Annotation of src/usr.bin/sudo/ChangeLog, Revision 1.5
1.5 ! millert 1: 2009-04-18 10:27 millert
! 2:
! 3: * WHATSNEW: Forgot umask_override
! 4:
! 5: 2009-04-18 09:25 millert
! 6:
! 7: * ChangeLog, TODO: sync
! 8:
! 9: 2009-04-16 08:22 millert
! 10:
! 11: * visudo.c: Rewind stream if we fdopen sudoers since it may not be
! 12: at the beginning. Set the keepopen flag on already-open files
! 13: too so the lexer doesn't close them out from under us.
! 14:
! 15: 2009-04-16 08:18 millert
! 16:
! 17: * visudo.c: Print the proper file name when there is a parse error
! 18: in an include file.
! 19:
! 20: 2009-04-11 07:45 millert
! 21:
! 22: * WHATSNEW: Sync
! 23:
1.4 millert 24: 2009-04-10 16:59 millert
25:
26: * configure, configure.in: Fix a warning when --without-ldap is
27: specified.
28:
29: 2009-04-05 12:25 millert
30:
31: * alias.c, parse.h, visudo.c: Store aliases that we remove during
32: check_aliases in a freelist and free them at the end so we don't
33: leak memory.
34:
35: 2009-03-28 09:30 millert
36:
37: * visudo.c: Check aliases in -c mode too.
38:
39: 2009-03-28 09:09 millert
40:
41: * alias.c, parse.h, visudo.c: Make alias_remove return the alias
42: struct instead of freeing it directly. Fixes a use after free in
43: alias_remove_recursive, the only consumer.
44:
45: 2009-03-28 09:07 millert
46:
47: * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
48: -> alias_find for consistency.
49:
50: 2009-03-27 19:29 millert
51:
52: * visudo.c: When checking for unused aliases, recurse if the alias
53: points to another alias.
54:
55: 2009-03-16 12:11 millert
56:
57: * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
58: support will be done later after some refactoring.
59:
60: 2009-03-14 12:02 millert
61:
62: * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
63:
64: 2009-03-13 21:04 millert
65:
66: * configure, configure.in: Only check for
67: ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
68: compilation with ldapux.
69:
70: 2009-03-11 20:03 millert
71:
72: * fileops.c: fix char subscript
73:
74: 2009-03-11 19:19 millert
75:
76: * Makefile.in: remove errant carriage returns
77:
78: 2009-03-11 19:01 millert
79:
80: * audit.c, env.c: fix K&R compilation
81:
82: 2009-03-11 12:12 millert
83:
84: * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
85: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
86: regen
87:
88: 2009-03-10 17:34 millert
89:
90: * config.h.in: Add missing HAVE_BSM_AUDIT
91:
92: 2009-03-10 17:21 millert
93:
94: * WHATSNEW: Add 1.7.1 features
95:
96: 2009-03-10 17:10 millert
97:
98: * INSTALL: Mention --with-netsvc
99:
100: 2009-03-10 17:08 millert
101:
102: * sudoers.ldap.pod: Document netsvc.conf support
103:
104: 2009-03-10 16:44 millert
105:
106: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
107: sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
108:
109: 2009-03-08 16:57 millert
110:
111: * configure, config.h.in, configure.in, env.c: Add
112: --enable-env-debug flag to enable environment sanity checks.
113:
114: 2009-03-08 11:51 millert
115:
116: * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
117:
118: 2009-03-07 17:10 millert
119:
120: * env.c: Only sync environ for putenv, setenv, and unsetenv. We
121: need to make sure that sudo_putenv and sudo_setenv only modify
122: env.envp, not environ.
123:
124: 2009-03-02 14:19 millert
125:
126: * env.c: Really fix UNSETENV_VOID
127:
128: 2009-03-02 14:18 millert
129:
130: * env.c: Fix unsetenv when UNSETENV_VOID
131:
132: 2009-03-02 08:00 millert
133:
134: * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
135:
136: 2009-03-02 07:36 millert
137:
138: * ldap.c: tivoli-based ldap does not have ldapssl_err2string
139:
140: 2009-03-02 07:30 millert
141:
142: * configure: regen
143:
144: 2009-03-01 16:20 millert
145:
146: * config.h.in, configure, configure.in, ldap.c: Add support for
147: Tivoli-based LDAP start TLS as seen in AIX. Untested.
148:
149: 2009-03-01 08:52 millert
150:
151: * env.c: Add sanity checks for setenv/unsetenv
152:
153: 2009-02-28 20:17 millert
154:
155: * Makefile.in: Include bsm_audit.h in the tarball
156:
157: 2009-02-28 20:00 millert
158:
159: * Makefile.in, version.h: bump version for sudo 1.7.1
160:
161: 2009-02-28 19:58 millert
162:
163: * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
164: sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
165: calls to setenv/unsetenv and provide our own
166: setenv/unsetenv/putenv that operates on own env pointer. Make
167: sync_env() inline in setenv/unsetenv/putenv functions.
168:
169: 2009-02-25 07:33 millert
170:
171: * sudo.c: Make "sudoedit -h" work as expected
172:
173: 2009-02-25 07:21 millert
174:
175: * auth/pam.c: Make sure def_prompt is always defined. This is a
176: workaround for pam configs that prompt for a password in the
177: session but don't have an auth line. A better fix is to expand
178: the sudo prompt earlier and set def_prompt to that when
179: initializing.
180:
181: 2009-02-25 06:17 millert
182:
183: * sudo.pod: Mention that the helper for -A may be graphical.
184:
185: 2009-02-25 06:16 millert
186:
187: * TROUBLESHOOTING: Document what happens if there is no tty.
188:
189: 2009-02-25 06:05 millert
190:
191: * sudo.c: cosmetic changes
192:
193: 2009-02-25 05:47 millert
194:
195: * term.c: Fix term_restore
196:
197: 2009-02-24 20:23 millert
198:
199: * sudo.c: Fix "sudo -k" with no other args
200:
201: 2009-02-24 08:04 millert
202:
203: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
204: be specified in conjunction with a command or another option that
205: may require authentication.
206:
207: 2009-02-23 09:18 millert
208:
209: * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
210: from Diego E. 'Flameeyes'
211:
212: 2009-02-23 09:15 millert
213:
214: * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
215:
216: 2009-02-21 17:03 millert
217:
218: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
219: Implement umask_override
220:
221: 2009-02-21 16:51 millert
222:
223: * toke.c: regen
224:
225: 2009-02-21 16:49 millert
226:
227: * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
228: include filenames.
229:
230: 2009-02-21 08:43 millert
231:
232: * audit.c: Need to include compat.h
233:
234: 2009-02-21 08:37 millert
235:
236: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
237: sudo.c: Make audit_success and audit_failure generic functions in
238: preparation for integrating linux audit support.
239:
240: 2009-02-21 08:06 millert
241:
242: * term.c: remove duplicate include
243:
244: 2009-02-20 16:13 millert
245:
246: * bsm_audit.c: Add missing include
247:
248: 2009-02-20 15:55 millert
249:
250: * sudo.c: May need to update the runas user after parsing
251: command-based defaults.
252:
253: 2009-02-18 10:53 millert
254:
255: * glob.c: Add missing pair of braces introduced with character
256: class support.
257:
258: 2009-02-15 15:53 millert
259:
260: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
261: Rename pwstars to pwfeedback
262:
263: 2009-02-10 20:25 millert
264:
265: * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
266:
267: 2009-02-10 20:18 millert
268:
269: * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
270: sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
271: S.J. Peron
272:
273: 2009-02-10 19:58 millert
274:
275: * term.c: This is new code, no DARPA notice.
276:
277: 2009-02-10 14:04 millert
278:
279: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
280: simple_glob -> fast_glob
281:
282: 2009-02-10 09:39 millert
283:
284: * match.c: g/c unused var
285:
286: 2009-02-10 08:09 millert
287:
288: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
289: simple_glob option to use fnmatch() instead of glob(). This is
290: useful when you need to specify patterns that reference network
291: file systems.
292:
293: 2009-02-10 07:58 millert
294:
295: * tgetpass.c: add term_* proto
296:
297: 2009-02-10 07:51 millert
298:
299: * sudoers.pod: mention glob()
300:
301: 2009-02-09 07:59 millert
302:
303: * tgetpass.c: Delete any pwstars we wrote after the user hits
304: return. That way there is no record on screen as to the user's
305: password length.
306:
307: 2009-02-08 10:27 millert
308:
309: * term.c: Move terminal setting bits from tgetpass.c to term.c
310:
311: 2009-02-07 19:50 millert
312:
313: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
314: tgetpass.c: Add pwstars sudoers option that causes sudo to print
315: a star every time the user presses a key.
316:
317: 2009-02-03 10:10 millert
318:
319: * Makefile.in: Fix up F<> brokenness for visudo.man.in and
320: sudoers.ldap.man.in.
321:
322: 2009-01-27 11:54 millert
323:
324: * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
325: not -1, to indicate no limit. From Mark Janssen.
326:
327: 2009-01-17 17:36 millert
328:
329: * toke.c, toke.l: Comments that begin with #- should not be parsed
330: as uids.
331:
332: 2009-01-08 19:13 millert
333:
334: * sudo.c: Do not try to set the close on exec flag if we didn't
335: actually open sudoers.
336:
337: 2008-12-19 12:40 millert
338:
339: * ChangeLog: regen
340:
1.3 millert 341: 2008-12-14 17:40 millert
342:
343: * TODO: sync
344:
345: 2008-12-09 18:48 millert
346:
347: * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
348: enters ^C at the password prompt.
349:
350: 2008-12-09 16:13 millert
351:
352: * configure.in, configure: Don't try to build sudo_noexec.so on
353: HP-UX with the bundled compiler as it cannot generate shared
354: objects.
355:
356: 2008-12-09 15:55 millert
357:
358: * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
359: fixes
360:
361: 2008-12-09 08:49 millert
362:
363: * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
364: it clear that we are not short-circuiting on last match. When
365: pwcheck is 'all', initialize nopass to TRUE and override it with
366: the first non-TRUE entry.
367:
368: 2008-12-08 10:02 millert
369:
370: * parse.c: Do not short circuit pseudo commands when we get a match
371: since, depending on the settings, we may need to examine all
372: commands for tags.
373:
374: 2008-12-03 15:58 millert
375:
376: * sudoers.cat, sudoers.man.in: regen
377:
378: 2008-12-03 15:57 millert
379:
380: * sudoers.pod: hostnames may also contain wildcards
381:
382: 2008-12-03 15:40 millert
383:
384: * Makefile.in: remove stamp-* files and linux core files in clean
385: target
386:
387: 2008-12-02 12:30 millert
388:
389: * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
390: HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
391:
392: 2008-11-26 15:10 millert
393:
394: * configure, configure.in: correctly enable SIA on Digital UNIX
395:
396: 2008-11-25 20:06 millert
397:
398: * TODO: checkpoint
399:
400: 2008-11-25 20:05 millert
401:
402: * ChangeLog: sync
403:
404: 2008-11-25 12:01 millert
405:
406: * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
407: ttys we may still have /dev/tty available to us.
408:
409: 2008-11-24 10:09 millert
410:
411: * sudoers.cat, sudoers.man.in: regen
412:
413: 2008-11-24 10:08 millert
414:
415: * sudoers.pod: fix typos; Markus Lude
416:
417: 2008-11-24 07:08 millert
418:
419: * ChangeLog: sync
420:
1.2 millert 421: 2008-11-23 19:42 millert
422:
423: * toke.c: regen
424:
425: 2008-11-23 19:41 millert
426:
427: * toke.l: Fix matching of a line that only consists of a comment
428: char
429:
430: 2008-11-22 13:17 millert
431:
432: * auth/pam.c: MacOS pam will retry conversation function if it
433: fails so just treat ^C as an empty password.
434:
435: 2008-11-22 10:12 millert
436:
437: * visudo.c: When checking for alias use, also check defaults
438: bindings.
439:
440: 2008-11-22 10:01 millert
441:
442: * redblack.c: unused var
443:
444: 2008-11-22 09:42 millert
445:
446: * redblack.c: Replace my rbdelete with Emin's version (which
447: actually works ;-)
448:
449: 2008-11-19 12:01 millert
450:
451: * testsudoers.c: malloc debugging
452:
453: 2008-11-19 07:37 millert
454:
455: * visudo.c: malloc options in devel mode for visudo too
456:
457: 2008-11-18 10:57 millert
458:
459: * sudo.c: fix compilation on non-C99; from Theo
460:
461: 2008-11-18 10:50 millert
462:
463: * visudo.c: fix check_aliases
464:
465: 2008-11-18 08:29 millert
466:
467: * alias.c: when destroying an alias, free the correct data pointer
468:
469: 2008-11-18 07:54 millert
470:
471: * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
472:
473: 2008-11-15 13:34 millert
474:
475: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
476: visudo.man.in: regen
477:
478: 2008-11-15 13:34 millert
479:
480: * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
481: 'option' for command line options (not flag)
482:
483: 2008-11-14 06:18 millert
484:
485: * INSTALL: Add note on configuring HP-UX pam
486:
487: 2008-11-11 13:28 millert
488:
489: * check.c, sudo.c: Move tty checks into check_user() so we only do
490: them if we actually need a password.
491:
492: 2008-11-11 12:34 millert
493:
494: * sudo.c: Don't error out if no tty or askpass unless we actually
495: need to authenticate.
496:
497: 2008-11-10 15:20 millert
498:
499: * ChangeLog: regen
500:
1.1 millert 501: 2008-11-10 08:07 millert
502:
503: * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
504: Stoeckmann
505:
506: 2008-11-09 15:18 millert
507:
508: * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
509:
510: 2008-11-09 09:15 millert
511:
512: * gram.c, toke.c: regen
513:
514: 2008-11-09 09:13 millert
515:
516: * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
517: env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
518: interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
519: logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
520: redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
521: sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
522: version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
523: visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
524: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
525: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
526: sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
527: years.
528:
529: 2008-11-09 08:48 millert
530:
531: * fnmatch.c, glob.c, emul/charclass.h: add my copyright
532:
533: 2008-11-08 10:40 millert
534:
535: * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
536: far past the end, resulting in a NUL being written immediately
537: after the buffer end.
538:
539: 2008-11-08 10:31 millert
540:
541: * UPGRADE, WHATSNEW: add sections on tgetpass changes
542:
543: 2008-11-08 10:30 millert
544:
545: * tgetpass.c: Treat EOF w/o newline as an error.
546:
547: 2008-11-07 17:42 millert
548:
549: * parse.c: Fix "sudo -v" when NOPASSWD is set.
550:
551: 2008-11-07 12:45 millert
552:
553: * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
554: longer treat an empty password at the prompt as special. To quit
555: out of sudo you now need to hit ^C at the password prompt.
556:
557: 2008-11-06 21:07 millert
558:
559: * sudoers.cat, sudoers.man.in: regen
560:
561: 2008-11-06 21:06 millert
562:
563: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
564: will now refuse to run if no tty is present unless the new
565: visiblepw sudoers flag is set.
566:
567: 2008-11-05 19:42 millert
568:
569: * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
570: RLIM_SAVED_MAX not defined
571:
572: 2008-11-05 19:40 millert
573:
574: * aix.c: fix fallback value for RLIM_SAVED_MAX
575:
576: 2008-11-05 19:14 millert
577:
578: * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
579: aixauth_cleanup.
580:
581: 2008-11-05 19:08 millert
582:
583: * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
584: authenticate() as it may not be correct for the user we are
585: running the command as.
586:
587: 2008-11-05 19:05 millert
588:
589: * isblank.c: Add isblank() function for systems without it. Needed
590: for POSIX character class matching in fnmatch.c and glob.c.
591:
592: 2008-11-05 11:02 millert
593:
594: * TROUBLESHOOTING: expound on sudo and cd
595:
596: 2008-11-04 15:52 millert
597:
598: * ChangeLog: regen
599:
600: 2008-11-04 15:46 millert
601:
602: * sudoers.cat, sudoers.man.in: regen
603:
604: 2008-11-04 15:45 millert
605:
606: * sudoers.pod: mention defauts parse order
607:
608: 2008-11-03 13:19 millert
609:
610: * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
611: function for systems without it. Needed for POSIX character
612: class matching in fnmatch.c and glob.c.
613:
614: 2008-11-03 12:54 millert
615:
616: * Makefile.in: add emul/charclass.h to HDRS
617:
618: 2008-11-02 14:08 millert
619:
620: * TODO: checkpoint
621:
622: 2008-11-02 14:06 millert
623:
624: * parse.c, defaults.c, testsudoers.c, visudo.c: Move
625: update_defaults into defaults.c and call it properly from visudo
626: and testsudoers.
627:
628: 2008-11-02 09:51 millert
629:
630: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
631: tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
632: consistency
633:
634: 2008-11-02 09:45 millert
635:
636: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
637: tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
638: has non-standard entries.
639:
640: 2008-11-02 09:35 millert
641:
642: * match.c: quiet gcc
643:
644: 2008-11-02 09:28 millert
645:
646: * match.c: Short circuit glob() checks if basename(pattern) !=
647: basename(command). Refactor code that checks for a command in a
648: directory and use it in the glob case if the resolved pattern
649: ends in a '/'.
650:
651: 2008-11-01 09:20 millert
652:
653: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
654: setting runas defaults until after runaspw/gr is setup.
655:
656: 2008-10-29 13:26 millert
657:
658: * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
659: allocating host/domain name since some systems do not include
660: space for the NUL in the size. Also manually NUL-terminate
661: buffer from gethostname() since POSIX is wishy-washy on this.
662:
663: 2008-10-26 17:13 millert
664:
665: * sudo.c, sudoers.pod: When setting the umask, use the union of the
666: user's umask and the default value set in sudoers so that we
667: never lower the user's umask when running a command.
668:
669: 2008-10-26 16:43 millert
670:
671: * sudo.c: Don't try to read from a zero-length sudoers file.
672: Remove the bogus Solaris work-around for EAGAIN. Since we now
673: use fgetc() it should not be a problem.
674:
675: 2008-10-25 09:22 millert
676:
677: * parse.c: In update_defaults() check the return value of
678: user*_matches against ALLOW so we don't inadvertantly match on
679: UNSPEC.
680:
681: 2008-10-24 09:52 millert
682:
683: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
684: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
685: regen man pages; no more hyphenation
686:
687: 2008-10-24 09:49 millert
688:
689: * sudo.c: Don't error out on a zero-length sudoers file. With the
690: advent of #include the user could create a situation where sudo
691: is unusable.
692:
693: 2008-10-23 12:06 millert
694:
695: * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
696: has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
697: Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
698: Add configure tests to handle all the cases.
699:
700: 2008-10-08 17:28 millert
701:
702: * sudo.pod: resort ENVIRONMENT
703:
704: 2008-10-08 17:09 millert
705:
706: * sudoers.pod: document sudoers_locale
707:
708: 2008-10-08 16:56 millert
709:
710: * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
711: uses in preference to VISUAL or EDITOR
712:
713: 2008-10-08 14:27 millert
714:
715: * toke.c, toke.l: In fill_cmnd(), collapse any escaped
716: sudo-specific characters. Allows character classes to be used in
717: pathnames.
718:
719: 2008-10-03 16:02 millert
720:
721: * lbuf.c: fix typo in non-C89 function declaration
722:
723: 2008-10-03 15:56 millert
724:
725: * sudoers.pod: Mention POSIX characters classes now that out
726: fnmatch() and glob() support them.
727:
728: 2008-10-03 15:55 millert
729:
730: * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
731: UTF8) with [A-Za-z] which is locale agnostic.
732:
733: 2008-10-03 10:02 millert
734:
735: * parse.h: use __signed char if we are going to assign a negative
736: value since on Power, char is unsigned by default
737:
738: 2008-10-03 09:59 millert
739:
740: * configure, configure.in, config.h.in: Add tests for __signed char
741: and signed char.
742:
743: 2008-10-03 09:19 millert
744:
745: * aix.c: Fix AIX limit setting. getuserattr() returns values in
746: disk blocks rather than bytes. The default hard stack size in
747: newer AIX is RLIM_SAVED_MAX. From Dale King.
748:
749: 2008-09-26 17:13 millert
750:
751: * fnmatch.c, glob.c, emul/charclass.h: Add character class support
752: to included glob(3) and fnmatch(3).
753:
754: 2008-09-16 08:28 millert
755:
756: * emul/fnmatch.h: Remove UCB advertising clause and some
757: compatibility defines.
758:
759: 2008-09-14 16:07 millert
760:
761: * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
762: re-invoking itself or sudo. This allows one to set EDITOR to
763: sudoedit without getting into an infinite loop of sudoedit
764: running itself until the path gets too big.
765:
766: 2008-09-13 20:45 millert
767:
768: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
769: sudoers_locale Defaults option to override the default sudoers
770: locale of "C".
771:
772: 2008-09-13 14:09 millert
773:
774: * sudo.c: Set locale to system default except for during sudoers
775: parse.
776:
777: 2008-09-12 09:34 millert
778:
779: * match.c: Redo change in 1.34 to use pointer arithmetic.
780:
781: 2008-09-11 07:06 millert
782:
783: * match.c: Fix a dereference (read) of a freed pointer. Reported
784: by Patrick Williams.
785:
786: 2008-08-23 19:09 millert
787:
788: * sudo.c: Set locale to "C" to avoid interpretation issues with
789: character ranges in sudoers. May want to make the locale a
790: sudoers option in the future.
791:
792: 2008-08-20 07:45 millert
793:
794: * config.h.in: we no longer use setproctitle
795:
796: 2008-08-20 07:41 millert
797:
798: * sudo.h: remove #if 1
799:
800: 2008-08-20 07:40 millert
801:
802: * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
803: package.
804:
805: 2008-07-12 08:53 millert
806:
807: * gram.c: regen with yacc skeleton bug fixed
808:
809: 2008-07-12 08:48 millert
810:
811: * sudoers.pod: Remove duplicate "as root". From Martin Toft.
812:
813: 2008-07-02 06:27 millert
814:
815: * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
816: passwd entry used for running commands as a uid not listed in the
817: passwd database. Fixes an issue with some PAM modules.
818:
819: 2008-07-01 07:57 millert
820:
821: * sudo.c: Error out in -i mode if the user has no shell. This can
822: happen when running commands as a uid with no password entry.
823:
824: 2008-06-26 07:49 millert
825:
826: * toke.c, toke.l: Better fix for line continuation inside double
827: quotes. Now accepts whitespace between the backslash and the
828: newline like the main lexer.
829:
830: 2008-06-25 14:31 millert
831:
832: * toke.c, toke.l: Fix line continuation in strings. It was only
833: being honored if preceded by whitespace.
834:
835: 2008-06-22 16:19 millert
836:
837: * config.h.in, configure, configure.in, logging.c: Replace the
838: double fork with a fork + daemonize.
839:
840: 2008-06-21 14:59 millert
841:
842: * env.c, sudo.c: The -i flag should imply env_reset. This got
843: broken in sudo 1.6.9.
844:
845: 2008-06-20 20:34 millert
846:
847: * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
848: is waited for. Instead of having a SIGCHLD handler, use the
849: double fork trick to orphan the child that opens the pipe to
850: sendmail. Fixes a problem running su on some Linux distros.
851:
852: 2008-06-20 17:16 millert
853:
854: * configure, configure.in: Fix configure test for dirfd() on Linux
855: where DIR is opaque.
856:
857: 2008-06-17 17:42 millert
858:
859: * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
860: QNX still has this problem we'll need to revisit this again.
861:
862: 2008-06-10 21:13 millert
863:
864: * logging.c: Ignore SIGPIPE instead of blocking it when piping to
865: the mailer. If we only block the signal it may be delivered
866: later when we unblock. Also, there is no need to block SIGCHLD
867: since we no longer do the double fork. The normal SIGCHLD
868: handler is sufficient.
869:
870: 2008-06-08 17:37 millert
871:
872: * configure, configure.in: Add description for NO_PAM_SESSION, from
873: a redhat patch.
874:
875: 2008-06-06 09:36 millert
876:
877: * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
878:
879: 2008-05-18 13:54 millert
880:
881: * configure, configure.in: Redo the test for dgettext() in a way
882: that hopefully will work around the libintl_dgettext() undefined
883: problem.
884:
885: 2008-05-11 09:21 millert
886:
887: * schema.ActiveDirectory: change filename in comment
888:
889: 2008-05-10 09:18 millert
890:
891: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
892: sudoers.ldap.pod: Reference schema.ActiveDirectory
893:
894: 2008-05-09 14:49 millert
895:
896: * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
897:
898: 2008-05-09 14:48 millert
899:
900: * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
901:
902: 2008-05-09 14:01 millert
903:
904: * schema.ActiveDirectory: Active Directory schema by Chantal
905: Paradis and Eric Paquet
906:
907: 2008-05-08 17:54 millert
908:
909: * parse.c: remove an XXX that was fixed
910:
911: 2008-05-08 12:53 millert
912:
913: * ChangeLog: sync
914:
915: 2008-05-08 12:49 millert
916:
917: * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
918: mode. This fixes a problem where the tag value printed was
919: influenced by defaults set in the first pass through the parser.
920:
921: 2008-05-03 21:29 millert
922:
923: * Makefile.in, sudo.psf: No point in packaging the TODO file
924:
925: 2008-05-03 21:24 millert
926:
927: * ChangeLog: sync
928:
929: 2008-05-02 20:53 millert
930:
931: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
932: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
933: Defaults option that is similar to /etc/environment on some
934: systems.
935:
936: 2008-05-02 16:38 millert
937:
938: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
939: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
940: sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
941: version to 1.7.0
942:
943: 2008-05-02 16:37 millert
944:
945: * UPGRADE: initial valgrind pass done
946:
947: 2008-04-23 08:30 millert
948:
949: * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
950: the secret.
951:
952: 2008-04-11 10:03 millert
953:
954: * ldap.c: define LDAPS_PORT if the system headers do not
955:
956: 2008-04-10 14:54 millert
957:
958: * gram.c, gram.y: Fix another memory leak in init_parser().
959:
960: 2008-04-10 12:51 millert
961:
962: * configure, configure.in: There was a missing space before the
963: ldap libs in SUDO_LIBS for some configurations.
964:
965: 2008-04-10 11:28 millert
966:
967: * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
968: leaks pointed out by valgrind.
969:
970: 2008-04-07 14:39 millert
971:
972: * sudo.c: fix "sudo -s" broken by mode/flags breakout
973:
974: 2008-04-07 14:26 millert
975:
976: * configure, configure.in: remove duplicate check for dgettext
977:
978: 2008-04-05 15:54 millert
979:
980: * aix.c: Fall back to default stanza if no user-specific limit is
981: found.
982:
983: 2008-04-02 15:56 millert
984:
985: * snprintf.c: include stdint.h if present
986:
987: 2008-04-02 15:28 millert
988:
989: * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
990:
991: 2008-04-01 19:18 millert
992:
993: * sudoers.ldap.pod: fix cut and pasto
994:
995: 2008-03-31 11:24 millert
996:
997: * pwutil.c: Add #ifdef PURITY
998:
999: 2008-03-30 17:36 millert
1000:
1001: * auth/bsdauth.c: remove useless cast
1002:
1003: 2008-03-27 19:07 millert
1004:
1005: * ChangeLog: sync
1006:
1007: 2008-03-27 19:04 millert
1008:
1009: * TODO: sync
1010:
1011: 2008-03-27 19:01 millert
1012:
1013: * sudo.h: Split MODE_* defines into primary and flags.
1014:
1015: 2008-03-26 13:11 millert
1016:
1017: * aix.c: It turns out the logic for getting AIX limits is more
1018: convoluted than I realized and differs depending on whether the
1019: soft and/or hard limits are defined.
1020:
1021: 2008-03-23 10:18 millert
1022:
1023: * Makefile.in, configure, configure.in: Back out AIX-specific
1024: change to set the sudo_noexec path to the .a file, we do really
1025: want to use the .so file. Since libtool doesn't do that
1026: correctly, just install the .so file ourselves in the Makefile.
1027:
1028: 2008-03-23 10:12 millert
1029:
1030: * install-sh: If the file given to install is a path, only use the
1031: basename of the file when building the destination path.
1032:
1033: 2008-03-18 16:08 millert
1034:
1035: * sudo.c: parse_args() cleanup: Sort command line options in the
1036: getopt() switch The -U option requires a parameter Normalize a
1037: few ISSET calls Split mode into mode and flags and retire the
1038: now-obsolete excl variable
1039:
1040: 2008-03-18 16:04 millert
1041:
1042: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1043: sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1044:
1045: 2008-03-18 15:59 millert
1046:
1047: * sudo.c: Move version printing, etc. into a separate function.
1048:
1049: 2008-03-18 15:57 millert
1050:
1051: * sudo.c: Don't try to cleanup nsswitch if it has not been
1052: initialized.
1053:
1054: 2008-03-17 11:09 millert
1055:
1056: * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1057: a problem executing the mailer.
1058:
1059: 2008-03-14 08:11 millert
1060:
1061: * configure.in, configure: AIX shared libs end in .a, not .so.
1062:
1063: 2008-03-13 07:34 millert
1064:
1065: * env.c: Preserve HOME by default too. Matches documentation and
1066: previous behavior.
1067:
1068: 2008-03-12 19:42 millert
1069:
1070: * sudo.c: Use getopt() to parse the command line. We need to be
1071: able to intersperse env variables and options yet still honor
1072: "--"" which complicates things slightly.
1073:
1074: 2008-03-06 14:46 millert
1075:
1076: * ChangeLog: sync
1077:
1078: 2008-03-06 14:43 millert
1079:
1080: * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1081:
1082: 2008-03-06 14:32 millert
1083:
1084: * config.guess, config.sub: update from libtool-1.5.26 distribution
1085:
1086: 2008-03-06 13:18 millert
1087:
1088: * aix.c, sudo.h: attempt to fix compilation errors on AIX
1089:
1090: 2008-03-06 13:08 millert
1091:
1092: * Makefile.in: fix typo in last commit
1093:
1094: 2008-03-06 13:07 millert
1095:
1096: * Makefile.in: Add WHATSNEW file to the distribution
1097:
1098: 2008-03-06 12:43 millert
1099:
1100: * visudo.c: use warningx instead of fprintf(stderr, ...)
1101:
1102: 2008-03-06 12:31 millert
1103:
1104: * list.c: add DEBUG to list2tq
1105:
1106: 2008-03-06 12:28 millert
1107:
1108: * ChangeLog, TODO: sync
1109:
1110: 2008-03-06 12:21 millert
1111:
1112: * WHATSNEW: mention mailfrom
1113:
1114: 2008-03-06 12:19 millert
1115:
1116: * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1117: sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1118: using a combination of getuserattr() and setrlimit(). Currently
1119: untested.
1120:
1121: 2008-03-05 16:52 millert
1122:
1123: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1124: sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1125: sets the value of the From: field in the warning/error mail. If
1126: unset the login name of the invoking user is used.
1127:
1128: 2008-03-05 16:18 millert
1129:
1130: * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1131: that is freeable
1132:
1133: 2008-03-05 15:19 millert
1134:
1135: * gram.c, gram.y: When adding a default, only call list2tq() once
1136: to do the list to tq conversion. It is not legal to call list2tq
1137: multiple times on the same list since list2tq consumes and
1138: modifies the list argument.
1139:
1140: 2008-03-05 09:38 millert
1141:
1142: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1143: out XXXs for now
1144:
1145: 2008-03-05 09:36 millert
1146:
1147: * WHATSNEW: mention askpass
1148:
1149: 2008-03-04 17:20 millert
1150:
1151: * sudo.c: Error out if both -A and -S are specified Error out if -A
1152: is specified but no askpass is configured
1153:
1154: 2008-03-04 17:16 millert
1155:
1156: * configure, configure.in: we are not going to ship a sudo-specific
1157: askpass
1158:
1159: 2008-03-03 14:30 millert
1160:
1161: * sudo.h: fix definition of TGP_ASKPASS
1162:
1163: 2008-03-03 13:54 millert
1164:
1165: * def_data.c, def_data.in: make askpass boolean-capable
1166:
1167: 2008-03-03 13:53 millert
1168:
1169: * INSTALL: document --with-askpass
1170:
1171: 2008-03-02 19:27 millert
1172:
1173: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1174: sudoers.ldap.cat, visudo.cat: regen
1175:
1176: 2008-03-02 17:31 millert
1177:
1178: * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1179:
1180: 2008-03-02 09:31 millert
1181:
1182: * check.c, configure, configure.in, def_data.c, def_data.h,
1183: def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1184: sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1185: running a helper program to read the password when no tty is
1186: present (or when specified with the -A flag). TODO: docs.
1187:
1188: 2008-03-02 08:38 millert
1189:
1190: * def_data.c, def_data.in: add missing printf format to SELinux
1191: role and type strings
1192:
1193: 2008-02-27 09:26 millert
1194:
1195: * INSTALL, configure, configure.in: Disable use of
1196: gss_krb5_ccache_name() by default and add
1197: --enable-gss-krb5-ccache-name configure option to enable it. It
1198: seems that gss_krb5_ccache_name() doesn't work properly with some
1199: combinations of Heimdal and OpenLDAP.
1200:
1201: 2008-02-22 15:33 millert
1202:
1203: * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1204: add a call to setkeycreatecon() (though this is probably
1205: insufficient). From Dan Walsh.
1206:
1207: 2008-02-22 15:19 millert
1208:
1209: * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1210: conversation function may be called for non-password reading
1211: purposes so we must be careful not to use def_prompt in cases
1212: where it may not be set.
1213:
1214: 2008-02-20 12:00 millert
1215:
1216: * selinux.c: Don't free the new tty context, we need to keep it
1217: around when we restore the tty context after the command
1218: completes
1219:
1220: 2008-02-19 16:04 millert
1221:
1222: * selinux.c: s/newrole/sudo/
1223:
1224: 2008-02-19 13:21 millert
1225:
1226: * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1227: if we have login.conf support
1228:
1229: 2008-02-18 11:05 millert
1230:
1231: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1232: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1233: regen
1234:
1235: 2008-02-18 10:53 millert
1236:
1237: * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1238: sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1239: lines partaining to login.conf, BSD auth and SELinux and only
1240: enable them if pertinent.
1241:
1242: 2008-02-18 10:42 millert
1243:
1244: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1245: Remove the =cut on the first line (above the copyright notice) to
1246: quiet pod2man. Also remove the hackery in the FILES section and
1247: just deal with the fact that there will a newline between each
1248: pathname.
1249:
1250: 2008-02-17 08:19 millert
1251:
1252: * Makefile.in: run sudo.man.pl when generating sudo.man.in
1253:
1254: 2008-02-17 08:11 millert
1255:
1256: * configure, configure.in, sudo.man.pl: comment out SELinux manual
1257: bits unless --with-selinux was specified
1258:
1259: 2008-02-17 08:04 millert
1260:
1261: * sudoers.pod: document role and type defaults for SELinux
1262:
1263: 2008-02-16 20:26 millert
1264:
1265: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1266: Document "sudo -ll" and make "sudo -l -l" be equivalent.
1267:
1268: 2008-02-15 15:23 millert
1269:
1270: * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1271: Fixes compilation problems on Debian GNU/kFreeBSD.
1272:
1273: 2008-02-13 17:17 millert
1274:
1275: * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1276: rewrite of verify_krb_v5_tgt()
1277:
1278: 2008-02-13 07:28 millert
1279:
1280: * logging.c, logging.h, sudo.c: Remove dependence on
1281: VALIDATE_NOT_OK in logging functions. Split log_auth() into
1282: log_allowed() and log_denial() Replace mail_auth() with
1283: should_mail() and a call to send_mail()
1284:
1285: 2008-02-10 18:06 millert
1286:
1287: * ldap.c: Add debugging so we can tell if the krb5 ccache is
1288: accessible
1289:
1290: 2008-02-10 17:34 millert
1291:
1292: * INSTALL: mention --with-selinux
1293:
1294: 2008-02-09 09:48 millert
1295:
1296: * configure: regen
1297:
1298: 2008-02-09 09:43 millert
1299:
1300: * selinux.c: add Sudo tag
1301:
1302: 2008-02-09 09:30 millert
1303:
1304: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1305: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1306: pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1307: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1308: sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1309: toke.l: Add support for SELinux RBAC. Sudoers entries may
1310: specify a role and type. There are also role and type defaults
1311: that may be used. To make sure a transition occurs, when using
1312: RBAC commands are executed via the new sesh binary. Based on
1313: initial changes from Dan Walsh.
1314:
1315: 2008-02-08 08:18 millert
1316:
1317: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1318: list (sudo -ll) support for printing verbose LDAP and sudoers
1319: file entries. Still need to update manual.
1320:
1321: 2008-02-03 10:43 millert
1322:
1323: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1324: output for file and ldap based sudoers and use lbufs for both.
1325: The ldap output does not currently include options that cannot be
1326: represented as tags. This will be remedied in a long list output
1327: mode to come.
1328:
1329: 2008-01-27 16:37 millert
1330:
1331: * set_perms.c: Use a specific error message for errno == EAGAIN
1332: when setuid() et al fails. On Linux systems setuid() will fail
1333: with errno set to EAGAIN if changing to the new uid would result
1334: in a resource limit violation.
1335:
1336: 2008-01-27 16:34 millert
1337:
1338: * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1339: family of syscalls causes the nroc resource limit to be checked.
1340: The limits will be reset by pam_limits.so when PAM is used. In
1341: the non-PAM case the nproc limit will remain unlimited but there
1342: doesn't seem to be a way around that other than having sudo parse
1343: /etc/security/limits.conf directly.
1344:
1345: 2008-01-27 16:31 millert
1346:
1347: * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1348: AIX
1349:
1350: 2008-01-23 06:33 millert
1351:
1352: * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1353: AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1354: from going into config.h. Avoid single quotes in variable
1355: expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1356: of bash they will end up literally in the resulting define.
1357:
1358: 2008-01-21 13:22 millert
1359:
1360: * README.LDAP: mention --with-nsswitch=no
1361:
1362: 2008-01-21 11:43 millert
1363:
1364: * configure, configure.in: ldap_ssl.h depends on ldap.h being
1365: included first
1366:
1367: 2008-01-21 11:07 millert
1368:
1369: * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1370: if we can find it. Needed for the ldapssl_set_strength defines
1371: on HP-UX at least.
1372:
1373: 2008-01-21 10:02 millert
1374:
1375: * TODO, sudoers.ldap.pod: sync
1376:
1377: 2008-01-21 10:01 millert
1378:
1379: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1380: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1381: regen
1382:
1383: 2008-01-21 10:00 millert
1384:
1385: * Makefile.in: Use 78n line length when formatting cat pages.
1386:
1387: 2008-01-21 09:50 millert
1388:
1389: * README.LDAP: Remove redundant info that is now in
1390: sudoers.ldap.pod
1391:
1392: 2008-01-20 16:18 millert
1393:
1394: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1395: Reorganize the first section a bit. Substitute the proper path
1396: for /etc/sudoers.
1397:
1398: 2008-01-20 10:17 millert
1399:
1400: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1401: Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1402: Move schema into EXAMPLES
1403:
1404: 2008-01-20 10:15 millert
1405:
1406: * configure.in, configure: Substitute values for ldap.conf,
1407: ldap.secret and nsswitch.conf into sudoers.ldap.man.
1408:
1409: 2008-01-19 20:35 millert
1410:
1411: * configure, configure.in: substitute for sudoers.ldap.man
1412:
1413: 2008-01-19 20:34 millert
1414:
1415: * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1416: man page.
1417:
1418: 2008-01-19 20:25 millert
1419:
1420: * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1421: some of the missing pieces. Still needs some reorganization and
1422: editing.
1423:
1424: 2008-01-19 15:06 millert
1425:
1426: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1427: sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1428: Currently, much of the information is adapted from README.LDAP.
1429:
1430: 2008-01-18 17:32 millert
1431:
1432: * pwutil.c: When copying gr_mem we must guarantee that the storage
1433: space for gr_mem is properly aligned. The simplest way to do
1434: this is to simply store gr_mem directly after struct group. This
1435: is not a problem for gr_passwd or gr_name as they are simple
1436: strings.
1437:
1438: 2008-01-18 16:47 millert
1439:
1440: * ldap.c: Fix a typo/thinko in one of the calls to
1441: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1442:
1443: 2008-01-17 15:44 millert
1444:
1445: * config.h.in, configure, configure.in, ldap.c: include
1446: <mps/ldap_ssl.h> in ldap.c if available
1447:
1448: 2008-01-16 18:20 millert
1449:
1450: * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1451: skeleton.c
1452:
1453: 2008-01-16 13:03 millert
1454:
1455: * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1456: echo) to guarantee that any pending output is discarded
1457:
1458: 2008-01-15 17:18 millert
1459:
1460: * sudoers: no longer need to specify SETENV when user has sudo ALL
1461:
1462: 2008-01-15 09:40 millert
1463:
1464: * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1465: group option, renaming old -g to -G Add set_runasgr() and
1466: set_runaspw() and use them
1467:
1468: 2008-01-15 09:23 millert
1469:
1470: * sudo.h, sudo.c: Make set_runaspw static void
1471:
1472: 2008-01-15 09:17 millert
1473:
1474: * testsudoers.c, visudo.c: g/c set_runaspw stub
1475:
1476: 2008-01-15 07:28 millert
1477:
1478: * configure, configure.in: Don't add -llber twice.
1479:
1480: 2008-01-14 06:40 millert
1481:
1482: * ldap.c: fix typo
1483:
1484: 2008-01-13 15:39 millert
1485:
1486: * gram.c: regen
1487:
1488: 2008-01-13 14:57 millert
1489:
1490: * configure, configure.in: Fix check that determines whether -llber
1491: is required.
1492:
1493: 2008-01-13 14:22 millert
1494:
1495: * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1496: netscape-based LDAP, use ldapssl_set_strength() to implement the
1497: checkpeer ldap.conf option.
1498:
1499: 2008-01-13 09:49 millert
1500:
1501: * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1502: to use the cred cache, which is what krb5_verify_user() does.
1503: Better cleanup on failure.
1504:
1505: 2008-01-12 12:40 millert
1506:
1507: * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1508: krb5_verify_user() does.
1509:
1510: 2008-01-09 14:58 millert
1511:
1512: * gram.c: The U suffix on constants is an ANSI feature
1513:
1514: 2008-01-09 12:08 millert
1515:
1516: * configure.in, configure: Add check for ber_set_option() in -llber
1517:
1518: 2008-01-06 19:02 millert
1519:
1520: * README.LDAP: default if no nsswitch.conf is files only
1521:
1522: 2008-01-06 17:28 millert
1523:
1524: * README.LDAP: don't tell people to mail aaron about LDAP stuff
1525:
1526: 2008-01-06 12:32 millert
1527:
1528: * README.LDAP: timelimit and bind_timelimit
1529:
1530: 2008-01-06 08:54 millert
1531:
1532: * ChangeLog: sync
1533:
1534: 2008-01-06 07:56 millert
1535:
1536: * ldap.c: Move ldap.secret reading into a separate function.
1537:
1538: 2008-01-05 19:09 millert
1539:
1540: * check.c: user_runas -> runas_pw
1541:
1542: 2008-01-05 18:59 millert
1543:
1544: * TODO: sync
1545:
1546: 2008-01-05 18:59 millert
1547:
1548: * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1549: the password prompt. Based on a patch from Patrick Schoenfeld.
1550:
1551: 2008-01-05 18:25 millert
1552:
1553: * ldap.c: Check strlcpy() return values.
1554:
1555: 2008-01-05 18:12 millert
1556:
1557: * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1558:
1559: 2008-01-05 16:35 millert
1560:
1561: * README.LDAP: Make it clear that host and uri can take multiple
1562: parameters. URI is now supported for more than just openldap
1563: nsswitch.conf does't accept "compat"
1564:
1565: 2008-01-05 16:27 millert
1566:
1567: * sudo.c: comment cleanup and update (c) year
1568:
1569: 2008-01-05 16:25 millert
1570:
1571: * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1572: parse.c to sudo_nss.c. This should make it possible to build an
1573: LDAP-only sudo binary.
1574:
1575: 2008-01-05 13:27 millert
1576:
1577: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1578: multiple sudoers sources by passing in the previous return value
1579: to the next in the chain
1580:
1581: 2008-01-05 13:26 millert
1582:
1583: * gram.y: Free up parser data structures in sudo_file_close().
1584:
1585: 2008-01-05 08:13 millert
1586:
1587: * gram.c, parse.c: Free up parser data structures in
1588: sudo_file_close().
1589:
1590: 2008-01-05 07:59 millert
1591:
1592: * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1593: ldap_create() instead of deprecated ldap_init() Use
1594: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1595:
1596: 2008-01-05 07:56 millert
1597:
1598: * config.h.in, configure, configure.in: Add check for
1599: ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1600:
1601: 2008-01-04 09:56 millert
1602:
1603: * configure.in, configure, config.h.in: add check for ldap_create
1604:
1605: 2008-01-03 16:11 millert
1606:
1607: * config.h.in, configure, configure.in, ldap.c: Add
1608: sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1609: dn using the mechanism appropriate for the LDAP SDK in use. Use
1610: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1611: Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1612: without them.
1613:
1614: 2008-01-03 16:02 millert
1615:
1616: * lbuf.c: include unistd.h
1617:
1618: 2008-01-03 11:05 millert
1619:
1620: * config.h.in, configure.in: fix typo in mtim_getnsec
1621:
1622: 2008-01-02 15:29 millert
1623:
1624: * config.h.in, configure.in, configure: add check for st__tim in
1625: struct stat as used by SCO
1626:
1627: 2008-01-02 11:05 millert
1628:
1629: * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1630:
1631: 2008-01-02 10:09 millert
1632:
1633: * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1634:
1635: 2008-01-01 19:04 millert
1636:
1637: * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1638: ldap_str2dn() and ldap_rdn2str().
1639:
1640: 2008-01-01 18:37 millert
1641:
1642: * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1643: of the deprecated ldap_get_values()/ldap_value_free().
1644:
1645: 2008-01-01 17:07 millert
1646:
1647: * TODO, ChangeLog: sync
1648:
1649: 2008-01-01 17:06 millert
1650:
1651: * gettime.c, sudo.c: Remove some already fixed XXXs
1652:
1653: 2008-01-01 17:03 millert
1654:
1655: * ldap.c: Same return value as non-existent sudoers if LDAP was
1656: unable to connect.
1657:
1658: 2008-01-01 16:52 millert
1659:
1660: * sudo.pod: mention /etc/environment
1661:
1662: 2008-01-01 16:42 millert
1663:
1664: * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1665: developments.
1666:
1667: 2008-01-01 16:42 millert
1668:
1669: * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1670: -V output.
1671:
1672: 2008-01-01 16:25 millert
1673:
1674: * ldap.c: When building up a query don't list groups in the aux
1675: group vector that are the same as the passwd file group. On most
1676: systems the first gid in the group vector is the same as the
1677: passwd entry gid.
1678:
1679: 2008-01-01 14:01 millert
1680:
1681: * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1682: to disable user ldaprc and system defaults that could affect how
1683: LDAP works.
1684:
1685: 2008-01-01 13:21 millert
1686:
1687: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1688: sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1689: --with-nsswitch to allow users to specify nsswitch.conf path or
1690: disable it. If --with-nsswitch=no but --with-ldap, order is
1691: LDAP, then sudoers. Fix --with-ldap-conf-file and
1692: --with-ldap-secret-file
1693:
1694: 2008-01-01 13:12 millert
1695:
1696: * parse.c: Honor def_ignore_local_sudoers
1697:
1698: 2007-12-31 16:44 millert
1699:
1700: * ldap.c: no longer need to check def_ignore_local_sudoers here
1701:
1702: 2007-12-31 16:36 millert
1703:
1704: * parse.c: Refactor group vector resetting into a function and also
1705: call it from display_cmnd. Stop after the first sucessful match
1706: in display_cmnd. Print a newline between each display_privs
1707: method.
1708:
1709: 2007-12-31 16:23 millert
1710:
1711: * parse.c: fix double free introduced in rev 1.218
1712:
1713: 2007-12-31 16:10 millert
1714:
1715: * ldap.c: belt and suspenders; zero out result after freeing it
1716:
1717: 2007-12-31 15:04 millert
1718:
1719: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1720: reading into a separate function, sudo_parseln(), which removes
1721: comments, leading/trailing whitespace and newlines. May want to
1722: rethink the use of sudo_parseln() for /etc/ldap.secret
1723:
1724: 2007-12-31 14:26 millert
1725:
1726: * parse.c, sudo.c: Make the inability to read the sudoers file a
1727: non-fatal error if there are other sudoers sources available.
1728: sudoers_file_lookup now returns "not OK" if sudoers was not
1729: present
1730:
1731: 2007-12-31 14:24 millert
1732:
1733: * ldap.c: make it clear that the global options are from LDAP
1734:
1735: 2007-12-31 14:13 millert
1736:
1737: * logging.c: allocate proper amount of space for error string
1738:
1739: 2007-12-31 10:24 millert
1740:
1741: * sudo_nss.c, sudo_nss.h: actual sudo nss code
1742:
1743: 2007-12-31 10:08 millert
1744:
1745: * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
1746: display_cmnd.
1747:
1748: 2007-12-31 07:54 millert
1749:
1750: * defaults.c, parse.c, testsudoers.c, visudo.c: move
1751: update_defaults() to parse.c
1752:
1753: 2007-12-31 07:39 millert
1754:
1755: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
1756: Use nsswitch to hide some sudoers vs. ldap implementation details
1757: and reduce the number of #ifdef LDAP TODO: fix display routines
1758: and error handling
1759:
1760: 2007-12-28 11:20 millert
1761:
1762: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
1763: First cut at nsswitch.conf support. Further reorganizaton and
1764: related changes are forthcoming.
1765:
1766: 2007-12-21 16:53 millert
1767:
1768: * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
1769: and /etc/environment file. Still needs to be documented and
1770: should probably only applies to OSes that have it (AIX and Linux,
1771: maybe others).
1772:
1773: 2007-12-21 16:20 millert
1774:
1775: * ldap.c: include limits.h
1776:
1777: 2007-12-20 10:02 millert
1778:
1779: * WHATSNEW: reword LDAP SASL
1780:
1781: 2007-12-19 16:40 millert
1782:
1783: * TODO: sync
1784:
1785: 2007-12-19 16:39 millert
1786:
1787: * README.LDAP: Add an example sudoRole, clarify netscape vs.
1788: openldap a bit more
1789:
1790: 2007-12-19 14:42 millert
1791:
1792: * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
1793:
1794: 2007-12-19 14:28 millert
1795:
1796: * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
1797: for ldaps support instead of trying to do it manually with
1798: ldap_init() + ldapssl_install_routines(). Use tls_cert and
1799: tls_key for cert7.db and key3.db respectively. Don't print
1800: debugging info for options that are not set. Add warning if
1801: start_tls specified when not supported.
1802:
1803: 2007-12-19 14:25 millert
1804:
1805: * ldap.c: fix compilation on solaris
1806:
1807: 2007-12-19 14:23 millert
1808:
1809: * Makefile.in: add missing .h and .c files for missing lib objs
1810:
1811: 2007-12-18 09:54 millert
1812:
1813: * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
1814:
1815: 2007-12-17 20:10 millert
1816:
1817: * ldap.c: fix compilation on Solaris
1818:
1819: 2007-12-17 10:14 millert
1820:
1821: * configure, configure.in: fix typo
1822:
1823: 2007-12-17 08:08 millert
1824:
1825: * README.LDAP: try to clear up which variables are for OpenLDAP and
1826: which are for netscape-derived SDKs
1827:
1828: 2007-12-17 07:31 millert
1829:
1830: * config.h.in, configure, configure.in, ldap.c: Add support for
1831: "ssl on" in both netscape and openldap flavors. Only the
1832: OpenLDAP flavor has been tested.
1833:
1834: 2007-12-17 07:28 millert
1835:
1836: * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
1837: log_error() instead of calling sudo_ldap_close() directly.
1838: ldap_conn can now be static to sudo.c
1839:
1840: 2007-12-16 20:02 millert
1841:
1842: * sudo.c: ld -> ldap_conn
1843:
1844: 2007-12-16 14:42 millert
1845:
1846: * logging.c, sudo.c, sudo.h: Better ldap cleanup.
1847:
1848: 2007-12-16 14:08 millert
1849:
1850: * ldap.c: Distinguish between LDAP conf settings that are
1851: connection-specific (which take an ld pointer) and those that are
1852: default settings (which do not).
1853:
1854: 2007-12-14 16:46 millert
1855:
1856: * ldap.c: Improved warnings on error.
1857:
1858: 2007-12-14 15:59 millert
1859:
1860: * ldap.c: Make ldap config table driven and set the config *after*
1861: we open the connection.
1862:
1863: 2007-12-13 16:41 millert
1864:
1865: * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
1866:
1867: 2007-12-13 09:13 millert
1868:
1869: * configure, configure.in: some operating systems need to link with
1870: -lkrb5support when using krb5
1871:
1872: 2007-12-10 17:12 millert
1873:
1874: * WHATSNEW: minor update
1875:
1876: 2007-12-10 10:56 millert
1877:
1878: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
1879:
1880: 2007-12-07 19:17 millert
1881:
1882: * TODO, ChangeLog: sync
1883:
1884: 2007-12-07 19:09 millert
1885:
1886: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
1887: support for LDAP
1888:
1889: 2007-12-03 11:36 millert
1890:
1891: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
1892: can now take an optional command.
1893:
1894: 2007-12-02 12:13 millert
1895:
1896: * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
1897: sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
1898: that will cause the prompt to be overridden in all cases. This
1899: flag is also set when the user specifies the -p flag.
1900:
1901: 2007-12-01 19:51 millert
1902:
1903: * sudo.c: Move setting of login class until after sudoers has been
1904: parsed. Set NewArgv[0] for -i after runas_pw has been set.
1905:
1906: 2007-12-01 19:34 millert
1907:
1908: * configure, configure.in: Move the dgettext check.
1909:
1910: 2007-12-01 11:22 millert
1911:
1912: * config.h.in, configure, configure.in, auth/pam.c: Add basic
1913: support for looking up the string "Password: " in the PAM
1914: localized text db. This allows us to determine whether the PAM
1915: prompt is the default "Password: " one even if it has been
1916: localized.
1917:
1918: TODO: concatenate non-std PAM prompts and user-specified sudo
1919: prompts.
1920:
1921: 2007-11-27 18:40 millert
1922:
1923: * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
1924: sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
1925: home-grown attempt that was insufficient.
1926:
1927: 2007-11-27 12:13 millert
1928:
1929: * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
1930: Martynas Venckus
1931:
1932: 2007-11-25 19:26 millert
1933:
1934: * set_perms.c: Don't assume runas_pw is set; it may not be in the
1935: -g case.
1936:
1937: 2007-11-25 08:07 millert
1938:
1939: * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
1940: restore group vector for PERM_ROOT if we previously changed it.
1941: Stash the runas group vector so we don't have to call initgroups
1942: more than once. Also add no-op check to check_perms.
1943:
1944: 2007-11-21 15:11 millert
1945:
1946: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
1947: gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
1948: parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
1949: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
1950: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
1951: visudo.cat, visudo.man.in: Add support for runas groups. This
1952: allows the user to run a command with a different effective
1953: group. If the -g option is specified without -u the command will
1954: be run as the current user (only the group will change). the -g
1955: and -u options may be used together. TODO: implement runas group
1956: for ldap improve runas group documentation add
1957: testsudoers support
1958:
1959: 2007-11-21 15:02 millert
1960:
1961: * configure, configure.in: fix setting of mandir
1962:
1963: 2007-11-21 14:26 millert
1964:
1965: * sudo.pod, sudoers.pod: document that ALL implies SETENV
1966:
1967: 2007-11-21 13:50 millert
1968:
1969: * ldap.c: s/setenv_ok/setenv_implied/g
1970:
1971: 2007-11-21 13:44 millert
1972:
1973: * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
1974:
1975: 2007-11-21 13:26 millert
1976:
1977: * ldap.c: use strcmp, not strcasecmp when comparing ALL
1978:
1979: 2007-11-21 11:41 millert
1980:
1981: * ldap.c: Make sudo ALL imply setenv. Note that unlike with
1982: file-based sudoers this does affect all the commands in the
1983: sudoRole.
1984:
1985: 2007-11-21 11:05 millert
1986:
1987: * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
1988: SETENV tag but, unlike an explicit tag, it is not passed on to
1989: other commands in the list.
1990:
1991: 2007-11-21 11:02 millert
1992:
1993: * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
1994: Also use sudo_getpwuid() instead of getpwuid().
1995:
1996: 2007-11-15 11:16 millert
1997:
1998: * sudoers: Expand on the dangers of not using visudo to edit
1999: sudoers.
2000:
2001: 2007-11-08 07:24 millert
2002:
2003: * parse.c: Don't quote *?[]! on output since the lexer does not
2004: strip off the backslash when reading those in.
2005:
2006: 2007-11-07 13:16 millert
2007:
2008: * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2009: compatibility issues.
2010:
2011: 2007-11-04 08:33 millert
2012:
2013: * logging.c: Refactor log line generation in to new_logline().
2014:
2015: 2007-10-25 09:23 millert
2016:
2017: * TROUBLESHOOTING: fix typo
2018:
2019: 2007-10-24 12:41 millert
2020:
2021: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2022: match.c: Add configure check for struct in6_addr instead of
2023: relying on AF_INET6 since some systems define AF_INET6 but do not
2024: include IPv6 support.
2025:
2026: 2007-10-21 09:29 millert
2027:
2028: * configure, configure.in: Fix block to add -lutil for FreeBSD and
2029: NetBSD when logincap is in use.
2030:
2031: 2007-10-19 22:28 millert
2032:
2033: * configure, configure.in: POSIX states that struct timespec be
2034: declared in time.h so check there regardless of the value of
2035: TIME_WITH_SYS_TIME.
2036:
2037: 2007-10-17 11:37 millert
2038:
2039: * tgetpass.c: Instead of defining a macro to call the appropriate
2040: method for turning on/off echo, just define tc[gs]etattr() and
2041: the related defines that use the correct terminal ioctls if
2042: needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2043: all but QNX.
2044:
2045: 2007-10-08 20:18 millert
2046:
2047: * Makefile.in: g/c @ALLOCA@
2048:
2049: 2007-10-08 20:07 millert
2050:
2051: * configure: regen
2052:
2053: 2007-10-08 20:04 millert
2054:
2055: * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2056: --disable-pam-session configure option to disable calling
2057: pam_{open,close}_session. May work around bugs in some PAM
2058: implementations.
2059:
2060: 2007-10-08 12:00 millert
2061:
2062: * tgetpass.c: quiet gcc warnings
2063:
2064: 2007-10-08 08:41 millert
2065:
2066: * tgetpass.c: Avoid printing the prompt if we are already
2067: backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2068: In this case, the call to tcsetattr() will cause SIGTTOU to be
2069: delivered.
2070:
2071: 2007-09-15 16:07 millert
2072:
2073: * def_data.c, def_data.h, def_data.in: Reorder things such that the
2074: definition of env_reset come right before the env variable lists.
2075:
2076: 2007-09-15 07:50 millert
2077:
2078: * parse.h: Shrink type and seqno in struct alias from int to
2079: u_short
2080:
2081: 2007-09-15 07:24 millert
2082:
2083: * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2084: aliases for loop detection. If we find an alias with the seqno
2085: already set to the current (global) value we know we've visited
2086: it before so ignore it.
2087:
2088: 2007-09-13 19:05 millert
2089:
2090: * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2091: add user_ttypath which holds the full path to the tty or is NULL
2092: if no tty was present.
2093:
2094: 2007-09-13 18:42 millert
2095:
2096: * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2097: lower that results in a segv.
2098:
2099: 2007-09-11 15:43 millert
2100:
2101: * gram.c: regen
2102:
2103: 2007-09-11 15:42 millert
2104:
2105: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2106: parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2107:
2108: 2007-09-10 17:33 millert
2109:
2110: * alloc.c: remove some useless casts
2111:
2112: 2007-09-10 17:32 millert
2113:
2114: * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2115: inttypes.h predates the final C99 spec and the standard specifies
2116: that it shall include stdint.h anyway
2117:
2118: 2007-09-06 12:39 millert
2119:
2120: * Makefile.in, alloca.c, configure.in: Since we ship with a
2121: pre-generated parser there is no need to ship a bogus alloca
2122: implementation.
2123:
2124: 2007-09-06 12:22 millert
2125:
2126: * configure: regen
2127:
2128: 2007-09-06 12:19 millert
2129:
2130: * configure.in: remove initial setting of CHECKSIA, we require that
2131: it be unset if not used
2132:
2133: 2007-09-06 11:55 millert
2134:
2135: * Makefile.in: add list.c to SRCS
2136:
2137: 2007-09-06 07:18 millert
2138:
2139: * configure: regen
2140:
2141: 2007-09-06 07:17 millert
2142:
2143: * configure.in: only do SIA checks on Digital Unix
2144:
2145: 2007-09-05 18:50 millert
2146:
2147: * sudoers.cat, sudoers.man.in: regen
2148:
2149: 2007-09-05 18:48 millert
2150:
2151: * ChangeLog, TODO: sync
2152:
2153: 2007-09-05 18:39 millert
2154:
2155: * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2156: needed for modern kerb5.
2157:
2158: 2007-09-05 18:16 millert
2159:
2160: * configure: regen
2161:
2162: 2007-09-05 18:16 millert
2163:
2164: * configure.in, aclocal.m4: New method for setting the default
2165: authentication type and avoiding conflicts in auth types.
2166:
2167: 2007-09-05 14:45 millert
2168:
2169: * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2170: an associated runaslist so no need to keep track of the most
2171: recent non-NULL one.
2172:
2173: 2007-09-04 18:51 millert
2174:
2175: * ldap.c: back out partial ldaps support mistakenly committed
2176:
2177: 2007-09-04 10:57 millert
2178:
2179: * ldap.c: Add support for unix groups and netgroups in sudoRunas
2180:
2181: 2007-09-03 16:28 millert
2182:
2183: * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2184: Stritzky.
2185:
2186: 2007-09-02 17:05 millert
2187:
2188: * configure: regen
2189:
2190: 2007-09-02 17:05 millert
2191:
2192: * INSTALL: update --passprompt escape info
2193:
2194: 2007-09-02 17:03 millert
2195:
2196: * configure.in: remove now-bogus comment and update copyright date
2197:
2198: 2007-09-02 16:35 millert
2199:
2200: * configure.in: Fix up use of with_passwd
2201:
2202: 2007-09-02 16:25 millert
2203:
2204: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2205: Update to autoconf-2.61 andf libtool-1.5.24
2206:
2207: 2007-09-02 16:17 millert
2208:
2209: * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2210: autoconf-2.61
2211:
2212: 2007-09-01 17:39 millert
2213:
2214: * gram.c: regen
2215:
2216: 2007-09-01 17:39 millert
2217:
2218: * gram.y: move tags and runaslist propagation to be earlier
2219:
2220: 2007-09-01 09:34 millert
2221:
2222: * visudo.c: If -f flag given use the permissions of the original
2223: file as a template
2224:
2225: 2007-09-01 08:45 millert
2226:
2227: * gram.y: prevent a double free() when re-initing the parser
2228:
2229: 2007-08-31 19:30 millert
2230:
2231: * configure: regen
2232:
2233: 2007-08-31 19:30 millert
2234:
2235: * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2236: ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2237: redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2238: testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2239: auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2240: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2241: Remove support for compilers that don't support void *
2242:
2243: 2007-08-31 19:14 millert
2244:
2245: * gram.c: regen
2246:
2247: 2007-08-31 19:13 millert
2248:
2249: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2250: match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2251: manipulation macros to list.h and create C versions of the more
2252: complex ones in list.c. The names have been down-cased so they
2253: appear more like normal functions.
2254:
2255: 2007-08-31 17:21 millert
2256:
2257: * Makefile.in: Fix cmp command when regenerating parser. Make
2258: gram.o the first dependency for all programs so gram.h will be
2259: generated before anything that needs it.
2260:
2261: 2007-08-31 13:56 millert
2262:
2263: * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2264: functions.
2265:
2266: 2007-08-30 21:21 millert
2267:
2268: * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2269: permission and short-circuit on the first non-UNSPEC hit we get
2270: for the command. This means that instead of cycling through the
2271: all the parsed sudoers entries we start at the end and work
2272: backwards and quit after the first positive or negative match.
2273:
2274: 2007-08-30 21:13 millert
2275:
2276: * gram.c: regen
2277:
2278: 2007-08-30 21:12 millert
2279:
2280: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2281: Change list head macros to take a pointer, not a struct.
2282:
2283: 2007-08-30 20:46 millert
2284:
2285: * gram.c: regen
2286:
2287: 2007-08-30 20:46 millert
2288:
2289: * gram.y: Propagate the runasspec from one command to the next in a
2290: cmndspec.
2291:
2292: 2007-08-30 16:15 millert
2293:
2294: * match.c: Replace has_meta() with a macro that calls strpbrk().
2295:
2296: 2007-08-30 16:04 millert
2297:
2298: * gram.c: regen
2299:
2300: 2007-08-30 13:26 millert
2301:
2302: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2303: testsudoers.c, visudo.c: Use a list head struct when storing the
2304: semi-circular lists and convert to tail queues in the process.
2305: This will allow us to reverse foreach loops more easily and it
2306: makes it clearer which functions expect a list as opposed to a
2307: single member.
2308:
2309: Add macros for manipulating lists. Some of these should become
2310: functions.
2311:
2312: When freeing up a list, just pop off the last item in the queue
2313: instead of going from head to tail. This is simpler since we
2314: don't have to stash a pointer to the next member, we always just
2315: use the last one in the queue until the queue is empty.
2316:
2317: Rename match functions that take a list to have list in the name.
2318: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2319:
2320: 2007-08-30 13:12 millert
2321:
2322: * parse.c: Fix pasto, append "!" not negated (which is an int) for
2323: sudo -l output.
2324:
2325: 2007-08-30 12:45 millert
2326:
2327: * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2328: dependency is enough. Only move y.tab.h to gram.h if it is
2329: different; avoids needless rebuilding.
2330:
2331: 2007-08-27 15:51 millert
2332:
2333: * sudoers.pod: Defaults lines may be associated with lists of
2334: users, hosts, commands and runas users, not just single entries.
2335:
2336: 2007-08-26 17:42 millert
2337:
2338: * Makefile.in: Revert the "cmp" portion of the last diff, it
2339: doesn't make sense.
2340:
2341: 2007-08-26 17:10 millert
2342:
2343: * Makefile.in: Remove *.lo for clean: When generating the parser,
2344: only move the generated files into place if they differ from the
2345: existing ones.
2346:
2347: 2007-08-24 22:47 millert
2348:
2349: * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2350: (readable) one and add an extra check when it matches to make
2351: sure we have a valid address.
2352:
2353: 2007-08-24 22:36 millert
2354:
2355: * match.c: Fix thinko introduced when merging IPV6 support.
2356:
2357: 2007-08-24 14:23 millert
2358:
2359: * HISTORY, LICENSE: regen
2360:
2361: 2007-08-24 14:23 millert
2362:
2363: * license.pod: add 2007
2364:
2365: 2007-08-24 14:19 millert
2366:
2367: * UPGRADE: mention #uid vs. comment pitfall
2368:
2369: 2007-08-24 09:50 millert
2370:
2371: * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2372: problem with the latest autoconf. From Stepan Kasal.
2373:
2374: 2007-08-23 20:28 millert
2375:
2376: * parse.h: Back out he XOR swap trick, it is slower than a temp
2377: variable on modern CPUs.
2378:
2379: 2007-08-23 20:14 millert
2380:
2381: * gram.c: regen
2382:
2383: 2007-08-23 20:14 millert
2384:
2385: * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2386: and use the XOR swap trick to swap the prev pointers during
2387: append.
2388:
2389: 2007-08-23 15:31 millert
2390:
2391: * parse.h: remove useless statement
2392:
2393: 2007-08-23 07:47 millert
2394:
2395: * toke.c, toke.l: Refactor #include parsing into a separate
2396: function and return unparsed chars (such as newline or comment)
2397: back to the lexer.
2398:
2399: 2007-08-22 18:56 millert
2400:
2401: * WHATSNEW: mention better uid support
2402:
2403: 2007-08-22 18:55 millert
2404:
2405: * sudoers.pod: Users may now consist of a uid.
2406:
2407: 2007-08-22 18:39 millert
2408:
2409: * gram.c, gram.h, toke.c: regen
2410:
2411: 2007-08-22 18:32 millert
2412:
2413: * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2414: characters that would require quoting in sudoers.
2415:
2416: 2007-08-22 18:31 millert
2417:
2418: * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2419: characters which should be quoted with a backslash when
2420: displayed.
2421:
2422: 2007-08-22 18:28 millert
2423:
2424: * toke.l: Require that the first character after a comment not be a
2425: digit or a dash. This allows us to remove the GOTRUNAS state and
2426: treat uid/gids similar to other words. It also means that we can
2427: now specify uids in User_Lists and a User_Spec may now contain a
2428: uid.
2429:
2430: 2007-08-22 18:23 millert
2431:
2432: * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2433: make the runas portion of the grammar more natural.
2434:
2435: 2007-08-22 06:35 millert
2436:
2437: * Makefile.in, README, BUGS: The BUGS file is history
2438:
2439: 2007-08-21 09:19 millert
2440:
2441: * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2442: character after the pound sign isn't a digit or a dash.
2443:
2444: 2007-08-20 20:43 millert
2445:
2446: * WHATSNEW: Glob support was back-ported to 1.6.9
2447:
2448: 2007-08-20 19:59 millert
2449:
2450: * Makefile.in: remove sudo_usage.h in distclean
2451:
2452: 2007-08-20 19:24 millert
2453:
2454: * parse.c: If a Defaults value contains a blank, double-quote the
2455: string.
2456:
2457: 2007-08-20 19:19 millert
2458:
2459: * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2460: that span multiple lines using the line continuation char.
2461: Previously, the entire thing, including the continuation char,
2462: newline, and spaces was stored as-is.
2463:
2464: 2007-08-20 10:46 millert
2465:
2466: * sudo.c: Be consistent when using single quotes and backticks.
2467:
2468: 2007-08-19 16:48 millert
2469:
2470: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2471: sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2472: dynamically allocated strings and word-wrapped output. Currently
2473: used for sudo's usage() and sudo -l output. Sudo usage strings
2474: are now in sudo_usage.h which is generated at configure time.
2475:
2476: 2007-08-18 08:22 millert
2477:
2478: * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2479: actual tty width instead of assuming 80.
2480:
2481: 2007-08-17 18:32 millert
2482:
2483: * history.pod: some more info
2484:
2485: 2007-08-17 17:28 millert
2486:
2487: * history.pod: Mentioned Chris Jepeway's parser and also the new
2488: one that is in sudo 1.7.
