Sudo Project commits | Ecosyste.ms: OpenCollective

verify_krb_v5_tgt: auth name must be const to match struct sudo_auth.

github.com/sudo-project/sudo - 747114f33152fce8d3870ae7e884f985bebd8ed4 authored about 1 year ago

Disable PAM before enabling Kerberos V.

github.com/sudo-project/sudo - 9ef52151eff35e478681f14869de8e1aad98db7f authored about 1 year ago

Add Kerberos V build and test to CI.

github.com/sudo-project/sudo - 7ed7b4536f6d8e759860e886f73c52cc5b5fb7ad authored about 1 year ago

Add missing sudoers_context to verify_krb_v5_tgt()

Commit 244017495421 added ctx variable to log_warningx() call but that
variable was not declared...

github.com/sudo-project/sudo - 75e829b740a11ad68123ccb5033f8c981d689fe4 authored about 1 year ago

Updated translations from translationproject.org

github.com/sudo-project/sudo - 145faa3fe95948ee2368054fbb0da0fa5acd91ea authored about 1 year ago

Set the open file descriptor limit to the maximum allowed value.

Each connection can require up to 9 descriptors.

github.com/sudo-project/sudo - 31bcdec232aee257edb6a5f50075b037c675906c authored over 1 year ago

Mention new Indonesian translation and sudo_logsrvd fd limit change.

github.com/sudo-project/sudo - 5f3a6b4f6ab4ed9e366d54a0a85aa1aa8710b4eb authored over 1 year ago

Updated translations from translationproject.org

github.com/sudo-project/sudo - bf722e18b7b0abf26a1be3ba1aadd33a6a69da57 authored over 1 year ago

Add Andika Triwidada

github.com/sudo-project/sudo - 86f1d52a0b20cff29aca90f21e3ca6dbe70d1ec8 authored over 1 year ago

New Indonesian translation from translationproject.org

github.com/sudo-project/sudo - 9a2a882d12798e8ab5745f3beb09023349b4ca6f authored over 1 year ago

Mention GitHub issue #318

github.com/sudo-project/sudo - 0fbb17de5e6ba8037600d10953ba0eb2ececd496 authored over 1 year ago

Avoid a double-free in fuzz_policy caused by the early env_init(NULL).

This adds an env_free() function to explicitly free both the old
and new copies of the environme...

github.com/sudo-project/sudo - 392ae0f0308d7367ce0dd7d269879e872a1099ee authored over 1 year ago

Store submitenv in eventlog and pass it to sudo_logsrvd.

github.com/sudo-project/sudo - 3bbc7c8f85925362e20b089fa42fc47859c098a8 authored over 1 year ago

struct eventlog: rename argv/env to runargv/runenv.

This matches the JSON logs.

github.com/sudo-project/sudo - 726b646b4861ba0a372675c5ef56384aceb9723d authored over 1 year ago

struct sudoers_user_context: rename env_vars to env_add

github.com/sudo-project/sudo - c7a61a94382c1e49abe1a6ba595950629b338be9 authored over 1 year ago

Only log the run environment for commands that are allowed.

It may not be available otherwise and unless the command is being
run it has no real meaning.

github.com/sudo-project/sudo - 2b87749f8f0913356f3a196261a3d7e5ce018ce3 authored over 1 year ago

Free the private copy of the environment in sudoers_check_cmnd().

This reverts 5118eb5797fb, which had the side-effect of the PAM
session code running with the ru...

github.com/sudo-project/sudo - 077826292c69f1b3f91349a6d3d2fef883a7b43b authored over 1 year ago

iolog_swapids: short circuit if effective ids match iolog ids.

github.com/sudo-project/sudo - 8486976b9efafb33fc134642db3a3d1d54438935 authored over 1 year ago

logsrvd: display error string in message if iolog_mkpath() fails

github.com/sudo-project/sudo - 09a426437284dd8b212df070618011903edee803 authored over 1 year ago

Update .pot files for 1.9.15

github.com/sudo-project/sudo - 29f7967420ab8bd606a7d08d59987b3e5e17d907 authored over 1 year ago

Add example for disabling intercept/log_subcmds for certain commands.

github.com/sudo-project/sudo - e3edd7a09a7b9bb33fceec15ce720f68f57811f0 authored over 1 year ago

Use NSIG instead of nitems(array) for the loop bound.

