github.com/sudo-project/sudo commits | Ecosyste.ms: OpenCollective

fix typo

70d3e0e9879bb1ac8fd9b08866fe520b3cbf5939 authored almost 8 years ago by Todd C. Miller <[email protected]>

Fix the "all" setting for verifypw and listpw; nopass would never

be true even if all the user's entries had the NOPASSWD tag.
Regression introduce in sudo 1.8.17....

aaf6fff736ea90491259e6a166328d845d4aa96a authored almost 8 years ago by Todd C. Miller <[email protected]>

sync with translationproject.org

7bcd0285e16512deeeee08769533459fcbe6ba39 authored almost 8 years ago by Todd C. Miller <[email protected]>

Just use malloc_options "S" on OpenBSD instead of "AFGJPR".

1aea3f6e3e8689f0850beebcc28962d752ae8210 authored almost 8 years ago by Todd C. Miller <[email protected]>

Update year in license

4d06a612f75f7aeaea1a9539a764e121bb400067 authored almost 8 years ago by Todd C. Miller <[email protected]>

regen

0382a2d47fc91dacf15f7a65d8247849efca64ff authored almost 8 years ago by Todd C. Miller <[email protected]>

regen

94b844ebb584ca9c96ff64438751129e73924c8f authored almost 8 years ago by Todd C. Miller <[email protected]>

Add SUDO_DEBUG_INSTANCE_ERROR return value for sudo_debug_register()

and check for it in places where we check the return value of
sudo_debug_register().

6c5936296f783462f6f2666603124feecd15ffd5 authored almost 8 years ago by Todd C. Miller <[email protected]>

update for 1.8.19

de0c5c48aab5253e02946ea0e5f62d8e762f1a84 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add support for getpwnam_shadow() on OpenBSD

695784e6ee7f48469ae8d6fb6fb7727df04833de authored almost 8 years ago by Todd C. Miller <[email protected]>

Add umask to user_info passed in from the front end to the plugin.

f70f595b5b603706d7506f60951bab1b2bd3b9bb authored almost 8 years ago by Todd C. Miller <[email protected]>

Fix sign compare warning.

0cde3f5de4d128c6a701ec6586bd55e2d3719b63 authored almost 8 years ago by Todd C. Miller <[email protected]>

Use AX_APPEND_FLAG instead of SUDO_APPEND_CPPFLAGS and direct

modification of LDFLAGS.

cb7e82accad273eb15d70e5b51b4b08a4c059bd7 authored almost 8 years ago by Todd C. Miller <[email protected]>

Remove aixcrypt.exp, it was a remnant of the 90's crypto wars where

crypt() was not exported.

a77ecca7d3ef593c0bb261d7ab6f9b08ee4750e8 authored almost 8 years ago by Todd C. Miller <[email protected]>

Remove obsolete solaris issue with snprintf

80217f0bbc460ca4739b261a9bac721cd92536b2 authored almost 8 years ago by Todd C. Miller <[email protected]>

SunOS 4.x is no longer supported

c3373f03bee9e89106e352c4630e3204d36af740 authored almost 8 years ago by Todd C. Miller <[email protected]>

Plug memory leak when a particular Path is set more than once.

e797fc643f9f3ab00db7b4e7b7c445cfd7e75769 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add sudo_ldap_is_negated() and sudo_ldap_is_negated() functions

and use them to parse negated entries instead of doing it manually.

d6c30ba2734a991d930bcb3d93a528fd66ed0e22 authored almost 8 years ago by Todd C. Miller <[email protected]>

Fix printing of sudoedit_follow in "sudo -l"

da7373372407270530020a100b0e05c85833df7d authored almost 8 years ago by Todd C. Miller <[email protected]>

For "sudo -l" print sudoOption sudoedit_follow as FOLLOW.

c7d6521b49ebe4467b1882e8c30cf05835d15a45 authored almost 8 years ago by Todd C. Miller <[email protected]>

Always define _PATH_SUDO_NOEXEC, _PATH_SUDO_SESH, _PATH_SUDO_PLUGIN_DIR,

even if only defined to NULL. This means the accessors can always be
present.

Use RTLD_PRELOAD_...

