mir/sudo
2
0
Fork 0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-22 18:08:23 +00:00
Code Issues Releases Wiki Activity
sudo/plugins/sudoers/def_data.h

344 lines
18 KiB
C
Raw Normal View History

Rewrite mkdefaults in awk.
2020-07-30 13:12:29 -06:00
/* generated file, do not edit */
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_SYSLOG 0
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_syslog (sudo_defs_table[I_SYSLOG].sd_un.ival)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_SYSLOG_GOODPRI 1
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_syslog_goodpri (sudo_defs_table[I_SYSLOG_GOODPRI].sd_un.ival)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_SYSLOG_BADPRI 2
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_syslog_badpri (sudo_defs_table[I_SYSLOG_BADPRI].sd_un.ival)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_LONG_OTP_PROMPT 3
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_long_otp_prompt (sudo_defs_table[I_LONG_OTP_PROMPT].sd_un.flag)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_IGNORE_DOT 4
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_ignore_dot (sudo_defs_table[I_IGNORE_DOT].sd_un.flag)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_MAIL_ALWAYS 5
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mail_always (sudo_defs_table[I_MAIL_ALWAYS].sd_un.flag)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_MAIL_BADPASS 6
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mail_badpass (sudo_defs_table[I_MAIL_BADPASS].sd_un.flag)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_MAIL_NO_USER 7
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mail_no_user (sudo_defs_table[I_MAIL_NO_USER].sd_un.flag)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_MAIL_NO_HOST 8
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mail_no_host (sudo_defs_table[I_MAIL_NO_HOST].sd_un.flag)
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
#define I_MAIL_NO_PERMS 9
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mail_no_perms (sudo_defs_table[I_MAIL_NO_PERMS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_MAIL_ALL_CMNDS 10
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mail_all_cmnds (sudo_defs_table[I_MAIL_ALL_CMNDS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_TTY_TICKETS 11
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_tty_tickets (sudo_defs_table[I_TTY_TICKETS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LECTURE 12
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_lecture (sudo_defs_table[I_LECTURE].sd_un.tuple)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LECTURE_FILE 13
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_lecture_file (sudo_defs_table[I_LECTURE_FILE].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_AUTHENTICATE 14
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_authenticate (sudo_defs_table[I_AUTHENTICATE].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ROOT_SUDO 15
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_root_sudo (sudo_defs_table[I_ROOT_SUDO].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LOG_HOST 16
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_log_host (sudo_defs_table[I_LOG_HOST].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LOG_YEAR 17
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_log_year (sudo_defs_table[I_LOG_YEAR].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_SHELL_NOARGS 18
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_shell_noargs (sudo_defs_table[I_SHELL_NOARGS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_SET_HOME 19
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_set_home (sudo_defs_table[I_SET_HOME].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ALWAYS_SET_HOME 20
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_always_set_home (sudo_defs_table[I_ALWAYS_SET_HOME].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_PATH_INFO 21
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_path_info (sudo_defs_table[I_PATH_INFO].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_FQDN 22
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_fqdn (sudo_defs_table[I_FQDN].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_INSULTS 23
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_insults (sudo_defs_table[I_INSULTS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_REQUIRETTY 24
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_requiretty (sudo_defs_table[I_REQUIRETTY].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ENV_EDITOR 25
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_env_editor (sudo_defs_table[I_ENV_EDITOR].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ROOTPW 26
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_rootpw (sudo_defs_table[I_ROOTPW].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_RUNASPW 27
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_runaspw (sudo_defs_table[I_RUNASPW].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_TARGETPW 28
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_targetpw (sudo_defs_table[I_TARGETPW].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_USE_LOGINCLASS 29
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_use_loginclass (sudo_defs_table[I_USE_LOGINCLASS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_SET_LOGNAME 30
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_set_logname (sudo_defs_table[I_SET_LOGNAME].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_STAY_SETUID 31
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_stay_setuid (sudo_defs_table[I_STAY_SETUID].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_PRESERVE_GROUPS 32
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_preserve_groups (sudo_defs_table[I_PRESERVE_GROUPS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LOGLINELEN 33
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_loglinelen (sudo_defs_table[I_LOGLINELEN].sd_un.uival)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_TIMESTAMP_TIMEOUT 34
Store passwd_timeout and timestamp_timeout as a struct timespec instead of as a float. Remove timeout argument to auth_getpass() as it was never used.
