2004-10-26 18:23 millert
4574:
4575: * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4576: parse.h)
4577:
4578: 2004-10-26 18:22 millert
4579:
4580: * sudo.c: Update for new parse. We now call find_path() *after* we
4581: have updated the global defaults based on sudoers. Also adds
4582: support for listing other user's privs if you are root.
4583:
4584: 2004-10-26 18:21 millert
4585:
4586: * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4587: rewind().
4588:
4589: 2004-10-26 18:20 millert
4590:
4591: * logging.c, logging.h: Add NO_STDERR flag.
4592:
4593: 2004-10-26 18:19 millert
4594:
4595: * ldap.c: Split sudo_ldap_check() into three pieces:
4596: sudo_ldap_open(), udo_ldap_update_defaults() and
4597: sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4598: default options, find the command in the user's path, and then
4599: check whether the user is allowed to run it. The important thing
4600: here is that the default runas user may be specified as a default
4601: option and that needs to be set before we search for the command.
4602:
4603: 2004-10-26 18:17 millert
4604:
4605: * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4606: warning.
4607:
4608: 2004-10-26 18:16 millert
4609:
4610: * defaults.h: Add prototype for update_defaults()
4611:
4612: 2004-10-26 18:16 millert
4613:
4614: * defaults.c: Don't warn about line numbers now that we operate on
4615: a set of data structures (or LDAP) and not a file.
4616:
4617: 2004-10-26 18:15 millert
4618:
4619: * config.h.in: No long use lsearch()
4620:
4621: 2004-10-26 18:14 millert
4622:
4623: * Makefile.in: Update for new and changed file names.
4624:
4625: 2004-10-26 18:14 millert
4626:
4627: * LICENSE: no more BSD lsearch.c
4628:
4629: 2004-10-26 18:14 millert
4630:
4631: * match.c: foo_matches() routines now live in match.c Added
4632: user_matches(), runas_matches(), host_matches(), cmnd_matches()
4633: and alias_matches() that operate on the parsed sudoers file.
4634:
4635: 2004-10-26 18:12 millert
4636:
4637: * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4638: -> switch_buffer() WORD no longer needs to exclude '@' kill
4639: yywrap()
4640:
4641: 2004-10-26 18:10 millert
4642:
4643: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4644: Rewritten parser that converts sudoers into a set of data
4645: structures. This eliminates ordering issues and makes it
4646: possible to apply sudoers Defaults entries before searching for
4647: the command.
4648:
4649: 2004-10-26 18:09 millert
4650:
4651: * configure.in, lsearch.c, emul/search.h: We won't be using
4652: lsearch() any longer.
4653:
4654: 2004-10-26 18:07 millert
4655:
4656: * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4657: has no entry.
4658:
4659: 2004-10-26 16:09 millert
4660:
4661: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4662: visudo.man.in: regen
4663:
4664: 2004-10-26 16:09 millert
4665:
4666: * visudo.pod: Update warnings to match new visudo
4667:
4668: 2004-10-26 16:08 millert
4669:
4670: * sudoers.pod: The new parser doesn't have the old ordering
4671: constraints.
4672:
4673: 2004-10-26 16:08 millert
4674:
4675: * sudo.pod: Document that -l now takes an optional username
4676: argument
4677:
4678: 2004-10-25 13:44 millert
4679:
4680: * RUNSON: AIX 5.2.0.0 works
4681:
4682: 2004-10-25 13:38 millert
4683:
4684: * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4685: instead. Fixes a compilation problem with Solaris 9's native
4686: LDAP.
4687:
4688: Set FLAG_MONITOR when needed.
4689:
4690: 2004-10-23 13:32 millert
4691:
4692: * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4693: match the traced process. Fixes relative paths.
4694:
4695: 2004-10-21 12:31 millert
4696:
4697: * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4698:
4699: 2004-10-13 12:52 millert
4700:
4701: * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4702: requires set_reuid() or setresuid()
4703:
4704: 2004-10-13 12:46 millert
4705:
4706: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4707: configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4708: saved uids; they aren't worth bothering with.
4709:
4710: 2004-10-07 16:23 millert
4711:
4712: * glob.c: remove call to issetugid()
4713:
4714: 2004-10-07 14:57 millert
4715:
4716: * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
4717: wildcards. Now that we use glob() the bug is fixed.
4718:
4719: 2004-10-07 14:52 millert
4720:
4721: * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
4722: and stat each result that matches the basename of the user's
4723: command. This makes "cd /usr/bin ; sudo ./blah" work when
4724: sudoers allows /usr/bin/blah. Fixes bug #143.
4725:
4726: 2004-10-07 14:27 millert
4727:
4728: * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
4729: for extended glob (GLOB_TILDE and GLOB_BRACE)
4730:
4731: 2004-10-07 12:59 millert
4732:
4733: * config.h.in, configure, configure.in: Check for a glob() that
4734: supports GLOB_BRACE and GLOB_TILDE
4735:
4736: 2004-10-07 12:51 millert
4737:
4738: * LICENSE: reference glob
4739:
4740: 2004-10-07 12:50 millert
4741:
4742: * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
4743: some unneeded extensions removed.
4744:
4745: 2004-10-05 17:26 millert
4746:
4747: * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
4748: fail. It probably means we are out of space in the stack gap...
4749:
4750: 2004-10-05 17:20 millert
4751:
4752: * CHANGES: sync
4753:
4754: 2004-10-05 16:53 millert
4755:
4756: * mon_systrace.c: Take a stab at ldap sudoers support here.
4757:
4758: 2004-10-05 15:13 millert
4759:
4760: * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
4761: SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
4762: inadvertanly kill itself.
4763:
4764: 2004-10-05 14:21 millert
4765:
4766: * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
4767:
4768: 2004-10-05 14:15 millert
4769:
4770: * mon_systrace.c: When modifying the environment, don't replace
4771: envp when we can get away with just rewriting pointers in the
4772: traced process.
4773:
4774: 2004-10-05 13:46 millert
4775:
4776: * mon_systrace.c, mon_systrace.h: Add environment updating via
4777: STRIOCINJECT (if available).
4778:
4779: 2004-10-05 10:22 millert
4780:
4781: * sudoers.cat, sudoers.man.in: regen
4782:
4783: 2004-10-04 16:15 millert
4784:
4785: * lex.yy.c: regen
4786:
4787: 2004-10-04 16:15 millert
4788:
4789: * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
4790: not yyless(1)
4791:
4792: 2004-10-04 12:09 millert
4793:
4794: * mon_systrace.c: Include file is now mon_systrace.h
4795:
4796: 2004-10-04 12:07 millert
4797:
4798: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
4799: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
4800: sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
4801: tracing, it is now "monitoring" which should be more a obvious
4802: name to non-hackers.
4803:
4804: 2004-10-01 15:06 millert
4805:
4806: * mon_systrace.c, mon_systrace.h: Fix some XXX
4807:
4808: 2004-10-01 14:30 millert
4809:
4810: * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
4811: 1024 as the max # of entries (the max that systrace(4) allows).
4812:
4813: Only need to use SYSTR_POLICY_ASSIGN once
4814:
4815: Change check_syscall() -> find_handler() and have it return the
4816: handler instead of just running it. We need this since handler
4817: now have two parts: one part that generates and answer and
4818: another that gets called after the answer is accepted (to do
4819: logging).
4820:
4821: Add some missing check_exec for emul execv
4822:
4823: 2004-10-01 10:58 millert
4824:
4825: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
1.4 ! millert 4826: $Sudo$ tags.
1.1 millert 4827:
4828: 2004-10-01 10:47 millert
4829:
4830: * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
4831:
4832: 2004-09-30 20:46 millert
4833:
4834: * Makefile.in: add trace_systrace.o dependency
4835:
4836: 2004-09-30 19:00 millert
4837:
4838: * configure, configure.in: Also look for systrace.h in
4839: /usr/include/linux
4840:
4841: 2004-09-30 18:27 millert
4842:
4843: * mon_systrace.c, mon_systrace.h: Move all struct defs and
4844: prototypes into trace_systrace.h and mark all but
4845: systace_attach() static.
4846:
4847: 2004-09-30 18:14 millert
4848:
4849: * mon_systrace.c, mon_systrace.h: Add support for tracing
4850: emulations. At the moment, all emulations are compiled in. It
4851: might make sense to #ifdef them in the future, though this
4852: impeeds readability.
4853:
4854: 2004-09-30 17:07 millert
4855:
4856: * Makefile.in, configure.in, configure: rename systrace.c ->
4857: trace_systrace.c
4858:
4859: 2004-09-30 15:58 millert
4860:
4861: * parse.yacc: Allow this to build with a K&R compiler again
4862:
4863: 2004-09-30 13:58 millert
4864:
4865: * TODO: sync
4866:
4867: 2004-09-30 13:55 millert
4868:
4869: * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
4870:
4871: 2004-09-30 13:44 millert
4872:
4873: * visudo.c: Exit() takes a negative value to indicate it was not
4874: called via signal.
4875:
4876: 2004-09-30 13:25 millert
4877:
4878: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4879: visudo.man.in: regen
4880:
4881: 2004-09-30 13:22 millert
4882:
4883: * Makefile.in, visudo.c: Define Err() and Errx() that are like
4884: err() and errx() but call Exit() instead of exit(). Build
4885: private copy of alloc.o for visudo that calls Err() and Errx().
4886:
4887: 2004-09-29 15:22 millert
4888:
4889: * lex.yy.c: regen
4890:
4891: 2004-09-29 15:22 millert
4892:
4893: * CHANGES: sync
4894:
4895: 2004-09-29 14:41 millert
4896:
4897: * visudo.c: Overhaul visudo for editing multiple files: o visudo
4898: has been broken out into functions (more work needed here) o
4899: each file is now edited before sudoers is re-parsed o if a
4900: #include line is added that file will be edited too
4901:
4902: TODO: o cleanup temp files when exiting via err() or errx() o
4903: continue breaking things out into separate functions
4904:
4905: 2004-09-29 14:36 millert
4906:
4907: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
4908: arg to open_sudoers that open_sudoers can use to indicate to the
4909: caller that the fd should not be closed when it is done with it.
4910: To be used by visudo to keep locked fds from being closed
4911: prematurely (and thus losing the lock).
4912:
4913: 2004-09-29 14:33 millert
4914:
4915: * parse.yacc, sudo.c: Add errorfile global that contains the name
4916: of the file that caused the error.
4917:
4918: 2004-09-29 14:30 millert
4919:
4920: * parse.lex: return COMMENT to yacc grammar for a #include line
4921:
4922: 2004-09-29 14:29 millert
4923:
4924: * parse.lex: Remove us of unput() in favor of yyless() which is
4925: cheaper.
4926:
4927: 2004-09-29 14:28 millert
4928:
4929: * parse.yacc: Allow an empty sudoers file.
4930:
4931: 2004-09-28 16:50 millert
4932:
4933: * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
4934: doesn't do it for us.
4935:
4936: 2004-09-28 14:37 millert
4937:
4938: * lex.yy.c: regen
4939:
4940: 2004-09-28 14:36 millert
4941:
4942: * visudo.c: Do signal setup before calling edit_sudoers(). Don't
4943: shadow the "quiet" global.
4944:
4945: 2004-09-28 14:33 millert
4946:
4947: * visudo.c: If a sudoers file includes other files, edit those too.
4948: Does not yes deal with creating the new includes files itself.
4949:
4950: 2004-09-28 14:31 millert
4951:
4952: * testsudoers.c: init_parser now takes a path
4953:
4954: 2004-09-28 14:31 millert
4955:
4956: * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
4957: dealing with multiple sudoers files: o init_parser() now takes a
4958: path used to populate the sudoers global o the sudoers global is
4959: used to print the correct file in yyerror() o when switching to
4960: a new sudoers file, perserve old file name and line number
4961:
4962: 2004-09-28 14:29 millert
4963:
4964: * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
4965: meaningful now that we can have multiple sudoers files.
4966:
4967: 2004-09-28 13:52 millert
4968:
4969: * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
4970: sudoers_lookup() so we start at the right file position when
4971: reading include files.
4972:
4973: 2004-09-27 21:04 millert
4974:
4975: * sudoers.pod: document #include
4976:
4977: 2004-09-27 20:47 millert
4978:
4979: * lex.yy.c: regen
4980:
4981: 2004-09-27 20:47 millert
4982:
4983: * parse.lex: Add max depth of 128 for the include stack to avoid
4984: loops.
4985:
4986: Since yyerror() doesn't stop parsing, pass return values back to
4987: yylex and call yyterminate() on error.
4988:
4989: 2004-09-27 14:06 millert
4990:
4991: * sudoers.pod: document tracing
4992:
4993: 2004-09-27 14:05 millert
4994:
4995: * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
4996: page
4997:
4998: 2004-09-27 12:08 millert
4999:
5000: * lex.yy.c: regen
5001:
5002: 2004-09-27 12:03 millert
5003:
5004: * parse.lex: Add support for #include in sudoers (visudo support
5005: TBD)
5006:
5007: 2004-09-27 12:02 millert
5008:
5009: * parse.yacc: make yyerror()'s argument const
5010:
5011: 2004-09-27 12:02 millert
5012:
5013: * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5014:
5015: 2004-09-27 12:01 millert
5016:
5017: * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5018: return a FILE *
5019:
5020: 2004-09-26 12:35 millert
5021:
5022: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5023: version.h: Crank version
5024:
5025: 2004-09-26 12:33 millert
5026:
5027: * Makefile.in, sudo.psf: Better HP-UX depot construction
5028:
5029: 2004-09-25 17:08 millert
5030:
5031: * mon_systrace.c: o Made children global so check_exec() can lookup
5032: a child. o Replaced uid in struct childinfo with struct passwd *
5033: (for runas) o new_child() now takes a parent pid so the runas
5034: info can be inherited o Added find_child() to lookup a child by
5035: its pid o update_child() now fills in a struct passwd o Converted
5036: the big if/else mess in set_policy to a switch o Syscalls that
5037: change uid are now "ask" so we get SYSTR_MSG_UGID events
5038:
5039: 2004-09-25 17:01 millert
5040:
5041: * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5042: to lookup the shadow password. Will be used to a struct passwd
5043: that has the shadow password already filled in.
5044:
5045: 2004-09-25 16:58 millert
5046:
5047: * mon_systrace.c: add missing increment of addr in read_string()
5048:
5049: 2004-09-25 16:15 millert
5050:
5051: * mon_systrace.c: Remove bogus call to update_child() and some
5052: cosmetic fixes
5053:
5054: 2004-09-25 16:11 millert
5055:
5056: * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5057: initialized global for simplicity If STRIOCATTACH returns EBUSY
5058: we are already being traced Check for user_args == NULL in
5059: setproctitle() call Add missing calls to STRIOCANSWER
5060:
5061: 2004-09-25 13:15 millert
5062:
5063: * sudo.c: g/c sudo_pwdup proto
5064:
5065: 2004-09-24 20:21 millert
5066:
5067: * Makefile.in, sudo.psf: Add target for building a depot file
5068:
5069: 2004-09-24 20:07 millert
5070:
5071: * mon_systrace.c: trim includes
5072:
5073: 2004-09-24 14:11 millert
5074:
5075: * lex.yy.c, sudo.tab.h: regen
5076:
5077: 2004-09-24 14:10 millert
5078:
5079: * INSTALL: document --with-systrace
5080:
5081: 2004-09-24 14:10 millert
5082:
5083: * config.h.in, configure, configure.in: Add check for setproctitle
5084:
5085: 2004-09-24 14:09 millert
5086:
5087: * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5088: it can set the error code
5089:
5090: 2004-09-24 13:30 millert
5091:
5092: * mon_systrace.c: systrace(4) support for sudo. On systems with
5093: the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5094: patches) sudo can intercept exec calls and check the exec args
5095: against the sudoers file. In other words, sudo can now control
5096: subcommands and shell escapes.
5097:
5098: 2004-09-24 13:17 millert
5099:
5100: * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5101:
5102: 2004-09-24 13:15 millert
5103:
5104: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5105: Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5106:
5107: 2004-09-24 13:13 millert
5108:
5109: * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5110: close on exec flag instead.
5111:
5112: 2004-09-24 13:11 millert
5113:
5114: * def_data.c, def_data.h, def_data.in: Add trace option
5115:
5116: 2004-09-23 20:24 millert
5117:
5118: * Makefile.in: Add systrace
5119:
5120: 2004-09-23 20:23 millert
5121:
5122: * INSTALL: SunOS /bin/sh blows up with configure
5123:
5124: 2004-09-23 20:23 millert
5125:
5126: * configure, configure.in: Include sys/param.h before systrace.h
5127:
5128: 2004-09-23 20:15 millert
5129:
5130: * configure: regen
5131:
5132: 2004-09-23 20:15 millert
5133:
5134: * pathnames.h.in: _PATH_DEV_SYSTRACE
5135:
5136: 2004-09-23 20:14 millert
5137:
5138: * configure.in: line up options in --help
5139:
5140: 2004-09-23 20:11 millert
5141:
5142: * config.h.in, configure.in: Add --with-systrace
5143:
5144: 2004-09-23 13:35 millert
5145:
5146: * configure: regen
5147:
5148: 2004-09-23 13:35 millert
5149:
5150: * aclocal.m4, configure.in: make this work with autoconf-2.59
5151:
5152: 2004-09-16 12:58 millert
5153:
5154: * sudo_edit.c: Simplify logic around open & stat of files and do
5155: sanity on edited file even if we lack fstat (still racable but
5156: worth doing).
5157:
5158: 2004-09-15 18:47 millert
5159:
5160: * HISTORY: Add support url
5161:
5162: 2004-09-15 16:11 millert
5163:
5164: * Makefile.in: versino 1.6.8p1
5165:
5166: 2004-09-15 15:20 millert
5167:
5168: * CHANGES: more changes for 1.6.8p1
5169:
5170: 2004-09-15 15:18 millert
5171:
5172: * version.h: 1.6.8p1
5173:
5174: 2004-09-15 12:16 millert
5175:
5176: * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5177: something other than a regular file.
5178:
5179: 2004-09-14 20:55 aaron
5180:
5181: * CHANGES: sync
5182:
5183: 2004-09-14 20:21 aaron
5184:
5185: * INSTALL: document --with-ldap-conf-file
5186:
5187: 2004-09-14 17:43 millert
5188:
5189: * CHANGES, ins_csops.h: political correctness strikes again
5190:
5191: 2004-09-14 15:09 millert
5192:
5193: * RUNSON: sync
5194:
5195: 2004-09-12 19:50 millert
5196:
5197: * Makefile.binary.in, Makefile.in: Install sudoedit man link
5198:
5199: 2004-09-12 14:25 millert
5200:
5201: * INSTALL: Update PAM note and mention where HP-UX users can
5202: download gcc binaries.
5203:
5204: 2004-09-12 12:08 millert
5205:
5206: * Makefile.in: libtool wants to install stuff from .libs so fake
5207: one up for binary installations.
5208:
5209: 2004-09-12 11:53 millert
5210:
5211: * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5212: -f set LIBTOOL correctly
5213:
5214: 2004-09-12 11:53 millert
5215:
5216: * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5217: sudoedit link instead of using ln -f
5218:
5219: 2004-09-12 10:22 millert
5220:
5221: * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5222: Makefile.binary.in for config.status substitution Add support for
5223: installing noexec bits
5224:
5225: 2004-09-12 10:21 millert
5226:
5227: * Makefile.in: Copy noexec bits into binary dists too No longer use
5228: my old arch script for making binary dists
5229:
5230: 2004-09-12 09:36 millert
5231:
5232: * Makefile.binary: Install sudoedit link.
5233:
5234: 2004-09-11 12:25 millert
5235:
5236: * emul/utime.h: avoid __P so there is no need for compat.h to be
5237: included
5238:
5239: 2004-09-11 12:24 millert
5240:
5241: * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5242:
5243: 2004-09-10 12:31 millert
5244:
5245: * compat.h: Fix Solatis futimes macro
5246:
5247: 2004-09-09 11:02 millert
5248:
5249: * sudo_edit.c: Rename ots -> omtim for improved readability.
5250:
5251: 2004-09-08 14:38 millert
5252:
5253: * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5254: keep the temp file open; re-opening it with the invoking user's
5255: euid is sufficient.
5256:
5257: 2004-09-08 14:36 millert
5258:
5259: * CHANGES: sync
5260:
5261: 2004-09-08 14:35 millert
5262:
5263: * sudo.cat, sudo.man.in: regen
5264:
5265: 2004-09-08 14:34 millert
5266:
5267: * sudo.pod: back out revision 1.70; it is no long applicable
5268:
5269: 2004-09-08 11:57 millert
5270:
5271: * env.c: Let the loader initialize nep
5272:
5273: 2004-09-08 11:49 millert
5274:
5275: * configure, configure.in, config.h.in: Removed unneed check for
5276: fchown Add check for gettimeofday Move autoheader template stuff
5277: into separate AH_TEMPLATE lines
5278:
5279: 2004-09-08 11:48 millert
5280:
5281: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5282: timespec throughout.
5283:
5284: 2004-09-08 11:47 millert
5285:
5286: * Makefile.in: gettime.[co]
5287:
5288: 2004-09-08 11:47 millert
5289:
5290: * gettime.c: function to return the current time in a struct
5291: timespec
5292:
5293: 2004-09-08 10:51 millert
5294:
5295: * utimes.c: Not a darpa-sponsored file.
5296:
5297: 2004-09-07 16:36 millert
5298:
5299: * compat.h, config.h.in, configure, configure.in: Add a check for
5300: struct timespec and provide it for those without.
5301:
5302: 2004-09-07 15:56 millert
5303:
5304: * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5305: st_mtim and st_mtimespec and add macros for pulling the mtime sec
5306: and nsec out of struct stat. These are used in sudo_edit() to
5307: better tell whether or not the file has changed.
5308:
5309: 2004-09-07 15:55 millert
5310:
5311: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5312: param to touch() for nsec
5313:
5314: 2004-09-07 14:06 millert
5315:
5316: * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5317: have to chown the file later. Only touch() the temp file if we
5318: can do it via the file descriptor. Don't check for modification
5319: of the temp file if we lack fstat(). Catch errors read()ing the
5320: temp file.
5321:
5322: 2004-09-07 14:04 millert
5323:
5324: * fileops.c: If path is NULL and fd == -1 return -1.
5325:
5326: 2004-09-07 13:31 millert
5327:
5328: * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5329: ones we opened so just close those in the child.
5330:
5331: 2004-09-07 13:14 millert
5332:
5333: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5334: configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5335: utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5336: in touch(), emulating as needed. Not all systems are able to
5337: support setting the times of an fd so touch() takes both an fd
5338: and a file name as arguments.
5339:
5340: 2004-09-06 21:12 aaron
5341:
5342: * env.c: Rare SEGV
5343:
5344: 2004-09-06 16:46 millert
5345:
5346: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5347: visudo.man.in: regen
5348:
5349: 2004-09-06 16:45 millert
5350:
5351: * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5352: re-order some of the sections to match the order we use in
5353: OpenBSD.
5354:
5355: 2004-09-06 15:05 aaron
5356:
5357: * env.c: Openldap ~/.ldaprc fix
5358:
5359: 2004-09-06 12:18 millert
5360:
5361: * sudo.pod: Talk about how the editor must write its changes to the
5362: original file and not just use rename(2).
5363:
5364: 2004-09-06 12:12 millert
5365:
5366: * CHANGES: sync
5367:
5368: 2004-09-06 12:11 millert
5369:
5370: * sudo_edit.c: Keep the temp file open instead of re-opening after
5371: the editor has exited.
5372:
5373: 2004-09-06 12:10 millert
5374:
5375: * sample.pam: Update for current redhat/fedora core.
5376:
5377: 2004-09-02 21:56 aaron
5378:
5379: * README.LDAP: tls_ examples
5380:
5381: 2004-09-02 00:03 aaron
5382:
5383: * ldap.c: config tls_* options
5384:
5385: 2004-08-29 11:39 millert
5386:
5387: * configure, configure.in: No need for -lcrypt when using pam.
5388:
5389: 2004-08-26 23:57 millert
5390:
5391: * configure: regen
5392:
5393: 2004-08-26 23:44 aaron
5394:
5395: * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5396: option to override LDAP_CONF
5397:
5398: 2004-08-26 22:08 aaron
5399:
5400: * ldap.c: cleanup debug message
5401:
5402: 2004-08-26 19:29 aaron
5403:
5404: * README.LDAP: more config info
5405:
5406: 2004-08-24 14:01 millert
5407:
5408: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5409: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5410: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5411: longer use gross statics in command_matches(). Also rename some
5412: variables for improved clarity.
5413:
5414: 2004-08-21 14:33 millert
5415:
5416: * INSTALL: document HP's crippled compiler deficiency.
5417:
5418: 2004-08-21 14:25 millert
5419:
5420: * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5421: descriptions. Noticed by Norihiko Murase.
5422:
5423: 2004-08-21 14:20 millert
5424:
5425: * configure, configure.in: --with-noexec takes an optional PATH
5426: argument.
5427:
5428: 2004-08-21 14:20 millert
5429:
5430: * INSTALL: document --with-noexec
5431:
5432: 2004-08-17 16:21 millert
5433:
5434: * RUNSON, TODO: sync
5435:
5436: 2004-08-17 15:11 millert
5437:
5438: * sudo_edit.c: Better warning message when sudoedit is unable to
5439: write to the destination file.
5440:
5441: 2004-08-17 14:53 millert
5442:
5443: * sudo.cat, sudo.man.in: regen
5444:
5445: 2004-08-17 14:53 millert
5446:
5447: * sudo.pod: Don't italicize the string "sudoedit"
5448:
5449: 2004-08-16 18:45 millert
5450:
5451: * HISTORY: Mention GratiSoft.
5452:
5453: 2004-08-11 14:29 millert
5454:
5455: * parse.yacc: Reset used_runas to FALSE when re-intializing the
5456: parser.
5457:
5458: 2004-08-09 19:04 millert
5459:
5460: * config.guess: Correct OpenBSD mips support
5461:
5462: 2004-08-09 17:28 millert
5463:
5464: * config.guess: Add OpenBSD/mips
5465:
5466: 2004-08-06 23:43 aaron
5467:
5468: * README.LDAP: More behavior notes
5469:
5470: 2004-08-06 23:36 aaron
5471:
5472: * README.LDAP: Updates on current behavior
5473:
5474: 2004-08-06 19:56 millert
5475:
5476: * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5477: no difference to formatted files).
5478:
5479: 2004-08-06 19:48 millert
5480:
5481: * CHANGES: new
5482:
5483: 2004-08-06 19:42 millert
5484:
5485: * sudo.c: Consistency. Use same error for bad -u #uid when
5486: targetpw is set as we do when a bad -u username is specified.
5487:
5488: 2004-08-06 19:33 millert
5489:
5490: * TODO: Add checksum idea from Steve Mancini
5491:
5492: 2004-08-06 19:32 millert
5493:
5494: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5495:
5496: 2004-08-06 19:31 millert
5497:
5498: * sudo.pod, sudoers.pod: Document the restriction on uids specified
5499: via -u when targetpw is set.
5500:
5501: 2004-08-06 19:24 millert
5502:
5503: * sudo.c: Error out when targetpw is enabled and sudo is run with
5504: -u #uid but #uid does not exist in the passwd database. We can't
5505: do target authentication when the target is not in passwd!
5506:
5507: 2004-08-05 21:16 millert
5508:
5509: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5510:
5511: 2004-08-05 21:14 millert
5512:
5513: * TODO: Some more todo for the next release.
5514:
5515: 2004-08-05 21:13 millert
5516:
5517: * INSTALL: Make it clear that PAM should be used for DCE support
5518: when possible.
5519:
5520: 2004-08-05 21:13 millert
5521:
5522: * sudoers.pod: o Document problems with wildcards and relative
5523: paths. o Make the order requirements more prominent. o Change a
5524: "set" to "reset" for clarity.
5525:
5526: 2004-08-05 14:29 millert
5527:
5528: * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5529:
5530: 2004-08-02 22:34 aaron
5531:
5532: * ldap.c: reflect changes to parse.c
5533:
5534: 2004-08-02 14:44 millert
5535:
5536: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5537: user_cmnd and user_args to command_matches(), just use the
5538: globals there. Since we keep state with statics anyway it is
5539: misleading to pretend that passing in different cmnd and
5540: cmnd_args will work.
5541:
5542: 2004-08-02 14:40 millert
5543:
5544: * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5545: pseudo-commands check for a '/' anywhere in cmnd, not just the
5546: first character.
5547:
5548: 2004-07-30 23:07 aaron
5549:
5550: * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5551: <oblin@mandrakesoft.com>
5552:
5553: 2004-07-30 22:41 aaron
5554:
5555: * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5556:
5557: 2004-07-30 22:06 aaron
5558:
5559: * README.LDAP: Sun One schema definition by
5560: Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5561:
5562: 2004-07-29 11:57 millert
5563:
5564: * CHANGES: typo
5565:
5566: 2004-07-23 16:44 millert
5567:
5568: * CHANGES: sync
5569:
5570: 2004-07-23 16:43 millert
5571:
5572: * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5573: remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5574: the parse.
5575:
5576: 2004-07-08 10:20 millert
5577:
5578: * CHANGES: PAM change
5579:
5580: 2004-07-07 21:04 aaron
5581:
5582: * ldap.c: Better debugging of ALL command
5583:
5584: 2004-07-07 20:15 millert
5585:
5586: * parse.c: When matching for "sudoedit" in sudoers check both the
5587: command the user typed *and* the command that is listed in the
5588: sudoers entry.
5589:
5590: 2004-07-04 19:59 aaron
5591:
5592: * ldap.c: Added !command feature
5593:
5594: 2004-06-28 10:51 millert
5595:
5596: * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5597: Brian Farrell
5598:
5599: 2004-06-10 23:11 millert
5600:
5601: * LICENSE: License is ISC-style, not BSD-style
5602:
5603: 2004-06-10 20:58 millert
5604:
5605: * CHANGES: sync
5606:
5607: 2004-06-10 16:54 millert
5608:
5609: * sudo.man.in, sudo.cat: regen
5610:
5611: 2004-06-10 16:53 millert
5612:
5613: * sudo.pod: o Update some out of date bits to reality o Change the
5614: shell promt in examples to bourne-shell style o Clarify some
5615: details o Add a CAVEAT about "sudo cd /foo"
5616:
5617: 2004-06-10 16:19 millert
5618:
5619: * check.c: Don't ask for a password if invoking user == target
5620: user.
5621:
5622: 2004-06-10 12:32 millert
5623:
5624: * sudo.c: typo in comment
5625:
5626: 2004-06-08 19:20 millert
5627:
5628: * sudoers.man.in, sudoers.cat: regen
5629:
5630: 2004-06-08 19:19 millert
5631:
5632: * sudoers.pod: Expand on NOEXEC a little.
5633:
5634: 2004-06-08 16:20 millert
5635:
5636: * TODO: sync
5637:
5638: 2004-06-08 15:58 millert
5639:
5640: * visudo.man.in, visudo.cat: regen
5641:
5642: 2004-06-08 15:55 millert
5643:
5644: * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5645: for runas_default being set after it has already been used.
5646:
5647: 2004-06-08 13:53 millert
5648:
5649: * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5650: has been set to TRUE or FALSE. This is more readable than
5651: checking for >=0 or < 0. Doesn't change the actual code
5652: generated.
5653:
5654: 2004-06-06 20:11 millert
5655:
5656: * sudoers.man.in, sudoers.cat: regen
5657:
5658: 2004-06-06 20:07 millert
5659:
5660: * sudoers, sudoers.pod: Correct description of where Defaults specs
5661: should go.
5662:
5663: 2004-06-06 20:02 millert
5664:
5665: * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5666: auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5667:
5668: 2004-06-06 19:58 millert
5669:
5670: * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5671: ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5672: tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5673: Remove trailing spaces, no actual code changes.
5674:
5675: 2004-06-06 16:22 millert
5676:
5677: * parse.yacc: Fix a >=0 that should be <0 that was improperly
5678: converted when UNSPEC was added.
5679:
5680: 2004-06-06 15:54 millert
5681:
5682: * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5683: to UNSPEC, not NOMATCH when resetting it.
5684:
5685: 2004-06-06 15:39 millert
5686:
5687: * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5688:
5689: 2004-06-05 13:55 millert
5690:
5691: * README.LDAP: Update for configure changes
5692:
5693: 2004-06-05 13:42 millert
5694:
5695: * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5696: respectively) and use these in parse.yacc. Also in parse.yacc
5697: initialize the *_matches vars to UNSPEC and add two macros,
5698: SETMATCH and SETNMATCH for use when setting *_matches to a value
5699: that may be NOMATCH/UNSPEC/TRUE/FALSE.
5700:
5701: 2004-06-05 11:17 millert
5702:
5703: * parse.yacc: Initialize runas to -2, not -1 since we need to be
5704: able to distinguish between the initialized value and the value
5705: of a non-match when passing along the runas value to multiple
5706: commands.
5707:
5708: The result of this is that an unmatched runas is now set to -1,
5709: not 0. This is required now that parse.c treats a FALSE value
5710: for runas as being explicitly denied.
5711:
5712: 2004-06-03 16:21 millert
5713:
5714: * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5715:
5716: 2004-06-03 12:37 millert
5717:
5718: * configure, configure.in: Add tests for what libs we need to link
5719: with for ldap and for whether or not lber.h needs to be
5720: explicitly included.
5721:
5722: 2004-06-02 20:30 aaron
5723:
5724: * ldap.c: Solaris native LDAP build fix
5725:
5726: 2004-06-01 16:56 millert
5727:
5728: * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
5729: use of an unset variable.
5730:
5731: 2004-06-01 16:56 millert
5732:
5733: * sudo.h: Add prototype for sudo_ldap_list_matches
5734:
5735: 2004-06-01 16:53 millert
5736:
5737: * compat.h, config.h.in, configure, configure.in: Better check for
5738: dirfd macro--we now set HAVE_DIRFD for the macro version too.
5739: Added check for dd_fd in `DIR' if no dirfd is found; this is now
5740: used to confitionally define the dirfd macro in compat.h.
5741:
5742: 2004-06-01 16:51 millert
5743:
5744: * closefrom.c: Only check /proc/$$/fd if we have the dirfd
5745: function/macro.
5746:
5747: 2004-06-01 15:13 millert
5748:
5749: * compat.h, config.h.in, configure, configure.in: Add a check for a
5750: dirfd() function (like Linux) and add a dirfd macro in compat.h
5751: if there is no dirfd() function or macro.
5752:
5753: 2004-06-01 14:59 millert
5754:
5755: * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
5756: needed.
5757:
5758: 2004-06-01 14:30 millert
5759:
5760: * CHANGES: Clarify closefrom() note.
5761:
5762: 2004-06-01 12:51 millert
5763:
5764: * parse.c: When checking for a command in the directory, only copy
5765: the base dir once.
5766:
5767: 2004-06-01 12:44 millert
5768:
5769: * closefrom.c: If there is a /proc/$$/fd directory, behave like the
5770: Solaris closefrom() and only close the descriptors listed
5771: therein.
5772:
5773: 2004-06-01 12:23 millert
5774:
5775: * alloc.c: compat.h guarantees INT_MAX is defined.
5776:
5777: 2004-06-01 12:23 millert
5778:
5779: * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
5780: without it and remove definition of RLIM_INFINITY (now unused).
5781:
5782: 2004-05-31 21:22 millert
5783:
5784: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
5785: parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
5786: since the former is standardized.
5787:
5788: 2004-05-31 19:18 millert
5789:
5790: * CHANGES: sync
5791:
5792: 2004-05-31 19:10 millert
5793:
5794: * RUNSON: Add some entries that were mailed in a while ago
5795:
5796: 2004-05-31 14:16 millert
5797:
5798: * closefrom.c: o sysconf returns a long, not an int. o check for
5799: negative return value from sysconf/getdtablesize and use
5800: OPEN_MAX in this case. o define OPEN_MAX to 256 for those
5801: without it (a fair guess...)
5802:
5803: 2004-05-30 12:25 millert
5804:
5805: * UPGRADE: Mention change in parse order for RunAs entries.
5806:
5807: 2004-05-30 12:15 millert
5808:
5809: * configure: regen
5810:
5811: 2004-05-29 18:29 millert
5812:
5813: * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
5814: now takes an optional dir as a parameter
5815: o added check for ldap_initialize() and start_tls_s()
5816:
5817: 2004-05-29 14:54 millert
5818:
5819: * README.LDAP: Fix some typos, word choice and formatting issues.
5820:
5821: 2004-05-28 18:06 millert
5822:
5823: * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
5824: stdio and just use read/write as it is simpler.
5825:
5826: 2004-05-28 16:27 millert
5827:
5828: * configure, configure.in: Remove hack overriding cross-compiler
5829: check. It should no longer be needed.
5830:
5831: 2004-05-28 16:26 millert
5832:
5833: * compat.h: Remove select() compat bits since we no longer use
5834: select().
5835:
5836: 2004-05-28 16:24 millert
5837:
5838: * CHANGES, tgetpass.c: Use alarm() instead of select() for the
5839: timeout for systems that don't fully/properly implement select().
5840:
5841: 2004-05-27 19:14 millert
5842:
5843: * CHANGES: synbc
5844:
5845: 2004-05-27 19:12 millert
5846:
5847: * RUNSON: update
5848:
5849: 2004-05-27 19:12 millert
5850:
5851: * set_perms.c: Deal with systems that have no way of setting the
5852: effective uid such as nsr-tandem-nsk.
5853:
5854: 2004-05-27 19:01 millert
5855:
5856: * configure, configure.in: Define NO_SAVED_IDS if we don't find
5857: seteuid()
5858:
5859: 2004-05-27 18:21 millert
5860:
5861: * config.h.in, configure, configure.in: Add back check for
5862: setreuid() since NSK doesn't have it.
5863:
5864: 2004-05-27 15:57 millert
5865:
5866: * sudoers.cat, sudoers.man.in: regen
5867:
5868: 2004-05-27 15:56 millert
5869:
5870: * BUGS, CHANGES: sync
5871:
5872: 2004-05-27 15:55 millert
5873:
5874: * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
5875: user was explicitly denied and the command matched. This fixes a
5876: long-standing bug and makes: foo machine = (ALL)
5877: /usr/bin/blah foo machine = (!bar) /usr/bin/blah
5878:
5879: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
5880:
5881: 2004-05-27 15:52 millert
5882:
5883: * sudoers.pod: Clarify mail_noperm
5884:
5885: 2004-05-19 21:25 aaron
5886:
5887: * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
5888:
5889: 2004-05-17 18:32 millert
5890:
5891: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
5892: sudoers.cat, visudo.cat: regen
5893:
5894: 2004-05-17 18:31 millert
5895:
5896: * TODO: sync
5897:
5898: 2004-05-17 18:31 millert
5899:
5900: * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
5901: remembers these?) and add a minimal sudoedit example.
5902:
5903: 2004-05-17 18:21 millert
5904:
5905: * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
5906: filesystem -> file system
5907:
5908: 2004-05-17 18:19 millert
5909:
5910: * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
5911:
5912: 2004-05-17 18:10 millert
5913:
5914: * lex.yy.c: regen
5915:
5916: 2004-05-17 17:57 millert
5917:
5918: * visudo.pod: remove my email addr
5919:
5920: 2004-05-17 17:55 millert
5921:
5922: * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
5923: @mansectsu@ everywhere Make man page references links with L<>
5924:
5925: 2004-05-17 16:51 millert
5926:
5927: * parse.lex: Accept quoted globbing characters and pass them
5928: verbatim for fnmatch()
5929:
5930: 2004-05-17 16:50 millert
5931:
5932: * UPGRADE: Document that /tmp/.odus is gone.
5933:
5934: 2004-05-17 16:28 millert
5935:
5936: * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
5937: /tmp/.odus as a possible timestamp dir unless specifically
5938: configured to do so. Instead, if no /var/run exists, use
5939: /var/adm/sudo or /usr/adm/sudo.
5940:
5941: 2004-05-17 16:08 millert
5942:
5943: * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
5944: visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
5945: on patches from Tom Bates.
5946:
5947: 2004-05-16 18:47 millert
5948:
5949: * CHANGES: There was no 1.6.7p6.
5950:
5951: 2004-05-16 16:38 millert
5952:
5953: * BUGS, CHANGES: sync
5954:
5955: 2004-05-16 16:36 millert
5956:
5957: * Makefile.in: add missing files to DISTFILES
5958:
5959: 2004-05-16 16:23 millert
5960:
5961: * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
5962:
5963: 2004-05-16 16:20 millert
5964:
5965: * Makefile.in: Fix some line wrap and update (c) year
5966:
5967: 2004-04-28 15:05 aaron
5968:
5969: * README.LDAP: Build Note
5970:
5971: 2004-04-06 22:03 aaron
5972:
5973: * Makefile.in: Fix install-dirs
5974:
5975: 2004-04-04 20:27 millert
5976:
5977: * visudo.c: In Exit() when used as a signal handler, emsg is a
5978: pointer so sizeof() is wrong so make it a #define instead. Also
5979: avoid using a negative exit value. Found by Aaron Campbell
5980:
5981: 2004-03-24 18:23 millert
5982:
5983: * sudoers.pod: Remove bogus sentence about uids in a User_List.
5984: Document usernames vs. uid parsing in a Runas_List.
5985:
5986: 2004-03-24 18:06 millert
5987:
5988: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
5989: the user specified a uid with the -u flag and the uid exists in
5990: the passwd file, set runas_user to the name, not the uid.
5991:
5992: When comparing usernames in sudoers, if a name is really a uid
5993: (starts with '#') compare it numerically to pw_uid.
5994:
5995: 2004-03-22 13:35 millert
5996:
5997: * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
5998:
5999: 2004-02-28 18:54 aaron
6000:
6001: * CHANGES, config.h.in, ldap.c: Added start_tls support
6002:
6003: 2004-02-14 18:04 millert
6004:
6005: * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6006: def_data.c, def_data.h to PARSESRCS.
6007:
6008: 2004-02-14 10:13 aaron
6009:
6010: * strlcat.c, strlcpy.c: Un-Fix last license munge
6011:
6012: 2004-02-13 16:37 millert
6013:
6014: * CHANGES, RUNSON, TODO: checkpoint
6015:
6016: 2004-02-13 16:37 millert
6017:
6018: * lex.yy.c, configure: regen
6019:
6020: 2004-02-13 16:36 millert
6021:
6022: * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6023: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6024: find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6025: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6026: interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6027: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6028: strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6029: sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6030: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6031: visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6032: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6033: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6034: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6035: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6036: emul/search.h, emul/utime.h: More to a less restrictive,
6037: ISC-style license.
6038:
6039: 2004-02-12 21:08 aaron
6040:
6041: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6042: def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6043: sudoers2ldif: Merged in LDAP Support
6044:
6045: 2004-02-08 15:53 millert
6046:
6047: * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6048: a macro.
6049:
6050: 2004-02-06 18:08 millert
6051:
6052: * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6053: already 0 so set the euid first, then just call setuid(0) to set
6054: the real uid too.
6055:
6056: 2004-02-06 14:52 millert
6057:
6058: * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6059: appropriate instead of seteuid() which may not exist.
6060:
6061: 2004-02-04 14:58 millert
6062:
6063: * LICENSE: 2004
6064:
6065: 2004-02-03 23:38 millert
6066:
6067: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6068: --with-pc-insults configure option
6069:
6070: 2004-02-03 23:32 millert
6071:
6072: * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6073:
6074: 2004-02-01 15:45 millert
6075:
6076: * sudo.man.in, sudoers.man.in: regen
6077:
6078: 2004-02-01 15:44 millert
6079:
6080: * sudoers.pod: Add a note that noexec is not a cure-all.
6081:
6082: 2004-02-01 15:20 millert
6083:
6084: * sudoers.pod: Mention that disabling "root_sudo" is pretty
6085: pointless.
6086:
6087: 2004-02-01 15:20 millert
6088:
6089: * configure, configure.in: Substitute for root_sudo in sudoers.pod
6090:
6091: 2004-02-01 15:03 millert
6092:
6093: * sudo.pod: Add sudoedit to the NAME section
6094:
6095: 2004-02-01 15:00 millert
6096:
6097: * sudoers.pod: Document that fact that setting ignore_dot in
6098: sudoers has no effect due to the fact that find_path() is called
6099: *before* sudoers is read.
6100:
6101: 2004-01-29 19:50 millert
6102:
6103: * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6104:
6105: 2004-01-29 19:42 millert
6106:
6107: * BUGS, CHANGES, TODO: sync
6108:
6109: 2004-01-29 19:42 millert
6110:
6111: * sudo.man.in: regen
6112:
6113: 2004-01-29 19:41 millert
6114:
6115: * sudo.pod: Clarify that when sudo is run by root with the
6116: SUDO_USER variable set, the sudoers lookup happens for root and
6117: not the SUDO_USER user.
6118:
6119: 2004-01-29 17:33 millert
6120:
6121: * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6122: set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6123: auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6124:
6125: 2004-01-29 16:22 millert
6126:
6127: * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6128:
6129: 2004-01-29 16:15 millert
6130:
6131: * sudo.c: Don't look at prev_user until after we've parsed sudoers
6132: and done the password check. That way, if sudo/sudoedit is run
6133: from a root process that was invoked by sudo, we check sudoers
6134: for root, not the previous user. This makes sudoedit much more
6135: useful and means that for the sudo case, we get correct logging
6136: on who actually ran the command.
6137:
6138: 2004-01-22 19:22 millert
6139:
6140: * sudo_edit.c: Add a comment describing why we need to be notified
6141: about our child stopping.
6142:
6143: 2004-01-22 16:06 millert
6144:
6145: * def_data.c, def_data.in: Update the noexec variable descriptions
6146:
6147: 2004-01-22 14:18 millert
6148:
6149: * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6150: execve()
6151:
6152: 2004-01-22 12:14 millert
6153:
6154: * sudo_noexec.c: Alas, all the world does not go through execve(2).
6155: Many systems still have an execv(2) system call, Linux 2.6
6156: provides fexecve(2) and it is not uncommon for libc to have
6157: underscore ('_') versions of the functions to be used internally
6158: by the library. Instead of stubbing all these out by hand,
6159: define a macro and let it do the work. Extra exec functions
6160: pointed out by Reznic Valery.
6161:
6162: 2004-01-21 21:57 millert
6163:
6164: * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6165: Because we do a fork() first we need to be notified when the
6166: child has been stopped and then send that same signal to ourself
6167: so the shell can do its job control thing.
6168:
6169: 2004-01-21 21:44 millert
6170:
6171: * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6172: systems out there that want to run sudo that still don't support
6173: these we can try to deal with that later.
6174:
6175: 2004-01-21 20:03 millert
6176:
6177: * lex.yy.c: regen
6178:
6179: 2004-01-21 20:00 millert
6180:
6181: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6182: -e / sudoedit
6183:
6184: 2004-01-21 19:08 millert
6185:
6186: * configure, configure.in: fix typo
6187:
6188: 2004-01-21 19:02 millert
6189:
6190: * config.h.in, configure.in: Add SET/CLR/ISSET
6191:
6192: 2004-01-21 18:55 millert
6193:
6194: * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6195: Pretty print the long usage() line to not wrap (assumes 80 char
6196: display)
6197:
6198: 2004-01-21 18:01 millert
6199:
6200: * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6201: is implied and no other flags are permitted.
6202:
6203: 2004-01-21 18:00 millert
6204:
6205: * sudo.h: Add a new flag, -e, that makes it possible to give users
6206: the ability to edit files with the editor of their choice as the
6207: invoking user, not the runas user. Temporary files are used for
6208: the actual edit and the temp file is copied over the original
6209: after the editor is done.
6210:
6211: 2004-01-21 17:25 millert
6212:
6213: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6214: flag, -e, that makes it possible to give users the ability to
6215: edit files with the editor of their choice as the invoking user,
6216: not the runas user. Temporary files are used for the actual edit
6217: and the temp file is copied over the original after the editor is
6218: done.
6219:
6220: 2004-01-21 17:06 millert
6221:
6222: * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6223: variables is set, use that to determine the invoking user's true
6224: identity. That way the proper info gets logged by someone who
6225: has done "sudo su" but still uses sudo to as root. We can't do
6226: this for non-root users since that would open up a security hole,
6227: though perhaps it would be acceptable to use getlogin(2) on OSes
6228: where this a system call (and doesn't just look in the utmp
6229: file).
6230:
6231: 2004-01-21 16:58 millert
6232:
6233: * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6234:
6235: 2004-01-21 16:57 millert
6236:
6237: * configure, config.h.in, configure.in: Add check for fchown(2)
6238:
6239: 2004-01-20 14:22 millert
6240:
6241: * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6242: set_runaspw. It is far to late to set NewArgv[0] there and will
6243: have no effect anyway as cmnd and safe_cmnd have already been
6244: set.
6245:
6246: 2004-01-20 14:18 millert
6247:
6248: * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6249: did.
6250:
6251: 2004-01-18 20:17 millert
6252:
6253: * env.c, sudo.c: In -i mode always set new environment based on the
6254: runas user's passwd entry.
6255:
6256: 2004-01-18 17:56 millert
6257:
6258: * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6259: section with usage() in sudo.c. Also sort the flags in the
6260: OPTIONS section.
6261:
6262: 2004-01-18 17:55 millert
6263:
6264: * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6265: patches from David J. MacKenzie o Sort the flags in the usage
6266: message
6267:
6268: 2004-01-18 17:22 millert
6269:
6270: * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6271: substitution.
6272:
6273: 2004-01-17 16:34 millert
6274:
6275: * sudo.c: Change euid to runas user before calling find_path().
6276: Unfortunately, though runas_user can be modified in sudoers we
6277: haven't parsed sudoers yet.
6278:
6279: 2004-01-17 16:25 millert
6280:
6281: * sudoers.man.in, sudoers.pod: Add missing defintion of
6282: Parameter_List and use single pipes in the Defaults EBNF
6283: definition.
6284:
6285: 2004-01-17 13:49 millert
6286:
6287: * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6288: don't want to reset the contents of runas_pw if the user
6289: specified a user via the -u flag.
6290:
6291: Avoid unnecessary passwd lookups in set_authpw(). In most cases
6292: we already have the info in runas_pw.
6293:
6294: 2004-01-16 18:16 millert
6295:
6296: * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6297: RedHat
6298:
6299: 2004-01-16 18:12 millert
6300:
6301: * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6302:
6303: 2004-01-16 18:10 millert
6304:
6305: * parse.c: If we can't stat the command as root, try as the runas
6306: user instead.
6307:
6308: 2004-01-16 18:09 millert
6309:
6310: * testsudoers.c, visudo.c: Add stub set_runaspw() function
6311:
6312: 2004-01-16 18:09 millert
6313:
6314: * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6315: will be used as a callback to update runas_pw when the runas user
6316: changes.
6317:
6318: 2004-01-16 18:07 millert
6319:
6320: * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6321:
6322: 2004-01-16 18:05 millert
6323:
6324: * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6325: a PERM_RUNAS that just changes the euid.
6326:
6327: 2004-01-16 18:04 millert
6328:
6329: * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6330: allocate memory in one chunk for easy free()ing. Also change it
6331: from static to extern.
6332:
6333: 2004-01-16 18:03 millert
6334:
6335: * defaults.c, defaults.h: Add callback support
6336:
6337: 2004-01-16 18:02 millert
6338:
6339: * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6340: it for runas_default
6341:
6342: 2004-01-15 15:13 millert
6343:
6344: * auth/fwtk.c: Add support for chalnecho and display server
6345: responses used by fwtk >= 2.0
6346:
6347: 2004-01-12 18:39 millert
6348:
6349: * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6350:
6351: 2004-01-12 14:03 millert
6352:
6353: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6354: sudo.h: Use closefrom() instead of doing the equivalent inline.
6355:
6356: 2004-01-12 13:55 millert
6357:
6358: * closefrom.c: closefrom(3) for systems w/o it
6359:
6360: 2004-01-09 16:29 millert
6361:
6362: * sudoers.man.in: Update from .pod file.
6363:
6364: 2004-01-09 16:26 millert
6365:
6366: * configure, configure.in: Substitute noexec_file for the sudoers
6367: man page
6368:
6369: 2004-01-09 16:24 millert
6370:
6371: * sudo.man.in, sudo.pod: Mention noexec
6372:
6373: 2004-01-09 16:16 millert
6374:
6375: * sudoers.man.in, sudoers.pod: Document noexec
6376:
6377: 2004-01-09 14:38 millert
6378:
6379: * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6380: definition from config.h to pam.c where it belongs. We can't
6381: have this in config.h since that gets included too early.
6382:
6383: 2004-01-09 14:35 millert
6384:
6385: * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6386: implementations put their headers in /usr/include/pam instead of
6387: /usr/include/security.
6388:
6389: 2004-01-09 14:32 millert
6390:
6391: * configure.in: I missed changing the EXEC macro -> EXECV here when
6392: I changed this in config.h.in and sudo.c a while ago.
6393:
6394: 2004-01-09 13:15 millert
6395:
6396: * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6397:
6398: 2004-01-09 03:29 millert
6399:
6400: * configure, configure.in: o merge the hpux case entries into a
6401: single entry w/ its own sub-case statement. o HP-UX >= 11
6402: support getspnam(), use it in preference to getprpwuid()
6403:
6404: 2004-01-09 02:58 millert
6405:
6406: * configure, configure.in: eval $shrext so that it expands nicely
6407: on MacOS X
6408:
6409: 2004-01-09 02:50 millert
6410:
6411: * Makefile.in: Don't lie about making a module, it does the wrong
6412: thing on mach
6413:
6414: 2004-01-09 02:49 millert
6415:
6416: * ltmain.sh: Remove requirement that libs must begin with "lib".
6417: They don't when we point directly at the lib using LD_PRELOAD or
6418: its equivalent.
6419:
6420: 2004-01-09 02:01 millert
6421:
6422: * acsite.m4: Disable support for c++, f77 and java. We don't need
6423: it, it takes a lot of time, and it hosed our check for shared lib
6424: support.
6425:
6426: 2004-01-09 02:00 millert
6427:
6428: * configure: regen
6429:
6430: 2004-01-09 02:00 millert
6431:
6432: * configure.in: Call AC_ENABLE_SHARED and check the status of
6433: enable_shared to know when shared libs are available.
6434:
6435: 2004-01-09 01:37 millert
6436:
6437: * acsite.m4: Duh, OpenBSD suports shared libs too
6438:
6439: 2004-01-09 01:18 millert
6440:
6441: * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6442: qualifiers.
