Sudo Project commits | Ecosyste.ms: OpenCollective

fix typo

github.com/sudo-project/sudo - 70d3e0e9879bb1ac8fd9b08866fe520b3cbf5939 authored about 8 years ago

Fix the "all" setting for verifypw and listpw; nopass would never

be true even if all the user's entries had the NOPASSWD tag.
Regression introduce in sudo 1.8.17....

github.com/sudo-project/sudo - aaf6fff736ea90491259e6a166328d845d4aa96a authored about 8 years ago

sync with translationproject.org

github.com/sudo-project/sudo - 7bcd0285e16512deeeee08769533459fcbe6ba39 authored about 8 years ago

Just use malloc_options "S" on OpenBSD instead of "AFGJPR".

github.com/sudo-project/sudo - 1aea3f6e3e8689f0850beebcc28962d752ae8210 authored about 8 years ago

Update year in license

github.com/sudo-project/sudo - 4d06a612f75f7aeaea1a9539a764e121bb400067 authored about 8 years ago

regen

github.com/sudo-project/sudo - 0382a2d47fc91dacf15f7a65d8247849efca64ff authored about 8 years ago

regen

github.com/sudo-project/sudo - 94b844ebb584ca9c96ff64438751129e73924c8f authored about 8 years ago

Add SUDO_DEBUG_INSTANCE_ERROR return value for sudo_debug_register()

and check for it in places where we check the return value of
sudo_debug_register().

github.com/sudo-project/sudo - 6c5936296f783462f6f2666603124feecd15ffd5 authored about 8 years ago

update for 1.8.19

github.com/sudo-project/sudo - de0c5c48aab5253e02946ea0e5f62d8e762f1a84 authored about 8 years ago

Add support for getpwnam_shadow() on OpenBSD

github.com/sudo-project/sudo - 695784e6ee7f48469ae8d6fb6fb7727df04833de authored about 8 years ago

Add umask to user_info passed in from the front end to the plugin.

github.com/sudo-project/sudo - f70f595b5b603706d7506f60951bab1b2bd3b9bb authored about 8 years ago

Fix sign compare warning.

github.com/sudo-project/sudo - 0cde3f5de4d128c6a701ec6586bd55e2d3719b63 authored about 8 years ago

Use AX_APPEND_FLAG instead of SUDO_APPEND_CPPFLAGS and direct

modification of LDFLAGS.

github.com/sudo-project/sudo - cb7e82accad273eb15d70e5b51b4b08a4c059bd7 authored about 8 years ago

Remove aixcrypt.exp, it was a remnant of the 90's crypto wars where

crypt() was not exported.

github.com/sudo-project/sudo - a77ecca7d3ef593c0bb261d7ab6f9b08ee4750e8 authored about 8 years ago

Remove obsolete solaris issue with snprintf

github.com/sudo-project/sudo - 80217f0bbc460ca4739b261a9bac721cd92536b2 authored about 8 years ago

SunOS 4.x is no longer supported

github.com/sudo-project/sudo - c3373f03bee9e89106e352c4630e3204d36af740 authored about 8 years ago

Plug memory leak when a particular Path is set more than once.

github.com/sudo-project/sudo - e797fc643f9f3ab00db7b4e7b7c445cfd7e75769 authored about 8 years ago

Add sudo_ldap_is_negated() and sudo_ldap_is_negated() functions

and use them to parse negated entries instead of doing it manually.

github.com/sudo-project/sudo - d6c30ba2734a991d930bcb3d93a528fd66ed0e22 authored about 8 years ago

Fix printing of sudoedit_follow in "sudo -l"

github.com/sudo-project/sudo - da7373372407270530020a100b0e05c85833df7d authored about 8 years ago

For "sudo -l" print sudoOption sudoedit_follow as FOLLOW.

github.com/sudo-project/sudo - c7d6521b49ebe4467b1882e8c30cf05835d15a45 authored about 8 years ago

Always define _PATH_SUDO_NOEXEC, _PATH_SUDO_SESH, _PATH_SUDO_PLUGIN_DIR,

even if only defined to NULL. This means the accessors can always be
present.

