Annotation of src/usr.bin/sudo/ChangeLog, Revision 1.6
1.6 ! millert 1: 2009-06-15 17:19 millert
! 2:
! 3: * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
! 4: Quest
! 5:
! 6: 2009-06-15 17:18 millert
! 7:
! 8: * Makefile.in: build the .cat page in the current working dir, not
! 9: the src dir
! 10:
! 11: 2009-06-15 09:10 millert
! 12:
! 13: * env.c: Return EINVAL in setenv() if var is NULL or the empty
! 14: string to match glibc behavior.
! 15:
! 16: 2009-06-13 16:52 millert
! 17:
! 18: * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
! 19: AC_ARG_ENABLE
! 20:
! 21: 2009-06-11 16:29 millert
! 22:
! 23: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
! 24: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
! 25: regen
! 26:
! 27: 2009-06-09 10:08 millert
! 28:
! 29: * INSTALL: Document --with-libvas and --with-libvas-rpath
! 30:
! 31: 2009-05-29 09:43 millert
! 32:
! 33: * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
! 34: and key paths may be a directory or a file. However, version 5.0
! 35: of the SDK only seems to support using a directory. If
! 36: ldapssl_clientauth_init fails and the cert or key paths look like
! 37: they could be files, strip off the last path element and try
! 38: again.
! 39:
! 40: 2009-05-29 09:40 millert
! 41:
! 42: * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
! 43: in path to flex.
! 44:
! 45: 2009-05-26 20:49 millert
! 46:
! 47: * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
! 48: non-Unix group support from Quest, as reworked by me.
! 49:
! 50: 2009-05-26 20:47 millert
! 51:
! 52: * toke.c: regen
! 53:
! 54: 2009-05-26 20:46 millert
! 55:
! 56: * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
! 57: space.
! 58:
! 59: 2009-05-25 08:02 millert
! 60:
! 61: * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
! 62: fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
! 63: logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
! 64: pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
! 65: sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
! 66: testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
! 67: auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
! 68: years.
! 69:
! 70: 2009-05-24 08:33 millert
! 71:
! 72: * interfaces.c, lbuf.c: Minor fixes for Minix-3
! 73:
! 74: 2009-05-22 06:37 millert
! 75:
! 76: * set_perms.c: Handle getgroups() returning 0. Also add missing
! 77: check for HAVE_GETGROUPS.
! 78:
! 79: 2009-05-19 17:24 millert
! 80:
! 81: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
! 82: version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
! 83: via AC_INIT in configure.
! 84:
! 85: 2009-05-18 06:33 millert
! 86:
! 87: * set_perms.c: Remove group setting code in setusercontext case, we
! 88: will do it ourselves later on in runas_setup. Set the gid after
! 89: initgroups/setgroups is called, since on Mac OS X it seems to
! 90: change the egid.
! 91:
! 92: 2009-05-17 18:19 millert
! 93:
! 94: * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
! 95: vasgroups.c: Initial bits of non-unix group support using Quest
! 96: Authentication Services
! 97:
! 98: 2009-05-17 16:52 millert
! 99:
! 100: * toke.c, toke.l: Accept %:foo as a non-Unix group
! 101:
! 102: 2009-05-17 16:22 millert
! 103:
! 104: * toke.c, toke.l: Allow user/group to be double quoted in the case
! 105: of non-Unix groups which contain spaces.
! 106:
! 107: 2009-05-11 12:47 millert
! 108:
! 109: * match.c: Don't allow the user to specify the default runas user
! 110: if their sudoers entry only allows them to run as a group.
! 111:
! 112: 2009-05-10 07:59 millert
! 113:
! 114: * sudo.c: Must call audit_success before we change uids.
! 115:
! 116: 2009-05-10 07:52 millert
! 117:
! 118: * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
! 119: set_perm to not exit on failure and use this in the logging
! 120: routines.
! 121:
! 122: 2009-05-10 07:33 millert
! 123:
! 124: * parse.c: In -l mode, if the user is only allowed to run as a
! 125: group, display the user's name, not root's before the allowed
! 126: group.
! 127:
! 128: 2009-05-09 21:00 millert
! 129:
! 130: * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
! 131: effect of setting the runas user to root unilaterally.
! 132:
! 133: 2009-05-08 16:19 millert
! 134:
! 135: * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
! 136: F_SETLKW.
! 137:
! 138: 2009-05-08 13:07 millert
! 139:
! 140: * pwutil.c: Only cache by the method we fetched for pwd and grp
! 141: lookups. Previously we cached both by namd and id but this can
! 142: cause problems for entries that share the same id. Also add more
! 143: info in the error message in case the insert fails (which should
! 144: now be impossible).
! 145:
! 146: 2009-04-30 15:04 millert
! 147:
! 148: * sudoers.pod: Add a clarification from Nick Sieger
! 149:
! 150: 2009-04-25 12:49 millert
! 151:
! 152: * env.c: Inline the setting of the environment string.
! 153:
! 154: 2009-04-24 14:53 millert
! 155:
! 156: * env.c: setenv(3) in Linux treats a NUL value as the empty string
! 157: setenv(3) in BSD doesn't return an error if the name has '=' in
! 158: it, it just treats the '=' as end of string.
! 159:
! 160: 2009-04-22 16:32 millert
! 161:
! 162: * toke.c, toke.l: Not all systems have d_namlen
! 163:
! 164: 2009-04-20 13:53 millert
! 165:
! 166: * sudoers.pod: Fix up some pod2html issues.
! 167:
! 168: 2009-04-19 14:09 millert
! 169:
! 170: * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
! 171: from a diff from Quest Software.
! 172:
! 173: 2009-04-19 09:01 millert
! 174:
! 175: * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
! 176: files)
! 177:
! 178: 2009-04-19 08:56 millert
! 179:
! 180: * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
! 181: backup files)
! 182:
! 183: 2009-04-18 19:37 millert
! 184:
! 185: * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
! 186: #includedir, ignore any file containing a dot
! 187:
! 188: 2009-04-18 19:25 millert
! 189:
! 190: * Makefile.in, version.h: Bump version
! 191:
! 192: 2009-04-18 19:25 millert
! 193:
! 194: * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
! 195: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
! 196: visudo.c: Implement #includedir directive. Files in an
! 197: includedir are not edited by visudo unless they contain a syntax
! 198: error.
! 199:
! 200: 2009-04-18 12:06 millert
! 201:
! 202: * ChangeLog: sync
! 203:
1.5 millert 204: 2009-04-18 10:27 millert
205:
206: * WHATSNEW: Forgot umask_override
207:
208: 2009-04-18 09:25 millert
209:
210: * ChangeLog, TODO: sync
211:
212: 2009-04-16 08:22 millert
213:
214: * visudo.c: Rewind stream if we fdopen sudoers since it may not be
215: at the beginning. Set the keepopen flag on already-open files
216: too so the lexer doesn't close them out from under us.
217:
218: 2009-04-16 08:18 millert
219:
220: * visudo.c: Print the proper file name when there is a parse error
221: in an include file.
222:
223: 2009-04-11 07:45 millert
224:
225: * WHATSNEW: Sync
226:
1.4 millert 227: 2009-04-10 16:59 millert
228:
229: * configure, configure.in: Fix a warning when --without-ldap is
230: specified.
231:
232: 2009-04-05 12:25 millert
233:
234: * alias.c, parse.h, visudo.c: Store aliases that we remove during
235: check_aliases in a freelist and free them at the end so we don't
236: leak memory.
237:
238: 2009-03-28 09:30 millert
239:
240: * visudo.c: Check aliases in -c mode too.
241:
242: 2009-03-28 09:09 millert
243:
244: * alias.c, parse.h, visudo.c: Make alias_remove return the alias
245: struct instead of freeing it directly. Fixes a use after free in
246: alias_remove_recursive, the only consumer.
247:
248: 2009-03-28 09:07 millert
249:
250: * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
251: -> alias_find for consistency.
252:
253: 2009-03-27 19:29 millert
254:
255: * visudo.c: When checking for unused aliases, recurse if the alias
256: points to another alias.
257:
258: 2009-03-16 12:11 millert
259:
260: * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
261: support will be done later after some refactoring.
262:
263: 2009-03-14 12:02 millert
264:
265: * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
266:
267: 2009-03-13 21:04 millert
268:
269: * configure, configure.in: Only check for
270: ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
271: compilation with ldapux.
272:
273: 2009-03-11 20:03 millert
274:
275: * fileops.c: fix char subscript
276:
277: 2009-03-11 19:19 millert
278:
279: * Makefile.in: remove errant carriage returns
280:
281: 2009-03-11 19:01 millert
282:
283: * audit.c, env.c: fix K&R compilation
284:
285: 2009-03-11 12:12 millert
286:
287: * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
288: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
289: regen
290:
291: 2009-03-10 17:34 millert
292:
293: * config.h.in: Add missing HAVE_BSM_AUDIT
294:
295: 2009-03-10 17:21 millert
296:
297: * WHATSNEW: Add 1.7.1 features
298:
299: 2009-03-10 17:10 millert
300:
301: * INSTALL: Mention --with-netsvc
302:
303: 2009-03-10 17:08 millert
304:
305: * sudoers.ldap.pod: Document netsvc.conf support
306:
307: 2009-03-10 16:44 millert
308:
309: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
310: sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
311:
312: 2009-03-08 16:57 millert
313:
314: * configure, config.h.in, configure.in, env.c: Add
315: --enable-env-debug flag to enable environment sanity checks.
316:
317: 2009-03-08 11:51 millert
318:
319: * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
320:
321: 2009-03-07 17:10 millert
322:
323: * env.c: Only sync environ for putenv, setenv, and unsetenv. We
324: need to make sure that sudo_putenv and sudo_setenv only modify
325: env.envp, not environ.
326:
327: 2009-03-02 14:19 millert
328:
329: * env.c: Really fix UNSETENV_VOID
330:
331: 2009-03-02 14:18 millert
332:
333: * env.c: Fix unsetenv when UNSETENV_VOID
334:
335: 2009-03-02 08:00 millert
336:
337: * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
338:
339: 2009-03-02 07:36 millert
340:
341: * ldap.c: tivoli-based ldap does not have ldapssl_err2string
342:
343: 2009-03-02 07:30 millert
344:
345: * configure: regen
346:
347: 2009-03-01 16:20 millert
348:
349: * config.h.in, configure, configure.in, ldap.c: Add support for
350: Tivoli-based LDAP start TLS as seen in AIX. Untested.
351:
352: 2009-03-01 08:52 millert
353:
354: * env.c: Add sanity checks for setenv/unsetenv
355:
356: 2009-02-28 20:17 millert
357:
358: * Makefile.in: Include bsm_audit.h in the tarball
359:
360: 2009-02-28 20:00 millert
361:
362: * Makefile.in, version.h: bump version for sudo 1.7.1
363:
364: 2009-02-28 19:58 millert
365:
366: * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
367: sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
368: calls to setenv/unsetenv and provide our own
369: setenv/unsetenv/putenv that operates on own env pointer. Make
370: sync_env() inline in setenv/unsetenv/putenv functions.
371:
372: 2009-02-25 07:33 millert
373:
374: * sudo.c: Make "sudoedit -h" work as expected
375:
376: 2009-02-25 07:21 millert
377:
378: * auth/pam.c: Make sure def_prompt is always defined. This is a
379: workaround for pam configs that prompt for a password in the
380: session but don't have an auth line. A better fix is to expand
381: the sudo prompt earlier and set def_prompt to that when
382: initializing.
383:
384: 2009-02-25 06:17 millert
385:
386: * sudo.pod: Mention that the helper for -A may be graphical.
387:
388: 2009-02-25 06:16 millert
389:
390: * TROUBLESHOOTING: Document what happens if there is no tty.
391:
392: 2009-02-25 06:05 millert
393:
394: * sudo.c: cosmetic changes
395:
396: 2009-02-25 05:47 millert
397:
398: * term.c: Fix term_restore
399:
400: 2009-02-24 20:23 millert
401:
402: * sudo.c: Fix "sudo -k" with no other args
403:
404: 2009-02-24 08:04 millert
405:
406: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
407: be specified in conjunction with a command or another option that
408: may require authentication.
409:
410: 2009-02-23 09:18 millert
411:
412: * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
413: from Diego E. 'Flameeyes'
414:
415: 2009-02-23 09:15 millert
416:
417: * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
418:
419: 2009-02-21 17:03 millert
420:
421: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
422: Implement umask_override
423:
424: 2009-02-21 16:51 millert
425:
426: * toke.c: regen
427:
428: 2009-02-21 16:49 millert
429:
430: * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
431: include filenames.
432:
433: 2009-02-21 08:43 millert
434:
435: * audit.c: Need to include compat.h
436:
437: 2009-02-21 08:37 millert
438:
439: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
440: sudo.c: Make audit_success and audit_failure generic functions in
441: preparation for integrating linux audit support.
442:
443: 2009-02-21 08:06 millert
444:
445: * term.c: remove duplicate include
446:
447: 2009-02-20 16:13 millert
448:
449: * bsm_audit.c: Add missing include
450:
451: 2009-02-20 15:55 millert
452:
453: * sudo.c: May need to update the runas user after parsing
454: command-based defaults.
455:
456: 2009-02-18 10:53 millert
457:
458: * glob.c: Add missing pair of braces introduced with character
459: class support.
460:
461: 2009-02-15 15:53 millert
462:
463: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
464: Rename pwstars to pwfeedback
465:
466: 2009-02-10 20:25 millert
467:
468: * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
469:
470: 2009-02-10 20:18 millert
471:
472: * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
473: sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
474: S.J. Peron
475:
476: 2009-02-10 19:58 millert
477:
478: * term.c: This is new code, no DARPA notice.
479:
480: 2009-02-10 14:04 millert
481:
482: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
483: simple_glob -> fast_glob
484:
485: 2009-02-10 09:39 millert
486:
487: * match.c: g/c unused var
488:
489: 2009-02-10 08:09 millert
490:
491: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
492: simple_glob option to use fnmatch() instead of glob(). This is
493: useful when you need to specify patterns that reference network
494: file systems.
495:
496: 2009-02-10 07:58 millert
497:
498: * tgetpass.c: add term_* proto
499:
500: 2009-02-10 07:51 millert
501:
502: * sudoers.pod: mention glob()
503:
504: 2009-02-09 07:59 millert
505:
506: * tgetpass.c: Delete any pwstars we wrote after the user hits
507: return. That way there is no record on screen as to the user's
508: password length.
509:
510: 2009-02-08 10:27 millert
511:
512: * term.c: Move terminal setting bits from tgetpass.c to term.c
513:
514: 2009-02-07 19:50 millert
515:
516: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
517: tgetpass.c: Add pwstars sudoers option that causes sudo to print
518: a star every time the user presses a key.
519:
520: 2009-02-03 10:10 millert
521:
522: * Makefile.in: Fix up F<> brokenness for visudo.man.in and
523: sudoers.ldap.man.in.
524:
525: 2009-01-27 11:54 millert
526:
527: * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
528: not -1, to indicate no limit. From Mark Janssen.
529:
530: 2009-01-17 17:36 millert
531:
532: * toke.c, toke.l: Comments that begin with #- should not be parsed
533: as uids.
534:
535: 2009-01-08 19:13 millert
536:
537: * sudo.c: Do not try to set the close on exec flag if we didn't
538: actually open sudoers.
539:
540: 2008-12-19 12:40 millert
541:
542: * ChangeLog: regen
543:
1.3 millert 544: 2008-12-14 17:40 millert
545:
546: * TODO: sync
547:
548: 2008-12-09 18:48 millert
549:
550: * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
551: enters ^C at the password prompt.
552:
553: 2008-12-09 16:13 millert
554:
555: * configure.in, configure: Don't try to build sudo_noexec.so on
556: HP-UX with the bundled compiler as it cannot generate shared
557: objects.
558:
559: 2008-12-09 15:55 millert
560:
561: * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
562: fixes
563:
564: 2008-12-09 08:49 millert
565:
566: * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
567: it clear that we are not short-circuiting on last match. When
568: pwcheck is 'all', initialize nopass to TRUE and override it with
569: the first non-TRUE entry.
570:
571: 2008-12-08 10:02 millert
572:
573: * parse.c: Do not short circuit pseudo commands when we get a match
574: since, depending on the settings, we may need to examine all
575: commands for tags.
576:
577: 2008-12-03 15:58 millert
578:
579: * sudoers.cat, sudoers.man.in: regen
580:
581: 2008-12-03 15:57 millert
582:
583: * sudoers.pod: hostnames may also contain wildcards
584:
585: 2008-12-03 15:40 millert
586:
587: * Makefile.in: remove stamp-* files and linux core files in clean
588: target
589:
590: 2008-12-02 12:30 millert
591:
592: * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
593: HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
594:
595: 2008-11-26 15:10 millert
596:
597: * configure, configure.in: correctly enable SIA on Digital UNIX
598:
599: 2008-11-25 20:06 millert
600:
601: * TODO: checkpoint
602:
603: 2008-11-25 20:05 millert
604:
605: * ChangeLog: sync
606:
607: 2008-11-25 12:01 millert
608:
609: * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
610: ttys we may still have /dev/tty available to us.
611:
612: 2008-11-24 10:09 millert
613:
614: * sudoers.cat, sudoers.man.in: regen
615:
616: 2008-11-24 10:08 millert
617:
618: * sudoers.pod: fix typos; Markus Lude
619:
620: 2008-11-24 07:08 millert
621:
622: * ChangeLog: sync
623:
1.2 millert 624: 2008-11-23 19:42 millert
625:
626: * toke.c: regen
627:
628: 2008-11-23 19:41 millert
629:
630: * toke.l: Fix matching of a line that only consists of a comment
631: char
632:
633: 2008-11-22 13:17 millert
634:
635: * auth/pam.c: MacOS pam will retry conversation function if it
636: fails so just treat ^C as an empty password.
637:
638: 2008-11-22 10:12 millert
639:
640: * visudo.c: When checking for alias use, also check defaults
641: bindings.
642:
643: 2008-11-22 10:01 millert
644:
645: * redblack.c: unused var
646:
647: 2008-11-22 09:42 millert
648:
649: * redblack.c: Replace my rbdelete with Emin's version (which
650: actually works ;-)
651:
652: 2008-11-19 12:01 millert
653:
654: * testsudoers.c: malloc debugging
655:
656: 2008-11-19 07:37 millert
657:
658: * visudo.c: malloc options in devel mode for visudo too
659:
660: 2008-11-18 10:57 millert
661:
662: * sudo.c: fix compilation on non-C99; from Theo
663:
664: 2008-11-18 10:50 millert
665:
666: * visudo.c: fix check_aliases
667:
668: 2008-11-18 08:29 millert
669:
670: * alias.c: when destroying an alias, free the correct data pointer
671:
672: 2008-11-18 07:54 millert
673:
674: * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
675:
676: 2008-11-15 13:34 millert
677:
678: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
679: visudo.man.in: regen
680:
681: 2008-11-15 13:34 millert
682:
683: * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
684: 'option' for command line options (not flag)
685:
686: 2008-11-14 06:18 millert
687:
688: * INSTALL: Add note on configuring HP-UX pam
689:
690: 2008-11-11 13:28 millert
691:
692: * check.c, sudo.c: Move tty checks into check_user() so we only do
693: them if we actually need a password.
694:
695: 2008-11-11 12:34 millert
696:
697: * sudo.c: Don't error out if no tty or askpass unless we actually
698: need to authenticate.
699:
700: 2008-11-10 15:20 millert
701:
702: * ChangeLog: regen
703:
1.1 millert 704: 2008-11-10 08:07 millert
705:
706: * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
707: Stoeckmann
708:
709: 2008-11-09 15:18 millert
710:
711: * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
712:
713: 2008-11-09 09:15 millert
714:
715: * gram.c, toke.c: regen
716:
717: 2008-11-09 09:13 millert
718:
719: * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
720: env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
721: interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
722: logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
723: redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
724: sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
725: version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
726: visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
727: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
728: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
729: sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
730: years.
731:
732: 2008-11-09 08:48 millert
733:
734: * fnmatch.c, glob.c, emul/charclass.h: add my copyright
735:
736: 2008-11-08 10:40 millert
737:
738: * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
739: far past the end, resulting in a NUL being written immediately
740: after the buffer end.
741:
742: 2008-11-08 10:31 millert
743:
744: * UPGRADE, WHATSNEW: add sections on tgetpass changes
745:
746: 2008-11-08 10:30 millert
747:
748: * tgetpass.c: Treat EOF w/o newline as an error.
749:
750: 2008-11-07 17:42 millert
751:
752: * parse.c: Fix "sudo -v" when NOPASSWD is set.
753:
754: 2008-11-07 12:45 millert
755:
756: * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
757: longer treat an empty password at the prompt as special. To quit
758: out of sudo you now need to hit ^C at the password prompt.
759:
760: 2008-11-06 21:07 millert
761:
762: * sudoers.cat, sudoers.man.in: regen
763:
764: 2008-11-06 21:06 millert
765:
766: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
767: will now refuse to run if no tty is present unless the new
768: visiblepw sudoers flag is set.
769:
770: 2008-11-05 19:42 millert
771:
772: * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
773: RLIM_SAVED_MAX not defined
774:
775: 2008-11-05 19:40 millert
776:
777: * aix.c: fix fallback value for RLIM_SAVED_MAX
778:
779: 2008-11-05 19:14 millert
780:
781: * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
782: aixauth_cleanup.
783:
784: 2008-11-05 19:08 millert
785:
786: * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
787: authenticate() as it may not be correct for the user we are
788: running the command as.
789:
790: 2008-11-05 19:05 millert
791:
792: * isblank.c: Add isblank() function for systems without it. Needed
793: for POSIX character class matching in fnmatch.c and glob.c.
794:
795: 2008-11-05 11:02 millert
796:
797: * TROUBLESHOOTING: expound on sudo and cd
798:
799: 2008-11-04 15:52 millert
800:
801: * ChangeLog: regen
802:
803: 2008-11-04 15:46 millert
804:
805: * sudoers.cat, sudoers.man.in: regen
806:
807: 2008-11-04 15:45 millert
808:
809: * sudoers.pod: mention defauts parse order
810:
811: 2008-11-03 13:19 millert
812:
813: * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
814: function for systems without it. Needed for POSIX character
815: class matching in fnmatch.c and glob.c.
816:
817: 2008-11-03 12:54 millert
818:
819: * Makefile.in: add emul/charclass.h to HDRS
820:
821: 2008-11-02 14:08 millert
822:
823: * TODO: checkpoint
824:
825: 2008-11-02 14:06 millert
826:
827: * parse.c, defaults.c, testsudoers.c, visudo.c: Move
828: update_defaults into defaults.c and call it properly from visudo
829: and testsudoers.
830:
831: 2008-11-02 09:51 millert
832:
833: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
834: tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
835: consistency
836:
837: 2008-11-02 09:45 millert
838:
839: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
840: tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
841: has non-standard entries.
842:
843: 2008-11-02 09:35 millert
844:
845: * match.c: quiet gcc
846:
847: 2008-11-02 09:28 millert
848:
849: * match.c: Short circuit glob() checks if basename(pattern) !=
850: basename(command). Refactor code that checks for a command in a
851: directory and use it in the glob case if the resolved pattern
852: ends in a '/'.
853:
854: 2008-11-01 09:20 millert
855:
856: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
857: setting runas defaults until after runaspw/gr is setup.
858:
859: 2008-10-29 13:26 millert
860:
861: * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
862: allocating host/domain name since some systems do not include
863: space for the NUL in the size. Also manually NUL-terminate
864: buffer from gethostname() since POSIX is wishy-washy on this.
865:
866: 2008-10-26 17:13 millert
867:
868: * sudo.c, sudoers.pod: When setting the umask, use the union of the
869: user's umask and the default value set in sudoers so that we
870: never lower the user's umask when running a command.
871:
872: 2008-10-26 16:43 millert
873:
874: * sudo.c: Don't try to read from a zero-length sudoers file.
875: Remove the bogus Solaris work-around for EAGAIN. Since we now
876: use fgetc() it should not be a problem.
877:
878: 2008-10-25 09:22 millert
879:
880: * parse.c: In update_defaults() check the return value of
881: user*_matches against ALLOW so we don't inadvertantly match on
882: UNSPEC.
883:
884: 2008-10-24 09:52 millert
885:
886: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
887: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
888: regen man pages; no more hyphenation
889:
890: 2008-10-24 09:49 millert
891:
892: * sudo.c: Don't error out on a zero-length sudoers file. With the
893: advent of #include the user could create a situation where sudo
894: is unusable.
895:
896: 2008-10-23 12:06 millert
897:
898: * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
899: has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
900: Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
901: Add configure tests to handle all the cases.
902:
903: 2008-10-08 17:28 millert
904:
905: * sudo.pod: resort ENVIRONMENT
906:
907: 2008-10-08 17:09 millert
908:
909: * sudoers.pod: document sudoers_locale
910:
911: 2008-10-08 16:56 millert
912:
913: * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
914: uses in preference to VISUAL or EDITOR
915:
916: 2008-10-08 14:27 millert
917:
918: * toke.c, toke.l: In fill_cmnd(), collapse any escaped
919: sudo-specific characters. Allows character classes to be used in
920: pathnames.
921:
922: 2008-10-03 16:02 millert
923:
924: * lbuf.c: fix typo in non-C89 function declaration
925:
926: 2008-10-03 15:56 millert
927:
928: * sudoers.pod: Mention POSIX characters classes now that out
929: fnmatch() and glob() support them.
930:
931: 2008-10-03 15:55 millert
932:
933: * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
934: UTF8) with [A-Za-z] which is locale agnostic.
935:
936: 2008-10-03 10:02 millert
937:
938: * parse.h: use __signed char if we are going to assign a negative
939: value since on Power, char is unsigned by default
940:
941: 2008-10-03 09:59 millert
942:
943: * configure, configure.in, config.h.in: Add tests for __signed char
944: and signed char.
945:
946: 2008-10-03 09:19 millert
947:
948: * aix.c: Fix AIX limit setting. getuserattr() returns values in
949: disk blocks rather than bytes. The default hard stack size in
950: newer AIX is RLIM_SAVED_MAX. From Dale King.
951:
952: 2008-09-26 17:13 millert
953:
954: * fnmatch.c, glob.c, emul/charclass.h: Add character class support
955: to included glob(3) and fnmatch(3).
956:
957: 2008-09-16 08:28 millert
958:
959: * emul/fnmatch.h: Remove UCB advertising clause and some
960: compatibility defines.
961:
962: 2008-09-14 16:07 millert
963:
964: * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
965: re-invoking itself or sudo. This allows one to set EDITOR to
966: sudoedit without getting into an infinite loop of sudoedit
967: running itself until the path gets too big.
968:
969: 2008-09-13 20:45 millert
970:
971: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
972: sudoers_locale Defaults option to override the default sudoers
973: locale of "C".
974:
975: 2008-09-13 14:09 millert
976:
977: * sudo.c: Set locale to system default except for during sudoers
978: parse.
979:
980: 2008-09-12 09:34 millert
981:
982: * match.c: Redo change in 1.34 to use pointer arithmetic.
983:
984: 2008-09-11 07:06 millert
985:
986: * match.c: Fix a dereference (read) of a freed pointer. Reported
987: by Patrick Williams.
988:
989: 2008-08-23 19:09 millert
990:
991: * sudo.c: Set locale to "C" to avoid interpretation issues with
992: character ranges in sudoers. May want to make the locale a
993: sudoers option in the future.
994:
995: 2008-08-20 07:45 millert
996:
997: * config.h.in: we no longer use setproctitle
998:
999: 2008-08-20 07:41 millert
1000:
1001: * sudo.h: remove #if 1
1002:
1003: 2008-08-20 07:40 millert
1004:
1005: * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1006: package.
1007:
1008: 2008-07-12 08:53 millert
1009:
1010: * gram.c: regen with yacc skeleton bug fixed
1011:
1012: 2008-07-12 08:48 millert
1013:
1014: * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1015:
1016: 2008-07-02 06:27 millert
1017:
1018: * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1019: passwd entry used for running commands as a uid not listed in the
1020: passwd database. Fixes an issue with some PAM modules.
1021:
1022: 2008-07-01 07:57 millert
1023:
1024: * sudo.c: Error out in -i mode if the user has no shell. This can
1025: happen when running commands as a uid with no password entry.
1026:
1027: 2008-06-26 07:49 millert
1028:
1029: * toke.c, toke.l: Better fix for line continuation inside double
1030: quotes. Now accepts whitespace between the backslash and the
1031: newline like the main lexer.
1032:
1033: 2008-06-25 14:31 millert
1034:
1035: * toke.c, toke.l: Fix line continuation in strings. It was only
1036: being honored if preceded by whitespace.
1037:
1038: 2008-06-22 16:19 millert
1039:
1040: * config.h.in, configure, configure.in, logging.c: Replace the
1041: double fork with a fork + daemonize.
1042:
1043: 2008-06-21 14:59 millert
1044:
1045: * env.c, sudo.c: The -i flag should imply env_reset. This got
1046: broken in sudo 1.6.9.
1047:
1048: 2008-06-20 20:34 millert
1049:
1050: * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1051: is waited for. Instead of having a SIGCHLD handler, use the
1052: double fork trick to orphan the child that opens the pipe to
1053: sendmail. Fixes a problem running su on some Linux distros.
1054:
1055: 2008-06-20 17:16 millert
1056:
1057: * configure, configure.in: Fix configure test for dirfd() on Linux
1058: where DIR is opaque.
1059:
1060: 2008-06-17 17:42 millert
1061:
1062: * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1063: QNX still has this problem we'll need to revisit this again.
1064:
1065: 2008-06-10 21:13 millert
1066:
1067: * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1068: the mailer. If we only block the signal it may be delivered
1069: later when we unblock. Also, there is no need to block SIGCHLD
1070: since we no longer do the double fork. The normal SIGCHLD
1071: handler is sufficient.
1072:
1073: 2008-06-08 17:37 millert
1074:
1075: * configure, configure.in: Add description for NO_PAM_SESSION, from
1076: a redhat patch.
1077:
1078: 2008-06-06 09:36 millert
1079:
1080: * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1081:
1082: 2008-05-18 13:54 millert
1083:
1084: * configure, configure.in: Redo the test for dgettext() in a way
1085: that hopefully will work around the libintl_dgettext() undefined
1086: problem.
1087:
1088: 2008-05-11 09:21 millert
1089:
1090: * schema.ActiveDirectory: change filename in comment
1091:
1092: 2008-05-10 09:18 millert
1093:
1094: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1095: sudoers.ldap.pod: Reference schema.ActiveDirectory
1096:
1097: 2008-05-09 14:49 millert
1098:
1099: * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1100:
1101: 2008-05-09 14:48 millert
1102:
1103: * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1104:
1105: 2008-05-09 14:01 millert
1106:
1107: * schema.ActiveDirectory: Active Directory schema by Chantal
1108: Paradis and Eric Paquet
1109:
1110: 2008-05-08 17:54 millert
1111:
1112: * parse.c: remove an XXX that was fixed
1113:
1114: 2008-05-08 12:53 millert
1115:
1116: * ChangeLog: sync
1117:
1118: 2008-05-08 12:49 millert
1119:
1120: * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1121: mode. This fixes a problem where the tag value printed was
1122: influenced by defaults set in the first pass through the parser.
1123:
1124: 2008-05-03 21:29 millert
1125:
1126: * Makefile.in, sudo.psf: No point in packaging the TODO file
1127:
1128: 2008-05-03 21:24 millert
1129:
1130: * ChangeLog: sync
1131:
1132: 2008-05-02 20:53 millert
1133:
1134: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1135: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1136: Defaults option that is similar to /etc/environment on some
1137: systems.
1138:
1139: 2008-05-02 16:38 millert
1140:
1141: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1142: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1143: sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1144: version to 1.7.0
1145:
1146: 2008-05-02 16:37 millert
1147:
1148: * UPGRADE: initial valgrind pass done
1149:
1150: 2008-04-23 08:30 millert
1151:
1152: * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1153: the secret.
1154:
1155: 2008-04-11 10:03 millert
1156:
1157: * ldap.c: define LDAPS_PORT if the system headers do not
1158:
1159: 2008-04-10 14:54 millert
1160:
1161: * gram.c, gram.y: Fix another memory leak in init_parser().
1162:
1163: 2008-04-10 12:51 millert
1164:
1165: * configure, configure.in: There was a missing space before the
1166: ldap libs in SUDO_LIBS for some configurations.
1167:
1168: 2008-04-10 11:28 millert
1169:
1170: * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1171: leaks pointed out by valgrind.
1172:
1173: 2008-04-07 14:39 millert
1174:
1175: * sudo.c: fix "sudo -s" broken by mode/flags breakout
1176:
1177: 2008-04-07 14:26 millert
1178:
1179: * configure, configure.in: remove duplicate check for dgettext
1180:
1181: 2008-04-05 15:54 millert
1182:
1183: * aix.c: Fall back to default stanza if no user-specific limit is
1184: found.
1185:
1186: 2008-04-02 15:56 millert
1187:
1188: * snprintf.c: include stdint.h if present
1189:
1190: 2008-04-02 15:28 millert
1191:
1192: * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1193:
1194: 2008-04-01 19:18 millert
1195:
1196: * sudoers.ldap.pod: fix cut and pasto
1197:
1198: 2008-03-31 11:24 millert
1199:
1200: * pwutil.c: Add #ifdef PURITY
1201:
1202: 2008-03-30 17:36 millert
1203:
1204: * auth/bsdauth.c: remove useless cast
1205:
1206: 2008-03-27 19:07 millert
1207:
1208: * ChangeLog: sync
1209:
1210: 2008-03-27 19:04 millert
1211:
1212: * TODO: sync
1213:
1214: 2008-03-27 19:01 millert
1215:
1216: * sudo.h: Split MODE_* defines into primary and flags.
1217:
1218: 2008-03-26 13:11 millert
1219:
1220: * aix.c: It turns out the logic for getting AIX limits is more
1221: convoluted than I realized and differs depending on whether the
1222: soft and/or hard limits are defined.
1223:
1224: 2008-03-23 10:18 millert
1225:
1226: * Makefile.in, configure, configure.in: Back out AIX-specific
1227: change to set the sudo_noexec path to the .a file, we do really
1228: want to use the .so file. Since libtool doesn't do that
1229: correctly, just install the .so file ourselves in the Makefile.
1230:
1231: 2008-03-23 10:12 millert
1232:
1233: * install-sh: If the file given to install is a path, only use the
1234: basename of the file when building the destination path.
1235:
1236: 2008-03-18 16:08 millert
1237:
1238: * sudo.c: parse_args() cleanup: Sort command line options in the
1239: getopt() switch The -U option requires a parameter Normalize a
1240: few ISSET calls Split mode into mode and flags and retire the
1241: now-obsolete excl variable
1242:
1243: 2008-03-18 16:04 millert
1244:
1245: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1246: sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1247:
1248: 2008-03-18 15:59 millert
1249:
1250: * sudo.c: Move version printing, etc. into a separate function.
1251:
1252: 2008-03-18 15:57 millert
1253:
1254: * sudo.c: Don't try to cleanup nsswitch if it has not been
1255: initialized.
1256:
1257: 2008-03-17 11:09 millert
1258:
1259: * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1260: a problem executing the mailer.
1261:
1262: 2008-03-14 08:11 millert
1263:
1264: * configure.in, configure: AIX shared libs end in .a, not .so.
1265:
1266: 2008-03-13 07:34 millert
1267:
1268: * env.c: Preserve HOME by default too. Matches documentation and
1269: previous behavior.
1270:
1271: 2008-03-12 19:42 millert
1272:
1273: * sudo.c: Use getopt() to parse the command line. We need to be
1274: able to intersperse env variables and options yet still honor
1275: "--"" which complicates things slightly.
1276:
1277: 2008-03-06 14:46 millert
1278:
1279: * ChangeLog: sync
1280:
1281: 2008-03-06 14:43 millert
1282:
1283: * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1284:
1285: 2008-03-06 14:32 millert
1286:
1287: * config.guess, config.sub: update from libtool-1.5.26 distribution
1288:
1289: 2008-03-06 13:18 millert
1290:
1291: * aix.c, sudo.h: attempt to fix compilation errors on AIX
1292:
1293: 2008-03-06 13:08 millert
1294:
1295: * Makefile.in: fix typo in last commit
1296:
1297: 2008-03-06 13:07 millert
1298:
1299: * Makefile.in: Add WHATSNEW file to the distribution
1300:
1301: 2008-03-06 12:43 millert
1302:
1303: * visudo.c: use warningx instead of fprintf(stderr, ...)
1304:
1305: 2008-03-06 12:31 millert
1306:
1307: * list.c: add DEBUG to list2tq
1308:
1309: 2008-03-06 12:28 millert
1310:
1311: * ChangeLog, TODO: sync
1312:
1313: 2008-03-06 12:21 millert
1314:
1315: * WHATSNEW: mention mailfrom
1316:
1317: 2008-03-06 12:19 millert
1318:
1319: * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1320: sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1321: using a combination of getuserattr() and setrlimit(). Currently
1322: untested.
1323:
1324: 2008-03-05 16:52 millert
1325:
1326: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1327: sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1328: sets the value of the From: field in the warning/error mail. If
1329: unset the login name of the invoking user is used.
1330:
1331: 2008-03-05 16:18 millert
1332:
1333: * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1334: that is freeable
1335:
1336: 2008-03-05 15:19 millert
1337:
1338: * gram.c, gram.y: When adding a default, only call list2tq() once
1339: to do the list to tq conversion. It is not legal to call list2tq
1340: multiple times on the same list since list2tq consumes and
1341: modifies the list argument.
1342:
1343: 2008-03-05 09:38 millert
1344:
1345: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1346: out XXXs for now
1347:
1348: 2008-03-05 09:36 millert
1349:
1350: * WHATSNEW: mention askpass
1351:
1352: 2008-03-04 17:20 millert
1353:
1354: * sudo.c: Error out if both -A and -S are specified Error out if -A
1355: is specified but no askpass is configured
1356:
1357: 2008-03-04 17:16 millert
1358:
1359: * configure, configure.in: we are not going to ship a sudo-specific
1360: askpass
1361:
1362: 2008-03-03 14:30 millert
1363:
1364: * sudo.h: fix definition of TGP_ASKPASS
1365:
1366: 2008-03-03 13:54 millert
1367:
1368: * def_data.c, def_data.in: make askpass boolean-capable
1369:
1370: 2008-03-03 13:53 millert
1371:
1372: * INSTALL: document --with-askpass
1373:
1374: 2008-03-02 19:27 millert
1375:
1376: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1377: sudoers.ldap.cat, visudo.cat: regen
1378:
1379: 2008-03-02 17:31 millert
1380:
1381: * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1382:
1383: 2008-03-02 09:31 millert
1384:
1385: * check.c, configure, configure.in, def_data.c, def_data.h,
1386: def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1387: sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1388: running a helper program to read the password when no tty is
1389: present (or when specified with the -A flag). TODO: docs.
1390:
1391: 2008-03-02 08:38 millert
1392:
1393: * def_data.c, def_data.in: add missing printf format to SELinux
1394: role and type strings
1395:
1396: 2008-02-27 09:26 millert
1397:
1398: * INSTALL, configure, configure.in: Disable use of
1399: gss_krb5_ccache_name() by default and add
1400: --enable-gss-krb5-ccache-name configure option to enable it. It
1401: seems that gss_krb5_ccache_name() doesn't work properly with some
1402: combinations of Heimdal and OpenLDAP.
1403:
1404: 2008-02-22 15:33 millert
1405:
1406: * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1407: add a call to setkeycreatecon() (though this is probably
1408: insufficient). From Dan Walsh.
1409:
1410: 2008-02-22 15:19 millert
1411:
1412: * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1413: conversation function may be called for non-password reading
1414: purposes so we must be careful not to use def_prompt in cases
1415: where it may not be set.
1416:
1417: 2008-02-20 12:00 millert
1418:
1419: * selinux.c: Don't free the new tty context, we need to keep it
1420: around when we restore the tty context after the command
1421: completes
1422:
1423: 2008-02-19 16:04 millert
1424:
1425: * selinux.c: s/newrole/sudo/
1426:
1427: 2008-02-19 13:21 millert
1428:
1429: * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1430: if we have login.conf support
1431:
1432: 2008-02-18 11:05 millert
1433:
1434: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1435: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1436: regen
1437:
1438: 2008-02-18 10:53 millert
1439:
1440: * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1441: sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1442: lines partaining to login.conf, BSD auth and SELinux and only
1443: enable them if pertinent.
1444:
1445: 2008-02-18 10:42 millert
1446:
1447: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1448: Remove the =cut on the first line (above the copyright notice) to
1449: quiet pod2man. Also remove the hackery in the FILES section and
1450: just deal with the fact that there will a newline between each
1451: pathname.
1452:
1453: 2008-02-17 08:19 millert
1454:
1455: * Makefile.in: run sudo.man.pl when generating sudo.man.in
1456:
1457: 2008-02-17 08:11 millert
1458:
1459: * configure, configure.in, sudo.man.pl: comment out SELinux manual
1460: bits unless --with-selinux was specified
1461:
1462: 2008-02-17 08:04 millert
1463:
1464: * sudoers.pod: document role and type defaults for SELinux
1465:
1466: 2008-02-16 20:26 millert
1467:
1468: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1469: Document "sudo -ll" and make "sudo -l -l" be equivalent.
1470:
1471: 2008-02-15 15:23 millert
1472:
1473: * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1474: Fixes compilation problems on Debian GNU/kFreeBSD.
1475:
1476: 2008-02-13 17:17 millert
1477:
1478: * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1479: rewrite of verify_krb_v5_tgt()
1480:
1481: 2008-02-13 07:28 millert
1482:
1483: * logging.c, logging.h, sudo.c: Remove dependence on
1484: VALIDATE_NOT_OK in logging functions. Split log_auth() into
1485: log_allowed() and log_denial() Replace mail_auth() with
1486: should_mail() and a call to send_mail()
1487:
1488: 2008-02-10 18:06 millert
1489:
1490: * ldap.c: Add debugging so we can tell if the krb5 ccache is
1491: accessible
1492:
1493: 2008-02-10 17:34 millert
1494:
1495: * INSTALL: mention --with-selinux
1496:
1497: 2008-02-09 09:48 millert
1498:
1499: * configure: regen
1500:
1501: 2008-02-09 09:43 millert
1502:
1503: * selinux.c: add Sudo tag
1504:
1505: 2008-02-09 09:30 millert
1506:
1507: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1508: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1509: pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1510: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1511: sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1512: toke.l: Add support for SELinux RBAC. Sudoers entries may
1513: specify a role and type. There are also role and type defaults
1514: that may be used. To make sure a transition occurs, when using
1515: RBAC commands are executed via the new sesh binary. Based on
1516: initial changes from Dan Walsh.
1517:
1518: 2008-02-08 08:18 millert
1519:
1520: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1521: list (sudo -ll) support for printing verbose LDAP and sudoers
1522: file entries. Still need to update manual.
1523:
1524: 2008-02-03 10:43 millert
1525:
1526: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1527: output for file and ldap based sudoers and use lbufs for both.
1528: The ldap output does not currently include options that cannot be
1529: represented as tags. This will be remedied in a long list output
1530: mode to come.
1531:
1532: 2008-01-27 16:37 millert
1533:
1534: * set_perms.c: Use a specific error message for errno == EAGAIN
1535: when setuid() et al fails. On Linux systems setuid() will fail
1536: with errno set to EAGAIN if changing to the new uid would result
1537: in a resource limit violation.
1538:
1539: 2008-01-27 16:34 millert
1540:
1541: * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1542: family of syscalls causes the nroc resource limit to be checked.
1543: The limits will be reset by pam_limits.so when PAM is used. In
1544: the non-PAM case the nproc limit will remain unlimited but there
1545: doesn't seem to be a way around that other than having sudo parse
1546: /etc/security/limits.conf directly.
1547:
1548: 2008-01-27 16:31 millert
1549:
1550: * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1551: AIX
1552:
1553: 2008-01-23 06:33 millert
1554:
1555: * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1556: AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1557: from going into config.h. Avoid single quotes in variable
1558: expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1559: of bash they will end up literally in the resulting define.
1560:
1561: 2008-01-21 13:22 millert
1562:
1563: * README.LDAP: mention --with-nsswitch=no
1564:
1565: 2008-01-21 11:43 millert
1566:
1567: * configure, configure.in: ldap_ssl.h depends on ldap.h being
1568: included first
1569:
1570: 2008-01-21 11:07 millert
1571:
1572: * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1573: if we can find it. Needed for the ldapssl_set_strength defines
1574: on HP-UX at least.
1575:
1576: 2008-01-21 10:02 millert
1577:
1578: * TODO, sudoers.ldap.pod: sync
1579:
1580: 2008-01-21 10:01 millert
1581:
1582: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1583: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1584: regen
1585:
1586: 2008-01-21 10:00 millert
1587:
1588: * Makefile.in: Use 78n line length when formatting cat pages.
1589:
1590: 2008-01-21 09:50 millert
1591:
1592: * README.LDAP: Remove redundant info that is now in
1593: sudoers.ldap.pod
1594:
1595: 2008-01-20 16:18 millert
1596:
1597: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1598: Reorganize the first section a bit. Substitute the proper path
1599: for /etc/sudoers.
1600:
1601: 2008-01-20 10:17 millert
1602:
1603: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1604: Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1605: Move schema into EXAMPLES
1606:
1607: 2008-01-20 10:15 millert
1608:
1609: * configure.in, configure: Substitute values for ldap.conf,
1610: ldap.secret and nsswitch.conf into sudoers.ldap.man.
1611:
1612: 2008-01-19 20:35 millert
1613:
1614: * configure, configure.in: substitute for sudoers.ldap.man
1615:
1616: 2008-01-19 20:34 millert
1617:
1618: * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1619: man page.
1620:
1621: 2008-01-19 20:25 millert
1622:
1623: * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1624: some of the missing pieces. Still needs some reorganization and
1625: editing.
1626:
1627: 2008-01-19 15:06 millert
1628:
1629: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1630: sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1631: Currently, much of the information is adapted from README.LDAP.
1632:
1633: 2008-01-18 17:32 millert
1634:
1635: * pwutil.c: When copying gr_mem we must guarantee that the storage
1636: space for gr_mem is properly aligned. The simplest way to do
1637: this is to simply store gr_mem directly after struct group. This
1638: is not a problem for gr_passwd or gr_name as they are simple
1639: strings.
1640:
1641: 2008-01-18 16:47 millert
1642:
1643: * ldap.c: Fix a typo/thinko in one of the calls to
1644: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1645:
1646: 2008-01-17 15:44 millert
1647:
1648: * config.h.in, configure, configure.in, ldap.c: include
1649: <mps/ldap_ssl.h> in ldap.c if available
1650:
1651: 2008-01-16 18:20 millert
1652:
1653: * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1654: skeleton.c
1655:
1656: 2008-01-16 13:03 millert
1657:
1658: * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1659: echo) to guarantee that any pending output is discarded
1660:
1661: 2008-01-15 17:18 millert
1662:
1663: * sudoers: no longer need to specify SETENV when user has sudo ALL
1664:
1665: 2008-01-15 09:40 millert
1666:
1667: * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1668: group option, renaming old -g to -G Add set_runasgr() and
1669: set_runaspw() and use them
1670:
1671: 2008-01-15 09:23 millert
1672:
1673: * sudo.h, sudo.c: Make set_runaspw static void
1674:
1675: 2008-01-15 09:17 millert
1676:
1677: * testsudoers.c, visudo.c: g/c set_runaspw stub
1678:
1679: 2008-01-15 07:28 millert
1680:
1681: * configure, configure.in: Don't add -llber twice.
1682:
1683: 2008-01-14 06:40 millert
1684:
1685: * ldap.c: fix typo
1686:
1687: 2008-01-13 15:39 millert
1688:
1689: * gram.c: regen
1690:
1691: 2008-01-13 14:57 millert
1692:
1693: * configure, configure.in: Fix check that determines whether -llber
1694: is required.
1695:
1696: 2008-01-13 14:22 millert
1697:
1698: * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1699: netscape-based LDAP, use ldapssl_set_strength() to implement the
1700: checkpeer ldap.conf option.
1701:
1702: 2008-01-13 09:49 millert
1703:
1704: * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1705: to use the cred cache, which is what krb5_verify_user() does.
1706: Better cleanup on failure.
1707:
1708: 2008-01-12 12:40 millert
1709:
1710: * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1711: krb5_verify_user() does.
1712:
1713: 2008-01-09 14:58 millert
1714:
1715: * gram.c: The U suffix on constants is an ANSI feature
1716:
1717: 2008-01-09 12:08 millert
1718:
1719: * configure.in, configure: Add check for ber_set_option() in -llber
1720:
1721: 2008-01-06 19:02 millert
1722:
1723: * README.LDAP: default if no nsswitch.conf is files only
1724:
1725: 2008-01-06 17:28 millert
1726:
1727: * README.LDAP: don't tell people to mail aaron about LDAP stuff
1728:
1729: 2008-01-06 12:32 millert
1730:
1731: * README.LDAP: timelimit and bind_timelimit
1732:
1733: 2008-01-06 08:54 millert
1734:
1735: * ChangeLog: sync
1736:
1737: 2008-01-06 07:56 millert
1738:
1739: * ldap.c: Move ldap.secret reading into a separate function.
1740:
1741: 2008-01-05 19:09 millert
1742:
1743: * check.c: user_runas -> runas_pw
1744:
1745: 2008-01-05 18:59 millert
1746:
1747: * TODO: sync
1748:
1749: 2008-01-05 18:59 millert
1750:
1751: * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1752: the password prompt. Based on a patch from Patrick Schoenfeld.
1753:
1754: 2008-01-05 18:25 millert
1755:
1756: * ldap.c: Check strlcpy() return values.
1757:
1758: 2008-01-05 18:12 millert
1759:
1760: * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1761:
1762: 2008-01-05 16:35 millert
1763:
1764: * README.LDAP: Make it clear that host and uri can take multiple
1765: parameters. URI is now supported for more than just openldap
1766: nsswitch.conf does't accept "compat"
1767:
1768: 2008-01-05 16:27 millert
1769:
1770: * sudo.c: comment cleanup and update (c) year
1771:
1772: 2008-01-05 16:25 millert
1773:
1774: * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1775: parse.c to sudo_nss.c. This should make it possible to build an
1776: LDAP-only sudo binary.
1777:
1778: 2008-01-05 13:27 millert
1779:
1780: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1781: multiple sudoers sources by passing in the previous return value
1782: to the next in the chain
1783:
1784: 2008-01-05 13:26 millert
1785:
1786: * gram.y: Free up parser data structures in sudo_file_close().
1787:
1788: 2008-01-05 08:13 millert
1789:
1790: * gram.c, parse.c: Free up parser data structures in
1791: sudo_file_close().
1792:
1793: 2008-01-05 07:59 millert
1794:
1795: * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1796: ldap_create() instead of deprecated ldap_init() Use
1797: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1798:
1799: 2008-01-05 07:56 millert
1800:
1801: * config.h.in, configure, configure.in: Add check for
1802: ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1803:
1804: 2008-01-04 09:56 millert
1805:
1806: * configure.in, configure, config.h.in: add check for ldap_create
1807:
1808: 2008-01-03 16:11 millert
1809:
1810: * config.h.in, configure, configure.in, ldap.c: Add
1811: sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1812: dn using the mechanism appropriate for the LDAP SDK in use. Use
1813: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1814: Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1815: without them.
1816:
1817: 2008-01-03 16:02 millert
1818:
1819: * lbuf.c: include unistd.h
1820:
1821: 2008-01-03 11:05 millert
1822:
1823: * config.h.in, configure.in: fix typo in mtim_getnsec
1824:
1825: 2008-01-02 15:29 millert
1826:
1827: * config.h.in, configure.in, configure: add check for st__tim in
1828: struct stat as used by SCO
1829:
1830: 2008-01-02 11:05 millert
1831:
1832: * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1833:
1834: 2008-01-02 10:09 millert
1835:
1836: * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1837:
1838: 2008-01-01 19:04 millert
1839:
1840: * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1841: ldap_str2dn() and ldap_rdn2str().
1842:
1843: 2008-01-01 18:37 millert
1844:
1845: * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1846: of the deprecated ldap_get_values()/ldap_value_free().
1847:
1848: 2008-01-01 17:07 millert
1849:
1850: * TODO, ChangeLog: sync
1851:
1852: 2008-01-01 17:06 millert
1853:
1854: * gettime.c, sudo.c: Remove some already fixed XXXs
1855:
1856: 2008-01-01 17:03 millert
1857:
1858: * ldap.c: Same return value as non-existent sudoers if LDAP was
1859: unable to connect.
1860:
1861: 2008-01-01 16:52 millert
1862:
1863: * sudo.pod: mention /etc/environment
1864:
1865: 2008-01-01 16:42 millert
1866:
1867: * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1868: developments.
1869:
1870: 2008-01-01 16:42 millert
1871:
1872: * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1873: -V output.
1874:
1875: 2008-01-01 16:25 millert
1876:
1877: * ldap.c: When building up a query don't list groups in the aux
1878: group vector that are the same as the passwd file group. On most
1879: systems the first gid in the group vector is the same as the
1880: passwd entry gid.
1881:
1882: 2008-01-01 14:01 millert
1883:
1884: * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1885: to disable user ldaprc and system defaults that could affect how
1886: LDAP works.
1887:
1888: 2008-01-01 13:21 millert
1889:
1890: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1891: sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1892: --with-nsswitch to allow users to specify nsswitch.conf path or
1893: disable it. If --with-nsswitch=no but --with-ldap, order is
1894: LDAP, then sudoers. Fix --with-ldap-conf-file and
1895: --with-ldap-secret-file
1896:
1897: 2008-01-01 13:12 millert
1898:
1899: * parse.c: Honor def_ignore_local_sudoers
1900:
1901: 2007-12-31 16:44 millert
1902:
1903: * ldap.c: no longer need to check def_ignore_local_sudoers here
1904:
1905: 2007-12-31 16:36 millert
1906:
1907: * parse.c: Refactor group vector resetting into a function and also
1908: call it from display_cmnd. Stop after the first sucessful match
1909: in display_cmnd. Print a newline between each display_privs
1910: method.
1911:
1912: 2007-12-31 16:23 millert
1913:
1914: * parse.c: fix double free introduced in rev 1.218
1915:
1916: 2007-12-31 16:10 millert
1917:
1918: * ldap.c: belt and suspenders; zero out result after freeing it
1919:
1920: 2007-12-31 15:04 millert
1921:
1922: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1923: reading into a separate function, sudo_parseln(), which removes
1924: comments, leading/trailing whitespace and newlines. May want to
1925: rethink the use of sudo_parseln() for /etc/ldap.secret
1926:
1927: 2007-12-31 14:26 millert
1928:
1929: * parse.c, sudo.c: Make the inability to read the sudoers file a
1930: non-fatal error if there are other sudoers sources available.
1931: sudoers_file_lookup now returns "not OK" if sudoers was not
1932: present
1933:
1934: 2007-12-31 14:24 millert
1935:
1936: * ldap.c: make it clear that the global options are from LDAP
1937:
1938: 2007-12-31 14:13 millert
1939:
1940: * logging.c: allocate proper amount of space for error string
1941:
1942: 2007-12-31 10:24 millert
1943:
1944: * sudo_nss.c, sudo_nss.h: actual sudo nss code
1945:
1946: 2007-12-31 10:08 millert
1947:
1948: * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
1949: display_cmnd.
1950:
1951: 2007-12-31 07:54 millert
1952:
1953: * defaults.c, parse.c, testsudoers.c, visudo.c: move
1954: update_defaults() to parse.c
1955:
1956: 2007-12-31 07:39 millert
1957:
1958: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
1959: Use nsswitch to hide some sudoers vs. ldap implementation details
1960: and reduce the number of #ifdef LDAP TODO: fix display routines
1961: and error handling
1962:
1963: 2007-12-28 11:20 millert
1964:
1965: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
1966: First cut at nsswitch.conf support. Further reorganizaton and
1967: related changes are forthcoming.
1968:
1969: 2007-12-21 16:53 millert
1970:
1971: * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
1972: and /etc/environment file. Still needs to be documented and
1973: should probably only applies to OSes that have it (AIX and Linux,
1974: maybe others).
1975:
1976: 2007-12-21 16:20 millert
1977:
1978: * ldap.c: include limits.h
1979:
1980: 2007-12-20 10:02 millert
1981:
1982: * WHATSNEW: reword LDAP SASL
1983:
1984: 2007-12-19 16:40 millert
1985:
1986: * TODO: sync
1987:
1988: 2007-12-19 16:39 millert
1989:
1990: * README.LDAP: Add an example sudoRole, clarify netscape vs.
1991: openldap a bit more
1992:
1993: 2007-12-19 14:42 millert
1994:
1995: * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
1996:
1997: 2007-12-19 14:28 millert
1998:
1999: * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2000: for ldaps support instead of trying to do it manually with
2001: ldap_init() + ldapssl_install_routines(). Use tls_cert and
2002: tls_key for cert7.db and key3.db respectively. Don't print
2003: debugging info for options that are not set. Add warning if
2004: start_tls specified when not supported.
2005:
2006: 2007-12-19 14:25 millert
2007:
2008: * ldap.c: fix compilation on solaris
2009:
2010: 2007-12-19 14:23 millert
2011:
2012: * Makefile.in: add missing .h and .c files for missing lib objs
2013:
2014: 2007-12-18 09:54 millert
2015:
2016: * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2017:
2018: 2007-12-17 20:10 millert
2019:
2020: * ldap.c: fix compilation on Solaris
2021:
2022: 2007-12-17 10:14 millert
2023:
2024: * configure, configure.in: fix typo
2025:
2026: 2007-12-17 08:08 millert
2027:
2028: * README.LDAP: try to clear up which variables are for OpenLDAP and
2029: which are for netscape-derived SDKs
2030:
2031: 2007-12-17 07:31 millert
2032:
2033: * config.h.in, configure, configure.in, ldap.c: Add support for
2034: "ssl on" in both netscape and openldap flavors. Only the
2035: OpenLDAP flavor has been tested.
2036:
2037: 2007-12-17 07:28 millert
2038:
2039: * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2040: log_error() instead of calling sudo_ldap_close() directly.
2041: ldap_conn can now be static to sudo.c
2042:
2043: 2007-12-16 20:02 millert
2044:
2045: * sudo.c: ld -> ldap_conn
2046:
2047: 2007-12-16 14:42 millert
2048:
2049: * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2050:
2051: 2007-12-16 14:08 millert
2052:
2053: * ldap.c: Distinguish between LDAP conf settings that are
2054: connection-specific (which take an ld pointer) and those that are
2055: default settings (which do not).
2056:
2057: 2007-12-14 16:46 millert
2058:
2059: * ldap.c: Improved warnings on error.
2060:
2061: 2007-12-14 15:59 millert
2062:
2063: * ldap.c: Make ldap config table driven and set the config *after*
2064: we open the connection.
2065:
2066: 2007-12-13 16:41 millert
2067:
2068: * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2069:
2070: 2007-12-13 09:13 millert
2071:
2072: * configure, configure.in: some operating systems need to link with
2073: -lkrb5support when using krb5
2074:
2075: 2007-12-10 17:12 millert
2076:
2077: * WHATSNEW: minor update
2078:
2079: 2007-12-10 10:56 millert
2080:
2081: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2082:
2083: 2007-12-07 19:17 millert
2084:
2085: * TODO, ChangeLog: sync
2086:
2087: 2007-12-07 19:09 millert
2088:
2089: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2090: support for LDAP
2091:
2092: 2007-12-03 11:36 millert
2093:
2094: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2095: can now take an optional command.
2096:
2097: 2007-12-02 12:13 millert
2098:
2099: * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2100: sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2101: that will cause the prompt to be overridden in all cases. This
2102: flag is also set when the user specifies the -p flag.
2103:
2104: 2007-12-01 19:51 millert
2105:
2106: * sudo.c: Move setting of login class until after sudoers has been
2107: parsed. Set NewArgv[0] for -i after runas_pw has been set.
2108:
2109: 2007-12-01 19:34 millert
2110:
2111: * configure, configure.in: Move the dgettext check.
2112:
2113: 2007-12-01 11:22 millert
2114:
2115: * config.h.in, configure, configure.in, auth/pam.c: Add basic
2116: support for looking up the string "Password: " in the PAM
2117: localized text db. This allows us to determine whether the PAM
2118: prompt is the default "Password: " one even if it has been
2119: localized.
2120:
2121: TODO: concatenate non-std PAM prompts and user-specified sudo
2122: prompts.
2123:
2124: 2007-11-27 18:40 millert
2125:
2126: * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2127: sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2128: home-grown attempt that was insufficient.
2129:
2130: 2007-11-27 12:13 millert
2131:
2132: * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2133: Martynas Venckus
2134:
2135: 2007-11-25 19:26 millert
2136:
2137: * set_perms.c: Don't assume runas_pw is set; it may not be in the
2138: -g case.
2139:
2140: 2007-11-25 08:07 millert
2141:
2142: * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2143: restore group vector for PERM_ROOT if we previously changed it.
2144: Stash the runas group vector so we don't have to call initgroups
2145: more than once. Also add no-op check to check_perms.
2146:
2147: 2007-11-21 15:11 millert
2148:
2149: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2150: gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2151: parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2152: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2153: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2154: visudo.cat, visudo.man.in: Add support for runas groups. This
2155: allows the user to run a command with a different effective
2156: group. If the -g option is specified without -u the command will
2157: be run as the current user (only the group will change). the -g
2158: and -u options may be used together. TODO: implement runas group
2159: for ldap improve runas group documentation add
2160: testsudoers support
2161:
2162: 2007-11-21 15:02 millert
2163:
2164: * configure, configure.in: fix setting of mandir
2165:
2166: 2007-11-21 14:26 millert
2167:
2168: * sudo.pod, sudoers.pod: document that ALL implies SETENV
2169:
2170: 2007-11-21 13:50 millert
2171:
2172: * ldap.c: s/setenv_ok/setenv_implied/g
2173:
2174: 2007-11-21 13:44 millert
2175:
2176: * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2177:
2178: 2007-11-21 13:26 millert
2179:
2180: * ldap.c: use strcmp, not strcasecmp when comparing ALL
2181:
2182: 2007-11-21 11:41 millert
2183:
2184: * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2185: file-based sudoers this does affect all the commands in the
2186: sudoRole.
2187:
2188: 2007-11-21 11:05 millert
2189:
2190: * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2191: SETENV tag but, unlike an explicit tag, it is not passed on to
2192: other commands in the list.
2193:
2194: 2007-11-21 11:02 millert
2195:
2196: * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2197: Also use sudo_getpwuid() instead of getpwuid().
2198:
2199: 2007-11-15 11:16 millert
2200:
2201: * sudoers: Expand on the dangers of not using visudo to edit
2202: sudoers.
2203:
2204: 2007-11-08 07:24 millert
2205:
2206: * parse.c: Don't quote *?[]! on output since the lexer does not
2207: strip off the backslash when reading those in.
2208:
2209: 2007-11-07 13:16 millert
2210:
2211: * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2212: compatibility issues.
2213:
2214: 2007-11-04 08:33 millert
2215:
2216: * logging.c: Refactor log line generation in to new_logline().
2217:
2218: 2007-10-25 09:23 millert
2219:
2220: * TROUBLESHOOTING: fix typo
2221:
2222: 2007-10-24 12:41 millert
2223:
2224: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2225: match.c: Add configure check for struct in6_addr instead of
2226: relying on AF_INET6 since some systems define AF_INET6 but do not
2227: include IPv6 support.
2228:
2229: 2007-10-21 09:29 millert
2230:
2231: * configure, configure.in: Fix block to add -lutil for FreeBSD and
2232: NetBSD when logincap is in use.
2233:
2234: 2007-10-19 22:28 millert
2235:
2236: * configure, configure.in: POSIX states that struct timespec be
2237: declared in time.h so check there regardless of the value of
2238: TIME_WITH_SYS_TIME.
2239:
2240: 2007-10-17 11:37 millert
2241:
2242: * tgetpass.c: Instead of defining a macro to call the appropriate
2243: method for turning on/off echo, just define tc[gs]etattr() and
2244: the related defines that use the correct terminal ioctls if
2245: needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2246: all but QNX.
2247:
2248: 2007-10-08 20:18 millert
2249:
2250: * Makefile.in: g/c @ALLOCA@
2251:
2252: 2007-10-08 20:07 millert
2253:
2254: * configure: regen
2255:
2256: 2007-10-08 20:04 millert
2257:
2258: * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2259: --disable-pam-session configure option to disable calling
2260: pam_{open,close}_session. May work around bugs in some PAM
2261: implementations.
2262:
2263: 2007-10-08 12:00 millert
2264:
2265: * tgetpass.c: quiet gcc warnings
2266:
2267: 2007-10-08 08:41 millert
2268:
2269: * tgetpass.c: Avoid printing the prompt if we are already
2270: backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2271: In this case, the call to tcsetattr() will cause SIGTTOU to be
2272: delivered.
2273:
2274: 2007-09-15 16:07 millert
2275:
2276: * def_data.c, def_data.h, def_data.in: Reorder things such that the
2277: definition of env_reset come right before the env variable lists.
2278:
2279: 2007-09-15 07:50 millert
2280:
2281: * parse.h: Shrink type and seqno in struct alias from int to
2282: u_short
2283:
2284: 2007-09-15 07:24 millert
2285:
2286: * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2287: aliases for loop detection. If we find an alias with the seqno
2288: already set to the current (global) value we know we've visited
2289: it before so ignore it.
2290:
2291: 2007-09-13 19:05 millert
2292:
2293: * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2294: add user_ttypath which holds the full path to the tty or is NULL
2295: if no tty was present.
2296:
2297: 2007-09-13 18:42 millert
2298:
2299: * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2300: lower that results in a segv.
2301:
2302: 2007-09-11 15:43 millert
2303:
2304: * gram.c: regen
2305:
2306: 2007-09-11 15:42 millert
2307:
2308: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2309: parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2310:
2311: 2007-09-10 17:33 millert
2312:
2313: * alloc.c: remove some useless casts
2314:
2315: 2007-09-10 17:32 millert
2316:
2317: * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2318: inttypes.h predates the final C99 spec and the standard specifies
2319: that it shall include stdint.h anyway
2320:
2321: 2007-09-06 12:39 millert
2322:
2323: * Makefile.in, alloca.c, configure.in: Since we ship with a
2324: pre-generated parser there is no need to ship a bogus alloca
2325: implementation.
2326:
2327: 2007-09-06 12:22 millert
2328:
2329: * configure: regen
2330:
2331: 2007-09-06 12:19 millert
2332:
2333: * configure.in: remove initial setting of CHECKSIA, we require that
2334: it be unset if not used
2335:
2336: 2007-09-06 11:55 millert
2337:
2338: * Makefile.in: add list.c to SRCS
2339:
2340: 2007-09-06 07:18 millert
2341:
2342: * configure: regen
2343:
2344: 2007-09-06 07:17 millert
2345:
2346: * configure.in: only do SIA checks on Digital Unix
2347:
2348: 2007-09-05 18:50 millert
2349:
2350: * sudoers.cat, sudoers.man.in: regen
2351:
2352: 2007-09-05 18:48 millert
2353:
2354: * ChangeLog, TODO: sync
2355:
2356: 2007-09-05 18:39 millert
2357:
2358: * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2359: needed for modern kerb5.
2360:
2361: 2007-09-05 18:16 millert
2362:
2363: * configure: regen
2364:
2365: 2007-09-05 18:16 millert
2366:
2367: * configure.in, aclocal.m4: New method for setting the default
2368: authentication type and avoiding conflicts in auth types.
2369:
2370: 2007-09-05 14:45 millert
2371:
2372: * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2373: an associated runaslist so no need to keep track of the most
2374: recent non-NULL one.
2375:
2376: 2007-09-04 18:51 millert
2377:
2378: * ldap.c: back out partial ldaps support mistakenly committed
2379:
2380: 2007-09-04 10:57 millert
2381:
2382: * ldap.c: Add support for unix groups and netgroups in sudoRunas
2383:
2384: 2007-09-03 16:28 millert
2385:
2386: * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2387: Stritzky.
2388:
2389: 2007-09-02 17:05 millert
2390:
2391: * configure: regen
2392:
2393: 2007-09-02 17:05 millert
2394:
2395: * INSTALL: update --passprompt escape info
2396:
2397: 2007-09-02 17:03 millert
2398:
2399: * configure.in: remove now-bogus comment and update copyright date
2400:
2401: 2007-09-02 16:35 millert
2402:
2403: * configure.in: Fix up use of with_passwd
2404:
2405: 2007-09-02 16:25 millert
2406:
2407: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2408: Update to autoconf-2.61 andf libtool-1.5.24
2409:
2410: 2007-09-02 16:17 millert
2411:
2412: * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2413: autoconf-2.61
2414:
2415: 2007-09-01 17:39 millert
2416:
2417: * gram.c: regen
2418:
2419: 2007-09-01 17:39 millert
2420:
2421: * gram.y: move tags and runaslist propagation to be earlier
2422:
2423: 2007-09-01 09:34 millert
2424:
2425: * visudo.c: If -f flag given use the permissions of the original
2426: file as a template
2427:
2428: 2007-09-01 08:45 millert
2429:
2430: * gram.y: prevent a double free() when re-initing the parser
2431:
2432: 2007-08-31 19:30 millert
2433:
2434: * configure: regen
2435:
2436: 2007-08-31 19:30 millert
2437:
2438: * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2439: ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2440: redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2441: testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2442: auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2443: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2444: Remove support for compilers that don't support void *
2445:
2446: 2007-08-31 19:14 millert
2447:
2448: * gram.c: regen
2449:
2450: 2007-08-31 19:13 millert
2451:
2452: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2453: match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2454: manipulation macros to list.h and create C versions of the more
2455: complex ones in list.c. The names have been down-cased so they
2456: appear more like normal functions.
2457:
2458: 2007-08-31 17:21 millert
2459:
2460: * Makefile.in: Fix cmp command when regenerating parser. Make
2461: gram.o the first dependency for all programs so gram.h will be
2462: generated before anything that needs it.
2463:
2464: 2007-08-31 13:56 millert
2465:
2466: * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2467: functions.
2468:
2469: 2007-08-30 21:21 millert
2470:
2471: * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2472: permission and short-circuit on the first non-UNSPEC hit we get
2473: for the command. This means that instead of cycling through the
2474: all the parsed sudoers entries we start at the end and work
2475: backwards and quit after the first positive or negative match.
2476:
2477: 2007-08-30 21:13 millert
2478:
2479: * gram.c: regen
2480:
2481: 2007-08-30 21:12 millert
2482:
2483: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2484: Change list head macros to take a pointer, not a struct.
2485:
2486: 2007-08-30 20:46 millert
2487:
2488: * gram.c: regen
2489:
2490: 2007-08-30 20:46 millert
2491:
2492: * gram.y: Propagate the runasspec from one command to the next in a
2493: cmndspec.
2494:
2495: 2007-08-30 16:15 millert
2496:
2497: * match.c: Replace has_meta() with a macro that calls strpbrk().