6443:
6444: 2004-01-09 01:15 millert
6445:
6446: * configure, configure.in: o No need to check for sed, libtool
6447: config does that for us o move check for --with-noexec until
6448: after libtool magic is run so we can use $can_build_shared and
6449: $shrext
6450:
6451: 2004-01-09 01:14 millert
6452:
6453: * ltmain.sh: Don't print a bunch of crap about library installs
6454: since we are not really installing a library.
6455:
6456: 2004-01-09 00:38 millert
6457:
6458: * env.c: Make format_env() varargs Add noexec support for Darwin,
6459: MacOS X, Irix, and Tru64
6460:
6461: 2004-01-09 00:32 millert
6462:
6463: * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6464: changes: o no ldconfig in the finish step o assume no libprefix
6465: or version is needed
6466:
6467: 2004-01-09 00:15 millert
6468:
6469: * sudo_noexec.c: Fix compilation under K&R
6470:
6471: 2004-01-06 09:31 millert
6472:
6473: * CHANGES: checkpoint
6474:
6475: 2004-01-06 09:28 millert
6476:
6477: * sudo_noexec.c: stub execve() that just returns EACCES; used for
6478: noexec functionality
6479:
6480: 2004-01-06 01:42 millert
6481:
6482: * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6483: issue with generated code.
6484:
6485: 2004-01-05 16:10 millert
6486:
6487: * def_data.c, def_data.h, def_data.in: Move the environment
6488: defaults to the end and shorten a few of the descriptions.
6489:
6490: 2004-01-05 15:05 millert
6491:
6492: * configure.in, configure: no shared libs on ultris or convexos
6493:
6494: 2004-01-05 15:03 millert
6495:
6496: * Makefile.in, configure, configure.in: Build sudo_noexec shared
6497: object using libtool; could use some cleanup.
6498:
6499: 2004-01-05 14:59 millert
6500:
6501: * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6502:
6503: 2004-01-05 14:56 millert
6504:
6505: * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6506: that order is not important.
6507:
6508: 2004-01-05 12:15 millert
6509:
6510: * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6511: pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6512:
6513: 2004-01-04 22:58 millert
6514:
6515: * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6516: _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6517: option. The default value of noexec_file is set to this.
6518:
6519: 2004-01-04 21:48 millert
6520:
6521: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6522: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6523: support for preloading a shared object containing a dummy
6524: execve() function that just sets error and returns -1. This adds
6525: a "noexec_file" option to load the filename as well as a "noexec"
6526: flag to enable it unconditionally. There is also a NOEXEC tag
6527: that can be attached to specific commands and an EXEC tag to
6528: disable it.
6529:
6530: 2004-01-04 21:40 millert
6531:
6532: * mkdefaults: add missing newline to usage statement
6533:
6534: 2004-01-04 20:39 millert
6535:
6536: * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6537:
6538: 2004-01-04 20:16 millert
6539:
6540: * logging.c: Don't truncate usernames to 8 characters in the log
6541: message.
6542:
6543: 2004-01-04 20:13 millert
6544:
6545: * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6546:
6547: 2004-01-04 20:12 millert
6548:
6549: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6550: sudoers.pod: Add a new option, lecture_file, that can be used to
6551: point to a custom sudo lecture.
6552:
6553: 2003-12-31 17:46 millert
6554:
6555: * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6556: auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6557: zero_bytes() function to do the equivalent of bzero in such a way
6558: that will heopfully not be optimized away by sneaky compilers.
6559:
6560: 2003-12-31 13:35 millert
6561:
6562: * err.c: Use #ifdef __STDC__, not #if __STDC__.
6563:
6564: 2003-12-30 17:41 millert
6565:
6566: * mkdefaults: Always put at least one space between the def_* macro
6567: name and its definition.
6568:
6569: 2003-12-30 17:34 millert
6570:
6571: * configure, configure.in: Adjust code for --without-lecture to
6572: match new values.
6573:
6574: 2003-12-30 17:33 millert
6575:
6576: * visudo.man.in: regen after pasto fix
6577:
6578: 2003-12-30 17:31 millert
6579:
6580: * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6581: from a flag to a tuple.
6582:
6583: 2003-12-30 17:31 millert
6584:
6585: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6586: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6587: support for tuples in def_data.in; these are implemented as an
6588: enum type. Currently there is only a single tuple enum but in
6589: the future we may have one tuple enum per T_TUPLE entry in
6590: def_data.in. Currently listpw, verifypw and lecture are tuples.
6591: This avoids the need to have two entries (one ival, one str) for
6592: pwflags and syslog values.
6593:
6594: lecture is now a tuple with the following values: never, once,
6595: always
6596:
6597: We no longer use both an int and string entry for syslog
6598: facilities and priorities. Instead, there are logfac2str() and
6599: logpri2str() functions that get used when we need to print the
6600: string values.
6601:
6602: 2003-12-30 17:20 millert
6603:
6604: * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6605: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6606: visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6607: auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6608: auth/sudo_auth.c: Create def_* macros for each defaults value so
6609: we no longer need the def_{flag,ival,str,list,mode} macros (which
6610: have been removed). This is a step toward more flexible data
6611: types in def_data.in.
6612:
6613: 2003-12-30 15:55 millert
6614:
6615: * TODO: checkpoint
6616:
6617: 2003-12-22 21:18 millert
6618:
6619: * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6620: unusual for users to place "sudo -k" in a .logout file which can
6621: cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6622: daemon has died. Previously, this would result in useless mail
6623: and logging.
6624:
6625: 2003-12-16 13:51 millert
6626:
6627: * visudo.pod: fix pasto in VISUAL description
6628:
6629: 2003-12-09 22:09 millert
6630:
6631: * configure: regen
6632:
6633: 2003-12-09 22:08 millert
6634:
6635: * CHANGES: checkpoint
6636:
6637: 2003-12-09 22:02 millert
6638:
6639: * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6640: too
6641:
6642: 2003-08-12 16:45 millert
6643:
6644: * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6645: not already there).
6646:
6647: 2003-06-28 21:31 millert
6648:
6649: * auth/pam.c: Fix a core dump on Solaris by preserving the
6650: pam_handle_t we used during authentication for pam_prep_user().
6651: If we didn't authenticate (ie: ticket still valid), we call
6652: pam_init() from pam_prep_user(). This is something of a hack; it
6653: may be better to change the auth API and add an auth_final()
6654: function that acts like pam_prep_user().
6655:
6656: 2003-06-21 12:50 millert
6657:
6658: * set_perms.c: Add explicit declaration of printerr variable in
6659: function header (was defaulting to int which is OK but oh so K&R
6660: :-). From Theo.
6661:
6662: 2003-06-09 19:00 millert
6663:
6664: * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6665:
6666: 2003-06-09 16:07 millert
6667:
6668: * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6669: problem where the sudo process would spin eating up CPU until
6670: sendmail finished when it has to send mail.
6671:
6672: 2003-05-30 16:22 millert
6673:
6674: * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6675: disavowed it
6676:
6677: 2003-05-21 21:53 millert
6678:
6679: * parse.c: Don't assume that getgrnam() calls don't modify contents
6680: of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6681: can happen. Based on a patch from Kirk Webb.
6682:
6683: 2003-05-06 11:25 millert
6684:
6685: * configure.in: missing ;;
6686:
6687: 2003-05-06 00:53 millert
6688:
6689: * configure.in: darwin has a broken setreuid() in at least some
6690: versions
6691:
6692: 2003-05-06 00:31 millert
6693:
6694: * env.c: Fix an off by one error when reallocating the environment;
6695: Kevin Pye
6696:
6697: 2003-04-30 14:04 millert
6698:
6699: * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6700:
6701: 2003-04-28 19:30 millert
6702:
6703: * HISTORY: More info on the early days from Coggs.
6704:
6705: 2003-04-21 14:47 millert
6706:
6707: * auth/kerb5.c: remove errant semicolon that prevented compilation
6708: under heimdal
6709:
6710: 2003-04-15 20:42 millert
6711:
6712: * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6713: env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6714: goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6715: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6716: strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
6717: sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
6718: version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
6719: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6720: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6721: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6722: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
6723: on affected files
6724:
6725: 2003-04-15 20:25 millert
6726:
6727: * LICENSE: slightly different wording for the darpa credit
6728:
6729: 2003-04-15 14:37 millert
6730:
6731: * LICENSE: Add DARPA credit
6732:
6733: 2003-04-14 16:49 millert
6734:
6735: * auth/kerb5.c: Use krb5_princ_component() instead of
6736: krb5_princ_realm() for MIT Kerberos like we did before I messed
6737: things up ;-)
6738:
6739: Use krb5_principal_get_comp_string() to do the same thing w/
6740: Heimdal. I'm not sure if the component should be 0 or 1 in this
6741: case.
6742:
6743: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
6744: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
6745: should be a configure check for this I guess.
6746:
6747: 2003-04-13 15:48 millert
6748:
6749: * TROUBLESHOOTING, config.h.in, configure, configure.in,
6750: sample.sudoers: builtin -> built-in; Jason McIntyre
6751:
6752: 2003-04-13 15:45 millert
6753:
6754: * sudoers.pod: built in -> built-in; Jason McIntyre
6755:
6756: 2003-04-09 16:14 millert
6757:
6758: * CHANGES: checkpoint for 1.6.7p3
6759:
6760: 2003-04-09 16:14 millert
6761:
6762: * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
6763: Spencer. Amazingly, sudo source from 1985 is available via
6764: groups.google.com
6765:
6766: 2003-04-09 16:13 millert
6767:
6768: * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
6769: set rl.rlim_cur to 0 to turn off core dumps. This may be needed
6770: for the RLIMIT_CORE restoration on some OSes.
6771:
6772: 2003-04-04 12:46 millert
6773:
6774: * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
6775:
6776: 2003-04-04 12:45 millert
6777:
6778: * config.h.in, configure, configure.in: Check for heimdal even if
6779: we found krb5-config and define HAVE_HEIMDAL.
6780:
6781: 2003-04-03 22:04 millert
6782:
6783: * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
6784: The former is no longer defined by MIT kerb5 (though it used to
6785: be and indeed remains so in Heimdal).
6786:
6787: 2003-04-03 10:16 millert
6788:
6789: * mkinstalldirs: Remove newer stuff that passes multiple (possibly
6790: duplicate) directories to "mkdir -p" since that seems to break on
6791: Tru64 Unix at least. This basically brings back what shipped
6792: with sudo 1.6.6.
6793:
6794: 2003-04-02 13:57 millert
6795:
6796: * auth/kerb5.c: Correct number of args to
6797: krb5_principal_get_realm() and fix an unclosed comment that hid
6798: the bug.
6799:
6800: 2003-04-02 13:45 millert
6801:
6802: * configure: regen
6803:
6804: 2003-04-02 13:45 millert
6805:
6806: * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
6807: configure.in, version.h: ++version
6808:
6809: 2003-04-02 13:44 millert
6810:
6811: * configure.in: use krb5-config to determine Kerberos V details if
6812: it exists
6813:
6814: 2003-04-02 13:25 millert
6815:
6816: * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
6817: interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
6818: visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
6819: auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
6820: throughout. The main exception is openlog(). Since the admin
6821: may be filtering logs based on the program name in the log files,
6822: hard code this to "sudo".
6823:
6824: 2003-04-02 13:16 millert
6825:
6826: * Makefile.in: Add getprogname.c and err.c
6827:
6828: 2003-04-02 13:15 millert
6829:
6830: * configure: regen
6831:
6832: 2003-04-02 13:15 millert
6833:
6834: * configure.in, config.h.in: Add checks for getprognam(),
6835: __progname and err.h
6836:
6837: 2003-04-02 13:14 millert
6838:
6839: * err.c, emul/err.h: For systems withour err/warn functions.
6840:
6841: 2003-04-02 13:14 millert
6842:
6843: * getprogname.c: For systems neither getprogname() nor __progname;
6844: uses Argv[0].
6845:
6846: 2003-04-01 10:09 millert
6847:
6848: * CHANGES: checkpoint for 1.6.7p1
6849:
6850: 2003-04-01 10:02 millert
6851:
6852: * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
6853:
6854: 2003-04-01 09:58 millert
6855:
6856: * check.c: oflow detection in expand_prompt() was faulty (false
6857: positives). The count was based on strlcat() return value which
6858: includes the length of the entire string.
6859:
6860: 2003-03-30 19:02 millert
6861:
6862: * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
6863:
6864: 2003-03-24 16:09 millert
6865:
6866: * logging.c: g/c unused variable
6867:
6868: 2003-03-24 11:06 millert
6869:
6870: * configure: regen
6871:
6872: 2003-03-24 11:05 millert
6873:
6874: * configure.in: use man sections 8 and 5 for csops
6875:
6876: 2003-03-21 18:11 millert
6877:
6878: * configure: regen
6879:
6880: 2003-03-21 15:10 millert
6881:
6882: * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
6883: of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
6884:
6885: 2003-03-21 14:02 millert
6886:
6887: * configure: regen
6888:
6889: 2003-03-21 14:01 millert
6890:
6891: * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
6892: An alternate libpath may be specified or -blibpath support can be
6893: disabled. Also change conifgure such that -blibpath is not
6894: specified if no -L libpaths were added to SUDO_LDFLAGS.
6895:
6896: 2003-03-20 22:05 millert
6897:
6898: * configure.in: add AIX blibpath support
6899:
6900: 2003-03-20 20:28 millert
6901:
6902: * INSTALL, configure.in: --with-skey and --with-opie now take an
6903: option directory argument This obsoletes a --with-csops hack
6904: (/tools/cs/skey)
6905:
6906: Also remove the remaining direct uses of "echo"
6907:
6908: 2003-03-20 17:44 millert
6909:
6910: * configure.in: Detect KTH Kerberos IV and deal with it. Also make
6911: -lroken optional for KTH Kerberos IV and V.
6912:
6913: 2003-03-20 14:42 millert
6914:
6915: * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
6916: -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
6917: specified variable.
6918:
6919: 2003-03-20 14:40 millert
6920:
6921: * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
6922: There is a new configure option, --with-rpath to control this
6923: behavior.
6924:
6925: 2003-03-19 23:50 millert
6926:
6927: * configure.in: for kerb4 put libdes after libkrb on the link line
6928:
6929: 2003-03-19 23:49 millert
6930:
6931: * auth/kerb4.c: typo
6932:
6933: 2003-03-19 23:33 millert
6934:
6935: * configure.in: fix kerberos lib check when a path is specified
6936:
6937: 2003-03-19 21:04 millert
6938:
6939: * logging.c: Fix boolean thinko in SIGCHLD reaper and call
6940: reapchild after sending mail instead of doing a conditional
6941: sudo_waitpid.
6942:
6943: 2003-03-19 16:20 millert
6944:
6945: * configure: regen
6946:
6947: 2003-03-19 16:19 millert
6948:
6949: * configure.in: replace =DIR with [=DIR] where sensible
6950:
6951: 2003-03-19 16:16 millert
6952:
6953: * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
6954: include/lib detection based on openssh's configure.in
6955:
6956: 2003-03-19 15:58 millert
6957:
6958: * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
6959: argument.
6960:
6961: 2003-03-15 22:03 millert
6962:
6963: * auth/securid.c: Kill remaining strcpy(), the programmer's guide
6964: says username is 32 bytes.
6965:
6966: 2003-03-15 21:18 millert
6967:
6968: * auth/kerb4.c: trat uid_t as unsigned long for printf and use
6969: snprintf, not sprintf
6970:
6971: 2003-03-15 21:18 millert
6972:
6973: * auth/rfc1938.c: use snprintf
6974:
6975: 2003-03-15 15:37 millert
6976:
6977: * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
6978: kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
6979: copyright year
6980:
6981: 2003-03-15 15:31 millert
6982:
6983: * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
6984: Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
6985: logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
6986: sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
6987: visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
6988: copyright year
6989:
6990: 2003-03-15 15:19 millert
6991:
6992: * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
6993: with %lu
6994:
6995: 2003-03-15 15:17 millert
6996:
6997: * configure: regen
6998:
6999: 2003-03-15 15:16 millert
7000:
7001: * configure.in: correct error messages for
7002: --with-sudoers-{mode,uid,gid}
7003:
7004: 2003-03-15 15:10 millert
7005:
7006: * alloc.c: make the malloc(0) error specific to each function to
7007: aid tracking down bugs.
7008:
7009: 2003-03-15 14:49 millert
7010:
7011: * alloc.c: deal with platforms where size_t is signed and there is
7012: no SIZE_MAX or SIZE_T_MAX
7013:
7014: 2003-03-15 14:10 millert
7015:
7016: * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7017: warnings.
7018:
7019: 2003-03-15 13:02 millert
7020:
7021: * sudo.c: Use stat_sudoers macro so --with-stow can work
7022:
7023: 2003-03-15 13:01 millert
7024:
7025: * INSTALL, config.h.in, configure, configure.in: Add support for
7026: --with-stow based on patches from Robert Uhl
7027:
7028: 2003-03-15 12:51 millert
7029:
7030: * env.c: fix indentation
7031:
7032: 2003-03-15 00:21 millert
7033:
7034: * configure.in: back out rev 1.352
7035:
7036: 2003-03-14 20:11 millert
7037:
7038: * lex.yy.c: regen
7039:
7040: 2003-03-14 20:11 millert
7041:
7042: * parse.lex: use strlcpy, not strncpy
7043:
7044: 2003-03-14 19:48 millert
7045:
7046: * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7047: setusercontext() failure.
7048:
7049: 2003-03-14 19:43 millert
7050:
7051: * logging.c: use pid_t
7052:
7053: 2003-03-14 10:43 millert
7054:
7055: * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7056:
7057: 2003-03-14 10:35 millert
7058:
7059: * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7060:
7061: 2003-03-13 21:47 millert
7062:
7063: * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7064:
7065: 2003-03-13 21:38 millert
7066:
7067: * configure: regen
7068:
7069: 2003-03-13 21:38 millert
7070:
7071: * configure.in: put -ldl after -lpam, not before; fixes static
7072: linking on Linux
7073:
7074: 2003-03-13 21:17 millert
7075:
7076: * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7077: getifaddrs() case.
7078:
7079: 2003-03-13 20:24 millert
7080:
7081: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7082: sudoers.cat, visudo.cat: regen
7083:
7084: 2003-03-13 20:23 millert
7085:
7086: * Makefile.in: Preserve copyright notice from .pod file in .man.in
7087: file
7088:
7089: 2003-03-13 20:01 millert
7090:
7091: * visudo.pod: Add sudoers(5) to SEE ALSO
7092:
7093: 2003-03-13 15:27 millert
7094:
7095: * lex.yy.c: regen
7096:
7097: 2003-03-13 15:27 millert
7098:
7099: * parse.lex: Don't assume libc can realloc() a NULL string. If
7100: malloc/realloc fails, make sure we just return; yyerror() is not
7101: terminal.
7102:
7103: 2003-03-13 15:17 millert
7104:
7105: * lex.yy.c: regen
7106:
7107: 2003-03-13 15:17 millert
7108:
7109: * parse.lex: simplify fill_args a little and use strlcpy for
7110: paranoia
7111:
7112: 2003-03-13 15:00 millert
7113:
7114: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7115: testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7116: overflow. In all cases the strings were either pre-allocated to
7117: the correct size of length checks were done before the copy but a
7118: little paranoia can go a long way.
7119:
7120: 2003-03-13 12:54 millert
7121:
7122: * sudo.h: Add strlc{at,py} protos
7123:
7124: 2003-03-13 12:03 millert
7125:
7126: * env.c, interfaces.c: Use erealloc3()
7127:
7128: 2003-03-13 12:00 millert
7129:
7130: * configure: regen
7131:
7132: 2003-03-13 12:00 millert
7133:
7134: * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7135: need >=). Use memcpy() instead of strcpy() in estrdup() so this
7136: is strcpy()-free.
7137:
7138: 2003-03-13 11:58 millert
7139:
7140: * sudo.c: snprintf() a uid as %lu, not %ld to match the
7141: MAX_UID_T_LEN test in configure.
7142:
7143: 2003-03-13 11:56 millert
7144:
7145: * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7146: just unsigned.
7147:
7148: 2003-03-12 18:46 millert
7149:
7150: * sudo.c: Use snprintf() for paranoia
7151:
7152: 2003-03-12 17:16 millert
7153:
7154: * parse.yacc: Use emalloc2 and erealloc3
7155:
7156: 2003-03-12 17:08 millert
7157:
7158: * Makefile.in: strlc{at,py} for those w/o it
7159:
7160: 2003-03-12 17:07 millert
7161:
7162: * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7163:
7164: 2003-03-12 17:07 millert
7165:
7166: * config.h.in, configure, configure.in: Add stlc{at,py} for those
7167: w/o it.
7168:
7169: 2003-03-12 16:51 millert
7170:
7171: * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7172: emalloc2().
7173:
7174: 2003-03-12 16:45 millert
7175:
7176: * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7177: certain size.
7178:
7179: 2003-03-12 16:41 millert
7180:
7181: * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7182: bzero and with error/oflow checking.
7183:
7184: 2003-03-12 16:23 millert
7185:
7186: * alloc.c: Error out on malloc(0); suggested by theo
7187:
7188: 2003-03-09 19:34 millert
7189:
7190: * configure, configure.in: fix a typo; David Krause
7191:
7192: 2003-03-07 10:46 millert
7193:
7194: * sudo.pod: fix typo
7195:
7196: 2003-03-03 21:47 millert
7197:
7198: * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7199:
7200: 2003-03-01 13:20 millert
7201:
7202: * configure.in, config.h.in: not not; Anil Madhavapeddy
7203:
7204: 2003-01-23 03:03 millert
7205:
7206: * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7207:
7208: 2003-01-20 16:13 millert
7209:
7210: * parse.yacc: Add some missing ';' rule terminators that bison
7211: warns about.
7212:
7213: 2003-01-20 16:07 millert
7214:
7215: * config.sub: fix typo I introduced in last merge
7216:
7217: 2003-01-20 15:59 millert
7218:
7219: * configure: regenerate with autoconf 2.57
7220:
7221: 2003-01-20 15:58 millert
7222:
7223: * config.h.in: Add missing "$HOME"
7224:
7225: 2003-01-20 15:57 millert
7226:
7227: * configure.in: Add some more square backets to make autoconf 2.57
7228: happy
7229:
7230: 2003-01-20 14:39 millert
7231:
7232: * config.guess, config.sub, mkinstalldirs: Updates from
7233: autoconf-2.57
7234:
7235: 2003-01-17 18:10 millert
7236:
7237: * lex.yy.c, sudo.tab.h: regen
7238:
7239: 2003-01-17 18:09 millert
7240:
7241: * parse.lex, parse.yacc, sudoers.pod: Add support for
7242: Defaults>RunasUser
7243:
7244: 2003-01-06 19:10 millert
7245:
7246: * visudo.c: fclose() yyin after each yyparse() is done and use
7247: fopen() instead of using freopen().
7248:
7249: 2003-01-06 19:02 millert
7250:
7251: * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7252: It looks like the issue is that yyrestart() does not reset the
7253: start condition to INITIAL which is an issue since we parse
7254: sudoers multiple times.
7255:
7256: 2003-01-06 18:47 millert
7257:
7258: * parse.lex: Work around what appears to be a flex bug when dealing
7259: with files that lack a final newline before EOF. This adds a
7260: rule to match EOF in the non-initial states which resets the
7261: state to INITIAL and throws an error.
7262:
7263: 2003-01-06 15:06 millert
7264:
7265: * visudo.c: o The parser needs sudoers to end with a newline but
7266: some editors (emacs) may not add one. Check for a missing
7267: newline at EOF and add one if needed. o Set quiet flag during
7268: initial sudoers parse (to get options) o Move yyrestart() call
7269: and always use freopen() to open yyin after initial sudoers
7270: parse.
7271:
7272: 2002-12-15 11:24 millert
7273:
7274: * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7275: Want to set effective gid, not real gid, when reading sudoers.
7276:
7277: 2002-12-15 11:08 millert
7278:
7279: * set_perms.c: don't compile set_perms_posix if we have setreuid or
7280: setresuid
7281:
7282: 2002-12-14 14:21 millert
7283:
7284: * sudo.pod, sudoers.pod: document new prompt escapes
7285:
7286: 2002-12-14 14:15 millert
7287:
7288: * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7289: now gets collapsed to "%" as was originally intended. This also
7290: gets rid of lastchar (does lookahead instead of lookback) which
7291: should simplify the logic slightly.
7292:
7293: 2002-12-13 13:20 millert
7294:
7295: * tgetpass.c: Write the prompt *after* turning off echo to avoid
7296: some password characters being echoed on heavily-loaded machines
7297: with fast typists.
7298:
7299: 2002-12-13 13:09 millert
7300:
7301: * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7302:
7303: 2002-12-13 12:48 millert
7304:
7305: * configure.in: Fix IRIX fallout from name changes in man dir/sect
7306: Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7307: DOT edu
7308:
7309: 2002-12-13 11:33 millert
7310:
7311: * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7312: in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7313:
7314: 2002-11-28 18:43 millert
7315:
7316: * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7317: call this for us.
7318:
7319: 2002-11-26 12:09 millert
7320:
7321: * sudo.c: fix typo in comment; Pedro Bastos
7322:
7323: 2002-11-22 14:41 millert
7324:
7325: * INSTALL: document --disable-setresuid
7326:
7327: 2002-11-22 14:41 millert
7328:
7329: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7330: Sprinkle some volatile qualifiers to prevent over-enthusiastic
7331: optimizers from removing memset() calls.
7332:
7333: 2002-11-22 14:11 millert
7334:
7335: * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7336: -Wsign-compare
7337:
7338: 2002-11-22 14:09 millert
7339:
7340: * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7341: version based on setresuid() or setreuid() when possible since
7342: that allows us to support the stay_setuid option and we always
7343: know exactly what the semantics will be (various Linux kernels
7344: have broken POSIX saved uid support).
7345:
7346: 2002-11-22 14:08 millert
7347:
7348: * config.h.in, configure: regen from configure.in
7349:
7350: 2002-11-22 14:07 millert
7351:
7352: * configure.in: Add checks for setresuid() and a way to disable
7353: using it
7354:
7355: 2002-11-22 14:05 millert
7356:
7357: * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7358: or setre[ug]id(). The new set_perms stuff only uses things it
7359: knows are there.
7360:
7361: 2002-11-22 13:33 millert
7362:
7363: * sudo.c: Before exec, restore state of signal handlers to be the
7364: same as when we were initialy invoked instead of just reseting to
7365: SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7366: patch from Paul Markham.
7367:
7368: 2002-11-22 13:23 millert
7369:
7370: * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7371: message when sudo is run by root and no_root_sudo is set
7372:
7373: 2002-09-19 17:27 millert
7374:
7375: * README: update ftp link for bison
7376:
7377: 2002-07-20 08:30 millert
7378:
7379: * set_perms.c: Error out if setusercontext() fails and the runas
7380: user is not root.
7381:
7382: 2002-05-20 16:51 millert
7383:
7384: * auth/securid5.c: Fix rcsid
7385:
7386: 2002-05-20 16:50 millert
7387:
7388: * configure.in: Fix SecurID API test
7389:
7390: 2002-05-17 13:20 millert
7391:
7392: * env.c: typo in comment
7393:
7394: 2002-05-17 13:20 millert
7395:
7396: * configure.in: securid5 stuff needs pthreads. Just adding
7397: -lpthread is suboptimal but I don't see a better way at the
7398: moment.
7399:
7400: 2002-05-17 13:04 millert
7401:
7402: * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7403: Michael Stroucken
7404:
7405: 2002-05-17 13:02 millert
7406:
7407: * configure.in: Add check for SecurID 5.0 API
7408:
7409: 2002-05-08 16:46 millert
7410:
7411: * strerror.c: We actually do still need config.h to get the 'const'
7412: definition for K&R C.
7413:
7414: 2002-05-05 16:43 millert
7415:
7416: * configure: regen with autoconf 2.5.3
7417:
7418: 2002-05-05 16:25 millert
7419:
7420: * configure.in: Don't set sysconfdir to '/etc' if the user has
7421: specified a --prefix.
7422:
7423: 2002-05-05 16:14 millert
7424:
7425: * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7426: don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7427: to workaround a bug
7428:
7429: 2002-05-05 15:58 millert
7430:
7431: * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7432: dump_defaults() knows how to dump lists.
7433:
7434: 2002-05-04 21:31 millert
7435:
7436: * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7437: INSTALL.binary, README: ++version
7438:
7439: 2002-05-04 20:57 millert
7440:
7441: * sudoers.pod: document timestampowner
7442:
7443: 2002-05-04 20:45 millert
7444:
7445: * check.c: Don't call set_perms() when doing timestamp stuff unless
7446: timestamp_uid != 0.
7447:
7448: 2002-05-04 20:43 millert
7449:
7450: * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7451: testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7452: is no longer used
7453:
7454: 2002-05-03 18:48 millert
7455:
7456: * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7457: timestamp dirs. This allows the timestamp dir to be shared via
7458: NFS (though this is not recommended).
7459:
7460: 2002-05-03 18:47 millert
7461:
7462: * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7463: of the authentication timestamp dir"
7464:
7465: 2002-05-02 15:40 millert
7466:
7467: * env.c: Don't try to pre-compute the size of the new envp, just
7468: allocate space up front and realloc as needed. Changes to the
7469: new env pointer must all be made through insert_env() which now
7470: keeps track of spaced used and allocates as needed.
7471:
7472: 2002-04-26 15:12 millert
7473:
7474: * configure: regen
7475:
7476: 2002-04-26 15:12 millert
7477:
7478: * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7479:
7480: 2002-04-25 11:36 millert
7481:
7482: * INSTALL.binary, README: ++version
7483:
7484: 2002-04-25 11:35 millert
7485:
7486: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7487: visudo.man.in, configure: regen
7488:
7489: 2002-04-25 11:31 millert
7490:
7491: * CHANGES, RUNSON, TODO: Sync with 1.6.6
7492:
7493: 2002-04-25 11:30 millert
7494:
7495: * check.c: The the loop used to expand %h and %u, the lastchar
7496: variable was not being initialized. This means that if the last
7497: char in the prompt is '%' and the first char is 'h' or 'u' a
7498: extra copy of the host or user name would be copied, for which
7499: space had not been allocated.
7500:
7501: 2002-04-18 11:41 millert
7502:
7503: * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7504: version to 1.6.6
7505:
7506: 2002-04-18 11:39 millert
7507:
7508: * auth/afs.c: #undef VOID to get rid of an AFS warning
7509:
7510: 2002-04-18 11:38 millert
7511:
7512: * env.c: Use easprintf instead of emalloc + sprintf for some
7513: things.
7514:
7515: 2002-03-15 19:45 millert
7516:
7517: * lex.yy.c: regen
7518:
7519: 2002-03-15 19:44 millert
7520:
7521: * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7522: Jepeway's email address so people don't bug him ;-)
7523:
7524: 2002-03-11 22:19 millert
7525:
7526: * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7527: and also call endgrent() at the same time.
7528:
7529: 2002-02-21 22:23 millert
7530:
7531: * INSTALL: Make it clear which configure options take arguments.
7532:
7533: 2002-01-25 13:38 millert
7534:
7535: * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7536: is no RLIM_INFINITY, just pretend it is -1. This works because
7537: we only check for RLIM_INFINITY and do not set anything to that
7538: value.
7539:
7540: 2002-01-22 11:43 millert
7541:
7542: * auth/pam.c: Zero and free allocated memory when there is a
7543: conversation error.
7544:
7545: 2002-01-21 22:37 millert
7546:
7547: * auth/bsdauth.c: Use sigaction() not signal()
7548:
7549: 2002-01-21 22:26 millert
7550:
7551: * INSTALL: Mention that some linux kernels have broken POSIX saved
7552: ID support
7553:
7554: 2002-01-21 21:03 millert
7555:
7556: * CHANGES: checkpoint for 1.6.5p2
7557:
7558: 2002-01-21 21:01 millert
7559:
7560: * configure: regen
7561:
7562: 2002-01-21 21:01 millert
7563:
7564: * configure.in: Add --disable-setreuid flag
7565:
7566: 2002-01-21 21:00 millert
7567:
7568: * INSTALL: Document new --disable-setreuid option and change
7569: description for --disable-saved-ids to match new error message.
7570:
7571: 2002-01-21 21:00 millert
7572:
7573: * set_perms.c: fatal() now takes an argument that determines
7574: whether or not to call perror().
7575:
7576: 2002-01-21 20:58 millert
7577:
7578: * PORTING, TROUBLESHOOTING: Update for new error messages from
7579: set_perms()
7580:
7581: 2002-01-21 17:46 millert
7582:
7583: * auth/pam.c: Make this compile w/o warnings
7584:
7585: 2002-01-21 17:36 millert
7586:
7587: * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7588:
7589: 2002-01-21 17:25 millert
7590:
7591: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7592: was not zeroed after use when AIX authentication, BSD
7593: authentication, FWTK or PAM was in use.
7594:
7595: 2002-01-20 14:21 millert
7596:
7597: * auth/pam.c: Avoid giving PAM a NULL password response, use the
7598: empty string instead. This avoids a log warning when the user
7599: hits ^C at the password prompt when PAM is in use.
7600:
7601: 2002-01-19 19:46 millert
7602:
7603: * auth/pam.c: Don't check the return value of pam_setcred(). In
7604: Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7605: not the return code for the setcred module. Because we haven't
7606: called pam_authenticate(), this is not set and so pam_setcred()
7607: returns PAM_PERM_DENIED.
7608:
7609: 2002-01-19 19:43 millert
7610:
7611: * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7612: and a directory.
7613:
7614: 2002-01-18 14:18 millert
7615:
7616: * configure: regen
7617:
7618: 2002-01-18 14:18 millert
7619:
7620: * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7621: has a bogus setreuid() o new NetBSD has a real setreuid() o add
7622: check for freeifaddrs() if getifaddrs() exists.
7623:
7624: 2002-01-18 14:17 millert
7625:
7626: * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7627: so add a test for that and if it is not present just use free().
7628:
7629: 2002-01-17 11:30 millert
7630:
7631: * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7632:
7633: 2002-01-17 10:56 millert
7634:
7635: * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7636: skeyaccess() denies access to normal passwords, not AUTH_FATAL
7637: (which just causes an exit).
7638:
7639: 2002-01-17 10:35 millert
7640:
7641: * visudo.c: Don't use memory after it has been freed.
7642:
7643: 2002-01-17 00:24 millert
7644:
7645: * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7646: Patch from Phillip E. Lobbes
7647:
7648: 2002-01-16 20:00 millert
7649:
7650: * BUGS: ++version
7651:
7652: 2002-01-16 19:53 millert
7653:
7654: * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7655:
7656: 2002-01-16 18:37 millert
7657:
7658: * configure: regen
7659:
7660: 2002-01-16 18:37 millert
7661:
7662: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7663: version 1.6.5
7664:
7665: 2002-01-16 18:37 millert
7666:
7667: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7668: visudo.man.in: sudo version 1.6.5
7669:
7670: 2002-01-16 16:28 millert
7671:
7672: * logging.c: o when invoking the mailer as root use a hard-coded
7673: environment that doesn't include any info from the user's
7674: environment. Basically paranoia.
7675:
7676: o Add support for the NO_ROOT_MAILER compile-time option and run
7677: the mailer as the user and not root if NO_ROOT_MAILER is
7678: defined.
7679:
7680: 2002-01-16 16:27 millert
7681:
7682: * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7683:
7684: 2002-01-16 16:26 millert
7685:
7686: * configure: regen
7687:
7688: 2002-01-16 16:26 millert
7689:
7690: * version.h: version 1.6.5
7691:
7692: 2002-01-16 16:26 millert
7693:
7694: * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7695: option to run the mailer as the user and not root.
7696:
7697: 2002-01-16 12:44 millert
7698:
7699: * CHANGES: checkpoint for 1.6.4p2
7700:
7701: 2002-01-15 19:22 millert
7702:
7703: * PORTING: Mention the "seteuid(0): Operation not permitted"
7704: problem here too just for good measure.
7705:
7706: 2002-01-15 18:43 millert
7707:
7708: * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7709: preserved from the user's environment instead of being reset
7710: based on the passwd database when the "env_reset" option was
7711: used. Now it is reset as it should be.
7712:
7713: 2002-01-15 17:47 millert
7714:
7715: * configure: regen
7716:
7717: 2002-01-15 17:47 millert
7718:
7719: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
7720: sudo.c: Add a configure option to turn off use of POSIX saved IDs
7721:
7722: 2002-01-15 15:48 millert
7723:
7724: * configure: regen
7725:
7726: 2002-01-15 15:48 millert
7727:
7728: * configure.in: add --with-efence option
7729:
7730: 2002-01-15 15:39 millert
7731:
7732: * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
7733: problem where "sudo -l" would not work if always_set_home was
7734: set.
7735:
7736: 2002-01-15 13:16 millert
7737:
7738: * lex.yy.c: regen
7739:
7740: 2002-01-15 13:16 millert
7741:
7742: * parse.lex: Quoted commas were not being treated correctly in
7743: command line arguments.
7744:
7745: 2002-01-14 20:53 millert
7746:
7747: * sudo.c: o Move the call to rebuild_env() until after
7748: MODE_RESET_HOME is set. Otherwise, the set_home option has no
7749: effect.
7750:
7751: o Fix use of freed memory when the "fqdn" flag is set. This was
7752: introduced by the fix for the "segv when gethostbynam() fails"
7753: bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
7754: not set so there is no need to check the "fqdn" flag in
7755: set_fqdn() itself.
7756:
7757: 2002-01-14 20:45 millert
7758:
7759: * env.c: Add 'continue' statements to optimize the switch
7760: statement. From Solar.
7761:
7762: 2002-01-13 13:42 millert
7763:
7764: * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
7765:
7766: 2002-01-13 13:36 millert
7767:
7768: * sudoers.pod: Add caveat about stay_setuid flag
7769:
7770: 2002-01-13 13:29 millert
7771:
7772: * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
7773: is not set, set all uids to 0 and use set_perms_fallback().
7774:
7775: 2002-01-13 13:28 millert
7776:
7777: * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
7778: used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
7779:
7780: 2002-01-13 13:27 millert
7781:
7782: * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
7783: mailer since we never want to run the mailer setuid.
7784:
7785: 2002-01-12 17:55 millert
7786:
7787: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
7788: visudo.pod: Use sudo.ws instead of courtesan.com in URLs
7789:
7790: 2002-01-12 14:00 millert
7791:
7792: * Makefile.in, Makefile.binary: Fix mansect substitution
7793:
7794: 2002-01-12 13:15 millert
7795:
7796: * Makefile.in: Substitute man sections in Makefile.binary
7797:
7798: 2002-01-12 13:15 millert
7799:
7800: * Makefile.binary: Sync install targets with Makefile.in and
7801: substitute in man sections.
7802:
7803: 2002-01-12 13:09 millert
7804:
7805: * INSTALL, INSTALL.binary: version is 1.6.4
7806:
7807: 2002-01-12 12:59 millert
7808:
7809: * Makefile.in: Repair bindist target
7810:
7811: 2002-01-12 11:43 millert
7812:
7813: * CHANGES: sync for 1.6.4
7814:
7815: 2002-01-10 13:00 millert
7816:
7817: * install-sh: Fix case where neither whoami nor id are found
7818:
7819: 2002-01-09 12:35 millert
7820:
7821: * install-sh: If neither whoami nor id exists, just assume we are
7822: root.
7823:
7824: 2002-01-09 11:56 millert
7825:
7826: * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
7827: to be needed on AIX which for some reason isn't pulling in the
7828: malloc prototype.
7829:
7830: 2002-01-08 10:00 millert
7831:
7832: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
7833:
7834: 2002-01-08 09:21 millert
7835:
7836: * CHANGES: checkpoint
7837:
7838: 2002-01-08 09:20 millert
7839:
7840: * sudo.c: Defer assigning new environment until right before the
7841: exec.
7842:
7843: 2002-01-08 09:08 millert
7844:
7845: * parse.c: kill extra blank line
7846:
7847: 2002-01-07 13:59 millert
7848:
7849: * configure: regen
7850:
7851: 2002-01-07 13:59 millert
7852:
7853: * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
7854: motorola gcc-derived compiler doesn't recognise -O2.
7855:
7856: 2002-01-06 23:02 millert
7857:
7858: * HISTORY: Clarify origins of Root Group sudo a bit based on info
7859: from billp@rootgroup.com
7860:
7861: 2002-01-02 22:41 millert
7862:
7863: * LICENSE: 2002
7864:
7865: 2002-01-02 22:26 millert
7866:
7867: * CHANGES: checkpoint for 1.6.4rc1
7868:
7869: 2002-01-02 17:40 millert
7870:
7871: * config.h.in: now generated via autoheader
7872:
7873: 2002-01-02 17:40 millert
7874:
7875: * configure: regen
7876:
7877: 2002-01-02 17:37 millert
7878:
7879: * compat.h: Move in some stuff that was previously in config.h.
7880:
7881: 2002-01-02 17:36 millert
7882:
7883: * configure.in, aclocal.m4: Add info for autoheader.
7884:
7885: 2002-01-01 16:53 millert
7886:
7887: * Makefile.in: o Add DESTDIR support
7888: o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
7889: non-root installs
7890:
7891: 2002-01-01 16:48 millert
7892:
7893: * install-sh: Add -M option (like -m but only for root) If we can't
7894: find "whoami", use "id" w/ some sed.
7895:
7896: 2002-01-01 14:01 millert
7897:
7898: * configure: regen
7899:
7900: 2002-01-01 14:00 millert
7901:
7902: * configure.in: allow user to always override mansectsu and
7903: mansectform
7904:
7905: 2001-12-31 17:05 millert
7906:
7907: * mkinstalldirs: update from autoconf 2.52
7908:
7909: 2001-12-31 17:03 millert
7910:
7911: * config.guess, config.sub: Update from autoconf 2.52
7912:
7913: 2001-12-31 16:57 millert
7914:
7915: * configure: regen with autoconf 2.52
7916:
7917: 2001-12-31 16:57 millert
7918:
7919: * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
7920: compiler in ANSI mode
7921: o Remove compiler-specific checks for HP-UX now that we use
7922: AC_PROG_CC_STDC
7923:
7924: 2001-12-31 12:19 millert
7925:
7926: * RUNSON: Checkpoint
7927:
7928: 2001-12-31 12:18 millert
7929:
7930: * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
7931: for the target user; on Linux this often sets resource limits.
7932: o When calling pam_end(), try to convert the auth->result to a
7933: PAM_FOO value. This is a hack--we really need to stash the
7934: last PAM_FOO value received and use that instead.
7935:
7936: 2001-12-31 12:18 millert
7937:
7938: * set_perms.c, sudo.h: o Add pam_prep_user function to call
7939: pam_setcred() for the target user; on Linux this often sets
7940: resource limits.
7941:
7942: 2001-12-31 00:53 millert
7943:
7944: * env.c: Fix off by one error in number of bytes allocated via
7945: malloc (does not affected any released version of sudo).
7946:
7947: 2001-12-30 17:12 millert
7948:
7949: * lex.yy.c: regen
7950:
7951: 2001-12-30 17:12 millert
7952:
7953: * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
7954: variable w/o requiring that they be quoted.
7955:
7956: 2001-12-30 14:26 millert
7957:
7958: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
7959: quotes are needed when adding/deleting/assigning a single value
7960: to a list.
7961:
7962: 2001-12-30 13:58 millert
7963:
7964: * Makefile.in: Don't rely on mkdefaults being executable, call perl
7965: explicitly.
7966:
7967: 2001-12-30 13:41 millert
7968:
7969: * parse.yacc: Remove some XXX that are no longer relevant.
7970:
7971: 2001-12-30 13:40 millert
7972:
7973: * defaults.c: o Roll our own loop instead of using strpbrk() for
7974: better grokability o When adding to a list we must malloc() and
7975: use memcpy(), not strdup() since we must only copy len bytes
7976: from str.
7977:
7978: 2001-12-21 16:49 millert
7979:
7980: * parse.yacc: typo in comment
7981:
7982: 2001-12-19 11:50 millert
7983:
7984: * CHANGES: checkpoint
7985:
7986: 2001-12-19 10:56 millert
7987:
7988: * configure: regen
7989:
7990: 2001-12-19 10:56 millert
7991:
7992: * configure.in: avoid the -g flag unless --with-devel was specified
7993:
7994: 2001-12-19 10:04 millert
7995:
7996: * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
7997: from the tarball
7998:
7999: 2001-12-19 09:46 millert
8000:
8001: * Makefile.in: def_data.c was missing
8002:
8003: 2001-12-18 12:42 millert
8004:
8005: * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8006: case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8007: in keep_env
8008:
8009: 2001-12-17 20:48 millert
8010:
8011: * TODO: Another TODO item
8012:
8013: 2001-12-17 19:50 millert
8014:
8015: * sudoers: Add comment for Default section so folks know where it
8016: should go.
8017:
8018: 2001-12-17 18:56 millert
8019:
8020: * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8021: case
8022:
8023: 2001-12-17 18:35 millert
8024:
8025: * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8026:
8027: 2001-12-17 18:33 millert
8028:
8029: * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8030: o a User_List can not contain a uid
8031: o mention that the Defaults section should come after Alias
8032: definitions but before the user specifications
8033:
8034: 2001-12-15 11:51 millert
8035:
8036: * sudoers.cat, sudoers.man.in: regen
8037:
8038: 2001-12-15 11:51 millert
8039:
8040: * sudoers.pod: Fix listpw and verifypw sections, they were not
8041: being formatted properly.
8042:
8043: 2001-12-15 11:39 millert
8044:
8045: * sudoers.cat, sudoers.man.in: regen
8046:
8047: 2001-12-15 11:38 millert
8048:
8049: * sudoers.pod: fix typos
8050:
8051: 2001-12-15 10:57 millert
8052:
8053: * configure: regen
8054:
8055: 2001-12-15 10:57 millert
8056:
8057: * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8058: rolling our own
8059:
8060: 2001-12-15 10:33 millert
8061:
8062: * README: Reference sudo.ws not courtesan.com
8063:
8064: 2001-12-15 10:29 millert
8065:
8066: * PORTING: Add notes on shadow passwords
8067:
8068: 2001-12-15 00:48 millert
8069:
8070: * BUGS: In list mode (sudo -l), characters escaped with a backslash
8071: are shown verbatim with the backslash.
8072:
8073: 2001-12-15 00:44 millert
8074:
8075: * sudoers: Add simple examples from OpenBSD (Marc Espie)
8076:
8077: 2001-12-15 00:40 millert
8078:
8079: * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8080: SIGTSTP.
8081:
8082: 2001-12-14 21:53 millert
8083:
8084: * CHANGES: minor prettyification
8085:
8086: 2001-12-14 21:43 millert
8087:
8088: * CHANGES: Updated change log
8089:
8090: 2001-12-14 21:27 millert
8091:
8092: * testsudoers.c: Fix CIDR handling here too.
8093:
8094: 2001-12-14 21:21 millert
8095:
8096: * auth/pam.c: Apparently a NULL response is OK
8097:
8098: 2001-12-14 21:19 millert
8099:
8100: * TODO: Checkpoint for upcoming beta release
8101:
8102: 2001-12-14 21:17 millert
8103:
8104: * TROUBLESHOOTING: Many people believe that adding a runas spec
8105: should obviate the need for the -u flag. It does not.
8106:
8107: 2001-12-14 21:11 millert
8108:
8109: * RUNSON: checkpoint update for upcoming 1.6.4 beta
8110:
8111: 2001-12-14 20:44 millert
8112:
8113: * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8114: HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8115: now
8116:
8117: 2001-12-14 20:07 millert
8118:
8119: * PORTING: Add signals section
8120:
8121: 2001-12-14 20:00 millert
8122:
8123: * configure: regen
8124:
8125: 2001-12-14 20:00 millert
8126:
8127: * configure.in: Fix check for sigaction_t
8128:
8129: 2001-12-14 19:45 millert
8130:
8131: * sudo.c: XXX - should call find_path() as runas user, not root.
8132: Can't do that until the parser changes though.
8133:
8134: 2001-12-14 19:38 millert
8135:
8136: * sudo.c: If find_path() fails as root, try again as the invoking
8137: user (useful for NFS). Idea from Chip Capelik.
8138:
8139: 2001-12-14 19:28 millert
8140:
8141: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8142: after pod file changes
8143:
8144: 2001-12-14 19:24 millert
8145:
8146: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8147: sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8148: Previously sudo would not call initgroups() if the target user
8149: was root. Now it always calls initgroups() unless the -P command
8150: line option or the "preserve_groups" sudoers option is set. Idea
8151: from TJ Saunders.
8152:
8153: 2001-12-14 18:38 millert
8154:
8155: * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8156:
8157: 2001-12-14 18:33 millert
8158:
8159: * logging.c: Fix compilation on K&C
8160:
8161: 2001-12-14 18:14 millert
8162:
8163: * configure: regen
8164:
8165: 2001-12-14 18:14 millert
8166:
8167: * configure.in: Add check for sigaction_t -- IRIX already defines
8168: this so don't redefine it.
8169:
8170: 2001-12-14 17:15 millert
8171:
8172: * snprintf.c: fix typo
8173:
8174: 2001-12-14 17:12 millert
8175:
8176: * interfaces.c: need stdlib.h here too
8177:
8178: 2001-12-14 15:31 millert
8179:
8180: * configure: regen
8181:
8182: 2001-12-14 15:31 millert
8183:
8184: * configure.in: Remove redundant checks for string.h, strings.h and
8185: unistd.h
8186:
8187: 2001-12-14 15:29 millert
8188:
8189: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8190: visudo.man.in: Regen from pod files
8191:
8192: 2001-12-14 15:03 millert
8193:
8194: * BUGS: Update for 1.6.4
8195:
8196: 2001-12-14 14:59 millert
8197:
8198: * configure, lex.yy.c: regen
8199:
8200: 2001-12-14 14:56 millert
8201:
8202: * strerror.c: Return EINVAL if errnum > sys_nerr
8203:
8204: 2001-12-14 14:54 millert
8205:
8206: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8207: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8208: sudo.pod, auth/sudo_auth.h: o Update copyright year
8209:
8210: 2001-12-14 14:54 millert
8211:
8212: * configure.in: o Don't define STDC_HEADERS unconditionally for
8213: IRIX o Update copyright year
8214:
8215: 2001-12-14 14:53 millert
8216:
8217: * README: update version
8218:
8219: 2001-12-14 14:52 millert
8220:
8221: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8222: fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8223: logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8224: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8225: utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8226: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8227: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8228: auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8229: STDC_HEADERS define properly o Update copyright year
8230:
8231: 2001-12-14 01:53 millert
8232:
8233: * configure: regen
8234:
8235: 2001-12-14 01:53 millert
8236:
8237: * tgetpass.c: flags set in signal handlers should be volatile
8238: sig_atomic_t
8239:
8240: 2001-12-14 01:52 millert
8241:
8242: * config.h.in, configure.in: Add checks for volatile and
8243: sig_atomic_t
8244:
8245: 2001-12-14 01:42 millert
8246:
8247: * lex.yy.c, configure: regen
8248:
8249: 2001-12-14 01:40 millert
8250:
8251: * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8252: find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8253: option since it cannot work with the existing parser.
8254:
8255: 2001-12-14 01:26 millert
8256:
8257: * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8258:
8259: 2001-12-14 01:24 millert
8260:
8261: * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8262: not listed in env_keep o If no PATH is in the environment use a
8263: default value o If TERM is not set in the non-reset case also
8264: give it a default value.
8265:
8266: 2001-12-14 01:17 millert
8267:
8268: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8269: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8270: on systems that define in paths.h
8271:
8272: 2001-12-14 01:15 millert
8273:
8274: * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8275: skeyaccess(3) if it is present in libskey.
8276:
8277: 2001-12-12 21:42 millert
8278:
8279: * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8280:
8281: 2001-12-12 21:24 millert
8282:
8283: * parse.lex: '\\' is a perfectly legal character to have in a
8284: command line argument.
8285:
8286: 2001-12-12 20:24 millert
8287:
8288: * sudo.c: o Defer call to set_fqdn() until it is safe to use
8289: log_error() o Don't print errno string value if gethostbyname
8290: fails, it is not relevant
8291:
8292: 2001-12-12 20:07 millert
8293:
8294: * parse.c: Fix CIDR -> in_addr_t conversion.
8295:
8296: 2001-12-12 16:21 millert
8297:
8298: * sudoers.pod: Remove an extra "User_List" in the User_Spec
8299: definition From ybertrand AT snoopymail.com
8300:
8301: 2001-12-12 16:00 millert
8302:
8303: * parse.c: Make 'listpw=never' work for users who are not
8304: explicitly mentioned in sudoers.
8305:
8306: 2001-12-12 15:40 millert
8307:
8308: * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8309:
8310: 2001-12-12 15:34 millert
8311:
8312: * sudoers.pod: Document new list Defaults type and convert env_keep
8313: and env_delete to lists. Document new env_check option.
8314:
8315: 2001-12-12 15:11 millert
8316:
8317: * lex.yy.c, sudo.tab.h: regen parser
8318:
8319: 2001-12-12 14:56 millert
8320:
8321: * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8322: a Runas spec to #[0-9-]+.
8323:
8324: 2001-12-12 14:55 millert
8325:
8326: * configure: regen
8327:
8328: 2001-12-12 14:55 millert
8329:
8330: * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8331:
8332: 2001-12-12 14:43 millert
8333:
8334: * config.h.in, configure.in: Add check for skeyaccess(3)
8335:
8336: 2001-12-11 19:47 millert
8337:
8338: * visudo.pod: Document new -c, -f, and -q options
8339:
8340: 2001-12-11 19:41 millert
8341:
8342: * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8343: use getopt(3)
8344:
8345: 2001-12-11 19:31 millert
8346:
8347: * configure: regen
8348:
8349: 2001-12-11 19:31 millert
8350:
8351: * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8352: a replacement macro if it doesn't exist.
8353:
8354: 2001-12-11 18:22 millert
8355:
8356: * visudo.c: In check-only mode, don't create sudoers if it does not
8357: already exist.
8358:
8359: 2001-12-11 18:06 millert
8360:
8361: * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8362: variable name
8363: o Add support for "+=" and "-=" list operators
8364: o replace some 1 and 0 with TRUE and FALSE for greater
8365: legibility.
8366:
8367: 2001-12-11 18:05 millert
8368:
8369: * parse.lex: o Use exclusive start conditions to remove some
8370: ambiguity in the
8371: lexer. Also reorder some things for clarity.
