Sudo Project commits | Ecosyste.ms: OpenCollective

In list (-l) or verify (-v) mode, if we have a match but authentication

is required, clear FLAG_NOPASSWD so that when listpw/verifypw is
set to "all" and there are multi...

github.com/sudo-project/sudo - 88faa58735e4035aaf7fae6f74d755e6b6843f86 authored almost 7 years ago by Todd C. Miller <[email protected]>

When checking the results for "sudo -l" and "sudo -v", keep checking

even after we get a match since the value of doauth may depend on
evaluating all the results. Fr...

github.com/sudo-project/sudo - 2cbdc26540bf118527eca825f5cf7de05b6f4a08 authored almost 7 years ago by Todd C. Miller <[email protected]>

If passwd_tries is less than 1, check_user() will always return

false (since the user didn't authenticate). The normal reason for
this is an authentication erro...

github.com/sudo-project/sudo - a62cd4b4fe25eda6f99d73d7277a6db90a36337c authored almost 7 years ago by Todd C. Miller <[email protected]>

Document bash shell alias issue with "sudo -i".

github.com/sudo-project/sudo - 4e8c037f22e1bf2b78fa85614e16d206f11ab7a1 authored almost 7 years ago by Todd C. Miller <[email protected]>

Return an error if the sudo front end doesn't set the user name, user ID,

group ID or host name. Bug #807

github.com/sudo-project/sudo - 53a8ad71200c797baa3cb5c388ffeb9af42d5b93 authored almost 7 years ago by Todd C. Miller <[email protected]>

Treat an empty hostname as a failure and return NULL.

github.com/sudo-project/sudo - 2c45774a35b10659960101a73bbd5ccbfb45e4fb authored almost 7 years ago by Todd C. Miller <[email protected]>

Add support for #include and #includedir from Natale Vinto.

github.com/sudo-project/sudo - 740c619d335a02f6d83ab8f410afa35ea9caa80e authored about 7 years ago by Todd C. Miller <[email protected]>

Minor corrections from Tae Wong

github.com/sudo-project/sudo - c0177415890f52afc63848538ef647f8a3518b21 authored about 7 years ago by Todd C. Miller <[email protected]>

Add a warning that for "sudo -i command" and "sudo -s command" the

shell is not run in interactive mode which may change its behavior.

github.com/sudo-project/sudo - cece54ae8505953e21f108728c9d8bfd2a457684 authored about 7 years ago by Todd C. Miller <[email protected]>

Fix stair-stepped output when the output of a sudo command is piped

to another command and use_pty is set.

github.com/sudo-project/sudo - 3b88cdfcd8d1a39eabbb5b7d0c8fe8f035d7a264 authored about 7 years ago by Todd C. Miller <[email protected]>

env_keep and env_check are also taken into account with "sudo -i".

Bug #806

github.com/sudo-project/sudo - 1051cf1e6f112f80b8ca2d3fa777cb85339cda1a authored about 7 years ago by Todd C. Miller <[email protected]>

Make PC insults the default and add new configure option,

enable-offensive-insults, to enable the offensive insults.

github.com/sudo-project/sudo - 749cdc9d957949999d5d5b5cbb0adf842f32c370 authored about 7 years ago by Todd C. Miller <[email protected]>

Add missing translators from recent updates and one name change.

github.com/sudo-project/sudo - dcb887807e98e23543601d2815ab9bae7551d072 authored about 7 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

* * *
sync with translationproject.org

github.com/sudo-project/sudo - 9ab1c9935d8c302769ae498aa7b605f4786fedb2 authored about 7 years ago by Todd C. Miller <[email protected]>

More accurately describe the use_pty option now that its behavior

has changed with respect to interposition with a pipe.
Also describe some caveats with log_input.

github.com/sudo-project/sudo - 7e78fbccfd6a22cfb0c26bc5aa80179c14495290 authored about 7 years ago by Todd C. Miller <[email protected]>

Document changes in use_pty behavior when no terminal is present.

github.com/sudo-project/sudo - b4f4bb334515d7dc829eb7aa68f2380920ffa89d authored about 7 years ago by Todd C. Miller <[email protected]>

