Sudo Project commits | Ecosyste.ms: OpenCollective

Add Sangamesh Mallayya and Michael Spradling

github.com/sudo-project/sudo - d63fe33d1f1daf10a36c3a82a49c6d3044b08425 authored over 5 years ago by Todd C. Miller <[email protected]>

Add -B option to ring the bell before the password prompt.

github.com/sudo-project/sudo - 19c548fd57701d3dbcb8bb7db05d5fd0f852dba9 authored over 5 years ago by Todd C. Miller <[email protected]>

Allow the user to change their password if expired on AIX.

Bug #883

github.com/sudo-project/sudo - dae484213ecb463275e0b1c5e00741e8eeda0e43 authored over 5 years ago by Todd C. Miller <[email protected]>

When using AIX auth, don't display the AIX password incorrect message.

Avoids a "3004-300 You entered an invalid login name or password"
message in addition to sudo's o...

github.com/sudo-project/sudo - 07ed5b86f23c246ecc6b9bd171242f26c001fb08 authored over 5 years ago by Todd C. Miller <[email protected]>

AIX packages were not being build with optimization enabled.

github.com/sudo-project/sudo - 8c9b23b0cafca57501cbede4d186595d945c597d authored over 5 years ago by Todd C. Miller <[email protected]>

Fix a typo.

github.com/sudo-project/sudo - e28ba02c78f658da8be4903aaacc87ca4eacb10f authored over 5 years ago by Todd C. Miller <[email protected]>

Support using macOS SDKs from /Library/Developer/CommandLineTools/SDKs

github.com/sudo-project/sudo - 19e2da8eec790925d94478e5b5ab7393005c3ace authored over 5 years ago by Todd C. Miller <[email protected]>

It is safe to assume _POSIX_VDISABLE is defined.

The old compat defines were to support pre-termios systems.

github.com/sudo-project/sudo - cd2cfeb8cb41a3e41bad55d34dcb448c52eff065 authored over 5 years ago by Todd C. Miller <[email protected]>

Remove second catopen() which is never called.

github.com/sudo-project/sudo - 30a5ee9c5dce4d574af896b36ed8d522fd97b845 authored over 5 years ago by Todd C. Miller <[email protected]>

Sudo's conversation functions now filters out the last login information.

github.com/sudo-project/sudo - 14e72b3ec671caa7f7699f6a5536306864665a74 authored over 5 years ago by Todd C. Miller <[email protected]>

Add pam_acct_mgmt setting to enable/disable PAM account validation.

github.com/sudo-project/sudo - 976550084e98343d57309ebfa99ff145f6a2b71b authored over 5 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - 4b240c26735a409f4a6ea80034295fef1a7e07bd authored over 5 years ago by Todd C. Miller <[email protected]>

Sudo 1.8.28

github.com/sudo-project/sudo - 91b6d71a042ceeb2c5d458d37fa72f0c0bdeb79c authored over 5 years ago by Todd C. Miller <[email protected]>

Add SPDX-License-Identifier to files.

github.com/sudo-project/sudo - 1e1ef61902830d38c15aa34180b2d1000350a762 authored over 5 years ago by Todd C. Miller <[email protected]>

Filter out last login messages on HP-UX unless running a shell.

HP-UX in trusted mode will display last login messages as part of
the PAM account management modu...

github.com/sudo-project/sudo - 96ac6adae58eeb7eaa43685c8306df070d349526 authored over 5 years ago by Todd C. Miller <[email protected]>

FreeBSD's /dev/fd only contains fds 0-2 unless fdescfs is mounted.

In practice this doesn't matter since FreeBSD >= 8 has a native closefrom

github.com/sudo-project/sudo - 30a56af6ef885a3d6816ef74aa34e218b0aa93c0 authored over 5 years ago by Todd C. Miller <[email protected]>

Keep debug fds open in send_mail() to aid in debugging.