2018-01-22 12:18:48 -07:00
#define def_timestamp_timeout (sudo_defs_table[I_TIMESTAMP_TIMEOUT].sd_un.tspec)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_PASSWD_TIMEOUT 35
Store passwd_timeout and timestamp_timeout as a struct timespec instead of as a float. Remove timeout argument to auth_getpass() as it was never used.
2018-01-22 12:18:48 -07:00
#define def_passwd_timeout (sudo_defs_table[I_PASSWD_TIMEOUT].sd_un.tspec)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_PASSWD_TRIES 36
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_passwd_tries (sudo_defs_table[I_PASSWD_TRIES].sd_un.uival)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_UMASK 37
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_umask (sudo_defs_table[I_UMASK].sd_un.mode)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LOGFILE 38
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_logfile (sudo_defs_table[I_LOGFILE].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_MAILERPATH 39
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mailerpath (sudo_defs_table[I_MAILERPATH].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_MAILERFLAGS 40
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mailerflags (sudo_defs_table[I_MAILERFLAGS].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_MAILTO 41
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mailto (sudo_defs_table[I_MAILTO].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_MAILFROM 42
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mailfrom (sudo_defs_table[I_MAILFROM].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_MAILSUB 43
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_mailsub (sudo_defs_table[I_MAILSUB].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_BADPASS_MESSAGE 44
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_badpass_message (sudo_defs_table[I_BADPASS_MESSAGE].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LECTURE_STATUS_DIR 45
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_lecture_status_dir (sudo_defs_table[I_LECTURE_STATUS_DIR].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_TIMESTAMPDIR 46
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_timestampdir (sudo_defs_table[I_TIMESTAMPDIR].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_TIMESTAMPOWNER 47
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_timestampowner (sudo_defs_table[I_TIMESTAMPOWNER].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_EXEMPT_GROUP 48
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_exempt_group (sudo_defs_table[I_EXEMPT_GROUP].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_PASSPROMPT 49
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_passprompt (sudo_defs_table[I_PASSPROMPT].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_PASSPROMPT_OVERRIDE 50
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_passprompt_override (sudo_defs_table[I_PASSPROMPT_OVERRIDE].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_RUNAS_DEFAULT 51
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_runas_default (sudo_defs_table[I_RUNAS_DEFAULT].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_SECURE_PATH 52
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_secure_path (sudo_defs_table[I_SECURE_PATH].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_EDITOR 53
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_editor (sudo_defs_table[I_EDITOR].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_LISTPW 54
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_listpw (sudo_defs_table[I_LISTPW].sd_un.tuple)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_VERIFYPW 55
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_verifypw (sudo_defs_table[I_VERIFYPW].sd_un.tuple)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_NOEXEC 56
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_noexec (sudo_defs_table[I_NOEXEC].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_IGNORE_LOCAL_SUDOERS 57
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_ignore_local_sudoers (sudo_defs_table[I_IGNORE_LOCAL_SUDOERS].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_CLOSEFROM 58
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_closefrom (sudo_defs_table[I_CLOSEFROM].sd_un.ival)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_CLOSEFROM_OVERRIDE 59
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_closefrom_override (sudo_defs_table[I_CLOSEFROM_OVERRIDE].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_SETENV 60
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_setenv (sudo_defs_table[I_SETENV].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ENV_RESET 61
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_env_reset (sudo_defs_table[I_ENV_RESET].sd_un.flag)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ENV_CHECK 62
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_env_check (sudo_defs_table[I_ENV_CHECK].sd_un.list)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ENV_DELETE 63
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_env_delete (sudo_defs_table[I_ENV_DELETE].sd_un.list)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ENV_KEEP 64
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_env_keep (sudo_defs_table[I_ENV_KEEP].sd_un.list)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ROLE 65
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_role (sudo_defs_table[I_ROLE].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_TYPE 66
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_type (sudo_defs_table[I_TYPE].sd_un.str)
Add mail_all_cmnds to always mail when a user runs a command (or tries to) including sudoedit. The mail_always flag goes back to its old semantic of always mailing when sudo is run.
