1 2009-07-18 09:55 millert
3 * toke.c, toke.l: Fix expansion of %h in #include names. Fixes
6 2009-07-12 17:17 millert
8 * mkdefaults: If no arg assume def_data.in
10 2009-07-11 21:27 millert
12 * README, WHATSNEW: Update for 1.7.2
14 2009-07-11 21:12 millert
18 2009-06-30 08:41 millert
20 * sudoers.cat, sudoers.man.in, sudoers.pod: Add missing single
21 quotes around a colon in Runas_Spec definition. From Elias
24 2009-06-29 09:36 millert
26 * redblack.c: In rbrepair, re-color the root or the first non-block
27 node we find to be black. Re-coloring the root is probably not
28 needed but won't hurt.
30 2009-06-29 09:35 millert
32 * sudo.cat, sudoers.cat, sudo.man.in, sudoers.man.in: regen
34 2009-06-26 16:40 millert
36 * redblack.c: When repairing the tree, don't touch the root node.
38 2009-06-25 08:44 millert
40 * set_perms.c: Protect call to setegid in runas_setup with #ifdef
41 HAVE_SETEUID. Reported by Josef Schmid.
43 2009-06-23 14:29 millert
45 * sudoers.pod: Document that we accept env_pam-style environment
48 2009-06-23 14:24 millert
50 * env.c: Adapt to accept pam_env-style /etc/environment which
51 allows shell-style lines such as: export EDITOR="/usr/bin/vi"
53 2009-06-23 12:22 millert
55 * sudoers.pod: Make it clear that env_delete only works when
56 !env_reset. From Loïc Minier
58 2009-06-15 17:19 millert
60 * sudo.pod, sudoers.pod: Add non-unix group bits, adapted from
63 2009-06-15 17:18 millert
65 * Makefile.in: build the .cat page in the current working dir, not
68 2009-06-15 09:10 millert
70 * env.c: Return EINVAL in setenv() if var is NULL or the empty
71 string to match glibc behavior.
73 2009-06-13 16:52 millert
75 * configure, configure.in: Use AS_HELP_STRING for AC_ARG_WITH and
78 2009-06-11 16:29 millert
80 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
81 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
84 2009-06-09 10:08 millert
86 * INSTALL: Document --with-libvas and --with-libvas-rpath
88 2009-05-29 09:43 millert
90 * ldap.c, sudoers.ldap.pod: For netscape-derived LDAP SDKs the cert
91 and key paths may be a directory or a file. However, version 5.0
92 of the SDK only seems to support using a directory. If
93 ldapssl_clientauth_init fails and the cert or key paths look like
94 they could be files, strip off the last path element and try
97 2009-05-29 09:40 millert
99 * Makefile.in: Add non-Unix group .o to COMMON_OBJS and substitute
102 2009-05-26 20:49 millert
104 * configure, configure.in, match.c, sudo.c, vasgroups.c: Update
105 non-Unix group support from Quest, as reworked by me.
107 2009-05-26 20:47 millert
111 2009-05-26 20:46 millert
113 * toke.l: Add support for escaped hex chars in names, e.g. \x20 for
116 2009-05-25 08:02 millert
118 * LICENSE, Makefile.in, aclocal.m4, alias.c, check.c, env.c,
119 fileops.c, glob.c, gram.y, interfaces.c, lbuf.c, ldap.c,
120 logging.c, logging.h, match.c, parse.c, parse.h, pathnames.h.in,
121 pwutil.c, set_perms.c, sudo.c, sudo.h, sudo.pod, sudo_nss.c,
122 sudo_nss.h, sudo_usage.h.in, sudoers.ldap.pod, sudoers.pod,
123 testsudoers.c, tgetpass.c, toke.l, visudo.c, auth/aix_auth.c,
124 auth/pam.c, auth/sudo_auth.c, auth/sudo_auth.h: Update copyright
127 2009-05-24 08:33 millert
129 * interfaces.c, lbuf.c: Minor fixes for Minix-3
131 2009-05-22 06:37 millert
133 * set_perms.c: Handle getgroups() returning 0. Also add missing
134 check for HAVE_GETGROUPS.
136 2009-05-19 17:24 millert
138 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
139 version.h, visudo.c: Replace version.h with PACKAGE_VERSION set
140 via AC_INIT in configure.
142 2009-05-18 06:33 millert
144 * set_perms.c: Remove group setting code in setusercontext case, we
145 will do it ourselves later on in runas_setup. Set the gid after
146 initgroups/setgroups is called, since on Mac OS X it seems to
149 2009-05-17 18:19 millert
151 * LICENSE, Makefile.in, config.h.in, match.c, nonunix.h, sudo.c,
152 vasgroups.c: Initial bits of non-unix group support using Quest
153 Authentication Services
155 2009-05-17 16:52 millert
157 * toke.c, toke.l: Accept %:foo as a non-Unix group
159 2009-05-17 16:22 millert
161 * toke.c, toke.l: Allow user/group to be double quoted in the case
162 of non-Unix groups which contain spaces.
164 2009-05-11 12:47 millert
166 * match.c: Don't allow the user to specify the default runas user
167 if their sudoers entry only allows them to run as a group.
169 2009-05-10 07:59 millert
171 * sudo.c: Must call audit_success before we change uids.
173 2009-05-10 07:52 millert
175 * logging.c, set_perms.c, sudo.h, testsudoers.c: Add option for
176 set_perm to not exit on failure and use this in the logging
179 2009-05-10 07:33 millert
181 * parse.c: In -l mode, if the user is only allowed to run as a
182 group, display the user's name, not root's before the allowed
185 2009-05-09 21:00 millert
187 * sudo.c: Fix -g mode, broken by rev 1.503 which had the side
188 effect of setting the runas user to root unilaterally.
190 2009-05-08 16:19 millert
192 * fileops.c: When unlocking a file with fcntl, use F_SETLK, not
195 2009-05-08 13:07 millert
197 * pwutil.c: Only cache by the method we fetched for pwd and grp
198 lookups. Previously we cached both by namd and id but this can
199 cause problems for entries that share the same id. Also add more
200 info in the error message in case the insert fails (which should
203 2009-04-30 15:04 millert
205 * sudoers.pod: Add a clarification from Nick Sieger
207 2009-04-25 12:49 millert
209 * env.c: Inline the setting of the environment string.
211 2009-04-24 14:53 millert
213 * env.c: setenv(3) in Linux treats a NUL value as the empty string
214 setenv(3) in BSD doesn't return an error if the name has '=' in
215 it, it just treats the '=' as end of string.
217 2009-04-22 16:32 millert
219 * toke.c, toke.l: Not all systems have d_namlen
221 2009-04-20 13:53 millert
223 * sudoers.pod: Fix up some pod2html issues.
225 2009-04-19 14:09 millert
227 * interfaces.c: Check for NULL ifa_addr and ifa_netmask. Adapted
228 from a diff from Quest Software.
230 2009-04-19 09:01 millert
232 * sudoers.pod: Ignore files ending in '~' in sudo.d (emacs backup
235 2009-04-19 08:56 millert
237 * toke.c, toke.l: Ignore files ending in '~' in sudo.d (emacs
240 2009-04-18 19:37 millert
242 * sudoers.cat, sudoers.man.in, sudoers.pod, toke.c, toke.l: For
243 #includedir, ignore any file containing a dot
245 2009-04-18 19:25 millert
247 * Makefile.in, version.h: Bump version
249 2009-04-18 19:25 millert
251 * gram.c, gram.y, parse.c, parse.h, sudo.c, sudo.h, sudoers.cat,
252 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, toke.l,
253 visudo.c: Implement #includedir directive. Files in an
254 includedir are not edited by visudo unless they contain a syntax
257 2009-04-18 12:06 millert
261 2009-04-18 10:27 millert
263 * WHATSNEW: Forgot umask_override
265 2009-04-18 09:25 millert
267 * ChangeLog, TODO: sync
269 2009-04-16 08:22 millert
271 * visudo.c: Rewind stream if we fdopen sudoers since it may not be
272 at the beginning. Set the keepopen flag on already-open files
273 too so the lexer doesn't close them out from under us.
275 2009-04-16 08:18 millert
277 * visudo.c: Print the proper file name when there is a parse error
280 2009-04-11 07:45 millert
284 2009-04-10 16:59 millert
286 * configure, configure.in: Fix a warning when --without-ldap is
289 2009-04-05 12:25 millert
291 * alias.c, parse.h, visudo.c: Store aliases that we remove during
292 check_aliases in a freelist and free them at the end so we don't
295 2009-03-28 09:30 millert
297 * visudo.c: Check aliases in -c mode too.
299 2009-03-28 09:09 millert
301 * alias.c, parse.h, visudo.c: Make alias_remove return the alias
302 struct instead of freeing it directly. Fixes a use after free in
303 alias_remove_recursive, the only consumer.
305 2009-03-28 09:07 millert
307 * alias.c, match.c, parse.c, parse.h, visudo.c: Rename find_alias
308 -> alias_find for consistency.
310 2009-03-27 19:29 millert
312 * visudo.c: When checking for unused aliases, recurse if the alias
313 points to another alias.
315 2009-03-16 12:11 millert
317 * ldap.c: Back out rev 1.105 for now. Real ldapux_client.conf
318 support will be done later after some refactoring.
320 2009-03-14 12:02 millert
322 * ldap.c: Treat ldap_hostport the same as "host" for ldapux.
324 2009-03-13 21:04 millert
326 * configure, configure.in: Only check for
327 ldap_sasl_interactive_bind_s if we can find sasl.h. Fixes
328 compilation with ldapux.
330 2009-03-11 20:03 millert
332 * fileops.c: fix char subscript
334 2009-03-11 19:19 millert
336 * Makefile.in: remove errant carriage returns
338 2009-03-11 19:01 millert
340 * audit.c, env.c: fix K&R compilation
342 2009-03-11 12:12 millert
344 * sudo.man.in, sudo.cat, sudoers.cat, sudoers.ldap.cat,
345 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
348 2009-03-10 17:34 millert
350 * config.h.in: Add missing HAVE_BSM_AUDIT
352 2009-03-10 17:21 millert
354 * WHATSNEW: Add 1.7.1 features
356 2009-03-10 17:10 millert
358 * INSTALL: Mention --with-netsvc
360 2009-03-10 17:08 millert
362 * sudoers.ldap.pod: Document netsvc.conf support
364 2009-03-10 16:44 millert
366 * configure, configure.in, pathnames.h.in, sudo.c, sudo_nss.c,
367 sudo_nss.h: Add support for AIX netsvc.conf (like nsswitch.conf).
369 2009-03-08 16:57 millert
371 * configure, config.h.in, configure.in, env.c: Add
372 --enable-env-debug flag to enable environment sanity checks.
374 2009-03-08 11:51 millert
376 * sudoers.ldap.pod, sudoers.pod: Work around some pod2html issue.
378 2009-03-07 17:10 millert
380 * env.c: Only sync environ for putenv, setenv, and unsetenv. We
381 need to make sure that sudo_putenv and sudo_setenv only modify
382 env.envp, not environ.
384 2009-03-02 14:19 millert
386 * env.c: Really fix UNSETENV_VOID
388 2009-03-02 14:18 millert
390 * env.c: Fix unsetenv when UNSETENV_VOID
392 2009-03-02 08:00 millert
394 * aclocal.m4, configure: Fix SUDO_FUNC_PUTENV_CONST
396 2009-03-02 07:36 millert
398 * ldap.c: tivoli-based ldap does not have ldapssl_err2string
400 2009-03-02 07:30 millert
404 2009-03-01 16:20 millert
406 * config.h.in, configure, configure.in, ldap.c: Add support for
407 Tivoli-based LDAP start TLS as seen in AIX. Untested.
409 2009-03-01 08:52 millert
411 * env.c: Add sanity checks for setenv/unsetenv
413 2009-02-28 20:17 millert
415 * Makefile.in: Include bsm_audit.h in the tarball
417 2009-02-28 20:00 millert
419 * Makefile.in, version.h: bump version for sudo 1.7.1
421 2009-02-28 19:58 millert
423 * aclocal.m4, config.h.in, configure, configure.in, env.c, ldap.c,
424 sudo.h, auth/aix_auth.c: Replace sudo_setenv/sudo_unsetenv with
425 calls to setenv/unsetenv and provide our own
426 setenv/unsetenv/putenv that operates on own env pointer. Make
427 sync_env() inline in setenv/unsetenv/putenv functions.
429 2009-02-25 07:33 millert
431 * sudo.c: Make "sudoedit -h" work as expected
433 2009-02-25 07:21 millert
435 * auth/pam.c: Make sure def_prompt is always defined. This is a
436 workaround for pam configs that prompt for a password in the
437 session but don't have an auth line. A better fix is to expand
438 the sudo prompt earlier and set def_prompt to that when
441 2009-02-25 06:17 millert
443 * sudo.pod: Mention that the helper for -A may be graphical.
445 2009-02-25 06:16 millert
447 * TROUBLESHOOTING: Document what happens if there is no tty.
449 2009-02-25 06:05 millert
451 * sudo.c: cosmetic changes
453 2009-02-25 05:47 millert
455 * term.c: Fix term_restore
457 2009-02-24 20:23 millert
459 * sudo.c: Fix "sudo -k" with no other args
461 2009-02-24 08:04 millert
463 * check.c, sudo.c, sudo.pod, sudo_usage.h.in: Allow the -k flag to
464 be specified in conjunction with a command or another option that
465 may require authentication.
467 2009-02-23 09:18 millert
469 * configure, configure.in: Remove unneeded AC_CANONICAL_TARGET;
470 from Diego E. 'Flameeyes'
472 2009-02-23 09:15 millert
474 * Makefile.in: Parallel make fix. From Diego E. 'Flameeyes'
476 2009-02-21 17:03 millert
478 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod:
479 Implement umask_override
481 2009-02-21 16:51 millert
485 2009-02-21 16:49 millert
487 * sudoers.pod, toke.l, visudo.c: Implement %h escape in sudoers
490 2009-02-21 08:43 millert
492 * audit.c: Need to include compat.h
494 2009-02-21 08:37 millert
496 * Makefile.in, audit.c, bsm_audit.c, bsm_audit.h, logging.h,
497 sudo.c: Make audit_success and audit_failure generic functions in
498 preparation for integrating linux audit support.
500 2009-02-21 08:06 millert
502 * term.c: remove duplicate include
504 2009-02-20 16:13 millert
506 * bsm_audit.c: Add missing include
508 2009-02-20 15:55 millert
510 * sudo.c: May need to update the runas user after parsing
511 command-based defaults.
513 2009-02-18 10:53 millert
515 * glob.c: Add missing pair of braces introduced with character
518 2009-02-15 15:53 millert
520 * def_data.c, def_data.h, def_data.in, sudoers.pod, tgetpass.c:
521 Rename pwstars to pwfeedback
523 2009-02-10 20:25 millert
525 * bsm_audit.c, bsm_audit.h: Add const to make MacOS happy.
527 2009-02-10 20:18 millert
529 * Makefile.in, bsm_audit.c, bsm_audit.h, configure, configure.in,
530 sudo.c, auth/sudo_auth.c: Add bsm audit support from Christian
533 2009-02-10 19:58 millert
535 * term.c: This is new code, no DARPA notice.
537 2009-02-10 14:04 millert
539 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Rename
540 simple_glob -> fast_glob
542 2009-02-10 09:39 millert
544 * match.c: g/c unused var
546 2009-02-10 08:09 millert
548 * def_data.c, def_data.h, def_data.in, match.c, sudoers.pod: Add
549 simple_glob option to use fnmatch() instead of glob(). This is
550 useful when you need to specify patterns that reference network
553 2009-02-10 07:58 millert
555 * tgetpass.c: add term_* proto
557 2009-02-10 07:51 millert
559 * sudoers.pod: mention glob()
561 2009-02-09 07:59 millert
563 * tgetpass.c: Delete any pwstars we wrote after the user hits
564 return. That way there is no record on screen as to the user's
567 2009-02-08 10:27 millert
569 * term.c: Move terminal setting bits from tgetpass.c to term.c
571 2009-02-07 19:50 millert
573 * Makefile.in, def_data.c, def_data.h, def_data.in, sudoers.pod,
574 tgetpass.c: Add pwstars sudoers option that causes sudo to print
575 a star every time the user presses a key.
577 2009-02-03 10:10 millert
579 * Makefile.in: Fix up F<> brokenness for visudo.man.in and
582 2009-01-27 11:54 millert
584 * ldap.c: For ldap_search_ext_s() the sizelimit param should be 0,
585 not -1, to indicate no limit. From Mark Janssen.
587 2009-01-17 17:36 millert
589 * toke.c, toke.l: Comments that begin with #- should not be parsed
592 2009-01-08 19:13 millert
594 * sudo.c: Do not try to set the close on exec flag if we didn't
595 actually open sudoers.
597 2008-12-19 12:40 millert
601 2008-12-14 17:40 millert
605 2008-12-09 18:48 millert
607 * auth/pam.c: Return PAM_AUTH_ERR instead of PAM_CONV_ERR if user
608 enters ^C at the password prompt.
610 2008-12-09 16:13 millert
612 * configure.in, configure: Don't try to build sudo_noexec.so on
613 HP-UX with the bundled compiler as it cannot generate shared
616 2008-12-09 15:55 millert
618 * glob.c, lbuf.c, tgetpass.c, emul/charclass.h: K&R compilation
621 2008-12-09 08:49 millert
623 * parse.c: Use tq_foreach_fwd when checking pseudo-commands to make
624 it clear that we are not short-circuiting on last match. When
625 pwcheck is 'all', initialize nopass to TRUE and override it with
626 the first non-TRUE entry.
628 2008-12-08 10:02 millert
630 * parse.c: Do not short circuit pseudo commands when we get a match
631 since, depending on the settings, we may need to examine all
634 2008-12-03 15:58 millert
636 * sudoers.cat, sudoers.man.in: regen
638 2008-12-03 15:57 millert
640 * sudoers.pod: hostnames may also contain wildcards
642 2008-12-03 15:40 millert
644 * Makefile.in: remove stamp-* files and linux core files in clean
647 2008-12-02 12:30 millert
649 * config.h.in, configure, configure.in, auth/sudo_auth.h: Use
650 HAVE_SIA_SES_INIT instead of HAVE_SIA for Digital UNIX
652 2008-11-26 15:10 millert
654 * configure, configure.in: correctly enable SIA on Digital UNIX
656 2008-11-25 20:06 millert
660 2008-11-25 20:05 millert
664 2008-11-25 12:01 millert
666 * check.c, sudo.h, tgetpass.c: Even if neither stdin nor stdout are
667 ttys we may still have /dev/tty available to us.
669 2008-11-24 10:09 millert
671 * sudoers.cat, sudoers.man.in: regen
673 2008-11-24 10:08 millert
675 * sudoers.pod: fix typos; Markus Lude
677 2008-11-24 07:08 millert
681 2008-11-23 19:42 millert
685 2008-11-23 19:41 millert
687 * toke.l: Fix matching of a line that only consists of a comment
690 2008-11-22 13:17 millert
692 * auth/pam.c: MacOS pam will retry conversation function if it
693 fails so just treat ^C as an empty password.
695 2008-11-22 10:12 millert
697 * visudo.c: When checking for alias use, also check defaults
700 2008-11-22 10:01 millert
702 * redblack.c: unused var
704 2008-11-22 09:42 millert
706 * redblack.c: Replace my rbdelete with Emin's version (which
709 2008-11-19 12:01 millert
711 * testsudoers.c: malloc debugging
713 2008-11-19 07:37 millert
715 * visudo.c: malloc options in devel mode for visudo too
717 2008-11-18 10:57 millert
719 * sudo.c: fix compilation on non-C99; from Theo
721 2008-11-18 10:50 millert
723 * visudo.c: fix check_aliases
725 2008-11-18 08:29 millert
727 * alias.c: when destroying an alias, free the correct data pointer
729 2008-11-18 07:54 millert
731 * auth/sudo_auth.h: add proto for aixauth_cleanup; from Dale King
733 2008-11-15 13:34 millert
735 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
738 2008-11-15 13:34 millert
740 * sudo.pod, sudoers.pod, visudo.pod: standardize on the term
741 'option' for command line options (not flag)
743 2008-11-14 06:18 millert
745 * INSTALL: Add note on configuring HP-UX pam
747 2008-11-11 13:28 millert
749 * check.c, sudo.c: Move tty checks into check_user() so we only do
750 them if we actually need a password.
752 2008-11-11 12:34 millert
754 * sudo.c: Don't error out if no tty or askpass unless we actually
755 need to authenticate.
757 2008-11-10 15:20 millert
761 2008-11-10 08:07 millert
763 * pathnames.h.in, sudo.c: s/overriden/overridden/; from Tobias
766 2008-11-09 15:18 millert
768 * visudo.c, WHATSNEW: check sudoers owner and mode in strict mode
770 2008-11-09 09:15 millert
772 * gram.c, toke.c: regen
774 2008-11-09 09:13 millert
776 * alias.c, alloc.c, closefrom.c, compat.h, defaults.c, defaults.h,
777 env.c, fileops.c, gettime.c, gram.y, ins_csops.h, insults.h,
778 interfaces.c, interfaces.h, lbuf.c, license.pod, list.c,
779 logging.c, logging.h, parse.c, parse.h, pwutil.c, redblack.c,
780 redblack.h, snprintf.c, sudo.c, sudo.pod, sudo_edit.c,
781 sudo_nss.h, testsudoers.c, toke.l, tsgetgrpw.c, utimes.c,
782 version.h, visudo.c, zero_bytes.c, LICENSE, sudoers.pod,
783 visudo.pod, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
784 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
785 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h,
786 sudo.man.in, sudoers.man.in, visudo.man.in: Update copyright
789 2008-11-09 08:48 millert
791 * fnmatch.c, glob.c, emul/charclass.h: add my copyright
793 2008-11-08 10:40 millert
795 * toke.c, toke.l: The loop in fill_cmnd() was going one byte too
796 far past the end, resulting in a NUL being written immediately
797 after the buffer end.
799 2008-11-08 10:31 millert
801 * UPGRADE, WHATSNEW: add sections on tgetpass changes
803 2008-11-08 10:30 millert
805 * tgetpass.c: Treat EOF w/o newline as an error.
807 2008-11-07 17:42 millert
809 * parse.c: Fix "sudo -v" when NOPASSWD is set.
811 2008-11-07 12:45 millert
813 * auth/: bsdauth.c, fwtk.c, pam.c, sudo_auth.c, sudo_auth.h: No
814 longer treat an empty password at the prompt as special. To quit
815 out of sudo you now need to hit ^C at the password prompt.
817 2008-11-06 21:07 millert
819 * sudoers.cat, sudoers.man.in: regen
821 2008-11-06 21:06 millert
823 * def_data.c, def_data.h, def_data.in, sudo.c, sudoers.pod: Sudo
824 will now refuse to run if no tty is present unless the new
825 visiblepw sudoers flag is set.
827 2008-11-05 19:42 millert
829 * aix.c: just use RLIM_INFINITY for RLIM_SAVED_MAX if
830 RLIM_SAVED_MAX not defined
832 2008-11-05 19:40 millert
834 * aix.c: fix fallback value for RLIM_SAVED_MAX
836 2008-11-05 19:14 millert
838 * auth/: aix_auth.c, sudo_auth.h: Move clearing of AUTHSTATE into
841 2008-11-05 19:08 millert
843 * env.c, auth/aix_auth.c: Unset AUTHSTATE after calling
844 authenticate() as it may not be correct for the user we are
845 running the command as.
847 2008-11-05 19:05 millert
849 * isblank.c: Add isblank() function for systems without it. Needed
850 for POSIX character class matching in fnmatch.c and glob.c.
852 2008-11-05 11:02 millert
854 * TROUBLESHOOTING: expound on sudo and cd
856 2008-11-04 15:52 millert
860 2008-11-04 15:46 millert
862 * sudoers.cat, sudoers.man.in: regen
864 2008-11-04 15:45 millert
866 * sudoers.pod: mention defauts parse order
868 2008-11-03 13:19 millert
870 * Makefile.in, aclocal.m4, compat.h, configure: Add isblank()
871 function for systems without it. Needed for POSIX character
872 class matching in fnmatch.c and glob.c.
874 2008-11-03 12:54 millert
876 * Makefile.in: add emul/charclass.h to HDRS
878 2008-11-02 14:08 millert
882 2008-11-02 14:06 millert
884 * parse.c, defaults.c, testsudoers.c, visudo.c: Move
885 update_defaults into defaults.c and call it properly from visudo
888 2008-11-02 09:51 millert
890 * defaults.c, interfaces.c, pwutil.c, sudo.c, sudo_edit.c,
891 tgetpass.c, tsgetgrpw.c: use zero_bytes() instead of memset() for
894 2008-11-02 09:45 millert
896 * logging.c, mon_systrace.c, parse.c, sudo.c, sudo_edit.c,
897 tgetpass.c, visudo.c: Zero out sigaction_t before use in case it
898 has non-standard entries.
900 2008-11-02 09:35 millert
904 2008-11-02 09:28 millert
906 * match.c: Short circuit glob() checks if basename(pattern) !=
907 basename(command). Refactor code that checks for a command in a
908 directory and use it in the glob case if the resolved pattern
911 2008-11-01 09:20 millert
913 * defaults.h, parse.c, sudo.c, testsudoers.c, visudo.c: Defer
914 setting runas defaults until after runaspw/gr is setup.
916 2008-10-29 13:26 millert
918 * match.c, sudo.c, testsudoers.c: Use MAXHOSTNAMELEN+1 when
919 allocating host/domain name since some systems do not include
920 space for the NUL in the size. Also manually NUL-terminate
921 buffer from gethostname() since POSIX is wishy-washy on this.
923 2008-10-26 17:13 millert
925 * sudo.c, sudoers.pod: When setting the umask, use the union of the
926 user's umask and the default value set in sudoers so that we
927 never lower the user's umask when running a command.
929 2008-10-26 16:43 millert
931 * sudo.c: Don't try to read from a zero-length sudoers file.
932 Remove the bogus Solaris work-around for EAGAIN. Since we now
933 use fgetc() it should not be a problem.
935 2008-10-25 09:22 millert
937 * parse.c: In update_defaults() check the return value of
938 user*_matches against ALLOW so we don't inadvertantly match on
941 2008-10-24 09:52 millert
943 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
944 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
945 regen man pages; no more hyphenation
947 2008-10-24 09:49 millert
949 * sudo.c: Don't error out on a zero-length sudoers file. With the
950 advent of #include the user could create a situation where sudo
953 2008-10-23 12:06 millert
955 * config.h.in, configure, configure.in, auth/kerb5.c: Newer heimdal
956 has 2-argument krb5_get_init_creds_opt_free() like MIT krb5.
957 Really old heimdal has no krb5_get_init_creds_opt_alloc() at all.
958 Add configure tests to handle all the cases.
960 2008-10-08 17:28 millert
962 * sudo.pod: resort ENVIRONMENT
964 2008-10-08 17:09 millert
966 * sudoers.pod: document sudoers_locale
968 2008-10-08 16:56 millert
970 * sudo.pod, sudo_edit.c: add SUDO_EDITOR variable that sudoedit
971 uses in preference to VISUAL or EDITOR
973 2008-10-08 14:27 millert
975 * toke.c, toke.l: In fill_cmnd(), collapse any escaped
976 sudo-specific characters. Allows character classes to be used in
979 2008-10-03 16:02 millert
981 * lbuf.c: fix typo in non-C89 function declaration
983 2008-10-03 15:56 millert
985 * sudoers.pod: Mention POSIX characters classes now that out
986 fnmatch() and glob() support them.
988 2008-10-03 15:55 millert
990 * sample.sudoers, sudoers.pod: Replace [A-z] (which won't match in
991 UTF8) with [A-Za-z] which is locale agnostic.
993 2008-10-03 10:02 millert
995 * parse.h: use __signed char if we are going to assign a negative
996 value since on Power, char is unsigned by default
998 2008-10-03 09:59 millert
1000 * configure, configure.in, config.h.in: Add tests for __signed char
1003 2008-10-03 09:19 millert
1005 * aix.c: Fix AIX limit setting. getuserattr() returns values in
1006 disk blocks rather than bytes. The default hard stack size in
1007 newer AIX is RLIM_SAVED_MAX. From Dale King.
1009 2008-09-26 17:13 millert
1011 * fnmatch.c, glob.c, emul/charclass.h: Add character class support
1012 to included glob(3) and fnmatch(3).
1014 2008-09-16 08:28 millert
1016 * emul/fnmatch.h: Remove UCB advertising clause and some
1017 compatibility defines.
1019 2008-09-14 16:07 millert
1021 * sudo_edit.c: Check EDITOR/VISUAL to make sure sudoedit is not
1022 re-invoking itself or sudo. This allows one to set EDITOR to
1023 sudoedit without getting into an infinite loop of sudoedit
1024 running itself until the path gets too big.
1026 2008-09-13 20:45 millert
1028 * def_data.c, def_data.h, def_data.in, defaults.c, sudo.c: Add
1029 sudoers_locale Defaults option to override the default sudoers
1032 2008-09-13 14:09 millert
1034 * sudo.c: Set locale to system default except for during sudoers
1037 2008-09-12 09:34 millert
1039 * match.c: Redo change in 1.34 to use pointer arithmetic.
1041 2008-09-11 07:06 millert
1043 * match.c: Fix a dereference (read) of a freed pointer. Reported
1044 by Patrick Williams.
1046 2008-08-23 19:09 millert
1048 * sudo.c: Set locale to "C" to avoid interpretation issues with
1049 character ranges in sudoers. May want to make the locale a
1050 sudoers option in the future.
1052 2008-08-20 07:45 millert
1054 * config.h.in: we no longer use setproctitle
1056 2008-08-20 07:41 millert
1058 * sudo.h: remove #if 1
1060 2008-08-20 07:40 millert
1062 * LICENSE, mkstemp.c: Use my replacement mkstemp() from the mktemp
1065 2008-07-12 08:53 millert
1067 * gram.c: regen with yacc skeleton bug fixed
1069 2008-07-12 08:48 millert
1071 * sudoers.pod: Remove duplicate "as root". From Martin Toft.
1073 2008-07-02 06:27 millert
1075 * pwutil.c, sudo.c, testsudoers.c, sudo.h: Flesh out the fake
1076 passwd entry used for running commands as a uid not listed in the
1077 passwd database. Fixes an issue with some PAM modules.
1079 2008-07-01 07:57 millert
1081 * sudo.c: Error out in -i mode if the user has no shell. This can
1082 happen when running commands as a uid with no password entry.
1084 2008-06-26 07:49 millert
1086 * toke.c, toke.l: Better fix for line continuation inside double
1087 quotes. Now accepts whitespace between the backslash and the
1088 newline like the main lexer.
1090 2008-06-25 14:31 millert
1092 * toke.c, toke.l: Fix line continuation in strings. It was only
1093 being honored if preceded by whitespace.
1095 2008-06-22 16:19 millert
1097 * config.h.in, configure, configure.in, logging.c: Replace the
1098 double fork with a fork + daemonize.
1100 2008-06-21 14:59 millert
1102 * env.c, sudo.c: The -i flag should imply env_reset. This got
1103 broken in sudo 1.6.9.
1105 2008-06-20 20:34 millert
1107 * logging.c, sudo.c, sudo_edit.c, visudo.c: Change how the mailer
1108 is waited for. Instead of having a SIGCHLD handler, use the
1109 double fork trick to orphan the child that opens the pipe to
1110 sendmail. Fixes a problem running su on some Linux distros.
1112 2008-06-20 17:16 millert
1114 * configure, configure.in: Fix configure test for dirfd() on Linux
1115 where DIR is opaque.
1117 2008-06-17 17:42 millert
1119 * tgetpass.c: Get rid of the QNX TCSAFLUSH -> TCSADRAIN hack. If
1120 QNX still has this problem we'll need to revisit this again.
1122 2008-06-10 21:13 millert
1124 * logging.c: Ignore SIGPIPE instead of blocking it when piping to
1125 the mailer. If we only block the signal it may be delivered
1126 later when we unblock. Also, there is no need to block SIGCHLD
1127 since we no longer do the double fork. The normal SIGCHLD
1128 handler is sufficient.
1130 2008-06-08 17:37 millert
1132 * configure, configure.in: Add description for NO_PAM_SESSION, from
1135 2008-06-06 09:36 millert
1137 * sudo.cat, sudo.man.in, sudo.pod: Fix typos in -i usage
1139 2008-05-18 13:54 millert
1141 * configure, configure.in: Redo the test for dgettext() in a way
1142 that hopefully will work around the libintl_dgettext() undefined
1145 2008-05-11 09:21 millert
1147 * schema.ActiveDirectory: change filename in comment
1149 2008-05-10 09:18 millert
1151 * Makefile.in, README.LDAP, sudoers.ldap.cat, sudoers.ldap.man.in,
1152 sudoers.ldap.pod: Reference schema.ActiveDirectory
1154 2008-05-09 14:49 millert
1156 * schema.OpenLDAP, schema.iPlanet: Mark sudoRunAs as deprecated.
1158 2008-05-09 14:48 millert
1160 * schema.ActiveDirectory: add sudoRunAsUser and sudoRunAsGroup
1162 2008-05-09 14:01 millert
1164 * schema.ActiveDirectory: Active Directory schema by Chantal
1165 Paradis and Eric Paquet
1167 2008-05-08 17:54 millert
1169 * parse.c: remove an XXX that was fixed
1171 2008-05-08 12:53 millert
1175 2008-05-08 12:49 millert
1177 * parse.c: Initialize tags to UNSPEC instead of def_* in "sudo -l"
1178 mode. This fixes a problem where the tag value printed was
1179 influenced by defaults set in the first pass through the parser.
1181 2008-05-03 21:29 millert
1183 * Makefile.in, sudo.psf: No point in packaging the TODO file
1185 2008-05-03 21:24 millert
1189 2008-05-02 20:53 millert
1191 * WHATSNEW, def_data.c, def_data.h, def_data.in, env.c, sudo.c,
1192 sudo.h, sudoers.cat, sudoers.man.in, sudoers.pod: Add env_file
1193 Defaults option that is similar to /etc/environment on some
1196 2008-05-02 16:38 millert
1198 * Makefile.in, README, TODO, WHATSNEW, sudo.cat, sudo.man.in,
1199 sudoers.cat, sudoers.ldap.cat, sudoers.ldap.man.in,
1200 sudoers.man.in, version.h, visudo.cat, visudo.man.in: change
1203 2008-05-02 16:37 millert
1205 * UPGRADE: initial valgrind pass done
1207 2008-04-23 08:30 millert
1209 * ldap.c: Fix typo/think in sudo_ldap_read_secret() when storing
1212 2008-04-11 10:03 millert
1214 * ldap.c: define LDAPS_PORT if the system headers do not
1216 2008-04-10 14:54 millert
1218 * gram.c, gram.y: Fix another memory leak in init_parser().
1220 2008-04-10 12:51 millert
1222 * configure, configure.in: There was a missing space before the
1223 ldap libs in SUDO_LIBS for some configurations.
1225 2008-04-10 11:28 millert
1227 * alias.c, gram.c, gram.y, toke.c, toke.l: Clean up some memory
1228 leaks pointed out by valgrind.
1230 2008-04-07 14:39 millert
1232 * sudo.c: fix "sudo -s" broken by mode/flags breakout
1234 2008-04-07 14:26 millert
1236 * configure, configure.in: remove duplicate check for dgettext
1238 2008-04-05 15:54 millert
1240 * aix.c: Fall back to default stanza if no user-specific limit is
1243 2008-04-02 15:56 millert
1245 * snprintf.c: include stdint.h if present
1247 2008-04-02 15:28 millert
1249 * snprintf.c: Use LLONG_MAX, not the old QUAD_MAX
1251 2008-04-01 19:18 millert
1253 * sudoers.ldap.pod: fix cut and pasto
1255 2008-03-31 11:24 millert
1257 * pwutil.c: Add #ifdef PURITY
1259 2008-03-30 17:36 millert
1261 * auth/bsdauth.c: remove useless cast
1263 2008-03-27 19:07 millert
1267 2008-03-27 19:04 millert
1271 2008-03-27 19:01 millert
1273 * sudo.h: Split MODE_* defines into primary and flags.
1275 2008-03-26 13:11 millert
1277 * aix.c: It turns out the logic for getting AIX limits is more
1278 convoluted than I realized and differs depending on whether the
1279 soft and/or hard limits are defined.
1281 2008-03-23 10:18 millert
1283 * Makefile.in, configure, configure.in: Back out AIX-specific
1284 change to set the sudo_noexec path to the .a file, we do really
1285 want to use the .so file. Since libtool doesn't do that
1286 correctly, just install the .so file ourselves in the Makefile.
1288 2008-03-23 10:12 millert
1290 * install-sh: If the file given to install is a path, only use the
1291 basename of the file when building the destination path.
1293 2008-03-18 16:08 millert
1295 * sudo.c: parse_args() cleanup: Sort command line options in the
1296 getopt() switch The -U option requires a parameter Normalize a
1297 few ISSET calls Split mode into mode and flags and retire the
1298 now-obsolete excl variable
1300 2008-03-18 16:04 millert
1302 * WHATSNEW, check.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
1303 sudo.pod, sudo_usage.h.in: Add -n (non-interactive) flag.
1305 2008-03-18 15:59 millert
1307 * sudo.c: Move version printing, etc. into a separate function.
1309 2008-03-18 15:57 millert
1311 * sudo.c: Don't try to cleanup nsswitch if it has not been
1314 2008-03-17 11:09 millert
1316 * logging.c: Block SIGPIPE in send_mail() so sudo is not killed by
1317 a problem executing the mailer.
1319 2008-03-14 08:11 millert
1321 * configure.in, configure: AIX shared libs end in .a, not .so.
1323 2008-03-13 07:34 millert
1325 * env.c: Preserve HOME by default too. Matches documentation and
1328 2008-03-12 19:42 millert
1330 * sudo.c: Use getopt() to parse the command line. We need to be
1331 able to intersperse env variables and options yet still honor
1332 "--"" which complicates things slightly.
1334 2008-03-06 14:46 millert
1338 2008-03-06 14:43 millert
1340 * acsite.m4, configure, ltmain.sh: update to libtool-1.5.26
1342 2008-03-06 14:32 millert
1344 * config.guess, config.sub: update from libtool-1.5.26 distribution
1346 2008-03-06 13:18 millert
1348 * aix.c, sudo.h: attempt to fix compilation errors on AIX
1350 2008-03-06 13:08 millert
1352 * Makefile.in: fix typo in last commit
1354 2008-03-06 13:07 millert
1356 * Makefile.in: Add WHATSNEW file to the distribution
1358 2008-03-06 12:43 millert
1360 * visudo.c: use warningx instead of fprintf(stderr, ...)
1362 2008-03-06 12:31 millert
1364 * list.c: add DEBUG to list2tq
1366 2008-03-06 12:28 millert
1368 * ChangeLog, TODO: sync
1370 2008-03-06 12:21 millert
1372 * WHATSNEW: mention mailfrom
1374 2008-03-06 12:19 millert
1376 * Makefile.in, config.h.in, configure, configure.in, set_perms.c,
1377 sudo.h, aix.c: Add aix_setlimits() to set resource limits on AIX
1378 using a combination of getuserattr() and setrlimit(). Currently
1381 2008-03-05 16:52 millert
1383 * def_data.c, def_data.h, def_data.in, logging.c, sudoers.cat,
1384 sudoers.pod, sudoers.man.in: Add mailfrom Defaults option that
1385 sets the value of the From: field in the warning/error mail. If
1386 unset the login name of the invoking user is used.
1388 2008-03-05 16:18 millert
1390 * defaults.c: store a copy of _PATH_SUDO_ASKPASS in def_askpass
1393 2008-03-05 15:19 millert
1395 * gram.c, gram.y: When adding a default, only call list2tq() once
1396 to do the list to tq conversion. It is not legal to call list2tq
1397 multiple times on the same list since list2tq consumes and
1398 modifies the list argument.
1400 2008-03-05 09:38 millert
1402 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod: comment
1405 2008-03-05 09:36 millert
1407 * WHATSNEW: mention askpass
1409 2008-03-04 17:20 millert
1411 * sudo.c: Error out if both -A and -S are specified Error out if -A
1412 is specified but no askpass is configured
1414 2008-03-04 17:16 millert
1416 * configure, configure.in: we are not going to ship a sudo-specific
1419 2008-03-03 14:30 millert
1421 * sudo.h: fix definition of TGP_ASKPASS
1423 2008-03-03 13:54 millert
1425 * def_data.c, def_data.in: make askpass boolean-capable
1427 2008-03-03 13:53 millert
1429 * INSTALL: document --with-askpass
1431 2008-03-02 19:27 millert
1433 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
1434 sudoers.ldap.cat, visudo.cat: regen
1436 2008-03-02 17:31 millert
1438 * sudo.pod, sudo_usage.h.in, sudoers.pod: document -A and askpass
1440 2008-03-02 09:31 millert
1442 * check.c, configure, configure.in, def_data.c, def_data.h,
1443 def_data.in, defaults.c, pathnames.h.in, sudo.c, sudo.h,
1444 sudo_usage.h.in, tgetpass.c, auth/sudo_auth.c: Add support for
1445 running a helper program to read the password when no tty is
1446 present (or when specified with the -A flag). TODO: docs.
1448 2008-03-02 08:38 millert
1450 * def_data.c, def_data.in: add missing printf format to SELinux
1451 role and type strings
1453 2008-02-27 09:26 millert
1455 * INSTALL, configure, configure.in: Disable use of
1456 gss_krb5_ccache_name() by default and add
1457 --enable-gss-krb5-ccache-name configure option to enable it. It
1458 seems that gss_krb5_ccache_name() doesn't work properly with some
1459 combinations of Heimdal and OpenLDAP.
1461 2008-02-22 15:33 millert
1463 * selinux.c: Ignore setexeccon() failing in permissive mode. Also
1464 add a call to setkeycreatecon() (though this is probably
1465 insufficient). From Dan Walsh.
1467 2008-02-22 15:19 millert
1469 * auth/pam.c: Only set std_prompt for the PAM_PROMPT_* cases. The
1470 conversation function may be called for non-password reading
1471 purposes so we must be careful not to use def_prompt in cases
1472 where it may not be set.
1474 2008-02-20 12:00 millert
1476 * selinux.c: Don't free the new tty context, we need to keep it
1477 around when we restore the tty context after the command
1480 2008-02-19 16:04 millert
1482 * selinux.c: s/newrole/sudo/
1484 2008-02-19 13:21 millert
1486 * sudo.man.pl, sudo.pod: Only put login_cap(3) in SEE ALSO section
1487 if we have login.conf support
1489 2008-02-18 11:05 millert
1491 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1492 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1495 2008-02-18 10:53 millert
1497 * Makefile.in, configure, configure.in, sudo.man.pl, sudo.pod,
1498 sudoers.man.pl, sudoers.pod: Substitute in comment characters for
1499 lines partaining to login.conf, BSD auth and SELinux and only
1500 enable them if pertinent.
1502 2008-02-18 10:42 millert
1504 * Makefile.in, sudo.pod, sudoers.ldap.pod, sudoers.pod, visudo.pod:
1505 Remove the =cut on the first line (above the copyright notice) to
1506 quiet pod2man. Also remove the hackery in the FILES section and
1507 just deal with the fact that there will a newline between each
1510 2008-02-17 08:19 millert
1512 * Makefile.in: run sudo.man.pl when generating sudo.man.in
1514 2008-02-17 08:11 millert
1516 * configure, configure.in, sudo.man.pl: comment out SELinux manual
1517 bits unless --with-selinux was specified
1519 2008-02-17 08:04 millert
1521 * sudoers.pod: document role and type defaults for SELinux
1523 2008-02-16 20:26 millert
1525 * sudo.c, sudo.cat, sudo.man.in, sudo.pod, sudo_usage.h.in:
1526 Document "sudo -ll" and make "sudo -l -l" be equivalent.
1528 2008-02-15 15:23 millert
1530 * configure.in, configure: Treat k*bsd*-gnu like Linux, not BSD.
1531 Fixes compilation problems on Debian GNU/kFreeBSD.
1533 2008-02-13 17:17 millert
1535 * auth/kerb5.c: Avoid Heimdal'isms introduced in the rev 1.32
1536 rewrite of verify_krb_v5_tgt()
1538 2008-02-13 07:28 millert
1540 * logging.c, logging.h, sudo.c: Remove dependence on
1541 VALIDATE_NOT_OK in logging functions. Split log_auth() into
1542 log_allowed() and log_denial() Replace mail_auth() with
1543 should_mail() and a call to send_mail()
1545 2008-02-10 18:06 millert
1547 * ldap.c: Add debugging so we can tell if the krb5 ccache is
1550 2008-02-10 17:34 millert
1552 * INSTALL: mention --with-selinux
1554 2008-02-09 09:48 millert
1558 2008-02-09 09:43 millert
1560 * selinux.c: add Sudo tag
1562 2008-02-09 09:30 millert
1564 * Makefile.in, config.h.in, configure.in, def_data.c, def_data.h,
1565 def_data.in, gram.c, gram.h, gram.y, ldap.c, parse.c, parse.h,
1566 pathnames.h.in, selinux.c, sesh.c, sudo.c, sudo.cat, sudo.h,
1567 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.ldap.cat,
1568 sudoers.ldap.man.in, sudoers.ldap.pod, testsudoers.c, toke.c,
1569 toke.l: Add support for SELinux RBAC. Sudoers entries may
1570 specify a role and type. There are also role and type defaults
1571 that may be used. To make sure a transition occurs, when using
1572 RBAC commands are executed via the new sesh binary. Based on
1573 initial changes from Dan Walsh.
1575 2008-02-08 08:18 millert
1577 * lbuf.c, ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.c: Add long
1578 list (sudo -ll) support for printing verbose LDAP and sudoers
1579 file entries. Still need to update manual.
1581 2008-02-03 10:43 millert
1583 * ldap.c, parse.c, sudo.h, sudo_nss.c, sudo_nss.h: Unify the -l
1584 output for file and ldap based sudoers and use lbufs for both.
1585 The ldap output does not currently include options that cannot be
1586 represented as tags. This will be remedied in a long list output
1589 2008-01-27 16:37 millert
1591 * set_perms.c: Use a specific error message for errno == EAGAIN
1592 when setuid() et al fails. On Linux systems setuid() will fail
1593 with errno set to EAGAIN if changing to the new uid would result
1594 in a resource limit violation.
1596 2008-01-27 16:34 millert
1598 * sudo.c: Unlimit nproc on Linux systems where calling the setuid()
1599 family of syscalls causes the nroc resource limit to be checked.
1600 The limits will be reset by pam_limits.so when PAM is used. In
1601 the non-PAM case the nproc limit will remain unlimited but there
1602 doesn't seem to be a way around that other than having sudo parse
1603 /etc/security/limits.conf directly.
1605 2008-01-27 16:31 millert
1607 * env.c, sudo.c, sudo.pod: Only read /etc/environment on Linux and
1610 2008-01-23 06:33 millert
1612 * configure, configure.in: Use SUDO_DEFINE_UNQUOTED instead of
1613 AC_DEFINE_UNQUOTED to prevent ldap.conf and ldap.secret paths
1614 from going into config.h. Avoid single quotes in variable
1615 expansion when using SUDO_DEFINE_UNQUOTED since in some versions
1616 of bash they will end up literally in the resulting define.
1618 2008-01-21 13:22 millert
1620 * README.LDAP: mention --with-nsswitch=no
1622 2008-01-21 11:43 millert
1624 * configure, configure.in: ldap_ssl.h depends on ldap.h being
1627 2008-01-21 11:07 millert
1629 * configure, configure.in, ldap.c, config.h.in: Include ldap_ssl.h
1630 if we can find it. Needed for the ldapssl_set_strength defines
1633 2008-01-21 10:02 millert
1635 * TODO, sudoers.ldap.pod: sync
1637 2008-01-21 10:01 millert
1639 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.ldap.cat,
1640 sudoers.ldap.man.in, sudoers.man.in, visudo.cat, visudo.man.in:
1643 2008-01-21 10:00 millert
1645 * Makefile.in: Use 78n line length when formatting cat pages.
1647 2008-01-21 09:50 millert
1649 * README.LDAP: Remove redundant info that is now in
1652 2008-01-20 16:18 millert
1654 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1655 Reorganize the first section a bit. Substitute the proper path
1658 2008-01-20 10:17 millert
1660 * sudoers.ldap.cat, sudoers.ldap.man.in, sudoers.ldap.pod:
1661 Substitute values for ldap.conf, ldap.secret and nsswitch.conf
1662 Move schema into EXAMPLES
1664 2008-01-20 10:15 millert
1666 * configure.in, configure: Substitute values for ldap.conf,
1667 ldap.secret and nsswitch.conf into sudoers.ldap.man.
1669 2008-01-19 20:35 millert
1671 * configure, configure.in: substitute for sudoers.ldap.man
1673 2008-01-19 20:34 millert
1675 * Makefile.in: Fix cut & pasto introduced when adding sudoers.ldap
1678 2008-01-19 20:25 millert
1680 * sudoers.ldap.pod, sudoers.ldap.cat, sudoers.ldap.man.in: Fill in
1681 some of the missing pieces. Still needs some reorganization and
1684 2008-01-19 15:06 millert
1686 * Makefile.in, sudoers.ldap.cat, sudoers.ldap.man.in,
1687 sudoers.ldap.pod: Beginnings of a sudoers.ldap man page.
1688 Currently, much of the information is adapted from README.LDAP.
1690 2008-01-18 17:32 millert
1692 * pwutil.c: When copying gr_mem we must guarantee that the storage
1693 space for gr_mem is properly aligned. The simplest way to do
1694 this is to simply store gr_mem directly after struct group. This
1695 is not a problem for gr_passwd or gr_name as they are simple
1698 2008-01-18 16:47 millert
1700 * ldap.c: Fix a typo/thinko in one of the calls to
1701 sudo_ldap_check_user_netgroup(). From Marco van Wieringen.
1703 2008-01-17 15:44 millert
1705 * config.h.in, configure, configure.in, ldap.c: include
1706 <mps/ldap_ssl.h> in ldap.c if available
1708 2008-01-16 18:20 millert
1710 * gram.c, gram.y: Make sure we define SIZE_MAX for yacc's
1713 2008-01-16 13:03 millert
1715 * tgetpass.c: Use TCSAFLUSH when restoring terminal settings (and
1716 echo) to guarantee that any pending output is discarded
1718 2008-01-15 17:18 millert
1720 * sudoers: no longer need to specify SETENV when user has sudo ALL
1722 2008-01-15 09:40 millert
1724 * testsudoers.c: sync user_args size calculation with sudo.c Add -g
1725 group option, renaming old -g to -G Add set_runasgr() and
1726 set_runaspw() and use them
1728 2008-01-15 09:23 millert
1730 * sudo.h, sudo.c: Make set_runaspw static void
1732 2008-01-15 09:17 millert
1734 * testsudoers.c, visudo.c: g/c set_runaspw stub
1736 2008-01-15 07:28 millert
1738 * configure, configure.in: Don't add -llber twice.
1740 2008-01-14 06:40 millert
1744 2008-01-13 15:39 millert
1748 2008-01-13 14:57 millert
1750 * configure, configure.in: Fix check that determines whether -llber
1753 2008-01-13 14:22 millert
1755 * config.h.in, configure, configure.in, README.LDAP, ldap.c: For
1756 netscape-based LDAP, use ldapssl_set_strength() to implement the
1757 checkpeer ldap.conf option.
1759 2008-01-13 09:49 millert
1761 * auth/kerb5.c: Delay krb5_cc_initialize() until we actually need
1762 to use the cred cache, which is what krb5_verify_user() does.
1763 Better cleanup on failure.
1765 2008-01-12 12:40 millert
1767 * auth/kerb5.c: Rewrite verify_krb_v5_tgt() based on what heimdal's
1768 krb5_verify_user() does.
1770 2008-01-09 14:58 millert
1772 * gram.c: The U suffix on constants is an ANSI feature
1774 2008-01-09 12:08 millert
1776 * configure.in, configure: Add check for ber_set_option() in -llber
1778 2008-01-06 19:02 millert
1780 * README.LDAP: default if no nsswitch.conf is files only
1782 2008-01-06 17:28 millert
1784 * README.LDAP: don't tell people to mail aaron about LDAP stuff
1786 2008-01-06 12:32 millert
1788 * README.LDAP: timelimit and bind_timelimit
1790 2008-01-06 08:54 millert
1794 2008-01-06 07:56 millert
1796 * ldap.c: Move ldap.secret reading into a separate function.
1798 2008-01-05 19:09 millert
1800 * check.c: user_runas -> runas_pw
1802 2008-01-05 18:59 millert
1806 2008-01-05 18:59 millert
1808 * check.c, sudo.pod, sudoers.pod: Add and document the %p escape in
1809 the password prompt. Based on a patch from Patrick Schoenfeld.
1811 2008-01-05 18:25 millert
1813 * ldap.c: Check strlcpy() return values.
1815 2008-01-05 18:12 millert
1817 * ldap.c: refactor ldap binding code into sudo_ldap_bind_s()
1819 2008-01-05 16:35 millert
1821 * README.LDAP: Make it clear that host and uri can take multiple
1822 parameters. URI is now supported for more than just openldap
1823 nsswitch.conf does't accept "compat"
1825 2008-01-05 16:27 millert
1827 * sudo.c: comment cleanup and update (c) year
1829 2008-01-05 16:25 millert
1831 * parse.c, sudo_nss.c: Move display_privs() and display_cmnd() from
1832 parse.c to sudo_nss.c. This should make it possible to build an
1833 LDAP-only sudo binary.
1835 2008-01-05 13:27 millert
1837 * ldap.c, parse.c, sudo.c, sudo.h, sudo_nss.h: Improve chaining of
1838 multiple sudoers sources by passing in the previous return value
1839 to the next in the chain
1841 2008-01-05 13:26 millert
1843 * gram.y: Free up parser data structures in sudo_file_close().
1845 2008-01-05 08:13 millert
1847 * gram.c, parse.c: Free up parser data structures in
1850 2008-01-05 07:59 millert
1852 * ldap.c: Parse uri ourself if no ldap_initialize() is present Use
1853 ldap_create() instead of deprecated ldap_init() Use
1854 ldap_sasl_bind_s() instead of deprecated ldap_simple_bind_s()
1856 2008-01-05 07:56 millert
1858 * config.h.in, configure, configure.in: Add check for
1859 ldap_sasl_bind_s() Remove -DLDAP_DEPRECATED from CFLAGS
1861 2008-01-04 09:56 millert
1863 * configure.in, configure, config.h.in: add check for ldap_create
1865 2008-01-03 16:11 millert
1867 * config.h.in, configure, configure.in, ldap.c: Add
1868 sudo_ldap_get_first_rdn() to return the first rdn of an entry's
1869 dn using the mechanism appropriate for the LDAP SDK in use. Use
1870 ldap_unbind_ext_s() instead of deprecated ldap_unbind_s().
1871 Emulate ldap_unbind_ext_s() and ldap_search_ext_s() for SDK's
1874 2008-01-03 16:02 millert
1876 * lbuf.c: include unistd.h
1878 2008-01-03 11:05 millert
1880 * config.h.in, configure.in: fix typo in mtim_getnsec
1882 2008-01-02 15:29 millert
1884 * config.h.in, configure.in, configure: add check for st__tim in
1885 struct stat as used by SCO
1887 2008-01-02 11:05 millert
1889 * ldap.c: use ldap_search_ext_s instead of deprecated ldap_search_s
1891 2008-01-02 10:09 millert
1893 * Makefile.in, TODO, sudo.cat, sudo.man.in: add sudo_nss.h to HDRS
1895 2008-01-01 19:04 millert
1897 * ldap.c: Replace deprecated ldap_explode_dn() with calls to
1898 ldap_str2dn() and ldap_rdn2str().
1900 2008-01-01 18:37 millert
1902 * ldap.c: Use ldap_get_values_len()/ldap_value_free_len() instead
1903 of the deprecated ldap_get_values()/ldap_value_free().
1905 2008-01-01 17:07 millert
1907 * TODO, ChangeLog: sync
1909 2008-01-01 17:06 millert
1911 * gettime.c, sudo.c: Remove some already fixed XXXs
1913 2008-01-01 17:03 millert
1915 * ldap.c: Same return value as non-existent sudoers if LDAP was
1918 2008-01-01 16:52 millert
1920 * sudo.pod: mention /etc/environment
1922 2008-01-01 16:42 millert
1924 * UPGRADE, WHATSNEW, README.LDAP: Update to reflect recent
1927 2008-01-01 16:42 millert
1929 * sudo.c: Print nsswitch.conf, ldap.conf and ldap.secret paths in
1932 2008-01-01 16:25 millert
1934 * ldap.c: When building up a query don't list groups in the aux
1935 group vector that are the same as the passwd file group. On most
1936 systems the first gid in the group vector is the same as the
1939 2008-01-01 14:01 millert
1941 * env.c, ldap.c: Define LDAPNOINIT before calling ldap_init(), etc.
1942 to disable user ldaprc and system defaults that could affect how
1945 2008-01-01 13:21 millert
1947 * INSTALL, configure, configure.in, pathnames.h.in, sudo.c,
1948 sudo_nss.c, sudo_nss.h: Rename read_nss -> sudo_read_nss Add
1949 --with-nsswitch to allow users to specify nsswitch.conf path or
1950 disable it. If --with-nsswitch=no but --with-ldap, order is
1951 LDAP, then sudoers. Fix --with-ldap-conf-file and
1952 --with-ldap-secret-file
1954 2008-01-01 13:12 millert
1956 * parse.c: Honor def_ignore_local_sudoers
1958 2007-12-31 16:44 millert
1960 * ldap.c: no longer need to check def_ignore_local_sudoers here
1962 2007-12-31 16:36 millert
1964 * parse.c: Refactor group vector resetting into a function and also
1965 call it from display_cmnd. Stop after the first sucessful match
1966 in display_cmnd. Print a newline between each display_privs
1969 2007-12-31 16:23 millert
1971 * parse.c: fix double free introduced in rev 1.218
1973 2007-12-31 16:10 millert
1975 * ldap.c: belt and suspenders; zero out result after freeing it
1977 2007-12-31 15:04 millert
1979 * env.c, fileops.c, ldap.c, sudo.h, sudo_nss.c: Refactor line
1980 reading into a separate function, sudo_parseln(), which removes
1981 comments, leading/trailing whitespace and newlines. May want to
1982 rethink the use of sudo_parseln() for /etc/ldap.secret
1984 2007-12-31 14:26 millert
1986 * parse.c, sudo.c: Make the inability to read the sudoers file a
1987 non-fatal error if there are other sudoers sources available.
1988 sudoers_file_lookup now returns "not OK" if sudoers was not
1991 2007-12-31 14:24 millert
1993 * ldap.c: make it clear that the global options are from LDAP
1995 2007-12-31 14:13 millert
1997 * logging.c: allocate proper amount of space for error string
1999 2007-12-31 10:24 millert
2001 * sudo_nss.c, sudo_nss.h: actual sudo nss code
2003 2007-12-31 10:08 millert
2005 * ldap.c, parse.c, sudo.c, sudo.h: nss-ify display_privs and
2008 2007-12-31 07:54 millert
2010 * defaults.c, parse.c, testsudoers.c, visudo.c: move
2011 update_defaults() to parse.c
2013 2007-12-31 07:39 millert
2015 * Makefile.in, ldap.c, list.c, parse.c, parse.h, sudo.c, sudo.h:
2016 Use nsswitch to hide some sudoers vs. ldap implementation details
2017 and reduce the number of #ifdef LDAP TODO: fix display routines
2020 2007-12-28 11:20 millert
2022 * Makefile.in, README.LDAP, ldap.c, pathnames.h.in, sudo.c, sudo.h:
2023 First cut at nsswitch.conf support. Further reorganizaton and
2024 related changes are forthcoming.
2026 2007-12-21 16:53 millert
2028 * env.c, pathnames.h.in, sudo.c, sudo.h: Add support for reading
2029 and /etc/environment file. Still needs to be documented and
2030 should probably only applies to OSes that have it (AIX and Linux,
2033 2007-12-21 16:20 millert
2035 * ldap.c: include limits.h
2037 2007-12-20 10:02 millert
2039 * WHATSNEW: reword LDAP SASL
2041 2007-12-19 16:40 millert
2045 2007-12-19 16:39 millert
2047 * README.LDAP: Add an example sudoRole, clarify netscape vs.
2050 2007-12-19 14:42 millert
2052 * README.LDAP: Be clear on what is OpenLDAP vs. Netscape-derived
2054 2007-12-19 14:28 millert
2056 * config.h.in, configure, configure.in, ldap.c: Use ldapssl_init()
2057 for ldaps support instead of trying to do it manually with
2058 ldap_init() + ldapssl_install_routines(). Use tls_cert and
2059 tls_key for cert7.db and key3.db respectively. Don't print
2060 debugging info for options that are not set. Add warning if
2061 start_tls specified when not supported.
