2
0
mirror of https://github.com/sudo-project/sudo.git synced 2025-08-28 12:57:50 +00:00

174 Commits

Author SHA1 Message Date
Todd C. Miller
8b53757164 Shell-style substitution is not supported in env_file.
Also document that comments are supported.
2024-11-11 09:48:07 -07:00
Todd C. Miller
9d49f861c8 Run igor on other docs too, not just man pages 2024-10-28 09:33:23 -06:00
Todd C. Miller
5180dd8021 Remove trailing whitespace 2024-10-28 09:23:42 -06:00
Ferdinand Bachmann
915935ab65 Fix version typo for pam_silent option in sudoers man page 2024-09-09 19:53:43 -06:00
Todd C. Miller
6a5a8f58e9 Document that ttydev is formatted as a long long. 2024-08-14 07:56:50 -06:00
Todd C. Miller
986fdec537 Rename secure_path_set -> secure_path_status 2024-07-28 15:11:42 -06:00
Todd C. Miller
a5f5ceecf1 regen 2024-07-28 15:13:05 -06:00
Todd C. Miller
200af679dc Add sudo_logsrv.proto manual cross-reference. 2024-07-14 18:55:21 -06:00
Todd C. Miller
fc051ceff5 Reference schema.IBM_LDAP. 2024-06-25 20:14:21 -06:00
Todd C. Miller
e97060d2f5 Add schema for IBM Directory Server in LDIF format.
GitHub issue #384
2024-06-25 19:54:09 -06:00
Todd C. Miller
06799eddf9 Improve the description of secure_path. 2024-06-11 08:16:23 -06:00
Todd C. Miller
e0e24456bc Enable secure_path in default sudoers file.
It is still disabled by default in the sudo binary.
2024-06-10 20:37:05 -06:00
Todd C. Miller
648ce410f3 Add comment that the .mdoc files are generated from .mdoc.in 2024-05-28 20:32:50 -06:00
Todd C. Miller
74d64bc896 Sync BUGS section with the bugs section of README.md.
Also mention how to report security issues based on SECURITY.md.
GitHub issue #377.
2024-05-28 19:54:52 -06:00
Todd C. Miller
58fec2f0c5 regen 2024-05-21 07:33:20 -06:00
Todd C. Miller
54ac175d36 Include the name of the original .mdoc.in file in the .man.in file.
This should make it more obvious which is the authoritative file.
2024-05-21 07:33:13 -06:00
Todd C. Miller
ee56176b15 Add double quotes around #schemaNamingContext in example.
GitHub issue #376
2024-05-17 19:36:57 -06:00
Todd C. Miller
27963e39f3 Pass "make spell" with updated codespell. 2024-04-29 09:19:52 -06:00
Todd C. Miller
37f8a84531 Commands with multiple digests of the same type are stored in an array. 2024-04-26 07:37:26 -06:00
Todd C. Miller
ecdf0c80f3 Add pam_silent sudoers option.
Inspired by PR #368
GitHub issue #216
2024-04-17 19:30:11 -06:00
Todd C. Miller
46e31a74d7 Add "json_pretty" log format, currently the same as "json".
In a future version, "json" will be an alias for "json_compact"
instead.  GitHub issue #357.
2024-03-09 10:59:54 -07:00
Todd C. Miller
1debad3bec Add json_compact log type for compact/minified JSON.
The "json_compact" log type logs one event per line in compact/minified
JSON format.  GitHub issue #357.
2024-03-08 16:31:39 -07:00
Todd C. Miller
602a58e86a Set SUDO_HOME to the invoking user's home directory.
GitHub issue #358
2024-03-08 09:15:36 -07:00
Todd C. Miller
f69031da24 Quest no longer sponsors sudo development. 2024-01-31 10:05:50 -07:00
Todd C. Miller
b39dc7c5f1 Document side-effects of enabling the use_pty option. 2024-01-08 14:28:58 -07:00
Todd C. Miller
6d4ffe6743 In the NOEXEC example make it clear that "shanty" is a host.
