Ecosyste.ms: OpenCollective
An open API service for software projects hosted on Open Collective.
github.com/sudo-project/sudo
Utility to execute a command as another user
https://github.com/sudo-project/sudo
b5f1d4e254c00a48caf9f28e81b4477773b88ddb authored about 8 years ago by Todd C. Miller <[email protected]>
d0ccd947d0745ebf097dd38850ad880df88f4292 authored about 8 years ago by Todd C. Miller <[email protected]>
96580de20c96255f876738b39ba4cb38c5b4141a authored about 8 years ago by Todd C. Miller <[email protected]>
90e4538c001fbe1b791a11d6a2c37607472fafe5 authored about 8 years ago by Todd C. Miller <[email protected]>
If only a sudoRunAsGroup is present, match on the invoking user
if the -g option was specified an...
1bccd1418009c469338a8908654cdac9d6015221 authored about 8 years ago by Todd C. Miller <[email protected]>
25f90b4811ef731952d61ab6c4465c655e8fac90 authored about 8 years ago by Todd C. Miller <[email protected]>
9a55c0c25d8f8f96967fa37f838eef43ffd531ee authored about 8 years ago by Todd C. Miller <[email protected]>
whether to check runas user/group instead of checking runas_pw or
runas_gr.
of just strcasecmp().
0ff95dfaaa4e1626a837e066e21ce865e9b8b98c authored about 8 years ago by Todd C. Miller <[email protected]>when -g is specified.
a750bebf105f0ea659e2066e6d77619f662882a6 authored about 8 years ago by Todd C. Miller <[email protected]>but no RunAsUser is present.
d64153967e5452905420fb502d72651c47e91079 authored about 8 years ago by Todd C. Miller <[email protected]>sudoRunAsGroup are missing.
fb32867e4c9ada399e48ed1d7c1efa65a35d3fbd authored about 8 years ago by Todd C. Miller <[email protected]>d2af18c1fadb9f0de5de489968e4f3d011e678c6 authored about 8 years ago by Todd C. Miller <[email protected]>
and sssd backends to match the sudoers file backend. Introduces
the runas_user_set() macro to im...
db7ce3c219ba651c074787b9cc280e17176f9475 authored about 8 years ago by Todd C. Miller <[email protected]>
parse errors. The parser leaks a bit on error.
50d0191de3dd4724b6be2d000acb56e3478c0097 authored about 8 years ago by Todd C. Miller <[email protected]>whitespace.
37099a6e7ddbd394e31186c220f7e6bd2be9a787 authored about 8 years ago by Todd C. Miller <[email protected]>394485f279d70d3c1832eec4efdf0fc557a426f6 authored about 8 years ago by Todd C. Miller <[email protected]>
ff753d1e16586145caafac5d2dd3dcf10517700e authored about 8 years ago by Todd C. Miller <[email protected]>
7fd6edb6dfa34329c5eba7b906b6937cd744ff59 authored about 8 years ago by Todd C. Miller <[email protected]>
f51fbfa40dec71ebd847322f61171ad37a056c2f authored about 8 years ago by Todd C. Miller <[email protected]>
def_netgroup_tuple is enabled.
ca2a1f31099bc18bb963e5211b43fbe1156f4c0f authored about 8 years ago by Todd C. Miller <[email protected]>Fix memory leak if getdomainname(2) fails and avoid using heap
garbage for the domain name matchi...
7687dd6527f467f03d418e82bfabe29f0593a821 authored about 8 years ago by Todd C. Miller <[email protected]>
533c9ce1089e28c22b3d0f456150d6fbef5d7ee9 authored about 8 years ago by Todd C. Miller <[email protected]>
86ce2f89fde01400872405b4ab9ba2674ac467c3 authored about 8 years ago by Todd C. Miller <[email protected]>
f7bd14f706e62d986f8d2831396d46a8fea65bfa authored about 8 years ago by Todd C. Miller <[email protected]>
flag is enabled. Bug #757
ead485b96b2f240a2c27064da79865b7a9339f32 authored about 8 years ago by Todd C. Miller <[email protected]>function return value. Previously, some code used "rval", some
used "ret". This standardizes on...