2498:
2499: 2007-08-30 16:04 millert
2500:
2501: * gram.c: regen
2502:
2503: 2007-08-30 13:26 millert
2504:
2505: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2506: testsudoers.c, visudo.c: Use a list head struct when storing the
2507: semi-circular lists and convert to tail queues in the process.
2508: This will allow us to reverse foreach loops more easily and it
2509: makes it clearer which functions expect a list as opposed to a
2510: single member.
2511:
2512: Add macros for manipulating lists. Some of these should become
2513: functions.
2514:
2515: When freeing up a list, just pop off the last item in the queue
2516: instead of going from head to tail. This is simpler since we
2517: don't have to stash a pointer to the next member, we always just
2518: use the last one in the queue until the queue is empty.
2519:
2520: Rename match functions that take a list to have list in the name.
2521: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2522:
2523: 2007-08-30 13:12 millert
2524:
2525: * parse.c: Fix pasto, append "!" not negated (which is an int) for
2526: sudo -l output.
2527:
2528: 2007-08-30 12:45 millert
2529:
2530: * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2531: dependency is enough. Only move y.tab.h to gram.h if it is
2532: different; avoids needless rebuilding.
2533:
2534: 2007-08-27 15:51 millert
2535:
2536: * sudoers.pod: Defaults lines may be associated with lists of
2537: users, hosts, commands and runas users, not just single entries.
2538:
2539: 2007-08-26 17:42 millert
2540:
2541: * Makefile.in: Revert the "cmp" portion of the last diff, it
2542: doesn't make sense.
2543:
2544: 2007-08-26 17:10 millert
2545:
2546: * Makefile.in: Remove *.lo for clean: When generating the parser,
2547: only move the generated files into place if they differ from the
2548: existing ones.
2549:
2550: 2007-08-24 22:47 millert
2551:
2552: * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2553: (readable) one and add an extra check when it matches to make
2554: sure we have a valid address.
2555:
2556: 2007-08-24 22:36 millert
2557:
2558: * match.c: Fix thinko introduced when merging IPV6 support.
2559:
2560: 2007-08-24 14:23 millert
2561:
2562: * HISTORY, LICENSE: regen
2563:
2564: 2007-08-24 14:23 millert
2565:
2566: * license.pod: add 2007
2567:
2568: 2007-08-24 14:19 millert
2569:
2570: * UPGRADE: mention #uid vs. comment pitfall
2571:
2572: 2007-08-24 09:50 millert
2573:
2574: * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2575: problem with the latest autoconf. From Stepan Kasal.
2576:
2577: 2007-08-23 20:28 millert
2578:
2579: * parse.h: Back out he XOR swap trick, it is slower than a temp
2580: variable on modern CPUs.
2581:
2582: 2007-08-23 20:14 millert
2583:
2584: * gram.c: regen
2585:
2586: 2007-08-23 20:14 millert
2587:
2588: * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2589: and use the XOR swap trick to swap the prev pointers during
2590: append.
2591:
2592: 2007-08-23 15:31 millert
2593:
2594: * parse.h: remove useless statement
2595:
2596: 2007-08-23 07:47 millert
2597:
2598: * toke.c, toke.l: Refactor #include parsing into a separate
2599: function and return unparsed chars (such as newline or comment)
2600: back to the lexer.
2601:
2602: 2007-08-22 18:56 millert
2603:
2604: * WHATSNEW: mention better uid support
2605:
2606: 2007-08-22 18:55 millert
2607:
2608: * sudoers.pod: Users may now consist of a uid.
2609:
2610: 2007-08-22 18:39 millert
2611:
2612: * gram.c, gram.h, toke.c: regen
2613:
2614: 2007-08-22 18:32 millert
2615:
2616: * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2617: characters that would require quoting in sudoers.
2618:
2619: 2007-08-22 18:31 millert
2620:
2621: * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2622: characters which should be quoted with a backslash when
2623: displayed.
2624:
2625: 2007-08-22 18:28 millert
2626:
2627: * toke.l: Require that the first character after a comment not be a
2628: digit or a dash. This allows us to remove the GOTRUNAS state and
2629: treat uid/gids similar to other words. It also means that we can
2630: now specify uids in User_Lists and a User_Spec may now contain a
2631: uid.
2632:
2633: 2007-08-22 18:23 millert
2634:
2635: * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2636: make the runas portion of the grammar more natural.
2637:
2638: 2007-08-22 06:35 millert
2639:
2640: * Makefile.in, README, BUGS: The BUGS file is history
2641:
2642: 2007-08-21 09:19 millert
2643:
2644: * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2645: character after the pound sign isn't a digit or a dash.
2646:
2647: 2007-08-20 20:43 millert
2648:
2649: * WHATSNEW: Glob support was back-ported to 1.6.9
2650:
2651: 2007-08-20 19:59 millert
2652:
2653: * Makefile.in: remove sudo_usage.h in distclean
2654:
2655: 2007-08-20 19:24 millert
2656:
2657: * parse.c: If a Defaults value contains a blank, double-quote the
2658: string.
2659:
2660: 2007-08-20 19:19 millert
2661:
2662: * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2663: that span multiple lines using the line continuation char.
2664: Previously, the entire thing, including the continuation char,
2665: newline, and spaces was stored as-is.
2666:
2667: 2007-08-20 10:46 millert
2668:
2669: * sudo.c: Be consistent when using single quotes and backticks.
2670:
2671: 2007-08-19 16:48 millert
2672:
2673: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2674: sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2675: dynamically allocated strings and word-wrapped output. Currently
2676: used for sudo's usage() and sudo -l output. Sudo usage strings
2677: are now in sudo_usage.h which is generated at configure time.
2678:
2679: 2007-08-18 08:22 millert
2680:
2681: * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2682: actual tty width instead of assuming 80.
2683:
2684: 2007-08-17 18:32 millert
2685:
2686: * history.pod: some more info
2687:
2688: 2007-08-17 17:28 millert
2689:
2690: * history.pod: Mentioned Chris Jepeway's parser and also the new
2691: one that is in sudo 1.7.
2692:
2693: 2007-08-16 09:38 millert
2694:
2695: * sudo.pod, visudo.pod: For the options list, add flag args where
2696: appropriate and increase the indent level so there is room for
2697: them.
2698:
2699: 2007-08-15 13:49 millert
2700:
2701: * parse.c: Fix some spacing in "sudo -l" and add a comment about
2702: some bogosity in the line wrapping.
2703:
2704: 2007-08-15 11:21 millert
2705:
2706: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2707: visudo.man.in, visudo.cat: regen
2708:
2709: 2007-08-15 11:20 millert
2710:
2711: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2712: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2713: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2714: testsudoers.c, toke.c, toke.l: Remove monitor support until there
2715: is a versino of systrace that uses a lookaside buffer (or we have
2716: a better mechanism to use).
2717:
2718: 2007-08-15 09:22 millert
2719:
2720: * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2721: instead of gethostbyname() if it is available
2722:
2723: 2007-08-14 15:27 millert
2724:
2725: * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2726: sizeof(int).
2727:
2728: 2007-08-14 11:19 millert
2729:
2730: * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2731:
2732: 2007-08-14 10:04 millert
2733:
2734: * sudo.c: If we can open sudoers but fail to read the first byte,
2735: close the file stream before trying again.
2736:
2737: 2007-08-13 12:34 millert
2738:
2739: * gram.c, toke.c: regen
2740:
2741: 2007-08-13 12:29 millert
2742:
2743: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2744: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2745:
2746: 2007-08-13 12:23 millert
2747:
2748: * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2749: copyright
2750:
2751: 2007-08-12 18:55 millert
2752:
2753: * configure, configure.in: fix sudo_noexec extension which got
2754: broken in the libtool update
2755:
2756: 2007-08-10 10:41 millert
2757:
2758: * Makefile.in: explicitly specify -Tascii to nroff
2759:
2760: 2007-08-08 16:07 millert
2761:
2762: * logging.c: remove an ANSI-ism that crept in
2763:
2764: 2007-08-06 20:37 millert
2765:
2766: * sudo.pod: Adjust list indents Prevent -- from being turned into
2767: an em dash Use a list for the environment instead of a literal
2768: paragraph
2769:
2770: 2007-08-06 20:36 millert
2771:
2772: * visudo.pod: Use a list for the environment instead of an indented
2773: literal paragraph.
2774:
2775: 2007-08-06 20:33 millert
2776:
2777: * sudoers.pod: Adjust list indentation
2778:
2779: 2007-08-06 20:31 millert
2780:
2781: * license.pod: add =head3
2782:
2783: 2007-08-06 10:24 millert
2784:
2785: * sudo.pod: mention that when specifying a uid for the -u option
2786: the shell may require that the # be escaped
2787:
2788: 2007-08-01 22:08 millert
2789:
2790: * match.c: Fix off by one in group matching.
2791:
2792: 2007-07-31 14:04 millert
2793:
2794: * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2795: David Krause.
2796:
2797: 2007-07-30 10:45 millert
2798:
2799: * configure, configure.in: Add missing define of
2800: HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2801:
2802: 2007-07-30 09:29 millert
2803:
2804: * aclocal.m4, configure.in, configure: Fix link tests such that new
2805: gcc doesn't optimize away the test.
2806:
2807: 2007-07-29 19:21 millert
2808:
2809: * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2810:
2811: 2007-07-29 19:09 millert
2812:
2813: * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2814: =item
2815:
2816: 2007-07-29 18:32 millert
2817:
2818: * env.c: Add back allocation of the env struct in rebuild_env but
2819: save a copy of the old pointer and free it before returning.
2820:
2821: 2007-07-29 16:09 millert
2822:
2823: * env.c: Don't init the private environment in rebuild_env() since
2824: it may have already been done implicitly
2825: sudo_setenv/sudo_unsetenv.
2826:
2827: Multiply length by sizeof(char *) in memcpy/memmove when copying
2828: the environment so we copy the full thing.
2829:
2830: Add missing set of parens so we deref the right pointer in
2831: sudo_unsetenv when searching for a matching variable.
2832:
2833: 2007-07-26 16:35 millert
2834:
2835: * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2836: the FILES section
2837:
2838: 2007-07-26 10:04 millert
2839:
2840: * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2841:
2842: 2007-07-26 07:28 millert
2843:
2844: * sudoers.pod: Sort sudoers options; based on a diff from Igor
2845: Sobrado.
2846:
2847: 2007-07-25 16:19 millert
2848:
2849: * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2850: @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2851: The Makefile rules for the .man.in file will add @mansectsu@ and
2852: @mansectform@ back in after pod2man is done anyway.
2853:
2854: 2007-07-22 19:09 millert
2855:
2856: * LICENSE, Makefile.in, license.pod: Move license info to pod
2857: format
2858:
2859: 2007-07-22 18:43 millert
2860:
2861: * configure, configure.in, sudoers.pod: Substitute value of
2862: path_info into sudoers man page.
2863:
2864: 2007-07-22 16:40 millert
2865:
2866: * WHATSNEW: remove features that were back-ported to 1.6.9
2867:
2868: 2007-07-22 15:20 millert
2869:
2870: * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2871: usage. From Igor Sobrado.
2872:
2873: 2007-07-22 15:19 millert
2874:
2875: * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2876: ldap_sasl_interactive_bind_s() but don't have
2877: gss_krb5_ccache_name().
2878:
2879: 2007-07-22 08:23 millert
2880:
2881: * ChangeLog: rebuild without branch info
2882:
2883: 2007-07-22 08:23 millert
2884:
2885: * Makefile.in: Add ChangeLog target
2886:
2887: 2007-07-22 08:14 millert
2888:
2889: * auth/pam.c: Run cleanup code if the user hits ^C at the password
2890: prompt.
2891:
2892: 2007-07-22 08:13 millert
2893:
2894: * auth/pam.c: Some versions of pam_lastlog have a bug that will
2895: cause a crash if PAM_TTY is not set so if there is no tty, set
2896: PAM_TTY to the empty string.
2897:
2898: 2007-07-20 09:32 millert
2899:
2900: * Makefile.in: ChageLog not Changelog
2901:
2902: 2007-07-20 09:31 millert
2903:
2904: * ChangeLog: sync
2905:
2906: 2007-07-20 09:29 millert
2907:
2908: * Makefile.in: CHANGE -> Changelog
2909:
2910: 2007-07-19 20:23 millert
2911:
2912: * TODO: sync
2913:
2914: 2007-07-19 19:53 millert
2915:
2916: * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2917: for gss_krb5_ccache_name() and the gssapi headers.
2918:
2919: 2007-07-18 12:57 millert
2920:
2921: * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2922: return environment pointer, they set environ directly.
2923:
2924: No longer need to pass around an envp pointer since we just
2925: operate on environ now.
2926:
2927: Add dosync argument to insert_env() that indicates whether it
2928: should reset environ when realloc()ing env.envp.
2929:
2930: Use an initial size of 128 for the environment.
2931:
2932: 2007-07-18 12:41 millert
2933:
2934: * env.c: Split sudo_setenv() into an external version and a version
2935: only for use by rebuild_env().
2936:
2937: 2007-07-16 19:40 millert
2938:
2939: * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2940: setting KRB5CCNAME. Also use sudo_unsetenv() in the
2941: non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2942: original environment. TODO: configure setup for
2943: gss_krb5_ccache_name()
2944:
2945: 2007-07-16 18:44 millert
2946:
2947: * README.LDAP: add krb5_ccname
2948:
2949: 2007-07-16 18:44 millert
2950:
2951: * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
2952:
2953: 2007-07-16 18:39 millert
2954:
2955: * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
2956: syncing code into sync_env().
2957:
2958: 2007-07-16 07:27 millert
2959:
2960: * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
2961: sasl_authid.
2962:
2963: 2007-07-15 15:44 millert
2964:
2965: * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
2966: If specified, it will override the default value of KRB5CCNAME
2967: in the environment for the duration of the call to
2968: ldap_sasl_interactive_bind_s().
2969:
2970: 2007-07-15 15:41 millert
2971:
2972: * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
2973: most format_env() + insert_env() combinations. insert_env() no
2974: longer takes a struct environment *
2975:
2976: 2007-07-15 12:47 millert
2977:
2978: * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
2979:
2980: 2007-07-15 09:23 millert
2981:
2982: * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
2983: support for SASL auth when connecting to an LDAP server. Adapted
2984: from a diff by Tom McLaughlin.
2985:
2986: 2007-07-14 16:32 millert
2987:
2988: * configure, configure.in: Only enable AIX or BSD auth if no other
2989: exclusive auth method has been chosen. Allows people to e.g.,
2990: use PAM on AIX without adding --without-aixauth. A better
2991: solution is needed to deal with default authentication since if a
2992: non-exclusive method is chosen we will still get an error.
2993:
2994: 2007-07-11 11:23 millert
2995:
2996: * HISTORY, Makefile.in, history.pod: Generate HISTORY from
2997: history.pod (which is also used for web pages)
2998:
2999: 2007-07-09 19:40 millert
3000:
3001: * sudo.man.in, sudoers.man.in: regen
3002:
3003: 2007-07-09 19:25 millert
3004:
3005: * sudo.pod: Better explanation of environment handling in the sudo
3006: man page.
3007:
3008: 2007-07-09 15:13 millert
3009:
3010: * env.c, sudo.c: Defer setting user-specified env vars until after
3011: authentication.
3012:
3013: 2007-07-09 13:25 millert
3014:
3015: * env.c: honor def_default_path for PATH set on the command line
3016:
3017: 2007-07-09 13:22 millert
3018:
3019: * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3020: environment variables on the command line as long as they are
3021: allowed by env_keep and env_check. Ie: apply the same
3022: restrictions as normal environment variables. TODO: deal with
3023: secure_path
3024:
3025: 2007-07-08 14:44 millert
3026:
3027: * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3028: original envp to sudo_edit(). Don't allow -E or env var setting
3029: in sudoedit mode. More accurate usage() when called as sudoedit.
3030:
3031: 2007-07-08 14:41 millert
3032:
3033: * ldap.c: warn -> warning
3034:
3035: 2007-07-08 14:11 millert
3036:
3037: * sudo.pod: add -c option to sudoedit synopsis
3038:
3039: 2007-07-08 10:27 millert
3040:
3041: * TODO: udpate to reality
3042:
3043: 2007-07-08 09:43 millert
3044:
3045: * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3046: the return value from {user,host,runas,cmnd}_matches(). Rename
3047: *matches variables -> *match. Purely cosmetic.
3048:
3049: 2007-07-08 09:30 millert
3050:
3051: * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3052: No change in behavior.
3053:
3054: 2007-07-08 09:17 millert
3055:
3056: * sudoers: add SETENV tag
3057:
3058: 2007-07-06 15:51 millert
3059:
3060: * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3061: even if user didn't match since Defaults options may still apply.
3062:
3063: 2007-07-06 14:51 millert
3064:
3065: * check.c, sudo.c: Do not update timestamp if user not validated by
3066: sudoers.
3067:
3068: 2007-07-06 10:14 millert
3069:
3070: * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3071: and restore to the user's original in PERM_ROOT
3072:
3073: 2007-07-06 10:04 millert
3074:
3075: * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3076: now no different than PERM_ROOT so remove PERM_FULL_ROOT
3077:
3078: 2007-07-06 09:49 millert
3079:
3080: * check.c: don't check timestamp mtime if we are just going to
3081: remove it
3082:
3083: 2007-07-06 09:33 millert
3084:
3085: * sudoers.pod: Move sudoers defaults parameters into their own
3086: section.
3087:
3088: 2007-07-05 20:21 millert
3089:
3090: * testsudoers.c: Reduce a level of indent by a few placed continue
3091: statements.
3092:
3093: 2007-07-05 20:20 millert
3094:
3095: * parse.c: Make matching but negated commands/hosts/runas entries
3096: override a previous match as expected. Also reduce some levels
3097: of indent by a few placed continue statements.
3098:
3099: 2007-07-05 16:34 millert
3100:
3101: * parse.c: Print default runas in "sudo -l" if sudoers don't
3102: specify one.
3103:
3104: 2007-07-05 15:46 millert
3105:
3106: * match.c: Less hacky way of testing whether the domain was set.
3107:
3108: 2007-07-04 15:50 millert
3109:
3110: * INSTALL: Mention pam-devel and openldap-devel for Linux
3111:
3112: 2007-07-03 19:38 millert
3113:
3114: * README.LDAP: or vs. are
3115:
3116: 2007-07-01 16:55 millert
3117:
3118: * sudo.c: fix typo in Solaris project support
3119:
3120: 2007-07-01 09:40 millert
3121:
3122: * HISTORY: update
3123:
3124: 2007-07-01 09:07 millert
3125:
3126: * sudo.c: Make -- on the command line match the manual page. The
3127: implied shell case has been simplified as a result.
3128:
3129: 2007-06-28 10:44 millert
3130:
3131: * sudoers2ldif: add simplistic support for sudoRunas; note that if
3132: a sudoers entry contains multiple Runas users, all will apply to
3133: the sudoRole
3134:
3135: 2007-06-28 10:42 millert
3136:
3137: * sudoers2ldif: honor SETENV and NOSETENV tags
3138:
3139: 2007-06-24 09:25 millert
3140:
3141: * mon_systrace.c: Redo setting of user_args. We now build up a
3142: private copy of argv first and then replace the NULs with spaces.
3143:
3144: 2007-06-24 09:19 millert
3145:
3146: * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3147: success
3148:
3149: 2007-06-24 07:39 millert
3150:
3151: * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3152:
3153: 2007-06-23 20:00 millert
3154:
3155: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3156: visudo.man.in: regen
3157:
3158: 2007-06-23 19:58 millert
3159:
3160: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3161: gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3162: sudoers.pod, toke.c, toke.l: Add support for setting environment
3163: variables on the command line. This is only allowed if the
3164: setenv sudoers options is enabled or if the command is prefixed
3165: with the SETENV tag.
3166:
3167: 2007-06-23 19:57 millert
3168:
3169: * README.LDAP: replace Aaron's email address with the sudo-workers
3170: list
3171:
3172: 2007-06-23 19:55 millert
3173:
3174: * configure: regen
3175:
3176: 2007-06-21 20:35 millert
3177:
3178: * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3179: schema out into separate files.
3180:
3181: 2007-06-21 18:28 millert
3182:
3183: * auth/aix_auth.c: free message if set by authenticate()
3184:
3185: 2007-06-21 13:03 millert
3186:
3187: * match.c: deal with NULL gr_mem
3188:
3189: 2007-06-20 15:04 millert
3190:
3191: * config.h.in: regen
3192:
3193: 2007-06-20 15:04 millert
3194:
3195: * configure.in: add template for HAVE_PROJECT_H
3196:
3197: 2007-06-20 07:06 millert
3198:
3199: * closefrom.c: include fcntl.h
3200:
3201: 2007-06-19 19:37 millert
3202:
3203: * INSTALL: mention --with-project
3204:
3205: 2007-06-19 18:24 millert
3206:
3207: * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3208: support. From Michael Brantley.
3209:
3210: 2007-06-19 17:27 millert
3211:
3212: * sudoers.pod: fix typo
3213:
3214: 2007-06-19 17:22 millert
3215:
3216: * configure: regen
3217:
3218: 2007-06-19 17:21 millert
3219:
3220: * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3221:
3222: 2007-06-19 17:00 millert
3223:
3224: * memrchr.c: Remove dependecy on NULL
3225:
3226: 2007-06-19 15:37 millert
3227:
3228: * configure: regen
3229:
3230: 2007-06-19 15:37 millert
3231:
3232: * aclocal.m4, configure.in: Can't use the regular autoconf
3233: fnmatch() check since we need FNM_CASEFOLD so go back to our
3234: custom one.
3235:
3236: 2007-06-19 12:52 millert
3237:
3238: * env.c: Fix preserving of variables in env_keep.
3239:
3240: 2007-06-19 07:10 millert
3241:
3242: * env.c: add XAUTHORIZATION
3243:
3244: 2007-06-18 20:41 millert
3245:
3246: * UPGRADE: expand upon env resetting and mention that it began in
3247: 1.6.9 not 1.7.
3248:
3249: 2007-06-18 20:33 millert
3250:
3251: * sudoers.pod: Update descriptions of env_keep and env_check to
3252: match current reality.
3253:
3254: 2007-06-18 17:33 millert
3255:
3256: * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3257: HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3258: intial_keepenv_table.
3259:
3260: 2007-06-18 17:23 millert
3261:
3262: * env.c, logging.c: Treat USERNAME environemnt variable like
3263: LOGNAME/USER
3264:
3265: 2007-06-18 17:21 millert
3266:
3267: * env.c: Don't need to populate keepenv table with the contents of
3268: the checkenv table.
3269:
3270: 2007-06-18 08:57 millert
3271:
3272: * sudo.c: Don't force sudo into the C locale.
3273:
3274: 2007-06-18 08:56 millert
3275:
3276: * env.c: Make env_check apply when env_reset it true. Environment
3277: variables are passed through unless they contain '/' or '%'.
3278: There is no need to have a variable in both env_check and
3279: env_keep.
3280:
3281: 2007-06-16 07:31 millert
3282:
3283: * visudo.c: Remove an duplicate lock_file() call and add a comment.
3284:
3285: 2007-06-15 21:16 millert
3286:
3287: * UPGRADE: Add sudo 1.6.9 upgrade note.
3288:
3289: 2007-06-14 12:23 millert
3290:
3291: * interfaces.c: Solaris will return EINVAL if the buffer used in
3292: SIOCGIFCONF is too small. From Klaus Wagner.
3293:
3294: 2007-06-14 12:03 millert
3295:
3296: * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3297: logging.c, sudo.h: Redo the long syslog line splitting based on a
3298: patch from Eygene Ryabinkin. Include memrchr() for systems
3299: without it.
3300:
3301: 2007-06-14 07:09 millert
3302:
3303: * configure.in: Since we need to be able to convert timespec to
3304: timeval for utimes() the last 3 digits in the tv_nsec are not
3305: significant. This makes the sudoedit file date comparison work
3306: again.
3307:
3308: 2007-06-13 13:41 millert
3309:
3310: * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3311: deal with adding things to AUTH_OBJS. This deals with exclusive
3312: authentication methods in a simple way.
3313:
3314: 2007-06-12 13:08 millert
3315:
3316: * LICENSE: mkstemp.c is BSD code too.
3317:
3318: 2007-06-12 09:21 millert
3319:
3320: * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3321:
3322: 2007-06-11 18:27 millert
3323:
3324: * sudo.c: cleanenv() is no more.
3325:
3326: 2007-06-10 18:37 millert
3327:
3328: * ChangeLog: Display branch info in Changelog
3329:
3330: 2007-06-10 18:18 millert
3331:
3332: * utimes.c: Include config.h early so we have it for
3333: TIME_WITH_SYS_TIME
3334:
3335: 2007-06-10 18:00 millert
3336:
3337: * ChangeLog: Fix Changelog generation and update.
3338:
3339: 2007-06-09 07:26 millert
3340:
3341: * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3342:
3343: Move old-style fd closing into closefrom_fallback() and call that
3344: if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3345:
3346: 2007-06-09 07:24 millert
3347:
3348: * config.h.in, configure.in, auth/kerb5.c: o use
3349: krb5_verify_user() if available instead of doing it by hand
3350: o use krb5_init_secure_context() if we have it
3351: o pass an encryption type of 0 to krb5_kt_read_service_key()
3352: instead of
3353: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3354:
3355: 2007-06-09 07:20 millert
3356:
3357: * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3358: Debian.
3359:
3360: 2007-06-09 07:17 millert
3361:
3362: * configure.in: Fix closefrom() substitution in the Makefile
3363:
3364: 2007-06-09 07:15 millert
3365:
3366: * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3367:
3368: 2007-06-07 07:52 millert
3369:
3370: * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3371:
3372: 2007-06-07 07:22 millert
3373:
3374: * auth/kerb5.c: If we cannot get a valid service key using the
3375: default keytab it is a fatal error. Fixes a bug where sudo could
3376: be tricked into allowing access when it should not by a fake KDC.
3377: From Thor Lancelot Simon.
3378:
3379: 2007-05-12 08:56 millert
3380:
3381: * aclocal.m4, configure, configure.in: Update long long checks to
3382: use AC_CHECK_TYPES and to cache values.
3383:
3384: 2007-05-12 08:07 millert
3385:
3386: * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3387: homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3388: that assumes replacing with GNU fnmatch.
3389:
3390: 2007-05-11 17:05 millert
3391:
3392: * configure, configure.in: Add closefrom() to LIB_OBJS not
3393: SUDO_OBJS if it is missing since we need it for visudo now too.
3394:
3395: 2007-04-24 14:44 millert
3396:
3397: * sudoers.pod: Attempt to clarify the bit talking about network
3398: numbers w/o netmasks.
3399:
3400: 2007-04-24 14:25 millert
3401:
3402: * sudo.pod: Clarify timestamp dir ownership sentence.
3403:
3404: 2007-04-20 12:40 millert
3405:
3406: * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3407: __LIBPAM_VERSION. From Dmitry V. Levin.
3408:
3409: 2007-04-16 12:13 millert
3410:
3411: * sudo.c: -i is also one of the mutually exclusive options to list
3412: it in the warning message. Noted by Chris Pepper.
3413:
3414: 2007-04-12 11:18 millert
3415:
3416: * visudo.pod: The sudoers variable is env_editor, not enveditor.
3417: From Jean-Francois Saucier.
3418:
3419: 2007-03-29 13:30 millert
3420:
3421: * redblack.c: I tracked down the original author so credit him and
3422: include his license info.
3423:
3424: 2007-02-06 13:25 millert
3425:
3426: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3427: sudoers.pod: Fix typos; from Jason McIntyre.
3428:
3429: 2007-02-06 13:23 millert
3430:
3431: * logging.c: Restore signal mask before calling reapchild(). Fixes
3432: a possible race condition that could prevent sudo from properly
3433: waiting for the child.
3434:
3435: 2007-01-31 10:02 millert
3436:
3437: * pwutil.c: Don't declare pw_free() if we are not going to use it.
3438:
3439: 2007-01-31 10:00 millert
3440:
3441: * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3442: and LDR_PRELOAD64. The 64-bit version is not currently
3443: supported. Remove zero_env() prototype as it no longer exists.
3444:
3445: 2006-12-11 13:21 millert
3446:
3447: * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3448: for rfc 3834.
3449:
3450: 2006-09-29 10:53 millert
3451:
3452: * auth/pam.c: If the user enters ^C at the password prompt, abort
3453: instead of trying to authenticate with an empty password (which
3454: causes an annoying delay).
3455:
3456: 2006-08-17 11:26 millert
3457:
3458: * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3459: F_CLOSEM support to closefrom(); adapted from a diff by Darren
3460: Tucker.
3461:
3462: 2006-08-17 11:25 millert
3463:
3464: * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3465: it out too.
3466:
3467: 2006-08-04 11:34 millert
3468:
3469: * config.sub, config.guess: Update to latest versions from
3470: cvs.savannah.gnu.org
3471:
3472: 2006-07-31 13:51 millert
3473:
3474: * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3475: sudo_end{pw,grp}ent() so we can close the passwd/group files
3476: early.
3477:
3478: 2006-07-31 13:50 millert
3479:
3480: * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3481: flavor of set_perms() for systems without setreuid() or
3482: setresuid() that have a working seteuid(). Tested on Darwin.
3483:
3484: 2006-07-30 15:56 millert
3485:
3486: * mon_systrace.c: systrace_read() returns ssize_t
3487:
3488: 2006-07-30 15:53 millert
3489:
3490: * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3491: Knox.
3492:
3493: 2006-07-28 13:12 millert
3494:
3495: * HISTORY: Fix typo; Matt Ackeret
3496:
3497: 2006-07-17 08:25 millert
3498:
3499: * sudo.c: Print sudoers path in -V mode for root.
3500:
3501: 2006-06-15 14:44 millert
3502:
3503: * ldap.c: Do a sub tree search instead of a base search (one level
3504: in the tree only) for sudo right objects. This allows system
3505: administrators to categorize the rights in a tree to make them
3506: easier to manage.
3507:
3508: 2005-12-28 13:52 millert
3509:
3510: * sudo.pod: fix typo
3511:
3512: 2005-12-04 12:16 millert
3513:
3514: * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3515: timelimit and bind_timelimit support; adapted from gentoo.
3516:
3517: 2005-11-23 18:57 millert
3518:
3519: * ldap.c: Support comments that start in the middle of a line
3520:
3521: 2005-11-23 18:56 millert
3522:
3523: * configure.in, configure: Define LDAP_DEPRECATED until we start
3524: using ldap_get_values_len()
3525:
3526: 2005-11-18 09:55 millert
3527:
3528: * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3529:
3530: 2005-11-17 20:39 millert
3531:
3532: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3533: takes an int as an arg so it can be used as a signal handler too.
3534:
3535: 2005-11-17 20:38 millert
3536:
3537: * sudo.c: Make a copy of the shell field in the passwd struct for
3538: NewArgv to avoid a use after free situation after sudo_endpwent()
3539: is called.
3540:
3541: 2005-11-16 20:36 millert
3542:
3543: * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3544: mkstemp() for those poor souls without it.
3545:
3546: 2005-11-15 09:25 millert
3547:
3548: * env.c: Add PERL5DB to list of environment variables to remove.
3549:
3550: 2005-11-13 15:49 millert
3551:
3552: * mon_systrace.c, mon_systrace.h: Instead of calling the check
3553: function twice with a state cookie use separate check/log
3554: functions.
3555:
3556: Check more ioctl() calls for failure.
3557:
3558: systrace_{read,write} now return the number of bytes read/written
3559: or -1 on error.
3560:
3561: 2005-11-13 14:51 millert
3562:
3563: * env.c: Add more environment variables to remove; from gentoo
3564: linux Add some comments about what bad env variables go to what
3565: (more to do)
3566:
3567: 2005-11-11 17:23 millert
3568:
3569: * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3570: the exec since they free up our cached copy of the passwd
3571: structs, including sudo_user and sudo_runas. Fixes a
3572: use-after-free bug.
3573:
3574: 2005-11-11 17:19 millert
3575:
3576: * visudo.c: Close all fd's before executing editor.
3577:
3578: 2005-11-11 17:17 millert
3579:
3580: * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3581: set.
3582:
3583: 2005-11-11 11:22 millert
3584:
3585: * check.c: Fix fd leak when lecture file option is enabled. From
3586: Jerry Brown
3587:
3588: 2005-11-07 11:02 millert
3589:
3590: * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3591: environment variables to remove. From Charles Morris
3592:
3593: 2005-11-01 13:24 millert
3594:
3595: * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3596:
3597: 2005-10-27 20:35 millert
3598:
3599: * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3600:
3601: 2005-08-14 20:32 millert
3602:
3603: * sudoers.pod: Fix typo; Toby Peterson
3604:
3605: 2005-08-02 09:57 millert
3606:
3607: * tsgetgrpw.c: Make return buffers static so they don't get
3608: clobbered
3609:
3610: 2005-07-27 21:14 millert
3611:
3612: * auth/securid5.c: Fix securid5 authentication, was not checking
3613: for ACM_OK. Also add default cases for the two switch()es.
3614: Problem noted by ccon at worldbank
3615:
3616: 2005-06-26 20:10 millert
3617:
3618: * ldap.c: Remove ncat() in favor of just counting bytes and
3619: pre-allocating what is needed.
3620:
3621: 2005-06-26 19:44 millert
3622:
3623: * ldap.c: Fix up some comments Add missing fclose() for the
3624: rootbinddn case
3625:
3626: 2005-06-26 19:38 millert
3627:
3628: * ldap.c: align struct ldap_config
3629:
3630: 2005-06-26 19:37 millert
3631:
3632: * ldap.c: use LINE_MAX for max conf file line size
3633:
3634: 2005-06-26 18:36 millert
3635:
3636: * pathnames.h.in: add _PATH_LDAP_SECRET
3637:
3638: 2005-06-26 18:36 millert
3639:
3640: * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3641:
3642: 2005-06-25 18:03 millert
3643:
3644: * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3645: ldap.conf
3646:
3647: 2005-06-25 17:46 millert
3648:
3649: * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3650: variable by default.
3651:
3652: 2005-06-25 16:39 millert
3653:
3654: * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3655: is safe for LD_PRELOAD
3656:
3657: 2005-06-25 16:15 millert
3658:
3659: * acsite.m4, configure: set need_version=no for all cases; this is
3660: safe for LD_PRELOAD
3661:
3662: 2005-06-25 14:45 millert
3663:
3664: * aclocal.m4: typo
3665:
3666: 2005-06-25 14:33 millert
3667:
3668: * configure, configure.in: Add dragonfly
3669:
3670: 2005-06-25 14:29 millert
3671:
3672: * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3673:
3674: 2005-06-25 14:21 millert
3675:
3676: * configure: regen
3677:
3678: 2005-06-25 14:20 millert
3679:
3680: * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3681: ltoptions.m4 ltsugar.m4 ltversion.m4
3682:
3683: 2005-06-25 14:08 millert
3684:
3685: * config.guess, config.sub, ltmain.sh: merge in local changes:
3686: config.guess: o better openbsd support config.sub: o hiuxmpp
3687: support ltmain.sh o remove requirement that libs must begin with
3688: "lib" o don't print a bunch of crap about library installs o
3689: don't run ldconfig
3690:
3691: 2005-06-25 14:05 millert
3692:
3693: * config.guess, config.sub, ltmain.sh: libtool 1.9f
3694:
3695: 2005-06-25 14:04 millert
3696:
3697: * configure.in: Update with autoupdate and make minor changes for
3698: libtool 1.9f
3699:
3700: 2005-06-22 23:19 millert
3701:
3702: * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3703:
3704: 2005-06-22 23:04 millert
3705:
3706: * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3707: emul/timespec.h: Move declatation of struct timespec to its own
3708: include files for systems without it since it needs time_t
3709: defined.
3710:
3711: 2005-06-22 22:57 millert
3712:
3713: * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3714:
3715: 2005-05-27 01:59 millert
3716:
3717: * auth/pam.c: Call pam_open_session() and pam_close_session() to
3718: give pam_limits a chance to run. Idea from Karel Zak.
3719:
3720: 2005-04-24 19:24 millert
3721:
3722: * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3723: to silence warnings on Solaris
3724:
3725: 2005-04-24 19:22 millert
3726:
3727: * parse.c: include grp.h to silence a warning on Solaris
3728:
3729: 2005-04-23 15:10 millert
3730:
3731: * parse.c: Fix printing of += and -= defaults.
3732:
3733: 2005-04-17 01:21 millert
3734:
3735: * mon_systrace.c: Sanity check number of syscall args with argsize.
3736: Not really needed but a little paranoia never hurts.
3737:
3738: 2005-04-17 01:18 millert
3739:
3740: * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3741: void * Use int, not size_t/ssize_t for systrace lengths (since it
3742: uses int)
3743:
3744: 2005-04-16 03:14 millert
3745:
3746: * mon_systrace.c: Add some memsets for paranoia Fix namespace
3747: collsion w/ error Check rval of decode_args() and update_env()
3748: Remove improper setting of validated variable
3749:
3750: 2005-04-11 21:37 millert
3751:
3752: * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3753: file if def_ignore_sudoers is not set and call LDAP versions from
3754: display_privs() and display_cmnd() instead of directly from
3755: main(). Because of this we need to defer closing the ldap
3756: connection until after -l processing has ocurred and we must pass
3757: in the ldap pointer to display_privs() and display_cmnd().
3758:
3759: 2005-04-11 21:33 millert
3760:
3761: * ldap.c: Reorganize LDAP code to better match normal sudoers
3762: parsing. Instead of storing strings for later printing in -l
3763: mode we do another query since the authenticating user and the
3764: user being listed may not be the same (the new -U flag). Also
3765: add support for "sudo -l command".
3766:
3767: There is still a fair bit if duplicated code that can probably be
3768: refactored.
3769:
3770: 2005-04-11 00:37 millert
3771:
3772: * ldap.c: Replace pass variable with do_netgr for better
3773: readability.
3774:
3775: 2005-04-10 23:49 millert
3776:
3777: * ldap.c: use DPRINTF macro
3778:
3779: 2005-04-10 23:18 millert
3780:
3781: * ldap.c: estrdup, not strdup
3782:
3783: 2005-04-10 17:44 millert
3784:
3785: * parse.c: Add macro to test if the tag changed to improve
3786: readability.
3787:
3788: 2005-04-10 17:40 millert
3789:
3790: * parse.c: Avoid printing defaults header if there are no defaults
3791: to print...
3792:
3793: 2005-04-10 15:29 millert
3794:
3795: * glob.c: Fix a warning on systems without strlcpy().
3796:
3797: 2005-04-10 13:32 millert
3798:
3799: * pwutil.c: Use macros where possible for sudo_grdup() like
3800: sudo_pwdup().
3801:
3802: 2005-04-08 17:04 millert
3803:
3804: * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3805: add in tv_usec / 1000000.
3806:
3807: 2005-03-29 23:38 millert
3808:
3809: * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3810: should be 1, not 0 for Heimdal. From Alex Plotnick.
3811:
3812: 2005-03-29 09:29 millert
3813:
3814: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3815: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3816: pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3817: Add efree() for consistency with emalloc() et al. Allows us to
3818: rely on C89 behavior (free(NULL) is valid) even on K&R.
3819:
3820: 2005-03-28 22:33 millert
3821:
3822: * parse.c, sudo.c: Move initgroups() for -U option into
3823: display_privs() so group matching in sudoers works correctly.
3824:
3825: 2005-03-26 21:34 millert
3826:
3827: * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3828: with sudo_ldap_close.
3829:
3830: 2005-03-26 20:01 millert
3831:
3832: * parse.c: Add missing space in Defaults printing
3833:
3834: 2005-03-25 12:36 millert
3835:
3836: * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3837: size computaton and string copies.
3838:
3839: 2005-03-18 22:08 millert
3840:
3841: * pwutil.c: Zero old pw_passwd before replacing with version from
3842: shadow file.
3843:
3844: 2005-03-18 22:07 millert
3845:
3846: * configure, configure.in: Only attempt shadow password detection
3847: if PAM is not being used Add shadow_* variables to make shadow
3848: password detection more generic.
3849:
3850: 2005-03-18 21:46 millert
3851:
3852: * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3853: than CPPFLAGS
3854:
3855: 2005-03-12 19:27 millert
3856:
3857: * sudoers.pod: use a non-breaking space to avoid a double space
3858: after e.g.
3859:
3860: 2005-03-12 19:26 millert
3861:
3862: * sudo.pod: commna, not colon after e.g.
3863:
3864: 2005-03-12 18:43 millert
3865:
3866: * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3867: at least uses __execve() internally.
3868:
3869: 2005-03-12 12:29 millert
3870:
3871: * indent.pro: Match reality a bit more.
3872:
3873: 2005-03-12 12:27 millert
3874:
3875: * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3876:
3877: 2005-03-11 23:42 millert
3878:
3879: * pwutil.c: Store shadow password after making a local copy of
3880: struct passwd in case normal and shadow routines use the same
3881: internal buffer in libc.
3882:
3883: 2005-03-10 20:57 millert
3884:
3885: * alloc.c, logging.c: Make varargs usage consistent with the rest
3886: of the code.
3887:
3888: 2005-03-10 10:09 millert
3889:
3890: * sudo_noexec.c: Wrap more of the exec family since on Linux the
3891: others do not appear to go through the normal execve() path.
3892:
3893: 2005-03-10 09:57 millert
3894:
3895: * visudo.c: make print_unused static like proto says
3896:
3897: 2005-03-10 09:55 millert
3898:
3899: * glob.c: silence a warning on K&R systems
3900:
3901: 2005-03-10 09:51 millert
3902:
3903: * parse.c, alias.c, error.c: make this build in K&R land
3904:
3905: 2005-03-07 22:21 millert
3906:
3907: * toke.c: regen
3908:
3909: 2005-03-05 22:46 millert
3910:
3911: * ldap.c: return(foo) not return foo optimize _atobool() slightly
3912:
3913: 2005-03-05 22:40 millert
3914:
3915: * ldap.c: Use TRUE/FALSE
3916:
3917: 2005-03-05 22:31 millert
3918:
3919: * ldap.c: Reformat to match the rest of sudo's code.
3920:
3921: 2005-03-05 19:33 millert
3922:
3923: * sudo.pod: I am the primary author
3924:
3925: 2005-02-22 22:28 millert
3926:
3927: * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3928: confused too many people and really isn't needed in a
3929: configure-oriented world.
3930:
3931: 2005-02-22 22:28 millert
3932:
3933: * INSTALL: alternate -> alternative
3934:
3935: 2005-02-22 22:26 millert
3936:
3937: * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3938: have issues with TCSAFLUSH.
3939:
3940: 2005-02-22 22:16 millert
3941:
3942: * toke.l: Allow leading blanks before Defaults and Foo_Alias
3943: definitions
3944:
3945: 2005-02-22 22:14 millert
3946:
3947: * Makefile.in: fix rules to build toke.o and gram.o in devel mode
3948:
3949: 2005-02-20 13:00 millert
3950:
3951: * sudoers.pod: env_keep overrides set_logname
3952:
3953: 2005-02-20 12:57 millert
3954:
3955: * env.c: Fix disabling set_logname and make env_keep override
3956: set_logname.
3957:
3958: 2005-02-20 12:28 millert
3959:
3960: * compat.h, config.h.in, configure, configure.in: No longer need
3961: memmove()
3962:
3963: 2005-02-20 11:48 millert
3964:
3965: * env.c, sudo.c: Just clean the environment once. This assumes
3966: that any further setenv/putenv will be able to handle the fact
3967: that we replaced environ with our own malloc'd copy but all the
3968: implementations I've checked do.
3969:
3970: 2005-02-15 23:16 millert
3971:
3972: * env.c, sudo.c: In -i mode, base the value of insert_env()'s
3973: dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
3974: into rebuild_env()
3975:
3976: 2005-02-13 00:33 millert
3977:
3978: * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
3979: and prev_user into init_vars() since user_shell at least is
3980: needed there.
3981:
3982: 2005-02-12 18:51 millert
3983:
3984: * Makefile.in: fix devel builds
3985:
3986: 2005-02-12 18:46 millert
3987:
3988: * check.c, sudo.c: Fix some printf format mismatches on error.
3989:
3990: 2005-02-12 18:33 millert
3991:
3992: * configure, gram.c, toke.c: regen
3993:
3994: 2005-02-12 17:56 millert
3995:
3996: * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
3997: alloc.c, check.c, closefrom.c, compat.h, configure.in,
3998: defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
3999: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4000: interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4001: match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4002: set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4003: strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4004: sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4005: utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4006: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4007: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4008: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4009: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4010: emul/utime.h: Update copyright years.
4011:
4012: 2005-02-12 16:46 millert
4013:
4014: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4015: version 1.7
4016:
4017: 2005-02-12 16:16 millert
4018:
4019: * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4020: entries.
4021:
4022: 2005-02-11 18:06 millert
4023:
4024: * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4025: to warn about printf-like format mismatches
4026:
4027: 2005-02-10 00:16 millert
4028:
4029: * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4030: generated from cvs logs
4031:
4032: 2005-02-10 00:03 millert
4033:
4034: * set_perms.c: Use warning/error instead of perror/fatal.
4035:
4036: 2005-02-09 23:13 millert
4037:
4038: * config.guess: Update OpenBSD section
4039:
4040: 2005-02-09 23:10 millert
4041:
4042: * UPGRADE: Add upgrading noted for 1.7
4043:
4044: 2005-02-09 23:00 millert
4045:
4046: * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4047: environment, just prune out entries based on the env_delete and
4048: env_check lists. Base building up the new environment on the
4049: current environment and the variables we removed initially.
4050:
4051: 2005-02-09 22:23 millert
4052:
4053: * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4054: if locales are supported, just to be safe.
4055:
4056: 2005-02-09 22:19 millert
4057:
4058: * toke.c, toke.l: Cast argument to ctype functions to unsigned
4059: char.
4060:
4061: 2005-02-07 22:56 millert
4062:
4063: * env.c: correct value for DID_USER
4064:
4065: 2005-02-07 22:55 millert
4066:
4067: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4068: <compat.h> not "compat.h"
4069:
4070: 2005-02-07 22:51 millert
4071:
4072: * defaults.c: Reset the environment by default.
4073:
4074: 2005-02-07 22:50 millert
4075:
4076: * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4077: malloc an new vector if execve() fails.
4078:
4079: 2005-02-06 23:16 millert
4080:
4081: * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4082: execve(2) and wrap the command in sh if we get ENOEXEC.
4083:
4084: 2005-02-05 23:01 millert
4085:
4086: * sudo_noexec.c: Only include time.h on systems that lack struct
4087: timespec which gets defind in compat.h (using time_t).
4088:
4089: 2005-02-05 22:59 millert
4090:
4091: * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4092: w/o struct timespec.
4093:
4094: 2005-02-05 22:56 millert
4095:
4096: * configure, compat.h, config.h.in, configure.in: use bcopy on
4097: systems w/o memmove
4098:
4099: 2005-02-05 22:31 millert
4100:
4101: * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4102: so limit its use to gcc >= 2.8.
4103:
4104: 2005-02-05 21:21 millert
4105:
4106: * Makefile.in: Add explicit rule to build sudo_noexec.lo
4107:
4108: 2005-02-05 17:56 millert
4109:
4110: * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4111: pointed out a bunch of missed dependencies.
4112:
4113: 2005-02-05 13:18 millert
4114:
4115: * TROUBLESHOOTING: Help for PAM when account section is missing
4116:
4117: 2005-02-05 13:01 millert
4118:
4119: * auth/pam.c: Give user a clue when there is a missing "account"
4120: section in the PAM config.
4121:
4122: 2005-02-05 10:22 millert
4123:
4124: * auth/pam.c: Better error handling.
4125:
4126: 2005-02-05 09:57 millert
4127:
4128: * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4129: CPPFLAGS so it takes effect as early as possible. Silences a
4130: warning about isblank() on linux.
4131:
4132: 2005-02-04 21:49 millert
4133:
4134: * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4135: number of args to be passed to log_error().
4136:
4137: 2005-01-31 23:03 millert
4138:
4139: * pwutil.c: Don't try to destroy a tree we didn't create.
4140:
4141: 2005-01-27 10:42 millert
4142:
4143: * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4144: env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4145: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4146: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4147: parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4148: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4149: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4150: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4151: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4152: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4153: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4154: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4155: rcsids
4156:
4157: 2005-01-21 10:34 millert
4158:
4159: * configure, configure.in: Fix error message when mixing invalid
4160: auth types
4161:
4162: 2005-01-21 10:32 millert
4163:
4164: * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4165: default if the OS supports them.
4166:
4167: 2005-01-21 10:29 millert
4168:
4169: * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4170:
4171: 2005-01-21 10:29 millert
4172:
4173: * configure.in: Better checking for conflicting authentication
4174: methods Display the authentication methods used at the end of
4175: configure Rename --with-authenticate -> --with-aixauth Use
4176: --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4177: default on systems that support them unless disabled. Add
4178: OSMAJOR variable that replaces old OSREV; now OSREV has full
4179: version number
4180:
4181: 2005-01-17 19:40 millert
4182:
4183: * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4184:
4185: 2005-01-14 13:35 millert
4186:
4187: * configure.in: Replace: test -n "$FOO" || FOO="bar"
4188:
4189: With: : ${FOO='bar'}
4190:
4191: 2005-01-09 18:58 millert
4192:
4193: * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4194: only call private passwd/group routines when using a nonstandard
4195: passwd/group file.
4196:
4197: 2005-01-06 10:34 millert
4198:
4199: * CHANGES: sync
4200:
4201: 2005-01-05 22:16 millert
4202:
4203: * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4204: fields so add getpwent()/getgrent() functions and call those.
4205:
4206: 2005-01-05 17:29 millert
4207:
4208: * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4209:
4210: 2005-01-05 17:18 millert
4211:
4212: * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4213: in the clean target Add devdir variable and use it to specify the
4214: path to parser sources
4215:
4216: 2005-01-05 17:17 millert
4217:
4218: * configure: regen
4219:
4220: 2005-01-05 17:17 millert
4221:
4222: * configure.in: Add a devdir variables that defaults to $(srcdir)
4223: and is set to . if --devel was specified. Allows for proper
4224: dependecies building the parser.
4225:
4226: 2005-01-05 14:50 millert
4227:
4228: * testsudoers.c: Add support for custom passwd/group files.
4229:
4230: 2005-01-05 14:47 millert
4231:
4232: * Makefile.in: Build private copy of pwutil.o for testsudoers with
4233: MYPW defined so it uses our own passwd/group routines.
4234:
4235: 2005-01-05 14:46 millert
4236:
4237: * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4238: sudo_setspent/sudo_endspent stubs instead. We can now just use
4239: the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4240: about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4241:
4242: 2005-01-05 14:44 millert
4243:
4244: * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4245: Use global buffers for passwd/group structs Rename functions from
4246: sudo_* to my_*
4247:
4248: 2005-01-05 14:43 millert
4249:
4250: * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4251:
4252: 2005-01-05 14:42 millert
4253:
4254: * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4255: instead.
4256:
4257: 2005-01-05 14:41 millert
4258:
4259: * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4260: getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4261: are no longer needed. Also add preprocessor magic to use private
4262: versions of the passwd and group routines if MYPW is defined (for
4263: use by testsudoers).
4264:
4265: 2005-01-04 22:40 millert
4266:
4267: * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4268: if there are fields we don't handle they end up as 0.
4269:
4270: 2005-01-04 20:10 millert
4271:
4272: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4273: pwutil.c
4274:
4275: 2005-01-04 20:09 millert
4276:
4277: * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4278: variables for better readability.
4279:
4280: 2005-01-04 20:08 millert
4281:
4282: * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4283: that support alternate passwd and group files.
4284:
4285: 2005-01-04 20:07 millert
4286:
4287: * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4288: its own file. This allows visudo and testsudoers to use the
4289: pw/gr cache too.
4290:
4291: 2005-01-01 19:31 millert
4292:
4293: * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4294: based on the terminal width.
4295:
4296: 2005-01-01 12:41 millert
4297:
4298: * match.c, visudo.c, testsudoers.c: Only check group vector in
4299: usergr_matches() if we are matching the invoking or list user.
4300: Always check the group members, even if there was a group vector.
4301:
4302: 2004-12-17 17:24 millert
4303:
4304: * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4305:
4306: 2004-12-17 13:12 millert
4307:
4308: * CHANGES, TODO: checkpoint
4309:
4310: 2004-12-16 14:20 millert
4311:
4312: * sudo.c: sort usage
4313:
4314: 2004-12-16 14:20 millert
4315:
4316: * sudo.pod: Sort command line options
4317:
4318: 2004-12-16 13:33 millert
4319:
4320: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4321: sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4322: start closing at a point other than 3. Add closefrom_override
4323: sudoers option and -C sudo flag to allow the user to specify a
4324: different closefrom starting point.
4325:
4326: 2004-12-16 13:25 millert
4327:
4328: * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4329:
4330: 2004-12-15 22:55 millert
4331:
4332: * LICENSE: no more UCB strcasecmp
4333:
4334: 2004-12-15 22:54 millert
4335:
4336: * strcasecmp.c: replace BSD licensed one with version derived from
4337: pdksh
4338:
4339: 2004-12-09 21:07 millert
4340:
4341: * sudo.c: Fix last commit.
4342:
4343: 2004-12-09 19:26 millert
4344:
4345: * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4346: to /dev/null if not.
4347:
4348: 2004-12-03 13:57 millert
4349:
4350: * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4351:
4352: 2004-12-03 13:52 millert
4353:
4354: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4355: Use TIME_WITH_SYS_TIME
4356:
4357: 2004-12-03 13:48 millert
4358:
4359: * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4360:
4361: 2004-12-02 11:18 millert
4362:
4363: * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4364: being set unconditionally on darwin. From Toby Peterson.
4365:
4366: 2004-12-02 10:40 millert
4367:
4368: * getspwuid.c: Check rbinsert() return value. In the case of faked
4369: up entries there is usually a negative response cached that we
4370: need to overwrite.
4371:
4372: In pwfree() don't try to zero out a NULL pw_passwd pointer.
4373:
4374: 2004-12-02 09:53 millert
4375:
4376: * mon_systrace.c: Use the double fork trick to avoid the monitor
4377: process being waited for by the main program run through sudo.
4378:
4379: 2004-11-29 12:52 millert
4380:
4381: * sudo.c: Call initgroups() in -U mode so group matches work
4382: normally.
4383:
4384: 2004-11-29 12:34 millert
4385:
4386: * def_data.h, mkdefaults: Don't print a trailing comma for the last
4387: entry in enum def_tupple
4388:
4389: 2004-11-28 16:08 millert
4390:
4391: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4392: lecture, listpw and verifypw are used in boolean context.
4393:
4394: 2004-11-28 16:05 millert
4395:
4396: * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4397: context should be "all", not "any".
4398:
4399: 2004-11-26 14:21 millert
4400:
4401: * def_data.in, defaults.c: Allow tuples that can be used as
4402: booleans to be used as boolean TRUE. In this case the 2nd
4403: possible value of the tuple is used for TRUE.
4404:
4405: 2004-11-25 12:23 millert
4406:
4407: * configure, configure.in: Correct the test for 2-parameter
4408: timespecsub
4409:
4410: 2004-11-25 12:20 millert
4411:
4412: * sudo.h: Add strub struct definitions for passwd, timeval and
4413: timespec
4414:
4415: 2004-11-25 12:09 millert
4416:
4417: * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4418: check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4419: fix a typo in the gettimeofday check.
4420:
4421: 2004-11-24 16:44 millert
4422:
4423: * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4424: for visudo and testsudoers.
4425:
4426: 2004-11-24 16:31 millert
4427:
4428: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4429: option to use in conjunction with -l instead of -u. Add support
4430: for "sudo -l command" to test a specific command.
4431:
4432: 2004-11-24 16:28 millert
4433:
4434: * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4435: it has not been set. Previously it was set by sudo "ALL" in the
4436: parser but at that point the fully-qualified pathname has not yet
4437: been found.
4438:
4439: 2004-11-23 18:18 millert
4440:
4441: * parse.c, testsudoers.c: Correctly handle multiple privileges per
4442: userspec and runas inheritence.
4443:
4444: 2004-11-21 14:09 millert
4445:
4446: * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4447: init_defaults.
4448:
4449: 2004-11-19 18:04 millert
4450:
4451: * toke.c, toke.l: make per-command defaults work with sudoedit
4452:
4453: 2004-11-19 18:00 millert
4454:
4455: * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4456: FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4457: approriate defaults variable.
4458:
4459: 2004-11-19 17:09 millert
4460:
4461: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4462: Document per-command Defaults.
4463:
4464: 2004-11-19 16:35 millert
4465:
4466: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4467: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4468: command-specific Defaults entries. E.g.
4469: Defaults!/usr/bin/vi noexec
4470:
4471: 2004-11-19 15:03 millert
4472:
4473: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4474: occurence of user_matches() -> runas_matches() missed previously
4475: runas_matches(), host_matches() and cmnd_matches() only really
4476: need to pass in a list of members. user_matches() still needs to
4477: pass in a passwd struct because of "sudo -l"
4478:
4479: 2004-11-19 14:46 millert
4480:
4481: * parse.c: Check def_authenticate, def_noexec and def_monitor when
4482: setting return flags. XXX May be better to just set the defaults
4483: directly and get rid of those flags.
4484:
4485: 2004-11-19 13:39 millert
4486:
4487: * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4488: error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4489: getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4490: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4491: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4492: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4493: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4494: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4495: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4496: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4497: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4498: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4499: <config.h> Not: #include "config.h" That way we get the correct
4500: config.h when build dir != src dir
4501:
4502: 2004-11-19 13:30 millert
4503:
4504: * Makefile.in: Back out part of rev 1.263; fix -I order
4505:
4506: 2004-11-19 13:12 millert
4507:
4508: * toke.c, toke.l: More robust parsing if #include; could be much
4509: better still.
4510:
4511: 2004-11-19 12:55 millert
4512:
4513: * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4514: consistent.
4515:
4516: 2004-11-19 12:35 millert
4517:
4518: * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4519: routines out into their own file.
4520:
4521: 2004-11-19 12:32 millert
4522:
4523: * error.h: __attribute__ is already defined in compat.h
4524:
4525: 2004-11-19 12:30 millert
4526:
4527: * visudo.c: quit() should not be __noreturn__ as it is non-void on
4528: some platforms.
4529:
4530: 2004-11-19 12:24 millert
4531:
4532: * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4533: error/warning functions like err/warn but that call an additional
4534: cleanup routine in the error case. This means we no longer need
4535: to compile a special version of alloc.o for visudo.
4536:
4537: 2004-11-19 11:54 millert
4538:
4539: * parse.h: Clarify comments about the data structures
4540:
4541: 2004-11-18 15:28 millert
4542:
4543: * visudo.c: Add support for VISUAL and EDITOR containing command
4544: line args. If env_editor is not set any args in VISUAL and
4545: EDITOR are ignored. Arguments are also now supported in
4546: def_editor.
4547:
4548: 2004-11-17 14:25 millert
4549:
4550: * parse.h: alias_matches() is no more
4551:
4552: 2004-11-17 14:09 millert
4553:
4554: * CHANGES, TODO: sync
4555:
4556: 2004-11-17 13:19 millert
4557:
4558: * Makefile.in: When regenerating the parser, don't replace gram.h
4559: unless it has changed.
4560:
4561: 2004-11-17 11:56 millert
4562:
4563: * Makefile.in: remove Makefile.binary for distclean
4564:
4565: 2004-11-17 11:18 millert
4566:
4567: * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4568: to make sure we can't overflow new_env.
4569:
4570: 2004-11-17 10:33 millert
4571:
4572: * sudo_edit.c: paranoia when stripping trailing slashes from
4573: tempdir.
4574:
4575: 2004-11-16 19:00 millert
4576:
4577: * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4578:
4579: 2004-11-16 18:59 millert
4580:
4581: * configure, configure.in, config.h.in, sudo.c: Add configure check
4582: for getgroups()
4583:
4584: 2004-11-16 18:55 millert
4585:
4586: * ldap.c: Use supplementary group vector in struct sudo_user.
4587:
4588: 2004-11-16 18:40 millert
4589:
4590: * match.c: Only do string comparisons on the group members if there
4591: is no supplemental group list.
4592:
4593: 2004-11-16 16:10 millert
4594:
4595: * CHANGES, TODO: sync
4596:
4597: 2004-11-16 15:54 millert
4598:
4599: * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4600: trailing slash so chop off any trailing slashes we see and add an
4601: explicit one.
4602:
4603: 2004-11-16 12:02 millert
4604:
4605: * match.c: remove bogus XXX comment
4606:
4607: 2004-11-16 11:10 millert
4608:
4609: * match.c: Get rid of alias_matches and correctly fall through to
4610: the non-alias cases when there is no alias with the specified
4611: name.
4612:
4613: 2004-11-16 10:47 millert
4614:
4615: * getspwuid.c: Cache non-existent passwd/group entries too.
4616:
4617: 2004-11-16 10:45 millert
4618:
4619: * gram.c: regen
4620:
4621: 2004-11-15 23:32 millert
4622:
4623: * getspwuid.c: fix typo
4624:
4625: 2004-11-15 23:24 millert
4626:
4627: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4628: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4629: Implement group caching and use the passwd and group caches
4630: throughout.
4631:
4632: 2004-11-15 14:43 millert
4633:
4634: * match.c: Properly negate the return value of alias_matches() when
4635: appropriate.
4636:
4637: 2004-11-15 14:38 millert
4638:
4639: * match.c: Make hostname_matches() return TRUE for a match, else
4640: FALSE like the caller expects.
4641:
4642: 2004-11-15 13:24 millert
4643:
4644: * Makefile.in: Add missing dependencies on gram.h
4645:
4646: 2004-11-15 13:06 millert
4647:
4648: * match.c: Use runas_matches in alias_matches() now that we have
4649: it.
4650:
4651: 2004-11-15 13:00 millert
4652:
4653: * parse.c, parse.h: Expand aliases in "sudo -l" mode
4654:
4655: 2004-11-15 12:33 millert
4656:
4657: * gram.y, match.c: Use ALIAS for the member type when storing an
4658: alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4659: match.c relies on the more generic type. Expand runas_matches
4660: instead of calling user_matches() inside of it since
4661: user_matches() looks up USERALIASes, not RUNASALIASes.
4662:
4663: 2004-11-15 12:05 millert
4664:
4665: * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4666: passwd entry.
4667:
4668: 2004-11-15 10:53 millert
4669:
4670: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4671: configure.in, err.c, error.c, error.h, defaults.c, env.c,
4672: find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4673: sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4674: local error/warning functions like err/warn but that call an
4675: additional cleanup routine in the error case. This means we no
4676: longer need to compile a special version of alloc.o for visudo.
4677:
4678: 2004-11-15 09:59 millert
4679:
4680: * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4681: since the latter checks for "#uid".
4682:
4683: 2004-11-15 09:53 millert
4684:
4685: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4686: db entries in 2 reb-black trees; one indexed by uid, the other by
4687: user name. The data returned from the cache should be considered
4688: read-only and is destroyed by sudo_endpwent().
4689:
4690: 2004-11-15 09:50 millert
4691:
4692: * match.c: add cast to uid_t
4693:
4694: 2004-11-15 09:49 millert
4695:
4696: * gram.y: missing free in alias_destroy
4697:
4698: 2004-11-15 09:49 millert
4699:
4700: * redblack.c: Can't use rbapply() for rbdestroy since the
4701: destructor is passed a data pointer, not a node pointer.
4702:
4703: 2004-11-14 23:06 millert
4704:
4705: * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4706: versions of setpwent() and endpwent() that set/end the shadow
4707: password file too.
4708:
4709: 2004-11-14 22:55 millert
4710:
4711: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4712: visudo.c: Store aliases in a red-black tree.
4713:
4714: 2004-11-14 22:52 millert
4715:
4716: * Makefile.in, redblack.c, redblack.h: red-black tree
4717: implementation
4718:
4719: 2004-11-14 22:37 millert
4720:
4721: * visudo.c: Edit all sudoers file if there were unused or undefined
4722: aliases and we are in strict mode.
4723:
4724: 2004-11-12 11:19 millert
4725:
4726: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4727: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4728: Bring back the "secure_path" Defaults option now that Defaults
4729: take effect before the path is searched.
4730:
4731: 2004-11-11 12:22 millert
4732:
4733: * logging.c, parse.c: A user can always list their own entries,
4734: even with -u. Better error message when failing to list another
4735: user's entries.
4736:
4737: 2004-11-11 12:12 millert
4738:
4739: * parse.c, sudo.c, sudo.h: The syntax to list another user's
4740: entries is now "-u otheruser -l". Only root or users with sudo
4741: "ALL" may list other user's entries.
4742:
4743: 2004-11-11 11:30 millert
4744:
4745: * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4746: SECURITY NOTES
4747:
4748: 2004-11-11 11:25 millert
4749:
4750: * env.c: strip CDPATH too
4751:
4752: 2004-11-11 11:20 millert
4753:
4754: * env.c: strip exported bash functions from the environment.
4755:
4756: 2004-10-27 12:16 millert
4757:
4758: * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4759: variables for real commands and sudoedit. This avoids a
4760: confusing message when a user tries "sudo -l" or "sudo -v" and is
4761: denied.
4762:
4763: 2004-10-27 12:06 millert
4764:
4765: * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4766: appending lists too
4767:
4768: 2004-10-26 18:39 millert
4769:
4770: * logging.c: Convert some bitwise AND to ISSET
4771:
4772: 2004-10-26 18:29 millert
4773:
4774: * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4775:
4776: 2004-10-26 18:29 millert
4777:
4778: * CHANGES, TODO: sync
4779:
4780: 2004-10-26 18:28 millert
4781:
4782: * BUGS: new parser fixes most of the outstanding bugs
4783:
4784: 2004-10-26 18:27 millert
4785:
4786: * configure: regen
4787:
4788: 2004-10-26 18:26 millert
4789:
4790: * visudo.c: Rework for the new parser. Now checks for unused
4791: aliases in sudoers.
4792:
4793: 2004-10-26 18:25 millert
4794:
4795: * testsudoers.c: Rewrite for the new parser. Now supports a -d
4796: flag (dump) and adds a -h flag (host). It now defaults to the
4797: local hostname unless otherwise specified.
4798:
4799: 2004-10-26 18:23 millert
4800:
4801: * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4802: parse.h)
4803:
4804: 2004-10-26 18:22 millert
4805:
4806: * sudo.c: Update for new parse. We now call find_path() *after* we
4807: have updated the global defaults based on sudoers. Also adds
4808: support for listing other user's privs if you are root.
4809:
4810: 2004-10-26 18:21 millert
4811:
4812: * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4813: rewind().
4814:
4815: 2004-10-26 18:20 millert
4816:
4817: * logging.c, logging.h: Add NO_STDERR flag.
4818:
4819: 2004-10-26 18:19 millert
4820:
4821: * ldap.c: Split sudo_ldap_check() into three pieces:
4822: sudo_ldap_open(), udo_ldap_update_defaults() and
4823: sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4824: default options, find the command in the user's path, and then
4825: check whether the user is allowed to run it. The important thing
4826: here is that the default runas user may be specified as a default
4827: option and that needs to be set before we search for the command.
4828:
4829: 2004-10-26 18:17 millert
4830:
4831: * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4832: warning.
4833:
4834: 2004-10-26 18:16 millert
4835:
4836: * defaults.h: Add prototype for update_defaults()
4837:
4838: 2004-10-26 18:16 millert
4839:
4840: * defaults.c: Don't warn about line numbers now that we operate on
4841: a set of data structures (or LDAP) and not a file.
4842:
4843: 2004-10-26 18:15 millert
4844:
4845: * config.h.in: No long use lsearch()
4846:
4847: 2004-10-26 18:14 millert
4848:
4849: * Makefile.in: Update for new and changed file names.
4850:
4851: 2004-10-26 18:14 millert
4852:
4853: * LICENSE: no more BSD lsearch.c
4854:
4855: 2004-10-26 18:14 millert
4856:
4857: * match.c: foo_matches() routines now live in match.c Added
4858: user_matches(), runas_matches(), host_matches(), cmnd_matches()
4859: and alias_matches() that operate on the parsed sudoers file.
4860:
4861: 2004-10-26 18:12 millert
4862:
4863: * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4864: -> switch_buffer() WORD no longer needs to exclude '@' kill
4865: yywrap()
4866:
4867: 2004-10-26 18:10 millert
4868:
4869: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4870: Rewritten parser that converts sudoers into a set of data
4871: structures. This eliminates ordering issues and makes it
4872: possible to apply sudoers Defaults entries before searching for
4873: the command.
4874:
4875: 2004-10-26 18:09 millert
4876:
4877: * configure.in, lsearch.c, emul/search.h: We won't be using
4878: lsearch() any longer.
4879:
4880: 2004-10-26 18:07 millert
4881:
4882: * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4883: has no entry.
4884:
4885: 2004-10-26 16:09 millert
4886:
4887: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4888: visudo.man.in: regen
4889:
4890: 2004-10-26 16:09 millert
4891:
4892: * visudo.pod: Update warnings to match new visudo
4893:
4894: 2004-10-26 16:08 millert
4895:
4896: * sudoers.pod: The new parser doesn't have the old ordering
4897: constraints.
4898:
4899: 2004-10-26 16:08 millert
4900:
4901: * sudo.pod: Document that -l now takes an optional username
4902: argument
4903:
4904: 2004-10-25 13:44 millert
4905:
4906: * RUNSON: AIX 5.2.0.0 works
4907:
4908: 2004-10-25 13:38 millert
4909:
4910: * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4911: instead. Fixes a compilation problem with Solaris 9's native
4912: LDAP.
4913:
4914: Set FLAG_MONITOR when needed.
4915:
4916: 2004-10-23 13:32 millert
4917:
4918: * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4919: match the traced process. Fixes relative paths.
4920:
4921: 2004-10-21 12:31 millert
4922:
4923: * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4924:
4925: 2004-10-13 12:52 millert
4926:
4927: * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4928: requires set_reuid() or setresuid()
4929:
4930: 2004-10-13 12:46 millert
4931:
4932: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4933: configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4934: saved uids; they aren't worth bothering with.
4935:
4936: 2004-10-07 16:23 millert
4937:
4938: * glob.c: remove call to issetugid()
4939:
4940: 2004-10-07 14:57 millert
4941:
4942: * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
4943: wildcards. Now that we use glob() the bug is fixed.
4944:
4945: 2004-10-07 14:52 millert
4946:
4947: * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
4948: and stat each result that matches the basename of the user's
4949: command. This makes "cd /usr/bin ; sudo ./blah" work when
4950: sudoers allows /usr/bin/blah. Fixes bug #143.
4951:
4952: 2004-10-07 14:27 millert
4953:
4954: * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
4955: for extended glob (GLOB_TILDE and GLOB_BRACE)
4956:
4957: 2004-10-07 12:59 millert
4958:
4959: * config.h.in, configure, configure.in: Check for a glob() that
4960: supports GLOB_BRACE and GLOB_TILDE
4961:
4962: 2004-10-07 12:51 millert
4963:
4964: * LICENSE: reference glob
4965:
4966: 2004-10-07 12:50 millert
4967:
4968: * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
4969: some unneeded extensions removed.
4970:
4971: 2004-10-05 17:26 millert
4972:
4973: * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
4974: fail. It probably means we are out of space in the stack gap...