Set ec->cmnd_pid to the correct value when receiving the command's

process ID from the monitor.

github.com/sudo-project/sudo - 8949992040a8f76942f5da0f3438233adf563f3b authored about 7 years ago by Todd C. Miller <[email protected]>

If /dev/tty is not available and no I/O logging plugins are configured,

fall back on exec_nopty() even if the policy plugin requested a pty.
We never allocate a pty when...

github.com/sudo-project/sudo - 84af812b8ca31c81ddd2b466fa9861b8adae86a7 authored about 7 years ago by Todd C. Miller <[email protected]>

Do not set utmp_user if we did not actually allocate a pty.

github.com/sudo-project/sudo - 2c2476f07f85f2e831478d5fe6a24d036b95d556 authored about 7 years ago by Todd C. Miller <[email protected]>

sudo 1.8.21p2

github.com/sudo-project/sudo - 87eba6c892859fdc84f63f4b8f24b6079b5fc0b4 authored about 7 years ago by Todd C. Miller <[email protected]>

sudo_terminated() should not return true when SIGCHLD is pending.

Bug #801

github.com/sudo-project/sudo - d85056d95fdd505d87aa46e52d8e0d017f207227 authored about 7 years ago by Todd C. Miller <[email protected]>

Set SIGCHLD handler to SIG_DFL before forking the askpass command

and restore after. Otherwise, SIGCHLD will end up in the list of
pending signals and sudo_execut...

github.com/sudo-project/sudo - 4b5aeefebc15593c1ec566168930b6da5cb22c7c authored about 7 years ago by Todd C. Miller <[email protected]>

The read and write sides of signal_pipe[] were swapped, resulting

in EBADF reading from and writing to the signal pipe on Linux and
probably others. On systems wi...

github.com/sudo-project/sudo - fdff345e0fc94a4844f6c8c28c920800c3366fbd authored about 7 years ago by Todd C. Miller <[email protected]>

Fix a logic error in 96651906de42 which prevented sudo from using

the PAM-supplied prompt. Bug #799

github.com/sudo-project/sudo - 8e021c39fa72b22eddc2a2c77b1073e282904754 authored about 7 years ago by Todd C. Miller <[email protected]>

Sudo 1.8.21p1

github.com/sudo-project/sudo - f5425a80a2024fd80ee3414c55c42a7137cd67aa authored about 7 years ago by Todd C. Miller <[email protected]>

The Fedora sudo package uses /etc/ldap.conf not /etc/sudo-ldap.conf.

github.com/sudo-project/sudo - 171512b173f7eddf1928d49b7238210c7c7c0474 authored about 7 years ago by Todd C. Miller <[email protected]>

The fix for matching when no sudoRunAsUser is present in a sudoRole

was incomplete. If no -g option was specified on the command line
but sudoRunAsGroup is present ...

github.com/sudo-project/sudo - 06d52c97c22eeeaaf81a397612b4733e754ceff8 authored about 7 years ago by Todd C. Miller <[email protected]>

Sprinkle a few more debugging printfs.

github.com/sudo-project/sudo - 507ab6fdcd431041a758c59e2cf475a2b212414e authored about 7 years ago by Todd C. Miller <[email protected]>

Fix replaying sessions that contain input logs. When the inter-record

timeout expires we need to read the next record if there is nothing
to output.

github.com/sudo-project/sudo - e100259619ae779b7d503043bd7dbc663010fcab authored about 7 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - 447c2c7e8c359ada51eed754a3b1560fca72ee56 authored about 7 years ago by Todd C. Miller <[email protected]>

Fix typo (Auguest vs. August). From David Pocock.

github.com/sudo-project/sudo - 7652dad0d69449954667ca6d021ede978faa5fec authored about 7 years ago by Todd C. Miller <[email protected]>

Go back to returning true from display_privs() on non-error. This

results in "sudo -U otheruser -l" exiting with a status of 0 even
when otheruser is not allowed t...

github.com/sudo-project/sudo - d5c41ae373d03fc74499c5a514cf98fdc9b243f9 authored about 7 years ago by Todd C. Miller <[email protected]>

Fix the pass2 ldap query string when no search filter is defined.