Adds closefrom_nodebug() which acts like closefrom(3) but doesn't
close debug fds for use by send...

github.com/sudo-project/sudo - aa0146d68d01571287529900310961ab8a9993f2 authored over 5 years ago by Todd C. Miller <[email protected]>

Set def_mailerflags even if sendmail was not found at configure time.

Fixes a NULL dereference when mailerpath is set but mailerflags is not.
Bug #878

github.com/sudo-project/sudo - 9048ee6c48d27ccfe8437444635501855685ebfb authored over 5 years ago by Todd C. Miller <[email protected]>

Add a proper getdelim(3) replacement and use it instead of getline(3).

github.com/sudo-project/sudo - de65d70929db209d24500fff00e1e1b3f2e27624 authored over 5 years ago by Todd C. Miller <[email protected]>

Restrict the PAM_TTY kludge to Solaris and Linux-PAM.

Setting PAM_TTY to the empty string causes problems with some modules
on HP-UX so restrict it to ...

github.com/sudo-project/sudo - f0910c01da5e9f24a71db8b359a46ae19ddc7005 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix the counting of supplementary groups on AIX.

We should not assume that basegid will be present in the list of
gids returned by getgrset().

github.com/sudo-project/sudo - 731e796711d4554f67d7f14aaf5b9f15696090cc authored over 5 years ago by Todd C. Miller <[email protected]>

Plug a memory leak on user/group lookup failure found by ASAN.

github.com/sudo-project/sudo - 194968eaf0ef6fd3d2a7c3eb6a78166074fe25ec authored over 5 years ago by Todd C. Miller <[email protected]>

Fix test failure when run by a user other than the file owner.

github.com/sudo-project/sudo - e31ac5a998b97805e6a2730fc2d1cf3262ac640b authored over 5 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

github.com/sudo-project/sudo - 28b0bff4f3a2408c3f8de5ac5c8c7ca7cfe9e689 authored over 5 years ago by Todd C. Miller <[email protected]>

Test cvtsudoers stdout and stderr separately.

Fixes a test failure on systems with musl libc. Bug #873

github.com/sudo-project/sudo - 0c31cf15fe55bb996c7ce6b5c1584d776be14644 authored over 5 years ago by Todd C. Miller <[email protected]>

Better comment about EOVERFLOW and pstat_getproc().

Also remove some useless casts.

github.com/sudo-project/sudo - 0766e0c6470bb13cfa33051fc654c7608c6aa18f authored over 5 years ago by Todd C. Miller <[email protected]>

Ignore EOVERFLOW from pstat_getproc(), it is not a fatal error.

It just means that one of the fields in pstat lacks the precision to
store a value. That's not a...

github.com/sudo-project/sudo - 17ca31c38113dd996ea0877637b82c95f52f587b authored over 5 years ago by Todd C. Miller <[email protected]>

update copyright year

github.com/sudo-project/sudo - 9c4487b732ed6b3ab1291f061484b6a8a97effcd authored over 5 years ago by Todd C. Miller <[email protected]>

Fix error message when a fully-qualified plugin path does not exist.

github.com/sudo-project/sudo - 8ee2de99803ee46b607887a5db42eb9b9ba7a828 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix unescaped '\' and remove an extra '[' in the definition of digest.

github.com/sudo-project/sudo - 0e8fffdb3014270384e179a4a3a8fe62bfcd51aa authored over 5 years ago by Todd C. Miller <[email protected]>

Ignore carriage return before a linefeed.

This allows sudo to parse files with DOS-style line endings.

github.com/sudo-project/sudo - ea3ede690fb8a6fde3bf48868b15936db541a595 authored over 5 years ago by Todd C. Miller <[email protected]>

For sssd, the nsswitch.conf setting should be "sss" not "sssd".

From Johnathan Smith.

github.com/sudo-project/sudo - f4853cb75408b99f935f394cfb96a3d5c79bbd5b authored over 5 years ago by Todd C. Miller <[email protected]>

Add simple API for to allow reading environment data from different sources.