6dff4ac7fdb8557de046539c0323801f176076bc authored almost 8 years ago by Todd C. Miller <[email protected]>

Use readline() in sudo_ldap_read_secret()

8820ff3efbc42efebf97670767b077ef5ee9fa57 authored almost 8 years ago by Todd C. Miller <[email protected]>

Get rid of struct sudo_conf_paths and just use #defined index values

to access the path values.
Make all accessors available even when the feature is not enabled.

8cb9f298bdfbdfece1be4ac7003453f92187b0c7 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add ASAN_CFLAGS and ASAN_LDFLAGS and use -Wc prefix in ASAN_LDFLAGS

to prevent libtool from strippign them out.
Avoid using ASAN flags when building sudo_noexec.so.

bdbb3e985596ad4af3e53a9fab650d4ac0ef1770 authored almost 8 years ago by Todd C. Miller <[email protected]>

Disable noexec for HP-UX 10.x which probably doesn't support LD_PRELOAD

589e129c87722761f4426ba3e5b97e8646077fbf authored almost 8 years ago by Todd C. Miller <[email protected]>

Remove SunOS 4 support, it is not modern enough to run sudo.

08a4a285927d3d0af1c39133ab8de5b6be2e8e52 authored almost 8 years ago by Todd C. Miller <[email protected]>

Remove HP-UX 9 support, it is not modern enough for sudo.

b56bce3127b4021d237f46adf253becbf6c0ca7e authored almost 8 years ago by Todd C. Miller <[email protected]>

Remove Ultrix support, modern sudo can't run on Ultrix anyway.

9d11b725c5fdb6efb693111862af1dc8b61b9b2b authored almost 8 years ago by Todd C. Miller <[email protected]>

Add regress for noexec functionality

66af45eb24b3efff82d6d9ed465eaa3f7d742e6a authored almost 8 years ago by Todd C. Miller <[email protected]>

Unbreak sudo_noexec on macOS where shared libraries and dynamic

modules are different. We still want to install sudo_noexec.so
without the "lib" prefix so some ...

068f96a213a246458529239c4484415d0d805525 authored almost 8 years ago by Todd C. Miller <[email protected]>

Don't enable noexec for AIX 5.0-5.2, we need 5.3 and above.

60bf1394517e4d06a37c8b76ee4a65dcef07285b authored almost 8 years ago by Todd C. Miller <[email protected]>

Need to link sudo_noexec.so with -ldl for dlsym() on some platforms.

Otherwise, the wordexp(3) wrapper will fail due to an undefined
symbol. Bug #761

07cc9d81538f24de19781b0320d3ce4fc567de00 authored almost 8 years ago by Todd C. Miller <[email protected]>

In strict mode, go to the file/line with an undefined aliases

or aliases cycle directly.

deb62597651667d18616fc5516d05ca78a5bdbca authored almost 8 years ago by Todd C. Miller <[email protected]>

Store the file/lineno for alias and userspec entries so we can

provide that info if there is an error.

7524c231cc548eb56f7ec04fafcb39e4e77740f8 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add simple reference-counted string allocator and use it for passing

around references to the sudoers path. This lets us avoid making
copies of the sudoers path for ...

90995c0acf95e33381cd91fea5d2bac46f60d22c authored almost 8 years ago by Todd C. Miller <[email protected]>

Cast len from size_t to uint64_t before bit shifting since we are

adding to count which is also uint64_t. Quiets a PVS-Studio warning.

b5e3a7aef2b38d09069a7ac0f7887f295d28a2a8 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add checks for sudoers_locale early Defaults

52e136863f1c7ee51211f9827a4b216ec9ce6939 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add the argument vector allocated for -s and -i mode to the garbage

collector list. Avoids an ASAN warning on exit when the -s or -i
flags are used.

efe957544fecc63094575775433f902d230ca2dd authored almost 8 years ago by Todd C. Miller <[email protected]>

add missing sudo_pw_delref/sudo_gr_delref to plug memory leak

cefcb6f501ef794d39d8abd3d17ddff837dadffe authored almost 8 years ago by Todd C. Miller <[email protected]>

Go back to parsing Defaults entries in update_defaults instead of

as sudoers is read. Otherwise, we cannot properly support early
defaults like sudoers_locale.

