Annotation of src/usr.bin/sudo/ChangeLog, Revision 1.8
1.8 ! millert 1: 2009-06-29 09:36 millert
! 2:
! 3: * redblack.c: In rbrepair, re-color the root or the first non-block
! 4: node we find to be black. Re-coloring the root is probably not
! 5: needed but won't hurt.
! 6:
! 7: 2009-06-29 09:35 millert
! 8:
! 9: * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
! 10:
! 11: 2009-06-26 16:40 millert
! 12:
! 13: * redblack.c: When repairing the tree, don't touch the root node.
! 14:
! 15: 2009-06-25 08:44 millert
! 16:
! 17: * set_perms.c: Protect call to setegid in runas_setup with #ifdef
! 18: HAVE_SETEUID. Reported by Josef Schmid.
! 19:
1.7 millert 20: 2009-06-23 14:29 millert
21:
22: * sudoers.pod: Document that we accept env_pam-style environment
23: files
24:
25: 2009-06-23 14:24 millert
26:
27: * env.c: Adapt to accept pam_env-style /etc/environment which
28: allows shell-style lines such as: export EDITOR="/usr/bin/vi"
29:
30: 2009-06-23 12:22 millert
31:
32: * sudoers.pod: Make it clear that env_delete only works when
33: !env_reset. From Loïc Minier
34:
1.6 millert 35: 2009-06-15 17:19 millert
36:
37: * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
38: Quest
39:
40: 2009-06-15 17:18 millert
41:
42: * Makefile.in: build the .cat page in the current working dir, not
43: the src dir
44:
45: 2009-06-15 09:10 millert
46:
47: * env.c: Return EINVAL in setenv() if var is NULL or the empty
48: string to match glibc behavior.
49:
50: 2009-06-13 16:52 millert
51:
52: * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
53: AC_ARG_ENABLE
54:
55: 2009-06-11 16:29 millert
56:
57: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
58: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
59: regen
60:
61: 2009-06-09 10:08 millert
62:
63: * INSTALL: Document --with-libvas and --with-libvas-rpath
64:
65: 2009-05-29 09:43 millert
66:
67: * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
68: and key paths may be a directory or a file. However, version 5.0
69: of the SDK only seems to support using a directory. If
70: ldapssl_clientauth_init fails and the cert or key paths look like
71: they could be files, strip off the last path element and try
72: again.
73:
74: 2009-05-29 09:40 millert
75:
76: * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
77: in path to flex.
78:
79: 2009-05-26 20:49 millert
80:
81: * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
82: non-Unix group support from Quest, as reworked by me.
83:
84: 2009-05-26 20:47 millert
85:
86: * toke.c: regen
87:
88: 2009-05-26 20:46 millert
89:
90: * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
91: space.
92:
93: 2009-05-25 08:02 millert
94:
95: * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
96: fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
97: logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
98: pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
99: sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
100: testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
101: auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
102: years.
103:
104: 2009-05-24 08:33 millert
105:
106: * interfaces.c, lbuf.c: Minor fixes for Minix-3
107:
108: 2009-05-22 06:37 millert
109:
110: * set_perms.c: Handle getgroups() returning 0. Also add missing
111: check for HAVE_GETGROUPS.
112:
113: 2009-05-19 17:24 millert
114:
115: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
116: version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
117: via AC_INIT in configure.
118:
119: 2009-05-18 06:33 millert
120:
121: * set_perms.c: Remove group setting code in setusercontext case, we
122: will do it ourselves later on in runas_setup. Set the gid after
123: initgroups/setgroups is called, since on Mac OS X it seems to
124: change the egid.
125:
126: 2009-05-17 18:19 millert
127:
128: * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
129: vasgroups.c: Initial bits of non-unix group support using Quest
130: Authentication Services
131:
132: 2009-05-17 16:52 millert
133:
134: * toke.c, toke.l: Accept %:foo as a non-Unix group
135:
136: 2009-05-17 16:22 millert
137:
138: * toke.c, toke.l: Allow user/group to be double quoted in the case
139: of non-Unix groups which contain spaces.
140:
141: 2009-05-11 12:47 millert
142:
143: * match.c: Don't allow the user to specify the default runas user
144: if their sudoers entry only allows them to run as a group.
145:
146: 2009-05-10 07:59 millert
147:
148: * sudo.c: Must call audit_success before we change uids.
149:
150: 2009-05-10 07:52 millert
151:
152: * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
153: set_perm to not exit on failure and use this in the logging
154: routines.
155:
156: 2009-05-10 07:33 millert
157:
158: * parse.c: In -l mode, if the user is only allowed to run as a
159: group, display the user's name, not root's before the allowed
160: group.
161:
162: 2009-05-09 21:00 millert
163:
164: * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
165: effect of setting the runas user to root unilaterally.
166:
167: 2009-05-08 16:19 millert
168:
169: * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
170: F_SETLKW.
171:
172: 2009-05-08 13:07 millert
173:
174: * pwutil.c: Only cache by the method we fetched for pwd and grp
175: lookups. Previously we cached both by namd and id but this can
176: cause problems for entries that share the same id. Also add more
177: info in the error message in case the insert fails (which should
178: now be impossible).
179:
180: 2009-04-30 15:04 millert
181:
182: * sudoers.pod: Add a clarification from Nick Sieger
183:
184: 2009-04-25 12:49 millert
185:
186: * env.c: Inline the setting of the environment string.
187:
188: 2009-04-24 14:53 millert
189:
190: * env.c: setenv(3) in Linux treats a NUL value as the empty string
191: setenv(3) in BSD doesn't return an error if the name has '=' in
192: it, it just treats the '=' as end of string.
193:
194: 2009-04-22 16:32 millert
195:
196: * toke.c, toke.l: Not all systems have d_namlen
197:
198: 2009-04-20 13:53 millert
199:
200: * sudoers.pod: Fix up some pod2html issues.
201:
202: 2009-04-19 14:09 millert
203:
204: * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
205: from a diff from Quest Software.
206:
207: 2009-04-19 09:01 millert
208:
209: * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
210: files)
211:
212: 2009-04-19 08:56 millert
213:
214: * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
215: backup files)
216:
217: 2009-04-18 19:37 millert
218:
219: * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
220: #includedir, ignore any file containing a dot
221:
222: 2009-04-18 19:25 millert
223:
224: * Makefile.in, version.h: Bump version
225:
226: 2009-04-18 19:25 millert
227:
228: * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
229: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
230: visudo.c: Implement #includedir directive. Files in an
231: includedir are not edited by visudo unless they contain a syntax
232: error.
233:
234: 2009-04-18 12:06 millert
235:
236: * ChangeLog: sync
237:
1.5 millert 238: 2009-04-18 10:27 millert
239:
240: * WHATSNEW: Forgot umask_override
241:
242: 2009-04-18 09:25 millert
243:
244: * ChangeLog, TODO: sync
245:
246: 2009-04-16 08:22 millert
247:
248: * visudo.c: Rewind stream if we fdopen sudoers since it may not be
249: at the beginning. Set the keepopen flag on already-open files
250: too so the lexer doesn't close them out from under us.
251:
252: 2009-04-16 08:18 millert
253:
254: * visudo.c: Print the proper file name when there is a parse error
255: in an include file.
256:
257: 2009-04-11 07:45 millert
258:
259: * WHATSNEW: Sync
260:
1.4 millert 261: 2009-04-10 16:59 millert
262:
263: * configure, configure.in: Fix a warning when --without-ldap is
264: specified.
265:
266: 2009-04-05 12:25 millert
267:
268: * alias.c, parse.h, visudo.c: Store aliases that we remove during
269: check_aliases in a freelist and free them at the end so we don't
270: leak memory.
271:
272: 2009-03-28 09:30 millert
273:
274: * visudo.c: Check aliases in -c mode too.
275:
276: 2009-03-28 09:09 millert
277:
278: * alias.c, parse.h, visudo.c: Make alias_remove return the alias
279: struct instead of freeing it directly. Fixes a use after free in
280: alias_remove_recursive, the only consumer.
281:
282: 2009-03-28 09:07 millert
283:
284: * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
285: -> alias_find for consistency.
286:
287: 2009-03-27 19:29 millert
288:
289: * visudo.c: When checking for unused aliases, recurse if the alias
290: points to another alias.
291:
292: 2009-03-16 12:11 millert
293:
294: * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
295: support will be done later after some refactoring.
296:
297: 2009-03-14 12:02 millert
298:
299: * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
300:
301: 2009-03-13 21:04 millert
302:
303: * configure, configure.in: Only check for
304: ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
305: compilation with ldapux.
306:
307: 2009-03-11 20:03 millert
308:
309: * fileops.c: fix char subscript
310:
311: 2009-03-11 19:19 millert
312:
313: * Makefile.in: remove errant carriage returns
314:
315: 2009-03-11 19:01 millert
316:
317: * audit.c, env.c: fix K&R compilation
318:
319: 2009-03-11 12:12 millert
320:
321: * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
322: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
323: regen
324:
325: 2009-03-10 17:34 millert
326:
327: * config.h.in: Add missing HAVE_BSM_AUDIT
328:
329: 2009-03-10 17:21 millert
330:
331: * WHATSNEW: Add 1.7.1 features
332:
333: 2009-03-10 17:10 millert
334:
335: * INSTALL: Mention --with-netsvc
336:
337: 2009-03-10 17:08 millert
338:
339: * sudoers.ldap.pod: Document netsvc.conf support
340:
341: 2009-03-10 16:44 millert
342:
343: * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
344: sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
345:
346: 2009-03-08 16:57 millert
347:
348: * configure, config.h.in, configure.in, env.c: Add
349: --enable-env-debug flag to enable environment sanity checks.
350:
351: 2009-03-08 11:51 millert
352:
353: * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
354:
355: 2009-03-07 17:10 millert
356:
357: * env.c: Only sync environ for putenv, setenv, and unsetenv. We
358: need to make sure that sudo_putenv and sudo_setenv only modify
359: env.envp, not environ.
360:
361: 2009-03-02 14:19 millert
362:
363: * env.c: Really fix UNSETENV_VOID
364:
365: 2009-03-02 14:18 millert
366:
367: * env.c: Fix unsetenv when UNSETENV_VOID
368:
369: 2009-03-02 08:00 millert
370:
371: * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
372:
373: 2009-03-02 07:36 millert
374:
375: * ldap.c: tivoli-based ldap does not have ldapssl_err2string
376:
377: 2009-03-02 07:30 millert
378:
379: * configure: regen
380:
381: 2009-03-01 16:20 millert
382:
383: * config.h.in, configure, configure.in, ldap.c: Add support for
384: Tivoli-based LDAP start TLS as seen in AIX. Untested.
385:
386: 2009-03-01 08:52 millert
387:
388: * env.c: Add sanity checks for setenv/unsetenv
389:
390: 2009-02-28 20:17 millert
391:
392: * Makefile.in: Include bsm_audit.h in the tarball
393:
394: 2009-02-28 20:00 millert
395:
396: * Makefile.in, version.h: bump version for sudo 1.7.1
397:
398: 2009-02-28 19:58 millert
399:
400: * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
401: sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
402: calls to setenv/unsetenv and provide our own
403: setenv/unsetenv/putenv that operates on own env pointer. Make
404: sync_env() inline in setenv/unsetenv/putenv functions.
405:
406: 2009-02-25 07:33 millert
407:
408: * sudo.c: Make "sudoedit -h" work as expected
409:
410: 2009-02-25 07:21 millert
411:
412: * auth/pam.c: Make sure def_prompt is always defined. This is a
413: workaround for pam configs that prompt for a password in the
414: session but don't have an auth line. A better fix is to expand
415: the sudo prompt earlier and set def_prompt to that when
416: initializing.
417:
418: 2009-02-25 06:17 millert
419:
420: * sudo.pod: Mention that the helper for -A may be graphical.
421:
422: 2009-02-25 06:16 millert
423:
424: * TROUBLESHOOTING: Document what happens if there is no tty.
425:
426: 2009-02-25 06:05 millert
427:
428: * sudo.c: cosmetic changes
429:
430: 2009-02-25 05:47 millert
431:
432: * term.c: Fix term_restore
433:
434: 2009-02-24 20:23 millert
435:
436: * sudo.c: Fix "sudo -k" with no other args
437:
438: 2009-02-24 08:04 millert
439:
440: * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
441: be specified in conjunction with a command or another option that
442: may require authentication.
443:
444: 2009-02-23 09:18 millert
445:
446: * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
447: from Diego E. 'Flameeyes'
448:
449: 2009-02-23 09:15 millert
450:
451: * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
452:
453: 2009-02-21 17:03 millert
454:
455: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
456: Implement umask_override
457:
458: 2009-02-21 16:51 millert
459:
460: * toke.c: regen
461:
462: 2009-02-21 16:49 millert
463:
464: * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
465: include filenames.
466:
467: 2009-02-21 08:43 millert
468:
469: * audit.c: Need to include compat.h
470:
471: 2009-02-21 08:37 millert
472:
473: * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
474: sudo.c: Make audit_success and audit_failure generic functions in
475: preparation for integrating linux audit support.
476:
477: 2009-02-21 08:06 millert
478:
479: * term.c: remove duplicate include
480:
481: 2009-02-20 16:13 millert
482:
483: * bsm_audit.c: Add missing include
484:
485: 2009-02-20 15:55 millert
486:
487: * sudo.c: May need to update the runas user after parsing
488: command-based defaults.
489:
490: 2009-02-18 10:53 millert
491:
492: * glob.c: Add missing pair of braces introduced with character
493: class support.
494:
495: 2009-02-15 15:53 millert
496:
497: * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
498: Rename pwstars to pwfeedback
499:
500: 2009-02-10 20:25 millert
501:
502: * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
503:
504: 2009-02-10 20:18 millert
505:
506: * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
507: sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
508: S.J. Peron
509:
510: 2009-02-10 19:58 millert
511:
512: * term.c: This is new code, no DARPA notice.
513:
514: 2009-02-10 14:04 millert
515:
516: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
517: simple_glob -> fast_glob
518:
519: 2009-02-10 09:39 millert
520:
521: * match.c: g/c unused var
522:
523: 2009-02-10 08:09 millert
524:
525: * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
526: simple_glob option to use fnmatch() instead of glob(). This is
527: useful when you need to specify patterns that reference network
528: file systems.
529:
530: 2009-02-10 07:58 millert
531:
532: * tgetpass.c: add term_* proto
533:
534: 2009-02-10 07:51 millert
535:
536: * sudoers.pod: mention glob()
537:
538: 2009-02-09 07:59 millert
539:
540: * tgetpass.c: Delete any pwstars we wrote after the user hits
541: return. That way there is no record on screen as to the user's
542: password length.
543:
544: 2009-02-08 10:27 millert
545:
546: * term.c: Move terminal setting bits from tgetpass.c to term.c
547:
548: 2009-02-07 19:50 millert
549:
550: * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
551: tgetpass.c: Add pwstars sudoers option that causes sudo to print
552: a star every time the user presses a key.
553:
554: 2009-02-03 10:10 millert
555:
556: * Makefile.in: Fix up F<> brokenness for visudo.man.in and
557: sudoers.ldap.man.in.
558:
559: 2009-01-27 11:54 millert
560:
561: * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
562: not -1, to indicate no limit. From Mark Janssen.
563:
564: 2009-01-17 17:36 millert
565:
566: * toke.c, toke.l: Comments that begin with #- should not be parsed
567: as uids.
568:
569: 2009-01-08 19:13 millert
570:
571: * sudo.c: Do not try to set the close on exec flag if we didn't
572: actually open sudoers.
573:
574: 2008-12-19 12:40 millert
575:
576: * ChangeLog: regen
577:
1.3 millert 578: 2008-12-14 17:40 millert
579:
580: * TODO: sync
581:
582: 2008-12-09 18:48 millert
583:
584: * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
585: enters ^C at the password prompt.
586:
587: 2008-12-09 16:13 millert
588:
589: * configure.in, configure: Don't try to build sudo_noexec.so on
590: HP-UX with the bundled compiler as it cannot generate shared
591: objects.
592:
593: 2008-12-09 15:55 millert
594:
595: * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
596: fixes
597:
598: 2008-12-09 08:49 millert
599:
600: * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
601: it clear that we are not short-circuiting on last match. When
602: pwcheck is 'all', initialize nopass to TRUE and override it with
603: the first non-TRUE entry.
604:
605: 2008-12-08 10:02 millert
606:
607: * parse.c: Do not short circuit pseudo commands when we get a match
608: since, depending on the settings, we may need to examine all
609: commands for tags.
610:
611: 2008-12-03 15:58 millert
612:
613: * sudoers.cat, sudoers.man.in: regen
614:
615: 2008-12-03 15:57 millert
616:
617: * sudoers.pod: hostnames may also contain wildcards
618:
619: 2008-12-03 15:40 millert
620:
621: * Makefile.in: remove stamp-* files and linux core files in clean
622: target
623:
624: 2008-12-02 12:30 millert
625:
626: * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
627: HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
628:
629: 2008-11-26 15:10 millert
630:
631: * configure, configure.in: correctly enable SIA on Digital UNIX
632:
633: 2008-11-25 20:06 millert
634:
635: * TODO: checkpoint
636:
637: 2008-11-25 20:05 millert
638:
639: * ChangeLog: sync
640:
641: 2008-11-25 12:01 millert
642:
643: * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
644: ttys we may still have /dev/tty available to us.
645:
646: 2008-11-24 10:09 millert
647:
648: * sudoers.cat, sudoers.man.in: regen
649:
650: 2008-11-24 10:08 millert
651:
652: * sudoers.pod: fix typos; Markus Lude
653:
654: 2008-11-24 07:08 millert
655:
656: * ChangeLog: sync
657:
1.2 millert 658: 2008-11-23 19:42 millert
659:
660: * toke.c: regen
661:
662: 2008-11-23 19:41 millert
663:
664: * toke.l: Fix matching of a line that only consists of a comment
665: char
666:
667: 2008-11-22 13:17 millert
668:
669: * auth/pam.c: MacOS pam will retry conversation function if it
670: fails so just treat ^C as an empty password.
671:
672: 2008-11-22 10:12 millert
673:
674: * visudo.c: When checking for alias use, also check defaults
675: bindings.
676:
677: 2008-11-22 10:01 millert
678:
679: * redblack.c: unused var
680:
681: 2008-11-22 09:42 millert
682:
683: * redblack.c: Replace my rbdelete with Emin's version (which
684: actually works ;-)
685:
686: 2008-11-19 12:01 millert
687:
688: * testsudoers.c: malloc debugging
689:
690: 2008-11-19 07:37 millert
691:
692: * visudo.c: malloc options in devel mode for visudo too
693:
694: 2008-11-18 10:57 millert
695:
696: * sudo.c: fix compilation on non-C99; from Theo
697:
698: 2008-11-18 10:50 millert
699:
700: * visudo.c: fix check_aliases
701:
702: 2008-11-18 08:29 millert
703:
704: * alias.c: when destroying an alias, free the correct data pointer
705:
706: 2008-11-18 07:54 millert
707:
708: * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
709:
710: 2008-11-15 13:34 millert
711:
712: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
713: visudo.man.in: regen
714:
715: 2008-11-15 13:34 millert
716:
717: * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
718: 'option' for command line options (not flag)
719:
720: 2008-11-14 06:18 millert
721:
722: * INSTALL: Add note on configuring HP-UX pam
723:
724: 2008-11-11 13:28 millert
725:
726: * check.c, sudo.c: Move tty checks into check_user() so we only do
727: them if we actually need a password.
728:
729: 2008-11-11 12:34 millert
730:
731: * sudo.c: Don't error out if no tty or askpass unless we actually
732: need to authenticate.
733:
734: 2008-11-10 15:20 millert
735:
736: * ChangeLog: regen
737:
1.1 millert 738: 2008-11-10 08:07 millert
739:
740: * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
741: Stoeckmann
742:
743: 2008-11-09 15:18 millert
744:
745: * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
746:
747: 2008-11-09 09:15 millert
748:
749: * gram.c, toke.c: regen
750:
751: 2008-11-09 09:13 millert
752:
753: * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
754: env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
755: interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
756: logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
757: redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
758: sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
759: version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
760: visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
761: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
762: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
763: sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
764: years.
765:
766: 2008-11-09 08:48 millert
767:
768: * fnmatch.c, glob.c, emul/charclass.h: add my copyright
769:
770: 2008-11-08 10:40 millert
771:
772: * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
773: far past the end, resulting in a NUL being written immediately
774: after the buffer end.
775:
776: 2008-11-08 10:31 millert
777:
778: * UPGRADE, WHATSNEW: add sections on tgetpass changes
779:
780: 2008-11-08 10:30 millert
781:
782: * tgetpass.c: Treat EOF w/o newline as an error.
783:
784: 2008-11-07 17:42 millert
785:
786: * parse.c: Fix "sudo -v" when NOPASSWD is set.
787:
788: 2008-11-07 12:45 millert
789:
790: * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
791: longer treat an empty password at the prompt as special. To quit
792: out of sudo you now need to hit ^C at the password prompt.
793:
794: 2008-11-06 21:07 millert
795:
796: * sudoers.cat, sudoers.man.in: regen
797:
798: 2008-11-06 21:06 millert
799:
800: * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
801: will now refuse to run if no tty is present unless the new
802: visiblepw sudoers flag is set.
803:
804: 2008-11-05 19:42 millert
805:
806: * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
807: RLIM_SAVED_MAX not defined
808:
809: 2008-11-05 19:40 millert
810:
811: * aix.c: fix fallback value for RLIM_SAVED_MAX
812:
813: 2008-11-05 19:14 millert
814:
815: * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
816: aixauth_cleanup.
817:
818: 2008-11-05 19:08 millert
819:
820: * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
821: authenticate() as it may not be correct for the user we are
822: running the command as.
823:
824: 2008-11-05 19:05 millert
825:
826: * isblank.c: Add isblank() function for systems without it. Needed
827: for POSIX character class matching in fnmatch.c and glob.c.
828:
829: 2008-11-05 11:02 millert
830:
831: * TROUBLESHOOTING: expound on sudo and cd
832:
833: 2008-11-04 15:52 millert
834:
835: * ChangeLog: regen
836:
837: 2008-11-04 15:46 millert
838:
839: * sudoers.cat, sudoers.man.in: regen
840:
841: 2008-11-04 15:45 millert
842:
843: * sudoers.pod: mention defauts parse order
844:
845: 2008-11-03 13:19 millert
846:
847: * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
848: function for systems without it. Needed for POSIX character
849: class matching in fnmatch.c and glob.c.
850:
851: 2008-11-03 12:54 millert
852:
853: * Makefile.in: add emul/charclass.h to HDRS
854:
855: 2008-11-02 14:08 millert
856:
857: * TODO: checkpoint
858:
859: 2008-11-02 14:06 millert
860:
861: * parse.c, defaults.c, testsudoers.c, visudo.c: Move
862: update_defaults into defaults.c and call it properly from visudo
863: and testsudoers.
864:
865: 2008-11-02 09:51 millert
866:
867: * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
868: tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
869: consistency
870:
871: 2008-11-02 09:45 millert
872:
873: * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
874: tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
875: has non-standard entries.
876:
877: 2008-11-02 09:35 millert
878:
879: * match.c: quiet gcc
880:
881: 2008-11-02 09:28 millert
882:
883: * match.c: Short circuit glob() checks if basename(pattern) !=
884: basename(command). Refactor code that checks for a command in a
885: directory and use it in the glob case if the resolved pattern
886: ends in a '/'.
887:
888: 2008-11-01 09:20 millert
889:
890: * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
891: setting runas defaults until after runaspw/gr is setup.
892:
893: 2008-10-29 13:26 millert
894:
895: * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
896: allocating host/domain name since some systems do not include
897: space for the NUL in the size. Also manually NUL-terminate
898: buffer from gethostname() since POSIX is wishy-washy on this.
899:
900: 2008-10-26 17:13 millert
901:
902: * sudo.c, sudoers.pod: When setting the umask, use the union of the
903: user's umask and the default value set in sudoers so that we
904: never lower the user's umask when running a command.
905:
906: 2008-10-26 16:43 millert
907:
908: * sudo.c: Don't try to read from a zero-length sudoers file.
909: Remove the bogus Solaris work-around for EAGAIN. Since we now
910: use fgetc() it should not be a problem.
911:
912: 2008-10-25 09:22 millert
913:
914: * parse.c: In update_defaults() check the return value of
915: user*_matches against ALLOW so we don't inadvertantly match on
916: UNSPEC.
917:
918: 2008-10-24 09:52 millert
919:
920: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
921: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
922: regen man pages; no more hyphenation
923:
924: 2008-10-24 09:49 millert
925:
926: * sudo.c: Don't error out on a zero-length sudoers file. With the
927: advent of #include the user could create a situation where sudo
928: is unusable.
929:
930: 2008-10-23 12:06 millert
931:
932: * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
933: has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
934: Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
935: Add configure tests to handle all the cases.
936:
937: 2008-10-08 17:28 millert
938:
939: * sudo.pod: resort ENVIRONMENT
940:
941: 2008-10-08 17:09 millert
942:
943: * sudoers.pod: document sudoers_locale
944:
945: 2008-10-08 16:56 millert
946:
947: * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
948: uses in preference to VISUAL or EDITOR
949:
950: 2008-10-08 14:27 millert
951:
952: * toke.c, toke.l: In fill_cmnd(), collapse any escaped
953: sudo-specific characters. Allows character classes to be used in
954: pathnames.
955:
956: 2008-10-03 16:02 millert
957:
958: * lbuf.c: fix typo in non-C89 function declaration
959:
960: 2008-10-03 15:56 millert
961:
962: * sudoers.pod: Mention POSIX characters classes now that out
963: fnmatch() and glob() support them.
964:
965: 2008-10-03 15:55 millert
966:
967: * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
968: UTF8) with [A-Za-z] which is locale agnostic.
969:
970: 2008-10-03 10:02 millert
971:
972: * parse.h: use __signed char if we are going to assign a negative
973: value since on Power, char is unsigned by default
974:
975: 2008-10-03 09:59 millert
976:
977: * configure, configure.in, config.h.in: Add tests for __signed char
978: and signed char.
979:
980: 2008-10-03 09:19 millert
981:
982: * aix.c: Fix AIX limit setting. getuserattr() returns values in
983: disk blocks rather than bytes. The default hard stack size in
984: newer AIX is RLIM_SAVED_MAX. From Dale King.
985:
986: 2008-09-26 17:13 millert
987:
988: * fnmatch.c, glob.c, emul/charclass.h: Add character class support
989: to included glob(3) and fnmatch(3).
990:
991: 2008-09-16 08:28 millert
992:
993: * emul/fnmatch.h: Remove UCB advertising clause and some
994: compatibility defines.
995:
996: 2008-09-14 16:07 millert
997:
998: * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
999: re-invoking itself or sudo. This allows one to set EDITOR to
1000: sudoedit without getting into an infinite loop of sudoedit
1001: running itself until the path gets too big.
1002:
1003: 2008-09-13 20:45 millert
1004:
1005: * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1006: sudoers_locale Defaults option to override the default sudoers
1007: locale of "C".
1008:
1009: 2008-09-13 14:09 millert
1010:
1011: * sudo.c: Set locale to system default except for during sudoers
1012: parse.
1013:
1014: 2008-09-12 09:34 millert
1015:
1016: * match.c: Redo change in 1.34 to use pointer arithmetic.
1017:
1018: 2008-09-11 07:06 millert
1019:
1020: * match.c: Fix a dereference (read) of a freed pointer. Reported
1021: by Patrick Williams.
1022:
1023: 2008-08-23 19:09 millert
1024:
1025: * sudo.c: Set locale to "C" to avoid interpretation issues with
1026: character ranges in sudoers. May want to make the locale a
1027: sudoers option in the future.
1028:
1029: 2008-08-20 07:45 millert
1030:
1031: * config.h.in: we no longer use setproctitle
1032:
1033: 2008-08-20 07:41 millert
1034:
1035: * sudo.h: remove #if 1
1036:
1037: 2008-08-20 07:40 millert
1038:
1039: * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1040: package.
1041:
1042: 2008-07-12 08:53 millert
1043:
1044: * gram.c: regen with yacc skeleton bug fixed
1045:
1046: 2008-07-12 08:48 millert
1047:
1048: * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1049:
1050: 2008-07-02 06:27 millert
1051:
1052: * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1053: passwd entry used for running commands as a uid not listed in the
1054: passwd database. Fixes an issue with some PAM modules.
1055:
1056: 2008-07-01 07:57 millert
1057:
1058: * sudo.c: Error out in -i mode if the user has no shell. This can
1059: happen when running commands as a uid with no password entry.
1060:
1061: 2008-06-26 07:49 millert
1062:
1063: * toke.c, toke.l: Better fix for line continuation inside double
1064: quotes. Now accepts whitespace between the backslash and the
1065: newline like the main lexer.
1066:
1067: 2008-06-25 14:31 millert
1068:
1069: * toke.c, toke.l: Fix line continuation in strings. It was only
1070: being honored if preceded by whitespace.
1071:
1072: 2008-06-22 16:19 millert
1073:
1074: * config.h.in, configure, configure.in, logging.c: Replace the
1075: double fork with a fork + daemonize.
1076:
1077: 2008-06-21 14:59 millert
1078:
1079: * env.c, sudo.c: The -i flag should imply env_reset. This got
1080: broken in sudo 1.6.9.
1081:
1082: 2008-06-20 20:34 millert
1083:
1084: * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1085: is waited for. Instead of having a SIGCHLD handler, use the
1086: double fork trick to orphan the child that opens the pipe to
1087: sendmail. Fixes a problem running su on some Linux distros.
1088:
1089: 2008-06-20 17:16 millert
1090:
1091: * configure, configure.in: Fix configure test for dirfd() on Linux
1092: where DIR is opaque.
1093:
1094: 2008-06-17 17:42 millert
1095:
1096: * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1097: QNX still has this problem we'll need to revisit this again.
1098:
1099: 2008-06-10 21:13 millert
1100:
1101: * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1102: the mailer. If we only block the signal it may be delivered
1103: later when we unblock. Also, there is no need to block SIGCHLD
1104: since we no longer do the double fork. The normal SIGCHLD
1105: handler is sufficient.
1106:
1107: 2008-06-08 17:37 millert
1108:
1109: * configure, configure.in: Add description for NO_PAM_SESSION, from
1110: a redhat patch.
1111:
1112: 2008-06-06 09:36 millert
1113:
1114: * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1115:
1116: 2008-05-18 13:54 millert
1117:
1118: * configure, configure.in: Redo the test for dgettext() in a way
1119: that hopefully will work around the libintl_dgettext() undefined
1120: problem.
1121:
1122: 2008-05-11 09:21 millert
1123:
1124: * schema.ActiveDirectory: change filename in comment
1125:
1126: 2008-05-10 09:18 millert
1127:
1128: * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1129: sudoers.ldap.pod: Reference schema.ActiveDirectory
1130:
1131: 2008-05-09 14:49 millert
1132:
1133: * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1134:
1135: 2008-05-09 14:48 millert
1136:
1137: * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1138:
1139: 2008-05-09 14:01 millert
1140:
1141: * schema.ActiveDirectory: Active Directory schema by Chantal
1142: Paradis and Eric Paquet
1143:
1144: 2008-05-08 17:54 millert
1145:
1146: * parse.c: remove an XXX that was fixed
1147:
1148: 2008-05-08 12:53 millert
1149:
1150: * ChangeLog: sync
1151:
1152: 2008-05-08 12:49 millert
1153:
1154: * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1155: mode. This fixes a problem where the tag value printed was
1156: influenced by defaults set in the first pass through the parser.
1157:
1158: 2008-05-03 21:29 millert
1159:
1160: * Makefile.in, sudo.psf: No point in packaging the TODO file
1161:
1162: 2008-05-03 21:24 millert
1163:
1164: * ChangeLog: sync
1165:
1166: 2008-05-02 20:53 millert
1167:
1168: * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1169: sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1170: Defaults option that is similar to /etc/environment on some
1171: systems.
1172:
1173: 2008-05-02 16:38 millert
1174:
1175: * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1176: sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1177: sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1178: version to 1.7.0
1179:
1180: 2008-05-02 16:37 millert
1181:
1182: * UPGRADE: initial valgrind pass done
1183:
1184: 2008-04-23 08:30 millert
1185:
1186: * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1187: the secret.
1188:
1189: 2008-04-11 10:03 millert
1190:
1191: * ldap.c: define LDAPS_PORT if the system headers do not
1192:
1193: 2008-04-10 14:54 millert
1194:
1195: * gram.c, gram.y: Fix another memory leak in init_parser().
1196:
1197: 2008-04-10 12:51 millert
1198:
1199: * configure, configure.in: There was a missing space before the
1200: ldap libs in SUDO_LIBS for some configurations.
1201:
1202: 2008-04-10 11:28 millert
1203:
1204: * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1205: leaks pointed out by valgrind.
1206:
1207: 2008-04-07 14:39 millert
1208:
1209: * sudo.c: fix "sudo -s" broken by mode/flags breakout
1210:
1211: 2008-04-07 14:26 millert
1212:
1213: * configure, configure.in: remove duplicate check for dgettext
1214:
1215: 2008-04-05 15:54 millert
1216:
1217: * aix.c: Fall back to default stanza if no user-specific limit is
1218: found.
1219:
1220: 2008-04-02 15:56 millert
1221:
1222: * snprintf.c: include stdint.h if present
1223:
1224: 2008-04-02 15:28 millert
1225:
1226: * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1227:
1228: 2008-04-01 19:18 millert
1229:
1230: * sudoers.ldap.pod: fix cut and pasto
1231:
1232: 2008-03-31 11:24 millert
1233:
1234: * pwutil.c: Add #ifdef PURITY
1235:
1236: 2008-03-30 17:36 millert
1237:
1238: * auth/bsdauth.c: remove useless cast
1239:
1240: 2008-03-27 19:07 millert
1241:
1242: * ChangeLog: sync
1243:
1244: 2008-03-27 19:04 millert
1245:
1246: * TODO: sync
1247:
1248: 2008-03-27 19:01 millert
1249:
1250: * sudo.h: Split MODE_* defines into primary and flags.
1251:
1252: 2008-03-26 13:11 millert
1253:
1254: * aix.c: It turns out the logic for getting AIX limits is more
1255: convoluted than I realized and differs depending on whether the
1256: soft and/or hard limits are defined.
1257:
1258: 2008-03-23 10:18 millert
1259:
1260: * Makefile.in, configure, configure.in: Back out AIX-specific
1261: change to set the sudo_noexec path to the .a file, we do really
1262: want to use the .so file. Since libtool doesn't do that
1263: correctly, just install the .so file ourselves in the Makefile.
1264:
1265: 2008-03-23 10:12 millert
1266:
1267: * install-sh: If the file given to install is a path, only use the
1268: basename of the file when building the destination path.
1269:
1270: 2008-03-18 16:08 millert
1271:
1272: * sudo.c: parse_args() cleanup: Sort command line options in the
1273: getopt() switch The -U option requires a parameter Normalize a
1274: few ISSET calls Split mode into mode and flags and retire the
1275: now-obsolete excl variable
1276:
1277: 2008-03-18 16:04 millert
1278:
1279: * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1280: sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1281:
1282: 2008-03-18 15:59 millert
1283:
1284: * sudo.c: Move version printing, etc. into a separate function.
1285:
1286: 2008-03-18 15:57 millert
1287:
1288: * sudo.c: Don't try to cleanup nsswitch if it has not been
1289: initialized.
1290:
1291: 2008-03-17 11:09 millert
1292:
1293: * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1294: a problem executing the mailer.
1295:
1296: 2008-03-14 08:11 millert
1297:
1298: * configure.in, configure: AIX shared libs end in .a, not .so.
1299:
1300: 2008-03-13 07:34 millert
1301:
1302: * env.c: Preserve HOME by default too. Matches documentation and
1303: previous behavior.
1304:
1305: 2008-03-12 19:42 millert
1306:
1307: * sudo.c: Use getopt() to parse the command line. We need to be
1308: able to intersperse env variables and options yet still honor
1309: "--"" which complicates things slightly.
1310:
1311: 2008-03-06 14:46 millert
1312:
1313: * ChangeLog: sync
1314:
1315: 2008-03-06 14:43 millert
1316:
1317: * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1318:
1319: 2008-03-06 14:32 millert
1320:
1321: * config.guess, config.sub: update from libtool-1.5.26 distribution
1322:
1323: 2008-03-06 13:18 millert
1324:
1325: * aix.c, sudo.h: attempt to fix compilation errors on AIX
1326:
1327: 2008-03-06 13:08 millert
1328:
1329: * Makefile.in: fix typo in last commit
1330:
1331: 2008-03-06 13:07 millert
1332:
1333: * Makefile.in: Add WHATSNEW file to the distribution
1334:
1335: 2008-03-06 12:43 millert
1336:
1337: * visudo.c: use warningx instead of fprintf(stderr, ...)
1338:
1339: 2008-03-06 12:31 millert
1340:
1341: * list.c: add DEBUG to list2tq
1342:
1343: 2008-03-06 12:28 millert
1344:
1345: * ChangeLog, TODO: sync
1346:
1347: 2008-03-06 12:21 millert
1348:
1349: * WHATSNEW: mention mailfrom
1350:
1351: 2008-03-06 12:19 millert
1352:
1353: * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1354: sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1355: using a combination of getuserattr() and setrlimit(). Currently
1356: untested.
1357:
1358: 2008-03-05 16:52 millert
1359:
1360: * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1361: sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1362: sets the value of the From: field in the warning/error mail. If
1363: unset the login name of the invoking user is used.
1364:
1365: 2008-03-05 16:18 millert
1366:
1367: * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1368: that is freeable
1369:
1370: 2008-03-05 15:19 millert
1371:
1372: * gram.c, gram.y: When adding a default, only call list2tq() once
1373: to do the list to tq conversion. It is not legal to call list2tq
1374: multiple times on the same list since list2tq consumes and
1375: modifies the list argument.
1376:
1377: 2008-03-05 09:38 millert
1378:
1379: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1380: out XXXs for now
1381:
1382: 2008-03-05 09:36 millert
1383:
1384: * WHATSNEW: mention askpass
1385:
1386: 2008-03-04 17:20 millert
1387:
1388: * sudo.c: Error out if both -A and -S are specified Error out if -A
1389: is specified but no askpass is configured
1390:
1391: 2008-03-04 17:16 millert
1392:
1393: * configure, configure.in: we are not going to ship a sudo-specific
1394: askpass
1395:
1396: 2008-03-03 14:30 millert
1397:
1398: * sudo.h: fix definition of TGP_ASKPASS
1399:
1400: 2008-03-03 13:54 millert
1401:
1402: * def_data.c, def_data.in: make askpass boolean-capable
1403:
1404: 2008-03-03 13:53 millert
1405:
1406: * INSTALL: document --with-askpass
1407:
1408: 2008-03-02 19:27 millert
1409:
1410: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1411: sudoers.ldap.cat, visudo.cat: regen
1412:
1413: 2008-03-02 17:31 millert
1414:
1415: * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1416:
1417: 2008-03-02 09:31 millert
1418:
1419: * check.c, configure, configure.in, def_data.c, def_data.h,
1420: def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1421: sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1422: running a helper program to read the password when no tty is
1423: present (or when specified with the -A flag). TODO: docs.
1424:
1425: 2008-03-02 08:38 millert
1426:
1427: * def_data.c, def_data.in: add missing printf format to SELinux
1428: role and type strings
1429:
1430: 2008-02-27 09:26 millert
1431:
1432: * INSTALL, configure, configure.in: Disable use of
1433: gss_krb5_ccache_name() by default and add
1434: --enable-gss-krb5-ccache-name configure option to enable it. It
1435: seems that gss_krb5_ccache_name() doesn't work properly with some
1436: combinations of Heimdal and OpenLDAP.
1437:
1438: 2008-02-22 15:33 millert
1439:
1440: * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1441: add a call to setkeycreatecon() (though this is probably
1442: insufficient). From Dan Walsh.
1443:
1444: 2008-02-22 15:19 millert
1445:
1446: * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1447: conversation function may be called for non-password reading
1448: purposes so we must be careful not to use def_prompt in cases
1449: where it may not be set.
1450:
1451: 2008-02-20 12:00 millert
1452:
1453: * selinux.c: Don't free the new tty context, we need to keep it
1454: around when we restore the tty context after the command
1455: completes
1456:
1457: 2008-02-19 16:04 millert
1458:
1459: * selinux.c: s/newrole/sudo/
1460:
1461: 2008-02-19 13:21 millert
1462:
1463: * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1464: if we have login.conf support
1465:
1466: 2008-02-18 11:05 millert
1467:
1468: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1469: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1470: regen
1471:
1472: 2008-02-18 10:53 millert
1473:
1474: * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1475: sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1476: lines partaining to login.conf, BSD auth and SELinux and only
1477: enable them if pertinent.
1478:
1479: 2008-02-18 10:42 millert
1480:
1481: * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1482: Remove the =cut on the first line (above the copyright notice) to
1483: quiet pod2man. Also remove the hackery in the FILES section and
1484: just deal with the fact that there will a newline between each
1485: pathname.
1486:
1487: 2008-02-17 08:19 millert
1488:
1489: * Makefile.in: run sudo.man.pl when generating sudo.man.in
1490:
1491: 2008-02-17 08:11 millert
1492:
1493: * configure, configure.in, sudo.man.pl: comment out SELinux manual
1494: bits unless --with-selinux was specified
1495:
1496: 2008-02-17 08:04 millert
1497:
1498: * sudoers.pod: document role and type defaults for SELinux
1499:
1500: 2008-02-16 20:26 millert
1501:
1502: * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1503: Document "sudo -ll" and make "sudo -l -l" be equivalent.
1504:
1505: 2008-02-15 15:23 millert
1506:
1507: * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1508: Fixes compilation problems on Debian GNU/kFreeBSD.
1509:
1510: 2008-02-13 17:17 millert
1511:
1512: * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1513: rewrite of verify_krb_v5_tgt()
1514:
1515: 2008-02-13 07:28 millert
1516:
1517: * logging.c, logging.h, sudo.c: Remove dependence on
1518: VALIDATE_NOT_OK in logging functions. Split log_auth() into
1519: log_allowed() and log_denial() Replace mail_auth() with
1520: should_mail() and a call to send_mail()
1521:
1522: 2008-02-10 18:06 millert
1523:
1524: * ldap.c: Add debugging so we can tell if the krb5 ccache is
1525: accessible
1526:
1527: 2008-02-10 17:34 millert
1528:
1529: * INSTALL: mention --with-selinux
1530:
1531: 2008-02-09 09:48 millert
1532:
1533: * configure: regen
1534:
1535: 2008-02-09 09:43 millert
1536:
1537: * selinux.c: add Sudo tag
1538:
1539: 2008-02-09 09:30 millert
1540:
1541: * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1542: def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1543: pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1544: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1545: sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1546: toke.l: Add support for SELinux RBAC. Sudoers entries may
1547: specify a role and type. There are also role and type defaults
1548: that may be used. To make sure a transition occurs, when using
1549: RBAC commands are executed via the new sesh binary. Based on
1550: initial changes from Dan Walsh.
1551:
1552: 2008-02-08 08:18 millert
1553:
1554: * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1555: list (sudo -ll) support for printing verbose LDAP and sudoers
1556: file entries. Still need to update manual.
1557:
1558: 2008-02-03 10:43 millert
1559:
1560: * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1561: output for file and ldap based sudoers and use lbufs for both.
1562: The ldap output does not currently include options that cannot be
1563: represented as tags. This will be remedied in a long list output
1564: mode to come.
1565:
1566: 2008-01-27 16:37 millert
1567:
1568: * set_perms.c: Use a specific error message for errno == EAGAIN
1569: when setuid() et al fails. On Linux systems setuid() will fail
1570: with errno set to EAGAIN if changing to the new uid would result
1571: in a resource limit violation.
1572:
1573: 2008-01-27 16:34 millert
1574:
1575: * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1576: family of syscalls causes the nroc resource limit to be checked.
1577: The limits will be reset by pam_limits.so when PAM is used. In
1578: the non-PAM case the nproc limit will remain unlimited but there
1579: doesn't seem to be a way around that other than having sudo parse
1580: /etc/security/limits.conf directly.
1581:
1582: 2008-01-27 16:31 millert
1583:
1584: * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1585: AIX
1586:
1587: 2008-01-23 06:33 millert
1588:
1589: * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1590: AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1591: from going into config.h. Avoid single quotes in variable
1592: expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1593: of bash they will end up literally in the resulting define.
1594:
1595: 2008-01-21 13:22 millert
1596:
1597: * README.LDAP: mention --with-nsswitch=no
1598:
1599: 2008-01-21 11:43 millert
1600:
1601: * configure, configure.in: ldap_ssl.h depends on ldap.h being
1602: included first
1603:
1604: 2008-01-21 11:07 millert
1605:
1606: * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1607: if we can find it. Needed for the ldapssl_set_strength defines
1608: on HP-UX at least.
1609:
1610: 2008-01-21 10:02 millert
1611:
1612: * TODO, sudoers.ldap.pod: sync
1613:
1614: 2008-01-21 10:01 millert
1615:
1616: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1617: sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1618: regen
1619:
1620: 2008-01-21 10:00 millert
1621:
1622: * Makefile.in: Use 78n line length when formatting cat pages.
1623:
1624: 2008-01-21 09:50 millert
1625:
1626: * README.LDAP: Remove redundant info that is now in
1627: sudoers.ldap.pod
1628:
1629: 2008-01-20 16:18 millert
1630:
1631: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1632: Reorganize the first section a bit. Substitute the proper path
1633: for /etc/sudoers.
1634:
1635: 2008-01-20 10:17 millert
1636:
1637: * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1638: Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1639: Move schema into EXAMPLES
1640:
1641: 2008-01-20 10:15 millert
1642:
1643: * configure.in, configure: Substitute values for ldap.conf,
1644: ldap.secret and nsswitch.conf into sudoers.ldap.man.
1645:
1646: 2008-01-19 20:35 millert
1647:
1648: * configure, configure.in: substitute for sudoers.ldap.man
1649:
1650: 2008-01-19 20:34 millert
1651:
1652: * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1653: man page.
1654:
1655: 2008-01-19 20:25 millert
1656:
1657: * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1658: some of the missing pieces. Still needs some reorganization and
1659: editing.
1660:
1661: 2008-01-19 15:06 millert
1662:
1663: * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1664: sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1665: Currently, much of the information is adapted from README.LDAP.
1666:
1667: 2008-01-18 17:32 millert
1668:
1669: * pwutil.c: When copying gr_mem we must guarantee that the storage
1670: space for gr_mem is properly aligned. The simplest way to do
1671: this is to simply store gr_mem directly after struct group. This
1672: is not a problem for gr_passwd or gr_name as they are simple
1673: strings.
1674:
1675: 2008-01-18 16:47 millert
1676:
1677: * ldap.c: Fix a typo/thinko in one of the calls to
1678: sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1679:
1680: 2008-01-17 15:44 millert
1681:
1682: * config.h.in, configure, configure.in, ldap.c: include
1683: <mps/ldap_ssl.h> in ldap.c if available
1684:
1685: 2008-01-16 18:20 millert
1686:
1687: * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1688: skeleton.c
1689:
1690: 2008-01-16 13:03 millert
1691:
1692: * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1693: echo) to guarantee that any pending output is discarded
1694:
1695: 2008-01-15 17:18 millert
1696:
1697: * sudoers: no longer need to specify SETENV when user has sudo ALL
1698:
1699: 2008-01-15 09:40 millert
1700:
1701: * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1702: group option, renaming old -g to -G Add set_runasgr() and
1703: set_runaspw() and use them
1704:
1705: 2008-01-15 09:23 millert
1706:
1707: * sudo.h, sudo.c: Make set_runaspw static void
1708:
1709: 2008-01-15 09:17 millert
1710:
1711: * testsudoers.c, visudo.c: g/c set_runaspw stub
1712:
1713: 2008-01-15 07:28 millert
1714:
1715: * configure, configure.in: Don't add -llber twice.
1716:
1717: 2008-01-14 06:40 millert
1718:
1719: * ldap.c: fix typo
1720:
1721: 2008-01-13 15:39 millert
1722:
1723: * gram.c: regen
1724:
1725: 2008-01-13 14:57 millert
1726:
1727: * configure, configure.in: Fix check that determines whether -llber
1728: is required.
1729:
1730: 2008-01-13 14:22 millert
1731:
1732: * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1733: netscape-based LDAP, use ldapssl_set_strength() to implement the
1734: checkpeer ldap.conf option.
1735:
1736: 2008-01-13 09:49 millert
1737:
1738: * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1739: to use the cred cache, which is what krb5_verify_user() does.
1740: Better cleanup on failure.
1741:
1742: 2008-01-12 12:40 millert
1743:
1744: * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1745: krb5_verify_user() does.
1746:
1747: 2008-01-09 14:58 millert
1748:
1749: * gram.c: The U suffix on constants is an ANSI feature
1750:
1751: 2008-01-09 12:08 millert
1752:
1753: * configure.in, configure: Add check for ber_set_option() in -llber
1754:
1755: 2008-01-06 19:02 millert
1756:
1757: * README.LDAP: default if no nsswitch.conf is files only
1758:
1759: 2008-01-06 17:28 millert
1760:
1761: * README.LDAP: don't tell people to mail aaron about LDAP stuff
1762:
1763: 2008-01-06 12:32 millert
1764:
1765: * README.LDAP: timelimit and bind_timelimit
1766:
1767: 2008-01-06 08:54 millert
1768:
1769: * ChangeLog: sync
1770:
1771: 2008-01-06 07:56 millert
1772:
1773: * ldap.c: Move ldap.secret reading into a separate function.
1774:
1775: 2008-01-05 19:09 millert
1776:
1777: * check.c: user_runas -> runas_pw
1778:
1779: 2008-01-05 18:59 millert
1780:
1781: * TODO: sync
1782:
1783: 2008-01-05 18:59 millert
1784:
1785: * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1786: the password prompt. Based on a patch from Patrick Schoenfeld.
1787:
1788: 2008-01-05 18:25 millert
1789:
1790: * ldap.c: Check strlcpy() return values.
1791:
1792: 2008-01-05 18:12 millert
1793:
1794: * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1795:
1796: 2008-01-05 16:35 millert
1797:
1798: * README.LDAP: Make it clear that host and uri can take multiple
1799: parameters. URI is now supported for more than just openldap
1800: nsswitch.conf does't accept "compat"
1801:
1802: 2008-01-05 16:27 millert
1803:
1804: * sudo.c: comment cleanup and update (c) year
1805:
1806: 2008-01-05 16:25 millert
1807:
1808: * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1809: parse.c to sudo_nss.c. This should make it possible to build an
1810: LDAP-only sudo binary.
1811:
1812: 2008-01-05 13:27 millert
1813:
1814: * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1815: multiple sudoers sources by passing in the previous return value
1816: to the next in the chain
1817:
1818: 2008-01-05 13:26 millert
1819:
1820: * gram.y: Free up parser data structures in sudo_file_close().
1821:
1822: 2008-01-05 08:13 millert
1823:
1824: * gram.c, parse.c: Free up parser data structures in
1825: sudo_file_close().
1826:
1827: 2008-01-05 07:59 millert
1828:
1829: * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1830: ldap_create() instead of deprecated ldap_init() Use
1831: ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1832:
1833: 2008-01-05 07:56 millert
1834:
1835: * config.h.in, configure, configure.in: Add check for
1836: ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1837:
1838: 2008-01-04 09:56 millert
1839:
1840: * configure.in, configure, config.h.in: add check for ldap_create
1841:
1842: 2008-01-03 16:11 millert
1843:
1844: * config.h.in, configure, configure.in, ldap.c: Add
1845: sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1846: dn using the mechanism appropriate for the LDAP SDK in use. Use
1847: ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1848: Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1849: without them.
1850:
1851: 2008-01-03 16:02 millert
1852:
1853: * lbuf.c: include unistd.h
1854:
1855: 2008-01-03 11:05 millert
1856:
1857: * config.h.in, configure.in: fix typo in mtim_getnsec
1858:
1859: 2008-01-02 15:29 millert
1860:
1861: * config.h.in, configure.in, configure: add check for st__tim in
1862: struct stat as used by SCO
1863:
1864: 2008-01-02 11:05 millert
1865:
1866: * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1867:
1868: 2008-01-02 10:09 millert
1869:
1870: * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1871:
1872: 2008-01-01 19:04 millert
1873:
1874: * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1875: ldap_str2dn() and ldap_rdn2str().
1876:
1877: 2008-01-01 18:37 millert
1878:
1879: * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1880: of the deprecated ldap_get_values()/ldap_value_free().
1881:
1882: 2008-01-01 17:07 millert
1883:
1884: * TODO, ChangeLog: sync
1885:
1886: 2008-01-01 17:06 millert
1887:
1888: * gettime.c, sudo.c: Remove some already fixed XXXs
1889:
1890: 2008-01-01 17:03 millert
1891:
1892: * ldap.c: Same return value as non-existent sudoers if LDAP was
1893: unable to connect.
1894:
1895: 2008-01-01 16:52 millert
1896:
1897: * sudo.pod: mention /etc/environment
1898:
1899: 2008-01-01 16:42 millert
1900:
1901: * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1902: developments.
1903:
1904: 2008-01-01 16:42 millert
1905:
1906: * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1907: -V output.
1908:
1909: 2008-01-01 16:25 millert
1910:
1911: * ldap.c: When building up a query don't list groups in the aux
1912: group vector that are the same as the passwd file group. On most
1913: systems the first gid in the group vector is the same as the
1914: passwd entry gid.
1915:
1916: 2008-01-01 14:01 millert
1917:
1918: * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1919: to disable user ldaprc and system defaults that could affect how
1920: LDAP works.
1921:
1922: 2008-01-01 13:21 millert
1923:
1924: * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1925: sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1926: --with-nsswitch to allow users to specify nsswitch.conf path or
1927: disable it. If --with-nsswitch=no but --with-ldap, order is
1928: LDAP, then sudoers. Fix --with-ldap-conf-file and
1929: --with-ldap-secret-file
1930:
1931: 2008-01-01 13:12 millert
1932:
1933: * parse.c: Honor def_ignore_local_sudoers
1934:
1935: 2007-12-31 16:44 millert
1936:
1937: * ldap.c: no longer need to check def_ignore_local_sudoers here
1938:
1939: 2007-12-31 16:36 millert
1940:
1941: * parse.c: Refactor group vector resetting into a function and also
1942: call it from display_cmnd. Stop after the first sucessful match
1943: in display_cmnd. Print a newline between each display_privs
1944: method.
1945:
1946: 2007-12-31 16:23 millert
1947:
1948: * parse.c: fix double free introduced in rev 1.218
1949:
1950: 2007-12-31 16:10 millert
1951:
1952: * ldap.c: belt and suspenders; zero out result after freeing it
1953:
1954: 2007-12-31 15:04 millert
1955:
1956: * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1957: reading into a separate function, sudo_parseln(), which removes
1958: comments, leading/trailing whitespace and newlines. May want to
1959: rethink the use of sudo_parseln() for /etc/ldap.secret
1960:
1961: 2007-12-31 14:26 millert
1962:
1963: * parse.c, sudo.c: Make the inability to read the sudoers file a
1964: non-fatal error if there are other sudoers sources available.
1965: sudoers_file_lookup now returns "not OK" if sudoers was not
1966: present
1967:
1968: 2007-12-31 14:24 millert
1969:
1970: * ldap.c: make it clear that the global options are from LDAP
1971:
1972: 2007-12-31 14:13 millert
1973:
1974: * logging.c: allocate proper amount of space for error string
1975:
1976: 2007-12-31 10:24 millert
1977:
1978: * sudo_nss.c, sudo_nss.h: actual sudo nss code
1979:
1980: 2007-12-31 10:08 millert
1981:
1982: * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
1983: display_cmnd.
1984:
1985: 2007-12-31 07:54 millert
1986:
1987: * defaults.c, parse.c, testsudoers.c, visudo.c: move
1988: update_defaults() to parse.c
1989:
1990: 2007-12-31 07:39 millert
1991:
1992: * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
1993: Use nsswitch to hide some sudoers vs. ldap implementation details
1994: and reduce the number of #ifdef LDAP TODO: fix display routines
1995: and error handling
1996:
1997: 2007-12-28 11:20 millert
1998:
1999: * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2000: First cut at nsswitch.conf support. Further reorganizaton and
2001: related changes are forthcoming.
2002:
2003: 2007-12-21 16:53 millert
2004:
2005: * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2006: and /etc/environment file. Still needs to be documented and
2007: should probably only applies to OSes that have it (AIX and Linux,
2008: maybe others).
2009:
2010: 2007-12-21 16:20 millert
2011:
2012: * ldap.c: include limits.h
2013:
2014: 2007-12-20 10:02 millert
2015:
2016: * WHATSNEW: reword LDAP SASL
2017:
2018: 2007-12-19 16:40 millert
2019:
2020: * TODO: sync
2021:
2022: 2007-12-19 16:39 millert
2023:
2024: * README.LDAP: Add an example sudoRole, clarify netscape vs.
2025: openldap a bit more
2026:
2027: 2007-12-19 14:42 millert
2028:
2029: * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2030:
2031: 2007-12-19 14:28 millert
2032:
2033: * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2034: for ldaps support instead of trying to do it manually with
2035: ldap_init() + ldapssl_install_routines(). Use tls_cert and
2036: tls_key for cert7.db and key3.db respectively. Don't print
2037: debugging info for options that are not set. Add warning if
2038: start_tls specified when not supported.
2039:
2040: 2007-12-19 14:25 millert
2041:
2042: * ldap.c: fix compilation on solaris
2043:
2044: 2007-12-19 14:23 millert
2045:
2046: * Makefile.in: add missing .h and .c files for missing lib objs
2047:
2048: 2007-12-18 09:54 millert
2049:
2050: * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2051:
2052: 2007-12-17 20:10 millert
2053:
2054: * ldap.c: fix compilation on Solaris
2055:
2056: 2007-12-17 10:14 millert
2057:
2058: * configure, configure.in: fix typo
2059:
2060: 2007-12-17 08:08 millert
2061:
2062: * README.LDAP: try to clear up which variables are for OpenLDAP and
2063: which are for netscape-derived SDKs
2064:
2065: 2007-12-17 07:31 millert
2066:
2067: * config.h.in, configure, configure.in, ldap.c: Add support for
2068: "ssl on" in both netscape and openldap flavors. Only the
2069: OpenLDAP flavor has been tested.
2070:
2071: 2007-12-17 07:28 millert
2072:
2073: * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2074: log_error() instead of calling sudo_ldap_close() directly.
2075: ldap_conn can now be static to sudo.c
2076:
2077: 2007-12-16 20:02 millert
2078:
2079: * sudo.c: ld -> ldap_conn
2080:
2081: 2007-12-16 14:42 millert
2082:
2083: * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2084:
2085: 2007-12-16 14:08 millert
2086:
2087: * ldap.c: Distinguish between LDAP conf settings that are
2088: connection-specific (which take an ld pointer) and those that are
2089: default settings (which do not).
2090:
2091: 2007-12-14 16:46 millert
2092:
2093: * ldap.c: Improved warnings on error.
2094:
2095: 2007-12-14 15:59 millert
2096:
2097: * ldap.c: Make ldap config table driven and set the config *after*
2098: we open the connection.
2099:
2100: 2007-12-13 16:41 millert
2101:
2102: * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2103:
2104: 2007-12-13 09:13 millert
2105:
2106: * configure, configure.in: some operating systems need to link with
2107: -lkrb5support when using krb5
2108:
2109: 2007-12-10 17:12 millert
2110:
2111: * WHATSNEW: minor update
2112:
2113: 2007-12-10 10:56 millert
2114:
2115: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2116:
2117: 2007-12-07 19:17 millert
2118:
2119: * TODO, ChangeLog: sync
2120:
2121: 2007-12-07 19:09 millert
2122:
2123: * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2124: support for LDAP
2125:
2126: 2007-12-03 11:36 millert
2127:
2128: * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2129: can now take an optional command.
2130:
2131: 2007-12-02 12:13 millert
2132:
2133: * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2134: sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2135: that will cause the prompt to be overridden in all cases. This
2136: flag is also set when the user specifies the -p flag.
2137:
2138: 2007-12-01 19:51 millert
2139:
2140: * sudo.c: Move setting of login class until after sudoers has been
2141: parsed. Set NewArgv[0] for -i after runas_pw has been set.
2142:
2143: 2007-12-01 19:34 millert
2144:
2145: * configure, configure.in: Move the dgettext check.
2146:
2147: 2007-12-01 11:22 millert
2148:
2149: * config.h.in, configure, configure.in, auth/pam.c: Add basic
2150: support for looking up the string "Password: " in the PAM
2151: localized text db. This allows us to determine whether the PAM
2152: prompt is the default "Password: " one even if it has been
2153: localized.
2154:
2155: TODO: concatenate non-std PAM prompts and user-specified sudo
2156: prompts.
2157:
2158: 2007-11-27 18:40 millert
2159:
2160: * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2161: sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2162: home-grown attempt that was insufficient.
2163:
2164: 2007-11-27 12:13 millert
2165:
2166: * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2167: Martynas Venckus
2168:
2169: 2007-11-25 19:26 millert
2170:
2171: * set_perms.c: Don't assume runas_pw is set; it may not be in the
2172: -g case.
2173:
2174: 2007-11-25 08:07 millert
2175:
2176: * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2177: restore group vector for PERM_ROOT if we previously changed it.
2178: Stash the runas group vector so we don't have to call initgroups
2179: more than once. Also add no-op check to check_perms.
2180:
2181: 2007-11-21 15:11 millert
2182:
2183: * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2184: gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2185: parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2186: sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2187: sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2188: visudo.cat, visudo.man.in: Add support for runas groups. This
2189: allows the user to run a command with a different effective
2190: group. If the -g option is specified without -u the command will
2191: be run as the current user (only the group will change). the -g
2192: and -u options may be used together. TODO: implement runas group
2193: for ldap improve runas group documentation add
2194: testsudoers support
2195:
2196: 2007-11-21 15:02 millert
2197:
2198: * configure, configure.in: fix setting of mandir
2199:
2200: 2007-11-21 14:26 millert
2201:
2202: * sudo.pod, sudoers.pod: document that ALL implies SETENV
2203:
2204: 2007-11-21 13:50 millert
2205:
2206: * ldap.c: s/setenv_ok/setenv_implied/g
2207:
2208: 2007-11-21 13:44 millert
2209:
2210: * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2211:
2212: 2007-11-21 13:26 millert
2213:
2214: * ldap.c: use strcmp, not strcasecmp when comparing ALL
2215:
2216: 2007-11-21 11:41 millert
2217:
2218: * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2219: file-based sudoers this does affect all the commands in the
2220: sudoRole.
2221:
2222: 2007-11-21 11:05 millert
2223:
2224: * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2225: SETENV tag but, unlike an explicit tag, it is not passed on to
2226: other commands in the list.
2227:
2228: 2007-11-21 11:02 millert
2229:
2230: * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2231: Also use sudo_getpwuid() instead of getpwuid().
2232:
2233: 2007-11-15 11:16 millert
2234:
2235: * sudoers: Expand on the dangers of not using visudo to edit
2236: sudoers.
2237:
2238: 2007-11-08 07:24 millert
2239:
2240: * parse.c: Don't quote *?[]! on output since the lexer does not
2241: strip off the backslash when reading those in.
2242:
2243: 2007-11-07 13:16 millert
2244:
2245: * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2246: compatibility issues.
2247:
2248: 2007-11-04 08:33 millert
2249:
2250: * logging.c: Refactor log line generation in to new_logline().
2251:
2252: 2007-10-25 09:23 millert
2253:
2254: * TROUBLESHOOTING: fix typo
2255:
2256: 2007-10-24 12:41 millert
2257:
2258: * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2259: match.c: Add configure check for struct in6_addr instead of
2260: relying on AF_INET6 since some systems define AF_INET6 but do not
2261: include IPv6 support.
2262:
2263: 2007-10-21 09:29 millert
2264:
2265: * configure, configure.in: Fix block to add -lutil for FreeBSD and
2266: NetBSD when logincap is in use.
2267:
2268: 2007-10-19 22:28 millert
2269:
2270: * configure, configure.in: POSIX states that struct timespec be
2271: declared in time.h so check there regardless of the value of
2272: TIME_WITH_SYS_TIME.
2273:
2274: 2007-10-17 11:37 millert
2275:
2276: * tgetpass.c: Instead of defining a macro to call the appropriate
2277: method for turning on/off echo, just define tc[gs]etattr() and
2278: the related defines that use the correct terminal ioctls if
2279: needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2280: all but QNX.
2281:
2282: 2007-10-08 20:18 millert
2283:
2284: * Makefile.in: g/c @ALLOCA@
2285:
2286: 2007-10-08 20:07 millert
2287:
2288: * configure: regen
2289:
2290: 2007-10-08 20:04 millert
2291:
2292: * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2293: --disable-pam-session configure option to disable calling
2294: pam_{open,close}_session. May work around bugs in some PAM
2295: implementations.
2296:
2297: 2007-10-08 12:00 millert
2298:
2299: * tgetpass.c: quiet gcc warnings
2300:
2301: 2007-10-08 08:41 millert
2302:
2303: * tgetpass.c: Avoid printing the prompt if we are already
2304: backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2305: In this case, the call to tcsetattr() will cause SIGTTOU to be
2306: delivered.
2307:
2308: 2007-09-15 16:07 millert
2309:
2310: * def_data.c, def_data.h, def_data.in: Reorder things such that the
2311: definition of env_reset come right before the env variable lists.
2312:
2313: 2007-09-15 07:50 millert
2314:
2315: * parse.h: Shrink type and seqno in struct alias from int to
2316: u_short
2317:
2318: 2007-09-15 07:24 millert
2319:
2320: * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2321: aliases for loop detection. If we find an alias with the seqno
2322: already set to the current (global) value we know we've visited
2323: it before so ignore it.
2324:
2325: 2007-09-13 19:05 millert
2326:
2327: * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2328: add user_ttypath which holds the full path to the tty or is NULL
2329: if no tty was present.
2330:
2331: 2007-09-13 18:42 millert
2332:
2333: * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2334: lower that results in a segv.
2335:
2336: 2007-09-11 15:43 millert
2337:
2338: * gram.c: regen
2339:
2340: 2007-09-11 15:42 millert
2341:
2342: * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2343: parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2344:
2345: 2007-09-10 17:33 millert
2346:
2347: * alloc.c: remove some useless casts
2348:
2349: 2007-09-10 17:32 millert
2350:
2351: * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2352: inttypes.h predates the final C99 spec and the standard specifies
2353: that it shall include stdint.h anyway
2354:
2355: 2007-09-06 12:39 millert
2356:
2357: * Makefile.in, alloca.c, configure.in: Since we ship with a
2358: pre-generated parser there is no need to ship a bogus alloca
2359: implementation.
2360:
2361: 2007-09-06 12:22 millert
2362:
2363: * configure: regen
2364:
2365: 2007-09-06 12:19 millert
2366:
2367: * configure.in: remove initial setting of CHECKSIA, we require that
2368: it be unset if not used
2369:
2370: 2007-09-06 11:55 millert
2371:
2372: * Makefile.in: add list.c to SRCS
2373:
2374: 2007-09-06 07:18 millert
2375:
2376: * configure: regen
2377:
2378: 2007-09-06 07:17 millert
2379:
2380: * configure.in: only do SIA checks on Digital Unix
2381:
2382: 2007-09-05 18:50 millert
2383:
2384: * sudoers.cat, sudoers.man.in: regen
2385:
2386: 2007-09-05 18:48 millert
2387:
2388: * ChangeLog, TODO: sync
2389:
2390: 2007-09-05 18:39 millert
2391:
2392: * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2393: needed for modern kerb5.
2394:
2395: 2007-09-05 18:16 millert
2396:
2397: * configure: regen
2398:
2399: 2007-09-05 18:16 millert
2400:
2401: * configure.in, aclocal.m4: New method for setting the default
2402: authentication type and avoiding conflicts in auth types.
2403:
2404: 2007-09-05 14:45 millert
2405:
2406: * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2407: an associated runaslist so no need to keep track of the most
2408: recent non-NULL one.
2409:
2410: 2007-09-04 18:51 millert
2411:
2412: * ldap.c: back out partial ldaps support mistakenly committed
2413:
2414: 2007-09-04 10:57 millert
2415:
2416: * ldap.c: Add support for unix groups and netgroups in sudoRunas
2417:
2418: 2007-09-03 16:28 millert
2419:
2420: * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2421: Stritzky.
2422:
2423: 2007-09-02 17:05 millert
2424:
2425: * configure: regen
2426:
2427: 2007-09-02 17:05 millert
2428:
2429: * INSTALL: update --passprompt escape info
2430:
2431: 2007-09-02 17:03 millert
2432:
2433: * configure.in: remove now-bogus comment and update copyright date
2434:
2435: 2007-09-02 16:35 millert
2436:
2437: * configure.in: Fix up use of with_passwd
2438:
2439: 2007-09-02 16:25 millert
2440:
2441: * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2442: Update to autoconf-2.61 andf libtool-1.5.24
2443:
2444: 2007-09-02 16:17 millert
2445:
2446: * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2447: autoconf-2.61
2448:
2449: 2007-09-01 17:39 millert
2450:
2451: * gram.c: regen
2452:
2453: 2007-09-01 17:39 millert
2454:
2455: * gram.y: move tags and runaslist propagation to be earlier
2456:
2457: 2007-09-01 09:34 millert
2458:
2459: * visudo.c: If -f flag given use the permissions of the original
2460: file as a template
2461:
2462: 2007-09-01 08:45 millert
2463:
2464: * gram.y: prevent a double free() when re-initing the parser
2465:
2466: 2007-08-31 19:30 millert
2467:
2468: * configure: regen
2469:
2470: 2007-08-31 19:30 millert
2471:
2472: * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2473: ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2474: redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2475: testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2476: auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2477: auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2478: Remove support for compilers that don't support void *
2479:
2480: 2007-08-31 19:14 millert
2481:
2482: * gram.c: regen
2483:
2484: 2007-08-31 19:13 millert
2485:
2486: * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2487: match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2488: manipulation macros to list.h and create C versions of the more
2489: complex ones in list.c. The names have been down-cased so they
2490: appear more like normal functions.
2491:
2492: 2007-08-31 17:21 millert
2493:
2494: * Makefile.in: Fix cmp command when regenerating parser. Make
2495: gram.o the first dependency for all programs so gram.h will be
2496: generated before anything that needs it.
2497:
2498: 2007-08-31 13:56 millert
2499:
2500: * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2501: functions.
2502:
2503: 2007-08-30 21:21 millert
2504:
2505: * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2506: permission and short-circuit on the first non-UNSPEC hit we get
2507: for the command. This means that instead of cycling through the
2508: all the parsed sudoers entries we start at the end and work
2509: backwards and quit after the first positive or negative match.
2510:
2511: 2007-08-30 21:13 millert
2512:
2513: * gram.c: regen
2514:
2515: 2007-08-30 21:12 millert
2516:
2517: * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2518: Change list head macros to take a pointer, not a struct.
2519:
2520: 2007-08-30 20:46 millert
2521:
2522: * gram.c: regen
2523:
2524: 2007-08-30 20:46 millert
2525:
2526: * gram.y: Propagate the runasspec from one command to the next in a
2527: cmndspec.