2063 2007-12-19 14:25 millert
2065 * ldap.c: fix compilation on solaris
2067 2007-12-19 14:23 millert
2069 * Makefile.in: add missing .h and .c files for missing lib objs
2071 2007-12-18 09:54 millert
2073 * ldap.c: fix LDAP_OPT_NETWORK_TIMEOUT setting
2075 2007-12-17 20:10 millert
2077 * ldap.c: fix compilation on Solaris
2079 2007-12-17 10:14 millert
2081 * configure, configure.in: fix typo
2083 2007-12-17 08:08 millert
2085 * README.LDAP: try to clear up which variables are for OpenLDAP and
2086 which are for netscape-derived SDKs
2088 2007-12-17 07:31 millert
2090 * config.h.in, configure, configure.in, ldap.c: Add support for
2091 "ssl on" in both netscape and openldap flavors. Only the
2092 OpenLDAP flavor has been tested.
2094 2007-12-17 07:28 millert
2096 * logging.c, sudo.c, sudo.h: Call cleanup() before exit in
2097 log_error() instead of calling sudo_ldap_close() directly.
2098 ldap_conn can now be static to sudo.c
2100 2007-12-16 20:02 millert
2102 * sudo.c: ld -> ldap_conn
2104 2007-12-16 14:42 millert
2106 * logging.c, sudo.c, sudo.h: Better ldap cleanup.
2108 2007-12-16 14:08 millert
2110 * ldap.c: Distinguish between LDAP conf settings that are
2111 connection-specific (which take an ld pointer) and those that are
2112 default settings (which do not).
2114 2007-12-14 16:46 millert
2116 * ldap.c: Improved warnings on error.
2118 2007-12-14 15:59 millert
2120 * ldap.c: Make ldap config table driven and set the config *after*
2121 we open the connection.
2123 2007-12-13 16:41 millert
2125 * ldap.c: fix LDAP_OPT_X_CONNECT_TIMEOUT compat define
2127 2007-12-13 09:13 millert
2129 * configure, configure.in: some operating systems need to link with
2130 -lkrb5support when using krb5
2132 2007-12-10 17:12 millert
2134 * WHATSNEW: minor update
2136 2007-12-10 10:56 millert
2138 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
2140 2007-12-07 19:17 millert
2142 * TODO, ChangeLog: sync
2144 2007-12-07 19:09 millert
2146 * ldap.c, schema.OpenLDAP, schema.iPlanet, sudoers2ldif: add -g
2149 2007-12-03 11:36 millert
2151 * WHATSNEW, sudo.c, sudo.pod, sudo_usage.h.in: The -i and -s flags
2152 can now take an optional command.
2154 2007-12-02 12:13 millert
2156 * def_data.c, def_data.h, def_data.in, sudo.c, sudo.pod,
2157 sudoers.pod, auth/pam.c: Add passprompt_override flag to sudoers
2158 that will cause the prompt to be overridden in all cases. This
2159 flag is also set when the user specifies the -p flag.
2161 2007-12-01 19:51 millert
2163 * sudo.c: Move setting of login class until after sudoers has been
2164 parsed. Set NewArgv[0] for -i after runas_pw has been set.
2166 2007-12-01 19:34 millert
2168 * configure, configure.in: Move the dgettext check.
2170 2007-12-01 11:22 millert
2172 * config.h.in, configure, configure.in, auth/pam.c: Add basic
2173 support for looking up the string "Password: " in the PAM
2174 localized text db. This allows us to determine whether the PAM
2175 prompt is the default "Password: " one even if it has been
2178 TODO: concatenate non-std PAM prompts and user-specified sudo
2181 2007-11-27 18:40 millert
2183 * Makefile.in, config.h.in, configure.in, parse.c, set_perms.c,
2184 sudo.c, configure, sudo.h: Use AC_FUNC_GETGROUPS instead of a
2185 home-grown attempt that was insufficient.
2187 2007-11-27 12:13 millert
2189 * configure, acsite.m4, interfaces.c, memrchr.c: Fix typos;
2192 2007-11-25 19:26 millert
2194 * set_perms.c: Don't assume runas_pw is set; it may not be in the
2197 2007-11-25 08:07 millert
2199 * logging.c, set_perms.c: Set aux group vector for PERM_RUNAS and
2200 restore group vector for PERM_ROOT if we previously changed it.
2201 Stash the runas group vector so we don't have to call initgroups
2202 more than once. Also add no-op check to check_perms.
2204 2007-11-21 15:11 millert
2206 * WHATSNEW, check.c, def_data.in, defaults.c, gram.c, gram.h,
2207 gram.y, ldap.c, logging.c, match.c, mon_systrace.c, parse.c,
2208 parse.h, pwutil.c, set_perms.c, sudo.c, sudo.cat, sudo.h,
2209 sudo.man.in, sudo.pod, sudo_usage.h.in, sudoers.cat,
2210 sudoers.man.in, sudoers.pod, testsudoers.c, toke.c, visudo.c,
2211 visudo.cat, visudo.man.in: Add support for runas groups. This
2212 allows the user to run a command with a different effective
2213 group. If the -g option is specified without -u the command will
2214 be run as the current user (only the group will change). the -g
2215 and -u options may be used together. TODO: implement runas group
2216 for ldap improve runas group documentation add
2219 2007-11-21 15:02 millert
2221 * configure, configure.in: fix setting of mandir
2223 2007-11-21 14:26 millert
2225 * sudo.pod, sudoers.pod: document that ALL implies SETENV
2227 2007-11-21 13:50 millert
2229 * ldap.c: s/setenv_ok/setenv_implied/g
2231 2007-11-21 13:44 millert
2233 * ldap.c: hostname_matches() returns TRUE on match in sudo 1.7.
2235 2007-11-21 13:26 millert
2237 * ldap.c: use strcmp, not strcasecmp when comparing ALL
2239 2007-11-21 11:41 millert
2241 * ldap.c: Make sudo ALL imply setenv. Note that unlike with
2242 file-based sudoers this does affect all the commands in the
2245 2007-11-21 11:05 millert
2247 * gram.c, gram.y, parse.c, parse.h: sudo "ALL" now implies the
2248 SETENV tag but, unlike an explicit tag, it is not passed on to
2249 other commands in the list.
2251 2007-11-21 11:02 millert
2253 * visudo.c: Add missing sudo_setpwent() and sudo_setgrent() calls.
2254 Also use sudo_getpwuid() instead of getpwuid().
2256 2007-11-15 11:16 millert
2258 * sudoers: Expand on the dangers of not using visudo to edit
2261 2007-11-08 07:24 millert
2263 * parse.c: Don't quote *?[]! on output since the lexer does not
2264 strip off the backslash when reading those in.
2266 2007-11-07 13:16 millert
2268 * glob.c: expand "u_foo" types to "unsigned foo" to avoid
2269 compatibility issues.
2271 2007-11-04 08:33 millert
2273 * logging.c: Refactor log line generation in to new_logline().
2275 2007-10-25 09:23 millert
2277 * TROUBLESHOOTING: fix typo
2279 2007-10-24 12:41 millert
2281 * config.h.in, configure, configure.in, interfaces.c, interfaces.h,
2282 match.c: Add configure check for struct in6_addr instead of
2283 relying on AF_INET6 since some systems define AF_INET6 but do not
2284 include IPv6 support.
2286 2007-10-21 09:29 millert
2288 * configure, configure.in: Fix block to add -lutil for FreeBSD and
2289 NetBSD when logincap is in use.
2291 2007-10-19 22:28 millert
2293 * configure, configure.in: POSIX states that struct timespec be
2294 declared in time.h so check there regardless of the value of
2297 2007-10-17 11:37 millert
2299 * tgetpass.c: Instead of defining a macro to call the appropriate
2300 method for turning on/off echo, just define tc[gs]etattr() and
2301 the related defines that use the correct terminal ioctls if
2302 needed. Also go back to using TCSAFLUSH instead of TCSADRAIN on
2305 2007-10-08 20:18 millert
2307 * Makefile.in: g/c @ALLOCA@
2309 2007-10-08 20:07 millert
2313 2007-10-08 20:04 millert
2315 * INSTALL, config.h.in, configure.in, auth/pam.c: Add
2316 --disable-pam-session configure option to disable calling
2317 pam_{open,close}_session. May work around bugs in some PAM
2320 2007-10-08 12:00 millert
2322 * tgetpass.c: quiet gcc warnings
2324 2007-10-08 08:41 millert
2326 * tgetpass.c: Avoid printing the prompt if we are already
2327 backgrounded. E.g. if the user runs "sudo foo &" from the shell.
2328 In this case, the call to tcsetattr() will cause SIGTTOU to be
2331 2007-09-15 16:07 millert
2333 * def_data.c, def_data.h, def_data.in: Reorder things such that the
2334 definition of env_reset come right before the env variable lists.
2336 2007-09-15 07:50 millert
2338 * parse.h: Shrink type and seqno in struct alias from int to
2341 2007-09-15 07:24 millert
2343 * alias.c, match.c, parse.c, parse.h: Add a sequence number in the
2344 aliases for loop detection. If we find an alias with the seqno
2345 already set to the current (global) value we know we've visited
2346 it before so ignore it.
2348 2007-09-13 19:05 millert
2350 * TODO, sudo.c, sudo.h, auth/pam.c: PAM wants the full tty path so
2351 add user_ttypath which holds the full path to the tty or is NULL
2352 if no tty was present.
2354 2007-09-13 18:42 millert
2356 * auth/pam.c: Set PAM_RHOST to work around a bug in Solaris 7 and
2357 lower that results in a segv.
2359 2007-09-11 15:43 millert
2363 2007-09-11 15:42 millert
2365 * alias.c, defaults.c, gram.y, list.c, list.h, match.c, parse.c,
2366 parse.h, testsudoers.c, visudo.c: rename lh_ -> tq_
2368 2007-09-10 17:33 millert
2370 * alloc.c: remove some useless casts
2372 2007-09-10 17:32 millert
2374 * alloc.c: pull in inttypes.h for SIZE_MAX; we avoid stdint.h since
2375 inttypes.h predates the final C99 spec and the standard specifies
2376 that it shall include stdint.h anyway
2378 2007-09-06 12:39 millert
2380 * Makefile.in, alloca.c, configure.in: Since we ship with a
2381 pre-generated parser there is no need to ship a bogus alloca
2384 2007-09-06 12:22 millert
2388 2007-09-06 12:19 millert
2390 * configure.in: remove initial setting of CHECKSIA, we require that
2391 it be unset if not used
2393 2007-09-06 11:55 millert
2395 * Makefile.in: add list.c to SRCS
2397 2007-09-06 07:18 millert
2401 2007-09-06 07:17 millert
2403 * configure.in: only do SIA checks on Digital Unix
2405 2007-09-05 18:50 millert
2407 * sudoers.cat, sudoers.man.in: regen
2409 2007-09-05 18:48 millert
2411 * ChangeLog, TODO: sync
2413 2007-09-05 18:39 millert
2415 * auth/kerb5.c: Remove call to krb5_cc_register() as it is not
2416 needed for modern kerb5.
2418 2007-09-05 18:16 millert
2422 2007-09-05 18:16 millert
2424 * configure.in, aclocal.m4: New method for setting the default
2425 authentication type and avoiding conflicts in auth types.
2427 2007-09-05 14:45 millert
2429 * match.c, parse.c, testsudoers.c: Each entry in a cmndlist now has
2430 an associated runaslist so no need to keep track of the most
2431 recent non-NULL one.
2433 2007-09-04 18:51 millert
2435 * ldap.c: back out partial ldaps support mistakenly committed
2437 2007-09-04 10:57 millert
2439 * ldap.c: Add support for unix groups and netgroups in sudoRunas
2441 2007-09-03 16:28 millert
2443 * sudo_edit.c: Fix sudoedit of a non-existent file. From Tilo
2446 2007-09-02 17:05 millert
2450 2007-09-02 17:05 millert
2452 * INSTALL: update --passprompt escape info
2454 2007-09-02 17:03 millert
2456 * configure.in: remove now-bogus comment and update copyright date
2458 2007-09-02 16:35 millert
2460 * configure.in: Fix up use of with_passwd
2462 2007-09-02 16:25 millert
2464 * acsite.m4, config.guess, config.sub, configure.in, ltmain.sh:
2465 Update to autoconf-2.61 andf libtool-1.5.24
2467 2007-09-02 16:17 millert
2469 * Makefile.in: "cmp -s" not just cmp Add @datarootdir@ to quiet
2472 2007-09-01 17:39 millert
2476 2007-09-01 17:39 millert
2478 * gram.y: move tags and runaslist propagation to be earlier
2480 2007-09-01 09:34 millert
2482 * visudo.c: If -f flag given use the permissions of the original
2485 2007-09-01 08:45 millert
2487 * gram.y: prevent a double free() when re-initing the parser
2489 2007-08-31 19:30 millert
2493 2007-08-31 19:30 millert
2495 * aclocal.m4, alias.c, alloc.c, config.h.in, configure.in, env.c,
2496 ldap.c, list.c, list.h, memrchr.c, parse.c, parse.h, pwutil.c,
2497 redblack.c, redblack.h, snprintf.c, sudo.c, sudo.h,
2498 testsudoers.c, visudo.c, zero_bytes.c, auth/API, auth/afs.c,
2499 auth/bsdauth.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
2500 auth/securid.c, auth/securid5.c, auth/sia.c, auth/sudo_auth.h:
2501 Remove support for compilers that don't support void *
2503 2007-08-31 19:14 millert
2507 2007-08-31 19:13 millert
2509 * Makefile.in, alias.c, defaults.c, gram.y, list.c, list.h,
2510 match.c, parse.c, parse.h, testsudoers.c, visudo.c: Move list
2511 manipulation macros to list.h and create C versions of the more
2512 complex ones in list.c. The names have been down-cased so they
2513 appear more like normal functions.
2515 2007-08-31 17:21 millert
2517 * Makefile.in: Fix cmp command when regenerating parser. Make
2518 gram.o the first dependency for all programs so gram.h will be
2519 generated before anything that needs it.
2521 2007-08-31 13:56 millert
2523 * parse.h, gram.y: Convert NEW_DEFAULT anf NEW_MEMBER into static
2526 2007-08-30 21:21 millert
2528 * match.c, parse.c, testsudoers.c: Use LH_FOREACH_REV when checking
2529 permission and short-circuit on the first non-UNSPEC hit we get
2530 for the command. This means that instead of cycling through the
2531 all the parsed sudoers entries we start at the end and work
2532 backwards and quit after the first positive or negative match.
2534 2007-08-30 21:13 millert
2538 2007-08-30 21:12 millert
2540 * defaults.c, gram.y, parse.c, parse.h, testsudoers.c, visudo.c:
2541 Change list head macros to take a pointer, not a struct.
2543 2007-08-30 20:46 millert
2547 2007-08-30 20:46 millert
2549 * gram.y: Propagate the runasspec from one command to the next in a
2552 2007-08-30 16:15 millert
2554 * match.c: Replace has_meta() with a macro that calls strpbrk().
2556 2007-08-30 16:04 millert
2560 2007-08-30 13:26 millert
2562 * alias.c, defaults.c, gram.y, match.c, parse.c, parse.h,
2563 testsudoers.c, visudo.c: Use a list head struct when storing the
2564 semi-circular lists and convert to tail queues in the process.
2565 This will allow us to reverse foreach loops more easily and it
2566 makes it clearer which functions expect a list as opposed to a
2569 Add macros for manipulating lists. Some of these should become
2572 When freeing up a list, just pop off the last item in the queue
2573 instead of going from head to tail. This is simpler since we
2574 don't have to stash a pointer to the next member, we always just
2575 use the last one in the queue until the queue is empty.
2577 Rename match functions that take a list to have list in the name.
2578 Break cmnd_matches() into cmnd_matches() and cmndlist_matches.
2580 2007-08-30 13:12 millert
2582 * parse.c: Fix pasto, append "!" not negated (which is an int) for
2585 2007-08-30 12:45 millert
2587 * Makefile.in: Remove the dependency of gram .h on gram.y, the .c
2588 dependency is enough. Only move y.tab.h to gram.h if it is
2589 different; avoids needless rebuilding.
2591 2007-08-27 15:51 millert
2593 * sudoers.pod: Defaults lines may be associated with lists of
2594 users, hosts, commands and runas users, not just single entries.
2596 2007-08-26 17:42 millert
2598 * Makefile.in: Revert the "cmp" portion of the last diff, it
2601 2007-08-26 17:10 millert
2603 * Makefile.in: Remove *.lo for clean: When generating the parser,
2604 only move the generated files into place if they differ from the
2607 2007-08-24 22:47 millert
2609 * toke.c, toke.l: Replace IPV6 regexp with a much simpler
2610 (readable) one and add an extra check when it matches to make
2611 sure we have a valid address.
2613 2007-08-24 22:36 millert
2615 * match.c: Fix thinko introduced when merging IPV6 support.
2617 2007-08-24 14:23 millert
2619 * HISTORY, LICENSE: regen
2621 2007-08-24 14:23 millert
2623 * license.pod: add 2007
2625 2007-08-24 14:19 millert
2627 * UPGRADE: mention #uid vs. comment pitfall
2629 2007-08-24 09:50 millert
2631 * acsite.m4: Merge in a patch from the libtool cvs that fixes a
2632 problem with the latest autoconf. From Stepan Kasal.
2634 2007-08-23 20:28 millert
2636 * parse.h: Back out he XOR swap trick, it is slower than a temp
2637 variable on modern CPUs.
2639 2007-08-23 20:14 millert
2643 2007-08-23 20:14 millert
2645 * gram.y, parse.h: Convert the tail queue to a semi-circle queue
2646 and use the XOR swap trick to swap the prev pointers during
2649 2007-08-23 15:31 millert
2651 * parse.h: remove useless statement
2653 2007-08-23 07:47 millert
2655 * toke.c, toke.l: Refactor #include parsing into a separate
2656 function and return unparsed chars (such as newline or comment)
2659 2007-08-22 18:56 millert
2661 * WHATSNEW: mention better uid support
2663 2007-08-22 18:55 millert
2665 * sudoers.pod: Users may now consist of a uid.
2667 2007-08-22 18:39 millert
2669 * gram.c, gram.h, toke.c: regen
2671 2007-08-22 18:32 millert
2673 * parse.c: Use lbuf_append_quoted() for sudo -l output to quote
2674 characters that would require quoting in sudoers.
2676 2007-08-22 18:31 millert
2678 * lbuf.c, lbuf.h: Add lbuf_append_quoted() which takes a set of
2679 characters which should be quoted with a backslash when
2682 2007-08-22 18:28 millert
2684 * toke.l: Require that the first character after a comment not be a
2685 digit or a dash. This allows us to remove the GOTRUNAS state and
2686 treat uid/gids similar to other words. It also means that we can
2687 now specify uids in User_Lists and a User_Spec may now contain a
2690 2007-08-22 18:23 millert
2692 * gram.y, toke.l: Replace RUNAS token with '(' and ')' tokens to
2693 make the runas portion of the grammar more natural.
2695 2007-08-22 06:35 millert
2697 * Makefile.in, README, BUGS: The BUGS file is history
2699 2007-08-21 09:19 millert
2701 * toke.c, toke.l: Allow comments after a RunasAlias as long as the
2702 character after the pound sign isn't a digit or a dash.
2704 2007-08-20 20:43 millert
2706 * WHATSNEW: Glob support was back-ported to 1.6.9
2708 2007-08-20 19:59 millert
2710 * Makefile.in: remove sudo_usage.h in distclean
2712 2007-08-20 19:24 millert
2714 * parse.c: If a Defaults value contains a blank, double-quote the
2717 2007-08-20 19:19 millert
2719 * toke.c, toke.l: Properly deal with Defaults double-quoted strings
2720 that span multiple lines using the line continuation char.
2721 Previously, the entire thing, including the continuation char,
2722 newline, and spaces was stored as-is.
2724 2007-08-20 10:46 millert
2726 * sudo.c: Be consistent when using single quotes and backticks.
2728 2007-08-19 16:48 millert
2730 * Makefile.in, configure, configure.in, lbuf.c, lbuf.h, parse.c,
2731 sudo.c, sudo_usage.h.in: Add new linebuf code to do appends of
2732 dynamically allocated strings and word-wrapped output. Currently
2733 used for sudo's usage() and sudo -l output. Sudo usage strings
2734 are now in sudo_usage.h which is generated at configure time.
2736 2007-08-18 08:22 millert
2738 * sudo.h, parse.c, sudo.c: Fix line wrapping in usage() and use the
2739 actual tty width instead of assuming 80.
2741 2007-08-17 18:32 millert
2743 * history.pod: some more info
2745 2007-08-17 17:28 millert
2747 * history.pod: Mentioned Chris Jepeway's parser and also the new
2748 one that is in sudo 1.7.
2750 2007-08-16 09:38 millert
2752 * sudo.pod, visudo.pod: For the options list, add flag args where
2753 appropriate and increase the indent level so there is room for
2756 2007-08-15 13:49 millert
2758 * parse.c: Fix some spacing in "sudo -l" and add a comment about
2759 some bogosity in the line wrapping.
2761 2007-08-15 11:21 millert
2763 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in,
2764 visudo.man.in, visudo.cat: regen
2766 2007-08-15 11:20 millert
2768 * INSTALL, Makefile.in, WHATSNEW, config.h.in, configure.in,
2769 def_data.c, def_data.h, def_data.in, gram.c, gram.h, gram.y,
2770 parse.c, parse.h, pathnames.h.in, sudo.c, sudo.h, sudoers.pod,
2771 testsudoers.c, toke.c, toke.l: Remove monitor support until there
2772 is a versino of systrace that uses a lookaside buffer (or we have
2773 a better mechanism to use).
2775 2007-08-15 09:22 millert
2777 * configure.in, configure, config.h.in, sudo.c: use getaddrinfo()
2778 instead of gethostbyname() if it is available
2780 2007-08-14 15:27 millert
2782 * parse.c, sudo.c: Deal with OSes where sizeof(gid_t) <
2785 2007-08-14 11:19 millert
2787 * interfaces.c: repair non-getifaddrs() code after ipv6 integration
2789 2007-08-14 10:04 millert
2791 * sudo.c: If we can open sudoers but fail to read the first byte,
2792 close the file stream before trying again.
2794 2007-08-13 12:34 millert
2796 * gram.c, toke.c: regen
2798 2007-08-13 12:29 millert
2800 * gram.y, interfaces.c, interfaces.h, match.c, sudoers.pod, toke.l:
2801 Add IPv6 support; adapted from patches by YOSHIFUJI Hideaki
2803 2007-08-13 12:23 millert
2805 * sudo.pod, sudoers.pod, visudo.pod: Add some missing markup Update
2808 2007-08-12 18:55 millert
2810 * configure, configure.in: fix sudo_noexec extension which got
2811 broken in the libtool update
2813 2007-08-10 10:41 millert
2815 * Makefile.in: explicitly specify -Tascii to nroff
2817 2007-08-08 16:07 millert
2819 * logging.c: remove an ANSI-ism that crept in
2821 2007-08-06 20:37 millert
2823 * sudo.pod: Adjust list indents Prevent -- from being turned into
2824 an em dash Use a list for the environment instead of a literal
2827 2007-08-06 20:36 millert
2829 * visudo.pod: Use a list for the environment instead of an indented
2832 2007-08-06 20:33 millert
2834 * sudoers.pod: Adjust list indentation
2836 2007-08-06 20:31 millert
2838 * license.pod: add =head3
2840 2007-08-06 10:24 millert
2842 * sudo.pod: mention that when specifying a uid for the -u option
2843 the shell may require that the # be escaped
2845 2007-08-01 22:08 millert
2847 * match.c: Fix off by one in group matching.
2849 2007-07-31 14:04 millert
2851 * env.c: Fix typo: PYTHONINSPEC should be PYTHONINSPECT. From
2854 2007-07-30 10:45 millert
2856 * configure, configure.in: Add missing define of
2857 HAVE_GSS_KRB5_CCACHE_NAME for the -lgssapi_krb5 case.
2859 2007-07-30 09:29 millert
2861 * aclocal.m4, configure.in, configure: Fix link tests such that new
2862 gcc doesn't optimize away the test.
2864 2007-07-29 19:21 millert
2866 * sudo.pod, sudoers.pod, visudo.pod: add missing over/back
2868 2007-07-29 19:09 millert
2870 * sudo.pod, sudoers.pod, visudo.pod: Change FILES section to use
2873 2007-07-29 18:32 millert
2875 * env.c: Add back allocation of the env struct in rebuild_env but
2876 save a copy of the old pointer and free it before returning.
2878 2007-07-29 16:09 millert
2880 * env.c: Don't init the private environment in rebuild_env() since
2881 it may have already been done implicitly
2882 sudo_setenv/sudo_unsetenv.
2884 Multiply length by sizeof(char *) in memcpy/memmove when copying
2885 the environment so we copy the full thing.
2887 Add missing set of parens so we deref the right pointer in
2888 sudo_unsetenv when searching for a matching variable.
2890 2007-07-26 16:35 millert
2892 * sudo.pod, sudoers.pod, visudo.pod: Use file markup for paths in
2895 2007-07-26 10:04 millert
2897 * sudo.pod, sudoers.pod, visudo.pod: Don't capitalize sudo/visudo
2899 2007-07-26 07:28 millert
2901 * sudoers.pod: Sort sudoers options; based on a diff from Igor
2904 2007-07-25 16:19 millert
2906 * sudo.pod, sudoers.pod, visudo.pod: Use 8 and 5 instead of
2907 @mansectsu@ and @mansectform@ since the latter confuses pod2man.
2908 The Makefile rules for the .man.in file will add @mansectsu@ and
2909 @mansectform@ back in after pod2man is done anyway.
2911 2007-07-22 19:09 millert
2913 * LICENSE, Makefile.in, license.pod: Move license info to pod
2916 2007-07-22 18:43 millert
2918 * configure, configure.in, sudoers.pod: Substitute value of
2919 path_info into sudoers man page.
2921 2007-07-22 16:40 millert
2923 * WHATSNEW: remove features that were back-ported to 1.6.9
2925 2007-07-22 15:20 millert
2927 * sudo.c, sudo.pod, visudo.c, visudo.pod: Sort SYNOPSIS and sync
2928 usage. From Igor Sobrado.
2930 2007-07-22 15:19 millert
2932 * env.c: Only need sudo_setenv/sudo_unsetenv if we are going to use
2933 ldap_sasl_interactive_bind_s() but don't have
2934 gss_krb5_ccache_name().
2936 2007-07-22 08:23 millert
2938 * ChangeLog: rebuild without branch info
2940 2007-07-22 08:23 millert
2942 * Makefile.in: Add ChangeLog target
2944 2007-07-22 08:14 millert
2946 * auth/pam.c: Run cleanup code if the user hits ^C at the password
2949 2007-07-22 08:13 millert
2951 * auth/pam.c: Some versions of pam_lastlog have a bug that will
2952 cause a crash if PAM_TTY is not set so if there is no tty, set
2953 PAM_TTY to the empty string.
2955 2007-07-20 09:32 millert
2957 * Makefile.in: ChageLog not Changelog
2959 2007-07-20 09:31 millert
2963 2007-07-20 09:29 millert
2965 * Makefile.in: CHANGE -> Changelog
2967 2007-07-19 20:23 millert
2971 2007-07-19 19:53 millert
2973 * config.h.in, configure.in, configure, ldap.c: Add configure hooks
2974 for gss_krb5_ccache_name() and the gssapi headers.
2976 2007-07-18 12:57 millert
2978 * env.c, sudo.c: rebuild_env() and insert_env_vars() no longer
2979 return environment pointer, they set environ directly.
2981 No longer need to pass around an envp pointer since we just
2982 operate on environ now.
2984 Add dosync argument to insert_env() that indicates whether it
2985 should reset environ when realloc()ing env.envp.
2987 Use an initial size of 128 for the environment.
2989 2007-07-18 12:41 millert
2991 * env.c: Split sudo_setenv() into an external version and a version
2992 only for use by rebuild_env().
2994 2007-07-16 19:40 millert
2996 * ldap.c: Add support for using gss_krb5_ccache_name() instead of
2997 setting KRB5CCNAME. Also use sudo_unsetenv() in the
2998 non-gss_krb5_ccache_name() case if there was no KRB5CCNAME in the
2999 original environment. TODO: configure setup for
3000 gss_krb5_ccache_name()
3002 2007-07-16 18:44 millert
3004 * README.LDAP: add krb5_ccname
3006 2007-07-16 18:44 millert
3008 * README.LDAP, ldap.c: Add support for sasl_secprops in ldap.conf
3010 2007-07-16 18:39 millert
3012 * env.c, sudo.h: Add sudo_unsetenv() and refactor private env
3013 syncing code into sync_env().
3015 2007-07-16 07:27 millert
3017 * README.LDAP, ldap.c: The ldap.conf variable is sasl_auth_id not
3020 2007-07-15 15:44 millert
3022 * ldap.c, sudo.c, sudo.h: Add support for krb5_ccname in ldap.conf.
3023 If specified, it will override the default value of KRB5CCNAME
3024 in the environment for the duration of the call to
3025 ldap_sasl_interactive_bind_s().
3027 2007-07-15 15:41 millert
3029 * env.c, sudo.h: Remove format_env() Add sudo_setenv() to replace
3030 most format_env() + insert_env() combinations. insert_env() no
3031 longer takes a struct environment *
3033 2007-07-15 12:47 millert
3035 * ldap.c: Fix use_sasl vs. rootuse_sasl logic.
3037 2007-07-15 09:23 millert
3039 * README.LDAP, config.h.in, configure, configure.in, ldap.c: Add
3040 support for SASL auth when connecting to an LDAP server. Adapted
3041 from a diff by Tom McLaughlin.
3043 2007-07-14 16:32 millert
3045 * configure, configure.in: Only enable AIX or BSD auth if no other
3046 exclusive auth method has been chosen. Allows people to e.g.,
3047 use PAM on AIX without adding --without-aixauth. A better
3048 solution is needed to deal with default authentication since if a
3049 non-exclusive method is chosen we will still get an error.
3051 2007-07-11 11:23 millert
3053 * HISTORY, Makefile.in, history.pod: Generate HISTORY from
3054 history.pod (which is also used for web pages)
3056 2007-07-09 19:40 millert
3058 * sudo.man.in, sudoers.man.in: regen
3060 2007-07-09 19:25 millert
3062 * sudo.pod: Better explanation of environment handling in the sudo
3065 2007-07-09 15:13 millert
3067 * env.c, sudo.c: Defer setting user-specified env vars until after
3070 2007-07-09 13:25 millert
3072 * env.c: honor def_default_path for PATH set on the command line
3074 2007-07-09 13:22 millert
3076 * sudo.c, env.c, sudo.pod, sudoers.pod: Allow user to set
3077 environment variables on the command line as long as they are
3078 allowed by env_keep and env_check. Ie: apply the same
3079 restrictions as normal environment variables. TODO: deal with
3082 2007-07-08 14:44 millert
3084 * sudo.c, sudo_edit.c: Call rebuild_env() in call cases. Pass
3085 original envp to sudo_edit(). Don't allow -E or env var setting
3086 in sudoedit mode. More accurate usage() when called as sudoedit.
3088 2007-07-08 14:41 millert
3090 * ldap.c: warn -> warning
3092 2007-07-08 14:11 millert
3094 * sudo.pod: add -c option to sudoedit synopsis
3096 2007-07-08 10:27 millert
3098 * TODO: udpate to reality
3100 2007-07-08 09:43 millert
3102 * parse.c: Use ALLOW/DENY instead of TRUE/FALSE when dealing with
3103 the return value from {user,host,runas,cmnd}_matches(). Rename
3104 *matches variables -> *match. Purely cosmetic.
3106 2007-07-08 09:30 millert
3108 * parse.c: Move setting of FLAG_NO_CHECK into the if(pwflag) block.
3109 No change in behavior.
3111 2007-07-08 09:17 millert
3113 * sudoers: add SETENV tag
3115 2007-07-06 15:51 millert
3117 * parse.c: Make pwcheck local to the pwflag block. Use pwcheck
3118 even if user didn't match since Defaults options may still apply.
3120 2007-07-06 14:51 millert
3122 * check.c, sudo.c: Do not update timestamp if user not validated by
3125 2007-07-06 10:14 millert
3127 * set_perms.c: for PERM_RUNAS, set the egid to the runas user's gid
3128 and restore to the user's original in PERM_ROOT
3130 2007-07-06 10:04 millert
3132 * logging.c, mon_systrace.c, set_perms.c, sudo.h: PERM_FULL_ROOT is
3133 now no different than PERM_ROOT so remove PERM_FULL_ROOT
3135 2007-07-06 09:49 millert
3137 * check.c: don't check timestamp mtime if we are just going to
3140 2007-07-06 09:33 millert
3142 * sudoers.pod: Move sudoers defaults parameters into their own
3145 2007-07-05 20:21 millert
3147 * testsudoers.c: Reduce a level of indent by a few placed continue
3150 2007-07-05 20:20 millert
3152 * parse.c: Make matching but negated commands/hosts/runas entries
3153 override a previous match as expected. Also reduce some levels
3154 of indent by a few placed continue statements.
3156 2007-07-05 16:34 millert
3158 * parse.c: Print default runas in "sudo -l" if sudoers don't
3161 2007-07-05 15:46 millert
3163 * match.c: Less hacky way of testing whether the domain was set.
3165 2007-07-04 15:50 millert
3167 * INSTALL: Mention pam-devel and openldap-devel for Linux
3169 2007-07-03 19:38 millert
3171 * README.LDAP: or vs. are
3173 2007-07-01 16:55 millert
3175 * sudo.c: fix typo in Solaris project support
3177 2007-07-01 09:40 millert
3181 2007-07-01 09:07 millert
3183 * sudo.c: Make -- on the command line match the manual page. The
3184 implied shell case has been simplified as a result.
3186 2007-06-28 10:44 millert
3188 * sudoers2ldif: add simplistic support for sudoRunas; note that if
3189 a sudoers entry contains multiple Runas users, all will apply to
3192 2007-06-28 10:42 millert
3194 * sudoers2ldif: honor SETENV and NOSETENV tags
3196 2007-06-24 09:25 millert
3198 * mon_systrace.c: Redo setting of user_args. We now build up a
3199 private copy of argv first and then replace the NULs with spaces.
3201 2007-06-24 09:19 millert
3203 * mon_systrace.c: getcwd() returns NULL on failure, not 0 on
3206 2007-06-24 07:39 millert
3208 * mon_systrace.c: allow chunksiz to reach 1 before erroring out
3210 2007-06-23 20:00 millert
3212 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
3213 visudo.man.in: regen
3215 2007-06-23 19:58 millert
3217 * def_data.c, def_data.h, def_data.in, env.c, gram.c, gram.h,
3218 gram.y, logging.c, parse.c, parse.h, sudo.c, sudo.h, sudo.pod,
3219 sudoers.pod, toke.c, toke.l: Add support for setting environment
3220 variables on the command line. This is only allowed if the
3221 setenv sudoers options is enabled or if the command is prefixed
3222 with the SETENV tag.
3224 2007-06-23 19:57 millert
3226 * README.LDAP: replace Aaron's email address with the sudo-workers
3229 2007-06-23 19:55 millert
3233 2007-06-21 20:35 millert
3235 * Makefile.in, README.LDAP, schema.OpenLDAP, schema.iPlanet: Break
3236 schema out into separate files.
3238 2007-06-21 18:28 millert
3240 * auth/aix_auth.c: free message if set by authenticate()
3242 2007-06-21 13:03 millert
3244 * match.c: deal with NULL gr_mem
3246 2007-06-20 15:04 millert
3248 * config.h.in: regen
3250 2007-06-20 15:04 millert
3252 * configure.in: add template for HAVE_PROJECT_H
3254 2007-06-20 07:06 millert
3256 * closefrom.c: include fcntl.h
3258 2007-06-19 19:37 millert
3260 * INSTALL: mention --with-project
3262 2007-06-19 18:24 millert
3264 * config.h.in, configure.in, sudo.c: Add Solaris 10 "project"
3265 support. From Michael Brantley.
3267 2007-06-19 17:27 millert
3269 * sudoers.pod: fix typo
3271 2007-06-19 17:22 millert
3275 2007-06-19 17:21 millert
3277 * configure.in: Fix preservation of LDFLAGS in the LDAP case.
3279 2007-06-19 17:00 millert
3281 * memrchr.c: Remove dependecy on NULL
3283 2007-06-19 15:37 millert
3287 2007-06-19 15:37 millert
3289 * aclocal.m4, configure.in: Can't use the regular autoconf
3290 fnmatch() check since we need FNM_CASEFOLD so go back to our
3293 2007-06-19 12:52 millert
3295 * env.c: Fix preserving of variables in env_keep.
3297 2007-06-19 07:10 millert
3299 * env.c: add XAUTHORIZATION
3301 2007-06-18 20:41 millert
3303 * UPGRADE: expand upon env resetting and mention that it began in
3306 2007-06-18 20:33 millert
3308 * sudoers.pod: Update descriptions of env_keep and env_check to
3309 match current reality.
3311 2007-06-18 17:33 millert
3313 * env.c: Add LINGUAS to initial_checkenv_table. Add COLORS,
3314 HOSTNAME, LS_COLORS, MAIL, PS1, PS2, XAUTHORITY to
3315 intial_keepenv_table.
3317 2007-06-18 17:23 millert
3319 * env.c, logging.c: Treat USERNAME environemnt variable like
3322 2007-06-18 17:21 millert
3324 * env.c: Don't need to populate keepenv table with the contents of
3327 2007-06-18 08:57 millert
3329 * sudo.c: Don't force sudo into the C locale.
3331 2007-06-18 08:56 millert
3333 * env.c: Make env_check apply when env_reset it true. Environment
3334 variables are passed through unless they contain '/' or '%'.
3335 There is no need to have a variable in both env_check and
3338 2007-06-16 07:31 millert
3340 * visudo.c: Remove an duplicate lock_file() call and add a comment.
3342 2007-06-15 21:16 millert
3344 * UPGRADE: Add sudo 1.6.9 upgrade note.
3346 2007-06-14 12:23 millert
3348 * interfaces.c: Solaris will return EINVAL if the buffer used in
3349 SIOCGIFCONF is too small. From Klaus Wagner.
3351 2007-06-14 12:03 millert
3353 * Makefile.in, config.h.in, configure, configure.in, memrchr.c,
3354 logging.c, sudo.h: Redo the long syslog line splitting based on a
3355 patch from Eygene Ryabinkin. Include memrchr() for systems
3358 2007-06-14 07:09 millert
3360 * configure.in: Since we need to be able to convert timespec to
3361 timeval for utimes() the last 3 digits in the tv_nsec are not
3362 significant. This makes the sudoedit file date comparison work
3365 2007-06-13 13:41 millert
3367 * aclocal.m4, configure, configure.in: Add SUDO_ADD_AUTH macro to
3368 deal with adding things to AUTH_OBJS. This deals with exclusive
3369 authentication methods in a simple way.
3371 2007-06-12 13:08 millert
3373 * LICENSE: mkstemp.c is BSD code too.
3375 2007-06-12 09:21 millert
3377 * sudo.pod, sudoers.pod, visudo.pod: No commercial support for now.
3379 2007-06-11 18:27 millert
3381 * sudo.c: cleanenv() is no more.
3383 2007-06-10 18:37 millert
3385 * ChangeLog: Display branch info in Changelog
3387 2007-06-10 18:18 millert
3389 * utimes.c: Include config.h early so we have it for
3392 2007-06-10 18:00 millert
3394 * ChangeLog: Fix Changelog generation and update.
3396 2007-06-09 07:26 millert
3398 * closefrom.c: Use /proc/self/fd instead of /proc/$$/fd
3400 Move old-style fd closing into closefrom_fallback() and call that
3401 if /proc/self/fd doesn't exist or the F_CLOSEM fcntl() fails
3403 2007-06-09 07:24 millert
3405 * config.h.in, configure.in, auth/kerb5.c: o use
3406 krb5_verify_user() if available instead of doing it by hand
3407 o use krb5_init_secure_context() if we have it
3408 o pass an encryption type of 0 to krb5_kt_read_service_key()
3410 ENCTYPE_DES_CBC_MD5 to let kerberos choose.
3412 2007-06-09 07:20 millert
3414 * env.c: Check TERM and COLORTERM for '%' and '/' characters. From
3417 2007-06-09 07:17 millert
3419 * configure.in: Fix closefrom() substitution in the Makefile
3421 2007-06-09 07:15 millert
3423 * TROUBLESHOOTING: Mention alternate sudo pronunciation.
3425 2007-06-07 07:52 millert
3427 * env.c: Remove KRB5_KTNAME from environment. Allow COLORTERM.
3429 2007-06-07 07:22 millert
3431 * auth/kerb5.c: If we cannot get a valid service key using the
3432 default keytab it is a fatal error. Fixes a bug where sudo could
3433 be tricked into allowing access when it should not by a fake KDC.
3434 From Thor Lancelot Simon.
3436 2007-05-12 08:56 millert
3438 * aclocal.m4, configure, configure.in: Update long long checks to
3439 use AC_CHECK_TYPES and to cache values.
3441 2007-05-12 08:07 millert
3443 * aclocal.m4, configure.in: Use AC_FUNC_FNMATCH instead of a
3444 homebrew fnmatch checker. We can't use AC_REPLACE_FNMATCH since
3445 that assumes replacing with GNU fnmatch.
3447 2007-05-11 17:05 millert
3449 * configure, configure.in: Add closefrom() to LIB_OBJS not
3450 SUDO_OBJS if it is missing since we need it for visudo now too.
3452 2007-04-24 14:44 millert
3454 * sudoers.pod: Attempt to clarify the bit talking about network
3455 numbers w/o netmasks.
3457 2007-04-24 14:25 millert
3459 * sudo.pod: Clarify timestamp dir ownership sentence.
3461 2007-04-20 12:40 millert
3463 * auth/pam.c: Linux PAM now defines __LINUX_PAM__, not
3464 __LIBPAM_VERSION. From Dmitry V. Levin.
3466 2007-04-16 12:13 millert
3468 * sudo.c: -i is also one of the mutually exclusive options to list
3469 it in the warning message. Noted by Chris Pepper.
3471 2007-04-12 11:18 millert
3473 * visudo.pod: The sudoers variable is env_editor, not enveditor.
3474 From Jean-Francois Saucier.
3476 2007-03-29 13:30 millert
3478 * redblack.c: I tracked down the original author so credit him and
3479 include his license info.
3481 2007-02-06 13:25 millert
3483 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
3484 sudoers.pod: Fix typos; from Jason McIntyre.
3486 2007-02-06 13:23 millert
3488 * logging.c: Restore signal mask before calling reapchild(). Fixes
3489 a possible race condition that could prevent sudo from properly
3490 waiting for the child.
3492 2007-01-31 10:02 millert
3494 * pwutil.c: Don't declare pw_free() if we are not going to use it.
3496 2007-01-31 10:00 millert
3498 * env.c: Add NOEXEC support for AIX 5.3 which supports LDR_PRELOAD
3499 and LDR_PRELOAD64. The 64-bit version is not currently
3500 supported. Remove zero_env() prototype as it no longer exists.
3502 2006-12-11 13:21 millert
3504 * logging.c: Add "Auto-Submitted: auto-generated" line to sudo mail
3507 2006-09-29 10:53 millert
3509 * auth/pam.c: If the user enters ^C at the password prompt, abort
3510 instead of trying to authenticate with an empty password (which
3511 causes an annoying delay).
3513 2006-08-17 11:26 millert
3515 * closefrom.c, config.h.in, configure, configure.in: Add fcntl
3516 F_CLOSEM support to closefrom(); adapted from a diff by Darren
3519 2006-08-17 11:25 millert
3521 * pwutil.c: pw_free() is only used by sudo_freepwcache() so ifdef
3524 2006-08-04 11:34 millert
3526 * config.sub, config.guess: Update to latest versions from
3527 cvs.savannah.gnu.org
3529 2006-07-31 13:51 millert
3531 * pwutil.c, sudo_edit.c: Move password/group cache cleaning out of
3532 sudo_end{pw,grp}ent() so we can close the passwd/group files
3535 2006-07-31 13:50 millert
3537 * config.h.in, configure, configure.in, set_perms.c: Add seteuid()
3538 flavor of set_perms() for systems without setreuid() or
3539 setresuid() that have a working seteuid(). Tested on Darwin.
3541 2006-07-30 15:56 millert
3543 * mon_systrace.c: systrace_read() returns ssize_t
3545 2006-07-30 15:53 millert
3547 * configure, configure.in: Fix typo, -lldap vs. -ldap; from Tim
3550 2006-07-28 13:12 millert
3552 * HISTORY: Fix typo; Matt Ackeret
3554 2006-07-17 08:25 millert
3556 * sudo.c: Print sudoers path in -V mode for root.
3558 2006-06-15 14:44 millert
3560 * ldap.c: Do a sub tree search instead of a base search (one level
3561 in the tree only) for sudo right objects. This allows system
3562 administrators to categorize the rights in a tree to make them
3565 2005-12-28 13:52 millert
3567 * sudo.pod: fix typo
3569 2005-12-04 12:16 millert
3571 * ldap.c: Convert GET_OPT and GET_OPTI to use just 2 args. Add
3572 timelimit and bind_timelimit support; adapted from gentoo.
3574 2005-11-23 18:57 millert
3576 * ldap.c: Support comments that start in the middle of a line
3578 2005-11-23 18:56 millert
3580 * configure.in, configure: Define LDAP_DEPRECATED until we start
3581 using ldap_get_values_len()
3583 2005-11-18 09:55 millert
3585 * closefrom.c: Silence gcc -Wsign-compare; djm@openbsd.org
3587 2005-11-17 20:39 millert
3589 * error.c, sudo.c, sudo.h, testsudoers.c, visudo.c: cleanup() now
3590 takes an int as an arg so it can be used as a signal handler too.
3592 2005-11-17 20:38 millert
3594 * sudo.c: Make a copy of the shell field in the passwd struct for
3595 NewArgv to avoid a use after free situation after sudo_endpwent()
3598 2005-11-16 20:36 millert
3600 * Makefile.in, mkstemp.c, config.h.in, configure, configure.in: Add
3601 mkstemp() for those poor souls without it.
3603 2005-11-15 09:25 millert
3605 * env.c: Add PERL5DB to list of environment variables to remove.
3607 2005-11-13 15:49 millert
3609 * mon_systrace.c, mon_systrace.h: Instead of calling the check
3610 function twice with a state cookie use separate check/log
3613 Check more ioctl() calls for failure.
3615 systrace_{read,write} now return the number of bytes read/written
3618 2005-11-13 14:51 millert
3620 * env.c: Add more environment variables to remove; from gentoo
3621 linux Add some comments about what bad env variables go to what
3624 2005-11-11 17:23 millert
3626 * sudo.c, sudo_edit.c: Move sudo_end{gr,pw}ent() until just before
3627 the exec since they free up our cached copy of the passwd
3628 structs, including sudo_user and sudo_runas. Fixes a
3631 2005-11-11 17:19 millert
3633 * visudo.c: Close all fd's before executing editor.
3635 2005-11-11 17:17 millert
3637 * sudo.c: Enable malloc debugging on OpenBSD when SUDO_DEVEL is
3640 2005-11-11 11:22 millert
3642 * check.c: Fix fd leak when lecture file option is enabled. From
3645 2005-11-07 11:02 millert
3647 * env.c: Add PERLLIB, PERL5LIB and PERL5OPT to the default list of
3648 environment variables to remove. From Charles Morris
3650 2005-11-01 13:24 millert
3652 * env.c: add JAVA_TOOL_OPTIONS to initial_badenv_table for java 5
3654 2005-10-27 20:35 millert
3656 * env.c: add PS4 and SHELLOPTS to initial_badenv_table for bash
3658 2005-08-14 20:32 millert
3660 * sudoers.pod: Fix typo; Toby Peterson
3662 2005-08-02 09:57 millert
3664 * tsgetgrpw.c: Make return buffers static so they don't get
3667 2005-07-27 21:14 millert
3669 * auth/securid5.c: Fix securid5 authentication, was not checking
3670 for ACM_OK. Also add default cases for the two switch()es.
3671 Problem noted by ccon at worldbank
3673 2005-06-26 20:10 millert
3675 * ldap.c: Remove ncat() in favor of just counting bytes and
3676 pre-allocating what is needed.
3678 2005-06-26 19:44 millert
3680 * ldap.c: Fix up some comments Add missing fclose() for the
3683 2005-06-26 19:38 millert
3685 * ldap.c: align struct ldap_config
3687 2005-06-26 19:37 millert
3689 * ldap.c: use LINE_MAX for max conf file line size
3691 2005-06-26 18:36 millert
3693 * pathnames.h.in: add _PATH_LDAP_SECRET
3695 2005-06-26 18:36 millert
3697 * README.LDAP: Mention rootbinddn Give example ou=SUDOers container
3699 2005-06-25 18:03 millert
3701 * configure, INSTALL, configure.in, ldap.c: Support rootbinddn in
3704 2005-06-25 17:46 millert
3706 * env.c, sudo.pod, sudoers.pod: Preserve DISPLAY environment
3707 variable by default.
3709 2005-06-25 16:39 millert
3711 * acsite.m4, configure: set need_lib_prefix=no for all cases; this
3712 is safe for LD_PRELOAD
3714 2005-06-25 16:15 millert
3716 * acsite.m4, configure: set need_version=no for all cases; this is
3719 2005-06-25 14:45 millert
3723 2005-06-25 14:33 millert
3725 * configure, configure.in: Add dragonfly
3727 2005-06-25 14:29 millert
3729 * auth/pam.c: Fix call to pam_end() when pam_open_session() fails.
3731 2005-06-25 14:21 millert
3735 2005-06-25 14:20 millert
3737 * acsite.m4: rebuild acsite.m4 from libtool 1.9f libtool.m4
3738 ltoptions.m4 ltsugar.m4 ltversion.m4
3740 2005-06-25 14:08 millert
3742 * config.guess, config.sub, ltmain.sh: merge in local changes:
3743 config.guess: o better openbsd support config.sub: o hiuxmpp
3744 support ltmain.sh o remove requirement that libs must begin with
3745 "lib" o don't print a bunch of crap about library installs o
3748 2005-06-25 14:05 millert
3750 * config.guess, config.sub, ltmain.sh: libtool 1.9f
3752 2005-06-25 14:04 millert
3754 * configure.in: Update with autoupdate and make minor changes for
3757 2005-06-22 23:19 millert
3759 * parse.c: don't call sudo_ldap_display_cmnd if ldap not setup
3761 2005-06-22 23:04 millert
3763 * check.c, compat.h, fileops.c, gettime.c, sudo_edit.c, visudo.c,
3764 emul/timespec.h: Move declatation of struct timespec to its own
3765 include files for systems without it since it needs time_t
3768 2005-06-22 22:57 millert
3770 * ldap.c: Don't set safe_cmnd for the "sudo ALL" case.
3772 2005-05-27 01:59 millert
3774 * auth/pam.c: Call pam_open_session() and pam_close_session() to
3775 give pam_limits a chance to run. Idea from Karel Zak.
3777 2005-04-24 19:24 millert
3779 * check.c, sudo.c: Add explicit cast from mode_t -> u_int in printf
3780 to silence warnings on Solaris
3782 2005-04-24 19:22 millert
3784 * parse.c: include grp.h to silence a warning on Solaris
3786 2005-04-23 15:10 millert
3788 * parse.c: Fix printing of += and -= defaults.
3790 2005-04-17 01:21 millert
3792 * mon_systrace.c: Sanity check number of syscall args with argsize.
3793 Not really needed but a little paranoia never hurts.
3795 2005-04-17 01:18 millert
3797 * mon_systrace.c, mon_systrace.h: Don't do pointer arithmetic on
3798 void * Use int, not size_t/ssize_t for systrace lengths (since it
3801 2005-04-16 03:14 millert
3803 * mon_systrace.c: Add some memsets for paranoia Fix namespace
3804 collsion w/ error Check rval of decode_args() and update_env()
3805 Remove improper setting of validated variable
3807 2005-04-11 21:37 millert
3809 * parse.c, sudo.c, sudo.h: In -l mode, only check local sudoers
3810 file if def_ignore_sudoers is not set and call LDAP versions from
3811 display_privs() and display_cmnd() instead of directly from
3812 main(). Because of this we need to defer closing the ldap
3813 connection until after -l processing has ocurred and we must pass
3814 in the ldap pointer to display_privs() and display_cmnd().
3816 2005-04-11 21:33 millert
3818 * ldap.c: Reorganize LDAP code to better match normal sudoers
3819 parsing. Instead of storing strings for later printing in -l
3820 mode we do another query since the authenticating user and the
3821 user being listed may not be the same (the new -U flag). Also
3822 add support for "sudo -l command".
3824 There is still a fair bit if duplicated code that can probably be
3827 2005-04-11 00:37 millert
3829 * ldap.c: Replace pass variable with do_netgr for better
3832 2005-04-10 23:49 millert
3834 * ldap.c: use DPRINTF macro
3836 2005-04-10 23:18 millert
3838 * ldap.c: estrdup, not strdup
3840 2005-04-10 17:44 millert
3842 * parse.c: Add macro to test if the tag changed to improve
3845 2005-04-10 17:40 millert
3847 * parse.c: Avoid printing defaults header if there are no defaults
3850 2005-04-10 15:29 millert
3852 * glob.c: Fix a warning on systems without strlcpy().
3854 2005-04-10 13:32 millert
3856 * pwutil.c: Use macros where possible for sudo_grdup() like
3859 2005-04-08 17:04 millert
3861 * utimes.c: It is possible for tv_usec to hold >= 1000000 usecs so
3862 add in tv_usec / 1000000.
3864 2005-03-29 23:38 millert
3866 * auth/kerb5.c: The component in krb5_principal_get_comp_string()
3867 should be 1, not 0 for Heimdal. From Alex Plotnick.
3869 2005-03-29 09:29 millert
3871 * alias.c, alloc.c, check.c, defaults.c, find_path.c, gram.c,
3872 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
3873 pwutil.c, redblack.c, sudo.c, sudo.h, toke.c, toke.l, visudo.c:
3874 Add efree() for consistency with emalloc() et al. Allows us to
3875 rely on C89 behavior (free(NULL) is valid) even on K&R.
3877 2005-03-28 22:33 millert
3879 * parse.c, sudo.c: Move initgroups() for -U option into
3880 display_privs() so group matching in sudoers works correctly.
3882 2005-03-26 21:34 millert
3884 * ldap.c: Removed duplicate call to ldap_unbind_s introduced along
3885 with sudo_ldap_close.
3887 2005-03-26 20:01 millert
3889 * parse.c: Add missing space in Defaults printing
3891 2005-03-25 12:36 millert
3893 * pwutil.c: Sync sudo_pwdup with OpenBSD changes: use macros for
3894 size computaton and string copies.
3896 2005-03-18 22:08 millert
3898 * pwutil.c: Zero old pw_passwd before replacing with version from
3901 2005-03-18 22:07 millert
3903 * configure, configure.in: Only attempt shadow password detection
3904 if PAM is not being used Add shadow_* variables to make shadow
3905 password detection more generic.
3907 2005-03-18 21:46 millert
3909 * configure.in: Use OSDEFS for os-specific -D_FOO_BAR stuff rather
3912 2005-03-12 19:27 millert
3914 * sudoers.pod: use a non-breaking space to avoid a double space
3917 2005-03-12 19:26 millert
3919 * sudo.pod: commna, not colon after e.g.
3921 2005-03-12 18:43 millert
3923 * sudo_noexec.c: Add __ variants of the exec functions. GNU libc
3924 at least uses __execve() internally.
3926 2005-03-12 12:29 millert
3928 * indent.pro: Match reality a bit more.
3930 2005-03-12 12:27 millert
3932 * pwutil.c: Missed piece from rev. 1.6, fix sudo_getpwnam() too.
3934 2005-03-11 23:42 millert
3936 * pwutil.c: Store shadow password after making a local copy of
3937 struct passwd in case normal and shadow routines use the same
3938 internal buffer in libc.
3940 2005-03-10 20:57 millert
3942 * alloc.c, logging.c: Make varargs usage consistent with the rest
3945 2005-03-10 10:09 millert
3947 * sudo_noexec.c: Wrap more of the exec family since on Linux the
3948 others do not appear to go through the normal execve() path.
3950 2005-03-10 09:57 millert
3952 * visudo.c: make print_unused static like proto says
3954 2005-03-10 09:55 millert
3956 * glob.c: silence a warning on K&R systems
3958 2005-03-10 09:51 millert
3960 * parse.c, alias.c, error.c: make this build in K&R land
3962 2005-03-07 22:21 millert
3966 2005-03-05 22:46 millert
3968 * ldap.c: return(foo) not return foo optimize _atobool() slightly
3970 2005-03-05 22:40 millert
3972 * ldap.c: Use TRUE/FALSE
3974 2005-03-05 22:31 millert
3976 * ldap.c: Reformat to match the rest of sudo's code.
3978 2005-03-05 19:33 millert
3980 * sudo.pod: I am the primary author
3982 2005-02-22 22:28 millert
3984 * README, RUNSON, Makefile.in: The RUNSON file is toast--it
3985 confused too many people and really isn't needed in a
3986 configure-oriented world.
3988 2005-02-22 22:28 millert
3990 * INSTALL: alternate -> alternative
3992 2005-02-22 22:26 millert
3994 * tgetpass.c: Use TCSADRAIN instead of TCSAFLUSH since some OSes
3995 have issues with TCSAFLUSH.
3997 2005-02-22 22:16 millert
3999 * toke.l: Allow leading blanks before Defaults and Foo_Alias
4002 2005-02-22 22:14 millert
4004 * Makefile.in: fix rules to build toke.o and gram.o in devel mode
4006 2005-02-20 13:00 millert
4008 * sudoers.pod: env_keep overrides set_logname
4010 2005-02-20 12:57 millert
4012 * env.c: Fix disabling set_logname and make env_keep override
4015 2005-02-20 12:28 millert
4017 * compat.h, config.h.in, configure, configure.in: No longer need
4020 2005-02-20 11:48 millert
4022 * env.c, sudo.c: Just clean the environment once. This assumes
4023 that any further setenv/putenv will be able to handle the fact
4024 that we replaced environ with our own malloc'd copy but all the
4025 implementations I've checked do.
4027 2005-02-15 23:16 millert
4029 * env.c, sudo.c: In -i mode, base the value of insert_env()'s
4030 dupcheck flag on DID_FOO flags. Move checks for $HOME resetting
4033 2005-02-13 00:33 millert
4035 * env.c, sudo.c: Move setting of user_path, user_shell, user_prompt
4036 and prev_user into init_vars() since user_shell at least is
4039 2005-02-12 18:51 millert
4041 * Makefile.in: fix devel builds
4043 2005-02-12 18:46 millert
4045 * check.c, sudo.c: Fix some printf format mismatches on error.
4047 2005-02-12 18:33 millert
4049 * configure, gram.c, toke.c: regen
4051 2005-02-12 17:56 millert
4053 * LICENSE, Makefile.binary.in, Makefile.in, aclocal.m4, alias.c,
4054 alloc.c, check.c, closefrom.c, compat.h, configure.in,
4055 defaults.c, defaults.h, env.c, error.c, fileops.c, find_path.c,
4056 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.y,
4057 interfaces.c, interfaces.h, ldap.c, logging.c, logging.h,
4058 match.c, mon_systrace.c, parse.c, redblack.c, redblack.h,
4059 set_perms.c, sigaction.c, snprintf.c, strcasecmp.c, strerror.c,
4060 strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.pod, sudo_edit.c,
4061 sudo_noexec.c, sudoers.pod, testsudoers.c, tgetpass.c, toke.l,
4062 utimes.c, version.h, visudo.c, visudo.pod, zero_bytes.c,
4063 auth/afs.c, auth/aix_auth.c, auth/bsdauth.c, auth/dce.c,
4064 auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
4065 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4066 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
4067 emul/utime.h: Update copyright years.
4069 2005-02-12 16:46 millert
4071 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
4074 2005-02-12 16:16 millert
4076 * WHATSNEW: What's new in sudo 1.7, based on the 1.7 CHANGES
4079 2005-02-11 18:06 millert
4081 * compat.h, logging.h, sudo.h: Add __printflike and use it with gcc
4082 to warn about printf-like format mismatches
4084 2005-02-10 00:16 millert
4086 * CHANGES, ChangeLog: Replaced CHANGES file with ChangeLog
4087 generated from cvs logs
4089 2005-02-10 00:03 millert
4091 * set_perms.c: Use warning/error instead of perror/fatal.