2015-02-15 20:30:11 -07:00
#define I_ENV_FILE 67
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_env_file (sudo_defs_table[I_ENV_FILE].sd_un.str)
Add restricted_env_file which is like env_file but subject to the same restrictions as the user's own environment.
2017-03-22 13:39:25 -06:00
#define I_RESTRICTED_ENV_FILE 68
#define def_restricted_env_file (sudo_defs_table[I_RESTRICTED_ENV_FILE].sd_un.str)
#define I_SUDOERS_LOCALE 69
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_sudoers_locale (sudo_defs_table[I_SUDOERS_LOCALE].sd_un.str)
Add restricted_env_file which is like env_file but subject to the same restrictions as the user's own environment.
2017-03-22 13:39:25 -06:00
#define I_VISIBLEPW 70
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_visiblepw (sudo_defs_table[I_VISIBLEPW].sd_un.flag)
Add restricted_env_file which is like env_file but subject to the same restrictions as the user's own environment.
2017-03-22 13:39:25 -06:00
#define I_PWFEEDBACK 71
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_pwfeedback (sudo_defs_table[I_PWFEEDBACK].sd_un.flag)
Add restricted_env_file which is like env_file but subject to the same restrictions as the user's own environment.
2017-03-22 13:39:25 -06:00
#define I_FAST_GLOB 72
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_fast_glob (sudo_defs_table[I_FAST_GLOB].sd_un.flag)
Add restricted_env_file which is like env_file but subject to the same restrictions as the user's own environment.
2017-03-22 13:39:25 -06:00
#define I_UMASK_OVERRIDE 73
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_umask_override (sudo_defs_table[I_UMASK_OVERRIDE].sd_un.flag)
Add restricted_env_file which is like env_file but subject to the same restrictions as the user's own environment.
2017-03-22 13:39:25 -06:00
#define I_LOG_INPUT 74
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_log_input (sudo_defs_table[I_LOG_INPUT].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_STDIN 75
#define def_log_stdin (sudo_defs_table[I_LOG_STDIN].sd_un.flag)
#define I_LOG_TTYIN 76
#define def_log_ttyin (sudo_defs_table[I_LOG_TTYIN].sd_un.flag)
#define I_LOG_OUTPUT 77
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_log_output (sudo_defs_table[I_LOG_OUTPUT].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_STDOUT 78
#define def_log_stdout (sudo_defs_table[I_LOG_STDOUT].sd_un.flag)
#define I_LOG_STDERR 79
#define def_log_stderr (sudo_defs_table[I_LOG_STDERR].sd_un.flag)
#define I_LOG_TTYOUT 80
#define def_log_ttyout (sudo_defs_table[I_LOG_TTYOUT].sd_un.flag)
#define I_COMPRESS_IO 81
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_compress_io (sudo_defs_table[I_COMPRESS_IO].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_USE_PTY 82
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_use_pty (sudo_defs_table[I_USE_PTY].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_GROUP_PLUGIN 83
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_group_plugin (sudo_defs_table[I_GROUP_PLUGIN].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IOLOG_DIR 84
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_iolog_dir (sudo_defs_table[I_IOLOG_DIR].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IOLOG_FILE 85
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_iolog_file (sudo_defs_table[I_IOLOG_FILE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_SET_UTMP 86
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_set_utmp (sudo_defs_table[I_SET_UTMP].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_UTMP_RUNAS 87
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_utmp_runas (sudo_defs_table[I_UTMP_RUNAS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PRIVS 88
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_privs (sudo_defs_table[I_PRIVS].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LIMITPRIVS 89
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_limitprivs (sudo_defs_table[I_LIMITPRIVS].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_EXEC_BACKGROUND 90
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_exec_background (sudo_defs_table[I_EXEC_BACKGROUND].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_SERVICE 91
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_pam_service (sudo_defs_table[I_PAM_SERVICE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_LOGIN_SERVICE 92
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_pam_login_service (sudo_defs_table[I_PAM_LOGIN_SERVICE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_ASKPASS_SERVICE 93
Add pam_askpass_service sudoers setting for "sudo -A". This makes it possible to use a different PAM configuration for when "sudo -A" is used. The main use case is to only use PAM modules that can interact with the askpass program. GitHub issue #112.
