Ecosyste.ms: OpenCollective
An open API service for software projects hosted on Open Collective.
Sudo Project
Provide privileged access management for the masses.
Collective -
Host: opensource -
https://opencollective.com/sudo-project
- Website: https://www.sudo.ws
- Code: https://github.com/sudo-project
Both the plugin API and the main event loop expect lines/cols to
refer to the user's terminal, so...
For sudoreplay we open /dev/tty, so use that instead of stderr when
determining the terminal size.
github.com/sudo-project/sudo - 5650b436e6ba20807758a4154e709c10c1c87be8 authored over 1 year ago by Todd C. Miller <[email protected]>
Starting with macOS 13, the linker warns when "-undefined dynamic_lookup"
is used. This is adde...
github.com/sudo-project/sudo - 62a2d9f94c3455e5bd53d6844e1137d8de20e144 authored over 1 year ago by Todd C. Miller <[email protected]>
GitHub issue #258
github.com/sudo-project/sudo - 894daa88f66a69d3c6fe4d2255183d4c0b33a464 authored over 1 year ago by Todd C. Miller <[email protected]>
This splits the code to find the command, perform a sudoers lookup,
ask for a password as needed...
It is possible, though unlikely, for "root_sudo" to be used in
a per-command Defaults statement.
Previously, if sudoers_lookup() set VALIDATE_ERROR, the sudoers
locale would still be in effect ...
This was always set to FLAG_NO_USER|FLAG_NO_HOST which are cleared
at the top of the fuction. M...
The audit plugin already has the correct value for iolog_file, don't
overwrite it with basename(i...
Prior to sudo 1.8 this was after a getpwuid() but now we use
getpwnam().
This also makes it possible to include the location of the line in
the sudoers file in the warnin...
github.com/sudo-project/sudo - 493b2441d4ea84f53f018ddae9dbca0a9d45de85 authored over 1 year ago by Todd C. Miller <[email protected]>
The EBNF made it appear that this is allowed when it really is not.
github.com/sudo-project/sudo - 3b55de4e832b537242f988f3cd3723ecbb493423 authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - f0030cf30f10a4645eaf034cea2aee82b575f400 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 554397eaeaf68b8251e325bda98db7e0ef920759 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 5108c279afe9dd098f1595f9cc3b5d6581db02de authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - f95c9f839c8d80f504856ec005a44815b73ccc32 authored over 1 year ago by Todd C. Miller <[email protected]>
This eliminates a dependency on the user_details global.
github.com/sudo-project/sudo - e435b158b81fb5c2c500498e8b434c35781aaf35 authored over 1 year ago by Todd C. Miller <[email protected]>This eliminates use of the user_details global from exec_setup().
github.com/sudo-project/sudo - 86002226b65286ba1bd8fec12e73a900e240970b authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 51453c4f2e844bbc80c818e23c7a5f6324ace273 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - fa5a28f34517bde2124afc264ec56af3762103f2 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - a5b11a58b7f74701b1c5ebcc3103339047715cfd authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 9fd787343d24e633023b490ab0798dc3705a393d authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 11277bb921d98efb0a33e8604e135a7970d921bb authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 8d2b9a43431127110b8c5c179b76586c79aa7eae authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - ee3f99c88c9d897eafd7f739e80fe597c48e8650 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - f9b1beced260f9ebb0d9087e4e1f37212eee3dee authored over 1 year ago by Todd C. Miller <[email protected]>
We can use details->tty to access the pty follower path.
github.com/sudo-project/sudo - 22776b0be6ae1a5233bc31b829a5dd064f4431ec authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 7ac9ce001cf898a7db28d41e704a821b801b083c authored over 1 year ago by Todd C. Miller <[email protected]>
The pty_cleanup hook needs access to the closure so add
pty_cleanup_init() to store a pointer to...
