Sudo Project commits | Ecosyste.ms: OpenCollective

regen

github.com/sudo-project/sudo - b5f1d4e254c00a48caf9f28e81b4477773b88ddb authored about 8 years ago by Todd C. Miller <[email protected]>

Wrap wordexp(3) in sudo_noexec.

github.com/sudo-project/sudo - d0ccd947d0745ebf097dd38850ad880df88f4292 authored about 8 years ago by Todd C. Miller <[email protected]>

Clean .json files created by "make check"

github.com/sudo-project/sudo - 96580de20c96255f876738b39ba4cb38c5b4141a authored about 8 years ago by Todd C. Miller <[email protected]>

recompile .po files

github.com/sudo-project/sudo - 90e4538c001fbe1b791a11d6a2c37607472fafe5 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix matching when no sudoRunAsUser is present in a sudoRole.

If only a sudoRunAsGroup is present, match on the invoking user
if the -g option was specified an...

github.com/sudo-project/sudo - 0a68d6799eab3a4c3b73e5bfff4c87c320cfb83e authored about 8 years ago by Todd C. Miller <[email protected]>

runas_pw can no longer be NULL

github.com/sudo-project/sudo - 1bccd1418009c469338a8908654cdac9d6015221 authored about 8 years ago by Todd C. Miller <[email protected]>

RunAsGroup without RunAsUser issues

github.com/sudo-project/sudo - 25f90b4811ef731952d61ab6c4465c655e8fac90 authored about 8 years ago by Todd C. Miller <[email protected]>

user_matched and group_matched must be type int, not bool

github.com/sudo-project/sudo - 9a55c0c25d8f8f96967fa37f838eef43ffd531ee authored about 8 years ago by Todd C. Miller <[email protected]>

Use RUNAS_USER_SPECIFIED and RUNAS_GROUP_SPECIFIED when deciding

whether to check runas user/group instead of checking runas_pw or
runas_gr.

github.com/sudo-project/sudo - b165a5ff719d9363493d802a26d0a259da6e0602 authored about 8 years ago by Todd C. Miller <[email protected]>

When matching against runas_default use userpw_matches() instead

of just strcasecmp().

github.com/sudo-project/sudo - 0ff95dfaaa4e1626a837e066e21ce865e9b8b98c authored about 8 years ago by Todd C. Miller <[email protected]>

Set RUNAS_USER_SPECIFIED when -u is specified and/or RUNAS_GROUP_SPECIFIED

when -g is specified.

github.com/sudo-project/sudo - a750bebf105f0ea659e2066e6d77619f662882a6 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix printing of the default runas user when a RunAsGroup is specified

but no RunAsUser is present.

github.com/sudo-project/sudo - d64153967e5452905420fb502d72651c47e91079 authored about 8 years ago by Todd C. Miller <[email protected]>

Only match against runas_default if both sudoRunAsUser and

sudoRunAsGroup are missing.

github.com/sudo-project/sudo - fb32867e4c9ada399e48ed1d7c1efa65a35d3fbd authored about 8 years ago by Todd C. Miller <[email protected]>

runas_pw can no longer be NULL here

github.com/sudo-project/sudo - d2af18c1fadb9f0de5de489968e4f3d011e678c6 authored about 8 years ago by Todd C. Miller <[email protected]>

Update check for whether or not the runas user was set in the ldap

and sssd backends to match the sudoers file backend. Introduces
the runas_user_set() macro to im...

github.com/sudo-project/sudo - ef82f792a1883518ed46c559eb358790e537abc8 authored about 8 years ago by Todd C. Miller <[email protected]>

Document that negated sudoHosts are only supported by 1.8.18 and higher.

github.com/sudo-project/sudo - db7ce3c219ba651c074787b9cc280e17176f9475 authored about 8 years ago by Todd C. Miller <[email protected]>

Disable Address Sanitizer leak detection for tests which generate

parse errors. The parser leaks a bit on error.