2489:
2490: 2007-08-16 09:38 millert
2491:
2492: * sudo.pod, visudo.pod: For the options list, add flag args where
2493: appropriate and increase the indent level so there is room for
2494: them.
2495:
2496: 2007-08-15 13:49 millert
2497:
2498: * parse.c: Fix some spacing in "sudo -l" and add a comment about
2499: some bogosity in the line wrapping.
2500:
2501: 2007-08-15 11:21 millert
2502:
2503: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2504: visudo.man.in, visudo.cat: regen
2505:
2506: 2007-08-15 11:20 millert
2507:
2508: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2509: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2510: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2511: testsudoers.c, toke.c, toke.l: Remove monitor support until there
2512: is a versino of systrace that uses a lookaside buffer (or we have
2513: a better mechanism to use).
2514:
2515: 2007-08-15 09:22 millert
2516:
2517: * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2518: instead of gethostbyname() if it is available
2519:
2520: 2007-08-14 15:27 millert
2521:
2522: * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2523: sizeof(int).
2524:
2525: 2007-08-14 11:19 millert
2526:
2527: * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2528:
2529: 2007-08-14 10:04 millert
2530:
2531: * sudo.c: If we can open sudoers but fail to read the first byte,
2532: close the file stream before trying again.
2533:
2534: 2007-08-13 12:34 millert
2535:
2536: * gram.c, toke.c: regen
2537:
2538: 2007-08-13 12:29 millert
2539:
2540: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2541: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2542:
2543: 2007-08-13 12:23 millert
2544:
2545: * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2546: copyright
2547:
2548: 2007-08-12 18:55 millert
2549:
2550: * configure, configure.in: fix sudo_noexec extension which got
2551: broken in the libtool update
2552:
2553: 2007-08-10 10:41 millert
2554:
2555: * Makefile.in: explicitly specify -Tascii to nroff
2556:
2557: 2007-08-08 16:07 millert
2558:
2559: * logging.c: remove an ANSI-ism that crept in
2560:
2561: 2007-08-06 20:37 millert
2562:
2563: * sudo.pod: Adjust list indents Prevent -- from being turned into
2564: an em dash Use a list for the environment instead of a literal
2565: paragraph
2566:
2567: 2007-08-06 20:36 millert
2568:
2569: * visudo.pod: Use a list for the environment instead of an indented
2570: literal paragraph.
2571:
2572: 2007-08-06 20:33 millert
2573:
2574: * sudoers.pod: Adjust list indentation
2575:
2576: 2007-08-06 20:31 millert
2577:
2578: * license.pod: add =head3
2579:
2580: 2007-08-06 10:24 millert
2581:
2582: * sudo.pod: mention that when specifying a uid for the -u option
2583: the shell may require that the # be escaped
2584:
2585: 2007-08-01 22:08 millert
2586:
2587: * match.c: Fix off by one in group matching.
2588:
2589: 2007-07-31 14:04 millert
2590:
2591: * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2592: David Krause.
2593:
2594: 2007-07-30 10:45 millert
2595:
2596: * configure, configure.in: Add missing define of
2597: HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2598:
2599: 2007-07-30 09:29 millert
2600:
2601: * aclocal.m4, configure.in, configure: Fix link tests such that new
2602: gcc doesn't optimize away the test.
2603:
2604: 2007-07-29 19:21 millert
2605:
2606: * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2607:
2608: 2007-07-29 19:09 millert
2609:
2610: * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2611: =item
2612:
2613: 2007-07-29 18:32 millert
2614:
2615: * env.c: Add back allocation of the env struct in rebuild_env but
2616: save a copy of the old pointer and free it before returning.
2617:
2618: 2007-07-29 16:09 millert
2619:
2620: * env.c: Don't init the private environment in rebuild_env() since
2621: it may have already been done implicitly
2622: sudo_setenv/sudo_unsetenv.
2623:
2624: Multiply length by sizeof(char *) in memcpy/memmove when copying
2625: the environment so we copy the full thing.
2626:
2627: Add missing set of parens so we deref the right pointer in
2628: sudo_unsetenv when searching for a matching variable.
2629:
2630: 2007-07-26 16:35 millert
2631:
2632: * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2633: the FILES section
2634:
2635: 2007-07-26 10:04 millert
2636:
2637: * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2638:
2639: 2007-07-26 07:28 millert
2640:
2641: * sudoers.pod: Sort sudoers options; based on a diff from Igor
2642: Sobrado.
2643:
2644: 2007-07-25 16:19 millert
2645:
2646: * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2647: @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2648: The Makefile rules for the .man.in file will add @mansectsu@ and
2649: @mansectform@ back in after pod2man is done anyway.
2650:
2651: 2007-07-22 19:09 millert
2652:
2653: * LICENSE, Makefile.in, license.pod: Move license info to pod
2654: format
2655:
2656: 2007-07-22 18:43 millert
2657:
2658: * configure, configure.in, sudoers.pod: Substitute value of
2659: path_info into sudoers man page.
2660:
2661: 2007-07-22 16:40 millert
2662:
2663: * WHATSNEW: remove features that were back-ported to 1.6.9
2664:
2665: 2007-07-22 15:20 millert
2666:
2667: * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2668: usage. From Igor Sobrado.
2669:
2670: 2007-07-22 15:19 millert
2671:
2672: * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2673: ldap_sasl_interactive_bind_s() but don't have
2674: gss_krb5_ccache_name().
2675:
2676: 2007-07-22 08:23 millert
2677:
2678: * ChangeLog: rebuild without branch info
2679:
2680: 2007-07-22 08:23 millert
2681:
2682: * Makefile.in: Add ChangeLog target
2683:
2684: 2007-07-22 08:14 millert
2685:
2686: * auth/pam.c: Run cleanup code if the user hits ^C at the password
2687: prompt.
2688:
2689: 2007-07-22 08:13 millert
2690:
2691: * auth/pam.c: Some versions of pam_lastlog have a bug that will
2692: cause a crash if PAM_TTY is not set so if there is no tty, set
2693: PAM_TTY to the empty string.
2694:
2695: 2007-07-20 09:32 millert
2696:
2697: * Makefile.in: ChageLog not Changelog
2698:
2699: 2007-07-20 09:31 millert
2700:
2701: * ChangeLog: sync
2702:
2703: 2007-07-20 09:29 millert
2704:
2705: * Makefile.in: CHANGE -> Changelog
2706:
2707: 2007-07-19 20:23 millert
2708:
2709: * TODO: sync
2710:
2711: 2007-07-19 19:53 millert
2712:
2713: * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2714: for gss_krb5_ccache_name() and the gssapi headers.
2715:
2716: 2007-07-18 12:57 millert
2717:
2718: * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2719: return environment pointer, they set environ directly.
2720:
2721: No longer need to pass around an envp pointer since we just
2722: operate on environ now.
2723:
2724: Add dosync argument to insert_env() that indicates whether it
2725: should reset environ when realloc()ing env.envp.
2726:
2727: Use an initial size of 128 for the environment.
2728:
2729: 2007-07-18 12:41 millert
2730:
2731: * env.c: Split sudo_setenv() into an external version and a version
2732: only for use by rebuild_env().
2733:
2734: 2007-07-16 19:40 millert
2735:
2736: * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2737: setting KRB5CCNAME. Also use sudo_unsetenv() in the
2738: non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2739: original environment. TODO: configure setup for
2740: gss_krb5_ccache_name()
2741:
2742: 2007-07-16 18:44 millert
2743:
2744: * README.LDAP: add krb5_ccname
2745:
2746: 2007-07-16 18:44 millert
2747:
2748: * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
2749:
2750: 2007-07-16 18:39 millert
2751:
2752: * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
2753: syncing code into sync_env().
2754:
2755: 2007-07-16 07:27 millert
2756:
2757: * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
2758: sasl_authid.
2759:
2760: 2007-07-15 15:44 millert
2761:
2762: * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
2763: If specified, it will override the default value of KRB5CCNAME
2764: in the environment for the duration of the call to
2765: ldap_sasl_interactive_bind_s().
2766:
2767: 2007-07-15 15:41 millert
2768:
2769: * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
2770: most format_env() + insert_env() combinations. insert_env() no
2771: longer takes a struct environment *
2772:
2773: 2007-07-15 12:47 millert
2774:
2775: * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
2776:
2777: 2007-07-15 09:23 millert
2778:
2779: * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
2780: support for SASL auth when connecting to an LDAP server. Adapted
2781: from a diff by Tom McLaughlin.
2782:
2783: 2007-07-14 16:32 millert
2784:
2785: * configure, configure.in: Only enable AIX or BSD auth if no other
2786: exclusive auth method has been chosen. Allows people to e.g.,
2787: use PAM on AIX without adding --without-aixauth. A better
2788: solution is needed to deal with default authentication since if a
2789: non-exclusive method is chosen we will still get an error.
2790:
2791: 2007-07-11 11:23 millert
2792:
2793: * HISTORY, Makefile.in, history.pod: Generate HISTORY from
2794: history.pod (which is also used for web pages)
2795:
2796: 2007-07-09 19:40 millert
2797:
2798: * sudo.man.in, sudoers.man.in: regen
2799:
2800: 2007-07-09 19:25 millert
2801:
2802: * sudo.pod: Better explanation of environment handling in the sudo
2803: man page.
2804:
2805: 2007-07-09 15:13 millert
2806:
2807: * env.c, sudo.c: Defer setting user-specified env vars until after
2808: authentication.
2809:
2810: 2007-07-09 13:25 millert
2811:
2812: * env.c: honor def_default_path for PATH set on the command line
2813:
2814: 2007-07-09 13:22 millert
2815:
2816: * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
2817: environment variables on the command line as long as they are
2818: allowed by env_keep and env_check. Ie: apply the same
2819: restrictions as normal environment variables. TODO: deal with
2820: secure_path
2821:
2822: 2007-07-08 14:44 millert
2823:
2824: * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
2825: original envp to sudo_edit(). Don't allow -E or env var setting
2826: in sudoedit mode. More accurate usage() when called as sudoedit.
2827:
2828: 2007-07-08 14:41 millert
2829:
2830: * ldap.c: warn -> warning
2831:
2832: 2007-07-08 14:11 millert
2833:
2834: * sudo.pod: add -c option to sudoedit synopsis
2835:
2836: 2007-07-08 10:27 millert
2837:
2838: * TODO: udpate to reality
2839:
2840: 2007-07-08 09:43 millert
2841:
2842: * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
2843: the return value from {user,host,runas,cmnd}_matches(). Rename
2844: *matches variables -> *match. Purely cosmetic.
2845:
2846: 2007-07-08 09:30 millert
2847:
2848: * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
2849: No change in behavior.
2850:
2851: 2007-07-08 09:17 millert
2852:
2853: * sudoers: add SETENV tag
2854:
2855: 2007-07-06 15:51 millert
2856:
2857: * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
2858: even if user didn't match since Defaults options may still apply.
2859:
2860: 2007-07-06 14:51 millert
2861:
2862: * check.c, sudo.c: Do not update timestamp if user not validated by
2863: sudoers.
2864:
2865: 2007-07-06 10:14 millert
2866:
2867: * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
2868: and restore to the user's original in PERM_ROOT
2869:
2870: 2007-07-06 10:04 millert
2871:
2872: * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
2873: now no different than PERM_ROOT so remove PERM_FULL_ROOT
2874:
2875: 2007-07-06 09:49 millert
2876:
2877: * check.c: don't check timestamp mtime if we are just going to
2878: remove it
2879:
2880: 2007-07-06 09:33 millert
2881:
2882: * sudoers.pod: Move sudoers defaults parameters into their own
2883: section.
2884:
2885: 2007-07-05 20:21 millert
2886:
2887: * testsudoers.c: Reduce a level of indent by a few placed continue
2888: statements.
2889:
2890: 2007-07-05 20:20 millert
2891:
2892: * parse.c: Make matching but negated commands/hosts/runas entries
2893: override a previous match as expected. Also reduce some levels
2894: of indent by a few placed continue statements.
2895:
2896: 2007-07-05 16:34 millert
2897:
2898: * parse.c: Print default runas in "sudo -l" if sudoers don't
2899: specify one.
2900:
2901: 2007-07-05 15:46 millert
2902:
2903: * match.c: Less hacky way of testing whether the domain was set.
2904:
2905: 2007-07-04 15:50 millert
2906:
2907: * INSTALL: Mention pam-devel and openldap-devel for Linux
2908:
2909: 2007-07-03 19:38 millert
2910:
2911: * README.LDAP: or vs. are
2912:
2913: 2007-07-01 16:55 millert
2914:
2915: * sudo.c: fix typo in Solaris project support
2916:
2917: 2007-07-01 09:40 millert
2918:
2919: * HISTORY: update
2920:
2921: 2007-07-01 09:07 millert
2922:
2923: * sudo.c: Make -- on the command line match the manual page. The
2924: implied shell case has been simplified as a result.
2925:
2926: 2007-06-28 10:44 millert
2927:
2928: * sudoers2ldif: add simplistic support for sudoRunas; note that if
2929: a sudoers entry contains multiple Runas users, all will apply to
2930: the sudoRole
2931:
2932: 2007-06-28 10:42 millert
2933:
2934: * sudoers2ldif: honor SETENV and NOSETENV tags
2935:
2936: 2007-06-24 09:25 millert
2937:
2938: * mon_systrace.c: Redo setting of user_args. We now build up a
2939: private copy of argv first and then replace the NULs with spaces.
2940:
2941: 2007-06-24 09:19 millert
2942:
2943: * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
2944: success
2945:
2946: 2007-06-24 07:39 millert
2947:
2948: * mon_systrace.c: allow chunksiz to reach 1 before erroring out
2949:
2950: 2007-06-23 20:00 millert
2951:
2952: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
2953: visudo.man.in: regen
2954:
2955: 2007-06-23 19:58 millert
2956:
2957: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
2958: gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
2959: sudoers.pod, toke.c, toke.l: Add support for setting environment
2960: variables on the command line. This is only allowed if the
2961: setenv sudoers options is enabled or if the command is prefixed
2962: with the SETENV tag.
2963:
2964: 2007-06-23 19:57 millert
2965:
2966: * README.LDAP: replace Aaron's email address with the sudo-workers
2967: list
2968:
2969: 2007-06-23 19:55 millert
2970:
2971: * configure: regen
2972:
2973: 2007-06-21 20:35 millert
2974:
2975: * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
2976: schema out into separate files.
2977:
2978: 2007-06-21 18:28 millert
2979:
2980: * auth/aix_auth.c: free message if set by authenticate()
2981:
2982: 2007-06-21 13:03 millert
2983:
2984: * match.c: deal with NULL gr_mem
2985:
2986: 2007-06-20 15:04 millert
2987:
2988: * config.h.in: regen
2989:
2990: 2007-06-20 15:04 millert
2991:
2992: * configure.in: add template for HAVE_PROJECT_H
2993:
2994: 2007-06-20 07:06 millert
2995:
2996: * closefrom.c: include fcntl.h
2997:
2998: 2007-06-19 19:37 millert
2999:
3000: * INSTALL: mention --with-project
3001:
3002: 2007-06-19 18:24 millert
3003:
3004: * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3005: support. From Michael Brantley.
3006:
3007: 2007-06-19 17:27 millert
3008:
3009: * sudoers.pod: fix typo
3010:
3011: 2007-06-19 17:22 millert
3012:
3013: * configure: regen
3014:
3015: 2007-06-19 17:21 millert
3016:
3017: * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3018:
3019: 2007-06-19 17:00 millert
3020:
3021: * memrchr.c: Remove dependecy on NULL
3022:
3023: 2007-06-19 15:37 millert
3024:
3025: * configure: regen
3026:
3027: 2007-06-19 15:37 millert
3028:
3029: * aclocal.m4, configure.in: Can't use the regular autoconf
3030: fnmatch() check since we need FNM_CASEFOLD so go back to our
3031: custom one.
3032:
3033: 2007-06-19 12:52 millert
3034:
3035: * env.c: Fix preserving of variables in env_keep.
3036:
3037: 2007-06-19 07:10 millert
3038:
3039: * env.c: add XAUTHORIZATION
3040:
3041: 2007-06-18 20:41 millert
3042:
3043: * UPGRADE: expand upon env resetting and mention that it began in
3044: 1.6.9 not 1.7.
3045:
3046: 2007-06-18 20:33 millert
3047:
3048: * sudoers.pod: Update descriptions of env_keep and env_check to
3049: match current reality.
3050:
3051: 2007-06-18 17:33 millert
3052:
3053: * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3054: HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3055: intial_keepenv_table.
3056:
3057: 2007-06-18 17:23 millert
3058:
3059: * env.c, logging.c: Treat USERNAME environemnt variable like
3060: LOGNAME/USER
3061:
3062: 2007-06-18 17:21 millert
3063:
3064: * env.c: Don't need to populate keepenv table with the contents of
3065: the checkenv table.
3066:
3067: 2007-06-18 08:57 millert
3068:
3069: * sudo.c: Don't force sudo into the C locale.
3070:
3071: 2007-06-18 08:56 millert
3072:
3073: * env.c: Make env_check apply when env_reset it true. Environment
3074: variables are passed through unless they contain '/' or '%'.
3075: There is no need to have a variable in both env_check and
3076: env_keep.
3077:
3078: 2007-06-16 07:31 millert
3079:
3080: * visudo.c: Remove an duplicate lock_file() call and add a comment.
3081:
3082: 2007-06-15 21:16 millert
3083:
3084: * UPGRADE: Add sudo 1.6.9 upgrade note.
3085:
3086: 2007-06-14 12:23 millert
3087:
3088: * interfaces.c: Solaris will return EINVAL if the buffer used in
3089: SIOCGIFCONF is too small. From Klaus Wagner.
3090:
3091: 2007-06-14 12:03 millert
3092:
3093: * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3094: logging.c, sudo.h: Redo the long syslog line splitting based on a
3095: patch from Eygene Ryabinkin. Include memrchr() for systems
3096: without it.
3097:
3098: 2007-06-14 07:09 millert
3099:
3100: * configure.in: Since we need to be able to convert timespec to
3101: timeval for utimes() the last 3 digits in the tv_nsec are not
3102: significant. This makes the sudoedit file date comparison work
3103: again.
3104:
3105: 2007-06-13 13:41 millert
3106:
3107: * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3108: deal with adding things to AUTH_OBJS. This deals with exclusive
3109: authentication methods in a simple way.
3110:
3111: 2007-06-12 13:08 millert
3112:
3113: * LICENSE: mkstemp.c is BSD code too.
3114:
3115: 2007-06-12 09:21 millert
3116:
3117: * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3118:
3119: 2007-06-11 18:27 millert
3120:
3121: * sudo.c: cleanenv() is no more.
3122:
3123: 2007-06-10 18:37 millert
3124:
3125: * ChangeLog: Display branch info in Changelog
3126:
3127: 2007-06-10 18:18 millert
3128:
3129: * utimes.c: Include config.h early so we have it for
3130: TIME_WITH_SYS_TIME
3131:
3132: 2007-06-10 18:00 millert
3133:
3134: * ChangeLog: Fix Changelog generation and update.
3135:
3136: 2007-06-09 07:26 millert
3137:
3138: * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3139:
3140: Move old-style fd closing into closefrom_fallback() and call that
3141: if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3142:
3143: 2007-06-09 07:24 millert
3144:
3145: * config.h.in, configure.in, auth/kerb5.c: o use
3146: krb5_verify_user() if available instead of doing it by hand
3147: o use krb5_init_secure_context() if we have it
3148: o pass an encryption type of 0 to krb5_kt_read_service_key()
3149: instead of
3150: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3151:
3152: 2007-06-09 07:20 millert
3153:
3154: * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3155: Debian.
3156:
3157: 2007-06-09 07:17 millert
3158:
3159: * configure.in: Fix closefrom() substitution in the Makefile
3160:
3161: 2007-06-09 07:15 millert
3162:
3163: * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3164:
3165: 2007-06-07 07:52 millert
3166:
3167: * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3168:
3169: 2007-06-07 07:22 millert
3170:
3171: * auth/kerb5.c: If we cannot get a valid service key using the
3172: default keytab it is a fatal error. Fixes a bug where sudo could
3173: be tricked into allowing access when it should not by a fake KDC.
3174: From Thor Lancelot Simon.
3175:
3176: 2007-05-12 08:56 millert
3177:
3178: * aclocal.m4, configure, configure.in: Update long long checks to
3179: use AC_CHECK_TYPES and to cache values.
3180:
3181: 2007-05-12 08:07 millert
3182:
3183: * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3184: homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3185: that assumes replacing with GNU fnmatch.
3186:
3187: 2007-05-11 17:05 millert
3188:
3189: * configure, configure.in: Add closefrom() to LIB_OBJS not
3190: SUDO_OBJS if it is missing since we need it for visudo now too.
3191:
3192: 2007-04-24 14:44 millert
3193:
3194: * sudoers.pod: Attempt to clarify the bit talking about network
3195: numbers w/o netmasks.
3196:
3197: 2007-04-24 14:25 millert
3198:
3199: * sudo.pod: Clarify timestamp dir ownership sentence.
3200:
3201: 2007-04-20 12:40 millert
3202:
3203: * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3204: __LIBPAM_VERSION. From Dmitry V. Levin.
3205:
3206: 2007-04-16 12:13 millert
3207:
3208: * sudo.c: -i is also one of the mutually exclusive options to list
3209: it in the warning message. Noted by Chris Pepper.
3210:
3211: 2007-04-12 11:18 millert
3212:
3213: * visudo.pod: The sudoers variable is env_editor, not enveditor.
3214: From Jean-Francois Saucier.
3215:
3216: 2007-03-29 13:30 millert
3217:
3218: * redblack.c: I tracked down the original author so credit him and
3219: include his license info.
3220:
3221: 2007-02-06 13:25 millert
3222:
3223: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3224: sudoers.pod: Fix typos; from Jason McIntyre.
3225:
3226: 2007-02-06 13:23 millert
3227:
3228: * logging.c: Restore signal mask before calling reapchild(). Fixes
3229: a possible race condition that could prevent sudo from properly
3230: waiting for the child.
3231:
3232: 2007-01-31 10:02 millert
3233:
3234: * pwutil.c: Don't declare pw_free() if we are not going to use it.
3235:
3236: 2007-01-31 10:00 millert
3237:
3238: * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3239: and LDR_PRELOAD64. The 64-bit version is not currently
3240: supported. Remove zero_env() prototype as it no longer exists.
3241:
3242: 2006-12-11 13:21 millert
3243:
3244: * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3245: for rfc 3834.
3246:
3247: 2006-09-29 10:53 millert
3248:
3249: * auth/pam.c: If the user enters ^C at the password prompt, abort
3250: instead of trying to authenticate with an empty password (which
3251: causes an annoying delay).
3252:
3253: 2006-08-17 11:26 millert
3254:
3255: * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3256: F_CLOSEM support to closefrom(); adapted from a diff by Darren
3257: Tucker.
3258:
3259: 2006-08-17 11:25 millert
3260:
3261: * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3262: it out too.
3263:
3264: 2006-08-04 11:34 millert
3265:
3266: * config.sub, config.guess: Update to latest versions from
3267: cvs.savannah.gnu.org
3268:
3269: 2006-07-31 13:51 millert
3270:
3271: * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3272: sudo_end{pw,grp}ent() so we can close the passwd/group files
3273: early.
3274:
3275: 2006-07-31 13:50 millert
3276:
3277: * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3278: flavor of set_perms() for systems without setreuid() or
3279: setresuid() that have a working seteuid(). Tested on Darwin.
3280:
3281: 2006-07-30 15:56 millert
3282:
3283: * mon_systrace.c: systrace_read() returns ssize_t
3284:
3285: 2006-07-30 15:53 millert
3286:
3287: * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3288: Knox.
3289:
3290: 2006-07-28 13:12 millert
3291:
3292: * HISTORY: Fix typo; Matt Ackeret
3293:
3294: 2006-07-17 08:25 millert
3295:
3296: * sudo.c: Print sudoers path in -V mode for root.
3297:
3298: 2006-06-15 14:44 millert
3299:
3300: * ldap.c: Do a sub tree search instead of a base search (one level
3301: in the tree only) for sudo right objects. This allows system
3302: administrators to categorize the rights in a tree to make them
3303: easier to manage.
3304:
3305: 2005-12-28 13:52 millert
3306:
3307: * sudo.pod: fix typo
3308:
3309: 2005-12-04 12:16 millert
3310:
3311: * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3312: timelimit and bind_timelimit support; adapted from gentoo.
3313:
3314: 2005-11-23 18:57 millert
3315:
3316: * ldap.c: Support comments that start in the middle of a line
3317:
3318: 2005-11-23 18:56 millert
3319:
3320: * configure.in, configure: Define LDAP_DEPRECATED until we start
3321: using ldap_get_values_len()
3322:
3323: 2005-11-18 09:55 millert
3324:
3325: * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3326:
3327: 2005-11-17 20:39 millert
3328:
3329: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3330: takes an int as an arg so it can be used as a signal handler too.
3331:
3332: 2005-11-17 20:38 millert
3333:
3334: * sudo.c: Make a copy of the shell field in the passwd struct for
3335: NewArgv to avoid a use after free situation after sudo_endpwent()
3336: is called.
3337:
3338: 2005-11-16 20:36 millert
3339:
3340: * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3341: mkstemp() for those poor souls without it.
3342:
3343: 2005-11-15 09:25 millert
3344:
3345: * env.c: Add PERL5DB to list of environment variables to remove.
3346:
3347: 2005-11-13 15:49 millert
3348:
3349: * mon_systrace.c, mon_systrace.h: Instead of calling the check
3350: function twice with a state cookie use separate check/log
3351: functions.
3352:
3353: Check more ioctl() calls for failure.
3354:
3355: systrace_{read,write} now return the number of bytes read/written
3356: or -1 on error.
3357:
3358: 2005-11-13 14:51 millert
3359:
3360: * env.c: Add more environment variables to remove; from gentoo
3361: linux Add some comments about what bad env variables go to what
3362: (more to do)
3363:
3364: 2005-11-11 17:23 millert
3365:
3366: * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3367: the exec since they free up our cached copy of the passwd
3368: structs, including sudo_user and sudo_runas. Fixes a
3369: use-after-free bug.
3370:
3371: 2005-11-11 17:19 millert
3372:
3373: * visudo.c: Close all fd's before executing editor.
3374:
3375: 2005-11-11 17:17 millert
3376:
3377: * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3378: set.
3379:
3380: 2005-11-11 11:22 millert
3381:
3382: * check.c: Fix fd leak when lecture file option is enabled. From
3383: Jerry Brown
3384:
3385: 2005-11-07 11:02 millert
3386:
3387: * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3388: environment variables to remove. From Charles Morris
3389:
3390: 2005-11-01 13:24 millert
3391:
3392: * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3393:
3394: 2005-10-27 20:35 millert
3395:
3396: * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3397:
3398: 2005-08-14 20:32 millert
3399:
3400: * sudoers.pod: Fix typo; Toby Peterson
3401:
3402: 2005-08-02 09:57 millert
3403:
3404: * tsgetgrpw.c: Make return buffers static so they don't get
3405: clobbered
3406:
3407: 2005-07-27 21:14 millert
3408:
3409: * auth/securid5.c: Fix securid5 authentication, was not checking
3410: for ACM_OK. Also add default cases for the two switch()es.
3411: Problem noted by ccon at worldbank
3412:
3413: 2005-06-26 20:10 millert
3414:
3415: * ldap.c: Remove ncat() in favor of just counting bytes and
3416: pre-allocating what is needed.
3417:
3418: 2005-06-26 19:44 millert
3419:
3420: * ldap.c: Fix up some comments Add missing fclose() for the
3421: rootbinddn case
3422:
3423: 2005-06-26 19:38 millert
3424:
3425: * ldap.c: align struct ldap_config
3426:
3427: 2005-06-26 19:37 millert
3428:
3429: * ldap.c: use LINE_MAX for max conf file line size
3430:
3431: 2005-06-26 18:36 millert
3432:
3433: * pathnames.h.in: add _PATH_LDAP_SECRET
3434:
3435: 2005-06-26 18:36 millert
3436:
3437: * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3438:
3439: 2005-06-25 18:03 millert
3440:
3441: * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3442: ldap.conf
3443:
3444: 2005-06-25 17:46 millert
3445:
3446: * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3447: variable by default.
3448:
3449: 2005-06-25 16:39 millert
3450:
3451: * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3452: is safe for LD_PRELOAD
3453:
3454: 2005-06-25 16:15 millert
3455:
3456: * acsite.m4, configure: set need_version=no for all cases; this is
3457: safe for LD_PRELOAD
3458:
3459: 2005-06-25 14:45 millert
3460:
3461: * aclocal.m4: typo
3462:
3463: 2005-06-25 14:33 millert
3464:
3465: * configure, configure.in: Add dragonfly
3466:
3467: 2005-06-25 14:29 millert
3468:
3469: * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3470:
3471: 2005-06-25 14:21 millert
3472:
3473: * configure: regen
3474:
3475: 2005-06-25 14:20 millert
3476:
3477: * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3478: ltoptions.m4 ltsugar.m4 ltversion.m4
3479:
3480: 2005-06-25 14:08 millert
3481:
3482: * config.guess, config.sub, ltmain.sh: merge in local changes:
3483: config.guess: o better openbsd support config.sub: o hiuxmpp
3484: support ltmain.sh o remove requirement that libs must begin with
3485: "lib" o don't print a bunch of crap about library installs o
3486: don't run ldconfig
3487:
3488: 2005-06-25 14:05 millert
3489:
3490: * config.guess, config.sub, ltmain.sh: libtool 1.9f
3491:
3492: 2005-06-25 14:04 millert
3493:
3494: * configure.in: Update with autoupdate and make minor changes for
3495: libtool 1.9f
3496:
3497: 2005-06-22 23:19 millert
3498:
3499: * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3500:
3501: 2005-06-22 23:04 millert
3502:
3503: * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3504: emul/timespec.h: Move declatation of struct timespec to its own
3505: include files for systems without it since it needs time_t
3506: defined.
3507:
3508: 2005-06-22 22:57 millert
3509:
3510: * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3511:
3512: 2005-05-27 01:59 millert
3513:
3514: * auth/pam.c: Call pam_open_session() and pam_close_session() to
3515: give pam_limits a chance to run. Idea from Karel Zak.
3516:
3517: 2005-04-24 19:24 millert
3518:
3519: * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3520: to silence warnings on Solaris
3521:
3522: 2005-04-24 19:22 millert
3523:
3524: * parse.c: include grp.h to silence a warning on Solaris
3525:
3526: 2005-04-23 15:10 millert
3527:
3528: * parse.c: Fix printing of += and -= defaults.
3529:
3530: 2005-04-17 01:21 millert
3531:
3532: * mon_systrace.c: Sanity check number of syscall args with argsize.
3533: Not really needed but a little paranoia never hurts.
3534:
3535: 2005-04-17 01:18 millert
3536:
3537: * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3538: void * Use int, not size_t/ssize_t for systrace lengths (since it
3539: uses int)
3540:
3541: 2005-04-16 03:14 millert
3542:
3543: * mon_systrace.c: Add some memsets for paranoia Fix namespace
3544: collsion w/ error Check rval of decode_args() and update_env()
3545: Remove improper setting of validated variable
3546:
3547: 2005-04-11 21:37 millert
3548:
3549: * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3550: file if def_ignore_sudoers is not set and call LDAP versions from
3551: display_privs() and display_cmnd() instead of directly from
3552: main(). Because of this we need to defer closing the ldap
3553: connection until after -l processing has ocurred and we must pass
3554: in the ldap pointer to display_privs() and display_cmnd().
3555:
3556: 2005-04-11 21:33 millert
3557:
3558: * ldap.c: Reorganize LDAP code to better match normal sudoers
3559: parsing. Instead of storing strings for later printing in -l
3560: mode we do another query since the authenticating user and the
3561: user being listed may not be the same (the new -U flag). Also
3562: add support for "sudo -l command".
3563:
3564: There is still a fair bit if duplicated code that can probably be
3565: refactored.
3566:
3567: 2005-04-11 00:37 millert
3568:
3569: * ldap.c: Replace pass variable with do_netgr for better
3570: readability.
3571:
3572: 2005-04-10 23:49 millert
3573:
3574: * ldap.c: use DPRINTF macro
3575:
3576: 2005-04-10 23:18 millert
3577:
3578: * ldap.c: estrdup, not strdup
3579:
3580: 2005-04-10 17:44 millert
3581:
3582: * parse.c: Add macro to test if the tag changed to improve
3583: readability.
3584:
3585: 2005-04-10 17:40 millert
3586:
3587: * parse.c: Avoid printing defaults header if there are no defaults
3588: to print...
3589:
3590: 2005-04-10 15:29 millert
3591:
3592: * glob.c: Fix a warning on systems without strlcpy().
3593:
3594: 2005-04-10 13:32 millert
3595:
3596: * pwutil.c: Use macros where possible for sudo_grdup() like
3597: sudo_pwdup().
3598:
3599: 2005-04-08 17:04 millert
3600:
3601: * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3602: add in tv_usec / 1000000.
3603:
3604: 2005-03-29 23:38 millert
3605:
3606: * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3607: should be 1, not 0 for Heimdal. From Alex Plotnick.
3608:
3609: 2005-03-29 09:29 millert
3610:
3611: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3612: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3613: pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3614: Add efree() for consistency with emalloc() et al. Allows us to
3615: rely on C89 behavior (free(NULL) is valid) even on K&R.
3616:
3617: 2005-03-28 22:33 millert
3618:
3619: * parse.c, sudo.c: Move initgroups() for -U option into
3620: display_privs() so group matching in sudoers works correctly.
3621:
3622: 2005-03-26 21:34 millert
3623:
3624: * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3625: with sudo_ldap_close.
3626:
3627: 2005-03-26 20:01 millert
3628:
3629: * parse.c: Add missing space in Defaults printing
3630:
3631: 2005-03-25 12:36 millert
3632:
3633: * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3634: size computaton and string copies.
3635:
3636: 2005-03-18 22:08 millert
3637:
3638: * pwutil.c: Zero old pw_passwd before replacing with version from
3639: shadow file.
3640:
3641: 2005-03-18 22:07 millert
3642:
3643: * configure, configure.in: Only attempt shadow password detection
3644: if PAM is not being used Add shadow_* variables to make shadow
3645: password detection more generic.
3646:
3647: 2005-03-18 21:46 millert
3648:
3649: * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3650: than CPPFLAGS
3651:
3652: 2005-03-12 19:27 millert
3653:
3654: * sudoers.pod: use a non-breaking space to avoid a double space
3655: after e.g.
3656:
3657: 2005-03-12 19:26 millert
3658:
3659: * sudo.pod: commna, not colon after e.g.
3660:
3661: 2005-03-12 18:43 millert
3662:
3663: * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3664: at least uses __execve() internally.
3665:
3666: 2005-03-12 12:29 millert
3667:
3668: * indent.pro: Match reality a bit more.
3669:
3670: 2005-03-12 12:27 millert
3671:
3672: * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3673:
3674: 2005-03-11 23:42 millert
3675:
3676: * pwutil.c: Store shadow password after making a local copy of
3677: struct passwd in case normal and shadow routines use the same
3678: internal buffer in libc.
3679:
3680: 2005-03-10 20:57 millert
3681:
3682: * alloc.c, logging.c: Make varargs usage consistent with the rest
3683: of the code.
3684:
3685: 2005-03-10 10:09 millert
3686:
3687: * sudo_noexec.c: Wrap more of the exec family since on Linux the
3688: others do not appear to go through the normal execve() path.
3689:
3690: 2005-03-10 09:57 millert
3691:
3692: * visudo.c: make print_unused static like proto says
3693:
3694: 2005-03-10 09:55 millert
3695:
3696: * glob.c: silence a warning on K&R systems
3697:
3698: 2005-03-10 09:51 millert
3699:
3700: * parse.c, alias.c, error.c: make this build in K&R land
3701:
3702: 2005-03-07 22:21 millert
3703:
3704: * toke.c: regen
3705:
3706: 2005-03-05 22:46 millert
3707:
3708: * ldap.c: return(foo) not return foo optimize _atobool() slightly
3709:
3710: 2005-03-05 22:40 millert
3711:
3712: * ldap.c: Use TRUE/FALSE
3713:
3714: 2005-03-05 22:31 millert
3715:
3716: * ldap.c: Reformat to match the rest of sudo's code.
3717:
3718: 2005-03-05 19:33 millert
3719:
3720: * sudo.pod: I am the primary author
3721:
3722: 2005-02-22 22:28 millert
3723:
3724: * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3725: confused too many people and really isn't needed in a
3726: configure-oriented world.
3727:
3728: 2005-02-22 22:28 millert
3729:
3730: * INSTALL: alternate -> alternative
3731:
3732: 2005-02-22 22:26 millert
3733:
3734: * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3735: have issues with TCSAFLUSH.
3736:
3737: 2005-02-22 22:16 millert
3738:
3739: * toke.l: Allow leading blanks before Defaults and Foo_Alias
3740: definitions
3741:
3742: 2005-02-22 22:14 millert
3743:
3744: * Makefile.in: fix rules to build toke.o and gram.o in devel mode
3745:
3746: 2005-02-20 13:00 millert
3747:
3748: * sudoers.pod: env_keep overrides set_logname
3749:
3750: 2005-02-20 12:57 millert
3751:
3752: * env.c: Fix disabling set_logname and make env_keep override
3753: set_logname.
3754:
3755: 2005-02-20 12:28 millert
3756:
3757: * compat.h, config.h.in, configure, configure.in: No longer need
3758: memmove()
3759:
3760: 2005-02-20 11:48 millert
3761:
3762: * env.c, sudo.c: Just clean the environment once. This assumes
3763: that any further setenv/putenv will be able to handle the fact
3764: that we replaced environ with our own malloc'd copy but all the
3765: implementations I've checked do.
3766:
3767: 2005-02-15 23:16 millert
3768:
3769: * env.c, sudo.c: In -i mode, base the value of insert_env()'s
3770: dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
3771: into rebuild_env()
3772:
3773: 2005-02-13 00:33 millert
3774:
3775: * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
3776: and prev_user into init_vars() since user_shell at least is
3777: needed there.
3778:
3779: 2005-02-12 18:51 millert
3780:
3781: * Makefile.in: fix devel builds
3782:
3783: 2005-02-12 18:46 millert
3784:
3785: * check.c, sudo.c: Fix some printf format mismatches on error.
3786:
3787: 2005-02-12 18:33 millert
3788:
3789: * configure, gram.c, toke.c: regen
3790:
3791: 2005-02-12 17:56 millert
3792:
3793: * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
3794: alloc.c, check.c, closefrom.c, compat.h, configure.in,
3795: defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
3796: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
3797: interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
3798: match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
3799: set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
3800: strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
3801: sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
3802: utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
3803: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
3804: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
3805: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3806: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
3807: emul/utime.h: Update copyright years.
3808:
3809: 2005-02-12 16:46 millert
3810:
3811: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
3812: version 1.7
3813:
3814: 2005-02-12 16:16 millert
3815:
3816: * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
3817: entries.
3818:
3819: 2005-02-11 18:06 millert
3820:
3821: * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
3822: to warn about printf-like format mismatches
3823:
3824: 2005-02-10 00:16 millert
3825:
3826: * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
3827: generated from cvs logs
3828:
3829: 2005-02-10 00:03 millert
3830:
3831: * set_perms.c: Use warning/error instead of perror/fatal.
3832:
3833: 2005-02-09 23:13 millert
3834:
3835: * config.guess: Update OpenBSD section
3836:
3837: 2005-02-09 23:10 millert
3838:
3839: * UPGRADE: Add upgrading noted for 1.7
3840:
3841: 2005-02-09 23:00 millert
3842:
3843: * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
3844: environment, just prune out entries based on the env_delete and
3845: env_check lists. Base building up the new environment on the
3846: current environment and the variables we removed initially.
3847:
3848: 2005-02-09 22:23 millert
3849:
3850: * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
3851: if locales are supported, just to be safe.
3852:
3853: 2005-02-09 22:19 millert
3854:
3855: * toke.c, toke.l: Cast argument to ctype functions to unsigned
3856: char.
3857:
3858: 2005-02-07 22:56 millert
3859:
3860: * env.c: correct value for DID_USER
3861:
3862: 2005-02-07 22:55 millert
3863:
3864: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
3865: <compat.h> not "compat.h"
3866:
3867: 2005-02-07 22:51 millert
3868:
3869: * defaults.c: Reset the environment by default.
3870:
3871: 2005-02-07 22:50 millert
3872:
3873: * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
3874: malloc an new vector if execve() fails.
3875:
3876: 2005-02-06 23:16 millert
3877:
3878: * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
3879: execve(2) and wrap the command in sh if we get ENOEXEC.
3880:
3881: 2005-02-05 23:01 millert
3882:
3883: * sudo_noexec.c: Only include time.h on systems that lack struct
3884: timespec which gets defind in compat.h (using time_t).
3885:
3886: 2005-02-05 22:59 millert
3887:
3888: * sudo_noexec.c: Include time.h for time_t in compat.h for systems
3889: w/o struct timespec.
3890:
3891: 2005-02-05 22:56 millert
3892:
3893: * configure, compat.h, config.h.in, configure.in: use bcopy on
3894: systems w/o memmove
3895:
3896: 2005-02-05 22:31 millert
3897:
3898: * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
3899: so limit its use to gcc >= 2.8.
3900:
3901: 2005-02-05 21:21 millert
3902:
3903: * Makefile.in: Add explicit rule to build sudo_noexec.lo
3904:
3905: 2005-02-05 17:56 millert
3906:
3907: * INSTALL.configure, Makefile.in: No longer depend on VPATH;
3908: pointed out a bunch of missed dependencies.
3909:
3910: 2005-02-05 13:18 millert
3911:
3912: * TROUBLESHOOTING: Help for PAM when account section is missing
3913:
3914: 2005-02-05 13:01 millert
3915:
3916: * auth/pam.c: Give user a clue when there is a missing "account"
3917: section in the PAM config.
3918:
3919: 2005-02-05 10:22 millert
3920:
3921: * auth/pam.c: Better error handling.
3922:
3923: 2005-02-05 09:57 millert
3924:
3925: * configure, config.h.in, configure.in: Move _FOO_SOURCE to
3926: CPPFLAGS so it takes effect as early as possible. Silences a
3927: warning about isblank() on linux.
3928:
3929: 2005-02-04 21:49 millert
3930:
3931: * auth/pam.c: Fix typo (missing comma) that caused an incorrect
3932: number of args to be passed to log_error().
3933:
3934: 2005-01-31 23:03 millert
3935:
3936: * pwutil.c: Don't try to destroy a tree we didn't create.
3937:
3938: 2005-01-27 10:42 millert
3939:
3940: * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
3941: env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
3942: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
3943: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3944: parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
3945: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
3946: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
3947: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
3948: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
3949: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
3950: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
3951: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
3952: rcsids
3953:
3954: 2005-01-21 10:34 millert
3955:
3956: * configure, configure.in: Fix error message when mixing invalid
3957: auth types
3958:
3959: 2005-01-21 10:32 millert
3960:
3961: * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
3962: default if the OS supports them.
3963:
3964: 2005-01-21 10:29 millert
3965:
3966: * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
3967:
3968: 2005-01-21 10:29 millert
3969:
3970: * configure.in: Better checking for conflicting authentication
3971: methods Display the authentication methods used at the end of
3972: configure Rename --with-authenticate -> --with-aixauth Use
3973: --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
3974: default on systems that support them unless disabled. Add
3975: OSMAJOR variable that replaces old OSREV; now OSREV has full
3976: version number
3977:
3978: 2005-01-17 19:40 millert
3979:
3980: * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
3981:
3982: 2005-01-14 13:35 millert
3983:
3984: * configure.in: Replace: test -n "$FOO" || FOO="bar"
3985:
3986: With: : ${FOO='bar'}
3987:
3988: 2005-01-09 18:58 millert
3989:
3990: * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
3991: only call private passwd/group routines when using a nonstandard
3992: passwd/group file.
3993:
3994: 2005-01-06 10:34 millert
3995:
3996: * CHANGES: sync
3997:
3998: 2005-01-05 22:16 millert
3999:
4000: * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4001: fields so add getpwent()/getgrent() functions and call those.
4002:
4003: 2005-01-05 17:29 millert
4004:
4005: * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4006:
4007: 2005-01-05 17:18 millert
4008:
4009: * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4010: in the clean target Add devdir variable and use it to specify the
4011: path to parser sources
4012:
4013: 2005-01-05 17:17 millert
4014:
4015: * configure: regen
4016:
4017: 2005-01-05 17:17 millert
4018:
4019: * configure.in: Add a devdir variables that defaults to $(srcdir)
4020: and is set to . if --devel was specified. Allows for proper
4021: dependecies building the parser.
4022:
4023: 2005-01-05 14:50 millert
4024:
4025: * testsudoers.c: Add support for custom passwd/group files.
4026:
4027: 2005-01-05 14:47 millert
4028:
4029: * Makefile.in: Build private copy of pwutil.o for testsudoers with
4030: MYPW defined so it uses our own passwd/group routines.
4031:
4032: 2005-01-05 14:46 millert
4033:
4034: * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4035: sudo_setspent/sudo_endspent stubs instead. We can now just use
4036: the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4037: about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4038:
4039: 2005-01-05 14:44 millert
4040:
4041: * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4042: Use global buffers for passwd/group structs Rename functions from
4043: sudo_* to my_*
4044:
4045: 2005-01-05 14:43 millert
4046:
4047: * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4048:
4049: 2005-01-05 14:42 millert
4050:
4051: * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4052: instead.
4053:
4054: 2005-01-05 14:41 millert
4055:
4056: * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4057: getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4058: are no longer needed. Also add preprocessor magic to use private
4059: versions of the passwd and group routines if MYPW is defined (for
4060: use by testsudoers).
4061:
4062: 2005-01-04 22:40 millert
4063:
4064: * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4065: if there are fields we don't handle they end up as 0.
4066:
4067: 2005-01-04 20:10 millert
4068:
4069: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4070: pwutil.c
4071:
4072: 2005-01-04 20:09 millert
4073:
4074: * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4075: variables for better readability.
4076:
4077: 2005-01-04 20:08 millert
4078:
4079: * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4080: that support alternate passwd and group files.
4081:
4082: 2005-01-04 20:07 millert
4083:
4084: * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4085: its own file. This allows visudo and testsudoers to use the
4086: pw/gr cache too.
4087:
4088: 2005-01-01 19:31 millert
4089:
4090: * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4091: based on the terminal width.
4092:
4093: 2005-01-01 12:41 millert
4094:
4095: * match.c, visudo.c, testsudoers.c: Only check group vector in
4096: usergr_matches() if we are matching the invoking or list user.
4097: Always check the group members, even if there was a group vector.
4098:
4099: 2004-12-17 17:24 millert
4100:
4101: * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4102:
4103: 2004-12-17 13:12 millert
4104:
4105: * CHANGES, TODO: checkpoint
4106:
4107: 2004-12-16 14:20 millert
4108:
4109: * sudo.c: sort usage
4110:
4111: 2004-12-16 14:20 millert
4112:
4113: * sudo.pod: Sort command line options
4114:
4115: 2004-12-16 13:33 millert
4116:
4117: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4118: sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4119: start closing at a point other than 3. Add closefrom_override
4120: sudoers option and -C sudo flag to allow the user to specify a
4121: different closefrom starting point.
4122:
4123: 2004-12-16 13:25 millert
4124:
4125: * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4126:
4127: 2004-12-15 22:55 millert
4128:
4129: * LICENSE: no more UCB strcasecmp
4130:
4131: 2004-12-15 22:54 millert
4132:
4133: * strcasecmp.c: replace BSD licensed one with version derived from
4134: pdksh
4135:
4136: 2004-12-09 21:07 millert
4137:
4138: * sudo.c: Fix last commit.
4139:
4140: 2004-12-09 19:26 millert
4141:
4142: * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4143: to /dev/null if not.
4144:
4145: 2004-12-03 13:57 millert
4146:
4147: * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4148:
4149: 2004-12-03 13:52 millert
4150:
4151: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4152: Use TIME_WITH_SYS_TIME
4153:
4154: 2004-12-03 13:48 millert
4155:
4156: * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4157:
4158: 2004-12-02 11:18 millert
4159:
4160: * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4161: being set unconditionally on darwin. From Toby Peterson.
4162:
4163: 2004-12-02 10:40 millert
4164:
4165: * getspwuid.c: Check rbinsert() return value. In the case of faked
4166: up entries there is usually a negative response cached that we
4167: need to overwrite.
4168:
4169: In pwfree() don't try to zero out a NULL pw_passwd pointer.
4170:
4171: 2004-12-02 09:53 millert
4172:
4173: * mon_systrace.c: Use the double fork trick to avoid the monitor
4174: process being waited for by the main program run through sudo.
4175:
4176: 2004-11-29 12:52 millert
4177:
4178: * sudo.c: Call initgroups() in -U mode so group matches work
4179: normally.
4180:
4181: 2004-11-29 12:34 millert
4182:
4183: * def_data.h, mkdefaults: Don't print a trailing comma for the last
4184: entry in enum def_tupple
4185:
4186: 2004-11-28 16:08 millert
4187:
4188: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4189: lecture, listpw and verifypw are used in boolean context.
4190:
4191: 2004-11-28 16:05 millert
4192:
4193: * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4194: context should be "all", not "any".
4195:
4196: 2004-11-26 14:21 millert
4197:
4198: * def_data.in, defaults.c: Allow tuples that can be used as
4199: booleans to be used as boolean TRUE. In this case the 2nd
4200: possible value of the tuple is used for TRUE.
4201:
4202: 2004-11-25 12:23 millert
4203:
4204: * configure, configure.in: Correct the test for 2-parameter
4205: timespecsub
4206:
4207: 2004-11-25 12:20 millert
4208:
4209: * sudo.h: Add strub struct definitions for passwd, timeval and
4210: timespec
4211:
4212: 2004-11-25 12:09 millert
4213:
4214: * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4215: check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4216: fix a typo in the gettimeofday check.
4217:
4218: 2004-11-24 16:44 millert
4219:
4220: * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4221: for visudo and testsudoers.
4222:
4223: 2004-11-24 16:31 millert
4224:
4225: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4226: option to use in conjunction with -l instead of -u. Add support
4227: for "sudo -l command" to test a specific command.
4228:
4229: 2004-11-24 16:28 millert
4230:
4231: * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4232: it has not been set. Previously it was set by sudo "ALL" in the
4233: parser but at that point the fully-qualified pathname has not yet
4234: been found.
4235:
4236: 2004-11-23 18:18 millert
4237:
4238: * parse.c, testsudoers.c: Correctly handle multiple privileges per
4239: userspec and runas inheritence.
4240:
4241: 2004-11-21 14:09 millert
4242:
4243: * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4244: init_defaults.
4245:
4246: 2004-11-19 18:04 millert
4247:
4248: * toke.c, toke.l: make per-command defaults work with sudoedit
4249:
4250: 2004-11-19 18:00 millert
4251:
4252: * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4253: FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4254: approriate defaults variable.
4255:
4256: 2004-11-19 17:09 millert
4257:
4258: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4259: Document per-command Defaults.
4260:
4261: 2004-11-19 16:35 millert
4262:
4263: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4264: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4265: command-specific Defaults entries. E.g.
4266: Defaults!/usr/bin/vi noexec
4267:
4268: 2004-11-19 15:03 millert
4269:
4270: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4271: occurence of user_matches() -> runas_matches() missed previously
4272: runas_matches(), host_matches() and cmnd_matches() only really
4273: need to pass in a list of members. user_matches() still needs to
4274: pass in a passwd struct because of "sudo -l"
4275:
4276: 2004-11-19 14:46 millert
4277:
4278: * parse.c: Check def_authenticate, def_noexec and def_monitor when
4279: setting return flags. XXX May be better to just set the defaults
4280: directly and get rid of those flags.
4281:
4282: 2004-11-19 13:39 millert
4283:
4284: * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4285: error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4286: getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4287: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4288: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4289: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4290: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4291: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4292: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4293: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4294: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4295: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4296: <config.h> Not: #include "config.h" That way we get the correct
4297: config.h when build dir != src dir
4298:
4299: 2004-11-19 13:30 millert
4300:
4301: * Makefile.in: Back out part of rev 1.263; fix -I order
4302:
4303: 2004-11-19 13:12 millert
4304:
4305: * toke.c, toke.l: More robust parsing if #include; could be much
4306: better still.
4307:
4308: 2004-11-19 12:55 millert
4309:
4310: * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4311: consistent.
4312:
4313: 2004-11-19 12:35 millert
4314:
4315: * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4316: routines out into their own file.
4317:
4318: 2004-11-19 12:32 millert
4319:
4320: * error.h: __attribute__ is already defined in compat.h
4321:
4322: 2004-11-19 12:30 millert
4323:
4324: * visudo.c: quit() should not be __noreturn__ as it is non-void on
4325: some platforms.
4326:
4327: 2004-11-19 12:24 millert
4328:
4329: * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4330: error/warning functions like err/warn but that call an additional
4331: cleanup routine in the error case. This means we no longer need
4332: to compile a special version of alloc.o for visudo.
4333:
4334: 2004-11-19 11:54 millert
4335:
4336: * parse.h: Clarify comments about the data structures
4337:
4338: 2004-11-18 15:28 millert
4339:
4340: * visudo.c: Add support for VISUAL and EDITOR containing command
4341: line args. If env_editor is not set any args in VISUAL and
4342: EDITOR are ignored. Arguments are also now supported in
4343: def_editor.
4344:
4345: 2004-11-17 14:25 millert
4346:
4347: * parse.h: alias_matches() is no more
4348:
4349: 2004-11-17 14:09 millert
4350:
4351: * CHANGES, TODO: sync
4352:
4353: 2004-11-17 13:19 millert
4354:
4355: * Makefile.in: When regenerating the parser, don't replace gram.h
4356: unless it has changed.
4357:
4358: 2004-11-17 11:56 millert
4359:
4360: * Makefile.in: remove Makefile.binary for distclean
4361:
4362: 2004-11-17 11:18 millert
4363:
4364: * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4365: to make sure we can't overflow new_env.
4366:
4367: 2004-11-17 10:33 millert
4368:
4369: * sudo_edit.c: paranoia when stripping trailing slashes from
4370: tempdir.
4371:
4372: 2004-11-16 19:00 millert
4373:
4374: * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4375:
4376: 2004-11-16 18:59 millert
4377:
4378: * configure, configure.in, config.h.in, sudo.c: Add configure check
4379: for getgroups()
4380:
4381: 2004-11-16 18:55 millert
4382:
4383: * ldap.c: Use supplementary group vector in struct sudo_user.
4384:
4385: 2004-11-16 18:40 millert
4386:
4387: * match.c: Only do string comparisons on the group members if there
4388: is no supplemental group list.
4389:
4390: 2004-11-16 16:10 millert
4391:
4392: * CHANGES, TODO: sync
4393:
4394: 2004-11-16 15:54 millert
4395:
4396: * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4397: trailing slash so chop off any trailing slashes we see and add an
4398: explicit one.
4399:
4400: 2004-11-16 12:02 millert
4401:
4402: * match.c: remove bogus XXX comment
4403:
4404: 2004-11-16 11:10 millert
4405:
4406: * match.c: Get rid of alias_matches and correctly fall through to
4407: the non-alias cases when there is no alias with the specified
4408: name.
4409:
4410: 2004-11-16 10:47 millert
4411:
4412: * getspwuid.c: Cache non-existent passwd/group entries too.
4413:
4414: 2004-11-16 10:45 millert
4415:
4416: * gram.c: regen
4417:
4418: 2004-11-15 23:32 millert
4419:
4420: * getspwuid.c: fix typo
4421:
4422: 2004-11-15 23:24 millert
4423:
4424: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4425: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4426: Implement group caching and use the passwd and group caches
4427: throughout.
4428:
4429: 2004-11-15 14:43 millert
4430:
4431: * match.c: Properly negate the return value of alias_matches() when
4432: appropriate.
4433:
4434: 2004-11-15 14:38 millert
4435:
4436: * match.c: Make hostname_matches() return TRUE for a match, else
4437: FALSE like the caller expects.
4438:
4439: 2004-11-15 13:24 millert
4440:
4441: * Makefile.in: Add missing dependencies on gram.h
4442:
4443: 2004-11-15 13:06 millert
4444:
4445: * match.c: Use runas_matches in alias_matches() now that we have
4446: it.
4447:
4448: 2004-11-15 13:00 millert
4449:
4450: * parse.c, parse.h: Expand aliases in "sudo -l" mode
4451:
4452: 2004-11-15 12:33 millert
4453:
4454: * gram.y, match.c: Use ALIAS for the member type when storing an
4455: alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4456: match.c relies on the more generic type. Expand runas_matches
4457: instead of calling user_matches() inside of it since
4458: user_matches() looks up USERALIASes, not RUNASALIASes.
4459:
4460: 2004-11-15 12:05 millert
4461:
4462: * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4463: passwd entry.
4464:
4465: 2004-11-15 10:53 millert
4466:
4467: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4468: configure.in, err.c, error.c, error.h, defaults.c, env.c,
4469: find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4470: sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4471: local error/warning functions like err/warn but that call an
4472: additional cleanup routine in the error case. This means we no
4473: longer need to compile a special version of alloc.o for visudo.
4474:
4475: 2004-11-15 09:59 millert
4476:
4477: * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4478: since the latter checks for "#uid".
4479:
4480: 2004-11-15 09:53 millert
4481:
4482: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4483: db entries in 2 reb-black trees; one indexed by uid, the other by
4484: user name. The data returned from the cache should be considered
4485: read-only and is destroyed by sudo_endpwent().
4486:
4487: 2004-11-15 09:50 millert
4488:
4489: * match.c: add cast to uid_t
4490:
4491: 2004-11-15 09:49 millert
4492:
4493: * gram.y: missing free in alias_destroy
4494:
4495: 2004-11-15 09:49 millert
4496:
4497: * redblack.c: Can't use rbapply() for rbdestroy since the
4498: destructor is passed a data pointer, not a node pointer.
4499:
4500: 2004-11-14 23:06 millert
4501:
4502: * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4503: versions of setpwent() and endpwent() that set/end the shadow
4504: password file too.
4505:
4506: 2004-11-14 22:55 millert
4507:
4508: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4509: visudo.c: Store aliases in a red-black tree.
4510:
4511: 2004-11-14 22:52 millert
4512:
4513: * Makefile.in, redblack.c, redblack.h: red-black tree
4514: implementation
4515:
4516: 2004-11-14 22:37 millert
4517:
4518: * visudo.c: Edit all sudoers file if there were unused or undefined
4519: aliases and we are in strict mode.
4520:
4521: 2004-11-12 11:19 millert
4522:
4523: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4524: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4525: Bring back the "secure_path" Defaults option now that Defaults
4526: take effect before the path is searched.
4527:
4528: 2004-11-11 12:22 millert
4529:
4530: * logging.c, parse.c: A user can always list their own entries,
4531: even with -u. Better error message when failing to list another
4532: user's entries.
4533:
4534: 2004-11-11 12:12 millert
4535:
4536: * parse.c, sudo.c, sudo.h: The syntax to list another user's
4537: entries is now "-u otheruser -l". Only root or users with sudo
4538: "ALL" may list other user's entries.
4539:
4540: 2004-11-11 11:30 millert
4541:
4542: * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4543: SECURITY NOTES
4544:
4545: 2004-11-11 11:25 millert
4546:
4547: * env.c: strip CDPATH too
4548:
4549: 2004-11-11 11:20 millert
4550:
4551: * env.c: strip exported bash functions from the environment.
4552:
4553: 2004-10-27 12:16 millert
4554:
4555: * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4556: variables for real commands and sudoedit. This avoids a
4557: confusing message when a user tries "sudo -l" or "sudo -v" and is
4558: denied.
4559:
4560: 2004-10-27 12:06 millert
4561:
4562: * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4563: appending lists too
4564:
4565: 2004-10-26 18:39 millert
4566:
4567: * logging.c: Convert some bitwise AND to ISSET
4568:
4569: 2004-10-26 18:29 millert
4570:
4571: * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4572:
4573: 2004-10-26 18:29 millert
4574:
4575: * CHANGES, TODO: sync
4576:
4577: 2004-10-26 18:28 millert
4578:
4579: * BUGS: new parser fixes most of the outstanding bugs
4580:
4581: 2004-10-26 18:27 millert
4582:
4583: * configure: regen
4584:
4585: 2004-10-26 18:26 millert
4586:
4587: * visudo.c: Rework for the new parser. Now checks for unused
4588: aliases in sudoers.
4589:
4590: 2004-10-26 18:25 millert
4591:
4592: * testsudoers.c: Rewrite for the new parser. Now supports a -d
4593: flag (dump) and adds a -h flag (host). It now defaults to the
4594: local hostname unless otherwise specified.
4595:
4596: 2004-10-26 18:23 millert
4597:
4598: * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4599: parse.h)
4600:
4601: 2004-10-26 18:22 millert
4602:
4603: * sudo.c: Update for new parse. We now call find_path() *after* we
4604: have updated the global defaults based on sudoers. Also adds
4605: support for listing other user's privs if you are root.
4606:
4607: 2004-10-26 18:21 millert
4608:
4609: * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4610: rewind().
4611:
4612: 2004-10-26 18:20 millert
4613:
4614: * logging.c, logging.h: Add NO_STDERR flag.
4615:
4616: 2004-10-26 18:19 millert
4617:
4618: * ldap.c: Split sudo_ldap_check() into three pieces:
4619: sudo_ldap_open(), udo_ldap_update_defaults() and
4620: sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4621: default options, find the command in the user's path, and then
4622: check whether the user is allowed to run it. The important thing
4623: here is that the default runas user may be specified as a default
4624: option and that needs to be set before we search for the command.
4625:
4626: 2004-10-26 18:17 millert
4627:
4628: * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4629: warning.
4630:
4631: 2004-10-26 18:16 millert
4632:
4633: * defaults.h: Add prototype for update_defaults()
4634:
4635: 2004-10-26 18:16 millert
4636:
4637: * defaults.c: Don't warn about line numbers now that we operate on
4638: a set of data structures (or LDAP) and not a file.
4639:
4640: 2004-10-26 18:15 millert
4641:
4642: * config.h.in: No long use lsearch()
4643:
4644: 2004-10-26 18:14 millert
4645:
4646: * Makefile.in: Update for new and changed file names.
4647:
4648: 2004-10-26 18:14 millert
4649:
4650: * LICENSE: no more BSD lsearch.c
4651:
4652: 2004-10-26 18:14 millert
4653:
4654: * match.c: foo_matches() routines now live in match.c Added
4655: user_matches(), runas_matches(), host_matches(), cmnd_matches()
4656: and alias_matches() that operate on the parsed sudoers file.
4657:
4658: 2004-10-26 18:12 millert
4659:
4660: * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4661: -> switch_buffer() WORD no longer needs to exclude '@' kill
4662: yywrap()
4663:
4664: 2004-10-26 18:10 millert
4665:
4666: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4667: Rewritten parser that converts sudoers into a set of data
4668: structures. This eliminates ordering issues and makes it
4669: possible to apply sudoers Defaults entries before searching for
4670: the command.
4671:
4672: 2004-10-26 18:09 millert
4673:
4674: * configure.in, lsearch.c, emul/search.h: We won't be using
4675: lsearch() any longer.
4676:
4677: 2004-10-26 18:07 millert
4678:
4679: * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4680: has no entry.
4681:
4682: 2004-10-26 16:09 millert
4683:
4684: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4685: visudo.man.in: regen
4686:
4687: 2004-10-26 16:09 millert
4688:
4689: * visudo.pod: Update warnings to match new visudo
4690:
4691: 2004-10-26 16:08 millert
4692:
4693: * sudoers.pod: The new parser doesn't have the old ordering
4694: constraints.
4695:
4696: 2004-10-26 16:08 millert
4697:
4698: * sudo.pod: Document that -l now takes an optional username
4699: argument
4700:
4701: 2004-10-25 13:44 millert
4702:
4703: * RUNSON: AIX 5.2.0.0 works
4704:
4705: 2004-10-25 13:38 millert
4706:
4707: * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4708: instead. Fixes a compilation problem with Solaris 9's native
4709: LDAP.
4710:
4711: Set FLAG_MONITOR when needed.
4712:
4713: 2004-10-23 13:32 millert
4714:
4715: * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4716: match the traced process. Fixes relative paths.
4717:
4718: 2004-10-21 12:31 millert
4719:
4720: * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4721:
4722: 2004-10-13 12:52 millert
4723:
4724: * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4725: requires set_reuid() or setresuid()
4726:
4727: 2004-10-13 12:46 millert
4728:
4729: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4730: configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4731: saved uids; they aren't worth bothering with.
4732:
4733: 2004-10-07 16:23 millert
4734:
4735: * glob.c: remove call to issetugid()
4736:
4737: 2004-10-07 14:57 millert
4738:
4739: * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
4740: wildcards. Now that we use glob() the bug is fixed.
4741:
4742: 2004-10-07 14:52 millert
4743:
4744: * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
4745: and stat each result that matches the basename of the user's
4746: command. This makes "cd /usr/bin ; sudo ./blah" work when
4747: sudoers allows /usr/bin/blah. Fixes bug #143.
4748:
4749: 2004-10-07 14:27 millert
4750:
4751: * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
4752: for extended glob (GLOB_TILDE and GLOB_BRACE)
4753:
4754: 2004-10-07 12:59 millert
4755:
4756: * config.h.in, configure, configure.in: Check for a glob() that
4757: supports GLOB_BRACE and GLOB_TILDE
4758:
4759: 2004-10-07 12:51 millert
4760:
4761: * LICENSE: reference glob
4762:
4763: 2004-10-07 12:50 millert
4764:
4765: * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
4766: some unneeded extensions removed.
4767:
4768: 2004-10-05 17:26 millert
4769:
4770: * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
4771: fail. It probably means we are out of space in the stack gap...
4772:
4773: 2004-10-05 17:20 millert
4774:
4775: * CHANGES: sync
4776:
4777: 2004-10-05 16:53 millert
4778:
4779: * mon_systrace.c: Take a stab at ldap sudoers support here.
4780:
4781: 2004-10-05 15:13 millert
4782:
4783: * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
4784: SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
4785: inadvertanly kill itself.
4786:
4787: 2004-10-05 14:21 millert
4788:
4789: * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
4790:
4791: 2004-10-05 14:15 millert
4792:
4793: * mon_systrace.c: When modifying the environment, don't replace
4794: envp when we can get away with just rewriting pointers in the
4795: traced process.
4796:
4797: 2004-10-05 13:46 millert
4798:
4799: * mon_systrace.c, mon_systrace.h: Add environment updating via
4800: STRIOCINJECT (if available).
4801:
4802: 2004-10-05 10:22 millert
4803:
4804: * sudoers.cat, sudoers.man.in: regen
4805:
4806: 2004-10-04 16:15 millert
4807:
4808: * lex.yy.c: regen
4809:
4810: 2004-10-04 16:15 millert
4811:
4812: * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
4813: not yyless(1)
4814:
4815: 2004-10-04 12:09 millert
4816:
4817: * mon_systrace.c: Include file is now mon_systrace.h
4818:
4819: 2004-10-04 12:07 millert
4820:
4821: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
4822: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
4823: sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
4824: tracing, it is now "monitoring" which should be more a obvious
4825: name to non-hackers.
4826:
4827: 2004-10-01 15:06 millert
4828:
4829: * mon_systrace.c, mon_systrace.h: Fix some XXX
4830:
4831: 2004-10-01 14:30 millert
4832:
4833: * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
4834: 1024 as the max # of entries (the max that systrace(4) allows).
4835:
4836: Only need to use SYSTR_POLICY_ASSIGN once
4837:
4838: Change check_syscall() -> find_handler() and have it return the
4839: handler instead of just running it. We need this since handler
4840: now have two parts: one part that generates and answer and
4841: another that gets called after the answer is accepted (to do
4842: logging).
4843:
4844: Add some missing check_exec for emul execv
4845:
4846: 2004-10-01 10:58 millert
4847:
4848: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
1.5 ! millert 4849: $Sudo: ChangeLog,v 1.21 2009/04/18 16:06:05 millert Exp $ tags.
1.1 millert 4850:
4851: 2004-10-01 10:47 millert
4852:
4853: * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
4854:
4855: 2004-09-30 20:46 millert
4856:
4857: * Makefile.in: add trace_systrace.o dependency
4858:
4859: 2004-09-30 19:00 millert
4860:
4861: * configure, configure.in: Also look for systrace.h in
4862: /usr/include/linux
4863:
4864: 2004-09-30 18:27 millert
4865:
4866: * mon_systrace.c, mon_systrace.h: Move all struct defs and
4867: prototypes into trace_systrace.h and mark all but
4868: systace_attach() static.
4869:
4870: 2004-09-30 18:14 millert
4871:
4872: * mon_systrace.c, mon_systrace.h: Add support for tracing
4873: emulations. At the moment, all emulations are compiled in. It
4874: might make sense to #ifdef them in the future, though this
4875: impeeds readability.
4876:
4877: 2004-09-30 17:07 millert
4878:
4879: * Makefile.in, configure.in, configure: rename systrace.c ->
4880: trace_systrace.c
4881:
4882: 2004-09-30 15:58 millert
4883:
4884: * parse.yacc: Allow this to build with a K&R compiler again
4885:
4886: 2004-09-30 13:58 millert
4887:
4888: * TODO: sync
4889:
4890: 2004-09-30 13:55 millert
4891:
4892: * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
4893:
4894: 2004-09-30 13:44 millert
4895:
4896: * visudo.c: Exit() takes a negative value to indicate it was not
4897: called via signal.
4898:
4899: 2004-09-30 13:25 millert
4900:
4901: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4902: visudo.man.in: regen
4903:
4904: 2004-09-30 13:22 millert
4905:
4906: * Makefile.in, visudo.c: Define Err() and Errx() that are like
4907: err() and errx() but call Exit() instead of exit(). Build
4908: private copy of alloc.o for visudo that calls Err() and Errx().
4909:
4910: 2004-09-29 15:22 millert
4911:
4912: * lex.yy.c: regen
4913:
4914: 2004-09-29 15:22 millert
4915:
4916: * CHANGES: sync
4917:
4918: 2004-09-29 14:41 millert
4919:
4920: * visudo.c: Overhaul visudo for editing multiple files: o visudo
4921: has been broken out into functions (more work needed here) o
4922: each file is now edited before sudoers is re-parsed o if a
4923: #include line is added that file will be edited too
4924:
4925: TODO: o cleanup temp files when exiting via err() or errx() o
4926: continue breaking things out into separate functions
4927:
4928: 2004-09-29 14:36 millert
4929:
4930: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
4931: arg to open_sudoers that open_sudoers can use to indicate to the
4932: caller that the fd should not be closed when it is done with it.