2528:
2529: 2007-08-30 16:15 millert
2530:
2531: * match.c: Replace has_meta() with a macro that calls strpbrk().
2532:
2533: 2007-08-30 16:04 millert
2534:
2535: * gram.c: regen
2536:
2537: 2007-08-30 13:26 millert
2538:
2539: * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2540: testsudoers.c, visudo.c: Use a list head struct when storing the
2541: semi-circular lists and convert to tail queues in the process.
2542: This will allow us to reverse foreach loops more easily and it
2543: makes it clearer which functions expect a list as opposed to a
2544: single member.
2545:
2546: Add macros for manipulating lists. Some of these should become
2547: functions.
2548:
2549: When freeing up a list, just pop off the last item in the queue
2550: instead of going from head to tail. This is simpler since we
2551: don't have to stash a pointer to the next member, we always just
2552: use the last one in the queue until the queue is empty.
2553:
2554: Rename match functions that take a list to have list in the name.
2555: Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2556:
2557: 2007-08-30 13:12 millert
2558:
2559: * parse.c: Fix pasto, append "!" not negated (which is an int) for
2560: sudo -l output.
2561:
2562: 2007-08-30 12:45 millert
2563:
2564: * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2565: dependency is enough. Only move y.tab.h to gram.h if it is
2566: different; avoids needless rebuilding.
2567:
2568: 2007-08-27 15:51 millert
2569:
2570: * sudoers.pod: Defaults lines may be associated with lists of
2571: users, hosts, commands and runas users, not just single entries.
2572:
2573: 2007-08-26 17:42 millert
2574:
2575: * Makefile.in: Revert the "cmp" portion of the last diff, it
2576: doesn't make sense.
2577:
2578: 2007-08-26 17:10 millert
2579:
2580: * Makefile.in: Remove *.lo for clean: When generating the parser,
2581: only move the generated files into place if they differ from the
2582: existing ones.
2583:
2584: 2007-08-24 22:47 millert
2585:
2586: * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2587: (readable) one and add an extra check when it matches to make
2588: sure we have a valid address.
2589:
2590: 2007-08-24 22:36 millert
2591:
2592: * match.c: Fix thinko introduced when merging IPV6 support.
2593:
2594: 2007-08-24 14:23 millert
2595:
2596: * HISTORY, LICENSE: regen
2597:
2598: 2007-08-24 14:23 millert
2599:
2600: * license.pod: add 2007
2601:
2602: 2007-08-24 14:19 millert
2603:
2604: * UPGRADE: mention #uid vs. comment pitfall
2605:
2606: 2007-08-24 09:50 millert
2607:
2608: * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2609: problem with the latest autoconf. From Stepan Kasal.
2610:
2611: 2007-08-23 20:28 millert
2612:
2613: * parse.h: Back out he XOR swap trick, it is slower than a temp
2614: variable on modern CPUs.
2615:
2616: 2007-08-23 20:14 millert
2617:
2618: * gram.c: regen
2619:
2620: 2007-08-23 20:14 millert
2621:
2622: * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2623: and use the XOR swap trick to swap the prev pointers during
2624: append.
2625:
2626: 2007-08-23 15:31 millert
2627:
2628: * parse.h: remove useless statement
2629:
2630: 2007-08-23 07:47 millert
2631:
2632: * toke.c, toke.l: Refactor #include parsing into a separate
2633: function and return unparsed chars (such as newline or comment)
2634: back to the lexer.
2635:
2636: 2007-08-22 18:56 millert
2637:
2638: * WHATSNEW: mention better uid support
2639:
2640: 2007-08-22 18:55 millert
2641:
2642: * sudoers.pod: Users may now consist of a uid.
2643:
2644: 2007-08-22 18:39 millert
2645:
2646: * gram.c, gram.h, toke.c: regen
2647:
2648: 2007-08-22 18:32 millert
2649:
2650: * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2651: characters that would require quoting in sudoers.
2652:
2653: 2007-08-22 18:31 millert
2654:
2655: * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2656: characters which should be quoted with a backslash when
2657: displayed.
2658:
2659: 2007-08-22 18:28 millert
2660:
2661: * toke.l: Require that the first character after a comment not be a
2662: digit or a dash. This allows us to remove the GOTRUNAS state and
2663: treat uid/gids similar to other words. It also means that we can
2664: now specify uids in User_Lists and a User_Spec may now contain a
2665: uid.
2666:
2667: 2007-08-22 18:23 millert
2668:
2669: * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2670: make the runas portion of the grammar more natural.
2671:
2672: 2007-08-22 06:35 millert
2673:
2674: * Makefile.in, README, BUGS: The BUGS file is history
2675:
2676: 2007-08-21 09:19 millert
2677:
2678: * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2679: character after the pound sign isn't a digit or a dash.
2680:
2681: 2007-08-20 20:43 millert
2682:
2683: * WHATSNEW: Glob support was back-ported to 1.6.9
2684:
2685: 2007-08-20 19:59 millert
2686:
2687: * Makefile.in: remove sudo_usage.h in distclean
2688:
2689: 2007-08-20 19:24 millert
2690:
2691: * parse.c: If a Defaults value contains a blank, double-quote the
2692: string.
2693:
2694: 2007-08-20 19:19 millert
2695:
2696: * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2697: that span multiple lines using the line continuation char.
2698: Previously, the entire thing, including the continuation char,
2699: newline, and spaces was stored as-is.
2700:
2701: 2007-08-20 10:46 millert
2702:
2703: * sudo.c: Be consistent when using single quotes and backticks.
2704:
2705: 2007-08-19 16:48 millert
2706:
2707: * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2708: sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2709: dynamically allocated strings and word-wrapped output. Currently
2710: used for sudo's usage() and sudo -l output. Sudo usage strings
2711: are now in sudo_usage.h which is generated at configure time.
2712:
2713: 2007-08-18 08:22 millert
2714:
2715: * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2716: actual tty width instead of assuming 80.
2717:
2718: 2007-08-17 18:32 millert
2719:
2720: * history.pod: some more info
2721:
2722: 2007-08-17 17:28 millert
2723:
2724: * history.pod: Mentioned Chris Jepeway's parser and also the new
2725: one that is in sudo 1.7.
2726:
2727: 2007-08-16 09:38 millert
2728:
2729: * sudo.pod, visudo.pod: For the options list, add flag args where
2730: appropriate and increase the indent level so there is room for
2731: them.
2732:
2733: 2007-08-15 13:49 millert
2734:
2735: * parse.c: Fix some spacing in "sudo -l" and add a comment about
2736: some bogosity in the line wrapping.
2737:
2738: 2007-08-15 11:21 millert
2739:
2740: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2741: visudo.man.in, visudo.cat: regen
2742:
2743: 2007-08-15 11:20 millert
2744:
2745: * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2746: def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2747: parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2748: testsudoers.c, toke.c, toke.l: Remove monitor support until there
2749: is a versino of systrace that uses a lookaside buffer (or we have
2750: a better mechanism to use).
2751:
2752: 2007-08-15 09:22 millert
2753:
2754: * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2755: instead of gethostbyname() if it is available
2756:
2757: 2007-08-14 15:27 millert
2758:
2759: * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2760: sizeof(int).
2761:
2762: 2007-08-14 11:19 millert
2763:
2764: * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2765:
2766: 2007-08-14 10:04 millert
2767:
2768: * sudo.c: If we can open sudoers but fail to read the first byte,
2769: close the file stream before trying again.
2770:
2771: 2007-08-13 12:34 millert
2772:
2773: * gram.c, toke.c: regen
2774:
2775: 2007-08-13 12:29 millert
2776:
2777: * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2778: Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2779:
2780: 2007-08-13 12:23 millert
2781:
2782: * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2783: copyright
2784:
2785: 2007-08-12 18:55 millert
2786:
2787: * configure, configure.in: fix sudo_noexec extension which got
2788: broken in the libtool update
2789:
2790: 2007-08-10 10:41 millert
2791:
2792: * Makefile.in: explicitly specify -Tascii to nroff
2793:
2794: 2007-08-08 16:07 millert
2795:
2796: * logging.c: remove an ANSI-ism that crept in
2797:
2798: 2007-08-06 20:37 millert
2799:
2800: * sudo.pod: Adjust list indents Prevent -- from being turned into
2801: an em dash Use a list for the environment instead of a literal
2802: paragraph
2803:
2804: 2007-08-06 20:36 millert
2805:
2806: * visudo.pod: Use a list for the environment instead of an indented
2807: literal paragraph.
2808:
2809: 2007-08-06 20:33 millert
2810:
2811: * sudoers.pod: Adjust list indentation
2812:
2813: 2007-08-06 20:31 millert
2814:
2815: * license.pod: add =head3
2816:
2817: 2007-08-06 10:24 millert
2818:
2819: * sudo.pod: mention that when specifying a uid for the -u option
2820: the shell may require that the # be escaped
2821:
2822: 2007-08-01 22:08 millert
2823:
2824: * match.c: Fix off by one in group matching.
2825:
2826: 2007-07-31 14:04 millert
2827:
2828: * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2829: David Krause.
2830:
2831: 2007-07-30 10:45 millert
2832:
2833: * configure, configure.in: Add missing define of
2834: HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2835:
2836: 2007-07-30 09:29 millert
2837:
2838: * aclocal.m4, configure.in, configure: Fix link tests such that new
2839: gcc doesn't optimize away the test.
2840:
2841: 2007-07-29 19:21 millert
2842:
2843: * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2844:
2845: 2007-07-29 19:09 millert
2846:
2847: * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2848: =item
2849:
2850: 2007-07-29 18:32 millert
2851:
2852: * env.c: Add back allocation of the env struct in rebuild_env but
2853: save a copy of the old pointer and free it before returning.
2854:
2855: 2007-07-29 16:09 millert
2856:
2857: * env.c: Don't init the private environment in rebuild_env() since
2858: it may have already been done implicitly
2859: sudo_setenv/sudo_unsetenv.
2860:
2861: Multiply length by sizeof(char *) in memcpy/memmove when copying
2862: the environment so we copy the full thing.
2863:
2864: Add missing set of parens so we deref the right pointer in
2865: sudo_unsetenv when searching for a matching variable.
2866:
2867: 2007-07-26 16:35 millert
2868:
2869: * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2870: the FILES section
2871:
2872: 2007-07-26 10:04 millert
2873:
2874: * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2875:
2876: 2007-07-26 07:28 millert
2877:
2878: * sudoers.pod: Sort sudoers options; based on a diff from Igor
2879: Sobrado.
2880:
2881: 2007-07-25 16:19 millert
2882:
2883: * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2884: @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2885: The Makefile rules for the .man.in file will add @mansectsu@ and
2886: @mansectform@ back in after pod2man is done anyway.
2887:
2888: 2007-07-22 19:09 millert
2889:
2890: * LICENSE, Makefile.in, license.pod: Move license info to pod
2891: format
2892:
2893: 2007-07-22 18:43 millert
2894:
2895: * configure, configure.in, sudoers.pod: Substitute value of
2896: path_info into sudoers man page.
2897:
2898: 2007-07-22 16:40 millert
2899:
2900: * WHATSNEW: remove features that were back-ported to 1.6.9
2901:
2902: 2007-07-22 15:20 millert
2903:
2904: * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2905: usage. From Igor Sobrado.
2906:
2907: 2007-07-22 15:19 millert
2908:
2909: * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2910: ldap_sasl_interactive_bind_s() but don't have
2911: gss_krb5_ccache_name().
2912:
2913: 2007-07-22 08:23 millert
2914:
2915: * ChangeLog: rebuild without branch info
2916:
2917: 2007-07-22 08:23 millert
2918:
2919: * Makefile.in: Add ChangeLog target
2920:
2921: 2007-07-22 08:14 millert
2922:
2923: * auth/pam.c: Run cleanup code if the user hits ^C at the password
2924: prompt.
2925:
2926: 2007-07-22 08:13 millert
2927:
2928: * auth/pam.c: Some versions of pam_lastlog have a bug that will
2929: cause a crash if PAM_TTY is not set so if there is no tty, set
2930: PAM_TTY to the empty string.
2931:
2932: 2007-07-20 09:32 millert
2933:
2934: * Makefile.in: ChageLog not Changelog
2935:
2936: 2007-07-20 09:31 millert
2937:
2938: * ChangeLog: sync
2939:
2940: 2007-07-20 09:29 millert
2941:
2942: * Makefile.in: CHANGE -> Changelog
2943:
2944: 2007-07-19 20:23 millert
2945:
2946: * TODO: sync
2947:
2948: 2007-07-19 19:53 millert
2949:
2950: * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2951: for gss_krb5_ccache_name() and the gssapi headers.
2952:
2953: 2007-07-18 12:57 millert
2954:
2955: * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2956: return environment pointer, they set environ directly.
2957:
2958: No longer need to pass around an envp pointer since we just
2959: operate on environ now.
2960:
2961: Add dosync argument to insert_env() that indicates whether it
2962: should reset environ when realloc()ing env.envp.
2963:
2964: Use an initial size of 128 for the environment.
2965:
2966: 2007-07-18 12:41 millert
2967:
2968: * env.c: Split sudo_setenv() into an external version and a version
2969: only for use by rebuild_env().
2970:
2971: 2007-07-16 19:40 millert
2972:
2973: * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2974: setting KRB5CCNAME. Also use sudo_unsetenv() in the
2975: non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2976: original environment. TODO: configure setup for
2977: gss_krb5_ccache_name()
2978:
2979: 2007-07-16 18:44 millert
2980:
2981: * README.LDAP: add krb5_ccname
2982:
2983: 2007-07-16 18:44 millert
2984:
2985: * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
2986:
2987: 2007-07-16 18:39 millert
2988:
2989: * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
2990: syncing code into sync_env().
2991:
2992: 2007-07-16 07:27 millert
2993:
2994: * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
2995: sasl_authid.
2996:
2997: 2007-07-15 15:44 millert
2998:
2999: * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3000: If specified, it will override the default value of KRB5CCNAME
3001: in the environment for the duration of the call to
3002: ldap_sasl_interactive_bind_s().
3003:
3004: 2007-07-15 15:41 millert
3005:
3006: * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3007: most format_env() + insert_env() combinations. insert_env() no
3008: longer takes a struct environment *
3009:
3010: 2007-07-15 12:47 millert
3011:
3012: * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3013:
3014: 2007-07-15 09:23 millert
3015:
3016: * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3017: support for SASL auth when connecting to an LDAP server. Adapted
3018: from a diff by Tom McLaughlin.
3019:
3020: 2007-07-14 16:32 millert
3021:
3022: * configure, configure.in: Only enable AIX or BSD auth if no other
3023: exclusive auth method has been chosen. Allows people to e.g.,
3024: use PAM on AIX without adding --without-aixauth. A better
3025: solution is needed to deal with default authentication since if a
3026: non-exclusive method is chosen we will still get an error.
3027:
3028: 2007-07-11 11:23 millert
3029:
3030: * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3031: history.pod (which is also used for web pages)
3032:
3033: 2007-07-09 19:40 millert
3034:
3035: * sudo.man.in, sudoers.man.in: regen
3036:
3037: 2007-07-09 19:25 millert
3038:
3039: * sudo.pod: Better explanation of environment handling in the sudo
3040: man page.
3041:
3042: 2007-07-09 15:13 millert
3043:
3044: * env.c, sudo.c: Defer setting user-specified env vars until after
3045: authentication.
3046:
3047: 2007-07-09 13:25 millert
3048:
3049: * env.c: honor def_default_path for PATH set on the command line
3050:
3051: 2007-07-09 13:22 millert
3052:
3053: * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3054: environment variables on the command line as long as they are
3055: allowed by env_keep and env_check. Ie: apply the same
3056: restrictions as normal environment variables. TODO: deal with
3057: secure_path
3058:
3059: 2007-07-08 14:44 millert
3060:
3061: * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3062: original envp to sudo_edit(). Don't allow -E or env var setting
3063: in sudoedit mode. More accurate usage() when called as sudoedit.
3064:
3065: 2007-07-08 14:41 millert
3066:
3067: * ldap.c: warn -> warning
3068:
3069: 2007-07-08 14:11 millert
3070:
3071: * sudo.pod: add -c option to sudoedit synopsis
3072:
3073: 2007-07-08 10:27 millert
3074:
3075: * TODO: udpate to reality
3076:
3077: 2007-07-08 09:43 millert
3078:
3079: * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3080: the return value from {user,host,runas,cmnd}_matches(). Rename
3081: *matches variables -> *match. Purely cosmetic.
3082:
3083: 2007-07-08 09:30 millert
3084:
3085: * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3086: No change in behavior.
3087:
3088: 2007-07-08 09:17 millert
3089:
3090: * sudoers: add SETENV tag
3091:
3092: 2007-07-06 15:51 millert
3093:
3094: * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3095: even if user didn't match since Defaults options may still apply.
3096:
3097: 2007-07-06 14:51 millert
3098:
3099: * check.c, sudo.c: Do not update timestamp if user not validated by
3100: sudoers.
3101:
3102: 2007-07-06 10:14 millert
3103:
3104: * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3105: and restore to the user's original in PERM_ROOT
3106:
3107: 2007-07-06 10:04 millert
3108:
3109: * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3110: now no different than PERM_ROOT so remove PERM_FULL_ROOT
3111:
3112: 2007-07-06 09:49 millert
3113:
3114: * check.c: don't check timestamp mtime if we are just going to
3115: remove it
3116:
3117: 2007-07-06 09:33 millert
3118:
3119: * sudoers.pod: Move sudoers defaults parameters into their own
3120: section.
3121:
3122: 2007-07-05 20:21 millert
3123:
3124: * testsudoers.c: Reduce a level of indent by a few placed continue
3125: statements.
3126:
3127: 2007-07-05 20:20 millert
3128:
3129: * parse.c: Make matching but negated commands/hosts/runas entries
3130: override a previous match as expected. Also reduce some levels
3131: of indent by a few placed continue statements.
3132:
3133: 2007-07-05 16:34 millert
3134:
3135: * parse.c: Print default runas in "sudo -l" if sudoers don't
3136: specify one.
3137:
3138: 2007-07-05 15:46 millert
3139:
3140: * match.c: Less hacky way of testing whether the domain was set.
3141:
3142: 2007-07-04 15:50 millert
3143:
3144: * INSTALL: Mention pam-devel and openldap-devel for Linux
3145:
3146: 2007-07-03 19:38 millert
3147:
3148: * README.LDAP: or vs. are
3149:
3150: 2007-07-01 16:55 millert
3151:
3152: * sudo.c: fix typo in Solaris project support
3153:
3154: 2007-07-01 09:40 millert
3155:
3156: * HISTORY: update
3157:
3158: 2007-07-01 09:07 millert
3159:
3160: * sudo.c: Make -- on the command line match the manual page. The
3161: implied shell case has been simplified as a result.
3162:
3163: 2007-06-28 10:44 millert
3164:
3165: * sudoers2ldif: add simplistic support for sudoRunas; note that if
3166: a sudoers entry contains multiple Runas users, all will apply to
3167: the sudoRole
3168:
3169: 2007-06-28 10:42 millert
3170:
3171: * sudoers2ldif: honor SETENV and NOSETENV tags
3172:
3173: 2007-06-24 09:25 millert
3174:
3175: * mon_systrace.c: Redo setting of user_args. We now build up a
3176: private copy of argv first and then replace the NULs with spaces.
3177:
3178: 2007-06-24 09:19 millert
3179:
3180: * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3181: success
3182:
3183: 2007-06-24 07:39 millert
3184:
3185: * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3186:
3187: 2007-06-23 20:00 millert
3188:
3189: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3190: visudo.man.in: regen
3191:
3192: 2007-06-23 19:58 millert
3193:
3194: * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3195: gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3196: sudoers.pod, toke.c, toke.l: Add support for setting environment
3197: variables on the command line. This is only allowed if the
3198: setenv sudoers options is enabled or if the command is prefixed
3199: with the SETENV tag.
3200:
3201: 2007-06-23 19:57 millert
3202:
3203: * README.LDAP: replace Aaron's email address with the sudo-workers
3204: list
3205:
3206: 2007-06-23 19:55 millert
3207:
3208: * configure: regen
3209:
3210: 2007-06-21 20:35 millert
3211:
3212: * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3213: schema out into separate files.
3214:
3215: 2007-06-21 18:28 millert
3216:
3217: * auth/aix_auth.c: free message if set by authenticate()
3218:
3219: 2007-06-21 13:03 millert
3220:
3221: * match.c: deal with NULL gr_mem
3222:
3223: 2007-06-20 15:04 millert
3224:
3225: * config.h.in: regen
3226:
3227: 2007-06-20 15:04 millert
3228:
3229: * configure.in: add template for HAVE_PROJECT_H
3230:
3231: 2007-06-20 07:06 millert
3232:
3233: * closefrom.c: include fcntl.h
3234:
3235: 2007-06-19 19:37 millert
3236:
3237: * INSTALL: mention --with-project
3238:
3239: 2007-06-19 18:24 millert
3240:
3241: * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3242: support. From Michael Brantley.
3243:
3244: 2007-06-19 17:27 millert
3245:
3246: * sudoers.pod: fix typo
3247:
3248: 2007-06-19 17:22 millert
3249:
3250: * configure: regen
3251:
3252: 2007-06-19 17:21 millert
3253:
3254: * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3255:
3256: 2007-06-19 17:00 millert
3257:
3258: * memrchr.c: Remove dependecy on NULL
3259:
3260: 2007-06-19 15:37 millert
3261:
3262: * configure: regen
3263:
3264: 2007-06-19 15:37 millert
3265:
3266: * aclocal.m4, configure.in: Can't use the regular autoconf
3267: fnmatch() check since we need FNM_CASEFOLD so go back to our
3268: custom one.
3269:
3270: 2007-06-19 12:52 millert
3271:
3272: * env.c: Fix preserving of variables in env_keep.
3273:
3274: 2007-06-19 07:10 millert
3275:
3276: * env.c: add XAUTHORIZATION
3277:
3278: 2007-06-18 20:41 millert
3279:
3280: * UPGRADE: expand upon env resetting and mention that it began in
3281: 1.6.9 not 1.7.
3282:
3283: 2007-06-18 20:33 millert
3284:
3285: * sudoers.pod: Update descriptions of env_keep and env_check to
3286: match current reality.
3287:
3288: 2007-06-18 17:33 millert
3289:
3290: * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3291: HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3292: intial_keepenv_table.
3293:
3294: 2007-06-18 17:23 millert
3295:
3296: * env.c, logging.c: Treat USERNAME environemnt variable like
3297: LOGNAME/USER
3298:
3299: 2007-06-18 17:21 millert
3300:
3301: * env.c: Don't need to populate keepenv table with the contents of
3302: the checkenv table.
3303:
3304: 2007-06-18 08:57 millert
3305:
3306: * sudo.c: Don't force sudo into the C locale.
3307:
3308: 2007-06-18 08:56 millert
3309:
3310: * env.c: Make env_check apply when env_reset it true. Environment
3311: variables are passed through unless they contain '/' or '%'.
3312: There is no need to have a variable in both env_check and
3313: env_keep.
3314:
3315: 2007-06-16 07:31 millert
3316:
3317: * visudo.c: Remove an duplicate lock_file() call and add a comment.
3318:
3319: 2007-06-15 21:16 millert
3320:
3321: * UPGRADE: Add sudo 1.6.9 upgrade note.
3322:
3323: 2007-06-14 12:23 millert
3324:
3325: * interfaces.c: Solaris will return EINVAL if the buffer used in
3326: SIOCGIFCONF is too small. From Klaus Wagner.
3327:
3328: 2007-06-14 12:03 millert
3329:
3330: * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3331: logging.c, sudo.h: Redo the long syslog line splitting based on a
3332: patch from Eygene Ryabinkin. Include memrchr() for systems
3333: without it.
3334:
3335: 2007-06-14 07:09 millert
3336:
3337: * configure.in: Since we need to be able to convert timespec to
3338: timeval for utimes() the last 3 digits in the tv_nsec are not
3339: significant. This makes the sudoedit file date comparison work
3340: again.
3341:
3342: 2007-06-13 13:41 millert
3343:
3344: * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3345: deal with adding things to AUTH_OBJS. This deals with exclusive
3346: authentication methods in a simple way.
3347:
3348: 2007-06-12 13:08 millert
3349:
3350: * LICENSE: mkstemp.c is BSD code too.
3351:
3352: 2007-06-12 09:21 millert
3353:
3354: * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3355:
3356: 2007-06-11 18:27 millert
3357:
3358: * sudo.c: cleanenv() is no more.
3359:
3360: 2007-06-10 18:37 millert
3361:
3362: * ChangeLog: Display branch info in Changelog
3363:
3364: 2007-06-10 18:18 millert
3365:
3366: * utimes.c: Include config.h early so we have it for
3367: TIME_WITH_SYS_TIME
3368:
3369: 2007-06-10 18:00 millert
3370:
3371: * ChangeLog: Fix Changelog generation and update.
3372:
3373: 2007-06-09 07:26 millert
3374:
3375: * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3376:
3377: Move old-style fd closing into closefrom_fallback() and call that
3378: if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3379:
3380: 2007-06-09 07:24 millert
3381:
3382: * config.h.in, configure.in, auth/kerb5.c: o use
3383: krb5_verify_user() if available instead of doing it by hand
3384: o use krb5_init_secure_context() if we have it
3385: o pass an encryption type of 0 to krb5_kt_read_service_key()
3386: instead of
3387: ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3388:
3389: 2007-06-09 07:20 millert
3390:
3391: * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3392: Debian.
3393:
3394: 2007-06-09 07:17 millert
3395:
3396: * configure.in: Fix closefrom() substitution in the Makefile
3397:
3398: 2007-06-09 07:15 millert
3399:
3400: * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3401:
3402: 2007-06-07 07:52 millert
3403:
3404: * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3405:
3406: 2007-06-07 07:22 millert
3407:
3408: * auth/kerb5.c: If we cannot get a valid service key using the
3409: default keytab it is a fatal error. Fixes a bug where sudo could
3410: be tricked into allowing access when it should not by a fake KDC.
3411: From Thor Lancelot Simon.
3412:
3413: 2007-05-12 08:56 millert
3414:
3415: * aclocal.m4, configure, configure.in: Update long long checks to
3416: use AC_CHECK_TYPES and to cache values.
3417:
3418: 2007-05-12 08:07 millert
3419:
3420: * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3421: homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3422: that assumes replacing with GNU fnmatch.
3423:
3424: 2007-05-11 17:05 millert
3425:
3426: * configure, configure.in: Add closefrom() to LIB_OBJS not
3427: SUDO_OBJS if it is missing since we need it for visudo now too.
3428:
3429: 2007-04-24 14:44 millert
3430:
3431: * sudoers.pod: Attempt to clarify the bit talking about network
3432: numbers w/o netmasks.
3433:
3434: 2007-04-24 14:25 millert
3435:
3436: * sudo.pod: Clarify timestamp dir ownership sentence.
3437:
3438: 2007-04-20 12:40 millert
3439:
3440: * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3441: __LIBPAM_VERSION. From Dmitry V. Levin.
3442:
3443: 2007-04-16 12:13 millert
3444:
3445: * sudo.c: -i is also one of the mutually exclusive options to list
3446: it in the warning message. Noted by Chris Pepper.
3447:
3448: 2007-04-12 11:18 millert
3449:
3450: * visudo.pod: The sudoers variable is env_editor, not enveditor.
3451: From Jean-Francois Saucier.
3452:
3453: 2007-03-29 13:30 millert
3454:
3455: * redblack.c: I tracked down the original author so credit him and
3456: include his license info.
3457:
3458: 2007-02-06 13:25 millert
3459:
3460: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3461: sudoers.pod: Fix typos; from Jason McIntyre.
3462:
3463: 2007-02-06 13:23 millert
3464:
3465: * logging.c: Restore signal mask before calling reapchild(). Fixes
3466: a possible race condition that could prevent sudo from properly
3467: waiting for the child.
3468:
3469: 2007-01-31 10:02 millert
3470:
3471: * pwutil.c: Don't declare pw_free() if we are not going to use it.
3472:
3473: 2007-01-31 10:00 millert
3474:
3475: * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3476: and LDR_PRELOAD64. The 64-bit version is not currently
3477: supported. Remove zero_env() prototype as it no longer exists.
3478:
3479: 2006-12-11 13:21 millert
3480:
3481: * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3482: for rfc 3834.
3483:
3484: 2006-09-29 10:53 millert
3485:
3486: * auth/pam.c: If the user enters ^C at the password prompt, abort
3487: instead of trying to authenticate with an empty password (which
3488: causes an annoying delay).
3489:
3490: 2006-08-17 11:26 millert
3491:
3492: * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3493: F_CLOSEM support to closefrom(); adapted from a diff by Darren
3494: Tucker.
3495:
3496: 2006-08-17 11:25 millert
3497:
3498: * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3499: it out too.
3500:
3501: 2006-08-04 11:34 millert
3502:
3503: * config.sub, config.guess: Update to latest versions from
3504: cvs.savannah.gnu.org
3505:
3506: 2006-07-31 13:51 millert
3507:
3508: * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3509: sudo_end{pw,grp}ent() so we can close the passwd/group files
3510: early.
3511:
3512: 2006-07-31 13:50 millert
3513:
3514: * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3515: flavor of set_perms() for systems without setreuid() or
3516: setresuid() that have a working seteuid(). Tested on Darwin.
3517:
3518: 2006-07-30 15:56 millert
3519:
3520: * mon_systrace.c: systrace_read() returns ssize_t
3521:
3522: 2006-07-30 15:53 millert
3523:
3524: * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3525: Knox.
3526:
3527: 2006-07-28 13:12 millert
3528:
3529: * HISTORY: Fix typo; Matt Ackeret
3530:
3531: 2006-07-17 08:25 millert
3532:
3533: * sudo.c: Print sudoers path in -V mode for root.
3534:
3535: 2006-06-15 14:44 millert
3536:
3537: * ldap.c: Do a sub tree search instead of a base search (one level
3538: in the tree only) for sudo right objects. This allows system
3539: administrators to categorize the rights in a tree to make them
3540: easier to manage.
3541:
3542: 2005-12-28 13:52 millert
3543:
3544: * sudo.pod: fix typo
3545:
3546: 2005-12-04 12:16 millert
3547:
3548: * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3549: timelimit and bind_timelimit support; adapted from gentoo.
3550:
3551: 2005-11-23 18:57 millert
3552:
3553: * ldap.c: Support comments that start in the middle of a line
3554:
3555: 2005-11-23 18:56 millert
3556:
3557: * configure.in, configure: Define LDAP_DEPRECATED until we start
3558: using ldap_get_values_len()
3559:
3560: 2005-11-18 09:55 millert
3561:
3562: * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3563:
3564: 2005-11-17 20:39 millert
3565:
3566: * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3567: takes an int as an arg so it can be used as a signal handler too.
3568:
3569: 2005-11-17 20:38 millert
3570:
3571: * sudo.c: Make a copy of the shell field in the passwd struct for
3572: NewArgv to avoid a use after free situation after sudo_endpwent()
3573: is called.
3574:
3575: 2005-11-16 20:36 millert
3576:
3577: * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3578: mkstemp() for those poor souls without it.
3579:
3580: 2005-11-15 09:25 millert
3581:
3582: * env.c: Add PERL5DB to list of environment variables to remove.
3583:
3584: 2005-11-13 15:49 millert
3585:
3586: * mon_systrace.c, mon_systrace.h: Instead of calling the check
3587: function twice with a state cookie use separate check/log
3588: functions.
3589:
3590: Check more ioctl() calls for failure.
3591:
3592: systrace_{read,write} now return the number of bytes read/written
3593: or -1 on error.
3594:
3595: 2005-11-13 14:51 millert
3596:
3597: * env.c: Add more environment variables to remove; from gentoo
3598: linux Add some comments about what bad env variables go to what
3599: (more to do)
3600:
3601: 2005-11-11 17:23 millert
3602:
3603: * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3604: the exec since they free up our cached copy of the passwd
3605: structs, including sudo_user and sudo_runas. Fixes a
3606: use-after-free bug.
3607:
3608: 2005-11-11 17:19 millert
3609:
3610: * visudo.c: Close all fd's before executing editor.
3611:
3612: 2005-11-11 17:17 millert
3613:
3614: * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3615: set.
3616:
3617: 2005-11-11 11:22 millert
3618:
3619: * check.c: Fix fd leak when lecture file option is enabled. From
3620: Jerry Brown
3621:
3622: 2005-11-07 11:02 millert
3623:
3624: * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3625: environment variables to remove. From Charles Morris
3626:
3627: 2005-11-01 13:24 millert
3628:
3629: * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3630:
3631: 2005-10-27 20:35 millert
3632:
3633: * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3634:
3635: 2005-08-14 20:32 millert
3636:
3637: * sudoers.pod: Fix typo; Toby Peterson
3638:
3639: 2005-08-02 09:57 millert
3640:
3641: * tsgetgrpw.c: Make return buffers static so they don't get
3642: clobbered
3643:
3644: 2005-07-27 21:14 millert
3645:
3646: * auth/securid5.c: Fix securid5 authentication, was not checking
3647: for ACM_OK. Also add default cases for the two switch()es.
3648: Problem noted by ccon at worldbank
3649:
3650: 2005-06-26 20:10 millert
3651:
3652: * ldap.c: Remove ncat() in favor of just counting bytes and
3653: pre-allocating what is needed.
3654:
3655: 2005-06-26 19:44 millert
3656:
3657: * ldap.c: Fix up some comments Add missing fclose() for the
3658: rootbinddn case
3659:
3660: 2005-06-26 19:38 millert
3661:
3662: * ldap.c: align struct ldap_config
3663:
3664: 2005-06-26 19:37 millert
3665:
3666: * ldap.c: use LINE_MAX for max conf file line size
3667:
3668: 2005-06-26 18:36 millert
3669:
3670: * pathnames.h.in: add _PATH_LDAP_SECRET
3671:
3672: 2005-06-26 18:36 millert
3673:
3674: * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3675:
3676: 2005-06-25 18:03 millert
3677:
3678: * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3679: ldap.conf
3680:
3681: 2005-06-25 17:46 millert
3682:
3683: * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3684: variable by default.
3685:
3686: 2005-06-25 16:39 millert
3687:
3688: * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3689: is safe for LD_PRELOAD
3690:
3691: 2005-06-25 16:15 millert
3692:
3693: * acsite.m4, configure: set need_version=no for all cases; this is
3694: safe for LD_PRELOAD
3695:
3696: 2005-06-25 14:45 millert
3697:
3698: * aclocal.m4: typo
3699:
3700: 2005-06-25 14:33 millert
3701:
3702: * configure, configure.in: Add dragonfly
3703:
3704: 2005-06-25 14:29 millert
3705:
3706: * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3707:
3708: 2005-06-25 14:21 millert
3709:
3710: * configure: regen
3711:
3712: 2005-06-25 14:20 millert
3713:
3714: * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3715: ltoptions.m4 ltsugar.m4 ltversion.m4
3716:
3717: 2005-06-25 14:08 millert
3718:
3719: * config.guess, config.sub, ltmain.sh: merge in local changes:
3720: config.guess: o better openbsd support config.sub: o hiuxmpp
3721: support ltmain.sh o remove requirement that libs must begin with
3722: "lib" o don't print a bunch of crap about library installs o
3723: don't run ldconfig
3724:
3725: 2005-06-25 14:05 millert
3726:
3727: * config.guess, config.sub, ltmain.sh: libtool 1.9f
3728:
3729: 2005-06-25 14:04 millert
3730:
3731: * configure.in: Update with autoupdate and make minor changes for
3732: libtool 1.9f
3733:
3734: 2005-06-22 23:19 millert
3735:
3736: * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3737:
3738: 2005-06-22 23:04 millert
3739:
3740: * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3741: emul/timespec.h: Move declatation of struct timespec to its own
3742: include files for systems without it since it needs time_t
3743: defined.
3744:
3745: 2005-06-22 22:57 millert
3746:
3747: * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3748:
3749: 2005-05-27 01:59 millert
3750:
3751: * auth/pam.c: Call pam_open_session() and pam_close_session() to
3752: give pam_limits a chance to run. Idea from Karel Zak.
3753:
3754: 2005-04-24 19:24 millert
3755:
3756: * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3757: to silence warnings on Solaris
3758:
3759: 2005-04-24 19:22 millert
3760:
3761: * parse.c: include grp.h to silence a warning on Solaris
3762:
3763: 2005-04-23 15:10 millert
3764:
3765: * parse.c: Fix printing of += and -= defaults.
3766:
3767: 2005-04-17 01:21 millert
3768:
3769: * mon_systrace.c: Sanity check number of syscall args with argsize.
3770: Not really needed but a little paranoia never hurts.
3771:
3772: 2005-04-17 01:18 millert
3773:
3774: * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3775: void * Use int, not size_t/ssize_t for systrace lengths (since it
3776: uses int)
3777:
3778: 2005-04-16 03:14 millert
3779:
3780: * mon_systrace.c: Add some memsets for paranoia Fix namespace
3781: collsion w/ error Check rval of decode_args() and update_env()
3782: Remove improper setting of validated variable
3783:
3784: 2005-04-11 21:37 millert
3785:
3786: * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3787: file if def_ignore_sudoers is not set and call LDAP versions from
3788: display_privs() and display_cmnd() instead of directly from
3789: main(). Because of this we need to defer closing the ldap
3790: connection until after -l processing has ocurred and we must pass
3791: in the ldap pointer to display_privs() and display_cmnd().
3792:
3793: 2005-04-11 21:33 millert
3794:
3795: * ldap.c: Reorganize LDAP code to better match normal sudoers
3796: parsing. Instead of storing strings for later printing in -l
3797: mode we do another query since the authenticating user and the
3798: user being listed may not be the same (the new -U flag). Also
3799: add support for "sudo -l command".
3800:
3801: There is still a fair bit if duplicated code that can probably be
3802: refactored.
3803:
3804: 2005-04-11 00:37 millert
3805:
3806: * ldap.c: Replace pass variable with do_netgr for better
3807: readability.
3808:
3809: 2005-04-10 23:49 millert
3810:
3811: * ldap.c: use DPRINTF macro
3812:
3813: 2005-04-10 23:18 millert
3814:
3815: * ldap.c: estrdup, not strdup
3816:
3817: 2005-04-10 17:44 millert
3818:
3819: * parse.c: Add macro to test if the tag changed to improve
3820: readability.
3821:
3822: 2005-04-10 17:40 millert
3823:
3824: * parse.c: Avoid printing defaults header if there are no defaults
3825: to print...
3826:
3827: 2005-04-10 15:29 millert
3828:
3829: * glob.c: Fix a warning on systems without strlcpy().
3830:
3831: 2005-04-10 13:32 millert
3832:
3833: * pwutil.c: Use macros where possible for sudo_grdup() like
3834: sudo_pwdup().
3835:
3836: 2005-04-08 17:04 millert
3837:
3838: * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3839: add in tv_usec / 1000000.
3840:
3841: 2005-03-29 23:38 millert
3842:
3843: * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3844: should be 1, not 0 for Heimdal. From Alex Plotnick.
3845:
3846: 2005-03-29 09:29 millert
3847:
3848: * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3849: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3850: pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3851: Add efree() for consistency with emalloc() et al. Allows us to
3852: rely on C89 behavior (free(NULL) is valid) even on K&R.
3853:
3854: 2005-03-28 22:33 millert
3855:
3856: * parse.c, sudo.c: Move initgroups() for -U option into
3857: display_privs() so group matching in sudoers works correctly.
3858:
3859: 2005-03-26 21:34 millert
3860:
3861: * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3862: with sudo_ldap_close.
3863:
3864: 2005-03-26 20:01 millert
3865:
3866: * parse.c: Add missing space in Defaults printing
3867:
3868: 2005-03-25 12:36 millert
3869:
3870: * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3871: size computaton and string copies.
3872:
3873: 2005-03-18 22:08 millert
3874:
3875: * pwutil.c: Zero old pw_passwd before replacing with version from
3876: shadow file.
3877:
3878: 2005-03-18 22:07 millert
3879:
3880: * configure, configure.in: Only attempt shadow password detection
3881: if PAM is not being used Add shadow_* variables to make shadow
3882: password detection more generic.
3883:
3884: 2005-03-18 21:46 millert
3885:
3886: * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3887: than CPPFLAGS
3888:
3889: 2005-03-12 19:27 millert
3890:
3891: * sudoers.pod: use a non-breaking space to avoid a double space
3892: after e.g.
3893:
3894: 2005-03-12 19:26 millert
3895:
3896: * sudo.pod: commna, not colon after e.g.
3897:
3898: 2005-03-12 18:43 millert
3899:
3900: * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3901: at least uses __execve() internally.
3902:
3903: 2005-03-12 12:29 millert
3904:
3905: * indent.pro: Match reality a bit more.
3906:
3907: 2005-03-12 12:27 millert
3908:
3909: * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3910:
3911: 2005-03-11 23:42 millert
3912:
3913: * pwutil.c: Store shadow password after making a local copy of
3914: struct passwd in case normal and shadow routines use the same
3915: internal buffer in libc.
3916:
3917: 2005-03-10 20:57 millert
3918:
3919: * alloc.c, logging.c: Make varargs usage consistent with the rest
3920: of the code.
3921:
3922: 2005-03-10 10:09 millert
3923:
3924: * sudo_noexec.c: Wrap more of the exec family since on Linux the
3925: others do not appear to go through the normal execve() path.
3926:
3927: 2005-03-10 09:57 millert
3928:
3929: * visudo.c: make print_unused static like proto says
3930:
3931: 2005-03-10 09:55 millert
3932:
3933: * glob.c: silence a warning on K&R systems
3934:
3935: 2005-03-10 09:51 millert
3936:
3937: * parse.c, alias.c, error.c: make this build in K&R land
3938:
3939: 2005-03-07 22:21 millert
3940:
3941: * toke.c: regen
3942:
3943: 2005-03-05 22:46 millert
3944:
3945: * ldap.c: return(foo) not return foo optimize _atobool() slightly
3946:
3947: 2005-03-05 22:40 millert
3948:
3949: * ldap.c: Use TRUE/FALSE
3950:
3951: 2005-03-05 22:31 millert
3952:
3953: * ldap.c: Reformat to match the rest of sudo's code.
3954:
3955: 2005-03-05 19:33 millert
3956:
3957: * sudo.pod: I am the primary author
3958:
3959: 2005-02-22 22:28 millert
3960:
3961: * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3962: confused too many people and really isn't needed in a
3963: configure-oriented world.
3964:
3965: 2005-02-22 22:28 millert
3966:
3967: * INSTALL: alternate -> alternative
3968:
3969: 2005-02-22 22:26 millert
3970:
3971: * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3972: have issues with TCSAFLUSH.
3973:
3974: 2005-02-22 22:16 millert
3975:
3976: * toke.l: Allow leading blanks before Defaults and Foo_Alias
3977: definitions
3978:
3979: 2005-02-22 22:14 millert
3980:
3981: * Makefile.in: fix rules to build toke.o and gram.o in devel mode
3982:
3983: 2005-02-20 13:00 millert
3984:
3985: * sudoers.pod: env_keep overrides set_logname
3986:
3987: 2005-02-20 12:57 millert
3988:
3989: * env.c: Fix disabling set_logname and make env_keep override
3990: set_logname.
3991:
3992: 2005-02-20 12:28 millert
3993:
3994: * compat.h, config.h.in, configure, configure.in: No longer need
3995: memmove()
3996:
3997: 2005-02-20 11:48 millert
3998:
3999: * env.c, sudo.c: Just clean the environment once. This assumes
4000: that any further setenv/putenv will be able to handle the fact
4001: that we replaced environ with our own malloc'd copy but all the
4002: implementations I've checked do.
4003:
4004: 2005-02-15 23:16 millert
4005:
4006: * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4007: dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4008: into rebuild_env()
4009:
4010: 2005-02-13 00:33 millert
4011:
4012: * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4013: and prev_user into init_vars() since user_shell at least is
4014: needed there.
4015:
4016: 2005-02-12 18:51 millert
4017:
4018: * Makefile.in: fix devel builds
4019:
4020: 2005-02-12 18:46 millert
4021:
4022: * check.c, sudo.c: Fix some printf format mismatches on error.
4023:
4024: 2005-02-12 18:33 millert
4025:
4026: * configure, gram.c, toke.c: regen
4027:
4028: 2005-02-12 17:56 millert
4029:
4030: * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4031: alloc.c, check.c, closefrom.c, compat.h, configure.in,
4032: defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4033: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4034: interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4035: match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4036: set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4037: strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4038: sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4039: utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4040: auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4041: auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4042: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4043: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4044: emul/utime.h: Update copyright years.
4045:
4046: 2005-02-12 16:46 millert
4047:
4048: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4049: version 1.7
4050:
4051: 2005-02-12 16:16 millert
4052:
4053: * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4054: entries.
4055:
4056: 2005-02-11 18:06 millert
4057:
4058: * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4059: to warn about printf-like format mismatches
4060:
4061: 2005-02-10 00:16 millert
4062:
4063: * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4064: generated from cvs logs
4065:
4066: 2005-02-10 00:03 millert
4067:
4068: * set_perms.c: Use warning/error instead of perror/fatal.
4069:
4070: 2005-02-09 23:13 millert
4071:
4072: * config.guess: Update OpenBSD section
4073:
4074: 2005-02-09 23:10 millert
4075:
4076: * UPGRADE: Add upgrading noted for 1.7
4077:
4078: 2005-02-09 23:00 millert
4079:
4080: * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4081: environment, just prune out entries based on the env_delete and
4082: env_check lists. Base building up the new environment on the
4083: current environment and the variables we removed initially.
4084:
4085: 2005-02-09 22:23 millert
4086:
4087: * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4088: if locales are supported, just to be safe.
4089:
4090: 2005-02-09 22:19 millert
4091:
4092: * toke.c, toke.l: Cast argument to ctype functions to unsigned
4093: char.
4094:
4095: 2005-02-07 22:56 millert
4096:
4097: * env.c: correct value for DID_USER
4098:
4099: 2005-02-07 22:55 millert
4100:
4101: * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4102: <compat.h> not "compat.h"
4103:
4104: 2005-02-07 22:51 millert
4105:
4106: * defaults.c: Reset the environment by default.
4107:
4108: 2005-02-07 22:50 millert
4109:
4110: * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4111: malloc an new vector if execve() fails.
4112:
4113: 2005-02-06 23:16 millert
4114:
4115: * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4116: execve(2) and wrap the command in sh if we get ENOEXEC.
4117:
4118: 2005-02-05 23:01 millert
4119:
4120: * sudo_noexec.c: Only include time.h on systems that lack struct
4121: timespec which gets defind in compat.h (using time_t).
4122:
4123: 2005-02-05 22:59 millert
4124:
4125: * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4126: w/o struct timespec.
4127:
4128: 2005-02-05 22:56 millert
4129:
4130: * configure, compat.h, config.h.in, configure.in: use bcopy on
4131: systems w/o memmove
4132:
4133: 2005-02-05 22:31 millert
4134:
4135: * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4136: so limit its use to gcc >= 2.8.
4137:
4138: 2005-02-05 21:21 millert
4139:
4140: * Makefile.in: Add explicit rule to build sudo_noexec.lo
4141:
4142: 2005-02-05 17:56 millert
4143:
4144: * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4145: pointed out a bunch of missed dependencies.
4146:
4147: 2005-02-05 13:18 millert
4148:
4149: * TROUBLESHOOTING: Help for PAM when account section is missing
4150:
4151: 2005-02-05 13:01 millert
4152:
4153: * auth/pam.c: Give user a clue when there is a missing "account"
4154: section in the PAM config.
4155:
4156: 2005-02-05 10:22 millert
4157:
4158: * auth/pam.c: Better error handling.
4159:
4160: 2005-02-05 09:57 millert
4161:
4162: * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4163: CPPFLAGS so it takes effect as early as possible. Silences a
4164: warning about isblank() on linux.
4165:
4166: 2005-02-04 21:49 millert
4167:
4168: * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4169: number of args to be passed to log_error().
4170:
4171: 2005-01-31 23:03 millert
4172:
4173: * pwutil.c: Don't try to destroy a tree we didn't create.
4174:
4175: 2005-01-27 10:42 millert
4176:
4177: * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4178: env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4179: getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4180: gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4181: parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4182: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4183: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4184: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4185: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4186: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4187: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4188: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4189: rcsids
4190:
4191: 2005-01-21 10:34 millert
4192:
4193: * configure, configure.in: Fix error message when mixing invalid
4194: auth types
4195:
4196: 2005-01-21 10:32 millert
4197:
4198: * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4199: default if the OS supports them.
4200:
4201: 2005-01-21 10:29 millert
4202:
4203: * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4204:
4205: 2005-01-21 10:29 millert
4206:
4207: * configure.in: Better checking for conflicting authentication
4208: methods Display the authentication methods used at the end of
4209: configure Rename --with-authenticate -> --with-aixauth Use
4210: --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4211: default on systems that support them unless disabled. Add
4212: OSMAJOR variable that replaces old OSREV; now OSREV has full
4213: version number
4214:
4215: 2005-01-17 19:40 millert
4216:
4217: * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4218:
4219: 2005-01-14 13:35 millert
4220:
4221: * configure.in: Replace: test -n "$FOO" || FOO="bar"
4222:
4223: With: : ${FOO='bar'}
4224:
4225: 2005-01-09 18:58 millert
4226:
4227: * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4228: only call private passwd/group routines when using a nonstandard
4229: passwd/group file.
4230:
4231: 2005-01-06 10:34 millert
4232:
4233: * CHANGES: sync
4234:
4235: 2005-01-05 22:16 millert
4236:
4237: * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4238: fields so add getpwent()/getgrent() functions and call those.
4239:
4240: 2005-01-05 17:29 millert
4241:
4242: * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4243:
4244: 2005-01-05 17:18 millert
4245:
4246: * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4247: in the clean target Add devdir variable and use it to specify the
4248: path to parser sources
4249:
4250: 2005-01-05 17:17 millert
4251:
4252: * configure: regen
4253:
4254: 2005-01-05 17:17 millert
4255:
4256: * configure.in: Add a devdir variables that defaults to $(srcdir)
4257: and is set to . if --devel was specified. Allows for proper
4258: dependecies building the parser.
4259:
4260: 2005-01-05 14:50 millert
4261:
4262: * testsudoers.c: Add support for custom passwd/group files.
4263:
4264: 2005-01-05 14:47 millert
4265:
4266: * Makefile.in: Build private copy of pwutil.o for testsudoers with
4267: MYPW defined so it uses our own passwd/group routines.
4268:
4269: 2005-01-05 14:46 millert
4270:
4271: * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4272: sudo_setspent/sudo_endspent stubs instead. We can now just use
4273: the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4274: about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4275:
4276: 2005-01-05 14:44 millert
4277:
4278: * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4279: Use global buffers for passwd/group structs Rename functions from
4280: sudo_* to my_*
4281:
4282: 2005-01-05 14:43 millert
4283:
4284: * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4285:
4286: 2005-01-05 14:42 millert
4287:
4288: * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4289: instead.
4290:
4291: 2005-01-05 14:41 millert
4292:
4293: * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4294: getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4295: are no longer needed. Also add preprocessor magic to use private
4296: versions of the passwd and group routines if MYPW is defined (for
4297: use by testsudoers).
4298:
4299: 2005-01-04 22:40 millert
4300:
4301: * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4302: if there are fields we don't handle they end up as 0.
4303:
4304: 2005-01-04 20:10 millert
4305:
4306: * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4307: pwutil.c
4308:
4309: 2005-01-04 20:09 millert
4310:
4311: * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4312: variables for better readability.
4313:
4314: 2005-01-04 20:08 millert
4315:
4316: * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4317: that support alternate passwd and group files.
4318:
4319: 2005-01-04 20:07 millert
4320:
4321: * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4322: its own file. This allows visudo and testsudoers to use the
4323: pw/gr cache too.
4324:
4325: 2005-01-01 19:31 millert
4326:
4327: * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4328: based on the terminal width.
4329:
4330: 2005-01-01 12:41 millert
4331:
4332: * match.c, visudo.c, testsudoers.c: Only check group vector in
4333: usergr_matches() if we are matching the invoking or list user.
4334: Always check the group members, even if there was a group vector.
4335:
4336: 2004-12-17 17:24 millert
4337:
4338: * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4339:
4340: 2004-12-17 13:12 millert
4341:
4342: * CHANGES, TODO: checkpoint
4343:
4344: 2004-12-16 14:20 millert
4345:
4346: * sudo.c: sort usage
4347:
4348: 2004-12-16 14:20 millert
4349:
4350: * sudo.pod: Sort command line options
4351:
4352: 2004-12-16 13:33 millert
4353:
4354: * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4355: sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4356: start closing at a point other than 3. Add closefrom_override
4357: sudoers option and -C sudo flag to allow the user to specify a
4358: different closefrom starting point.
4359:
4360: 2004-12-16 13:25 millert
4361:
4362: * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4363:
4364: 2004-12-15 22:55 millert
4365:
4366: * LICENSE: no more UCB strcasecmp
4367:
4368: 2004-12-15 22:54 millert
4369:
4370: * strcasecmp.c: replace BSD licensed one with version derived from
4371: pdksh
4372:
4373: 2004-12-09 21:07 millert
4374:
4375: * sudo.c: Fix last commit.
4376:
4377: 2004-12-09 19:26 millert
4378:
4379: * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4380: to /dev/null if not.
4381:
4382: 2004-12-03 13:57 millert
4383:
4384: * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4385:
4386: 2004-12-03 13:52 millert
4387:
4388: * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4389: Use TIME_WITH_SYS_TIME
4390:
4391: 2004-12-03 13:48 millert
4392:
4393: * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4394:
4395: 2004-12-02 11:18 millert
4396:
4397: * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4398: being set unconditionally on darwin. From Toby Peterson.
4399:
4400: 2004-12-02 10:40 millert
4401:
4402: * getspwuid.c: Check rbinsert() return value. In the case of faked
4403: up entries there is usually a negative response cached that we
4404: need to overwrite.
4405:
4406: In pwfree() don't try to zero out a NULL pw_passwd pointer.
4407:
4408: 2004-12-02 09:53 millert
4409:
4410: * mon_systrace.c: Use the double fork trick to avoid the monitor
4411: process being waited for by the main program run through sudo.
4412:
4413: 2004-11-29 12:52 millert
4414:
4415: * sudo.c: Call initgroups() in -U mode so group matches work
4416: normally.
4417:
4418: 2004-11-29 12:34 millert
4419:
4420: * def_data.h, mkdefaults: Don't print a trailing comma for the last
4421: entry in enum def_tupple
4422:
4423: 2004-11-28 16:08 millert
4424:
4425: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4426: lecture, listpw and verifypw are used in boolean context.
4427:
4428: 2004-11-28 16:05 millert
4429:
4430: * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4431: context should be "all", not "any".
4432:
4433: 2004-11-26 14:21 millert
4434:
4435: * def_data.in, defaults.c: Allow tuples that can be used as
4436: booleans to be used as boolean TRUE. In this case the 2nd
4437: possible value of the tuple is used for TRUE.
4438:
4439: 2004-11-25 12:23 millert
4440:
4441: * configure, configure.in: Correct the test for 2-parameter
4442: timespecsub
4443:
4444: 2004-11-25 12:20 millert
4445:
4446: * sudo.h: Add strub struct definitions for passwd, timeval and
4447: timespec
4448:
4449: 2004-11-25 12:09 millert
4450:
4451: * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4452: check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4453: fix a typo in the gettimeofday check.
4454:
4455: 2004-11-24 16:44 millert
4456:
4457: * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4458: for visudo and testsudoers.
4459:
4460: 2004-11-24 16:31 millert
4461:
4462: * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4463: option to use in conjunction with -l instead of -u. Add support
4464: for "sudo -l command" to test a specific command.
4465:
4466: 2004-11-24 16:28 millert
4467:
4468: * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4469: it has not been set. Previously it was set by sudo "ALL" in the
4470: parser but at that point the fully-qualified pathname has not yet
4471: been found.
4472:
4473: 2004-11-23 18:18 millert
4474:
4475: * parse.c, testsudoers.c: Correctly handle multiple privileges per
4476: userspec and runas inheritence.
4477:
4478: 2004-11-21 14:09 millert
4479:
4480: * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4481: init_defaults.
4482:
4483: 2004-11-19 18:04 millert
4484:
4485: * toke.c, toke.l: make per-command defaults work with sudoedit
4486:
4487: 2004-11-19 18:00 millert
4488:
4489: * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4490: FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4491: approriate defaults variable.
4492:
4493: 2004-11-19 17:09 millert
4494:
4495: * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4496: Document per-command Defaults.
4497:
4498: 2004-11-19 16:35 millert
4499:
4500: * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4501: sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4502: command-specific Defaults entries. E.g.
4503: Defaults!/usr/bin/vi noexec
4504:
4505: 2004-11-19 15:03 millert
4506:
4507: * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4508: occurence of user_matches() -> runas_matches() missed previously
4509: runas_matches(), host_matches() and cmnd_matches() only really
4510: need to pass in a list of members. user_matches() still needs to
4511: pass in a passwd struct because of "sudo -l"
4512:
4513: 2004-11-19 14:46 millert
4514:
4515: * parse.c: Check def_authenticate, def_noexec and def_monitor when
4516: setting return flags. XXX May be better to just set the defaults
4517: directly and get rid of those flags.
4518:
4519: 2004-11-19 13:39 millert
4520:
4521: * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4522: error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4523: getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4524: gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4525: mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4526: strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4527: sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4528: toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4529: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4530: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4531: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4532: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4533: <config.h> Not: #include "config.h" That way we get the correct
4534: config.h when build dir != src dir
4535:
4536: 2004-11-19 13:30 millert
4537:
4538: * Makefile.in: Back out part of rev 1.263; fix -I order
4539:
4540: 2004-11-19 13:12 millert
4541:
4542: * toke.c, toke.l: More robust parsing if #include; could be much
4543: better still.
4544:
4545: 2004-11-19 12:55 millert
4546:
4547: * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4548: consistent.
4549:
4550: 2004-11-19 12:35 millert
4551:
4552: * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4553: routines out into their own file.
4554:
4555: 2004-11-19 12:32 millert
4556:
4557: * error.h: __attribute__ is already defined in compat.h
4558:
4559: 2004-11-19 12:30 millert
4560:
4561: * visudo.c: quit() should not be __noreturn__ as it is non-void on
4562: some platforms.
4563:
4564: 2004-11-19 12:24 millert
4565:
4566: * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4567: error/warning functions like err/warn but that call an additional
4568: cleanup routine in the error case. This means we no longer need
4569: to compile a special version of alloc.o for visudo.
4570:
4571: 2004-11-19 11:54 millert
4572:
4573: * parse.h: Clarify comments about the data structures
4574:
4575: 2004-11-18 15:28 millert
4576:
4577: * visudo.c: Add support for VISUAL and EDITOR containing command
4578: line args. If env_editor is not set any args in VISUAL and
4579: EDITOR are ignored. Arguments are also now supported in
4580: def_editor.
4581:
4582: 2004-11-17 14:25 millert
4583:
4584: * parse.h: alias_matches() is no more
4585:
4586: 2004-11-17 14:09 millert
4587:
4588: * CHANGES, TODO: sync
4589:
4590: 2004-11-17 13:19 millert
4591:
4592: * Makefile.in: When regenerating the parser, don't replace gram.h
4593: unless it has changed.
4594:
4595: 2004-11-17 11:56 millert
4596:
4597: * Makefile.in: remove Makefile.binary for distclean
4598:
4599: 2004-11-17 11:18 millert
4600:
4601: * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4602: to make sure we can't overflow new_env.
4603:
4604: 2004-11-17 10:33 millert
4605:
4606: * sudo_edit.c: paranoia when stripping trailing slashes from
4607: tempdir.
4608:
4609: 2004-11-16 19:00 millert
4610:
4611: * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4612:
4613: 2004-11-16 18:59 millert
4614:
4615: * configure, configure.in, config.h.in, sudo.c: Add configure check
4616: for getgroups()
4617:
4618: 2004-11-16 18:55 millert
4619:
4620: * ldap.c: Use supplementary group vector in struct sudo_user.
4621:
4622: 2004-11-16 18:40 millert
4623:
4624: * match.c: Only do string comparisons on the group members if there
4625: is no supplemental group list.
4626:
4627: 2004-11-16 16:10 millert
4628:
4629: * CHANGES, TODO: sync
4630:
4631: 2004-11-16 15:54 millert
4632:
4633: * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4634: trailing slash so chop off any trailing slashes we see and add an
4635: explicit one.
4636:
4637: 2004-11-16 12:02 millert
4638:
4639: * match.c: remove bogus XXX comment
4640:
4641: 2004-11-16 11:10 millert
4642:
4643: * match.c: Get rid of alias_matches and correctly fall through to
4644: the non-alias cases when there is no alias with the specified
4645: name.
4646:
4647: 2004-11-16 10:47 millert
4648:
4649: * getspwuid.c: Cache non-existent passwd/group entries too.
4650:
4651: 2004-11-16 10:45 millert
4652:
4653: * gram.c: regen
4654:
4655: 2004-11-15 23:32 millert
4656:
4657: * getspwuid.c: fix typo
4658:
4659: 2004-11-15 23:24 millert
4660:
4661: * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4662: mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4663: Implement group caching and use the passwd and group caches
4664: throughout.
4665:
4666: 2004-11-15 14:43 millert
4667:
4668: * match.c: Properly negate the return value of alias_matches() when
4669: appropriate.
4670:
4671: 2004-11-15 14:38 millert
4672:
4673: * match.c: Make hostname_matches() return TRUE for a match, else
4674: FALSE like the caller expects.
4675:
4676: 2004-11-15 13:24 millert
4677:
4678: * Makefile.in: Add missing dependencies on gram.h
4679:
4680: 2004-11-15 13:06 millert
4681:
4682: * match.c: Use runas_matches in alias_matches() now that we have
4683: it.
4684:
4685: 2004-11-15 13:00 millert
4686:
4687: * parse.c, parse.h: Expand aliases in "sudo -l" mode
4688:
4689: 2004-11-15 12:33 millert
4690:
4691: * gram.y, match.c: Use ALIAS for the member type when storing an
4692: alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4693: match.c relies on the more generic type. Expand runas_matches
4694: instead of calling user_matches() inside of it since
4695: user_matches() looks up USERALIASes, not RUNASALIASes.
4696:
4697: 2004-11-15 12:05 millert
4698:
4699: * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4700: passwd entry.
4701:
4702: 2004-11-15 10:53 millert
4703:
4704: * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4705: configure.in, err.c, error.c, error.h, defaults.c, env.c,
4706: find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4707: sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4708: local error/warning functions like err/warn but that call an
4709: additional cleanup routine in the error case. This means we no
4710: longer need to compile a special version of alloc.o for visudo.
4711:
4712: 2004-11-15 09:59 millert
4713:
4714: * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4715: since the latter checks for "#uid".
4716:
4717: 2004-11-15 09:53 millert
4718:
4719: * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4720: db entries in 2 reb-black trees; one indexed by uid, the other by
4721: user name. The data returned from the cache should be considered
4722: read-only and is destroyed by sudo_endpwent().
4723:
4724: 2004-11-15 09:50 millert
4725:
4726: * match.c: add cast to uid_t
4727:
4728: 2004-11-15 09:49 millert
4729:
4730: * gram.y: missing free in alias_destroy
4731:
4732: 2004-11-15 09:49 millert
4733:
4734: * redblack.c: Can't use rbapply() for rbdestroy since the
4735: destructor is passed a data pointer, not a node pointer.
4736:
4737: 2004-11-14 23:06 millert
4738:
4739: * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4740: versions of setpwent() and endpwent() that set/end the shadow
4741: password file too.
4742:
4743: 2004-11-14 22:55 millert
4744:
4745: * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4746: visudo.c: Store aliases in a red-black tree.
4747:
4748: 2004-11-14 22:52 millert
4749:
4750: * Makefile.in, redblack.c, redblack.h: red-black tree
4751: implementation
4752:
4753: 2004-11-14 22:37 millert
4754:
4755: * visudo.c: Edit all sudoers file if there were unused or undefined
4756: aliases and we are in strict mode.
4757:
4758: 2004-11-12 11:19 millert
4759:
4760: * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4761: find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4762: Bring back the "secure_path" Defaults option now that Defaults
4763: take effect before the path is searched.
4764:
4765: 2004-11-11 12:22 millert
4766:
4767: * logging.c, parse.c: A user can always list their own entries,
4768: even with -u. Better error message when failing to list another
4769: user's entries.
4770:
4771: 2004-11-11 12:12 millert
4772:
4773: * parse.c, sudo.c, sudo.h: The syntax to list another user's
4774: entries is now "-u otheruser -l". Only root or users with sudo
4775: "ALL" may list other user's entries.
4776:
4777: 2004-11-11 11:30 millert
4778:
4779: * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4780: SECURITY NOTES
4781:
4782: 2004-11-11 11:25 millert
4783:
4784: * env.c: strip CDPATH too
4785:
4786: 2004-11-11 11:20 millert
4787:
4788: * env.c: strip exported bash functions from the environment.
4789:
4790: 2004-10-27 12:16 millert
4791:
4792: * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4793: variables for real commands and sudoedit. This avoids a
4794: confusing message when a user tries "sudo -l" or "sudo -v" and is
4795: denied.
4796:
4797: 2004-10-27 12:06 millert
4798:
4799: * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4800: appending lists too
4801:
4802: 2004-10-26 18:39 millert
4803:
4804: * logging.c: Convert some bitwise AND to ISSET
4805:
4806: 2004-10-26 18:29 millert
4807:
4808: * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4809:
4810: 2004-10-26 18:29 millert
4811:
4812: * CHANGES, TODO: sync
4813:
4814: 2004-10-26 18:28 millert
4815:
4816: * BUGS: new parser fixes most of the outstanding bugs
4817:
4818: 2004-10-26 18:27 millert
4819:
4820: * configure: regen
4821:
4822: 2004-10-26 18:26 millert
4823:
4824: * visudo.c: Rework for the new parser. Now checks for unused
4825: aliases in sudoers.
4826:
4827: 2004-10-26 18:25 millert
4828:
4829: * testsudoers.c: Rewrite for the new parser. Now supports a -d
4830: flag (dump) and adds a -h flag (host). It now defaults to the
4831: local hostname unless otherwise specified.
4832:
4833: 2004-10-26 18:23 millert
4834:
4835: * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4836: parse.h)
4837:
4838: 2004-10-26 18:22 millert
4839:
4840: * sudo.c: Update for new parse. We now call find_path() *after* we
4841: have updated the global defaults based on sudoers. Also adds
4842: support for listing other user's privs if you are root.
4843:
4844: 2004-10-26 18:21 millert
4845:
4846: * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4847: rewind().
4848:
4849: 2004-10-26 18:20 millert
4850:
4851: * logging.c, logging.h: Add NO_STDERR flag.
4852:
4853: 2004-10-26 18:19 millert
4854:
4855: * ldap.c: Split sudo_ldap_check() into three pieces:
4856: sudo_ldap_open(), udo_ldap_update_defaults() and
4857: sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4858: default options, find the command in the user's path, and then
4859: check whether the user is allowed to run it. The important thing
4860: here is that the default runas user may be specified as a default
4861: option and that needs to be set before we search for the command.
4862:
4863: 2004-10-26 18:17 millert
4864:
4865: * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4866: warning.
4867:
4868: 2004-10-26 18:16 millert
4869:
4870: * defaults.h: Add prototype for update_defaults()
4871:
4872: 2004-10-26 18:16 millert
4873:
4874: * defaults.c: Don't warn about line numbers now that we operate on
4875: a set of data structures (or LDAP) and not a file.
4876:
4877: 2004-10-26 18:15 millert
4878:
4879: * config.h.in: No long use lsearch()
4880:
4881: 2004-10-26 18:14 millert
4882:
4883: * Makefile.in: Update for new and changed file names.
4884:
4885: 2004-10-26 18:14 millert
4886:
4887: * LICENSE: no more BSD lsearch.c
4888:
4889: 2004-10-26 18:14 millert
4890:
4891: * match.c: foo_matches() routines now live in match.c Added
4892: user_matches(), runas_matches(), host_matches(), cmnd_matches()
4893: and alias_matches() that operate on the parsed sudoers file.
4894:
4895: 2004-10-26 18:12 millert
4896:
4897: * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4898: -> switch_buffer() WORD no longer needs to exclude '@' kill
4899: yywrap()
4900:
4901: 2004-10-26 18:10 millert
4902:
4903: * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4904: Rewritten parser that converts sudoers into a set of data
4905: structures. This eliminates ordering issues and makes it
4906: possible to apply sudoers Defaults entries before searching for
4907: the command.
4908:
4909: 2004-10-26 18:09 millert
4910:
4911: * configure.in, lsearch.c, emul/search.h: We won't be using
4912: lsearch() any longer.
4913:
4914: 2004-10-26 18:07 millert
4915:
4916: * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4917: has no entry.
4918:
4919: 2004-10-26 16:09 millert
4920:
4921: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4922: visudo.man.in: regen
4923:
4924: 2004-10-26 16:09 millert
4925:
4926: * visudo.pod: Update warnings to match new visudo
4927:
4928: 2004-10-26 16:08 millert
4929:
4930: * sudoers.pod: The new parser doesn't have the old ordering
4931: constraints.
4932:
4933: 2004-10-26 16:08 millert
4934:
4935: * sudo.pod: Document that -l now takes an optional username
4936: argument
4937:
4938: 2004-10-25 13:44 millert
4939:
4940: * RUNSON: AIX 5.2.0.0 works
4941:
4942: 2004-10-25 13:38 millert
4943:
4944: * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4945: instead. Fixes a compilation problem with Solaris 9's native
4946: LDAP.
4947:
4948: Set FLAG_MONITOR when needed.
4949:
4950: 2004-10-23 13:32 millert
4951:
4952: * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4953: match the traced process. Fixes relative paths.
4954:
4955: 2004-10-21 12:31 millert
4956:
4957: * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4958:
4959: 2004-10-13 12:52 millert
4960:
4961: * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4962: requires set_reuid() or setresuid()
4963:
4964: 2004-10-13 12:46 millert
4965:
4966: * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4967: configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4968: saved uids; they aren't worth bothering with.
4969:
4970: 2004-10-07 16:23 millert
4971:
4972: * glob.c: remove call to issetugid()
4973:
4974: 2004-10-07 14:57 millert
4975:
4976: * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
4977: wildcards. Now that we use glob() the bug is fixed.
4978:
4979: 2004-10-07 14:52 millert
4980:
4981: * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
4982: and stat each result that matches the basename of the user's
4983: command. This makes "cd /usr/bin ; sudo ./blah" work when
4984: sudoers allows /usr/bin/blah. Fixes bug #143.
4985:
4986: 2004-10-07 14:27 millert
4987:
4988: * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
4989: for extended glob (GLOB_TILDE and GLOB_BRACE)
4990:
4991: 2004-10-07 12:59 millert
4992:
4993: * config.h.in, configure, configure.in: Check for a glob() that
4994: supports GLOB_BRACE and GLOB_TILDE
4995:
4996: 2004-10-07 12:51 millert
4997:
4998: * LICENSE: reference glob
4999:
5000: 2004-10-07 12:50 millert
5001:
5002: * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5003: some unneeded extensions removed.