33fb814e8547570e10fbfa375cad3620be0d5353 authored about 8 years ago by Todd C. Miller <[email protected]>
6eb1b8c7ea28f259eae2c567bb64f3b60606f4cb authored about 8 years ago by Todd C. Miller <[email protected]>
fc7e2a98fd0dda5241555cdfdf9bcd134f7c7fa7 authored about 8 years ago by Todd C. Miller <[email protected]>
when auditing fails after successfully authenticating. Bug #756
b80309e6d83e3027cd6c6b6c83cc28df294815a4 authored about 8 years ago by Todd C. Miller <[email protected]>43084d8f918f5fcb8908b2d710c9421f8a519efc authored about 8 years ago by Todd C. Miller <[email protected]>
0181bf2c2358e6a3e81320eafcb3a9857d1b51fe authored about 8 years ago by Todd C. Miller <[email protected]>
Otherwise, stat(2) may fail on Linux when running a 32-bit sudo
on a 64-bit machine. Bug #755
bit flags.
5b86d2d298277255aaa286885942db6eb7a449cf authored about 8 years ago by Todd C. Miller <[email protected]>881814c9f9c6980c18bbfcdf1cb80c183326ffc5 authored about 8 years ago by Todd C. Miller <[email protected]>
c0db5c1234a70ef65f4cc4176ef9733729e2df4c authored about 8 years ago by Todd C. Miller <[email protected]>
2a4ba64c84bd3075ffaf8d394635238aaae3e0c1 authored about 8 years ago by Todd C. Miller <[email protected]>
line.
852fe25bc118e585e6df5407c1114a0b9a3558a2 authored about 8 years ago by Todd C. Miller <[email protected]>at the beginning of the line. Use the flag when parsing ldap.conf.
17ad75d50b84022c790ee2dce16f4a15ea4222d4 authored about 8 years ago by Todd C. Miller <[email protected]>instead of making it a fatal error. Bug #755
04340eea60a6287718432f4fd79b68c833f07cbe authored about 8 years ago by Todd C. Miller <[email protected]>c9572db75add9d6673daf11a2270f29670e0eb1a authored about 8 years ago by Todd C. Miller <[email protected]>
7a54b49fc4ef9859ccc843fafcad8f7b6fcabad4 authored about 8 years ago by Todd C. Miller <[email protected]>
8ee6f0d1de5b351ba3ec96f4f40c18a6b03e075a authored about 8 years ago by Todd C. Miller <[email protected]>
in LDAP.
dba28a945cbad42693568b94f55d7f5e2e384d6a authored about 8 years ago by Todd C. Miller <[email protected]>the command. Fixes the sudo exit value for exec(3) failure.
e147ba1fecd96e74b9357fe59e954575b3359235 authored about 8 years ago by Todd C. Miller <[email protected]>a9570e64ff58cae653c57aeb19b208aafd4dbe28 authored about 8 years ago by Todd C. Miller <[email protected]>
b610137efaad7d28626448524509db55a7f9b423 authored about 8 years ago by Todd C. Miller <[email protected]>
ENOMEM so print the warning message there rather than in main().
ef4e808103a3c550b2d7bb74b0cc9a27bc56662e authored about 8 years ago by Todd C. Miller <[email protected]>edcb137f607bf26fb5e2a37820b85102335c2288 authored about 8 years ago by Todd C. Miller <[email protected]>
7aeb11a92053cfe0aced4bce6201e71cb434a0a7 authored about 8 years ago by Todd C. Miller <[email protected]>
c57979bfb6cd468d7b2de9eedbfa151005db19e7 authored about 8 years ago by Todd C. Miller <[email protected]>
group lookups and a small number of groups in sudoers to match
groups by group ID instead of by g...
12ab1383a42cee291bf050c76a6962d6ac3b0ae7 authored about 8 years ago by Todd C. Miller <[email protected]>
is not allowed.
5b51b7f11a91172d5eb9b24a111347f8825f2b3e authored about 8 years ago by Todd C. Miller <[email protected]>7918f7e7eb9b63930a701dbca17a7ac361c72038 authored about 8 years ago by Todd C. Miller <[email protected]>
c50b835255a50ec951287cd4944da1c69148fb18 authored about 8 years ago by Todd C. Miller <[email protected]>
a246c9570adcdeca3f3b367c9719d598531654c4 authored about 8 years ago by Todd C. Miller <[email protected]>
c5cfc9584c25e5a7c6037899f03b9d0d7f375a22 authored about 8 years ago by Todd C. Miller <[email protected]>
of RedHat.
99b969979368adc28ba7bb5c35b922f40d19552d authored about 8 years ago by Todd C. Miller <[email protected]>403b904abe0ed26c321035fd0bd79d846e710a7f authored about 8 years ago by Todd C. Miller <[email protected]>
time. Problem reported by Radovan Sroka of RedHat.