github.com/sudo-project/sudo - 50d0191de3dd4724b6be2d000acb56e3478c0097 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix underflow in get_ipa_hostname() when trimming trailing

whitespace.

github.com/sudo-project/sudo - 37099a6e7ddbd394e31186c220f7e6bd2be9a787 authored about 8 years ago by Todd C. Miller <[email protected]>

Document negated sudoHost entries.

github.com/sudo-project/sudo - 394485f279d70d3c1832eec4efdf0fc557a426f6 authored about 8 years ago by Todd C. Miller <[email protected]>

Support negated sudoHost entries.

github.com/sudo-project/sudo - ff753d1e16586145caafac5d2dd3dcf10517700e authored about 8 years ago by Todd C. Miller <[email protected]>

Document negated sudoHost entries.

github.com/sudo-project/sudo - 7fd6edb6dfa34329c5eba7b906b6937cd744ff59 authored about 8 years ago by Todd C. Miller <[email protected]>

Support negated sudoHost entries.

github.com/sudo-project/sudo - f51fbfa40dec71ebd847322f61171ad37a056c2f authored about 8 years ago by Todd C. Miller <[email protected]>

Don't check the username when matching a host netgroup unless

def_netgroup_tuple is enabled.

github.com/sudo-project/sudo - ca2a1f31099bc18bb963e5211b43fbe1156f4c0f authored about 8 years ago by Todd C. Miller <[email protected]>

Move valid domain name check into a new valid_domain() function.

Fix memory leak if getdomainname(2) fails and avoid using heap
garbage for the domain name matchi...

github.com/sudo-project/sudo - c73dec723c2dfcac050240820840ab07c83ed992 authored about 8 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 7687dd6527f467f03d418e82bfabe29f0593a821 authored about 8 years ago by Todd C. Miller <[email protected]>

Add back line mistakenly removed in 0cf2a9351740

github.com/sudo-project/sudo - 533c9ce1089e28c22b3d0f456150d6fbef5d7ee9 authored about 8 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 86ce2f89fde01400872405b4ab9ba2674ac467c3 authored about 8 years ago by Todd C. Miller <[email protected]>

Bug #757

github.com/sudo-project/sudo - f7bd14f706e62d986f8d2831396d46a8fea65bfa authored about 8 years ago by Todd C. Miller <[email protected]>

Fix typo that broke short host name matching when the fqdn

flag is enabled. Bug #757

github.com/sudo-project/sudo - ead485b96b2f240a2c27064da79865b7a9339f32 authored about 8 years ago by Todd C. Miller <[email protected]>

Be consistent with the naming of the variable used to store the

function return value. Previously, some code used "rval", some
used "ret". This standardizes on...

github.com/sudo-project/sudo - 3f022419ae26fae464a3783eb91024f5f65bd4d3 authored about 8 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 33fb814e8547570e10fbfa375cad3620be0d5353 authored about 8 years ago by Todd C. Miller <[email protected]>

Norwegian Nynorsk translation of sudo from translationproject.org

github.com/sudo-project/sudo - 6eb1b8c7ea28f259eae2c567bb64f3b60606f4cb authored about 8 years ago by Todd C. Miller <[email protected]>

Fix for Bug #756

github.com/sudo-project/sudo - fc7e2a98fd0dda5241555cdfdf9bcd134f7c7fa7 authored about 8 years ago by Todd C. Miller <[email protected]>

In sudoers_main() avoid setting rval prematurely. Prevents a crash

when auditing fails after successfully authenticating. Bug #756

github.com/sudo-project/sudo - b80309e6d83e3027cd6c6b6c83cc28df294815a4 authored about 8 years ago by Todd C. Miller <[email protected]>

Apply match_group_by_gid early.

github.com/sudo-project/sudo - 43084d8f918f5fcb8908b2d710c9421f8a519efc authored about 8 years ago by Todd C. Miller <[email protected]>

update

github.com/sudo-project/sudo - 0181bf2c2358e6a3e81320eafcb3a9857d1b51fe authored about 8 years ago by Todd C. Miller <[email protected]>

Don't disable large file support for Linux, just SVR4-style /proc.