This matches the sudo_sys_siglist[] and sudo_sys_signame[] declarations.

github.com/sudo-project/sudo - 78edde5ea1e80c5679b5105113573d1a12fb16d0 authored over 1 year ago

tsdump: fix compiler warnings

github.com/sudo-project/sudo - 385d506d35fafd33a0990685bcca298840d5473c authored over 1 year ago

Avoid using %zu or %zd with printf() and fprintf().

This prevents problems on systems where the system printf(3) is not
C99-compliant. We use our o...

github.com/sudo-project/sudo - 14d514e5acda3018e8ccf17270db339778ca0443 authored over 1 year ago

Use vsnprintf() instead of vfprintf() for sudo_printf() to avoid

problems on systems where the system printf(3) is not C99-compliant.
We use our own snprintf() on...

github.com/sudo-project/sudo - 58d6554a782bd8b000d5822980dc2cdf25af3343 authored over 1 year ago

strlcpy_expand_host, sudo_getdelim, sudo_realpath: add restrict qualifier

github.com/sudo-project/sudo - cf9fc5317ecb9585929a615619edf08e1a5c8f86 authored over 1 year ago

Add restrict to strlcpy and expand_prompt

github.com/sudo-project/sudo - 97f8052427116c595742159dab94817deacd4de1 authored over 1 year ago

Fixed GitHub issue #312.

github.com/sudo-project/sudo - 29ddd2679383c2a6f37a16e26b765738dae79360 authored over 1 year ago

Better handling of multiple sudo processes modifying terminal settings.

1. Lock the terminal before tcgetattr/tcsetattr
2. Don't restore terminal settings if changed by ...

github.com/sudo-project/sudo - fabb6264fc3a001fa1d182f3663370fa28bccbbb authored over 1 year ago

Add a little extra debugging info.

github.com/sudo-project/sudo - 2f80865e73e48aa14cde3a95a95ba1213b6d7483 authored over 1 year ago

Redundant cast removal in sudoers_hooks

def_sudoers_locale is already a char*

github.com/sudo-project/sudo - b2a44430b5c01b21a1c81d9ac506931682c9d321 authored over 1 year ago

Prefer fputs over fprintf where possible

fprintf does extra work and meant for formatting strings.

github.com/sudo-project/sudo - e095069d2a0dc374af5f97ca35c15e3f5842db9e authored over 1 year ago

Swap calloc arguments to use them properly.

github.com/sudo-project/sudo - a4cbd7fe7bde765cbc3a4fd7842b413652df7e48 authored over 1 year ago

Specify 1U over 1 for bitmaps

github.com/sudo-project/sudo - dd8426f9cfec30f08ab9ef9dd53c9e373561a012 authored over 1 year ago

ptrace_intercept_execve: make flags unsigned to match command_details

github.com/sudo-project/sudo - 873e0de078bce422eae1fc65125faf3767055f1f authored over 1 year ago

Fix spelling: resistent -> resistant

github.com/sudo-project/sudo - 2d437c793df957e88244b16a1e5b9bcfd7007414 authored over 1 year ago

Add plugins/sudoers/tsgetusershell.c to ignore files.

github.com/sudo-project/sudo - 98c2eeafd5eefe6e4bc0be45d4d98df5a7550cc4 authored over 1 year ago

Sort the list of editors that supports +lineno

github.com/sudo-project/sudo - 356ea96ef702dc4eff84786c37f594b551ddd709 authored over 1 year ago

Add Orbiton ("o") to the list of editors that supports +lineno

github.com/sudo-project/sudo - 07426f8a1a85975a3cfaea05af4c2ab2d2552b6b authored over 1 year ago

Fix compatibility with older versions of (new) awk.

Do not rely on awk supporting "-f -" to read the program from stdin.
Avoid using POSIX character...

github.com/sudo-project/sudo - 9a715b69413161d59d34a789f702ed228bcf58ce authored over 1 year ago

Mention potential problems with log_subcmds and intercept.

github.com/sudo-project/sudo - 3141f63b259a23f6277d212e621638576d4806ef authored over 1 year ago

Add more user info to the list of objects to be garbage-collected at exit.

github.com/sudo-project/sudo - f6561bc974bc6fed114fd5fe01cf68700abe9d99 authored over 1 year ago

Use long, not long long, when getting/setting numeric attributes.