4933: To be used by visudo to keep locked fds from being closed
4934: prematurely (and thus losing the lock).
4935:
4936: 2004-09-29 14:33 millert
4937:
4938: * parse.yacc, sudo.c: Add errorfile global that contains the name
4939: of the file that caused the error.
4940:
4941: 2004-09-29 14:30 millert
4942:
4943: * parse.lex: return COMMENT to yacc grammar for a #include line
4944:
4945: 2004-09-29 14:29 millert
4946:
4947: * parse.lex: Remove us of unput() in favor of yyless() which is
4948: cheaper.
4949:
4950: 2004-09-29 14:28 millert
4951:
4952: * parse.yacc: Allow an empty sudoers file.
4953:
4954: 2004-09-28 16:50 millert
4955:
4956: * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
4957: doesn't do it for us.
4958:
4959: 2004-09-28 14:37 millert
4960:
4961: * lex.yy.c: regen
4962:
4963: 2004-09-28 14:36 millert
4964:
4965: * visudo.c: Do signal setup before calling edit_sudoers(). Don't
4966: shadow the "quiet" global.
4967:
4968: 2004-09-28 14:33 millert
4969:
4970: * visudo.c: If a sudoers file includes other files, edit those too.
4971: Does not yes deal with creating the new includes files itself.
4972:
4973: 2004-09-28 14:31 millert
4974:
4975: * testsudoers.c: init_parser now takes a path
4976:
4977: 2004-09-28 14:31 millert
4978:
4979: * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
4980: dealing with multiple sudoers files: o init_parser() now takes a
4981: path used to populate the sudoers global o the sudoers global is
4982: used to print the correct file in yyerror() o when switching to
4983: a new sudoers file, perserve old file name and line number
4984:
4985: 2004-09-28 14:29 millert
4986:
4987: * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
4988: meaningful now that we can have multiple sudoers files.
4989:
4990: 2004-09-28 13:52 millert
4991:
4992: * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
4993: sudoers_lookup() so we start at the right file position when
4994: reading include files.
4995:
4996: 2004-09-27 21:04 millert
4997:
4998: * sudoers.pod: document #include
4999:
5000: 2004-09-27 20:47 millert
5001:
5002: * lex.yy.c: regen
5003:
5004: 2004-09-27 20:47 millert
5005:
5006: * parse.lex: Add max depth of 128 for the include stack to avoid
5007: loops.
5008:
5009: Since yyerror() doesn't stop parsing, pass return values back to
5010: yylex and call yyterminate() on error.
5011:
5012: 2004-09-27 14:06 millert
5013:
5014: * sudoers.pod: document tracing
5015:
5016: 2004-09-27 14:05 millert
5017:
5018: * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5019: page
5020:
5021: 2004-09-27 12:08 millert
5022:
5023: * lex.yy.c: regen
5024:
5025: 2004-09-27 12:03 millert
5026:
5027: * parse.lex: Add support for #include in sudoers (visudo support
5028: TBD)
5029:
5030: 2004-09-27 12:02 millert
5031:
5032: * parse.yacc: make yyerror()'s argument const
5033:
5034: 2004-09-27 12:02 millert
5035:
5036: * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5037:
5038: 2004-09-27 12:01 millert
5039:
5040: * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5041: return a FILE *
5042:
5043: 2004-09-26 12:35 millert
5044:
5045: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5046: version.h: Crank version
5047:
5048: 2004-09-26 12:33 millert
5049:
5050: * Makefile.in, sudo.psf: Better HP-UX depot construction
5051:
5052: 2004-09-25 17:08 millert
5053:
5054: * mon_systrace.c: o Made children global so check_exec() can lookup
5055: a child. o Replaced uid in struct childinfo with struct passwd *
5056: (for runas) o new_child() now takes a parent pid so the runas
5057: info can be inherited o Added find_child() to lookup a child by
5058: its pid o update_child() now fills in a struct passwd o Converted
5059: the big if/else mess in set_policy to a switch o Syscalls that
5060: change uid are now "ask" so we get SYSTR_MSG_UGID events
5061:
5062: 2004-09-25 17:01 millert
5063:
5064: * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5065: to lookup the shadow password. Will be used to a struct passwd
5066: that has the shadow password already filled in.
5067:
5068: 2004-09-25 16:58 millert
5069:
5070: * mon_systrace.c: add missing increment of addr in read_string()
5071:
5072: 2004-09-25 16:15 millert
5073:
5074: * mon_systrace.c: Remove bogus call to update_child() and some
5075: cosmetic fixes
5076:
5077: 2004-09-25 16:11 millert
5078:
5079: * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5080: initialized global for simplicity If STRIOCATTACH returns EBUSY
5081: we are already being traced Check for user_args == NULL in
5082: setproctitle() call Add missing calls to STRIOCANSWER
5083:
5084: 2004-09-25 13:15 millert
5085:
5086: * sudo.c: g/c sudo_pwdup proto
5087:
5088: 2004-09-24 20:21 millert
5089:
5090: * Makefile.in, sudo.psf: Add target for building a depot file
5091:
5092: 2004-09-24 20:07 millert
5093:
5094: * mon_systrace.c: trim includes
5095:
5096: 2004-09-24 14:11 millert
5097:
5098: * lex.yy.c, sudo.tab.h: regen
5099:
5100: 2004-09-24 14:10 millert
5101:
5102: * INSTALL: document --with-systrace
5103:
5104: 2004-09-24 14:10 millert
5105:
5106: * config.h.in, configure, configure.in: Add check for setproctitle
5107:
5108: 2004-09-24 14:09 millert
5109:
5110: * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5111: it can set the error code
5112:
5113: 2004-09-24 13:30 millert
5114:
5115: * mon_systrace.c: systrace(4) support for sudo. On systems with
5116: the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5117: patches) sudo can intercept exec calls and check the exec args
5118: against the sudoers file. In other words, sudo can now control
5119: subcommands and shell escapes.
5120:
5121: 2004-09-24 13:17 millert
5122:
5123: * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5124:
5125: 2004-09-24 13:15 millert
5126:
5127: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5128: Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5129:
5130: 2004-09-24 13:13 millert
5131:
5132: * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5133: close on exec flag instead.
5134:
5135: 2004-09-24 13:11 millert
5136:
5137: * def_data.c, def_data.h, def_data.in: Add trace option
5138:
5139: 2004-09-23 20:24 millert
5140:
5141: * Makefile.in: Add systrace
5142:
5143: 2004-09-23 20:23 millert
5144:
5145: * INSTALL: SunOS /bin/sh blows up with configure
5146:
5147: 2004-09-23 20:23 millert
5148:
5149: * configure, configure.in: Include sys/param.h before systrace.h
5150:
5151: 2004-09-23 20:15 millert
5152:
5153: * configure: regen
5154:
5155: 2004-09-23 20:15 millert
5156:
5157: * pathnames.h.in: _PATH_DEV_SYSTRACE
5158:
5159: 2004-09-23 20:14 millert
5160:
5161: * configure.in: line up options in --help
5162:
5163: 2004-09-23 20:11 millert
5164:
5165: * config.h.in, configure.in: Add --with-systrace
5166:
5167: 2004-09-23 13:35 millert
5168:
5169: * configure: regen
5170:
5171: 2004-09-23 13:35 millert
5172:
5173: * aclocal.m4, configure.in: make this work with autoconf-2.59
5174:
5175: 2004-09-16 12:58 millert
5176:
5177: * sudo_edit.c: Simplify logic around open & stat of files and do
5178: sanity on edited file even if we lack fstat (still racable but
5179: worth doing).
5180:
5181: 2004-09-15 18:47 millert
5182:
5183: * HISTORY: Add support url
5184:
5185: 2004-09-15 16:11 millert
5186:
5187: * Makefile.in: versino 1.6.8p1
5188:
5189: 2004-09-15 15:20 millert
5190:
5191: * CHANGES: more changes for 1.6.8p1
5192:
5193: 2004-09-15 15:18 millert
5194:
5195: * version.h: 1.6.8p1
5196:
5197: 2004-09-15 12:16 millert
5198:
5199: * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5200: something other than a regular file.
5201:
5202: 2004-09-14 20:55 aaron
5203:
5204: * CHANGES: sync
5205:
5206: 2004-09-14 20:21 aaron
5207:
5208: * INSTALL: document --with-ldap-conf-file
5209:
5210: 2004-09-14 17:43 millert
5211:
5212: * CHANGES, ins_csops.h: political correctness strikes again
5213:
5214: 2004-09-14 15:09 millert
5215:
5216: * RUNSON: sync
5217:
5218: 2004-09-12 19:50 millert
5219:
5220: * Makefile.binary.in, Makefile.in: Install sudoedit man link
5221:
5222: 2004-09-12 14:25 millert
5223:
5224: * INSTALL: Update PAM note and mention where HP-UX users can
5225: download gcc binaries.
5226:
5227: 2004-09-12 12:08 millert
5228:
5229: * Makefile.in: libtool wants to install stuff from .libs so fake
5230: one up for binary installations.
5231:
5232: 2004-09-12 11:53 millert
5233:
5234: * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5235: -f set LIBTOOL correctly
5236:
5237: 2004-09-12 11:53 millert
5238:
5239: * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5240: sudoedit link instead of using ln -f
5241:
5242: 2004-09-12 10:22 millert
5243:
5244: * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5245: Makefile.binary.in for config.status substitution Add support for
5246: installing noexec bits
5247:
5248: 2004-09-12 10:21 millert
5249:
5250: * Makefile.in: Copy noexec bits into binary dists too No longer use
5251: my old arch script for making binary dists
5252:
5253: 2004-09-12 09:36 millert
5254:
5255: * Makefile.binary: Install sudoedit link.
5256:
5257: 2004-09-11 12:25 millert
5258:
5259: * emul/utime.h: avoid __P so there is no need for compat.h to be
5260: included
5261:
5262: 2004-09-11 12:24 millert
5263:
5264: * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5265:
5266: 2004-09-10 12:31 millert
5267:
5268: * compat.h: Fix Solatis futimes macro
5269:
5270: 2004-09-09 11:02 millert
5271:
5272: * sudo_edit.c: Rename ots -> omtim for improved readability.
5273:
5274: 2004-09-08 14:38 millert
5275:
5276: * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5277: keep the temp file open; re-opening it with the invoking user's
5278: euid is sufficient.
5279:
5280: 2004-09-08 14:36 millert
5281:
5282: * CHANGES: sync
5283:
5284: 2004-09-08 14:35 millert
5285:
5286: * sudo.cat, sudo.man.in: regen
5287:
5288: 2004-09-08 14:34 millert
5289:
5290: * sudo.pod: back out revision 1.70; it is no long applicable
5291:
5292: 2004-09-08 11:57 millert
5293:
5294: * env.c: Let the loader initialize nep
5295:
5296: 2004-09-08 11:49 millert
5297:
5298: * configure, configure.in, config.h.in: Removed unneed check for
5299: fchown Add check for gettimeofday Move autoheader template stuff
5300: into separate AH_TEMPLATE lines
5301:
5302: 2004-09-08 11:48 millert
5303:
5304: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5305: timespec throughout.
5306:
5307: 2004-09-08 11:47 millert
5308:
5309: * Makefile.in: gettime.[co]
5310:
5311: 2004-09-08 11:47 millert
5312:
5313: * gettime.c: function to return the current time in a struct
5314: timespec
5315:
5316: 2004-09-08 10:51 millert
5317:
5318: * utimes.c: Not a darpa-sponsored file.
5319:
5320: 2004-09-07 16:36 millert
5321:
5322: * compat.h, config.h.in, configure, configure.in: Add a check for
5323: struct timespec and provide it for those without.
5324:
5325: 2004-09-07 15:56 millert
5326:
5327: * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5328: st_mtim and st_mtimespec and add macros for pulling the mtime sec
5329: and nsec out of struct stat. These are used in sudo_edit() to
5330: better tell whether or not the file has changed.
5331:
5332: 2004-09-07 15:55 millert
5333:
5334: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5335: param to touch() for nsec
5336:
5337: 2004-09-07 14:06 millert
5338:
5339: * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5340: have to chown the file later. Only touch() the temp file if we
5341: can do it via the file descriptor. Don't check for modification
5342: of the temp file if we lack fstat(). Catch errors read()ing the
5343: temp file.
5344:
5345: 2004-09-07 14:04 millert
5346:
5347: * fileops.c: If path is NULL and fd == -1 return -1.
5348:
5349: 2004-09-07 13:31 millert
5350:
5351: * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5352: ones we opened so just close those in the child.
5353:
5354: 2004-09-07 13:14 millert
5355:
5356: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5357: configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5358: utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5359: in touch(), emulating as needed. Not all systems are able to
5360: support setting the times of an fd so touch() takes both an fd
5361: and a file name as arguments.
5362:
5363: 2004-09-06 21:12 aaron
5364:
5365: * env.c: Rare SEGV
5366:
5367: 2004-09-06 16:46 millert
5368:
5369: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5370: visudo.man.in: regen
5371:
5372: 2004-09-06 16:45 millert
5373:
5374: * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5375: re-order some of the sections to match the order we use in
5376: OpenBSD.
5377:
5378: 2004-09-06 15:05 aaron
5379:
5380: * env.c: Openldap ~/.ldaprc fix
5381:
5382: 2004-09-06 12:18 millert
5383:
5384: * sudo.pod: Talk about how the editor must write its changes to the
5385: original file and not just use rename(2).
5386:
5387: 2004-09-06 12:12 millert
5388:
5389: * CHANGES: sync
5390:
5391: 2004-09-06 12:11 millert
5392:
5393: * sudo_edit.c: Keep the temp file open instead of re-opening after
5394: the editor has exited.
5395:
5396: 2004-09-06 12:10 millert
5397:
5398: * sample.pam: Update for current redhat/fedora core.
5399:
5400: 2004-09-02 21:56 aaron
5401:
5402: * README.LDAP: tls_ examples
5403:
5404: 2004-09-02 00:03 aaron
5405:
5406: * ldap.c: config tls_* options
5407:
5408: 2004-08-29 11:39 millert
5409:
5410: * configure, configure.in: No need for -lcrypt when using pam.
5411:
5412: 2004-08-26 23:57 millert
5413:
5414: * configure: regen
5415:
5416: 2004-08-26 23:44 aaron
5417:
5418: * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5419: option to override LDAP_CONF
5420:
5421: 2004-08-26 22:08 aaron
5422:
5423: * ldap.c: cleanup debug message
5424:
5425: 2004-08-26 19:29 aaron
5426:
5427: * README.LDAP: more config info
5428:
5429: 2004-08-24 14:01 millert
5430:
5431: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5432: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5433: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5434: longer use gross statics in command_matches(). Also rename some
5435: variables for improved clarity.
5436:
5437: 2004-08-21 14:33 millert
5438:
5439: * INSTALL: document HP's crippled compiler deficiency.
5440:
5441: 2004-08-21 14:25 millert
5442:
5443: * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5444: descriptions. Noticed by Norihiko Murase.
5445:
5446: 2004-08-21 14:20 millert
5447:
5448: * configure, configure.in: --with-noexec takes an optional PATH
5449: argument.
5450:
5451: 2004-08-21 14:20 millert
5452:
5453: * INSTALL: document --with-noexec
5454:
5455: 2004-08-17 16:21 millert
5456:
5457: * RUNSON, TODO: sync
5458:
5459: 2004-08-17 15:11 millert
5460:
5461: * sudo_edit.c: Better warning message when sudoedit is unable to
5462: write to the destination file.
5463:
5464: 2004-08-17 14:53 millert
5465:
5466: * sudo.cat, sudo.man.in: regen
5467:
5468: 2004-08-17 14:53 millert
5469:
5470: * sudo.pod: Don't italicize the string "sudoedit"
5471:
5472: 2004-08-16 18:45 millert
5473:
5474: * HISTORY: Mention GratiSoft.
5475:
5476: 2004-08-11 14:29 millert
5477:
5478: * parse.yacc: Reset used_runas to FALSE when re-intializing the
5479: parser.
5480:
5481: 2004-08-09 19:04 millert
5482:
5483: * config.guess: Correct OpenBSD mips support
5484:
5485: 2004-08-09 17:28 millert
5486:
5487: * config.guess: Add OpenBSD/mips
5488:
5489: 2004-08-06 23:43 aaron
5490:
5491: * README.LDAP: More behavior notes
5492:
5493: 2004-08-06 23:36 aaron
5494:
5495: * README.LDAP: Updates on current behavior
5496:
5497: 2004-08-06 19:56 millert
5498:
5499: * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5500: no difference to formatted files).
5501:
5502: 2004-08-06 19:48 millert
5503:
5504: * CHANGES: new
5505:
5506: 2004-08-06 19:42 millert
5507:
5508: * sudo.c: Consistency. Use same error for bad -u #uid when
5509: targetpw is set as we do when a bad -u username is specified.
5510:
5511: 2004-08-06 19:33 millert
5512:
5513: * TODO: Add checksum idea from Steve Mancini
5514:
5515: 2004-08-06 19:32 millert
5516:
5517: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5518:
5519: 2004-08-06 19:31 millert
5520:
5521: * sudo.pod, sudoers.pod: Document the restriction on uids specified
5522: via -u when targetpw is set.
5523:
5524: 2004-08-06 19:24 millert
5525:
5526: * sudo.c: Error out when targetpw is enabled and sudo is run with
5527: -u #uid but #uid does not exist in the passwd database. We can't
5528: do target authentication when the target is not in passwd!
5529:
5530: 2004-08-05 21:16 millert
5531:
5532: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5533:
5534: 2004-08-05 21:14 millert
5535:
5536: * TODO: Some more todo for the next release.
5537:
5538: 2004-08-05 21:13 millert
5539:
5540: * INSTALL: Make it clear that PAM should be used for DCE support
5541: when possible.
5542:
5543: 2004-08-05 21:13 millert
5544:
5545: * sudoers.pod: o Document problems with wildcards and relative
5546: paths. o Make the order requirements more prominent. o Change a
5547: "set" to "reset" for clarity.
5548:
5549: 2004-08-05 14:29 millert
5550:
5551: * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5552:
5553: 2004-08-02 22:34 aaron
5554:
5555: * ldap.c: reflect changes to parse.c
5556:
5557: 2004-08-02 14:44 millert
5558:
5559: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5560: user_cmnd and user_args to command_matches(), just use the
5561: globals there. Since we keep state with statics anyway it is
5562: misleading to pretend that passing in different cmnd and
5563: cmnd_args will work.
5564:
5565: 2004-08-02 14:40 millert
5566:
5567: * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5568: pseudo-commands check for a '/' anywhere in cmnd, not just the
5569: first character.
5570:
5571: 2004-07-30 23:07 aaron
5572:
5573: * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5574: <oblin@mandrakesoft.com>
5575:
5576: 2004-07-30 22:41 aaron
5577:
5578: * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5579:
5580: 2004-07-30 22:06 aaron
5581:
5582: * README.LDAP: Sun One schema definition by
5583: Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5584:
5585: 2004-07-29 11:57 millert
5586:
5587: * CHANGES: typo
5588:
5589: 2004-07-23 16:44 millert
5590:
5591: * CHANGES: sync
5592:
5593: 2004-07-23 16:43 millert
5594:
5595: * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5596: remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5597: the parse.
5598:
5599: 2004-07-08 10:20 millert
5600:
5601: * CHANGES: PAM change
5602:
5603: 2004-07-07 21:04 aaron
5604:
5605: * ldap.c: Better debugging of ALL command
5606:
5607: 2004-07-07 20:15 millert
5608:
5609: * parse.c: When matching for "sudoedit" in sudoers check both the
5610: command the user typed *and* the command that is listed in the
5611: sudoers entry.
5612:
5613: 2004-07-04 19:59 aaron
5614:
5615: * ldap.c: Added !command feature
5616:
5617: 2004-06-28 10:51 millert
5618:
5619: * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5620: Brian Farrell
5621:
5622: 2004-06-10 23:11 millert
5623:
5624: * LICENSE: License is ISC-style, not BSD-style
5625:
5626: 2004-06-10 20:58 millert
5627:
5628: * CHANGES: sync
5629:
5630: 2004-06-10 16:54 millert
5631:
5632: * sudo.man.in, sudo.cat: regen
5633:
5634: 2004-06-10 16:53 millert
5635:
5636: * sudo.pod: o Update some out of date bits to reality o Change the
5637: shell promt in examples to bourne-shell style o Clarify some
5638: details o Add a CAVEAT about "sudo cd /foo"
5639:
5640: 2004-06-10 16:19 millert
5641:
5642: * check.c: Don't ask for a password if invoking user == target
5643: user.
5644:
5645: 2004-06-10 12:32 millert
5646:
5647: * sudo.c: typo in comment
5648:
5649: 2004-06-08 19:20 millert
5650:
5651: * sudoers.man.in, sudoers.cat: regen
5652:
5653: 2004-06-08 19:19 millert
5654:
5655: * sudoers.pod: Expand on NOEXEC a little.
5656:
5657: 2004-06-08 16:20 millert
5658:
5659: * TODO: sync
5660:
5661: 2004-06-08 15:58 millert
5662:
5663: * visudo.man.in, visudo.cat: regen
5664:
5665: 2004-06-08 15:55 millert
5666:
5667: * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5668: for runas_default being set after it has already been used.
5669:
5670: 2004-06-08 13:53 millert
5671:
5672: * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5673: has been set to TRUE or FALSE. This is more readable than
5674: checking for >=0 or < 0. Doesn't change the actual code
5675: generated.
5676:
5677: 2004-06-06 20:11 millert
5678:
5679: * sudoers.man.in, sudoers.cat: regen
5680:
5681: 2004-06-06 20:07 millert
5682:
5683: * sudoers, sudoers.pod: Correct description of where Defaults specs
5684: should go.
5685:
5686: 2004-06-06 20:02 millert
5687:
5688: * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5689: auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5690:
5691: 2004-06-06 19:58 millert
5692:
5693: * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5694: ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5695: tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5696: Remove trailing spaces, no actual code changes.
5697:
5698: 2004-06-06 16:22 millert
5699:
5700: * parse.yacc: Fix a >=0 that should be <0 that was improperly
5701: converted when UNSPEC was added.
5702:
5703: 2004-06-06 15:54 millert
5704:
5705: * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5706: to UNSPEC, not NOMATCH when resetting it.
5707:
5708: 2004-06-06 15:39 millert
5709:
5710: * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5711:
5712: 2004-06-05 13:55 millert
5713:
5714: * README.LDAP: Update for configure changes
5715:
5716: 2004-06-05 13:42 millert
5717:
5718: * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5719: respectively) and use these in parse.yacc. Also in parse.yacc
5720: initialize the *_matches vars to UNSPEC and add two macros,
5721: SETMATCH and SETNMATCH for use when setting *_matches to a value
5722: that may be NOMATCH/UNSPEC/TRUE/FALSE.
5723:
5724: 2004-06-05 11:17 millert
5725:
5726: * parse.yacc: Initialize runas to -2, not -1 since we need to be
5727: able to distinguish between the initialized value and the value
5728: of a non-match when passing along the runas value to multiple
5729: commands.
5730:
5731: The result of this is that an unmatched runas is now set to -1,
5732: not 0. This is required now that parse.c treats a FALSE value
5733: for runas as being explicitly denied.
5734:
5735: 2004-06-03 16:21 millert
5736:
5737: * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5738:
5739: 2004-06-03 12:37 millert
5740:
5741: * configure, configure.in: Add tests for what libs we need to link
5742: with for ldap and for whether or not lber.h needs to be
5743: explicitly included.
5744:
5745: 2004-06-02 20:30 aaron
5746:
5747: * ldap.c: Solaris native LDAP build fix
5748:
5749: 2004-06-01 16:56 millert
5750:
5751: * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
5752: use of an unset variable.
5753:
5754: 2004-06-01 16:56 millert
5755:
5756: * sudo.h: Add prototype for sudo_ldap_list_matches
5757:
5758: 2004-06-01 16:53 millert
5759:
5760: * compat.h, config.h.in, configure, configure.in: Better check for
5761: dirfd macro--we now set HAVE_DIRFD for the macro version too.
5762: Added check for dd_fd in `DIR' if no dirfd is found; this is now
5763: used to confitionally define the dirfd macro in compat.h.
5764:
5765: 2004-06-01 16:51 millert
5766:
5767: * closefrom.c: Only check /proc/$$/fd if we have the dirfd
5768: function/macro.
5769:
5770: 2004-06-01 15:13 millert
5771:
5772: * compat.h, config.h.in, configure, configure.in: Add a check for a
5773: dirfd() function (like Linux) and add a dirfd macro in compat.h
5774: if there is no dirfd() function or macro.
5775:
5776: 2004-06-01 14:59 millert
5777:
5778: * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
5779: needed.
5780:
5781: 2004-06-01 14:30 millert
5782:
5783: * CHANGES: Clarify closefrom() note.
5784:
5785: 2004-06-01 12:51 millert
5786:
5787: * parse.c: When checking for a command in the directory, only copy
5788: the base dir once.
5789:
5790: 2004-06-01 12:44 millert
5791:
5792: * closefrom.c: If there is a /proc/$$/fd directory, behave like the
5793: Solaris closefrom() and only close the descriptors listed
5794: therein.
5795:
5796: 2004-06-01 12:23 millert
5797:
5798: * alloc.c: compat.h guarantees INT_MAX is defined.
5799:
5800: 2004-06-01 12:23 millert
5801:
5802: * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
5803: without it and remove definition of RLIM_INFINITY (now unused).
5804:
5805: 2004-05-31 21:22 millert
5806:
5807: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
5808: parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
5809: since the former is standardized.
5810:
5811: 2004-05-31 19:18 millert
5812:
5813: * CHANGES: sync
5814:
5815: 2004-05-31 19:10 millert
5816:
5817: * RUNSON: Add some entries that were mailed in a while ago
5818:
5819: 2004-05-31 14:16 millert
5820:
5821: * closefrom.c: o sysconf returns a long, not an int. o check for
5822: negative return value from sysconf/getdtablesize and use
5823: OPEN_MAX in this case. o define OPEN_MAX to 256 for those
5824: without it (a fair guess...)
5825:
5826: 2004-05-30 12:25 millert
5827:
5828: * UPGRADE: Mention change in parse order for RunAs entries.
5829:
5830: 2004-05-30 12:15 millert
5831:
5832: * configure: regen
5833:
5834: 2004-05-29 18:29 millert
5835:
5836: * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
5837: now takes an optional dir as a parameter
5838: o added check for ldap_initialize() and start_tls_s()
5839:
5840: 2004-05-29 14:54 millert
5841:
5842: * README.LDAP: Fix some typos, word choice and formatting issues.
5843:
5844: 2004-05-28 18:06 millert
5845:
5846: * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
5847: stdio and just use read/write as it is simpler.
5848:
5849: 2004-05-28 16:27 millert
5850:
5851: * configure, configure.in: Remove hack overriding cross-compiler
5852: check. It should no longer be needed.
5853:
5854: 2004-05-28 16:26 millert
5855:
5856: * compat.h: Remove select() compat bits since we no longer use
5857: select().
5858:
5859: 2004-05-28 16:24 millert
5860:
5861: * CHANGES, tgetpass.c: Use alarm() instead of select() for the
5862: timeout for systems that don't fully/properly implement select().
5863:
5864: 2004-05-27 19:14 millert
5865:
5866: * CHANGES: synbc
5867:
5868: 2004-05-27 19:12 millert
5869:
5870: * RUNSON: update
5871:
5872: 2004-05-27 19:12 millert
5873:
5874: * set_perms.c: Deal with systems that have no way of setting the
5875: effective uid such as nsr-tandem-nsk.
5876:
5877: 2004-05-27 19:01 millert
5878:
5879: * configure, configure.in: Define NO_SAVED_IDS if we don't find
5880: seteuid()
5881:
5882: 2004-05-27 18:21 millert
5883:
5884: * config.h.in, configure, configure.in: Add back check for
5885: setreuid() since NSK doesn't have it.
5886:
5887: 2004-05-27 15:57 millert
5888:
5889: * sudoers.cat, sudoers.man.in: regen
5890:
5891: 2004-05-27 15:56 millert
5892:
5893: * BUGS, CHANGES: sync
5894:
5895: 2004-05-27 15:55 millert
5896:
5897: * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
5898: user was explicitly denied and the command matched. This fixes a
5899: long-standing bug and makes: foo machine = (ALL)
5900: /usr/bin/blah foo machine = (!bar) /usr/bin/blah
5901:
5902: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
5903:
5904: 2004-05-27 15:52 millert
5905:
5906: * sudoers.pod: Clarify mail_noperm
5907:
5908: 2004-05-19 21:25 aaron
5909:
5910: * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
5911:
5912: 2004-05-17 18:32 millert
5913:
5914: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
5915: sudoers.cat, visudo.cat: regen
5916:
5917: 2004-05-17 18:31 millert
5918:
5919: * TODO: sync
5920:
5921: 2004-05-17 18:31 millert
5922:
5923: * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
5924: remembers these?) and add a minimal sudoedit example.
5925:
5926: 2004-05-17 18:21 millert
5927:
5928: * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
5929: filesystem -> file system
5930:
5931: 2004-05-17 18:19 millert
5932:
5933: * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
5934:
5935: 2004-05-17 18:10 millert
5936:
5937: * lex.yy.c: regen
5938:
5939: 2004-05-17 17:57 millert
5940:
5941: * visudo.pod: remove my email addr
5942:
5943: 2004-05-17 17:55 millert
5944:
5945: * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
5946: @mansectsu@ everywhere Make man page references links with L<>
5947:
5948: 2004-05-17 16:51 millert
5949:
5950: * parse.lex: Accept quoted globbing characters and pass them
5951: verbatim for fnmatch()
5952:
5953: 2004-05-17 16:50 millert
5954:
5955: * UPGRADE: Document that /tmp/.odus is gone.
5956:
5957: 2004-05-17 16:28 millert
5958:
5959: * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
5960: /tmp/.odus as a possible timestamp dir unless specifically
5961: configured to do so. Instead, if no /var/run exists, use
5962: /var/adm/sudo or /usr/adm/sudo.
5963:
5964: 2004-05-17 16:08 millert
5965:
5966: * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
5967: visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
5968: on patches from Tom Bates.
5969:
5970: 2004-05-16 18:47 millert
5971:
5972: * CHANGES: There was no 1.6.7p6.
5973:
5974: 2004-05-16 16:38 millert
5975:
5976: * BUGS, CHANGES: sync
5977:
5978: 2004-05-16 16:36 millert
5979:
5980: * Makefile.in: add missing files to DISTFILES
5981:
5982: 2004-05-16 16:23 millert
5983:
5984: * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
5985:
5986: 2004-05-16 16:20 millert
5987:
5988: * Makefile.in: Fix some line wrap and update (c) year
5989:
5990: 2004-04-28 15:05 aaron
5991:
5992: * README.LDAP: Build Note
5993:
5994: 2004-04-06 22:03 aaron
5995:
5996: * Makefile.in: Fix install-dirs
5997:
5998: 2004-04-04 20:27 millert
5999:
6000: * visudo.c: In Exit() when used as a signal handler, emsg is a
6001: pointer so sizeof() is wrong so make it a #define instead. Also
6002: avoid using a negative exit value. Found by Aaron Campbell
6003:
6004: 2004-03-24 18:23 millert
6005:
6006: * sudoers.pod: Remove bogus sentence about uids in a User_List.
6007: Document usernames vs. uid parsing in a Runas_List.
6008:
6009: 2004-03-24 18:06 millert
6010:
6011: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6012: the user specified a uid with the -u flag and the uid exists in
6013: the passwd file, set runas_user to the name, not the uid.
6014:
6015: When comparing usernames in sudoers, if a name is really a uid
6016: (starts with '#') compare it numerically to pw_uid.
6017:
6018: 2004-03-22 13:35 millert
6019:
6020: * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6021:
6022: 2004-02-28 18:54 aaron
6023:
6024: * CHANGES, config.h.in, ldap.c: Added start_tls support
6025:
6026: 2004-02-14 18:04 millert
6027:
6028: * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6029: def_data.c, def_data.h to PARSESRCS.
6030:
6031: 2004-02-14 10:13 aaron
6032:
6033: * strlcat.c, strlcpy.c: Un-Fix last license munge
6034:
6035: 2004-02-13 16:37 millert
6036:
6037: * CHANGES, RUNSON, TODO: checkpoint
6038:
6039: 2004-02-13 16:37 millert
6040:
6041: * lex.yy.c, configure: regen
6042:
6043: 2004-02-13 16:36 millert
6044:
6045: * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6046: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6047: find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6048: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6049: interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6050: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6051: strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6052: sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6053: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6054: visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6055: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6056: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6057: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6058: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6059: emul/search.h, emul/utime.h: More to a less restrictive,
6060: ISC-style license.
6061:
6062: 2004-02-12 21:08 aaron
6063:
6064: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6065: def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6066: sudoers2ldif: Merged in LDAP Support
6067:
6068: 2004-02-08 15:53 millert
6069:
6070: * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6071: a macro.
6072:
6073: 2004-02-06 18:08 millert
6074:
6075: * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6076: already 0 so set the euid first, then just call setuid(0) to set
6077: the real uid too.
6078:
6079: 2004-02-06 14:52 millert
6080:
6081: * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6082: appropriate instead of seteuid() which may not exist.
6083:
6084: 2004-02-04 14:58 millert
6085:
6086: * LICENSE: 2004
6087:
6088: 2004-02-03 23:38 millert
6089:
6090: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6091: --with-pc-insults configure option
6092:
6093: 2004-02-03 23:32 millert
6094:
6095: * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6096:
6097: 2004-02-01 15:45 millert
6098:
6099: * sudo.man.in, sudoers.man.in: regen
6100:
6101: 2004-02-01 15:44 millert
6102:
6103: * sudoers.pod: Add a note that noexec is not a cure-all.
6104:
6105: 2004-02-01 15:20 millert
6106:
6107: * sudoers.pod: Mention that disabling "root_sudo" is pretty
6108: pointless.
6109:
6110: 2004-02-01 15:20 millert
6111:
6112: * configure, configure.in: Substitute for root_sudo in sudoers.pod
6113:
6114: 2004-02-01 15:03 millert
6115:
6116: * sudo.pod: Add sudoedit to the NAME section
6117:
6118: 2004-02-01 15:00 millert
6119:
6120: * sudoers.pod: Document that fact that setting ignore_dot in
6121: sudoers has no effect due to the fact that find_path() is called
6122: *before* sudoers is read.
6123:
6124: 2004-01-29 19:50 millert
6125:
6126: * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6127:
6128: 2004-01-29 19:42 millert
6129:
6130: * BUGS, CHANGES, TODO: sync
6131:
6132: 2004-01-29 19:42 millert
6133:
6134: * sudo.man.in: regen
6135:
6136: 2004-01-29 19:41 millert
6137:
6138: * sudo.pod: Clarify that when sudo is run by root with the
6139: SUDO_USER variable set, the sudoers lookup happens for root and
6140: not the SUDO_USER user.
6141:
6142: 2004-01-29 17:33 millert
6143:
6144: * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6145: set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6146: auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6147:
6148: 2004-01-29 16:22 millert
6149:
6150: * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6151:
6152: 2004-01-29 16:15 millert
6153:
6154: * sudo.c: Don't look at prev_user until after we've parsed sudoers
6155: and done the password check. That way, if sudo/sudoedit is run
6156: from a root process that was invoked by sudo, we check sudoers
6157: for root, not the previous user. This makes sudoedit much more
6158: useful and means that for the sudo case, we get correct logging
6159: on who actually ran the command.
6160:
6161: 2004-01-22 19:22 millert
6162:
6163: * sudo_edit.c: Add a comment describing why we need to be notified
6164: about our child stopping.
6165:
6166: 2004-01-22 16:06 millert
6167:
6168: * def_data.c, def_data.in: Update the noexec variable descriptions
6169:
6170: 2004-01-22 14:18 millert
6171:
6172: * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6173: execve()
6174:
6175: 2004-01-22 12:14 millert
6176:
6177: * sudo_noexec.c: Alas, all the world does not go through execve(2).
6178: Many systems still have an execv(2) system call, Linux 2.6
6179: provides fexecve(2) and it is not uncommon for libc to have
6180: underscore ('_') versions of the functions to be used internally
6181: by the library. Instead of stubbing all these out by hand,
6182: define a macro and let it do the work. Extra exec functions
6183: pointed out by Reznic Valery.
6184:
6185: 2004-01-21 21:57 millert
6186:
6187: * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6188: Because we do a fork() first we need to be notified when the
6189: child has been stopped and then send that same signal to ourself
6190: so the shell can do its job control thing.
6191:
6192: 2004-01-21 21:44 millert
6193:
6194: * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6195: systems out there that want to run sudo that still don't support
6196: these we can try to deal with that later.
6197:
6198: 2004-01-21 20:03 millert
6199:
6200: * lex.yy.c: regen
6201:
6202: 2004-01-21 20:00 millert
6203:
6204: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6205: -e / sudoedit
6206:
6207: 2004-01-21 19:08 millert
6208:
6209: * configure, configure.in: fix typo
6210:
6211: 2004-01-21 19:02 millert
6212:
6213: * config.h.in, configure.in: Add SET/CLR/ISSET
6214:
6215: 2004-01-21 18:55 millert
6216:
6217: * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6218: Pretty print the long usage() line to not wrap (assumes 80 char
6219: display)
6220:
6221: 2004-01-21 18:01 millert
6222:
6223: * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6224: is implied and no other flags are permitted.
6225:
6226: 2004-01-21 18:00 millert
6227:
6228: * sudo.h: Add a new flag, -e, that makes it possible to give users
6229: the ability to edit files with the editor of their choice as the
6230: invoking user, not the runas user. Temporary files are used for
6231: the actual edit and the temp file is copied over the original
6232: after the editor is done.
6233:
6234: 2004-01-21 17:25 millert
6235:
6236: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6237: flag, -e, that makes it possible to give users the ability to
6238: edit files with the editor of their choice as the invoking user,
6239: not the runas user. Temporary files are used for the actual edit
6240: and the temp file is copied over the original after the editor is
6241: done.
6242:
6243: 2004-01-21 17:06 millert
6244:
6245: * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6246: variables is set, use that to determine the invoking user's true
6247: identity. That way the proper info gets logged by someone who
6248: has done "sudo su" but still uses sudo to as root. We can't do
6249: this for non-root users since that would open up a security hole,
6250: though perhaps it would be acceptable to use getlogin(2) on OSes
6251: where this a system call (and doesn't just look in the utmp
6252: file).
6253:
6254: 2004-01-21 16:58 millert
6255:
6256: * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6257:
6258: 2004-01-21 16:57 millert
6259:
6260: * configure, config.h.in, configure.in: Add check for fchown(2)
6261:
6262: 2004-01-20 14:22 millert
6263:
6264: * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6265: set_runaspw. It is far to late to set NewArgv[0] there and will
6266: have no effect anyway as cmnd and safe_cmnd have already been
6267: set.
6268:
6269: 2004-01-20 14:18 millert
6270:
6271: * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6272: did.
6273:
6274: 2004-01-18 20:17 millert
6275:
6276: * env.c, sudo.c: In -i mode always set new environment based on the
6277: runas user's passwd entry.
6278:
6279: 2004-01-18 17:56 millert
6280:
6281: * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6282: section with usage() in sudo.c. Also sort the flags in the
6283: OPTIONS section.
6284:
6285: 2004-01-18 17:55 millert
6286:
6287: * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6288: patches from David J. MacKenzie o Sort the flags in the usage
6289: message
6290:
6291: 2004-01-18 17:22 millert
6292:
6293: * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6294: substitution.
6295:
6296: 2004-01-17 16:34 millert
6297:
6298: * sudo.c: Change euid to runas user before calling find_path().
6299: Unfortunately, though runas_user can be modified in sudoers we
6300: haven't parsed sudoers yet.
6301:
6302: 2004-01-17 16:25 millert
6303:
6304: * sudoers.man.in, sudoers.pod: Add missing defintion of
6305: Parameter_List and use single pipes in the Defaults EBNF
6306: definition.
6307:
6308: 2004-01-17 13:49 millert
6309:
6310: * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6311: don't want to reset the contents of runas_pw if the user
6312: specified a user via the -u flag.
6313:
6314: Avoid unnecessary passwd lookups in set_authpw(). In most cases
6315: we already have the info in runas_pw.
6316:
6317: 2004-01-16 18:16 millert
6318:
6319: * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6320: RedHat
6321:
6322: 2004-01-16 18:12 millert
6323:
6324: * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6325:
6326: 2004-01-16 18:10 millert
6327:
6328: * parse.c: If we can't stat the command as root, try as the runas
6329: user instead.
6330:
6331: 2004-01-16 18:09 millert
6332:
6333: * testsudoers.c, visudo.c: Add stub set_runaspw() function
6334:
6335: 2004-01-16 18:09 millert
6336:
6337: * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6338: will be used as a callback to update runas_pw when the runas user
6339: changes.
6340:
6341: 2004-01-16 18:07 millert
6342:
6343: * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6344:
6345: 2004-01-16 18:05 millert
6346:
6347: * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6348: a PERM_RUNAS that just changes the euid.
6349:
6350: 2004-01-16 18:04 millert
6351:
6352: * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6353: allocate memory in one chunk for easy free()ing. Also change it
6354: from static to extern.
6355:
6356: 2004-01-16 18:03 millert
6357:
6358: * defaults.c, defaults.h: Add callback support
6359:
6360: 2004-01-16 18:02 millert
6361:
6362: * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6363: it for runas_default
6364:
6365: 2004-01-15 15:13 millert
6366:
6367: * auth/fwtk.c: Add support for chalnecho and display server
6368: responses used by fwtk >= 2.0
6369:
6370: 2004-01-12 18:39 millert
6371:
6372: * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6373:
6374: 2004-01-12 14:03 millert
6375:
6376: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6377: sudo.h: Use closefrom() instead of doing the equivalent inline.
6378:
6379: 2004-01-12 13:55 millert
6380:
6381: * closefrom.c: closefrom(3) for systems w/o it
6382:
6383: 2004-01-09 16:29 millert
6384:
6385: * sudoers.man.in: Update from .pod file.
6386:
6387: 2004-01-09 16:26 millert
6388:
6389: * configure, configure.in: Substitute noexec_file for the sudoers
6390: man page
6391:
6392: 2004-01-09 16:24 millert
6393:
6394: * sudo.man.in, sudo.pod: Mention noexec
6395:
6396: 2004-01-09 16:16 millert
6397:
6398: * sudoers.man.in, sudoers.pod: Document noexec
6399:
6400: 2004-01-09 14:38 millert
6401:
6402: * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6403: definition from config.h to pam.c where it belongs. We can't
6404: have this in config.h since that gets included too early.
6405:
6406: 2004-01-09 14:35 millert
6407:
6408: * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6409: implementations put their headers in /usr/include/pam instead of
6410: /usr/include/security.
6411:
6412: 2004-01-09 14:32 millert
6413:
6414: * configure.in: I missed changing the EXEC macro -> EXECV here when
6415: I changed this in config.h.in and sudo.c a while ago.
6416:
6417: 2004-01-09 13:15 millert
6418:
6419: * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6420:
6421: 2004-01-09 03:29 millert
6422:
6423: * configure, configure.in: o merge the hpux case entries into a
6424: single entry w/ its own sub-case statement. o HP-UX >= 11
6425: support getspnam(), use it in preference to getprpwuid()
6426:
6427: 2004-01-09 02:58 millert
6428:
6429: * configure, configure.in: eval $shrext so that it expands nicely
6430: on MacOS X
6431:
6432: 2004-01-09 02:50 millert
6433:
6434: * Makefile.in: Don't lie about making a module, it does the wrong
6435: thing on mach
6436:
6437: 2004-01-09 02:49 millert
6438:
6439: * ltmain.sh: Remove requirement that libs must begin with "lib".
6440: They don't when we point directly at the lib using LD_PRELOAD or
6441: its equivalent.
6442:
6443: 2004-01-09 02:01 millert
6444:
6445: * acsite.m4: Disable support for c++, f77 and java. We don't need
6446: it, it takes a lot of time, and it hosed our check for shared lib
6447: support.
6448:
6449: 2004-01-09 02:00 millert
6450:
6451: * configure: regen
6452:
6453: 2004-01-09 02:00 millert
6454:
6455: * configure.in: Call AC_ENABLE_SHARED and check the status of
6456: enable_shared to know when shared libs are available.
6457:
6458: 2004-01-09 01:37 millert
6459:
6460: * acsite.m4: Duh, OpenBSD suports shared libs too
6461:
6462: 2004-01-09 01:18 millert
6463:
6464: * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6465: qualifiers.
6466:
6467: 2004-01-09 01:15 millert
6468:
6469: * configure, configure.in: o No need to check for sed, libtool
6470: config does that for us o move check for --with-noexec until
6471: after libtool magic is run so we can use $can_build_shared and
6472: $shrext
6473:
6474: 2004-01-09 01:14 millert
6475:
6476: * ltmain.sh: Don't print a bunch of crap about library installs
6477: since we are not really installing a library.
6478:
6479: 2004-01-09 00:38 millert
6480:
6481: * env.c: Make format_env() varargs Add noexec support for Darwin,
6482: MacOS X, Irix, and Tru64
6483:
6484: 2004-01-09 00:32 millert
6485:
6486: * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6487: changes: o no ldconfig in the finish step o assume no libprefix
6488: or version is needed
6489:
6490: 2004-01-09 00:15 millert
6491:
6492: * sudo_noexec.c: Fix compilation under K&R
6493:
6494: 2004-01-06 09:31 millert
6495:
6496: * CHANGES: checkpoint
6497:
6498: 2004-01-06 09:28 millert
6499:
6500: * sudo_noexec.c: stub execve() that just returns EACCES; used for
6501: noexec functionality
6502:
6503: 2004-01-06 01:42 millert
6504:
6505: * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6506: issue with generated code.
6507:
6508: 2004-01-05 16:10 millert
6509:
6510: * def_data.c, def_data.h, def_data.in: Move the environment
6511: defaults to the end and shorten a few of the descriptions.
6512:
6513: 2004-01-05 15:05 millert
6514:
6515: * configure.in, configure: no shared libs on ultris or convexos
6516:
6517: 2004-01-05 15:03 millert
6518:
6519: * Makefile.in, configure, configure.in: Build sudo_noexec shared
6520: object using libtool; could use some cleanup.
6521:
6522: 2004-01-05 14:59 millert
6523:
6524: * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6525:
6526: 2004-01-05 14:56 millert
6527:
6528: * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6529: that order is not important.
6530:
6531: 2004-01-05 12:15 millert
6532:
6533: * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6534: pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6535:
6536: 2004-01-04 22:58 millert
6537:
6538: * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6539: _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6540: option. The default value of noexec_file is set to this.
6541:
6542: 2004-01-04 21:48 millert
6543:
6544: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6545: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6546: support for preloading a shared object containing a dummy
6547: execve() function that just sets error and returns -1. This adds
6548: a "noexec_file" option to load the filename as well as a "noexec"
6549: flag to enable it unconditionally. There is also a NOEXEC tag
6550: that can be attached to specific commands and an EXEC tag to
6551: disable it.
6552:
6553: 2004-01-04 21:40 millert
6554:
6555: * mkdefaults: add missing newline to usage statement
6556:
6557: 2004-01-04 20:39 millert
6558:
6559: * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6560:
6561: 2004-01-04 20:16 millert
6562:
6563: * logging.c: Don't truncate usernames to 8 characters in the log
6564: message.
6565:
6566: 2004-01-04 20:13 millert
6567:
6568: * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6569:
6570: 2004-01-04 20:12 millert
6571:
6572: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6573: sudoers.pod: Add a new option, lecture_file, that can be used to
6574: point to a custom sudo lecture.
6575:
6576: 2003-12-31 17:46 millert
6577:
6578: * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6579: auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6580: zero_bytes() function to do the equivalent of bzero in such a way
6581: that will heopfully not be optimized away by sneaky compilers.
6582:
6583: 2003-12-31 13:35 millert
6584:
6585: * err.c: Use #ifdef __STDC__, not #if __STDC__.
6586:
6587: 2003-12-30 17:41 millert
6588:
6589: * mkdefaults: Always put at least one space between the def_* macro
6590: name and its definition.
6591:
6592: 2003-12-30 17:34 millert
6593:
6594: * configure, configure.in: Adjust code for --without-lecture to
6595: match new values.
6596:
6597: 2003-12-30 17:33 millert
6598:
6599: * visudo.man.in: regen after pasto fix
6600:
6601: 2003-12-30 17:31 millert
6602:
6603: * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6604: from a flag to a tuple.
6605:
6606: 2003-12-30 17:31 millert
6607:
6608: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6609: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6610: support for tuples in def_data.in; these are implemented as an
6611: enum type. Currently there is only a single tuple enum but in
6612: the future we may have one tuple enum per T_TUPLE entry in
6613: def_data.in. Currently listpw, verifypw and lecture are tuples.
6614: This avoids the need to have two entries (one ival, one str) for
6615: pwflags and syslog values.
6616:
6617: lecture is now a tuple with the following values: never, once,
6618: always
6619:
6620: We no longer use both an int and string entry for syslog
6621: facilities and priorities. Instead, there are logfac2str() and
6622: logpri2str() functions that get used when we need to print the
6623: string values.
6624:
6625: 2003-12-30 17:20 millert
6626:
6627: * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6628: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6629: visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6630: auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6631: auth/sudo_auth.c: Create def_* macros for each defaults value so
6632: we no longer need the def_{flag,ival,str,list,mode} macros (which
6633: have been removed). This is a step toward more flexible data
6634: types in def_data.in.
6635:
6636: 2003-12-30 15:55 millert
6637:
6638: * TODO: checkpoint
6639:
6640: 2003-12-22 21:18 millert
6641:
6642: * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6643: unusual for users to place "sudo -k" in a .logout file which can
6644: cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6645: daemon has died. Previously, this would result in useless mail
6646: and logging.
6647:
6648: 2003-12-16 13:51 millert
6649:
6650: * visudo.pod: fix pasto in VISUAL description
6651:
6652: 2003-12-09 22:09 millert
6653:
6654: * configure: regen
6655:
6656: 2003-12-09 22:08 millert
6657:
6658: * CHANGES: checkpoint
6659:
6660: 2003-12-09 22:02 millert
6661:
6662: * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6663: too
6664:
6665: 2003-08-12 16:45 millert
6666:
6667: * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6668: not already there).
6669:
6670: 2003-06-28 21:31 millert
6671:
6672: * auth/pam.c: Fix a core dump on Solaris by preserving the
6673: pam_handle_t we used during authentication for pam_prep_user().
6674: If we didn't authenticate (ie: ticket still valid), we call
6675: pam_init() from pam_prep_user(). This is something of a hack; it
6676: may be better to change the auth API and add an auth_final()
6677: function that acts like pam_prep_user().
6678:
6679: 2003-06-21 12:50 millert
6680:
6681: * set_perms.c: Add explicit declaration of printerr variable in
6682: function header (was defaulting to int which is OK but oh so K&R
6683: :-). From Theo.
6684:
6685: 2003-06-09 19:00 millert
6686:
6687: * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6688:
6689: 2003-06-09 16:07 millert
6690:
6691: * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6692: problem where the sudo process would spin eating up CPU until
6693: sendmail finished when it has to send mail.
6694:
6695: 2003-05-30 16:22 millert
6696:
6697: * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6698: disavowed it
6699:
6700: 2003-05-21 21:53 millert
6701:
6702: * parse.c: Don't assume that getgrnam() calls don't modify contents
6703: of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6704: can happen. Based on a patch from Kirk Webb.
6705:
6706: 2003-05-06 11:25 millert
6707:
6708: * configure.in: missing ;;
6709:
6710: 2003-05-06 00:53 millert
6711:
6712: * configure.in: darwin has a broken setreuid() in at least some
6713: versions
6714:
6715: 2003-05-06 00:31 millert
6716:
6717: * env.c: Fix an off by one error when reallocating the environment;
6718: Kevin Pye
6719:
6720: 2003-04-30 14:04 millert
6721:
6722: * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6723:
6724: 2003-04-28 19:30 millert
6725:
6726: * HISTORY: More info on the early days from Coggs.
6727:
6728: 2003-04-21 14:47 millert
6729:
6730: * auth/kerb5.c: remove errant semicolon that prevented compilation
6731: under heimdal
6732:
6733: 2003-04-15 20:42 millert
6734:
6735: * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6736: env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6737: goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6738: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6739: strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
6740: sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
6741: version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
6742: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6743: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6744: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6745: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
6746: on affected files
6747:
6748: 2003-04-15 20:25 millert
6749:
6750: * LICENSE: slightly different wording for the darpa credit
6751:
6752: 2003-04-15 14:37 millert
6753:
6754: * LICENSE: Add DARPA credit
6755:
6756: 2003-04-14 16:49 millert
6757:
6758: * auth/kerb5.c: Use krb5_princ_component() instead of
6759: krb5_princ_realm() for MIT Kerberos like we did before I messed
6760: things up ;-)
6761:
6762: Use krb5_principal_get_comp_string() to do the same thing w/
6763: Heimdal. I'm not sure if the component should be 0 or 1 in this
6764: case.
6765:
6766: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
6767: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
6768: should be a configure check for this I guess.
6769:
6770: 2003-04-13 15:48 millert
6771:
6772: * TROUBLESHOOTING, config.h.in, configure, configure.in,
6773: sample.sudoers: builtin -> built-in; Jason McIntyre
6774:
6775: 2003-04-13 15:45 millert
6776:
6777: * sudoers.pod: built in -> built-in; Jason McIntyre
6778:
6779: 2003-04-09 16:14 millert
6780:
6781: * CHANGES: checkpoint for 1.6.7p3
6782:
6783: 2003-04-09 16:14 millert
6784:
6785: * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
6786: Spencer. Amazingly, sudo source from 1985 is available via
6787: groups.google.com
6788:
6789: 2003-04-09 16:13 millert
6790:
6791: * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
6792: set rl.rlim_cur to 0 to turn off core dumps. This may be needed
6793: for the RLIMIT_CORE restoration on some OSes.
6794:
6795: 2003-04-04 12:46 millert
6796:
6797: * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
6798:
6799: 2003-04-04 12:45 millert
6800:
6801: * config.h.in, configure, configure.in: Check for heimdal even if
6802: we found krb5-config and define HAVE_HEIMDAL.
6803:
6804: 2003-04-03 22:04 millert
6805:
6806: * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
6807: The former is no longer defined by MIT kerb5 (though it used to
6808: be and indeed remains so in Heimdal).
6809:
6810: 2003-04-03 10:16 millert
6811:
6812: * mkinstalldirs: Remove newer stuff that passes multiple (possibly
6813: duplicate) directories to "mkdir -p" since that seems to break on
6814: Tru64 Unix at least. This basically brings back what shipped
6815: with sudo 1.6.6.
6816:
6817: 2003-04-02 13:57 millert
6818:
6819: * auth/kerb5.c: Correct number of args to
6820: krb5_principal_get_realm() and fix an unclosed comment that hid
6821: the bug.
6822:
6823: 2003-04-02 13:45 millert
6824:
6825: * configure: regen
6826:
6827: 2003-04-02 13:45 millert
6828:
6829: * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
6830: configure.in, version.h: ++version
6831:
6832: 2003-04-02 13:44 millert
6833:
6834: * configure.in: use krb5-config to determine Kerberos V details if
6835: it exists
6836:
6837: 2003-04-02 13:25 millert
6838:
6839: * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
6840: interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
6841: visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
6842: auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
6843: throughout. The main exception is openlog(). Since the admin
6844: may be filtering logs based on the program name in the log files,
6845: hard code this to "sudo".
6846:
6847: 2003-04-02 13:16 millert
6848:
6849: * Makefile.in: Add getprogname.c and err.c
6850:
6851: 2003-04-02 13:15 millert
6852:
6853: * configure: regen
6854:
6855: 2003-04-02 13:15 millert
6856:
6857: * configure.in, config.h.in: Add checks for getprognam(),
6858: __progname and err.h
6859:
6860: 2003-04-02 13:14 millert
6861:
6862: * err.c, emul/err.h: For systems withour err/warn functions.
6863:
6864: 2003-04-02 13:14 millert
6865:
6866: * getprogname.c: For systems neither getprogname() nor __progname;
6867: uses Argv[0].
6868:
6869: 2003-04-01 10:09 millert
6870:
6871: * CHANGES: checkpoint for 1.6.7p1
6872:
6873: 2003-04-01 10:02 millert
6874:
6875: * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
6876:
6877: 2003-04-01 09:58 millert
6878:
6879: * check.c: oflow detection in expand_prompt() was faulty (false
6880: positives). The count was based on strlcat() return value which
6881: includes the length of the entire string.
6882:
6883: 2003-03-30 19:02 millert
6884:
6885: * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
6886:
6887: 2003-03-24 16:09 millert
6888:
6889: * logging.c: g/c unused variable
6890:
6891: 2003-03-24 11:06 millert
6892:
6893: * configure: regen
6894:
6895: 2003-03-24 11:05 millert
6896:
6897: * configure.in: use man sections 8 and 5 for csops
6898:
6899: 2003-03-21 18:11 millert
6900:
6901: * configure: regen
6902:
6903: 2003-03-21 15:10 millert
6904:
6905: * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
6906: of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
6907:
6908: 2003-03-21 14:02 millert
6909:
6910: * configure: regen
6911:
6912: 2003-03-21 14:01 millert
6913:
6914: * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
6915: An alternate libpath may be specified or -blibpath support can be
6916: disabled. Also change conifgure such that -blibpath is not
6917: specified if no -L libpaths were added to SUDO_LDFLAGS.
6918:
6919: 2003-03-20 22:05 millert
6920:
6921: * configure.in: add AIX blibpath support
6922:
6923: 2003-03-20 20:28 millert
6924:
6925: * INSTALL, configure.in: --with-skey and --with-opie now take an
6926: option directory argument This obsoletes a --with-csops hack
6927: (/tools/cs/skey)
6928:
6929: Also remove the remaining direct uses of "echo"
6930:
6931: 2003-03-20 17:44 millert
6932:
6933: * configure.in: Detect KTH Kerberos IV and deal with it. Also make
6934: -lroken optional for KTH Kerberos IV and V.
6935:
6936: 2003-03-20 14:42 millert
6937:
6938: * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
6939: -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
6940: specified variable.
6941:
6942: 2003-03-20 14:40 millert
6943:
6944: * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
6945: There is a new configure option, --with-rpath to control this
6946: behavior.
6947:
6948: 2003-03-19 23:50 millert
6949:
6950: * configure.in: for kerb4 put libdes after libkrb on the link line
6951:
6952: 2003-03-19 23:49 millert
6953:
6954: * auth/kerb4.c: typo
6955:
6956: 2003-03-19 23:33 millert
6957:
6958: * configure.in: fix kerberos lib check when a path is specified
6959:
6960: 2003-03-19 21:04 millert
6961:
6962: * logging.c: Fix boolean thinko in SIGCHLD reaper and call
6963: reapchild after sending mail instead of doing a conditional
6964: sudo_waitpid.
6965:
6966: 2003-03-19 16:20 millert
6967:
6968: * configure: regen
6969:
6970: 2003-03-19 16:19 millert
6971:
6972: * configure.in: replace =DIR with [=DIR] where sensible
6973:
6974: 2003-03-19 16:16 millert
6975:
6976: * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
6977: include/lib detection based on openssh's configure.in
6978:
6979: 2003-03-19 15:58 millert
6980:
6981: * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
6982: argument.
6983:
6984: 2003-03-15 22:03 millert
6985:
6986: * auth/securid.c: Kill remaining strcpy(), the programmer's guide
6987: says username is 32 bytes.
6988:
6989: 2003-03-15 21:18 millert
6990:
6991: * auth/kerb4.c: trat uid_t as unsigned long for printf and use
6992: snprintf, not sprintf
6993:
6994: 2003-03-15 21:18 millert
6995:
6996: * auth/rfc1938.c: use snprintf
6997:
6998: 2003-03-15 15:37 millert
6999:
7000: * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7001: kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7002: copyright year
7003:
7004: 2003-03-15 15:31 millert
7005:
7006: * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7007: Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7008: logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7009: sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7010: visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7011: copyright year
7012:
7013: 2003-03-15 15:19 millert
7014:
7015: * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7016: with %lu
7017:
7018: 2003-03-15 15:17 millert
7019:
7020: * configure: regen
7021:
7022: 2003-03-15 15:16 millert
7023:
7024: * configure.in: correct error messages for
7025: --with-sudoers-{mode,uid,gid}
7026:
7027: 2003-03-15 15:10 millert
7028:
7029: * alloc.c: make the malloc(0) error specific to each function to
7030: aid tracking down bugs.
7031:
7032: 2003-03-15 14:49 millert
7033:
7034: * alloc.c: deal with platforms where size_t is signed and there is
7035: no SIZE_MAX or SIZE_T_MAX
7036:
7037: 2003-03-15 14:10 millert
7038:
7039: * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7040: warnings.
7041:
7042: 2003-03-15 13:02 millert
7043:
7044: * sudo.c: Use stat_sudoers macro so --with-stow can work
7045:
7046: 2003-03-15 13:01 millert
7047:
7048: * INSTALL, config.h.in, configure, configure.in: Add support for
7049: --with-stow based on patches from Robert Uhl
7050:
7051: 2003-03-15 12:51 millert
7052:
7053: * env.c: fix indentation
7054:
7055: 2003-03-15 00:21 millert
7056:
7057: * configure.in: back out rev 1.352
7058:
7059: 2003-03-14 20:11 millert
7060:
7061: * lex.yy.c: regen
7062:
7063: 2003-03-14 20:11 millert
7064:
7065: * parse.lex: use strlcpy, not strncpy
7066:
7067: 2003-03-14 19:48 millert
7068:
7069: * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7070: setusercontext() failure.
7071:
7072: 2003-03-14 19:43 millert
7073:
7074: * logging.c: use pid_t
7075:
7076: 2003-03-14 10:43 millert
7077:
7078: * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7079:
7080: 2003-03-14 10:35 millert
7081:
7082: * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7083:
7084: 2003-03-13 21:47 millert
7085:
7086: * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7087:
7088: 2003-03-13 21:38 millert
7089:
7090: * configure: regen
7091:
7092: 2003-03-13 21:38 millert
7093:
7094: * configure.in: put -ldl after -lpam, not before; fixes static
7095: linking on Linux
7096:
7097: 2003-03-13 21:17 millert
7098:
7099: * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7100: getifaddrs() case.
7101:
7102: 2003-03-13 20:24 millert
7103:
7104: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7105: sudoers.cat, visudo.cat: regen
7106:
7107: 2003-03-13 20:23 millert
7108:
7109: * Makefile.in: Preserve copyright notice from .pod file in .man.in
7110: file
7111:
7112: 2003-03-13 20:01 millert
7113:
7114: * visudo.pod: Add sudoers(5) to SEE ALSO
7115:
7116: 2003-03-13 15:27 millert
7117:
7118: * lex.yy.c: regen
7119:
7120: 2003-03-13 15:27 millert
7121:
7122: * parse.lex: Don't assume libc can realloc() a NULL string. If
7123: malloc/realloc fails, make sure we just return; yyerror() is not
7124: terminal.
7125:
7126: 2003-03-13 15:17 millert
7127:
7128: * lex.yy.c: regen
7129:
7130: 2003-03-13 15:17 millert
7131:
7132: * parse.lex: simplify fill_args a little and use strlcpy for
7133: paranoia
7134:
7135: 2003-03-13 15:00 millert
7136:
7137: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7138: testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7139: overflow. In all cases the strings were either pre-allocated to
7140: the correct size of length checks were done before the copy but a
7141: little paranoia can go a long way.
7142:
7143: 2003-03-13 12:54 millert
7144:
7145: * sudo.h: Add strlc{at,py} protos
7146:
7147: 2003-03-13 12:03 millert
7148:
7149: * env.c, interfaces.c: Use erealloc3()
7150:
7151: 2003-03-13 12:00 millert
7152:
7153: * configure: regen
7154:
7155: 2003-03-13 12:00 millert
7156:
7157: * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7158: need >=). Use memcpy() instead of strcpy() in estrdup() so this
7159: is strcpy()-free.
7160:
7161: 2003-03-13 11:58 millert
7162:
7163: * sudo.c: snprintf() a uid as %lu, not %ld to match the
7164: MAX_UID_T_LEN test in configure.
7165:
7166: 2003-03-13 11:56 millert
7167:
7168: * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7169: just unsigned.
7170:
7171: 2003-03-12 18:46 millert
7172:
7173: * sudo.c: Use snprintf() for paranoia
7174:
7175: 2003-03-12 17:16 millert
7176:
7177: * parse.yacc: Use emalloc2 and erealloc3
7178:
7179: 2003-03-12 17:08 millert
7180:
7181: * Makefile.in: strlc{at,py} for those w/o it
7182:
7183: 2003-03-12 17:07 millert
7184:
7185: * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7186:
7187: 2003-03-12 17:07 millert
7188:
7189: * config.h.in, configure, configure.in: Add stlc{at,py} for those
7190: w/o it.
7191:
7192: 2003-03-12 16:51 millert
7193:
7194: * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7195: emalloc2().
7196:
7197: 2003-03-12 16:45 millert
7198:
7199: * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7200: certain size.
7201:
7202: 2003-03-12 16:41 millert
7203:
7204: * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7205: bzero and with error/oflow checking.
7206:
7207: 2003-03-12 16:23 millert
7208:
7209: * alloc.c: Error out on malloc(0); suggested by theo
7210:
7211: 2003-03-09 19:34 millert
7212:
7213: * configure, configure.in: fix a typo; David Krause
7214:
7215: 2003-03-07 10:46 millert
7216:
7217: * sudo.pod: fix typo
7218:
7219: 2003-03-03 21:47 millert
7220:
7221: * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7222:
7223: 2003-03-01 13:20 millert
7224:
7225: * configure.in, config.h.in: not not; Anil Madhavapeddy
7226:
7227: 2003-01-23 03:03 millert
7228:
7229: * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7230:
7231: 2003-01-20 16:13 millert
7232:
7233: * parse.yacc: Add some missing ';' rule terminators that bison
7234: warns about.
7235:
7236: 2003-01-20 16:07 millert
7237:
7238: * config.sub: fix typo I introduced in last merge
7239:
7240: 2003-01-20 15:59 millert
7241:
7242: * configure: regenerate with autoconf 2.57
7243:
7244: 2003-01-20 15:58 millert
7245:
7246: * config.h.in: Add missing "$HOME"
7247:
7248: 2003-01-20 15:57 millert
7249:
7250: * configure.in: Add some more square backets to make autoconf 2.57
7251: happy
7252:
7253: 2003-01-20 14:39 millert
7254:
7255: * config.guess, config.sub, mkinstalldirs: Updates from
7256: autoconf-2.57
7257:
7258: 2003-01-17 18:10 millert
7259:
7260: * lex.yy.c, sudo.tab.h: regen
7261:
7262: 2003-01-17 18:09 millert
7263:
7264: * parse.lex, parse.yacc, sudoers.pod: Add support for
7265: Defaults>RunasUser
7266:
7267: 2003-01-06 19:10 millert
7268:
7269: * visudo.c: fclose() yyin after each yyparse() is done and use
7270: fopen() instead of using freopen().
7271:
7272: 2003-01-06 19:02 millert
7273:
7274: * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7275: It looks like the issue is that yyrestart() does not reset the
7276: start condition to INITIAL which is an issue since we parse
7277: sudoers multiple times.
7278:
7279: 2003-01-06 18:47 millert
7280:
7281: * parse.lex: Work around what appears to be a flex bug when dealing
7282: with files that lack a final newline before EOF. This adds a
7283: rule to match EOF in the non-initial states which resets the
7284: state to INITIAL and throws an error.
7285:
7286: 2003-01-06 15:06 millert
7287:
7288: * visudo.c: o The parser needs sudoers to end with a newline but
7289: some editors (emacs) may not add one. Check for a missing
7290: newline at EOF and add one if needed. o Set quiet flag during
7291: initial sudoers parse (to get options) o Move yyrestart() call
7292: and always use freopen() to open yyin after initial sudoers
7293: parse.
7294:
7295: 2002-12-15 11:24 millert
7296:
7297: * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7298: Want to set effective gid, not real gid, when reading sudoers.
7299:
7300: 2002-12-15 11:08 millert
7301:
7302: * set_perms.c: don't compile set_perms_posix if we have setreuid or
7303: setresuid
7304:
7305: 2002-12-14 14:21 millert
7306:
7307: * sudo.pod, sudoers.pod: document new prompt escapes
7308:
7309: 2002-12-14 14:15 millert
7310:
7311: * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7312: now gets collapsed to "%" as was originally intended. This also
7313: gets rid of lastchar (does lookahead instead of lookback) which
7314: should simplify the logic slightly.
7315:
7316: 2002-12-13 13:20 millert
7317:
7318: * tgetpass.c: Write the prompt *after* turning off echo to avoid
7319: some password characters being echoed on heavily-loaded machines
7320: with fast typists.
7321:
7322: 2002-12-13 13:09 millert
7323:
7324: * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7325:
7326: 2002-12-13 12:48 millert
7327:
7328: * configure.in: Fix IRIX fallout from name changes in man dir/sect
7329: Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7330: DOT edu
7331:
7332: 2002-12-13 11:33 millert
7333:
7334: * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7335: in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7336:
7337: 2002-11-28 18:43 millert
7338:
7339: * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7340: call this for us.
7341:
7342: 2002-11-26 12:09 millert
7343:
7344: * sudo.c: fix typo in comment; Pedro Bastos
7345:
7346: 2002-11-22 14:41 millert
7347:
7348: * INSTALL: document --disable-setresuid
7349:
7350: 2002-11-22 14:41 millert
7351:
7352: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7353: Sprinkle some volatile qualifiers to prevent over-enthusiastic
7354: optimizers from removing memset() calls.
7355:
7356: 2002-11-22 14:11 millert
7357:
7358: * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7359: -Wsign-compare
7360:
7361: 2002-11-22 14:09 millert
7362:
7363: * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7364: version based on setresuid() or setreuid() when possible since
7365: that allows us to support the stay_setuid option and we always
7366: know exactly what the semantics will be (various Linux kernels
7367: have broken POSIX saved uid support).
7368:
7369: 2002-11-22 14:08 millert
7370:
7371: * config.h.in, configure: regen from configure.in
7372:
7373: 2002-11-22 14:07 millert
7374:
7375: * configure.in: Add checks for setresuid() and a way to disable
7376: using it
7377:
7378: 2002-11-22 14:05 millert
7379:
7380: * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7381: or setre[ug]id(). The new set_perms stuff only uses things it
7382: knows are there.
7383:
7384: 2002-11-22 13:33 millert
7385:
7386: * sudo.c: Before exec, restore state of signal handlers to be the
7387: same as when we were initialy invoked instead of just reseting to
7388: SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7389: patch from Paul Markham.