2022-01-08 11:35:03 -07:00
#define def_pam_askpass_service (sudo_defs_table[I_PAM_ASKPASS_SERVICE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_SETCRED 94
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_pam_setcred (sudo_defs_table[I_PAM_SETCRED].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_SESSION 95
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_pam_session (sudo_defs_table[I_PAM_SESSION].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_ACCT_MGMT 96
Add pam_acct_mgmt setting to enable/disable PAM account validation.
2019-04-29 19:44:13 -06:00
#define def_pam_acct_mgmt (sudo_defs_table[I_PAM_ACCT_MGMT].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_MAXSEQ 97
Refactor code in sudoers that creates I/O log files to share with logsrvd.
2019-10-24 20:04:31 -06:00
#define def_maxseq (sudo_defs_table[I_MAXSEQ].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_USE_NETGROUPS 98
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_use_netgroups (sudo_defs_table[I_USE_NETGROUPS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_SUDOEDIT_CHECKDIR 99
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_sudoedit_checkdir (sudo_defs_table[I_SUDOEDIT_CHECKDIR].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_SUDOEDIT_FOLLOW 100
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_sudoedit_follow (sudo_defs_table[I_SUDOEDIT_FOLLOW].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_ALWAYS_QUERY_GROUP_PLUGIN 101
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_always_query_group_plugin (sudo_defs_table[I_ALWAYS_QUERY_GROUP_PLUGIN].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_NETGROUP_TUPLE 102
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_netgroup_tuple (sudo_defs_table[I_NETGROUP_TUPLE].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IGNORE_AUDIT_ERRORS 103
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_ignore_audit_errors (sudo_defs_table[I_IGNORE_AUDIT_ERRORS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IGNORE_IOLOG_ERRORS 104
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_ignore_iolog_errors (sudo_defs_table[I_IGNORE_IOLOG_ERRORS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IGNORE_LOGFILE_ERRORS 105
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_ignore_logfile_errors (sudo_defs_table[I_IGNORE_LOGFILE_ERRORS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_MATCH_GROUP_BY_GID 106
Define def_foo in terms of the I_FOO index instead of a bare number.
2016-08-31 14:27:40 -06:00
#define def_match_group_by_gid (sudo_defs_table[I_MATCH_GROUP_BY_GID].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_SYSLOG_MAXLEN 107
Add syslog_maxlen to control the max size of syslog messages.
2016-10-18 15:51:47 -06:00
#define def_syslog_maxlen (sudo_defs_table[I_SYSLOG_MAXLEN].sd_un.uival)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IOLOG_USER 108
Make the I/O log file/dir permissions and owner configurable.
2016-10-29 12:45:55 -06:00
#define def_iolog_user (sudo_defs_table[I_IOLOG_USER].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IOLOG_GROUP 109
Make the I/O log file/dir permissions and owner configurable.
2016-10-29 12:45:55 -06:00
#define def_iolog_group (sudo_defs_table[I_IOLOG_GROUP].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IOLOG_MODE 110
Make the I/O log file/dir permissions and owner configurable.