4093 2005-02-09 23:13 millert
4095 * config.guess: Update OpenBSD section
4097 2005-02-09 23:10 millert
4099 * UPGRADE: Add upgrading noted for 1.7
4101 2005-02-09 23:00 millert
4103 * env.c, sudo.c, sudoers.pod: Instead of zeroing out the
4104 environment, just prune out entries based on the env_delete and
4105 env_check lists. Base building up the new environment on the
4106 current environment and the variables we removed initially.
4108 2005-02-09 22:23 millert
4110 * configure, configure.in, sudo.c, config.h.in: Set locale to "C"
4111 if locales are supported, just to be safe.
4113 2005-02-09 22:19 millert
4115 * toke.c, toke.l: Cast argument to ctype functions to unsigned
4118 2005-02-07 22:56 millert
4120 * env.c: correct value for DID_USER
4122 2005-02-07 22:55 millert
4124 * error.c, fnmatch.c, getcwd.c, glob.c, snprintf.c: #include
4125 <compat.h> not "compat.h"
4127 2005-02-07 22:51 millert
4129 * defaults.c: Reset the environment by default.
4131 2005-02-07 22:50 millert
4133 * sudo.c: Alloc an extra slot in NewArgv. Removes the need to
4134 malloc an new vector if execve() fails.
4136 2005-02-06 23:16 millert
4138 * INSTALL, config.h.in, configure, configure.in, sudo.c: Use
4139 execve(2) and wrap the command in sh if we get ENOEXEC.
4141 2005-02-05 23:01 millert
4143 * sudo_noexec.c: Only include time.h on systems that lack struct
4144 timespec which gets defind in compat.h (using time_t).
4146 2005-02-05 22:59 millert
4148 * sudo_noexec.c: Include time.h for time_t in compat.h for systems
4149 w/o struct timespec.
4151 2005-02-05 22:56 millert
4153 * configure, compat.h, config.h.in, configure.in: use bcopy on
4156 2005-02-05 22:31 millert
4158 * compat.h: __attribute__((__unused__)) doesn't work in gcc 2.7.2.1
4159 so limit its use to gcc >= 2.8.
4161 2005-02-05 21:21 millert
4163 * Makefile.in: Add explicit rule to build sudo_noexec.lo
4165 2005-02-05 17:56 millert
4167 * INSTALL.configure, Makefile.in: No longer depend on VPATH;
4168 pointed out a bunch of missed dependencies.
4170 2005-02-05 13:18 millert
4172 * TROUBLESHOOTING: Help for PAM when account section is missing
4174 2005-02-05 13:01 millert
4176 * auth/pam.c: Give user a clue when there is a missing "account"
4177 section in the PAM config.
4179 2005-02-05 10:22 millert
4181 * auth/pam.c: Better error handling.
4183 2005-02-05 09:57 millert
4185 * configure, config.h.in, configure.in: Move _FOO_SOURCE to
4186 CPPFLAGS so it takes effect as early as possible. Silences a
4187 warning about isblank() on linux.
4189 2005-02-04 21:49 millert
4191 * auth/pam.c: Fix typo (missing comma) that caused an incorrect
4192 number of args to be passed to log_error().
4194 2005-01-31 23:03 millert
4196 * pwutil.c: Don't try to destroy a tree we didn't create.
4198 2005-01-27 10:42 millert
4200 * alias.c, alloc.c, check.c, closefrom.c, compat.h, defaults.c,
4201 env.c, error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4202 getprogname.c, getspwuid.c, gettime.c, goodpath.c, gram.c,
4203 gram.y, interfaces.c, ldap.c, logging.c, match.c, mon_systrace.c,
4204 parse.c, pwutil.c, set_perms.c, sigaction.c, snprintf.c,
4205 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4206 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4207 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4208 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4209 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4210 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4211 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Add __unused to
4214 2005-01-21 10:34 millert
4216 * configure, configure.in: Fix error message when mixing invalid
4219 2005-01-21 10:32 millert
4221 * INSTALL: PAM, AIX auth, BSD auth and login_cap are now on by
4222 default if the OS supports them.
4224 2005-01-21 10:29 millert
4226 * config.h.in, auth/sudo_auth.h: s/HAVE_AUTHENTICATE/HAVE_AIXAUTH/g
4228 2005-01-21 10:29 millert
4230 * configure.in: Better checking for conflicting authentication
4231 methods Display the authentication methods used at the end of
4232 configure Rename --with-authenticate -> --with-aixauth Use
4233 --with-aixauth, --with-bsdauth, --with-pam, --with-logincap by
4234 default on systems that support them unless disabled. Add
4235 OSMAJOR variable that replaces old OSREV; now OSREV has full
4238 2005-01-17 19:40 millert
4240 * def_data.c, def_data.in, sudo.c, sudoers.pod: s/-O/-C/
4242 2005-01-14 13:35 millert
4244 * configure.in: Replace: test -n "$FOO" || FOO="bar"
4246 With: : ${FOO='bar'}
4248 2005-01-09 18:58 millert
4250 * pwutil.c, testsudoers.c, tsgetgrpw.c: Use function pointers to
4251 only call private passwd/group routines when using a nonstandard
4254 2005-01-06 10:34 millert
4258 2005-01-05 22:16 millert
4260 * tsgetgrpw.c: Can't use strtok() since it doesn't handle empty
4261 fields so add getpwent()/getgrent() functions and call those.
4263 2005-01-05 17:29 millert
4265 * Makefile.in: Fix dummied out toke.c and gram.c dependencies.
4267 2005-01-05 17:18 millert
4269 * Makefile.in: Rename PARSESRCS -> GENERATED since it is only used
4270 in the clean target Add devdir variable and use it to specify the
4271 path to parser sources
4273 2005-01-05 17:17 millert
4277 2005-01-05 17:17 millert
4279 * configure.in: Add a devdir variables that defaults to $(srcdir)
4280 and is set to . if --devel was specified. Allows for proper
4281 dependecies building the parser.
4283 2005-01-05 14:50 millert
4285 * testsudoers.c: Add support for custom passwd/group files.
4287 2005-01-05 14:47 millert
4289 * Makefile.in: Build private copy of pwutil.o for testsudoers with
4290 MYPW defined so it uses our own passwd/group routines.
4292 2005-01-05 14:46 millert
4294 * visudo.c: Remove sudo_*{pw,gr}* stubs and add
4295 sudo_setspent/sudo_endspent stubs instead. We can now just use
4296 the caching sudo_*{pw,gr}* functions in pwutil.c Add comment
4297 about wanting to call sudo_endpwent/sudo_endgrent in cleanup()
4299 2005-01-05 14:44 millert
4301 * tsgetgrpw.c: Remove caching; we will just use what is in pwutil.c
4302 Use global buffers for passwd/group structs Rename functions from
4305 2005-01-05 14:43 millert
4307 * logging.c, sudo.c: g/c pwcache_init/pwcache_destroy
4309 2005-01-05 14:42 millert
4311 * sudo.h: Undo last commit and add sudo_setspent and sudo_endspent
4314 2005-01-05 14:41 millert
4316 * getspwuid.c, pwutil.c: Move all but the shadow stuff from
4317 getspwuid.c to pwutil.c and pwcache_get and pwcache_put as they
4318 are no longer needed. Also add preprocessor magic to use private
4319 versions of the passwd and group routines if MYPW is defined (for
4320 use by testsudoers).
4322 2005-01-04 22:40 millert
4324 * tsgetgrpw.c: zero out struct passwd/group before filling it in so
4325 if there are fields we don't handle they end up as 0.
4327 2005-01-04 20:10 millert
4329 * logging.c, sudo.c, sudo.h, testsudoers.c, visudo.c: Adapt to
4332 2005-01-04 20:09 millert
4334 * Makefile.in: Add tsgetgrpw.c and pwutil.c Rename the *OBJ
4335 variables for better readability.
4337 2005-01-04 20:08 millert
4339 * tsgetgrpw.c: Passwd and group lookup routines for testsudoers
4340 that support alternate passwd and group files.
4342 2005-01-04 20:07 millert
4344 * getspwuid.c, pwutil.c: Split off pw/gr cache and dup code into
4345 its own file. This allows visudo and testsudoers to use the
4348 2005-01-01 19:31 millert
4350 * parse.c: Print Defaults info in "sudo -l" output and wrap lines
4351 based on the terminal width.
4353 2005-01-01 12:41 millert
4355 * match.c, visudo.c, testsudoers.c: Only check group vector in
4356 usergr_matches() if we are matching the invoking or list user.
4357 Always check the group members, even if there was a group vector.
4359 2004-12-17 17:24 millert
4361 * LICENSE, Makefile.in, fnmatch.3: No longer bundle fnmatch.3
4363 2004-12-17 13:12 millert
4365 * CHANGES, TODO: checkpoint
4367 2004-12-16 14:20 millert
4369 * sudo.c: sort usage
4371 2004-12-16 14:20 millert
4373 * sudo.pod: Sort command line options
4375 2004-12-16 13:33 millert
4377 * def_data.c, def_data.h, def_data.in, defaults.c, logging.c,
4378 sudo.c, sudo.pod, sudoers.pod: Add closefrom sudoers option to
4379 start closing at a point other than 3. Add closefrom_override
4380 sudoers option and -C sudo flag to allow the user to specify a
4381 different closefrom starting point.
4383 2004-12-16 13:25 millert
4385 * pathnames.h.in: Add _PATH_DEVNULL for those without it.
4387 2004-12-15 22:55 millert
4389 * LICENSE: no more UCB strcasecmp
4391 2004-12-15 22:54 millert
4393 * strcasecmp.c: replace BSD licensed one with version derived from
4396 2004-12-09 21:07 millert
4398 * sudo.c: Fix last commit.
4400 2004-12-09 19:26 millert
4402 * sudo.c: Make sure stdin, stdout and stderr are open and dup them
4403 to /dev/null if not.
4405 2004-12-03 13:57 millert
4407 * ldap.c, mon_systrace.c, sudo.c, sudo.h: add sudo_ldap_close
4409 2004-12-03 13:52 millert
4411 * fileops.c, gettime.c, sudo.c, sudo_edit.c, utimes.c, visudo.c:
4412 Use TIME_WITH_SYS_TIME
4414 2004-12-03 13:48 millert
4416 * configure, configure.in, config.h.in: Add TIME_WITH_SYS_TIME_H
4418 2004-12-02 11:18 millert
4420 * env.c: Add missing braces to avoid DYLD_FORCE_FLAT_NAMESPACE
4421 being set unconditionally on darwin. From Toby Peterson.
4423 2004-12-02 10:40 millert
4425 * getspwuid.c: Check rbinsert() return value. In the case of faked
4426 up entries there is usually a negative response cached that we
4429 In pwfree() don't try to zero out a NULL pw_passwd pointer.
4431 2004-12-02 09:53 millert
4433 * mon_systrace.c: Use the double fork trick to avoid the monitor
4434 process being waited for by the main program run through sudo.
4436 2004-11-29 12:52 millert
4438 * sudo.c: Call initgroups() in -U mode so group matches work
4441 2004-11-29 12:34 millert
4443 * def_data.h, mkdefaults: Don't print a trailing comma for the last
4444 entry in enum def_tupple
4446 2004-11-28 16:08 millert
4448 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention values when
4449 lecture, listpw and verifypw are used in boolean context.
4451 2004-11-28 16:05 millert
4453 * def_data.c, def_data.in: verifypw when used in a boolean TRUE
4454 context should be "all", not "any".
4456 2004-11-26 14:21 millert
4458 * def_data.in, defaults.c: Allow tuples that can be used as
4459 booleans to be used as boolean TRUE. In this case the 2nd
4460 possible value of the tuple is used for TRUE.
4462 2004-11-25 12:23 millert
4464 * configure, configure.in: Correct the test for 2-parameter
4467 2004-11-25 12:20 millert
4469 * sudo.h: Add strub struct definitions for passwd, timeval and
4472 2004-11-25 12:09 millert
4474 * configure, configure.in, config.h.in, sudo_edit.c, visudo.c: Add
4475 check for 2-argument form of timespecsub (FreeBSD and BSD/OS) and
4476 fix a typo in the gettimeofday check.
4478 2004-11-24 16:44 millert
4480 * match.c, testsudoers.c: Deal with user_stat being NULL as it is
4481 for visudo and testsudoers.
4483 2004-11-24 16:31 millert
4485 * parse.c, sudo.c, sudo.cat, sudo.h, sudo.man.in, sudo.pod: Add -U
4486 option to use in conjunction with -l instead of -u. Add support
4487 for "sudo -l command" to test a specific command.
4489 2004-11-24 16:28 millert
4491 * gram.c, gram.y, sudo.c: Set safe_cmnd after sudoers_lookup() if
4492 it has not been set. Previously it was set by sudo "ALL" in the
4493 parser but at that point the fully-qualified pathname has not yet
4496 2004-11-23 18:18 millert
4498 * parse.c, testsudoers.c: Correctly handle multiple privileges per
4499 userspec and runas inheritence.
4501 2004-11-21 14:09 millert
4503 * defaults.c: Zero out sd_un for each entry in sudo_defs_table in
4506 2004-11-19 18:04 millert
4508 * toke.c, toke.l: make per-command defaults work with sudoedit
4510 2004-11-19 18:00 millert
4512 * ldap.c, parse.c, sudo.c, sudo.h: Remove the FLAG_NOPASS,
4513 FLAG_NOEXEC and FLAG_MONITOR flags. Instead, we just set the
4514 approriate defaults variable.
4516 2004-11-19 17:09 millert
4518 * sample.sudoers, sudoers.cat, sudoers.man.in, sudoers.pod:
4519 Document per-command Defaults.
4521 2004-11-19 16:35 millert
4523 * defaults.c, defaults.h, gram.c, gram.h, gram.y, mon_systrace.c,
4524 sudo.c, testsudoers.c, toke.c, toke.l, visudo.c: Add support for
4525 command-specific Defaults entries. E.g.
4526 Defaults!/usr/bin/vi noexec
4528 2004-11-19 15:03 millert
4530 * defaults.c, match.c, parse.c, parse.h, testsudoers.c: Change an
4531 occurence of user_matches() -> runas_matches() missed previously
4532 runas_matches(), host_matches() and cmnd_matches() only really
4533 need to pass in a list of members. user_matches() still needs to
4534 pass in a passwd struct because of "sudo -l"
4536 2004-11-19 14:46 millert
4538 * parse.c: Check def_authenticate, def_noexec and def_monitor when
4539 setting return flags. XXX May be better to just set the defaults
4540 directly and get rid of those flags.
4542 2004-11-19 13:39 millert
4544 * alias.c, alloc.c, check.c, closefrom.c, defaults.c, env.c,
4545 error.c, fileops.c, find_path.c, fnmatch.c, getcwd.c,
4546 getprogname.c, getspwuid.c, gettime.c, glob.c, goodpath.c,
4547 gram.c, gram.y, interfaces.c, ldap.c, logging.c, match.c,
4548 mon_systrace.c, parse.c, redblack.c, set_perms.c, snprintf.c,
4549 strcasecmp.c, strerror.c, strlcat.c, strlcpy.c, sudo.c,
4550 sudo_edit.c, sudo_noexec.c, testsudoers.c, tgetpass.c, toke.c,
4551 toke.l, utimes.c, visudo.c, zero_bytes.c, auth/afs.c,
4552 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
4553 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
4554 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
4555 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: Use: #include
4556 <config.h> Not: #include "config.h" That way we get the correct
4557 config.h when build dir != src dir
4559 2004-11-19 13:30 millert
4561 * Makefile.in: Back out part of rev 1.263; fix -I order
4563 2004-11-19 13:12 millert
4565 * toke.c, toke.l: More robust parsing if #include; could be much
4568 2004-11-19 12:55 millert
4570 * sudo_edit.c, visudo.c: Make arg splitting in visudo and sudoedit
4573 2004-11-19 12:35 millert
4575 * Makefile.in, alias.c, gram.c, gram.y, parse.h: Split alias
4576 routines out into their own file.
4578 2004-11-19 12:32 millert
4580 * error.h: __attribute__ is already defined in compat.h
4582 2004-11-19 12:30 millert
4584 * visudo.c: quit() should not be __noreturn__ as it is non-void on
4587 2004-11-19 12:24 millert
4589 * auth/: fwtk.c, rfc1938.c, securid.c, securid5.c: Add local
4590 error/warning functions like err/warn but that call an additional
4591 cleanup routine in the error case. This means we no longer need
4592 to compile a special version of alloc.o for visudo.
4594 2004-11-19 11:54 millert
4596 * parse.h: Clarify comments about the data structures
4598 2004-11-18 15:28 millert
4600 * visudo.c: Add support for VISUAL and EDITOR containing command
4601 line args. If env_editor is not set any args in VISUAL and
4602 EDITOR are ignored. Arguments are also now supported in
4605 2004-11-17 14:25 millert
4607 * parse.h: alias_matches() is no more
4609 2004-11-17 14:09 millert
4611 * CHANGES, TODO: sync
4613 2004-11-17 13:19 millert
4615 * Makefile.in: When regenerating the parser, don't replace gram.h
4616 unless it has changed.
4618 2004-11-17 11:56 millert
4620 * Makefile.in: remove Makefile.binary for distclean
4622 2004-11-17 11:18 millert
4624 * env.c: Preserve KRB5CCNAME in zero_env() and add a paranoia check
4625 to make sure we can't overflow new_env.
4627 2004-11-17 10:33 millert
4629 * sudo_edit.c: paranoia when stripping trailing slashes from
4632 2004-11-16 19:00 millert
4634 * sudo.c: Set user_ngroups to 0 if getgroups() returns an error.
4636 2004-11-16 18:59 millert
4638 * configure, configure.in, config.h.in, sudo.c: Add configure check
4641 2004-11-16 18:55 millert
4643 * ldap.c: Use supplementary group vector in struct sudo_user.
4645 2004-11-16 18:40 millert
4647 * match.c: Only do string comparisons on the group members if there
4648 is no supplemental group list.
4650 2004-11-16 16:10 millert
4652 * CHANGES, TODO: sync
4654 2004-11-16 15:54 millert
4656 * sudo_edit.c: On Digital UNIX _PATH_VAR_TMP doesn't end with a
4657 trailing slash so chop off any trailing slashes we see and add an
4660 2004-11-16 12:02 millert
4662 * match.c: remove bogus XXX comment
4664 2004-11-16 11:10 millert
4666 * match.c: Get rid of alias_matches and correctly fall through to
4667 the non-alias cases when there is no alias with the specified
4670 2004-11-16 10:47 millert
4672 * getspwuid.c: Cache non-existent passwd/group entries too.
4674 2004-11-16 10:45 millert
4678 2004-11-15 23:32 millert
4680 * getspwuid.c: fix typo
4682 2004-11-15 23:24 millert
4684 * check.c, getspwuid.c, glob.c, ldap.c, logging.c, match.c,
4685 mon_systrace.h, sudo.c, sudo.h, testsudoers.c, visudo.c:
4686 Implement group caching and use the passwd and group caches
4689 2004-11-15 14:43 millert
4691 * match.c: Properly negate the return value of alias_matches() when
4694 2004-11-15 14:38 millert
4696 * match.c: Make hostname_matches() return TRUE for a match, else
4697 FALSE like the caller expects.
4699 2004-11-15 13:24 millert
4701 * Makefile.in: Add missing dependencies on gram.h
4703 2004-11-15 13:06 millert
4705 * match.c: Use runas_matches in alias_matches() now that we have
4708 2004-11-15 13:00 millert
4710 * parse.c, parse.h: Expand aliases in "sudo -l" mode
4712 2004-11-15 12:33 millert
4714 * gram.y, match.c: Use ALIAS for the member type when storing an
4715 alias instead of HOSTALIAS/RUNASALIAS/CMNDALIAS/USERALIAS since
4716 match.c relies on the more generic type. Expand runas_matches
4717 instead of calling user_matches() inside of it since
4718 user_matches() looks up USERALIASes, not RUNASALIASes.
4720 2004-11-15 12:05 millert
4722 * CHANGES, getspwuid.c: Paranoia; zero out pw_passwd before freeing
4725 2004-11-15 10:53 millert
4727 * LICENSE, Makefile.in, alloc.c, check.c, config.h.in, configure,
4728 configure.in, err.c, error.c, error.h, defaults.c, env.c,
4729 find_path.c, interfaces.c, logging.c, mon_systrace.c, sudo.c,
4730 sudo.h, sudo_edit.c, testsudoers.c, visudo.c, emul/err.h: Add
4731 local error/warning functions like err/warn but that call an
4732 additional cleanup routine in the error case. This means we no
4733 longer need to compile a special version of alloc.o for visudo.
4735 2004-11-15 09:59 millert
4737 * match.c: Use userpw_matches() to compare usernames, not strcmp(),
4738 since the latter checks for "#uid".
4740 2004-11-15 09:53 millert
4742 * getspwuid.c, mon_systrace.c, mon_systrace.h, sudo.c: Cache passwd
4743 db entries in 2 reb-black trees; one indexed by uid, the other by
4744 user name. The data returned from the cache should be considered
4745 read-only and is destroyed by sudo_endpwent().
4747 2004-11-15 09:50 millert
4749 * match.c: add cast to uid_t
4751 2004-11-15 09:49 millert
4753 * gram.y: missing free in alias_destroy
4755 2004-11-15 09:49 millert
4757 * redblack.c: Can't use rbapply() for rbdestroy since the
4758 destructor is passed a data pointer, not a node pointer.
4760 2004-11-14 23:06 millert
4762 * getspwuid.c, logging.c, sudo.c, sudo.h: Create and use private
4763 versions of setpwent() and endpwent() that set/end the shadow
4766 2004-11-14 22:55 millert
4768 * gram.c, gram.h, gram.y, match.c, parse.h, testsudoers.c,
4769 visudo.c: Store aliases in a red-black tree.
4771 2004-11-14 22:52 millert
4773 * Makefile.in, redblack.c, redblack.h: red-black tree
4776 2004-11-14 22:37 millert
4778 * visudo.c: Edit all sudoers file if there were unused or undefined
4779 aliases and we are in strict mode.
4781 2004-11-12 11:19 millert
4783 * CHANGES, def_data.c, def_data.h, def_data.in, defaults.c, env.c,
4784 find_path.c, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.c:
4785 Bring back the "secure_path" Defaults option now that Defaults
4786 take effect before the path is searched.
4788 2004-11-11 12:22 millert
4790 * logging.c, parse.c: A user can always list their own entries,
4791 even with -u. Better error message when failing to list another
4794 2004-11-11 12:12 millert
4796 * parse.c, sudo.c, sudo.h: The syntax to list another user's
4797 entries is now "-u otheruser -l". Only root or users with sudo
4798 "ALL" may list other user's entries.
4800 2004-11-11 11:30 millert
4802 * sudo.cat, sudo.man.in, sudo.pod: Update env variable info in
4805 2004-11-11 11:25 millert
4807 * env.c: strip CDPATH too
4809 2004-11-11 11:20 millert
4811 * env.c: strip exported bash functions from the environment.
4813 2004-10-27 12:16 millert
4815 * sudo.c: Only reset sudo_user.pw based on SUDO_USER environment
4816 variables for real commands and sudoedit. This avoids a
4817 confusing message when a user tries "sudo -l" or "sudo -v" and is
4820 2004-10-27 12:06 millert
4822 * gram.c, gram.y, parse.h: Extend LIST_APPEND to deal with
4825 2004-10-26 18:39 millert
4827 * logging.c: Convert some bitwise AND to ISSET
4829 2004-10-26 18:29 millert
4831 * lex.yy.c, toke.c: toke.c replaces lex.yy.c
4833 2004-10-26 18:29 millert
4835 * CHANGES, TODO: sync
4837 2004-10-26 18:28 millert
4839 * BUGS: new parser fixes most of the outstanding bugs
4841 2004-10-26 18:27 millert
4845 2004-10-26 18:26 millert
4847 * visudo.c: Rework for the new parser. Now checks for unused
4850 2004-10-26 18:25 millert
4852 * testsudoers.c: Rewrite for the new parser. Now supports a -d
4853 flag (dump) and adds a -h flag (host). It now defaults to the
4854 local hostname unless otherwise specified.
4856 2004-10-26 18:23 millert
4858 * sudo.h: Add new prototypes. Remove NOMATCH/UNSPEC (now in
4861 2004-10-26 18:22 millert
4863 * sudo.c: Update for new parse. We now call find_path() *after* we
4864 have updated the global defaults based on sudoers. Also adds
4865 support for listing other user's privs if you are root.
4867 2004-10-26 18:21 millert
4869 * mon_systrace.c: Working LDAP support; also remove a now-unneeded
4872 2004-10-26 18:20 millert
4874 * logging.c, logging.h: Add NO_STDERR flag.
4876 2004-10-26 18:19 millert
4878 * ldap.c: Split sudo_ldap_check() into three pieces:
4879 sudo_ldap_open(), udo_ldap_update_defaults() and
4880 sudo_ldap_check(). This allows us to connecto to LDAP, apply the
4881 default options, find the command in the user's path, and then
4882 check whether the user is allowed to run it. The important thing
4883 here is that the default runas user may be specified as a default
4884 option and that needs to be set before we search for the command.
4886 2004-10-26 18:17 millert
4888 * ldap.c: Add casts to unsigned char for isspace() to quiet a gcc
4891 2004-10-26 18:16 millert
4893 * defaults.h: Add prototype for update_defaults()
4895 2004-10-26 18:16 millert
4897 * defaults.c: Don't warn about line numbers now that we operate on
4898 a set of data structures (or LDAP) and not a file.
4900 2004-10-26 18:15 millert
4902 * config.h.in: No long use lsearch()
4904 2004-10-26 18:14 millert
4906 * Makefile.in: Update for new and changed file names.
4908 2004-10-26 18:14 millert
4910 * LICENSE: no more BSD lsearch.c
4912 2004-10-26 18:14 millert
4914 * match.c: foo_matches() routines now live in match.c Added
4915 user_matches(), runas_matches(), host_matches(), cmnd_matches()
4916 and alias_matches() that operate on the parsed sudoers file.
4918 2004-10-26 18:12 millert
4920 * parse.lex, toke.l: Move parse.lex -> toke.l Rename buffer_frob()
4921 -> switch_buffer() WORD no longer needs to exclude '@' kill
4924 2004-10-26 18:10 millert
4926 * gram.c, gram.h, gram.y, parse.c, parse.h, parse.yacc, sudo.tab.h:
4927 Rewritten parser that converts sudoers into a set of data
4928 structures. This eliminates ordering issues and makes it
4929 possible to apply sudoers Defaults entries before searching for
4932 2004-10-26 18:09 millert
4934 * configure.in, lsearch.c, emul/search.h: We won't be using
4935 lsearch() any longer.
4937 2004-10-26 18:07 millert
4939 * ldap.c: sudo should not send mail if someone who runs 'sudo -l'
4942 2004-10-26 16:09 millert
4944 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
4945 visudo.man.in: regen
4947 2004-10-26 16:09 millert
4949 * visudo.pod: Update warnings to match new visudo
4951 2004-10-26 16:08 millert
4953 * sudoers.pod: The new parser doesn't have the old ordering
4956 2004-10-26 16:08 millert
4958 * sudo.pod: Document that -l now takes an optional username
4961 2004-10-25 13:44 millert
4963 * RUNSON: AIX 5.2.0.0 works
4965 2004-10-25 13:38 millert
4967 * ldap.c: If LDAP_OPT_SUCCESS is not defined, use LDAP_SUCCESS
4968 instead. Fixes a compilation problem with Solaris 9's native
4971 Set FLAG_MONITOR when needed.
4973 2004-10-23 13:32 millert
4975 * mon_systrace.c: Call sudo_goodpath() *after* changing the cwd to
4976 match the traced process. Fixes relative paths.
4978 2004-10-21 12:31 millert
4980 * testsudoers.c: Kill set_perms() stub--it is no longer needed.
4982 2004-10-13 12:52 millert
4984 * sudoers.cat, sudoers.man.in, sudoers.pod: stay_setuid now
4985 requires set_reuid() or setresuid()
4987 2004-10-13 12:46 millert
4989 * INSTALL, PORTING, TROUBLESHOOTING, config.h.in, configure,
4990 configure.in, set_perms.c, sudo.c, sudo.h: Kill use of POSIX
4991 saved uids; they aren't worth bothering with.
4993 2004-10-07 16:23 millert
4995 * glob.c: remove call to issetugid()
4997 2004-10-07 14:57 millert
4999 * sudoers.cat, sudoers.man.in, sudoers.pod: Remove warning about
5000 wildcards. Now that we use glob() the bug is fixed.
5002 2004-10-07 14:52 millert
5004 * parse.c: Use glob(3) instead of fnmatch(3) for matching pathnames
5005 and stat each result that matches the basename of the user's
5006 command. This makes "cd /usr/bin ; sudo ./blah" work when
5007 sudoers allows /usr/bin/blah. Fixes bug #143.
5009 2004-10-07 14:27 millert
5011 * configure, configure.in, config.h.in: Define HAVE_EXTENDED_GLOB
5012 for extended glob (GLOB_TILDE and GLOB_BRACE)
5014 2004-10-07 12:59 millert
5016 * config.h.in, configure, configure.in: Check for a glob() that
5017 supports GLOB_BRACE and GLOB_TILDE
5019 2004-10-07 12:51 millert
5021 * LICENSE: reference glob
5023 2004-10-07 12:50 millert
5025 * glob.c, emul/glob.h: 4.4BSD glob(3) with fixes from OpenBSD and
5026 some unneeded extensions removed.
5028 2004-10-05 17:26 millert
5030 * mon_systrace.c: Just return if STRIOCINJECT or STRIOCREPLACE
5031 fail. It probably means we are out of space in the stack gap...
5033 2004-10-05 17:20 millert
5037 2004-10-05 16:53 millert
5039 * mon_systrace.c: Take a stab at ldap sudoers support here.
5041 2004-10-05 15:13 millert
5043 * mon_systrace.c, mon_systrace.h: Detach from tracee on SIGHUP,
5044 SIGINT and SIGTERM. Now "sudo reboot" doesn't cause reboot to
5045 inadvertanly kill itself.
5047 2004-10-05 14:21 millert
5049 * mon_systrace.c: put "monitor" in the proctitle, not "systrace"
5051 2004-10-05 14:15 millert
5053 * mon_systrace.c: When modifying the environment, don't replace
5054 envp when we can get away with just rewriting pointers in the
5057 2004-10-05 13:46 millert
5059 * mon_systrace.c, mon_systrace.h: Add environment updating via
5060 STRIOCINJECT (if available).
5062 2004-10-05 10:22 millert
5064 * sudoers.cat, sudoers.man.in: regen
5066 2004-10-04 16:15 millert
5070 2004-10-04 16:15 millert
5072 * parse.lex: Fix bug introduced in unput() removal; want yyless(0)
5075 2004-10-04 12:09 millert
5077 * mon_systrace.c: Include file is now mon_systrace.h
5079 2004-10-04 12:07 millert
5081 * Makefile.in, configure, configure.in, def_data.c, def_data.h,
5082 def_data.in, lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc,
5083 sudo.c, sudo.h, sudo.tab.h, sudoers.pod: No longer call it
5084 tracing, it is now "monitoring" which should be more a obvious
5085 name to non-hackers.
5087 2004-10-01 15:06 millert
5089 * mon_systrace.c, mon_systrace.h: Fix some XXX
5091 2004-10-01 14:30 millert
5093 * mon_systrace.c, mon_systrace.h: No need to include syscall.h, use
5094 1024 as the max # of entries (the max that systrace(4) allows).
5096 Only need to use SYSTR_POLICY_ASSIGN once
5098 Change check_syscall() -> find_handler() and have it return the
5099 handler instead of just running it. We need this since handler
5100 now have two parts: one part that generates and answer and
5101 another that gets called after the answer is accepted (to do
5104 Add some missing check_exec for emul execv
5106 2004-10-01 10:58 millert
5108 * sample.pam, sample.sudoers, sample.syslog.conf, sudoers: Add
5111 2004-10-01 10:47 millert
5113 * config.h.in: Add missing HAVE_LINUX_SYSTRACE_H
5115 2004-09-30 20:46 millert
5117 * Makefile.in: add trace_systrace.o dependency
5119 2004-09-30 19:00 millert
5121 * configure, configure.in: Also look for systrace.h in
5124 2004-09-30 18:27 millert
5126 * mon_systrace.c, mon_systrace.h: Move all struct defs and
5127 prototypes into trace_systrace.h and mark all but
5128 systace_attach() static.
5130 2004-09-30 18:14 millert
5132 * mon_systrace.c, mon_systrace.h: Add support for tracing
5133 emulations. At the moment, all emulations are compiled in. It
5134 might make sense to #ifdef them in the future, though this
5135 impeeds readability.
5137 2004-09-30 17:07 millert
5139 * Makefile.in, configure.in, configure: rename systrace.c ->
5142 2004-09-30 15:58 millert
5144 * parse.yacc: Allow this to build with a K&R compiler again
5146 2004-09-30 13:58 millert
5150 2004-09-30 13:55 millert
5152 * sudo.c, compat.h, visudo.c: Use __attribute__((__noreturn__))
5154 2004-09-30 13:44 millert
5156 * visudo.c: Exit() takes a negative value to indicate it was not
5159 2004-09-30 13:25 millert
5161 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5162 visudo.man.in: regen
5164 2004-09-30 13:22 millert
5166 * Makefile.in, visudo.c: Define Err() and Errx() that are like
5167 err() and errx() but call Exit() instead of exit(). Build
5168 private copy of alloc.o for visudo that calls Err() and Errx().
5170 2004-09-29 15:22 millert
5174 2004-09-29 15:22 millert
5178 2004-09-29 14:41 millert
5180 * visudo.c: Overhaul visudo for editing multiple files: o visudo
5181 has been broken out into functions (more work needed here) o
5182 each file is now edited before sudoers is re-parsed o if a
5183 #include line is added that file will be edited too
5185 TODO: o cleanup temp files when exiting via err() or errx() o
5186 continue breaking things out into separate functions
5188 2004-09-29 14:36 millert
5190 * parse.lex, sudo.c, sudo.h, testsudoers.c, visudo.c: Add keepopen
5191 arg to open_sudoers that open_sudoers can use to indicate to the
5192 caller that the fd should not be closed when it is done with it.
5193 To be used by visudo to keep locked fds from being closed
5194 prematurely (and thus losing the lock).
5196 2004-09-29 14:33 millert
5198 * parse.yacc, sudo.c: Add errorfile global that contains the name
5199 of the file that caused the error.
5201 2004-09-29 14:30 millert
5203 * parse.lex: return COMMENT to yacc grammar for a #include line
5205 2004-09-29 14:29 millert
5207 * parse.lex: Remove us of unput() in favor of yyless() which is
5210 2004-09-29 14:28 millert
5212 * parse.yacc: Allow an empty sudoers file.
5214 2004-09-28 16:50 millert
5216 * mon_systrace.c: Rewind sudoers_fp now that sudoers_lookup()
5217 doesn't do it for us.
5219 2004-09-28 14:37 millert
5223 2004-09-28 14:36 millert
5225 * visudo.c: Do signal setup before calling edit_sudoers(). Don't
5226 shadow the "quiet" global.
5228 2004-09-28 14:33 millert
5230 * visudo.c: If a sudoers file includes other files, edit those too.
5231 Does not yes deal with creating the new includes files itself.
5233 2004-09-28 14:31 millert
5235 * testsudoers.c: init_parser now takes a path
5237 2004-09-28 14:31 millert
5239 * parse.c, parse.h, parse.lex, parse.yacc: More scaffolding for
5240 dealing with multiple sudoers files: o init_parser() now takes a
5241 path used to populate the sudoers global o the sudoers global is
5242 used to print the correct file in yyerror() o when switching to
5243 a new sudoers file, perserve old file name and line number
5245 2004-09-28 14:29 millert
5247 * Makefile.in, pathnames.h.in: Kill _PATH_SUDOERS_TMP; it is not
5248 meaningful now that we can have multiple sudoers files.
5250 2004-09-28 13:52 millert
5252 * parse.c, sudo.c: Rewind sudoers_fp in open_sudoers() instead of
5253 sudoers_lookup() so we start at the right file position when
5254 reading include files.
5256 2004-09-27 21:04 millert
5258 * sudoers.pod: document #include
5260 2004-09-27 20:47 millert
5264 2004-09-27 20:47 millert
5266 * parse.lex: Add max depth of 128 for the include stack to avoid
5269 Since yyerror() doesn't stop parsing, pass return values back to
5270 yylex and call yyterminate() on error.
5272 2004-09-27 14:06 millert
5274 * sudoers.pod: document tracing
5276 2004-09-27 14:05 millert
5278 * sudo.pod: Mention PREVENTING SHELL ESCAPES section of sudoers man
5281 2004-09-27 12:08 millert
5285 2004-09-27 12:03 millert
5287 * parse.lex: Add support for #include in sudoers (visudo support
5290 2004-09-27 12:02 millert
5292 * parse.yacc: make yyerror()'s argument const
5294 2004-09-27 12:02 millert
5296 * testsudoers.c, visudo.c: Add open_sudoers() stubs.
5298 2004-09-27 12:01 millert
5300 * sudo.c, sudo.h: Rename check_sudoers() open_sudoers() and make it
5303 2004-09-26 12:35 millert
5305 * BUGS, INSTALL, INSTALL.binary, Makefile.in, README, configure.in,
5306 version.h: Crank version
5308 2004-09-26 12:33 millert
5310 * Makefile.in, sudo.psf: Better HP-UX depot construction
5312 2004-09-25 17:08 millert
5314 * mon_systrace.c: o Made children global so check_exec() can lookup
5315 a child. o Replaced uid in struct childinfo with struct passwd *
5316 (for runas) o new_child() now takes a parent pid so the runas
5317 info can be inherited o Added find_child() to lookup a child by
5318 its pid o update_child() now fills in a struct passwd o Converted
5319 the big if/else mess in set_policy to a switch o Syscalls that
5320 change uid are now "ask" so we get SYSTR_MSG_UGID events
5322 2004-09-25 17:01 millert
5324 * getspwuid.c: Add flag to sudo_pwdup that indicates whether or not
5325 to lookup the shadow password. Will be used to a struct passwd
5326 that has the shadow password already filled in.
5328 2004-09-25 16:58 millert
5330 * mon_systrace.c: add missing increment of addr in read_string()
5332 2004-09-25 16:15 millert
5334 * mon_systrace.c: Remove bogus call to update_child() and some
5337 2004-09-25 16:11 millert
5339 * mon_systrace.c: Don't leak /dev/systrace fd to tracee Make
5340 initialized global for simplicity If STRIOCATTACH returns EBUSY
5341 we are already being traced Check for user_args == NULL in
5342 setproctitle() call Add missing calls to STRIOCANSWER
5344 2004-09-25 13:15 millert
5346 * sudo.c: g/c sudo_pwdup proto
5348 2004-09-24 20:21 millert
5350 * Makefile.in, sudo.psf: Add target for building a depot file
5352 2004-09-24 20:07 millert
5354 * mon_systrace.c: trim includes
5356 2004-09-24 14:11 millert
5358 * lex.yy.c, sudo.tab.h: regen
5360 2004-09-24 14:10 millert
5362 * INSTALL: document --with-systrace
5364 2004-09-24 14:10 millert
5366 * config.h.in, configure, configure.in: Add check for setproctitle
5368 2004-09-24 14:09 millert
5370 * mon_systrace.c: pass struct str_msg_ask in to syscall checker so
5371 it can set the error code
5373 2004-09-24 13:30 millert
5375 * mon_systrace.c: systrace(4) support for sudo. On systems with
5376 the systrace(4) kernel facility (OpenBSD, NetBSD, Linux w/
5377 patches) sudo can intercept exec calls and check the exec args
5378 against the sudoers file. In other words, sudo can now control
5379 subcommands and shell escapes.
5381 2004-09-24 13:17 millert
5383 * sudo.c, sudo.h: Call systrace_attach() if FLAG_TRACE is set.
5385 2004-09-24 13:15 millert
5387 * parse.c, parse.h, parse.lex, parse.yacc, sudo.h: Add trace
5388 Defaults option and TRACE/NOTRACE tags and set FLAG_TRACE
5390 2004-09-24 13:13 millert
5392 * parse.c, sudo.c: Don't close sudoers_fp, keep it open and set
5393 close on exec flag instead.
5395 2004-09-24 13:11 millert
5397 * def_data.c, def_data.h, def_data.in: Add trace option
5399 2004-09-23 20:24 millert
5401 * Makefile.in: Add systrace
5403 2004-09-23 20:23 millert
5405 * INSTALL: SunOS /bin/sh blows up with configure
5407 2004-09-23 20:23 millert
5409 * configure, configure.in: Include sys/param.h before systrace.h
5411 2004-09-23 20:15 millert
5415 2004-09-23 20:15 millert
5417 * pathnames.h.in: _PATH_DEV_SYSTRACE
5419 2004-09-23 20:14 millert
5421 * configure.in: line up options in --help
5423 2004-09-23 20:11 millert
5425 * config.h.in, configure.in: Add --with-systrace
5427 2004-09-23 13:35 millert
5431 2004-09-23 13:35 millert
5433 * aclocal.m4, configure.in: make this work with autoconf-2.59
5435 2004-09-16 12:58 millert
5437 * sudo_edit.c: Simplify logic around open & stat of files and do
5438 sanity on edited file even if we lack fstat (still racable but
5441 2004-09-15 18:47 millert
5443 * HISTORY: Add support url
5445 2004-09-15 16:11 millert
5447 * Makefile.in: versino 1.6.8p1
5449 2004-09-15 15:20 millert
5451 * CHANGES: more changes for 1.6.8p1
5453 2004-09-15 15:18 millert
5455 * version.h: 1.6.8p1
5457 2004-09-15 12:16 millert
5459 * CHANGES, sudo_edit.c: Add sanity check so we don't try to edit
5460 something other than a regular file.
5462 2004-09-14 20:55 aaron
5466 2004-09-14 20:21 aaron
5468 * INSTALL: document --with-ldap-conf-file
5470 2004-09-14 17:43 millert
5472 * CHANGES, ins_csops.h: political correctness strikes again
5474 2004-09-14 15:09 millert
5478 2004-09-12 19:50 millert
5480 * Makefile.binary.in, Makefile.in: Install sudoedit man link
5482 2004-09-12 14:25 millert
5484 * INSTALL: Update PAM note and mention where HP-UX users can
5485 download gcc binaries.
5487 2004-09-12 12:08 millert
5489 * Makefile.in: libtool wants to install stuff from .libs so fake
5490 one up for binary installations.
5492 2004-09-12 11:53 millert
5494 * Makefile.binary.in: rm -f old sudoedit link instead of using ln
5495 -f set LIBTOOL correctly
5497 2004-09-12 11:53 millert
5499 * Makefile.in: Deal with "uname -m" having slashes in it rm -f old
5500 sudoedit link instead of using ln -f
5502 2004-09-12 10:22 millert
5504 * Makefile.binary, Makefile.binary.in: Makefile.binary ->
5505 Makefile.binary.in for config.status substitution Add support for
5506 installing noexec bits
5508 2004-09-12 10:21 millert
5510 * Makefile.in: Copy noexec bits into binary dists too No longer use
5511 my old arch script for making binary dists
5513 2004-09-12 09:36 millert
5515 * Makefile.binary: Install sudoedit link.
5517 2004-09-11 12:25 millert
5519 * emul/utime.h: avoid __P so there is no need for compat.h to be
5522 2004-09-11 12:24 millert
5524 * utimes.c: Don't use HAVE_UTIME_H before including config.h.
5526 2004-09-10 12:31 millert
5528 * compat.h: Fix Solatis futimes macro
5530 2004-09-09 11:02 millert
5532 * sudo_edit.c: Rename ots -> omtim for improved readability.
5534 2004-09-08 14:38 millert
5536 * sudo_edit.c: Redo changes in revision 1.7. Don't really need to
5537 keep the temp file open; re-opening it with the invoking user's
5540 2004-09-08 14:36 millert
5544 2004-09-08 14:35 millert
5546 * sudo.cat, sudo.man.in: regen
5548 2004-09-08 14:34 millert
5550 * sudo.pod: back out revision 1.70; it is no long applicable
5552 2004-09-08 11:57 millert
5554 * env.c: Let the loader initialize nep
5556 2004-09-08 11:49 millert
5558 * configure, configure.in, config.h.in: Removed unneed check for
5559 fchown Add check for gettimeofday Move autoheader template stuff
5560 into separate AH_TEMPLATE lines
5562 2004-09-08 11:48 millert
5564 * check.c, compat.h, fileops.c, sudo.h, sudo_edit.c, visudo.c: Use
5565 timespec throughout.
5567 2004-09-08 11:47 millert
5569 * Makefile.in: gettime.[co]
5571 2004-09-08 11:47 millert
5573 * gettime.c: function to return the current time in a struct
5576 2004-09-08 10:51 millert
5578 * utimes.c: Not a darpa-sponsored file.
5580 2004-09-07 16:36 millert
5582 * compat.h, config.h.in, configure, configure.in: Add a check for
5583 struct timespec and provide it for those without.
5585 2004-09-07 15:56 millert
5587 * config.h.in, configure, configure.in, sudo_edit.c: Add checks for
5588 st_mtim and st_mtimespec and add macros for pulling the mtime sec
5589 and nsec out of struct stat. These are used in sudo_edit() to
5590 better tell whether or not the file has changed.
5592 2004-09-07 15:55 millert
5594 * check.c, fileops.c, sudo.h, sudo_edit.c, visudo.c: Add an extra
5595 param to touch() for nsec
5597 2004-09-07 14:06 millert
5599 * sudo_edit.c: Call mkstemp() as the in invoking user so we don't
5600 have to chown the file later. Only touch() the temp file if we
5601 can do it via the file descriptor. Don't check for modification
5602 of the temp file if we lack fstat(). Catch errors read()ing the
5605 2004-09-07 14:04 millert
5607 * fileops.c: If path is NULL and fd == -1 return -1.
5609 2004-09-07 13:31 millert
5611 * sudo_edit.c: closefrom() is overkill, the only extra fds are the
5612 ones we opened so just close those in the child.
5614 2004-09-07 13:14 millert
5616 * Makefile.in, aclocal.m4, check.c, compat.h, config.h.in,
5617 configure, configure.in, fileops.c, sudo.h, sudo_edit.c, utime.c,
5618 utimes.c, visudo.c: Use utimes() and futimes() instead of utime()
5619 in touch(), emulating as needed. Not all systems are able to
5620 support setting the times of an fd so touch() takes both an fd
5621 and a file name as arguments.
5623 2004-09-06 21:12 aaron
5627 2004-09-06 16:46 millert
5629 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
5630 visudo.man.in: regen
5632 2004-09-06 16:45 millert
5634 * sudo.pod, sudoers.pod, visudo.pod: Add SUPPORT section and
5635 re-order some of the sections to match the order we use in
5638 2004-09-06 15:05 aaron
5640 * env.c: Openldap ~/.ldaprc fix
5642 2004-09-06 12:18 millert
5644 * sudo.pod: Talk about how the editor must write its changes to the
5645 original file and not just use rename(2).
5647 2004-09-06 12:12 millert
5651 2004-09-06 12:11 millert
5653 * sudo_edit.c: Keep the temp file open instead of re-opening after
5654 the editor has exited.
5656 2004-09-06 12:10 millert
5658 * sample.pam: Update for current redhat/fedora core.
5660 2004-09-02 21:56 aaron
5662 * README.LDAP: tls_ examples
5664 2004-09-02 00:03 aaron
5666 * ldap.c: config tls_* options
5668 2004-08-29 11:39 millert
5670 * configure, configure.in: No need for -lcrypt when using pam.
5672 2004-08-26 23:57 millert
5676 2004-08-26 23:44 aaron
5678 * configure.in, ldap.c, pathnames.h.in: Allow --with-ldap-conf-file
5679 option to override LDAP_CONF
5681 2004-08-26 22:08 aaron
5683 * ldap.c: cleanup debug message
5685 2004-08-26 19:29 aaron
5687 * README.LDAP: more config info
5689 2004-08-24 14:01 millert
5691 * TODO, find_path.c, goodpath.c, parse.c, sudo.c, sudo.h, visudo.c:
5692 Add cmnd_base to struct sudo_user and set it in init_vars(). Add
5693 cmnd_stat to struct sudo_user and set it in sudo_goodpath(). No
5694 longer use gross statics in command_matches(). Also rename some
5695 variables for improved clarity.
5697 2004-08-21 14:33 millert
5699 * INSTALL: document HP's crippled compiler deficiency.
5701 2004-08-21 14:25 millert
5703 * INSTALL: Fix some thinkos in --with-editor and --with-env-editor
5704 descriptions. Noticed by Norihiko Murase.
5706 2004-08-21 14:20 millert
5708 * configure, configure.in: --with-noexec takes an optional PATH
5711 2004-08-21 14:20 millert
5713 * INSTALL: document --with-noexec
5715 2004-08-17 16:21 millert
5717 * RUNSON, TODO: sync
5719 2004-08-17 15:11 millert
5721 * sudo_edit.c: Better warning message when sudoedit is unable to
5722 write to the destination file.
5724 2004-08-17 14:53 millert
5726 * sudo.cat, sudo.man.in: regen
5728 2004-08-17 14:53 millert
5730 * sudo.pod: Don't italicize the string "sudoedit"
5732 2004-08-16 18:45 millert
5734 * HISTORY: Mention GratiSoft.
5736 2004-08-11 14:29 millert
5738 * parse.yacc: Reset used_runas to FALSE when re-intializing the
5741 2004-08-09 19:04 millert
5743 * config.guess: Correct OpenBSD mips support
5745 2004-08-09 17:28 millert
5747 * config.guess: Add OpenBSD/mips
5749 2004-08-06 23:43 aaron
5751 * README.LDAP: More behavior notes
5753 2004-08-06 23:36 aaron
5755 * README.LDAP: Updates on current behavior
5757 2004-08-06 19:56 millert
5759 * sudo.pod, sudoers.pod: =back does not take an indentlevel (makes
5760 no difference to formatted files).
5762 2004-08-06 19:48 millert
5766 2004-08-06 19:42 millert
5768 * sudo.c: Consistency. Use same error for bad -u #uid when
5769 targetpw is set as we do when a bad -u username is specified.
5771 2004-08-06 19:33 millert
5773 * TODO: Add checksum idea from Steve Mancini
5775 2004-08-06 19:32 millert
5777 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5779 2004-08-06 19:31 millert
5781 * sudo.pod, sudoers.pod: Document the restriction on uids specified
5782 via -u when targetpw is set.
5784 2004-08-06 19:24 millert
5786 * sudo.c: Error out when targetpw is enabled and sudo is run with
5787 -u #uid but #uid does not exist in the passwd database. We can't
5788 do target authentication when the target is not in passwd!
5790 2004-08-05 21:16 millert
5792 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: regen
5794 2004-08-05 21:14 millert
5796 * TODO: Some more todo for the next release.
5798 2004-08-05 21:13 millert
5800 * INSTALL: Make it clear that PAM should be used for DCE support
5803 2004-08-05 21:13 millert
5805 * sudoers.pod: o Document problems with wildcards and relative
5806 paths. o Make the order requirements more prominent. o Change a
5807 "set" to "reset" for clarity.
5809 2004-08-05 14:29 millert
5811 * sudo.pod: Mention --with-secure-path, not SECURE_PATH.
5813 2004-08-02 22:34 aaron
5815 * ldap.c: reflect changes to parse.c
5817 2004-08-02 14:44 millert
5819 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c: Don't pass
5820 user_cmnd and user_args to command_matches(), just use the
5821 globals there. Since we keep state with statics anyway it is
5822 misleading to pretend that passing in different cmnd and
5823 cmnd_args will work.
5825 2004-08-02 14:40 millert
5827 * parse.c: Fix a bug introduced in rev. 1.149. When checking for
5828 pseudo-commands check for a '/' anywhere in cmnd, not just the
5831 2004-07-30 23:07 aaron
5833 * sudo.man.in, sudo.pod: Clarification thanks to Olivier Blin
5834 <oblin@mandrakesoft.com>
5836 2004-07-30 22:41 aaron
5838 * sudoers.man.in, sudoers.pod: Add ignore_local_sudoers
5840 2004-07-30 22:06 aaron
5842 * README.LDAP: Sun One schema definition by
5843 Andreas.Bussjaeger@t-systems.com and janth@moldung.no
5845 2004-07-29 11:57 millert
5849 2004-07-23 16:44 millert
5853 2004-07-23 16:43 millert
5855 * parse.c: Parse sudoers file as PERM_RUNAS not PERM_ROOT and
5856 remove a useless PERM_SUDOERS. Restore to PERM_ROOT upon exit of
5859 2004-07-08 10:20 millert
5861 * CHANGES: PAM change
5863 2004-07-07 21:04 aaron
5865 * ldap.c: Better debugging of ALL command
5867 2004-07-07 20:15 millert
5869 * parse.c: When matching for "sudoedit" in sudoers check both the
5870 command the user typed *and* the command that is listed in the
5873 2004-07-04 19:59 aaron
5875 * ldap.c: Added !command feature
5877 2004-06-28 10:51 millert
5879 * auth/pam.c: Use pam_acct_mgmt() to check for disabled accounts;
5882 2004-06-10 23:11 millert
5884 * LICENSE: License is ISC-style, not BSD-style
5886 2004-06-10 20:58 millert
5890 2004-06-10 16:54 millert
5892 * sudo.man.in, sudo.cat: regen
5894 2004-06-10 16:53 millert
5896 * sudo.pod: o Update some out of date bits to reality o Change the
5897 shell promt in examples to bourne-shell style o Clarify some
5898 details o Add a CAVEAT about "sudo cd /foo"
5900 2004-06-10 16:19 millert
5902 * check.c: Don't ask for a password if invoking user == target
5905 2004-06-10 12:32 millert
5907 * sudo.c: typo in comment
5909 2004-06-08 19:20 millert
5911 * sudoers.man.in, sudoers.cat: regen
5913 2004-06-08 19:19 millert
5915 * sudoers.pod: Expand on NOEXEC a little.
5917 2004-06-08 16:20 millert
5921 2004-06-08 15:58 millert
5923 * visudo.man.in, visudo.cat: regen
5925 2004-06-08 15:55 millert
5927 * CHANGES, parse.yacc, visudo.c, visudo.pod: Add a check in visudo
5928 for runas_default being set after it has already been used.
5930 2004-06-08 13:53 millert
5932 * parse.yacc: Add a MATCHED macro for testing whether foo_matches
5933 has been set to TRUE or FALSE. This is more readable than
5934 checking for >=0 or < 0. Doesn't change the actual code
5937 2004-06-06 20:11 millert
5939 * sudoers.man.in, sudoers.cat: regen
5941 2004-06-06 20:07 millert
5943 * sudoers, sudoers.pod: Correct description of where Defaults specs
5946 2004-06-06 20:02 millert
5948 * find_path.c, ldap.c, logging.h, testsudoers.c, visudo.c,
5949 auth/bsdauth.c, auth/kerb5.c, auth/pam.c: update (c) year
5951 2004-06-06 19:58 millert
5953 * check.c, compat.h, defaults.c, env.c, find_path.c, getcwd.c,
5954 ldap.c, logging.h, parse.c, parse.yacc, sudo.c, testsudoers.c,
5955 tgetpass.c, visudo.c, auth/bsdauth.c, auth/kerb5.c, auth/pam.c:
5956 Remove trailing spaces, no actual code changes.
5958 2004-06-06 16:22 millert
5960 * parse.yacc: Fix a >=0 that should be <0 that was improperly
5961 converted when UNSPEC was added.
5963 2004-06-06 15:54 millert
5965 * parse.yacc: Add do {} while(0) around pop macro Set cmnd_matches
5966 to UNSPEC, not NOMATCH when resetting it.
5968 2004-06-06 15:39 millert
5970 * parse.yacc: Fix pastos introduced in SETNMATCH addition.
5972 2004-06-05 13:55 millert
5974 * README.LDAP: Update for configure changes
5976 2004-06-05 13:42 millert
5978 * parse.yacc, sudo.h: Add NOMATCH and UNSPEC defines (-1 and -2
5979 respectively) and use these in parse.yacc. Also in parse.yacc
5980 initialize the *_matches vars to UNSPEC and add two macros,
5981 SETMATCH and SETNMATCH for use when setting *_matches to a value
5982 that may be NOMATCH/UNSPEC/TRUE/FALSE.
5984 2004-06-05 11:17 millert
5986 * parse.yacc: Initialize runas to -2, not -1 since we need to be
5987 able to distinguish between the initialized value and the value
5988 of a non-match when passing along the runas value to multiple
5991 The result of this is that an unmatched runas is now set to -1,
5992 not 0. This is required now that parse.c treats a FALSE value
5993 for runas as being explicitly denied.
5995 2004-06-03 16:21 millert
5997 * getprogname.c, sudo.c, visudo.c: Error out if argc < 1.
5999 2004-06-03 12:37 millert
6001 * configure, configure.in: Add tests for what libs we need to link
6002 with for ldap and for whether or not lber.h needs to be
6003 explicitly included.
6005 2004-06-02 20:30 aaron
6007 * ldap.c: Solaris native LDAP build fix
6009 2004-06-01 16:56 millert
6011 * ldap.c: Set edn to NULL is ldap_get_dn() fails to avoid potential
6012 use of an unset variable.
6014 2004-06-01 16:56 millert
6016 * sudo.h: Add prototype for sudo_ldap_list_matches
6018 2004-06-01 16:53 millert
6020 * compat.h, config.h.in, configure, configure.in: Better check for
6021 dirfd macro--we now set HAVE_DIRFD for the macro version too.
6022 Added check for dd_fd in `DIR' if no dirfd is found; this is now
6023 used to confitionally define the dirfd macro in compat.h.
6025 2004-06-01 16:51 millert
6027 * closefrom.c: Only check /proc/$$/fd if we have the dirfd
6030 2004-06-01 15:13 millert
6032 * compat.h, config.h.in, configure, configure.in: Add a check for a
6033 dirfd() function (like Linux) and add a dirfd macro in compat.h
6034 if there is no dirfd() function or macro.
6036 2004-06-01 14:59 millert
6038 * closefrom.c, getcwd.c: dirfd() is now defined in compat.h as
6041 2004-06-01 14:30 millert
6043 * CHANGES: Clarify closefrom() note.
6045 2004-06-01 12:51 millert
6047 * parse.c: When checking for a command in the directory, only copy
6050 2004-06-01 12:44 millert
6052 * closefrom.c: If there is a /proc/$$/fd directory, behave like the
6053 Solaris closefrom() and only close the descriptors listed
6056 2004-06-01 12:23 millert
6058 * alloc.c: compat.h guarantees INT_MAX is defined.
6060 2004-06-01 12:23 millert
6062 * compat.h: Add definitions of OPEN_MAX and INT_MAX for those
6063 without it and remove definition of RLIM_INFINITY (now unused).
6065 2004-05-31 21:22 millert
6067 * CHANGES, alloc.c, check.c, compat.h, find_path.c, getcwd.c,
6068 parse.c, sudo.c, sudo.h, visudo.c: Use PATH_MAX, not MAXPATHLEN
6069 since the former is standardized.
6071 2004-05-31 19:18 millert
6075 2004-05-31 19:10 millert
6077 * RUNSON: Add some entries that were mailed in a while ago
6079 2004-05-31 14:16 millert
6081 * closefrom.c: o sysconf returns a long, not an int. o check for
6082 negative return value from sysconf/getdtablesize and use
6083 OPEN_MAX in this case. o define OPEN_MAX to 256 for those
6084 without it (a fair guess...)
6086 2004-05-30 12:25 millert
6088 * UPGRADE: Mention change in parse order for RunAs entries.
6090 2004-05-30 12:15 millert
6094 2004-05-29 18:29 millert
6096 * config.h.in, configure.in, INSTALL, README.LDAP: o --with-ldap
6097 now takes an optional dir as a parameter
6098 o added check for ldap_initialize() and start_tls_s()
6100 2004-05-29 14:54 millert
6102 * README.LDAP: Fix some typos, word choice and formatting issues.
6104 2004-05-28 18:06 millert
6106 * tgetpass.c: Use SA_INTERRUPT so SunOS works correctly, avoid
6107 stdio and just use read/write as it is simpler.
6109 2004-05-28 16:27 millert
6111 * configure, configure.in: Remove hack overriding cross-compiler
6112 check. It should no longer be needed.
6114 2004-05-28 16:26 millert
6116 * compat.h: Remove select() compat bits since we no longer use
6119 2004-05-28 16:24 millert
6121 * CHANGES, tgetpass.c: Use alarm() instead of select() for the
6122 timeout for systems that don't fully/properly implement select().
6124 2004-05-27 19:14 millert
6128 2004-05-27 19:12 millert
6132 2004-05-27 19:12 millert
6134 * set_perms.c: Deal with systems that have no way of setting the
6135 effective uid such as nsr-tandem-nsk.