8372: o Add support for "+=" and "-=" list operators.
8373: o Use the new DEFVAR token to denote a Defaults variable name.
8374:
8375: 2001-12-11 18:03 millert
8376:
8377: * sudo.h: Prototype init_envtables()
8378:
8379: 2001-12-11 18:02 millert
8380:
8381: * env.c: o Convert environment handling to use lists instead of
8382: strings.
8383: This greatly simplifies routines that need to do "foreach"
8384: type
8385: operations.
8386: o Add new init_envtables() function to set env_check and
8387: env_delete
8388: defaults based on initial_badenv_table and
8389: initial_checkenv_table
8390: (formerly sudo_badenv_table).
8391:
8392: 2001-12-11 18:00 millert
8393:
8394: * defaults.c, defaults.h: o Add a new LIST type and functions to
8395: manipulate it.
8396: o This is for use with environment handling variables.
8397: o Call new init_envtables() routine inside init_defaults() to
8398: initialize the environment lists.
8399:
8400: 2001-12-11 17:57 millert
8401:
8402: * def_data.c, def_data.h, def_data.in: Convert environment options
8403: to use the new LIST type and add a new one, env_check that only
8404: deletes if the sanity check fails.
8405:
8406: 2001-12-11 17:55 millert
8407:
8408: * testsudoers.c: Add dummy version of init_envtables()
8409:
8410: 2001-12-11 17:53 millert
8411:
8412: * parse.yacc: honor quiet mode
8413:
8414: 2001-12-11 17:51 millert
8415:
8416: * visudo.c: Add check-only mode
8417:
8418: 2001-12-10 20:27 millert
8419:
8420: * mkdefaults: Fix generation of entries with NULL descriptions.
8421:
8422: 2001-12-09 00:27 millert
8423:
8424: * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8425:
8426: 2001-12-09 00:20 millert
8427:
8428: * sudo.c: Must reset signal handlers before we exec
8429:
8430: 2001-12-09 00:16 millert
8431:
8432: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8433: carefule now that tgetpass() can return NULL (user hit ^C). PAM
8434: version needs testing. Set SIGTSTP to SIG_DFL during password
8435: entry so user can suspend us.
8436:
8437: 2001-12-09 00:14 millert
8438:
8439: * tgetpass.c: Add support for interrupting/suspending tgetpass via
8440: keyboard input. If you suspend sudo from the password prompt and
8441: resume it will re-prompt you.
8442:
8443: 2001-12-09 00:09 millert
8444:
8445: * sudo.c: Don't block keyboard interrupt signals, just set them to
8446: SIG_IGN.
8447:
8448: 2001-12-08 14:48 millert
8449:
8450: * config.h.in: add back HAVE_SIGACTION
8451:
8452: 2001-12-08 14:44 millert
8453:
8454: * configure: regen
8455:
8456: 2001-12-08 14:44 millert
8457:
8458: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8459: POSIX_SIGNALS define and old signal support now that we emulate
8460: POSIX ones Also be sure to correctly initialize struct sigaction.
8461:
8462: 2001-12-08 14:42 millert
8463:
8464: * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8465: wrapper.
8466:
8467: 2001-12-08 14:39 millert
8468:
8469: * compat.h: Add scaffolding for POSIX signal emulation
8470:
8471: 2001-12-08 14:36 millert
8472:
8473: * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8474: since we don't include stdio.h
8475:
8476: 2001-12-08 14:23 millert
8477:
8478: * sigaction.c: Emulate sigaction() using sigvec()
8479:
8480: 2001-11-12 19:32 millert
8481:
8482: * sudoers.pod: Document new behavior of negative values of
8483: timestamp_timeout Fix a typo
8484:
8485: 2001-11-12 19:31 millert
8486:
8487: * sudo.pod: Add security note about command not being logged after
8488: 'sudo su' and friends.
8489:
8490: 2001-11-12 19:19 millert
8491:
8492: * sudo.pod: Mention that -V prints default values when run as root,
8493: including the list of environment variables to clear.
8494:
8495: 2001-11-12 19:14 millert
8496:
8497: * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8498: quoting of C<> entries.
8499:
8500: 2001-11-12 13:12 millert
8501:
8502: * def_data.c, def_data.h, def_data.in, sudoers.pod,
8503: auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8504: behavior to also send mail when the password is wrong
8505:
8506: 2001-11-12 13:08 millert
8507:
8508: * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8509: is run by root.
8510:
8511: 2001-11-11 23:52 millert
8512:
8513: * sudoers.pod: document env_delete
8514:
8515: 2001-11-11 23:51 millert
8516:
8517: * env.c: Add support for '*' in env_keep when not resetting the
8518: environment (ie: the normal case).
8519:
8520: 2001-11-11 23:47 millert
8521:
8522: * env.c: Add env_delete variable that lets the user replace/add to
8523: the bad_env_table. Allow '*' wildcard in env_keep entries.
8524:
8525: 2001-11-06 13:59 millert
8526:
8527: * mkinstalldirs: Force umask to 022 to guarantee sane directory
8528: permissions.
8529:
8530: 2001-11-02 18:09 millert
8531:
8532: * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8533: dependency
8534:
8535: 2001-11-02 17:25 millert
8536:
8537: * mkdefaults: fix breakage in last commit
8538:
8539: 2001-11-02 17:18 millert
8540:
8541: * Makefile.in: acsite.m4 -> aclocal.m4
8542:
8543: 2001-11-02 15:59 millert
8544:
8545: * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8546: previous commit
8547:
8548: 2001-11-02 15:57 millert
8549:
8550: * def_data.c: regenerated from def_data.in
8551:
8552: 2001-11-02 15:56 millert
8553:
8554: * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8555: things use instead of T_INT If timestamp_timeout is < 0 then
8556: treat the ticket as never expiring (to be expired manually by the
8557: user).
8558:
8559: 2001-11-02 15:51 millert
8560:
8561: * def_data.in: change most T_INT -> T_UINT
8562:
8563: 2001-11-02 15:51 millert
8564:
8565: * mkdefaults: fix warning when no args
8566:
8567: 2001-11-02 12:52 millert
8568:
8569: * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8570: call _exit() if we are a signal handler. We no longer print the
8571: signal number but the user can just check the exit value for
8572: that.
8573:
8574: 2001-10-16 01:35 millert
8575:
8576: * logging.c: when setting up pipes in child process check for case
8577: where stdin == pipe fd 0
8578:
8579: 2001-10-11 13:20 millert
8580:
8581: * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8582: value is the count of editing errors made (failed searches, etc).
8583:
8584: 2001-10-05 16:39 millert
8585:
8586: * configure: regen
8587:
8588: 2001-10-05 16:39 millert
8589:
8590: * configure.in: sco now is identified by config.guess as *-sco-*
8591:
8592: 2001-10-05 16:24 millert
8593:
8594: * configure.in: Check for getspnam() in -lgen if not in -lc for
8595: UnixWare.
8596:
8597: 2001-09-17 21:48 millert
8598:
8599: * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8600:
8601: 2001-09-17 21:32 millert
8602:
8603: * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8604:
8605: 2001-08-28 10:26 millert
8606:
8607: * sudoers.pod: Missing word (specify); krapht@secureops.com
8608:
8609: 2001-08-23 17:43 millert
8610:
8611: * sudo.c: If we fail to lookup a login class, apply the default
8612: one.
8613:
8614: 2001-08-23 17:42 millert
8615:
8616: * logging.c: In log_error() free message, not logline
8617: unconditionally, then free logline if it is not the same as
8618: message. No function change but this mirrors how they are
8619: allocated.
8620:
8621: 2001-07-16 23:33 millert
8622:
8623: * configure: regenerate
8624:
8625: 2001-07-16 23:33 millert
8626:
8627: * configure.in: remove some backslash quotes that are unneeded
8628:
8629: 2001-07-16 23:30 millert
8630:
8631: * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8632: AC_LIBOBJ instead of changing LIBOBJS directly o Use
8633: AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8634: AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8635:
8636: 2001-07-16 23:28 millert
8637:
8638: * config.guess, config.sub: Updated from autoconf-2.50
8639:
8640: 2001-05-22 19:11 millert
8641:
8642: * README: Update mailing list section. We use mailman now, not
8643: majordomo.
8644:
8645: 2001-05-10 14:55 millert
8646:
8647: * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8648: the shadow variants to make sure we don't inadvertantly leak an
8649: fd to the child. Apparently Linux's shadow routines leave the fd
8650: open even if you don't call setspent(). Reported by
8651: mike@gistnet.com; different patch used.
8652:
8653: 2001-04-12 21:43 millert
8654:
8655: * sudoers.pod: s/eg./e.g./
8656:
8657: 2001-04-12 21:42 millert
8658:
8659: * tgetpass.c: select() may return EAGAIN. If so, continue like we
8660: do for EINTR.
8661:
8662: 2001-04-12 21:41 millert
8663:
8664: * logging.c: Fix a non-exploitable buffer overflow in the word
8665: splitting code. This should really be rewritten.
8666:
8667: 2001-04-12 21:41 millert
8668:
8669: * Makefile.in: FAQ link goes away
8670:
8671: 2001-04-12 21:40 millert
8672:
8673: * INSTALL: Tell people to look in sample.syslog.conf for examples,
8674: not FAQ
8675:
8676: 2001-04-12 21:40 millert
8677:
8678: * TROUBLESHOOTING: Update list of env vars that are cleared
8679:
8680: 2001-04-12 21:36 millert
8681:
8682: * sudo.c: remove struct env_table decl since that stuff has all
8683: moved to env.c
8684:
8685: 2001-04-04 13:17 millert
8686:
8687: * fileops.c: Fix a pasto in flock-style unlocking and include
8688: <sys/file.h> for flock on older systems; twetzel@gwdg.de
8689:
8690: 2001-04-04 13:14 millert
8691:
8692: * configure: regen to get NeXT lockf/flock fix
8693:
8694: 2001-04-04 13:14 millert
8695:
8696: * configure.in: force NeXT to use flock since lockf is broken
8697:
8698: 2001-03-30 08:54 millert
8699:
8700: * check.c: Use stashed user_gid when checking against exempt gid
8701: since sudo sets its gid to a a value that makes sudoers readable.
8702: Previously if you used gid 0 as the exempt group everyone would
8703: be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8704:
8705: 2001-03-29 13:14 millert
8706:
8707: * configure: regen
8708:
8709: 2001-03-29 13:08 millert
8710:
8711: * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8712: aparently defines some types (such as ssize_t) therein.
8713:
8714: 2001-03-02 09:09 millert
8715:
8716: * defaults.c: Fix negation of paths in a boolean context. Problem
8717: found by apt@UH.EDU
8718:
8719: 2001-02-23 13:03 millert
8720:
8721: * visudo.c: pasto
8722:
8723: 2001-02-17 16:11 millert
8724:
8725: * visudo.c: SA_RESETHAND means the opposite of what I was
8726: thinking--oops To block all signals in old-style signals use ~0,
8727: not 0xffffffff
8728:
8729: 2001-02-04 11:16 millert
8730:
8731: * defaults.c: coerce difference of pointers to int when used in a
8732: string length printf format; deraadt@openbsd.org
8733:
8734: 2001-01-17 11:34 millert
8735:
8736: * visudo.c: Block all signals in Exit() to avoid a signal race.
8737: There is still a tiny window but I'm not going to worry about it.
8738:
8739: 2001-01-07 13:57 millert
8740:
8741: * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
8742: Designer
8743:
8744: 2001-01-07 13:55 millert
8745:
8746: * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
8747: from clobbering by isatty().
8748:
8749: 2000-12-30 20:39 millert
8750:
8751: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
8752: Some defaults I_ defines got renamed.
8753:
8754: 2000-12-30 20:38 millert
8755:
8756: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
8757: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
8758: set_perms.c, sudo.c: Move defaults info into its own files from
8759: which we generate .h and .c files. This makes adding or
8760: rearranging variables much simpler.
8761:
8762: 2000-12-30 16:58 millert
8763:
8764: * configure, configure.in: fix typo in last commit
8765:
8766: 2000-12-30 16:55 millert
8767:
8768: * compat.h, config.h.in, configure, configure.in: Add check +
8769: emulation for setegid (like seteuid).
8770:
8771: 2000-12-30 16:22 millert
8772:
8773: * env.c: Make env_keep override badenv_table as documented Fix
8774: traversal of badenv_table (broken in last commit)
8775:
8776: 2000-12-29 22:59 millert
8777:
8778: * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
8779: version of set_perms on systems w/o them. Rename
8780: set_perms_saved_uid() -> set_perms_posix() Make
8781: set_perms_setreuid simply be set_perms_fallback() and simply
8782: include the appropriate function at compile time (setreuid()
8783: vs. setuid()).
8784:
8785: 2000-12-29 22:45 millert
8786:
8787: * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
8788: when env_reset is in effect
8789:
8790: 2000-12-29 22:29 millert
8791:
8792: * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
8793: configure, configure.in, defaults.c, defaults.h, find_path.c,
8794: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
8795: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
8796: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
8797: options: o stay_setuid - sudo will remain setuid if system has
8798: saved uids or setreuid(2) o env_reset - reset the environment to
8799: a sane default o env_keep - preserve environment variables that
8800: would otherwise be cleared
8801:
8802: No longer use getenv/putenv/setenv functions--do environment
8803: munging by hand. Potentially dangerous environment variables can
8804: be cleared only if they contain '/' pr '%' characters to protect
8805: buggy programs. Moved environment routines into env.c (new file)
8806:
8807: 2000-12-29 22:17 millert
8808:
8809: * INSTALL: Clear up --without-passwd description
8810:
8811: 2000-12-29 19:39 millert
8812:
8813: * sudo_setenv.c, putenv.c: We now build up a new environment from
8814: scratch and assign it to "environ".
8815:
8816: 2000-12-18 22:35 millert
8817:
8818: * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
8819:
8820: 2000-12-14 23:19 millert
8821:
8822: * visudo.c: If there was a syntax error and the user just wants to
8823: quit, unlink sudoers if it is zero length.
8824:
8825: 2000-12-14 23:10 millert
8826:
8827: * visudo.c: 'Q' means ignore parse error, not 'q'
8828:
8829: 2000-12-14 22:57 millert
8830:
8831: * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
8832: Dimitry Andric <dim@xs4all.nl>
8833:
8834: 2000-12-13 12:23 millert
8835:
8836: * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
8837: ayamura@ayamura.org
8838:
8839: 2000-12-09 11:46 millert
8840:
8841: * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
8842: Sanchez <wsanchez@apple.com>
8843:
8844: 2000-11-03 09:36 millert
8845:
8846: * sudo.c, visudo.c: Use exit(127), not exit(-1)
8847:
8848: 2000-11-03 00:37 millert
8849:
8850: * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
8851: set_perms() to its own file and use POSIX saved uid or setreuid()
8852: if available.
8853:
8854: Added stay_setuid option for systems that have libraries that
8855: perform extra paranoia checks in system libraries for setuid
8856: programs (ie: anything with issetugid(2)).
8857:
8858: 2000-11-02 20:28 millert
8859:
8860: * sudo.c: strip more bits from the environment and add a facility
8861: for stripping things only if they contain '/' or '%' to address
8862: printf format string vulnerabilities in other programs.
8863:
8864: 2000-11-02 12:55 millert
8865:
8866: * configure: regen
8867:
8868: 2000-11-02 12:55 millert
8869:
8870: * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
8871: the existence of strcasecmp().
8872:
8873: 2000-11-02 12:46 millert
8874:
8875: * configure: regen
8876:
8877: 2000-11-02 12:46 millert
8878:
8879: * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
8880:
8881: 2000-11-01 10:22 millert
8882:
8883: * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
8884:
8885: 2000-11-01 10:17 millert
8886:
8887: * configure: regen
8888:
8889: 2000-11-01 10:17 millert
8890:
8891: * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
8892: since NCR systems have that instead of innetgr(3).
8893:
8894: 2000-10-31 14:16 millert
8895:
8896: * auth/securid.c: check return value of creadcfg() call sd_close()
8897: after sd_auth() store username in sd->username so we don't rely
8898: on the USER env variable
8899:
8900: 2000-10-29 23:00 millert
8901:
8902: * INSTALL: document --with-bsdauth
8903:
8904: 2000-10-29 22:57 millert
8905:
8906: * configure: regen
8907:
8908: 2000-10-29 22:56 millert
8909:
8910: * configure.in: --with-bsdauth assumes --with-logincap
8911:
8912: 2000-10-29 22:45 millert
8913:
8914: * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
8915: challenge, if the user just hits return then reprompt with echo
8916: turned on.
8917:
8918: 2000-10-29 17:31 millert
8919:
8920: * sudo.c: Remove debugging code that should not have been
8921: committed, oops.
8922:
8923: 2000-10-29 17:31 millert
8924:
8925: * auth/bsdauth.c: Use lower-level routines and get the password
8926: ourselves. Checks for a challenge and if there is one echo is
8927: not turned off.
8928:
8929: 2000-10-29 17:30 millert
8930:
8931: * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
8932: changes
8933:
8934: 2000-10-27 18:41 millert
8935:
8936: * sudo.c: Fix a coredump in the logging functions if gethostname(2)
8937: fails by deferring the call to log_error() until things are
8938: better setup.
8939:
8940: Fix return value of set_loginclass() in non-BSD-auth case.
8941:
8942: Hard-code 'sudo' in the usage message so we can fit more options
8943: on a line
8944:
8945: 2000-10-27 18:35 millert
8946:
8947: * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
8948:
8949: 2000-10-26 13:03 millert
8950:
8951: * sudo.cat, sudo.man.in: regen
8952:
8953: 2000-10-26 13:01 millert
8954:
8955: * sudo.pod: Document -a flag
8956:
8957: 2000-10-26 12:42 millert
8958:
8959: * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
8960: sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
8961: authentication.
8962:
8963: 2000-10-19 10:09 millert
8964:
8965: * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
8966:
8967: 2000-10-12 09:49 millert
8968:
8969: * sudoers.pod: Mention negating umask
8970:
8971: 2000-10-12 01:30 millert
8972:
8973: * defaults.c: Allow user to specify umask of 0777 (same as !umask)
8974:
8975: 2000-10-08 21:46 millert
8976:
8977: * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
8978: history.
8979:
8980: 2000-10-08 12:25 millert
8981:
8982: * defaults.c, sudo.pod: fix typos; pepper@reppep.com
8983:
8984: 2000-09-14 16:48 millert
8985:
8986: * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
8987: alloc failure instead of returning -1.
8988:
8989: 2000-09-07 17:41 millert
8990:
8991: * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
8992: for FreeBSD and possibly others.
8993:
8994: 2000-09-07 10:43 millert
8995:
8996: * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
8997: it. This means that "%m" won't be expanded but we don't use that
8998: anyway since the logging routines may splat to stderr as well.
8999:
9000: 2000-09-06 21:35 millert
9001:
9002: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9003: sudoers.pod: Add always_set_home variable
9004:
9005: 2000-09-06 21:24 millert
9006:
9007: * configure, configure.in: Have to hard code default values in help
9008: since the defaults are set _after_ the help stuff.
9009:
9010: 2000-08-31 13:08 millert
9011:
9012: * lex.yy.c, parse.lex: Allow special characters (including '#') to
9013: be embedded in pathnames if quoted by a '\\'. The quoted chars
9014: will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9015: prints the '\\'.
9016:
9017: 2000-08-13 17:10 millert
9018:
9019: * install-sh: Better path searching for programs we need.
9020:
9021: 2000-08-13 17:10 millert
9022:
9023: * TROUBLESHOOTING: Add section on "C compiler cannot create
9024: executables" errors.
9025:
9026: 2000-08-13 17:10 millert
9027:
9028: * Makefile.binary, Makefile.in, version.h: Crank version
9029:
9030: 2000-08-13 17:09 millert
9031:
9032: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9033: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9034: visudo.man.in, visudo.pod: Substitute values from configure into
9035: man pages.
9036:
9037: 2000-08-12 16:48 millert
9038:
9039: * parse.c, sudo.c: The listpw and verifypw sudoers options would
9040: not take effect because the value of the default was checked
9041: *before* sudoers was parsed. Instead of passing in the value of
9042: PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9043: the check can be deferred until after sudoers is parsed.
9044:
9045: 2000-08-11 15:41 millert
9046:
9047: * tgetpass.c: When writing prompt, no need to write the NUL as
9048: well; hag@linnaean.org
9049:
9050: 2000-06-09 12:25 millert
9051:
9052: * install-sh: When looking for chown, check in /sbin too
9053:
9054: 2000-06-04 22:57 millert
9055:
9056: * visudo.c: Remove extraneous call to init_defaults() and set
9057: runas_user to NULL betweem parses so init_defaults will reset it
9058: each time, thus avoiding a reference to free()d data.
9059:
9060: 2000-06-04 19:57 millert
9061:
9062: * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9063: using getifaddrs() to get the list of ip addr / netmask pairs.
9064: Currently IPv4-only.
9065:
9066: 2000-06-04 19:51 millert
9067:
9068: * visudo.c: Add a missing check for UserEditor == NULL Add missing
9069: '+' before line number when invoking editor to fix a syntax error
9070:
9071: 2000-05-12 16:55 millert
9072:
9073: * sudo.c: Call clean_env very early in main() for paranoia's sake.
9074: Idea from Marc Esipovich.
9075:
9076: 2000-05-10 01:11 millert
9077:
9078: * sudo.h: Update proto for evasprintf and easprintf
9079:
9080: 2000-05-10 01:10 millert
9081:
9082: * alloc.c: Make easprintf() and evasprintf() return an int.
9083:
9084: 2000-05-10 00:56 millert
9085:
9086: * check.c: If the targetpw flag is set, use target username as part
9087: of the timestamp path. If tty tickets are in effect cat the tty
9088: and the target username with a ':' as the separator.
9089:
9090: 2000-05-09 12:05 millert
9091:
9092: * auth/pam.c: Backout part of last change; setting PAM_USER to the
9093: invoking user breaks things like targetpw.
9094:
9095: 2000-05-09 11:52 millert
9096:
9097: * auth/pam.c: set tty and username via pam_set_item
9098:
9099: 2000-05-09 11:42 millert
9100:
9101: * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9102: runas, and target authentication for non-passwd file auth
9103: methods.
9104:
9105: 2000-04-22 14:15 millert
9106:
9107: * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9108: sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9109: C<-Z> for command line flags in all places. This is more
9110: consistent and works around a bug in Pod::Man.
9111:
9112: 2000-04-22 13:59 millert
9113:
9114: * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9115: 'semicolon' that should be 'colon'
9116:
9117: 2000-04-19 15:30 millert
9118:
9119: * configure, configure.in: Fix --with-badpri help line
9120:
9121: 2000-04-17 14:01 millert
9122:
9123: * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9124: openlog() and closelog() since some authentication methods (like
9125: PAM) may do their own logging via syslog. Since we don't use
9126: syslog much (usually just once per session) this doesn't really
9127: incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9128:
9129: 2000-04-15 16:32 millert
9130:
9131: * sudo.c: Fix -H flag. runas_homedir is only valid after
9132: set_perms(PERM_RUNAS, mode)
9133:
9134: 2000-04-12 18:56 millert
9135:
9136: * INSTALL: Clarify the fact that insults are not enabled just by
9137: including them in the binary.
9138:
9139: 2000-04-07 10:39 millert
9140:
9141: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9142: sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9143:
9144: 2000-04-07 10:38 millert
9145:
9146: * Makefile.in: Give date string to pod2man since its default is
9147: ugly and it ain't got no alibi.
9148:
9149: 2000-04-07 10:27 millert
9150:
9151: * Makefile.in: Do section substitution on the output of pod2man and
9152: remove hack needed for old pod2man.
9153:
9154: 2000-04-07 10:26 millert
9155:
9156: * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9157: will do the substitution later.
9158:
9159: 2000-04-02 11:44 millert
9160:
9161: * configure, configure.in: Don't bother checking for the path to vi
9162: if user specified --with-editor
9163:
9164: 2000-04-01 17:25 millert
9165:
9166: * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9167: calling system(3).
9168:
9169: 2000-04-01 16:23 millert
9170:
9171: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9172: sudoers.pod, visudo.c: Visudo now checks for the existence of an
9173: editor and gives a sensible error if it does not exist.
9174:
9175: The path to the editor for visudo is now a colon-separated list
9176: of allowable editors. If the user has $EDITOR set and it matches
9177: one of the allowed editors that editor will be used. If not, the
9178: first editor in the list that actually exists is used.
9179:
9180: 2000-04-01 16:22 millert
9181:
9182: * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9183: return value.
9184:
9185: 2000-03-27 12:08 millert
9186:
9187: * Makefile.in: Strip sudo and visudo for bindist target
9188:
9189: 2000-03-26 22:26 millert
9190:
9191: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9192: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9193: @mansectsu@ and @mansectform@ in the man page bodies as well.
9194:
9195: 2000-03-26 22:07 millert
9196:
9197: * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9198: @sysconfdir@
9199:
9200: 2000-03-26 21:57 millert
9201:
9202: * Makefile.in: 'make dist' should not cause any files to be
9203: modified so remove its dependencies.
9204:
9205: 2000-03-26 21:43 millert
9206:
9207: * CHANGES: Whoops, forgot to add release marker
9208:
9209: 2000-03-26 11:57 millert
9210:
9211: * CHANGES: Final change for 1.6.3 (or so I hope)
9212:
9213: 2000-03-26 11:57 millert
9214:
9215: * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9216: BSD systems will have nroff...
9217:
9218: 2000-03-24 18:58 millert
9219:
9220: * parse.yacc: When checking to see if the host/user matches in a
9221: defaults spec, check against TRUE, not just non-zero since it
9222: might be -1.
9223:
9224: 2000-03-24 15:14 millert
9225:
9226: * configure.in, configure: OSF/1 puts file formats in section 4,
9227: not 5.
9228:
9229: 2000-03-24 15:13 millert
9230:
9231: * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9232:
9233: 2000-03-23 20:24 millert
9234:
9235: * RUNSON: Update for 1.6.3
9236:
9237: 2000-03-23 20:23 millert
9238:
9239: * configure, configure.in: If there is no inet_addr but there *is*
9240: an __inet_addr that's ok since inet_addr is probably just a macro
9241: then. The better thing to do would be to look for the macro, but
9242: this is fine for now.
9243:
9244: 2000-03-23 19:50 millert
9245:
9246: * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9247:
9248: 2000-03-23 19:40 millert
9249:
9250: * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9251: lives in $(srcdir), add a @mansrcdir@ configure variable so we
9252: can deal with this. Also, only remove *.man for 'distclean' not
9253: 'clean'.
9254:
9255: 2000-03-23 19:16 millert
9256:
9257: * sudo.c: set_loginclass() should be static like the proto says
9258:
9259: 2000-03-23 14:14 millert
9260:
9261: * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9262: header to avoid promotion of test to int, thus violating the
9263: prototype. Gcc handles this gracefully but more std ANSI
9264: compilers will complain.
9265:
9266: 2000-03-23 10:11 millert
9267:
9268: * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9269: FNM_CASEFOLD
9270:
9271: 2000-03-23 10:11 millert
9272:
9273: * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9274: fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9275: configure
9276:
9277: 2000-03-22 23:41 millert
9278:
9279: * CHANGES, TODO: update for 1.6.3
9280:
9281: 2000-03-22 23:38 millert
9282:
9283: * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9284: testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9285: not matching the FQHOST token type. There's really no need for a
9286: separate token for fully-qualified vs. unqualified anymore so
9287: FQHOST is now history and hostname_matches now decides which
9288: hostname (short or long) to check based on whether or not the
9289: pattern contains a '.'.
9290:
9291: 2000-03-22 23:09 millert
9292:
9293: * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9294: visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9295: in the hostname.
9296:
9297: 2000-03-22 22:50 millert
9298:
9299: * Makefile.in: Add targets for *.man.in, using config.status to
9300: generate *.man from *.man.in
9301:
9302: 2000-03-22 22:20 millert
9303:
9304: * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9305: option and enbolden refs to sudo and visudo.
9306:
9307: 2000-03-22 19:35 millert
9308:
9309: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9310: sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9311: visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9312: FreeBSD login.conf support (untested on BSD/OS) based on a patch
9313: from Michael D. Marchionna. configure now does substitution on
9314: the man pages, allowing us to fix up the paths and set the
9315: section correctly. Based on an idea from Michael D. Marchionna.
9316:
9317: 2000-03-22 19:27 millert
9318:
9319: * auth/passwd.c: Better fix for handling HP-UX aging info.
9320:
9321: 2000-03-22 19:20 millert
9322:
9323: * sudo.c: Add support for set_logname run-time default
9324:
9325: 2000-03-22 19:17 millert
9326:
9327: * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9328: substitution on these to produce *.man
9329:
9330: 2000-03-22 19:16 millert
9331:
9332: * sudo.man, sudoers.man, visudo.man: These files now get generated
9333: from *.man.in at configure time.
9334:
9335: 2000-03-22 18:40 millert
9336:
9337: * defaults.c, defaults.h: Add set_logname option so users can turn
9338: off setting of LOGNAME/USER environment variables.
9339:
9340: 2000-03-22 10:53 millert
9341:
9342: * testsudoers.c, lsearch.c, parse.c: kill register
9343:
9344: 2000-03-13 15:52 millert
9345:
9346: * auth/passwd.c: HP-UX adds extra info at the end for password
9347: aging so when comparing the result of crypt to pw_passwd we only
9348: compare the first len(epass) bytes *unless* the user entered an
9349: empty string for a password.
9350:
9351: 2000-03-13 11:05 millert
9352:
9353: * logging.c: Get rid of grandchild hack, it was causing problems
9354: and there is really no need for it. This fixes a bug where we
9355: spin eating up CPU when the user runs a long-running process like
9356: a shell.
9357:
9358: 2000-03-07 14:26 millert
9359:
9360: * sudo.c: User can always specify a login class if he/she is
9361: already root.
9362:
9363: 2000-03-06 23:29 millert
9364:
9365: * config.h.in, configure, configure.in, defaults.c, defaults.h,
9366: sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9367:
9368: 2000-03-06 14:42 millert
9369:
9370: * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9371: secureware support
9372:
9373: 2000-03-03 18:04 millert
9374:
9375: * auth/passwd.c: Truncate unencrypted password to 8 chars if
9376: encrypted password is exactly 13 characters (indicateing standard
9377: a DES password). Many versions of crypt() do this for you, but
9378: not all (like HP-UX's).
9379:
9380: 2000-03-01 21:01 millert
9381:
9382: * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9383:
9384: 2000-02-29 17:46 millert
9385:
9386: * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9387: via defaults.c
9388:
9389: 2000-02-29 17:41 millert
9390:
9391: * defaults.c: Use Argv[0] as the first arg to openlog() since
9392: visudo uses this too.
9393:
9394: 2000-02-28 18:58 millert
9395:
9396: * sudo.c: Stash coredumpsize resource limit and retsore it before
9397: the exec() Otherwise the child ends up with a coredumpsize of 0.
9398:
9399: 2000-02-26 22:56 millert
9400:
9401: * sudo.cat, sudo.man, sudo.pod: document -S flag
9402:
9403: 2000-02-26 22:54 millert
9404:
9405: * sudo.c: fix usage string
9406:
9407: 2000-02-26 22:48 millert
9408:
9409: * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9410: auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9411: -S flag (read passwd from stdin) and tgetpass_flags global that
9412: holds flags to be passed in to tgetpass(). Change echo_off param
9413: to tgetpass() into a flags field. There are currently 2 possible
9414: flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9415: abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9416: but echo is not set on the terminal, but sure to set it.
9417:
9418: 2000-02-26 22:11 millert
9419:
9420: * tgetpass.c: Fixed a bug that caused an infinite loop when the
9421: password timeout was disabled.
9422:
9423: 2000-02-18 12:56 millert
9424:
9425: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9426: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9427: runaspw, and targetpw options.
9428:
9429: 2000-02-18 12:11 millert
9430:
9431: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9432: visudo.c: enveditor -> env_editor
9433:
9434: 2000-02-15 19:07 millert
9435:
9436: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9437: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9438: visudo.cat, visudo.man: crank versino to 1.6.3
9439:
9440: 2000-02-15 19:03 millert
9441:
9442: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9443: sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9444: defaults and make visudo honor them. This means that visudo will
9445: now parse the sudoers file *before* it is edited so a bogus
9446: sudoers file will cause a warning to go to stderr. Also, visudo
9447: checks the variables once--it does not check them after each
9448: editor run since that could be confusing.
9449:
9450: 2000-02-15 18:49 millert
9451:
9452: * RUNSON: 1.6.2 -> 1.6.2p1
9453:
9454: 2000-02-15 18:36 millert
9455:
9456: * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9457: sudo.h
9458:
9459: 2000-02-13 13:38 millert
9460:
9461: * configure, configure.in: Fix thinko, some && should have been ||
9462: in the last commit
9463:
9464: 2000-02-13 13:28 millert
9465:
9466: * configure, configure.in: Don't initialized Makefile variables to
9467: be NULL since the user may want to import variables from their
9468: environment.
9469:
9470: 2000-02-03 21:09 millert
9471:
9472: * configure, configure.in: typo
9473:
9474: 2000-01-27 15:01 millert
9475:
9476: * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9477: 11.0;jaearick@colby.edu
9478:
9479: 2000-01-27 15:01 millert
9480:
9481: * CHANGES: recent changes; prepare for 1.6.2p1
9482:
9483: 2000-01-26 23:31 millert
9484:
9485: * find_path.c: Don't apply SECURE_PATH if user is example;
9486: jmknoble@pobox.com
9487:
9488: 2000-01-26 16:21 millert
9489:
9490: * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9491: 'defaults' options based on INSTALL file info.
9492:
9493: 2000-01-26 16:21 millert
9494:
9495: * INSTALL: Fix some while lies
9496:
9497: 2000-01-24 10:48 millert
9498:
9499: * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9500: instead of copying.
9501:
9502: 2000-01-23 22:57 millert
9503:
9504: * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9505:
9506: 2000-01-23 22:42 millert
9507:
9508: * RUNSON: Last minute updates
9509:
9510: 2000-01-23 22:26 millert
9511:
9512: * TROUBLESHOOTING: PAM entry
9513:
9514: 2000-01-23 22:23 millert
9515:
9516: * auth/pam.c: correct a comment
9517:
9518: 2000-01-23 22:03 millert
9519:
9520: * CHANGES, RUNSON: update for 1.6.2
9521:
9522: 2000-01-23 21:59 millert
9523:
9524: * auth/pam.c: Better detection of PAM errors and fix custom prompts
9525: with PAM. Based on patches from "Cloyce D. Spradling"
9526: <cloyce@headgear.org>
9527:
9528: 2000-01-20 11:15 millert
9529:
9530: * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9531: to an unsigned long long value.
9532:
9533: 2000-01-19 14:07 millert
9534:
9535: * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9536: sudoers locking in visudo. We now lock the sudoers file itself,
9537: not the temp file (since locking the temp file can foul up
9538: editors). The previous locking scheme didn't work because the fd
9539: was closed too early.
9540:
9541: 2000-01-19 13:37 millert
9542:
9543: * configure, config.h.in, configure.in: Don't need test for
9544: ftruncate() any more.
9545:
9546: 2000-01-18 21:23 millert
9547:
9548: * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9549: cc. Fixes compilation with the unbundled HP-UX cc.
9550:
9551: 2000-01-18 17:00 millert
9552:
9553: * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9554: Campbell <aaron@cs.dal.ca>
9555:
9556: 2000-01-17 18:46 millert
9557:
9558: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9559: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9560: tgetpass.c, version.h, visudo.c: update copyright year on changed
9561: files
9562:
9563: 2000-01-17 18:45 millert
9564:
9565: * RUNSON: updates
9566:
9567: 2000-01-17 18:45 millert
9568:
9569: * CHANGES: aix fix
9570:
9571: 2000-01-17 18:42 millert
9572:
9573: * INSTALL: Crank version to 1.6.2
9574:
9575: 2000-01-17 18:11 millert
9576:
9577: * configure: Crank version to 1.6.2
9578:
9579: 2000-01-17 17:46 millert
9580:
9581: * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9582: the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9583:
9584: 2000-01-17 12:32 millert
9585:
9586: * CHANGES: recent changes
9587:
9588: 2000-01-17 12:28 millert
9589:
9590: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9591: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9592: Crank version to 1.6.2
9593:
9594: 2000-01-17 12:25 millert
9595:
9596: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9597: 'shell_noargs' runtime option back in. We have to defer checking
9598: until after the sudoers file has been parsed but since there are
9599: now other options that operate that way this one can too. Based
9600: on a patch from bguillory@email.com.
9601:
9602: 2000-01-16 23:05 millert
9603:
9604: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9605: "verifypw" options.
9606:
9607: 2000-01-16 22:57 millert
9608:
9609: * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9610: o Add section on verifypw and listpw o Define how NOPASSWD
9611: interacts with the -v and -l flags
9612:
9613: 2000-01-14 12:39 millert
9614:
9615: * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9616: HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9617:
9618: 2000-01-14 12:29 millert
9619:
9620: * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9621: to the end and don't initialize the union member since that only
9622: works with an ANSI compiler. We set the value of the union by
9623: hand in init_defaults() anyway. This allows sudo to compile on a
9624: K&R compiler again.
9625:
9626: 2000-01-11 13:20 millert
9627:
9628: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9629: netgr_matches needs to check shost as well as host since they may
9630: be different.
9631:
9632: 2000-01-11 13:17 millert
9633:
9634: * tgetpass.c: End on \r as well as \n
9635:
9636: 2000-01-02 23:53 millert
9637:
9638: * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9639: chaning from 0400 to whatever SUDOERS_MODE is (converting from
9640: the old sudoers mode). Assumes that SUDOERS_MODE is less
9641: restrictive than 0400 which should always be the case.
9642:
9643: 2000-01-02 23:43 millert
9644:
9645: * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9646: sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9647: *any* entry for the user on the host with a NOPASSWD flag. For
9648: -v, only allow w/o a passwd if *all* entries for the user on the
9649: host w/ the specified runas user have the NOPASSWD flag set.
9650:
9651: 2000-01-02 23:26 millert
9652:
9653: * Makefile.in: add check target
9654:
9655: 1999-12-16 13:02 millert
9656:
9657: * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9658: looping.
9659:
9660: 1999-12-10 00:09 millert
9661:
9662: * CHANGES: recent changes
9663:
9664: 1999-12-08 23:04 millert
9665:
9666: * config.h.in, configure, configure.in, sudo.c: Add check for
9667: initgroups() since old SYSV lacks this.
9668:
9669: 1999-12-08 22:54 millert
9670:
9671: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9672: configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9673: Only define HAVE_FNMATCH if <fnmatch.h> exists.
9674:
9675: 1999-12-06 01:47 millert
9676:
9677: * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9678: to be enabled if the insults[] array is empty. Otherwise there
9679: would be division by zero.
9680:
9681: 1999-12-06 01:25 millert
9682:
9683: * insults.h: Don't care about USE_INSULTS #define since the insult
9684: stuff may be overridden at runtime.
9685:
9686: 1999-12-06 01:23 millert
9687:
9688: * auth/sudo_auth.c: Honor insults flag.
9689:
9690: 1999-12-05 19:14 millert
9691:
9692: * CHANGES, parse.c: Don't ask the user for a password if the user
9693: is not allowed to run the command and the authenticate flag (in
9694: sudoers) is false.
9695:
9696: 1999-12-05 19:05 millert
9697:
9698: * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9699: newline we change to the INITIAL state. o Enter GOTRUNAS when we
9700: see Runas_Alias
9701:
9702: This allows #uid to work in a RunasAlias.
9703:
9704: 1999-12-05 14:06 millert
9705:
9706: * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9707: and runaslist now return a value o in a runasspec, if a runaslist
9708: does not return TRUE, set runas_matches to FALSE. Normally, a
9709: runaslist only returns FALSE for explicitly denied users. o
9710: since runaslist does not modify the stack there is no need for a
9711: push/pop in runasalias.
9712:
9713: 1999-12-04 21:54 millert
9714:
9715: * check.c, sudo.c: Don't kill the user's tickets until after
9716: sudoers has been parsed since tty_tickets and ticket_dir could be
9717: set in sudoers.
9718:
9719: 1999-12-04 21:18 millert
9720:
9721: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
9722: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
9723: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
9724: version to 1.6
9725:
9726: 1999-12-04 21:18 millert
9727:
9728: * testsudoers.c: add set_fqdn() stub
9729:
9730: 1999-12-02 15:31 millert
9731:
9732: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
9733: sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
9734: it cannot work since the command needs to be set before sudoers
9735: is parsed. o Fix the "set_home" sudoers option (only worked at
9736: compile time). o Fix "fqdn" sudoers option. We now set
9737: host/shost via set_fqdn which gets called when the "fqdn"
9738: option is set in sudoers. o Move the openlog() to
9739: store_syslogfac() so this gets overridden correctly from the
9740: sudoers file.
9741:
9742: 1999-12-02 15:21 millert
9743:
9744: * auth/securid.c: SecurID support should compile now.
9745:
9746: 1999-11-28 20:56 millert
9747:
9748: * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
9749: visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
9750:
9751: 1999-11-28 18:51 millert
9752:
9753: * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
9754: the .html files as they are generated automatically on the web
9755: site.
9756:
9757: 1999-11-28 18:49 millert
9758:
9759: * CHANGES, LICENSE: kill characters that made wml unhappy
9760:
9761: 1999-11-28 18:34 millert
9762:
9763: * HISTORY: typo
9764:
9765: 1999-11-25 12:05 millert
9766:
9767: * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
9768:
9769: 1999-11-24 19:43 millert
9770:
9771: * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
9772: benefit of ctm
9773:
9774: 1999-11-23 22:52 millert
9775:
9776: * sudo.c: Make the -s flag be exclusive too. Also reorder the
9777: flags in the exclusive usage message so they are alphabetical.
9778:
9779: 1999-11-23 13:27 millert
9780:
9781: * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
9782:
9783: 1999-11-23 13:07 millert
9784:
9785: * auth/API: fix typo
9786:
9787: 1999-11-23 13:07 millert
9788:
9789: * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
9790:
9791: 1999-11-23 13:06 millert
9792:
9793: * auth/pam.c: fix a warning on redhat and spew an error if
9794: pam_authenticate() returns an error other than AUTH_SUCCESS or
9795: PAM_PERM_DENIED
9796:
9797: 1999-11-23 00:43 millert
9798:
9799: * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
9800: password required is the user's not root's
9801:
9802: 1999-11-19 21:04 millert
9803:
9804: * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
9805:
9806: 1999-11-18 19:13 millert
9807:
9808: * RUNSON: updates from Brian Jackson + some formatting
9809:
9810: 1999-11-17 21:39 millert
9811:
9812: * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
9813: update o Changes for automating real binary releases
9814:
9815: 1999-11-17 21:38 millert
9816:
9817: * Makefile.in: Add bindist target
9818:
9819: 1999-11-16 16:26 millert
9820:
9821: * TROUBLESHOOTING: talk about run-time options in addition to
9822: compile-time options
9823:
9824: 1999-11-16 01:16 millert
9825:
9826: * CHANGES: fix typos
9827:
9828: 1999-11-16 01:09 millert
9829:
9830: * sudo.c: need sys/time.h if HAVE_SETRLIMIT
9831:
9832: 1999-11-16 00:42 millert
9833:
9834: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
9835: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
9836: rid of references to sudo-bugs. Now mention the web site or the
9837: sudo@ alias
9838:
9839: 1999-11-16 00:35 millert
9840:
9841: * sudoers.html: repair pod2html damage
9842:
9843: 1999-11-16 00:28 millert
9844:
9845: * RUNSON, TODO: Update for 1.6 release
9846:
9847: 1999-11-16 00:23 millert
9848:
9849: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
9850: about using ALL in a command context.
9851:
9852: 1999-11-09 15:12 millert
9853:
9854: * visudo.c: Call yyrestart() on a parse error to reset the lexer
9855: state.
9856:
9857: 1999-11-09 15:06 millert
9858:
9859: * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
9860: yyrestart() into visudo.c since it might not get called in yywrap
9861: if we get a parse error (and we only reread the file on error
9862: anyway).
9863:
9864: 1999-11-09 14:32 millert
9865:
9866: * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
9867: clean up any buffers that might still exist. Call yyrestart()
9868: instead of using the deprecated YY_NEW_FILE macro.
9869:
9870: 1999-11-09 12:13 millert
9871:
9872: * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
9873:
9874: 1999-11-08 19:00 millert
9875:
9876: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
9877: characters need to be escaped in names.
9878:
9879: 1999-11-08 18:59 millert
9880:
9881: * configure: regen
9882:
9883: 1999-11-08 18:59 millert
9884:
9885: * INSTALL: clarify Mac OS X entry
9886:
9887: 1999-11-08 18:59 millert
9888:
9889: * RUNSON: update
9890:
9891: 1999-11-08 17:45 millert
9892:
9893: * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
9894: configure options for danity
9895:
9896: 1999-11-05 17:11 millert
9897:
9898: * defaults.c: Fix printing of type T_MODE in dump_defaults()
9899:
9900: 1999-11-05 12:00 millert
9901:
9902: * strcasecmp.c: missing sys/types.h
9903:
9904: 1999-11-05 00:42 millert
9905:
9906: * INSTALL: Break out options that may be overridden at run time
9907: into their own section. Add a not about Max OS X and correct
9908: some lies.
9909:
9910: 1999-11-04 14:01 millert
9911:
9912: * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
9913: getrlimit to find the highest fd when closing all non-std fd's o
9914: Turn off core dumps via setrlimit for the sake of paranoia
9915:
9916: 1999-11-04 13:57 millert
9917:
9918: * RUNSON: updates
9919:
9920: 1999-11-01 10:59 millert
9921:
9922: * CHANGES: updates
9923:
9924: 1999-11-01 10:58 millert
9925:
9926: * tgetpass.c: When read()'ing, do a single character at a time to
9927: be sure we don't go oast the newline.
9928:
9929: 1999-11-01 10:43 millert
9930:
9931: * sudo.c: For the sudo_root option, check against user_uid, not
9932: getuid() since at this point, ruid == euid == 0.
9933:
9934: 1999-10-31 23:14 millert
9935:
9936: * RUNSON: some updates
9937:
9938: 1999-10-31 23:14 millert
9939:
9940: * logging.h: Fix compilation problem when --with-logging=file was
9941: specified. This means that syslog is now required to build sudo
9942: but that should not be a problem. If it is it can be fixed
9943: trivially with a configure check for syslog() or syslog.h.
9944:
9945: 1999-10-31 23:00 millert
9946:
9947: * tgetpass.c: Make this work again for things like "sudo echo hi |
9948: more" where the tty gets put into character at a time mode. We
9949: read until we read end of line or we run out of space (similar to
9950: fgets(3)).
9951:
9952: 1999-10-20 11:23 millert
9953:
9954: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
9955: to bold
9956:
9957: 1999-10-20 11:23 millert
9958:
9959: * RUNSON: update
9960:
9961: 1999-10-16 13:56 millert
9962:
9963: * defaults.c: Error out if syslog parameters are given without a
9964: value. For Ultrix or 4.2BSD "syslog" is allowed without a value
9965: since there are no facilities in the 4.2BSD syslog.
9966:
9967: 1999-10-15 16:37 millert
9968:
9969: * defaults.c: Ignore the syslog facility for systems w/ old syslog
9970: like Ultrix.
9971:
9972: 1999-10-15 12:51 millert
9973:
9974: * TROUBLESHOOTING: people with "." early in their path can have
9975: problems running sudo from the build dir ;-)
9976:
9977: 1999-10-13 00:18 millert
9978:
9979: * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
9980:
9981: 1999-10-12 22:34 millert
9982:
9983: * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
9984: auth/sudo_auth.h: New krb5 code from Frank Cusack
9985: <fcusack@iconnet.net>.
9986:
9987: 1999-10-12 22:33 millert
9988:
9989: * CHANGES: update to reality
9990:
9991: 1999-10-11 20:53 millert
9992:
9993: * auth/fwtk.c: include <auth.h> to get function prototypes.
9994:
9995: 1999-10-11 20:05 millert
9996:
9997: * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
9998:
9999: 1999-10-11 19:42 millert
10000:
10001: * sudo.c: in set_perms(), always call setuid(0) before changing the
10002: ruid/euid so we always know it will succeed.
10003:
10004: 1999-10-11 12:24 millert
10005:
10006: * defaults.h: #undef T_FOO to avoid conflicts with system defines
10007: (like on ULTRIX).
10008:
10009: 1999-10-11 11:55 millert
10010:
10011: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10012: sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10013: needs some fleshing out but this is a start.
10014:
10015: 1999-10-10 17:21 millert
10016:
10017: * defaults.c: use strtol, not strtoul since not everyone has not
10018: strtoul
10019:
10020: 1999-10-10 15:01 millert
10021:
10022: * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10023: INITIAL state
10024:
10025: 1999-10-10 14:38 millert
10026:
10027: * lex.yy.c, parse.lex: o Add support for escaped characters in the
10028: WORD macro o Modify fill() to squash escape chars
10029:
10030: 1999-10-10 13:56 millert
10031:
10032: * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10033: checks for default values that are supposed to be pathnames. o
10034: Fix a duplicate free when visudo finds an error.
10035:
10036: 1999-10-09 01:01 millert
10037:
10038: * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10039:
10040: 1999-10-07 21:12 millert
10041:
10042: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10043: requiretty option o Move O_NOCTTY to compat.h
10044:
10045: 1999-10-07 21:12 millert
10046:
10047: * logging.c: The exit() in log_error() was mistakenly removed in a
10048: previous version. Put it back...
10049:
10050: 1999-10-07 17:20 millert
10051:
10052: * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10053: defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10054: logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10055: auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10056: Change defaults stuff to put the value right in the struct. o
10057: Implement mailer_flags o Store syslog stuff both in int and
10058: string form. Setting the string form magically updates the int
10059: version. o Add boolean attribute to strings where it makes sense
10060: to say !foo
10061:
10062: 1999-10-07 17:13 millert
10063:
10064: * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10065:
10066: 1999-10-06 00:48 millert
10067:
10068: * auth/API: cleanup function no longer takes a status arg
10069:
10070: 1999-10-06 00:48 millert
10071:
10072: * INSTALL: the the
10073:
10074: 1999-09-15 05:15 millert
10075:
10076: * TODO, config.h.in, configure, configure.in, logging.c: Use
10077: strftime() instead of ctime() if it is available.
10078:
10079: 1999-09-14 12:58 millert
10080:
10081: * defaults.c: fix copyright date
10082:
10083: 1999-09-14 12:57 millert
10084:
10085: * RUNSON: update ReliantUNIX entry
10086:
10087: 1999-09-14 12:56 millert
10088:
10089: * defaults.c, defaults.h, logging.c: add log_year option
10090:
10091: 1999-09-14 04:01 millert
10092:
10093: * configure, configure.in: add --without-sendmail to help output
10094:
10095: 1999-09-14 03:42 millert
10096:
10097: * configure, configure.in: enforce an otctal arg for
10098: --with-suoders-mode
10099:
10100: 1999-09-08 04:06 millert
10101:
10102: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10103: config.h.in, configure, configure.in, defaults.c, defaults.h,
10104: find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10105: sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10106: auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10107: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10108: "Defaults" line in sudoers to make configuration variables
10109: changable at runtime (and on a global, per-host and per-user
10110: basis). Both the names and the internal representation are still
10111: subject to change. It was necessary to make sudo_user.runas but
10112: a char ** instead of a char * since this value can be changed by
10113: a Defaults line. There is a similar (but more complicated) issue
10114: with sudo_user.prompt but it is handled differently at the
10115: moment.
10116:
10117: Add a "-L" flag to list the name of options with their
10118: descriptions. This may only be temporary.
10119:
10120: Move some prototypes to parse.h
10121:
10122: Be much less restrictive on what is allowed for a username.
10123:
10124: 1999-09-08 04:01 millert
10125:
10126: * sample.syslog.conf: Add more info
10127:
10128: 1999-09-04 03:09 millert
10129:
10130: * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10131: strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10132: from their license.
10133:
10134: 1999-08-31 05:39 millert
10135:
10136: * auth/sudo_auth.h: move dce_verofy proto to correct section
10137:
10138: 1999-08-31 05:39 millert
10139:
10140: * auth/dce.c: remove XXX
10141:
10142: 1999-08-28 06:00 millert
10143:
10144: * emul/fnmatch.h: Add fnmatch() prototype
10145:
10146: 1999-08-28 06:00 millert
10147:
10148: * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10149: emul/fnmatch.h to be after sudo.h for __P
10150:
10151: 1999-08-28 05:59 millert
10152:
10153: * sudo.h: add strcasecmp proto
10154:
10155: 1999-08-28 05:50 millert
10156:
10157: * auth/sudo_auth.c: add check for case where there are no auth
10158: methods
10159:
10160: 1999-08-28 05:36 millert
10161:
10162: * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10163: __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10164:
10165: 1999-08-28 05:24 millert
10166:
10167: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10168: everywhere we include string.h
10169:
10170: 1999-08-28 05:22 millert
10171:
10172: * version.c: nicer output when showing auth methods
10173:
10174: 1999-08-28 05:00 millert
10175:
10176: * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10177:
10178: 1999-08-28 04:49 millert
10179:
10180: * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10181:
10182: 1999-08-28 04:22 millert
10183:
10184: * parse.lex, lex.yy.c: fix definition of OCTECT
10185:
10186: 1999-08-28 04:10 millert
10187:
10188: * configure, configure.in: aix_auth.o not authenticate.o
10189:
10190: 1999-08-27 17:02 millert
10191:
10192: * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10193: generated from the keyboard). Since we run with ruid/euid == 0
10194: the user can't really signal us in nasty ways.
10195:
10196: 1999-08-27 17:01 millert
10197:
10198: * visudo.c: Don't need to worry about catching too many signals
10199: since we do locking on the tmp file. If a lockfile is really
10200: stale, it will be detected and overwritten.
10201:
10202: 1999-08-27 16:09 millert
10203:
10204: * INSTALL, Makefile.in: include auth/API in tarball
10205:
10206: 1999-08-27 16:09 millert
10207:
10208: * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10209: loop and only do the memset if we are *not* in standalone mode.