We want it to execute in the main sudo process, not the monitor.
github.com/sudo-project/sudo - b81c5e8dac64dbf43555ae4569704d00bd64ac00 authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 11739e3defab1cf3cfac268405101e54057ab6f2 authored over 1 year ago by Todd C. Miller <[email protected]>
Also make pipeline flag private to exec_pty() and remove the unneeded
check_foreground() prototype.
Changes made to the terminal settings while the command is suspended
are now reflected in the pt...
github.com/sudo-project/sudo - 3e734fa51b64c22290e654340af0ec1e14a2233d authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 2a5d8bfea1928da3f613abf03c779f6168b91220 authored over 1 year ago by Todd C. Miller <[email protected]>
This should be more portable as it handles the quirks of some older
systems.
Historically, pid_t was a long on some 32-bit systems like Solaris.
github.com/sudo-project/sudo - a17491972b1a98b32a4df90fe2e67e0872089d2b authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 775059156fd8bd9505d6c2dc0446fa9a72702b08 authored over 1 year ago by Todd C. Miller <[email protected]>
Previously, we only did this when running in the foreground but
this can cause problems when runn...
Also use SFD_LEADER for sudo_term_copy() in exec_pty() for consistency.
From Duncan Overbruck.
Also set sa.sa_handler to SIG_DFL instead of SIG_IGN. There is no
difference for SIGCONT but it ...
While we cannot catch SIGSTOP, we _can_ catch SIGCONT and set
/dev/tty to raw mode when running i...
It is mostly used for debug logging.
github.com/sudo-project/sudo - 1772fc7b660b33e264fe3459745db3ed04793255 authored over 1 year ago by Todd C. Miller <[email protected]>We can use the leader file descriptor with TIOCGWINSZ to set the
window size of the pty. Thanks ...
Otherwise, visudo will get SIGTTOU if it tries to write to the
terminal after the editor finishes...
github.com/sudo-project/sudo - 28ecbe4d519970d3ccf8fef1a69800773c0c50fc authored over 1 year ago by Todd C. Miller <[email protected]>
This is now an int, with values > 1 reserved for visudo.
github.com/sudo-project/sudo - 8049e4e32f81424b01ac9c83eacefc3de3640ef5 authored over 1 year ago by Todd C. Miller <[email protected]>This moves the "isdir" function argument to the internal version.
github.com/sudo-project/sudo - 738387aa4d38cb02da9c97aa2effed8ce88afeef authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 4b563ea44f98e6d0acd5b0c43c71ef043ac47885 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 1f19a6b72bb26f8e86a84c8d4b2269b55d05483b authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 70c533ec79d3320152a73e5927f10f767831254e authored over 1 year ago by Todd C. Miller <[email protected]>
Any operating system supported by sudo already includes getcwd(3).
github.com/sudo-project/sudo - f5d0b7abf74e35040c0918489c9576348531409e authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - f2f233336e32dfea2464836d64af1e4e737d21b4 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 14dd995b8933c85336bead108b374030e959d6eb authored over 1 year ago by Todd C. Miller <[email protected]>
Also switch to doing everything in terms of struct timespec except
for the actual select(2) call.
github.com/sudo-project/sudo - 3f5e7df3cd0399b48f0f19ad3099d9cd793cf5ee authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 7683ba1b889f7a97512bd8dcf67ede86b966878c authored over 1 year ago by Todd C. Miller <[email protected]>
We already check for a NULL value above so "str == NULL" is always
false. Found by PVS-Studio.
github.com/sudo-project/sudo - 027b42d5a6588b76f2e00a376aa04c931caec4f0 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 33cb885cf6f1c265a5c26a936f30948c9c0ca03a authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 0f46ffa9f1c5b56616673e3962967c7506440494 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 1b3991b7179b8dfd79414acd3d62ba89f3420a1c authored over 1 year ago by Todd C. Miller <[email protected]>
Fixes a build error on musl-based systems like Alpine.
github.com/sudo-project/sudo - d8e6396c55b9b4b127abc22da096e3ed03445bd8 authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 918af413f3d3ab21802aa66b14ea3a518bd84221 authored over 1 year ago by Todd C. Miller <[email protected]>
It will be used in the upcoming log output tests.
github.com/sudo-project/sudo - 86ab362fd49c2e5bf203c2073e306f9ec8f10532 authored over 1 year ago by Todd C. Miller <[email protected]>This is a regression introduced in sudo 1.9.13.
GitHub issue #254.
github.com/sudo-project/sudo - 24f04c8cb37946510fa37d0bf68aa2b3e1ea7136 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 34933ef9d0046b8095633b3d88ef1dc8817a707d authored over 1 year ago by Todd C. Miller <[email protected]>
Previously, it only performed netgroup queries to determine the
list of netgroups a user was a me...
Avoids a double free in fuzz_policy.
github.com/sudo-project/sudo - c76ac1cab37532672462267984fb7b0b994f180a authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - cd5cd45336ea3077b7a9639c9489549d0284193c authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - c09aabecdc898c074813aebb0a8900418aa3ae9e authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - d5a7844423afad3faa8efa55e292fef741584c29 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 33c385a78e657e1429435650f98efef18ad82cf2 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - c61306e583e878a72cda618235b11605b7904003 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 31dad6b179d24e9aa9cc2e39f731c8aa960e13f6 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - cb7b1dd89c4c74911ea59c592c166ba0174830bf authored over 1 year ago by Todd C. Miller <[email protected]>
Wheh netgroup_base is set we now do out own netgroup lookups using
LDAP. Previously, LDAP was qu...
These will be used by the LDAP innetgr() implementation.
github.com/sudo-project/sudo - 554df8d934484bfba92b520d53f347650facb4f9 authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - d2582c2cdb0d819c5a318184113e545ab161424a authored over 1 year ago by Todd C. Miller <[email protected]>
fix typo in uninstall target
github.com/sudo-project/sudo - 954980b566660b0c58b1c1887d9a65e5c27552ce authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - ec255dca1e5a10eb818fbc664d64e2b07a56ed1e authored over 1 year ago by bin-ly <[email protected]>
This will be used to implement LDAP-specific netgroup lookups when
netgroup_base is set in ldap.c...
This uses the NIST byte-oriented short message test vectors.
github.com/sudo-project/sudo - dea110a8486283baf0a4eeb6c4a3a58173e4816c authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - 0df56634c3deabb4049cd1bbe0fe3bc95c797926 authored over 1 year ago by Todd C. Miller <[email protected]>
A user with "sudo ALL" for root _is_ allowed to list any user.
github.com/sudo-project/sudo - 689022978c15e1ecdb7410855dd46d070118b204 authored over 1 year ago by Todd C. Miller <[email protected]>This change introduced in sudo 1.9.13 is not actually needed. The
"list" pseudo-command checks a...
The value of user_args should not contain the command to be run in
"sudo -l command args", only t...
Calling sudo_pow2_roundup(INT_MAX+2) will return since there is no
power of 2 larger than INT_MAX...
This fixes a hang when there is /dev/tty data in a buffer to be
flushed by the final call to del_...
github.com/sudo-project/sudo - 43378de75efccf4147c632312963782672556c33 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 7356a77969181e77a49a618bfcca86ffd83dc614 authored over 1 year ago by Todd C. Miller <[email protected]>
github.com/sudo-project/sudo - 172515c94d654f0abfbd99bfad1bb61eadfe7918 authored over 1 year ago by Todd C. Miller <[email protected]>
The special handling of "list" in the lexer meant it could not
be used as a user, group or host, ...
github.com/sudo-project/sudo - 6c97b84c0cb7809af423f7c371dd96999f410d8b authored over 1 year ago by Todd C. Miller <[email protected]>
Found by oss-fuzz.
github.com/sudo-project/sudo - a4f31cff2b43cc0e5ad6b5c19ef5dd9a64bd883c authored over 1 year ago by Todd C. Miller <[email protected]>github.com/sudo-project/sudo - f4d241262890f2b2213ebaf7ecc8540801c07d7a authored over 1 year ago by Todd C. Miller <[email protected]>