6137 2004-05-27 19:01 millert
6139 * configure, configure.in: Define NO_SAVED_IDS if we don't find
6142 2004-05-27 18:21 millert
6144 * config.h.in, configure, configure.in: Add back check for
6145 setreuid() since NSK doesn't have it.
6147 2004-05-27 15:57 millert
6149 * sudoers.cat, sudoers.man.in: regen
6151 2004-05-27 15:56 millert
6153 * BUGS, CHANGES: sync
6155 2004-05-27 15:55 millert
6157 * parse.c: In sudoers_lookup() return VALIDATE_NOT_OK if the runas
6158 user was explicitly denied and the command matched. This fixes a
6159 long-standing bug and makes: foo machine = (ALL)
6160 /usr/bin/blah foo machine = (!bar) /usr/bin/blah
6162 equivalent to: foo machine = (ALL, !bar) /usr/bin/blah
6164 2004-05-27 15:52 millert
6166 * sudoers.pod: Clarify mail_noperm
6168 2004-05-19 21:25 aaron
6170 * Makefile.in: Missing DESTDIR in make install for sudo_noexec.la
6172 2004-05-17 18:32 millert
6174 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
6175 sudoers.cat, visudo.cat: regen
6177 2004-05-17 18:31 millert
6181 2004-05-17 18:31 millert
6183 * sample.sudoers, sudoers.pod: Remove fastboot/fasthalt (who still
6184 remembers these?) and add a minimal sudoedit example.
6186 2004-05-17 18:21 millert
6188 * CHANGES, INSTALL, TROUBLESHOOTING, UPGRADE, sudo.c, visudo.c:
6189 filesystem -> file system
6191 2004-05-17 18:19 millert
6193 * sudo.pod, sudoers.pod: Fix some minor typos and formatting goofs
6195 2004-05-17 18:10 millert
6199 2004-05-17 17:57 millert
6201 * visudo.pod: remove my email addr
6203 2004-05-17 17:55 millert
6205 * sudo.pod, sudoers.pod, visudo.pod: Use @mansectform@ and
6206 @mansectsu@ everywhere Make man page references links with L<>
6208 2004-05-17 16:51 millert
6210 * parse.lex: Accept quoted globbing characters and pass them
6211 verbatim for fnmatch()
6213 2004-05-17 16:50 millert
6215 * UPGRADE: Document that /tmp/.odus is gone.
6217 2004-05-17 16:28 millert
6219 * CHANGES, aclocal.m4, configure, pathnames.h.in: No longer use
6220 /tmp/.odus as a possible timestamp dir unless specifically
6221 configured to do so. Instead, if no /var/run exists, use
6222 /var/adm/sudo or /usr/adm/sudo.
6224 2004-05-17 16:08 millert
6226 * check.c, compat.h, logging.c, set_perms.c, sudo.c, tgetpass.c,
6227 visudo.c: Preliminary changes to support nsr-tandem-nsk. Based
6228 on patches from Tom Bates.
6230 2004-05-16 18:47 millert
6232 * CHANGES: There was no 1.6.7p6.
6234 2004-05-16 16:38 millert
6236 * BUGS, CHANGES: sync
6238 2004-05-16 16:36 millert
6240 * Makefile.in: add missing files to DISTFILES
6242 2004-05-16 16:23 millert
6244 * sudoers.man.in, sudo.cat, sudoers.cat, visudo.cat: regen
6246 2004-05-16 16:20 millert
6248 * Makefile.in: Fix some line wrap and update (c) year
6250 2004-04-28 15:05 aaron
6252 * README.LDAP: Build Note
6254 2004-04-06 22:03 aaron
6256 * Makefile.in: Fix install-dirs
6258 2004-04-04 20:27 millert
6260 * visudo.c: In Exit() when used as a signal handler, emsg is a
6261 pointer so sizeof() is wrong so make it a #define instead. Also
6262 avoid using a negative exit value. Found by Aaron Campbell
6264 2004-03-24 18:23 millert
6266 * sudoers.pod: Remove bogus sentence about uids in a User_List.
6267 Document usernames vs. uid parsing in a Runas_List.
6269 2004-03-24 18:06 millert
6271 * parse.c, parse.h, parse.yacc, sudo.c, testsudoers.c, visudo.c: If
6272 the user specified a uid with the -u flag and the uid exists in
6273 the passwd file, set runas_user to the name, not the uid.
6275 When comparing usernames in sudoers, if a name is really a uid
6276 (starts with '#') compare it numerically to pw_uid.
6278 2004-03-22 13:35 millert
6280 * auth/kerb5.c: krb5_mcc_ops should be const; Johnny C. Lam
6282 2004-02-28 18:54 aaron
6284 * CHANGES, config.h.in, ldap.c: Added start_tls support
6286 2004-02-14 18:04 millert
6288 * Makefile.in: Clean up libtool stuff for 'make distclean' and add
6289 def_data.c, def_data.h to PARSESRCS.
6291 2004-02-14 10:13 aaron
6293 * strlcat.c, strlcpy.c: Un-Fix last license munge
6295 2004-02-13 16:37 millert
6297 * CHANGES, RUNSON, TODO: checkpoint
6299 2004-02-13 16:37 millert
6301 * lex.yy.c, configure: regen
6303 2004-02-13 16:36 millert
6305 * LICENSE, Makefile.binary, Makefile.in, alloc.c, check.c,
6306 closefrom.c, compat.h, defaults.c, defaults.h, env.c, fileops.c,
6307 find_path.c, getprogname.c, getspwuid.c, goodpath.c, ins_2001.h,
6308 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
6309 interfaces.h, ldap.c, logging.c, logging.h, parse.c, parse.h,
6310 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6311 strerror.c, strlcat.c, strlcpy.c, sudo.c, sudo.h, sudo.man.in,
6312 sudo.pod, sudo_edit.c, sudo_noexec.c, sudoers.man.in,
6313 sudoers.pod, testsudoers.c, tgetpass.c, utime.c, version.h,
6314 visudo.c, visudo.man.in, visudo.pod, zero_bytes.c, auth/afs.c,
6315 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
6316 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
6317 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
6318 auth/securid5.c, auth/sia.c, auth/sudo_auth.c, auth/sudo_auth.h,
6319 emul/search.h, emul/utime.h: More to a less restrictive,
6322 2004-02-12 21:08 aaron
6324 * CHANGES, Makefile.in, README.LDAP, config.h.in, configure.in,
6325 def_data.c, def_data.h, def_data.in, ldap.c, sudo.c, sudo.h,
6326 sudoers2ldif: Merged in LDAP Support
6328 2004-02-08 15:53 millert
6330 * sudo.h, sudo_noexec.c: Only do "extern int errno" if errno is not
6333 2004-02-06 18:08 millert
6335 * set_perms.c: setreuid(0, 0) fails on QNX if the euid is not
6336 already 0 so set the euid first, then just call setuid(0) to set
6339 2004-02-06 14:52 millert
6341 * set_perms.c: Use setresuid() and setreuid() for PERM_RUNAS when
6342 appropriate instead of seteuid() which may not exist.
6344 2004-02-04 14:58 millert
6348 2004-02-03 23:38 millert
6350 * INSTALL, config.h.in, configure, configure.in, ins_classic.h: Add
6351 --with-pc-insults configure option
6353 2004-02-03 23:32 millert
6355 * visudo.man.in: Prefer VISUAL over EDITOR like old vipw did.
6357 2004-02-01 15:45 millert
6359 * sudo.man.in, sudoers.man.in: regen
6361 2004-02-01 15:44 millert
6363 * sudoers.pod: Add a note that noexec is not a cure-all.
6365 2004-02-01 15:20 millert
6367 * sudoers.pod: Mention that disabling "root_sudo" is pretty
6370 2004-02-01 15:20 millert
6372 * configure, configure.in: Substitute for root_sudo in sudoers.pod
6374 2004-02-01 15:03 millert
6376 * sudo.pod: Add sudoedit to the NAME section
6378 2004-02-01 15:00 millert
6380 * sudoers.pod: Document that fact that setting ignore_dot in
6381 sudoers has no effect due to the fact that find_path() is called
6382 *before* sudoers is read.
6384 2004-01-29 19:50 millert
6386 * sudo_edit.c: Do not require _PATH_USRTMP to be set.
6388 2004-01-29 19:42 millert
6390 * BUGS, CHANGES, TODO: sync
6392 2004-01-29 19:42 millert
6394 * sudo.man.in: regen
6396 2004-01-29 19:41 millert
6398 * sudo.pod: Clarify that when sudo is run by root with the
6399 SUDO_USER variable set, the sudoers lookup happens for root and
6400 not the SUDO_USER user.
6402 2004-01-29 17:33 millert
6404 * defaults.c, env.c, fnmatch.c, interfaces.c, logging.c, parse.c,
6405 set_perms.c, sigaction.c, sudo.c, tgetpass.c, auth/pam.c,
6406 auth/sudo_auth.c: Use the SET, CLR and ISSET macros.
6408 2004-01-29 16:22 millert
6410 * interfaces.h: MAIN was replaced with _SUDO_MAIN some time ago.
6412 2004-01-29 16:15 millert
6414 * sudo.c: Don't look at prev_user until after we've parsed sudoers
6415 and done the password check. That way, if sudo/sudoedit is run
6416 from a root process that was invoked by sudo, we check sudoers
6417 for root, not the previous user. This makes sudoedit much more
6418 useful and means that for the sudo case, we get correct logging
6419 on who actually ran the command.
6421 2004-01-22 19:22 millert
6423 * sudo_edit.c: Add a comment describing why we need to be notified
6424 about our child stopping.
6426 2004-01-22 16:06 millert
6428 * def_data.c, def_data.in: Update the noexec variable descriptions
6430 2004-01-22 14:18 millert
6432 * sudoers.man.in, sudoers.pod: noexec now replaces more than just
6435 2004-01-22 12:14 millert
6437 * sudo_noexec.c: Alas, all the world does not go through execve(2).
6438 Many systems still have an execv(2) system call, Linux 2.6
6439 provides fexecve(2) and it is not uncommon for libc to have
6440 underscore ('_') versions of the functions to be used internally
6441 by the library. Instead of stubbing all these out by hand,
6442 define a macro and let it do the work. Extra exec functions
6443 pointed out by Reznic Valery.
6445 2004-01-21 21:57 millert
6447 * sudo.c, sudo_edit.c: Fix suspending the editor in -e mode.
6448 Because we do a fork() first we need to be notified when the
6449 child has been stopped and then send that same signal to ourself
6450 so the shell can do its job control thing.
6452 2004-01-21 21:44 millert
6454 * visudo.c: Use WIFEXITED and WEXITSTATUS macros. If there are
6455 systems out there that want to run sudo that still don't support
6456 these we can try to deal with that later.
6458 2004-01-21 20:03 millert
6462 2004-01-21 20:00 millert
6464 * sudo.man.in, sudo.pod, sudoers.man.in, sudoers.pod: Document sudo
6467 2004-01-21 19:08 millert
6469 * configure, configure.in: fix typo
6471 2004-01-21 19:02 millert
6473 * config.h.in, configure.in: Add SET/CLR/ISSET
6475 2004-01-21 18:55 millert
6477 * sudo.c: Allow non-exclusive flags when invoked as sudoedit.
6478 Pretty print the long usage() line to not wrap (assumes 80 char
6481 2004-01-21 18:01 millert
6483 * Makefile.in, sudo.c: If sudo is invoked as "sudoedit" the -e flag
6484 is implied and no other flags are permitted.
6486 2004-01-21 18:00 millert
6488 * sudo.h: Add a new flag, -e, that makes it possible to give users
6489 the ability to edit files with the editor of their choice as the
6490 invoking user, not the runas user. Temporary files are used for
6491 the actual edit and the temp file is copied over the original
6492 after the editor is done.
6494 2004-01-21 17:25 millert
6496 * Makefile.in, parse.c, parse.lex, sudo.c, sudo_edit.c: Add a new
6497 flag, -e, that makes it possible to give users the ability to
6498 edit files with the editor of their choice as the invoking user,
6499 not the runas user. Temporary files are used for the actual edit
6500 and the temp file is copied over the original after the editor is
6503 2004-01-21 17:06 millert
6505 * sudo.c, env.c: If real uid == 0 and the SUDO_USER environment
6506 variables is set, use that to determine the invoking user's true
6507 identity. That way the proper info gets logged by someone who
6508 has done "sudo su" but still uses sudo to as root. We can't do
6509 this for non-root users since that would open up a security hole,
6510 though perhaps it would be acceptable to use getlogin(2) on OSes
6511 where this a system call (and doesn't just look in the utmp
6514 2004-01-21 16:58 millert
6516 * pathnames.h.in: Add _PATH_TMP, _PATH_VARTMP and _PATH_USRTMP
6518 2004-01-21 16:57 millert
6520 * configure, config.h.in, configure.in: Add check for fchown(2)
6522 2004-01-20 14:22 millert
6524 * sudo.c: Back out portions of the -i commit that set NewArgv[0] in
6525 set_runaspw. It is far to late to set NewArgv[0] there and will
6526 have no effect anyway as cmnd and safe_cmnd have already been
6529 2004-01-20 14:18 millert
6531 * visudo.c, visudo.pod: Prefer VISUAL over EDITOR like old vipw
6534 2004-01-18 20:17 millert
6536 * env.c, sudo.c: In -i mode always set new environment based on the
6537 runas user's passwd entry.
6539 2004-01-18 17:56 millert
6541 * sudo.man.in, sudo.pod: Document the new -i flag and sync SYNOPSIS
6542 section with usage() in sudo.c. Also sort the flags in the
6545 2004-01-18 17:55 millert
6547 * sudo.c, sudo.h: o Add -i that acts similar to "su -", based on
6548 patches from David J. MacKenzie o Sort the flags in the usage
6551 2004-01-18 17:22 millert
6553 * sudoers.man.in, sudoers.pod: Add a missing @runas_default@
6556 2004-01-17 16:34 millert
6558 * sudo.c: Change euid to runas user before calling find_path().
6559 Unfortunately, though runas_user can be modified in sudoers we
6560 haven't parsed sudoers yet.
6562 2004-01-17 16:25 millert
6564 * sudoers.man.in, sudoers.pod: Add missing defintion of
6565 Parameter_List and use single pipes in the Defaults EBNF
6568 2004-01-17 13:49 millert
6570 * sudo.c: Fix a bug when set_runaspw() is used as a callback. We
6571 don't want to reset the contents of runas_pw if the user
6572 specified a user via the -u flag.
6574 Avoid unnecessary passwd lookups in set_authpw(). In most cases
6575 we already have the info in runas_pw.
6577 2004-01-16 18:16 millert
6579 * check.c: Add Stan Lee / Uncle Ben quote to the lecture from
6582 2004-01-16 18:12 millert
6584 * sudo.h: Update sudo_getepw() proto and add one for set_runaspw()
6586 2004-01-16 18:10 millert
6588 * parse.c: If we can't stat the command as root, try as the runas
6591 2004-01-16 18:09 millert
6593 * testsudoers.c, visudo.c: Add stub set_runaspw() function
6595 2004-01-16 18:09 millert
6597 * sudo.c: Add set_runaspw() function to fill in runas_pw. This
6598 will be used as a callback to update runas_pw when the runas user
6601 2004-01-16 18:07 millert
6603 * env.c, sudo.c: PERM_RUNAS -> PERM_FULL_RUNAS
6605 2004-01-16 18:05 millert
6607 * set_perms.c, sudo.h: Rename PERM_RUNAS -> PERM_FULL_RUNAS and add
6608 a PERM_RUNAS that just changes the euid.
6610 2004-01-16 18:04 millert
6612 * getspwuid.c: Make sudo_pwdup() act like OpenBSD pw_dup() and
6613 allocate memory in one chunk for easy free()ing. Also change it
6614 from static to extern.
6616 2004-01-16 18:03 millert
6618 * defaults.c, defaults.h: Add callback support
6620 2004-01-16 18:02 millert
6622 * def_data.c, def_data.in, mkdefaults: Add a callback field and use
6623 it for runas_default
6625 2004-01-15 15:13 millert
6627 * auth/fwtk.c: Add support for chalnecho and display server
6628 responses used by fwtk >= 2.0
6630 2004-01-12 18:39 millert
6632 * sudoers.man.in, sudoers.pod: ld.so is ld.so.1 on solaris
6634 2004-01-12 14:03 millert
6636 * Makefile.in, config.h.in, configure, configure.in, sudo.c,
6637 sudo.h: Use closefrom() instead of doing the equivalent inline.
6639 2004-01-12 13:55 millert
6641 * closefrom.c: closefrom(3) for systems w/o it
6643 2004-01-09 16:29 millert
6645 * sudoers.man.in: Update from .pod file.
6647 2004-01-09 16:26 millert
6649 * configure, configure.in: Substitute noexec_file for the sudoers
6652 2004-01-09 16:24 millert
6654 * sudo.man.in, sudo.pod: Mention noexec
6656 2004-01-09 16:16 millert
6658 * sudoers.man.in, sudoers.pod: Document noexec
6660 2004-01-09 14:38 millert
6662 * config.h.in, configure.in, auth/pam.c: Move PAM_CONST macro
6663 definition from config.h to pam.c where it belongs. We can't
6664 have this in config.h since that gets included too early.
6666 2004-01-09 14:35 millert
6668 * config.h.in, configure, configure.in, auth/pam.c: Some PAM
6669 implementations put their headers in /usr/include/pam instead of
6670 /usr/include/security.
6672 2004-01-09 14:32 millert
6674 * configure.in: I missed changing the EXEC macro -> EXECV here when
6675 I changed this in config.h.in and sudo.c a while ago.
6677 2004-01-09 13:15 millert
6679 * acsite.m4: OpenBSD vax/m88k/hppa don't do shared libs
6681 2004-01-09 03:29 millert
6683 * configure, configure.in: o merge the hpux case entries into a
6684 single entry w/ its own sub-case statement. o HP-UX >= 11
6685 support getspnam(), use it in preference to getprpwuid()
6687 2004-01-09 02:58 millert
6689 * configure, configure.in: eval $shrext so that it expands nicely
6692 2004-01-09 02:50 millert
6694 * Makefile.in: Don't lie about making a module, it does the wrong
6697 2004-01-09 02:49 millert
6699 * ltmain.sh: Remove requirement that libs must begin with "lib".
6700 They don't when we point directly at the lib using LD_PRELOAD or
6703 2004-01-09 02:01 millert
6705 * acsite.m4: Disable support for c++, f77 and java. We don't need
6706 it, it takes a lot of time, and it hosed our check for shared lib
6709 2004-01-09 02:00 millert
6713 2004-01-09 02:00 millert
6715 * configure.in: Call AC_ENABLE_SHARED and check the status of
6716 enable_shared to know when shared libs are available.
6718 2004-01-09 01:37 millert
6720 * acsite.m4: Duh, OpenBSD suports shared libs too
6722 2004-01-09 01:18 millert
6724 * configure.in, config.h.in: Only OpenPAM and Linux PAM use const
6727 2004-01-09 01:15 millert
6729 * configure, configure.in: o No need to check for sed, libtool
6730 config does that for us o move check for --with-noexec until
6731 after libtool magic is run so we can use $can_build_shared and
6734 2004-01-09 01:14 millert
6736 * ltmain.sh: Don't print a bunch of crap about library installs
6737 since we are not really installing a library.
6739 2004-01-09 00:38 millert
6741 * env.c: Make format_env() varargs Add noexec support for Darwin,
6742 MacOS X, Irix, and Tru64
6744 2004-01-09 00:32 millert
6746 * acsite.m4, ltconfig, ltmain.sh: Update to libtool 1.5 with local
6747 changes: o no ldconfig in the finish step o assume no libprefix
6748 or version is needed
6750 2004-01-09 00:15 millert
6752 * sudo_noexec.c: Fix compilation under K&R
6754 2004-01-06 09:31 millert
6756 * CHANGES: checkpoint
6758 2004-01-06 09:28 millert
6760 * sudo_noexec.c: stub execve() that just returns EACCES; used for
6761 noexec functionality
6763 2004-01-06 01:42 millert
6765 * sudo.tab.h: Regen w/ updated byacc from OpenBSD; fixes a gcc 3.2
6766 issue with generated code.
6768 2004-01-05 16:10 millert
6770 * def_data.c, def_data.h, def_data.in: Move the environment
6771 defaults to the end and shorten a few of the descriptions.
6773 2004-01-05 15:05 millert
6775 * configure.in, configure: no shared libs on ultris or convexos
6777 2004-01-05 15:03 millert
6779 * Makefile.in, configure, configure.in: Build sudo_noexec shared
6780 object using libtool; could use some cleanup.
6782 2004-01-05 14:59 millert
6784 * acsite.m4, ltconfig, ltmain.sh: libtool scaffolding
6786 2004-01-05 14:56 millert
6788 * parse.yacc: Merge the NOPASSWD/PASSWD and NOEXEC/EXEC rules so
6789 that order is not important.
6791 2004-01-05 12:15 millert
6793 * defaults.c, env.c, parse.c, parse.h, parse.lex, parse.yacc,
6794 pathnames.h.in, sudo.c, sudo.h, lex.yy.c: update copyright year
6796 2004-01-04 22:58 millert
6798 * configure, configure.in, defaults.c, env.c, pathnames.h.in: Add
6799 _PATH_SUDO_NOEXEC and corresponding --with-noexec configure
6800 option. The default value of noexec_file is set to this.
6802 2004-01-04 21:48 millert
6804 * def_data.c, def_data.h, def_data.in, env.c, lex.yy.c, parse.c,
6805 parse.h, parse.lex, parse.yacc, sudo.c, sudo.h, sudo.tab.h: Add
6806 support for preloading a shared object containing a dummy
6807 execve() function that just sets error and returns -1. This adds
6808 a "noexec_file" option to load the filename as well as a "noexec"
6809 flag to enable it unconditionally. There is also a NOEXEC tag
6810 that can be attached to specific commands and an EXEC tag to
6813 2004-01-04 21:40 millert
6815 * mkdefaults: add missing newline to usage statement
6817 2004-01-04 20:39 millert
6819 * config.h.in, sudo.c: Rename EXEC macro -> EXECV
6821 2004-01-04 20:16 millert
6823 * logging.c: Don't truncate usernames to 8 characters in the log
6826 2004-01-04 20:13 millert
6828 * check.c, sudoers.man.in, sudoers.pod: Update copyright year
6830 2004-01-04 20:12 millert
6832 * check.c, def_data.c, def_data.h, def_data.in, sudoers.man.in,
6833 sudoers.pod: Add a new option, lecture_file, that can be used to
6834 point to a custom sudo lecture.
6836 2003-12-31 17:46 millert
6838 * Makefile.in, sudo.h, zero_bytes.c, auth/aix_auth.c,
6839 auth/bsdauth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Add a
6840 zero_bytes() function to do the equivalent of bzero in such a way
6841 that will heopfully not be optimized away by sneaky compilers.
6843 2003-12-31 13:35 millert
6845 * err.c: Use #ifdef __STDC__, not #if __STDC__.
6847 2003-12-30 17:41 millert
6849 * mkdefaults: Always put at least one space between the def_* macro
6850 name and its definition.
6852 2003-12-30 17:34 millert
6854 * configure, configure.in: Adjust code for --without-lecture to
6857 2003-12-30 17:33 millert
6859 * visudo.man.in: regen after pasto fix
6861 2003-12-30 17:31 millert
6863 * sudoers.man.in, sudoers.pod: Document that "lecture" has changed
6864 from a flag to a tuple.
6866 2003-12-30 17:31 millert
6868 * check.c, def_data.c, def_data.h, def_data.in, defaults.c,
6869 defaults.h, logging.c, mkdefaults, parse.c, sudo.c, sudo.h: Add
6870 support for tuples in def_data.in; these are implemented as an
6871 enum type. Currently there is only a single tuple enum but in
6872 the future we may have one tuple enum per T_TUPLE entry in
6873 def_data.in. Currently listpw, verifypw and lecture are tuples.
6874 This avoids the need to have two entries (one ival, one str) for
6875 pwflags and syslog values.
6877 lecture is now a tuple with the following values: never, once,
6880 We no longer use both an int and string entry for syslog
6881 facilities and priorities. Instead, there are logfac2str() and
6882 logpri2str() functions that get used when we need to print the
6885 2003-12-30 17:20 millert
6887 * check.c, def_data.h, defaults.c, defaults.h, env.c, find_path.c,
6888 logging.c, mkdefaults, parse.c, parse.yacc, set_perms.c, sudo.c,
6889 visudo.c, auth/aix_auth.c, auth/bsdauth.c, auth/fwtk.c,
6890 auth/pam.c, auth/rfc1938.c, auth/securid5.c, auth/sia.c,
6891 auth/sudo_auth.c: Create def_* macros for each defaults value so
6892 we no longer need the def_{flag,ival,str,list,mode} macros (which
6893 have been removed). This is a step toward more flexible data
6894 types in def_data.in.
6896 2003-12-30 15:55 millert
6900 2003-12-22 21:18 millert
6902 * sudo.c: If we are in -k/-K mode, just spew to stderr. It is not
6903 unusual for users to place "sudo -k" in a .logout file which can
6904 cause sudo to be run during reboot after the YP/NIS/NIS+/LDAP/etc
6905 daemon has died. Previously, this would result in useless mail
6908 2003-12-16 13:51 millert
6910 * visudo.pod: fix pasto in VISUAL description
6912 2003-12-09 22:09 millert
6916 2003-12-09 22:08 millert
6918 * CHANGES: checkpoint
6920 2003-12-09 22:02 millert
6922 * TROUBLESHOOTING: Some OSes (like Solaris) allow export w/ nosuid
6925 2003-08-12 16:45 millert
6927 * compat.h: We don't use FD_ZERO anymore so just define FD_SET (if
6930 2003-06-28 21:31 millert
6932 * auth/pam.c: Fix a core dump on Solaris by preserving the
6933 pam_handle_t we used during authentication for pam_prep_user().
6934 If we didn't authenticate (ie: ticket still valid), we call
6935 pam_init() from pam_prep_user(). This is something of a hack; it
6936 may be better to change the auth API and add an auth_final()
6937 function that acts like pam_prep_user().
6939 2003-06-21 12:50 millert
6941 * set_perms.c: Add explicit declaration of printerr variable in
6942 function header (was defaulting to int which is OK but oh so K&R
6945 2003-06-09 19:00 millert
6947 * config.h.in, configure.in: s/HAVE_STOW/USE_STOW/
6949 2003-06-09 16:07 millert
6951 * logging.c: Also exit waitpid() loop when pid == 0. Fixes a
6952 problem where the sudo process would spin eating up CPU until
6953 sendmail finished when it has to send mail.
6955 2003-05-30 16:22 millert
6957 * fnmatch.3, fnmatch.c: Remove advertising clause, UCB has
6960 2003-05-21 21:53 millert
6962 * parse.c: Don't assume that getgrnam() calls don't modify contents
6963 of struct passwd returned by getpwnam(). On FreeBSD w/ NIS this
6964 can happen. Based on a patch from Kirk Webb.
6966 2003-05-06 11:25 millert
6968 * configure.in: missing ;;
6970 2003-05-06 00:53 millert
6972 * configure.in: darwin has a broken setreuid() in at least some
6975 2003-05-06 00:31 millert
6977 * env.c: Fix an off by one error when reallocating the environment;
6980 2003-04-30 14:04 millert
6982 * sudoers.pod: Fix User_Spec definition; SEKINE Tatsuo
6984 2003-04-28 19:30 millert
6986 * HISTORY: More info on the early days from Coggs.
6988 2003-04-21 14:47 millert
6990 * auth/kerb5.c: remove errant semicolon that prevented compilation
6993 2003-04-15 20:42 millert
6995 * Makefile.in, alloc.c, check.c, compat.h, defaults.c, defaults.h,
6996 env.c, fileops.c, find_path.c, getprogname.c, getspwuid.c,
6997 goodpath.c, interfaces.c, interfaces.h, logging.c, parse.c,
6998 parse.lex, parse.yacc, pathnames.h.in, set_perms.c, sigaction.c,
6999 strerror.c, sudo.c, sudo.h, sudo.man.in, sudo.pod,
7000 sudoers.man.in, sudoers.pod, testsudoers.c, tgetpass.c, utime.c,
7001 version.h, visudo.c, visudo.man.in, visudo.pod, auth/afs.c,
7002 auth/aix_auth.c, auth/bsdauth.c, auth/dce.c, auth/fwtk.c,
7003 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
7004 auth/rfc1938.c, auth/secureware.c, auth/securid.c,
7005 auth/securid5.c, auth/sia.c, auth/sudo_auth.c: add DARPA credit
7008 2003-04-15 20:25 millert
7010 * LICENSE: slightly different wording for the darpa credit
7012 2003-04-15 14:37 millert
7014 * LICENSE: Add DARPA credit
7016 2003-04-14 16:49 millert
7018 * auth/kerb5.c: Use krb5_princ_component() instead of
7019 krb5_princ_realm() for MIT Kerberos like we did before I messed
7022 Use krb5_principal_get_comp_string() to do the same thing w/
7023 Heimdal. I'm not sure if the component should be 0 or 1 in this
7026 #define ENCTYPE_DES_CBC_MD5 ETYPE_DES_CBC_MD5 for Heimdal since
7027 older versions lack ENCTYPE_DES_CBC_MD5. This is gross and there
7028 should be a configure check for this I guess.
7030 2003-04-13 15:48 millert
7032 * TROUBLESHOOTING, config.h.in, configure, configure.in,
7033 sample.sudoers: builtin -> built-in; Jason McIntyre
7035 2003-04-13 15:45 millert
7037 * sudoers.pod: built in -> built-in; Jason McIntyre
7039 2003-04-09 16:14 millert
7041 * CHANGES: checkpoint for 1.6.7p3
7043 2003-04-09 16:14 millert
7045 * HISTORY: Update info on the early years @ SUNY-Buffalo from Cliff
7046 Spencer. Amazingly, sudo source from 1985 is available via
7049 2003-04-09 16:13 millert
7051 * sudo.c: Don't change rl.rlim_max for RLIMIT_CORE. We need only
7052 set rl.rlim_cur to 0 to turn off core dumps. This may be needed
7053 for the RLIMIT_CORE restoration on some OSes.
7055 2003-04-04 12:46 millert
7057 * auth/kerb5.c: Make this compile on Heimdal and MIT Kerberos 5
7059 2003-04-04 12:45 millert
7061 * config.h.in, configure, configure.in: Check for heimdal even if
7062 we found krb5-config and define HAVE_HEIMDAL.
7064 2003-04-03 22:04 millert
7066 * auth/kerb5.c: Replace ETYPE_DES_CBC_MD5 with ENCTYPE_DES_CBC_MD5.
7067 The former is no longer defined by MIT kerb5 (though it used to
7068 be and indeed remains so in Heimdal).
7070 2003-04-03 10:16 millert
7072 * mkinstalldirs: Remove newer stuff that passes multiple (possibly
7073 duplicate) directories to "mkdir -p" since that seems to break on
7074 Tru64 Unix at least. This basically brings back what shipped
7077 2003-04-02 13:57 millert
7079 * auth/kerb5.c: Correct number of args to
7080 krb5_principal_get_realm() and fix an unclosed comment that hid
7083 2003-04-02 13:45 millert
7087 2003-04-02 13:45 millert
7089 * BUGS, CHANGES, INSTALL, INSTALL.binary, Makefile.in, README,
7090 configure.in, version.h: ++version
7092 2003-04-02 13:44 millert
7094 * configure.in: use krb5-config to determine Kerberos V details if
7097 2003-04-02 13:25 millert
7099 * alloc.c, check.c, compat.h, defaults.c, env.c, find_path.c,
7100 interfaces.c, logging.c, parse.c, sudo.c, sudo.h, testsudoers.c,
7101 visudo.c, auth/fwtk.c, auth/rfc1938.c, auth/securid.c,
7102 auth/securid5.c, auth/sia.c: Use warn/err and getprogname()
7103 throughout. The main exception is openlog(). Since the admin
7104 may be filtering logs based on the program name in the log files,
7105 hard code this to "sudo".
7107 2003-04-02 13:16 millert
7109 * Makefile.in: Add getprogname.c and err.c
7111 2003-04-02 13:15 millert
7115 2003-04-02 13:15 millert
7117 * configure.in, config.h.in: Add checks for getprognam(),
7118 __progname and err.h
7120 2003-04-02 13:14 millert
7122 * err.c, emul/err.h: For systems withour err/warn functions.
7124 2003-04-02 13:14 millert
7126 * getprogname.c: For systems neither getprogname() nor __progname;
7129 2003-04-01 10:09 millert
7131 * CHANGES: checkpoint for 1.6.7p1
7133 2003-04-01 10:02 millert
7135 * sudo.c, testsudoers.c: fix strlcpy() rval check (innocuous)
7137 2003-04-01 09:58 millert
7139 * check.c: oflow detection in expand_prompt() was faulty (false
7140 positives). The count was based on strlcat() return value which
7141 includes the length of the entire string.
7143 2003-03-30 19:02 millert
7145 * CHANGES, RUNSON, TODO: checkpoint for the sudo 1.6.7 release
7147 2003-03-24 16:09 millert
7149 * logging.c: g/c unused variable
7151 2003-03-24 11:06 millert
7155 2003-03-24 11:05 millert
7157 * configure.in: use man sections 8 and 5 for csops
7159 2003-03-21 18:11 millert
7163 2003-03-21 15:10 millert
7165 * configure.in: Add -lskey or -lopie directly to SUDO_LIBS instead
7166 of having AC_CHECK_LIB() add them to LIBS. Fixes visudo linkage.
7168 2003-03-21 14:02 millert
7172 2003-03-21 14:01 millert
7174 * INSTALL, aclocal.m4, configure.in: Add --with-blibpath for AIX.
7175 An alternate libpath may be specified or -blibpath support can be
7176 disabled. Also change conifgure such that -blibpath is not
7177 specified if no -L libpaths were added to SUDO_LDFLAGS.
7179 2003-03-20 22:05 millert
7181 * configure.in: add AIX blibpath support
7183 2003-03-20 20:28 millert
7185 * INSTALL, configure.in: --with-skey and --with-opie now take an
7186 option directory argument This obsoletes a --with-csops hack
7189 Also remove the remaining direct uses of "echo"
7191 2003-03-20 17:44 millert
7193 * configure.in: Detect KTH Kerberos IV and deal with it. Also make
7194 -lroken optional for KTH Kerberos IV and V.
7196 2003-03-20 14:42 millert
7198 * aclocal.m4: Add SUDO_APPEND_LIBPATH function that add
7199 -L/path/to/dir (and -R/path/to/dir if $with_rpath) to the
7202 2003-03-20 14:40 millert
7204 * INSTALL, configure.in: Add -R/path/to/libs for Solaris and SVR4.
7205 There is a new configure option, --with-rpath to control this
7208 2003-03-19 23:50 millert
7210 * configure.in: for kerb4 put libdes after libkrb on the link line
7212 2003-03-19 23:49 millert
7214 * auth/kerb4.c: typo
7216 2003-03-19 23:33 millert
7218 * configure.in: fix kerberos lib check when a path is specified
7220 2003-03-19 21:04 millert
7222 * logging.c: Fix boolean thinko in SIGCHLD reaper and call
7223 reapchild after sending mail instead of doing a conditional
7226 2003-03-19 16:20 millert
7230 2003-03-19 16:19 millert
7232 * configure.in: replace =DIR with [=DIR] where sensible
7234 2003-03-19 16:16 millert
7236 * configure.in: o Use AC_MSG_* instead of "echo" o New Kerberos
7237 include/lib detection based on openssh's configure.in
7239 2003-03-19 15:58 millert
7241 * INSTALL: --with-kerb4 and --with-kerb5 now take an optional
7244 2003-03-15 22:03 millert
7246 * auth/securid.c: Kill remaining strcpy(), the programmer's guide
7247 says username is 32 bytes.
7249 2003-03-15 21:18 millert
7251 * auth/kerb4.c: trat uid_t as unsigned long for printf and use
7252 snprintf, not sprintf
7254 2003-03-15 21:18 millert
7256 * auth/rfc1938.c: use snprintf
7258 2003-03-15 15:37 millert
7260 * auth/: afs.c, aix_auth.c, bsdauth.c, dce.c, fwtk.c, kerb4.c,
7261 kerb5.c, pam.c, passwd.c, rfc1938.c, sudo_auth.c: update
7264 2003-03-15 15:31 millert
7266 * LICENSE, alloc.c, check.c, configure.in, env.c, sudo.c,
7267 Makefile.in, aclocal.m4, compat.h, find_path.c, interfaces.c,
7268 logging.c, parse.c, parse.lex, parse.yacc, set_perms.c, sudo.h,
7269 sudo.pod, sudoers.pod, testsudoers.c, version.h, visudo.c,
7270 visudo.pod, sudo.man.in, sudoers.man.in, visudo.man.in: update
7273 2003-03-15 15:19 millert
7275 * check.c, env.c, sudo.c: Cast [ug]ids to unsigned long and printf
7278 2003-03-15 15:17 millert
7282 2003-03-15 15:16 millert
7284 * configure.in: correct error messages for
7285 --with-sudoers-{mode,uid,gid}
7287 2003-03-15 15:10 millert
7289 * alloc.c: make the malloc(0) error specific to each function to
7290 aid tracking down bugs.
7292 2003-03-15 14:49 millert
7294 * alloc.c: deal with platforms where size_t is signed and there is
7295 no SIZE_MAX or SIZE_T_MAX
7297 2003-03-15 14:10 millert
7299 * auth/kerb5.c: Make this compile w/ Heimdal and fix some gcc
7302 2003-03-15 13:02 millert
7304 * sudo.c: Use stat_sudoers macro so --with-stow can work
7306 2003-03-15 13:01 millert
7308 * INSTALL, config.h.in, configure, configure.in: Add support for
7309 --with-stow based on patches from Robert Uhl
7311 2003-03-15 12:51 millert
7313 * env.c: fix indentation
7315 2003-03-15 00:21 millert
7317 * configure.in: back out rev 1.352
7319 2003-03-14 20:11 millert
7323 2003-03-14 20:11 millert
7325 * parse.lex: use strlcpy, not strncpy
7327 2003-03-14 19:48 millert
7329 * set_perms.c: Fix typo; check pw_uid, not pw_gid after
7330 setusercontext() failure.
7332 2003-03-14 19:43 millert
7334 * logging.c: use pid_t
7336 2003-03-14 10:43 millert
7338 * strlcat.c, strlcpy.c: Make gcc shutup about unused rcsid
7340 2003-03-14 10:35 millert
7342 * interfaces.c: Move the n == 0 check for the non-getifaddrs cas
7344 2003-03-13 21:47 millert
7346 * auth/rfc1938.c: skeychallenge() on NetBSD take a size parameter
7348 2003-03-13 21:38 millert
7352 2003-03-13 21:38 millert
7354 * configure.in: put -ldl after -lpam, not before; fixes static
7357 2003-03-13 21:17 millert
7359 * interfaces.c: Avoid malloc(0) and fix the loop invariant for the
7362 2003-03-13 20:24 millert
7364 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
7365 sudoers.cat, visudo.cat: regen
7367 2003-03-13 20:23 millert
7369 * Makefile.in: Preserve copyright notice from .pod file in .man.in
7372 2003-03-13 20:01 millert
7374 * visudo.pod: Add sudoers(5) to SEE ALSO
7376 2003-03-13 15:27 millert
7380 2003-03-13 15:27 millert
7382 * parse.lex: Don't assume libc can realloc() a NULL string. If
7383 malloc/realloc fails, make sure we just return; yyerror() is not
7386 2003-03-13 15:17 millert
7390 2003-03-13 15:17 millert
7392 * parse.lex: simplify fill_args a little and use strlcpy for
7395 2003-03-13 15:00 millert
7397 * check.c, env.c, find_path.c, parse.c, parse.yacc, sudo.c,
7398 testsudoers.c: Use strlc{at,py} for paranoia's sake and exit on
7399 overflow. In all cases the strings were either pre-allocated to
7400 the correct size of length checks were done before the copy but a
7401 little paranoia can go a long way.
7403 2003-03-13 12:54 millert
7405 * sudo.h: Add strlc{at,py} protos
7407 2003-03-13 12:03 millert
7409 * env.c, interfaces.c: Use erealloc3()
7411 2003-03-13 12:00 millert
7415 2003-03-13 12:00 millert
7417 * alloc.c: Oflow test of nmemb > SIZE_MAX / size is fine (don't
7418 need >=). Use memcpy() instead of strcpy() in estrdup() so this
7421 2003-03-13 11:58 millert
7423 * sudo.c: snprintf() a uid as %lu, not %ld to match the
7424 MAX_UID_T_LEN test in configure.
7426 2003-03-13 11:56 millert
7428 * aclocal.m4: In MAX_UID_T_LEN test cast uid_t to unsigned long,
7431 2003-03-12 18:46 millert
7433 * sudo.c: Use snprintf() for paranoia
7435 2003-03-12 17:16 millert
7437 * parse.yacc: Use emalloc2 and erealloc3
7439 2003-03-12 17:08 millert
7441 * Makefile.in: strlc{at,py} for those w/o it
7443 2003-03-12 17:07 millert
7445 * strlcat.c, strlcpy.c: stlc{at,py} for those w/o it.
7447 2003-03-12 17:07 millert
7449 * config.h.in, configure, configure.in: Add stlc{at,py} for those
7452 2003-03-12 16:51 millert
7454 * alloc.c, sudo.h: Add erealloc3(), a realloc() version of
7457 2003-03-12 16:45 millert
7459 * interfaces.c, sudo.c: Use emalloc2() to allocate N things of a
7462 2003-03-12 16:41 millert
7464 * alloc.c, sudo.h: Add emalloc2() -- like calloc() but w/o the
7465 bzero and with error/oflow checking.
7467 2003-03-12 16:23 millert
7469 * alloc.c: Error out on malloc(0); suggested by theo
7471 2003-03-09 19:34 millert
7473 * configure, configure.in: fix a typo; David Krause
7475 2003-03-07 10:46 millert
7477 * sudo.pod: fix typo
7479 2003-03-03 21:47 millert
7481 * env.c: Remove DYLD_ from the environment for MacOS X; from bbraun
7483 2003-03-01 13:20 millert
7485 * configure.in, config.h.in: not not; Anil Madhavapeddy
7487 2003-01-23 03:03 millert
7489 * sudo.pod, sudoers.pod, visudo.pod: typos; jmc@openbsd.org
7491 2003-01-20 16:13 millert
7493 * parse.yacc: Add some missing ';' rule terminators that bison
7496 2003-01-20 16:07 millert
7498 * config.sub: fix typo I introduced in last merge
7500 2003-01-20 15:59 millert
7502 * configure: regenerate with autoconf 2.57
7504 2003-01-20 15:58 millert
7506 * config.h.in: Add missing "$HOME"
7508 2003-01-20 15:57 millert
7510 * configure.in: Add some more square backets to make autoconf 2.57
7513 2003-01-20 14:39 millert
7515 * config.guess, config.sub, mkinstalldirs: Updates from
7518 2003-01-17 18:10 millert
7520 * lex.yy.c, sudo.tab.h: regen
7522 2003-01-17 18:09 millert
7524 * parse.lex, parse.yacc, sudoers.pod: Add support for
7527 2003-01-06 19:10 millert
7529 * visudo.c: fclose() yyin after each yyparse() is done and use
7530 fopen() instead of using freopen().
7532 2003-01-06 19:02 millert
7534 * parse.lex: Better fix for sudoers files w/o a newline before EOF.
7535 It looks like the issue is that yyrestart() does not reset the
7536 start condition to INITIAL which is an issue since we parse
7537 sudoers multiple times.
7539 2003-01-06 18:47 millert
7541 * parse.lex: Work around what appears to be a flex bug when dealing
7542 with files that lack a final newline before EOF. This adds a
7543 rule to match EOF in the non-initial states which resets the
7544 state to INITIAL and throws an error.
7546 2003-01-06 15:06 millert
7548 * visudo.c: o The parser needs sudoers to end with a newline but
7549 some editors (emacs) may not add one. Check for a missing
7550 newline at EOF and add one if needed. o Set quiet flag during
7551 initial sudoers parse (to get options) o Move yyrestart() call
7552 and always use freopen() to open yyin after initial sudoers
7555 2002-12-15 11:24 millert
7557 * set_perms.c: Fix pasto/thinko in setresgid()/setregid() usage.
7558 Want to set effective gid, not real gid, when reading sudoers.
7560 2002-12-15 11:08 millert
7562 * set_perms.c: don't compile set_perms_posix if we have setreuid or
7565 2002-12-14 14:21 millert
7567 * sudo.pod, sudoers.pod: document new prompt escapes
7569 2002-12-14 14:15 millert
7571 * check.c: Add %U and %H escapes and redo prompt rewriting. "%%"
7572 now gets collapsed to "%" as was originally intended. This also
7573 gets rid of lastchar (does lookahead instead of lookback) which
7574 should simplify the logic slightly.
7576 2002-12-13 13:20 millert
7578 * tgetpass.c: Write the prompt *after* turning off echo to avoid
7579 some password characters being echoed on heavily-loaded machines
7582 2002-12-13 13:09 millert
7584 * config.sub: Add support for mipseb; wiz@danbala.tuwien.ac.at
7586 2002-12-13 12:48 millert
7588 * configure.in: Fix IRIX fallout from name changes in man dir/sect
7589 Makefile variables. Patch from erici AT motown DOT cc DOT utexas
7592 2002-12-13 11:33 millert
7594 * auth/pam.c: Keep a local copy of tgetpass_flags so we don't add
7595 in TGP_ECHO to the global copy. Problem noted by Peter Pentchev.
7597 2002-11-28 18:43 millert
7599 * parse.yacc: Add missing yyerror() calls; YYERROR does not seem to
7602 2002-11-26 12:09 millert
7604 * sudo.c: fix typo in comment; Pedro Bastos
7606 2002-11-22 14:41 millert
7608 * INSTALL: document --disable-setresuid
7610 2002-11-22 14:41 millert
7612 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c:
7613 Sprinkle some volatile qualifiers to prevent over-enthusiastic
7614 optimizers from removing memset() calls.
7616 2002-11-22 14:11 millert
7618 * logging.c, parse.yacc: minor sign fixes pointed out by gcc
7621 2002-11-22 14:09 millert
7623 * set_perms.c, sudo.c, sudo.h: Revamp set_perms. We now use a
7624 version based on setresuid() or setreuid() when possible since
7625 that allows us to support the stay_setuid option and we always
7626 know exactly what the semantics will be (various Linux kernels
7627 have broken POSIX saved uid support).
7629 2002-11-22 14:08 millert
7631 * config.h.in, configure: regen from configure.in
7633 2002-11-22 14:07 millert
7635 * configure.in: Add checks for setresuid() and a way to disable
7638 2002-11-22 14:05 millert
7640 * compat.h: No long need to emulate set*[ug]id() via setres[ug]id()
7641 or setre[ug]id(). The new set_perms stuff only uses things it
7644 2002-11-22 13:33 millert
7646 * sudo.c: Before exec, restore state of signal handlers to be the
7647 same as when we were initialy invoked instead of just reseting to
7648 SIG_DFL. Fixes a problem when using sudo with nohup. Based on a
7649 patch from Paul Markham.
7651 2002-11-22 13:23 millert
7653 * sudo.c: o timestamp_uid should be uid_t, not int o clarify error
7654 message when sudo is run by root and no_root_sudo is set
7656 2002-09-19 17:27 millert
7658 * README: update ftp link for bison
7660 2002-07-20 08:30 millert
7662 * set_perms.c: Error out if setusercontext() fails and the runas
7665 2002-05-20 16:51 millert
7667 * auth/securid5.c: Fix rcsid
7669 2002-05-20 16:50 millert
7671 * configure.in: Fix SecurID API test
7673 2002-05-17 13:20 millert
7675 * env.c: typo in comment
7677 2002-05-17 13:20 millert
7679 * configure.in: securid5 stuff needs pthreads. Just adding
7680 -lpthread is suboptimal but I don't see a better way at the
7683 2002-05-17 13:04 millert
7685 * Makefile.in, auth/securid5.c: SecurID API version 5 support from
7688 2002-05-17 13:02 millert
7690 * configure.in: Add check for SecurID 5.0 API
7692 2002-05-08 16:46 millert
7694 * strerror.c: We actually do still need config.h to get the 'const'
7695 definition for K&R C.
7697 2002-05-05 16:43 millert
7699 * configure: regen with autoconf 2.5.3
7701 2002-05-05 16:25 millert
7703 * configure.in: Don't set sysconfdir to '/etc' if the user has
7704 specified a --prefix.
7706 2002-05-05 16:14 millert
7708 * configure.in: Some fixes for autoconf 2.53 from Robert Uhl o
7709 don't AC_SUBST LIBOBJS o force a 4th arg for AC_CHECK_HEADER()
7712 2002-05-05 15:58 millert
7714 * env.c, sudo.c, sudo.h: No need for dump_badenv() now that
7715 dump_defaults() knows how to dump lists.
7717 2002-05-04 21:31 millert
7719 * BUGS, INSTALL, Makefile.in, configure.in, version.h,
7720 INSTALL.binary, README: ++version
7722 2002-05-04 20:57 millert
7724 * sudoers.pod: document timestampowner
7726 2002-05-04 20:45 millert
7728 * check.c: Don't call set_perms() when doing timestamp stuff unless
7731 2002-05-04 20:43 millert
7733 * check.c, logging.c, parse.c, set_perms.c, sudo.c, sudo.h,
7734 testsudoers.c, auth/sudo_auth.c: g/c second arg to set_perms--it
7737 2002-05-03 18:48 millert
7739 * check.c, set_perms.c, sudo.c, sudo.h: Add support for non-root
7740 timestamp dirs. This allows the timestamp dir to be shared via
7741 NFS (though this is not recommended).
7743 2002-05-03 18:47 millert
7745 * def_data.c, def_data.h, def_data.in: Add timestampowner, "Owner
7746 of the authentication timestamp dir"
7748 2002-05-02 15:40 millert
7750 * env.c: Don't try to pre-compute the size of the new envp, just
7751 allocate space up front and realloc as needed. Changes to the
7752 new env pointer must all be made through insert_env() which now
7753 keeps track of spaced used and allocates as needed.
7755 2002-04-26 15:12 millert
7759 2002-04-26 15:12 millert
7761 * configure.in: Fix two typo/pastos; from jrj@purdue.edu
7763 2002-04-25 11:36 millert
7765 * INSTALL.binary, README: ++version
7767 2002-04-25 11:35 millert
7769 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7770 visudo.man.in, configure: regen
7772 2002-04-25 11:31 millert
7774 * CHANGES, RUNSON, TODO: Sync with 1.6.6
7776 2002-04-25 11:30 millert
7778 * check.c: The the loop used to expand %h and %u, the lastchar
7779 variable was not being initialized. This means that if the last
7780 char in the prompt is '%' and the first char is 'h' or 'u' a
7781 extra copy of the host or user name would be copied, for which
7782 space had not been allocated.
7784 2002-04-18 11:41 millert
7786 * BUGS, INSTALL, Makefile.in, configure.in, version.h: crank
7789 2002-04-18 11:39 millert
7791 * auth/afs.c: #undef VOID to get rid of an AFS warning
7793 2002-04-18 11:38 millert
7795 * env.c: Use easprintf instead of emalloc + sprintf for some
7798 2002-03-15 19:45 millert
7802 2002-03-15 19:44 millert
7804 * parse.c, parse.lex, parse.yacc, testsudoers.c: Remove Chris
7805 Jepeway's email address so people don't bug him ;-)
7807 2002-03-11 22:19 millert
7809 * sudo.c: Move endpwent() to be after set_perms(PERM_RUNAS, ...)
7810 and also call endgrent() at the same time.
7812 2002-02-21 22:23 millert
7814 * INSTALL: Make it clear which configure options take arguments.
7816 2002-01-25 13:38 millert
7818 * compat.h: HP-UX 9.x has RLIMIT_* but no RLIM_INFINITY. If there
7819 is no RLIM_INFINITY, just pretend it is -1. This works because
7820 we only check for RLIM_INFINITY and do not set anything to that
7823 2002-01-22 11:43 millert
7825 * auth/pam.c: Zero and free allocated memory when there is a
7828 2002-01-21 22:37 millert
7830 * auth/bsdauth.c: Use sigaction() not signal()
7832 2002-01-21 22:26 millert
7834 * INSTALL: Mention that some linux kernels have broken POSIX saved
7837 2002-01-21 21:03 millert
7839 * CHANGES: checkpoint for 1.6.5p2
7841 2002-01-21 21:01 millert
7845 2002-01-21 21:01 millert
7847 * configure.in: Add --disable-setreuid flag
7849 2002-01-21 21:00 millert
7851 * INSTALL: Document new --disable-setreuid option and change
7852 description for --disable-saved-ids to match new error message.
7854 2002-01-21 21:00 millert
7856 * set_perms.c: fatal() now takes an argument that determines
7857 whether or not to call perror().
7859 2002-01-21 20:58 millert
7861 * PORTING, TROUBLESHOOTING: Update for new error messages from
7864 2002-01-21 17:46 millert
7866 * auth/pam.c: Make this compile w/o warnings
7868 2002-01-21 17:36 millert
7870 * auth/pam.c: Mention that we can't use pam_acct_mgmt()
7872 2002-01-21 17:25 millert
7874 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c: The user's password
7875 was not zeroed after use when AIX authentication, BSD
7876 authentication, FWTK or PAM was in use.
7878 2002-01-20 14:21 millert
7880 * auth/pam.c: Avoid giving PAM a NULL password response, use the
7881 empty string instead. This avoids a log warning when the user
7882 hits ^C at the password prompt when PAM is in use.
7884 2002-01-19 19:46 millert
7886 * auth/pam.c: Don't check the return value of pam_setcred(). In
7887 Linux-PAM 0.75 pam_setcred() returns the last saved return code,
7888 not the return code for the setcred module. Because we haven't
7889 called pam_authenticate(), this is not set and so pam_setcred()
7890 returns PAM_PERM_DENIED.
7892 2002-01-19 19:43 millert
7894 * Makefile.binary, Makefile.in: Don't need a '/' between $(DESTDIR)
7897 2002-01-18 14:18 millert
7901 2002-01-18 14:18 millert
7903 * configure.in: o BSDi also has a bogus setreuid() o Old FreeBSD
7904 has a bogus setreuid() o new NetBSD has a real setreuid() o add
7905 check for freeifaddrs() if getifaddrs() exists.
7907 2002-01-18 14:17 millert
7909 * config.h.in, interfaces.c: Older BSDi releases lack freeifaddrs()
7910 so add a test for that and if it is not present just use free().
7912 2002-01-17 11:30 millert
7914 * CHANGES, RUNSON: Checkpoint for 1.6.5p1
7916 2002-01-17 10:56 millert
7918 * auth/passwd.c: Return AUTH_FAILURE in passwd_init() if
7919 skeyaccess() denies access to normal passwords, not AUTH_FATAL
7920 (which just causes an exit).
7922 2002-01-17 10:35 millert
7924 * visudo.c: Don't use memory after it has been freed.
7926 2002-01-17 00:24 millert
7928 * auth/passwd.c: skeyaccess() wants a struct passwd * not a char *;
7929 Patch from Phillip E. Lobbes
7931 2002-01-16 20:00 millert
7935 2002-01-16 19:53 millert
7937 * CHANGES, RUNSON, TODO: checkpoint for sudo 1.6.5
7939 2002-01-16 18:37 millert
7943 2002-01-16 18:37 millert
7945 * INSTALL, INSTALL.binary, Makefile.in, README, configure.in:
7948 2002-01-16 18:37 millert
7950 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
7951 visudo.man.in: sudo version 1.6.5
7953 2002-01-16 16:28 millert
7955 * logging.c: o when invoking the mailer as root use a hard-coded
7956 environment that doesn't include any info from the user's
7957 environment. Basically paranoia.
7959 o Add support for the NO_ROOT_MAILER compile-time option and run
7960 the mailer as the user and not root if NO_ROOT_MAILER is
7963 2002-01-16 16:27 millert
7965 * set_perms.c, sudo.h: Bring back PERM_FULL_USER
7967 2002-01-16 16:26 millert
7971 2002-01-16 16:26 millert
7973 * version.h: version 1.6.5
7975 2002-01-16 16:26 millert
7977 * INSTALL, config.h.in, configure.in: Add --disable-root-mailer
7978 option to run the mailer as the user and not root.
7980 2002-01-16 12:44 millert
7982 * CHANGES: checkpoint for 1.6.4p2
7984 2002-01-15 19:22 millert
7986 * PORTING: Mention the "seteuid(0): Operation not permitted"
7987 problem here too just for good measure.
7989 2002-01-15 18:43 millert
7991 * env.c, getspwuid.c, sudo.c: The SHELL environment variable was
7992 preserved from the user's environment instead of being reset
7993 based on the passwd database when the "env_reset" option was
7994 used. Now it is reset as it should be.
7996 2002-01-15 17:47 millert
8000 2002-01-15 17:47 millert
8002 * INSTALL, TROUBLESHOOTING, config.h.in, configure.in, set_perms.c,
8003 sudo.c: Add a configure option to turn off use of POSIX saved IDs
8005 2002-01-15 15:48 millert
8009 2002-01-15 15:48 millert
8011 * configure.in: add --with-efence option
8013 2002-01-15 15:39 millert
8015 * sudo.c: Only OR in MODE_RESET_HOME if MODE_RUN is set. Fixes a
8016 problem where "sudo -l" would not work if always_set_home was
8019 2002-01-15 13:16 millert
8023 2002-01-15 13:16 millert
8025 * parse.lex: Quoted commas were not being treated correctly in
8026 command line arguments.
8028 2002-01-14 20:53 millert
8030 * sudo.c: o Move the call to rebuild_env() until after
8031 MODE_RESET_HOME is set. Otherwise, the set_home option has no
8034 o Fix use of freed memory when the "fqdn" flag is set. This was
8035 introduced by the fix for the "segv when gethostbynam() fails"
8036 bug. Also, we no longer call set_fqdn() if the "fqdn" flag is
8037 not set so there is no need to check the "fqdn" flag in
8040 2002-01-14 20:45 millert
8042 * env.c: Add 'continue' statements to optimize the switch
8043 statement. From Solar.
8045 2002-01-13 13:42 millert
8047 * sudoers.cat, sudoers.man.in: Regen from new sudoers.pod
8049 2002-01-13 13:36 millert
8051 * sudoers.pod: Add caveat about stay_setuid flag
8053 2002-01-13 13:29 millert
8055 * sudo.c: If set_perms == set_perms_posix and the stay_setuid flag
8056 is not set, set all uids to 0 and use set_perms_fallback().
8058 2002-01-13 13:28 millert
8060 * set_perms.c, sudo.h: Remove PERM_FULL_USER (which is no longer
8061 used) and add PERM_FULL_ROOT (used when exec'ing the mailer).
8063 2002-01-13 13:27 millert
8065 * logging.c: Use set_perms(PERM_FULL_ROOT, 0) before exec'ing the
8066 mailer since we never want to run the mailer setuid.
8068 2002-01-12 17:55 millert
8070 * sudo.cat, sudo.man.in, sudo.pod, visudo.cat, visudo.man.in,
8071 visudo.pod: Use sudo.ws instead of courtesan.com in URLs
8073 2002-01-12 14:00 millert
8075 * Makefile.in, Makefile.binary: Fix mansect substitution
8077 2002-01-12 13:15 millert
8079 * Makefile.in: Substitute man sections in Makefile.binary
8081 2002-01-12 13:15 millert
8083 * Makefile.binary: Sync install targets with Makefile.in and
8084 substitute in man sections.
8086 2002-01-12 13:09 millert
8088 * INSTALL, INSTALL.binary: version is 1.6.4
8090 2002-01-12 12:59 millert
8092 * Makefile.in: Repair bindist target
8094 2002-01-12 11:43 millert
8096 * CHANGES: sync for 1.6.4
8098 2002-01-10 13:00 millert
8100 * install-sh: Fix case where neither whoami nor id are found
8102 2002-01-09 12:35 millert
8104 * install-sh: If neither whoami nor id exists, just assume we are
8107 2002-01-09 11:56 millert
8109 * alloc.c: Add explicit cast to (VOID *) on malloc/realloc. Seems
8110 to be needed on AIX which for some reason isn't pulling in the
8113 2002-01-08 10:00 millert
8115 * Makefile.in, aclocal.m4, compat.h, parse.c, sudo.c: (c) 2002
8117 2002-01-08 09:21 millert
8119 * CHANGES: checkpoint
8121 2002-01-08 09:20 millert
8123 * sudo.c: Defer assigning new environment until right before the
8126 2002-01-08 09:08 millert
8128 * parse.c: kill extra blank line
8130 2002-01-07 13:59 millert
8134 2002-01-07 13:59 millert
8136 * configure.in: Use -O not -O2 for m88k-motorola-sysv* since
8137 motorola gcc-derived compiler doesn't recognise -O2.