7390:
7391: 2002-11-22 13:23 millert
7392:
7393: * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7394: message when sudo is run by root and no_root_sudo is set
7395:
7396: 2002-09-19 17:27 millert
7397:
7398: * README: update ftp link for bison
7399:
7400: 2002-07-20 08:30 millert
7401:
7402: * set_perms.c: Error out if setusercontext() fails and the runas
7403: user is not root.
7404:
7405: 2002-05-20 16:51 millert
7406:
7407: * auth/securid5.c: Fix rcsid
7408:
7409: 2002-05-20 16:50 millert
7410:
7411: * configure.in: Fix SecurID API test
7412:
7413: 2002-05-17 13:20 millert
7414:
7415: * env.c: typo in comment
7416:
7417: 2002-05-17 13:20 millert
7418:
7419: * configure.in: securid5 stuff needs pthreads. Just adding
7420: -lpthread is suboptimal but I don't see a better way at the
7421: moment.
7422:
7423: 2002-05-17 13:04 millert
7424:
7425: * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7426: Michael Stroucken
7427:
7428: 2002-05-17 13:02 millert
7429:
7430: * configure.in: Add check for SecurID 5.0 API
7431:
7432: 2002-05-08 16:46 millert
7433:
7434: * strerror.c: We actually do still need config.h to get the 'const'
7435: definition for K&R C.
7436:
7437: 2002-05-05 16:43 millert
7438:
7439: * configure: regen with autoconf 2.5.3
7440:
7441: 2002-05-05 16:25 millert
7442:
7443: * configure.in: Don't set sysconfdir to '/etc' if the user has
7444: specified a --prefix.
7445:
7446: 2002-05-05 16:14 millert
7447:
7448: * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7449: don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7450: to workaround a bug
7451:
7452: 2002-05-05 15:58 millert
7453:
7454: * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7455: dump_defaults() knows how to dump lists.
7456:
7457: 2002-05-04 21:31 millert
7458:
7459: * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7460: INSTALL.binary, README: ++version
7461:
7462: 2002-05-04 20:57 millert
7463:
7464: * sudoers.pod: document timestampowner
7465:
7466: 2002-05-04 20:45 millert
7467:
7468: * check.c: Don't call set_perms() when doing timestamp stuff unless
7469: timestamp_uid != 0.
7470:
7471: 2002-05-04 20:43 millert
7472:
7473: * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7474: testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7475: is no longer used
7476:
7477: 2002-05-03 18:48 millert
7478:
7479: * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7480: timestamp dirs. This allows the timestamp dir to be shared via
7481: NFS (though this is not recommended).
7482:
7483: 2002-05-03 18:47 millert
7484:
7485: * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7486: of the authentication timestamp dir"
7487:
7488: 2002-05-02 15:40 millert
7489:
7490: * env.c: Don't try to pre-compute the size of the new envp, just
7491: allocate space up front and realloc as needed. Changes to the
7492: new env pointer must all be made through insert_env() which now
7493: keeps track of spaced used and allocates as needed.
7494:
7495: 2002-04-26 15:12 millert
7496:
7497: * configure: regen
7498:
7499: 2002-04-26 15:12 millert
7500:
7501: * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7502:
7503: 2002-04-25 11:36 millert
7504:
7505: * INSTALL.binary, README: ++version
7506:
7507: 2002-04-25 11:35 millert
7508:
7509: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7510: visudo.man.in, configure: regen
7511:
7512: 2002-04-25 11:31 millert
7513:
7514: * CHANGES, RUNSON, TODO: Sync with 1.6.6
7515:
7516: 2002-04-25 11:30 millert
7517:
7518: * check.c: The the loop used to expand %h and %u, the lastchar
7519: variable was not being initialized. This means that if the last
7520: char in the prompt is '%' and the first char is 'h' or 'u' a
7521: extra copy of the host or user name would be copied, for which
7522: space had not been allocated.
7523:
7524: 2002-04-18 11:41 millert
7525:
7526: * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7527: version to 1.6.6
7528:
7529: 2002-04-18 11:39 millert
7530:
7531: * auth/afs.c: #undef VOID to get rid of an AFS warning
7532:
7533: 2002-04-18 11:38 millert
7534:
7535: * env.c: Use easprintf instead of emalloc + sprintf for some
7536: things.
7537:
7538: 2002-03-15 19:45 millert
7539:
7540: * lex.yy.c: regen
7541:
7542: 2002-03-15 19:44 millert
7543:
7544: * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7545: Jepeway's email address so people don't bug him ;-)
7546:
7547: 2002-03-11 22:19 millert
7548:
7549: * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7550: and also call endgrent() at the same time.
7551:
7552: 2002-02-21 22:23 millert
7553:
7554: * INSTALL: Make it clear which configure options take arguments.
7555:
7556: 2002-01-25 13:38 millert
7557:
7558: * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7559: is no RLIM_INFINITY, just pretend it is -1. This works because
7560: we only check for RLIM_INFINITY and do not set anything to that
7561: value.
7562:
7563: 2002-01-22 11:43 millert
7564:
7565: * auth/pam.c: Zero and free allocated memory when there is a
7566: conversation error.
7567:
7568: 2002-01-21 22:37 millert
7569:
7570: * auth/bsdauth.c: Use sigaction() not signal()
7571:
7572: 2002-01-21 22:26 millert
7573:
7574: * INSTALL: Mention that some linux kernels have broken POSIX saved
7575: ID support
7576:
7577: 2002-01-21 21:03 millert
7578:
7579: * CHANGES: checkpoint for 1.6.5p2
7580:
7581: 2002-01-21 21:01 millert
7582:
7583: * configure: regen
7584:
7585: 2002-01-21 21:01 millert
7586:
7587: * configure.in: Add --disable-setreuid flag
7588:
7589: 2002-01-21 21:00 millert
7590:
7591: * INSTALL: Document new --disable-setreuid option and change
7592: description for --disable-saved-ids to match new error message.
7593:
7594: 2002-01-21 21:00 millert
7595:
7596: * set_perms.c: fatal() now takes an argument that determines
7597: whether or not to call perror().
7598:
7599: 2002-01-21 20:58 millert
7600:
7601: * PORTING, TROUBLESHOOTING: Update for new error messages from
7602: set_perms()
7603:
7604: 2002-01-21 17:46 millert
7605:
7606: * auth/pam.c: Make this compile w/o warnings
7607:
7608: 2002-01-21 17:36 millert
7609:
7610: * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7611:
7612: 2002-01-21 17:25 millert
7613:
7614: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7615: was not zeroed after use when AIX authentication, BSD
7616: authentication, FWTK or PAM was in use.
7617:
7618: 2002-01-20 14:21 millert
7619:
7620: * auth/pam.c: Avoid giving PAM a NULL password response, use the
7621: empty string instead. This avoids a log warning when the user
7622: hits ^C at the password prompt when PAM is in use.
7623:
7624: 2002-01-19 19:46 millert
7625:
7626: * auth/pam.c: Don't check the return value of pam_setcred(). In
7627: Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7628: not the return code for the setcred module. Because we haven't
7629: called pam_authenticate(), this is not set and so pam_setcred()
7630: returns PAM_PERM_DENIED.
7631:
7632: 2002-01-19 19:43 millert
7633:
7634: * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7635: and a directory.
7636:
7637: 2002-01-18 14:18 millert
7638:
7639: * configure: regen
7640:
7641: 2002-01-18 14:18 millert
7642:
7643: * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7644: has a bogus setreuid() o new NetBSD has a real setreuid() o add
7645: check for freeifaddrs() if getifaddrs() exists.
7646:
7647: 2002-01-18 14:17 millert
7648:
7649: * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7650: so add a test for that and if it is not present just use free().
7651:
7652: 2002-01-17 11:30 millert
7653:
7654: * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7655:
7656: 2002-01-17 10:56 millert
7657:
7658: * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7659: skeyaccess() denies access to normal passwords, not AUTH_FATAL
7660: (which just causes an exit).
7661:
7662: 2002-01-17 10:35 millert
7663:
7664: * visudo.c: Don't use memory after it has been freed.
7665:
7666: 2002-01-17 00:24 millert
7667:
7668: * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7669: Patch from Phillip E. Lobbes
7670:
7671: 2002-01-16 20:00 millert
7672:
7673: * BUGS: ++version
7674:
7675: 2002-01-16 19:53 millert
7676:
7677: * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7678:
7679: 2002-01-16 18:37 millert
7680:
7681: * configure: regen
7682:
7683: 2002-01-16 18:37 millert
7684:
7685: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7686: version 1.6.5
7687:
7688: 2002-01-16 18:37 millert
7689:
7690: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7691: visudo.man.in: sudo version 1.6.5
7692:
7693: 2002-01-16 16:28 millert
7694:
7695: * logging.c: o when invoking the mailer as root use a hard-coded
7696: environment that doesn't include any info from the user's
7697: environment. Basically paranoia.
7698:
7699: o Add support for the NO_ROOT_MAILER compile-time option and run
7700: the mailer as the user and not root if NO_ROOT_MAILER is
7701: defined.
7702:
7703: 2002-01-16 16:27 millert
7704:
7705: * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7706:
7707: 2002-01-16 16:26 millert
7708:
7709: * configure: regen
7710:
7711: 2002-01-16 16:26 millert
7712:
7713: * version.h: version 1.6.5
7714:
7715: 2002-01-16 16:26 millert
7716:
7717: * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7718: option to run the mailer as the user and not root.
7719:
7720: 2002-01-16 12:44 millert
7721:
7722: * CHANGES: checkpoint for 1.6.4p2
7723:
7724: 2002-01-15 19:22 millert
7725:
7726: * PORTING: Mention the "seteuid(0): Operation not permitted"
7727: problem here too just for good measure.
7728:
7729: 2002-01-15 18:43 millert
7730:
7731: * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7732: preserved from the user's environment instead of being reset
7733: based on the passwd database when the "env_reset" option was
7734: used. Now it is reset as it should be.
7735:
7736: 2002-01-15 17:47 millert
7737:
7738: * configure: regen
7739:
7740: 2002-01-15 17:47 millert
7741:
7742: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
7743: sudo.c: Add a configure option to turn off use of POSIX saved IDs
7744:
7745: 2002-01-15 15:48 millert
7746:
7747: * configure: regen
7748:
7749: 2002-01-15 15:48 millert
7750:
7751: * configure.in: add --with-efence option
7752:
7753: 2002-01-15 15:39 millert
7754:
7755: * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
7756: problem where "sudo -l" would not work if always_set_home was
7757: set.
7758:
7759: 2002-01-15 13:16 millert
7760:
7761: * lex.yy.c: regen
7762:
7763: 2002-01-15 13:16 millert
7764:
7765: * parse.lex: Quoted commas were not being treated correctly in
7766: command line arguments.
7767:
7768: 2002-01-14 20:53 millert
7769:
7770: * sudo.c: o Move the call to rebuild_env() until after
7771: MODE_RESET_HOME is set. Otherwise, the set_home option has no
7772: effect.
7773:
7774: o Fix use of freed memory when the "fqdn" flag is set. This was
7775: introduced by the fix for the "segv when gethostbynam() fails"
7776: bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
7777: not set so there is no need to check the "fqdn" flag in
7778: set_fqdn() itself.
7779:
7780: 2002-01-14 20:45 millert
7781:
7782: * env.c: Add 'continue' statements to optimize the switch
7783: statement. From Solar.
7784:
7785: 2002-01-13 13:42 millert
7786:
7787: * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
7788:
7789: 2002-01-13 13:36 millert
7790:
7791: * sudoers.pod: Add caveat about stay_setuid flag
7792:
7793: 2002-01-13 13:29 millert
7794:
7795: * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
7796: is not set, set all uids to 0 and use set_perms_fallback().
7797:
7798: 2002-01-13 13:28 millert
7799:
7800: * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
7801: used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
7802:
7803: 2002-01-13 13:27 millert
7804:
7805: * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
7806: mailer since we never want to run the mailer setuid.
7807:
7808: 2002-01-12 17:55 millert
7809:
7810: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
7811: visudo.pod: Use sudo.ws instead of courtesan.com in URLs
7812:
7813: 2002-01-12 14:00 millert
7814:
7815: * Makefile.in, Makefile.binary: Fix mansect substitution
7816:
7817: 2002-01-12 13:15 millert
7818:
7819: * Makefile.in: Substitute man sections in Makefile.binary
7820:
7821: 2002-01-12 13:15 millert
7822:
7823: * Makefile.binary: Sync install targets with Makefile.in and
7824: substitute in man sections.
7825:
7826: 2002-01-12 13:09 millert
7827:
7828: * INSTALL, INSTALL.binary: version is 1.6.4
7829:
7830: 2002-01-12 12:59 millert
7831:
7832: * Makefile.in: Repair bindist target
7833:
7834: 2002-01-12 11:43 millert
7835:
7836: * CHANGES: sync for 1.6.4
7837:
7838: 2002-01-10 13:00 millert
7839:
7840: * install-sh: Fix case where neither whoami nor id are found
7841:
7842: 2002-01-09 12:35 millert
7843:
7844: * install-sh: If neither whoami nor id exists, just assume we are
7845: root.
7846:
7847: 2002-01-09 11:56 millert
7848:
7849: * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
7850: to be needed on AIX which for some reason isn't pulling in the
7851: malloc prototype.
7852:
7853: 2002-01-08 10:00 millert
7854:
7855: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
7856:
7857: 2002-01-08 09:21 millert
7858:
7859: * CHANGES: checkpoint
7860:
7861: 2002-01-08 09:20 millert
7862:
7863: * sudo.c: Defer assigning new environment until right before the
7864: exec.
7865:
7866: 2002-01-08 09:08 millert
7867:
7868: * parse.c: kill extra blank line
7869:
7870: 2002-01-07 13:59 millert
7871:
7872: * configure: regen
7873:
7874: 2002-01-07 13:59 millert
7875:
7876: * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
7877: motorola gcc-derived compiler doesn't recognise -O2.
7878:
7879: 2002-01-06 23:02 millert
7880:
7881: * HISTORY: Clarify origins of Root Group sudo a bit based on info
7882: from billp@rootgroup.com
7883:
7884: 2002-01-02 22:41 millert
7885:
7886: * LICENSE: 2002
7887:
7888: 2002-01-02 22:26 millert
7889:
7890: * CHANGES: checkpoint for 1.6.4rc1
7891:
7892: 2002-01-02 17:40 millert
7893:
7894: * config.h.in: now generated via autoheader
7895:
7896: 2002-01-02 17:40 millert
7897:
7898: * configure: regen
7899:
7900: 2002-01-02 17:37 millert
7901:
7902: * compat.h: Move in some stuff that was previously in config.h.
7903:
7904: 2002-01-02 17:36 millert
7905:
7906: * configure.in, aclocal.m4: Add info for autoheader.
7907:
7908: 2002-01-01 16:53 millert
7909:
7910: * Makefile.in: o Add DESTDIR support
7911: o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
7912: non-root installs
7913:
7914: 2002-01-01 16:48 millert
7915:
7916: * install-sh: Add -M option (like -m but only for root) If we can't
7917: find "whoami", use "id" w/ some sed.
7918:
7919: 2002-01-01 14:01 millert
7920:
7921: * configure: regen
7922:
7923: 2002-01-01 14:00 millert
7924:
7925: * configure.in: allow user to always override mansectsu and
7926: mansectform
7927:
7928: 2001-12-31 17:05 millert
7929:
7930: * mkinstalldirs: update from autoconf 2.52
7931:
7932: 2001-12-31 17:03 millert
7933:
7934: * config.guess, config.sub: Update from autoconf 2.52
7935:
7936: 2001-12-31 16:57 millert
7937:
7938: * configure: regen with autoconf 2.52
7939:
7940: 2001-12-31 16:57 millert
7941:
7942: * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
7943: compiler in ANSI mode
7944: o Remove compiler-specific checks for HP-UX now that we use
7945: AC_PROG_CC_STDC
7946:
7947: 2001-12-31 12:19 millert
7948:
7949: * RUNSON: Checkpoint
7950:
7951: 2001-12-31 12:18 millert
7952:
7953: * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
7954: for the target user; on Linux this often sets resource limits.
7955: o When calling pam_end(), try to convert the auth->result to a
7956: PAM_FOO value. This is a hack--we really need to stash the
7957: last PAM_FOO value received and use that instead.
7958:
7959: 2001-12-31 12:18 millert
7960:
7961: * set_perms.c, sudo.h: o Add pam_prep_user function to call
7962: pam_setcred() for the target user; on Linux this often sets
7963: resource limits.
7964:
7965: 2001-12-31 00:53 millert
7966:
7967: * env.c: Fix off by one error in number of bytes allocated via
7968: malloc (does not affected any released version of sudo).
7969:
7970: 2001-12-30 17:12 millert
7971:
7972: * lex.yy.c: regen
7973:
7974: 2001-12-30 17:12 millert
7975:
7976: * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
7977: variable w/o requiring that they be quoted.
7978:
7979: 2001-12-30 14:26 millert
7980:
7981: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
7982: quotes are needed when adding/deleting/assigning a single value
7983: to a list.
7984:
7985: 2001-12-30 13:58 millert
7986:
7987: * Makefile.in: Don't rely on mkdefaults being executable, call perl
7988: explicitly.
7989:
7990: 2001-12-30 13:41 millert
7991:
7992: * parse.yacc: Remove some XXX that are no longer relevant.
7993:
7994: 2001-12-30 13:40 millert
7995:
7996: * defaults.c: o Roll our own loop instead of using strpbrk() for
7997: better grokability o When adding to a list we must malloc() and
7998: use memcpy(), not strdup() since we must only copy len bytes
7999: from str.
8000:
8001: 2001-12-21 16:49 millert
8002:
8003: * parse.yacc: typo in comment
8004:
8005: 2001-12-19 11:50 millert
8006:
8007: * CHANGES: checkpoint
8008:
8009: 2001-12-19 10:56 millert
8010:
8011: * configure: regen
8012:
8013: 2001-12-19 10:56 millert
8014:
8015: * configure.in: avoid the -g flag unless --with-devel was specified
8016:
8017: 2001-12-19 10:04 millert
8018:
8019: * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8020: from the tarball
8021:
8022: 2001-12-19 09:46 millert
8023:
8024: * Makefile.in: def_data.c was missing
8025:
8026: 2001-12-18 12:42 millert
8027:
8028: * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8029: case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8030: in keep_env
8031:
8032: 2001-12-17 20:48 millert
8033:
8034: * TODO: Another TODO item
8035:
8036: 2001-12-17 19:50 millert
8037:
8038: * sudoers: Add comment for Default section so folks know where it
8039: should go.
8040:
8041: 2001-12-17 18:56 millert
8042:
8043: * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8044: case
8045:
8046: 2001-12-17 18:35 millert
8047:
8048: * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8049:
8050: 2001-12-17 18:33 millert
8051:
8052: * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8053: o a User_List can not contain a uid
8054: o mention that the Defaults section should come after Alias
8055: definitions but before the user specifications
8056:
8057: 2001-12-15 11:51 millert
8058:
8059: * sudoers.cat, sudoers.man.in: regen
8060:
8061: 2001-12-15 11:51 millert
8062:
8063: * sudoers.pod: Fix listpw and verifypw sections, they were not
8064: being formatted properly.
8065:
8066: 2001-12-15 11:39 millert
8067:
8068: * sudoers.cat, sudoers.man.in: regen
8069:
8070: 2001-12-15 11:38 millert
8071:
8072: * sudoers.pod: fix typos
8073:
8074: 2001-12-15 10:57 millert
8075:
8076: * configure: regen
8077:
8078: 2001-12-15 10:57 millert
8079:
8080: * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8081: rolling our own
8082:
8083: 2001-12-15 10:33 millert
8084:
8085: * README: Reference sudo.ws not courtesan.com
8086:
8087: 2001-12-15 10:29 millert
8088:
8089: * PORTING: Add notes on shadow passwords
8090:
8091: 2001-12-15 00:48 millert
8092:
8093: * BUGS: In list mode (sudo -l), characters escaped with a backslash
8094: are shown verbatim with the backslash.
8095:
8096: 2001-12-15 00:44 millert
8097:
8098: * sudoers: Add simple examples from OpenBSD (Marc Espie)
8099:
8100: 2001-12-15 00:40 millert
8101:
8102: * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8103: SIGTSTP.
8104:
8105: 2001-12-14 21:53 millert
8106:
8107: * CHANGES: minor prettyification
8108:
8109: 2001-12-14 21:43 millert
8110:
8111: * CHANGES: Updated change log
8112:
8113: 2001-12-14 21:27 millert
8114:
8115: * testsudoers.c: Fix CIDR handling here too.
8116:
8117: 2001-12-14 21:21 millert
8118:
8119: * auth/pam.c: Apparently a NULL response is OK
8120:
8121: 2001-12-14 21:19 millert
8122:
8123: * TODO: Checkpoint for upcoming beta release
8124:
8125: 2001-12-14 21:17 millert
8126:
8127: * TROUBLESHOOTING: Many people believe that adding a runas spec
8128: should obviate the need for the -u flag. It does not.
8129:
8130: 2001-12-14 21:11 millert
8131:
8132: * RUNSON: checkpoint update for upcoming 1.6.4 beta
8133:
8134: 2001-12-14 20:44 millert
8135:
8136: * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8137: HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8138: now
8139:
8140: 2001-12-14 20:07 millert
8141:
8142: * PORTING: Add signals section
8143:
8144: 2001-12-14 20:00 millert
8145:
8146: * configure: regen
8147:
8148: 2001-12-14 20:00 millert
8149:
8150: * configure.in: Fix check for sigaction_t
8151:
8152: 2001-12-14 19:45 millert
8153:
8154: * sudo.c: XXX - should call find_path() as runas user, not root.
8155: Can't do that until the parser changes though.
8156:
8157: 2001-12-14 19:38 millert
8158:
8159: * sudo.c: If find_path() fails as root, try again as the invoking
8160: user (useful for NFS). Idea from Chip Capelik.
8161:
8162: 2001-12-14 19:28 millert
8163:
8164: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8165: after pod file changes
8166:
8167: 2001-12-14 19:24 millert
8168:
8169: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8170: sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8171: Previously sudo would not call initgroups() if the target user
8172: was root. Now it always calls initgroups() unless the -P command
8173: line option or the "preserve_groups" sudoers option is set. Idea
8174: from TJ Saunders.
8175:
8176: 2001-12-14 18:38 millert
8177:
8178: * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8179:
8180: 2001-12-14 18:33 millert
8181:
8182: * logging.c: Fix compilation on K&C
8183:
8184: 2001-12-14 18:14 millert
8185:
8186: * configure: regen
8187:
8188: 2001-12-14 18:14 millert
8189:
8190: * configure.in: Add check for sigaction_t -- IRIX already defines
8191: this so don't redefine it.
8192:
8193: 2001-12-14 17:15 millert
8194:
8195: * snprintf.c: fix typo
8196:
8197: 2001-12-14 17:12 millert
8198:
8199: * interfaces.c: need stdlib.h here too
8200:
8201: 2001-12-14 15:31 millert
8202:
8203: * configure: regen
8204:
8205: 2001-12-14 15:31 millert
8206:
8207: * configure.in: Remove redundant checks for string.h, strings.h and
8208: unistd.h
8209:
8210: 2001-12-14 15:29 millert
8211:
8212: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8213: visudo.man.in: Regen from pod files
8214:
8215: 2001-12-14 15:03 millert
8216:
8217: * BUGS: Update for 1.6.4
8218:
8219: 2001-12-14 14:59 millert
8220:
8221: * configure, lex.yy.c: regen
8222:
8223: 2001-12-14 14:56 millert
8224:
8225: * strerror.c: Return EINVAL if errnum > sys_nerr
8226:
8227: 2001-12-14 14:54 millert
8228:
8229: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8230: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8231: sudo.pod, auth/sudo_auth.h: o Update copyright year
8232:
8233: 2001-12-14 14:54 millert
8234:
8235: * configure.in: o Don't define STDC_HEADERS unconditionally for
8236: IRIX o Update copyright year
8237:
8238: 2001-12-14 14:53 millert
8239:
8240: * README: update version
8241:
8242: 2001-12-14 14:52 millert
8243:
8244: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8245: fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8246: logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8247: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8248: utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8249: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8250: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8251: auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8252: STDC_HEADERS define properly o Update copyright year
8253:
8254: 2001-12-14 01:53 millert
8255:
8256: * configure: regen
8257:
8258: 2001-12-14 01:53 millert
8259:
8260: * tgetpass.c: flags set in signal handlers should be volatile
8261: sig_atomic_t
8262:
8263: 2001-12-14 01:52 millert
8264:
8265: * config.h.in, configure.in: Add checks for volatile and
8266: sig_atomic_t
8267:
8268: 2001-12-14 01:42 millert
8269:
8270: * lex.yy.c, configure: regen
8271:
8272: 2001-12-14 01:40 millert
8273:
8274: * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8275: find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8276: option since it cannot work with the existing parser.
8277:
8278: 2001-12-14 01:26 millert
8279:
8280: * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8281:
8282: 2001-12-14 01:24 millert
8283:
8284: * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8285: not listed in env_keep o If no PATH is in the environment use a
8286: default value o If TERM is not set in the non-reset case also
8287: give it a default value.
8288:
8289: 2001-12-14 01:17 millert
8290:
8291: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8292: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8293: on systems that define in paths.h
8294:
8295: 2001-12-14 01:15 millert
8296:
8297: * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8298: skeyaccess(3) if it is present in libskey.
8299:
8300: 2001-12-12 21:42 millert
8301:
8302: * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8303:
8304: 2001-12-12 21:24 millert
8305:
8306: * parse.lex: '\\' is a perfectly legal character to have in a
8307: command line argument.
8308:
8309: 2001-12-12 20:24 millert
8310:
8311: * sudo.c: o Defer call to set_fqdn() until it is safe to use
8312: log_error() o Don't print errno string value if gethostbyname
8313: fails, it is not relevant
8314:
8315: 2001-12-12 20:07 millert
8316:
8317: * parse.c: Fix CIDR -> in_addr_t conversion.
8318:
8319: 2001-12-12 16:21 millert
8320:
8321: * sudoers.pod: Remove an extra "User_List" in the User_Spec
8322: definition From ybertrand AT snoopymail.com
8323:
8324: 2001-12-12 16:00 millert
8325:
8326: * parse.c: Make 'listpw=never' work for users who are not
8327: explicitly mentioned in sudoers.
8328:
8329: 2001-12-12 15:40 millert
8330:
8331: * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8332:
8333: 2001-12-12 15:34 millert
8334:
8335: * sudoers.pod: Document new list Defaults type and convert env_keep
8336: and env_delete to lists. Document new env_check option.
8337:
8338: 2001-12-12 15:11 millert
8339:
8340: * lex.yy.c, sudo.tab.h: regen parser
8341:
8342: 2001-12-12 14:56 millert
8343:
8344: * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8345: a Runas spec to #[0-9-]+.
8346:
8347: 2001-12-12 14:55 millert
8348:
8349: * configure: regen
8350:
8351: 2001-12-12 14:55 millert
8352:
8353: * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8354:
8355: 2001-12-12 14:43 millert
8356:
8357: * config.h.in, configure.in: Add check for skeyaccess(3)
8358:
8359: 2001-12-11 19:47 millert
8360:
8361: * visudo.pod: Document new -c, -f, and -q options
8362:
8363: 2001-12-11 19:41 millert
8364:
8365: * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8366: use getopt(3)
8367:
8368: 2001-12-11 19:31 millert
8369:
8370: * configure: regen
8371:
8372: 2001-12-11 19:31 millert
8373:
8374: * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8375: a replacement macro if it doesn't exist.
8376:
8377: 2001-12-11 18:22 millert
8378:
8379: * visudo.c: In check-only mode, don't create sudoers if it does not
8380: already exist.
8381:
8382: 2001-12-11 18:06 millert
8383:
8384: * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8385: variable name
8386: o Add support for "+=" and "-=" list operators
8387: o replace some 1 and 0 with TRUE and FALSE for greater
8388: legibility.
8389:
8390: 2001-12-11 18:05 millert
8391:
8392: * parse.lex: o Use exclusive start conditions to remove some
8393: ambiguity in the
8394: lexer. Also reorder some things for clarity.
8395: o Add support for "+=" and "-=" list operators.
8396: o Use the new DEFVAR token to denote a Defaults variable name.
8397:
8398: 2001-12-11 18:03 millert
8399:
8400: * sudo.h: Prototype init_envtables()
8401:
8402: 2001-12-11 18:02 millert
8403:
8404: * env.c: o Convert environment handling to use lists instead of
8405: strings.
8406: This greatly simplifies routines that need to do "foreach"
8407: type
8408: operations.
8409: o Add new init_envtables() function to set env_check and
8410: env_delete
8411: defaults based on initial_badenv_table and
8412: initial_checkenv_table
8413: (formerly sudo_badenv_table).
8414:
8415: 2001-12-11 18:00 millert
8416:
8417: * defaults.c, defaults.h: o Add a new LIST type and functions to
8418: manipulate it.
8419: o This is for use with environment handling variables.
8420: o Call new init_envtables() routine inside init_defaults() to
8421: initialize the environment lists.
8422:
8423: 2001-12-11 17:57 millert
8424:
8425: * def_data.c, def_data.h, def_data.in: Convert environment options
8426: to use the new LIST type and add a new one, env_check that only
8427: deletes if the sanity check fails.
8428:
8429: 2001-12-11 17:55 millert
8430:
8431: * testsudoers.c: Add dummy version of init_envtables()
8432:
8433: 2001-12-11 17:53 millert
8434:
8435: * parse.yacc: honor quiet mode
8436:
8437: 2001-12-11 17:51 millert
8438:
8439: * visudo.c: Add check-only mode
8440:
8441: 2001-12-10 20:27 millert
8442:
8443: * mkdefaults: Fix generation of entries with NULL descriptions.
8444:
8445: 2001-12-09 00:27 millert
8446:
8447: * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8448:
8449: 2001-12-09 00:20 millert
8450:
8451: * sudo.c: Must reset signal handlers before we exec
8452:
8453: 2001-12-09 00:16 millert
8454:
8455: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8456: carefule now that tgetpass() can return NULL (user hit ^C). PAM
8457: version needs testing. Set SIGTSTP to SIG_DFL during password
8458: entry so user can suspend us.
8459:
8460: 2001-12-09 00:14 millert
8461:
8462: * tgetpass.c: Add support for interrupting/suspending tgetpass via
8463: keyboard input. If you suspend sudo from the password prompt and
8464: resume it will re-prompt you.
8465:
8466: 2001-12-09 00:09 millert
8467:
8468: * sudo.c: Don't block keyboard interrupt signals, just set them to
8469: SIG_IGN.
8470:
8471: 2001-12-08 14:48 millert
8472:
8473: * config.h.in: add back HAVE_SIGACTION
8474:
8475: 2001-12-08 14:44 millert
8476:
8477: * configure: regen
8478:
8479: 2001-12-08 14:44 millert
8480:
8481: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8482: POSIX_SIGNALS define and old signal support now that we emulate
8483: POSIX ones Also be sure to correctly initialize struct sigaction.
8484:
8485: 2001-12-08 14:42 millert
8486:
8487: * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8488: wrapper.
8489:
8490: 2001-12-08 14:39 millert
8491:
8492: * compat.h: Add scaffolding for POSIX signal emulation
8493:
8494: 2001-12-08 14:36 millert
8495:
8496: * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8497: since we don't include stdio.h
8498:
8499: 2001-12-08 14:23 millert
8500:
8501: * sigaction.c: Emulate sigaction() using sigvec()
8502:
8503: 2001-11-12 19:32 millert
8504:
8505: * sudoers.pod: Document new behavior of negative values of
8506: timestamp_timeout Fix a typo
8507:
8508: 2001-11-12 19:31 millert
8509:
8510: * sudo.pod: Add security note about command not being logged after
8511: 'sudo su' and friends.
8512:
8513: 2001-11-12 19:19 millert
8514:
8515: * sudo.pod: Mention that -V prints default values when run as root,
8516: including the list of environment variables to clear.
8517:
8518: 2001-11-12 19:14 millert
8519:
8520: * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8521: quoting of C<> entries.
8522:
8523: 2001-11-12 13:12 millert
8524:
8525: * def_data.c, def_data.h, def_data.in, sudoers.pod,
8526: auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8527: behavior to also send mail when the password is wrong
8528:
8529: 2001-11-12 13:08 millert
8530:
8531: * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8532: is run by root.
8533:
8534: 2001-11-11 23:52 millert
8535:
8536: * sudoers.pod: document env_delete
8537:
8538: 2001-11-11 23:51 millert
8539:
8540: * env.c: Add support for '*' in env_keep when not resetting the
8541: environment (ie: the normal case).
8542:
8543: 2001-11-11 23:47 millert
8544:
8545: * env.c: Add env_delete variable that lets the user replace/add to
8546: the bad_env_table. Allow '*' wildcard in env_keep entries.
8547:
8548: 2001-11-06 13:59 millert
8549:
8550: * mkinstalldirs: Force umask to 022 to guarantee sane directory
8551: permissions.
8552:
8553: 2001-11-02 18:09 millert
8554:
8555: * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8556: dependency
8557:
8558: 2001-11-02 17:25 millert
8559:
8560: * mkdefaults: fix breakage in last commit
8561:
8562: 2001-11-02 17:18 millert
8563:
8564: * Makefile.in: acsite.m4 -> aclocal.m4
8565:
8566: 2001-11-02 15:59 millert
8567:
8568: * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8569: previous commit
8570:
8571: 2001-11-02 15:57 millert
8572:
8573: * def_data.c: regenerated from def_data.in
8574:
8575: 2001-11-02 15:56 millert
8576:
8577: * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8578: things use instead of T_INT If timestamp_timeout is < 0 then
8579: treat the ticket as never expiring (to be expired manually by the
8580: user).
8581:
8582: 2001-11-02 15:51 millert
8583:
8584: * def_data.in: change most T_INT -> T_UINT
8585:
8586: 2001-11-02 15:51 millert
8587:
8588: * mkdefaults: fix warning when no args
8589:
8590: 2001-11-02 12:52 millert
8591:
8592: * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8593: call _exit() if we are a signal handler. We no longer print the
8594: signal number but the user can just check the exit value for
8595: that.
8596:
8597: 2001-10-16 01:35 millert
8598:
8599: * logging.c: when setting up pipes in child process check for case
8600: where stdin == pipe fd 0
8601:
8602: 2001-10-11 13:20 millert
8603:
8604: * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8605: value is the count of editing errors made (failed searches, etc).
8606:
8607: 2001-10-05 16:39 millert
8608:
8609: * configure: regen
8610:
8611: 2001-10-05 16:39 millert
8612:
8613: * configure.in: sco now is identified by config.guess as *-sco-*
8614:
8615: 2001-10-05 16:24 millert
8616:
8617: * configure.in: Check for getspnam() in -lgen if not in -lc for
8618: UnixWare.
8619:
8620: 2001-09-17 21:48 millert
8621:
8622: * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8623:
8624: 2001-09-17 21:32 millert
8625:
8626: * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8627:
8628: 2001-08-28 10:26 millert
8629:
8630: * sudoers.pod: Missing word (specify); krapht@secureops.com
8631:
8632: 2001-08-23 17:43 millert
8633:
8634: * sudo.c: If we fail to lookup a login class, apply the default
8635: one.
8636:
8637: 2001-08-23 17:42 millert
8638:
8639: * logging.c: In log_error() free message, not logline
8640: unconditionally, then free logline if it is not the same as
8641: message. No function change but this mirrors how they are
8642: allocated.
8643:
8644: 2001-07-16 23:33 millert
8645:
8646: * configure: regenerate
8647:
8648: 2001-07-16 23:33 millert
8649:
8650: * configure.in: remove some backslash quotes that are unneeded
8651:
8652: 2001-07-16 23:30 millert
8653:
8654: * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8655: AC_LIBOBJ instead of changing LIBOBJS directly o Use
8656: AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8657: AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8658:
8659: 2001-07-16 23:28 millert
8660:
8661: * config.guess, config.sub: Updated from autoconf-2.50
8662:
8663: 2001-05-22 19:11 millert
8664:
8665: * README: Update mailing list section. We use mailman now, not
8666: majordomo.
8667:
8668: 2001-05-10 14:55 millert
8669:
8670: * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8671: the shadow variants to make sure we don't inadvertantly leak an
8672: fd to the child. Apparently Linux's shadow routines leave the fd
8673: open even if you don't call setspent(). Reported by
8674: mike@gistnet.com; different patch used.
8675:
8676: 2001-04-12 21:43 millert
8677:
8678: * sudoers.pod: s/eg./e.g./
8679:
8680: 2001-04-12 21:42 millert
8681:
8682: * tgetpass.c: select() may return EAGAIN. If so, continue like we
8683: do for EINTR.
8684:
8685: 2001-04-12 21:41 millert
8686:
8687: * logging.c: Fix a non-exploitable buffer overflow in the word
8688: splitting code. This should really be rewritten.
8689:
8690: 2001-04-12 21:41 millert
8691:
8692: * Makefile.in: FAQ link goes away
8693:
8694: 2001-04-12 21:40 millert
8695:
8696: * INSTALL: Tell people to look in sample.syslog.conf for examples,
8697: not FAQ
8698:
8699: 2001-04-12 21:40 millert
8700:
8701: * TROUBLESHOOTING: Update list of env vars that are cleared
8702:
8703: 2001-04-12 21:36 millert
8704:
8705: * sudo.c: remove struct env_table decl since that stuff has all
8706: moved to env.c
8707:
8708: 2001-04-04 13:17 millert
8709:
8710: * fileops.c: Fix a pasto in flock-style unlocking and include
8711: <sys/file.h> for flock on older systems; twetzel@gwdg.de
8712:
8713: 2001-04-04 13:14 millert
8714:
8715: * configure: regen to get NeXT lockf/flock fix
8716:
8717: 2001-04-04 13:14 millert
8718:
8719: * configure.in: force NeXT to use flock since lockf is broken
8720:
8721: 2001-03-30 08:54 millert
8722:
8723: * check.c: Use stashed user_gid when checking against exempt gid
8724: since sudo sets its gid to a a value that makes sudoers readable.
8725: Previously if you used gid 0 as the exempt group everyone would
8726: be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8727:
8728: 2001-03-29 13:14 millert
8729:
8730: * configure: regen
8731:
8732: 2001-03-29 13:08 millert
8733:
8734: * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8735: aparently defines some types (such as ssize_t) therein.
8736:
8737: 2001-03-02 09:09 millert
8738:
8739: * defaults.c: Fix negation of paths in a boolean context. Problem
8740: found by apt@UH.EDU
8741:
8742: 2001-02-23 13:03 millert
8743:
8744: * visudo.c: pasto
8745:
8746: 2001-02-17 16:11 millert
8747:
8748: * visudo.c: SA_RESETHAND means the opposite of what I was
8749: thinking--oops To block all signals in old-style signals use ~0,
8750: not 0xffffffff
8751:
8752: 2001-02-04 11:16 millert
8753:
8754: * defaults.c: coerce difference of pointers to int when used in a
8755: string length printf format; deraadt@openbsd.org
8756:
8757: 2001-01-17 11:34 millert
8758:
8759: * visudo.c: Block all signals in Exit() to avoid a signal race.
8760: There is still a tiny window but I'm not going to worry about it.
8761:
8762: 2001-01-07 13:57 millert
8763:
8764: * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
8765: Designer
8766:
8767: 2001-01-07 13:55 millert
8768:
8769: * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
8770: from clobbering by isatty().
8771:
8772: 2000-12-30 20:39 millert
8773:
8774: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
8775: Some defaults I_ defines got renamed.
8776:
8777: 2000-12-30 20:38 millert
8778:
8779: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
8780: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
8781: set_perms.c, sudo.c: Move defaults info into its own files from
8782: which we generate .h and .c files. This makes adding or
8783: rearranging variables much simpler.
8784:
8785: 2000-12-30 16:58 millert
8786:
8787: * configure, configure.in: fix typo in last commit
8788:
8789: 2000-12-30 16:55 millert
8790:
8791: * compat.h, config.h.in, configure, configure.in: Add check +
8792: emulation for setegid (like seteuid).
8793:
8794: 2000-12-30 16:22 millert
8795:
8796: * env.c: Make env_keep override badenv_table as documented Fix
8797: traversal of badenv_table (broken in last commit)
8798:
8799: 2000-12-29 22:59 millert
8800:
8801: * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
8802: version of set_perms on systems w/o them. Rename
8803: set_perms_saved_uid() -> set_perms_posix() Make
8804: set_perms_setreuid simply be set_perms_fallback() and simply
8805: include the appropriate function at compile time (setreuid()
8806: vs. setuid()).
8807:
8808: 2000-12-29 22:45 millert
8809:
8810: * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
8811: when env_reset is in effect
8812:
8813: 2000-12-29 22:29 millert
8814:
8815: * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
8816: configure, configure.in, defaults.c, defaults.h, find_path.c,
8817: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
8818: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
8819: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
8820: options: o stay_setuid - sudo will remain setuid if system has
8821: saved uids or setreuid(2) o env_reset - reset the environment to
8822: a sane default o env_keep - preserve environment variables that
8823: would otherwise be cleared
8824:
8825: No longer use getenv/putenv/setenv functions--do environment
8826: munging by hand. Potentially dangerous environment variables can
8827: be cleared only if they contain '/' pr '%' characters to protect
8828: buggy programs. Moved environment routines into env.c (new file)
8829:
8830: 2000-12-29 22:17 millert
8831:
8832: * INSTALL: Clear up --without-passwd description
8833:
8834: 2000-12-29 19:39 millert
8835:
8836: * sudo_setenv.c, putenv.c: We now build up a new environment from
8837: scratch and assign it to "environ".
8838:
8839: 2000-12-18 22:35 millert
8840:
8841: * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
8842:
8843: 2000-12-14 23:19 millert
8844:
8845: * visudo.c: If there was a syntax error and the user just wants to
8846: quit, unlink sudoers if it is zero length.
8847:
8848: 2000-12-14 23:10 millert
8849:
8850: * visudo.c: 'Q' means ignore parse error, not 'q'
8851:
8852: 2000-12-14 22:57 millert
8853:
8854: * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
8855: Dimitry Andric <dim@xs4all.nl>
8856:
8857: 2000-12-13 12:23 millert
8858:
8859: * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
8860: ayamura@ayamura.org
8861:
8862: 2000-12-09 11:46 millert
8863:
8864: * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
8865: Sanchez <wsanchez@apple.com>
8866:
8867: 2000-11-03 09:36 millert
8868:
8869: * sudo.c, visudo.c: Use exit(127), not exit(-1)
8870:
8871: 2000-11-03 00:37 millert
8872:
8873: * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
8874: set_perms() to its own file and use POSIX saved uid or setreuid()
8875: if available.
8876:
8877: Added stay_setuid option for systems that have libraries that
8878: perform extra paranoia checks in system libraries for setuid
8879: programs (ie: anything with issetugid(2)).
8880:
8881: 2000-11-02 20:28 millert
8882:
8883: * sudo.c: strip more bits from the environment and add a facility
8884: for stripping things only if they contain '/' or '%' to address
8885: printf format string vulnerabilities in other programs.
8886:
8887: 2000-11-02 12:55 millert
8888:
8889: * configure: regen
8890:
8891: 2000-11-02 12:55 millert
8892:
8893: * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
8894: the existence of strcasecmp().
8895:
8896: 2000-11-02 12:46 millert
8897:
8898: * configure: regen
8899:
8900: 2000-11-02 12:46 millert
8901:
8902: * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
8903:
8904: 2000-11-01 10:22 millert
8905:
8906: * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
8907:
8908: 2000-11-01 10:17 millert
8909:
8910: * configure: regen
8911:
8912: 2000-11-01 10:17 millert
8913:
8914: * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
8915: since NCR systems have that instead of innetgr(3).
8916:
8917: 2000-10-31 14:16 millert
8918:
8919: * auth/securid.c: check return value of creadcfg() call sd_close()
8920: after sd_auth() store username in sd->username so we don't rely
8921: on the USER env variable
8922:
8923: 2000-10-29 23:00 millert
8924:
8925: * INSTALL: document --with-bsdauth
8926:
8927: 2000-10-29 22:57 millert
8928:
8929: * configure: regen
8930:
8931: 2000-10-29 22:56 millert
8932:
8933: * configure.in: --with-bsdauth assumes --with-logincap
8934:
8935: 2000-10-29 22:45 millert
8936:
8937: * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
8938: challenge, if the user just hits return then reprompt with echo
8939: turned on.
8940:
8941: 2000-10-29 17:31 millert
8942:
8943: * sudo.c: Remove debugging code that should not have been
8944: committed, oops.
8945:
8946: 2000-10-29 17:31 millert
8947:
8948: * auth/bsdauth.c: Use lower-level routines and get the password
8949: ourselves. Checks for a challenge and if there is one echo is
8950: not turned off.
8951:
8952: 2000-10-29 17:30 millert
8953:
8954: * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
8955: changes
8956:
8957: 2000-10-27 18:41 millert
8958:
8959: * sudo.c: Fix a coredump in the logging functions if gethostname(2)
8960: fails by deferring the call to log_error() until things are
8961: better setup.
8962:
8963: Fix return value of set_loginclass() in non-BSD-auth case.
8964:
8965: Hard-code 'sudo' in the usage message so we can fit more options
8966: on a line
8967:
8968: 2000-10-27 18:35 millert
8969:
8970: * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
8971:
8972: 2000-10-26 13:03 millert
8973:
8974: * sudo.cat, sudo.man.in: regen
8975:
8976: 2000-10-26 13:01 millert
8977:
8978: * sudo.pod: Document -a flag
8979:
8980: 2000-10-26 12:42 millert
8981:
8982: * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
8983: sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
8984: authentication.
8985:
8986: 2000-10-19 10:09 millert
8987:
8988: * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
8989:
8990: 2000-10-12 09:49 millert
8991:
8992: * sudoers.pod: Mention negating umask
8993:
8994: 2000-10-12 01:30 millert
8995:
8996: * defaults.c: Allow user to specify umask of 0777 (same as !umask)
8997:
8998: 2000-10-08 21:46 millert
8999:
9000: * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9001: history.
9002:
9003: 2000-10-08 12:25 millert
9004:
9005: * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9006:
9007: 2000-09-14 16:48 millert
9008:
9009: * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9010: alloc failure instead of returning -1.
9011:
9012: 2000-09-07 17:41 millert
9013:
9014: * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9015: for FreeBSD and possibly others.
9016:
9017: 2000-09-07 10:43 millert
9018:
9019: * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9020: it. This means that "%m" won't be expanded but we don't use that
9021: anyway since the logging routines may splat to stderr as well.
9022:
9023: 2000-09-06 21:35 millert
9024:
9025: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9026: sudoers.pod: Add always_set_home variable
9027:
9028: 2000-09-06 21:24 millert
9029:
9030: * configure, configure.in: Have to hard code default values in help
9031: since the defaults are set _after_ the help stuff.
9032:
9033: 2000-08-31 13:08 millert
9034:
9035: * lex.yy.c, parse.lex: Allow special characters (including '#') to
9036: be embedded in pathnames if quoted by a '\\'. The quoted chars
9037: will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9038: prints the '\\'.
9039:
9040: 2000-08-13 17:10 millert
9041:
9042: * install-sh: Better path searching for programs we need.
9043:
9044: 2000-08-13 17:10 millert
9045:
9046: * TROUBLESHOOTING: Add section on "C compiler cannot create
9047: executables" errors.
9048:
9049: 2000-08-13 17:10 millert
9050:
9051: * Makefile.binary, Makefile.in, version.h: Crank version
9052:
9053: 2000-08-13 17:09 millert
9054:
9055: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9056: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9057: visudo.man.in, visudo.pod: Substitute values from configure into
9058: man pages.
9059:
9060: 2000-08-12 16:48 millert
9061:
9062: * parse.c, sudo.c: The listpw and verifypw sudoers options would
9063: not take effect because the value of the default was checked
9064: *before* sudoers was parsed. Instead of passing in the value of
9065: PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9066: the check can be deferred until after sudoers is parsed.
9067:
9068: 2000-08-11 15:41 millert
9069:
9070: * tgetpass.c: When writing prompt, no need to write the NUL as
9071: well; hag@linnaean.org
9072:
9073: 2000-06-09 12:25 millert
9074:
9075: * install-sh: When looking for chown, check in /sbin too
9076:
9077: 2000-06-04 22:57 millert
9078:
9079: * visudo.c: Remove extraneous call to init_defaults() and set
9080: runas_user to NULL betweem parses so init_defaults will reset it
9081: each time, thus avoiding a reference to free()d data.
9082:
9083: 2000-06-04 19:57 millert
9084:
9085: * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9086: using getifaddrs() to get the list of ip addr / netmask pairs.
9087: Currently IPv4-only.
9088:
9089: 2000-06-04 19:51 millert
9090:
9091: * visudo.c: Add a missing check for UserEditor == NULL Add missing
9092: '+' before line number when invoking editor to fix a syntax error
9093:
9094: 2000-05-12 16:55 millert
9095:
9096: * sudo.c: Call clean_env very early in main() for paranoia's sake.
9097: Idea from Marc Esipovich.
9098:
9099: 2000-05-10 01:11 millert
9100:
9101: * sudo.h: Update proto for evasprintf and easprintf
9102:
9103: 2000-05-10 01:10 millert
9104:
9105: * alloc.c: Make easprintf() and evasprintf() return an int.
9106:
9107: 2000-05-10 00:56 millert
9108:
9109: * check.c: If the targetpw flag is set, use target username as part
9110: of the timestamp path. If tty tickets are in effect cat the tty
9111: and the target username with a ':' as the separator.
9112:
9113: 2000-05-09 12:05 millert
9114:
9115: * auth/pam.c: Backout part of last change; setting PAM_USER to the
9116: invoking user breaks things like targetpw.
9117:
9118: 2000-05-09 11:52 millert
9119:
9120: * auth/pam.c: set tty and username via pam_set_item
9121:
9122: 2000-05-09 11:42 millert
9123:
9124: * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9125: runas, and target authentication for non-passwd file auth
9126: methods.
9127:
9128: 2000-04-22 14:15 millert
9129:
9130: * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9131: sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9132: C<-Z> for command line flags in all places. This is more
9133: consistent and works around a bug in Pod::Man.
9134:
9135: 2000-04-22 13:59 millert
9136:
9137: * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9138: 'semicolon' that should be 'colon'
9139:
9140: 2000-04-19 15:30 millert
9141:
9142: * configure, configure.in: Fix --with-badpri help line
9143:
9144: 2000-04-17 14:01 millert
9145:
9146: * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9147: openlog() and closelog() since some authentication methods (like
9148: PAM) may do their own logging via syslog. Since we don't use
9149: syslog much (usually just once per session) this doesn't really
9150: incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9151:
9152: 2000-04-15 16:32 millert
9153:
9154: * sudo.c: Fix -H flag. runas_homedir is only valid after
9155: set_perms(PERM_RUNAS, mode)
9156:
9157: 2000-04-12 18:56 millert
9158:
9159: * INSTALL: Clarify the fact that insults are not enabled just by
9160: including them in the binary.
9161:
9162: 2000-04-07 10:39 millert
9163:
9164: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9165: sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9166:
9167: 2000-04-07 10:38 millert
9168:
9169: * Makefile.in: Give date string to pod2man since its default is
9170: ugly and it ain't got no alibi.
9171:
9172: 2000-04-07 10:27 millert
9173:
9174: * Makefile.in: Do section substitution on the output of pod2man and
9175: remove hack needed for old pod2man.
9176:
9177: 2000-04-07 10:26 millert
9178:
9179: * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9180: will do the substitution later.
9181:
9182: 2000-04-02 11:44 millert
9183:
9184: * configure, configure.in: Don't bother checking for the path to vi
9185: if user specified --with-editor
9186:
9187: 2000-04-01 17:25 millert
9188:
9189: * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9190: calling system(3).
9191:
9192: 2000-04-01 16:23 millert
9193:
9194: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9195: sudoers.pod, visudo.c: Visudo now checks for the existence of an
9196: editor and gives a sensible error if it does not exist.
9197:
9198: The path to the editor for visudo is now a colon-separated list
9199: of allowable editors. If the user has $EDITOR set and it matches
9200: one of the allowed editors that editor will be used. If not, the
9201: first editor in the list that actually exists is used.
9202:
9203: 2000-04-01 16:22 millert
9204:
9205: * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9206: return value.
9207:
9208: 2000-03-27 12:08 millert
9209:
9210: * Makefile.in: Strip sudo and visudo for bindist target
9211:
9212: 2000-03-26 22:26 millert
9213:
9214: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9215: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9216: @mansectsu@ and @mansectform@ in the man page bodies as well.
9217:
9218: 2000-03-26 22:07 millert
9219:
9220: * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9221: @sysconfdir@
9222:
9223: 2000-03-26 21:57 millert
9224:
9225: * Makefile.in: 'make dist' should not cause any files to be
9226: modified so remove its dependencies.
9227:
9228: 2000-03-26 21:43 millert
9229:
9230: * CHANGES: Whoops, forgot to add release marker
9231:
9232: 2000-03-26 11:57 millert
9233:
9234: * CHANGES: Final change for 1.6.3 (or so I hope)
9235:
9236: 2000-03-26 11:57 millert
9237:
9238: * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9239: BSD systems will have nroff...
9240:
9241: 2000-03-24 18:58 millert
9242:
9243: * parse.yacc: When checking to see if the host/user matches in a
9244: defaults spec, check against TRUE, not just non-zero since it
9245: might be -1.
9246:
9247: 2000-03-24 15:14 millert
9248:
9249: * configure.in, configure: OSF/1 puts file formats in section 4,
9250: not 5.
9251:
9252: 2000-03-24 15:13 millert
9253:
9254: * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9255:
9256: 2000-03-23 20:24 millert
9257:
9258: * RUNSON: Update for 1.6.3
9259:
9260: 2000-03-23 20:23 millert
9261:
9262: * configure, configure.in: If there is no inet_addr but there *is*
9263: an __inet_addr that's ok since inet_addr is probably just a macro
9264: then. The better thing to do would be to look for the macro, but
9265: this is fine for now.
9266:
9267: 2000-03-23 19:50 millert
9268:
9269: * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9270:
9271: 2000-03-23 19:40 millert
9272:
9273: * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9274: lives in $(srcdir), add a @mansrcdir@ configure variable so we
9275: can deal with this. Also, only remove *.man for 'distclean' not
9276: 'clean'.
9277:
9278: 2000-03-23 19:16 millert
9279:
9280: * sudo.c: set_loginclass() should be static like the proto says
9281:
9282: 2000-03-23 14:14 millert
9283:
9284: * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9285: header to avoid promotion of test to int, thus violating the
9286: prototype. Gcc handles this gracefully but more std ANSI
9287: compilers will complain.
9288:
9289: 2000-03-23 10:11 millert
9290:
9291: * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9292: FNM_CASEFOLD
9293:
9294: 2000-03-23 10:11 millert
9295:
9296: * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9297: fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9298: configure
9299:
9300: 2000-03-22 23:41 millert
9301:
9302: * CHANGES, TODO: update for 1.6.3
9303:
9304: 2000-03-22 23:38 millert
9305:
9306: * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9307: testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9308: not matching the FQHOST token type. There's really no need for a
9309: separate token for fully-qualified vs. unqualified anymore so
9310: FQHOST is now history and hostname_matches now decides which
9311: hostname (short or long) to check based on whether or not the
9312: pattern contains a '.'.
9313:
9314: 2000-03-22 23:09 millert
9315:
9316: * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9317: visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9318: in the hostname.
9319:
9320: 2000-03-22 22:50 millert
9321:
9322: * Makefile.in: Add targets for *.man.in, using config.status to
9323: generate *.man from *.man.in
9324:
9325: 2000-03-22 22:20 millert
9326:
9327: * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9328: option and enbolden refs to sudo and visudo.
9329:
9330: 2000-03-22 19:35 millert
9331:
9332: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9333: sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9334: visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9335: FreeBSD login.conf support (untested on BSD/OS) based on a patch
9336: from Michael D. Marchionna. configure now does substitution on
9337: the man pages, allowing us to fix up the paths and set the
9338: section correctly. Based on an idea from Michael D. Marchionna.
9339:
9340: 2000-03-22 19:27 millert
9341:
9342: * auth/passwd.c: Better fix for handling HP-UX aging info.
9343:
9344: 2000-03-22 19:20 millert
9345:
9346: * sudo.c: Add support for set_logname run-time default
9347:
9348: 2000-03-22 19:17 millert
9349:
9350: * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9351: substitution on these to produce *.man
9352:
9353: 2000-03-22 19:16 millert
9354:
9355: * sudo.man, sudoers.man, visudo.man: These files now get generated
9356: from *.man.in at configure time.
9357:
9358: 2000-03-22 18:40 millert
9359:
9360: * defaults.c, defaults.h: Add set_logname option so users can turn
9361: off setting of LOGNAME/USER environment variables.
9362:
9363: 2000-03-22 10:53 millert
9364:
9365: * testsudoers.c, lsearch.c, parse.c: kill register
9366:
9367: 2000-03-13 15:52 millert
9368:
9369: * auth/passwd.c: HP-UX adds extra info at the end for password
9370: aging so when comparing the result of crypt to pw_passwd we only
9371: compare the first len(epass) bytes *unless* the user entered an
9372: empty string for a password.
9373:
9374: 2000-03-13 11:05 millert
9375:
9376: * logging.c: Get rid of grandchild hack, it was causing problems
9377: and there is really no need for it. This fixes a bug where we
9378: spin eating up CPU when the user runs a long-running process like
9379: a shell.
9380:
9381: 2000-03-07 14:26 millert
9382:
9383: * sudo.c: User can always specify a login class if he/she is
9384: already root.
9385:
9386: 2000-03-06 23:29 millert
9387:
9388: * config.h.in, configure, configure.in, defaults.c, defaults.h,
9389: sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9390:
9391: 2000-03-06 14:42 millert
9392:
9393: * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9394: secureware support
9395:
9396: 2000-03-03 18:04 millert
9397:
9398: * auth/passwd.c: Truncate unencrypted password to 8 chars if
9399: encrypted password is exactly 13 characters (indicateing standard
9400: a DES password). Many versions of crypt() do this for you, but
9401: not all (like HP-UX's).
9402:
9403: 2000-03-01 21:01 millert
9404:
9405: * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9406:
9407: 2000-02-29 17:46 millert
9408:
9409: * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9410: via defaults.c
9411:
9412: 2000-02-29 17:41 millert
9413:
9414: * defaults.c: Use Argv[0] as the first arg to openlog() since
9415: visudo uses this too.
9416:
9417: 2000-02-28 18:58 millert
9418:
9419: * sudo.c: Stash coredumpsize resource limit and retsore it before
9420: the exec() Otherwise the child ends up with a coredumpsize of 0.
9421:
9422: 2000-02-26 22:56 millert
9423:
9424: * sudo.cat, sudo.man, sudo.pod: document -S flag
9425:
9426: 2000-02-26 22:54 millert
9427:
9428: * sudo.c: fix usage string
9429:
9430: 2000-02-26 22:48 millert
9431:
9432: * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9433: auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9434: -S flag (read passwd from stdin) and tgetpass_flags global that
9435: holds flags to be passed in to tgetpass(). Change echo_off param
9436: to tgetpass() into a flags field. There are currently 2 possible
9437: flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9438: abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9439: but echo is not set on the terminal, but sure to set it.
9440:
9441: 2000-02-26 22:11 millert
9442:
9443: * tgetpass.c: Fixed a bug that caused an infinite loop when the
9444: password timeout was disabled.
9445:
9446: 2000-02-18 12:56 millert
9447:
9448: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9449: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9450: runaspw, and targetpw options.
9451:
9452: 2000-02-18 12:11 millert
9453:
9454: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9455: visudo.c: enveditor -> env_editor
9456:
9457: 2000-02-15 19:07 millert
9458:
9459: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9460: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9461: visudo.cat, visudo.man: crank versino to 1.6.3
9462:
9463: 2000-02-15 19:03 millert
9464:
9465: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9466: sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9467: defaults and make visudo honor them. This means that visudo will
9468: now parse the sudoers file *before* it is edited so a bogus
9469: sudoers file will cause a warning to go to stderr. Also, visudo
9470: checks the variables once--it does not check them after each
9471: editor run since that could be confusing.
9472:
9473: 2000-02-15 18:49 millert
9474:
9475: * RUNSON: 1.6.2 -> 1.6.2p1
9476:
9477: 2000-02-15 18:36 millert
9478:
9479: * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9480: sudo.h
9481:
9482: 2000-02-13 13:38 millert
9483:
9484: * configure, configure.in: Fix thinko, some && should have been ||
9485: in the last commit
9486:
9487: 2000-02-13 13:28 millert
9488:
9489: * configure, configure.in: Don't initialized Makefile variables to
9490: be NULL since the user may want to import variables from their
9491: environment.
9492:
9493: 2000-02-03 21:09 millert
9494:
9495: * configure, configure.in: typo
9496:
9497: 2000-01-27 15:01 millert
9498:
9499: * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9500: 11.0;jaearick@colby.edu
9501:
9502: 2000-01-27 15:01 millert
9503:
9504: * CHANGES: recent changes; prepare for 1.6.2p1
9505:
9506: 2000-01-26 23:31 millert
9507:
9508: * find_path.c: Don't apply SECURE_PATH if user is example;
9509: jmknoble@pobox.com
9510:
9511: 2000-01-26 16:21 millert
9512:
9513: * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9514: 'defaults' options based on INSTALL file info.
9515:
9516: 2000-01-26 16:21 millert
9517:
9518: * INSTALL: Fix some while lies
9519:
9520: 2000-01-24 10:48 millert
9521:
9522: * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9523: instead of copying.
9524:
9525: 2000-01-23 22:57 millert
9526:
9527: * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9528:
9529: 2000-01-23 22:42 millert
9530:
9531: * RUNSON: Last minute updates
9532:
9533: 2000-01-23 22:26 millert
9534:
9535: * TROUBLESHOOTING: PAM entry
9536:
9537: 2000-01-23 22:23 millert
9538:
9539: * auth/pam.c: correct a comment
9540:
9541: 2000-01-23 22:03 millert
9542:
9543: * CHANGES, RUNSON: update for 1.6.2
9544:
9545: 2000-01-23 21:59 millert
9546:
9547: * auth/pam.c: Better detection of PAM errors and fix custom prompts
9548: with PAM. Based on patches from "Cloyce D. Spradling"
9549: <cloyce@headgear.org>
9550:
9551: 2000-01-20 11:15 millert
9552:
9553: * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9554: to an unsigned long long value.
9555:
9556: 2000-01-19 14:07 millert
9557:
9558: * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9559: sudoers locking in visudo. We now lock the sudoers file itself,
9560: not the temp file (since locking the temp file can foul up
9561: editors). The previous locking scheme didn't work because the fd
9562: was closed too early.
9563:
9564: 2000-01-19 13:37 millert
9565:
9566: * configure, config.h.in, configure.in: Don't need test for
9567: ftruncate() any more.
9568:
9569: 2000-01-18 21:23 millert
9570:
9571: * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9572: cc. Fixes compilation with the unbundled HP-UX cc.
9573:
9574: 2000-01-18 17:00 millert
9575:
9576: * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9577: Campbell <aaron@cs.dal.ca>
9578:
9579: 2000-01-17 18:46 millert
9580:
9581: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9582: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9583: tgetpass.c, version.h, visudo.c: update copyright year on changed
9584: files
9585:
9586: 2000-01-17 18:45 millert
9587:
9588: * RUNSON: updates
9589:
9590: 2000-01-17 18:45 millert
9591:
9592: * CHANGES: aix fix
9593:
9594: 2000-01-17 18:42 millert
9595:
9596: * INSTALL: Crank version to 1.6.2
9597:
9598: 2000-01-17 18:11 millert
9599:
9600: * configure: Crank version to 1.6.2
9601:
9602: 2000-01-17 17:46 millert
9603:
9604: * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9605: the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9606:
9607: 2000-01-17 12:32 millert
9608:
9609: * CHANGES: recent changes
9610:
9611: 2000-01-17 12:28 millert
9612:
9613: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9614: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9615: Crank version to 1.6.2
9616:
9617: 2000-01-17 12:25 millert
9618:
9619: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9620: 'shell_noargs' runtime option back in. We have to defer checking
9621: until after the sudoers file has been parsed but since there are
9622: now other options that operate that way this one can too. Based
9623: on a patch from bguillory@email.com.
9624:
9625: 2000-01-16 23:05 millert
9626:
9627: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9628: "verifypw" options.
9629:
9630: 2000-01-16 22:57 millert
9631:
9632: * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9633: o Add section on verifypw and listpw o Define how NOPASSWD
9634: interacts with the -v and -l flags
9635:
9636: 2000-01-14 12:39 millert
9637:
9638: * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9639: HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9640:
9641: 2000-01-14 12:29 millert
9642:
9643: * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9644: to the end and don't initialize the union member since that only
9645: works with an ANSI compiler. We set the value of the union by
9646: hand in init_defaults() anyway. This allows sudo to compile on a
9647: K&R compiler again.
9648:
9649: 2000-01-11 13:20 millert
9650:
9651: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9652: netgr_matches needs to check shost as well as host since they may
9653: be different.
9654:
9655: 2000-01-11 13:17 millert
9656:
9657: * tgetpass.c: End on \r as well as \n
9658:
9659: 2000-01-02 23:53 millert
9660:
9661: * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9662: chaning from 0400 to whatever SUDOERS_MODE is (converting from
9663: the old sudoers mode). Assumes that SUDOERS_MODE is less
9664: restrictive than 0400 which should always be the case.
9665:
9666: 2000-01-02 23:43 millert
9667:
9668: * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9669: sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9670: *any* entry for the user on the host with a NOPASSWD flag. For
9671: -v, only allow w/o a passwd if *all* entries for the user on the
9672: host w/ the specified runas user have the NOPASSWD flag set.
9673:
9674: 2000-01-02 23:26 millert
9675:
9676: * Makefile.in: add check target
9677:
9678: 1999-12-16 13:02 millert
9679:
9680: * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9681: looping.
9682:
9683: 1999-12-10 00:09 millert
9684:
9685: * CHANGES: recent changes
9686:
9687: 1999-12-08 23:04 millert
9688:
9689: * config.h.in, configure, configure.in, sudo.c: Add check for
9690: initgroups() since old SYSV lacks this.
9691:
9692: 1999-12-08 22:54 millert
9693:
9694: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9695: configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9696: Only define HAVE_FNMATCH if <fnmatch.h> exists.
9697:
9698: 1999-12-06 01:47 millert
9699:
9700: * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9701: to be enabled if the insults[] array is empty. Otherwise there
9702: would be division by zero.
9703:
9704: 1999-12-06 01:25 millert
9705:
9706: * insults.h: Don't care about USE_INSULTS #define since the insult
9707: stuff may be overridden at runtime.
9708:
9709: 1999-12-06 01:23 millert
9710:
9711: * auth/sudo_auth.c: Honor insults flag.
9712:
9713: 1999-12-05 19:14 millert
9714:
9715: * CHANGES, parse.c: Don't ask the user for a password if the user
9716: is not allowed to run the command and the authenticate flag (in
9717: sudoers) is false.
9718:
9719: 1999-12-05 19:05 millert
9720:
9721: * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9722: newline we change to the INITIAL state. o Enter GOTRUNAS when we
9723: see Runas_Alias
9724:
9725: This allows #uid to work in a RunasAlias.
9726:
9727: 1999-12-05 14:06 millert
9728:
9729: * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9730: and runaslist now return a value o in a runasspec, if a runaslist
9731: does not return TRUE, set runas_matches to FALSE. Normally, a
9732: runaslist only returns FALSE for explicitly denied users. o
9733: since runaslist does not modify the stack there is no need for a
9734: push/pop in runasalias.
9735:
9736: 1999-12-04 21:54 millert
9737:
9738: * check.c, sudo.c: Don't kill the user's tickets until after
9739: sudoers has been parsed since tty_tickets and ticket_dir could be
9740: set in sudoers.
9741:
9742: 1999-12-04 21:18 millert
9743:
9744: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
9745: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
9746: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
9747: version to 1.6
9748:
9749: 1999-12-04 21:18 millert
9750:
9751: * testsudoers.c: add set_fqdn() stub
9752:
9753: 1999-12-02 15:31 millert
9754:
9755: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
9756: sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
9757: it cannot work since the command needs to be set before sudoers
9758: is parsed. o Fix the "set_home" sudoers option (only worked at
9759: compile time). o Fix "fqdn" sudoers option. We now set
9760: host/shost via set_fqdn which gets called when the "fqdn"
9761: option is set in sudoers. o Move the openlog() to
9762: store_syslogfac() so this gets overridden correctly from the
9763: sudoers file.
9764:
9765: 1999-12-02 15:21 millert
9766:
9767: * auth/securid.c: SecurID support should compile now.
9768:
9769: 1999-11-28 20:56 millert
9770:
9771: * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
9772: visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
9773:
9774: 1999-11-28 18:51 millert
9775:
9776: * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
9777: the .html files as they are generated automatically on the web
9778: site.
9779:
9780: 1999-11-28 18:49 millert
9781:
9782: * CHANGES, LICENSE: kill characters that made wml unhappy
9783:
9784: 1999-11-28 18:34 millert
9785:
9786: * HISTORY: typo
9787:
9788: 1999-11-25 12:05 millert
9789:
9790: * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
9791:
9792: 1999-11-24 19:43 millert
9793:
9794: * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
9795: benefit of ctm
9796:
9797: 1999-11-23 22:52 millert
9798:
9799: * sudo.c: Make the -s flag be exclusive too. Also reorder the
9800: flags in the exclusive usage message so they are alphabetical.
9801:
9802: 1999-11-23 13:27 millert
9803:
9804: * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
9805:
9806: 1999-11-23 13:07 millert
9807:
9808: * auth/API: fix typo
9809:
9810: 1999-11-23 13:07 millert
9811:
9812: * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
9813:
9814: 1999-11-23 13:06 millert
9815:
9816: * auth/pam.c: fix a warning on redhat and spew an error if
9817: pam_authenticate() returns an error other than AUTH_SUCCESS or
9818: PAM_PERM_DENIED
9819:
9820: 1999-11-23 00:43 millert
9821:
9822: * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
9823: password required is the user's not root's
9824:
9825: 1999-11-19 21:04 millert
9826:
9827: * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
9828:
9829: 1999-11-18 19:13 millert
9830:
9831: * RUNSON: updates from Brian Jackson + some formatting
9832:
9833: 1999-11-17 21:39 millert
9834:
9835: * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
9836: update o Changes for automating real binary releases
9837:
9838: 1999-11-17 21:38 millert
9839:
9840: * Makefile.in: Add bindist target
9841:
9842: 1999-11-16 16:26 millert
9843:
9844: * TROUBLESHOOTING: talk about run-time options in addition to
9845: compile-time options
9846:
9847: 1999-11-16 01:16 millert
9848:
9849: * CHANGES: fix typos
9850:
9851: 1999-11-16 01:09 millert
9852:
9853: * sudo.c: need sys/time.h if HAVE_SETRLIMIT
9854:
9855: 1999-11-16 00:42 millert
9856:
9857: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
9858: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
9859: rid of references to sudo-bugs. Now mention the web site or the
9860: sudo@ alias
9861:
9862: 1999-11-16 00:35 millert
9863:
9864: * sudoers.html: repair pod2html damage
9865:
9866: 1999-11-16 00:28 millert
9867:
9868: * RUNSON, TODO: Update for 1.6 release
9869:
9870: 1999-11-16 00:23 millert
9871:
9872: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
9873: about using ALL in a command context.
