Sudo Project commits | Ecosyste.ms: OpenCollective

sudo_realpath() returns char *, not void *.

github.com/sudo-project/sudo - 080e08b0fb19da25bc70fe18457ffbe021738930 authored about 1 year ago by Todd C. Miller <[email protected]>

Only print "no valid sudoers sources found, quitting" for multiple sources.

If there is only a single source (usually the sudoers file), the
open function provide enough of...

github.com/sudo-project/sudo - d898d073bf4e7384ca6aaf97f0eab3bc3ea5ac09 authored about 1 year ago by Todd C. Miller <[email protected]>

user_in_group: the user's group vector already includes the primary group.

There's no need to look up the name of user's primary group (pw_gid),
we always include the prim...

github.com/sudo-project/sudo - f5b3f990988be7d6c4e7bc6f00e3f407d9bed342 authored about 1 year ago by Todd C. Miller <[email protected]>

Move sudoers_debug.c prototypes to sudoers_debug.h.

github.com/sudo-project/sudo - 05f823df22349b33dd005b69310287ac43323a9c authored about 1 year ago by Todd C. Miller <[email protected]>

sudo_conv, sudo_printf and plugin_event_alloc live in policy.c.

github.com/sudo-project/sudo - 35a7283dd9fae019d10062167e3a6d57bd7e47f9 authored about 1 year ago by Todd C. Miller <[email protected]>

Move default value for "iolog_file" to sudo_iolog.h.

github.com/sudo-project/sudo - 68a9e918605491417796c5a471084d841c7385c0 authored about 1 year ago by Todd C. Miller <[email protected]>

Rename check.h -> timestamp.h and add remaining timestamp.c prototypes.

github.com/sudo-project/sudo - 75209e271820cb86c4f075991914ae54460a7fa5 authored about 1 year ago by Todd C. Miller <[email protected]>

Restore AUTH_INTR support, it is still needed.

We still need AUTH_INTR to know when to break out of the password
prompt loop.

github.com/sudo-project/sudo - 8cd0d74fbb9f4dfb5b686b567ea7d83b8f7fce93 authored about 1 year ago by Todd C. Miller <[email protected]>

Add ignore_perms plugin argument to skip the sudoers file security checks.

This is not intended to be used in a production environment.

github.com/sudo-project/sudo - 3c05e748a44f8d1303b2e9fdb1330c75c8821afb authored about 1 year ago by Todd C. Miller <[email protected]>

Fix test for unsetenv() returning void with clang 16.

Clang has dropped support for K&R function definitions so rewrite
the test to require a unsetenv...

github.com/sudo-project/sudo - 1eb4392e149e541ea9621248484da4f88e034f46 authored about 1 year ago by Todd C. Miller <[email protected]>

Disable fast_glob and fdexec if SUDOERS_NAME_MATCH is defined.

We use SUDOERS_NAME_MATCH for fuzzing when we want to avoid searching
the file system for commands.

github.com/sudo-project/sudo - 07003d90208c1577ee5d0a400c10417282cae450 authored about 1 year ago by Todd C. Miller <[email protected]>

Rename AUTH_FATAL -> AUTH_ERROR.

github.com/sudo-project/sudo - c858acc4812b6523e5a2a0ada1ea23d7dd1f7afb authored about 1 year ago by Todd C. Miller <[email protected]>

Do not rely on the definition of ALLOW/DENY being true/false.

We now explicitly check for ALLOW and DENY when checking return
values and negating values.

github.com/sudo-project/sudo - cf00568d888c90a8c5d06a06283bc87a45992933 authored about 1 year ago by Todd C. Miller <[email protected]>

Replace AUTH_INTR return with AUTH_FAILURE.

The two were treated identically by the caller.

github.com/sudo-project/sudo - bae716642c838c1ab0c0e03f12d15228250180d5 authored about 1 year ago by Todd C. Miller <[email protected]>

Move tty_present() into policy.c as sudoers_tty_present().

This function is policy-dependent. For the modern sudo front-end
it will simply check tcpgid an...

github.com/sudo-project/sudo - 30fc288291dba9ccfd621ad47ae3525ef18eaf02 authored about 1 year ago by Todd C. Miller <[email protected]>

Don't set defaults values for features that are not present.

This means that lecture_status_dir and timestampdir are only set
if _PATH_SUDO_LECTURE_DIR and _...

github.com/sudo-project/sudo - 4cdee2e312a4253b2bd6ac0c46f5cff43b43654d authored about 1 year ago by Todd C. Miller <[email protected]>

Call log_allowed() even when "log_allowed" is disabled.