8139 2002-01-06 23:02 millert
8141 * HISTORY: Clarify origins of Root Group sudo a bit based on info
8142 from billp@rootgroup.com
8144 2002-01-02 22:41 millert
8148 2002-01-02 22:26 millert
8150 * CHANGES: checkpoint for 1.6.4rc1
8152 2002-01-02 17:40 millert
8154 * config.h.in: now generated via autoheader
8156 2002-01-02 17:40 millert
8160 2002-01-02 17:37 millert
8162 * compat.h: Move in some stuff that was previously in config.h.
8164 2002-01-02 17:36 millert
8166 * configure.in, aclocal.m4: Add info for autoheader.
8168 2002-01-01 16:53 millert
8170 * Makefile.in: o Add DESTDIR support
8171 o Use -M, -O, and -G instead of -m, -o, and -g to facilitate
8174 2002-01-01 16:48 millert
8176 * install-sh: Add -M option (like -m but only for root) If we can't
8177 find "whoami", use "id" w/ some sed.
8179 2002-01-01 14:01 millert
8183 2002-01-01 14:00 millert
8185 * configure.in: allow user to always override mansectsu and
8188 2001-12-31 17:05 millert
8190 * mkinstalldirs: update from autoconf 2.52
8192 2001-12-31 17:03 millert
8194 * config.guess, config.sub: Update from autoconf 2.52
8196 2001-12-31 16:57 millert
8198 * configure: regen with autoconf 2.52
8200 2001-12-31 16:57 millert
8202 * configure.in: o Call AC_PROG_CC_STDC to find out how to run the
8203 compiler in ANSI mode
8204 o Remove compiler-specific checks for HP-UX now that we use
8207 2001-12-31 12:19 millert
8209 * RUNSON: Checkpoint
8211 2001-12-31 12:18 millert
8213 * auth/pam.c: o Add pam_prep_user function to call pam_setcred()
8214 for the target user; on Linux this often sets resource limits.
8215 o When calling pam_end(), try to convert the auth->result to a
8216 PAM_FOO value. This is a hack--we really need to stash the
8217 last PAM_FOO value received and use that instead.
8219 2001-12-31 12:18 millert
8221 * set_perms.c, sudo.h: o Add pam_prep_user function to call
8222 pam_setcred() for the target user; on Linux this often sets
8225 2001-12-31 00:53 millert
8227 * env.c: Fix off by one error in number of bytes allocated via
8228 malloc (does not affected any released version of sudo).
8230 2001-12-30 17:12 millert
8234 2001-12-30 17:12 millert
8236 * parse.lex: Allow '@', '(', ')', ':' in arguments to a defaults
8237 variable w/o requiring that they be quoted.
8239 2001-12-30 14:26 millert
8241 * sudoers.cat, sudoers.man.in, sudoers.pod: Mention that no double
8242 quotes are needed when adding/deleting/assigning a single value
8245 2001-12-30 13:58 millert
8247 * Makefile.in: Don't rely on mkdefaults being executable, call perl
8250 2001-12-30 13:41 millert
8252 * parse.yacc: Remove some XXX that are no longer relevant.
8254 2001-12-30 13:40 millert
8256 * defaults.c: o Roll our own loop instead of using strpbrk() for
8257 better grokability o When adding to a list we must malloc() and
8258 use memcpy(), not strdup() since we must only copy len bytes
8261 2001-12-21 16:49 millert
8263 * parse.yacc: typo in comment
8265 2001-12-19 11:50 millert
8267 * CHANGES: checkpoint
8269 2001-12-19 10:56 millert
8273 2001-12-19 10:56 millert
8275 * configure.in: avoid the -g flag unless --with-devel was specified
8277 2001-12-19 10:04 millert
8279 * Makefile.in: mkdefaults, def_data.in and sigaction.c were missing
8282 2001-12-19 09:46 millert
8284 * Makefile.in: def_data.c was missing
8286 2001-12-18 12:42 millert
8288 * env.c: Fix setting of $USER and $LOGNAME in the non-reset_env
8289 case. Also allow HOME, SHELL, LOGNAME, and USER to be specified
8292 2001-12-17 20:48 millert
8294 * TODO: Another TODO item
8296 2001-12-17 19:50 millert
8298 * sudoers: Add comment for Default section so folks know where it
8301 2001-12-17 18:56 millert
8303 * tgetpass.c: Use TCSETAF, not TCSETA to set terminal in termio
8306 2001-12-17 18:35 millert
8308 * sudoers.man.in, sudoers.cat: regen from sudoers.pod
8310 2001-12-17 18:33 millert
8312 * sudoers.pod: o Typo, Runas_User_List should be Runas_List
8313 o a User_List can not contain a uid
8314 o mention that the Defaults section should come after Alias
8315 definitions but before the user specifications
8317 2001-12-15 11:51 millert
8319 * sudoers.cat, sudoers.man.in: regen
8321 2001-12-15 11:51 millert
8323 * sudoers.pod: Fix listpw and verifypw sections, they were not
8324 being formatted properly.
8326 2001-12-15 11:39 millert
8328 * sudoers.cat, sudoers.man.in: regen
8330 2001-12-15 11:38 millert
8332 * sudoers.pod: fix typos
8334 2001-12-15 10:57 millert
8338 2001-12-15 10:57 millert
8340 * configure.in, config.h.in: use AC_SYS_POSIX_TERMIOS instead of
8343 2001-12-15 10:33 millert
8345 * README: Reference sudo.ws not courtesan.com
8347 2001-12-15 10:29 millert
8349 * PORTING: Add notes on shadow passwords
8351 2001-12-15 00:48 millert
8353 * BUGS: In list mode (sudo -l), characters escaped with a backslash
8354 are shown verbatim with the backslash.
8356 2001-12-15 00:44 millert
8358 * sudoers: Add simple examples from OpenBSD (Marc Espie)
8360 2001-12-15 00:40 millert
8362 * tgetpass.c: Catch SIGTTIN and SIGTTOU too and treat them like
8365 2001-12-14 21:53 millert
8367 * CHANGES: minor prettyification
8369 2001-12-14 21:43 millert
8371 * CHANGES: Updated change log
8373 2001-12-14 21:27 millert
8375 * testsudoers.c: Fix CIDR handling here too.
8377 2001-12-14 21:21 millert
8379 * auth/pam.c: Apparently a NULL response is OK
8381 2001-12-14 21:19 millert
8383 * TODO: Checkpoint for upcoming beta release
8385 2001-12-14 21:17 millert
8387 * TROUBLESHOOTING: Many people believe that adding a runas spec
8388 should obviate the need for the -u flag. It does not.
8390 2001-12-14 21:11 millert
8392 * RUNSON: checkpoint update for upcoming 1.6.4 beta
8394 2001-12-14 20:44 millert
8396 * config.h.in: o Add HAVE_STDLIB_H and HAVE_MEMORY_H o Define
8397 HAVE_STRINGS_H even if HAVE_STRING_H is defined -- this is safe
8400 2001-12-14 20:07 millert
8402 * PORTING: Add signals section
8404 2001-12-14 20:00 millert
8408 2001-12-14 20:00 millert
8410 * configure.in: Fix check for sigaction_t
8412 2001-12-14 19:45 millert
8414 * sudo.c: XXX - should call find_path() as runas user, not root.
8415 Can't do that until the parser changes though.
8417 2001-12-14 19:38 millert
8419 * sudo.c: If find_path() fails as root, try again as the invoking
8420 user (useful for NFS). Idea from Chip Capelik.
8422 2001-12-14 19:28 millert
8424 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in: Regenerate
8425 after pod file changes
8427 2001-12-14 19:24 millert
8429 * def_data.c, def_data.h, def_data.in, set_perms.c, sudo.c, sudo.h,
8430 sudo.pod, sudoers.pod: Add new sudoers option "preserve_groups".
8431 Previously sudo would not call initgroups() if the target user
8432 was root. Now it always calls initgroups() unless the -P command
8433 line option or the "preserve_groups" sudoers option is set. Idea
8436 2001-12-14 18:38 millert
8438 * compat.h, config.h.in: Use new HAVE_SIGACTION_T define
8440 2001-12-14 18:33 millert
8442 * logging.c: Fix compilation on K&C
8444 2001-12-14 18:14 millert
8448 2001-12-14 18:14 millert
8450 * configure.in: Add check for sigaction_t -- IRIX already defines
8451 this so don't redefine it.
8453 2001-12-14 17:15 millert
8455 * snprintf.c: fix typo
8457 2001-12-14 17:12 millert
8459 * interfaces.c: need stdlib.h here too
8461 2001-12-14 15:31 millert
8465 2001-12-14 15:31 millert
8467 * configure.in: Remove redundant checks for string.h, strings.h and
8470 2001-12-14 15:29 millert
8472 * sudo.cat, sudo.man.in, sudoers.cat, sudoers.man.in, visudo.cat,
8473 visudo.man.in: Regen from pod files
8475 2001-12-14 15:03 millert
8477 * BUGS: Update for 1.6.4
8479 2001-12-14 14:59 millert
8481 * configure, lex.yy.c: regen
8483 2001-12-14 14:56 millert
8485 * strerror.c: Return EINVAL if errnum > sys_nerr
8487 2001-12-14 14:54 millert
8489 * LICENSE, Makefile.binary, Makefile.in, aclocal.m4, compat.h,
8490 config.h.in, defaults.h, interfaces.h, pathnames.h.in, sudo.h,
8491 sudo.pod, auth/sudo_auth.h: o Update copyright year
8493 2001-12-14 14:54 millert
8495 * configure.in: o Don't define STDC_HEADERS unconditionally for
8496 IRIX o Update copyright year
8498 2001-12-14 14:53 millert
8500 * README: update version
8502 2001-12-14 14:52 millert
8504 * alloc.c, check.c, defaults.c, env.c, fileops.c, find_path.c,
8505 fnmatch.c, getcwd.c, getspwuid.c, goodpath.c, interfaces.c,
8506 logging.c, lsearch.c, parse.c, parse.lex, parse.yacc,
8507 set_perms.c, snprintf.c, sudo.c, testsudoers.c, tgetpass.c,
8508 utime.c, visudo.c, auth/afs.c, auth/aix_auth.c, auth/bsdauth.c,
8509 auth/dce.c, auth/fwtk.c, auth/kerb4.c, auth/kerb5.c, auth/pam.c,
8510 auth/passwd.c, auth/rfc1938.c, auth/secureware.c, auth/securid.c,
8511 auth/sia.c, auth/sudo_auth.c: o Reorder some headers and use
8512 STDC_HEADERS define properly o Update copyright year
8514 2001-12-14 01:53 millert
8518 2001-12-14 01:53 millert
8520 * tgetpass.c: flags set in signal handlers should be volatile
8523 2001-12-14 01:52 millert
8525 * config.h.in, configure.in: Add checks for volatile and
8528 2001-12-14 01:42 millert
8530 * lex.yy.c, configure: regen
8532 2001-12-14 01:40 millert
8534 * def_data.c, def_data.h, def_data.in, defaults.c, env.c,
8535 find_path.c, sudo.c, sudoers.pod: Remove "secure_path" Defaults
8536 option since it cannot work with the existing parser.
8538 2001-12-14 01:26 millert
8540 * find_path.c, sudo.c: Unset "secure_path" if user_is_exempt()
8542 2001-12-14 01:24 millert
8544 * env.c, pathnames.h.in: o Remove assumption that PATH and TERM are
8545 not listed in env_keep o If no PATH is in the environment use a
8546 default value o If TERM is not set in the non-reset case also
8547 give it a default value.
8549 2001-12-14 01:17 millert
8551 * aclocal.m4, configure.in, defaults.c, pathnames.h.in:
8552 _PATH_SENDMAIL -> _PATH_SUDO_SENDMAIL so --without-sendmail works
8553 on systems that define in paths.h
8555 2001-12-14 01:15 millert
8557 * auth/: passwd.c, sudo_auth.c, sudo_auth.h: Add support for
8558 skeyaccess(3) if it is present in libskey.
8560 2001-12-12 21:42 millert
8562 * sudo.c: Only need to do 'lc = login_getclass(NULL)' if lc == NULL
8564 2001-12-12 21:24 millert
8566 * parse.lex: '\\' is a perfectly legal character to have in a
8567 command line argument.
8569 2001-12-12 20:24 millert
8571 * sudo.c: o Defer call to set_fqdn() until it is safe to use
8572 log_error() o Don't print errno string value if gethostbyname
8573 fails, it is not relevant
8575 2001-12-12 20:07 millert
8577 * parse.c: Fix CIDR -> in_addr_t conversion.
8579 2001-12-12 16:21 millert
8581 * sudoers.pod: Remove an extra "User_List" in the User_Spec
8582 definition From ybertrand AT snoopymail.com
8584 2001-12-12 16:00 millert
8586 * parse.c: Make 'listpw=never' work for users who are not
8587 explicitly mentioned in sudoers.
8589 2001-12-12 15:40 millert
8591 * sudoers.pod: Remove gratuitous '=' in EBNF grammar; era AT iki.fi
8593 2001-12-12 15:34 millert
8595 * sudoers.pod: Document new list Defaults type and convert env_keep
8596 and env_delete to lists. Document new env_check option.
8598 2001-12-12 15:11 millert
8600 * lex.yy.c, sudo.tab.h: regen parser
8602 2001-12-12 14:56 millert
8604 * parse.lex: Don't let '#' appear in a {WORD} and restrict #foo in
8605 a Runas spec to #[0-9-]+.
8607 2001-12-12 14:55 millert
8611 2001-12-12 14:55 millert
8613 * aclocal.m4: Simpler SUDO_FUNC_ISBLANK that uses AC_TRY_LINK
8615 2001-12-12 14:43 millert
8617 * config.h.in, configure.in: Add check for skeyaccess(3)
8619 2001-12-11 19:47 millert
8621 * visudo.pod: Document new -c, -f, and -q options
8623 2001-12-11 19:41 millert
8625 * visudo.c: o Add -f option (alternate sudoers file) o Convert to
8628 2001-12-11 19:31 millert
8632 2001-12-11 19:31 millert
8634 * aclocal.m4, config.h.in, configure.in: Add check for isblank and
8635 a replacement macro if it doesn't exist.
8637 2001-12-11 18:22 millert
8639 * visudo.c: In check-only mode, don't create sudoers if it does not
8642 2001-12-11 18:06 millert
8644 * parse.yacc: o Add a new token, DEFVAR, to indicate a Defaults
8646 o Add support for "+=" and "-=" list operators
8647 o replace some 1 and 0 with TRUE and FALSE for greater
8650 2001-12-11 18:05 millert
8652 * parse.lex: o Use exclusive start conditions to remove some
8654 lexer. Also reorder some things for clarity.
8655 o Add support for "+=" and "-=" list operators.
8656 o Use the new DEFVAR token to denote a Defaults variable name.
8658 2001-12-11 18:03 millert
8660 * sudo.h: Prototype init_envtables()
8662 2001-12-11 18:02 millert
8664 * env.c: o Convert environment handling to use lists instead of
8666 This greatly simplifies routines that need to do "foreach"
8669 o Add new init_envtables() function to set env_check and
8671 defaults based on initial_badenv_table and
8672 initial_checkenv_table
8673 (formerly sudo_badenv_table).
8675 2001-12-11 18:00 millert
8677 * defaults.c, defaults.h: o Add a new LIST type and functions to
8679 o This is for use with environment handling variables.
8680 o Call new init_envtables() routine inside init_defaults() to
8681 initialize the environment lists.
8683 2001-12-11 17:57 millert
8685 * def_data.c, def_data.h, def_data.in: Convert environment options
8686 to use the new LIST type and add a new one, env_check that only
8687 deletes if the sanity check fails.
8689 2001-12-11 17:55 millert
8691 * testsudoers.c: Add dummy version of init_envtables()
8693 2001-12-11 17:53 millert
8695 * parse.yacc: honor quiet mode
8697 2001-12-11 17:51 millert
8699 * visudo.c: Add check-only mode
8701 2001-12-10 20:27 millert
8703 * mkdefaults: Fix generation of entries with NULL descriptions.
8705 2001-12-09 00:27 millert
8707 * tgetpass.c: Use sigaction_t and quiet a gcc warning.
8709 2001-12-09 00:20 millert
8711 * sudo.c: Must reset signal handlers before we exec
8713 2001-12-09 00:16 millert
8715 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sudo_auth.c: Be
8716 carefule now that tgetpass() can return NULL (user hit ^C). PAM
8717 version needs testing. Set SIGTSTP to SIG_DFL during password
8718 entry so user can suspend us.
8720 2001-12-09 00:14 millert
8722 * tgetpass.c: Add support for interrupting/suspending tgetpass via
8723 keyboard input. If you suspend sudo from the password prompt and
8724 resume it will re-prompt you.
8726 2001-12-09 00:09 millert
8728 * sudo.c: Don't block keyboard interrupt signals, just set them to
8731 2001-12-08 14:48 millert
8733 * config.h.in: add back HAVE_SIGACTION
8735 2001-12-08 14:44 millert
8739 2001-12-08 14:44 millert
8741 * config.h.in, configure.in, logging.c, sudo.c, visudo.c: Kill
8742 POSIX_SIGNALS define and old signal support now that we emulate
8743 POSIX ones Also be sure to correctly initialize struct sigaction.
8745 2001-12-08 14:42 millert
8747 * strerror.c: Don't need config.h or "#ifndef HAVE_STRERROR"
8750 2001-12-08 14:39 millert
8752 * compat.h: Add scaffolding for POSIX signal emulation
8754 2001-12-08 14:36 millert
8756 * sigaction.c: o Add missing ';' so this compiles o Can't use NULL
8757 since we don't include stdio.h
8759 2001-12-08 14:23 millert
8761 * sigaction.c: Emulate sigaction() using sigvec()
8763 2001-11-12 19:32 millert
8765 * sudoers.pod: Document new behavior of negative values of
8766 timestamp_timeout Fix a typo
8768 2001-11-12 19:31 millert
8770 * sudo.pod: Add security note about command not being logged after
8771 'sudo su' and friends.
8773 2001-11-12 19:19 millert
8775 * sudo.pod: Mention that -V prints default values when run as root,
8776 including the list of environment variables to clear.
8778 2001-11-12 19:14 millert
8780 * Makefile.in: Run pod2man with --quotes=none to avoid stupid
8781 quoting of C<> entries.
8783 2001-11-12 13:12 millert
8785 * def_data.c, def_data.h, def_data.in, sudoers.pod,
8786 auth/sudo_auth.c: Add mail_badpass option Also modify mail_always
8787 behavior to also send mail when the password is wrong
8789 2001-11-12 13:08 millert
8791 * env.c, sudo.c, sudo.h: Dump default bad env table when 'sudo -V'
8794 2001-11-11 23:52 millert
8796 * sudoers.pod: document env_delete
8798 2001-11-11 23:51 millert
8800 * env.c: Add support for '*' in env_keep when not resetting the
8801 environment (ie: the normal case).
8803 2001-11-11 23:47 millert
8805 * env.c: Add env_delete variable that lets the user replace/add to
8806 the bad_env_table. Allow '*' wildcard in env_keep entries.
8808 2001-11-06 13:59 millert
8810 * mkinstalldirs: Force umask to 022 to guarantee sane directory
8813 2001-11-02 18:09 millert
8815 * Makefile.in: add sudo.tab.h and sudo.tab.c to sudo.tab.o
8818 2001-11-02 17:25 millert
8820 * mkdefaults: fix breakage in last commit
8822 2001-11-02 17:18 millert
8824 * Makefile.in: acsite.m4 -> aclocal.m4
8826 2001-11-02 15:59 millert
8828 * check.c: fix I_TS_TIMEOUT vs. I_TIMESTAMP_TIMEOUT pasto in
8831 2001-11-02 15:57 millert
8833 * def_data.c: regenerated from def_data.in
8835 2001-11-02 15:56 millert
8837 * check.c, defaults.c, defaults.h: Add new T_UINT type that most
8838 things use instead of T_INT If timestamp_timeout is < 0 then
8839 treat the ticket as never expiring (to be expired manually by the
8842 2001-11-02 15:51 millert
8844 * def_data.in: change most T_INT -> T_UINT
8846 2001-11-02 15:51 millert
8848 * mkdefaults: fix warning when no args
8850 2001-11-02 12:52 millert
8852 * visudo.c: Change 2 Exit() -> exit() Avoid stdio in Exit() and
8853 call _exit() if we are a signal handler. We no longer print the
8854 signal number but the user can just check the exit value for
8857 2001-10-16 01:35 millert
8859 * logging.c: when setting up pipes in child process check for case
8860 where stdin == pipe fd 0
8862 2001-10-11 13:20 millert
8864 * visudo.c: Ignore editor exit value since XPG4 says vi's exit
8865 value is the count of editing errors made (failed searches, etc).
8867 2001-10-05 16:39 millert
8871 2001-10-05 16:39 millert
8873 * configure.in: sco now is identified by config.guess as *-sco-*
8875 2001-10-05 16:24 millert
8877 * configure.in: Check for getspnam() in -lgen if not in -lc for
8880 2001-09-17 21:48 millert
8882 * sudoers.pod, visudo.pod: "upper case" -> "uppercase"
8884 2001-09-17 21:32 millert
8886 * sudoers.pod: fix typos and grammar; pjanzen@foatdi.harvard.edu
8888 2001-08-28 10:26 millert
8890 * sudoers.pod: Missing word (specify); krapht@secureops.com
8892 2001-08-23 17:43 millert
8894 * sudo.c: If we fail to lookup a login class, apply the default
8897 2001-08-23 17:42 millert
8899 * logging.c: In log_error() free message, not logline
8900 unconditionally, then free logline if it is not the same as
8901 message. No function change but this mirrors how they are
8904 2001-07-16 23:33 millert
8906 * configure: regenerate
8908 2001-07-16 23:33 millert
8910 * configure.in: remove some backslash quotes that are unneeded
8912 2001-07-16 23:30 millert
8914 * configure.in: o Tweaks to make this work with autoconf-2.50 o Use
8915 AC_LIBOBJ instead of changing LIBOBJS directly o Use
8916 AC_REPLACE_FUNCS where we can o Use AC_CHECK_FUNCS instead of
8917 AC_CHECK_FUNC so we don't have to AC_DEFINE things manually.
8919 2001-07-16 23:28 millert
8921 * config.guess, config.sub: Updated from autoconf-2.50
8923 2001-05-22 19:11 millert
8925 * README: Update mailing list section. We use mailman now, not
8928 2001-05-10 14:55 millert
8930 * getspwuid.c, logging.c, sudo.c: Use setpwent()/endpwent() + all
8931 the shadow variants to make sure we don't inadvertantly leak an
8932 fd to the child. Apparently Linux's shadow routines leave the fd
8933 open even if you don't call setspent(). Reported by
8934 mike@gistnet.com; different patch used.
8936 2001-04-12 21:43 millert
8938 * sudoers.pod: s/eg./e.g./
8940 2001-04-12 21:42 millert
8942 * tgetpass.c: select() may return EAGAIN. If so, continue like we
8945 2001-04-12 21:41 millert
8947 * logging.c: Fix a non-exploitable buffer overflow in the word
8948 splitting code. This should really be rewritten.
8950 2001-04-12 21:41 millert
8952 * Makefile.in: FAQ link goes away
8954 2001-04-12 21:40 millert
8956 * INSTALL: Tell people to look in sample.syslog.conf for examples,
8959 2001-04-12 21:40 millert
8961 * TROUBLESHOOTING: Update list of env vars that are cleared
8963 2001-04-12 21:36 millert
8965 * sudo.c: remove struct env_table decl since that stuff has all
8968 2001-04-04 13:17 millert
8970 * fileops.c: Fix a pasto in flock-style unlocking and include
8971 <sys/file.h> for flock on older systems; twetzel@gwdg.de
8973 2001-04-04 13:14 millert
8975 * configure: regen to get NeXT lockf/flock fix
8977 2001-04-04 13:14 millert
8979 * configure.in: force NeXT to use flock since lockf is broken
8981 2001-03-30 08:54 millert
8983 * check.c: Use stashed user_gid when checking against exempt gid
8984 since sudo sets its gid to a a value that makes sudoers readable.
8985 Previously if you used gid 0 as the exempt group everyone would
8986 be exempt. From Paul Kranenburg <pk@cs.few.eur.nl>
8988 2001-03-29 13:14 millert
8992 2001-03-29 13:08 millert
8994 * aclocal.m4: #include stdio.h in SUDO_CHECK_TYPE since IRIX 6
8995 aparently defines some types (such as ssize_t) therein.
8997 2001-03-02 09:09 millert
8999 * defaults.c: Fix negation of paths in a boolean context. Problem
9002 2001-02-23 13:03 millert
9006 2001-02-17 16:11 millert
9008 * visudo.c: SA_RESETHAND means the opposite of what I was
9009 thinking--oops To block all signals in old-style signals use ~0,
9012 2001-02-04 11:16 millert
9014 * defaults.c: coerce difference of pointers to int when used in a
9015 string length printf format; deraadt@openbsd.org
9017 2001-01-17 11:34 millert
9019 * visudo.c: Block all signals in Exit() to avoid a signal race.
9020 There is still a tiny window but I'm not going to worry about it.
9022 2001-01-07 13:57 millert
9024 * env.c: glibc uses the LANGUAGE env var so clear that too; Solar
9027 2001-01-07 13:55 millert
9029 * lex.yy.c: Regenerate with a fix to flex.skl that preserves errno
9030 from clobbering by isatty().
9032 2000-12-30 20:39 millert
9034 * auth/: aix_auth.c, bsdauth.c, fwtk.c, pam.c, sia.c, sudo_auth.c:
9035 Some defaults I_ defines got renamed.
9037 2000-12-30 20:38 millert
9039 * Makefile.in, check.c, def_data.c, def_data.h, def_data.in,
9040 defaults.c, defaults.h, env.c, logging.c, mkdefaults, parse.yacc,
9041 set_perms.c, sudo.c: Move defaults info into its own files from
9042 which we generate .h and .c files. This makes adding or
9043 rearranging variables much simpler.
9045 2000-12-30 16:58 millert
9047 * configure, configure.in: fix typo in last commit
9049 2000-12-30 16:55 millert
9051 * compat.h, config.h.in, configure, configure.in: Add check +
9052 emulation for setegid (like seteuid).
9054 2000-12-30 16:22 millert
9056 * env.c: Make env_keep override badenv_table as documented Fix
9057 traversal of badenv_table (broken in last commit)
9059 2000-12-29 22:59 millert
9061 * set_perms.c, sudo.c, sudo.h: Don't try and build saved uid
9062 version of set_perms on systems w/o them. Rename
9063 set_perms_saved_uid() -> set_perms_posix() Make
9064 set_perms_setreuid simply be set_perms_fallback() and simply
9065 include the appropriate function at compile time (setreuid()
9068 2000-12-29 22:45 millert
9070 * sudoers.pod, sudoers.cat, sudoers.man.in: PATH is also preserved
9071 when env_reset is in effect
9073 2000-12-29 22:29 millert
9075 * CHANGES, env.c, Makefile.in, check.c, compat.h, config.h.in,
9076 configure, configure.in, defaults.c, defaults.h, find_path.c,
9077 getspwuid.c, set_perms.c, sudo.c, sudo.cat, sudo.h, sudo.man.in,
9078 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod,
9079 testsudoers.c, visudo.c, visudo.cat, visudo.man.in: New Defaults
9080 options: o stay_setuid - sudo will remain setuid if system has
9081 saved uids or setreuid(2) o env_reset - reset the environment to
9082 a sane default o env_keep - preserve environment variables that
9083 would otherwise be cleared
9085 No longer use getenv/putenv/setenv functions--do environment
9086 munging by hand. Potentially dangerous environment variables can
9087 be cleared only if they contain '/' pr '%' characters to protect
9088 buggy programs. Moved environment routines into env.c (new file)
9090 2000-12-29 22:17 millert
9092 * INSTALL: Clear up --without-passwd description
9094 2000-12-29 19:39 millert
9096 * sudo_setenv.c, putenv.c: We now build up a new environment from
9097 scratch and assign it to "environ".
9099 2000-12-18 22:35 millert
9101 * sudo.pod, visudo.pod: Grammatical fixes from Paul Janzen
9103 2000-12-14 23:19 millert
9105 * visudo.c: If there was a syntax error and the user just wants to
9106 quit, unlink sudoers if it is zero length.
9108 2000-12-14 23:10 millert
9110 * visudo.c: 'Q' means ignore parse error, not 'q'
9112 2000-12-14 22:57 millert
9114 * visudo.c: Open sudoers for writing with mode SUDOERS_MODE From
9115 Dimitry Andric <dim@xs4all.nl>
9117 2000-12-13 12:23 millert
9119 * set_perms.c: Add missing #ifdef HAVE_LOGIN_CAP_H;
9122 2000-12-09 11:46 millert
9124 * config.guess, config.sub: Darwin / Mac OS X support from Wilfredo
9125 Sanchez <wsanchez@apple.com>
9127 2000-11-03 09:36 millert
9129 * sudo.c, visudo.c: Use exit(127), not exit(-1)
9131 2000-11-03 00:37 millert
9133 * defaults.h, set_perms.c, sudo.c, Makefile.in, defaults.c: Move
9134 set_perms() to its own file and use POSIX saved uid or setreuid()
9137 Added stay_setuid option for systems that have libraries that
9138 perform extra paranoia checks in system libraries for setuid
9139 programs (ie: anything with issetugid(2)).
9141 2000-11-02 20:28 millert
9143 * sudo.c: strip more bits from the environment and add a facility
9144 for stripping things only if they contain '/' or '%' to address
9145 printf format string vulnerabilities in other programs.
9147 2000-11-02 12:55 millert
9151 2000-11-02 12:55 millert
9153 * configure.in: For NCR, add -lc89 to LIBS, not SUDO_LIBS and cache
9154 the existence of strcasecmp().
9156 2000-11-02 12:46 millert
9160 2000-11-02 12:46 millert
9162 * configure.in: Check for strcasecmp(3) in -lc89 for NCR Unix
9164 2000-11-01 10:22 millert
9166 * config.h.in: Define HAVE_INNETGR #ifdef HAVE__INNETGR
9168 2000-11-01 10:17 millert
9172 2000-11-01 10:17 millert
9174 * compat.h, config.h.in, configure.in: Add check for _innetgr(3)
9175 since NCR systems have that instead of innetgr(3).
9177 2000-10-31 14:16 millert
9179 * auth/securid.c: check return value of creadcfg() call sd_close()
9180 after sd_auth() store username in sd->username so we don't rely
9181 on the USER env variable
9183 2000-10-29 23:00 millert
9185 * INSTALL: document --with-bsdauth
9187 2000-10-29 22:57 millert
9191 2000-10-29 22:56 millert
9193 * configure.in: --with-bsdauth assumes --with-logincap
9195 2000-10-29 22:45 millert
9197 * auth/: bsdauth.c, fwtk.c: When prompting for a response to a
9198 challenge, if the user just hits return then reprompt with echo
9201 2000-10-29 17:31 millert
9203 * sudo.c: Remove debugging code that should not have been
9206 2000-10-29 17:31 millert
9208 * auth/bsdauth.c: Use lower-level routines and get the password
9209 ourselves. Checks for a challenge and if there is one echo is
9212 2000-10-29 17:30 millert
9214 * auth/: pam.c, sudo_auth.h: minor housekeeping, no real code
9217 2000-10-27 18:41 millert
9219 * sudo.c: Fix a coredump in the logging functions if gethostname(2)
9220 fails by deferring the call to log_error() until things are
9223 Fix return value of set_loginclass() in non-BSD-auth case.
9225 Hard-code 'sudo' in the usage message so we can fit more options
9228 2000-10-27 18:35 millert
9230 * logging.c: Fix errant ';' (typo) that broken MSG_ONLY
9232 2000-10-26 13:03 millert
9234 * sudo.cat, sudo.man.in: regen
9236 2000-10-26 13:01 millert
9238 * sudo.pod: Document -a flag
9240 2000-10-26 12:42 millert
9242 * Makefile.in, config.h.in, configure, configure.in, getspwuid.c,
9243 sudo.c, auth/sudo_auth.h, auth/bsdauth.c: Add support for BSD
9246 2000-10-19 10:09 millert
9248 * sudoers.pod: Fix typo; from sato@complex.eng.hokudai.ac.jp
9250 2000-10-12 09:49 millert
9252 * sudoers.pod: Mention negating umask
9254 2000-10-12 01:30 millert
9256 * defaults.c: Allow user to specify umask of 0777 (same as !umask)
9258 2000-10-08 21:46 millert
9260 * sudo.pod, visudo.pod: Fix a typo and give a URL for the sudo
9263 2000-10-08 12:25 millert
9265 * defaults.c, sudo.pod: fix typos; pepper@reppep.com
9267 2000-09-14 16:48 millert
9269 * sudo.c, sudo.h, sudo_setenv.c: sudo_setenv() now exits on memory
9270 alloc failure instead of returning -1.
9272 2000-09-07 17:41 millert
9274 * sudo.c: Strip out NLSPATH and PATH_LOCALE from the environment
9275 for FreeBSD and possibly others.
9277 2000-09-07 10:43 millert
9279 * logging.c: Don't use vsyslog(3) since HP-UX (and others?) lack
9280 it. This means that "%m" won't be expanded but we don't use that
9281 anyway since the logging routines may splat to stderr as well.
9283 2000-09-06 21:35 millert
9285 * defaults.c, defaults.h, sudo.c, sudoers.cat, sudoers.man.in,
9286 sudoers.pod: Add always_set_home variable
9288 2000-09-06 21:24 millert
9290 * configure, configure.in: Have to hard code default values in help
9291 since the defaults are set _after_ the help stuff.
9293 2000-08-31 13:08 millert
9295 * lex.yy.c, parse.lex: Allow special characters (including '#') to
9296 be embedded in pathnames if quoted by a '\\'. The quoted chars
9297 will be dealt with by fnmatch(). Unfortunately, 'sudo -l' still
9300 2000-08-13 17:10 millert
9302 * install-sh: Better path searching for programs we need.
9304 2000-08-13 17:10 millert
9306 * TROUBLESHOOTING: Add section on "C compiler cannot create
9307 executables" errors.
9309 2000-08-13 17:10 millert
9311 * Makefile.binary, Makefile.in, version.h: Crank version
9313 2000-08-13 17:09 millert
9315 * aclocal.m4, configure, configure.in, sudo.cat, sudo.man.in,
9316 sudo.pod, sudoers.cat, sudoers.man.in, sudoers.pod, visudo.cat,
9317 visudo.man.in, visudo.pod: Substitute values from configure into
9320 2000-08-12 16:48 millert
9322 * parse.c, sudo.c: The listpw and verifypw sudoers options would
9323 not take effect because the value of the default was checked
9324 *before* sudoers was parsed. Instead of passing in the value of
9325 PWCHECK_* to sudoers_lookup(), pass in the arg for def_ival() so
9326 the check can be deferred until after sudoers is parsed.
9328 2000-08-11 15:41 millert
9330 * tgetpass.c: When writing prompt, no need to write the NUL as
9331 well; hag@linnaean.org
9333 2000-06-09 12:25 millert
9335 * install-sh: When looking for chown, check in /sbin too
9337 2000-06-04 22:57 millert
9339 * visudo.c: Remove extraneous call to init_defaults() and set
9340 runas_user to NULL betweem parses so init_defaults will reset it
9341 each time, thus avoiding a reference to free()d data.
9343 2000-06-04 19:57 millert
9345 * config.h.in, interfaces.c, interfaces.h, sudo.c: Add support for
9346 using getifaddrs() to get the list of ip addr / netmask pairs.
9347 Currently IPv4-only.
9349 2000-06-04 19:51 millert
9351 * visudo.c: Add a missing check for UserEditor == NULL Add missing
9352 '+' before line number when invoking editor to fix a syntax error
9354 2000-05-12 16:55 millert
9356 * sudo.c: Call clean_env very early in main() for paranoia's sake.
9357 Idea from Marc Esipovich.
9359 2000-05-10 01:11 millert
9361 * sudo.h: Update proto for evasprintf and easprintf
9363 2000-05-10 01:10 millert
9365 * alloc.c: Make easprintf() and evasprintf() return an int.
9367 2000-05-10 00:56 millert
9369 * check.c: If the targetpw flag is set, use target username as part
9370 of the timestamp path. If tty tickets are in effect cat the tty
9371 and the target username with a ':' as the separator.
9373 2000-05-09 12:05 millert
9375 * auth/pam.c: Backout part of last change; setting PAM_USER to the
9376 invoking user breaks things like targetpw.
9378 2000-05-09 11:52 millert
9380 * auth/pam.c: set tty and username via pam_set_item
9382 2000-05-09 11:42 millert
9384 * check.c, getspwuid.c, sudo.c, sudo.h, auth/sudo_auth.c: Fix root,
9385 runas, and target authentication for non-passwd file auth
9388 2000-04-22 14:15 millert
9390 * sudo.pod, sudo.man.in, sudoers.man.in, sudoers.pod, visudo.pod,
9391 sudo.cat, sudoers.cat, visudo.man.in, visudo.cat: Use B<-Z> not
9392 C<-Z> for command line flags in all places. This is more
9393 consistent and works around a bug in Pod::Man.
9395 2000-04-22 13:59 millert
9397 * sudoers.cat, sudoers.man.in, sudoers.pod: Fix an occurence of
9398 'semicolon' that should be 'colon'
9400 2000-04-19 15:30 millert
9402 * configure, configure.in: Fix --with-badpri help line
9404 2000-04-17 14:01 millert
9406 * defaults.c, logging.c, sudo.c: Bracket calls to syslog with an
9407 openlog() and closelog() since some authentication methods (like
9408 PAM) may do their own logging via syslog. Since we don't use
9409 syslog much (usually just once per session) this doesn't really
9410 incur a performance penalty. It also Fixes a SEGV with pam_kafs.
9412 2000-04-15 16:32 millert
9414 * sudo.c: Fix -H flag. runas_homedir is only valid after
9415 set_perms(PERM_RUNAS, mode)
9417 2000-04-12 18:56 millert
9419 * INSTALL: Clarify the fact that insults are not enabled just by
9420 including them in the binary.
9422 2000-04-07 10:39 millert
9424 * sudo.man.in, sudoers.man.in, visudo.man.in, sudo.cat,
9425 sudoers.cat, visudo.cat: Regenerated with perl 5.6.0 pod2man
9427 2000-04-07 10:38 millert
9429 * Makefile.in: Give date string to pod2man since its default is
9430 ugly and it ain't got no alibi.
9432 2000-04-07 10:27 millert
9434 * Makefile.in: Do section substitution on the output of pod2man and
9435 remove hack needed for old pod2man.
9437 2000-04-07 10:26 millert
9439 * sudo.pod, sudoers.pod, visudo.pod: Put back real man sections, we
9440 will do the substitution later.
9442 2000-04-02 11:44 millert
9444 * configure, configure.in: Don't bother checking for the path to vi
9445 if user specified --with-editor
9447 2000-04-01 17:25 millert
9449 * CHANGES, visudo.c: Visudo now does its own fork/exec instead of
9452 2000-04-01 16:23 millert
9454 * CHANGES, INSTALL, Makefile.in, sudoers.cat, sudoers.man.in,
9455 sudoers.pod, visudo.c: Visudo now checks for the existence of an
9456 editor and gives a sensible error if it does not exist.
9458 The path to the editor for visudo is now a colon-separated list
9459 of allowable editors. If the user has $EDITOR set and it matches
9460 one of the allowed editors that editor will be used. If not, the
9461 first editor in the list that actually exists is used.
9463 2000-04-01 16:22 millert
9465 * sudo.pod, sudo.cat, sudo.man.in: Clear up confusion wrt sudo's
9468 2000-03-27 12:08 millert
9470 * Makefile.in: Strip sudo and visudo for bindist target
9472 2000-03-26 22:26 millert
9474 * sudo.cat, sudo.man.in, sudo.pod, sudoers.cat, sudoers.man.in,
9475 sudoers.pod, visudo.cat, visudo.man.in, visudo.pod: Use
9476 @mansectsu@ and @mansectform@ in the man page bodies as well.
9478 2000-03-26 22:07 millert
9480 * visudo.cat, visudo.man.in, visudo.pod: Typo: @sysconf@ ->
9483 2000-03-26 21:57 millert
9485 * Makefile.in: 'make dist' should not cause any files to be
9486 modified so remove its dependencies.
9488 2000-03-26 21:43 millert
9490 * CHANGES: Whoops, forgot to add release marker
9492 2000-03-26 11:57 millert
9494 * CHANGES: Final change for 1.6.3 (or so I hope)
9496 2000-03-26 11:57 millert
9498 * sudo.cat, sudoers.cat, visudo.cat: Use SYSV man sections since
9499 BSD systems will have nroff...
9501 2000-03-24 18:58 millert
9503 * parse.yacc: When checking to see if the host/user matches in a
9504 defaults spec, check against TRUE, not just non-zero since it
9507 2000-03-24 15:14 millert
9509 * configure.in, configure: OSF/1 puts file formats in section 4,
9512 2000-03-24 15:13 millert
9514 * CHANGES, INSTALL, sudo.c: Make login class support work on BSD/OS
9516 2000-03-23 20:24 millert
9518 * RUNSON: Update for 1.6.3
9520 2000-03-23 20:23 millert
9522 * configure, configure.in: If there is no inet_addr but there *is*
9523 an __inet_addr that's ok since inet_addr is probably just a macro
9524 then. The better thing to do would be to look for the macro, but
9525 this is fine for now.
9527 2000-03-23 19:50 millert
9529 * configure, configure.in: Don't use shlicc for BSD/OS 4.x
9531 2000-03-23 19:40 millert
9533 * Makefile.in, configure, configure.in: *.man lives in cwd, *.cat
9534 lives in $(srcdir), add a @mansrcdir@ configure variable so we
9535 can deal with this. Also, only remove *.man for 'distclean' not
9538 2000-03-23 19:16 millert
9540 * sudo.c: set_loginclass() should be static like the proto says
9542 2000-03-23 14:14 millert
9544 * fnmatch.c: Add #ifdef __STDC__ around the rangematch function
9545 header to avoid promotion of test to int, thus violating the
9546 prototype. Gcc handles this gracefully but more std ANSI
9547 compilers will complain.
9549 2000-03-23 10:11 millert
9551 * emul/fnmatch.h: Pull in newer fnmatch(3) that supports
9554 2000-03-23 10:11 millert
9556 * aclocal.m4, configure, fnmatch.3, fnmatch.c: Pull in newer
9557 fnmatch(3) that supports FNM_CASEFOLD Check for FNM_CASEFOLD in
9560 2000-03-22 23:41 millert
9562 * CHANGES, TODO: update for 1.6.3
9564 2000-03-22 23:38 millert
9566 * lex.yy.c, parse.c, parse.h, parse.lex, parse.yacc, sudo.tab.h,
9567 testsudoers.c, visudo.c: Fully qualified hosts w/ wildcards were
9568 not matching the FQHOST token type. There's really no need for a
9569 separate token for fully-qualified vs. unqualified anymore so
9570 FQHOST is now history and hostname_matches now decides which
9571 hostname (short or long) to check based on whether or not the
9572 pattern contains a '.'.
9574 2000-03-22 23:09 millert
9576 * parse.c, parse.h, parse.yacc, sudoers.pod, testsudoers.c,
9577 visudo.c, sudoers.cat, sudoers.man.in: Add support for wildcards
9580 2000-03-22 22:50 millert
9582 * Makefile.in: Add targets for *.man.in, using config.status to
9583 generate *.man from *.man.in
9585 2000-03-22 22:20 millert
9587 * sudoers.cat, sudoers.man.in, sudoers.pod: Document set_logname
9588 option and enbolden refs to sudo and visudo.
9590 2000-03-22 19:35 millert
9592 * INSTALL, Makefile.in, aclocal.m4, configure, configure.in,
9593 sudo.cat, sudo.pod, sudo.man.in, sudoers.cat, sudoers.pod,
9594 visudo.cat, visudo.pod, sudoers.man.in, visudo.man.in: Add
9595 FreeBSD login.conf support (untested on BSD/OS) based on a patch
9596 from Michael D. Marchionna. configure now does substitution on
9597 the man pages, allowing us to fix up the paths and set the
9598 section correctly. Based on an idea from Michael D. Marchionna.
9600 2000-03-22 19:27 millert
9602 * auth/passwd.c: Better fix for handling HP-UX aging info.
9604 2000-03-22 19:20 millert
9606 * sudo.c: Add support for set_logname run-time default
9608 2000-03-22 19:17 millert
9610 * sudo.man.in, sudoers.man.in, visudo.man.in: configure does
9611 substitution on these to produce *.man
9613 2000-03-22 19:16 millert
9615 * sudo.man, sudoers.man, visudo.man: These files now get generated
9616 from *.man.in at configure time.
9618 2000-03-22 18:40 millert
9620 * defaults.c, defaults.h: Add set_logname option so users can turn
9621 off setting of LOGNAME/USER environment variables.
9623 2000-03-22 10:53 millert
9625 * testsudoers.c, lsearch.c, parse.c: kill register
9627 2000-03-13 15:52 millert
9629 * auth/passwd.c: HP-UX adds extra info at the end for password
9630 aging so when comparing the result of crypt to pw_passwd we only
9631 compare the first len(epass) bytes *unless* the user entered an
9632 empty string for a password.
9634 2000-03-13 11:05 millert
9636 * logging.c: Get rid of grandchild hack, it was causing problems
9637 and there is really no need for it. This fixes a bug where we
9638 spin eating up CPU when the user runs a long-running process like
9641 2000-03-07 14:26 millert
9643 * sudo.c: User can always specify a login class if he/she is
9646 2000-03-06 23:29 millert
9648 * config.h.in, configure, configure.in, defaults.c, defaults.h,
9649 sudo.c, sudo.h: FreeBSD login class (login.conf) support.
9651 2000-03-06 14:42 millert
9653 * auth/sudo_auth.c: HAVE_SECUREWARE -> HAVE_GETPRPWNAM; fixes
9656 2000-03-03 18:04 millert
9658 * auth/passwd.c: Truncate unencrypted password to 8 chars if
9659 encrypted password is exactly 13 characters (indicateing standard
9660 a DES password). Many versions of crypt() do this for you, but
9661 not all (like HP-UX's).
9663 2000-03-01 21:01 millert
9665 * INSTALL, RUNSON: Mention that gcc on dynix may have problems
9667 2000-02-29 17:46 millert
9669 * Makefile.in: Link visudo with NET_LIBS since we now call syslog
9672 2000-02-29 17:41 millert
9674 * defaults.c: Use Argv[0] as the first arg to openlog() since
9675 visudo uses this too.
9677 2000-02-28 18:58 millert
9679 * sudo.c: Stash coredumpsize resource limit and retsore it before
9680 the exec() Otherwise the child ends up with a coredumpsize of 0.
9682 2000-02-26 22:56 millert
9684 * sudo.cat, sudo.man, sudo.pod: document -S flag
9686 2000-02-26 22:54 millert
9688 * sudo.c: fix usage string
9690 2000-02-26 22:48 millert
9692 * CHANGES, RUNSON, TODO, sudo.c, sudo.h, tgetpass.c,
9693 auth/aix_auth.c, auth/fwtk.c, auth/pam.c, auth/sudo_auth.c: Added
9694 -S flag (read passwd from stdin) and tgetpass_flags global that
9695 holds flags to be passed in to tgetpass(). Change echo_off param
9696 to tgetpass() into a flags field. There are currently 2 possible
9697 flags for tgetpass(): TGP_ECHO and TGP_STDIN. In tgetpass(),
9698 abstract the echo set/clear via macros and if (flags & TGP_ECHO)
9699 but echo is not set on the terminal, but sure to set it.
9701 2000-02-26 22:11 millert
9703 * tgetpass.c: Fixed a bug that caused an infinite loop when the
9704 password timeout was disabled.
9706 2000-02-18 12:56 millert
9708 * CHANGES, defaults.c, defaults.h, getspwuid.c, sudo.c, sudo.h,
9709 sudoers.cat, sudoers.man, sudoers.pod, visudo.c: Add rootpw,
9710 runaspw, and targetpw options.
9712 2000-02-18 12:11 millert
9714 * CHANGES, defaults.c, sudoers.cat, sudoers.man, sudoers.pod,
9715 visudo.c: enveditor -> env_editor
9717 2000-02-15 19:07 millert
9719 * BUGS, INSTALL, Makefile.in, README, configure, configure.in,
9720 sudo.cat, sudo.man, sudoers.cat, sudoers.man, version.h,
9721 visudo.cat, visudo.man: crank versino to 1.6.3
9723 2000-02-15 19:03 millert
9725 * INSTALL, TODO, defaults.c, defaults.h, sudoers.cat, sudoers.man,
9726 sudoers.pod, visudo.c: Add 'editor' and 'enveditor' sudoers
9727 defaults and make visudo honor them. This means that visudo will
9728 now parse the sudoers file *before* it is edited so a bogus
9729 sudoers file will cause a warning to go to stderr. Also, visudo
9730 checks the variables once--it does not check them after each
9731 editor run since that could be confusing.
9733 2000-02-15 18:49 millert
9735 * RUNSON: 1.6.2 -> 1.6.2p1
9737 2000-02-15 18:36 millert
9739 * check.c, sudo.c, sudo.h: Move user_is_exempt prototype into
9742 2000-02-13 13:38 millert
9744 * configure, configure.in: Fix thinko, some && should have been ||
9747 2000-02-13 13:28 millert
9749 * configure, configure.in: Don't initialized Makefile variables to
9750 be NULL since the user may want to import variables from their
9753 2000-02-03 21:09 millert
9755 * configure, configure.in: typo
9757 2000-01-27 15:01 millert
9759 * INSTALL, RUNSON, configure, configure.in: Make pam work on HP-UX
9760 11.0;jaearick@colby.edu
9762 2000-01-27 15:01 millert
9764 * CHANGES: recent changes; prepare for 1.6.2p1
9766 2000-01-26 23:31 millert
9768 * find_path.c: Don't apply SECURE_PATH if user is example;
9771 2000-01-26 16:21 millert
9773 * sudoers.cat, sudoers.man, sudoers.pod: Expanded docs on sudoers
9774 'defaults' options based on INSTALL file info.
9776 2000-01-26 16:21 millert
9778 * INSTALL: Fix some while lies
9780 2000-01-24 10:48 millert
9782 * Makefile.in: When making a bindist, link FAQ to TROUBLESHOOTING
9785 2000-01-23 22:57 millert
9787 * sudoers.cat, sudoers.man, sudoers.pod: Add netgroup caveat
9789 2000-01-23 22:42 millert
9791 * RUNSON: Last minute updates
9793 2000-01-23 22:26 millert
9795 * TROUBLESHOOTING: PAM entry
9797 2000-01-23 22:23 millert
9799 * auth/pam.c: correct a comment
9801 2000-01-23 22:03 millert
9803 * CHANGES, RUNSON: update for 1.6.2
9805 2000-01-23 21:59 millert
9807 * auth/pam.c: Better detection of PAM errors and fix custom prompts
9808 with PAM. Based on patches from "Cloyce D. Spradling"
9809 <cloyce@headgear.org>
9811 2000-01-20 11:15 millert
9813 * snprintf.c: Cast ULONG_MAX to unsigned long long when comparing
9814 to an unsigned long long value.
9816 2000-01-19 14:07 millert
9818 * CHANGES, config.h.in, configure, configure.in, visudo.c: Fix
9819 sudoers locking in visudo. We now lock the sudoers file itself,
9820 not the temp file (since locking the temp file can foul up
9821 editors). The previous locking scheme didn't work because the fd
9822 was closed too early.
9824 2000-01-19 13:37 millert
9826 * configure, config.h.in, configure.in: Don't need test for
9827 ftruncate() any more.
9829 2000-01-18 21:23 millert
9831 * configure, configure.in: Add a test for the -Aa flag w/ HP-UX's
9832 cc. Fixes compilation with the unbundled HP-UX cc.
9834 2000-01-18 17:00 millert
9836 * sudoers.cat, sudoers.man, sudoers.pod: "a a" -> "a"; Aaron
9837 Campbell <aaron@cs.dal.ca>
9839 2000-01-17 18:46 millert
9841 * LICENSE, Makefile.in, defaults.c, defaults.h, parse.c, parse.h,
9842 parse.yacc, sudo.c, sudo.h, sudoers.pod, testsudoers.c,
9843 tgetpass.c, version.h, visudo.c: update copyright year on changed
9846 2000-01-17 18:45 millert
9850 2000-01-17 18:45 millert
9854 2000-01-17 18:42 millert
9856 * INSTALL: Crank version to 1.6.2
9858 2000-01-17 18:11 millert
9860 * configure: Crank version to 1.6.2
9862 2000-01-17 17:46 millert
9864 * sudo.c: When using rlimit check for RLIM_INFINITY When computing
9865 the value of maxfd, use min(getdtablesize(), RLIMIT_NOFILE)
9867 2000-01-17 12:32 millert
9869 * CHANGES: recent changes
9871 2000-01-17 12:28 millert
9873 * BUGS, Makefile.in, README, configure.in, sudo.cat, sudo.man,
9874 sudoers.cat, sudoers.man, version.h, visudo.cat, visudo.man:
9875 Crank version to 1.6.2
9877 2000-01-17 12:25 millert
9879 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.pod: Add
9880 'shell_noargs' runtime option back in. We have to defer checking
9881 until after the sudoers file has been parsed but since there are
9882 now other options that operate that way this one can too. Based
9883 on a patch from bguillory@email.com.
9885 2000-01-16 23:05 millert
9887 * defaults.c, defaults.h, parse.c, sudo.c, sudo.h: Add "listpw" and
9890 2000-01-16 22:57 millert
9892 * sudoers.cat, sudoers.man, sudoers.pod: o Fix some typos/omissions
9893 o Add section on verifypw and listpw o Define how NOPASSWD
9894 interacts with the -v and -l flags
9896 2000-01-14 12:39 millert
9898 * configure, configure.in: For HP-UX cc, add -Aa to CPPFLAGS. For
9899 HP-UX always add -D_HPUX_SOURCE to CPPFLAGS.
9901 2000-01-14 12:29 millert
9903 * defaults.c, defaults.h: In struct sudo_defs_types, move the union
9904 to the end and don't initialize the union member since that only
9905 works with an ANSI compiler. We set the value of the union by
9906 hand in init_defaults() anyway. This allows sudo to compile on a
9909 2000-01-11 13:20 millert
9911 * parse.c, parse.h, parse.yacc, testsudoers.c, visudo.c:
9912 netgr_matches needs to check shost as well as host since they may
9915 2000-01-11 13:17 millert
9917 * tgetpass.c: End on \r as well as \n
9919 2000-01-02 23:53 millert
9921 * sudo.c: Update statbuf.st_mode based on SUDOERS_MODE when we are
9922 chaning from 0400 to whatever SUDOERS_MODE is (converting from
9923 the old sudoers mode). Assumes that SUDOERS_MODE is less
9924 restrictive than 0400 which should always be the case.
9926 2000-01-02 23:43 millert
9928 * parse.c, parse.yacc, sudo.c, sudo.h: Make treatment of -l and -v
9929 sane wrt NOPASSWD flags. Now allow -l w/o a passwd if there is
9930 *any* entry for the user on the host with a NOPASSWD flag. For
9931 -v, only allow w/o a passwd if *all* entries for the user on the
9932 host w/ the specified runas user have the NOPASSWD flag set.
9934 2000-01-02 23:26 millert
9936 * Makefile.in: add check target
9938 1999-12-16 13:02 millert
9940 * visudo.c: Treat EOF at whatnow prompt like 'x' instead of
9943 1999-12-10 00:09 millert
9945 * CHANGES: recent changes
9947 1999-12-08 23:04 millert
9949 * config.h.in, configure, configure.in, sudo.c: Add check for
9950 initgroups() since old SYSV lacks this.
9952 1999-12-08 22:54 millert
9954 * CHANGES, RUNSON, aclocal.m4, config.h.in, configure,
9955 configure.in, parse.c, testsudoers.c: o Kill HAVE_FNMATCH_H o
9956 Only define HAVE_FNMATCH if <fnmatch.h> exists.
9958 1999-12-06 01:47 millert
9960 * CHANGES, RUNSON, insults.h, auth/sudo_auth.c: Don't allow insults
9961 to be enabled if the insults[] array is empty. Otherwise there
9962 would be division by zero.
9964 1999-12-06 01:25 millert
9966 * insults.h: Don't care about USE_INSULTS #define since the insult
9967 stuff may be overridden at runtime.
9969 1999-12-06 01:23 millert
9971 * auth/sudo_auth.c: Honor insults flag.
9973 1999-12-05 19:14 millert
9975 * CHANGES, parse.c: Don't ask the user for a password if the user
9976 is not allowed to run the command and the authenticate flag (in
9979 1999-12-05 19:05 millert
9981 * CHANGES, RUNSON, lex.yy.c, parse.lex: o Whenever we get a bare
9982 newline we change to the INITIAL state. o Enter GOTRUNAS when we
9985 This allows #uid to work in a RunasAlias.
9987 1999-12-05 14:06 millert
9989 * CHANGES, parse.yacc: fix parsing of runas lists: o oprunasuser
9990 and runaslist now return a value o in a runasspec, if a runaslist
9991 does not return TRUE, set runas_matches to FALSE. Normally, a
9992 runaslist only returns FALSE for explicitly denied users. o
9993 since runaslist does not modify the stack there is no need for a
9994 push/pop in runasalias.
9996 1999-12-04 21:54 millert
9998 * check.c, sudo.c: Don't kill the user's tickets until after
9999 sudoers has been parsed since tty_tickets and ticket_dir could be
10002 1999-12-04 21:18 millert
10004 * BUGS, CHANGES, Makefile.binary, Makefile.in, README, RUNSON,
10005 configure, configure.in, sudo.cat, sudo.man, sudoers.cat,
10006 sudoers.man, tgetpass.c, version.h, visudo.cat, visudo.man: crank
10009 1999-12-04 21:18 millert
10011 * testsudoers.c: add set_fqdn() stub
10013 1999-12-02 15:31 millert
10015 * INSTALL, defaults.c, defaults.h, sudo.c, sudo.h, sudoers.cat,
10016 sudoers.man, sudoers.pod, visudo.c: o Kill shell_noargs option,
10017 it cannot work since the command needs to be set before sudoers
10018 is parsed. o Fix the "set_home" sudoers option (only worked at
10019 compile time). o Fix "fqdn" sudoers option. We now set
10020 host/shost via set_fqdn which gets called when the "fqdn"
10021 option is set in sudoers. o Move the openlog() to
10022 store_syslogfac() so this gets overridden correctly from the
10025 1999-12-02 15:21 millert
10027 * auth/securid.c: SecurID support should compile now.
10029 1999-11-28 20:56 millert
10031 * sudo.pod, visudo.pod, sudo.cat, sudo.man, sudoers.man,
10032 visudo.man, sudoers.cat, visudo.cat: fix some syntactic goofs
10034 1999-11-28 18:51 millert
10036 * sudo.html, sudoers.html, Makefile.in, visudo.html: No longer need
10037 the .html files as they are generated automatically on the web
10040 1999-11-28 18:49 millert
10042 * CHANGES, LICENSE: kill characters that made wml unhappy
10044 1999-11-28 18:34 millert
10048 1999-11-25 12:05 millert
10050 * README: majordomo@cs.colorado.edu -> majordomo@courtesan.com
10052 1999-11-24 19:43 millert
10054 * Makefile.in, configure: Wrap script execution w/ /bin/sh for the
10057 1999-11-23 22:52 millert
10059 * sudo.c: Make the -s flag be exclusive too. Also reorder the
10060 flags in the exclusive usage message so they are alphabetical.
10062 1999-11-23 13:27 millert
10064 * auth/pam.c: make pam errors other than PAM_PERM_DENIED fatal
10066 1999-11-23 13:07 millert
10068 * auth/API: fix typo
10070 1999-11-23 13:07 millert
10072 * INSTALL: make it clear that /etc/pam.d/sudo is required on linux
10074 1999-11-23 13:06 millert
10076 * auth/pam.c: fix a warning on redhat and spew an error if
10077 pam_authenticate() returns an error other than AUTH_SUCCESS or
10080 1999-11-23 00:43 millert
10082 * sudo.cat, sudo.html, sudo.man, sudo.pod: Be very clear that the
10083 password required is the user's not root's
10085 1999-11-19 21:04 millert
10087 * Makefile.in: add sample.syslog.conf to DISTFILES and BINFILES
10089 1999-11-18 19:13 millert
10091 * RUNSON: updates from Brian Jackson + some formatting
10093 1999-11-17 21:39 millert
10095 * INSTALL.binary, Makefile.binary, README, RUNSON: o One RUNSon
10096 update o Changes for automating real binary releases
10098 1999-11-17 21:38 millert
10100 * Makefile.in: Add bindist target
10102 1999-11-16 16:26 millert
10104 * TROUBLESHOOTING: talk about run-time options in addition to
10105 compile-time options
10107 1999-11-16 01:16 millert
10109 * CHANGES: fix typos
10111 1999-11-16 01:09 millert
10113 * sudo.c: need sys/time.h if HAVE_SETRLIMIT
10115 1999-11-16 00:42 millert
10117 * PORTING, README, RUNSON, sudo.c, sudo.cat, sudo.html, sudo.man,
10118 sudo.pod, visudo.cat, visudo.html, visudo.man, visudo.pod: get
10119 rid of references to sudo-bugs. Now mention the web site or the
10122 1999-11-16 00:35 millert
10124 * sudoers.html: repair pod2html damage
10126 1999-11-16 00:28 millert
10128 * RUNSON, TODO: Update for 1.6 release
10130 1999-11-16 00:23 millert
10132 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Add warning
10133 about using ALL in a command context.