5004:
5005: 2004-10-05 17:26 millert
5006:
5007: * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5008: fail. It probably means we are out of space in the stack gap...
5009:
5010: 2004-10-05 17:20 millert
5011:
5012: * CHANGES: sync
5013:
5014: 2004-10-05 16:53 millert
5015:
5016: * mon_systrace.c: Take a stab at ldap sudoers support here.
5017:
5018: 2004-10-05 15:13 millert
5019:
5020: * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5021: SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5022: inadvertanly kill itself.
5023:
5024: 2004-10-05 14:21 millert
5025:
5026: * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5027:
5028: 2004-10-05 14:15 millert
5029:
5030: * mon_systrace.c: When modifying the environment, don't replace
5031: envp when we can get away with just rewriting pointers in the
5032: traced process.
5033:
5034: 2004-10-05 13:46 millert
5035:
5036: * mon_systrace.c, mon_systrace.h: Add environment updating via
5037: STRIOCINJECT (if available).
5038:
5039: 2004-10-05 10:22 millert
5040:
5041: * sudoers.cat, sudoers.man.in: regen
5042:
5043: 2004-10-04 16:15 millert
5044:
5045: * lex.yy.c: regen
5046:
5047: 2004-10-04 16:15 millert
5048:
5049: * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5050: not yyless(1)
5051:
5052: 2004-10-04 12:09 millert
5053:
5054: * mon_systrace.c: Include file is now mon_systrace.h
5055:
5056: 2004-10-04 12:07 millert
5057:
5058: * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5059: def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5060: sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5061: tracing, it is now "monitoring" which should be more a obvious
5062: name to non-hackers.
5063:
5064: 2004-10-01 15:06 millert
5065:
5066: * mon_systrace.c, mon_systrace.h: Fix some XXX
5067:
5068: 2004-10-01 14:30 millert
5069:
5070: * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5071: 1024 as the max # of entries (the max that systrace(4) allows).
5072:
5073: Only need to use SYSTR_POLICY_ASSIGN once
5074:
5075: Change check_syscall() -> find_handler() and have it return the
5076: handler instead of just running it. We need this since handler
5077: now have two parts: one part that generates and answer and
5078: another that gets called after the answer is accepted (to do
5079: logging).
5080:
5081: Add some missing check_exec for emul execv
5082:
5083: 2004-10-01 10:58 millert
5084:
5085: * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
1.6 millert 5086: $Sudo$ tags.
1.1 millert 5087:
5088: 2004-10-01 10:47 millert
5089:
5090: * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5091:
5092: 2004-09-30 20:46 millert
5093:
5094: * Makefile.in: add trace_systrace.o dependency
5095:
5096: 2004-09-30 19:00 millert
5097:
5098: * configure, configure.in: Also look for systrace.h in
5099: /usr/include/linux
5100:
5101: 2004-09-30 18:27 millert
5102:
5103: * mon_systrace.c, mon_systrace.h: Move all struct defs and
5104: prototypes into trace_systrace.h and mark all but
5105: systace_attach() static.
5106:
5107: 2004-09-30 18:14 millert
5108:
5109: * mon_systrace.c, mon_systrace.h: Add support for tracing
5110: emulations. At the moment, all emulations are compiled in. It
5111: might make sense to #ifdef them in the future, though this
5112: impeeds readability.
5113:
5114: 2004-09-30 17:07 millert
5115:
5116: * Makefile.in, configure.in, configure: rename systrace.c ->
5117: trace_systrace.c
5118:
5119: 2004-09-30 15:58 millert
5120:
5121: * parse.yacc: Allow this to build with a K&R compiler again
5122:
5123: 2004-09-30 13:58 millert
5124:
5125: * TODO: sync
5126:
5127: 2004-09-30 13:55 millert
5128:
5129: * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5130:
5131: 2004-09-30 13:44 millert
5132:
5133: * visudo.c: Exit() takes a negative value to indicate it was not
5134: called via signal.
5135:
5136: 2004-09-30 13:25 millert
5137:
5138: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5139: visudo.man.in: regen
5140:
5141: 2004-09-30 13:22 millert
5142:
5143: * Makefile.in, visudo.c: Define Err() and Errx() that are like
5144: err() and errx() but call Exit() instead of exit(). Build
5145: private copy of alloc.o for visudo that calls Err() and Errx().
5146:
5147: 2004-09-29 15:22 millert
5148:
5149: * lex.yy.c: regen
5150:
5151: 2004-09-29 15:22 millert
5152:
5153: * CHANGES: sync
5154:
5155: 2004-09-29 14:41 millert
5156:
5157: * visudo.c: Overhaul visudo for editing multiple files: o visudo
5158: has been broken out into functions (more work needed here) o
5159: each file is now edited before sudoers is re-parsed o if a
5160: #include line is added that file will be edited too
5161:
5162: TODO: o cleanup temp files when exiting via err() or errx() o
5163: continue breaking things out into separate functions
5164:
5165: 2004-09-29 14:36 millert
5166:
5167: * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5168: arg to open_sudoers that open_sudoers can use to indicate to the
5169: caller that the fd should not be closed when it is done with it.
5170: To be used by visudo to keep locked fds from being closed
5171: prematurely (and thus losing the lock).
5172:
5173: 2004-09-29 14:33 millert
5174:
5175: * parse.yacc, sudo.c: Add errorfile global that contains the name
5176: of the file that caused the error.
5177:
5178: 2004-09-29 14:30 millert
5179:
5180: * parse.lex: return COMMENT to yacc grammar for a #include line
5181:
5182: 2004-09-29 14:29 millert
5183:
5184: * parse.lex: Remove us of unput() in favor of yyless() which is
5185: cheaper.
5186:
5187: 2004-09-29 14:28 millert
5188:
5189: * parse.yacc: Allow an empty sudoers file.
5190:
5191: 2004-09-28 16:50 millert
5192:
5193: * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5194: doesn't do it for us.
5195:
5196: 2004-09-28 14:37 millert
5197:
5198: * lex.yy.c: regen
5199:
5200: 2004-09-28 14:36 millert
5201:
5202: * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5203: shadow the "quiet" global.
5204:
5205: 2004-09-28 14:33 millert
5206:
5207: * visudo.c: If a sudoers file includes other files, edit those too.
5208: Does not yes deal with creating the new includes files itself.
5209:
5210: 2004-09-28 14:31 millert
5211:
5212: * testsudoers.c: init_parser now takes a path
5213:
5214: 2004-09-28 14:31 millert
5215:
5216: * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5217: dealing with multiple sudoers files: o init_parser() now takes a
5218: path used to populate the sudoers global o the sudoers global is
5219: used to print the correct file in yyerror() o when switching to
5220: a new sudoers file, perserve old file name and line number
5221:
5222: 2004-09-28 14:29 millert
5223:
5224: * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5225: meaningful now that we can have multiple sudoers files.
5226:
5227: 2004-09-28 13:52 millert
5228:
5229: * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5230: sudoers_lookup() so we start at the right file position when
5231: reading include files.
5232:
5233: 2004-09-27 21:04 millert
5234:
5235: * sudoers.pod: document #include
5236:
5237: 2004-09-27 20:47 millert
5238:
5239: * lex.yy.c: regen
5240:
5241: 2004-09-27 20:47 millert
5242:
5243: * parse.lex: Add max depth of 128 for the include stack to avoid
5244: loops.
5245:
5246: Since yyerror() doesn't stop parsing, pass return values back to
5247: yylex and call yyterminate() on error.
5248:
5249: 2004-09-27 14:06 millert
5250:
5251: * sudoers.pod: document tracing
5252:
5253: 2004-09-27 14:05 millert
5254:
5255: * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5256: page
5257:
5258: 2004-09-27 12:08 millert
5259:
5260: * lex.yy.c: regen
5261:
5262: 2004-09-27 12:03 millert
5263:
5264: * parse.lex: Add support for #include in sudoers (visudo support
5265: TBD)
5266:
5267: 2004-09-27 12:02 millert
5268:
5269: * parse.yacc: make yyerror()'s argument const
5270:
5271: 2004-09-27 12:02 millert
5272:
5273: * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5274:
5275: 2004-09-27 12:01 millert
5276:
5277: * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5278: return a FILE *
5279:
5280: 2004-09-26 12:35 millert
5281:
5282: * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5283: version.h: Crank version
5284:
5285: 2004-09-26 12:33 millert
5286:
5287: * Makefile.in, sudo.psf: Better HP-UX depot construction
5288:
5289: 2004-09-25 17:08 millert
5290:
5291: * mon_systrace.c: o Made children global so check_exec() can lookup
5292: a child. o Replaced uid in struct childinfo with struct passwd *
5293: (for runas) o new_child() now takes a parent pid so the runas
5294: info can be inherited o Added find_child() to lookup a child by
5295: its pid o update_child() now fills in a struct passwd o Converted
5296: the big if/else mess in set_policy to a switch o Syscalls that
5297: change uid are now "ask" so we get SYSTR_MSG_UGID events
5298:
5299: 2004-09-25 17:01 millert
5300:
5301: * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5302: to lookup the shadow password. Will be used to a struct passwd
5303: that has the shadow password already filled in.
5304:
5305: 2004-09-25 16:58 millert
5306:
5307: * mon_systrace.c: add missing increment of addr in read_string()
5308:
5309: 2004-09-25 16:15 millert
5310:
5311: * mon_systrace.c: Remove bogus call to update_child() and some
5312: cosmetic fixes
5313:
5314: 2004-09-25 16:11 millert
5315:
5316: * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5317: initialized global for simplicity If STRIOCATTACH returns EBUSY
5318: we are already being traced Check for user_args == NULL in
5319: setproctitle() call Add missing calls to STRIOCANSWER
5320:
5321: 2004-09-25 13:15 millert
5322:
5323: * sudo.c: g/c sudo_pwdup proto
5324:
5325: 2004-09-24 20:21 millert
5326:
5327: * Makefile.in, sudo.psf: Add target for building a depot file
5328:
5329: 2004-09-24 20:07 millert
5330:
5331: * mon_systrace.c: trim includes
5332:
5333: 2004-09-24 14:11 millert
5334:
5335: * lex.yy.c, sudo.tab.h: regen
5336:
5337: 2004-09-24 14:10 millert
5338:
5339: * INSTALL: document --with-systrace
5340:
5341: 2004-09-24 14:10 millert
5342:
5343: * config.h.in, configure, configure.in: Add check for setproctitle
5344:
5345: 2004-09-24 14:09 millert
5346:
5347: * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5348: it can set the error code
5349:
5350: 2004-09-24 13:30 millert
5351:
5352: * mon_systrace.c: systrace(4) support for sudo. On systems with
5353: the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5354: patches) sudo can intercept exec calls and check the exec args
5355: against the sudoers file. In other words, sudo can now control
5356: subcommands and shell escapes.
5357:
5358: 2004-09-24 13:17 millert
5359:
5360: * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5361:
5362: 2004-09-24 13:15 millert
5363:
5364: * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5365: Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5366:
5367: 2004-09-24 13:13 millert
5368:
5369: * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5370: close on exec flag instead.
5371:
5372: 2004-09-24 13:11 millert
5373:
5374: * def_data.c, def_data.h, def_data.in: Add trace option
5375:
5376: 2004-09-23 20:24 millert
5377:
5378: * Makefile.in: Add systrace
5379:
5380: 2004-09-23 20:23 millert
5381:
5382: * INSTALL: SunOS /bin/sh blows up with configure
5383:
5384: 2004-09-23 20:23 millert
5385:
5386: * configure, configure.in: Include sys/param.h before systrace.h
5387:
5388: 2004-09-23 20:15 millert
5389:
5390: * configure: regen
5391:
5392: 2004-09-23 20:15 millert
5393:
5394: * pathnames.h.in: _PATH_DEV_SYSTRACE
5395:
5396: 2004-09-23 20:14 millert
5397:
5398: * configure.in: line up options in --help
5399:
5400: 2004-09-23 20:11 millert
5401:
5402: * config.h.in, configure.in: Add --with-systrace
5403:
5404: 2004-09-23 13:35 millert
5405:
5406: * configure: regen
5407:
5408: 2004-09-23 13:35 millert
5409:
5410: * aclocal.m4, configure.in: make this work with autoconf-2.59
5411:
5412: 2004-09-16 12:58 millert
5413:
5414: * sudo_edit.c: Simplify logic around open & stat of files and do
5415: sanity on edited file even if we lack fstat (still racable but
5416: worth doing).
5417:
5418: 2004-09-15 18:47 millert
5419:
5420: * HISTORY: Add support url
5421:
5422: 2004-09-15 16:11 millert
5423:
5424: * Makefile.in: versino 1.6.8p1
5425:
5426: 2004-09-15 15:20 millert
5427:
5428: * CHANGES: more changes for 1.6.8p1
5429:
5430: 2004-09-15 15:18 millert
5431:
5432: * version.h: 1.6.8p1
5433:
5434: 2004-09-15 12:16 millert
5435:
5436: * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5437: something other than a regular file.
5438:
5439: 2004-09-14 20:55 aaron
5440:
5441: * CHANGES: sync
5442:
5443: 2004-09-14 20:21 aaron
5444:
5445: * INSTALL: document --with-ldap-conf-file
5446:
5447: 2004-09-14 17:43 millert
5448:
5449: * CHANGES, ins_csops.h: political correctness strikes again
5450:
5451: 2004-09-14 15:09 millert
5452:
5453: * RUNSON: sync
5454:
5455: 2004-09-12 19:50 millert
5456:
5457: * Makefile.binary.in, Makefile.in: Install sudoedit man link
5458:
5459: 2004-09-12 14:25 millert
5460:
5461: * INSTALL: Update PAM note and mention where HP-UX users can
5462: download gcc binaries.
5463:
5464: 2004-09-12 12:08 millert
5465:
5466: * Makefile.in: libtool wants to install stuff from .libs so fake
5467: one up for binary installations.
5468:
5469: 2004-09-12 11:53 millert
5470:
5471: * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5472: -f set LIBTOOL correctly
5473:
5474: 2004-09-12 11:53 millert
5475:
5476: * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5477: sudoedit link instead of using ln -f
5478:
5479: 2004-09-12 10:22 millert
5480:
5481: * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5482: Makefile.binary.in for config.status substitution Add support for
5483: installing noexec bits
5484:
5485: 2004-09-12 10:21 millert
5486:
5487: * Makefile.in: Copy noexec bits into binary dists too No longer use
5488: my old arch script for making binary dists
5489:
5490: 2004-09-12 09:36 millert
5491:
5492: * Makefile.binary: Install sudoedit link.
5493:
5494: 2004-09-11 12:25 millert
5495:
5496: * emul/utime.h: avoid __P so there is no need for compat.h to be
5497: included
5498:
5499: 2004-09-11 12:24 millert
5500:
5501: * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5502:
5503: 2004-09-10 12:31 millert
5504:
5505: * compat.h: Fix Solatis futimes macro
5506:
5507: 2004-09-09 11:02 millert
5508:
5509: * sudo_edit.c: Rename ots -> omtim for improved readability.
5510:
5511: 2004-09-08 14:38 millert
5512:
5513: * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5514: keep the temp file open; re-opening it with the invoking user's
5515: euid is sufficient.
5516:
5517: 2004-09-08 14:36 millert
5518:
5519: * CHANGES: sync
5520:
5521: 2004-09-08 14:35 millert
5522:
5523: * sudo.cat, sudo.man.in: regen
5524:
5525: 2004-09-08 14:34 millert
5526:
5527: * sudo.pod: back out revision 1.70; it is no long applicable
5528:
5529: 2004-09-08 11:57 millert
5530:
5531: * env.c: Let the loader initialize nep
5532:
5533: 2004-09-08 11:49 millert
5534:
5535: * configure, configure.in, config.h.in: Removed unneed check for
5536: fchown Add check for gettimeofday Move autoheader template stuff
5537: into separate AH_TEMPLATE lines
5538:
5539: 2004-09-08 11:48 millert
5540:
5541: * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5542: timespec throughout.
5543:
5544: 2004-09-08 11:47 millert
5545:
5546: * Makefile.in: gettime.[co]
5547:
5548: 2004-09-08 11:47 millert
5549:
5550: * gettime.c: function to return the current time in a struct
5551: timespec
5552:
5553: 2004-09-08 10:51 millert
5554:
5555: * utimes.c: Not a darpa-sponsored file.
5556:
5557: 2004-09-07 16:36 millert
5558:
5559: * compat.h, config.h.in, configure, configure.in: Add a check for
5560: struct timespec and provide it for those without.
5561:
5562: 2004-09-07 15:56 millert
5563:
5564: * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5565: st_mtim and st_mtimespec and add macros for pulling the mtime sec
5566: and nsec out of struct stat. These are used in sudo_edit() to
5567: better tell whether or not the file has changed.
5568:
5569: 2004-09-07 15:55 millert
5570:
5571: * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5572: param to touch() for nsec
5573:
5574: 2004-09-07 14:06 millert
5575:
5576: * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5577: have to chown the file later. Only touch() the temp file if we
5578: can do it via the file descriptor. Don't check for modification
5579: of the temp file if we lack fstat(). Catch errors read()ing the
5580: temp file.
5581:
5582: 2004-09-07 14:04 millert
5583:
5584: * fileops.c: If path is NULL and fd == -1 return -1.
5585:
5586: 2004-09-07 13:31 millert
5587:
5588: * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5589: ones we opened so just close those in the child.
5590:
5591: 2004-09-07 13:14 millert
5592:
5593: * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5594: configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5595: utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5596: in touch(), emulating as needed. Not all systems are able to
5597: support setting the times of an fd so touch() takes both an fd
5598: and a file name as arguments.
5599:
5600: 2004-09-06 21:12 aaron
5601:
5602: * env.c: Rare SEGV
5603:
5604: 2004-09-06 16:46 millert
5605:
5606: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5607: visudo.man.in: regen
5608:
5609: 2004-09-06 16:45 millert
5610:
5611: * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5612: re-order some of the sections to match the order we use in
5613: OpenBSD.
5614:
5615: 2004-09-06 15:05 aaron
5616:
5617: * env.c: Openldap ~/.ldaprc fix
5618:
5619: 2004-09-06 12:18 millert
5620:
5621: * sudo.pod: Talk about how the editor must write its changes to the
5622: original file and not just use rename(2).
5623:
5624: 2004-09-06 12:12 millert
5625:
5626: * CHANGES: sync
5627:
5628: 2004-09-06 12:11 millert
5629:
5630: * sudo_edit.c: Keep the temp file open instead of re-opening after
5631: the editor has exited.
5632:
5633: 2004-09-06 12:10 millert
5634:
5635: * sample.pam: Update for current redhat/fedora core.
5636:
5637: 2004-09-02 21:56 aaron
5638:
5639: * README.LDAP: tls_ examples
5640:
5641: 2004-09-02 00:03 aaron
5642:
5643: * ldap.c: config tls_* options
5644:
5645: 2004-08-29 11:39 millert
5646:
5647: * configure, configure.in: No need for -lcrypt when using pam.
5648:
5649: 2004-08-26 23:57 millert
5650:
5651: * configure: regen
5652:
5653: 2004-08-26 23:44 aaron
5654:
5655: * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5656: option to override LDAP_CONF
5657:
5658: 2004-08-26 22:08 aaron
5659:
5660: * ldap.c: cleanup debug message
5661:
5662: 2004-08-26 19:29 aaron
5663:
5664: * README.LDAP: more config info
5665:
5666: 2004-08-24 14:01 millert
5667:
5668: * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5669: Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5670: cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5671: longer use gross statics in command_matches(). Also rename some
5672: variables for improved clarity.
5673:
5674: 2004-08-21 14:33 millert
5675:
5676: * INSTALL: document HP's crippled compiler deficiency.
5677:
5678: 2004-08-21 14:25 millert
5679:
5680: * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5681: descriptions. Noticed by Norihiko Murase.
5682:
5683: 2004-08-21 14:20 millert
5684:
5685: * configure, configure.in: --with-noexec takes an optional PATH
5686: argument.
5687:
5688: 2004-08-21 14:20 millert
5689:
5690: * INSTALL: document --with-noexec
5691:
5692: 2004-08-17 16:21 millert
5693:
5694: * RUNSON, TODO: sync
5695:
5696: 2004-08-17 15:11 millert
5697:
5698: * sudo_edit.c: Better warning message when sudoedit is unable to
5699: write to the destination file.
5700:
5701: 2004-08-17 14:53 millert
5702:
5703: * sudo.cat, sudo.man.in: regen
5704:
5705: 2004-08-17 14:53 millert
5706:
5707: * sudo.pod: Don't italicize the string "sudoedit"
5708:
5709: 2004-08-16 18:45 millert
5710:
5711: * HISTORY: Mention GratiSoft.
5712:
5713: 2004-08-11 14:29 millert
5714:
5715: * parse.yacc: Reset used_runas to FALSE when re-intializing the
5716: parser.
5717:
5718: 2004-08-09 19:04 millert
5719:
5720: * config.guess: Correct OpenBSD mips support
5721:
5722: 2004-08-09 17:28 millert
5723:
5724: * config.guess: Add OpenBSD/mips
5725:
5726: 2004-08-06 23:43 aaron
5727:
5728: * README.LDAP: More behavior notes
5729:
5730: 2004-08-06 23:36 aaron
5731:
5732: * README.LDAP: Updates on current behavior
5733:
5734: 2004-08-06 19:56 millert
5735:
5736: * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5737: no difference to formatted files).
5738:
5739: 2004-08-06 19:48 millert
5740:
5741: * CHANGES: new
5742:
5743: 2004-08-06 19:42 millert
5744:
5745: * sudo.c: Consistency. Use same error for bad -u #uid when
5746: targetpw is set as we do when a bad -u username is specified.
5747:
5748: 2004-08-06 19:33 millert
5749:
5750: * TODO: Add checksum idea from Steve Mancini
5751:
5752: 2004-08-06 19:32 millert
5753:
5754: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5755:
5756: 2004-08-06 19:31 millert
5757:
5758: * sudo.pod, sudoers.pod: Document the restriction on uids specified
5759: via -u when targetpw is set.
5760:
5761: 2004-08-06 19:24 millert
5762:
5763: * sudo.c: Error out when targetpw is enabled and sudo is run with
5764: -u #uid but #uid does not exist in the passwd database. We can't
5765: do target authentication when the target is not in passwd!
5766:
5767: 2004-08-05 21:16 millert
5768:
5769: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5770:
5771: 2004-08-05 21:14 millert
5772:
5773: * TODO: Some more todo for the next release.
5774:
5775: 2004-08-05 21:13 millert
5776:
5777: * INSTALL: Make it clear that PAM should be used for DCE support
5778: when possible.
5779:
5780: 2004-08-05 21:13 millert
5781:
5782: * sudoers.pod: o Document problems with wildcards and relative
5783: paths. o Make the order requirements more prominent. o Change a
5784: "set" to "reset" for clarity.
5785:
5786: 2004-08-05 14:29 millert
5787:
5788: * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5789:
5790: 2004-08-02 22:34 aaron
5791:
5792: * ldap.c: reflect changes to parse.c
5793:
5794: 2004-08-02 14:44 millert
5795:
5796: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5797: user_cmnd and user_args to command_matches(), just use the
5798: globals there. Since we keep state with statics anyway it is
5799: misleading to pretend that passing in different cmnd and
5800: cmnd_args will work.
5801:
5802: 2004-08-02 14:40 millert
5803:
5804: * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5805: pseudo-commands check for a '/' anywhere in cmnd, not just the
5806: first character.
5807:
5808: 2004-07-30 23:07 aaron
5809:
5810: * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5811: <oblin@mandrakesoft.com>
5812:
5813: 2004-07-30 22:41 aaron
5814:
5815: * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5816:
5817: 2004-07-30 22:06 aaron
5818:
5819: * README.LDAP: Sun One schema definition by
5820: Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5821:
5822: 2004-07-29 11:57 millert
5823:
5824: * CHANGES: typo
5825:
5826: 2004-07-23 16:44 millert
5827:
5828: * CHANGES: sync
5829:
5830: 2004-07-23 16:43 millert
5831:
5832: * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5833: remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5834: the parse.
5835:
5836: 2004-07-08 10:20 millert
5837:
5838: * CHANGES: PAM change
5839:
5840: 2004-07-07 21:04 aaron
5841:
5842: * ldap.c: Better debugging of ALL command
5843:
5844: 2004-07-07 20:15 millert
5845:
5846: * parse.c: When matching for "sudoedit" in sudoers check both the
5847: command the user typed *and* the command that is listed in the
5848: sudoers entry.
5849:
5850: 2004-07-04 19:59 aaron
5851:
5852: * ldap.c: Added !command feature
5853:
5854: 2004-06-28 10:51 millert
5855:
5856: * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5857: Brian Farrell
5858:
5859: 2004-06-10 23:11 millert
5860:
5861: * LICENSE: License is ISC-style, not BSD-style
5862:
5863: 2004-06-10 20:58 millert
5864:
5865: * CHANGES: sync
5866:
5867: 2004-06-10 16:54 millert
5868:
5869: * sudo.man.in, sudo.cat: regen
5870:
5871: 2004-06-10 16:53 millert
5872:
5873: * sudo.pod: o Update some out of date bits to reality o Change the
5874: shell promt in examples to bourne-shell style o Clarify some
5875: details o Add a CAVEAT about "sudo cd /foo"
5876:
5877: 2004-06-10 16:19 millert
5878:
5879: * check.c: Don't ask for a password if invoking user == target
5880: user.
5881:
5882: 2004-06-10 12:32 millert
5883:
5884: * sudo.c: typo in comment
5885:
5886: 2004-06-08 19:20 millert
5887:
5888: * sudoers.man.in, sudoers.cat: regen
5889:
5890: 2004-06-08 19:19 millert
5891:
5892: * sudoers.pod: Expand on NOEXEC a little.
5893:
5894: 2004-06-08 16:20 millert
5895:
5896: * TODO: sync
5897:
5898: 2004-06-08 15:58 millert
5899:
5900: * visudo.man.in, visudo.cat: regen
5901:
5902: 2004-06-08 15:55 millert
5903:
5904: * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5905: for runas_default being set after it has already been used.
5906:
5907: 2004-06-08 13:53 millert
5908:
5909: * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5910: has been set to TRUE or FALSE. This is more readable than
5911: checking for >=0 or < 0. Doesn't change the actual code
5912: generated.
5913:
5914: 2004-06-06 20:11 millert
5915:
5916: * sudoers.man.in, sudoers.cat: regen
5917:
5918: 2004-06-06 20:07 millert
5919:
5920: * sudoers, sudoers.pod: Correct description of where Defaults specs
5921: should go.
5922:
5923: 2004-06-06 20:02 millert
5924:
5925: * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5926: auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5927:
5928: 2004-06-06 19:58 millert
5929:
5930: * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5931: ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5932: tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5933: Remove trailing spaces, no actual code changes.
5934:
5935: 2004-06-06 16:22 millert
5936:
5937: * parse.yacc: Fix a >=0 that should be <0 that was improperly
5938: converted when UNSPEC was added.
5939:
5940: 2004-06-06 15:54 millert
5941:
5942: * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5943: to UNSPEC, not NOMATCH when resetting it.
5944:
5945: 2004-06-06 15:39 millert
5946:
5947: * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5948:
5949: 2004-06-05 13:55 millert
5950:
5951: * README.LDAP: Update for configure changes
5952:
5953: 2004-06-05 13:42 millert
5954:
5955: * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5956: respectively) and use these in parse.yacc. Also in parse.yacc
5957: initialize the *_matches vars to UNSPEC and add two macros,
5958: SETMATCH and SETNMATCH for use when setting *_matches to a value
5959: that may be NOMATCH/UNSPEC/TRUE/FALSE.
5960:
5961: 2004-06-05 11:17 millert
5962:
5963: * parse.yacc: Initialize runas to -2, not -1 since we need to be
5964: able to distinguish between the initialized value and the value
5965: of a non-match when passing along the runas value to multiple
5966: commands.
5967:
5968: The result of this is that an unmatched runas is now set to -1,
5969: not 0. This is required now that parse.c treats a FALSE value
5970: for runas as being explicitly denied.
5971:
5972: 2004-06-03 16:21 millert
5973:
5974: * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5975:
5976: 2004-06-03 12:37 millert
5977:
5978: * configure, configure.in: Add tests for what libs we need to link
5979: with for ldap and for whether or not lber.h needs to be
5980: explicitly included.
5981:
5982: 2004-06-02 20:30 aaron
5983:
5984: * ldap.c: Solaris native LDAP build fix
5985:
5986: 2004-06-01 16:56 millert
5987:
5988: * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
5989: use of an unset variable.
5990:
5991: 2004-06-01 16:56 millert
5992:
5993: * sudo.h: Add prototype for sudo_ldap_list_matches
5994:
5995: 2004-06-01 16:53 millert
5996:
5997: * compat.h, config.h.in, configure, configure.in: Better check for
5998: dirfd macro--we now set HAVE_DIRFD for the macro version too.
5999: Added check for dd_fd in `DIR' if no dirfd is found; this is now
6000: used to confitionally define the dirfd macro in compat.h.
6001:
6002: 2004-06-01 16:51 millert
6003:
6004: * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6005: function/macro.
6006:
6007: 2004-06-01 15:13 millert
6008:
6009: * compat.h, config.h.in, configure, configure.in: Add a check for a
6010: dirfd() function (like Linux) and add a dirfd macro in compat.h
6011: if there is no dirfd() function or macro.
6012:
6013: 2004-06-01 14:59 millert
6014:
6015: * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6016: needed.
6017:
6018: 2004-06-01 14:30 millert
6019:
6020: * CHANGES: Clarify closefrom() note.
6021:
6022: 2004-06-01 12:51 millert
6023:
6024: * parse.c: When checking for a command in the directory, only copy
6025: the base dir once.
6026:
6027: 2004-06-01 12:44 millert
6028:
6029: * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6030: Solaris closefrom() and only close the descriptors listed
6031: therein.
6032:
6033: 2004-06-01 12:23 millert
6034:
6035: * alloc.c: compat.h guarantees INT_MAX is defined.
6036:
6037: 2004-06-01 12:23 millert
6038:
6039: * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6040: without it and remove definition of RLIM_INFINITY (now unused).
6041:
6042: 2004-05-31 21:22 millert
6043:
6044: * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6045: parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6046: since the former is standardized.
6047:
6048: 2004-05-31 19:18 millert
6049:
6050: * CHANGES: sync
6051:
6052: 2004-05-31 19:10 millert
6053:
6054: * RUNSON: Add some entries that were mailed in a while ago
6055:
6056: 2004-05-31 14:16 millert
6057:
6058: * closefrom.c: o sysconf returns a long, not an int. o check for
6059: negative return value from sysconf/getdtablesize and use
6060: OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6061: without it (a fair guess...)
6062:
6063: 2004-05-30 12:25 millert
6064:
6065: * UPGRADE: Mention change in parse order for RunAs entries.
6066:
6067: 2004-05-30 12:15 millert
6068:
6069: * configure: regen
6070:
6071: 2004-05-29 18:29 millert
6072:
6073: * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6074: now takes an optional dir as a parameter
6075: o added check for ldap_initialize() and start_tls_s()
6076:
6077: 2004-05-29 14:54 millert
6078:
6079: * README.LDAP: Fix some typos, word choice and formatting issues.
6080:
6081: 2004-05-28 18:06 millert
6082:
6083: * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6084: stdio and just use read/write as it is simpler.
6085:
6086: 2004-05-28 16:27 millert
6087:
6088: * configure, configure.in: Remove hack overriding cross-compiler
6089: check. It should no longer be needed.
6090:
6091: 2004-05-28 16:26 millert
6092:
6093: * compat.h: Remove select() compat bits since we no longer use
6094: select().
6095:
6096: 2004-05-28 16:24 millert
6097:
6098: * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6099: timeout for systems that don't fully/properly implement select().
6100:
6101: 2004-05-27 19:14 millert
6102:
6103: * CHANGES: synbc
6104:
6105: 2004-05-27 19:12 millert
6106:
6107: * RUNSON: update
6108:
6109: 2004-05-27 19:12 millert
6110:
6111: * set_perms.c: Deal with systems that have no way of setting the
6112: effective uid such as nsr-tandem-nsk.
6113:
6114: 2004-05-27 19:01 millert
6115:
6116: * configure, configure.in: Define NO_SAVED_IDS if we don't find
6117: seteuid()
6118:
6119: 2004-05-27 18:21 millert
6120:
6121: * config.h.in, configure, configure.in: Add back check for
6122: setreuid() since NSK doesn't have it.
6123:
6124: 2004-05-27 15:57 millert
6125:
6126: * sudoers.cat, sudoers.man.in: regen
6127:
6128: 2004-05-27 15:56 millert
6129:
6130: * BUGS, CHANGES: sync
6131:
6132: 2004-05-27 15:55 millert
6133:
6134: * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6135: user was explicitly denied and the command matched. This fixes a
6136: long-standing bug and makes: foo machine = (ALL)
6137: /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6138:
6139: equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6140:
6141: 2004-05-27 15:52 millert
6142:
6143: * sudoers.pod: Clarify mail_noperm
6144:
6145: 2004-05-19 21:25 aaron
6146:
6147: * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6148:
6149: 2004-05-17 18:32 millert
6150:
6151: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6152: sudoers.cat, visudo.cat: regen
6153:
6154: 2004-05-17 18:31 millert
6155:
6156: * TODO: sync
6157:
6158: 2004-05-17 18:31 millert
6159:
6160: * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6161: remembers these?) and add a minimal sudoedit example.
6162:
6163: 2004-05-17 18:21 millert
6164:
6165: * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6166: filesystem -> file system
6167:
6168: 2004-05-17 18:19 millert
6169:
6170: * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6171:
6172: 2004-05-17 18:10 millert
6173:
6174: * lex.yy.c: regen
6175:
6176: 2004-05-17 17:57 millert
6177:
6178: * visudo.pod: remove my email addr
6179:
6180: 2004-05-17 17:55 millert
6181:
6182: * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6183: @mansectsu@ everywhere Make man page references links with L<>
6184:
6185: 2004-05-17 16:51 millert
6186:
6187: * parse.lex: Accept quoted globbing characters and pass them
6188: verbatim for fnmatch()
6189:
6190: 2004-05-17 16:50 millert
6191:
6192: * UPGRADE: Document that /tmp/.odus is gone.
6193:
6194: 2004-05-17 16:28 millert
6195:
6196: * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6197: /tmp/.odus as a possible timestamp dir unless specifically
6198: configured to do so. Instead, if no /var/run exists, use
6199: /var/adm/sudo or /usr/adm/sudo.
6200:
6201: 2004-05-17 16:08 millert
6202:
6203: * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6204: visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6205: on patches from Tom Bates.
6206:
6207: 2004-05-16 18:47 millert
6208:
6209: * CHANGES: There was no 1.6.7p6.
6210:
6211: 2004-05-16 16:38 millert
6212:
6213: * BUGS, CHANGES: sync
6214:
6215: 2004-05-16 16:36 millert
6216:
6217: * Makefile.in: add missing files to DISTFILES
6218:
6219: 2004-05-16 16:23 millert
6220:
6221: * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6222:
6223: 2004-05-16 16:20 millert
6224:
6225: * Makefile.in: Fix some line wrap and update (c) year
6226:
6227: 2004-04-28 15:05 aaron
6228:
6229: * README.LDAP: Build Note
6230:
6231: 2004-04-06 22:03 aaron
6232:
6233: * Makefile.in: Fix install-dirs
6234:
6235: 2004-04-04 20:27 millert
6236:
6237: * visudo.c: In Exit() when used as a signal handler, emsg is a
6238: pointer so sizeof() is wrong so make it a #define instead. Also
6239: avoid using a negative exit value. Found by Aaron Campbell
6240:
6241: 2004-03-24 18:23 millert
6242:
6243: * sudoers.pod: Remove bogus sentence about uids in a User_List.
6244: Document usernames vs. uid parsing in a Runas_List.
6245:
6246: 2004-03-24 18:06 millert
6247:
6248: * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6249: the user specified a uid with the -u flag and the uid exists in
6250: the passwd file, set runas_user to the name, not the uid.
6251:
6252: When comparing usernames in sudoers, if a name is really a uid
6253: (starts with '#') compare it numerically to pw_uid.
6254:
6255: 2004-03-22 13:35 millert
6256:
6257: * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6258:
6259: 2004-02-28 18:54 aaron
6260:
6261: * CHANGES, config.h.in, ldap.c: Added start_tls support
6262:
6263: 2004-02-14 18:04 millert
6264:
6265: * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6266: def_data.c, def_data.h to PARSESRCS.
6267:
6268: 2004-02-14 10:13 aaron
6269:
6270: * strlcat.c, strlcpy.c: Un-Fix last license munge
6271:
6272: 2004-02-13 16:37 millert
6273:
6274: * CHANGES, RUNSON, TODO: checkpoint
6275:
6276: 2004-02-13 16:37 millert
6277:
6278: * lex.yy.c, configure: regen
6279:
6280: 2004-02-13 16:36 millert
6281:
6282: * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6283: closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6284: find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6285: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6286: interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6287: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6288: strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6289: sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6290: sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6291: visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6292: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6293: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6294: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6295: auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6296: emul/search.h, emul/utime.h: More to a less restrictive,
6297: ISC-style license.
6298:
6299: 2004-02-12 21:08 aaron
6300:
6301: * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6302: def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6303: sudoers2ldif: Merged in LDAP Support
6304:
6305: 2004-02-08 15:53 millert
6306:
6307: * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6308: a macro.
6309:
6310: 2004-02-06 18:08 millert
6311:
6312: * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6313: already 0 so set the euid first, then just call setuid(0) to set
6314: the real uid too.
6315:
6316: 2004-02-06 14:52 millert
6317:
6318: * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6319: appropriate instead of seteuid() which may not exist.
6320:
6321: 2004-02-04 14:58 millert
6322:
6323: * LICENSE: 2004
6324:
6325: 2004-02-03 23:38 millert
6326:
6327: * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6328: --with-pc-insults configure option
6329:
6330: 2004-02-03 23:32 millert
6331:
6332: * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6333:
6334: 2004-02-01 15:45 millert
6335:
6336: * sudo.man.in, sudoers.man.in: regen
6337:
6338: 2004-02-01 15:44 millert
6339:
6340: * sudoers.pod: Add a note that noexec is not a cure-all.
6341:
6342: 2004-02-01 15:20 millert
6343:
6344: * sudoers.pod: Mention that disabling "root_sudo" is pretty
6345: pointless.
6346:
6347: 2004-02-01 15:20 millert
6348:
6349: * configure, configure.in: Substitute for root_sudo in sudoers.pod
6350:
6351: 2004-02-01 15:03 millert
6352:
6353: * sudo.pod: Add sudoedit to the NAME section
6354:
6355: 2004-02-01 15:00 millert
6356:
6357: * sudoers.pod: Document that fact that setting ignore_dot in
6358: sudoers has no effect due to the fact that find_path() is called
6359: *before* sudoers is read.
6360:
6361: 2004-01-29 19:50 millert
6362:
6363: * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6364:
6365: 2004-01-29 19:42 millert
6366:
6367: * BUGS, CHANGES, TODO: sync
6368:
6369: 2004-01-29 19:42 millert
6370:
6371: * sudo.man.in: regen
6372:
6373: 2004-01-29 19:41 millert
6374:
6375: * sudo.pod: Clarify that when sudo is run by root with the
6376: SUDO_USER variable set, the sudoers lookup happens for root and
6377: not the SUDO_USER user.
6378:
6379: 2004-01-29 17:33 millert
6380:
6381: * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6382: set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6383: auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6384:
6385: 2004-01-29 16:22 millert
6386:
6387: * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6388:
6389: 2004-01-29 16:15 millert
6390:
6391: * sudo.c: Don't look at prev_user until after we've parsed sudoers
6392: and done the password check. That way, if sudo/sudoedit is run
6393: from a root process that was invoked by sudo, we check sudoers
6394: for root, not the previous user. This makes sudoedit much more
6395: useful and means that for the sudo case, we get correct logging
6396: on who actually ran the command.
6397:
6398: 2004-01-22 19:22 millert
6399:
6400: * sudo_edit.c: Add a comment describing why we need to be notified
6401: about our child stopping.
6402:
6403: 2004-01-22 16:06 millert
6404:
6405: * def_data.c, def_data.in: Update the noexec variable descriptions
6406:
6407: 2004-01-22 14:18 millert
6408:
6409: * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6410: execve()
6411:
6412: 2004-01-22 12:14 millert
6413:
6414: * sudo_noexec.c: Alas, all the world does not go through execve(2).
6415: Many systems still have an execv(2) system call, Linux 2.6
6416: provides fexecve(2) and it is not uncommon for libc to have
6417: underscore ('_') versions of the functions to be used internally
6418: by the library. Instead of stubbing all these out by hand,
6419: define a macro and let it do the work. Extra exec functions
6420: pointed out by Reznic Valery.
6421:
6422: 2004-01-21 21:57 millert
6423:
6424: * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6425: Because we do a fork() first we need to be notified when the
6426: child has been stopped and then send that same signal to ourself
6427: so the shell can do its job control thing.
6428:
6429: 2004-01-21 21:44 millert
6430:
6431: * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6432: systems out there that want to run sudo that still don't support
6433: these we can try to deal with that later.
6434:
6435: 2004-01-21 20:03 millert
6436:
6437: * lex.yy.c: regen
6438:
6439: 2004-01-21 20:00 millert
6440:
6441: * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6442: -e / sudoedit
6443:
6444: 2004-01-21 19:08 millert
6445:
6446: * configure, configure.in: fix typo
6447:
6448: 2004-01-21 19:02 millert
6449:
6450: * config.h.in, configure.in: Add SET/CLR/ISSET
6451:
6452: 2004-01-21 18:55 millert
6453:
6454: * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6455: Pretty print the long usage() line to not wrap (assumes 80 char
6456: display)
6457:
6458: 2004-01-21 18:01 millert
6459:
6460: * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6461: is implied and no other flags are permitted.
6462:
6463: 2004-01-21 18:00 millert
6464:
6465: * sudo.h: Add a new flag, -e, that makes it possible to give users
6466: the ability to edit files with the editor of their choice as the
6467: invoking user, not the runas user. Temporary files are used for
6468: the actual edit and the temp file is copied over the original
6469: after the editor is done.
6470:
6471: 2004-01-21 17:25 millert
6472:
6473: * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6474: flag, -e, that makes it possible to give users the ability to
6475: edit files with the editor of their choice as the invoking user,
6476: not the runas user. Temporary files are used for the actual edit
6477: and the temp file is copied over the original after the editor is
6478: done.
6479:
6480: 2004-01-21 17:06 millert
6481:
6482: * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6483: variables is set, use that to determine the invoking user's true
6484: identity. That way the proper info gets logged by someone who
6485: has done "sudo su" but still uses sudo to as root. We can't do
6486: this for non-root users since that would open up a security hole,
6487: though perhaps it would be acceptable to use getlogin(2) on OSes
6488: where this a system call (and doesn't just look in the utmp
6489: file).
6490:
6491: 2004-01-21 16:58 millert
6492:
6493: * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6494:
6495: 2004-01-21 16:57 millert
6496:
6497: * configure, config.h.in, configure.in: Add check for fchown(2)
6498:
6499: 2004-01-20 14:22 millert
6500:
6501: * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6502: set_runaspw. It is far to late to set NewArgv[0] there and will
6503: have no effect anyway as cmnd and safe_cmnd have already been
6504: set.
6505:
6506: 2004-01-20 14:18 millert
6507:
6508: * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6509: did.
6510:
6511: 2004-01-18 20:17 millert
6512:
6513: * env.c, sudo.c: In -i mode always set new environment based on the
6514: runas user's passwd entry.
6515:
6516: 2004-01-18 17:56 millert
6517:
6518: * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6519: section with usage() in sudo.c. Also sort the flags in the
6520: OPTIONS section.
6521:
6522: 2004-01-18 17:55 millert
6523:
6524: * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6525: patches from David J. MacKenzie o Sort the flags in the usage
6526: message
6527:
6528: 2004-01-18 17:22 millert
6529:
6530: * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6531: substitution.
6532:
6533: 2004-01-17 16:34 millert
6534:
6535: * sudo.c: Change euid to runas user before calling find_path().
6536: Unfortunately, though runas_user can be modified in sudoers we
6537: haven't parsed sudoers yet.
6538:
6539: 2004-01-17 16:25 millert
6540:
6541: * sudoers.man.in, sudoers.pod: Add missing defintion of
6542: Parameter_List and use single pipes in the Defaults EBNF
6543: definition.
6544:
6545: 2004-01-17 13:49 millert
6546:
6547: * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6548: don't want to reset the contents of runas_pw if the user
6549: specified a user via the -u flag.
6550:
6551: Avoid unnecessary passwd lookups in set_authpw(). In most cases
6552: we already have the info in runas_pw.
6553:
6554: 2004-01-16 18:16 millert
6555:
6556: * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6557: RedHat
6558:
6559: 2004-01-16 18:12 millert
6560:
6561: * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6562:
6563: 2004-01-16 18:10 millert
6564:
6565: * parse.c: If we can't stat the command as root, try as the runas
6566: user instead.
6567:
6568: 2004-01-16 18:09 millert
6569:
6570: * testsudoers.c, visudo.c: Add stub set_runaspw() function
6571:
6572: 2004-01-16 18:09 millert
6573:
6574: * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6575: will be used as a callback to update runas_pw when the runas user
6576: changes.
6577:
6578: 2004-01-16 18:07 millert
6579:
6580: * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6581:
6582: 2004-01-16 18:05 millert
6583:
6584: * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6585: a PERM_RUNAS that just changes the euid.
6586:
6587: 2004-01-16 18:04 millert
6588:
6589: * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6590: allocate memory in one chunk for easy free()ing. Also change it
6591: from static to extern.
6592:
6593: 2004-01-16 18:03 millert
6594:
6595: * defaults.c, defaults.h: Add callback support
6596:
6597: 2004-01-16 18:02 millert
6598:
6599: * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6600: it for runas_default
6601:
6602: 2004-01-15 15:13 millert
6603:
6604: * auth/fwtk.c: Add support for chalnecho and display server
6605: responses used by fwtk >= 2.0
6606:
6607: 2004-01-12 18:39 millert
6608:
6609: * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6610:
6611: 2004-01-12 14:03 millert
6612:
6613: * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6614: sudo.h: Use closefrom() instead of doing the equivalent inline.
6615:
6616: 2004-01-12 13:55 millert
6617:
6618: * closefrom.c: closefrom(3) for systems w/o it
6619:
6620: 2004-01-09 16:29 millert
6621:
6622: * sudoers.man.in: Update from .pod file.
6623:
6624: 2004-01-09 16:26 millert
6625:
6626: * configure, configure.in: Substitute noexec_file for the sudoers
6627: man page
6628:
6629: 2004-01-09 16:24 millert
6630:
6631: * sudo.man.in, sudo.pod: Mention noexec
6632:
6633: 2004-01-09 16:16 millert
6634:
6635: * sudoers.man.in, sudoers.pod: Document noexec
6636:
6637: 2004-01-09 14:38 millert
6638:
6639: * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6640: definition from config.h to pam.c where it belongs. We can't
6641: have this in config.h since that gets included too early.
6642:
6643: 2004-01-09 14:35 millert
6644:
6645: * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6646: implementations put their headers in /usr/include/pam instead of
6647: /usr/include/security.
6648:
6649: 2004-01-09 14:32 millert
6650:
6651: * configure.in: I missed changing the EXEC macro -> EXECV here when
6652: I changed this in config.h.in and sudo.c a while ago.
6653:
6654: 2004-01-09 13:15 millert
6655:
6656: * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6657:
6658: 2004-01-09 03:29 millert
6659:
6660: * configure, configure.in: o merge the hpux case entries into a
6661: single entry w/ its own sub-case statement. o HP-UX >= 11
6662: support getspnam(), use it in preference to getprpwuid()
6663:
6664: 2004-01-09 02:58 millert
6665:
6666: * configure, configure.in: eval $shrext so that it expands nicely
6667: on MacOS X
6668:
6669: 2004-01-09 02:50 millert
6670:
6671: * Makefile.in: Don't lie about making a module, it does the wrong
6672: thing on mach
6673:
6674: 2004-01-09 02:49 millert
6675:
6676: * ltmain.sh: Remove requirement that libs must begin with "lib".
6677: They don't when we point directly at the lib using LD_PRELOAD or
6678: its equivalent.
6679:
6680: 2004-01-09 02:01 millert
6681:
6682: * acsite.m4: Disable support for c++, f77 and java. We don't need
6683: it, it takes a lot of time, and it hosed our check for shared lib
6684: support.
6685:
6686: 2004-01-09 02:00 millert
6687:
6688: * configure: regen
6689:
6690: 2004-01-09 02:00 millert
6691:
6692: * configure.in: Call AC_ENABLE_SHARED and check the status of
6693: enable_shared to know when shared libs are available.
6694:
6695: 2004-01-09 01:37 millert
6696:
6697: * acsite.m4: Duh, OpenBSD suports shared libs too
6698:
6699: 2004-01-09 01:18 millert
6700:
6701: * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6702: qualifiers.
6703:
6704: 2004-01-09 01:15 millert
6705:
6706: * configure, configure.in: o No need to check for sed, libtool
6707: config does that for us o move check for --with-noexec until
6708: after libtool magic is run so we can use $can_build_shared and
6709: $shrext
6710:
6711: 2004-01-09 01:14 millert
6712:
6713: * ltmain.sh: Don't print a bunch of crap about library installs
6714: since we are not really installing a library.
6715:
6716: 2004-01-09 00:38 millert
6717:
6718: * env.c: Make format_env() varargs Add noexec support for Darwin,
6719: MacOS X, Irix, and Tru64
6720:
6721: 2004-01-09 00:32 millert
6722:
6723: * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6724: changes: o no ldconfig in the finish step o assume no libprefix
6725: or version is needed
6726:
6727: 2004-01-09 00:15 millert
6728:
6729: * sudo_noexec.c: Fix compilation under K&R
6730:
6731: 2004-01-06 09:31 millert
6732:
6733: * CHANGES: checkpoint
6734:
6735: 2004-01-06 09:28 millert
6736:
6737: * sudo_noexec.c: stub execve() that just returns EACCES; used for
6738: noexec functionality
6739:
6740: 2004-01-06 01:42 millert
6741:
6742: * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6743: issue with generated code.
6744:
6745: 2004-01-05 16:10 millert
6746:
6747: * def_data.c, def_data.h, def_data.in: Move the environment
6748: defaults to the end and shorten a few of the descriptions.
6749:
6750: 2004-01-05 15:05 millert
6751:
6752: * configure.in, configure: no shared libs on ultris or convexos
6753:
6754: 2004-01-05 15:03 millert
6755:
6756: * Makefile.in, configure, configure.in: Build sudo_noexec shared
6757: object using libtool; could use some cleanup.
6758:
6759: 2004-01-05 14:59 millert
6760:
6761: * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6762:
6763: 2004-01-05 14:56 millert
6764:
6765: * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6766: that order is not important.
6767:
6768: 2004-01-05 12:15 millert
6769:
6770: * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6771: pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6772:
6773: 2004-01-04 22:58 millert
6774:
6775: * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6776: _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6777: option. The default value of noexec_file is set to this.
6778:
6779: 2004-01-04 21:48 millert
6780:
6781: * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6782: parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6783: support for preloading a shared object containing a dummy
6784: execve() function that just sets error and returns -1. This adds
6785: a "noexec_file" option to load the filename as well as a "noexec"
6786: flag to enable it unconditionally. There is also a NOEXEC tag
6787: that can be attached to specific commands and an EXEC tag to
6788: disable it.
6789:
6790: 2004-01-04 21:40 millert
6791:
6792: * mkdefaults: add missing newline to usage statement
6793:
6794: 2004-01-04 20:39 millert
6795:
6796: * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6797:
6798: 2004-01-04 20:16 millert
6799:
6800: * logging.c: Don't truncate usernames to 8 characters in the log
6801: message.
6802:
6803: 2004-01-04 20:13 millert
6804:
6805: * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6806:
6807: 2004-01-04 20:12 millert
6808:
6809: * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6810: sudoers.pod: Add a new option, lecture_file, that can be used to
6811: point to a custom sudo lecture.
6812:
6813: 2003-12-31 17:46 millert
6814:
6815: * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6816: auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6817: zero_bytes() function to do the equivalent of bzero in such a way
6818: that will heopfully not be optimized away by sneaky compilers.
6819:
6820: 2003-12-31 13:35 millert
6821:
6822: * err.c: Use #ifdef __STDC__, not #if __STDC__.
6823:
6824: 2003-12-30 17:41 millert
6825:
6826: * mkdefaults: Always put at least one space between the def_* macro
6827: name and its definition.
6828:
6829: 2003-12-30 17:34 millert
6830:
6831: * configure, configure.in: Adjust code for --without-lecture to
6832: match new values.
6833:
6834: 2003-12-30 17:33 millert
6835:
6836: * visudo.man.in: regen after pasto fix
6837:
6838: 2003-12-30 17:31 millert
6839:
6840: * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6841: from a flag to a tuple.
6842:
6843: 2003-12-30 17:31 millert
6844:
6845: * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6846: defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6847: support for tuples in def_data.in; these are implemented as an
6848: enum type. Currently there is only a single tuple enum but in
6849: the future we may have one tuple enum per T_TUPLE entry in
6850: def_data.in. Currently listpw, verifypw and lecture are tuples.
6851: This avoids the need to have two entries (one ival, one str) for
6852: pwflags and syslog values.
6853:
6854: lecture is now a tuple with the following values: never, once,
6855: always
6856:
6857: We no longer use both an int and string entry for syslog
6858: facilities and priorities. Instead, there are logfac2str() and
6859: logpri2str() functions that get used when we need to print the
6860: string values.
6861:
6862: 2003-12-30 17:20 millert
6863:
6864: * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6865: logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6866: visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6867: auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6868: auth/sudo_auth.c: Create def_* macros for each defaults value so
6869: we no longer need the def_{flag,ival,str,list,mode} macros (which
6870: have been removed). This is a step toward more flexible data
6871: types in def_data.in.
6872:
6873: 2003-12-30 15:55 millert
6874:
6875: * TODO: checkpoint
6876:
6877: 2003-12-22 21:18 millert
6878:
6879: * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6880: unusual for users to place "sudo -k" in a .logout file which can
6881: cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6882: daemon has died. Previously, this would result in useless mail
6883: and logging.
6884:
6885: 2003-12-16 13:51 millert
6886:
6887: * visudo.pod: fix pasto in VISUAL description
6888:
6889: 2003-12-09 22:09 millert
6890:
6891: * configure: regen
6892:
6893: 2003-12-09 22:08 millert
6894:
6895: * CHANGES: checkpoint
6896:
6897: 2003-12-09 22:02 millert
6898:
6899: * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6900: too
6901:
6902: 2003-08-12 16:45 millert
6903:
6904: * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6905: not already there).
6906:
6907: 2003-06-28 21:31 millert
6908:
6909: * auth/pam.c: Fix a core dump on Solaris by preserving the
6910: pam_handle_t we used during authentication for pam_prep_user().
6911: If we didn't authenticate (ie: ticket still valid), we call
6912: pam_init() from pam_prep_user(). This is something of a hack; it
6913: may be better to change the auth API and add an auth_final()
6914: function that acts like pam_prep_user().
6915:
6916: 2003-06-21 12:50 millert
6917:
6918: * set_perms.c: Add explicit declaration of printerr variable in
6919: function header (was defaulting to int which is OK but oh so K&R
6920: :-). From Theo.
6921:
6922: 2003-06-09 19:00 millert
6923:
6924: * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6925:
6926: 2003-06-09 16:07 millert
6927:
6928: * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6929: problem where the sudo process would spin eating up CPU until
6930: sendmail finished when it has to send mail.
6931:
6932: 2003-05-30 16:22 millert
6933:
6934: * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6935: disavowed it
6936:
6937: 2003-05-21 21:53 millert
6938:
6939: * parse.c: Don't assume that getgrnam() calls don't modify contents
6940: of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6941: can happen. Based on a patch from Kirk Webb.
6942:
6943: 2003-05-06 11:25 millert
6944:
6945: * configure.in: missing ;;
6946:
6947: 2003-05-06 00:53 millert
6948:
6949: * configure.in: darwin has a broken setreuid() in at least some
6950: versions
6951:
6952: 2003-05-06 00:31 millert
6953:
6954: * env.c: Fix an off by one error when reallocating the environment;
6955: Kevin Pye
6956:
6957: 2003-04-30 14:04 millert
6958:
6959: * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6960:
6961: 2003-04-28 19:30 millert
6962:
6963: * HISTORY: More info on the early days from Coggs.
6964:
6965: 2003-04-21 14:47 millert
6966:
6967: * auth/kerb5.c: remove errant semicolon that prevented compilation
6968: under heimdal
6969:
6970: 2003-04-15 20:42 millert
6971:
6972: * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6973: env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6974: goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6975: parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6976: strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
6977: sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
6978: version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
6979: auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6980: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6981: auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6982: auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
6983: on affected files
6984:
6985: 2003-04-15 20:25 millert
6986:
6987: * LICENSE: slightly different wording for the darpa credit
6988:
6989: 2003-04-15 14:37 millert
6990:
6991: * LICENSE: Add DARPA credit
6992:
6993: 2003-04-14 16:49 millert
6994:
6995: * auth/kerb5.c: Use krb5_princ_component() instead of
6996: krb5_princ_realm() for MIT Kerberos like we did before I messed
6997: things up ;-)
6998:
6999: Use krb5_principal_get_comp_string() to do the same thing w/
7000: Heimdal. I'm not sure if the component should be 0 or 1 in this
7001: case.
7002:
7003: #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7004: older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7005: should be a configure check for this I guess.
7006:
7007: 2003-04-13 15:48 millert
7008:
7009: * TROUBLESHOOTING, config.h.in, configure, configure.in,
7010: sample.sudoers: builtin -> built-in; Jason McIntyre
7011:
7012: 2003-04-13 15:45 millert
7013:
7014: * sudoers.pod: built in -> built-in; Jason McIntyre
7015:
7016: 2003-04-09 16:14 millert
7017:
7018: * CHANGES: checkpoint for 1.6.7p3
7019:
7020: 2003-04-09 16:14 millert
7021:
7022: * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7023: Spencer. Amazingly, sudo source from 1985 is available via
7024: groups.google.com
7025:
7026: 2003-04-09 16:13 millert
7027:
7028: * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7029: set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7030: for the RLIMIT_CORE restoration on some OSes.
7031:
7032: 2003-04-04 12:46 millert
7033:
7034: * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7035:
7036: 2003-04-04 12:45 millert
7037:
7038: * config.h.in, configure, configure.in: Check for heimdal even if
7039: we found krb5-config and define HAVE_HEIMDAL.
7040:
7041: 2003-04-03 22:04 millert
7042:
7043: * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7044: The former is no longer defined by MIT kerb5 (though it used to
7045: be and indeed remains so in Heimdal).
7046:
7047: 2003-04-03 10:16 millert
7048:
7049: * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7050: duplicate) directories to "mkdir -p" since that seems to break on
7051: Tru64 Unix at least. This basically brings back what shipped
7052: with sudo 1.6.6.
7053:
7054: 2003-04-02 13:57 millert
7055:
7056: * auth/kerb5.c: Correct number of args to
7057: krb5_principal_get_realm() and fix an unclosed comment that hid
7058: the bug.
7059:
7060: 2003-04-02 13:45 millert
7061:
7062: * configure: regen
7063:
7064: 2003-04-02 13:45 millert
7065:
7066: * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7067: configure.in, version.h: ++version
7068:
7069: 2003-04-02 13:44 millert
7070:
7071: * configure.in: use krb5-config to determine Kerberos V details if
7072: it exists
7073:
7074: 2003-04-02 13:25 millert
7075:
7076: * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7077: interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7078: visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7079: auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7080: throughout. The main exception is openlog(). Since the admin
7081: may be filtering logs based on the program name in the log files,
7082: hard code this to "sudo".
7083:
7084: 2003-04-02 13:16 millert
7085:
7086: * Makefile.in: Add getprogname.c and err.c
7087:
7088: 2003-04-02 13:15 millert
7089:
7090: * configure: regen
7091:
7092: 2003-04-02 13:15 millert
7093:
7094: * configure.in, config.h.in: Add checks for getprognam(),
7095: __progname and err.h
7096:
7097: 2003-04-02 13:14 millert
7098:
7099: * err.c, emul/err.h: For systems withour err/warn functions.
7100:
7101: 2003-04-02 13:14 millert
7102:
7103: * getprogname.c: For systems neither getprogname() nor __progname;
7104: uses Argv[0].
7105:
7106: 2003-04-01 10:09 millert
7107:
7108: * CHANGES: checkpoint for 1.6.7p1
7109:
7110: 2003-04-01 10:02 millert
7111:
7112: * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7113:
7114: 2003-04-01 09:58 millert
7115:
7116: * check.c: oflow detection in expand_prompt() was faulty (false
7117: positives). The count was based on strlcat() return value which
7118: includes the length of the entire string.
7119:
7120: 2003-03-30 19:02 millert
7121:
7122: * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7123:
7124: 2003-03-24 16:09 millert
7125:
7126: * logging.c: g/c unused variable
7127:
7128: 2003-03-24 11:06 millert
7129:
7130: * configure: regen
7131:
7132: 2003-03-24 11:05 millert
7133:
7134: * configure.in: use man sections 8 and 5 for csops
7135:
7136: 2003-03-21 18:11 millert
7137:
7138: * configure: regen
7139:
7140: 2003-03-21 15:10 millert
7141:
7142: * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7143: of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7144:
7145: 2003-03-21 14:02 millert
7146:
7147: * configure: regen
7148:
7149: 2003-03-21 14:01 millert
7150:
7151: * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7152: An alternate libpath may be specified or -blibpath support can be
7153: disabled. Also change conifgure such that -blibpath is not
7154: specified if no -L libpaths were added to SUDO_LDFLAGS.
7155:
7156: 2003-03-20 22:05 millert
7157:
7158: * configure.in: add AIX blibpath support
7159:
7160: 2003-03-20 20:28 millert
7161:
7162: * INSTALL, configure.in: --with-skey and --with-opie now take an
7163: option directory argument This obsoletes a --with-csops hack
7164: (/tools/cs/skey)
7165:
7166: Also remove the remaining direct uses of "echo"
7167:
7168: 2003-03-20 17:44 millert
7169:
7170: * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7171: -lroken optional for KTH Kerberos IV and V.
7172:
7173: 2003-03-20 14:42 millert
7174:
7175: * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7176: -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7177: specified variable.
7178:
7179: 2003-03-20 14:40 millert
7180:
7181: * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7182: There is a new configure option, --with-rpath to control this
7183: behavior.
7184:
7185: 2003-03-19 23:50 millert
7186:
7187: * configure.in: for kerb4 put libdes after libkrb on the link line
7188:
7189: 2003-03-19 23:49 millert
7190:
7191: * auth/kerb4.c: typo
7192:
7193: 2003-03-19 23:33 millert
7194:
7195: * configure.in: fix kerberos lib check when a path is specified
7196:
7197: 2003-03-19 21:04 millert
7198:
7199: * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7200: reapchild after sending mail instead of doing a conditional
7201: sudo_waitpid.
7202:
7203: 2003-03-19 16:20 millert
7204:
7205: * configure: regen
7206:
7207: 2003-03-19 16:19 millert
7208:
7209: * configure.in: replace =DIR with [=DIR] where sensible
7210:
7211: 2003-03-19 16:16 millert
7212:
7213: * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7214: include/lib detection based on openssh's configure.in
7215:
7216: 2003-03-19 15:58 millert
7217:
7218: * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7219: argument.
7220:
7221: 2003-03-15 22:03 millert
7222:
7223: * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7224: says username is 32 bytes.
7225:
7226: 2003-03-15 21:18 millert
7227:
7228: * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7229: snprintf, not sprintf
7230:
7231: 2003-03-15 21:18 millert
7232:
7233: * auth/rfc1938.c: use snprintf
7234:
7235: 2003-03-15 15:37 millert
7236:
7237: * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7238: kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7239: copyright year
7240:
7241: 2003-03-15 15:31 millert
7242:
7243: * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7244: Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7245: logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7246: sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7247: visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7248: copyright year
7249:
7250: 2003-03-15 15:19 millert
7251:
7252: * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7253: with %lu
7254:
7255: 2003-03-15 15:17 millert
7256:
7257: * configure: regen
7258:
7259: 2003-03-15 15:16 millert
7260:
7261: * configure.in: correct error messages for
7262: --with-sudoers-{mode,uid,gid}
7263:
7264: 2003-03-15 15:10 millert
7265:
7266: * alloc.c: make the malloc(0) error specific to each function to
7267: aid tracking down bugs.
7268:
7269: 2003-03-15 14:49 millert
7270:
7271: * alloc.c: deal with platforms where size_t is signed and there is
7272: no SIZE_MAX or SIZE_T_MAX
7273:
7274: 2003-03-15 14:10 millert
7275:
7276: * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7277: warnings.
7278:
7279: 2003-03-15 13:02 millert
7280:
7281: * sudo.c: Use stat_sudoers macro so --with-stow can work
7282:
7283: 2003-03-15 13:01 millert
7284:
7285: * INSTALL, config.h.in, configure, configure.in: Add support for
7286: --with-stow based on patches from Robert Uhl
7287:
7288: 2003-03-15 12:51 millert
7289:
7290: * env.c: fix indentation
7291:
7292: 2003-03-15 00:21 millert
7293:
7294: * configure.in: back out rev 1.352
7295:
7296: 2003-03-14 20:11 millert
7297:
7298: * lex.yy.c: regen
7299:
7300: 2003-03-14 20:11 millert
7301:
7302: * parse.lex: use strlcpy, not strncpy
7303:
7304: 2003-03-14 19:48 millert
7305:
7306: * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7307: setusercontext() failure.
7308:
7309: 2003-03-14 19:43 millert
7310:
7311: * logging.c: use pid_t
7312:
7313: 2003-03-14 10:43 millert
7314:
7315: * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7316:
7317: 2003-03-14 10:35 millert
7318:
7319: * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7320:
7321: 2003-03-13 21:47 millert
7322:
7323: * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7324:
7325: 2003-03-13 21:38 millert
7326:
7327: * configure: regen
7328:
7329: 2003-03-13 21:38 millert
7330:
7331: * configure.in: put -ldl after -lpam, not before; fixes static
7332: linking on Linux
7333:
7334: 2003-03-13 21:17 millert
7335:
7336: * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7337: getifaddrs() case.
7338:
7339: 2003-03-13 20:24 millert
7340:
7341: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7342: sudoers.cat, visudo.cat: regen
7343:
7344: 2003-03-13 20:23 millert
7345:
7346: * Makefile.in: Preserve copyright notice from .pod file in .man.in
7347: file
7348:
7349: 2003-03-13 20:01 millert
7350:
7351: * visudo.pod: Add sudoers(5) to SEE ALSO
7352:
7353: 2003-03-13 15:27 millert
7354:
7355: * lex.yy.c: regen
7356:
7357: 2003-03-13 15:27 millert
7358:
7359: * parse.lex: Don't assume libc can realloc() a NULL string. If
7360: malloc/realloc fails, make sure we just return; yyerror() is not
7361: terminal.
7362:
7363: 2003-03-13 15:17 millert
7364:
7365: * lex.yy.c: regen
7366:
7367: 2003-03-13 15:17 millert
7368:
7369: * parse.lex: simplify fill_args a little and use strlcpy for
7370: paranoia
7371:
7372: 2003-03-13 15:00 millert
7373:
7374: * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7375: testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7376: overflow. In all cases the strings were either pre-allocated to
7377: the correct size of length checks were done before the copy but a
7378: little paranoia can go a long way.
7379:
7380: 2003-03-13 12:54 millert
7381:
7382: * sudo.h: Add strlc{at,py} protos
7383:
7384: 2003-03-13 12:03 millert
7385:
7386: * env.c, interfaces.c: Use erealloc3()
7387:
7388: 2003-03-13 12:00 millert
7389:
7390: * configure: regen
7391:
7392: 2003-03-13 12:00 millert
7393:
7394: * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7395: need >=). Use memcpy() instead of strcpy() in estrdup() so this
7396: is strcpy()-free.
7397:
7398: 2003-03-13 11:58 millert
7399:
7400: * sudo.c: snprintf() a uid as %lu, not %ld to match the
7401: MAX_UID_T_LEN test in configure.
7402:
7403: 2003-03-13 11:56 millert
7404:
7405: * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7406: just unsigned.
7407:
7408: 2003-03-12 18:46 millert
7409:
7410: * sudo.c: Use snprintf() for paranoia
7411:
7412: 2003-03-12 17:16 millert
7413:
7414: * parse.yacc: Use emalloc2 and erealloc3
7415:
7416: 2003-03-12 17:08 millert
7417:
7418: * Makefile.in: strlc{at,py} for those w/o it
7419:
7420: 2003-03-12 17:07 millert
7421:
7422: * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7423:
7424: 2003-03-12 17:07 millert
7425:
7426: * config.h.in, configure, configure.in: Add stlc{at,py} for those
7427: w/o it.
7428:
7429: 2003-03-12 16:51 millert
7430:
7431: * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7432: emalloc2().
7433:
7434: 2003-03-12 16:45 millert
7435:
7436: * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7437: certain size.
7438:
7439: 2003-03-12 16:41 millert
7440:
7441: * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7442: bzero and with error/oflow checking.
7443:
7444: 2003-03-12 16:23 millert
7445:
7446: * alloc.c: Error out on malloc(0); suggested by theo
7447:
7448: 2003-03-09 19:34 millert
7449:
7450: * configure, configure.in: fix a typo; David Krause
7451:
7452: 2003-03-07 10:46 millert
7453:
7454: * sudo.pod: fix typo
7455:
7456: 2003-03-03 21:47 millert
7457:
7458: * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7459:
7460: 2003-03-01 13:20 millert
7461:
7462: * configure.in, config.h.in: not not; Anil Madhavapeddy
7463:
7464: 2003-01-23 03:03 millert
7465:
7466: * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7467:
7468: 2003-01-20 16:13 millert
7469:
7470: * parse.yacc: Add some missing ';' rule terminators that bison
7471: warns about.
7472:
7473: 2003-01-20 16:07 millert
7474:
7475: * config.sub: fix typo I introduced in last merge
7476:
7477: 2003-01-20 15:59 millert
7478:
7479: * configure: regenerate with autoconf 2.57
7480:
7481: 2003-01-20 15:58 millert
7482:
7483: * config.h.in: Add missing "$HOME"
7484:
7485: 2003-01-20 15:57 millert
7486:
7487: * configure.in: Add some more square backets to make autoconf 2.57
7488: happy
7489:
7490: 2003-01-20 14:39 millert
7491:
7492: * config.guess, config.sub, mkinstalldirs: Updates from
7493: autoconf-2.57
7494:
7495: 2003-01-17 18:10 millert
7496:
7497: * lex.yy.c, sudo.tab.h: regen
7498:
7499: 2003-01-17 18:09 millert
7500:
7501: * parse.lex, parse.yacc, sudoers.pod: Add support for
7502: Defaults>RunasUser
7503:
7504: 2003-01-06 19:10 millert
7505:
7506: * visudo.c: fclose() yyin after each yyparse() is done and use
7507: fopen() instead of using freopen().