79ca752802f4f543a2a08339dafaa53fcd8e7741 authored almost 8 years ago by Todd C. Miller <[email protected]>

Use expr instead of POSIX sh numerical expression to avoid

a syntax error on older shells.

dbf07431d0aedd4e6cf11eabf4c7098180e6dcdb authored almost 8 years ago by Todd C. Miller <[email protected]>

Bump plugin minor version to 10 for sudo_mode, sudo_group and sudo_user.

541ffbeec84050576230d1a32d4c3bac37d06036 authored almost 8 years ago by Todd C. Miller <[email protected]>

Fix a bug in host matching where a negated sudoHost entry would

prevent other sudoHosts following it from matching.

17868f89d7a10ff05ed7f8a56a291d958f7ec485 authored almost 8 years ago by Todd C. Miller <[email protected]>

Zero out sd_un before calling parse_default() so we don't try

to free stack garbage in the ldap/sssd backends.

1d9b8ca32e1e9b2906500a671cc91768a79e7434 authored almost 8 years ago by Todd C. Miller <[email protected]>

Use "ret", not "rc" for the function return value.

738c3cbf3e8400bf4a5aeab8966427ff6d630cd2 authored almost 8 years ago by Todd C. Miller <[email protected]>

Use sys/stat.h defines instead of bare octal values.

8133cdfdf689edca5381fc3354eb7982058fd02b authored almost 8 years ago by Todd C. Miller <[email protected]>

Pass iolog mode, group and user from policy plugin to I/O log plugin.

2b020c9f17b64af9538068211dd9294ec9098aa2 authored almost 8 years ago by Todd C. Miller <[email protected]>

Instead of parsing sudoers Defaults twice, parse once while reading

sudoers and then just set the parsed value in update_defaults().

df8404dbd4a90be583711917006f4363c0bc6650 authored almost 8 years ago by Todd C. Miller <[email protected]>

Use "struct defaults *d" instead of "struct defaults *def" throughout

for consistency and to avoid confusino with "struct def_values *def".
Use "str" not "var" for the...

1f24108969ee9534c02b01098a77ac0b6d9a45b3 authored almost 8 years ago by Todd C. Miller <[email protected]>

In display_bound_defaults() rename dtype arg -> deftype.

4ca0838ba9d666a6d286adddc15f6d447a7fce44 authored almost 8 years ago by Todd C. Miller <[email protected]>

Update error output to match quoting changes.

f3c7e0f83b91bf0f95fa51bdff0e2f6faf480577 authored almost 8 years ago by Todd C. Miller <[email protected]>

Avoid passing in a struct sudo_defs_types pointer to the store

functions. Pass in a pointer to the union to fill instead.

4f532dcc50ad64ab99423176b4c4fa8415bb9ec5 authored almost 8 years ago by Todd C. Miller <[email protected]>

no longer need struct defaults forward referebce

3c28810febbf8b13a6578fda1d020c444c537fbd authored almost 8 years ago by Todd C. Miller <[email protected]>

Use "double quotes" in messages instead of a combination of the

accent (grave) mark and apostrophe.

7c56179c7df8f6f2dec7ac3d4bbbd9b9968bb5bd authored almost 8 years ago by Todd C. Miller <[email protected]>

Add file:linenumber prefix to all Defaults warnings so we can see

them when running sudo too. For LDAP/SSSD we print the sudoRole
instead of the file name and omi...

75e29f163e3f2ffb92e3da76eee3ac65bd6a1427 authored almost 8 years ago by Todd C. Miller <[email protected]>

Use sudoedit in examples instead of "sudo vi"

a9715211a8fc7db64a39e2fbc1d352477dc176b0 authored almost 8 years ago by Todd C. Miller <[email protected]>

Only treat an unknown Defaults entry as a parse error in visudo,

not in sudo itself.

f6ce83ea768ccc2564196bb7d6e92d7665d475db authored almost 8 years ago by Todd C. Miller <[email protected]>

Instead of checking Defaults values after the fact, check them at

sudoers parse time. This makes it possible to display the file and
line number with the problem ...

8a48085184412932d2f8ead12b0e1ec1e0fd8027 authored almost 8 years ago by Todd C. Miller <[email protected]>

Refactor freeing of a member_list into free_members().

0aa216ed5519d9fefb2121d33e62af8f2abf840e authored almost 8 years ago by Todd C. Miller <[email protected]>

add_defaults() now calls sudoerserror() itself instead of the caller

assuming any error means out of member.