Otherwise, stat(2) may fail on Linux when running a 32-bit sudo
on a 64-bit machine. Bug #755

github.com/sudo-project/sudo - 40d0ecc7d61fa8a4d0828055e2ca9943676672c8 authored about 8 years ago by Todd C. Miller <[email protected]>

Make sudo_parseln() flags hex to make it more obvious that they are

bit flags.

github.com/sudo-project/sudo - 5b86d2d298277255aaa286885942db6eb7a449cf authored about 8 years ago by Todd C. Miller <[email protected]>

Don't try to support line continuation in /etc/environment.

github.com/sudo-project/sudo - 881814c9f9c6980c18bbfcdf1cb80c183326ffc5 authored about 8 years ago by Todd C. Miller <[email protected]>

No line continuation support in ldap.conf.

github.com/sudo-project/sudo - c0db5c1234a70ef65f4cc4176ef9733729e2df4c authored about 8 years ago by Todd C. Miller <[email protected]>

Add flag to sudo_parseln() to disable line continuation support.

github.com/sudo-project/sudo - 2a4ba64c84bd3075ffaf8d394635238aaae3e0c1 authored about 8 years ago by Todd C. Miller <[email protected]>

A comment character ('#') is only special at the beginning of the

line.

github.com/sudo-project/sudo - 852fe25bc118e585e6df5407c1114a0b9a3558a2 authored about 8 years ago by Todd C. Miller <[email protected]>

Add a flags option to sudo_parseln() and a flag to only mach comments

at the beginning of the line. Use the flag when parsing ldap.conf.

github.com/sudo-project/sudo - 17ad75d50b84022c790ee2dce16f4a15ea4222d4 authored about 8 years ago by Todd C. Miller <[email protected]>

If get_process_ttyname() fails for errno != ENOENT, just warn

instead of making it a fatal error. Bug #755

github.com/sudo-project/sudo - 04340eea60a6287718432f4fd79b68c833f07cbe authored about 8 years ago by Todd C. Miller <[email protected]>

use strict

github.com/sudo-project/sudo - c9572db75add9d6673daf11a2270f29670e0eb1a authored about 8 years ago by Todd C. Miller <[email protected]>

Define def_foo in terms of the I_FOO index instead of a bare number.

github.com/sudo-project/sudo - 7a54b49fc4ef9859ccc843fafcad8f7b6fcabad4 authored about 8 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 8ee6f0d1de5b351ba3ec96f4f40c18a6b03e075a authored about 8 years ago by Todd C. Miller <[email protected]>

Mention that match_group_by_gid has no effect when sudoers is stored

in LDAP.

github.com/sudo-project/sudo - dba28a945cbad42693568b94f55d7f5e2e384d6a authored about 8 years ago by Todd C. Miller <[email protected]>

Use W_EXITCODE to construct the wait status if sudo could not execute

the command. Fixes the sudo exit value for exec(3) failure.

github.com/sudo-project/sudo - e147ba1fecd96e74b9357fe59e954575b3359235 authored about 8 years ago by Todd C. Miller <[email protected]>

fix brace style

github.com/sudo-project/sudo - a9570e64ff58cae653c57aeb19b208aafd4dbe28 authored about 8 years ago by Todd C. Miller <[email protected]>

regen

github.com/sudo-project/sudo - b610137efaad7d28626448524509db55a7f9b423 authored about 8 years ago by Todd C. Miller <[email protected]>

It is possible for get_user_info() to fail for reasons other than

ENOMEM so print the warning message there rather than in main().