10210:
10211: 1999-08-27 13:46 millert
10212:
10213: * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10214:
10215: 1999-08-27 11:53 millert
10216:
10217: * sudo.c: fix --enable-noargs-shell
10218:
10219: 1999-08-27 11:06 millert
10220:
10221: * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10222:
10223: 1999-08-27 10:54 millert
10224:
10225: * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10226:
10227: 1999-08-27 10:50 millert
10228:
10229: * auth/dce.c: there were still some return(0)'s hanging around,
10230: make them AUTH_FAILURE
10231:
10232: 1999-08-27 10:39 millert
10233:
10234: * parse.c: typo in comment
10235:
10236: 1999-08-27 10:03 millert
10237:
10238: * version.c: add missing semicolon
10239:
10240: 1999-08-27 08:31 millert
10241:
10242: * auth/sudo_auth.h: missing backslash
10243:
10244: 1999-08-26 17:24 millert
10245:
10246: * CHANGES, config.h.in, configure, configure.in: Kill
10247: _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10248:
10249: 1999-08-26 09:21 millert
10250:
10251: * Makefile.in: add parse.h to HDRS
10252:
10253: 1999-08-26 09:16 millert
10254:
10255: * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10256: VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10257: in LIBS, commong ld flags go in LDFLAGS and network libs like
10258: -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10259: on Solaris and is a bit cleaner in general.
10260:
10261: 1999-08-26 06:56 millert
10262:
10263: * UPGRADE: mention ptmp -> sudoers.tmp
10264:
10265: 1999-08-26 06:12 millert
10266:
10267: * configure.in, configure, config.h.in: Define
10268: _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10269:
10270: 1999-08-26 05:37 millert
10271:
10272: * RUNSON: add 2 reports
10273:
10274: 1999-08-26 05:20 millert
10275:
10276: * auth/kerb5.c: Minor changes, mostly cosmetic.
10277: verify_krb_v5_tgt() changed to return a value more like a system
10278: function
10279:
10280: 1999-08-26 05:19 millert
10281:
10282: * auth/dce.c: Add an XXX
10283:
10284: 1999-08-26 05:19 millert
10285:
10286: * TODO: more things todo!
10287:
10288: 1999-08-26 05:18 millert
10289:
10290: * sample.sudoers: update based on what is in the man page
10291:
10292: 1999-08-26 05:10 millert
10293:
10294: * parse.yacc: minor change to first line printed in -l mode
10295:
10296: 1999-08-26 05:10 millert
10297:
10298: * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10299: VARIABLES" section to "ENVIRONMENT" to be more standard and add
10300: "EXAMPLES" section
10301:
10302: 1999-08-26 05:08 millert
10303:
10304: * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10305: "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10306: standard
10307:
10308: 1999-08-26 05:06 millert
10309:
10310: * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10311:
10312: 1999-08-26 05:05 millert
10313:
10314: * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10315:
10316: 1999-08-26 05:04 millert
10317:
10318: * UPGRADE: mention timestamp changes
10319:
10320: 1999-08-26 05:04 millert
10321:
10322: * PORTING: cosmetic cleanup
10323:
10324: 1999-08-26 05:00 millert
10325:
10326: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10327: sudoers(8) man page
10328:
10329: 1999-08-24 13:45 millert
10330:
10331: * version.c: Update comments about syslog name tables
10332:
10333: 1999-08-24 13:37 millert
10334:
10335: * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10336: configure.in, parse.yacc: include strcasecmp() for those without
10337: it
10338:
10339: 1999-08-24 12:43 millert
10340:
10341: * sample.sudoers: Use the : operator some more and fix a typo
10342:
10343: 1999-08-24 12:43 millert
10344:
10345: * HISTORY: update the history of sudo
10346:
10347: 1999-08-24 12:42 millert
10348:
10349: * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10350:
10351: 1999-08-24 12:41 millert
10352:
10353: * CHANGES: recent changes
10354:
10355: 1999-08-24 12:40 millert
10356:
10357: * sudo.tab.h: these should be generated with byacc, not bison
10358:
10359: 1999-08-24 12:40 millert
10360:
10361: * lex.yy.c: regen
10362:
10363: 1999-08-24 11:58 millert
10364:
10365: * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10366: the stored (expanded) alias was not stored with the contents.
10367: This could lead to incorrect output if the sudoers file had
10368: different alias types with the same name. Normal parsing (ie:
10369: not in '-l' mode) is unaffected.
10370:
10371: 1999-08-23 12:47 millert
10372:
10373: * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10374: proto on some systems
10375:
10376: 1999-08-22 13:10 millert
10377:
10378: * snprintf.c: fix comment
10379:
10380: 1999-08-22 13:09 millert
10381:
10382: * tgetpass.c: don't need limits.h
10383:
10384: 1999-08-22 07:36 millert
10385:
10386: * snprintf.c: kill bogus reference to vfprintf
10387:
10388: 1999-08-22 07:26 millert
10389:
10390: * sample.sudoers, sudoers: better examples
10391:
10392: 1999-08-22 07:23 millert
10393:
10394: * snprintf.c: Add some const in the K&R defs. This is safe since
10395: we define const away if the compiler doesn't grok it.
10396:
10397: 1999-08-22 07:22 millert
10398:
10399: * aclocal.m4, configure: Better test for working long long support.
10400: Ultrix compiler supports basic long long but not all operations
10401: on them.
10402:
10403: 1999-08-22 05:59 millert
10404:
10405: * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10406: sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10407: MAXINT before including hpsecurity.h to silence an HP-UX warning
10408: Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10409:
10410: 1999-08-21 15:00 millert
10411:
10412: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10413: snprintf.c: UCB-derived snprintf + asprintf support. Supports
10414: quads if the compiler does. No floating point yet, perhaps
10415: later...
10416:
10417: 1999-08-20 16:37 millert
10418:
10419: * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10420: auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10421: code as root, not the invoking user. It doesn't really gain us
10422: anything to run as the user since an attacker can just have an
10423: setuid(0) in their egg. Running as root solves potential
10424: problems wrt signalling.
10425:
10426: 1999-08-19 13:45 millert
10427:
10428: * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10429: let the signal handler get it if we are still running, else let
10430: init reap it for us. The extra time it takes to wait lets the
10431: user know that mail is being sent.
10432:
10433: Install SIGCHLD handler in main() and for POSIX signals, block
10434: everything *except* SIGCHLD.
10435:
10436: 1999-08-19 12:30 millert
10437:
10438: * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10439: INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10440: a bitmap instead of an int. This makes it possible to express
10441: things like "failed to validate because user not listed for this
10442: host". Some thigns that were previously VALIDATE_FOO are now
10443: FLAG_FOO. This may change later on.
10444:
10445: Reorganized code in log_auth() and sudo.c to deal with above
10446: changes.
10447:
10448: Safer versions of push/pushcp with in the do { ... } while (0)
10449: style
10450:
10451: parse.yacc now saves info on the stack to allow parse.c to
10452: determine if a user was listed, but not for the host he/she tried
10453: to run on.
10454:
10455: Added --with-mail-if-no-host option
10456:
10457: 1999-08-17 11:29 millert
10458:
10459: * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10460: visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10461: externally visible. o If pedantic > 1, it is a parse error. o
10462: Add -s (strict) option to visudo which sets pedantic to 2.
10463:
10464: 1999-08-17 11:26 millert
10465:
10466: * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10467:
10468: 1999-08-17 11:20 millert
10469:
10470: * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10471:
10472: 1999-08-17 10:29 millert
10473:
10474: * configure, configure.in, Makefile.in: Add testsudoers to default
10475: build target if --with-devel Don't clean generated parser files
10476: unless "distclean".
10477:
10478: 1999-08-17 08:47 millert
10479:
10480: * parse.yacc: In pedantic mode we need to save *all* the aliases,
10481: not just those that match, or we get spurious warnings.
10482:
10483: 1999-08-17 05:32 millert
10484:
10485: * TROUBLESHOOTING: reference samples.sylog.conf
10486:
10487: 1999-08-14 11:50 millert
10488:
10489: * sample.syslog.conf: Sample entries for syslog.conf
10490:
10491: 1999-08-14 11:40 millert
10492:
10493: * CHANGES: recent changes
10494:
10495: 1999-08-14 11:36 millert
10496:
10497: * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10498: pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10499: sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10500: configured into flags and add a flag to specify an auth method is
10501: running alone (the only one). Pass auth methods their sudo_auth
10502: pointer, not the data pointer. This allows us to get at the
10503: flags and tell if we are the only auth method. That, in turn,
10504: allows the method to be able to decide what should/should not be
10505: a fatal error. Currently only rfc1938 uses it this way, which
10506: allows us to kill the OTP_ONLY define and te hackery that went
10507: with it. With access to the sudo_auth struct, methods can also
10508: get at a string holding their cannonical name (useful in error
10509: messages).
10510:
10511: 1999-08-14 11:34 millert
10512:
10513: * Makefile.in, INSTALL, README, config.h.in, configure,
10514: configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10515: sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10516: o real dependencies in the Makefile o --with-devel option to
10517: enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10518: "foo->bar" o ALL goes back to being a token, not a string but
10519: don't leak memory o rename hsotspec -> host in parse.yacc
10520:
10521: 1999-08-12 12:26 millert
10522:
10523: * BUGS, CHANGES: recent changes
10524:
10525: 1999-08-12 12:24 millert
10526:
10527: * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10528: sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10529: *snprintf() before -ldb is added to LIBS since -ldb includes a
10530: bogus snprintf(). o Add forward refs for struct mbuf and struct
10531: rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10532: to fix -Wall o Add missing includes to fix more -Wall
10533:
10534: 1999-08-12 10:37 millert
10535:
10536: * INSTALL, check.c, config.h.in, configure, configure.in,
10537: parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10538: o Add a "pedentic" flag to the parser. This makes sudo warn in
10539: cases where an alias may be used before it is defined. Only
10540: turned on for visudo and testsudoers. o Add
10541: --disable-authentication option that makes sudo not require
10542: authentication by default. The PASSWD tag can be used to require
10543: authentication for an entry. We no longer overload
10544: --without-passwd.
10545:
10546: 1999-08-12 10:29 millert
10547:
10548: * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10549: USERNAME. These days a username can contain just about anything
10550: so be very permissive. Also drop the unused \. punctuation.
10551:
10552: 1999-08-09 18:25 millert
10553:
10554: * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10555: parse.h o find_alias() now returns an aliasinfo * instead of
10556: boolean o add_alias() now takes a value parameter to store in the
10557: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10558: return: 1) positive match 0) negative match (due to '!') -1) no
10559: match This means setting $$ explicitly in all cases, which I
10560: should have done in the first place. It also means that we
10561: always store a value that is != -1 and when we see a '!' we can
10562: set *_matches to !rv if rv != -1. The upshot of all of this is
10563: that '!' now works the way it should in lists and some of the
10564: rules are more uniform and sensible.
10565:
10566: 1999-08-09 18:17 millert
10567:
10568: * Makefile.in: add parse.h dependency
10569:
10570: 1999-08-09 18:17 millert
10571:
10572: * parse.h: kill unused *_matched macros
10573:
10574: 1999-08-09 10:35 millert
10575:
10576: * parse.yacc: Allow a list of users as the first thing in a user
10577: spec, not just a single entry. This makes things more uniform,
10578: though it does allow you to write user specs that are hard to
10579: read.
10580:
10581: 1999-08-09 10:08 millert
10582:
10583: * configure: regen
10584:
10585: 1999-08-09 10:08 millert
10586:
10587: * configure.in: fix check for crypt() in libufc
10588:
10589: 1999-08-07 14:03 millert
10590:
10591: * README: sudo-users list now exists
10592:
10593: 1999-08-07 07:46 millert
10594:
10595: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10596: reality.
10597:
10598: 1999-08-07 05:59 millert
10599:
10600: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10601: config.h.in, configure.in, logging.c, sudo.h, version.c,
10602: visudo.c, configure, fileops.c: o Move lock_file() and touch()
10603: into fileops.c so visudo can use them o Visudo now locks the
10604: sudoers temp file instead of bailing when the temp file already
10605: exists. This fixes the problem of stale temp files but it does
10606: *require* that you not try to put the temp file in a
10607: world-writable directory. This shoud not be an issue as the temp
10608: file should live in the same dir as sudoers. o Visudo now only
10609: installs the temp file as sudoers if it changed.
10610:
10611: 1999-08-06 09:49 millert
10612:
10613: * logging.c: add fcntl locking
10614:
10615: 1999-08-06 09:33 millert
10616:
10617: * configure, config.h.in, configure.in, logging.c: Lock the log
10618: file.
10619:
10620: 1999-08-06 05:36 millert
10621:
10622: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10623: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10624: /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10625: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10626: _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10627:
10628: 1999-08-05 17:38 millert
10629:
10630: * INSTALL, check.c, config.h.in, configure, configure.in,
10631: version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10632: more things to root sudo -V config reporting
10633:
10634: 1999-08-05 10:56 millert
10635:
10636: * configure, configure.in: aix_auth.o not authenticate.o
10637:
10638: 1999-08-05 10:48 millert
10639:
10640: * config.h.in: Add --with-goodpri and --with-badpri configure
10641: options to specify the syslog priority to use.
10642:
10643: 1999-08-05 10:30 millert
10644:
10645: * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10646: and --with-badpri configure options to specify the syslog
10647: priority to use.
10648:
10649: 1999-08-05 10:25 millert
10650:
10651: * compat.h: kill crufty AIX stuff
10652:
10653: 1999-08-05 06:55 millert
10654:
10655: * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10656: deal with $< like I would expect. Both GNU and BSD makes get
10657: this right but... So, we just expand $< inline at the cost of
10658: some ugliness.
10659:
10660: 1999-08-05 06:52 millert
10661:
10662: * version.c: If the invoking user is root, sudo will now print
10663: configure info in -V mode. Currently just prints logging info,
10664: to be expanded later.
10665:
10666: 1999-08-05 06:51 millert
10667:
10668: * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10669: facility and priority o use new print_version() functino for -V
10670: mode
10671:
10672: 1999-08-05 06:49 millert
10673:
10674: * check.c: Don't need version.c
10675:
10676: 1999-08-05 06:21 millert
10677:
10678: * configure, configure.in, aclocal.m4, config.h.in: Add check for
10679: syslog facilities and priorities tables in syslog.h
10680:
10681: 1999-08-05 05:23 millert
10682:
10683: * Makefile.in: o authenticate -> aix_auth o add version.c
10684:
10685: 1999-08-05 05:21 millert
10686:
10687: * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10688:
10689: 1999-08-04 13:32 millert
10690:
10691: * TODO: sudo should lock its logfile
10692:
10693: 1999-08-04 13:28 millert
10694:
10695: * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10696: shortcut macros for append() to make things more readable. o The
10697: separator in append() is now a string instead of a char. o In
10698: append(), only prepend the separator if the last char is not a
10699: '!'. This is a hack but it greatly simplifies '!' handling. o
10700: In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10701: inherited across entries in a list (matches current behavior).
10702: o Fix formatting in -l mode such that items in a list are
10703: separated by a space. Greatlt improves readability. o Space
10704: for name field in struct aliasinfo is now allocated dyanically
10705: instead of using a (big) buffer. o In add_alias(), only search
10706: the list once (lsearch instead of lfind + lsearch)
10707:
10708: 1999-08-04 11:31 millert
10709:
10710: * lex.yy.c, sudo.tab.h: regen
10711:
10712: 1999-08-04 10:54 millert
10713:
10714: * configure, configure.in: Solais pam doesn't require anye xtra
10715: setup
10716:
10717: 1999-08-04 05:35 millert
10718:
10719: * parse.yacc: o Simpler '!' support now that the lexer deals with
10720: multiple !'s for us. o In the case of opFOO, have FOO give a
10721: boolean return value and set foo_matches in opFOO, not FOO. o
10722: Treat 'ALL' as a string since it gets fill()'d in
10723: parse.lex--fixes a small memory leak. In the long run it may
10724: be better to just fix parse.lex and make ALL back into a token.
10725: However, having it be a string is useful since it can be
10726: easily passed back to the parent rule if we so desire.
10727:
10728: 1999-08-04 03:54 millert
10729:
10730: * parse.lex: o Remove some unnecessary backslashes o collapse
10731: multiple !'s by using !+ and checking if yyleng is even or odd.
10732: this allows us to simplify ! handling in parse.yacc
10733:
10734: 1999-08-04 03:53 millert
10735:
10736: * sudo.c: -u flag was being ignored
10737:
10738: 1999-08-01 13:04 millert
10739:
10740: * Makefile.in: correct fix
10741:
10742: 1999-08-01 12:37 millert
10743:
10744: * Makefile.in: work around pod2man stupididy
10745:
10746: 1999-08-01 12:35 millert
10747:
10748: * Makefile.in: correct dependencies for .cat
10749:
10750: 1999-08-01 12:26 millert
10751:
10752: * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
10753:
10754: 1999-08-01 12:25 millert
10755:
10756: * sudo.pod, visudo.pod: Add copyright Update to reality
10757:
10758: 1999-08-01 11:42 millert
10759:
10760: * parse.c, sudo.c, sudo.h: rename validate() to the more
10761: descriptive sudoers_lookup()
10762:
10763: 1999-08-01 06:49 millert
10764:
10765: * auth/aix_auth.c: use tgetpass
10766:
10767: 1999-07-31 12:32 millert
10768:
10769: * CHANGES: updates
10770:
10771: 1999-07-31 12:31 millert
10772:
10773: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
10774: configure, configure.in, sudo.c: Sudo, not CU Sudo
10775:
10776: 1999-07-31 12:19 millert
10777:
10778: * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
10779: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
10780: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
10781: lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
10782: parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
10783: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
10784: visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
10785: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
10786: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
10787: auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
10788: LICENSE: add 4th term to license similar to term 5 in the apache
10789: license
10790:
10791: 1999-07-31 12:02 millert
10792:
10793: * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
10794: sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
10795:
10796: 1999-07-28 05:24 millert
10797:
10798: * CHANGES: updates
10799:
10800: 1999-07-28 05:21 millert
10801:
10802: * check.c: Use dirs instead of files for timestamp. This allows
10803: tty and non-tty schemes to coexist reasonably. Note, however,
10804: that when you update a tty ticket, the mtime on the user dir gets
10805: updated as well.
10806:
10807: 1999-07-28 05:17 millert
10808:
10809: * configure.in, configure: Fix getprpwnam() checking on SCO. Need
10810: to link with "-lprot -lx" when linking test program, not just
10811: -lprot. Also add check for getspnam(). The SCO docs indicate
10812: that /etc/shadow can be used but this may be a lie.
10813:
10814: 1999-07-24 03:35 millert
10815:
10816: * auth/API: first cut at auth API description
10817:
10818: 1999-07-22 15:48 millert
10819:
10820: * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
10821: securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
10822: now an init method that gets run before the main loop. This
10823: allows auth routines to differentiate between initialization that
10824: happens once vs. setup that needs to run each time through the
10825: loop.
10826:
10827: 1999-07-22 12:23 millert
10828:
10829: * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
10830:
10831: 1999-07-22 12:22 millert
10832:
10833: * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
10834: versions of asprintf() and vasprintf()
10835:
10836: 1999-07-22 09:14 millert
10837:
10838: * TODO: remove 2 items. One done, one won't do.
10839:
10840: 1999-07-22 09:10 millert
10841:
10842: * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
10843: visudo.cat, visudo.html, configure, lex.yy.c: regen
10844:
10845: 1999-07-22 09:06 millert
10846:
10847: * CHANGES: new changes
10848:
10849: 1999-07-22 09:01 millert
10850:
10851: * sudo.pod: o Document -K flag and update meaning of -k flag. o
10852: BSD-style copyright o Document clearing of BIND resolver
10853: environment variables o Clarify bit about shared libs o suggest
10854: rc files create /tmp/.odus if your OS gives away files
10855:
10856: 1999-07-22 08:59 millert
10857:
10858: * visudo.pod: BSD license
10859:
10860: 1999-07-22 08:58 millert
10861:
10862: * tgetpass.c: o BSD copyright o no need to block signals, we now do
10863: that in main() o cosmetic changes
10864:
10865: 1999-07-22 08:57 millert
10866:
10867: * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
10868: sudo_user" instead of old globals. o some cometic cleanup
10869:
10870: 1999-07-22 08:56 millert
10871:
10872: * sudo_setenv.c, version.h: BSD-style copyright
10873:
10874: 1999-07-22 08:56 millert
10875:
10876: * sudo.h: o BSD copyright o logging and parser bits moved to their
10877: own .h files o new "struct sudo_user" to encapsulate many of the
10878: old globals.
10879:
10880: 1999-07-22 08:55 millert
10881:
10882: * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
10883: use new logging routines o simplified flow of control o BIND
10884: resolver additions to badenv_table
10885:
10886: 1999-07-22 08:53 millert
10887:
10888: * strerror.c: BSD-style copyright
10889:
10890: 1999-07-22 08:53 millert
10891:
10892: * snprintf.c: Now compiles on more K&R compilers
10893:
10894: 1999-07-22 08:52 millert
10895:
10896: * putenv.c: BSD-style copyright, cosmetic changes
10897:
10898: 1999-07-22 08:51 millert
10899:
10900: * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
10901: Move parser-specific defines and structs into parse.h + other
10902: cosmetic changes
10903:
10904: 1999-07-22 08:51 millert
10905:
10906: * logging.h: defines for logging routines
10907:
10908: 1999-07-22 08:49 millert
10909:
10910: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
10911: interfaces.h, pathnames.h.in: BSD-style copyright
10912:
10913: 1999-07-22 08:48 millert
10914:
10915: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
10916: copyright, cosmetic changes
10917:
10918: 1999-07-22 08:46 millert
10919:
10920: * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
10921: add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
10922: changes to fill in AUTH_OBJS for new auth api o check for
10923: strerror(), v?snprintf() and v?asprintf() o replace
10924: --with-AuthSRV with --with-fwtk
10925:
10926: 1999-07-22 08:43 millert
10927:
10928: * config.h.in: BSD-style copyright. Remove USE_GETPASS and
10929: HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
10930: HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
10931: NO_PASSWD
10932:
10933: 1999-07-22 08:42 millert
10934:
10935: * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
10936: are missing.
10937:
10938: 1999-07-22 08:39 millert
10939:
10940: * alloc.c: BSD-style copyright
10941:
10942: 1999-07-22 08:38 millert
10943:
10944: * TROUBLESHOOTING: no more --with-getpass
10945:
10946: 1999-07-22 08:34 millert
10947:
10948: * TODO: Take out things I've done...
10949:
10950: 1999-07-22 08:34 millert
10951:
10952: * README: Refer to LICENSE
10953:
10954: 1999-07-22 08:34 millert
10955:
10956: * PORTING: --with-getpass no longer exists
10957:
10958: 1999-07-22 08:33 millert
10959:
10960: * Makefile.in: BSD-style copyright. Update to reflect reality wrt
10961: new files and new auth modules.
10962:
10963: 1999-07-22 08:32 millert
10964:
10965: * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
10966: --with-fwtk and --without-passwd.
10967:
10968: 1999-07-22 08:31 millert
10969:
10970: * HISTORY: Update history a bit
10971:
10972: 1999-07-22 08:29 millert
10973:
10974: * COPYING, LICENSE: Now distributed under a BSD-style license
10975:
10976: 1999-07-22 08:28 millert
10977:
10978: * auth/sudo_auth.c: o BSD-style copyright o Add support for
10979: NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
10980: rfc1938 code o new struct sudo_user global
10981:
10982: 1999-07-22 08:25 millert
10983:
10984: * auth/: pam.c, sia.c: BSD-style copyright and use new log
10985: functions
10986:
10987: 1999-07-22 08:24 millert
10988:
10989: * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
10990: Use asprintf() and snprintf() where sensible.
10991:
10992: 1999-07-22 08:19 millert
10993:
10994: * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
10995: handling is now done more reasonably--better sanity checks and
10996: tty-based stamps are now done as files in a directory with the
10997: same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
10998: It is not currently possible to mix tty and non-tty based ticket
10999: schemes but this may change in the future (it requires sudo to
11000: use a directory instead of a file in the non-tty case). Also,
11001: ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11002: really deletes the file. That way you don't get the lecture
11003: again just because you killed your ticket in .logout. BSD-style
11004: copyright now.
11005:
11006: 1999-07-22 08:13 millert
11007:
11008: * logging.c: o rewritten logging routines. log_error() now takes
11009: printf-style varargs and log_auth() for the return value of
11010: validate(). o BSD-style copyright
11011:
11012: 1999-07-22 07:04 millert
11013:
11014: * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11015: auth API
11016:
11017: 1999-07-22 07:02 millert
11018:
11019: * auth/fwtk.c: Use snprintf() where it makes sense and add a
11020: BSD-style copyright
11021:
11022: 1999-07-22 07:00 millert
11023:
11024: * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11025: secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11026: copyright
11027:
11028: 1999-07-22 06:57 millert
11029:
11030: * emul/utime.h, utime.c: BSD-style copyright
11031:
11032: 1999-07-22 06:57 millert
11033:
11034: * emul/search.h: this has been rewritten so use my BSD-style
11035: copyright
11036:
11037: 1999-07-15 11:21 millert
11038:
11039: * snprintf.c: include malloc.h if no stdlib.h
11040:
11041: 1999-07-15 10:21 millert
11042:
11043: * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11044:
11045: 1999-07-15 10:20 millert
11046:
11047: * strerror.c: strerror() for systems w/o it
11048:
11049: 1999-07-12 06:53 millert
11050:
11051: * visudo.c: stylistic changes
11052:
11053: 1999-07-12 06:25 millert
11054:
11055: * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11056: comment
11057:
11058: 1999-07-11 16:10 millert
11059:
11060: * auth/pam.c: remove missed ref to PAM_nullpw
11061:
11062: 1999-07-11 16:10 millert
11063:
11064: * auth/sudo_auth.h: pasto
11065:
11066: 1999-07-11 15:19 millert
11067:
11068: * auth/kerb5.c: more or less complete now--still untested
11069:
11070: 1999-07-11 15:09 millert
11071:
11072: * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11073:
11074: 1999-07-11 14:42 millert
11075:
11076: * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11077: code into rfc1938.c
11078:
11079: 1999-07-11 07:22 millert
11080:
11081: * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11082: unchanged from dce_pwent.c
11083:
11084: 1999-07-11 06:44 millert
11085:
11086: * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11087: Could probably be much better
11088:
11089: 1999-07-11 06:43 millert
11090:
11091: * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11092: works (tested)
11093:
11094: 1999-07-11 05:37 millert
11095:
11096: * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11097:
11098: 1999-07-11 05:33 millert
11099:
11100: * auth/pam.c: don't use prompt global, it will go away
11101:
11102: 1999-07-11 05:32 millert
11103:
11104: * auth/secureware.c: correct copyright years
11105:
11106: 1999-07-10 20:32 millert
11107:
11108: * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11109: pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11110: New authentication API and methods
11111:
11112: 1999-07-08 06:46 millert
11113:
11114: * parse.yacc: only save an entry if user_matches && host_matches,
11115: even if the stack is empty (fix for previous commit)
11116:
11117: 1999-07-08 06:35 millert
11118:
11119: * parse.yacc: 1) Always save an entry on the stack if it is empty.
11120: This fixes the -l and -v flags that were broken by earlier parser
11121: changes.
11122:
11123: 2) In a Runas list, don't negate FALSE -> TRUE since that would
11124: make !foo match any time the user specified a runas user (via -u)
11125: other than foo.
11126:
11127: 1999-07-08 05:45 millert
11128:
11129: * testsudoers.c: interfaces and num_interfaces are now auto, not
11130: extern
11131:
11132: 1999-07-07 14:09 millert
11133:
11134: * auth.c: use a static global to keep stae about empty passwords
11135:
11136: 1999-07-07 14:08 millert
11137:
11138: * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11139: other modules
11140:
11141: 1999-07-05 16:53 millert
11142:
11143: * auth.c: PAM prompt code was wrong, looks like we have to kludge
11144: it after all.
11145:
11146: 1999-07-05 16:35 millert
11147:
11148: * auth.c: In the PAM code, when a user hits return at the first
11149: password prompt, exit without a warning just like the normal auth
11150: code
11151:
11152: 1999-07-05 16:15 millert
11153:
11154: * configure, configure.in: kludge around cross-compiler false
11155: positives
11156:
11157: 1999-07-05 16:14 millert
11158:
11159: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11160: (correct) PAM code Tgetpass now takes an echo flag for use with
11161: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11162: useless umask setting Change error from BAD_ALLOCATION ->
11163: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11164: auth.c for consistency
11165:
11166: 1999-07-05 16:11 millert
11167:
11168: * sudo.c: Some -Wall and kill some trailing spaces
11169:
11170: 1999-07-05 16:10 millert
11171:
11172: * configure.in: define -D__EXTENSIONS__ for solaris so we get
11173: crypt() proto
11174:
11175: 1999-06-22 09:42 millert
11176:
11177: * RUNSON: add Dynix 4.4.4
11178:
11179: 1999-06-22 09:30 millert
11180:
11181: * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11182: version, fall back on old kerb4 auth code
11183:
11184: 1999-06-22 06:41 millert
11185:
11186: * INSTALL: clarify some things
11187:
11188: 1999-06-22 06:38 millert
11189:
11190: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11191:
11192: 1999-06-14 19:47 millert
11193:
11194: * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11195:
11196: 1999-06-03 12:34 millert
11197:
11198: * tgetpass.c: Fix open(2) return value checking, was NULL for
11199: fopen, should be -1 for open
11200:
11201: 1999-06-03 12:06 millert
11202:
11203: * configure: regen
11204:
11205: 1999-06-03 12:06 millert
11206:
11207: * configure.in: better wording for solaris pam notice
11208:
11209: 1999-06-03 11:52 millert
11210:
11211: * CHANGES: document recent changes
11212:
11213: 1999-06-03 11:52 millert
11214:
11215: * TROUBLESHOOTING: Update shadow password section
11216:
11217: 1999-06-03 11:51 millert
11218:
11219: * auth.c: move authentication code from check.c to auth.c
11220:
11221: 1999-06-03 11:51 millert
11222:
11223: * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11224:
11225: 1999-05-16 21:36 millert
11226:
11227: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11228: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11229: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11230: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11231: interface-related defines to interfaces.h so we don't have to
11232: include <netinet/in.h> everywhere.
11233:
11234: 1999-05-14 12:30 millert
11235:
11236: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11237: logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11238: braindeath with our own SUDO_MAX_PASS.
11239: It turns out the old DES crypt does the right thing with
11240: passwords
11241: longert than 8 characters.
11242: o Fix common typo (necesary -> necessary)
11243: o Update TODO list
11244:
11245: 1999-05-03 12:00 millert
11246:
11247: * sudo.c: set $LOGNAME when we set $USER
11248:
11249: 1999-04-27 00:00 millert
11250:
11251: * INSTALL: add comment about digital unix and interfaces.c warning
11252: with gcc
11253:
11254: 1999-04-15 01:12 millert
11255:
11256: * sample.sudoers: use modern paths and give examples for some of
11257: the new parser features
11258:
11259: 1999-04-10 13:03 millert
11260:
11261: * parse.c: fix comment
11262:
11263: 1999-04-10 00:49 millert
11264:
11265: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11266: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11267: parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11268: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11269: Function names should be flush with the start of the line so they
11270: can be found trivially in an editor and with grep
11271:
11272: 1999-04-10 00:40 millert
11273:
11274: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11275: parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11276: is already void, no need to cast it
11277:
11278: 1999-04-10 00:37 millert
11279:
11280: * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11281: (this should not be possible)
11282:
11283: 1999-04-10 00:10 millert
11284:
11285: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11286: testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11287: listed in sudoers) to the command instead of stashing the struct
11288: stat. Should be safer.
11289:
11290: 1999-04-08 19:56 millert
11291:
11292: * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11293: release
11294:
11295: 1999-04-07 20:20 millert
11296:
11297: * CHANGES: updated
11298:
11299: 1999-04-07 19:18 millert
11300:
11301: * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11302: sudoers.pod: You can now specifiy a host list instead of just a
11303: host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11304: now works.
11305:
11306: 1999-04-07 02:59 millert
11307:
11308: * testsudoers.c: Quiet -Wall
11309:
11310: 1999-04-07 02:50 millert
11311:
11312: * parse.yacc: Move the push from the beginning of cmndspec to the
11313: end. This means we no longer have to do a push at the end of
11314: privilege, just reset some values.
11315:
11316: 1999-04-06 20:24 millert
11317:
11318: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11319: and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11320: most everywhere
11321:
11322: 1999-04-06 14:12 millert
11323:
11324: * sudoers.pod: modernize paths and update su example based on
11325: sample.sudoers one
11326:
11327: 1999-04-06 14:06 millert
11328:
11329: * sample.sudoers: New runas semantics
11330:
11331: 1999-04-06 13:54 millert
11332:
11333: * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11334: configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11335: ourselves so we don't need to rely on the system strdup(3) which
11336: may or may not exist. There is now no need to provide strdup()
11337: for those w/o it. Also, the prototype for estrdup() was wrong,
11338: it returns char * and its param is const.
11339:
11340: 1999-04-06 13:40 millert
11341:
11342: * getcwd.c: $Sudo tag
11343:
11344: 1999-04-06 13:20 millert
11345:
11346: * check.c: buf should be prompt; Michael Robokoff
11347: <mrobo@networkcs.com>
11348:
11349: 1999-04-06 01:40 millert
11350:
11351: * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11352: operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11353: and User_Alias.
11354:
11355: 1999-04-06 01:38 millert
11356:
11357: * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11358: GLOBAL_PROBLEM
11359:
11360: 1999-04-06 01:08 millert
11361:
11362: * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11363: as subscript.
11364:
11365: 1999-04-06 01:00 millert
11366:
11367: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11368: VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11369: command but the NOPASSWD flag was set. Make runasspec,
11370: runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11371: support for '!' in the runas list Fix double printing of '%' and
11372: '+' for groups and netgroups respectively Add *_matched macros
11373: (no need for local stack variable). Should only be used directly
11374: after a pop (since top must be >= 2).
11375:
11376: 1999-04-05 23:25 millert
11377:
11378: * aclocal.m4, configure.in: Add copyright, somewhat silly
11379:
11380: 1999-04-05 16:57 millert
11381:
11382: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11383: check_sia.c, compat.h, config.h.in, configure, configure.in,
11384: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11385: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11386: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11387: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11388: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11389: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11390: visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11391: 1.6 and combine copyright statements
11392:
11393: 1999-04-05 16:30 millert
11394:
11395: * sample.sudoers: Use ! not ^ to do negation
11396:
11397: 1999-04-05 16:29 millert
11398:
11399: * lex.yy.c: regen
11400:
11401: 1999-04-05 16:28 millert
11402:
11403: * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11404: across entris in a command list. Add a PASSWD tag to reverse
11405: NOPASSWD. When you override a runas or *PASSWD tag the value
11406: given becomes the new default for the rest of the command list.
11407:
11408: 1999-04-02 16:03 millert
11409:
11410: * CHANGES, RUNSON: update for 1.5.9
11411:
11412: 1999-04-02 16:02 millert
11413:
11414: * visudo.c: Shift return value of system(3) by 8 to get real exit
11415: value and if it is not 1 or 0 print the retval along with the
11416: error message.
11417:
11418: 1999-03-30 16:45 millert
11419:
11420: * Makefile.in: testsudoers needs LIBOBJS too
11421:
11422: 1999-03-30 12:17 millert
11423:
11424: * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11425: like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11426: would not allow millert to run ls as root.
11427:
11428: 1999-03-30 01:08 millert
11429:
11430: * CHANGES: new change
11431:
11432: 1999-03-30 01:03 millert
11433:
11434: * parse.yacc: Save entries that match a ! command on the matching
11435: stack too
11436:
11437: 1999-03-30 01:01 millert
11438:
11439: * sudo.c: Make sudo's usage info better when mutually exclusive
11440: args are given and don't rely on argument order to detect this;
11441: nick@zeta.org.au
11442:
11443: 1999-03-29 15:03 millert
11444:
11445: * CHANGES, Makefile.in, RUNSON: updates from CU
11446:
11447: 1999-03-28 23:38 millert
11448:
11449: * Makefile.in: use gzip
11450:
11451: 1999-03-28 23:31 millert
11452:
11453: * parse.yacc: Fix off by one error introduced in *alloc changes
11454:
11455: 1999-03-28 23:05 millert
11456:
11457: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11458: check_sia.c, compat.h, config.h.in, configure, configure.in,
11459: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11460: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11461: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11462: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11463: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11464: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11465: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11466: emul/utime.h: ++version
11467:
11468: 1999-03-28 21:59 millert
11469:
11470: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11471: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11472: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11473: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11474: emalloc/erealloc/estrdup
11475:
11476: 1999-03-28 20:29 millert
11477:
11478: * alloc.c: error checking memory allocation routines
11479:
11480: 1999-03-28 19:23 millert
11481:
11482: * parse.yacc: Still not right, this fixes it for real
11483:
11484: 1999-03-28 19:08 millert
11485:
11486: * parse.yacc: Fix for previous commit
11487:
11488: 1999-03-28 19:05 millert
11489:
11490: * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11491: when mixing different runas specs and ! commands. For example:
11492: millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11493: allow millert to run whoami as root as well as daemon when it
11494: should just allow daemon. The problem was that comma-separated
11495: commands in a list shared the same entry on the matching stack.
11496: Now they get their own entry iff there is a full match. It may
11497: be better to just make the runas spec persistent across all
11498: commands in a list like the user and host entries of the matching
11499: stack. However, since that is a fairly major change it should
11500: gets its own minor rev increase.
11501:
11502: 1999-03-28 13:50 millert
11503:
11504: * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11505: warning on Linux
11506:
11507: 1999-03-26 13:17 millert
11508:
11509: * CHANGES: updates
11510:
11511: 1999-03-26 13:12 millert
11512:
11513: * sample.sudoers: better su entry
11514:
11515: 1999-03-26 13:10 millert
11516:
11517: * configure: regen
11518:
11519: 1999-03-26 13:09 millert
11520:
11521: * check.c, configure.in: new pam code that works on solaris, should
11522: work on linux too; aelberg@home.com
11523:
11524: 1999-03-19 14:44 millert
11525:
11526: * RUNSON: more entries
11527:
11528: 1999-03-19 14:43 millert
11529:
11530: * config.h.in: only include strings.h if there is no string.h
11531:
11532: 1999-03-17 15:25 millert
11533:
11534: * config.guess: Sinix is now being called ReliantUNIX;
11535: bjjackso@us.oracle.com
11536:
11537: 1999-03-13 13:37 millert
11538:
11539: * sudo.c: shost must be set before log functions are called #ifdef
11540: HOST_IN_LOG
11541:
11542: 1999-03-07 18:34 millert
11543:
11544: * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11545: command args. Stop processing an arg when you hit a backslash so
11546: the quoted-character detection can catch it.
11547:
11548: 1999-02-26 01:19 millert
11549:
11550: * interfaces.c: include sys/time.h; aparently AIX needs it.
11551: ppz@cdu.elektra.ru
11552:
11553: 1999-02-23 19:43 millert
11554:
11555: * configure, configure.in: add missing case statement so
11556: --without-sendmail works
11557:
11558: 1999-02-22 21:51 millert
11559:
11560: * CHANGES: more
11561:
11562: 1999-02-22 15:10 millert
11563:
11564: * configure, configure.in: only search for -lsun in irix <= 4.x
11565:
11566: 1999-02-22 15:01 millert
11567:
11568: * configure, configure.in: back out last configure.in change now
11569: that I've hacked autoconf to fix the real problem and add a
11570: missing newline
11571:
11572: 1999-02-22 14:32 millert
11573:
11574: * CHANGES: updated
11575:
11576: 1999-02-22 14:05 millert
11577:
11578: * getcwd.c: add def of dirfd() for those without it
11579:
11580: 1999-02-22 10:58 millert
11581:
11582: * configure.in, configure: When falling back to checking for
11583: socket() when linking with "-lsocket -lnsl" check for main()
11584: instead since autoconf has already cached the results of checking
11585: for socket() in -lsocket. This is really an autoconf bug as it
11586: should use the extra libs as part of the cache variable name.
11587:
11588: 1999-02-22 10:47 millert
11589:
11590: * configure.in: typo
11591:
11592: 1999-02-21 15:18 millert
11593:
11594: * configure.in: fix occurrence of $with_timeout that should be
11595: $with_password_timeout;
11596: Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11597:
11598: 1999-02-17 11:40 millert
11599:
11600: * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11601: espie@openbsd.org
11602:
11603: 1999-02-11 01:41 millert
11604:
11605: * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11606: it does not have it
11607:
11608: 1999-02-09 13:11 millert
11609:
11610: * configure, configure.in: define for_BSD_TYPES irix
11611:
11612: 1999-02-06 19:47 millert
11613:
11614: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11615: clear that it is the user's password, not root's, that we want.
11616:
11617: 1999-02-06 19:43 millert
11618:
11619: * check.c, sudo.h: If the user enters an empty password and really
11620: has no password, accept the empty password they entered.
11621: Perviously, they could enter anything *but* an empty password.
11622: Also, add GETPASS macro that calls either tgetpass() or getpass()
11623: depending on how sudo was configured. Problem noted by
11624: jdg@maths.qmw.ac.uk
11625:
11626: 1999-02-02 23:32 millert
11627:
11628: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11629: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11630: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11631: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11632: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11633: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11634: emul/utime.h: add explicate copyright
11635:
11636: 1999-02-02 23:16 millert
11637:
11638: * CHANGES: mention -lsocket, -lnsl configure changes
11639:
11640: 1999-02-02 17:54 millert
11641:
11642: * sudo.c: Don't clobber errno after calling check_sudoers().
11643:
11644: 1999-01-31 19:46 millert
11645:
11646: * configure.in, configure: When linking with both -lsocket and
11647: -lnsl be sure to do so in that order. Also, when we can't find
11648: socket() or inet_addr() and have to try linking with both libs,
11649: issue a warning.
11650:
11651: 1999-01-31 19:45 millert
11652:
11653: * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11654:
11655: 1999-01-23 12:18 millert
11656:
11657: * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11658: entry
11659:
11660: 1999-01-22 13:13 millert
11661:
11662: * configure, CHANGES, INSTALL, configure.in: fix and correctly
11663: document --with-umask; problem noted by adap@adap.org
11664:
11665: 1999-01-19 20:38 millert
11666:
11667: * configure.in, configure: only use /usr/{man,catman}/local to
11668: store man pages if suer didn't override prefix or mandir
11669:
11670: 1999-01-19 20:24 millert
11671:
11672: * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11673: take an arg
11674:
11675: 1999-01-18 21:53 millert
11676:
11677: * RUNSON: updates from users
11678:
11679: 1999-01-18 21:04 millert
11680:
11681: * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11682: 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11683:
11684: 1999-01-18 20:00 millert
11685:
11686: * configure, configure.in: better fix for the problem of unresolved
11687: symbols in -lnsl or -lsocket
11688:
11689: 1999-01-18 19:39 millert
11690:
11691: * configure, configure.in: when checking for functions in -lnsl and
11692: -lsocket link with both of them to avoid unresolved symbols on
11693: some weirdo systems
11694:
11695: 1999-01-17 20:49 millert
11696:
11697: * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11698: RCS before the RCS->CVS switch
11699:
11700: 1999-01-17 18:16 millert
11701:
11702: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11703: configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11704: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11705: interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11706: parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11707: sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11708: tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11709: emul/utime.h: add sudo tags
11710:
11711: 1999-01-17 17:53 millert
11712:
11713: * version.h, sudo.h: testing Sudo tag
11714:
11715: 1999-01-17 17:40 millert
11716:
11717: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
11718: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
11719: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11720: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
11721: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11722: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
11723: sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
11724: tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
11725: emul/utime.h: crank version and regen files
11726:
11727: 1999-01-17 17:27 millert
11728:
11729: * Makefile.in: kill rcs goop in update_version and fix now that
11730: version is a const
11731:
11732: 1999-01-17 17:08 millert
11733:
11734: * INSTALL, check.c, config.h.in, configure, configure.in,
11735: logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
11736: fcusack@iconnet.net
11737:
11738: 1999-01-17 16:45 millert
11739:
11740: * realpath.c, sudo_realpath.c: we no longer use realpath
11741:
11742: 1999-01-17 16:44 millert
11743:
11744: * qualify.c: replaced by find_path.c
11745:
11746: 1999-01-17 16:43 millert
11747:
11748: * options.h: all options are now configure flags
11749:
11750: 1999-01-17 16:42 millert
11751:
11752: * lex.yy.c: regen
11753:
11754: 1999-01-17 16:41 millert
11755:
11756: * getwd.c: superceded by getcwd.c
11757:
11758: 1999-01-17 16:36 millert
11759:
11760: * getpass.c: superceded by tgetpass.c
11761:
11762: 1999-01-17 16:36 millert
11763:
11764: * SUPPORTED: superceded by RUNSON
11765:
11766: 1999-01-17 16:33 millert
11767:
11768: * OPTIONS: No longer used now that we have configure options for
11769: everything.
11770:
11771: 1999-01-17 16:32 millert
11772:
11773: * configure: regen based on configure.in
11774:
11775: 1999-01-17 16:31 millert
11776:
11777: * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
11778: sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
11779: on sudo.pod, sudoers.pod, and visudo.pod
11780:
11781: 1998-12-11 12:16 millert
11782:
11783: * check.c: fix tty tickets in remove_timestamp (didn't use ':')
11784:
11785: 1998-12-07 16:16 millert
11786:
11787: * interfaces.c: close sock when we are done with it
11788:
11789: 1998-11-27 19:37 millert
11790:
11791: * parse.yacc: never say "error on line -1"
11792:
11793: 1998-11-23 23:38 millert
11794:
11795: * configure.in: check for -lnsl before -lsocket
11796:
11797: 1998-11-23 23:29 millert
11798:
11799: * configure.in: quote '[', ']' used in ranges correctly
11800:
11801: 1998-11-21 17:54 millert
11802:
11803: * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
11804:
11805: 1998-11-20 18:33 millert
11806:
11807: * version.h: 1.5.7
11808:
11809: 1998-11-20 18:33 millert
11810:
11811: * INSTALL: more info for 1.5.7
11812:
11813: 1998-11-20 18:30 millert
11814:
11815: * README: update for 1.5.7
11816:
11817: 1998-11-20 14:26 millert
11818:
11819: * parse.yacc: make increases of cm_list_size and ga_list_size be
11820: similar to increases of stacksize (ie: >= not > in initial
11821: compare).
11822:
11823: 1998-11-20 14:22 millert
11824:
11825: * parse.yacc: when we get a syntax error, report it for the
11826: previous line since that's generally where the error occurred.
11827:
11828: 1998-11-18 15:31 millert
11829:
11830: * config.h.in, configure.in, interfaces.c: add back check for
11831: sys/sockio.h but only use it if SIOCGIFCONF is not defined
11832:
11833: 1998-11-18 15:25 millert
11834:
11835: * config.h.in: define BSD_COMP for svr4
11836:
11837: 1998-11-17 23:16 millert
11838:
11839: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
11840: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
11841: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
11842: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
11843: -Wall
11844:
11845: 1998-11-17 23:10 millert
11846:
11847: * configure.in: kill check for sockio,h
11848:
11849: 1998-11-17 23:10 millert
11850:
11851: * config.h.in: no more HAVE_SYS_SOCKIO_H
11852:
11853: 1998-11-17 22:51 millert
11854:
11855: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
11856: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
11857: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
11858: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11859: -Wall
11860:
11861: 1998-11-16 17:38 millert
11862:
11863: * sudo.c: add missing inform_user()
11864:
11865: 1998-11-13 19:21 millert
11866:
11867: * find_path.c: return NOT_FOUND if given fully qualified path and
11868: it does not exist previously it would perror(ENOENT) which
11869: bypasses the option to not leak path info
11870:
11871: 1998-11-13 19:20 millert
11872:
11873: * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
11874: for kerb, check for -ldes
11875:
11876: 1998-11-13 14:19 millert
11877:
11878: * INSTALL: tty tickets are user:tty now
11879:
11880: 1998-11-13 14:10 millert
11881:
11882: * check.c: when using tty tickets make it user:tty not user.tty as
11883: a username could have a '.' in it
11884:
11885: 1998-11-09 19:15 millert
11886:
11887: * sudo.c: add "ignoring foo found in ." for auth successful case
11888:
11889: 1998-11-09 17:57 millert
11890:
11891: * sudo.c: add missing printf param
11892:
11893: 1998-11-08 15:56 millert
11894:
11895: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
11896: go back to printing "command not found" unless
11897: --disable-path-info specified. Also, tell user when we ignore
11898: '.' in their path and it would have been used but for
11899: --with-ignore-dot.
11900:
11901: 1998-11-08 13:51 millert
11902:
11903: * check.c, sudo.c: Only one space after a colon, not two, in
11904: printf's
11905:
11906: 1998-11-05 12:59 millert
11907:
11908: * sudo.pod: document setting $USER
11909:
11910: 1998-11-04 22:24 millert
11911:
11912: * check.c: fix bugs with prompt expansion
11913:
11914: 1998-11-04 21:21 millert
11915:
11916: * sudo.c: set $USER for root too
11917:
11918: 1998-11-04 17:13 millert
11919:
11920: * getspwuid.c: typo
11921:
11922: 1998-11-04 17:07 millert
11923:
11924: * configure.in: HP-UX's iscomsec is in -lsec, not libc
11925:
11926: 1998-11-03 22:24 millert
11927:
11928: * configure.in: remove some entries in the OS case statement that
11929: did nothing
11930:
11931: 1998-11-03 22:19 millert
11932:
11933: * TROUBLESHOOTING: add "cd" section and flush out syslog section
11934:
11935: 1998-11-03 20:51 millert
11936:
11937: * Makefile.in: no more sudo-lex.yy.c
11938:
11939: 1998-11-03 20:50 millert
11940:
11941: * check_sia.c: add custom prompt support
11942:
11943: 1998-11-03 20:40 millert
11944:
11945: * sudo.c: kill perror("malloc") since we already have a good error
11946: messages pw_ent -> pw for brevity set $USER if -u specified
11947:
11948: 1998-11-03 20:39 millert
11949:
11950: * parse.c: kill perror("malloc") since we already have a good error
11951: messages pw_ent -> pw for brevity when checking if %group
11952: matches, look up user in password file so that %groups works in a
11953: RunAs spec.
11954:
11955: 1998-11-03 20:39 millert
11956:
11957: * logging.c, parse.yacc: kill perror("malloc") since we already
11958: have a good error messages
11959:
11960: 1998-11-03 20:38 millert
11961:
11962: * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
11963: perror("malloc") since we already have a good error messages
11964: pw_ent -> pw for brevity
11965:
11966: 1998-11-03 15:03 millert
11967:
11968: * tgetpass.c: the prompt is expanded before tgetpass is called
11969:
11970: 1998-11-03 15:03 millert
11971:
11972: * sudo.h: tgetpass now has the same args as getpass again
11973:
11974: 1998-11-03 15:02 millert
11975:
11976: * getspwuid.c: add iscomsec, issecure support
11977:
11978: 1998-11-03 15:02 millert
11979:
11980: * check.c: we now expand any %h or %u in the prompt before passing
11981: to tgetpass
11982:
11983: 1998-11-03 14:58 millert
11984:
11985: * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
11986:
11987: 1998-11-03 14:56 millert
11988:
11989: * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
11990:
11991: 1998-11-03 14:55 millert
11992:
11993: * configure.in: add check for iscomsec in HP-UX
11994:
11995: 1998-11-03 14:51 millert
11996:
11997: * configure.in: check for issecure if we have getpwanam on SunOS
11998: some options are incompatible with DUNIX SIA check for dispcrypt
11999: on DUNIX
12000:
12001: 1998-10-25 15:21 millert
12002:
12003: * config.h.in: add HAVE_DISPCRYPT
12004:
12005: 1998-10-25 15:21 millert
12006:
12007: * secureware.c: add back support for non-dispcrypt based checking
12008: for older DUNIX
12009:
12010: 1998-10-25 00:51 millert
12011:
12012: * INSTALL: sia changes
12013:
12014: 1998-10-25 00:48 millert
12015:
12016: * configure.in: SIA becomes the default on Digital UNIX now havbe
12017: --disable-sia to turn it off...
12018:
12019: 1998-10-24 23:52 millert
12020:
12021: * check.c: move local includes after system ones
12022:
12023: 1998-10-24 19:28 millert
12024:
12025: * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12026: INCORRECT_PASSWORD or an insult to stderr
12027:
12028: 1998-10-24 19:07 millert
12029:
12030: * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12031: password. Only the first iteration was working.
12032:
12033: 1998-10-21 21:00 millert
12034:
12035: * aclocal.m4: don't trust UID_MAX or MAXUID
12036:
12037: 1998-10-21 20:35 millert
12038:
12039: * configure.in: fix two pastos
12040:
12041: 1998-10-21 20:30 millert
12042:
12043: * configure.in: fix typo
12044:
12045: 1998-10-21 20:19 millert
12046:
12047: * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12048: legal to be negative in DUNX 5.0
12049:
12050: 1998-10-21 20:15 millert
12051:
12052: * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12053: -lm but check for -ldb since DUNX < 4.0 lacks it
12054:
12055: 1998-10-21 19:50 millert
12056:
12057: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12058: secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12059: 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12060: exist).
12061:
12062: 1998-10-20 17:22 millert
12063:
12064: * INSTALL: updated --with-editor blurb
12065:
12066: 1998-10-20 17:21 millert
12067:
12068: * TROUBLESHOOTING: tell how to put sudoers in a different dir
12069:
12070: 1998-10-20 16:22 millert
12071:
12072: * configure.in: add missing quotes around $with_editor
12073:
12074: 1998-10-20 14:00 millert
12075:
12076: * configure.in: typo in --with-editor bits
12077:
12078: 1998-10-20 01:24 millert
12079:
12080: * INSTALL: I don't expect it to work on Solaris
12081:
12082: 1998-10-20 01:24 millert
12083:
12084: * check.c: add back security/pam_misc.h
12085:
12086: 1998-10-19 17:13 millert
12087:
12088: * INSTALL: remove dunix note since configure checks for this now
12089:
12090: 1998-10-19 16:30 millert
12091:
12092: * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12093: bad)
12094:
12095: 1998-10-19 14:32 millert
12096:
12097: * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12098: dispcrypt(3)
12099:
12100: 1998-10-19 14:32 millert
12101:
12102: * config.h.in: add HAVE_INITPRIVS
12103:
12104: 1998-10-19 14:31 millert
12105:
12106: * sudo.c: call initprivs() if we have it for getprpwuid later on
12107:
12108: 1998-10-19 14:30 millert
12109:
12110: * Makefile.in: clean pathnames.h too
12111:
12112: 1998-10-19 14:28 millert
12113:
12114: * configure.in: quote "Sorry, try again." with [] since it has a
12115: comma in it set LIBS when we add stuff to SUDO_LIBS set
12116: SECUREWARE when we find getprpwuid() so we can check for
12117: bigcrypt, set_auth_parameters, and initprivs later.