We use int or long, not long long, in the Python plugin.

github.com/sudo-project/sudo - 344e0daeccb858b69518aa4ff2fbe8063bd09c51 authored over 1 year ago

sudo_file_open: initialize parser before calling open_sudoers().

Otherwise, the parser_conf settings in the context passed to
sudo_file_open() will not be honore...

github.com/sudo-project/sudo - 9cc57f4936c0190f75466a38b0401a5275d70ee5 authored over 1 year ago

Add casts when storing values in a struct timespec.

Fixes -Wconversion warnings on some 32-bit systems where time_t is
still 32-bit.

github.com/sudo-project/sudo - 1398289fab944b3eec0f0c8e15ce33ba835e455a authored over 1 year ago

Use U, not UL, for 32-bit platforms

size_t is an unsigned int on 32-bit platforms, not an unsigned long.

github.com/sudo-project/sudo - b2f8c5666d7409f30d26d4a97167ef3ee585cf73 authored over 1 year ago

digest_matches: actually use fd2 in place of fd as needed.

github.com/sudo-project/sudo - 837f400ac8abf91512fbcd16c2039bbe1af44070 authored over 1 year ago

digest_matches: if fd argument is -1, try to open path before failing

github.com/sudo-project/sudo - ff2d8464cf94dd41ca1795e84ba3d961e17ed64f authored over 1 year ago

Add missing execute bit on some test scripts.

github.com/sudo-project/sudo - 4d4279d0ca64ca990cb94046e89d52d84bf837af authored over 1 year ago

max_groups in sudoers_plugin_settings is no longer used.

github.com/sudo-project/sudo - 29feb41da20e6df364afe9375ef329c8a02c3b1a authored over 1 year ago

Use #include <foo.h> instead of #include "foo.h" in most cases.

We rely on the include path to find many of these headers. It
especially doesn't make sense to ...

github.com/sudo-project/sudo - e343e07543698b8250f47d090504f1231309d0e0 authored over 1 year ago

Bump xcode to 14.2.0

github.com/sudo-project/sudo - 884b02596268ec059d248e63ae3d873ea4774d6f authored over 1 year ago

Add support for "plugin" defaults type.

github.com/sudo-project/sudo - 1c13b8a62807634283f070039ea712e5a5048c47 authored over 1 year ago

Support multiple input files.

github.com/sudo-project/sudo - c1708f0cf1b7a51f544f779ff7a8bbb795022f5a authored over 1 year ago

No need to loop reading from/writing to a blocking socketpair.

This removes some infinite loops that can cause static analyzer
warnings. The fds are not in no...

github.com/sudo-project/sudo - 171abbe1127a0b32ce06938316ea24ff375d1f27 authored over 1 year ago

check_user: fix return value for intercept mode

Also use early return on error to quiet a PVS-Studio warning.

github.com/sudo-project/sudo - 1c7d757b79a7bfbb9d6b290321c80c0a5643e1b9 authored over 1 year ago

Set ec->term_raw to false even if sudo_term_restore() fails.

Either the fd is not a terminal or we don't have the controlling
terminal. Either way, we can't...

github.com/sudo-project/sudo - 988d7f60f04556db583e97aa65768eb6677f6d35 authored over 1 year ago

Only define _PATH_ENVIRONMENT on systems where we use /etc/environment.

github.com/sudo-project/sudo - f2d267bfb44bf7c5b25a249e2c9a97190eb254f2 authored over 1 year ago

Sudo assumes that a uid_t can be cast to unsigned int without problems.

Add a configure check and error out if sizeof(uid_t) > 4.

github.com/sudo-project/sudo - 0c674569231ad00021fa6add8cad0036242bc552 authored over 1 year ago

Mention the time stamp and lecture file name changes in 1.9.15.

github.com/sudo-project/sudo - f4acc43663193e17a7280c172e57a4f9a49cb998 authored over 1 year ago

Replace '/' with '_' in paths using the user, group or host name.

github.com/sudo-project/sudo - d9da92951adf2e78da8bb84f5d6f413e313c543a authored over 1 year ago

Replace MAX_UID_T_LEN with calls to STRLEN_MAX_UNSIGNED.

github.com/sudo-project/sudo - 94b80e3ad496f1157f729306498a708debaf1107 authored over 1 year ago

Add macros to determine the length of an integer type in string form.