7508:
7509: 2003-01-06 19:02 millert
7510:
7511: * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7512: It looks like the issue is that yyrestart() does not reset the
7513: start condition to INITIAL which is an issue since we parse
7514: sudoers multiple times.
7515:
7516: 2003-01-06 18:47 millert
7517:
7518: * parse.lex: Work around what appears to be a flex bug when dealing
7519: with files that lack a final newline before EOF. This adds a
7520: rule to match EOF in the non-initial states which resets the
7521: state to INITIAL and throws an error.
7522:
7523: 2003-01-06 15:06 millert
7524:
7525: * visudo.c: o The parser needs sudoers to end with a newline but
7526: some editors (emacs) may not add one. Check for a missing
7527: newline at EOF and add one if needed. o Set quiet flag during
7528: initial sudoers parse (to get options) o Move yyrestart() call
7529: and always use freopen() to open yyin after initial sudoers
7530: parse.
7531:
7532: 2002-12-15 11:24 millert
7533:
7534: * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7535: Want to set effective gid, not real gid, when reading sudoers.
7536:
7537: 2002-12-15 11:08 millert
7538:
7539: * set_perms.c: don't compile set_perms_posix if we have setreuid or
7540: setresuid
7541:
7542: 2002-12-14 14:21 millert
7543:
7544: * sudo.pod, sudoers.pod: document new prompt escapes
7545:
7546: 2002-12-14 14:15 millert
7547:
7548: * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7549: now gets collapsed to "%" as was originally intended. This also
7550: gets rid of lastchar (does lookahead instead of lookback) which
7551: should simplify the logic slightly.
7552:
7553: 2002-12-13 13:20 millert
7554:
7555: * tgetpass.c: Write the prompt *after* turning off echo to avoid
7556: some password characters being echoed on heavily-loaded machines
7557: with fast typists.
7558:
7559: 2002-12-13 13:09 millert
7560:
7561: * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7562:
7563: 2002-12-13 12:48 millert
7564:
7565: * configure.in: Fix IRIX fallout from name changes in man dir/sect
7566: Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7567: DOT edu
7568:
7569: 2002-12-13 11:33 millert
7570:
7571: * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7572: in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7573:
7574: 2002-11-28 18:43 millert
7575:
7576: * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7577: call this for us.
7578:
7579: 2002-11-26 12:09 millert
7580:
7581: * sudo.c: fix typo in comment; Pedro Bastos
7582:
7583: 2002-11-22 14:41 millert
7584:
7585: * INSTALL: document --disable-setresuid
7586:
7587: 2002-11-22 14:41 millert
7588:
7589: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7590: Sprinkle some volatile qualifiers to prevent over-enthusiastic
7591: optimizers from removing memset() calls.
7592:
7593: 2002-11-22 14:11 millert
7594:
7595: * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7596: -Wsign-compare
7597:
7598: 2002-11-22 14:09 millert
7599:
7600: * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7601: version based on setresuid() or setreuid() when possible since
7602: that allows us to support the stay_setuid option and we always
7603: know exactly what the semantics will be (various Linux kernels
7604: have broken POSIX saved uid support).
7605:
7606: 2002-11-22 14:08 millert
7607:
7608: * config.h.in, configure: regen from configure.in
7609:
7610: 2002-11-22 14:07 millert
7611:
7612: * configure.in: Add checks for setresuid() and a way to disable
7613: using it
7614:
7615: 2002-11-22 14:05 millert
7616:
7617: * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7618: or setre[ug]id(). The new set_perms stuff only uses things it
7619: knows are there.
7620:
7621: 2002-11-22 13:33 millert
7622:
7623: * sudo.c: Before exec, restore state of signal handlers to be the
7624: same as when we were initialy invoked instead of just reseting to
7625: SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7626: patch from Paul Markham.
7627:
7628: 2002-11-22 13:23 millert
7629:
7630: * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7631: message when sudo is run by root and no_root_sudo is set
7632:
7633: 2002-09-19 17:27 millert
7634:
7635: * README: update ftp link for bison
7636:
7637: 2002-07-20 08:30 millert
7638:
7639: * set_perms.c: Error out if setusercontext() fails and the runas
7640: user is not root.
7641:
7642: 2002-05-20 16:51 millert
7643:
7644: * auth/securid5.c: Fix rcsid
7645:
7646: 2002-05-20 16:50 millert
7647:
7648: * configure.in: Fix SecurID API test
7649:
7650: 2002-05-17 13:20 millert
7651:
7652: * env.c: typo in comment
7653:
7654: 2002-05-17 13:20 millert
7655:
7656: * configure.in: securid5 stuff needs pthreads. Just adding
7657: -lpthread is suboptimal but I don't see a better way at the
7658: moment.
7659:
7660: 2002-05-17 13:04 millert
7661:
7662: * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7663: Michael Stroucken
7664:
7665: 2002-05-17 13:02 millert
7666:
7667: * configure.in: Add check for SecurID 5.0 API
7668:
7669: 2002-05-08 16:46 millert
7670:
7671: * strerror.c: We actually do still need config.h to get the 'const'
7672: definition for K&R C.
7673:
7674: 2002-05-05 16:43 millert
7675:
7676: * configure: regen with autoconf 2.5.3
7677:
7678: 2002-05-05 16:25 millert
7679:
7680: * configure.in: Don't set sysconfdir to '/etc' if the user has
7681: specified a --prefix.
7682:
7683: 2002-05-05 16:14 millert
7684:
7685: * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7686: don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7687: to workaround a bug
7688:
7689: 2002-05-05 15:58 millert
7690:
7691: * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7692: dump_defaults() knows how to dump lists.
7693:
7694: 2002-05-04 21:31 millert
7695:
7696: * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7697: INSTALL.binary, README: ++version
7698:
7699: 2002-05-04 20:57 millert
7700:
7701: * sudoers.pod: document timestampowner
7702:
7703: 2002-05-04 20:45 millert
7704:
7705: * check.c: Don't call set_perms() when doing timestamp stuff unless
7706: timestamp_uid != 0.
7707:
7708: 2002-05-04 20:43 millert
7709:
7710: * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7711: testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7712: is no longer used
7713:
7714: 2002-05-03 18:48 millert
7715:
7716: * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7717: timestamp dirs. This allows the timestamp dir to be shared via
7718: NFS (though this is not recommended).
7719:
7720: 2002-05-03 18:47 millert
7721:
7722: * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7723: of the authentication timestamp dir"
7724:
7725: 2002-05-02 15:40 millert
7726:
7727: * env.c: Don't try to pre-compute the size of the new envp, just
7728: allocate space up front and realloc as needed. Changes to the
7729: new env pointer must all be made through insert_env() which now
7730: keeps track of spaced used and allocates as needed.
7731:
7732: 2002-04-26 15:12 millert
7733:
7734: * configure: regen
7735:
7736: 2002-04-26 15:12 millert
7737:
7738: * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7739:
7740: 2002-04-25 11:36 millert
7741:
7742: * INSTALL.binary, README: ++version
7743:
7744: 2002-04-25 11:35 millert
7745:
7746: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7747: visudo.man.in, configure: regen
7748:
7749: 2002-04-25 11:31 millert
7750:
7751: * CHANGES, RUNSON, TODO: Sync with 1.6.6
7752:
7753: 2002-04-25 11:30 millert
7754:
7755: * check.c: The the loop used to expand %h and %u, the lastchar
7756: variable was not being initialized. This means that if the last
7757: char in the prompt is '%' and the first char is 'h' or 'u' a
7758: extra copy of the host or user name would be copied, for which
7759: space had not been allocated.
7760:
7761: 2002-04-18 11:41 millert
7762:
7763: * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7764: version to 1.6.6
7765:
7766: 2002-04-18 11:39 millert
7767:
7768: * auth/afs.c: #undef VOID to get rid of an AFS warning
7769:
7770: 2002-04-18 11:38 millert
7771:
7772: * env.c: Use easprintf instead of emalloc + sprintf for some
7773: things.
7774:
7775: 2002-03-15 19:45 millert
7776:
7777: * lex.yy.c: regen
7778:
7779: 2002-03-15 19:44 millert
7780:
7781: * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7782: Jepeway's email address so people don't bug him ;-)
7783:
7784: 2002-03-11 22:19 millert
7785:
7786: * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7787: and also call endgrent() at the same time.
7788:
7789: 2002-02-21 22:23 millert
7790:
7791: * INSTALL: Make it clear which configure options take arguments.
7792:
7793: 2002-01-25 13:38 millert
7794:
7795: * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7796: is no RLIM_INFINITY, just pretend it is -1. This works because
7797: we only check for RLIM_INFINITY and do not set anything to that
7798: value.
7799:
7800: 2002-01-22 11:43 millert
7801:
7802: * auth/pam.c: Zero and free allocated memory when there is a
7803: conversation error.
7804:
7805: 2002-01-21 22:37 millert
7806:
7807: * auth/bsdauth.c: Use sigaction() not signal()
7808:
7809: 2002-01-21 22:26 millert
7810:
7811: * INSTALL: Mention that some linux kernels have broken POSIX saved
7812: ID support
7813:
7814: 2002-01-21 21:03 millert
7815:
7816: * CHANGES: checkpoint for 1.6.5p2
7817:
7818: 2002-01-21 21:01 millert
7819:
7820: * configure: regen
7821:
7822: 2002-01-21 21:01 millert
7823:
7824: * configure.in: Add --disable-setreuid flag
7825:
7826: 2002-01-21 21:00 millert
7827:
7828: * INSTALL: Document new --disable-setreuid option and change
7829: description for --disable-saved-ids to match new error message.
7830:
7831: 2002-01-21 21:00 millert
7832:
7833: * set_perms.c: fatal() now takes an argument that determines
7834: whether or not to call perror().
7835:
7836: 2002-01-21 20:58 millert
7837:
7838: * PORTING, TROUBLESHOOTING: Update for new error messages from
7839: set_perms()
7840:
7841: 2002-01-21 17:46 millert
7842:
7843: * auth/pam.c: Make this compile w/o warnings
7844:
7845: 2002-01-21 17:36 millert
7846:
7847: * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7848:
7849: 2002-01-21 17:25 millert
7850:
7851: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7852: was not zeroed after use when AIX authentication, BSD
7853: authentication, FWTK or PAM was in use.
7854:
7855: 2002-01-20 14:21 millert
7856:
7857: * auth/pam.c: Avoid giving PAM a NULL password response, use the
7858: empty string instead. This avoids a log warning when the user
7859: hits ^C at the password prompt when PAM is in use.
7860:
7861: 2002-01-19 19:46 millert
7862:
7863: * auth/pam.c: Don't check the return value of pam_setcred(). In
7864: Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7865: not the return code for the setcred module. Because we haven't
7866: called pam_authenticate(), this is not set and so pam_setcred()
7867: returns PAM_PERM_DENIED.
7868:
7869: 2002-01-19 19:43 millert
7870:
7871: * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7872: and a directory.
7873:
7874: 2002-01-18 14:18 millert
7875:
7876: * configure: regen
7877:
7878: 2002-01-18 14:18 millert
7879:
7880: * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7881: has a bogus setreuid() o new NetBSD has a real setreuid() o add
7882: check for freeifaddrs() if getifaddrs() exists.
7883:
7884: 2002-01-18 14:17 millert
7885:
7886: * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7887: so add a test for that and if it is not present just use free().
7888:
7889: 2002-01-17 11:30 millert
7890:
7891: * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7892:
7893: 2002-01-17 10:56 millert
7894:
7895: * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7896: skeyaccess() denies access to normal passwords, not AUTH_FATAL
7897: (which just causes an exit).
7898:
7899: 2002-01-17 10:35 millert
7900:
7901: * visudo.c: Don't use memory after it has been freed.
7902:
7903: 2002-01-17 00:24 millert
7904:
7905: * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7906: Patch from Phillip E. Lobbes
7907:
7908: 2002-01-16 20:00 millert
7909:
7910: * BUGS: ++version
7911:
7912: 2002-01-16 19:53 millert
7913:
7914: * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7915:
7916: 2002-01-16 18:37 millert
7917:
7918: * configure: regen
7919:
7920: 2002-01-16 18:37 millert
7921:
7922: * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7923: version 1.6.5
7924:
7925: 2002-01-16 18:37 millert
7926:
7927: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7928: visudo.man.in: sudo version 1.6.5
7929:
7930: 2002-01-16 16:28 millert
7931:
7932: * logging.c: o when invoking the mailer as root use a hard-coded
7933: environment that doesn't include any info from the user's
7934: environment. Basically paranoia.
7935:
7936: o Add support for the NO_ROOT_MAILER compile-time option and run
7937: the mailer as the user and not root if NO_ROOT_MAILER is
7938: defined.
7939:
7940: 2002-01-16 16:27 millert
7941:
7942: * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7943:
7944: 2002-01-16 16:26 millert
7945:
7946: * configure: regen
7947:
7948: 2002-01-16 16:26 millert
7949:
7950: * version.h: version 1.6.5
7951:
7952: 2002-01-16 16:26 millert
7953:
7954: * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7955: option to run the mailer as the user and not root.
7956:
7957: 2002-01-16 12:44 millert
7958:
7959: * CHANGES: checkpoint for 1.6.4p2
7960:
7961: 2002-01-15 19:22 millert
7962:
7963: * PORTING: Mention the "seteuid(0): Operation not permitted"
7964: problem here too just for good measure.
7965:
7966: 2002-01-15 18:43 millert
7967:
7968: * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7969: preserved from the user's environment instead of being reset
7970: based on the passwd database when the "env_reset" option was
7971: used. Now it is reset as it should be.
7972:
7973: 2002-01-15 17:47 millert
7974:
7975: * configure: regen
7976:
7977: 2002-01-15 17:47 millert
7978:
7979: * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
7980: sudo.c: Add a configure option to turn off use of POSIX saved IDs
7981:
7982: 2002-01-15 15:48 millert
7983:
7984: * configure: regen
7985:
7986: 2002-01-15 15:48 millert
7987:
7988: * configure.in: add --with-efence option
7989:
7990: 2002-01-15 15:39 millert
7991:
7992: * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
7993: problem where "sudo -l" would not work if always_set_home was
7994: set.
7995:
7996: 2002-01-15 13:16 millert
7997:
7998: * lex.yy.c: regen
7999:
8000: 2002-01-15 13:16 millert
8001:
8002: * parse.lex: Quoted commas were not being treated correctly in
8003: command line arguments.
8004:
8005: 2002-01-14 20:53 millert
8006:
8007: * sudo.c: o Move the call to rebuild_env() until after
8008: MODE_RESET_HOME is set. Otherwise, the set_home option has no
8009: effect.
8010:
8011: o Fix use of freed memory when the "fqdn" flag is set. This was
8012: introduced by the fix for the "segv when gethostbynam() fails"
8013: bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8014: not set so there is no need to check the "fqdn" flag in
8015: set_fqdn() itself.
8016:
8017: 2002-01-14 20:45 millert
8018:
8019: * env.c: Add 'continue' statements to optimize the switch
8020: statement. From Solar.
8021:
8022: 2002-01-13 13:42 millert
8023:
8024: * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8025:
8026: 2002-01-13 13:36 millert
8027:
8028: * sudoers.pod: Add caveat about stay_setuid flag
8029:
8030: 2002-01-13 13:29 millert
8031:
8032: * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8033: is not set, set all uids to 0 and use set_perms_fallback().
8034:
8035: 2002-01-13 13:28 millert
8036:
8037: * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8038: used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8039:
8040: 2002-01-13 13:27 millert
8041:
8042: * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8043: mailer since we never want to run the mailer setuid.
8044:
8045: 2002-01-12 17:55 millert
8046:
8047: * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8048: visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8049:
8050: 2002-01-12 14:00 millert
8051:
8052: * Makefile.in, Makefile.binary: Fix mansect substitution
8053:
8054: 2002-01-12 13:15 millert
8055:
8056: * Makefile.in: Substitute man sections in Makefile.binary
8057:
8058: 2002-01-12 13:15 millert
8059:
8060: * Makefile.binary: Sync install targets with Makefile.in and
8061: substitute in man sections.
8062:
8063: 2002-01-12 13:09 millert
8064:
8065: * INSTALL, INSTALL.binary: version is 1.6.4
8066:
8067: 2002-01-12 12:59 millert
8068:
8069: * Makefile.in: Repair bindist target
8070:
8071: 2002-01-12 11:43 millert
8072:
8073: * CHANGES: sync for 1.6.4
8074:
8075: 2002-01-10 13:00 millert
8076:
8077: * install-sh: Fix case where neither whoami nor id are found
8078:
8079: 2002-01-09 12:35 millert
8080:
8081: * install-sh: If neither whoami nor id exists, just assume we are
8082: root.
8083:
8084: 2002-01-09 11:56 millert
8085:
8086: * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8087: to be needed on AIX which for some reason isn't pulling in the
8088: malloc prototype.
8089:
8090: 2002-01-08 10:00 millert
8091:
8092: * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8093:
8094: 2002-01-08 09:21 millert
8095:
8096: * CHANGES: checkpoint
8097:
8098: 2002-01-08 09:20 millert
8099:
8100: * sudo.c: Defer assigning new environment until right before the
8101: exec.
8102:
8103: 2002-01-08 09:08 millert
8104:
8105: * parse.c: kill extra blank line
8106:
8107: 2002-01-07 13:59 millert
8108:
8109: * configure: regen
8110:
8111: 2002-01-07 13:59 millert
8112:
8113: * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8114: motorola gcc-derived compiler doesn't recognise -O2.
8115:
8116: 2002-01-06 23:02 millert
8117:
8118: * HISTORY: Clarify origins of Root Group sudo a bit based on info
8119: from billp@rootgroup.com
8120:
8121: 2002-01-02 22:41 millert
8122:
8123: * LICENSE: 2002
8124:
8125: 2002-01-02 22:26 millert
8126:
8127: * CHANGES: checkpoint for 1.6.4rc1
8128:
8129: 2002-01-02 17:40 millert
8130:
8131: * config.h.in: now generated via autoheader
8132:
8133: 2002-01-02 17:40 millert
8134:
8135: * configure: regen
8136:
8137: 2002-01-02 17:37 millert
8138:
8139: * compat.h: Move in some stuff that was previously in config.h.
8140:
8141: 2002-01-02 17:36 millert
8142:
8143: * configure.in, aclocal.m4: Add info for autoheader.
8144:
8145: 2002-01-01 16:53 millert
8146:
8147: * Makefile.in: o Add DESTDIR support
8148: o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8149: non-root installs
8150:
8151: 2002-01-01 16:48 millert
8152:
8153: * install-sh: Add -M option (like -m but only for root) If we can't
8154: find "whoami", use "id" w/ some sed.
8155:
8156: 2002-01-01 14:01 millert
8157:
8158: * configure: regen
8159:
8160: 2002-01-01 14:00 millert
8161:
8162: * configure.in: allow user to always override mansectsu and
8163: mansectform
8164:
8165: 2001-12-31 17:05 millert
8166:
8167: * mkinstalldirs: update from autoconf 2.52
8168:
8169: 2001-12-31 17:03 millert
8170:
8171: * config.guess, config.sub: Update from autoconf 2.52
8172:
8173: 2001-12-31 16:57 millert
8174:
8175: * configure: regen with autoconf 2.52
8176:
8177: 2001-12-31 16:57 millert
8178:
8179: * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8180: compiler in ANSI mode
8181: o Remove compiler-specific checks for HP-UX now that we use
8182: AC_PROG_CC_STDC
8183:
8184: 2001-12-31 12:19 millert
8185:
8186: * RUNSON: Checkpoint
8187:
8188: 2001-12-31 12:18 millert
8189:
8190: * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8191: for the target user; on Linux this often sets resource limits.
8192: o When calling pam_end(), try to convert the auth->result to a
8193: PAM_FOO value. This is a hack--we really need to stash the
8194: last PAM_FOO value received and use that instead.
8195:
8196: 2001-12-31 12:18 millert
8197:
8198: * set_perms.c, sudo.h: o Add pam_prep_user function to call
8199: pam_setcred() for the target user; on Linux this often sets
8200: resource limits.
8201:
8202: 2001-12-31 00:53 millert
8203:
8204: * env.c: Fix off by one error in number of bytes allocated via
8205: malloc (does not affected any released version of sudo).
8206:
8207: 2001-12-30 17:12 millert
8208:
8209: * lex.yy.c: regen
8210:
8211: 2001-12-30 17:12 millert
8212:
8213: * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8214: variable w/o requiring that they be quoted.
8215:
8216: 2001-12-30 14:26 millert
8217:
8218: * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8219: quotes are needed when adding/deleting/assigning a single value
8220: to a list.
8221:
8222: 2001-12-30 13:58 millert
8223:
8224: * Makefile.in: Don't rely on mkdefaults being executable, call perl
8225: explicitly.
8226:
8227: 2001-12-30 13:41 millert
8228:
8229: * parse.yacc: Remove some XXX that are no longer relevant.
8230:
8231: 2001-12-30 13:40 millert
8232:
8233: * defaults.c: o Roll our own loop instead of using strpbrk() for
8234: better grokability o When adding to a list we must malloc() and
8235: use memcpy(), not strdup() since we must only copy len bytes
8236: from str.
8237:
8238: 2001-12-21 16:49 millert
8239:
8240: * parse.yacc: typo in comment
8241:
8242: 2001-12-19 11:50 millert
8243:
8244: * CHANGES: checkpoint
8245:
8246: 2001-12-19 10:56 millert
8247:
8248: * configure: regen
8249:
8250: 2001-12-19 10:56 millert
8251:
8252: * configure.in: avoid the -g flag unless --with-devel was specified
8253:
8254: 2001-12-19 10:04 millert
8255:
8256: * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8257: from the tarball
8258:
8259: 2001-12-19 09:46 millert
8260:
8261: * Makefile.in: def_data.c was missing
8262:
8263: 2001-12-18 12:42 millert
8264:
8265: * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8266: case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8267: in keep_env
8268:
8269: 2001-12-17 20:48 millert
8270:
8271: * TODO: Another TODO item
8272:
8273: 2001-12-17 19:50 millert
8274:
8275: * sudoers: Add comment for Default section so folks know where it
8276: should go.
8277:
8278: 2001-12-17 18:56 millert
8279:
8280: * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8281: case
8282:
8283: 2001-12-17 18:35 millert
8284:
8285: * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8286:
8287: 2001-12-17 18:33 millert
8288:
8289: * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8290: o a User_List can not contain a uid
8291: o mention that the Defaults section should come after Alias
8292: definitions but before the user specifications
8293:
8294: 2001-12-15 11:51 millert
8295:
8296: * sudoers.cat, sudoers.man.in: regen
8297:
8298: 2001-12-15 11:51 millert
8299:
8300: * sudoers.pod: Fix listpw and verifypw sections, they were not
8301: being formatted properly.
8302:
8303: 2001-12-15 11:39 millert
8304:
8305: * sudoers.cat, sudoers.man.in: regen
8306:
8307: 2001-12-15 11:38 millert
8308:
8309: * sudoers.pod: fix typos
8310:
8311: 2001-12-15 10:57 millert
8312:
8313: * configure: regen
8314:
8315: 2001-12-15 10:57 millert
8316:
8317: * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8318: rolling our own
8319:
8320: 2001-12-15 10:33 millert
8321:
8322: * README: Reference sudo.ws not courtesan.com
8323:
8324: 2001-12-15 10:29 millert
8325:
8326: * PORTING: Add notes on shadow passwords
8327:
8328: 2001-12-15 00:48 millert
8329:
8330: * BUGS: In list mode (sudo -l), characters escaped with a backslash
8331: are shown verbatim with the backslash.
8332:
8333: 2001-12-15 00:44 millert
8334:
8335: * sudoers: Add simple examples from OpenBSD (Marc Espie)
8336:
8337: 2001-12-15 00:40 millert
8338:
8339: * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8340: SIGTSTP.
8341:
8342: 2001-12-14 21:53 millert
8343:
8344: * CHANGES: minor prettyification
8345:
8346: 2001-12-14 21:43 millert
8347:
8348: * CHANGES: Updated change log
8349:
8350: 2001-12-14 21:27 millert
8351:
8352: * testsudoers.c: Fix CIDR handling here too.
8353:
8354: 2001-12-14 21:21 millert
8355:
8356: * auth/pam.c: Apparently a NULL response is OK
8357:
8358: 2001-12-14 21:19 millert
8359:
8360: * TODO: Checkpoint for upcoming beta release
8361:
8362: 2001-12-14 21:17 millert
8363:
8364: * TROUBLESHOOTING: Many people believe that adding a runas spec
8365: should obviate the need for the -u flag. It does not.
8366:
8367: 2001-12-14 21:11 millert
8368:
8369: * RUNSON: checkpoint update for upcoming 1.6.4 beta
8370:
8371: 2001-12-14 20:44 millert
8372:
8373: * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8374: HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8375: now
8376:
8377: 2001-12-14 20:07 millert
8378:
8379: * PORTING: Add signals section
8380:
8381: 2001-12-14 20:00 millert
8382:
8383: * configure: regen
8384:
8385: 2001-12-14 20:00 millert
8386:
8387: * configure.in: Fix check for sigaction_t
8388:
8389: 2001-12-14 19:45 millert
8390:
8391: * sudo.c: XXX - should call find_path() as runas user, not root.
8392: Can't do that until the parser changes though.
8393:
8394: 2001-12-14 19:38 millert
8395:
8396: * sudo.c: If find_path() fails as root, try again as the invoking
8397: user (useful for NFS). Idea from Chip Capelik.
8398:
8399: 2001-12-14 19:28 millert
8400:
8401: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8402: after pod file changes
8403:
8404: 2001-12-14 19:24 millert
8405:
8406: * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8407: sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8408: Previously sudo would not call initgroups() if the target user
8409: was root. Now it always calls initgroups() unless the -P command
8410: line option or the "preserve_groups" sudoers option is set. Idea
8411: from TJ Saunders.
8412:
8413: 2001-12-14 18:38 millert
8414:
8415: * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8416:
8417: 2001-12-14 18:33 millert
8418:
8419: * logging.c: Fix compilation on K&C
8420:
8421: 2001-12-14 18:14 millert
8422:
8423: * configure: regen
8424:
8425: 2001-12-14 18:14 millert
8426:
8427: * configure.in: Add check for sigaction_t -- IRIX already defines
8428: this so don't redefine it.
8429:
8430: 2001-12-14 17:15 millert
8431:
8432: * snprintf.c: fix typo
8433:
8434: 2001-12-14 17:12 millert
8435:
8436: * interfaces.c: need stdlib.h here too
8437:
8438: 2001-12-14 15:31 millert
8439:
8440: * configure: regen
8441:
8442: 2001-12-14 15:31 millert
8443:
8444: * configure.in: Remove redundant checks for string.h, strings.h and
8445: unistd.h
8446:
8447: 2001-12-14 15:29 millert
8448:
8449: * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8450: visudo.man.in: Regen from pod files
8451:
8452: 2001-12-14 15:03 millert
8453:
8454: * BUGS: Update for 1.6.4
8455:
8456: 2001-12-14 14:59 millert
8457:
8458: * configure, lex.yy.c: regen
8459:
8460: 2001-12-14 14:56 millert
8461:
8462: * strerror.c: Return EINVAL if errnum > sys_nerr
8463:
8464: 2001-12-14 14:54 millert
8465:
8466: * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8467: config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8468: sudo.pod, auth/sudo_auth.h: o Update copyright year
8469:
8470: 2001-12-14 14:54 millert
8471:
8472: * configure.in: o Don't define STDC_HEADERS unconditionally for
8473: IRIX o Update copyright year
8474:
8475: 2001-12-14 14:53 millert
8476:
8477: * README: update version
8478:
8479: 2001-12-14 14:52 millert
8480:
8481: * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8482: fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8483: logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8484: set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8485: utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8486: auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8487: auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8488: auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8489: STDC_HEADERS define properly o Update copyright year
8490:
8491: 2001-12-14 01:53 millert
8492:
8493: * configure: regen
8494:
8495: 2001-12-14 01:53 millert
8496:
8497: * tgetpass.c: flags set in signal handlers should be volatile
8498: sig_atomic_t
8499:
8500: 2001-12-14 01:52 millert
8501:
8502: * config.h.in, configure.in: Add checks for volatile and
8503: sig_atomic_t
8504:
8505: 2001-12-14 01:42 millert
8506:
8507: * lex.yy.c, configure: regen
8508:
8509: 2001-12-14 01:40 millert
8510:
8511: * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8512: find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8513: option since it cannot work with the existing parser.
8514:
8515: 2001-12-14 01:26 millert
8516:
8517: * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8518:
8519: 2001-12-14 01:24 millert
8520:
8521: * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8522: not listed in env_keep o If no PATH is in the environment use a
8523: default value o If TERM is not set in the non-reset case also
8524: give it a default value.
8525:
8526: 2001-12-14 01:17 millert
8527:
8528: * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8529: _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8530: on systems that define in paths.h
8531:
8532: 2001-12-14 01:15 millert
8533:
8534: * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8535: skeyaccess(3) if it is present in libskey.
8536:
8537: 2001-12-12 21:42 millert
8538:
8539: * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8540:
8541: 2001-12-12 21:24 millert
8542:
8543: * parse.lex: '\\' is a perfectly legal character to have in a
8544: command line argument.
8545:
8546: 2001-12-12 20:24 millert
8547:
8548: * sudo.c: o Defer call to set_fqdn() until it is safe to use
8549: log_error() o Don't print errno string value if gethostbyname
8550: fails, it is not relevant
8551:
8552: 2001-12-12 20:07 millert
8553:
8554: * parse.c: Fix CIDR -> in_addr_t conversion.
8555:
8556: 2001-12-12 16:21 millert
8557:
8558: * sudoers.pod: Remove an extra "User_List" in the User_Spec
8559: definition From ybertrand AT snoopymail.com
8560:
8561: 2001-12-12 16:00 millert
8562:
8563: * parse.c: Make 'listpw=never' work for users who are not
8564: explicitly mentioned in sudoers.
8565:
8566: 2001-12-12 15:40 millert
8567:
8568: * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8569:
8570: 2001-12-12 15:34 millert
8571:
8572: * sudoers.pod: Document new list Defaults type and convert env_keep
8573: and env_delete to lists. Document new env_check option.
8574:
8575: 2001-12-12 15:11 millert
8576:
8577: * lex.yy.c, sudo.tab.h: regen parser
8578:
8579: 2001-12-12 14:56 millert
8580:
8581: * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8582: a Runas spec to #[0-9-]+.
8583:
8584: 2001-12-12 14:55 millert
8585:
8586: * configure: regen
8587:
8588: 2001-12-12 14:55 millert
8589:
8590: * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8591:
8592: 2001-12-12 14:43 millert
8593:
8594: * config.h.in, configure.in: Add check for skeyaccess(3)
8595:
8596: 2001-12-11 19:47 millert
8597:
8598: * visudo.pod: Document new -c, -f, and -q options
8599:
8600: 2001-12-11 19:41 millert
8601:
8602: * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8603: use getopt(3)
8604:
8605: 2001-12-11 19:31 millert
8606:
8607: * configure: regen
8608:
8609: 2001-12-11 19:31 millert
8610:
8611: * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8612: a replacement macro if it doesn't exist.
8613:
8614: 2001-12-11 18:22 millert
8615:
8616: * visudo.c: In check-only mode, don't create sudoers if it does not
8617: already exist.
8618:
8619: 2001-12-11 18:06 millert
8620:
8621: * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8622: variable name
8623: o Add support for "+=" and "-=" list operators
8624: o replace some 1 and 0 with TRUE and FALSE for greater
8625: legibility.
8626:
8627: 2001-12-11 18:05 millert
8628:
8629: * parse.lex: o Use exclusive start conditions to remove some
8630: ambiguity in the
8631: lexer. Also reorder some things for clarity.
8632: o Add support for "+=" and "-=" list operators.
8633: o Use the new DEFVAR token to denote a Defaults variable name.
8634:
8635: 2001-12-11 18:03 millert
8636:
8637: * sudo.h: Prototype init_envtables()
8638:
8639: 2001-12-11 18:02 millert
8640:
8641: * env.c: o Convert environment handling to use lists instead of
8642: strings.
8643: This greatly simplifies routines that need to do "foreach"
8644: type
8645: operations.
8646: o Add new init_envtables() function to set env_check and
8647: env_delete
8648: defaults based on initial_badenv_table and
8649: initial_checkenv_table
8650: (formerly sudo_badenv_table).
8651:
8652: 2001-12-11 18:00 millert
8653:
8654: * defaults.c, defaults.h: o Add a new LIST type and functions to
8655: manipulate it.
8656: o This is for use with environment handling variables.
8657: o Call new init_envtables() routine inside init_defaults() to
8658: initialize the environment lists.
8659:
8660: 2001-12-11 17:57 millert
8661:
8662: * def_data.c, def_data.h, def_data.in: Convert environment options
8663: to use the new LIST type and add a new one, env_check that only
8664: deletes if the sanity check fails.
8665:
8666: 2001-12-11 17:55 millert
8667:
8668: * testsudoers.c: Add dummy version of init_envtables()
8669:
8670: 2001-12-11 17:53 millert
8671:
8672: * parse.yacc: honor quiet mode
8673:
8674: 2001-12-11 17:51 millert
8675:
8676: * visudo.c: Add check-only mode
8677:
8678: 2001-12-10 20:27 millert
8679:
8680: * mkdefaults: Fix generation of entries with NULL descriptions.
8681:
8682: 2001-12-09 00:27 millert
8683:
8684: * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8685:
8686: 2001-12-09 00:20 millert
8687:
8688: * sudo.c: Must reset signal handlers before we exec
8689:
8690: 2001-12-09 00:16 millert
8691:
8692: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8693: carefule now that tgetpass() can return NULL (user hit ^C). PAM
8694: version needs testing. Set SIGTSTP to SIG_DFL during password
8695: entry so user can suspend us.
8696:
8697: 2001-12-09 00:14 millert
8698:
8699: * tgetpass.c: Add support for interrupting/suspending tgetpass via
8700: keyboard input. If you suspend sudo from the password prompt and
8701: resume it will re-prompt you.
8702:
8703: 2001-12-09 00:09 millert
8704:
8705: * sudo.c: Don't block keyboard interrupt signals, just set them to
8706: SIG_IGN.
8707:
8708: 2001-12-08 14:48 millert
8709:
8710: * config.h.in: add back HAVE_SIGACTION
8711:
8712: 2001-12-08 14:44 millert
8713:
8714: * configure: regen
8715:
8716: 2001-12-08 14:44 millert
8717:
8718: * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8719: POSIX_SIGNALS define and old signal support now that we emulate
8720: POSIX ones Also be sure to correctly initialize struct sigaction.
8721:
8722: 2001-12-08 14:42 millert
8723:
8724: * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8725: wrapper.
8726:
8727: 2001-12-08 14:39 millert
8728:
8729: * compat.h: Add scaffolding for POSIX signal emulation
8730:
8731: 2001-12-08 14:36 millert
8732:
8733: * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8734: since we don't include stdio.h
8735:
8736: 2001-12-08 14:23 millert
8737:
8738: * sigaction.c: Emulate sigaction() using sigvec()
8739:
8740: 2001-11-12 19:32 millert
8741:
8742: * sudoers.pod: Document new behavior of negative values of
8743: timestamp_timeout Fix a typo
8744:
8745: 2001-11-12 19:31 millert
8746:
8747: * sudo.pod: Add security note about command not being logged after
8748: 'sudo su' and friends.
8749:
8750: 2001-11-12 19:19 millert
8751:
8752: * sudo.pod: Mention that -V prints default values when run as root,
8753: including the list of environment variables to clear.
8754:
8755: 2001-11-12 19:14 millert
8756:
8757: * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8758: quoting of C<> entries.
8759:
8760: 2001-11-12 13:12 millert
8761:
8762: * def_data.c, def_data.h, def_data.in, sudoers.pod,
8763: auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8764: behavior to also send mail when the password is wrong
8765:
8766: 2001-11-12 13:08 millert
8767:
8768: * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8769: is run by root.
8770:
8771: 2001-11-11 23:52 millert
8772:
8773: * sudoers.pod: document env_delete
8774:
8775: 2001-11-11 23:51 millert
8776:
8777: * env.c: Add support for '*' in env_keep when not resetting the
8778: environment (ie: the normal case).
8779:
8780: 2001-11-11 23:47 millert
8781:
8782: * env.c: Add env_delete variable that lets the user replace/add to
8783: the bad_env_table. Allow '*' wildcard in env_keep entries.
8784:
8785: 2001-11-06 13:59 millert
8786:
8787: * mkinstalldirs: Force umask to 022 to guarantee sane directory
8788: permissions.
8789:
8790: 2001-11-02 18:09 millert
8791:
8792: * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8793: dependency
8794:
8795: 2001-11-02 17:25 millert
8796:
8797: * mkdefaults: fix breakage in last commit
8798:
8799: 2001-11-02 17:18 millert
8800:
8801: * Makefile.in: acsite.m4 -> aclocal.m4
8802:
8803: 2001-11-02 15:59 millert
8804:
8805: * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8806: previous commit
8807:
8808: 2001-11-02 15:57 millert
8809:
8810: * def_data.c: regenerated from def_data.in
8811:
8812: 2001-11-02 15:56 millert
8813:
8814: * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8815: things use instead of T_INT If timestamp_timeout is < 0 then
8816: treat the ticket as never expiring (to be expired manually by the
8817: user).
8818:
8819: 2001-11-02 15:51 millert
8820:
8821: * def_data.in: change most T_INT -> T_UINT
8822:
8823: 2001-11-02 15:51 millert
8824:
8825: * mkdefaults: fix warning when no args
8826:
8827: 2001-11-02 12:52 millert
8828:
8829: * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8830: call _exit() if we are a signal handler. We no longer print the
8831: signal number but the user can just check the exit value for
8832: that.
8833:
8834: 2001-10-16 01:35 millert
8835:
8836: * logging.c: when setting up pipes in child process check for case
8837: where stdin == pipe fd 0
8838:
8839: 2001-10-11 13:20 millert
8840:
8841: * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8842: value is the count of editing errors made (failed searches, etc).
8843:
8844: 2001-10-05 16:39 millert
8845:
8846: * configure: regen
8847:
8848: 2001-10-05 16:39 millert
8849:
8850: * configure.in: sco now is identified by config.guess as *-sco-*
8851:
8852: 2001-10-05 16:24 millert
8853:
8854: * configure.in: Check for getspnam() in -lgen if not in -lc for
8855: UnixWare.
8856:
8857: 2001-09-17 21:48 millert
8858:
8859: * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8860:
8861: 2001-09-17 21:32 millert
8862:
8863: * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8864:
8865: 2001-08-28 10:26 millert
8866:
8867: * sudoers.pod: Missing word (specify); krapht@secureops.com
8868:
8869: 2001-08-23 17:43 millert
8870:
8871: * sudo.c: If we fail to lookup a login class, apply the default
8872: one.
8873:
8874: 2001-08-23 17:42 millert
8875:
8876: * logging.c: In log_error() free message, not logline
8877: unconditionally, then free logline if it is not the same as
8878: message. No function change but this mirrors how they are
8879: allocated.
8880:
8881: 2001-07-16 23:33 millert
8882:
8883: * configure: regenerate
8884:
8885: 2001-07-16 23:33 millert
8886:
8887: * configure.in: remove some backslash quotes that are unneeded
8888:
8889: 2001-07-16 23:30 millert
8890:
8891: * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8892: AC_LIBOBJ instead of changing LIBOBJS directly o Use
8893: AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8894: AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8895:
8896: 2001-07-16 23:28 millert
8897:
8898: * config.guess, config.sub: Updated from autoconf-2.50
8899:
8900: 2001-05-22 19:11 millert
8901:
8902: * README: Update mailing list section. We use mailman now, not
8903: majordomo.
8904:
8905: 2001-05-10 14:55 millert
8906:
8907: * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8908: the shadow variants to make sure we don't inadvertantly leak an
8909: fd to the child. Apparently Linux's shadow routines leave the fd
8910: open even if you don't call setspent(). Reported by
8911: mike@gistnet.com; different patch used.
8912:
8913: 2001-04-12 21:43 millert
8914:
8915: * sudoers.pod: s/eg./e.g./
8916:
8917: 2001-04-12 21:42 millert
8918:
8919: * tgetpass.c: select() may return EAGAIN. If so, continue like we
8920: do for EINTR.
8921:
8922: 2001-04-12 21:41 millert
8923:
8924: * logging.c: Fix a non-exploitable buffer overflow in the word
8925: splitting code. This should really be rewritten.
8926:
8927: 2001-04-12 21:41 millert
8928:
8929: * Makefile.in: FAQ link goes away
8930:
8931: 2001-04-12 21:40 millert
8932:
8933: * INSTALL: Tell people to look in sample.syslog.conf for examples,
8934: not FAQ
8935:
8936: 2001-04-12 21:40 millert
8937:
8938: * TROUBLESHOOTING: Update list of env vars that are cleared
8939:
8940: 2001-04-12 21:36 millert
8941:
8942: * sudo.c: remove struct env_table decl since that stuff has all
8943: moved to env.c
8944:
8945: 2001-04-04 13:17 millert
8946:
8947: * fileops.c: Fix a pasto in flock-style unlocking and include
8948: <sys/file.h> for flock on older systems; twetzel@gwdg.de
8949:
8950: 2001-04-04 13:14 millert
8951:
8952: * configure: regen to get NeXT lockf/flock fix
8953:
8954: 2001-04-04 13:14 millert
8955:
8956: * configure.in: force NeXT to use flock since lockf is broken
8957:
8958: 2001-03-30 08:54 millert
8959:
8960: * check.c: Use stashed user_gid when checking against exempt gid
8961: since sudo sets its gid to a a value that makes sudoers readable.
8962: Previously if you used gid 0 as the exempt group everyone would
8963: be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8964:
8965: 2001-03-29 13:14 millert
8966:
8967: * configure: regen
8968:
8969: 2001-03-29 13:08 millert
8970:
8971: * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8972: aparently defines some types (such as ssize_t) therein.
8973:
8974: 2001-03-02 09:09 millert
8975:
8976: * defaults.c: Fix negation of paths in a boolean context. Problem
8977: found by apt@UH.EDU
8978:
8979: 2001-02-23 13:03 millert
8980:
8981: * visudo.c: pasto
8982:
8983: 2001-02-17 16:11 millert
8984:
8985: * visudo.c: SA_RESETHAND means the opposite of what I was
8986: thinking--oops To block all signals in old-style signals use ~0,
8987: not 0xffffffff
8988:
8989: 2001-02-04 11:16 millert
8990:
8991: * defaults.c: coerce difference of pointers to int when used in a
8992: string length printf format; deraadt@openbsd.org
8993:
8994: 2001-01-17 11:34 millert
8995:
8996: * visudo.c: Block all signals in Exit() to avoid a signal race.
8997: There is still a tiny window but I'm not going to worry about it.
8998:
8999: 2001-01-07 13:57 millert
9000:
9001: * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9002: Designer
9003:
9004: 2001-01-07 13:55 millert
9005:
9006: * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9007: from clobbering by isatty().
9008:
9009: 2000-12-30 20:39 millert
9010:
9011: * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9012: Some defaults I_ defines got renamed.
9013:
9014: 2000-12-30 20:38 millert
9015:
9016: * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9017: defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9018: set_perms.c, sudo.c: Move defaults info into its own files from
9019: which we generate .h and .c files. This makes adding or
9020: rearranging variables much simpler.
9021:
9022: 2000-12-30 16:58 millert
9023:
9024: * configure, configure.in: fix typo in last commit
9025:
9026: 2000-12-30 16:55 millert
9027:
9028: * compat.h, config.h.in, configure, configure.in: Add check +
9029: emulation for setegid (like seteuid).
9030:
9031: 2000-12-30 16:22 millert
9032:
9033: * env.c: Make env_keep override badenv_table as documented Fix
9034: traversal of badenv_table (broken in last commit)
9035:
9036: 2000-12-29 22:59 millert
9037:
9038: * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9039: version of set_perms on systems w/o them. Rename
9040: set_perms_saved_uid() -> set_perms_posix() Make
9041: set_perms_setreuid simply be set_perms_fallback() and simply
9042: include the appropriate function at compile time (setreuid()
9043: vs. setuid()).
9044:
9045: 2000-12-29 22:45 millert
9046:
9047: * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9048: when env_reset is in effect
9049:
9050: 2000-12-29 22:29 millert
9051:
9052: * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9053: configure, configure.in, defaults.c, defaults.h, find_path.c,
9054: getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9055: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9056: testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9057: options: o stay_setuid - sudo will remain setuid if system has
9058: saved uids or setreuid(2) o env_reset - reset the environment to
9059: a sane default o env_keep - preserve environment variables that
9060: would otherwise be cleared
9061:
9062: No longer use getenv/putenv/setenv functions--do environment
9063: munging by hand. Potentially dangerous environment variables can
9064: be cleared only if they contain '/' pr '%' characters to protect
9065: buggy programs. Moved environment routines into env.c (new file)
9066:
9067: 2000-12-29 22:17 millert
9068:
9069: * INSTALL: Clear up --without-passwd description
9070:
9071: 2000-12-29 19:39 millert
9072:
9073: * sudo_setenv.c, putenv.c: We now build up a new environment from
9074: scratch and assign it to "environ".
9075:
9076: 2000-12-18 22:35 millert
9077:
9078: * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9079:
9080: 2000-12-14 23:19 millert
9081:
9082: * visudo.c: If there was a syntax error and the user just wants to
9083: quit, unlink sudoers if it is zero length.
9084:
9085: 2000-12-14 23:10 millert
9086:
9087: * visudo.c: 'Q' means ignore parse error, not 'q'
9088:
9089: 2000-12-14 22:57 millert
9090:
9091: * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9092: Dimitry Andric <dim@xs4all.nl>
9093:
9094: 2000-12-13 12:23 millert
9095:
9096: * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9097: ayamura@ayamura.org
9098:
9099: 2000-12-09 11:46 millert
9100:
9101: * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9102: Sanchez <wsanchez@apple.com>
9103:
9104: 2000-11-03 09:36 millert
9105:
9106: * sudo.c, visudo.c: Use exit(127), not exit(-1)
9107:
9108: 2000-11-03 00:37 millert
9109:
9110: * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9111: set_perms() to its own file and use POSIX saved uid or setreuid()
9112: if available.
9113:
9114: Added stay_setuid option for systems that have libraries that
9115: perform extra paranoia checks in system libraries for setuid
9116: programs (ie: anything with issetugid(2)).
9117:
9118: 2000-11-02 20:28 millert
9119:
9120: * sudo.c: strip more bits from the environment and add a facility
9121: for stripping things only if they contain '/' or '%' to address
9122: printf format string vulnerabilities in other programs.
9123:
9124: 2000-11-02 12:55 millert
9125:
9126: * configure: regen
9127:
9128: 2000-11-02 12:55 millert
9129:
9130: * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9131: the existence of strcasecmp().
9132:
9133: 2000-11-02 12:46 millert
9134:
9135: * configure: regen
9136:
9137: 2000-11-02 12:46 millert
9138:
9139: * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9140:
9141: 2000-11-01 10:22 millert
9142:
9143: * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9144:
9145: 2000-11-01 10:17 millert
9146:
9147: * configure: regen
9148:
9149: 2000-11-01 10:17 millert
9150:
9151: * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9152: since NCR systems have that instead of innetgr(3).
9153:
9154: 2000-10-31 14:16 millert
9155:
9156: * auth/securid.c: check return value of creadcfg() call sd_close()
9157: after sd_auth() store username in sd->username so we don't rely
9158: on the USER env variable
9159:
9160: 2000-10-29 23:00 millert
9161:
9162: * INSTALL: document --with-bsdauth
9163:
9164: 2000-10-29 22:57 millert
9165:
9166: * configure: regen
9167:
9168: 2000-10-29 22:56 millert
9169:
9170: * configure.in: --with-bsdauth assumes --with-logincap
9171:
9172: 2000-10-29 22:45 millert
9173:
9174: * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9175: challenge, if the user just hits return then reprompt with echo
9176: turned on.
9177:
9178: 2000-10-29 17:31 millert
9179:
9180: * sudo.c: Remove debugging code that should not have been
9181: committed, oops.
9182:
9183: 2000-10-29 17:31 millert
9184:
9185: * auth/bsdauth.c: Use lower-level routines and get the password
9186: ourselves. Checks for a challenge and if there is one echo is
9187: not turned off.
9188:
9189: 2000-10-29 17:30 millert
9190:
9191: * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9192: changes
9193:
9194: 2000-10-27 18:41 millert
9195:
9196: * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9197: fails by deferring the call to log_error() until things are
9198: better setup.
9199:
9200: Fix return value of set_loginclass() in non-BSD-auth case.
9201:
9202: Hard-code 'sudo' in the usage message so we can fit more options
9203: on a line
9204:
9205: 2000-10-27 18:35 millert
9206:
9207: * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9208:
9209: 2000-10-26 13:03 millert
9210:
9211: * sudo.cat, sudo.man.in: regen
9212:
9213: 2000-10-26 13:01 millert
9214:
9215: * sudo.pod: Document -a flag
9216:
9217: 2000-10-26 12:42 millert
9218:
9219: * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9220: sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9221: authentication.
9222:
9223: 2000-10-19 10:09 millert
9224:
9225: * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9226:
9227: 2000-10-12 09:49 millert
9228:
9229: * sudoers.pod: Mention negating umask
9230:
9231: 2000-10-12 01:30 millert
9232:
9233: * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9234:
9235: 2000-10-08 21:46 millert
9236:
9237: * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9238: history.
9239:
9240: 2000-10-08 12:25 millert
9241:
9242: * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9243:
9244: 2000-09-14 16:48 millert
9245:
9246: * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9247: alloc failure instead of returning -1.
9248:
9249: 2000-09-07 17:41 millert
9250:
9251: * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9252: for FreeBSD and possibly others.
9253:
9254: 2000-09-07 10:43 millert
9255:
9256: * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9257: it. This means that "%m" won't be expanded but we don't use that
9258: anyway since the logging routines may splat to stderr as well.
9259:
9260: 2000-09-06 21:35 millert
9261:
9262: * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9263: sudoers.pod: Add always_set_home variable
9264:
9265: 2000-09-06 21:24 millert
9266:
9267: * configure, configure.in: Have to hard code default values in help
9268: since the defaults are set _after_ the help stuff.
9269:
9270: 2000-08-31 13:08 millert
9271:
9272: * lex.yy.c, parse.lex: Allow special characters (including '#') to
9273: be embedded in pathnames if quoted by a '\\'. The quoted chars
9274: will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9275: prints the '\\'.
9276:
9277: 2000-08-13 17:10 millert
9278:
9279: * install-sh: Better path searching for programs we need.
9280:
9281: 2000-08-13 17:10 millert
9282:
9283: * TROUBLESHOOTING: Add section on "C compiler cannot create
9284: executables" errors.
9285:
9286: 2000-08-13 17:10 millert
9287:
9288: * Makefile.binary, Makefile.in, version.h: Crank version
9289:
9290: 2000-08-13 17:09 millert
9291:
9292: * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9293: sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9294: visudo.man.in, visudo.pod: Substitute values from configure into
9295: man pages.
9296:
9297: 2000-08-12 16:48 millert
9298:
9299: * parse.c, sudo.c: The listpw and verifypw sudoers options would
9300: not take effect because the value of the default was checked
9301: *before* sudoers was parsed. Instead of passing in the value of
9302: PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9303: the check can be deferred until after sudoers is parsed.
9304:
9305: 2000-08-11 15:41 millert
9306:
9307: * tgetpass.c: When writing prompt, no need to write the NUL as
9308: well; hag@linnaean.org
9309:
9310: 2000-06-09 12:25 millert
9311:
9312: * install-sh: When looking for chown, check in /sbin too
9313:
9314: 2000-06-04 22:57 millert
9315:
9316: * visudo.c: Remove extraneous call to init_defaults() and set
9317: runas_user to NULL betweem parses so init_defaults will reset it
9318: each time, thus avoiding a reference to free()d data.
9319:
9320: 2000-06-04 19:57 millert
9321:
9322: * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9323: using getifaddrs() to get the list of ip addr / netmask pairs.
9324: Currently IPv4-only.
9325:
9326: 2000-06-04 19:51 millert
9327:
9328: * visudo.c: Add a missing check for UserEditor == NULL Add missing
9329: '+' before line number when invoking editor to fix a syntax error
9330:
9331: 2000-05-12 16:55 millert
9332:
9333: * sudo.c: Call clean_env very early in main() for paranoia's sake.
9334: Idea from Marc Esipovich.
9335:
9336: 2000-05-10 01:11 millert
9337:
9338: * sudo.h: Update proto for evasprintf and easprintf
9339:
9340: 2000-05-10 01:10 millert
9341:
9342: * alloc.c: Make easprintf() and evasprintf() return an int.
9343:
9344: 2000-05-10 00:56 millert
9345:
9346: * check.c: If the targetpw flag is set, use target username as part
9347: of the timestamp path. If tty tickets are in effect cat the tty
9348: and the target username with a ':' as the separator.
9349:
9350: 2000-05-09 12:05 millert
9351:
9352: * auth/pam.c: Backout part of last change; setting PAM_USER to the
9353: invoking user breaks things like targetpw.
9354:
9355: 2000-05-09 11:52 millert
9356:
9357: * auth/pam.c: set tty and username via pam_set_item
9358:
9359: 2000-05-09 11:42 millert
9360:
9361: * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9362: runas, and target authentication for non-passwd file auth
9363: methods.
9364:
9365: 2000-04-22 14:15 millert
9366:
9367: * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9368: sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9369: C<-Z> for command line flags in all places. This is more
9370: consistent and works around a bug in Pod::Man.
9371:
9372: 2000-04-22 13:59 millert
9373:
9374: * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9375: 'semicolon' that should be 'colon'
9376:
9377: 2000-04-19 15:30 millert
9378:
9379: * configure, configure.in: Fix --with-badpri help line
9380:
9381: 2000-04-17 14:01 millert
9382:
9383: * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9384: openlog() and closelog() since some authentication methods (like
9385: PAM) may do their own logging via syslog. Since we don't use
9386: syslog much (usually just once per session) this doesn't really
9387: incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9388:
9389: 2000-04-15 16:32 millert
9390:
9391: * sudo.c: Fix -H flag. runas_homedir is only valid after
9392: set_perms(PERM_RUNAS, mode)
9393:
9394: 2000-04-12 18:56 millert
9395:
9396: * INSTALL: Clarify the fact that insults are not enabled just by
9397: including them in the binary.
9398:
9399: 2000-04-07 10:39 millert
9400:
9401: * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9402: sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9403:
9404: 2000-04-07 10:38 millert
9405:
9406: * Makefile.in: Give date string to pod2man since its default is
9407: ugly and it ain't got no alibi.
9408:
9409: 2000-04-07 10:27 millert
9410:
9411: * Makefile.in: Do section substitution on the output of pod2man and
9412: remove hack needed for old pod2man.
9413:
9414: 2000-04-07 10:26 millert
9415:
9416: * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9417: will do the substitution later.
9418:
9419: 2000-04-02 11:44 millert
9420:
9421: * configure, configure.in: Don't bother checking for the path to vi
9422: if user specified --with-editor
9423:
9424: 2000-04-01 17:25 millert
9425:
9426: * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9427: calling system(3).
9428:
9429: 2000-04-01 16:23 millert
9430:
9431: * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9432: sudoers.pod, visudo.c: Visudo now checks for the existence of an
9433: editor and gives a sensible error if it does not exist.
9434:
9435: The path to the editor for visudo is now a colon-separated list
9436: of allowable editors. If the user has $EDITOR set and it matches
9437: one of the allowed editors that editor will be used. If not, the
9438: first editor in the list that actually exists is used.
9439:
9440: 2000-04-01 16:22 millert
9441:
9442: * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9443: return value.
9444:
9445: 2000-03-27 12:08 millert
9446:
9447: * Makefile.in: Strip sudo and visudo for bindist target
9448:
9449: 2000-03-26 22:26 millert
9450:
9451: * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9452: sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9453: @mansectsu@ and @mansectform@ in the man page bodies as well.
9454:
9455: 2000-03-26 22:07 millert
9456:
9457: * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9458: @sysconfdir@
9459:
9460: 2000-03-26 21:57 millert
9461:
9462: * Makefile.in: 'make dist' should not cause any files to be
9463: modified so remove its dependencies.
9464:
9465: 2000-03-26 21:43 millert
9466:
9467: * CHANGES: Whoops, forgot to add release marker
9468:
9469: 2000-03-26 11:57 millert
9470:
9471: * CHANGES: Final change for 1.6.3 (or so I hope)
9472:
9473: 2000-03-26 11:57 millert
9474:
9475: * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9476: BSD systems will have nroff...
9477:
9478: 2000-03-24 18:58 millert
9479:
9480: * parse.yacc: When checking to see if the host/user matches in a
9481: defaults spec, check against TRUE, not just non-zero since it
9482: might be -1.
9483:
9484: 2000-03-24 15:14 millert
9485:
9486: * configure.in, configure: OSF/1 puts file formats in section 4,
9487: not 5.
9488:
9489: 2000-03-24 15:13 millert
9490:
9491: * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9492:
9493: 2000-03-23 20:24 millert
9494:
9495: * RUNSON: Update for 1.6.3
9496:
9497: 2000-03-23 20:23 millert
9498:
9499: * configure, configure.in: If there is no inet_addr but there *is*
9500: an __inet_addr that's ok since inet_addr is probably just a macro
9501: then. The better thing to do would be to look for the macro, but
9502: this is fine for now.
9503:
9504: 2000-03-23 19:50 millert
9505:
9506: * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9507:
9508: 2000-03-23 19:40 millert
9509:
9510: * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9511: lives in $(srcdir), add a @mansrcdir@ configure variable so we
9512: can deal with this. Also, only remove *.man for 'distclean' not
9513: 'clean'.
9514:
9515: 2000-03-23 19:16 millert
9516:
9517: * sudo.c: set_loginclass() should be static like the proto says
9518:
9519: 2000-03-23 14:14 millert
9520:
9521: * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9522: header to avoid promotion of test to int, thus violating the
9523: prototype. Gcc handles this gracefully but more std ANSI
9524: compilers will complain.
9525:
9526: 2000-03-23 10:11 millert
9527:
9528: * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9529: FNM_CASEFOLD
9530:
9531: 2000-03-23 10:11 millert
9532:
9533: * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9534: fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9535: configure
9536:
9537: 2000-03-22 23:41 millert
9538:
9539: * CHANGES, TODO: update for 1.6.3
9540:
9541: 2000-03-22 23:38 millert
9542:
9543: * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9544: testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9545: not matching the FQHOST token type. There's really no need for a
9546: separate token for fully-qualified vs. unqualified anymore so
9547: FQHOST is now history and hostname_matches now decides which
9548: hostname (short or long) to check based on whether or not the
9549: pattern contains a '.'.
9550:
9551: 2000-03-22 23:09 millert
9552:
9553: * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9554: visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9555: in the hostname.
9556:
9557: 2000-03-22 22:50 millert
9558:
9559: * Makefile.in: Add targets for *.man.in, using config.status to
9560: generate *.man from *.man.in
9561:
9562: 2000-03-22 22:20 millert
9563:
9564: * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9565: option and enbolden refs to sudo and visudo.
9566:
9567: 2000-03-22 19:35 millert
9568:
9569: * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9570: sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9571: visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9572: FreeBSD login.conf support (untested on BSD/OS) based on a patch
9573: from Michael D. Marchionna. configure now does substitution on
9574: the man pages, allowing us to fix up the paths and set the
9575: section correctly. Based on an idea from Michael D. Marchionna.
9576:
9577: 2000-03-22 19:27 millert
9578:
9579: * auth/passwd.c: Better fix for handling HP-UX aging info.
9580:
9581: 2000-03-22 19:20 millert
9582:
9583: * sudo.c: Add support for set_logname run-time default
9584:
9585: 2000-03-22 19:17 millert
9586:
9587: * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9588: substitution on these to produce *.man
9589:
9590: 2000-03-22 19:16 millert
9591:
9592: * sudo.man, sudoers.man, visudo.man: These files now get generated
9593: from *.man.in at configure time.
9594:
9595: 2000-03-22 18:40 millert
9596:
9597: * defaults.c, defaults.h: Add set_logname option so users can turn
9598: off setting of LOGNAME/USER environment variables.
9599:
9600: 2000-03-22 10:53 millert
9601:
9602: * testsudoers.c, lsearch.c, parse.c: kill register
9603:
9604: 2000-03-13 15:52 millert
9605:
9606: * auth/passwd.c: HP-UX adds extra info at the end for password
9607: aging so when comparing the result of crypt to pw_passwd we only
9608: compare the first len(epass) bytes *unless* the user entered an
9609: empty string for a password.
9610:
9611: 2000-03-13 11:05 millert
9612:
9613: * logging.c: Get rid of grandchild hack, it was causing problems
9614: and there is really no need for it. This fixes a bug where we
9615: spin eating up CPU when the user runs a long-running process like
9616: a shell.
9617:
9618: 2000-03-07 14:26 millert
9619:
9620: * sudo.c: User can always specify a login class if he/she is
9621: already root.
9622:
9623: 2000-03-06 23:29 millert
9624:
9625: * config.h.in, configure, configure.in, defaults.c, defaults.h,
9626: sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9627:
9628: 2000-03-06 14:42 millert
9629:
9630: * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9631: secureware support
9632:
9633: 2000-03-03 18:04 millert
9634:
9635: * auth/passwd.c: Truncate unencrypted password to 8 chars if
9636: encrypted password is exactly 13 characters (indicateing standard
9637: a DES password). Many versions of crypt() do this for you, but
9638: not all (like HP-UX's).
9639:
9640: 2000-03-01 21:01 millert
9641:
9642: * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9643:
9644: 2000-02-29 17:46 millert
9645:
9646: * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9647: via defaults.c
9648:
9649: 2000-02-29 17:41 millert
9650:
9651: * defaults.c: Use Argv[0] as the first arg to openlog() since
9652: visudo uses this too.
9653:
9654: 2000-02-28 18:58 millert
9655:
9656: * sudo.c: Stash coredumpsize resource limit and retsore it before
9657: the exec() Otherwise the child ends up with a coredumpsize of 0.
9658:
9659: 2000-02-26 22:56 millert
9660:
9661: * sudo.cat, sudo.man, sudo.pod: document -S flag
9662:
9663: 2000-02-26 22:54 millert
9664:
9665: * sudo.c: fix usage string
9666:
9667: 2000-02-26 22:48 millert
9668:
9669: * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9670: auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9671: -S flag (read passwd from stdin) and tgetpass_flags global that
9672: holds flags to be passed in to tgetpass(). Change echo_off param
9673: to tgetpass() into a flags field. There are currently 2 possible
9674: flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9675: abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9676: but echo is not set on the terminal, but sure to set it.
9677:
9678: 2000-02-26 22:11 millert
9679:
9680: * tgetpass.c: Fixed a bug that caused an infinite loop when the
9681: password timeout was disabled.
9682:
9683: 2000-02-18 12:56 millert
9684:
9685: * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9686: sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9687: runaspw, and targetpw options.
9688:
9689: 2000-02-18 12:11 millert
9690:
9691: * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9692: visudo.c: enveditor -> env_editor
9693:
9694: 2000-02-15 19:07 millert
9695:
9696: * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9697: sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9698: visudo.cat, visudo.man: crank versino to 1.6.3
9699:
9700: 2000-02-15 19:03 millert
9701:
9702: * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9703: sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9704: defaults and make visudo honor them. This means that visudo will
9705: now parse the sudoers file *before* it is edited so a bogus
9706: sudoers file will cause a warning to go to stderr. Also, visudo
9707: checks the variables once--it does not check them after each
9708: editor run since that could be confusing.
9709:
9710: 2000-02-15 18:49 millert
9711:
9712: * RUNSON: 1.6.2 -> 1.6.2p1
9713:
9714: 2000-02-15 18:36 millert
9715:
9716: * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9717: sudo.h
9718:
9719: 2000-02-13 13:38 millert
9720:
9721: * configure, configure.in: Fix thinko, some && should have been ||
9722: in the last commit
9723:
9724: 2000-02-13 13:28 millert
9725:
9726: * configure, configure.in: Don't initialized Makefile variables to
9727: be NULL since the user may want to import variables from their
9728: environment.
9729:
9730: 2000-02-03 21:09 millert
9731:
9732: * configure, configure.in: typo
9733:
9734: 2000-01-27 15:01 millert
9735:
9736: * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9737: 11.0;jaearick@colby.edu
9738:
9739: 2000-01-27 15:01 millert
9740:
9741: * CHANGES: recent changes; prepare for 1.6.2p1
9742:
9743: 2000-01-26 23:31 millert
9744:
9745: * find_path.c: Don't apply SECURE_PATH if user is example;
9746: jmknoble@pobox.com
9747:
9748: 2000-01-26 16:21 millert
9749:
9750: * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9751: 'defaults' options based on INSTALL file info.
9752:
9753: 2000-01-26 16:21 millert
9754:
9755: * INSTALL: Fix some while lies
9756:
9757: 2000-01-24 10:48 millert
9758:
9759: * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9760: instead of copying.
9761:
9762: 2000-01-23 22:57 millert
9763:
9764: * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9765:
9766: 2000-01-23 22:42 millert
9767:
9768: * RUNSON: Last minute updates
9769:
9770: 2000-01-23 22:26 millert
9771:
9772: * TROUBLESHOOTING: PAM entry
9773:
9774: 2000-01-23 22:23 millert
9775:
9776: * auth/pam.c: correct a comment
9777:
9778: 2000-01-23 22:03 millert
9779:
9780: * CHANGES, RUNSON: update for 1.6.2
9781:
9782: 2000-01-23 21:59 millert
9783:
9784: * auth/pam.c: Better detection of PAM errors and fix custom prompts
9785: with PAM. Based on patches from "Cloyce D. Spradling"
9786: <cloyce@headgear.org>
9787:
9788: 2000-01-20 11:15 millert
9789:
9790: * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9791: to an unsigned long long value.
9792:
9793: 2000-01-19 14:07 millert
9794:
9795: * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9796: sudoers locking in visudo. We now lock the sudoers file itself,
9797: not the temp file (since locking the temp file can foul up
9798: editors). The previous locking scheme didn't work because the fd
9799: was closed too early.
9800:
9801: 2000-01-19 13:37 millert
9802:
9803: * configure, config.h.in, configure.in: Don't need test for
9804: ftruncate() any more.
9805:
9806: 2000-01-18 21:23 millert
9807:
9808: * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9809: cc. Fixes compilation with the unbundled HP-UX cc.
9810:
9811: 2000-01-18 17:00 millert
9812:
9813: * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9814: Campbell <aaron@cs.dal.ca>
9815:
9816: 2000-01-17 18:46 millert
9817:
9818: * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9819: parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9820: tgetpass.c, version.h, visudo.c: update copyright year on changed
9821: files
9822:
9823: 2000-01-17 18:45 millert
9824:
9825: * RUNSON: updates
9826:
9827: 2000-01-17 18:45 millert
9828:
9829: * CHANGES: aix fix
9830:
9831: 2000-01-17 18:42 millert
9832:
9833: * INSTALL: Crank version to 1.6.2
9834:
9835: 2000-01-17 18:11 millert
9836:
9837: * configure: Crank version to 1.6.2
9838:
9839: 2000-01-17 17:46 millert
9840:
9841: * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9842: the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9843:
9844: 2000-01-17 12:32 millert
9845:
9846: * CHANGES: recent changes
9847:
9848: 2000-01-17 12:28 millert
9849:
9850: * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9851: sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9852: Crank version to 1.6.2
9853:
9854: 2000-01-17 12:25 millert
9855:
9856: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9857: 'shell_noargs' runtime option back in. We have to defer checking
9858: until after the sudoers file has been parsed but since there are
9859: now other options that operate that way this one can too. Based
9860: on a patch from bguillory@email.com.
9861:
9862: 2000-01-16 23:05 millert
9863:
9864: * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9865: "verifypw" options.
9866:
9867: 2000-01-16 22:57 millert
9868:
9869: * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9870: o Add section on verifypw and listpw o Define how NOPASSWD
9871: interacts with the -v and -l flags
9872:
9873: 2000-01-14 12:39 millert
9874:
9875: * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9876: HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9877:
9878: 2000-01-14 12:29 millert
9879:
9880: * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9881: to the end and don't initialize the union member since that only
9882: works with an ANSI compiler. We set the value of the union by
9883: hand in init_defaults() anyway. This allows sudo to compile on a
9884: K&R compiler again.
9885:
9886: 2000-01-11 13:20 millert
9887:
9888: * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9889: netgr_matches needs to check shost as well as host since they may
9890: be different.
9891:
9892: 2000-01-11 13:17 millert
9893:
9894: * tgetpass.c: End on \r as well as \n
9895:
9896: 2000-01-02 23:53 millert
9897:
9898: * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9899: chaning from 0400 to whatever SUDOERS_MODE is (converting from
9900: the old sudoers mode). Assumes that SUDOERS_MODE is less
9901: restrictive than 0400 which should always be the case.
9902:
9903: 2000-01-02 23:43 millert
9904:
9905: * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9906: sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9907: *any* entry for the user on the host with a NOPASSWD flag. For
9908: -v, only allow w/o a passwd if *all* entries for the user on the
9909: host w/ the specified runas user have the NOPASSWD flag set.
9910:
9911: 2000-01-02 23:26 millert
9912:
9913: * Makefile.in: add check target
9914:
9915: 1999-12-16 13:02 millert
9916:
9917: * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9918: looping.
9919:
9920: 1999-12-10 00:09 millert
9921:
9922: * CHANGES: recent changes
9923:
9924: 1999-12-08 23:04 millert
9925:
9926: * config.h.in, configure, configure.in, sudo.c: Add check for
9927: initgroups() since old SYSV lacks this.
9928:
9929: 1999-12-08 22:54 millert
9930:
9931: * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9932: configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9933: Only define HAVE_FNMATCH if <fnmatch.h> exists.
9934:
9935: 1999-12-06 01:47 millert
9936:
9937: * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9938: to be enabled if the insults[] array is empty. Otherwise there
9939: would be division by zero.
9940:
9941: 1999-12-06 01:25 millert
9942:
9943: * insults.h: Don't care about USE_INSULTS #define since the insult
9944: stuff may be overridden at runtime.
9945:
9946: 1999-12-06 01:23 millert
9947:
9948: * auth/sudo_auth.c: Honor insults flag.
9949:
9950: 1999-12-05 19:14 millert
9951:
9952: * CHANGES, parse.c: Don't ask the user for a password if the user
9953: is not allowed to run the command and the authenticate flag (in
9954: sudoers) is false.
9955:
9956: 1999-12-05 19:05 millert
9957:
9958: * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9959: newline we change to the INITIAL state. o Enter GOTRUNAS when we
9960: see Runas_Alias
9961:
9962: This allows #uid to work in a RunasAlias.
9963:
9964: 1999-12-05 14:06 millert
9965:
9966: * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9967: and runaslist now return a value o in a runasspec, if a runaslist
9968: does not return TRUE, set runas_matches to FALSE. Normally, a
9969: runaslist only returns FALSE for explicitly denied users. o
9970: since runaslist does not modify the stack there is no need for a
9971: push/pop in runasalias.