2016-10-29 12:45:55 -06:00
#define def_iolog_mode (sudo_defs_table[I_IOLOG_MODE].sd_un.mode)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_FDEXEC 111
Add new fdexec sudoers setting to allow choose whether execve() or fexecve() is used.
2017-01-22 18:56:16 -08:00
#define def_fdexec (sudo_defs_table[I_FDEXEC].sd_un.tuple)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IGNORE_UNKNOWN_DEFAULTS 112
Add ignore_unknown_defaults flag to ignore unknown Defaults entries in sudoers instead of producing a warning.
2017-02-06 05:41:57 -07:00
#define def_ignore_unknown_defaults (sudo_defs_table[I_IGNORE_UNKNOWN_DEFAULTS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_COMMAND_TIMEOUT 113
Add support for command timeouts in sudoers. After the timeout, the command will be terminated.
2017-02-14 15:56:34 -07:00
#define def_command_timeout (sudo_defs_table[I_COMMAND_TIMEOUT].sd_un.ival)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_USER_COMMAND_TIMEOUTS 114
Add a command line option to specify the command timeout, as long as sudoers does not specify a shorter time limit.
2017-02-16 09:58:18 -07:00
#define def_user_command_timeouts (sudo_defs_table[I_USER_COMMAND_TIMEOUTS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_IOLOG_FLUSH 115
Add iolog_flush option.
2017-03-20 10:25:58 -06:00
#define def_iolog_flush (sudo_defs_table[I_IOLOG_FLUSH].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_SYSLOG_PID 116
Add syslog_pid sudoers option to log sudo's process ID when logging via syslog. This is disabled by default to match historic behavior.
2017-07-20 16:33:12 -06:00
#define def_syslog_pid (sudo_defs_table[I_SYSLOG_PID].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_TIMESTAMP_TYPE 117
Replace tty_tickets option with timestamp_type which can be global, ppid or tty. Defaults to tty (no change in behavior). Some users want the ppid behavior.
2017-08-01 16:14:54 -06:00
#define def_timestamp_type (sudo_defs_table[I_TIMESTAMP_TYPE].sd_un.tuple)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_AUTHFAIL_MESSAGE 118
Add authfail_message sudoers option to allow the user to override the default message of %d incorrect password attempt(s).
2017-12-11 12:43:58 -07:00
#define def_authfail_message (sudo_defs_table[I_AUTHFAIL_MESSAGE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_CASE_INSENSITIVE_USER 119
Add case_insensitive_group and case_insensitive_user sudoers options, which are enabled by default.
2018-03-05 10:42:02 -07:00
#define def_case_insensitive_user (sudo_defs_table[I_CASE_INSENSITIVE_USER].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_CASE_INSENSITIVE_GROUP 120
Add case_insensitive_group and case_insensitive_user sudoers options, which are enabled by default.
2018-03-05 10:42:02 -07:00
#define def_case_insensitive_group (sudo_defs_table[I_CASE_INSENSITIVE_GROUP].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_ALLOWED 121
Add log_allowed and log_denied sudoers flags, defaulting to true.
2019-10-17 13:43:04 -06:00
#define def_log_allowed (sudo_defs_table[I_LOG_ALLOWED].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_DENIED 122
Add log_allowed and log_denied sudoers flags, defaulting to true.
2019-10-17 13:43:04 -06:00
#define def_log_denied (sudo_defs_table[I_LOG_DENIED].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVERS 123
Rename "log_server" in sudoers to "log_servers" to match I/O plugin.