Currently, this is used to read a file like /etc/environment.

github.com/sudo-project/sudo - e1205f08d6ecb9ccd0be0687b47b5b510c034264 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix pasto; the unrestricted env file was read when we want the restricted one.

github.com/sudo-project/sudo - f3344b58813b7edc9ed1c01a3260ad98575cac7c authored over 5 years ago by Todd C. Miller <[email protected]>

Be sure to include sudo_queue.h where needed instead of relying on other headers.

github.com/sudo-project/sudo - c0a12d9d956a72ac47e669c15d5e4db11c02d5fd authored over 5 years ago by Todd C. Miller <[email protected]>

Only export sudo_arc4random_uniform() if arc4random_uniform() is missing.

github.com/sudo-project/sudo - 683c65b98b858b90ee8cb7e7e40a61914b20e372 authored over 5 years ago by Todd C. Miller <[email protected]>

Quiet a warning on gcc 8

github.com/sudo-project/sudo - f17683482bc22eb31239f6a7634c2e1c8e23e790 authored over 5 years ago by Todd C. Miller <[email protected]>

AIX 7.1 defines O_CLOEXEC but it can't be used outside the kernel.

Redefine O_CLOEXEC if it doesn't fit in an int and pipe2() is missing.

github.com/sudo-project/sudo - da98428e91ae95386a4a79da553675fb2b623615 authored over 5 years ago by Todd C. Miller <[email protected]>

Split command match code out into match_command.c.

Also remove unused SUDOERS_NAME_MATCH code.

github.com/sudo-project/sudo - 36d43734035915ab1e85406579ad7144b3e4bdfb authored over 5 years ago by Todd C. Miller <[email protected]>

Split out digest matching into its own file.

github.com/sudo-project/sudo - cf2bfbcd3fdee92a2df53ec0ed85877b35aceaf7 authored over 5 years ago by Todd C. Miller <[email protected]>

Split out digest matching into its own file.

github.com/sudo-project/sudo - a04409747cd9bc5750ab692cd171da1390d208ff authored over 5 years ago by Todd C. Miller <[email protected]>

Rename FOLLOW and NOFOLLOW tokens FOLLOWLNK and NOFOLLOWLNK.

Fixes a namespace collision on Solaris when bison is used.

github.com/sudo-project/sudo - 1e6e048180000bc073d047c1dd4c1dc7f8186720 authored over 5 years ago by Todd C. Miller <[email protected]>

Add stub definition of digest_matches() for SUDOERS_NAME_MATCH

github.com/sudo-project/sudo - bc259150509515f82e33f7d2c9bbc20a077d5d87 authored over 5 years ago by Todd C. Miller <[email protected]>

No longer need to include sudo_lbuf.h

github.com/sudo-project/sudo - 694999487b82e69e7adb4e6d2d8e785d953ef55a authored over 5 years ago by Todd C. Miller <[email protected]>

On RedHat/CentOS get the OS major version from /etc/redhat-release.

We cannot determine this from the output of "pp --probe" since it
doesn't contain a period to sep...

github.com/sudo-project/sudo - ffc4db6aee28b51229bad8a6f934e04d7ed9fa46 authored over 5 years ago by Todd C. Miller <[email protected]>

Use SET macro instead of bitwise OR.

github.com/sudo-project/sudo - 6dceca47cc47a6ed712f654d46108fa217f4851d authored over 5 years ago by Todd C. Miller <[email protected]>

In sudo_make_grlist_item() the calculation of total did not include

space for pointers to the group names.

github.com/sudo-project/sudo - c92f80b79e739675adc52fe260e11bace140bf39 authored over 5 years ago by Todd C. Miller <[email protected]>

Use correct debug_decl() names.

github.com/sudo-project/sudo - 4f74fe3a8e7e5796169ad14426ae22d5e38d283a authored over 5 years ago by Todd C. Miller <[email protected]>