9874:
9875: 1999-11-09 15:12 millert
9876:
9877: * visudo.c: Call yyrestart() on a parse error to reset the lexer
9878: state.
9879:
9880: 1999-11-09 15:06 millert
9881:
9882: * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
9883: yyrestart() into visudo.c since it might not get called in yywrap
9884: if we get a parse error (and we only reread the file on error
9885: anyway).
9886:
9887: 1999-11-09 14:32 millert
9888:
9889: * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
9890: clean up any buffers that might still exist. Call yyrestart()
9891: instead of using the deprecated YY_NEW_FILE macro.
9892:
9893: 1999-11-09 12:13 millert
9894:
9895: * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
9896:
9897: 1999-11-08 19:00 millert
9898:
9899: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
9900: characters need to be escaped in names.
9901:
9902: 1999-11-08 18:59 millert
9903:
9904: * configure: regen
9905:
9906: 1999-11-08 18:59 millert
9907:
9908: * INSTALL: clarify Mac OS X entry
9909:
9910: 1999-11-08 18:59 millert
9911:
9912: * RUNSON: update
9913:
9914: 1999-11-08 17:45 millert
9915:
9916: * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
9917: configure options for danity
9918:
9919: 1999-11-05 17:11 millert
9920:
9921: * defaults.c: Fix printing of type T_MODE in dump_defaults()
9922:
9923: 1999-11-05 12:00 millert
9924:
9925: * strcasecmp.c: missing sys/types.h
9926:
9927: 1999-11-05 00:42 millert
9928:
9929: * INSTALL: Break out options that may be overridden at run time
9930: into their own section. Add a not about Max OS X and correct
9931: some lies.
9932:
9933: 1999-11-04 14:01 millert
9934:
9935: * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
9936: getrlimit to find the highest fd when closing all non-std fd's o
9937: Turn off core dumps via setrlimit for the sake of paranoia
9938:
9939: 1999-11-04 13:57 millert
9940:
9941: * RUNSON: updates
9942:
9943: 1999-11-01 10:59 millert
9944:
9945: * CHANGES: updates
9946:
9947: 1999-11-01 10:58 millert
9948:
9949: * tgetpass.c: When read()'ing, do a single character at a time to
9950: be sure we don't go oast the newline.
9951:
9952: 1999-11-01 10:43 millert
9953:
9954: * sudo.c: For the sudo_root option, check against user_uid, not
9955: getuid() since at this point, ruid == euid == 0.
9956:
9957: 1999-10-31 23:14 millert
9958:
9959: * RUNSON: some updates
9960:
9961: 1999-10-31 23:14 millert
9962:
9963: * logging.h: Fix compilation problem when --with-logging=file was
9964: specified. This means that syslog is now required to build sudo
9965: but that should not be a problem. If it is it can be fixed
9966: trivially with a configure check for syslog() or syslog.h.
9967:
9968: 1999-10-31 23:00 millert
9969:
9970: * tgetpass.c: Make this work again for things like "sudo echo hi |
9971: more" where the tty gets put into character at a time mode. We
9972: read until we read end of line or we run out of space (similar to
9973: fgets(3)).
9974:
9975: 1999-10-20 11:23 millert
9976:
9977: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
9978: to bold
9979:
9980: 1999-10-20 11:23 millert
9981:
9982: * RUNSON: update
9983:
9984: 1999-10-16 13:56 millert
9985:
9986: * defaults.c: Error out if syslog parameters are given without a
9987: value. For Ultrix or 4.2BSD "syslog" is allowed without a value
9988: since there are no facilities in the 4.2BSD syslog.
9989:
9990: 1999-10-15 16:37 millert
9991:
9992: * defaults.c: Ignore the syslog facility for systems w/ old syslog
9993: like Ultrix.
9994:
9995: 1999-10-15 12:51 millert
9996:
9997: * TROUBLESHOOTING: people with "." early in their path can have
9998: problems running sudo from the build dir ;-)
9999:
10000: 1999-10-13 00:18 millert
10001:
10002: * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10003:
10004: 1999-10-12 22:34 millert
10005:
10006: * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10007: auth/sudo_auth.h: New krb5 code from Frank Cusack
10008: <fcusack@iconnet.net>.
10009:
10010: 1999-10-12 22:33 millert
10011:
10012: * CHANGES: update to reality
10013:
10014: 1999-10-11 20:53 millert
10015:
10016: * auth/fwtk.c: include <auth.h> to get function prototypes.
10017:
10018: 1999-10-11 20:05 millert
10019:
10020: * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10021:
10022: 1999-10-11 19:42 millert
10023:
10024: * sudo.c: in set_perms(), always call setuid(0) before changing the
10025: ruid/euid so we always know it will succeed.
10026:
10027: 1999-10-11 12:24 millert
10028:
10029: * defaults.h: #undef T_FOO to avoid conflicts with system defines
10030: (like on ULTRIX).
10031:
10032: 1999-10-11 11:55 millert
10033:
10034: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10035: sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10036: needs some fleshing out but this is a start.
10037:
10038: 1999-10-10 17:21 millert
10039:
10040: * defaults.c: use strtol, not strtoul since not everyone has not
10041: strtoul
10042:
10043: 1999-10-10 15:01 millert
10044:
10045: * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10046: INITIAL state
10047:
10048: 1999-10-10 14:38 millert
10049:
10050: * lex.yy.c, parse.lex: o Add support for escaped characters in the
10051: WORD macro o Modify fill() to squash escape chars
10052:
10053: 1999-10-10 13:56 millert
10054:
10055: * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10056: checks for default values that are supposed to be pathnames. o
10057: Fix a duplicate free when visudo finds an error.
10058:
10059: 1999-10-09 01:01 millert
10060:
10061: * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10062:
10063: 1999-10-07 21:12 millert
10064:
10065: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10066: requiretty option o Move O_NOCTTY to compat.h
10067:
10068: 1999-10-07 21:12 millert
10069:
10070: * logging.c: The exit() in log_error() was mistakenly removed in a
10071: previous version. Put it back...
10072:
10073: 1999-10-07 17:20 millert
10074:
10075: * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10076: defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10077: logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10078: auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10079: Change defaults stuff to put the value right in the struct. o
10080: Implement mailer_flags o Store syslog stuff both in int and
10081: string form. Setting the string form magically updates the int
10082: version. o Add boolean attribute to strings where it makes sense
10083: to say !foo
10084:
10085: 1999-10-07 17:13 millert
10086:
10087: * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10088:
10089: 1999-10-06 00:48 millert
10090:
10091: * auth/API: cleanup function no longer takes a status arg
10092:
10093: 1999-10-06 00:48 millert
10094:
10095: * INSTALL: the the
10096:
10097: 1999-09-15 05:15 millert
10098:
10099: * TODO, config.h.in, configure, configure.in, logging.c: Use
10100: strftime() instead of ctime() if it is available.
10101:
10102: 1999-09-14 12:58 millert
10103:
10104: * defaults.c: fix copyright date
10105:
10106: 1999-09-14 12:57 millert
10107:
10108: * RUNSON: update ReliantUNIX entry
10109:
10110: 1999-09-14 12:56 millert
10111:
10112: * defaults.c, defaults.h, logging.c: add log_year option
10113:
10114: 1999-09-14 04:01 millert
10115:
10116: * configure, configure.in: add --without-sendmail to help output
10117:
10118: 1999-09-14 03:42 millert
10119:
10120: * configure, configure.in: enforce an otctal arg for
10121: --with-suoders-mode
10122:
10123: 1999-09-08 04:06 millert
10124:
10125: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10126: config.h.in, configure, configure.in, defaults.c, defaults.h,
10127: find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10128: sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10129: auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10130: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10131: "Defaults" line in sudoers to make configuration variables
10132: changable at runtime (and on a global, per-host and per-user
10133: basis). Both the names and the internal representation are still
10134: subject to change. It was necessary to make sudo_user.runas but
10135: a char ** instead of a char * since this value can be changed by
10136: a Defaults line. There is a similar (but more complicated) issue
10137: with sudo_user.prompt but it is handled differently at the
10138: moment.
10139:
10140: Add a "-L" flag to list the name of options with their
10141: descriptions. This may only be temporary.
10142:
10143: Move some prototypes to parse.h
10144:
10145: Be much less restrictive on what is allowed for a username.
10146:
10147: 1999-09-08 04:01 millert
10148:
10149: * sample.syslog.conf: Add more info
10150:
10151: 1999-09-04 03:09 millert
10152:
10153: * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10154: strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10155: from their license.
10156:
10157: 1999-08-31 05:39 millert
10158:
10159: * auth/sudo_auth.h: move dce_verofy proto to correct section
10160:
10161: 1999-08-31 05:39 millert
10162:
10163: * auth/dce.c: remove XXX
10164:
10165: 1999-08-28 06:00 millert
10166:
10167: * emul/fnmatch.h: Add fnmatch() prototype
10168:
10169: 1999-08-28 06:00 millert
10170:
10171: * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10172: emul/fnmatch.h to be after sudo.h for __P
10173:
10174: 1999-08-28 05:59 millert
10175:
10176: * sudo.h: add strcasecmp proto
10177:
10178: 1999-08-28 05:50 millert
10179:
10180: * auth/sudo_auth.c: add check for case where there are no auth
10181: methods
10182:
10183: 1999-08-28 05:36 millert
10184:
10185: * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10186: __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10187:
10188: 1999-08-28 05:24 millert
10189:
10190: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10191: everywhere we include string.h
10192:
10193: 1999-08-28 05:22 millert
10194:
10195: * version.c: nicer output when showing auth methods
10196:
10197: 1999-08-28 05:00 millert
10198:
10199: * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10200:
10201: 1999-08-28 04:49 millert
10202:
10203: * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10204:
10205: 1999-08-28 04:22 millert
10206:
10207: * parse.lex, lex.yy.c: fix definition of OCTECT
10208:
10209: 1999-08-28 04:10 millert
10210:
10211: * configure, configure.in: aix_auth.o not authenticate.o
10212:
10213: 1999-08-27 17:02 millert
10214:
10215: * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10216: generated from the keyboard). Since we run with ruid/euid == 0
10217: the user can't really signal us in nasty ways.
10218:
10219: 1999-08-27 17:01 millert
10220:
10221: * visudo.c: Don't need to worry about catching too many signals
10222: since we do locking on the tmp file. If a lockfile is really
10223: stale, it will be detected and overwritten.
10224:
10225: 1999-08-27 16:09 millert
10226:
10227: * INSTALL, Makefile.in: include auth/API in tarball
10228:
10229: 1999-08-27 16:09 millert
10230:
10231: * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10232: loop and only do the memset if we are *not* in standalone mode.
10233:
10234: 1999-08-27 13:46 millert
10235:
10236: * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10237:
10238: 1999-08-27 11:53 millert
10239:
10240: * sudo.c: fix --enable-noargs-shell
10241:
10242: 1999-08-27 11:06 millert
10243:
10244: * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10245:
10246: 1999-08-27 10:54 millert
10247:
10248: * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10249:
10250: 1999-08-27 10:50 millert
10251:
10252: * auth/dce.c: there were still some return(0)'s hanging around,
10253: make them AUTH_FAILURE
10254:
10255: 1999-08-27 10:39 millert
10256:
10257: * parse.c: typo in comment
10258:
10259: 1999-08-27 10:03 millert
10260:
10261: * version.c: add missing semicolon
10262:
10263: 1999-08-27 08:31 millert
10264:
10265: * auth/sudo_auth.h: missing backslash
10266:
10267: 1999-08-26 17:24 millert
10268:
10269: * CHANGES, config.h.in, configure, configure.in: Kill
10270: _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10271:
10272: 1999-08-26 09:21 millert
10273:
10274: * Makefile.in: add parse.h to HDRS
10275:
10276: 1999-08-26 09:16 millert
10277:
10278: * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10279: VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10280: in LIBS, commong ld flags go in LDFLAGS and network libs like
10281: -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10282: on Solaris and is a bit cleaner in general.
10283:
10284: 1999-08-26 06:56 millert
10285:
10286: * UPGRADE: mention ptmp -> sudoers.tmp
10287:
10288: 1999-08-26 06:12 millert
10289:
10290: * configure.in, configure, config.h.in: Define
10291: _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10292:
10293: 1999-08-26 05:37 millert
10294:
10295: * RUNSON: add 2 reports
10296:
10297: 1999-08-26 05:20 millert
10298:
10299: * auth/kerb5.c: Minor changes, mostly cosmetic.
10300: verify_krb_v5_tgt() changed to return a value more like a system
10301: function
10302:
10303: 1999-08-26 05:19 millert
10304:
10305: * auth/dce.c: Add an XXX
10306:
10307: 1999-08-26 05:19 millert
10308:
10309: * TODO: more things todo!
10310:
10311: 1999-08-26 05:18 millert
10312:
10313: * sample.sudoers: update based on what is in the man page
10314:
10315: 1999-08-26 05:10 millert
10316:
10317: * parse.yacc: minor change to first line printed in -l mode
10318:
10319: 1999-08-26 05:10 millert
10320:
10321: * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10322: VARIABLES" section to "ENVIRONMENT" to be more standard and add
10323: "EXAMPLES" section
10324:
10325: 1999-08-26 05:08 millert
10326:
10327: * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10328: "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10329: standard
10330:
10331: 1999-08-26 05:06 millert
10332:
10333: * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10334:
10335: 1999-08-26 05:05 millert
10336:
10337: * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10338:
10339: 1999-08-26 05:04 millert
10340:
10341: * UPGRADE: mention timestamp changes
10342:
10343: 1999-08-26 05:04 millert
10344:
10345: * PORTING: cosmetic cleanup
10346:
10347: 1999-08-26 05:00 millert
10348:
10349: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10350: sudoers(8) man page
10351:
10352: 1999-08-24 13:45 millert
10353:
10354: * version.c: Update comments about syslog name tables
10355:
10356: 1999-08-24 13:37 millert
10357:
10358: * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10359: configure.in, parse.yacc: include strcasecmp() for those without
10360: it
10361:
10362: 1999-08-24 12:43 millert
10363:
10364: * sample.sudoers: Use the : operator some more and fix a typo
10365:
10366: 1999-08-24 12:43 millert
10367:
10368: * HISTORY: update the history of sudo
10369:
10370: 1999-08-24 12:42 millert
10371:
10372: * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10373:
10374: 1999-08-24 12:41 millert
10375:
10376: * CHANGES: recent changes
10377:
10378: 1999-08-24 12:40 millert
10379:
10380: * sudo.tab.h: these should be generated with byacc, not bison
10381:
10382: 1999-08-24 12:40 millert
10383:
10384: * lex.yy.c: regen
10385:
10386: 1999-08-24 11:58 millert
10387:
10388: * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10389: the stored (expanded) alias was not stored with the contents.
10390: This could lead to incorrect output if the sudoers file had
10391: different alias types with the same name. Normal parsing (ie:
10392: not in '-l' mode) is unaffected.
10393:
10394: 1999-08-23 12:47 millert
10395:
10396: * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10397: proto on some systems
10398:
10399: 1999-08-22 13:10 millert
10400:
10401: * snprintf.c: fix comment
10402:
10403: 1999-08-22 13:09 millert
10404:
10405: * tgetpass.c: don't need limits.h
10406:
10407: 1999-08-22 07:36 millert
10408:
10409: * snprintf.c: kill bogus reference to vfprintf
10410:
10411: 1999-08-22 07:26 millert
10412:
10413: * sample.sudoers, sudoers: better examples
10414:
10415: 1999-08-22 07:23 millert
10416:
10417: * snprintf.c: Add some const in the K&R defs. This is safe since
10418: we define const away if the compiler doesn't grok it.
10419:
10420: 1999-08-22 07:22 millert
10421:
10422: * aclocal.m4, configure: Better test for working long long support.
10423: Ultrix compiler supports basic long long but not all operations
10424: on them.
10425:
10426: 1999-08-22 05:59 millert
10427:
10428: * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10429: sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10430: MAXINT before including hpsecurity.h to silence an HP-UX warning
10431: Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10432:
10433: 1999-08-21 15:00 millert
10434:
10435: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10436: snprintf.c: UCB-derived snprintf + asprintf support. Supports
10437: quads if the compiler does. No floating point yet, perhaps
10438: later...
10439:
10440: 1999-08-20 16:37 millert
10441:
10442: * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10443: auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10444: code as root, not the invoking user. It doesn't really gain us
10445: anything to run as the user since an attacker can just have an
10446: setuid(0) in their egg. Running as root solves potential
10447: problems wrt signalling.
10448:
10449: 1999-08-19 13:45 millert
10450:
10451: * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10452: let the signal handler get it if we are still running, else let
10453: init reap it for us. The extra time it takes to wait lets the
10454: user know that mail is being sent.
10455:
10456: Install SIGCHLD handler in main() and for POSIX signals, block
10457: everything *except* SIGCHLD.
10458:
10459: 1999-08-19 12:30 millert
10460:
10461: * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10462: INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10463: a bitmap instead of an int. This makes it possible to express
10464: things like "failed to validate because user not listed for this
10465: host". Some thigns that were previously VALIDATE_FOO are now
10466: FLAG_FOO. This may change later on.
10467:
10468: Reorganized code in log_auth() and sudo.c to deal with above
10469: changes.
10470:
10471: Safer versions of push/pushcp with in the do { ... } while (0)
10472: style
10473:
10474: parse.yacc now saves info on the stack to allow parse.c to
10475: determine if a user was listed, but not for the host he/she tried
10476: to run on.
10477:
10478: Added --with-mail-if-no-host option
10479:
10480: 1999-08-17 11:29 millert
10481:
10482: * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10483: visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10484: externally visible. o If pedantic > 1, it is a parse error. o
10485: Add -s (strict) option to visudo which sets pedantic to 2.
10486:
10487: 1999-08-17 11:26 millert
10488:
10489: * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10490:
10491: 1999-08-17 11:20 millert
10492:
10493: * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10494:
10495: 1999-08-17 10:29 millert
10496:
10497: * configure, configure.in, Makefile.in: Add testsudoers to default
10498: build target if --with-devel Don't clean generated parser files
10499: unless "distclean".
10500:
10501: 1999-08-17 08:47 millert
10502:
10503: * parse.yacc: In pedantic mode we need to save *all* the aliases,
10504: not just those that match, or we get spurious warnings.
10505:
10506: 1999-08-17 05:32 millert
10507:
10508: * TROUBLESHOOTING: reference samples.sylog.conf
10509:
10510: 1999-08-14 11:50 millert
10511:
10512: * sample.syslog.conf: Sample entries for syslog.conf
10513:
10514: 1999-08-14 11:40 millert
10515:
10516: * CHANGES: recent changes
10517:
10518: 1999-08-14 11:36 millert
10519:
10520: * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10521: pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10522: sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10523: configured into flags and add a flag to specify an auth method is
10524: running alone (the only one). Pass auth methods their sudo_auth
10525: pointer, not the data pointer. This allows us to get at the
10526: flags and tell if we are the only auth method. That, in turn,
10527: allows the method to be able to decide what should/should not be
10528: a fatal error. Currently only rfc1938 uses it this way, which
10529: allows us to kill the OTP_ONLY define and te hackery that went
10530: with it. With access to the sudo_auth struct, methods can also
10531: get at a string holding their cannonical name (useful in error
10532: messages).
10533:
10534: 1999-08-14 11:34 millert
10535:
10536: * Makefile.in, INSTALL, README, config.h.in, configure,
10537: configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10538: sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10539: o real dependencies in the Makefile o --with-devel option to
10540: enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10541: "foo->bar" o ALL goes back to being a token, not a string but
10542: don't leak memory o rename hsotspec -> host in parse.yacc
10543:
10544: 1999-08-12 12:26 millert
10545:
10546: * BUGS, CHANGES: recent changes
10547:
10548: 1999-08-12 12:24 millert
10549:
10550: * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10551: sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10552: *snprintf() before -ldb is added to LIBS since -ldb includes a
10553: bogus snprintf(). o Add forward refs for struct mbuf and struct
10554: rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10555: to fix -Wall o Add missing includes to fix more -Wall
10556:
10557: 1999-08-12 10:37 millert
10558:
10559: * INSTALL, check.c, config.h.in, configure, configure.in,
10560: parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10561: o Add a "pedentic" flag to the parser. This makes sudo warn in
10562: cases where an alias may be used before it is defined. Only
10563: turned on for visudo and testsudoers. o Add
10564: --disable-authentication option that makes sudo not require
10565: authentication by default. The PASSWD tag can be used to require
10566: authentication for an entry. We no longer overload
10567: --without-passwd.
10568:
10569: 1999-08-12 10:29 millert
10570:
10571: * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10572: USERNAME. These days a username can contain just about anything
10573: so be very permissive. Also drop the unused \. punctuation.
10574:
10575: 1999-08-09 18:25 millert
10576:
10577: * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10578: parse.h o find_alias() now returns an aliasinfo * instead of
10579: boolean o add_alias() now takes a value parameter to store in the
10580: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10581: return: 1) positive match 0) negative match (due to '!') -1) no
10582: match This means setting $$ explicitly in all cases, which I
10583: should have done in the first place. It also means that we
10584: always store a value that is != -1 and when we see a '!' we can
10585: set *_matches to !rv if rv != -1. The upshot of all of this is
10586: that '!' now works the way it should in lists and some of the
10587: rules are more uniform and sensible.
10588:
10589: 1999-08-09 18:17 millert
10590:
10591: * Makefile.in: add parse.h dependency
10592:
10593: 1999-08-09 18:17 millert
10594:
10595: * parse.h: kill unused *_matched macros
10596:
10597: 1999-08-09 10:35 millert
10598:
10599: * parse.yacc: Allow a list of users as the first thing in a user
10600: spec, not just a single entry. This makes things more uniform,
10601: though it does allow you to write user specs that are hard to
10602: read.
10603:
10604: 1999-08-09 10:08 millert
10605:
10606: * configure: regen
10607:
10608: 1999-08-09 10:08 millert
10609:
10610: * configure.in: fix check for crypt() in libufc
10611:
10612: 1999-08-07 14:03 millert
10613:
10614: * README: sudo-users list now exists
10615:
10616: 1999-08-07 07:46 millert
10617:
10618: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10619: reality.
10620:
10621: 1999-08-07 05:59 millert
10622:
10623: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10624: config.h.in, configure.in, logging.c, sudo.h, version.c,
10625: visudo.c, configure, fileops.c: o Move lock_file() and touch()
10626: into fileops.c so visudo can use them o Visudo now locks the
10627: sudoers temp file instead of bailing when the temp file already
10628: exists. This fixes the problem of stale temp files but it does
10629: *require* that you not try to put the temp file in a
10630: world-writable directory. This shoud not be an issue as the temp
10631: file should live in the same dir as sudoers. o Visudo now only
10632: installs the temp file as sudoers if it changed.
10633:
10634: 1999-08-06 09:49 millert
10635:
10636: * logging.c: add fcntl locking
10637:
10638: 1999-08-06 09:33 millert
10639:
10640: * configure, config.h.in, configure.in, logging.c: Lock the log
10641: file.
10642:
10643: 1999-08-06 05:36 millert
10644:
10645: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10646: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10647: /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10648: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10649: _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10650:
10651: 1999-08-05 17:38 millert
10652:
10653: * INSTALL, check.c, config.h.in, configure, configure.in,
10654: version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10655: more things to root sudo -V config reporting
10656:
10657: 1999-08-05 10:56 millert
10658:
10659: * configure, configure.in: aix_auth.o not authenticate.o
10660:
10661: 1999-08-05 10:48 millert
10662:
10663: * config.h.in: Add --with-goodpri and --with-badpri configure
10664: options to specify the syslog priority to use.
10665:
10666: 1999-08-05 10:30 millert
10667:
10668: * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10669: and --with-badpri configure options to specify the syslog
10670: priority to use.
10671:
10672: 1999-08-05 10:25 millert
10673:
10674: * compat.h: kill crufty AIX stuff
10675:
10676: 1999-08-05 06:55 millert
10677:
10678: * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10679: deal with $< like I would expect. Both GNU and BSD makes get
10680: this right but... So, we just expand $< inline at the cost of
10681: some ugliness.
10682:
10683: 1999-08-05 06:52 millert
10684:
10685: * version.c: If the invoking user is root, sudo will now print
10686: configure info in -V mode. Currently just prints logging info,
10687: to be expanded later.
10688:
10689: 1999-08-05 06:51 millert
10690:
10691: * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10692: facility and priority o use new print_version() functino for -V
10693: mode
10694:
10695: 1999-08-05 06:49 millert
10696:
10697: * check.c: Don't need version.c
10698:
10699: 1999-08-05 06:21 millert
10700:
10701: * configure, configure.in, aclocal.m4, config.h.in: Add check for
10702: syslog facilities and priorities tables in syslog.h
10703:
10704: 1999-08-05 05:23 millert
10705:
10706: * Makefile.in: o authenticate -> aix_auth o add version.c
10707:
10708: 1999-08-05 05:21 millert
10709:
10710: * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10711:
10712: 1999-08-04 13:32 millert
10713:
10714: * TODO: sudo should lock its logfile
10715:
10716: 1999-08-04 13:28 millert
10717:
10718: * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10719: shortcut macros for append() to make things more readable. o The
10720: separator in append() is now a string instead of a char. o In
10721: append(), only prepend the separator if the last char is not a
10722: '!'. This is a hack but it greatly simplifies '!' handling. o
10723: In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10724: inherited across entries in a list (matches current behavior).
10725: o Fix formatting in -l mode such that items in a list are
10726: separated by a space. Greatlt improves readability. o Space
10727: for name field in struct aliasinfo is now allocated dyanically
10728: instead of using a (big) buffer. o In add_alias(), only search
10729: the list once (lsearch instead of lfind + lsearch)
10730:
10731: 1999-08-04 11:31 millert
10732:
10733: * lex.yy.c, sudo.tab.h: regen
10734:
10735: 1999-08-04 10:54 millert
10736:
10737: * configure, configure.in: Solais pam doesn't require anye xtra
10738: setup
10739:
10740: 1999-08-04 05:35 millert
10741:
10742: * parse.yacc: o Simpler '!' support now that the lexer deals with
10743: multiple !'s for us. o In the case of opFOO, have FOO give a
10744: boolean return value and set foo_matches in opFOO, not FOO. o
10745: Treat 'ALL' as a string since it gets fill()'d in
10746: parse.lex--fixes a small memory leak. In the long run it may
10747: be better to just fix parse.lex and make ALL back into a token.
10748: However, having it be a string is useful since it can be
10749: easily passed back to the parent rule if we so desire.
10750:
10751: 1999-08-04 03:54 millert
10752:
10753: * parse.lex: o Remove some unnecessary backslashes o collapse
10754: multiple !'s by using !+ and checking if yyleng is even or odd.
10755: this allows us to simplify ! handling in parse.yacc
10756:
10757: 1999-08-04 03:53 millert
10758:
10759: * sudo.c: -u flag was being ignored
10760:
10761: 1999-08-01 13:04 millert
10762:
10763: * Makefile.in: correct fix
10764:
10765: 1999-08-01 12:37 millert
10766:
10767: * Makefile.in: work around pod2man stupididy
10768:
10769: 1999-08-01 12:35 millert
10770:
10771: * Makefile.in: correct dependencies for .cat
10772:
10773: 1999-08-01 12:26 millert
10774:
10775: * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
10776:
10777: 1999-08-01 12:25 millert
10778:
10779: * sudo.pod, visudo.pod: Add copyright Update to reality
10780:
10781: 1999-08-01 11:42 millert
10782:
10783: * parse.c, sudo.c, sudo.h: rename validate() to the more
10784: descriptive sudoers_lookup()
10785:
10786: 1999-08-01 06:49 millert
10787:
10788: * auth/aix_auth.c: use tgetpass
10789:
10790: 1999-07-31 12:32 millert
10791:
10792: * CHANGES: updates
10793:
10794: 1999-07-31 12:31 millert
10795:
10796: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
10797: configure, configure.in, sudo.c: Sudo, not CU Sudo
10798:
10799: 1999-07-31 12:19 millert
10800:
10801: * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
10802: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
10803: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
10804: lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
10805: parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
10806: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
10807: visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
10808: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
10809: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
10810: auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
10811: LICENSE: add 4th term to license similar to term 5 in the apache
10812: license
10813:
10814: 1999-07-31 12:02 millert
10815:
10816: * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
10817: sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
10818:
10819: 1999-07-28 05:24 millert
10820:
10821: * CHANGES: updates
10822:
10823: 1999-07-28 05:21 millert
10824:
10825: * check.c: Use dirs instead of files for timestamp. This allows
10826: tty and non-tty schemes to coexist reasonably. Note, however,
10827: that when you update a tty ticket, the mtime on the user dir gets
10828: updated as well.
10829:
10830: 1999-07-28 05:17 millert
10831:
10832: * configure.in, configure: Fix getprpwnam() checking on SCO. Need
10833: to link with "-lprot -lx" when linking test program, not just
10834: -lprot. Also add check for getspnam(). The SCO docs indicate
10835: that /etc/shadow can be used but this may be a lie.
10836:
10837: 1999-07-24 03:35 millert
10838:
10839: * auth/API: first cut at auth API description
10840:
10841: 1999-07-22 15:48 millert
10842:
10843: * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
10844: securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
10845: now an init method that gets run before the main loop. This
10846: allows auth routines to differentiate between initialization that
10847: happens once vs. setup that needs to run each time through the
10848: loop.
10849:
10850: 1999-07-22 12:23 millert
10851:
10852: * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
10853:
10854: 1999-07-22 12:22 millert
10855:
10856: * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
10857: versions of asprintf() and vasprintf()
10858:
10859: 1999-07-22 09:14 millert
10860:
10861: * TODO: remove 2 items. One done, one won't do.
10862:
10863: 1999-07-22 09:10 millert
10864:
10865: * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
10866: visudo.cat, visudo.html, configure, lex.yy.c: regen
10867:
10868: 1999-07-22 09:06 millert
10869:
10870: * CHANGES: new changes
10871:
10872: 1999-07-22 09:01 millert
10873:
10874: * sudo.pod: o Document -K flag and update meaning of -k flag. o
10875: BSD-style copyright o Document clearing of BIND resolver
10876: environment variables o Clarify bit about shared libs o suggest
10877: rc files create /tmp/.odus if your OS gives away files
10878:
10879: 1999-07-22 08:59 millert
10880:
10881: * visudo.pod: BSD license
10882:
10883: 1999-07-22 08:58 millert
10884:
10885: * tgetpass.c: o BSD copyright o no need to block signals, we now do
10886: that in main() o cosmetic changes
10887:
10888: 1999-07-22 08:57 millert
10889:
10890: * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
10891: sudo_user" instead of old globals. o some cometic cleanup
10892:
10893: 1999-07-22 08:56 millert
10894:
10895: * sudo_setenv.c, version.h: BSD-style copyright
10896:
10897: 1999-07-22 08:56 millert
10898:
10899: * sudo.h: o BSD copyright o logging and parser bits moved to their
10900: own .h files o new "struct sudo_user" to encapsulate many of the
10901: old globals.
10902:
10903: 1999-07-22 08:55 millert
10904:
10905: * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
10906: use new logging routines o simplified flow of control o BIND
10907: resolver additions to badenv_table
10908:
10909: 1999-07-22 08:53 millert
10910:
10911: * strerror.c: BSD-style copyright
10912:
10913: 1999-07-22 08:53 millert
10914:
10915: * snprintf.c: Now compiles on more K&R compilers
10916:
10917: 1999-07-22 08:52 millert
10918:
10919: * putenv.c: BSD-style copyright, cosmetic changes
10920:
10921: 1999-07-22 08:51 millert
10922:
10923: * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
10924: Move parser-specific defines and structs into parse.h + other
10925: cosmetic changes
10926:
10927: 1999-07-22 08:51 millert
10928:
10929: * logging.h: defines for logging routines
10930:
10931: 1999-07-22 08:49 millert
10932:
10933: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
10934: interfaces.h, pathnames.h.in: BSD-style copyright
10935:
10936: 1999-07-22 08:48 millert
10937:
10938: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
10939: copyright, cosmetic changes
10940:
10941: 1999-07-22 08:46 millert
10942:
10943: * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
10944: add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
10945: changes to fill in AUTH_OBJS for new auth api o check for
10946: strerror(), v?snprintf() and v?asprintf() o replace
10947: --with-AuthSRV with --with-fwtk
10948:
10949: 1999-07-22 08:43 millert
10950:
10951: * config.h.in: BSD-style copyright. Remove USE_GETPASS and
10952: HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
10953: HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
10954: NO_PASSWD
10955:
10956: 1999-07-22 08:42 millert
10957:
10958: * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
10959: are missing.
10960:
10961: 1999-07-22 08:39 millert
10962:
10963: * alloc.c: BSD-style copyright
10964:
10965: 1999-07-22 08:38 millert
10966:
10967: * TROUBLESHOOTING: no more --with-getpass
10968:
10969: 1999-07-22 08:34 millert
10970:
10971: * TODO: Take out things I've done...
10972:
10973: 1999-07-22 08:34 millert
10974:
10975: * README: Refer to LICENSE
10976:
10977: 1999-07-22 08:34 millert
10978:
10979: * PORTING: --with-getpass no longer exists
10980:
10981: 1999-07-22 08:33 millert
10982:
10983: * Makefile.in: BSD-style copyright. Update to reflect reality wrt
10984: new files and new auth modules.
10985:
10986: 1999-07-22 08:32 millert
10987:
10988: * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
10989: --with-fwtk and --without-passwd.
10990:
10991: 1999-07-22 08:31 millert
10992:
10993: * HISTORY: Update history a bit
10994:
10995: 1999-07-22 08:29 millert
10996:
10997: * COPYING, LICENSE: Now distributed under a BSD-style license
10998:
10999: 1999-07-22 08:28 millert
11000:
11001: * auth/sudo_auth.c: o BSD-style copyright o Add support for
11002: NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11003: rfc1938 code o new struct sudo_user global
11004:
11005: 1999-07-22 08:25 millert
11006:
11007: * auth/: pam.c, sia.c: BSD-style copyright and use new log
11008: functions
11009:
11010: 1999-07-22 08:24 millert
11011:
11012: * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11013: Use asprintf() and snprintf() where sensible.
11014:
11015: 1999-07-22 08:19 millert
11016:
11017: * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11018: handling is now done more reasonably--better sanity checks and
11019: tty-based stamps are now done as files in a directory with the
11020: same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11021: It is not currently possible to mix tty and non-tty based ticket
11022: schemes but this may change in the future (it requires sudo to
11023: use a directory instead of a file in the non-tty case). Also,
11024: ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11025: really deletes the file. That way you don't get the lecture
11026: again just because you killed your ticket in .logout. BSD-style
11027: copyright now.
11028:
11029: 1999-07-22 08:13 millert
11030:
11031: * logging.c: o rewritten logging routines. log_error() now takes
11032: printf-style varargs and log_auth() for the return value of
11033: validate(). o BSD-style copyright
11034:
11035: 1999-07-22 07:04 millert
11036:
11037: * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11038: auth API
11039:
11040: 1999-07-22 07:02 millert
11041:
11042: * auth/fwtk.c: Use snprintf() where it makes sense and add a
11043: BSD-style copyright
11044:
11045: 1999-07-22 07:00 millert
11046:
11047: * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11048: secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11049: copyright
11050:
11051: 1999-07-22 06:57 millert
11052:
11053: * emul/utime.h, utime.c: BSD-style copyright
11054:
11055: 1999-07-22 06:57 millert
11056:
11057: * emul/search.h: this has been rewritten so use my BSD-style
11058: copyright
11059:
11060: 1999-07-15 11:21 millert
11061:
11062: * snprintf.c: include malloc.h if no stdlib.h
11063:
11064: 1999-07-15 10:21 millert
11065:
11066: * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11067:
11068: 1999-07-15 10:20 millert
11069:
11070: * strerror.c: strerror() for systems w/o it
11071:
11072: 1999-07-12 06:53 millert
11073:
11074: * visudo.c: stylistic changes
11075:
11076: 1999-07-12 06:25 millert
11077:
11078: * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11079: comment
11080:
11081: 1999-07-11 16:10 millert
11082:
11083: * auth/pam.c: remove missed ref to PAM_nullpw
11084:
11085: 1999-07-11 16:10 millert
11086:
11087: * auth/sudo_auth.h: pasto
11088:
11089: 1999-07-11 15:19 millert
11090:
11091: * auth/kerb5.c: more or less complete now--still untested
11092:
11093: 1999-07-11 15:09 millert
11094:
11095: * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11096:
11097: 1999-07-11 14:42 millert
11098:
11099: * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11100: code into rfc1938.c
11101:
11102: 1999-07-11 07:22 millert
11103:
11104: * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11105: unchanged from dce_pwent.c
11106:
11107: 1999-07-11 06:44 millert
11108:
11109: * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11110: Could probably be much better
11111:
11112: 1999-07-11 06:43 millert
11113:
11114: * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11115: works (tested)
11116:
11117: 1999-07-11 05:37 millert
11118:
11119: * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11120:
11121: 1999-07-11 05:33 millert
11122:
11123: * auth/pam.c: don't use prompt global, it will go away
11124:
11125: 1999-07-11 05:32 millert
11126:
11127: * auth/secureware.c: correct copyright years
11128:
11129: 1999-07-10 20:32 millert
11130:
11131: * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11132: pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11133: New authentication API and methods
11134:
11135: 1999-07-08 06:46 millert
11136:
11137: * parse.yacc: only save an entry if user_matches && host_matches,
11138: even if the stack is empty (fix for previous commit)
11139:
11140: 1999-07-08 06:35 millert
11141:
11142: * parse.yacc: 1) Always save an entry on the stack if it is empty.
11143: This fixes the -l and -v flags that were broken by earlier parser
11144: changes.
11145:
11146: 2) In a Runas list, don't negate FALSE -> TRUE since that would
11147: make !foo match any time the user specified a runas user (via -u)
11148: other than foo.
11149:
11150: 1999-07-08 05:45 millert
11151:
11152: * testsudoers.c: interfaces and num_interfaces are now auto, not
11153: extern
11154:
11155: 1999-07-07 14:09 millert
11156:
11157: * auth.c: use a static global to keep stae about empty passwords
11158:
11159: 1999-07-07 14:08 millert
11160:
11161: * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11162: other modules
11163:
11164: 1999-07-05 16:53 millert
11165:
11166: * auth.c: PAM prompt code was wrong, looks like we have to kludge
11167: it after all.
11168:
11169: 1999-07-05 16:35 millert
11170:
11171: * auth.c: In the PAM code, when a user hits return at the first
11172: password prompt, exit without a warning just like the normal auth
11173: code
11174:
11175: 1999-07-05 16:15 millert
11176:
11177: * configure, configure.in: kludge around cross-compiler false
11178: positives
11179:
11180: 1999-07-05 16:14 millert
11181:
11182: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11183: (correct) PAM code Tgetpass now takes an echo flag for use with
11184: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11185: useless umask setting Change error from BAD_ALLOCATION ->
11186: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11187: auth.c for consistency
11188:
11189: 1999-07-05 16:11 millert
11190:
11191: * sudo.c: Some -Wall and kill some trailing spaces
11192:
11193: 1999-07-05 16:10 millert
11194:
11195: * configure.in: define -D__EXTENSIONS__ for solaris so we get
11196: crypt() proto
11197:
11198: 1999-06-22 09:42 millert
11199:
11200: * RUNSON: add Dynix 4.4.4
11201:
11202: 1999-06-22 09:30 millert
11203:
11204: * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11205: version, fall back on old kerb4 auth code
11206:
11207: 1999-06-22 06:41 millert
11208:
11209: * INSTALL: clarify some things
11210:
11211: 1999-06-22 06:38 millert
11212:
11213: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11214:
11215: 1999-06-14 19:47 millert
11216:
11217: * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11218:
11219: 1999-06-03 12:34 millert
11220:
11221: * tgetpass.c: Fix open(2) return value checking, was NULL for
11222: fopen, should be -1 for open
11223:
11224: 1999-06-03 12:06 millert
11225:
11226: * configure: regen
11227:
11228: 1999-06-03 12:06 millert
11229:
11230: * configure.in: better wording for solaris pam notice
11231:
11232: 1999-06-03 11:52 millert
11233:
11234: * CHANGES: document recent changes
11235:
11236: 1999-06-03 11:52 millert
11237:
11238: * TROUBLESHOOTING: Update shadow password section
11239:
11240: 1999-06-03 11:51 millert
11241:
11242: * auth.c: move authentication code from check.c to auth.c
11243:
11244: 1999-06-03 11:51 millert
11245:
11246: * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11247:
11248: 1999-05-16 21:36 millert
11249:
11250: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11251: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11252: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11253: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11254: interface-related defines to interfaces.h so we don't have to
11255: include <netinet/in.h> everywhere.
11256:
11257: 1999-05-14 12:30 millert
11258:
11259: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11260: logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11261: braindeath with our own SUDO_MAX_PASS.
11262: It turns out the old DES crypt does the right thing with
11263: passwords
11264: longert than 8 characters.
11265: o Fix common typo (necesary -> necessary)
11266: o Update TODO list
11267:
11268: 1999-05-03 12:00 millert
11269:
11270: * sudo.c: set $LOGNAME when we set $USER
11271:
11272: 1999-04-27 00:00 millert
11273:
11274: * INSTALL: add comment about digital unix and interfaces.c warning
11275: with gcc
11276:
11277: 1999-04-15 01:12 millert
11278:
11279: * sample.sudoers: use modern paths and give examples for some of
11280: the new parser features
11281:
11282: 1999-04-10 13:03 millert
11283:
11284: * parse.c: fix comment
11285:
11286: 1999-04-10 00:49 millert
11287:
11288: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11289: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11290: parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11291: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11292: Function names should be flush with the start of the line so they
11293: can be found trivially in an editor and with grep
11294:
11295: 1999-04-10 00:40 millert
11296:
11297: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11298: parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11299: is already void, no need to cast it
11300:
11301: 1999-04-10 00:37 millert
11302:
11303: * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11304: (this should not be possible)
11305:
11306: 1999-04-10 00:10 millert
11307:
11308: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11309: testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11310: listed in sudoers) to the command instead of stashing the struct
11311: stat. Should be safer.
11312:
11313: 1999-04-08 19:56 millert
11314:
11315: * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11316: release
11317:
11318: 1999-04-07 20:20 millert
11319:
11320: * CHANGES: updated
11321:
11322: 1999-04-07 19:18 millert
11323:
11324: * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11325: sudoers.pod: You can now specifiy a host list instead of just a
11326: host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11327: now works.
11328:
11329: 1999-04-07 02:59 millert
11330:
11331: * testsudoers.c: Quiet -Wall
11332:
11333: 1999-04-07 02:50 millert
11334:
11335: * parse.yacc: Move the push from the beginning of cmndspec to the
11336: end. This means we no longer have to do a push at the end of
11337: privilege, just reset some values.
11338:
11339: 1999-04-06 20:24 millert
11340:
11341: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11342: and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11343: most everywhere
11344:
11345: 1999-04-06 14:12 millert
11346:
11347: * sudoers.pod: modernize paths and update su example based on
11348: sample.sudoers one
11349:
11350: 1999-04-06 14:06 millert
11351:
11352: * sample.sudoers: New runas semantics
11353:
11354: 1999-04-06 13:54 millert
11355:
11356: * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11357: configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11358: ourselves so we don't need to rely on the system strdup(3) which
11359: may or may not exist. There is now no need to provide strdup()
11360: for those w/o it. Also, the prototype for estrdup() was wrong,
11361: it returns char * and its param is const.
11362:
11363: 1999-04-06 13:40 millert
11364:
11365: * getcwd.c: $Sudo tag
11366:
11367: 1999-04-06 13:20 millert
11368:
11369: * check.c: buf should be prompt; Michael Robokoff
11370: <mrobo@networkcs.com>
11371:
11372: 1999-04-06 01:40 millert
11373:
11374: * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11375: operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11376: and User_Alias.
11377:
11378: 1999-04-06 01:38 millert
11379:
11380: * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11381: GLOBAL_PROBLEM
11382:
11383: 1999-04-06 01:08 millert
11384:
11385: * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11386: as subscript.
11387:
11388: 1999-04-06 01:00 millert
11389:
11390: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11391: VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11392: command but the NOPASSWD flag was set. Make runasspec,
11393: runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11394: support for '!' in the runas list Fix double printing of '%' and
11395: '+' for groups and netgroups respectively Add *_matched macros
11396: (no need for local stack variable). Should only be used directly
11397: after a pop (since top must be >= 2).
11398:
11399: 1999-04-05 23:25 millert
11400:
11401: * aclocal.m4, configure.in: Add copyright, somewhat silly
11402:
11403: 1999-04-05 16:57 millert
11404:
11405: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11406: check_sia.c, compat.h, config.h.in, configure, configure.in,
11407: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11408: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11409: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11410: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11411: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11412: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11413: visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11414: 1.6 and combine copyright statements
11415:
11416: 1999-04-05 16:30 millert
11417:
11418: * sample.sudoers: Use ! not ^ to do negation
11419:
11420: 1999-04-05 16:29 millert
11421:
11422: * lex.yy.c: regen
11423:
11424: 1999-04-05 16:28 millert
11425:
11426: * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11427: across entris in a command list. Add a PASSWD tag to reverse
11428: NOPASSWD. When you override a runas or *PASSWD tag the value
11429: given becomes the new default for the rest of the command list.
11430:
11431: 1999-04-02 16:03 millert
11432:
11433: * CHANGES, RUNSON: update for 1.5.9
11434:
11435: 1999-04-02 16:02 millert
11436:
11437: * visudo.c: Shift return value of system(3) by 8 to get real exit
11438: value and if it is not 1 or 0 print the retval along with the
11439: error message.
11440:
11441: 1999-03-30 16:45 millert
11442:
11443: * Makefile.in: testsudoers needs LIBOBJS too
11444:
11445: 1999-03-30 12:17 millert
11446:
11447: * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11448: like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11449: would not allow millert to run ls as root.
11450:
11451: 1999-03-30 01:08 millert
11452:
11453: * CHANGES: new change
11454:
11455: 1999-03-30 01:03 millert
11456:
11457: * parse.yacc: Save entries that match a ! command on the matching
11458: stack too
11459:
11460: 1999-03-30 01:01 millert
11461:
11462: * sudo.c: Make sudo's usage info better when mutually exclusive
11463: args are given and don't rely on argument order to detect this;
11464: nick@zeta.org.au
11465:
11466: 1999-03-29 15:03 millert
11467:
11468: * CHANGES, Makefile.in, RUNSON: updates from CU
11469:
11470: 1999-03-28 23:38 millert
11471:
11472: * Makefile.in: use gzip
11473:
11474: 1999-03-28 23:31 millert
11475:
11476: * parse.yacc: Fix off by one error introduced in *alloc changes
11477:
11478: 1999-03-28 23:05 millert
11479:
11480: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11481: check_sia.c, compat.h, config.h.in, configure, configure.in,
11482: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11483: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11484: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11485: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11486: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11487: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11488: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11489: emul/utime.h: ++version
11490:
11491: 1999-03-28 21:59 millert
11492:
11493: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11494: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11495: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11496: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11497: emalloc/erealloc/estrdup
11498:
11499: 1999-03-28 20:29 millert
11500:
11501: * alloc.c: error checking memory allocation routines
11502:
11503: 1999-03-28 19:23 millert
11504:
11505: * parse.yacc: Still not right, this fixes it for real
11506:
11507: 1999-03-28 19:08 millert
11508:
11509: * parse.yacc: Fix for previous commit
11510:
11511: 1999-03-28 19:05 millert
11512:
11513: * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11514: when mixing different runas specs and ! commands. For example:
11515: millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11516: allow millert to run whoami as root as well as daemon when it
11517: should just allow daemon. The problem was that comma-separated
11518: commands in a list shared the same entry on the matching stack.
11519: Now they get their own entry iff there is a full match. It may
11520: be better to just make the runas spec persistent across all
11521: commands in a list like the user and host entries of the matching
11522: stack. However, since that is a fairly major change it should
11523: gets its own minor rev increase.
11524:
11525: 1999-03-28 13:50 millert
11526:
11527: * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11528: warning on Linux
11529:
11530: 1999-03-26 13:17 millert
11531:
11532: * CHANGES: updates
11533:
11534: 1999-03-26 13:12 millert
11535:
11536: * sample.sudoers: better su entry
11537:
11538: 1999-03-26 13:10 millert
11539:
11540: * configure: regen
11541:
11542: 1999-03-26 13:09 millert
11543:
11544: * check.c, configure.in: new pam code that works on solaris, should
11545: work on linux too; aelberg@home.com
11546:
11547: 1999-03-19 14:44 millert
11548:
11549: * RUNSON: more entries
11550:
11551: 1999-03-19 14:43 millert
11552:
11553: * config.h.in: only include strings.h if there is no string.h
11554:
11555: 1999-03-17 15:25 millert
11556:
11557: * config.guess: Sinix is now being called ReliantUNIX;
11558: bjjackso@us.oracle.com
11559:
11560: 1999-03-13 13:37 millert
11561:
11562: * sudo.c: shost must be set before log functions are called #ifdef
11563: HOST_IN_LOG
11564:
11565: 1999-03-07 18:34 millert
11566:
11567: * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11568: command args. Stop processing an arg when you hit a backslash so
11569: the quoted-character detection can catch it.
11570:
11571: 1999-02-26 01:19 millert
11572:
11573: * interfaces.c: include sys/time.h; aparently AIX needs it.
11574: ppz@cdu.elektra.ru
11575:
11576: 1999-02-23 19:43 millert
11577:
11578: * configure, configure.in: add missing case statement so
11579: --without-sendmail works
11580:
11581: 1999-02-22 21:51 millert
11582:
11583: * CHANGES: more
11584:
11585: 1999-02-22 15:10 millert
11586:
11587: * configure, configure.in: only search for -lsun in irix <= 4.x
11588:
11589: 1999-02-22 15:01 millert
11590:
11591: * configure, configure.in: back out last configure.in change now
11592: that I've hacked autoconf to fix the real problem and add a
11593: missing newline
11594:
11595: 1999-02-22 14:32 millert
11596:
11597: * CHANGES: updated
11598:
11599: 1999-02-22 14:05 millert
11600:
11601: * getcwd.c: add def of dirfd() for those without it
11602:
11603: 1999-02-22 10:58 millert
11604:
11605: * configure.in, configure: When falling back to checking for
11606: socket() when linking with "-lsocket -lnsl" check for main()
11607: instead since autoconf has already cached the results of checking
11608: for socket() in -lsocket. This is really an autoconf bug as it
11609: should use the extra libs as part of the cache variable name.
11610:
11611: 1999-02-22 10:47 millert
11612:
11613: * configure.in: typo
11614:
11615: 1999-02-21 15:18 millert
11616:
11617: * configure.in: fix occurrence of $with_timeout that should be
11618: $with_password_timeout;
11619: Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11620:
11621: 1999-02-17 11:40 millert
11622:
11623: * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11624: espie@openbsd.org
11625:
11626: 1999-02-11 01:41 millert
11627:
11628: * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11629: it does not have it
11630:
11631: 1999-02-09 13:11 millert
11632:
11633: * configure, configure.in: define for_BSD_TYPES irix
11634:
11635: 1999-02-06 19:47 millert
11636:
11637: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11638: clear that it is the user's password, not root's, that we want.
11639:
11640: 1999-02-06 19:43 millert
11641:
11642: * check.c, sudo.h: If the user enters an empty password and really
11643: has no password, accept the empty password they entered.
11644: Perviously, they could enter anything *but* an empty password.
11645: Also, add GETPASS macro that calls either tgetpass() or getpass()
11646: depending on how sudo was configured. Problem noted by
11647: jdg@maths.qmw.ac.uk
11648:
11649: 1999-02-02 23:32 millert
11650:
11651: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11652: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11653: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11654: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11655: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11656: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11657: emul/utime.h: add explicate copyright
11658:
11659: 1999-02-02 23:16 millert
11660:
11661: * CHANGES: mention -lsocket, -lnsl configure changes
11662:
11663: 1999-02-02 17:54 millert
11664:
11665: * sudo.c: Don't clobber errno after calling check_sudoers().
11666:
11667: 1999-01-31 19:46 millert
11668:
11669: * configure.in, configure: When linking with both -lsocket and
11670: -lnsl be sure to do so in that order. Also, when we can't find
11671: socket() or inet_addr() and have to try linking with both libs,
11672: issue a warning.
11673:
11674: 1999-01-31 19:45 millert
11675:
11676: * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11677:
11678: 1999-01-23 12:18 millert
11679:
11680: * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11681: entry
11682:
11683: 1999-01-22 13:13 millert
11684:
11685: * configure, CHANGES, INSTALL, configure.in: fix and correctly
11686: document --with-umask; problem noted by adap@adap.org
11687:
11688: 1999-01-19 20:38 millert
11689:
11690: * configure.in, configure: only use /usr/{man,catman}/local to
11691: store man pages if suer didn't override prefix or mandir
11692:
11693: 1999-01-19 20:24 millert
11694:
11695: * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11696: take an arg
11697:
11698: 1999-01-18 21:53 millert
11699:
11700: * RUNSON: updates from users
11701:
11702: 1999-01-18 21:04 millert
11703:
11704: * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11705: 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11706:
11707: 1999-01-18 20:00 millert
11708:
11709: * configure, configure.in: better fix for the problem of unresolved
11710: symbols in -lnsl or -lsocket
11711:
11712: 1999-01-18 19:39 millert
11713:
11714: * configure, configure.in: when checking for functions in -lnsl and
11715: -lsocket link with both of them to avoid unresolved symbols on
11716: some weirdo systems
11717:
11718: 1999-01-17 20:49 millert
11719:
11720: * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11721: RCS before the RCS->CVS switch
11722:
11723: 1999-01-17 18:16 millert
11724:
11725: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11726: configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11727: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11728: interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11729: parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11730: sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11731: tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11732: emul/utime.h: add sudo tags
11733:
11734: 1999-01-17 17:53 millert
11735:
11736: * version.h, sudo.h: testing Sudo tag
11737:
11738: 1999-01-17 17:40 millert
11739:
11740: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
11741: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
11742: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11743: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
11744: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11745: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
11746: sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
11747: tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
11748: emul/utime.h: crank version and regen files
11749:
11750: 1999-01-17 17:27 millert
11751:
11752: * Makefile.in: kill rcs goop in update_version and fix now that
11753: version is a const
11754:
11755: 1999-01-17 17:08 millert
11756:
11757: * INSTALL, check.c, config.h.in, configure, configure.in,
11758: logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
11759: fcusack@iconnet.net
11760:
11761: 1999-01-17 16:45 millert
11762:
11763: * realpath.c, sudo_realpath.c: we no longer use realpath
11764:
11765: 1999-01-17 16:44 millert
11766:
11767: * qualify.c: replaced by find_path.c
11768:
11769: 1999-01-17 16:43 millert
11770:
11771: * options.h: all options are now configure flags
11772:
11773: 1999-01-17 16:42 millert
11774:
11775: * lex.yy.c: regen
11776:
11777: 1999-01-17 16:41 millert
11778:
11779: * getwd.c: superceded by getcwd.c
11780:
11781: 1999-01-17 16:36 millert
11782:
11783: * getpass.c: superceded by tgetpass.c
11784:
11785: 1999-01-17 16:36 millert
11786:
11787: * SUPPORTED: superceded by RUNSON
11788:
11789: 1999-01-17 16:33 millert
11790:
11791: * OPTIONS: No longer used now that we have configure options for
11792: everything.
11793:
11794: 1999-01-17 16:32 millert
11795:
11796: * configure: regen based on configure.in
11797:
11798: 1999-01-17 16:31 millert
11799:
11800: * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
11801: sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
11802: on sudo.pod, sudoers.pod, and visudo.pod
11803:
11804: 1998-12-11 12:16 millert
11805:
11806: * check.c: fix tty tickets in remove_timestamp (didn't use ':')
11807:
11808: 1998-12-07 16:16 millert
11809:
11810: * interfaces.c: close sock when we are done with it
11811:
11812: 1998-11-27 19:37 millert
11813:
11814: * parse.yacc: never say "error on line -1"
11815:
11816: 1998-11-23 23:38 millert
11817:
11818: * configure.in: check for -lnsl before -lsocket
11819:
11820: 1998-11-23 23:29 millert
11821:
11822: * configure.in: quote '[', ']' used in ranges correctly
11823:
11824: 1998-11-21 17:54 millert
11825:
11826: * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
11827:
11828: 1998-11-20 18:33 millert
11829:
11830: * version.h: 1.5.7
11831:
11832: 1998-11-20 18:33 millert
11833:
11834: * INSTALL: more info for 1.5.7
11835:
11836: 1998-11-20 18:30 millert
11837:
11838: * README: update for 1.5.7
11839:
11840: 1998-11-20 14:26 millert
11841:
11842: * parse.yacc: make increases of cm_list_size and ga_list_size be
11843: similar to increases of stacksize (ie: >= not > in initial
11844: compare).
11845:
11846: 1998-11-20 14:22 millert
11847:
11848: * parse.yacc: when we get a syntax error, report it for the
11849: previous line since that's generally where the error occurred.
11850:
11851: 1998-11-18 15:31 millert
11852:
11853: * config.h.in, configure.in, interfaces.c: add back check for
11854: sys/sockio.h but only use it if SIOCGIFCONF is not defined
11855:
11856: 1998-11-18 15:25 millert
11857:
11858: * config.h.in: define BSD_COMP for svr4
11859:
11860: 1998-11-17 23:16 millert
11861:
11862: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
11863: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
11864: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
11865: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
11866: -Wall
11867:
11868: 1998-11-17 23:10 millert
11869:
11870: * configure.in: kill check for sockio,h
11871:
11872: 1998-11-17 23:10 millert
11873:
11874: * config.h.in: no more HAVE_SYS_SOCKIO_H
11875:
11876: 1998-11-17 22:51 millert
11877:
11878: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
11879: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
11880: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
11881: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11882: -Wall
11883:
11884: 1998-11-16 17:38 millert
11885:
11886: * sudo.c: add missing inform_user()
11887:
11888: 1998-11-13 19:21 millert
11889:
11890: * find_path.c: return NOT_FOUND if given fully qualified path and
11891: it does not exist previously it would perror(ENOENT) which
11892: bypasses the option to not leak path info
11893:
11894: 1998-11-13 19:20 millert
11895:
11896: * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
11897: for kerb, check for -ldes
11898:
11899: 1998-11-13 14:19 millert
11900:
11901: * INSTALL: tty tickets are user:tty now
11902:
11903: 1998-11-13 14:10 millert
11904:
11905: * check.c: when using tty tickets make it user:tty not user.tty as
11906: a username could have a '.' in it
11907:
11908: 1998-11-09 19:15 millert
11909:
11910: * sudo.c: add "ignoring foo found in ." for auth successful case
11911:
11912: 1998-11-09 17:57 millert
11913:
11914: * sudo.c: add missing printf param
11915:
11916: 1998-11-08 15:56 millert
11917:
11918: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
11919: go back to printing "command not found" unless
11920: --disable-path-info specified. Also, tell user when we ignore
11921: '.' in their path and it would have been used but for
11922: --with-ignore-dot.
11923:
11924: 1998-11-08 13:51 millert
11925:
11926: * check.c, sudo.c: Only one space after a colon, not two, in
11927: printf's
11928:
11929: 1998-11-05 12:59 millert
11930:
11931: * sudo.pod: document setting $USER
11932:
11933: 1998-11-04 22:24 millert
11934:
11935: * check.c: fix bugs with prompt expansion
11936:
11937: 1998-11-04 21:21 millert
11938:
11939: * sudo.c: set $USER for root too
11940:
11941: 1998-11-04 17:13 millert
11942:
11943: * getspwuid.c: typo
11944:
11945: 1998-11-04 17:07 millert
11946:
11947: * configure.in: HP-UX's iscomsec is in -lsec, not libc
11948:
11949: 1998-11-03 22:24 millert
11950:
11951: * configure.in: remove some entries in the OS case statement that
11952: did nothing
11953:
11954: 1998-11-03 22:19 millert
11955:
11956: * TROUBLESHOOTING: add "cd" section and flush out syslog section
11957:
11958: 1998-11-03 20:51 millert
11959:
11960: * Makefile.in: no more sudo-lex.yy.c
11961:
11962: 1998-11-03 20:50 millert
11963:
11964: * check_sia.c: add custom prompt support
11965:
11966: 1998-11-03 20:40 millert
11967:
11968: * sudo.c: kill perror("malloc") since we already have a good error
11969: messages pw_ent -> pw for brevity set $USER if -u specified
11970:
11971: 1998-11-03 20:39 millert
11972:
11973: * parse.c: kill perror("malloc") since we already have a good error
11974: messages pw_ent -> pw for brevity when checking if %group
11975: matches, look up user in password file so that %groups works in a
11976: RunAs spec.
11977:
11978: 1998-11-03 20:39 millert
11979:
11980: * logging.c, parse.yacc: kill perror("malloc") since we already
11981: have a good error messages
11982:
11983: 1998-11-03 20:38 millert
11984:
11985: * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
11986: perror("malloc") since we already have a good error messages
11987: pw_ent -> pw for brevity
11988:
11989: 1998-11-03 15:03 millert
11990:
11991: * tgetpass.c: the prompt is expanded before tgetpass is called
11992:
11993: 1998-11-03 15:03 millert
11994:
11995: * sudo.h: tgetpass now has the same args as getpass again
11996:
11997: 1998-11-03 15:02 millert
11998:
11999: * getspwuid.c: add iscomsec, issecure support
12000:
12001: 1998-11-03 15:02 millert
12002:
12003: * check.c: we now expand any %h or %u in the prompt before passing
12004: to tgetpass
12005:
12006: 1998-11-03 14:58 millert
12007:
12008: * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12009:
12010: 1998-11-03 14:56 millert
12011:
12012: * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12013:
12014: 1998-11-03 14:55 millert
12015:
12016: * configure.in: add check for iscomsec in HP-UX
12017:
12018: 1998-11-03 14:51 millert
12019:
12020: * configure.in: check for issecure if we have getpwanam on SunOS
12021: some options are incompatible with DUNIX SIA check for dispcrypt
12022: on DUNIX
12023:
12024: 1998-10-25 15:21 millert
12025:
12026: * config.h.in: add HAVE_DISPCRYPT
12027:
12028: 1998-10-25 15:21 millert
12029:
12030: * secureware.c: add back support for non-dispcrypt based checking
12031: for older DUNIX
12032:
12033: 1998-10-25 00:51 millert
12034:
12035: * INSTALL: sia changes
12036:
12037: 1998-10-25 00:48 millert
12038:
12039: * configure.in: SIA becomes the default on Digital UNIX now havbe
12040: --disable-sia to turn it off...
12041:
12042: 1998-10-24 23:52 millert
12043:
12044: * check.c: move local includes after system ones
12045:
12046: 1998-10-24 19:28 millert
12047:
12048: * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12049: INCORRECT_PASSWORD or an insult to stderr
12050:
12051: 1998-10-24 19:07 millert
12052:
12053: * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12054: password. Only the first iteration was working.
12055:
12056: 1998-10-21 21:00 millert
12057:
12058: * aclocal.m4: don't trust UID_MAX or MAXUID
12059:
12060: 1998-10-21 20:35 millert
12061:
12062: * configure.in: fix two pastos
12063:
12064: 1998-10-21 20:30 millert
12065:
12066: * configure.in: fix typo
12067:
12068: 1998-10-21 20:19 millert
12069:
12070: * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12071: legal to be negative in DUNX 5.0
12072:
12073: 1998-10-21 20:15 millert
12074:
12075: * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12076: -lm but check for -ldb since DUNX < 4.0 lacks it
12077:
12078: 1998-10-21 19:50 millert
12079:
12080: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12081: secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12082: 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12083: exist).
12084:
12085: 1998-10-20 17:22 millert
12086:
12087: * INSTALL: updated --with-editor blurb
12088:
12089: 1998-10-20 17:21 millert
12090:
12091: * TROUBLESHOOTING: tell how to put sudoers in a different dir
12092:
12093: 1998-10-20 16:22 millert
12094:
12095: * configure.in: add missing quotes around $with_editor
12096:
12097: 1998-10-20 14:00 millert
12098:
12099: * configure.in: typo in --with-editor bits
12100:
12101: 1998-10-20 01:24 millert
12102:
12103: * INSTALL: I don't expect it to work on Solaris
12104:
12105: 1998-10-20 01:24 millert
12106:
12107: * check.c: add back security/pam_misc.h
12108:
12109: 1998-10-19 17:13 millert
12110:
12111: * INSTALL: remove dunix note since configure checks for this now
12112:
12113: 1998-10-19 16:30 millert
12114:
12115: * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12116: bad)
12117:
12118: 1998-10-19 14:32 millert
12119:
12120: * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12121: dispcrypt(3)
12122:
12123: 1998-10-19 14:32 millert
12124:
12125: * config.h.in: add HAVE_INITPRIVS
12126:
12127: 1998-10-19 14:31 millert
12128:
12129: * sudo.c: call initprivs() if we have it for getprpwuid later on
12130:
12131: 1998-10-19 14:30 millert
12132:
12133: * Makefile.in: clean pathnames.h too
12134:
12135: 1998-10-19 14:28 millert
12136:
12137: * configure.in: quote "Sorry, try again." with [] since it has a
12138: comma in it set LIBS when we add stuff to SUDO_LIBS set
12139: SECUREWARE when we find getprpwuid() so we can check for
12140: bigcrypt, set_auth_parameters, and initprivs later.
12141:
12142: 1998-10-19 13:48 millert
12143:
12144: * INSTALL: update Digital UNIX note about acl.h
12145:
12146: 1998-10-18 20:26 millert
12147:
12148: * INSTALL: add --with-sia --without-root-sudo ->
12149: --disable-root-sudo some reordering
12150:
12151: 1998-10-18 20:22 millert
12152:
12153: * secureware.c: add whitespace
12154:
12155: 1998-10-18 20:22 millert
12156:
12157: * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12158: sudo.h: add SIA support
12159:
12160: 1998-10-18 20:21 millert
12161:
12162: * check_sia.c: Initial revision
12163:
12164: 1998-10-18 19:42 millert
12165:
12166: * configure.in: when checking for -lsocket, -lnsl, and -linet,
12167: check for the specific functions we need from them.
12168:
12169: 1998-10-18 19:10 millert
12170:
12171: * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12172:
12173: 1998-10-18 18:15 millert
12174:
12175: * sudo.h, Makefile.in: added check_secureware
12176:
12177: 1998-10-18 18:12 millert
12178:
12179: * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12180: bits
12181:
12182: 1998-10-18 18:00 millert
12183:
12184: * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12185: other sets defined. configure now does that for us
12186:
12187: 1998-10-18 17:45 millert
12188:
12189: * configure.in: move some --with options around change a bunch of
12190: echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12191:
12192: 1998-10-18 01:09 millert
12193:
12194: * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12195: that caused a syntax error add some echo verbage
12196:
12197: 1998-10-17 18:08 millert
12198:
12199: * check.c: moved SecureWare stuff into secureware.c
12200:
12201: 1998-10-17 18:07 millert
12202:
12203: * secureware.c: Initial revision
12204:
12205: 1998-10-17 17:02 millert
12206:
12207: * INSTALL: update url to solaris gcc bins
12208:
12209: 1998-10-17 16:39 millert
12210:
12211: * INSTALL: change option formatter and flesh out someentries
12212:
12213: 1998-10-17 16:18 millert
12214:
12215: * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12216: environment variable
12217:
12218: 1998-10-17 16:01 millert
12219:
12220: * BUGS: everything is now done via configure
12221:
12222: 1998-10-17 16:00 millert
12223:
12224: * README: prev rev was 1.5.6
12225:
12226: 1998-10-17 00:33 millert
12227:
12228: * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12229: correctly
12230:
12231: 1998-10-17 00:32 millert
12232:
12233: * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12234: the Makefile
12235:
12236: 1998-10-17 00:31 millert
12237:
12238: * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12239: sudoers_gid, sudoers_mode from configure
12240:
12241: 1998-10-17 00:30 millert
12242:
12243: * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12244: substituted into the Makefile, not config.h
12245:
12246: 1998-10-17 00:30 millert
12247:
12248: * INSTALL: document all --with/--enable options
12249:
12250: 1998-10-15 02:25 millert
12251:
12252: * insults.h: options.h is no more
12253:
12254: 1998-10-15 02:25 millert
12255:
12256: * config.h.in: assimilated options.h
12257:
12258: 1998-10-15 02:24 millert
12259:
12260: * configure.in: moved options from options.h to configure
12261:
12262: 1998-10-15 01:41 millert
12263:
12264: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12265: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12266: sudo_setenv.c, visudo.c: no more options.h
12267:
12268: 1998-10-15 01:39 millert
12269:
12270: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12271: to options.h
12272:
12273: 1998-10-15 01:32 millert
12274:
12275: * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12276:
12277: 1998-10-15 00:10 millert
12278:
12279: * tgetpass.c: if select return < -1 still prompt for pw
12280:
12281: 1998-10-15 00:03 millert
12282:
12283: * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12284: IGNORE_DOT_PATH into configure options
12285:
12286: 1998-10-14 23:57 millert
12287:
12288: * parse.c: FAST_MATCH is no longer an optino
12289:
12290: 1998-10-14 23:52 millert
12291:
12292: * check.c: remove_timestamp() if timestamp is preposterous
12293:
12294: 1998-10-14 23:36 millert
12295:
12296: * options.h: convert more options to --with/--enable
12297:
12298: 1998-10-14 23:36 millert
12299:
12300: * INSTALL, aclocal.m4: logfile -> logpath
12301:
12302: 1998-10-14 23:31 millert
12303:
12304: * configure.in: convert more options into --with and --enable
12305:
12306: 1998-10-14 23:28 millert
12307:
12308: * tgetpass.c: catch EINTR in select and restart
12309:
12310: 1998-10-14 23:15 millert
12311:
12312: * logging.c: sys/errno -> errno
12313:
12314: 1998-09-24 11:40 millert
12315:
12316: * sudo.c: UMASK -> SUDO_UMASK.
