the process name contains spaces. Since the user has control over
the command name this could be...

instead of CMD_ERRNO or CMD_WSTATUS.

poorly written '*' matching.

visisble, we need termios.h too.

to exec.c.

handler being NULL.

signal_pipe explicitly.

Otherwise, it is possible for the command to exit before the SIGCHLD
handler is installed. POSIX...

entries.

and call signal_pipe_cb() directly if the backend returns EINTR
and the signal_caught flag is set...

and TAILQ_REMOVE.

specified directory and, when parsing of those files is complete,
returns control to the original...

until after we have the controlling tty.

ourselves with a pipe if the plugin will actually log the data.
This avoids a problem with non-in...

use the default label instead of 1 for the success case. It is
only reading a single byte so the...

open(2) fails with EACCES. Use io_open() instead of duplicate
copies of the same fallback code.

but only run it if not cross compiling and whe CHECK_NOEXEC is not
empty.

syslog_badpri to the "Strings at can be used in a boolean context" section.

context and use the compiled in default log facility in this case.

refactor of set_default_entry() in sudo 1.8.18.

how sudo handles the environment instead.

See https://research.swtch.com/glob
Adapted from https://perl5.git.perl.org/perl.git/commit/33252...

a signal. Sudo will terminate itself with the same signal the
command died from. Unfortunately,...

to 0. This will prevent sudo itself from dumping core in this case.

signal to itself so the parent shell knows the command died from
a signal. However, we don't wan...

exit status being 0 when a command was killed by a signal other
than SIGINT. This fixes the sign...

DESTDIR is generally only set when installing to a temporary
directory for packaging in which cas...

and copy it to /etc/sudoers if there is no existing /etc/sudoers.
Packages either contain /etc/su...

The llvm checker gets confused by TAILQ_REMOVE and generate
use-after-free false positives.

value is present in sssd.conf.

It would be nicer to just provide getgrouplist_2() (or the equivalent)
and avoid the ugly #ifdefs.

ENOENT before returning.

in sudoers are looked up by group name instead of group ID. This
doesn't usually cause problems,...

SIGINT or SIGQUIT before executing the command.

underlying SHA2 functions. That way we can test it regardless of
whether we use sudo's SHA2 func...

fdexec.

Also always use PERM_IOLOG for mkdtemp() since we cannot retry
if it fails. Since we are guarant...

same restrictions as the user's own environment.

mode after the fact. This is slightly less error prone.

newly-created ones.

affected by the invoking user's umask.

filesystem where root is remapped to an unprivileged user.