9972:
9973: 1999-12-04 21:54 millert
9974:
9975: * check.c, sudo.c: Don't kill the user's tickets until after
9976: sudoers has been parsed since tty_tickets and ticket_dir could be
9977: set in sudoers.
9978:
9979: 1999-12-04 21:18 millert
9980:
9981: * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
9982: configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
9983: sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
9984: version to 1.6
9985:
9986: 1999-12-04 21:18 millert
9987:
9988: * testsudoers.c: add set_fqdn() stub
9989:
9990: 1999-12-02 15:31 millert
9991:
9992: * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
9993: sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
9994: it cannot work since the command needs to be set before sudoers
9995: is parsed. o Fix the "set_home" sudoers option (only worked at
9996: compile time). o Fix "fqdn" sudoers option. We now set
9997: host/shost via set_fqdn which gets called when the "fqdn"
9998: option is set in sudoers. o Move the openlog() to
9999: store_syslogfac() so this gets overridden correctly from the
10000: sudoers file.
10001:
10002: 1999-12-02 15:21 millert
10003:
10004: * auth/securid.c: SecurID support should compile now.
10005:
10006: 1999-11-28 20:56 millert
10007:
10008: * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10009: visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10010:
10011: 1999-11-28 18:51 millert
10012:
10013: * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10014: the .html files as they are generated automatically on the web
10015: site.
10016:
10017: 1999-11-28 18:49 millert
10018:
10019: * CHANGES, LICENSE: kill characters that made wml unhappy
10020:
10021: 1999-11-28 18:34 millert
10022:
10023: * HISTORY: typo
10024:
10025: 1999-11-25 12:05 millert
10026:
10027: * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10028:
10029: 1999-11-24 19:43 millert
10030:
10031: * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10032: benefit of ctm
10033:
10034: 1999-11-23 22:52 millert
10035:
10036: * sudo.c: Make the -s flag be exclusive too. Also reorder the
10037: flags in the exclusive usage message so they are alphabetical.
10038:
10039: 1999-11-23 13:27 millert
10040:
10041: * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10042:
10043: 1999-11-23 13:07 millert
10044:
10045: * auth/API: fix typo
10046:
10047: 1999-11-23 13:07 millert
10048:
10049: * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10050:
10051: 1999-11-23 13:06 millert
10052:
10053: * auth/pam.c: fix a warning on redhat and spew an error if
10054: pam_authenticate() returns an error other than AUTH_SUCCESS or
10055: PAM_PERM_DENIED
10056:
10057: 1999-11-23 00:43 millert
10058:
10059: * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10060: password required is the user's not root's
10061:
10062: 1999-11-19 21:04 millert
10063:
10064: * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10065:
10066: 1999-11-18 19:13 millert
10067:
10068: * RUNSON: updates from Brian Jackson + some formatting
10069:
10070: 1999-11-17 21:39 millert
10071:
10072: * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10073: update o Changes for automating real binary releases
10074:
10075: 1999-11-17 21:38 millert
10076:
10077: * Makefile.in: Add bindist target
10078:
10079: 1999-11-16 16:26 millert
10080:
10081: * TROUBLESHOOTING: talk about run-time options in addition to
10082: compile-time options
10083:
10084: 1999-11-16 01:16 millert
10085:
10086: * CHANGES: fix typos
10087:
10088: 1999-11-16 01:09 millert
10089:
10090: * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10091:
10092: 1999-11-16 00:42 millert
10093:
10094: * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10095: sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10096: rid of references to sudo-bugs. Now mention the web site or the
10097: sudo@ alias
10098:
10099: 1999-11-16 00:35 millert
10100:
10101: * sudoers.html: repair pod2html damage
10102:
10103: 1999-11-16 00:28 millert
10104:
10105: * RUNSON, TODO: Update for 1.6 release
10106:
10107: 1999-11-16 00:23 millert
10108:
10109: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10110: about using ALL in a command context.
10111:
10112: 1999-11-09 15:12 millert
10113:
10114: * visudo.c: Call yyrestart() on a parse error to reset the lexer
10115: state.
10116:
10117: 1999-11-09 15:06 millert
10118:
10119: * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10120: yyrestart() into visudo.c since it might not get called in yywrap
10121: if we get a parse error (and we only reread the file on error
10122: anyway).
10123:
10124: 1999-11-09 14:32 millert
10125:
10126: * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10127: clean up any buffers that might still exist. Call yyrestart()
10128: instead of using the deprecated YY_NEW_FILE macro.
10129:
10130: 1999-11-09 12:13 millert
10131:
10132: * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10133:
10134: 1999-11-08 19:00 millert
10135:
10136: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10137: characters need to be escaped in names.
10138:
10139: 1999-11-08 18:59 millert
10140:
10141: * configure: regen
10142:
10143: 1999-11-08 18:59 millert
10144:
10145: * INSTALL: clarify Mac OS X entry
10146:
10147: 1999-11-08 18:59 millert
10148:
10149: * RUNSON: update
10150:
10151: 1999-11-08 17:45 millert
10152:
10153: * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10154: configure options for danity
10155:
10156: 1999-11-05 17:11 millert
10157:
10158: * defaults.c: Fix printing of type T_MODE in dump_defaults()
10159:
10160: 1999-11-05 12:00 millert
10161:
10162: * strcasecmp.c: missing sys/types.h
10163:
10164: 1999-11-05 00:42 millert
10165:
10166: * INSTALL: Break out options that may be overridden at run time
10167: into their own section. Add a not about Max OS X and correct
10168: some lies.
10169:
10170: 1999-11-04 14:01 millert
10171:
10172: * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10173: getrlimit to find the highest fd when closing all non-std fd's o
10174: Turn off core dumps via setrlimit for the sake of paranoia
10175:
10176: 1999-11-04 13:57 millert
10177:
10178: * RUNSON: updates
10179:
10180: 1999-11-01 10:59 millert
10181:
10182: * CHANGES: updates
10183:
10184: 1999-11-01 10:58 millert
10185:
10186: * tgetpass.c: When read()'ing, do a single character at a time to
10187: be sure we don't go oast the newline.
10188:
10189: 1999-11-01 10:43 millert
10190:
10191: * sudo.c: For the sudo_root option, check against user_uid, not
10192: getuid() since at this point, ruid == euid == 0.
10193:
10194: 1999-10-31 23:14 millert
10195:
10196: * RUNSON: some updates
10197:
10198: 1999-10-31 23:14 millert
10199:
10200: * logging.h: Fix compilation problem when --with-logging=file was
10201: specified. This means that syslog is now required to build sudo
10202: but that should not be a problem. If it is it can be fixed
10203: trivially with a configure check for syslog() or syslog.h.
10204:
10205: 1999-10-31 23:00 millert
10206:
10207: * tgetpass.c: Make this work again for things like "sudo echo hi |
10208: more" where the tty gets put into character at a time mode. We
10209: read until we read end of line or we run out of space (similar to
10210: fgets(3)).
10211:
10212: 1999-10-20 11:23 millert
10213:
10214: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10215: to bold
10216:
10217: 1999-10-20 11:23 millert
10218:
10219: * RUNSON: update
10220:
10221: 1999-10-16 13:56 millert
10222:
10223: * defaults.c: Error out if syslog parameters are given without a
10224: value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10225: since there are no facilities in the 4.2BSD syslog.
10226:
10227: 1999-10-15 16:37 millert
10228:
10229: * defaults.c: Ignore the syslog facility for systems w/ old syslog
10230: like Ultrix.
10231:
10232: 1999-10-15 12:51 millert
10233:
10234: * TROUBLESHOOTING: people with "." early in their path can have
10235: problems running sudo from the build dir ;-)
10236:
10237: 1999-10-13 00:18 millert
10238:
10239: * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10240:
10241: 1999-10-12 22:34 millert
10242:
10243: * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10244: auth/sudo_auth.h: New krb5 code from Frank Cusack
10245: <fcusack@iconnet.net>.
10246:
10247: 1999-10-12 22:33 millert
10248:
10249: * CHANGES: update to reality
10250:
10251: 1999-10-11 20:53 millert
10252:
10253: * auth/fwtk.c: include <auth.h> to get function prototypes.
10254:
10255: 1999-10-11 20:05 millert
10256:
10257: * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10258:
10259: 1999-10-11 19:42 millert
10260:
10261: * sudo.c: in set_perms(), always call setuid(0) before changing the
10262: ruid/euid so we always know it will succeed.
10263:
10264: 1999-10-11 12:24 millert
10265:
10266: * defaults.h: #undef T_FOO to avoid conflicts with system defines
10267: (like on ULTRIX).
10268:
10269: 1999-10-11 11:55 millert
10270:
10271: * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10272: sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10273: needs some fleshing out but this is a start.
10274:
10275: 1999-10-10 17:21 millert
10276:
10277: * defaults.c: use strtol, not strtoul since not everyone has not
10278: strtoul
10279:
10280: 1999-10-10 15:01 millert
10281:
10282: * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10283: INITIAL state
10284:
10285: 1999-10-10 14:38 millert
10286:
10287: * lex.yy.c, parse.lex: o Add support for escaped characters in the
10288: WORD macro o Modify fill() to squash escape chars
10289:
10290: 1999-10-10 13:56 millert
10291:
10292: * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10293: checks for default values that are supposed to be pathnames. o
10294: Fix a duplicate free when visudo finds an error.
10295:
10296: 1999-10-09 01:01 millert
10297:
10298: * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10299:
10300: 1999-10-07 21:12 millert
10301:
10302: * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10303: requiretty option o Move O_NOCTTY to compat.h
10304:
10305: 1999-10-07 21:12 millert
10306:
10307: * logging.c: The exit() in log_error() was mistakenly removed in a
10308: previous version. Put it back...
10309:
10310: 1999-10-07 17:20 millert
10311:
10312: * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10313: defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10314: logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10315: auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10316: Change defaults stuff to put the value right in the struct. o
10317: Implement mailer_flags o Store syslog stuff both in int and
10318: string form. Setting the string form magically updates the int
10319: version. o Add boolean attribute to strings where it makes sense
10320: to say !foo
10321:
10322: 1999-10-07 17:13 millert
10323:
10324: * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10325:
10326: 1999-10-06 00:48 millert
10327:
10328: * auth/API: cleanup function no longer takes a status arg
10329:
10330: 1999-10-06 00:48 millert
10331:
10332: * INSTALL: the the
10333:
10334: 1999-09-15 05:15 millert
10335:
10336: * TODO, config.h.in, configure, configure.in, logging.c: Use
10337: strftime() instead of ctime() if it is available.
10338:
10339: 1999-09-14 12:58 millert
10340:
10341: * defaults.c: fix copyright date
10342:
10343: 1999-09-14 12:57 millert
10344:
10345: * RUNSON: update ReliantUNIX entry
10346:
10347: 1999-09-14 12:56 millert
10348:
10349: * defaults.c, defaults.h, logging.c: add log_year option
10350:
10351: 1999-09-14 04:01 millert
10352:
10353: * configure, configure.in: add --without-sendmail to help output
10354:
10355: 1999-09-14 03:42 millert
10356:
10357: * configure, configure.in: enforce an otctal arg for
10358: --with-suoders-mode
10359:
10360: 1999-09-08 04:06 millert
10361:
10362: * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10363: config.h.in, configure, configure.in, defaults.c, defaults.h,
10364: find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10365: sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10366: auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10367: auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10368: "Defaults" line in sudoers to make configuration variables
10369: changable at runtime (and on a global, per-host and per-user
10370: basis). Both the names and the internal representation are still
10371: subject to change. It was necessary to make sudo_user.runas but
10372: a char ** instead of a char * since this value can be changed by
10373: a Defaults line. There is a similar (but more complicated) issue
10374: with sudo_user.prompt but it is handled differently at the
10375: moment.
10376:
10377: Add a "-L" flag to list the name of options with their
10378: descriptions. This may only be temporary.
10379:
10380: Move some prototypes to parse.h
10381:
10382: Be much less restrictive on what is allowed for a username.
10383:
10384: 1999-09-08 04:01 millert
10385:
10386: * sample.syslog.conf: Add more info
10387:
10388: 1999-09-04 03:09 millert
10389:
10390: * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10391: strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10392: from their license.
10393:
10394: 1999-08-31 05:39 millert
10395:
10396: * auth/sudo_auth.h: move dce_verofy proto to correct section
10397:
10398: 1999-08-31 05:39 millert
10399:
10400: * auth/dce.c: remove XXX
10401:
10402: 1999-08-28 06:00 millert
10403:
10404: * emul/fnmatch.h: Add fnmatch() prototype
10405:
10406: 1999-08-28 06:00 millert
10407:
10408: * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10409: emul/fnmatch.h to be after sudo.h for __P
10410:
10411: 1999-08-28 05:59 millert
10412:
10413: * sudo.h: add strcasecmp proto
10414:
10415: 1999-08-28 05:50 millert
10416:
10417: * auth/sudo_auth.c: add check for case where there are no auth
10418: methods
10419:
10420: 1999-08-28 05:36 millert
10421:
10422: * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10423: __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10424:
10425: 1999-08-28 05:24 millert
10426:
10427: * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10428: everywhere we include string.h
10429:
10430: 1999-08-28 05:22 millert
10431:
10432: * version.c: nicer output when showing auth methods
10433:
10434: 1999-08-28 05:00 millert
10435:
10436: * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10437:
10438: 1999-08-28 04:49 millert
10439:
10440: * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10441:
10442: 1999-08-28 04:22 millert
10443:
10444: * parse.lex, lex.yy.c: fix definition of OCTECT
10445:
10446: 1999-08-28 04:10 millert
10447:
10448: * configure, configure.in: aix_auth.o not authenticate.o
10449:
10450: 1999-08-27 17:02 millert
10451:
10452: * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10453: generated from the keyboard). Since we run with ruid/euid == 0
10454: the user can't really signal us in nasty ways.
10455:
10456: 1999-08-27 17:01 millert
10457:
10458: * visudo.c: Don't need to worry about catching too many signals
10459: since we do locking on the tmp file. If a lockfile is really
10460: stale, it will be detected and overwritten.
10461:
10462: 1999-08-27 16:09 millert
10463:
10464: * INSTALL, Makefile.in: include auth/API in tarball
10465:
10466: 1999-08-27 16:09 millert
10467:
10468: * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10469: loop and only do the memset if we are *not* in standalone mode.
10470:
10471: 1999-08-27 13:46 millert
10472:
10473: * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10474:
10475: 1999-08-27 11:53 millert
10476:
10477: * sudo.c: fix --enable-noargs-shell
10478:
10479: 1999-08-27 11:06 millert
10480:
10481: * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10482:
10483: 1999-08-27 10:54 millert
10484:
10485: * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10486:
10487: 1999-08-27 10:50 millert
10488:
10489: * auth/dce.c: there were still some return(0)'s hanging around,
10490: make them AUTH_FAILURE
10491:
10492: 1999-08-27 10:39 millert
10493:
10494: * parse.c: typo in comment
10495:
10496: 1999-08-27 10:03 millert
10497:
10498: * version.c: add missing semicolon
10499:
10500: 1999-08-27 08:31 millert
10501:
10502: * auth/sudo_auth.h: missing backslash
10503:
10504: 1999-08-26 17:24 millert
10505:
10506: * CHANGES, config.h.in, configure, configure.in: Kill
10507: _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10508:
10509: 1999-08-26 09:21 millert
10510:
10511: * Makefile.in: add parse.h to HDRS
10512:
10513: 1999-08-26 09:16 millert
10514:
10515: * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10516: VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10517: in LIBS, commong ld flags go in LDFLAGS and network libs like
10518: -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10519: on Solaris and is a bit cleaner in general.
10520:
10521: 1999-08-26 06:56 millert
10522:
10523: * UPGRADE: mention ptmp -> sudoers.tmp
10524:
10525: 1999-08-26 06:12 millert
10526:
10527: * configure.in, configure, config.h.in: Define
10528: _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10529:
10530: 1999-08-26 05:37 millert
10531:
10532: * RUNSON: add 2 reports
10533:
10534: 1999-08-26 05:20 millert
10535:
10536: * auth/kerb5.c: Minor changes, mostly cosmetic.
10537: verify_krb_v5_tgt() changed to return a value more like a system
10538: function
10539:
10540: 1999-08-26 05:19 millert
10541:
10542: * auth/dce.c: Add an XXX
10543:
10544: 1999-08-26 05:19 millert
10545:
10546: * TODO: more things todo!
10547:
10548: 1999-08-26 05:18 millert
10549:
10550: * sample.sudoers: update based on what is in the man page
10551:
10552: 1999-08-26 05:10 millert
10553:
10554: * parse.yacc: minor change to first line printed in -l mode
10555:
10556: 1999-08-26 05:10 millert
10557:
10558: * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10559: VARIABLES" section to "ENVIRONMENT" to be more standard and add
10560: "EXAMPLES" section
10561:
10562: 1999-08-26 05:08 millert
10563:
10564: * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10565: "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10566: standard
10567:
10568: 1999-08-26 05:06 millert
10569:
10570: * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10571:
10572: 1999-08-26 05:05 millert
10573:
10574: * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10575:
10576: 1999-08-26 05:04 millert
10577:
10578: * UPGRADE: mention timestamp changes
10579:
10580: 1999-08-26 05:04 millert
10581:
10582: * PORTING: cosmetic cleanup
10583:
10584: 1999-08-26 05:00 millert
10585:
10586: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10587: sudoers(8) man page
10588:
10589: 1999-08-24 13:45 millert
10590:
10591: * version.c: Update comments about syslog name tables
10592:
10593: 1999-08-24 13:37 millert
10594:
10595: * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10596: configure.in, parse.yacc: include strcasecmp() for those without
10597: it
10598:
10599: 1999-08-24 12:43 millert
10600:
10601: * sample.sudoers: Use the : operator some more and fix a typo
10602:
10603: 1999-08-24 12:43 millert
10604:
10605: * HISTORY: update the history of sudo
10606:
10607: 1999-08-24 12:42 millert
10608:
10609: * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10610:
10611: 1999-08-24 12:41 millert
10612:
10613: * CHANGES: recent changes
10614:
10615: 1999-08-24 12:40 millert
10616:
10617: * sudo.tab.h: these should be generated with byacc, not bison
10618:
10619: 1999-08-24 12:40 millert
10620:
10621: * lex.yy.c: regen
10622:
10623: 1999-08-24 11:58 millert
10624:
10625: * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10626: the stored (expanded) alias was not stored with the contents.
10627: This could lead to incorrect output if the sudoers file had
10628: different alias types with the same name. Normal parsing (ie:
10629: not in '-l' mode) is unaffected.
10630:
10631: 1999-08-23 12:47 millert
10632:
10633: * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10634: proto on some systems
10635:
10636: 1999-08-22 13:10 millert
10637:
10638: * snprintf.c: fix comment
10639:
10640: 1999-08-22 13:09 millert
10641:
10642: * tgetpass.c: don't need limits.h
10643:
10644: 1999-08-22 07:36 millert
10645:
10646: * snprintf.c: kill bogus reference to vfprintf
10647:
10648: 1999-08-22 07:26 millert
10649:
10650: * sample.sudoers, sudoers: better examples
10651:
10652: 1999-08-22 07:23 millert
10653:
10654: * snprintf.c: Add some const in the K&R defs. This is safe since
10655: we define const away if the compiler doesn't grok it.
10656:
10657: 1999-08-22 07:22 millert
10658:
10659: * aclocal.m4, configure: Better test for working long long support.
10660: Ultrix compiler supports basic long long but not all operations
10661: on them.
10662:
10663: 1999-08-22 05:59 millert
10664:
10665: * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10666: sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10667: MAXINT before including hpsecurity.h to silence an HP-UX warning
10668: Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10669:
10670: 1999-08-21 15:00 millert
10671:
10672: * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10673: snprintf.c: UCB-derived snprintf + asprintf support. Supports
10674: quads if the compiler does. No floating point yet, perhaps
10675: later...
10676:
10677: 1999-08-20 16:37 millert
10678:
10679: * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10680: auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10681: code as root, not the invoking user. It doesn't really gain us
10682: anything to run as the user since an attacker can just have an
10683: setuid(0) in their egg. Running as root solves potential
10684: problems wrt signalling.
10685:
10686: 1999-08-19 13:45 millert
10687:
10688: * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10689: let the signal handler get it if we are still running, else let
10690: init reap it for us. The extra time it takes to wait lets the
10691: user know that mail is being sent.
10692:
10693: Install SIGCHLD handler in main() and for POSIX signals, block
10694: everything *except* SIGCHLD.
10695:
10696: 1999-08-19 12:30 millert
10697:
10698: * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10699: INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10700: a bitmap instead of an int. This makes it possible to express
10701: things like "failed to validate because user not listed for this
10702: host". Some thigns that were previously VALIDATE_FOO are now
10703: FLAG_FOO. This may change later on.
10704:
10705: Reorganized code in log_auth() and sudo.c to deal with above
10706: changes.
10707:
10708: Safer versions of push/pushcp with in the do { ... } while (0)
10709: style
10710:
10711: parse.yacc now saves info on the stack to allow parse.c to
10712: determine if a user was listed, but not for the host he/she tried
10713: to run on.
10714:
10715: Added --with-mail-if-no-host option
10716:
10717: 1999-08-17 11:29 millert
10718:
10719: * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10720: visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10721: externally visible. o If pedantic > 1, it is a parse error. o
10722: Add -s (strict) option to visudo which sets pedantic to 2.
10723:
10724: 1999-08-17 11:26 millert
10725:
10726: * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10727:
10728: 1999-08-17 11:20 millert
10729:
10730: * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10731:
10732: 1999-08-17 10:29 millert
10733:
10734: * configure, configure.in, Makefile.in: Add testsudoers to default
10735: build target if --with-devel Don't clean generated parser files
10736: unless "distclean".
10737:
10738: 1999-08-17 08:47 millert
10739:
10740: * parse.yacc: In pedantic mode we need to save *all* the aliases,
10741: not just those that match, or we get spurious warnings.
10742:
10743: 1999-08-17 05:32 millert
10744:
10745: * TROUBLESHOOTING: reference samples.sylog.conf
10746:
10747: 1999-08-14 11:50 millert
10748:
10749: * sample.syslog.conf: Sample entries for syslog.conf
10750:
10751: 1999-08-14 11:40 millert
10752:
10753: * CHANGES: recent changes
10754:
10755: 1999-08-14 11:36 millert
10756:
10757: * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10758: pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10759: sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10760: configured into flags and add a flag to specify an auth method is
10761: running alone (the only one). Pass auth methods their sudo_auth
10762: pointer, not the data pointer. This allows us to get at the
10763: flags and tell if we are the only auth method. That, in turn,
10764: allows the method to be able to decide what should/should not be
10765: a fatal error. Currently only rfc1938 uses it this way, which
10766: allows us to kill the OTP_ONLY define and te hackery that went
10767: with it. With access to the sudo_auth struct, methods can also
10768: get at a string holding their cannonical name (useful in error
10769: messages).
10770:
10771: 1999-08-14 11:34 millert
10772:
10773: * Makefile.in, INSTALL, README, config.h.in, configure,
10774: configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10775: sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10776: o real dependencies in the Makefile o --with-devel option to
10777: enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10778: "foo->bar" o ALL goes back to being a token, not a string but
10779: don't leak memory o rename hsotspec -> host in parse.yacc
10780:
10781: 1999-08-12 12:26 millert
10782:
10783: * BUGS, CHANGES: recent changes
10784:
10785: 1999-08-12 12:24 millert
10786:
10787: * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10788: sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10789: *snprintf() before -ldb is added to LIBS since -ldb includes a
10790: bogus snprintf(). o Add forward refs for struct mbuf and struct
10791: rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10792: to fix -Wall o Add missing includes to fix more -Wall
10793:
10794: 1999-08-12 10:37 millert
10795:
10796: * INSTALL, check.c, config.h.in, configure, configure.in,
10797: parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10798: o Add a "pedentic" flag to the parser. This makes sudo warn in
10799: cases where an alias may be used before it is defined. Only
10800: turned on for visudo and testsudoers. o Add
10801: --disable-authentication option that makes sudo not require
10802: authentication by default. The PASSWD tag can be used to require
10803: authentication for an entry. We no longer overload
10804: --without-passwd.
10805:
10806: 1999-08-12 10:29 millert
10807:
10808: * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10809: USERNAME. These days a username can contain just about anything
10810: so be very permissive. Also drop the unused \. punctuation.
10811:
10812: 1999-08-09 18:25 millert
10813:
10814: * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10815: parse.h o find_alias() now returns an aliasinfo * instead of
10816: boolean o add_alias() now takes a value parameter to store in the
10817: aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10818: return: 1) positive match 0) negative match (due to '!') -1) no
10819: match This means setting $$ explicitly in all cases, which I
10820: should have done in the first place. It also means that we
10821: always store a value that is != -1 and when we see a '!' we can
10822: set *_matches to !rv if rv != -1. The upshot of all of this is
10823: that '!' now works the way it should in lists and some of the
10824: rules are more uniform and sensible.
10825:
10826: 1999-08-09 18:17 millert
10827:
10828: * Makefile.in: add parse.h dependency
10829:
10830: 1999-08-09 18:17 millert
10831:
10832: * parse.h: kill unused *_matched macros
10833:
10834: 1999-08-09 10:35 millert
10835:
10836: * parse.yacc: Allow a list of users as the first thing in a user
10837: spec, not just a single entry. This makes things more uniform,
10838: though it does allow you to write user specs that are hard to
10839: read.
10840:
10841: 1999-08-09 10:08 millert
10842:
10843: * configure: regen
10844:
10845: 1999-08-09 10:08 millert
10846:
10847: * configure.in: fix check for crypt() in libufc
10848:
10849: 1999-08-07 14:03 millert
10850:
10851: * README: sudo-users list now exists
10852:
10853: 1999-08-07 07:46 millert
10854:
10855: * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10856: reality.
10857:
10858: 1999-08-07 05:59 millert
10859:
10860: * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10861: config.h.in, configure.in, logging.c, sudo.h, version.c,
10862: visudo.c, configure, fileops.c: o Move lock_file() and touch()
10863: into fileops.c so visudo can use them o Visudo now locks the
10864: sudoers temp file instead of bailing when the temp file already
10865: exists. This fixes the problem of stale temp files but it does
10866: *require* that you not try to put the temp file in a
10867: world-writable directory. This shoud not be an issue as the temp
10868: file should live in the same dir as sudoers. o Visudo now only
10869: installs the temp file as sudoers if it changed.
10870:
10871: 1999-08-06 09:49 millert
10872:
10873: * logging.c: add fcntl locking
10874:
10875: 1999-08-06 09:33 millert
10876:
10877: * configure, config.h.in, configure.in, logging.c: Lock the log
10878: file.
10879:
10880: 1999-08-06 05:36 millert
10881:
10882: * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10883: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10884: /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10885: temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10886: _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10887:
10888: 1999-08-05 17:38 millert
10889:
10890: * INSTALL, check.c, config.h.in, configure, configure.in,
10891: version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10892: more things to root sudo -V config reporting
10893:
10894: 1999-08-05 10:56 millert
10895:
10896: * configure, configure.in: aix_auth.o not authenticate.o
10897:
10898: 1999-08-05 10:48 millert
10899:
10900: * config.h.in: Add --with-goodpri and --with-badpri configure
10901: options to specify the syslog priority to use.
10902:
10903: 1999-08-05 10:30 millert
10904:
10905: * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10906: and --with-badpri configure options to specify the syslog
10907: priority to use.
10908:
10909: 1999-08-05 10:25 millert
10910:
10911: * compat.h: kill crufty AIX stuff
10912:
10913: 1999-08-05 06:55 millert
10914:
10915: * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10916: deal with $< like I would expect. Both GNU and BSD makes get
10917: this right but... So, we just expand $< inline at the cost of
10918: some ugliness.
10919:
10920: 1999-08-05 06:52 millert
10921:
10922: * version.c: If the invoking user is root, sudo will now print
10923: configure info in -V mode. Currently just prints logging info,
10924: to be expanded later.
10925:
10926: 1999-08-05 06:51 millert
10927:
10928: * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10929: facility and priority o use new print_version() functino for -V
10930: mode
10931:
10932: 1999-08-05 06:49 millert
10933:
10934: * check.c: Don't need version.c
10935:
10936: 1999-08-05 06:21 millert
10937:
10938: * configure, configure.in, aclocal.m4, config.h.in: Add check for
10939: syslog facilities and priorities tables in syslog.h
10940:
10941: 1999-08-05 05:23 millert
10942:
10943: * Makefile.in: o authenticate -> aix_auth o add version.c
10944:
10945: 1999-08-05 05:21 millert
10946:
10947: * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10948:
10949: 1999-08-04 13:32 millert
10950:
10951: * TODO: sudo should lock its logfile
10952:
10953: 1999-08-04 13:28 millert
10954:
10955: * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10956: shortcut macros for append() to make things more readable. o The
10957: separator in append() is now a string instead of a char. o In
10958: append(), only prepend the separator if the last char is not a
10959: '!'. This is a hack but it greatly simplifies '!' handling. o
10960: In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10961: inherited across entries in a list (matches current behavior).
10962: o Fix formatting in -l mode such that items in a list are
10963: separated by a space. Greatlt improves readability. o Space
10964: for name field in struct aliasinfo is now allocated dyanically
10965: instead of using a (big) buffer. o In add_alias(), only search
10966: the list once (lsearch instead of lfind + lsearch)
10967:
10968: 1999-08-04 11:31 millert
10969:
10970: * lex.yy.c, sudo.tab.h: regen
10971:
10972: 1999-08-04 10:54 millert
10973:
10974: * configure, configure.in: Solais pam doesn't require anye xtra
10975: setup
10976:
10977: 1999-08-04 05:35 millert
10978:
10979: * parse.yacc: o Simpler '!' support now that the lexer deals with
10980: multiple !'s for us. o In the case of opFOO, have FOO give a
10981: boolean return value and set foo_matches in opFOO, not FOO. o
10982: Treat 'ALL' as a string since it gets fill()'d in
10983: parse.lex--fixes a small memory leak. In the long run it may
10984: be better to just fix parse.lex and make ALL back into a token.
10985: However, having it be a string is useful since it can be
10986: easily passed back to the parent rule if we so desire.
10987:
10988: 1999-08-04 03:54 millert
10989:
10990: * parse.lex: o Remove some unnecessary backslashes o collapse
10991: multiple !'s by using !+ and checking if yyleng is even or odd.
10992: this allows us to simplify ! handling in parse.yacc
10993:
10994: 1999-08-04 03:53 millert
10995:
10996: * sudo.c: -u flag was being ignored
10997:
10998: 1999-08-01 13:04 millert
10999:
11000: * Makefile.in: correct fix
11001:
11002: 1999-08-01 12:37 millert
11003:
11004: * Makefile.in: work around pod2man stupididy
11005:
11006: 1999-08-01 12:35 millert
11007:
11008: * Makefile.in: correct dependencies for .cat
11009:
11010: 1999-08-01 12:26 millert
11011:
11012: * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11013:
11014: 1999-08-01 12:25 millert
11015:
11016: * sudo.pod, visudo.pod: Add copyright Update to reality
11017:
11018: 1999-08-01 11:42 millert
11019:
11020: * parse.c, sudo.c, sudo.h: rename validate() to the more
11021: descriptive sudoers_lookup()
11022:
11023: 1999-08-01 06:49 millert
11024:
11025: * auth/aix_auth.c: use tgetpass
11026:
11027: 1999-07-31 12:32 millert
11028:
11029: * CHANGES: updates
11030:
11031: 1999-07-31 12:31 millert
11032:
11033: * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11034: configure, configure.in, sudo.c: Sudo, not CU Sudo
11035:
11036: 1999-07-31 12:19 millert
11037:
11038: * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11039: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11040: ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11041: lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11042: parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11043: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11044: visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11045: auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11046: auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11047: auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11048: LICENSE: add 4th term to license similar to term 5 in the apache
11049: license
11050:
11051: 1999-07-31 12:02 millert
11052:
11053: * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11054: sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11055:
11056: 1999-07-28 05:24 millert
11057:
11058: * CHANGES: updates
11059:
11060: 1999-07-28 05:21 millert
11061:
11062: * check.c: Use dirs instead of files for timestamp. This allows
11063: tty and non-tty schemes to coexist reasonably. Note, however,
11064: that when you update a tty ticket, the mtime on the user dir gets
11065: updated as well.
11066:
11067: 1999-07-28 05:17 millert
11068:
11069: * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11070: to link with "-lprot -lx" when linking test program, not just
11071: -lprot. Also add check for getspnam(). The SCO docs indicate
11072: that /etc/shadow can be used but this may be a lie.
11073:
11074: 1999-07-24 03:35 millert
11075:
11076: * auth/API: first cut at auth API description
11077:
11078: 1999-07-22 15:48 millert
11079:
11080: * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11081: securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11082: now an init method that gets run before the main loop. This
11083: allows auth routines to differentiate between initialization that
11084: happens once vs. setup that needs to run each time through the
11085: loop.
11086:
11087: 1999-07-22 12:23 millert
11088:
11089: * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11090:
11091: 1999-07-22 12:22 millert
11092:
11093: * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11094: versions of asprintf() and vasprintf()
11095:
11096: 1999-07-22 09:14 millert
11097:
11098: * TODO: remove 2 items. One done, one won't do.
11099:
11100: 1999-07-22 09:10 millert
11101:
11102: * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11103: visudo.cat, visudo.html, configure, lex.yy.c: regen
11104:
11105: 1999-07-22 09:06 millert
11106:
11107: * CHANGES: new changes
11108:
11109: 1999-07-22 09:01 millert
11110:
11111: * sudo.pod: o Document -K flag and update meaning of -k flag. o
11112: BSD-style copyright o Document clearing of BIND resolver
11113: environment variables o Clarify bit about shared libs o suggest
11114: rc files create /tmp/.odus if your OS gives away files
11115:
11116: 1999-07-22 08:59 millert
11117:
11118: * visudo.pod: BSD license
11119:
11120: 1999-07-22 08:58 millert
11121:
11122: * tgetpass.c: o BSD copyright o no need to block signals, we now do
11123: that in main() o cosmetic changes
11124:
11125: 1999-07-22 08:57 millert
11126:
11127: * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11128: sudo_user" instead of old globals. o some cometic cleanup
11129:
11130: 1999-07-22 08:56 millert
11131:
11132: * sudo_setenv.c, version.h: BSD-style copyright
11133:
11134: 1999-07-22 08:56 millert
11135:
11136: * sudo.h: o BSD copyright o logging and parser bits moved to their
11137: own .h files o new "struct sudo_user" to encapsulate many of the
11138: old globals.
11139:
11140: 1999-07-22 08:55 millert
11141:
11142: * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11143: use new logging routines o simplified flow of control o BIND
11144: resolver additions to badenv_table
11145:
11146: 1999-07-22 08:53 millert
11147:
11148: * strerror.c: BSD-style copyright
11149:
11150: 1999-07-22 08:53 millert
11151:
11152: * snprintf.c: Now compiles on more K&R compilers
11153:
11154: 1999-07-22 08:52 millert
11155:
11156: * putenv.c: BSD-style copyright, cosmetic changes
11157:
11158: 1999-07-22 08:51 millert
11159:
11160: * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11161: Move parser-specific defines and structs into parse.h + other
11162: cosmetic changes
11163:
11164: 1999-07-22 08:51 millert
11165:
11166: * logging.h: defines for logging routines
11167:
11168: 1999-07-22 08:49 millert
11169:
11170: * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11171: interfaces.h, pathnames.h.in: BSD-style copyright
11172:
11173: 1999-07-22 08:48 millert
11174:
11175: * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11176: copyright, cosmetic changes
11177:
11178: 1999-07-22 08:46 millert
11179:
11180: * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11181: add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11182: changes to fill in AUTH_OBJS for new auth api o check for
11183: strerror(), v?snprintf() and v?asprintf() o replace
11184: --with-AuthSRV with --with-fwtk
11185:
11186: 1999-07-22 08:43 millert
11187:
11188: * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11189: HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11190: HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11191: NO_PASSWD
11192:
11193: 1999-07-22 08:42 millert
11194:
11195: * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11196: are missing.
11197:
11198: 1999-07-22 08:39 millert
11199:
11200: * alloc.c: BSD-style copyright
11201:
11202: 1999-07-22 08:38 millert
11203:
11204: * TROUBLESHOOTING: no more --with-getpass
11205:
11206: 1999-07-22 08:34 millert
11207:
11208: * TODO: Take out things I've done...
11209:
11210: 1999-07-22 08:34 millert
11211:
11212: * README: Refer to LICENSE
11213:
11214: 1999-07-22 08:34 millert
11215:
11216: * PORTING: --with-getpass no longer exists
11217:
11218: 1999-07-22 08:33 millert
11219:
11220: * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11221: new files and new auth modules.
11222:
11223: 1999-07-22 08:32 millert
11224:
11225: * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11226: --with-fwtk and --without-passwd.
11227:
11228: 1999-07-22 08:31 millert
11229:
11230: * HISTORY: Update history a bit
11231:
11232: 1999-07-22 08:29 millert
11233:
11234: * COPYING, LICENSE: Now distributed under a BSD-style license
11235:
11236: 1999-07-22 08:28 millert
11237:
11238: * auth/sudo_auth.c: o BSD-style copyright o Add support for
11239: NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11240: rfc1938 code o new struct sudo_user global
11241:
11242: 1999-07-22 08:25 millert
11243:
11244: * auth/: pam.c, sia.c: BSD-style copyright and use new log
11245: functions
11246:
11247: 1999-07-22 08:24 millert
11248:
11249: * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11250: Use asprintf() and snprintf() where sensible.
11251:
11252: 1999-07-22 08:19 millert
11253:
11254: * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11255: handling is now done more reasonably--better sanity checks and
11256: tty-based stamps are now done as files in a directory with the
11257: same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11258: It is not currently possible to mix tty and non-tty based ticket
11259: schemes but this may change in the future (it requires sudo to
11260: use a directory instead of a file in the non-tty case). Also,
11261: ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11262: really deletes the file. That way you don't get the lecture
11263: again just because you killed your ticket in .logout. BSD-style
11264: copyright now.
11265:
11266: 1999-07-22 08:13 millert
11267:
11268: * logging.c: o rewritten logging routines. log_error() now takes
11269: printf-style varargs and log_auth() for the return value of
11270: validate(). o BSD-style copyright
11271:
11272: 1999-07-22 07:04 millert
11273:
11274: * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11275: auth API
11276:
11277: 1999-07-22 07:02 millert
11278:
11279: * auth/fwtk.c: Use snprintf() where it makes sense and add a
11280: BSD-style copyright
11281:
11282: 1999-07-22 07:00 millert
11283:
11284: * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11285: secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11286: copyright
11287:
11288: 1999-07-22 06:57 millert
11289:
11290: * emul/utime.h, utime.c: BSD-style copyright
11291:
11292: 1999-07-22 06:57 millert
11293:
11294: * emul/search.h: this has been rewritten so use my BSD-style
11295: copyright
11296:
11297: 1999-07-15 11:21 millert
11298:
11299: * snprintf.c: include malloc.h if no stdlib.h
11300:
11301: 1999-07-15 10:21 millert
11302:
11303: * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11304:
11305: 1999-07-15 10:20 millert
11306:
11307: * strerror.c: strerror() for systems w/o it
11308:
11309: 1999-07-12 06:53 millert
11310:
11311: * visudo.c: stylistic changes
11312:
11313: 1999-07-12 06:25 millert
11314:
11315: * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11316: comment
11317:
11318: 1999-07-11 16:10 millert
11319:
11320: * auth/pam.c: remove missed ref to PAM_nullpw
11321:
11322: 1999-07-11 16:10 millert
11323:
11324: * auth/sudo_auth.h: pasto
11325:
11326: 1999-07-11 15:19 millert
11327:
11328: * auth/kerb5.c: more or less complete now--still untested
11329:
11330: 1999-07-11 15:09 millert
11331:
11332: * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11333:
11334: 1999-07-11 14:42 millert
11335:
11336: * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11337: code into rfc1938.c
11338:
11339: 1999-07-11 07:22 millert
11340:
11341: * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11342: unchanged from dce_pwent.c
11343:
11344: 1999-07-11 06:44 millert
11345:
11346: * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11347: Could probably be much better
11348:
11349: 1999-07-11 06:43 millert
11350:
11351: * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11352: works (tested)
11353:
11354: 1999-07-11 05:37 millert
11355:
11356: * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11357:
11358: 1999-07-11 05:33 millert
11359:
11360: * auth/pam.c: don't use prompt global, it will go away
11361:
11362: 1999-07-11 05:32 millert
11363:
11364: * auth/secureware.c: correct copyright years
11365:
11366: 1999-07-10 20:32 millert
11367:
11368: * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11369: pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11370: New authentication API and methods
11371:
11372: 1999-07-08 06:46 millert
11373:
11374: * parse.yacc: only save an entry if user_matches && host_matches,
11375: even if the stack is empty (fix for previous commit)
11376:
11377: 1999-07-08 06:35 millert
11378:
11379: * parse.yacc: 1) Always save an entry on the stack if it is empty.
11380: This fixes the -l and -v flags that were broken by earlier parser
11381: changes.
11382:
11383: 2) In a Runas list, don't negate FALSE -> TRUE since that would
11384: make !foo match any time the user specified a runas user (via -u)
11385: other than foo.
11386:
11387: 1999-07-08 05:45 millert
11388:
11389: * testsudoers.c: interfaces and num_interfaces are now auto, not
11390: extern
11391:
11392: 1999-07-07 14:09 millert
11393:
11394: * auth.c: use a static global to keep stae about empty passwords
11395:
11396: 1999-07-07 14:08 millert
11397:
11398: * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11399: other modules
11400:
11401: 1999-07-05 16:53 millert
11402:
11403: * auth.c: PAM prompt code was wrong, looks like we have to kludge
11404: it after all.
11405:
11406: 1999-07-05 16:35 millert
11407:
11408: * auth.c: In the PAM code, when a user hits return at the first
11409: password prompt, exit without a warning just like the normal auth
11410: code
11411:
11412: 1999-07-05 16:15 millert
11413:
11414: * configure, configure.in: kludge around cross-compiler false
11415: positives
11416:
11417: 1999-07-05 16:14 millert
11418:
11419: * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11420: (correct) PAM code Tgetpass now takes an echo flag for use with
11421: PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11422: useless umask setting Change error from BAD_ALLOCATION ->
11423: BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11424: auth.c for consistency
11425:
11426: 1999-07-05 16:11 millert
11427:
11428: * sudo.c: Some -Wall and kill some trailing spaces
11429:
11430: 1999-07-05 16:10 millert
11431:
11432: * configure.in: define -D__EXTENSIONS__ for solaris so we get
11433: crypt() proto
11434:
11435: 1999-06-22 09:42 millert
11436:
11437: * RUNSON: add Dynix 4.4.4
11438:
11439: 1999-06-22 09:30 millert
11440:
11441: * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11442: version, fall back on old kerb4 auth code
11443:
11444: 1999-06-22 06:41 millert
11445:
11446: * INSTALL: clarify some things
11447:
11448: 1999-06-22 06:38 millert
11449:
11450: * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11451:
11452: 1999-06-14 19:47 millert
11453:
11454: * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11455:
11456: 1999-06-03 12:34 millert
11457:
11458: * tgetpass.c: Fix open(2) return value checking, was NULL for
11459: fopen, should be -1 for open
11460:
11461: 1999-06-03 12:06 millert
11462:
11463: * configure: regen
11464:
11465: 1999-06-03 12:06 millert
11466:
11467: * configure.in: better wording for solaris pam notice
11468:
11469: 1999-06-03 11:52 millert
11470:
11471: * CHANGES: document recent changes
11472:
11473: 1999-06-03 11:52 millert
11474:
11475: * TROUBLESHOOTING: Update shadow password section
11476:
11477: 1999-06-03 11:51 millert
11478:
11479: * auth.c: move authentication code from check.c to auth.c
11480:
11481: 1999-06-03 11:51 millert
11482:
11483: * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11484:
11485: 1999-05-16 21:36 millert
11486:
11487: * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11488: getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11489: logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11490: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11491: interface-related defines to interfaces.h so we don't have to
11492: include <netinet/in.h> everywhere.
11493:
11494: 1999-05-14 12:30 millert
11495:
11496: * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11497: logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11498: braindeath with our own SUDO_MAX_PASS.
11499: It turns out the old DES crypt does the right thing with
11500: passwords
11501: longert than 8 characters.
11502: o Fix common typo (necesary -> necessary)
11503: o Update TODO list
11504:
11505: 1999-05-03 12:00 millert
11506:
11507: * sudo.c: set $LOGNAME when we set $USER
11508:
11509: 1999-04-27 00:00 millert
11510:
11511: * INSTALL: add comment about digital unix and interfaces.c warning
11512: with gcc
11513:
11514: 1999-04-15 01:12 millert
11515:
11516: * sample.sudoers: use modern paths and give examples for some of
11517: the new parser features
11518:
11519: 1999-04-10 13:03 millert
11520:
11521: * parse.c: fix comment
11522:
11523: 1999-04-10 00:49 millert
11524:
11525: * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11526: getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11527: parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11528: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11529: Function names should be flush with the start of the line so they
11530: can be found trivially in an editor and with grep
11531:
11532: 1999-04-10 00:40 millert
11533:
11534: * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11535: parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11536: is already void, no need to cast it
11537:
11538: 1999-04-10 00:37 millert
11539:
11540: * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11541: (this should not be possible)
11542:
11543: 1999-04-10 00:10 millert
11544:
11545: * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11546: testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11547: listed in sudoers) to the command instead of stashing the struct
11548: stat. Should be safer.
11549:
11550: 1999-04-08 19:56 millert
11551:
11552: * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11553: release
11554:
11555: 1999-04-07 20:20 millert
11556:
11557: * CHANGES: updated
11558:
11559: 1999-04-07 19:18 millert
11560:
11561: * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11562: sudoers.pod: You can now specifiy a host list instead of just a
11563: host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11564: now works.
11565:
11566: 1999-04-07 02:59 millert
11567:
11568: * testsudoers.c: Quiet -Wall
11569:
11570: 1999-04-07 02:50 millert
11571:
11572: * parse.yacc: Move the push from the beginning of cmndspec to the
11573: end. This means we no longer have to do a push at the end of
11574: privilege, just reset some values.
11575:
11576: 1999-04-06 20:24 millert
11577:
11578: * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11579: and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11580: most everywhere
11581:
11582: 1999-04-06 14:12 millert
11583:
11584: * sudoers.pod: modernize paths and update su example based on
11585: sample.sudoers one
11586:
11587: 1999-04-06 14:06 millert
11588:
11589: * sample.sudoers: New runas semantics
11590:
11591: 1999-04-06 13:54 millert
11592:
11593: * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11594: configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11595: ourselves so we don't need to rely on the system strdup(3) which
11596: may or may not exist. There is now no need to provide strdup()
11597: for those w/o it. Also, the prototype for estrdup() was wrong,
11598: it returns char * and its param is const.
11599:
11600: 1999-04-06 13:40 millert
11601:
11602: * getcwd.c: $Sudo tag
11603:
11604: 1999-04-06 13:20 millert
11605:
11606: * check.c: buf should be prompt; Michael Robokoff
11607: <mrobo@networkcs.com>
11608:
11609: 1999-04-06 01:40 millert
11610:
11611: * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11612: operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11613: and User_Alias.
11614:
11615: 1999-04-06 01:38 millert
11616:
11617: * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11618: GLOBAL_PROBLEM
11619:
11620: 1999-04-06 01:08 millert
11621:
11622: * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11623: as subscript.
11624:
11625: 1999-04-06 01:00 millert
11626:
11627: * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11628: VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11629: command but the NOPASSWD flag was set. Make runasspec,
11630: runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11631: support for '!' in the runas list Fix double printing of '%' and
11632: '+' for groups and netgroups respectively Add *_matched macros
11633: (no need for local stack variable). Should only be used directly
11634: after a pop (since top must be >= 2).
11635:
11636: 1999-04-05 23:25 millert
11637:
11638: * aclocal.m4, configure.in: Add copyright, somewhat silly
11639:
11640: 1999-04-05 16:57 millert
11641:
11642: * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11643: check_sia.c, compat.h, config.h.in, configure, configure.in,
11644: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11645: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11646: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11647: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11648: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11649: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11650: visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11651: 1.6 and combine copyright statements
11652:
11653: 1999-04-05 16:30 millert
11654:
11655: * sample.sudoers: Use ! not ^ to do negation
11656:
11657: 1999-04-05 16:29 millert
11658:
11659: * lex.yy.c: regen
11660:
11661: 1999-04-05 16:28 millert
11662:
11663: * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11664: across entris in a command list. Add a PASSWD tag to reverse
11665: NOPASSWD. When you override a runas or *PASSWD tag the value
11666: given becomes the new default for the rest of the command list.
11667:
11668: 1999-04-02 16:03 millert
11669:
11670: * CHANGES, RUNSON: update for 1.5.9
11671:
11672: 1999-04-02 16:02 millert
11673:
11674: * visudo.c: Shift return value of system(3) by 8 to get real exit
11675: value and if it is not 1 or 0 print the retval along with the
11676: error message.
11677:
11678: 1999-03-30 16:45 millert
11679:
11680: * Makefile.in: testsudoers needs LIBOBJS too
11681:
11682: 1999-03-30 12:17 millert
11683:
11684: * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11685: like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11686: would not allow millert to run ls as root.
11687:
11688: 1999-03-30 01:08 millert
11689:
11690: * CHANGES: new change
11691:
11692: 1999-03-30 01:03 millert
11693:
11694: * parse.yacc: Save entries that match a ! command on the matching
11695: stack too
11696:
11697: 1999-03-30 01:01 millert
11698:
11699: * sudo.c: Make sudo's usage info better when mutually exclusive
11700: args are given and don't rely on argument order to detect this;
11701: nick@zeta.org.au
11702:
11703: 1999-03-29 15:03 millert
11704:
11705: * CHANGES, Makefile.in, RUNSON: updates from CU
11706:
11707: 1999-03-28 23:38 millert
11708:
11709: * Makefile.in: use gzip
11710:
11711: 1999-03-28 23:31 millert
11712:
11713: * parse.yacc: Fix off by one error introduced in *alloc changes
11714:
11715: 1999-03-28 23:05 millert
11716:
11717: * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11718: check_sia.c, compat.h, config.h.in, configure, configure.in,
11719: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11720: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11721: lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11722: pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11723: sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11724: sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11725: visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11726: emul/utime.h: ++version
11727:
11728: 1999-03-28 21:59 millert
11729:
11730: * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11731: interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11732: parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11733: sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11734: emalloc/erealloc/estrdup
11735:
11736: 1999-03-28 20:29 millert
11737:
11738: * alloc.c: error checking memory allocation routines
11739:
11740: 1999-03-28 19:23 millert
11741:
11742: * parse.yacc: Still not right, this fixes it for real
11743:
11744: 1999-03-28 19:08 millert
11745:
11746: * parse.yacc: Fix for previous commit
11747:
11748: 1999-03-28 19:05 millert
11749:
11750: * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11751: when mixing different runas specs and ! commands. For example:
11752: millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11753: allow millert to run whoami as root as well as daemon when it
11754: should just allow daemon. The problem was that comma-separated
11755: commands in a list shared the same entry on the matching stack.
11756: Now they get their own entry iff there is a full match. It may
11757: be better to just make the runas spec persistent across all
11758: commands in a list like the user and host entries of the matching
11759: stack. However, since that is a fairly major change it should
11760: gets its own minor rev increase.
11761:
11762: 1999-03-28 13:50 millert
11763:
11764: * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11765: warning on Linux
11766:
11767: 1999-03-26 13:17 millert
11768:
11769: * CHANGES: updates
11770:
11771: 1999-03-26 13:12 millert
11772:
11773: * sample.sudoers: better su entry
11774:
11775: 1999-03-26 13:10 millert
11776:
11777: * configure: regen
11778:
11779: 1999-03-26 13:09 millert
11780:
11781: * check.c, configure.in: new pam code that works on solaris, should
11782: work on linux too; aelberg@home.com
11783:
11784: 1999-03-19 14:44 millert
11785:
11786: * RUNSON: more entries
11787:
11788: 1999-03-19 14:43 millert
11789:
11790: * config.h.in: only include strings.h if there is no string.h
11791:
11792: 1999-03-17 15:25 millert
11793:
11794: * config.guess: Sinix is now being called ReliantUNIX;
11795: bjjackso@us.oracle.com
11796:
11797: 1999-03-13 13:37 millert
11798:
11799: * sudo.c: shost must be set before log functions are called #ifdef
11800: HOST_IN_LOG
11801:
11802: 1999-03-07 18:34 millert
11803:
11804: * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11805: command args. Stop processing an arg when you hit a backslash so
11806: the quoted-character detection can catch it.
11807:
11808: 1999-02-26 01:19 millert
11809:
11810: * interfaces.c: include sys/time.h; aparently AIX needs it.
11811: ppz@cdu.elektra.ru
11812:
11813: 1999-02-23 19:43 millert
11814:
11815: * configure, configure.in: add missing case statement so
11816: --without-sendmail works
11817:
11818: 1999-02-22 21:51 millert
11819:
11820: * CHANGES: more
11821:
11822: 1999-02-22 15:10 millert
11823:
11824: * configure, configure.in: only search for -lsun in irix <= 4.x
11825:
11826: 1999-02-22 15:01 millert
11827:
11828: * configure, configure.in: back out last configure.in change now
11829: that I've hacked autoconf to fix the real problem and add a
11830: missing newline
11831:
11832: 1999-02-22 14:32 millert
11833:
11834: * CHANGES: updated
11835:
11836: 1999-02-22 14:05 millert
11837:
11838: * getcwd.c: add def of dirfd() for those without it
11839:
11840: 1999-02-22 10:58 millert
11841:
11842: * configure.in, configure: When falling back to checking for
11843: socket() when linking with "-lsocket -lnsl" check for main()
11844: instead since autoconf has already cached the results of checking
11845: for socket() in -lsocket. This is really an autoconf bug as it
11846: should use the extra libs as part of the cache variable name.
11847:
11848: 1999-02-22 10:47 millert
11849:
11850: * configure.in: typo
11851:
11852: 1999-02-21 15:18 millert
11853:
11854: * configure.in: fix occurrence of $with_timeout that should be
11855: $with_password_timeout;
11856: Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11857:
11858: 1999-02-17 11:40 millert
11859:
11860: * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11861: espie@openbsd.org
11862:
11863: 1999-02-11 01:41 millert
11864:
11865: * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11866: it does not have it
11867:
11868: 1999-02-09 13:11 millert
11869:
11870: * configure, configure.in: define for_BSD_TYPES irix
11871:
11872: 1999-02-06 19:47 millert
11873:
11874: * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11875: clear that it is the user's password, not root's, that we want.
11876:
11877: 1999-02-06 19:43 millert
11878:
11879: * check.c, sudo.h: If the user enters an empty password and really
11880: has no password, accept the empty password they entered.
11881: Perviously, they could enter anything *but* an empty password.
11882: Also, add GETPASS macro that calls either tgetpass() or getpass()
11883: depending on how sudo was configured. Problem noted by
11884: jdg@maths.qmw.ac.uk
11885:
11886: 1999-02-02 23:32 millert
11887:
11888: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11889: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11890: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11891: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11892: putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11893: testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11894: emul/utime.h: add explicate copyright
11895:
11896: 1999-02-02 23:16 millert
11897:
11898: * CHANGES: mention -lsocket, -lnsl configure changes
11899:
11900: 1999-02-02 17:54 millert
11901:
11902: * sudo.c: Don't clobber errno after calling check_sudoers().
11903:
11904: 1999-01-31 19:46 millert
11905:
11906: * configure.in, configure: When linking with both -lsocket and
11907: -lnsl be sure to do so in that order. Also, when we can't find
11908: socket() or inet_addr() and have to try linking with both libs,
11909: issue a warning.
11910:
11911: 1999-01-31 19:45 millert
11912:
11913: * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11914:
11915: 1999-01-23 12:18 millert
11916:
11917: * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11918: entry
11919:
11920: 1999-01-22 13:13 millert
11921:
11922: * configure, CHANGES, INSTALL, configure.in: fix and correctly
11923: document --with-umask; problem noted by adap@adap.org
11924:
11925: 1999-01-19 20:38 millert
11926:
11927: * configure.in, configure: only use /usr/{man,catman}/local to
11928: store man pages if suer didn't override prefix or mandir
11929:
11930: 1999-01-19 20:24 millert
11931:
11932: * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11933: take an arg
11934:
11935: 1999-01-18 21:53 millert
11936:
11937: * RUNSON: updates from users
11938:
11939: 1999-01-18 21:04 millert
11940:
11941: * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11942: 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11943:
11944: 1999-01-18 20:00 millert
11945:
11946: * configure, configure.in: better fix for the problem of unresolved
11947: symbols in -lnsl or -lsocket
11948:
11949: 1999-01-18 19:39 millert
11950:
11951: * configure, configure.in: when checking for functions in -lnsl and
11952: -lsocket link with both of them to avoid unresolved symbols on
11953: some weirdo systems
11954:
11955: 1999-01-17 20:49 millert
11956:
11957: * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11958: RCS before the RCS->CVS switch
11959:
11960: 1999-01-17 18:16 millert
11961:
11962: * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11963: configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11964: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11965: interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11966: parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11967: sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11968: tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11969: emul/utime.h: add sudo tags
11970:
11971: 1999-01-17 17:53 millert
11972:
11973: * version.h, sudo.h: testing Sudo tag
11974:
11975: 1999-01-17 17:40 millert
11976:
11977: * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
11978: compat.h, config.h.in, configure, configure.in, dce_pwent.c,
11979: find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11980: ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
11981: logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11982: putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
11983: sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
11984: tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
11985: emul/utime.h: crank version and regen files
11986:
11987: 1999-01-17 17:27 millert
11988:
11989: * Makefile.in: kill rcs goop in update_version and fix now that
11990: version is a const
11991:
11992: 1999-01-17 17:08 millert
11993:
11994: * INSTALL, check.c, config.h.in, configure, configure.in,
11995: logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
11996: fcusack@iconnet.net
11997:
11998: 1999-01-17 16:45 millert
11999:
12000: * realpath.c, sudo_realpath.c: we no longer use realpath
12001:
12002: 1999-01-17 16:44 millert
12003:
12004: * qualify.c: replaced by find_path.c
12005:
12006: 1999-01-17 16:43 millert
12007:
12008: * options.h: all options are now configure flags
12009:
12010: 1999-01-17 16:42 millert
12011:
12012: * lex.yy.c: regen
12013:
12014: 1999-01-17 16:41 millert
12015:
12016: * getwd.c: superceded by getcwd.c
12017:
12018: 1999-01-17 16:36 millert
12019:
12020: * getpass.c: superceded by tgetpass.c
12021:
12022: 1999-01-17 16:36 millert
12023:
12024: * SUPPORTED: superceded by RUNSON
12025:
12026: 1999-01-17 16:33 millert
12027:
12028: * OPTIONS: No longer used now that we have configure options for
12029: everything.
12030:
12031: 1999-01-17 16:32 millert
12032:
12033: * configure: regen based on configure.in
12034:
12035: 1999-01-17 16:31 millert
12036:
12037: * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12038: sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12039: on sudo.pod, sudoers.pod, and visudo.pod
12040:
12041: 1998-12-11 12:16 millert
12042:
12043: * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12044:
12045: 1998-12-07 16:16 millert
12046:
12047: * interfaces.c: close sock when we are done with it
12048:
12049: 1998-11-27 19:37 millert
12050:
12051: * parse.yacc: never say "error on line -1"
12052:
12053: 1998-11-23 23:38 millert
12054:
12055: * configure.in: check for -lnsl before -lsocket
12056:
12057: 1998-11-23 23:29 millert
12058:
12059: * configure.in: quote '[', ']' used in ranges correctly
12060:
12061: 1998-11-21 17:54 millert
12062:
12063: * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12064:
12065: 1998-11-20 18:33 millert
12066:
12067: * version.h: 1.5.7
12068:
12069: 1998-11-20 18:33 millert
12070:
12071: * INSTALL: more info for 1.5.7
12072:
12073: 1998-11-20 18:30 millert
12074:
12075: * README: update for 1.5.7
12076:
12077: 1998-11-20 14:26 millert
12078:
12079: * parse.yacc: make increases of cm_list_size and ga_list_size be
12080: similar to increases of stacksize (ie: >= not > in initial
12081: compare).
12082:
12083: 1998-11-20 14:22 millert
12084:
12085: * parse.yacc: when we get a syntax error, report it for the
12086: previous line since that's generally where the error occurred.
12087:
12088: 1998-11-18 15:31 millert
12089:
12090: * config.h.in, configure.in, interfaces.c: add back check for
12091: sys/sockio.h but only use it if SIOCGIFCONF is not defined
12092:
12093: 1998-11-18 15:25 millert
12094:
12095: * config.h.in: define BSD_COMP for svr4
12096:
12097: 1998-11-17 23:16 millert
12098:
12099: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12100: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12101: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12102: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12103: -Wall
12104:
12105: 1998-11-17 23:10 millert
12106:
12107: * configure.in: kill check for sockio,h
12108:
12109: 1998-11-17 23:10 millert
12110:
12111: * config.h.in: no more HAVE_SYS_SOCKIO_H
12112:
12113: 1998-11-17 22:51 millert
12114:
12115: * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12116: goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12117: parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12118: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12119: -Wall
12120:
12121: 1998-11-16 17:38 millert
12122:
12123: * sudo.c: add missing inform_user()
12124:
12125: 1998-11-13 19:21 millert
12126:
12127: * find_path.c: return NOT_FOUND if given fully qualified path and
12128: it does not exist previously it would perror(ENOENT) which
12129: bypasses the option to not leak path info
12130:
12131: 1998-11-13 19:20 millert
12132:
12133: * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12134: for kerb, check for -ldes
12135:
12136: 1998-11-13 14:19 millert
12137:
12138: * INSTALL: tty tickets are user:tty now
12139:
12140: 1998-11-13 14:10 millert
12141:
12142: * check.c: when using tty tickets make it user:tty not user.tty as
12143: a username could have a '.' in it
12144:
12145: 1998-11-09 19:15 millert
12146:
12147: * sudo.c: add "ignoring foo found in ." for auth successful case
12148:
12149: 1998-11-09 17:57 millert
12150:
12151: * sudo.c: add missing printf param
12152:
12153: 1998-11-08 15:56 millert
12154:
12155: * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12156: go back to printing "command not found" unless
12157: --disable-path-info specified. Also, tell user when we ignore
12158: '.' in their path and it would have been used but for
12159: --with-ignore-dot.
12160:
12161: 1998-11-08 13:51 millert
12162:
12163: * check.c, sudo.c: Only one space after a colon, not two, in
12164: printf's
12165:
12166: 1998-11-05 12:59 millert
12167:
12168: * sudo.pod: document setting $USER
12169:
12170: 1998-11-04 22:24 millert
12171:
12172: * check.c: fix bugs with prompt expansion
12173:
12174: 1998-11-04 21:21 millert
12175:
12176: * sudo.c: set $USER for root too
12177:
12178: 1998-11-04 17:13 millert
12179:
12180: * getspwuid.c: typo
12181:
12182: 1998-11-04 17:07 millert
12183:
12184: * configure.in: HP-UX's iscomsec is in -lsec, not libc
12185:
12186: 1998-11-03 22:24 millert
12187:
12188: * configure.in: remove some entries in the OS case statement that
12189: did nothing
12190:
12191: 1998-11-03 22:19 millert
12192:
12193: * TROUBLESHOOTING: add "cd" section and flush out syslog section
12194:
12195: 1998-11-03 20:51 millert
12196:
12197: * Makefile.in: no more sudo-lex.yy.c
12198:
12199: 1998-11-03 20:50 millert
12200:
12201: * check_sia.c: add custom prompt support
12202:
12203: 1998-11-03 20:40 millert
12204:
12205: * sudo.c: kill perror("malloc") since we already have a good error
12206: messages pw_ent -> pw for brevity set $USER if -u specified
12207:
12208: 1998-11-03 20:39 millert
12209:
12210: * parse.c: kill perror("malloc") since we already have a good error
12211: messages pw_ent -> pw for brevity when checking if %group
12212: matches, look up user in password file so that %groups works in a
12213: RunAs spec.
12214:
12215: 1998-11-03 20:39 millert
12216:
12217: * logging.c, parse.yacc: kill perror("malloc") since we already
12218: have a good error messages
12219:
12220: 1998-11-03 20:38 millert
12221:
12222: * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12223: perror("malloc") since we already have a good error messages
12224: pw_ent -> pw for brevity
12225:
12226: 1998-11-03 15:03 millert
12227:
12228: * tgetpass.c: the prompt is expanded before tgetpass is called
12229:
12230: 1998-11-03 15:03 millert
12231:
12232: * sudo.h: tgetpass now has the same args as getpass again
12233:
12234: 1998-11-03 15:02 millert
12235:
12236: * getspwuid.c: add iscomsec, issecure support
12237:
12238: 1998-11-03 15:02 millert
12239:
12240: * check.c: we now expand any %h or %u in the prompt before passing
12241: to tgetpass
12242:
12243: 1998-11-03 14:58 millert
12244:
12245: * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12246:
12247: 1998-11-03 14:56 millert
12248:
12249: * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12250:
12251: 1998-11-03 14:55 millert
12252:
12253: * configure.in: add check for iscomsec in HP-UX
12254:
12255: 1998-11-03 14:51 millert
12256:
12257: * configure.in: check for issecure if we have getpwanam on SunOS
12258: some options are incompatible with DUNIX SIA check for dispcrypt
12259: on DUNIX
12260:
12261: 1998-10-25 15:21 millert
12262:
12263: * config.h.in: add HAVE_DISPCRYPT
12264:
12265: 1998-10-25 15:21 millert
12266:
12267: * secureware.c: add back support for non-dispcrypt based checking
12268: for older DUNIX
12269:
12270: 1998-10-25 00:51 millert
12271:
12272: * INSTALL: sia changes
12273:
12274: 1998-10-25 00:48 millert
12275:
12276: * configure.in: SIA becomes the default on Digital UNIX now havbe
12277: --disable-sia to turn it off...
12278:
12279: 1998-10-24 23:52 millert
12280:
12281: * check.c: move local includes after system ones
12282:
12283: 1998-10-24 19:28 millert
12284:
12285: * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12286: INCORRECT_PASSWORD or an insult to stderr
12287:
12288: 1998-10-24 19:07 millert
12289:
12290: * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12291: password. Only the first iteration was working.
12292:
12293: 1998-10-21 21:00 millert
12294:
12295: * aclocal.m4: don't trust UID_MAX or MAXUID
12296:
12297: 1998-10-21 20:35 millert
12298:
12299: * configure.in: fix two pastos
12300:
12301: 1998-10-21 20:30 millert
12302:
12303: * configure.in: fix typo
12304:
12305: 1998-10-21 20:19 millert
12306:
12307: * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12308: legal to be negative in DUNX 5.0
12309:
12310: 1998-10-21 20:15 millert
12311:
12312: * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12313: -lm but check for -ldb since DUNX < 4.0 lacks it
12314:
12315: 1998-10-21 19:50 millert
12316:
12317: * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12318: secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12319: 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12320: exist).
12321:
12322: 1998-10-20 17:22 millert
12323:
12324: * INSTALL: updated --with-editor blurb
12325:
12326: 1998-10-20 17:21 millert
12327:
12328: * TROUBLESHOOTING: tell how to put sudoers in a different dir
12329:
12330: 1998-10-20 16:22 millert
12331:
12332: * configure.in: add missing quotes around $with_editor
12333:
12334: 1998-10-20 14:00 millert
12335:
12336: * configure.in: typo in --with-editor bits
12337:
12338: 1998-10-20 01:24 millert
12339:
12340: * INSTALL: I don't expect it to work on Solaris
12341:
12342: 1998-10-20 01:24 millert
12343:
12344: * check.c: add back security/pam_misc.h
12345:
12346: 1998-10-19 17:13 millert
12347:
12348: * INSTALL: remove dunix note since configure checks for this now
12349:
12350: 1998-10-19 16:30 millert
12351:
12352: * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12353: bad)
12354:
12355: 1998-10-19 14:32 millert
12356:
12357: * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12358: dispcrypt(3)
12359:
12360: 1998-10-19 14:32 millert
12361:
12362: * config.h.in: add HAVE_INITPRIVS
12363:
12364: 1998-10-19 14:31 millert
12365:
12366: * sudo.c: call initprivs() if we have it for getprpwuid later on
12367:
12368: 1998-10-19 14:30 millert
12369:
12370: * Makefile.in: clean pathnames.h too
12371:
12372: 1998-10-19 14:28 millert
12373:
12374: * configure.in: quote "Sorry, try again." with [] since it has a
12375: comma in it set LIBS when we add stuff to SUDO_LIBS set
12376: SECUREWARE when we find getprpwuid() so we can check for
12377: bigcrypt, set_auth_parameters, and initprivs later.
12378:
12379: 1998-10-19 13:48 millert
12380:
12381: * INSTALL: update Digital UNIX note about acl.h
12382:
12383: 1998-10-18 20:26 millert
12384:
12385: * INSTALL: add --with-sia --without-root-sudo ->
12386: --disable-root-sudo some reordering
12387:
12388: 1998-10-18 20:22 millert
12389:
12390: * secureware.c: add whitespace
12391:
12392: 1998-10-18 20:22 millert
12393:
12394: * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12395: sudo.h: add SIA support
12396:
12397: 1998-10-18 20:21 millert
12398:
12399: * check_sia.c: Initial revision
12400:
12401: 1998-10-18 19:42 millert
12402:
12403: * configure.in: when checking for -lsocket, -lnsl, and -linet,
12404: check for the specific functions we need from them.