4975:
4976: 2004-10-05 17:20 millert
4977:
4978: * CHANGES: sync
4979:
4980: 2004-10-05 16:53 millert
4981:
4982: * mon_systrace.c: Take a stab at ldap sudoers support here.
4983:
4984: 2004-10-05 15:13 millert
4985:
4986: * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
4987: SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
4988: inadvertanly kill itself.
4989:
4990: 2004-10-05 14:21 millert
4991:
4992: * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
4993:
4994: 2004-10-05 14:15 millert
4995:
4996: * mon_systrace.c: When modifying the environment, don't replace
4997: envp when we can get away with just rewriting pointers in the
4998: traced process.
4999:
5000: 2004-10-05 13:46 millert
5001:
5002: * mon_systrace.c, mon_systrace.h: Add environment updating via
5003: STRIOCINJECT (if available).
5004:
5005: 2004-10-05 10:22 millert
5006:
5007: * sudoers.cat, sudoers.man.in: regen
5008:
5009: 2004-10-04 16:15 millert
5010:
5011: * lex.yy.c: regen
5012:
5013: 2004-10-04 16:15 millert
5014:
5015: * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5016: not yyless(1)
5017:
5018: 2004-10-04 12:09 millert
5019:
5020: * mon_systrace.c: Include file is now mon_systrace.h
5021:
5022: 2004-10-04 12:07 millert
5023:
5024: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5025: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5026: sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5027: tracing, it is now "monitoring" which should be more a obvious
5028: name to non-hackers.
5029:
5030: 2004-10-01 15:06 millert
5031:
5032: * mon_systrace.c, mon_systrace.h: Fix some XXX
5033:
5034: 2004-10-01 14:30 millert
5035:
5036: * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5037: 1024 as the max # of entries (the max that systrace(4) allows).
5038:
5039: Only need to use SYSTR_POLICY_ASSIGN once
5040:
5041: Change check_syscall() -> find_handler() and have it return the
5042: handler instead of just running it. We need this since handler
5043: now have two parts: one part that generates and answer and
5044: another that gets called after the answer is accepted (to do
5045: logging).
5046:
5047: Add some missing check_exec for emul execv
5048:
5049: 2004-10-01 10:58 millert
5050:
5051: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
1.6 ! millert 5052: $Sudo$ tags.
1.1 millert 5053:
5054: 2004-10-01 10:47 millert
5055:
5056: * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5057:
5058: 2004-09-30 20:46 millert
5059:
5060: * Makefile.in: add trace_systrace.o dependency
5061:
5062: 2004-09-30 19:00 millert
5063:
5064: * configure, configure.in: Also look for systrace.h in
5065: /usr/include/linux
5066:
5067: 2004-09-30 18:27 millert
5068:
5069: * mon_systrace.c, mon_systrace.h: Move all struct defs and
5070: prototypes into trace_systrace.h and mark all but
5071: systace_attach() static.
5072:
5073: 2004-09-30 18:14 millert
5074:
5075: * mon_systrace.c, mon_systrace.h: Add support for tracing
5076: emulations. At the moment, all emulations are compiled in. It
5077: might make sense to #ifdef them in the future, though this
5078: impeeds readability.
5079:
5080: 2004-09-30 17:07 millert
5081:
5082: * Makefile.in, configure.in, configure: rename systrace.c ->
5083: trace_systrace.c
5084:
5085: 2004-09-30 15:58 millert
5086:
5087: * parse.yacc: Allow this to build with a K&R compiler again
5088:
5089: 2004-09-30 13:58 millert
5090:
5091: * TODO: sync
5092:
5093: 2004-09-30 13:55 millert
5094:
5095: * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5096:
5097: 2004-09-30 13:44 millert
5098:
5099: * visudo.c: Exit() takes a negative value to indicate it was not
5100: called via signal.
5101:
5102: 2004-09-30 13:25 millert
5103:
5104: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5105: visudo.man.in: regen
5106:
5107: 2004-09-30 13:22 millert
5108:
5109: * Makefile.in, visudo.c: Define Err() and Errx() that are like
5110: err() and errx() but call Exit() instead of exit(). Build
5111: private copy of alloc.o for visudo that calls Err() and Errx().
5112:
5113: 2004-09-29 15:22 millert
5114:
5115: * lex.yy.c: regen
5116:
5117: 2004-09-29 15:22 millert
5118:
5119: * CHANGES: sync
5120:
5121: 2004-09-29 14:41 millert
5122:
5123: * visudo.c: Overhaul visudo for editing multiple files: o visudo
5124: has been broken out into functions (more work needed here) o
5125: each file is now edited before sudoers is re-parsed o if a
5126: #include line is added that file will be edited too
5127:
5128: TODO: o cleanup temp files when exiting via err() or errx() o
5129: continue breaking things out into separate functions
5130:
5131: 2004-09-29 14:36 millert
5132:
5133: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5134: arg to open_sudoers that open_sudoers can use to indicate to the
5135: caller that the fd should not be closed when it is done with it.
5136: To be used by visudo to keep locked fds from being closed
5137: prematurely (and thus losing the lock).
5138:
5139: 2004-09-29 14:33 millert
5140:
5141: * parse.yacc, sudo.c: Add errorfile global that contains the name
5142: of the file that caused the error.
5143:
5144: 2004-09-29 14:30 millert
5145:
5146: * parse.lex: return COMMENT to yacc grammar for a #include line
5147:
5148: 2004-09-29 14:29 millert
5149:
5150: * parse.lex: Remove us of unput() in favor of yyless() which is
5151: cheaper.
5152:
5153: 2004-09-29 14:28 millert
5154:
5155: * parse.yacc: Allow an empty sudoers file.
5156:
5157: 2004-09-28 16:50 millert
5158:
5159: * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5160: doesn't do it for us.
5161:
5162: 2004-09-28 14:37 millert
5163:
5164: * lex.yy.c: regen
5165:
5166: 2004-09-28 14:36 millert
5167:
5168: * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5169: shadow the "quiet" global.
5170:
5171: 2004-09-28 14:33 millert
5172:
5173: * visudo.c: If a sudoers file includes other files, edit those too.
5174: Does not yes deal with creating the new includes files itself.
5175:
5176: 2004-09-28 14:31 millert
5177:
5178: * testsudoers.c: init_parser now takes a path
5179:
5180: 2004-09-28 14:31 millert
5181:
5182: * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5183: dealing with multiple sudoers files: o init_parser() now takes a
5184: path used to populate the sudoers global o the sudoers global is
5185: used to print the correct file in yyerror() o when switching to
5186: a new sudoers file, perserve old file name and line number
5187:
5188: 2004-09-28 14:29 millert
5189:
5190: * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5191: meaningful now that we can have multiple sudoers files.
5192:
5193: 2004-09-28 13:52 millert
5194:
5195: * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5196: sudoers_lookup() so we start at the right file position when
5197: reading include files.
5198:
5199: 2004-09-27 21:04 millert
5200:
5201: * sudoers.pod: document #include
5202:
5203: 2004-09-27 20:47 millert
5204:
5205: * lex.yy.c: regen
5206:
5207: 2004-09-27 20:47 millert
5208:
5209: * parse.lex: Add max depth of 128 for the include stack to avoid
5210: loops.
5211:
5212: Since yyerror() doesn't stop parsing, pass return values back to
5213: yylex and call yyterminate() on error.
5214:
5215: 2004-09-27 14:06 millert
5216:
5217: * sudoers.pod: document tracing
5218:
5219: 2004-09-27 14:05 millert
5220:
5221: * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5222: page
5223:
5224: 2004-09-27 12:08 millert
5225:
5226: * lex.yy.c: regen
5227:
5228: 2004-09-27 12:03 millert
5229:
5230: * parse.lex: Add support for #include in sudoers (visudo support
5231: TBD)
5232:
5233: 2004-09-27 12:02 millert
5234:
5235: * parse.yacc: make yyerror()'s argument const
5236:
5237: 2004-09-27 12:02 millert
5238:
5239: * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5240:
5241: 2004-09-27 12:01 millert
5242:
5243: * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5244: return a FILE *
5245:
5246: 2004-09-26 12:35 millert
5247:
5248: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5249: version.h: Crank version
5250:
5251: 2004-09-26 12:33 millert
5252:
5253: * Makefile.in, sudo.psf: Better HP-UX depot construction
5254:
5255: 2004-09-25 17:08 millert
5256:
5257: * mon_systrace.c: o Made children global so check_exec() can lookup
5258: a child. o Replaced uid in struct childinfo with struct passwd *
5259: (for runas) o new_child() now takes a parent pid so the runas
5260: info can be inherited o Added find_child() to lookup a child by
5261: its pid o update_child() now fills in a struct passwd o Converted
5262: the big if/else mess in set_policy to a switch o Syscalls that
5263: change uid are now "ask" so we get SYSTR_MSG_UGID events
5264:
5265: 2004-09-25 17:01 millert
5266:
5267: * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5268: to lookup the shadow password. Will be used to a struct passwd
5269: that has the shadow password already filled in.
5270:
5271: 2004-09-25 16:58 millert
5272:
5273: * mon_systrace.c: add missing increment of addr in read_string()
5274:
5275: 2004-09-25 16:15 millert
5276:
5277: * mon_systrace.c: Remove bogus call to update_child() and some
5278: cosmetic fixes
5279:
5280: 2004-09-25 16:11 millert
5281:
5282: * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5283: initialized global for simplicity If STRIOCATTACH returns EBUSY
5284: we are already being traced Check for user_args == NULL in
5285: setproctitle() call Add missing calls to STRIOCANSWER
5286:
5287: 2004-09-25 13:15 millert
5288:
5289: * sudo.c: g/c sudo_pwdup proto
5290:
5291: 2004-09-24 20:21 millert
5292:
5293: * Makefile.in, sudo.psf: Add target for building a depot file
5294:
5295: 2004-09-24 20:07 millert
5296:
5297: * mon_systrace.c: trim includes
5298:
5299: 2004-09-24 14:11 millert
5300:
5301: * lex.yy.c, sudo.tab.h: regen
5302:
5303: 2004-09-24 14:10 millert
5304:
5305: * INSTALL: document --with-systrace
5306:
5307: 2004-09-24 14:10 millert
5308:
5309: * config.h.in, configure, configure.in: Add check for setproctitle
5310:
5311: 2004-09-24 14:09 millert
5312:
5313: * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5314: it can set the error code
5315:
5316: 2004-09-24 13:30 millert
5317:
5318: * mon_systrace.c: systrace(4) support for sudo. On systems with
5319: the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5320: patches) sudo can intercept exec calls and check the exec args
5321: against the sudoers file. In other words, sudo can now control
5322: subcommands and shell escapes.
5323:
5324: 2004-09-24 13:17 millert
5325:
5326: * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5327:
5328: 2004-09-24 13:15 millert
5329:
5330: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5331: Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5332:
5333: 2004-09-24 13:13 millert
5334:
5335: * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5336: close on exec flag instead.
5337:
5338: 2004-09-24 13:11 millert
5339:
5340: * def_data.c, def_data.h, def_data.in: Add trace option
5341:
5342: 2004-09-23 20:24 millert
5343:
5344: * Makefile.in: Add systrace
5345:
5346: 2004-09-23 20:23 millert
5347:
5348: * INSTALL: SunOS /bin/sh blows up with configure
5349:
5350: 2004-09-23 20:23 millert
5351:
5352: * configure, configure.in: Include sys/param.h before systrace.h
5353:
5354: 2004-09-23 20:15 millert
5355:
5356: * configure: regen
5357:
5358: 2004-09-23 20:15 millert
5359:
5360: * pathnames.h.in: _PATH_DEV_SYSTRACE
5361:
5362: 2004-09-23 20:14 millert
5363:
5364: * configure.in: line up options in --help
5365:
5366: 2004-09-23 20:11 millert
5367:
5368: * config.h.in, configure.in: Add --with-systrace
5369:
5370: 2004-09-23 13:35 millert
5371:
5372: * configure: regen
5373:
5374: 2004-09-23 13:35 millert
5375:
5376: * aclocal.m4, configure.in: make this work with autoconf-2.59
5377:
5378: 2004-09-16 12:58 millert
5379:
5380: * sudo_edit.c: Simplify logic around open & stat of files and do
5381: sanity on edited file even if we lack fstat (still racable but
5382: worth doing).
5383:
5384: 2004-09-15 18:47 millert
5385:
5386: * HISTORY: Add support url
5387:
5388: 2004-09-15 16:11 millert
5389:
5390: * Makefile.in: versino 1.6.8p1
5391:
5392: 2004-09-15 15:20 millert
5393:
5394: * CHANGES: more changes for 1.6.8p1
5395:
5396: 2004-09-15 15:18 millert
5397:
5398: * version.h: 1.6.8p1
5399:
5400: 2004-09-15 12:16 millert
5401:
5402: * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5403: something other than a regular file.
5404:
5405: 2004-09-14 20:55 aaron
5406:
5407: * CHANGES: sync
5408:
5409: 2004-09-14 20:21 aaron
5410:
5411: * INSTALL: document --with-ldap-conf-file
5412:
5413: 2004-09-14 17:43 millert
5414:
5415: * CHANGES, ins_csops.h: political correctness strikes again
5416:
5417: 2004-09-14 15:09 millert
5418:
5419: * RUNSON: sync
5420:
5421: 2004-09-12 19:50 millert
5422:
5423: * Makefile.binary.in, Makefile.in: Install sudoedit man link
5424:
5425: 2004-09-12 14:25 millert
5426:
5427: * INSTALL: Update PAM note and mention where HP-UX users can
5428: download gcc binaries.
5429:
5430: 2004-09-12 12:08 millert
5431:
5432: * Makefile.in: libtool wants to install stuff from .libs so fake
5433: one up for binary installations.
5434:
5435: 2004-09-12 11:53 millert
5436:
5437: * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5438: -f set LIBTOOL correctly
5439:
5440: 2004-09-12 11:53 millert
5441:
5442: * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5443: sudoedit link instead of using ln -f
5444:
5445: 2004-09-12 10:22 millert
5446:
5447: * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5448: Makefile.binary.in for config.status substitution Add support for
5449: installing noexec bits
5450:
5451: 2004-09-12 10:21 millert
5452:
5453: * Makefile.in: Copy noexec bits into binary dists too No longer use
5454: my old arch script for making binary dists
5455:
5456: 2004-09-12 09:36 millert
5457:
5458: * Makefile.binary: Install sudoedit link.
5459:
5460: 2004-09-11 12:25 millert
5461:
5462: * emul/utime.h: avoid __P so there is no need for compat.h to be
5463: included
5464:
5465: 2004-09-11 12:24 millert
5466:
5467: * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5468:
5469: 2004-09-10 12:31 millert
5470:
5471: * compat.h: Fix Solatis futimes macro
5472:
5473: 2004-09-09 11:02 millert
5474:
5475: * sudo_edit.c: Rename ots -> omtim for improved readability.
5476:
5477: 2004-09-08 14:38 millert
5478:
5479: * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5480: keep the temp file open; re-opening it with the invoking user's
5481: euid is sufficient.
5482:
5483: 2004-09-08 14:36 millert
5484:
5485: * CHANGES: sync
5486:
5487: 2004-09-08 14:35 millert
5488:
5489: * sudo.cat, sudo.man.in: regen
5490:
5491: 2004-09-08 14:34 millert
5492:
5493: * sudo.pod: back out revision 1.70; it is no long applicable
5494:
5495: 2004-09-08 11:57 millert
5496:
5497: * env.c: Let the loader initialize nep
5498:
5499: 2004-09-08 11:49 millert
5500:
5501: * configure, configure.in, config.h.in: Removed unneed check for
5502: fchown Add check for gettimeofday Move autoheader template stuff
5503: into separate AH_TEMPLATE lines
5504:
5505: 2004-09-08 11:48 millert
5506:
5507: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5508: timespec throughout.
5509:
5510: 2004-09-08 11:47 millert
5511:
5512: * Makefile.in: gettime.[co]
5513:
5514: 2004-09-08 11:47 millert
5515:
5516: * gettime.c: function to return the current time in a struct
5517: timespec
5518:
5519: 2004-09-08 10:51 millert
5520:
5521: * utimes.c: Not a darpa-sponsored file.
5522:
5523: 2004-09-07 16:36 millert
5524:
5525: * compat.h, config.h.in, configure, configure.in: Add a check for
5526: struct timespec and provide it for those without.
5527:
5528: 2004-09-07 15:56 millert
5529:
5530: * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5531: st_mtim and st_mtimespec and add macros for pulling the mtime sec
5532: and nsec out of struct stat. These are used in sudo_edit() to
5533: better tell whether or not the file has changed.
5534:
5535: 2004-09-07 15:55 millert
5536:
5537: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5538: param to touch() for nsec
5539:
5540: 2004-09-07 14:06 millert
5541:
5542: * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5543: have to chown the file later. Only touch() the temp file if we
5544: can do it via the file descriptor. Don't check for modification
5545: of the temp file if we lack fstat(). Catch errors read()ing the
5546: temp file.
5547:
5548: 2004-09-07 14:04 millert
5549:
5550: * fileops.c: If path is NULL and fd == -1 return -1.
5551:
5552: 2004-09-07 13:31 millert
5553:
5554: * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5555: ones we opened so just close those in the child.
5556:
5557: 2004-09-07 13:14 millert
5558:
5559: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5560: configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5561: utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5562: in touch(), emulating as needed. Not all systems are able to
5563: support setting the times of an fd so touch() takes both an fd
5564: and a file name as arguments.
5565:
5566: 2004-09-06 21:12 aaron
5567:
5568: * env.c: Rare SEGV
5569:
5570: 2004-09-06 16:46 millert
5571:
5572: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5573: visudo.man.in: regen
5574:
5575: 2004-09-06 16:45 millert
5576:
5577: * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5578: re-order some of the sections to match the order we use in
5579: OpenBSD.
5580:
5581: 2004-09-06 15:05 aaron
5582:
5583: * env.c: Openldap ~/.ldaprc fix
5584:
5585: 2004-09-06 12:18 millert
5586:
5587: * sudo.pod: Talk about how the editor must write its changes to the
5588: original file and not just use rename(2).
5589:
5590: 2004-09-06 12:12 millert
5591:
5592: * CHANGES: sync
5593:
5594: 2004-09-06 12:11 millert
5595:
5596: * sudo_edit.c: Keep the temp file open instead of re-opening after
5597: the editor has exited.
5598:
5599: 2004-09-06 12:10 millert
5600:
5601: * sample.pam: Update for current redhat/fedora core.
5602:
5603: 2004-09-02 21:56 aaron
5604:
5605: * README.LDAP: tls_ examples
5606:
5607: 2004-09-02 00:03 aaron
5608:
5609: * ldap.c: config tls_* options
5610:
5611: 2004-08-29 11:39 millert
5612:
5613: * configure, configure.in: No need for -lcrypt when using pam.
5614:
5615: 2004-08-26 23:57 millert
5616:
5617: * configure: regen
5618:
5619: 2004-08-26 23:44 aaron
5620:
5621: * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5622: option to override LDAP_CONF
5623:
5624: 2004-08-26 22:08 aaron
5625:
5626: * ldap.c: cleanup debug message
5627:
5628: 2004-08-26 19:29 aaron
5629:
5630: * README.LDAP: more config info
5631:
5632: 2004-08-24 14:01 millert
5633:
5634: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5635: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5636: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5637: longer use gross statics in command_matches(). Also rename some
5638: variables for improved clarity.
5639:
5640: 2004-08-21 14:33 millert
5641:
5642: * INSTALL: document HP's crippled compiler deficiency.
5643:
5644: 2004-08-21 14:25 millert
5645:
5646: * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5647: descriptions. Noticed by Norihiko Murase.
5648:
5649: 2004-08-21 14:20 millert
5650:
5651: * configure, configure.in: --with-noexec takes an optional PATH
5652: argument.
5653:
5654: 2004-08-21 14:20 millert
5655:
5656: * INSTALL: document --with-noexec
5657:
5658: 2004-08-17 16:21 millert
5659:
5660: * RUNSON, TODO: sync
5661:
5662: 2004-08-17 15:11 millert
5663:
5664: * sudo_edit.c: Better warning message when sudoedit is unable to
5665: write to the destination file.
5666:
5667: 2004-08-17 14:53 millert
5668:
5669: * sudo.cat, sudo.man.in: regen
5670:
5671: 2004-08-17 14:53 millert
5672:
5673: * sudo.pod: Don't italicize the string "sudoedit"
5674:
5675: 2004-08-16 18:45 millert
5676:
5677: * HISTORY: Mention GratiSoft.
5678:
5679: 2004-08-11 14:29 millert
5680:
5681: * parse.yacc: Reset used_runas to FALSE when re-intializing the
5682: parser.
5683:
5684: 2004-08-09 19:04 millert
5685:
5686: * config.guess: Correct OpenBSD mips support
5687:
5688: 2004-08-09 17:28 millert
5689:
5690: * config.guess: Add OpenBSD/mips
5691:
5692: 2004-08-06 23:43 aaron
5693:
5694: * README.LDAP: More behavior notes
5695:
5696: 2004-08-06 23:36 aaron
5697:
5698: * README.LDAP: Updates on current behavior
5699:
5700: 2004-08-06 19:56 millert
5701:
5702: * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5703: no difference to formatted files).
5704:
5705: 2004-08-06 19:48 millert
5706:
5707: * CHANGES: new
5708:
5709: 2004-08-06 19:42 millert
5710:
5711: * sudo.c: Consistency. Use same error for bad -u #uid when
5712: targetpw is set as we do when a bad -u username is specified.
5713:
5714: 2004-08-06 19:33 millert
5715:
5716: * TODO: Add checksum idea from Steve Mancini
5717:
5718: 2004-08-06 19:32 millert
5719:
5720: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5721:
5722: 2004-08-06 19:31 millert
5723:
5724: * sudo.pod, sudoers.pod: Document the restriction on uids specified
5725: via -u when targetpw is set.
5726:
5727: 2004-08-06 19:24 millert
5728:
5729: * sudo.c: Error out when targetpw is enabled and sudo is run with
5730: -u #uid but #uid does not exist in the passwd database. We can't
5731: do target authentication when the target is not in passwd!
5732:
5733: 2004-08-05 21:16 millert
5734:
5735: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5736:
5737: 2004-08-05 21:14 millert
5738:
5739: * TODO: Some more todo for the next release.
5740:
5741: 2004-08-05 21:13 millert
5742:
5743: * INSTALL: Make it clear that PAM should be used for DCE support
5744: when possible.
5745:
5746: 2004-08-05 21:13 millert
5747:
5748: * sudoers.pod: o Document problems with wildcards and relative
5749: paths. o Make the order requirements more prominent. o Change a
5750: "set" to "reset" for clarity.
5751:
5752: 2004-08-05 14:29 millert
5753:
5754: * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5755:
5756: 2004-08-02 22:34 aaron
5757:
5758: * ldap.c: reflect changes to parse.c
5759:
5760: 2004-08-02 14:44 millert
5761:
5762: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5763: user_cmnd and user_args to command_matches(), just use the
5764: globals there. Since we keep state with statics anyway it is
5765: misleading to pretend that passing in different cmnd and
5766: cmnd_args will work.
5767:
5768: 2004-08-02 14:40 millert
5769:
5770: * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5771: pseudo-commands check for a '/' anywhere in cmnd, not just the
5772: first character.
5773:
5774: 2004-07-30 23:07 aaron
5775:
5776: * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5777: <oblin@mandrakesoft.com>
5778:
5779: 2004-07-30 22:41 aaron
5780:
5781: * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5782:
5783: 2004-07-30 22:06 aaron
5784:
5785: * README.LDAP: Sun One schema definition by
5786: Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5787:
5788: 2004-07-29 11:57 millert
5789:
5790: * CHANGES: typo
5791:
5792: 2004-07-23 16:44 millert
5793:
5794: * CHANGES: sync
5795:
5796: 2004-07-23 16:43 millert
5797:
5798: * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5799: remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5800: the parse.
5801:
5802: 2004-07-08 10:20 millert
5803:
5804: * CHANGES: PAM change
5805:
5806: 2004-07-07 21:04 aaron
5807:
5808: * ldap.c: Better debugging of ALL command
5809:
5810: 2004-07-07 20:15 millert
5811:
5812: * parse.c: When matching for "sudoedit" in sudoers check both the
5813: command the user typed *and* the command that is listed in the
5814: sudoers entry.
5815:
5816: 2004-07-04 19:59 aaron
5817:
5818: * ldap.c: Added !command feature
5819:
5820: 2004-06-28 10:51 millert
5821:
5822: * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5823: Brian Farrell
5824:
5825: 2004-06-10 23:11 millert
5826:
5827: * LICENSE: License is ISC-style, not BSD-style
5828:
5829: 2004-06-10 20:58 millert
5830:
5831: * CHANGES: sync
5832:
5833: 2004-06-10 16:54 millert
5834:
5835: * sudo.man.in, sudo.cat: regen
5836:
5837: 2004-06-10 16:53 millert
5838:
5839: * sudo.pod: o Update some out of date bits to reality o Change the
5840: shell promt in examples to bourne-shell style o Clarify some
5841: details o Add a CAVEAT about "sudo cd /foo"
5842:
5843: 2004-06-10 16:19 millert
5844:
5845: * check.c: Don't ask for a password if invoking user == target
5846: user.
5847:
5848: 2004-06-10 12:32 millert
5849:
5850: * sudo.c: typo in comment
5851:
5852: 2004-06-08 19:20 millert
5853:
5854: * sudoers.man.in, sudoers.cat: regen
5855:
5856: 2004-06-08 19:19 millert
5857:
5858: * sudoers.pod: Expand on NOEXEC a little.
5859:
5860: 2004-06-08 16:20 millert
5861:
5862: * TODO: sync
5863:
5864: 2004-06-08 15:58 millert
5865:
5866: * visudo.man.in, visudo.cat: regen
5867:
5868: 2004-06-08 15:55 millert
5869:
5870: * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5871: for runas_default being set after it has already been used.
5872:
5873: 2004-06-08 13:53 millert
5874:
5875: * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5876: has been set to TRUE or FALSE. This is more readable than
5877: checking for >=0 or < 0. Doesn't change the actual code
5878: generated.
5879:
5880: 2004-06-06 20:11 millert
5881:
5882: * sudoers.man.in, sudoers.cat: regen
5883:
5884: 2004-06-06 20:07 millert
5885:
5886: * sudoers, sudoers.pod: Correct description of where Defaults specs
5887: should go.
5888:
5889: 2004-06-06 20:02 millert
5890:
5891: * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5892: auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5893:
5894: 2004-06-06 19:58 millert
5895:
5896: * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5897: ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5898: tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5899: Remove trailing spaces, no actual code changes.
5900:
5901: 2004-06-06 16:22 millert
5902:
5903: * parse.yacc: Fix a >=0 that should be <0 that was improperly
5904: converted when UNSPEC was added.
5905:
5906: 2004-06-06 15:54 millert
5907:
5908: * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5909: to UNSPEC, not NOMATCH when resetting it.
5910:
5911: 2004-06-06 15:39 millert
5912:
5913: * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5914:
5915: 2004-06-05 13:55 millert
5916:
5917: * README.LDAP: Update for configure changes
5918:
5919: 2004-06-05 13:42 millert
5920:
5921: * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5922: respectively) and use these in parse.yacc. Also in parse.yacc
5923: initialize the *_matches vars to UNSPEC and add two macros,
5924: SETMATCH and SETNMATCH for use when setting *_matches to a value
5925: that may be NOMATCH/UNSPEC/TRUE/FALSE.
5926:
5927: 2004-06-05 11:17 millert
5928:
5929: * parse.yacc: Initialize runas to -2, not -1 since we need to be
5930: able to distinguish between the initialized value and the value
5931: of a non-match when passing along the runas value to multiple
5932: commands.
5933:
5934: The result of this is that an unmatched runas is now set to -1,
5935: not 0. This is required now that parse.c treats a FALSE value
5936: for runas as being explicitly denied.
5937:
5938: 2004-06-03 16:21 millert
5939:
5940: * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5941:
5942: 2004-06-03 12:37 millert
5943:
5944: * configure, configure.in: Add tests for what libs we need to link
5945: with for ldap and for whether or not lber.h needs to be
5946: explicitly included.
5947:
5948: 2004-06-02 20:30 aaron
5949:
5950: * ldap.c: Solaris native LDAP build fix
5951:
5952: 2004-06-01 16:56 millert
5953:
5954: * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
5955: use of an unset variable.
5956:
5957: 2004-06-01 16:56 millert
5958:
5959: * sudo.h: Add prototype for sudo_ldap_list_matches
5960:
5961: 2004-06-01 16:53 millert
5962:
5963: * compat.h, config.h.in, configure, configure.in: Better check for
5964: dirfd macro--we now set HAVE_DIRFD for the macro version too.
5965: Added check for dd_fd in `DIR' if no dirfd is found; this is now
5966: used to confitionally define the dirfd macro in compat.h.
5967:
5968: 2004-06-01 16:51 millert
5969:
5970: * closefrom.c: Only check /proc/$$/fd if we have the dirfd
5971: function/macro.
5972:
5973: 2004-06-01 15:13 millert
5974:
5975: * compat.h, config.h.in, configure, configure.in: Add a check for a
5976: dirfd() function (like Linux) and add a dirfd macro in compat.h
5977: if there is no dirfd() function or macro.
5978:
5979: 2004-06-01 14:59 millert
5980:
5981: * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
5982: needed.
5983:
5984: 2004-06-01 14:30 millert
5985:
5986: * CHANGES: Clarify closefrom() note.
5987:
5988: 2004-06-01 12:51 millert
5989:
5990: * parse.c: When checking for a command in the directory, only copy
5991: the base dir once.
5992:
5993: 2004-06-01 12:44 millert
5994:
5995: * closefrom.c: If there is a /proc/$$/fd directory, behave like the
5996: Solaris closefrom() and only close the descriptors listed
5997: therein.
5998:
5999: 2004-06-01 12:23 millert
6000:
6001: * alloc.c: compat.h guarantees INT_MAX is defined.
6002:
6003: 2004-06-01 12:23 millert
6004:
6005: * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6006: without it and remove definition of RLIM_INFINITY (now unused).
6007:
6008: 2004-05-31 21:22 millert
6009:
6010: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6011: parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6012: since the former is standardized.
6013:
6014: 2004-05-31 19:18 millert
6015:
6016: * CHANGES: sync
6017:
6018: 2004-05-31 19:10 millert
6019:
6020: * RUNSON: Add some entries that were mailed in a while ago
6021:
6022: 2004-05-31 14:16 millert
6023:
6024: * closefrom.c: o sysconf returns a long, not an int. o check for
6025: negative return value from sysconf/getdtablesize and use
6026: OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6027: without it (a fair guess...)
6028:
6029: 2004-05-30 12:25 millert
6030:
6031: * UPGRADE: Mention change in parse order for RunAs entries.
6032:
6033: 2004-05-30 12:15 millert
6034:
6035: * configure: regen
6036:
6037: 2004-05-29 18:29 millert
6038:
6039: * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6040: now takes an optional dir as a parameter
6041: o added check for ldap_initialize() and start_tls_s()
6042:
6043: 2004-05-29 14:54 millert
6044:
6045: * README.LDAP: Fix some typos, word choice and formatting issues.
6046:
6047: 2004-05-28 18:06 millert
6048:
6049: * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6050: stdio and just use read/write as it is simpler.
6051:
6052: 2004-05-28 16:27 millert
6053:
6054: * configure, configure.in: Remove hack overriding cross-compiler
6055: check. It should no longer be needed.
6056:
6057: 2004-05-28 16:26 millert
6058:
6059: * compat.h: Remove select() compat bits since we no longer use
6060: select().
6061:
6062: 2004-05-28 16:24 millert
6063:
6064: * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6065: timeout for systems that don't fully/properly implement select().
6066:
6067: 2004-05-27 19:14 millert
6068:
6069: * CHANGES: synbc
6070:
6071: 2004-05-27 19:12 millert
6072:
6073: * RUNSON: update
6074:
6075: 2004-05-27 19:12 millert
6076:
6077: * set_perms.c: Deal with systems that have no way of setting the
6078: effective uid such as nsr-tandem-nsk.
6079:
6080: 2004-05-27 19:01 millert
6081:
6082: * configure, configure.in: Define NO_SAVED_IDS if we don't find
6083: seteuid()
6084:
6085: 2004-05-27 18:21 millert
6086:
6087: * config.h.in, configure, configure.in: Add back check for
6088: setreuid() since NSK doesn't have it.
6089:
6090: 2004-05-27 15:57 millert
6091:
6092: * sudoers.cat, sudoers.man.in: regen
6093:
6094: 2004-05-27 15:56 millert
6095:
6096: * BUGS, CHANGES: sync
6097:
6098: 2004-05-27 15:55 millert
6099:
6100: * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6101: user was explicitly denied and the command matched. This fixes a
6102: long-standing bug and makes: foo machine = (ALL)
6103: /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6104:
6105: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6106:
6107: 2004-05-27 15:52 millert
6108:
6109: * sudoers.pod: Clarify mail_noperm
6110:
6111: 2004-05-19 21:25 aaron
6112:
6113: * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6114:
6115: 2004-05-17 18:32 millert
6116:
6117: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6118: sudoers.cat, visudo.cat: regen
6119:
6120: 2004-05-17 18:31 millert
6121:
6122: * TODO: sync
6123:
6124: 2004-05-17 18:31 millert
6125:
6126: * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6127: remembers these?) and add a minimal sudoedit example.
6128:
6129: 2004-05-17 18:21 millert
6130:
6131: * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6132: filesystem -> file system
6133:
6134: 2004-05-17 18:19 millert
6135:
6136: * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6137:
6138: 2004-05-17 18:10 millert
6139:
6140: * lex.yy.c: regen
6141:
6142: 2004-05-17 17:57 millert
6143:
6144: * visudo.pod: remove my email addr
6145:
6146: 2004-05-17 17:55 millert
6147:
6148: * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6149: @mansectsu@ everywhere Make man page references links with L<>
6150:
6151: 2004-05-17 16:51 millert
6152:
6153: * parse.lex: Accept quoted globbing characters and pass them
6154: verbatim for fnmatch()
6155:
6156: 2004-05-17 16:50 millert
6157:
6158: * UPGRADE: Document that /tmp/.odus is gone.
6159:
6160: 2004-05-17 16:28 millert
6161:
6162: * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6163: /tmp/.odus as a possible timestamp dir unless specifically
6164: configured to do so. Instead, if no /var/run exists, use
6165: /var/adm/sudo or /usr/adm/sudo.
6166:
6167: 2004-05-17 16:08 millert
6168:
6169: * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6170: visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6171: on patches from Tom Bates.
6172:
6173: 2004-05-16 18:47 millert
6174:
6175: * CHANGES: There was no 1.6.7p6.
6176:
6177: 2004-05-16 16:38 millert
6178:
6179: * BUGS, CHANGES: sync
6180:
6181: 2004-05-16 16:36 millert
6182:
6183: * Makefile.in: add missing files to DISTFILES
6184:
6185: 2004-05-16 16:23 millert
6186:
6187: * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6188:
6189: 2004-05-16 16:20 millert
6190:
6191: * Makefile.in: Fix some line wrap and update (c) year
6192:
6193: 2004-04-28 15:05 aaron
6194:
6195: * README.LDAP: Build Note
6196:
6197: 2004-04-06 22:03 aaron
6198:
6199: * Makefile.in: Fix install-dirs
6200:
6201: 2004-04-04 20:27 millert
6202:
6203: * visudo.c: In Exit() when used as a signal handler, emsg is a
6204: pointer so sizeof() is wrong so make it a #define instead. Also
6205: avoid using a negative exit value. Found by Aaron Campbell
6206:
6207: 2004-03-24 18:23 millert
6208:
6209: * sudoers.pod: Remove bogus sentence about uids in a User_List.
6210: Document usernames vs. uid parsing in a Runas_List.
6211:
6212: 2004-03-24 18:06 millert
6213:
6214: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6215: the user specified a uid with the -u flag and the uid exists in
6216: the passwd file, set runas_user to the name, not the uid.
6217:
6218: When comparing usernames in sudoers, if a name is really a uid
6219: (starts with '#') compare it numerically to pw_uid.
6220:
6221: 2004-03-22 13:35 millert
6222:
6223: * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6224:
6225: 2004-02-28 18:54 aaron
6226:
6227: * CHANGES, config.h.in, ldap.c: Added start_tls support
6228:
6229: 2004-02-14 18:04 millert
6230:
6231: * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6232: def_data.c, def_data.h to PARSESRCS.
6233:
6234: 2004-02-14 10:13 aaron
6235:
6236: * strlcat.c, strlcpy.c: Un-Fix last license munge
6237:
6238: 2004-02-13 16:37 millert
6239:
6240: * CHANGES, RUNSON, TODO: checkpoint
6241:
6242: 2004-02-13 16:37 millert
6243:
6244: * lex.yy.c, configure: regen
6245:
6246: 2004-02-13 16:36 millert
6247:
6248: * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6249: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6250: find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6251: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6252: interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6253: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6254: strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6255: sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6256: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6257: visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6258: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6259: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6260: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6261: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6262: emul/search.h, emul/utime.h: More to a less restrictive,
6263: ISC-style license.
6264:
6265: 2004-02-12 21:08 aaron
6266:
6267: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6268: def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6269: sudoers2ldif: Merged in LDAP Support
6270:
6271: 2004-02-08 15:53 millert
6272:
6273: * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6274: a macro.
6275:
6276: 2004-02-06 18:08 millert
6277:
6278: * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6279: already 0 so set the euid first, then just call setuid(0) to set
6280: the real uid too.
6281:
6282: 2004-02-06 14:52 millert
6283:
6284: * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6285: appropriate instead of seteuid() which may not exist.
6286:
6287: 2004-02-04 14:58 millert
6288:
6289: * LICENSE: 2004
6290:
6291: 2004-02-03 23:38 millert
6292:
6293: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6294: --with-pc-insults configure option
6295:
6296: 2004-02-03 23:32 millert
6297:
6298: * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6299:
6300: 2004-02-01 15:45 millert
6301:
6302: * sudo.man.in, sudoers.man.in: regen
6303:
6304: 2004-02-01 15:44 millert
6305:
6306: * sudoers.pod: Add a note that noexec is not a cure-all.
6307:
6308: 2004-02-01 15:20 millert
6309:
6310: * sudoers.pod: Mention that disabling "root_sudo" is pretty
6311: pointless.
6312:
6313: 2004-02-01 15:20 millert
6314:
6315: * configure, configure.in: Substitute for root_sudo in sudoers.pod
6316:
6317: 2004-02-01 15:03 millert
6318:
6319: * sudo.pod: Add sudoedit to the NAME section
6320:
6321: 2004-02-01 15:00 millert
6322:
6323: * sudoers.pod: Document that fact that setting ignore_dot in
6324: sudoers has no effect due to the fact that find_path() is called
6325: *before* sudoers is read.
6326:
6327: 2004-01-29 19:50 millert
6328:
6329: * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6330:
6331: 2004-01-29 19:42 millert
6332:
6333: * BUGS, CHANGES, TODO: sync
6334:
6335: 2004-01-29 19:42 millert
6336:
6337: * sudo.man.in: regen
6338:
6339: 2004-01-29 19:41 millert
6340:
6341: * sudo.pod: Clarify that when sudo is run by root with the
6342: SUDO_USER variable set, the sudoers lookup happens for root and
6343: not the SUDO_USER user.
6344:
6345: 2004-01-29 17:33 millert
6346:
6347: * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6348: set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6349: auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6350:
6351: 2004-01-29 16:22 millert
6352:
6353: * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6354:
6355: 2004-01-29 16:15 millert
6356:
6357: * sudo.c: Don't look at prev_user until after we've parsed sudoers
6358: and done the password check. That way, if sudo/sudoedit is run
6359: from a root process that was invoked by sudo, we check sudoers
6360: for root, not the previous user. This makes sudoedit much more
6361: useful and means that for the sudo case, we get correct logging
6362: on who actually ran the command.
6363:
6364: 2004-01-22 19:22 millert
6365:
6366: * sudo_edit.c: Add a comment describing why we need to be notified
6367: about our child stopping.
6368:
6369: 2004-01-22 16:06 millert
6370:
6371: * def_data.c, def_data.in: Update the noexec variable descriptions
6372:
6373: 2004-01-22 14:18 millert
6374:
6375: * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6376: execve()
6377:
6378: 2004-01-22 12:14 millert
6379:
6380: * sudo_noexec.c: Alas, all the world does not go through execve(2).
6381: Many systems still have an execv(2) system call, Linux 2.6
6382: provides fexecve(2) and it is not uncommon for libc to have
6383: underscore ('_') versions of the functions to be used internally
6384: by the library. Instead of stubbing all these out by hand,
6385: define a macro and let it do the work. Extra exec functions
6386: pointed out by Reznic Valery.
6387:
6388: 2004-01-21 21:57 millert
6389:
6390: * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6391: Because we do a fork() first we need to be notified when the
6392: child has been stopped and then send that same signal to ourself
6393: so the shell can do its job control thing.
6394:
6395: 2004-01-21 21:44 millert
6396:
6397: * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6398: systems out there that want to run sudo that still don't support
6399: these we can try to deal with that later.
6400:
6401: 2004-01-21 20:03 millert
6402:
6403: * lex.yy.c: regen
6404:
6405: 2004-01-21 20:00 millert
6406:
6407: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6408: -e / sudoedit
6409:
6410: 2004-01-21 19:08 millert
6411:
6412: * configure, configure.in: fix typo
6413:
6414: 2004-01-21 19:02 millert
6415:
6416: * config.h.in, configure.in: Add SET/CLR/ISSET
6417:
6418: 2004-01-21 18:55 millert
6419:
6420: * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6421: Pretty print the long usage() line to not wrap (assumes 80 char
6422: display)
6423:
6424: 2004-01-21 18:01 millert
6425:
6426: * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6427: is implied and no other flags are permitted.
6428:
6429: 2004-01-21 18:00 millert
6430:
6431: * sudo.h: Add a new flag, -e, that makes it possible to give users
6432: the ability to edit files with the editor of their choice as the
6433: invoking user, not the runas user. Temporary files are used for
6434: the actual edit and the temp file is copied over the original
6435: after the editor is done.
6436:
6437: 2004-01-21 17:25 millert
6438:
6439: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6440: flag, -e, that makes it possible to give users the ability to
6441: edit files with the editor of their choice as the invoking user,
6442: not the runas user. Temporary files are used for the actual edit
6443: and the temp file is copied over the original after the editor is
6444: done.
6445:
6446: 2004-01-21 17:06 millert
6447:
6448: * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6449: variables is set, use that to determine the invoking user's true
6450: identity. That way the proper info gets logged by someone who
6451: has done "sudo su" but still uses sudo to as root. We can't do
6452: this for non-root users since that would open up a security hole,
6453: though perhaps it would be acceptable to use getlogin(2) on OSes
6454: where this a system call (and doesn't just look in the utmp
6455: file).
6456:
6457: 2004-01-21 16:58 millert
6458:
6459: * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6460:
6461: 2004-01-21 16:57 millert
6462:
6463: * configure, config.h.in, configure.in: Add check for fchown(2)
6464:
6465: 2004-01-20 14:22 millert
6466:
6467: * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6468: set_runaspw. It is far to late to set NewArgv[0] there and will
6469: have no effect anyway as cmnd and safe_cmnd have already been
6470: set.
6471:
6472: 2004-01-20 14:18 millert
6473:
6474: * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6475: did.
6476:
6477: 2004-01-18 20:17 millert
6478:
6479: * env.c, sudo.c: In -i mode always set new environment based on the
6480: runas user's passwd entry.
6481:
6482: 2004-01-18 17:56 millert
6483:
6484: * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6485: section with usage() in sudo.c. Also sort the flags in the
6486: OPTIONS section.
6487:
6488: 2004-01-18 17:55 millert
6489:
6490: * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6491: patches from David J. MacKenzie o Sort the flags in the usage
6492: message
6493:
6494: 2004-01-18 17:22 millert
6495:
6496: * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6497: substitution.
6498:
6499: 2004-01-17 16:34 millert
6500:
6501: * sudo.c: Change euid to runas user before calling find_path().
6502: Unfortunately, though runas_user can be modified in sudoers we
6503: haven't parsed sudoers yet.
6504:
6505: 2004-01-17 16:25 millert
6506:
6507: * sudoers.man.in, sudoers.pod: Add missing defintion of
6508: Parameter_List and use single pipes in the Defaults EBNF
6509: definition.
6510:
6511: 2004-01-17 13:49 millert
6512:
6513: * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6514: don't want to reset the contents of runas_pw if the user
6515: specified a user via the -u flag.
6516:
6517: Avoid unnecessary passwd lookups in set_authpw(). In most cases
6518: we already have the info in runas_pw.
6519:
6520: 2004-01-16 18:16 millert
6521:
6522: * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6523: RedHat
6524:
6525: 2004-01-16 18:12 millert
6526:
6527: * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6528:
6529: 2004-01-16 18:10 millert
6530:
6531: * parse.c: If we can't stat the command as root, try as the runas
6532: user instead.
6533:
6534: 2004-01-16 18:09 millert
6535:
6536: * testsudoers.c, visudo.c: Add stub set_runaspw() function
6537:
6538: 2004-01-16 18:09 millert
6539:
6540: * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6541: will be used as a callback to update runas_pw when the runas user
6542: changes.
6543:
6544: 2004-01-16 18:07 millert
6545:
6546: * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6547:
6548: 2004-01-16 18:05 millert
6549:
6550: * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6551: a PERM_RUNAS that just changes the euid.
6552:
6553: 2004-01-16 18:04 millert
6554:
6555: * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6556: allocate memory in one chunk for easy free()ing. Also change it
6557: from static to extern.
6558:
6559: 2004-01-16 18:03 millert
6560:
6561: * defaults.c, defaults.h: Add callback support
6562:
6563: 2004-01-16 18:02 millert
6564:
6565: * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6566: it for runas_default
6567:
6568: 2004-01-15 15:13 millert
6569:
6570: * auth/fwtk.c: Add support for chalnecho and display server
6571: responses used by fwtk >= 2.0
6572:
6573: 2004-01-12 18:39 millert
6574:
6575: * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6576:
6577: 2004-01-12 14:03 millert
6578:
6579: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6580: sudo.h: Use closefrom() instead of doing the equivalent inline.
6581:
6582: 2004-01-12 13:55 millert
6583:
6584: * closefrom.c: closefrom(3) for systems w/o it
6585:
6586: 2004-01-09 16:29 millert
6587:
6588: * sudoers.man.in: Update from .pod file.
6589:
6590: 2004-01-09 16:26 millert
6591:
6592: * configure, configure.in: Substitute noexec_file for the sudoers
6593: man page
6594:
6595: 2004-01-09 16:24 millert
6596:
6597: * sudo.man.in, sudo.pod: Mention noexec
6598:
6599: 2004-01-09 16:16 millert
6600:
6601: * sudoers.man.in, sudoers.pod: Document noexec
6602:
6603: 2004-01-09 14:38 millert
6604:
6605: * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6606: definition from config.h to pam.c where it belongs. We can't
6607: have this in config.h since that gets included too early.
6608:
6609: 2004-01-09 14:35 millert
6610:
6611: * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6612: implementations put their headers in /usr/include/pam instead of
6613: /usr/include/security.
6614:
6615: 2004-01-09 14:32 millert
6616:
6617: * configure.in: I missed changing the EXEC macro -> EXECV here when
6618: I changed this in config.h.in and sudo.c a while ago.
6619:
6620: 2004-01-09 13:15 millert
6621:
6622: * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6623:
6624: 2004-01-09 03:29 millert
6625:
6626: * configure, configure.in: o merge the hpux case entries into a
6627: single entry w/ its own sub-case statement. o HP-UX >= 11
6628: support getspnam(), use it in preference to getprpwuid()
6629:
6630: 2004-01-09 02:58 millert
6631:
6632: * configure, configure.in: eval $shrext so that it expands nicely
6633: on MacOS X
6634:
6635: 2004-01-09 02:50 millert
6636:
6637: * Makefile.in: Don't lie about making a module, it does the wrong
6638: thing on mach
6639:
6640: 2004-01-09 02:49 millert
6641:
6642: * ltmain.sh: Remove requirement that libs must begin with "lib".
6643: They don't when we point directly at the lib using LD_PRELOAD or
6644: its equivalent.
6645:
6646: 2004-01-09 02:01 millert
6647:
6648: * acsite.m4: Disable support for c++, f77 and java. We don't need
6649: it, it takes a lot of time, and it hosed our check for shared lib
6650: support.
6651:
6652: 2004-01-09 02:00 millert
6653:
6654: * configure: regen
6655:
6656: 2004-01-09 02:00 millert
6657:
6658: * configure.in: Call AC_ENABLE_SHARED and check the status of
6659: enable_shared to know when shared libs are available.
6660:
6661: 2004-01-09 01:37 millert
6662:
6663: * acsite.m4: Duh, OpenBSD suports shared libs too
6664:
6665: 2004-01-09 01:18 millert
6666:
6667: * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6668: qualifiers.
6669:
6670: 2004-01-09 01:15 millert
6671:
6672: * configure, configure.in: o No need to check for sed, libtool
6673: config does that for us o move check for --with-noexec until
6674: after libtool magic is run so we can use $can_build_shared and
6675: $shrext
6676:
6677: 2004-01-09 01:14 millert
6678:
6679: * ltmain.sh: Don't print a bunch of crap about library installs
6680: since we are not really installing a library.
6681:
6682: 2004-01-09 00:38 millert
6683:
6684: * env.c: Make format_env() varargs Add noexec support for Darwin,
6685: MacOS X, Irix, and Tru64
6686:
6687: 2004-01-09 00:32 millert
6688:
6689: * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6690: changes: o no ldconfig in the finish step o assume no libprefix
6691: or version is needed
6692:
6693: 2004-01-09 00:15 millert
6694:
6695: * sudo_noexec.c: Fix compilation under K&R
6696:
6697: 2004-01-06 09:31 millert
6698:
6699: * CHANGES: checkpoint
6700:
6701: 2004-01-06 09:28 millert
6702:
6703: * sudo_noexec.c: stub execve() that just returns EACCES; used for
6704: noexec functionality
6705:
6706: 2004-01-06 01:42 millert
6707:
6708: * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6709: issue with generated code.
6710:
6711: 2004-01-05 16:10 millert
6712:
6713: * def_data.c, def_data.h, def_data.in: Move the environment
6714: defaults to the end and shorten a few of the descriptions.
6715:
6716: 2004-01-05 15:05 millert
6717:
6718: * configure.in, configure: no shared libs on ultris or convexos
6719:
6720: 2004-01-05 15:03 millert
6721:
6722: * Makefile.in, configure, configure.in: Build sudo_noexec shared
6723: object using libtool; could use some cleanup.
6724:
6725: 2004-01-05 14:59 millert
6726:
6727: * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6728:
6729: 2004-01-05 14:56 millert
6730:
6731: * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6732: that order is not important.
6733:
6734: 2004-01-05 12:15 millert
6735:
6736: * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6737: pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6738:
6739: 2004-01-04 22:58 millert
6740:
6741: * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6742: _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6743: option. The default value of noexec_file is set to this.
6744:
6745: 2004-01-04 21:48 millert
6746:
6747: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6748: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6749: support for preloading a shared object containing a dummy
6750: execve() function that just sets error and returns -1. This adds
6751: a "noexec_file" option to load the filename as well as a "noexec"
6752: flag to enable it unconditionally. There is also a NOEXEC tag
6753: that can be attached to specific commands and an EXEC tag to
6754: disable it.
6755:
6756: 2004-01-04 21:40 millert
6757:
6758: * mkdefaults: add missing newline to usage statement
6759:
6760: 2004-01-04 20:39 millert
6761:
6762: * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6763:
6764: 2004-01-04 20:16 millert
6765:
6766: * logging.c: Don't truncate usernames to 8 characters in the log
6767: message.
6768:
6769: 2004-01-04 20:13 millert
6770:
6771: * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6772:
6773: 2004-01-04 20:12 millert
6774:
6775: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6776: sudoers.pod: Add a new option, lecture_file, that can be used to
6777: point to a custom sudo lecture.
6778:
6779: 2003-12-31 17:46 millert
6780:
6781: * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6782: auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6783: zero_bytes() function to do the equivalent of bzero in such a way
6784: that will heopfully not be optimized away by sneaky compilers.
6785:
6786: 2003-12-31 13:35 millert
6787:
6788: * err.c: Use #ifdef __STDC__, not #if __STDC__.
6789:
6790: 2003-12-30 17:41 millert
6791:
6792: * mkdefaults: Always put at least one space between the def_* macro
6793: name and its definition.
6794:
6795: 2003-12-30 17:34 millert
6796:
6797: * configure, configure.in: Adjust code for --without-lecture to
6798: match new values.
6799:
6800: 2003-12-30 17:33 millert
6801:
6802: * visudo.man.in: regen after pasto fix
6803:
6804: 2003-12-30 17:31 millert
6805:
6806: * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6807: from a flag to a tuple.
6808:
6809: 2003-12-30 17:31 millert
6810:
6811: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6812: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6813: support for tuples in def_data.in; these are implemented as an
6814: enum type. Currently there is only a single tuple enum but in
6815: the future we may have one tuple enum per T_TUPLE entry in
6816: def_data.in. Currently listpw, verifypw and lecture are tuples.
6817: This avoids the need to have two entries (one ival, one str) for
6818: pwflags and syslog values.
6819:
6820: lecture is now a tuple with the following values: never, once,
6821: always
6822:
6823: We no longer use both an int and string entry for syslog
6824: facilities and priorities. Instead, there are logfac2str() and
6825: logpri2str() functions that get used when we need to print the
6826: string values.
6827:
6828: 2003-12-30 17:20 millert
6829:
6830: * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6831: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6832: visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6833: auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6834: auth/sudo_auth.c: Create def_* macros for each defaults value so
6835: we no longer need the def_{flag,ival,str,list,mode} macros (which
6836: have been removed). This is a step toward more flexible data
6837: types in def_data.in.
6838:
6839: 2003-12-30 15:55 millert
6840:
6841: * TODO: checkpoint
6842:
6843: 2003-12-22 21:18 millert
6844:
6845: * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6846: unusual for users to place "sudo -k" in a .logout file which can
6847: cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6848: daemon has died. Previously, this would result in useless mail
6849: and logging.
6850:
6851: 2003-12-16 13:51 millert
6852:
6853: * visudo.pod: fix pasto in VISUAL description
6854:
6855: 2003-12-09 22:09 millert
6856:
6857: * configure: regen
6858:
6859: 2003-12-09 22:08 millert
6860:
6861: * CHANGES: checkpoint
6862:
6863: 2003-12-09 22:02 millert
6864:
6865: * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6866: too
6867:
6868: 2003-08-12 16:45 millert
6869:
6870: * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6871: not already there).
6872:
6873: 2003-06-28 21:31 millert
6874:
6875: * auth/pam.c: Fix a core dump on Solaris by preserving the
6876: pam_handle_t we used during authentication for pam_prep_user().
6877: If we didn't authenticate (ie: ticket still valid), we call
6878: pam_init() from pam_prep_user(). This is something of a hack; it
6879: may be better to change the auth API and add an auth_final()
6880: function that acts like pam_prep_user().
6881:
6882: 2003-06-21 12:50 millert
6883:
6884: * set_perms.c: Add explicit declaration of printerr variable in
6885: function header (was defaulting to int which is OK but oh so K&R
6886: :-). From Theo.
6887:
6888: 2003-06-09 19:00 millert
6889:
6890: * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6891:
6892: 2003-06-09 16:07 millert
6893:
6894: * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6895: problem where the sudo process would spin eating up CPU until
6896: sendmail finished when it has to send mail.
6897:
6898: 2003-05-30 16:22 millert
6899:
6900: * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6901: disavowed it
6902:
6903: 2003-05-21 21:53 millert
6904:
6905: * parse.c: Don't assume that getgrnam() calls don't modify contents
6906: of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6907: can happen. Based on a patch from Kirk Webb.
6908:
6909: 2003-05-06 11:25 millert
6910:
6911: * configure.in: missing ;;
6912:
6913: 2003-05-06 00:53 millert
6914:
6915: * configure.in: darwin has a broken setreuid() in at least some
6916: versions
6917:
6918: 2003-05-06 00:31 millert
6919:
6920: * env.c: Fix an off by one error when reallocating the environment;
6921: Kevin Pye
6922:
6923: 2003-04-30 14:04 millert
6924:
6925: * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6926:
6927: 2003-04-28 19:30 millert
6928:
6929: * HISTORY: More info on the early days from Coggs.
6930:
6931: 2003-04-21 14:47 millert
6932:
6933: * auth/kerb5.c: remove errant semicolon that prevented compilation
6934: under heimdal
6935:
6936: 2003-04-15 20:42 millert
6937:
6938: * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6939: env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6940: goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6941: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6942: strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
6943: sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
6944: version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
6945: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6946: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6947: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6948: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
6949: on affected files
6950:
6951: 2003-04-15 20:25 millert
6952:
6953: * LICENSE: slightly different wording for the darpa credit
6954:
6955: 2003-04-15 14:37 millert
6956:
6957: * LICENSE: Add DARPA credit
6958:
6959: 2003-04-14 16:49 millert
6960:
6961: * auth/kerb5.c: Use krb5_princ_component() instead of
6962: krb5_princ_realm() for MIT Kerberos like we did before I messed
6963: things up ;-)
6964:
6965: Use krb5_principal_get_comp_string() to do the same thing w/
6966: Heimdal. I'm not sure if the component should be 0 or 1 in this
6967: case.
6968:
6969: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
6970: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
6971: should be a configure check for this I guess.
6972:
6973: 2003-04-13 15:48 millert
6974:
6975: * TROUBLESHOOTING, config.h.in, configure, configure.in,
6976: sample.sudoers: builtin -> built-in; Jason McIntyre
6977:
6978: 2003-04-13 15:45 millert
6979:
6980: * sudoers.pod: built in -> built-in; Jason McIntyre
6981:
6982: 2003-04-09 16:14 millert
6983:
6984: * CHANGES: checkpoint for 1.6.7p3
6985:
6986: 2003-04-09 16:14 millert
6987:
6988: * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
6989: Spencer. Amazingly, sudo source from 1985 is available via
6990: groups.google.com
6991:
6992: 2003-04-09 16:13 millert
6993:
6994: * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
6995: set rl.rlim_cur to 0 to turn off core dumps. This may be needed
6996: for the RLIMIT_CORE restoration on some OSes.
6997:
6998: 2003-04-04 12:46 millert
6999:
7000: * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7001:
7002: 2003-04-04 12:45 millert
7003:
7004: * config.h.in, configure, configure.in: Check for heimdal even if
7005: we found krb5-config and define HAVE_HEIMDAL.
7006:
7007: 2003-04-03 22:04 millert
7008:
7009: * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7010: The former is no longer defined by MIT kerb5 (though it used to
7011: be and indeed remains so in Heimdal).
7012:
7013: 2003-04-03 10:16 millert
7014:
7015: * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7016: duplicate) directories to "mkdir -p" since that seems to break on
7017: Tru64 Unix at least. This basically brings back what shipped
7018: with sudo 1.6.6.
7019:
7020: 2003-04-02 13:57 millert
7021:
7022: * auth/kerb5.c: Correct number of args to
7023: krb5_principal_get_realm() and fix an unclosed comment that hid
7024: the bug.
7025:
7026: 2003-04-02 13:45 millert
7027:
7028: * configure: regen
7029:
7030: 2003-04-02 13:45 millert
7031:
7032: * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7033: configure.in, version.h: ++version
7034:
7035: 2003-04-02 13:44 millert
7036:
7037: * configure.in: use krb5-config to determine Kerberos V details if
7038: it exists
7039:
7040: 2003-04-02 13:25 millert
7041:
7042: * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7043: interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7044: visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7045: auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7046: throughout. The main exception is openlog(). Since the admin
7047: may be filtering logs based on the program name in the log files,
7048: hard code this to "sudo".
7049:
7050: 2003-04-02 13:16 millert
7051:
7052: * Makefile.in: Add getprogname.c and err.c
7053:
7054: 2003-04-02 13:15 millert
7055:
7056: * configure: regen
7057:
7058: 2003-04-02 13:15 millert
7059:
7060: * configure.in, config.h.in: Add checks for getprognam(),
7061: __progname and err.h
7062:
7063: 2003-04-02 13:14 millert
7064:
7065: * err.c, emul/err.h: For systems withour err/warn functions.
7066:
7067: 2003-04-02 13:14 millert
7068:
7069: * getprogname.c: For systems neither getprogname() nor __progname;
7070: uses Argv[0].
7071:
7072: 2003-04-01 10:09 millert
7073:
7074: * CHANGES: checkpoint for 1.6.7p1
7075:
7076: 2003-04-01 10:02 millert
7077:
7078: * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7079:
7080: 2003-04-01 09:58 millert
7081:
7082: * check.c: oflow detection in expand_prompt() was faulty (false
7083: positives). The count was based on strlcat() return value which
7084: includes the length of the entire string.
7085:
7086: 2003-03-30 19:02 millert
7087:
7088: * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7089:
7090: 2003-03-24 16:09 millert
7091:
7092: * logging.c: g/c unused variable
7093:
7094: 2003-03-24 11:06 millert
7095:
7096: * configure: regen
7097:
7098: 2003-03-24 11:05 millert
7099:
7100: * configure.in: use man sections 8 and 5 for csops
7101:
7102: 2003-03-21 18:11 millert
7103:
7104: * configure: regen
7105:
7106: 2003-03-21 15:10 millert
7107:
7108: * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7109: of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7110:
7111: 2003-03-21 14:02 millert
7112:
7113: * configure: regen
7114:
7115: 2003-03-21 14:01 millert
7116:
7117: * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7118: An alternate libpath may be specified or -blibpath support can be
7119: disabled. Also change conifgure such that -blibpath is not
7120: specified if no -L libpaths were added to SUDO_LDFLAGS.
7121:
7122: 2003-03-20 22:05 millert
7123:
7124: * configure.in: add AIX blibpath support
7125:
7126: 2003-03-20 20:28 millert
7127:
7128: * INSTALL, configure.in: --with-skey and --with-opie now take an
7129: option directory argument This obsoletes a --with-csops hack
7130: (/tools/cs/skey)
7131:
7132: Also remove the remaining direct uses of "echo"
7133:
7134: 2003-03-20 17:44 millert
7135:
7136: * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7137: -lroken optional for KTH Kerberos IV and V.
7138:
7139: 2003-03-20 14:42 millert
7140:
7141: * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7142: -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7143: specified variable.
7144:
7145: 2003-03-20 14:40 millert
7146:
7147: * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7148: There is a new configure option, --with-rpath to control this
7149: behavior.
7150:
7151: 2003-03-19 23:50 millert
7152:
7153: * configure.in: for kerb4 put libdes after libkrb on the link line
7154:
7155: 2003-03-19 23:49 millert
7156:
7157: * auth/kerb4.c: typo
7158:
7159: 2003-03-19 23:33 millert
7160:
7161: * configure.in: fix kerberos lib check when a path is specified
7162:
7163: 2003-03-19 21:04 millert
7164:
7165: * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7166: reapchild after sending mail instead of doing a conditional
7167: sudo_waitpid.
7168:
7169: 2003-03-19 16:20 millert
7170:
7171: * configure: regen
7172:
7173: 2003-03-19 16:19 millert
7174:
7175: * configure.in: replace =DIR with [=DIR] where sensible
7176:
7177: 2003-03-19 16:16 millert
7178:
7179: * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7180: include/lib detection based on openssh's configure.in
7181:
7182: 2003-03-19 15:58 millert
7183:
7184: * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7185: argument.
7186:
7187: 2003-03-15 22:03 millert
7188:
7189: * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7190: says username is 32 bytes.
7191:
7192: 2003-03-15 21:18 millert
7193:
7194: * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7195: snprintf, not sprintf
7196:
7197: 2003-03-15 21:18 millert
7198:
7199: * auth/rfc1938.c: use snprintf
7200:
7201: 2003-03-15 15:37 millert
7202:
7203: * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7204: kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7205: copyright year
7206:
7207: 2003-03-15 15:31 millert
7208:
7209: * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7210: Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7211: logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7212: sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7213: visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7214: copyright year
7215:
7216: 2003-03-15 15:19 millert
7217:
7218: * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7219: with %lu
7220:
7221: 2003-03-15 15:17 millert
7222:
7223: * configure: regen
7224:
7225: 2003-03-15 15:16 millert
7226:
7227: * configure.in: correct error messages for
7228: --with-sudoers-{mode,uid,gid}
7229:
7230: 2003-03-15 15:10 millert
7231:
7232: * alloc.c: make the malloc(0) error specific to each function to
7233: aid tracking down bugs.
7234:
7235: 2003-03-15 14:49 millert
7236:
7237: * alloc.c: deal with platforms where size_t is signed and there is
7238: no SIZE_MAX or SIZE_T_MAX
7239:
7240: 2003-03-15 14:10 millert
7241:
7242: * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7243: warnings.
7244:
7245: 2003-03-15 13:02 millert
7246:
7247: * sudo.c: Use stat_sudoers macro so --with-stow can work
7248:
7249: 2003-03-15 13:01 millert
7250:
7251: * INSTALL, config.h.in, configure, configure.in: Add support for
7252: --with-stow based on patches from Robert Uhl
7253:
7254: 2003-03-15 12:51 millert
7255:
7256: * env.c: fix indentation
7257:
7258: 2003-03-15 00:21 millert
7259:
7260: * configure.in: back out rev 1.352
7261:
7262: 2003-03-14 20:11 millert
7263:
7264: * lex.yy.c: regen
7265:
7266: 2003-03-14 20:11 millert
7267:
7268: * parse.lex: use strlcpy, not strncpy
7269:
7270: 2003-03-14 19:48 millert
7271:
7272: * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7273: setusercontext() failure.
7274:
7275: 2003-03-14 19:43 millert
7276:
7277: * logging.c: use pid_t
7278:
7279: 2003-03-14 10:43 millert
7280:
7281: * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7282:
7283: 2003-03-14 10:35 millert
7284:
7285: * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7286:
7287: 2003-03-13 21:47 millert
7288:
7289: * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7290:
7291: 2003-03-13 21:38 millert
7292:
7293: * configure: regen
7294:
7295: 2003-03-13 21:38 millert
7296:
7297: * configure.in: put -ldl after -lpam, not before; fixes static
7298: linking on Linux
7299:
7300: 2003-03-13 21:17 millert
7301:
7302: * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7303: getifaddrs() case.
7304:
7305: 2003-03-13 20:24 millert
7306:
7307: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7308: sudoers.cat, visudo.cat: regen
7309:
7310: 2003-03-13 20:23 millert
7311:
7312: * Makefile.in: Preserve copyright notice from .pod file in .man.in
7313: file
7314:
7315: 2003-03-13 20:01 millert
7316:
7317: * visudo.pod: Add sudoers(5) to SEE ALSO
7318:
7319: 2003-03-13 15:27 millert
7320:
7321: * lex.yy.c: regen
7322:
7323: 2003-03-13 15:27 millert
7324:
7325: * parse.lex: Don't assume libc can realloc() a NULL string. If
7326: malloc/realloc fails, make sure we just return; yyerror() is not
7327: terminal.
7328:
7329: 2003-03-13 15:17 millert
7330:
7331: * lex.yy.c: regen
7332:
7333: 2003-03-13 15:17 millert
7334:
7335: * parse.lex: simplify fill_args a little and use strlcpy for
7336: paranoia
7337:
7338: 2003-03-13 15:00 millert
7339:
7340: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7341: testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7342: overflow. In all cases the strings were either pre-allocated to
7343: the correct size of length checks were done before the copy but a
7344: little paranoia can go a long way.
7345:
7346: 2003-03-13 12:54 millert
7347:
7348: * sudo.h: Add strlc{at,py} protos
7349:
7350: 2003-03-13 12:03 millert
7351:
7352: * env.c, interfaces.c: Use erealloc3()
7353:
7354: 2003-03-13 12:00 millert
7355:
7356: * configure: regen
7357:
7358: 2003-03-13 12:00 millert
7359:
7360: * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7361: need >=). Use memcpy() instead of strcpy() in estrdup() so this
7362: is strcpy()-free.
7363:
7364: 2003-03-13 11:58 millert
7365:
7366: * sudo.c: snprintf() a uid as %lu, not %ld to match the
7367: MAX_UID_T_LEN test in configure.
7368:
7369: 2003-03-13 11:56 millert
7370:
7371: * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7372: just unsigned.
7373:
7374: 2003-03-12 18:46 millert
7375:
7376: * sudo.c: Use snprintf() for paranoia
7377:
7378: 2003-03-12 17:16 millert
7379:
7380: * parse.yacc: Use emalloc2 and erealloc3
7381:
7382: 2003-03-12 17:08 millert
7383:
7384: * Makefile.in: strlc{at,py} for those w/o it
7385:
7386: 2003-03-12 17:07 millert
7387:
7388: * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7389:
7390: 2003-03-12 17:07 millert
7391:
7392: * config.h.in, configure, configure.in: Add stlc{at,py} for those
7393: w/o it.
7394:
7395: 2003-03-12 16:51 millert
7396:
7397: * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7398: emalloc2().
7399:
7400: 2003-03-12 16:45 millert
7401:
7402: * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7403: certain size.
7404:
7405: 2003-03-12 16:41 millert
7406:
7407: * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7408: bzero and with error/oflow checking.
7409:
7410: 2003-03-12 16:23 millert
7411:
7412: * alloc.c: Error out on malloc(0); suggested by theo
7413:
7414: 2003-03-09 19:34 millert
7415:
7416: * configure, configure.in: fix a typo; David Krause
7417:
7418: 2003-03-07 10:46 millert
7419:
7420: * sudo.pod: fix typo
7421:
7422: 2003-03-03 21:47 millert
7423:
7424: * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7425:
7426: 2003-03-01 13:20 millert
7427:
7428: * configure.in, config.h.in: not not; Anil Madhavapeddy
7429:
7430: 2003-01-23 03:03 millert
7431:
7432: * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7433:
7434: 2003-01-20 16:13 millert
7435:
7436: * parse.yacc: Add some missing ';' rule terminators that bison
7437: warns about.
7438:
7439: 2003-01-20 16:07 millert
7440:
7441: * config.sub: fix typo I introduced in last merge
7442:
7443: 2003-01-20 15:59 millert
7444:
7445: * configure: regenerate with autoconf 2.57
7446:
7447: 2003-01-20 15:58 millert
7448:
7449: * config.h.in: Add missing "$HOME"
7450:
7451: 2003-01-20 15:57 millert
7452:
7453: * configure.in: Add some more square backets to make autoconf 2.57
7454: happy
7455:
7456: 2003-01-20 14:39 millert
7457:
7458: * config.guess, config.sub, mkinstalldirs: Updates from
7459: autoconf-2.57
7460:
7461: 2003-01-17 18:10 millert
7462:
7463: * lex.yy.c, sudo.tab.h: regen
7464:
7465: 2003-01-17 18:09 millert
7466:
7467: * parse.lex, parse.yacc, sudoers.pod: Add support for
7468: Defaults>RunasUser
7469:
7470: 2003-01-06 19:10 millert
7471:
7472: * visudo.c: fclose() yyin after each yyparse() is done and use
7473: fopen() instead of using freopen().