github.com/sudo-project/sudo - ef4e808103a3c550b2d7bb74b0cc9a27bc56662e authored about 8 years ago by Todd C. Miller <[email protected]>

match_group_by_gid is only available in sudo 1.8.18 and above

github.com/sudo-project/sudo - edcb137f607bf26fb5e2a37820b85102335c2288 authored about 8 years ago by Todd C. Miller <[email protected]>

Mention match_group_by_gid

github.com/sudo-project/sudo - 7aeb11a92053cfe0aced4bce6201e71cb434a0a7 authored about 8 years ago by Todd C. Miller <[email protected]>

Document match_group_by_gid

github.com/sudo-project/sudo - c57979bfb6cd468d7b2de9eedbfa151005db19e7 authored about 8 years ago by Todd C. Miller <[email protected]>

Add match_group_by_gid Defaults option to allow sites with slow

group lookups and a small number of groups in sudoers to match
groups by group ID instead of by g...

github.com/sudo-project/sudo - 9cfd556853bbac5a6ccd2239aecf998b0dcedab9 authored about 8 years ago by Todd C. Miller <[email protected]>

Mention "sudo -l command" bug fix.

github.com/sudo-project/sudo - 12ab1383a42cee291bf050c76a6962d6ac3b0ae7 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix "sudo -l command" in the LDAP and SSS backends when the command

is not allowed.

github.com/sudo-project/sudo - 5b51b7f11a91172d5eb9b24a111347f8825f2b3e authored about 8 years ago by Todd C. Miller <[email protected]>

Use sudo_strsplit() instead of doing the equivalent manually.

github.com/sudo-project/sudo - 7918f7e7eb9b63930a701dbca17a7ac361c72038 authored about 8 years ago by Todd C. Miller <[email protected]>

Move SIGPIPE bug fix to 1.8.18 where it belongs

github.com/sudo-project/sudo - c50b835255a50ec951287cd4944da1c69148fb18 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix memset size typo in previous commit.

github.com/sudo-project/sudo - a246c9570adcdeca3f3b367c9719d598531654c4 authored about 8 years ago by Todd C. Miller <[email protected]>

Add regress for check_defaults() use-after-free bug.

github.com/sudo-project/sudo - c5cfc9584c25e5a7c6037899f03b9d0d7f375a22 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix use-after-free in check_defaults(), reported by Radovan Sroka

of RedHat.

github.com/sudo-project/sudo - 99b969979368adc28ba7bb5c35b922f40d19552d authored about 8 years ago by Todd C. Miller <[email protected]>

SIGPIPE bug fix

github.com/sudo-project/sudo - 403b904abe0ed26c321035fd0bd79d846e710a7f authored about 8 years ago by Todd C. Miller <[email protected]>

Now that we ignore SIGPIPE in sudo we need to restore it at exec

time. Problem reported by Radovan Sroka of RedHat.

github.com/sudo-project/sudo - 7625f0684172a960d4a3e6697f0ff561ac6fe902 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix appending to make_opts

github.com/sudo-project/sudo - d54148bbdd515ae664f75aab0ee1ce13fd70ba6d authored about 8 years ago by Todd C. Miller <[email protected]>

Add Bug #753 and fix reference to Bug #752.

github.com/sudo-project/sudo - 5a432b9612625e170ca2d371feef2518e4b82565 authored about 8 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

github.com/sudo-project/sudo - 8d89d8395f2e7b6558ab86e34a0fa42c9414a171 authored about 8 years ago by Todd C. Miller <[email protected]>

regen pot files

github.com/sudo-project/sudo - ba91ebb14befa5aad77c8c0e08eeee4977e6fb8c authored about 8 years ago by Todd C. Miller <[email protected]>

Update with logging changes.

github.com/sudo-project/sudo - 8f9869df7ebe07d0bcc8a560c484c7ef80120588 authored about 8 years ago by Todd C. Miller <[email protected]>

Avoid duplicate warnings when we cannot write to the log file.