Otherwise, sudo will not send mail if "mail_always" or "mail_all_cmnds"
is set.

github.com/sudo-project/sudo - b42cab112f74b49f9d10735ef8dcd9ff83d066f9 authored about 1 year ago by Todd C. Miller <[email protected]>

Only set I/O logging callbacks if SESSID_MAX is defined.

github.com/sudo-project/sudo - 993ee338d9de0e488bf735cc1bf961fa2ba186ee authored about 1 year ago by Todd C. Miller <[email protected]>

sudo 1.9.15

github.com/sudo-project/sudo - 37ee2946aab330895109c2da24b32016bfa39256 authored about 1 year ago by Todd C. Miller <[email protected]>

Silence a few remaining -Wconversion warnings.

github.com/sudo-project/sudo - df969d30b44f80ff1112a50d5713b0865e604619 authored about 1 year ago by Todd C. Miller <[email protected]>

No need to inclue auth/sudo_auth.h

github.com/sudo-project/sudo - 522ac12f21c990970c2aa227400b08d0bb8c80f7 authored about 1 year ago by Todd C. Miller <[email protected]>

--enable-pvs-studio: check for license file in the default location

github.com/sudo-project/sudo - 18aba49843dc58cde5cac538d93a9cfc22d7d250 authored about 1 year ago by Todd C. Miller <[email protected]>

modify ret type from int to bool (#298)

* modify ret type from int to bool

* change debug_return_int to debug_return_bool

* modify...

github.com/sudo-project/sudo - 60e5842014061a9c216f6f3d1459cd96eecab846 authored about 1 year ago by ken <[email protected]>

Move timestampowner sudoers callback to timestamp.c.

github.com/sudo-project/sudo - 091051125bb5245ee84ea4bcf667ff9564130e23 authored about 1 year ago by Todd C. Miller <[email protected]>

Quiet a PVS-Studio false positive about possible NULL dereference.

set_perms() is only called with a NULL ctx for PERM_ROOT, PERM_SUDOERS
and PERM_TIMESTAMP.

github.com/sudo-project/sudo - 593998cb62203cb155164da63c08e03a2c41f938 authored about 1 year ago by Todd C. Miller <[email protected]>

set_perms: ctx may be NULL for PERM_ROOT, PERM_SUDOERS, PERM_TIMESTAMP.

github.com/sudo-project/sudo - 821799d1f41dc61b0e38e6447d7d468a805d851a authored about 1 year ago by Todd C. Miller <[email protected]>

Move a few fields from sudoers_user_contect to sudoers_context.

They are not really specific to the user or user-specified.

github.com/sudo-project/sudo - c7157ce0b13b032e73e4ea70e95f45bba4afd813 authored about 1 year ago by Todd C. Miller <[email protected]>

Remove dead code dealing with unknown user and MODE_INVALIDATE.

The timestamp unlink code does not need the user's struct passwd
pointer, just the user name (wh...

github.com/sudo-project/sudo - 9aaba80a045b91bc2224f3768184cfc1fe5f9dff authored about 1 year ago by Todd C. Miller <[email protected]>

Suppress some other PVS-Studio false positives.

github.com/sudo-project/sudo - df730dec5d7e6342e3753492939a3528eb1465ab authored about 1 year ago by Todd C. Miller <[email protected]>

Quiet a PVS-Studio false positive about possible NULL dereference.

set_perms() is only called with a NULL ctx for PERM_ROOT, PERM_SUDOERS
and PERM_TIMESTAMP.

github.com/sudo-project/sudo - 49cd7463c5dac845a6c67c845a2536971caef2b0 authored about 1 year ago by Todd C. Miller <[email protected]>

MODE_KILL is never set in the sudoers plugin, remove it.

github.com/sudo-project/sudo - 816120544760dbe54cd97a5867adaadaf3104d56 authored about 1 year ago by Todd C. Miller <[email protected]>

Cast int to size_t before adding instead of casting the result.

Quiets PVS-Studio warning V1028.

github.com/sudo-project/sudo - c6987aa26ea12569e65bc7ab18e702b06ab8d715 authored about 1 year ago by Todd C. Miller <[email protected]>

Fix log_server_accept() definition for --disable-log-client builds.

github.com/sudo-project/sudo - 9f05bfd2982f4624ad15f5dfb63ddcc3876ef043 authored about 1 year ago by Todd C. Miller <[email protected]>

Use a global static struct exec_closure for the cleanup hook.