7625f0684172a960d4a3e6697f0ff561ac6fe902 authored about 8 years ago by Todd C. Miller <[email protected]>d54148bbdd515ae664f75aab0ee1ce13fd70ba6d authored about 8 years ago by Todd C. Miller <[email protected]>
5a432b9612625e170ca2d371feef2518e4b82565 authored about 8 years ago by Todd C. Miller <[email protected]>
8d89d8395f2e7b6558ab86e34a0fa42c9414a171 authored about 8 years ago by Todd C. Miller <[email protected]>
ba91ebb14befa5aad77c8c0e08eeee4977e6fb8c authored about 8 years ago by Todd C. Miller <[email protected]>
8f9869df7ebe07d0bcc8a560c484c7ef80120588 authored about 8 years ago by Todd C. Miller <[email protected]>
Also send the warning in mail if possible.
d8a65715d6cb5ccc5417888141464d9eb305620f authored about 8 years ago by Todd C. Miller <[email protected]>itself.
3e4c7eed3178bbf6c8c326ba3ecfd762ff2019cd authored about 8 years ago by Todd C. Miller <[email protected]>configurable. File log failures are ignored by default for consistency
with syslog. Audit error...
mail) if do_logfile() fails. Bug #751
9ccd260842d246261fa5c29b7a6f56d2811a75d9 authored about 8 years ago by Todd C. Miller <[email protected]>group name checks in user_in_group(). We now call sudo_get_gidlist()
only when the group name in...
resolve group IDs -> names when needed. If the sudoers file doesn't
contain groups we will no lo...
store_list() where it is actually needed. For the others, a NULL
value indicates the setting was...
of set_default_entry().
8c2b6fb34e1aecdb56d5fc97f2300a197c5e5ecb authored about 8 years ago by Todd C. Miller <[email protected]>1ca261c30599375829fdf89c51ae984210755074 authored about 8 years ago by Todd C. Miller <[email protected]>
25f39ff31d2e3e86fe66df520142dd48c40e64f8 authored about 8 years ago by Todd C. Miller <[email protected]>
mostly just calls to store_foo() functions. Avoids a lot of
duplicated error checking and silenc...
9051c92cb381b93d92bc74d349690f6f3d1f0773 authored about 8 years ago by Todd C. Miller <[email protected]>
Found by cppcheck.
f17f9ba9b2827a520db270ef5d7f9f5ec4b1bdb0 authored about 8 years ago by Todd C. Miller <[email protected]>Coverity CID 141832
7ac77b094cc95735bec10de078b5b304b5d075fa authored about 8 years ago by Todd C. Miller <[email protected]>we now set runas_default early there is no need to call update_defaults
with SETDEF_RUNAS after s...
56ead73886cb59d3a3f2b4d720a40040d91b6696 authored about 8 years ago by Todd C. Miller <[email protected]>
directly to /etc or /var. We must install in /private/{etc,var}
instead.
d17bc132de01fd56574f4e9cc36a7de412659361 authored about 8 years ago by Todd C. Miller <[email protected]>
ac20b8ddff8d62becc47dc3d7c94cb8f8e300f92 authored about 8 years ago by Todd C. Miller <[email protected]>
result, we no longer need to include gram.h in the LDAP and SSSD
backends.
the entire defaults list, just defer running the callbacks. Otherwise,
if the last early default...
store_foo() functions.
e5a7891ec88887e7b88a69e0d8128b75fba76429 authored about 8 years ago by Todd C. Miller <[email protected]>14c9d203e892e74745505acd7a1d2323fd42cfde authored about 8 years ago by Todd C. Miller <[email protected]>
make jobs in parallel, up to the number of cpus/cores.
820934082fb057228ba2a0543087ab54de53ce3c authored about 8 years ago by Todd C. Miller <[email protected]>54efa54c0e732c3af964b7bc809cb309a2d53d7d authored about 8 years ago by Todd C. Miller <[email protected]>
if present. This allows things like :Defaults:username editor=foo"
to work when visudo is run vi...
4352bb9ca949cebc79110f0eee610c006f83e2fe authored about 8 years ago by Todd C. Miller <[email protected]>
Add a check for unhandled wait status (also should never happen).
383debee9f52c4b96b727a9c0ae7237390a66eec authored about 8 years ago by Todd C. Miller <[email protected]>an entry in struct early_default is set or not. Add a "set" member
and use that instead.
waitpid() will return 0 when the command is resumed after being
suspended, which we were treating...