12118:
12119: 1998-10-19 13:48 millert
12120:
12121: * INSTALL: update Digital UNIX note about acl.h
12122:
12123: 1998-10-18 20:26 millert
12124:
12125: * INSTALL: add --with-sia --without-root-sudo ->
12126: --disable-root-sudo some reordering
12127:
12128: 1998-10-18 20:22 millert
12129:
12130: * secureware.c: add whitespace
12131:
12132: 1998-10-18 20:22 millert
12133:
12134: * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12135: sudo.h: add SIA support
12136:
12137: 1998-10-18 20:21 millert
12138:
12139: * check_sia.c: Initial revision
12140:
12141: 1998-10-18 19:42 millert
12142:
12143: * configure.in: when checking for -lsocket, -lnsl, and -linet,
12144: check for the specific functions we need from them.
12145:
12146: 1998-10-18 19:10 millert
12147:
12148: * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12149:
12150: 1998-10-18 18:15 millert
12151:
12152: * sudo.h, Makefile.in: added check_secureware
12153:
12154: 1998-10-18 18:12 millert
12155:
12156: * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12157: bits
12158:
12159: 1998-10-18 18:00 millert
12160:
12161: * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12162: other sets defined. configure now does that for us
12163:
12164: 1998-10-18 17:45 millert
12165:
12166: * configure.in: move some --with options around change a bunch of
12167: echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12168:
12169: 1998-10-18 01:09 millert
12170:
12171: * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12172: that caused a syntax error add some echo verbage
12173:
12174: 1998-10-17 18:08 millert
12175:
12176: * check.c: moved SecureWare stuff into secureware.c
12177:
12178: 1998-10-17 18:07 millert
12179:
12180: * secureware.c: Initial revision
12181:
12182: 1998-10-17 17:02 millert
12183:
12184: * INSTALL: update url to solaris gcc bins
12185:
12186: 1998-10-17 16:39 millert
12187:
12188: * INSTALL: change option formatter and flesh out someentries
12189:
12190: 1998-10-17 16:18 millert
12191:
12192: * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12193: environment variable
12194:
12195: 1998-10-17 16:01 millert
12196:
12197: * BUGS: everything is now done via configure
12198:
12199: 1998-10-17 16:00 millert
12200:
12201: * README: prev rev was 1.5.6
12202:
12203: 1998-10-17 00:33 millert
12204:
12205: * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12206: correctly
12207:
12208: 1998-10-17 00:32 millert
12209:
12210: * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12211: the Makefile
12212:
12213: 1998-10-17 00:31 millert
12214:
12215: * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12216: sudoers_gid, sudoers_mode from configure
12217:
12218: 1998-10-17 00:30 millert
12219:
12220: * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12221: substituted into the Makefile, not config.h
12222:
12223: 1998-10-17 00:30 millert
12224:
12225: * INSTALL: document all --with/--enable options
12226:
12227: 1998-10-15 02:25 millert
12228:
12229: * insults.h: options.h is no more
12230:
12231: 1998-10-15 02:25 millert
12232:
12233: * config.h.in: assimilated options.h
12234:
12235: 1998-10-15 02:24 millert
12236:
12237: * configure.in: moved options from options.h to configure
12238:
12239: 1998-10-15 01:41 millert
12240:
12241: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12242: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12243: sudo_setenv.c, visudo.c: no more options.h
12244:
12245: 1998-10-15 01:39 millert
12246:
12247: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12248: to options.h
12249:
12250: 1998-10-15 01:32 millert
12251:
12252: * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12253:
12254: 1998-10-15 00:10 millert
12255:
12256: * tgetpass.c: if select return < -1 still prompt for pw
12257:
12258: 1998-10-15 00:03 millert
12259:
12260: * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12261: IGNORE_DOT_PATH into configure options
12262:
12263: 1998-10-14 23:57 millert
12264:
12265: * parse.c: FAST_MATCH is no longer an optino
12266:
12267: 1998-10-14 23:52 millert
12268:
12269: * check.c: remove_timestamp() if timestamp is preposterous
12270:
12271: 1998-10-14 23:36 millert
12272:
12273: * options.h: convert more options to --with/--enable
12274:
12275: 1998-10-14 23:36 millert
12276:
12277: * INSTALL, aclocal.m4: logfile -> logpath
12278:
12279: 1998-10-14 23:31 millert
12280:
12281: * configure.in: convert more options into --with and --enable
12282:
12283: 1998-10-14 23:28 millert
12284:
12285: * tgetpass.c: catch EINTR in select and restart
12286:
12287: 1998-10-14 23:15 millert
12288:
12289: * logging.c: sys/errno -> errno
12290:
12291: 1998-09-24 11:40 millert
12292:
12293: * sudo.c: UMASK -> SUDO_UMASK.
12294:
12295: 1998-09-24 11:36 millert
12296:
12297: * check.c, logging.c: time.h, not sys/time.h
12298:
12299: 1998-09-21 19:52 millert
12300:
12301: * logging.c: MAILER -> _PATH_SENDMAIL
12302:
12303: 1998-09-21 00:06 millert
12304:
12305: * INSTALL, configure.in: no more --with-C2, now it is
12306: --disable-shadow
12307:
12308: 1998-09-21 00:00 millert
12309:
12310: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12311: getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12312: Always include shadow support if the platform supports it and the
12313: user did not disable it via configure
12314:
12315: 1998-09-20 19:48 millert
12316:
12317: * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12318:
12319: 1998-09-20 19:16 millert
12320:
12321: * Makefile.in: pathnames.h -> pathnames.h.in
12322:
12323: 1998-09-20 19:14 millert
12324:
12325: * check.c: fix version string
12326:
12327: 1998-09-20 19:12 millert
12328:
12329: * check.c: move pam_conv to be static to auth function remove
12330: pam_misc.h (solaris doesn't have one)
12331:
12332: 1998-09-20 19:10 millert
12333:
12334: * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12335: SUDO_PROG_PWD
12336:
12337: 1998-09-20 19:10 millert
12338:
12339: * configure.in: munge pathnames.h.in -> pathnames.h kill
12340: SUDO_PROG_PWD
12341:
12342: 1998-09-20 19:10 millert
12343:
12344: * pathnames.h.in: convert to pathnames.h.in
12345:
12346: 1998-09-18 20:20 millert
12347:
12348: * configure.in: fix typo in sysv4 matching case /.
12349:
12350: 1998-09-18 01:29 millert
12351:
12352: * check.c: pam stuff needs to run as root, not user, for shadow
12353: passwords
12354:
12355: 1998-09-17 12:26 millert
12356:
12357: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12358: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12359: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12360: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12361: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12362: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12363: BUGS, INSTALL, README, configure.in: updated version
12364:
12365: 1998-09-17 12:13 millert
12366:
12367: * check.c: user version.h for long message
12368:
12369: 1998-09-17 11:53 millert
12370:
12371: * check.c: this is version 1.5.6
12372:
12373: 1998-09-16 13:42 millert
12374:
12375: * Makefile.in: remove errant backslash
12376:
12377: 1998-09-14 22:25 millert
12378:
12379: * options.h, parse.yacc, pathnames.h.in: fix version string
12380:
12381: 1998-09-14 22:02 millert
12382:
12383: * BUGS, CHANGES, TODO: updtaed for 1.5.6
12384:
12385: 1998-09-14 22:02 millert
12386:
12387: * RUNSON: updated for 1.5.6
12388:
12389: 1998-09-14 11:48 millert
12390:
12391: * interfaces.c: kill unused localhost_mask var copy if name to
12392: ifr_tmp after we zero it
12393:
12394: 1998-09-13 15:50 millert
12395:
12396: * INSTALL: Better description of new vs. old sudoers modes fix some
12397: typos better description of /usr/ucb/cc gotchas on slowaris
12398:
12399: 1998-09-13 15:49 millert
12400:
12401: * Makefile.in: add sample.pam
12402:
12403: 1998-09-13 15:32 millert
12404:
12405: * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12406:
12407: 1998-09-12 11:10 millert
12408:
12409: * README: mention TROUBLESHOOTING more fix some typos
12410:
12411: 1998-09-11 20:30 millert
12412:
12413: * configure.in: move --enable/--disable to be after --with
12414:
12415: 1998-09-11 20:30 millert
12416:
12417: * INSTALL: document --enable/--disable
12418:
12419: 1998-09-11 20:26 millert
12420:
12421: * INSTALL: document --with-pam
12422:
12423: 1998-09-11 19:47 millert
12424:
12425: * configure.in: Add message for pam users
12426:
12427: 1998-09-11 19:27 millert
12428:
12429: * sample.pam: Initial revision
12430:
12431: 1998-09-11 19:23 millert
12432:
12433: * config.h.in: fix HAVE_PAM
12434:
12435: 1998-09-11 19:19 millert
12436:
12437: * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12438: <GCalvin@kenwoodusa.com>
12439:
12440: 1998-09-10 18:51 millert
12441:
12442: * config.h.in: add HOST_IN_LOG and WRAP_LOG
12443:
12444: 1998-09-10 18:51 millert
12445:
12446: * logging.c: add WRAP_LOG and HOST_IN_LOG
12447:
12448: 1998-09-10 18:37 millert
12449:
12450: * configure.in: add --enable-log-host and --enable-log-wrap
12451:
12452: 1998-09-10 18:32 millert
12453:
12454: * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12455: --with-timedir
12456:
12457: 1998-09-08 20:45 millert
12458:
12459: * compat.h: add howmany macro
12460:
12461: 1998-09-08 20:43 millert
12462:
12463: * tgetpass.c: include sys/param.h to get howmany macro
12464:
12465: 1998-09-07 20:42 millert
12466:
12467: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12468: add RUNAS_DEFAULT
12469:
12470: 1998-09-07 12:51 millert
12471:
12472: * fnmatch.c: bring in stdio.h for NULL
12473:
12474: 1998-09-07 12:50 millert
12475:
12476: * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12477:
12478: 1998-09-07 12:43 millert
12479:
12480: * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12481:
12482: 1998-09-07 12:42 millert
12483:
12484: * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12485:
12486: 1998-09-07 12:41 millert
12487:
12488: * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12489: if secureware
12490:
12491: 1998-09-07 12:39 millert
12492:
12493: * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12494:
12495: 1998-09-07 12:06 millert
12496:
12497: * interfaces.c: initialize previfname
12498:
12499: 1998-09-07 11:51 millert
12500:
12501: * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12502: SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12503: IFF_LOOPBACK instead of kludging it
12504:
12505: 1998-09-07 11:49 millert
12506:
12507: * configure.in: typo
12508:
12509: 1998-09-07 00:01 millert
12510:
12511: * Makefile.in: don't need special build line for sudo.tab.o
12512:
12513: 1998-09-06 23:58 millert
12514:
12515: * Makefile.in: don't clean sudo.tab.[ch]
12516:
12517: 1998-09-06 23:48 millert
12518:
12519: * sudo.c: Sudo should prompt for a password before telling the user
12520: that a command could not be found.
12521:
12522: 1998-09-06 23:47 millert
12523:
12524: * BUGS: for 1.5.6
12525:
12526: 1998-09-06 23:25 millert
12527:
12528: * INSTALL, README: no longer require yacc
12529:
12530: 1998-09-06 23:19 millert
12531:
12532: * Makefile.in: typo
12533:
12534: 1998-09-06 23:18 millert
12535:
12536: * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12537:
12538: 1998-09-06 23:09 millert
12539:
12540: * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12541: command args if you get a '='
12542:
12543: 1998-09-06 22:59 millert
12544:
12545: * insults.h: fix version ,
12546:
12547: 1998-09-06 22:57 millert
12548:
12549: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12550: fix version
12551:
12552: 1998-09-06 22:55 millert
12553:
12554: * getcwd.c: getcwd(3) from OpenBSD for those without it.
12555:
12556: 1998-09-06 22:51 millert
12557:
12558: * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12559:
12560: 1998-09-06 22:49 millert
12561:
12562: * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12563: a pipe to getpwd!
12564:
12565: 1998-09-06 22:41 millert
12566:
12567: * parse.c: use NAMLEN() macro
12568:
12569: 1998-09-06 22:34 millert
12570:
12571: * fnmatch.c: remove duplicate include of string.h
12572:
12573: 1998-09-06 22:28 millert
12574:
12575: * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12576:
12577: 1998-09-06 22:28 millert
12578:
12579: * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12580:
12581: 1998-09-06 22:28 millert
12582:
12583: * config.h.in: add dev_t and ino_t
12584:
12585: 1998-07-28 12:44 millert
12586:
12587: * check.c: fix OTP_ONLY for opie
12588:
12589: 1998-06-24 12:22 millert
12590:
12591: * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12592:
12593: 1998-05-19 00:10 millert
12594:
12595: * Makefile.in: make update_version saner
12596:
12597: 1998-05-18 23:32 millert
12598:
12599: * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12600:
12601: 1998-05-18 23:32 millert
12602:
12603: * configure.in: check for waitpid and wait3 or no waitpid
12604:
12605: 1998-05-18 23:31 millert
12606:
12607: * logging.c: used waitpid or wait3 if we have 'em
12608:
12609: 1998-05-02 14:16 millert
12610:
12611: * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12612: Faigon)
12613:
12614: 1998-04-27 20:09 millert
12615:
12616: * configure.in: don't need to explicately mention -lsocket -lnsl
12617: for sequent
12618:
12619: 1998-04-25 01:56 millert
12620:
12621: * configure.in: dynix should not link with -linet
12622:
12623: 1998-04-10 15:32 millert
12624:
12625: * INSTALL: mention that HP-UX doesn't ship with yacc
12626:
12627: 1998-04-06 22:35 millert
12628:
12629: * check.c: ignore kerberos if we can't get the local realm
12630:
12631: 1998-04-05 23:37 millert
12632:
12633: * configure.in, BUGS, INSTALL, README: ++version
12634:
12635: 1998-04-05 23:36 millert
12636:
12637: * version.h: ++
12638:
12639: 1998-04-05 23:35 millert
12640:
12641: * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12642: find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12643: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12644: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12645: visudo.c: updated version
12646:
12647: 1998-04-05 23:34 millert
12648:
12649: * check.c, sudo.h: fix version
12650:
12651: 1998-04-05 23:33 millert
12652:
12653: * getcwd.c: don't use popen/pclose. Do it inline.
12654:
12655: 1998-04-05 23:25 millert
12656:
12657: * lsearch.c: add rcsid
12658:
12659: 1998-04-05 23:21 millert
12660:
12661: * sudo.c: typo
12662:
12663: 1998-04-05 23:17 millert
12664:
12665: * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12666: insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12667: check.c: updated version
12668:
12669: 1998-04-05 23:15 millert
12670:
12671: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12672: MAX*
12673:
12674: 1998-04-05 23:14 millert
12675:
12676: * Makefile.in: getwd.c -> getcwd.c
12677:
12678: 1998-04-05 22:49 millert
12679:
12680: * config.h.in: kill HAVE_GETWD
12681:
12682: 1998-04-05 22:49 millert
12683:
12684: * configure.in: getcwd, not getwd
12685:
12686: 1998-04-05 22:48 millert
12687:
12688: * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12689: defeats the purpose
12690:
12691: 1998-03-31 00:15 millert
12692:
12693: * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12694:
12695: 1998-03-31 00:05 millert
12696:
12697: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12698: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12699: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12700: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12701: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12702: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12703: updated version
12704:
12705: 1998-03-30 23:54 millert
12706:
12707: * configure.in: support *-ccur-sysv4 and fix two typos
12708:
12709: 1998-03-27 19:52 millert
12710:
12711: * configure.in: don't echo about with_logfile and with_timedir
12712:
12713: 1998-03-27 19:49 millert
12714:
12715: * INSTALL: document --with-logfile and --with-timedir
12716:
12717: 1998-03-27 19:46 millert
12718:
12719: * aclocal.m4: support --with-logfile and --with-timedir
12720:
12721: 1998-03-27 19:46 millert
12722:
12723: * configure.in: Add --with-logfile and --with-timedir
12724:
12725: 1998-03-27 19:27 millert
12726:
12727: * sudo.c: change size computation of NewArgv for UNICOS
12728:
12729: 1998-02-18 20:10 millert
12730:
12731: * configure.in: treate -*-sysv4* like *-*-svr4
12732:
12733: 1998-02-18 18:19 millert
12734:
12735: * configure.in: fix spacing for --with-authenticate help
12736:
12737: 1998-02-18 16:39 millert
12738:
12739: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12740: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12741: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12742: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12743: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12744: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12745: updated version
12746:
12747: 1998-02-18 16:23 millert
12748:
12749: * parse.yacc: fix off by one error in push macro
12750:
12751: 1998-02-17 01:15 millert
12752:
12753: * configure.in: removed bogus alloca hack
12754:
12755: 1998-02-17 01:15 millert
12756:
12757: * check.c: added AIX 4.x authenticate() support
12758:
12759: 1998-02-17 01:11 millert
12760:
12761: * parse.yacc: include alloca.h if using bison and not gcc and it
12762: exists. fixes an alloca problem on hpux 10.x
12763:
12764: 1998-02-17 00:39 millert
12765:
12766: * INSTALL: mention --with-authenticate
12767:
12768: 1998-02-17 00:37 millert
12769:
12770: * configure.in: added AIX authenticate() support
12771:
12772: 1998-02-17 00:22 millert
12773:
12774: * config.h.in: add HAVE_AUTHENTICATE
12775:
12776: 1998-02-16 23:58 millert
12777:
12778: * interfaces.c: dynamically size ifconf buffer
12779:
12780: 1998-02-16 23:56 millert
12781:
12782: * configure.in: quote '[' and ']'
12783:
12784: 1998-02-16 21:42 millert
12785:
12786: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12787: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12788: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12789: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12790: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12791: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12792: updated version
12793:
12794: 1998-02-16 19:06 millert
12795:
12796: * visudo.pod: add ERRORS section
12797:
12798: 1998-02-16 18:57 millert
12799:
12800: * TROUBLESHOOTING: add busy stmp file explanation
12801:
12802: 1998-02-15 18:49 millert
12803:
12804: * configure.in: the name of the cached var that signals whether or
12805: not you are cross compiling changed. It is now
12806: ac_cv_prog_cc_cross
12807:
12808: 1998-02-11 16:26 millert
12809:
12810: * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
12811:
12812: 1998-02-06 21:55 millert
12813:
12814: * sample.sudoers, sudoers.pod: better example of su but not root su
12815:
12816: 1998-02-06 15:49 millert
12817:
12818: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12819: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12820: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12821: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12822: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12823: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12824: updated version
12825:
12826: 1998-02-06 15:48 millert
12827:
12828: * Makefile.in: correct regexp for updating version
12829:
12830: 1998-02-06 14:05 millert
12831:
12832: * tgetpass.c: remove bogus flush of stderr spew prompt before
12833: turning off echo. Seems to fix a weird problem where if sudo
12834: complained about a bogus stamp file the user would sometimes not
12835: have a chance to enter a password
12836:
12837: 1998-02-06 14:05 millert
12838:
12839: * check.c: fix bogus flush of stderr
12840:
12841: 1998-02-05 19:19 millert
12842:
12843: * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
12844:
12845: 1998-02-05 19:18 millert
12846:
12847: * configure.in: support hpux1[0-9] not just hpux10
12848:
12849: 1998-01-30 14:59 millert
12850:
12851: * parse.c: set sudoers_fp to nil after closing
12852:
12853: 1998-01-24 01:05 millert
12854:
12855: * config.guess, config.sub: updated from autoconf 2.12
12856:
12857: 1998-01-24 00:50 millert
12858:
12859: * configure.in: add *-*-svr4 rule
12860:
12861: 1998-01-22 22:53 millert
12862:
12863: * tgetpass.c: fix select usage for high fd's (dynamically allocate
12864: readfds)
12865:
12866: 1998-01-22 22:49 millert
12867:
12868: * check.c: kill extra whitespace
12869:
12870: 1998-01-22 19:28 millert
12871:
12872: * sudo.c: do an initgroups() before running a command, unless the
12873: target user is root.
12874:
12875: 1998-01-22 12:22 millert
12876:
12877: * TROUBLESHOOTING: tell people to use tabs, not spaces, in
12878: syslog.conf
12879:
12880: 1998-01-21 01:56 millert
12881:
12882: * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
12883: emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
12884: version
12885:
12886: 1998-01-21 01:32 millert
12887:
12888: * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
12889: updated version
12890:
12891: 1998-01-21 01:29 millert
12892:
12893: * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
12894: ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12895: check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
12896: updated version
12897:
12898: 1998-01-21 01:20 millert
12899:
12900: * Makefile.in: more tweaks to update_version
12901:
12902: 1998-01-21 01:19 millert
12903:
12904: * Makefile.in: fixed up update_version rule
12905:
12906: 1998-01-21 00:55 millert
12907:
12908: * configure.in: ++version
12909:
12910: 1998-01-21 00:53 millert
12911:
12912: * Makefile.in: removed supe of check.c
12913:
12914: 1998-01-21 00:51 millert
12915:
12916: * INSTALL: ++version I missed
12917:
12918: 1998-01-21 00:51 millert
12919:
12920: * RUNSON: updated
12921:
12922: 1998-01-21 00:48 millert
12923:
12924: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
12925: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
12926: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12927: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12928: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12929: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
12930: visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
12931:
12932: 1998-01-21 00:47 millert
12933:
12934: * CHANGES: updated for 1.5.5
12935:
12936: 1998-01-21 00:35 millert
12937:
12938: * Makefile.in: add rules to update version stuff in files so I
12939: don't need to do it by hand
12940:
12941: 1998-01-21 00:04 millert
12942:
12943: * sudo.h: sudoers_fp is now extern
12944:
12945: 1998-01-21 00:03 millert
12946:
12947: * sudo.c: in check_sudoers, cache the sudoers file handle in
12948: sudoers_fp so we don't have to open it again in the parse. This
12949: may help with weird solaris problems where EAGAIN sometime
12950: occurrs.
12951:
12952: 1998-01-21 00:02 millert
12953:
12954: * parse.c: sudoers file open is now done only in check_sudoers() so
12955: we just do a rewind() instead of an open. May help people on
12956: solaris who were getting EAGAIN.
12957:
12958: 1998-01-16 11:43 millert
12959:
12960: * INSTALL: mention that newer glibc is fixed
12961:
12962: 1998-01-13 12:58 millert
12963:
12964: * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
12965: so ignore _RLD* instead of _RLD_*
12966:
12967: 1998-01-13 10:32 millert
12968:
12969: * parse.c: typo
12970:
12971: 1998-01-13 10:19 millert
12972:
12973: * parse.c: fix that bug for real
12974:
12975: 1998-01-13 02:39 millert
12976:
12977: * INSTALL: document Linux's libc6 brokenness.
12978:
12979: 1998-01-13 02:00 millert
12980:
12981: * parse.yacc: -Wall
12982:
12983: 1998-01-13 01:22 millert
12984:
12985: * RUNSON: updated
12986:
12987: 1998-01-13 00:50 millert
12988:
12989: * TROUBLESHOOTING: remind people to HUP syslogd
12990:
12991: 1998-01-13 00:05 millert
12992:
12993: * Makefile.in: add -O flag to tar
12994:
12995: 1998-01-13 00:00 millert
12996:
12997: * TODO, RUNSON: updated
12998:
12999: 1998-01-12 23:59 millert
13000:
13001: * sudo.pod: remove author's email addr. people should mail
13002: sudo-bugs
13003:
13004: 1998-01-12 23:49 millert
13005:
13006: * INSTALL: fix version
13007:
13008: 1998-01-12 23:48 millert
13009:
13010: * README, check.c, compat.h, config.h.in, configure.in,
13011: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13012: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13013: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13014: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13015: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13016: visudo.c: ++version
13017:
13018: 1998-01-12 23:44 millert
13019:
13020: * RUNSON: updated
13021:
13022: 1998-01-12 23:42 millert
13023:
13024: * INSTALL, Makefile.in: ++version
13025:
13026: 1998-01-12 23:41 millert
13027:
13028: * CHANGES: updated fort 1.5.4
13029:
13030: 1998-01-12 23:41 millert
13031:
13032: * check.c: exit(1) if user enters no passwd
13033:
13034: 1998-01-12 23:37 millert
13035:
13036: * BUGS: ++version
13037:
13038: 1998-01-12 23:10 millert
13039:
13040: * parse.c: commands can start with ./* not just /* -- fixes a
13041: serious security hole.
13042:
13043: 1997-12-21 18:17 millert
13044:
13045: * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13046: leave it as "unknown".
13047:
13048: 1997-11-23 13:29 millert
13049:
13050: * sample.sudoers: fix usage of (username) in conjunction with , and
13051: !
13052:
13053: 1997-11-23 13:28 millert
13054:
13055: * visudo.c: catch the case where the user is not in the passwd file
13056:
13057: 1997-11-23 13:24 millert
13058:
13059: * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13060: the nfds arg to select(2)
13061:
13062: 1997-11-23 01:53 millert
13063:
13064: * sudo.c: define tty global to an initial value to avoid dumping
13065: core in logging functions when passwd file is unavailable.
13066:
13067: 1997-11-23 01:51 millert
13068:
13069: * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13070: gotten the passwd entry
13071:
13072: 1997-11-23 00:21 millert
13073:
13074: * sudo.pod: talk about problem of ALL
13075:
13076: 1997-10-10 00:54 millert
13077:
13078: * README: new web location
13079:
13080: 1997-10-10 00:54 millert
13081:
13082: * INSTALL: fdesc bug is fixed in Open/Net BSD
13083:
13084: 1997-10-10 00:52 millert
13085:
13086: * HISTORY: updates from Nieusma
13087:
13088: 1997-10-09 18:37 millert
13089:
13090: * dce_pwent.c: move compat.h after the system includes
13091:
13092: 1997-08-06 14:58 millert
13093:
13094: * logging.c: save errno from being clobbered by wait(). From Theo
13095:
13096: 1997-05-21 11:57 millert
13097:
13098: * compat.h: fix an occurence of setresuid -> setreuid (typo)
13099:
13100: 1997-03-19 17:45 millert
13101:
13102: * install-sh: check for path to strip
13103:
13104: 1997-01-15 19:05 millert
13105:
13106: * logging.c: deal with maxfilelen < 0 case
13107:
13108: 1997-01-15 19:05 millert
13109:
13110: * OPTIONS: fixed descriptin
13111:
13112: 1996-12-11 23:10 millert
13113:
13114: * sudo.c: correct error message if mode/owner wrong and not
13115: statable by owner but is statable by root.
13116:
13117: 1996-11-23 02:18 millert
13118:
13119: * config.guess, config.sub: autoconf 2.11
13120:
13121: 1996-11-16 14:42 millert
13122:
13123: * CHANGES, RUNSON, TODO: sudo 1.5.3.
13124:
13125: 1996-11-14 15:08 millert
13126:
13127: * sudo.h, parse.yacc: command_alias -> generic_alias
13128:
13129: 1996-11-13 22:50 millert
13130:
13131: * sample.sudoers: added Runas_Alias example and fixed syntax errors
13132:
13133: 1996-11-13 22:50 millert
13134:
13135: * OPTIONS, options.h: updated MAILSUBJECT
13136:
13137: 1996-11-13 22:49 millert
13138:
13139: * logging.c: added %h expansion
13140:
13141: 1996-11-13 21:37 millert
13142:
13143: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13144: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13145: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13146: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13147: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13148: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13149: visudo.c, INSTALL, README, configure.in: ++version
13150:
13151: 1996-11-13 20:01 millert
13152:
13153: * emul/utime.h, BUGS: ++version
13154:
13155: 1996-11-13 19:45 millert
13156:
13157: * sudoers.pod: document Runas_Alias
13158:
13159: 1996-11-13 19:22 millert
13160:
13161: * visudo.pod: q (uid) -> Q
13162:
13163: 1996-11-13 19:21 millert
13164:
13165: * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13166: drop into whatnow
13167:
13168: 1996-11-13 19:05 millert
13169:
13170: * parse.yacc: add size params to sprintf
13171:
13172: 1996-11-13 19:04 millert
13173:
13174: * parse.lex: allow trailing space after '\\' but before '\n'
13175:
13176: 1996-11-13 19:04 millert
13177:
13178: * find_path.c: off by one error in path size check
13179:
13180: 1996-11-13 19:03 millert
13181:
13182: * check.c: sprintf paranoia
13183:
13184: 1996-11-12 11:59 millert
13185:
13186: * parse.yacc: fixed more_aliases
13187:
13188: 1996-11-12 11:58 millert
13189:
13190: * visudo.c: now warns if killed by signal ./
13191:
13192: 1996-11-11 10:49 millert
13193:
13194: * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13195: expanded (but it is gross)
13196:
13197: 1996-11-10 20:32 millert
13198:
13199: * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13200: 0400
13201:
13202: 1996-11-10 20:08 millert
13203:
13204: * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13205: USER_ALIAS)
13206:
13207: 1996-11-10 20:02 millert
13208:
13209: * parse.lex: Add Runas_Alias and simplify a rule.
13210:
13211: 1996-11-10 19:15 millert
13212:
13213: * parse.yacc: always store User_Alias's since they can be used
13214: inside of a runas list. Sigh. Really need a Runas_Alias
13215: instead.
13216:
13217: 1996-10-30 18:04 millert
13218:
13219: * visudo.c: deal with case where there is no sudoers file
13220:
13221: 1996-10-11 23:01 millert
13222:
13223: * TROUBLESHOOTING: added one
13224:
13225: 1996-10-10 22:11 millert
13226:
13227: * HISTORY, testsudoers.c: developement -> development
13228:
13229: 1996-10-10 22:08 millert
13230:
13231: * INSTALL: added a note
13232:
13233: 1996-10-10 20:36 millert
13234:
13235: * RUNSON: for 1.5.2
13236:
13237: 1996-10-10 20:36 millert
13238:
13239: * CHANGES: updated
13240:
13241: 1996-10-10 00:56 millert
13242:
13243: * PORTING: removed seteuid() notes
13244:
13245: 1996-10-09 13:37 millert
13246:
13247: * compat.h: better seteuid() emulatino
13248:
13249: 1996-10-09 13:36 millert
13250:
13251: * configure.in: added check for seteuid
13252:
13253: 1996-10-09 13:36 millert
13254:
13255: * config.h.in: added HAVE_SETEUID
13256:
13257: 1996-10-08 19:22 millert
13258:
13259: * configure.in: first stab at sequent support
13260:
13261: 1996-10-08 19:21 millert
13262:
13263: * config.h.in: added HAVE_SYS_SELECT_H
13264:
13265: 1996-10-08 19:21 millert
13266:
13267: * compat.h: sequent -> _SEQUENT_
13268:
13269: 1996-10-08 19:11 millert
13270:
13271: * compat.h: added seteuid() macro for DYNIX
13272:
13273: 1996-10-08 18:54 millert
13274:
13275: * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13276:
13277: 1996-10-07 01:05 millert
13278:
13279: * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13280: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13281: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13282: pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13283: README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13284: putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13285: visudo.c, tgetpass.c: ++version
13286:
13287: 1996-10-07 00:59 millert
13288:
13289: * sudo.pod: added -H and SUDO_PS1
13290:
13291: 1996-10-07 00:55 millert
13292:
13293: * configure.in: use SUDO_FUNC_FNMATCH
13294:
13295: 1996-10-07 00:54 millert
13296:
13297: * aclocal.m4: added SUDO_FUNC_FNMATCH
13298:
13299: 1996-10-07 00:53 millert
13300:
13301: * sudo.c: added -H flag
13302:
13303: 1996-10-07 00:53 millert
13304:
13305: * sudo.h: added MODE_RESET_HOME /
13306:
13307: 1996-10-05 00:00 millert
13308:
13309: * INSTALL: mention OPIE
13310:
13311: 1996-10-04 23:59 millert
13312:
13313: * configure.in: added opie support
13314:
13315: 1996-10-04 23:59 millert
13316:
13317: * check.c: added HAVE_OPIE and changed to *_OTP_*
13318:
13319: 1996-10-04 23:58 millert
13320:
13321: * compat.h, config.h.in: added HAVE_OPIE
13322:
13323: 1996-10-04 23:58 millert
13324:
13325: * OPTIONS, options.h: SKEY -> OTP
13326:
13327: 1996-10-03 23:27 millert
13328:
13329: * check.c: moved fclose() in skey stuff.
13330:
13331: 1996-10-03 19:53 millert
13332:
13333: * putenv.c: index -> strchr remove unnecesary stuff
13334:
13335: 1996-10-03 19:43 millert
13336:
13337: * check.c: now call skeychallenge() to get challenge instead of
13338: making one up ourselves. this way, we get extra goodies in the
13339: prompt.
13340:
13341: 1996-09-10 00:32 millert
13342:
13343: * CHANGES: added one
13344:
13345: 1996-09-10 00:18 millert
13346:
13347: * parse.lex: allow logins to start with a number (YUCK!)
13348:
13349: 1996-09-08 15:18 millert
13350:
13351: * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13352:
13353: 1996-09-08 15:15 millert
13354:
13355: * configure.in: DUNIX doesn't need -lnsl
13356:
13357: 1996-09-07 20:22 millert
13358:
13359: * CHANGES: [no log message]
13360:
13361: 1996-09-07 20:21 millert
13362:
13363: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13364: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13365: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13366: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13367: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13368: tgetpass.c, utime.c, version.h, visudo.c: courtesan
13369:
13370: 1996-09-07 20:13 millert
13371:
13372: * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13373: courtesan
13374:
13375: 1996-09-07 20:12 millert
13376:
13377: * visudo.pod: [no log message]
13378:
13379: 1996-09-07 20:00 millert
13380:
13381: * sudo.pod, visudo.pod: courtesan
13382:
13383: 1996-09-07 19:45 millert
13384:
13385: * HISTORY: added courtesan ./
13386:
13387: 1996-09-06 00:12 millert
13388:
13389: * sudo.c: added $SUDO_PROMPT support
13390:
13391: 1996-09-04 17:19 millert
13392:
13393: * check.c: print long skey challemged to stderr, not stdout
13394:
13395: 1996-08-31 23:10 millert
13396:
13397: * CHANGES: updated for 1.5.1
13398:
13399: 1996-08-31 23:07 millert
13400:
13401: * emul/utime.h: ++version
13402:
13403: 1996-08-31 12:34 millert
13404:
13405: * RUNSON: updated for 1.5.1
13406:
13407: 1996-08-30 10:49 millert
13408:
13409: * check.c: use shost, not host for tgetpass
13410:
13411: 1996-08-30 00:21 millert
13412:
13413: * OPTIONS, sudo.pod: documented %u and %h
13414:
13415: 1996-08-29 20:40 millert
13416:
13417: * configure.in: fixed typo
13418:
13419: 1996-08-29 20:37 millert
13420:
13421: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13422: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13423: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13424: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13425: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13426: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13427: visudo.c: ++version
13428:
13429: 1996-08-29 20:30 millert
13430:
13431: * BUGS: ++version
13432:
13433: 1996-08-29 18:32 millert
13434:
13435: * configure.in, Makefile.in, version.h: ++version
13436:
13437: 1996-08-29 17:58 millert
13438:
13439: * sudo.h: new tgetpass() params
13440:
13441: 1996-08-29 17:58 millert
13442:
13443: * check.c: pass use and host to tgetpass
13444:
13445: 1996-08-29 17:57 millert
13446:
13447: * tgetpass.c: added %u and %h escapes
13448:
13449: 1996-08-29 16:56 millert
13450:
13451: * OPTIONS, options.h, check.c: added NO_MESSAGE
13452:
13453: 1996-08-29 16:23 millert
13454:
13455: * configure.in: added cray (unicos) support
13456:
13457: 1996-08-27 11:36 millert
13458:
13459: * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13460:
13461: 1996-08-25 17:56 millert
13462:
13463: * INSTALL: added note about "make install"
13464:
13465: 1996-08-25 17:50 millert
13466:
13467: * parse.yacc: changed length/size params from int to size_t
13468:
13469: 1996-08-25 13:35 millert
13470:
13471: * OPTIONS: now get CSOPS insults as well by default
13472:
13473: 1996-08-25 13:33 millert
13474:
13475: * insults.h: use csops insults too by default
13476:
13477: 1996-08-25 13:31 millert
13478:
13479: * INSTALL, Makefile.in, README, config.h.in, configure.in,
13480: version.h: version = 1.5
13481:
13482: 1996-08-25 13:27 millert
13483:
13484: * sudo.c: added runas_homedir
13485:
13486: 1996-08-25 13:27 millert
13487:
13488: * TODO: updated for 1.5
13489:
13490: 1996-08-25 13:23 millert
13491:
13492: * RUNSON: updated for 1.5
13493:
13494: 1996-08-25 13:19 millert
13495:
13496: * CHANGES: 1.5 release
13497:
13498: 1996-08-25 13:17 millert
13499:
13500: * INSTALL: added "upgrading" notes
13501:
13502: 1996-08-22 14:00 millert
13503:
13504: * visudo.c: now do chmod and chown after edit of temp file and
13505: before rename
13506:
13507: 1996-08-18 12:52 millert
13508:
13509: * Makefile.in: ++version added INSTALL.configure
13510:
13511: 1996-08-18 12:52 millert
13512:
13513: * version.h, configure.in: ++version
13514:
13515: 1996-08-18 12:51 millert
13516:
13517: * TROUBLESHOOTING: [no log message]
13518:
13519: 1996-08-18 12:50 millert
13520:
13521: * parse.yacc: added missing cast
13522:
13523: 1996-08-17 20:37 millert
13524:
13525: * sudo.c: sets $HOME to pw_dir of runas user
13526:
13527: 1996-08-17 20:02 millert
13528:
13529: * sudo.pod: document $HOME change
13530:
13531: 1996-08-17 19:43 millert
13532:
13533: * sudo.pod: fixed up some wording
13534:
13535: 1996-08-17 19:25 millert
13536:
13537: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13538: goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13539: parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13540: testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13541:
13542: 1996-08-17 19:19 millert
13543:
13544: * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13545: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13546: ++version
13547:
13548: 1996-08-17 19:18 millert
13549:
13550: * sudo.h: name nad type changes
13551:
13552: 1996-08-17 19:17 millert
13553:
13554: * testsudoers.c: now works with new sudo
13555:
13556: 1996-08-17 19:07 millert
13557:
13558: * parse.yacc: fixed some XXX
13559:
13560: 1996-08-17 18:52 millert
13561:
13562: * parse.yacc: some variable name changes + comment headers for
13563: functions.
13564:
13565: 1996-08-17 18:41 millert
13566:
13567: * tgetpass.c: added extra paren's to make compilers happy
13568:
13569: 1996-08-17 18:34 millert
13570:
13571: * sudo.c: [no log message]
13572:
13573: 1996-08-17 18:30 millert
13574:
13575: * parse.c: now uses init_parser() if not in sudoers and tries
13576: "list" or "validate" scold but don't be nasty.
13577:
13578: 1996-08-17 18:29 millert
13579:
13580: * TROUBLESHOOTING: now can use upper case login names
13581:
13582: 1996-08-17 18:29 millert
13583:
13584: * visudo.c: now uses init_parser()
13585:
13586: 1996-08-17 18:28 millert
13587:
13588: * PORTING: added info about PASSWORD_TIMEOUT
13589:
13590: 1996-08-17 18:28 millert
13591:
13592: * INSTALL, README: updated
13593:
13594: 1996-08-17 18:28 millert
13595:
13596: * INSTALL.configure: Initial revision
13597:
13598: 1996-08-17 18:27 millert
13599:
13600: * BUGS: fixed a bug ,
13601:
13602: 1996-08-17 18:27 millert
13603:
13604: * parse.yacc: now dynamically allocates memory for the stacks -- no
13605: more overflows!
13606:
13607: 1996-08-17 18:26 millert
13608:
13609: * sudo.pod: -l now explands command aliases
13610:
13611: 1996-08-17 13:22 millert
13612:
13613: * parse.yacc: hacks to expand command aliases for `sudo -l'
13614:
13615: 1996-08-17 13:22 millert
13616:
13617: * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13618: and bash)
13619:
13620: 1996-08-17 13:22 millert
13621:
13622: * sudo.h: added struct command_alias
13623:
13624: 1996-08-17 13:20 millert
13625:
13626: * sudo.pod: fixed a bug
13627:
13628: 1996-08-17 13:15 millert
13629:
13630: * lsearch.c: in compar() key should be first arg
13631:
13632: 1996-08-15 15:48 millert
13633:
13634: * BUGS: fixed some bugs
13635:
13636: 1996-08-15 15:47 millert
13637:
13638: * parse.yacc: can now deal with upcase HOST and USER names
13639:
13640: 1996-08-15 15:47 millert
13641:
13642: * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13643:
13644: 1996-08-15 15:46 millert
13645:
13646: * sudo.pod: fixed thinko
13647:
13648: 1996-08-15 15:46 millert
13649:
13650: * parse.c: fix comment
13651:
13652: 1996-08-09 18:07 millert
13653:
13654: * parse.c, parse.yacc: added support for new `sudo -l' stuff
13655:
13656: 1996-08-09 18:06 millert
13657:
13658: * sudo.c: now uses list_matches()
13659:
13660: 1996-08-09 18:06 millert
13661:
13662: * sudo.h: added struct sudo_match
13663:
13664: 1996-08-09 17:37 millert
13665:
13666: * configure.in: now more -lgnumalloc
13667:
13668: 1996-08-01 13:12 millert
13669:
13670: * install-sh: added more paths for chown and whoami
13671:
13672: 1996-07-31 10:41 millert
13673:
13674: * check.c: typo
13675:
13676: 1996-07-30 13:45 millert
13677:
13678: * aclocal.m4: fixed DUNIX check for shadow pw
13679:
13680: 1996-07-30 13:41 millert
13681:
13682: * tgetpass.c: now only turn off echo if it is already on. this
13683: fixes a race when you use sudo in a pipelin
13684:
13685: 1996-07-30 12:53 millert
13686:
13687: * INSTALL: updated
13688:
13689: 1996-07-29 22:29 millert
13690:
13691: * configure.in: changed "test -z $foo && do_this" to if; then
13692: construct
13693:
13694: 1996-07-28 22:47 millert
13695:
13696: * configure.in: added missing defines of SHADOW_TYPE
13697:
13698: 1996-07-26 14:10 millert
13699:
13700: * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13701: they are only in dunix 4.x
13702:
13703: 1996-07-26 14:09 millert
13704:
13705: * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13706:
13707: 1996-07-26 13:23 millert
13708:
13709: * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13710: that didn't match. Now we can have runas stuff on more than one
13711: line.
13712:
13713: 1996-07-25 23:45 millert
13714:
13715: * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13716: defined to something
13717:
13718: 1996-07-25 23:45 millert
13719:
13720: * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
13721:
13722: 1996-07-25 23:44 millert
13723:
13724: * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
13725: instead of HAVE_C2_SECURITY
13726:
13727: 1996-07-25 23:44 millert
13728:
13729: * check.c: SHADOW_TYPE is always defined so just against its value
13730:
13731: 1996-07-25 23:44 millert
13732:
13733: * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
13734:
13735: 1996-07-25 18:47 millert
13736:
13737: * sudoers.pod: * -> ?* in one example added another instance of
13738: (runas) and one of NOPASSWD:
13739:
13740: 1996-07-24 13:02 millert
13741:
13742: * configure.in: added back check for config.cache from other host
13743: type
13744:
13745: 1996-07-24 12:49 millert
13746:
13747: * parse.lex: removed an instance of \"
13748:
13749: 1996-07-24 12:49 millert
13750:
13751: * sample.sudoers: added an example
13752:
13753: 1996-07-24 12:44 millert
13754:
13755: * sudoers.pod: updated wrt new wildcard matching
13756:
13757: 1996-07-24 10:28 millert
13758:
13759: * configure.in: new check for shadow passwords if we don't know
13760: anything
13761:
13762: 1996-07-24 10:28 millert
13763:
13764: * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
13765:
13766: 1996-07-24 02:19 millert
13767:
13768: * configure.in: added back check for -lsocket (oops)
13769:
13770: 1996-07-24 02:16 millert
13771:
13772: * configure.in: better (working) check for shadow passwd type if we
13773: know to use C2.
13774:
13775: 1996-07-24 01:59 millert
13776:
13777: * configure.in: now uses AC_CANONICAL_HOST to figure out os type
13778:
13779: 1996-07-24 01:59 millert
13780:
13781: * Makefile.in: added config.{guess,sub}
13782:
13783: 1996-07-24 01:58 millert
13784:
13785: * aclocal.m4: removed unused stuff to figure out os type
13786:
13787: 1996-07-23 22:58 millert
13788:
13789: * config.sub: added openbsd
13790:
13791: 1996-07-23 22:54 millert
13792:
13793: * config.sub: Initial revision
13794:
13795: 1996-07-23 22:40 millert
13796:
13797: * config.guess: Initial revision
13798:
13799: 1996-07-23 21:18 millert
13800:
13801: * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
13802: it can only be a pathname. need to check against sudoers_args
13803: even if user_args is nil
13804:
13805: 1996-07-23 21:18 millert
13806:
13807: * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
13808: can only be a pathname need to check against sudoers_args even if
13809: user_args is nil
13810:
13811: 1996-07-23 18:52 millert
13812:
13813: * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
13814:
13815: 1996-07-23 01:18 millert
13816:
13817: * testsudoers.c: now takes command line args and uses cmnd_args
13818:
13819: 1996-07-23 01:10 millert
13820:
13821: * parse.lex: fill_args was adding an extra leading space
13822:
13823: 1996-07-22 15:50 millert
13824:
13825: * visudo.c: fixed dummy command_matches()
13826:
13827: 1996-07-22 15:50 millert
13828:
13829: * parse.yacc: fixed prototype
13830:
13831: 1996-07-22 15:31 millert
13832:
13833: * sudo.h: added cmnd_args
13834:
13835: 1996-07-22 15:31 millert
13836:
13837: * parse.yacc: now uses flat args string
13838:
13839: 1996-07-22 15:30 millert
13840:
13841: * parse.c, parse.lex: now uses flat arg string
13842:
13843: 1996-07-22 15:29 millert
13844:
13845: * visudo.c: added cmnd_args def
13846:
13847: 1996-07-22 14:30 millert
13848:
13849: * sudo.c: now sets cmnd_args global
13850:
13851: 1996-07-22 14:30 millert
13852:
13853: * logging.c: cmnd_args is now exported from sudo.[ch]
13854:
13855: 1996-07-21 18:41 millert
13856:
13857: * parse.yacc: can't rely on cmnd_matches as much as I thought --
13858: added some $$ stuff back in to prevent namespace pollution
13859: problems.
13860:
13861: 1996-07-21 18:01 millert
13862:
13863: * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
13864: consistent).
13865:
13866: 1996-07-20 00:45 millert
13867:
13868: * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
13869: starts a 'runas' if in the initial state to avoid collision with
13870: command args
13871:
13872: 1996-07-20 00:23 millert
13873:
13874: * configure.in: added checks for specific shadow passwd schemes
13875:
13876: 1996-07-20 00:18 millert
13877:
13878: * aclocal.m4: added routines to check for specific shadow passwd
13879: types
13880:
13881: 1996-07-18 18:27 millert
13882:
13883: * configure.in: added support for ncr boxen
13884:
13885: 1996-07-18 18:26 millert
13886:
13887: * aclocal.m4: added support for detecting ncr boxen
13888:
13889: 1996-07-16 14:57 millert
13890:
13891: * configure.in: added sinix support
13892:
13893: 1996-07-13 22:29 millert
13894:
13895: * TROUBLESHOOTING: added info about "config.cache from other other"
13896: error.
13897:
13898: 1996-07-13 22:22 millert
13899:
13900: * aclocal.m4: now makes sure you don't have a config.cache file
13901: from another OS
13902:
13903: 1996-07-13 21:36 millert
13904:
13905: * configure.in: now sets $LIBS when needed to configure links with
13906: libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
13907: check for bigcrypt(3) if SPW_SECUREWARE
13908:
13909: 1996-07-13 21:30 millert
13910:
13911: * getspwuid.c: fixed typo
13912:
13913: 1996-07-13 21:05 millert
13914:
13915: * tgetpass.c: now include stuff for SPW_SECUREWARE to get
13916: AUTH_MAX_PASSWD_LENGTH
13917:
13918: 1996-07-13 21:05 millert
13919:
13920: * getspwuid.c: no more SPW_HPUX10
13921:
13922: 1996-07-13 21:04 millert
13923:
13924: * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
13925:
13926: 1996-07-13 21:04 millert
13927:
13928: * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
13929:
13930: 1996-07-13 21:04 millert
13931:
13932: * check.c: SPW_SECUREWARE now uses bigcrypt
13933:
13934: 1996-07-13 18:24 millert
13935:
13936: * sample.sudoers: fixed 2 syntax errors
13937:
13938: 1996-07-13 18:24 millert
13939:
13940: * sudoers: root may now run ALL as ALL
13941:
13942: 1996-07-11 20:59 millert
13943:
13944: * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
13945:
13946: 1996-07-08 16:08 millert
13947:
13948: * check.c, configure.in: updated AFS support
13949:
13950: 1996-07-08 16:07 millert
13951:
13952: * TROUBLESHOOTING: added entry about /usr/ucb/cc
13953:
13954: 1996-07-08 16:06 millert
13955:
13956: * INSTALL: prep no longer holds gcc binaries
13957:
13958: 1996-07-08 15:48 millert
13959:
13960: * INSTALL: updated AFS note
13961:
13962: 1996-07-08 15:43 millert
13963:
13964: * Makefile.in: added @AFS_LIBS@
13965:
13966: 1996-07-08 15:33 millert
13967:
13968: * compat.h: AFS allows long passwords
13969:
13970: 1996-07-08 14:16 millert
13971:
13972: * testsudoers.c: fixed -u user support
13973:
13974: 1996-07-08 14:16 millert
13975:
13976: * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
13977:
13978: 1996-07-08 13:30 millert
13979:
13980: * parse.yacc: fixed no_passwd vs. runas_matched
13981:
13982: 1996-07-08 10:30 millert
13983:
13984: * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
13985: longer an issue
13986:
13987: 1996-07-08 10:30 millert
13988:
13989: * INSTALL: added --with-libraries > --with-libpath --with-incpath
13990:
13991: 1996-07-08 10:21 millert
13992:
13993: * parse.yacc: was setting runas_matches to -1 in wrong place
13994:
13995: 1996-07-08 09:58 millert
13996:
13997: * check.c: removed usersec.h which is not present in new AFS
13998: versions
13999:
14000: 1996-07-08 09:55 millert
14001:
14002: * tgetpass.c: now deals with timeout <= 0
14003:
14004: 1996-07-08 09:51 millert
14005:
14006: * OPTIONS: updated
14007:
14008: 1996-07-08 00:04 millert
14009:
14010: * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14011:
14012: 1996-07-07 22:30 millert
14013:
14014: * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14015: for root readable/writable filesystems
14016:
14017: 1996-07-07 20:49 millert
14018:
14019: * Makefile.in: now gives INSTALL -c flag
14020:
14021: 1996-07-07 20:34 millert
14022:
14023: * parse.yacc: slightly simpler initialization of no_passwd and
14024: runas_matches
14025:
14026: 1996-07-07 20:33 millert
14027:
14028: * testsudoers.c: added -u username support
14029:
14030: 1996-07-07 20:32 millert
14031:
14032: * configure.in: improved --with-libraries support
14033:
14034: 1996-07-07 16:27 millert
14035:
14036: * configure.in: added --with-incpath, --with-libpath,
14037: --with-libraries
14038:
14039: 1996-07-07 16:01 millert
14040:
14041: * parse.yacc: now initializes some fields that weren't getting set
14042: to -1 pretty gross -- need a rewrite.
14043:
14044: 1996-06-25 23:19 millert
14045:
14046: * alloca.c: removed emacs'isms
14047:
14048: 1996-06-25 22:29 millert
14049:
14050: * configure.in: no longer add -lPW to *_LIBS since we include
14051: alloca.c
14052:
14053: 1996-06-25 22:29 millert
14054:
14055: * config.h.in: added HAVE_ALLOCA_H
14056:
14057: 1996-06-25 22:28 millert
14058:
14059: * Makefile.in: added alloca.c
14060:
14061: 1996-06-25 22:18 millert
14062:
14063: * alloca.c: Initial revision
14064:
14065: 1996-06-25 21:58 millert
14066:
14067: * configure.in: ++version
14068:
14069: 1996-06-25 19:32 millert
14070:
14071: * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14072: nobody is not always set to a valid uid.
14073:
14074: 1996-06-25 19:31 millert
14075:
14076: * OPTIONS: fixed entry for SUDO_MODE
14077:
14078: 1996-06-25 18:02 millert
14079:
14080: * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14081: *and* gid were being set to -2. Now beat NFS to the punch and
14082: set uid to "nobody" ourselves, preserving group 0 to read
14083: sudoers.