2019-11-18 09:39:03 -07:00
#define def_log_servers (sudo_defs_table[I_LOG_SERVERS].sd_un.list)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVER_TIMEOUT 124
Add support for logging to the log server
2019-11-15 13:41:51 -07:00
#define def_log_server_timeout (sudo_defs_table[I_LOG_SERVER_TIMEOUT].sd_un.ival)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVER_KEEPALIVE 125
sudoers: disable SO_KEEPALIVE socket option based on log_server_disable_keepalive flag in sudoers
2020-01-21 15:18:27 +01:00
#define def_log_server_keepalive (sudo_defs_table[I_LOG_SERVER_KEEPALIVE].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVER_CABUNDLE 126
add audit server tls related configuration options to sudoers
2019-11-28 11:16:54 +01:00
#define def_log_server_cabundle (sudo_defs_table[I_LOG_SERVER_CABUNDLE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVER_PEER_CERT 127
add audit server tls related configuration options to sudoers
2019-11-28 11:16:54 +01:00
#define def_log_server_peer_cert (sudo_defs_table[I_LOG_SERVER_PEER_CERT].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVER_PEER_KEY 128
add audit server tls related configuration options to sudoers
2019-11-28 11:16:54 +01:00
#define def_log_server_peer_key (sudo_defs_table[I_LOG_SERVER_PEER_KEY].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SERVER_VERIFY 129
Adapt sudoers iolog client to log server dual port changes. The TLS handshake now occurs before the ServerHello message is read. This fixes potential man-in-the-middle attacks and works better with TLS 1.3.
2020-05-04 11:28:54 -06:00
#define def_log_server_verify (sudo_defs_table[I_LOG_SERVER_VERIFY].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RUNAS_ALLOW_UNKNOWN_ID 130
Add a new flag "allow_unknown_runas_id" to control matching of unknown IDs. Previous, sudo would always allow unknown user or group IDs if the sudoers entry permitted it. This included the "ALL" alias. With this change, the admin must explicitly enable support for unknown IDs.
2019-12-09 17:14:06 -07:00
#define def_runas_allow_unknown_id (sudo_defs_table[I_RUNAS_ALLOW_UNKNOWN_ID].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RUNAS_CHECK_SHELL 131
Add runas_check_shell flag to require a runas user to have a valid shell. Not enabled by default.
2019-12-09 19:29:45 -07:00
#define def_runas_check_shell (sudo_defs_table[I_RUNAS_CHECK_SHELL].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_RUSER 132
Add pam_ruser and pam_rhost sudoers flags.
2020-03-01 13:37:00 -07:00
#define def_pam_ruser (sudo_defs_table[I_PAM_RUSER].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PAM_RHOST 133
Add pam_ruser and pam_rhost sudoers flags.
2020-03-01 13:37:00 -07:00
#define def_pam_rhost (sudo_defs_table[I_PAM_RHOST].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RUNCWD 134
Add CHROOT and CWD sudoers options. Also matching runchroot and runcwd Defaults settings.
2020-09-01 06:26:00 -06:00
#define def_runcwd (sudo_defs_table[I_RUNCWD].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RUNCHROOT 135
Add CHROOT and CWD sudoers options. Also matching runchroot and runcwd Defaults settings.
2020-09-01 06:26:00 -06:00
#define def_runchroot (sudo_defs_table[I_RUNCHROOT].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_FORMAT 136
Add log_format sudoers setting to select sudo or json format logs. Defaults to sudo-format logs.
2020-10-27 15:26:02 -06:00
#define def_log_format (sudo_defs_table[I_LOG_FORMAT].sd_un.tuple)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_SELINUX 137
Allow SELinux support to be disabled via the sudoers file. Defaults to true if sudo is built with SELinux support and SELinux is not disabled on the system.
2021-01-08 19:29:17 -07:00
#define def_selinux (sudo_defs_table[I_SELINUX].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_ADMIN_FLAG 138
Add admin_flag sudoers option and make --enable-admin-flag take a path. It is now possible to disable the Ubuntu admin flag in sudoers or change its location. GitHub issue #56
2021-02-16 13:20:02 -07:00
#define def_admin_flag (sudo_defs_table[I_ADMIN_FLAG].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_INTERCEPT 139
Add "intercept" Defaults setting to allow interception of sub-commands. This causes "intercept" to be set to true in command_info[] which the sudo front-end will use to determine whether or not to intercept attempts to run further commands, such as from a shell. Also add "log_children" which will use the same mechanism but only log (audit) further commands.