7474:
7475: 2003-01-06 19:02 millert
7476:
7477: * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7478: It looks like the issue is that yyrestart() does not reset the
7479: start condition to INITIAL which is an issue since we parse
7480: sudoers multiple times.
7481:
7482: 2003-01-06 18:47 millert
7483:
7484: * parse.lex: Work around what appears to be a flex bug when dealing
7485: with files that lack a final newline before EOF. This adds a
7486: rule to match EOF in the non-initial states which resets the
7487: state to INITIAL and throws an error.
7488:
7489: 2003-01-06 15:06 millert
7490:
7491: * visudo.c: o The parser needs sudoers to end with a newline but
7492: some editors (emacs) may not add one. Check for a missing
7493: newline at EOF and add one if needed. o Set quiet flag during
7494: initial sudoers parse (to get options) o Move yyrestart() call
7495: and always use freopen() to open yyin after initial sudoers
7496: parse.
7497:
7498: 2002-12-15 11:24 millert
7499:
7500: * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7501: Want to set effective gid, not real gid, when reading sudoers.
7502:
7503: 2002-12-15 11:08 millert
7504:
7505: * set_perms.c: don't compile set_perms_posix if we have setreuid or
7506: setresuid
7507:
7508: 2002-12-14 14:21 millert
7509:
7510: * sudo.pod, sudoers.pod: document new prompt escapes
7511:
7512: 2002-12-14 14:15 millert
7513:
7514: * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7515: now gets collapsed to "%" as was originally intended. This also
7516: gets rid of lastchar (does lookahead instead of lookback) which
7517: should simplify the logic slightly.
7518:
7519: 2002-12-13 13:20 millert
7520:
7521: * tgetpass.c: Write the prompt *after* turning off echo to avoid
7522: some password characters being echoed on heavily-loaded machines
7523: with fast typists.
7524:
7525: 2002-12-13 13:09 millert
7526:
7527: * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7528:
7529: 2002-12-13 12:48 millert
7530:
7531: * configure.in: Fix IRIX fallout from name changes in man dir/sect
7532: Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7533: DOT edu
7534:
7535: 2002-12-13 11:33 millert
7536:
7537: * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7538: in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7539:
7540: 2002-11-28 18:43 millert
7541:
7542: * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7543: call this for us.
7544:
7545: 2002-11-26 12:09 millert
7546:
7547: * sudo.c: fix typo in comment; Pedro Bastos
7548:
7549: 2002-11-22 14:41 millert
7550:
7551: * INSTALL: document --disable-setresuid
7552:
7553: 2002-11-22 14:41 millert
7554:
7555: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7556: Sprinkle some volatile qualifiers to prevent over-enthusiastic
7557: optimizers from removing memset() calls.
7558:
7559: 2002-11-22 14:11 millert
7560:
7561: * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7562: -Wsign-compare
7563:
7564: 2002-11-22 14:09 millert
7565:
7566: * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7567: version based on setresuid() or setreuid() when possible since
7568: that allows us to support the stay_setuid option and we always
7569: know exactly what the semantics will be (various Linux kernels
7570: have broken POSIX saved uid support).
7571:
7572: 2002-11-22 14:08 millert
7573:
7574: * config.h.in, configure: regen from configure.in
7575:
7576: 2002-11-22 14:07 millert
7577:
7578: * configure.in: Add checks for setresuid() and a way to disable
7579: using it
7580:
7581: 2002-11-22 14:05 millert
7582:
7583: * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7584: or setre[ug]id(). The new set_perms stuff only uses things it
7585: knows are there.
7586:
7587: 2002-11-22 13:33 millert
7588:
7589: * sudo.c: Before exec, restore state of signal handlers to be the
7590: same as when we were initialy invoked instead of just reseting to
7591: SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7592: patch from Paul Markham.
7593:
7594: 2002-11-22 13:23 millert
7595:
7596: * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7597: message when sudo is run by root and no_root_sudo is set
7598:
7599: 2002-09-19 17:27 millert
7600:
7601: * README: update ftp link for bison
7602:
7603: 2002-07-20 08:30 millert
7604:
7605: * set_perms.c: Error out if setusercontext() fails and the runas
7606: user is not root.
7607:
7608: 2002-05-20 16:51 millert
7609:
7610: * auth/securid5.c: Fix rcsid
7611:
7612: 2002-05-20 16:50 millert
7613:
7614: * configure.in: Fix SecurID API test
7615:
7616: 2002-05-17 13:20 millert
7617:
7618: * env.c: typo in comment
7619:
7620: 2002-05-17 13:20 millert
7621:
7622: * configure.in: securid5 stuff needs pthreads. Just adding
7623: -lpthread is suboptimal but I don't see a better way at the
7624: moment.
7625:
7626: 2002-05-17 13:04 millert
7627:
7628: * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7629: Michael Stroucken
7630:
7631: 2002-05-17 13:02 millert
7632:
7633: * configure.in: Add check for SecurID 5.0 API
7634:
7635: 2002-05-08 16:46 millert
7636:
7637: * strerror.c: We actually do still need config.h to get the 'const'
7638: definition for K&R C.
7639:
7640: 2002-05-05 16:43 millert
7641:
7642: * configure: regen with autoconf 2.5.3
7643:
7644: 2002-05-05 16:25 millert
7645:
7646: * configure.in: Don't set sysconfdir to '/etc' if the user has
7647: specified a --prefix.
7648:
7649: 2002-05-05 16:14 millert
7650:
7651: * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7652: don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7653: to workaround a bug
7654:
7655: 2002-05-05 15:58 millert
7656:
7657: * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7658: dump_defaults() knows how to dump lists.
7659:
7660: 2002-05-04 21:31 millert
7661:
7662: * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7663: INSTALL.binary, README: ++version
7664:
7665: 2002-05-04 20:57 millert
7666:
7667: * sudoers.pod: document timestampowner
7668:
7669: 2002-05-04 20:45 millert
7670:
7671: * check.c: Don't call set_perms() when doing timestamp stuff unless
7672: timestamp_uid != 0.
7673:
7674: 2002-05-04 20:43 millert
7675:
7676: * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7677: testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7678: is no longer used
7679:
7680: 2002-05-03 18:48 millert
7681:
7682: * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7683: timestamp dirs. This allows the timestamp dir to be shared via
7684: NFS (though this is not recommended).
7685:
7686: 2002-05-03 18:47 millert
7687:
7688: * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7689: of the authentication timestamp dir"
7690:
7691: 2002-05-02 15:40 millert
7692:
7693: * env.c: Don't try to pre-compute the size of the new envp, just
7694: allocate space up front and realloc as needed. Changes to the
7695: new env pointer must all be made through insert_env() which now
7696: keeps track of spaced used and allocates as needed.
7697:
7698: 2002-04-26 15:12 millert
7699:
7700: * configure: regen
7701:
7702: 2002-04-26 15:12 millert
7703:
7704: * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7705:
7706: 2002-04-25 11:36 millert
7707:
7708: * INSTALL.binary, README: ++version
7709:
7710: 2002-04-25 11:35 millert
7711:
7712: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7713: visudo.man.in, configure: regen
7714:
7715: 2002-04-25 11:31 millert
7716:
7717: * CHANGES, RUNSON, TODO: Sync with 1.6.6
7718:
7719: 2002-04-25 11:30 millert
7720:
7721: * check.c: The the loop used to expand %h and %u, the lastchar
7722: variable was not being initialized. This means that if the last
7723: char in the prompt is '%' and the first char is 'h' or 'u' a
7724: extra copy of the host or user name would be copied, for which
7725: space had not been allocated.
7726:
7727: 2002-04-18 11:41 millert
7728:
7729: * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7730: version to 1.6.6
7731:
7732: 2002-04-18 11:39 millert
7733:
7734: * auth/afs.c: #undef VOID to get rid of an AFS warning
7735:
7736: 2002-04-18 11:38 millert
7737:
7738: * env.c: Use easprintf instead of emalloc + sprintf for some
7739: things.
7740:
7741: 2002-03-15 19:45 millert
7742:
7743: * lex.yy.c: regen
7744:
7745: 2002-03-15 19:44 millert
7746:
7747: * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7748: Jepeway's email address so people don't bug him ;-)
7749:
7750: 2002-03-11 22:19 millert
7751:
7752: * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7753: and also call endgrent() at the same time.
7754:
7755: 2002-02-21 22:23 millert
7756:
7757: * INSTALL: Make it clear which configure options take arguments.
7758:
7759: 2002-01-25 13:38 millert
7760:
7761: * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7762: is no RLIM_INFINITY, just pretend it is -1. This works because
7763: we only check for RLIM_INFINITY and do not set anything to that
7764: value.
7765:
7766: 2002-01-22 11:43 millert
7767:
7768: * auth/pam.c: Zero and free allocated memory when there is a
7769: conversation error.
7770:
7771: 2002-01-21 22:37 millert
7772:
7773: * auth/bsdauth.c: Use sigaction() not signal()
7774:
7775: 2002-01-21 22:26 millert
7776:
7777: * INSTALL: Mention that some linux kernels have broken POSIX saved
7778: ID support
7779:
7780: 2002-01-21 21:03 millert
7781:
7782: * CHANGES: checkpoint for 1.6.5p2
7783:
7784: 2002-01-21 21:01 millert
7785:
7786: * configure: regen
7787:
7788: 2002-01-21 21:01 millert
7789:
7790: * configure.in: Add --disable-setreuid flag
7791:
7792: 2002-01-21 21:00 millert
7793:
7794: * INSTALL: Document new --disable-setreuid option and change
7795: description for --disable-saved-ids to match new error message.
7796:
7797: 2002-01-21 21:00 millert
7798:
7799: * set_perms.c: fatal() now takes an argument that determines
7800: whether or not to call perror().
7801:
7802: 2002-01-21 20:58 millert
7803:
7804: * PORTING, TROUBLESHOOTING: Update for new error messages from
7805: set_perms()
7806:
7807: 2002-01-21 17:46 millert
7808:
7809: * auth/pam.c: Make this compile w/o warnings
7810:
7811: 2002-01-21 17:36 millert
7812:
7813: * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7814:
7815: 2002-01-21 17:25 millert
7816:
7817: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7818: was not zeroed after use when AIX authentication, BSD
7819: authentication, FWTK or PAM was in use.
7820:
7821: 2002-01-20 14:21 millert
7822:
7823: * auth/pam.c: Avoid giving PAM a NULL password response, use the
7824: empty string instead. This avoids a log warning when the user
7825: hits ^C at the password prompt when PAM is in use.
7826:
7827: 2002-01-19 19:46 millert
7828:
7829: * auth/pam.c: Don't check the return value of pam_setcred(). In
7830: Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7831: not the return code for the setcred module. Because we haven't
7832: called pam_authenticate(), this is not set and so pam_setcred()
7833: returns PAM_PERM_DENIED.
7834:
7835: 2002-01-19 19:43 millert
7836:
7837: * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7838: and a directory.
7839:
7840: 2002-01-18 14:18 millert
7841:
7842: * configure: regen
7843:
7844: 2002-01-18 14:18 millert
7845:
7846: * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7847: has a bogus setreuid() o new NetBSD has a real setreuid() o add
7848: check for freeifaddrs() if getifaddrs() exists.
7849:
7850: 2002-01-18 14:17 millert
7851:
7852: * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7853: so add a test for that and if it is not present just use free().
7854:
7855: 2002-01-17 11:30 millert
7856:
7857: * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7858:
7859: 2002-01-17 10:56 millert
7860:
7861: * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7862: skeyaccess() denies access to normal passwords, not AUTH_FATAL
7863: (which just causes an exit).
7864:
7865: 2002-01-17 10:35 millert
7866:
7867: * visudo.c: Don't use memory after it has been freed.
7868:
7869: 2002-01-17 00:24 millert
7870:
7871: * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7872: Patch from Phillip E. Lobbes
7873:
7874: 2002-01-16 20:00 millert
7875:
7876: * BUGS: ++version
7877:
7878: 2002-01-16 19:53 millert
7879:
7880: * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7881:
7882: 2002-01-16 18:37 millert
7883:
7884: * configure: regen
7885:
7886: 2002-01-16 18:37 millert
7887:
7888: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7889: version 1.6.5
7890:
7891: 2002-01-16 18:37 millert
7892:
7893: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7894: visudo.man.in: sudo version 1.6.5
7895:
7896: 2002-01-16 16:28 millert
7897:
7898: * logging.c: o when invoking the mailer as root use a hard-coded
7899: environment that doesn't include any info from the user's
7900: environment. Basically paranoia.
7901:
7902: o Add support for the NO_ROOT_MAILER compile-time option and run
7903: the mailer as the user and not root if NO_ROOT_MAILER is
7904: defined.
7905:
7906: 2002-01-16 16:27 millert
7907:
7908: * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7909:
7910: 2002-01-16 16:26 millert
7911:
7912: * configure: regen
7913:
7914: 2002-01-16 16:26 millert
7915:
7916: * version.h: version 1.6.5
7917:
7918: 2002-01-16 16:26 millert
7919:
7920: * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7921: option to run the mailer as the user and not root.
7922:
7923: 2002-01-16 12:44 millert
7924:
7925: * CHANGES: checkpoint for 1.6.4p2
7926:
7927: 2002-01-15 19:22 millert
7928:
7929: * PORTING: Mention the "seteuid(0): Operation not permitted"
7930: problem here too just for good measure.
7931:
7932: 2002-01-15 18:43 millert
7933:
7934: * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7935: preserved from the user's environment instead of being reset
7936: based on the passwd database when the "env_reset" option was
7937: used. Now it is reset as it should be.
7938:
7939: 2002-01-15 17:47 millert
7940:
7941: * configure: regen
7942:
7943: 2002-01-15 17:47 millert
7944:
7945: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
7946: sudo.c: Add a configure option to turn off use of POSIX saved IDs
7947:
7948: 2002-01-15 15:48 millert
7949:
7950: * configure: regen
7951:
7952: 2002-01-15 15:48 millert
7953:
7954: * configure.in: add --with-efence option
7955:
7956: 2002-01-15 15:39 millert
7957:
7958: * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
7959: problem where "sudo -l" would not work if always_set_home was
7960: set.
7961:
7962: 2002-01-15 13:16 millert
7963:
7964: * lex.yy.c: regen
7965:
7966: 2002-01-15 13:16 millert
7967:
7968: * parse.lex: Quoted commas were not being treated correctly in
7969: command line arguments.
7970:
7971: 2002-01-14 20:53 millert
7972:
7973: * sudo.c: o Move the call to rebuild_env() until after
7974: MODE_RESET_HOME is set. Otherwise, the set_home option has no
7975: effect.
7976:
7977: o Fix use of freed memory when the "fqdn" flag is set. This was
7978: introduced by the fix for the "segv when gethostbynam() fails"
7979: bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
7980: not set so there is no need to check the "fqdn" flag in
7981: set_fqdn() itself.
7982:
7983: 2002-01-14 20:45 millert
7984:
7985: * env.c: Add 'continue' statements to optimize the switch
7986: statement. From Solar.
7987:
7988: 2002-01-13 13:42 millert
7989:
7990: * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
7991:
7992: 2002-01-13 13:36 millert
7993:
7994: * sudoers.pod: Add caveat about stay_setuid flag
7995:
7996: 2002-01-13 13:29 millert
7997:
7998: * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
7999: is not set, set all uids to 0 and use set_perms_fallback().
8000:
8001: 2002-01-13 13:28 millert
8002:
8003: * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8004: used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8005:
8006: 2002-01-13 13:27 millert
8007:
8008: * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8009: mailer since we never want to run the mailer setuid.
8010:
8011: 2002-01-12 17:55 millert
8012:
8013: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8014: visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8015:
8016: 2002-01-12 14:00 millert
8017:
8018: * Makefile.in, Makefile.binary: Fix mansect substitution
8019:
8020: 2002-01-12 13:15 millert
8021:
8022: * Makefile.in: Substitute man sections in Makefile.binary
8023:
8024: 2002-01-12 13:15 millert
8025:
8026: * Makefile.binary: Sync install targets with Makefile.in and
8027: substitute in man sections.
8028:
8029: 2002-01-12 13:09 millert
8030:
8031: * INSTALL, INSTALL.binary: version is 1.6.4
8032:
8033: 2002-01-12 12:59 millert
8034:
8035: * Makefile.in: Repair bindist target
8036:
8037: 2002-01-12 11:43 millert
8038:
8039: * CHANGES: sync for 1.6.4
8040:
8041: 2002-01-10 13:00 millert
8042:
8043: * install-sh: Fix case where neither whoami nor id are found
8044:
8045: 2002-01-09 12:35 millert
8046:
8047: * install-sh: If neither whoami nor id exists, just assume we are
8048: root.
8049:
8050: 2002-01-09 11:56 millert
8051:
8052: * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8053: to be needed on AIX which for some reason isn't pulling in the
8054: malloc prototype.
8055:
8056: 2002-01-08 10:00 millert
8057:
8058: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8059:
8060: 2002-01-08 09:21 millert
8061:
8062: * CHANGES: checkpoint
8063:
8064: 2002-01-08 09:20 millert
8065:
8066: * sudo.c: Defer assigning new environment until right before the
8067: exec.
8068:
8069: 2002-01-08 09:08 millert
8070:
8071: * parse.c: kill extra blank line
8072:
8073: 2002-01-07 13:59 millert
8074:
8075: * configure: regen
8076:
8077: 2002-01-07 13:59 millert
8078:
8079: * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8080: motorola gcc-derived compiler doesn't recognise -O2.
8081:
8082: 2002-01-06 23:02 millert
8083:
8084: * HISTORY: Clarify origins of Root Group sudo a bit based on info
8085: from billp@rootgroup.com
8086:
8087: 2002-01-02 22:41 millert
8088:
8089: * LICENSE: 2002
8090:
8091: 2002-01-02 22:26 millert
8092:
8093: * CHANGES: checkpoint for 1.6.4rc1
8094:
8095: 2002-01-02 17:40 millert
8096:
8097: * config.h.in: now generated via autoheader
8098:
8099: 2002-01-02 17:40 millert
8100:
8101: * configure: regen
8102:
8103: 2002-01-02 17:37 millert
8104:
8105: * compat.h: Move in some stuff that was previously in config.h.
8106:
8107: 2002-01-02 17:36 millert
8108:
8109: * configure.in, aclocal.m4: Add info for autoheader.
8110:
8111: 2002-01-01 16:53 millert
8112:
8113: * Makefile.in: o Add DESTDIR support
8114: o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8115: non-root installs
8116:
8117: 2002-01-01 16:48 millert
8118:
8119: * install-sh: Add -M option (like -m but only for root) If we can't
8120: find "whoami", use "id" w/ some sed.
8121:
8122: 2002-01-01 14:01 millert
8123:
8124: * configure: regen
8125:
8126: 2002-01-01 14:00 millert
8127:
8128: * configure.in: allow user to always override mansectsu and
8129: mansectform
8130:
8131: 2001-12-31 17:05 millert
8132:
8133: * mkinstalldirs: update from autoconf 2.52
8134:
8135: 2001-12-31 17:03 millert
8136:
8137: * config.guess, config.sub: Update from autoconf 2.52
8138:
8139: 2001-12-31 16:57 millert
8140:
8141: * configure: regen with autoconf 2.52
8142:
8143: 2001-12-31 16:57 millert
8144:
8145: * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8146: compiler in ANSI mode
8147: o Remove compiler-specific checks for HP-UX now that we use
8148: AC_PROG_CC_STDC
8149:
8150: 2001-12-31 12:19 millert
8151:
8152: * RUNSON: Checkpoint
8153:
8154: 2001-12-31 12:18 millert
8155:
8156: * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8157: for the target user; on Linux this often sets resource limits.
8158: o When calling pam_end(), try to convert the auth->result to a
8159: PAM_FOO value. This is a hack--we really need to stash the
8160: last PAM_FOO value received and use that instead.
8161:
8162: 2001-12-31 12:18 millert
8163:
8164: * set_perms.c, sudo.h: o Add pam_prep_user function to call
8165: pam_setcred() for the target user; on Linux this often sets
8166: resource limits.
8167:
8168: 2001-12-31 00:53 millert
8169:
8170: * env.c: Fix off by one error in number of bytes allocated via
8171: malloc (does not affected any released version of sudo).
8172:
8173: 2001-12-30 17:12 millert
8174:
8175: * lex.yy.c: regen
8176:
8177: 2001-12-30 17:12 millert
8178:
8179: * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8180: variable w/o requiring that they be quoted.
8181:
8182: 2001-12-30 14:26 millert
8183:
8184: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8185: quotes are needed when adding/deleting/assigning a single value
8186: to a list.
8187:
8188: 2001-12-30 13:58 millert
8189:
8190: * Makefile.in: Don't rely on mkdefaults being executable, call perl
8191: explicitly.
8192:
8193: 2001-12-30 13:41 millert
8194:
8195: * parse.yacc: Remove some XXX that are no longer relevant.
8196:
8197: 2001-12-30 13:40 millert
8198:
8199: * defaults.c: o Roll our own loop instead of using strpbrk() for
8200: better grokability o When adding to a list we must malloc() and
8201: use memcpy(), not strdup() since we must only copy len bytes
8202: from str.
8203:
8204: 2001-12-21 16:49 millert
8205:
8206: * parse.yacc: typo in comment
8207:
8208: 2001-12-19 11:50 millert
8209:
8210: * CHANGES: checkpoint
8211:
8212: 2001-12-19 10:56 millert
8213:
8214: * configure: regen
8215:
8216: 2001-12-19 10:56 millert
8217:
8218: * configure.in: avoid the -g flag unless --with-devel was specified
8219:
8220: 2001-12-19 10:04 millert
8221:
8222: * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8223: from the tarball
8224:
8225: 2001-12-19 09:46 millert
8226:
8227: * Makefile.in: def_data.c was missing
8228:
8229: 2001-12-18 12:42 millert
8230:
8231: * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8232: case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8233: in keep_env
8234:
8235: 2001-12-17 20:48 millert
8236:
8237: * TODO: Another TODO item
8238:
8239: 2001-12-17 19:50 millert
8240:
8241: * sudoers: Add comment for Default section so folks know where it
8242: should go.
8243:
8244: 2001-12-17 18:56 millert
8245:
8246: * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8247: case
8248:
8249: 2001-12-17 18:35 millert
8250:
8251: * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8252:
8253: 2001-12-17 18:33 millert
8254:
8255: * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8256: o a User_List can not contain a uid
8257: o mention that the Defaults section should come after Alias
8258: definitions but before the user specifications
8259:
8260: 2001-12-15 11:51 millert
8261:
8262: * sudoers.cat, sudoers.man.in: regen
8263:
8264: 2001-12-15 11:51 millert
8265:
8266: * sudoers.pod: Fix listpw and verifypw sections, they were not
8267: being formatted properly.
8268:
8269: 2001-12-15 11:39 millert
8270:
8271: * sudoers.cat, sudoers.man.in: regen
8272:
8273: 2001-12-15 11:38 millert
8274:
8275: * sudoers.pod: fix typos
8276:
8277: 2001-12-15 10:57 millert
8278:
8279: * configure: regen
8280:
8281: 2001-12-15 10:57 millert
8282:
8283: * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8284: rolling our own
8285:
8286: 2001-12-15 10:33 millert
8287:
8288: * README: Reference sudo.ws not courtesan.com
8289:
8290: 2001-12-15 10:29 millert
8291:
8292: * PORTING: Add notes on shadow passwords
8293:
8294: 2001-12-15 00:48 millert
8295:
8296: * BUGS: In list mode (sudo -l), characters escaped with a backslash
8297: are shown verbatim with the backslash.
8298:
8299: 2001-12-15 00:44 millert
8300:
8301: * sudoers: Add simple examples from OpenBSD (Marc Espie)
8302:
8303: 2001-12-15 00:40 millert
8304:
8305: * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8306: SIGTSTP.
8307:
8308: 2001-12-14 21:53 millert
8309:
8310: * CHANGES: minor prettyification
8311:
8312: 2001-12-14 21:43 millert
8313:
8314: * CHANGES: Updated change log
8315:
8316: 2001-12-14 21:27 millert
8317:
8318: * testsudoers.c: Fix CIDR handling here too.
8319:
8320: 2001-12-14 21:21 millert
8321:
8322: * auth/pam.c: Apparently a NULL response is OK
8323:
8324: 2001-12-14 21:19 millert
8325:
8326: * TODO: Checkpoint for upcoming beta release
8327:
8328: 2001-12-14 21:17 millert
8329:
8330: * TROUBLESHOOTING: Many people believe that adding a runas spec
8331: should obviate the need for the -u flag. It does not.
8332:
8333: 2001-12-14 21:11 millert
8334:
8335: * RUNSON: checkpoint update for upcoming 1.6.4 beta
8336:
8337: 2001-12-14 20:44 millert
8338:
8339: * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8340: HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8341: now
8342:
8343: 2001-12-14 20:07 millert
8344:
8345: * PORTING: Add signals section
8346:
8347: 2001-12-14 20:00 millert
8348:
8349: * configure: regen
8350:
8351: 2001-12-14 20:00 millert
8352:
8353: * configure.in: Fix check for sigaction_t
8354:
8355: 2001-12-14 19:45 millert
8356:
8357: * sudo.c: XXX - should call find_path() as runas user, not root.
8358: Can't do that until the parser changes though.
8359:
8360: 2001-12-14 19:38 millert
8361:
8362: * sudo.c: If find_path() fails as root, try again as the invoking
8363: user (useful for NFS). Idea from Chip Capelik.
8364:
8365: 2001-12-14 19:28 millert
8366:
8367: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8368: after pod file changes
8369:
8370: 2001-12-14 19:24 millert
8371:
8372: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8373: sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8374: Previously sudo would not call initgroups() if the target user
8375: was root. Now it always calls initgroups() unless the -P command
8376: line option or the "preserve_groups" sudoers option is set. Idea
8377: from TJ Saunders.
8378:
8379: 2001-12-14 18:38 millert
8380:
8381: * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8382:
8383: 2001-12-14 18:33 millert
8384:
8385: * logging.c: Fix compilation on K&C
8386:
8387: 2001-12-14 18:14 millert
8388:
8389: * configure: regen
8390:
8391: 2001-12-14 18:14 millert
8392:
8393: * configure.in: Add check for sigaction_t -- IRIX already defines
8394: this so don't redefine it.
8395:
8396: 2001-12-14 17:15 millert
8397:
8398: * snprintf.c: fix typo
8399:
8400: 2001-12-14 17:12 millert
8401:
8402: * interfaces.c: need stdlib.h here too
8403:
8404: 2001-12-14 15:31 millert
8405:
8406: * configure: regen
8407:
8408: 2001-12-14 15:31 millert
8409:
8410: * configure.in: Remove redundant checks for string.h, strings.h and
8411: unistd.h
8412:
8413: 2001-12-14 15:29 millert
8414:
8415: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8416: visudo.man.in: Regen from pod files
8417:
8418: 2001-12-14 15:03 millert
8419:
8420: * BUGS: Update for 1.6.4
8421:
8422: 2001-12-14 14:59 millert
8423:
8424: * configure, lex.yy.c: regen
8425:
8426: 2001-12-14 14:56 millert
8427:
8428: * strerror.c: Return EINVAL if errnum > sys_nerr
8429:
8430: 2001-12-14 14:54 millert
8431:
8432: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8433: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8434: sudo.pod, auth/sudo_auth.h: o Update copyright year
8435:
8436: 2001-12-14 14:54 millert
8437:
8438: * configure.in: o Don't define STDC_HEADERS unconditionally for
8439: IRIX o Update copyright year
8440:
8441: 2001-12-14 14:53 millert
8442:
8443: * README: update version
8444:
8445: 2001-12-14 14:52 millert
8446:
8447: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8448: fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8449: logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8450: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8451: utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8452: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8453: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8454: auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8455: STDC_HEADERS define properly o Update copyright year
8456:
8457: 2001-12-14 01:53 millert
8458:
8459: * configure: regen
8460:
8461: 2001-12-14 01:53 millert
8462:
8463: * tgetpass.c: flags set in signal handlers should be volatile
8464: sig_atomic_t
8465:
8466: 2001-12-14 01:52 millert
8467:
8468: * config.h.in, configure.in: Add checks for volatile and
8469: sig_atomic_t
8470:
8471: 2001-12-14 01:42 millert
8472:
8473: * lex.yy.c, configure: regen
8474:
8475: 2001-12-14 01:40 millert
8476:
8477: * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8478: find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8479: option since it cannot work with the existing parser.
8480:
8481: 2001-12-14 01:26 millert
8482:
8483: * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8484:
8485: 2001-12-14 01:24 millert
8486:
8487: * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8488: not listed in env_keep o If no PATH is in the environment use a
8489: default value o If TERM is not set in the non-reset case also
8490: give it a default value.
8491:
8492: 2001-12-14 01:17 millert
8493:
8494: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8495: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8496: on systems that define in paths.h
8497:
8498: 2001-12-14 01:15 millert
8499:
8500: * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8501: skeyaccess(3) if it is present in libskey.
8502:
8503: 2001-12-12 21:42 millert
8504:
8505: * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8506:
8507: 2001-12-12 21:24 millert
8508:
8509: * parse.lex: '\\' is a perfectly legal character to have in a
8510: command line argument.
8511:
8512: 2001-12-12 20:24 millert
8513:
8514: * sudo.c: o Defer call to set_fqdn() until it is safe to use
8515: log_error() o Don't print errno string value if gethostbyname
8516: fails, it is not relevant
8517:
8518: 2001-12-12 20:07 millert
8519:
8520: * parse.c: Fix CIDR -> in_addr_t conversion.
8521:
8522: 2001-12-12 16:21 millert
8523:
8524: * sudoers.pod: Remove an extra "User_List" in the User_Spec
8525: definition From ybertrand AT snoopymail.com
8526:
8527: 2001-12-12 16:00 millert
8528:
8529: * parse.c: Make 'listpw=never' work for users who are not
8530: explicitly mentioned in sudoers.
8531:
8532: 2001-12-12 15:40 millert
8533:
8534: * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8535:
8536: 2001-12-12 15:34 millert
8537:
8538: * sudoers.pod: Document new list Defaults type and convert env_keep
8539: and env_delete to lists. Document new env_check option.
8540:
8541: 2001-12-12 15:11 millert
8542:
8543: * lex.yy.c, sudo.tab.h: regen parser
8544:
8545: 2001-12-12 14:56 millert
8546:
8547: * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8548: a Runas spec to #[0-9-]+.
8549:
8550: 2001-12-12 14:55 millert
8551:
8552: * configure: regen
8553:
8554: 2001-12-12 14:55 millert
8555:
8556: * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8557:
8558: 2001-12-12 14:43 millert
8559:
8560: * config.h.in, configure.in: Add check for skeyaccess(3)
8561:
8562: 2001-12-11 19:47 millert
8563:
8564: * visudo.pod: Document new -c, -f, and -q options
8565:
8566: 2001-12-11 19:41 millert
8567:
8568: * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8569: use getopt(3)
8570:
8571: 2001-12-11 19:31 millert
8572:
8573: * configure: regen
8574:
8575: 2001-12-11 19:31 millert
8576:
8577: * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8578: a replacement macro if it doesn't exist.
8579:
8580: 2001-12-11 18:22 millert
8581:
8582: * visudo.c: In check-only mode, don't create sudoers if it does not
8583: already exist.
8584:
8585: 2001-12-11 18:06 millert
8586:
8587: * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8588: variable name
8589: o Add support for "+=" and "-=" list operators
8590: o replace some 1 and 0 with TRUE and FALSE for greater
8591: legibility.
8592:
8593: 2001-12-11 18:05 millert
8594:
8595: * parse.lex: o Use exclusive start conditions to remove some
8596: ambiguity in the
8597: lexer. Also reorder some things for clarity.
8598: o Add support for "+=" and "-=" list operators.
8599: o Use the new DEFVAR token to denote a Defaults variable name.
8600:
8601: 2001-12-11 18:03 millert
8602:
8603: * sudo.h: Prototype init_envtables()
8604:
8605: 2001-12-11 18:02 millert
8606:
8607: * env.c: o Convert environment handling to use lists instead of
8608: strings.
8609: This greatly simplifies routines that need to do "foreach"
8610: type
8611: operations.
8612: o Add new init_envtables() function to set env_check and
8613: env_delete
8614: defaults based on initial_badenv_table and
8615: initial_checkenv_table
8616: (formerly sudo_badenv_table).
8617:
8618: 2001-12-11 18:00 millert
8619:
8620: * defaults.c, defaults.h: o Add a new LIST type and functions to
8621: manipulate it.
8622: o This is for use with environment handling variables.
8623: o Call new init_envtables() routine inside init_defaults() to
8624: initialize the environment lists.
8625:
8626: 2001-12-11 17:57 millert
8627:
8628: * def_data.c, def_data.h, def_data.in: Convert environment options
8629: to use the new LIST type and add a new one, env_check that only
8630: deletes if the sanity check fails.
8631:
8632: 2001-12-11 17:55 millert
8633:
8634: * testsudoers.c: Add dummy version of init_envtables()
8635:
8636: 2001-12-11 17:53 millert
8637:
8638: * parse.yacc: honor quiet mode
8639:
8640: 2001-12-11 17:51 millert
8641:
8642: * visudo.c: Add check-only mode
8643:
8644: 2001-12-10 20:27 millert
8645:
8646: * mkdefaults: Fix generation of entries with NULL descriptions.
8647:
8648: 2001-12-09 00:27 millert
8649:
8650: * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8651:
8652: 2001-12-09 00:20 millert
8653:
8654: * sudo.c: Must reset signal handlers before we exec
8655:
8656: 2001-12-09 00:16 millert
8657:
8658: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8659: carefule now that tgetpass() can return NULL (user hit ^C). PAM
8660: version needs testing. Set SIGTSTP to SIG_DFL during password
8661: entry so user can suspend us.
8662:
8663: 2001-12-09 00:14 millert
8664:
8665: * tgetpass.c: Add support for interrupting/suspending tgetpass via
8666: keyboard input. If you suspend sudo from the password prompt and
8667: resume it will re-prompt you.
8668:
8669: 2001-12-09 00:09 millert
8670:
8671: * sudo.c: Don't block keyboard interrupt signals, just set them to
8672: SIG_IGN.
8673:
8674: 2001-12-08 14:48 millert
8675:
8676: * config.h.in: add back HAVE_SIGACTION
8677:
8678: 2001-12-08 14:44 millert
8679:
8680: * configure: regen
8681:
8682: 2001-12-08 14:44 millert
8683:
8684: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8685: POSIX_SIGNALS define and old signal support now that we emulate
8686: POSIX ones Also be sure to correctly initialize struct sigaction.
8687:
8688: 2001-12-08 14:42 millert
8689:
8690: * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8691: wrapper.
8692:
8693: 2001-12-08 14:39 millert
8694:
8695: * compat.h: Add scaffolding for POSIX signal emulation
8696:
8697: 2001-12-08 14:36 millert
8698:
8699: * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8700: since we don't include stdio.h
8701:
8702: 2001-12-08 14:23 millert
8703:
8704: * sigaction.c: Emulate sigaction() using sigvec()
8705:
8706: 2001-11-12 19:32 millert
8707:
8708: * sudoers.pod: Document new behavior of negative values of
8709: timestamp_timeout Fix a typo
8710:
8711: 2001-11-12 19:31 millert
8712:
8713: * sudo.pod: Add security note about command not being logged after
8714: 'sudo su' and friends.
8715:
8716: 2001-11-12 19:19 millert
8717:
8718: * sudo.pod: Mention that -V prints default values when run as root,
8719: including the list of environment variables to clear.
8720:
8721: 2001-11-12 19:14 millert
8722:
8723: * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8724: quoting of C<> entries.
8725:
8726: 2001-11-12 13:12 millert
8727:
8728: * def_data.c, def_data.h, def_data.in, sudoers.pod,
8729: auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8730: behavior to also send mail when the password is wrong
8731:
8732: 2001-11-12 13:08 millert
8733:
8734: * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8735: is run by root.
8736:
8737: 2001-11-11 23:52 millert
8738:
8739: * sudoers.pod: document env_delete
8740:
8741: 2001-11-11 23:51 millert
8742:
8743: * env.c: Add support for '*' in env_keep when not resetting the
8744: environment (ie: the normal case).
8745:
8746: 2001-11-11 23:47 millert
8747:
8748: * env.c: Add env_delete variable that lets the user replace/add to
8749: the bad_env_table. Allow '*' wildcard in env_keep entries.
8750:
8751: 2001-11-06 13:59 millert
8752:
8753: * mkinstalldirs: Force umask to 022 to guarantee sane directory
8754: permissions.
8755:
8756: 2001-11-02 18:09 millert
8757:
8758: * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8759: dependency
8760:
8761: 2001-11-02 17:25 millert
8762:
8763: * mkdefaults: fix breakage in last commit
8764:
8765: 2001-11-02 17:18 millert
8766:
8767: * Makefile.in: acsite.m4 -> aclocal.m4
8768:
8769: 2001-11-02 15:59 millert
8770:
8771: * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8772: previous commit
8773:
8774: 2001-11-02 15:57 millert
8775:
8776: * def_data.c: regenerated from def_data.in
8777:
8778: 2001-11-02 15:56 millert
8779:
8780: * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8781: things use instead of T_INT If timestamp_timeout is < 0 then
8782: treat the ticket as never expiring (to be expired manually by the
8783: user).
8784:
8785: 2001-11-02 15:51 millert
8786:
8787: * def_data.in: change most T_INT -> T_UINT
8788:
8789: 2001-11-02 15:51 millert
8790:
8791: * mkdefaults: fix warning when no args
8792:
8793: 2001-11-02 12:52 millert
8794:
8795: * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8796: call _exit() if we are a signal handler. We no longer print the
8797: signal number but the user can just check the exit value for
8798: that.
8799:
8800: 2001-10-16 01:35 millert
8801:
8802: * logging.c: when setting up pipes in child process check for case
8803: where stdin == pipe fd 0
8804:
8805: 2001-10-11 13:20 millert
8806:
8807: * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8808: value is the count of editing errors made (failed searches, etc).
8809:
8810: 2001-10-05 16:39 millert
8811:
8812: * configure: regen
8813:
8814: 2001-10-05 16:39 millert
8815:
8816: * configure.in: sco now is identified by config.guess as *-sco-*
8817:
8818: 2001-10-05 16:24 millert
8819:
8820: * configure.in: Check for getspnam() in -lgen if not in -lc for
8821: UnixWare.
8822:
8823: 2001-09-17 21:48 millert
8824:
8825: * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8826:
8827: 2001-09-17 21:32 millert
8828:
8829: * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8830:
8831: 2001-08-28 10:26 millert
8832:
8833: * sudoers.pod: Missing word (specify); krapht@secureops.com
8834:
8835: 2001-08-23 17:43 millert
8836:
8837: * sudo.c: If we fail to lookup a login class, apply the default
8838: one.
8839:
8840: 2001-08-23 17:42 millert
8841:
8842: * logging.c: In log_error() free message, not logline
8843: unconditionally, then free logline if it is not the same as
8844: message. No function change but this mirrors how they are
8845: allocated.
8846:
8847: 2001-07-16 23:33 millert
8848:
8849: * configure: regenerate
8850:
8851: 2001-07-16 23:33 millert
8852:
8853: * configure.in: remove some backslash quotes that are unneeded
8854:
8855: 2001-07-16 23:30 millert
8856:
8857: * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8858: AC_LIBOBJ instead of changing LIBOBJS directly o Use
8859: AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8860: AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8861:
8862: 2001-07-16 23:28 millert
8863:
8864: * config.guess, config.sub: Updated from autoconf-2.50
8865:
8866: 2001-05-22 19:11 millert
8867:
8868: * README: Update mailing list section. We use mailman now, not
8869: majordomo.
8870:
8871: 2001-05-10 14:55 millert
8872:
8873: * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8874: the shadow variants to make sure we don't inadvertantly leak an
8875: fd to the child. Apparently Linux's shadow routines leave the fd
8876: open even if you don't call setspent(). Reported by
8877: mike@gistnet.com; different patch used.
8878:
8879: 2001-04-12 21:43 millert
8880:
8881: * sudoers.pod: s/eg./e.g./
8882:
8883: 2001-04-12 21:42 millert
8884:
8885: * tgetpass.c: select() may return EAGAIN. If so, continue like we
8886: do for EINTR.
8887:
8888: 2001-04-12 21:41 millert
8889:
8890: * logging.c: Fix a non-exploitable buffer overflow in the word
8891: splitting code. This should really be rewritten.
8892:
8893: 2001-04-12 21:41 millert
8894:
8895: * Makefile.in: FAQ link goes away
8896:
8897: 2001-04-12 21:40 millert
8898:
8899: * INSTALL: Tell people to look in sample.syslog.conf for examples,
8900: not FAQ
8901:
8902: 2001-04-12 21:40 millert
8903:
8904: * TROUBLESHOOTING: Update list of env vars that are cleared
8905:
8906: 2001-04-12 21:36 millert
8907:
8908: * sudo.c: remove struct env_table decl since that stuff has all
8909: moved to env.c
8910:
8911: 2001-04-04 13:17 millert
8912:
8913: * fileops.c: Fix a pasto in flock-style unlocking and include
8914: <sys/file.h> for flock on older systems; twetzel@gwdg.de
8915:
8916: 2001-04-04 13:14 millert
8917:
8918: * configure: regen to get NeXT lockf/flock fix
8919:
8920: 2001-04-04 13:14 millert
8921:
8922: * configure.in: force NeXT to use flock since lockf is broken
8923:
8924: 2001-03-30 08:54 millert
8925:
8926: * check.c: Use stashed user_gid when checking against exempt gid
8927: since sudo sets its gid to a a value that makes sudoers readable.
8928: Previously if you used gid 0 as the exempt group everyone would
8929: be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8930:
8931: 2001-03-29 13:14 millert
8932:
8933: * configure: regen
8934:
8935: 2001-03-29 13:08 millert
8936:
8937: * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8938: aparently defines some types (such as ssize_t) therein.
8939:
8940: 2001-03-02 09:09 millert
8941:
8942: * defaults.c: Fix negation of paths in a boolean context. Problem
8943: found by apt@UH.EDU
8944:
8945: 2001-02-23 13:03 millert
8946:
8947: * visudo.c: pasto
8948:
8949: 2001-02-17 16:11 millert
8950:
8951: * visudo.c: SA_RESETHAND means the opposite of what I was
8952: thinking--oops To block all signals in old-style signals use ~0,
8953: not 0xffffffff
8954:
8955: 2001-02-04 11:16 millert
8956:
8957: * defaults.c: coerce difference of pointers to int when used in a
8958: string length printf format; deraadt@openbsd.org
8959:
8960: 2001-01-17 11:34 millert
8961:
8962: * visudo.c: Block all signals in Exit() to avoid a signal race.
8963: There is still a tiny window but I'm not going to worry about it.
8964:
8965: 2001-01-07 13:57 millert
8966:
8967: * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
8968: Designer
8969:
8970: 2001-01-07 13:55 millert
8971:
8972: * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
8973: from clobbering by isatty().
8974:
8975: 2000-12-30 20:39 millert
8976:
8977: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
8978: Some defaults I_ defines got renamed.
8979:
8980: 2000-12-30 20:38 millert
8981:
8982: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
8983: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
8984: set_perms.c, sudo.c: Move defaults info into its own files from
8985: which we generate .h and .c files. This makes adding or
8986: rearranging variables much simpler.
8987:
8988: 2000-12-30 16:58 millert
8989:
8990: * configure, configure.in: fix typo in last commit
8991:
8992: 2000-12-30 16:55 millert
8993:
8994: * compat.h, config.h.in, configure, configure.in: Add check +
8995: emulation for setegid (like seteuid).
8996:
8997: 2000-12-30 16:22 millert
8998:
8999: * env.c: Make env_keep override badenv_table as documented Fix
9000: traversal of badenv_table (broken in last commit)
9001:
9002: 2000-12-29 22:59 millert
9003:
9004: * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9005: version of set_perms on systems w/o them. Rename
9006: set_perms_saved_uid() -> set_perms_posix() Make
9007: set_perms_setreuid simply be set_perms_fallback() and simply
9008: include the appropriate function at compile time (setreuid()
9009: vs. setuid()).
9010:
9011: 2000-12-29 22:45 millert
9012:
9013: * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9014: when env_reset is in effect
9015:
9016: 2000-12-29 22:29 millert
9017:
9018: * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9019: configure, configure.in, defaults.c, defaults.h, find_path.c,
9020: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9021: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9022: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9023: options: o stay_setuid - sudo will remain setuid if system has
9024: saved uids or setreuid(2) o env_reset - reset the environment to
9025: a sane default o env_keep - preserve environment variables that
9026: would otherwise be cleared
9027:
9028: No longer use getenv/putenv/setenv functions--do environment
9029: munging by hand. Potentially dangerous environment variables can
9030: be cleared only if they contain '/' pr '%' characters to protect
9031: buggy programs. Moved environment routines into env.c (new file)
9032:
9033: 2000-12-29 22:17 millert
9034:
9035: * INSTALL: Clear up --without-passwd description
9036:
9037: 2000-12-29 19:39 millert
9038:
9039: * sudo_setenv.c, putenv.c: We now build up a new environment from
9040: scratch and assign it to "environ".
9041:
9042: 2000-12-18 22:35 millert
9043:
9044: * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9045:
9046: 2000-12-14 23:19 millert
9047:
9048: * visudo.c: If there was a syntax error and the user just wants to
9049: quit, unlink sudoers if it is zero length.
9050:
9051: 2000-12-14 23:10 millert
9052:
9053: * visudo.c: 'Q' means ignore parse error, not 'q'
9054:
9055: 2000-12-14 22:57 millert
9056:
9057: * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9058: Dimitry Andric <dim@xs4all.nl>
9059:
9060: 2000-12-13 12:23 millert
9061:
9062: * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9063: ayamura@ayamura.org
9064:
9065: 2000-12-09 11:46 millert
9066:
9067: * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9068: Sanchez <wsanchez@apple.com>
9069:
9070: 2000-11-03 09:36 millert
9071:
9072: * sudo.c, visudo.c: Use exit(127), not exit(-1)
9073:
9074: 2000-11-03 00:37 millert
9075:
9076: * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9077: set_perms() to its own file and use POSIX saved uid or setreuid()
9078: if available.
9079:
9080: Added stay_setuid option for systems that have libraries that
9081: perform extra paranoia checks in system libraries for setuid
9082: programs (ie: anything with issetugid(2)).
9083:
9084: 2000-11-02 20:28 millert
9085:
9086: * sudo.c: strip more bits from the environment and add a facility
9087: for stripping things only if they contain '/' or '%' to address
9088: printf format string vulnerabilities in other programs.
9089:
9090: 2000-11-02 12:55 millert
9091:
9092: * configure: regen
9093:
9094: 2000-11-02 12:55 millert
9095:
9096: * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9097: the existence of strcasecmp().
9098:
9099: 2000-11-02 12:46 millert
9100:
9101: * configure: regen
9102:
9103: 2000-11-02 12:46 millert
9104:
9105: * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9106:
9107: 2000-11-01 10:22 millert
9108:
9109: * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9110:
9111: 2000-11-01 10:17 millert
9112:
9113: * configure: regen
9114:
9115: 2000-11-01 10:17 millert
9116:
9117: * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9118: since NCR systems have that instead of innetgr(3).
9119:
9120: 2000-10-31 14:16 millert
9121:
9122: * auth/securid.c: check return value of creadcfg() call sd_close()
9123: after sd_auth() store username in sd->username so we don't rely
9124: on the USER env variable
9125:
9126: 2000-10-29 23:00 millert
9127:
9128: * INSTALL: document --with-bsdauth
9129:
9130: 2000-10-29 22:57 millert
9131:
9132: * configure: regen
9133:
9134: 2000-10-29 22:56 millert
9135:
9136: * configure.in: --with-bsdauth assumes --with-logincap
9137:
9138: 2000-10-29 22:45 millert
9139:
9140: * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9141: challenge, if the user just hits return then reprompt with echo
9142: turned on.
9143:
9144: 2000-10-29 17:31 millert
9145:
9146: * sudo.c: Remove debugging code that should not have been
9147: committed, oops.
9148:
9149: 2000-10-29 17:31 millert
9150:
9151: * auth/bsdauth.c: Use lower-level routines and get the password
9152: ourselves. Checks for a challenge and if there is one echo is
9153: not turned off.
9154:
9155: 2000-10-29 17:30 millert
9156:
9157: * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9158: changes
9159:
9160: 2000-10-27 18:41 millert
9161:
9162: * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9163: fails by deferring the call to log_error() until things are
9164: better setup.
9165:
9166: Fix return value of set_loginclass() in non-BSD-auth case.
9167:
9168: Hard-code 'sudo' in the usage message so we can fit more options
9169: on a line
9170:
9171: 2000-10-27 18:35 millert
9172:
9173: * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9174:
9175: 2000-10-26 13:03 millert
9176:
9177: * sudo.cat, sudo.man.in: regen
9178:
9179: 2000-10-26 13:01 millert
9180:
9181: * sudo.pod: Document -a flag
9182:
9183: 2000-10-26 12:42 millert
9184:
9185: * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9186: sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9187: authentication.
9188:
9189: 2000-10-19 10:09 millert
9190:
9191: * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9192:
9193: 2000-10-12 09:49 millert
9194:
9195: * sudoers.pod: Mention negating umask
9196:
9197: 2000-10-12 01:30 millert
9198:
9199: * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9200:
9201: 2000-10-08 21:46 millert
9202:
9203: * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9204: history.
9205:
9206: 2000-10-08 12:25 millert
9207:
9208: * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9209:
9210: 2000-09-14 16:48 millert
9211:
9212: * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9213: alloc failure instead of returning -1.
9214:
9215: 2000-09-07 17:41 millert
9216:
9217: * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9218: for FreeBSD and possibly others.
9219:
9220: 2000-09-07 10:43 millert
9221:
9222: * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9223: it. This means that "%m" won't be expanded but we don't use that
9224: anyway since the logging routines may splat to stderr as well.
9225:
9226: 2000-09-06 21:35 millert
9227:
9228: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9229: sudoers.pod: Add always_set_home variable
9230:
9231: 2000-09-06 21:24 millert
9232:
9233: * configure, configure.in: Have to hard code default values in help
9234: since the defaults are set _after_ the help stuff.
9235:
9236: 2000-08-31 13:08 millert
9237:
9238: * lex.yy.c, parse.lex: Allow special characters (including '#') to
9239: be embedded in pathnames if quoted by a '\\'. The quoted chars
9240: will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9241: prints the '\\'.
9242:
9243: 2000-08-13 17:10 millert
9244:
9245: * install-sh: Better path searching for programs we need.
9246:
9247: 2000-08-13 17:10 millert
9248:
9249: * TROUBLESHOOTING: Add section on "C compiler cannot create
9250: executables" errors.
9251:
9252: 2000-08-13 17:10 millert
9253:
9254: * Makefile.binary, Makefile.in, version.h: Crank version
9255:
9256: 2000-08-13 17:09 millert
9257:
9258: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9259: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9260: visudo.man.in, visudo.pod: Substitute values from configure into
9261: man pages.
9262:
9263: 2000-08-12 16:48 millert
9264:
9265: * parse.c, sudo.c: The listpw and verifypw sudoers options would
9266: not take effect because the value of the default was checked
9267: *before* sudoers was parsed. Instead of passing in the value of
9268: PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9269: the check can be deferred until after sudoers is parsed.
9270:
9271: 2000-08-11 15:41 millert
9272:
9273: * tgetpass.c: When writing prompt, no need to write the NUL as
9274: well; hag@linnaean.org
9275:
9276: 2000-06-09 12:25 millert
9277:
9278: * install-sh: When looking for chown, check in /sbin too
9279:
9280: 2000-06-04 22:57 millert
9281:
9282: * visudo.c: Remove extraneous call to init_defaults() and set
9283: runas_user to NULL betweem parses so init_defaults will reset it
9284: each time, thus avoiding a reference to free()d data.
9285:
9286: 2000-06-04 19:57 millert
9287:
9288: * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9289: using getifaddrs() to get the list of ip addr / netmask pairs.
9290: Currently IPv4-only.
9291:
9292: 2000-06-04 19:51 millert
9293:
9294: * visudo.c: Add a missing check for UserEditor == NULL Add missing
9295: '+' before line number when invoking editor to fix a syntax error
9296:
9297: 2000-05-12 16:55 millert
9298:
9299: * sudo.c: Call clean_env very early in main() for paranoia's sake.
9300: Idea from Marc Esipovich.
9301:
9302: 2000-05-10 01:11 millert
9303:
9304: * sudo.h: Update proto for evasprintf and easprintf
9305:
9306: 2000-05-10 01:10 millert
9307:
9308: * alloc.c: Make easprintf() and evasprintf() return an int.
9309:
9310: 2000-05-10 00:56 millert
9311:
9312: * check.c: If the targetpw flag is set, use target username as part
9313: of the timestamp path. If tty tickets are in effect cat the tty
9314: and the target username with a ':' as the separator.
9315:
9316: 2000-05-09 12:05 millert
9317:
9318: * auth/pam.c: Backout part of last change; setting PAM_USER to the
9319: invoking user breaks things like targetpw.
9320:
9321: 2000-05-09 11:52 millert
9322:
9323: * auth/pam.c: set tty and username via pam_set_item
9324:
9325: 2000-05-09 11:42 millert
9326:
9327: * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9328: runas, and target authentication for non-passwd file auth
9329: methods.
9330:
9331: 2000-04-22 14:15 millert
9332:
9333: * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9334: sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9335: C<-Z> for command line flags in all places. This is more
9336: consistent and works around a bug in Pod::Man.
9337:
9338: 2000-04-22 13:59 millert
9339:
9340: * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9341: 'semicolon' that should be 'colon'
9342:
9343: 2000-04-19 15:30 millert
9344:
9345: * configure, configure.in: Fix --with-badpri help line
9346:
9347: 2000-04-17 14:01 millert
9348:
9349: * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9350: openlog() and closelog() since some authentication methods (like
9351: PAM) may do their own logging via syslog. Since we don't use
9352: syslog much (usually just once per session) this doesn't really
9353: incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9354:
9355: 2000-04-15 16:32 millert
9356:
9357: * sudo.c: Fix -H flag. runas_homedir is only valid after
9358: set_perms(PERM_RUNAS, mode)
9359:
9360: 2000-04-12 18:56 millert
9361:
9362: * INSTALL: Clarify the fact that insults are not enabled just by
9363: including them in the binary.
9364:
9365: 2000-04-07 10:39 millert
9366:
9367: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9368: sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9369:
9370: 2000-04-07 10:38 millert
9371:
9372: * Makefile.in: Give date string to pod2man since its default is
9373: ugly and it ain't got no alibi.
9374:
9375: 2000-04-07 10:27 millert
9376:
9377: * Makefile.in: Do section substitution on the output of pod2man and
9378: remove hack needed for old pod2man.
9379:
9380: 2000-04-07 10:26 millert
9381:
9382: * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9383: will do the substitution later.
9384:
9385: 2000-04-02 11:44 millert
9386:
9387: * configure, configure.in: Don't bother checking for the path to vi
9388: if user specified --with-editor
9389:
9390: 2000-04-01 17:25 millert
9391:
9392: * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9393: calling system(3).
9394:
9395: 2000-04-01 16:23 millert
9396:
9397: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9398: sudoers.pod, visudo.c: Visudo now checks for the existence of an
9399: editor and gives a sensible error if it does not exist.
9400:
9401: The path to the editor for visudo is now a colon-separated list
9402: of allowable editors. If the user has $EDITOR set and it matches
9403: one of the allowed editors that editor will be used. If not, the
9404: first editor in the list that actually exists is used.
9405:
9406: 2000-04-01 16:22 millert
9407:
9408: * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9409: return value.
9410:
9411: 2000-03-27 12:08 millert
9412:
9413: * Makefile.in: Strip sudo and visudo for bindist target
9414:
9415: 2000-03-26 22:26 millert
9416:
9417: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9418: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9419: @mansectsu@ and @mansectform@ in the man page bodies as well.
9420:
9421: 2000-03-26 22:07 millert
9422:
9423: * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9424: @sysconfdir@
9425:
9426: 2000-03-26 21:57 millert
9427:
9428: * Makefile.in: 'make dist' should not cause any files to be
9429: modified so remove its dependencies.
9430:
9431: 2000-03-26 21:43 millert
9432:
9433: * CHANGES: Whoops, forgot to add release marker
9434:
9435: 2000-03-26 11:57 millert
9436:
9437: * CHANGES: Final change for 1.6.3 (or so I hope)
9438:
9439: 2000-03-26 11:57 millert
9440:
9441: * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9442: BSD systems will have nroff...
9443:
9444: 2000-03-24 18:58 millert
9445:
9446: * parse.yacc: When checking to see if the host/user matches in a
9447: defaults spec, check against TRUE, not just non-zero since it
9448: might be -1.
9449:
9450: 2000-03-24 15:14 millert
9451:
9452: * configure.in, configure: OSF/1 puts file formats in section 4,
9453: not 5.
9454:
9455: 2000-03-24 15:13 millert
9456:
9457: * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9458:
9459: 2000-03-23 20:24 millert
9460:
9461: * RUNSON: Update for 1.6.3
9462:
9463: 2000-03-23 20:23 millert
9464:
9465: * configure, configure.in: If there is no inet_addr but there *is*
9466: an __inet_addr that's ok since inet_addr is probably just a macro
9467: then. The better thing to do would be to look for the macro, but
9468: this is fine for now.
9469:
9470: 2000-03-23 19:50 millert
9471:
9472: * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9473:
9474: 2000-03-23 19:40 millert
9475:
9476: * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9477: lives in $(srcdir), add a @mansrcdir@ configure variable so we
9478: can deal with this. Also, only remove *.man for 'distclean' not
9479: 'clean'.
9480:
9481: 2000-03-23 19:16 millert
9482:
9483: * sudo.c: set_loginclass() should be static like the proto says
9484:
9485: 2000-03-23 14:14 millert
9486:
9487: * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9488: header to avoid promotion of test to int, thus violating the
9489: prototype. Gcc handles this gracefully but more std ANSI
9490: compilers will complain.
9491:
9492: 2000-03-23 10:11 millert
9493:
9494: * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9495: FNM_CASEFOLD
9496:
9497: 2000-03-23 10:11 millert
9498:
9499: * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9500: fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9501: configure
9502:
9503: 2000-03-22 23:41 millert
9504:
9505: * CHANGES, TODO: update for 1.6.3
9506:
9507: 2000-03-22 23:38 millert
9508:
9509: * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9510: testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9511: not matching the FQHOST token type. There's really no need for a
9512: separate token for fully-qualified vs. unqualified anymore so
9513: FQHOST is now history and hostname_matches now decides which
9514: hostname (short or long) to check based on whether or not the
9515: pattern contains a '.'.
9516:
9517: 2000-03-22 23:09 millert
9518:
9519: * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9520: visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9521: in the hostname.
9522:
9523: 2000-03-22 22:50 millert
9524:
9525: * Makefile.in: Add targets for *.man.in, using config.status to
9526: generate *.man from *.man.in
9527:
9528: 2000-03-22 22:20 millert
9529:
9530: * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9531: option and enbolden refs to sudo and visudo.
9532:
9533: 2000-03-22 19:35 millert
9534:
9535: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9536: sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9537: visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9538: FreeBSD login.conf support (untested on BSD/OS) based on a patch
9539: from Michael D. Marchionna. configure now does substitution on
9540: the man pages, allowing us to fix up the paths and set the
9541: section correctly. Based on an idea from Michael D. Marchionna.
9542:
9543: 2000-03-22 19:27 millert
9544:
9545: * auth/passwd.c: Better fix for handling HP-UX aging info.
9546:
9547: 2000-03-22 19:20 millert
9548:
9549: * sudo.c: Add support for set_logname run-time default
9550:
9551: 2000-03-22 19:17 millert
9552:
9553: * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9554: substitution on these to produce *.man
9555:
9556: 2000-03-22 19:16 millert
9557:
9558: * sudo.man, sudoers.man, visudo.man: These files now get generated
9559: from *.man.in at configure time.
9560:
9561: 2000-03-22 18:40 millert
9562:
9563: * defaults.c, defaults.h: Add set_logname option so users can turn
9564: off setting of LOGNAME/USER environment variables.
9565:
9566: 2000-03-22 10:53 millert
9567:
9568: * testsudoers.c, lsearch.c, parse.c: kill register
9569:
9570: 2000-03-13 15:52 millert
9571:
9572: * auth/passwd.c: HP-UX adds extra info at the end for password
9573: aging so when comparing the result of crypt to pw_passwd we only
9574: compare the first len(epass) bytes *unless* the user entered an
9575: empty string for a password.
9576:
9577: 2000-03-13 11:05 millert
9578:
9579: * logging.c: Get rid of grandchild hack, it was causing problems
9580: and there is really no need for it. This fixes a bug where we
9581: spin eating up CPU when the user runs a long-running process like
9582: a shell.
9583:
9584: 2000-03-07 14:26 millert
9585:
9586: * sudo.c: User can always specify a login class if he/she is
9587: already root.
9588:
9589: 2000-03-06 23:29 millert
9590:
9591: * config.h.in, configure, configure.in, defaults.c, defaults.h,
9592: sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9593:
9594: 2000-03-06 14:42 millert
9595:
9596: * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9597: secureware support
9598:
9599: 2000-03-03 18:04 millert
9600:
9601: * auth/passwd.c: Truncate unencrypted password to 8 chars if
9602: encrypted password is exactly 13 characters (indicateing standard
9603: a DES password). Many versions of crypt() do this for you, but
9604: not all (like HP-UX's).
9605:
9606: 2000-03-01 21:01 millert
9607:
9608: * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9609:
9610: 2000-02-29 17:46 millert
9611:
9612: * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9613: via defaults.c
9614:
9615: 2000-02-29 17:41 millert
9616:
9617: * defaults.c: Use Argv[0] as the first arg to openlog() since
9618: visudo uses this too.
9619:
9620: 2000-02-28 18:58 millert
9621:
9622: * sudo.c: Stash coredumpsize resource limit and retsore it before
9623: the exec() Otherwise the child ends up with a coredumpsize of 0.
9624:
9625: 2000-02-26 22:56 millert
9626:
9627: * sudo.cat, sudo.man, sudo.pod: document -S flag
9628:
9629: 2000-02-26 22:54 millert
9630:
9631: * sudo.c: fix usage string
9632:
9633: 2000-02-26 22:48 millert
9634:
9635: * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9636: auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9637: -S flag (read passwd from stdin) and tgetpass_flags global that
9638: holds flags to be passed in to tgetpass(). Change echo_off param
9639: to tgetpass() into a flags field. There are currently 2 possible
9640: flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9641: abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9642: but echo is not set on the terminal, but sure to set it.
9643:
9644: 2000-02-26 22:11 millert
9645:
9646: * tgetpass.c: Fixed a bug that caused an infinite loop when the
9647: password timeout was disabled.
9648:
9649: 2000-02-18 12:56 millert
9650:
9651: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9652: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9653: runaspw, and targetpw options.
9654:
9655: 2000-02-18 12:11 millert
9656:
9657: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9658: visudo.c: enveditor -> env_editor
9659:
9660: 2000-02-15 19:07 millert
9661:
9662: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9663: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9664: visudo.cat, visudo.man: crank versino to 1.6.3
9665:
9666: 2000-02-15 19:03 millert
9667:
9668: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9669: sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9670: defaults and make visudo honor them. This means that visudo will
9671: now parse the sudoers file *before* it is edited so a bogus
9672: sudoers file will cause a warning to go to stderr. Also, visudo
9673: checks the variables once--it does not check them after each
9674: editor run since that could be confusing.
9675:
9676: 2000-02-15 18:49 millert
9677:
9678: * RUNSON: 1.6.2 -> 1.6.2p1
9679:
9680: 2000-02-15 18:36 millert
9681:
9682: * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9683: sudo.h
9684:
9685: 2000-02-13 13:38 millert
9686:
9687: * configure, configure.in: Fix thinko, some && should have been ||
9688: in the last commit
9689:
9690: 2000-02-13 13:28 millert
9691:
9692: * configure, configure.in: Don't initialized Makefile variables to
9693: be NULL since the user may want to import variables from their
9694: environment.
9695:
9696: 2000-02-03 21:09 millert
9697:
9698: * configure, configure.in: typo
9699:
9700: 2000-01-27 15:01 millert
9701:
9702: * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9703: 11.0;jaearick@colby.edu
9704:
9705: 2000-01-27 15:01 millert
9706:
9707: * CHANGES: recent changes; prepare for 1.6.2p1
9708:
9709: 2000-01-26 23:31 millert
9710:
9711: * find_path.c: Don't apply SECURE_PATH if user is example;
9712: jmknoble@pobox.com
9713:
9714: 2000-01-26 16:21 millert
9715:
9716: * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9717: 'defaults' options based on INSTALL file info.
9718:
9719: 2000-01-26 16:21 millert
9720:
9721: * INSTALL: Fix some while lies
9722:
9723: 2000-01-24 10:48 millert
9724:
9725: * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9726: instead of copying.
9727:
9728: 2000-01-23 22:57 millert
9729:
9730: * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9731:
9732: 2000-01-23 22:42 millert
9733:
9734: * RUNSON: Last minute updates
9735:
9736: 2000-01-23 22:26 millert
9737:
9738: * TROUBLESHOOTING: PAM entry
9739:
9740: 2000-01-23 22:23 millert
9741:
9742: * auth/pam.c: correct a comment
9743:
9744: 2000-01-23 22:03 millert
9745:
9746: * CHANGES, RUNSON: update for 1.6.2
9747:
9748: 2000-01-23 21:59 millert
9749:
9750: * auth/pam.c: Better detection of PAM errors and fix custom prompts
9751: with PAM. Based on patches from "Cloyce D. Spradling"
9752: <cloyce@headgear.org>
9753:
9754: 2000-01-20 11:15 millert
9755:
9756: * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9757: to an unsigned long long value.
9758:
9759: 2000-01-19 14:07 millert
9760:
9761: * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9762: sudoers locking in visudo. We now lock the sudoers file itself,
9763: not the temp file (since locking the temp file can foul up
9764: editors). The previous locking scheme didn't work because the fd
9765: was closed too early.
9766:
9767: 2000-01-19 13:37 millert
9768:
9769: * configure, config.h.in, configure.in: Don't need test for
9770: ftruncate() any more.
9771:
9772: 2000-01-18 21:23 millert
9773:
9774: * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9775: cc. Fixes compilation with the unbundled HP-UX cc.
9776:
9777: 2000-01-18 17:00 millert
9778:
9779: * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9780: Campbell <aaron@cs.dal.ca>
9781:
9782: 2000-01-17 18:46 millert
9783:
9784: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9785: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9786: tgetpass.c, version.h, visudo.c: update copyright year on changed
9787: files
9788:
9789: 2000-01-17 18:45 millert
9790:
9791: * RUNSON: updates
9792:
9793: 2000-01-17 18:45 millert
9794:
9795: * CHANGES: aix fix
9796:
9797: 2000-01-17 18:42 millert
9798:
9799: * INSTALL: Crank version to 1.6.2
9800:
9801: 2000-01-17 18:11 millert
9802:
9803: * configure: Crank version to 1.6.2
9804:
9805: 2000-01-17 17:46 millert
9806:
9807: * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9808: the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9809:
9810: 2000-01-17 12:32 millert
9811:
9812: * CHANGES: recent changes
9813:
9814: 2000-01-17 12:28 millert
9815:
9816: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9817: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9818: Crank version to 1.6.2
9819:
9820: 2000-01-17 12:25 millert
9821:
9822: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9823: 'shell_noargs' runtime option back in. We have to defer checking
9824: until after the sudoers file has been parsed but since there are
9825: now other options that operate that way this one can too. Based
9826: on a patch from bguillory@email.com.
9827:
9828: 2000-01-16 23:05 millert
9829:
9830: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9831: "verifypw" options.
9832:
9833: 2000-01-16 22:57 millert
9834:
9835: * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9836: o Add section on verifypw and listpw o Define how NOPASSWD
9837: interacts with the -v and -l flags
9838:
9839: 2000-01-14 12:39 millert
9840:
9841: * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9842: HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9843:
9844: 2000-01-14 12:29 millert
9845:
9846: * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9847: to the end and don't initialize the union member since that only
9848: works with an ANSI compiler. We set the value of the union by
9849: hand in init_defaults() anyway. This allows sudo to compile on a
9850: K&R compiler again.
9851:
9852: 2000-01-11 13:20 millert
9853:
9854: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9855: netgr_matches needs to check shost as well as host since they may
9856: be different.
9857:
9858: 2000-01-11 13:17 millert
9859:
9860: * tgetpass.c: End on \r as well as \n
9861:
9862: 2000-01-02 23:53 millert
9863:
9864: * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9865: chaning from 0400 to whatever SUDOERS_MODE is (converting from
9866: the old sudoers mode). Assumes that SUDOERS_MODE is less
9867: restrictive than 0400 which should always be the case.
9868:
9869: 2000-01-02 23:43 millert
9870:
9871: * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9872: sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9873: *any* entry for the user on the host with a NOPASSWD flag. For
9874: -v, only allow w/o a passwd if *all* entries for the user on the
9875: host w/ the specified runas user have the NOPASSWD flag set.
9876:
9877: 2000-01-02 23:26 millert
9878:
9879: * Makefile.in: add check target
9880:
9881: 1999-12-16 13:02 millert
9882:
9883: * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9884: looping.
9885:
9886: 1999-12-10 00:09 millert
9887:
9888: * CHANGES: recent changes
9889:
9890: 1999-12-08 23:04 millert
9891:
9892: * config.h.in, configure, configure.in, sudo.c: Add check for
9893: initgroups() since old SYSV lacks this.
9894:
9895: 1999-12-08 22:54 millert
9896:
9897: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9898: configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9899: Only define HAVE_FNMATCH if <fnmatch.h> exists.
9900:
9901: 1999-12-06 01:47 millert
9902:
9903: * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9904: to be enabled if the insults[] array is empty. Otherwise there
9905: would be division by zero.
9906:
9907: 1999-12-06 01:25 millert
9908:
9909: * insults.h: Don't care about USE_INSULTS #define since the insult
9910: stuff may be overridden at runtime.
9911:
9912: 1999-12-06 01:23 millert
9913:
9914: * auth/sudo_auth.c: Honor insults flag.
9915:
9916: 1999-12-05 19:14 millert
9917:
9918: * CHANGES, parse.c: Don't ask the user for a password if the user
9919: is not allowed to run the command and the authenticate flag (in
9920: sudoers) is false.
9921:
9922: 1999-12-05 19:05 millert
9923:
9924: * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9925: newline we change to the INITIAL state. o Enter GOTRUNAS when we
9926: see Runas_Alias
9927:
9928: This allows #uid to work in a RunasAlias.
9929:
9930: 1999-12-05 14:06 millert
9931:
9932: * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9933: and runaslist now return a value o in a runasspec, if a runaslist
9934: does not return TRUE, set runas_matches to FALSE. Normally, a
9935: runaslist only returns FALSE for explicitly denied users. o
9936: since runaslist does not modify the stack there is no need for a
9937: push/pop in runasalias.