14084:
14085: 1996-06-25 18:02 millert
14086:
14087: * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14088:
14089: 1996-06-25 18:00 millert
14090:
14091: * logging.c: fixed a typo
14092:
14093: 1996-06-25 18:00 millert
14094:
14095: * configure.in: no longer need AC_PROG_INSTALL
14096:
14097: 1996-06-25 17:59 millert
14098:
14099: * Makefile.in: always use install-sh to avoid install(1)'s that use
14100: get{pw,gr}nam
14101:
14102: 1996-06-25 16:07 millert
14103:
14104: * INSTALL: make clean -> make distclean
14105:
14106: 1996-06-20 01:17 millert
14107:
14108: * parse.yacc: removed some unnecsary if's
14109:
14110: 1996-06-20 01:16 millert
14111:
14112: * Makefile.in, version.h: ++version
14113:
14114: 1996-06-20 01:16 millert
14115:
14116: * parse.c, testsudoers.c: now includes netgroup.h
14117:
14118: 1996-06-20 00:45 millert
14119:
14120: * interfaces.c: removed cats of ioctl to int since they didn't shut
14121: up -Wall
14122:
14123: 1996-06-20 00:43 millert
14124:
14125: * interfaces.c: explicately cast ioctl() to int since it it not
14126: always declared
14127:
14128: 1996-06-20 00:41 millert
14129:
14130: * sudo.h: added declarations for yyparse() and yylex()
14131:
14132: 1996-06-20 00:27 millert
14133:
14134: * parse.yacc: fixed an occurence of '==' -> '='
14135:
14136: 1996-06-20 00:22 millert
14137:
14138: * config.h.in, configure.in: added check for netgroup.h
14139:
14140: 1996-06-20 00:20 millert
14141:
14142: * sudo.c: fixed 2 compiler warnings
14143:
14144: 1996-06-20 00:08 millert
14145:
14146: * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14147: weren't being initialized
14148:
14149: 1996-06-19 13:53 millert
14150:
14151: * sudo.pod: fixed a typo
14152:
14153: 1996-06-17 12:19 millert
14154:
14155: * parse.yacc: fixed a formatting thingie
14156:
14157: 1996-06-17 12:16 millert
14158:
14159: * parse.c, parse.yacc: fixed -u support with multiple user lists on
14160: a line
14161:
14162: 1996-06-17 10:23 millert
14163:
14164: * configure.in: unixware needs -lgen
14165:
14166: 1996-06-17 10:23 millert
14167:
14168: * README: updated ftp location
14169:
14170: 1996-06-17 00:08 millert
14171:
14172: * sudoers.pod: add net_addr/netmask support
14173:
14174: 1996-06-17 00:07 millert
14175:
14176: * sample.sudoers: added net_addr/mask example
14177:
14178: 1996-06-17 00:02 millert
14179:
14180: * parse.lex, parse.c: added support for net_addr/netmask
14181:
14182: 1996-06-15 20:13 millert
14183:
14184: * sudoers.pod: ^ -> !
14185:
14186: 1996-06-15 18:12 millert
14187:
14188: * RUNSON: updated for 1.4.3
14189:
14190: 1996-06-15 18:12 millert
14191:
14192: * CHANGES: udpated for 1.4.3
14193:
14194: 1996-06-15 18:11 millert
14195:
14196: * TROUBLESHOOTING, TODO, BUGS: updated
14197:
14198: 1996-06-15 18:11 millert
14199:
14200: * sample.sudoers: updated with examples of new stuff
14201:
14202: 1996-06-15 18:10 millert
14203:
14204: * INSTALL, README: ++version
14205:
14206: 1996-06-15 18:01 millert
14207:
14208: * sudoers.pod: updated wrt -u and NOPASSWD
14209:
14210: 1996-06-15 17:58 millert
14211:
14212: * sudo.pod: updated wrt -u and CAVEATS
14213:
14214: 1996-06-08 23:15 millert
14215:
14216: * sudo.c: fixed usage()
14217:
14218: 1996-06-08 22:57 millert
14219:
14220: * parse.lex: now use :foo: character classes (makes no diff for
14221: generated lexer)
14222:
14223: 1996-06-07 14:33 millert
14224:
14225: * check.c: fixed LONG_SKEY_PROMPT stuff
14226:
14227: 1996-06-06 15:35 millert
14228:
14229: * visudo.c: fixed a comment
14230:
14231: 1996-06-06 15:03 millert
14232:
14233: * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14234:
14235: 1996-06-06 15:02 millert
14236:
14237: * emul/search.h: fixed decls of lsearch()
14238:
14239: 1996-06-05 22:20 millert
14240:
14241: * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14242:
14243: 1996-06-05 22:20 millert
14244:
14245: * check.c: hpux 10 uses bigcrypt() if C2
14246:
14247: 1996-06-04 19:57 millert
14248:
14249: * parse.c: now always uses fnmatch to match args
14250:
14251: 1996-06-04 19:40 millert
14252:
14253: * tgetpass.c: back to using stdio instead of raw i/o since that
14254: caused some problems
14255:
14256: 1996-05-28 22:14 millert
14257:
14258: * sudo.c: now give usage warning if use -l,-v,-k with args
14259:
14260: 1996-05-28 18:22 millert
14261:
14262: * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14263:
14264: 1996-05-28 12:50 millert
14265:
14266: * sudo.c: now sets sudoers to correct group if mode is 0400
14267:
14268: 1996-05-28 12:02 millert
14269:
14270: * install-sh: updated to version used by inn and bind
14271:
14272: 1996-05-28 00:08 millert
14273:
14274: * configure.in: now uses -lgnumalloc if it exists
14275:
14276: 1996-05-28 00:02 millert
14277:
14278: * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14279: if it exists
14280:
14281: 1996-05-28 00:01 millert
14282:
14283: * sudo.c: rmeoved debugging statements
14284:
14285: 1996-05-28 00:00 millert
14286:
14287: * parse.yacc: added a missing free()
14288:
14289: 1996-05-27 23:58 millert
14290:
14291: * sudo.c: now uses user_gid instead of getegid (which was wrong
14292: anyway) to set SUDO_GID Now sets command line args in
14293: SUDO_COMMAND envariabled (logging.c depends on args being in the
14294: environment)
14295:
14296: 1996-05-27 23:57 millert
14297:
14298: * logging.c: now uses SUDO_COMMAND envariable to get command args
14299: rather than building it up again.
14300:
14301: 1996-05-27 22:42 millert
14302:
14303: * parse.c: now uses user_gid
14304:
14305: 1996-05-27 20:02 millert
14306:
14307: * sudo.c: fixed off by one error in allocation NewArgv
14308:
14309: 1996-05-27 20:01 millert
14310:
14311: * parse.c: in sudoers, 'command ""' now means command with no args
14312:
14313: 1996-05-27 20:01 millert
14314:
14315: * configure.in: added check for fnmatch(3) and fnmatch.h
14316:
14317: 1996-05-27 20:01 millert
14318:
14319: * config.h.in: added HAVE_FNMATCH
14320:
14321: 1996-05-27 20:00 millert
14322:
14323: * Makefile.in: replaced wildcat.* with fnmatch.*
14324:
14325: 1996-05-27 20:00 millert
14326:
14327: * testsudoers.c: now uses fnmatch()
14328:
14329: 1996-05-27 19:38 millert
14330:
14331: * parse.c: now uses fnmatch() instead of wildmat a trailing star
14332: (*) by itself now matches multiple args added support for
14333: wildcards in the pathname in sudoers
14334:
14335: 1996-05-25 19:23 millert
14336:
14337: * fnmatch.c: now includes compat.h and config.h
14338:
14339: 1996-05-25 18:09 millert
14340:
14341: * config.h.in: added HAVE_FNMATCH_H
14342:
14343: 1996-05-25 18:07 millert
14344:
14345: * configure.in: now checks for alloca() (if needed by bison or dce)
14346: and links with -lPW if it contains alloca() and libv and compiler
14347: do not.
14348:
14349: 1996-05-25 18:03 millert
14350:
14351: * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14352:
14353: 1996-04-28 22:38 millert
14354:
14355: * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14356: upgrade
14357:
14358: 1996-04-28 17:44 millert
14359:
14360: * Makefile.in: fixed pod2man usage
14361:
14362: 1996-04-28 17:40 millert
14363:
14364: * configure.in, Makefile.in, version.h: ++version
14365:
14366: 1996-04-28 17:20 millert
14367:
14368: * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14369:
14370: 1996-04-28 17:20 millert
14371:
14372: * sudo.h: removed PERM_FULL_ROOT
14373:
14374: 1996-04-28 17:18 millert
14375:
14376: * sudo.c: runas_user defaults to "root" so no more need to
14377: PERM_RUNAS
14378:
14379: 1996-04-28 17:16 millert
14380:
14381: * parse.c: will now only running commands as root if there was no
14382: runas list (or if root is in the runas list)
14383:
14384: 1996-04-28 17:15 millert
14385:
14386: * logging.c: now logs "USER=%s"
14387:
14388: 1996-04-28 17:12 millert
14389:
14390: * parse.yacc: runas_matches is now set to false if we get a
14391: negative match
14392:
14393: 1996-04-28 15:01 millert
14394:
14395: * parse.lex: make #uid work + some minor cleanup
14396:
14397: 1996-04-27 21:04 millert
14398:
14399: * sample.sudoers: added support for NOPASSWD and "runas" from
14400: garp@opustel.com /
14401:
14402: 1996-04-27 21:03 millert
14403:
14404: * visudo.c: added support for "runas" from garp@opustel.com
14405: replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14406: support for SUDOERS_MODE
14407:
14408: 1996-04-27 21:03 millert
14409:
14410: * testsudoers.c: added support for "runas" from garp@opustel.com
14411:
14412: 1996-04-27 21:02 millert
14413:
14414: * sudo.h: added support for NO_PASSWD and runas from
14415: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14416: SUDOERS_GID and added support fro SUDOERS_MODE
14417:
14418: 1996-04-27 21:00 millert
14419:
14420: * sudo.c: added support for NO_PASSWD and runas from
14421: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14422: SUDOERS_GID and added support fro SUDOERS_MODE
14423:
14424: 1996-04-27 21:00 millert
14425:
14426: * parse.yacc: added support for NO_PASSWD and runas from
14427: garp@opustel.com
14428:
14429: 1996-04-27 20:58 millert
14430:
14431: * parse.c, parse.lex: added support for NO_PASSWD and runas from
14432: garp@opustel.com
14433:
14434: 1996-04-27 20:56 millert
14435:
14436: * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14437:
14438: 1996-04-27 20:40 millert
14439:
14440: * configure.in: added --with-CC only link with -lshadow on linux
14441: (with shadow pw) if libc lacks getspnam()
14442:
14443: 1996-04-27 20:39 millert
14444:
14445: * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14446: do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14447: SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14448:
14449: 1996-04-27 20:26 millert
14450:
14451: * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14452:
14453: 1996-04-27 11:20 millert
14454:
14455: * INSTALL: added --with-CC
14456:
14457: 1996-04-06 16:31 millert
14458:
14459: * parse.lex: added double quote support
14460:
14461: 1996-04-06 16:29 millert
14462:
14463: * sudoers.pod: documented double quoting
14464:
14465: 1996-04-05 16:53 millert
14466:
14467: * mkinstalldirs: Initial revision
14468:
14469: 1996-04-05 16:53 millert
14470:
14471: * check.c: fixed some indentation
14472:
14473: 1996-04-05 16:48 millert
14474:
14475: * Makefile.in: fixed a typo
14476:
14477: 1996-04-04 19:39 millert
14478:
14479: * Makefile.in: added install-dirs .
14480:
14481: 1996-04-04 14:16 millert
14482:
14483: * dce_pwent.c: new version from "Jeff A. Earickson"
14484: <jaearick@colby.edu>
14485:
14486: 1996-04-03 13:40 millert
14487:
14488: * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14489:
14490: 1996-04-03 13:40 millert
14491:
14492: * BUGS: updated
14493:
14494: 1996-04-03 13:36 millert
14495:
14496: * parse.lex: FQHOST now has same constraints as non-FQHOST
14497:
14498: 1996-04-02 19:00 millert
14499:
14500: * INSTALL: added note about OS's w/ shadow passwords turned on by
14501: default
14502:
14503: 1996-04-02 18:58 millert
14504:
14505: * configure.in: fixed a typo
14506:
14507: 1996-04-02 18:48 millert
14508:
14509: * configure.in: added support for --without-THING sanitized shadow
14510: pw situtation by adding support for --without-C2
14511:
14512: 1996-04-02 16:42 millert
14513:
14514: * tgetpass.c: fixed a typo wrt placement of an end paren
14515:
14516: 1996-04-02 14:57 millert
14517:
14518: * check.c: was closing an fd that may not have been opened
14519:
14520: 1996-03-21 19:55 millert
14521:
14522: * sudo.c, OPTIONS, options.h: added NO_PASSWD
14523:
14524: 1996-03-19 19:40 millert
14525:
14526: * configure.in: now always use shadow pw on some arches
14527:
14528: 1996-03-19 17:07 millert
14529:
14530: * configure.in: added pyramid support
14531:
14532: 1996-03-19 17:04 millert
14533:
14534: * configure.in: no longer check for C2 if alternate passwd method
14535: is used no longer check for some libs twice
14536:
14537: 1996-03-19 17:00 millert
14538:
14539: * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14540:
14541: 1996-03-19 17:00 millert
14542:
14543: * parse.lex: added FQHOST rules
14544:
14545: 1996-03-18 20:57 millert
14546:
14547: * tgetpass.c: now define TCSASOFT in necesary
14548:
14549: 1996-03-18 20:31 millert
14550:
14551: * tgetpass.c: now uses read/write instead of stdio string goop to
14552: avoid problems with select(2)
14553:
14554: 1996-03-18 19:37 millert
14555:
14556: * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14557: -DIGNORE_DOT_PATH
14558:
14559: 1996-03-17 16:18 millert
14560:
14561: * INSTALL: added note about no shadow auto-detect if using
14562: alternate auth schemes
14563:
14564: 1996-03-17 15:33 millert
14565:
14566: * configure.in: don't check for C2 if AFS or DCE (unless they said
14567: --with-C2)
14568:
14569: 1996-03-17 15:08 millert
14570:
14571: * testsudoers.c: now groks shost
14572:
14573: 1996-03-17 15:01 millert
14574:
14575: * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14576:
14577: 1996-03-16 14:43 millert
14578:
14579: * find_path.c: checkdot now works correctly
14580:
14581: 1996-03-12 18:01 millert
14582:
14583: * configure.in: can't have DCE and C2 passwords both...
14584:
14585: 1996-03-11 14:05 millert
14586:
14587: * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14588: FQDN
14589:
14590: 1996-03-11 14:04 millert
14591:
14592: * configure.in: now looks for skey in /usr/lib and doesn't require
14593: libskey to be in /usr/local/lib just because skey.h is (for my
14594: netbsd box :-)
14595:
14596: 1996-03-11 02:00 millert
14597:
14598: * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14599: _CONFIG_PATH_
14600:
14601: 1996-03-10 21:01 millert
14602:
14603: * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14604:
14605: 1996-03-10 20:59 millert
14606:
14607: * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14608:
14609: 1996-03-10 20:59 millert
14610:
14611: * OPTIONS: udpated FQDN
14612:
14613: 1996-03-10 20:58 millert
14614:
14615: * config.h.in: added _SUDO_PATH_TIMEDIR
14616:
14617: 1996-03-10 20:58 millert
14618:
14619: * aclocal.m4, configure.in: added SUDO_TIMEDIR
14620:
14621: 1996-03-10 20:58 millert
14622:
14623: * sudo.pod: updated wrt /var/run/sudo
14624:
14625: 1996-03-10 20:16 millert
14626:
14627: * sudo.c, sudo.h: added support for shost if FQDN
14628:
14629: 1996-03-10 20:14 millert
14630:
14631: * parse.yacc, visudo.c: now uses shost if FQDN
14632:
14633: 1996-03-10 20:12 millert
14634:
14635: * check.c: Now use skeylookup() instead off skeychallenge()
14636:
14637: 1996-02-27 20:41 millert
14638:
14639: * logging.c: mail_argv should not contain ALERTMAIL as it includes
14640: "-t"
14641:
14642: 1996-02-22 17:06 millert
14643:
14644: * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14645:
14646: 1996-02-22 16:27 millert
14647:
14648: * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14649:
14650: 1996-02-22 16:27 millert
14651:
14652: * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14653:
14654: 1996-02-05 19:20 millert
14655:
14656: * README, INSTALL: ++version
14657:
14658: 1996-02-05 19:20 millert
14659:
14660: * Makefile.in: ++versoin
14661:
14662: 1996-02-05 19:16 millert
14663:
14664: * Makefile.in: fixed a typo
14665:
14666: 1996-02-05 19:16 millert
14667:
14668: * configure.in: ++version
14669:
14670: 1996-02-05 18:53 millert
14671:
14672: * RUNSON: updated
14673:
14674: 1996-02-05 18:47 millert
14675:
14676: * CHANGES: done for 1.4.1 (I hope)
14677:
14678: 1996-02-05 18:45 millert
14679:
14680: * sudoers.pod: added info on wildcards
14681:
14682: 1996-02-05 18:39 millert
14683:
14684: * sample.sudoers: added wildcard example
14685:
14686: 1996-02-05 17:03 millert
14687:
14688: * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14689:
14690: 1996-02-05 17:03 millert
14691:
14692: * configure.in: addedSUDO_PROG_BSHELL !ll
14693:
14694: 1996-02-05 16:10 millert
14695:
14696: * visudo.pod: fixed up some formatting
14697:
14698: 1996-02-05 16:10 millert
14699:
14700: * sudoers.pod: redid section describing sample sudoers stuff
14701:
14702: 1996-02-05 16:10 millert
14703:
14704: * sudo.pod: fixed some formatting
14705:
14706: 1996-02-04 22:50 millert
14707:
14708: * getspwuid.c: now treats "" as bourne shell
14709:
14710: 1996-02-04 22:49 millert
14711:
14712: * Makefile.in: TESTOBJS nwo includes wildmat.o
14713:
14714: 1996-02-04 22:48 millert
14715:
14716: * testsudoers.c: now works with NewArg[cv]
14717:
14718: 1996-02-04 21:59 millert
14719:
14720: * sudo.c: removed an XXX (fixed it in getspwuid.c)
14721:
14722: 1996-02-04 21:58 millert
14723:
14724: * aclocal.m4: added check for bourne shell
14725:
14726: 1996-02-04 21:58 millert
14727:
14728: * pathnames.h.in: added _PATH_BSHELL
14729:
14730: 1996-02-04 21:58 millert
14731:
14732: * config.h.in: added _SUDO_PATH_BSHELL
14733:
14734: 1996-02-04 16:36 millert
14735:
14736: * visudo.c: unixware vi returns 256 instead of 0
14737:
14738: 1996-02-04 16:24 millert
14739:
14740: * INSTALL: added Linux note
14741:
14742: 1996-02-04 16:13 millert
14743:
14744: * logging.c: fixed up some XXX's. file log format now looks a
14745: little more like real syslog(3) format.
14746:
14747: 1996-02-04 16:13 millert
14748:
14749: * README, TROUBLESHOOTING: updated wrt lex/flex
14750:
14751: 1996-02-04 16:11 millert
14752:
14753: * Makefile.in: commented out rule to build lex.yy.c from parse.lex
14754: since we ship with a pre-flex'd parser
14755:
14756: 1996-02-04 16:09 millert
14757:
14758: * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
14759:
14760: 1996-02-04 02:28 millert
14761:
14762: * logging.c: eliminated some strcat()'s
14763:
14764: 1996-02-04 02:10 millert
14765:
14766: * configure.in: no longer checks for lex/flex (now assumes flex)
14767:
14768: 1996-02-04 02:08 millert
14769:
14770: * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
14771: just kerb_dir_candidate
14772:
14773: 1996-02-02 20:48 millert
14774:
14775: * parse.yacc: now use a 'hook' expression instead of an iffy one
14776: :-)
14777:
14778: 1996-02-02 01:14 millert
14779:
14780: * visudo.c: now works with new sudo arg stuff
14781:
14782: 1996-02-02 01:14 millert
14783:
14784: * parse.yacc: fixed dereferencing deadbeef
14785:
14786: 1996-02-01 23:53 millert
14787:
14788: * sudo.c: changed an occurrence of Argv to NewArgv
14789:
14790: 1996-02-01 23:53 millert
14791:
14792: * parse.lex: took out support for quoted commands since there is no
14793: need...
14794:
14795: 1996-02-01 23:52 millert
14796:
14797: * parse.c: fixed a typo in a for() loop
14798:
14799: 1996-02-01 23:52 millert
14800:
14801: * logging.c: protected against dereferencing rogue pointers
14802:
14803: 1996-02-01 22:34 millert
14804:
14805: * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
14806: needed this also allows us to eliminate some kludges in
14807: parse_args() and eliminate superfluous code.
14808:
14809: 1996-02-01 22:34 millert
14810:
14811: * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
14812:
14813: 1996-02-01 22:32 millert
14814:
14815: * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
14816: cmnd_args (no longer used)
14817:
14818: 1996-02-01 22:31 millert
14819:
14820: * Makefile.in: added wildmat.c to SRCS & SUDOBJS
14821:
14822: 1996-02-01 22:30 millert
14823:
14824: * parse.yacc: COMMAND is now a struct containing the path and args
14825:
14826: 1996-02-01 22:30 millert
14827:
14828: * parse.lex: replaced append() with fill_cmnd() and fill_args.
14829: command args from a sudoers entry are now stored in an arrary for
14830: easy matching.
14831:
14832: 1996-02-01 22:28 millert
14833:
14834: * parse.c: command line args from sudoers file are now in an array
14835: like ones passed in from the command line
14836:
14837: 1996-01-31 20:59 millert
14838:
14839: * parse.c: wildwat stuff now works
14840:
14841: 1996-01-29 00:44 millert
14842:
14843: * version.h: ++version
14844:
14845: 1996-01-29 00:44 millert
14846:
14847: * Makefile.in: ++version added wildmat.*
14848:
14849: 1996-01-28 17:55 millert
14850:
14851: * parse.lex: added support for quoted commands (w/ or w/o args)
14852:
14853: 1996-01-22 01:55 millert
14854:
14855: * sudo.pod, visudo.pod: cleaned up formatting
14856:
14857: 1996-01-21 20:53 millert
14858:
14859: * sudo.pod, visudo.pod: Initial revision
14860:
14861: 1996-01-21 02:07 millert
14862:
14863: * sudoers.pod: looks reasonable, could be mroe readable
14864:
14865: 1996-01-20 23:47 millert
14866:
14867: * sudoers.pod: Initial revision
14868:
14869: 1996-01-16 14:38 millert
14870:
14871: * RUNSON: updated
14872:
14873: 1996-01-16 14:37 millert
14874:
14875: * OPTIONS: updated NO_ROOT_SUDO entry
14876:
14877: 1996-01-15 11:37 millert
14878:
14879: * RUNSON: [no log message]
14880:
14881: 1996-01-15 11:34 millert
14882:
14883: * sudo.c: fixed SECURE_PATH
14884:
14885: 1996-01-14 20:55 millert
14886:
14887: * RUNSON: udpa`ted for 1.4
14888:
14889: 1996-01-14 20:52 millert
14890:
14891: * configure.in: AIX aixcrypt.exp now uses $(srcdir)
14892:
14893: 1996-01-14 20:32 millert
14894:
14895: * TROUBLESHOOTING: added entry for anal ansi compilers
14896:
14897: 1996-01-14 16:13 millert
14898:
14899: * INSTALL: added info on libcrypt_i for SCO
14900:
14901: 1996-01-14 16:05 millert
14902:
14903: * TODO: [no log message]
14904:
14905: 1996-01-14 15:39 millert
14906:
14907: * sample.sudoers: added comments
14908:
14909: 1996-01-14 15:25 millert
14910:
14911: * TODO: 1.4 release
14912:
14913: 1996-01-14 15:22 millert
14914:
14915: * README, config.h.in, configure.in, CHANGES: ++version
14916:
14917: 1996-01-14 15:21 millert
14918:
14919: * BUGS: ++version and fixed ISC
14920:
14921: 1996-01-14 15:19 millert
14922:
14923: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
14924: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
14925: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
14926: logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
14927: testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
14928: ++version
14929:
14930: 1996-01-14 15:16 millert
14931:
14932: * interfaces.c: added STUB_LOAD_INTERFACES ++version
14933:
14934: 1996-01-14 15:14 millert
14935:
14936: * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
14937: emul/utime.h: ++version
14938:
14939: 1996-01-14 15:13 millert
14940:
14941: * PORTING: added info about fd_set in tgetpass added info on
14942: interfaces.c
14943:
14944: 1996-01-11 13:22 millert
14945:
14946: * dce_pwent.c: added sudo header
14947:
14948: 1996-01-11 13:04 millert
14949:
14950: * tgetpass.c: fixed a typo
14951:
14952: 1996-01-11 13:01 millert
14953:
14954: * Makefile.in: tgetpass.o is now only linked in with sudo (not
14955: visudo)
14956:
14957: 1996-01-09 12:56 millert
14958:
14959: * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
14960: configure.in: ++version
14961:
14962: 1996-01-09 12:54 millert
14963:
14964: * emul/utime.h: added copyright notice
14965:
14966: 1996-01-09 12:52 millert
14967:
14968: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
14969: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
14970: interfaces.c, logging.c, options.h, parse.c, parse.lex,
14971: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
14972: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
14973: visudo.c: ++version
14974:
14975: 1996-01-09 12:46 millert
14976:
14977: * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
14978: svr4'ish boxen
14979:
14980: 1996-01-09 12:42 millert
14981:
14982: * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
14983:
14984: 1996-01-09 12:41 millert
14985:
14986: * config.h.in: added check for sys/bsdtypes.h
14987:
14988: 1996-01-07 16:00 millert
14989:
14990: * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
14991:
14992: 1996-01-07 15:55 millert
14993:
14994: * TROUBLESHOOTING: added 2 entries
14995:
14996: 1996-01-07 15:55 millert
14997:
14998: * Makefile.in: added FAQ
14999:
15000: 1996-01-07 14:26 millert
15001:
15002: * TROUBLESHOOTING: added section on syslog
15003:
15004: 1996-01-07 14:25 millert
15005:
15006: * configure.in: added AC_ISC_POSIX for better ISC support
15007:
15008: 1996-01-07 14:25 millert
15009:
15010: * config.h.in: fixed typo
15011:
15012: 1996-01-07 14:25 millert
15013:
15014: * config.h.in: added define for _POSIX_SOURCE
15015:
15016: 1996-01-04 00:41 millert
15017:
15018: * configure.in: fixed check for lsearch()
15019:
15020: 1995-12-21 21:53 millert
15021:
15022: * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15023: (should not happen)
15024:
15025: 1995-12-20 17:02 millert
15026:
15027: * configure.in: now only define HAVE_LSEARCH if there is a
15028: corresponding search.h
15029:
15030: 1995-12-20 15:52 millert
15031:
15032: * interfaces.c: works on ISC again
15033:
15034: 1995-12-18 17:36 millert
15035:
15036: * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15037: libcompat
15038:
15039: 1995-12-18 17:32 millert
15040:
15041: * lsearch.c: char * -> const char *
15042:
15043: 1995-12-18 17:29 millert
15044:
15045: * configure.in: now looks in -lcompat for lsearch()
15046:
15047: 1995-12-18 17:23 millert
15048:
15049: * Makefile.in: remove sudo.core visudo.core for clan target
15050:
15051: 1995-12-17 22:53 millert
15052:
15053: * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15054:
15055: 1995-12-17 22:36 millert
15056:
15057: * Makefile.in: fixed another occurence of sudo_getpwuid.*
15058:
15059: 1995-12-17 22:30 millert
15060:
15061: * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15062:
15063: 1995-12-17 22:22 millert
15064:
15065: * configure.in: moved the "echo"
15066:
15067: 1995-12-17 22:09 millert
15068:
15069: * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15070: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15071: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15072: ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15073: parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15074: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15075: tgetpass.c, utime.c, version.h, visudo.c: ++version
15076:
15077: 1995-12-17 22:04 millert
15078:
15079: * testsudoers.c: added group support
15080:
15081: 1995-12-17 22:00 millert
15082:
15083: * sample.sudoers: added group entry
15084:
15085: 1995-12-17 21:59 millert
15086:
15087: * sudoers.man: documented group support
15088:
15089: 1995-12-17 21:50 millert
15090:
15091: * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15092:
15093: 1995-12-15 17:45 millert
15094:
15095: * check.c: tkfile was too short and overflowed the kerberos realm
15096:
15097: 1995-12-11 17:09 millert
15098:
15099: * sudo.c: now copy command args directly from Argv
15100:
15101: 1995-12-11 15:55 millert
15102:
15103: * sudo.c: replaced code to copy cmnd_args so that is does not use
15104: realloc since most realloc()'s really stink
15105:
15106: 1995-12-08 14:11 millert
15107:
15108: * configure.in: syslog() fixed in hpux 10.01
15109:
15110: 1995-12-06 17:45 millert
15111:
15112: * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15113: if appropriate)
15114:
15115: 1995-12-06 17:30 millert
15116:
15117: * configure.in: better error if cannot find skey incs or libs
15118:
15119: 1995-12-06 17:26 millert
15120:
15121: * aclocal.m4: now use a temp file for determining max len of uid_t
15122: in string form. the old hacky way broke on netbsd
15123:
15124: 1995-12-05 19:02 millert
15125:
15126: * sudo.c: added set of parens and a space
15127:
15128: 1995-12-05 18:58 millert
15129:
15130: * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15131:
15132: 1995-12-05 18:58 millert
15133:
15134: * check.c: modified a comment
15135:
15136: 1995-12-05 18:57 millert
15137:
15138: * Makefile.in: fixed up testsudoers target
15139:
15140: 1995-12-05 18:56 millert
15141:
15142: * configure.in: DCE changes from Jeff Earickson
15143: <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15144: SUDO_FDFLAGS and VISUDO_LDFLAGS
15145:
15146: 1995-12-05 18:17 millert
15147:
15148: * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15149: SUDO_LDFLAGS, VISUDO_LDFLAGS
15150:
15151: 1995-11-27 23:32 millert
15152:
15153: * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15154:
15155: 1995-11-27 23:17 millert
15156:
15157: * check.c: LONG_SKEY_PROMPT is less of a klusge /
15158:
15159: 1995-11-27 23:17 millert
15160:
15161: * configure.in: fixed typos w/ dce stuff
15162:
15163: 1995-11-27 23:14 millert
15164:
15165: * Makefile.in: added dce_pwent.c
15166:
15167: 1995-11-26 13:48 millert
15168:
15169: * INSTALL: amended section on combining authentication mechanisms
15170:
15171: 1995-11-26 13:48 millert
15172:
15173: * PORTING: minor updates for 1.3.6
15174:
15175: 1995-11-26 13:47 millert
15176:
15177: * TROUBLESHOOTING: added 2 more entries
15178:
15179: 1995-11-26 13:39 millert
15180:
15181: * BUGS: updated for 1.3.6
15182:
15183: 1995-11-26 13:39 millert
15184:
15185: * README: overhauled
15186:
15187: 1995-11-25 21:23 millert
15188:
15189: * INSTALL: rewrote for sudo 1.3.6
15190:
15191: 1995-11-25 21:23 millert
15192:
15193: * TROUBLESHOOTING: added 3 entries
15194:
15195: 1995-11-25 13:53 millert
15196:
15197: * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15198: since many includes don't prototype it. gag me.
15199:
15200: 1995-11-25 13:23 millert
15201:
15202: * sudo.h: removed prototype for sudo_getpwuid() since convex C
15203: compiler choked on it.
15204:
15205: 1995-11-25 13:23 millert
15206:
15207: * sudo.c: added prototype for sudo_getpwuid()
15208:
15209: 1995-11-25 13:23 millert
15210:
15211: * lsearch.c: now compiles on strict ANSI compilers
15212:
15213: 1995-11-24 23:56 millert
15214:
15215: * check.c: added LONG_SKEY_PROMPT support
15216:
15217: 1995-11-24 23:55 millert
15218:
15219: * Makefile.in: added extra $'s for make to eat up, yum.
15220:
15221: 1995-11-24 23:38 millert
15222:
15223: * OPTIONS, options.h: added LONG_SKEY_PROMPT
15224:
15225: 1995-11-24 18:48 millert
15226:
15227: * check.c: s/key support now works with normal s/key as well as
15228: logdaemon
15229:
15230: 1995-11-24 18:46 millert
15231:
15232: * options.h, OPTIONS: added SKEY_ONLY
15233:
15234: 1995-11-24 18:46 millert
15235:
15236: * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15237:
15238: 1995-11-24 00:42 millert
15239:
15240: * INSTALL: added DCE note added more AIX notes
15241:
15242: 1995-11-24 00:39 millert
15243:
15244: * sudo.c: now include pthread.h for DCE support
15245:
15246: 1995-11-23 22:22 millert
15247:
15248: * check.c: dce_pwent() is ok after all .,
15249:
15250: 1995-11-23 22:21 millert
15251:
15252: * logging.c: now uses SYSLOG() macro that equates to either
15253: syslog() or syslog_wrapper
15254:
15255: 1995-11-23 21:44 millert
15256:
15257: * dce_pwent.c: minor formatting changes. renamed check() to
15258: somthing less generic
15259:
15260: 1995-11-23 21:27 millert
15261:
15262: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15263: visudo.c: now uses user_pw_ent and simple macros to get at the
15264: contents
15265:
15266: 1995-11-22 20:35 millert
15267:
15268: * check.c: simpler dec unix C2 support
15269:
15270: 1995-11-22 20:35 millert
15271:
15272: * getspwuid.c: now sets crypt_type for DEC unix C2
15273:
15274: 1995-11-21 18:00 millert
15275:
15276: * configure.in: added csops paths for skey
15277:
15278: 1995-11-21 16:27 millert
15279:
15280: * getspwuid.c: now includes string.h for strdup() prototype
15281:
15282: 1995-11-21 01:47 millert
15283:
15284: * getspwuid.c: fixed a few typos
15285:
15286: 1995-11-20 22:59 millert
15287:
15288: * check.c: now includes skey.h
15289:
15290: 1995-11-20 22:10 millert
15291:
15292: * getspwuid.c: fixed up comments
15293:
15294: 1995-11-20 22:04 millert
15295:
15296: * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15297:
15298: 1995-11-20 22:01 millert
15299:
15300: * sudo.c: now uses sudo_pw_ent
15301:
15302: 1995-11-20 21:50 millert
15303:
15304: * testsudoers.c: now uses sudo_pw_ent
15305:
15306: 1995-11-20 21:40 millert
15307:
15308: * visudo.c: now sets sudo_pw_ent
15309:
15310: 1995-11-20 21:28 millert
15311:
15312: * getspwuid.c: Initial revision
15313:
15314: 1995-11-20 21:28 millert
15315:
15316: * tgetpass.c: moved dce stuff into compat.h
15317:
15318: 1995-11-20 21:27 millert
15319:
15320: * sudo.h, logging.c: now uses sudo_pw_ent
15321:
15322: 1995-11-20 21:27 millert
15323:
15324: * Makefile.in: added sudo_getpwuid.c
15325:
15326: 1995-11-20 21:25 millert
15327:
15328: * compat.h: added dce support
15329:
15330: 1995-11-20 21:13 millert
15331:
15332: * parse.yacc: now uses sudo_pw_ent
15333:
15334: 1995-11-20 14:40 millert
15335:
15336: * check.c: fixed exempt_group stuff for OS's that don't put base
15337: gid in group vector
15338:
15339: 1995-11-20 01:39 millert
15340:
15341: * check.c: S/Key support now works with sunos4 shadow passwords
15342:
15343: 1995-11-19 22:31 millert
15344:
15345: * Makefile.in: fixed clean rule
15346:
15347: 1995-11-19 22:31 millert
15348:
15349: * config.h.in, configure.in: added DCE support
15350:
15351: 1995-11-19 22:30 millert
15352:
15353: * tgetpass.c: DCE & KERB support
15354:
15355: 1995-11-19 22:30 millert
15356:
15357: * check.c: first stab at dce support
15358:
15359: 1995-11-19 22:24 millert
15360:
15361: * dce_pwent.c: now smells like sudo
15362:
15363: 1995-11-19 22:11 millert
15364:
15365: * dce_pwent.c: Initial revision
15366:
15367: 1995-11-19 21:36 millert
15368:
15369: * check.c: skey'd sudo now works w/ normal password as well
15370:
15371: 1995-11-19 18:37 millert
15372:
15373: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15374: find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15375: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15376: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15377: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15378: tgetpass.c, utime.c, version.h, visudo.c: updated version number
15379:
15380: 1995-11-19 18:32 millert
15381:
15382: * README: updated to reflect version change
15383:
15384: 1995-11-19 18:27 millert
15385:
15386: * configure.in: --with options now line up ++version
15387:
15388: 1995-11-19 18:26 millert
15389:
15390: * sudo.h: removed unecesary S/Key stuff
15391:
15392: 1995-11-19 18:25 millert
15393:
15394: * configure.in: fixed S/Key support
15395:
15396: 1995-11-19 18:24 millert
15397:
15398: * Makefile.in: -I stuff now goes in CPPFLAGS
15399:
15400: 1995-11-19 18:23 millert
15401:
15402: * check.c: fixed SKey support
15403:
15404: 1995-11-19 15:23 millert
15405:
15406: * README: updated version
15407:
15408: 1995-11-19 13:59 millert
15409:
15410: * OPTIONS: fixed description of EXEMPTGROUP
15411:
15412: 1995-11-19 10:47 millert
15413:
15414: * sudo.c: more people use _RLD_ than just alphas...
15415:
15416: 1995-11-18 21:35 millert
15417:
15418: * Makefile.in: replaced $man_prefix with $mandir
15419:
15420: 1995-11-18 21:30 millert
15421:
15422: * configure.in: fixed a typo
15423:
15424: 1995-11-18 21:28 millert
15425:
15426: * Makefile.in: now use more GNU'ish dir names
15427:
15428: 1995-11-18 21:27 millert
15429:
15430: * configure.in: now set *dir correctly (can override from command
15431: line)
15432:
15433: 1995-11-18 19:17 millert
15434:
15435: * sudo.c: now deal with situations where we getwd() fails
15436:
15437: 1995-11-17 00:37 millert
15438:
15439: * Makefile.in: added etc_dir, bin_dir, sbin_dir
15440:
15441: 1995-11-17 00:37 millert
15442:
15443: * configure.in: added sbin_dir
15444:
15445: 1995-11-16 21:28 millert
15446:
15447: * Makefile.in: now ship a flex-generated lex.yy.c
15448:
15449: 1995-11-16 21:09 millert
15450:
15451: * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15452: SUDOERS_OWNER
15453:
15454: 1995-11-16 21:06 millert
15455:
15456: * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15457: overridden via Makefile
15458:
15459: 1995-11-16 21:05 millert
15460:
15461: * options.h: no more error for redefining SUDOERS_OWNER
15462:
15463: 1995-11-16 21:05 millert
15464:
15465: * OPTIONS: expanded SUDOERS_OWNER section
15466:
15467: 1995-11-16 03:05 millert
15468:
15469: * visudo.c: now warn if chown(2) failed
15470:
15471: 1995-11-16 02:55 millert
15472:
15473: * logging.c: better default warning for NO_SUDOERS_FILE
15474:
15475: 1995-11-16 02:54 millert
15476:
15477: * sudo.c: added missing set_perms() no more cryptic message if the
15478: sudoers file is zero length, now just give a parse error
15479:
15480: 1995-11-16 02:42 millert
15481:
15482: * logging.c: better diagnostics if NO_SUDOERS_FILE
15483:
15484: 1995-11-16 02:41 millert
15485:
15486: * sudo.c: check_sudoers() now catches sudoers files that are not
15487: readable (but are stat'able).
15488:
15489: 1995-11-13 01:12 millert
15490:
15491: * configure.in: now add -D__STDC__ for convex cc (not gcc)
15492:
15493: 1995-11-13 00:52 millert
15494:
15495: * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15496: exec_prefix
15497:
15498: 1995-11-13 00:52 millert
15499:
15500: * Makefile.in: now uses exec_prefix & prefix from configure
15501:
15502: 1995-11-13 00:16 millert
15503:
15504: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15505: parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15506: tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15507: so shadow build trees can have a custom copy of options.h
15508:
15509: 1995-11-13 00:15 millert
15510:
15511: * check.c: user_is_exempt() is no longer a hack, it now uses
15512: getgrnam()
15513:
15514: 1995-11-12 23:56 millert
15515:
15516: * options.h: EXEMPTGROUP is now "sudo"
15517:
15518: 1995-11-12 22:25 millert
15519:
15520: * configure.in: MAN_POSTINSTALL now contains a leading space
15521:
15522: 1995-11-12 22:25 millert
15523:
15524: * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15525: now removes testsudoers in clean:
15526:
15527: 1995-11-12 22:24 millert
15528:
15529: * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15530:
15531: 1995-10-30 15:51 millert
15532:
15533: * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15534: don't get spoofed into using a bogus server
15535:
15536: 1995-09-29 17:50 millert
15537:
15538: * parse.yacc: now explicately initialize match[] tp be FALSE
15539:
15540: 1995-09-23 16:48 millert
15541:
15542: * sudo.c: removed unused variable now passes -Wall
15543:
15544: 1995-09-23 16:48 millert
15545:
15546: * parse.yacc: yyerror and dumpaliases are now void's now passes
15547: -Wall
15548:
15549: 1995-09-23 16:48 millert
15550:
15551: * parse.lex: added prototype for yyerror
15552:
15553: 1995-09-23 16:47 millert
15554:
15555: * interfaces.c: rmeoved unused cruft now passes -Wall
15556:
15557: 1995-09-23 16:47 millert
15558:
15559: * check.c, logging.c, parse.c: now passes -Wall
15560:
15561: 1995-09-23 16:46 millert
15562:
15563: * Makefile.in: fixed headers that moved to emul dir
15564:
15565: 1995-09-23 12:05 millert
15566:
15567: * logging.c: fixed deref of nil pointer if no args
15568:
15569: 1995-09-15 19:18 millert
15570:
15571: * OPTIONS: added a caveat to FQDN section
15572:
15573: 1995-09-13 19:48 millert
15574:
15575: * Makefile.in: more $srcdir support for install targets
15576:
15577: 1995-09-13 17:17 millert
15578:
15579: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15580: putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15581: visudo.c: don't include malloc.h if we include stdlib.h
15582:
15583: 1995-09-12 21:44 millert
15584:
15585: * parse.yacc: local search.h now lives in emul
15586:
15587: 1995-09-12 21:41 millert
15588:
15589: * lsearch.c: local search.h now lives in emul
15590:
15591: 1995-09-12 21:41 millert
15592:
15593: * check.c, utime.c: local utime.h now lives in emul dir
15594:
15595: 1995-09-12 21:38 millert
15596:
15597: * Makefile.in: added support for building in other than the
15598: sourcedir
15599:
15600: 1995-09-10 14:01 millert
15601:
15602: * OPTIONS: annotated CSOPS_INSULTS option
15603:
15604: 1995-09-10 13:56 millert
15605:
15606: * TROUBLESHOOTING: updated shadow passwords blurb
15607:
15608: 1995-09-09 21:00 millert
15609:
15610: * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15611: shell and passes along foo as the arguments
15612:
15613: 1995-09-09 18:52 millert
15614:
15615: * parse.lex: collapsed pathname and dir sections into one -- its
15616: now less expensive
15617:
15618: 1995-09-09 18:34 millert
15619:
15620: * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15621: append() and fill() now take args to make the above work
15622:
15623: 1995-09-08 20:51 millert
15624:
15625: * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15626: a tty on fd 1 to erroneously have "none" as their tty
15627:
15628: 1995-09-04 15:35 millert
15629:
15630: * check.c: timestampfile is now a global static removed decl of
15631: timestampfile in remove_timestamp since we can just use the
15632: global one
15633:
15634: 1995-09-04 15:28 millert
15635:
15636: * check.c: created touch() to update timestamps added
15637: USE_TTY_TICKETS support (bit of a kludge)
15638:
15639: 1995-09-04 15:28 millert
15640:
15641: * compat.h: added _S_IFDIR and S_ISDIR
15642:
15643: 1995-09-04 15:22 millert
15644:
15645: * OPTIONS, options.h: added USE_TTY_TICKETS
15646:
15647: 1995-09-04 00:38 millert
15648:
15649: * parse.yacc: removed const from casts for lsearch() & lfind() to
15650: placate irix 4.x C compiler
15651:
15652: 1995-09-03 14:12 millert
15653:
15654: * sudo.c: now only strip '/dev/' off of a tty if it starts with
15655: '/dev/'
15656:
15657: 1995-09-03 14:12 millert
15658:
15659: * pathnames.h.in: added _PATH_DEV
15660:
15661: 1995-09-03 14:11 millert
15662:
15663: * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15664: tcgetattr only if have termios.h
15665:
15666: 1995-09-03 14:09 millert
15667:
15668: * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15669: not int for c_?flag
15670:
15671: 1995-09-03 13:19 millert
15672:
15673: * parse.lex, parse.yacc: fixed a spelling error
15674:
15675: 1995-09-03 13:17 millert
15676:
15677: * Makefile.in: fixed typo
15678:
15679: 1995-09-02 12:55 millert
15680:
15681: * Makefile.in: fixed a comment
15682:
15683: 1995-09-02 12:54 millert
15684:
15685: * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15686: now that we dynamically allocate strings they need to be free()'d
15687:
15688: 1995-09-02 12:46 millert
15689:
15690: * parse.lex: dynamically allocates space for strings
15691:
15692: 1995-09-02 12:34 millert
15693:
15694: * sudo.h: no more MAXCOMMANDLENGTH
15695:
15696: 1995-09-01 22:25 millert
15697:
15698: * sudo.h: added decl of tty
15699:
15700: 1995-09-01 22:25 millert
15701:
15702: * logging.c, sudo.c: moved tty stuff into sudo.c
15703:
15704: 1995-09-01 14:18 millert
15705:
15706: * parse.c: fixed a logic bug. Was denying a command if user gave
15707: command line args but there were none in the sudoers file which
15708: is wrong.
15709:
15710: 1995-09-01 01:18 millert
15711:
15712: * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15713:
15714: 1995-09-01 01:13 millert
15715:
15716: * parse.lex: return foo; -> return(foo);
15717:
15718: 1995-09-01 01:03 millert
15719:
15720: * parse.yacc: fixed netgr_matches() prototype
15721:
15722: 1995-09-01 01:02 millert
15723:
15724: * parse.lex: added support for escaping "termination" characters
15725:
15726: 1995-09-01 00:55 millert
15727:
15728: * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
15729: command args
15730:
15731: 1995-09-01 00:50 millert
15732:
15733: * sudo.c: fixed comments
15734:
15735: 1995-09-01 00:49 millert
15736:
15737: * goodpath.c: fixed negation problem (doh!)
15738:
15739: 1995-09-01 00:25 millert
15740:
15741: * parse.yacc: fixed 2nd parameter to lfind()
15742:
15743: 1995-09-01 00:24 millert
15744:
15745: * parse.lex: now do bounds checking in fill() and append()
15746:
15747: 1995-09-01 00:23 millert
15748:
15749: * sudo.c: include netdb.h as we should added a missing void cast
15750: added SHELL_IF_NO_ARGS support now use realloc() properly. would
15751: fail if realloc actually moved the string instead of shrinking it
15752:
15753: 1995-09-01 00:17 millert
15754:
15755: * sample.sudoers: updated with examples of new features
15756:
15757: 1995-09-01 00:05 millert
15758:
15759: * goodpath.c: now set errno to EACCES if not a regular file or not
15760: executable
15761:
15762: 1995-09-01 00:04 millert
15763:
15764: * find_path.c: if given a fully-qualified or relative path we now
15765: check it with sudo_goodpath() and error out with the appropriate
15766: error message if the file does not exist or is not executable
15767:
15768: 1995-09-01 00:03 millert
15769:
15770: * lsearch.c, emul/search.h: now use correct args for lfind
15771:
15772: 1995-09-01 00:03 millert
15773:
15774: * logging.c: added a comment
15775:
15776: 1995-08-31 23:52 millert
15777:
15778: * insults.h: added in CSOps insults
15779:
15780: 1995-08-31 23:51 millert
15781:
15782: * ins_csops.h: Initial revision
15783:
15784: 1995-08-31 23:35 millert
15785:
15786: * tgetpass.c: added RCS id
15787:
15788: 1995-08-31 22:56 millert
15789:
15790: * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
15791: HAVE_GETWD
15792:
15793: 1995-08-31 22:55 millert
15794:
15795: * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
15796:
15797: 1995-08-31 22:54 millert
15798:
15799: * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
15800: -p now works with -s
15801:
15802: 1995-08-31 22:54 millert
15803:
15804: * parse.c: don't try to stat() "pseudo commands" like "validate"
15805:
15806: 1995-08-31 22:53 millert
15807:
15808: * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
15809: SHELL_IF_NO_ARGS
15810:
15811: 1995-08-31 22:53 millert
15812:
15813: * configure.in: added SecurID support added other insults to
15814: --with-csops
15815:
15816: 1995-08-31 22:52 millert
15817:
15818: * config.h.in: added HAVE_SECURID
15819:
15820: 1995-08-31 22:52 millert
15821:
15822: * Makefile.in: added clobber target added ins_csops.h now gets
15823: CFLAGS from configure
15824:
15825: 1995-08-31 22:46 millert
15826:
15827: * aclocal.m4: relaxed SUDO_FULL_VOID
15828:
15829: 1995-08-31 22:44 millert
15830:
15831: * visudo.c: function comment blocks are now in same style as rest
15832: of code
15833:
15834: 1995-08-31 22:44 millert
15835:
15836: * testsudoers.c: added support for command line args in
15837: /etc/sudoers
15838:
15839: 1995-08-31 22:43 millert
15840:
15841: * sudoers.man: updated to have command args in the sudoers file
15842:
15843: 1995-08-31 22:42 millert
15844:
15845: * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
15846: VARIABLES section
15847:
15848: 1995-08-19 19:32 millert
15849:
15850: * parse.yacc: PATH renamed to COMMAND
15851:
15852: 1995-08-19 19:31 millert
15853:
15854: * parse.lex: it is now a parse error for directories to have args
15855: attached to them
15856:
15857: 1995-08-19 19:30 millert
15858:
15859: * logging.c: now say command args if telling user to buzz off
15860:
15861: 1995-08-19 19:30 millert
15862:
15863: * sudo.c: -s no longer indicates end of args sped up loading on
15864: cmnd_args in load_cmnd()
15865:
15866: 1995-08-19 19:29 millert
15867:
15868: * parse.c: removed an unreachable statement
15869:
15870: 1995-08-19 17:53 millert
15871:
15872: * parse.lex: made more efficient by pulling out the terminators
15873: when in GOTCMND state and making them their own rule
15874:
15875: 1995-08-14 00:07 millert
15876:
15877: * sudo.h: removed MAXLOGLEN since it is no longer used
15878:
15879: 1995-08-14 00:07 millert
15880:
15881: * parse.lex: now allows command args
15882:
15883: 1995-08-14 00:06 millert
15884:
15885: * parse.c: now groks command arguments
15886:
15887: 1995-08-13 23:39 millert
15888:
15889: * logging.c: now sets tty correctly when piped input
15890:
15891: 1995-08-13 23:35 millert
15892:
15893: * sudo.c: fixed loading of cmnd_args (was including command name
15894: too)
15895:
15896: 1995-08-13 23:34 millert
15897:
15898: * logging.c: fixed a core dump due to incorrect if construct
15899:
15900: 1995-08-13 00:33 millert
15901:
15902: * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
15903: -lsocket if irix
15904:
15905: 1995-08-13 00:33 millert
15906:
15907: * aclocal.m4: fixed check for ISC
15908:
15909: 1995-08-13 00:32 millert
15910:
15911: * sudo.c: now sets cmnd_args used by log_error() and that will be
15912: used by the parse to check against command args
15913:
15914: 1995-08-13 00:32 millert
15915:
15916: * sudo.h: added cmnd_args
15917:
15918: 1995-08-13 00:31 millert
15919:
15920: * logging.c: now dynamically allocate logline since we can guess at
15921: its size
15922:
15923: 1995-08-05 13:52 millert
15924:
15925: * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
15926: buffer remove "register" since the compiler knows more than I do
15927: now do a "basename" of the tty
15928:
15929: 1995-07-31 18:20 millert
15930:
15931: * configure.in: ++version
15932:
15933: 1995-07-30 22:37 millert
15934:
15935: * sudo.h: added shell extern changed MODE_* to be bit masks to
15936: allow for several options together
15937:
15938: 1995-07-30 22:36 millert
15939:
15940: * sudo.c: added -s (shell) option made MODE_* masks so we can do
15941: bitwise & and | to see if multiple flags are set.
15942:
15943: 1995-07-30 22:01 millert
15944:
15945: * check.c: added securid support
15946:
15947: 1995-07-30 14:38 millert
15948:
15949: * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
15950: with strcat()
15951:
15952: 1995-07-29 17:17 millert
15953:
15954: * Makefile.in, version.h: ++version
15955:
15956: 1995-07-27 06:52 millert
15957:
15958: * parse.yacc: fixed free() of an uninitialized pointer (yuck)
15959:
15960: 1995-07-26 22:00 millert
15961:
15962: * testsudoers.c: added netgr_matches
15963:
15964: 1995-07-26 21:29 millert
15965:
15966: * parse.c: cleaned up netgr_matches
15967:
15968: 1995-07-26 00:26 millert
15969:
15970: * RUNSON: updated for 1.3.4
15971:
15972: 1995-07-24 21:51 millert
15973:
15974: * Makefile.in: now installs sudoers.man -- really should clean this
15975: up though.