Due to the addition of "(sudoUser=*)" to the query we always need
the AND operator, even if no se...

github.com/sudo-project/sudo - 5cdee2c2c070081da38cf8014390887cd119920d authored about 7 years ago by Todd C. Miller <[email protected]>

Don't forward SIGINFO to the child when it is send by the kernel

(not another user process). This is consistent with the handling
of other keyboard-generated sig...

github.com/sudo-project/sudo - c3d098254d25925f955330bc44a79197d91b47cc authored about 7 years ago by Todd C. Miller <[email protected]>

Fix path to LICENSE and NEWS files that get used in the installer.

Previously, the installed versions were used instead of the ones
in the destdir.

github.com/sudo-project/sudo - 0d31a1c3024032e9c890c02161385c524a636f9c authored about 7 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 0d243a882ea48efcd0bdb58f33d13ae8fc2e360b authored about 7 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - b7b00c26dbd725e3f88989789aae6e4a7090d8ff authored about 7 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - b45d73acb40f0e9f584c4f580a77cea932c8dd14 authored about 7 years ago by Todd C. Miller <[email protected]>

Preserving environment variables on the command line was bug #279

github.com/sudo-project/sudo - 159f89f0de76ed976423b52a0663cc0124ffd527 authored about 7 years ago by Todd C. Miller <[email protected]>

Add Friulian translation for sudo from Fabio Tomat via translationproject.org

github.com/sudo-project/sudo - a01bbfacf447fe13e7b85bb8bf7f743cb18c6823 authored about 7 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 6696653e4fcf883cf52abc920c646a680d966760 authored about 7 years ago by Todd C. Miller <[email protected]>

In the Runas example that uses "boulder" make it clear that "boulder"

is a host name.

github.com/sudo-project/sudo - 54860cf7f5abc92042a7057548d6c76e41e23f83 authored about 7 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - deaeffe73abc8055b844ea6852fb8fce218a1f55 authored about 7 years ago by Todd C. Miller <[email protected]>

Allow the user to specify a list of environment variables to preserve.

This adds an option paramter to the --preserve-env option, a
comma-separated list of variable names.

github.com/sudo-project/sudo - c18dde2350403727caa96a3e6dbb637cec5282b5 authored about 7 years ago by Todd C. Miller <[email protected]>

Replace tty_tickets option with timestamp_type which can be

global, ppid or tty. Defaults to tty (no change in behavior).
Some users want the ppid behavior.

github.com/sudo-project/sudo - 63d954d1fc1de27e06eb68f5ab458ff8cacac887 authored about 7 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - c3b3e501b9d39af9e2aff033add603513a23639a authored about 7 years ago by Todd C. Miller <[email protected]>

Don't send email about an unresolvable host name if fqdn is

enabled and the user specified the run host via the -h flag.

github.com/sudo-project/sudo - 48459292ff78980a26f19a0553ca659fe47fee9f authored about 7 years ago by Todd C. Miller <[email protected]>

fix playback of stdout/stderr without embedded carriage returns

github.com/sudo-project/sudo - 5ab1d724a9052dd4edf9d177c7569f60446b5d26 authored about 7 years ago by Todd C. Miller <[email protected]>

Avoid unused variable warning when sasl is not used.

github.com/sudo-project/sudo - 98369bf985c910bed0ea3c8d2f27bbef819d9019 authored about 7 years ago by Todd C. Miller <[email protected]>

Add support for --enable-sasl and --disable-sasl to make it possible

to enable/disable support for LDAP with SASL authentication. Sudo
compiles in support for SASL a...

github.com/sudo-project/sudo - beece91719621de4dfd86685f63337a14dfa35be authored about 7 years ago by Todd C. Miller <[email protected]>

List the correct pattern ("*=()*") in the env_delete description.