Use RTLD_PRELOAD_...

github.com/sudo-project/sudo - 6dff4ac7fdb8557de046539c0323801f176076bc authored about 8 years ago

Use readline() in sudo_ldap_read_secret()

github.com/sudo-project/sudo - 8820ff3efbc42efebf97670767b077ef5ee9fa57 authored about 8 years ago

Get rid of struct sudo_conf_paths and just use #defined index values

to access the path values.
Make all accessors available even when the feature is not enabled.

github.com/sudo-project/sudo - 8cb9f298bdfbdfece1be4ac7003453f92187b0c7 authored about 8 years ago

Add ASAN_CFLAGS and ASAN_LDFLAGS and use -Wc prefix in ASAN_LDFLAGS

to prevent libtool from strippign them out.
Avoid using ASAN flags when building sudo_noexec.so.

github.com/sudo-project/sudo - bdbb3e985596ad4af3e53a9fab650d4ac0ef1770 authored about 8 years ago

Disable noexec for HP-UX 10.x which probably doesn't support LD_PRELOAD

github.com/sudo-project/sudo - 589e129c87722761f4426ba3e5b97e8646077fbf authored about 8 years ago

Remove SunOS 4 support, it is not modern enough to run sudo.

github.com/sudo-project/sudo - 08a4a285927d3d0af1c39133ab8de5b6be2e8e52 authored about 8 years ago

Remove HP-UX 9 support, it is not modern enough for sudo.

github.com/sudo-project/sudo - b56bce3127b4021d237f46adf253becbf6c0ca7e authored about 8 years ago

Remove Ultrix support, modern sudo can't run on Ultrix anyway.

github.com/sudo-project/sudo - 9d11b725c5fdb6efb693111862af1dc8b61b9b2b authored about 8 years ago

Add regress for noexec functionality

github.com/sudo-project/sudo - 66af45eb24b3efff82d6d9ed465eaa3f7d742e6a authored about 8 years ago

Unbreak sudo_noexec on macOS where shared libraries and dynamic

modules are different. We still want to install sudo_noexec.so
without the "lib" prefix so some ...

github.com/sudo-project/sudo - 068f96a213a246458529239c4484415d0d805525 authored about 8 years ago

Don't enable noexec for AIX 5.0-5.2, we need 5.3 and above.

github.com/sudo-project/sudo - 60bf1394517e4d06a37c8b76ee4a65dcef07285b authored about 8 years ago

Need to link sudo_noexec.so with -ldl for dlsym() on some platforms.

Otherwise, the wordexp(3) wrapper will fail due to an undefined
symbol. Bug #761

github.com/sudo-project/sudo - 07cc9d81538f24de19781b0320d3ce4fc567de00 authored about 8 years ago

In strict mode, go to the file/line with an undefined aliases

or aliases cycle directly.

github.com/sudo-project/sudo - deb62597651667d18616fc5516d05ca78a5bdbca authored about 8 years ago

Store the file/lineno for alias and userspec entries so we can

provide that info if there is an error.

github.com/sudo-project/sudo - 7524c231cc548eb56f7ec04fafcb39e4e77740f8 authored about 8 years ago

Add simple reference-counted string allocator and use it for passing

around references to the sudoers path. This lets us avoid making
copies of the sudoers path for ...

github.com/sudo-project/sudo - 90995c0acf95e33381cd91fea5d2bac46f60d22c authored about 8 years ago

Cast len from size_t to uint64_t before bit shifting since we are

adding to count which is also uint64_t. Quiets a PVS-Studio warning.

github.com/sudo-project/sudo - b5e3a7aef2b38d09069a7ac0f7887f295d28a2a8 authored about 8 years ago

Add checks for sudoers_locale early Defaults

github.com/sudo-project/sudo - 52e136863f1c7ee51211f9827a4b216ec9ce6939 authored about 8 years ago

Add the argument vector allocated for -s and -i mode to the garbage

collector list. Avoids an ASAN warning on exit when the -s or -i
flags are used.

github.com/sudo-project/sudo - efe957544fecc63094575775433f902d230ca2dd authored about 8 years ago

add missing sudo_pw_delref/sudo_gr_delref to plug memory leak

github.com/sudo-project/sudo - cefcb6f501ef794d39d8abd3d17ddff837dadffe authored about 8 years ago

Go back to parsing Defaults entries in update_defaults instead of

as sudoers is read. Otherwise, we cannot properly support early
defaults like sudoers_locale.