15976:
15977: 1995-07-24 21:18 millert
15978:
15979: * Makefile.in: added sudoers.cat and sudoers.man
15980:
15981: 1995-07-24 21:15 millert
15982:
15983: * sudo.man: pulled out stuff on the sudoers file format into a
15984: separate man page
15985:
15986: 1995-07-24 21:14 millert
15987:
15988: * sudoers.man: Initial revision
15989:
15990: 1995-07-24 21:04 millert
15991:
15992: * HISTORY: fixed up my email address
15993:
15994: 1995-07-24 20:03 millert
15995:
15996: * configure.in: added checks for innetgr and getdomainname
15997:
15998: 1995-07-24 20:02 millert
15999:
16000: * visudo.c: added dummy netgr_matches function
16001:
16002: 1995-07-24 20:01 millert
16003:
16004: * parse.c: added netgr_matches
16005:
16006: 1995-07-24 20:01 millert
16007:
16008: * parse.lex, parse.yacc: added NETGROUP support
16009:
16010: 1995-07-24 20:01 millert
16011:
16012: * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16013:
16014: 1995-07-24 18:07 millert
16015:
16016: * sudo.c: rewrote clean_env() that has rm_env() builtin
16017:
16018: 1995-07-23 19:58 millert
16019:
16020: * check.c: now cast uid to long in sprintf
16021:
16022: 1995-07-23 19:58 millert
16023:
16024: * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16025:
16026: 1995-07-23 19:57 millert
16027:
16028: * options.h: added _INSULTS suffix to HAL & GOONS
16029:
16030: 1995-07-23 19:35 millert
16031:
16032: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16033: new scheme of insult "unions" end
16034:
16035: 1995-07-23 17:48 millert
16036:
16037: * sudo.c: now uses MAX_UID_T_LEN
16038:
16039: 1995-07-23 17:48 millert
16040:
16041: * configure.in: added SUDO_UID_T_LEN !l
16042:
16043: 1995-07-23 17:48 millert
16044:
16045: * config.h.in: added MAX_UID_T_LEN
16046:
16047: 1995-07-23 17:47 millert
16048:
16049: * check.c: now use MAX_UID_T_LEN
16050:
16051: 1995-07-23 17:47 millert
16052:
16053: * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16054: check
16055:
16056: 1995-07-19 19:05 millert
16057:
16058: * configure.in: corrected version
16059:
16060: 1995-07-19 17:29 millert
16061:
16062: * configure.in: added sco support
16063:
16064: 1995-07-19 17:29 millert
16065:
16066: * aclocal.m4: hack to check for sco
16067:
16068: 1995-07-18 21:27 millert
16069:
16070: * interfaces.c: removed #include <net/route.h> since it was hosing
16071: some OS's
16072:
16073: 1995-07-18 13:35 millert
16074:
16075: * find_path.c: fixed prreadlink() prototype
16076:
16077: 1995-07-17 23:54 millert
16078:
16079: * check.c: added parens in #if's
16080:
16081: 1995-07-17 23:53 millert
16082:
16083: * configure.in: added SPW_ prefix
16084:
16085: 1995-07-17 23:20 millert
16086:
16087: * sudo.h: moved SPW_* to config.h.in
16088:
16089: 1995-07-17 23:19 millert
16090:
16091: * sudo.c: added a set of parens
16092:
16093: 1995-07-17 23:19 millert
16094:
16095: * config.h.in: added SPW_*
16096:
16097: 1995-07-17 22:50 millert
16098:
16099: * sudo.h: added SPW_* reordered error codes
16100:
16101: 1995-07-17 22:49 millert
16102:
16103: * check.c: moved SPW_* to sudo.h
16104:
16105: 1995-07-17 14:29 millert
16106:
16107: * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16108:
16109: 1995-07-17 14:29 millert
16110:
16111: * configure.in: AUTH -> SECUREWARE
16112:
16113: 1995-07-17 14:29 millert
16114:
16115: * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16116:
16117: 1995-07-17 00:22 millert
16118:
16119: * check.c: now uses SHADOW_TYPE to make shadow pw support more
16120: readable and modular. It's a start...
16121:
16122: 1995-07-17 00:21 millert
16123:
16124: * configure.in: added autodetection of shadow passwords
16125:
16126: 1995-07-17 00:20 millert
16127:
16128: * sudo.c: now uses SHADOW_TYPE define
16129:
16130: 1995-07-17 00:19 millert
16131:
16132: * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16133: defines
16134:
16135: 1995-07-17 00:19 millert
16136:
16137: * aclocal.m4: added SUDO_CHECK_SHADOW
16138:
16139: 1995-07-12 17:09 millert
16140:
16141: * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16142: took out test for memmove() since we dno longer use it...
16143:
16144: 1995-07-12 17:08 millert
16145:
16146: * CHANGES: updated
16147:
16148: 1995-07-12 17:05 millert
16149:
16150: * logging.c: added BROKEN_SYSLOG support
16151:
16152: 1995-07-12 17:05 millert
16153:
16154: * config.h.in: added BROKEN_SYSLOG
16155:
16156: 1995-07-12 17:04 millert
16157:
16158: * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16159: allow for a machine udpating its time from a server
16160:
16161: 1995-07-12 17:04 millert
16162:
16163: * sudo.man: added 2 security notes updated Nieusma's email addr
16164:
16165: 1995-07-12 14:18 millert
16166:
16167: * lsearch.c: changed a memmove() to memcpy() since we don't have to
16168: worry about overlapping segments.
16169:
16170: 1995-07-11 15:41 millert
16171:
16172: * interfaces.c: cleanup up the loop when interfaces are groped in
16173: so that it is readable
16174:
16175: 1995-07-11 14:52 millert
16176:
16177: * Makefile.in, version.h: ++version
16178:
16179: 1995-07-09 18:17 millert
16180:
16181: * CHANGES: annotated 124-126
16182:
16183: 1995-07-07 16:06 millert
16184:
16185: * check.c: fixed permissions check on /tmp/.odus
16186:
16187: 1995-07-06 19:35 millert
16188:
16189: * check.c: fixed some comments
16190:
16191: 1995-07-06 14:49 millert
16192:
16193: * check.c: now checks owner & mode of timedir also checks for bogus
16194: dates on timestamp file
16195:
16196: 1995-07-06 14:49 millert
16197:
16198: * OPTIONS: updated TIMEOUT info
16199:
16200: 1995-07-06 14:48 millert
16201:
16202: * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16203:
16204: 1995-07-06 14:47 millert
16205:
16206: * compat.h: added definition of S_IRWXU
16207:
16208: 1995-07-06 14:47 millert
16209:
16210: * CHANGES: updated
16211:
16212: 1995-07-03 14:16 millert
16213:
16214: * interfaces.c: added #ifdef to make it compile on strange arches
16215:
16216: 1995-07-02 18:13 millert
16217:
16218: * aclocal.m4: fixed check for fulkl void impl.
16219:
16220: 1995-07-02 09:56 millert
16221:
16222: * check.c: added mssing "static"
16223:
16224: 1995-07-01 20:41 millert
16225:
16226: * insults.h: replaced #elif with #else #if constructs for ancient C
16227: compilers
16228:
16229: 1995-07-01 20:18 millert
16230:
16231: * INSTALL: updated irix c2 & kerb5 info
16232:
16233: 1995-07-01 20:15 millert
16234:
16235: * configure.in: added shadow pw support for irix
16236:
16237: 1995-07-01 16:07 millert
16238:
16239: * CHANGES: last changes for sudo 1.3.3
16240:
16241: 1995-07-01 16:07 millert
16242:
16243: * TODO, BUGS: updated
16244:
16245: 1995-07-01 16:04 millert
16246:
16247: * configure.in: now calls SUDO_SOCK_SA_LEN
16248:
16249: 1995-07-01 16:04 millert
16250:
16251: * config.h.in: added HAVE_SA_LEN
16252:
16253: 1995-07-01 16:04 millert
16254:
16255: * aclocal.m4: added SUDO_SOCK_SA_LEN
16256:
16257: 1995-07-01 15:49 millert
16258:
16259: * interfaces.c: now works with ip implementations that use sa_len
16260: in sockaddr
16261:
16262: 1995-07-01 14:26 millert
16263:
16264: * INSTALL: added note about buggy AIX compiler
16265:
16266: 1995-07-01 14:24 millert
16267:
16268: * interfaces.c: now include sys/time.h for AIX
16269:
16270: 1995-06-27 22:35 millert
16271:
16272: * Makefile.in: getcwd -> getwd
16273:
16274: 1995-06-27 21:28 millert
16275:
16276: * interfaces.c: now works for ISC and others. yay.
16277:
16278: 1995-06-26 14:24 millert
16279:
16280: * Makefile.in, version.h: version++
16281:
16282: 1995-06-22 20:26 millert
16283:
16284: * aclocal.m4: fixed test for full void impl
16285:
16286: 1995-06-22 20:25 millert
16287:
16288: * sudo.c: now check to see that st_dev is non-zero before assuming
16289: that we are being spoofed
16290:
16291: 1995-06-20 16:56 millert
16292:
16293: * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16294: AC_FUNC_UTIME_NULL
16295:
16296: 1995-06-19 16:32 millert
16297:
16298: * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16299:
16300: 1995-06-19 16:10 millert
16301:
16302: * logging.c: added cast for ttyname()
16303:
16304: 1995-06-19 15:23 millert
16305:
16306: * configure.in: fixed typo
16307:
16308: 1995-06-19 15:19 millert
16309:
16310: * check.c: now deal correctly with all known variation of utime()
16311: -- yippe
16312:
16313: 1995-06-19 15:19 millert
16314:
16315: * configure.in: added SUDO_FUNC_UTIME_POSIX
16316:
16317: 1995-06-19 15:19 millert
16318:
16319: * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16320:
16321: 1995-06-19 15:14 millert
16322:
16323: * config.h.in: added HAVE_UTIME_POSIX
16324:
16325: 1995-06-19 13:38 millert
16326:
16327: * check.c: fixed a typo
16328:
16329: 1995-06-19 13:29 millert
16330:
16331: * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16332:
16333: 1995-06-19 13:20 millert
16334:
16335: * check.c: fixed fascist C compiler warning
16336:
16337: 1995-06-18 23:14 millert
16338:
16339: * interfaces.c: now set strioctl.ic_timout in STRSET() now
16340: initialize num_interfaces to 0 (just to be anal)
16341:
16342: 1995-06-18 18:06 millert
16343:
16344: * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16345:
16346: 1995-06-18 18:05 millert
16347:
16348: * logging.c: added tty logging
16349:
16350: 1995-06-18 16:04 millert
16351:
16352: * interfaces.c: reworked the ISC code
16353:
16354: 1995-06-18 15:27 millert
16355:
16356: * Makefile.in, version.h: updated version
16357:
16358: 1995-06-18 15:24 millert
16359:
16360: * check.c: now expect old-style utime(3) if utime() can't take NULL
16361: as an arg
16362:
16363: 1995-06-18 15:08 millert
16364:
16365: * configure.in: added check for utime.h
16366:
16367: 1995-06-18 15:08 millert
16368:
16369: * config.h.in: added HAVE_UTIME_H
16370:
16371: 1995-06-18 14:48 millert
16372:
16373: * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16374:
16375: 1995-06-18 13:58 millert
16376:
16377: * configure.in: now search for kerb libs and includes
16378:
16379: 1995-06-18 13:03 millert
16380:
16381: * check.c: added support for utime(2)'s that can't take a NULL
16382: parameter
16383:
16384: 1995-06-18 13:03 millert
16385:
16386: * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16387: t belongs
16388:
16389: 1995-06-17 20:46 millert
16390:
16391: * configure.in: added utime(s) stuff
16392:
16393: 1995-06-17 20:46 millert
16394:
16395: * check.c: now use utime()
16396:
16397: 1995-06-17 20:46 millert
16398:
16399: * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16400:
16401: 1995-06-17 19:12 millert
16402:
16403: * utime.c: now use HAVE_UTIME_NULL
16404:
16405: 1995-06-17 19:02 millert
16406:
16407: * utime.c, emul/utime.h: Initial revision
16408:
16409: 1995-06-17 18:24 millert
16410:
16411: * check.c: need to setuid(0) to make kerb4 stuff work.
16412:
16413: 1995-06-17 18:14 millert
16414:
16415: * tgetpass.c: no more special case for kerberos
16416:
16417: 1995-06-17 18:13 millert
16418:
16419: * config.h.in: took out setreuid and setresuid stuff added kerb5
16420: stuff (use kerb4 emulation)
16421:
16422: 1995-06-17 18:13 millert
16423:
16424: * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16425: to 128 if kerberos
16426:
16427: 1995-06-17 18:12 millert
16428:
16429: * check.c: now use private ticket file for kerberos support to
16430: avoid trouncing on system one
16431:
16432: 1995-06-15 00:48 millert
16433:
16434: * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16435:
16436: 1995-06-15 00:47 millert
16437:
16438: * sudo.c: added anti-spoofing support
16439:
16440: 1995-06-15 00:47 millert
16441:
16442: * parse.c: now use global cmnd_st
16443:
16444: 1995-06-15 00:47 millert
16445:
16446: * logging.c: added SPOOF_ATTEMPT suypport
16447:
16448: 1995-06-14 23:41 millert
16449:
16450: * testsudoers.c, visudo.c: added void casts where appropriate
16451:
16452: 1995-06-14 23:40 millert
16453:
16454: * parse.yacc: fixed up spacing and added void casts where
16455: appropriate
16456:
16457: 1995-06-14 23:27 millert
16458:
16459: * sudo.c: fixed problem with "-p prompt" but no args
16460:
16461: 1995-06-14 04:43 millert
16462:
16463: * sudo.man: added BUGS and annotated -l description
16464:
16465: 1995-06-14 04:43 millert
16466:
16467: * sudo.h: validate() now takes a flag
16468:
16469: 1995-06-14 04:43 millert
16470:
16471: * sudo.c: validate() now takes a flag added -l
16472:
16473: 1995-06-14 04:42 millert
16474:
16475: * parse.yacc: added support for -l
16476:
16477: 1995-06-14 04:41 millert
16478:
16479: * parse.c: validate() now takes a flag that says whether or not to
16480: check the command
16481:
16482: 1995-06-07 21:36 millert
16483:
16484: * logging.c: now deals with Argv == 1
16485:
16486: 1995-06-07 21:34 millert
16487:
16488: * sudo.man: added -p option
16489:
16490: 1995-06-07 21:27 millert
16491:
16492: * sudo.c: added prompt support reworked parse_args()
16493:
16494: 1995-06-07 20:49 millert
16495:
16496: * sudo.h: added prompt
16497:
16498: 1995-06-07 20:49 millert
16499:
16500: * options.h: added PASSPROMPT
16501:
16502: 1995-06-07 20:48 millert
16503:
16504: * check.c: now use BUFSIZ as length of kerb password added kpass so
16505: pass is always a char * now use prompt global when asking for a
16506: password
16507:
16508: 1995-06-07 20:47 millert
16509:
16510: * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16511:
16512: 1995-06-07 20:43 millert
16513:
16514: * OPTIONS: added PASSPROMPT
16515:
16516: 1995-06-07 01:44 millert
16517:
16518: * configure.in: only look for -lufc or -lcrypt if crypt() not in
16519: libc
16520:
16521: 1995-06-07 01:43 millert
16522:
16523: * check.c: don't exit on kerb error, just warn if k_errno ==
16524: KDC_PR_UNKNOWN (unknown user) silently fail
16525:
16526: 1995-06-06 22:44 millert
16527:
16528: * INSTALL: added kerb4 note
16529:
16530: 1995-06-06 22:43 millert
16531:
16532: * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16533:
16534: 1995-06-06 22:41 millert
16535:
16536: * check.c: removed debugging printf
16537:
16538: 1995-06-06 22:33 millert
16539:
16540: * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16541: setresuid
16542:
16543: 1995-06-06 22:32 millert
16544:
16545: * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16546: HAVE_SETRESUID
16547:
16548: 1995-06-06 22:32 millert
16549:
16550: * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16551: setreuid emulation with setresuid if applic
16552:
16553: 1995-06-06 22:31 millert
16554:
16555: * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16556: chown() hack if no setreuid() or a broken one
16557:
16558: 1995-06-05 23:44 millert
16559:
16560: * config.h.in: added HAVE_KERBEROS
16561:
16562: 1995-06-05 23:43 millert
16563:
16564: * tgetpass.c: added KERBEROS support (long passwords)
16565:
16566: 1995-06-05 23:42 millert
16567:
16568: * check.c, configure.in: added kerberos support
16569:
16570: 1995-06-03 19:36 millert
16571:
16572: * sudo.h: added MODE_BACKGROUND
16573:
16574: 1995-06-03 19:36 millert
16575:
16576: * sudo.man: escaped dashes added -b option
16577:
16578: 1995-06-03 19:34 millert
16579:
16580: * sudo.c: added -b option
16581:
16582: 1995-06-03 18:52 millert
16583:
16584: * check.c: added crypt() for osf/1 3.x enhanced secuiry
16585:
16586: 1995-06-03 18:18 millert
16587:
16588: * configure.in: now check for -lcrypt
16589:
16590: 1995-06-03 18:00 millert
16591:
16592: * interfaces.c: added ENXIO like EADDRNOTAVAIL
16593:
16594: 1995-05-07 23:14 millert
16595:
16596: * configure.in: now emulate getwd(), not getcwd()
16597:
16598: 1995-05-07 23:13 millert
16599:
16600: * sudo.c: getcwd() -> getwd()
16601:
16602: 1995-05-07 23:12 millert
16603:
16604: * getwd.c: getcwd -> getwd
16605:
16606: 1995-05-02 01:34 millert
16607:
16608: * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16609:
16610: 1995-05-02 01:34 millert
16611:
16612: * insults.h: broke out insults into separate include files
16613:
16614: 1995-05-02 01:32 millert
16615:
16616: * options.h, OPTIONS: added GOONS
16617:
16618: 1995-05-02 01:32 millert
16619:
16620: * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16621:
16622: 1995-05-01 23:34 millert
16623:
16624: * Makefile.in, version.h: ++version
16625:
16626: 1995-05-01 23:34 millert
16627:
16628: * visudo.c: moved signal handler setup to setup_signals()
16629:
16630: 1995-05-01 23:33 millert
16631:
16632: * sudo.h: added load_interfaces()
16633:
16634: 1995-05-01 23:33 millert
16635:
16636: * sudo.c: moved load_interfaces to interfaces.c
16637:
16638: 1995-05-01 23:33 millert
16639:
16640: * parse.yacc: added clearaliases
16641:
16642: 1995-05-01 23:33 millert
16643:
16644: * OPTIONS, options.h: added FAST_MATCH
16645:
16646: 1995-05-01 23:32 millert
16647:
16648: * parse.lex: now uses clearaliases variable
16649:
16650: 1995-05-01 23:31 millert
16651:
16652: * interfaces.c: Initial revision
16653:
16654: 1995-05-01 23:31 millert
16655:
16656: * Makefile.in: added interfaces.[co]
16657:
16658: 1995-05-01 23:30 millert
16659:
16660: * testsudoers.c: now uses ip addrs and netmasks via
16661: load_interfaces()
16662:
16663: 1995-05-01 22:47 millert
16664:
16665: * sudo.c: now remove IFS instead of setting to "sane" value
16666:
16667: 1995-05-01 16:30 millert
16668:
16669: * parse.c: added FAST_MATCH
16670:
16671: 1995-04-29 20:19 millert
16672:
16673: * Makefile.in: sudo_goodpath.c-> goodpath.c
16674:
16675: 1995-04-29 20:15 millert
16676:
16677: * sudo.c: added Andy's new ISC changes
16678:
16679: 1995-04-14 14:06 millert
16680:
16681: * OPTIONS: added a sentence to SECURE_PATH info
16682:
16683: 1995-04-14 13:57 millert
16684:
16685: * BUGS: added one
16686:
16687: 1995-04-14 13:54 millert
16688:
16689: * RUNSON, CHANGES: updated
16690:
16691: 1995-04-13 17:04 millert
16692:
16693: * RUNSON: updated for beta3
16694:
16695: 1995-04-13 14:32 millert
16696:
16697: * Makefile.in, version.h: ++version
16698:
16699: 1995-04-13 13:56 millert
16700:
16701: * aclocal.m4: sendmail is now looked for in /usr/ucblib
16702:
16703: 1995-04-13 13:54 millert
16704:
16705: * sudo.c: fixed indentation
16706:
16707: 1995-04-13 13:35 millert
16708:
16709: * aclocal.m4: fixed a typo
16710:
16711: 1995-04-13 13:19 millert
16712:
16713: * sudo.c: updated ISC mods
16714:
16715: 1995-04-13 13:19 millert
16716:
16717: * configure.in: added unixware case
16718:
16719: 1995-04-13 13:19 millert
16720:
16721: * check.c: user_is_exempt is no longer hidden
16722:
16723: 1995-04-13 13:19 millert
16724:
16725: * RUNSON: updated
16726:
16727: 1995-04-13 13:19 millert
16728:
16729: * aclocal.m4: isc and riscos changes
16730:
16731: 1995-04-13 13:18 millert
16732:
16733: * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
16734: SECURE_PATH
16735:
16736: 1995-04-13 13:18 millert
16737:
16738: * Makefile.in: fixed a typo and added testsudoers stuff
16739:
16740: 1995-04-13 12:34 millert
16741:
16742: * testsudoers.c: Initial revision
16743:
16744: 1995-04-12 19:31 millert
16745:
16746: * parse.yacc: applied fixed patch from Chris
16747:
16748: 1995-04-11 14:30 millert
16749:
16750: * Makefile.in: fixed a typo
16751:
16752: 1995-04-11 14:14 millert
16753:
16754: * parse.yacc: added a set of braces for bison
16755:
16756: 1995-04-11 14:01 millert
16757:
16758: * parse.yacc: merged in Chris' changes to dekludge the parser.
16759:
16760: 1995-04-11 00:38 millert
16761:
16762: * logging.c: send_mail() was calling find_path() which is wrong
16763: since find_path() stores cmnd in a static var. Anyhow, it
16764: doesn't make much sense since MAILER should always be fully
16765: qualified
16766:
16767: 1995-04-10 19:51 millert
16768:
16769: * sample.sudoers: added User_Alias stuff
16770:
16771: 1995-04-10 19:50 millert
16772:
16773: * aclocal.m4: SUDO_NEXT now looks for
16774: /usr/lib/NextStep/software_version
16775:
16776: 1995-04-10 19:50 millert
16777:
16778: * RUNSON: added DEC UNIX 3.0 w/ gcc
16779:
16780: 1995-04-10 19:49 millert
16781:
16782: * visudo.c: Exit was being used in places where exit should be used
16783:
16784: 1995-04-10 19:44 millert
16785:
16786: * sudoers: added "User alias specification"
16787:
16788: 1995-04-10 18:04 millert
16789:
16790: * parse.yacc: fixed probs caused by making nslots and naliases a
16791: size_t
16792:
16793: 1995-04-10 15:09 millert
16794:
16795: * RUNSON: added KSR, upped rev to 1.3.1b2
16796:
16797: 1995-04-10 15:07 millert
16798:
16799: * logging.c, parse.yacc: 1024 -> BUFSIZ
16800:
16801: 1995-04-10 15:05 millert
16802:
16803: * parse.yacc: void * -> VOID * naliases and nslots are now size_t
16804: to appease lsearch on 64-bit machines
16805:
16806: 1995-04-09 19:30 millert
16807:
16808: * TODO: did a bunch of things and added a bunch :-)
16809:
16810: 1995-04-09 19:30 millert
16811:
16812: * PORTING: updated
16813:
16814: 1995-04-09 19:24 millert
16815:
16816: * visudo.man: closer to BSD manpage style
16817:
16818: 1995-04-09 19:15 millert
16819:
16820: * sudo.man: closer to standard BSD man format
16821:
16822: 1995-04-09 18:58 millert
16823:
16824: * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
16825: sudo.h, version.h, emul/search.h: added RCS id
16826:
16827: 1995-04-09 17:35 millert
16828:
16829: * sudo.h: removed crufty #defines that are no longer used
16830:
16831: 1995-04-09 17:13 millert
16832:
16833: * BUGS: fixed a bug
16834:
16835: 1995-04-09 17:12 millert
16836:
16837: * sudo.man: updated based on sudo changes
16838:
16839: 1995-04-09 17:11 millert
16840:
16841: * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
16842: keyword as well as a NAME or ALIAS
16843:
16844: 1995-04-09 17:11 millert
16845:
16846: * CHANGES: updated
16847:
16848: 1995-04-09 17:04 millert
16849:
16850: * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
16851:
16852: 1995-04-09 15:24 millert
16853:
16854: * aclocal.m4: fixed bug with full void impl check
16855:
16856: 1995-04-08 23:11 millert
16857:
16858: * parse.yacc: fixed User_Alias supoprt
16859:
16860: 1995-04-08 22:27 millert
16861:
16862: * parse.yacc: added stubs for User_Alias support
16863:
16864: 1995-04-08 22:27 millert
16865:
16866: * sudo.c: now sets removes # bogus interfaces from num_interfaces
16867:
16868: 1995-04-08 22:26 millert
16869:
16870: * parse.lex: added User_Alias support
16871:
16872: 1995-04-07 21:10 millert
16873:
16874: * Makefile.in: removed extraneous TODO
16875:
16876: 1995-04-07 19:48 millert
16877:
16878: * visudo.c: ntwk_matches -> addr_matches
16879:
16880: 1995-04-07 15:38 millert
16881:
16882: * parse.yacc: ntwk_matches -> addr_matches
16883:
16884: 1995-04-07 15:37 millert
16885:
16886: * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
16887: inet_network() (which expects octet boundaries) fixes for OSF
16888: (sizeof(int) != sizeof(long))
16889:
16890: 1995-04-07 15:08 millert
16891:
16892: * sudo.c: took out debugging info
16893:
16894: 1995-04-06 23:45 millert
16895:
16896: * aclocal.m4: OS was being set to unknown before non-uname based
16897: host checks. This caused no checks to happen since $OS was not
16898: zero-length.
16899:
16900: 1995-04-06 23:30 millert
16901:
16902: * sudo.c: fixed loading of interfaces struct still has debugging
16903: info in though
16904:
16905: 1995-04-06 22:23 millert
16906:
16907: * parse.c: fixed typo
16908:
16909: 1995-04-06 16:17 millert
16910:
16911: * Makefile.in: ++version
16912:
16913: 1995-04-06 16:16 millert
16914:
16915: * version.h: ++
16916:
16917: 1995-04-06 16:16 millert
16918:
16919: * visudo.c: removed extraneous extern decl of "top
16920:
16921: 1995-04-06 16:14 millert
16922:
16923: * visudo.c: now zeros "top"
16924:
16925: 1995-04-06 16:13 millert
16926:
16927: * parse.yacc: removed parser_cleanup (no need for it now)
16928:
16929: 1995-04-06 16:13 millert
16930:
16931: * parse.lex: now calls reset_aliases() directly
16932:
16933: 1995-04-04 18:21 millert
16934:
16935: * OPTIONS: added a sentence to SECURE_PATH description
16936:
16937: 1995-04-04 18:17 millert
16938:
16939: * parse.c: fixed my stupid bug where I used NAMLEN on something I
16940: wanted to just get the name from. argh.
16941:
16942: 1995-04-03 16:58 millert
16943:
16944: * lsearch.c: fixed argument order of memmove() that i hosed when
16945: converting from bcopy(). arghh.
16946:
16947: 1995-04-03 15:33 millert
16948:
16949: * Makefile.in: finally fixed DISTFILES line
16950:
16951: 1995-04-03 15:21 millert
16952:
16953: * Makefile.in: tabs -> spaces
16954:
16955: 1995-04-03 15:15 millert
16956:
16957: * Makefile.in: added missing files to DISTFILES
16958:
16959: 1995-04-03 14:50 millert
16960:
16961: * Makefile.in: SUPPORTED -> RUNSON
16962:
16963: 1995-04-01 03:12 millert
16964:
16965: * TODO: updated
16966:
16967: 1995-04-01 01:54 millert
16968:
16969: * RUNSON: updated for pl5b1 release
16970:
16971: 1995-04-01 01:53 millert
16972:
16973: * BUGS, TODO: updated
16974:
16975: 1995-04-01 01:52 millert
16976:
16977: * check.c: fixed bug where if you hit return at first sudo prompt
16978: it would still log as a failure
16979:
16980: 1995-04-01 01:29 millert
16981:
16982: * CHANGES: updated
16983:
16984: 1995-04-01 01:25 millert
16985:
16986: * aclocal.m4: better test for bogus void * implementation
16987:
16988: 1995-03-31 20:33 millert
16989:
16990: * logging.c: added PASSWORDS_NOT_CORRECT
16991:
16992: 1995-03-31 20:32 millert
16993:
16994: * check.c: added PASSWORDS_NOT_CORRECT stuff]
16995:
16996: 1995-03-31 20:30 millert
16997:
16998: * sudo.h: added PASSWORDS_NOT_CORRECT
16999:
17000: 1995-03-31 19:16 millert
17001:
17002: * tgetpass.c: moved pathnames.h
17003:
17004: 1995-03-31 19:16 millert
17005:
17006: * sudo.c: removed some unused vars and fixed up uid2str
17007:
17008: 1995-03-31 19:15 millert
17009:
17010: * putenv.c: moved compat.h
17011:
17012: 1995-03-31 19:14 millert
17013:
17014: * getcwd.c, getwd.c: added pathnames.h
17015:
17016: 1995-03-31 18:18 millert
17017:
17018: * parse.yacc: fixed a typo I introduced in the last checkin :-(
17019:
17020: 1995-03-31 18:11 millert
17021:
17022: * parse.lex: can't have #ifdef's where N is defined so just do this
17023: the broken way for AIX
17024:
17025: 1995-03-31 18:08 millert
17026:
17027: * parse.yacc: better hack from Chris (but still a hack)
17028:
17029: 1995-03-31 18:05 millert
17030:
17031: * parse.lex: stupid hack for broken aix lex
17032:
17033: 1995-03-31 17:47 millert
17034:
17035: * tgetpass.c: now includes compat.h
17036:
17037: 1995-03-31 17:27 millert
17038:
17039: * visudo.c: now includes fcntl.h
17040:
17041: 1995-03-31 17:27 millert
17042:
17043: * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17044:
17045: 1995-03-31 16:12 millert
17046:
17047: * parse.yacc: dirty hack to fix parser bug. i don't really like
17048: this but it works for now...
17049:
17050: 1995-03-31 16:12 millert
17051:
17052: * sudo.c: uid2str is now static like the prototype says
17053:
17054: 1995-03-29 23:48 millert
17055:
17056: * RUNSON: Initial revision
17057:
17058: 1995-03-29 23:47 millert
17059:
17060: * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17061:
17062: 1995-03-29 23:46 millert
17063:
17064: * sudo.c: check_sudoers now returns an error code and sudo calls
17065: inform_user and log_error based on the return value.
17066:
17067: 1995-03-29 23:45 millert
17068:
17069: * logging.c, sudo.h: added entries for new errors
17070:
17071: 1995-03-29 23:03 millert
17072:
17073: * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17074: sudoers file
17075:
17076: 1995-03-29 22:52 millert
17077:
17078: * Makefile.in: took out testsudoers
17079:
17080: 1995-03-29 22:36 millert
17081:
17082: * sudo.c: now explicately checks that it is setuid root
17083:
17084: 1995-03-29 22:28 millert
17085:
17086: * sudo.c: If a user has no passwd entry sudo would segv (writing to
17087: a garbage pointer). Now allocate space before writing :-)
17088:
17089: 1995-03-29 22:06 millert
17090:
17091: * configure.in: reordered AC_CHECK_FUNCS
17092:
17093: 1995-03-29 22:06 millert
17094:
17095: * config.h.in: fixed memset macro
17096:
17097: 1995-03-29 21:47 millert
17098:
17099: * logging.c: bzero -> memset when a parse error is logged the line
17100: number of the error is now logged too
17101:
17102: 1995-03-29 21:46 millert
17103:
17104: * tgetpass.c, visudo.c: bzero -> memset
17105:
17106: 1995-03-29 21:46 millert
17107:
17108: * INSTALL: added Sunos to blurb about c2 security
17109:
17110: 1995-03-29 21:45 millert
17111:
17112: * configure.in: added a SUN4 define for C2 security
17113:
17114: 1995-03-29 21:44 millert
17115:
17116: * config.h.in: bcopy -> memmove bzero -> memset
17117:
17118: 1995-03-29 21:43 millert
17119:
17120: * lsearch.c: bcopy -> memmove char * -> VOID *
17121:
17122: 1995-03-29 21:30 millert
17123:
17124: * check.c: added support for sunos with C2 security
17125:
17126: 1995-03-29 21:12 millert
17127:
17128: * OPTIONS, options.h: reordered
17129:
17130: 1995-03-29 21:12 millert
17131:
17132: * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17133:
17134: 1995-03-29 21:12 millert
17135:
17136: * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17137:
17138: 1995-03-29 21:12 millert
17139:
17140: * config.h.in: added _SUDO_PATH_LOGFILE
17141:
17142: 1995-03-29 21:11 millert
17143:
17144: * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17145: added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17146: too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17147:
17148: 1995-03-29 18:17 millert
17149:
17150: * TROUBLESHOOTING: Initial revision
17151:
17152: 1995-03-29 17:59 millert
17153:
17154: * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17155: load_global() to work around a problem is trusted hpux shadow
17156: passwords. yuck.
17157:
17158: 1995-03-29 17:41 millert
17159:
17160: * parse.yacc: backed out a change in malloc/realloc
17161:
17162: 1995-03-29 17:38 millert
17163:
17164: * parse.yacc: now include stdlib.h
17165:
17166: 1995-03-29 17:22 millert
17167:
17168: * visudo.c: now do an freopen() of the stmp file so that yyin will
17169: always point to the same thing. This is important for flex since
17170: we are doing a YY_NEWFILE
17171:
17172: 1995-03-29 17:20 millert
17173:
17174: * parse.yacc: replaced yywrap() with parser_cleanup() since
17175: yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17176: sigh.
17177:
17178: 1995-03-29 17:18 millert
17179:
17180: * parse.lex: now have a rule that matches anything that doesn't
17181: match an explicite rule. well, you know what i mean (. matches
17182: anything not yet matched). However, this means that there is
17183: input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17184: So, yywrap has moved into parse.lex and it calls parser_cleanup()
17185: which is most of the old yywrap() sigh.
17186:
17187: 1995-03-29 17:17 millert
17188:
17189: * SUPPORTED: no longer used
17190:
17191: 1995-03-29 16:13 millert
17192:
17193: * getcwd.c, getwd.c: moved compat.h to be the last include file
17194:
17195: 1995-03-29 16:11 millert
17196:
17197: * parse.yacc: fixed type of aliascmp() args
17198:
17199: 1995-03-29 15:58 millert
17200:
17201: * find_path.c: NULL -> '\0'
17202:
17203: 1995-03-29 15:42 millert
17204:
17205: * parse.yacc: added casts to lfind and lsearch args for irix
17206:
17207: 1995-03-29 08:20 millert
17208:
17209: * Makefile.in: bsdinstall -> install-sh
17210:
17211: 1995-03-29 08:20 millert
17212:
17213: * INSTALL: added info about make realclean
17214:
17215: 1995-03-29 08:17 millert
17216:
17217: * Makefile.in: updated VERSION added dependencies for visudo.cat
17218:
17219: 1995-03-29 08:17 millert
17220:
17221: * version.h: -> pl5b1
17222:
17223: 1995-03-29 08:16 millert
17224:
17225: * sudo.c: took out -l
17226:
17227: 1995-03-29 00:03 millert
17228:
17229: * Makefile.in: now there is a real visudo.man and visudo.cat
17230:
17231: 1995-03-28 23:54 millert
17232:
17233: * sudo.man: took out visudo stuff
17234:
17235: 1995-03-28 23:54 millert
17236:
17237: * visudo.man: Initial revision
17238:
17239: 1995-03-28 23:12 millert
17240:
17241: * parse.c, parse.lex, parse.yacc: updated copyright
17242:
17243: 1995-03-28 23:05 millert
17244:
17245: * README: updated for pl5
17246:
17247: 1995-03-28 20:02 millert
17248:
17249: * sudo.man: updated Nieusma & Hieb email addresses
17250:
17251: 1995-03-28 19:57 millert
17252:
17253: * INSTALL: updated to include options.h and OPTIONS
17254:
17255: 1995-03-28 19:35 millert
17256:
17257: * CHANGES, TODO: updated
17258:
17259: 1995-03-28 19:35 millert
17260:
17261: * BUGS: eliminated bug #1 (yay)
17262:
17263: 1995-03-28 19:31 millert
17264:
17265: * configure.in: sunos no longer gets linked statically
17266:
17267: 1995-03-28 18:58 millert
17268:
17269: * parse.lex: prototype now uses __P()
17270:
17271: 1995-03-28 18:49 millert
17272:
17273: * parse.lex: make fill() non-ansi
17274:
17275: 1995-03-28 15:26 millert
17276:
17277: * parse.c: made -v (validate) work
17278:
17279: 1995-03-28 15:26 millert
17280:
17281: * logging.c: now gives host
17282:
17283: 1995-03-28 10:34 millert
17284:
17285: * find_path.c: don't check for execute/statable if fq or relative
17286: path given
17287:
17288: 1995-03-28 01:07 millert
17289:
17290: * parse.c: added a cast
17291:
17292: 1995-03-28 00:49 millert
17293:
17294: * visudo.c: now include ctype.h for islower and tolower macros
17295:
17296: 1995-03-28 00:48 millert
17297:
17298: * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17299:
17300: 1995-03-28 00:48 millert
17301:
17302: * sudo.c: moved a set of parens
17303:
17304: 1995-03-28 00:48 millert
17305:
17306: * strdup.c: now include compat.h
17307:
17308: 1995-03-28 00:47 millert
17309:
17310: * parse.yacc: now cast malloc & realloc return vals added search
17311: for HAVE_LSEARCH now use strcmp if no strcasecmp available
17312:
17313: 1995-03-28 00:46 millert
17314:
17315: * lsearch.c, emul/search.h: void * -> VOID *
17316:
17317: 1995-03-28 00:45 millert
17318:
17319: * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17320: HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17321:
17322: 1995-03-28 00:44 millert
17323:
17324: * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17325:
17326: 1995-03-28 00:44 millert
17327:
17328: * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17329: echo and results to most SUDO_* macros
17330:
17331: 1995-03-28 00:43 millert
17332:
17333: * Makefile.in: no more -I.
17334:
17335: 1995-03-28 00:22 millert
17336:
17337: * configure.in: various 1.x ro 2.x autoconf changes now check for
17338: strcasecmp now use AC_INSTALL_PROG instead of custom one added
17339: check for fully woorking void implementation
17340:
17341: 1995-03-28 00:02 millert
17342:
17343: * Makefile.in: added lsearch & search.h visudo links into
17344: $(LIBOBJS)
17345:
17346: 1995-03-27 23:43 millert
17347:
17348: * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17349:
17350: 1995-03-27 23:40 millert
17351:
17352: * visudo.c: whatnow_help was prototyped to be static be was not
17353: declared as such
17354:
17355: 1995-03-27 21:15 millert
17356:
17357: * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17358: used) added check for dirent/dir/ndir.h
17359:
17360: 1995-03-27 21:09 millert
17361:
17362: * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17363:
17364: 1995-03-27 20:38 millert
17365:
17366: * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17367:
17368: 1995-03-27 20:23 millert
17369:
17370: * emul/search.h, lsearch.c: Initial revision
17371:
17372: 1995-03-27 18:26 millert
17373:
17374: * parse.yacc: eliminated bison warnings
17375:
17376: 1995-03-27 17:10 millert
17377:
17378: * parse.lex: added missing case
17379:
17380: 1995-03-27 17:04 millert
17381:
17382: * visudo.c: now iincludes signal.h
17383:
17384: 1995-03-27 15:16 millert
17385:
17386: * parse.yacc: only clear data structures on a parse error
17387:
17388: 1995-03-27 15:01 millert
17389:
17390: * visudo.c: whatnow() now gives help on invalid input
17391:
17392: 1995-03-27 14:54 millert
17393:
17394: * visudo.c: added a whatnow() function (sort of like mh)
17395:
17396: 1995-03-27 14:53 millert
17397:
17398: * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17399: by calling reset_aliases() and clearing top took reset stuff out
17400: of yyerror() since it doesn't beling there (and doesn't work
17401: anyway). errorlineno is now initially set to -1 so we can set it
17402: to the first error that occurrs (it was getting set to the last)
17403:
17404: 1995-03-27 14:53 millert
17405:
17406: * parse.lex: added a void cast
17407:
17408: 1995-03-27 13:26 millert
17409:
17410: * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17411:
17412: 1995-03-26 01:33 millert
17413:
17414: * sudo.c, sudo.h: removed ocmnd
17415:
17416: 1995-03-26 01:19 millert
17417:
17418: * sudo.h: no more sudo_realpath() and find_path() changed params
17419:
17420: 1995-03-26 01:19 millert
17421:
17422: * sudo.c: find_path() changed since no more realpath()
17423:
17424: 1995-03-26 01:18 millert
17425:
17426: * parse.yacc: on error, errorlineno is set to the line where the
17427: error occurred added kill_aliases() to free the aliases struct
17428: now clean up in yyerror() so we can reparse cleanly
17429:
17430: 1995-03-26 01:17 millert
17431:
17432: * logging.c: changed to use new find_path()
17433:
17434: 1995-03-26 01:17 millert
17435:
17436: * options.h, parse.c: no more USE_REALPATH
17437:
17438: 1995-03-26 01:16 millert
17439:
17440: * find_path.c: removed all the realpath() stuff
17441:
17442: 1995-03-26 01:16 millert
17443:
17444: * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17445:
17446: 1995-03-26 01:12 millert
17447:
17448: * visudo.c: now works correctly with utk parser
17449:
17450: 1995-03-26 00:04 millert
17451:
17452: * goodpath.c: Initial revision
17453:
17454: 1995-03-25 23:23 millert
17455:
17456: * sudo_realpath.c: eliminated a compiler warning
17457:
17458: 1995-03-25 21:56 millert
17459:
17460: * sudo.c: elinated compiler warning
17461:
17462: 1995-03-25 20:40 millert
17463:
17464: * sudo_realpath.c: added sudo_goodpath()
17465:
17466: 1995-03-25 20:40 millert
17467:
17468: * sudo.h: added prototype for sudo_goodpath
17469:
17470: 1995-03-25 20:39 millert
17471:
17472: * parse.c: added support for /sys/dir.h
17473:
17474: 1995-03-25 20:39 millert
17475:
17476: * options.h: USE_REALPATH turned off
17477:
17478: 1995-03-25 20:39 millert
17479:
17480: * find_path.c: added calls to sudo_goodpath()
17481:
17482: 1995-03-25 20:39 millert
17483:
17484: * configure.in: added check for dirent.h
17485:
17486: 1995-03-25 20:38 millert
17487:
17488: * config.h.in: added HAVE_DIRENT_H
17489:
17490: 1995-03-25 19:27 millert
17491:
17492: * configure.in: added in linux shadow pass stuff
17493:
17494: 1995-03-24 14:43 millert
17495:
17496: * visudo.c: added back host, user, cmnd, parse_error
17497:
17498: 1995-03-24 14:19 millert
17499:
17500: * visudo.c: added in utk changes plus some minor cosmetic changes
17501:
17502: 1995-03-24 14:17 millert
17503:
17504: * sudo.c, sudo_realpath.c: added void casts for printf's
17505:
17506: 1995-03-24 14:17 millert
17507:
17508: * options.h: added a define of USE_REALPATH
17509:
17510: 1995-03-24 14:17 millert
17511:
17512: * configure.in: there is no more visudoers/Makefile
17513:
17514: 1995-03-24 14:16 millert
17515:
17516: * Makefile.in: added in utk changes (visudo is now built from the
17517: toplevel)
17518:
17519: 1995-03-24 14:15 millert
17520:
17521: * find_path.c: added (void) casts to printf's
17522:
17523: 1995-03-23 22:32 millert
17524:
17525: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17526: in utk changes
17527:
17528: 1995-03-22 23:13 millert
17529:
17530: * find_path.c: now check to see that what we are trying to run is a
17531: file (or a link to a file, we do a stat(2) so there is no diff)
17532:
17533: 1995-03-13 15:56 millert
17534:
17535: * CHANGES: updated
17536:
17537: 1995-03-13 15:56 millert
17538:
17539: * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17540: new autoconf
17541:
17542: 1995-03-13 15:11 millert
17543:
17544: * sudo.man: added myself as maintainer
17545:
17546: 1995-02-16 23:31 millert
17547:
17548: * sudo.c: changed setegid -> setgid
17549:
17550: 1995-02-06 17:43 millert
17551:
17552: * configure.in: fixed the test for irix 5.x to skip bad libs
17553:
17554: 1995-02-06 17:43 millert
17555:
17556: * aclocal.m4: now initialize OS and OSREV
17557:
17558: 1995-01-26 20:52 millert
17559:
17560: * configure.in: irix5 changes
17561:
17562: 1995-01-26 20:28 millert
17563:
17564: * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17565: for autoconf 2.1 compatibility
17566:
17567: 1995-01-18 19:49 millert
17568:
17569: * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17570: do the righ thing wrt yyrestart (grrrr)
17571:
17572: 1995-01-16 18:44 millert
17573:
17574: * Makefile.in: added visudoers/compat.h to DISTFILES
17575:
17576: 1995-01-16 17:01 millert
17577:
17578: * configure.in: fixed an echo
17579:
17580: 1995-01-16 16:36 millert
17581:
17582: * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17583: parameters
17584:
17585: 1995-01-16 16:35 millert
17586:
17587: * sudo.h: added ocmnd extern adjusted find_path() prototype
17588:
17589: 1995-01-16 16:34 millert
17590:
17591: * parse.c: cmndcmp() now takes 3 arguments and checks against the
17592: qualified as well as the unqualified pathname. more code that
17593: should use cmndcmp() but did not, now does
17594:
17595: 1995-01-16 16:34 millert
17596:
17597: * options.h: added to a comment
17598:
17599: 1995-01-16 16:33 millert
17600:
17601: * logging.c: changed to use new find_path() parameter passing
17602:
17603: 1995-01-16 16:32 millert
17604:
17605: * find_path.c: find_path() now takes 2 copyout parameters (one for
17606: the qualified pathname and one for the unqualified pathname).
17607: The third parameter may be NULL.
17608:
17609: 1995-01-16 16:31 millert
17610:
17611: * configure.in: no longer munge pathnames.h
17612:
17613: 1995-01-16 16:30 millert
17614:
17615: * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17616: defined in config.h) as a result, pathnames.h does not need to be
17617: run through configure and the user can override the configured
17618: values easily.
17619:
17620: 1995-01-16 16:30 millert
17621:
17622: * config.h.in: added _SUDO_PATH_* entries
17623:
17624: 1995-01-16 16:30 millert
17625:
17626: * aclocal.m4: _PATH* -> _SUDO_PATH_*
17627:
17628: 1995-01-16 16:28 millert
17629:
17630: * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17631: config.h
17632:
17633: 1995-01-13 12:52 millert
17634:
17635: * compat.h: removed extraneous #endif
17636:
17637: 1995-01-13 12:48 millert
17638:
17639: * aclocal.m4: added SUDO_PROG_MV
17640:
17641: 1995-01-13 12:47 millert
17642:
17643: * configure.in: added SUDO_PROG_MV added riscos and isc os types
17644: took out -DSHORT_MESSAGE from --with-csops since it is now the
17645: default
17646:
17647: 1995-01-13 12:46 millert
17648:
17649: * sudo.c: move the include of id.h to compat.h now includes
17650: options.h
17651:
17652: 1995-01-13 12:45 millert
17653:
17654: * sudo.h: moved compatibility #defines to compat.h
17655:
17656: 1995-01-13 12:45 millert
17657:
17658: * pathnames.h.in: added _PATH_MV
17659:
17660: 1995-01-13 12:43 millert
17661:
17662: * config.h.in: move __P to compat.h
17663:
17664: 1995-01-13 12:39 millert
17665:
17666: * getcwd.c, getwd.c, putenv.c: now includes compat.h
17667:
17668: 1995-01-13 12:39 millert
17669:
17670: * compat.h: Initial revision
17671:
17672: 1995-01-11 19:11 millert
17673:
17674: * sudo.h: pull user-configurable stuff out and put in options.h
17675:
17676: 1995-01-11 18:43 millert
17677:
17678: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17679: sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17680: options.h
17681:
17682: 1995-01-11 18:41 millert
17683:
17684: * Makefile.in: added visudoers/options.h
17685:
17686: 1995-01-11 18:40 millert
17687:
17688: * options.h, OPTIONS: Initial revision
17689:
17690: 1995-01-11 18:39 millert
17691:
17692: * Makefile.in: added OPTIONS and options.h
17693:
17694: 1995-01-11 18:36 millert
17695:
17696: * logging.c: changed #ifdef's to use LOGGING and
17697: SLOG_SYSLOG/SLOG_FILE
17698:
17699: 1995-01-11 11:02 millert
17700:
17701: * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17702:
17703: 1994-12-17 18:18 millert
17704:
17705: * visudo.c: now only do Editor +line_num if line_num != 0
17706:
17707: 1994-12-15 21:06 millert
17708:
17709: * visudo.c: now use mv if rename(2) fails
17710:
17711: 1994-12-15 20:32 millert
17712:
17713: * BUGS: added a visudo bug
17714:
17715: 1994-12-15 19:46 millert
17716:
17717: * check.c: expanded comment
17718:
17719: 1994-11-12 18:33 millert
17720:
17721: * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
17722: set
17723:
17724: 1994-11-09 19:49 millert
17725:
17726: * sudo.c: added mips & isc support
17727:
17728: 1994-11-09 19:49 millert
17729:
17730: * parse.c: added support for non-root owned sudoers file
17731:
17732: 1994-11-09 19:48 millert
17733:
17734: * check.c: added exempt group support
17735:
17736: 1994-11-09 19:47 millert
17737:
17738: * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
17739: non-root own sudoers file added exempt group support added isc
17740: support
17741:
17742: 1994-11-09 19:46 millert
17743:
17744: * visudo.c: now copy sudoers to temp file via read/write (not
17745: stdio) now chown new sudoers file to SUDOERS_OWNER
17746:
17747: 1994-11-07 20:40 millert
17748:
17749: * configure.in: added skey support
17750:
17751: 1994-11-07 20:39 millert
17752:
17753: * sudo.h: fixed typo added set_perms support added skey support
17754: added seteuid()/setegid() emulation for AIX
17755:
17756: 1994-11-07 20:38 millert
17757:
17758: * sudo.c: be_* -> setperms() now check to make sure sudoers file is
17759: owned by root nread/write by only root
17760:
17761: 1994-11-07 20:38 millert
17762:
17763: * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
17764:
17765: 1994-11-07 20:38 millert
17766:
17767: * check.c: be_* -> set_perms() added skey support
17768:
17769: 1994-11-06 18:59 millert
17770:
17771: * Makefile.in: ++version
17772:
17773: 1994-11-06 18:59 millert
17774:
17775: * version.h: ++
17776:
17777: 1994-10-21 13:16 millert
17778:
17779: * sudo.c: now sets IFS
17780:
17781: 1994-10-21 12:02 millert
17782:
17783: * insults.h: fixed typo
17784:
17785: 1994-10-15 15:48 millert
17786:
17787: * config.h.in: added HAVE_SKEY
17788:
17789: 1994-10-04 13:00 millert
17790:
17791: * CHANGES: updated
17792:
17793: 1994-10-04 12:57 millert
17794:
17795: * Makefile.in: ++version
17796:
17797: 1994-10-04 12:57 millert
17798:
17799: * version.h: ++
17800:
17801: 1994-10-04 12:56 millert
17802:
17803: * sudo.c: now bail if ARgv[1] > MAXPATHLEN
17804:
17805: 1994-10-04 12:56 millert
17806:
17807: * configure.in: added function check for tcgetattr(3)
17808:
17809: 1994-10-04 12:55 millert
17810:
17811: * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
17812:
17813: 1994-10-04 12:53 millert
17814:
17815: * config.h.in: added check for tcgetattr
17816:
17817: 1994-09-26 17:38 millert
17818:
17819: * CHANGES: updated
17820:
17821: 1994-09-22 13:30 millert
17822:
17823: * parse.lex: now only include unistd.h for linux
17824:
17825: 1994-09-21 14:29 millert
17826:
17827: * Makefile.in: added visudo.8 generation
17828:
17829: 1994-09-21 14:07 millert
17830:
17831: * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
17832:
17833: 1994-09-20 19:39 millert
17834:
17835: * BUGS: added one
17836:
17837: 1994-09-20 19:39 millert
17838:
17839: * CHANGES: updated
17840:
17841: 1994-09-20 19:38 millert
17842:
17843: * README: added mailing list info
17844:
17845: 1994-09-20 19:37 millert
17846:
17847: * parse.yacc: now use sudolineno instead of yylineno fixed bison
17848: warnings
17849:
17850: 1994-09-20 19:37 millert
17851:
17852: * configure.in: now use -no_library_replacement for osf don't make
17853: a static binary for hpux >= 9.0
17854:
17855: 1994-09-20 19:21 millert
17856:
17857: * tgetpass.c: added string.h/strings.h inclusion
17858:
17859: 1994-09-20 19:21 millert
17860:
17861: * config.h.in: added ssize_t def
17862:
17863: 1994-09-20 19:18 millert
17864:
17865: * parse.lex: added inclusion of string.h/strings.h
17866:
17867: 1994-09-20 18:48 millert
17868:
17869: * aclocal.m4: fixed uname | sed (needed to quote the '[')
17870:
17871: 1994-09-20 18:42 millert
17872:
17873: * parse.lex: replaced yylineno with sudolineno fixed bison syntax
17874: errors
17875:
17876: 1994-09-20 18:13 millert
17877:
17878: * visudo.c: changed yylineno to sudolineno since yylineno cannot be
17879: counted upon.