Add fallback values for sudoers uid, gid and mode if not set in Makefile.

github.com/sudo-project/sudo - 928faf27f2846671f15bfb897d28182b70b60160 authored over 5 years ago by Todd C. Miller <[email protected]>

include stddef.h to make sure we get NULL

github.com/sudo-project/sudo - 13c3244220a2fea4d1d8d262288a1b19da4937d3 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix memory leak when there are no network interfaces or an error occurs.

github.com/sudo-project/sudo - 3788c654838f52499e8f2d63cad39ecc8f23bde5 authored over 5 years ago by Todd C. Miller <[email protected]>

Use $ac_cv_search_FUNCTION instead of $ac_lib and $ac_res.

Fixes a problem where libcrypt is not used with autoconf caching.
Adapted from a diff from Adam L...

github.com/sudo-project/sudo - c1d934894d303017bc7d1ee2bd2e360232594f52 authored over 5 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

github.com/sudo-project/sudo - df8b855b2a25f2ee9ce158bfd09ce25125cfab2b authored over 5 years ago by Todd C. Miller <[email protected]>

Fix listpw=never and verifypw=never. Bug #869

github.com/sudo-project/sudo - ecc9c366e469988c736629cbe88348c40dcfa31a authored over 5 years ago by Todd C. Miller <[email protected]>

Minor snprintf() usage tweaks:

1) don't assume snprintf() returns -1 on error, check for <0
2) when comparing return value of si...

github.com/sudo-project/sudo - 985600e7f03a24124032548f7088a445be6f09ec authored over 5 years ago by Todd C. Miller <[email protected]>

The AIX nofiles hard limit fix and bug #867 will make 1.8.27.

github.com/sudo-project/sudo - 3d63eee344df8d7a2023bd44d2c2244f3772067d authored almost 6 years ago by Todd C. Miller <[email protected]>

Use PAM_SILENT to prevent pam_lastlog from printing last login

information on RedHat except when explicitly running a shell.
Adapted from a patch from Nir Soffe...

github.com/sudo-project/sudo - e2675d8f1efc7681e1a718754bd1ef2904ac9ceb authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix the default nofiles and stack hard limits.

The table of default hard limits in /etc/security/limits was out
of date with respect to the curr...

github.com/sudo-project/sudo - f7d7a9a6196937c88588956d5b8dfcfbbe0b4fba authored almost 6 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - 32dc90c28e80e99391dc3558d29296c90a4fce83 authored almost 6 years ago by Todd C. Miller <[email protected]>

Final updates for sudo 1.8.27.

github.com/sudo-project/sudo - 7ae29420d5966ae5efaaa13f647ac3e0c34e26dd authored almost 6 years ago by Todd C. Miller <[email protected]>

Update copyright year

github.com/sudo-project/sudo - 64d08d8bf21077a161ed2a930df43612b47d53ee authored almost 6 years ago by Todd C. Miller <[email protected]>

Update for 2019

github.com/sudo-project/sudo - de94a04ba4499132ce5855d4961115a24f9a96ed authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix setting of utmp entry when running command in a pty.

Regression introduced in sudo 1.8.22.

github.com/sudo-project/sudo - b2f7983c84fd01e0b29895d7df776b4b162fd8a5 authored almost 6 years ago by Todd C. Miller <[email protected]>

Use debug_return_int not debug_return_bool in resolve_host

github.com/sudo-project/sudo - efe35e5b1e7bb9278b30e578d8f3c4eb666f1ea1 authored almost 6 years ago by Todd C. Miller <[email protected]>

sudo 1.8.27

github.com/sudo-project/sudo - 24b0da367bab2d19f5b918ff102447a0727eef16 authored almost 6 years ago by Todd C. Miller <[email protected]>

Allow the sudoers file to be specified without the -f option.