2021-08-09 15:50:25 -06:00
#define def_intercept (sudo_defs_table[I_INTERCEPT].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_SUBCMDS 140
Rename log_children -> log_subcmds
2021-08-26 16:36:41 -06:00
#define def_log_subcmds (sudo_defs_table[I_LOG_SUBCMDS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_EXIT_STATUS 141
Add log_exit_status sudoers option to log when a command exits. This option defaults to off.
2021-07-09 11:08:44 -06:00
#define def_log_exit_status (sudo_defs_table[I_LOG_EXIT_STATUS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_INTERCEPT_AUTHENTICATE 142
Add intercept_authenticate sudoers option, defaults to false. By default, sudoers will not require authentication of commands run via an intercepted session. To require authenticaton of subsequent commands, enable intercept_authenticate in sudoers.
2021-08-09 15:50:26 -06:00
#define def_intercept_authenticate (sudo_defs_table[I_INTERCEPT_AUTHENTICATE].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_INTERCEPT_ALLOW_SETID 143
Add intercept_allow_setid sudoers option, disabled by default. With this change, a shell in intercept mode cannot run a setuid or setgid binary by default. On most systems, the dynamic loader will ignore LD_PRELOAD for setuid/setgid binaries such as sudo which would effectively disable intercept mode.
2021-08-18 15:43:26 -06:00
#define def_intercept_allow_setid (sudo_defs_table[I_INTERCEPT_ALLOW_SETID].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_AS 144
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_as (sudo_defs_table[I_RLIMIT_AS].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_CORE 145
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_core (sudo_defs_table[I_RLIMIT_CORE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_CPU 146
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_cpu (sudo_defs_table[I_RLIMIT_CPU].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_DATA 147
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_data (sudo_defs_table[I_RLIMIT_DATA].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_FSIZE 148
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_fsize (sudo_defs_table[I_RLIMIT_FSIZE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_LOCKS 149
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_locks (sudo_defs_table[I_RLIMIT_LOCKS].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_MEMLOCK 150
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_memlock (sudo_defs_table[I_RLIMIT_MEMLOCK].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_NOFILE 151
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_nofile (sudo_defs_table[I_RLIMIT_NOFILE].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_NPROC 152
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_nproc (sudo_defs_table[I_RLIMIT_NPROC].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_RSS 153
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_rss (sudo_defs_table[I_RLIMIT_RSS].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_RLIMIT_STACK 154
Add basic support for setting resource limits in sudoers. The default for rlimit_core is "0,0" Resource limits are passed back to the front-end in command_info[] when set.
2021-11-08 17:46:19 -07:00
#define def_rlimit_stack (sudo_defs_table[I_RLIMIT_STACK].sd_un.str)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_NONINTERACTIVE_AUTH 155
Add sudoers option to perform authentication even in non-interative mode. If noninteractive_auth is set, authentication methods that do not require input from the user's terminal may proceed. It is off by default, which restores the pre-1.9.9 behavior of "sudo -n".
2022-02-01 20:08:26 -07:00
#define def_noninteractive_auth (sudo_defs_table[I_NONINTERACTIVE_AUTH].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_LOG_PASSWORDS 156
Add a new sudoers settings log_passwords and passprompt_regex. When logging terminal input, if log_passwords is disabled and any of the regular expressions in the passprompt_regex list are found in the terminal output, terminal input will be replaced with '*' characters until a newline or carriage return is found in the input or an output character is received.
2022-01-28 08:52:41 -07:00
#define def_log_passwords (sudo_defs_table[I_LOG_PASSWORDS].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_PASSPROMPT_REGEX 157
Add a new sudoers settings log_passwords and passprompt_regex. When logging terminal input, if log_passwords is disabled and any of the regular expressions in the passprompt_regex list are found in the terminal output, terminal input will be replaced with '*' characters until a newline or carriage return is found in the input or an output character is received.
