Todd C. Miller
4f953d8391
Clear, don't set, OPOST in c_oflag as was intended in 506ad5ae9b4e.
2011-01-18 11:26:48 -05:00
Todd C. Miller
5b5a173ff3
Add Requires line for audit-libs >= 1.4 for RHEL5+
2011-01-14 15:03:57 -05:00
Todd C. Miller
add7f327ea
sync with git version
2011-01-14 14:33:32 -05:00
Todd C. Miller
0726c8fe24
fix typo
2011-01-13 13:10:15 -05:00
Todd C. Miller
3792df2bd4
Update for sudo 1.7.4p5
2011-01-12 13:43:50 -05:00
Todd C. Miller
12895f77aa
Add sudoNotBefore and sudoNotAfter attributes as optional attributes
...
to the sudoRole object class. From Andreas Mueller
2011-01-12 09:25:24 -05:00
Todd C. Miller
5b0a50d519
Mention "sudo -g group" password check fix.
2011-01-11 10:44:36 -05:00
Todd C. Miller
e7a4529cf8
Fix "sudo -g" support in the sudoers module.
2011-01-11 10:42:01 -05:00
Todd C. Miller
2d74e9567f
If the user is running sudo as himself but as a different group we
...
need to prompt for a password.
2011-01-11 10:35:20 -05:00
Todd C. Miller
49409b7c5d
Add support for TIMEOUT in ldap.conf, mapping to the OpenLDAP
...
LDAP_OPT_TIMEOUT. There is no corresponding option for mozilla-derived
LDAP SDKs but we can pass the timeout parameter to ldap_search_ext_s()
or ldap_search_st() when possible.
2011-01-10 10:33:22 -05:00
Todd C. Miller
a628fee981
regen
2011-01-10 09:28:53 -05:00
Todd C. Miller
823e812723
Add NETWORK_TIMEOUT as an alias for BIND_TIMELIMIT for compatibility
...
with OpenLDAP ldap.conf files.
2011-01-10 09:27:58 -05:00
Todd C. Miller
8a043ca562
If user has no supplementary groups, fall back on checking the group
...
file expliticly.
2011-01-10 09:23:54 -05:00
Todd C. Miller
e63849afb0
constify
2011-01-08 19:54:30 -05:00
Todd C. Miller
4cc6322b48
Move fill macro to toke.h
2011-01-08 19:34:31 -05:00
Todd C. Miller
400b6ffe20
Split tokenizer utility functions out into toke_util.c
2011-01-08 15:42:39 -05:00
Todd C. Miller
866ffd0bdb
ANSIfy
2011-01-08 15:15:30 -05:00
Todd C. Miller
385eeeb138
sync
2011-01-07 15:13:42 -05:00
Todd C. Miller
e8cc22c0c8
Add visudo tests to check target
2011-01-07 15:10:28 -05:00
Todd C. Miller
ac857d6e9d
Add my regress tests for fnmatch() and glob() from OpenBSD.
2011-01-07 14:48:19 -05:00
Todd C. Miller
460f760ca2
Add regress test for command tags using visudo -c
2011-01-07 14:01:57 -05:00
Todd C. Miller
b679e03195
Add support for regress tests using testsudoers
2011-01-07 13:19:32 -05:00
Todd C. Miller
217d296111
Need to set user_name explicitly due to internal changes made when
...
converting sudoers to a plugin.
2011-01-07 11:56:15 -05:00
Todd C. Miller
1defd7b456
Add regression tests for iolog_path()
2011-01-06 11:05:28 -05:00
Todd C. Miller
f8de3f6327
Add support for "make Makefile" to regenerate Makefile from Makefile.in
2011-01-06 10:44:28 -05:00
Todd C. Miller
d2596e3f7b
Quiest a bogus compiler warning.
2011-01-06 10:23:20 -05:00
Todd C. Miller
f09bbcb6bb
Protect call to setlocale() with HAVE_SETLOCALE
2011-01-05 16:27:44 -05:00
Todd C. Miller
42f7a6c251
mkstemps.c was renamed mktemp.c
2011-01-04 14:27:51 -05:00
Todd C. Miller
f3552b0613
Update from 1.7 branch
2011-01-04 13:54:12 -05:00
Todd C. Miller
d6013eb962
Use "mv -f" when regenerating ChangeLog
2011-01-04 13:48:50 -05:00
Todd C. Miller
b92b745eaf
Fix NULL dereference with "sudo -g group" when the sudoers rule has
...
no runas user or group listed. Fixes RedHat bug Bug 667103.
2011-01-04 12:44:39 -05:00
Todd C. Miller
33201c04e8
Correct the default sudo.conf example
2011-01-03 13:09:03 -05:00
Todd C. Miller
b76c798856
Reset slashp if we allocate a new buffer for strftime()
2010-12-31 10:55:49 -05:00
Todd C. Miller
1bb3518b33
Add extra out parameter to expand_iolog_path() to allow the caller
...
to split the path into dir and file components if needed.
2010-12-31 09:55:40 -05:00
Todd C. Miller
755e3ef0ab
mkdir_iopath() returns size_t now that it uses strlcpy() and not snprintf()
2010-12-30 18:08:09 -05:00
Todd C. Miller
7f580397e2
Trim leading slashes from iolog_file and trailing slashes from iolog_dir
2010-12-30 18:05:53 -05:00
Todd C. Miller
25036d7a75
Pass a single I/O log file name in command_details instead of
...
separate dir + file parameters.
2010-12-30 17:09:01 -05:00
Todd C. Miller
2fb085dfac
change an error() to errorx()
2010-12-30 17:02:43 -05:00
Todd C. Miller
83de9e28f1
Add missing cwd line to I/O log info file that got dropped when
...
iolog_deserialize_info() was added
2010-12-30 17:01:41 -05:00
Todd C. Miller
fec059a890
Avoid relying on globals filled in by the sudoers policy module for
...
the sudoers I/O log module. The I/O log open function now pulls the
bits it needs out of user_info and command_info.
2010-12-29 17:32:04 -05:00
Todd C. Miller
97b7ae8892
If no iolog file is specified by the policy plugin, use io_nextid()
...
to determine the next file in the sequence.
2010-12-29 11:07:45 -05:00
Todd C. Miller
3f6f61f852
Document iolog_compress in command_info
2010-12-28 12:25:06 -05:00
Todd C. Miller
02ed3d5b3e
Add support for the iolog_compress variable in command_info.
2010-12-28 12:23:18 -05:00
Todd C. Miller
bff14f60e6
Add sigsetjmp() calls to all plugin entry points just to be safe.
2010-12-28 11:02:12 -05:00
Todd C. Miller
5966b67dda
Don't need iolog variables in struct command_details, they are for
...
the I/O log plugins to handle.
2010-12-28 10:50:45 -05:00
Todd C. Miller
21dd6af796
Document use of mkdtemp() for iolog path teplates
2010-12-27 15:43:01 -05:00
Todd C. Miller
e3cd512bfa
regen
2010-12-27 14:45:13 -05:00
Todd C. Miller
05807cf5e1
Document iolog_file and supported escape sequences for sudoers.
...
Clarify that iolog_file can contain directories.
2010-12-27 14:43:50 -05:00
Todd C. Miller
b8499baaae
Fix building of mkstemps/mkdtemp replacements.
2010-12-27 14:07:49 -05:00
Todd C. Miller
5cf56a77ec
Provide mkdtemp() for systems without it.
2010-12-27 13:49:49 -05:00