9de491dc277e0848b744292e2f8af14b5b76a0b8 authored almost 8 years ago by Todd C. Miller <[email protected]>

s/rval/ret/g -- old habits die hard

484b5718d89c76a4e87ea1215ffb41e23479fd62 authored almost 8 years ago by Todd C. Miller <[email protected]>

Remove inaccurate XXX comment, sudo_file_parse() sends mail on parse error.

2dbe50d1e1a4d9f91f093818a5e91746e82749b2 authored almost 8 years ago by Todd C. Miller <[email protected]>

The fix for Bug #408 broke editing of files in an include dir that

have a syntax error. Normally, visudo does not edit those files,
but if a syntax error is detect...

b5f444111e9a82000f783ee2b4f79bba72acbb6d authored almost 8 years ago by Todd C. Miller <[email protected]>

Make a copy of the current sudoers path when assigning errorfile.

Fixes a potential use after free in visudo when there is an error
in one of the include files.

5a8b60e4b4666f98cc27909dc3027757a00c7ba6 authored almost 8 years ago by Todd C. Miller <[email protected]>

sudoers_debug_register() was not setting the active debug instance

to sudoers_debug_instance when called from the I/O log plugin. This
is because it relied on sudo...

a3a545e4168f7d4dbbe458535e7656993a9e1d8e authored almost 8 years ago by Todd C. Miller <[email protected]>

Fix pasto when setting I/O plugin debug files

e8af335eb8bb0a5ab0b334cc52b6c58129f9bf50 authored almost 8 years ago by Todd C. Miller <[email protected]>

use cp instead of *cur when comparing against plugin_path

1fdcce7faf99e0ed880e5133dc32e80e371e1367 authored almost 8 years ago by Todd C. Miller <[email protected]>

In sudo_mkdir_parents() inherit the gid of / instead of using gid

0 for the first component.

9f903d3bdd61c22bae85954b30127f11352246d4 authored almost 8 years ago by Todd C. Miller <[email protected]>

We want to inherit the gid from the parent directory when not setting

permissions on intermerdiate directories.

cf707cf5f037a1931fa27deb4a7f914198b04d3a authored almost 8 years ago by Todd C. Miller <[email protected]>

Move io_mkdir_parents() to its own file and use it in ts_mkdirs().

bf62530acfca1c98f0b7ba0d2b2ec1d71d5b1457 authored almost 8 years ago by Todd C. Miller <[email protected]>

Make the I/O log file/dir permissions and owner configurable.

271a07ff009e5cda0efa2e1a8406b0c3b3390d84 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add vsyslog.lo

b058ac52999e7049b2240636258784e4f359a901 authored almost 8 years ago by Todd C. Miller <[email protected]>

sudo 1.8.19

43bf2fdb903547bdae23a466c8e550132f54efad authored almost 8 years ago by Todd C. Miller <[email protected]>

Don't try to syntax check an unrecognized Defaults value in visudo.

3423d0af7ca1e8cfd8ccc57c2a0cea333dc45192 authored almost 8 years ago by Todd C. Miller <[email protected]>

Create I/O log files with the same gid as the parent directory.

7122a733acd7677dc297b3544380306a1c89c1f7 authored almost 8 years ago by Todd C. Miller <[email protected]>

Check for sudo_ldap_result_last_search() returning NULL. This can't

happen in practice because we always call sudo_ldap_result_add_search()
first which guarantees th...

a40110756483b66ec69cd0e204d54afb62a65777 authored almost 8 years ago by Todd C. Miller <[email protected]>

Quiet a PVS-Studio warning about the spin loop when waiting for the

parent to assign us the terminal pgrp.

5a7936209ef2bfcd2d6006b1a370c597e8cddc02 authored almost 8 years ago by Todd C. Miller <[email protected]>

Fix incorrect strncmp() lengths. The check for USERNAME was only

looking at the first 5 characters (copy and paste error). The check
for SUDO_PS1 was not checkin...

dbd52527983857281423ae5c1123c67ca433b999 authored almost 8 years ago by Todd C. Miller <[email protected]>

When checking for old-style bash functions in the environment, check

for values starting with "() " (note the trailing space) rather
than "()". Bash will only treat ...