This is safer than storing a pointer to a stack variable in the
cleanup function since we don't ...

github.com/sudo-project/sudo - e933fc7ba322f591f83ee891998c33c713f66445 authored about 1 year ago by Todd C. Miller <[email protected]>

Plug memory leak if journal_parse_error() fails.

Found by the clang 15 analyzer.

github.com/sudo-project/sudo - 6fa4786534cc10c567feb1cac043b590776776e2 authored about 1 year ago by Todd C. Miller <[email protected]>

Eliminate some clang analyzer false positives.

github.com/sudo-project/sudo - 46e6955ba6fc00241fce37d9f489c6ce3ecbee42 authored about 1 year ago by Todd C. Miller <[email protected]>

Move sudoedit_nfiles into struct sudoers_context.

github.com/sudo-project/sudo - ff5914d7f7984b62d4c8ef085346b6f094a446cc authored about 1 year ago by Todd C. Miller <[email protected]>

Move sudo_mode into struct sudoers_context.

github.com/sudo-project/sudo - 3473bf9360a99c9d6e2967926ac421aa9edbc9fe authored about 1 year ago by Todd C. Miller <[email protected]>

Move NewArgv, NewArgc and saved_argv into struct sudoers_context.

github.com/sudo-project/sudo - 837da1bef0a6f1b790924178e292f8ed815ba130 authored about 1 year ago by Todd C. Miller <[email protected]>

Add struct sudoers_conf to struct sudoers_plugin_context.

There's now no need to pass this directly to init_parser() since we
already pass in a pointer to...

github.com/sudo-project/sudo - 87571dab0a180b32f21aebc968dce5a5fe44f71a authored about 1 year ago by Todd C. Miller <[email protected]>

Store policy paths in struct sudoers_context.

This removes the need for the getters in policy.c.

github.com/sudo-project/sudo - 9e53d903eaea00832f2c0bce47af146cb210f606 authored about 1 year ago by Todd C. Miller <[email protected]>

Add sudoers_ctx_free() and use it for freeing struct sudoers context.

This replaces sudoers_user_ctx_free() and sudoers_runas_ctx_free().

github.com/sudo-project/sudo - bbaf2939127ff765e121da1f68a2f77d45c43db9 authored about 1 year ago by Todd C. Miller <[email protected]>

Make struct sudoers_context private to sudoers.c.

We now pass a pointer to the context where necessary. There are a
few cases where we need to re...

github.com/sudo-project/sudo - 2440174954217e01a2e285cb209a58f05d7f25ac authored about 1 year ago by Todd C. Miller <[email protected]>

Add a sudoers_context struct that embeds the user and runas structs.

github.com/sudo-project/sudo - 2d2529a15edd0937a7b58488f681feb5be1cc9a1 authored about 1 year ago by Todd C. Miller <[email protected]>

free_parse_tree: clear the nss pointer when freeing.

github.com/sudo-project/sudo - 1b9fb405a3c02944ff9afbde03114ac4772b022f authored about 1 year ago by Todd C. Miller <[email protected]>

sudoers_parse_ldif: do not free parse_tree before using

The user is expected to pass in an initialized and empty parse_tree
so there is no need to free ...

github.com/sudo-project/sudo - a712af5a26d886d1db88d77575b7998a1944d3a9 authored about 1 year ago by Todd C. Miller <[email protected]>

Update embedded copy of zlib to version 1.3.

github.com/sudo-project/sudo - 902453a82963908420bb65f1ce25b562ed1631de authored about 1 year ago by Todd C. Miller <[email protected]>

We still need to clamp ngids if getgrouplist2() returns -1.

Otherwise, we end up with ngids set to the number of gids the user
belongs to which may be large...

github.com/sudo-project/sudo - cb01b90a5c8c1deca5149a7b2fb2f24e407cb080 authored about 1 year ago by Todd C. Miller <[email protected]>

No need to clear errno when using sudo_strtonum().

github.com/sudo-project/sudo - f17aebe6aafae454531a90e03b6fd1d8f392cf46 authored about 1 year ago by Todd C. Miller <[email protected]>

Move max_groups out of sudoers_user_context and into pwutil.c.