Bug #1064
2023-12-19 09:55:09 -07:00
THE-Spellchecker
5eba4b48cf Typographical and Grammatical fixes 2023-11-28 15:00:04 -07:00
Todd C. Miller
b4ae559c81 Reword the description of cmddenial_message. 2023-11-28 14:49:13 -07:00
Todd C. Miller
6b6e0aed0a Regenerate from sudoreplay.mdoc.in 2023-11-28 14:48:51 -07:00
Guillaume Destuynder
a4cbfecdae Add support for a custom message when the command execution is denied. 2023-11-28 14:19:26 -07:00
Todd C. Miller
7d7dfbfd44 Sync time stamp defines with sudoers timestamp.h
The types and flags are now explicitly unsigned.
2023-11-26 08:59:05 -07:00
Todd C. Miller
0c958e1852 Mention the tsdump utility 2023-11-26 08:55:41 -07:00
Todd C. Miller
61dbfe0924 Document ttydev and bump plugin version to 1.22 2023-11-25 18:38:36 -07:00
Todd C. Miller
3686c9fdd1 Document special cases for AIX-style shared libraries.
The shared object is a member of an archive file that is specified
in parentheses.
2023-11-06 09:39:36 -07:00
Todd C. Miller
e772479272 Add sudoers plugin Debug example and x-ref sudoers man page for details. 2023-11-04 19:36:35 -06:00
Todd C. Miller
ec6906f63b The HP-UX getgrouplist() code has been disabled due to bugs. 2023-11-04 18:51:36 -06:00
Todd C. Miller
86f1d52a0b Add Andika Triwidada 2023-10-23 07:52:23 -06:00
Todd C. Miller
3141f63b25 Mention potential problems with log_subcmds and intercept. 2023-09-28 17:01:02 -06:00
Todd C. Miller
f4acc43663 Mention the time stamp and lecture file name changes in 1.9.15. 2023-09-20 09:00:29 -06:00
Todd C. Miller
d9da92951a Replace '/' with '_' in paths using the user, group or host name. 2023-09-20 09:00:27 -06:00
Todd C. Miller
7363ad7b32 Use the user-ID instead of user-name for the timestamp and lecture file.
This avoids problems if the user name itself contains a path separator.
2023-09-11 10:27:35 -06:00
Todd C. Miller
3c05e748a4 Add ignore_perms plugin argument to skip the sudoers file security checks.
This is not intended to be used in a production environment.
2023-08-29 09:55:09 -06:00
Todd C. Miller
6842dd1bfd Document "sudo -ll command" output. 2023-08-09 10:57:16 -06:00
Todd C. Miller
980e0216ac Add basic support for 32-bit and 64-bit LD_PRELOAD equivalents.
The noexec and intercept DSO settings may now include both a 32-bit
DSO and a 64-bit DSO specified by a colon.  For example:
/usr/libexec/sudo/sudo_intercept.so:/usr/libexec/sudo/sudo_intercept_64.so.
2023-07-31 13:46:57 -06:00
Todd C. Miller
bdde6dfa11 visudo: document that a new file is only created if the editor writes it.
If visudo is used to create a new file, the file will only be created
if the user writes to the file via the editor.  Simply running
visudo and exiting the editor will no longer cause the file to be
created.  There is an exception for file created due to the addition
of a @include directive, which need to be present for the sudoers
file to parse properly.  GitHub issue #294.
2023-07-27 11:32:56 -06:00
Todd C. Miller
50fde5d815 Make the sections on bug reporting consistent with each other.
GitHub issue #292
2023-07-27 09:51:57 -06:00
Todd C. Miller
44cfa9e132 Add restrict keyword to sudo_printf_t in plugin docs. 2023-07-10 14:30:39 -06:00
Todd C. Miller
e0ee845dfc Reference SETENV-related settings in the command environment section.
Based on GitHub PR #273 from Ilya Kulakov.
2023-06-20 15:12:43 -06:00
Todd C. Miller
5d2b1761f6 Clarify that use_pty is on by default starting with 1.9.14. 2023-06-18 12:44:57 -06:00
Todd C. Miller
afb09e0044 Sudo runs the command in a pty by default in 1.9.14 and above. 2023-06-18 08:08:32 -06:00