12317:
12318: 1998-09-24 11:36 millert
12319:
12320: * check.c, logging.c: time.h, not sys/time.h
12321:
12322: 1998-09-21 19:52 millert
12323:
12324: * logging.c: MAILER -> _PATH_SENDMAIL
12325:
12326: 1998-09-21 00:06 millert
12327:
12328: * INSTALL, configure.in: no more --with-C2, now it is
12329: --disable-shadow
12330:
12331: 1998-09-21 00:00 millert
12332:
12333: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12334: getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12335: Always include shadow support if the platform supports it and the
12336: user did not disable it via configure
12337:
12338: 1998-09-20 19:48 millert
12339:
12340: * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12341:
12342: 1998-09-20 19:16 millert
12343:
12344: * Makefile.in: pathnames.h -> pathnames.h.in
12345:
12346: 1998-09-20 19:14 millert
12347:
12348: * check.c: fix version string
12349:
12350: 1998-09-20 19:12 millert
12351:
12352: * check.c: move pam_conv to be static to auth function remove
12353: pam_misc.h (solaris doesn't have one)
12354:
12355: 1998-09-20 19:10 millert
12356:
12357: * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12358: SUDO_PROG_PWD
12359:
12360: 1998-09-20 19:10 millert
12361:
12362: * configure.in: munge pathnames.h.in -> pathnames.h kill
12363: SUDO_PROG_PWD
12364:
12365: 1998-09-20 19:10 millert
12366:
12367: * pathnames.h.in: convert to pathnames.h.in
12368:
12369: 1998-09-18 20:20 millert
12370:
12371: * configure.in: fix typo in sysv4 matching case /.
12372:
12373: 1998-09-18 01:29 millert
12374:
12375: * check.c: pam stuff needs to run as root, not user, for shadow
12376: passwords
12377:
12378: 1998-09-17 12:26 millert
12379:
12380: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12381: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12382: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12383: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12384: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12385: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12386: BUGS, INSTALL, README, configure.in: updated version
12387:
12388: 1998-09-17 12:13 millert
12389:
12390: * check.c: user version.h for long message
12391:
12392: 1998-09-17 11:53 millert
12393:
12394: * check.c: this is version 1.5.6
12395:
12396: 1998-09-16 13:42 millert
12397:
12398: * Makefile.in: remove errant backslash
12399:
12400: 1998-09-14 22:25 millert
12401:
12402: * options.h, parse.yacc, pathnames.h.in: fix version string
12403:
12404: 1998-09-14 22:02 millert
12405:
12406: * BUGS, CHANGES, TODO: updtaed for 1.5.6
12407:
12408: 1998-09-14 22:02 millert
12409:
12410: * RUNSON: updated for 1.5.6
12411:
12412: 1998-09-14 11:48 millert
12413:
12414: * interfaces.c: kill unused localhost_mask var copy if name to
12415: ifr_tmp after we zero it
12416:
12417: 1998-09-13 15:50 millert
12418:
12419: * INSTALL: Better description of new vs. old sudoers modes fix some
12420: typos better description of /usr/ucb/cc gotchas on slowaris
12421:
12422: 1998-09-13 15:49 millert
12423:
12424: * Makefile.in: add sample.pam
12425:
12426: 1998-09-13 15:32 millert
12427:
12428: * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12429:
12430: 1998-09-12 11:10 millert
12431:
12432: * README: mention TROUBLESHOOTING more fix some typos
12433:
12434: 1998-09-11 20:30 millert
12435:
12436: * configure.in: move --enable/--disable to be after --with
12437:
12438: 1998-09-11 20:30 millert
12439:
12440: * INSTALL: document --enable/--disable
12441:
12442: 1998-09-11 20:26 millert
12443:
12444: * INSTALL: document --with-pam
12445:
12446: 1998-09-11 19:47 millert
12447:
12448: * configure.in: Add message for pam users
12449:
12450: 1998-09-11 19:27 millert
12451:
12452: * sample.pam: Initial revision
12453:
12454: 1998-09-11 19:23 millert
12455:
12456: * config.h.in: fix HAVE_PAM
12457:
12458: 1998-09-11 19:19 millert
12459:
12460: * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12461: <GCalvin@kenwoodusa.com>
12462:
12463: 1998-09-10 18:51 millert
12464:
12465: * config.h.in: add HOST_IN_LOG and WRAP_LOG
12466:
12467: 1998-09-10 18:51 millert
12468:
12469: * logging.c: add WRAP_LOG and HOST_IN_LOG
12470:
12471: 1998-09-10 18:37 millert
12472:
12473: * configure.in: add --enable-log-host and --enable-log-wrap
12474:
12475: 1998-09-10 18:32 millert
12476:
12477: * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12478: --with-timedir
12479:
12480: 1998-09-08 20:45 millert
12481:
12482: * compat.h: add howmany macro
12483:
12484: 1998-09-08 20:43 millert
12485:
12486: * tgetpass.c: include sys/param.h to get howmany macro
12487:
12488: 1998-09-07 20:42 millert
12489:
12490: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12491: add RUNAS_DEFAULT
12492:
12493: 1998-09-07 12:51 millert
12494:
12495: * fnmatch.c: bring in stdio.h for NULL
12496:
12497: 1998-09-07 12:50 millert
12498:
12499: * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12500:
12501: 1998-09-07 12:43 millert
12502:
12503: * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12504:
12505: 1998-09-07 12:42 millert
12506:
12507: * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12508:
12509: 1998-09-07 12:41 millert
12510:
12511: * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12512: if secureware
12513:
12514: 1998-09-07 12:39 millert
12515:
12516: * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12517:
12518: 1998-09-07 12:06 millert
12519:
12520: * interfaces.c: initialize previfname
12521:
12522: 1998-09-07 11:51 millert
12523:
12524: * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12525: SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12526: IFF_LOOPBACK instead of kludging it
12527:
12528: 1998-09-07 11:49 millert
12529:
12530: * configure.in: typo
12531:
12532: 1998-09-07 00:01 millert
12533:
12534: * Makefile.in: don't need special build line for sudo.tab.o
12535:
12536: 1998-09-06 23:58 millert
12537:
12538: * Makefile.in: don't clean sudo.tab.[ch]
12539:
12540: 1998-09-06 23:48 millert
12541:
12542: * sudo.c: Sudo should prompt for a password before telling the user
12543: that a command could not be found.
12544:
12545: 1998-09-06 23:47 millert
12546:
12547: * BUGS: for 1.5.6
12548:
12549: 1998-09-06 23:25 millert
12550:
12551: * INSTALL, README: no longer require yacc
12552:
12553: 1998-09-06 23:19 millert
12554:
12555: * Makefile.in: typo
12556:
12557: 1998-09-06 23:18 millert
12558:
12559: * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12560:
12561: 1998-09-06 23:09 millert
12562:
12563: * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12564: command args if you get a '='
12565:
12566: 1998-09-06 22:59 millert
12567:
12568: * insults.h: fix version ,
12569:
12570: 1998-09-06 22:57 millert
12571:
12572: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12573: fix version
12574:
12575: 1998-09-06 22:55 millert
12576:
12577: * getcwd.c: getcwd(3) from OpenBSD for those without it.
12578:
12579: 1998-09-06 22:51 millert
12580:
12581: * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12582:
12583: 1998-09-06 22:49 millert
12584:
12585: * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12586: a pipe to getpwd!
12587:
12588: 1998-09-06 22:41 millert
12589:
12590: * parse.c: use NAMLEN() macro
12591:
12592: 1998-09-06 22:34 millert
12593:
12594: * fnmatch.c: remove duplicate include of string.h
12595:
12596: 1998-09-06 22:28 millert
12597:
12598: * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12599:
12600: 1998-09-06 22:28 millert
12601:
12602: * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12603:
12604: 1998-09-06 22:28 millert
12605:
12606: * config.h.in: add dev_t and ino_t
12607:
12608: 1998-07-28 12:44 millert
12609:
12610: * check.c: fix OTP_ONLY for opie
12611:
12612: 1998-06-24 12:22 millert
12613:
12614: * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12615:
12616: 1998-05-19 00:10 millert
12617:
12618: * Makefile.in: make update_version saner
12619:
12620: 1998-05-18 23:32 millert
12621:
12622: * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12623:
12624: 1998-05-18 23:32 millert
12625:
12626: * configure.in: check for waitpid and wait3 or no waitpid
12627:
12628: 1998-05-18 23:31 millert
12629:
12630: * logging.c: used waitpid or wait3 if we have 'em
12631:
12632: 1998-05-02 14:16 millert
12633:
12634: * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12635: Faigon)
12636:
12637: 1998-04-27 20:09 millert
12638:
12639: * configure.in: don't need to explicately mention -lsocket -lnsl
12640: for sequent
12641:
12642: 1998-04-25 01:56 millert
12643:
12644: * configure.in: dynix should not link with -linet
12645:
12646: 1998-04-10 15:32 millert
12647:
12648: * INSTALL: mention that HP-UX doesn't ship with yacc
12649:
12650: 1998-04-06 22:35 millert
12651:
12652: * check.c: ignore kerberos if we can't get the local realm
12653:
12654: 1998-04-05 23:37 millert
12655:
12656: * configure.in, BUGS, INSTALL, README: ++version
12657:
12658: 1998-04-05 23:36 millert
12659:
12660: * version.h: ++
12661:
12662: 1998-04-05 23:35 millert
12663:
12664: * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12665: find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12666: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12667: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12668: visudo.c: updated version
12669:
12670: 1998-04-05 23:34 millert
12671:
12672: * check.c, sudo.h: fix version
12673:
12674: 1998-04-05 23:33 millert
12675:
12676: * getcwd.c: don't use popen/pclose. Do it inline.
12677:
12678: 1998-04-05 23:25 millert
12679:
12680: * lsearch.c: add rcsid
12681:
12682: 1998-04-05 23:21 millert
12683:
12684: * sudo.c: typo
12685:
12686: 1998-04-05 23:17 millert
12687:
12688: * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12689: insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12690: check.c: updated version
12691:
12692: 1998-04-05 23:15 millert
12693:
12694: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12695: MAX*
12696:
12697: 1998-04-05 23:14 millert
12698:
12699: * Makefile.in: getwd.c -> getcwd.c
12700:
12701: 1998-04-05 22:49 millert
12702:
12703: * config.h.in: kill HAVE_GETWD
12704:
12705: 1998-04-05 22:49 millert
12706:
12707: * configure.in: getcwd, not getwd
12708:
12709: 1998-04-05 22:48 millert
12710:
12711: * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12712: defeats the purpose
12713:
12714: 1998-03-31 00:15 millert
12715:
12716: * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12717:
12718: 1998-03-31 00:05 millert
12719:
12720: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12721: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12722: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12723: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12724: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12725: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12726: updated version
12727:
12728: 1998-03-30 23:54 millert
12729:
12730: * configure.in: support *-ccur-sysv4 and fix two typos
12731:
12732: 1998-03-27 19:52 millert
12733:
12734: * configure.in: don't echo about with_logfile and with_timedir
12735:
12736: 1998-03-27 19:49 millert
12737:
12738: * INSTALL: document --with-logfile and --with-timedir
12739:
12740: 1998-03-27 19:46 millert
12741:
12742: * aclocal.m4: support --with-logfile and --with-timedir
12743:
12744: 1998-03-27 19:46 millert
12745:
12746: * configure.in: Add --with-logfile and --with-timedir
12747:
12748: 1998-03-27 19:27 millert
12749:
12750: * sudo.c: change size computation of NewArgv for UNICOS
12751:
12752: 1998-02-18 20:10 millert
12753:
12754: * configure.in: treate -*-sysv4* like *-*-svr4
12755:
12756: 1998-02-18 18:19 millert
12757:
12758: * configure.in: fix spacing for --with-authenticate help
12759:
12760: 1998-02-18 16:39 millert
12761:
12762: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12763: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12764: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12765: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12766: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12767: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12768: updated version
12769:
12770: 1998-02-18 16:23 millert
12771:
12772: * parse.yacc: fix off by one error in push macro
12773:
12774: 1998-02-17 01:15 millert
12775:
12776: * configure.in: removed bogus alloca hack
12777:
12778: 1998-02-17 01:15 millert
12779:
12780: * check.c: added AIX 4.x authenticate() support
12781:
12782: 1998-02-17 01:11 millert
12783:
12784: * parse.yacc: include alloca.h if using bison and not gcc and it
12785: exists. fixes an alloca problem on hpux 10.x
12786:
12787: 1998-02-17 00:39 millert
12788:
12789: * INSTALL: mention --with-authenticate
12790:
12791: 1998-02-17 00:37 millert
12792:
12793: * configure.in: added AIX authenticate() support
12794:
12795: 1998-02-17 00:22 millert
12796:
12797: * config.h.in: add HAVE_AUTHENTICATE
12798:
12799: 1998-02-16 23:58 millert
12800:
12801: * interfaces.c: dynamically size ifconf buffer
12802:
12803: 1998-02-16 23:56 millert
12804:
12805: * configure.in: quote '[' and ']'
12806:
12807: 1998-02-16 21:42 millert
12808:
12809: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12810: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12811: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12812: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12813: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12814: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12815: updated version
12816:
12817: 1998-02-16 19:06 millert
12818:
12819: * visudo.pod: add ERRORS section
12820:
12821: 1998-02-16 18:57 millert
12822:
12823: * TROUBLESHOOTING: add busy stmp file explanation
12824:
12825: 1998-02-15 18:49 millert
12826:
12827: * configure.in: the name of the cached var that signals whether or
12828: not you are cross compiling changed. It is now
12829: ac_cv_prog_cc_cross
12830:
12831: 1998-02-11 16:26 millert
12832:
12833: * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
12834:
12835: 1998-02-06 21:55 millert
12836:
12837: * sample.sudoers, sudoers.pod: better example of su but not root su
12838:
12839: 1998-02-06 15:49 millert
12840:
12841: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12842: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12843: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12844: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12845: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12846: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12847: updated version
12848:
12849: 1998-02-06 15:48 millert
12850:
12851: * Makefile.in: correct regexp for updating version
12852:
12853: 1998-02-06 14:05 millert
12854:
12855: * tgetpass.c: remove bogus flush of stderr spew prompt before
12856: turning off echo. Seems to fix a weird problem where if sudo
12857: complained about a bogus stamp file the user would sometimes not
12858: have a chance to enter a password
12859:
12860: 1998-02-06 14:05 millert
12861:
12862: * check.c: fix bogus flush of stderr
12863:
12864: 1998-02-05 19:19 millert
12865:
12866: * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
12867:
12868: 1998-02-05 19:18 millert
12869:
12870: * configure.in: support hpux1[0-9] not just hpux10
12871:
12872: 1998-01-30 14:59 millert
12873:
12874: * parse.c: set sudoers_fp to nil after closing
12875:
12876: 1998-01-24 01:05 millert
12877:
12878: * config.guess, config.sub: updated from autoconf 2.12
12879:
12880: 1998-01-24 00:50 millert
12881:
12882: * configure.in: add *-*-svr4 rule
12883:
12884: 1998-01-22 22:53 millert
12885:
12886: * tgetpass.c: fix select usage for high fd's (dynamically allocate
12887: readfds)
12888:
12889: 1998-01-22 22:49 millert
12890:
12891: * check.c: kill extra whitespace
12892:
12893: 1998-01-22 19:28 millert
12894:
12895: * sudo.c: do an initgroups() before running a command, unless the
12896: target user is root.
12897:
12898: 1998-01-22 12:22 millert
12899:
12900: * TROUBLESHOOTING: tell people to use tabs, not spaces, in
12901: syslog.conf
12902:
12903: 1998-01-21 01:56 millert
12904:
12905: * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
12906: emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
12907: version
12908:
12909: 1998-01-21 01:32 millert
12910:
12911: * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
12912: updated version
12913:
12914: 1998-01-21 01:29 millert
12915:
12916: * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
12917: ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12918: check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
12919: updated version
12920:
12921: 1998-01-21 01:20 millert
12922:
12923: * Makefile.in: more tweaks to update_version
12924:
12925: 1998-01-21 01:19 millert
12926:
12927: * Makefile.in: fixed up update_version rule
12928:
12929: 1998-01-21 00:55 millert
12930:
12931: * configure.in: ++version
12932:
12933: 1998-01-21 00:53 millert
12934:
12935: * Makefile.in: removed supe of check.c
12936:
12937: 1998-01-21 00:51 millert
12938:
12939: * INSTALL: ++version I missed
12940:
12941: 1998-01-21 00:51 millert
12942:
12943: * RUNSON: updated
12944:
12945: 1998-01-21 00:48 millert
12946:
12947: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
12948: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
12949: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12950: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12951: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12952: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
12953: visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
12954:
12955: 1998-01-21 00:47 millert
12956:
12957: * CHANGES: updated for 1.5.5
12958:
12959: 1998-01-21 00:35 millert
12960:
12961: * Makefile.in: add rules to update version stuff in files so I
12962: don't need to do it by hand
12963:
12964: 1998-01-21 00:04 millert
12965:
12966: * sudo.h: sudoers_fp is now extern
12967:
12968: 1998-01-21 00:03 millert
12969:
12970: * sudo.c: in check_sudoers, cache the sudoers file handle in
12971: sudoers_fp so we don't have to open it again in the parse. This
12972: may help with weird solaris problems where EAGAIN sometime
12973: occurrs.
12974:
12975: 1998-01-21 00:02 millert
12976:
12977: * parse.c: sudoers file open is now done only in check_sudoers() so
12978: we just do a rewind() instead of an open. May help people on
12979: solaris who were getting EAGAIN.
12980:
12981: 1998-01-16 11:43 millert
12982:
12983: * INSTALL: mention that newer glibc is fixed
12984:
12985: 1998-01-13 12:58 millert
12986:
12987: * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
12988: so ignore _RLD* instead of _RLD_*
12989:
12990: 1998-01-13 10:32 millert
12991:
12992: * parse.c: typo
12993:
12994: 1998-01-13 10:19 millert
12995:
12996: * parse.c: fix that bug for real
12997:
12998: 1998-01-13 02:39 millert
12999:
13000: * INSTALL: document Linux's libc6 brokenness.
13001:
13002: 1998-01-13 02:00 millert
13003:
13004: * parse.yacc: -Wall
13005:
13006: 1998-01-13 01:22 millert
13007:
13008: * RUNSON: updated
13009:
13010: 1998-01-13 00:50 millert
13011:
13012: * TROUBLESHOOTING: remind people to HUP syslogd
13013:
13014: 1998-01-13 00:05 millert
13015:
13016: * Makefile.in: add -O flag to tar
13017:
13018: 1998-01-13 00:00 millert
13019:
13020: * TODO, RUNSON: updated
13021:
13022: 1998-01-12 23:59 millert
13023:
13024: * sudo.pod: remove author's email addr. people should mail
13025: sudo-bugs
13026:
13027: 1998-01-12 23:49 millert
13028:
13029: * INSTALL: fix version
13030:
13031: 1998-01-12 23:48 millert
13032:
13033: * README, check.c, compat.h, config.h.in, configure.in,
13034: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13035: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13036: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13037: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13038: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13039: visudo.c: ++version
13040:
13041: 1998-01-12 23:44 millert
13042:
13043: * RUNSON: updated
13044:
13045: 1998-01-12 23:42 millert
13046:
13047: * INSTALL, Makefile.in: ++version
13048:
13049: 1998-01-12 23:41 millert
13050:
13051: * CHANGES: updated fort 1.5.4
13052:
13053: 1998-01-12 23:41 millert
13054:
13055: * check.c: exit(1) if user enters no passwd
13056:
13057: 1998-01-12 23:37 millert
13058:
13059: * BUGS: ++version
13060:
13061: 1998-01-12 23:10 millert
13062:
13063: * parse.c: commands can start with ./* not just /* -- fixes a
13064: serious security hole.
13065:
13066: 1997-12-21 18:17 millert
13067:
13068: * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13069: leave it as "unknown".
13070:
13071: 1997-11-23 13:29 millert
13072:
13073: * sample.sudoers: fix usage of (username) in conjunction with , and
13074: !
13075:
13076: 1997-11-23 13:28 millert
13077:
13078: * visudo.c: catch the case where the user is not in the passwd file
13079:
13080: 1997-11-23 13:24 millert
13081:
13082: * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13083: the nfds arg to select(2)
13084:
13085: 1997-11-23 01:53 millert
13086:
13087: * sudo.c: define tty global to an initial value to avoid dumping
13088: core in logging functions when passwd file is unavailable.
13089:
13090: 1997-11-23 01:51 millert
13091:
13092: * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13093: gotten the passwd entry
13094:
13095: 1997-11-23 00:21 millert
13096:
13097: * sudo.pod: talk about problem of ALL
13098:
13099: 1997-10-10 00:54 millert
13100:
13101: * README: new web location
13102:
13103: 1997-10-10 00:54 millert
13104:
13105: * INSTALL: fdesc bug is fixed in Open/Net BSD
13106:
13107: 1997-10-10 00:52 millert
13108:
13109: * HISTORY: updates from Nieusma
13110:
13111: 1997-10-09 18:37 millert
13112:
13113: * dce_pwent.c: move compat.h after the system includes
13114:
13115: 1997-08-06 14:58 millert
13116:
13117: * logging.c: save errno from being clobbered by wait(). From Theo
13118:
13119: 1997-05-21 11:57 millert
13120:
13121: * compat.h: fix an occurence of setresuid -> setreuid (typo)
13122:
13123: 1997-03-19 17:45 millert
13124:
13125: * install-sh: check for path to strip
13126:
13127: 1997-01-15 19:05 millert
13128:
13129: * logging.c: deal with maxfilelen < 0 case
13130:
13131: 1997-01-15 19:05 millert
13132:
13133: * OPTIONS: fixed descriptin
13134:
13135: 1996-12-11 23:10 millert
13136:
13137: * sudo.c: correct error message if mode/owner wrong and not
13138: statable by owner but is statable by root.
13139:
13140: 1996-11-23 02:18 millert
13141:
13142: * config.guess, config.sub: autoconf 2.11
13143:
13144: 1996-11-16 14:42 millert
13145:
13146: * CHANGES, RUNSON, TODO: sudo 1.5.3.
13147:
13148: 1996-11-14 15:08 millert
13149:
13150: * sudo.h, parse.yacc: command_alias -> generic_alias
13151:
13152: 1996-11-13 22:50 millert
13153:
13154: * sample.sudoers: added Runas_Alias example and fixed syntax errors
13155:
13156: 1996-11-13 22:50 millert
13157:
13158: * OPTIONS, options.h: updated MAILSUBJECT
13159:
13160: 1996-11-13 22:49 millert
13161:
13162: * logging.c: added %h expansion
13163:
13164: 1996-11-13 21:37 millert
13165:
13166: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13167: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13168: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13169: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13170: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13171: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13172: visudo.c, INSTALL, README, configure.in: ++version
13173:
13174: 1996-11-13 20:01 millert
13175:
13176: * emul/utime.h, BUGS: ++version
13177:
13178: 1996-11-13 19:45 millert
13179:
13180: * sudoers.pod: document Runas_Alias
13181:
13182: 1996-11-13 19:22 millert
13183:
13184: * visudo.pod: q (uid) -> Q
13185:
13186: 1996-11-13 19:21 millert
13187:
13188: * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13189: drop into whatnow
13190:
13191: 1996-11-13 19:05 millert
13192:
13193: * parse.yacc: add size params to sprintf
13194:
13195: 1996-11-13 19:04 millert
13196:
13197: * parse.lex: allow trailing space after '\\' but before '\n'
13198:
13199: 1996-11-13 19:04 millert
13200:
13201: * find_path.c: off by one error in path size check
13202:
13203: 1996-11-13 19:03 millert
13204:
13205: * check.c: sprintf paranoia
13206:
13207: 1996-11-12 11:59 millert
13208:
13209: * parse.yacc: fixed more_aliases
13210:
13211: 1996-11-12 11:58 millert
13212:
13213: * visudo.c: now warns if killed by signal ./
13214:
13215: 1996-11-11 10:49 millert
13216:
13217: * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13218: expanded (but it is gross)
13219:
13220: 1996-11-10 20:32 millert
13221:
13222: * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13223: 0400
13224:
13225: 1996-11-10 20:08 millert
13226:
13227: * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13228: USER_ALIAS)
13229:
13230: 1996-11-10 20:02 millert
13231:
13232: * parse.lex: Add Runas_Alias and simplify a rule.
13233:
13234: 1996-11-10 19:15 millert
13235:
13236: * parse.yacc: always store User_Alias's since they can be used
13237: inside of a runas list. Sigh. Really need a Runas_Alias
13238: instead.
13239:
13240: 1996-10-30 18:04 millert
13241:
13242: * visudo.c: deal with case where there is no sudoers file
13243:
13244: 1996-10-11 23:01 millert
13245:
13246: * TROUBLESHOOTING: added one
13247:
13248: 1996-10-10 22:11 millert
13249:
13250: * HISTORY, testsudoers.c: developement -> development
13251:
13252: 1996-10-10 22:08 millert
13253:
13254: * INSTALL: added a note
13255:
13256: 1996-10-10 20:36 millert
13257:
13258: * RUNSON: for 1.5.2
13259:
13260: 1996-10-10 20:36 millert
13261:
13262: * CHANGES: updated
13263:
13264: 1996-10-10 00:56 millert
13265:
13266: * PORTING: removed seteuid() notes
13267:
13268: 1996-10-09 13:37 millert
13269:
13270: * compat.h: better seteuid() emulatino
13271:
13272: 1996-10-09 13:36 millert
13273:
13274: * configure.in: added check for seteuid
13275:
13276: 1996-10-09 13:36 millert
13277:
13278: * config.h.in: added HAVE_SETEUID
13279:
13280: 1996-10-08 19:22 millert
13281:
13282: * configure.in: first stab at sequent support
13283:
13284: 1996-10-08 19:21 millert
13285:
13286: * config.h.in: added HAVE_SYS_SELECT_H
13287:
13288: 1996-10-08 19:21 millert
13289:
13290: * compat.h: sequent -> _SEQUENT_
13291:
13292: 1996-10-08 19:11 millert
13293:
13294: * compat.h: added seteuid() macro for DYNIX
13295:
13296: 1996-10-08 18:54 millert
13297:
13298: * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13299:
13300: 1996-10-07 01:05 millert
13301:
13302: * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13303: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13304: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13305: pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13306: README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13307: putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13308: visudo.c, tgetpass.c: ++version
13309:
13310: 1996-10-07 00:59 millert
13311:
13312: * sudo.pod: added -H and SUDO_PS1
13313:
13314: 1996-10-07 00:55 millert
13315:
13316: * configure.in: use SUDO_FUNC_FNMATCH
13317:
13318: 1996-10-07 00:54 millert
13319:
13320: * aclocal.m4: added SUDO_FUNC_FNMATCH
13321:
13322: 1996-10-07 00:53 millert
13323:
13324: * sudo.c: added -H flag
13325:
13326: 1996-10-07 00:53 millert
13327:
13328: * sudo.h: added MODE_RESET_HOME /
13329:
13330: 1996-10-05 00:00 millert
13331:
13332: * INSTALL: mention OPIE
13333:
13334: 1996-10-04 23:59 millert
13335:
13336: * configure.in: added opie support
13337:
13338: 1996-10-04 23:59 millert
13339:
13340: * check.c: added HAVE_OPIE and changed to *_OTP_*
13341:
13342: 1996-10-04 23:58 millert
13343:
13344: * compat.h, config.h.in: added HAVE_OPIE
13345:
13346: 1996-10-04 23:58 millert
13347:
13348: * OPTIONS, options.h: SKEY -> OTP
13349:
13350: 1996-10-03 23:27 millert
13351:
13352: * check.c: moved fclose() in skey stuff.
13353:
13354: 1996-10-03 19:53 millert
13355:
13356: * putenv.c: index -> strchr remove unnecesary stuff
13357:
13358: 1996-10-03 19:43 millert
13359:
13360: * check.c: now call skeychallenge() to get challenge instead of
13361: making one up ourselves. this way, we get extra goodies in the
13362: prompt.
13363:
13364: 1996-09-10 00:32 millert
13365:
13366: * CHANGES: added one
13367:
13368: 1996-09-10 00:18 millert
13369:
13370: * parse.lex: allow logins to start with a number (YUCK!)
13371:
13372: 1996-09-08 15:18 millert
13373:
13374: * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13375:
13376: 1996-09-08 15:15 millert
13377:
13378: * configure.in: DUNIX doesn't need -lnsl
13379:
13380: 1996-09-07 20:22 millert
13381:
13382: * CHANGES: [no log message]
13383:
13384: 1996-09-07 20:21 millert
13385:
13386: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13387: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13388: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13389: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13390: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13391: tgetpass.c, utime.c, version.h, visudo.c: courtesan
13392:
13393: 1996-09-07 20:13 millert
13394:
13395: * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13396: courtesan
13397:
13398: 1996-09-07 20:12 millert
13399:
13400: * visudo.pod: [no log message]
13401:
13402: 1996-09-07 20:00 millert
13403:
13404: * sudo.pod, visudo.pod: courtesan
13405:
13406: 1996-09-07 19:45 millert
13407:
13408: * HISTORY: added courtesan ./
13409:
13410: 1996-09-06 00:12 millert
13411:
13412: * sudo.c: added $SUDO_PROMPT support
13413:
13414: 1996-09-04 17:19 millert
13415:
13416: * check.c: print long skey challemged to stderr, not stdout
13417:
13418: 1996-08-31 23:10 millert
13419:
13420: * CHANGES: updated for 1.5.1
13421:
13422: 1996-08-31 23:07 millert
13423:
13424: * emul/utime.h: ++version
13425:
13426: 1996-08-31 12:34 millert
13427:
13428: * RUNSON: updated for 1.5.1
13429:
13430: 1996-08-30 10:49 millert
13431:
13432: * check.c: use shost, not host for tgetpass
13433:
13434: 1996-08-30 00:21 millert
13435:
13436: * OPTIONS, sudo.pod: documented %u and %h
13437:
13438: 1996-08-29 20:40 millert
13439:
13440: * configure.in: fixed typo
13441:
13442: 1996-08-29 20:37 millert
13443:
13444: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13445: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13446: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13447: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13448: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13449: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13450: visudo.c: ++version
13451:
13452: 1996-08-29 20:30 millert
13453:
13454: * BUGS: ++version
13455:
13456: 1996-08-29 18:32 millert
13457:
13458: * configure.in, Makefile.in, version.h: ++version
13459:
13460: 1996-08-29 17:58 millert
13461:
13462: * sudo.h: new tgetpass() params
13463:
13464: 1996-08-29 17:58 millert
13465:
13466: * check.c: pass use and host to tgetpass
13467:
13468: 1996-08-29 17:57 millert
13469:
13470: * tgetpass.c: added %u and %h escapes
13471:
13472: 1996-08-29 16:56 millert
13473:
13474: * OPTIONS, options.h, check.c: added NO_MESSAGE
13475:
13476: 1996-08-29 16:23 millert
13477:
13478: * configure.in: added cray (unicos) support
13479:
13480: 1996-08-27 11:36 millert
13481:
13482: * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13483:
13484: 1996-08-25 17:56 millert
13485:
13486: * INSTALL: added note about "make install"
13487:
13488: 1996-08-25 17:50 millert
13489:
13490: * parse.yacc: changed length/size params from int to size_t
13491:
13492: 1996-08-25 13:35 millert
13493:
13494: * OPTIONS: now get CSOPS insults as well by default
13495:
13496: 1996-08-25 13:33 millert
13497:
13498: * insults.h: use csops insults too by default
13499:
13500: 1996-08-25 13:31 millert
13501:
13502: * INSTALL, Makefile.in, README, config.h.in, configure.in,
13503: version.h: version = 1.5
13504:
13505: 1996-08-25 13:27 millert
13506:
13507: * sudo.c: added runas_homedir
13508:
13509: 1996-08-25 13:27 millert
13510:
13511: * TODO: updated for 1.5
13512:
13513: 1996-08-25 13:23 millert
13514:
13515: * RUNSON: updated for 1.5
13516:
13517: 1996-08-25 13:19 millert
13518:
13519: * CHANGES: 1.5 release
13520:
13521: 1996-08-25 13:17 millert
13522:
13523: * INSTALL: added "upgrading" notes
13524:
13525: 1996-08-22 14:00 millert
13526:
13527: * visudo.c: now do chmod and chown after edit of temp file and
13528: before rename
13529:
13530: 1996-08-18 12:52 millert
13531:
13532: * Makefile.in: ++version added INSTALL.configure
13533:
13534: 1996-08-18 12:52 millert
13535:
13536: * version.h, configure.in: ++version
13537:
13538: 1996-08-18 12:51 millert
13539:
13540: * TROUBLESHOOTING: [no log message]
13541:
13542: 1996-08-18 12:50 millert
13543:
13544: * parse.yacc: added missing cast
13545:
13546: 1996-08-17 20:37 millert
13547:
13548: * sudo.c: sets $HOME to pw_dir of runas user
13549:
13550: 1996-08-17 20:02 millert
13551:
13552: * sudo.pod: document $HOME change
13553:
13554: 1996-08-17 19:43 millert
13555:
13556: * sudo.pod: fixed up some wording
13557:
13558: 1996-08-17 19:25 millert
13559:
13560: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13561: goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13562: parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13563: testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13564:
13565: 1996-08-17 19:19 millert
13566:
13567: * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13568: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13569: ++version
13570:
13571: 1996-08-17 19:18 millert
13572:
13573: * sudo.h: name nad type changes
13574:
13575: 1996-08-17 19:17 millert
13576:
13577: * testsudoers.c: now works with new sudo
13578:
13579: 1996-08-17 19:07 millert
13580:
13581: * parse.yacc: fixed some XXX
13582:
13583: 1996-08-17 18:52 millert
13584:
13585: * parse.yacc: some variable name changes + comment headers for
13586: functions.
13587:
13588: 1996-08-17 18:41 millert
13589:
13590: * tgetpass.c: added extra paren's to make compilers happy
13591:
13592: 1996-08-17 18:34 millert
13593:
13594: * sudo.c: [no log message]
13595:
13596: 1996-08-17 18:30 millert
13597:
13598: * parse.c: now uses init_parser() if not in sudoers and tries
13599: "list" or "validate" scold but don't be nasty.
13600:
13601: 1996-08-17 18:29 millert
13602:
13603: * TROUBLESHOOTING: now can use upper case login names
13604:
13605: 1996-08-17 18:29 millert
13606:
13607: * visudo.c: now uses init_parser()
13608:
13609: 1996-08-17 18:28 millert
13610:
13611: * PORTING: added info about PASSWORD_TIMEOUT
13612:
13613: 1996-08-17 18:28 millert
13614:
13615: * INSTALL, README: updated
13616:
13617: 1996-08-17 18:28 millert
13618:
13619: * INSTALL.configure: Initial revision
13620:
13621: 1996-08-17 18:27 millert
13622:
13623: * BUGS: fixed a bug ,
13624:
13625: 1996-08-17 18:27 millert
13626:
13627: * parse.yacc: now dynamically allocates memory for the stacks -- no
13628: more overflows!
13629:
13630: 1996-08-17 18:26 millert
13631:
13632: * sudo.pod: -l now explands command aliases
13633:
13634: 1996-08-17 13:22 millert
13635:
13636: * parse.yacc: hacks to expand command aliases for `sudo -l'
13637:
13638: 1996-08-17 13:22 millert
13639:
13640: * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13641: and bash)
13642:
13643: 1996-08-17 13:22 millert
13644:
13645: * sudo.h: added struct command_alias
13646:
13647: 1996-08-17 13:20 millert
13648:
13649: * sudo.pod: fixed a bug
13650:
13651: 1996-08-17 13:15 millert
13652:
13653: * lsearch.c: in compar() key should be first arg
13654:
13655: 1996-08-15 15:48 millert
13656:
13657: * BUGS: fixed some bugs
13658:
13659: 1996-08-15 15:47 millert
13660:
13661: * parse.yacc: can now deal with upcase HOST and USER names
13662:
13663: 1996-08-15 15:47 millert
13664:
13665: * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13666:
13667: 1996-08-15 15:46 millert
13668:
13669: * sudo.pod: fixed thinko
13670:
13671: 1996-08-15 15:46 millert
13672:
13673: * parse.c: fix comment
13674:
13675: 1996-08-09 18:07 millert
13676:
13677: * parse.c, parse.yacc: added support for new `sudo -l' stuff
13678:
13679: 1996-08-09 18:06 millert
13680:
13681: * sudo.c: now uses list_matches()
13682:
13683: 1996-08-09 18:06 millert
13684:
13685: * sudo.h: added struct sudo_match
13686:
13687: 1996-08-09 17:37 millert
13688:
13689: * configure.in: now more -lgnumalloc
13690:
13691: 1996-08-01 13:12 millert
13692:
13693: * install-sh: added more paths for chown and whoami
13694:
13695: 1996-07-31 10:41 millert
13696:
13697: * check.c: typo
13698:
13699: 1996-07-30 13:45 millert
13700:
13701: * aclocal.m4: fixed DUNIX check for shadow pw
13702:
13703: 1996-07-30 13:41 millert
13704:
13705: * tgetpass.c: now only turn off echo if it is already on. this
13706: fixes a race when you use sudo in a pipelin
13707:
13708: 1996-07-30 12:53 millert
13709:
13710: * INSTALL: updated
13711:
13712: 1996-07-29 22:29 millert
13713:
13714: * configure.in: changed "test -z $foo && do_this" to if; then
13715: construct
13716:
13717: 1996-07-28 22:47 millert
13718:
13719: * configure.in: added missing defines of SHADOW_TYPE
13720:
13721: 1996-07-26 14:10 millert
13722:
13723: * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13724: they are only in dunix 4.x
13725:
13726: 1996-07-26 14:09 millert
13727:
13728: * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13729:
13730: 1996-07-26 13:23 millert
13731:
13732: * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13733: that didn't match. Now we can have runas stuff on more than one
13734: line.
13735:
13736: 1996-07-25 23:45 millert
13737:
13738: * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13739: defined to something
13740:
13741: 1996-07-25 23:45 millert
13742:
13743: * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
13744:
13745: 1996-07-25 23:44 millert
13746:
13747: * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
13748: instead of HAVE_C2_SECURITY
13749:
13750: 1996-07-25 23:44 millert
13751:
13752: * check.c: SHADOW_TYPE is always defined so just against its value
13753:
13754: 1996-07-25 23:44 millert
13755:
13756: * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
13757:
13758: 1996-07-25 18:47 millert
13759:
13760: * sudoers.pod: * -> ?* in one example added another instance of
13761: (runas) and one of NOPASSWD:
13762:
13763: 1996-07-24 13:02 millert
13764:
13765: * configure.in: added back check for config.cache from other host
13766: type
13767:
13768: 1996-07-24 12:49 millert
13769:
13770: * parse.lex: removed an instance of \"
13771:
13772: 1996-07-24 12:49 millert
13773:
13774: * sample.sudoers: added an example
13775:
13776: 1996-07-24 12:44 millert
13777:
13778: * sudoers.pod: updated wrt new wildcard matching
13779:
13780: 1996-07-24 10:28 millert
13781:
13782: * configure.in: new check for shadow passwords if we don't know
13783: anything
13784:
13785: 1996-07-24 10:28 millert
13786:
13787: * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
13788:
13789: 1996-07-24 02:19 millert
13790:
13791: * configure.in: added back check for -lsocket (oops)
13792:
13793: 1996-07-24 02:16 millert
13794:
13795: * configure.in: better (working) check for shadow passwd type if we
13796: know to use C2.
13797:
13798: 1996-07-24 01:59 millert
13799:
13800: * configure.in: now uses AC_CANONICAL_HOST to figure out os type
13801:
13802: 1996-07-24 01:59 millert
13803:
13804: * Makefile.in: added config.{guess,sub}
13805:
13806: 1996-07-24 01:58 millert
13807:
13808: * aclocal.m4: removed unused stuff to figure out os type
13809:
13810: 1996-07-23 22:58 millert
13811:
13812: * config.sub: added openbsd
13813:
13814: 1996-07-23 22:54 millert
13815:
13816: * config.sub: Initial revision
13817:
13818: 1996-07-23 22:40 millert
13819:
13820: * config.guess: Initial revision
13821:
13822: 1996-07-23 21:18 millert
13823:
13824: * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
13825: it can only be a pathname. need to check against sudoers_args
13826: even if user_args is nil
13827:
13828: 1996-07-23 21:18 millert
13829:
13830: * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
13831: can only be a pathname need to check against sudoers_args even if
13832: user_args is nil
13833:
13834: 1996-07-23 18:52 millert
13835:
13836: * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
13837:
13838: 1996-07-23 01:18 millert
13839:
13840: * testsudoers.c: now takes command line args and uses cmnd_args
13841:
13842: 1996-07-23 01:10 millert
13843:
13844: * parse.lex: fill_args was adding an extra leading space
13845:
13846: 1996-07-22 15:50 millert
13847:
13848: * visudo.c: fixed dummy command_matches()
13849:
13850: 1996-07-22 15:50 millert
13851:
13852: * parse.yacc: fixed prototype
13853:
13854: 1996-07-22 15:31 millert
13855:
13856: * sudo.h: added cmnd_args
13857:
13858: 1996-07-22 15:31 millert
13859:
13860: * parse.yacc: now uses flat args string
13861:
13862: 1996-07-22 15:30 millert
13863:
13864: * parse.c, parse.lex: now uses flat arg string
13865:
13866: 1996-07-22 15:29 millert
13867:
13868: * visudo.c: added cmnd_args def
13869:
13870: 1996-07-22 14:30 millert
13871:
13872: * sudo.c: now sets cmnd_args global
13873:
13874: 1996-07-22 14:30 millert
13875:
13876: * logging.c: cmnd_args is now exported from sudo.[ch]
13877:
13878: 1996-07-21 18:41 millert
13879:
13880: * parse.yacc: can't rely on cmnd_matches as much as I thought --
13881: added some $$ stuff back in to prevent namespace pollution
13882: problems.
13883:
13884: 1996-07-21 18:01 millert
13885:
13886: * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
13887: consistent).
13888:
13889: 1996-07-20 00:45 millert
13890:
13891: * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
13892: starts a 'runas' if in the initial state to avoid collision with
13893: command args
13894:
13895: 1996-07-20 00:23 millert
13896:
13897: * configure.in: added checks for specific shadow passwd schemes
13898:
13899: 1996-07-20 00:18 millert
13900:
13901: * aclocal.m4: added routines to check for specific shadow passwd
13902: types
13903:
13904: 1996-07-18 18:27 millert
13905:
13906: * configure.in: added support for ncr boxen
13907:
13908: 1996-07-18 18:26 millert
13909:
13910: * aclocal.m4: added support for detecting ncr boxen
13911:
13912: 1996-07-16 14:57 millert
13913:
13914: * configure.in: added sinix support
13915:
13916: 1996-07-13 22:29 millert
13917:
13918: * TROUBLESHOOTING: added info about "config.cache from other other"
13919: error.
13920:
13921: 1996-07-13 22:22 millert
13922:
13923: * aclocal.m4: now makes sure you don't have a config.cache file
13924: from another OS
13925:
13926: 1996-07-13 21:36 millert
13927:
13928: * configure.in: now sets $LIBS when needed to configure links with
13929: libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
13930: check for bigcrypt(3) if SPW_SECUREWARE
13931:
13932: 1996-07-13 21:30 millert
13933:
13934: * getspwuid.c: fixed typo
13935:
13936: 1996-07-13 21:05 millert
13937:
13938: * tgetpass.c: now include stuff for SPW_SECUREWARE to get
13939: AUTH_MAX_PASSWD_LENGTH
13940:
13941: 1996-07-13 21:05 millert
13942:
13943: * getspwuid.c: no more SPW_HPUX10
13944:
13945: 1996-07-13 21:04 millert
13946:
13947: * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
13948:
13949: 1996-07-13 21:04 millert
13950:
13951: * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
13952:
13953: 1996-07-13 21:04 millert
13954:
13955: * check.c: SPW_SECUREWARE now uses bigcrypt
13956:
13957: 1996-07-13 18:24 millert
13958:
13959: * sample.sudoers: fixed 2 syntax errors
13960:
13961: 1996-07-13 18:24 millert
13962:
13963: * sudoers: root may now run ALL as ALL
13964:
13965: 1996-07-11 20:59 millert
13966:
13967: * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
13968:
13969: 1996-07-08 16:08 millert
13970:
13971: * check.c, configure.in: updated AFS support
13972:
13973: 1996-07-08 16:07 millert
13974:
13975: * TROUBLESHOOTING: added entry about /usr/ucb/cc
13976:
13977: 1996-07-08 16:06 millert
13978:
13979: * INSTALL: prep no longer holds gcc binaries
13980:
13981: 1996-07-08 15:48 millert
13982:
13983: * INSTALL: updated AFS note
13984:
13985: 1996-07-08 15:43 millert
13986:
13987: * Makefile.in: added @AFS_LIBS@
13988:
13989: 1996-07-08 15:33 millert
13990:
13991: * compat.h: AFS allows long passwords
13992:
13993: 1996-07-08 14:16 millert
13994:
13995: * testsudoers.c: fixed -u user support
13996:
13997: 1996-07-08 14:16 millert
13998:
13999: * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14000:
14001: 1996-07-08 13:30 millert
14002:
14003: * parse.yacc: fixed no_passwd vs. runas_matched
14004:
14005: 1996-07-08 10:30 millert
14006:
14007: * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14008: longer an issue
14009:
14010: 1996-07-08 10:30 millert
14011:
14012: * INSTALL: added --with-libraries > --with-libpath --with-incpath
14013:
14014: 1996-07-08 10:21 millert
14015:
14016: * parse.yacc: was setting runas_matches to -1 in wrong place
14017:
14018: 1996-07-08 09:58 millert
14019:
14020: * check.c: removed usersec.h which is not present in new AFS
14021: versions
14022:
14023: 1996-07-08 09:55 millert
14024:
14025: * tgetpass.c: now deals with timeout <= 0
14026:
14027: 1996-07-08 09:51 millert
14028:
14029: * OPTIONS: updated
14030:
14031: 1996-07-08 00:04 millert
14032:
14033: * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14034:
14035: 1996-07-07 22:30 millert
14036:
14037: * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14038: for root readable/writable filesystems
14039:
14040: 1996-07-07 20:49 millert
14041:
14042: * Makefile.in: now gives INSTALL -c flag
14043:
14044: 1996-07-07 20:34 millert
14045:
14046: * parse.yacc: slightly simpler initialization of no_passwd and
14047: runas_matches
14048:
14049: 1996-07-07 20:33 millert
14050:
14051: * testsudoers.c: added -u username support
14052:
14053: 1996-07-07 20:32 millert
14054:
14055: * configure.in: improved --with-libraries support
14056:
14057: 1996-07-07 16:27 millert
14058:
14059: * configure.in: added --with-incpath, --with-libpath,
14060: --with-libraries
14061:
14062: 1996-07-07 16:01 millert
14063:
14064: * parse.yacc: now initializes some fields that weren't getting set
14065: to -1 pretty gross -- need a rewrite.
14066:
14067: 1996-06-25 23:19 millert
14068:
14069: * alloca.c: removed emacs'isms
14070:
14071: 1996-06-25 22:29 millert
14072:
14073: * configure.in: no longer add -lPW to *_LIBS since we include
14074: alloca.c
14075:
14076: 1996-06-25 22:29 millert
14077:
14078: * config.h.in: added HAVE_ALLOCA_H
14079:
14080: 1996-06-25 22:28 millert
14081:
14082: * Makefile.in: added alloca.c
14083:
14084: 1996-06-25 22:18 millert
14085:
14086: * alloca.c: Initial revision
14087:
14088: 1996-06-25 21:58 millert
14089:
14090: * configure.in: ++version
14091:
14092: 1996-06-25 19:32 millert
14093:
14094: * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14095: nobody is not always set to a valid uid.
14096:
14097: 1996-06-25 19:31 millert
14098:
14099: * OPTIONS: fixed entry for SUDO_MODE
14100:
14101: 1996-06-25 18:02 millert
14102:
14103: * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14104: *and* gid were being set to -2. Now beat NFS to the punch and
14105: set uid to "nobody" ourselves, preserving group 0 to read
14106: sudoers.
14107:
14108: 1996-06-25 18:02 millert
14109:
14110: * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14111:
14112: 1996-06-25 18:00 millert
14113:
14114: * logging.c: fixed a typo
14115:
14116: 1996-06-25 18:00 millert
14117:
14118: * configure.in: no longer need AC_PROG_INSTALL
14119:
14120: 1996-06-25 17:59 millert
14121:
14122: * Makefile.in: always use install-sh to avoid install(1)'s that use
14123: get{pw,gr}nam
14124:
14125: 1996-06-25 16:07 millert
14126:
14127: * INSTALL: make clean -> make distclean
14128:
14129: 1996-06-20 01:17 millert
14130:
14131: * parse.yacc: removed some unnecsary if's
14132:
14133: 1996-06-20 01:16 millert
14134:
14135: * Makefile.in, version.h: ++version
14136:
14137: 1996-06-20 01:16 millert
14138:
14139: * parse.c, testsudoers.c: now includes netgroup.h
14140:
14141: 1996-06-20 00:45 millert
14142:
14143: * interfaces.c: removed cats of ioctl to int since they didn't shut
14144: up -Wall
14145:
14146: 1996-06-20 00:43 millert
14147:
14148: * interfaces.c: explicately cast ioctl() to int since it it not
14149: always declared
14150:
14151: 1996-06-20 00:41 millert
14152:
14153: * sudo.h: added declarations for yyparse() and yylex()
14154:
14155: 1996-06-20 00:27 millert
14156:
14157: * parse.yacc: fixed an occurence of '==' -> '='
14158:
14159: 1996-06-20 00:22 millert
14160:
14161: * config.h.in, configure.in: added check for netgroup.h
14162:
14163: 1996-06-20 00:20 millert
14164:
14165: * sudo.c: fixed 2 compiler warnings
14166:
14167: 1996-06-20 00:08 millert
14168:
14169: * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14170: weren't being initialized
14171:
14172: 1996-06-19 13:53 millert
14173:
14174: * sudo.pod: fixed a typo
14175:
14176: 1996-06-17 12:19 millert
14177:
14178: * parse.yacc: fixed a formatting thingie
14179:
14180: 1996-06-17 12:16 millert
14181:
14182: * parse.c, parse.yacc: fixed -u support with multiple user lists on
14183: a line
14184:
14185: 1996-06-17 10:23 millert
14186:
14187: * configure.in: unixware needs -lgen
14188:
14189: 1996-06-17 10:23 millert
14190:
14191: * README: updated ftp location
14192:
14193: 1996-06-17 00:08 millert
14194:
14195: * sudoers.pod: add net_addr/netmask support
14196:
14197: 1996-06-17 00:07 millert
14198:
14199: * sample.sudoers: added net_addr/mask example
14200:
14201: 1996-06-17 00:02 millert
14202:
14203: * parse.lex, parse.c: added support for net_addr/netmask
14204:
14205: 1996-06-15 20:13 millert
14206:
14207: * sudoers.pod: ^ -> !
14208:
14209: 1996-06-15 18:12 millert
14210:
14211: * RUNSON: updated for 1.4.3
14212:
14213: 1996-06-15 18:12 millert
14214:
14215: * CHANGES: udpated for 1.4.3
14216:
14217: 1996-06-15 18:11 millert
14218:
14219: * TROUBLESHOOTING, TODO, BUGS: updated
14220:
14221: 1996-06-15 18:11 millert
14222:
14223: * sample.sudoers: updated with examples of new stuff
14224:
14225: 1996-06-15 18:10 millert
14226:
14227: * INSTALL, README: ++version
14228:
14229: 1996-06-15 18:01 millert
14230:
14231: * sudoers.pod: updated wrt -u and NOPASSWD
14232:
14233: 1996-06-15 17:58 millert
14234:
14235: * sudo.pod: updated wrt -u and CAVEATS
14236:
14237: 1996-06-08 23:15 millert
14238:
14239: * sudo.c: fixed usage()
14240:
14241: 1996-06-08 22:57 millert
14242:
14243: * parse.lex: now use :foo: character classes (makes no diff for
14244: generated lexer)
14245:
14246: 1996-06-07 14:33 millert
14247:
14248: * check.c: fixed LONG_SKEY_PROMPT stuff
14249:
14250: 1996-06-06 15:35 millert
14251:
14252: * visudo.c: fixed a comment
14253:
14254: 1996-06-06 15:03 millert
14255:
14256: * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14257:
14258: 1996-06-06 15:02 millert
14259:
14260: * emul/search.h: fixed decls of lsearch()
14261:
14262: 1996-06-05 22:20 millert
14263:
14264: * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14265:
14266: 1996-06-05 22:20 millert
14267:
14268: * check.c: hpux 10 uses bigcrypt() if C2
14269:
14270: 1996-06-04 19:57 millert
14271:
14272: * parse.c: now always uses fnmatch to match args
14273:
14274: 1996-06-04 19:40 millert
14275:
14276: * tgetpass.c: back to using stdio instead of raw i/o since that
14277: caused some problems
14278:
14279: 1996-05-28 22:14 millert
14280:
14281: * sudo.c: now give usage warning if use -l,-v,-k with args
14282:
14283: 1996-05-28 18:22 millert
14284:
14285: * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14286:
14287: 1996-05-28 12:50 millert
14288:
14289: * sudo.c: now sets sudoers to correct group if mode is 0400
14290:
14291: 1996-05-28 12:02 millert
14292:
14293: * install-sh: updated to version used by inn and bind
14294:
14295: 1996-05-28 00:08 millert
14296:
14297: * configure.in: now uses -lgnumalloc if it exists
14298:
14299: 1996-05-28 00:02 millert
14300:
14301: * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14302: if it exists
14303:
14304: 1996-05-28 00:01 millert
14305:
14306: * sudo.c: rmeoved debugging statements
14307:
14308: 1996-05-28 00:00 millert
14309:
14310: * parse.yacc: added a missing free()
14311:
14312: 1996-05-27 23:58 millert
14313:
14314: * sudo.c: now uses user_gid instead of getegid (which was wrong
14315: anyway) to set SUDO_GID Now sets command line args in
14316: SUDO_COMMAND envariabled (logging.c depends on args being in the
14317: environment)
14318:
14319: 1996-05-27 23:57 millert
14320:
14321: * logging.c: now uses SUDO_COMMAND envariable to get command args
14322: rather than building it up again.
14323:
14324: 1996-05-27 22:42 millert
14325:
14326: * parse.c: now uses user_gid
14327:
14328: 1996-05-27 20:02 millert
14329:
14330: * sudo.c: fixed off by one error in allocation NewArgv
14331:
14332: 1996-05-27 20:01 millert
14333:
14334: * parse.c: in sudoers, 'command ""' now means command with no args
14335:
14336: 1996-05-27 20:01 millert
14337:
14338: * configure.in: added check for fnmatch(3) and fnmatch.h
14339:
14340: 1996-05-27 20:01 millert
14341:
14342: * config.h.in: added HAVE_FNMATCH
14343:
14344: 1996-05-27 20:00 millert
14345:
14346: * Makefile.in: replaced wildcat.* with fnmatch.*
14347:
14348: 1996-05-27 20:00 millert
14349:
14350: * testsudoers.c: now uses fnmatch()
14351:
14352: 1996-05-27 19:38 millert
14353:
14354: * parse.c: now uses fnmatch() instead of wildmat a trailing star
14355: (*) by itself now matches multiple args added support for
14356: wildcards in the pathname in sudoers
14357:
14358: 1996-05-25 19:23 millert
14359:
14360: * fnmatch.c: now includes compat.h and config.h
14361:
14362: 1996-05-25 18:09 millert
14363:
14364: * config.h.in: added HAVE_FNMATCH_H
14365:
14366: 1996-05-25 18:07 millert
14367:
14368: * configure.in: now checks for alloca() (if needed by bison or dce)
14369: and links with -lPW if it contains alloca() and libv and compiler
14370: do not.
14371:
14372: 1996-05-25 18:03 millert
14373:
14374: * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14375:
14376: 1996-04-28 22:38 millert
14377:
14378: * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14379: upgrade
14380:
14381: 1996-04-28 17:44 millert
14382:
14383: * Makefile.in: fixed pod2man usage
14384:
14385: 1996-04-28 17:40 millert
14386:
14387: * configure.in, Makefile.in, version.h: ++version
14388:
14389: 1996-04-28 17:20 millert
14390:
14391: * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14392:
14393: 1996-04-28 17:20 millert
14394:
14395: * sudo.h: removed PERM_FULL_ROOT
14396:
14397: 1996-04-28 17:18 millert
14398:
14399: * sudo.c: runas_user defaults to "root" so no more need to
14400: PERM_RUNAS
14401:
14402: 1996-04-28 17:16 millert
14403:
14404: * parse.c: will now only running commands as root if there was no
14405: runas list (or if root is in the runas list)
14406:
14407: 1996-04-28 17:15 millert
14408:
14409: * logging.c: now logs "USER=%s"
14410:
14411: 1996-04-28 17:12 millert
14412:
14413: * parse.yacc: runas_matches is now set to false if we get a
14414: negative match
14415:
14416: 1996-04-28 15:01 millert
14417:
14418: * parse.lex: make #uid work + some minor cleanup
14419:
14420: 1996-04-27 21:04 millert
14421:
14422: * sample.sudoers: added support for NOPASSWD and "runas" from
14423: garp@opustel.com /
14424:
14425: 1996-04-27 21:03 millert
14426:
14427: * visudo.c: added support for "runas" from garp@opustel.com
14428: replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14429: support for SUDOERS_MODE
14430:
14431: 1996-04-27 21:03 millert
14432:
14433: * testsudoers.c: added support for "runas" from garp@opustel.com
14434:
14435: 1996-04-27 21:02 millert
14436:
14437: * sudo.h: added support for NO_PASSWD and runas from
14438: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14439: SUDOERS_GID and added support fro SUDOERS_MODE
14440:
14441: 1996-04-27 21:00 millert
14442:
14443: * sudo.c: added support for NO_PASSWD and runas from
14444: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14445: SUDOERS_GID and added support fro SUDOERS_MODE
14446:
14447: 1996-04-27 21:00 millert
14448:
14449: * parse.yacc: added support for NO_PASSWD and runas from
14450: garp@opustel.com
14451:
14452: 1996-04-27 20:58 millert
14453:
14454: * parse.c, parse.lex: added support for NO_PASSWD and runas from
14455: garp@opustel.com
14456:
14457: 1996-04-27 20:56 millert
14458:
14459: * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14460:
14461: 1996-04-27 20:40 millert
14462:
14463: * configure.in: added --with-CC only link with -lshadow on linux
14464: (with shadow pw) if libc lacks getspnam()
14465:
14466: 1996-04-27 20:39 millert
14467:
14468: * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14469: do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14470: SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14471:
14472: 1996-04-27 20:26 millert
14473:
14474: * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14475:
14476: 1996-04-27 11:20 millert
14477:
14478: * INSTALL: added --with-CC
14479:
14480: 1996-04-06 16:31 millert
14481:
14482: * parse.lex: added double quote support
14483:
14484: 1996-04-06 16:29 millert
14485:
14486: * sudoers.pod: documented double quoting
14487:
14488: 1996-04-05 16:53 millert
14489:
14490: * mkinstalldirs: Initial revision
14491:
14492: 1996-04-05 16:53 millert
14493:
14494: * check.c: fixed some indentation
14495:
14496: 1996-04-05 16:48 millert
14497:
14498: * Makefile.in: fixed a typo
14499:
14500: 1996-04-04 19:39 millert
14501:
14502: * Makefile.in: added install-dirs .
14503:
14504: 1996-04-04 14:16 millert
14505:
14506: * dce_pwent.c: new version from "Jeff A. Earickson"
14507: <jaearick@colby.edu>
14508:
14509: 1996-04-03 13:40 millert
14510:
14511: * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14512:
14513: 1996-04-03 13:40 millert
14514:
14515: * BUGS: updated
14516:
14517: 1996-04-03 13:36 millert
14518:
14519: * parse.lex: FQHOST now has same constraints as non-FQHOST
14520:
14521: 1996-04-02 19:00 millert
14522:
14523: * INSTALL: added note about OS's w/ shadow passwords turned on by
14524: default
14525:
14526: 1996-04-02 18:58 millert
14527:
14528: * configure.in: fixed a typo
14529:
14530: 1996-04-02 18:48 millert
14531:
14532: * configure.in: added support for --without-THING sanitized shadow
14533: pw situtation by adding support for --without-C2
14534:
14535: 1996-04-02 16:42 millert
14536:
14537: * tgetpass.c: fixed a typo wrt placement of an end paren
14538:
14539: 1996-04-02 14:57 millert
14540:
14541: * check.c: was closing an fd that may not have been opened
14542:
14543: 1996-03-21 19:55 millert
14544:
14545: * sudo.c, OPTIONS, options.h: added NO_PASSWD
14546:
14547: 1996-03-19 19:40 millert
14548:
14549: * configure.in: now always use shadow pw on some arches
14550:
14551: 1996-03-19 17:07 millert
14552:
14553: * configure.in: added pyramid support
14554:
14555: 1996-03-19 17:04 millert
14556:
14557: * configure.in: no longer check for C2 if alternate passwd method
14558: is used no longer check for some libs twice
14559:
14560: 1996-03-19 17:00 millert
14561:
14562: * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14563:
14564: 1996-03-19 17:00 millert
14565:
14566: * parse.lex: added FQHOST rules
14567:
14568: 1996-03-18 20:57 millert
14569:
14570: * tgetpass.c: now define TCSASOFT in necesary
14571:
14572: 1996-03-18 20:31 millert
14573:
14574: * tgetpass.c: now uses read/write instead of stdio string goop to
14575: avoid problems with select(2)
14576:
14577: 1996-03-18 19:37 millert
14578:
14579: * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14580: -DIGNORE_DOT_PATH
14581:
14582: 1996-03-17 16:18 millert
14583:
14584: * INSTALL: added note about no shadow auto-detect if using
14585: alternate auth schemes
14586:
14587: 1996-03-17 15:33 millert
14588:
14589: * configure.in: don't check for C2 if AFS or DCE (unless they said
14590: --with-C2)
14591:
14592: 1996-03-17 15:08 millert
14593:
14594: * testsudoers.c: now groks shost
14595:
14596: 1996-03-17 15:01 millert
14597:
14598: * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14599:
14600: 1996-03-16 14:43 millert
14601:
14602: * find_path.c: checkdot now works correctly
14603:
14604: 1996-03-12 18:01 millert
14605:
14606: * configure.in: can't have DCE and C2 passwords both...
14607:
14608: 1996-03-11 14:05 millert
14609:
14610: * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14611: FQDN
14612:
14613: 1996-03-11 14:04 millert
14614:
14615: * configure.in: now looks for skey in /usr/lib and doesn't require
14616: libskey to be in /usr/local/lib just because skey.h is (for my
14617: netbsd box :-)
14618:
14619: 1996-03-11 02:00 millert
14620:
14621: * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14622: _CONFIG_PATH_
14623:
14624: 1996-03-10 21:01 millert
14625:
14626: * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14627:
14628: 1996-03-10 20:59 millert
14629:
14630: * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14631:
14632: 1996-03-10 20:59 millert
14633:
14634: * OPTIONS: udpated FQDN
14635:
14636: 1996-03-10 20:58 millert
14637:
14638: * config.h.in: added _SUDO_PATH_TIMEDIR
14639:
14640: 1996-03-10 20:58 millert
14641:
14642: * aclocal.m4, configure.in: added SUDO_TIMEDIR
14643:
14644: 1996-03-10 20:58 millert
14645:
14646: * sudo.pod: updated wrt /var/run/sudo
14647:
14648: 1996-03-10 20:16 millert
14649:
14650: * sudo.c, sudo.h: added support for shost if FQDN
14651:
14652: 1996-03-10 20:14 millert
14653:
14654: * parse.yacc, visudo.c: now uses shost if FQDN
14655:
14656: 1996-03-10 20:12 millert
14657:
14658: * check.c: Now use skeylookup() instead off skeychallenge()
14659:
14660: 1996-02-27 20:41 millert
14661:
14662: * logging.c: mail_argv should not contain ALERTMAIL as it includes
14663: "-t"
14664:
14665: 1996-02-22 17:06 millert
14666:
14667: * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14668:
14669: 1996-02-22 16:27 millert
14670:
14671: * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14672:
14673: 1996-02-22 16:27 millert
14674:
14675: * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14676:
14677: 1996-02-05 19:20 millert
14678:
14679: * README, INSTALL: ++version
14680:
14681: 1996-02-05 19:20 millert
14682:
14683: * Makefile.in: ++versoin
14684:
14685: 1996-02-05 19:16 millert
14686:
14687: * Makefile.in: fixed a typo
14688:
14689: 1996-02-05 19:16 millert
14690:
14691: * configure.in: ++version
14692:
14693: 1996-02-05 18:53 millert
14694:
14695: * RUNSON: updated
14696:
14697: 1996-02-05 18:47 millert
14698:
14699: * CHANGES: done for 1.4.1 (I hope)
14700:
14701: 1996-02-05 18:45 millert
14702:
14703: * sudoers.pod: added info on wildcards
14704:
14705: 1996-02-05 18:39 millert
14706:
14707: * sample.sudoers: added wildcard example
14708:
14709: 1996-02-05 17:03 millert
14710:
14711: * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14712:
14713: 1996-02-05 17:03 millert
14714:
14715: * configure.in: addedSUDO_PROG_BSHELL !ll
14716:
14717: 1996-02-05 16:10 millert
14718:
14719: * visudo.pod: fixed up some formatting
14720:
14721: 1996-02-05 16:10 millert
14722:
14723: * sudoers.pod: redid section describing sample sudoers stuff
14724:
14725: 1996-02-05 16:10 millert
14726:
14727: * sudo.pod: fixed some formatting
14728:
14729: 1996-02-04 22:50 millert
14730:
14731: * getspwuid.c: now treats "" as bourne shell
14732:
14733: 1996-02-04 22:49 millert
14734:
14735: * Makefile.in: TESTOBJS nwo includes wildmat.o
14736:
14737: 1996-02-04 22:48 millert
14738:
14739: * testsudoers.c: now works with NewArg[cv]
14740:
14741: 1996-02-04 21:59 millert
14742:
14743: * sudo.c: removed an XXX (fixed it in getspwuid.c)
14744:
14745: 1996-02-04 21:58 millert
14746:
14747: * aclocal.m4: added check for bourne shell
14748:
14749: 1996-02-04 21:58 millert
14750:
14751: * pathnames.h.in: added _PATH_BSHELL
14752:
14753: 1996-02-04 21:58 millert
14754:
14755: * config.h.in: added _SUDO_PATH_BSHELL
14756:
14757: 1996-02-04 16:36 millert
14758:
14759: * visudo.c: unixware vi returns 256 instead of 0
14760:
14761: 1996-02-04 16:24 millert
14762:
14763: * INSTALL: added Linux note
14764:
14765: 1996-02-04 16:13 millert
14766:
14767: * logging.c: fixed up some XXX's. file log format now looks a
14768: little more like real syslog(3) format.
14769:
14770: 1996-02-04 16:13 millert
14771:
14772: * README, TROUBLESHOOTING: updated wrt lex/flex
14773:
14774: 1996-02-04 16:11 millert
14775:
14776: * Makefile.in: commented out rule to build lex.yy.c from parse.lex
14777: since we ship with a pre-flex'd parser
14778:
14779: 1996-02-04 16:09 millert
14780:
14781: * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
14782:
14783: 1996-02-04 02:28 millert
14784:
14785: * logging.c: eliminated some strcat()'s
14786:
14787: 1996-02-04 02:10 millert
14788:
14789: * configure.in: no longer checks for lex/flex (now assumes flex)
14790:
14791: 1996-02-04 02:08 millert
14792:
14793: * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
14794: just kerb_dir_candidate
14795:
14796: 1996-02-02 20:48 millert
14797:
14798: * parse.yacc: now use a 'hook' expression instead of an iffy one
14799: :-)
14800:
14801: 1996-02-02 01:14 millert
14802:
14803: * visudo.c: now works with new sudo arg stuff
14804:
14805: 1996-02-02 01:14 millert
14806:
14807: * parse.yacc: fixed dereferencing deadbeef
14808:
14809: 1996-02-01 23:53 millert
14810:
14811: * sudo.c: changed an occurrence of Argv to NewArgv
14812:
14813: 1996-02-01 23:53 millert
14814:
14815: * parse.lex: took out support for quoted commands since there is no
14816: need...
14817:
14818: 1996-02-01 23:52 millert
14819:
14820: * parse.c: fixed a typo in a for() loop
14821:
14822: 1996-02-01 23:52 millert
14823:
14824: * logging.c: protected against dereferencing rogue pointers
14825:
14826: 1996-02-01 22:34 millert
14827:
14828: * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
14829: needed this also allows us to eliminate some kludges in
14830: parse_args() and eliminate superfluous code.
14831:
14832: 1996-02-01 22:34 millert
14833:
14834: * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
14835:
14836: 1996-02-01 22:32 millert
14837:
14838: * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
14839: cmnd_args (no longer used)
14840:
14841: 1996-02-01 22:31 millert
14842:
14843: * Makefile.in: added wildmat.c to SRCS & SUDOBJS
14844:
14845: 1996-02-01 22:30 millert
14846:
14847: * parse.yacc: COMMAND is now a struct containing the path and args
14848:
14849: 1996-02-01 22:30 millert
14850:
14851: * parse.lex: replaced append() with fill_cmnd() and fill_args.
14852: command args from a sudoers entry are now stored in an arrary for
14853: easy matching.