It is only used by the local password pwutil implementation.

github.com/sudo-project/sudo - 20baa390071c3f98a417800b4782357e95aaaac0 authored about 1 year ago by Todd C. Miller <[email protected]>

Pass in directory to check_user_runchroot() and check_user_runcwd().

This way we do not rely on the runas_ctx global.

github.com/sudo-project/sudo - 737354390c22d0fd0b556bbfab06d0c46df11c40 authored about 1 year ago by Todd C. Miller <[email protected]>

check_exptilde: don't need runas_ctx here

github.com/sudo-project/sudo - 2e8648ea0f0f06f68cd93725a2db233c73071f29 authored about 1 year ago by Todd C. Miller <[email protected]>

Move RUNAS_{USER,GROUP}_SPECIFIED flags into struct sudoers_runas_context.

github.com/sudo-project/sudo - 08afb5183fe4c94a50526fb0d23469ae0377c633 authored about 1 year ago by Todd C. Miller <[email protected]>

Make path_plugin_dir private to policy.c and add getter.

github.com/sudo-project/sudo - 392f0d61cbf8fa2947ea69f897837d3164244f32 authored about 1 year ago by Todd C. Miller <[email protected]>

Move list_pw global into struct runas_context.

github.com/sudo-project/sudo - 217b7b46f33b22fe6eb4083acae9034701efb1fa authored about 1 year ago by Todd C. Miller <[email protected]>

Add struct sudoers_runas_context and move runas-specific bits into it.

github.com/sudo-project/sudo - a321e6cedf903975c16b25f7ffd51631c36bda0e authored about 1 year ago by Todd C. Miller <[email protected]>

Expand the user_* (and more) macros to user_ctx.foo.

github.com/sudo-project/sudo - d8b28dad973a7f582e5e533d89832393f4bde799 authored about 1 year ago by Todd C. Miller <[email protected]>

Pass explicit struct passwd * to create_admin_success_flag().

github.com/sudo-project/sudo - 930ca0025211f3994f1d4ce6eef8c1f976faca40 authored about 1 year ago by Todd C. Miller <[email protected]>

Make sudoers_user_ctx_free() private to sudoers.c

github.com/sudo-project/sudo - 30c49288f78f779b7c2371672c1798077b6b1079 authored about 1 year ago by Todd C. Miller <[email protected]>

Rename struct sudo_user -> struct sudo_user_context.

Also rename the sudo_user global to user_ctx.

github.com/sudo-project/sudo - bd8cccb5dda65b9cdad72018e72af77b2f2923cd authored about 1 year ago by Todd C. Miller <[email protected]>

fd_matches_tty: only zero out fd_sb if fstat(2) fails.

We need to preserve the contents of the struct stat if the fd is
some other type so the check fo...

github.com/sudo-project/sudo - d148e7d8f9a98726dd4fde6f187c7d614e1258c7 authored about 1 year ago by Todd C. Miller <[email protected]>

Leave the I/O log callbacks in iolog.c

Otherwise, check_iolog_plugin will not link.

github.com/sudo-project/sudo - 6f659e2deb8a09ee543b710488baf20393ff70ff authored about 1 year ago by Todd C. Miller <[email protected]>

Move sudoers parser callbacks to callbacks.c.

github.com/sudo-project/sudo - 603148e7f2cf35f836013bbd15269b4265ce7704 authored about 1 year ago by Todd C. Miller <[email protected]>

Bump info_msgs_size to make room for the source.

github.com/sudo-project/sudo - cc15f847ac915570f3600e0a40fc3ea89fa6daf4 authored about 1 year ago by Todd C. Miller <[email protected]>

Update Xcode version from 13.2.1 to 13.4.1.

github.com/sudo-project/sudo - ee5cab977fc297b721260dfd1621500d6463481d authored about 1 year ago by Todd C. Miller <[email protected]>

Use int, not short for events in the event API.

This fixes some -Wconversion warnings and fixes an inconsistency
between the libsudo_util event ...

github.com/sudo-project/sudo - 811051d32aed055b35be275a359b7e1f30a315b3 authored about 1 year ago by Todd C. Miller <[email protected]>

Use const pointers where possible in the display code.

github.com/sudo-project/sudo - 0f2e5dae90e7bec50321778d7149acc6be3a7842 authored about 1 year ago by Todd C. Miller <[email protected]>

Document "sudo -ll command" output.

github.com/sudo-project/sudo - 6842dd1bfdfba1a8833f4534e747d39f8e6e44e6 authored about 1 year ago by Todd C. Miller <[email protected]>

Add verbose version of "sudo -l command" by using an extra -l.