4c8988d4833f79c5179c3fb22d5e3051bb84e526 authored almost 8 years ago by Todd C. Miller <[email protected]>

Add some missing casts from uid_t/gid_t to int when printing uid/gid

values. We print these as signed so a value of -1 (no change) is
obvious. Quiets PVS-Studio war...

63adb21cea778644e39d4e176f43c9b9ef32850f authored almost 8 years ago by Todd C. Miller <[email protected]>

def_timestamp_timeout is a double so compare against 0.0 not 0 to

avoid making it appear to be an integer type.

cf5a12c09ae28a4461af2939e787e6120ecd938a authored almost 8 years ago by Todd C. Miller <[email protected]>

When checking syslog facility or priority, move the string

compare into the body of the loop and return if it matches.
If we finish the loop it means we did...

e3825cbedd351d23b4b2228143d1de2cc4370543 authored almost 8 years ago by Todd C. Miller <[email protected]>

Replace bare ";" in the body of for() loops with "continue;" for

improved readability.

fc1b4155d763ff07087b0dff0921c0d29aaec58f authored almost 8 years ago by Todd C. Miller <[email protected]>

Update from http://git.savannah.gnu.org/gitweb/?p=config.git

f9d67777551a9c841386f7680f60e08c426696ce authored almost 8 years ago by Todd C. Miller <[email protected]>

Update to libtool 2.4.6

17d8734581101f13a9fb702fb004d9bb59f2190f authored almost 8 years ago by Todd C. Miller <[email protected]>

Use a static buffer if possible.

d078450fb57307506763d4a467df0187c5ccb8bc authored almost 8 years ago by Todd C. Miller <[email protected]>

add vsyslog() for systems without it.

19c96da44d7a335e4baa19b0b70eeae8f2efdc99 authored almost 8 years ago by Todd C. Miller <[email protected]>

There are now 14 tag values, not 10. Don't bother mentioning the

number since it keeps increasing. Bug #759

6fa59b7416460811fd055bc0d6b513164e931c7c authored almost 8 years ago by Todd C. Miller <[email protected]>

Use vsyslog() if available.

c18ff022e0b9ec8e72d7887769425cbc32c3ec18 authored about 8 years ago by Todd C. Miller <[email protected]>

Add syslog_maxlen to control the max size of syslog messages.

44c2679f8347c9bdeb69765f333cd899b5bbd4b9 authored about 8 years ago by Todd C. Miller <[email protected]>

Don't generate SIGTOU when restoring the terminal modes. It doen't

make sense to suspend the process only to restore the terminal
settings since in this case the sh...

f632e0a63dd6880fc5646e0058dc0295f032591d authored about 8 years ago by Todd C. Miller <[email protected]>

The flush parameter of sudo_term_restore() is bool, not int.

9b886f6b2c7750e5747fc0f4ed8e6272fb16514e authored about 8 years ago by Todd C. Miller <[email protected]>

Add wordexp() to the list of functions wrapped by sudo_noexec.so.

afcdc285348abcf2765dc09da6fc378db4db00c2 authored about 8 years ago by Todd C. Miller <[email protected]>

Need RTLD_NEXT for wordexp() on dlopen() systems. It is missing on AIX 5.1 at least.

ddbbcb9441cf081b14c8331520114d91cdfb6b9d authored about 8 years ago by Todd C. Miller <[email protected]>

add missing guard around wordexp()

9dbd45ff66370556a8b198a6b86b9b33ee03751c authored about 8 years ago by Todd C. Miller <[email protected]>

expand on 1.8.18p1 changes

bea34c9e6d233c86c2684137fe2390828ac77e94 authored about 8 years ago by Todd C. Miller <[email protected]>

sudo 1.8.18p1

45b396598b86416cb8b54db8d49a3849a227b081 authored about 8 years ago by Todd C. Miller <[email protected]>

Fix configure check for seccomp filter on Linux

8e49ce07f677b5dfd5308a70746e1b182fa4510e authored about 8 years ago by Todd C. Miller <[email protected]>

Use a seccomp filter on Linux to disable execve(2) and execveat(2).

This still relies on LD_PRELOAD to work so it has the same issues
as the existing mether with res...

237e2f964d7a3b1d1337bfaac70a2a1910e37a41 authored about 8 years ago by Todd C. Miller <[email protected]>

regen

d24b9246a94bf52fbfa7e1916d5271e5ade554d0 authored about 8 years ago by Todd C. Miller <[email protected]>