Bug #864

github.com/sudo-project/sudo - dc9338ffe72e8cede2df3086a839d4fb2f540240 authored almost 6 years ago by Todd C. Miller <[email protected]>

The iolog_dir section is below the maxseq section, not above.

github.com/sudo-project/sudo - 7d5b0064af12c95062fb8fb859b80312a25c3472 authored almost 6 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

github.com/sudo-project/sudo - 3d84150736585475fd5a9f432d8f802efccab7eb authored almost 6 years ago by Todd C. Miller <[email protected]>

Add -n and -R options to help; reported by Radovan Sroka

github.com/sudo-project/sudo - 72050203bcf66cc7b1a15fa14e6fc83182e97ace authored almost 6 years ago by Todd C. Miller <[email protected]>

Add missing description of padding option and missing argument to -c.

github.com/sudo-project/sudo - 258c7d4dd0c7ca24b33a9079c06c78a7e328bb80 authored almost 6 years ago by Todd C. Miller <[email protected]>

The -c option was missing from the help info; from Radovan Sroka

github.com/sudo-project/sudo - 142b370c1f928549db3b357a495d151c7cd87f65 authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix some typos; reported by Radovan Sroka

github.com/sudo-project/sudo - 04a4b3c1fcc1526ff1ea73597a1764cb160d400b authored almost 6 years ago by Todd C. Miller <[email protected]>

In sudo_pam_approval(), for the exempt case, only overwrite pam

status when the passwd is expired or needs to be updated.

github.com/sudo-project/sudo - 5242773489abf058e49e886fc7ed3e2026256574 authored almost 6 years ago by Todd C. Miller <[email protected]>

The fix for bug #843 was incomplete and caused pam_end() to be called early.

sudo_pam_approval() must not set the global pam status to an error
value if it returns AUTH_SUCCE...

github.com/sudo-project/sudo - 4125808a8579a23fbcf5e2cd37507746d34ef1ba authored almost 6 years ago by Todd C. Miller <[email protected]>

Don't run the command in a pty if no I/O plugins are logging anything.

That way an I/O plugin that doesn't actually log anything won't cause
the command to be run in a ...

github.com/sudo-project/sudo - e91e5ee820355e96826323bc1f021dff04c7e4b6 authored almost 6 years ago by Todd C. Miller <[email protected]>

Update ignore patterns to match doc changes.

github.com/sudo-project/sudo - 83fd48a75c5aefe42f713313be6d9ee5c110be11 authored almost 6 years ago by Todd C. Miller <[email protected]>

fix mode fixmdoc.sed

github.com/sudo-project/sudo - 85dd1747cf5cb43d574153c46d720f186826a19f authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix section in the .TH line of *.man.in file.

The substitution for @mansectsu@ and @mansectform@ was broken.
No longer need to strip out OpenBS...

github.com/sudo-project/sudo - b8ba372227a76a1adda62d297935b2cdf4a7827a authored almost 6 years ago by Todd C. Miller <[email protected]>

Add sudoers.man.in.sed, missed from previous commit.

github.com/sudo-project/sudo - e0d2dc61eb065e294c9e120706cb044a8c143591 authored almost 6 years ago by Todd C. Miller <[email protected]>

Add Guillem Jover

github.com/sudo-project/sudo - 168a7ca1108a7860633feb19e8dfb0744b62193e authored almost 6 years ago by Todd C. Miller <[email protected]>

recent changes

github.com/sudo-project/sudo - 8964dd5d20589830d02c2d35457eab676ede66f5 authored almost 6 years ago by Todd C. Miller <[email protected]>

Use roff conditionals in the manuals instead of post-processing.

We still need to process the resulting .man.in files to add back
the conditionals but this should...

github.com/sudo-project/sudo - e010706ede6aa643c8bc5cfc0c2997e84533ee05 authored almost 6 years ago by Todd C. Miller <[email protected]>

Sudo plugin manual updates and clarification from Guillem Jover:

- Add missing return information for show_version().
- Fix prototypes for several function pointe...

github.com/sudo-project/sudo - 23006c72c7ecf3d186f52d269f7ab927fe36013d authored almost 6 years ago by Todd C. Miller <[email protected]>

Revert changes to give arguments to the .Bx macro.