The output of "sudo -ll command" consists of the matching sudoers
rule (in long form) with the a...

github.com/sudo-project/sudo - 60eef27e6dd953a376c7f63b0979d271df3d9497 authored about 1 year ago by Todd C. Miller <[email protected]>

Move code to display a cmndspec in long form to display_cmndspec_long().

github.com/sudo-project/sudo - f6291bf83e434c44b51b47322a19d5c93f4eb956 authored about 1 year ago by Todd C. Miller <[email protected]>

sudo -ll: display the sudoers file the rule came from.

github.com/sudo-project/sudo - 5a1a3ff74b7c4b91e4c2ba47015007a424345f1e authored about 1 year ago by Todd C. Miller <[email protected]>

Fix checking of SSL_{read,write}_ex() return value.

These have a boolean-style return value. However, our emulated
versions can return -1 on error,...

github.com/sudo-project/sudo - 1e6c5f3e79377ba1f38624ce3fdec1943df3aa69 authored about 1 year ago by Todd C. Miller <[email protected]>

Store the source of the matching rule and store in the event log.

The JSON logs will store the matching rule source.

github.com/sudo-project/sudo - e178b85821008a4848be6216fe79cf93cdd9cc36 authored about 1 year ago by Todd C. Miller <[email protected]>

Log source in JSON logs

This makes it possible to tell which rule resulted in a match.

github.com/sudo-project/sudo - 0b03511b85d87bfb2401fcf9ccd026373a158a4d authored about 1 year ago by Todd C. Miller <[email protected]>

Use a single callback for sudoers_lookup() and add a closure pointer.

The single callback now receives all the match info (or UNSPEC if
no match was attempted). This...

github.com/sudo-project/sudo - f6a9bb2e23635eeb4eaea5f0580623ca4f38164b authored about 1 year ago by Todd C. Miller <[email protected]>

Fix printf format string mismatch now that 'i' is size_t.

github.com/sudo-project/sudo - 5f2a0a70e5be3293cb32897dda1ec55c43f76be1 authored about 1 year ago by Todd C. Miller <[email protected]>

sudo_digest_getlen: return size_t, and 0 on error instead of -1

This is an API change, sudo_digest_getlen_v1 remains for binary
compatibility.

github.com/sudo-project/sudo - 77f94f291a4dcab1330f6fe41bf19053dcc90595 authored about 1 year ago by Todd C. Miller <[email protected]>

ERR_get_error() returns unsigned long, not int.

github.com/sudo-project/sudo - 184e03b4a97053642b2eb30d3d01ed993f6c7102 authored about 1 year ago by Todd C. Miller <[email protected]>

We now must pass "err" SSL_get_error(), not "nread".

github.com/sudo-project/sudo - 861ed2b7d48c923ce8a6c25be0d4fc3cadf72467 authored about 1 year ago by Todd C. Miller <[email protected]>

Move compat definition of ASN1_STRING_get0_data to hostcheck.c.

It is not used anywhere else.

github.com/sudo-project/sudo - e5f2354c857fe366aa82846c324219a0db915c0b authored about 1 year ago by Todd C. Miller <[email protected]>

Move OpenSSL compat defines to sudo_ssl_compat.h

github.com/sudo-project/sudo - fc7bfd5046f6f875446aa2ee96797fbc4337e143 authored about 1 year ago by Todd C. Miller <[email protected]>

Add implementation of SSL_read_ex/SSL_write_ex for those without.

github.com/sudo-project/sudo - d6d467b92e527f2f4c1402a4efb8be5933797304 authored about 1 year ago by Todd C. Miller <[email protected]>

Use SSL_read_ex() and SSL_write_ex() instead of SSL_read() and SSL_write().

github.com/sudo-project/sudo - e6d14c95b6df31c12454d1a1f39e4685a9c53f39 authored about 1 year ago by Todd C. Miller <[email protected]>

Don't use sudo when building AIX packages

PolyPkg uses "sudo installp -l" to list the built package by default
but we may not have sudo pr...

github.com/sudo-project/sudo - d404f544fc673959adf2049e105fa790f011445c authored about 1 year ago by Todd C. Miller <[email protected]>

Add --configure-only option to quit after the configure run.