2022-01-28 08:52:41 -07:00
#define def_passprompt_regex (sudo_defs_table[I_PASSPROMPT_REGEX].sd_un.list)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_INTERCEPT_TYPE 158
Add intercept_type sudoers option to set intercept/log_subcmds mechanism.
2022-05-24 13:39:28 -06:00
#define def_intercept_type (sudo_defs_table[I_INTERCEPT_TYPE].sd_un.tuple)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_INTERCEPT_VERIFY 159
Add intercept_verify sudoers option to control execve(2) argument checking.
2022-07-29 15:22:27 -06:00
#define def_intercept_verify (sudo_defs_table[I_INTERCEPT_VERIFY].sd_un.flag)
Split log_{input,output} into log_{stdin,ttyin} and log_{ttyout,stdout,stderr} If log_input is set, log_{stdin,ttyin} will be set as well. If log_output is set, log_{stdout,stderr,ttyout} will be set as well. This provides more fine-grained control over I/O logging and makes it possible to disable logging piped or redirected intput or output.
2022-09-20 14:35:12 -06:00
#define I_APPARMOR_PROFILE 160
Add an APPARMOR_PROFILE user spec option to sudoers sudoers now supports an APPARMOR_PROFILE option, which can be specified as e.g. alice ALL=(ALL:ALL) APPARMOR_PROFILE=foo ALL The line above says "user alice can run any command as any user/group, under confinement by the AppArmor profile 'foo'." Profiles can be specified in any way that complies with the rules of aa_change_profile(2). For instance, the sudoers configuration alice ALL=(ALL:ALL) APPARMOR_PROFILE=unconfined ALL allows alice to run any command unconfined (i.e., without an AppArmor profile), while alice ALL=(ALL:ALL) APPARMOR_PROFILE=foo//&bar ALL tells sudoers that alice can run any command under the stacked AppArmor profiles 'foo' and 'bar'. The intention of this option is to give sysadmins on Linux distros supporting AppArmor better options for fine-grained access control. Among other things, this option can enforce mandatory access control (MAC) over the operations that a privileged user is able to perform to ensure that they cannot privesc past the boundaries of a specified profile. It can also be used to limit which users are able to get unconfined system access, by enforcing a default AppArmor profile on all users and then specifying 'APPARMOR_PROFILE=unconfined' for a privileged subset of users.
2022-05-23 13:16:10 -06:00
#define def_apparmor_profile (sudo_defs_table[I_APPARMOR_PROFILE].sd_un.str)
Add support for a custom message when the command execution is denied.
2023-11-20 23:29:04 +00:00
#define I_CMDDENIAL_MESSAGE 161
#define def_cmddenial_message (sudo_defs_table[I_CMDDENIAL_MESSAGE].sd_un.str)
Fix typo; tupple vs. tuple
2011-03-15 15:52:18 -04:00
enum def_tuple {
Fix indentation of enum def_tuple.
2020-09-29 21:16:34 -06:00
never,
once,
always,
any,
all,
digest_only,
global,
ppid,
tty,
Add log_format sudoers setting to select sudo or json format logs. Defaults to sudo-format logs.
2020-10-27 15:26:02 -06:00
kernel,
sudo,
Add intercept_type sudoers option to set intercept/log_subcmds mechanism.
2022-05-24 13:39:28 -06:00
json,
dso,
trace
Add support for tuples in def_data.in; these are implemented as an enum type. Currently there is only a single tuple enum but in the future we may have one tuple enum per T_TUPLE entry in def_data.in. Currently listpw, verifypw and lecture are tuples. This avoids the need to have two entries (one ival, one str) for pwflags and syslog values. lecture is now a tuple with the following values: never, once, always We no longer use both an int and string entry for syslog facilities and priorities. Instead, there are logfac2str() and logpri2str() functions that get used when we need to print the string values.
2003-12-30 22:31:30 +00:00
};
Reference in New Issue Copy Permalink