Use pseudo-tty instead of pseudo terminal for consistency.

github.com/sudo-project/sudo - ad81862b0768fdee987eeee1a58480f8702e51e5 authored about 7 years ago by Todd C. Miller <[email protected]>

Include pathnames.h for /dev/fd on FreeBSD and Mac OS X.

github.com/sudo-project/sudo - 5a6b8a78f182ea0088dc54996b5e7f28ca940f34 authored about 7 years ago by Todd C. Miller <[email protected]>

update for 1.8.21

github.com/sudo-project/sudo - ec45b77d040983a06c499b0712e4b1716d1d841a authored about 7 years ago by Todd C. Miller <[email protected]>

No need to call sudo_ev_del() before sudo_ev_free(); sudo_ev_free()

will delete the event from its base before freeing it.

github.com/sudo-project/sudo - 0849e2cac4e53d733a8bc1061c399169e1b810bd authored about 7 years ago by Todd C. Miller <[email protected]>

Terminate the command if an I/O log function returns 0 or -1. This

was mistakenly removed by 25b7fd056614 in Sudo 1.8.18 with the
removal of the ignore_iolog_errors...

github.com/sudo-project/sudo - 1cfaf6c344772a09d267b76f1a8d5f35e2e3d813 authored about 7 years ago by Todd C. Miller <[email protected]>

Quiet a coverity false positive.

github.com/sudo-project/sudo - 4b516229141cba8dd05e1b53f976861aec084116 authored about 7 years ago by Todd C. Miller <[email protected]>

Change to a single event loop in sudoreplay and use signal events.

github.com/sudo-project/sudo - 2d30c42a03fd558c394f648b75e90666c4998a9f authored about 7 years ago by Todd C. Miller <[email protected]>

start new sentences on a new line

github.com/sudo-project/sudo - 9ea9ecb18329aa6dae14a58c798ef8203c243c0a authored about 7 years ago by Todd C. Miller <[email protected]>

Clarify how the variable prompt options interact with each other

and PAM.

github.com/sudo-project/sudo - d76d5eaebc38ed227b8ec0d964d6b5db32a68f80 authored about 7 years ago by Todd C. Miller <[email protected]>

Don't set passprompt_override when SUDO_PROMPT is present.

This effectively reverts ed77d255f383.

We treat the SUDO_PROMPT environment variable similar to ...

github.com/sudo-project/sudo - 879ba688790ef145822863657c5e19a2c4584a1f authored about 7 years ago by Todd C. Miller <[email protected]>

Add syslog_pid sudoers option to log sudo's process ID when logging

via syslog. This is disabled by default to match historic behavior.

github.com/sudo-project/sudo - d129f306ea88af807878dd93b9ed6c222185382c authored about 7 years ago by Todd C. Miller <[email protected]>

When deciding which prompt to use (PAM's or sudo's) treat the PAM

prompt "username's Password:" as equivalent to "Password:".
Some PAM modules (on AIX at least) us...

github.com/sudo-project/sudo - 43cbcbc24d3150d92644e4cc2729a4947d7cade8 authored about 7 years ago by Todd C. Miller <[email protected]>

Add missing argument to a few of the defaults strings in the

"sudo -V" output.

github.com/sudo-project/sudo - 5923a28113edaf80d37397ed4452706ded39bd2d authored about 7 years ago by Todd C. Miller <[email protected]>

When examining environment variables or variables passed in from

the front-end, ignore variables with no value specified.

github.com/sudo-project/sudo - 52b25940c6a1ea1c1ba138ac378807cb8abc3c31 authored about 7 years ago by Todd C. Miller <[email protected]>

Document that "-p prompt" overrides SUDO_PROMPT.

github.com/sudo-project/sudo - 6b4d871b14fd51160dcd5e5262a4ff313d37044e authored about 7 years ago by Todd C. Miller <[email protected]>

Enable passprompt_override by default if SUDO_PROMPT is present in

the environment. This is consistent with how "sudo -p prompt" is
handled.

github.com/sudo-project/sudo - 37f591d2dd5c05ef4308b9891cd3b5cca2e4d971 authored about 7 years ago by Todd C. Miller <[email protected]>

When reading a single character via a switch() use "default: instead

of "case 1:" to quiet a coverity warning.

github.com/sudo-project/sudo - 1918ec4a55ddbeeee79567addbdf249adc81a3bd authored over 7 years ago by Todd C. Miller <[email protected]>

Initialize ch in getsize_cb() in case we are called with the wrong

initial state.