14854:
14855: 1996-02-01 22:28 millert
14856:
14857: * parse.c: command line args from sudoers file are now in an array
14858: like ones passed in from the command line
14859:
14860: 1996-01-31 20:59 millert
14861:
14862: * parse.c: wildwat stuff now works
14863:
14864: 1996-01-29 00:44 millert
14865:
14866: * version.h: ++version
14867:
14868: 1996-01-29 00:44 millert
14869:
14870: * Makefile.in: ++version added wildmat.*
14871:
14872: 1996-01-28 17:55 millert
14873:
14874: * parse.lex: added support for quoted commands (w/ or w/o args)
14875:
14876: 1996-01-22 01:55 millert
14877:
14878: * sudo.pod, visudo.pod: cleaned up formatting
14879:
14880: 1996-01-21 20:53 millert
14881:
14882: * sudo.pod, visudo.pod: Initial revision
14883:
14884: 1996-01-21 02:07 millert
14885:
14886: * sudoers.pod: looks reasonable, could be mroe readable
14887:
14888: 1996-01-20 23:47 millert
14889:
14890: * sudoers.pod: Initial revision
14891:
14892: 1996-01-16 14:38 millert
14893:
14894: * RUNSON: updated
14895:
14896: 1996-01-16 14:37 millert
14897:
14898: * OPTIONS: updated NO_ROOT_SUDO entry
14899:
14900: 1996-01-15 11:37 millert
14901:
14902: * RUNSON: [no log message]
14903:
14904: 1996-01-15 11:34 millert
14905:
14906: * sudo.c: fixed SECURE_PATH
14907:
14908: 1996-01-14 20:55 millert
14909:
14910: * RUNSON: udpa`ted for 1.4
14911:
14912: 1996-01-14 20:52 millert
14913:
14914: * configure.in: AIX aixcrypt.exp now uses $(srcdir)
14915:
14916: 1996-01-14 20:32 millert
14917:
14918: * TROUBLESHOOTING: added entry for anal ansi compilers
14919:
14920: 1996-01-14 16:13 millert
14921:
14922: * INSTALL: added info on libcrypt_i for SCO
14923:
14924: 1996-01-14 16:05 millert
14925:
14926: * TODO: [no log message]
14927:
14928: 1996-01-14 15:39 millert
14929:
14930: * sample.sudoers: added comments
14931:
14932: 1996-01-14 15:25 millert
14933:
14934: * TODO: 1.4 release
14935:
14936: 1996-01-14 15:22 millert
14937:
14938: * README, config.h.in, configure.in, CHANGES: ++version
14939:
14940: 1996-01-14 15:21 millert
14941:
14942: * BUGS: ++version and fixed ISC
14943:
14944: 1996-01-14 15:19 millert
14945:
14946: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
14947: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
14948: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
14949: logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
14950: testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
14951: ++version
14952:
14953: 1996-01-14 15:16 millert
14954:
14955: * interfaces.c: added STUB_LOAD_INTERFACES ++version
14956:
14957: 1996-01-14 15:14 millert
14958:
14959: * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
14960: emul/utime.h: ++version
14961:
14962: 1996-01-14 15:13 millert
14963:
14964: * PORTING: added info about fd_set in tgetpass added info on
14965: interfaces.c
14966:
14967: 1996-01-11 13:22 millert
14968:
14969: * dce_pwent.c: added sudo header
14970:
14971: 1996-01-11 13:04 millert
14972:
14973: * tgetpass.c: fixed a typo
14974:
14975: 1996-01-11 13:01 millert
14976:
14977: * Makefile.in: tgetpass.o is now only linked in with sudo (not
14978: visudo)
14979:
14980: 1996-01-09 12:56 millert
14981:
14982: * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
14983: configure.in: ++version
14984:
14985: 1996-01-09 12:54 millert
14986:
14987: * emul/utime.h: added copyright notice
14988:
14989: 1996-01-09 12:52 millert
14990:
14991: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
14992: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
14993: interfaces.c, logging.c, options.h, parse.c, parse.lex,
14994: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
14995: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
14996: visudo.c: ++version
14997:
14998: 1996-01-09 12:46 millert
14999:
15000: * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15001: svr4'ish boxen
15002:
15003: 1996-01-09 12:42 millert
15004:
15005: * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15006:
15007: 1996-01-09 12:41 millert
15008:
15009: * config.h.in: added check for sys/bsdtypes.h
15010:
15011: 1996-01-07 16:00 millert
15012:
15013: * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15014:
15015: 1996-01-07 15:55 millert
15016:
15017: * TROUBLESHOOTING: added 2 entries
15018:
15019: 1996-01-07 15:55 millert
15020:
15021: * Makefile.in: added FAQ
15022:
15023: 1996-01-07 14:26 millert
15024:
15025: * TROUBLESHOOTING: added section on syslog
15026:
15027: 1996-01-07 14:25 millert
15028:
15029: * configure.in: added AC_ISC_POSIX for better ISC support
15030:
15031: 1996-01-07 14:25 millert
15032:
15033: * config.h.in: fixed typo
15034:
15035: 1996-01-07 14:25 millert
15036:
15037: * config.h.in: added define for _POSIX_SOURCE
15038:
15039: 1996-01-04 00:41 millert
15040:
15041: * configure.in: fixed check for lsearch()
15042:
15043: 1995-12-21 21:53 millert
15044:
15045: * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15046: (should not happen)
15047:
15048: 1995-12-20 17:02 millert
15049:
15050: * configure.in: now only define HAVE_LSEARCH if there is a
15051: corresponding search.h
15052:
15053: 1995-12-20 15:52 millert
15054:
15055: * interfaces.c: works on ISC again
15056:
15057: 1995-12-18 17:36 millert
15058:
15059: * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15060: libcompat
15061:
15062: 1995-12-18 17:32 millert
15063:
15064: * lsearch.c: char * -> const char *
15065:
15066: 1995-12-18 17:29 millert
15067:
15068: * configure.in: now looks in -lcompat for lsearch()
15069:
15070: 1995-12-18 17:23 millert
15071:
15072: * Makefile.in: remove sudo.core visudo.core for clan target
15073:
15074: 1995-12-17 22:53 millert
15075:
15076: * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15077:
15078: 1995-12-17 22:36 millert
15079:
15080: * Makefile.in: fixed another occurence of sudo_getpwuid.*
15081:
15082: 1995-12-17 22:30 millert
15083:
15084: * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15085:
15086: 1995-12-17 22:22 millert
15087:
15088: * configure.in: moved the "echo"
15089:
15090: 1995-12-17 22:09 millert
15091:
15092: * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15093: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15094: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15095: ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15096: parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15097: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15098: tgetpass.c, utime.c, version.h, visudo.c: ++version
15099:
15100: 1995-12-17 22:04 millert
15101:
15102: * testsudoers.c: added group support
15103:
15104: 1995-12-17 22:00 millert
15105:
15106: * sample.sudoers: added group entry
15107:
15108: 1995-12-17 21:59 millert
15109:
15110: * sudoers.man: documented group support
15111:
15112: 1995-12-17 21:50 millert
15113:
15114: * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15115:
15116: 1995-12-15 17:45 millert
15117:
15118: * check.c: tkfile was too short and overflowed the kerberos realm
15119:
15120: 1995-12-11 17:09 millert
15121:
15122: * sudo.c: now copy command args directly from Argv
15123:
15124: 1995-12-11 15:55 millert
15125:
15126: * sudo.c: replaced code to copy cmnd_args so that is does not use
15127: realloc since most realloc()'s really stink
15128:
15129: 1995-12-08 14:11 millert
15130:
15131: * configure.in: syslog() fixed in hpux 10.01
15132:
15133: 1995-12-06 17:45 millert
15134:
15135: * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15136: if appropriate)
15137:
15138: 1995-12-06 17:30 millert
15139:
15140: * configure.in: better error if cannot find skey incs or libs
15141:
15142: 1995-12-06 17:26 millert
15143:
15144: * aclocal.m4: now use a temp file for determining max len of uid_t
15145: in string form. the old hacky way broke on netbsd
15146:
15147: 1995-12-05 19:02 millert
15148:
15149: * sudo.c: added set of parens and a space
15150:
15151: 1995-12-05 18:58 millert
15152:
15153: * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15154:
15155: 1995-12-05 18:58 millert
15156:
15157: * check.c: modified a comment
15158:
15159: 1995-12-05 18:57 millert
15160:
15161: * Makefile.in: fixed up testsudoers target
15162:
15163: 1995-12-05 18:56 millert
15164:
15165: * configure.in: DCE changes from Jeff Earickson
15166: <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15167: SUDO_FDFLAGS and VISUDO_LDFLAGS
15168:
15169: 1995-12-05 18:17 millert
15170:
15171: * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15172: SUDO_LDFLAGS, VISUDO_LDFLAGS
15173:
15174: 1995-11-27 23:32 millert
15175:
15176: * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15177:
15178: 1995-11-27 23:17 millert
15179:
15180: * check.c: LONG_SKEY_PROMPT is less of a klusge /
15181:
15182: 1995-11-27 23:17 millert
15183:
15184: * configure.in: fixed typos w/ dce stuff
15185:
15186: 1995-11-27 23:14 millert
15187:
15188: * Makefile.in: added dce_pwent.c
15189:
15190: 1995-11-26 13:48 millert
15191:
15192: * INSTALL: amended section on combining authentication mechanisms
15193:
15194: 1995-11-26 13:48 millert
15195:
15196: * PORTING: minor updates for 1.3.6
15197:
15198: 1995-11-26 13:47 millert
15199:
15200: * TROUBLESHOOTING: added 2 more entries
15201:
15202: 1995-11-26 13:39 millert
15203:
15204: * BUGS: updated for 1.3.6
15205:
15206: 1995-11-26 13:39 millert
15207:
15208: * README: overhauled
15209:
15210: 1995-11-25 21:23 millert
15211:
15212: * INSTALL: rewrote for sudo 1.3.6
15213:
15214: 1995-11-25 21:23 millert
15215:
15216: * TROUBLESHOOTING: added 3 entries
15217:
15218: 1995-11-25 13:53 millert
15219:
15220: * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15221: since many includes don't prototype it. gag me.
15222:
15223: 1995-11-25 13:23 millert
15224:
15225: * sudo.h: removed prototype for sudo_getpwuid() since convex C
15226: compiler choked on it.
15227:
15228: 1995-11-25 13:23 millert
15229:
15230: * sudo.c: added prototype for sudo_getpwuid()
15231:
15232: 1995-11-25 13:23 millert
15233:
15234: * lsearch.c: now compiles on strict ANSI compilers
15235:
15236: 1995-11-24 23:56 millert
15237:
15238: * check.c: added LONG_SKEY_PROMPT support
15239:
15240: 1995-11-24 23:55 millert
15241:
15242: * Makefile.in: added extra $'s for make to eat up, yum.
15243:
15244: 1995-11-24 23:38 millert
15245:
15246: * OPTIONS, options.h: added LONG_SKEY_PROMPT
15247:
15248: 1995-11-24 18:48 millert
15249:
15250: * check.c: s/key support now works with normal s/key as well as
15251: logdaemon
15252:
15253: 1995-11-24 18:46 millert
15254:
15255: * options.h, OPTIONS: added SKEY_ONLY
15256:
15257: 1995-11-24 18:46 millert
15258:
15259: * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15260:
15261: 1995-11-24 00:42 millert
15262:
15263: * INSTALL: added DCE note added more AIX notes
15264:
15265: 1995-11-24 00:39 millert
15266:
15267: * sudo.c: now include pthread.h for DCE support
15268:
15269: 1995-11-23 22:22 millert
15270:
15271: * check.c: dce_pwent() is ok after all .,
15272:
15273: 1995-11-23 22:21 millert
15274:
15275: * logging.c: now uses SYSLOG() macro that equates to either
15276: syslog() or syslog_wrapper
15277:
15278: 1995-11-23 21:44 millert
15279:
15280: * dce_pwent.c: minor formatting changes. renamed check() to
15281: somthing less generic
15282:
15283: 1995-11-23 21:27 millert
15284:
15285: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15286: visudo.c: now uses user_pw_ent and simple macros to get at the
15287: contents
15288:
15289: 1995-11-22 20:35 millert
15290:
15291: * check.c: simpler dec unix C2 support
15292:
15293: 1995-11-22 20:35 millert
15294:
15295: * getspwuid.c: now sets crypt_type for DEC unix C2
15296:
15297: 1995-11-21 18:00 millert
15298:
15299: * configure.in: added csops paths for skey
15300:
15301: 1995-11-21 16:27 millert
15302:
15303: * getspwuid.c: now includes string.h for strdup() prototype
15304:
15305: 1995-11-21 01:47 millert
15306:
15307: * getspwuid.c: fixed a few typos
15308:
15309: 1995-11-20 22:59 millert
15310:
15311: * check.c: now includes skey.h
15312:
15313: 1995-11-20 22:10 millert
15314:
15315: * getspwuid.c: fixed up comments
15316:
15317: 1995-11-20 22:04 millert
15318:
15319: * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15320:
15321: 1995-11-20 22:01 millert
15322:
15323: * sudo.c: now uses sudo_pw_ent
15324:
15325: 1995-11-20 21:50 millert
15326:
15327: * testsudoers.c: now uses sudo_pw_ent
15328:
15329: 1995-11-20 21:40 millert
15330:
15331: * visudo.c: now sets sudo_pw_ent
15332:
15333: 1995-11-20 21:28 millert
15334:
15335: * getspwuid.c: Initial revision
15336:
15337: 1995-11-20 21:28 millert
15338:
15339: * tgetpass.c: moved dce stuff into compat.h
15340:
15341: 1995-11-20 21:27 millert
15342:
15343: * sudo.h, logging.c: now uses sudo_pw_ent
15344:
15345: 1995-11-20 21:27 millert
15346:
15347: * Makefile.in: added sudo_getpwuid.c
15348:
15349: 1995-11-20 21:25 millert
15350:
15351: * compat.h: added dce support
15352:
15353: 1995-11-20 21:13 millert
15354:
15355: * parse.yacc: now uses sudo_pw_ent
15356:
15357: 1995-11-20 14:40 millert
15358:
15359: * check.c: fixed exempt_group stuff for OS's that don't put base
15360: gid in group vector
15361:
15362: 1995-11-20 01:39 millert
15363:
15364: * check.c: S/Key support now works with sunos4 shadow passwords
15365:
15366: 1995-11-19 22:31 millert
15367:
15368: * Makefile.in: fixed clean rule
15369:
15370: 1995-11-19 22:31 millert
15371:
15372: * config.h.in, configure.in: added DCE support
15373:
15374: 1995-11-19 22:30 millert
15375:
15376: * tgetpass.c: DCE & KERB support
15377:
15378: 1995-11-19 22:30 millert
15379:
15380: * check.c: first stab at dce support
15381:
15382: 1995-11-19 22:24 millert
15383:
15384: * dce_pwent.c: now smells like sudo
15385:
15386: 1995-11-19 22:11 millert
15387:
15388: * dce_pwent.c: Initial revision
15389:
15390: 1995-11-19 21:36 millert
15391:
15392: * check.c: skey'd sudo now works w/ normal password as well
15393:
15394: 1995-11-19 18:37 millert
15395:
15396: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15397: find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15398: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15399: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15400: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15401: tgetpass.c, utime.c, version.h, visudo.c: updated version number
15402:
15403: 1995-11-19 18:32 millert
15404:
15405: * README: updated to reflect version change
15406:
15407: 1995-11-19 18:27 millert
15408:
15409: * configure.in: --with options now line up ++version
15410:
15411: 1995-11-19 18:26 millert
15412:
15413: * sudo.h: removed unecesary S/Key stuff
15414:
15415: 1995-11-19 18:25 millert
15416:
15417: * configure.in: fixed S/Key support
15418:
15419: 1995-11-19 18:24 millert
15420:
15421: * Makefile.in: -I stuff now goes in CPPFLAGS
15422:
15423: 1995-11-19 18:23 millert
15424:
15425: * check.c: fixed SKey support
15426:
15427: 1995-11-19 15:23 millert
15428:
15429: * README: updated version
15430:
15431: 1995-11-19 13:59 millert
15432:
15433: * OPTIONS: fixed description of EXEMPTGROUP
15434:
15435: 1995-11-19 10:47 millert
15436:
15437: * sudo.c: more people use _RLD_ than just alphas...
15438:
15439: 1995-11-18 21:35 millert
15440:
15441: * Makefile.in: replaced $man_prefix with $mandir
15442:
15443: 1995-11-18 21:30 millert
15444:
15445: * configure.in: fixed a typo
15446:
15447: 1995-11-18 21:28 millert
15448:
15449: * Makefile.in: now use more GNU'ish dir names
15450:
15451: 1995-11-18 21:27 millert
15452:
15453: * configure.in: now set *dir correctly (can override from command
15454: line)
15455:
15456: 1995-11-18 19:17 millert
15457:
15458: * sudo.c: now deal with situations where we getwd() fails
15459:
15460: 1995-11-17 00:37 millert
15461:
15462: * Makefile.in: added etc_dir, bin_dir, sbin_dir
15463:
15464: 1995-11-17 00:37 millert
15465:
15466: * configure.in: added sbin_dir
15467:
15468: 1995-11-16 21:28 millert
15469:
15470: * Makefile.in: now ship a flex-generated lex.yy.c
15471:
15472: 1995-11-16 21:09 millert
15473:
15474: * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15475: SUDOERS_OWNER
15476:
15477: 1995-11-16 21:06 millert
15478:
15479: * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15480: overridden via Makefile
15481:
15482: 1995-11-16 21:05 millert
15483:
15484: * options.h: no more error for redefining SUDOERS_OWNER
15485:
15486: 1995-11-16 21:05 millert
15487:
15488: * OPTIONS: expanded SUDOERS_OWNER section
15489:
15490: 1995-11-16 03:05 millert
15491:
15492: * visudo.c: now warn if chown(2) failed
15493:
15494: 1995-11-16 02:55 millert
15495:
15496: * logging.c: better default warning for NO_SUDOERS_FILE
15497:
15498: 1995-11-16 02:54 millert
15499:
15500: * sudo.c: added missing set_perms() no more cryptic message if the
15501: sudoers file is zero length, now just give a parse error
15502:
15503: 1995-11-16 02:42 millert
15504:
15505: * logging.c: better diagnostics if NO_SUDOERS_FILE
15506:
15507: 1995-11-16 02:41 millert
15508:
15509: * sudo.c: check_sudoers() now catches sudoers files that are not
15510: readable (but are stat'able).
15511:
15512: 1995-11-13 01:12 millert
15513:
15514: * configure.in: now add -D__STDC__ for convex cc (not gcc)
15515:
15516: 1995-11-13 00:52 millert
15517:
15518: * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15519: exec_prefix
15520:
15521: 1995-11-13 00:52 millert
15522:
15523: * Makefile.in: now uses exec_prefix & prefix from configure
15524:
15525: 1995-11-13 00:16 millert
15526:
15527: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15528: parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15529: tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15530: so shadow build trees can have a custom copy of options.h
15531:
15532: 1995-11-13 00:15 millert
15533:
15534: * check.c: user_is_exempt() is no longer a hack, it now uses
15535: getgrnam()
15536:
15537: 1995-11-12 23:56 millert
15538:
15539: * options.h: EXEMPTGROUP is now "sudo"
15540:
15541: 1995-11-12 22:25 millert
15542:
15543: * configure.in: MAN_POSTINSTALL now contains a leading space
15544:
15545: 1995-11-12 22:25 millert
15546:
15547: * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15548: now removes testsudoers in clean:
15549:
15550: 1995-11-12 22:24 millert
15551:
15552: * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15553:
15554: 1995-10-30 15:51 millert
15555:
15556: * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15557: don't get spoofed into using a bogus server
15558:
15559: 1995-09-29 17:50 millert
15560:
15561: * parse.yacc: now explicately initialize match[] tp be FALSE
15562:
15563: 1995-09-23 16:48 millert
15564:
15565: * sudo.c: removed unused variable now passes -Wall
15566:
15567: 1995-09-23 16:48 millert
15568:
15569: * parse.yacc: yyerror and dumpaliases are now void's now passes
15570: -Wall
15571:
15572: 1995-09-23 16:48 millert
15573:
15574: * parse.lex: added prototype for yyerror
15575:
15576: 1995-09-23 16:47 millert
15577:
15578: * interfaces.c: rmeoved unused cruft now passes -Wall
15579:
15580: 1995-09-23 16:47 millert
15581:
15582: * check.c, logging.c, parse.c: now passes -Wall
15583:
15584: 1995-09-23 16:46 millert
15585:
15586: * Makefile.in: fixed headers that moved to emul dir
15587:
15588: 1995-09-23 12:05 millert
15589:
15590: * logging.c: fixed deref of nil pointer if no args
15591:
15592: 1995-09-15 19:18 millert
15593:
15594: * OPTIONS: added a caveat to FQDN section
15595:
15596: 1995-09-13 19:48 millert
15597:
15598: * Makefile.in: more $srcdir support for install targets
15599:
15600: 1995-09-13 17:17 millert
15601:
15602: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15603: putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15604: visudo.c: don't include malloc.h if we include stdlib.h
15605:
15606: 1995-09-12 21:44 millert
15607:
15608: * parse.yacc: local search.h now lives in emul
15609:
15610: 1995-09-12 21:41 millert
15611:
15612: * lsearch.c: local search.h now lives in emul
15613:
15614: 1995-09-12 21:41 millert
15615:
15616: * check.c, utime.c: local utime.h now lives in emul dir
15617:
15618: 1995-09-12 21:38 millert
15619:
15620: * Makefile.in: added support for building in other than the
15621: sourcedir
15622:
15623: 1995-09-10 14:01 millert
15624:
15625: * OPTIONS: annotated CSOPS_INSULTS option
15626:
15627: 1995-09-10 13:56 millert
15628:
15629: * TROUBLESHOOTING: updated shadow passwords blurb
15630:
15631: 1995-09-09 21:00 millert
15632:
15633: * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15634: shell and passes along foo as the arguments
15635:
15636: 1995-09-09 18:52 millert
15637:
15638: * parse.lex: collapsed pathname and dir sections into one -- its
15639: now less expensive
15640:
15641: 1995-09-09 18:34 millert
15642:
15643: * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15644: append() and fill() now take args to make the above work
15645:
15646: 1995-09-08 20:51 millert
15647:
15648: * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15649: a tty on fd 1 to erroneously have "none" as their tty
15650:
15651: 1995-09-04 15:35 millert
15652:
15653: * check.c: timestampfile is now a global static removed decl of
15654: timestampfile in remove_timestamp since we can just use the
15655: global one
15656:
15657: 1995-09-04 15:28 millert
15658:
15659: * check.c: created touch() to update timestamps added
15660: USE_TTY_TICKETS support (bit of a kludge)
15661:
15662: 1995-09-04 15:28 millert
15663:
15664: * compat.h: added _S_IFDIR and S_ISDIR
15665:
15666: 1995-09-04 15:22 millert
15667:
15668: * OPTIONS, options.h: added USE_TTY_TICKETS
15669:
15670: 1995-09-04 00:38 millert
15671:
15672: * parse.yacc: removed const from casts for lsearch() & lfind() to
15673: placate irix 4.x C compiler
15674:
15675: 1995-09-03 14:12 millert
15676:
15677: * sudo.c: now only strip '/dev/' off of a tty if it starts with
15678: '/dev/'
15679:
15680: 1995-09-03 14:12 millert
15681:
15682: * pathnames.h.in: added _PATH_DEV
15683:
15684: 1995-09-03 14:11 millert
15685:
15686: * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15687: tcgetattr only if have termios.h
15688:
15689: 1995-09-03 14:09 millert
15690:
15691: * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15692: not int for c_?flag
15693:
15694: 1995-09-03 13:19 millert
15695:
15696: * parse.lex, parse.yacc: fixed a spelling error
15697:
15698: 1995-09-03 13:17 millert
15699:
15700: * Makefile.in: fixed typo
15701:
15702: 1995-09-02 12:55 millert
15703:
15704: * Makefile.in: fixed a comment
15705:
15706: 1995-09-02 12:54 millert
15707:
15708: * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15709: now that we dynamically allocate strings they need to be free()'d
15710:
15711: 1995-09-02 12:46 millert
15712:
15713: * parse.lex: dynamically allocates space for strings
15714:
15715: 1995-09-02 12:34 millert
15716:
15717: * sudo.h: no more MAXCOMMANDLENGTH
15718:
15719: 1995-09-01 22:25 millert
15720:
15721: * sudo.h: added decl of tty
15722:
15723: 1995-09-01 22:25 millert
15724:
15725: * logging.c, sudo.c: moved tty stuff into sudo.c
15726:
15727: 1995-09-01 14:18 millert
15728:
15729: * parse.c: fixed a logic bug. Was denying a command if user gave
15730: command line args but there were none in the sudoers file which
15731: is wrong.
15732:
15733: 1995-09-01 01:18 millert
15734:
15735: * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15736:
15737: 1995-09-01 01:13 millert
15738:
15739: * parse.lex: return foo; -> return(foo);
15740:
15741: 1995-09-01 01:03 millert
15742:
15743: * parse.yacc: fixed netgr_matches() prototype
15744:
15745: 1995-09-01 01:02 millert
15746:
15747: * parse.lex: added support for escaping "termination" characters
15748:
15749: 1995-09-01 00:55 millert
15750:
15751: * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
15752: command args
15753:
15754: 1995-09-01 00:50 millert
15755:
15756: * sudo.c: fixed comments
15757:
15758: 1995-09-01 00:49 millert
15759:
15760: * goodpath.c: fixed negation problem (doh!)
15761:
15762: 1995-09-01 00:25 millert
15763:
15764: * parse.yacc: fixed 2nd parameter to lfind()
15765:
15766: 1995-09-01 00:24 millert
15767:
15768: * parse.lex: now do bounds checking in fill() and append()
15769:
15770: 1995-09-01 00:23 millert
15771:
15772: * sudo.c: include netdb.h as we should added a missing void cast
15773: added SHELL_IF_NO_ARGS support now use realloc() properly. would
15774: fail if realloc actually moved the string instead of shrinking it
15775:
15776: 1995-09-01 00:17 millert
15777:
15778: * sample.sudoers: updated with examples of new features
15779:
15780: 1995-09-01 00:05 millert
15781:
15782: * goodpath.c: now set errno to EACCES if not a regular file or not
15783: executable
15784:
15785: 1995-09-01 00:04 millert
15786:
15787: * find_path.c: if given a fully-qualified or relative path we now
15788: check it with sudo_goodpath() and error out with the appropriate
15789: error message if the file does not exist or is not executable
15790:
15791: 1995-09-01 00:03 millert
15792:
15793: * lsearch.c, emul/search.h: now use correct args for lfind
15794:
15795: 1995-09-01 00:03 millert
15796:
15797: * logging.c: added a comment
15798:
15799: 1995-08-31 23:52 millert
15800:
15801: * insults.h: added in CSOps insults
15802:
15803: 1995-08-31 23:51 millert
15804:
15805: * ins_csops.h: Initial revision
15806:
15807: 1995-08-31 23:35 millert
15808:
15809: * tgetpass.c: added RCS id
15810:
15811: 1995-08-31 22:56 millert
15812:
15813: * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
15814: HAVE_GETWD
15815:
15816: 1995-08-31 22:55 millert
15817:
15818: * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
15819:
15820: 1995-08-31 22:54 millert
15821:
15822: * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
15823: -p now works with -s
15824:
15825: 1995-08-31 22:54 millert
15826:
15827: * parse.c: don't try to stat() "pseudo commands" like "validate"
15828:
15829: 1995-08-31 22:53 millert
15830:
15831: * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
15832: SHELL_IF_NO_ARGS
15833:
15834: 1995-08-31 22:53 millert
15835:
15836: * configure.in: added SecurID support added other insults to
15837: --with-csops
15838:
15839: 1995-08-31 22:52 millert
15840:
15841: * config.h.in: added HAVE_SECURID
15842:
15843: 1995-08-31 22:52 millert
15844:
15845: * Makefile.in: added clobber target added ins_csops.h now gets
15846: CFLAGS from configure
15847:
15848: 1995-08-31 22:46 millert
15849:
15850: * aclocal.m4: relaxed SUDO_FULL_VOID
15851:
15852: 1995-08-31 22:44 millert
15853:
15854: * visudo.c: function comment blocks are now in same style as rest
15855: of code
15856:
15857: 1995-08-31 22:44 millert
15858:
15859: * testsudoers.c: added support for command line args in
15860: /etc/sudoers
15861:
15862: 1995-08-31 22:43 millert
15863:
15864: * sudoers.man: updated to have command args in the sudoers file
15865:
15866: 1995-08-31 22:42 millert
15867:
15868: * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
15869: VARIABLES section
15870:
15871: 1995-08-19 19:32 millert
15872:
15873: * parse.yacc: PATH renamed to COMMAND
15874:
15875: 1995-08-19 19:31 millert
15876:
15877: * parse.lex: it is now a parse error for directories to have args
15878: attached to them
15879:
15880: 1995-08-19 19:30 millert
15881:
15882: * logging.c: now say command args if telling user to buzz off
15883:
15884: 1995-08-19 19:30 millert
15885:
15886: * sudo.c: -s no longer indicates end of args sped up loading on
15887: cmnd_args in load_cmnd()
15888:
15889: 1995-08-19 19:29 millert
15890:
15891: * parse.c: removed an unreachable statement
15892:
15893: 1995-08-19 17:53 millert
15894:
15895: * parse.lex: made more efficient by pulling out the terminators
15896: when in GOTCMND state and making them their own rule
15897:
15898: 1995-08-14 00:07 millert
15899:
15900: * sudo.h: removed MAXLOGLEN since it is no longer used
15901:
15902: 1995-08-14 00:07 millert
15903:
15904: * parse.lex: now allows command args
15905:
15906: 1995-08-14 00:06 millert
15907:
15908: * parse.c: now groks command arguments
15909:
15910: 1995-08-13 23:39 millert
15911:
15912: * logging.c: now sets tty correctly when piped input
15913:
15914: 1995-08-13 23:35 millert
15915:
15916: * sudo.c: fixed loading of cmnd_args (was including command name
15917: too)
15918:
15919: 1995-08-13 23:34 millert
15920:
15921: * logging.c: fixed a core dump due to incorrect if construct
15922:
15923: 1995-08-13 00:33 millert
15924:
15925: * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
15926: -lsocket if irix
15927:
15928: 1995-08-13 00:33 millert
15929:
15930: * aclocal.m4: fixed check for ISC
15931:
15932: 1995-08-13 00:32 millert
15933:
15934: * sudo.c: now sets cmnd_args used by log_error() and that will be
15935: used by the parse to check against command args
15936:
15937: 1995-08-13 00:32 millert
15938:
15939: * sudo.h: added cmnd_args
15940:
15941: 1995-08-13 00:31 millert
15942:
15943: * logging.c: now dynamically allocate logline since we can guess at
15944: its size
15945:
15946: 1995-08-05 13:52 millert
15947:
15948: * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
15949: buffer remove "register" since the compiler knows more than I do
15950: now do a "basename" of the tty
15951:
15952: 1995-07-31 18:20 millert
15953:
15954: * configure.in: ++version
15955:
15956: 1995-07-30 22:37 millert
15957:
15958: * sudo.h: added shell extern changed MODE_* to be bit masks to
15959: allow for several options together
15960:
15961: 1995-07-30 22:36 millert
15962:
15963: * sudo.c: added -s (shell) option made MODE_* masks so we can do
15964: bitwise & and | to see if multiple flags are set.
15965:
15966: 1995-07-30 22:01 millert
15967:
15968: * check.c: added securid support
15969:
15970: 1995-07-30 14:38 millert
15971:
15972: * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
15973: with strcat()
15974:
15975: 1995-07-29 17:17 millert
15976:
15977: * Makefile.in, version.h: ++version
15978:
15979: 1995-07-27 06:52 millert
15980:
15981: * parse.yacc: fixed free() of an uninitialized pointer (yuck)
15982:
15983: 1995-07-26 22:00 millert
15984:
15985: * testsudoers.c: added netgr_matches
15986:
15987: 1995-07-26 21:29 millert
15988:
15989: * parse.c: cleaned up netgr_matches
15990:
15991: 1995-07-26 00:26 millert
15992:
15993: * RUNSON: updated for 1.3.4
15994:
15995: 1995-07-24 21:51 millert
15996:
15997: * Makefile.in: now installs sudoers.man -- really should clean this
15998: up though.
15999:
16000: 1995-07-24 21:18 millert
16001:
16002: * Makefile.in: added sudoers.cat and sudoers.man
16003:
16004: 1995-07-24 21:15 millert
16005:
16006: * sudo.man: pulled out stuff on the sudoers file format into a
16007: separate man page
16008:
16009: 1995-07-24 21:14 millert
16010:
16011: * sudoers.man: Initial revision
16012:
16013: 1995-07-24 21:04 millert
16014:
16015: * HISTORY: fixed up my email address
16016:
16017: 1995-07-24 20:03 millert
16018:
16019: * configure.in: added checks for innetgr and getdomainname
16020:
16021: 1995-07-24 20:02 millert
16022:
16023: * visudo.c: added dummy netgr_matches function
16024:
16025: 1995-07-24 20:01 millert
16026:
16027: * parse.c: added netgr_matches
16028:
16029: 1995-07-24 20:01 millert
16030:
16031: * parse.lex, parse.yacc: added NETGROUP support
16032:
16033: 1995-07-24 20:01 millert
16034:
16035: * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16036:
16037: 1995-07-24 18:07 millert
16038:
16039: * sudo.c: rewrote clean_env() that has rm_env() builtin
16040:
16041: 1995-07-23 19:58 millert
16042:
16043: * check.c: now cast uid to long in sprintf
16044:
16045: 1995-07-23 19:58 millert
16046:
16047: * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16048:
16049: 1995-07-23 19:57 millert
16050:
16051: * options.h: added _INSULTS suffix to HAL & GOONS
16052:
16053: 1995-07-23 19:35 millert
16054:
16055: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16056: new scheme of insult "unions" end
16057:
16058: 1995-07-23 17:48 millert
16059:
16060: * sudo.c: now uses MAX_UID_T_LEN
16061:
16062: 1995-07-23 17:48 millert
16063:
16064: * configure.in: added SUDO_UID_T_LEN !l
16065:
16066: 1995-07-23 17:48 millert
16067:
16068: * config.h.in: added MAX_UID_T_LEN
16069:
16070: 1995-07-23 17:47 millert
16071:
16072: * check.c: now use MAX_UID_T_LEN
16073:
16074: 1995-07-23 17:47 millert
16075:
16076: * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16077: check
16078:
16079: 1995-07-19 19:05 millert
16080:
16081: * configure.in: corrected version
16082:
16083: 1995-07-19 17:29 millert
16084:
16085: * configure.in: added sco support
16086:
16087: 1995-07-19 17:29 millert
16088:
16089: * aclocal.m4: hack to check for sco
16090:
16091: 1995-07-18 21:27 millert
16092:
16093: * interfaces.c: removed #include <net/route.h> since it was hosing
16094: some OS's
16095:
16096: 1995-07-18 13:35 millert
16097:
16098: * find_path.c: fixed prreadlink() prototype
16099:
16100: 1995-07-17 23:54 millert
16101:
16102: * check.c: added parens in #if's
16103:
16104: 1995-07-17 23:53 millert
16105:
16106: * configure.in: added SPW_ prefix
16107:
16108: 1995-07-17 23:20 millert
16109:
16110: * sudo.h: moved SPW_* to config.h.in
16111:
16112: 1995-07-17 23:19 millert
16113:
16114: * sudo.c: added a set of parens
16115:
16116: 1995-07-17 23:19 millert
16117:
16118: * config.h.in: added SPW_*
16119:
16120: 1995-07-17 22:50 millert
16121:
16122: * sudo.h: added SPW_* reordered error codes
16123:
16124: 1995-07-17 22:49 millert
16125:
16126: * check.c: moved SPW_* to sudo.h
16127:
16128: 1995-07-17 14:29 millert
16129:
16130: * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16131:
16132: 1995-07-17 14:29 millert
16133:
16134: * configure.in: AUTH -> SECUREWARE
16135:
16136: 1995-07-17 14:29 millert
16137:
16138: * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16139:
16140: 1995-07-17 00:22 millert
16141:
16142: * check.c: now uses SHADOW_TYPE to make shadow pw support more
16143: readable and modular. It's a start...
16144:
16145: 1995-07-17 00:21 millert
16146:
16147: * configure.in: added autodetection of shadow passwords
16148:
16149: 1995-07-17 00:20 millert
16150:
16151: * sudo.c: now uses SHADOW_TYPE define
16152:
16153: 1995-07-17 00:19 millert
16154:
16155: * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16156: defines
16157:
16158: 1995-07-17 00:19 millert
16159:
16160: * aclocal.m4: added SUDO_CHECK_SHADOW
16161:
16162: 1995-07-12 17:09 millert
16163:
16164: * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16165: took out test for memmove() since we dno longer use it...
16166:
16167: 1995-07-12 17:08 millert
16168:
16169: * CHANGES: updated
16170:
16171: 1995-07-12 17:05 millert
16172:
16173: * logging.c: added BROKEN_SYSLOG support
16174:
16175: 1995-07-12 17:05 millert
16176:
16177: * config.h.in: added BROKEN_SYSLOG
16178:
16179: 1995-07-12 17:04 millert
16180:
16181: * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16182: allow for a machine udpating its time from a server
16183:
16184: 1995-07-12 17:04 millert
16185:
16186: * sudo.man: added 2 security notes updated Nieusma's email addr
16187:
16188: 1995-07-12 14:18 millert
16189:
16190: * lsearch.c: changed a memmove() to memcpy() since we don't have to
16191: worry about overlapping segments.
16192:
16193: 1995-07-11 15:41 millert
16194:
16195: * interfaces.c: cleanup up the loop when interfaces are groped in
16196: so that it is readable
16197:
16198: 1995-07-11 14:52 millert
16199:
16200: * Makefile.in, version.h: ++version
16201:
16202: 1995-07-09 18:17 millert
16203:
16204: * CHANGES: annotated 124-126
16205:
16206: 1995-07-07 16:06 millert
16207:
16208: * check.c: fixed permissions check on /tmp/.odus
16209:
16210: 1995-07-06 19:35 millert
16211:
16212: * check.c: fixed some comments
16213:
16214: 1995-07-06 14:49 millert
16215:
16216: * check.c: now checks owner & mode of timedir also checks for bogus
16217: dates on timestamp file
16218:
16219: 1995-07-06 14:49 millert
16220:
16221: * OPTIONS: updated TIMEOUT info
16222:
16223: 1995-07-06 14:48 millert
16224:
16225: * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16226:
16227: 1995-07-06 14:47 millert
16228:
16229: * compat.h: added definition of S_IRWXU
16230:
16231: 1995-07-06 14:47 millert
16232:
16233: * CHANGES: updated
16234:
16235: 1995-07-03 14:16 millert
16236:
16237: * interfaces.c: added #ifdef to make it compile on strange arches
16238:
16239: 1995-07-02 18:13 millert
16240:
16241: * aclocal.m4: fixed check for fulkl void impl.
16242:
16243: 1995-07-02 09:56 millert
16244:
16245: * check.c: added mssing "static"
16246:
16247: 1995-07-01 20:41 millert
16248:
16249: * insults.h: replaced #elif with #else #if constructs for ancient C
16250: compilers
16251:
16252: 1995-07-01 20:18 millert
16253:
16254: * INSTALL: updated irix c2 & kerb5 info
16255:
16256: 1995-07-01 20:15 millert
16257:
16258: * configure.in: added shadow pw support for irix
16259:
16260: 1995-07-01 16:07 millert
16261:
16262: * CHANGES: last changes for sudo 1.3.3
16263:
16264: 1995-07-01 16:07 millert
16265:
16266: * TODO, BUGS: updated
16267:
16268: 1995-07-01 16:04 millert
16269:
16270: * configure.in: now calls SUDO_SOCK_SA_LEN
16271:
16272: 1995-07-01 16:04 millert
16273:
16274: * config.h.in: added HAVE_SA_LEN
16275:
16276: 1995-07-01 16:04 millert
16277:
16278: * aclocal.m4: added SUDO_SOCK_SA_LEN
16279:
16280: 1995-07-01 15:49 millert
16281:
16282: * interfaces.c: now works with ip implementations that use sa_len
16283: in sockaddr
16284:
16285: 1995-07-01 14:26 millert
16286:
16287: * INSTALL: added note about buggy AIX compiler
16288:
16289: 1995-07-01 14:24 millert
16290:
16291: * interfaces.c: now include sys/time.h for AIX
16292:
16293: 1995-06-27 22:35 millert
16294:
16295: * Makefile.in: getcwd -> getwd
16296:
16297: 1995-06-27 21:28 millert
16298:
16299: * interfaces.c: now works for ISC and others. yay.
16300:
16301: 1995-06-26 14:24 millert
16302:
16303: * Makefile.in, version.h: version++
16304:
16305: 1995-06-22 20:26 millert
16306:
16307: * aclocal.m4: fixed test for full void impl
16308:
16309: 1995-06-22 20:25 millert
16310:
16311: * sudo.c: now check to see that st_dev is non-zero before assuming
16312: that we are being spoofed
16313:
16314: 1995-06-20 16:56 millert
16315:
16316: * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16317: AC_FUNC_UTIME_NULL
16318:
16319: 1995-06-19 16:32 millert
16320:
16321: * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16322:
16323: 1995-06-19 16:10 millert
16324:
16325: * logging.c: added cast for ttyname()
16326:
16327: 1995-06-19 15:23 millert
16328:
16329: * configure.in: fixed typo
16330:
16331: 1995-06-19 15:19 millert
16332:
16333: * check.c: now deal correctly with all known variation of utime()
16334: -- yippe
16335:
16336: 1995-06-19 15:19 millert
16337:
16338: * configure.in: added SUDO_FUNC_UTIME_POSIX
16339:
16340: 1995-06-19 15:19 millert
16341:
16342: * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16343:
16344: 1995-06-19 15:14 millert
16345:
16346: * config.h.in: added HAVE_UTIME_POSIX
16347:
16348: 1995-06-19 13:38 millert
16349:
16350: * check.c: fixed a typo
16351:
16352: 1995-06-19 13:29 millert
16353:
16354: * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16355:
16356: 1995-06-19 13:20 millert
16357:
16358: * check.c: fixed fascist C compiler warning
16359:
16360: 1995-06-18 23:14 millert
16361:
16362: * interfaces.c: now set strioctl.ic_timout in STRSET() now
16363: initialize num_interfaces to 0 (just to be anal)
16364:
16365: 1995-06-18 18:06 millert
16366:
16367: * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16368:
16369: 1995-06-18 18:05 millert
16370:
16371: * logging.c: added tty logging
16372:
16373: 1995-06-18 16:04 millert
16374:
16375: * interfaces.c: reworked the ISC code
16376:
16377: 1995-06-18 15:27 millert
16378:
16379: * Makefile.in, version.h: updated version
16380:
16381: 1995-06-18 15:24 millert
16382:
16383: * check.c: now expect old-style utime(3) if utime() can't take NULL
16384: as an arg
16385:
16386: 1995-06-18 15:08 millert
16387:
16388: * configure.in: added check for utime.h
16389:
16390: 1995-06-18 15:08 millert
16391:
16392: * config.h.in: added HAVE_UTIME_H
16393:
16394: 1995-06-18 14:48 millert
16395:
16396: * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16397:
16398: 1995-06-18 13:58 millert
16399:
16400: * configure.in: now search for kerb libs and includes
16401:
16402: 1995-06-18 13:03 millert
16403:
16404: * check.c: added support for utime(2)'s that can't take a NULL
16405: parameter
16406:
16407: 1995-06-18 13:03 millert
16408:
16409: * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16410: t belongs
16411:
16412: 1995-06-17 20:46 millert
16413:
16414: * configure.in: added utime(s) stuff
16415:
16416: 1995-06-17 20:46 millert
16417:
16418: * check.c: now use utime()
16419:
16420: 1995-06-17 20:46 millert
16421:
16422: * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16423:
16424: 1995-06-17 19:12 millert
16425:
16426: * utime.c: now use HAVE_UTIME_NULL
16427:
16428: 1995-06-17 19:02 millert
16429:
16430: * utime.c, emul/utime.h: Initial revision
16431:
16432: 1995-06-17 18:24 millert
16433:
16434: * check.c: need to setuid(0) to make kerb4 stuff work.
16435:
16436: 1995-06-17 18:14 millert
16437:
16438: * tgetpass.c: no more special case for kerberos
16439:
16440: 1995-06-17 18:13 millert
16441:
16442: * config.h.in: took out setreuid and setresuid stuff added kerb5
16443: stuff (use kerb4 emulation)
16444:
16445: 1995-06-17 18:13 millert
16446:
16447: * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16448: to 128 if kerberos
16449:
16450: 1995-06-17 18:12 millert
16451:
16452: * check.c: now use private ticket file for kerberos support to
16453: avoid trouncing on system one
16454:
16455: 1995-06-15 00:48 millert
16456:
16457: * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16458:
16459: 1995-06-15 00:47 millert
16460:
16461: * sudo.c: added anti-spoofing support
16462:
16463: 1995-06-15 00:47 millert
16464:
16465: * parse.c: now use global cmnd_st
16466:
16467: 1995-06-15 00:47 millert
16468:
16469: * logging.c: added SPOOF_ATTEMPT suypport
16470:
16471: 1995-06-14 23:41 millert
16472:
16473: * testsudoers.c, visudo.c: added void casts where appropriate
16474:
16475: 1995-06-14 23:40 millert
16476:
16477: * parse.yacc: fixed up spacing and added void casts where
16478: appropriate
16479:
16480: 1995-06-14 23:27 millert
16481:
16482: * sudo.c: fixed problem with "-p prompt" but no args
16483:
16484: 1995-06-14 04:43 millert
16485:
16486: * sudo.man: added BUGS and annotated -l description
16487:
16488: 1995-06-14 04:43 millert
16489:
16490: * sudo.h: validate() now takes a flag
16491:
16492: 1995-06-14 04:43 millert
16493:
16494: * sudo.c: validate() now takes a flag added -l
16495:
16496: 1995-06-14 04:42 millert
16497:
16498: * parse.yacc: added support for -l
16499:
16500: 1995-06-14 04:41 millert
16501:
16502: * parse.c: validate() now takes a flag that says whether or not to
16503: check the command
16504:
16505: 1995-06-07 21:36 millert
16506:
16507: * logging.c: now deals with Argv == 1
16508:
16509: 1995-06-07 21:34 millert
16510:
16511: * sudo.man: added -p option
16512:
16513: 1995-06-07 21:27 millert
16514:
16515: * sudo.c: added prompt support reworked parse_args()
16516:
16517: 1995-06-07 20:49 millert
16518:
16519: * sudo.h: added prompt
16520:
16521: 1995-06-07 20:49 millert
16522:
16523: * options.h: added PASSPROMPT
16524:
16525: 1995-06-07 20:48 millert
16526:
16527: * check.c: now use BUFSIZ as length of kerb password added kpass so
16528: pass is always a char * now use prompt global when asking for a
16529: password
16530:
16531: 1995-06-07 20:47 millert
16532:
16533: * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16534:
16535: 1995-06-07 20:43 millert
16536:
16537: * OPTIONS: added PASSPROMPT
16538:
16539: 1995-06-07 01:44 millert
16540:
16541: * configure.in: only look for -lufc or -lcrypt if crypt() not in
16542: libc
16543:
16544: 1995-06-07 01:43 millert
16545:
16546: * check.c: don't exit on kerb error, just warn if k_errno ==
16547: KDC_PR_UNKNOWN (unknown user) silently fail
16548:
16549: 1995-06-06 22:44 millert
16550:
16551: * INSTALL: added kerb4 note
16552:
16553: 1995-06-06 22:43 millert
16554:
16555: * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16556:
16557: 1995-06-06 22:41 millert
16558:
16559: * check.c: removed debugging printf
16560:
16561: 1995-06-06 22:33 millert
16562:
16563: * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16564: setresuid
16565:
16566: 1995-06-06 22:32 millert
16567:
16568: * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16569: HAVE_SETRESUID
16570:
16571: 1995-06-06 22:32 millert
16572:
16573: * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16574: setreuid emulation with setresuid if applic
16575:
16576: 1995-06-06 22:31 millert
16577:
16578: * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16579: chown() hack if no setreuid() or a broken one
16580:
16581: 1995-06-05 23:44 millert
16582:
16583: * config.h.in: added HAVE_KERBEROS
16584:
16585: 1995-06-05 23:43 millert
16586:
16587: * tgetpass.c: added KERBEROS support (long passwords)
16588:
16589: 1995-06-05 23:42 millert
16590:
16591: * check.c, configure.in: added kerberos support
16592:
16593: 1995-06-03 19:36 millert
16594:
16595: * sudo.h: added MODE_BACKGROUND
16596:
16597: 1995-06-03 19:36 millert
16598:
16599: * sudo.man: escaped dashes added -b option
16600:
16601: 1995-06-03 19:34 millert
16602:
16603: * sudo.c: added -b option
16604:
16605: 1995-06-03 18:52 millert
16606:
16607: * check.c: added crypt() for osf/1 3.x enhanced secuiry
16608:
16609: 1995-06-03 18:18 millert
16610:
16611: * configure.in: now check for -lcrypt
16612:
16613: 1995-06-03 18:00 millert
16614:
16615: * interfaces.c: added ENXIO like EADDRNOTAVAIL
16616:
16617: 1995-05-07 23:14 millert
16618:
16619: * configure.in: now emulate getwd(), not getcwd()
16620:
16621: 1995-05-07 23:13 millert
16622:
16623: * sudo.c: getcwd() -> getwd()
16624:
16625: 1995-05-07 23:12 millert
16626:
16627: * getwd.c: getcwd -> getwd
16628:
16629: 1995-05-02 01:34 millert
16630:
16631: * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16632:
16633: 1995-05-02 01:34 millert
16634:
16635: * insults.h: broke out insults into separate include files
16636:
16637: 1995-05-02 01:32 millert
16638:
16639: * options.h, OPTIONS: added GOONS
16640:
16641: 1995-05-02 01:32 millert
16642:
16643: * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16644:
16645: 1995-05-01 23:34 millert
16646:
16647: * Makefile.in, version.h: ++version
16648:
16649: 1995-05-01 23:34 millert
16650:
16651: * visudo.c: moved signal handler setup to setup_signals()
16652:
16653: 1995-05-01 23:33 millert
16654:
16655: * sudo.h: added load_interfaces()
16656:
16657: 1995-05-01 23:33 millert
16658:
16659: * sudo.c: moved load_interfaces to interfaces.c
16660:
16661: 1995-05-01 23:33 millert
16662:
16663: * parse.yacc: added clearaliases
16664:
16665: 1995-05-01 23:33 millert
16666:
16667: * OPTIONS, options.h: added FAST_MATCH
16668:
16669: 1995-05-01 23:32 millert
16670:
16671: * parse.lex: now uses clearaliases variable
16672:
16673: 1995-05-01 23:31 millert
16674:
16675: * interfaces.c: Initial revision
16676:
16677: 1995-05-01 23:31 millert
16678:
16679: * Makefile.in: added interfaces.[co]
16680:
16681: 1995-05-01 23:30 millert
16682:
16683: * testsudoers.c: now uses ip addrs and netmasks via
16684: load_interfaces()
16685:
16686: 1995-05-01 22:47 millert
16687:
16688: * sudo.c: now remove IFS instead of setting to "sane" value
16689:
16690: 1995-05-01 16:30 millert
16691:
16692: * parse.c: added FAST_MATCH
16693:
16694: 1995-04-29 20:19 millert
16695:
16696: * Makefile.in: sudo_goodpath.c-> goodpath.c
16697:
16698: 1995-04-29 20:15 millert
16699:
16700: * sudo.c: added Andy's new ISC changes
16701:
16702: 1995-04-14 14:06 millert
16703:
16704: * OPTIONS: added a sentence to SECURE_PATH info
16705:
16706: 1995-04-14 13:57 millert
16707:
16708: * BUGS: added one
16709:
16710: 1995-04-14 13:54 millert
16711:
16712: * RUNSON, CHANGES: updated
16713:
16714: 1995-04-13 17:04 millert
16715:
16716: * RUNSON: updated for beta3
16717:
16718: 1995-04-13 14:32 millert
16719:
16720: * Makefile.in, version.h: ++version
16721:
16722: 1995-04-13 13:56 millert
16723:
16724: * aclocal.m4: sendmail is now looked for in /usr/ucblib
16725:
16726: 1995-04-13 13:54 millert
16727:
16728: * sudo.c: fixed indentation
16729:
16730: 1995-04-13 13:35 millert
16731:
16732: * aclocal.m4: fixed a typo
16733:
16734: 1995-04-13 13:19 millert
16735:
16736: * sudo.c: updated ISC mods
16737:
16738: 1995-04-13 13:19 millert
16739:
16740: * configure.in: added unixware case
16741:
16742: 1995-04-13 13:19 millert
16743:
16744: * check.c: user_is_exempt is no longer hidden
16745:
16746: 1995-04-13 13:19 millert
16747:
16748: * RUNSON: updated
16749:
16750: 1995-04-13 13:19 millert
16751:
16752: * aclocal.m4: isc and riscos changes
16753:
16754: 1995-04-13 13:18 millert
16755:
16756: * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
16757: SECURE_PATH
16758:
16759: 1995-04-13 13:18 millert
16760:
16761: * Makefile.in: fixed a typo and added testsudoers stuff
16762:
16763: 1995-04-13 12:34 millert
16764:
16765: * testsudoers.c: Initial revision
16766:
16767: 1995-04-12 19:31 millert
16768:
16769: * parse.yacc: applied fixed patch from Chris
16770:
16771: 1995-04-11 14:30 millert
16772:
16773: * Makefile.in: fixed a typo
16774:
16775: 1995-04-11 14:14 millert
16776:
16777: * parse.yacc: added a set of braces for bison
16778:
16779: 1995-04-11 14:01 millert
16780:
16781: * parse.yacc: merged in Chris' changes to dekludge the parser.
16782:
16783: 1995-04-11 00:38 millert
16784:
16785: * logging.c: send_mail() was calling find_path() which is wrong
16786: since find_path() stores cmnd in a static var. Anyhow, it
16787: doesn't make much sense since MAILER should always be fully
16788: qualified
16789:
16790: 1995-04-10 19:51 millert
16791:
16792: * sample.sudoers: added User_Alias stuff
16793:
16794: 1995-04-10 19:50 millert
16795:
16796: * aclocal.m4: SUDO_NEXT now looks for
16797: /usr/lib/NextStep/software_version
16798:
16799: 1995-04-10 19:50 millert
16800:
16801: * RUNSON: added DEC UNIX 3.0 w/ gcc
16802:
16803: 1995-04-10 19:49 millert
16804:
16805: * visudo.c: Exit was being used in places where exit should be used
16806:
16807: 1995-04-10 19:44 millert
16808:
16809: * sudoers: added "User alias specification"
16810:
16811: 1995-04-10 18:04 millert
16812:
16813: * parse.yacc: fixed probs caused by making nslots and naliases a
16814: size_t
16815:
16816: 1995-04-10 15:09 millert
16817:
16818: * RUNSON: added KSR, upped rev to 1.3.1b2
16819:
16820: 1995-04-10 15:07 millert
16821:
16822: * logging.c, parse.yacc: 1024 -> BUFSIZ
16823:
16824: 1995-04-10 15:05 millert
16825:
16826: * parse.yacc: void * -> VOID * naliases and nslots are now size_t
16827: to appease lsearch on 64-bit machines
16828:
16829: 1995-04-09 19:30 millert
16830:
16831: * TODO: did a bunch of things and added a bunch :-)
16832:
16833: 1995-04-09 19:30 millert
16834:
16835: * PORTING: updated
16836:
16837: 1995-04-09 19:24 millert
16838:
16839: * visudo.man: closer to BSD manpage style
16840:
16841: 1995-04-09 19:15 millert
16842:
16843: * sudo.man: closer to standard BSD man format
16844:
16845: 1995-04-09 18:58 millert
16846:
16847: * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
16848: sudo.h, version.h, emul/search.h: added RCS id
16849:
16850: 1995-04-09 17:35 millert
16851:
16852: * sudo.h: removed crufty #defines that are no longer used
16853:
16854: 1995-04-09 17:13 millert
16855:
16856: * BUGS: fixed a bug
16857:
16858: 1995-04-09 17:12 millert
16859:
16860: * sudo.man: updated based on sudo changes
16861:
16862: 1995-04-09 17:11 millert
16863:
16864: * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
16865: keyword as well as a NAME or ALIAS
16866:
16867: 1995-04-09 17:11 millert
16868:
16869: * CHANGES: updated
16870:
16871: 1995-04-09 17:04 millert
16872:
16873: * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
16874:
16875: 1995-04-09 15:24 millert
16876:
16877: * aclocal.m4: fixed bug with full void impl check
16878:
16879: 1995-04-08 23:11 millert
16880:
16881: * parse.yacc: fixed User_Alias supoprt
16882:
16883: 1995-04-08 22:27 millert
16884:
16885: * parse.yacc: added stubs for User_Alias support
16886:
16887: 1995-04-08 22:27 millert
16888:
16889: * sudo.c: now sets removes # bogus interfaces from num_interfaces
16890:
16891: 1995-04-08 22:26 millert
16892:
16893: * parse.lex: added User_Alias support
16894:
16895: 1995-04-07 21:10 millert
16896:
16897: * Makefile.in: removed extraneous TODO
16898:
16899: 1995-04-07 19:48 millert
16900:
16901: * visudo.c: ntwk_matches -> addr_matches
16902:
16903: 1995-04-07 15:38 millert
16904:
16905: * parse.yacc: ntwk_matches -> addr_matches
16906:
16907: 1995-04-07 15:37 millert
16908:
16909: * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
16910: inet_network() (which expects octet boundaries) fixes for OSF
16911: (sizeof(int) != sizeof(long))
16912:
16913: 1995-04-07 15:08 millert
16914:
16915: * sudo.c: took out debugging info
16916:
16917: 1995-04-06 23:45 millert
16918:
16919: * aclocal.m4: OS was being set to unknown before non-uname based
16920: host checks. This caused no checks to happen since $OS was not
16921: zero-length.
16922:
16923: 1995-04-06 23:30 millert
16924:
16925: * sudo.c: fixed loading of interfaces struct still has debugging
16926: info in though
16927:
16928: 1995-04-06 22:23 millert
16929:
16930: * parse.c: fixed typo
16931:
16932: 1995-04-06 16:17 millert
16933:
16934: * Makefile.in: ++version
16935:
16936: 1995-04-06 16:16 millert
16937:
16938: * version.h: ++
16939:
16940: 1995-04-06 16:16 millert
16941:
16942: * visudo.c: removed extraneous extern decl of "top
16943:
16944: 1995-04-06 16:14 millert
16945:
16946: * visudo.c: now zeros "top"
16947:
16948: 1995-04-06 16:13 millert
16949:
16950: * parse.yacc: removed parser_cleanup (no need for it now)
16951:
16952: 1995-04-06 16:13 millert
16953:
16954: * parse.lex: now calls reset_aliases() directly
16955:
16956: 1995-04-04 18:21 millert
16957:
16958: * OPTIONS: added a sentence to SECURE_PATH description
16959:
16960: 1995-04-04 18:17 millert
16961:
16962: * parse.c: fixed my stupid bug where I used NAMLEN on something I
16963: wanted to just get the name from. argh.
16964:
16965: 1995-04-03 16:58 millert
16966:
16967: * lsearch.c: fixed argument order of memmove() that i hosed when
16968: converting from bcopy(). arghh.
16969:
16970: 1995-04-03 15:33 millert
16971:
16972: * Makefile.in: finally fixed DISTFILES line
16973:
16974: 1995-04-03 15:21 millert
16975:
16976: * Makefile.in: tabs -> spaces
16977:
16978: 1995-04-03 15:15 millert
16979:
16980: * Makefile.in: added missing files to DISTFILES
16981:
16982: 1995-04-03 14:50 millert
16983:
16984: * Makefile.in: SUPPORTED -> RUNSON
16985:
16986: 1995-04-01 03:12 millert
16987:
16988: * TODO: updated
16989:
16990: 1995-04-01 01:54 millert
16991:
16992: * RUNSON: updated for pl5b1 release
16993:
16994: 1995-04-01 01:53 millert
16995:
16996: * BUGS, TODO: updated
16997:
16998: 1995-04-01 01:52 millert
16999:
17000: * check.c: fixed bug where if you hit return at first sudo prompt
17001: it would still log as a failure
17002:
17003: 1995-04-01 01:29 millert
17004:
17005: * CHANGES: updated
17006:
17007: 1995-04-01 01:25 millert
17008:
17009: * aclocal.m4: better test for bogus void * implementation
17010:
17011: 1995-03-31 20:33 millert
17012:
17013: * logging.c: added PASSWORDS_NOT_CORRECT
17014:
17015: 1995-03-31 20:32 millert
17016:
17017: * check.c: added PASSWORDS_NOT_CORRECT stuff]
17018:
17019: 1995-03-31 20:30 millert
17020:
17021: * sudo.h: added PASSWORDS_NOT_CORRECT
17022:
17023: 1995-03-31 19:16 millert
17024:
17025: * tgetpass.c: moved pathnames.h
17026:
17027: 1995-03-31 19:16 millert
17028:
17029: * sudo.c: removed some unused vars and fixed up uid2str
17030:
17031: 1995-03-31 19:15 millert
17032:
17033: * putenv.c: moved compat.h
17034:
17035: 1995-03-31 19:14 millert
17036:
17037: * getcwd.c, getwd.c: added pathnames.h
17038:
17039: 1995-03-31 18:18 millert
17040:
17041: * parse.yacc: fixed a typo I introduced in the last checkin :-(
17042:
17043: 1995-03-31 18:11 millert
17044:
17045: * parse.lex: can't have #ifdef's where N is defined so just do this
17046: the broken way for AIX
17047:
17048: 1995-03-31 18:08 millert
17049:
17050: * parse.yacc: better hack from Chris (but still a hack)
17051:
17052: 1995-03-31 18:05 millert
17053:
17054: * parse.lex: stupid hack for broken aix lex
17055:
17056: 1995-03-31 17:47 millert
17057:
17058: * tgetpass.c: now includes compat.h
17059:
17060: 1995-03-31 17:27 millert
17061:
17062: * visudo.c: now includes fcntl.h
17063:
17064: 1995-03-31 17:27 millert
17065:
17066: * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17067:
17068: 1995-03-31 16:12 millert
17069:
17070: * parse.yacc: dirty hack to fix parser bug. i don't really like
17071: this but it works for now...
17072:
17073: 1995-03-31 16:12 millert
17074:
17075: * sudo.c: uid2str is now static like the prototype says
17076:
17077: 1995-03-29 23:48 millert
17078:
17079: * RUNSON: Initial revision
17080:
17081: 1995-03-29 23:47 millert
17082:
17083: * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17084:
17085: 1995-03-29 23:46 millert
17086:
17087: * sudo.c: check_sudoers now returns an error code and sudo calls
17088: inform_user and log_error based on the return value.
17089:
17090: 1995-03-29 23:45 millert
17091:
17092: * logging.c, sudo.h: added entries for new errors
17093:
17094: 1995-03-29 23:03 millert
17095:
17096: * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17097: sudoers file
17098:
17099: 1995-03-29 22:52 millert
17100:
17101: * Makefile.in: took out testsudoers
17102:
17103: 1995-03-29 22:36 millert
17104:
17105: * sudo.c: now explicately checks that it is setuid root
17106:
17107: 1995-03-29 22:28 millert
17108:
17109: * sudo.c: If a user has no passwd entry sudo would segv (writing to
17110: a garbage pointer). Now allocate space before writing :-)
17111:
17112: 1995-03-29 22:06 millert
17113:
17114: * configure.in: reordered AC_CHECK_FUNCS
17115:
17116: 1995-03-29 22:06 millert
17117:
17118: * config.h.in: fixed memset macro
17119:
17120: 1995-03-29 21:47 millert
17121:
17122: * logging.c: bzero -> memset when a parse error is logged the line
17123: number of the error is now logged too
17124:
17125: 1995-03-29 21:46 millert
17126:
17127: * tgetpass.c, visudo.c: bzero -> memset
17128:
17129: 1995-03-29 21:46 millert
17130:
17131: * INSTALL: added Sunos to blurb about c2 security
17132:
17133: 1995-03-29 21:45 millert
17134:
17135: * configure.in: added a SUN4 define for C2 security
17136:
17137: 1995-03-29 21:44 millert
17138:
17139: * config.h.in: bcopy -> memmove bzero -> memset
17140:
17141: 1995-03-29 21:43 millert
17142:
17143: * lsearch.c: bcopy -> memmove char * -> VOID *
17144:
17145: 1995-03-29 21:30 millert
17146:
17147: * check.c: added support for sunos with C2 security
17148:
17149: 1995-03-29 21:12 millert
17150:
17151: * OPTIONS, options.h: reordered
17152:
17153: 1995-03-29 21:12 millert
17154:
17155: * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17156:
17157: 1995-03-29 21:12 millert
17158:
17159: * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17160:
17161: 1995-03-29 21:12 millert
17162:
17163: * config.h.in: added _SUDO_PATH_LOGFILE
17164:
17165: 1995-03-29 21:11 millert
17166:
17167: * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17168: added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17169: too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17170:
17171: 1995-03-29 18:17 millert
17172:
17173: * TROUBLESHOOTING: Initial revision
17174:
17175: 1995-03-29 17:59 millert
17176:
17177: * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17178: load_global() to work around a problem is trusted hpux shadow
17179: passwords. yuck.
17180:
17181: 1995-03-29 17:41 millert
17182:
17183: * parse.yacc: backed out a change in malloc/realloc
17184:
17185: 1995-03-29 17:38 millert
17186:
17187: * parse.yacc: now include stdlib.h
17188:
17189: 1995-03-29 17:22 millert
17190:
17191: * visudo.c: now do an freopen() of the stmp file so that yyin will
17192: always point to the same thing. This is important for flex since
17193: we are doing a YY_NEWFILE
17194:
17195: 1995-03-29 17:20 millert
17196:
17197: * parse.yacc: replaced yywrap() with parser_cleanup() since
17198: yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17199: sigh.
17200:
17201: 1995-03-29 17:18 millert
17202:
17203: * parse.lex: now have a rule that matches anything that doesn't
17204: match an explicite rule. well, you know what i mean (. matches
17205: anything not yet matched). However, this means that there is
17206: input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17207: So, yywrap has moved into parse.lex and it calls parser_cleanup()
17208: which is most of the old yywrap() sigh.
17209:
17210: 1995-03-29 17:17 millert
17211:
17212: * SUPPORTED: no longer used
17213:
17214: 1995-03-29 16:13 millert
17215:
17216: * getcwd.c, getwd.c: moved compat.h to be the last include file
17217:
17218: 1995-03-29 16:11 millert
17219:
17220: * parse.yacc: fixed type of aliascmp() args
17221:
17222: 1995-03-29 15:58 millert
17223:
17224: * find_path.c: NULL -> '\0'
17225:
17226: 1995-03-29 15:42 millert
17227:
17228: * parse.yacc: added casts to lfind and lsearch args for irix
17229:
17230: 1995-03-29 08:20 millert
17231:
17232: * Makefile.in: bsdinstall -> install-sh
17233:
17234: 1995-03-29 08:20 millert
17235:
17236: * INSTALL: added info about make realclean
17237:
17238: 1995-03-29 08:17 millert
17239:
17240: * Makefile.in: updated VERSION added dependencies for visudo.cat
17241:
17242: 1995-03-29 08:17 millert
17243:
17244: * version.h: -> pl5b1
17245:
17246: 1995-03-29 08:16 millert
17247:
17248: * sudo.c: took out -l
17249:
17250: 1995-03-29 00:03 millert
17251:
17252: * Makefile.in: now there is a real visudo.man and visudo.cat
17253:
17254: 1995-03-28 23:54 millert
17255:
17256: * sudo.man: took out visudo stuff
17257:
17258: 1995-03-28 23:54 millert
17259:
17260: * visudo.man: Initial revision
17261:
17262: 1995-03-28 23:12 millert
17263:
17264: * parse.c, parse.lex, parse.yacc: updated copyright
17265:
17266: 1995-03-28 23:05 millert
17267:
17268: * README: updated for pl5
17269:
17270: 1995-03-28 20:02 millert
17271:
17272: * sudo.man: updated Nieusma & Hieb email addresses
17273:
17274: 1995-03-28 19:57 millert
17275:
17276: * INSTALL: updated to include options.h and OPTIONS
17277:
17278: 1995-03-28 19:35 millert
17279:
17280: * CHANGES, TODO: updated
17281:
17282: 1995-03-28 19:35 millert
17283:
17284: * BUGS: eliminated bug #1 (yay)
17285:
17286: 1995-03-28 19:31 millert
17287:
17288: * configure.in: sunos no longer gets linked statically
17289:
17290: 1995-03-28 18:58 millert
17291:
17292: * parse.lex: prototype now uses __P()
17293:
17294: 1995-03-28 18:49 millert
17295:
17296: * parse.lex: make fill() non-ansi
17297:
17298: 1995-03-28 15:26 millert
17299:
17300: * parse.c: made -v (validate) work
17301:
17302: 1995-03-28 15:26 millert
17303:
17304: * logging.c: now gives host
17305:
17306: 1995-03-28 10:34 millert
17307:
17308: * find_path.c: don't check for execute/statable if fq or relative
17309: path given
17310:
17311: 1995-03-28 01:07 millert
17312:
17313: * parse.c: added a cast
17314:
17315: 1995-03-28 00:49 millert
17316:
17317: * visudo.c: now include ctype.h for islower and tolower macros
17318:
17319: 1995-03-28 00:48 millert
17320:
17321: * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17322:
17323: 1995-03-28 00:48 millert
17324:
17325: * sudo.c: moved a set of parens
17326:
17327: 1995-03-28 00:48 millert
17328:
17329: * strdup.c: now include compat.h
17330:
17331: 1995-03-28 00:47 millert
17332:
17333: * parse.yacc: now cast malloc & realloc return vals added search
17334: for HAVE_LSEARCH now use strcmp if no strcasecmp available
17335:
17336: 1995-03-28 00:46 millert
17337:
17338: * lsearch.c, emul/search.h: void * -> VOID *
17339:
17340: 1995-03-28 00:45 millert
17341:
17342: * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17343: HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17344:
17345: 1995-03-28 00:44 millert
17346:
17347: * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17348:
17349: 1995-03-28 00:44 millert
17350:
17351: * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17352: echo and results to most SUDO_* macros
17353:
17354: 1995-03-28 00:43 millert
17355:
17356: * Makefile.in: no more -I.