Adapted from answer #6 in:
https://stackoverflow.com/questions/10536207/ansi-c-maximum-number-of...

github.com/sudo-project/sudo - d53bbb54b21c425a6be503d289329b500ea7fab1 authored over 1 year ago

visudo: use verbose and strict in parser_conf

Where the sudoers_context is available we can use the values
of verbose and strict instead of pa...

github.com/sudo-project/sudo - 221a10340cafea5a6953bfe19350d4bcd20f1120 authored over 1 year ago

Rename callbacks.c -> sudoers_cb.c.

github.com/sudo-project/sudo - c277e55f42e7c660efaa9b2208bf71c6ad12d6db authored over 1 year ago

Promote strict field in sudoers_parser_config from bool to int.

This will be used by visudo to indicate when "visudo -s" is run.

github.com/sudo-project/sudo - 8fcb21b5cd9de3d194ebc559a617aadb345dcc0c authored over 1 year ago

Add a separate file for visudo callbacks.

github.com/sudo-project/sudo - 3a7731437325c85c663d8d60b0ef9eaa35a71cf3 authored over 1 year ago

Add parser_warnx() and parser_vwarnx() that displays file:line:col

Used by defaults.c and check_aliases.c.

github.com/sudo-project/sudo - e28dc0f275d2d5df4dc97bf4887716d27274453b authored over 1 year ago

Add resolve_cmnd(), a wrapper around find_path().

This is a convenience function that sets PERM_RUNAS and calls
find_path(). If the command is no...

github.com/sudo-project/sudo - 6e75f2311d676108d76422b2dd62a83402acf864 authored over 1 year ago

Wait on a socketpair for the parent to grant child the controlling tty.

This upgrades the error pipe to a bi-directional socketpair that
the parent will write to after ...

github.com/sudo-project/sudo - 0cb3e33444b8acb161935e4e00c337e56cf50448 authored over 1 year ago

Undefine AUTH_{SUCCESS,FAILURE,ERROR} before defining them.

Quiets a warning on AIX where usersec.h defines AUTH_SUCCESS and
AUTH_FAILURE. We avoided this ...

github.com/sudo-project/sudo - a127ddf6db32f3b2c72e34dff1eb1b3a0527897f authored over 1 year ago

Only cast TIOCSWINSZ to int on systems that might require it (AIX).

Otherwise we end up with a -Wconversion warning on systems where
the ioctl() request argument is...

github.com/sudo-project/sudo - 49c7c1f4d3dddf344ecf3f64495f783f5849a702 authored over 1 year ago

Promote verbose flag to int for display_privs and display_cmnd.

A negative verbosity will prevent non-error output from being
displayed.

github.com/sudo-project/sudo - 51d6b0f42509d82b01819d4ed451cb197ae44567 authored over 1 year ago

No need to include cvtsudoers.h here.

github.com/sudo-project/sudo - a9ee97580ab812893491ca9917af69c368874a6c authored over 1 year ago

Remove pivot_get_root() and pivot_get_cwd().

They are unnecessary since struct sudoers_pivot is not opaque.
The implementation details are pr...

github.com/sudo-project/sudo - 0011333f8e7d0696d17f2eab21fd21346e66c000 authored over 1 year ago

Quiet some -Wconversion warnings in the tests.

github.com/sudo-project/sudo - 2aae36f345840981af59b3bde68237dc73689161 authored over 1 year ago

Make flag in union sudo_defs_val bool to match how it is used.

Adjust find_path()'s ignore_dot function argument to match.

github.com/sudo-project/sudo - b8f2680cf095da5a4dca1e92172006e11eeff244 authored over 1 year ago

Parse euid and egid from sudo front-end.

These are needed by bsm_audit.c.

github.com/sudo-project/sudo - a9801cc99d9a8170fca7619d96c77908f7d911c0 authored over 1 year ago

Parse pid and ppid from sudo front-end.

We can now use the stored ppid in ts_init_key().

github.com/sudo-project/sudo - 38ddbb14f1232c81a6004eac541a6b0e216a7d8e authored over 1 year ago

Use struct sudoers_pivot instead of defining sudoers_pivot_t.