github.com/sudo-project/sudo - 6509482bfdf4dcdd31b85c7879a955ef4200f9d2 authored over 7 years ago by Todd C. Miller <[email protected]>

remove unused variable

github.com/sudo-project/sudo - 58858513f046d1c496c54ac614464348199ef741 authored over 7 years ago by Todd C. Miller <[email protected]>

Call install_sudoers() even when doedit is false. If a file in a

#includedir has a syntax error it will still have been edited and
we need to install the edited t...

github.com/sudo-project/sudo - 034132774d1ccf11c0a0e1f205fcc16d8a7d9c8f authored over 7 years ago by Todd C. Miller <[email protected]>

Reparse sudoers if a new #include file was added.

Otherwise the new file will not get its syntax checked.
Bug #791

github.com/sudo-project/sudo - 5bc80d3ddb791ba9a9935a113ce510c73e1cf4ec authored over 7 years ago by Todd C. Miller <[email protected]>

don't restore the cursor when setting terminal size, we don't want the cursor to move

github.com/sudo-project/sudo - 28fe335017174df1592da562d953d30a6853ac05 authored over 7 years ago by Todd C. Miller <[email protected]>

Read the xterm terminal size using an event so we can easily time

out if needed.

github.com/sudo-project/sudo - dbddf1bc3646e5055ea5bc0ba2e4ce4a149a8796 authored over 7 years ago by Todd C. Miller <[email protected]>

If we free the default base in sudo_ev_base_free(), reset the default

base to NULL.

github.com/sudo-project/sudo - 7f8765d32786526e7e939bbd282f504fe3355e33 authored over 7 years ago by Todd C. Miller <[email protected]>

Add the ability to set a default event base, to be used by plugins

which don't have access to the event base.

github.com/sudo-project/sudo - d2a0bfbb121b18560f1f6607765237ea4ea90e9a authored over 7 years ago by Todd C. Miller <[email protected]>

Allow sudoreplay to adjust the window size on xterm-like terminals.

github.com/sudo-project/sudo - 9a766783179628adf6aa340ae55f9080cf1d893a authored over 7 years ago by Todd C. Miller <[email protected]>

Log window size change events in the sudoers I/O plugin.

Let sudoreplay parse a timing file with window change events
(currently ignored).

github.com/sudo-project/sudo - f79a236533da8e5a3fdc22b1da205fa4be79e6df authored over 7 years ago by Todd C. Miller <[email protected]>

Pass window size change events to the plugin.

github.com/sudo-project/sudo - 8898ec1f9cc92d18eb3c5d6301cc100da919dac7 authored over 7 years ago by Todd C. Miller <[email protected]>

Clear input, output, control and local flags before copying them

from the source terminal. Otherwise, flags that are disabled
in the source terminal may still be...

github.com/sudo-project/sudo - 6505d05803336300168d723a24e892ac7aee745f authored over 7 years ago by Todd C. Miller <[email protected]>

Remove pointless subshells in targets that simply change the directory

and execute a command. The command is already run in a shell so
there is no need to execute a su...

github.com/sudo-project/sudo - e70a953fb4157f0946ac456de5e351f4e5a33f7e authored over 7 years ago by Todd C. Miller <[email protected]>

Store the debug instance ID for I/O plugins too.

Now iolog_open() is consistent with policy_open().

github.com/sudo-project/sudo - a7759b6261ccf5ad2d4d310de8651b439f0ee73f authored over 7 years ago by Todd C. Miller <[email protected]>

Use getentropy() in mkstemp/mkdtemp replacement.

github.com/sudo-project/sudo - c000189684e597fa648139fc9e60757b62c139e3 authored over 7 years ago by Todd C. Miller <[email protected]>

Use _PATH_DEV consistently

github.com/sudo-project/sudo - 6d4d4594b7e8e545a0dfe5455450cd4a38f3a628 authored over 7 years ago by Todd C. Miller <[email protected]>

When copying terminal settings from one tty to another only copy a

subset of the flags. Sudo now copies the same set of flags that
OpenSSH uses, which should be safe.

github.com/sudo-project/sudo - c77c5d026a51bdddba0225095d6d6fc7605932e5 authored over 7 years ago by Todd C. Miller <[email protected]>