10135 1999-11-09 15:12 millert
10137 * visudo.c: Call yyrestart() on a parse error to reset the lexer
10140 1999-11-09 15:06 millert
10142 * parse.lex, lex.yy.c: Don't need YY_FLUSH_BUFFER after all Move
10143 yyrestart() into visudo.c since it might not get called in yywrap
10144 if we get a parse error (and we only reread the file on error
10147 1999-11-09 14:32 millert
10149 * parse.lex, lex.yy.c: Call YY_FLUSH_BUFFER macro in yywrap() to
10150 clean up any buffers that might still exist. Call yyrestart()
10151 instead of using the deprecated YY_NEW_FILE macro.
10153 1999-11-09 12:13 millert
10155 * lex.yy.c, parse.lex: flex doesn't need %N table size declarations
10157 1999-11-08 19:00 millert
10159 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: Mention what
10160 characters need to be escaped in names.
10162 1999-11-08 18:59 millert
10166 1999-11-08 18:59 millert
10168 * INSTALL: clarify Mac OS X entry
10170 1999-11-08 18:59 millert
10174 1999-11-08 17:45 millert
10176 * configure.in: o Use AC_MSG_ERROR throughout o Check syslog
10177 configure options for danity
10179 1999-11-05 17:11 millert
10181 * defaults.c: Fix printing of type T_MODE in dump_defaults()
10183 1999-11-05 12:00 millert
10185 * strcasecmp.c: missing sys/types.h
10187 1999-11-05 00:42 millert
10189 * INSTALL: Break out options that may be overridden at run time
10190 into their own section. Add a not about Max OS X and correct
10193 1999-11-04 14:01 millert
10195 * CHANGES, config.h.in, configure, configure.in, sudo.c: o Now use
10196 getrlimit to find the highest fd when closing all non-std fd's o
10197 Turn off core dumps via setrlimit for the sake of paranoia
10199 1999-11-04 13:57 millert
10203 1999-11-01 10:59 millert
10207 1999-11-01 10:58 millert
10209 * tgetpass.c: When read()'ing, do a single character at a time to
10210 be sure we don't go oast the newline.
10212 1999-11-01 10:43 millert
10214 * sudo.c: For the sudo_root option, check against user_uid, not
10215 getuid() since at this point, ruid == euid == 0.
10217 1999-10-31 23:14 millert
10219 * RUNSON: some updates
10221 1999-10-31 23:14 millert
10223 * logging.h: Fix compilation problem when --with-logging=file was
10224 specified. This means that syslog is now required to build sudo
10225 but that should not be a problem. If it is it can be fixed
10226 trivially with a configure check for syslog() or syslog.h.
10228 1999-10-31 23:00 millert
10230 * tgetpass.c: Make this work again for things like "sudo echo hi |
10231 more" where the tty gets put into character at a time mode. We
10232 read until we read end of line or we run out of space (similar to
10235 1999-10-20 11:23 millert
10237 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: change ital
10240 1999-10-20 11:23 millert
10244 1999-10-16 13:56 millert
10246 * defaults.c: Error out if syslog parameters are given without a
10247 value. For Ultrix or 4.2BSD "syslog" is allowed without a value
10248 since there are no facilities in the 4.2BSD syslog.
10250 1999-10-15 16:37 millert
10252 * defaults.c: Ignore the syslog facility for systems w/ old syslog
10255 1999-10-15 12:51 millert
10257 * TROUBLESHOOTING: people with "." early in their path can have
10258 problems running sudo from the build dir ;-)
10260 1999-10-13 00:18 millert
10262 * sudo.man, sudo.pod, sudo.cat, sudo.html: Remove -r realm option
10264 1999-10-12 22:34 millert
10266 * configure, configure.in, sudo.c, auth/kerb5.c, auth/sudo_auth.c,
10267 auth/sudo_auth.h: New krb5 code from Frank Cusack
10268 <fcusack@iconnet.net>.
10270 1999-10-12 22:33 millert
10272 * CHANGES: update to reality
10274 1999-10-11 20:53 millert
10276 * auth/fwtk.c: include <auth.h> to get function prototypes.
10278 1999-10-11 20:05 millert
10280 * sudo.cat, sudo.html, sudo.man, sudo.pod: document -L flag
10282 1999-10-11 19:42 millert
10284 * sudo.c: in set_perms(), always call setuid(0) before changing the
10285 ruid/euid so we always know it will succeed.
10287 1999-10-11 12:24 millert
10289 * defaults.h: #undef T_FOO to avoid conflicts with system defines
10292 1999-10-11 11:55 millert
10294 * TODO, sample.sudoers, sudoers.cat, sudoers.html, sudoers.man,
10295 sudoers.pod: Docuement "Defaults" lines in /etc/sudoers. Still
10296 needs some fleshing out but this is a start.
10298 1999-10-10 17:21 millert
10300 * defaults.c: use strtol, not strtoul since not everyone has not
10303 1999-10-10 15:01 millert
10305 * lex.yy.c, parse.lex: last {WORD} rule should only apply in the
10308 1999-10-10 14:38 millert
10310 * lex.yy.c, parse.lex: o Add support for escaped characters in the
10311 WORD macro o Modify fill() to squash escape chars
10313 1999-10-10 13:56 millert
10315 * defaults.c, defaults.h: o Add T_PATH flag to allow simple sanity
10316 checks for default values that are supposed to be pathnames. o
10317 Fix a duplicate free when visudo finds an error.
10319 1999-10-09 01:01 millert
10321 * defaults.c, defaults.h, logging.c: mail_if_foo -> mail_foo
10323 1999-10-07 21:12 millert
10325 * compat.h, defaults.c, defaults.h, sudo.c, tgetpass.c: o Add
10326 requiretty option o Move O_NOCTTY to compat.h
10328 1999-10-07 21:12 millert
10330 * logging.c: The exit() in log_error() was mistakenly removed in a
10331 previous version. Put it back...
10333 1999-10-07 17:20 millert
10335 * INSTALL, TODO, check.c, config.h.in, configure, configure.in,
10336 defaults.c, defaults.h, find_path.c, getspwuid.c, lex.yy.c,
10337 logging.c, parse.yacc, sudo.c, auth/aix_auth.c, auth/fwtk.c,
10338 auth/pam.c, auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: o
10339 Change defaults stuff to put the value right in the struct. o
10340 Implement mailer_flags o Store syslog stuff both in int and
10341 string form. Setting the string form magically updates the int
10342 version. o Add boolean attribute to strings where it makes sense
10345 1999-10-07 17:13 millert
10347 * tgetpass.c: add O_NOCTTY when opening /dev/tty just in case
10349 1999-10-06 00:48 millert
10351 * auth/API: cleanup function no longer takes a status arg
10353 1999-10-06 00:48 millert
10357 1999-09-15 05:15 millert
10359 * TODO, config.h.in, configure, configure.in, logging.c: Use
10360 strftime() instead of ctime() if it is available.
10362 1999-09-14 12:58 millert
10364 * defaults.c: fix copyright date
10366 1999-09-14 12:57 millert
10368 * RUNSON: update ReliantUNIX entry
10370 1999-09-14 12:56 millert
10372 * defaults.c, defaults.h, logging.c: add log_year option
10374 1999-09-14 04:01 millert
10376 * configure, configure.in: add --without-sendmail to help output
10378 1999-09-14 03:42 millert
10380 * configure, configure.in: enforce an otctal arg for
10381 --with-suoders-mode
10383 1999-09-08 04:06 millert
10385 * BUGS, INSTALL, Makefile.in, TODO, aclocal.m4, check.c,
10386 config.h.in, configure, configure.in, defaults.c, defaults.h,
10387 find_path.c, lex.yy.c, logging.c, parse.h, parse.lex, parse.yacc,
10388 sudo.c, sudo.h, sudo.tab.h, testsudoers.c, version.c, visudo.c,
10389 auth/aix_auth.c, auth/fwtk.c, auth/kerb5.c, auth/pam.c,
10390 auth/rfc1938.c, auth/sia.c, auth/sudo_auth.c: Add support for
10391 "Defaults" line in sudoers to make configuration variables
10392 changable at runtime (and on a global, per-host and per-user
10393 basis). Both the names and the internal representation are still
10394 subject to change. It was necessary to make sudo_user.runas but
10395 a char ** instead of a char * since this value can be changed by
10396 a Defaults line. There is a similar (but more complicated) issue
10397 with sudo_user.prompt but it is handled differently at the
10400 Add a "-L" flag to list the name of options with their
10401 descriptions. This may only be temporary.
10403 Move some prototypes to parse.h
10405 Be much less restrictive on what is allowed for a username.
10407 1999-09-08 04:01 millert
10409 * sample.syslog.conf: Add more info
10411 1999-09-04 03:09 millert
10413 * fnmatch.3, fnmatch.c, getcwd.c, lsearch.c, snprintf.c,
10414 strcasecmp.c, LICENSE: UCB has dropped the advertising clause
10415 from their license.
10417 1999-08-31 05:39 millert
10419 * auth/sudo_auth.h: move dce_verofy proto to correct section
10421 1999-08-31 05:39 millert
10423 * auth/dce.c: remove XXX
10425 1999-08-28 06:00 millert
10427 * emul/fnmatch.h: Add fnmatch() prototype
10429 1999-08-28 06:00 millert
10431 * fnmatch.c, parse.c, testsudoers.c: Move inclusion of
10432 emul/fnmatch.h to be after sudo.h for __P
10434 1999-08-28 05:59 millert
10436 * sudo.h: add strcasecmp proto
10438 1999-08-28 05:50 millert
10440 * auth/sudo_auth.c: add check for case where there are no auth
10443 1999-08-28 05:36 millert
10445 * configure, configure.in: Define _XOPEN_EXTENDED_SOURCE on AIX and
10446 __USE_FIXED_PROTOTYPES__ on SunOS4 w/ gcc
10448 1999-08-28 05:24 millert
10450 * getspwuid.c, lex.yy.c, parse.lex, parse.yacc: include strings.h
10451 everywhere we include string.h
10453 1999-08-28 05:22 millert
10455 * version.c: nicer output when showing auth methods
10457 1999-08-28 05:00 millert
10459 * version.c: Add support for SEND_MAIL_WHEN_NO_HOST
10461 1999-08-28 04:49 millert
10463 * config.h.in, configure.in, configure: Add _GNU_SOURCE for Linux
10465 1999-08-28 04:22 millert
10467 * parse.lex, lex.yy.c: fix definition of OCTECT
10469 1999-08-28 04:10 millert
10471 * configure, configure.in: aix_auth.o not authenticate.o
10473 1999-08-27 17:02 millert
10475 * sudo.c: Only block SIGINT, SIGQUIT, SIGTSTP (which can be
10476 generated from the keyboard). Since we run with ruid/euid == 0
10477 the user can't really signal us in nasty ways.
10479 1999-08-27 17:01 millert
10481 * visudo.c: Don't need to worry about catching too many signals
10482 since we do locking on the tmp file. If a lockfile is really
10483 stale, it will be detected and overwritten.
10485 1999-08-27 16:09 millert
10487 * INSTALL, Makefile.in: include auth/API in tarball
10489 1999-08-27 16:09 millert
10491 * auth/sudo_auth.c: move memset() of plaintext pw outside of verify
10492 loop and only do the memset if we are *not* in standalone mode.
10494 1999-08-27 13:46 millert
10496 * auth/: sudo_auth.c, sudo_auth.h: DCE is not a standalone method
10498 1999-08-27 11:53 millert
10500 * sudo.c: fix --enable-noargs-shell
10502 1999-08-27 11:06 millert
10504 * snprintf.c: "#ifdef __STDC__" not "#if __STDC__" (I missed one)
10506 1999-08-27 10:54 millert
10508 * auth/: fwtk.c, sia.c: _cleanup() function returns an int.
10510 1999-08-27 10:50 millert
10512 * auth/dce.c: there were still some return(0)'s hanging around,
10513 make them AUTH_FAILURE
10515 1999-08-27 10:39 millert
10517 * parse.c: typo in comment
10519 1999-08-27 10:03 millert
10521 * version.c: add missing semicolon
10523 1999-08-27 08:31 millert
10525 * auth/sudo_auth.h: missing backslash
10527 1999-08-26 17:24 millert
10529 * CHANGES, config.h.in, configure, configure.in: Kill
10530 _XOPEN_EXTENDED_SOURCE -- causes problems on some OSes
10532 1999-08-26 09:21 millert
10534 * Makefile.in: add parse.h to HDRS
10536 1999-08-26 09:16 millert
10538 * Makefile.in, configure, configure.in: Kill VISUDO_LIBS and
10539 VISUDO_LDFLAGS. Add LIBS, NET_LIBS, and LDFLAGS. Common libs go
10540 in LIBS, commong ld flags go in LDFLAGS and network libs like
10541 -lsocket, -lnsl go in NET_LIBS. This allows testsudoers to build
10542 on Solaris and is a bit cleaner in general.
10544 1999-08-26 06:56 millert
10546 * UPGRADE: mention ptmp -> sudoers.tmp
10548 1999-08-26 06:12 millert
10550 * configure.in, configure, config.h.in: Define
10551 _XOPEN_SOURCE_EXTENDED not _XOPEN_SOURCE
10553 1999-08-26 05:37 millert
10555 * RUNSON: add 2 reports
10557 1999-08-26 05:20 millert
10559 * auth/kerb5.c: Minor changes, mostly cosmetic.
10560 verify_krb_v5_tgt() changed to return a value more like a system
10563 1999-08-26 05:19 millert
10565 * auth/dce.c: Add an XXX
10567 1999-08-26 05:19 millert
10569 * TODO: more things todo!
10571 1999-08-26 05:18 millert
10573 * sample.sudoers: update based on what is in the man page
10575 1999-08-26 05:10 millert
10577 * parse.yacc: minor change to first line printed in -l mode
10579 1999-08-26 05:10 millert
10581 * sudo.cat, sudo.html, sudo.man, sudo.pod: rename "ENVIRONMENT
10582 VARIABLES" section to "ENVIRONMENT" to be more standard and add
10585 1999-08-26 05:08 millert
10587 * visudo.cat, visudo.html, visudo.man, visudo.pod: rename
10588 "ENVIRONMENT VARIABLES" section to "ENVIRONMENT" to be more
10591 1999-08-26 05:06 millert
10593 * logging.c, parse.c, sudo.h: add FLAG_NO_CHECK
10595 1999-08-26 05:05 millert
10597 * parse.lex, lex.yy.c: make an OCTET really be limited to 0-255
10599 1999-08-26 05:04 millert
10601 * UPGRADE: mention timestamp changes
10603 1999-08-26 05:04 millert
10605 * PORTING: cosmetic cleanup
10607 1999-08-26 05:00 millert
10609 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: new
10610 sudoers(8) man page
10612 1999-08-24 13:45 millert
10614 * version.c: Update comments about syslog name tables
10616 1999-08-24 13:37 millert
10618 * CHANGES, LICENSE, Makefile.in, configure, strcasecmp.c,
10619 configure.in, parse.yacc: include strcasecmp() for those without
10622 1999-08-24 12:43 millert
10624 * sample.sudoers: Use the : operator some more and fix a typo
10626 1999-08-24 12:43 millert
10628 * HISTORY: update the history of sudo
10630 1999-08-24 12:42 millert
10632 * parse.c, parse.lex, testsudoers.c: CIDR-style netmask support
10634 1999-08-24 12:41 millert
10636 * CHANGES: recent changes
10638 1999-08-24 12:40 millert
10640 * sudo.tab.h: these should be generated with byacc, not bison
10642 1999-08-24 12:40 millert
10646 1999-08-24 11:58 millert
10648 * parse.h, parse.yacc, sudo.tab.h: In "sudo -l" mode, the type of
10649 the stored (expanded) alias was not stored with the contents.
10650 This could lead to incorrect output if the sudoers file had
10651 different alias types with the same name. Normal parsing (ie:
10652 not in '-l' mode) is unaffected.
10654 1999-08-23 12:47 millert
10656 * configure, configure.in: define _XOPEN_SOURCE to get at crypt()
10657 proto on some systems
10659 1999-08-22 13:10 millert
10661 * snprintf.c: fix comment
10663 1999-08-22 13:09 millert
10665 * tgetpass.c: don't need limits.h
10667 1999-08-22 07:36 millert
10669 * snprintf.c: kill bogus reference to vfprintf
10671 1999-08-22 07:26 millert
10673 * sample.sudoers, sudoers: better examples
10675 1999-08-22 07:23 millert
10677 * snprintf.c: Add some const in the K&R defs. This is safe since
10678 we define const away if the compiler doesn't grok it.
10680 1999-08-22 07:22 millert
10682 * aclocal.m4, configure: Better test for working long long support.
10683 Ultrix compiler supports basic long long but not all operations
10686 1999-08-22 05:59 millert
10688 * aclocal.m4, config.h.in, configure, getspwuid.c, snprintf.c,
10689 sudo.c, auth/secureware.c: Add check for LONG_IS_QUAD #undef
10690 MAXINT before including hpsecurity.h to silence an HP-UX warning
10691 Check for U?LONG_LONG_MAX in snprintf.c and use LONG_IS_QUAD
10693 1999-08-21 15:00 millert
10695 * LICENSE, aclocal.m4, config.h.in, configure, configure.in,
10696 snprintf.c: UCB-derived snprintf + asprintf support. Supports
10697 quads if the compiler does. No floating point yet, perhaps
10700 1999-08-20 16:37 millert
10702 * check.c, find_path.c, goodpath.c, logging.c, parse.c, sudo.c,
10703 auth/API, auth/sudo_auth.c, auth/sudo_auth.h: Run most of the
10704 code as root, not the invoking user. It doesn't really gain us
10705 anything to run as the user since an attacker can just have an
10706 setuid(0) in their egg. Running as root solves potential
10707 problems wrt signalling.
10709 1999-08-19 13:45 millert
10711 * logging.c, sudo.c: Don't wait for child to finish in log_error(),
10712 let the signal handler get it if we are still running, else let
10713 init reap it for us. The extra time it takes to wait lets the
10714 user know that mail is being sent.
10716 Install SIGCHLD handler in main() and for POSIX signals, block
10717 everything *except* SIGCHLD.
10719 1999-08-19 12:30 millert
10721 * logging.c, parse.c, parse.yacc, sudo.c, configure, sudo.h,
10722 INSTALL, config.h.in, configure.in: sudoers_lookup() now returns
10723 a bitmap instead of an int. This makes it possible to express
10724 things like "failed to validate because user not listed for this
10725 host". Some thigns that were previously VALIDATE_FOO are now
10726 FLAG_FOO. This may change later on.
10728 Reorganized code in log_auth() and sudo.c to deal with above
10731 Safer versions of push/pushcp with in the do { ... } while (0)
10734 parse.yacc now saves info on the stack to allow parse.c to
10735 determine if a user was listed, but not for the host he/she tried
10738 Added --with-mail-if-no-host option
10740 1999-08-17 11:29 millert
10742 * parse.yacc, sudo.h, visudo.c, visudo.cat, visudo.html,
10743 visudo.man, visudo.pod: o NewArgv and NewArgc don't need to be
10744 externally visible. o If pedantic > 1, it is a parse error. o
10745 Add -s (strict) option to visudo which sets pedantic to 2.
10747 1999-08-17 11:26 millert
10749 * HISTORY, INSTALL: Just have sudo-bugs contact info in one place
10751 1999-08-17 11:20 millert
10753 * sudo.cat, sudo.html, sudo.man, sudo.pod: Add BUGS section
10755 1999-08-17 10:29 millert
10757 * configure, configure.in, Makefile.in: Add testsudoers to default
10758 build target if --with-devel Don't clean generated parser files
10759 unless "distclean".
10761 1999-08-17 08:47 millert
10763 * parse.yacc: In pedantic mode we need to save *all* the aliases,
10764 not just those that match, or we get spurious warnings.
10766 1999-08-17 05:32 millert
10768 * TROUBLESHOOTING: reference samples.sylog.conf
10770 1999-08-14 11:50 millert
10772 * sample.syslog.conf: Sample entries for syslog.conf
10774 1999-08-14 11:40 millert
10776 * CHANGES: recent changes
10778 1999-08-14 11:36 millert
10780 * auth/: API, afs.c, aix_auth.c, dce.c, fwtk.c, kerb4.c, kerb5.c,
10781 pam.c, passwd.c, rfc1938.c, secureware.c, securid.c, sia.c,
10782 sudo_auth.c, sudo_auth.h: In struct sudo_auth, turn need_root and
10783 configured into flags and add a flag to specify an auth method is
10784 running alone (the only one). Pass auth methods their sudo_auth
10785 pointer, not the data pointer. This allows us to get at the
10786 flags and tell if we are the only auth method. That, in turn,
10787 allows the method to be able to decide what should/should not be
10788 a fatal error. Currently only rfc1938 uses it this way, which
10789 allows us to kill the OTP_ONLY define and te hackery that went
10790 with it. With access to the sudo_auth struct, methods can also
10791 get at a string holding their cannonical name (useful in error
10794 1999-08-14 11:34 millert
10796 * Makefile.in, INSTALL, README, config.h.in, configure,
10797 configure.in, getspwuid.c, lex.yy.c, parse.lex, parse.yacc,
10798 sudo.tab.h: o --with-otp deprecated, use --without-passwd instead
10799 o real dependencies in the Makefile o --with-devel option to
10800 enable yacc, lex, and -Wall o style -- "foo -> bar" becomes
10801 "foo->bar" o ALL goes back to being a token, not a string but
10802 don't leak memory o rename hsotspec -> host in parse.yacc
10804 1999-08-12 12:26 millert
10806 * BUGS, CHANGES: recent changes
10808 1999-08-12 12:24 millert
10810 * configure, configure.in, interfaces.c, snprintf.c, sudo.c,
10811 sudo.h, auth/sudo_auth.c: o Digital UNIX needs to check for
10812 *snprintf() before -ldb is added to LIBS since -ldb includes a
10813 bogus snprintf(). o Add forward refs for struct mbuf and struct
10814 rtentry for Digital UNIX. o Reorder some functions in snprintf.c
10815 to fix -Wall o Add missing includes to fix more -Wall
10817 1999-08-12 10:37 millert
10819 * INSTALL, check.c, config.h.in, configure, configure.in,
10820 parse.yacc, testsudoers.c, version.c, visudo.c, auth/sudo_auth.c:
10821 o Add a "pedentic" flag to the parser. This makes sudo warn in
10822 cases where an alias may be used before it is defined. Only
10823 turned on for visudo and testsudoers. o Add
10824 --disable-authentication option that makes sudo not require
10825 authentication by default. The PASSWD tag can be used to require
10826 authentication for an entry. We no longer overload
10829 1999-08-12 10:29 millert
10831 * lex.yy.c, parse.lex: Break 'WORD' regexp def into HOSTNAME and
10832 USERNAME. These days a username can contain just about anything
10833 so be very permissive. Also drop the unused \. punctuation.
10835 1999-08-09 18:25 millert
10837 * parse.yacc: o add a 'val' element to aliasinfo struct and move ->
10838 parse.h o find_alias() now returns an aliasinfo * instead of
10839 boolean o add_alias() now takes a value parameter to store in the
10840 aliasinfo.val o The cmnd, hostspec, runasuser, and user rules now
10841 return: 1) positive match 0) negative match (due to '!') -1) no
10842 match This means setting $$ explicitly in all cases, which I
10843 should have done in the first place. It also means that we
10844 always store a value that is != -1 and when we see a '!' we can
10845 set *_matches to !rv if rv != -1. The upshot of all of this is
10846 that '!' now works the way it should in lists and some of the
10847 rules are more uniform and sensible.
10849 1999-08-09 18:17 millert
10851 * Makefile.in: add parse.h dependency
10853 1999-08-09 18:17 millert
10855 * parse.h: kill unused *_matched macros
10857 1999-08-09 10:35 millert
10859 * parse.yacc: Allow a list of users as the first thing in a user
10860 spec, not just a single entry. This makes things more uniform,
10861 though it does allow you to write user specs that are hard to
10864 1999-08-09 10:08 millert
10868 1999-08-09 10:08 millert
10870 * configure.in: fix check for crypt() in libufc
10872 1999-08-07 14:03 millert
10874 * README: sudo-users list now exists
10876 1999-08-07 07:46 millert
10878 * INSTALL, PORTING, README, TODO, TROUBLESHOOTING: Update to
10881 1999-08-07 05:59 millert
10883 * CHANGES, Makefile.in, TODO, TROUBLESHOOTING, check.c, compat.h,
10884 config.h.in, configure.in, logging.c, sudo.h, version.c,
10885 visudo.c, configure, fileops.c: o Move lock_file() and touch()
10886 into fileops.c so visudo can use them o Visudo now locks the
10887 sudoers temp file instead of bailing when the temp file already
10888 exists. This fixes the problem of stale temp files but it does
10889 *require* that you not try to put the temp file in a
10890 world-writable directory. This shoud not be an issue as the temp
10891 file should live in the same dir as sudoers. o Visudo now only
10892 installs the temp file as sudoers if it changed.
10894 1999-08-06 09:49 millert
10896 * logging.c: add fcntl locking
10898 1999-08-06 09:33 millert
10900 * configure, config.h.in, configure.in, logging.c: Lock the log
10903 1999-08-06 05:36 millert
10905 * Makefile.in, TROUBLESHOOTING, parse.c, pathnames.h.in, sudo.c,
10906 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod: o
10907 /etc/stmp -> /etc/sudoers.tmp since solaris uses stmp as shadow
10908 temp file o _PATH_SUDO_SUDOERS -> _PATH_SUDOERS and
10909 _PATH_SUDO_STMP -> _PATH_SUDOERS_TMP
10911 1999-08-05 17:38 millert
10913 * INSTALL, check.c, config.h.in, configure, configure.in,
10914 version.c: o Kill *_MESSAGE and replace with NO_LECTURE o Add
10915 more things to root sudo -V config reporting
10917 1999-08-05 10:56 millert
10919 * configure, configure.in: aix_auth.o not authenticate.o
10921 1999-08-05 10:48 millert
10923 * config.h.in: Add --with-goodpri and --with-badpri configure
10924 options to specify the syslog priority to use.
10926 1999-08-05 10:30 millert
10928 * INSTALL, configure.in, logging.h, configure: Add --with-goodpri
10929 and --with-badpri configure options to specify the syslog
10932 1999-08-05 10:25 millert
10934 * compat.h: kill crufty AIX stuff
10936 1999-08-05 06:55 millert
10938 * Makefile.in: Sigh, some versions of make (like Solaris's) don't
10939 deal with $< like I would expect. Both GNU and BSD makes get
10940 this right but... So, we just expand $< inline at the cost of
10943 1999-08-05 06:52 millert
10945 * version.c: If the invoking user is root, sudo will now print
10946 configure info in -V mode. Currently just prints logging info,
10947 to be expanded later.
10949 1999-08-05 06:51 millert
10951 * logging.c, logging.h, sudo.c, sudo.h: o new defines for syslog
10952 facility and priority o use new print_version() functino for -V
10955 1999-08-05 06:49 millert
10957 * check.c: Don't need version.c
10959 1999-08-05 06:21 millert
10961 * configure, configure.in, aclocal.m4, config.h.in: Add check for
10962 syslog facilities and priorities tables in syslog.h
10964 1999-08-05 05:23 millert
10966 * Makefile.in: o authenticate -> aix_auth o add version.c
10968 1999-08-05 05:21 millert
10970 * auth/sudo_auth.c: Missed a prompt -> user_prompt conversion
10972 1999-08-04 13:32 millert
10974 * TODO: sudo should lock its logfile
10976 1999-08-04 13:28 millert
10978 * parse.yacc: o Add '!' correctly when expanding Aliases. o Add
10979 shortcut macros for append() to make things more readable. o The
10980 separator in append() is now a string instead of a char. o In
10981 append(), only prepend the separator if the last char is not a
10982 '!'. This is a hack but it greatly simplifies '!' handling. o
10983 In -l mode, Runas lists and NOPASSWD/PASSWD tags are now
10984 inherited across entries in a list (matches current behavior).
10985 o Fix formatting in -l mode such that items in a list are
10986 separated by a space. Greatlt improves readability. o Space
10987 for name field in struct aliasinfo is now allocated dyanically
10988 instead of using a (big) buffer. o In add_alias(), only search
10989 the list once (lsearch instead of lfind + lsearch)
10991 1999-08-04 11:31 millert
10993 * lex.yy.c, sudo.tab.h: regen
10995 1999-08-04 10:54 millert
10997 * configure, configure.in: Solais pam doesn't require anye xtra
11000 1999-08-04 05:35 millert
11002 * parse.yacc: o Simpler '!' support now that the lexer deals with
11003 multiple !'s for us. o In the case of opFOO, have FOO give a
11004 boolean return value and set foo_matches in opFOO, not FOO. o
11005 Treat 'ALL' as a string since it gets fill()'d in
11006 parse.lex--fixes a small memory leak. In the long run it may
11007 be better to just fix parse.lex and make ALL back into a token.
11008 However, having it be a string is useful since it can be
11009 easily passed back to the parent rule if we so desire.
11011 1999-08-04 03:54 millert
11013 * parse.lex: o Remove some unnecessary backslashes o collapse
11014 multiple !'s by using !+ and checking if yyleng is even or odd.
11015 this allows us to simplify ! handling in parse.yacc
11017 1999-08-04 03:53 millert
11019 * sudo.c: -u flag was being ignored
11021 1999-08-01 13:04 millert
11023 * Makefile.in: correct fix
11025 1999-08-01 12:37 millert
11027 * Makefile.in: work around pod2man stupididy
11029 1999-08-01 12:35 millert
11031 * Makefile.in: correct dependencies for .cat
11033 1999-08-01 12:26 millert
11035 * sudo.cat, sudo.man, visudo.cat, visudo.man: regen
11037 1999-08-01 12:25 millert
11039 * sudo.pod, visudo.pod: Add copyright Update to reality
11041 1999-08-01 11:42 millert
11043 * parse.c, sudo.c, sudo.h: rename validate() to the more
11044 descriptive sudoers_lookup()
11046 1999-08-01 06:49 millert
11048 * auth/aix_auth.c: use tgetpass
11050 1999-07-31 12:32 millert
11054 1999-07-31 12:31 millert
11056 * HISTORY, INSTALL, Makefile.in, README, RUNSON, TROUBLESHOOTING,
11057 configure, configure.in, sudo.c: Sudo, not CU Sudo
11059 1999-07-31 12:19 millert
11061 * Makefile.in, alloc.c, check.c, compat.h, config.h.in,
11062 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
11063 ins_csops.h, ins_goons.h, insults.h, interfaces.c, interfaces.h,
11064 lex.yy.c, logging.c, logging.h, parse.c, parse.h, parse.lex,
11065 parse.yacc, pathnames.h.in, putenv.c, strerror.c, sudo.c, sudo.h,
11066 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
11067 visudo.c, auth/afs.c, auth/aix_auth.c, auth/dce.c, auth/fwtk.c,
11068 auth/kerb4.c, auth/kerb5.c, auth/pam.c, auth/passwd.c,
11069 auth/rfc1938.c, auth/secureware.c, auth/securid.c, auth/sia.c,
11070 auth/sudo_auth.c, auth/sudo_auth.h, emul/search.h, emul/utime.h,
11071 LICENSE: add 4th term to license similar to term 5 in the apache
11074 1999-07-31 12:02 millert
11076 * LICENSE, aclocal.m4, check.c, configure.in, insults.h, logging.c,
11077 sudo.c, sudo.h, auth/rfc1938.c: there was a 1995 release too
11079 1999-07-28 05:24 millert
11083 1999-07-28 05:21 millert
11085 * check.c: Use dirs instead of files for timestamp. This allows
11086 tty and non-tty schemes to coexist reasonably. Note, however,
11087 that when you update a tty ticket, the mtime on the user dir gets
11090 1999-07-28 05:17 millert
11092 * configure.in, configure: Fix getprpwnam() checking on SCO. Need
11093 to link with "-lprot -lx" when linking test program, not just
11094 -lprot. Also add check for getspnam(). The SCO docs indicate
11095 that /etc/shadow can be used but this may be a lie.
11097 1999-07-24 03:35 millert
11099 * auth/API: first cut at auth API description
11101 1999-07-22 15:48 millert
11103 * auth/: fwtk.c, kerb4.c, kerb5.c, pam.c, rfc1938.c, secureware.c,
11104 securid.c, sudo_auth.c, sudo_auth.h: auth API change. There is
11105 now an init method that gets run before the main loop. This
11106 allows auth routines to differentiate between initialization that
11107 happens once vs. setup that needs to run each time through the
11110 1999-07-22 12:23 millert
11112 * logging.c, auth/kerb5.c: use easprintf() and evasprintf()
11114 1999-07-22 12:22 millert
11116 * alloc.c, sudo.h: add easprintf() and evasprintf(), error checking
11117 versions of asprintf() and vasprintf()
11119 1999-07-22 09:14 millert
11121 * TODO: remove 2 items. One done, one won't do.
11123 1999-07-22 09:10 millert
11125 * sudo.man, visudo.man, sudo.cat, sudo.html, sudoers.html,
11126 visudo.cat, visudo.html, configure, lex.yy.c: regen
11128 1999-07-22 09:06 millert
11130 * CHANGES: new changes
11132 1999-07-22 09:01 millert
11134 * sudo.pod: o Document -K flag and update meaning of -k flag. o
11135 BSD-style copyright o Document clearing of BIND resolver
11136 environment variables o Clarify bit about shared libs o suggest
11137 rc files create /tmp/.odus if your OS gives away files
11139 1999-07-22 08:59 millert
11141 * visudo.pod: BSD license
11143 1999-07-22 08:58 millert
11145 * tgetpass.c: o BSD copyright o no need to block signals, we now do
11146 that in main() o cosmetic changes
11148 1999-07-22 08:57 millert
11150 * testsudoers.c, visudo.c: o BSD-style copyright o Use "struct
11151 sudo_user" instead of old globals. o some cometic cleanup
11153 1999-07-22 08:56 millert
11155 * sudo_setenv.c, version.h: BSD-style copyright
11157 1999-07-22 08:56 millert
11159 * sudo.h: o BSD copyright o logging and parser bits moved to their
11160 own .h files o new "struct sudo_user" to encapsulate many of the
11163 1999-07-22 08:55 millert
11165 * sudo.c: o no longer contains sudo 1.1/1.2 code o BSD copyright o
11166 use new logging routines o simplified flow of control o BIND
11167 resolver additions to badenv_table
11169 1999-07-22 08:53 millert
11171 * strerror.c: BSD-style copyright
11173 1999-07-22 08:53 millert
11175 * snprintf.c: Now compiles on more K&R compilers
11177 1999-07-22 08:52 millert
11179 * putenv.c: BSD-style copyright, cosmetic changes
11181 1999-07-22 08:51 millert
11183 * parse.c, parse.yacc, parse.h, parse.lex: BSD-style copyright.
11184 Move parser-specific defines and structs into parse.h + other
11187 1999-07-22 08:51 millert
11189 * logging.h: defines for logging routines
11191 1999-07-22 08:49 millert
11193 * ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11194 interfaces.h, pathnames.h.in: BSD-style copyright
11196 1999-07-22 08:48 millert
11198 * find_path.c, getspwuid.c, goodpath.c, interfaces.c: BSD-style
11199 copyright, cosmetic changes
11201 1999-07-22 08:46 millert
11203 * configure.in: o tgetpass.c is no longer optional o kill DCE_OBJS,
11204 add AUTH_OBJS o kill --disable-tgetpass o add --without-passwd o
11205 changes to fill in AUTH_OBJS for new auth api o check for
11206 strerror(), v?snprintf() and v?asprintf() o replace
11207 --with-AuthSRV with --with-fwtk
11209 1999-07-22 08:43 millert
11211 * config.h.in: BSD-style copyright. Remove USE_GETPASS and
11212 HAVE_UTIME_NULL. Add HAVE_FWTK, HAVE_STRERROR, HAVE_SNPRINTF,
11213 HAVE_VSNPRINTF, HAVE_ASPRINTF, HAVE_VASPRINTF, WITHOUT_PASSWD and
11216 1999-07-22 08:42 millert
11218 * compat.h: BSD-style copyright; Add S_IFLNK and MIN/MAX id they
11221 1999-07-22 08:39 millert
11223 * alloc.c: BSD-style copyright
11225 1999-07-22 08:38 millert
11227 * TROUBLESHOOTING: no more --with-getpass
11229 1999-07-22 08:34 millert
11231 * TODO: Take out things I've done...
11233 1999-07-22 08:34 millert
11235 * README: Refer to LICENSE
11237 1999-07-22 08:34 millert
11239 * PORTING: --with-getpass no longer exists
11241 1999-07-22 08:33 millert
11243 * Makefile.in: BSD-style copyright. Update to reflect reality wrt
11244 new files and new auth modules.
11246 1999-07-22 08:32 millert
11248 * INSTALL: Remove --with-AuthSRV and --disable-tgetpass. Add
11249 --with-fwtk and --without-passwd.
11251 1999-07-22 08:31 millert
11253 * HISTORY: Update history a bit
11255 1999-07-22 08:29 millert
11257 * COPYING, LICENSE: Now distributed under a BSD-style license
11259 1999-07-22 08:28 millert
11261 * auth/sudo_auth.c: o BSD-style copyright o Add support for
11262 NO_PASSWD/WITHOUT_PASSWD options. o skey/opie replaced by
11263 rfc1938 code o new struct sudo_user global
11265 1999-07-22 08:25 millert
11267 * auth/: pam.c, sia.c: BSD-style copyright and use new log
11270 1999-07-22 08:24 millert
11272 * auth/kerb5.c: o BSD-style copyright o Use new log functiongs o
11273 Use asprintf() and snprintf() where sensible.
11275 1999-07-22 08:19 millert
11277 * check.c: Rewrote all the old sudo 1.1/1.2 code. Timestamp
11278 handling is now done more reasonably--better sanity checks and
11279 tty-based stamps are now done as files in a directory with the
11280 same name as the invoking user, eg. /var/run/sudo/millert/ttyp1.
11281 It is not currently possible to mix tty and non-tty based ticket
11282 schemes but this may change in the future (it requires sudo to
11283 use a directory instead of a file in the non-tty case). Also,
11284 ``sudo -k'' now sets the ticket back to the epoch and ``sudo -K''
11285 really deletes the file. That way you don't get the lecture
11286 again just because you killed your ticket in .logout. BSD-style
11289 1999-07-22 08:13 millert
11291 * logging.c: o rewritten logging routines. log_error() now takes
11292 printf-style varargs and log_auth() for the return value of
11293 validate(). o BSD-style copyright
11295 1999-07-22 07:04 millert
11297 * auth.c, check_sia.c, dce_pwent.c, secureware.c: superceded by new
11300 1999-07-22 07:02 millert
11302 * auth/fwtk.c: Use snprintf() where it makes sense and add a
11303 BSD-style copyright
11305 1999-07-22 07:00 millert
11307 * auth/: afs.c, aix_auth.c, dce.c, passwd.c, rfc1938.c,
11308 secureware.c, securid.c, sudo_auth.h, kerb4.c: BSD-style
11311 1999-07-22 06:57 millert
11313 * emul/utime.h, utime.c: BSD-style copyright
11315 1999-07-22 06:57 millert
11317 * emul/search.h: this has been rewritten so use my BSD-style
11320 1999-07-15 11:21 millert
11322 * snprintf.c: include malloc.h if no stdlib.h
11324 1999-07-15 10:21 millert
11326 * snprintf.c: KTH snprintf()/asprintf() for systems w/o them
11328 1999-07-15 10:20 millert
11330 * strerror.c: strerror() for systems w/o it
11332 1999-07-12 06:53 millert
11334 * visudo.c: stylistic changes
11336 1999-07-12 06:25 millert
11338 * parse.c, parse.lex, parse.yacc: Add contribution info in the main
11341 1999-07-11 16:10 millert
11343 * auth/pam.c: remove missed ref to PAM_nullpw
11345 1999-07-11 16:10 millert
11347 * auth/sudo_auth.h: pasto
11349 1999-07-11 15:19 millert
11351 * auth/kerb5.c: more or less complete now--still untested
11353 1999-07-11 15:09 millert
11355 * auth/: afs.c, pam.c: don't use user_name macro, it will go away
11357 1999-07-11 14:42 millert
11359 * auth/: opie.c, rfc1938.c, sudo_auth.h, skey.c: combine skey/opie
11360 code into rfc1938.c
11362 1999-07-11 07:22 millert
11364 * auth/: dce.c, sudo_auth.h: DCE authentication method; basically
11365 unchanged from dce_pwent.c
11367 1999-07-11 06:44 millert
11369 * auth/: aix_auth.c, sudo_auth.h: AIX authenticate() support.
11370 Could probably be much better
11372 1999-07-11 06:43 millert
11374 * auth/sia.c: Fix an uninitialized variable and some cleanup. Now
11377 1999-07-11 05:37 millert
11379 * auth/: sia.c, sudo_auth.h: SIA support for digital unix
11381 1999-07-11 05:33 millert
11383 * auth/pam.c: don't use prompt global, it will go away
11385 1999-07-11 05:32 millert
11387 * auth/secureware.c: correct copyright years
11389 1999-07-10 20:32 millert
11391 * auth/: afs.c, fwtk.c, kerb4.c, sudo_auth.h, kerb5.c, opie.c,
11392 pam.c, passwd.c, secureware.c, securid.c, skey.c, sudo_auth.c:
11393 New authentication API and methods
11395 1999-07-08 06:46 millert
11397 * parse.yacc: only save an entry if user_matches && host_matches,
11398 even if the stack is empty (fix for previous commit)
11400 1999-07-08 06:35 millert
11402 * parse.yacc: 1) Always save an entry on the stack if it is empty.
11403 This fixes the -l and -v flags that were broken by earlier parser
11406 2) In a Runas list, don't negate FALSE -> TRUE since that would
11407 make !foo match any time the user specified a runas user (via -u)
11410 1999-07-08 05:45 millert
11412 * testsudoers.c: interfaces and num_interfaces are now auto, not
11415 1999-07-07 14:09 millert
11417 * auth.c: use a static global to keep stae about empty passwords
11419 1999-07-07 14:08 millert
11421 * check_sia.c: make PASSWORD_NOT_CORRECT logging consistent with
11424 1999-07-05 16:53 millert
11426 * auth.c: PAM prompt code was wrong, looks like we have to kludge
11429 1999-07-05 16:35 millert
11431 * auth.c: In the PAM code, when a user hits return at the first
11432 password prompt, exit without a warning just like the normal auth
11435 1999-07-05 16:15 millert
11437 * configure, configure.in: kludge around cross-compiler false
11440 1999-07-05 16:14 millert
11442 * auth.c, check.c, check_sia.c, logging.c, sudo.h, tgetpass.c: New
11443 (correct) PAM code Tgetpass now takes an echo flag for use with
11444 PAM_PROMPT_ECHO_ON Block SIGINT and SIGTSTP during auth remove a
11445 useless umask setting Change error from BAD_ALLOCATION ->
11446 BAD_AUTH_INIT (for use with sia/PAM) Some cosmetic changes to
11447 auth.c for consistency
11449 1999-07-05 16:11 millert
11451 * sudo.c: Some -Wall and kill some trailing spaces
11453 1999-07-05 16:10 millert
11455 * configure.in: define -D__EXTENSIONS__ for solaris so we get
11458 1999-06-22 09:42 millert
11460 * RUNSON: add Dynix 4.4.4
11462 1999-06-22 09:30 millert
11464 * INSTALL, config.h.in, configure.in, configure: for kerberos V <
11465 version, fall back on old kerb4 auth code
11467 1999-06-22 06:41 millert
11469 * INSTALL: clarify some things
11471 1999-06-22 06:38 millert
11473 * UPGRADE, sudoers.cat, sudoers.man, sudoers.pod: typos
11475 1999-06-14 19:47 millert
11477 * sudo.c: mention why DONT_LEAK_PATH_INFO is not the default
11479 1999-06-03 12:34 millert
11481 * tgetpass.c: Fix open(2) return value checking, was NULL for
11482 fopen, should be -1 for open
11484 1999-06-03 12:06 millert
11488 1999-06-03 12:06 millert
11490 * configure.in: better wording for solaris pam notice
11492 1999-06-03 11:52 millert
11494 * CHANGES: document recent changes
11496 1999-06-03 11:52 millert
11498 * TROUBLESHOOTING: Update shadow password section
11500 1999-06-03 11:51 millert
11502 * auth.c: move authentication code from check.c to auth.c
11504 1999-06-03 11:51 millert
11506 * Makefile.in, check.c, sudo.h: move authentication code to auth.c
11508 1999-05-16 21:36 millert
11510 * Makefile.in, check.c, check_sia.c, compat.h, find_path.c,
11511 getspwuid.c, goodpath.c, interfaces.c, interfaces.h, lex.yy.c,
11512 logging.c, parse.c, parse.lex, parse.yacc, secureware.c, sudo.c,
11513 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, visudo.c: Move
11514 interface-related defines to interfaces.h so we don't have to
11515 include <netinet/in.h> everywhere.
11517 1999-05-14 12:30 millert
11519 * CHANGES, INSTALL, TODO, check.c, compat.h, getspwuid.c,
11520 logging.c, parse.yacc, sudo.c, tgetpass.c: o Replace _PASSWD_LEN
11521 braindeath with our own SUDO_MAX_PASS.
11522 It turns out the old DES crypt does the right thing with
11524 longert than 8 characters.
11525 o Fix common typo (necesary -> necessary)
11528 1999-05-03 12:00 millert
11530 * sudo.c: set $LOGNAME when we set $USER
11532 1999-04-27 00:00 millert
11534 * INSTALL: add comment about digital unix and interfaces.c warning
11537 1999-04-15 01:12 millert
11539 * sample.sudoers: use modern paths and give examples for some of
11540 the new parser features
11542 1999-04-10 13:03 millert
11544 * parse.c: fix comment
11546 1999-04-10 00:49 millert
11548 * alloc.c, check.c, check_sia.c, dce_pwent.c, find_path.c,
11549 getspwuid.c, goodpath.c, interfaces.c, lex.yy.c, logging.c,
11550 parse.c, parse.lex, parse.yacc, putenv.c, secureware.c, sudo.c,
11551 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
11552 Function names should be flush with the start of the line so they
11553 can be found trivially in an editor and with grep
11555 1999-04-10 00:40 millert
11557 * find_path.c, interfaces.c, lex.yy.c, parse.c, parse.lex,
11558 parse.yacc, sudo.c, testsudoers.c, tgetpass.c, visudo.c: free(3)
11559 is already void, no need to cast it
11561 1999-04-10 00:37 millert
11563 * logging.c, sudo.c, sudo.h: catch case where cmnd_safe is not set
11564 (this should not be possible)
11566 1999-04-10 00:10 millert
11568 * CHANGES, logging.c, parse.c, parse.yacc, sudo.c, sudo.h,
11569 testsudoers.c, visudo.c: Stash the "safe" path (ie: the one
11570 listed in sudoers) to the command instead of stashing the struct
11571 stat. Should be safer.
11573 1999-04-08 19:56 millert
11575 * INSTALL, Makefile.in, UPGRADE: notes on updating from an earlier
11578 1999-04-07 20:20 millert
11582 1999-04-07 19:18 millert
11584 * parse.yacc, sudo.tab.h, sudoers.cat, sudoers.html, sudoers.man,
11585 sudoers.pod: You can now specifiy a host list instead of just a
11586 host or alias. Ie: user = host1,host2,ALIAS,!host3 my_command
11589 1999-04-07 02:59 millert
11591 * testsudoers.c: Quiet -Wall
11593 1999-04-07 02:50 millert
11595 * parse.yacc: Move the push from the beginning of cmndspec to the
11596 end. This means we no longer have to do a push at the end of
11597 privilege, just reset some values.
11599 1999-04-06 20:24 millert
11601 * sudoers.cat, sudoers.html, sudoers.man, sudoers.pod: runas-lists
11602 and NOPASSWD/PASSWD modifiers are now sticky and you can use "!"
11605 1999-04-06 14:12 millert
11607 * sudoers.pod: modernize paths and update su example based on
11610 1999-04-06 14:06 millert
11612 * sample.sudoers: New runas semantics
11614 1999-04-06 13:54 millert
11616 * CHANGES, Makefile.in, alloc.c, config.h.in, configure,
11617 configure.in, strdup.c, sudo.h: In estrdup(), do the malloc
11618 ourselves so we don't need to rely on the system strdup(3) which
11619 may or may not exist. There is now no need to provide strdup()
11620 for those w/o it. Also, the prototype for estrdup() was wrong,
11621 it returns char * and its param is const.
11623 1999-04-06 13:40 millert
11625 * getcwd.c: $Sudo tag
11627 1999-04-06 13:20 millert
11629 * check.c: buf should be prompt; Michael Robokoff
11630 <mrobo@networkcs.com>
11632 1999-04-06 01:40 millert
11634 * CHANGES, TODO, parse.yacc: It is now possible to use the '!'
11635 operator in a runas list as well as in a Cmnd_Alias, Host_Alias
11638 1999-04-06 01:38 millert
11640 * logging.c, sudo.h: Kill GLOBAL_NO_SPW_ENT (not used) and crank
11643 1999-04-06 01:08 millert
11645 * sudo.h: Definitions of *_matched were wrong--user top, not top-2
11648 1999-04-06 01:00 millert
11650 * logging.c, parse.c, parse.yacc, sudo.c, sudo.h: Add
11651 VALIDATE_NOT_OK_NOPASS for when user is not allowed to run a
11652 command but the NOPASSWD flag was set. Make runasspec,
11653 runaslist, runasuser, and nopasswd typeless in parse.yacc Add
11654 support for '!' in the runas list Fix double printing of '%' and
11655 '+' for groups and netgroups respectively Add *_matched macros
11656 (no need for local stack variable). Should only be used directly
11657 after a pop (since top must be >= 2).
11659 1999-04-05 23:25 millert
11661 * aclocal.m4, configure.in: Add copyright, somewhat silly
11663 1999-04-05 16:57 millert
11665 * BUGS, INSTALL, Makefile.in, README, alloc.c, check.c,
11666 check_sia.c, compat.h, config.h.in, configure, configure.in,
11667 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11668 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11669 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11670 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11671 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11672 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11673 visudo.c, visudo.cat, visudo.man, emul/utime.h: Crank version to
11674 1.6 and combine copyright statements
11676 1999-04-05 16:30 millert
11678 * sample.sudoers: Use ! not ^ to do negation
11680 1999-04-05 16:29 millert
11684 1999-04-05 16:28 millert
11686 * parse.yacc, parse.lex: Make runas and NOPASSWD tags persistent
11687 across entris in a command list. Add a PASSWD tag to reverse
11688 NOPASSWD. When you override a runas or *PASSWD tag the value
11689 given becomes the new default for the rest of the command list.
11691 1999-04-02 16:03 millert
11693 * CHANGES, RUNSON: update for 1.5.9
11695 1999-04-02 16:02 millert
11697 * visudo.c: Shift return value of system(3) by 8 to get real exit
11698 value and if it is not 1 or 0 print the retval along with the
11701 1999-03-30 16:45 millert
11703 * Makefile.in: testsudoers needs LIBOBJS too
11705 1999-03-30 12:17 millert
11707 * parse.c, parse.yacc: Fix another parser bug. For a sudoers entry
11708 like this: millert ALL=/bin/ls,(daemon) !/bin/ls sudo
11709 would not allow millert to run ls as root.
11711 1999-03-30 01:08 millert
11713 * CHANGES: new change
11715 1999-03-30 01:03 millert
11717 * parse.yacc: Save entries that match a ! command on the matching
11720 1999-03-30 01:01 millert
11722 * sudo.c: Make sudo's usage info better when mutually exclusive
11723 args are given and don't rely on argument order to detect this;
11726 1999-03-29 15:03 millert
11728 * CHANGES, Makefile.in, RUNSON: updates from CU
11730 1999-03-28 23:38 millert
11732 * Makefile.in: use gzip
11734 1999-03-28 23:31 millert
11736 * parse.yacc: Fix off by one error introduced in *alloc changes
11738 1999-03-28 23:05 millert
11740 * BUGS, CHANGES, INSTALL, Makefile.in, README, alloc.c, check.c,
11741 check_sia.c, compat.h, config.h.in, configure, configure.in,
11742 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11743 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11744 lex.yy.c, logging.c, parse.c, parse.lex, parse.yacc,
11745 pathnames.h.in, putenv.c, secureware.c, strdup.c, sudo.c,
11746 sudo.cat, sudo.h, sudo.man, sudo_setenv.c, sudoers.cat,
11747 sudoers.man, testsudoers.c, tgetpass.c, utime.c, version.h,
11748 visudo.c, visudo.cat, visudo.html, visudo.man, visudo.pod,
11749 emul/utime.h: ++version
11751 1999-03-28 21:59 millert
11753 * Makefile.in, check.c, find_path.c, getspwuid.c, goodpath.c,
11754 interfaces.c, lex.yy.c, logging.c, parse.c, parse.lex,
11755 parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c, sudo.h,
11756 sudo_setenv.c, testsudoers.c, utime.c, visudo.c: Use
11757 emalloc/erealloc/estrdup
11759 1999-03-28 20:29 millert
11761 * alloc.c: error checking memory allocation routines
11763 1999-03-28 19:23 millert
11765 * parse.yacc: Still not right, this fixes it for real
11767 1999-03-28 19:08 millert
11769 * parse.yacc: Fix for previous commit
11771 1999-03-28 19:05 millert
11773 * CHANGES, INSTALL, parse.yacc: Fix a parser bug that was exposed
11774 when mixing different runas specs and ! commands. For example:
11775 millert ALL=(daemon) /usr/bin/whoami,!/bin/ls would
11776 allow millert to run whoami as root as well as daemon when it
11777 should just allow daemon. The problem was that comma-separated
11778 commands in a list shared the same entry on the matching stack.
11779 Now they get their own entry iff there is a full match. It may
11780 be better to just make the runas spec persistent across all
11781 commands in a list like the user and host entries of the matching
11782 stack. However, since that is a fairly major change it should
11783 gets its own minor rev increase.
11785 1999-03-28 13:50 millert
11787 * check.c, config.h.in: Simplify PAM code and fix a PAM-related
11790 1999-03-26 13:17 millert
11794 1999-03-26 13:12 millert
11796 * sample.sudoers: better su entry
11798 1999-03-26 13:10 millert
11802 1999-03-26 13:09 millert
11804 * check.c, configure.in: new pam code that works on solaris, should
11805 work on linux too; aelberg@home.com
11807 1999-03-19 14:44 millert
11809 * RUNSON: more entries
11811 1999-03-19 14:43 millert
11813 * config.h.in: only include strings.h if there is no string.h
11815 1999-03-17 15:25 millert
11817 * config.guess: Sinix is now being called ReliantUNIX;
11818 bjjackso@us.oracle.com
11820 1999-03-13 13:37 millert
11822 * sudo.c: shost must be set before log functions are called #ifdef
11825 1999-03-07 18:34 millert
11827 * CHANGES, lex.yy.c, parse.lex: Fix a bug wrt quoting characters in
11828 command args. Stop processing an arg when you hit a backslash so
11829 the quoted-character detection can catch it.
11831 1999-02-26 01:19 millert
11833 * interfaces.c: include sys/time.h; aparently AIX needs it.
11836 1999-02-23 19:43 millert
11838 * configure, configure.in: add missing case statement so
11839 --without-sendmail works
11841 1999-02-22 21:51 millert
11845 1999-02-22 15:10 millert
11847 * configure, configure.in: only search for -lsun in irix <= 4.x
11849 1999-02-22 15:01 millert
11851 * configure, configure.in: back out last configure.in change now
11852 that I've hacked autoconf to fix the real problem and add a
11855 1999-02-22 14:32 millert
11859 1999-02-22 14:05 millert
11861 * getcwd.c: add def of dirfd() for those without it
11863 1999-02-22 10:58 millert
11865 * configure.in, configure: When falling back to checking for
11866 socket() when linking with "-lsocket -lnsl" check for main()
11867 instead since autoconf has already cached the results of checking
11868 for socket() in -lsocket. This is really an autoconf bug as it
11869 should use the extra libs as part of the cache variable name.
11871 1999-02-22 10:47 millert
11873 * configure.in: typo
11875 1999-02-21 15:18 millert
11877 * configure.in: fix occurrence of $with_timeout that should be
11878 $with_password_timeout;
11879 Michael.Neef@neuroinformatik.ruhr-uni-bochum.de
11881 1999-02-17 11:40 millert
11883 * sudo.cat, sudo.html, sudo.man, sudo.pod: fix grammar;
11886 1999-02-11 01:41 millert
11888 * parse.yacc, sudo.c, testsudoers.c: add cast for strdup in places
11889 it does not have it
11891 1999-02-09 13:11 millert
11893 * configure, configure.in: define for_BSD_TYPES irix
11895 1999-02-06 19:47 millert
11897 * Makefile.in, sudo.cat, sudo.html, sudo.man, sudo.pod: Make it
11898 clear that it is the user's password, not root's, that we want.
11900 1999-02-06 19:43 millert
11902 * check.c, sudo.h: If the user enters an empty password and really
11903 has no password, accept the empty password they entered.
11904 Perviously, they could enter anything *but* an empty password.
11905 Also, add GETPASS macro that calls either tgetpass() or getpass()
11906 depending on how sudo was configured. Problem noted by
11907 jdg@maths.qmw.ac.uk
11909 1999-02-02 23:32 millert
11911 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11912 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
11913 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
11914 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
11915 putenv.c, secureware.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c,
11916 testsudoers.c, tgetpass.c, utime.c, version.h, visudo.c,
11917 emul/utime.h: add explicate copyright
11919 1999-02-02 23:16 millert
11921 * CHANGES: mention -lsocket, -lnsl configure changes
11923 1999-02-02 17:54 millert
11925 * sudo.c: Don't clobber errno after calling check_sudoers().