Also send the warning in mail if possible.

github.com/sudo-project/sudo - d8a65715d6cb5ccc5417888141464d9eb305620f authored about 8 years ago by Todd C. Miller <[email protected]>

Move the ignoring of I/O log plugin errors into the I/O log plugin

itself.

github.com/sudo-project/sudo - 3e4c7eed3178bbf6c8c326ba3ecfd762ff2019cd authored about 8 years ago by Todd C. Miller <[email protected]>

Make the behavior when we cannot write to a log or audit file

configurable. File log failures are ignored by default for consistency
with syslog. Audit error...

github.com/sudo-project/sudo - ed18d0d5f8d9695a137236bb6b6786e2f19ef5df authored about 8 years ago by Todd C. Miller <[email protected]>

Make sure we print an error message to stderr (and not just send

mail) if do_logfile() fails. Bug #751

github.com/sudo-project/sudo - 9ccd260842d246261fa5c29b7a6f56d2811a75d9 authored about 8 years ago by Todd C. Miller <[email protected]>

Separate out the supplemental group ID checks from the supplemental

group name checks in user_in_group(). We now call sudo_get_gidlist()
only when the group name in...

github.com/sudo-project/sudo - 043b3d223b138c30fcfeba5836f6f3ab7d12d0ed authored about 8 years ago by Todd C. Miller <[email protected]>

Cache the user's group IDs and group names separately and only

resolve group IDs -> names when needed. If the sudoers file doesn't
contain groups we will no lo...

github.com/sudo-project/sudo - 985ab1dd3ea911d5314c0b76031e3054d107b609 authored about 8 years ago by Todd C. Miller <[email protected]>

Remove the "op" parameter from all the store_foo() functions except

store_list() where it is actually needed. For the others, a NULL
value indicates the setting was...

github.com/sudo-project/sudo - c3b8e97a6e6536854acf1e7231910606680458d3 authored about 8 years ago by Todd C. Miller <[email protected]>

Flags always have a NULL value. Regression introduced by refactor

of set_default_entry().

github.com/sudo-project/sudo - 8c2b6fb34e1aecdb56d5fc97f2300a197c5e5ecb authored about 8 years ago by Todd C. Miller <[email protected]>

Set rc to true when setting a flag Defaults value.

github.com/sudo-project/sudo - 1ca261c30599375829fdf89c51ae984210755074 authored about 8 years ago by Todd C. Miller <[email protected]>

suppress a cppcheck false positive

github.com/sudo-project/sudo - 25f39ff31d2e3e86fe66df520142dd48c40e64f8 authored about 8 years ago by Todd C. Miller <[email protected]>

Refactor the error parts of set_default_entry() so the switch() is

mostly just calls to store_foo() functions. Avoids a lot of
duplicated error checking and silenc...

github.com/sudo-project/sudo - caf064e17bbdfa0d3a0149b61c4f427ebb4fee8c authored about 8 years ago by Todd C. Miller <[email protected]>

In set_default_entry() check for unsupported Defaults type.

github.com/sudo-project/sudo - 9051c92cb381b93d92bc74d349690f6f3d1f0773 authored about 8 years ago by Todd C. Miller <[email protected]>

Add missing break in switch that sets the max limit for RLIMIT_NOFILE.

Found by cppcheck.

github.com/sudo-project/sudo - f17f9ba9b2827a520db270ef5d7f9f5ec4b1bdb0 authored about 8 years ago by Todd C. Miller <[email protected]>

Check sudoers_initlocale return value and treat as oom.