github.com/sudo-project/sudo - 79ca752802f4f543a2a08339dafaa53fcd8e7741 authored about 8 years ago

Use expr instead of POSIX sh numerical expression to avoid

a syntax error on older shells.

github.com/sudo-project/sudo - dbf07431d0aedd4e6cf11eabf4c7098180e6dcdb authored about 8 years ago

Bump plugin minor version to 10 for sudo_mode, sudo_group and sudo_user.

github.com/sudo-project/sudo - 541ffbeec84050576230d1a32d4c3bac37d06036 authored about 8 years ago

Fix a bug in host matching where a negated sudoHost entry would

prevent other sudoHosts following it from matching.

github.com/sudo-project/sudo - 17868f89d7a10ff05ed7f8a56a291d958f7ec485 authored about 8 years ago

Zero out sd_un before calling parse_default() so we don't try

to free stack garbage in the ldap/sssd backends.

github.com/sudo-project/sudo - 1d9b8ca32e1e9b2906500a671cc91768a79e7434 authored about 8 years ago

Use "ret", not "rc" for the function return value.

github.com/sudo-project/sudo - 738c3cbf3e8400bf4a5aeab8966427ff6d630cd2 authored about 8 years ago

Use sys/stat.h defines instead of bare octal values.

github.com/sudo-project/sudo - 8133cdfdf689edca5381fc3354eb7982058fd02b authored about 8 years ago

Pass iolog mode, group and user from policy plugin to I/O log plugin.

github.com/sudo-project/sudo - 2b020c9f17b64af9538068211dd9294ec9098aa2 authored about 8 years ago

Instead of parsing sudoers Defaults twice, parse once while reading

sudoers and then just set the parsed value in update_defaults().

github.com/sudo-project/sudo - df8404dbd4a90be583711917006f4363c0bc6650 authored over 8 years ago

Use "struct defaults *d" instead of "struct defaults *def" throughout

for consistency and to avoid confusino with "struct def_values *def".
Use "str" not "var" for the...

github.com/sudo-project/sudo - 1f24108969ee9534c02b01098a77ac0b6d9a45b3 authored over 8 years ago

In display_bound_defaults() rename dtype arg -> deftype.

github.com/sudo-project/sudo - 4ca0838ba9d666a6d286adddc15f6d447a7fce44 authored over 8 years ago

Update error output to match quoting changes.

github.com/sudo-project/sudo - f3c7e0f83b91bf0f95fa51bdff0e2f6faf480577 authored over 8 years ago

Avoid passing in a struct sudo_defs_types pointer to the store

functions. Pass in a pointer to the union to fill instead.

github.com/sudo-project/sudo - 4f532dcc50ad64ab99423176b4c4fa8415bb9ec5 authored over 8 years ago

no longer need struct defaults forward referebce

github.com/sudo-project/sudo - 3c28810febbf8b13a6578fda1d020c444c537fbd authored over 8 years ago

Use "double quotes" in messages instead of a combination of the

accent (grave) mark and apostrophe.

github.com/sudo-project/sudo - 7c56179c7df8f6f2dec7ac3d4bbbd9b9968bb5bd authored over 8 years ago

Add file:linenumber prefix to all Defaults warnings so we can see

them when running sudo too. For LDAP/SSSD we print the sudoRole
instead of the file name and omi...

github.com/sudo-project/sudo - 75e29f163e3f2ffb92e3da76eee3ac65bd6a1427 authored over 8 years ago

Use sudoedit in examples instead of "sudo vi"

github.com/sudo-project/sudo - a9715211a8fc7db64a39e2fbc1d352477dc176b0 authored over 8 years ago

Only treat an unknown Defaults entry as a parse error in visudo,

not in sudo itself.

github.com/sudo-project/sudo - f6ce83ea768ccc2564196bb7d6e92d7665d475db authored over 8 years ago

Instead of checking Defaults values after the fact, check them at

sudoers parse time. This makes it possible to display the file and
line number with the problem ...

github.com/sudo-project/sudo - 8a48085184412932d2f8ead12b0e1ec1e0fd8027 authored over 8 years ago

Refactor freeing of a member_list into free_members().

github.com/sudo-project/sudo - 0aa216ed5519d9fefb2121d33e62af8f2abf840e authored over 8 years ago

add_defaults() now calls sudoerserror() itself instead of the caller

assuming any error means out of member.