17357:
17358: 1995-03-28 00:22 millert
17359:
17360: * configure.in: various 1.x ro 2.x autoconf changes now check for
17361: strcasecmp now use AC_INSTALL_PROG instead of custom one added
17362: check for fully woorking void implementation
17363:
17364: 1995-03-28 00:02 millert
17365:
17366: * Makefile.in: added lsearch & search.h visudo links into
17367: $(LIBOBJS)
17368:
17369: 1995-03-27 23:43 millert
17370:
17371: * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17372:
17373: 1995-03-27 23:40 millert
17374:
17375: * visudo.c: whatnow_help was prototyped to be static be was not
17376: declared as such
17377:
17378: 1995-03-27 21:15 millert
17379:
17380: * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17381: used) added check for dirent/dir/ndir.h
17382:
17383: 1995-03-27 21:09 millert
17384:
17385: * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17386:
17387: 1995-03-27 20:38 millert
17388:
17389: * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17390:
17391: 1995-03-27 20:23 millert
17392:
17393: * emul/search.h, lsearch.c: Initial revision
17394:
17395: 1995-03-27 18:26 millert
17396:
17397: * parse.yacc: eliminated bison warnings
17398:
17399: 1995-03-27 17:10 millert
17400:
17401: * parse.lex: added missing case
17402:
17403: 1995-03-27 17:04 millert
17404:
17405: * visudo.c: now iincludes signal.h
17406:
17407: 1995-03-27 15:16 millert
17408:
17409: * parse.yacc: only clear data structures on a parse error
17410:
17411: 1995-03-27 15:01 millert
17412:
17413: * visudo.c: whatnow() now gives help on invalid input
17414:
17415: 1995-03-27 14:54 millert
17416:
17417: * visudo.c: added a whatnow() function (sort of like mh)
17418:
17419: 1995-03-27 14:53 millert
17420:
17421: * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17422: by calling reset_aliases() and clearing top took reset stuff out
17423: of yyerror() since it doesn't beling there (and doesn't work
17424: anyway). errorlineno is now initially set to -1 so we can set it
17425: to the first error that occurrs (it was getting set to the last)
17426:
17427: 1995-03-27 14:53 millert
17428:
17429: * parse.lex: added a void cast
17430:
17431: 1995-03-27 13:26 millert
17432:
17433: * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17434:
17435: 1995-03-26 01:33 millert
17436:
17437: * sudo.c, sudo.h: removed ocmnd
17438:
17439: 1995-03-26 01:19 millert
17440:
17441: * sudo.h: no more sudo_realpath() and find_path() changed params
17442:
17443: 1995-03-26 01:19 millert
17444:
17445: * sudo.c: find_path() changed since no more realpath()
17446:
17447: 1995-03-26 01:18 millert
17448:
17449: * parse.yacc: on error, errorlineno is set to the line where the
17450: error occurred added kill_aliases() to free the aliases struct
17451: now clean up in yyerror() so we can reparse cleanly
17452:
17453: 1995-03-26 01:17 millert
17454:
17455: * logging.c: changed to use new find_path()
17456:
17457: 1995-03-26 01:17 millert
17458:
17459: * options.h, parse.c: no more USE_REALPATH
17460:
17461: 1995-03-26 01:16 millert
17462:
17463: * find_path.c: removed all the realpath() stuff
17464:
17465: 1995-03-26 01:16 millert
17466:
17467: * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17468:
17469: 1995-03-26 01:12 millert
17470:
17471: * visudo.c: now works correctly with utk parser
17472:
17473: 1995-03-26 00:04 millert
17474:
17475: * goodpath.c: Initial revision
17476:
17477: 1995-03-25 23:23 millert
17478:
17479: * sudo_realpath.c: eliminated a compiler warning
17480:
17481: 1995-03-25 21:56 millert
17482:
17483: * sudo.c: elinated compiler warning
17484:
17485: 1995-03-25 20:40 millert
17486:
17487: * sudo_realpath.c: added sudo_goodpath()
17488:
17489: 1995-03-25 20:40 millert
17490:
17491: * sudo.h: added prototype for sudo_goodpath
17492:
17493: 1995-03-25 20:39 millert
17494:
17495: * parse.c: added support for /sys/dir.h
17496:
17497: 1995-03-25 20:39 millert
17498:
17499: * options.h: USE_REALPATH turned off
17500:
17501: 1995-03-25 20:39 millert
17502:
17503: * find_path.c: added calls to sudo_goodpath()
17504:
17505: 1995-03-25 20:39 millert
17506:
17507: * configure.in: added check for dirent.h
17508:
17509: 1995-03-25 20:38 millert
17510:
17511: * config.h.in: added HAVE_DIRENT_H
17512:
17513: 1995-03-25 19:27 millert
17514:
17515: * configure.in: added in linux shadow pass stuff
17516:
17517: 1995-03-24 14:43 millert
17518:
17519: * visudo.c: added back host, user, cmnd, parse_error
17520:
17521: 1995-03-24 14:19 millert
17522:
17523: * visudo.c: added in utk changes plus some minor cosmetic changes
17524:
17525: 1995-03-24 14:17 millert
17526:
17527: * sudo.c, sudo_realpath.c: added void casts for printf's
17528:
17529: 1995-03-24 14:17 millert
17530:
17531: * options.h: added a define of USE_REALPATH
17532:
17533: 1995-03-24 14:17 millert
17534:
17535: * configure.in: there is no more visudoers/Makefile
17536:
17537: 1995-03-24 14:16 millert
17538:
17539: * Makefile.in: added in utk changes (visudo is now built from the
17540: toplevel)
17541:
17542: 1995-03-24 14:15 millert
17543:
17544: * find_path.c: added (void) casts to printf's
17545:
17546: 1995-03-23 22:32 millert
17547:
17548: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17549: in utk changes
17550:
17551: 1995-03-22 23:13 millert
17552:
17553: * find_path.c: now check to see that what we are trying to run is a
17554: file (or a link to a file, we do a stat(2) so there is no diff)
17555:
17556: 1995-03-13 15:56 millert
17557:
17558: * CHANGES: updated
17559:
17560: 1995-03-13 15:56 millert
17561:
17562: * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17563: new autoconf
17564:
17565: 1995-03-13 15:11 millert
17566:
17567: * sudo.man: added myself as maintainer
17568:
17569: 1995-02-16 23:31 millert
17570:
17571: * sudo.c: changed setegid -> setgid
17572:
17573: 1995-02-06 17:43 millert
17574:
17575: * configure.in: fixed the test for irix 5.x to skip bad libs
17576:
17577: 1995-02-06 17:43 millert
17578:
17579: * aclocal.m4: now initialize OS and OSREV
17580:
17581: 1995-01-26 20:52 millert
17582:
17583: * configure.in: irix5 changes
17584:
17585: 1995-01-26 20:28 millert
17586:
17587: * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17588: for autoconf 2.1 compatibility
17589:
17590: 1995-01-18 19:49 millert
17591:
17592: * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17593: do the righ thing wrt yyrestart (grrrr)
17594:
17595: 1995-01-16 18:44 millert
17596:
17597: * Makefile.in: added visudoers/compat.h to DISTFILES
17598:
17599: 1995-01-16 17:01 millert
17600:
17601: * configure.in: fixed an echo
17602:
17603: 1995-01-16 16:36 millert
17604:
17605: * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17606: parameters
17607:
17608: 1995-01-16 16:35 millert
17609:
17610: * sudo.h: added ocmnd extern adjusted find_path() prototype
17611:
17612: 1995-01-16 16:34 millert
17613:
17614: * parse.c: cmndcmp() now takes 3 arguments and checks against the
17615: qualified as well as the unqualified pathname. more code that
17616: should use cmndcmp() but did not, now does
17617:
17618: 1995-01-16 16:34 millert
17619:
17620: * options.h: added to a comment
17621:
17622: 1995-01-16 16:33 millert
17623:
17624: * logging.c: changed to use new find_path() parameter passing
17625:
17626: 1995-01-16 16:32 millert
17627:
17628: * find_path.c: find_path() now takes 2 copyout parameters (one for
17629: the qualified pathname and one for the unqualified pathname).
17630: The third parameter may be NULL.
17631:
17632: 1995-01-16 16:31 millert
17633:
17634: * configure.in: no longer munge pathnames.h
17635:
17636: 1995-01-16 16:30 millert
17637:
17638: * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17639: defined in config.h) as a result, pathnames.h does not need to be
17640: run through configure and the user can override the configured
17641: values easily.
17642:
17643: 1995-01-16 16:30 millert
17644:
17645: * config.h.in: added _SUDO_PATH_* entries
17646:
17647: 1995-01-16 16:30 millert
17648:
17649: * aclocal.m4: _PATH* -> _SUDO_PATH_*
17650:
17651: 1995-01-16 16:28 millert
17652:
17653: * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17654: config.h
17655:
17656: 1995-01-13 12:52 millert
17657:
17658: * compat.h: removed extraneous #endif
17659:
17660: 1995-01-13 12:48 millert
17661:
17662: * aclocal.m4: added SUDO_PROG_MV
17663:
17664: 1995-01-13 12:47 millert
17665:
17666: * configure.in: added SUDO_PROG_MV added riscos and isc os types
17667: took out -DSHORT_MESSAGE from --with-csops since it is now the
17668: default
17669:
17670: 1995-01-13 12:46 millert
17671:
17672: * sudo.c: move the include of id.h to compat.h now includes
17673: options.h
17674:
17675: 1995-01-13 12:45 millert
17676:
17677: * sudo.h: moved compatibility #defines to compat.h
17678:
17679: 1995-01-13 12:45 millert
17680:
17681: * pathnames.h.in: added _PATH_MV
17682:
17683: 1995-01-13 12:43 millert
17684:
17685: * config.h.in: move __P to compat.h
17686:
17687: 1995-01-13 12:39 millert
17688:
17689: * getcwd.c, getwd.c, putenv.c: now includes compat.h
17690:
17691: 1995-01-13 12:39 millert
17692:
17693: * compat.h: Initial revision
17694:
17695: 1995-01-11 19:11 millert
17696:
17697: * sudo.h: pull user-configurable stuff out and put in options.h
17698:
17699: 1995-01-11 18:43 millert
17700:
17701: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17702: sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17703: options.h
17704:
17705: 1995-01-11 18:41 millert
17706:
17707: * Makefile.in: added visudoers/options.h
17708:
17709: 1995-01-11 18:40 millert
17710:
17711: * options.h, OPTIONS: Initial revision
17712:
17713: 1995-01-11 18:39 millert
17714:
17715: * Makefile.in: added OPTIONS and options.h
17716:
17717: 1995-01-11 18:36 millert
17718:
17719: * logging.c: changed #ifdef's to use LOGGING and
17720: SLOG_SYSLOG/SLOG_FILE
17721:
17722: 1995-01-11 11:02 millert
17723:
17724: * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17725:
17726: 1994-12-17 18:18 millert
17727:
17728: * visudo.c: now only do Editor +line_num if line_num != 0
17729:
17730: 1994-12-15 21:06 millert
17731:
17732: * visudo.c: now use mv if rename(2) fails
17733:
17734: 1994-12-15 20:32 millert
17735:
17736: * BUGS: added a visudo bug
17737:
17738: 1994-12-15 19:46 millert
17739:
17740: * check.c: expanded comment
17741:
17742: 1994-11-12 18:33 millert
17743:
17744: * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
17745: set
17746:
17747: 1994-11-09 19:49 millert
17748:
17749: * sudo.c: added mips & isc support
17750:
17751: 1994-11-09 19:49 millert
17752:
17753: * parse.c: added support for non-root owned sudoers file
17754:
17755: 1994-11-09 19:48 millert
17756:
17757: * check.c: added exempt group support
17758:
17759: 1994-11-09 19:47 millert
17760:
17761: * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
17762: non-root own sudoers file added exempt group support added isc
17763: support
17764:
17765: 1994-11-09 19:46 millert
17766:
17767: * visudo.c: now copy sudoers to temp file via read/write (not
17768: stdio) now chown new sudoers file to SUDOERS_OWNER
17769:
17770: 1994-11-07 20:40 millert
17771:
17772: * configure.in: added skey support
17773:
17774: 1994-11-07 20:39 millert
17775:
17776: * sudo.h: fixed typo added set_perms support added skey support
17777: added seteuid()/setegid() emulation for AIX
17778:
17779: 1994-11-07 20:38 millert
17780:
17781: * sudo.c: be_* -> setperms() now check to make sure sudoers file is
17782: owned by root nread/write by only root
17783:
17784: 1994-11-07 20:38 millert
17785:
17786: * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
17787:
17788: 1994-11-07 20:38 millert
17789:
17790: * check.c: be_* -> set_perms() added skey support
17791:
17792: 1994-11-06 18:59 millert
17793:
17794: * Makefile.in: ++version
17795:
17796: 1994-11-06 18:59 millert
17797:
17798: * version.h: ++
17799:
17800: 1994-10-21 13:16 millert
17801:
17802: * sudo.c: now sets IFS
17803:
17804: 1994-10-21 12:02 millert
17805:
17806: * insults.h: fixed typo
17807:
17808: 1994-10-15 15:48 millert
17809:
17810: * config.h.in: added HAVE_SKEY
17811:
17812: 1994-10-04 13:00 millert
17813:
17814: * CHANGES: updated
17815:
17816: 1994-10-04 12:57 millert
17817:
17818: * Makefile.in: ++version
17819:
17820: 1994-10-04 12:57 millert
17821:
17822: * version.h: ++
17823:
17824: 1994-10-04 12:56 millert
17825:
17826: * sudo.c: now bail if ARgv[1] > MAXPATHLEN
17827:
17828: 1994-10-04 12:56 millert
17829:
17830: * configure.in: added function check for tcgetattr(3)
17831:
17832: 1994-10-04 12:55 millert
17833:
17834: * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
17835:
17836: 1994-10-04 12:53 millert
17837:
17838: * config.h.in: added check for tcgetattr
17839:
17840: 1994-09-26 17:38 millert
17841:
17842: * CHANGES: updated
17843:
17844: 1994-09-22 13:30 millert
17845:
17846: * parse.lex: now only include unistd.h for linux
17847:
17848: 1994-09-21 14:29 millert
17849:
17850: * Makefile.in: added visudo.8 generation
17851:
17852: 1994-09-21 14:07 millert
17853:
17854: * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
17855:
17856: 1994-09-20 19:39 millert
17857:
17858: * BUGS: added one
17859:
17860: 1994-09-20 19:39 millert
17861:
17862: * CHANGES: updated
17863:
17864: 1994-09-20 19:38 millert
17865:
17866: * README: added mailing list info
17867:
17868: 1994-09-20 19:37 millert
17869:
17870: * parse.yacc: now use sudolineno instead of yylineno fixed bison
17871: warnings
17872:
17873: 1994-09-20 19:37 millert
17874:
17875: * configure.in: now use -no_library_replacement for osf don't make
17876: a static binary for hpux >= 9.0
17877:
17878: 1994-09-20 19:21 millert
17879:
17880: * tgetpass.c: added string.h/strings.h inclusion
17881:
17882: 1994-09-20 19:21 millert
17883:
17884: * config.h.in: added ssize_t def
17885:
17886: 1994-09-20 19:18 millert
17887:
17888: * parse.lex: added inclusion of string.h/strings.h
17889:
17890: 1994-09-20 18:48 millert
17891:
17892: * aclocal.m4: fixed uname | sed (needed to quote the '[')
17893:
17894: 1994-09-20 18:42 millert
17895:
17896: * parse.lex: replaced yylineno with sudolineno fixed bison syntax
17897: errors
17898:
17899: 1994-09-20 18:13 millert
17900:
17901: * visudo.c: changed yylineno to sudolineno since yylineno cannot be
17902: counted upon.
17903:
17904: 1994-09-20 18:10 millert
17905:
17906: * TODO: updated
17907:
17908: 1994-09-20 17:52 millert
17909:
17910: * parse.c: added code to support command listings
17911:
17912: 1994-09-20 17:36 millert
17913:
17914: * sudo.c: added code for -l flag
17915:
17916: 1994-09-20 17:35 millert
17917:
17918: * sudo.man: fixed typo added info for -l flag
17919:
17920: 1994-09-20 14:45 millert
17921:
17922: * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
17923:
17924: 1994-09-20 14:45 millert
17925:
17926: * aclocal.m4: added SUDO_SSIZE_T
17927:
17928: 1994-09-20 14:44 millert
17929:
17930: * sudo.h: added MODE_LIST
17931:
17932: 1994-09-20 14:43 millert
17933:
17934: * configure.in: added AC_SSIZE_T
17935:
17936: 1994-09-19 20:53 millert
17937:
17938: * find_path.c, sudo_realpath.c: readlink() is now declared as
17939: returning ssize~_t
17940:
17941: 1994-09-19 20:44 millert
17942:
17943: * configure.in: added -laud for OSF c2
17944:
17945: 1994-09-02 15:55 millert
17946:
17947: * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
17948: Makefile.in: changed sudo-bugs.cs.colorado.edu ->
17949: sudo-bugs@cs.colorado.edu
17950:
17951: 1994-09-02 15:54 millert
17952:
17953: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
17954: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
17955: sudo_setenv.c, tgetpass.c, version.h: changed
17956: sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
17957:
17958: 1994-09-01 15:56 millert
17959:
17960: * Makefile.in: ++version
17961:
17962: 1994-09-01 15:55 millert
17963:
17964: * version.h: ++
17965:
17966: 1994-09-01 15:55 millert
17967:
17968: * logging.c: added host to alertmail messages
17969:
17970: 1994-09-01 15:55 millert
17971:
17972: * CHANGES, TODO: udpated
17973:
17974: 1994-09-01 15:26 millert
17975:
17976: * logging.c: fixed logging problem where mail would not say which
17977: user it was
17978:
17979: 1994-09-01 13:45 millert
17980:
17981: * configure.in: added -laud for gcc if osf & c2
17982:
17983: 1994-09-01 13:39 millert
17984:
17985: * check.c: moved set_auth_parameters to sudo.c
17986:
17987: 1994-09-01 13:38 millert
17988:
17989: * sudo.c: added set_auth_parameters for osf
17990:
17991: 1994-09-01 13:22 millert
17992:
17993: * configure.in: cleaned up -static stuff
17994:
17995: 1994-09-01 13:15 millert
17996:
17997: * Makefile.in: ++version
17998:
17999: 1994-09-01 13:15 millert
18000:
18001: * version.h: ++
18002:
18003: 1994-09-01 13:15 millert
18004:
18005: * sudo.c: changed setenv() to sudo_setenv()
18006:
18007: 1994-09-01 13:12 millert
18008:
18009: * check.c: fixed osf problem
18010:
18011: 1994-08-31 22:17 millert
18012:
18013: * configure.in: added OSF C2 stuff
18014:
18015: 1994-08-31 22:00 millert
18016:
18017: * CHANGES: updated
18018:
18019: 1994-08-31 21:56 millert
18020:
18021: * check.c: added osf auth support & removed some extra spaces
18022:
18023: 1994-08-31 21:52 millert
18024:
18025: * INSTALL, SUPPORTED: added osf C2 stuff
18026:
18027: 1994-08-31 19:52 millert
18028:
18029: * TODO: added 2 suggestions
18030:
18031: 1994-08-31 19:33 millert
18032:
18033: * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18034:
18035: 1994-08-31 18:48 millert
18036:
18037: * version.h: pl1
18038:
18039: 1994-08-30 18:31 millert
18040:
18041: * version.h: 1.3.1final
18042:
18043: 1994-08-30 18:30 millert
18044:
18045: * Makefile.in: added HISTORY
18046:
18047: 1994-08-30 18:30 millert
18048:
18049: * sudo.man: mention HISTPRY file
18050:
18051: 1994-08-30 18:30 millert
18052:
18053: * sudo.c: use sizeof instead of a constant in 1 place
18054:
18055: 1994-08-30 18:30 millert
18056:
18057: * parse.yacc: added unistd.h
18058:
18059: 1994-08-30 18:29 millert
18060:
18061: * parse.lex: added unistd.h
18062:
18063: 1994-08-30 18:27 millert
18064:
18065: * README: udpated
18066:
18067: 1994-08-30 18:15 millert
18068:
18069: * HISTORY: Initial revision
18070:
18071: 1994-08-17 12:45 millert
18072:
18073: * version.h: ++
18074:
18075: 1994-08-17 12:39 millert
18076:
18077: * CHANGES: updated
18078:
18079: 1994-08-17 12:36 millert
18080:
18081: * sudo_setenv.c: added unistd.h include
18082:
18083: 1994-08-16 15:46 millert
18084:
18085: * sudo.c: added sys/time.h for AIX
18086:
18087: 1994-08-14 21:22 millert
18088:
18089: * configure.in: added check for -lsocket and sys/sockio.h
18090:
18091: 1994-08-14 21:21 millert
18092:
18093: * config.h.in: took out libshadow check and added in sys/sockio.h
18094: check
18095:
18096: 1994-08-14 21:21 millert
18097:
18098: * sudo.c: now include sockio.h instead of ioctl.h if it exists
18099: "sudo -" now gets a better error message
18100:
18101: 1994-08-14 20:47 millert
18102:
18103: * sample.sudoers: now has a dir and subnet entry
18104:
18105: 1994-08-13 18:15 millert
18106:
18107: * sudo.c: removed if_ether.h
18108:
18109: 1994-08-13 17:16 millert
18110:
18111: * TODO: added an item
18112:
18113: 1994-08-13 17:15 millert
18114:
18115: * sudo.man: added network and ip addresses to man page
18116:
18117: 1994-08-13 17:09 millert
18118:
18119: * sudo.c: no error if can't get interfaces or netmask since
18120: networking may not be in the kernel.
18121:
18122: 1994-08-13 17:08 millert
18123:
18124: * parse.c: nwo check for interfaces == NULL
18125:
18126: 1994-08-12 21:22 millert
18127:
18128: * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18129: to fail if the last entry in the spec failed (ie: it was only
18130: looking at the last entry). CLeaned things up by adding the
18131: cmndcmp() function--all neat & tidy
18132:
18133: 1994-08-12 21:21 millert
18134:
18135: * CHANGES: added one
18136:
18137: 1994-08-11 23:42 millert
18138:
18139: * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18140:
18141: 1994-08-11 21:58 millert
18142:
18143: * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18144: netinet/in.h
18145:
18146: 1994-08-11 21:58 millert
18147:
18148: * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18149: visudo.c: added include of netinet/in.h
18150:
18151: 1994-08-11 21:57 millert
18152:
18153: * version.h: ++
18154:
18155: 1994-08-11 21:57 millert
18156:
18157: * sudo.h: added interfaces global
18158:
18159: 1994-08-11 21:56 millert
18160:
18161: * parse.c: now uses new interfaces global
18162:
18163: 1994-08-11 21:56 millert
18164:
18165: * sudo.c: now ip addresses are gleaned fw/o dns
18166:
18167: 1994-08-10 19:21 millert
18168:
18169: * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18170:
18171: 1994-08-10 19:21 millert
18172:
18173: * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18174: network addrs
18175:
18176: 1994-08-10 19:20 millert
18177:
18178: * sudo.h: added ip_addrs def added load_ip_addrs prototype
18179:
18180: 1994-08-08 16:03 millert
18181:
18182: * CHANGES: updated
18183:
18184: 1994-08-08 15:57 millert
18185:
18186: * Makefile.in: removed multiple entries in DISTFILES
18187:
18188: 1994-08-08 13:05 millert
18189:
18190: * visudo.c: ansified the !STDC_HEADERS decls
18191:
18192: 1994-08-08 13:05 millert
18193:
18194: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18195: malloc decl if gnuc
18196:
18197: 1994-08-08 13:04 millert
18198:
18199: * sudo.c: can't use getopt(3) since it munges args to the command
18200: to be run as root don't do malloc decl if gnuc
18201:
18202: 1994-08-08 00:41 millert
18203:
18204: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18205: sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18206: prottypes
18207:
18208: 1994-08-08 00:27 millert
18209:
18210: * getcwd.c, getwd.c: added missing paren
18211:
18212: 1994-08-08 00:23 millert
18213:
18214: * Makefile.in: added putenv.c to DISTFILES
18215:
18216: 1994-08-08 00:08 millert
18217:
18218: * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18219: not defined now can count on putenv() being there
18220:
18221: 1994-08-08 00:08 millert
18222:
18223: * sudo_realpath.c: took out errno decl since sudo.h does it for us
18224: fixed up a next cc warning added params to func decls when
18225: STDC_HEADERS is not defined
18226:
18227: 1994-08-08 00:07 millert
18228:
18229: * sudo.h: took out environ extern added local declaratio of
18230: putenv() if local version is needed
18231:
18232: 1994-08-08 00:05 millert
18233:
18234: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18235: func decls when STDC_HEADERS is not defined
18236:
18237: 1994-08-08 00:04 millert
18238:
18239: * config.h.in: added memcpy check check to see that ansi vs bsd
18240: macros are ntot already defiend before defining (ie: avoid
18241: redefinition)
18242:
18243: 1994-08-08 00:03 millert
18244:
18245: * configure.in: removed fluff setenv check plus check w/ replace
18246: for putenv if also no setenv
18247:
18248: 1994-08-08 00:01 millert
18249:
18250: * putenv.c: Initial revision
18251:
18252: 1994-08-06 19:19 millert
18253:
18254: * sudo_setenv.c: Initial revision
18255:
18256: 1994-08-06 19:19 millert
18257:
18258: * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18259:
18260: 1994-08-06 19:19 millert
18261:
18262: * sudo.c: now use sudo_setenvc
18263:
18264: 1994-08-06 19:18 millert
18265:
18266: * configure.in: added puteenv and setenv, removed realpath
18267:
18268: 1994-08-06 19:18 millert
18269:
18270: * config.h.in: added putenv & setenv
18271:
18272: 1994-08-06 19:18 millert
18273:
18274: * Makefile.in: added sudo_setenv
18275:
18276: 1994-08-06 19:16 millert
18277:
18278: * version.h: ++
18279:
18280: 1994-08-05 19:43 millert
18281:
18282: * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18283: irix
18284:
18285: 1994-08-05 19:43 millert
18286:
18287: * Makefile.in: added MAN_POSTINSTALL
18288:
18289: 1994-08-05 19:43 millert
18290:
18291: * CHANGES: added
18292:
18293: 1994-08-05 19:10 millert
18294:
18295: * sudo.man: added SUDO_* plus new options
18296:
18297: 1994-08-05 19:10 millert
18298:
18299: * CHANGES: added one
18300:
18301: 1994-08-05 19:07 millert
18302:
18303: * configure.in: took out shadow lib
18304:
18305: 1994-08-05 18:35 millert
18306:
18307: * TODO: adde done
18308:
18309: 1994-08-05 17:52 millert
18310:
18311: * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18312:
18313: 1994-08-05 17:49 millert
18314:
18315: * Makefile.in: support for installing a cat page instead of a man
18316: page if no nroff
18317:
18318: 1994-08-05 17:48 millert
18319:
18320: * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18321: looks for nroff to determine whether or not to install a cat or
18322: man page
18323:
18324: 1994-08-05 17:48 millert
18325:
18326: * config.h.in: added HAVE_FLEX
18327:
18328: 1994-08-05 16:14 millert
18329:
18330: * sudo.c: not set ret to MODE_RUN initially
18331:
18332: 1994-08-05 16:12 millert
18333:
18334: * find_path.c: made command (and therefor cmnd dynamically
18335: allocated)
18336:
18337: 1994-08-04 20:25 millert
18338:
18339: * TODO: did #8
18340:
18341: 1994-08-04 20:24 millert
18342:
18343: * version.h: ++
18344:
18345: 1994-08-04 20:24 millert
18346:
18347: * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18348:
18349: 1994-08-04 20:24 millert
18350:
18351: * sudo.h: added MODE_ removed validate_only and added
18352: remove_timestamp()
18353:
18354: 1994-08-04 20:22 millert
18355:
18356: * sudo.c: usage() now takes an int (exit value) added parse_args()
18357: to parse command line arguments moved call to find_path() from
18358: load_globals to new function load_cmnd() removed validate_only
18359: global -- now use the concept of "modes" added -h and -k options
18360:
18361: 1994-08-04 20:21 millert
18362:
18363: * parse.c: no longer use global validate_only now checks for
18364: command called "validate" removed check for non-fully qualified
18365: commands since that is done by find_path
18366:
18367: 1994-08-04 20:20 millert
18368:
18369: * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18370:
18371: 1994-08-04 20:17 millert
18372:
18373: * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18374: comment
18375:
18376: 1994-08-04 20:17 millert
18377:
18378: * check.c: check_timestamp no longer runs reminder(), it is implied
18379: in the return val added remove_timestamp()
18380:
18381: 1994-08-04 20:16 millert
18382:
18383: * CHANGES: updated
18384:
18385: 1994-08-04 16:38 millert
18386:
18387: * BUGS: fixed on
18388:
18389: 1994-08-04 16:38 millert
18390:
18391: * sudo_realpath.c: took out old_errno
18392:
18393: 1994-08-04 16:37 millert
18394:
18395: * CHANGES: updated
18396:
18397: 1994-08-03 12:08 millert
18398:
18399: * logging.c: moved send_mail to after syslog
18400:
18401: 1994-08-02 22:41 millert
18402:
18403: * sudo.c: now set SUDO_ envariables
18404:
18405: 1994-08-01 13:40 millert
18406:
18407: * version.h: ++
18408:
18409: 1994-08-01 13:39 millert
18410:
18411: * sudo_realpath.c: now print error if chdir fails
18412:
18413: 1994-08-01 13:39 millert
18414:
18415: * find_path.c: removed an XXX
18416:
18417: 1994-07-25 20:40 millert
18418:
18419: * CHANGES: updated
18420:
18421: 1994-07-25 20:36 millert
18422:
18423: * configure.in: no more static binaries for aix
18424:
18425: 1994-07-25 18:37 millert
18426:
18427: * INSTALL: fixed typo
18428:
18429: 1994-07-25 18:33 millert
18430:
18431: * sudo_realpath.c: took out stuff not needed for sudo now does
18432: be_root/be_user itself now uses cwd global
18433:
18434: 1994-07-25 18:32 millert
18435:
18436: * version.h: +=2
18437:
18438: 1994-07-25 18:31 millert
18439:
18440: * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18441:
18442: 1994-07-25 18:26 millert
18443:
18444: * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18445:
18446: 1994-07-25 18:25 millert
18447:
18448: * find_path.c: now use sudo_realpath()
18449:
18450: 1994-07-25 18:25 millert
18451:
18452: * config.h.in: took out realpth() stuff since we now use
18453: sudo_realpath()
18454:
18455: 1994-07-25 18:25 millert
18456:
18457: * configure.in: ultrix enhanced sec
18458:
18459: 1994-07-25 18:25 millert
18460:
18461: * SUPPORTED: added ultrix enhanced sec.
18462:
18463: 1994-07-25 18:24 millert
18464:
18465: * INSTALL: updated
18466:
18467: 1994-07-25 18:21 millert
18468:
18469: * check.c: ultrix enhanced security suport
18470:
18471: 1994-07-25 18:20 millert
18472:
18473: * Makefile.in: added sudo_realpath.c
18474:
18475: 1994-07-25 18:18 millert
18476:
18477: * CHANGES: updated
18478:
18479: 1994-07-25 14:28 millert
18480:
18481: * tgetpass.c: increased passwd len to 24 for c2 security
18482:
18483: 1994-07-25 13:17 millert
18484:
18485: * BUGS: updated BUGS
18486:
18487: 1994-07-15 11:49 millert
18488:
18489: * check.c: now use user global var
18490:
18491: 1994-07-15 11:48 millert
18492:
18493: * configure.in: took out -ls
18494:
18495: 1994-07-14 19:11 millert
18496:
18497: * configure.in: added AFS libs
18498:
18499: 1994-07-14 17:45 millert
18500:
18501: * sudo.h: user is now a char * added epasswd
18502:
18503: 1994-07-14 17:43 millert
18504:
18505: * sudo.c: added tzset() to load_globals added epasswd (encrypted
18506: password) global made user dynamically allocated
18507:
18508: 1994-07-14 17:43 millert
18509:
18510: * configure.in: added tzset test
18511:
18512: 1994-07-14 17:43 millert
18513:
18514: * config.h.in: added HAVE_TZSET
18515:
18516: 1994-07-14 17:42 millert
18517:
18518: * check.c: cleaned up encrypted passwd grab somewhat
18519:
18520: 1994-07-14 12:34 millert
18521:
18522: * configure.in: fixed AFS typo
18523:
18524: 1994-07-14 12:34 millert
18525:
18526: * INSTALL: added AFS not
18527:
18528: 1994-07-14 12:34 millert
18529:
18530: * CHANGES: udpated
18531:
18532: 1994-07-14 12:33 millert
18533:
18534: * logging.c: can now log to both syslog & a file
18535:
18536: 1994-07-14 12:12 millert
18537:
18538: * sudo.h: added BOTH_LOGS
18539:
18540: 1994-07-14 11:34 millert
18541:
18542: * CHANGES: updated
18543:
18544: 1994-07-14 11:32 millert
18545:
18546: * configure.in: --with-AFS
18547:
18548: 1994-07-14 11:32 millert
18549:
18550: * config.h.in: added HAVE_AFS
18551:
18552: 1994-07-14 11:31 millert
18553:
18554: * check.c: added afs changes
18555:
18556: 1994-07-14 11:21 millert
18557:
18558: * sudo.h: removed AFS stuff :-)
18559:
18560: 1994-07-14 11:19 millert
18561:
18562: * tgetpass.c: include sys/select for AIX
18563:
18564: 1994-07-14 11:17 millert
18565:
18566: * sudo.h: added AFS
18567:
18568: 1994-07-14 11:16 millert
18569:
18570: * version.h: ++
18571:
18572: 1994-07-07 14:45 millert
18573:
18574: * SUPPORTED, CHANGES: updated
18575:
18576: 1994-07-07 14:44 millert
18577:
18578: * logging.c: can now have MAILER undefined
18579:
18580: 1994-07-07 14:37 millert
18581:
18582: * INSTALL: new sub-note about MAILER
18583:
18584: 1994-07-06 23:11 millert
18585:
18586: * sudo.man: added blurb about password timeout
18587:
18588: 1994-07-06 20:52 millert
18589:
18590: * configure.in: convex c2 changes
18591:
18592: 1994-07-06 20:52 millert
18593:
18594: * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18595:
18596: 1994-07-06 20:51 millert
18597:
18598: * Makefile.in: added OSDEFS
18599:
18600: 1994-07-06 20:46 millert
18601:
18602: * config.h.in: added spaces
18603:
18604: 1994-07-06 20:08 millert
18605:
18606: * tgetpass.c: added a goto if fgets fails
18607:
18608: 1994-07-06 20:08 millert
18609:
18610: * sudo.h: use __hpux not hpux convex c2 stuff
18611:
18612: 1994-07-06 20:08 millert
18613:
18614: * sudo.c: use __hpux not hpux
18615:
18616: 1994-07-06 20:08 millert
18617:
18618: * logging.c: convex c2 stuff
18619:
18620: 1994-07-06 20:07 millert
18621:
18622: * config.h.in: define ansi-ish cpp os defines if non-ansi are
18623: defined for hpux & convex
18624:
18625: 1994-07-06 20:07 millert
18626:
18627: * INSTALL: updated to say we support sonvex C2
18628:
18629: 1994-07-06 20:05 millert
18630:
18631: * check.c: added convex c2 support
18632:
18633: 1994-07-01 12:06 millert
18634:
18635: * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18636: select() to timeout
18637:
18638: 1994-06-29 17:04 millert
18639:
18640: * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18641:
18642: 1994-06-29 16:39 millert
18643:
18644: * tgetpass.c: now works + uses fgets()
18645:
18646: 1994-06-28 18:25 millert
18647:
18648: * tgetpass.c: select doesn't seem to recognize a single '\n' as
18649: input waiting so we can;t use it, sigh.
18650:
18651: 1994-06-26 16:38 millert
18652:
18653: * PORTING: updated tgetpass() blurb
18654:
18655: 1994-06-26 16:35 millert
18656:
18657: * configure.in: added --with-getpass
18658:
18659: 1994-06-26 16:35 millert
18660:
18661: * Makefile.in: added tgetpass stuff
18662:
18663: 1994-06-26 15:25 millert
18664:
18665: * tgetpass.c: now uses stdio
18666:
18667: 1994-06-26 15:17 millert
18668:
18669: * version.h: ++
18670:
18671: 1994-06-24 19:48 millert
18672:
18673: * PORTING: updated ,.
18674:
18675: 1994-06-24 19:46 millert
18676:
18677: * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18678:
18679: 1994-06-24 19:45 millert
18680:
18681: * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18682:
18683: 1994-06-24 19:45 millert
18684:
18685: * check.c: added hpux C2 shit
18686:
18687: 1994-06-24 19:45 millert
18688:
18689: * Makefile.in: took out tgetpass.*
18690:
18691: 1994-06-24 19:45 millert
18692:
18693: * INSTALL: added C2 blurb
18694:
18695: 1994-06-13 15:54 millert
18696:
18697: * configure.in: no termio(s) for ultrix since it is broken
18698:
18699: 1994-06-13 15:41 millert
18700:
18701: * check.c: added a space (yeah, anal)
18702:
18703: 1994-06-13 15:17 millert
18704:
18705: * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18706:
18707: 1994-06-08 14:34 millert
18708:
18709: * config.h.in: took out bsd signal stuff for irix
18710:
18711: 1994-06-08 14:26 millert
18712:
18713: * visudo.c: comments in #endif
18714:
18715: 1994-06-08 14:09 millert
18716:
18717: * configure.in: don't define BSD signals for irix
18718:
18719: 1994-06-08 12:57 millert
18720:
18721: * TODO: did some...
18722:
18723: 1994-06-08 12:57 millert
18724:
18725: * CHANGES: updated
18726:
18727: 1994-06-08 12:56 millert
18728:
18729: * realpath.c, sudo_realpath.c: took out unneeded code by changing
18730: where a strings was terminated
18731:
18732: 1994-06-07 19:21 millert
18733:
18734: * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18735: NULL
18736:
18737: 1994-06-07 17:40 millert
18738:
18739: * sudo.h: move __P to config.h
18740:
18741: 1994-06-07 17:40 millert
18742:
18743: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
18744: definition
18745:
18746: 1994-06-07 17:40 millert
18747:
18748: * config.h.in: added __P
18749:
18750: 1994-06-07 17:21 millert
18751:
18752: * config.h.in: added HAVE_FCHDIR
18753:
18754: 1994-06-07 17:18 millert
18755:
18756: * strdup.c: now include stdio
18757:
18758: 1994-06-07 14:55 millert
18759:
18760: * realpath.c, sudo_realpath.c: now works if no fchdir
18761:
18762: 1994-06-07 14:55 millert
18763:
18764: * visudo.c: define SA_RESETHAND to null if not defined
18765:
18766: 1994-06-07 14:54 millert
18767:
18768: * configure.in: added check & replace
18769:
18770: 1994-06-06 20:05 millert
18771:
18772: * configure.in: took out -static for nextstep -- it doesn't work
18773:
18774: 1994-06-06 19:59 millert
18775:
18776: * logging.c: moved #endif to where it belongs
18777:
18778: 1994-06-06 19:54 millert
18779:
18780: * SUPPORTED: correction
18781:
18782: 1994-06-06 19:42 millert
18783:
18784: * configure.in: now checks for strdup realpath getcwd bzero
18785:
18786: 1994-06-06 19:31 millert
18787:
18788: * config.h.in: emulate bzero
18789:
18790: 1994-06-06 16:57 millert
18791:
18792: * visudo.c: added posic signals
18793:
18794: 1994-06-06 16:57 millert
18795:
18796: * tgetpass.c: bzero cast
18797:
18798: 1994-06-06 16:57 millert
18799:
18800: * logging.c: added posix signals
18801:
18802: 1994-06-06 16:56 millert
18803:
18804: * configure.in: removed BROKEN_GETPASS added new srcs toreplace
18805: missing functions
18806:
18807: 1994-06-06 16:56 millert
18808:
18809: * config.h.in: added posix signal stuff
18810:
18811: 1994-06-06 16:56 millert
18812:
18813: * Makefile.in: added new srcs
18814:
18815: 1994-06-06 12:53 millert
18816:
18817: * visudo.c: updated useag
18818:
18819: 1994-06-06 12:39 millert
18820:
18821: * tgetpass.c: now uses posix signals
18822:
18823: 1994-06-05 20:17 millert
18824:
18825: * PORTING: updated sto reflect major changes
18826:
18827: 1994-06-05 20:05 millert
18828:
18829: * TODO, CHANGES: updated
18830:
18831: 1994-06-05 20:04 millert
18832:
18833: * tgetpass.c: uses sysconf() if available
18834:
18835: 1994-06-05 20:04 millert
18836:
18837: * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
18838:
18839: 1994-06-05 20:04 millert
18840:
18841: * realpath.c, sudo_realpath.c: for those w/o this in libc
18842:
18843: 1994-06-05 20:03 millert
18844:
18845: * getcwd.c, getwd.c: Initial revision
18846:
18847: 1994-06-05 20:03 millert
18848:
18849: * find_path.c: rewrote to use realpath(3) - nis now all my code
18850:
18851: 1994-06-05 20:02 millert
18852:
18853: * config.h.in: added HAVE_REALPATH
18854:
18855: 1994-06-05 20:02 millert
18856:
18857: * check.c: now use tgetpass
18858:
18859: 1994-06-05 20:02 millert
18860:
18861: * Makefile.in: added LIBOBJS use tgetpass.c
18862:
18863: 1994-06-05 18:55 millert
18864:
18865: * tgetpass.c: works now :-)
18866:
18867: 1994-06-05 18:27 millert
18868:
18869: * tgetpass.c: Initial revision
18870:
18871: 1994-06-05 17:17 millert
18872:
18873: * pathnames.h.in: added /dev/tty
18874:
18875: 1994-06-04 17:12 millert
18876:
18877: * version.h: incremented
18878:
18879: 1994-06-04 15:29 millert
18880:
18881: * sudo.c: always use getcwd
18882:
18883: 1994-06-04 14:49 millert
18884:
18885: * config.h.in: added check for getwd
18886:
18887: 1994-06-04 14:48 millert
18888:
18889: * configure.in: replace strdup & realpath & getcwd if missing
18890:
18891: 1994-06-04 14:47 millert
18892:
18893: * pathnames.h.in: added _PATH_PWD
18894:
18895: 1994-06-04 14:46 millert
18896:
18897: * aclocal.m4: added SUDO_PROG_PWD
18898:
18899: 1994-06-04 14:37 millert
18900:
18901: * realpath.c, sudo_realpath.c, strdup.c: Initial revision
18902:
18903: 1994-06-03 11:31 millert
18904:
18905: * configure.in: quoted quare brackets
18906:
18907: 1994-06-02 17:49 millert
18908:
18909: * sudo.c: no need to strdup() a constant
18910:
18911: 1994-06-02 15:45 millert
18912:
18913: * CHANGES: updated
18914:
18915: 1994-06-02 15:44 millert
18916:
18917: * sudo.man: added validate
18918:
18919: 1994-06-02 15:42 millert
18920:
18921: * sudo.c: added -v to usage
18922:
18923: 1994-06-02 15:41 millert
18924:
18925: * parse.c, sudo.c, sudo.h: added validate_only stuff
18926:
18927: 1994-05-29 21:29 millert
18928:
18929: * configure.in: now finds sed
18930:
18931: 1994-05-29 21:28 millert
18932:
18933: * aclocal.m4: $OSREV is now an int
18934:
18935: 1994-05-29 19:13 millert
18936:
18937: * configure.in: added mtxinu to caser
18938:
18939: 1994-05-29 18:37 millert
18940:
18941: * sudo.h: added EXEC macro
18942:
18943: 1994-05-29 18:36 millert
18944:
18945: * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
18946: FQDN is set
18947:
18948: 1994-05-29 18:36 millert
18949:
18950: * logging.c: changed mail_argv[] def now use EXEC() macro
18951:
18952: 1994-05-29 18:35 millert
18953:
18954: * check.c: took out crypt() definition
18955:
18956: 1994-05-29 17:23 millert
18957:
18958: * version.h: upped the version
18959:
18960: 1994-05-29 15:52 millert
18961:
18962: * configure.in: always look for -lnsl
18963:
18964: 1994-05-29 15:29 millert
18965:
18966: * aclocal.m4: added an echo
18967:
18968: 1994-05-29 15:25 millert
18969:
18970: * sudo.h: SHORT_MESSAGE is now the default
18971:
18972: 1994-05-29 15:18 millert
18973:
18974: * config.h.in: fixed typo
18975:
18976: 1994-05-29 01:29 millert
18977:
18978: * configure.in: added missing AC_DEFINE(SVR4) for solaris
18979:
18980: 1994-05-28 20:42 millert
18981:
18982: * sudo.man: documented the -v flag
18983:
18984: 1994-05-28 20:34 millert
18985:
18986: * SUPPORTED: updated
18987:
18988: 1994-05-28 20:31 millert
18989:
18990: * check.c: proto-ized crypt()
18991:
18992: 1994-05-28 20:28 millert
18993:
18994: * config.h.in: added LIBSHADOW undef
18995:
18996: 1994-05-28 20:18 millert
18997:
18998: * configure.in: nwo set OS to be lowercase
18999:
19000: 1994-05-28 19:36 millert
19001:
19002: * configure.in: now use SUDO_OSTYPE to set $OS
19003:
19004: 1994-05-28 19:36 millert
19005:
19006: * aclocal.m4: now use uname to determine os
19007:
19008: 1994-05-28 16:23 millert
19009:
19010: * visudo.c: added prototypes & moved sig handler around
19011:
19012: 1994-05-28 15:13 millert
19013:
19014: * sudo.h: added prototyppes
19015:
19016: 1994-05-28 15:13 millert
19017:
19018: * parse.c: added comment
19019:
19020: 1994-05-28 15:12 millert
19021:
19022: * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19023:
19024: 1994-05-28 15:11 millert
19025:
19026: * check.c, logging.c, sudo.c: added prototypes
19027:
19028: 1994-05-28 15:11 millert
19029:
19030: * aixcrypt.exp: Initial revision
19031:
19032: 1994-05-28 15:11 millert
19033:
19034: * Makefile.in: added aixcrypt.exp
19035:
19036: 1994-05-28 13:21 millert
19037:
19038: * parse.lex, parse.yacc: moved config.h to top of includes
19039:
19040: 1994-05-25 15:48 millert
19041:
19042: * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19043:
19044: 1994-05-24 23:08 millert
19045:
19046: * visudo.c: added -v flag and usage()
19047:
19048: 1994-05-24 23:08 millert
19049:
19050: * version.h: fixed a typo
19051:
19052: 1994-05-24 23:08 millert
19053:
19054: * sudo.c: cast Argv to a const for exec added -v flag
19055:
19056: 1994-05-24 23:07 millert
19057:
19058: * logging.c: mail_argv is now a const
19059:
19060: 1994-05-24 23:07 millert
19061:
19062: * configure.in: only set RETSIGTYPE if it is not set already
19063:
19064: 1994-05-24 23:07 millert
19065:
19066: * aclocal.m4: now defines & STDC_HEADERS for Irix
19067:
19068: 1994-05-24 23:07 millert
19069:
19070: * Makefile.in: added version.h
19071:
19072: 1994-05-24 21:25 millert
19073:
19074: * insults.h, sudo.h: prevent multiple inclusion
19075:
19076: 1994-05-24 21:20 millert
19077:
19078: * version.h: Initial revision
19079:
19080: 1994-05-24 21:09 millert
19081:
19082: * parse.lex, parse.yacc: now includes config.h
19083:
19084: 1994-05-24 20:54 millert
19085:
19086: * aclocal.m4: now talks about sunos 4.x
19087:
19088: 1994-05-24 20:23 millert
19089:
19090: * visudo.c: calls to Exit now pass an arg
19091:
19092: 1994-05-24 18:00 millert
19093:
19094: * visudo.c: signal handler now takes an int argument
19095:
19096: 1994-05-24 18:00 millert
19097:
19098: * CHANGES: updated
19099:
19100: 1994-05-24 17:44 millert
19101:
19102: * sudo.c: ok, the getcwd() is now *really* done as the user
19103:
19104: 1994-05-24 17:44 millert
19105:
19106: * configure.in: changed AIX STATIC_FLAGS
19107:
19108: 1994-05-24 16:27 millert
19109:
19110: * aclocal.m4: solaris now defines SVR4
19111:
19112: 1994-05-24 16:18 millert
19113:
19114: * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19115: sigh.
19116:
19117: 1994-05-24 16:18 millert
19118:
19119: * sudo.c: moved getcwd stuff into load_globals
19120:
19121: 1994-05-24 16:18 millert
19122:
19123: * parse.c: took out externs that are in suod.h
19124:
19125: 1994-05-24 16:18 millert
19126:
19127: * logging.c: moved cwd into load_globals
19128:
19129: 1994-05-24 16:17 millert
19130:
19131: * find_path.c: moved cwd stuff
19132:
19133: 1994-05-24 15:55 millert
19134:
19135: * Makefile.in: fixed make distclean & realclean
19136:
19137: 1994-05-24 12:51 millert
19138:
19139: * TODO: updated .,
19140:
19141: 1994-05-24 12:51 millert
19142:
19143: * CHANGES: added solaris changes
19144:
19145: 1994-05-24 12:51 millert
19146:
19147: * aclocal.m4: added solaris changes, need to rework
19148:
19149: 1994-05-24 12:50 millert
19150:
19151: * configure.in: cleaned up for solaris
19152:
19153: 1994-05-24 12:13 millert
19154:
19155: * logging.c: reinstall reapchild signal handler for non-bsd signals
19156:
19157: 1994-05-24 12:03 millert
19158:
19159: * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19160: needed)
19161:
19162: 1994-05-24 12:03 millert
19163:
19164: * sudo.c: support for HAVE_SYSCONF
19165:
19166: 1994-05-24 12:02 millert
19167:
19168: * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19169: minor prettying up /
19170:
19171: 1994-05-23 20:26 millert
19172:
19173: * config.h.in: added HAVE_SYSCONF
19174:
19175: 1994-05-16 18:57 millert
19176:
19177: * configure.in: now tells you what os you are running /.
19178:
19179: 1994-05-16 18:56 millert
19180:
19181: * aclocal.m4: took out extra ','
19182:
19183: 1994-05-14 17:56 millert
19184:
19185: * config.h.in: added _BSD_COMPAT
19186:
19187: 1994-05-14 17:56 millert
19188:
19189: * aclocal.m4: fixed for irix5
19190:
19191: 1994-05-14 17:55 millert
19192:
19193: * CHANGES: updated
19194:
19195: 1994-05-14 17:27 millert
19196:
19197: * sudo.c: uid seinitialized to -2
19198:
19199: 1994-04-28 12:36 millert
19200:
19201: * sudo.c: now removes LIBPATH for AIX
19202:
19203: 1994-03-12 20:41 millert
19204:
19205: * configure.in: now uses ufc if it finds it
19206:
19207: 1994-03-12 17:42 millert
19208:
19209: * sudo.h: no longer define yyval & yylval since yacc does it
19210:
19211: 1994-03-12 17:42 millert
19212:
19213: * parse.lex: now defines yylval as extenr
19214:
19215: 1994-03-12 17:41 millert
19216:
19217: * configure.in: BROKEN_GETPASS is now an OPTION
19218:
19219: 1994-03-12 17:41 millert
19220:
19221: * config.h.in: took out BROKEN_GETPASS
19222:
19223: 1994-03-12 17:20 millert
19224:
19225: * Makefile.in: took out big comment
19226:
19227: 1994-03-12 16:24 millert
19228:
19229: * README: updated
19230:
19231: 1994-03-12 16:20 millert
19232:
19233: * Makefile.in: took out README.beta
19234:
19235: 1994-03-12 16:19 millert
19236:
19237: * SUPPORTED: Initial revision
19238:
19239: 1994-03-12 16:19 millert
19240:
19241: * INSTALL: now reference SUPPORTED .,
19242:
19243: 1994-03-12 16:17 millert
19244:
19245: * config.h.in: now check for convex OR __convex__
19246:
19247: 1994-03-12 16:16 millert
19248:
19249: * aclocal.m4: now check for convex or __convex__
19250:
19251: 1994-03-12 16:15 millert
19252:
19253: * Makefile.in: added dist target
19254:
19255: 1994-03-12 15:19 millert
19256:
19257: * aclocal.m4: use __convex__
19258:
19259: 1994-03-12 14:33 millert
19260:
19261: * find_path.c: now use _S_* stat stuff to be ansi-like
19262:
19263: 1994-03-12 14:11 millert
19264:
19265: * INSTALL: updated for configure directions
19266:
19267: 1994-03-12 14:05 millert
19268:
19269: * Makefile.in: distclean now removes config.h and pathnames.h
19270:
19271: 1994-03-12 14:03 millert
19272:
19273: * CHANGES: updated
19274:
19275: 1994-03-12 14:00 millert
19276:
19277: * TODO: fixed typoe
19278:
19279: 1994-03-12 13:57 millert
19280:
19281: * Makefile.in, visudo.c: updated version
19282:
19283: 1994-03-12 13:57 millert
19284:
19285: * config.h.in, pathnames.h.in: added copyright header
19286:
19287: 1994-03-12 13:55 millert
19288:
19289: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19290: parse.yacc, sudo.c, sudo.h: udpated version
19291:
19292: 1994-03-12 13:39 millert
19293:
19294: * visudo.c: udpated to use configure + pathnames.h
19295:
19296: 1994-03-12 13:37 millert
19297:
19298: * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19299:
19300: 1994-03-12 13:37 millert
19301:
19302: * sudo.h: now works with configure
19303:
19304: 1994-03-12 13:36 millert
19305:
19306: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19307: updated to work with configure + pathnames.h
19308:
19309: 1994-03-12 10:40 millert
19310:
19311: * Makefile.in: added LEXLIB
19312:
19313: 1994-03-10 03:18 millert
19314:
19315: * COPYING: updated gnu general licence to versio 2
19316:
19317: 1994-03-10 02:44 millert
19318:
19319: * pathnames.h.in, config.h.in: Initial revision
19320:
19321: 1994-03-10 01:43 millert
19322:
19323: * sudo.h: changed to work with configure
19324:
19325: 1994-03-09 18:51 millert
19326:
19327: * Makefile.in, aclocal.m4, configure.in: Initial revision
19328:
19329: 1994-03-09 17:36 millert
19330:
19331: * visudo.c: now uses defines used by configure
19332:
19333: 1994-03-01 16:31 millert
19334:
19335: * find_path.c: sudo won't bitch about EPERM now, for real
19336:
19337: 1994-02-28 00:36 millert
19338:
19339: * logging.c: renamed exec_argv to eliminate a libc name clash with
19340: ksros
19341:
19342: 1994-02-28 00:28 millert
19343:
19344: * CHANGES: corrected
19345:
19346: 1994-02-28 00:27 millert
19347:
19348: * logging.c, sudo.c, sudo.h: execve -> execv
19349:
19350: 1994-02-27 23:27 millert
19351:
19352: * TODO: upated
19353:
19354: 1994-02-27 23:19 millert
19355:
19356: * PORTING: added 2 mroe items
19357:
19358: 1994-02-27 23:12 millert
19359:
19360: * CHANGES: updated
19361:
19362: 1994-02-27 23:11 millert
19363:
19364: * sudo.h: added UMASK and mode_t declaration
19365:
19366: 1994-02-27 23:11 millert
19367:
19368: * sudo.c: added UMASK
19369:
19370: 1994-02-27 20:55 millert
19371:
19372: * logging.c: now opens log file with mode 077
19373:
19374: 1994-02-27 20:55 millert
19375:
19376: * check.c: saved current umask ans restores it
19377:
19378: 1994-02-27 20:36 millert
19379:
19380: * sudo.h: added MAXLOGFILELEN
19381:
19382: 1994-02-27 20:35 millert
19383:
19384: * logging.c: split long log lines. FOr syslog, split into multiple
19385: entries, for a log file, indent the extra for readability
19386:
19387: 1994-02-27 17:22 millert
19388:
19389: * CHANGES: added changes
19390:
19391: 1994-02-27 17:18 millert
19392:
19393: * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19394: should be)
19395:
19396: 1994-02-25 16:04 millert
19397:
19398: * TODO: added input from Brett M Hogden <hogden@rge.com>
19399:
19400: 1994-02-16 13:35 millert
19401:
19402: * sudo.c: added rmenv() to remove stuff from environ. can now uses
19403: execvp() OR execve() becuase of this.
19404:
19405: 1994-02-16 13:35 millert
19406:
19407: * logging.c: now uses execvp() OR execve()
19408:
19409: 1994-02-16 13:31 millert
19410:
19411: * sudo.h: added USE_EXECVE
19412:
19413: 1994-02-16 13:27 millert
19414:
19415: * sudo.h: added environ
19416:
19417: 1994-02-16 12:53 millert
19418:
19419: * find_path.c: now ignore EPERM
19420:
19421: 1994-02-15 23:52 millert
19422:
19423: * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19424: statics /.
19425:
19426: 1994-02-15 23:52 millert
19427:
19428: * CHANGES: updated
19429:
19430: 1994-02-15 23:40 millert
19431:
19432: * sudo.h: took out Envp
19433:
19434: 1994-02-14 12:28 millert
19435:
19436: * BUGS: Initial revision
19437:
19438: 1994-02-10 14:29 millert
19439:
19440: * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19441:
19442: 1994-02-10 14:05 millert
19443:
19444: * sudo.h: added SECURE_PATH
19445:
19446: 1994-02-10 13:50 millert
19447:
19448: * INSTALL: added sample.sudoers note
19449:
19450: 1994-02-10 13:47 millert
19451:
19452: * sudoers: Initial revision
19453:
19454: 1994-02-09 14:54 millert
19455:
19456: * find_path.c: fixed typo
19457:
19458: 1994-02-08 23:06 millert
19459:
19460: * PORTING: took out SAVED_UID garbage
19461:
19462: 1994-02-08 22:55 millert
19463:
19464: * INSTALL: mentioned HAL
19465:
19466: 1994-02-08 22:50 millert
19467:
19468: * sudo.h: added HAL line
19469:
19470: 1994-02-08 22:48 millert
19471:
19472: * insults.h: added HAL insults
19473:
19474: 1994-02-08 22:48 millert
19475:
19476: * TODO: updated
19477:
19478: 1994-02-08 22:02 millert
19479:
19480: * logging.c: more verbose error if mailer not found
19481:
19482: 1994-02-08 22:02 millert
19483:
19484: * check.c: now do getpwent as root for soem shadow password systems
19485: (bsdi)
19486:
19487: 1994-02-08 13:22 millert
19488:
19489: * sudo.h: took out SAVED_UID garbade
19490:
19491: 1994-02-08 13:21 millert
19492:
19493: * sudo.c: took out SAVED_UID garbage since it don't work
19494:
19495: 1994-02-06 17:43 millert
19496:
19497: * README: updated
19498:
19499: 1994-02-06 17:40 millert
19500:
19501: * insults.h: added a missing space :-)
19502:
19503: 1994-02-05 19:48 millert
19504:
19505: * sudo.c, sudo.h: took out multimax cruft
19506:
19507: 1994-02-05 19:30 millert
19508:
19509: * INSTALL: minor update
19510:
19511: 1994-02-05 19:30 millert
19512:
19513: * PORTING: finished
19514:
19515: 1994-02-05 19:19 millert
19516:
19517: * sudo.c: fixed a typo + indentation
19518:
19519: 1994-02-05 18:43 millert
19520:
19521: * sudo.h: took outumoved some defines to the config file ,. ,.
19522:
19523: 1994-02-05 15:17 millert
19524:
19525: * PORTING: Initial revision
19526:
19527: 1994-02-05 15:17 millert
19528:
19529: * TODO: did #6
19530:
19531: 1994-02-05 15:16 millert
19532:
19533: * sudo.h: added HAS_SAVED_UID
19534:
19535: 1994-02-05 15:16 millert
19536:
19537: * sudo.c: put back AIX cruft
19538:
19539: 1994-02-03 00:44 millert
19540:
19541: * sudo.c: aix changes
19542:
19543: 1994-02-02 01:31 millert
19544:
19545: * CHANGES: updated
19546:
19547: 1994-02-02 01:30 millert
19548:
19549: * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19550: when abs necesary
19551:
19552: 1994-02-01 22:21 millert
19553:
19554: * check.c: added missing %s\n
19555:
19556: 1994-01-31 02:06 millert
19557:
19558: * install-sh: Initial revision
19559:
19560: 1994-01-31 01:58 millert
19561:
19562: * CHANGES, TODO: updated
19563:
19564: 1994-01-31 01:56 millert
19565:
19566: * sudo.c: now removed _RLD_* for alphas
19567:
19568: 1994-01-31 01:50 millert
19569:
19570: * INSTALL: updated for new config scheme
19571:
19572: 1994-01-30 19:42 millert
19573:
19574: * find_path.c: more verbose eror messages
19575:
19576: 1994-01-27 14:08 millert
19577:
19578: * TODO: now have solaris
19579:
19580: 1994-01-27 14:07 millert
19581:
19582: * sudo.h: define __svr4__ for SOLARIS
19583:
19584: 1994-01-27 14:07 millert
19585:
19586: * check.c: added svr4 junk for shadow pws for solaris 2.x
19587:
19588: 1994-01-27 13:19 millert
19589:
19590: * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19591: Its not needed since we start out setuid with the correct perms.
19592:
19593: 1994-01-26 19:51 millert
19594:
19595: * check.c, sudo.c, sudo.h: now use setreuid()
19596:
19597: 1994-01-26 18:58 millert
19598:
19599: * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19600: VARIABLES sectoin
19601:
19602: 1994-01-26 18:52 millert
19603:
19604: * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19605:
19606: 1994-01-26 18:52 millert
19607:
19608: * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19609: >> .
19610:
19611: 1993-12-07 01:33 millert
19612:
19613: * README: minor update + spell fix
19614:
19615: 1993-12-07 01:33 millert
19616:
19617: * INSTALL: rewrote most of this
19618:
19619: 1993-12-07 01:13 millert
19620:
19621: * sudo.h: added all options that are in the Makefile
19622:
19623: 1993-12-07 00:23 millert
19624:
19625: * getpass.c: now use USE_TERMIO #define for sgi & hpux
19626:
19627: 1993-12-06 23:19 millert
19628:
19629: * TODO: todo: posix sigs
19630:
19631: 1993-12-06 01:12 millert
19632:
19633: * check.c, find_path.c: always include strings.h
19634:
19635: 1993-12-05 20:34 millert
19636:
19637: * visudo.c: added STATICEDITOR
19638:
19639: 1993-12-05 20:30 millert
19640:
19641: * sudo.h: sgi has vi in /usr/bin too
19642:
19643: 1993-12-05 20:23 millert
19644:
19645: * sudo.man: added VISUAL
19646:
19647: 1993-12-02 22:20 millert
19648:
19649: * sudo.h: sue /usr/bin/vi on some systems
19650:
19651: 1993-12-02 22:19 millert
19652:
19653: * sudo.c: fixed warning (include strings.h)
19654:
19655: 1993-12-02 22:06 millert
19656:
19657: * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19658: features)
19659:
19660: 1993-12-02 21:38 millert
19661:
19662: * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19663:
19664: 1993-12-02 21:35 millert
19665:
19666: * visudo.c: added EDITOR envar
19667:
19668: 1993-12-02 21:34 millert
19669:
19670: * check.c, find_path.c, parse.c, sudo.c: added patches from
19671: John_Rouillard directory spec uses EDITOR
19672:
19673: 1993-12-01 19:32 millert
19674:
19675: * getpass.c: added flush for hpux
19676:
19677: 1993-11-30 13:37 millert
19678:
19679: * sudo.c: no longer assume malloc returns a char *
19680:
19681: 1993-11-29 20:35 millert
19682:
19683: * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19684: stuff -- now gets removed correctly
19685:
19686: 1993-11-29 19:31 millert
19687:
19688: * sudo.h: added STD_HEADERS macro
19689:
19690: 1993-11-29 19:14 millert
19691:
19692: * sudo.c: now uses STD_HEADERS macor for ansi
19693:
19694: 1993-11-29 19:14 millert
19695:
19696: * find_path.c: now uses STD_HEADERS macro
19697:
19698: 1993-11-29 19:13 millert
19699:
19700: * check.c: niceties for C compiler bitches -- no real change
19701:
19702: 1993-11-29 13:04 millert
19703:
19704: * visudo.c: now doesn't fclose a file never opened.
19705:
19706: 1993-11-28 16:35 millert
19707:
19708: * sudo.man: added visudo line
19709:
19710: 1993-11-28 16:31 millert
19711:
19712: * sudo.man: added error stuff added me in there...
19713:
19714: 1993-11-28 03:12 millert
19715:
19716: * CHANGES: noted insults
19717:
19718: 1993-11-28 03:01 millert
19719:
19720: * INSTALL: added blurb about reading stuff
19721:
19722: 1993-11-28 03:00 millert
19723:
19724: * sudo.h: added insults
19725:
19726: 1993-11-28 03:00 millert
19727:
19728: * insults.h: corrected somments and removed newlines
19729:
19730: 1993-11-28 03:00 millert
19731:
19732: * check.c: now uses insults
19733:
19734: 1993-11-28 02:45 millert
19735:
19736: * insults.h: Initial revision
19737:
19738: 1993-11-27 19:46 millert
19739:
19740: * INSTALL: added dec syslog note
19741:
19742: 1993-11-27 19:25 millert
19743:
19744: * sample.sudoers: added real stuff in there
19745:
19746: 1993-11-27 19:24 millert
19747:
19748: * TODO: added a todo
19749:
19750: 1993-11-27 19:10 millert
19751:
19752: * TODO: added one
19753:
19754: 1993-11-27 18:59 millert
19755:
19756: * sample.sudoers: Initial revision
19757:
19758: 1993-11-27 18:59 millert
19759:
19760: * sudo.man: updated with changes
19761:
19762: 1993-11-27 18:52 millert
19763:
19764: * sudo.man: Initial revision
19765:
19766: 1993-11-27 18:48 millert
19767:
19768: * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
19769: revision
19770:
19771: 1993-11-27 18:46 millert
19772:
19773: * visudo.c: updated version number and took out jeff's old addr
19774: since it is no good
19775:
19776: 1993-11-27 18:42 millert
19777:
19778: * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
19779: parse.yacc, sudo.c: updated version number and took out jeff's
19780: email (since it is invalid)
19781:
19782: 1993-10-28 09:36 millert
19783:
19784: * check.c: added fflush()
19785:
19786: 1993-10-22 20:46 millert
19787:
19788: * find_path.c: now return NULL instead pfof exiting for
19789: nopnn-fatal errors
19790:
19791: 1993-10-21 16:57 millert
19792:
19793: * check.c: new banner
19794:
19795: 1993-10-21 16:42 millert
19796:
19797: * parse.lex: now sudo.h gets included first
19798:
19799: 1993-10-17 20:31 millert
19800:
19801: * parse.lex: now can use flex
19802:
19803: 1993-10-17 20:31 millert
19804:
19805: * sudo.h: linux patch
19806:
19807: 1993-10-17 20:30 millert
19808:
19809: * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
19810:
19811: 1993-10-17 20:30 millert
19812:
19813: * check.c: linux diff
19814:
19815: 1993-10-15 16:03 millert
19816:
19817: * find_path.c: stat now ignores EINVAL
19818:
19819: 1993-10-05 21:48 millert
19820:
19821: * find_path.c, sudo.c: now declare strdup as extern
19822:
19823: 1993-10-04 15:23 millert
19824:
19825: * visudo.c: reformatted with indent + by hand
19826:
19827: 1993-10-04 15:10 millert
19828:
19829: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
19830: sudo.h: used indent to "fix" coding style
19831:
19832: 1993-10-03 20:12 millert
19833:
19834: * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
19835: LAST should maybe move the code that does this into the loop
19836: body. makes it messier tho. hmmm.
19837:
19838: 1993-09-08 11:53 millert
19839:
19840: * find_path.c: redid the fix for non-executable files in an easier
19841: to read way plus some minor aethetic changes
19842:
19843: 1993-09-08 11:39 millert
19844:
19845: * find_path.c: fixed bug with non-executable tings of same name in
19846: path introduced by checkig errno after stat(2).
19847:
19848: 1993-09-05 10:02 millert
19849:
19850: * sudo.c: fixed off by one error
19851:
19852: 1993-09-05 09:55 millert
19853:
19854: * find_path.c: now handles decending below '/' correctly
19855:
19856: 1993-09-05 08:35 millert
19857:
19858: * sudo.c: now actually builds Envp instead of munging envp
19859:
19860: 1993-09-04 15:42 millert
19861:
19862: * parse.yacc: now includes sys/param.h
19863:
19864: 1993-09-04 15:41 millert
19865:
19866: * visudo.c: now includes sys/param.h
19867:
19868: 1993-09-04 15:30 millert
19869:
19870: * sudo.h: fixed ifndef -> ifdef
19871:
19872: 1993-09-04 15:19 millert
19873:
19874: * qualify.c: make more like find_path.c
19875:
19876: 1993-09-04 15:18 millert
19877:
19878: * find_path.c: rewritten by millert
19879:
19880: 1993-09-04 15:17 millert
19881:
19882: * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
19883: added info about new defines in the comment
19884:
19885: 1993-09-04 15:15 millert
19886:
19887: * logging.c: now uses USE_CWD
19888:
19889: 1993-09-04 14:10 millert
19890:
19891: * sudo.h: added delc for clean_envp() and Envp
19892:
19893: 1993-09-04 14:09 millert
19894:
19895: * sudo.c: now rips LD_* env vars out of envp and passed sanitized
19896: Envp to exec
19897:
19898: 1993-09-04 14:09 millert
19899:
19900: * logging.c: now uses execve()
19901:
19902: 1993-09-04 14:08 millert
19903:
19904: * find_path.c: ENOTDIR is ok now too (in case part of the path is
19905: bogus)
19906:
19907: 1993-09-04 08:17 millert
19908:
19909: * qualify.c: now works correctly (ttaltotal rewrite)
19910:
19911: 1993-09-04 07:59 millert
19912:
19913: * parse.lex: now includes sys/param.h didn't match trailing / --
19914: fix from rouilj@cs.umb.edu
19915:
19916: 1993-06-11 18:04 millert
19917:
19918: * sudo.c: moved around the #ifndef _AIX
19919:
19920: 1993-06-11 18:03 millert
19921:
19922: * check.c, logging.c, parse.c: Initial revision
19923:
19924: 1993-03-20 07:57 millert
19925:
19926: * qualify.c: Initial revision
19927:
19928: 1993-03-13 15:09 millert
19929:
19930: * find_path.c: now works if you do sudo bin/test
19931:
19932: 1993-03-13 14:20 millert
19933:
19934: * find_path.c: works
19935:
19936: 1993-03-02 18:28 millert
19937:
19938: * sudo.h: Initial revision
19939:
19940: 1993-03-02 11:35 millert
19941:
19942: * visudo.c: Initial revision
19943:
19944: 1993-03-02 11:32 millert
19945:
19946: * parse.lex, parse.yacc: Initial revision
19947:
19948: 1993-02-16 13:24 millert
19949:
19950: * sudo.c: took out errno.h
19951:
19952: 1993-02-16 13:22 millert
19953:
19954: * sudo.c: now spews error if exec fails and exits with -1
19955:
19956: 1993-02-16 12:07 millert
19957:
19958: * sudo.c: Initial revision
19959:
19960: 1993-02-15 22:27 millert
19961:
19962: * find_path.c: now only execs files with (an) executable bit set.
19963:
19964: 1993-02-15 22:01 millert
19965:
19966: * find_path.c: Initial revision
19967:
19968: 1993-02-15 14:32 millert
19969:
19970: * getpass.c: added nice comment
19971:
19972: 1993-02-15 14:19 millert
19973:
19974: * getpass.c: now works on sgi's
19975:
19976: 1993-02-15 13:57 millert
19977:
19978: * getpass.c: Initial revision
19979: