github.com/sudo-project/sudo commits | Ecosyste.ms: OpenCollective

Add Sangamesh Mallayya and Michael Spradling

d63fe33d1f1daf10a36c3a82a49c6d3044b08425 authored over 5 years ago by Todd C. Miller <[email protected]>

Add -B option to ring the bell before the password prompt.

19c548fd57701d3dbcb8bb7db05d5fd0f852dba9 authored over 5 years ago by Todd C. Miller <[email protected]>

Allow the user to change their password if expired on AIX.

Bug #883

dae484213ecb463275e0b1c5e00741e8eeda0e43 authored over 5 years ago by Todd C. Miller <[email protected]>

When using AIX auth, don't display the AIX password incorrect message.

Avoids a "3004-300 You entered an invalid login name or password"
message in addition to sudo's o...

07ed5b86f23c246ecc6b9bd171242f26c001fb08 authored over 5 years ago by Todd C. Miller <[email protected]>

AIX packages were not being build with optimization enabled.

8c9b23b0cafca57501cbede4d186595d945c597d authored over 5 years ago by Todd C. Miller <[email protected]>

Fix a typo.

e28ba02c78f658da8be4903aaacc87ca4eacb10f authored over 5 years ago by Todd C. Miller <[email protected]>

Support using macOS SDKs from /Library/Developer/CommandLineTools/SDKs

19e2da8eec790925d94478e5b5ab7393005c3ace authored over 5 years ago by Todd C. Miller <[email protected]>

It is safe to assume _POSIX_VDISABLE is defined.

The old compat defines were to support pre-termios systems.

cd2cfeb8cb41a3e41bad55d34dcb448c52eff065 authored over 5 years ago by Todd C. Miller <[email protected]>

Remove second catopen() which is never called.

30a5ee9c5dce4d574af896b36ed8d522fd97b845 authored over 5 years ago by Todd C. Miller <[email protected]>

Sudo's conversation functions now filters out the last login information.

14e72b3ec671caa7f7699f6a5536306864665a74 authored over 5 years ago by Todd C. Miller <[email protected]>

Add pam_acct_mgmt setting to enable/disable PAM account validation.

976550084e98343d57309ebfa99ff145f6a2b71b authored over 5 years ago by Todd C. Miller <[email protected]>

regen

4b240c26735a409f4a6ea80034295fef1a7e07bd authored over 5 years ago by Todd C. Miller <[email protected]>

Sudo 1.8.28

91b6d71a042ceeb2c5d458d37fa72f0c0bdeb79c authored over 5 years ago by Todd C. Miller <[email protected]>

Add SPDX-License-Identifier to files.

1e1ef61902830d38c15aa34180b2d1000350a762 authored over 5 years ago by Todd C. Miller <[email protected]>

Filter out last login messages on HP-UX unless running a shell.

HP-UX in trusted mode will display last login messages as part of
the PAM account management modu...

96ac6adae58eeb7eaa43685c8306df070d349526 authored over 5 years ago by Todd C. Miller <[email protected]>

FreeBSD's /dev/fd only contains fds 0-2 unless fdescfs is mounted.

In practice this doesn't matter since FreeBSD >= 8 has a native closefrom

30a56af6ef885a3d6816ef74aa34e218b0aa93c0 authored over 5 years ago by Todd C. Miller <[email protected]>

Keep debug fds open in send_mail() to aid in debugging.

Adds closefrom_nodebug() which acts like closefrom(3) but doesn't
close debug fds for use by send...

aa0146d68d01571287529900310961ab8a9993f2 authored over 5 years ago by Todd C. Miller <[email protected]>

Set def_mailerflags even if sendmail was not found at configure time.

Fixes a NULL dereference when mailerpath is set but mailerflags is not.
Bug #878

9048ee6c48d27ccfe8437444635501855685ebfb authored over 5 years ago by Todd C. Miller <[email protected]>

Add a proper getdelim(3) replacement and use it instead of getline(3).

de65d70929db209d24500fff00e1e1b3f2e27624 authored over 5 years ago by Todd C. Miller <[email protected]>

Restrict the PAM_TTY kludge to Solaris and Linux-PAM.

Setting PAM_TTY to the empty string causes problems with some modules
on HP-UX so restrict it to ...

f0910c01da5e9f24a71db8b359a46ae19ddc7005 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix the counting of supplementary groups on AIX.

We should not assume that basegid will be present in the list of
gids returned by getgrset().

731e796711d4554f67d7f14aaf5b9f15696090cc authored over 5 years ago by Todd C. Miller <[email protected]>

Plug a memory leak on user/group lookup failure found by ASAN.

194968eaf0ef6fd3d2a7c3eb6a78166074fe25ec authored over 5 years ago by Todd C. Miller <[email protected]>

Fix test failure when run by a user other than the file owner.

e31ac5a998b97805e6a2730fc2d1cf3262ac640b authored over 5 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

28b0bff4f3a2408c3f8de5ac5c8c7ca7cfe9e689 authored over 5 years ago by Todd C. Miller <[email protected]>

Test cvtsudoers stdout and stderr separately.

Fixes a test failure on systems with musl libc. Bug #873

0c31cf15fe55bb996c7ce6b5c1584d776be14644 authored over 5 years ago by Todd C. Miller <[email protected]>

Better comment about EOVERFLOW and pstat_getproc().

Also remove some useless casts.

0766e0c6470bb13cfa33051fc654c7608c6aa18f authored over 5 years ago by Todd C. Miller <[email protected]>

Ignore EOVERFLOW from pstat_getproc(), it is not a fatal error.

It just means that one of the fields in pstat lacks the precision to
store a value. That's not a...

17ca31c38113dd996ea0877637b82c95f52f587b authored over 5 years ago by Todd C. Miller <[email protected]>

update copyright year

9c4487b732ed6b3ab1291f061484b6a8a97effcd authored over 5 years ago by Todd C. Miller <[email protected]>

Fix error message when a fully-qualified plugin path does not exist.

8ee2de99803ee46b607887a5db42eb9b9ba7a828 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix unescaped '\' and remove an extra '[' in the definition of digest.

0e8fffdb3014270384e179a4a3a8fe62bfcd51aa authored over 5 years ago by Todd C. Miller <[email protected]>

Ignore carriage return before a linefeed.

This allows sudo to parse files with DOS-style line endings.

ea3ede690fb8a6fde3bf48868b15936db541a595 authored over 5 years ago by Todd C. Miller <[email protected]>

For sssd, the nsswitch.conf setting should be "sss" not "sssd".

From Johnathan Smith.

f4853cb75408b99f935f394cfb96a3d5c79bbd5b authored over 5 years ago by Todd C. Miller <[email protected]>

Add simple API for to allow reading environment data from different sources.

Currently, this is used to read a file like /etc/environment.

e1205f08d6ecb9ccd0be0687b47b5b510c034264 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix pasto; the unrestricted env file was read when we want the restricted one.

f3344b58813b7edc9ed1c01a3260ad98575cac7c authored over 5 years ago by Todd C. Miller <[email protected]>

Be sure to include sudo_queue.h where needed instead of relying on other headers.

c0a12d9d956a72ac47e669c15d5e4db11c02d5fd authored over 5 years ago by Todd C. Miller <[email protected]>

Only export sudo_arc4random_uniform() if arc4random_uniform() is missing.

683c65b98b858b90ee8cb7e7e40a61914b20e372 authored over 5 years ago by Todd C. Miller <[email protected]>

Quiet a warning on gcc 8

f17683482bc22eb31239f6a7634c2e1c8e23e790 authored over 5 years ago by Todd C. Miller <[email protected]>

AIX 7.1 defines O_CLOEXEC but it can't be used outside the kernel.

Redefine O_CLOEXEC if it doesn't fit in an int and pipe2() is missing.

da98428e91ae95386a4a79da553675fb2b623615 authored over 5 years ago by Todd C. Miller <[email protected]>

Split command match code out into match_command.c.

Also remove unused SUDOERS_NAME_MATCH code.

36d43734035915ab1e85406579ad7144b3e4bdfb authored over 5 years ago by Todd C. Miller <[email protected]>

Split out digest matching into its own file.

cf2bfbcd3fdee92a2df53ec0ed85877b35aceaf7 authored over 5 years ago by Todd C. Miller <[email protected]>

Split out digest matching into its own file.

a04409747cd9bc5750ab692cd171da1390d208ff authored over 5 years ago by Todd C. Miller <[email protected]>

Rename FOLLOW and NOFOLLOW tokens FOLLOWLNK and NOFOLLOWLNK.

Fixes a namespace collision on Solaris when bison is used.

1e6e048180000bc073d047c1dd4c1dc7f8186720 authored over 5 years ago by Todd C. Miller <[email protected]>

Add stub definition of digest_matches() for SUDOERS_NAME_MATCH

bc259150509515f82e33f7d2c9bbc20a077d5d87 authored over 5 years ago by Todd C. Miller <[email protected]>

No longer need to include sudo_lbuf.h

694999487b82e69e7adb4e6d2d8e785d953ef55a authored over 5 years ago by Todd C. Miller <[email protected]>

On RedHat/CentOS get the OS major version from /etc/redhat-release.

We cannot determine this from the output of "pp --probe" since it
doesn't contain a period to sep...

ffc4db6aee28b51229bad8a6f934e04d7ed9fa46 authored over 5 years ago by Todd C. Miller <[email protected]>

Use SET macro instead of bitwise OR.

6dceca47cc47a6ed712f654d46108fa217f4851d authored over 5 years ago by Todd C. Miller <[email protected]>

In sudo_make_grlist_item() the calculation of total did not include

space for pointers to the group names.

c92f80b79e739675adc52fe260e11bace140bf39 authored over 5 years ago by Todd C. Miller <[email protected]>

Use correct debug_decl() names.

4f74fe3a8e7e5796169ad14426ae22d5e38d283a authored over 5 years ago by Todd C. Miller <[email protected]>

Add fallback values for sudoers uid, gid and mode if not set in Makefile.

928faf27f2846671f15bfb897d28182b70b60160 authored over 5 years ago by Todd C. Miller <[email protected]>

include stddef.h to make sure we get NULL

13c3244220a2fea4d1d8d262288a1b19da4937d3 authored over 5 years ago by Todd C. Miller <[email protected]>

Fix memory leak when there are no network interfaces or an error occurs.

3788c654838f52499e8f2d63cad39ecc8f23bde5 authored over 5 years ago by Todd C. Miller <[email protected]>

Use $ac_cv_search_FUNCTION instead of $ac_lib and $ac_res.

Fixes a problem where libcrypt is not used with autoconf caching.
Adapted from a diff from Adam L...

c1d934894d303017bc7d1ee2bd2e360232594f52 authored over 5 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

df8b855b2a25f2ee9ce158bfd09ce25125cfab2b authored over 5 years ago by Todd C. Miller <[email protected]>

Fix listpw=never and verifypw=never. Bug #869

ecc9c366e469988c736629cbe88348c40dcfa31a authored over 5 years ago by Todd C. Miller <[email protected]>

Minor snprintf() usage tweaks:

1) don't assume snprintf() returns -1 on error, check for <0
2) when comparing return value of si...

985600e7f03a24124032548f7088a445be6f09ec authored over 5 years ago by Todd C. Miller <[email protected]>

The AIX nofiles hard limit fix and bug #867 will make 1.8.27.

3d63eee344df8d7a2023bd44d2c2244f3772067d authored almost 6 years ago by Todd C. Miller <[email protected]>

Use PAM_SILENT to prevent pam_lastlog from printing last login

information on RedHat except when explicitly running a shell.
Adapted from a patch from Nir Soffe...

e2675d8f1efc7681e1a718754bd1ef2904ac9ceb authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix the default nofiles and stack hard limits.

The table of default hard limits in /etc/security/limits was out
of date with respect to the curr...

f7d7a9a6196937c88588956d5b8dfcfbbe0b4fba authored almost 6 years ago by Todd C. Miller <[email protected]>

regen

32dc90c28e80e99391dc3558d29296c90a4fce83 authored almost 6 years ago by Todd C. Miller <[email protected]>

Final updates for sudo 1.8.27.

7ae29420d5966ae5efaaa13f647ac3e0c34e26dd authored almost 6 years ago by Todd C. Miller <[email protected]>

Update copyright year

64d08d8bf21077a161ed2a930df43612b47d53ee authored almost 6 years ago by Todd C. Miller <[email protected]>

Update for 2019

de94a04ba4499132ce5855d4961115a24f9a96ed authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix setting of utmp entry when running command in a pty.

Regression introduced in sudo 1.8.22.

b2f7983c84fd01e0b29895d7df776b4b162fd8a5 authored almost 6 years ago by Todd C. Miller <[email protected]>

Use debug_return_int not debug_return_bool in resolve_host

efe35e5b1e7bb9278b30e578d8f3c4eb666f1ea1 authored almost 6 years ago by Todd C. Miller <[email protected]>

sudo 1.8.27

24b0da367bab2d19f5b918ff102447a0727eef16 authored almost 6 years ago by Todd C. Miller <[email protected]>

Allow the sudoers file to be specified without the -f option.

Bug #864

dc9338ffe72e8cede2df3086a839d4fb2f540240 authored almost 6 years ago by Todd C. Miller <[email protected]>

The iolog_dir section is below the maxseq section, not above.

7d5b0064af12c95062fb8fb859b80312a25c3472 authored almost 6 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

3d84150736585475fd5a9f432d8f802efccab7eb authored almost 6 years ago by Todd C. Miller <[email protected]>

Add -n and -R options to help; reported by Radovan Sroka

72050203bcf66cc7b1a15fa14e6fc83182e97ace authored almost 6 years ago by Todd C. Miller <[email protected]>

Add missing description of padding option and missing argument to -c.

258c7d4dd0c7ca24b33a9079c06c78a7e328bb80 authored almost 6 years ago by Todd C. Miller <[email protected]>

The -c option was missing from the help info; from Radovan Sroka

142b370c1f928549db3b357a495d151c7cd87f65 authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix some typos; reported by Radovan Sroka

04a4b3c1fcc1526ff1ea73597a1764cb160d400b authored almost 6 years ago by Todd C. Miller <[email protected]>

In sudo_pam_approval(), for the exempt case, only overwrite pam

status when the passwd is expired or needs to be updated.

5242773489abf058e49e886fc7ed3e2026256574 authored almost 6 years ago by Todd C. Miller <[email protected]>

The fix for bug #843 was incomplete and caused pam_end() to be called early.

sudo_pam_approval() must not set the global pam status to an error
value if it returns AUTH_SUCCE...

4125808a8579a23fbcf5e2cd37507746d34ef1ba authored almost 6 years ago by Todd C. Miller <[email protected]>

Don't run the command in a pty if no I/O plugins are logging anything.

That way an I/O plugin that doesn't actually log anything won't cause
the command to be run in a ...

e91e5ee820355e96826323bc1f021dff04c7e4b6 authored almost 6 years ago by Todd C. Miller <[email protected]>

Update ignore patterns to match doc changes.

83fd48a75c5aefe42f713313be6d9ee5c110be11 authored almost 6 years ago by Todd C. Miller <[email protected]>

fix mode fixmdoc.sed

85dd1747cf5cb43d574153c46d720f186826a19f authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix section in the .TH line of *.man.in file.

The substitution for @mansectsu@ and @mansectform@ was broken.
No longer need to strip out OpenBS...

b8ba372227a76a1adda62d297935b2cdf4a7827a authored almost 6 years ago by Todd C. Miller <[email protected]>

Add sudoers.man.in.sed, missed from previous commit.

e0d2dc61eb065e294c9e120706cb044a8c143591 authored almost 6 years ago by Todd C. Miller <[email protected]>

Add Guillem Jover

168a7ca1108a7860633feb19e8dfb0744b62193e authored almost 6 years ago by Todd C. Miller <[email protected]>

recent changes

8964dd5d20589830d02c2d35457eab676ede66f5 authored almost 6 years ago by Todd C. Miller <[email protected]>

Use roff conditionals in the manuals instead of post-processing.

We still need to process the resulting .man.in files to add back
the conditionals but this should...

e010706ede6aa643c8bc5cfc0c2997e84533ee05 authored almost 6 years ago by Todd C. Miller <[email protected]>

Sudo plugin manual updates and clarification from Guillem Jover:

- Add missing return information for show_version().
- Fix prototypes for several function pointe...

23006c72c7ecf3d186f52d269f7ab927fe36013d authored almost 6 years ago by Todd C. Miller <[email protected]>

Revert changes to give arguments to the .Bx macro.

This is intended for things like .Bx 4.3 to generate "4.3BSD" so
the argument ends up before the ...

7c0019d2a50e47678f2d1051150217471f61aa34 authored almost 6 years ago by Todd C. Miller <[email protected]>

Update fixmdoc.sh to match the BSD -> .Bx changes in the manuals.

Bug #861

0679f4529c87e2752db1d36adc71dad26eee06c7 authored almost 6 years ago by Todd C. Miller <[email protected]>

Add support for utmps as found in HP-UX.

ecd968881867890d91750893d759f57a83b6c6db authored almost 6 years ago by Todd C. Miller <[email protected]>

Support st_nmtime in struct stat as found in HP-UX.

716aa6e4ab77c133fa989d01718c7faed46e6ceb authored almost 6 years ago by Todd C. Miller <[email protected]>

If fcntl fails, fall back to the /proc implementation.

7c5469264d7e6f9e25b2f1230b7baf02ef753ca8 authored almost 6 years ago by Todd C. Miller <[email protected]>

Mention schema.olcSudo

4f5acff6ebca0c15ab843526981e65ef3717a003 authored almost 6 years ago by Todd C. Miller <[email protected]>

Mention schema.olcSudo here too.

5f5d4a285c985373567a907265f1cba9773b1b13 authored almost 6 years ago by Todd C. Miller <[email protected]>

OpenLDAP schema file for Sudo in on-line configuration (OLC) format.

From Frederic Pasteleurs.

5e098a782d564dbeb700a1bfe56462ee900a5e88 authored almost 6 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

d6c2c536883f6741e5ef72927c1c8c77e027f594 authored almost 6 years ago by Todd C. Miller <[email protected]>

Only use closefrom_fallback() if no better method exists.

The previous logic was too fragile.

537a2f97731d4c2419d4043fa75c6f5f18a2eb5d authored almost 6 years ago by Todd C. Miller <[email protected]>

Updated translations from translationproject.org

733669ec38d6c7a9be0340bb9bc37e1d74b2730c authored almost 6 years ago by Todd C. Miller <[email protected]>

Portuguese translation for sudo and sudoers from translationproject.org.

cad10fbd2e9a2e540f73b6f71d7144f2851f078a authored almost 6 years ago by Todd C. Miller <[email protected]>

Add sudo_gai_fatal, sudo_gai_vfatal, sudo_gai_vwarn, sudo_gai_warn

and gai_log_warning that use gai_strerror() instead of strerror().

cdd5bb32eb56b02dfc802a05ebad8051a644c360 authored almost 6 years ago by Todd C. Miller <[email protected]>

Fix memory leak in runaslist_matches().

cfa4879dbd6528e2a1c40517d59ec6a48e4afa16 authored almost 6 years ago by Todd C. Miller <[email protected]>

typo

c88b8598538d68d038231c217e179826b658aa5e authored almost 6 years ago by Todd C. Miller <[email protected]>

regen

9c2f4b8f196ae8d6ec8de9806ff3c161a238688e authored almost 6 years ago by Todd C. Miller <[email protected]>

More updates for 1.8.26

9378808b3a1a75542f17f5e4a19a286a36ba7f24 authored almost 6 years ago by Todd C. Miller <[email protected]>