github.com/sudo-project/sudo - 9de491dc277e0848b744292e2f8af14b5b76a0b8 authored over 8 years ago

s/rval/ret/g -- old habits die hard

github.com/sudo-project/sudo - 484b5718d89c76a4e87ea1215ffb41e23479fd62 authored over 8 years ago

Remove inaccurate XXX comment, sudo_file_parse() sends mail on parse error.

github.com/sudo-project/sudo - 2dbe50d1e1a4d9f91f093818a5e91746e82749b2 authored over 8 years ago

The fix for Bug #408 broke editing of files in an include dir that

have a syntax error. Normally, visudo does not edit those files,
but if a syntax error is detect...

github.com/sudo-project/sudo - b5f444111e9a82000f783ee2b4f79bba72acbb6d authored over 8 years ago

Make a copy of the current sudoers path when assigning errorfile.

Fixes a potential use after free in visudo when there is an error
in one of the include files.

github.com/sudo-project/sudo - 5a8b60e4b4666f98cc27909dc3027757a00c7ba6 authored over 8 years ago

sudoers_debug_register() was not setting the active debug instance

to sudoers_debug_instance when called from the I/O log plugin. This
is because it relied on sudo...

github.com/sudo-project/sudo - a3a545e4168f7d4dbbe458535e7656993a9e1d8e authored over 8 years ago

Fix pasto when setting I/O plugin debug files

github.com/sudo-project/sudo - e8af335eb8bb0a5ab0b334cc52b6c58129f9bf50 authored over 8 years ago

use cp instead of *cur when comparing against plugin_path

github.com/sudo-project/sudo - 1fdcce7faf99e0ed880e5133dc32e80e371e1367 authored over 8 years ago

In sudo_mkdir_parents() inherit the gid of / instead of using gid

0 for the first component.

github.com/sudo-project/sudo - 9f903d3bdd61c22bae85954b30127f11352246d4 authored over 8 years ago

We want to inherit the gid from the parent directory when not setting

permissions on intermerdiate directories.

github.com/sudo-project/sudo - cf707cf5f037a1931fa27deb4a7f914198b04d3a authored over 8 years ago

Move io_mkdir_parents() to its own file and use it in ts_mkdirs().

github.com/sudo-project/sudo - bf62530acfca1c98f0b7ba0d2b2ec1d71d5b1457 authored over 8 years ago

Make the I/O log file/dir permissions and owner configurable.

github.com/sudo-project/sudo - 271a07ff009e5cda0efa2e1a8406b0c3b3390d84 authored over 8 years ago

Add vsyslog.lo

github.com/sudo-project/sudo - b058ac52999e7049b2240636258784e4f359a901 authored over 8 years ago

sudo 1.8.19

github.com/sudo-project/sudo - 43bf2fdb903547bdae23a466c8e550132f54efad authored over 8 years ago

Don't try to syntax check an unrecognized Defaults value in visudo.

github.com/sudo-project/sudo - 3423d0af7ca1e8cfd8ccc57c2a0cea333dc45192 authored over 8 years ago

Create I/O log files with the same gid as the parent directory.

github.com/sudo-project/sudo - 7122a733acd7677dc297b3544380306a1c89c1f7 authored over 8 years ago

Check for sudo_ldap_result_last_search() returning NULL. This can't

happen in practice because we always call sudo_ldap_result_add_search()
first which guarantees th...

github.com/sudo-project/sudo - a40110756483b66ec69cd0e204d54afb62a65777 authored over 8 years ago

Quiet a PVS-Studio warning about the spin loop when waiting for the

parent to assign us the terminal pgrp.

github.com/sudo-project/sudo - 5a7936209ef2bfcd2d6006b1a370c597e8cddc02 authored over 8 years ago

Fix incorrect strncmp() lengths. The check for USERNAME was only

looking at the first 5 characters (copy and paste error). The check
for SUDO_PS1 was not checkin...

github.com/sudo-project/sudo - dbd52527983857281423ae5c1123c67ca433b999 authored over 8 years ago

When checking for old-style bash functions in the environment, check

for values starting with "() " (note the trailing space) rather
than "()". Bash will only treat ...

github.com/sudo-project/sudo - 4c8988d4833f79c5179c3fb22d5e3051bb84e526 authored over 8 years ago