9938:
9939: 1999-12-04 21:54 millert
9940:
9941: * check.c, sudo.c: Don't kill the user's tickets until after
9942: sudoers has been parsed since tty_tickets and ticket_dir could be
9943: set in sudoers.
9944:
9945: 1999-12-04 21:18 millert
9946:
9947: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
9948: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
9949: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
9950: version to 1.6
9951:
9952: 1999-12-04 21:18 millert
9953:
9954: * testsudoers.c: add set_fqdn() stub
9955:
9956: 1999-12-02 15:31 millert
9957:
9958: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
9959: sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
9960: it cannot work since the command needs to be set before sudoers
9961: is parsed. o Fix the "set_home" sudoers option (only worked at
9962: compile time). o Fix "fqdn" sudoers option. We now set
9963: host/shost via set_fqdn which gets called when the "fqdn"
9964: option is set in sudoers. o Move the openlog() to
9965: store_syslogfac() so this gets overridden correctly from the
9966: sudoers file.
9967:
9968: 1999-12-02 15:21 millert
9969:
9970: * auth/securid.c: SecurID support should compile now.
9971:
9972: 1999-11-28 20:56 millert
9973:
9974: * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
9975: visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
9976:
9977: 1999-11-28 18:51 millert
9978:
9979: * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
9980: the .html files as they are generated automatically on the web
9981: site.
9982:
9983: 1999-11-28 18:49 millert
9984:
9985: * CHANGES, LICENSE: kill characters that made wml unhappy
9986:
9987: 1999-11-28 18:34 millert
9988:
9989: * HISTORY: typo
9990:
9991: 1999-11-25 12:05 millert
9992:
9993: * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
9994:
9995: 1999-11-24 19:43 millert
9996:
9997: * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
9998: benefit of ctm
9999:
10000: 1999-11-23 22:52 millert
10001:
10002: * sudo.c: Make the -s flag be exclusive too. Also reorder the
10003: flags in the exclusive usage message so they are alphabetical.
10004:
10005: 1999-11-23 13:27 millert
10006:
10007: * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10008:
10009: 1999-11-23 13:07 millert
10010:
10011: * auth/API: fix typo
10012:
10013: 1999-11-23 13:07 millert
10014:
10015: * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10016:
10017: 1999-11-23 13:06 millert
10018:
10019: * auth/pam.c: fix a warning on redhat and spew an error if
10020: pam_authenticate() returns an error other than AUTH_SUCCESS or
10021: PAM_PERM_DENIED
10022:
10023: 1999-11-23 00:43 millert
10024:
10025: * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10026: password required is the user's not root's
10027:
10028: 1999-11-19 21:04 millert
10029:
10030: * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10031:
10032: 1999-11-18 19:13 millert
10033:
10034: * RUNSON: updates from Brian Jackson + some formatting
10035:
10036: 1999-11-17 21:39 millert
10037:
10038: * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10039: update o Changes for automating real binary releases
10040:
10041: 1999-11-17 21:38 millert
10042:
10043: * Makefile.in: Add bindist target
10044:
10045: 1999-11-16 16:26 millert
10046:
10047: * TROUBLESHOOTING: talk about run-time options in addition to
10048: compile-time options
10049:
10050: 1999-11-16 01:16 millert
10051:
10052: * CHANGES: fix typos
10053:
10054: 1999-11-16 01:09 millert
10055:
10056: * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10057:
10058: 1999-11-16 00:42 millert
10059:
10060: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10061: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10062: rid of references to sudo-bugs. Now mention the web site or the
10063: sudo@ alias
10064:
10065: 1999-11-16 00:35 millert
10066:
10067: * sudoers.html: repair pod2html damage
10068:
10069: 1999-11-16 00:28 millert
10070:
10071: * RUNSON, TODO: Update for 1.6 release
10072:
10073: 1999-11-16 00:23 millert
10074:
10075: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10076: about using ALL in a command context.
10077:
10078: 1999-11-09 15:12 millert
10079:
10080: * visudo.c: Call yyrestart() on a parse error to reset the lexer
10081: state.
10082:
10083: 1999-11-09 15:06 millert
10084:
10085: * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10086: yyrestart() into visudo.c since it might not get called in yywrap
10087: if we get a parse error (and we only reread the file on error
10088: anyway).
10089:
10090: 1999-11-09 14:32 millert
10091:
10092: * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10093: clean up any buffers that might still exist. Call yyrestart()
10094: instead of using the deprecated YY_NEW_FILE macro.
10095:
10096: 1999-11-09 12:13 millert
10097:
10098: * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10099:
10100: 1999-11-08 19:00 millert
10101:
10102: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10103: characters need to be escaped in names.
10104:
10105: 1999-11-08 18:59 millert
10106:
10107: * configure: regen
10108:
10109: 1999-11-08 18:59 millert
10110:
10111: * INSTALL: clarify Mac OS X entry
10112:
10113: 1999-11-08 18:59 millert
10114:
10115: * RUNSON: update
10116:
10117: 1999-11-08 17:45 millert
10118:
10119: * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10120: configure options for danity
10121:
10122: 1999-11-05 17:11 millert
10123:
10124: * defaults.c: Fix printing of type T_MODE in dump_defaults()
10125:
10126: 1999-11-05 12:00 millert
10127:
10128: * strcasecmp.c: missing sys/types.h
10129:
10130: 1999-11-05 00:42 millert
10131:
10132: * INSTALL: Break out options that may be overridden at run time
10133: into their own section. Add a not about Max OS X and correct
10134: some lies.
10135:
10136: 1999-11-04 14:01 millert
10137:
10138: * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10139: getrlimit to find the highest fd when closing all non-std fd's o
10140: Turn off core dumps via setrlimit for the sake of paranoia
10141:
10142: 1999-11-04 13:57 millert
10143:
10144: * RUNSON: updates
10145:
10146: 1999-11-01 10:59 millert
10147:
10148: * CHANGES: updates
10149:
10150: 1999-11-01 10:58 millert
10151:
10152: * tgetpass.c: When read()'ing, do a single character at a time to
10153: be sure we don't go oast the newline.
10154:
10155: 1999-11-01 10:43 millert
10156:
10157: * sudo.c: For the sudo_root option, check against user_uid, not
10158: getuid() since at this point, ruid == euid == 0.
10159:
10160: 1999-10-31 23:14 millert
10161:
10162: * RUNSON: some updates
10163:
10164: 1999-10-31 23:14 millert
10165:
10166: * logging.h: Fix compilation problem when --with-logging=file was
10167: specified. This means that syslog is now required to build sudo
10168: but that should not be a problem. If it is it can be fixed
10169: trivially with a configure check for syslog() or syslog.h.
10170:
10171: 1999-10-31 23:00 millert
10172:
10173: * tgetpass.c: Make this work again for things like "sudo echo hi |
10174: more" where the tty gets put into character at a time mode. We
10175: read until we read end of line or we run out of space (similar to
10176: fgets(3)).
10177:
10178: 1999-10-20 11:23 millert
10179:
10180: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10181: to bold
10182:
10183: 1999-10-20 11:23 millert
10184:
10185: * RUNSON: update
10186:
10187: 1999-10-16 13:56 millert
10188:
10189: * defaults.c: Error out if syslog parameters are given without a
10190: value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10191: since there are no facilities in the 4.2BSD syslog.
10192:
10193: 1999-10-15 16:37 millert
10194:
10195: * defaults.c: Ignore the syslog facility for systems w/ old syslog
10196: like Ultrix.
10197:
10198: 1999-10-15 12:51 millert
10199:
10200: * TROUBLESHOOTING: people with "." early in their path can have
10201: problems running sudo from the build dir ;-)
10202:
10203: 1999-10-13 00:18 millert
10204:
10205: * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10206:
10207: 1999-10-12 22:34 millert
10208:
10209: * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10210: auth/sudo_auth.h: New krb5 code from Frank Cusack
10211: <fcusack@iconnet.net>.
10212:
10213: 1999-10-12 22:33 millert
10214:
10215: * CHANGES: update to reality
10216:
10217: 1999-10-11 20:53 millert
10218:
10219: * auth/fwtk.c: include <auth.h> to get function prototypes.
10220:
10221: 1999-10-11 20:05 millert
10222:
10223: * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10224:
10225: 1999-10-11 19:42 millert
10226:
10227: * sudo.c: in set_perms(), always call setuid(0) before changing the
10228: ruid/euid so we always know it will succeed.
10229:
10230: 1999-10-11 12:24 millert
10231:
10232: * defaults.h: #undef T_FOO to avoid conflicts with system defines
10233: (like on ULTRIX).
10234:
10235: 1999-10-11 11:55 millert
10236:
10237: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10238: sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10239: needs some fleshing out but this is a start.
10240:
10241: 1999-10-10 17:21 millert
10242:
10243: * defaults.c: use strtol, not strtoul since not everyone has not
10244: strtoul
10245:
10246: 1999-10-10 15:01 millert
10247:
10248: * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10249: INITIAL state
10250:
10251: 1999-10-10 14:38 millert
10252:
10253: * lex.yy.c, parse.lex: o Add support for escaped characters in the
10254: WORD macro o Modify fill() to squash escape chars
10255:
10256: 1999-10-10 13:56 millert
10257:
10258: * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10259: checks for default values that are supposed to be pathnames. o
10260: Fix a duplicate free when visudo finds an error.
10261:
10262: 1999-10-09 01:01 millert
10263:
10264: * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10265:
10266: 1999-10-07 21:12 millert
10267:
10268: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10269: requiretty option o Move O_NOCTTY to compat.h
10270:
10271: 1999-10-07 21:12 millert
10272:
10273: * logging.c: The exit() in log_error() was mistakenly removed in a
10274: previous version. Put it back...
10275:
10276: 1999-10-07 17:20 millert
10277:
10278: * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10279: defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10280: logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10281: auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10282: Change defaults stuff to put the value right in the struct. o
10283: Implement mailer_flags o Store syslog stuff both in int and
10284: string form. Setting the string form magically updates the int
10285: version. o Add boolean attribute to strings where it makes sense
10286: to say !foo
10287:
10288: 1999-10-07 17:13 millert
10289:
10290: * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10291:
10292: 1999-10-06 00:48 millert
10293:
10294: * auth/API: cleanup function no longer takes a status arg
10295:
10296: 1999-10-06 00:48 millert
10297:
10298: * INSTALL: the the
10299:
10300: 1999-09-15 05:15 millert
10301:
10302: * TODO, config.h.in, configure, configure.in, logging.c: Use
10303: strftime() instead of ctime() if it is available.
10304:
10305: 1999-09-14 12:58 millert
10306:
10307: * defaults.c: fix copyright date
10308:
10309: 1999-09-14 12:57 millert
10310:
10311: * RUNSON: update ReliantUNIX entry
10312:
10313: 1999-09-14 12:56 millert
10314:
10315: * defaults.c, defaults.h, logging.c: add log_year option
10316:
10317: 1999-09-14 04:01 millert
10318:
10319: * configure, configure.in: add --without-sendmail to help output
10320:
10321: 1999-09-14 03:42 millert
10322:
10323: * configure, configure.in: enforce an otctal arg for
10324: --with-suoders-mode
10325:
10326: 1999-09-08 04:06 millert
10327:
10328: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10329: config.h.in, configure, configure.in, defaults.c, defaults.h,
10330: find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10331: sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10332: auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10333: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10334: "Defaults" line in sudoers to make configuration variables
10335: changable at runtime (and on a global, per-host and per-user
10336: basis). Both the names and the internal representation are still
10337: subject to change. It was necessary to make sudo_user.runas but
10338: a char ** instead of a char * since this value can be changed by
10339: a Defaults line. There is a similar (but more complicated) issue
10340: with sudo_user.prompt but it is handled differently at the
10341: moment.
10342:
10343: Add a "-L" flag to list the name of options with their
10344: descriptions. This may only be temporary.
10345:
10346: Move some prototypes to parse.h
10347:
10348: Be much less restrictive on what is allowed for a username.
10349:
10350: 1999-09-08 04:01 millert
10351:
10352: * sample.syslog.conf: Add more info
10353:
10354: 1999-09-04 03:09 millert
10355:
10356: * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10357: strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10358: from their license.
10359:
10360: 1999-08-31 05:39 millert
10361:
10362: * auth/sudo_auth.h: move dce_verofy proto to correct section
10363:
10364: 1999-08-31 05:39 millert
10365:
10366: * auth/dce.c: remove XXX
10367:
10368: 1999-08-28 06:00 millert
10369:
10370: * emul/fnmatch.h: Add fnmatch() prototype
10371:
10372: 1999-08-28 06:00 millert
10373:
10374: * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10375: emul/fnmatch.h to be after sudo.h for __P
10376:
10377: 1999-08-28 05:59 millert
10378:
10379: * sudo.h: add strcasecmp proto
10380:
10381: 1999-08-28 05:50 millert
10382:
10383: * auth/sudo_auth.c: add check for case where there are no auth
10384: methods
10385:
10386: 1999-08-28 05:36 millert
10387:
10388: * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10389: __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10390:
10391: 1999-08-28 05:24 millert
10392:
10393: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10394: everywhere we include string.h
10395:
10396: 1999-08-28 05:22 millert
10397:
10398: * version.c: nicer output when showing auth methods
10399:
10400: 1999-08-28 05:00 millert
10401:
10402: * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10403:
10404: 1999-08-28 04:49 millert
10405:
10406: * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10407:
10408: 1999-08-28 04:22 millert
10409:
10410: * parse.lex, lex.yy.c: fix definition of OCTECT
10411:
10412: 1999-08-28 04:10 millert
10413:
10414: * configure, configure.in: aix_auth.o not authenticate.o
10415:
10416: 1999-08-27 17:02 millert
10417:
10418: * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10419: generated from the keyboard). Since we run with ruid/euid == 0
10420: the user can't really signal us in nasty ways.
10421:
10422: 1999-08-27 17:01 millert
10423:
10424: * visudo.c: Don't need to worry about catching too many signals
10425: since we do locking on the tmp file. If a lockfile is really
10426: stale, it will be detected and overwritten.
10427:
10428: 1999-08-27 16:09 millert
10429:
10430: * INSTALL, Makefile.in: include auth/API in tarball
10431:
10432: 1999-08-27 16:09 millert
10433:
10434: * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10435: loop and only do the memset if we are *not* in standalone mode.
10436:
10437: 1999-08-27 13:46 millert
10438:
10439: * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10440:
10441: 1999-08-27 11:53 millert
10442:
10443: * sudo.c: fix --enable-noargs-shell
10444:
10445: 1999-08-27 11:06 millert
10446:
10447: * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10448:
10449: 1999-08-27 10:54 millert
10450:
10451: * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10452:
10453: 1999-08-27 10:50 millert
10454:
10455: * auth/dce.c: there were still some return(0)'s hanging around,
10456: make them AUTH_FAILURE
10457:
10458: 1999-08-27 10:39 millert
10459:
10460: * parse.c: typo in comment
10461:
10462: 1999-08-27 10:03 millert
10463:
10464: * version.c: add missing semicolon
10465:
10466: 1999-08-27 08:31 millert
10467:
10468: * auth/sudo_auth.h: missing backslash
10469:
10470: 1999-08-26 17:24 millert
10471:
10472: * CHANGES, config.h.in, configure, configure.in: Kill
10473: _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10474:
10475: 1999-08-26 09:21 millert
10476:
10477: * Makefile.in: add parse.h to HDRS
10478:
10479: 1999-08-26 09:16 millert
10480:
10481: * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10482: VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10483: in LIBS, commong ld flags go in LDFLAGS and network libs like
10484: -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10485: on Solaris and is a bit cleaner in general.
10486:
10487: 1999-08-26 06:56 millert
10488:
10489: * UPGRADE: mention ptmp -> sudoers.tmp
10490:
10491: 1999-08-26 06:12 millert
10492:
10493: * configure.in, configure, config.h.in: Define
10494: _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10495:
10496: 1999-08-26 05:37 millert
10497:
10498: * RUNSON: add 2 reports
10499:
10500: 1999-08-26 05:20 millert
10501:
10502: * auth/kerb5.c: Minor changes, mostly cosmetic.
10503: verify_krb_v5_tgt() changed to return a value more like a system
10504: function
10505:
10506: 1999-08-26 05:19 millert
10507:
10508: * auth/dce.c: Add an XXX
10509:
10510: 1999-08-26 05:19 millert
10511:
10512: * TODO: more things todo!
10513:
10514: 1999-08-26 05:18 millert
10515:
10516: * sample.sudoers: update based on what is in the man page
10517:
10518: 1999-08-26 05:10 millert
10519:
10520: * parse.yacc: minor change to first line printed in -l mode
10521:
10522: 1999-08-26 05:10 millert
10523:
10524: * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10525: VARIABLES" section to "ENVIRONMENT" to be more standard and add
10526: "EXAMPLES" section
10527:
10528: 1999-08-26 05:08 millert
10529:
10530: * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10531: "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10532: standard
10533:
10534: 1999-08-26 05:06 millert
10535:
10536: * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10537:
10538: 1999-08-26 05:05 millert
10539:
10540: * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10541:
10542: 1999-08-26 05:04 millert
10543:
10544: * UPGRADE: mention timestamp changes
10545:
10546: 1999-08-26 05:04 millert
10547:
10548: * PORTING: cosmetic cleanup
10549:
10550: 1999-08-26 05:00 millert
10551:
10552: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10553: sudoers(8) man page
10554:
10555: 1999-08-24 13:45 millert
10556:
10557: * version.c: Update comments about syslog name tables
10558:
10559: 1999-08-24 13:37 millert
10560:
10561: * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10562: configure.in, parse.yacc: include strcasecmp() for those without
10563: it
10564:
10565: 1999-08-24 12:43 millert
10566:
10567: * sample.sudoers: Use the : operator some more and fix a typo
10568:
10569: 1999-08-24 12:43 millert
10570:
10571: * HISTORY: update the history of sudo
10572:
10573: 1999-08-24 12:42 millert
10574:
10575: * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10576:
10577: 1999-08-24 12:41 millert
10578:
10579: * CHANGES: recent changes
10580:
10581: 1999-08-24 12:40 millert
10582:
10583: * sudo.tab.h: these should be generated with byacc, not bison
10584:
10585: 1999-08-24 12:40 millert
10586:
10587: * lex.yy.c: regen
10588:
10589: 1999-08-24 11:58 millert
10590:
10591: * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10592: the stored (expanded) alias was not stored with the contents.
10593: This could lead to incorrect output if the sudoers file had
10594: different alias types with the same name. Normal parsing (ie:
10595: not in '-l' mode) is unaffected.
10596:
10597: 1999-08-23 12:47 millert
10598:
10599: * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10600: proto on some systems
10601:
10602: 1999-08-22 13:10 millert
10603:
10604: * snprintf.c: fix comment
10605:
10606: 1999-08-22 13:09 millert
10607:
10608: * tgetpass.c: don't need limits.h
10609:
10610: 1999-08-22 07:36 millert
10611:
10612: * snprintf.c: kill bogus reference to vfprintf
10613:
10614: 1999-08-22 07:26 millert
10615:
10616: * sample.sudoers, sudoers: better examples
10617:
10618: 1999-08-22 07:23 millert
10619:
10620: * snprintf.c: Add some const in the K&R defs. This is safe since
10621: we define const away if the compiler doesn't grok it.
10622:
10623: 1999-08-22 07:22 millert
10624:
10625: * aclocal.m4, configure: Better test for working long long support.
10626: Ultrix compiler supports basic long long but not all operations
10627: on them.
10628:
10629: 1999-08-22 05:59 millert
10630:
10631: * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10632: sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10633: MAXINT before including hpsecurity.h to silence an HP-UX warning
10634: Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10635:
10636: 1999-08-21 15:00 millert
10637:
10638: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10639: snprintf.c: UCB-derived snprintf + asprintf support. Supports
10640: quads if the compiler does. No floating point yet, perhaps
10641: later...
10642:
10643: 1999-08-20 16:37 millert
10644:
10645: * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10646: auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10647: code as root, not the invoking user. It doesn't really gain us
10648: anything to run as the user since an attacker can just have an
10649: setuid(0) in their egg. Running as root solves potential
10650: problems wrt signalling.
10651:
10652: 1999-08-19 13:45 millert
10653:
10654: * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10655: let the signal handler get it if we are still running, else let
10656: init reap it for us. The extra time it takes to wait lets the
10657: user know that mail is being sent.
10658:
10659: Install SIGCHLD handler in main() and for POSIX signals, block
10660: everything *except* SIGCHLD.
10661:
10662: 1999-08-19 12:30 millert
10663:
10664: * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10665: INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10666: a bitmap instead of an int. This makes it possible to express
10667: things like "failed to validate because user not listed for this
10668: host". Some thigns that were previously VALIDATE_FOO are now
10669: FLAG_FOO. This may change later on.
10670:
10671: Reorganized code in log_auth() and sudo.c to deal with above
10672: changes.
10673:
10674: Safer versions of push/pushcp with in the do { ... } while (0)
10675: style
10676:
10677: parse.yacc now saves info on the stack to allow parse.c to
10678: determine if a user was listed, but not for the host he/she tried
10679: to run on.
10680:
10681: Added --with-mail-if-no-host option
10682:
10683: 1999-08-17 11:29 millert
10684:
10685: * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10686: visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10687: externally visible. o If pedantic > 1, it is a parse error. o
10688: Add -s (strict) option to visudo which sets pedantic to 2.
10689:
10690: 1999-08-17 11:26 millert
10691:
10692: * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10693:
10694: 1999-08-17 11:20 millert
10695:
10696: * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10697:
10698: 1999-08-17 10:29 millert
10699:
10700: * configure, configure.in, Makefile.in: Add testsudoers to default
10701: build target if --with-devel Don't clean generated parser files
10702: unless "distclean".
10703:
10704: 1999-08-17 08:47 millert
10705:
10706: * parse.yacc: In pedantic mode we need to save *all* the aliases,
10707: not just those that match, or we get spurious warnings.
10708:
10709: 1999-08-17 05:32 millert
10710:
10711: * TROUBLESHOOTING: reference samples.sylog.conf
10712:
10713: 1999-08-14 11:50 millert
10714:
10715: * sample.syslog.conf: Sample entries for syslog.conf
10716:
10717: 1999-08-14 11:40 millert
10718:
10719: * CHANGES: recent changes
10720:
10721: 1999-08-14 11:36 millert
10722:
10723: * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10724: pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10725: sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10726: configured into flags and add a flag to specify an auth method is
10727: running alone (the only one). Pass auth methods their sudo_auth
10728: pointer, not the data pointer. This allows us to get at the
10729: flags and tell if we are the only auth method. That, in turn,
10730: allows the method to be able to decide what should/should not be
10731: a fatal error. Currently only rfc1938 uses it this way, which
10732: allows us to kill the OTP_ONLY define and te hackery that went
10733: with it. With access to the sudo_auth struct, methods can also
10734: get at a string holding their cannonical name (useful in error
10735: messages).
10736:
10737: 1999-08-14 11:34 millert
10738:
10739: * Makefile.in, INSTALL, README, config.h.in, configure,
10740: configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10741: sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10742: o real dependencies in the Makefile o --with-devel option to
10743: enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10744: "foo->bar" o ALL goes back to being a token, not a string but
10745: don't leak memory o rename hsotspec -> host in parse.yacc
10746:
10747: 1999-08-12 12:26 millert
10748:
10749: * BUGS, CHANGES: recent changes
10750:
10751: 1999-08-12 12:24 millert
10752:
10753: * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10754: sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10755: *snprintf() before -ldb is added to LIBS since -ldb includes a
10756: bogus snprintf(). o Add forward refs for struct mbuf and struct
10757: rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10758: to fix -Wall o Add missing includes to fix more -Wall
10759:
10760: 1999-08-12 10:37 millert
10761:
10762: * INSTALL, check.c, config.h.in, configure, configure.in,
10763: parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10764: o Add a "pedentic" flag to the parser. This makes sudo warn in
10765: cases where an alias may be used before it is defined. Only
10766: turned on for visudo and testsudoers. o Add
10767: --disable-authentication option that makes sudo not require
10768: authentication by default. The PASSWD tag can be used to require
10769: authentication for an entry. We no longer overload
10770: --without-passwd.
10771:
10772: 1999-08-12 10:29 millert
10773:
10774: * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10775: USERNAME. These days a username can contain just about anything
10776: so be very permissive. Also drop the unused \. punctuation.
10777:
10778: 1999-08-09 18:25 millert
10779:
10780: * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10781: parse.h o find_alias() now returns an aliasinfo * instead of
10782: boolean o add_alias() now takes a value parameter to store in the
10783: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10784: return: 1) positive match 0) negative match (due to '!') -1) no
10785: match This means setting $$ explicitly in all cases, which I
10786: should have done in the first place. It also means that we
10787: always store a value that is != -1 and when we see a '!' we can
10788: set *_matches to !rv if rv != -1. The upshot of all of this is
10789: that '!' now works the way it should in lists and some of the
10790: rules are more uniform and sensible.
10791:
10792: 1999-08-09 18:17 millert
10793:
10794: * Makefile.in: add parse.h dependency
10795:
10796: 1999-08-09 18:17 millert
10797:
10798: * parse.h: kill unused *_matched macros
10799:
10800: 1999-08-09 10:35 millert
10801:
10802: * parse.yacc: Allow a list of users as the first thing in a user
10803: spec, not just a single entry. This makes things more uniform,
10804: though it does allow you to write user specs that are hard to
10805: read.
10806:
10807: 1999-08-09 10:08 millert
10808:
10809: * configure: regen
10810:
10811: 1999-08-09 10:08 millert
10812:
10813: * configure.in: fix check for crypt() in libufc
10814:
10815: 1999-08-07 14:03 millert
10816:
10817: * README: sudo-users list now exists
10818:
10819: 1999-08-07 07:46 millert
10820:
10821: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10822: reality.
10823:
10824: 1999-08-07 05:59 millert
10825:
10826: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10827: config.h.in, configure.in, logging.c, sudo.h, version.c,
10828: visudo.c, configure, fileops.c: o Move lock_file() and touch()
10829: into fileops.c so visudo can use them o Visudo now locks the
10830: sudoers temp file instead of bailing when the temp file already
10831: exists. This fixes the problem of stale temp files but it does
10832: *require* that you not try to put the temp file in a
10833: world-writable directory. This shoud not be an issue as the temp
10834: file should live in the same dir as sudoers. o Visudo now only
10835: installs the temp file as sudoers if it changed.
10836:
10837: 1999-08-06 09:49 millert
10838:
10839: * logging.c: add fcntl locking
10840:
10841: 1999-08-06 09:33 millert
10842:
10843: * configure, config.h.in, configure.in, logging.c: Lock the log
10844: file.
10845:
10846: 1999-08-06 05:36 millert
10847:
10848: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10849: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10850: /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10851: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10852: _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10853:
10854: 1999-08-05 17:38 millert
10855:
10856: * INSTALL, check.c, config.h.in, configure, configure.in,
10857: version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10858: more things to root sudo -V config reporting
10859:
10860: 1999-08-05 10:56 millert
10861:
10862: * configure, configure.in: aix_auth.o not authenticate.o
10863:
10864: 1999-08-05 10:48 millert
10865:
10866: * config.h.in: Add --with-goodpri and --with-badpri configure
10867: options to specify the syslog priority to use.
10868:
10869: 1999-08-05 10:30 millert
10870:
10871: * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10872: and --with-badpri configure options to specify the syslog
10873: priority to use.
10874:
10875: 1999-08-05 10:25 millert
10876:
10877: * compat.h: kill crufty AIX stuff
10878:
10879: 1999-08-05 06:55 millert
10880:
10881: * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10882: deal with $< like I would expect. Both GNU and BSD makes get
10883: this right but... So, we just expand $< inline at the cost of
10884: some ugliness.
10885:
10886: 1999-08-05 06:52 millert
10887:
10888: * version.c: If the invoking user is root, sudo will now print
10889: configure info in -V mode. Currently just prints logging info,
10890: to be expanded later.
10891:
10892: 1999-08-05 06:51 millert
10893:
10894: * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10895: facility and priority o use new print_version() functino for -V
10896: mode
10897:
10898: 1999-08-05 06:49 millert
10899:
10900: * check.c: Don't need version.c
10901:
10902: 1999-08-05 06:21 millert
10903:
10904: * configure, configure.in, aclocal.m4, config.h.in: Add check for
10905: syslog facilities and priorities tables in syslog.h
10906:
10907: 1999-08-05 05:23 millert
10908:
10909: * Makefile.in: o authenticate -> aix_auth o add version.c
10910:
10911: 1999-08-05 05:21 millert
10912:
10913: * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10914:
10915: 1999-08-04 13:32 millert
10916:
10917: * TODO: sudo should lock its logfile
10918:
10919: 1999-08-04 13:28 millert
10920:
10921: * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10922: shortcut macros for append() to make things more readable. o The
10923: separator in append() is now a string instead of a char. o In
10924: append(), only prepend the separator if the last char is not a
10925: '!'. This is a hack but it greatly simplifies '!' handling. o
10926: In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10927: inherited across entries in a list (matches current behavior).
10928: o Fix formatting in -l mode such that items in a list are
10929: separated by a space. Greatlt improves readability. o Space
10930: for name field in struct aliasinfo is now allocated dyanically
10931: instead of using a (big) buffer. o In add_alias(), only search
10932: the list once (lsearch instead of lfind + lsearch)
10933:
10934: 1999-08-04 11:31 millert
10935:
10936: * lex.yy.c, sudo.tab.h: regen
10937:
10938: 1999-08-04 10:54 millert
10939:
10940: * configure, configure.in: Solais pam doesn't require anye xtra
10941: setup
10942:
10943: 1999-08-04 05:35 millert
10944:
10945: * parse.yacc: o Simpler '!' support now that the lexer deals with
10946: multiple !'s for us. o In the case of opFOO, have FOO give a
10947: boolean return value and set foo_matches in opFOO, not FOO. o
10948: Treat 'ALL' as a string since it gets fill()'d in
10949: parse.lex--fixes a small memory leak. In the long run it may
10950: be better to just fix parse.lex and make ALL back into a token.
10951: However, having it be a string is useful since it can be
10952: easily passed back to the parent rule if we so desire.
10953:
10954: 1999-08-04 03:54 millert
10955:
10956: * parse.lex: o Remove some unnecessary backslashes o collapse
10957: multiple !'s by using !+ and checking if yyleng is even or odd.
10958: this allows us to simplify ! handling in parse.yacc
10959:
10960: 1999-08-04 03:53 millert
10961:
10962: * sudo.c: -u flag was being ignored
10963:
10964: 1999-08-01 13:04 millert
10965:
10966: * Makefile.in: correct fix
10967:
10968: 1999-08-01 12:37 millert
10969:
10970: * Makefile.in: work around pod2man stupididy
10971:
10972: 1999-08-01 12:35 millert
10973:
10974: * Makefile.in: correct dependencies for .cat
10975:
10976: 1999-08-01 12:26 millert
10977:
10978: * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
10979:
10980: 1999-08-01 12:25 millert
10981:
10982: * sudo.pod, visudo.pod: Add copyright Update to reality
10983:
10984: 1999-08-01 11:42 millert
10985:
10986: * parse.c, sudo.c, sudo.h: rename validate() to the more
10987: descriptive sudoers_lookup()
10988:
10989: 1999-08-01 06:49 millert
10990:
10991: * auth/aix_auth.c: use tgetpass
10992:
10993: 1999-07-31 12:32 millert
10994:
10995: * CHANGES: updates
10996:
10997: 1999-07-31 12:31 millert
10998:
10999: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11000: configure, configure.in, sudo.c: Sudo, not CU Sudo
11001:
11002: 1999-07-31 12:19 millert
11003:
11004: * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11005: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11006: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11007: lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11008: parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11009: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11010: visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11011: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11012: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11013: auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11014: LICENSE: add 4th term to license similar to term 5 in the apache
11015: license
11016:
11017: 1999-07-31 12:02 millert
11018:
11019: * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11020: sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11021:
11022: 1999-07-28 05:24 millert
11023:
11024: * CHANGES: updates
11025:
11026: 1999-07-28 05:21 millert
11027:
11028: * check.c: Use dirs instead of files for timestamp. This allows
11029: tty and non-tty schemes to coexist reasonably. Note, however,
11030: that when you update a tty ticket, the mtime on the user dir gets
11031: updated as well.
11032:
11033: 1999-07-28 05:17 millert
11034:
11035: * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11036: to link with "-lprot -lx" when linking test program, not just
11037: -lprot. Also add check for getspnam(). The SCO docs indicate
11038: that /etc/shadow can be used but this may be a lie.
11039:
11040: 1999-07-24 03:35 millert
11041:
11042: * auth/API: first cut at auth API description
11043:
11044: 1999-07-22 15:48 millert
11045:
11046: * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11047: securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11048: now an init method that gets run before the main loop. This
11049: allows auth routines to differentiate between initialization that
11050: happens once vs. setup that needs to run each time through the
11051: loop.
11052:
11053: 1999-07-22 12:23 millert
11054:
11055: * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11056:
11057: 1999-07-22 12:22 millert
11058:
11059: * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11060: versions of asprintf() and vasprintf()
11061:
11062: 1999-07-22 09:14 millert
11063:
11064: * TODO: remove 2 items. One done, one won't do.
11065:
11066: 1999-07-22 09:10 millert
11067:
11068: * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11069: visudo.cat, visudo.html, configure, lex.yy.c: regen
11070:
11071: 1999-07-22 09:06 millert
11072:
11073: * CHANGES: new changes
11074:
11075: 1999-07-22 09:01 millert
11076:
11077: * sudo.pod: o Document -K flag and update meaning of -k flag. o
11078: BSD-style copyright o Document clearing of BIND resolver
11079: environment variables o Clarify bit about shared libs o suggest
11080: rc files create /tmp/.odus if your OS gives away files
11081:
11082: 1999-07-22 08:59 millert
11083:
11084: * visudo.pod: BSD license
11085:
11086: 1999-07-22 08:58 millert
11087:
11088: * tgetpass.c: o BSD copyright o no need to block signals, we now do
11089: that in main() o cosmetic changes
11090:
11091: 1999-07-22 08:57 millert
11092:
11093: * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11094: sudo_user" instead of old globals. o some cometic cleanup
11095:
11096: 1999-07-22 08:56 millert
11097:
11098: * sudo_setenv.c, version.h: BSD-style copyright
11099:
11100: 1999-07-22 08:56 millert
11101:
11102: * sudo.h: o BSD copyright o logging and parser bits moved to their
11103: own .h files o new "struct sudo_user" to encapsulate many of the
11104: old globals.
11105:
11106: 1999-07-22 08:55 millert
11107:
11108: * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11109: use new logging routines o simplified flow of control o BIND
11110: resolver additions to badenv_table
11111:
11112: 1999-07-22 08:53 millert
11113:
11114: * strerror.c: BSD-style copyright
11115:
11116: 1999-07-22 08:53 millert
11117:
11118: * snprintf.c: Now compiles on more K&R compilers
11119:
11120: 1999-07-22 08:52 millert
11121:
11122: * putenv.c: BSD-style copyright, cosmetic changes
11123:
11124: 1999-07-22 08:51 millert
11125:
11126: * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11127: Move parser-specific defines and structs into parse.h + other
11128: cosmetic changes
11129:
11130: 1999-07-22 08:51 millert
11131:
11132: * logging.h: defines for logging routines
11133:
11134: 1999-07-22 08:49 millert
11135:
11136: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11137: interfaces.h, pathnames.h.in: BSD-style copyright
11138:
11139: 1999-07-22 08:48 millert
11140:
11141: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11142: copyright, cosmetic changes
11143:
11144: 1999-07-22 08:46 millert
11145:
11146: * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11147: add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11148: changes to fill in AUTH_OBJS for new auth api o check for
11149: strerror(), v?snprintf() and v?asprintf() o replace
11150: --with-AuthSRV with --with-fwtk
11151:
11152: 1999-07-22 08:43 millert
11153:
11154: * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11155: HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11156: HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11157: NO_PASSWD
11158:
11159: 1999-07-22 08:42 millert
11160:
11161: * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11162: are missing.
11163:
11164: 1999-07-22 08:39 millert
11165:
11166: * alloc.c: BSD-style copyright
11167:
11168: 1999-07-22 08:38 millert
11169:
11170: * TROUBLESHOOTING: no more --with-getpass
11171:
11172: 1999-07-22 08:34 millert
11173:
11174: * TODO: Take out things I've done...
11175:
11176: 1999-07-22 08:34 millert
11177:
11178: * README: Refer to LICENSE
11179:
11180: 1999-07-22 08:34 millert
11181:
11182: * PORTING: --with-getpass no longer exists
11183:
11184: 1999-07-22 08:33 millert
11185:
11186: * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11187: new files and new auth modules.
11188:
11189: 1999-07-22 08:32 millert
11190:
11191: * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11192: --with-fwtk and --without-passwd.
11193:
11194: 1999-07-22 08:31 millert
11195:
11196: * HISTORY: Update history a bit
11197:
11198: 1999-07-22 08:29 millert
11199:
11200: * COPYING, LICENSE: Now distributed under a BSD-style license
11201:
11202: 1999-07-22 08:28 millert
11203:
11204: * auth/sudo_auth.c: o BSD-style copyright o Add support for
11205: NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11206: rfc1938 code o new struct sudo_user global
11207:
11208: 1999-07-22 08:25 millert
11209:
11210: * auth/: pam.c, sia.c: BSD-style copyright and use new log
11211: functions
11212:
11213: 1999-07-22 08:24 millert
11214:
11215: * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11216: Use asprintf() and snprintf() where sensible.
11217:
11218: 1999-07-22 08:19 millert
11219:
11220: * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11221: handling is now done more reasonably--better sanity checks and
11222: tty-based stamps are now done as files in a directory with the
11223: same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11224: It is not currently possible to mix tty and non-tty based ticket
11225: schemes but this may change in the future (it requires sudo to
11226: use a directory instead of a file in the non-tty case). Also,
11227: ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11228: really deletes the file. That way you don't get the lecture
11229: again just because you killed your ticket in .logout. BSD-style
11230: copyright now.
11231:
11232: 1999-07-22 08:13 millert
11233:
11234: * logging.c: o rewritten logging routines. log_error() now takes
11235: printf-style varargs and log_auth() for the return value of
11236: validate(). o BSD-style copyright
11237:
11238: 1999-07-22 07:04 millert
11239:
11240: * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11241: auth API
11242:
11243: 1999-07-22 07:02 millert
11244:
11245: * auth/fwtk.c: Use snprintf() where it makes sense and add a
11246: BSD-style copyright
11247:
11248: 1999-07-22 07:00 millert
11249:
11250: * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11251: secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11252: copyright
11253:
11254: 1999-07-22 06:57 millert
11255:
11256: * emul/utime.h, utime.c: BSD-style copyright
11257:
11258: 1999-07-22 06:57 millert
11259:
11260: * emul/search.h: this has been rewritten so use my BSD-style
11261: copyright
11262:
11263: 1999-07-15 11:21 millert
11264:
11265: * snprintf.c: include malloc.h if no stdlib.h
11266:
11267: 1999-07-15 10:21 millert
11268:
11269: * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11270:
11271: 1999-07-15 10:20 millert
11272:
11273: * strerror.c: strerror() for systems w/o it
11274:
11275: 1999-07-12 06:53 millert
11276:
11277: * visudo.c: stylistic changes
11278:
11279: 1999-07-12 06:25 millert
11280:
11281: * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11282: comment
11283:
11284: 1999-07-11 16:10 millert
11285:
11286: * auth/pam.c: remove missed ref to PAM_nullpw
11287:
11288: 1999-07-11 16:10 millert
11289:
11290: * auth/sudo_auth.h: pasto
11291:
11292: 1999-07-11 15:19 millert
11293:
11294: * auth/kerb5.c: more or less complete now--still untested
11295:
11296: 1999-07-11 15:09 millert
11297:
11298: * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11299:
11300: 1999-07-11 14:42 millert
11301:
11302: * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11303: code into rfc1938.c
11304:
11305: 1999-07-11 07:22 millert
11306:
11307: * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11308: unchanged from dce_pwent.c
11309:
11310: 1999-07-11 06:44 millert
11311:
11312: * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11313: Could probably be much better
11314:
11315: 1999-07-11 06:43 millert
11316:
11317: * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11318: works (tested)
11319:
11320: 1999-07-11 05:37 millert
11321:
11322: * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11323:
11324: 1999-07-11 05:33 millert
11325:
11326: * auth/pam.c: don't use prompt global, it will go away
11327:
11328: 1999-07-11 05:32 millert
11329:
11330: * auth/secureware.c: correct copyright years
11331:
11332: 1999-07-10 20:32 millert
11333:
11334: * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11335: pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11336: New authentication API and methods
11337:
11338: 1999-07-08 06:46 millert
11339:
11340: * parse.yacc: only save an entry if user_matches && host_matches,
11341: even if the stack is empty (fix for previous commit)
11342:
11343: 1999-07-08 06:35 millert
11344:
11345: * parse.yacc: 1) Always save an entry on the stack if it is empty.
11346: This fixes the -l and -v flags that were broken by earlier parser
11347: changes.
11348:
11349: 2) In a Runas list, don't negate FALSE -> TRUE since that would
11350: make !foo match any time the user specified a runas user (via -u)
11351: other than foo.
11352:
11353: 1999-07-08 05:45 millert
11354:
11355: * testsudoers.c: interfaces and num_interfaces are now auto, not
11356: extern
11357:
11358: 1999-07-07 14:09 millert
11359:
11360: * auth.c: use a static global to keep stae about empty passwords
11361:
11362: 1999-07-07 14:08 millert
11363:
11364: * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11365: other modules
11366:
11367: 1999-07-05 16:53 millert
11368:
11369: * auth.c: PAM prompt code was wrong, looks like we have to kludge
11370: it after all.
11371:
11372: 1999-07-05 16:35 millert
11373:
11374: * auth.c: In the PAM code, when a user hits return at the first
11375: password prompt, exit without a warning just like the normal auth
11376: code
11377:
11378: 1999-07-05 16:15 millert
11379:
11380: * configure, configure.in: kludge around cross-compiler false
11381: positives
11382:
11383: 1999-07-05 16:14 millert
11384:
11385: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11386: (correct) PAM code Tgetpass now takes an echo flag for use with
11387: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11388: useless umask setting Change error from BAD_ALLOCATION ->
11389: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11390: auth.c for consistency
11391:
11392: 1999-07-05 16:11 millert
11393:
11394: * sudo.c: Some -Wall and kill some trailing spaces
11395:
11396: 1999-07-05 16:10 millert
11397:
11398: * configure.in: define -D__EXTENSIONS__ for solaris so we get
11399: crypt() proto
11400:
11401: 1999-06-22 09:42 millert
11402:
11403: * RUNSON: add Dynix 4.4.4
11404:
11405: 1999-06-22 09:30 millert
11406:
11407: * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11408: version, fall back on old kerb4 auth code
11409:
11410: 1999-06-22 06:41 millert
11411:
11412: * INSTALL: clarify some things
11413:
11414: 1999-06-22 06:38 millert
11415:
11416: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11417:
11418: 1999-06-14 19:47 millert
11419:
11420: * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11421:
11422: 1999-06-03 12:34 millert
11423:
11424: * tgetpass.c: Fix open(2) return value checking, was NULL for
11425: fopen, should be -1 for open
11426:
11427: 1999-06-03 12:06 millert
11428:
11429: * configure: regen
11430:
11431: 1999-06-03 12:06 millert
11432:
11433: * configure.in: better wording for solaris pam notice
11434:
11435: 1999-06-03 11:52 millert
11436:
11437: * CHANGES: document recent changes
11438:
11439: 1999-06-03 11:52 millert
11440:
11441: * TROUBLESHOOTING: Update shadow password section
11442:
11443: 1999-06-03 11:51 millert
11444:
11445: * auth.c: move authentication code from check.c to auth.c
11446:
11447: 1999-06-03 11:51 millert
11448:
11449: * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11450:
11451: 1999-05-16 21:36 millert
11452:
11453: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11454: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11455: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11456: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11457: interface-related defines to interfaces.h so we don't have to
11458: include <netinet/in.h> everywhere.
11459:
11460: 1999-05-14 12:30 millert
11461:
11462: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11463: logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11464: braindeath with our own SUDO_MAX_PASS.
11465: It turns out the old DES crypt does the right thing with
11466: passwords
11467: longert than 8 characters.
11468: o Fix common typo (necesary -> necessary)
11469: o Update TODO list
11470:
11471: 1999-05-03 12:00 millert
11472:
11473: * sudo.c: set $LOGNAME when we set $USER
11474:
11475: 1999-04-27 00:00 millert
11476:
11477: * INSTALL: add comment about digital unix and interfaces.c warning
11478: with gcc
11479:
11480: 1999-04-15 01:12 millert
11481:
11482: * sample.sudoers: use modern paths and give examples for some of
11483: the new parser features
11484:
11485: 1999-04-10 13:03 millert
11486:
11487: * parse.c: fix comment
11488:
11489: 1999-04-10 00:49 millert
11490:
11491: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11492: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11493: parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11494: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11495: Function names should be flush with the start of the line so they
11496: can be found trivially in an editor and with grep
11497:
11498: 1999-04-10 00:40 millert
11499:
11500: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11501: parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11502: is already void, no need to cast it
11503:
11504: 1999-04-10 00:37 millert
11505:
11506: * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11507: (this should not be possible)
11508:
11509: 1999-04-10 00:10 millert
11510:
11511: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11512: testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11513: listed in sudoers) to the command instead of stashing the struct
11514: stat. Should be safer.
11515:
11516: 1999-04-08 19:56 millert
11517:
11518: * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11519: release
11520:
11521: 1999-04-07 20:20 millert
11522:
11523: * CHANGES: updated
11524:
11525: 1999-04-07 19:18 millert
11526:
11527: * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11528: sudoers.pod: You can now specifiy a host list instead of just a
11529: host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11530: now works.
11531:
11532: 1999-04-07 02:59 millert
11533:
11534: * testsudoers.c: Quiet -Wall
11535:
11536: 1999-04-07 02:50 millert
11537:
11538: * parse.yacc: Move the push from the beginning of cmndspec to the
11539: end. This means we no longer have to do a push at the end of
11540: privilege, just reset some values.
11541:
11542: 1999-04-06 20:24 millert
11543:
11544: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11545: and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11546: most everywhere
11547:
11548: 1999-04-06 14:12 millert
11549:
11550: * sudoers.pod: modernize paths and update su example based on
11551: sample.sudoers one
11552:
11553: 1999-04-06 14:06 millert
11554:
11555: * sample.sudoers: New runas semantics
11556:
11557: 1999-04-06 13:54 millert
11558:
11559: * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11560: configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11561: ourselves so we don't need to rely on the system strdup(3) which
11562: may or may not exist. There is now no need to provide strdup()
11563: for those w/o it. Also, the prototype for estrdup() was wrong,
11564: it returns char * and its param is const.
11565:
11566: 1999-04-06 13:40 millert
11567:
11568: * getcwd.c: $Sudo tag
11569:
11570: 1999-04-06 13:20 millert
11571:
11572: * check.c: buf should be prompt; Michael Robokoff
11573: <mrobo@networkcs.com>
11574:
11575: 1999-04-06 01:40 millert
11576:
11577: * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11578: operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11579: and User_Alias.
11580:
11581: 1999-04-06 01:38 millert
11582:
11583: * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11584: GLOBAL_PROBLEM
11585:
11586: 1999-04-06 01:08 millert
11587:
11588: * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11589: as subscript.
11590:
11591: 1999-04-06 01:00 millert
11592:
11593: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11594: VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11595: command but the NOPASSWD flag was set. Make runasspec,
11596: runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11597: support for '!' in the runas list Fix double printing of '%' and
11598: '+' for groups and netgroups respectively Add *_matched macros
11599: (no need for local stack variable). Should only be used directly
11600: after a pop (since top must be >= 2).
11601:
11602: 1999-04-05 23:25 millert
11603:
11604: * aclocal.m4, configure.in: Add copyright, somewhat silly
11605:
11606: 1999-04-05 16:57 millert
11607:
11608: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11609: check_sia.c, compat.h, config.h.in, configure, configure.in,
11610: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11611: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11612: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11613: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11614: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11615: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11616: visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11617: 1.6 and combine copyright statements
11618:
11619: 1999-04-05 16:30 millert
11620:
11621: * sample.sudoers: Use ! not ^ to do negation
11622:
11623: 1999-04-05 16:29 millert
11624:
11625: * lex.yy.c: regen
11626:
11627: 1999-04-05 16:28 millert
11628:
11629: * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11630: across entris in a command list. Add a PASSWD tag to reverse
11631: NOPASSWD. When you override a runas or *PASSWD tag the value
11632: given becomes the new default for the rest of the command list.
11633:
11634: 1999-04-02 16:03 millert
11635:
11636: * CHANGES, RUNSON: update for 1.5.9
11637:
11638: 1999-04-02 16:02 millert
11639:
11640: * visudo.c: Shift return value of system(3) by 8 to get real exit
11641: value and if it is not 1 or 0 print the retval along with the
11642: error message.
11643:
11644: 1999-03-30 16:45 millert
11645:
11646: * Makefile.in: testsudoers needs LIBOBJS too
11647:
11648: 1999-03-30 12:17 millert
11649:
11650: * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11651: like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11652: would not allow millert to run ls as root.
11653:
11654: 1999-03-30 01:08 millert
11655:
11656: * CHANGES: new change
11657:
11658: 1999-03-30 01:03 millert
11659:
11660: * parse.yacc: Save entries that match a ! command on the matching
11661: stack too
11662:
11663: 1999-03-30 01:01 millert
11664:
11665: * sudo.c: Make sudo's usage info better when mutually exclusive
11666: args are given and don't rely on argument order to detect this;
11667: nick@zeta.org.au
11668:
11669: 1999-03-29 15:03 millert
11670:
11671: * CHANGES, Makefile.in, RUNSON: updates from CU
11672:
11673: 1999-03-28 23:38 millert
11674:
11675: * Makefile.in: use gzip
11676:
11677: 1999-03-28 23:31 millert
11678:
11679: * parse.yacc: Fix off by one error introduced in *alloc changes
11680:
11681: 1999-03-28 23:05 millert
11682:
11683: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11684: check_sia.c, compat.h, config.h.in, configure, configure.in,
11685: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11686: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11687: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11688: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11689: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11690: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11691: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11692: emul/utime.h: ++version
11693:
11694: 1999-03-28 21:59 millert
11695:
11696: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11697: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11698: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11699: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11700: emalloc/erealloc/estrdup
11701:
11702: 1999-03-28 20:29 millert
11703:
11704: * alloc.c: error checking memory allocation routines
11705:
11706: 1999-03-28 19:23 millert
11707:
11708: * parse.yacc: Still not right, this fixes it for real
11709:
11710: 1999-03-28 19:08 millert
11711:
11712: * parse.yacc: Fix for previous commit
11713:
11714: 1999-03-28 19:05 millert
11715:
11716: * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11717: when mixing different runas specs and ! commands. For example:
11718: millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11719: allow millert to run whoami as root as well as daemon when it
11720: should just allow daemon. The problem was that comma-separated
11721: commands in a list shared the same entry on the matching stack.
11722: Now they get their own entry iff there is a full match. It may
11723: be better to just make the runas spec persistent across all
11724: commands in a list like the user and host entries of the matching
11725: stack. However, since that is a fairly major change it should
11726: gets its own minor rev increase.
11727:
11728: 1999-03-28 13:50 millert
11729:
11730: * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11731: warning on Linux
11732:
11733: 1999-03-26 13:17 millert
11734:
11735: * CHANGES: updates
11736:
11737: 1999-03-26 13:12 millert
11738:
11739: * sample.sudoers: better su entry
11740:
11741: 1999-03-26 13:10 millert
11742:
11743: * configure: regen
11744:
11745: 1999-03-26 13:09 millert
11746:
11747: * check.c, configure.in: new pam code that works on solaris, should
11748: work on linux too; aelberg@home.com
11749:
11750: 1999-03-19 14:44 millert
11751:
11752: * RUNSON: more entries
11753:
11754: 1999-03-19 14:43 millert
11755:
11756: * config.h.in: only include strings.h if there is no string.h
11757:
11758: 1999-03-17 15:25 millert
11759:
11760: * config.guess: Sinix is now being called ReliantUNIX;
11761: bjjackso@us.oracle.com
11762:
11763: 1999-03-13 13:37 millert
11764:
11765: * sudo.c: shost must be set before log functions are called #ifdef
11766: HOST_IN_LOG
11767:
11768: 1999-03-07 18:34 millert
11769:
11770: * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11771: command args. Stop processing an arg when you hit a backslash so
11772: the quoted-character detection can catch it.
11773:
11774: 1999-02-26 01:19 millert
11775:
11776: * interfaces.c: include sys/time.h; aparently AIX needs it.
11777: ppz@cdu.elektra.ru
11778:
11779: 1999-02-23 19:43 millert
11780:
11781: * configure, configure.in: add missing case statement so
11782: --without-sendmail works
11783:
11784: 1999-02-22 21:51 millert
11785:
11786: * CHANGES: more
11787:
11788: 1999-02-22 15:10 millert
11789:
11790: * configure, configure.in: only search for -lsun in irix <= 4.x
11791:
11792: 1999-02-22 15:01 millert
11793:
11794: * configure, configure.in: back out last configure.in change now
11795: that I've hacked autoconf to fix the real problem and add a
11796: missing newline
11797:
11798: 1999-02-22 14:32 millert
11799:
11800: * CHANGES: updated
11801:
11802: 1999-02-22 14:05 millert
11803:
11804: * getcwd.c: add def of dirfd() for those without it
11805:
11806: 1999-02-22 10:58 millert
11807:
11808: * configure.in, configure: When falling back to checking for
11809: socket() when linking with "-lsocket -lnsl" check for main()
11810: instead since autoconf has already cached the results of checking
11811: for socket() in -lsocket. This is really an autoconf bug as it
11812: should use the extra libs as part of the cache variable name.
11813:
11814: 1999-02-22 10:47 millert
11815:
11816: * configure.in: typo
11817:
11818: 1999-02-21 15:18 millert
11819:
11820: * configure.in: fix occurrence of $with_timeout that should be
11821: $with_password_timeout;
11822: Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11823:
11824: 1999-02-17 11:40 millert
11825:
11826: * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11827: espie@openbsd.org
11828:
11829: 1999-02-11 01:41 millert
11830:
11831: * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11832: it does not have it
11833:
11834: 1999-02-09 13:11 millert
11835:
11836: * configure, configure.in: define for_BSD_TYPES irix
11837:
11838: 1999-02-06 19:47 millert
11839:
11840: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11841: clear that it is the user's password, not root's, that we want.
11842:
11843: 1999-02-06 19:43 millert
11844:
11845: * check.c, sudo.h: If the user enters an empty password and really
11846: has no password, accept the empty password they entered.
11847: Perviously, they could enter anything *but* an empty password.
11848: Also, add GETPASS macro that calls either tgetpass() or getpass()
11849: depending on how sudo was configured. Problem noted by
11850: jdg@maths.qmw.ac.uk
11851:
11852: 1999-02-02 23:32 millert
11853:
11854: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11855: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11856: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11857: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11858: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11859: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11860: emul/utime.h: add explicate copyright
11861:
11862: 1999-02-02 23:16 millert
11863:
11864: * CHANGES: mention -lsocket, -lnsl configure changes
11865:
11866: 1999-02-02 17:54 millert
11867:
11868: * sudo.c: Don't clobber errno after calling check_sudoers().
11869:
11870: 1999-01-31 19:46 millert
11871:
11872: * configure.in, configure: When linking with both -lsocket and
11873: -lnsl be sure to do so in that order. Also, when we can't find
11874: socket() or inet_addr() and have to try linking with both libs,
11875: issue a warning.
11876:
11877: 1999-01-31 19:45 millert
11878:
11879: * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11880:
11881: 1999-01-23 12:18 millert
11882:
11883: * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11884: entry
11885:
11886: 1999-01-22 13:13 millert
11887:
11888: * configure, CHANGES, INSTALL, configure.in: fix and correctly
11889: document --with-umask; problem noted by adap@adap.org
11890:
11891: 1999-01-19 20:38 millert
11892:
11893: * configure.in, configure: only use /usr/{man,catman}/local to
11894: store man pages if suer didn't override prefix or mandir
11895:
11896: 1999-01-19 20:24 millert
11897:
11898: * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11899: take an arg
11900:
11901: 1999-01-18 21:53 millert
11902:
11903: * RUNSON: updates from users
11904:
11905: 1999-01-18 21:04 millert
11906:
11907: * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11908: 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11909:
11910: 1999-01-18 20:00 millert
11911:
11912: * configure, configure.in: better fix for the problem of unresolved
11913: symbols in -lnsl or -lsocket
11914:
11915: 1999-01-18 19:39 millert
11916:
11917: * configure, configure.in: when checking for functions in -lnsl and
11918: -lsocket link with both of them to avoid unresolved symbols on
11919: some weirdo systems
11920:
11921: 1999-01-17 20:49 millert
11922:
11923: * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11924: RCS before the RCS->CVS switch
11925:
11926: 1999-01-17 18:16 millert
11927:
11928: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11929: configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11930: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11931: interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11932: parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11933: sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11934: tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11935: emul/utime.h: add sudo tags
11936:
11937: 1999-01-17 17:53 millert
11938:
11939: * version.h, sudo.h: testing Sudo tag
11940:
11941: 1999-01-17 17:40 millert
11942:
11943: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
11944: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
11945: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11946: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
11947: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11948: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
11949: sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
11950: tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
11951: emul/utime.h: crank version and regen files
11952:
11953: 1999-01-17 17:27 millert
11954:
11955: * Makefile.in: kill rcs goop in update_version and fix now that
11956: version is a const
11957:
11958: 1999-01-17 17:08 millert
11959:
11960: * INSTALL, check.c, config.h.in, configure, configure.in,
11961: logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
11962: fcusack@iconnet.net
11963:
11964: 1999-01-17 16:45 millert
11965:
11966: * realpath.c, sudo_realpath.c: we no longer use realpath
11967:
11968: 1999-01-17 16:44 millert
11969:
11970: * qualify.c: replaced by find_path.c
11971:
11972: 1999-01-17 16:43 millert
11973:
11974: * options.h: all options are now configure flags
11975:
11976: 1999-01-17 16:42 millert
11977:
11978: * lex.yy.c: regen
11979:
11980: 1999-01-17 16:41 millert
11981:
11982: * getwd.c: superceded by getcwd.c
11983:
11984: 1999-01-17 16:36 millert
11985:
11986: * getpass.c: superceded by tgetpass.c
11987:
11988: 1999-01-17 16:36 millert
11989:
11990: * SUPPORTED: superceded by RUNSON
11991:
11992: 1999-01-17 16:33 millert
11993:
11994: * OPTIONS: No longer used now that we have configure options for
11995: everything.
11996:
11997: 1999-01-17 16:32 millert
11998:
11999: * configure: regen based on configure.in
12000:
12001: 1999-01-17 16:31 millert
12002:
12003: * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12004: sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12005: on sudo.pod, sudoers.pod, and visudo.pod
12006:
12007: 1998-12-11 12:16 millert
12008:
12009: * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12010:
12011: 1998-12-07 16:16 millert
12012:
12013: * interfaces.c: close sock when we are done with it
12014:
12015: 1998-11-27 19:37 millert
12016:
12017: * parse.yacc: never say "error on line -1"
12018:
12019: 1998-11-23 23:38 millert
12020:
12021: * configure.in: check for -lnsl before -lsocket
12022:
12023: 1998-11-23 23:29 millert
12024:
12025: * configure.in: quote '[', ']' used in ranges correctly
12026:
12027: 1998-11-21 17:54 millert
12028:
12029: * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12030:
12031: 1998-11-20 18:33 millert
12032:
12033: * version.h: 1.5.7
12034:
12035: 1998-11-20 18:33 millert
12036:
12037: * INSTALL: more info for 1.5.7
12038:
12039: 1998-11-20 18:30 millert
12040:
12041: * README: update for 1.5.7
12042:
12043: 1998-11-20 14:26 millert
12044:
12045: * parse.yacc: make increases of cm_list_size and ga_list_size be
12046: similar to increases of stacksize (ie: >= not > in initial
12047: compare).
12048:
12049: 1998-11-20 14:22 millert
12050:
12051: * parse.yacc: when we get a syntax error, report it for the
12052: previous line since that's generally where the error occurred.
12053:
12054: 1998-11-18 15:31 millert
12055:
12056: * config.h.in, configure.in, interfaces.c: add back check for
12057: sys/sockio.h but only use it if SIOCGIFCONF is not defined
12058:
12059: 1998-11-18 15:25 millert
12060:
12061: * config.h.in: define BSD_COMP for svr4
12062:
12063: 1998-11-17 23:16 millert
12064:
12065: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12066: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12067: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12068: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12069: -Wall
12070:
12071: 1998-11-17 23:10 millert
12072:
12073: * configure.in: kill check for sockio,h
12074:
12075: 1998-11-17 23:10 millert
12076:
12077: * config.h.in: no more HAVE_SYS_SOCKIO_H
12078:
12079: 1998-11-17 22:51 millert
12080:
12081: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12082: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12083: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12084: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12085: -Wall
12086:
12087: 1998-11-16 17:38 millert
12088:
12089: * sudo.c: add missing inform_user()
12090:
12091: 1998-11-13 19:21 millert
12092:
12093: * find_path.c: return NOT_FOUND if given fully qualified path and
12094: it does not exist previously it would perror(ENOENT) which
12095: bypasses the option to not leak path info
12096:
12097: 1998-11-13 19:20 millert
12098:
12099: * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12100: for kerb, check for -ldes
12101:
12102: 1998-11-13 14:19 millert
12103:
12104: * INSTALL: tty tickets are user:tty now
12105:
12106: 1998-11-13 14:10 millert
12107:
12108: * check.c: when using tty tickets make it user:tty not user.tty as
12109: a username could have a '.' in it
12110:
12111: 1998-11-09 19:15 millert
12112:
12113: * sudo.c: add "ignoring foo found in ." for auth successful case
12114:
12115: 1998-11-09 17:57 millert
12116:
12117: * sudo.c: add missing printf param
12118:
12119: 1998-11-08 15:56 millert
12120:
12121: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12122: go back to printing "command not found" unless
12123: --disable-path-info specified. Also, tell user when we ignore
12124: '.' in their path and it would have been used but for
12125: --with-ignore-dot.
12126:
12127: 1998-11-08 13:51 millert
12128:
12129: * check.c, sudo.c: Only one space after a colon, not two, in
12130: printf's
12131:
12132: 1998-11-05 12:59 millert
12133:
12134: * sudo.pod: document setting $USER
12135:
12136: 1998-11-04 22:24 millert
12137:
12138: * check.c: fix bugs with prompt expansion
12139:
12140: 1998-11-04 21:21 millert
12141:
12142: * sudo.c: set $USER for root too
12143:
12144: 1998-11-04 17:13 millert
12145:
12146: * getspwuid.c: typo
12147:
12148: 1998-11-04 17:07 millert
12149:
12150: * configure.in: HP-UX's iscomsec is in -lsec, not libc
12151:
12152: 1998-11-03 22:24 millert
12153:
12154: * configure.in: remove some entries in the OS case statement that
12155: did nothing
12156:
12157: 1998-11-03 22:19 millert
12158:
12159: * TROUBLESHOOTING: add "cd" section and flush out syslog section
12160:
12161: 1998-11-03 20:51 millert
12162:
12163: * Makefile.in: no more sudo-lex.yy.c
12164:
12165: 1998-11-03 20:50 millert
12166:
12167: * check_sia.c: add custom prompt support
12168:
12169: 1998-11-03 20:40 millert
12170:
12171: * sudo.c: kill perror("malloc") since we already have a good error
12172: messages pw_ent -> pw for brevity set $USER if -u specified
12173:
12174: 1998-11-03 20:39 millert
12175:
12176: * parse.c: kill perror("malloc") since we already have a good error
12177: messages pw_ent -> pw for brevity when checking if %group
12178: matches, look up user in password file so that %groups works in a
12179: RunAs spec.
12180:
12181: 1998-11-03 20:39 millert
12182:
12183: * logging.c, parse.yacc: kill perror("malloc") since we already
12184: have a good error messages
12185:
12186: 1998-11-03 20:38 millert
12187:
12188: * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12189: perror("malloc") since we already have a good error messages
12190: pw_ent -> pw for brevity
12191:
12192: 1998-11-03 15:03 millert
12193:
12194: * tgetpass.c: the prompt is expanded before tgetpass is called
12195:
12196: 1998-11-03 15:03 millert
12197:
12198: * sudo.h: tgetpass now has the same args as getpass again
12199:
12200: 1998-11-03 15:02 millert
12201:
12202: * getspwuid.c: add iscomsec, issecure support
12203:
12204: 1998-11-03 15:02 millert
12205:
12206: * check.c: we now expand any %h or %u in the prompt before passing
12207: to tgetpass
12208:
12209: 1998-11-03 14:58 millert
12210:
12211: * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12212:
12213: 1998-11-03 14:56 millert
12214:
12215: * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12216:
12217: 1998-11-03 14:55 millert
12218:
12219: * configure.in: add check for iscomsec in HP-UX
12220:
12221: 1998-11-03 14:51 millert
12222:
12223: * configure.in: check for issecure if we have getpwanam on SunOS
12224: some options are incompatible with DUNIX SIA check for dispcrypt
12225: on DUNIX
12226:
12227: 1998-10-25 15:21 millert
12228:
12229: * config.h.in: add HAVE_DISPCRYPT
12230:
12231: 1998-10-25 15:21 millert
12232:
12233: * secureware.c: add back support for non-dispcrypt based checking
12234: for older DUNIX
12235:
12236: 1998-10-25 00:51 millert
12237:
12238: * INSTALL: sia changes
12239:
12240: 1998-10-25 00:48 millert
12241:
12242: * configure.in: SIA becomes the default on Digital UNIX now havbe
12243: --disable-sia to turn it off...
12244:
12245: 1998-10-24 23:52 millert
12246:
12247: * check.c: move local includes after system ones
12248:
12249: 1998-10-24 19:28 millert
12250:
12251: * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12252: INCORRECT_PASSWORD or an insult to stderr
12253:
12254: 1998-10-24 19:07 millert
12255:
12256: * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12257: password. Only the first iteration was working.
12258:
12259: 1998-10-21 21:00 millert
12260:
12261: * aclocal.m4: don't trust UID_MAX or MAXUID
12262:
12263: 1998-10-21 20:35 millert
12264:
12265: * configure.in: fix two pastos
12266:
12267: 1998-10-21 20:30 millert
12268:
12269: * configure.in: fix typo
12270:
12271: 1998-10-21 20:19 millert
12272:
12273: * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12274: legal to be negative in DUNX 5.0
12275:
12276: 1998-10-21 20:15 millert
12277:
12278: * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12279: -lm but check for -ldb since DUNX < 4.0 lacks it
12280:
12281: 1998-10-21 19:50 millert
12282:
12283: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12284: secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12285: 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12286: exist).
12287:
12288: 1998-10-20 17:22 millert
12289:
12290: * INSTALL: updated --with-editor blurb
12291:
12292: 1998-10-20 17:21 millert
12293:
12294: * TROUBLESHOOTING: tell how to put sudoers in a different dir
12295:
12296: 1998-10-20 16:22 millert
12297:
12298: * configure.in: add missing quotes around $with_editor
12299:
12300: 1998-10-20 14:00 millert
12301:
12302: * configure.in: typo in --with-editor bits
12303:
12304: 1998-10-20 01:24 millert
12305:
12306: * INSTALL: I don't expect it to work on Solaris
12307:
12308: 1998-10-20 01:24 millert
12309:
12310: * check.c: add back security/pam_misc.h
12311:
12312: 1998-10-19 17:13 millert
12313:
12314: * INSTALL: remove dunix note since configure checks for this now
12315:
12316: 1998-10-19 16:30 millert
12317:
12318: * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12319: bad)
12320:
12321: 1998-10-19 14:32 millert
12322:
12323: * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12324: dispcrypt(3)
12325:
12326: 1998-10-19 14:32 millert
12327:
12328: * config.h.in: add HAVE_INITPRIVS
12329:
12330: 1998-10-19 14:31 millert
12331:
12332: * sudo.c: call initprivs() if we have it for getprpwuid later on
12333:
12334: 1998-10-19 14:30 millert
12335:
12336: * Makefile.in: clean pathnames.h too
12337:
12338: 1998-10-19 14:28 millert
12339:
12340: * configure.in: quote "Sorry, try again." with [] since it has a
12341: comma in it set LIBS when we add stuff to SUDO_LIBS set
12342: SECUREWARE when we find getprpwuid() so we can check for
12343: bigcrypt, set_auth_parameters, and initprivs later.
12344:
12345: 1998-10-19 13:48 millert
12346:
12347: * INSTALL: update Digital UNIX note about acl.h
12348:
12349: 1998-10-18 20:26 millert
12350:
12351: * INSTALL: add --with-sia --without-root-sudo ->
12352: --disable-root-sudo some reordering
12353:
12354: 1998-10-18 20:22 millert
12355:
12356: * secureware.c: add whitespace
12357:
12358: 1998-10-18 20:22 millert
12359:
12360: * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12361: sudo.h: add SIA support
12362:
12363: 1998-10-18 20:21 millert
12364:
12365: * check_sia.c: Initial revision
12366:
12367: 1998-10-18 19:42 millert
12368:
12369: * configure.in: when checking for -lsocket, -lnsl, and -linet,
12370: check for the specific functions we need from them.