This will be used to avoid building the entire package when we just
want the 32 or 64 bit sudo_i...

github.com/sudo-project/sudo - 002e22f84614b2c1cf71f7e33a86dea3d16ac14c authored about 1 year ago by Todd C. Miller <[email protected]>

Parse --disable-python in mkpkg and don't override -m32 for Solaris.

We want to be able to build without python and to specify the memory
model when building 32-bit ...

github.com/sudo-project/sudo - 8e22ede2a66dcd6d8da3c37d5d7fda0474b474ae authored about 1 year ago by Todd C. Miller <[email protected]>

Add --enable-postinstall, an optional phase when building packages.

This makes it possible to run an arbitrary script between "make
install" and the polypkg run. T...

github.com/sudo-project/sudo - 0a181849a123108ded6ba6de62d1712434c16a0d authored about 1 year ago by Todd C. Miller <[email protected]>

Add basic support for 32-bit and 64-bit LD_PRELOAD equivalents.

The noexec and intercept DSO settings may now include both a 32-bit
DSO and a 64-bit DSO specifi...

github.com/sudo-project/sudo - 980e0216ac12e89fe79797da43b513921e41e37b authored about 1 year ago by Todd C. Miller <[email protected]>

Cast TIOCSWINSZ to int to avoid overflow warning on 64-bit AIX.

github.com/sudo-project/sudo - 7cb1f7f3a9c98ec9b4cdbc2e7e40ed79826341ed authored about 1 year ago by Todd C. Miller <[email protected]>

Read path section of sudo.conf for sudo_conf_intercept_path().

github.com/sudo-project/sudo - 961f23af942dac3f19d68e4cc6a51669e05afdc6 authored about 1 year ago by Todd C. Miller <[email protected]>

visudo: document that a new file is only created if the editor writes it.

If visudo is used to create a new file, the file will only be created
if the user writes to the ...

github.com/sudo-project/sudo - bdde6dfa112f17d47bf5f4f8991023ece884780c authored about 1 year ago by Todd C. Miller <[email protected]>

visudo: do not create a new file if the user made no changes

This prevents visudo from creating a new zero-length sudoers file
if the user exited the editor ...

github.com/sudo-project/sudo - 4f3786f70f7958a269fd649fcc20d1e0f1cb3740 authored about 1 year ago by Todd C. Miller <[email protected]>

Make the sections on bug reporting consistent with each other.

GitHub issue #292

github.com/sudo-project/sudo - 50fde5d815ff28c98359389fcf701ca0a39ddfc4 authored about 1 year ago by Todd C. Miller <[email protected]>

Remove unused variable introduced in last commit.

github.com/sudo-project/sudo - 857653f9f58f894d8bd74cd26fcec33fdf485c24 authored about 1 year ago by Todd C. Miller <[email protected]>

Don't assume that if std{in,out,err} is a tty, it is the user's tty.

Previously, sudo only checked that the fd was a terminal, not that
it matched sudo's idea of the...

github.com/sudo-project/sudo - 760c9c11074cb921ecc0da9fbb5f0a12afd46233 authored about 1 year ago by Todd C. Miller <[email protected]>

testsudoers: add -L, -l and -v tests

github.com/sudo-project/sudo - 14f1a12e2dfc77f91b36d40fd7291868e2b8be1b authored about 1 year ago by Todd C. Miller <[email protected]>

testsudoers: display when a password is required

github.com/sudo-project/sudo - d62d704e55e6baf0315cc336ea5ad29f8e1c954f authored about 1 year ago by Todd C. Miller <[email protected]>

testsudoers: add -L, -l and -v options.

This makes it possible to test "sudo -l" and "sudo -v" using
testsudoers.

github.com/sudo-project/sudo - 75256516bdff67b4f55693b34573b7cfc8488393 authored about 1 year ago by Todd C. Miller <[email protected]>

sudoers_lookup_pseudo: sync with sudoers_lookup_check

This makes sudoers_lookup_pseudo(), which is used for pseudo-command
like "list" and "validate" ...

github.com/sudo-project/sudo - 538be58ac0b10c21be3ec5f1e51b44af25699a4e authored about 1 year ago by Todd C. Miller <[email protected]>

Fix user warning message for "sudo -l command" when not allowed.

Reported by the sudo-rs project.

There was a missing space between "list" and the actual command...

github.com/sudo-project/sudo - d486db46cf25f09b19aeb9109d58531f3a3d2d33 authored about 1 year ago by Todd C. Miller <[email protected]>