Add some missing casts from uid_t/gid_t to int when printing uid/gid

values. We print these as signed so a value of -1 (no change) is
obvious. Quiets PVS-Studio war...

github.com/sudo-project/sudo - 63adb21cea778644e39d4e176f43c9b9ef32850f authored over 8 years ago

def_timestamp_timeout is a double so compare against 0.0 not 0 to

avoid making it appear to be an integer type.

github.com/sudo-project/sudo - cf5a12c09ae28a4461af2939e787e6120ecd938a authored over 8 years ago

When checking syslog facility or priority, move the string

compare into the body of the loop and return if it matches.
If we finish the loop it means we did...

github.com/sudo-project/sudo - e3825cbedd351d23b4b2228143d1de2cc4370543 authored over 8 years ago

Replace bare ";" in the body of for() loops with "continue;" for

improved readability.

github.com/sudo-project/sudo - fc1b4155d763ff07087b0dff0921c0d29aaec58f authored over 8 years ago

Update from http://git.savannah.gnu.org/gitweb/?p=config.git

github.com/sudo-project/sudo - f9d67777551a9c841386f7680f60e08c426696ce authored over 8 years ago

Update to libtool 2.4.6

github.com/sudo-project/sudo - 17d8734581101f13a9fb702fb004d9bb59f2190f authored over 8 years ago

Use a static buffer if possible.

github.com/sudo-project/sudo - d078450fb57307506763d4a467df0187c5ccb8bc authored over 8 years ago

add vsyslog() for systems without it.

github.com/sudo-project/sudo - 19c96da44d7a335e4baa19b0b70eeae8f2efdc99 authored over 8 years ago

There are now 14 tag values, not 10. Don't bother mentioning the

number since it keeps increasing. Bug #759

github.com/sudo-project/sudo - 6fa59b7416460811fd055bc0d6b513164e931c7c authored over 8 years ago

Use vsyslog() if available.

github.com/sudo-project/sudo - c18ff022e0b9ec8e72d7887769425cbc32c3ec18 authored over 8 years ago

Add syslog_maxlen to control the max size of syslog messages.

github.com/sudo-project/sudo - 44c2679f8347c9bdeb69765f333cd899b5bbd4b9 authored over 8 years ago

Don't generate SIGTOU when restoring the terminal modes. It doen't

make sense to suspend the process only to restore the terminal
settings since in this case the sh...

github.com/sudo-project/sudo - f632e0a63dd6880fc5646e0058dc0295f032591d authored over 8 years ago

The flush parameter of sudo_term_restore() is bool, not int.

github.com/sudo-project/sudo - 9b886f6b2c7750e5747fc0f4ed8e6272fb16514e authored over 8 years ago

Add wordexp() to the list of functions wrapped by sudo_noexec.so.

github.com/sudo-project/sudo - afcdc285348abcf2765dc09da6fc378db4db00c2 authored over 8 years ago

Need RTLD_NEXT for wordexp() on dlopen() systems. It is missing on AIX 5.1 at least.

github.com/sudo-project/sudo - ddbbcb9441cf081b14c8331520114d91cdfb6b9d authored over 8 years ago

add missing guard around wordexp()

github.com/sudo-project/sudo - 9dbd45ff66370556a8b198a6b86b9b33ee03751c authored over 8 years ago

expand on 1.8.18p1 changes

github.com/sudo-project/sudo - bea34c9e6d233c86c2684137fe2390828ac77e94 authored over 8 years ago

sudo 1.8.18p1

github.com/sudo-project/sudo - 45b396598b86416cb8b54db8d49a3849a227b081 authored over 8 years ago

Fix configure check for seccomp filter on Linux

github.com/sudo-project/sudo - 8e49ce07f677b5dfd5308a70746e1b182fa4510e authored over 8 years ago

Use a seccomp filter on Linux to disable execve(2) and execveat(2).

This still relies on LD_PRELOAD to work so it has the same issues
as the existing mether with res...

github.com/sudo-project/sudo - 237e2f964d7a3b1d1337bfaac70a2a1910e37a41 authored over 8 years ago

regen

github.com/sudo-project/sudo - d24b9246a94bf52fbfa7e1916d5271e5ade554d0 authored over 8 years ago