Coverity CID 141832

github.com/sudo-project/sudo - 7ac77b094cc95735bec10de078b5b304b5d075fa authored about 8 years ago by Todd C. Miller <[email protected]>

Set runas_pw early and adjust runaslist_matches() to deal. Since

we now set runas_default early there is no need to call update_defaults
with SETDEF_RUNAS after s...

github.com/sudo-project/sudo - a08ea1b14d34d7e363bfa38528049c034b4c0620 authored about 8 years ago by Todd C. Miller <[email protected]>

Load sudoers group plugin via an early callback.

github.com/sudo-project/sudo - 56ead73886cb59d3a3f2b4d720a40040d91b6696 authored about 8 years ago by Todd C. Miller <[email protected]>

System Integrity Protection on Mac OS X won't allow us to write

directly to /etc or /var. We must install in /private/{etc,var}
instead.

github.com/sudo-project/sudo - a9973c2e684d0727e5306c7153b3402ee2964c53 authored about 8 years ago by Todd C. Miller <[email protected]>

Document that fqdn, runas_default and sudoers_locale are parsed early.

github.com/sudo-project/sudo - d17bc132de01fd56574f4e9cc36a7de412659361 authored about 8 years ago by Todd C. Miller <[email protected]>

Regen for 1.8.18

github.com/sudo-project/sudo - ac20b8ddff8d62becc47dc3d7c94cb8f8e300f92 authored about 8 years ago by Todd C. Miller <[email protected]>

Avoid passing around struct defaults when it is not needed. As a

result, we no longer need to include gram.h in the LDAP and SSSD
backends.

github.com/sudo-project/sudo - 9d94ee11c0b2bd27f89aa56619323ff78e288bbd authored about 8 years ago by Todd C. Miller <[email protected]>

Instead of deferring setting early defaults until we have traversed

the entire defaults list, just defer running the callbacks. Otherwise,
if the last early default...

github.com/sudo-project/sudo - 0bf2d9b16256e5140350d6be7bb203513f5c8549 authored about 8 years ago by Todd C. Miller <[email protected]>

Run callbacks once in set_default_entry() instead of each of the

store_foo() functions.

github.com/sudo-project/sudo - e5a7891ec88887e7b88a69e0d8128b75fba76429 authored about 8 years ago by Todd C. Miller <[email protected]>

Use /proc/cpuinfo on Linux instead of running lscpu

github.com/sudo-project/sudo - 14c9d203e892e74745505acd7a1d2323fd42cfde authored about 8 years ago by Todd C. Miller <[email protected]>

If using GNU make on a multi-cpu system, use the -j flag to run

make jobs in parallel, up to the number of cpus/cores.

github.com/sudo-project/sudo - 820934082fb057228ba2a0543087ab54de53ce3c authored about 8 years ago by Todd C. Miller <[email protected]>

Only check SUDO_USER if euid is 0

github.com/sudo-project/sudo - 54efa54c0e732c3af964b7bc809cb309a2d53d7d authored about 8 years ago by Todd C. Miller <[email protected]>

Initialize sudo_user based on the SUDO_USER environment variable

if present. This allows things like :Defaults:username editor=foo"
to work when visudo is run vi...

github.com/sudo-project/sudo - f85e95329faa411f0c564856928a1607ed7b95ca authored about 8 years ago by Todd C. Miller <[email protected]>

Add function name in "command resumed" debug message

github.com/sudo-project/sudo - 4352bb9ca949cebc79110f0eee610c006f83e2fe authored about 8 years ago by Todd C. Miller <[email protected]>

If waitpid() returns 0 or -1, display a warning, this should never happen.

Add a check for unhandled wait status (also should never happen).

github.com/sudo-project/sudo - 383debee9f52c4b96b727a9c0ae7237390a66eec authored about 8 years ago by Todd C. Miller <[email protected]>

Flag settings have a NULL value so we can't use that to test whether

an entry in struct early_default is set or not. Add a "set" member
and use that instead.

github.com/sudo-project/sudo - 2b150925dce8c32646ed9ffac11a100a0161e75b authored about 8 years ago by Todd C. Miller <[email protected]>

Explicitly check for a continued process with waitpid(2). Otherwise,

waitpid() will return 0 when the command is resumed after being
suspended, which we were treating...

github.com/sudo-project/sudo - 4f47a2ad7d84147e8e1e4d1cd0b1bfe6aa9ad231 authored about 8 years ago by Todd C. Miller <[email protected]>