This is intended for things like .Bx 4.3 to generate "4.3BSD" so
the argument ends up before the ...

github.com/sudo-project/sudo - 7c0019d2a50e47678f2d1051150217471f61aa34 authored almost 6 years ago by Todd C. Miller <[email protected]>

Update fixmdoc.sh to match the BSD -> .Bx changes in the manuals.

Bug #861

github.com/sudo-project/sudo - 0679f4529c87e2752db1d36adc71dad26eee06c7 authored almost 6 years ago by Todd C. Miller <[email protected]>

Add support for utmps as found in HP-UX.

github.com/sudo-project/sudo - ecd968881867890d91750893d759f57a83b6c6db authored almost 6 years ago by Todd C. Miller <[email protected]>

Support st_nmtime in struct stat as found in HP-UX.

github.com/sudo-project/sudo - 716aa6e4ab77c133fa989d01718c7faed46e6ceb authored almost 6 years ago by Todd C. Miller <[email protected]>

If fcntl fails, fall back to the /proc implementation.

github.com/sudo-project/sudo - 7c5469264d7e6f9e25b2f1230b7baf02ef753ca8 authored almost 6 years ago by Todd C. Miller <[email protected]>

Mention schema.olcSudo

github.com/sudo-project/sudo - 4f5acff6ebca0c15ab843526981e65ef3717a003 authored almost 6 years ago by Todd C. Miller <[email protected]>

Mention schema.olcSudo here too.

github.com/sudo-project/sudo - 5f5d4a285c985373567a907265f1cba9773b1b13 authored almost 6 years ago by Todd C. Miller <[email protected]>

OpenLDAP schema file for Sudo in on-line configuration (OLC) format.

From Frederic Pasteleurs.

github.com/sudo-project/sudo - 5e098a782d564dbeb700a1bfe56462ee900a5e88 authored almost 6 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

github.com/sudo-project/sudo - d6c2c536883f6741e5ef72927c1c8c77e027f594 authored almost 6 years ago by Todd C. Miller <[email protected]>

Only use closefrom_fallback() if no better method exists.

The previous logic was too fragile.

github.com/sudo-project/sudo - 537a2f97731d4c2419d4043fa75c6f5f18a2eb5d authored almost 6 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

github.com/sudo-project/sudo - 733669ec38d6c7a9be0340bb9bc37e1d74b2730c authored almost 6 years ago by Todd C. Miller <[email protected]>

Portuguese translation for sudo and sudoers from translationproject.org.

github.com/sudo-project/sudo - cad10fbd2e9a2e540f73b6f71d7144f2851f078a authored almost 6 years ago by Todd C. Miller <[email protected]>

Add sudo_gai_fatal, sudo_gai_vfatal, sudo_gai_vwarn, sudo_gai_warn

and gai_log_warning that use gai_strerror() instead of strerror().

github.com/sudo-project/sudo - cdd5bb32eb56b02dfc802a05ebad8051a644c360 authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix memory leak in runaslist_matches().

github.com/sudo-project/sudo - cfa4879dbd6528e2a1c40517d59ec6a48e4afa16 authored almost 6 years ago by Todd C. Miller <[email protected]>

typo

github.com/sudo-project/sudo - c88b8598538d68d038231c217e179826b658aa5e authored almost 6 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - 9c2f4b8f196ae8d6ec8de9806ff3c161a238688e authored almost 6 years ago by Todd C. Miller <[email protected]>

More updates for 1.8.26

github.com/sudo-project/sudo - 9378808b3a1a75542f17f5e4a19a286a36ba7f24 authored almost 6 years ago by Todd C. Miller <[email protected]>