We want to pass around a pointer, not the struct itself.

github.com/sudo-project/sudo - 34990c0e08563fb5aa839e2381f88d93bfd4ad29 authored over 1 year ago

Don't expose the implementation of the pivot_root state.

github.com/sudo-project/sudo - 15b3d786d7330defc796e73044f45d4983a432c8 authored over 1 year ago

Don't expose the implementation of the pivot_root state.

github.com/sudo-project/sudo - 0b52ffd1a23386a3a524a6ec141dbc7652fc8336 authored over 1 year ago

Only call ptrace_verify_post_exec() for intercept, not log_subcmds.

This fixes a logic goof introduced in sudo 1.9.14.

github.com/sudo-project/sudo - 4117ad1462f920f5a643dea710825363d789e4c9 authored over 1 year ago

Use the user-ID instead of user-name for the timestamp and lecture file.

This avoids problems if the user name itself contains a path separator.

github.com/sudo-project/sudo - 7363ad7b3230b7b03a83f68a0ea33b4144c78a79 authored over 1 year ago

tsgetusershell.c: don't rely on GNU sed extensions.

github.com/sudo-project/sudo - c0553cd383018d700f31ce87578835c06ef462a6 authored over 1 year ago

testsudoers: add -S option to specify /etc/shells path.

github.com/sudo-project/sudo - 0a8586928676319e9abf91b03ed6ac84d30f34e1 authored over 1 year ago

Add testsudoers_setshellfile() and use it in testsudoers.

github.com/sudo-project/sudo - 034b2f3bdd88525d9abee115089a1813ad7f8dee authored over 1 year ago

regen

github.com/sudo-project/sudo - 62b92c7fb8e86f7b5f4058cd356ae42638354690 authored over 1 year ago

Remove unnecessary sudo_gettext.h include and add missing const.

github.com/sudo-project/sudo - 166ef55aa7397b36ff4bd477db5b7641c8fa3f05 authored over 1 year ago

Return AUTH_* flags from check_user() instead of 1/0/-1.

github.com/sudo-project/sudo - c54bdd799b9047839e98222cf980a98c7d5bd973 authored over 1 year ago

Wrap valid_shell and add to sudo_pwutil_set_backend().

This will make it possible to support a different getusershell()
implementation for testsudoers ...

github.com/sudo-project/sudo - 2fdb4db339032e6016e37a1efe28414eab2fd633 authored over 1 year ago

Move check_user_shell() to pwutil.c as user_shell_valid()

This will make it possible to support a different backend which may
be used by testsudoers in th...

github.com/sudo-project/sudo - d18ee8e0e766d30e3c7bb44f1bee93ccf4b38167 authored over 1 year ago

Merge check_user() and check_user_interactive(), move getpass callbacks.

The getpass callbacks are now defined in sudo_auth.c, which implements
auth_getpass(). As a res...

github.com/sudo-project/sudo - 28a13501d89bf31d338a59ac837654c35c0a99aa authored over 1 year ago

Make most sudo_auth functions return AUTH_{SUCCESS,FAILURE,FATAL}.

github.com/sudo-project/sudo - 0495afac57f5bd783dd90bfaa25733f802b0f66f authored over 1 year ago

Make all match functions return ALLOW/DENY not true/false.

github.com/sudo-project/sudo - 2ef90231a132547fa4236ff05fc0fafcd3f3d7a4 authored over 1 year ago

Try to make sudo less vulnerable to ROWHAMMER attacks.

We now use ROWHAMMER-resistent values for ALLOW, DENY, AUTH_SUCCESS,
AUTH_FAILURE, AUTH_ERROR an...

github.com/sudo-project/sudo - 7873f8334c8d31031f8cfa83bd97ac6029309e4f authored over 1 year ago

Honor ignore_perms plugin argument for @include and @includedir.

github.com/sudo-project/sudo - 525803db23d8d52b876f4427d4e241b22ba5dda6 authored over 1 year ago

Don't set on_suspend and on_resume twice.

github.com/sudo-project/sudo - 499121229e3adadecf522463b1740e4fd922720b authored over 1 year ago

sudoers_sethost: refactor code to set host names in sudoers_context.

The sudoers_sethost() function can be shared by the sudoers plugin,
visudo, cvtsudoers and tests...

github.com/sudo-project/sudo - 956de5cbbc650d6aec19804cd376a39164e76e5b authored over 1 year ago

sudoers_trace_print: use debug_decl_vars instead of doing it by hand.

github.com/sudo-project/sudo - 0c9ca88f5b81d40e9a153b3fd7635dcc7f6e55f6 authored over 1 year ago