12405:
12406: 1998-10-18 19:10 millert
12407:
12408: * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12409:
12410: 1998-10-18 18:15 millert
12411:
12412: * sudo.h, Makefile.in: added check_secureware
12413:
12414: 1998-10-18 18:12 millert
12415:
12416: * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12417: bits
12418:
12419: 1998-10-18 18:00 millert
12420:
12421: * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12422: other sets defined. configure now does that for us
12423:
12424: 1998-10-18 17:45 millert
12425:
12426: * configure.in: move some --with options around change a bunch of
12427: echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12428:
12429: 1998-10-18 01:09 millert
12430:
12431: * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12432: that caused a syntax error add some echo verbage
12433:
12434: 1998-10-17 18:08 millert
12435:
12436: * check.c: moved SecureWare stuff into secureware.c
12437:
12438: 1998-10-17 18:07 millert
12439:
12440: * secureware.c: Initial revision
12441:
12442: 1998-10-17 17:02 millert
12443:
12444: * INSTALL: update url to solaris gcc bins
12445:
12446: 1998-10-17 16:39 millert
12447:
12448: * INSTALL: change option formatter and flesh out someentries
12449:
12450: 1998-10-17 16:18 millert
12451:
12452: * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12453: environment variable
12454:
12455: 1998-10-17 16:01 millert
12456:
12457: * BUGS: everything is now done via configure
12458:
12459: 1998-10-17 16:00 millert
12460:
12461: * README: prev rev was 1.5.6
12462:
12463: 1998-10-17 00:33 millert
12464:
12465: * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12466: correctly
12467:
12468: 1998-10-17 00:32 millert
12469:
12470: * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12471: the Makefile
12472:
12473: 1998-10-17 00:31 millert
12474:
12475: * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12476: sudoers_gid, sudoers_mode from configure
12477:
12478: 1998-10-17 00:30 millert
12479:
12480: * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12481: substituted into the Makefile, not config.h
12482:
12483: 1998-10-17 00:30 millert
12484:
12485: * INSTALL: document all --with/--enable options
12486:
12487: 1998-10-15 02:25 millert
12488:
12489: * insults.h: options.h is no more
12490:
12491: 1998-10-15 02:25 millert
12492:
12493: * config.h.in: assimilated options.h
12494:
12495: 1998-10-15 02:24 millert
12496:
12497: * configure.in: moved options from options.h to configure
12498:
12499: 1998-10-15 01:41 millert
12500:
12501: * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12502: logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12503: sudo_setenv.c, visudo.c: no more options.h
12504:
12505: 1998-10-15 01:39 millert
12506:
12507: * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12508: to options.h
12509:
12510: 1998-10-15 01:32 millert
12511:
12512: * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12513:
12514: 1998-10-15 00:10 millert
12515:
12516: * tgetpass.c: if select return < -1 still prompt for pw
12517:
12518: 1998-10-15 00:03 millert
12519:
12520: * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12521: IGNORE_DOT_PATH into configure options
12522:
12523: 1998-10-14 23:57 millert
12524:
12525: * parse.c: FAST_MATCH is no longer an optino
12526:
12527: 1998-10-14 23:52 millert
12528:
12529: * check.c: remove_timestamp() if timestamp is preposterous
12530:
12531: 1998-10-14 23:36 millert
12532:
12533: * options.h: convert more options to --with/--enable
12534:
12535: 1998-10-14 23:36 millert
12536:
12537: * INSTALL, aclocal.m4: logfile -> logpath
12538:
12539: 1998-10-14 23:31 millert
12540:
12541: * configure.in: convert more options into --with and --enable
12542:
12543: 1998-10-14 23:28 millert
12544:
12545: * tgetpass.c: catch EINTR in select and restart
12546:
12547: 1998-10-14 23:15 millert
12548:
12549: * logging.c: sys/errno -> errno
12550:
12551: 1998-09-24 11:40 millert
12552:
12553: * sudo.c: UMASK -> SUDO_UMASK.
12554:
12555: 1998-09-24 11:36 millert
12556:
12557: * check.c, logging.c: time.h, not sys/time.h
12558:
12559: 1998-09-21 19:52 millert
12560:
12561: * logging.c: MAILER -> _PATH_SENDMAIL
12562:
12563: 1998-09-21 00:06 millert
12564:
12565: * INSTALL, configure.in: no more --with-C2, now it is
12566: --disable-shadow
12567:
12568: 1998-09-21 00:00 millert
12569:
12570: * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12571: getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12572: Always include shadow support if the platform supports it and the
12573: user did not disable it via configure
12574:
12575: 1998-09-20 19:48 millert
12576:
12577: * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12578:
12579: 1998-09-20 19:16 millert
12580:
12581: * Makefile.in: pathnames.h -> pathnames.h.in
12582:
12583: 1998-09-20 19:14 millert
12584:
12585: * check.c: fix version string
12586:
12587: 1998-09-20 19:12 millert
12588:
12589: * check.c: move pam_conv to be static to auth function remove
12590: pam_misc.h (solaris doesn't have one)
12591:
12592: 1998-09-20 19:10 millert
12593:
12594: * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12595: SUDO_PROG_PWD
12596:
12597: 1998-09-20 19:10 millert
12598:
12599: * configure.in: munge pathnames.h.in -> pathnames.h kill
12600: SUDO_PROG_PWD
12601:
12602: 1998-09-20 19:10 millert
12603:
12604: * pathnames.h.in: convert to pathnames.h.in
12605:
12606: 1998-09-18 20:20 millert
12607:
12608: * configure.in: fix typo in sysv4 matching case /.
12609:
12610: 1998-09-18 01:29 millert
12611:
12612: * check.c: pam stuff needs to run as root, not user, for shadow
12613: passwords
12614:
12615: 1998-09-17 12:26 millert
12616:
12617: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12618: dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12619: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12620: logging.c, options.h, parse.c, parse.lex, parse.yacc,
12621: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12622: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12623: BUGS, INSTALL, README, configure.in: updated version
12624:
12625: 1998-09-17 12:13 millert
12626:
12627: * check.c: user version.h for long message
12628:
12629: 1998-09-17 11:53 millert
12630:
12631: * check.c: this is version 1.5.6
12632:
12633: 1998-09-16 13:42 millert
12634:
12635: * Makefile.in: remove errant backslash
12636:
12637: 1998-09-14 22:25 millert
12638:
12639: * options.h, parse.yacc, pathnames.h.in: fix version string
12640:
12641: 1998-09-14 22:02 millert
12642:
12643: * BUGS, CHANGES, TODO: updtaed for 1.5.6
12644:
12645: 1998-09-14 22:02 millert
12646:
12647: * RUNSON: updated for 1.5.6
12648:
12649: 1998-09-14 11:48 millert
12650:
12651: * interfaces.c: kill unused localhost_mask var copy if name to
12652: ifr_tmp after we zero it
12653:
12654: 1998-09-13 15:50 millert
12655:
12656: * INSTALL: Better description of new vs. old sudoers modes fix some
12657: typos better description of /usr/ucb/cc gotchas on slowaris
12658:
12659: 1998-09-13 15:49 millert
12660:
12661: * Makefile.in: add sample.pam
12662:
12663: 1998-09-13 15:32 millert
12664:
12665: * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12666:
12667: 1998-09-12 11:10 millert
12668:
12669: * README: mention TROUBLESHOOTING more fix some typos
12670:
12671: 1998-09-11 20:30 millert
12672:
12673: * configure.in: move --enable/--disable to be after --with
12674:
12675: 1998-09-11 20:30 millert
12676:
12677: * INSTALL: document --enable/--disable
12678:
12679: 1998-09-11 20:26 millert
12680:
12681: * INSTALL: document --with-pam
12682:
12683: 1998-09-11 19:47 millert
12684:
12685: * configure.in: Add message for pam users
12686:
12687: 1998-09-11 19:27 millert
12688:
12689: * sample.pam: Initial revision
12690:
12691: 1998-09-11 19:23 millert
12692:
12693: * config.h.in: fix HAVE_PAM
12694:
12695: 1998-09-11 19:19 millert
12696:
12697: * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12698: <GCalvin@kenwoodusa.com>
12699:
12700: 1998-09-10 18:51 millert
12701:
12702: * config.h.in: add HOST_IN_LOG and WRAP_LOG
12703:
12704: 1998-09-10 18:51 millert
12705:
12706: * logging.c: add WRAP_LOG and HOST_IN_LOG
12707:
12708: 1998-09-10 18:37 millert
12709:
12710: * configure.in: add --enable-log-host and --enable-log-wrap
12711:
12712: 1998-09-10 18:32 millert
12713:
12714: * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12715: --with-timedir
12716:
12717: 1998-09-08 20:45 millert
12718:
12719: * compat.h: add howmany macro
12720:
12721: 1998-09-08 20:43 millert
12722:
12723: * tgetpass.c: include sys/param.h to get howmany macro
12724:
12725: 1998-09-07 20:42 millert
12726:
12727: * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12728: add RUNAS_DEFAULT
12729:
12730: 1998-09-07 12:51 millert
12731:
12732: * fnmatch.c: bring in stdio.h for NULL
12733:
12734: 1998-09-07 12:50 millert
12735:
12736: * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12737:
12738: 1998-09-07 12:43 millert
12739:
12740: * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12741:
12742: 1998-09-07 12:42 millert
12743:
12744: * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12745:
12746: 1998-09-07 12:41 millert
12747:
12748: * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12749: if secureware
12750:
12751: 1998-09-07 12:39 millert
12752:
12753: * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12754:
12755: 1998-09-07 12:06 millert
12756:
12757: * interfaces.c: initialize previfname
12758:
12759: 1998-09-07 11:51 millert
12760:
12761: * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12762: SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12763: IFF_LOOPBACK instead of kludging it
12764:
12765: 1998-09-07 11:49 millert
12766:
12767: * configure.in: typo
12768:
12769: 1998-09-07 00:01 millert
12770:
12771: * Makefile.in: don't need special build line for sudo.tab.o
12772:
12773: 1998-09-06 23:58 millert
12774:
12775: * Makefile.in: don't clean sudo.tab.[ch]
12776:
12777: 1998-09-06 23:48 millert
12778:
12779: * sudo.c: Sudo should prompt for a password before telling the user
12780: that a command could not be found.
12781:
12782: 1998-09-06 23:47 millert
12783:
12784: * BUGS: for 1.5.6
12785:
12786: 1998-09-06 23:25 millert
12787:
12788: * INSTALL, README: no longer require yacc
12789:
12790: 1998-09-06 23:19 millert
12791:
12792: * Makefile.in: typo
12793:
12794: 1998-09-06 23:18 millert
12795:
12796: * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12797:
12798: 1998-09-06 23:09 millert
12799:
12800: * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12801: command args if you get a '='
12802:
12803: 1998-09-06 22:59 millert
12804:
12805: * insults.h: fix version ,
12806:
12807: 1998-09-06 22:57 millert
12808:
12809: * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12810: fix version
12811:
12812: 1998-09-06 22:55 millert
12813:
12814: * getcwd.c: getcwd(3) from OpenBSD for those without it.
12815:
12816: 1998-09-06 22:51 millert
12817:
12818: * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12819:
12820: 1998-09-06 22:49 millert
12821:
12822: * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12823: a pipe to getpwd!
12824:
12825: 1998-09-06 22:41 millert
12826:
12827: * parse.c: use NAMLEN() macro
12828:
12829: 1998-09-06 22:34 millert
12830:
12831: * fnmatch.c: remove duplicate include of string.h
12832:
12833: 1998-09-06 22:28 millert
12834:
12835: * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12836:
12837: 1998-09-06 22:28 millert
12838:
12839: * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12840:
12841: 1998-09-06 22:28 millert
12842:
12843: * config.h.in: add dev_t and ino_t
12844:
12845: 1998-07-28 12:44 millert
12846:
12847: * check.c: fix OTP_ONLY for opie
12848:
12849: 1998-06-24 12:22 millert
12850:
12851: * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12852:
12853: 1998-05-19 00:10 millert
12854:
12855: * Makefile.in: make update_version saner
12856:
12857: 1998-05-18 23:32 millert
12858:
12859: * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12860:
12861: 1998-05-18 23:32 millert
12862:
12863: * configure.in: check for waitpid and wait3 or no waitpid
12864:
12865: 1998-05-18 23:31 millert
12866:
12867: * logging.c: used waitpid or wait3 if we have 'em
12868:
12869: 1998-05-02 14:16 millert
12870:
12871: * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12872: Faigon)
12873:
12874: 1998-04-27 20:09 millert
12875:
12876: * configure.in: don't need to explicately mention -lsocket -lnsl
12877: for sequent
12878:
12879: 1998-04-25 01:56 millert
12880:
12881: * configure.in: dynix should not link with -linet
12882:
12883: 1998-04-10 15:32 millert
12884:
12885: * INSTALL: mention that HP-UX doesn't ship with yacc
12886:
12887: 1998-04-06 22:35 millert
12888:
12889: * check.c: ignore kerberos if we can't get the local realm
12890:
12891: 1998-04-05 23:37 millert
12892:
12893: * configure.in, BUGS, INSTALL, README: ++version
12894:
12895: 1998-04-05 23:36 millert
12896:
12897: * version.h: ++
12898:
12899: 1998-04-05 23:35 millert
12900:
12901: * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12902: find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12903: logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12904: sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12905: visudo.c: updated version
12906:
12907: 1998-04-05 23:34 millert
12908:
12909: * check.c, sudo.h: fix version
12910:
12911: 1998-04-05 23:33 millert
12912:
12913: * getcwd.c: don't use popen/pclose. Do it inline.
12914:
12915: 1998-04-05 23:25 millert
12916:
12917: * lsearch.c: add rcsid
12918:
12919: 1998-04-05 23:21 millert
12920:
12921: * sudo.c: typo
12922:
12923: 1998-04-05 23:17 millert
12924:
12925: * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12926: insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12927: check.c: updated version
12928:
12929: 1998-04-05 23:15 millert
12930:
12931: * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12932: MAX*
12933:
12934: 1998-04-05 23:14 millert
12935:
12936: * Makefile.in: getwd.c -> getcwd.c
12937:
12938: 1998-04-05 22:49 millert
12939:
12940: * config.h.in: kill HAVE_GETWD
12941:
12942: 1998-04-05 22:49 millert
12943:
12944: * configure.in: getcwd, not getwd
12945:
12946: 1998-04-05 22:48 millert
12947:
12948: * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12949: defeats the purpose
12950:
12951: 1998-03-31 00:15 millert
12952:
12953: * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12954:
12955: 1998-03-31 00:05 millert
12956:
12957: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12958: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12959: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12960: interfaces.c, logging.c, options.h, parse.c, parse.lex,
12961: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12962: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12963: updated version
12964:
12965: 1998-03-30 23:54 millert
12966:
12967: * configure.in: support *-ccur-sysv4 and fix two typos
12968:
12969: 1998-03-27 19:52 millert
12970:
12971: * configure.in: don't echo about with_logfile and with_timedir
12972:
12973: 1998-03-27 19:49 millert
12974:
12975: * INSTALL: document --with-logfile and --with-timedir
12976:
12977: 1998-03-27 19:46 millert
12978:
12979: * aclocal.m4: support --with-logfile and --with-timedir
12980:
12981: 1998-03-27 19:46 millert
12982:
12983: * configure.in: Add --with-logfile and --with-timedir
12984:
12985: 1998-03-27 19:27 millert
12986:
12987: * sudo.c: change size computation of NewArgv for UNICOS
12988:
12989: 1998-02-18 20:10 millert
12990:
12991: * configure.in: treate -*-sysv4* like *-*-svr4
12992:
12993: 1998-02-18 18:19 millert
12994:
12995: * configure.in: fix spacing for --with-authenticate help
12996:
12997: 1998-02-18 16:39 millert
12998:
12999: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13000: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13001: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13002: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13003: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13004: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13005: updated version
13006:
13007: 1998-02-18 16:23 millert
13008:
13009: * parse.yacc: fix off by one error in push macro
13010:
13011: 1998-02-17 01:15 millert
13012:
13013: * configure.in: removed bogus alloca hack
13014:
13015: 1998-02-17 01:15 millert
13016:
13017: * check.c: added AIX 4.x authenticate() support
13018:
13019: 1998-02-17 01:11 millert
13020:
13021: * parse.yacc: include alloca.h if using bison and not gcc and it
13022: exists. fixes an alloca problem on hpux 10.x
13023:
13024: 1998-02-17 00:39 millert
13025:
13026: * INSTALL: mention --with-authenticate
13027:
13028: 1998-02-17 00:37 millert
13029:
13030: * configure.in: added AIX authenticate() support
13031:
13032: 1998-02-17 00:22 millert
13033:
13034: * config.h.in: add HAVE_AUTHENTICATE
13035:
13036: 1998-02-16 23:58 millert
13037:
13038: * interfaces.c: dynamically size ifconf buffer
13039:
13040: 1998-02-16 23:56 millert
13041:
13042: * configure.in: quote '[' and ']'
13043:
13044: 1998-02-16 21:42 millert
13045:
13046: * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13047: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13048: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13049: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13050: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13051: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13052: updated version
13053:
13054: 1998-02-16 19:06 millert
13055:
13056: * visudo.pod: add ERRORS section
13057:
13058: 1998-02-16 18:57 millert
13059:
13060: * TROUBLESHOOTING: add busy stmp file explanation
13061:
13062: 1998-02-15 18:49 millert
13063:
13064: * configure.in: the name of the cached var that signals whether or
13065: not you are cross compiling changed. It is now
13066: ac_cv_prog_cc_cross
13067:
13068: 1998-02-11 16:26 millert
13069:
13070: * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13071:
13072: 1998-02-06 21:55 millert
13073:
13074: * sample.sudoers, sudoers.pod: better example of su but not root su
13075:
13076: 1998-02-06 15:49 millert
13077:
13078: * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13079: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13080: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13081: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13082: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13083: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13084: updated version
13085:
13086: 1998-02-06 15:48 millert
13087:
13088: * Makefile.in: correct regexp for updating version
13089:
13090: 1998-02-06 14:05 millert
13091:
13092: * tgetpass.c: remove bogus flush of stderr spew prompt before
13093: turning off echo. Seems to fix a weird problem where if sudo
13094: complained about a bogus stamp file the user would sometimes not
13095: have a chance to enter a password
13096:
13097: 1998-02-06 14:05 millert
13098:
13099: * check.c: fix bogus flush of stderr
13100:
13101: 1998-02-05 19:19 millert
13102:
13103: * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13104:
13105: 1998-02-05 19:18 millert
13106:
13107: * configure.in: support hpux1[0-9] not just hpux10
13108:
13109: 1998-01-30 14:59 millert
13110:
13111: * parse.c: set sudoers_fp to nil after closing
13112:
13113: 1998-01-24 01:05 millert
13114:
13115: * config.guess, config.sub: updated from autoconf 2.12
13116:
13117: 1998-01-24 00:50 millert
13118:
13119: * configure.in: add *-*-svr4 rule
13120:
13121: 1998-01-22 22:53 millert
13122:
13123: * tgetpass.c: fix select usage for high fd's (dynamically allocate
13124: readfds)
13125:
13126: 1998-01-22 22:49 millert
13127:
13128: * check.c: kill extra whitespace
13129:
13130: 1998-01-22 19:28 millert
13131:
13132: * sudo.c: do an initgroups() before running a command, unless the
13133: target user is root.
13134:
13135: 1998-01-22 12:22 millert
13136:
13137: * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13138: syslog.conf
13139:
13140: 1998-01-21 01:56 millert
13141:
13142: * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13143: emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13144: version
13145:
13146: 1998-01-21 01:32 millert
13147:
13148: * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13149: updated version
13150:
13151: 1998-01-21 01:29 millert
13152:
13153: * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13154: ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13155: check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13156: updated version
13157:
13158: 1998-01-21 01:20 millert
13159:
13160: * Makefile.in: more tweaks to update_version
13161:
13162: 1998-01-21 01:19 millert
13163:
13164: * Makefile.in: fixed up update_version rule
13165:
13166: 1998-01-21 00:55 millert
13167:
13168: * configure.in: ++version
13169:
13170: 1998-01-21 00:53 millert
13171:
13172: * Makefile.in: removed supe of check.c
13173:
13174: 1998-01-21 00:51 millert
13175:
13176: * INSTALL: ++version I missed
13177:
13178: 1998-01-21 00:51 millert
13179:
13180: * RUNSON: updated
13181:
13182: 1998-01-21 00:48 millert
13183:
13184: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13185: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13186: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13187: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13188: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13189: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13190: visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13191:
13192: 1998-01-21 00:47 millert
13193:
13194: * CHANGES: updated for 1.5.5
13195:
13196: 1998-01-21 00:35 millert
13197:
13198: * Makefile.in: add rules to update version stuff in files so I
13199: don't need to do it by hand
13200:
13201: 1998-01-21 00:04 millert
13202:
13203: * sudo.h: sudoers_fp is now extern
13204:
13205: 1998-01-21 00:03 millert
13206:
13207: * sudo.c: in check_sudoers, cache the sudoers file handle in
13208: sudoers_fp so we don't have to open it again in the parse. This
13209: may help with weird solaris problems where EAGAIN sometime
13210: occurrs.
13211:
13212: 1998-01-21 00:02 millert
13213:
13214: * parse.c: sudoers file open is now done only in check_sudoers() so
13215: we just do a rewind() instead of an open. May help people on
13216: solaris who were getting EAGAIN.
13217:
13218: 1998-01-16 11:43 millert
13219:
13220: * INSTALL: mention that newer glibc is fixed
13221:
13222: 1998-01-13 12:58 millert
13223:
13224: * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13225: so ignore _RLD* instead of _RLD_*
13226:
13227: 1998-01-13 10:32 millert
13228:
13229: * parse.c: typo
13230:
13231: 1998-01-13 10:19 millert
13232:
13233: * parse.c: fix that bug for real
13234:
13235: 1998-01-13 02:39 millert
13236:
13237: * INSTALL: document Linux's libc6 brokenness.
13238:
13239: 1998-01-13 02:00 millert
13240:
13241: * parse.yacc: -Wall
13242:
13243: 1998-01-13 01:22 millert
13244:
13245: * RUNSON: updated
13246:
13247: 1998-01-13 00:50 millert
13248:
13249: * TROUBLESHOOTING: remind people to HUP syslogd
13250:
13251: 1998-01-13 00:05 millert
13252:
13253: * Makefile.in: add -O flag to tar
13254:
13255: 1998-01-13 00:00 millert
13256:
13257: * TODO, RUNSON: updated
13258:
13259: 1998-01-12 23:59 millert
13260:
13261: * sudo.pod: remove author's email addr. people should mail
13262: sudo-bugs
13263:
13264: 1998-01-12 23:49 millert
13265:
13266: * INSTALL: fix version
13267:
13268: 1998-01-12 23:48 millert
13269:
13270: * README, check.c, compat.h, config.h.in, configure.in,
13271: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13272: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13273: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13274: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13275: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13276: visudo.c: ++version
13277:
13278: 1998-01-12 23:44 millert
13279:
13280: * RUNSON: updated
13281:
13282: 1998-01-12 23:42 millert
13283:
13284: * INSTALL, Makefile.in: ++version
13285:
13286: 1998-01-12 23:41 millert
13287:
13288: * CHANGES: updated fort 1.5.4
13289:
13290: 1998-01-12 23:41 millert
13291:
13292: * check.c: exit(1) if user enters no passwd
13293:
13294: 1998-01-12 23:37 millert
13295:
13296: * BUGS: ++version
13297:
13298: 1998-01-12 23:10 millert
13299:
13300: * parse.c: commands can start with ./* not just /* -- fixes a
13301: serious security hole.
13302:
13303: 1997-12-21 18:17 millert
13304:
13305: * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13306: leave it as "unknown".
13307:
13308: 1997-11-23 13:29 millert
13309:
13310: * sample.sudoers: fix usage of (username) in conjunction with , and
13311: !
13312:
13313: 1997-11-23 13:28 millert
13314:
13315: * visudo.c: catch the case where the user is not in the passwd file
13316:
13317: 1997-11-23 13:24 millert
13318:
13319: * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13320: the nfds arg to select(2)
13321:
13322: 1997-11-23 01:53 millert
13323:
13324: * sudo.c: define tty global to an initial value to avoid dumping
13325: core in logging functions when passwd file is unavailable.
13326:
13327: 1997-11-23 01:51 millert
13328:
13329: * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13330: gotten the passwd entry
13331:
13332: 1997-11-23 00:21 millert
13333:
13334: * sudo.pod: talk about problem of ALL
13335:
13336: 1997-10-10 00:54 millert
13337:
13338: * README: new web location
13339:
13340: 1997-10-10 00:54 millert
13341:
13342: * INSTALL: fdesc bug is fixed in Open/Net BSD
13343:
13344: 1997-10-10 00:52 millert
13345:
13346: * HISTORY: updates from Nieusma
13347:
13348: 1997-10-09 18:37 millert
13349:
13350: * dce_pwent.c: move compat.h after the system includes
13351:
13352: 1997-08-06 14:58 millert
13353:
13354: * logging.c: save errno from being clobbered by wait(). From Theo
13355:
13356: 1997-05-21 11:57 millert
13357:
13358: * compat.h: fix an occurence of setresuid -> setreuid (typo)
13359:
13360: 1997-03-19 17:45 millert
13361:
13362: * install-sh: check for path to strip
13363:
13364: 1997-01-15 19:05 millert
13365:
13366: * logging.c: deal with maxfilelen < 0 case
13367:
13368: 1997-01-15 19:05 millert
13369:
13370: * OPTIONS: fixed descriptin
13371:
13372: 1996-12-11 23:10 millert
13373:
13374: * sudo.c: correct error message if mode/owner wrong and not
13375: statable by owner but is statable by root.
13376:
13377: 1996-11-23 02:18 millert
13378:
13379: * config.guess, config.sub: autoconf 2.11
13380:
13381: 1996-11-16 14:42 millert
13382:
13383: * CHANGES, RUNSON, TODO: sudo 1.5.3.
13384:
13385: 1996-11-14 15:08 millert
13386:
13387: * sudo.h, parse.yacc: command_alias -> generic_alias
13388:
13389: 1996-11-13 22:50 millert
13390:
13391: * sample.sudoers: added Runas_Alias example and fixed syntax errors
13392:
13393: 1996-11-13 22:50 millert
13394:
13395: * OPTIONS, options.h: updated MAILSUBJECT
13396:
13397: 1996-11-13 22:49 millert
13398:
13399: * logging.c: added %h expansion
13400:
13401: 1996-11-13 21:37 millert
13402:
13403: * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13404: find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13405: ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13406: logging.c, options.h, parse.c, parse.lex, parse.yacc,
13407: pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13408: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13409: visudo.c, INSTALL, README, configure.in: ++version
13410:
13411: 1996-11-13 20:01 millert
13412:
13413: * emul/utime.h, BUGS: ++version
13414:
13415: 1996-11-13 19:45 millert
13416:
13417: * sudoers.pod: document Runas_Alias
13418:
13419: 1996-11-13 19:22 millert
13420:
13421: * visudo.pod: q (uid) -> Q
13422:
13423: 1996-11-13 19:21 millert
13424:
13425: * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13426: drop into whatnow
13427:
13428: 1996-11-13 19:05 millert
13429:
13430: * parse.yacc: add size params to sprintf
13431:
13432: 1996-11-13 19:04 millert
13433:
13434: * parse.lex: allow trailing space after '\\' but before '\n'
13435:
13436: 1996-11-13 19:04 millert
13437:
13438: * find_path.c: off by one error in path size check
13439:
13440: 1996-11-13 19:03 millert
13441:
13442: * check.c: sprintf paranoia
13443:
13444: 1996-11-12 11:59 millert
13445:
13446: * parse.yacc: fixed more_aliases
13447:
13448: 1996-11-12 11:58 millert
13449:
13450: * visudo.c: now warns if killed by signal ./
13451:
13452: 1996-11-11 10:49 millert
13453:
13454: * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13455: expanded (but it is gross)
13456:
13457: 1996-11-10 20:32 millert
13458:
13459: * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13460: 0400
13461:
13462: 1996-11-10 20:08 millert
13463:
13464: * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13465: USER_ALIAS)
13466:
13467: 1996-11-10 20:02 millert
13468:
13469: * parse.lex: Add Runas_Alias and simplify a rule.
13470:
13471: 1996-11-10 19:15 millert
13472:
13473: * parse.yacc: always store User_Alias's since they can be used
13474: inside of a runas list. Sigh. Really need a Runas_Alias
13475: instead.
13476:
13477: 1996-10-30 18:04 millert
13478:
13479: * visudo.c: deal with case where there is no sudoers file
13480:
13481: 1996-10-11 23:01 millert
13482:
13483: * TROUBLESHOOTING: added one
13484:
13485: 1996-10-10 22:11 millert
13486:
13487: * HISTORY, testsudoers.c: developement -> development
13488:
13489: 1996-10-10 22:08 millert
13490:
13491: * INSTALL: added a note
13492:
13493: 1996-10-10 20:36 millert
13494:
13495: * RUNSON: for 1.5.2
13496:
13497: 1996-10-10 20:36 millert
13498:
13499: * CHANGES: updated
13500:
13501: 1996-10-10 00:56 millert
13502:
13503: * PORTING: removed seteuid() notes
13504:
13505: 1996-10-09 13:37 millert
13506:
13507: * compat.h: better seteuid() emulatino
13508:
13509: 1996-10-09 13:36 millert
13510:
13511: * configure.in: added check for seteuid
13512:
13513: 1996-10-09 13:36 millert
13514:
13515: * config.h.in: added HAVE_SETEUID
13516:
13517: 1996-10-08 19:22 millert
13518:
13519: * configure.in: first stab at sequent support
13520:
13521: 1996-10-08 19:21 millert
13522:
13523: * config.h.in: added HAVE_SYS_SELECT_H
13524:
13525: 1996-10-08 19:21 millert
13526:
13527: * compat.h: sequent -> _SEQUENT_
13528:
13529: 1996-10-08 19:11 millert
13530:
13531: * compat.h: added seteuid() macro for DYNIX
13532:
13533: 1996-10-08 18:54 millert
13534:
13535: * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13536:
13537: 1996-10-07 01:05 millert
13538:
13539: * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13540: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13541: ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13542: pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13543: README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13544: putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13545: visudo.c, tgetpass.c: ++version
13546:
13547: 1996-10-07 00:59 millert
13548:
13549: * sudo.pod: added -H and SUDO_PS1
13550:
13551: 1996-10-07 00:55 millert
13552:
13553: * configure.in: use SUDO_FUNC_FNMATCH
13554:
13555: 1996-10-07 00:54 millert
13556:
13557: * aclocal.m4: added SUDO_FUNC_FNMATCH
13558:
13559: 1996-10-07 00:53 millert
13560:
13561: * sudo.c: added -H flag
13562:
13563: 1996-10-07 00:53 millert
13564:
13565: * sudo.h: added MODE_RESET_HOME /
13566:
13567: 1996-10-05 00:00 millert
13568:
13569: * INSTALL: mention OPIE
13570:
13571: 1996-10-04 23:59 millert
13572:
13573: * configure.in: added opie support
13574:
13575: 1996-10-04 23:59 millert
13576:
13577: * check.c: added HAVE_OPIE and changed to *_OTP_*
13578:
13579: 1996-10-04 23:58 millert
13580:
13581: * compat.h, config.h.in: added HAVE_OPIE
13582:
13583: 1996-10-04 23:58 millert
13584:
13585: * OPTIONS, options.h: SKEY -> OTP
13586:
13587: 1996-10-03 23:27 millert
13588:
13589: * check.c: moved fclose() in skey stuff.
13590:
13591: 1996-10-03 19:53 millert
13592:
13593: * putenv.c: index -> strchr remove unnecesary stuff
13594:
13595: 1996-10-03 19:43 millert
13596:
13597: * check.c: now call skeychallenge() to get challenge instead of
13598: making one up ourselves. this way, we get extra goodies in the
13599: prompt.
13600:
13601: 1996-09-10 00:32 millert
13602:
13603: * CHANGES: added one
13604:
13605: 1996-09-10 00:18 millert
13606:
13607: * parse.lex: allow logins to start with a number (YUCK!)
13608:
13609: 1996-09-08 15:18 millert
13610:
13611: * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13612:
13613: 1996-09-08 15:15 millert
13614:
13615: * configure.in: DUNIX doesn't need -lnsl
13616:
13617: 1996-09-07 20:22 millert
13618:
13619: * CHANGES: [no log message]
13620:
13621: 1996-09-07 20:21 millert
13622:
13623: * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13624: getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13625: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13626: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13627: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13628: tgetpass.c, utime.c, version.h, visudo.c: courtesan
13629:
13630: 1996-09-07 20:13 millert
13631:
13632: * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13633: courtesan
13634:
13635: 1996-09-07 20:12 millert
13636:
13637: * visudo.pod: [no log message]
13638:
13639: 1996-09-07 20:00 millert
13640:
13641: * sudo.pod, visudo.pod: courtesan
13642:
13643: 1996-09-07 19:45 millert
13644:
13645: * HISTORY: added courtesan ./
13646:
13647: 1996-09-06 00:12 millert
13648:
13649: * sudo.c: added $SUDO_PROMPT support
13650:
13651: 1996-09-04 17:19 millert
13652:
13653: * check.c: print long skey challemged to stderr, not stdout
13654:
13655: 1996-08-31 23:10 millert
13656:
13657: * CHANGES: updated for 1.5.1
13658:
13659: 1996-08-31 23:07 millert
13660:
13661: * emul/utime.h: ++version
13662:
13663: 1996-08-31 12:34 millert
13664:
13665: * RUNSON: updated for 1.5.1
13666:
13667: 1996-08-30 10:49 millert
13668:
13669: * check.c: use shost, not host for tgetpass
13670:
13671: 1996-08-30 00:21 millert
13672:
13673: * OPTIONS, sudo.pod: documented %u and %h
13674:
13675: 1996-08-29 20:40 millert
13676:
13677: * configure.in: fixed typo
13678:
13679: 1996-08-29 20:37 millert
13680:
13681: * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13682: dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13683: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13684: interfaces.c, logging.c, options.h, parse.c, parse.lex,
13685: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13686: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13687: visudo.c: ++version
13688:
13689: 1996-08-29 20:30 millert
13690:
13691: * BUGS: ++version
13692:
13693: 1996-08-29 18:32 millert
13694:
13695: * configure.in, Makefile.in, version.h: ++version
13696:
13697: 1996-08-29 17:58 millert
13698:
13699: * sudo.h: new tgetpass() params
13700:
13701: 1996-08-29 17:58 millert
13702:
13703: * check.c: pass use and host to tgetpass
13704:
13705: 1996-08-29 17:57 millert
13706:
13707: * tgetpass.c: added %u and %h escapes
13708:
13709: 1996-08-29 16:56 millert
13710:
13711: * OPTIONS, options.h, check.c: added NO_MESSAGE
13712:
13713: 1996-08-29 16:23 millert
13714:
13715: * configure.in: added cray (unicos) support
13716:
13717: 1996-08-27 11:36 millert
13718:
13719: * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13720:
13721: 1996-08-25 17:56 millert
13722:
13723: * INSTALL: added note about "make install"
13724:
13725: 1996-08-25 17:50 millert
13726:
13727: * parse.yacc: changed length/size params from int to size_t
13728:
13729: 1996-08-25 13:35 millert
13730:
13731: * OPTIONS: now get CSOPS insults as well by default
13732:
13733: 1996-08-25 13:33 millert
13734:
13735: * insults.h: use csops insults too by default
13736:
13737: 1996-08-25 13:31 millert
13738:
13739: * INSTALL, Makefile.in, README, config.h.in, configure.in,
13740: version.h: version = 1.5
13741:
13742: 1996-08-25 13:27 millert
13743:
13744: * sudo.c: added runas_homedir
13745:
13746: 1996-08-25 13:27 millert
13747:
13748: * TODO: updated for 1.5
13749:
13750: 1996-08-25 13:23 millert
13751:
13752: * RUNSON: updated for 1.5
13753:
13754: 1996-08-25 13:19 millert
13755:
13756: * CHANGES: 1.5 release
13757:
13758: 1996-08-25 13:17 millert
13759:
13760: * INSTALL: added "upgrading" notes
13761:
13762: 1996-08-22 14:00 millert
13763:
13764: * visudo.c: now do chmod and chown after edit of temp file and
13765: before rename
13766:
13767: 1996-08-18 12:52 millert
13768:
13769: * Makefile.in: ++version added INSTALL.configure
13770:
13771: 1996-08-18 12:52 millert
13772:
13773: * version.h, configure.in: ++version
13774:
13775: 1996-08-18 12:51 millert
13776:
13777: * TROUBLESHOOTING: [no log message]
13778:
13779: 1996-08-18 12:50 millert
13780:
13781: * parse.yacc: added missing cast
13782:
13783: 1996-08-17 20:37 millert
13784:
13785: * sudo.c: sets $HOME to pw_dir of runas user
13786:
13787: 1996-08-17 20:02 millert
13788:
13789: * sudo.pod: document $HOME change
13790:
13791: 1996-08-17 19:43 millert
13792:
13793: * sudo.pod: fixed up some wording
13794:
13795: 1996-08-17 19:25 millert
13796:
13797: * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13798: goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13799: parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13800: testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13801:
13802: 1996-08-17 19:19 millert
13803:
13804: * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13805: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13806: ++version
13807:
13808: 1996-08-17 19:18 millert
13809:
13810: * sudo.h: name nad type changes
13811:
13812: 1996-08-17 19:17 millert
13813:
13814: * testsudoers.c: now works with new sudo
13815:
13816: 1996-08-17 19:07 millert
13817:
13818: * parse.yacc: fixed some XXX
13819:
13820: 1996-08-17 18:52 millert
13821:
13822: * parse.yacc: some variable name changes + comment headers for
13823: functions.
13824:
13825: 1996-08-17 18:41 millert
13826:
13827: * tgetpass.c: added extra paren's to make compilers happy
13828:
13829: 1996-08-17 18:34 millert
13830:
13831: * sudo.c: [no log message]
13832:
13833: 1996-08-17 18:30 millert
13834:
13835: * parse.c: now uses init_parser() if not in sudoers and tries
13836: "list" or "validate" scold but don't be nasty.
13837:
13838: 1996-08-17 18:29 millert
13839:
13840: * TROUBLESHOOTING: now can use upper case login names
13841:
13842: 1996-08-17 18:29 millert
13843:
13844: * visudo.c: now uses init_parser()
13845:
13846: 1996-08-17 18:28 millert
13847:
13848: * PORTING: added info about PASSWORD_TIMEOUT
13849:
13850: 1996-08-17 18:28 millert
13851:
13852: * INSTALL, README: updated
13853:
13854: 1996-08-17 18:28 millert
13855:
13856: * INSTALL.configure: Initial revision
13857:
13858: 1996-08-17 18:27 millert
13859:
13860: * BUGS: fixed a bug ,
13861:
13862: 1996-08-17 18:27 millert
13863:
13864: * parse.yacc: now dynamically allocates memory for the stacks -- no
13865: more overflows!
13866:
13867: 1996-08-17 18:26 millert
13868:
13869: * sudo.pod: -l now explands command aliases
13870:
13871: 1996-08-17 13:22 millert
13872:
13873: * parse.yacc: hacks to expand command aliases for `sudo -l'
13874:
13875: 1996-08-17 13:22 millert
13876:
13877: * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13878: and bash)
13879:
13880: 1996-08-17 13:22 millert
13881:
13882: * sudo.h: added struct command_alias
13883:
13884: 1996-08-17 13:20 millert
13885:
13886: * sudo.pod: fixed a bug
13887:
13888: 1996-08-17 13:15 millert
13889:
13890: * lsearch.c: in compar() key should be first arg
13891:
13892: 1996-08-15 15:48 millert
13893:
13894: * BUGS: fixed some bugs
13895:
13896: 1996-08-15 15:47 millert
13897:
13898: * parse.yacc: can now deal with upcase HOST and USER names
13899:
13900: 1996-08-15 15:47 millert
13901:
13902: * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13903:
13904: 1996-08-15 15:46 millert
13905:
13906: * sudo.pod: fixed thinko
13907:
13908: 1996-08-15 15:46 millert
13909:
13910: * parse.c: fix comment
13911:
13912: 1996-08-09 18:07 millert
13913:
13914: * parse.c, parse.yacc: added support for new `sudo -l' stuff
13915:
13916: 1996-08-09 18:06 millert
13917:
13918: * sudo.c: now uses list_matches()
13919:
13920: 1996-08-09 18:06 millert
13921:
13922: * sudo.h: added struct sudo_match
13923:
13924: 1996-08-09 17:37 millert
13925:
13926: * configure.in: now more -lgnumalloc
13927:
13928: 1996-08-01 13:12 millert
13929:
13930: * install-sh: added more paths for chown and whoami
13931:
13932: 1996-07-31 10:41 millert
13933:
13934: * check.c: typo
13935:
13936: 1996-07-30 13:45 millert
13937:
13938: * aclocal.m4: fixed DUNIX check for shadow pw
13939:
13940: 1996-07-30 13:41 millert
13941:
13942: * tgetpass.c: now only turn off echo if it is already on. this
13943: fixes a race when you use sudo in a pipelin
13944:
13945: 1996-07-30 12:53 millert
13946:
13947: * INSTALL: updated
13948:
13949: 1996-07-29 22:29 millert
13950:
13951: * configure.in: changed "test -z $foo && do_this" to if; then
13952: construct
13953:
13954: 1996-07-28 22:47 millert
13955:
13956: * configure.in: added missing defines of SHADOW_TYPE
13957:
13958: 1996-07-26 14:10 millert
13959:
13960: * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13961: they are only in dunix 4.x
13962:
13963: 1996-07-26 14:09 millert
13964:
13965: * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13966:
13967: 1996-07-26 13:23 millert
13968:
13969: * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13970: that didn't match. Now we can have runas stuff on more than one
13971: line.
13972:
13973: 1996-07-25 23:45 millert
13974:
13975: * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13976: defined to something
13977:
13978: 1996-07-25 23:45 millert
13979:
13980: * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
13981:
13982: 1996-07-25 23:44 millert
13983:
13984: * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
13985: instead of HAVE_C2_SECURITY
13986:
13987: 1996-07-25 23:44 millert
13988:
13989: * check.c: SHADOW_TYPE is always defined so just against its value
13990:
13991: 1996-07-25 23:44 millert
13992:
13993: * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
13994:
13995: 1996-07-25 18:47 millert
13996:
13997: * sudoers.pod: * -> ?* in one example added another instance of
13998: (runas) and one of NOPASSWD:
13999:
14000: 1996-07-24 13:02 millert
14001:
14002: * configure.in: added back check for config.cache from other host
14003: type
14004:
14005: 1996-07-24 12:49 millert
14006:
14007: * parse.lex: removed an instance of \"
14008:
14009: 1996-07-24 12:49 millert
14010:
14011: * sample.sudoers: added an example
14012:
14013: 1996-07-24 12:44 millert
14014:
14015: * sudoers.pod: updated wrt new wildcard matching
14016:
14017: 1996-07-24 10:28 millert
14018:
14019: * configure.in: new check for shadow passwords if we don't know
14020: anything
14021:
14022: 1996-07-24 10:28 millert
14023:
14024: * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14025:
14026: 1996-07-24 02:19 millert
14027:
14028: * configure.in: added back check for -lsocket (oops)
14029:
14030: 1996-07-24 02:16 millert
14031:
14032: * configure.in: better (working) check for shadow passwd type if we
14033: know to use C2.
14034:
14035: 1996-07-24 01:59 millert
14036:
14037: * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14038:
14039: 1996-07-24 01:59 millert
14040:
14041: * Makefile.in: added config.{guess,sub}
14042:
14043: 1996-07-24 01:58 millert
14044:
14045: * aclocal.m4: removed unused stuff to figure out os type
14046:
14047: 1996-07-23 22:58 millert
14048:
14049: * config.sub: added openbsd
14050:
14051: 1996-07-23 22:54 millert
14052:
14053: * config.sub: Initial revision
14054:
14055: 1996-07-23 22:40 millert
14056:
14057: * config.guess: Initial revision
14058:
14059: 1996-07-23 21:18 millert
14060:
14061: * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14062: it can only be a pathname. need to check against sudoers_args
14063: even if user_args is nil
14064:
14065: 1996-07-23 21:18 millert
14066:
14067: * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14068: can only be a pathname need to check against sudoers_args even if
14069: user_args is nil
14070:
14071: 1996-07-23 18:52 millert
14072:
14073: * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14074:
14075: 1996-07-23 01:18 millert
14076:
14077: * testsudoers.c: now takes command line args and uses cmnd_args
14078:
14079: 1996-07-23 01:10 millert
14080:
14081: * parse.lex: fill_args was adding an extra leading space
14082:
14083: 1996-07-22 15:50 millert
14084:
14085: * visudo.c: fixed dummy command_matches()
14086:
14087: 1996-07-22 15:50 millert
14088:
14089: * parse.yacc: fixed prototype
14090:
14091: 1996-07-22 15:31 millert
14092:
14093: * sudo.h: added cmnd_args
14094:
14095: 1996-07-22 15:31 millert
14096:
14097: * parse.yacc: now uses flat args string
14098:
14099: 1996-07-22 15:30 millert
14100:
14101: * parse.c, parse.lex: now uses flat arg string
14102:
14103: 1996-07-22 15:29 millert
14104:
14105: * visudo.c: added cmnd_args def
14106:
14107: 1996-07-22 14:30 millert
14108:
14109: * sudo.c: now sets cmnd_args global
14110:
14111: 1996-07-22 14:30 millert
14112:
14113: * logging.c: cmnd_args is now exported from sudo.[ch]
14114:
14115: 1996-07-21 18:41 millert
14116:
14117: * parse.yacc: can't rely on cmnd_matches as much as I thought --
14118: added some $$ stuff back in to prevent namespace pollution
14119: problems.
14120:
14121: 1996-07-21 18:01 millert
14122:
14123: * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14124: consistent).
14125:
14126: 1996-07-20 00:45 millert
14127:
14128: * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14129: starts a 'runas' if in the initial state to avoid collision with
14130: command args
14131:
14132: 1996-07-20 00:23 millert
14133:
14134: * configure.in: added checks for specific shadow passwd schemes
14135:
14136: 1996-07-20 00:18 millert
14137:
14138: * aclocal.m4: added routines to check for specific shadow passwd
14139: types
14140:
14141: 1996-07-18 18:27 millert
14142:
14143: * configure.in: added support for ncr boxen
14144:
14145: 1996-07-18 18:26 millert
14146:
14147: * aclocal.m4: added support for detecting ncr boxen
14148:
14149: 1996-07-16 14:57 millert
14150:
14151: * configure.in: added sinix support
14152:
14153: 1996-07-13 22:29 millert
14154:
14155: * TROUBLESHOOTING: added info about "config.cache from other other"
14156: error.
14157:
14158: 1996-07-13 22:22 millert
14159:
14160: * aclocal.m4: now makes sure you don't have a config.cache file
14161: from another OS
14162:
14163: 1996-07-13 21:36 millert
14164:
14165: * configure.in: now sets $LIBS when needed to configure links with
14166: libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14167: check for bigcrypt(3) if SPW_SECUREWARE
14168:
14169: 1996-07-13 21:30 millert
14170:
14171: * getspwuid.c: fixed typo
14172:
14173: 1996-07-13 21:05 millert
14174:
14175: * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14176: AUTH_MAX_PASSWD_LENGTH
14177:
14178: 1996-07-13 21:05 millert
14179:
14180: * getspwuid.c: no more SPW_HPUX10
14181:
14182: 1996-07-13 21:04 millert
14183:
14184: * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14185:
14186: 1996-07-13 21:04 millert
14187:
14188: * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14189:
14190: 1996-07-13 21:04 millert
14191:
14192: * check.c: SPW_SECUREWARE now uses bigcrypt
14193:
14194: 1996-07-13 18:24 millert
14195:
14196: * sample.sudoers: fixed 2 syntax errors
14197:
14198: 1996-07-13 18:24 millert
14199:
14200: * sudoers: root may now run ALL as ALL
14201:
14202: 1996-07-11 20:59 millert
14203:
14204: * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14205:
14206: 1996-07-08 16:08 millert
14207:
14208: * check.c, configure.in: updated AFS support
14209:
14210: 1996-07-08 16:07 millert
14211:
14212: * TROUBLESHOOTING: added entry about /usr/ucb/cc
14213:
14214: 1996-07-08 16:06 millert
14215:
14216: * INSTALL: prep no longer holds gcc binaries
14217:
14218: 1996-07-08 15:48 millert
14219:
14220: * INSTALL: updated AFS note
14221:
14222: 1996-07-08 15:43 millert
14223:
14224: * Makefile.in: added @AFS_LIBS@
14225:
14226: 1996-07-08 15:33 millert
14227:
14228: * compat.h: AFS allows long passwords
14229:
14230: 1996-07-08 14:16 millert
14231:
14232: * testsudoers.c: fixed -u user support
14233:
14234: 1996-07-08 14:16 millert
14235:
14236: * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14237:
14238: 1996-07-08 13:30 millert
14239:
14240: * parse.yacc: fixed no_passwd vs. runas_matched
14241:
14242: 1996-07-08 10:30 millert
14243:
14244: * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14245: longer an issue
14246:
14247: 1996-07-08 10:30 millert
14248:
14249: * INSTALL: added --with-libraries > --with-libpath --with-incpath
14250:
14251: 1996-07-08 10:21 millert
14252:
14253: * parse.yacc: was setting runas_matches to -1 in wrong place
14254:
14255: 1996-07-08 09:58 millert
14256:
14257: * check.c: removed usersec.h which is not present in new AFS
14258: versions
14259:
14260: 1996-07-08 09:55 millert
14261:
14262: * tgetpass.c: now deals with timeout <= 0
14263:
14264: 1996-07-08 09:51 millert
14265:
14266: * OPTIONS: updated
14267:
14268: 1996-07-08 00:04 millert
14269:
14270: * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14271:
14272: 1996-07-07 22:30 millert
14273:
14274: * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14275: for root readable/writable filesystems
14276:
14277: 1996-07-07 20:49 millert
14278:
14279: * Makefile.in: now gives INSTALL -c flag
14280:
14281: 1996-07-07 20:34 millert
14282:
14283: * parse.yacc: slightly simpler initialization of no_passwd and
14284: runas_matches
14285:
14286: 1996-07-07 20:33 millert
14287:
14288: * testsudoers.c: added -u username support
14289:
14290: 1996-07-07 20:32 millert
14291:
14292: * configure.in: improved --with-libraries support
14293:
14294: 1996-07-07 16:27 millert
14295:
14296: * configure.in: added --with-incpath, --with-libpath,
14297: --with-libraries
14298:
14299: 1996-07-07 16:01 millert
14300:
14301: * parse.yacc: now initializes some fields that weren't getting set
14302: to -1 pretty gross -- need a rewrite.
14303:
14304: 1996-06-25 23:19 millert
14305:
14306: * alloca.c: removed emacs'isms
14307:
14308: 1996-06-25 22:29 millert
14309:
14310: * configure.in: no longer add -lPW to *_LIBS since we include
14311: alloca.c
14312:
14313: 1996-06-25 22:29 millert
14314:
14315: * config.h.in: added HAVE_ALLOCA_H
14316:
14317: 1996-06-25 22:28 millert
14318:
14319: * Makefile.in: added alloca.c
14320:
14321: 1996-06-25 22:18 millert
14322:
14323: * alloca.c: Initial revision
14324:
14325: 1996-06-25 21:58 millert
14326:
14327: * configure.in: ++version
14328:
14329: 1996-06-25 19:32 millert
14330:
14331: * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14332: nobody is not always set to a valid uid.
14333:
14334: 1996-06-25 19:31 millert
14335:
14336: * OPTIONS: fixed entry for SUDO_MODE
14337:
14338: 1996-06-25 18:02 millert
14339:
14340: * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14341: *and* gid were being set to -2. Now beat NFS to the punch and
14342: set uid to "nobody" ourselves, preserving group 0 to read
14343: sudoers.
14344:
14345: 1996-06-25 18:02 millert
14346:
14347: * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14348:
14349: 1996-06-25 18:00 millert
14350:
14351: * logging.c: fixed a typo
14352:
14353: 1996-06-25 18:00 millert
14354:
14355: * configure.in: no longer need AC_PROG_INSTALL
14356:
14357: 1996-06-25 17:59 millert
14358:
14359: * Makefile.in: always use install-sh to avoid install(1)'s that use
14360: get{pw,gr}nam
14361:
14362: 1996-06-25 16:07 millert
14363:
14364: * INSTALL: make clean -> make distclean
14365:
14366: 1996-06-20 01:17 millert
14367:
14368: * parse.yacc: removed some unnecsary if's
14369:
14370: 1996-06-20 01:16 millert
14371:
14372: * Makefile.in, version.h: ++version
14373:
14374: 1996-06-20 01:16 millert
14375:
14376: * parse.c, testsudoers.c: now includes netgroup.h
14377:
14378: 1996-06-20 00:45 millert
14379:
14380: * interfaces.c: removed cats of ioctl to int since they didn't shut
14381: up -Wall
14382:
14383: 1996-06-20 00:43 millert
14384:
14385: * interfaces.c: explicately cast ioctl() to int since it it not
14386: always declared
14387:
14388: 1996-06-20 00:41 millert
14389:
14390: * sudo.h: added declarations for yyparse() and yylex()
14391:
14392: 1996-06-20 00:27 millert
14393:
14394: * parse.yacc: fixed an occurence of '==' -> '='
14395:
14396: 1996-06-20 00:22 millert
14397:
14398: * config.h.in, configure.in: added check for netgroup.h
14399:
14400: 1996-06-20 00:20 millert
14401:
14402: * sudo.c: fixed 2 compiler warnings
14403:
14404: 1996-06-20 00:08 millert
14405:
14406: * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14407: weren't being initialized
14408:
14409: 1996-06-19 13:53 millert
14410:
14411: * sudo.pod: fixed a typo
14412:
14413: 1996-06-17 12:19 millert
14414:
14415: * parse.yacc: fixed a formatting thingie
14416:
14417: 1996-06-17 12:16 millert
14418:
14419: * parse.c, parse.yacc: fixed -u support with multiple user lists on
14420: a line
14421:
14422: 1996-06-17 10:23 millert
14423:
14424: * configure.in: unixware needs -lgen
14425:
14426: 1996-06-17 10:23 millert
14427:
14428: * README: updated ftp location
14429:
14430: 1996-06-17 00:08 millert
14431:
14432: * sudoers.pod: add net_addr/netmask support
14433:
14434: 1996-06-17 00:07 millert
14435:
14436: * sample.sudoers: added net_addr/mask example
14437:
14438: 1996-06-17 00:02 millert
14439:
14440: * parse.lex, parse.c: added support for net_addr/netmask
14441:
14442: 1996-06-15 20:13 millert
14443:
14444: * sudoers.pod: ^ -> !
14445:
14446: 1996-06-15 18:12 millert
14447:
14448: * RUNSON: updated for 1.4.3
14449:
14450: 1996-06-15 18:12 millert
14451:
14452: * CHANGES: udpated for 1.4.3
14453:
14454: 1996-06-15 18:11 millert
14455:
14456: * TROUBLESHOOTING, TODO, BUGS: updated
14457:
14458: 1996-06-15 18:11 millert
14459:
14460: * sample.sudoers: updated with examples of new stuff
14461:
14462: 1996-06-15 18:10 millert
14463:
14464: * INSTALL, README: ++version
14465:
14466: 1996-06-15 18:01 millert
14467:
14468: * sudoers.pod: updated wrt -u and NOPASSWD
14469:
14470: 1996-06-15 17:58 millert
14471:
14472: * sudo.pod: updated wrt -u and CAVEATS
14473:
14474: 1996-06-08 23:15 millert
14475:
14476: * sudo.c: fixed usage()
14477:
14478: 1996-06-08 22:57 millert
14479:
14480: * parse.lex: now use :foo: character classes (makes no diff for
14481: generated lexer)
14482:
14483: 1996-06-07 14:33 millert
14484:
14485: * check.c: fixed LONG_SKEY_PROMPT stuff
14486:
14487: 1996-06-06 15:35 millert
14488:
14489: * visudo.c: fixed a comment
14490:
14491: 1996-06-06 15:03 millert
14492:
14493: * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14494:
14495: 1996-06-06 15:02 millert
14496:
14497: * emul/search.h: fixed decls of lsearch()
14498:
14499: 1996-06-05 22:20 millert
14500:
14501: * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14502:
14503: 1996-06-05 22:20 millert
14504:
14505: * check.c: hpux 10 uses bigcrypt() if C2
14506:
14507: 1996-06-04 19:57 millert
14508:
14509: * parse.c: now always uses fnmatch to match args
14510:
14511: 1996-06-04 19:40 millert
14512:
14513: * tgetpass.c: back to using stdio instead of raw i/o since that
14514: caused some problems
14515:
14516: 1996-05-28 22:14 millert
14517:
14518: * sudo.c: now give usage warning if use -l,-v,-k with args
14519:
14520: 1996-05-28 18:22 millert
14521:
14522: * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14523:
14524: 1996-05-28 12:50 millert
14525:
14526: * sudo.c: now sets sudoers to correct group if mode is 0400
14527:
14528: 1996-05-28 12:02 millert
14529:
14530: * install-sh: updated to version used by inn and bind
14531:
14532: 1996-05-28 00:08 millert
14533:
14534: * configure.in: now uses -lgnumalloc if it exists
14535:
14536: 1996-05-28 00:02 millert
14537:
14538: * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14539: if it exists
14540:
14541: 1996-05-28 00:01 millert
14542:
14543: * sudo.c: rmeoved debugging statements
14544:
14545: 1996-05-28 00:00 millert
14546:
14547: * parse.yacc: added a missing free()
14548:
14549: 1996-05-27 23:58 millert
14550:
14551: * sudo.c: now uses user_gid instead of getegid (which was wrong
14552: anyway) to set SUDO_GID Now sets command line args in
14553: SUDO_COMMAND envariabled (logging.c depends on args being in the
14554: environment)
14555:
14556: 1996-05-27 23:57 millert
14557:
14558: * logging.c: now uses SUDO_COMMAND envariable to get command args
14559: rather than building it up again.
14560:
14561: 1996-05-27 22:42 millert
14562:
14563: * parse.c: now uses user_gid
14564:
14565: 1996-05-27 20:02 millert
14566:
14567: * sudo.c: fixed off by one error in allocation NewArgv
14568:
14569: 1996-05-27 20:01 millert
14570:
14571: * parse.c: in sudoers, 'command ""' now means command with no args
14572:
14573: 1996-05-27 20:01 millert
14574:
14575: * configure.in: added check for fnmatch(3) and fnmatch.h
14576:
14577: 1996-05-27 20:01 millert
14578:
14579: * config.h.in: added HAVE_FNMATCH
14580:
14581: 1996-05-27 20:00 millert
14582:
14583: * Makefile.in: replaced wildcat.* with fnmatch.*
14584:
14585: 1996-05-27 20:00 millert
14586:
14587: * testsudoers.c: now uses fnmatch()
14588:
14589: 1996-05-27 19:38 millert
14590:
14591: * parse.c: now uses fnmatch() instead of wildmat a trailing star
14592: (*) by itself now matches multiple args added support for
14593: wildcards in the pathname in sudoers
14594:
14595: 1996-05-25 19:23 millert
14596:
14597: * fnmatch.c: now includes compat.h and config.h
14598:
14599: 1996-05-25 18:09 millert
14600:
14601: * config.h.in: added HAVE_FNMATCH_H
14602:
14603: 1996-05-25 18:07 millert
14604:
14605: * configure.in: now checks for alloca() (if needed by bison or dce)
14606: and links with -lPW if it contains alloca() and libv and compiler
14607: do not.
14608:
14609: 1996-05-25 18:03 millert
14610:
14611: * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14612:
14613: 1996-04-28 22:38 millert
14614:
14615: * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14616: upgrade
14617:
14618: 1996-04-28 17:44 millert
14619:
14620: * Makefile.in: fixed pod2man usage
14621:
14622: 1996-04-28 17:40 millert
14623:
14624: * configure.in, Makefile.in, version.h: ++version
14625:
14626: 1996-04-28 17:20 millert
14627:
14628: * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14629:
14630: 1996-04-28 17:20 millert
14631:
14632: * sudo.h: removed PERM_FULL_ROOT
14633:
14634: 1996-04-28 17:18 millert
14635:
14636: * sudo.c: runas_user defaults to "root" so no more need to
14637: PERM_RUNAS
14638:
14639: 1996-04-28 17:16 millert
14640:
14641: * parse.c: will now only running commands as root if there was no
14642: runas list (or if root is in the runas list)
14643:
14644: 1996-04-28 17:15 millert
14645:
14646: * logging.c: now logs "USER=%s"
14647:
14648: 1996-04-28 17:12 millert
14649:
14650: * parse.yacc: runas_matches is now set to false if we get a
14651: negative match
14652:
14653: 1996-04-28 15:01 millert
14654:
14655: * parse.lex: make #uid work + some minor cleanup
14656:
14657: 1996-04-27 21:04 millert
14658:
14659: * sample.sudoers: added support for NOPASSWD and "runas" from
14660: garp@opustel.com /
14661:
14662: 1996-04-27 21:03 millert
14663:
14664: * visudo.c: added support for "runas" from garp@opustel.com
14665: replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14666: support for SUDOERS_MODE
14667:
14668: 1996-04-27 21:03 millert
14669:
14670: * testsudoers.c: added support for "runas" from garp@opustel.com
14671:
14672: 1996-04-27 21:02 millert
14673:
14674: * sudo.h: added support for NO_PASSWD and runas from
14675: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14676: SUDOERS_GID and added support fro SUDOERS_MODE
14677:
14678: 1996-04-27 21:00 millert
14679:
14680: * sudo.c: added support for NO_PASSWD and runas from
14681: garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14682: SUDOERS_GID and added support fro SUDOERS_MODE
14683:
14684: 1996-04-27 21:00 millert
14685:
14686: * parse.yacc: added support for NO_PASSWD and runas from
14687: garp@opustel.com
14688:
14689: 1996-04-27 20:58 millert
14690:
14691: * parse.c, parse.lex: added support for NO_PASSWD and runas from
14692: garp@opustel.com
14693:
14694: 1996-04-27 20:56 millert
14695:
14696: * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14697:
14698: 1996-04-27 20:40 millert
14699:
14700: * configure.in: added --with-CC only link with -lshadow on linux
14701: (with shadow pw) if libc lacks getspnam()
14702:
14703: 1996-04-27 20:39 millert
14704:
14705: * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14706: do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14707: SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14708:
14709: 1996-04-27 20:26 millert
14710:
14711: * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14712:
14713: 1996-04-27 11:20 millert
14714:
14715: * INSTALL: added --with-CC
14716:
14717: 1996-04-06 16:31 millert
14718:
14719: * parse.lex: added double quote support
14720:
14721: 1996-04-06 16:29 millert
14722:
14723: * sudoers.pod: documented double quoting
14724:
14725: 1996-04-05 16:53 millert
14726:
14727: * mkinstalldirs: Initial revision
14728:
14729: 1996-04-05 16:53 millert
14730:
14731: * check.c: fixed some indentation
14732:
14733: 1996-04-05 16:48 millert
14734:
14735: * Makefile.in: fixed a typo
14736:
14737: 1996-04-04 19:39 millert
14738:
14739: * Makefile.in: added install-dirs .
14740:
14741: 1996-04-04 14:16 millert
14742:
14743: * dce_pwent.c: new version from "Jeff A. Earickson"
14744: <jaearick@colby.edu>
14745:
14746: 1996-04-03 13:40 millert
14747:
14748: * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14749:
14750: 1996-04-03 13:40 millert
14751:
14752: * BUGS: updated
14753:
14754: 1996-04-03 13:36 millert
14755:
14756: * parse.lex: FQHOST now has same constraints as non-FQHOST
14757:
14758: 1996-04-02 19:00 millert
14759:
14760: * INSTALL: added note about OS's w/ shadow passwords turned on by
14761: default
14762:
14763: 1996-04-02 18:58 millert
14764:
14765: * configure.in: fixed a typo
14766:
14767: 1996-04-02 18:48 millert
14768:
14769: * configure.in: added support for --without-THING sanitized shadow
14770: pw situtation by adding support for --without-C2
14771:
14772: 1996-04-02 16:42 millert
14773:
14774: * tgetpass.c: fixed a typo wrt placement of an end paren
14775:
14776: 1996-04-02 14:57 millert
14777:
14778: * check.c: was closing an fd that may not have been opened
14779:
14780: 1996-03-21 19:55 millert
14781:
14782: * sudo.c, OPTIONS, options.h: added NO_PASSWD
14783:
14784: 1996-03-19 19:40 millert
14785:
14786: * configure.in: now always use shadow pw on some arches
14787:
14788: 1996-03-19 17:07 millert
14789:
14790: * configure.in: added pyramid support
14791:
14792: 1996-03-19 17:04 millert
14793:
14794: * configure.in: no longer check for C2 if alternate passwd method
14795: is used no longer check for some libs twice
14796:
14797: 1996-03-19 17:00 millert
14798:
14799: * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14800:
14801: 1996-03-19 17:00 millert
14802:
14803: * parse.lex: added FQHOST rules
14804:
14805: 1996-03-18 20:57 millert
14806:
14807: * tgetpass.c: now define TCSASOFT in necesary
14808:
14809: 1996-03-18 20:31 millert
14810:
14811: * tgetpass.c: now uses read/write instead of stdio string goop to
14812: avoid problems with select(2)
14813:
14814: 1996-03-18 19:37 millert
14815:
14816: * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14817: -DIGNORE_DOT_PATH
14818:
14819: 1996-03-17 16:18 millert
14820:
14821: * INSTALL: added note about no shadow auto-detect if using
14822: alternate auth schemes
14823:
14824: 1996-03-17 15:33 millert
14825:
14826: * configure.in: don't check for C2 if AFS or DCE (unless they said
14827: --with-C2)
14828:
14829: 1996-03-17 15:08 millert
14830:
14831: * testsudoers.c: now groks shost
14832:
14833: 1996-03-17 15:01 millert
14834:
14835: * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14836:
14837: 1996-03-16 14:43 millert
14838:
14839: * find_path.c: checkdot now works correctly
14840:
14841: 1996-03-12 18:01 millert
14842:
14843: * configure.in: can't have DCE and C2 passwords both...
14844:
14845: 1996-03-11 14:05 millert
14846:
14847: * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14848: FQDN
14849:
14850: 1996-03-11 14:04 millert
14851:
14852: * configure.in: now looks for skey in /usr/lib and doesn't require
14853: libskey to be in /usr/local/lib just because skey.h is (for my
14854: netbsd box :-)
14855:
14856: 1996-03-11 02:00 millert
14857:
14858: * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14859: _CONFIG_PATH_
14860:
14861: 1996-03-10 21:01 millert
14862:
14863: * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14864:
14865: 1996-03-10 20:59 millert
14866:
14867: * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14868:
14869: 1996-03-10 20:59 millert
14870:
14871: * OPTIONS: udpated FQDN
14872:
14873: 1996-03-10 20:58 millert
14874:
14875: * config.h.in: added _SUDO_PATH_TIMEDIR
14876:
14877: 1996-03-10 20:58 millert
14878:
14879: * aclocal.m4, configure.in: added SUDO_TIMEDIR
14880:
14881: 1996-03-10 20:58 millert
14882:
14883: * sudo.pod: updated wrt /var/run/sudo
14884:
14885: 1996-03-10 20:16 millert
14886:
14887: * sudo.c, sudo.h: added support for shost if FQDN
14888:
14889: 1996-03-10 20:14 millert
14890:
14891: * parse.yacc, visudo.c: now uses shost if FQDN
14892:
14893: 1996-03-10 20:12 millert
14894:
14895: * check.c: Now use skeylookup() instead off skeychallenge()
14896:
14897: 1996-02-27 20:41 millert
14898:
14899: * logging.c: mail_argv should not contain ALERTMAIL as it includes
14900: "-t"
14901:
14902: 1996-02-22 17:06 millert
14903:
14904: * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14905:
14906: 1996-02-22 16:27 millert
14907:
14908: * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14909:
14910: 1996-02-22 16:27 millert
14911:
14912: * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14913:
14914: 1996-02-05 19:20 millert
14915:
14916: * README, INSTALL: ++version
14917:
14918: 1996-02-05 19:20 millert
14919:
14920: * Makefile.in: ++versoin
14921:
14922: 1996-02-05 19:16 millert
14923:
14924: * Makefile.in: fixed a typo
14925:
14926: 1996-02-05 19:16 millert
14927:
14928: * configure.in: ++version
14929:
14930: 1996-02-05 18:53 millert
14931:
14932: * RUNSON: updated
14933:
14934: 1996-02-05 18:47 millert
14935:
14936: * CHANGES: done for 1.4.1 (I hope)
14937:
14938: 1996-02-05 18:45 millert
14939:
14940: * sudoers.pod: added info on wildcards
14941:
14942: 1996-02-05 18:39 millert
14943:
14944: * sample.sudoers: added wildcard example
14945:
14946: 1996-02-05 17:03 millert
14947:
14948: * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14949:
14950: 1996-02-05 17:03 millert
14951:
14952: * configure.in: addedSUDO_PROG_BSHELL !ll
14953:
14954: 1996-02-05 16:10 millert
14955:
14956: * visudo.pod: fixed up some formatting
14957:
14958: 1996-02-05 16:10 millert
14959:
14960: * sudoers.pod: redid section describing sample sudoers stuff
14961:
14962: 1996-02-05 16:10 millert
14963:
14964: * sudo.pod: fixed some formatting
14965:
14966: 1996-02-04 22:50 millert
14967:
14968: * getspwuid.c: now treats "" as bourne shell
14969:
14970: 1996-02-04 22:49 millert
14971:
14972: * Makefile.in: TESTOBJS nwo includes wildmat.o
14973:
14974: 1996-02-04 22:48 millert
14975:
14976: * testsudoers.c: now works with NewArg[cv]
14977:
14978: 1996-02-04 21:59 millert
14979:
14980: * sudo.c: removed an XXX (fixed it in getspwuid.c)
14981:
14982: 1996-02-04 21:58 millert
14983:
14984: * aclocal.m4: added check for bourne shell
14985:
14986: 1996-02-04 21:58 millert
14987:
14988: * pathnames.h.in: added _PATH_BSHELL
14989:
14990: 1996-02-04 21:58 millert
14991:
14992: * config.h.in: added _SUDO_PATH_BSHELL
14993:
14994: 1996-02-04 16:36 millert
14995:
14996: * visudo.c: unixware vi returns 256 instead of 0
14997:
14998: 1996-02-04 16:24 millert
14999:
15000: * INSTALL: added Linux note
15001:
15002: 1996-02-04 16:13 millert
15003:
15004: * logging.c: fixed up some XXX's. file log format now looks a
15005: little more like real syslog(3) format.
15006:
15007: 1996-02-04 16:13 millert
15008:
15009: * README, TROUBLESHOOTING: updated wrt lex/flex
15010:
15011: 1996-02-04 16:11 millert
15012:
15013: * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15014: since we ship with a pre-flex'd parser
15015:
15016: 1996-02-04 16:09 millert
15017:
15018: * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15019:
15020: 1996-02-04 02:28 millert
15021:
15022: * logging.c: eliminated some strcat()'s
15023:
15024: 1996-02-04 02:10 millert
15025:
15026: * configure.in: no longer checks for lex/flex (now assumes flex)
15027:
15028: 1996-02-04 02:08 millert
15029:
15030: * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15031: just kerb_dir_candidate
15032:
15033: 1996-02-02 20:48 millert
15034:
15035: * parse.yacc: now use a 'hook' expression instead of an iffy one
15036: :-)
15037:
15038: 1996-02-02 01:14 millert
15039:
15040: * visudo.c: now works with new sudo arg stuff
15041:
15042: 1996-02-02 01:14 millert
15043:
15044: * parse.yacc: fixed dereferencing deadbeef
15045:
15046: 1996-02-01 23:53 millert
15047:
15048: * sudo.c: changed an occurrence of Argv to NewArgv
15049:
15050: 1996-02-01 23:53 millert
15051:
15052: * parse.lex: took out support for quoted commands since there is no
15053: need...
15054:
15055: 1996-02-01 23:52 millert
15056:
15057: * parse.c: fixed a typo in a for() loop
15058:
15059: 1996-02-01 23:52 millert
15060:
15061: * logging.c: protected against dereferencing rogue pointers
15062:
15063: 1996-02-01 22:34 millert
15064:
15065: * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15066: needed this also allows us to eliminate some kludges in
15067: parse_args() and eliminate superfluous code.