11927 1999-01-31 19:46 millert
11929 * configure.in, configure: When linking with both -lsocket and
11930 -lnsl be sure to do so in that order. Also, when we can't find
11931 socket() or inet_addr() and have to try linking with both libs,
11934 1999-01-31 19:45 millert
11936 * sudo.cat, sudo.man, sudo.pod: clarify bad timestamp and fmt
11938 1999-01-23 12:18 millert
11940 * INSTALL, RUNSON: be clear that pam is linux-only and add a RUNSON
11943 1999-01-22 13:13 millert
11945 * configure, CHANGES, INSTALL, configure.in: fix and correctly
11946 document --with-umask; problem noted by adap@adap.org
11948 1999-01-19 20:38 millert
11950 * configure.in, configure: only use /usr/{man,catman}/local to
11951 store man pages if suer didn't override prefix or mandir
11953 1999-01-19 20:24 millert
11955 * configure, INSTALL, configure.in: fix typo, make --with-SecurID
11958 1999-01-18 21:53 millert
11960 * RUNSON: updates from users
11962 1999-01-18 21:04 millert
11964 * CHANGES, INSTALL, check.c, configure, configure.in: FWTK
11965 'authsrv' support from Kevin Kadow <kadow@MSG.NET>
11967 1999-01-18 20:00 millert
11969 * configure, configure.in: better fix for the problem of unresolved
11970 symbols in -lnsl or -lsocket
11972 1999-01-18 19:39 millert
11974 * configure, configure.in: when checking for functions in -lnsl and
11975 -lsocket link with both of them to avoid unresolved symbols on
11976 some weirdo systems
11978 1999-01-17 20:49 millert
11980 * BUGS, CHANGES, RUNSON, TODO: old changes that didn't make it into
11981 RCS before the RCS->CVS switch
11983 1999-01-17 18:16 millert
11985 * Makefile.in, check.c, check_sia.c, compat.h, config.h.in,
11986 configure.in, dce_pwent.c, find_path.c, getspwuid.c, goodpath.c,
11987 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
11988 interfaces.c, lex.yy.c, logging.c, lsearch.c, parse.c, parse.lex,
11989 parse.yacc, pathnames.h.in, putenv.c, secureware.c, strdup.c,
11990 sudo.c, sudo.pod, sudo_setenv.c, sudoers.pod, testsudoers.c,
11991 tgetpass.c, utime.c, visudo.c, visudo.pod, emul/search.h,
11992 emul/utime.h: add sudo tags
11994 1999-01-17 17:53 millert
11996 * version.h, sudo.h: testing Sudo tag
11998 1999-01-17 17:40 millert
12000 * BUGS, INSTALL, Makefile.in, README, check.c, check_sia.c,
12001 compat.h, config.h.in, configure, configure.in, dce_pwent.c,
12002 find_path.c, getspwuid.c, goodpath.c, ins_2001.h, ins_classic.h,
12003 ins_csops.h, ins_goons.h, insults.h, interfaces.c, lex.yy.c,
12004 logging.c, parse.c, parse.lex, parse.yacc, pathnames.h.in,
12005 putenv.c, secureware.c, strdup.c, sudo.c, sudo.cat, sudo.h,
12006 sudo.man, sudo_setenv.c, sudoers.cat, sudoers.man, testsudoers.c,
12007 tgetpass.c, utime.c, version.h, visudo.c, visudo.cat, visudo.man,
12008 emul/utime.h: crank version and regen files
12010 1999-01-17 17:27 millert
12012 * Makefile.in: kill rcs goop in update_version and fix now that
12015 1999-01-17 17:08 millert
12017 * INSTALL, check.c, config.h.in, configure, configure.in,
12018 logging.c, sudo.c, sudo.h, sudo.pod: kerb5 support from
12019 fcusack@iconnet.net
12021 1999-01-17 16:45 millert
12023 * realpath.c, sudo_realpath.c: we no longer use realpath
12025 1999-01-17 16:44 millert
12027 * qualify.c: replaced by find_path.c
12029 1999-01-17 16:43 millert
12031 * options.h: all options are now configure flags
12033 1999-01-17 16:42 millert
12037 1999-01-17 16:41 millert
12039 * getwd.c: superceded by getcwd.c
12041 1999-01-17 16:36 millert
12043 * getpass.c: superceded by tgetpass.c
12045 1999-01-17 16:36 millert
12047 * SUPPORTED: superceded by RUNSON
12049 1999-01-17 16:33 millert
12051 * OPTIONS: No longer used now that we have configure options for
12054 1999-01-17 16:32 millert
12056 * configure: regen based on configure.in
12058 1999-01-17 16:31 millert
12060 * sudo.man, sudoers.man, visudo.man, sudo.cat, sudo.html,
12061 sudoers.cat, visudo.cat, sudoers.html, visudo.html: regen based
12062 on sudo.pod, sudoers.pod, and visudo.pod
12064 1998-12-11 12:16 millert
12066 * check.c: fix tty tickets in remove_timestamp (didn't use ':')
12068 1998-12-07 16:16 millert
12070 * interfaces.c: close sock when we are done with it
12072 1998-11-27 19:37 millert
12074 * parse.yacc: never say "error on line -1"
12076 1998-11-23 23:38 millert
12078 * configure.in: check for -lnsl before -lsocket
12080 1998-11-23 23:29 millert
12082 * configure.in: quote '[', ']' used in ranges correctly
12084 1998-11-21 17:54 millert
12086 * config.h.in: add missing NO_ROOT_SUDO noted by drno@tsd.edu
12088 1998-11-20 18:33 millert
12092 1998-11-20 18:33 millert
12094 * INSTALL: more info for 1.5.7
12096 1998-11-20 18:30 millert
12098 * README: update for 1.5.7
12100 1998-11-20 14:26 millert
12102 * parse.yacc: make increases of cm_list_size and ga_list_size be
12103 similar to increases of stacksize (ie: >= not > in initial
12106 1998-11-20 14:22 millert
12108 * parse.yacc: when we get a syntax error, report it for the
12109 previous line since that's generally where the error occurred.
12111 1998-11-18 15:31 millert
12113 * config.h.in, configure.in, interfaces.c: add back check for
12114 sys/sockio.h but only use it if SIOCGIFCONF is not defined
12116 1998-11-18 15:25 millert
12118 * config.h.in: define BSD_COMP for svr4
12120 1998-11-17 23:16 millert
12122 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12123 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12124 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12125 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c: more
12128 1998-11-17 23:10 millert
12130 * configure.in: kill check for sockio,h
12132 1998-11-17 23:10 millert
12134 * config.h.in: no more HAVE_SYS_SOCKIO_H
12136 1998-11-17 22:51 millert
12138 * check.c, check_sia.c, find_path.c, getcwd.c, getspwuid.c,
12139 goodpath.c, interfaces.c, logging.c, lsearch.c, parse.c,
12140 parse.lex, parse.yacc, putenv.c, secureware.c, strdup.c, sudo.c,
12141 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12144 1998-11-16 17:38 millert
12146 * sudo.c: add missing inform_user()
12148 1998-11-13 19:21 millert
12150 * find_path.c: return NOT_FOUND if given fully qualified path and
12151 it does not exist previously it would perror(ENOENT) which
12152 bypasses the option to not leak path info
12154 1998-11-13 19:20 millert
12156 * configure.in: for kerb5, check for -lkerb4, fall back on -lkrb
12157 for kerb, check for -ldes
12159 1998-11-13 14:19 millert
12161 * INSTALL: tty tickets are user:tty now
12163 1998-11-13 14:10 millert
12165 * check.c: when using tty tickets make it user:tty not user.tty as
12166 a username could have a '.' in it
12168 1998-11-09 19:15 millert
12170 * sudo.c: add "ignoring foo found in ." for auth successful case
12172 1998-11-09 17:57 millert
12174 * sudo.c: add missing printf param
12176 1998-11-08 15:56 millert
12178 * INSTALL, config.h.in, configure.in, find_path.c, sudo.c, sudo.h:
12179 go back to printing "command not found" unless
12180 --disable-path-info specified. Also, tell user when we ignore
12181 '.' in their path and it would have been used but for
12184 1998-11-08 13:51 millert
12186 * check.c, sudo.c: Only one space after a colon, not two, in
12189 1998-11-05 12:59 millert
12191 * sudo.pod: document setting $USER
12193 1998-11-04 22:24 millert
12195 * check.c: fix bugs with prompt expansion
12197 1998-11-04 21:21 millert
12199 * sudo.c: set $USER for root too
12201 1998-11-04 17:13 millert
12203 * getspwuid.c: typo
12205 1998-11-04 17:07 millert
12207 * configure.in: HP-UX's iscomsec is in -lsec, not libc
12209 1998-11-03 22:24 millert
12211 * configure.in: remove some entries in the OS case statement that
12214 1998-11-03 22:19 millert
12216 * TROUBLESHOOTING: add "cd" section and flush out syslog section
12218 1998-11-03 20:51 millert
12220 * Makefile.in: no more sudo-lex.yy.c
12222 1998-11-03 20:50 millert
12224 * check_sia.c: add custom prompt support
12226 1998-11-03 20:40 millert
12228 * sudo.c: kill perror("malloc") since we already have a good error
12229 messages pw_ent -> pw for brevity set $USER if -u specified
12231 1998-11-03 20:39 millert
12233 * parse.c: kill perror("malloc") since we already have a good error
12234 messages pw_ent -> pw for brevity when checking if %group
12235 matches, look up user in password file so that %groups works in a
12238 1998-11-03 20:39 millert
12240 * logging.c, parse.yacc: kill perror("malloc") since we already
12241 have a good error messages
12243 1998-11-03 20:38 millert
12245 * check.c, getspwuid.c, interfaces.c, testsudoers.c: kill
12246 perror("malloc") since we already have a good error messages
12247 pw_ent -> pw for brevity
12249 1998-11-03 15:03 millert
12251 * tgetpass.c: the prompt is expanded before tgetpass is called
12253 1998-11-03 15:03 millert
12255 * sudo.h: tgetpass now has the same args as getpass again
12257 1998-11-03 15:02 millert
12259 * getspwuid.c: add iscomsec, issecure support
12261 1998-11-03 15:02 millert
12263 * check.c: we now expand any %h or %u in the prompt before passing
12266 1998-11-03 14:58 millert
12268 * configure.in: add check for syslog(3) in -lsocket, -lnsl, -linet
12270 1998-11-03 14:56 millert
12272 * config.h.in: add HAVE_ISCOMSEC and HAVE_ISSECURE
12274 1998-11-03 14:55 millert
12276 * configure.in: add check for iscomsec in HP-UX
12278 1998-11-03 14:51 millert
12280 * configure.in: check for issecure if we have getpwanam on SunOS
12281 some options are incompatible with DUNIX SIA check for dispcrypt
12284 1998-10-25 15:21 millert
12286 * config.h.in: add HAVE_DISPCRYPT
12288 1998-10-25 15:21 millert
12290 * secureware.c: add back support for non-dispcrypt based checking
12293 1998-10-25 00:51 millert
12295 * INSTALL: sia changes
12297 1998-10-25 00:48 millert
12299 * configure.in: SIA becomes the default on Digital UNIX now havbe
12300 --disable-sia to turn it off...
12302 1998-10-24 23:52 millert
12304 * check.c: move local includes after system ones
12306 1998-10-24 19:28 millert
12308 * check.c, check_sia.c, sudo.h: add pass_warn() which prints out
12309 INCORRECT_PASSWORD or an insult to stderr
12311 1998-10-24 19:07 millert
12313 * check_sia.c: fix while loop in sia_attempt_auth() that checks the
12314 password. Only the first iteration was working.
12316 1998-10-21 21:00 millert
12318 * aclocal.m4: don't trust UID_MAX or MAXUID
12320 1998-10-21 20:35 millert
12322 * configure.in: fix two pastos
12324 1998-10-21 20:30 millert
12326 * configure.in: fix typo
12328 1998-10-21 20:19 millert
12330 * getspwuid.c, secureware.c: init crypt_type to INT_MAX since it is
12331 legal to be negative in DUNX 5.0
12333 1998-10-21 20:15 millert
12335 * configure.in: for secureware on dunix, use -lsecurity -ldb -laud
12336 -lm but check for -ldb since DUNX < 4.0 lacks it
12338 1998-10-21 19:50 millert
12340 * check.c, compat.h, config.h.in, configure.in, getspwuid.c,
12341 secureware.c, sudo.c, tgetpass.c: getprpwuid is broken in HP-UX
12342 10.20 at least (it sleeps for 2 minutes if the shadow files don't
12345 1998-10-20 17:22 millert
12347 * INSTALL: updated --with-editor blurb
12349 1998-10-20 17:21 millert
12351 * TROUBLESHOOTING: tell how to put sudoers in a different dir
12353 1998-10-20 16:22 millert
12355 * configure.in: add missing quotes around $with_editor
12357 1998-10-20 14:00 millert
12359 * configure.in: typo in --with-editor bits
12361 1998-10-20 01:24 millert
12363 * INSTALL: I don't expect it to work on Solaris
12365 1998-10-20 01:24 millert
12367 * check.c: add back security/pam_misc.h
12369 1998-10-19 17:13 millert
12371 * INSTALL: remove dunix note since configure checks for this now
12373 1998-10-19 16:30 millert
12375 * configure.in: add check for broken dunix prot.h (4.0 < 4.0D is
12378 1998-10-19 14:32 millert
12380 * getspwuid.c, secureware.c, tgetpass.c: new dunix shadow code, use
12383 1998-10-19 14:32 millert
12385 * config.h.in: add HAVE_INITPRIVS
12387 1998-10-19 14:31 millert
12389 * sudo.c: call initprivs() if we have it for getprpwuid later on
12391 1998-10-19 14:30 millert
12393 * Makefile.in: clean pathnames.h too
12395 1998-10-19 14:28 millert
12397 * configure.in: quote "Sorry, try again." with [] since it has a
12398 comma in it set LIBS when we add stuff to SUDO_LIBS set
12399 SECUREWARE when we find getprpwuid() so we can check for
12400 bigcrypt, set_auth_parameters, and initprivs later.
12402 1998-10-19 13:48 millert
12404 * INSTALL: update Digital UNIX note about acl.h
12406 1998-10-18 20:26 millert
12408 * INSTALL: add --with-sia --without-root-sudo ->
12409 --disable-root-sudo some reordering
12411 1998-10-18 20:22 millert
12413 * secureware.c: add whitespace
12415 1998-10-18 20:22 millert
12417 * Makefile.in, check.c, config.h.in, configure.in, logging.c,
12418 sudo.h: add SIA support
12420 1998-10-18 20:21 millert
12422 * check_sia.c: Initial revision
12424 1998-10-18 19:42 millert
12426 * configure.in: when checking for -lsocket, -lnsl, and -linet,
12427 check for the specific functions we need from them.
12429 1998-10-18 19:10 millert
12431 * config.h.in, sudo.h: move Syslog_* defs into sudo.h
12433 1998-10-18 18:15 millert
12435 * sudo.h, Makefile.in: added check_secureware
12437 1998-10-18 18:12 millert
12439 * configure.in: finished adding AC_MSG_CHECKING and AC_MSG_RESULT
12442 1998-10-18 18:00 millert
12444 * insults.h: don't define CLASSIC_INSULTS and CSOPS_INSULTS if no
12445 other sets defined. configure now does that for us
12447 1998-10-18 17:45 millert
12449 * configure.in: move some --with options around change a bunch of
12450 echo's to AC_MSG_CHECKING, AC_MSG_RESULT pairs
12452 1998-10-18 01:09 millert
12454 * configure.in: change $with_foo-bar -> $with_foo_bar kill extra "
12455 that caused a syntax error add some echo verbage
12457 1998-10-17 18:08 millert
12459 * check.c: moved SecureWare stuff into secureware.c
12461 1998-10-17 18:07 millert
12463 * secureware.c: Initial revision
12465 1998-10-17 17:02 millert
12467 * INSTALL: update url to solaris gcc bins
12469 1998-10-17 16:39 millert
12471 * INSTALL: change option formatter and flesh out someentries
12473 1998-10-17 16:18 millert
12475 * sudo.pod, visudo.pod, TROUBLESHOOTING: environmental variable ->
12476 environment variable
12478 1998-10-17 16:01 millert
12480 * BUGS: everything is now done via configure
12482 1998-10-17 16:00 millert
12484 * README: prev rev was 1.5.6
12486 1998-10-17 00:33 millert
12488 * Makefile.in: passing SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID
12491 1998-10-17 00:32 millert
12493 * config.h.in: SUDOERS_MODE, SUDOERS_UID, SUDOERS_GID now come from
12496 1998-10-17 00:31 millert
12498 * Makefile.in: merge OSDEFS and OPTIONS into DEFS get sudoers_uid,
12499 sudoers_gid, sudoers_mode from configure
12501 1998-10-17 00:30 millert
12503 * configure.in: SUDOERS_MODE, SUDOERS_UID, and SUDOERS_GID now get
12504 substituted into the Makefile, not config.h
12506 1998-10-17 00:30 millert
12508 * INSTALL: document all --with/--enable options
12510 1998-10-15 02:25 millert
12512 * insults.h: options.h is no more
12514 1998-10-15 02:25 millert
12516 * config.h.in: assimilated options.h
12518 1998-10-15 02:24 millert
12520 * configure.in: moved options from options.h to configure
12522 1998-10-15 01:41 millert
12524 * check.c, find_path.c, getspwuid.c, goodpath.c, interfaces.c,
12525 logging.c, parse.c, parse.lex, parse.yacc, sudo.c, sudo.pod,
12526 sudo_setenv.c, visudo.c: no more options.h
12528 1998-10-15 01:39 millert
12530 * INSTALL, Makefile.in, PORTING, TROUBLESHOOTING: remove references
12533 1998-10-15 01:32 millert
12535 * interfaces.c, dce_pwent.c, sudo.c: kill sys/time.h
12537 1998-10-15 00:10 millert
12539 * tgetpass.c: if select return < -1 still prompt for pw
12541 1998-10-15 00:03 millert
12543 * options.h: convert LOGGING, LOGFAC, MAXLOGFILELEN,
12544 IGNORE_DOT_PATH into configure options
12546 1998-10-14 23:57 millert
12548 * parse.c: FAST_MATCH is no longer an optino
12550 1998-10-14 23:52 millert
12552 * check.c: remove_timestamp() if timestamp is preposterous
12554 1998-10-14 23:36 millert
12556 * options.h: convert more options to --with/--enable
12558 1998-10-14 23:36 millert
12560 * INSTALL, aclocal.m4: logfile -> logpath
12562 1998-10-14 23:31 millert
12564 * configure.in: convert more options into --with and --enable
12566 1998-10-14 23:28 millert
12568 * tgetpass.c: catch EINTR in select and restart
12570 1998-10-14 23:15 millert
12572 * logging.c: sys/errno -> errno
12574 1998-09-24 11:40 millert
12576 * sudo.c: UMASK -> SUDO_UMASK.
12578 1998-09-24 11:36 millert
12580 * check.c, logging.c: time.h, not sys/time.h
12582 1998-09-21 19:52 millert
12584 * logging.c: MAILER -> _PATH_SENDMAIL
12586 1998-09-21 00:06 millert
12588 * INSTALL, configure.in: no more --with-C2, now it is
12591 1998-09-21 00:00 millert
12593 * aclocal.m4, check.c, compat.h, config.h.in, configure.in,
12594 getspwuid.c, sudo.c, tgetpass.c: new shadow password scheme.
12595 Always include shadow support if the platform supports it and the
12596 user did not disable it via configure
12598 1998-09-20 19:48 millert
12600 * configure.in: --with-getpass -> --{enable,disable}-tgetpass
12602 1998-09-20 19:16 millert
12604 * Makefile.in: pathnames.h -> pathnames.h.in
12606 1998-09-20 19:14 millert
12608 * check.c: fix version string
12610 1998-09-20 19:12 millert
12612 * check.c: move pam_conv to be static to auth function remove
12613 pam_misc.h (solaris doesn't have one)
12615 1998-09-20 19:10 millert
12617 * aclocal.m4: _CONFIG_PATH_* -> _PATH_* or _PATH_SUDO_* kill
12620 1998-09-20 19:10 millert
12622 * configure.in: munge pathnames.h.in -> pathnames.h kill
12625 1998-09-20 19:10 millert
12627 * pathnames.h.in: convert to pathnames.h.in
12629 1998-09-18 20:20 millert
12631 * configure.in: fix typo in sysv4 matching case /.
12633 1998-09-18 01:29 millert
12635 * check.c: pam stuff needs to run as root, not user, for shadow
12638 1998-09-17 12:26 millert
12640 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
12641 dce_pwent.c, find_path.c, getspwuid.c, goodpath.c, ins_2001.h,
12642 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
12643 logging.c, options.h, parse.c, parse.lex, parse.yacc,
12644 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12645 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c,
12646 BUGS, INSTALL, README, configure.in: updated version
12648 1998-09-17 12:13 millert
12650 * check.c: user version.h for long message
12652 1998-09-17 11:53 millert
12654 * check.c: this is version 1.5.6
12656 1998-09-16 13:42 millert
12658 * Makefile.in: remove errant backslash
12660 1998-09-14 22:25 millert
12662 * options.h, parse.yacc, pathnames.h.in: fix version string
12664 1998-09-14 22:02 millert
12666 * BUGS, CHANGES, TODO: updtaed for 1.5.6
12668 1998-09-14 22:02 millert
12670 * RUNSON: updated for 1.5.6
12672 1998-09-14 11:48 millert
12674 * interfaces.c: kill unused localhost_mask var copy if name to
12675 ifr_tmp after we zero it
12677 1998-09-13 15:50 millert
12679 * INSTALL: Better description of new vs. old sudoers modes fix some
12680 typos better description of /usr/ucb/cc gotchas on slowaris
12682 1998-09-13 15:49 millert
12684 * Makefile.in: add sample.pam
12686 1998-09-13 15:32 millert
12688 * sudo.c: set NewArgv[0] to user_shell, not basename(user_shell)
12690 1998-09-12 11:10 millert
12692 * README: mention TROUBLESHOOTING more fix some typos
12694 1998-09-11 20:30 millert
12696 * configure.in: move --enable/--disable to be after --with
12698 1998-09-11 20:30 millert
12700 * INSTALL: document --enable/--disable
12702 1998-09-11 20:26 millert
12704 * INSTALL: document --with-pam
12706 1998-09-11 19:47 millert
12708 * configure.in: Add message for pam users
12710 1998-09-11 19:27 millert
12712 * sample.pam: Initial revision
12714 1998-09-11 19:23 millert
12716 * config.h.in: fix HAVE_PAM
12718 1998-09-11 19:19 millert
12720 * check.c, config.h.in, configure.in: pam support, from Gary Calvin
12721 <GCalvin@kenwoodusa.com>
12723 1998-09-10 18:51 millert
12725 * config.h.in: add HOST_IN_LOG and WRAP_LOG
12727 1998-09-10 18:51 millert
12729 * logging.c: add WRAP_LOG and HOST_IN_LOG
12731 1998-09-10 18:37 millert
12733 * configure.in: add --enable-log-host and --enable-log-wrap
12735 1998-09-10 18:32 millert
12737 * aclocal.m4: use AC_DEFINE_UNQUOTED for --with-logfile and
12740 1998-09-08 20:45 millert
12742 * compat.h: add howmany macro
12744 1998-09-08 20:43 millert
12746 * tgetpass.c: include sys/param.h to get howmany macro
12748 1998-09-07 20:42 millert
12750 * OPTIONS, options.h, parse.yacc, sudo.c, testsudoers.c, visudo.c:
12753 1998-09-07 12:51 millert
12755 * fnmatch.c: bring in stdio.h for NULL
12757 1998-09-07 12:50 millert
12759 * aclocal.m4: allow /bin/{ksh,bach} and /usr/bin/{ksh,bash} as sh
12761 1998-09-07 12:43 millert
12763 * sudo.c: use HAVE_SET_AUTH_PARAMETERS
12765 1998-09-07 12:42 millert
12767 * config.h.in: add HAVE_SET_AUTH_PARAMETERS
12769 1998-09-07 12:41 millert
12771 * configure.in: add *-*-hiuxmpp* add test for set_auth_parameters()
12774 1998-09-07 12:39 millert
12776 * config.sub: add support for HI-UX/MPP SR220001 02-03 0 SR2201
12778 1998-09-07 12:06 millert
12780 * interfaces.c: initialize previfname
12782 1998-09-07 11:51 millert
12784 * interfaces.c: Don't use SIOCGIFADDR, we don't need it Use
12785 SIOCGIFFLAGS if we have it check ifr_flags against IFF_UP and
12786 IFF_LOOPBACK instead of kludging it
12788 1998-09-07 11:49 millert
12790 * configure.in: typo
12792 1998-09-07 00:01 millert
12794 * Makefile.in: don't need special build line for sudo.tab.o
12796 1998-09-06 23:58 millert
12798 * Makefile.in: don't clean sudo.tab.[ch]
12800 1998-09-06 23:48 millert
12802 * sudo.c: Sudo should prompt for a password before telling the user
12803 that a command could not be found.
12805 1998-09-06 23:47 millert
12809 1998-09-06 23:25 millert
12811 * INSTALL, README: no longer require yacc
12813 1998-09-06 23:19 millert
12815 * Makefile.in: typo
12817 1998-09-06 23:18 millert
12819 * Makefile.in: y.tab -> sudo.tab include pre-yacc'd parse.yacc
12821 1998-09-06 23:09 millert
12823 * parse.lex: include sudo.tab.h, not y.tab.h don't break out of
12824 command args if you get a '='
12826 1998-09-06 22:59 millert
12828 * insults.h: fix version ,
12830 1998-09-06 22:57 millert
12832 * compat.h, ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h:
12835 1998-09-06 22:55 millert
12837 * getcwd.c: getcwd(3) from OpenBSD for those without it.
12839 1998-09-06 22:51 millert
12841 * sudo.h: HAVE_GETWD -> HAVE_GETCWD
12843 1998-09-06 22:49 millert
12845 * configure.in: pretend sunos doesn't have getcwd(3) since it opens
12848 1998-09-06 22:41 millert
12850 * parse.c: use NAMLEN() macro
12852 1998-09-06 22:34 millert
12854 * fnmatch.c: remove duplicate include of string.h
12856 1998-09-06 22:28 millert
12858 * configure.in: call SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12860 1998-09-06 22:28 millert
12862 * aclocal.m4: add SUDO_TYPE_DEV_T and SUDO_TYPE_INO_T
12864 1998-09-06 22:28 millert
12866 * config.h.in: add dev_t and ino_t
12868 1998-07-28 12:44 millert
12870 * check.c: fix OTP_ONLY for opie
12872 1998-06-24 12:22 millert
12874 * testsudoers.c, tgetpass.c: include stdlib.h for malloc proto
12876 1998-05-19 00:10 millert
12878 * Makefile.in: make update_version saner
12880 1998-05-18 23:32 millert
12882 * config.h.in: add HAVE_WAITPID, HAVE_WAIT3, and sudo_waitpid()
12884 1998-05-18 23:32 millert
12886 * configure.in: check for waitpid and wait3 or no waitpid
12888 1998-05-18 23:31 millert
12890 * logging.c: used waitpid or wait3 if we have 'em
12892 1998-05-02 14:16 millert
12894 * visudo.c: fix some fprintf args, ariel@oz.engr.sgi.com (Ariel
12897 1998-04-27 20:09 millert
12899 * configure.in: don't need to explicately mention -lsocket -lnsl
12902 1998-04-25 01:56 millert
12904 * configure.in: dynix should not link with -linet
12906 1998-04-10 15:32 millert
12908 * INSTALL: mention that HP-UX doesn't ship with yacc
12910 1998-04-06 22:35 millert
12912 * check.c: ignore kerberos if we can't get the local realm
12914 1998-04-05 23:37 millert
12916 * configure.in, BUGS, INSTALL, README: ++version
12918 1998-04-05 23:36 millert
12922 1998-04-05 23:35 millert
12924 * Makefile.in, emul/utime.h, check.c, config.h.in, dce_pwent.c,
12925 find_path.c, getspwuid.c, getcwd.c, goodpath.c, interfaces.c,
12926 logging.c, parse.c, parse.lex, putenv.c, strdup.c, sudo.c,
12927 sudo.h, sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c,
12928 visudo.c: updated version
12930 1998-04-05 23:34 millert
12932 * check.c, sudo.h: fix version
12934 1998-04-05 23:33 millert
12936 * getcwd.c: don't use popen/pclose. Do it inline.
12938 1998-04-05 23:25 millert
12940 * lsearch.c: add rcsid
12942 1998-04-05 23:21 millert
12946 1998-04-05 23:17 millert
12948 * sudo.h, pathnames.h.in, compat.h, options.h, ins_2001.h,
12949 insults.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
12950 check.c: updated version
12952 1998-04-05 23:15 millert
12954 * check.c, find_path.c, parse.c, sudo.c, testsudoers.c: MAX* + 1 ->
12957 1998-04-05 23:14 millert
12959 * Makefile.in: getwd.c -> getcwd.c
12961 1998-04-05 22:49 millert
12963 * config.h.in: kill HAVE_GETWD
12965 1998-04-05 22:49 millert
12967 * configure.in: getcwd, not getwd
12969 1998-04-05 22:48 millert
12971 * getcwd.c: use MAX* not MAX* + 1 always run pwd as using getwd()
12972 defeats the purpose
12974 1998-03-31 00:15 millert
12976 * OPTIONS, options.h: add STUB_LOAD_INTERFACES
12978 1998-03-31 00:05 millert
12980 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
12981 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
12982 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
12983 interfaces.c, logging.c, options.h, parse.c, parse.lex,
12984 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
12985 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
12988 1998-03-30 23:54 millert
12990 * configure.in: support *-ccur-sysv4 and fix two typos
12992 1998-03-27 19:52 millert
12994 * configure.in: don't echo about with_logfile and with_timedir
12996 1998-03-27 19:49 millert
12998 * INSTALL: document --with-logfile and --with-timedir
13000 1998-03-27 19:46 millert
13002 * aclocal.m4: support --with-logfile and --with-timedir
13004 1998-03-27 19:46 millert
13006 * configure.in: Add --with-logfile and --with-timedir
13008 1998-03-27 19:27 millert
13010 * sudo.c: change size computation of NewArgv for UNICOS
13012 1998-02-18 20:10 millert
13014 * configure.in: treate -*-sysv4* like *-*-svr4
13016 1998-02-18 18:19 millert
13018 * configure.in: fix spacing for --with-authenticate help
13020 1998-02-18 16:39 millert
13022 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13023 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13024 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13025 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13026 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13027 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13030 1998-02-18 16:23 millert
13032 * parse.yacc: fix off by one error in push macro
13034 1998-02-17 01:15 millert
13036 * configure.in: removed bogus alloca hack
13038 1998-02-17 01:15 millert
13040 * check.c: added AIX 4.x authenticate() support
13042 1998-02-17 01:11 millert
13044 * parse.yacc: include alloca.h if using bison and not gcc and it
13045 exists. fixes an alloca problem on hpux 10.x
13047 1998-02-17 00:39 millert
13049 * INSTALL: mention --with-authenticate
13051 1998-02-17 00:37 millert
13053 * configure.in: added AIX authenticate() support
13055 1998-02-17 00:22 millert
13057 * config.h.in: add HAVE_AUTHENTICATE
13059 1998-02-16 23:58 millert
13061 * interfaces.c: dynamically size ifconf buffer
13063 1998-02-16 23:56 millert
13065 * configure.in: quote '[' and ']'
13067 1998-02-16 21:42 millert
13069 * Makefile.in, emul/utime.h, check.c, compat.h, config.h.in,
13070 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13071 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13072 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13073 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13074 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13077 1998-02-16 19:06 millert
13079 * visudo.pod: add ERRORS section
13081 1998-02-16 18:57 millert
13083 * TROUBLESHOOTING: add busy stmp file explanation
13085 1998-02-15 18:49 millert
13087 * configure.in: the name of the cached var that signals whether or
13088 not you are cross compiling changed. It is now
13089 ac_cv_prog_cc_cross
13091 1998-02-11 16:26 millert
13093 * INSTALL: mention glibc 2.07 is fixed wrt lsearch()\.
13095 1998-02-06 21:55 millert
13097 * sample.sudoers, sudoers.pod: better example of su but not root su
13099 1998-02-06 15:49 millert
13101 * Makefile.in, check.c, emul/utime.h, compat.h, config.h.in,
13102 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13103 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13104 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13105 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13106 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, visudo.c:
13109 1998-02-06 15:48 millert
13111 * Makefile.in: correct regexp for updating version
13113 1998-02-06 14:05 millert
13115 * tgetpass.c: remove bogus flush of stderr spew prompt before
13116 turning off echo. Seems to fix a weird problem where if sudo
13117 complained about a bogus stamp file the user would sometimes not
13118 have a chance to enter a password
13120 1998-02-06 14:05 millert
13122 * check.c: fix bogus flush of stderr
13124 1998-02-05 19:19 millert
13126 * sudo.c: close fd's <=2 not <=3 and move that chunk of code up
13128 1998-02-05 19:18 millert
13130 * configure.in: support hpux1[0-9] not just hpux10
13132 1998-01-30 14:59 millert
13134 * parse.c: set sudoers_fp to nil after closing
13136 1998-01-24 01:05 millert
13138 * config.guess, config.sub: updated from autoconf 2.12
13140 1998-01-24 00:50 millert
13142 * configure.in: add *-*-svr4 rule
13144 1998-01-22 22:53 millert
13146 * tgetpass.c: fix select usage for high fd's (dynamically allocate
13149 1998-01-22 22:49 millert
13151 * check.c: kill extra whitespace
13153 1998-01-22 19:28 millert
13155 * sudo.c: do an initgroups() before running a command, unless the
13156 target user is root.
13158 1998-01-22 12:22 millert
13160 * TROUBLESHOOTING: tell people to use tabs, not spaces, in
13163 1998-01-21 01:56 millert
13165 * parse.lex, Makefile.in, config.h.in, getwd.c, strdup.c, putenv.c,
13166 emul/utime.h, testsudoers.c, utime.c, dce_pwent.c: updated
13169 1998-01-21 01:32 millert
13171 * goodpath.c, sudo_setenv.c, interfaces.c, tgetpass.c, visudo.c:
13174 1998-01-21 01:29 millert
13176 * sudo.h, pathnames.h.in, options.h, compat.h, insults.h,
13177 ins_2001.h, ins_classic.h, ins_goons.h, ins_csops.h, parse.yacc,
13178 check.c, getspwuid.c, find_path.c, logging.c, parse.c, sudo.c:
13181 1998-01-21 01:20 millert
13183 * Makefile.in: more tweaks to update_version
13185 1998-01-21 01:19 millert
13187 * Makefile.in: fixed up update_version rule
13189 1998-01-21 00:55 millert
13191 * configure.in: ++version
13193 1998-01-21 00:53 millert
13195 * Makefile.in: removed supe of check.c
13197 1998-01-21 00:51 millert
13199 * INSTALL: ++version I missed
13201 1998-01-21 00:51 millert
13205 1998-01-21 00:48 millert
13207 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13208 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13209 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13210 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13211 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13212 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13213 visudo.c, emul/utime.h, BUGS, INSTALL, README: updated version
13215 1998-01-21 00:47 millert
13217 * CHANGES: updated for 1.5.5
13219 1998-01-21 00:35 millert
13221 * Makefile.in: add rules to update version stuff in files so I
13222 don't need to do it by hand
13224 1998-01-21 00:04 millert
13226 * sudo.h: sudoers_fp is now extern
13228 1998-01-21 00:03 millert
13230 * sudo.c: in check_sudoers, cache the sudoers file handle in
13231 sudoers_fp so we don't have to open it again in the parse. This
13232 may help with weird solaris problems where EAGAIN sometime
13235 1998-01-21 00:02 millert
13237 * parse.c: sudoers file open is now done only in check_sudoers() so
13238 we just do a rewind() instead of an open. May help people on
13239 solaris who were getting EAGAIN.
13241 1998-01-16 11:43 millert
13243 * INSTALL: mention that newer glibc is fixed
13245 1998-01-13 12:58 millert
13247 * sudo.c: newer irix uses _RLDN32_* envariables for 32-bit binaries
13248 so ignore _RLD* instead of _RLD_*
13250 1998-01-13 10:32 millert
13254 1998-01-13 10:19 millert
13256 * parse.c: fix that bug for real
13258 1998-01-13 02:39 millert
13260 * INSTALL: document Linux's libc6 brokenness.
13262 1998-01-13 02:00 millert
13264 * parse.yacc: -Wall
13266 1998-01-13 01:22 millert
13270 1998-01-13 00:50 millert
13272 * TROUBLESHOOTING: remind people to HUP syslogd
13274 1998-01-13 00:05 millert
13276 * Makefile.in: add -O flag to tar
13278 1998-01-13 00:00 millert
13280 * TODO, RUNSON: updated
13282 1998-01-12 23:59 millert
13284 * sudo.pod: remove author's email addr. people should mail
13287 1998-01-12 23:49 millert
13289 * INSTALL: fix version
13291 1998-01-12 23:48 millert
13293 * README, check.c, compat.h, config.h.in, configure.in,
13294 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13295 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13296 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13297 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13298 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13299 visudo.c: ++version
13301 1998-01-12 23:44 millert
13305 1998-01-12 23:42 millert
13307 * INSTALL, Makefile.in: ++version
13309 1998-01-12 23:41 millert
13311 * CHANGES: updated fort 1.5.4
13313 1998-01-12 23:41 millert
13315 * check.c: exit(1) if user enters no passwd
13317 1998-01-12 23:37 millert
13321 1998-01-12 23:10 millert
13323 * parse.c: commands can start with ./* not just /* -- fixes a
13324 serious security hole.
13326 1997-12-21 18:17 millert
13328 * sudo.c: Don't set the tty variable to NULL when we lack a tty,
13329 leave it as "unknown".
13331 1997-11-23 13:29 millert
13333 * sample.sudoers: fix usage of (username) in conjunction with , and
13336 1997-11-23 13:28 millert
13338 * visudo.c: catch the case where the user is not in the passwd file
13340 1997-11-23 13:24 millert
13342 * tgetpass.c: use fileno(input) + 1 instead of getdtablesize() as
13343 the nfds arg to select(2)
13345 1997-11-23 01:53 millert
13347 * sudo.c: define tty global to an initial value to avoid dumping
13348 core in logging functions when passwd file is unavailable.
13350 1997-11-23 01:51 millert
13352 * sudo.c: do the set_perms(PERM_USER, sudo_mode) after we have
13353 gotten the passwd entry
13355 1997-11-23 00:21 millert
13357 * sudo.pod: talk about problem of ALL
13359 1997-10-10 00:54 millert
13361 * README: new web location
13363 1997-10-10 00:54 millert
13365 * INSTALL: fdesc bug is fixed in Open/Net BSD
13367 1997-10-10 00:52 millert
13369 * HISTORY: updates from Nieusma
13371 1997-10-09 18:37 millert
13373 * dce_pwent.c: move compat.h after the system includes
13375 1997-08-06 14:58 millert
13377 * logging.c: save errno from being clobbered by wait(). From Theo
13379 1997-05-21 11:57 millert
13381 * compat.h: fix an occurence of setresuid -> setreuid (typo)
13383 1997-03-19 17:45 millert
13385 * install-sh: check for path to strip
13387 1997-01-15 19:05 millert
13389 * logging.c: deal with maxfilelen < 0 case
13391 1997-01-15 19:05 millert
13393 * OPTIONS: fixed descriptin
13395 1996-12-11 23:10 millert
13397 * sudo.c: correct error message if mode/owner wrong and not
13398 statable by owner but is statable by root.
13400 1996-11-23 02:18 millert
13402 * config.guess, config.sub: autoconf 2.11
13404 1996-11-16 14:42 millert
13406 * CHANGES, RUNSON, TODO: sudo 1.5.3.
13408 1996-11-14 15:08 millert
13410 * sudo.h, parse.yacc: command_alias -> generic_alias
13412 1996-11-13 22:50 millert
13414 * sample.sudoers: added Runas_Alias example and fixed syntax errors
13416 1996-11-13 22:50 millert
13418 * OPTIONS, options.h: updated MAILSUBJECT
13420 1996-11-13 22:49 millert
13422 * logging.c: added %h expansion
13424 1996-11-13 21:37 millert
13426 * Makefile.in, check.c, compat.h, config.h.in, dce_pwent.c,
13427 find_path.c, getspwuid.c, getwd.c, goodpath.c, ins_2001.h,
13428 ins_classic.h, ins_csops.h, ins_goons.h, insults.h, interfaces.c,
13429 logging.c, options.h, parse.c, parse.lex, parse.yacc,
13430 pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13431 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13432 visudo.c, INSTALL, README, configure.in: ++version
13434 1996-11-13 20:01 millert
13436 * emul/utime.h, BUGS: ++version
13438 1996-11-13 19:45 millert
13440 * sudoers.pod: document Runas_Alias
13442 1996-11-13 19:22 millert
13444 * visudo.pod: q (uid) -> Q
13446 1996-11-13 19:21 millert
13448 * visudo.c: buffer oflow checking q (uit) -> Q if yyparse() fails
13451 1996-11-13 19:05 millert
13453 * parse.yacc: add size params to sprintf
13455 1996-11-13 19:04 millert
13457 * parse.lex: allow trailing space after '\\' but before '\n'
13459 1996-11-13 19:04 millert
13461 * find_path.c: off by one error in path size check
13463 1996-11-13 19:03 millert
13465 * check.c: sprintf paranoia
13467 1996-11-12 11:59 millert
13469 * parse.yacc: fixed more_aliases
13471 1996-11-12 11:58 millert
13473 * visudo.c: now warns if killed by signal ./
13475 1996-11-11 10:49 millert
13477 * parse.yacc: fix Runas_Alias stuff Alias's in runas list now get
13478 expanded (but it is gross)
13480 1996-11-10 20:32 millert
13482 * sudo.c: Can now deal with SUDOERS_UID == 0 and SUDOERS_MODE ==
13485 1996-11-10 20:08 millert
13487 * parse.yacc: add Runas_Alias support change FOO to FOO_ALIAS (ie:
13490 1996-11-10 20:02 millert
13492 * parse.lex: Add Runas_Alias and simplify a rule.
13494 1996-11-10 19:15 millert
13496 * parse.yacc: always store User_Alias's since they can be used
13497 inside of a runas list. Sigh. Really need a Runas_Alias
13500 1996-10-30 18:04 millert
13502 * visudo.c: deal with case where there is no sudoers file
13504 1996-10-11 23:01 millert
13506 * TROUBLESHOOTING: added one
13508 1996-10-10 22:11 millert
13510 * HISTORY, testsudoers.c: developement -> development
13512 1996-10-10 22:08 millert
13514 * INSTALL: added a note
13516 1996-10-10 20:36 millert
13518 * RUNSON: for 1.5.2
13520 1996-10-10 20:36 millert
13524 1996-10-10 00:56 millert
13526 * PORTING: removed seteuid() notes
13528 1996-10-09 13:37 millert
13530 * compat.h: better seteuid() emulatino
13532 1996-10-09 13:36 millert
13534 * configure.in: added check for seteuid
13536 1996-10-09 13:36 millert
13538 * config.h.in: added HAVE_SETEUID
13540 1996-10-08 19:22 millert
13542 * configure.in: first stab at sequent support
13544 1996-10-08 19:21 millert
13546 * config.h.in: added HAVE_SYS_SELECT_H
13548 1996-10-08 19:21 millert
13550 * compat.h: sequent -> _SEQUENT_
13552 1996-10-08 19:11 millert
13554 * compat.h: added seteuid() macro for DYNIX
13556 1996-10-08 18:54 millert
13558 * tgetpass.c: _AIX -> HAVE_SYS_SELECT_H
13560 1996-10-07 01:05 millert
13562 * emul/utime.h, check.c, compat.h, dce_pwent.c, find_path.c,
13563 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13564 ins_csops.h, ins_goons.h, insults.h, interfaces.c, options.h,
13565 pathnames.h.in, version.h, BUGS, INSTALL, Makefile.in, OPTIONS,
13566 README, config.h.in, logging.c, parse.c, parse.lex, parse.yacc,
13567 putenv.c, strdup.c, sudo_setenv.c, testsudoers.c, utime.c,
13568 visudo.c, tgetpass.c: ++version
13570 1996-10-07 00:59 millert
13572 * sudo.pod: added -H and SUDO_PS1
13574 1996-10-07 00:55 millert
13576 * configure.in: use SUDO_FUNC_FNMATCH
13578 1996-10-07 00:54 millert
13580 * aclocal.m4: added SUDO_FUNC_FNMATCH
13582 1996-10-07 00:53 millert
13584 * sudo.c: added -H flag
13586 1996-10-07 00:53 millert
13588 * sudo.h: added MODE_RESET_HOME /
13590 1996-10-05 00:00 millert
13592 * INSTALL: mention OPIE
13594 1996-10-04 23:59 millert
13596 * configure.in: added opie support
13598 1996-10-04 23:59 millert
13600 * check.c: added HAVE_OPIE and changed to *_OTP_*
13602 1996-10-04 23:58 millert
13604 * compat.h, config.h.in: added HAVE_OPIE
13606 1996-10-04 23:58 millert
13608 * OPTIONS, options.h: SKEY -> OTP
13610 1996-10-03 23:27 millert
13612 * check.c: moved fclose() in skey stuff.
13614 1996-10-03 19:53 millert
13616 * putenv.c: index -> strchr remove unnecesary stuff
13618 1996-10-03 19:43 millert
13620 * check.c: now call skeychallenge() to get challenge instead of
13621 making one up ourselves. this way, we get extra goodies in the
13624 1996-09-10 00:32 millert
13626 * CHANGES: added one
13628 1996-09-10 00:18 millert
13630 * parse.lex: allow logins to start with a number (YUCK!)
13632 1996-09-08 15:18 millert
13634 * TROUBLESHOOTING: added soalris 2.5 vs 2.4 note
13636 1996-09-08 15:15 millert
13638 * configure.in: DUNIX doesn't need -lnsl
13640 1996-09-07 20:22 millert
13642 * CHANGES: [no log message]
13644 1996-09-07 20:21 millert
13646 * check.c, compat.h, config.h.in, dce_pwent.c, find_path.c,
13647 getspwuid.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
13648 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
13649 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
13650 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
13651 tgetpass.c, utime.c, version.h, visudo.c: courtesan
13653 1996-09-07 20:13 millert
13655 * TROUBLESHOOTING, INSTALL, Makefile.in, PORTING, RUNSON, README:
13658 1996-09-07 20:12 millert
13660 * visudo.pod: [no log message]
13662 1996-09-07 20:00 millert
13664 * sudo.pod, visudo.pod: courtesan
13666 1996-09-07 19:45 millert
13668 * HISTORY: added courtesan ./
13670 1996-09-06 00:12 millert
13672 * sudo.c: added $SUDO_PROMPT support
13674 1996-09-04 17:19 millert
13676 * check.c: print long skey challemged to stderr, not stdout
13678 1996-08-31 23:10 millert
13680 * CHANGES: updated for 1.5.1
13682 1996-08-31 23:07 millert
13684 * emul/utime.h: ++version
13686 1996-08-31 12:34 millert
13688 * RUNSON: updated for 1.5.1
13690 1996-08-30 10:49 millert
13692 * check.c: use shost, not host for tgetpass
13694 1996-08-30 00:21 millert
13696 * OPTIONS, sudo.pod: documented %u and %h
13698 1996-08-29 20:40 millert
13700 * configure.in: fixed typo
13702 1996-08-29 20:37 millert
13704 * INSTALL, Makefile.in, README, check.c, compat.h, config.h.in,
13705 dce_pwent.c, find_path.c, getspwuid.c, getwd.c, goodpath.c,
13706 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
13707 interfaces.c, logging.c, options.h, parse.c, parse.lex,
13708 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
13709 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
13710 visudo.c: ++version
13712 1996-08-29 20:30 millert
13716 1996-08-29 18:32 millert
13718 * configure.in, Makefile.in, version.h: ++version
13720 1996-08-29 17:58 millert
13722 * sudo.h: new tgetpass() params
13724 1996-08-29 17:58 millert
13726 * check.c: pass use and host to tgetpass
13728 1996-08-29 17:57 millert
13730 * tgetpass.c: added %u and %h escapes
13732 1996-08-29 16:56 millert
13734 * OPTIONS, options.h, check.c: added NO_MESSAGE
13736 1996-08-29 16:23 millert
13738 * configure.in: added cray (unicos) support
13740 1996-08-27 11:36 millert
13742 * OPTIONS, options.h, sudo.c: added SHELL_SETS_HOME
13744 1996-08-25 17:56 millert
13746 * INSTALL: added note about "make install"
13748 1996-08-25 17:50 millert
13750 * parse.yacc: changed length/size params from int to size_t
13752 1996-08-25 13:35 millert
13754 * OPTIONS: now get CSOPS insults as well by default
13756 1996-08-25 13:33 millert
13758 * insults.h: use csops insults too by default
13760 1996-08-25 13:31 millert
13762 * INSTALL, Makefile.in, README, config.h.in, configure.in,
13763 version.h: version = 1.5
13765 1996-08-25 13:27 millert
13767 * sudo.c: added runas_homedir
13769 1996-08-25 13:27 millert
13771 * TODO: updated for 1.5
13773 1996-08-25 13:23 millert
13775 * RUNSON: updated for 1.5
13777 1996-08-25 13:19 millert
13779 * CHANGES: 1.5 release
13781 1996-08-25 13:17 millert
13783 * INSTALL: added "upgrading" notes
13785 1996-08-22 14:00 millert
13787 * visudo.c: now do chmod and chown after edit of temp file and
13790 1996-08-18 12:52 millert
13792 * Makefile.in: ++version added INSTALL.configure
13794 1996-08-18 12:52 millert
13796 * version.h, configure.in: ++version
13798 1996-08-18 12:51 millert
13800 * TROUBLESHOOTING: [no log message]
13802 1996-08-18 12:50 millert
13804 * parse.yacc: added missing cast
13806 1996-08-17 20:37 millert
13808 * sudo.c: sets $HOME to pw_dir of runas user
13810 1996-08-17 20:02 millert
13812 * sudo.pod: document $HOME change
13814 1996-08-17 19:43 millert
13816 * sudo.pod: fixed up some wording
13818 1996-08-17 19:25 millert
13820 * check.c, dce_pwent.c, find_path.c, getspwuid.c, getwd.c,
13821 goodpath.c, interfaces.c, logging.c, parse.c, parse.lex,
13822 parse.yacc, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
13823 testsudoers.c, tgetpass.c, utime.c, visudo.c: ++version
13825 1996-08-17 19:19 millert
13827 * emul/utime.h, compat.h, ins_2001.h, ins_classic.h, ins_csops.h,
13828 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h:
13831 1996-08-17 19:18 millert
13833 * sudo.h: name nad type changes
13835 1996-08-17 19:17 millert
13837 * testsudoers.c: now works with new sudo
13839 1996-08-17 19:07 millert
13841 * parse.yacc: fixed some XXX
13843 1996-08-17 18:52 millert
13845 * parse.yacc: some variable name changes + comment headers for
13848 1996-08-17 18:41 millert
13850 * tgetpass.c: added extra paren's to make compilers happy
13852 1996-08-17 18:34 millert
13854 * sudo.c: [no log message]
13856 1996-08-17 18:30 millert
13858 * parse.c: now uses init_parser() if not in sudoers and tries
13859 "list" or "validate" scold but don't be nasty.
13861 1996-08-17 18:29 millert
13863 * TROUBLESHOOTING: now can use upper case login names
13865 1996-08-17 18:29 millert
13867 * visudo.c: now uses init_parser()
13869 1996-08-17 18:28 millert
13871 * PORTING: added info about PASSWORD_TIMEOUT
13873 1996-08-17 18:28 millert
13875 * INSTALL, README: updated
13877 1996-08-17 18:28 millert
13879 * INSTALL.configure: Initial revision
13881 1996-08-17 18:27 millert
13883 * BUGS: fixed a bug ,
13885 1996-08-17 18:27 millert
13887 * parse.yacc: now dynamically allocates memory for the stacks -- no
13890 1996-08-17 18:26 millert
13892 * sudo.pod: -l now explands command aliases
13894 1996-08-17 13:22 millert
13896 * parse.yacc: hacks to expand command aliases for `sudo -l'
13898 1996-08-17 13:22 millert
13900 * sudo.c: remove $ENV and $BASH_ENV (dangerous in ksh, posix sh,
13903 1996-08-17 13:22 millert
13905 * sudo.h: added struct command_alias
13907 1996-08-17 13:20 millert
13909 * sudo.pod: fixed a bug
13911 1996-08-17 13:15 millert
13913 * lsearch.c: in compar() key should be first arg
13915 1996-08-15 15:48 millert
13917 * BUGS: fixed some bugs
13919 1996-08-15 15:47 millert
13921 * parse.yacc: can now deal with upcase HOST and USER names
13923 1996-08-15 15:47 millert
13925 * sudo.c: don't yell too loudly at non-sudoers if they do "sudo -l"
13927 1996-08-15 15:46 millert
13929 * sudo.pod: fixed thinko
13931 1996-08-15 15:46 millert
13933 * parse.c: fix comment
13935 1996-08-09 18:07 millert
13937 * parse.c, parse.yacc: added support for new `sudo -l' stuff
13939 1996-08-09 18:06 millert
13941 * sudo.c: now uses list_matches()
13943 1996-08-09 18:06 millert
13945 * sudo.h: added struct sudo_match
13947 1996-08-09 17:37 millert
13949 * configure.in: now more -lgnumalloc
13951 1996-08-01 13:12 millert
13953 * install-sh: added more paths for chown and whoami
13955 1996-07-31 10:41 millert
13959 1996-07-30 13:45 millert
13961 * aclocal.m4: fixed DUNIX check for shadow pw
13963 1996-07-30 13:41 millert
13965 * tgetpass.c: now only turn off echo if it is already on. this
13966 fixes a race when you use sudo in a pipelin
13968 1996-07-30 12:53 millert
13972 1996-07-29 22:29 millert
13974 * configure.in: changed "test -z $foo && do_this" to if; then
13977 1996-07-28 22:47 millert
13979 * configure.in: added missing defines of SHADOW_TYPE
13981 1996-07-26 14:10 millert
13983 * check.c: protect AUTH_CRYPT_OLDCRYPT and AUTH_CRYPT_C1CRYPT since
13984 they are only in dunix 4.x
13986 1996-07-26 14:09 millert
13988 * getspwuid.c: added AUTH_CRYPT_C1CRYPT support
13990 1996-07-26 13:23 millert
13992 * parse.c: no longer return VALIDATE_NOT_OK if there was a runas
13993 that didn't match. Now we can have runas stuff on more than one
13996 1996-07-25 23:45 millert
13998 * configure.in: got rid of HAVE_C2_SECURITY SHADOW_TYPE is always
13999 defined to something
14001 1996-07-25 23:45 millert
14003 * config.h.in: removed HAVE_C2_SECURITY added SPW_BSD
14005 1996-07-25 23:44 millert
14007 * compat.h, getspwuid.c, sudo.c, tgetpass.c: use SHADOW_TYPE
14008 instead of HAVE_C2_SECURITY
14010 1996-07-25 23:44 millert
14012 * check.c: SHADOW_TYPE is always defined so just against its value
14014 1996-07-25 23:44 millert
14016 * aclocal.m4: added SUDO_CHECK_SHADOW_DUNIX
14018 1996-07-25 18:47 millert
14020 * sudoers.pod: * -> ?* in one example added another instance of
14021 (runas) and one of NOPASSWD:
14023 1996-07-24 13:02 millert
14025 * configure.in: added back check for config.cache from other host
14028 1996-07-24 12:49 millert
14030 * parse.lex: removed an instance of \"
14032 1996-07-24 12:49 millert
14034 * sample.sudoers: added an example
14036 1996-07-24 12:44 millert
14038 * sudoers.pod: updated wrt new wildcard matching
14040 1996-07-24 10:28 millert
14042 * configure.in: new check for shadow passwords if we don't know
14045 1996-07-24 10:28 millert
14047 * aclocal.m4: new SUDO_CHECK_SHADOW_GENERIC
14049 1996-07-24 02:19 millert
14051 * configure.in: added back check for -lsocket (oops)
14053 1996-07-24 02:16 millert
14055 * configure.in: better (working) check for shadow passwd type if we
14058 1996-07-24 01:59 millert
14060 * configure.in: now uses AC_CANONICAL_HOST to figure out os type
14062 1996-07-24 01:59 millert
14064 * Makefile.in: added config.{guess,sub}
14066 1996-07-24 01:58 millert
14068 * aclocal.m4: removed unused stuff to figure out os type
14070 1996-07-23 22:58 millert
14072 * config.sub: added openbsd
14074 1996-07-23 22:54 millert
14076 * config.sub: Initial revision
14078 1996-07-23 22:40 millert
14080 * config.guess: Initial revision
14082 1996-07-23 21:18 millert
14084 * testsudoers.c: don't call fnmatch() with FNM_PATHNAME flag unless
14085 it can only be a pathname. need to check against sudoers_args
14086 even if user_args is nil
14088 1996-07-23 21:18 millert
14090 * parse.c: don't call fnmatch() with FNM_PATHNAME flag unless it
14091 can only be a pathname need to check against sudoers_args even if
14094 1996-07-23 18:52 millert
14096 * check.c: added support for AUTH_CRYPT_OLDCRYPT w/ DUNIX C2
14098 1996-07-23 01:18 millert
14100 * testsudoers.c: now takes command line args and uses cmnd_args
14102 1996-07-23 01:10 millert
14104 * parse.lex: fill_args was adding an extra leading space
14106 1996-07-22 15:50 millert
14108 * visudo.c: fixed dummy command_matches()
14110 1996-07-22 15:50 millert
14112 * parse.yacc: fixed prototype
14114 1996-07-22 15:31 millert
14116 * sudo.h: added cmnd_args
14118 1996-07-22 15:31 millert
14120 * parse.yacc: now uses flat args string
14122 1996-07-22 15:30 millert
14124 * parse.c, parse.lex: now uses flat arg string
14126 1996-07-22 15:29 millert
14128 * visudo.c: added cmnd_args def
14130 1996-07-22 14:30 millert
14132 * sudo.c: now sets cmnd_args global
14134 1996-07-22 14:30 millert
14136 * logging.c: cmnd_args is now exported from sudo.[ch]
14138 1996-07-21 18:41 millert
14140 * parse.yacc: can't rely on cmnd_matches as much as I thought --
14141 added some $$ stuff back in to prevent namespace pollution
14144 1996-07-21 18:01 millert
14146 * parse.yacc: Simplified parse rules wrt runas and NOPASSWD (more
14149 1996-07-20 00:45 millert
14151 * parse.lex: NOPASSWD may now have blanks before the ':' '(' only
14152 starts a 'runas' if in the initial state to avoid collision with
14155 1996-07-20 00:23 millert
14157 * configure.in: added checks for specific shadow passwd schemes
14159 1996-07-20 00:18 millert
14161 * aclocal.m4: added routines to check for specific shadow passwd
14164 1996-07-18 18:27 millert
14166 * configure.in: added support for ncr boxen
14168 1996-07-18 18:26 millert
14170 * aclocal.m4: added support for detecting ncr boxen
14172 1996-07-16 14:57 millert
14174 * configure.in: added sinix support
14176 1996-07-13 22:29 millert
14178 * TROUBLESHOOTING: added info about "config.cache from other other"
14181 1996-07-13 22:22 millert
14183 * aclocal.m4: now makes sure you don't have a config.cache file
14186 1996-07-13 21:36 millert
14188 * configure.in: now sets $LIBS when needed to configure links with
14189 libs when doing tests hpux10 now uses SPW_SECUREWARE for C2 added
14190 check for bigcrypt(3) if SPW_SECUREWARE
14192 1996-07-13 21:30 millert
14194 * getspwuid.c: fixed typo
14196 1996-07-13 21:05 millert
14198 * tgetpass.c: now include stuff for SPW_SECUREWARE to get
14199 AUTH_MAX_PASSWD_LENGTH
14201 1996-07-13 21:05 millert
14203 * getspwuid.c: no more SPW_HPUX10
14205 1996-07-13 21:04 millert
14207 * config.h.in: no more SPW_HPUX10 added HAVE_BIGCRYPT
14209 1996-07-13 21:04 millert
14211 * compat.h: now uses AUTH_MAX_PASSWD_LENGTH if SPW_SECUREWARE
14213 1996-07-13 21:04 millert
14215 * check.c: SPW_SECUREWARE now uses bigcrypt
14217 1996-07-13 18:24 millert
14219 * sample.sudoers: fixed 2 syntax errors
14221 1996-07-13 18:24 millert
14223 * sudoers: root may now run ALL as ALL
14225 1996-07-11 20:59 millert
14227 * interfaces.c: fixed a typo/thinko that broke BSD's with sa_len
14229 1996-07-08 16:08 millert
14231 * check.c, configure.in: updated AFS support
14233 1996-07-08 16:07 millert
14235 * TROUBLESHOOTING: added entry about /usr/ucb/cc
14237 1996-07-08 16:06 millert
14239 * INSTALL: prep no longer holds gcc binaries
14241 1996-07-08 15:48 millert
14243 * INSTALL: updated AFS note
14245 1996-07-08 15:43 millert
14247 * Makefile.in: added @AFS_LIBS@
14249 1996-07-08 15:33 millert
14251 * compat.h: AFS allows long passwords
14253 1996-07-08 14:16 millert
14255 * testsudoers.c: fixed -u user support
14257 1996-07-08 14:16 millert
14259 * parse.c: sudo -v now groks VALIDATE_OK_NOPASS
14261 1996-07-08 13:30 millert
14263 * parse.yacc: fixed no_passwd vs. runas_matched
14265 1996-07-08 10:30 millert
14267 * TROUBLESHOOTING: took out stuff about NFS-mounting since it is no
14270 1996-07-08 10:30 millert
14272 * INSTALL: added --with-libraries > --with-libpath --with-incpath
14274 1996-07-08 10:21 millert
14276 * parse.yacc: was setting runas_matches to -1 in wrong place
14278 1996-07-08 09:58 millert
14280 * check.c: removed usersec.h which is not present in new AFS
14283 1996-07-08 09:55 millert
14285 * tgetpass.c: now deals with timeout <= 0
14287 1996-07-08 09:51 millert
14291 1996-07-08 00:04 millert
14293 * configure.in: BSD/OS >= 2.0 now uses shlicc instead of just gcc
14295 1996-07-07 22:30 millert
14297 * sudo.c: fixed backwards compatibility with sudo 1.4 sudoers mode
14298 for root readable/writable filesystems
14300 1996-07-07 20:49 millert
14302 * Makefile.in: now gives INSTALL -c flag
14304 1996-07-07 20:34 millert
14306 * parse.yacc: slightly simpler initialization of no_passwd and
14309 1996-07-07 20:33 millert
14311 * testsudoers.c: added -u username support
14313 1996-07-07 20:32 millert
14315 * configure.in: improved --with-libraries support
14317 1996-07-07 16:27 millert
14319 * configure.in: added --with-incpath, --with-libpath,
14322 1996-07-07 16:01 millert
14324 * parse.yacc: now initializes some fields that weren't getting set
14325 to -1 pretty gross -- need a rewrite.
