Return to TODO CVS log

Up to [local] / src / usr.bin / sudo

Annotation of src/usr.bin/sudo/TODO, Revision 1.1.1.1

1.1       millert     1: TODO list (most will be addressed in sudo 2.0)
                      2:
                      3: 01) Redo parsing to be more like op(8) with true command aliases where
                      4:     can specify uid, gid(s) and part/all of the environment.
                      5:
                      6: 02) Add default options to sudoers file (umask, def uid, def gids, dir, PATH).
                      7:     Defaults = option1, option2, ...
                      8:     Defaults@host = option1, option2, ...
                      9:     Defaults!user = option1, option2, ...
                     10:     Defaults%group = option1, option2, ...
                     11:     Defaults+netgroup = option1, option2, ...
                     12:
                     13: 03) Add a SHELLS reserved word that checks against /etc/shells.
                     14:
                     15: 04) Make the sudoers file accessible via NIS, Hesiod, and maybe NetInfo.
                     16:
                     17: 05) Add a -h (?) flag to sudo for a history mechanism.
                     18:
                     19: 06) Add an option to hard-code LD_LIBRARY_PATH?
                     20:
                     21: 07) Add Prog_Alias facility (Prog_Alias VI = /usr/secure/bin/vi +args).
                     22:
                     23: 08) check for <net/errno.h> in configure and include it in sudo.c if it exists.
                     24:
                     25: 09) Add generic STREAMS support for getting interfaces and netmasks.
                     26:
                     27: 10) Add support for "safe scripts" by checking for shell script
                     28:     cookie (first two bytes are "#!") and execing the shell outselves
                     29:     after doing the stat to guard against spoofing.  This should avoid
                     30:     the race condition caused by going through namei() twice...
                     31:
                     32: 11) Overhaul testsudoers to use things from parse.o so we don't reimplement
                     33:     things.
                     34:
                     35: 12) Make runas_user a struct "runas" with user and group components.
                     36:     (maybe uid and gid too???)
                     37:
                     38: 13) Add -g group/gid option.
                     39:
                     40: 14) Should be able to mix Cmnd_Alias's and command args.  Ie:
                     41:        pete   ALL=PASSWD [A-z]*,!PASSWD root
                     42:     where PASSWD was defined to be /usr/bin/passwd.
                     43:     This requires the arg parsing to happen in the yacc grammer.
                     44:     At the very least, commands and args have to become separate
                     45:     tokens in the lexer.
                     46:
                     47: 15) Add a per-tty restriction?  Ie: only can run foo from /dev/console.
                     48:
                     49: 16) Add test for how to read ether interfaces in configure script
                     50:
                     51: 17) Add configure check for $(CC) -R and use it in addition to -L
                     52:
                     53: 18) An option to make "sudo -s" use the target user's shell might be nice
                     54:     (and more like su).
                     55:
                     56: 19) Use getrlimit() in preference to getconf()/getdtablesize().
                     57:
                     58: 20) Add configure option to enable old behavior of visudo (O_EXCL)?
                     59:     --without-sudoers-lock?
                     60:
                     61: 21) Profile sudo again (is the yacc grammar optimal?)
                     62:
                     63: 22) Zero out encrypted passwords after use.  Use an Exit function or
                     64:     some such (have to hook in to emalloc() and friends).
                     65:     Hard (impossible?) to be thorough w/ atexit/on_exit.
                     66:
                     67: 23) Make 'sudo -l user' if run as root do a "sudo -l" output for the specified
                     68:     user.
                     69:
                     70: 24) Use strtol() and strtoul(), not atoi()
                     71:
                     72: 25) In parse.yacc get rid on unneeded '{ ; }'
                     73:
                     74: 26) Look into %e, %p, %k in parse.lex
                     75:
                     76: 27) Document Defaults stuff in sudoers.pod
                     77:
                     78: 28) Make syslog stuff work on vanilla ultrix
                     79:
                     80: 29) Implement date_format and log_format options.
                     81:
                     82: 30) Add support for: Default:user@host
                     83:
                     84: 31) Add -S flag to force password read from stdin