Add debug warning when we have wait status but don't overwrite the

existing cstat.

github.com/sudo-project/sudo - f5b60ef749ec185ba61ed293f178b701a2f551c6 authored over 7 years ago by Todd C. Miller <[email protected]>

Better handling of SIGCONT from in command in the monitor. It is

useful to know when the command continued but we don't want to
inform the parent or store the wai...

github.com/sudo-project/sudo - c8c586ee0bc6299869ac357792eb19bed8a56329 authored over 7 years ago by Todd C. Miller <[email protected]>

avoid padding in struct cmndspec

github.com/sudo-project/sudo - 022ac87d66739312a77f8e7de40fdf89eb5f868b authored over 7 years ago by Todd C. Miller <[email protected]>

Fix the man section of sudo_plugin in cross-references.

github.com/sudo-project/sudo - 60146c2959985dd01353f4e7085563829b274bd2 authored over 7 years ago by Todd C. Miller <[email protected]>

Don't treat an unchanged file as an error. From Xin Li.

github.com/sudo-project/sudo - ab59834a0053bd6d0a256a470c320ce1c6788ba4 authored over 7 years ago by Todd C. Miller <[email protected]>

sudo_edit() must return a wait status but if there is an error, or

even if no changes were made to the file, it was returning 1 instead
which would be interpreted a...

github.com/sudo-project/sudo - 0d70e868f17234e486ee71f6dd0ff8fd8f38eb5f authored over 7 years ago by Todd C. Miller <[email protected]>

Avoid sign extension when assigning the value of tty_nr in

/proc/self/stat on Linux. It is an unsigned int value that
is printed as a signed int but dev_t ...

github.com/sudo-project/sudo - 26d9043bf4dd4bd7447b4caeeb5918e6827ace0a authored over 7 years ago by Todd C. Miller <[email protected]>

Instead of hard-coding a check for bash functions in env_should_delete(),

use a "*=()* " pattern in initial_badenv_table[] to match them instead.
This allows the user to r...

github.com/sudo-project/sudo - e1e2162dcf921b0cd1756b88bcdefda5f9aea490 authored over 7 years ago by Todd C. Miller <[email protected]>

Mac OS X -> macOS

github.com/sudo-project/sudo - 0ab00964ec50547c9c3ba8e24af96fc8ae4cd262 authored over 7 years ago by Todd C. Miller <[email protected]>

devsearch is ignored on BSD, macOS and Solaris

github.com/sudo-project/sudo - 7526869d876bea9489804c414acaf27d7980a078 authored over 7 years ago by Todd C. Miller <[email protected]>

Move the bits to fill in the new event base to sudo_ev_base_init(),

which is not currently exported.

github.com/sudo-project/sudo - 88bf0337e93368ee149dd77818939119898be876 authored over 7 years ago by Todd C. Miller <[email protected]>

A command name may also contain newline characters so read

/proc/self/stat until EOF. It is not legal for /proc/self/stat to
contain embedded NUL bytes so ...

github.com/sudo-project/sudo - c13ebffbce208f02c27d8de90a1af95f0aae7fa9 authored over 7 years ago by Todd C. Miller <[email protected]>

Sudo 1.8.20p2

github.com/sudo-project/sudo - 13633ae5ac8309a8ba402685d8311eddce79ab98 authored over 7 years ago by Todd C. Miller <[email protected]>

Use /proc/self consistently on Linux. As far as I know, only AIX

doesn't support /proc/self.

github.com/sudo-project/sudo - 15901c94871903f01dcade897106a6920b9d8167 authored over 7 years ago by Todd C. Miller <[email protected]>

Add a new "devsearch" Path setting to sudo.conf for configuring the

/dev paths to traverse instead of hard-coding a list in ttyname.c
The default value can be set at...

github.com/sudo-project/sudo - cc71b99849c148986a144c02aa14d6c34f979536 authored over 7 years ago by Todd C. Miller <[email protected]>

After opening a tty device, fstat() and error out if it is not

a character device.

github.com/sudo-project/sudo - 777abca38276e56c369c88711fa9dd9721fe06e4 authored over 7 years ago by Todd C. Miller <[email protected]>