17880:
17881: 1994-09-20 18:10 millert
17882:
17883: * TODO: updated
17884:
17885: 1994-09-20 17:52 millert
17886:
17887: * parse.c: added code to support command listings
17888:
17889: 1994-09-20 17:36 millert
17890:
17891: * sudo.c: added code for -l flag
17892:
17893: 1994-09-20 17:35 millert
17894:
17895: * sudo.man: fixed typo added info for -l flag
17896:
17897: 1994-09-20 14:45 millert
17898:
17899: * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
17900:
17901: 1994-09-20 14:45 millert
17902:
17903: * aclocal.m4: added SUDO_SSIZE_T
17904:
17905: 1994-09-20 14:44 millert
17906:
17907: * sudo.h: added MODE_LIST
17908:
17909: 1994-09-20 14:43 millert
17910:
17911: * configure.in: added AC_SSIZE_T
17912:
17913: 1994-09-19 20:53 millert
17914:
17915: * find_path.c, sudo_realpath.c: readlink() is now declared as
17916: returning ssize~_t
17917:
17918: 1994-09-19 20:44 millert
17919:
17920: * configure.in: added -laud for OSF c2
17921:
17922: 1994-09-02 15:55 millert
17923:
17924: * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
17925: Makefile.in: changed sudo-bugs.cs.colorado.edu ->
17926: sudo-bugs@cs.colorado.edu
17927:
17928: 1994-09-02 15:54 millert
17929:
17930: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
17931: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
17932: sudo_setenv.c, tgetpass.c, version.h: changed
17933: sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
17934:
17935: 1994-09-01 15:56 millert
17936:
17937: * Makefile.in: ++version
17938:
17939: 1994-09-01 15:55 millert
17940:
17941: * version.h: ++
17942:
17943: 1994-09-01 15:55 millert
17944:
17945: * logging.c: added host to alertmail messages
17946:
17947: 1994-09-01 15:55 millert
17948:
17949: * CHANGES, TODO: udpated
17950:
17951: 1994-09-01 15:26 millert
17952:
17953: * logging.c: fixed logging problem where mail would not say which
17954: user it was
17955:
17956: 1994-09-01 13:45 millert
17957:
17958: * configure.in: added -laud for gcc if osf & c2
17959:
17960: 1994-09-01 13:39 millert
17961:
17962: * check.c: moved set_auth_parameters to sudo.c
17963:
17964: 1994-09-01 13:38 millert
17965:
17966: * sudo.c: added set_auth_parameters for osf
17967:
17968: 1994-09-01 13:22 millert
17969:
17970: * configure.in: cleaned up -static stuff
17971:
17972: 1994-09-01 13:15 millert
17973:
17974: * Makefile.in: ++version
17975:
17976: 1994-09-01 13:15 millert
17977:
17978: * version.h: ++
17979:
17980: 1994-09-01 13:15 millert
17981:
17982: * sudo.c: changed setenv() to sudo_setenv()
17983:
17984: 1994-09-01 13:12 millert
17985:
17986: * check.c: fixed osf problem
17987:
17988: 1994-08-31 22:17 millert
17989:
17990: * configure.in: added OSF C2 stuff
17991:
17992: 1994-08-31 22:00 millert
17993:
17994: * CHANGES: updated
17995:
17996: 1994-08-31 21:56 millert
17997:
17998: * check.c: added osf auth support & removed some extra spaces
17999:
18000: 1994-08-31 21:52 millert
18001:
18002: * INSTALL, SUPPORTED: added osf C2 stuff
18003:
18004: 1994-08-31 19:52 millert
18005:
18006: * TODO: added 2 suggestions
18007:
18008: 1994-08-31 19:33 millert
18009:
18010: * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18011:
18012: 1994-08-31 18:48 millert
18013:
18014: * version.h: pl1
18015:
18016: 1994-08-30 18:31 millert
18017:
18018: * version.h: 1.3.1final
18019:
18020: 1994-08-30 18:30 millert
18021:
18022: * Makefile.in: added HISTORY
18023:
18024: 1994-08-30 18:30 millert
18025:
18026: * sudo.man: mention HISTPRY file
18027:
18028: 1994-08-30 18:30 millert
18029:
18030: * sudo.c: use sizeof instead of a constant in 1 place
18031:
18032: 1994-08-30 18:30 millert
18033:
18034: * parse.yacc: added unistd.h
18035:
18036: 1994-08-30 18:29 millert
18037:
18038: * parse.lex: added unistd.h
18039:
18040: 1994-08-30 18:27 millert
18041:
18042: * README: udpated
18043:
18044: 1994-08-30 18:15 millert
18045:
18046: * HISTORY: Initial revision
18047:
18048: 1994-08-17 12:45 millert
18049:
18050: * version.h: ++
18051:
18052: 1994-08-17 12:39 millert
18053:
18054: * CHANGES: updated
18055:
18056: 1994-08-17 12:36 millert
18057:
18058: * sudo_setenv.c: added unistd.h include
18059:
18060: 1994-08-16 15:46 millert
18061:
18062: * sudo.c: added sys/time.h for AIX
18063:
18064: 1994-08-14 21:22 millert
18065:
18066: * configure.in: added check for -lsocket and sys/sockio.h
18067:
18068: 1994-08-14 21:21 millert
18069:
18070: * config.h.in: took out libshadow check and added in sys/sockio.h
18071: check
18072:
18073: 1994-08-14 21:21 millert
18074:
18075: * sudo.c: now include sockio.h instead of ioctl.h if it exists
18076: "sudo -" now gets a better error message
18077:
18078: 1994-08-14 20:47 millert
18079:
18080: * sample.sudoers: now has a dir and subnet entry
18081:
18082: 1994-08-13 18:15 millert
18083:
18084: * sudo.c: removed if_ether.h
18085:
18086: 1994-08-13 17:16 millert
18087:
18088: * TODO: added an item
18089:
18090: 1994-08-13 17:15 millert
18091:
18092: * sudo.man: added network and ip addresses to man page
18093:
18094: 1994-08-13 17:09 millert
18095:
18096: * sudo.c: no error if can't get interfaces or netmask since
18097: networking may not be in the kernel.
18098:
18099: 1994-08-13 17:08 millert
18100:
18101: * parse.c: nwo check for interfaces == NULL
18102:
18103: 1994-08-12 21:22 millert
18104:
18105: * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18106: to fail if the last entry in the spec failed (ie: it was only
18107: looking at the last entry). CLeaned things up by adding the
18108: cmndcmp() function--all neat & tidy
18109:
18110: 1994-08-12 21:21 millert
18111:
18112: * CHANGES: added one
18113:
18114: 1994-08-11 23:42 millert
18115:
18116: * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18117:
18118: 1994-08-11 21:58 millert
18119:
18120: * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18121: netinet/in.h
18122:
18123: 1994-08-11 21:58 millert
18124:
18125: * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18126: visudo.c: added include of netinet/in.h
18127:
18128: 1994-08-11 21:57 millert
18129:
18130: * version.h: ++
18131:
18132: 1994-08-11 21:57 millert
18133:
18134: * sudo.h: added interfaces global
18135:
18136: 1994-08-11 21:56 millert
18137:
18138: * parse.c: now uses new interfaces global
18139:
18140: 1994-08-11 21:56 millert
18141:
18142: * sudo.c: now ip addresses are gleaned fw/o dns
18143:
18144: 1994-08-10 19:21 millert
18145:
18146: * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18147:
18148: 1994-08-10 19:21 millert
18149:
18150: * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18151: network addrs
18152:
18153: 1994-08-10 19:20 millert
18154:
18155: * sudo.h: added ip_addrs def added load_ip_addrs prototype
18156:
18157: 1994-08-08 16:03 millert
18158:
18159: * CHANGES: updated
18160:
18161: 1994-08-08 15:57 millert
18162:
18163: * Makefile.in: removed multiple entries in DISTFILES
18164:
18165: 1994-08-08 13:05 millert
18166:
18167: * visudo.c: ansified the !STDC_HEADERS decls
18168:
18169: 1994-08-08 13:05 millert
18170:
18171: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18172: malloc decl if gnuc
18173:
18174: 1994-08-08 13:04 millert
18175:
18176: * sudo.c: can't use getopt(3) since it munges args to the command
18177: to be run as root don't do malloc decl if gnuc
18178:
18179: 1994-08-08 00:41 millert
18180:
18181: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18182: sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18183: prottypes
18184:
18185: 1994-08-08 00:27 millert
18186:
18187: * getcwd.c, getwd.c: added missing paren
18188:
18189: 1994-08-08 00:23 millert
18190:
18191: * Makefile.in: added putenv.c to DISTFILES
18192:
18193: 1994-08-08 00:08 millert
18194:
18195: * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18196: not defined now can count on putenv() being there
18197:
18198: 1994-08-08 00:08 millert
18199:
18200: * sudo_realpath.c: took out errno decl since sudo.h does it for us
18201: fixed up a next cc warning added params to func decls when
18202: STDC_HEADERS is not defined
18203:
18204: 1994-08-08 00:07 millert
18205:
18206: * sudo.h: took out environ extern added local declaratio of
18207: putenv() if local version is needed
18208:
18209: 1994-08-08 00:05 millert
18210:
18211: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18212: func decls when STDC_HEADERS is not defined
18213:
18214: 1994-08-08 00:04 millert
18215:
18216: * config.h.in: added memcpy check check to see that ansi vs bsd
18217: macros are ntot already defiend before defining (ie: avoid
18218: redefinition)
18219:
18220: 1994-08-08 00:03 millert
18221:
18222: * configure.in: removed fluff setenv check plus check w/ replace
18223: for putenv if also no setenv
18224:
18225: 1994-08-08 00:01 millert
18226:
18227: * putenv.c: Initial revision
18228:
18229: 1994-08-06 19:19 millert
18230:
18231: * sudo_setenv.c: Initial revision
18232:
18233: 1994-08-06 19:19 millert
18234:
18235: * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18236:
18237: 1994-08-06 19:19 millert
18238:
18239: * sudo.c: now use sudo_setenvc
18240:
18241: 1994-08-06 19:18 millert
18242:
18243: * configure.in: added puteenv and setenv, removed realpath
18244:
18245: 1994-08-06 19:18 millert
18246:
18247: * config.h.in: added putenv & setenv
18248:
18249: 1994-08-06 19:18 millert
18250:
18251: * Makefile.in: added sudo_setenv
18252:
18253: 1994-08-06 19:16 millert
18254:
18255: * version.h: ++
18256:
18257: 1994-08-05 19:43 millert
18258:
18259: * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18260: irix
18261:
18262: 1994-08-05 19:43 millert
18263:
18264: * Makefile.in: added MAN_POSTINSTALL
18265:
18266: 1994-08-05 19:43 millert
18267:
18268: * CHANGES: added
18269:
18270: 1994-08-05 19:10 millert
18271:
18272: * sudo.man: added SUDO_* plus new options
18273:
18274: 1994-08-05 19:10 millert
18275:
18276: * CHANGES: added one
18277:
18278: 1994-08-05 19:07 millert
18279:
18280: * configure.in: took out shadow lib
18281:
18282: 1994-08-05 18:35 millert
18283:
18284: * TODO: adde done
18285:
18286: 1994-08-05 17:52 millert
18287:
18288: * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18289:
18290: 1994-08-05 17:49 millert
18291:
18292: * Makefile.in: support for installing a cat page instead of a man
18293: page if no nroff
18294:
18295: 1994-08-05 17:48 millert
18296:
18297: * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18298: looks for nroff to determine whether or not to install a cat or
18299: man page
18300:
18301: 1994-08-05 17:48 millert
18302:
18303: * config.h.in: added HAVE_FLEX
18304:
18305: 1994-08-05 16:14 millert
18306:
18307: * sudo.c: not set ret to MODE_RUN initially
18308:
18309: 1994-08-05 16:12 millert
18310:
18311: * find_path.c: made command (and therefor cmnd dynamically
18312: allocated)
18313:
18314: 1994-08-04 20:25 millert
18315:
18316: * TODO: did #8
18317:
18318: 1994-08-04 20:24 millert
18319:
18320: * version.h: ++
18321:
18322: 1994-08-04 20:24 millert
18323:
18324: * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18325:
18326: 1994-08-04 20:24 millert
18327:
18328: * sudo.h: added MODE_ removed validate_only and added
18329: remove_timestamp()
18330:
18331: 1994-08-04 20:22 millert
18332:
18333: * sudo.c: usage() now takes an int (exit value) added parse_args()
18334: to parse command line arguments moved call to find_path() from
18335: load_globals to new function load_cmnd() removed validate_only
18336: global -- now use the concept of "modes" added -h and -k options
18337:
18338: 1994-08-04 20:21 millert
18339:
18340: * parse.c: no longer use global validate_only now checks for
18341: command called "validate" removed check for non-fully qualified
18342: commands since that is done by find_path
18343:
18344: 1994-08-04 20:20 millert
18345:
18346: * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18347:
18348: 1994-08-04 20:17 millert
18349:
18350: * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18351: comment
18352:
18353: 1994-08-04 20:17 millert
18354:
18355: * check.c: check_timestamp no longer runs reminder(), it is implied
18356: in the return val added remove_timestamp()
18357:
18358: 1994-08-04 20:16 millert
18359:
18360: * CHANGES: updated
18361:
18362: 1994-08-04 16:38 millert
18363:
18364: * BUGS: fixed on
18365:
18366: 1994-08-04 16:38 millert
18367:
18368: * sudo_realpath.c: took out old_errno
18369:
18370: 1994-08-04 16:37 millert
18371:
18372: * CHANGES: updated
18373:
18374: 1994-08-03 12:08 millert
18375:
18376: * logging.c: moved send_mail to after syslog
18377:
18378: 1994-08-02 22:41 millert
18379:
18380: * sudo.c: now set SUDO_ envariables
18381:
18382: 1994-08-01 13:40 millert
18383:
18384: * version.h: ++
18385:
18386: 1994-08-01 13:39 millert
18387:
18388: * sudo_realpath.c: now print error if chdir fails
18389:
18390: 1994-08-01 13:39 millert
18391:
18392: * find_path.c: removed an XXX
18393:
18394: 1994-07-25 20:40 millert
18395:
18396: * CHANGES: updated
18397:
18398: 1994-07-25 20:36 millert
18399:
18400: * configure.in: no more static binaries for aix
18401:
18402: 1994-07-25 18:37 millert
18403:
18404: * INSTALL: fixed typo
18405:
18406: 1994-07-25 18:33 millert
18407:
18408: * sudo_realpath.c: took out stuff not needed for sudo now does
18409: be_root/be_user itself now uses cwd global
18410:
18411: 1994-07-25 18:32 millert
18412:
18413: * version.h: +=2
18414:
18415: 1994-07-25 18:31 millert
18416:
18417: * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18418:
18419: 1994-07-25 18:26 millert
18420:
18421: * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18422:
18423: 1994-07-25 18:25 millert
18424:
18425: * find_path.c: now use sudo_realpath()
18426:
18427: 1994-07-25 18:25 millert
18428:
18429: * config.h.in: took out realpth() stuff since we now use
18430: sudo_realpath()
18431:
18432: 1994-07-25 18:25 millert
18433:
18434: * configure.in: ultrix enhanced sec
18435:
18436: 1994-07-25 18:25 millert
18437:
18438: * SUPPORTED: added ultrix enhanced sec.
18439:
18440: 1994-07-25 18:24 millert
18441:
18442: * INSTALL: updated
18443:
18444: 1994-07-25 18:21 millert
18445:
18446: * check.c: ultrix enhanced security suport
18447:
18448: 1994-07-25 18:20 millert
18449:
18450: * Makefile.in: added sudo_realpath.c
18451:
18452: 1994-07-25 18:18 millert
18453:
18454: * CHANGES: updated
18455:
18456: 1994-07-25 14:28 millert
18457:
18458: * tgetpass.c: increased passwd len to 24 for c2 security
18459:
18460: 1994-07-25 13:17 millert
18461:
18462: * BUGS: updated BUGS
18463:
18464: 1994-07-15 11:49 millert
18465:
18466: * check.c: now use user global var
18467:
18468: 1994-07-15 11:48 millert
18469:
18470: * configure.in: took out -ls
18471:
18472: 1994-07-14 19:11 millert
18473:
18474: * configure.in: added AFS libs
18475:
18476: 1994-07-14 17:45 millert
18477:
18478: * sudo.h: user is now a char * added epasswd
18479:
18480: 1994-07-14 17:43 millert
18481:
18482: * sudo.c: added tzset() to load_globals added epasswd (encrypted
18483: password) global made user dynamically allocated
18484:
18485: 1994-07-14 17:43 millert
18486:
18487: * configure.in: added tzset test
18488:
18489: 1994-07-14 17:43 millert
18490:
18491: * config.h.in: added HAVE_TZSET
18492:
18493: 1994-07-14 17:42 millert
18494:
18495: * check.c: cleaned up encrypted passwd grab somewhat
18496:
18497: 1994-07-14 12:34 millert
18498:
18499: * configure.in: fixed AFS typo
18500:
18501: 1994-07-14 12:34 millert
18502:
18503: * INSTALL: added AFS not
18504:
18505: 1994-07-14 12:34 millert
18506:
18507: * CHANGES: udpated
18508:
18509: 1994-07-14 12:33 millert
18510:
18511: * logging.c: can now log to both syslog & a file
18512:
18513: 1994-07-14 12:12 millert
18514:
18515: * sudo.h: added BOTH_LOGS
18516:
18517: 1994-07-14 11:34 millert
18518:
18519: * CHANGES: updated
18520:
18521: 1994-07-14 11:32 millert
18522:
18523: * configure.in: --with-AFS
18524:
18525: 1994-07-14 11:32 millert
18526:
18527: * config.h.in: added HAVE_AFS
18528:
18529: 1994-07-14 11:31 millert
18530:
18531: * check.c: added afs changes
18532:
18533: 1994-07-14 11:21 millert
18534:
18535: * sudo.h: removed AFS stuff :-)
18536:
18537: 1994-07-14 11:19 millert
18538:
18539: * tgetpass.c: include sys/select for AIX
18540:
18541: 1994-07-14 11:17 millert
18542:
18543: * sudo.h: added AFS
18544:
18545: 1994-07-14 11:16 millert
18546:
18547: * version.h: ++
18548:
18549: 1994-07-07 14:45 millert
18550:
18551: * SUPPORTED, CHANGES: updated
18552:
18553: 1994-07-07 14:44 millert
18554:
18555: * logging.c: can now have MAILER undefined
18556:
18557: 1994-07-07 14:37 millert
18558:
18559: * INSTALL: new sub-note about MAILER
18560:
18561: 1994-07-06 23:11 millert
18562:
18563: * sudo.man: added blurb about password timeout
18564:
18565: 1994-07-06 20:52 millert
18566:
18567: * configure.in: convex c2 changes
18568:
18569: 1994-07-06 20:52 millert
18570:
18571: * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18572:
18573: 1994-07-06 20:51 millert
18574:
18575: * Makefile.in: added OSDEFS
18576:
18577: 1994-07-06 20:46 millert
18578:
18579: * config.h.in: added spaces
18580:
18581: 1994-07-06 20:08 millert
18582:
18583: * tgetpass.c: added a goto if fgets fails
18584:
18585: 1994-07-06 20:08 millert
18586:
18587: * sudo.h: use __hpux not hpux convex c2 stuff
18588:
18589: 1994-07-06 20:08 millert
18590:
18591: * sudo.c: use __hpux not hpux
18592:
18593: 1994-07-06 20:08 millert
18594:
18595: * logging.c: convex c2 stuff
18596:
18597: 1994-07-06 20:07 millert
18598:
18599: * config.h.in: define ansi-ish cpp os defines if non-ansi are
18600: defined for hpux & convex
18601:
18602: 1994-07-06 20:07 millert
18603:
18604: * INSTALL: updated to say we support sonvex C2
18605:
18606: 1994-07-06 20:05 millert
18607:
18608: * check.c: added convex c2 support
18609:
18610: 1994-07-01 12:06 millert
18611:
18612: * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18613: select() to timeout
18614:
18615: 1994-06-29 17:04 millert
18616:
18617: * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18618:
18619: 1994-06-29 16:39 millert
18620:
18621: * tgetpass.c: now works + uses fgets()
18622:
18623: 1994-06-28 18:25 millert
18624:
18625: * tgetpass.c: select doesn't seem to recognize a single '\n' as
18626: input waiting so we can;t use it, sigh.
18627:
18628: 1994-06-26 16:38 millert
18629:
18630: * PORTING: updated tgetpass() blurb
18631:
18632: 1994-06-26 16:35 millert
18633:
18634: * configure.in: added --with-getpass
18635:
18636: 1994-06-26 16:35 millert
18637:
18638: * Makefile.in: added tgetpass stuff
18639:
18640: 1994-06-26 15:25 millert
18641:
18642: * tgetpass.c: now uses stdio
18643:
18644: 1994-06-26 15:17 millert
18645:
18646: * version.h: ++
18647:
18648: 1994-06-24 19:48 millert
18649:
18650: * PORTING: updated ,.
18651:
18652: 1994-06-24 19:46 millert
18653:
18654: * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18655:
18656: 1994-06-24 19:45 millert
18657:
18658: * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18659:
18660: 1994-06-24 19:45 millert
18661:
18662: * check.c: added hpux C2 shit
18663:
18664: 1994-06-24 19:45 millert
18665:
18666: * Makefile.in: took out tgetpass.*
18667:
18668: 1994-06-24 19:45 millert
18669:
18670: * INSTALL: added C2 blurb
18671:
18672: 1994-06-13 15:54 millert
18673:
18674: * configure.in: no termio(s) for ultrix since it is broken
18675:
18676: 1994-06-13 15:41 millert
18677:
18678: * check.c: added a space (yeah, anal)
18679:
18680: 1994-06-13 15:17 millert
18681:
18682: * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18683:
18684: 1994-06-08 14:34 millert
18685:
18686: * config.h.in: took out bsd signal stuff for irix
18687:
18688: 1994-06-08 14:26 millert
18689:
18690: * visudo.c: comments in #endif
18691:
18692: 1994-06-08 14:09 millert
18693:
18694: * configure.in: don't define BSD signals for irix
18695:
18696: 1994-06-08 12:57 millert
18697:
18698: * TODO: did some...
18699:
18700: 1994-06-08 12:57 millert
18701:
18702: * CHANGES: updated
18703:
18704: 1994-06-08 12:56 millert
18705:
18706: * realpath.c, sudo_realpath.c: took out unneeded code by changing
18707: where a strings was terminated
18708:
18709: 1994-06-07 19:21 millert
18710:
18711: * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18712: NULL
18713:
18714: 1994-06-07 17:40 millert
18715:
18716: * sudo.h: move __P to config.h
18717:
18718: 1994-06-07 17:40 millert
18719:
18720: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
18721: definition
18722:
18723: 1994-06-07 17:40 millert
18724:
18725: * config.h.in: added __P
18726:
18727: 1994-06-07 17:21 millert
18728:
18729: * config.h.in: added HAVE_FCHDIR
18730:
18731: 1994-06-07 17:18 millert
18732:
18733: * strdup.c: now include stdio
18734:
18735: 1994-06-07 14:55 millert
18736:
18737: * realpath.c, sudo_realpath.c: now works if no fchdir
18738:
18739: 1994-06-07 14:55 millert
18740:
18741: * visudo.c: define SA_RESETHAND to null if not defined
18742:
18743: 1994-06-07 14:54 millert
18744:
18745: * configure.in: added check & replace
18746:
18747: 1994-06-06 20:05 millert
18748:
18749: * configure.in: took out -static for nextstep -- it doesn't work
18750:
18751: 1994-06-06 19:59 millert
18752:
18753: * logging.c: moved #endif to where it belongs
18754:
18755: 1994-06-06 19:54 millert
18756:
18757: * SUPPORTED: correction
18758:
18759: 1994-06-06 19:42 millert
18760:
18761: * configure.in: now checks for strdup realpath getcwd bzero
18762:
18763: 1994-06-06 19:31 millert
18764:
18765: * config.h.in: emulate bzero
18766:
18767: 1994-06-06 16:57 millert
18768:
18769: * visudo.c: added posic signals
18770:
18771: 1994-06-06 16:57 millert
18772:
18773: * tgetpass.c: bzero cast
18774:
18775: 1994-06-06 16:57 millert
18776:
18777: * logging.c: added posix signals
18778:
18779: 1994-06-06 16:56 millert
18780:
18781: * configure.in: removed BROKEN_GETPASS added new srcs toreplace
18782: missing functions
18783:
18784: 1994-06-06 16:56 millert
18785:
18786: * config.h.in: added posix signal stuff
18787:
18788: 1994-06-06 16:56 millert
18789:
18790: * Makefile.in: added new srcs
18791:
18792: 1994-06-06 12:53 millert
18793:
18794: * visudo.c: updated useag
18795:
18796: 1994-06-06 12:39 millert
18797:
18798: * tgetpass.c: now uses posix signals
18799:
18800: 1994-06-05 20:17 millert
18801:
18802: * PORTING: updated sto reflect major changes
18803:
18804: 1994-06-05 20:05 millert
18805:
18806: * TODO, CHANGES: updated
18807:
18808: 1994-06-05 20:04 millert
18809:
18810: * tgetpass.c: uses sysconf() if available
18811:
18812: 1994-06-05 20:04 millert
18813:
18814: * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
18815:
18816: 1994-06-05 20:04 millert
18817:
18818: * realpath.c, sudo_realpath.c: for those w/o this in libc
18819:
18820: 1994-06-05 20:03 millert
18821:
18822: * getcwd.c, getwd.c: Initial revision
18823:
18824: 1994-06-05 20:03 millert
18825:
18826: * find_path.c: rewrote to use realpath(3) - nis now all my code
18827:
18828: 1994-06-05 20:02 millert
18829:
18830: * config.h.in: added HAVE_REALPATH
18831:
18832: 1994-06-05 20:02 millert
18833:
18834: * check.c: now use tgetpass
18835:
18836: 1994-06-05 20:02 millert
18837:
18838: * Makefile.in: added LIBOBJS use tgetpass.c
18839:
18840: 1994-06-05 18:55 millert
18841:
18842: * tgetpass.c: works now :-)
18843:
18844: 1994-06-05 18:27 millert
18845:
18846: * tgetpass.c: Initial revision
18847:
18848: 1994-06-05 17:17 millert
18849:
18850: * pathnames.h.in: added /dev/tty
18851:
18852: 1994-06-04 17:12 millert
18853:
18854: * version.h: incremented
18855:
18856: 1994-06-04 15:29 millert
18857:
18858: * sudo.c: always use getcwd
18859:
18860: 1994-06-04 14:49 millert
18861:
18862: * config.h.in: added check for getwd
18863:
18864: 1994-06-04 14:48 millert
18865:
18866: * configure.in: replace strdup & realpath & getcwd if missing
18867:
18868: 1994-06-04 14:47 millert
18869:
18870: * pathnames.h.in: added _PATH_PWD
18871:
18872: 1994-06-04 14:46 millert
18873:
18874: * aclocal.m4: added SUDO_PROG_PWD
18875:
18876: 1994-06-04 14:37 millert
18877:
18878: * realpath.c, sudo_realpath.c, strdup.c: Initial revision
18879:
18880: 1994-06-03 11:31 millert
18881:
18882: * configure.in: quoted quare brackets
18883:
18884: 1994-06-02 17:49 millert
18885:
18886: * sudo.c: no need to strdup() a constant
18887:
18888: 1994-06-02 15:45 millert
18889:
18890: * CHANGES: updated
18891:
18892: 1994-06-02 15:44 millert
18893:
18894: * sudo.man: added validate
18895:
18896: 1994-06-02 15:42 millert
18897:
18898: * sudo.c: added -v to usage
18899:
18900: 1994-06-02 15:41 millert
18901:
18902: * parse.c, sudo.c, sudo.h: added validate_only stuff
18903:
18904: 1994-05-29 21:29 millert
18905:
18906: * configure.in: now finds sed
18907:
18908: 1994-05-29 21:28 millert
18909:
18910: * aclocal.m4: $OSREV is now an int
18911:
18912: 1994-05-29 19:13 millert
18913:
18914: * configure.in: added mtxinu to caser
18915:
18916: 1994-05-29 18:37 millert
18917:
18918: * sudo.h: added EXEC macro
18919:
18920: 1994-05-29 18:36 millert
18921:
18922: * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
18923: FQDN is set
18924:
18925: 1994-05-29 18:36 millert
18926:
18927: * logging.c: changed mail_argv[] def now use EXEC() macro
18928:
18929: 1994-05-29 18:35 millert
18930:
18931: * check.c: took out crypt() definition
18932:
18933: 1994-05-29 17:23 millert
18934:
18935: * version.h: upped the version
18936:
18937: 1994-05-29 15:52 millert
18938:
18939: * configure.in: always look for -lnsl
18940:
18941: 1994-05-29 15:29 millert
18942:
18943: * aclocal.m4: added an echo
18944:
18945: 1994-05-29 15:25 millert
18946:
18947: * sudo.h: SHORT_MESSAGE is now the default
18948:
18949: 1994-05-29 15:18 millert
18950:
18951: * config.h.in: fixed typo
18952:
18953: 1994-05-29 01:29 millert
18954:
18955: * configure.in: added missing AC_DEFINE(SVR4) for solaris
18956:
18957: 1994-05-28 20:42 millert
18958:
18959: * sudo.man: documented the -v flag
18960:
18961: 1994-05-28 20:34 millert
18962:
18963: * SUPPORTED: updated
18964:
18965: 1994-05-28 20:31 millert
18966:
18967: * check.c: proto-ized crypt()
18968:
18969: 1994-05-28 20:28 millert
18970:
18971: * config.h.in: added LIBSHADOW undef
18972:
18973: 1994-05-28 20:18 millert
18974:
18975: * configure.in: nwo set OS to be lowercase
18976:
18977: 1994-05-28 19:36 millert
18978:
18979: * configure.in: now use SUDO_OSTYPE to set $OS
18980:
18981: 1994-05-28 19:36 millert
18982:
18983: * aclocal.m4: now use uname to determine os
18984:
18985: 1994-05-28 16:23 millert
18986:
18987: * visudo.c: added prototypes & moved sig handler around
18988:
18989: 1994-05-28 15:13 millert
18990:
18991: * sudo.h: added prototyppes
18992:
18993: 1994-05-28 15:13 millert
18994:
18995: * parse.c: added comment
18996:
18997: 1994-05-28 15:12 millert
18998:
18999: * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19000:
19001: 1994-05-28 15:11 millert
19002:
19003: * check.c, logging.c, sudo.c: added prototypes
19004:
19005: 1994-05-28 15:11 millert
19006:
19007: * aixcrypt.exp: Initial revision
19008:
19009: 1994-05-28 15:11 millert
19010:
19011: * Makefile.in: added aixcrypt.exp
19012:
19013: 1994-05-28 13:21 millert
19014:
19015: * parse.lex, parse.yacc: moved config.h to top of includes
19016:
19017: 1994-05-25 15:48 millert
19018:
19019: * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19020:
19021: 1994-05-24 23:08 millert
19022:
19023: * visudo.c: added -v flag and usage()
19024:
19025: 1994-05-24 23:08 millert
19026:
19027: * version.h: fixed a typo
19028:
19029: 1994-05-24 23:08 millert
19030:
19031: * sudo.c: cast Argv to a const for exec added -v flag
19032:
19033: 1994-05-24 23:07 millert
19034:
19035: * logging.c: mail_argv is now a const
19036:
19037: 1994-05-24 23:07 millert
19038:
19039: * configure.in: only set RETSIGTYPE if it is not set already
19040:
19041: 1994-05-24 23:07 millert
19042:
19043: * aclocal.m4: now defines & STDC_HEADERS for Irix
19044:
19045: 1994-05-24 23:07 millert
19046:
19047: * Makefile.in: added version.h
19048:
19049: 1994-05-24 21:25 millert
19050:
19051: * insults.h, sudo.h: prevent multiple inclusion
19052:
19053: 1994-05-24 21:20 millert
19054:
19055: * version.h: Initial revision
19056:
19057: 1994-05-24 21:09 millert
19058:
19059: * parse.lex, parse.yacc: now includes config.h
19060:
19061: 1994-05-24 20:54 millert
19062:
19063: * aclocal.m4: now talks about sunos 4.x
19064:
19065: 1994-05-24 20:23 millert
19066:
19067: * visudo.c: calls to Exit now pass an arg
19068:
19069: 1994-05-24 18:00 millert
19070:
19071: * visudo.c: signal handler now takes an int argument
19072:
19073: 1994-05-24 18:00 millert
19074:
19075: * CHANGES: updated
19076:
19077: 1994-05-24 17:44 millert
19078:
19079: * sudo.c: ok, the getcwd() is now *really* done as the user
19080:
19081: 1994-05-24 17:44 millert
19082:
19083: * configure.in: changed AIX STATIC_FLAGS
19084:
19085: 1994-05-24 16:27 millert
19086:
19087: * aclocal.m4: solaris now defines SVR4
19088:
19089: 1994-05-24 16:18 millert
19090:
19091: * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19092: sigh.
19093:
19094: 1994-05-24 16:18 millert
19095:
19096: * sudo.c: moved getcwd stuff into load_globals
19097:
19098: 1994-05-24 16:18 millert
19099:
19100: * parse.c: took out externs that are in suod.h
19101:
19102: 1994-05-24 16:18 millert
19103:
19104: * logging.c: moved cwd into load_globals
19105:
19106: 1994-05-24 16:17 millert
19107:
19108: * find_path.c: moved cwd stuff
19109:
19110: 1994-05-24 15:55 millert
19111:
19112: * Makefile.in: fixed make distclean & realclean
19113:
19114: 1994-05-24 12:51 millert
19115:
19116: * TODO: updated .,
19117:
19118: 1994-05-24 12:51 millert
19119:
19120: * CHANGES: added solaris changes
19121:
19122: 1994-05-24 12:51 millert
19123:
19124: * aclocal.m4: added solaris changes, need to rework
19125:
19126: 1994-05-24 12:50 millert
19127:
19128: * configure.in: cleaned up for solaris
19129:
19130: 1994-05-24 12:13 millert
19131:
19132: * logging.c: reinstall reapchild signal handler for non-bsd signals
19133:
19134: 1994-05-24 12:03 millert
19135:
19136: * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19137: needed)
19138:
19139: 1994-05-24 12:03 millert
19140:
19141: * sudo.c: support for HAVE_SYSCONF
19142:
19143: 1994-05-24 12:02 millert
19144:
19145: * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19146: minor prettying up /
19147:
19148: 1994-05-23 20:26 millert
19149:
19150: * config.h.in: added HAVE_SYSCONF
19151:
19152: 1994-05-16 18:57 millert
19153:
19154: * configure.in: now tells you what os you are running /.
19155:
19156: 1994-05-16 18:56 millert
19157:
19158: * aclocal.m4: took out extra ','
19159:
19160: 1994-05-14 17:56 millert
19161:
19162: * config.h.in: added _BSD_COMPAT
19163:
19164: 1994-05-14 17:56 millert
19165:
19166: * aclocal.m4: fixed for irix5
19167:
19168: 1994-05-14 17:55 millert
19169:
19170: * CHANGES: updated
19171:
19172: 1994-05-14 17:27 millert
19173:
19174: * sudo.c: uid seinitialized to -2
19175:
19176: 1994-04-28 12:36 millert
19177:
19178: * sudo.c: now removes LIBPATH for AIX
19179:
19180: 1994-03-12 20:41 millert
19181:
19182: * configure.in: now uses ufc if it finds it
19183:
19184: 1994-03-12 17:42 millert
19185:
19186: * sudo.h: no longer define yyval & yylval since yacc does it
19187:
19188: 1994-03-12 17:42 millert
19189:
19190: * parse.lex: now defines yylval as extenr
19191:
19192: 1994-03-12 17:41 millert
19193:
19194: * configure.in: BROKEN_GETPASS is now an OPTION
19195:
19196: 1994-03-12 17:41 millert
19197:
19198: * config.h.in: took out BROKEN_GETPASS
19199:
19200: 1994-03-12 17:20 millert
19201:
19202: * Makefile.in: took out big comment
19203:
19204: 1994-03-12 16:24 millert
19205:
19206: * README: updated
19207:
19208: 1994-03-12 16:20 millert
19209:
19210: * Makefile.in: took out README.beta
19211:
19212: 1994-03-12 16:19 millert
19213:
19214: * SUPPORTED: Initial revision
19215:
19216: 1994-03-12 16:19 millert
19217:
19218: * INSTALL: now reference SUPPORTED .,
19219:
19220: 1994-03-12 16:17 millert
19221:
19222: * config.h.in: now check for convex OR __convex__
19223:
19224: 1994-03-12 16:16 millert
19225:
19226: * aclocal.m4: now check for convex or __convex__
19227:
19228: 1994-03-12 16:15 millert
19229:
19230: * Makefile.in: added dist target
19231:
19232: 1994-03-12 15:19 millert
19233:
19234: * aclocal.m4: use __convex__
19235:
19236: 1994-03-12 14:33 millert
19237:
19238: * find_path.c: now use _S_* stat stuff to be ansi-like
19239:
19240: 1994-03-12 14:11 millert
19241:
19242: * INSTALL: updated for configure directions
19243:
19244: 1994-03-12 14:05 millert
19245:
19246: * Makefile.in: distclean now removes config.h and pathnames.h
19247:
19248: 1994-03-12 14:03 millert
19249:
19250: * CHANGES: updated
19251:
19252: 1994-03-12 14:00 millert
19253:
19254: * TODO: fixed typoe
19255:
19256: 1994-03-12 13:57 millert
19257:
19258: * Makefile.in, visudo.c: updated version
19259:
19260: 1994-03-12 13:57 millert
19261:
19262: * config.h.in, pathnames.h.in: added copyright header
19263:
19264: 1994-03-12 13:55 millert
19265:
19266: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19267: parse.yacc, sudo.c, sudo.h: udpated version
19268:
19269: 1994-03-12 13:39 millert
19270:
19271: * visudo.c: udpated to use configure + pathnames.h
19272:
19273: 1994-03-12 13:37 millert
19274:
19275: * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19276:
19277: 1994-03-12 13:37 millert
19278:
19279: * sudo.h: now works with configure
19280:
19281: 1994-03-12 13:36 millert
19282:
19283: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19284: updated to work with configure + pathnames.h
19285:
19286: 1994-03-12 10:40 millert
19287:
19288: * Makefile.in: added LEXLIB
19289:
19290: 1994-03-10 03:18 millert
19291:
19292: * COPYING: updated gnu general licence to versio 2
19293:
19294: 1994-03-10 02:44 millert
19295:
19296: * pathnames.h.in, config.h.in: Initial revision
19297:
19298: 1994-03-10 01:43 millert
19299:
19300: * sudo.h: changed to work with configure
19301:
19302: 1994-03-09 18:51 millert
19303:
19304: * Makefile.in, aclocal.m4, configure.in: Initial revision
19305:
19306: 1994-03-09 17:36 millert
19307:
19308: * visudo.c: now uses defines used by configure
19309:
19310: 1994-03-01 16:31 millert
19311:
19312: * find_path.c: sudo won't bitch about EPERM now, for real
19313:
19314: 1994-02-28 00:36 millert
19315:
19316: * logging.c: renamed exec_argv to eliminate a libc name clash with
19317: ksros
19318:
19319: 1994-02-28 00:28 millert
19320:
19321: * CHANGES: corrected
19322:
19323: 1994-02-28 00:27 millert
19324:
19325: * logging.c, sudo.c, sudo.h: execve -> execv
19326:
19327: 1994-02-27 23:27 millert
19328:
19329: * TODO: upated
19330:
19331: 1994-02-27 23:19 millert
19332:
19333: * PORTING: added 2 mroe items
19334:
19335: 1994-02-27 23:12 millert
19336:
19337: * CHANGES: updated
19338:
19339: 1994-02-27 23:11 millert
19340:
19341: * sudo.h: added UMASK and mode_t declaration
19342:
19343: 1994-02-27 23:11 millert
19344:
19345: * sudo.c: added UMASK
19346:
19347: 1994-02-27 20:55 millert
19348:
19349: * logging.c: now opens log file with mode 077
19350:
19351: 1994-02-27 20:55 millert
19352:
19353: * check.c: saved current umask ans restores it
19354:
19355: 1994-02-27 20:36 millert
19356:
19357: * sudo.h: added MAXLOGFILELEN
19358:
19359: 1994-02-27 20:35 millert
19360:
19361: * logging.c: split long log lines. FOr syslog, split into multiple
19362: entries, for a log file, indent the extra for readability
19363:
19364: 1994-02-27 17:22 millert
19365:
19366: * CHANGES: added changes
19367:
19368: 1994-02-27 17:18 millert
19369:
19370: * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19371: should be)
19372:
19373: 1994-02-25 16:04 millert
19374:
19375: * TODO: added input from Brett M Hogden <hogden@rge.com>
19376:
19377: 1994-02-16 13:35 millert
19378:
19379: * sudo.c: added rmenv() to remove stuff from environ. can now uses
19380: execvp() OR execve() becuase of this.
19381:
19382: 1994-02-16 13:35 millert
19383:
19384: * logging.c: now uses execvp() OR execve()
19385:
19386: 1994-02-16 13:31 millert
19387:
19388: * sudo.h: added USE_EXECVE
19389:
19390: 1994-02-16 13:27 millert
19391:
19392: * sudo.h: added environ
19393:
19394: 1994-02-16 12:53 millert
19395:
19396: * find_path.c: now ignore EPERM
19397:
19398: 1994-02-15 23:52 millert
19399:
19400: * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19401: statics /.
19402:
19403: 1994-02-15 23:52 millert
19404:
19405: * CHANGES: updated
19406:
19407: 1994-02-15 23:40 millert
19408:
19409: * sudo.h: took out Envp
19410:
19411: 1994-02-14 12:28 millert
19412:
19413: * BUGS: Initial revision
19414:
19415: 1994-02-10 14:29 millert
19416:
19417: * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19418:
19419: 1994-02-10 14:05 millert
19420:
19421: * sudo.h: added SECURE_PATH
19422:
19423: 1994-02-10 13:50 millert
19424:
19425: * INSTALL: added sample.sudoers note
19426:
19427: 1994-02-10 13:47 millert
19428:
19429: * sudoers: Initial revision
19430:
19431: 1994-02-09 14:54 millert
19432:
19433: * find_path.c: fixed typo
19434:
19435: 1994-02-08 23:06 millert
19436:
19437: * PORTING: took out SAVED_UID garbage
19438:
19439: 1994-02-08 22:55 millert
19440:
19441: * INSTALL: mentioned HAL
19442:
19443: 1994-02-08 22:50 millert
19444:
19445: * sudo.h: added HAL line
19446:
19447: 1994-02-08 22:48 millert
19448:
19449: * insults.h: added HAL insults
19450:
19451: 1994-02-08 22:48 millert
19452:
19453: * TODO: updated
19454:
19455: 1994-02-08 22:02 millert
19456:
19457: * logging.c: more verbose error if mailer not found
19458:
19459: 1994-02-08 22:02 millert
19460:
19461: * check.c: now do getpwent as root for soem shadow password systems
19462: (bsdi)
19463:
19464: 1994-02-08 13:22 millert
19465:
19466: * sudo.h: took out SAVED_UID garbade
19467:
19468: 1994-02-08 13:21 millert
19469:
19470: * sudo.c: took out SAVED_UID garbage since it don't work
19471:
19472: 1994-02-06 17:43 millert
19473:
19474: * README: updated
19475:
19476: 1994-02-06 17:40 millert
19477:
19478: * insults.h: added a missing space :-)
19479:
19480: 1994-02-05 19:48 millert
19481:
19482: * sudo.c, sudo.h: took out multimax cruft
19483:
19484: 1994-02-05 19:30 millert
19485:
19486: * INSTALL: minor update
19487:
19488: 1994-02-05 19:30 millert
19489:
19490: * PORTING: finished
19491:
19492: 1994-02-05 19:19 millert
19493:
19494: * sudo.c: fixed a typo + indentation
19495:
19496: 1994-02-05 18:43 millert
19497:
19498: * sudo.h: took outumoved some defines to the config file ,. ,.
19499:
19500: 1994-02-05 15:17 millert
19501:
19502: * PORTING: Initial revision
19503:
19504: 1994-02-05 15:17 millert
19505:
19506: * TODO: did #6
19507:
19508: 1994-02-05 15:16 millert
19509:
19510: * sudo.h: added HAS_SAVED_UID
19511:
19512: 1994-02-05 15:16 millert
19513:
19514: * sudo.c: put back AIX cruft
19515:
19516: 1994-02-03 00:44 millert
19517:
19518: * sudo.c: aix changes
19519:
19520: 1994-02-02 01:31 millert
19521:
19522: * CHANGES: updated
19523:
19524: 1994-02-02 01:30 millert
19525:
19526: * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19527: when abs necesary
19528:
19529: 1994-02-01 22:21 millert
19530:
19531: * check.c: added missing %s\n
19532:
19533: 1994-01-31 02:06 millert
19534:
19535: * install-sh: Initial revision
19536:
19537: 1994-01-31 01:58 millert
19538:
19539: * CHANGES, TODO: updated
19540:
19541: 1994-01-31 01:56 millert
19542:
19543: * sudo.c: now removed _RLD_* for alphas
19544:
19545: 1994-01-31 01:50 millert
19546:
19547: * INSTALL: updated for new config scheme
19548:
19549: 1994-01-30 19:42 millert
19550:
19551: * find_path.c: more verbose eror messages
19552:
19553: 1994-01-27 14:08 millert
19554:
19555: * TODO: now have solaris
19556:
19557: 1994-01-27 14:07 millert
19558:
19559: * sudo.h: define __svr4__ for SOLARIS
19560:
19561: 1994-01-27 14:07 millert
19562:
19563: * check.c: added svr4 junk for shadow pws for solaris 2.x
19564:
19565: 1994-01-27 13:19 millert
19566:
19567: * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19568: Its not needed since we start out setuid with the correct perms.
19569:
19570: 1994-01-26 19:51 millert
19571:
19572: * check.c, sudo.c, sudo.h: now use setreuid()
19573:
19574: 1994-01-26 18:58 millert
19575:
19576: * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19577: VARIABLES sectoin
19578:
19579: 1994-01-26 18:52 millert
19580:
19581: * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19582:
19583: 1994-01-26 18:52 millert
19584:
19585: * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19586: >> .
19587:
19588: 1993-12-07 01:33 millert
19589:
19590: * README: minor update + spell fix
19591:
19592: 1993-12-07 01:33 millert
19593:
19594: * INSTALL: rewrote most of this
19595:
19596: 1993-12-07 01:13 millert
19597:
19598: * sudo.h: added all options that are in the Makefile
19599:
19600: 1993-12-07 00:23 millert
19601:
19602: * getpass.c: now use USE_TERMIO #define for sgi & hpux
19603:
19604: 1993-12-06 23:19 millert
19605:
19606: * TODO: todo: posix sigs
19607:
19608: 1993-12-06 01:12 millert
19609:
19610: * check.c, find_path.c: always include strings.h
19611:
19612: 1993-12-05 20:34 millert
19613:
19614: * visudo.c: added STATICEDITOR
19615:
19616: 1993-12-05 20:30 millert
19617:
19618: * sudo.h: sgi has vi in /usr/bin too
19619:
19620: 1993-12-05 20:23 millert
19621:
19622: * sudo.man: added VISUAL
19623:
19624: 1993-12-02 22:20 millert
19625:
19626: * sudo.h: sue /usr/bin/vi on some systems
19627:
19628: 1993-12-02 22:19 millert
19629:
19630: * sudo.c: fixed warning (include strings.h)
19631:
19632: 1993-12-02 22:06 millert
19633:
19634: * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19635: features)
19636:
19637: 1993-12-02 21:38 millert
19638:
19639: * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19640:
19641: 1993-12-02 21:35 millert
19642:
19643: * visudo.c: added EDITOR envar
19644:
19645: 1993-12-02 21:34 millert
19646:
19647: * check.c, find_path.c, parse.c, sudo.c: added patches from
19648: John_Rouillard directory spec uses EDITOR
19649:
19650: 1993-12-01 19:32 millert
19651:
19652: * getpass.c: added flush for hpux
19653:
19654: 1993-11-30 13:37 millert
19655:
19656: * sudo.c: no longer assume malloc returns a char *
19657:
19658: 1993-11-29 20:35 millert
19659:
19660: * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19661: stuff -- now gets removed correctly
19662:
19663: 1993-11-29 19:31 millert
19664:
19665: * sudo.h: added STD_HEADERS macro
19666:
19667: 1993-11-29 19:14 millert
19668:
19669: * sudo.c: now uses STD_HEADERS macor for ansi
19670:
19671: 1993-11-29 19:14 millert
19672:
19673: * find_path.c: now uses STD_HEADERS macro
19674:
19675: 1993-11-29 19:13 millert
19676:
19677: * check.c: niceties for C compiler bitches -- no real change
19678:
19679: 1993-11-29 13:04 millert
19680:
19681: * visudo.c: now doesn't fclose a file never opened.
19682:
19683: 1993-11-28 16:35 millert
19684:
19685: * sudo.man: added visudo line
19686:
19687: 1993-11-28 16:31 millert
19688:
19689: * sudo.man: added error stuff added me in there...
19690:
19691: 1993-11-28 03:12 millert
19692:
19693: * CHANGES: noted insults
19694:
19695: 1993-11-28 03:01 millert
19696:
19697: * INSTALL: added blurb about reading stuff
19698:
19699: 1993-11-28 03:00 millert
19700:
19701: * sudo.h: added insults
19702:
19703: 1993-11-28 03:00 millert
19704:
19705: * insults.h: corrected somments and removed newlines
19706:
19707: 1993-11-28 03:00 millert
19708:
19709: * check.c: now uses insults
19710:
19711: 1993-11-28 02:45 millert
19712:
19713: * insults.h: Initial revision
19714:
19715: 1993-11-27 19:46 millert
19716:
19717: * INSTALL: added dec syslog note
19718:
19719: 1993-11-27 19:25 millert
19720:
19721: * sample.sudoers: added real stuff in there
19722:
19723: 1993-11-27 19:24 millert
19724:
19725: * TODO: added a todo
19726:
19727: 1993-11-27 19:10 millert
19728:
19729: * TODO: added one
19730:
19731: 1993-11-27 18:59 millert
19732:
19733: * sample.sudoers: Initial revision
19734:
19735: 1993-11-27 18:59 millert
19736:
19737: * sudo.man: updated with changes
19738:
19739: 1993-11-27 18:52 millert
19740:
19741: * sudo.man: Initial revision
19742:
19743: 1993-11-27 18:48 millert
19744:
19745: * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
19746: revision
19747:
19748: 1993-11-27 18:46 millert
19749:
19750: * visudo.c: updated version number and took out jeff's old addr
19751: since it is no good
19752:
19753: 1993-11-27 18:42 millert
19754:
19755: * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
19756: parse.yacc, sudo.c: updated version number and took out jeff's
19757: email (since it is invalid)
19758:
19759: 1993-10-28 09:36 millert
19760:
19761: * check.c: added fflush()
19762:
19763: 1993-10-22 20:46 millert
19764:
19765: * find_path.c: now return NULL instead pfof exiting for
19766: nopnn-fatal errors
19767:
19768: 1993-10-21 16:57 millert
19769:
19770: * check.c: new banner
19771:
19772: 1993-10-21 16:42 millert
19773:
19774: * parse.lex: now sudo.h gets included first
19775:
19776: 1993-10-17 20:31 millert
19777:
19778: * parse.lex: now can use flex
19779:
19780: 1993-10-17 20:31 millert
19781:
19782: * sudo.h: linux patch
19783:
19784: 1993-10-17 20:30 millert
19785:
19786: * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
19787:
19788: 1993-10-17 20:30 millert
19789:
19790: * check.c: linux diff
19791:
19792: 1993-10-15 16:03 millert
19793:
19794: * find_path.c: stat now ignores EINVAL
19795:
19796: 1993-10-05 21:48 millert
19797:
19798: * find_path.c, sudo.c: now declare strdup as extern
19799:
19800: 1993-10-04 15:23 millert
19801:
19802: * visudo.c: reformatted with indent + by hand
19803:
19804: 1993-10-04 15:10 millert
19805:
19806: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
19807: sudo.h: used indent to "fix" coding style
19808:
19809: 1993-10-03 20:12 millert
19810:
19811: * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
19812: LAST should maybe move the code that does this into the loop
19813: body. makes it messier tho. hmmm.
19814:
19815: 1993-09-08 11:53 millert
19816:
19817: * find_path.c: redid the fix for non-executable files in an easier
19818: to read way plus some minor aethetic changes
19819:
19820: 1993-09-08 11:39 millert
19821:
19822: * find_path.c: fixed bug with non-executable tings of same name in
19823: path introduced by checkig errno after stat(2).
19824:
19825: 1993-09-05 10:02 millert
19826:
19827: * sudo.c: fixed off by one error
19828:
19829: 1993-09-05 09:55 millert
19830:
19831: * find_path.c: now handles decending below '/' correctly
19832:
19833: 1993-09-05 08:35 millert
19834:
19835: * sudo.c: now actually builds Envp instead of munging envp
19836:
19837: 1993-09-04 15:42 millert
19838:
19839: * parse.yacc: now includes sys/param.h
19840:
19841: 1993-09-04 15:41 millert
19842:
19843: * visudo.c: now includes sys/param.h
19844:
19845: 1993-09-04 15:30 millert
19846:
19847: * sudo.h: fixed ifndef -> ifdef
19848:
19849: 1993-09-04 15:19 millert
19850:
19851: * qualify.c: make more like find_path.c
19852:
19853: 1993-09-04 15:18 millert
19854:
19855: * find_path.c: rewritten by millert
19856:
19857: 1993-09-04 15:17 millert
19858:
19859: * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
19860: added info about new defines in the comment
19861:
19862: 1993-09-04 15:15 millert
19863:
19864: * logging.c: now uses USE_CWD
19865:
19866: 1993-09-04 14:10 millert
19867:
19868: * sudo.h: added delc for clean_envp() and Envp
19869:
19870: 1993-09-04 14:09 millert
19871:
19872: * sudo.c: now rips LD_* env vars out of envp and passed sanitized
19873: Envp to exec
19874:
19875: 1993-09-04 14:09 millert
19876:
19877: * logging.c: now uses execve()
19878:
19879: 1993-09-04 14:08 millert
19880:
19881: * find_path.c: ENOTDIR is ok now too (in case part of the path is
19882: bogus)
19883:
19884: 1993-09-04 08:17 millert
19885:
19886: * qualify.c: now works correctly (ttaltotal rewrite)
19887:
19888: 1993-09-04 07:59 millert
19889:
19890: * parse.lex: now includes sys/param.h didn't match trailing / --
19891: fix from rouilj@cs.umb.edu
19892:
19893: 1993-06-11 18:04 millert
19894:
19895: * sudo.c: moved around the #ifndef _AIX
19896:
19897: 1993-06-11 18:03 millert
19898:
19899: * check.c, logging.c, parse.c: Initial revision
19900:
19901: 1993-03-20 07:57 millert
19902:
19903: * qualify.c: Initial revision
19904:
19905: 1993-03-13 15:09 millert
19906:
19907: * find_path.c: now works if you do sudo bin/test
19908:
19909: 1993-03-13 14:20 millert
19910:
19911: * find_path.c: works
19912:
19913: 1993-03-02 18:28 millert
19914:
19915: * sudo.h: Initial revision
19916:
19917: 1993-03-02 11:35 millert
19918:
19919: * visudo.c: Initial revision
19920:
19921: 1993-03-02 11:32 millert
19922:
19923: * parse.lex, parse.yacc: Initial revision
19924:
19925: 1993-02-16 13:24 millert
19926:
19927: * sudo.c: took out errno.h
19928:
19929: 1993-02-16 13:22 millert
19930:
19931: * sudo.c: now spews error if exec fails and exits with -1
19932:
19933: 1993-02-16 12:07 millert
19934:
19935: * sudo.c: Initial revision
19936:
19937: 1993-02-15 22:27 millert
19938:
19939: * find_path.c: now only execs files with (an) executable bit set.
19940:
19941: 1993-02-15 22:01 millert
19942:
19943: * find_path.c: Initial revision
19944:
19945: 1993-02-15 14:32 millert
19946:
19947: * getpass.c: added nice comment
19948:
19949: 1993-02-15 14:19 millert
19950:
19951: * getpass.c: now works on sgi's
19952:
19953: 1993-02-15 13:57 millert
19954:
19955: * getpass.c: Initial revision
19956:
![[BACK]](/icons/back.gif){kind=icon}
Return to ChangeLog CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / sudo