12371:
12372: 1998-10-18 19:10 millert
12373:
12374: * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12375:
12376: 1998-10-18 18:15 millert
12377:
12378: * sudo.h, Makefile.in: added check_secureware
12379:
12380: 1998-10-18 18:12 millert
12381:
12382: * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12383: bits
12384:
12385: 1998-10-18 18:00 millert
12386:
12387: * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12388: other sets defined. configure now does that for us
12389:
12390: 1998-10-18 17:45 millert
12391:
12392: * configure.in: move some --with options around change a bunch of
12393: echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12394:
12395: 1998-10-18 01:09 millert
12396:
12397: * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12398: that caused a syntax error add some echo verbage
12399:
12400: 1998-10-17 18:08 millert
12401:
12402: * check.c: moved SecureWare stuff into secureware.c
12403:
12404: 1998-10-17 18:07 millert
12405:
12406: * secureware.c: Initial revision
12407:
12408: 1998-10-17 17:02 millert
12409:
12410: * INSTALL: update url to solaris gcc bins
12411:
12412: 1998-10-17 16:39 millert
12413:
12414: * INSTALL: change option formatter and flesh out someentries
12415:
12416: 1998-10-17 16:18 millert
12417:
12418: * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12419: environment variable
12420:
12421: 1998-10-17 16:01 millert
12422:
12423: * BUGS: everything is now done via configure
12424:
12425: 1998-10-17 16:00 millert
12426:
12427: * README: prev rev was 1.5.6
12428:
12429: 1998-10-17 00:33 millert
12430:
12431: * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12432: correctly
12433:
12434: 1998-10-17 00:32 millert
12435:
12436: * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12437: the Makefile
12438:
12439: 1998-10-17 00:31 millert
12440:
12441: * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12442: sudoers_gid, sudoers_mode from configure
12443:
12444: 1998-10-17 00:30 millert
12445:
12446: * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12447: substituted into the Makefile, not config.h
12448:
12449: 1998-10-17 00:30 millert
12450:
12451: * INSTALL: document all --with/--enable options
12452:
12453: 1998-10-15 02:25 millert
12454:
12455: * insults.h: options.h is no more
12456:
12457: 1998-10-15 02:25 millert
12458:
12459: * config.h.in: assimilated options.h
12460:
12461: 1998-10-15 02:24 millert
12462:
12463: * configure.in: moved options from options.h to configure
12464:
12465: 1998-10-15 01:41 millert
12466:
12467: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12468: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12469: sudo_setenv.c, visudo.c: no more options.h
12470:
12471: 1998-10-15 01:39 millert
12472:
12473: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12474: to options.h
12475:
12476: 1998-10-15 01:32 millert
12477:
12478: * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12479:
12480: 1998-10-15 00:10 millert
12481:
12482: * tgetpass.c: if select return < -1 still prompt for pw
12483:
12484: 1998-10-15 00:03 millert
12485:
12486: * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12487: IGNORE_DOT_PATH into configure options
12488:
12489: 1998-10-14 23:57 millert
12490:
12491: * parse.c: FAST_MATCH is no longer an optino
12492:
12493: 1998-10-14 23:52 millert
12494:
12495: * check.c: remove_timestamp() if timestamp is preposterous
12496:
12497: 1998-10-14 23:36 millert
12498:
12499: * options.h: convert more options to --with/--enable
12500:
12501: 1998-10-14 23:36 millert
12502:
12503: * INSTALL, aclocal.m4: logfile -> logpath
12504:
12505: 1998-10-14 23:31 millert
12506:
12507: * configure.in: convert more options into --with and --enable
12508:
12509: 1998-10-14 23:28 millert
12510:
12511: * tgetpass.c: catch EINTR in select and restart
12512:
12513: 1998-10-14 23:15 millert
12514:
12515: * logging.c: sys/errno -> errno
12516:
12517: 1998-09-24 11:40 millert
12518:
12519: * sudo.c: UMASK -> SUDO_UMASK.
12520:
12521: 1998-09-24 11:36 millert
12522:
12523: * check.c, logging.c: time.h, not sys/time.h
12524:
12525: 1998-09-21 19:52 millert
12526:
12527: * logging.c: MAILER -> _PATH_SENDMAIL
12528:
12529: 1998-09-21 00:06 millert
12530:
12531: * INSTALL, configure.in: no more --with-C2, now it is
12532: --disable-shadow
12533:
12534: 1998-09-21 00:00 millert
12535:
12536: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12537: getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12538: Always include shadow support if the platform supports it and the
12539: user did not disable it via configure
12540:
12541: 1998-09-20 19:48 millert
12542:
12543: * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12544:
12545: 1998-09-20 19:16 millert
12546:
12547: * Makefile.in: pathnames.h -> pathnames.h.in
12548:
12549: 1998-09-20 19:14 millert
12550:
12551: * check.c: fix version string
12552:
12553: 1998-09-20 19:12 millert
12554:
12555: * check.c: move pam_conv to be static to auth function remove
12556: pam_misc.h (solaris doesn't have one)
12557:
12558: 1998-09-20 19:10 millert
12559:
12560: * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12561: SUDO_PROG_PWD
12562:
12563: 1998-09-20 19:10 millert
12564:
12565: * configure.in: munge pathnames.h.in -> pathnames.h kill
12566: SUDO_PROG_PWD
12567:
12568: 1998-09-20 19:10 millert
12569:
12570: * pathnames.h.in: convert to pathnames.h.in
12571:
12572: 1998-09-18 20:20 millert
12573:
12574: * configure.in: fix typo in sysv4 matching case /.
12575:
12576: 1998-09-18 01:29 millert
12577:
12578: * check.c: pam stuff needs to run as root, not user, for shadow
12579: passwords
12580:
12581: 1998-09-17 12:26 millert
12582:
12583: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12584: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12585: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12586: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12587: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12588: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12589: BUGS, INSTALL, README, configure.in: updated version
12590:
12591: 1998-09-17 12:13 millert
12592:
12593: * check.c: user version.h for long message
12594:
12595: 1998-09-17 11:53 millert
12596:
12597: * check.c: this is version 1.5.6
12598:
12599: 1998-09-16 13:42 millert
12600:
12601: * Makefile.in: remove errant backslash
12602:
12603: 1998-09-14 22:25 millert
12604:
12605: * options.h, parse.yacc, pathnames.h.in: fix version string
12606:
12607: 1998-09-14 22:02 millert
12608:
12609: * BUGS, CHANGES, TODO: updtaed for 1.5.6
12610:
12611: 1998-09-14 22:02 millert
12612:
12613: * RUNSON: updated for 1.5.6
12614:
12615: 1998-09-14 11:48 millert
12616:
12617: * interfaces.c: kill unused localhost_mask var copy if name to
12618: ifr_tmp after we zero it
12619:
12620: 1998-09-13 15:50 millert
12621:
12622: * INSTALL: Better description of new vs. old sudoers modes fix some
12623: typos better description of /usr/ucb/cc gotchas on slowaris
12624:
12625: 1998-09-13 15:49 millert
12626:
12627: * Makefile.in: add sample.pam
12628:
12629: 1998-09-13 15:32 millert
12630:
12631: * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12632:
12633: 1998-09-12 11:10 millert
12634:
12635: * README: mention TROUBLESHOOTING more fix some typos
12636:
12637: 1998-09-11 20:30 millert
12638:
12639: * configure.in: move --enable/--disable to be after --with
12640:
12641: 1998-09-11 20:30 millert
12642:
12643: * INSTALL: document --enable/--disable
12644:
12645: 1998-09-11 20:26 millert
12646:
12647: * INSTALL: document --with-pam
12648:
12649: 1998-09-11 19:47 millert
12650:
12651: * configure.in: Add message for pam users
12652:
12653: 1998-09-11 19:27 millert
12654:
12655: * sample.pam: Initial revision
12656:
12657: 1998-09-11 19:23 millert
12658:
12659: * config.h.in: fix HAVE_PAM
12660:
12661: 1998-09-11 19:19 millert
12662:
12663: * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12664: <GCalvin@kenwoodusa.com>
12665:
12666: 1998-09-10 18:51 millert
12667:
12668: * config.h.in: add HOST_IN_LOG and WRAP_LOG
12669:
12670: 1998-09-10 18:51 millert
12671:
12672: * logging.c: add WRAP_LOG and HOST_IN_LOG
12673:
12674: 1998-09-10 18:37 millert
12675:
12676: * configure.in: add --enable-log-host and --enable-log-wrap
12677:
12678: 1998-09-10 18:32 millert
12679:
12680: * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12681: --with-timedir
12682:
12683: 1998-09-08 20:45 millert
12684:
12685: * compat.h: add howmany macro
12686:
12687: 1998-09-08 20:43 millert
12688:
12689: * tgetpass.c: include sys/param.h to get howmany macro
12690:
12691: 1998-09-07 20:42 millert
12692:
12693: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12694: add RUNAS_DEFAULT
12695:
12696: 1998-09-07 12:51 millert
12697:
12698: * fnmatch.c: bring in stdio.h for NULL
12699:
12700: 1998-09-07 12:50 millert
12701:
12702: * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12703:
12704: 1998-09-07 12:43 millert
12705:
12706: * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12707:
12708: 1998-09-07 12:42 millert
12709:
12710: * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12711:
12712: 1998-09-07 12:41 millert
12713:
12714: * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12715: if secureware
12716:
12717: 1998-09-07 12:39 millert
12718:
12719: * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12720:
12721: 1998-09-07 12:06 millert
12722:
12723: * interfaces.c: initialize previfname
12724:
12725: 1998-09-07 11:51 millert
12726:
12727: * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12728: SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12729: IFF_LOOPBACK instead of kludging it
12730:
12731: 1998-09-07 11:49 millert
12732:
12733: * configure.in: typo
12734:
12735: 1998-09-07 00:01 millert
12736:
12737: * Makefile.in: don't need special build line for sudo.tab.o
12738:
12739: 1998-09-06 23:58 millert
12740:
12741: * Makefile.in: don't clean sudo.tab.[ch]
12742:
12743: 1998-09-06 23:48 millert
12744:
12745: * sudo.c: Sudo should prompt for a password before telling the user
12746: that a command could not be found.
12747:
12748: 1998-09-06 23:47 millert
12749:
12750: * BUGS: for 1.5.6
12751:
12752: 1998-09-06 23:25 millert
12753:
12754: * INSTALL, README: no longer require yacc
12755:
12756: 1998-09-06 23:19 millert
12757:
12758: * Makefile.in: typo
12759:
12760: 1998-09-06 23:18 millert
12761:
12762: * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12763:
12764: 1998-09-06 23:09 millert
12765:
12766: * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12767: command args if you get a '='
12768:
12769: 1998-09-06 22:59 millert
12770:
12771: * insults.h: fix version ,
12772:
12773: 1998-09-06 22:57 millert
12774:
12775: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12776: fix version
12777:
12778: 1998-09-06 22:55 millert
12779:
12780: * getcwd.c: getcwd(3) from OpenBSD for those without it.
12781:
12782: 1998-09-06 22:51 millert
12783:
12784: * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12785:
12786: 1998-09-06 22:49 millert
12787:
12788: * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12789: a pipe to getpwd!
12790:
12791: 1998-09-06 22:41 millert
12792:
12793: * parse.c: use NAMLEN() macro
12794:
12795: 1998-09-06 22:34 millert
12796:
12797: * fnmatch.c: remove duplicate include of string.h
12798:
12799: 1998-09-06 22:28 millert
12800:
12801: * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12802:
12803: 1998-09-06 22:28 millert
12804:
12805: * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12806:
12807: 1998-09-06 22:28 millert
12808:
12809: * config.h.in: add dev_t and ino_t
12810:
12811: 1998-07-28 12:44 millert
12812:
12813: * check.c: fix OTP_ONLY for opie
12814:
12815: 1998-06-24 12:22 millert
12816:
12817: * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12818:
12819: 1998-05-19 00:10 millert
12820:
12821: * Makefile.in: make update_version saner
12822:
12823: 1998-05-18 23:32 millert
12824:
12825: * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12826:
12827: 1998-05-18 23:32 millert
12828:
12829: * configure.in: check for waitpid and wait3 or no waitpid
12830:
12831: 1998-05-18 23:31 millert
12832:
12833: * logging.c: used waitpid or wait3 if we have 'em
12834:
12835: 1998-05-02 14:16 millert
12836:
12837: * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12838: Faigon)
12839:
12840: 1998-04-27 20:09 millert
12841:
12842: * configure.in: don't need to explicately mention -lsocket -lnsl
12843: for sequent
12844:
12845: 1998-04-25 01:56 millert
12846:
12847: * configure.in: dynix should not link with -linet
12848:
12849: 1998-04-10 15:32 millert
12850:
12851: * INSTALL: mention that HP-UX doesn't ship with yacc
12852:
12853: 1998-04-06 22:35 millert
12854:
12855: * check.c: ignore kerberos if we can't get the local realm
12856:
12857: 1998-04-05 23:37 millert
12858:
12859: * configure.in, BUGS, INSTALL, README: ++version
12860:
12861: 1998-04-05 23:36 millert
12862:
12863: * version.h: ++
12864:
12865: 1998-04-05 23:35 millert
12866:
12867: * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12868: find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12869: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12870: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12871: visudo.c: updated version
12872:
12873: 1998-04-05 23:34 millert
12874:
12875: * check.c, sudo.h: fix version
12876:
12877: 1998-04-05 23:33 millert
12878:
12879: * getcwd.c: don't use popen/pclose. Do it inline.
12880:
12881: 1998-04-05 23:25 millert
12882:
12883: * lsearch.c: add rcsid
12884:
12885: 1998-04-05 23:21 millert
12886:
12887: * sudo.c: typo
12888:
12889: 1998-04-05 23:17 millert
12890:
12891: * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12892: insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12893: check.c: updated version
12894:
12895: 1998-04-05 23:15 millert
12896:
12897: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12898: MAX*
12899:
12900: 1998-04-05 23:14 millert
12901:
12902: * Makefile.in: getwd.c -> getcwd.c
12903:
12904: 1998-04-05 22:49 millert
12905:
12906: * config.h.in: kill HAVE_GETWD
12907:
12908: 1998-04-05 22:49 millert
12909:
12910: * configure.in: getcwd, not getwd
12911:
12912: 1998-04-05 22:48 millert
12913:
12914: * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12915: defeats the purpose
12916:
12917: 1998-03-31 00:15 millert
12918:
12919: * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12920:
12921: 1998-03-31 00:05 millert
12922:
12923: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12924: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12925: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12926: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12927: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12928: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12929: updated version
12930:
12931: 1998-03-30 23:54 millert
12932:
12933: * configure.in: support *-ccur-sysv4 and fix two typos
12934:
12935: 1998-03-27 19:52 millert
12936:
12937: * configure.in: don't echo about with_logfile and with_timedir
12938:
12939: 1998-03-27 19:49 millert
12940:
12941: * INSTALL: document --with-logfile and --with-timedir
12942:
12943: 1998-03-27 19:46 millert
12944:
12945: * aclocal.m4: support --with-logfile and --with-timedir
12946:
12947: 1998-03-27 19:46 millert
12948:
12949: * configure.in: Add --with-logfile and --with-timedir
12950:
12951: 1998-03-27 19:27 millert
12952:
12953: * sudo.c: change size computation of NewArgv for UNICOS
12954:
12955: 1998-02-18 20:10 millert
12956:
12957: * configure.in: treate -*-sysv4* like *-*-svr4
12958:
12959: 1998-02-18 18:19 millert
12960:
12961: * configure.in: fix spacing for --with-authenticate help
12962:
12963: 1998-02-18 16:39 millert
12964:
12965: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12966: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12967: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12968: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12969: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12970: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12971: updated version
12972:
12973: 1998-02-18 16:23 millert
12974:
12975: * parse.yacc: fix off by one error in push macro
12976:
12977: 1998-02-17 01:15 millert
12978:
12979: * configure.in: removed bogus alloca hack
12980:
12981: 1998-02-17 01:15 millert
12982:
12983: * check.c: added AIX 4.x authenticate() support
12984:
12985: 1998-02-17 01:11 millert
12986:
12987: * parse.yacc: include alloca.h if using bison and not gcc and it
12988: exists. fixes an alloca problem on hpux 10.x
12989:
12990: 1998-02-17 00:39 millert
12991:
12992: * INSTALL: mention --with-authenticate
12993:
12994: 1998-02-17 00:37 millert
12995:
12996: * configure.in: added AIX authenticate() support
12997:
12998: 1998-02-17 00:22 millert
12999:
13000: * config.h.in: add HAVE_AUTHENTICATE
13001:
13002: 1998-02-16 23:58 millert
13003:
13004: * interfaces.c: dynamically size ifconf buffer
13005:
13006: 1998-02-16 23:56 millert
13007:
13008: * configure.in: quote '[' and ']'
13009:
13010: 1998-02-16 21:42 millert
13011:
13012: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13013: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13014: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13015: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13016: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13017: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13018: updated version
13019:
13020: 1998-02-16 19:06 millert
13021:
13022: * visudo.pod: add ERRORS section
13023:
13024: 1998-02-16 18:57 millert
13025:
13026: * TROUBLESHOOTING: add busy stmp file explanation
13027:
13028: 1998-02-15 18:49 millert
13029:
13030: * configure.in: the name of the cached var that signals whether or
13031: not you are cross compiling changed. It is now
13032: ac_cv_prog_cc_cross
13033:
13034: 1998-02-11 16:26 millert
13035:
13036: * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13037:
13038: 1998-02-06 21:55 millert
13039:
13040: * sample.sudoers, sudoers.pod: better example of su but not root su
13041:
13042: 1998-02-06 15:49 millert
13043:
13044: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13045: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13046: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13047: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13048: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13049: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13050: updated version
13051:
13052: 1998-02-06 15:48 millert
13053:
13054: * Makefile.in: correct regexp for updating version
13055:
13056: 1998-02-06 14:05 millert
13057:
13058: * tgetpass.c: remove bogus flush of stderr spew prompt before
13059: turning off echo. Seems to fix a weird problem where if sudo
13060: complained about a bogus stamp file the user would sometimes not
13061: have a chance to enter a password
13062:
13063: 1998-02-06 14:05 millert
13064:
13065: * check.c: fix bogus flush of stderr
13066:
13067: 1998-02-05 19:19 millert
13068:
13069: * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13070:
13071: 1998-02-05 19:18 millert
13072:
13073: * configure.in: support hpux1[0-9] not just hpux10
13074:
13075: 1998-01-30 14:59 millert
13076:
13077: * parse.c: set sudoers_fp to nil after closing
13078:
13079: 1998-01-24 01:05 millert
13080:
13081: * config.guess, config.sub: updated from autoconf 2.12
13082:
13083: 1998-01-24 00:50 millert
13084:
13085: * configure.in: add *-*-svr4 rule
13086:
13087: 1998-01-22 22:53 millert
13088:
13089: * tgetpass.c: fix select usage for high fd's (dynamically allocate
13090: readfds)
13091:
13092: 1998-01-22 22:49 millert
13093:
13094: * check.c: kill extra whitespace
13095:
13096: 1998-01-22 19:28 millert
13097:
13098: * sudo.c: do an initgroups() before running a command, unless the
13099: target user is root.
13100:
13101: 1998-01-22 12:22 millert
13102:
13103: * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13104: syslog.conf
13105:
13106: 1998-01-21 01:56 millert
13107:
13108: * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13109: emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13110: version
13111:
13112: 1998-01-21 01:32 millert
13113:
13114: * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13115: updated version
13116:
13117: 1998-01-21 01:29 millert
13118:
13119: * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13120: ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13121: check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13122: updated version
13123:
13124: 1998-01-21 01:20 millert
13125:
13126: * Makefile.in: more tweaks to update_version
13127:
13128: 1998-01-21 01:19 millert
13129:
13130: * Makefile.in: fixed up update_version rule
13131:
13132: 1998-01-21 00:55 millert
13133:
13134: * configure.in: ++version
13135:
13136: 1998-01-21 00:53 millert
13137:
13138: * Makefile.in: removed supe of check.c
13139:
13140: 1998-01-21 00:51 millert
13141:
13142: * INSTALL: ++version I missed
13143:
13144: 1998-01-21 00:51 millert
13145:
13146: * RUNSON: updated
13147:
13148: 1998-01-21 00:48 millert
13149:
13150: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13151: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13152: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13153: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13154: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13155: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13156: visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13157:
13158: 1998-01-21 00:47 millert
13159:
13160: * CHANGES: updated for 1.5.5
13161:
13162: 1998-01-21 00:35 millert
13163:
13164: * Makefile.in: add rules to update version stuff in files so I
13165: don't need to do it by hand
13166:
13167: 1998-01-21 00:04 millert
13168:
13169: * sudo.h: sudoers_fp is now extern
13170:
13171: 1998-01-21 00:03 millert
13172:
13173: * sudo.c: in check_sudoers, cache the sudoers file handle in
13174: sudoers_fp so we don't have to open it again in the parse. This
13175: may help with weird solaris problems where EAGAIN sometime
13176: occurrs.
13177:
13178: 1998-01-21 00:02 millert
13179:
13180: * parse.c: sudoers file open is now done only in check_sudoers() so
13181: we just do a rewind() instead of an open. May help people on
13182: solaris who were getting EAGAIN.
13183:
13184: 1998-01-16 11:43 millert
13185:
13186: * INSTALL: mention that newer glibc is fixed
13187:
13188: 1998-01-13 12:58 millert
13189:
13190: * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13191: so ignore _RLD* instead of _RLD_*
13192:
13193: 1998-01-13 10:32 millert
13194:
13195: * parse.c: typo
13196:
13197: 1998-01-13 10:19 millert
13198:
13199: * parse.c: fix that bug for real
13200:
13201: 1998-01-13 02:39 millert
13202:
13203: * INSTALL: document Linux's libc6 brokenness.
13204:
13205: 1998-01-13 02:00 millert
13206:
13207: * parse.yacc: -Wall
13208:
13209: 1998-01-13 01:22 millert
13210:
13211: * RUNSON: updated
13212:
13213: 1998-01-13 00:50 millert
13214:
13215: * TROUBLESHOOTING: remind people to HUP syslogd
13216:
13217: 1998-01-13 00:05 millert
13218:
13219: * Makefile.in: add -O flag to tar
13220:
13221: 1998-01-13 00:00 millert
13222:
13223: * TODO, RUNSON: updated
13224:
13225: 1998-01-12 23:59 millert
13226:
13227: * sudo.pod: remove author's email addr. people should mail
13228: sudo-bugs
13229:
13230: 1998-01-12 23:49 millert
13231:
13232: * INSTALL: fix version
13233:
13234: 1998-01-12 23:48 millert
13235:
13236: * README, check.c, compat.h, config.h.in, configure.in,
13237: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13238: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13239: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13240: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13241: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13242: visudo.c: ++version
13243:
13244: 1998-01-12 23:44 millert
13245:
13246: * RUNSON: updated
13247:
13248: 1998-01-12 23:42 millert
13249:
13250: * INSTALL, Makefile.in: ++version
13251:
13252: 1998-01-12 23:41 millert
13253:
13254: * CHANGES: updated fort 1.5.4
13255:
13256: 1998-01-12 23:41 millert
13257:
13258: * check.c: exit(1) if user enters no passwd
13259:
13260: 1998-01-12 23:37 millert
13261:
13262: * BUGS: ++version
13263:
13264: 1998-01-12 23:10 millert
13265:
13266: * parse.c: commands can start with ./* not just /* -- fixes a
13267: serious security hole.
13268:
13269: 1997-12-21 18:17 millert
13270:
13271: * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13272: leave it as "unknown".
13273:
13274: 1997-11-23 13:29 millert
13275:
13276: * sample.sudoers: fix usage of (username) in conjunction with , and
13277: !
13278:
13279: 1997-11-23 13:28 millert
13280:
13281: * visudo.c: catch the case where the user is not in the passwd file
13282:
13283: 1997-11-23 13:24 millert
13284:
13285: * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13286: the nfds arg to select(2)
13287:
13288: 1997-11-23 01:53 millert
13289:
13290: * sudo.c: define tty global to an initial value to avoid dumping
13291: core in logging functions when passwd file is unavailable.
13292:
13293: 1997-11-23 01:51 millert
13294:
13295: * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13296: gotten the passwd entry
13297:
13298: 1997-11-23 00:21 millert
13299:
13300: * sudo.pod: talk about problem of ALL
13301:
13302: 1997-10-10 00:54 millert
13303:
13304: * README: new web location
13305:
13306: 1997-10-10 00:54 millert
13307:
13308: * INSTALL: fdesc bug is fixed in Open/Net BSD
13309:
13310: 1997-10-10 00:52 millert
13311:
13312: * HISTORY: updates from Nieusma
13313:
13314: 1997-10-09 18:37 millert
13315:
13316: * dce_pwent.c: move compat.h after the system includes
13317:
13318: 1997-08-06 14:58 millert
13319:
13320: * logging.c: save errno from being clobbered by wait(). From Theo
13321:
13322: 1997-05-21 11:57 millert
13323:
13324: * compat.h: fix an occurence of setresuid -> setreuid (typo)
13325:
13326: 1997-03-19 17:45 millert
13327:
13328: * install-sh: check for path to strip
13329:
13330: 1997-01-15 19:05 millert
13331:
13332: * logging.c: deal with maxfilelen < 0 case
13333:
13334: 1997-01-15 19:05 millert
13335:
13336: * OPTIONS: fixed descriptin
13337:
13338: 1996-12-11 23:10 millert
13339:
13340: * sudo.c: correct error message if mode/owner wrong and not
13341: statable by owner but is statable by root.
13342:
13343: 1996-11-23 02:18 millert
13344:
13345: * config.guess, config.sub: autoconf 2.11
13346:
13347: 1996-11-16 14:42 millert
13348:
13349: * CHANGES, RUNSON, TODO: sudo 1.5.3.
13350:
13351: 1996-11-14 15:08 millert
13352:
13353: * sudo.h, parse.yacc: command_alias -> generic_alias
13354:
13355: 1996-11-13 22:50 millert
13356:
13357: * sample.sudoers: added Runas_Alias example and fixed syntax errors
13358:
13359: 1996-11-13 22:50 millert
13360:
13361: * OPTIONS, options.h: updated MAILSUBJECT
13362:
13363: 1996-11-13 22:49 millert
13364:
13365: * logging.c: added %h expansion
13366:
13367: 1996-11-13 21:37 millert
13368:
13369: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13370: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13371: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13372: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13373: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13374: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13375: visudo.c, INSTALL, README, configure.in: ++version
13376:
13377: 1996-11-13 20:01 millert
13378:
13379: * emul/utime.h, BUGS: ++version
13380:
13381: 1996-11-13 19:45 millert
13382:
13383: * sudoers.pod: document Runas_Alias
13384:
13385: 1996-11-13 19:22 millert
13386:
13387: * visudo.pod: q (uid) -> Q
13388:
13389: 1996-11-13 19:21 millert
13390:
13391: * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13392: drop into whatnow
13393:
13394: 1996-11-13 19:05 millert
13395:
13396: * parse.yacc: add size params to sprintf
13397:
13398: 1996-11-13 19:04 millert
13399:
13400: * parse.lex: allow trailing space after '\\' but before '\n'
13401:
13402: 1996-11-13 19:04 millert
13403:
13404: * find_path.c: off by one error in path size check
13405:
13406: 1996-11-13 19:03 millert
13407:
13408: * check.c: sprintf paranoia
13409:
13410: 1996-11-12 11:59 millert
13411:
13412: * parse.yacc: fixed more_aliases
13413:
13414: 1996-11-12 11:58 millert
13415:
13416: * visudo.c: now warns if killed by signal ./
13417:
13418: 1996-11-11 10:49 millert
13419:
13420: * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13421: expanded (but it is gross)
13422:
13423: 1996-11-10 20:32 millert
13424:
13425: * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13426: 0400
13427:
13428: 1996-11-10 20:08 millert
13429:
13430: * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13431: USER_ALIAS)
13432:
13433: 1996-11-10 20:02 millert
13434:
13435: * parse.lex: Add Runas_Alias and simplify a rule.
13436:
13437: 1996-11-10 19:15 millert
13438:
13439: * parse.yacc: always store User_Alias's since they can be used
13440: inside of a runas list. Sigh. Really need a Runas_Alias
13441: instead.
13442:
13443: 1996-10-30 18:04 millert
13444:
13445: * visudo.c: deal with case where there is no sudoers file
13446:
13447: 1996-10-11 23:01 millert
13448:
13449: * TROUBLESHOOTING: added one
13450:
13451: 1996-10-10 22:11 millert
13452:
13453: * HISTORY, testsudoers.c: developement -> development
13454:
13455: 1996-10-10 22:08 millert
13456:
13457: * INSTALL: added a note
13458:
13459: 1996-10-10 20:36 millert
13460:
13461: * RUNSON: for 1.5.2
13462:
13463: 1996-10-10 20:36 millert
13464:
13465: * CHANGES: updated
13466:
13467: 1996-10-10 00:56 millert
13468:
13469: * PORTING: removed seteuid() notes
13470:
13471: 1996-10-09 13:37 millert
13472:
13473: * compat.h: better seteuid() emulatino
13474:
13475: 1996-10-09 13:36 millert
13476:
13477: * configure.in: added check for seteuid
13478:
13479: 1996-10-09 13:36 millert
13480:
13481: * config.h.in: added HAVE_SETEUID
13482:
13483: 1996-10-08 19:22 millert
13484:
13485: * configure.in: first stab at sequent support
13486:
13487: 1996-10-08 19:21 millert
13488:
13489: * config.h.in: added HAVE_SYS_SELECT_H
13490:
13491: 1996-10-08 19:21 millert
13492:
13493: * compat.h: sequent -> _SEQUENT_
13494:
13495: 1996-10-08 19:11 millert
13496:
13497: * compat.h: added seteuid() macro for DYNIX
13498:
13499: 1996-10-08 18:54 millert
13500:
13501: * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13502:
13503: 1996-10-07 01:05 millert
13504:
13505: * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13506: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13507: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13508: pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13509: README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13510: putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13511: visudo.c, tgetpass.c: ++version
13512:
13513: 1996-10-07 00:59 millert
13514:
13515: * sudo.pod: added -H and SUDO_PS1
13516:
13517: 1996-10-07 00:55 millert
13518:
13519: * configure.in: use SUDO_FUNC_FNMATCH
13520:
13521: 1996-10-07 00:54 millert
13522:
13523: * aclocal.m4: added SUDO_FUNC_FNMATCH
13524:
13525: 1996-10-07 00:53 millert
13526:
13527: * sudo.c: added -H flag
13528:
13529: 1996-10-07 00:53 millert
13530:
13531: * sudo.h: added MODE_RESET_HOME /
13532:
13533: 1996-10-05 00:00 millert
13534:
13535: * INSTALL: mention OPIE
13536:
13537: 1996-10-04 23:59 millert
13538:
13539: * configure.in: added opie support
13540:
13541: 1996-10-04 23:59 millert
13542:
13543: * check.c: added HAVE_OPIE and changed to *_OTP_*
13544:
13545: 1996-10-04 23:58 millert
13546:
13547: * compat.h, config.h.in: added HAVE_OPIE
13548:
13549: 1996-10-04 23:58 millert
13550:
13551: * OPTIONS, options.h: SKEY -> OTP
13552:
13553: 1996-10-03 23:27 millert
13554:
13555: * check.c: moved fclose() in skey stuff.
13556:
13557: 1996-10-03 19:53 millert
13558:
13559: * putenv.c: index -> strchr remove unnecesary stuff
13560:
13561: 1996-10-03 19:43 millert
13562:
13563: * check.c: now call skeychallenge() to get challenge instead of
13564: making one up ourselves. this way, we get extra goodies in the
13565: prompt.
13566:
13567: 1996-09-10 00:32 millert
13568:
13569: * CHANGES: added one
13570:
13571: 1996-09-10 00:18 millert
13572:
13573: * parse.lex: allow logins to start with a number (YUCK!)
13574:
13575: 1996-09-08 15:18 millert
13576:
13577: * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13578:
13579: 1996-09-08 15:15 millert
13580:
13581: * configure.in: DUNIX doesn't need -lnsl
13582:
13583: 1996-09-07 20:22 millert
13584:
13585: * CHANGES: [no log message]
13586:
13587: 1996-09-07 20:21 millert
13588:
13589: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13590: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13591: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13592: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13593: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13594: tgetpass.c, utime.c, version.h, visudo.c: courtesan
13595:
13596: 1996-09-07 20:13 millert
13597:
13598: * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13599: courtesan
13600:
13601: 1996-09-07 20:12 millert
13602:
13603: * visudo.pod: [no log message]
13604:
13605: 1996-09-07 20:00 millert
13606:
13607: * sudo.pod, visudo.pod: courtesan
13608:
13609: 1996-09-07 19:45 millert
13610:
13611: * HISTORY: added courtesan ./
13612:
13613: 1996-09-06 00:12 millert
13614:
13615: * sudo.c: added $SUDO_PROMPT support
13616:
13617: 1996-09-04 17:19 millert
13618:
13619: * check.c: print long skey challemged to stderr, not stdout
13620:
13621: 1996-08-31 23:10 millert
13622:
13623: * CHANGES: updated for 1.5.1
13624:
13625: 1996-08-31 23:07 millert
13626:
13627: * emul/utime.h: ++version
13628:
13629: 1996-08-31 12:34 millert
13630:
13631: * RUNSON: updated for 1.5.1
13632:
13633: 1996-08-30 10:49 millert
13634:
13635: * check.c: use shost, not host for tgetpass
13636:
13637: 1996-08-30 00:21 millert
13638:
13639: * OPTIONS, sudo.pod: documented %u and %h
13640:
13641: 1996-08-29 20:40 millert
13642:
13643: * configure.in: fixed typo
13644:
13645: 1996-08-29 20:37 millert
13646:
13647: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13648: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13649: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13650: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13651: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13652: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13653: visudo.c: ++version
13654:
13655: 1996-08-29 20:30 millert
13656:
13657: * BUGS: ++version
13658:
13659: 1996-08-29 18:32 millert
13660:
13661: * configure.in, Makefile.in, version.h: ++version
13662:
13663: 1996-08-29 17:58 millert
13664:
13665: * sudo.h: new tgetpass() params
13666:
13667: 1996-08-29 17:58 millert
13668:
13669: * check.c: pass use and host to tgetpass
13670:
13671: 1996-08-29 17:57 millert
13672:
13673: * tgetpass.c: added %u and %h escapes
13674:
13675: 1996-08-29 16:56 millert
13676:
13677: * OPTIONS, options.h, check.c: added NO_MESSAGE
13678:
13679: 1996-08-29 16:23 millert
13680:
13681: * configure.in: added cray (unicos) support
13682:
13683: 1996-08-27 11:36 millert
13684:
13685: * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13686:
13687: 1996-08-25 17:56 millert
13688:
13689: * INSTALL: added note about "make install"
13690:
13691: 1996-08-25 17:50 millert
13692:
13693: * parse.yacc: changed length/size params from int to size_t
13694:
13695: 1996-08-25 13:35 millert
13696:
13697: * OPTIONS: now get CSOPS insults as well by default
13698:
13699: 1996-08-25 13:33 millert
13700:
13701: * insults.h: use csops insults too by default
13702:
13703: 1996-08-25 13:31 millert
13704:
13705: * INSTALL, Makefile.in, README, config.h.in, configure.in,
13706: version.h: version = 1.5
13707:
13708: 1996-08-25 13:27 millert
13709:
13710: * sudo.c: added runas_homedir
13711:
13712: 1996-08-25 13:27 millert
13713:
13714: * TODO: updated for 1.5
13715:
13716: 1996-08-25 13:23 millert
13717:
13718: * RUNSON: updated for 1.5
13719:
13720: 1996-08-25 13:19 millert
13721:
13722: * CHANGES: 1.5 release
13723:
13724: 1996-08-25 13:17 millert
13725:
13726: * INSTALL: added "upgrading" notes
13727:
13728: 1996-08-22 14:00 millert
13729:
13730: * visudo.c: now do chmod and chown after edit of temp file and
13731: before rename
13732:
13733: 1996-08-18 12:52 millert
13734:
13735: * Makefile.in: ++version added INSTALL.configure
13736:
13737: 1996-08-18 12:52 millert
13738:
13739: * version.h, configure.in: ++version
13740:
13741: 1996-08-18 12:51 millert
13742:
13743: * TROUBLESHOOTING: [no log message]
13744:
13745: 1996-08-18 12:50 millert
13746:
13747: * parse.yacc: added missing cast
13748:
13749: 1996-08-17 20:37 millert
13750:
13751: * sudo.c: sets $HOME to pw_dir of runas user
13752:
13753: 1996-08-17 20:02 millert
13754:
13755: * sudo.pod: document $HOME change
13756:
13757: 1996-08-17 19:43 millert
13758:
13759: * sudo.pod: fixed up some wording
13760:
13761: 1996-08-17 19:25 millert
13762:
13763: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13764: goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13765: parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13766: testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13767:
13768: 1996-08-17 19:19 millert
13769:
13770: * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13771: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13772: ++version
13773:
13774: 1996-08-17 19:18 millert
13775:
13776: * sudo.h: name nad type changes
13777:
13778: 1996-08-17 19:17 millert
13779:
13780: * testsudoers.c: now works with new sudo
13781:
13782: 1996-08-17 19:07 millert
13783:
13784: * parse.yacc: fixed some XXX
13785:
13786: 1996-08-17 18:52 millert
13787:
13788: * parse.yacc: some variable name changes + comment headers for
13789: functions.
13790:
13791: 1996-08-17 18:41 millert
13792:
13793: * tgetpass.c: added extra paren's to make compilers happy
13794:
13795: 1996-08-17 18:34 millert
13796:
13797: * sudo.c: [no log message]
13798:
13799: 1996-08-17 18:30 millert
13800:
13801: * parse.c: now uses init_parser() if not in sudoers and tries
13802: "list" or "validate" scold but don't be nasty.
13803:
13804: 1996-08-17 18:29 millert
13805:
13806: * TROUBLESHOOTING: now can use upper case login names
13807:
13808: 1996-08-17 18:29 millert
13809:
13810: * visudo.c: now uses init_parser()
13811:
13812: 1996-08-17 18:28 millert
13813:
13814: * PORTING: added info about PASSWORD_TIMEOUT
13815:
13816: 1996-08-17 18:28 millert
13817:
13818: * INSTALL, README: updated
13819:
13820: 1996-08-17 18:28 millert
13821:
13822: * INSTALL.configure: Initial revision
13823:
13824: 1996-08-17 18:27 millert
13825:
13826: * BUGS: fixed a bug ,
13827:
13828: 1996-08-17 18:27 millert
13829:
13830: * parse.yacc: now dynamically allocates memory for the stacks -- no
13831: more overflows!
13832:
13833: 1996-08-17 18:26 millert
13834:
13835: * sudo.pod: -l now explands command aliases
13836:
13837: 1996-08-17 13:22 millert
13838:
13839: * parse.yacc: hacks to expand command aliases for `sudo -l'
13840:
13841: 1996-08-17 13:22 millert
13842:
13843: * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13844: and bash)
13845:
13846: 1996-08-17 13:22 millert
13847:
13848: * sudo.h: added struct command_alias
13849:
13850: 1996-08-17 13:20 millert
13851:
13852: * sudo.pod: fixed a bug
13853:
13854: 1996-08-17 13:15 millert
13855:
13856: * lsearch.c: in compar() key should be first arg
13857:
13858: 1996-08-15 15:48 millert
13859:
13860: * BUGS: fixed some bugs
13861:
13862: 1996-08-15 15:47 millert
13863:
13864: * parse.yacc: can now deal with upcase HOST and USER names
13865:
13866: 1996-08-15 15:47 millert
13867:
13868: * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13869:
13870: 1996-08-15 15:46 millert
13871:
13872: * sudo.pod: fixed thinko
13873:
13874: 1996-08-15 15:46 millert
13875:
13876: * parse.c: fix comment
13877:
13878: 1996-08-09 18:07 millert
13879:
13880: * parse.c, parse.yacc: added support for new `sudo -l' stuff
13881:
13882: 1996-08-09 18:06 millert
13883:
13884: * sudo.c: now uses list_matches()
13885:
13886: 1996-08-09 18:06 millert
13887:
13888: * sudo.h: added struct sudo_match
13889:
13890: 1996-08-09 17:37 millert
13891:
13892: * configure.in: now more -lgnumalloc
13893:
13894: 1996-08-01 13:12 millert
13895:
13896: * install-sh: added more paths for chown and whoami
13897:
13898: 1996-07-31 10:41 millert
13899:
13900: * check.c: typo
13901:
13902: 1996-07-30 13:45 millert
13903:
13904: * aclocal.m4: fixed DUNIX check for shadow pw
13905:
13906: 1996-07-30 13:41 millert
13907:
13908: * tgetpass.c: now only turn off echo if it is already on. this
13909: fixes a race when you use sudo in a pipelin
13910:
13911: 1996-07-30 12:53 millert
13912:
13913: * INSTALL: updated
13914:
13915: 1996-07-29 22:29 millert
13916:
13917: * configure.in: changed "test -z $foo && do_this" to if; then
13918: construct
13919:
13920: 1996-07-28 22:47 millert
13921:
13922: * configure.in: added missing defines of SHADOW_TYPE
13923:
13924: 1996-07-26 14:10 millert
13925:
13926: * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13927: they are only in dunix 4.x
13928:
13929: 1996-07-26 14:09 millert
13930:
13931: * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13932:
13933: 1996-07-26 13:23 millert
13934:
13935: * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13936: that didn't match. Now we can have runas stuff on more than one
13937: line.
13938:
13939: 1996-07-25 23:45 millert
13940:
13941: * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13942: defined to something
13943:
13944: 1996-07-25 23:45 millert
13945:
13946: * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
13947:
13948: 1996-07-25 23:44 millert
13949:
13950: * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
13951: instead of HAVE_C2_SECURITY
13952:
13953: 1996-07-25 23:44 millert
13954:
13955: * check.c: SHADOW_TYPE is always defined so just against its value
13956:
13957: 1996-07-25 23:44 millert
13958:
13959: * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
13960:
13961: 1996-07-25 18:47 millert
13962:
13963: * sudoers.pod: * -> ?* in one example added another instance of
13964: (runas) and one of NOPASSWD:
13965:
13966: 1996-07-24 13:02 millert
13967:
13968: * configure.in: added back check for config.cache from other host
13969: type
13970:
13971: 1996-07-24 12:49 millert
13972:
13973: * parse.lex: removed an instance of \"
13974:
13975: 1996-07-24 12:49 millert
13976:
13977: * sample.sudoers: added an example
13978:
13979: 1996-07-24 12:44 millert
13980:
13981: * sudoers.pod: updated wrt new wildcard matching
13982:
13983: 1996-07-24 10:28 millert
13984:
13985: * configure.in: new check for shadow passwords if we don't know
13986: anything
13987:
13988: 1996-07-24 10:28 millert
13989:
13990: * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
13991:
13992: 1996-07-24 02:19 millert
13993:
13994: * configure.in: added back check for -lsocket (oops)
13995:
13996: 1996-07-24 02:16 millert
13997:
13998: * configure.in: better (working) check for shadow passwd type if we
13999: know to use C2.
14000:
14001: 1996-07-24 01:59 millert
14002:
14003: * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14004:
14005: 1996-07-24 01:59 millert
14006:
14007: * Makefile.in: added config.{guess,sub}
14008:
14009: 1996-07-24 01:58 millert
14010:
14011: * aclocal.m4: removed unused stuff to figure out os type
14012:
14013: 1996-07-23 22:58 millert
14014:
14015: * config.sub: added openbsd
14016:
14017: 1996-07-23 22:54 millert
14018:
14019: * config.sub: Initial revision
14020:
14021: 1996-07-23 22:40 millert
14022:
14023: * config.guess: Initial revision
14024:
14025: 1996-07-23 21:18 millert
14026:
14027: * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14028: it can only be a pathname. need to check against sudoers_args
14029: even if user_args is nil
14030:
14031: 1996-07-23 21:18 millert
14032:
14033: * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14034: can only be a pathname need to check against sudoers_args even if
14035: user_args is nil
14036:
14037: 1996-07-23 18:52 millert
14038:
14039: * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14040:
14041: 1996-07-23 01:18 millert
14042:
14043: * testsudoers.c: now takes command line args and uses cmnd_args
14044:
14045: 1996-07-23 01:10 millert
14046:
14047: * parse.lex: fill_args was adding an extra leading space
14048:
14049: 1996-07-22 15:50 millert
14050:
14051: * visudo.c: fixed dummy command_matches()
14052:
14053: 1996-07-22 15:50 millert
14054:
14055: * parse.yacc: fixed prototype
14056:
14057: 1996-07-22 15:31 millert
14058:
14059: * sudo.h: added cmnd_args
14060:
14061: 1996-07-22 15:31 millert
14062:
14063: * parse.yacc: now uses flat args string
14064:
14065: 1996-07-22 15:30 millert
14066:
14067: * parse.c, parse.lex: now uses flat arg string
14068:
14069: 1996-07-22 15:29 millert
14070:
14071: * visudo.c: added cmnd_args def
14072:
14073: 1996-07-22 14:30 millert
14074:
14075: * sudo.c: now sets cmnd_args global
14076:
14077: 1996-07-22 14:30 millert
14078:
14079: * logging.c: cmnd_args is now exported from sudo.[ch]
14080:
14081: 1996-07-21 18:41 millert
14082:
14083: * parse.yacc: can't rely on cmnd_matches as much as I thought --
14084: added some $$ stuff back in to prevent namespace pollution
14085: problems.
14086:
14087: 1996-07-21 18:01 millert
14088:
14089: * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14090: consistent).
14091:
14092: 1996-07-20 00:45 millert
14093:
14094: * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14095: starts a 'runas' if in the initial state to avoid collision with
14096: command args
14097:
14098: 1996-07-20 00:23 millert
14099:
14100: * configure.in: added checks for specific shadow passwd schemes
14101:
14102: 1996-07-20 00:18 millert
14103:
14104: * aclocal.m4: added routines to check for specific shadow passwd
14105: types
14106:
14107: 1996-07-18 18:27 millert
14108:
14109: * configure.in: added support for ncr boxen
14110:
14111: 1996-07-18 18:26 millert
14112:
14113: * aclocal.m4: added support for detecting ncr boxen
14114:
14115: 1996-07-16 14:57 millert
14116:
14117: * configure.in: added sinix support
14118:
14119: 1996-07-13 22:29 millert
14120:
14121: * TROUBLESHOOTING: added info about "config.cache from other other"
14122: error.
14123:
14124: 1996-07-13 22:22 millert
14125:
14126: * aclocal.m4: now makes sure you don't have a config.cache file
14127: from another OS
14128:
14129: 1996-07-13 21:36 millert
14130:
14131: * configure.in: now sets $LIBS when needed to configure links with
14132: libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14133: check for bigcrypt(3) if SPW_SECUREWARE
14134:
14135: 1996-07-13 21:30 millert
14136:
14137: * getspwuid.c: fixed typo
14138:
14139: 1996-07-13 21:05 millert
14140:
14141: * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14142: AUTH_MAX_PASSWD_LENGTH
14143:
14144: 1996-07-13 21:05 millert
14145:
14146: * getspwuid.c: no more SPW_HPUX10
14147:
14148: 1996-07-13 21:04 millert
14149:
14150: * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14151:
14152: 1996-07-13 21:04 millert
14153:
14154: * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14155:
14156: 1996-07-13 21:04 millert
14157:
14158: * check.c: SPW_SECUREWARE now uses bigcrypt
14159:
14160: 1996-07-13 18:24 millert
14161:
14162: * sample.sudoers: fixed 2 syntax errors
14163:
14164: 1996-07-13 18:24 millert
14165:
14166: * sudoers: root may now run ALL as ALL
14167:
14168: 1996-07-11 20:59 millert
14169:
14170: * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14171:
14172: 1996-07-08 16:08 millert
14173:
14174: * check.c, configure.in: updated AFS support
14175:
14176: 1996-07-08 16:07 millert
14177:
14178: * TROUBLESHOOTING: added entry about /usr/ucb/cc
14179:
14180: 1996-07-08 16:06 millert
14181:
14182: * INSTALL: prep no longer holds gcc binaries
14183:
14184: 1996-07-08 15:48 millert
14185:
14186: * INSTALL: updated AFS note
14187:
14188: 1996-07-08 15:43 millert
14189:
14190: * Makefile.in: added @AFS_LIBS@
14191:
14192: 1996-07-08 15:33 millert
14193:
14194: * compat.h: AFS allows long passwords
14195:
14196: 1996-07-08 14:16 millert
14197:
14198: * testsudoers.c: fixed -u user support
14199:
14200: 1996-07-08 14:16 millert
14201:
14202: * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14203:
14204: 1996-07-08 13:30 millert
14205:
14206: * parse.yacc: fixed no_passwd vs. runas_matched
14207:
14208: 1996-07-08 10:30 millert
14209:
14210: * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14211: longer an issue
14212:
14213: 1996-07-08 10:30 millert
14214:
14215: * INSTALL: added --with-libraries > --with-libpath --with-incpath
14216:
14217: 1996-07-08 10:21 millert
14218:
14219: * parse.yacc: was setting runas_matches to -1 in wrong place
14220:
14221: 1996-07-08 09:58 millert
14222:
14223: * check.c: removed usersec.h which is not present in new AFS
14224: versions
14225:
14226: 1996-07-08 09:55 millert
14227:
14228: * tgetpass.c: now deals with timeout <= 0
14229:
14230: 1996-07-08 09:51 millert
14231:
14232: * OPTIONS: updated
14233:
14234: 1996-07-08 00:04 millert
14235:
14236: * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14237:
14238: 1996-07-07 22:30 millert
14239:
14240: * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14241: for root readable/writable filesystems
14242:
14243: 1996-07-07 20:49 millert
14244:
14245: * Makefile.in: now gives INSTALL -c flag
14246:
14247: 1996-07-07 20:34 millert
14248:
14249: * parse.yacc: slightly simpler initialization of no_passwd and
14250: runas_matches
14251:
14252: 1996-07-07 20:33 millert
14253:
14254: * testsudoers.c: added -u username support
14255:
14256: 1996-07-07 20:32 millert
14257:
14258: * configure.in: improved --with-libraries support
14259:
14260: 1996-07-07 16:27 millert
14261:
14262: * configure.in: added --with-incpath, --with-libpath,
14263: --with-libraries
14264:
14265: 1996-07-07 16:01 millert
14266:
14267: * parse.yacc: now initializes some fields that weren't getting set
14268: to -1 pretty gross -- need a rewrite.
14269:
14270: 1996-06-25 23:19 millert
14271:
14272: * alloca.c: removed emacs'isms
14273:
14274: 1996-06-25 22:29 millert
14275:
14276: * configure.in: no longer add -lPW to *_LIBS since we include
14277: alloca.c
14278:
14279: 1996-06-25 22:29 millert
14280:
14281: * config.h.in: added HAVE_ALLOCA_H
14282:
14283: 1996-06-25 22:28 millert
14284:
14285: * Makefile.in: added alloca.c
14286:
14287: 1996-06-25 22:18 millert
14288:
14289: * alloca.c: Initial revision
14290:
14291: 1996-06-25 21:58 millert
14292:
14293: * configure.in: ++version
14294:
14295: 1996-06-25 19:32 millert
14296:
14297: * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14298: nobody is not always set to a valid uid.
14299:
14300: 1996-06-25 19:31 millert
14301:
14302: * OPTIONS: fixed entry for SUDO_MODE
14303:
14304: 1996-06-25 18:02 millert
14305:
14306: * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14307: *and* gid were being set to -2. Now beat NFS to the punch and
14308: set uid to "nobody" ourselves, preserving group 0 to read
14309: sudoers.
14310:
14311: 1996-06-25 18:02 millert
14312:
14313: * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14314:
14315: 1996-06-25 18:00 millert
14316:
14317: * logging.c: fixed a typo
14318:
14319: 1996-06-25 18:00 millert
14320:
14321: * configure.in: no longer need AC_PROG_INSTALL
14322:
14323: 1996-06-25 17:59 millert
14324:
14325: * Makefile.in: always use install-sh to avoid install(1)'s that use
14326: get{pw,gr}nam
14327:
14328: 1996-06-25 16:07 millert
14329:
14330: * INSTALL: make clean -> make distclean
14331:
14332: 1996-06-20 01:17 millert
14333:
14334: * parse.yacc: removed some unnecsary if's
14335:
14336: 1996-06-20 01:16 millert
14337:
14338: * Makefile.in, version.h: ++version
14339:
14340: 1996-06-20 01:16 millert
14341:
14342: * parse.c, testsudoers.c: now includes netgroup.h
14343:
14344: 1996-06-20 00:45 millert
14345:
14346: * interfaces.c: removed cats of ioctl to int since they didn't shut
14347: up -Wall
14348:
14349: 1996-06-20 00:43 millert
14350:
14351: * interfaces.c: explicately cast ioctl() to int since it it not
14352: always declared
14353:
14354: 1996-06-20 00:41 millert
14355:
14356: * sudo.h: added declarations for yyparse() and yylex()
14357:
14358: 1996-06-20 00:27 millert
14359:
14360: * parse.yacc: fixed an occurence of '==' -> '='
14361:
14362: 1996-06-20 00:22 millert
14363:
14364: * config.h.in, configure.in: added check for netgroup.h
14365:
14366: 1996-06-20 00:20 millert
14367:
14368: * sudo.c: fixed 2 compiler warnings
14369:
14370: 1996-06-20 00:08 millert
14371:
14372: * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14373: weren't being initialized
14374:
14375: 1996-06-19 13:53 millert
14376:
14377: * sudo.pod: fixed a typo
14378:
14379: 1996-06-17 12:19 millert
14380:
14381: * parse.yacc: fixed a formatting thingie
14382:
14383: 1996-06-17 12:16 millert
14384:
14385: * parse.c, parse.yacc: fixed -u support with multiple user lists on
14386: a line
14387:
14388: 1996-06-17 10:23 millert
14389:
14390: * configure.in: unixware needs -lgen
14391:
14392: 1996-06-17 10:23 millert
14393:
14394: * README: updated ftp location
14395:
14396: 1996-06-17 00:08 millert
14397:
14398: * sudoers.pod: add net_addr/netmask support
14399:
14400: 1996-06-17 00:07 millert
14401:
14402: * sample.sudoers: added net_addr/mask example
14403:
14404: 1996-06-17 00:02 millert
14405:
14406: * parse.lex, parse.c: added support for net_addr/netmask
14407:
14408: 1996-06-15 20:13 millert
14409:
14410: * sudoers.pod: ^ -> !
14411:
14412: 1996-06-15 18:12 millert
14413:
14414: * RUNSON: updated for 1.4.3
14415:
14416: 1996-06-15 18:12 millert
14417:
14418: * CHANGES: udpated for 1.4.3
14419:
14420: 1996-06-15 18:11 millert
14421:
14422: * TROUBLESHOOTING, TODO, BUGS: updated
14423:
14424: 1996-06-15 18:11 millert
14425:
14426: * sample.sudoers: updated with examples of new stuff
14427:
14428: 1996-06-15 18:10 millert
14429:
14430: * INSTALL, README: ++version
14431:
14432: 1996-06-15 18:01 millert
14433:
14434: * sudoers.pod: updated wrt -u and NOPASSWD
14435:
14436: 1996-06-15 17:58 millert
14437:
14438: * sudo.pod: updated wrt -u and CAVEATS
14439:
14440: 1996-06-08 23:15 millert
14441:
14442: * sudo.c: fixed usage()
14443:
14444: 1996-06-08 22:57 millert
14445:
14446: * parse.lex: now use :foo: character classes (makes no diff for
14447: generated lexer)
14448:
14449: 1996-06-07 14:33 millert
14450:
14451: * check.c: fixed LONG_SKEY_PROMPT stuff
14452:
14453: 1996-06-06 15:35 millert
14454:
14455: * visudo.c: fixed a comment
14456:
14457: 1996-06-06 15:03 millert
14458:
14459: * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14460:
14461: 1996-06-06 15:02 millert
14462:
14463: * emul/search.h: fixed decls of lsearch()
14464:
14465: 1996-06-05 22:20 millert
14466:
14467: * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14468:
14469: 1996-06-05 22:20 millert
14470:
14471: * check.c: hpux 10 uses bigcrypt() if C2
14472:
14473: 1996-06-04 19:57 millert
14474:
14475: * parse.c: now always uses fnmatch to match args
14476:
14477: 1996-06-04 19:40 millert
14478:
14479: * tgetpass.c: back to using stdio instead of raw i/o since that
14480: caused some problems
14481:
14482: 1996-05-28 22:14 millert
14483:
14484: * sudo.c: now give usage warning if use -l,-v,-k with args
14485:
14486: 1996-05-28 18:22 millert
14487:
14488: * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14489:
14490: 1996-05-28 12:50 millert
14491:
14492: * sudo.c: now sets sudoers to correct group if mode is 0400
14493:
14494: 1996-05-28 12:02 millert
14495:
14496: * install-sh: updated to version used by inn and bind
14497:
14498: 1996-05-28 00:08 millert
14499:
14500: * configure.in: now uses -lgnumalloc if it exists
14501:
14502: 1996-05-28 00:02 millert
14503:
14504: * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14505: if it exists
14506:
14507: 1996-05-28 00:01 millert
14508:
14509: * sudo.c: rmeoved debugging statements
14510:
14511: 1996-05-28 00:00 millert
14512:
14513: * parse.yacc: added a missing free()
14514:
14515: 1996-05-27 23:58 millert
14516:
14517: * sudo.c: now uses user_gid instead of getegid (which was wrong
14518: anyway) to set SUDO_GID Now sets command line args in
14519: SUDO_COMMAND envariabled (logging.c depends on args being in the
14520: environment)
14521:
14522: 1996-05-27 23:57 millert
14523:
14524: * logging.c: now uses SUDO_COMMAND envariable to get command args
14525: rather than building it up again.
14526:
14527: 1996-05-27 22:42 millert
14528:
14529: * parse.c: now uses user_gid
14530:
14531: 1996-05-27 20:02 millert
14532:
14533: * sudo.c: fixed off by one error in allocation NewArgv
14534:
14535: 1996-05-27 20:01 millert
14536:
14537: * parse.c: in sudoers, 'command ""' now means command with no args
14538:
14539: 1996-05-27 20:01 millert
14540:
14541: * configure.in: added check for fnmatch(3) and fnmatch.h
14542:
14543: 1996-05-27 20:01 millert
14544:
14545: * config.h.in: added HAVE_FNMATCH
14546:
14547: 1996-05-27 20:00 millert
14548:
14549: * Makefile.in: replaced wildcat.* with fnmatch.*
14550:
14551: 1996-05-27 20:00 millert
14552:
14553: * testsudoers.c: now uses fnmatch()
14554:
14555: 1996-05-27 19:38 millert
14556:
14557: * parse.c: now uses fnmatch() instead of wildmat a trailing star
14558: (*) by itself now matches multiple args added support for
14559: wildcards in the pathname in sudoers
14560:
14561: 1996-05-25 19:23 millert
14562:
14563: * fnmatch.c: now includes compat.h and config.h
14564:
14565: 1996-05-25 18:09 millert
14566:
14567: * config.h.in: added HAVE_FNMATCH_H
14568:
14569: 1996-05-25 18:07 millert
14570:
14571: * configure.in: now checks for alloca() (if needed by bison or dce)
14572: and links with -lPW if it contains alloca() and libv and compiler
14573: do not.
14574:
14575: 1996-05-25 18:03 millert
14576:
14577: * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14578:
14579: 1996-04-28 22:38 millert
14580:
14581: * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14582: upgrade
14583:
14584: 1996-04-28 17:44 millert
14585:
14586: * Makefile.in: fixed pod2man usage
14587:
14588: 1996-04-28 17:40 millert
14589:
14590: * configure.in, Makefile.in, version.h: ++version
14591:
14592: 1996-04-28 17:20 millert
14593:
14594: * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14595:
14596: 1996-04-28 17:20 millert
14597:
14598: * sudo.h: removed PERM_FULL_ROOT
14599:
14600: 1996-04-28 17:18 millert
14601:
14602: * sudo.c: runas_user defaults to "root" so no more need to
14603: PERM_RUNAS
14604:
14605: 1996-04-28 17:16 millert
14606:
14607: * parse.c: will now only running commands as root if there was no
14608: runas list (or if root is in the runas list)
14609:
14610: 1996-04-28 17:15 millert
14611:
14612: * logging.c: now logs "USER=%s"
14613:
14614: 1996-04-28 17:12 millert
14615:
14616: * parse.yacc: runas_matches is now set to false if we get a
14617: negative match
14618:
14619: 1996-04-28 15:01 millert
14620:
14621: * parse.lex: make #uid work + some minor cleanup
14622:
14623: 1996-04-27 21:04 millert
14624:
14625: * sample.sudoers: added support for NOPASSWD and "runas" from
14626: garp@opustel.com /
14627:
14628: 1996-04-27 21:03 millert
14629:
14630: * visudo.c: added support for "runas" from garp@opustel.com
14631: replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14632: support for SUDOERS_MODE
14633:
14634: 1996-04-27 21:03 millert
14635:
14636: * testsudoers.c: added support for "runas" from garp@opustel.com
14637:
14638: 1996-04-27 21:02 millert
14639:
14640: * sudo.h: added support for NO_PASSWD and runas from
14641: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14642: SUDOERS_GID and added support fro SUDOERS_MODE
14643:
14644: 1996-04-27 21:00 millert
14645:
14646: * sudo.c: added support for NO_PASSWD and runas from
14647: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14648: SUDOERS_GID and added support fro SUDOERS_MODE
14649:
14650: 1996-04-27 21:00 millert
14651:
14652: * parse.yacc: added support for NO_PASSWD and runas from
14653: garp@opustel.com
14654:
14655: 1996-04-27 20:58 millert
14656:
14657: * parse.c, parse.lex: added support for NO_PASSWD and runas from
14658: garp@opustel.com
14659:
14660: 1996-04-27 20:56 millert
14661:
14662: * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14663:
14664: 1996-04-27 20:40 millert
14665:
14666: * configure.in: added --with-CC only link with -lshadow on linux
14667: (with shadow pw) if libc lacks getspnam()
14668:
14669: 1996-04-27 20:39 millert
14670:
14671: * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14672: do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14673: SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14674:
14675: 1996-04-27 20:26 millert
14676:
14677: * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14678:
14679: 1996-04-27 11:20 millert
14680:
14681: * INSTALL: added --with-CC
14682:
14683: 1996-04-06 16:31 millert
14684:
14685: * parse.lex: added double quote support
14686:
14687: 1996-04-06 16:29 millert
14688:
14689: * sudoers.pod: documented double quoting
14690:
14691: 1996-04-05 16:53 millert
14692:
14693: * mkinstalldirs: Initial revision
14694:
14695: 1996-04-05 16:53 millert
14696:
14697: * check.c: fixed some indentation
14698:
14699: 1996-04-05 16:48 millert
14700:
14701: * Makefile.in: fixed a typo
14702:
14703: 1996-04-04 19:39 millert
14704:
14705: * Makefile.in: added install-dirs .
14706:
14707: 1996-04-04 14:16 millert
14708:
14709: * dce_pwent.c: new version from "Jeff A. Earickson"
14710: <jaearick@colby.edu>
14711:
14712: 1996-04-03 13:40 millert
14713:
14714: * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14715:
14716: 1996-04-03 13:40 millert
14717:
14718: * BUGS: updated
14719:
14720: 1996-04-03 13:36 millert
14721:
14722: * parse.lex: FQHOST now has same constraints as non-FQHOST
14723:
14724: 1996-04-02 19:00 millert
14725:
14726: * INSTALL: added note about OS's w/ shadow passwords turned on by
14727: default
14728:
14729: 1996-04-02 18:58 millert
14730:
14731: * configure.in: fixed a typo
14732:
14733: 1996-04-02 18:48 millert
14734:
14735: * configure.in: added support for --without-THING sanitized shadow
14736: pw situtation by adding support for --without-C2
14737:
14738: 1996-04-02 16:42 millert
14739:
14740: * tgetpass.c: fixed a typo wrt placement of an end paren
14741:
14742: 1996-04-02 14:57 millert
14743:
14744: * check.c: was closing an fd that may not have been opened
14745:
14746: 1996-03-21 19:55 millert
14747:
14748: * sudo.c, OPTIONS, options.h: added NO_PASSWD
14749:
14750: 1996-03-19 19:40 millert
14751:
14752: * configure.in: now always use shadow pw on some arches
14753:
14754: 1996-03-19 17:07 millert
14755:
14756: * configure.in: added pyramid support
14757:
14758: 1996-03-19 17:04 millert
14759:
14760: * configure.in: no longer check for C2 if alternate passwd method
14761: is used no longer check for some libs twice
14762:
14763: 1996-03-19 17:00 millert
14764:
14765: * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14766:
14767: 1996-03-19 17:00 millert
14768:
14769: * parse.lex: added FQHOST rules
14770:
14771: 1996-03-18 20:57 millert
14772:
14773: * tgetpass.c: now define TCSASOFT in necesary
14774:
14775: 1996-03-18 20:31 millert
14776:
14777: * tgetpass.c: now uses read/write instead of stdio string goop to
14778: avoid problems with select(2)
14779:
14780: 1996-03-18 19:37 millert
14781:
14782: * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14783: -DIGNORE_DOT_PATH
14784:
14785: 1996-03-17 16:18 millert
14786:
14787: * INSTALL: added note about no shadow auto-detect if using
14788: alternate auth schemes
14789:
14790: 1996-03-17 15:33 millert
14791:
14792: * configure.in: don't check for C2 if AFS or DCE (unless they said
14793: --with-C2)
14794:
14795: 1996-03-17 15:08 millert
14796:
14797: * testsudoers.c: now groks shost
14798:
14799: 1996-03-17 15:01 millert
14800:
14801: * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14802:
14803: 1996-03-16 14:43 millert
14804:
14805: * find_path.c: checkdot now works correctly
14806:
14807: 1996-03-12 18:01 millert
14808:
14809: * configure.in: can't have DCE and C2 passwords both...
14810:
14811: 1996-03-11 14:05 millert
14812:
14813: * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14814: FQDN
14815:
14816: 1996-03-11 14:04 millert
14817:
14818: * configure.in: now looks for skey in /usr/lib and doesn't require
14819: libskey to be in /usr/local/lib just because skey.h is (for my
14820: netbsd box :-)
14821:
14822: 1996-03-11 02:00 millert
14823:
14824: * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14825: _CONFIG_PATH_
14826:
14827: 1996-03-10 21:01 millert
14828:
14829: * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14830:
14831: 1996-03-10 20:59 millert
14832:
14833: * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14834:
14835: 1996-03-10 20:59 millert
14836:
14837: * OPTIONS: udpated FQDN
14838:
14839: 1996-03-10 20:58 millert
14840:
14841: * config.h.in: added _SUDO_PATH_TIMEDIR
14842:
14843: 1996-03-10 20:58 millert
14844:
14845: * aclocal.m4, configure.in: added SUDO_TIMEDIR
14846:
14847: 1996-03-10 20:58 millert
14848:
14849: * sudo.pod: updated wrt /var/run/sudo
14850:
14851: 1996-03-10 20:16 millert
14852:
14853: * sudo.c, sudo.h: added support for shost if FQDN
14854:
14855: 1996-03-10 20:14 millert
14856:
14857: * parse.yacc, visudo.c: now uses shost if FQDN
14858:
14859: 1996-03-10 20:12 millert
14860:
14861: * check.c: Now use skeylookup() instead off skeychallenge()
14862:
14863: 1996-02-27 20:41 millert
14864:
14865: * logging.c: mail_argv should not contain ALERTMAIL as it includes
14866: "-t"
14867:
14868: 1996-02-22 17:06 millert
14869:
14870: * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14871:
14872: 1996-02-22 16:27 millert
14873:
14874: * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14875:
14876: 1996-02-22 16:27 millert
14877:
14878: * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14879:
14880: 1996-02-05 19:20 millert
14881:
14882: * README, INSTALL: ++version
14883:
14884: 1996-02-05 19:20 millert
14885:
14886: * Makefile.in: ++versoin
14887:
14888: 1996-02-05 19:16 millert
14889:
14890: * Makefile.in: fixed a typo
14891:
14892: 1996-02-05 19:16 millert
14893:
14894: * configure.in: ++version
14895:
14896: 1996-02-05 18:53 millert
14897:
14898: * RUNSON: updated
14899:
14900: 1996-02-05 18:47 millert
14901:
14902: * CHANGES: done for 1.4.1 (I hope)
14903:
14904: 1996-02-05 18:45 millert
14905:
14906: * sudoers.pod: added info on wildcards
14907:
14908: 1996-02-05 18:39 millert
14909:
14910: * sample.sudoers: added wildcard example
14911:
14912: 1996-02-05 17:03 millert
14913:
14914: * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14915:
14916: 1996-02-05 17:03 millert
14917:
14918: * configure.in: addedSUDO_PROG_BSHELL !ll
14919:
14920: 1996-02-05 16:10 millert
14921:
14922: * visudo.pod: fixed up some formatting
14923:
14924: 1996-02-05 16:10 millert
14925:
14926: * sudoers.pod: redid section describing sample sudoers stuff
14927:
14928: 1996-02-05 16:10 millert
14929:
14930: * sudo.pod: fixed some formatting
14931:
14932: 1996-02-04 22:50 millert
14933:
14934: * getspwuid.c: now treats "" as bourne shell
14935:
14936: 1996-02-04 22:49 millert
14937:
14938: * Makefile.in: TESTOBJS nwo includes wildmat.o
14939:
14940: 1996-02-04 22:48 millert
14941:
14942: * testsudoers.c: now works with NewArg[cv]
14943:
14944: 1996-02-04 21:59 millert
14945:
14946: * sudo.c: removed an XXX (fixed it in getspwuid.c)
14947:
14948: 1996-02-04 21:58 millert
14949:
14950: * aclocal.m4: added check for bourne shell
14951:
14952: 1996-02-04 21:58 millert
14953:
14954: * pathnames.h.in: added _PATH_BSHELL
14955:
14956: 1996-02-04 21:58 millert
14957:
14958: * config.h.in: added _SUDO_PATH_BSHELL
14959:
14960: 1996-02-04 16:36 millert
14961:
14962: * visudo.c: unixware vi returns 256 instead of 0
14963:
14964: 1996-02-04 16:24 millert
14965:
14966: * INSTALL: added Linux note
14967:
14968: 1996-02-04 16:13 millert
14969:
14970: * logging.c: fixed up some XXX's. file log format now looks a
14971: little more like real syslog(3) format.
14972:
14973: 1996-02-04 16:13 millert
14974:
14975: * README, TROUBLESHOOTING: updated wrt lex/flex
14976:
14977: 1996-02-04 16:11 millert
14978:
14979: * Makefile.in: commented out rule to build lex.yy.c from parse.lex
14980: since we ship with a pre-flex'd parser
14981:
14982: 1996-02-04 16:09 millert
14983:
14984: * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
14985:
14986: 1996-02-04 02:28 millert
14987:
14988: * logging.c: eliminated some strcat()'s
14989:
14990: 1996-02-04 02:10 millert
14991:
14992: * configure.in: no longer checks for lex/flex (now assumes flex)
14993:
14994: 1996-02-04 02:08 millert
14995:
14996: * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
14997: just kerb_dir_candidate
14998:
14999: 1996-02-02 20:48 millert
15000:
15001: * parse.yacc: now use a 'hook' expression instead of an iffy one
15002: :-)
15003:
15004: 1996-02-02 01:14 millert
15005:
15006: * visudo.c: now works with new sudo arg stuff
15007:
15008: 1996-02-02 01:14 millert
15009:
15010: * parse.yacc: fixed dereferencing deadbeef
15011:
15012: 1996-02-01 23:53 millert
15013:
15014: * sudo.c: changed an occurrence of Argv to NewArgv
15015:
15016: 1996-02-01 23:53 millert
15017:
15018: * parse.lex: took out support for quoted commands since there is no
15019: need...
15020:
15021: 1996-02-01 23:52 millert
15022:
15023: * parse.c: fixed a typo in a for() loop
15024:
15025: 1996-02-01 23:52 millert
15026:
15027: * logging.c: protected against dereferencing rogue pointers
15028:
15029: 1996-02-01 22:34 millert
15030:
15031: * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15032: needed this also allows us to eliminate some kludges in
15033: parse_args() and eliminate superfluous code.
15034:
15035: 1996-02-01 22:34 millert
15036:
15037: * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15038:
15039: 1996-02-01 22:32 millert
15040:
15041: * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15042: cmnd_args (no longer used)
15043:
15044: 1996-02-01 22:31 millert
15045:
15046: * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15047:
15048: 1996-02-01 22:30 millert
15049:
15050: * parse.yacc: COMMAND is now a struct containing the path and args
15051:
15052: 1996-02-01 22:30 millert
15053:
15054: * parse.lex: replaced append() with fill_cmnd() and fill_args.