15068:
15069: 1996-02-01 22:34 millert
15070:
15071: * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15072:
15073: 1996-02-01 22:32 millert
15074:
15075: * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15076: cmnd_args (no longer used)
15077:
15078: 1996-02-01 22:31 millert
15079:
15080: * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15081:
15082: 1996-02-01 22:30 millert
15083:
15084: * parse.yacc: COMMAND is now a struct containing the path and args
15085:
15086: 1996-02-01 22:30 millert
15087:
15088: * parse.lex: replaced append() with fill_cmnd() and fill_args.
15089: command args from a sudoers entry are now stored in an arrary for
15090: easy matching.
15091:
15092: 1996-02-01 22:28 millert
15093:
15094: * parse.c: command line args from sudoers file are now in an array
15095: like ones passed in from the command line
15096:
15097: 1996-01-31 20:59 millert
15098:
15099: * parse.c: wildwat stuff now works
15100:
15101: 1996-01-29 00:44 millert
15102:
15103: * version.h: ++version
15104:
15105: 1996-01-29 00:44 millert
15106:
15107: * Makefile.in: ++version added wildmat.*
15108:
15109: 1996-01-28 17:55 millert
15110:
15111: * parse.lex: added support for quoted commands (w/ or w/o args)
15112:
15113: 1996-01-22 01:55 millert
15114:
15115: * sudo.pod, visudo.pod: cleaned up formatting
15116:
15117: 1996-01-21 20:53 millert
15118:
15119: * sudo.pod, visudo.pod: Initial revision
15120:
15121: 1996-01-21 02:07 millert
15122:
15123: * sudoers.pod: looks reasonable, could be mroe readable
15124:
15125: 1996-01-20 23:47 millert
15126:
15127: * sudoers.pod: Initial revision
15128:
15129: 1996-01-16 14:38 millert
15130:
15131: * RUNSON: updated
15132:
15133: 1996-01-16 14:37 millert
15134:
15135: * OPTIONS: updated NO_ROOT_SUDO entry
15136:
15137: 1996-01-15 11:37 millert
15138:
15139: * RUNSON: [no log message]
15140:
15141: 1996-01-15 11:34 millert
15142:
15143: * sudo.c: fixed SECURE_PATH
15144:
15145: 1996-01-14 20:55 millert
15146:
15147: * RUNSON: udpa`ted for 1.4
15148:
15149: 1996-01-14 20:52 millert
15150:
15151: * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15152:
15153: 1996-01-14 20:32 millert
15154:
15155: * TROUBLESHOOTING: added entry for anal ansi compilers
15156:
15157: 1996-01-14 16:13 millert
15158:
15159: * INSTALL: added info on libcrypt_i for SCO
15160:
15161: 1996-01-14 16:05 millert
15162:
15163: * TODO: [no log message]
15164:
15165: 1996-01-14 15:39 millert
15166:
15167: * sample.sudoers: added comments
15168:
15169: 1996-01-14 15:25 millert
15170:
15171: * TODO: 1.4 release
15172:
15173: 1996-01-14 15:22 millert
15174:
15175: * README, config.h.in, configure.in, CHANGES: ++version
15176:
15177: 1996-01-14 15:21 millert
15178:
15179: * BUGS: ++version and fixed ISC
15180:
15181: 1996-01-14 15:19 millert
15182:
15183: * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15184: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15185: ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15186: logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15187: testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15188: ++version
15189:
15190: 1996-01-14 15:16 millert
15191:
15192: * interfaces.c: added STUB_LOAD_INTERFACES ++version
15193:
15194: 1996-01-14 15:14 millert
15195:
15196: * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15197: emul/utime.h: ++version
15198:
15199: 1996-01-14 15:13 millert
15200:
15201: * PORTING: added info about fd_set in tgetpass added info on
15202: interfaces.c
15203:
15204: 1996-01-11 13:22 millert
15205:
15206: * dce_pwent.c: added sudo header
15207:
15208: 1996-01-11 13:04 millert
15209:
15210: * tgetpass.c: fixed a typo
15211:
15212: 1996-01-11 13:01 millert
15213:
15214: * Makefile.in: tgetpass.o is now only linked in with sudo (not
15215: visudo)
15216:
15217: 1996-01-09 12:56 millert
15218:
15219: * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15220: configure.in: ++version
15221:
15222: 1996-01-09 12:54 millert
15223:
15224: * emul/utime.h: added copyright notice
15225:
15226: 1996-01-09 12:52 millert
15227:
15228: * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15229: ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15230: interfaces.c, logging.c, options.h, parse.c, parse.lex,
15231: parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15232: sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15233: visudo.c: ++version
15234:
15235: 1996-01-09 12:46 millert
15236:
15237: * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15238: svr4'ish boxen
15239:
15240: 1996-01-09 12:42 millert
15241:
15242: * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15243:
15244: 1996-01-09 12:41 millert
15245:
15246: * config.h.in: added check for sys/bsdtypes.h
15247:
15248: 1996-01-07 16:00 millert
15249:
15250: * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15251:
15252: 1996-01-07 15:55 millert
15253:
15254: * TROUBLESHOOTING: added 2 entries
15255:
15256: 1996-01-07 15:55 millert
15257:
15258: * Makefile.in: added FAQ
15259:
15260: 1996-01-07 14:26 millert
15261:
15262: * TROUBLESHOOTING: added section on syslog
15263:
15264: 1996-01-07 14:25 millert
15265:
15266: * configure.in: added AC_ISC_POSIX for better ISC support
15267:
15268: 1996-01-07 14:25 millert
15269:
15270: * config.h.in: fixed typo
15271:
15272: 1996-01-07 14:25 millert
15273:
15274: * config.h.in: added define for _POSIX_SOURCE
15275:
15276: 1996-01-04 00:41 millert
15277:
15278: * configure.in: fixed check for lsearch()
15279:
15280: 1995-12-21 21:53 millert
15281:
15282: * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15283: (should not happen)
15284:
15285: 1995-12-20 17:02 millert
15286:
15287: * configure.in: now only define HAVE_LSEARCH if there is a
15288: corresponding search.h
15289:
15290: 1995-12-20 15:52 millert
15291:
15292: * interfaces.c: works on ISC again
15293:
15294: 1995-12-18 17:36 millert
15295:
15296: * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15297: libcompat
15298:
15299: 1995-12-18 17:32 millert
15300:
15301: * lsearch.c: char * -> const char *
15302:
15303: 1995-12-18 17:29 millert
15304:
15305: * configure.in: now looks in -lcompat for lsearch()
15306:
15307: 1995-12-18 17:23 millert
15308:
15309: * Makefile.in: remove sudo.core visudo.core for clan target
15310:
15311: 1995-12-17 22:53 millert
15312:
15313: * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15314:
15315: 1995-12-17 22:36 millert
15316:
15317: * Makefile.in: fixed another occurence of sudo_getpwuid.*
15318:
15319: 1995-12-17 22:30 millert
15320:
15321: * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15322:
15323: 1995-12-17 22:22 millert
15324:
15325: * configure.in: moved the "echo"
15326:
15327: 1995-12-17 22:09 millert
15328:
15329: * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15330: compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15331: getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15332: ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15333: parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15334: strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15335: tgetpass.c, utime.c, version.h, visudo.c: ++version
15336:
15337: 1995-12-17 22:04 millert
15338:
15339: * testsudoers.c: added group support
15340:
15341: 1995-12-17 22:00 millert
15342:
15343: * sample.sudoers: added group entry
15344:
15345: 1995-12-17 21:59 millert
15346:
15347: * sudoers.man: documented group support
15348:
15349: 1995-12-17 21:50 millert
15350:
15351: * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15352:
15353: 1995-12-15 17:45 millert
15354:
15355: * check.c: tkfile was too short and overflowed the kerberos realm
15356:
15357: 1995-12-11 17:09 millert
15358:
15359: * sudo.c: now copy command args directly from Argv
15360:
15361: 1995-12-11 15:55 millert
15362:
15363: * sudo.c: replaced code to copy cmnd_args so that is does not use
15364: realloc since most realloc()'s really stink
15365:
15366: 1995-12-08 14:11 millert
15367:
15368: * configure.in: syslog() fixed in hpux 10.01
15369:
15370: 1995-12-06 17:45 millert
15371:
15372: * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15373: if appropriate)
15374:
15375: 1995-12-06 17:30 millert
15376:
15377: * configure.in: better error if cannot find skey incs or libs
15378:
15379: 1995-12-06 17:26 millert
15380:
15381: * aclocal.m4: now use a temp file for determining max len of uid_t
15382: in string form. the old hacky way broke on netbsd
15383:
15384: 1995-12-05 19:02 millert
15385:
15386: * sudo.c: added set of parens and a space
15387:
15388: 1995-12-05 18:58 millert
15389:
15390: * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15391:
15392: 1995-12-05 18:58 millert
15393:
15394: * check.c: modified a comment
15395:
15396: 1995-12-05 18:57 millert
15397:
15398: * Makefile.in: fixed up testsudoers target
15399:
15400: 1995-12-05 18:56 millert
15401:
15402: * configure.in: DCE changes from Jeff Earickson
15403: <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15404: SUDO_FDFLAGS and VISUDO_LDFLAGS
15405:
15406: 1995-12-05 18:17 millert
15407:
15408: * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15409: SUDO_LDFLAGS, VISUDO_LDFLAGS
15410:
15411: 1995-11-27 23:32 millert
15412:
15413: * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15414:
15415: 1995-11-27 23:17 millert
15416:
15417: * check.c: LONG_SKEY_PROMPT is less of a klusge /
15418:
15419: 1995-11-27 23:17 millert
15420:
15421: * configure.in: fixed typos w/ dce stuff
15422:
15423: 1995-11-27 23:14 millert
15424:
15425: * Makefile.in: added dce_pwent.c
15426:
15427: 1995-11-26 13:48 millert
15428:
15429: * INSTALL: amended section on combining authentication mechanisms
15430:
15431: 1995-11-26 13:48 millert
15432:
15433: * PORTING: minor updates for 1.3.6
15434:
15435: 1995-11-26 13:47 millert
15436:
15437: * TROUBLESHOOTING: added 2 more entries
15438:
15439: 1995-11-26 13:39 millert
15440:
15441: * BUGS: updated for 1.3.6
15442:
15443: 1995-11-26 13:39 millert
15444:
15445: * README: overhauled
15446:
15447: 1995-11-25 21:23 millert
15448:
15449: * INSTALL: rewrote for sudo 1.3.6
15450:
15451: 1995-11-25 21:23 millert
15452:
15453: * TROUBLESHOOTING: added 3 entries
15454:
15455: 1995-11-25 13:53 millert
15456:
15457: * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15458: since many includes don't prototype it. gag me.
15459:
15460: 1995-11-25 13:23 millert
15461:
15462: * sudo.h: removed prototype for sudo_getpwuid() since convex C
15463: compiler choked on it.
15464:
15465: 1995-11-25 13:23 millert
15466:
15467: * sudo.c: added prototype for sudo_getpwuid()
15468:
15469: 1995-11-25 13:23 millert
15470:
15471: * lsearch.c: now compiles on strict ANSI compilers
15472:
15473: 1995-11-24 23:56 millert
15474:
15475: * check.c: added LONG_SKEY_PROMPT support
15476:
15477: 1995-11-24 23:55 millert
15478:
15479: * Makefile.in: added extra $'s for make to eat up, yum.
15480:
15481: 1995-11-24 23:38 millert
15482:
15483: * OPTIONS, options.h: added LONG_SKEY_PROMPT
15484:
15485: 1995-11-24 18:48 millert
15486:
15487: * check.c: s/key support now works with normal s/key as well as
15488: logdaemon
15489:
15490: 1995-11-24 18:46 millert
15491:
15492: * options.h, OPTIONS: added SKEY_ONLY
15493:
15494: 1995-11-24 18:46 millert
15495:
15496: * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15497:
15498: 1995-11-24 00:42 millert
15499:
15500: * INSTALL: added DCE note added more AIX notes
15501:
15502: 1995-11-24 00:39 millert
15503:
15504: * sudo.c: now include pthread.h for DCE support
15505:
15506: 1995-11-23 22:22 millert
15507:
15508: * check.c: dce_pwent() is ok after all .,
15509:
15510: 1995-11-23 22:21 millert
15511:
15512: * logging.c: now uses SYSLOG() macro that equates to either
15513: syslog() or syslog_wrapper
15514:
15515: 1995-11-23 21:44 millert
15516:
15517: * dce_pwent.c: minor formatting changes. renamed check() to
15518: somthing less generic
15519:
15520: 1995-11-23 21:27 millert
15521:
15522: * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15523: visudo.c: now uses user_pw_ent and simple macros to get at the
15524: contents
15525:
15526: 1995-11-22 20:35 millert
15527:
15528: * check.c: simpler dec unix C2 support
15529:
15530: 1995-11-22 20:35 millert
15531:
15532: * getspwuid.c: now sets crypt_type for DEC unix C2
15533:
15534: 1995-11-21 18:00 millert
15535:
15536: * configure.in: added csops paths for skey
15537:
15538: 1995-11-21 16:27 millert
15539:
15540: * getspwuid.c: now includes string.h for strdup() prototype
15541:
15542: 1995-11-21 01:47 millert
15543:
15544: * getspwuid.c: fixed a few typos
15545:
15546: 1995-11-20 22:59 millert
15547:
15548: * check.c: now includes skey.h
15549:
15550: 1995-11-20 22:10 millert
15551:
15552: * getspwuid.c: fixed up comments
15553:
15554: 1995-11-20 22:04 millert
15555:
15556: * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15557:
15558: 1995-11-20 22:01 millert
15559:
15560: * sudo.c: now uses sudo_pw_ent
15561:
15562: 1995-11-20 21:50 millert
15563:
15564: * testsudoers.c: now uses sudo_pw_ent
15565:
15566: 1995-11-20 21:40 millert
15567:
15568: * visudo.c: now sets sudo_pw_ent
15569:
15570: 1995-11-20 21:28 millert
15571:
15572: * getspwuid.c: Initial revision
15573:
15574: 1995-11-20 21:28 millert
15575:
15576: * tgetpass.c: moved dce stuff into compat.h
15577:
15578: 1995-11-20 21:27 millert
15579:
15580: * sudo.h, logging.c: now uses sudo_pw_ent
15581:
15582: 1995-11-20 21:27 millert
15583:
15584: * Makefile.in: added sudo_getpwuid.c
15585:
15586: 1995-11-20 21:25 millert
15587:
15588: * compat.h: added dce support
15589:
15590: 1995-11-20 21:13 millert
15591:
15592: * parse.yacc: now uses sudo_pw_ent
15593:
15594: 1995-11-20 14:40 millert
15595:
15596: * check.c: fixed exempt_group stuff for OS's that don't put base
15597: gid in group vector
15598:
15599: 1995-11-20 01:39 millert
15600:
15601: * check.c: S/Key support now works with sunos4 shadow passwords
15602:
15603: 1995-11-19 22:31 millert
15604:
15605: * Makefile.in: fixed clean rule
15606:
15607: 1995-11-19 22:31 millert
15608:
15609: * config.h.in, configure.in: added DCE support
15610:
15611: 1995-11-19 22:30 millert
15612:
15613: * tgetpass.c: DCE & KERB support
15614:
15615: 1995-11-19 22:30 millert
15616:
15617: * check.c: first stab at dce support
15618:
15619: 1995-11-19 22:24 millert
15620:
15621: * dce_pwent.c: now smells like sudo
15622:
15623: 1995-11-19 22:11 millert
15624:
15625: * dce_pwent.c: Initial revision
15626:
15627: 1995-11-19 21:36 millert
15628:
15629: * check.c: skey'd sudo now works w/ normal password as well
15630:
15631: 1995-11-19 18:37 millert
15632:
15633: * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15634: find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15635: ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15636: options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15637: putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15638: tgetpass.c, utime.c, version.h, visudo.c: updated version number
15639:
15640: 1995-11-19 18:32 millert
15641:
15642: * README: updated to reflect version change
15643:
15644: 1995-11-19 18:27 millert
15645:
15646: * configure.in: --with options now line up ++version
15647:
15648: 1995-11-19 18:26 millert
15649:
15650: * sudo.h: removed unecesary S/Key stuff
15651:
15652: 1995-11-19 18:25 millert
15653:
15654: * configure.in: fixed S/Key support
15655:
15656: 1995-11-19 18:24 millert
15657:
15658: * Makefile.in: -I stuff now goes in CPPFLAGS
15659:
15660: 1995-11-19 18:23 millert
15661:
15662: * check.c: fixed SKey support
15663:
15664: 1995-11-19 15:23 millert
15665:
15666: * README: updated version
15667:
15668: 1995-11-19 13:59 millert
15669:
15670: * OPTIONS: fixed description of EXEMPTGROUP
15671:
15672: 1995-11-19 10:47 millert
15673:
15674: * sudo.c: more people use _RLD_ than just alphas...
15675:
15676: 1995-11-18 21:35 millert
15677:
15678: * Makefile.in: replaced $man_prefix with $mandir
15679:
15680: 1995-11-18 21:30 millert
15681:
15682: * configure.in: fixed a typo
15683:
15684: 1995-11-18 21:28 millert
15685:
15686: * Makefile.in: now use more GNU'ish dir names
15687:
15688: 1995-11-18 21:27 millert
15689:
15690: * configure.in: now set *dir correctly (can override from command
15691: line)
15692:
15693: 1995-11-18 19:17 millert
15694:
15695: * sudo.c: now deal with situations where we getwd() fails
15696:
15697: 1995-11-17 00:37 millert
15698:
15699: * Makefile.in: added etc_dir, bin_dir, sbin_dir
15700:
15701: 1995-11-17 00:37 millert
15702:
15703: * configure.in: added sbin_dir
15704:
15705: 1995-11-16 21:28 millert
15706:
15707: * Makefile.in: now ship a flex-generated lex.yy.c
15708:
15709: 1995-11-16 21:09 millert
15710:
15711: * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15712: SUDOERS_OWNER
15713:
15714: 1995-11-16 21:06 millert
15715:
15716: * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15717: overridden via Makefile
15718:
15719: 1995-11-16 21:05 millert
15720:
15721: * options.h: no more error for redefining SUDOERS_OWNER
15722:
15723: 1995-11-16 21:05 millert
15724:
15725: * OPTIONS: expanded SUDOERS_OWNER section
15726:
15727: 1995-11-16 03:05 millert
15728:
15729: * visudo.c: now warn if chown(2) failed
15730:
15731: 1995-11-16 02:55 millert
15732:
15733: * logging.c: better default warning for NO_SUDOERS_FILE
15734:
15735: 1995-11-16 02:54 millert
15736:
15737: * sudo.c: added missing set_perms() no more cryptic message if the
15738: sudoers file is zero length, now just give a parse error
15739:
15740: 1995-11-16 02:42 millert
15741:
15742: * logging.c: better diagnostics if NO_SUDOERS_FILE
15743:
15744: 1995-11-16 02:41 millert
15745:
15746: * sudo.c: check_sudoers() now catches sudoers files that are not
15747: readable (but are stat'able).
15748:
15749: 1995-11-13 01:12 millert
15750:
15751: * configure.in: now add -D__STDC__ for convex cc (not gcc)
15752:
15753: 1995-11-13 00:52 millert
15754:
15755: * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15756: exec_prefix
15757:
15758: 1995-11-13 00:52 millert
15759:
15760: * Makefile.in: now uses exec_prefix & prefix from configure
15761:
15762: 1995-11-13 00:16 millert
15763:
15764: * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15765: parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15766: tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15767: so shadow build trees can have a custom copy of options.h
15768:
15769: 1995-11-13 00:15 millert
15770:
15771: * check.c: user_is_exempt() is no longer a hack, it now uses
15772: getgrnam()
15773:
15774: 1995-11-12 23:56 millert
15775:
15776: * options.h: EXEMPTGROUP is now "sudo"
15777:
15778: 1995-11-12 22:25 millert
15779:
15780: * configure.in: MAN_POSTINSTALL now contains a leading space
15781:
15782: 1995-11-12 22:25 millert
15783:
15784: * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15785: now removes testsudoers in clean:
15786:
15787: 1995-11-12 22:24 millert
15788:
15789: * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15790:
15791: 1995-10-30 15:51 millert
15792:
15793: * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15794: don't get spoofed into using a bogus server
15795:
15796: 1995-09-29 17:50 millert
15797:
15798: * parse.yacc: now explicately initialize match[] tp be FALSE
15799:
15800: 1995-09-23 16:48 millert
15801:
15802: * sudo.c: removed unused variable now passes -Wall
15803:
15804: 1995-09-23 16:48 millert
15805:
15806: * parse.yacc: yyerror and dumpaliases are now void's now passes
15807: -Wall
15808:
15809: 1995-09-23 16:48 millert
15810:
15811: * parse.lex: added prototype for yyerror
15812:
15813: 1995-09-23 16:47 millert
15814:
15815: * interfaces.c: rmeoved unused cruft now passes -Wall
15816:
15817: 1995-09-23 16:47 millert
15818:
15819: * check.c, logging.c, parse.c: now passes -Wall
15820:
15821: 1995-09-23 16:46 millert
15822:
15823: * Makefile.in: fixed headers that moved to emul dir
15824:
15825: 1995-09-23 12:05 millert
15826:
15827: * logging.c: fixed deref of nil pointer if no args
15828:
15829: 1995-09-15 19:18 millert
15830:
15831: * OPTIONS: added a caveat to FQDN section
15832:
15833: 1995-09-13 19:48 millert
15834:
15835: * Makefile.in: more $srcdir support for install targets
15836:
15837: 1995-09-13 17:17 millert
15838:
15839: * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15840: putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15841: visudo.c: don't include malloc.h if we include stdlib.h
15842:
15843: 1995-09-12 21:44 millert
15844:
15845: * parse.yacc: local search.h now lives in emul
15846:
15847: 1995-09-12 21:41 millert
15848:
15849: * lsearch.c: local search.h now lives in emul
15850:
15851: 1995-09-12 21:41 millert
15852:
15853: * check.c, utime.c: local utime.h now lives in emul dir
15854:
15855: 1995-09-12 21:38 millert
15856:
15857: * Makefile.in: added support for building in other than the
15858: sourcedir
15859:
15860: 1995-09-10 14:01 millert
15861:
15862: * OPTIONS: annotated CSOPS_INSULTS option
15863:
15864: 1995-09-10 13:56 millert
15865:
15866: * TROUBLESHOOTING: updated shadow passwords blurb
15867:
15868: 1995-09-09 21:00 millert
15869:
15870: * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15871: shell and passes along foo as the arguments
15872:
15873: 1995-09-09 18:52 millert
15874:
15875: * parse.lex: collapsed pathname and dir sections into one -- its
15876: now less expensive
15877:
15878: 1995-09-09 18:34 millert
15879:
15880: * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15881: append() and fill() now take args to make the above work
15882:
15883: 1995-09-08 20:51 millert
15884:
15885: * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15886: a tty on fd 1 to erroneously have "none" as their tty
15887:
15888: 1995-09-04 15:35 millert
15889:
15890: * check.c: timestampfile is now a global static removed decl of
15891: timestampfile in remove_timestamp since we can just use the
15892: global one
15893:
15894: 1995-09-04 15:28 millert
15895:
15896: * check.c: created touch() to update timestamps added
15897: USE_TTY_TICKETS support (bit of a kludge)
15898:
15899: 1995-09-04 15:28 millert
15900:
15901: * compat.h: added _S_IFDIR and S_ISDIR
15902:
15903: 1995-09-04 15:22 millert
15904:
15905: * OPTIONS, options.h: added USE_TTY_TICKETS
15906:
15907: 1995-09-04 00:38 millert
15908:
15909: * parse.yacc: removed const from casts for lsearch() & lfind() to
15910: placate irix 4.x C compiler
15911:
15912: 1995-09-03 14:12 millert
15913:
15914: * sudo.c: now only strip '/dev/' off of a tty if it starts with
15915: '/dev/'
15916:
15917: 1995-09-03 14:12 millert
15918:
15919: * pathnames.h.in: added _PATH_DEV
15920:
15921: 1995-09-03 14:11 millert
15922:
15923: * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15924: tcgetattr only if have termios.h
15925:
15926: 1995-09-03 14:09 millert
15927:
15928: * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15929: not int for c_?flag
15930:
15931: 1995-09-03 13:19 millert
15932:
15933: * parse.lex, parse.yacc: fixed a spelling error
15934:
15935: 1995-09-03 13:17 millert
15936:
15937: * Makefile.in: fixed typo
15938:
15939: 1995-09-02 12:55 millert
15940:
15941: * Makefile.in: fixed a comment
15942:
15943: 1995-09-02 12:54 millert
15944:
15945: * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15946: now that we dynamically allocate strings they need to be free()'d
15947:
15948: 1995-09-02 12:46 millert
15949:
15950: * parse.lex: dynamically allocates space for strings
15951:
15952: 1995-09-02 12:34 millert
15953:
15954: * sudo.h: no more MAXCOMMANDLENGTH
15955:
15956: 1995-09-01 22:25 millert
15957:
15958: * sudo.h: added decl of tty
15959:
15960: 1995-09-01 22:25 millert
15961:
15962: * logging.c, sudo.c: moved tty stuff into sudo.c
15963:
15964: 1995-09-01 14:18 millert
15965:
15966: * parse.c: fixed a logic bug. Was denying a command if user gave
15967: command line args but there were none in the sudoers file which
15968: is wrong.
15969:
15970: 1995-09-01 01:18 millert
15971:
15972: * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15973:
15974: 1995-09-01 01:13 millert
15975:
15976: * parse.lex: return foo; -> return(foo);
15977:
15978: 1995-09-01 01:03 millert
15979:
15980: * parse.yacc: fixed netgr_matches() prototype
15981:
15982: 1995-09-01 01:02 millert
15983:
15984: * parse.lex: added support for escaping "termination" characters
15985:
15986: 1995-09-01 00:55 millert
15987:
15988: * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
15989: command args
15990:
15991: 1995-09-01 00:50 millert
15992:
15993: * sudo.c: fixed comments
15994:
15995: 1995-09-01 00:49 millert
15996:
15997: * goodpath.c: fixed negation problem (doh!)
15998:
15999: 1995-09-01 00:25 millert
16000:
16001: * parse.yacc: fixed 2nd parameter to lfind()
16002:
16003: 1995-09-01 00:24 millert
16004:
16005: * parse.lex: now do bounds checking in fill() and append()
16006:
16007: 1995-09-01 00:23 millert
16008:
16009: * sudo.c: include netdb.h as we should added a missing void cast
16010: added SHELL_IF_NO_ARGS support now use realloc() properly. would
16011: fail if realloc actually moved the string instead of shrinking it
16012:
16013: 1995-09-01 00:17 millert
16014:
16015: * sample.sudoers: updated with examples of new features
16016:
16017: 1995-09-01 00:05 millert
16018:
16019: * goodpath.c: now set errno to EACCES if not a regular file or not
16020: executable
16021:
16022: 1995-09-01 00:04 millert
16023:
16024: * find_path.c: if given a fully-qualified or relative path we now
16025: check it with sudo_goodpath() and error out with the appropriate
16026: error message if the file does not exist or is not executable
16027:
16028: 1995-09-01 00:03 millert
16029:
16030: * lsearch.c, emul/search.h: now use correct args for lfind
16031:
16032: 1995-09-01 00:03 millert
16033:
16034: * logging.c: added a comment
16035:
16036: 1995-08-31 23:52 millert
16037:
16038: * insults.h: added in CSOps insults
16039:
16040: 1995-08-31 23:51 millert
16041:
16042: * ins_csops.h: Initial revision
16043:
16044: 1995-08-31 23:35 millert
16045:
16046: * tgetpass.c: added RCS id
16047:
16048: 1995-08-31 22:56 millert
16049:
16050: * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16051: HAVE_GETWD
16052:
16053: 1995-08-31 22:55 millert
16054:
16055: * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16056:
16057: 1995-08-31 22:54 millert
16058:
16059: * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16060: -p now works with -s
16061:
16062: 1995-08-31 22:54 millert
16063:
16064: * parse.c: don't try to stat() "pseudo commands" like "validate"
16065:
16066: 1995-08-31 22:53 millert
16067:
16068: * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16069: SHELL_IF_NO_ARGS
16070:
16071: 1995-08-31 22:53 millert
16072:
16073: * configure.in: added SecurID support added other insults to
16074: --with-csops
16075:
16076: 1995-08-31 22:52 millert
16077:
16078: * config.h.in: added HAVE_SECURID
16079:
16080: 1995-08-31 22:52 millert
16081:
16082: * Makefile.in: added clobber target added ins_csops.h now gets
16083: CFLAGS from configure
16084:
16085: 1995-08-31 22:46 millert
16086:
16087: * aclocal.m4: relaxed SUDO_FULL_VOID
16088:
16089: 1995-08-31 22:44 millert
16090:
16091: * visudo.c: function comment blocks are now in same style as rest
16092: of code
16093:
16094: 1995-08-31 22:44 millert
16095:
16096: * testsudoers.c: added support for command line args in
16097: /etc/sudoers
16098:
16099: 1995-08-31 22:43 millert
16100:
16101: * sudoers.man: updated to have command args in the sudoers file
16102:
16103: 1995-08-31 22:42 millert
16104:
16105: * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16106: VARIABLES section
16107:
16108: 1995-08-19 19:32 millert
16109:
16110: * parse.yacc: PATH renamed to COMMAND
16111:
16112: 1995-08-19 19:31 millert
16113:
16114: * parse.lex: it is now a parse error for directories to have args
16115: attached to them
16116:
16117: 1995-08-19 19:30 millert
16118:
16119: * logging.c: now say command args if telling user to buzz off
16120:
16121: 1995-08-19 19:30 millert
16122:
16123: * sudo.c: -s no longer indicates end of args sped up loading on
16124: cmnd_args in load_cmnd()
16125:
16126: 1995-08-19 19:29 millert
16127:
16128: * parse.c: removed an unreachable statement
16129:
16130: 1995-08-19 17:53 millert
16131:
16132: * parse.lex: made more efficient by pulling out the terminators
16133: when in GOTCMND state and making them their own rule
16134:
16135: 1995-08-14 00:07 millert
16136:
16137: * sudo.h: removed MAXLOGLEN since it is no longer used
16138:
16139: 1995-08-14 00:07 millert
16140:
16141: * parse.lex: now allows command args
16142:
16143: 1995-08-14 00:06 millert
16144:
16145: * parse.c: now groks command arguments
16146:
16147: 1995-08-13 23:39 millert
16148:
16149: * logging.c: now sets tty correctly when piped input
16150:
16151: 1995-08-13 23:35 millert
16152:
16153: * sudo.c: fixed loading of cmnd_args (was including command name
16154: too)
16155:
16156: 1995-08-13 23:34 millert
16157:
16158: * logging.c: fixed a core dump due to incorrect if construct
16159:
16160: 1995-08-13 00:33 millert
16161:
16162: * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16163: -lsocket if irix
16164:
16165: 1995-08-13 00:33 millert
16166:
16167: * aclocal.m4: fixed check for ISC
16168:
16169: 1995-08-13 00:32 millert
16170:
16171: * sudo.c: now sets cmnd_args used by log_error() and that will be
16172: used by the parse to check against command args
16173:
16174: 1995-08-13 00:32 millert
16175:
16176: * sudo.h: added cmnd_args
16177:
16178: 1995-08-13 00:31 millert
16179:
16180: * logging.c: now dynamically allocate logline since we can guess at
16181: its size
16182:
16183: 1995-08-05 13:52 millert
16184:
16185: * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16186: buffer remove "register" since the compiler knows more than I do
16187: now do a "basename" of the tty
16188:
16189: 1995-07-31 18:20 millert
16190:
16191: * configure.in: ++version
16192:
16193: 1995-07-30 22:37 millert
16194:
16195: * sudo.h: added shell extern changed MODE_* to be bit masks to
16196: allow for several options together
16197:
16198: 1995-07-30 22:36 millert
16199:
16200: * sudo.c: added -s (shell) option made MODE_* masks so we can do
16201: bitwise & and | to see if multiple flags are set.
16202:
16203: 1995-07-30 22:01 millert
16204:
16205: * check.c: added securid support
16206:
16207: 1995-07-30 14:38 millert
16208:
16209: * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16210: with strcat()
16211:
16212: 1995-07-29 17:17 millert
16213:
16214: * Makefile.in, version.h: ++version
16215:
16216: 1995-07-27 06:52 millert
16217:
16218: * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16219:
16220: 1995-07-26 22:00 millert
16221:
16222: * testsudoers.c: added netgr_matches
16223:
16224: 1995-07-26 21:29 millert
16225:
16226: * parse.c: cleaned up netgr_matches
16227:
16228: 1995-07-26 00:26 millert
16229:
16230: * RUNSON: updated for 1.3.4
16231:
16232: 1995-07-24 21:51 millert
16233:
16234: * Makefile.in: now installs sudoers.man -- really should clean this
16235: up though.
16236:
16237: 1995-07-24 21:18 millert
16238:
16239: * Makefile.in: added sudoers.cat and sudoers.man
16240:
16241: 1995-07-24 21:15 millert
16242:
16243: * sudo.man: pulled out stuff on the sudoers file format into a
16244: separate man page
16245:
16246: 1995-07-24 21:14 millert
16247:
16248: * sudoers.man: Initial revision
16249:
16250: 1995-07-24 21:04 millert
16251:
16252: * HISTORY: fixed up my email address
16253:
16254: 1995-07-24 20:03 millert
16255:
16256: * configure.in: added checks for innetgr and getdomainname
16257:
16258: 1995-07-24 20:02 millert
16259:
16260: * visudo.c: added dummy netgr_matches function
16261:
16262: 1995-07-24 20:01 millert
16263:
16264: * parse.c: added netgr_matches
16265:
16266: 1995-07-24 20:01 millert
16267:
16268: * parse.lex, parse.yacc: added NETGROUP support
16269:
16270: 1995-07-24 20:01 millert
16271:
16272: * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16273:
16274: 1995-07-24 18:07 millert
16275:
16276: * sudo.c: rewrote clean_env() that has rm_env() builtin
16277:
16278: 1995-07-23 19:58 millert
16279:
16280: * check.c: now cast uid to long in sprintf
16281:
16282: 1995-07-23 19:58 millert
16283:
16284: * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16285:
16286: 1995-07-23 19:57 millert
16287:
16288: * options.h: added _INSULTS suffix to HAL & GOONS
16289:
16290: 1995-07-23 19:35 millert
16291:
16292: * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16293: new scheme of insult "unions" end
16294:
16295: 1995-07-23 17:48 millert
16296:
16297: * sudo.c: now uses MAX_UID_T_LEN
16298:
16299: 1995-07-23 17:48 millert
16300:
16301: * configure.in: added SUDO_UID_T_LEN !l
16302:
16303: 1995-07-23 17:48 millert
16304:
16305: * config.h.in: added MAX_UID_T_LEN
16306:
16307: 1995-07-23 17:47 millert
16308:
16309: * check.c: now use MAX_UID_T_LEN
16310:
16311: 1995-07-23 17:47 millert
16312:
16313: * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16314: check
16315:
16316: 1995-07-19 19:05 millert
16317:
16318: * configure.in: corrected version
16319:
16320: 1995-07-19 17:29 millert
16321:
16322: * configure.in: added sco support
16323:
16324: 1995-07-19 17:29 millert
16325:
16326: * aclocal.m4: hack to check for sco
16327:
16328: 1995-07-18 21:27 millert
16329:
16330: * interfaces.c: removed #include <net/route.h> since it was hosing
16331: some OS's
16332:
16333: 1995-07-18 13:35 millert
16334:
16335: * find_path.c: fixed prreadlink() prototype
16336:
16337: 1995-07-17 23:54 millert
16338:
16339: * check.c: added parens in #if's
16340:
16341: 1995-07-17 23:53 millert
16342:
16343: * configure.in: added SPW_ prefix
16344:
16345: 1995-07-17 23:20 millert
16346:
16347: * sudo.h: moved SPW_* to config.h.in
16348:
16349: 1995-07-17 23:19 millert
16350:
16351: * sudo.c: added a set of parens
16352:
16353: 1995-07-17 23:19 millert
16354:
16355: * config.h.in: added SPW_*
16356:
16357: 1995-07-17 22:50 millert
16358:
16359: * sudo.h: added SPW_* reordered error codes
16360:
16361: 1995-07-17 22:49 millert
16362:
16363: * check.c: moved SPW_* to sudo.h
16364:
16365: 1995-07-17 14:29 millert
16366:
16367: * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16368:
16369: 1995-07-17 14:29 millert
16370:
16371: * configure.in: AUTH -> SECUREWARE
16372:
16373: 1995-07-17 14:29 millert
16374:
16375: * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16376:
16377: 1995-07-17 00:22 millert
16378:
16379: * check.c: now uses SHADOW_TYPE to make shadow pw support more
16380: readable and modular. It's a start...
16381:
16382: 1995-07-17 00:21 millert
16383:
16384: * configure.in: added autodetection of shadow passwords
16385:
16386: 1995-07-17 00:20 millert
16387:
16388: * sudo.c: now uses SHADOW_TYPE define
16389:
16390: 1995-07-17 00:19 millert
16391:
16392: * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16393: defines
16394:
16395: 1995-07-17 00:19 millert
16396:
16397: * aclocal.m4: added SUDO_CHECK_SHADOW
16398:
16399: 1995-07-12 17:09 millert
16400:
16401: * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16402: took out test for memmove() since we dno longer use it...
16403:
16404: 1995-07-12 17:08 millert
16405:
16406: * CHANGES: updated
16407:
16408: 1995-07-12 17:05 millert
16409:
16410: * logging.c: added BROKEN_SYSLOG support
16411:
16412: 1995-07-12 17:05 millert
16413:
16414: * config.h.in: added BROKEN_SYSLOG
16415:
16416: 1995-07-12 17:04 millert
16417:
16418: * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16419: allow for a machine udpating its time from a server
16420:
16421: 1995-07-12 17:04 millert
16422:
16423: * sudo.man: added 2 security notes updated Nieusma's email addr
16424:
16425: 1995-07-12 14:18 millert
16426:
16427: * lsearch.c: changed a memmove() to memcpy() since we don't have to
16428: worry about overlapping segments.
16429:
16430: 1995-07-11 15:41 millert
16431:
16432: * interfaces.c: cleanup up the loop when interfaces are groped in
16433: so that it is readable
16434:
16435: 1995-07-11 14:52 millert
16436:
16437: * Makefile.in, version.h: ++version
16438:
16439: 1995-07-09 18:17 millert
16440:
16441: * CHANGES: annotated 124-126
16442:
16443: 1995-07-07 16:06 millert
16444:
16445: * check.c: fixed permissions check on /tmp/.odus
16446:
16447: 1995-07-06 19:35 millert
16448:
16449: * check.c: fixed some comments
16450:
16451: 1995-07-06 14:49 millert
16452:
16453: * check.c: now checks owner & mode of timedir also checks for bogus
16454: dates on timestamp file
16455:
16456: 1995-07-06 14:49 millert
16457:
16458: * OPTIONS: updated TIMEOUT info
16459:
16460: 1995-07-06 14:48 millert
16461:
16462: * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16463:
16464: 1995-07-06 14:47 millert
16465:
16466: * compat.h: added definition of S_IRWXU
16467:
16468: 1995-07-06 14:47 millert
16469:
16470: * CHANGES: updated
16471:
16472: 1995-07-03 14:16 millert
16473:
16474: * interfaces.c: added #ifdef to make it compile on strange arches
16475:
16476: 1995-07-02 18:13 millert
16477:
16478: * aclocal.m4: fixed check for fulkl void impl.
16479:
16480: 1995-07-02 09:56 millert
16481:
16482: * check.c: added mssing "static"
16483:
16484: 1995-07-01 20:41 millert
16485:
16486: * insults.h: replaced #elif with #else #if constructs for ancient C
16487: compilers
16488:
16489: 1995-07-01 20:18 millert
16490:
16491: * INSTALL: updated irix c2 & kerb5 info
16492:
16493: 1995-07-01 20:15 millert
16494:
16495: * configure.in: added shadow pw support for irix
16496:
16497: 1995-07-01 16:07 millert
16498:
16499: * CHANGES: last changes for sudo 1.3.3
16500:
16501: 1995-07-01 16:07 millert
16502:
16503: * TODO, BUGS: updated
16504:
16505: 1995-07-01 16:04 millert
16506:
16507: * configure.in: now calls SUDO_SOCK_SA_LEN
16508:
16509: 1995-07-01 16:04 millert
16510:
16511: * config.h.in: added HAVE_SA_LEN
16512:
16513: 1995-07-01 16:04 millert
16514:
16515: * aclocal.m4: added SUDO_SOCK_SA_LEN
16516:
16517: 1995-07-01 15:49 millert
16518:
16519: * interfaces.c: now works with ip implementations that use sa_len
16520: in sockaddr
16521:
16522: 1995-07-01 14:26 millert
16523:
16524: * INSTALL: added note about buggy AIX compiler
16525:
16526: 1995-07-01 14:24 millert
16527:
16528: * interfaces.c: now include sys/time.h for AIX
16529:
16530: 1995-06-27 22:35 millert
16531:
16532: * Makefile.in: getcwd -> getwd
16533:
16534: 1995-06-27 21:28 millert
16535:
16536: * interfaces.c: now works for ISC and others. yay.
16537:
16538: 1995-06-26 14:24 millert
16539:
16540: * Makefile.in, version.h: version++
16541:
16542: 1995-06-22 20:26 millert
16543:
16544: * aclocal.m4: fixed test for full void impl
16545:
16546: 1995-06-22 20:25 millert
16547:
16548: * sudo.c: now check to see that st_dev is non-zero before assuming
16549: that we are being spoofed
16550:
16551: 1995-06-20 16:56 millert
16552:
16553: * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16554: AC_FUNC_UTIME_NULL
16555:
16556: 1995-06-19 16:32 millert
16557:
16558: * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16559:
16560: 1995-06-19 16:10 millert
16561:
16562: * logging.c: added cast for ttyname()
16563:
16564: 1995-06-19 15:23 millert
16565:
16566: * configure.in: fixed typo
16567:
16568: 1995-06-19 15:19 millert
16569:
16570: * check.c: now deal correctly with all known variation of utime()
16571: -- yippe
16572:
16573: 1995-06-19 15:19 millert
16574:
16575: * configure.in: added SUDO_FUNC_UTIME_POSIX
16576:
16577: 1995-06-19 15:19 millert
16578:
16579: * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16580:
16581: 1995-06-19 15:14 millert
16582:
16583: * config.h.in: added HAVE_UTIME_POSIX
16584:
16585: 1995-06-19 13:38 millert
16586:
16587: * check.c: fixed a typo
16588:
16589: 1995-06-19 13:29 millert
16590:
16591: * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16592:
16593: 1995-06-19 13:20 millert
16594:
16595: * check.c: fixed fascist C compiler warning
16596:
16597: 1995-06-18 23:14 millert
16598:
16599: * interfaces.c: now set strioctl.ic_timout in STRSET() now
16600: initialize num_interfaces to 0 (just to be anal)
16601:
16602: 1995-06-18 18:06 millert
16603:
16604: * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16605:
16606: 1995-06-18 18:05 millert
16607:
16608: * logging.c: added tty logging
16609:
16610: 1995-06-18 16:04 millert
16611:
16612: * interfaces.c: reworked the ISC code
16613:
16614: 1995-06-18 15:27 millert
16615:
16616: * Makefile.in, version.h: updated version
16617:
16618: 1995-06-18 15:24 millert
16619:
16620: * check.c: now expect old-style utime(3) if utime() can't take NULL
16621: as an arg
16622:
16623: 1995-06-18 15:08 millert
16624:
16625: * configure.in: added check for utime.h
16626:
16627: 1995-06-18 15:08 millert
16628:
16629: * config.h.in: added HAVE_UTIME_H
16630:
16631: 1995-06-18 14:48 millert
16632:
16633: * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16634:
16635: 1995-06-18 13:58 millert
16636:
16637: * configure.in: now search for kerb libs and includes
16638:
16639: 1995-06-18 13:03 millert
16640:
16641: * check.c: added support for utime(2)'s that can't take a NULL
16642: parameter
16643:
16644: 1995-06-18 13:03 millert
16645:
16646: * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16647: t belongs
16648:
16649: 1995-06-17 20:46 millert
16650:
16651: * configure.in: added utime(s) stuff
16652:
16653: 1995-06-17 20:46 millert
16654:
16655: * check.c: now use utime()
16656:
16657: 1995-06-17 20:46 millert
16658:
16659: * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16660:
16661: 1995-06-17 19:12 millert
16662:
16663: * utime.c: now use HAVE_UTIME_NULL
16664:
16665: 1995-06-17 19:02 millert
16666:
16667: * utime.c, emul/utime.h: Initial revision
16668:
16669: 1995-06-17 18:24 millert
16670:
16671: * check.c: need to setuid(0) to make kerb4 stuff work.
16672:
16673: 1995-06-17 18:14 millert
16674:
16675: * tgetpass.c: no more special case for kerberos
16676:
16677: 1995-06-17 18:13 millert
16678:
16679: * config.h.in: took out setreuid and setresuid stuff added kerb5
16680: stuff (use kerb4 emulation)
16681:
16682: 1995-06-17 18:13 millert
16683:
16684: * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16685: to 128 if kerberos
16686:
16687: 1995-06-17 18:12 millert
16688:
16689: * check.c: now use private ticket file for kerberos support to
16690: avoid trouncing on system one
16691:
16692: 1995-06-15 00:48 millert
16693:
16694: * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16695:
16696: 1995-06-15 00:47 millert
16697:
16698: * sudo.c: added anti-spoofing support
16699:
16700: 1995-06-15 00:47 millert
16701:
16702: * parse.c: now use global cmnd_st
16703:
16704: 1995-06-15 00:47 millert
16705:
16706: * logging.c: added SPOOF_ATTEMPT suypport
16707:
16708: 1995-06-14 23:41 millert
16709:
16710: * testsudoers.c, visudo.c: added void casts where appropriate
16711:
16712: 1995-06-14 23:40 millert
16713:
16714: * parse.yacc: fixed up spacing and added void casts where
16715: appropriate
16716:
16717: 1995-06-14 23:27 millert
16718:
16719: * sudo.c: fixed problem with "-p prompt" but no args
16720:
16721: 1995-06-14 04:43 millert
16722:
16723: * sudo.man: added BUGS and annotated -l description
16724:
16725: 1995-06-14 04:43 millert
16726:
16727: * sudo.h: validate() now takes a flag
16728:
16729: 1995-06-14 04:43 millert
16730:
16731: * sudo.c: validate() now takes a flag added -l
16732:
16733: 1995-06-14 04:42 millert
16734:
16735: * parse.yacc: added support for -l
16736:
16737: 1995-06-14 04:41 millert
16738:
16739: * parse.c: validate() now takes a flag that says whether or not to
16740: check the command
16741:
16742: 1995-06-07 21:36 millert
16743:
16744: * logging.c: now deals with Argv == 1
16745:
16746: 1995-06-07 21:34 millert
16747:
16748: * sudo.man: added -p option
16749:
16750: 1995-06-07 21:27 millert
16751:
16752: * sudo.c: added prompt support reworked parse_args()
16753:
16754: 1995-06-07 20:49 millert
16755:
16756: * sudo.h: added prompt
16757:
16758: 1995-06-07 20:49 millert
16759:
16760: * options.h: added PASSPROMPT
16761:
16762: 1995-06-07 20:48 millert
16763:
16764: * check.c: now use BUFSIZ as length of kerb password added kpass so
16765: pass is always a char * now use prompt global when asking for a
16766: password
16767:
16768: 1995-06-07 20:47 millert
16769:
16770: * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16771:
16772: 1995-06-07 20:43 millert
16773:
16774: * OPTIONS: added PASSPROMPT
16775:
16776: 1995-06-07 01:44 millert
16777:
16778: * configure.in: only look for -lufc or -lcrypt if crypt() not in
16779: libc
16780:
16781: 1995-06-07 01:43 millert
16782:
16783: * check.c: don't exit on kerb error, just warn if k_errno ==
16784: KDC_PR_UNKNOWN (unknown user) silently fail
16785:
16786: 1995-06-06 22:44 millert
16787:
16788: * INSTALL: added kerb4 note
16789:
16790: 1995-06-06 22:43 millert
16791:
16792: * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16793:
16794: 1995-06-06 22:41 millert
16795:
16796: * check.c: removed debugging printf
16797:
16798: 1995-06-06 22:33 millert
16799:
16800: * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16801: setresuid
16802:
16803: 1995-06-06 22:32 millert
16804:
16805: * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16806: HAVE_SETRESUID
16807:
16808: 1995-06-06 22:32 millert
16809:
16810: * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16811: setreuid emulation with setresuid if applic
16812:
16813: 1995-06-06 22:31 millert
16814:
16815: * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16816: chown() hack if no setreuid() or a broken one
16817:
16818: 1995-06-05 23:44 millert
16819:
16820: * config.h.in: added HAVE_KERBEROS
16821:
16822: 1995-06-05 23:43 millert
16823:
16824: * tgetpass.c: added KERBEROS support (long passwords)
16825:
16826: 1995-06-05 23:42 millert
16827:
16828: * check.c, configure.in: added kerberos support
16829:
16830: 1995-06-03 19:36 millert
16831:
16832: * sudo.h: added MODE_BACKGROUND
16833:
16834: 1995-06-03 19:36 millert
16835:
16836: * sudo.man: escaped dashes added -b option
16837:
16838: 1995-06-03 19:34 millert
16839:
16840: * sudo.c: added -b option
16841:
16842: 1995-06-03 18:52 millert
16843:
16844: * check.c: added crypt() for osf/1 3.x enhanced secuiry
16845:
16846: 1995-06-03 18:18 millert
16847:
16848: * configure.in: now check for -lcrypt
16849:
16850: 1995-06-03 18:00 millert
16851:
16852: * interfaces.c: added ENXIO like EADDRNOTAVAIL
16853:
16854: 1995-05-07 23:14 millert
16855:
16856: * configure.in: now emulate getwd(), not getcwd()
16857:
16858: 1995-05-07 23:13 millert
16859:
16860: * sudo.c: getcwd() -> getwd()
16861:
16862: 1995-05-07 23:12 millert
16863:
16864: * getwd.c: getcwd -> getwd
16865:
16866: 1995-05-02 01:34 millert
16867:
16868: * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16869:
16870: 1995-05-02 01:34 millert
16871:
16872: * insults.h: broke out insults into separate include files
16873:
16874: 1995-05-02 01:32 millert
16875:
16876: * options.h, OPTIONS: added GOONS
16877:
16878: 1995-05-02 01:32 millert
16879:
16880: * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16881:
16882: 1995-05-01 23:34 millert
16883:
16884: * Makefile.in, version.h: ++version
16885:
16886: 1995-05-01 23:34 millert
16887:
16888: * visudo.c: moved signal handler setup to setup_signals()
16889:
16890: 1995-05-01 23:33 millert
16891:
16892: * sudo.h: added load_interfaces()
16893:
16894: 1995-05-01 23:33 millert
16895:
16896: * sudo.c: moved load_interfaces to interfaces.c
16897:
16898: 1995-05-01 23:33 millert
16899:
16900: * parse.yacc: added clearaliases
16901:
16902: 1995-05-01 23:33 millert
16903:
16904: * OPTIONS, options.h: added FAST_MATCH
16905:
16906: 1995-05-01 23:32 millert
16907:
16908: * parse.lex: now uses clearaliases variable
16909:
16910: 1995-05-01 23:31 millert
16911:
16912: * interfaces.c: Initial revision
16913:
16914: 1995-05-01 23:31 millert
16915:
16916: * Makefile.in: added interfaces.[co]
16917:
16918: 1995-05-01 23:30 millert
16919:
16920: * testsudoers.c: now uses ip addrs and netmasks via
16921: load_interfaces()
16922:
16923: 1995-05-01 22:47 millert
16924:
16925: * sudo.c: now remove IFS instead of setting to "sane" value
16926:
16927: 1995-05-01 16:30 millert
16928:
16929: * parse.c: added FAST_MATCH
16930:
16931: 1995-04-29 20:19 millert
16932:
16933: * Makefile.in: sudo_goodpath.c-> goodpath.c
16934:
16935: 1995-04-29 20:15 millert
16936:
16937: * sudo.c: added Andy's new ISC changes
16938:
16939: 1995-04-14 14:06 millert
16940:
16941: * OPTIONS: added a sentence to SECURE_PATH info
16942:
16943: 1995-04-14 13:57 millert
16944:
16945: * BUGS: added one
16946:
16947: 1995-04-14 13:54 millert
16948:
16949: * RUNSON, CHANGES: updated
16950:
16951: 1995-04-13 17:04 millert
16952:
16953: * RUNSON: updated for beta3
16954:
16955: 1995-04-13 14:32 millert
16956:
16957: * Makefile.in, version.h: ++version
16958:
16959: 1995-04-13 13:56 millert
16960:
16961: * aclocal.m4: sendmail is now looked for in /usr/ucblib
16962:
16963: 1995-04-13 13:54 millert
16964:
16965: * sudo.c: fixed indentation
16966:
16967: 1995-04-13 13:35 millert
16968:
16969: * aclocal.m4: fixed a typo
16970:
16971: 1995-04-13 13:19 millert
16972:
16973: * sudo.c: updated ISC mods
16974:
16975: 1995-04-13 13:19 millert
16976:
16977: * configure.in: added unixware case
16978:
16979: 1995-04-13 13:19 millert
16980:
16981: * check.c: user_is_exempt is no longer hidden
16982:
16983: 1995-04-13 13:19 millert
16984:
16985: * RUNSON: updated
16986:
16987: 1995-04-13 13:19 millert
16988:
16989: * aclocal.m4: isc and riscos changes
16990:
16991: 1995-04-13 13:18 millert
16992:
16993: * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
16994: SECURE_PATH
16995:
16996: 1995-04-13 13:18 millert
16997:
16998: * Makefile.in: fixed a typo and added testsudoers stuff
16999:
17000: 1995-04-13 12:34 millert
17001:
17002: * testsudoers.c: Initial revision
17003:
17004: 1995-04-12 19:31 millert
17005:
17006: * parse.yacc: applied fixed patch from Chris
17007:
17008: 1995-04-11 14:30 millert
17009:
17010: * Makefile.in: fixed a typo
17011:
17012: 1995-04-11 14:14 millert
17013:
17014: * parse.yacc: added a set of braces for bison
17015:
17016: 1995-04-11 14:01 millert
17017:
17018: * parse.yacc: merged in Chris' changes to dekludge the parser.
17019:
17020: 1995-04-11 00:38 millert
17021:
17022: * logging.c: send_mail() was calling find_path() which is wrong
17023: since find_path() stores cmnd in a static var. Anyhow, it
17024: doesn't make much sense since MAILER should always be fully
17025: qualified
17026:
17027: 1995-04-10 19:51 millert
17028:
17029: * sample.sudoers: added User_Alias stuff
17030:
17031: 1995-04-10 19:50 millert
17032:
17033: * aclocal.m4: SUDO_NEXT now looks for
17034: /usr/lib/NextStep/software_version
17035:
17036: 1995-04-10 19:50 millert
17037:
17038: * RUNSON: added DEC UNIX 3.0 w/ gcc
17039:
17040: 1995-04-10 19:49 millert
17041:
17042: * visudo.c: Exit was being used in places where exit should be used
17043:
17044: 1995-04-10 19:44 millert
17045:
17046: * sudoers: added "User alias specification"
17047:
17048: 1995-04-10 18:04 millert
17049:
17050: * parse.yacc: fixed probs caused by making nslots and naliases a
17051: size_t
17052:
17053: 1995-04-10 15:09 millert
17054:
17055: * RUNSON: added KSR, upped rev to 1.3.1b2
17056:
17057: 1995-04-10 15:07 millert
17058:
17059: * logging.c, parse.yacc: 1024 -> BUFSIZ
17060:
17061: 1995-04-10 15:05 millert
17062:
17063: * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17064: to appease lsearch on 64-bit machines
17065:
17066: 1995-04-09 19:30 millert
17067:
17068: * TODO: did a bunch of things and added a bunch :-)
17069:
17070: 1995-04-09 19:30 millert
17071:
17072: * PORTING: updated
17073:
17074: 1995-04-09 19:24 millert
17075:
17076: * visudo.man: closer to BSD manpage style
17077:
17078: 1995-04-09 19:15 millert
17079:
17080: * sudo.man: closer to standard BSD man format
17081:
17082: 1995-04-09 18:58 millert
17083:
17084: * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17085: sudo.h, version.h, emul/search.h: added RCS id
17086:
17087: 1995-04-09 17:35 millert
17088:
17089: * sudo.h: removed crufty #defines that are no longer used
17090:
17091: 1995-04-09 17:13 millert
17092:
17093: * BUGS: fixed a bug
17094:
17095: 1995-04-09 17:12 millert
17096:
17097: * sudo.man: updated based on sudo changes
17098:
17099: 1995-04-09 17:11 millert
17100:
17101: * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17102: keyword as well as a NAME or ALIAS
17103:
17104: 1995-04-09 17:11 millert
17105:
17106: * CHANGES: updated
17107:
17108: 1995-04-09 17:04 millert
17109:
17110: * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17111:
17112: 1995-04-09 15:24 millert
17113:
17114: * aclocal.m4: fixed bug with full void impl check
17115:
17116: 1995-04-08 23:11 millert
17117:
17118: * parse.yacc: fixed User_Alias supoprt
17119:
17120: 1995-04-08 22:27 millert
17121:
17122: * parse.yacc: added stubs for User_Alias support
17123:
17124: 1995-04-08 22:27 millert
17125:
17126: * sudo.c: now sets removes # bogus interfaces from num_interfaces
17127:
17128: 1995-04-08 22:26 millert
17129:
17130: * parse.lex: added User_Alias support
17131:
17132: 1995-04-07 21:10 millert
17133:
17134: * Makefile.in: removed extraneous TODO
17135:
17136: 1995-04-07 19:48 millert
17137:
17138: * visudo.c: ntwk_matches -> addr_matches
17139:
17140: 1995-04-07 15:38 millert
17141:
17142: * parse.yacc: ntwk_matches -> addr_matches
17143:
17144: 1995-04-07 15:37 millert
17145:
17146: * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17147: inet_network() (which expects octet boundaries) fixes for OSF
17148: (sizeof(int) != sizeof(long))
17149:
17150: 1995-04-07 15:08 millert
17151:
17152: * sudo.c: took out debugging info
17153:
17154: 1995-04-06 23:45 millert
17155:
17156: * aclocal.m4: OS was being set to unknown before non-uname based
17157: host checks. This caused no checks to happen since $OS was not
17158: zero-length.
17159:
17160: 1995-04-06 23:30 millert
17161:
17162: * sudo.c: fixed loading of interfaces struct still has debugging
17163: info in though
17164:
17165: 1995-04-06 22:23 millert
17166:
17167: * parse.c: fixed typo
17168:
17169: 1995-04-06 16:17 millert
17170:
17171: * Makefile.in: ++version
17172:
17173: 1995-04-06 16:16 millert
17174:
17175: * version.h: ++
17176:
17177: 1995-04-06 16:16 millert
17178:
17179: * visudo.c: removed extraneous extern decl of "top
17180:
17181: 1995-04-06 16:14 millert
17182:
17183: * visudo.c: now zeros "top"
17184:
17185: 1995-04-06 16:13 millert
17186:
17187: * parse.yacc: removed parser_cleanup (no need for it now)
17188:
17189: 1995-04-06 16:13 millert
17190:
17191: * parse.lex: now calls reset_aliases() directly
17192:
17193: 1995-04-04 18:21 millert
17194:
17195: * OPTIONS: added a sentence to SECURE_PATH description
17196:
17197: 1995-04-04 18:17 millert
17198:
17199: * parse.c: fixed my stupid bug where I used NAMLEN on something I
17200: wanted to just get the name from. argh.
17201:
17202: 1995-04-03 16:58 millert
17203:
17204: * lsearch.c: fixed argument order of memmove() that i hosed when
17205: converting from bcopy(). arghh.
17206:
17207: 1995-04-03 15:33 millert
17208:
17209: * Makefile.in: finally fixed DISTFILES line
17210:
17211: 1995-04-03 15:21 millert
17212:
17213: * Makefile.in: tabs -> spaces
17214:
17215: 1995-04-03 15:15 millert
17216:
17217: * Makefile.in: added missing files to DISTFILES
17218:
17219: 1995-04-03 14:50 millert
17220:
17221: * Makefile.in: SUPPORTED -> RUNSON
17222:
17223: 1995-04-01 03:12 millert
17224:
17225: * TODO: updated
17226:
17227: 1995-04-01 01:54 millert
17228:
17229: * RUNSON: updated for pl5b1 release
17230:
17231: 1995-04-01 01:53 millert
17232:
17233: * BUGS, TODO: updated
17234:
17235: 1995-04-01 01:52 millert
17236:
17237: * check.c: fixed bug where if you hit return at first sudo prompt
17238: it would still log as a failure
17239:
17240: 1995-04-01 01:29 millert
17241:
17242: * CHANGES: updated
17243:
17244: 1995-04-01 01:25 millert
17245:
17246: * aclocal.m4: better test for bogus void * implementation
17247:
17248: 1995-03-31 20:33 millert
17249:
17250: * logging.c: added PASSWORDS_NOT_CORRECT
17251:
17252: 1995-03-31 20:32 millert
17253:
17254: * check.c: added PASSWORDS_NOT_CORRECT stuff]
17255:
17256: 1995-03-31 20:30 millert
17257:
17258: * sudo.h: added PASSWORDS_NOT_CORRECT
17259:
17260: 1995-03-31 19:16 millert
17261:
17262: * tgetpass.c: moved pathnames.h
17263:
17264: 1995-03-31 19:16 millert
17265:
17266: * sudo.c: removed some unused vars and fixed up uid2str
17267:
17268: 1995-03-31 19:15 millert
17269:
17270: * putenv.c: moved compat.h
17271:
17272: 1995-03-31 19:14 millert
17273:
17274: * getcwd.c, getwd.c: added pathnames.h
17275:
17276: 1995-03-31 18:18 millert
17277:
17278: * parse.yacc: fixed a typo I introduced in the last checkin :-(
17279:
17280: 1995-03-31 18:11 millert
17281:
17282: * parse.lex: can't have #ifdef's where N is defined so just do this
17283: the broken way for AIX
17284:
17285: 1995-03-31 18:08 millert
17286:
17287: * parse.yacc: better hack from Chris (but still a hack)
17288:
17289: 1995-03-31 18:05 millert
17290:
17291: * parse.lex: stupid hack for broken aix lex
17292:
17293: 1995-03-31 17:47 millert
17294:
17295: * tgetpass.c: now includes compat.h
17296:
17297: 1995-03-31 17:27 millert
17298:
17299: * visudo.c: now includes fcntl.h
17300:
17301: 1995-03-31 17:27 millert
17302:
17303: * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17304:
17305: 1995-03-31 16:12 millert
17306:
17307: * parse.yacc: dirty hack to fix parser bug. i don't really like
17308: this but it works for now...
17309:
17310: 1995-03-31 16:12 millert
17311:
17312: * sudo.c: uid2str is now static like the prototype says
17313:
17314: 1995-03-29 23:48 millert
17315:
17316: * RUNSON: Initial revision
17317:
17318: 1995-03-29 23:47 millert
17319:
17320: * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17321:
17322: 1995-03-29 23:46 millert
17323:
17324: * sudo.c: check_sudoers now returns an error code and sudo calls
17325: inform_user and log_error based on the return value.
17326:
17327: 1995-03-29 23:45 millert
17328:
17329: * logging.c, sudo.h: added entries for new errors
17330:
17331: 1995-03-29 23:03 millert
17332:
17333: * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17334: sudoers file
17335:
17336: 1995-03-29 22:52 millert
17337:
17338: * Makefile.in: took out testsudoers
17339:
17340: 1995-03-29 22:36 millert
17341:
17342: * sudo.c: now explicately checks that it is setuid root
17343:
17344: 1995-03-29 22:28 millert
17345:
17346: * sudo.c: If a user has no passwd entry sudo would segv (writing to
17347: a garbage pointer). Now allocate space before writing :-)
17348:
17349: 1995-03-29 22:06 millert
17350:
17351: * configure.in: reordered AC_CHECK_FUNCS
17352:
17353: 1995-03-29 22:06 millert
17354:
17355: * config.h.in: fixed memset macro
17356:
17357: 1995-03-29 21:47 millert
17358:
17359: * logging.c: bzero -> memset when a parse error is logged the line
17360: number of the error is now logged too
17361:
17362: 1995-03-29 21:46 millert
17363:
17364: * tgetpass.c, visudo.c: bzero -> memset
17365:
17366: 1995-03-29 21:46 millert
17367:
17368: * INSTALL: added Sunos to blurb about c2 security
17369:
17370: 1995-03-29 21:45 millert
17371:
17372: * configure.in: added a SUN4 define for C2 security
17373:
17374: 1995-03-29 21:44 millert
17375:
17376: * config.h.in: bcopy -> memmove bzero -> memset
17377:
17378: 1995-03-29 21:43 millert
17379:
17380: * lsearch.c: bcopy -> memmove char * -> VOID *
17381:
17382: 1995-03-29 21:30 millert
17383:
17384: * check.c: added support for sunos with C2 security
17385:
17386: 1995-03-29 21:12 millert
17387:
17388: * OPTIONS, options.h: reordered
17389:
17390: 1995-03-29 21:12 millert
17391:
17392: * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17393:
17394: 1995-03-29 21:12 millert
17395:
17396: * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17397:
17398: 1995-03-29 21:12 millert
17399:
17400: * config.h.in: added _SUDO_PATH_LOGFILE
17401:
17402: 1995-03-29 21:11 millert
17403:
17404: * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17405: added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17406: too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17407:
17408: 1995-03-29 18:17 millert
17409:
17410: * TROUBLESHOOTING: Initial revision
17411:
17412: 1995-03-29 17:59 millert
17413:
17414: * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17415: load_global() to work around a problem is trusted hpux shadow
17416: passwords. yuck.
17417:
17418: 1995-03-29 17:41 millert
17419:
17420: * parse.yacc: backed out a change in malloc/realloc
17421:
17422: 1995-03-29 17:38 millert
17423:
17424: * parse.yacc: now include stdlib.h
17425:
17426: 1995-03-29 17:22 millert
17427:
17428: * visudo.c: now do an freopen() of the stmp file so that yyin will
17429: always point to the same thing. This is important for flex since
17430: we are doing a YY_NEWFILE
17431:
17432: 1995-03-29 17:20 millert
17433:
17434: * parse.yacc: replaced yywrap() with parser_cleanup() since
17435: yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17436: sigh.
17437:
17438: 1995-03-29 17:18 millert
17439:
17440: * parse.lex: now have a rule that matches anything that doesn't
17441: match an explicite rule. well, you know what i mean (. matches
17442: anything not yet matched). However, this means that there is
17443: input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17444: So, yywrap has moved into parse.lex and it calls parser_cleanup()
17445: which is most of the old yywrap() sigh.
17446:
17447: 1995-03-29 17:17 millert
17448:
17449: * SUPPORTED: no longer used
17450:
17451: 1995-03-29 16:13 millert
17452:
17453: * getcwd.c, getwd.c: moved compat.h to be the last include file
17454:
17455: 1995-03-29 16:11 millert
17456:
17457: * parse.yacc: fixed type of aliascmp() args
17458:
17459: 1995-03-29 15:58 millert
17460:
17461: * find_path.c: NULL -> '\0'
17462:
17463: 1995-03-29 15:42 millert
17464:
17465: * parse.yacc: added casts to lfind and lsearch args for irix
17466:
17467: 1995-03-29 08:20 millert
17468:
17469: * Makefile.in: bsdinstall -> install-sh
17470:
17471: 1995-03-29 08:20 millert
17472:
17473: * INSTALL: added info about make realclean
17474:
17475: 1995-03-29 08:17 millert
17476:
17477: * Makefile.in: updated VERSION added dependencies for visudo.cat
17478:
17479: 1995-03-29 08:17 millert
17480:
17481: * version.h: -> pl5b1
17482:
17483: 1995-03-29 08:16 millert
17484:
17485: * sudo.c: took out -l
17486:
17487: 1995-03-29 00:03 millert
17488:
17489: * Makefile.in: now there is a real visudo.man and visudo.cat
17490:
17491: 1995-03-28 23:54 millert
17492:
17493: * sudo.man: took out visudo stuff
17494:
17495: 1995-03-28 23:54 millert
17496:
17497: * visudo.man: Initial revision
17498:
17499: 1995-03-28 23:12 millert
17500:
17501: * parse.c, parse.lex, parse.yacc: updated copyright
17502:
17503: 1995-03-28 23:05 millert
17504:
17505: * README: updated for pl5
17506:
17507: 1995-03-28 20:02 millert
17508:
17509: * sudo.man: updated Nieusma & Hieb email addresses
17510:
17511: 1995-03-28 19:57 millert
17512:
17513: * INSTALL: updated to include options.h and OPTIONS
17514:
17515: 1995-03-28 19:35 millert
17516:
17517: * CHANGES, TODO: updated
17518:
17519: 1995-03-28 19:35 millert
17520:
17521: * BUGS: eliminated bug #1 (yay)
17522:
17523: 1995-03-28 19:31 millert
17524:
17525: * configure.in: sunos no longer gets linked statically
17526:
17527: 1995-03-28 18:58 millert
17528:
17529: * parse.lex: prototype now uses __P()
17530:
17531: 1995-03-28 18:49 millert
17532:
17533: * parse.lex: make fill() non-ansi
17534:
17535: 1995-03-28 15:26 millert
17536:
17537: * parse.c: made -v (validate) work
17538:
17539: 1995-03-28 15:26 millert
17540:
17541: * logging.c: now gives host
17542:
17543: 1995-03-28 10:34 millert
17544:
17545: * find_path.c: don't check for execute/statable if fq or relative
17546: path given
17547:
17548: 1995-03-28 01:07 millert
17549:
17550: * parse.c: added a cast
17551:
17552: 1995-03-28 00:49 millert
17553:
17554: * visudo.c: now include ctype.h for islower and tolower macros
17555:
17556: 1995-03-28 00:48 millert
17557:
17558: * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17559:
17560: 1995-03-28 00:48 millert
17561:
17562: * sudo.c: moved a set of parens
17563:
17564: 1995-03-28 00:48 millert
17565:
17566: * strdup.c: now include compat.h
17567:
17568: 1995-03-28 00:47 millert
17569:
17570: * parse.yacc: now cast malloc & realloc return vals added search
17571: for HAVE_LSEARCH now use strcmp if no strcasecmp available
17572:
17573: 1995-03-28 00:46 millert
17574:
17575: * lsearch.c, emul/search.h: void * -> VOID *
17576:
17577: 1995-03-28 00:45 millert
17578:
17579: * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17580: HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17581:
17582: 1995-03-28 00:44 millert
17583:
17584: * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17585:
17586: 1995-03-28 00:44 millert
17587:
17588: * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17589: echo and results to most SUDO_* macros
17590:
17591: 1995-03-28 00:43 millert
17592:
17593: * Makefile.in: no more -I.