15055: command args from a sudoers entry are now stored in an arrary for
15056: easy matching.
15057:
15058: 1996-02-01 22:28 millert
15059:
15060: * parse.c: command line args from sudoers file are now in an array
15061: like ones passed in from the command line
15062:
15063: 1996-01-31 20:59 millert
15064:
15065: * parse.c: wildwat stuff now works
15066:
15067: 1996-01-29 00:44 millert
15068:
15069: * version.h: ++version
15070:
15071: 1996-01-29 00:44 millert
15072:
15073: * Makefile.in: ++version added wildmat.*
15074:
15075: 1996-01-28 17:55 millert
15076:
15077: * parse.lex: added support for quoted commands (w/ or w/o args)
15078:
15079: 1996-01-22 01:55 millert
15080:
15081: * sudo.pod, visudo.pod: cleaned up formatting
15082:
15083: 1996-01-21 20:53 millert
15084:
15085: * sudo.pod, visudo.pod: Initial revision
15086:
15087: 1996-01-21 02:07 millert
15088:
15089: * sudoers.pod: looks reasonable, could be mroe readable
15090:
15091: 1996-01-20 23:47 millert
15092:
15093: * sudoers.pod: Initial revision
15094:
15095: 1996-01-16 14:38 millert
15096:
15097: * RUNSON: updated
15098:
15099: 1996-01-16 14:37 millert
15100:
15101: * OPTIONS: updated NO_ROOT_SUDO entry
15102:
15103: 1996-01-15 11:37 millert
15104:
15105: * RUNSON: [no log message]
15106:
15107: 1996-01-15 11:34 millert
15108:
15109: * sudo.c: fixed SECURE_PATH
15110:
15111: 1996-01-14 20:55 millert
15112:
15113: * RUNSON: udpa`ted for 1.4
15114:
15115: 1996-01-14 20:52 millert
15116:
15117: * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15118:
15119: 1996-01-14 20:32 millert
15120:
15121: * TROUBLESHOOTING: added entry for anal ansi compilers
15122:
15123: 1996-01-14 16:13 millert
15124:
15125: * INSTALL: added info on libcrypt_i for SCO
15126:
15127: 1996-01-14 16:05 millert
15128:
15129: * TODO: [no log message]
15130:
15131: 1996-01-14 15:39 millert
15132:
15133: * sample.sudoers: added comments
15134:
15135: 1996-01-14 15:25 millert
15136:
15137: * TODO: 1.4 release
15138:
15139: 1996-01-14 15:22 millert
15140:
15141: * README, config.h.in, configure.in, CHANGES: ++version
15142:
15143: 1996-01-14 15:21 millert
15144:
15145: * BUGS: ++version and fixed ISC
15146:
15147: 1996-01-14 15:19 millert
15148:
15149: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15150: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15151: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15152: logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15153: testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15154: ++version
15155:
15156: 1996-01-14 15:16 millert
15157:
15158: * interfaces.c: added STUB_LOAD_INTERFACES ++version
15159:
15160: 1996-01-14 15:14 millert
15161:
15162: * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15163: emul/utime.h: ++version
15164:
15165: 1996-01-14 15:13 millert
15166:
15167: * PORTING: added info about fd_set in tgetpass added info on
15168: interfaces.c
15169:
15170: 1996-01-11 13:22 millert
15171:
15172: * dce_pwent.c: added sudo header
15173:
15174: 1996-01-11 13:04 millert
15175:
15176: * tgetpass.c: fixed a typo
15177:
15178: 1996-01-11 13:01 millert
15179:
15180: * Makefile.in: tgetpass.o is now only linked in with sudo (not
15181: visudo)
15182:
15183: 1996-01-09 12:56 millert
15184:
15185: * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15186: configure.in: ++version
15187:
15188: 1996-01-09 12:54 millert
15189:
15190: * emul/utime.h: added copyright notice
15191:
15192: 1996-01-09 12:52 millert
15193:
15194: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15195: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15196: interfaces.c, logging.c, options.h, parse.c, parse.lex,
15197: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15198: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15199: visudo.c: ++version
15200:
15201: 1996-01-09 12:46 millert
15202:
15203: * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15204: svr4'ish boxen
15205:
15206: 1996-01-09 12:42 millert
15207:
15208: * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15209:
15210: 1996-01-09 12:41 millert
15211:
15212: * config.h.in: added check for sys/bsdtypes.h
15213:
15214: 1996-01-07 16:00 millert
15215:
15216: * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15217:
15218: 1996-01-07 15:55 millert
15219:
15220: * TROUBLESHOOTING: added 2 entries
15221:
15222: 1996-01-07 15:55 millert
15223:
15224: * Makefile.in: added FAQ
15225:
15226: 1996-01-07 14:26 millert
15227:
15228: * TROUBLESHOOTING: added section on syslog
15229:
15230: 1996-01-07 14:25 millert
15231:
15232: * configure.in: added AC_ISC_POSIX for better ISC support
15233:
15234: 1996-01-07 14:25 millert
15235:
15236: * config.h.in: fixed typo
15237:
15238: 1996-01-07 14:25 millert
15239:
15240: * config.h.in: added define for _POSIX_SOURCE
15241:
15242: 1996-01-04 00:41 millert
15243:
15244: * configure.in: fixed check for lsearch()
15245:
15246: 1995-12-21 21:53 millert
15247:
15248: * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15249: (should not happen)
15250:
15251: 1995-12-20 17:02 millert
15252:
15253: * configure.in: now only define HAVE_LSEARCH if there is a
15254: corresponding search.h
15255:
15256: 1995-12-20 15:52 millert
15257:
15258: * interfaces.c: works on ISC again
15259:
15260: 1995-12-18 17:36 millert
15261:
15262: * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15263: libcompat
15264:
15265: 1995-12-18 17:32 millert
15266:
15267: * lsearch.c: char * -> const char *
15268:
15269: 1995-12-18 17:29 millert
15270:
15271: * configure.in: now looks in -lcompat for lsearch()
15272:
15273: 1995-12-18 17:23 millert
15274:
15275: * Makefile.in: remove sudo.core visudo.core for clan target
15276:
15277: 1995-12-17 22:53 millert
15278:
15279: * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15280:
15281: 1995-12-17 22:36 millert
15282:
15283: * Makefile.in: fixed another occurence of sudo_getpwuid.*
15284:
15285: 1995-12-17 22:30 millert
15286:
15287: * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15288:
15289: 1995-12-17 22:22 millert
15290:
15291: * configure.in: moved the "echo"
15292:
15293: 1995-12-17 22:09 millert
15294:
15295: * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15296: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15297: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15298: ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15299: parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15300: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15301: tgetpass.c, utime.c, version.h, visudo.c: ++version
15302:
15303: 1995-12-17 22:04 millert
15304:
15305: * testsudoers.c: added group support
15306:
15307: 1995-12-17 22:00 millert
15308:
15309: * sample.sudoers: added group entry
15310:
15311: 1995-12-17 21:59 millert
15312:
15313: * sudoers.man: documented group support
15314:
15315: 1995-12-17 21:50 millert
15316:
15317: * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15318:
15319: 1995-12-15 17:45 millert
15320:
15321: * check.c: tkfile was too short and overflowed the kerberos realm
15322:
15323: 1995-12-11 17:09 millert
15324:
15325: * sudo.c: now copy command args directly from Argv
15326:
15327: 1995-12-11 15:55 millert
15328:
15329: * sudo.c: replaced code to copy cmnd_args so that is does not use
15330: realloc since most realloc()'s really stink
15331:
15332: 1995-12-08 14:11 millert
15333:
15334: * configure.in: syslog() fixed in hpux 10.01
15335:
15336: 1995-12-06 17:45 millert
15337:
15338: * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15339: if appropriate)
15340:
15341: 1995-12-06 17:30 millert
15342:
15343: * configure.in: better error if cannot find skey incs or libs
15344:
15345: 1995-12-06 17:26 millert
15346:
15347: * aclocal.m4: now use a temp file for determining max len of uid_t
15348: in string form. the old hacky way broke on netbsd
15349:
15350: 1995-12-05 19:02 millert
15351:
15352: * sudo.c: added set of parens and a space
15353:
15354: 1995-12-05 18:58 millert
15355:
15356: * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15357:
15358: 1995-12-05 18:58 millert
15359:
15360: * check.c: modified a comment
15361:
15362: 1995-12-05 18:57 millert
15363:
15364: * Makefile.in: fixed up testsudoers target
15365:
15366: 1995-12-05 18:56 millert
15367:
15368: * configure.in: DCE changes from Jeff Earickson
15369: <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15370: SUDO_FDFLAGS and VISUDO_LDFLAGS
15371:
15372: 1995-12-05 18:17 millert
15373:
15374: * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15375: SUDO_LDFLAGS, VISUDO_LDFLAGS
15376:
15377: 1995-11-27 23:32 millert
15378:
15379: * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15380:
15381: 1995-11-27 23:17 millert
15382:
15383: * check.c: LONG_SKEY_PROMPT is less of a klusge /
15384:
15385: 1995-11-27 23:17 millert
15386:
15387: * configure.in: fixed typos w/ dce stuff
15388:
15389: 1995-11-27 23:14 millert
15390:
15391: * Makefile.in: added dce_pwent.c
15392:
15393: 1995-11-26 13:48 millert
15394:
15395: * INSTALL: amended section on combining authentication mechanisms
15396:
15397: 1995-11-26 13:48 millert
15398:
15399: * PORTING: minor updates for 1.3.6
15400:
15401: 1995-11-26 13:47 millert
15402:
15403: * TROUBLESHOOTING: added 2 more entries
15404:
15405: 1995-11-26 13:39 millert
15406:
15407: * BUGS: updated for 1.3.6
15408:
15409: 1995-11-26 13:39 millert
15410:
15411: * README: overhauled
15412:
15413: 1995-11-25 21:23 millert
15414:
15415: * INSTALL: rewrote for sudo 1.3.6
15416:
15417: 1995-11-25 21:23 millert
15418:
15419: * TROUBLESHOOTING: added 3 entries
15420:
15421: 1995-11-25 13:53 millert
15422:
15423: * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15424: since many includes don't prototype it. gag me.
15425:
15426: 1995-11-25 13:23 millert
15427:
15428: * sudo.h: removed prototype for sudo_getpwuid() since convex C
15429: compiler choked on it.
15430:
15431: 1995-11-25 13:23 millert
15432:
15433: * sudo.c: added prototype for sudo_getpwuid()
15434:
15435: 1995-11-25 13:23 millert
15436:
15437: * lsearch.c: now compiles on strict ANSI compilers
15438:
15439: 1995-11-24 23:56 millert
15440:
15441: * check.c: added LONG_SKEY_PROMPT support
15442:
15443: 1995-11-24 23:55 millert
15444:
15445: * Makefile.in: added extra $'s for make to eat up, yum.
15446:
15447: 1995-11-24 23:38 millert
15448:
15449: * OPTIONS, options.h: added LONG_SKEY_PROMPT
15450:
15451: 1995-11-24 18:48 millert
15452:
15453: * check.c: s/key support now works with normal s/key as well as
15454: logdaemon
15455:
15456: 1995-11-24 18:46 millert
15457:
15458: * options.h, OPTIONS: added SKEY_ONLY
15459:
15460: 1995-11-24 18:46 millert
15461:
15462: * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15463:
15464: 1995-11-24 00:42 millert
15465:
15466: * INSTALL: added DCE note added more AIX notes
15467:
15468: 1995-11-24 00:39 millert
15469:
15470: * sudo.c: now include pthread.h for DCE support
15471:
15472: 1995-11-23 22:22 millert
15473:
15474: * check.c: dce_pwent() is ok after all .,
15475:
15476: 1995-11-23 22:21 millert
15477:
15478: * logging.c: now uses SYSLOG() macro that equates to either
15479: syslog() or syslog_wrapper
15480:
15481: 1995-11-23 21:44 millert
15482:
15483: * dce_pwent.c: minor formatting changes. renamed check() to
15484: somthing less generic
15485:
15486: 1995-11-23 21:27 millert
15487:
15488: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15489: visudo.c: now uses user_pw_ent and simple macros to get at the
15490: contents
15491:
15492: 1995-11-22 20:35 millert
15493:
15494: * check.c: simpler dec unix C2 support
15495:
15496: 1995-11-22 20:35 millert
15497:
15498: * getspwuid.c: now sets crypt_type for DEC unix C2
15499:
15500: 1995-11-21 18:00 millert
15501:
15502: * configure.in: added csops paths for skey
15503:
15504: 1995-11-21 16:27 millert
15505:
15506: * getspwuid.c: now includes string.h for strdup() prototype
15507:
15508: 1995-11-21 01:47 millert
15509:
15510: * getspwuid.c: fixed a few typos
15511:
15512: 1995-11-20 22:59 millert
15513:
15514: * check.c: now includes skey.h
15515:
15516: 1995-11-20 22:10 millert
15517:
15518: * getspwuid.c: fixed up comments
15519:
15520: 1995-11-20 22:04 millert
15521:
15522: * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15523:
15524: 1995-11-20 22:01 millert
15525:
15526: * sudo.c: now uses sudo_pw_ent
15527:
15528: 1995-11-20 21:50 millert
15529:
15530: * testsudoers.c: now uses sudo_pw_ent
15531:
15532: 1995-11-20 21:40 millert
15533:
15534: * visudo.c: now sets sudo_pw_ent
15535:
15536: 1995-11-20 21:28 millert
15537:
15538: * getspwuid.c: Initial revision
15539:
15540: 1995-11-20 21:28 millert
15541:
15542: * tgetpass.c: moved dce stuff into compat.h
15543:
15544: 1995-11-20 21:27 millert
15545:
15546: * sudo.h, logging.c: now uses sudo_pw_ent
15547:
15548: 1995-11-20 21:27 millert
15549:
15550: * Makefile.in: added sudo_getpwuid.c
15551:
15552: 1995-11-20 21:25 millert
15553:
15554: * compat.h: added dce support
15555:
15556: 1995-11-20 21:13 millert
15557:
15558: * parse.yacc: now uses sudo_pw_ent
15559:
15560: 1995-11-20 14:40 millert
15561:
15562: * check.c: fixed exempt_group stuff for OS's that don't put base
15563: gid in group vector
15564:
15565: 1995-11-20 01:39 millert
15566:
15567: * check.c: S/Key support now works with sunos4 shadow passwords
15568:
15569: 1995-11-19 22:31 millert
15570:
15571: * Makefile.in: fixed clean rule
15572:
15573: 1995-11-19 22:31 millert
15574:
15575: * config.h.in, configure.in: added DCE support
15576:
15577: 1995-11-19 22:30 millert
15578:
15579: * tgetpass.c: DCE & KERB support
15580:
15581: 1995-11-19 22:30 millert
15582:
15583: * check.c: first stab at dce support
15584:
15585: 1995-11-19 22:24 millert
15586:
15587: * dce_pwent.c: now smells like sudo
15588:
15589: 1995-11-19 22:11 millert
15590:
15591: * dce_pwent.c: Initial revision
15592:
15593: 1995-11-19 21:36 millert
15594:
15595: * check.c: skey'd sudo now works w/ normal password as well
15596:
15597: 1995-11-19 18:37 millert
15598:
15599: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15600: find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15601: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15602: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15603: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15604: tgetpass.c, utime.c, version.h, visudo.c: updated version number
15605:
15606: 1995-11-19 18:32 millert
15607:
15608: * README: updated to reflect version change
15609:
15610: 1995-11-19 18:27 millert
15611:
15612: * configure.in: --with options now line up ++version
15613:
15614: 1995-11-19 18:26 millert
15615:
15616: * sudo.h: removed unecesary S/Key stuff
15617:
15618: 1995-11-19 18:25 millert
15619:
15620: * configure.in: fixed S/Key support
15621:
15622: 1995-11-19 18:24 millert
15623:
15624: * Makefile.in: -I stuff now goes in CPPFLAGS
15625:
15626: 1995-11-19 18:23 millert
15627:
15628: * check.c: fixed SKey support
15629:
15630: 1995-11-19 15:23 millert
15631:
15632: * README: updated version
15633:
15634: 1995-11-19 13:59 millert
15635:
15636: * OPTIONS: fixed description of EXEMPTGROUP
15637:
15638: 1995-11-19 10:47 millert
15639:
15640: * sudo.c: more people use _RLD_ than just alphas...
15641:
15642: 1995-11-18 21:35 millert
15643:
15644: * Makefile.in: replaced $man_prefix with $mandir
15645:
15646: 1995-11-18 21:30 millert
15647:
15648: * configure.in: fixed a typo
15649:
15650: 1995-11-18 21:28 millert
15651:
15652: * Makefile.in: now use more GNU'ish dir names
15653:
15654: 1995-11-18 21:27 millert
15655:
15656: * configure.in: now set *dir correctly (can override from command
15657: line)
15658:
15659: 1995-11-18 19:17 millert
15660:
15661: * sudo.c: now deal with situations where we getwd() fails
15662:
15663: 1995-11-17 00:37 millert
15664:
15665: * Makefile.in: added etc_dir, bin_dir, sbin_dir
15666:
15667: 1995-11-17 00:37 millert
15668:
15669: * configure.in: added sbin_dir
15670:
15671: 1995-11-16 21:28 millert
15672:
15673: * Makefile.in: now ship a flex-generated lex.yy.c
15674:
15675: 1995-11-16 21:09 millert
15676:
15677: * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15678: SUDOERS_OWNER
15679:
15680: 1995-11-16 21:06 millert
15681:
15682: * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15683: overridden via Makefile
15684:
15685: 1995-11-16 21:05 millert
15686:
15687: * options.h: no more error for redefining SUDOERS_OWNER
15688:
15689: 1995-11-16 21:05 millert
15690:
15691: * OPTIONS: expanded SUDOERS_OWNER section
15692:
15693: 1995-11-16 03:05 millert
15694:
15695: * visudo.c: now warn if chown(2) failed
15696:
15697: 1995-11-16 02:55 millert
15698:
15699: * logging.c: better default warning for NO_SUDOERS_FILE
15700:
15701: 1995-11-16 02:54 millert
15702:
15703: * sudo.c: added missing set_perms() no more cryptic message if the
15704: sudoers file is zero length, now just give a parse error
15705:
15706: 1995-11-16 02:42 millert
15707:
15708: * logging.c: better diagnostics if NO_SUDOERS_FILE
15709:
15710: 1995-11-16 02:41 millert
15711:
15712: * sudo.c: check_sudoers() now catches sudoers files that are not
15713: readable (but are stat'able).
15714:
15715: 1995-11-13 01:12 millert
15716:
15717: * configure.in: now add -D__STDC__ for convex cc (not gcc)
15718:
15719: 1995-11-13 00:52 millert
15720:
15721: * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15722: exec_prefix
15723:
15724: 1995-11-13 00:52 millert
15725:
15726: * Makefile.in: now uses exec_prefix & prefix from configure
15727:
15728: 1995-11-13 00:16 millert
15729:
15730: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15731: parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15732: tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15733: so shadow build trees can have a custom copy of options.h
15734:
15735: 1995-11-13 00:15 millert
15736:
15737: * check.c: user_is_exempt() is no longer a hack, it now uses
15738: getgrnam()
15739:
15740: 1995-11-12 23:56 millert
15741:
15742: * options.h: EXEMPTGROUP is now "sudo"
15743:
15744: 1995-11-12 22:25 millert
15745:
15746: * configure.in: MAN_POSTINSTALL now contains a leading space
15747:
15748: 1995-11-12 22:25 millert
15749:
15750: * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15751: now removes testsudoers in clean:
15752:
15753: 1995-11-12 22:24 millert
15754:
15755: * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15756:
15757: 1995-10-30 15:51 millert
15758:
15759: * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15760: don't get spoofed into using a bogus server
15761:
15762: 1995-09-29 17:50 millert
15763:
15764: * parse.yacc: now explicately initialize match[] tp be FALSE
15765:
15766: 1995-09-23 16:48 millert
15767:
15768: * sudo.c: removed unused variable now passes -Wall
15769:
15770: 1995-09-23 16:48 millert
15771:
15772: * parse.yacc: yyerror and dumpaliases are now void's now passes
15773: -Wall
15774:
15775: 1995-09-23 16:48 millert
15776:
15777: * parse.lex: added prototype for yyerror
15778:
15779: 1995-09-23 16:47 millert
15780:
15781: * interfaces.c: rmeoved unused cruft now passes -Wall
15782:
15783: 1995-09-23 16:47 millert
15784:
15785: * check.c, logging.c, parse.c: now passes -Wall
15786:
15787: 1995-09-23 16:46 millert
15788:
15789: * Makefile.in: fixed headers that moved to emul dir
15790:
15791: 1995-09-23 12:05 millert
15792:
15793: * logging.c: fixed deref of nil pointer if no args
15794:
15795: 1995-09-15 19:18 millert
15796:
15797: * OPTIONS: added a caveat to FQDN section
15798:
15799: 1995-09-13 19:48 millert
15800:
15801: * Makefile.in: more $srcdir support for install targets
15802:
15803: 1995-09-13 17:17 millert
15804:
15805: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15806: putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15807: visudo.c: don't include malloc.h if we include stdlib.h
15808:
15809: 1995-09-12 21:44 millert
15810:
15811: * parse.yacc: local search.h now lives in emul
15812:
15813: 1995-09-12 21:41 millert
15814:
15815: * lsearch.c: local search.h now lives in emul
15816:
15817: 1995-09-12 21:41 millert
15818:
15819: * check.c, utime.c: local utime.h now lives in emul dir
15820:
15821: 1995-09-12 21:38 millert
15822:
15823: * Makefile.in: added support for building in other than the
15824: sourcedir
15825:
15826: 1995-09-10 14:01 millert
15827:
15828: * OPTIONS: annotated CSOPS_INSULTS option
15829:
15830: 1995-09-10 13:56 millert
15831:
15832: * TROUBLESHOOTING: updated shadow passwords blurb
15833:
15834: 1995-09-09 21:00 millert
15835:
15836: * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15837: shell and passes along foo as the arguments
15838:
15839: 1995-09-09 18:52 millert
15840:
15841: * parse.lex: collapsed pathname and dir sections into one -- its
15842: now less expensive
15843:
15844: 1995-09-09 18:34 millert
15845:
15846: * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15847: append() and fill() now take args to make the above work
15848:
15849: 1995-09-08 20:51 millert
15850:
15851: * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15852: a tty on fd 1 to erroneously have "none" as their tty
15853:
15854: 1995-09-04 15:35 millert
15855:
15856: * check.c: timestampfile is now a global static removed decl of
15857: timestampfile in remove_timestamp since we can just use the
15858: global one
15859:
15860: 1995-09-04 15:28 millert
15861:
15862: * check.c: created touch() to update timestamps added
15863: USE_TTY_TICKETS support (bit of a kludge)
15864:
15865: 1995-09-04 15:28 millert
15866:
15867: * compat.h: added _S_IFDIR and S_ISDIR
15868:
15869: 1995-09-04 15:22 millert
15870:
15871: * OPTIONS, options.h: added USE_TTY_TICKETS
15872:
15873: 1995-09-04 00:38 millert
15874:
15875: * parse.yacc: removed const from casts for lsearch() & lfind() to
15876: placate irix 4.x C compiler
15877:
15878: 1995-09-03 14:12 millert
15879:
15880: * sudo.c: now only strip '/dev/' off of a tty if it starts with
15881: '/dev/'
15882:
15883: 1995-09-03 14:12 millert
15884:
15885: * pathnames.h.in: added _PATH_DEV
15886:
15887: 1995-09-03 14:11 millert
15888:
15889: * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15890: tcgetattr only if have termios.h
15891:
15892: 1995-09-03 14:09 millert
15893:
15894: * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15895: not int for c_?flag
15896:
15897: 1995-09-03 13:19 millert
15898:
15899: * parse.lex, parse.yacc: fixed a spelling error
15900:
15901: 1995-09-03 13:17 millert
15902:
15903: * Makefile.in: fixed typo
15904:
15905: 1995-09-02 12:55 millert
15906:
15907: * Makefile.in: fixed a comment
15908:
15909: 1995-09-02 12:54 millert
15910:
15911: * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15912: now that we dynamically allocate strings they need to be free()'d
15913:
15914: 1995-09-02 12:46 millert
15915:
15916: * parse.lex: dynamically allocates space for strings
15917:
15918: 1995-09-02 12:34 millert
15919:
15920: * sudo.h: no more MAXCOMMANDLENGTH
15921:
15922: 1995-09-01 22:25 millert
15923:
15924: * sudo.h: added decl of tty
15925:
15926: 1995-09-01 22:25 millert
15927:
15928: * logging.c, sudo.c: moved tty stuff into sudo.c
15929:
15930: 1995-09-01 14:18 millert
15931:
15932: * parse.c: fixed a logic bug. Was denying a command if user gave
15933: command line args but there were none in the sudoers file which
15934: is wrong.
15935:
15936: 1995-09-01 01:18 millert
15937:
15938: * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15939:
15940: 1995-09-01 01:13 millert
15941:
15942: * parse.lex: return foo; -> return(foo);
15943:
15944: 1995-09-01 01:03 millert
15945:
15946: * parse.yacc: fixed netgr_matches() prototype
15947:
15948: 1995-09-01 01:02 millert
15949:
15950: * parse.lex: added support for escaping "termination" characters
15951:
15952: 1995-09-01 00:55 millert
15953:
15954: * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
15955: command args
15956:
15957: 1995-09-01 00:50 millert
15958:
15959: * sudo.c: fixed comments
15960:
15961: 1995-09-01 00:49 millert
15962:
15963: * goodpath.c: fixed negation problem (doh!)
15964:
15965: 1995-09-01 00:25 millert
15966:
15967: * parse.yacc: fixed 2nd parameter to lfind()
15968:
15969: 1995-09-01 00:24 millert
15970:
15971: * parse.lex: now do bounds checking in fill() and append()
15972:
15973: 1995-09-01 00:23 millert
15974:
15975: * sudo.c: include netdb.h as we should added a missing void cast
15976: added SHELL_IF_NO_ARGS support now use realloc() properly. would
15977: fail if realloc actually moved the string instead of shrinking it
15978:
15979: 1995-09-01 00:17 millert
15980:
15981: * sample.sudoers: updated with examples of new features
15982:
15983: 1995-09-01 00:05 millert
15984:
15985: * goodpath.c: now set errno to EACCES if not a regular file or not
15986: executable
15987:
15988: 1995-09-01 00:04 millert
15989:
15990: * find_path.c: if given a fully-qualified or relative path we now
15991: check it with sudo_goodpath() and error out with the appropriate
15992: error message if the file does not exist or is not executable
15993:
15994: 1995-09-01 00:03 millert
15995:
15996: * lsearch.c, emul/search.h: now use correct args for lfind
15997:
15998: 1995-09-01 00:03 millert
15999:
16000: * logging.c: added a comment
16001:
16002: 1995-08-31 23:52 millert
16003:
16004: * insults.h: added in CSOps insults
16005:
16006: 1995-08-31 23:51 millert
16007:
16008: * ins_csops.h: Initial revision
16009:
16010: 1995-08-31 23:35 millert
16011:
16012: * tgetpass.c: added RCS id
16013:
16014: 1995-08-31 22:56 millert
16015:
16016: * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16017: HAVE_GETWD
16018:
16019: 1995-08-31 22:55 millert
16020:
16021: * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16022:
16023: 1995-08-31 22:54 millert
16024:
16025: * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16026: -p now works with -s
16027:
16028: 1995-08-31 22:54 millert
16029:
16030: * parse.c: don't try to stat() "pseudo commands" like "validate"
16031:
16032: 1995-08-31 22:53 millert
16033:
16034: * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16035: SHELL_IF_NO_ARGS
16036:
16037: 1995-08-31 22:53 millert
16038:
16039: * configure.in: added SecurID support added other insults to
16040: --with-csops
16041:
16042: 1995-08-31 22:52 millert
16043:
16044: * config.h.in: added HAVE_SECURID
16045:
16046: 1995-08-31 22:52 millert
16047:
16048: * Makefile.in: added clobber target added ins_csops.h now gets
16049: CFLAGS from configure
16050:
16051: 1995-08-31 22:46 millert
16052:
16053: * aclocal.m4: relaxed SUDO_FULL_VOID
16054:
16055: 1995-08-31 22:44 millert
16056:
16057: * visudo.c: function comment blocks are now in same style as rest
16058: of code
16059:
16060: 1995-08-31 22:44 millert
16061:
16062: * testsudoers.c: added support for command line args in
16063: /etc/sudoers
16064:
16065: 1995-08-31 22:43 millert
16066:
16067: * sudoers.man: updated to have command args in the sudoers file
16068:
16069: 1995-08-31 22:42 millert
16070:
16071: * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16072: VARIABLES section
16073:
16074: 1995-08-19 19:32 millert
16075:
16076: * parse.yacc: PATH renamed to COMMAND
16077:
16078: 1995-08-19 19:31 millert
16079:
16080: * parse.lex: it is now a parse error for directories to have args
16081: attached to them
16082:
16083: 1995-08-19 19:30 millert
16084:
16085: * logging.c: now say command args if telling user to buzz off
16086:
16087: 1995-08-19 19:30 millert
16088:
16089: * sudo.c: -s no longer indicates end of args sped up loading on
16090: cmnd_args in load_cmnd()
16091:
16092: 1995-08-19 19:29 millert
16093:
16094: * parse.c: removed an unreachable statement
16095:
16096: 1995-08-19 17:53 millert
16097:
16098: * parse.lex: made more efficient by pulling out the terminators
16099: when in GOTCMND state and making them their own rule
16100:
16101: 1995-08-14 00:07 millert
16102:
16103: * sudo.h: removed MAXLOGLEN since it is no longer used
16104:
16105: 1995-08-14 00:07 millert
16106:
16107: * parse.lex: now allows command args
16108:
16109: 1995-08-14 00:06 millert
16110:
16111: * parse.c: now groks command arguments
16112:
16113: 1995-08-13 23:39 millert
16114:
16115: * logging.c: now sets tty correctly when piped input
16116:
16117: 1995-08-13 23:35 millert
16118:
16119: * sudo.c: fixed loading of cmnd_args (was including command name
16120: too)
16121:
16122: 1995-08-13 23:34 millert
16123:
16124: * logging.c: fixed a core dump due to incorrect if construct
16125:
16126: 1995-08-13 00:33 millert
16127:
16128: * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16129: -lsocket if irix
16130:
16131: 1995-08-13 00:33 millert
16132:
16133: * aclocal.m4: fixed check for ISC
16134:
16135: 1995-08-13 00:32 millert
16136:
16137: * sudo.c: now sets cmnd_args used by log_error() and that will be
16138: used by the parse to check against command args
16139:
16140: 1995-08-13 00:32 millert
16141:
16142: * sudo.h: added cmnd_args
16143:
16144: 1995-08-13 00:31 millert
16145:
16146: * logging.c: now dynamically allocate logline since we can guess at
16147: its size
16148:
16149: 1995-08-05 13:52 millert
16150:
16151: * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16152: buffer remove "register" since the compiler knows more than I do
16153: now do a "basename" of the tty
16154:
16155: 1995-07-31 18:20 millert
16156:
16157: * configure.in: ++version
16158:
16159: 1995-07-30 22:37 millert
16160:
16161: * sudo.h: added shell extern changed MODE_* to be bit masks to
16162: allow for several options together
16163:
16164: 1995-07-30 22:36 millert
16165:
16166: * sudo.c: added -s (shell) option made MODE_* masks so we can do
16167: bitwise & and | to see if multiple flags are set.
16168:
16169: 1995-07-30 22:01 millert
16170:
16171: * check.c: added securid support
16172:
16173: 1995-07-30 14:38 millert
16174:
16175: * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16176: with strcat()
16177:
16178: 1995-07-29 17:17 millert
16179:
16180: * Makefile.in, version.h: ++version
16181:
16182: 1995-07-27 06:52 millert
16183:
16184: * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16185:
16186: 1995-07-26 22:00 millert
16187:
16188: * testsudoers.c: added netgr_matches
16189:
16190: 1995-07-26 21:29 millert
16191:
16192: * parse.c: cleaned up netgr_matches
16193:
16194: 1995-07-26 00:26 millert
16195:
16196: * RUNSON: updated for 1.3.4
16197:
16198: 1995-07-24 21:51 millert
16199:
16200: * Makefile.in: now installs sudoers.man -- really should clean this
16201: up though.
16202:
16203: 1995-07-24 21:18 millert
16204:
16205: * Makefile.in: added sudoers.cat and sudoers.man
16206:
16207: 1995-07-24 21:15 millert
16208:
16209: * sudo.man: pulled out stuff on the sudoers file format into a
16210: separate man page
16211:
16212: 1995-07-24 21:14 millert
16213:
16214: * sudoers.man: Initial revision
16215:
16216: 1995-07-24 21:04 millert
16217:
16218: * HISTORY: fixed up my email address
16219:
16220: 1995-07-24 20:03 millert
16221:
16222: * configure.in: added checks for innetgr and getdomainname
16223:
16224: 1995-07-24 20:02 millert
16225:
16226: * visudo.c: added dummy netgr_matches function
16227:
16228: 1995-07-24 20:01 millert
16229:
16230: * parse.c: added netgr_matches
16231:
16232: 1995-07-24 20:01 millert
16233:
16234: * parse.lex, parse.yacc: added NETGROUP support
16235:
16236: 1995-07-24 20:01 millert
16237:
16238: * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16239:
16240: 1995-07-24 18:07 millert
16241:
16242: * sudo.c: rewrote clean_env() that has rm_env() builtin
16243:
16244: 1995-07-23 19:58 millert
16245:
16246: * check.c: now cast uid to long in sprintf
16247:
16248: 1995-07-23 19:58 millert
16249:
16250: * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16251:
16252: 1995-07-23 19:57 millert
16253:
16254: * options.h: added _INSULTS suffix to HAL & GOONS
16255:
16256: 1995-07-23 19:35 millert
16257:
16258: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16259: new scheme of insult "unions" end
16260:
16261: 1995-07-23 17:48 millert
16262:
16263: * sudo.c: now uses MAX_UID_T_LEN
16264:
16265: 1995-07-23 17:48 millert
16266:
16267: * configure.in: added SUDO_UID_T_LEN !l
16268:
16269: 1995-07-23 17:48 millert
16270:
16271: * config.h.in: added MAX_UID_T_LEN
16272:
16273: 1995-07-23 17:47 millert
16274:
16275: * check.c: now use MAX_UID_T_LEN
16276:
16277: 1995-07-23 17:47 millert
16278:
16279: * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16280: check
16281:
16282: 1995-07-19 19:05 millert
16283:
16284: * configure.in: corrected version
16285:
16286: 1995-07-19 17:29 millert
16287:
16288: * configure.in: added sco support
16289:
16290: 1995-07-19 17:29 millert
16291:
16292: * aclocal.m4: hack to check for sco
16293:
16294: 1995-07-18 21:27 millert
16295:
16296: * interfaces.c: removed #include <net/route.h> since it was hosing
16297: some OS's
16298:
16299: 1995-07-18 13:35 millert
16300:
16301: * find_path.c: fixed prreadlink() prototype
16302:
16303: 1995-07-17 23:54 millert
16304:
16305: * check.c: added parens in #if's
16306:
16307: 1995-07-17 23:53 millert
16308:
16309: * configure.in: added SPW_ prefix
16310:
16311: 1995-07-17 23:20 millert
16312:
16313: * sudo.h: moved SPW_* to config.h.in
16314:
16315: 1995-07-17 23:19 millert
16316:
16317: * sudo.c: added a set of parens
16318:
16319: 1995-07-17 23:19 millert
16320:
16321: * config.h.in: added SPW_*
16322:
16323: 1995-07-17 22:50 millert
16324:
16325: * sudo.h: added SPW_* reordered error codes
16326:
16327: 1995-07-17 22:49 millert
16328:
16329: * check.c: moved SPW_* to sudo.h
16330:
16331: 1995-07-17 14:29 millert
16332:
16333: * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16334:
16335: 1995-07-17 14:29 millert
16336:
16337: * configure.in: AUTH -> SECUREWARE
16338:
16339: 1995-07-17 14:29 millert
16340:
16341: * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16342:
16343: 1995-07-17 00:22 millert
16344:
16345: * check.c: now uses SHADOW_TYPE to make shadow pw support more
16346: readable and modular. It's a start...
16347:
16348: 1995-07-17 00:21 millert
16349:
16350: * configure.in: added autodetection of shadow passwords
16351:
16352: 1995-07-17 00:20 millert
16353:
16354: * sudo.c: now uses SHADOW_TYPE define
16355:
16356: 1995-07-17 00:19 millert
16357:
16358: * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16359: defines
16360:
16361: 1995-07-17 00:19 millert
16362:
16363: * aclocal.m4: added SUDO_CHECK_SHADOW
16364:
16365: 1995-07-12 17:09 millert
16366:
16367: * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16368: took out test for memmove() since we dno longer use it...
16369:
16370: 1995-07-12 17:08 millert
16371:
16372: * CHANGES: updated
16373:
16374: 1995-07-12 17:05 millert
16375:
16376: * logging.c: added BROKEN_SYSLOG support
16377:
16378: 1995-07-12 17:05 millert
16379:
16380: * config.h.in: added BROKEN_SYSLOG
16381:
16382: 1995-07-12 17:04 millert
16383:
16384: * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16385: allow for a machine udpating its time from a server
16386:
16387: 1995-07-12 17:04 millert
16388:
16389: * sudo.man: added 2 security notes updated Nieusma's email addr
16390:
16391: 1995-07-12 14:18 millert
16392:
16393: * lsearch.c: changed a memmove() to memcpy() since we don't have to
16394: worry about overlapping segments.
16395:
16396: 1995-07-11 15:41 millert
16397:
16398: * interfaces.c: cleanup up the loop when interfaces are groped in
16399: so that it is readable
16400:
16401: 1995-07-11 14:52 millert
16402:
16403: * Makefile.in, version.h: ++version
16404:
16405: 1995-07-09 18:17 millert
16406:
16407: * CHANGES: annotated 124-126
16408:
16409: 1995-07-07 16:06 millert
16410:
16411: * check.c: fixed permissions check on /tmp/.odus
16412:
16413: 1995-07-06 19:35 millert
16414:
16415: * check.c: fixed some comments
16416:
16417: 1995-07-06 14:49 millert
16418:
16419: * check.c: now checks owner & mode of timedir also checks for bogus
16420: dates on timestamp file
16421:
16422: 1995-07-06 14:49 millert
16423:
16424: * OPTIONS: updated TIMEOUT info
16425:
16426: 1995-07-06 14:48 millert
16427:
16428: * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16429:
16430: 1995-07-06 14:47 millert
16431:
16432: * compat.h: added definition of S_IRWXU
16433:
16434: 1995-07-06 14:47 millert
16435:
16436: * CHANGES: updated
16437:
16438: 1995-07-03 14:16 millert
16439:
16440: * interfaces.c: added #ifdef to make it compile on strange arches
16441:
16442: 1995-07-02 18:13 millert
16443:
16444: * aclocal.m4: fixed check for fulkl void impl.
16445:
16446: 1995-07-02 09:56 millert
16447:
16448: * check.c: added mssing "static"
16449:
16450: 1995-07-01 20:41 millert
16451:
16452: * insults.h: replaced #elif with #else #if constructs for ancient C
16453: compilers
16454:
16455: 1995-07-01 20:18 millert
16456:
16457: * INSTALL: updated irix c2 & kerb5 info
16458:
16459: 1995-07-01 20:15 millert
16460:
16461: * configure.in: added shadow pw support for irix
16462:
16463: 1995-07-01 16:07 millert
16464:
16465: * CHANGES: last changes for sudo 1.3.3
16466:
16467: 1995-07-01 16:07 millert
16468:
16469: * TODO, BUGS: updated
16470:
16471: 1995-07-01 16:04 millert
16472:
16473: * configure.in: now calls SUDO_SOCK_SA_LEN
16474:
16475: 1995-07-01 16:04 millert
16476:
16477: * config.h.in: added HAVE_SA_LEN
16478:
16479: 1995-07-01 16:04 millert
16480:
16481: * aclocal.m4: added SUDO_SOCK_SA_LEN
16482:
16483: 1995-07-01 15:49 millert
16484:
16485: * interfaces.c: now works with ip implementations that use sa_len
16486: in sockaddr
16487:
16488: 1995-07-01 14:26 millert
16489:
16490: * INSTALL: added note about buggy AIX compiler
16491:
16492: 1995-07-01 14:24 millert
16493:
16494: * interfaces.c: now include sys/time.h for AIX
16495:
16496: 1995-06-27 22:35 millert
16497:
16498: * Makefile.in: getcwd -> getwd
16499:
16500: 1995-06-27 21:28 millert
16501:
16502: * interfaces.c: now works for ISC and others. yay.
16503:
16504: 1995-06-26 14:24 millert
16505:
16506: * Makefile.in, version.h: version++
16507:
16508: 1995-06-22 20:26 millert
16509:
16510: * aclocal.m4: fixed test for full void impl
16511:
16512: 1995-06-22 20:25 millert
16513:
16514: * sudo.c: now check to see that st_dev is non-zero before assuming
16515: that we are being spoofed
16516:
16517: 1995-06-20 16:56 millert
16518:
16519: * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16520: AC_FUNC_UTIME_NULL
16521:
16522: 1995-06-19 16:32 millert
16523:
16524: * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16525:
16526: 1995-06-19 16:10 millert
16527:
16528: * logging.c: added cast for ttyname()
16529:
16530: 1995-06-19 15:23 millert
16531:
16532: * configure.in: fixed typo
16533:
16534: 1995-06-19 15:19 millert
16535:
16536: * check.c: now deal correctly with all known variation of utime()
16537: -- yippe
16538:
16539: 1995-06-19 15:19 millert
16540:
16541: * configure.in: added SUDO_FUNC_UTIME_POSIX
16542:
16543: 1995-06-19 15:19 millert
16544:
16545: * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16546:
16547: 1995-06-19 15:14 millert
16548:
16549: * config.h.in: added HAVE_UTIME_POSIX
16550:
16551: 1995-06-19 13:38 millert
16552:
16553: * check.c: fixed a typo
16554:
16555: 1995-06-19 13:29 millert
16556:
16557: * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16558:
16559: 1995-06-19 13:20 millert
16560:
16561: * check.c: fixed fascist C compiler warning
16562:
16563: 1995-06-18 23:14 millert
16564:
16565: * interfaces.c: now set strioctl.ic_timout in STRSET() now
16566: initialize num_interfaces to 0 (just to be anal)
16567:
16568: 1995-06-18 18:06 millert
16569:
16570: * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16571:
16572: 1995-06-18 18:05 millert
16573:
16574: * logging.c: added tty logging
16575:
16576: 1995-06-18 16:04 millert
16577:
16578: * interfaces.c: reworked the ISC code
16579:
16580: 1995-06-18 15:27 millert
16581:
16582: * Makefile.in, version.h: updated version
16583:
16584: 1995-06-18 15:24 millert
16585:
16586: * check.c: now expect old-style utime(3) if utime() can't take NULL
16587: as an arg
16588:
16589: 1995-06-18 15:08 millert
16590:
16591: * configure.in: added check for utime.h
16592:
16593: 1995-06-18 15:08 millert
16594:
16595: * config.h.in: added HAVE_UTIME_H
16596:
16597: 1995-06-18 14:48 millert
16598:
16599: * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16600:
16601: 1995-06-18 13:58 millert
16602:
16603: * configure.in: now search for kerb libs and includes
16604:
16605: 1995-06-18 13:03 millert
16606:
16607: * check.c: added support for utime(2)'s that can't take a NULL
16608: parameter
16609:
16610: 1995-06-18 13:03 millert
16611:
16612: * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16613: t belongs
16614:
16615: 1995-06-17 20:46 millert
16616:
16617: * configure.in: added utime(s) stuff
16618:
16619: 1995-06-17 20:46 millert
16620:
16621: * check.c: now use utime()
16622:
16623: 1995-06-17 20:46 millert
16624:
16625: * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16626:
16627: 1995-06-17 19:12 millert
16628:
16629: * utime.c: now use HAVE_UTIME_NULL
16630:
16631: 1995-06-17 19:02 millert
16632:
16633: * utime.c, emul/utime.h: Initial revision
16634:
16635: 1995-06-17 18:24 millert
16636:
16637: * check.c: need to setuid(0) to make kerb4 stuff work.
16638:
16639: 1995-06-17 18:14 millert
16640:
16641: * tgetpass.c: no more special case for kerberos
16642:
16643: 1995-06-17 18:13 millert
16644:
16645: * config.h.in: took out setreuid and setresuid stuff added kerb5
16646: stuff (use kerb4 emulation)
16647:
16648: 1995-06-17 18:13 millert
16649:
16650: * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16651: to 128 if kerberos
16652:
16653: 1995-06-17 18:12 millert
16654:
16655: * check.c: now use private ticket file for kerberos support to
16656: avoid trouncing on system one
16657:
16658: 1995-06-15 00:48 millert
16659:
16660: * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16661:
16662: 1995-06-15 00:47 millert
16663:
16664: * sudo.c: added anti-spoofing support
16665:
16666: 1995-06-15 00:47 millert
16667:
16668: * parse.c: now use global cmnd_st
16669:
16670: 1995-06-15 00:47 millert
16671:
16672: * logging.c: added SPOOF_ATTEMPT suypport
16673:
16674: 1995-06-14 23:41 millert
16675:
16676: * testsudoers.c, visudo.c: added void casts where appropriate
16677:
16678: 1995-06-14 23:40 millert
16679:
16680: * parse.yacc: fixed up spacing and added void casts where
16681: appropriate
16682:
16683: 1995-06-14 23:27 millert
16684:
16685: * sudo.c: fixed problem with "-p prompt" but no args
16686:
16687: 1995-06-14 04:43 millert
16688:
16689: * sudo.man: added BUGS and annotated -l description
16690:
16691: 1995-06-14 04:43 millert
16692:
16693: * sudo.h: validate() now takes a flag
16694:
16695: 1995-06-14 04:43 millert
16696:
16697: * sudo.c: validate() now takes a flag added -l
16698:
16699: 1995-06-14 04:42 millert
16700:
16701: * parse.yacc: added support for -l
16702:
16703: 1995-06-14 04:41 millert
16704:
16705: * parse.c: validate() now takes a flag that says whether or not to
16706: check the command
16707:
16708: 1995-06-07 21:36 millert
16709:
16710: * logging.c: now deals with Argv == 1
16711:
16712: 1995-06-07 21:34 millert
16713:
16714: * sudo.man: added -p option
16715:
16716: 1995-06-07 21:27 millert
16717:
16718: * sudo.c: added prompt support reworked parse_args()
16719:
16720: 1995-06-07 20:49 millert
16721:
16722: * sudo.h: added prompt
16723:
16724: 1995-06-07 20:49 millert
16725:
16726: * options.h: added PASSPROMPT
16727:
16728: 1995-06-07 20:48 millert
16729:
16730: * check.c: now use BUFSIZ as length of kerb password added kpass so
16731: pass is always a char * now use prompt global when asking for a
16732: password
16733:
16734: 1995-06-07 20:47 millert
16735:
16736: * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16737:
16738: 1995-06-07 20:43 millert
16739:
16740: * OPTIONS: added PASSPROMPT
16741:
16742: 1995-06-07 01:44 millert
16743:
16744: * configure.in: only look for -lufc or -lcrypt if crypt() not in
16745: libc
16746:
16747: 1995-06-07 01:43 millert
16748:
16749: * check.c: don't exit on kerb error, just warn if k_errno ==
16750: KDC_PR_UNKNOWN (unknown user) silently fail
16751:
16752: 1995-06-06 22:44 millert
16753:
16754: * INSTALL: added kerb4 note
16755:
16756: 1995-06-06 22:43 millert
16757:
16758: * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16759:
16760: 1995-06-06 22:41 millert
16761:
16762: * check.c: removed debugging printf
16763:
16764: 1995-06-06 22:33 millert
16765:
16766: * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16767: setresuid
16768:
16769: 1995-06-06 22:32 millert
16770:
16771: * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16772: HAVE_SETRESUID
16773:
16774: 1995-06-06 22:32 millert
16775:
16776: * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16777: setreuid emulation with setresuid if applic
16778:
16779: 1995-06-06 22:31 millert
16780:
16781: * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16782: chown() hack if no setreuid() or a broken one
16783:
16784: 1995-06-05 23:44 millert
16785:
16786: * config.h.in: added HAVE_KERBEROS
16787:
16788: 1995-06-05 23:43 millert
16789:
16790: * tgetpass.c: added KERBEROS support (long passwords)
16791:
16792: 1995-06-05 23:42 millert
16793:
16794: * check.c, configure.in: added kerberos support
16795:
16796: 1995-06-03 19:36 millert
16797:
16798: * sudo.h: added MODE_BACKGROUND
16799:
16800: 1995-06-03 19:36 millert
16801:
16802: * sudo.man: escaped dashes added -b option
16803:
16804: 1995-06-03 19:34 millert
16805:
16806: * sudo.c: added -b option
16807:
16808: 1995-06-03 18:52 millert
16809:
16810: * check.c: added crypt() for osf/1 3.x enhanced secuiry
16811:
16812: 1995-06-03 18:18 millert
16813:
16814: * configure.in: now check for -lcrypt
16815:
16816: 1995-06-03 18:00 millert
16817:
16818: * interfaces.c: added ENXIO like EADDRNOTAVAIL
16819:
16820: 1995-05-07 23:14 millert
16821:
16822: * configure.in: now emulate getwd(), not getcwd()
16823:
16824: 1995-05-07 23:13 millert
16825:
16826: * sudo.c: getcwd() -> getwd()
16827:
16828: 1995-05-07 23:12 millert
16829:
16830: * getwd.c: getcwd -> getwd
16831:
16832: 1995-05-02 01:34 millert
16833:
16834: * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16835:
16836: 1995-05-02 01:34 millert
16837:
16838: * insults.h: broke out insults into separate include files
16839:
16840: 1995-05-02 01:32 millert
16841:
16842: * options.h, OPTIONS: added GOONS
16843:
16844: 1995-05-02 01:32 millert
16845:
16846: * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16847:
16848: 1995-05-01 23:34 millert
16849:
16850: * Makefile.in, version.h: ++version
16851:
16852: 1995-05-01 23:34 millert
16853:
16854: * visudo.c: moved signal handler setup to setup_signals()
16855:
16856: 1995-05-01 23:33 millert
16857:
16858: * sudo.h: added load_interfaces()
16859:
16860: 1995-05-01 23:33 millert
16861:
16862: * sudo.c: moved load_interfaces to interfaces.c
16863:
16864: 1995-05-01 23:33 millert
16865:
16866: * parse.yacc: added clearaliases
16867:
16868: 1995-05-01 23:33 millert
16869:
16870: * OPTIONS, options.h: added FAST_MATCH
16871:
16872: 1995-05-01 23:32 millert
16873:
16874: * parse.lex: now uses clearaliases variable
16875:
16876: 1995-05-01 23:31 millert
16877:
16878: * interfaces.c: Initial revision
16879:
16880: 1995-05-01 23:31 millert
16881:
16882: * Makefile.in: added interfaces.[co]
16883:
16884: 1995-05-01 23:30 millert
16885:
16886: * testsudoers.c: now uses ip addrs and netmasks via
16887: load_interfaces()
16888:
16889: 1995-05-01 22:47 millert
16890:
16891: * sudo.c: now remove IFS instead of setting to "sane" value
16892:
16893: 1995-05-01 16:30 millert
16894:
16895: * parse.c: added FAST_MATCH
16896:
16897: 1995-04-29 20:19 millert
16898:
16899: * Makefile.in: sudo_goodpath.c-> goodpath.c
16900:
16901: 1995-04-29 20:15 millert
16902:
16903: * sudo.c: added Andy's new ISC changes
16904:
16905: 1995-04-14 14:06 millert
16906:
16907: * OPTIONS: added a sentence to SECURE_PATH info
16908:
16909: 1995-04-14 13:57 millert
16910:
16911: * BUGS: added one
16912:
16913: 1995-04-14 13:54 millert
16914:
16915: * RUNSON, CHANGES: updated
16916:
16917: 1995-04-13 17:04 millert
16918:
16919: * RUNSON: updated for beta3
16920:
16921: 1995-04-13 14:32 millert
16922:
16923: * Makefile.in, version.h: ++version
16924:
16925: 1995-04-13 13:56 millert
16926:
16927: * aclocal.m4: sendmail is now looked for in /usr/ucblib
16928:
16929: 1995-04-13 13:54 millert
16930:
16931: * sudo.c: fixed indentation
16932:
16933: 1995-04-13 13:35 millert
16934:
16935: * aclocal.m4: fixed a typo
16936:
16937: 1995-04-13 13:19 millert
16938:
16939: * sudo.c: updated ISC mods
16940:
16941: 1995-04-13 13:19 millert
16942:
16943: * configure.in: added unixware case
16944:
16945: 1995-04-13 13:19 millert
16946:
16947: * check.c: user_is_exempt is no longer hidden
16948:
16949: 1995-04-13 13:19 millert
16950:
16951: * RUNSON: updated
16952:
16953: 1995-04-13 13:19 millert
16954:
16955: * aclocal.m4: isc and riscos changes
16956:
16957: 1995-04-13 13:18 millert
16958:
16959: * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
16960: SECURE_PATH
16961:
16962: 1995-04-13 13:18 millert
16963:
16964: * Makefile.in: fixed a typo and added testsudoers stuff
16965:
16966: 1995-04-13 12:34 millert
16967:
16968: * testsudoers.c: Initial revision
16969:
16970: 1995-04-12 19:31 millert
16971:
16972: * parse.yacc: applied fixed patch from Chris
16973:
16974: 1995-04-11 14:30 millert
16975:
16976: * Makefile.in: fixed a typo
16977:
16978: 1995-04-11 14:14 millert
16979:
16980: * parse.yacc: added a set of braces for bison
16981:
16982: 1995-04-11 14:01 millert
16983:
16984: * parse.yacc: merged in Chris' changes to dekludge the parser.
16985:
16986: 1995-04-11 00:38 millert
16987:
16988: * logging.c: send_mail() was calling find_path() which is wrong
16989: since find_path() stores cmnd in a static var. Anyhow, it
16990: doesn't make much sense since MAILER should always be fully
16991: qualified
16992:
16993: 1995-04-10 19:51 millert
16994:
16995: * sample.sudoers: added User_Alias stuff
16996:
16997: 1995-04-10 19:50 millert
16998:
16999: * aclocal.m4: SUDO_NEXT now looks for
17000: /usr/lib/NextStep/software_version
17001:
17002: 1995-04-10 19:50 millert
17003:
17004: * RUNSON: added DEC UNIX 3.0 w/ gcc
17005:
17006: 1995-04-10 19:49 millert
17007:
17008: * visudo.c: Exit was being used in places where exit should be used
17009:
17010: 1995-04-10 19:44 millert
17011:
17012: * sudoers: added "User alias specification"
17013:
17014: 1995-04-10 18:04 millert
17015:
17016: * parse.yacc: fixed probs caused by making nslots and naliases a
17017: size_t
17018:
17019: 1995-04-10 15:09 millert
17020:
17021: * RUNSON: added KSR, upped rev to 1.3.1b2
17022:
17023: 1995-04-10 15:07 millert
17024:
17025: * logging.c, parse.yacc: 1024 -> BUFSIZ
17026:
17027: 1995-04-10 15:05 millert
17028:
17029: * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17030: to appease lsearch on 64-bit machines
17031:
17032: 1995-04-09 19:30 millert
17033:
17034: * TODO: did a bunch of things and added a bunch :-)
17035:
17036: 1995-04-09 19:30 millert
17037:
17038: * PORTING: updated
17039:
17040: 1995-04-09 19:24 millert
17041:
17042: * visudo.man: closer to BSD manpage style
17043:
17044: 1995-04-09 19:15 millert
17045:
17046: * sudo.man: closer to standard BSD man format
17047:
17048: 1995-04-09 18:58 millert
17049:
17050: * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17051: sudo.h, version.h, emul/search.h: added RCS id
17052:
17053: 1995-04-09 17:35 millert
17054:
17055: * sudo.h: removed crufty #defines that are no longer used
17056:
17057: 1995-04-09 17:13 millert
17058:
17059: * BUGS: fixed a bug
17060:
17061: 1995-04-09 17:12 millert
17062:
17063: * sudo.man: updated based on sudo changes
17064:
17065: 1995-04-09 17:11 millert
17066:
17067: * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17068: keyword as well as a NAME or ALIAS
17069:
17070: 1995-04-09 17:11 millert
17071:
17072: * CHANGES: updated
17073:
17074: 1995-04-09 17:04 millert
17075:
17076: * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17077:
17078: 1995-04-09 15:24 millert
17079:
17080: * aclocal.m4: fixed bug with full void impl check
17081:
17082: 1995-04-08 23:11 millert
17083:
17084: * parse.yacc: fixed User_Alias supoprt
17085:
17086: 1995-04-08 22:27 millert
17087:
17088: * parse.yacc: added stubs for User_Alias support
17089:
17090: 1995-04-08 22:27 millert
17091:
17092: * sudo.c: now sets removes # bogus interfaces from num_interfaces
17093:
17094: 1995-04-08 22:26 millert
17095:
17096: * parse.lex: added User_Alias support
17097:
17098: 1995-04-07 21:10 millert
17099:
17100: * Makefile.in: removed extraneous TODO
17101:
17102: 1995-04-07 19:48 millert
17103:
17104: * visudo.c: ntwk_matches -> addr_matches
17105:
17106: 1995-04-07 15:38 millert
17107:
17108: * parse.yacc: ntwk_matches -> addr_matches
17109:
17110: 1995-04-07 15:37 millert
17111:
17112: * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17113: inet_network() (which expects octet boundaries) fixes for OSF
17114: (sizeof(int) != sizeof(long))
17115:
17116: 1995-04-07 15:08 millert
17117:
17118: * sudo.c: took out debugging info
17119:
17120: 1995-04-06 23:45 millert
17121:
17122: * aclocal.m4: OS was being set to unknown before non-uname based
17123: host checks. This caused no checks to happen since $OS was not
17124: zero-length.
17125:
17126: 1995-04-06 23:30 millert
17127:
17128: * sudo.c: fixed loading of interfaces struct still has debugging
17129: info in though
17130:
17131: 1995-04-06 22:23 millert
17132:
17133: * parse.c: fixed typo
17134:
17135: 1995-04-06 16:17 millert
17136:
17137: * Makefile.in: ++version
17138:
17139: 1995-04-06 16:16 millert
17140:
17141: * version.h: ++
17142:
17143: 1995-04-06 16:16 millert
17144:
17145: * visudo.c: removed extraneous extern decl of "top
17146:
17147: 1995-04-06 16:14 millert
17148:
17149: * visudo.c: now zeros "top"
17150:
17151: 1995-04-06 16:13 millert
17152:
17153: * parse.yacc: removed parser_cleanup (no need for it now)
17154:
17155: 1995-04-06 16:13 millert
17156:
17157: * parse.lex: now calls reset_aliases() directly
17158:
17159: 1995-04-04 18:21 millert
17160:
17161: * OPTIONS: added a sentence to SECURE_PATH description
17162:
17163: 1995-04-04 18:17 millert
17164:
17165: * parse.c: fixed my stupid bug where I used NAMLEN on something I
17166: wanted to just get the name from. argh.
17167:
17168: 1995-04-03 16:58 millert
17169:
17170: * lsearch.c: fixed argument order of memmove() that i hosed when
17171: converting from bcopy(). arghh.
17172:
17173: 1995-04-03 15:33 millert
17174:
17175: * Makefile.in: finally fixed DISTFILES line
17176:
17177: 1995-04-03 15:21 millert
17178:
17179: * Makefile.in: tabs -> spaces
17180:
17181: 1995-04-03 15:15 millert
17182:
17183: * Makefile.in: added missing files to DISTFILES
17184:
17185: 1995-04-03 14:50 millert
17186:
17187: * Makefile.in: SUPPORTED -> RUNSON
17188:
17189: 1995-04-01 03:12 millert
17190:
17191: * TODO: updated
17192:
17193: 1995-04-01 01:54 millert
17194:
17195: * RUNSON: updated for pl5b1 release
17196:
17197: 1995-04-01 01:53 millert
17198:
17199: * BUGS, TODO: updated
17200:
17201: 1995-04-01 01:52 millert
17202:
17203: * check.c: fixed bug where if you hit return at first sudo prompt
17204: it would still log as a failure
17205:
17206: 1995-04-01 01:29 millert
17207:
17208: * CHANGES: updated
17209:
17210: 1995-04-01 01:25 millert
17211:
17212: * aclocal.m4: better test for bogus void * implementation
17213:
17214: 1995-03-31 20:33 millert
17215:
17216: * logging.c: added PASSWORDS_NOT_CORRECT
17217:
17218: 1995-03-31 20:32 millert
17219:
17220: * check.c: added PASSWORDS_NOT_CORRECT stuff]
17221:
17222: 1995-03-31 20:30 millert
17223:
17224: * sudo.h: added PASSWORDS_NOT_CORRECT
17225:
17226: 1995-03-31 19:16 millert
17227:
17228: * tgetpass.c: moved pathnames.h
17229:
17230: 1995-03-31 19:16 millert
17231:
17232: * sudo.c: removed some unused vars and fixed up uid2str
17233:
17234: 1995-03-31 19:15 millert
17235:
17236: * putenv.c: moved compat.h
17237:
17238: 1995-03-31 19:14 millert
17239:
17240: * getcwd.c, getwd.c: added pathnames.h
17241:
17242: 1995-03-31 18:18 millert
17243:
17244: * parse.yacc: fixed a typo I introduced in the last checkin :-(
17245:
17246: 1995-03-31 18:11 millert
17247:
17248: * parse.lex: can't have #ifdef's where N is defined so just do this
17249: the broken way for AIX
17250:
17251: 1995-03-31 18:08 millert
17252:
17253: * parse.yacc: better hack from Chris (but still a hack)
17254:
17255: 1995-03-31 18:05 millert
17256:
17257: * parse.lex: stupid hack for broken aix lex
17258:
17259: 1995-03-31 17:47 millert
17260:
17261: * tgetpass.c: now includes compat.h
17262:
17263: 1995-03-31 17:27 millert
17264:
17265: * visudo.c: now includes fcntl.h
17266:
17267: 1995-03-31 17:27 millert
17268:
17269: * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17270:
17271: 1995-03-31 16:12 millert
17272:
17273: * parse.yacc: dirty hack to fix parser bug. i don't really like
17274: this but it works for now...
17275:
17276: 1995-03-31 16:12 millert
17277:
17278: * sudo.c: uid2str is now static like the prototype says
17279:
17280: 1995-03-29 23:48 millert
17281:
17282: * RUNSON: Initial revision
17283:
17284: 1995-03-29 23:47 millert
17285:
17286: * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17287:
17288: 1995-03-29 23:46 millert
17289:
17290: * sudo.c: check_sudoers now returns an error code and sudo calls
17291: inform_user and log_error based on the return value.
17292:
17293: 1995-03-29 23:45 millert
17294:
17295: * logging.c, sudo.h: added entries for new errors
17296:
17297: 1995-03-29 23:03 millert
17298:
17299: * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17300: sudoers file
17301:
17302: 1995-03-29 22:52 millert
17303:
17304: * Makefile.in: took out testsudoers
17305:
17306: 1995-03-29 22:36 millert
17307:
17308: * sudo.c: now explicately checks that it is setuid root
17309:
17310: 1995-03-29 22:28 millert
17311:
17312: * sudo.c: If a user has no passwd entry sudo would segv (writing to
17313: a garbage pointer). Now allocate space before writing :-)
17314:
17315: 1995-03-29 22:06 millert
17316:
17317: * configure.in: reordered AC_CHECK_FUNCS
17318:
17319: 1995-03-29 22:06 millert
17320:
17321: * config.h.in: fixed memset macro
17322:
17323: 1995-03-29 21:47 millert
17324:
17325: * logging.c: bzero -> memset when a parse error is logged the line
17326: number of the error is now logged too
17327:
17328: 1995-03-29 21:46 millert
17329:
17330: * tgetpass.c, visudo.c: bzero -> memset
17331:
17332: 1995-03-29 21:46 millert
17333:
17334: * INSTALL: added Sunos to blurb about c2 security
17335:
17336: 1995-03-29 21:45 millert
17337:
17338: * configure.in: added a SUN4 define for C2 security
17339:
17340: 1995-03-29 21:44 millert
17341:
17342: * config.h.in: bcopy -> memmove bzero -> memset
17343:
17344: 1995-03-29 21:43 millert
17345:
17346: * lsearch.c: bcopy -> memmove char * -> VOID *
17347:
17348: 1995-03-29 21:30 millert
17349:
17350: * check.c: added support for sunos with C2 security
17351:
17352: 1995-03-29 21:12 millert
17353:
17354: * OPTIONS, options.h: reordered
17355:
17356: 1995-03-29 21:12 millert
17357:
17358: * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17359:
17360: 1995-03-29 21:12 millert
17361:
17362: * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17363:
17364: 1995-03-29 21:12 millert
17365:
17366: * config.h.in: added _SUDO_PATH_LOGFILE
17367:
17368: 1995-03-29 21:11 millert
17369:
17370: * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17371: added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17372: too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17373:
17374: 1995-03-29 18:17 millert
17375:
17376: * TROUBLESHOOTING: Initial revision
17377:
17378: 1995-03-29 17:59 millert
17379:
17380: * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17381: load_global() to work around a problem is trusted hpux shadow
17382: passwords. yuck.
17383:
17384: 1995-03-29 17:41 millert
17385:
17386: * parse.yacc: backed out a change in malloc/realloc
17387:
17388: 1995-03-29 17:38 millert
17389:
17390: * parse.yacc: now include stdlib.h
17391:
17392: 1995-03-29 17:22 millert
17393:
17394: * visudo.c: now do an freopen() of the stmp file so that yyin will
17395: always point to the same thing. This is important for flex since
17396: we are doing a YY_NEWFILE
17397:
17398: 1995-03-29 17:20 millert
17399:
17400: * parse.yacc: replaced yywrap() with parser_cleanup() since
17401: yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17402: sigh.
17403:
17404: 1995-03-29 17:18 millert
17405:
17406: * parse.lex: now have a rule that matches anything that doesn't
17407: match an explicite rule. well, you know what i mean (. matches
17408: anything not yet matched). However, this means that there is
17409: input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17410: So, yywrap has moved into parse.lex and it calls parser_cleanup()
17411: which is most of the old yywrap() sigh.
17412:
17413: 1995-03-29 17:17 millert
17414:
17415: * SUPPORTED: no longer used
17416:
17417: 1995-03-29 16:13 millert
17418:
17419: * getcwd.c, getwd.c: moved compat.h to be the last include file
17420:
17421: 1995-03-29 16:11 millert
17422:
17423: * parse.yacc: fixed type of aliascmp() args
17424:
17425: 1995-03-29 15:58 millert
17426:
17427: * find_path.c: NULL -> '\0'
17428:
17429: 1995-03-29 15:42 millert
17430:
17431: * parse.yacc: added casts to lfind and lsearch args for irix
17432:
17433: 1995-03-29 08:20 millert
17434:
17435: * Makefile.in: bsdinstall -> install-sh
17436:
17437: 1995-03-29 08:20 millert
17438:
17439: * INSTALL: added info about make realclean
17440:
17441: 1995-03-29 08:17 millert
17442:
17443: * Makefile.in: updated VERSION added dependencies for visudo.cat
17444:
17445: 1995-03-29 08:17 millert
17446:
17447: * version.h: -> pl5b1
17448:
17449: 1995-03-29 08:16 millert
17450:
17451: * sudo.c: took out -l
17452:
17453: 1995-03-29 00:03 millert
17454:
17455: * Makefile.in: now there is a real visudo.man and visudo.cat
17456:
17457: 1995-03-28 23:54 millert
17458:
17459: * sudo.man: took out visudo stuff
17460:
17461: 1995-03-28 23:54 millert
17462:
17463: * visudo.man: Initial revision
17464:
17465: 1995-03-28 23:12 millert
17466:
17467: * parse.c, parse.lex, parse.yacc: updated copyright
17468:
17469: 1995-03-28 23:05 millert
17470:
17471: * README: updated for pl5
17472:
17473: 1995-03-28 20:02 millert
17474:
17475: * sudo.man: updated Nieusma & Hieb email addresses
17476:
17477: 1995-03-28 19:57 millert
17478:
17479: * INSTALL: updated to include options.h and OPTIONS
17480:
17481: 1995-03-28 19:35 millert
17482:
17483: * CHANGES, TODO: updated
17484:
17485: 1995-03-28 19:35 millert
17486:
17487: * BUGS: eliminated bug #1 (yay)
17488:
17489: 1995-03-28 19:31 millert
17490:
17491: * configure.in: sunos no longer gets linked statically
17492:
17493: 1995-03-28 18:58 millert
17494:
17495: * parse.lex: prototype now uses __P()
17496:
17497: 1995-03-28 18:49 millert
17498:
17499: * parse.lex: make fill() non-ansi
17500:
17501: 1995-03-28 15:26 millert
17502:
17503: * parse.c: made -v (validate) work
17504:
17505: 1995-03-28 15:26 millert
17506:
17507: * logging.c: now gives host
17508:
17509: 1995-03-28 10:34 millert
17510:
17511: * find_path.c: don't check for execute/statable if fq or relative
17512: path given
17513:
17514: 1995-03-28 01:07 millert
17515:
17516: * parse.c: added a cast
17517:
17518: 1995-03-28 00:49 millert
17519:
17520: * visudo.c: now include ctype.h for islower and tolower macros
17521:
17522: 1995-03-28 00:48 millert
17523:
17524: * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17525:
17526: 1995-03-28 00:48 millert
17527:
17528: * sudo.c: moved a set of parens
17529:
17530: 1995-03-28 00:48 millert
17531:
17532: * strdup.c: now include compat.h
17533:
17534: 1995-03-28 00:47 millert
17535:
17536: * parse.yacc: now cast malloc & realloc return vals added search
17537: for HAVE_LSEARCH now use strcmp if no strcasecmp available
17538:
17539: 1995-03-28 00:46 millert
17540:
17541: * lsearch.c, emul/search.h: void * -> VOID *
17542:
17543: 1995-03-28 00:45 millert
17544:
17545: * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17546: HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17547:
17548: 1995-03-28 00:44 millert
17549:
17550: * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17551:
17552: 1995-03-28 00:44 millert
17553:
17554: * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17555: echo and results to most SUDO_* macros
17556:
17557: 1995-03-28 00:43 millert
17558:
17559: * Makefile.in: no more -I.
17560:
17561: 1995-03-28 00:22 millert
17562:
17563: * configure.in: various 1.x ro 2.x autoconf changes now check for
17564: strcasecmp now use AC_INSTALL_PROG instead of custom one added
17565: check for fully woorking void implementation
17566:
17567: 1995-03-28 00:02 millert
17568:
17569: * Makefile.in: added lsearch & search.h visudo links into
17570: $(LIBOBJS)
17571:
17572: 1995-03-27 23:43 millert
17573:
17574: * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17575:
17576: 1995-03-27 23:40 millert
17577:
17578: * visudo.c: whatnow_help was prototyped to be static be was not
17579: declared as such
17580:
17581: 1995-03-27 21:15 millert
17582:
17583: * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17584: used) added check for dirent/dir/ndir.h
17585:
17586: 1995-03-27 21:09 millert
17587:
17588: * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17589:
17590: 1995-03-27 20:38 millert
17591:
17592: * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17593:
17594: 1995-03-27 20:23 millert
17595:
17596: * emul/search.h, lsearch.c: Initial revision
17597:
17598: 1995-03-27 18:26 millert
17599:
17600: * parse.yacc: eliminated bison warnings
17601:
17602: 1995-03-27 17:10 millert
17603:
17604: * parse.lex: added missing case
17605:
17606: 1995-03-27 17:04 millert
17607:
17608: * visudo.c: now iincludes signal.h
17609:
17610: 1995-03-27 15:16 millert
17611:
17612: * parse.yacc: only clear data structures on a parse error
17613:
17614: 1995-03-27 15:01 millert
17615:
17616: * visudo.c: whatnow() now gives help on invalid input
17617:
17618: 1995-03-27 14:54 millert
17619:
17620: * visudo.c: added a whatnow() function (sort of like mh)
17621:
17622: 1995-03-27 14:53 millert
17623:
17624: * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17625: by calling reset_aliases() and clearing top took reset stuff out
17626: of yyerror() since it doesn't beling there (and doesn't work
17627: anyway). errorlineno is now initially set to -1 so we can set it
17628: to the first error that occurrs (it was getting set to the last)
17629:
17630: 1995-03-27 14:53 millert
17631:
17632: * parse.lex: added a void cast
17633:
17634: 1995-03-27 13:26 millert
17635:
17636: * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17637:
17638: 1995-03-26 01:33 millert
17639:
17640: * sudo.c, sudo.h: removed ocmnd
17641:
17642: 1995-03-26 01:19 millert
17643:
17644: * sudo.h: no more sudo_realpath() and find_path() changed params
17645:
17646: 1995-03-26 01:19 millert
17647:
17648: * sudo.c: find_path() changed since no more realpath()
17649:
17650: 1995-03-26 01:18 millert
17651:
17652: * parse.yacc: on error, errorlineno is set to the line where the
17653: error occurred added kill_aliases() to free the aliases struct
17654: now clean up in yyerror() so we can reparse cleanly
17655:
17656: 1995-03-26 01:17 millert
17657:
17658: * logging.c: changed to use new find_path()
17659:
17660: 1995-03-26 01:17 millert
17661:
17662: * options.h, parse.c: no more USE_REALPATH
17663:
17664: 1995-03-26 01:16 millert
17665:
17666: * find_path.c: removed all the realpath() stuff
17667:
17668: 1995-03-26 01:16 millert
17669:
17670: * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17671:
17672: 1995-03-26 01:12 millert
17673:
17674: * visudo.c: now works correctly with utk parser
17675:
17676: 1995-03-26 00:04 millert
17677:
17678: * goodpath.c: Initial revision
17679:
17680: 1995-03-25 23:23 millert
17681:
17682: * sudo_realpath.c: eliminated a compiler warning
17683:
17684: 1995-03-25 21:56 millert
17685:
17686: * sudo.c: elinated compiler warning
17687:
17688: 1995-03-25 20:40 millert
17689:
17690: * sudo_realpath.c: added sudo_goodpath()
17691:
17692: 1995-03-25 20:40 millert
17693:
17694: * sudo.h: added prototype for sudo_goodpath
17695:
17696: 1995-03-25 20:39 millert
17697:
17698: * parse.c: added support for /sys/dir.h
17699:
17700: 1995-03-25 20:39 millert
17701:
17702: * options.h: USE_REALPATH turned off
17703:
17704: 1995-03-25 20:39 millert
17705:
17706: * find_path.c: added calls to sudo_goodpath()
17707:
17708: 1995-03-25 20:39 millert
17709:
17710: * configure.in: added check for dirent.h
17711:
17712: 1995-03-25 20:38 millert
17713:
17714: * config.h.in: added HAVE_DIRENT_H
17715:
17716: 1995-03-25 19:27 millert
17717:
17718: * configure.in: added in linux shadow pass stuff
17719:
17720: 1995-03-24 14:43 millert
17721:
17722: * visudo.c: added back host, user, cmnd, parse_error
17723:
17724: 1995-03-24 14:19 millert
17725:
17726: * visudo.c: added in utk changes plus some minor cosmetic changes
17727:
17728: 1995-03-24 14:17 millert
17729:
17730: * sudo.c, sudo_realpath.c: added void casts for printf's
17731:
17732: 1995-03-24 14:17 millert
17733:
17734: * options.h: added a define of USE_REALPATH
17735:
17736: 1995-03-24 14:17 millert
17737:
17738: * configure.in: there is no more visudoers/Makefile
17739:
17740: 1995-03-24 14:16 millert
17741:
17742: * Makefile.in: added in utk changes (visudo is now built from the
17743: toplevel)
17744:
17745: 1995-03-24 14:15 millert
17746:
17747: * find_path.c: added (void) casts to printf's
17748:
17749: 1995-03-23 22:32 millert
17750:
17751: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17752: in utk changes
17753:
17754: 1995-03-22 23:13 millert
17755:
17756: * find_path.c: now check to see that what we are trying to run is a
17757: file (or a link to a file, we do a stat(2) so there is no diff)
17758:
17759: 1995-03-13 15:56 millert
17760:
17761: * CHANGES: updated
17762:
17763: 1995-03-13 15:56 millert
17764:
17765: * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17766: new autoconf
17767:
17768: 1995-03-13 15:11 millert
17769:
17770: * sudo.man: added myself as maintainer
17771:
17772: 1995-02-16 23:31 millert
17773:
17774: * sudo.c: changed setegid -> setgid
17775:
17776: 1995-02-06 17:43 millert
17777:
17778: * configure.in: fixed the test for irix 5.x to skip bad libs
17779:
17780: 1995-02-06 17:43 millert
17781:
17782: * aclocal.m4: now initialize OS and OSREV
17783:
17784: 1995-01-26 20:52 millert
17785:
17786: * configure.in: irix5 changes
17787:
17788: 1995-01-26 20:28 millert
17789:
17790: * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17791: for autoconf 2.1 compatibility
17792:
17793: 1995-01-18 19:49 millert
17794:
17795: * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17796: do the righ thing wrt yyrestart (grrrr)
17797:
17798: 1995-01-16 18:44 millert
17799:
17800: * Makefile.in: added visudoers/compat.h to DISTFILES
17801:
17802: 1995-01-16 17:01 millert
17803:
17804: * configure.in: fixed an echo
17805:
17806: 1995-01-16 16:36 millert
17807:
17808: * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17809: parameters
17810:
17811: 1995-01-16 16:35 millert
17812:
17813: * sudo.h: added ocmnd extern adjusted find_path() prototype
17814:
17815: 1995-01-16 16:34 millert
17816:
17817: * parse.c: cmndcmp() now takes 3 arguments and checks against the
17818: qualified as well as the unqualified pathname. more code that
17819: should use cmndcmp() but did not, now does
17820:
17821: 1995-01-16 16:34 millert
17822:
17823: * options.h: added to a comment
17824:
17825: 1995-01-16 16:33 millert
17826:
17827: * logging.c: changed to use new find_path() parameter passing
17828:
17829: 1995-01-16 16:32 millert
17830:
17831: * find_path.c: find_path() now takes 2 copyout parameters (one for
17832: the qualified pathname and one for the unqualified pathname).
17833: The third parameter may be NULL.
17834:
17835: 1995-01-16 16:31 millert
17836:
17837: * configure.in: no longer munge pathnames.h
17838:
17839: 1995-01-16 16:30 millert
17840:
17841: * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17842: defined in config.h) as a result, pathnames.h does not need to be
17843: run through configure and the user can override the configured
17844: values easily.
17845:
17846: 1995-01-16 16:30 millert
17847:
17848: * config.h.in: added _SUDO_PATH_* entries
17849:
17850: 1995-01-16 16:30 millert
17851:
17852: * aclocal.m4: _PATH* -> _SUDO_PATH_*
17853:
17854: 1995-01-16 16:28 millert
17855:
17856: * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17857: config.h
17858:
17859: 1995-01-13 12:52 millert
17860:
17861: * compat.h: removed extraneous #endif
17862:
17863: 1995-01-13 12:48 millert
17864:
17865: * aclocal.m4: added SUDO_PROG_MV
17866:
17867: 1995-01-13 12:47 millert
17868:
17869: * configure.in: added SUDO_PROG_MV added riscos and isc os types
17870: took out -DSHORT_MESSAGE from --with-csops since it is now the
17871: default
17872:
17873: 1995-01-13 12:46 millert
17874:
17875: * sudo.c: move the include of id.h to compat.h now includes
17876: options.h
17877:
17878: 1995-01-13 12:45 millert
17879:
17880: * sudo.h: moved compatibility #defines to compat.h
17881:
17882: 1995-01-13 12:45 millert
17883:
17884: * pathnames.h.in: added _PATH_MV
17885:
17886: 1995-01-13 12:43 millert
17887:
17888: * config.h.in: move __P to compat.h
17889:
17890: 1995-01-13 12:39 millert
17891:
17892: * getcwd.c, getwd.c, putenv.c: now includes compat.h
17893:
17894: 1995-01-13 12:39 millert
17895:
17896: * compat.h: Initial revision
17897:
17898: 1995-01-11 19:11 millert
17899:
17900: * sudo.h: pull user-configurable stuff out and put in options.h
17901:
17902: 1995-01-11 18:43 millert
17903:
17904: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17905: sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17906: options.h
17907:
17908: 1995-01-11 18:41 millert
17909:
17910: * Makefile.in: added visudoers/options.h
17911:
17912: 1995-01-11 18:40 millert
17913:
17914: * options.h, OPTIONS: Initial revision
17915:
17916: 1995-01-11 18:39 millert
17917:
17918: * Makefile.in: added OPTIONS and options.h
17919:
17920: 1995-01-11 18:36 millert
17921:
17922: * logging.c: changed #ifdef's to use LOGGING and
17923: SLOG_SYSLOG/SLOG_FILE
17924:
17925: 1995-01-11 11:02 millert
17926:
17927: * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17928:
17929: 1994-12-17 18:18 millert
17930:
17931: * visudo.c: now only do Editor +line_num if line_num != 0
17932:
17933: 1994-12-15 21:06 millert
17934:
17935: * visudo.c: now use mv if rename(2) fails
17936:
17937: 1994-12-15 20:32 millert
17938:
17939: * BUGS: added a visudo bug
17940:
17941: 1994-12-15 19:46 millert
17942:
17943: * check.c: expanded comment
17944:
17945: 1994-11-12 18:33 millert
17946:
17947: * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
17948: set
17949:
17950: 1994-11-09 19:49 millert
17951:
17952: * sudo.c: added mips & isc support
17953:
17954: 1994-11-09 19:49 millert
17955:
17956: * parse.c: added support for non-root owned sudoers file
17957:
17958: 1994-11-09 19:48 millert
17959:
17960: * check.c: added exempt group support
17961:
17962: 1994-11-09 19:47 millert
17963:
17964: * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
17965: non-root own sudoers file added exempt group support added isc
17966: support
17967:
17968: 1994-11-09 19:46 millert
17969:
17970: * visudo.c: now copy sudoers to temp file via read/write (not
17971: stdio) now chown new sudoers file to SUDOERS_OWNER
17972:
17973: 1994-11-07 20:40 millert
17974:
17975: * configure.in: added skey support
17976:
17977: 1994-11-07 20:39 millert
17978:
17979: * sudo.h: fixed typo added set_perms support added skey support
17980: added seteuid()/setegid() emulation for AIX
17981:
17982: 1994-11-07 20:38 millert
17983:
17984: * sudo.c: be_* -> setperms() now check to make sure sudoers file is
17985: owned by root nread/write by only root
17986:
17987: 1994-11-07 20:38 millert
17988:
17989: * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
17990:
17991: 1994-11-07 20:38 millert
17992:
17993: * check.c: be_* -> set_perms() added skey support
17994:
17995: 1994-11-06 18:59 millert
17996:
17997: * Makefile.in: ++version
17998:
17999: 1994-11-06 18:59 millert
18000:
18001: * version.h: ++
18002:
18003: 1994-10-21 13:16 millert
18004:
18005: * sudo.c: now sets IFS
18006:
18007: 1994-10-21 12:02 millert
18008:
18009: * insults.h: fixed typo
18010:
18011: 1994-10-15 15:48 millert
18012:
18013: * config.h.in: added HAVE_SKEY
18014:
18015: 1994-10-04 13:00 millert
18016:
18017: * CHANGES: updated
18018:
18019: 1994-10-04 12:57 millert
18020:
18021: * Makefile.in: ++version
18022:
18023: 1994-10-04 12:57 millert
18024:
18025: * version.h: ++
18026:
18027: 1994-10-04 12:56 millert
18028:
18029: * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18030:
18031: 1994-10-04 12:56 millert
18032:
18033: * configure.in: added function check for tcgetattr(3)
18034:
18035: 1994-10-04 12:55 millert
18036:
18037: * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18038:
18039: 1994-10-04 12:53 millert
18040:
18041: * config.h.in: added check for tcgetattr
18042:
18043: 1994-09-26 17:38 millert
18044:
18045: * CHANGES: updated
18046:
18047: 1994-09-22 13:30 millert
18048:
18049: * parse.lex: now only include unistd.h for linux
18050:
18051: 1994-09-21 14:29 millert
18052:
18053: * Makefile.in: added visudo.8 generation
18054:
18055: 1994-09-21 14:07 millert
18056:
18057: * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18058:
18059: 1994-09-20 19:39 millert
18060:
18061: * BUGS: added one
18062:
18063: 1994-09-20 19:39 millert
18064:
18065: * CHANGES: updated
18066:
18067: 1994-09-20 19:38 millert
18068:
18069: * README: added mailing list info
18070:
18071: 1994-09-20 19:37 millert
18072:
18073: * parse.yacc: now use sudolineno instead of yylineno fixed bison
18074: warnings
18075:
18076: 1994-09-20 19:37 millert
18077:
18078: * configure.in: now use -no_library_replacement for osf don't make
18079: a static binary for hpux >= 9.0
18080:
18081: 1994-09-20 19:21 millert
18082:
18083: * tgetpass.c: added string.h/strings.h inclusion
18084:
18085: 1994-09-20 19:21 millert
18086:
18087: * config.h.in: added ssize_t def
18088:
18089: 1994-09-20 19:18 millert
18090:
18091: * parse.lex: added inclusion of string.h/strings.h
18092:
18093: 1994-09-20 18:48 millert
18094:
18095: * aclocal.m4: fixed uname | sed (needed to quote the '[')
18096:
18097: 1994-09-20 18:42 millert
18098:
18099: * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18100: errors
18101:
18102: 1994-09-20 18:13 millert
18103:
18104: * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18105: counted upon.
18106:
18107: 1994-09-20 18:10 millert
18108:
18109: * TODO: updated
18110:
18111: 1994-09-20 17:52 millert
18112:
18113: * parse.c: added code to support command listings
18114:
18115: 1994-09-20 17:36 millert
18116:
18117: * sudo.c: added code for -l flag
18118:
18119: 1994-09-20 17:35 millert
18120:
18121: * sudo.man: fixed typo added info for -l flag
18122:
18123: 1994-09-20 14:45 millert
18124:
18125: * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18126:
18127: 1994-09-20 14:45 millert
18128:
18129: * aclocal.m4: added SUDO_SSIZE_T
18130:
18131: 1994-09-20 14:44 millert
18132:
18133: * sudo.h: added MODE_LIST
18134:
18135: 1994-09-20 14:43 millert
18136:
18137: * configure.in: added AC_SSIZE_T
18138:
18139: 1994-09-19 20:53 millert
18140:
18141: * find_path.c, sudo_realpath.c: readlink() is now declared as
18142: returning ssize~_t
18143:
18144: 1994-09-19 20:44 millert
18145:
18146: * configure.in: added -laud for OSF c2
18147:
18148: 1994-09-02 15:55 millert
18149:
18150: * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18151: Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18152: sudo-bugs@cs.colorado.edu
18153:
18154: 1994-09-02 15:54 millert
18155:
18156: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18157: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18158: sudo_setenv.c, tgetpass.c, version.h: changed
18159: sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18160:
18161: 1994-09-01 15:56 millert
18162:
18163: * Makefile.in: ++version
18164:
18165: 1994-09-01 15:55 millert
18166:
18167: * version.h: ++
18168:
18169: 1994-09-01 15:55 millert
18170:
18171: * logging.c: added host to alertmail messages
18172:
18173: 1994-09-01 15:55 millert
18174:
18175: * CHANGES, TODO: udpated
18176:
18177: 1994-09-01 15:26 millert
18178:
18179: * logging.c: fixed logging problem where mail would not say which
18180: user it was
18181:
18182: 1994-09-01 13:45 millert
18183:
18184: * configure.in: added -laud for gcc if osf & c2
18185:
18186: 1994-09-01 13:39 millert
18187:
18188: * check.c: moved set_auth_parameters to sudo.c
18189:
18190: 1994-09-01 13:38 millert
18191:
18192: * sudo.c: added set_auth_parameters for osf
18193:
18194: 1994-09-01 13:22 millert
18195:
18196: * configure.in: cleaned up -static stuff
18197:
18198: 1994-09-01 13:15 millert
18199:
18200: * Makefile.in: ++version
18201:
18202: 1994-09-01 13:15 millert
18203:
18204: * version.h: ++
18205:
18206: 1994-09-01 13:15 millert
18207:
18208: * sudo.c: changed setenv() to sudo_setenv()
18209:
18210: 1994-09-01 13:12 millert
18211:
18212: * check.c: fixed osf problem
18213:
18214: 1994-08-31 22:17 millert
18215:
18216: * configure.in: added OSF C2 stuff
18217:
18218: 1994-08-31 22:00 millert
18219:
18220: * CHANGES: updated
18221:
18222: 1994-08-31 21:56 millert
18223:
18224: * check.c: added osf auth support & removed some extra spaces
18225:
18226: 1994-08-31 21:52 millert
18227:
18228: * INSTALL, SUPPORTED: added osf C2 stuff
18229:
18230: 1994-08-31 19:52 millert
18231:
18232: * TODO: added 2 suggestions
18233:
18234: 1994-08-31 19:33 millert
18235:
18236: * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18237:
18238: 1994-08-31 18:48 millert
18239:
18240: * version.h: pl1
18241:
18242: 1994-08-30 18:31 millert
18243:
18244: * version.h: 1.3.1final
18245:
18246: 1994-08-30 18:30 millert
18247:
18248: * Makefile.in: added HISTORY
18249:
18250: 1994-08-30 18:30 millert
18251:
18252: * sudo.man: mention HISTPRY file
18253:
18254: 1994-08-30 18:30 millert
18255:
18256: * sudo.c: use sizeof instead of a constant in 1 place
18257:
18258: 1994-08-30 18:30 millert
18259:
18260: * parse.yacc: added unistd.h
18261:
18262: 1994-08-30 18:29 millert
18263:
18264: * parse.lex: added unistd.h
18265:
18266: 1994-08-30 18:27 millert
18267:
18268: * README: udpated
18269:
18270: 1994-08-30 18:15 millert
18271:
18272: * HISTORY: Initial revision
18273:
18274: 1994-08-17 12:45 millert
18275:
18276: * version.h: ++
18277:
18278: 1994-08-17 12:39 millert
18279:
18280: * CHANGES: updated
18281:
18282: 1994-08-17 12:36 millert
18283:
18284: * sudo_setenv.c: added unistd.h include
18285:
18286: 1994-08-16 15:46 millert
18287:
18288: * sudo.c: added sys/time.h for AIX
18289:
18290: 1994-08-14 21:22 millert
18291:
18292: * configure.in: added check for -lsocket and sys/sockio.h
18293:
18294: 1994-08-14 21:21 millert
18295:
18296: * config.h.in: took out libshadow check and added in sys/sockio.h
18297: check
18298:
18299: 1994-08-14 21:21 millert
18300:
18301: * sudo.c: now include sockio.h instead of ioctl.h if it exists
18302: "sudo -" now gets a better error message
18303:
18304: 1994-08-14 20:47 millert
18305:
18306: * sample.sudoers: now has a dir and subnet entry
18307:
18308: 1994-08-13 18:15 millert
18309:
18310: * sudo.c: removed if_ether.h
18311:
18312: 1994-08-13 17:16 millert
18313:
18314: * TODO: added an item
18315:
18316: 1994-08-13 17:15 millert
18317:
18318: * sudo.man: added network and ip addresses to man page
18319:
18320: 1994-08-13 17:09 millert
18321:
18322: * sudo.c: no error if can't get interfaces or netmask since
18323: networking may not be in the kernel.
18324:
18325: 1994-08-13 17:08 millert
18326:
18327: * parse.c: nwo check for interfaces == NULL
18328:
18329: 1994-08-12 21:22 millert
18330:
18331: * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18332: to fail if the last entry in the spec failed (ie: it was only
18333: looking at the last entry). CLeaned things up by adding the
18334: cmndcmp() function--all neat & tidy
18335:
18336: 1994-08-12 21:21 millert
18337:
18338: * CHANGES: added one
18339:
18340: 1994-08-11 23:42 millert
18341:
18342: * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18343:
18344: 1994-08-11 21:58 millert
18345:
18346: * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18347: netinet/in.h
18348:
18349: 1994-08-11 21:58 millert
18350:
18351: * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18352: visudo.c: added include of netinet/in.h
18353:
18354: 1994-08-11 21:57 millert
18355:
18356: * version.h: ++
18357:
18358: 1994-08-11 21:57 millert
18359:
18360: * sudo.h: added interfaces global
18361:
18362: 1994-08-11 21:56 millert
18363:
18364: * parse.c: now uses new interfaces global
18365:
18366: 1994-08-11 21:56 millert
18367:
18368: * sudo.c: now ip addresses are gleaned fw/o dns
18369:
18370: 1994-08-10 19:21 millert
18371:
18372: * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18373:
18374: 1994-08-10 19:21 millert
18375:
18376: * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18377: network addrs
18378:
18379: 1994-08-10 19:20 millert
18380:
18381: * sudo.h: added ip_addrs def added load_ip_addrs prototype
18382:
18383: 1994-08-08 16:03 millert
18384:
18385: * CHANGES: updated
18386:
18387: 1994-08-08 15:57 millert
18388:
18389: * Makefile.in: removed multiple entries in DISTFILES
18390:
18391: 1994-08-08 13:05 millert
18392:
18393: * visudo.c: ansified the !STDC_HEADERS decls
18394:
18395: 1994-08-08 13:05 millert
18396:
18397: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18398: malloc decl if gnuc
18399:
18400: 1994-08-08 13:04 millert
18401:
18402: * sudo.c: can't use getopt(3) since it munges args to the command
18403: to be run as root don't do malloc decl if gnuc
18404:
18405: 1994-08-08 00:41 millert
18406:
18407: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18408: sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18409: prottypes
18410:
18411: 1994-08-08 00:27 millert
18412:
18413: * getcwd.c, getwd.c: added missing paren
18414:
18415: 1994-08-08 00:23 millert
18416:
18417: * Makefile.in: added putenv.c to DISTFILES
18418:
18419: 1994-08-08 00:08 millert
18420:
18421: * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18422: not defined now can count on putenv() being there
18423:
18424: 1994-08-08 00:08 millert
18425:
18426: * sudo_realpath.c: took out errno decl since sudo.h does it for us
18427: fixed up a next cc warning added params to func decls when
18428: STDC_HEADERS is not defined
18429:
18430: 1994-08-08 00:07 millert
18431:
18432: * sudo.h: took out environ extern added local declaratio of
18433: putenv() if local version is needed
18434:
18435: 1994-08-08 00:05 millert
18436:
18437: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18438: func decls when STDC_HEADERS is not defined
18439:
18440: 1994-08-08 00:04 millert
18441:
18442: * config.h.in: added memcpy check check to see that ansi vs bsd
18443: macros are ntot already defiend before defining (ie: avoid
18444: redefinition)
18445:
18446: 1994-08-08 00:03 millert
18447:
18448: * configure.in: removed fluff setenv check plus check w/ replace
18449: for putenv if also no setenv
18450:
18451: 1994-08-08 00:01 millert
18452:
18453: * putenv.c: Initial revision
18454:
18455: 1994-08-06 19:19 millert
18456:
18457: * sudo_setenv.c: Initial revision
18458:
18459: 1994-08-06 19:19 millert
18460:
18461: * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18462:
18463: 1994-08-06 19:19 millert
18464:
18465: * sudo.c: now use sudo_setenvc
18466:
18467: 1994-08-06 19:18 millert
18468:
18469: * configure.in: added puteenv and setenv, removed realpath
18470:
18471: 1994-08-06 19:18 millert
18472:
18473: * config.h.in: added putenv & setenv
18474:
18475: 1994-08-06 19:18 millert
18476:
18477: * Makefile.in: added sudo_setenv
18478:
18479: 1994-08-06 19:16 millert
18480:
18481: * version.h: ++
18482:
18483: 1994-08-05 19:43 millert
18484:
18485: * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18486: irix
18487:
18488: 1994-08-05 19:43 millert
18489:
18490: * Makefile.in: added MAN_POSTINSTALL
18491:
18492: 1994-08-05 19:43 millert
18493:
18494: * CHANGES: added
18495:
18496: 1994-08-05 19:10 millert
18497:
18498: * sudo.man: added SUDO_* plus new options
18499:
18500: 1994-08-05 19:10 millert
18501:
18502: * CHANGES: added one
18503:
18504: 1994-08-05 19:07 millert
18505:
18506: * configure.in: took out shadow lib
18507:
18508: 1994-08-05 18:35 millert
18509:
18510: * TODO: adde done
18511:
18512: 1994-08-05 17:52 millert
18513:
18514: * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18515:
18516: 1994-08-05 17:49 millert
18517:
18518: * Makefile.in: support for installing a cat page instead of a man
18519: page if no nroff
18520:
18521: 1994-08-05 17:48 millert
18522:
18523: * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18524: looks for nroff to determine whether or not to install a cat or
18525: man page
18526:
18527: 1994-08-05 17:48 millert
18528:
18529: * config.h.in: added HAVE_FLEX
18530:
18531: 1994-08-05 16:14 millert
18532:
18533: * sudo.c: not set ret to MODE_RUN initially
18534:
18535: 1994-08-05 16:12 millert
18536:
18537: * find_path.c: made command (and therefor cmnd dynamically
18538: allocated)
18539:
18540: 1994-08-04 20:25 millert
18541:
18542: * TODO: did #8
18543:
18544: 1994-08-04 20:24 millert
18545:
18546: * version.h: ++
18547:
18548: 1994-08-04 20:24 millert
18549:
18550: * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18551:
18552: 1994-08-04 20:24 millert
18553:
18554: * sudo.h: added MODE_ removed validate_only and added
18555: remove_timestamp()
18556:
18557: 1994-08-04 20:22 millert
18558:
18559: * sudo.c: usage() now takes an int (exit value) added parse_args()
18560: to parse command line arguments moved call to find_path() from
18561: load_globals to new function load_cmnd() removed validate_only
18562: global -- now use the concept of "modes" added -h and -k options
18563:
18564: 1994-08-04 20:21 millert
18565:
18566: * parse.c: no longer use global validate_only now checks for
18567: command called "validate" removed check for non-fully qualified
18568: commands since that is done by find_path
18569:
18570: 1994-08-04 20:20 millert
18571:
18572: * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18573:
18574: 1994-08-04 20:17 millert
18575:
18576: * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18577: comment
18578:
18579: 1994-08-04 20:17 millert
18580:
18581: * check.c: check_timestamp no longer runs reminder(), it is implied
18582: in the return val added remove_timestamp()
18583:
18584: 1994-08-04 20:16 millert
18585:
18586: * CHANGES: updated
18587:
18588: 1994-08-04 16:38 millert
18589:
18590: * BUGS: fixed on
18591:
18592: 1994-08-04 16:38 millert
18593:
18594: * sudo_realpath.c: took out old_errno
18595:
18596: 1994-08-04 16:37 millert
18597:
18598: * CHANGES: updated
18599:
18600: 1994-08-03 12:08 millert
18601:
18602: * logging.c: moved send_mail to after syslog
18603:
18604: 1994-08-02 22:41 millert
18605:
18606: * sudo.c: now set SUDO_ envariables
18607:
18608: 1994-08-01 13:40 millert
18609:
18610: * version.h: ++
18611:
18612: 1994-08-01 13:39 millert
18613:
18614: * sudo_realpath.c: now print error if chdir fails
18615:
18616: 1994-08-01 13:39 millert
18617:
18618: * find_path.c: removed an XXX
18619:
18620: 1994-07-25 20:40 millert
18621:
18622: * CHANGES: updated
18623:
18624: 1994-07-25 20:36 millert
18625:
18626: * configure.in: no more static binaries for aix
18627:
18628: 1994-07-25 18:37 millert
18629:
18630: * INSTALL: fixed typo
18631:
18632: 1994-07-25 18:33 millert
18633:
18634: * sudo_realpath.c: took out stuff not needed for sudo now does
18635: be_root/be_user itself now uses cwd global
18636:
18637: 1994-07-25 18:32 millert
18638:
18639: * version.h: +=2
18640:
18641: 1994-07-25 18:31 millert
18642:
18643: * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18644:
18645: 1994-07-25 18:26 millert
18646:
18647: * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18648:
18649: 1994-07-25 18:25 millert
18650:
18651: * find_path.c: now use sudo_realpath()
18652:
18653: 1994-07-25 18:25 millert
18654:
18655: * config.h.in: took out realpth() stuff since we now use
18656: sudo_realpath()
18657:
18658: 1994-07-25 18:25 millert
18659:
18660: * configure.in: ultrix enhanced sec
18661:
18662: 1994-07-25 18:25 millert
18663:
18664: * SUPPORTED: added ultrix enhanced sec.
18665:
18666: 1994-07-25 18:24 millert
18667:
18668: * INSTALL: updated
18669:
18670: 1994-07-25 18:21 millert
18671:
18672: * check.c: ultrix enhanced security suport
18673:
18674: 1994-07-25 18:20 millert
18675:
18676: * Makefile.in: added sudo_realpath.c
18677:
18678: 1994-07-25 18:18 millert
18679:
18680: * CHANGES: updated
18681:
18682: 1994-07-25 14:28 millert
18683:
18684: * tgetpass.c: increased passwd len to 24 for c2 security
18685:
18686: 1994-07-25 13:17 millert
18687:
18688: * BUGS: updated BUGS
18689:
18690: 1994-07-15 11:49 millert
18691:
18692: * check.c: now use user global var
18693:
18694: 1994-07-15 11:48 millert
18695:
18696: * configure.in: took out -ls
18697:
18698: 1994-07-14 19:11 millert
18699:
18700: * configure.in: added AFS libs
18701:
18702: 1994-07-14 17:45 millert
18703:
18704: * sudo.h: user is now a char * added epasswd
18705:
18706: 1994-07-14 17:43 millert
18707:
18708: * sudo.c: added tzset() to load_globals added epasswd (encrypted
18709: password) global made user dynamically allocated
18710:
18711: 1994-07-14 17:43 millert
18712:
18713: * configure.in: added tzset test
18714:
18715: 1994-07-14 17:43 millert
18716:
18717: * config.h.in: added HAVE_TZSET
18718:
18719: 1994-07-14 17:42 millert
18720:
18721: * check.c: cleaned up encrypted passwd grab somewhat
18722:
18723: 1994-07-14 12:34 millert
18724:
18725: * configure.in: fixed AFS typo
18726:
18727: 1994-07-14 12:34 millert
18728:
18729: * INSTALL: added AFS not
18730:
18731: 1994-07-14 12:34 millert
18732:
18733: * CHANGES: udpated
18734:
18735: 1994-07-14 12:33 millert
18736:
18737: * logging.c: can now log to both syslog & a file
18738:
18739: 1994-07-14 12:12 millert
18740:
18741: * sudo.h: added BOTH_LOGS
18742:
18743: 1994-07-14 11:34 millert
18744:
18745: * CHANGES: updated
18746:
18747: 1994-07-14 11:32 millert
18748:
18749: * configure.in: --with-AFS
18750:
18751: 1994-07-14 11:32 millert
18752:
18753: * config.h.in: added HAVE_AFS
18754:
18755: 1994-07-14 11:31 millert
18756:
18757: * check.c: added afs changes
18758:
18759: 1994-07-14 11:21 millert
18760:
18761: * sudo.h: removed AFS stuff :-)
18762:
18763: 1994-07-14 11:19 millert
18764:
18765: * tgetpass.c: include sys/select for AIX
18766:
18767: 1994-07-14 11:17 millert
18768:
18769: * sudo.h: added AFS
18770:
18771: 1994-07-14 11:16 millert
18772:
18773: * version.h: ++
18774:
18775: 1994-07-07 14:45 millert
18776:
18777: * SUPPORTED, CHANGES: updated
18778:
18779: 1994-07-07 14:44 millert
18780:
18781: * logging.c: can now have MAILER undefined
18782:
18783: 1994-07-07 14:37 millert
18784:
18785: * INSTALL: new sub-note about MAILER
18786:
18787: 1994-07-06 23:11 millert
18788:
18789: * sudo.man: added blurb about password timeout
18790:
18791: 1994-07-06 20:52 millert
18792:
18793: * configure.in: convex c2 changes
18794:
18795: 1994-07-06 20:52 millert
18796:
18797: * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18798:
18799: 1994-07-06 20:51 millert
18800:
18801: * Makefile.in: added OSDEFS
18802:
18803: 1994-07-06 20:46 millert
18804:
18805: * config.h.in: added spaces
18806:
18807: 1994-07-06 20:08 millert
18808:
18809: * tgetpass.c: added a goto if fgets fails
18810:
18811: 1994-07-06 20:08 millert
18812:
18813: * sudo.h: use __hpux not hpux convex c2 stuff
18814:
18815: 1994-07-06 20:08 millert
18816:
18817: * sudo.c: use __hpux not hpux
18818:
18819: 1994-07-06 20:08 millert
18820:
18821: * logging.c: convex c2 stuff
18822:
18823: 1994-07-06 20:07 millert
18824:
18825: * config.h.in: define ansi-ish cpp os defines if non-ansi are
18826: defined for hpux & convex
18827:
18828: 1994-07-06 20:07 millert
18829:
18830: * INSTALL: updated to say we support sonvex C2
18831:
18832: 1994-07-06 20:05 millert
18833:
18834: * check.c: added convex c2 support
18835:
18836: 1994-07-01 12:06 millert
18837:
18838: * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18839: select() to timeout
18840:
18841: 1994-06-29 17:04 millert
18842:
18843: * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18844:
18845: 1994-06-29 16:39 millert
18846:
18847: * tgetpass.c: now works + uses fgets()
18848:
18849: 1994-06-28 18:25 millert
18850:
18851: * tgetpass.c: select doesn't seem to recognize a single '\n' as
18852: input waiting so we can;t use it, sigh.
18853:
18854: 1994-06-26 16:38 millert
18855:
18856: * PORTING: updated tgetpass() blurb
18857:
18858: 1994-06-26 16:35 millert
18859:
18860: * configure.in: added --with-getpass
18861:
18862: 1994-06-26 16:35 millert
18863:
18864: * Makefile.in: added tgetpass stuff
18865:
18866: 1994-06-26 15:25 millert
18867:
18868: * tgetpass.c: now uses stdio
18869:
18870: 1994-06-26 15:17 millert
18871:
18872: * version.h: ++
18873:
18874: 1994-06-24 19:48 millert
18875:
18876: * PORTING: updated ,.
18877:
18878: 1994-06-24 19:46 millert
18879:
18880: * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18881:
18882: 1994-06-24 19:45 millert
18883:
18884: * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18885:
18886: 1994-06-24 19:45 millert
18887:
18888: * check.c: added hpux C2 shit
18889:
18890: 1994-06-24 19:45 millert
18891:
18892: * Makefile.in: took out tgetpass.*
18893:
18894: 1994-06-24 19:45 millert
18895:
18896: * INSTALL: added C2 blurb
18897:
18898: 1994-06-13 15:54 millert
18899:
18900: * configure.in: no termio(s) for ultrix since it is broken
18901:
18902: 1994-06-13 15:41 millert
18903:
18904: * check.c: added a space (yeah, anal)
18905:
18906: 1994-06-13 15:17 millert
18907:
18908: * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18909:
18910: 1994-06-08 14:34 millert
18911:
18912: * config.h.in: took out bsd signal stuff for irix
18913:
18914: 1994-06-08 14:26 millert
18915:
18916: * visudo.c: comments in #endif
18917:
18918: 1994-06-08 14:09 millert
18919:
18920: * configure.in: don't define BSD signals for irix
18921:
18922: 1994-06-08 12:57 millert
18923:
18924: * TODO: did some...
18925:
18926: 1994-06-08 12:57 millert
18927:
18928: * CHANGES: updated
18929:
18930: 1994-06-08 12:56 millert
18931:
18932: * realpath.c, sudo_realpath.c: took out unneeded code by changing
18933: where a strings was terminated
18934:
18935: 1994-06-07 19:21 millert
18936:
18937: * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18938: NULL
18939:
18940: 1994-06-07 17:40 millert
18941:
18942: * sudo.h: move __P to config.h
18943:
18944: 1994-06-07 17:40 millert
18945:
18946: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
18947: definition
18948:
18949: 1994-06-07 17:40 millert
18950:
18951: * config.h.in: added __P
18952:
18953: 1994-06-07 17:21 millert
18954:
18955: * config.h.in: added HAVE_FCHDIR
18956:
18957: 1994-06-07 17:18 millert
18958:
18959: * strdup.c: now include stdio
18960:
18961: 1994-06-07 14:55 millert
18962:
18963: * realpath.c, sudo_realpath.c: now works if no fchdir
18964:
18965: 1994-06-07 14:55 millert
18966:
18967: * visudo.c: define SA_RESETHAND to null if not defined
18968:
18969: 1994-06-07 14:54 millert
18970:
18971: * configure.in: added check & replace
18972:
18973: 1994-06-06 20:05 millert
18974:
18975: * configure.in: took out -static for nextstep -- it doesn't work
18976:
18977: 1994-06-06 19:59 millert
18978:
18979: * logging.c: moved #endif to where it belongs
18980:
18981: 1994-06-06 19:54 millert
18982:
18983: * SUPPORTED: correction
18984:
18985: 1994-06-06 19:42 millert
18986:
18987: * configure.in: now checks for strdup realpath getcwd bzero
18988:
18989: 1994-06-06 19:31 millert
18990:
18991: * config.h.in: emulate bzero
18992:
18993: 1994-06-06 16:57 millert
18994:
18995: * visudo.c: added posic signals
18996:
18997: 1994-06-06 16:57 millert
18998:
18999: * tgetpass.c: bzero cast
19000:
19001: 1994-06-06 16:57 millert
19002:
19003: * logging.c: added posix signals
19004:
19005: 1994-06-06 16:56 millert
19006:
19007: * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19008: missing functions
19009:
19010: 1994-06-06 16:56 millert
19011:
19012: * config.h.in: added posix signal stuff
19013:
19014: 1994-06-06 16:56 millert
19015:
19016: * Makefile.in: added new srcs
19017:
19018: 1994-06-06 12:53 millert
19019:
19020: * visudo.c: updated useag
19021:
19022: 1994-06-06 12:39 millert
19023:
19024: * tgetpass.c: now uses posix signals
19025:
19026: 1994-06-05 20:17 millert
19027:
19028: * PORTING: updated sto reflect major changes
19029:
19030: 1994-06-05 20:05 millert
19031:
19032: * TODO, CHANGES: updated
19033:
19034: 1994-06-05 20:04 millert
19035:
19036: * tgetpass.c: uses sysconf() if available
19037:
19038: 1994-06-05 20:04 millert
19039:
19040: * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19041:
19042: 1994-06-05 20:04 millert
19043:
19044: * realpath.c, sudo_realpath.c: for those w/o this in libc
19045:
19046: 1994-06-05 20:03 millert
19047:
19048: * getcwd.c, getwd.c: Initial revision
19049:
19050: 1994-06-05 20:03 millert
19051:
19052: * find_path.c: rewrote to use realpath(3) - nis now all my code
19053:
19054: 1994-06-05 20:02 millert
19055:
19056: * config.h.in: added HAVE_REALPATH
19057:
19058: 1994-06-05 20:02 millert
19059:
19060: * check.c: now use tgetpass
19061:
19062: 1994-06-05 20:02 millert
19063:
19064: * Makefile.in: added LIBOBJS use tgetpass.c
19065:
19066: 1994-06-05 18:55 millert
19067:
19068: * tgetpass.c: works now :-)
19069:
19070: 1994-06-05 18:27 millert
19071:
19072: * tgetpass.c: Initial revision
19073:
19074: 1994-06-05 17:17 millert
19075:
19076: * pathnames.h.in: added /dev/tty
19077:
19078: 1994-06-04 17:12 millert
19079:
19080: * version.h: incremented
19081:
19082: 1994-06-04 15:29 millert
19083:
19084: * sudo.c: always use getcwd
19085:
19086: 1994-06-04 14:49 millert
19087:
19088: * config.h.in: added check for getwd
19089:
19090: 1994-06-04 14:48 millert
19091:
19092: * configure.in: replace strdup & realpath & getcwd if missing
19093:
19094: 1994-06-04 14:47 millert
19095:
19096: * pathnames.h.in: added _PATH_PWD
19097:
19098: 1994-06-04 14:46 millert
19099:
19100: * aclocal.m4: added SUDO_PROG_PWD
19101:
19102: 1994-06-04 14:37 millert
19103:
19104: * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19105:
19106: 1994-06-03 11:31 millert
19107:
19108: * configure.in: quoted quare brackets
19109:
19110: 1994-06-02 17:49 millert
19111:
19112: * sudo.c: no need to strdup() a constant
19113:
19114: 1994-06-02 15:45 millert
19115:
19116: * CHANGES: updated
19117:
19118: 1994-06-02 15:44 millert
19119:
19120: * sudo.man: added validate
19121:
19122: 1994-06-02 15:42 millert
19123:
19124: * sudo.c: added -v to usage
19125:
19126: 1994-06-02 15:41 millert
19127:
19128: * parse.c, sudo.c, sudo.h: added validate_only stuff
19129:
19130: 1994-05-29 21:29 millert
19131:
19132: * configure.in: now finds sed
19133:
19134: 1994-05-29 21:28 millert
19135:
19136: * aclocal.m4: $OSREV is now an int
19137:
19138: 1994-05-29 19:13 millert
19139:
19140: * configure.in: added mtxinu to caser
19141:
19142: 1994-05-29 18:37 millert
19143:
19144: * sudo.h: added EXEC macro
19145:
19146: 1994-05-29 18:36 millert
19147:
19148: * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19149: FQDN is set
19150:
19151: 1994-05-29 18:36 millert
19152:
19153: * logging.c: changed mail_argv[] def now use EXEC() macro
19154:
19155: 1994-05-29 18:35 millert
19156:
19157: * check.c: took out crypt() definition
19158:
19159: 1994-05-29 17:23 millert
19160:
19161: * version.h: upped the version
19162:
19163: 1994-05-29 15:52 millert
19164:
19165: * configure.in: always look for -lnsl
19166:
19167: 1994-05-29 15:29 millert
19168:
19169: * aclocal.m4: added an echo
19170:
19171: 1994-05-29 15:25 millert
19172:
19173: * sudo.h: SHORT_MESSAGE is now the default
19174:
19175: 1994-05-29 15:18 millert
19176:
19177: * config.h.in: fixed typo
19178:
19179: 1994-05-29 01:29 millert
19180:
19181: * configure.in: added missing AC_DEFINE(SVR4) for solaris
19182:
19183: 1994-05-28 20:42 millert
19184:
19185: * sudo.man: documented the -v flag
19186:
19187: 1994-05-28 20:34 millert
19188:
19189: * SUPPORTED: updated
19190:
19191: 1994-05-28 20:31 millert
19192:
19193: * check.c: proto-ized crypt()
19194:
19195: 1994-05-28 20:28 millert
19196:
19197: * config.h.in: added LIBSHADOW undef
19198:
19199: 1994-05-28 20:18 millert
19200:
19201: * configure.in: nwo set OS to be lowercase
19202:
19203: 1994-05-28 19:36 millert
19204:
19205: * configure.in: now use SUDO_OSTYPE to set $OS
19206:
19207: 1994-05-28 19:36 millert
19208:
19209: * aclocal.m4: now use uname to determine os
19210:
19211: 1994-05-28 16:23 millert
19212:
19213: * visudo.c: added prototypes & moved sig handler around
19214:
19215: 1994-05-28 15:13 millert
19216:
19217: * sudo.h: added prototyppes
19218:
19219: 1994-05-28 15:13 millert
19220:
19221: * parse.c: added comment
19222:
19223: 1994-05-28 15:12 millert
19224:
19225: * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19226:
19227: 1994-05-28 15:11 millert
19228:
19229: * check.c, logging.c, sudo.c: added prototypes
19230:
19231: 1994-05-28 15:11 millert
19232:
19233: * aixcrypt.exp: Initial revision
19234:
19235: 1994-05-28 15:11 millert
19236:
19237: * Makefile.in: added aixcrypt.exp
19238:
19239: 1994-05-28 13:21 millert
19240:
19241: * parse.lex, parse.yacc: moved config.h to top of includes
19242:
19243: 1994-05-25 15:48 millert
19244:
19245: * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19246:
19247: 1994-05-24 23:08 millert
19248:
19249: * visudo.c: added -v flag and usage()
19250:
19251: 1994-05-24 23:08 millert
19252:
19253: * version.h: fixed a typo
19254:
19255: 1994-05-24 23:08 millert
19256:
19257: * sudo.c: cast Argv to a const for exec added -v flag
19258:
19259: 1994-05-24 23:07 millert
19260:
19261: * logging.c: mail_argv is now a const
19262:
19263: 1994-05-24 23:07 millert
19264:
19265: * configure.in: only set RETSIGTYPE if it is not set already
19266:
19267: 1994-05-24 23:07 millert
19268:
19269: * aclocal.m4: now defines & STDC_HEADERS for Irix
19270:
19271: 1994-05-24 23:07 millert
19272:
19273: * Makefile.in: added version.h
19274:
19275: 1994-05-24 21:25 millert
19276:
19277: * insults.h, sudo.h: prevent multiple inclusion
19278:
19279: 1994-05-24 21:20 millert
19280:
19281: * version.h: Initial revision
19282:
19283: 1994-05-24 21:09 millert
19284:
19285: * parse.lex, parse.yacc: now includes config.h
19286:
19287: 1994-05-24 20:54 millert
19288:
19289: * aclocal.m4: now talks about sunos 4.x
19290:
19291: 1994-05-24 20:23 millert
19292:
19293: * visudo.c: calls to Exit now pass an arg
19294:
19295: 1994-05-24 18:00 millert
19296:
19297: * visudo.c: signal handler now takes an int argument
19298:
19299: 1994-05-24 18:00 millert
19300:
19301: * CHANGES: updated
19302:
19303: 1994-05-24 17:44 millert
19304:
19305: * sudo.c: ok, the getcwd() is now *really* done as the user
19306:
19307: 1994-05-24 17:44 millert
19308:
19309: * configure.in: changed AIX STATIC_FLAGS
19310:
19311: 1994-05-24 16:27 millert
19312:
19313: * aclocal.m4: solaris now defines SVR4
19314:
19315: 1994-05-24 16:18 millert
19316:
19317: * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19318: sigh.
19319:
19320: 1994-05-24 16:18 millert
19321:
19322: * sudo.c: moved getcwd stuff into load_globals
19323:
19324: 1994-05-24 16:18 millert
19325:
19326: * parse.c: took out externs that are in suod.h
19327:
19328: 1994-05-24 16:18 millert
19329:
19330: * logging.c: moved cwd into load_globals
19331:
19332: 1994-05-24 16:17 millert
19333:
19334: * find_path.c: moved cwd stuff
19335:
19336: 1994-05-24 15:55 millert
19337:
19338: * Makefile.in: fixed make distclean & realclean
19339:
19340: 1994-05-24 12:51 millert
19341:
19342: * TODO: updated .,
19343:
19344: 1994-05-24 12:51 millert
19345:
19346: * CHANGES: added solaris changes
19347:
19348: 1994-05-24 12:51 millert
19349:
19350: * aclocal.m4: added solaris changes, need to rework
19351:
19352: 1994-05-24 12:50 millert
19353:
19354: * configure.in: cleaned up for solaris
19355:
19356: 1994-05-24 12:13 millert
19357:
19358: * logging.c: reinstall reapchild signal handler for non-bsd signals
19359:
19360: 1994-05-24 12:03 millert
19361:
19362: * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19363: needed)
19364:
19365: 1994-05-24 12:03 millert
19366:
19367: * sudo.c: support for HAVE_SYSCONF
19368:
19369: 1994-05-24 12:02 millert
19370:
19371: * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19372: minor prettying up /
19373:
19374: 1994-05-23 20:26 millert
19375:
19376: * config.h.in: added HAVE_SYSCONF
19377:
19378: 1994-05-16 18:57 millert
19379:
19380: * configure.in: now tells you what os you are running /.
19381:
19382: 1994-05-16 18:56 millert
19383:
19384: * aclocal.m4: took out extra ','
19385:
19386: 1994-05-14 17:56 millert
19387:
19388: * config.h.in: added _BSD_COMPAT
19389:
19390: 1994-05-14 17:56 millert
19391:
19392: * aclocal.m4: fixed for irix5
19393:
19394: 1994-05-14 17:55 millert
19395:
19396: * CHANGES: updated
19397:
19398: 1994-05-14 17:27 millert
19399:
19400: * sudo.c: uid seinitialized to -2
19401:
19402: 1994-04-28 12:36 millert
19403:
19404: * sudo.c: now removes LIBPATH for AIX
19405:
19406: 1994-03-12 20:41 millert
19407:
19408: * configure.in: now uses ufc if it finds it
19409:
19410: 1994-03-12 17:42 millert
19411:
19412: * sudo.h: no longer define yyval & yylval since yacc does it
19413:
19414: 1994-03-12 17:42 millert
19415:
19416: * parse.lex: now defines yylval as extenr
19417:
19418: 1994-03-12 17:41 millert
19419:
19420: * configure.in: BROKEN_GETPASS is now an OPTION
19421:
19422: 1994-03-12 17:41 millert
19423:
19424: * config.h.in: took out BROKEN_GETPASS
19425:
19426: 1994-03-12 17:20 millert
19427:
19428: * Makefile.in: took out big comment
19429:
19430: 1994-03-12 16:24 millert
19431:
19432: * README: updated
19433:
19434: 1994-03-12 16:20 millert
19435:
19436: * Makefile.in: took out README.beta
19437:
19438: 1994-03-12 16:19 millert
19439:
19440: * SUPPORTED: Initial revision
19441:
19442: 1994-03-12 16:19 millert
19443:
19444: * INSTALL: now reference SUPPORTED .,
19445:
19446: 1994-03-12 16:17 millert
19447:
19448: * config.h.in: now check for convex OR __convex__
19449:
19450: 1994-03-12 16:16 millert
19451:
19452: * aclocal.m4: now check for convex or __convex__
19453:
19454: 1994-03-12 16:15 millert
19455:
19456: * Makefile.in: added dist target
19457:
19458: 1994-03-12 15:19 millert
19459:
19460: * aclocal.m4: use __convex__
19461:
19462: 1994-03-12 14:33 millert
19463:
19464: * find_path.c: now use _S_* stat stuff to be ansi-like
19465:
19466: 1994-03-12 14:11 millert
19467:
19468: * INSTALL: updated for configure directions
19469:
19470: 1994-03-12 14:05 millert
19471:
19472: * Makefile.in: distclean now removes config.h and pathnames.h
19473:
19474: 1994-03-12 14:03 millert
19475:
19476: * CHANGES: updated
19477:
19478: 1994-03-12 14:00 millert
19479:
19480: * TODO: fixed typoe
19481:
19482: 1994-03-12 13:57 millert
19483:
19484: * Makefile.in, visudo.c: updated version
19485:
19486: 1994-03-12 13:57 millert
19487:
19488: * config.h.in, pathnames.h.in: added copyright header
19489:
19490: 1994-03-12 13:55 millert
19491:
19492: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19493: parse.yacc, sudo.c, sudo.h: udpated version
19494:
19495: 1994-03-12 13:39 millert
19496:
19497: * visudo.c: udpated to use configure + pathnames.h
19498:
19499: 1994-03-12 13:37 millert
19500:
19501: * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19502:
19503: 1994-03-12 13:37 millert
19504:
19505: * sudo.h: now works with configure
19506:
19507: 1994-03-12 13:36 millert
19508:
19509: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19510: updated to work with configure + pathnames.h
19511:
19512: 1994-03-12 10:40 millert
19513:
19514: * Makefile.in: added LEXLIB
19515:
19516: 1994-03-10 03:18 millert
19517:
19518: * COPYING: updated gnu general licence to versio 2
19519:
19520: 1994-03-10 02:44 millert
19521:
19522: * pathnames.h.in, config.h.in: Initial revision
19523:
19524: 1994-03-10 01:43 millert
19525:
19526: * sudo.h: changed to work with configure
19527:
19528: 1994-03-09 18:51 millert
19529:
19530: * Makefile.in, aclocal.m4, configure.in: Initial revision
19531:
19532: 1994-03-09 17:36 millert
19533:
19534: * visudo.c: now uses defines used by configure
19535:
19536: 1994-03-01 16:31 millert
19537:
19538: * find_path.c: sudo won't bitch about EPERM now, for real
19539:
19540: 1994-02-28 00:36 millert
19541:
19542: * logging.c: renamed exec_argv to eliminate a libc name clash with
19543: ksros
19544:
19545: 1994-02-28 00:28 millert
19546:
19547: * CHANGES: corrected
19548:
19549: 1994-02-28 00:27 millert
19550:
19551: * logging.c, sudo.c, sudo.h: execve -> execv
19552:
19553: 1994-02-27 23:27 millert
19554:
19555: * TODO: upated
19556:
19557: 1994-02-27 23:19 millert
19558:
19559: * PORTING: added 2 mroe items
19560:
19561: 1994-02-27 23:12 millert
19562:
19563: * CHANGES: updated
19564:
19565: 1994-02-27 23:11 millert
19566:
19567: * sudo.h: added UMASK and mode_t declaration
19568:
19569: 1994-02-27 23:11 millert
19570:
19571: * sudo.c: added UMASK
19572:
19573: 1994-02-27 20:55 millert
19574:
19575: * logging.c: now opens log file with mode 077
19576:
19577: 1994-02-27 20:55 millert
19578:
19579: * check.c: saved current umask ans restores it
19580:
19581: 1994-02-27 20:36 millert
19582:
19583: * sudo.h: added MAXLOGFILELEN
19584:
19585: 1994-02-27 20:35 millert
19586:
19587: * logging.c: split long log lines. FOr syslog, split into multiple
19588: entries, for a log file, indent the extra for readability
19589:
19590: 1994-02-27 17:22 millert
19591:
19592: * CHANGES: added changes
19593:
19594: 1994-02-27 17:18 millert
19595:
19596: * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19597: should be)
19598:
19599: 1994-02-25 16:04 millert
19600:
19601: * TODO: added input from Brett M Hogden <hogden@rge.com>
19602:
19603: 1994-02-16 13:35 millert
19604:
19605: * sudo.c: added rmenv() to remove stuff from environ. can now uses
19606: execvp() OR execve() becuase of this.
19607:
19608: 1994-02-16 13:35 millert
19609:
19610: * logging.c: now uses execvp() OR execve()
19611:
19612: 1994-02-16 13:31 millert
19613:
19614: * sudo.h: added USE_EXECVE
19615:
19616: 1994-02-16 13:27 millert
19617:
19618: * sudo.h: added environ
19619:
19620: 1994-02-16 12:53 millert
19621:
19622: * find_path.c: now ignore EPERM
19623:
19624: 1994-02-15 23:52 millert
19625:
19626: * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19627: statics /.
19628:
19629: 1994-02-15 23:52 millert
19630:
19631: * CHANGES: updated
19632:
19633: 1994-02-15 23:40 millert
19634:
19635: * sudo.h: took out Envp
19636:
19637: 1994-02-14 12:28 millert
19638:
19639: * BUGS: Initial revision
19640:
19641: 1994-02-10 14:29 millert
19642:
19643: * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19644:
19645: 1994-02-10 14:05 millert
19646:
19647: * sudo.h: added SECURE_PATH
19648:
19649: 1994-02-10 13:50 millert
19650:
19651: * INSTALL: added sample.sudoers note
19652:
19653: 1994-02-10 13:47 millert
19654:
19655: * sudoers: Initial revision
19656:
19657: 1994-02-09 14:54 millert
19658:
19659: * find_path.c: fixed typo
19660:
19661: 1994-02-08 23:06 millert
19662:
19663: * PORTING: took out SAVED_UID garbage
19664:
19665: 1994-02-08 22:55 millert
19666:
19667: * INSTALL: mentioned HAL
19668:
19669: 1994-02-08 22:50 millert
19670:
19671: * sudo.h: added HAL line
19672:
19673: 1994-02-08 22:48 millert
19674:
19675: * insults.h: added HAL insults
19676:
19677: 1994-02-08 22:48 millert
19678:
19679: * TODO: updated
19680:
19681: 1994-02-08 22:02 millert
19682:
19683: * logging.c: more verbose error if mailer not found
19684:
19685: 1994-02-08 22:02 millert
19686:
19687: * check.c: now do getpwent as root for soem shadow password systems
19688: (bsdi)
19689:
19690: 1994-02-08 13:22 millert
19691:
19692: * sudo.h: took out SAVED_UID garbade
19693:
19694: 1994-02-08 13:21 millert
19695:
19696: * sudo.c: took out SAVED_UID garbage since it don't work
19697:
19698: 1994-02-06 17:43 millert
19699:
19700: * README: updated
19701:
19702: 1994-02-06 17:40 millert
19703:
19704: * insults.h: added a missing space :-)
19705:
19706: 1994-02-05 19:48 millert
19707:
19708: * sudo.c, sudo.h: took out multimax cruft
19709:
19710: 1994-02-05 19:30 millert
19711:
19712: * INSTALL: minor update
19713:
19714: 1994-02-05 19:30 millert
19715:
19716: * PORTING: finished
19717:
19718: 1994-02-05 19:19 millert
19719:
19720: * sudo.c: fixed a typo + indentation
19721:
19722: 1994-02-05 18:43 millert
19723:
19724: * sudo.h: took outumoved some defines to the config file ,. ,.
19725:
19726: 1994-02-05 15:17 millert
19727:
19728: * PORTING: Initial revision
19729:
19730: 1994-02-05 15:17 millert
19731:
19732: * TODO: did #6
19733:
19734: 1994-02-05 15:16 millert
19735:
19736: * sudo.h: added HAS_SAVED_UID
19737:
19738: 1994-02-05 15:16 millert
19739:
19740: * sudo.c: put back AIX cruft
19741:
19742: 1994-02-03 00:44 millert
19743:
19744: * sudo.c: aix changes
19745:
19746: 1994-02-02 01:31 millert
19747:
19748: * CHANGES: updated
19749:
19750: 1994-02-02 01:30 millert
19751:
19752: * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19753: when abs necesary
19754:
19755: 1994-02-01 22:21 millert
19756:
19757: * check.c: added missing %s\n
19758:
19759: 1994-01-31 02:06 millert
19760:
19761: * install-sh: Initial revision
19762:
19763: 1994-01-31 01:58 millert
19764:
19765: * CHANGES, TODO: updated
19766:
19767: 1994-01-31 01:56 millert
19768:
19769: * sudo.c: now removed _RLD_* for alphas
19770:
19771: 1994-01-31 01:50 millert
19772:
19773: * INSTALL: updated for new config scheme
19774:
19775: 1994-01-30 19:42 millert
19776:
19777: * find_path.c: more verbose eror messages
19778:
19779: 1994-01-27 14:08 millert
19780:
19781: * TODO: now have solaris
19782:
19783: 1994-01-27 14:07 millert
19784:
19785: * sudo.h: define __svr4__ for SOLARIS
19786:
19787: 1994-01-27 14:07 millert
19788:
19789: * check.c: added svr4 junk for shadow pws for solaris 2.x
19790:
19791: 1994-01-27 13:19 millert
19792:
19793: * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19794: Its not needed since we start out setuid with the correct perms.
19795:
19796: 1994-01-26 19:51 millert
19797:
19798: * check.c, sudo.c, sudo.h: now use setreuid()
19799:
19800: 1994-01-26 18:58 millert
19801:
19802: * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19803: VARIABLES sectoin
19804:
19805: 1994-01-26 18:52 millert
19806:
19807: * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19808:
19809: 1994-01-26 18:52 millert
19810:
19811: * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19812: >> .
19813:
19814: 1993-12-07 01:33 millert
19815:
19816: * README: minor update + spell fix
19817:
19818: 1993-12-07 01:33 millert
19819:
19820: * INSTALL: rewrote most of this
19821:
19822: 1993-12-07 01:13 millert
19823:
19824: * sudo.h: added all options that are in the Makefile
19825:
19826: 1993-12-07 00:23 millert
19827:
19828: * getpass.c: now use USE_TERMIO #define for sgi & hpux
19829:
19830: 1993-12-06 23:19 millert
19831:
19832: * TODO: todo: posix sigs
19833:
19834: 1993-12-06 01:12 millert
19835:
19836: * check.c, find_path.c: always include strings.h
19837:
19838: 1993-12-05 20:34 millert
19839:
19840: * visudo.c: added STATICEDITOR
19841:
19842: 1993-12-05 20:30 millert
19843:
19844: * sudo.h: sgi has vi in /usr/bin too
19845:
19846: 1993-12-05 20:23 millert
19847:
19848: * sudo.man: added VISUAL
19849:
19850: 1993-12-02 22:20 millert
19851:
19852: * sudo.h: sue /usr/bin/vi on some systems
19853:
19854: 1993-12-02 22:19 millert
19855:
19856: * sudo.c: fixed warning (include strings.h)
19857:
19858: 1993-12-02 22:06 millert
19859:
19860: * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19861: features)
19862:
19863: 1993-12-02 21:38 millert
19864:
19865: * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19866:
19867: 1993-12-02 21:35 millert
19868:
19869: * visudo.c: added EDITOR envar
19870:
19871: 1993-12-02 21:34 millert
19872:
19873: * check.c, find_path.c, parse.c, sudo.c: added patches from
19874: John_Rouillard directory spec uses EDITOR
19875:
19876: 1993-12-01 19:32 millert
19877:
19878: * getpass.c: added flush for hpux
19879:
19880: 1993-11-30 13:37 millert
19881:
19882: * sudo.c: no longer assume malloc returns a char *
19883:
19884: 1993-11-29 20:35 millert
19885:
19886: * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19887: stuff -- now gets removed correctly
19888:
19889: 1993-11-29 19:31 millert
19890:
19891: * sudo.h: added STD_HEADERS macro
19892:
19893: 1993-11-29 19:14 millert
19894:
19895: * sudo.c: now uses STD_HEADERS macor for ansi
19896:
19897: 1993-11-29 19:14 millert
19898:
19899: * find_path.c: now uses STD_HEADERS macro
19900:
19901: 1993-11-29 19:13 millert
19902:
19903: * check.c: niceties for C compiler bitches -- no real change
19904:
19905: 1993-11-29 13:04 millert
19906:
19907: * visudo.c: now doesn't fclose a file never opened.
19908:
19909: 1993-11-28 16:35 millert
19910:
19911: * sudo.man: added visudo line
19912:
19913: 1993-11-28 16:31 millert
19914:
19915: * sudo.man: added error stuff added me in there...
19916:
19917: 1993-11-28 03:12 millert
19918:
19919: * CHANGES: noted insults
19920:
19921: 1993-11-28 03:01 millert
19922:
19923: * INSTALL: added blurb about reading stuff
19924:
19925: 1993-11-28 03:00 millert
19926:
19927: * sudo.h: added insults
19928:
19929: 1993-11-28 03:00 millert
19930:
19931: * insults.h: corrected somments and removed newlines
19932:
19933: 1993-11-28 03:00 millert
19934:
19935: * check.c: now uses insults
19936:
19937: 1993-11-28 02:45 millert
19938:
19939: * insults.h: Initial revision
19940:
19941: 1993-11-27 19:46 millert
19942:
19943: * INSTALL: added dec syslog note
19944:
19945: 1993-11-27 19:25 millert
19946:
19947: * sample.sudoers: added real stuff in there
19948:
19949: 1993-11-27 19:24 millert
19950:
19951: * TODO: added a todo
19952:
19953: 1993-11-27 19:10 millert
19954:
19955: * TODO: added one
19956:
19957: 1993-11-27 18:59 millert
19958:
19959: * sample.sudoers: Initial revision
19960:
19961: 1993-11-27 18:59 millert
19962:
19963: * sudo.man: updated with changes
19964:
19965: 1993-11-27 18:52 millert
19966:
19967: * sudo.man: Initial revision
19968:
19969: 1993-11-27 18:48 millert
19970:
19971: * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
19972: revision
19973:
19974: 1993-11-27 18:46 millert
19975:
19976: * visudo.c: updated version number and took out jeff's old addr
19977: since it is no good
19978:
19979: 1993-11-27 18:42 millert
19980:
19981: * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
19982: parse.yacc, sudo.c: updated version number and took out jeff's
19983: email (since it is invalid)
19984:
19985: 1993-10-28 09:36 millert
19986:
19987: * check.c: added fflush()
19988:
19989: 1993-10-22 20:46 millert
19990:
19991: * find_path.c: now return NULL instead pfof exiting for
19992: nopnn-fatal errors
19993:
19994: 1993-10-21 16:57 millert
19995:
19996: * check.c: new banner
19997:
19998: 1993-10-21 16:42 millert
19999:
20000: * parse.lex: now sudo.h gets included first
20001:
20002: 1993-10-17 20:31 millert
20003:
20004: * parse.lex: now can use flex
20005:
20006: 1993-10-17 20:31 millert
20007:
20008: * sudo.h: linux patch
20009:
20010: 1993-10-17 20:30 millert
20011:
20012: * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20013:
20014: 1993-10-17 20:30 millert
20015:
20016: * check.c: linux diff
20017:
20018: 1993-10-15 16:03 millert
20019:
20020: * find_path.c: stat now ignores EINVAL
20021:
20022: 1993-10-05 21:48 millert
20023:
20024: * find_path.c, sudo.c: now declare strdup as extern
20025:
20026: 1993-10-04 15:23 millert
20027:
20028: * visudo.c: reformatted with indent + by hand
20029:
20030: 1993-10-04 15:10 millert
20031:
20032: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20033: sudo.h: used indent to "fix" coding style
20034:
20035: 1993-10-03 20:12 millert
20036:
20037: * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20038: LAST should maybe move the code that does this into the loop
20039: body. makes it messier tho. hmmm.
20040:
20041: 1993-09-08 11:53 millert
20042:
20043: * find_path.c: redid the fix for non-executable files in an easier
20044: to read way plus some minor aethetic changes
20045:
20046: 1993-09-08 11:39 millert
20047:
20048: * find_path.c: fixed bug with non-executable tings of same name in
20049: path introduced by checkig errno after stat(2).
20050:
20051: 1993-09-05 10:02 millert
20052:
20053: * sudo.c: fixed off by one error
20054:
20055: 1993-09-05 09:55 millert
20056:
20057: * find_path.c: now handles decending below '/' correctly
20058:
20059: 1993-09-05 08:35 millert
20060:
20061: * sudo.c: now actually builds Envp instead of munging envp
20062:
20063: 1993-09-04 15:42 millert
20064:
20065: * parse.yacc: now includes sys/param.h
20066:
20067: 1993-09-04 15:41 millert
20068:
20069: * visudo.c: now includes sys/param.h
20070:
20071: 1993-09-04 15:30 millert
20072:
20073: * sudo.h: fixed ifndef -> ifdef
20074:
20075: 1993-09-04 15:19 millert
20076:
20077: * qualify.c: make more like find_path.c
20078:
20079: 1993-09-04 15:18 millert
20080:
20081: * find_path.c: rewritten by millert
20082:
20083: 1993-09-04 15:17 millert
20084:
20085: * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20086: added info about new defines in the comment
20087:
20088: 1993-09-04 15:15 millert
20089:
20090: * logging.c: now uses USE_CWD
20091:
20092: 1993-09-04 14:10 millert
20093:
20094: * sudo.h: added delc for clean_envp() and Envp
20095:
20096: 1993-09-04 14:09 millert
20097:
20098: * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20099: Envp to exec
20100:
20101: 1993-09-04 14:09 millert
20102:
20103: * logging.c: now uses execve()
20104:
20105: 1993-09-04 14:08 millert
20106:
20107: * find_path.c: ENOTDIR is ok now too (in case part of the path is
20108: bogus)
20109:
20110: 1993-09-04 08:17 millert
20111:
20112: * qualify.c: now works correctly (ttaltotal rewrite)
20113:
20114: 1993-09-04 07:59 millert
20115:
20116: * parse.lex: now includes sys/param.h didn't match trailing / --
20117: fix from rouilj@cs.umb.edu
20118:
20119: 1993-06-11 18:04 millert
20120:
20121: * sudo.c: moved around the #ifndef _AIX
20122:
20123: 1993-06-11 18:03 millert
20124:
20125: * check.c, logging.c, parse.c: Initial revision
20126:
20127: 1993-03-20 07:57 millert
20128:
20129: * qualify.c: Initial revision
20130:
20131: 1993-03-13 15:09 millert
20132:
20133: * find_path.c: now works if you do sudo bin/test
20134:
20135: 1993-03-13 14:20 millert
20136:
20137: * find_path.c: works
20138:
20139: 1993-03-02 18:28 millert
20140:
20141: * sudo.h: Initial revision
20142:
20143: 1993-03-02 11:35 millert
20144:
20145: * visudo.c: Initial revision
20146:
20147: 1993-03-02 11:32 millert
20148:
20149: * parse.lex, parse.yacc: Initial revision
20150:
20151: 1993-02-16 13:24 millert
20152:
20153: * sudo.c: took out errno.h
20154:
20155: 1993-02-16 13:22 millert
20156:
20157: * sudo.c: now spews error if exec fails and exits with -1
20158:
20159: 1993-02-16 12:07 millert
20160:
20161: * sudo.c: Initial revision
20162:
20163: 1993-02-15 22:27 millert
20164:
20165: * find_path.c: now only execs files with (an) executable bit set.
20166:
20167: 1993-02-15 22:01 millert
20168:
20169: * find_path.c: Initial revision
20170:
20171: 1993-02-15 14:32 millert
20172:
20173: * getpass.c: added nice comment
20174:
20175: 1993-02-15 14:19 millert
20176:
20177: * getpass.c: now works on sgi's
20178:
20179: 1993-02-15 13:57 millert
20180:
20181: * getpass.c: Initial revision
20182:
![[BACK]](/icons/back.gif){kind=icon}
Return to ChangeLog CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / sudo