17594:
17595: 1995-03-28 00:22 millert
17596:
17597: * configure.in: various 1.x ro 2.x autoconf changes now check for
17598: strcasecmp now use AC_INSTALL_PROG instead of custom one added
17599: check for fully woorking void implementation
17600:
17601: 1995-03-28 00:02 millert
17602:
17603: * Makefile.in: added lsearch & search.h visudo links into
17604: $(LIBOBJS)
17605:
17606: 1995-03-27 23:43 millert
17607:
17608: * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17609:
17610: 1995-03-27 23:40 millert
17611:
17612: * visudo.c: whatnow_help was prototyped to be static be was not
17613: declared as such
17614:
17615: 1995-03-27 21:15 millert
17616:
17617: * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17618: used) added check for dirent/dir/ndir.h
17619:
17620: 1995-03-27 21:09 millert
17621:
17622: * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17623:
17624: 1995-03-27 20:38 millert
17625:
17626: * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17627:
17628: 1995-03-27 20:23 millert
17629:
17630: * emul/search.h, lsearch.c: Initial revision
17631:
17632: 1995-03-27 18:26 millert
17633:
17634: * parse.yacc: eliminated bison warnings
17635:
17636: 1995-03-27 17:10 millert
17637:
17638: * parse.lex: added missing case
17639:
17640: 1995-03-27 17:04 millert
17641:
17642: * visudo.c: now iincludes signal.h
17643:
17644: 1995-03-27 15:16 millert
17645:
17646: * parse.yacc: only clear data structures on a parse error
17647:
17648: 1995-03-27 15:01 millert
17649:
17650: * visudo.c: whatnow() now gives help on invalid input
17651:
17652: 1995-03-27 14:54 millert
17653:
17654: * visudo.c: added a whatnow() function (sort of like mh)
17655:
17656: 1995-03-27 14:53 millert
17657:
17658: * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17659: by calling reset_aliases() and clearing top took reset stuff out
17660: of yyerror() since it doesn't beling there (and doesn't work
17661: anyway). errorlineno is now initially set to -1 so we can set it
17662: to the first error that occurrs (it was getting set to the last)
17663:
17664: 1995-03-27 14:53 millert
17665:
17666: * parse.lex: added a void cast
17667:
17668: 1995-03-27 13:26 millert
17669:
17670: * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17671:
17672: 1995-03-26 01:33 millert
17673:
17674: * sudo.c, sudo.h: removed ocmnd
17675:
17676: 1995-03-26 01:19 millert
17677:
17678: * sudo.h: no more sudo_realpath() and find_path() changed params
17679:
17680: 1995-03-26 01:19 millert
17681:
17682: * sudo.c: find_path() changed since no more realpath()
17683:
17684: 1995-03-26 01:18 millert
17685:
17686: * parse.yacc: on error, errorlineno is set to the line where the
17687: error occurred added kill_aliases() to free the aliases struct
17688: now clean up in yyerror() so we can reparse cleanly
17689:
17690: 1995-03-26 01:17 millert
17691:
17692: * logging.c: changed to use new find_path()
17693:
17694: 1995-03-26 01:17 millert
17695:
17696: * options.h, parse.c: no more USE_REALPATH
17697:
17698: 1995-03-26 01:16 millert
17699:
17700: * find_path.c: removed all the realpath() stuff
17701:
17702: 1995-03-26 01:16 millert
17703:
17704: * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17705:
17706: 1995-03-26 01:12 millert
17707:
17708: * visudo.c: now works correctly with utk parser
17709:
17710: 1995-03-26 00:04 millert
17711:
17712: * goodpath.c: Initial revision
17713:
17714: 1995-03-25 23:23 millert
17715:
17716: * sudo_realpath.c: eliminated a compiler warning
17717:
17718: 1995-03-25 21:56 millert
17719:
17720: * sudo.c: elinated compiler warning
17721:
17722: 1995-03-25 20:40 millert
17723:
17724: * sudo_realpath.c: added sudo_goodpath()
17725:
17726: 1995-03-25 20:40 millert
17727:
17728: * sudo.h: added prototype for sudo_goodpath
17729:
17730: 1995-03-25 20:39 millert
17731:
17732: * parse.c: added support for /sys/dir.h
17733:
17734: 1995-03-25 20:39 millert
17735:
17736: * options.h: USE_REALPATH turned off
17737:
17738: 1995-03-25 20:39 millert
17739:
17740: * find_path.c: added calls to sudo_goodpath()
17741:
17742: 1995-03-25 20:39 millert
17743:
17744: * configure.in: added check for dirent.h
17745:
17746: 1995-03-25 20:38 millert
17747:
17748: * config.h.in: added HAVE_DIRENT_H
17749:
17750: 1995-03-25 19:27 millert
17751:
17752: * configure.in: added in linux shadow pass stuff
17753:
17754: 1995-03-24 14:43 millert
17755:
17756: * visudo.c: added back host, user, cmnd, parse_error
17757:
17758: 1995-03-24 14:19 millert
17759:
17760: * visudo.c: added in utk changes plus some minor cosmetic changes
17761:
17762: 1995-03-24 14:17 millert
17763:
17764: * sudo.c, sudo_realpath.c: added void casts for printf's
17765:
17766: 1995-03-24 14:17 millert
17767:
17768: * options.h: added a define of USE_REALPATH
17769:
17770: 1995-03-24 14:17 millert
17771:
17772: * configure.in: there is no more visudoers/Makefile
17773:
17774: 1995-03-24 14:16 millert
17775:
17776: * Makefile.in: added in utk changes (visudo is now built from the
17777: toplevel)
17778:
17779: 1995-03-24 14:15 millert
17780:
17781: * find_path.c: added (void) casts to printf's
17782:
17783: 1995-03-23 22:32 millert
17784:
17785: * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17786: in utk changes
17787:
17788: 1995-03-22 23:13 millert
17789:
17790: * find_path.c: now check to see that what we are trying to run is a
17791: file (or a link to a file, we do a stat(2) so there is no diff)
17792:
17793: 1995-03-13 15:56 millert
17794:
17795: * CHANGES: updated
17796:
17797: 1995-03-13 15:56 millert
17798:
17799: * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17800: new autoconf
17801:
17802: 1995-03-13 15:11 millert
17803:
17804: * sudo.man: added myself as maintainer
17805:
17806: 1995-02-16 23:31 millert
17807:
17808: * sudo.c: changed setegid -> setgid
17809:
17810: 1995-02-06 17:43 millert
17811:
17812: * configure.in: fixed the test for irix 5.x to skip bad libs
17813:
17814: 1995-02-06 17:43 millert
17815:
17816: * aclocal.m4: now initialize OS and OSREV
17817:
17818: 1995-01-26 20:52 millert
17819:
17820: * configure.in: irix5 changes
17821:
17822: 1995-01-26 20:28 millert
17823:
17824: * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17825: for autoconf 2.1 compatibility
17826:
17827: 1995-01-18 19:49 millert
17828:
17829: * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17830: do the righ thing wrt yyrestart (grrrr)
17831:
17832: 1995-01-16 18:44 millert
17833:
17834: * Makefile.in: added visudoers/compat.h to DISTFILES
17835:
17836: 1995-01-16 17:01 millert
17837:
17838: * configure.in: fixed an echo
17839:
17840: 1995-01-16 16:36 millert
17841:
17842: * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17843: parameters
17844:
17845: 1995-01-16 16:35 millert
17846:
17847: * sudo.h: added ocmnd extern adjusted find_path() prototype
17848:
17849: 1995-01-16 16:34 millert
17850:
17851: * parse.c: cmndcmp() now takes 3 arguments and checks against the
17852: qualified as well as the unqualified pathname. more code that
17853: should use cmndcmp() but did not, now does
17854:
17855: 1995-01-16 16:34 millert
17856:
17857: * options.h: added to a comment
17858:
17859: 1995-01-16 16:33 millert
17860:
17861: * logging.c: changed to use new find_path() parameter passing
17862:
17863: 1995-01-16 16:32 millert
17864:
17865: * find_path.c: find_path() now takes 2 copyout parameters (one for
17866: the qualified pathname and one for the unqualified pathname).
17867: The third parameter may be NULL.
17868:
17869: 1995-01-16 16:31 millert
17870:
17871: * configure.in: no longer munge pathnames.h
17872:
17873: 1995-01-16 16:30 millert
17874:
17875: * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17876: defined in config.h) as a result, pathnames.h does not need to be
17877: run through configure and the user can override the configured
17878: values easily.
17879:
17880: 1995-01-16 16:30 millert
17881:
17882: * config.h.in: added _SUDO_PATH_* entries
17883:
17884: 1995-01-16 16:30 millert
17885:
17886: * aclocal.m4: _PATH* -> _SUDO_PATH_*
17887:
17888: 1995-01-16 16:28 millert
17889:
17890: * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17891: config.h
17892:
17893: 1995-01-13 12:52 millert
17894:
17895: * compat.h: removed extraneous #endif
17896:
17897: 1995-01-13 12:48 millert
17898:
17899: * aclocal.m4: added SUDO_PROG_MV
17900:
17901: 1995-01-13 12:47 millert
17902:
17903: * configure.in: added SUDO_PROG_MV added riscos and isc os types
17904: took out -DSHORT_MESSAGE from --with-csops since it is now the
17905: default
17906:
17907: 1995-01-13 12:46 millert
17908:
17909: * sudo.c: move the include of id.h to compat.h now includes
17910: options.h
17911:
17912: 1995-01-13 12:45 millert
17913:
17914: * sudo.h: moved compatibility #defines to compat.h
17915:
17916: 1995-01-13 12:45 millert
17917:
17918: * pathnames.h.in: added _PATH_MV
17919:
17920: 1995-01-13 12:43 millert
17921:
17922: * config.h.in: move __P to compat.h
17923:
17924: 1995-01-13 12:39 millert
17925:
17926: * getcwd.c, getwd.c, putenv.c: now includes compat.h
17927:
17928: 1995-01-13 12:39 millert
17929:
17930: * compat.h: Initial revision
17931:
17932: 1995-01-11 19:11 millert
17933:
17934: * sudo.h: pull user-configurable stuff out and put in options.h
17935:
17936: 1995-01-11 18:43 millert
17937:
17938: * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17939: sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17940: options.h
17941:
17942: 1995-01-11 18:41 millert
17943:
17944: * Makefile.in: added visudoers/options.h
17945:
17946: 1995-01-11 18:40 millert
17947:
17948: * options.h, OPTIONS: Initial revision
17949:
17950: 1995-01-11 18:39 millert
17951:
17952: * Makefile.in: added OPTIONS and options.h
17953:
17954: 1995-01-11 18:36 millert
17955:
17956: * logging.c: changed #ifdef's to use LOGGING and
17957: SLOG_SYSLOG/SLOG_FILE
17958:
17959: 1995-01-11 11:02 millert
17960:
17961: * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17962:
17963: 1994-12-17 18:18 millert
17964:
17965: * visudo.c: now only do Editor +line_num if line_num != 0
17966:
17967: 1994-12-15 21:06 millert
17968:
17969: * visudo.c: now use mv if rename(2) fails
17970:
17971: 1994-12-15 20:32 millert
17972:
17973: * BUGS: added a visudo bug
17974:
17975: 1994-12-15 19:46 millert
17976:
17977: * check.c: expanded comment
17978:
17979: 1994-11-12 18:33 millert
17980:
17981: * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
17982: set
17983:
17984: 1994-11-09 19:49 millert
17985:
17986: * sudo.c: added mips & isc support
17987:
17988: 1994-11-09 19:49 millert
17989:
17990: * parse.c: added support for non-root owned sudoers file
17991:
17992: 1994-11-09 19:48 millert
17993:
17994: * check.c: added exempt group support
17995:
17996: 1994-11-09 19:47 millert
17997:
17998: * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
17999: non-root own sudoers file added exempt group support added isc
18000: support
18001:
18002: 1994-11-09 19:46 millert
18003:
18004: * visudo.c: now copy sudoers to temp file via read/write (not
18005: stdio) now chown new sudoers file to SUDOERS_OWNER
18006:
18007: 1994-11-07 20:40 millert
18008:
18009: * configure.in: added skey support
18010:
18011: 1994-11-07 20:39 millert
18012:
18013: * sudo.h: fixed typo added set_perms support added skey support
18014: added seteuid()/setegid() emulation for AIX
18015:
18016: 1994-11-07 20:38 millert
18017:
18018: * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18019: owned by root nread/write by only root
18020:
18021: 1994-11-07 20:38 millert
18022:
18023: * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18024:
18025: 1994-11-07 20:38 millert
18026:
18027: * check.c: be_* -> set_perms() added skey support
18028:
18029: 1994-11-06 18:59 millert
18030:
18031: * Makefile.in: ++version
18032:
18033: 1994-11-06 18:59 millert
18034:
18035: * version.h: ++
18036:
18037: 1994-10-21 13:16 millert
18038:
18039: * sudo.c: now sets IFS
18040:
18041: 1994-10-21 12:02 millert
18042:
18043: * insults.h: fixed typo
18044:
18045: 1994-10-15 15:48 millert
18046:
18047: * config.h.in: added HAVE_SKEY
18048:
18049: 1994-10-04 13:00 millert
18050:
18051: * CHANGES: updated
18052:
18053: 1994-10-04 12:57 millert
18054:
18055: * Makefile.in: ++version
18056:
18057: 1994-10-04 12:57 millert
18058:
18059: * version.h: ++
18060:
18061: 1994-10-04 12:56 millert
18062:
18063: * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18064:
18065: 1994-10-04 12:56 millert
18066:
18067: * configure.in: added function check for tcgetattr(3)
18068:
18069: 1994-10-04 12:55 millert
18070:
18071: * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18072:
18073: 1994-10-04 12:53 millert
18074:
18075: * config.h.in: added check for tcgetattr
18076:
18077: 1994-09-26 17:38 millert
18078:
18079: * CHANGES: updated
18080:
18081: 1994-09-22 13:30 millert
18082:
18083: * parse.lex: now only include unistd.h for linux
18084:
18085: 1994-09-21 14:29 millert
18086:
18087: * Makefile.in: added visudo.8 generation
18088:
18089: 1994-09-21 14:07 millert
18090:
18091: * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18092:
18093: 1994-09-20 19:39 millert
18094:
18095: * BUGS: added one
18096:
18097: 1994-09-20 19:39 millert
18098:
18099: * CHANGES: updated
18100:
18101: 1994-09-20 19:38 millert
18102:
18103: * README: added mailing list info
18104:
18105: 1994-09-20 19:37 millert
18106:
18107: * parse.yacc: now use sudolineno instead of yylineno fixed bison
18108: warnings
18109:
18110: 1994-09-20 19:37 millert
18111:
18112: * configure.in: now use -no_library_replacement for osf don't make
18113: a static binary for hpux >= 9.0
18114:
18115: 1994-09-20 19:21 millert
18116:
18117: * tgetpass.c: added string.h/strings.h inclusion
18118:
18119: 1994-09-20 19:21 millert
18120:
18121: * config.h.in: added ssize_t def
18122:
18123: 1994-09-20 19:18 millert
18124:
18125: * parse.lex: added inclusion of string.h/strings.h
18126:
18127: 1994-09-20 18:48 millert
18128:
18129: * aclocal.m4: fixed uname | sed (needed to quote the '[')
18130:
18131: 1994-09-20 18:42 millert
18132:
18133: * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18134: errors
18135:
18136: 1994-09-20 18:13 millert
18137:
18138: * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18139: counted upon.
18140:
18141: 1994-09-20 18:10 millert
18142:
18143: * TODO: updated
18144:
18145: 1994-09-20 17:52 millert
18146:
18147: * parse.c: added code to support command listings
18148:
18149: 1994-09-20 17:36 millert
18150:
18151: * sudo.c: added code for -l flag
18152:
18153: 1994-09-20 17:35 millert
18154:
18155: * sudo.man: fixed typo added info for -l flag
18156:
18157: 1994-09-20 14:45 millert
18158:
18159: * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18160:
18161: 1994-09-20 14:45 millert
18162:
18163: * aclocal.m4: added SUDO_SSIZE_T
18164:
18165: 1994-09-20 14:44 millert
18166:
18167: * sudo.h: added MODE_LIST
18168:
18169: 1994-09-20 14:43 millert
18170:
18171: * configure.in: added AC_SSIZE_T
18172:
18173: 1994-09-19 20:53 millert
18174:
18175: * find_path.c, sudo_realpath.c: readlink() is now declared as
18176: returning ssize~_t
18177:
18178: 1994-09-19 20:44 millert
18179:
18180: * configure.in: added -laud for OSF c2
18181:
18182: 1994-09-02 15:55 millert
18183:
18184: * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18185: Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18186: sudo-bugs@cs.colorado.edu
18187:
18188: 1994-09-02 15:54 millert
18189:
18190: * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18191: parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18192: sudo_setenv.c, tgetpass.c, version.h: changed
18193: sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18194:
18195: 1994-09-01 15:56 millert
18196:
18197: * Makefile.in: ++version
18198:
18199: 1994-09-01 15:55 millert
18200:
18201: * version.h: ++
18202:
18203: 1994-09-01 15:55 millert
18204:
18205: * logging.c: added host to alertmail messages
18206:
18207: 1994-09-01 15:55 millert
18208:
18209: * CHANGES, TODO: udpated
18210:
18211: 1994-09-01 15:26 millert
18212:
18213: * logging.c: fixed logging problem where mail would not say which
18214: user it was
18215:
18216: 1994-09-01 13:45 millert
18217:
18218: * configure.in: added -laud for gcc if osf & c2
18219:
18220: 1994-09-01 13:39 millert
18221:
18222: * check.c: moved set_auth_parameters to sudo.c
18223:
18224: 1994-09-01 13:38 millert
18225:
18226: * sudo.c: added set_auth_parameters for osf
18227:
18228: 1994-09-01 13:22 millert
18229:
18230: * configure.in: cleaned up -static stuff
18231:
18232: 1994-09-01 13:15 millert
18233:
18234: * Makefile.in: ++version
18235:
18236: 1994-09-01 13:15 millert
18237:
18238: * version.h: ++
18239:
18240: 1994-09-01 13:15 millert
18241:
18242: * sudo.c: changed setenv() to sudo_setenv()
18243:
18244: 1994-09-01 13:12 millert
18245:
18246: * check.c: fixed osf problem
18247:
18248: 1994-08-31 22:17 millert
18249:
18250: * configure.in: added OSF C2 stuff
18251:
18252: 1994-08-31 22:00 millert
18253:
18254: * CHANGES: updated
18255:
18256: 1994-08-31 21:56 millert
18257:
18258: * check.c: added osf auth support & removed some extra spaces
18259:
18260: 1994-08-31 21:52 millert
18261:
18262: * INSTALL, SUPPORTED: added osf C2 stuff
18263:
18264: 1994-08-31 19:52 millert
18265:
18266: * TODO: added 2 suggestions
18267:
18268: 1994-08-31 19:33 millert
18269:
18270: * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18271:
18272: 1994-08-31 18:48 millert
18273:
18274: * version.h: pl1
18275:
18276: 1994-08-30 18:31 millert
18277:
18278: * version.h: 1.3.1final
18279:
18280: 1994-08-30 18:30 millert
18281:
18282: * Makefile.in: added HISTORY
18283:
18284: 1994-08-30 18:30 millert
18285:
18286: * sudo.man: mention HISTPRY file
18287:
18288: 1994-08-30 18:30 millert
18289:
18290: * sudo.c: use sizeof instead of a constant in 1 place
18291:
18292: 1994-08-30 18:30 millert
18293:
18294: * parse.yacc: added unistd.h
18295:
18296: 1994-08-30 18:29 millert
18297:
18298: * parse.lex: added unistd.h
18299:
18300: 1994-08-30 18:27 millert
18301:
18302: * README: udpated
18303:
18304: 1994-08-30 18:15 millert
18305:
18306: * HISTORY: Initial revision
18307:
18308: 1994-08-17 12:45 millert
18309:
18310: * version.h: ++
18311:
18312: 1994-08-17 12:39 millert
18313:
18314: * CHANGES: updated
18315:
18316: 1994-08-17 12:36 millert
18317:
18318: * sudo_setenv.c: added unistd.h include
18319:
18320: 1994-08-16 15:46 millert
18321:
18322: * sudo.c: added sys/time.h for AIX
18323:
18324: 1994-08-14 21:22 millert
18325:
18326: * configure.in: added check for -lsocket and sys/sockio.h
18327:
18328: 1994-08-14 21:21 millert
18329:
18330: * config.h.in: took out libshadow check and added in sys/sockio.h
18331: check
18332:
18333: 1994-08-14 21:21 millert
18334:
18335: * sudo.c: now include sockio.h instead of ioctl.h if it exists
18336: "sudo -" now gets a better error message
18337:
18338: 1994-08-14 20:47 millert
18339:
18340: * sample.sudoers: now has a dir and subnet entry
18341:
18342: 1994-08-13 18:15 millert
18343:
18344: * sudo.c: removed if_ether.h
18345:
18346: 1994-08-13 17:16 millert
18347:
18348: * TODO: added an item
18349:
18350: 1994-08-13 17:15 millert
18351:
18352: * sudo.man: added network and ip addresses to man page
18353:
18354: 1994-08-13 17:09 millert
18355:
18356: * sudo.c: no error if can't get interfaces or netmask since
18357: networking may not be in the kernel.
18358:
18359: 1994-08-13 17:08 millert
18360:
18361: * parse.c: nwo check for interfaces == NULL
18362:
18363: 1994-08-12 21:22 millert
18364:
18365: * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18366: to fail if the last entry in the spec failed (ie: it was only
18367: looking at the last entry). CLeaned things up by adding the
18368: cmndcmp() function--all neat & tidy
18369:
18370: 1994-08-12 21:21 millert
18371:
18372: * CHANGES: added one
18373:
18374: 1994-08-11 23:42 millert
18375:
18376: * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18377:
18378: 1994-08-11 21:58 millert
18379:
18380: * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18381: netinet/in.h
18382:
18383: 1994-08-11 21:58 millert
18384:
18385: * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18386: visudo.c: added include of netinet/in.h
18387:
18388: 1994-08-11 21:57 millert
18389:
18390: * version.h: ++
18391:
18392: 1994-08-11 21:57 millert
18393:
18394: * sudo.h: added interfaces global
18395:
18396: 1994-08-11 21:56 millert
18397:
18398: * parse.c: now uses new interfaces global
18399:
18400: 1994-08-11 21:56 millert
18401:
18402: * sudo.c: now ip addresses are gleaned fw/o dns
18403:
18404: 1994-08-10 19:21 millert
18405:
18406: * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18407:
18408: 1994-08-10 19:21 millert
18409:
18410: * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18411: network addrs
18412:
18413: 1994-08-10 19:20 millert
18414:
18415: * sudo.h: added ip_addrs def added load_ip_addrs prototype
18416:
18417: 1994-08-08 16:03 millert
18418:
18419: * CHANGES: updated
18420:
18421: 1994-08-08 15:57 millert
18422:
18423: * Makefile.in: removed multiple entries in DISTFILES
18424:
18425: 1994-08-08 13:05 millert
18426:
18427: * visudo.c: ansified the !STDC_HEADERS decls
18428:
18429: 1994-08-08 13:05 millert
18430:
18431: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18432: malloc decl if gnuc
18433:
18434: 1994-08-08 13:04 millert
18435:
18436: * sudo.c: can't use getopt(3) since it munges args to the command
18437: to be run as root don't do malloc decl if gnuc
18438:
18439: 1994-08-08 00:41 millert
18440:
18441: * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18442: sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18443: prottypes
18444:
18445: 1994-08-08 00:27 millert
18446:
18447: * getcwd.c, getwd.c: added missing paren
18448:
18449: 1994-08-08 00:23 millert
18450:
18451: * Makefile.in: added putenv.c to DISTFILES
18452:
18453: 1994-08-08 00:08 millert
18454:
18455: * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18456: not defined now can count on putenv() being there
18457:
18458: 1994-08-08 00:08 millert
18459:
18460: * sudo_realpath.c: took out errno decl since sudo.h does it for us
18461: fixed up a next cc warning added params to func decls when
18462: STDC_HEADERS is not defined
18463:
18464: 1994-08-08 00:07 millert
18465:
18466: * sudo.h: took out environ extern added local declaratio of
18467: putenv() if local version is needed
18468:
18469: 1994-08-08 00:05 millert
18470:
18471: * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18472: func decls when STDC_HEADERS is not defined
18473:
18474: 1994-08-08 00:04 millert
18475:
18476: * config.h.in: added memcpy check check to see that ansi vs bsd
18477: macros are ntot already defiend before defining (ie: avoid
18478: redefinition)
18479:
18480: 1994-08-08 00:03 millert
18481:
18482: * configure.in: removed fluff setenv check plus check w/ replace
18483: for putenv if also no setenv
18484:
18485: 1994-08-08 00:01 millert
18486:
18487: * putenv.c: Initial revision
18488:
18489: 1994-08-06 19:19 millert
18490:
18491: * sudo_setenv.c: Initial revision
18492:
18493: 1994-08-06 19:19 millert
18494:
18495: * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18496:
18497: 1994-08-06 19:19 millert
18498:
18499: * sudo.c: now use sudo_setenvc
18500:
18501: 1994-08-06 19:18 millert
18502:
18503: * configure.in: added puteenv and setenv, removed realpath
18504:
18505: 1994-08-06 19:18 millert
18506:
18507: * config.h.in: added putenv & setenv
18508:
18509: 1994-08-06 19:18 millert
18510:
18511: * Makefile.in: added sudo_setenv
18512:
18513: 1994-08-06 19:16 millert
18514:
18515: * version.h: ++
18516:
18517: 1994-08-05 19:43 millert
18518:
18519: * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18520: irix
18521:
18522: 1994-08-05 19:43 millert
18523:
18524: * Makefile.in: added MAN_POSTINSTALL
18525:
18526: 1994-08-05 19:43 millert
18527:
18528: * CHANGES: added
18529:
18530: 1994-08-05 19:10 millert
18531:
18532: * sudo.man: added SUDO_* plus new options
18533:
18534: 1994-08-05 19:10 millert
18535:
18536: * CHANGES: added one
18537:
18538: 1994-08-05 19:07 millert
18539:
18540: * configure.in: took out shadow lib
18541:
18542: 1994-08-05 18:35 millert
18543:
18544: * TODO: adde done
18545:
18546: 1994-08-05 17:52 millert
18547:
18548: * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18549:
18550: 1994-08-05 17:49 millert
18551:
18552: * Makefile.in: support for installing a cat page instead of a man
18553: page if no nroff
18554:
18555: 1994-08-05 17:48 millert
18556:
18557: * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18558: looks for nroff to determine whether or not to install a cat or
18559: man page
18560:
18561: 1994-08-05 17:48 millert
18562:
18563: * config.h.in: added HAVE_FLEX
18564:
18565: 1994-08-05 16:14 millert
18566:
18567: * sudo.c: not set ret to MODE_RUN initially
18568:
18569: 1994-08-05 16:12 millert
18570:
18571: * find_path.c: made command (and therefor cmnd dynamically
18572: allocated)
18573:
18574: 1994-08-04 20:25 millert
18575:
18576: * TODO: did #8
18577:
18578: 1994-08-04 20:24 millert
18579:
18580: * version.h: ++
18581:
18582: 1994-08-04 20:24 millert
18583:
18584: * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18585:
18586: 1994-08-04 20:24 millert
18587:
18588: * sudo.h: added MODE_ removed validate_only and added
18589: remove_timestamp()
18590:
18591: 1994-08-04 20:22 millert
18592:
18593: * sudo.c: usage() now takes an int (exit value) added parse_args()
18594: to parse command line arguments moved call to find_path() from
18595: load_globals to new function load_cmnd() removed validate_only
18596: global -- now use the concept of "modes" added -h and -k options
18597:
18598: 1994-08-04 20:21 millert
18599:
18600: * parse.c: no longer use global validate_only now checks for
18601: command called "validate" removed check for non-fully qualified
18602: commands since that is done by find_path
18603:
18604: 1994-08-04 20:20 millert
18605:
18606: * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18607:
18608: 1994-08-04 20:17 millert
18609:
18610: * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18611: comment
18612:
18613: 1994-08-04 20:17 millert
18614:
18615: * check.c: check_timestamp no longer runs reminder(), it is implied
18616: in the return val added remove_timestamp()
18617:
18618: 1994-08-04 20:16 millert
18619:
18620: * CHANGES: updated
18621:
18622: 1994-08-04 16:38 millert
18623:
18624: * BUGS: fixed on
18625:
18626: 1994-08-04 16:38 millert
18627:
18628: * sudo_realpath.c: took out old_errno
18629:
18630: 1994-08-04 16:37 millert
18631:
18632: * CHANGES: updated
18633:
18634: 1994-08-03 12:08 millert
18635:
18636: * logging.c: moved send_mail to after syslog
18637:
18638: 1994-08-02 22:41 millert
18639:
18640: * sudo.c: now set SUDO_ envariables
18641:
18642: 1994-08-01 13:40 millert
18643:
18644: * version.h: ++
18645:
18646: 1994-08-01 13:39 millert
18647:
18648: * sudo_realpath.c: now print error if chdir fails
18649:
18650: 1994-08-01 13:39 millert
18651:
18652: * find_path.c: removed an XXX
18653:
18654: 1994-07-25 20:40 millert
18655:
18656: * CHANGES: updated
18657:
18658: 1994-07-25 20:36 millert
18659:
18660: * configure.in: no more static binaries for aix
18661:
18662: 1994-07-25 18:37 millert
18663:
18664: * INSTALL: fixed typo
18665:
18666: 1994-07-25 18:33 millert
18667:
18668: * sudo_realpath.c: took out stuff not needed for sudo now does
18669: be_root/be_user itself now uses cwd global
18670:
18671: 1994-07-25 18:32 millert
18672:
18673: * version.h: +=2
18674:
18675: 1994-07-25 18:31 millert
18676:
18677: * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18678:
18679: 1994-07-25 18:26 millert
18680:
18681: * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18682:
18683: 1994-07-25 18:25 millert
18684:
18685: * find_path.c: now use sudo_realpath()
18686:
18687: 1994-07-25 18:25 millert
18688:
18689: * config.h.in: took out realpth() stuff since we now use
18690: sudo_realpath()
18691:
18692: 1994-07-25 18:25 millert
18693:
18694: * configure.in: ultrix enhanced sec
18695:
18696: 1994-07-25 18:25 millert
18697:
18698: * SUPPORTED: added ultrix enhanced sec.
18699:
18700: 1994-07-25 18:24 millert
18701:
18702: * INSTALL: updated
18703:
18704: 1994-07-25 18:21 millert
18705:
18706: * check.c: ultrix enhanced security suport
18707:
18708: 1994-07-25 18:20 millert
18709:
18710: * Makefile.in: added sudo_realpath.c
18711:
18712: 1994-07-25 18:18 millert
18713:
18714: * CHANGES: updated
18715:
18716: 1994-07-25 14:28 millert
18717:
18718: * tgetpass.c: increased passwd len to 24 for c2 security
18719:
18720: 1994-07-25 13:17 millert
18721:
18722: * BUGS: updated BUGS
18723:
18724: 1994-07-15 11:49 millert
18725:
18726: * check.c: now use user global var
18727:
18728: 1994-07-15 11:48 millert
18729:
18730: * configure.in: took out -ls
18731:
18732: 1994-07-14 19:11 millert
18733:
18734: * configure.in: added AFS libs
18735:
18736: 1994-07-14 17:45 millert
18737:
18738: * sudo.h: user is now a char * added epasswd
18739:
18740: 1994-07-14 17:43 millert
18741:
18742: * sudo.c: added tzset() to load_globals added epasswd (encrypted
18743: password) global made user dynamically allocated
18744:
18745: 1994-07-14 17:43 millert
18746:
18747: * configure.in: added tzset test
18748:
18749: 1994-07-14 17:43 millert
18750:
18751: * config.h.in: added HAVE_TZSET
18752:
18753: 1994-07-14 17:42 millert
18754:
18755: * check.c: cleaned up encrypted passwd grab somewhat
18756:
18757: 1994-07-14 12:34 millert
18758:
18759: * configure.in: fixed AFS typo
18760:
18761: 1994-07-14 12:34 millert
18762:
18763: * INSTALL: added AFS not
18764:
18765: 1994-07-14 12:34 millert
18766:
18767: * CHANGES: udpated
18768:
18769: 1994-07-14 12:33 millert
18770:
18771: * logging.c: can now log to both syslog & a file
18772:
18773: 1994-07-14 12:12 millert
18774:
18775: * sudo.h: added BOTH_LOGS
18776:
18777: 1994-07-14 11:34 millert
18778:
18779: * CHANGES: updated
18780:
18781: 1994-07-14 11:32 millert
18782:
18783: * configure.in: --with-AFS
18784:
18785: 1994-07-14 11:32 millert
18786:
18787: * config.h.in: added HAVE_AFS
18788:
18789: 1994-07-14 11:31 millert
18790:
18791: * check.c: added afs changes
18792:
18793: 1994-07-14 11:21 millert
18794:
18795: * sudo.h: removed AFS stuff :-)
18796:
18797: 1994-07-14 11:19 millert
18798:
18799: * tgetpass.c: include sys/select for AIX
18800:
18801: 1994-07-14 11:17 millert
18802:
18803: * sudo.h: added AFS
18804:
18805: 1994-07-14 11:16 millert
18806:
18807: * version.h: ++
18808:
18809: 1994-07-07 14:45 millert
18810:
18811: * SUPPORTED, CHANGES: updated
18812:
18813: 1994-07-07 14:44 millert
18814:
18815: * logging.c: can now have MAILER undefined
18816:
18817: 1994-07-07 14:37 millert
18818:
18819: * INSTALL: new sub-note about MAILER
18820:
18821: 1994-07-06 23:11 millert
18822:
18823: * sudo.man: added blurb about password timeout
18824:
18825: 1994-07-06 20:52 millert
18826:
18827: * configure.in: convex c2 changes
18828:
18829: 1994-07-06 20:52 millert
18830:
18831: * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18832:
18833: 1994-07-06 20:51 millert
18834:
18835: * Makefile.in: added OSDEFS
18836:
18837: 1994-07-06 20:46 millert
18838:
18839: * config.h.in: added spaces
18840:
18841: 1994-07-06 20:08 millert
18842:
18843: * tgetpass.c: added a goto if fgets fails
18844:
18845: 1994-07-06 20:08 millert
18846:
18847: * sudo.h: use __hpux not hpux convex c2 stuff
18848:
18849: 1994-07-06 20:08 millert
18850:
18851: * sudo.c: use __hpux not hpux
18852:
18853: 1994-07-06 20:08 millert
18854:
18855: * logging.c: convex c2 stuff
18856:
18857: 1994-07-06 20:07 millert
18858:
18859: * config.h.in: define ansi-ish cpp os defines if non-ansi are
18860: defined for hpux & convex
18861:
18862: 1994-07-06 20:07 millert
18863:
18864: * INSTALL: updated to say we support sonvex C2
18865:
18866: 1994-07-06 20:05 millert
18867:
18868: * check.c: added convex c2 support
18869:
18870: 1994-07-01 12:06 millert
18871:
18872: * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18873: select() to timeout
18874:
18875: 1994-06-29 17:04 millert
18876:
18877: * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18878:
18879: 1994-06-29 16:39 millert
18880:
18881: * tgetpass.c: now works + uses fgets()
18882:
18883: 1994-06-28 18:25 millert
18884:
18885: * tgetpass.c: select doesn't seem to recognize a single '\n' as
18886: input waiting so we can;t use it, sigh.
18887:
18888: 1994-06-26 16:38 millert
18889:
18890: * PORTING: updated tgetpass() blurb
18891:
18892: 1994-06-26 16:35 millert
18893:
18894: * configure.in: added --with-getpass
18895:
18896: 1994-06-26 16:35 millert
18897:
18898: * Makefile.in: added tgetpass stuff
18899:
18900: 1994-06-26 15:25 millert
18901:
18902: * tgetpass.c: now uses stdio
18903:
18904: 1994-06-26 15:17 millert
18905:
18906: * version.h: ++
18907:
18908: 1994-06-24 19:48 millert
18909:
18910: * PORTING: updated ,.
18911:
18912: 1994-06-24 19:46 millert
18913:
18914: * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18915:
18916: 1994-06-24 19:45 millert
18917:
18918: * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18919:
18920: 1994-06-24 19:45 millert
18921:
18922: * check.c: added hpux C2 shit
18923:
18924: 1994-06-24 19:45 millert
18925:
18926: * Makefile.in: took out tgetpass.*
18927:
18928: 1994-06-24 19:45 millert
18929:
18930: * INSTALL: added C2 blurb
18931:
18932: 1994-06-13 15:54 millert
18933:
18934: * configure.in: no termio(s) for ultrix since it is broken
18935:
18936: 1994-06-13 15:41 millert
18937:
18938: * check.c: added a space (yeah, anal)
18939:
18940: 1994-06-13 15:17 millert
18941:
18942: * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18943:
18944: 1994-06-08 14:34 millert
18945:
18946: * config.h.in: took out bsd signal stuff for irix
18947:
18948: 1994-06-08 14:26 millert
18949:
18950: * visudo.c: comments in #endif
18951:
18952: 1994-06-08 14:09 millert
18953:
18954: * configure.in: don't define BSD signals for irix
18955:
18956: 1994-06-08 12:57 millert
18957:
18958: * TODO: did some...
18959:
18960: 1994-06-08 12:57 millert
18961:
18962: * CHANGES: updated
18963:
18964: 1994-06-08 12:56 millert
18965:
18966: * realpath.c, sudo_realpath.c: took out unneeded code by changing
18967: where a strings was terminated
18968:
18969: 1994-06-07 19:21 millert
18970:
18971: * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18972: NULL
18973:
18974: 1994-06-07 17:40 millert
18975:
18976: * sudo.h: move __P to config.h
18977:
18978: 1994-06-07 17:40 millert
18979:
18980: * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
18981: definition
18982:
18983: 1994-06-07 17:40 millert
18984:
18985: * config.h.in: added __P
18986:
18987: 1994-06-07 17:21 millert
18988:
18989: * config.h.in: added HAVE_FCHDIR
18990:
18991: 1994-06-07 17:18 millert
18992:
18993: * strdup.c: now include stdio
18994:
18995: 1994-06-07 14:55 millert
18996:
18997: * realpath.c, sudo_realpath.c: now works if no fchdir
18998:
18999: 1994-06-07 14:55 millert
19000:
19001: * visudo.c: define SA_RESETHAND to null if not defined
19002:
19003: 1994-06-07 14:54 millert
19004:
19005: * configure.in: added check & replace
19006:
19007: 1994-06-06 20:05 millert
19008:
19009: * configure.in: took out -static for nextstep -- it doesn't work
19010:
19011: 1994-06-06 19:59 millert
19012:
19013: * logging.c: moved #endif to where it belongs
19014:
19015: 1994-06-06 19:54 millert
19016:
19017: * SUPPORTED: correction
19018:
19019: 1994-06-06 19:42 millert
19020:
19021: * configure.in: now checks for strdup realpath getcwd bzero
19022:
19023: 1994-06-06 19:31 millert
19024:
19025: * config.h.in: emulate bzero
19026:
19027: 1994-06-06 16:57 millert
19028:
19029: * visudo.c: added posic signals
19030:
19031: 1994-06-06 16:57 millert
19032:
19033: * tgetpass.c: bzero cast
19034:
19035: 1994-06-06 16:57 millert
19036:
19037: * logging.c: added posix signals
19038:
19039: 1994-06-06 16:56 millert
19040:
19041: * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19042: missing functions
19043:
19044: 1994-06-06 16:56 millert
19045:
19046: * config.h.in: added posix signal stuff
19047:
19048: 1994-06-06 16:56 millert
19049:
19050: * Makefile.in: added new srcs
19051:
19052: 1994-06-06 12:53 millert
19053:
19054: * visudo.c: updated useag
19055:
19056: 1994-06-06 12:39 millert
19057:
19058: * tgetpass.c: now uses posix signals
19059:
19060: 1994-06-05 20:17 millert
19061:
19062: * PORTING: updated sto reflect major changes
19063:
19064: 1994-06-05 20:05 millert
19065:
19066: * TODO, CHANGES: updated
19067:
19068: 1994-06-05 20:04 millert
19069:
19070: * tgetpass.c: uses sysconf() if available
19071:
19072: 1994-06-05 20:04 millert
19073:
19074: * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19075:
19076: 1994-06-05 20:04 millert
19077:
19078: * realpath.c, sudo_realpath.c: for those w/o this in libc
19079:
19080: 1994-06-05 20:03 millert
19081:
19082: * getcwd.c, getwd.c: Initial revision
19083:
19084: 1994-06-05 20:03 millert
19085:
19086: * find_path.c: rewrote to use realpath(3) - nis now all my code
19087:
19088: 1994-06-05 20:02 millert
19089:
19090: * config.h.in: added HAVE_REALPATH
19091:
19092: 1994-06-05 20:02 millert
19093:
19094: * check.c: now use tgetpass
19095:
19096: 1994-06-05 20:02 millert
19097:
19098: * Makefile.in: added LIBOBJS use tgetpass.c
19099:
19100: 1994-06-05 18:55 millert
19101:
19102: * tgetpass.c: works now :-)
19103:
19104: 1994-06-05 18:27 millert
19105:
19106: * tgetpass.c: Initial revision
19107:
19108: 1994-06-05 17:17 millert
19109:
19110: * pathnames.h.in: added /dev/tty
19111:
19112: 1994-06-04 17:12 millert
19113:
19114: * version.h: incremented
19115:
19116: 1994-06-04 15:29 millert
19117:
19118: * sudo.c: always use getcwd
19119:
19120: 1994-06-04 14:49 millert
19121:
19122: * config.h.in: added check for getwd
19123:
19124: 1994-06-04 14:48 millert
19125:
19126: * configure.in: replace strdup & realpath & getcwd if missing
19127:
19128: 1994-06-04 14:47 millert
19129:
19130: * pathnames.h.in: added _PATH_PWD
19131:
19132: 1994-06-04 14:46 millert
19133:
19134: * aclocal.m4: added SUDO_PROG_PWD
19135:
19136: 1994-06-04 14:37 millert
19137:
19138: * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19139:
19140: 1994-06-03 11:31 millert
19141:
19142: * configure.in: quoted quare brackets
19143:
19144: 1994-06-02 17:49 millert
19145:
19146: * sudo.c: no need to strdup() a constant
19147:
19148: 1994-06-02 15:45 millert
19149:
19150: * CHANGES: updated
19151:
19152: 1994-06-02 15:44 millert
19153:
19154: * sudo.man: added validate
19155:
19156: 1994-06-02 15:42 millert
19157:
19158: * sudo.c: added -v to usage
19159:
19160: 1994-06-02 15:41 millert
19161:
19162: * parse.c, sudo.c, sudo.h: added validate_only stuff
19163:
19164: 1994-05-29 21:29 millert
19165:
19166: * configure.in: now finds sed
19167:
19168: 1994-05-29 21:28 millert
19169:
19170: * aclocal.m4: $OSREV is now an int
19171:
19172: 1994-05-29 19:13 millert
19173:
19174: * configure.in: added mtxinu to caser
19175:
19176: 1994-05-29 18:37 millert
19177:
19178: * sudo.h: added EXEC macro
19179:
19180: 1994-05-29 18:36 millert
19181:
19182: * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19183: FQDN is set
19184:
19185: 1994-05-29 18:36 millert
19186:
19187: * logging.c: changed mail_argv[] def now use EXEC() macro
19188:
19189: 1994-05-29 18:35 millert
19190:
19191: * check.c: took out crypt() definition
19192:
19193: 1994-05-29 17:23 millert
19194:
19195: * version.h: upped the version
19196:
19197: 1994-05-29 15:52 millert
19198:
19199: * configure.in: always look for -lnsl
19200:
19201: 1994-05-29 15:29 millert
19202:
19203: * aclocal.m4: added an echo
19204:
19205: 1994-05-29 15:25 millert
19206:
19207: * sudo.h: SHORT_MESSAGE is now the default
19208:
19209: 1994-05-29 15:18 millert
19210:
19211: * config.h.in: fixed typo
19212:
19213: 1994-05-29 01:29 millert
19214:
19215: * configure.in: added missing AC_DEFINE(SVR4) for solaris
19216:
19217: 1994-05-28 20:42 millert
19218:
19219: * sudo.man: documented the -v flag
19220:
19221: 1994-05-28 20:34 millert
19222:
19223: * SUPPORTED: updated
19224:
19225: 1994-05-28 20:31 millert
19226:
19227: * check.c: proto-ized crypt()
19228:
19229: 1994-05-28 20:28 millert
19230:
19231: * config.h.in: added LIBSHADOW undef
19232:
19233: 1994-05-28 20:18 millert
19234:
19235: * configure.in: nwo set OS to be lowercase
19236:
19237: 1994-05-28 19:36 millert
19238:
19239: * configure.in: now use SUDO_OSTYPE to set $OS
19240:
19241: 1994-05-28 19:36 millert
19242:
19243: * aclocal.m4: now use uname to determine os
19244:
19245: 1994-05-28 16:23 millert
19246:
19247: * visudo.c: added prototypes & moved sig handler around
19248:
19249: 1994-05-28 15:13 millert
19250:
19251: * sudo.h: added prototyppes
19252:
19253: 1994-05-28 15:13 millert
19254:
19255: * parse.c: added comment
19256:
19257: 1994-05-28 15:12 millert
19258:
19259: * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19260:
19261: 1994-05-28 15:11 millert
19262:
19263: * check.c, logging.c, sudo.c: added prototypes
19264:
19265: 1994-05-28 15:11 millert
19266:
19267: * aixcrypt.exp: Initial revision
19268:
19269: 1994-05-28 15:11 millert
19270:
19271: * Makefile.in: added aixcrypt.exp
19272:
19273: 1994-05-28 13:21 millert
19274:
19275: * parse.lex, parse.yacc: moved config.h to top of includes
19276:
19277: 1994-05-25 15:48 millert
19278:
19279: * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19280:
19281: 1994-05-24 23:08 millert
19282:
19283: * visudo.c: added -v flag and usage()
19284:
19285: 1994-05-24 23:08 millert
19286:
19287: * version.h: fixed a typo
19288:
19289: 1994-05-24 23:08 millert
19290:
19291: * sudo.c: cast Argv to a const for exec added -v flag
19292:
19293: 1994-05-24 23:07 millert
19294:
19295: * logging.c: mail_argv is now a const
19296:
19297: 1994-05-24 23:07 millert
19298:
19299: * configure.in: only set RETSIGTYPE if it is not set already
19300:
19301: 1994-05-24 23:07 millert
19302:
19303: * aclocal.m4: now defines & STDC_HEADERS for Irix
19304:
19305: 1994-05-24 23:07 millert
19306:
19307: * Makefile.in: added version.h
19308:
19309: 1994-05-24 21:25 millert
19310:
19311: * insults.h, sudo.h: prevent multiple inclusion
19312:
19313: 1994-05-24 21:20 millert
19314:
19315: * version.h: Initial revision
19316:
19317: 1994-05-24 21:09 millert
19318:
19319: * parse.lex, parse.yacc: now includes config.h
19320:
19321: 1994-05-24 20:54 millert
19322:
19323: * aclocal.m4: now talks about sunos 4.x
19324:
19325: 1994-05-24 20:23 millert
19326:
19327: * visudo.c: calls to Exit now pass an arg
19328:
19329: 1994-05-24 18:00 millert
19330:
19331: * visudo.c: signal handler now takes an int argument
19332:
19333: 1994-05-24 18:00 millert
19334:
19335: * CHANGES: updated
19336:
19337: 1994-05-24 17:44 millert
19338:
19339: * sudo.c: ok, the getcwd() is now *really* done as the user
19340:
19341: 1994-05-24 17:44 millert
19342:
19343: * configure.in: changed AIX STATIC_FLAGS
19344:
19345: 1994-05-24 16:27 millert
19346:
19347: * aclocal.m4: solaris now defines SVR4
19348:
19349: 1994-05-24 16:18 millert
19350:
19351: * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19352: sigh.
19353:
19354: 1994-05-24 16:18 millert
19355:
19356: * sudo.c: moved getcwd stuff into load_globals
19357:
19358: 1994-05-24 16:18 millert
19359:
19360: * parse.c: took out externs that are in suod.h
19361:
19362: 1994-05-24 16:18 millert
19363:
19364: * logging.c: moved cwd into load_globals
19365:
19366: 1994-05-24 16:17 millert
19367:
19368: * find_path.c: moved cwd stuff
19369:
19370: 1994-05-24 15:55 millert
19371:
19372: * Makefile.in: fixed make distclean & realclean
19373:
19374: 1994-05-24 12:51 millert
19375:
19376: * TODO: updated .,
19377:
19378: 1994-05-24 12:51 millert
19379:
19380: * CHANGES: added solaris changes
19381:
19382: 1994-05-24 12:51 millert
19383:
19384: * aclocal.m4: added solaris changes, need to rework
19385:
19386: 1994-05-24 12:50 millert
19387:
19388: * configure.in: cleaned up for solaris
19389:
19390: 1994-05-24 12:13 millert
19391:
19392: * logging.c: reinstall reapchild signal handler for non-bsd signals
19393:
19394: 1994-05-24 12:03 millert
19395:
19396: * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19397: needed)
19398:
19399: 1994-05-24 12:03 millert
19400:
19401: * sudo.c: support for HAVE_SYSCONF
19402:
19403: 1994-05-24 12:02 millert
19404:
19405: * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19406: minor prettying up /
19407:
19408: 1994-05-23 20:26 millert
19409:
19410: * config.h.in: added HAVE_SYSCONF
19411:
19412: 1994-05-16 18:57 millert
19413:
19414: * configure.in: now tells you what os you are running /.
19415:
19416: 1994-05-16 18:56 millert
19417:
19418: * aclocal.m4: took out extra ','
19419:
19420: 1994-05-14 17:56 millert
19421:
19422: * config.h.in: added _BSD_COMPAT
19423:
19424: 1994-05-14 17:56 millert
19425:
19426: * aclocal.m4: fixed for irix5
19427:
19428: 1994-05-14 17:55 millert
19429:
19430: * CHANGES: updated
19431:
19432: 1994-05-14 17:27 millert
19433:
19434: * sudo.c: uid seinitialized to -2
19435:
19436: 1994-04-28 12:36 millert
19437:
19438: * sudo.c: now removes LIBPATH for AIX
19439:
19440: 1994-03-12 20:41 millert
19441:
19442: * configure.in: now uses ufc if it finds it
19443:
19444: 1994-03-12 17:42 millert
19445:
19446: * sudo.h: no longer define yyval & yylval since yacc does it
19447:
19448: 1994-03-12 17:42 millert
19449:
19450: * parse.lex: now defines yylval as extenr
19451:
19452: 1994-03-12 17:41 millert
19453:
19454: * configure.in: BROKEN_GETPASS is now an OPTION
19455:
19456: 1994-03-12 17:41 millert
19457:
19458: * config.h.in: took out BROKEN_GETPASS
19459:
19460: 1994-03-12 17:20 millert
19461:
19462: * Makefile.in: took out big comment
19463:
19464: 1994-03-12 16:24 millert
19465:
19466: * README: updated
19467:
19468: 1994-03-12 16:20 millert
19469:
19470: * Makefile.in: took out README.beta
19471:
19472: 1994-03-12 16:19 millert
19473:
19474: * SUPPORTED: Initial revision
19475:
19476: 1994-03-12 16:19 millert
19477:
19478: * INSTALL: now reference SUPPORTED .,
19479:
19480: 1994-03-12 16:17 millert
19481:
19482: * config.h.in: now check for convex OR __convex__
19483:
19484: 1994-03-12 16:16 millert
19485:
19486: * aclocal.m4: now check for convex or __convex__
19487:
19488: 1994-03-12 16:15 millert
19489:
19490: * Makefile.in: added dist target
19491:
19492: 1994-03-12 15:19 millert
19493:
19494: * aclocal.m4: use __convex__
19495:
19496: 1994-03-12 14:33 millert
19497:
19498: * find_path.c: now use _S_* stat stuff to be ansi-like
19499:
19500: 1994-03-12 14:11 millert
19501:
19502: * INSTALL: updated for configure directions
19503:
19504: 1994-03-12 14:05 millert
19505:
19506: * Makefile.in: distclean now removes config.h and pathnames.h
19507:
19508: 1994-03-12 14:03 millert
19509:
19510: * CHANGES: updated
19511:
19512: 1994-03-12 14:00 millert
19513:
19514: * TODO: fixed typoe
19515:
19516: 1994-03-12 13:57 millert
19517:
19518: * Makefile.in, visudo.c: updated version
19519:
19520: 1994-03-12 13:57 millert
19521:
19522: * config.h.in, pathnames.h.in: added copyright header
19523:
19524: 1994-03-12 13:55 millert
19525:
19526: * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19527: parse.yacc, sudo.c, sudo.h: udpated version
19528:
19529: 1994-03-12 13:39 millert
19530:
19531: * visudo.c: udpated to use configure + pathnames.h
19532:
19533: 1994-03-12 13:37 millert
19534:
19535: * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19536:
19537: 1994-03-12 13:37 millert
19538:
19539: * sudo.h: now works with configure
19540:
19541: 1994-03-12 13:36 millert
19542:
19543: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19544: updated to work with configure + pathnames.h
19545:
19546: 1994-03-12 10:40 millert
19547:
19548: * Makefile.in: added LEXLIB
19549:
19550: 1994-03-10 03:18 millert
19551:
19552: * COPYING: updated gnu general licence to versio 2
19553:
19554: 1994-03-10 02:44 millert
19555:
19556: * pathnames.h.in, config.h.in: Initial revision
19557:
19558: 1994-03-10 01:43 millert
19559:
19560: * sudo.h: changed to work with configure
19561:
19562: 1994-03-09 18:51 millert
19563:
19564: * Makefile.in, aclocal.m4, configure.in: Initial revision
19565:
19566: 1994-03-09 17:36 millert
19567:
19568: * visudo.c: now uses defines used by configure
19569:
19570: 1994-03-01 16:31 millert
19571:
19572: * find_path.c: sudo won't bitch about EPERM now, for real
19573:
19574: 1994-02-28 00:36 millert
19575:
19576: * logging.c: renamed exec_argv to eliminate a libc name clash with
19577: ksros
19578:
19579: 1994-02-28 00:28 millert
19580:
19581: * CHANGES: corrected
19582:
19583: 1994-02-28 00:27 millert
19584:
19585: * logging.c, sudo.c, sudo.h: execve -> execv
19586:
19587: 1994-02-27 23:27 millert
19588:
19589: * TODO: upated
19590:
19591: 1994-02-27 23:19 millert
19592:
19593: * PORTING: added 2 mroe items
19594:
19595: 1994-02-27 23:12 millert
19596:
19597: * CHANGES: updated
19598:
19599: 1994-02-27 23:11 millert
19600:
19601: * sudo.h: added UMASK and mode_t declaration
19602:
19603: 1994-02-27 23:11 millert
19604:
19605: * sudo.c: added UMASK
19606:
19607: 1994-02-27 20:55 millert
19608:
19609: * logging.c: now opens log file with mode 077
19610:
19611: 1994-02-27 20:55 millert
19612:
19613: * check.c: saved current umask ans restores it
19614:
19615: 1994-02-27 20:36 millert
19616:
19617: * sudo.h: added MAXLOGFILELEN
19618:
19619: 1994-02-27 20:35 millert
19620:
19621: * logging.c: split long log lines. FOr syslog, split into multiple
19622: entries, for a log file, indent the extra for readability
19623:
19624: 1994-02-27 17:22 millert
19625:
19626: * CHANGES: added changes
19627:
19628: 1994-02-27 17:18 millert
19629:
19630: * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19631: should be)
19632:
19633: 1994-02-25 16:04 millert
19634:
19635: * TODO: added input from Brett M Hogden <hogden@rge.com>
19636:
19637: 1994-02-16 13:35 millert
19638:
19639: * sudo.c: added rmenv() to remove stuff from environ. can now uses
19640: execvp() OR execve() becuase of this.
19641:
19642: 1994-02-16 13:35 millert
19643:
19644: * logging.c: now uses execvp() OR execve()
19645:
19646: 1994-02-16 13:31 millert
19647:
19648: * sudo.h: added USE_EXECVE
19649:
19650: 1994-02-16 13:27 millert
19651:
19652: * sudo.h: added environ
19653:
19654: 1994-02-16 12:53 millert
19655:
19656: * find_path.c: now ignore EPERM
19657:
19658: 1994-02-15 23:52 millert
19659:
19660: * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19661: statics /.
19662:
19663: 1994-02-15 23:52 millert
19664:
19665: * CHANGES: updated
19666:
19667: 1994-02-15 23:40 millert
19668:
19669: * sudo.h: took out Envp
19670:
19671: 1994-02-14 12:28 millert
19672:
19673: * BUGS: Initial revision
19674:
19675: 1994-02-10 14:29 millert
19676:
19677: * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19678:
19679: 1994-02-10 14:05 millert
19680:
19681: * sudo.h: added SECURE_PATH
19682:
19683: 1994-02-10 13:50 millert
19684:
19685: * INSTALL: added sample.sudoers note
19686:
19687: 1994-02-10 13:47 millert
19688:
19689: * sudoers: Initial revision
19690:
19691: 1994-02-09 14:54 millert
19692:
19693: * find_path.c: fixed typo
19694:
19695: 1994-02-08 23:06 millert
19696:
19697: * PORTING: took out SAVED_UID garbage
19698:
19699: 1994-02-08 22:55 millert
19700:
19701: * INSTALL: mentioned HAL
19702:
19703: 1994-02-08 22:50 millert
19704:
19705: * sudo.h: added HAL line
19706:
19707: 1994-02-08 22:48 millert
19708:
19709: * insults.h: added HAL insults
19710:
19711: 1994-02-08 22:48 millert
19712:
19713: * TODO: updated
19714:
19715: 1994-02-08 22:02 millert
19716:
19717: * logging.c: more verbose error if mailer not found
19718:
19719: 1994-02-08 22:02 millert
19720:
19721: * check.c: now do getpwent as root for soem shadow password systems
19722: (bsdi)
19723:
19724: 1994-02-08 13:22 millert
19725:
19726: * sudo.h: took out SAVED_UID garbade
19727:
19728: 1994-02-08 13:21 millert
19729:
19730: * sudo.c: took out SAVED_UID garbage since it don't work
19731:
19732: 1994-02-06 17:43 millert
19733:
19734: * README: updated
19735:
19736: 1994-02-06 17:40 millert
19737:
19738: * insults.h: added a missing space :-)
19739:
19740: 1994-02-05 19:48 millert
19741:
19742: * sudo.c, sudo.h: took out multimax cruft
19743:
19744: 1994-02-05 19:30 millert
19745:
19746: * INSTALL: minor update
19747:
19748: 1994-02-05 19:30 millert
19749:
19750: * PORTING: finished
19751:
19752: 1994-02-05 19:19 millert
19753:
19754: * sudo.c: fixed a typo + indentation
19755:
19756: 1994-02-05 18:43 millert
19757:
19758: * sudo.h: took outumoved some defines to the config file ,. ,.
19759:
19760: 1994-02-05 15:17 millert
19761:
19762: * PORTING: Initial revision
19763:
19764: 1994-02-05 15:17 millert
19765:
19766: * TODO: did #6
19767:
19768: 1994-02-05 15:16 millert
19769:
19770: * sudo.h: added HAS_SAVED_UID
19771:
19772: 1994-02-05 15:16 millert
19773:
19774: * sudo.c: put back AIX cruft
19775:
19776: 1994-02-03 00:44 millert
19777:
19778: * sudo.c: aix changes
19779:
19780: 1994-02-02 01:31 millert
19781:
19782: * CHANGES: updated
19783:
19784: 1994-02-02 01:30 millert
19785:
19786: * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19787: when abs necesary
19788:
19789: 1994-02-01 22:21 millert
19790:
19791: * check.c: added missing %s\n
19792:
19793: 1994-01-31 02:06 millert
19794:
19795: * install-sh: Initial revision
19796:
19797: 1994-01-31 01:58 millert
19798:
19799: * CHANGES, TODO: updated
19800:
19801: 1994-01-31 01:56 millert
19802:
19803: * sudo.c: now removed _RLD_* for alphas
19804:
19805: 1994-01-31 01:50 millert
19806:
19807: * INSTALL: updated for new config scheme
19808:
19809: 1994-01-30 19:42 millert
19810:
19811: * find_path.c: more verbose eror messages
19812:
19813: 1994-01-27 14:08 millert
19814:
19815: * TODO: now have solaris
19816:
19817: 1994-01-27 14:07 millert
19818:
19819: * sudo.h: define __svr4__ for SOLARIS
19820:
19821: 1994-01-27 14:07 millert
19822:
19823: * check.c: added svr4 junk for shadow pws for solaris 2.x
19824:
19825: 1994-01-27 13:19 millert
19826:
19827: * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19828: Its not needed since we start out setuid with the correct perms.
19829:
19830: 1994-01-26 19:51 millert
19831:
19832: * check.c, sudo.c, sudo.h: now use setreuid()
19833:
19834: 1994-01-26 18:58 millert
19835:
19836: * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19837: VARIABLES sectoin
19838:
19839: 1994-01-26 18:52 millert
19840:
19841: * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19842:
19843: 1994-01-26 18:52 millert
19844:
19845: * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19846: >> .
19847:
19848: 1993-12-07 01:33 millert
19849:
19850: * README: minor update + spell fix
19851:
19852: 1993-12-07 01:33 millert
19853:
19854: * INSTALL: rewrote most of this
19855:
19856: 1993-12-07 01:13 millert
19857:
19858: * sudo.h: added all options that are in the Makefile
19859:
19860: 1993-12-07 00:23 millert
19861:
19862: * getpass.c: now use USE_TERMIO #define for sgi & hpux
19863:
19864: 1993-12-06 23:19 millert
19865:
19866: * TODO: todo: posix sigs
19867:
19868: 1993-12-06 01:12 millert
19869:
19870: * check.c, find_path.c: always include strings.h
19871:
19872: 1993-12-05 20:34 millert
19873:
19874: * visudo.c: added STATICEDITOR
19875:
19876: 1993-12-05 20:30 millert
19877:
19878: * sudo.h: sgi has vi in /usr/bin too
19879:
19880: 1993-12-05 20:23 millert
19881:
19882: * sudo.man: added VISUAL
19883:
19884: 1993-12-02 22:20 millert
19885:
19886: * sudo.h: sue /usr/bin/vi on some systems
19887:
19888: 1993-12-02 22:19 millert
19889:
19890: * sudo.c: fixed warning (include strings.h)
19891:
19892: 1993-12-02 22:06 millert
19893:
19894: * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19895: features)
19896:
19897: 1993-12-02 21:38 millert
19898:
19899: * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19900:
19901: 1993-12-02 21:35 millert
19902:
19903: * visudo.c: added EDITOR envar
19904:
19905: 1993-12-02 21:34 millert
19906:
19907: * check.c, find_path.c, parse.c, sudo.c: added patches from
19908: John_Rouillard directory spec uses EDITOR
19909:
19910: 1993-12-01 19:32 millert
19911:
19912: * getpass.c: added flush for hpux
19913:
19914: 1993-11-30 13:37 millert
19915:
19916: * sudo.c: no longer assume malloc returns a char *
19917:
19918: 1993-11-29 20:35 millert
19919:
19920: * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19921: stuff -- now gets removed correctly
19922:
19923: 1993-11-29 19:31 millert
19924:
19925: * sudo.h: added STD_HEADERS macro
19926:
19927: 1993-11-29 19:14 millert
19928:
19929: * sudo.c: now uses STD_HEADERS macor for ansi
19930:
19931: 1993-11-29 19:14 millert
19932:
19933: * find_path.c: now uses STD_HEADERS macro
19934:
19935: 1993-11-29 19:13 millert
19936:
19937: * check.c: niceties for C compiler bitches -- no real change
19938:
19939: 1993-11-29 13:04 millert
19940:
19941: * visudo.c: now doesn't fclose a file never opened.
19942:
19943: 1993-11-28 16:35 millert
19944:
19945: * sudo.man: added visudo line
19946:
19947: 1993-11-28 16:31 millert
19948:
19949: * sudo.man: added error stuff added me in there...
19950:
19951: 1993-11-28 03:12 millert
19952:
19953: * CHANGES: noted insults
19954:
19955: 1993-11-28 03:01 millert
19956:
19957: * INSTALL: added blurb about reading stuff
19958:
19959: 1993-11-28 03:00 millert
19960:
19961: * sudo.h: added insults
19962:
19963: 1993-11-28 03:00 millert
19964:
19965: * insults.h: corrected somments and removed newlines
19966:
19967: 1993-11-28 03:00 millert
19968:
19969: * check.c: now uses insults
19970:
19971: 1993-11-28 02:45 millert
19972:
19973: * insults.h: Initial revision
19974:
19975: 1993-11-27 19:46 millert
19976:
19977: * INSTALL: added dec syslog note
19978:
19979: 1993-11-27 19:25 millert
19980:
19981: * sample.sudoers: added real stuff in there
19982:
19983: 1993-11-27 19:24 millert
19984:
19985: * TODO: added a todo
19986:
19987: 1993-11-27 19:10 millert
19988:
19989: * TODO: added one
19990:
19991: 1993-11-27 18:59 millert
19992:
19993: * sample.sudoers: Initial revision
19994:
19995: 1993-11-27 18:59 millert
19996:
19997: * sudo.man: updated with changes
19998:
19999: 1993-11-27 18:52 millert
20000:
20001: * sudo.man: Initial revision
20002:
20003: 1993-11-27 18:48 millert
20004:
20005: * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20006: revision
20007:
20008: 1993-11-27 18:46 millert
20009:
20010: * visudo.c: updated version number and took out jeff's old addr
20011: since it is no good
20012:
20013: 1993-11-27 18:42 millert
20014:
20015: * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20016: parse.yacc, sudo.c: updated version number and took out jeff's
20017: email (since it is invalid)
20018:
20019: 1993-10-28 09:36 millert
20020:
20021: * check.c: added fflush()
20022:
20023: 1993-10-22 20:46 millert
20024:
20025: * find_path.c: now return NULL instead pfof exiting for
20026: nopnn-fatal errors
20027:
20028: 1993-10-21 16:57 millert
20029:
20030: * check.c: new banner
20031:
20032: 1993-10-21 16:42 millert
20033:
20034: * parse.lex: now sudo.h gets included first
20035:
20036: 1993-10-17 20:31 millert
20037:
20038: * parse.lex: now can use flex
20039:
20040: 1993-10-17 20:31 millert
20041:
20042: * sudo.h: linux patch
20043:
20044: 1993-10-17 20:30 millert
20045:
20046: * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20047:
20048: 1993-10-17 20:30 millert
20049:
20050: * check.c: linux diff
20051:
20052: 1993-10-15 16:03 millert
20053:
20054: * find_path.c: stat now ignores EINVAL
20055:
20056: 1993-10-05 21:48 millert
20057:
20058: * find_path.c, sudo.c: now declare strdup as extern
20059:
20060: 1993-10-04 15:23 millert
20061:
20062: * visudo.c: reformatted with indent + by hand
20063:
20064: 1993-10-04 15:10 millert
20065:
20066: * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20067: sudo.h: used indent to "fix" coding style
20068:
20069: 1993-10-03 20:12 millert
20070:
20071: * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20072: LAST should maybe move the code that does this into the loop
20073: body. makes it messier tho. hmmm.
20074:
20075: 1993-09-08 11:53 millert
20076:
20077: * find_path.c: redid the fix for non-executable files in an easier
20078: to read way plus some minor aethetic changes
20079:
20080: 1993-09-08 11:39 millert
20081:
20082: * find_path.c: fixed bug with non-executable tings of same name in
20083: path introduced by checkig errno after stat(2).
20084:
20085: 1993-09-05 10:02 millert
20086:
20087: * sudo.c: fixed off by one error
20088:
20089: 1993-09-05 09:55 millert
20090:
20091: * find_path.c: now handles decending below '/' correctly
20092:
20093: 1993-09-05 08:35 millert
20094:
20095: * sudo.c: now actually builds Envp instead of munging envp
20096:
20097: 1993-09-04 15:42 millert
20098:
20099: * parse.yacc: now includes sys/param.h
20100:
20101: 1993-09-04 15:41 millert
20102:
20103: * visudo.c: now includes sys/param.h
20104:
20105: 1993-09-04 15:30 millert
20106:
20107: * sudo.h: fixed ifndef -> ifdef
20108:
20109: 1993-09-04 15:19 millert
20110:
20111: * qualify.c: make more like find_path.c
20112:
20113: 1993-09-04 15:18 millert
20114:
20115: * find_path.c: rewritten by millert
20116:
20117: 1993-09-04 15:17 millert
20118:
20119: * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20120: added info about new defines in the comment
20121:
20122: 1993-09-04 15:15 millert
20123:
20124: * logging.c: now uses USE_CWD
20125:
20126: 1993-09-04 14:10 millert
20127:
20128: * sudo.h: added delc for clean_envp() and Envp
20129:
20130: 1993-09-04 14:09 millert
20131:
20132: * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20133: Envp to exec
20134:
20135: 1993-09-04 14:09 millert
20136:
20137: * logging.c: now uses execve()
20138:
20139: 1993-09-04 14:08 millert
20140:
20141: * find_path.c: ENOTDIR is ok now too (in case part of the path is
20142: bogus)
20143:
20144: 1993-09-04 08:17 millert
20145:
20146: * qualify.c: now works correctly (ttaltotal rewrite)
20147:
20148: 1993-09-04 07:59 millert
20149:
20150: * parse.lex: now includes sys/param.h didn't match trailing / --
20151: fix from rouilj@cs.umb.edu
20152:
20153: 1993-06-11 18:04 millert
20154:
20155: * sudo.c: moved around the #ifndef _AIX
20156:
20157: 1993-06-11 18:03 millert
20158:
20159: * check.c, logging.c, parse.c: Initial revision
20160:
20161: 1993-03-20 07:57 millert
20162:
20163: * qualify.c: Initial revision
20164:
20165: 1993-03-13 15:09 millert
20166:
20167: * find_path.c: now works if you do sudo bin/test
20168:
20169: 1993-03-13 14:20 millert
20170:
20171: * find_path.c: works
20172:
20173: 1993-03-02 18:28 millert
20174:
20175: * sudo.h: Initial revision
20176:
20177: 1993-03-02 11:35 millert
20178:
20179: * visudo.c: Initial revision
20180:
20181: 1993-03-02 11:32 millert
20182:
20183: * parse.lex, parse.yacc: Initial revision
20184:
20185: 1993-02-16 13:24 millert
20186:
20187: * sudo.c: took out errno.h
20188:
20189: 1993-02-16 13:22 millert
20190:
20191: * sudo.c: now spews error if exec fails and exits with -1
20192:
20193: 1993-02-16 12:07 millert
20194:
20195: * sudo.c: Initial revision
20196:
20197: 1993-02-15 22:27 millert
20198:
20199: * find_path.c: now only execs files with (an) executable bit set.
20200:
20201: 1993-02-15 22:01 millert
20202:
20203: * find_path.c: Initial revision
20204:
20205: 1993-02-15 14:32 millert
20206:
20207: * getpass.c: added nice comment
20208:
20209: 1993-02-15 14:19 millert
20210:
20211: * getpass.c: now works on sgi's
20212:
20213: 1993-02-15 13:57 millert
20214:
20215: * getpass.c: Initial revision
20216:
![[BACK]](/icons/back.gif){kind=icon}
Return to ChangeLog CVS log ![[TXT]](/icons/text.gif){kind=icon}
![[DIR]](/icons/dir.gif){kind=icon}
Up to [local] / src / usr.bin / sudo