14327 1996-06-25 23:19 millert
14329 * alloca.c: removed emacs'isms
14331 1996-06-25 22:29 millert
14333 * configure.in: no longer add -lPW to *_LIBS since we include
14336 1996-06-25 22:29 millert
14338 * config.h.in: added HAVE_ALLOCA_H
14340 1996-06-25 22:28 millert
14342 * Makefile.in: added alloca.c
14344 1996-06-25 22:18 millert
14346 * alloca.c: Initial revision
14348 1996-06-25 21:58 millert
14350 * configure.in: ++version
14352 1996-06-25 19:32 millert
14354 * sudo.c: now set uid to 1 instead of nobody for PERM_SUDOERS since
14355 nobody is not always set to a valid uid.
14357 1996-06-25 19:31 millert
14359 * OPTIONS: fixed entry for SUDO_MODE
14361 1996-06-25 18:02 millert
14363 * sudo.c: Fixed NFS-mounted sudoers file under solaris both uid
14364 *and* gid were being set to -2. Now beat NFS to the punch and
14365 set uid to "nobody" ourselves, preserving group 0 to read
14368 1996-06-25 18:02 millert
14370 * parse.c: moved set_perms(PERM_ROOT) to be before yyparse()
14372 1996-06-25 18:00 millert
14374 * logging.c: fixed a typo
14376 1996-06-25 18:00 millert
14378 * configure.in: no longer need AC_PROG_INSTALL
14380 1996-06-25 17:59 millert
14382 * Makefile.in: always use install-sh to avoid install(1)'s that use
14385 1996-06-25 16:07 millert
14387 * INSTALL: make clean -> make distclean
14389 1996-06-20 01:17 millert
14391 * parse.yacc: removed some unnecsary if's
14393 1996-06-20 01:16 millert
14395 * Makefile.in, version.h: ++version
14397 1996-06-20 01:16 millert
14399 * parse.c, testsudoers.c: now includes netgroup.h
14401 1996-06-20 00:45 millert
14403 * interfaces.c: removed cats of ioctl to int since they didn't shut
14406 1996-06-20 00:43 millert
14408 * interfaces.c: explicately cast ioctl() to int since it it not
14411 1996-06-20 00:41 millert
14413 * sudo.h: added declarations for yyparse() and yylex()
14415 1996-06-20 00:27 millert
14417 * parse.yacc: fixed an occurence of '==' -> '='
14419 1996-06-20 00:22 millert
14421 * config.h.in, configure.in: added check for netgroup.h
14423 1996-06-20 00:20 millert
14425 * sudo.c: fixed 2 compiler warnings
14427 1996-06-20 00:08 millert
14429 * sudo.c: SHELL_IF_NO_ARGS caused core dump since NewArg[cv]
14430 weren't being initialized
14432 1996-06-19 13:53 millert
14434 * sudo.pod: fixed a typo
14436 1996-06-17 12:19 millert
14438 * parse.yacc: fixed a formatting thingie
14440 1996-06-17 12:16 millert
14442 * parse.c, parse.yacc: fixed -u support with multiple user lists on
14445 1996-06-17 10:23 millert
14447 * configure.in: unixware needs -lgen
14449 1996-06-17 10:23 millert
14451 * README: updated ftp location
14453 1996-06-17 00:08 millert
14455 * sudoers.pod: add net_addr/netmask support
14457 1996-06-17 00:07 millert
14459 * sample.sudoers: added net_addr/mask example
14461 1996-06-17 00:02 millert
14463 * parse.lex, parse.c: added support for net_addr/netmask
14465 1996-06-15 20:13 millert
14467 * sudoers.pod: ^ -> !
14469 1996-06-15 18:12 millert
14471 * RUNSON: updated for 1.4.3
14473 1996-06-15 18:12 millert
14475 * CHANGES: udpated for 1.4.3
14477 1996-06-15 18:11 millert
14479 * TROUBLESHOOTING, TODO, BUGS: updated
14481 1996-06-15 18:11 millert
14483 * sample.sudoers: updated with examples of new stuff
14485 1996-06-15 18:10 millert
14487 * INSTALL, README: ++version
14489 1996-06-15 18:01 millert
14491 * sudoers.pod: updated wrt -u and NOPASSWD
14493 1996-06-15 17:58 millert
14495 * sudo.pod: updated wrt -u and CAVEATS
14497 1996-06-08 23:15 millert
14499 * sudo.c: fixed usage()
14501 1996-06-08 22:57 millert
14503 * parse.lex: now use :foo: character classes (makes no diff for
14506 1996-06-07 14:33 millert
14508 * check.c: fixed LONG_SKEY_PROMPT stuff
14510 1996-06-06 15:35 millert
14512 * visudo.c: fixed a comment
14514 1996-06-06 15:03 millert
14516 * lsearch.c: make more like NetBSD one -- now compiles w/o warnings
14518 1996-06-06 15:02 millert
14520 * emul/search.h: fixed decls of lsearch()
14522 1996-06-05 22:20 millert
14524 * config.h.in, configure.in, getspwuid.c: added SPW_HPUX10
14526 1996-06-05 22:20 millert
14528 * check.c: hpux 10 uses bigcrypt() if C2
14530 1996-06-04 19:57 millert
14532 * parse.c: now always uses fnmatch to match args
14534 1996-06-04 19:40 millert
14536 * tgetpass.c: back to using stdio instead of raw i/o since that
14537 caused some problems
14539 1996-05-28 22:14 millert
14541 * sudo.c: now give usage warning if use -l,-v,-k with args
14543 1996-05-28 18:22 millert
14545 * sudo.c: NewArgc is now set to 1 for -l, -v, -k
14547 1996-05-28 12:50 millert
14549 * sudo.c: now sets sudoers to correct group if mode is 0400
14551 1996-05-28 12:02 millert
14553 * install-sh: updated to version used by inn and bind
14555 1996-05-28 00:08 millert
14557 * configure.in: now uses -lgnumalloc if it exists
14559 1996-05-28 00:02 millert
14561 * Makefile.in: "make install" now sets uid/gid and mode on sudoers
14564 1996-05-28 00:01 millert
14566 * sudo.c: rmeoved debugging statements
14568 1996-05-28 00:00 millert
14570 * parse.yacc: added a missing free()
14572 1996-05-27 23:58 millert
14574 * sudo.c: now uses user_gid instead of getegid (which was wrong
14575 anyway) to set SUDO_GID Now sets command line args in
14576 SUDO_COMMAND envariabled (logging.c depends on args being in the
14579 1996-05-27 23:57 millert
14581 * logging.c: now uses SUDO_COMMAND envariable to get command args
14582 rather than building it up again.
14584 1996-05-27 22:42 millert
14586 * parse.c: now uses user_gid
14588 1996-05-27 20:02 millert
14590 * sudo.c: fixed off by one error in allocation NewArgv
14592 1996-05-27 20:01 millert
14594 * parse.c: in sudoers, 'command ""' now means command with no args
14596 1996-05-27 20:01 millert
14598 * configure.in: added check for fnmatch(3) and fnmatch.h
14600 1996-05-27 20:01 millert
14602 * config.h.in: added HAVE_FNMATCH
14604 1996-05-27 20:00 millert
14606 * Makefile.in: replaced wildcat.* with fnmatch.*
14608 1996-05-27 20:00 millert
14610 * testsudoers.c: now uses fnmatch()
14612 1996-05-27 19:38 millert
14614 * parse.c: now uses fnmatch() instead of wildmat a trailing star
14615 (*) by itself now matches multiple args added support for
14616 wildcards in the pathname in sudoers
14618 1996-05-25 19:23 millert
14620 * fnmatch.c: now includes compat.h and config.h
14622 1996-05-25 18:09 millert
14624 * config.h.in: added HAVE_FNMATCH_H
14626 1996-05-25 18:07 millert
14628 * configure.in: now checks for alloca() (if needed by bison or dce)
14629 and links with -lPW if it contains alloca() and libv and compiler
14632 1996-05-25 18:03 millert
14634 * fnmatch.3, fnmatch.c, emul/fnmatch.h: Initial revision
14636 1996-04-28 22:38 millert
14638 * sudo.c: now fixes mode on sudoers if set to 0400 to aid in
14641 1996-04-28 17:44 millert
14643 * Makefile.in: fixed pod2man usage
14645 1996-04-28 17:40 millert
14647 * configure.in, Makefile.in, version.h: ++version
14649 1996-04-28 17:20 millert
14651 * testsudoers.c, visudo.c: runas_user is now initialized to "root"
14653 1996-04-28 17:20 millert
14655 * sudo.h: removed PERM_FULL_ROOT
14657 1996-04-28 17:18 millert
14659 * sudo.c: runas_user defaults to "root" so no more need to
14662 1996-04-28 17:16 millert
14664 * parse.c: will now only running commands as root if there was no
14665 runas list (or if root is in the runas list)
14667 1996-04-28 17:15 millert
14669 * logging.c: now logs "USER=%s"
14671 1996-04-28 17:12 millert
14673 * parse.yacc: runas_matches is now set to false if we get a
14676 1996-04-28 15:01 millert
14678 * parse.lex: make #uid work + some minor cleanup
14680 1996-04-27 21:04 millert
14682 * sample.sudoers: added support for NOPASSWD and "runas" from
14685 1996-04-27 21:03 millert
14687 * visudo.c: added support for "runas" from garp@opustel.com
14688 replaced SUDOERS_OWNER with SUDOERS_UID, SUDOERS_GID added
14689 support for SUDOERS_MODE
14691 1996-04-27 21:03 millert
14693 * testsudoers.c: added support for "runas" from garp@opustel.com
14695 1996-04-27 21:02 millert
14697 * sudo.h: added support for NO_PASSWD and runas from
14698 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14699 SUDOERS_GID and added support fro SUDOERS_MODE
14701 1996-04-27 21:00 millert
14703 * sudo.c: added support for NO_PASSWD and runas from
14704 garp@opustel.com replaced SUDOERS_OWNER with SUDOERS_UID and
14705 SUDOERS_GID and added support fro SUDOERS_MODE
14707 1996-04-27 21:00 millert
14709 * parse.yacc: added support for NO_PASSWD and runas from
14712 1996-04-27 20:58 millert
14714 * parse.c, parse.lex: added support for NO_PASSWD and runas from
14717 1996-04-27 20:56 millert
14719 * logging.c: added support for SUDOERS_WRONG_MODE and "runas"
14721 1996-04-27 20:40 millert
14723 * configure.in: added --with-CC only link with -lshadow on linux
14724 (with shadow pw) if libc lacks getspnam()
14726 1996-04-27 20:39 millert
14728 * OPTIONS, options.h: removed NO_PASSWD since it is not possible to
14729 do this in the sudoers file itself. Replaced SUDOERS_OWNER with
14730 SUDOERS_UID and SUDOERS_GID. Added SUDOERS_MODE.
14732 1996-04-27 20:26 millert
14734 * Makefile.in: now uses SUDOERS_UID and SUDOERS_GID
14736 1996-04-27 11:20 millert
14738 * INSTALL: added --with-CC
14740 1996-04-06 16:31 millert
14742 * parse.lex: added double quote support
14744 1996-04-06 16:29 millert
14746 * sudoers.pod: documented double quoting
14748 1996-04-05 16:53 millert
14750 * mkinstalldirs: Initial revision
14752 1996-04-05 16:53 millert
14754 * check.c: fixed some indentation
14756 1996-04-05 16:48 millert
14758 * Makefile.in: fixed a typo
14760 1996-04-04 19:39 millert
14762 * Makefile.in: added install-dirs .
14764 1996-04-04 14:16 millert
14766 * dce_pwent.c: new version from "Jeff A. Earickson"
14767 <jaearick@colby.edu>
14769 1996-04-03 13:40 millert
14771 * configure.in: $CSOPS -> $with_csops (whoops, missed one)
14773 1996-04-03 13:40 millert
14777 1996-04-03 13:36 millert
14779 * parse.lex: FQHOST now has same constraints as non-FQHOST
14781 1996-04-02 19:00 millert
14783 * INSTALL: added note about OS's w/ shadow passwords turned on by
14786 1996-04-02 18:58 millert
14788 * configure.in: fixed a typo
14790 1996-04-02 18:48 millert
14792 * configure.in: added support for --without-THING sanitized shadow
14793 pw situtation by adding support for --without-C2
14795 1996-04-02 16:42 millert
14797 * tgetpass.c: fixed a typo wrt placement of an end paren
14799 1996-04-02 14:57 millert
14801 * check.c: was closing an fd that may not have been opened
14803 1996-03-21 19:55 millert
14805 * sudo.c, OPTIONS, options.h: added NO_PASSWD
14807 1996-03-19 19:40 millert
14809 * configure.in: now always use shadow pw on some arches
14811 1996-03-19 17:07 millert
14813 * configure.in: added pyramid support
14815 1996-03-19 17:04 millert
14817 * configure.in: no longer check for C2 if alternate passwd method
14818 is used no longer check for some libs twice
14820 1996-03-19 17:00 millert
14822 * parse.yacc: moved fqdn stuff into parse.lex (FQHOST)
14824 1996-03-19 17:00 millert
14826 * parse.lex: added FQHOST rules
14828 1996-03-18 20:57 millert
14830 * tgetpass.c: now define TCSASOFT in necesary
14832 1996-03-18 20:31 millert
14834 * tgetpass.c: now uses read/write instead of stdio string goop to
14835 avoid problems with select(2)
14837 1996-03-18 19:37 millert
14839 * OPTIONS, find_path.c, options.h: -DNO_DOT_PATH ->
14842 1996-03-17 16:18 millert
14844 * INSTALL: added note about no shadow auto-detect if using
14845 alternate auth schemes
14847 1996-03-17 15:33 millert
14849 * configure.in: don't check for C2 if AFS or DCE (unless they said
14852 1996-03-17 15:08 millert
14854 * testsudoers.c: now groks shost
14856 1996-03-17 15:01 millert
14858 * options.h, OPTIONS, find_path.c: added NO_DOT_PATH
14860 1996-03-16 14:43 millert
14862 * find_path.c: checkdot now works correctly
14864 1996-03-12 18:01 millert
14866 * configure.in: can't have DCE and C2 passwords both...
14868 1996-03-11 14:05 millert
14870 * parse.yacc, sudo.c, sudo.h, visudo.c: now uses shost even if not
14873 1996-03-11 14:04 millert
14875 * configure.in: now looks for skey in /usr/lib and doesn't require
14876 libskey to be in /usr/local/lib just because skey.h is (for my
14879 1996-03-11 02:00 millert
14881 * aclocal.m4, config.h.in, pathnames.h.in: _SUDO_PATH_ ->
14884 1996-03-10 21:01 millert
14886 * aclocal.m4, sudo.pod: /var/run/.odus -> /var/run/sudo
14888 1996-03-10 20:59 millert
14890 * pathnames.h.in: now uses _SUDO_PATH_TIMEDIR
14892 1996-03-10 20:59 millert
14894 * OPTIONS: udpated FQDN
14896 1996-03-10 20:58 millert
14898 * config.h.in: added _SUDO_PATH_TIMEDIR
14900 1996-03-10 20:58 millert
14902 * aclocal.m4, configure.in: added SUDO_TIMEDIR
14904 1996-03-10 20:58 millert
14906 * sudo.pod: updated wrt /var/run/sudo
14908 1996-03-10 20:16 millert
14910 * sudo.c, sudo.h: added support for shost if FQDN
14912 1996-03-10 20:14 millert
14914 * parse.yacc, visudo.c: now uses shost if FQDN
14916 1996-03-10 20:12 millert
14918 * check.c: Now use skeylookup() instead off skeychallenge()
14920 1996-02-27 20:41 millert
14922 * logging.c: mail_argv should not contain ALERTMAIL as it includes
14925 1996-02-22 17:06 millert
14927 * INSTALL, Makefile.in, README, version.h, configure.in: ++version
14929 1996-02-22 16:27 millert
14931 * compat.h: added more _PASSWD_LEN stuff -- now uses PASS_MAX too
14933 1996-02-22 16:27 millert
14935 * tgetpass.c: now includes limits.h moved _PASSWD_LEN -> compat.h
14937 1996-02-05 19:20 millert
14939 * README, INSTALL: ++version
14941 1996-02-05 19:20 millert
14943 * Makefile.in: ++versoin
14945 1996-02-05 19:16 millert
14947 * Makefile.in: fixed a typo
14949 1996-02-05 19:16 millert
14951 * configure.in: ++version
14953 1996-02-05 18:53 millert
14957 1996-02-05 18:47 millert
14959 * CHANGES: done for 1.4.1 (I hope)
14961 1996-02-05 18:45 millert
14963 * sudoers.pod: added info on wildcards
14965 1996-02-05 18:39 millert
14967 * sample.sudoers: added wildcard example
14969 1996-02-05 17:03 millert
14971 * Makefile.in: now uses *.pod to build *.man and *.cat & *.html
14973 1996-02-05 17:03 millert
14975 * configure.in: addedSUDO_PROG_BSHELL !ll
14977 1996-02-05 16:10 millert
14979 * visudo.pod: fixed up some formatting
14981 1996-02-05 16:10 millert
14983 * sudoers.pod: redid section describing sample sudoers stuff
14985 1996-02-05 16:10 millert
14987 * sudo.pod: fixed some formatting
14989 1996-02-04 22:50 millert
14991 * getspwuid.c: now treats "" as bourne shell
14993 1996-02-04 22:49 millert
14995 * Makefile.in: TESTOBJS nwo includes wildmat.o
14997 1996-02-04 22:48 millert
14999 * testsudoers.c: now works with NewArg[cv]
15001 1996-02-04 21:59 millert
15003 * sudo.c: removed an XXX (fixed it in getspwuid.c)
15005 1996-02-04 21:58 millert
15007 * aclocal.m4: added check for bourne shell
15009 1996-02-04 21:58 millert
15011 * pathnames.h.in: added _PATH_BSHELL
15013 1996-02-04 21:58 millert
15015 * config.h.in: added _SUDO_PATH_BSHELL
15017 1996-02-04 16:36 millert
15019 * visudo.c: unixware vi returns 256 instead of 0
15021 1996-02-04 16:24 millert
15023 * INSTALL: added Linux note
15025 1996-02-04 16:13 millert
15027 * logging.c: fixed up some XXX's. file log format now looks a
15028 little more like real syslog(3) format.
15030 1996-02-04 16:13 millert
15032 * README, TROUBLESHOOTING: updated wrt lex/flex
15034 1996-02-04 16:11 millert
15036 * Makefile.in: commented out rule to build lex.yy.c from parse.lex
15037 since we ship with a pre-flex'd parser
15039 1996-02-04 16:09 millert
15041 * parse.c, parse.yacc, visudo.c: path_matches -> command_matches
15043 1996-02-04 02:28 millert
15045 * logging.c: eliminated some strcat()'s
15047 1996-02-04 02:10 millert
15049 * configure.in: no longer checks for lex/flex (now assumes flex)
15051 1996-02-04 02:08 millert
15053 * configure.in: now checks for $kerb_dir_candidate/krb.h instead of
15054 just kerb_dir_candidate
15056 1996-02-02 20:48 millert
15058 * parse.yacc: now use a 'hook' expression instead of an iffy one
15061 1996-02-02 01:14 millert
15063 * visudo.c: now works with new sudo arg stuff
15065 1996-02-02 01:14 millert
15067 * parse.yacc: fixed dereferencing deadbeef
15069 1996-02-01 23:53 millert
15071 * sudo.c: changed an occurrence of Argv to NewArgv
15073 1996-02-01 23:53 millert
15075 * parse.lex: took out support for quoted commands since there is no
15078 1996-02-01 23:52 millert
15080 * parse.c: fixed a typo in a for() loop
15082 1996-02-01 23:52 millert
15084 * logging.c: protected against dereferencing rogue pointers
15086 1996-02-01 22:34 millert
15088 * sudo.c: now uses NewArgv amd NewArgc so cmnd_aegs is no longer
15089 needed this also allows us to eliminate some kludges in
15090 parse_args() and eliminate superfluous code.
15092 1996-02-01 22:34 millert
15094 * logging.c: no longer uses cmnd_args, now uses NewArgv instead.
15096 1996-02-01 22:32 millert
15098 * sudo.h: added struct sudo_command, NewArgc, and NewArgv removed
15099 cmnd_args (no longer used)
15101 1996-02-01 22:31 millert
15103 * Makefile.in: added wildmat.c to SRCS & SUDOBJS
15105 1996-02-01 22:30 millert
15107 * parse.yacc: COMMAND is now a struct containing the path and args
15109 1996-02-01 22:30 millert
15111 * parse.lex: replaced append() with fill_cmnd() and fill_args.
15112 command args from a sudoers entry are now stored in an arrary for
15115 1996-02-01 22:28 millert
15117 * parse.c: command line args from sudoers file are now in an array
15118 like ones passed in from the command line
15120 1996-01-31 20:59 millert
15122 * parse.c: wildwat stuff now works
15124 1996-01-29 00:44 millert
15126 * version.h: ++version
15128 1996-01-29 00:44 millert
15130 * Makefile.in: ++version added wildmat.*
15132 1996-01-28 17:55 millert
15134 * parse.lex: added support for quoted commands (w/ or w/o args)
15136 1996-01-22 01:55 millert
15138 * sudo.pod, visudo.pod: cleaned up formatting
15140 1996-01-21 20:53 millert
15142 * sudo.pod, visudo.pod: Initial revision
15144 1996-01-21 02:07 millert
15146 * sudoers.pod: looks reasonable, could be mroe readable
15148 1996-01-20 23:47 millert
15150 * sudoers.pod: Initial revision
15152 1996-01-16 14:38 millert
15156 1996-01-16 14:37 millert
15158 * OPTIONS: updated NO_ROOT_SUDO entry
15160 1996-01-15 11:37 millert
15162 * RUNSON: [no log message]
15164 1996-01-15 11:34 millert
15166 * sudo.c: fixed SECURE_PATH
15168 1996-01-14 20:55 millert
15170 * RUNSON: udpa`ted for 1.4
15172 1996-01-14 20:52 millert
15174 * configure.in: AIX aixcrypt.exp now uses $(srcdir)
15176 1996-01-14 20:32 millert
15178 * TROUBLESHOOTING: added entry for anal ansi compilers
15180 1996-01-14 16:13 millert
15182 * INSTALL: added info on libcrypt_i for SCO
15184 1996-01-14 16:05 millert
15186 * TODO: [no log message]
15188 1996-01-14 15:39 millert
15190 * sample.sudoers: added comments
15192 1996-01-14 15:25 millert
15194 * TODO: 1.4 release
15196 1996-01-14 15:22 millert
15198 * README, config.h.in, configure.in, CHANGES: ++version
15200 1996-01-14 15:21 millert
15202 * BUGS: ++version and fixed ISC
15204 1996-01-14 15:19 millert
15206 * check.c, compat.h, dce_pwent.c, find_path.c, getspwuid.c,
15207 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15208 ins_goons.h, insults.h, options.h, pathnames.h.in, sudo.h,
15209 logging.c, putenv.c, strdup.c, sudo.c, sudo_setenv.c,
15210 testsudoers.c, tgetpass.c, utime.c, visudo.c, INSTALL, OPTIONS:
15213 1996-01-14 15:16 millert
15215 * interfaces.c: added STUB_LOAD_INTERFACES ++version
15217 1996-01-14 15:14 millert
15219 * Makefile.in, version.h, parse.c, parse.lex, parse.yacc,
15220 emul/utime.h: ++version
15222 1996-01-14 15:13 millert
15224 * PORTING: added info about fd_set in tgetpass added info on
15227 1996-01-11 13:22 millert
15229 * dce_pwent.c: added sudo header
15231 1996-01-11 13:04 millert
15233 * tgetpass.c: fixed a typo
15235 1996-01-11 13:01 millert
15237 * Makefile.in: tgetpass.o is now only linked in with sudo (not
15240 1996-01-09 12:56 millert
15242 * BUGS, INSTALL, OPTIONS, README, Makefile.in, config.h.in,
15243 configure.in: ++version
15245 1996-01-09 12:54 millert
15247 * emul/utime.h: added copyright notice
15249 1996-01-09 12:52 millert
15251 * check.c, compat.h, find_path.c, getspwuid.c, getwd.c, goodpath.c,
15252 ins_2001.h, ins_classic.h, ins_csops.h, ins_goons.h, insults.h,
15253 interfaces.c, logging.c, options.h, parse.c, parse.lex,
15254 parse.yacc, pathnames.h.in, putenv.c, strdup.c, sudo.c, sudo.h,
15255 sudo_setenv.c, testsudoers.c, tgetpass.c, utime.c, version.h,
15256 visudo.c: ++version
15258 1996-01-09 12:46 millert
15260 * tgetpass.c: minor cleanup and now includes sys/bsdtypes for
15263 1996-01-09 12:42 millert
15265 * configure.in: ISC now gets -lcrypt now check for sys/bsdtypes.h
15267 1996-01-09 12:41 millert
15269 * config.h.in: added check for sys/bsdtypes.h
15271 1996-01-07 16:00 millert
15273 * parse.yacc: removed debugging stuff (setting freed ptr to NULL)
15275 1996-01-07 15:55 millert
15277 * TROUBLESHOOTING: added 2 entries
15279 1996-01-07 15:55 millert
15281 * Makefile.in: added FAQ
15283 1996-01-07 14:26 millert
15285 * TROUBLESHOOTING: added section on syslog
15287 1996-01-07 14:25 millert
15289 * configure.in: added AC_ISC_POSIX for better ISC support
15291 1996-01-07 14:25 millert
15293 * config.h.in: fixed typo
15295 1996-01-07 14:25 millert
15297 * config.h.in: added define for _POSIX_SOURCE
15299 1996-01-04 00:41 millert
15301 * configure.in: fixed check for lsearch()
15303 1995-12-21 21:53 millert
15305 * interfaces.c: fixed for AIX now deal if num_interfaces == 0
15306 (should not happen)
15308 1995-12-20 17:02 millert
15310 * configure.in: now only define HAVE_LSEARCH if there is a
15311 corresponding search.h
15313 1995-12-20 15:52 millert
15315 * interfaces.c: works on ISC again
15317 1995-12-18 17:36 millert
15319 * configure.in: now define HAVE_LSEARCH if we find lsearch() in
15322 1995-12-18 17:32 millert
15324 * lsearch.c: char * -> const char *
15326 1995-12-18 17:29 millert
15328 * configure.in: now looks in -lcompat for lsearch()
15330 1995-12-18 17:23 millert
15332 * Makefile.in: remove sudo.core visudo.core for clan target
15334 1995-12-17 22:53 millert
15336 * aclocal.m4: added UID_MAX support in check for MAX_UID_T_LEN
15338 1995-12-17 22:36 millert
15340 * Makefile.in: fixed another occurence of sudo_getpwuid.*
15342 1995-12-17 22:30 millert
15344 * getspwuid.c, Makefile.in: sudo_getpwuid.c -> getspwuid.c
15346 1995-12-17 22:22 millert
15348 * configure.in: moved the "echo"
15350 1995-12-17 22:09 millert
15352 * CHANGES, BUGS, INSTALL, Makefile.in, OPTIONS, README, check.c,
15353 compat.h, config.h.in, configure.in, find_path.c, getspwuid.c,
15354 getwd.c, goodpath.c, ins_2001.h, ins_classic.h, ins_csops.h,
15355 ins_goons.h, insults.h, interfaces.c, logging.c, options.h,
15356 parse.c, parse.lex, parse.yacc, pathnames.h.in, putenv.c,
15357 strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15358 tgetpass.c, utime.c, version.h, visudo.c: ++version
15360 1995-12-17 22:04 millert
15362 * testsudoers.c: added group support
15364 1995-12-17 22:00 millert
15366 * sample.sudoers: added group entry
15368 1995-12-17 21:59 millert
15370 * sudoers.man: documented group support
15372 1995-12-17 21:50 millert
15374 * parse.c, parse.lex, visudo.c, parse.yacc: added group support
15376 1995-12-15 17:45 millert
15378 * check.c: tkfile was too short and overflowed the kerberos realm
15380 1995-12-11 17:09 millert
15382 * sudo.c: now copy command args directly from Argv
15384 1995-12-11 15:55 millert
15386 * sudo.c: replaced code to copy cmnd_args so that is does not use
15387 realloc since most realloc()'s really stink
15389 1995-12-08 14:11 millert
15391 * configure.in: syslog() fixed in hpux 10.01
15393 1995-12-06 17:45 millert
15395 * configure.in: AC_CHECK_LIB() now sets SUDO_LIBS (and VISUDO_LIBS
15398 1995-12-06 17:30 millert
15400 * configure.in: better error if cannot find skey incs or libs
15402 1995-12-06 17:26 millert
15404 * aclocal.m4: now use a temp file for determining max len of uid_t
15405 in string form. the old hacky way broke on netbsd
15407 1995-12-05 19:02 millert
15409 * sudo.c: added set of parens and a space
15411 1995-12-05 18:58 millert
15413 * dce_pwent.c: fixes from Jeff Earickson <jaearick@colby.edu> ,
15415 1995-12-05 18:58 millert
15417 * check.c: modified a comment
15419 1995-12-05 18:57 millert
15421 * Makefile.in: fixed up testsudoers target
15423 1995-12-05 18:56 millert
15425 * configure.in: DCE changes from Jeff Earickson
15426 <jaearick@colby.edu> LIBS -> SUDO_LIBS and VISUDO_LIBS LDFLAGS ->
15427 SUDO_FDFLAGS and VISUDO_LDFLAGS
15429 1995-12-05 18:17 millert
15431 * Makefile.in: LIBS -> SUDO_LIBS , VISUDO_LIBS LDFLAGS ->
15432 SUDO_LDFLAGS, VISUDO_LDFLAGS
15434 1995-11-27 23:32 millert
15436 * configure.in: fix for C2 on hpux 10 now uses -linet if it exists
15438 1995-11-27 23:17 millert
15440 * check.c: LONG_SKEY_PROMPT is less of a klusge /
15442 1995-11-27 23:17 millert
15444 * configure.in: fixed typos w/ dce stuff
15446 1995-11-27 23:14 millert
15448 * Makefile.in: added dce_pwent.c
15450 1995-11-26 13:48 millert
15452 * INSTALL: amended section on combining authentication mechanisms
15454 1995-11-26 13:48 millert
15456 * PORTING: minor updates for 1.3.6
15458 1995-11-26 13:47 millert
15460 * TROUBLESHOOTING: added 2 more entries
15462 1995-11-26 13:39 millert
15464 * BUGS: updated for 1.3.6
15466 1995-11-26 13:39 millert
15468 * README: overhauled
15470 1995-11-25 21:23 millert
15472 * INSTALL: rewrote for sudo 1.3.6
15474 1995-11-25 21:23 millert
15476 * TROUBLESHOOTING: added 3 entries
15478 1995-11-25 13:53 millert
15480 * find_path.c, getspwuid.c, sudo.c: added explict casts for strdup
15481 since many includes don't prototype it. gag me.
15483 1995-11-25 13:23 millert
15485 * sudo.h: removed prototype for sudo_getpwuid() since convex C
15486 compiler choked on it.
15488 1995-11-25 13:23 millert
15490 * sudo.c: added prototype for sudo_getpwuid()
15492 1995-11-25 13:23 millert
15494 * lsearch.c: now compiles on strict ANSI compilers
15496 1995-11-24 23:56 millert
15498 * check.c: added LONG_SKEY_PROMPT support
15500 1995-11-24 23:55 millert
15502 * Makefile.in: added extra $'s for make to eat up, yum.
15504 1995-11-24 23:38 millert
15506 * OPTIONS, options.h: added LONG_SKEY_PROMPT
15508 1995-11-24 18:48 millert
15510 * check.c: s/key support now works with normal s/key as well as
15513 1995-11-24 18:46 millert
15515 * options.h, OPTIONS: added SKEY_ONLY
15517 1995-11-24 18:46 millert
15519 * compat.h: set _PASSWD_LEN to 256 for any of KERB4, DCE, SKEY
15521 1995-11-24 00:42 millert
15523 * INSTALL: added DCE note added more AIX notes
15525 1995-11-24 00:39 millert
15527 * sudo.c: now include pthread.h for DCE support
15529 1995-11-23 22:22 millert
15531 * check.c: dce_pwent() is ok after all .,
15533 1995-11-23 22:21 millert
15535 * logging.c: now uses SYSLOG() macro that equates to either
15536 syslog() or syslog_wrapper
15538 1995-11-23 21:44 millert
15540 * dce_pwent.c: minor formatting changes. renamed check() to
15541 somthing less generic
15543 1995-11-23 21:27 millert
15545 * check.c, logging.c, parse.yacc, sudo.c, sudo.h, testsudoers.c,
15546 visudo.c: now uses user_pw_ent and simple macros to get at the
15549 1995-11-22 20:35 millert
15551 * check.c: simpler dec unix C2 support
15553 1995-11-22 20:35 millert
15555 * getspwuid.c: now sets crypt_type for DEC unix C2
15557 1995-11-21 18:00 millert
15559 * configure.in: added csops paths for skey
15561 1995-11-21 16:27 millert
15563 * getspwuid.c: now includes string.h for strdup() prototype
15565 1995-11-21 01:47 millert
15567 * getspwuid.c: fixed a few typos
15569 1995-11-20 22:59 millert
15571 * check.c: now includes skey.h
15573 1995-11-20 22:10 millert
15575 * getspwuid.c: fixed up comments
15577 1995-11-20 22:04 millert
15579 * check.c: moved a lot of the shadow passwd crap to sudo_getpwuid()
15581 1995-11-20 22:01 millert
15583 * sudo.c: now uses sudo_pw_ent
15585 1995-11-20 21:50 millert
15587 * testsudoers.c: now uses sudo_pw_ent
15589 1995-11-20 21:40 millert
15591 * visudo.c: now sets sudo_pw_ent
15593 1995-11-20 21:28 millert
15595 * getspwuid.c: Initial revision
15597 1995-11-20 21:28 millert
15599 * tgetpass.c: moved dce stuff into compat.h
15601 1995-11-20 21:27 millert
15603 * sudo.h, logging.c: now uses sudo_pw_ent
15605 1995-11-20 21:27 millert
15607 * Makefile.in: added sudo_getpwuid.c
15609 1995-11-20 21:25 millert
15611 * compat.h: added dce support
15613 1995-11-20 21:13 millert
15615 * parse.yacc: now uses sudo_pw_ent
15617 1995-11-20 14:40 millert
15619 * check.c: fixed exempt_group stuff for OS's that don't put base
15620 gid in group vector
15622 1995-11-20 01:39 millert
15624 * check.c: S/Key support now works with sunos4 shadow passwords
15626 1995-11-19 22:31 millert
15628 * Makefile.in: fixed clean rule
15630 1995-11-19 22:31 millert
15632 * config.h.in, configure.in: added DCE support
15634 1995-11-19 22:30 millert
15636 * tgetpass.c: DCE & KERB support
15638 1995-11-19 22:30 millert
15640 * check.c: first stab at dce support
15642 1995-11-19 22:24 millert
15644 * dce_pwent.c: now smells like sudo
15646 1995-11-19 22:11 millert
15648 * dce_pwent.c: Initial revision
15650 1995-11-19 21:36 millert
15652 * check.c: skey'd sudo now works w/ normal password as well
15654 1995-11-19 18:37 millert
15656 * Makefile.in, OPTIONS, check.c, compat.h, config.h.in,
15657 find_path.c, getwd.c, goodpath.c, ins_2001.h, ins_classic.h,
15658 ins_csops.h, ins_goons.h, insults.h, interfaces.c, logging.c,
15659 options.h, parse.c, parse.lex, parse.yacc, pathnames.h.in,
15660 putenv.c, strdup.c, sudo.c, sudo.h, sudo_setenv.c, testsudoers.c,
15661 tgetpass.c, utime.c, version.h, visudo.c: updated version number
15663 1995-11-19 18:32 millert
15665 * README: updated to reflect version change
15667 1995-11-19 18:27 millert
15669 * configure.in: --with options now line up ++version
15671 1995-11-19 18:26 millert
15673 * sudo.h: removed unecesary S/Key stuff
15675 1995-11-19 18:25 millert
15677 * configure.in: fixed S/Key support
15679 1995-11-19 18:24 millert
15681 * Makefile.in: -I stuff now goes in CPPFLAGS
15683 1995-11-19 18:23 millert
15685 * check.c: fixed SKey support
15687 1995-11-19 15:23 millert
15689 * README: updated version
15691 1995-11-19 13:59 millert
15693 * OPTIONS: fixed description of EXEMPTGROUP
15695 1995-11-19 10:47 millert
15697 * sudo.c: more people use _RLD_ than just alphas...
15699 1995-11-18 21:35 millert
15701 * Makefile.in: replaced $man_prefix with $mandir
15703 1995-11-18 21:30 millert
15705 * configure.in: fixed a typo
15707 1995-11-18 21:28 millert
15709 * Makefile.in: now use more GNU'ish dir names
15711 1995-11-18 21:27 millert
15713 * configure.in: now set *dir correctly (can override from command
15716 1995-11-18 19:17 millert
15718 * sudo.c: now deal with situations where we getwd() fails
15720 1995-11-17 00:37 millert
15722 * Makefile.in: added etc_dir, bin_dir, sbin_dir
15724 1995-11-17 00:37 millert
15726 * configure.in: added sbin_dir
15728 1995-11-16 21:28 millert
15730 * Makefile.in: now ship a flex-generated lex.yy.c
15732 1995-11-16 21:09 millert
15734 * Makefile.in: now sets _PATH_SUDO_SUDOERS, _PATH_SUDO_STMP,
15737 1995-11-16 21:06 millert
15739 * pathnames.h.in: _PATH_SUDO_SUDOERS & _PATH_SUDO_STMP are now
15740 overridden via Makefile
15742 1995-11-16 21:05 millert
15744 * options.h: no more error for redefining SUDOERS_OWNER
15746 1995-11-16 21:05 millert
15748 * OPTIONS: expanded SUDOERS_OWNER section
15750 1995-11-16 03:05 millert
15752 * visudo.c: now warn if chown(2) failed
15754 1995-11-16 02:55 millert
15756 * logging.c: better default warning for NO_SUDOERS_FILE
15758 1995-11-16 02:54 millert
15760 * sudo.c: added missing set_perms() no more cryptic message if the
15761 sudoers file is zero length, now just give a parse error
15763 1995-11-16 02:42 millert
15765 * logging.c: better diagnostics if NO_SUDOERS_FILE
15767 1995-11-16 02:41 millert
15769 * sudo.c: check_sudoers() now catches sudoers files that are not
15770 readable (but are stat'able).
15772 1995-11-13 01:12 millert
15774 * configure.in: now add -D__STDC__ for convex cc (not gcc)
15776 1995-11-13 00:52 millert
15778 * configure.in: MAN_PREFIX -> man_prefix now sets prefix and
15781 1995-11-13 00:52 millert
15783 * Makefile.in: now uses exec_prefix & prefix from configure
15785 1995-11-13 00:16 millert
15787 * find_path.c, getwd.c, goodpath.c, interfaces.c, logging.c,
15788 parse.c, parse.lex, parse.yacc, sudo.c, sudo.h, sudo_setenv.c,
15789 tgetpass.c, utime.c, visudo.c: options.h is now <> instead of ""
15790 so shadow build trees can have a custom copy of options.h
15792 1995-11-13 00:15 millert
15794 * check.c: user_is_exempt() is no longer a hack, it now uses
15797 1995-11-12 23:56 millert
15799 * options.h: EXEMPTGROUP is now "sudo"
15801 1995-11-12 22:25 millert
15803 * configure.in: MAN_POSTINSTALL now contains a leading space
15805 1995-11-12 22:25 millert
15807 * Makefile.in: removed leading tab if @MAN_POSTINSTALL@ not defined
15808 now removes testsudoers in clean:
15810 1995-11-12 22:24 millert
15812 * tgetpass.c: includes pwd.h to get _PASSWD_LEN definition
15814 1995-10-30 15:51 millert
15816 * sudo.c: unset the KRB_CONF envariable if using kerberos so we
15817 don't get spoofed into using a bogus server
15819 1995-09-29 17:50 millert
15821 * parse.yacc: now explicately initialize match[] tp be FALSE
15823 1995-09-23 16:48 millert
15825 * sudo.c: removed unused variable now passes -Wall
15827 1995-09-23 16:48 millert
15829 * parse.yacc: yyerror and dumpaliases are now void's now passes
15832 1995-09-23 16:48 millert
15834 * parse.lex: added prototype for yyerror
15836 1995-09-23 16:47 millert
15838 * interfaces.c: rmeoved unused cruft now passes -Wall
15840 1995-09-23 16:47 millert
15842 * check.c, logging.c, parse.c: now passes -Wall
15844 1995-09-23 16:46 millert
15846 * Makefile.in: fixed headers that moved to emul dir
15848 1995-09-23 12:05 millert
15850 * logging.c: fixed deref of nil pointer if no args
15852 1995-09-15 19:18 millert
15854 * OPTIONS: added a caveat to FQDN section
15856 1995-09-13 19:48 millert
15858 * Makefile.in: more $srcdir support for install targets
15860 1995-09-13 17:17 millert
15862 * find_path.c, interfaces.c, parse.c, parse.lex, parse.yacc,
15863 putenv.c, strdup.c, sudo.c, sudo_setenv.c, testsudoers.c,
15864 visudo.c: don't include malloc.h if we include stdlib.h
15866 1995-09-12 21:44 millert
15868 * parse.yacc: local search.h now lives in emul
15870 1995-09-12 21:41 millert
15872 * lsearch.c: local search.h now lives in emul
15874 1995-09-12 21:41 millert
15876 * check.c, utime.c: local utime.h now lives in emul dir
15878 1995-09-12 21:38 millert
15880 * Makefile.in: added support for building in other than the
15883 1995-09-10 14:01 millert
15885 * OPTIONS: annotated CSOPS_INSULTS option
15887 1995-09-10 13:56 millert
15889 * TROUBLESHOOTING: updated shadow passwords blurb
15891 1995-09-09 21:00 millert
15893 * sudo.c: if SHELL_IF_NO_ARGS is set, "sudo -- foo" now runs a
15894 shell and passes along foo as the arguments
15896 1995-09-09 18:52 millert
15898 * parse.lex: collapsed pathname and dir sections into one -- its
15901 1995-09-09 18:34 millert
15903 * parse.lex: fixed spacing quoting [,:\\=] now works correctly
15904 append() and fill() now take args to make the above work
15906 1995-09-08 20:51 millert
15908 * sudo.c: fixed a typo that caused commands with no tty on fd 0 but
15909 a tty on fd 1 to erroneously have "none" as their tty
15911 1995-09-04 15:35 millert
15913 * check.c: timestampfile is now a global static removed decl of
15914 timestampfile in remove_timestamp since we can just use the
15917 1995-09-04 15:28 millert
15919 * check.c: created touch() to update timestamps added
15920 USE_TTY_TICKETS support (bit of a kludge)
15922 1995-09-04 15:28 millert
15924 * compat.h: added _S_IFDIR and S_ISDIR
15926 1995-09-04 15:22 millert
15928 * OPTIONS, options.h: added USE_TTY_TICKETS
15930 1995-09-04 00:38 millert
15932 * parse.yacc: removed const from casts for lsearch() & lfind() to
15933 placate irix 4.x C compiler
15935 1995-09-03 14:12 millert
15937 * sudo.c: now only strip '/dev/' off of a tty if it starts with
15940 1995-09-03 14:12 millert
15942 * pathnames.h.in: added _PATH_DEV
15944 1995-09-03 14:11 millert
15946 * configure.in: AC_HAVE_HEADERS -> AC_CHECK_HEADERS now check for
15947 tcgetattr only if have termios.h
15949 1995-09-03 14:09 millert
15951 * tgetpass.c: fixed incorrect #ifdef termio uses "unsigned short"
15952 not int for c_?flag
15954 1995-09-03 13:19 millert
15956 * parse.lex, parse.yacc: fixed a spelling error
15958 1995-09-03 13:17 millert
15960 * Makefile.in: fixed typo
15962 1995-09-02 12:55 millert
15964 * Makefile.in: fixed a comment
15966 1995-09-02 12:54 millert
15968 * parse.yacc: added dotcat() to cat 2 strings w/ a dot effeciently
15969 now that we dynamically allocate strings they need to be free()'d
15971 1995-09-02 12:46 millert
15973 * parse.lex: dynamically allocates space for strings
15975 1995-09-02 12:34 millert
15977 * sudo.h: no more MAXCOMMANDLENGTH
15979 1995-09-01 22:25 millert
15981 * sudo.h: added decl of tty
15983 1995-09-01 22:25 millert
15985 * logging.c, sudo.c: moved tty stuff into sudo.c
15987 1995-09-01 14:18 millert
15989 * parse.c: fixed a logic bug. Was denying a command if user gave
15990 command line args but there were none in the sudoers file which
15993 1995-09-01 01:18 millert
15995 * sudo.h: MAXCOMMMANDLEN dropped down to 1K
15997 1995-09-01 01:13 millert
15999 * parse.lex: return foo; -> return(foo);
16001 1995-09-01 01:03 millert
16003 * parse.yacc: fixed netgr_matches() prototype
16005 1995-09-01 01:02 millert
16007 * parse.lex: added support for escaping "termination" characters
16009 1995-09-01 00:55 millert
16011 * parse.c: buf is now of size MAXPATHLEN+1 since it never holds
16014 1995-09-01 00:50 millert
16016 * sudo.c: fixed comments
16018 1995-09-01 00:49 millert
16020 * goodpath.c: fixed negation problem (doh!)
16022 1995-09-01 00:25 millert
16024 * parse.yacc: fixed 2nd parameter to lfind()
16026 1995-09-01 00:24 millert
16028 * parse.lex: now do bounds checking in fill() and append()
16030 1995-09-01 00:23 millert
16032 * sudo.c: include netdb.h as we should added a missing void cast
16033 added SHELL_IF_NO_ARGS support now use realloc() properly. would
16034 fail if realloc actually moved the string instead of shrinking it
16036 1995-09-01 00:17 millert
16038 * sample.sudoers: updated with examples of new features
16040 1995-09-01 00:05 millert
16042 * goodpath.c: now set errno to EACCES if not a regular file or not
16045 1995-09-01 00:04 millert
16047 * find_path.c: if given a fully-qualified or relative path we now
16048 check it with sudo_goodpath() and error out with the appropriate
16049 error message if the file does not exist or is not executable
16051 1995-09-01 00:03 millert
16053 * lsearch.c, emul/search.h: now use correct args for lfind
16055 1995-09-01 00:03 millert
16057 * logging.c: added a comment
16059 1995-08-31 23:52 millert
16061 * insults.h: added in CSOps insults
16063 1995-08-31 23:51 millert
16065 * ins_csops.h: Initial revision
16067 1995-08-31 23:35 millert
16069 * tgetpass.c: added RCS id
16071 1995-08-31 22:56 millert
16073 * sudo.h: increased MAXCOMMANDLENGTH to 8k HAVE_GETCWD ->
16076 1995-08-31 22:55 millert
16078 * OPTIONS: added CLASSIC_INSULTS, CSOPS_INSULTS, SHELL_IF_NO_ARGS
16080 1995-08-31 22:54 millert
16082 * sudo.c: fixed -k load_interfaces() now gets called if FQDN is set
16083 -p now works with -s
16085 1995-08-31 22:54 millert
16087 * parse.c: don't try to stat() "pseudo commands" like "validate"
16089 1995-08-31 22:53 millert
16091 * options.h: added CLASSIC_INSULTS added CSOPS_INSULTS added
16094 1995-08-31 22:53 millert
16096 * configure.in: added SecurID support added other insults to
16099 1995-08-31 22:52 millert
16101 * config.h.in: added HAVE_SECURID
16103 1995-08-31 22:52 millert
16105 * Makefile.in: added clobber target added ins_csops.h now gets
16106 CFLAGS from configure
16108 1995-08-31 22:46 millert
16110 * aclocal.m4: relaxed SUDO_FULL_VOID
16112 1995-08-31 22:44 millert
16114 * visudo.c: function comment blocks are now in same style as rest
16117 1995-08-31 22:44 millert
16119 * testsudoers.c: added support for command line args in
16122 1995-08-31 22:43 millert
16124 * sudoers.man: updated to have command args in the sudoers file
16126 1995-08-31 22:42 millert
16128 * sudo.man: added -s and -- flags added SHELL to ENVIRONMENT
16131 1995-08-19 19:32 millert
16133 * parse.yacc: PATH renamed to COMMAND
16135 1995-08-19 19:31 millert
16137 * parse.lex: it is now a parse error for directories to have args
16140 1995-08-19 19:30 millert
16142 * logging.c: now say command args if telling user to buzz off
16144 1995-08-19 19:30 millert
16146 * sudo.c: -s no longer indicates end of args sped up loading on
16147 cmnd_args in load_cmnd()
16149 1995-08-19 19:29 millert
16151 * parse.c: removed an unreachable statement
16153 1995-08-19 17:53 millert
16155 * parse.lex: made more efficient by pulling out the terminators
16156 when in GOTCMND state and making them their own rule
16158 1995-08-14 00:07 millert
16160 * sudo.h: removed MAXLOGLEN since it is no longer used
16162 1995-08-14 00:07 millert
16164 * parse.lex: now allows command args
16166 1995-08-14 00:06 millert
16168 * parse.c: now groks command arguments
16170 1995-08-13 23:39 millert
16172 * logging.c: now sets tty correctly when piped input
16174 1995-08-13 23:35 millert
16176 * sudo.c: fixed loading of cmnd_args (was including command name
16179 1995-08-13 23:34 millert
16181 * logging.c: fixed a core dump due to incorrect if construct
16183 1995-08-13 00:33 millert
16185 * configure.in: only add -lsun is irix < 5 don't look for -lnsl or
16188 1995-08-13 00:33 millert
16190 * aclocal.m4: fixed check for ISC
16192 1995-08-13 00:32 millert
16194 * sudo.c: now sets cmnd_args used by log_error() and that will be
16195 used by the parse to check against command args
16197 1995-08-13 00:32 millert
16199 * sudo.h: added cmnd_args
16201 1995-08-13 00:31 millert
16203 * logging.c: now dynamically allocate logline since we can guess at
16206 1995-08-05 13:52 millert
16208 * logging.c: cleaned up a bunch of unnecesary #ifdef's eliminated a
16209 buffer remove "register" since the compiler knows more than I do
16210 now do a "basename" of the tty
16212 1995-07-31 18:20 millert
16214 * configure.in: ++version
16216 1995-07-30 22:37 millert
16218 * sudo.h: added shell extern changed MODE_* to be bit masks to
16219 allow for several options together
16221 1995-07-30 22:36 millert
16223 * sudo.c: added -s (shell) option made MODE_* masks so we can do
16224 bitwise & and | to see if multiple flags are set.
16226 1995-07-30 22:01 millert
16228 * check.c: added securid support
16230 1995-07-30 14:38 millert
16232 * logging.c: removed a bunch of unnecesary strncpy()'s and replaced
16235 1995-07-29 17:17 millert
16237 * Makefile.in, version.h: ++version
16239 1995-07-27 06:52 millert
16241 * parse.yacc: fixed free() of an uninitialized pointer (yuck)
16243 1995-07-26 22:00 millert
16245 * testsudoers.c: added netgr_matches
16247 1995-07-26 21:29 millert
16249 * parse.c: cleaned up netgr_matches
16251 1995-07-26 00:26 millert
16253 * RUNSON: updated for 1.3.4
16255 1995-07-24 21:51 millert
16257 * Makefile.in: now installs sudoers.man -- really should clean this
16260 1995-07-24 21:18 millert
16262 * Makefile.in: added sudoers.cat and sudoers.man
16264 1995-07-24 21:15 millert
16266 * sudo.man: pulled out stuff on the sudoers file format into a
16269 1995-07-24 21:14 millert
16271 * sudoers.man: Initial revision
16273 1995-07-24 21:04 millert
16275 * HISTORY: fixed up my email address
16277 1995-07-24 20:03 millert
16279 * configure.in: added checks for innetgr and getdomainname
16281 1995-07-24 20:02 millert
16283 * visudo.c: added dummy netgr_matches function
16285 1995-07-24 20:01 millert
16287 * parse.c: added netgr_matches
16289 1995-07-24 20:01 millert
16291 * parse.lex, parse.yacc: added NETGROUP support
16293 1995-07-24 20:01 millert
16295 * config.h.in: added HAVE_INNETGR & HAVE_GETDOMAINNAME
16297 1995-07-24 18:07 millert
16299 * sudo.c: rewrote clean_env() that has rm_env() builtin
16301 1995-07-23 19:58 millert
16303 * check.c: now cast uid to long in sprintf
16305 1995-07-23 19:58 millert
16307 * OPTIONS: added _INSULTS suffix to HAL & GOONS end
16309 1995-07-23 19:57 millert
16311 * options.h: added _INSULTS suffix to HAL & GOONS
16313 1995-07-23 19:35 millert
16315 * ins_2001.h, ins_classic.h, ins_goons.h, insults.h: converted to
16316 new scheme of insult "unions" end
16318 1995-07-23 17:48 millert
16320 * sudo.c: now uses MAX_UID_T_LEN
16322 1995-07-23 17:48 millert
16324 * configure.in: added SUDO_UID_T_LEN !l
16326 1995-07-23 17:48 millert
16328 * config.h.in: added MAX_UID_T_LEN
16330 1995-07-23 17:47 millert
16332 * check.c: now use MAX_UID_T_LEN
16334 1995-07-23 17:47 millert
16336 * aclocal.m4: added check for max len of uid_t fixed sco vs. isc
16339 1995-07-19 19:05 millert
16341 * configure.in: corrected version
16343 1995-07-19 17:29 millert
16345 * configure.in: added sco support
16347 1995-07-19 17:29 millert
16349 * aclocal.m4: hack to check for sco
16351 1995-07-18 21:27 millert
16353 * interfaces.c: removed #include <net/route.h> since it was hosing
16356 1995-07-18 13:35 millert
16358 * find_path.c: fixed prreadlink() prototype
16360 1995-07-17 23:54 millert
16362 * check.c: added parens in #if's
16364 1995-07-17 23:53 millert
16366 * configure.in: added SPW_ prefix
16368 1995-07-17 23:20 millert
16370 * sudo.h: moved SPW_* to config.h.in
16372 1995-07-17 23:19 millert
16374 * sudo.c: added a set of parens
16376 1995-07-17 23:19 millert
16378 * config.h.in: added SPW_*
16380 1995-07-17 22:50 millert
16382 * sudo.h: added SPW_* reordered error codes
16384 1995-07-17 22:49 millert
16386 * check.c: moved SPW_* to sudo.h
16388 1995-07-17 14:29 millert
16390 * logging.c: GLOBAL_NO_AUTH_ENT -> GLOBAL_NO_SPW_ENT
16392 1995-07-17 14:29 millert
16394 * configure.in: AUTH -> SECUREWARE
16396 1995-07-17 14:29 millert
16398 * check.c, sudo.c: SPW_AUTH -> SPW_SECUREWARE
16400 1995-07-17 00:22 millert
16402 * check.c: now uses SHADOW_TYPE to make shadow pw support more
16403 readable and modular. It's a start...
16405 1995-07-17 00:21 millert
16407 * configure.in: added autodetection of shadow passwords
16409 1995-07-17 00:20 millert
16411 * sudo.c: now uses SHADOW_TYPE define
16413 1995-07-17 00:19 millert
16415 * config.h.in: added SHADOW_TYPE which replaces SUNOS4 & __svr4__
16418 1995-07-17 00:19 millert
16420 * aclocal.m4: added SUDO_CHECK_SHADOW
16422 1995-07-12 17:09 millert
16424 * configure.in: define SVR4 for ISC define BROKEN_SYSLOG for hpux
16425 took out test for memmove() since we dno longer use it...
16427 1995-07-12 17:08 millert
16431 1995-07-12 17:05 millert
16433 * logging.c: added BROKEN_SYSLOG support
16435 1995-07-12 17:05 millert
16437 * config.h.in: added BROKEN_SYSLOG
16439 1995-07-12 17:04 millert
16441 * check.c: now only bitch it timestamp > time_now + 2 * timeout to
16442 allow for a machine udpating its time from a server
16444 1995-07-12 17:04 millert
16446 * sudo.man: added 2 security notes updated Nieusma's email addr
16448 1995-07-12 14:18 millert
16450 * lsearch.c: changed a memmove() to memcpy() since we don't have to
16451 worry about overlapping segments.
16453 1995-07-11 15:41 millert
16455 * interfaces.c: cleanup up the loop when interfaces are groped in
16456 so that it is readable
16458 1995-07-11 14:52 millert
16460 * Makefile.in, version.h: ++version
16462 1995-07-09 18:17 millert
16464 * CHANGES: annotated 124-126
16466 1995-07-07 16:06 millert
16468 * check.c: fixed permissions check on /tmp/.odus
16470 1995-07-06 19:35 millert
16472 * check.c: fixed some comments
16474 1995-07-06 14:49 millert
16476 * check.c: now checks owner & mode of timedir also checks for bogus
16477 dates on timestamp file
16479 1995-07-06 14:49 millert
16481 * OPTIONS: updated TIMEOUT info
16483 1995-07-06 14:48 millert
16485 * logging.c, sudo.h: added BAD_STAMPDIR and BAD_STAMPFILE
16487 1995-07-06 14:47 millert
16489 * compat.h: added definition of S_IRWXU
16491 1995-07-06 14:47 millert
16495 1995-07-03 14:16 millert
16497 * interfaces.c: added #ifdef to make it compile on strange arches
16499 1995-07-02 18:13 millert
16501 * aclocal.m4: fixed check for fulkl void impl.
16503 1995-07-02 09:56 millert
16505 * check.c: added mssing "static"
16507 1995-07-01 20:41 millert
16509 * insults.h: replaced #elif with #else #if constructs for ancient C
16512 1995-07-01 20:18 millert
16514 * INSTALL: updated irix c2 & kerb5 info
16516 1995-07-01 20:15 millert
16518 * configure.in: added shadow pw support for irix
16520 1995-07-01 16:07 millert
16522 * CHANGES: last changes for sudo 1.3.3
16524 1995-07-01 16:07 millert
16526 * TODO, BUGS: updated
16528 1995-07-01 16:04 millert
16530 * configure.in: now calls SUDO_SOCK_SA_LEN
16532 1995-07-01 16:04 millert
16534 * config.h.in: added HAVE_SA_LEN
16536 1995-07-01 16:04 millert
16538 * aclocal.m4: added SUDO_SOCK_SA_LEN
16540 1995-07-01 15:49 millert
16542 * interfaces.c: now works with ip implementations that use sa_len
16545 1995-07-01 14:26 millert
16547 * INSTALL: added note about buggy AIX compiler
16549 1995-07-01 14:24 millert
16551 * interfaces.c: now include sys/time.h for AIX
16553 1995-06-27 22:35 millert
16555 * Makefile.in: getcwd -> getwd
16557 1995-06-27 21:28 millert
16559 * interfaces.c: now works for ISC and others. yay.
16561 1995-06-26 14:24 millert
16563 * Makefile.in, version.h: version++
16565 1995-06-22 20:26 millert
16567 * aclocal.m4: fixed test for full void impl
16569 1995-06-22 20:25 millert
16571 * sudo.c: now check to see that st_dev is non-zero before assuming
16572 that we are being spoofed
16574 1995-06-20 16:56 millert
16576 * aclocal.m4, configure.in: SUDO_FUNC_UTIME_NULL ->
16579 1995-06-19 16:32 millert
16581 * aclocal.m4: fixed include file order for SUDO_FUNC_UTIME_POSIX
16583 1995-06-19 16:10 millert
16585 * logging.c: added cast for ttyname()
16587 1995-06-19 15:23 millert
16589 * configure.in: fixed typo
16591 1995-06-19 15:19 millert
16593 * check.c: now deal correctly with all known variation of utime()
16596 1995-06-19 15:19 millert
16598 * configure.in: added SUDO_FUNC_UTIME_POSIX
16600 1995-06-19 15:19 millert
16602 * aclocal.m4: added SUDO_FUNC_UTIME_NULL and SUDO_FUNC_UTIME_POSIX
16604 1995-06-19 15:14 millert
16606 * config.h.in: added HAVE_UTIME_POSIX
16608 1995-06-19 13:38 millert
16610 * check.c: fixed a typo
16612 1995-06-19 13:29 millert
16614 * check.c: no longer assume !HAVE_UTIME_NULL means old BSD utime()
16616 1995-06-19 13:20 millert
16618 * check.c: fixed fascist C compiler warning
16620 1995-06-18 23:14 millert
16622 * interfaces.c: now set strioctl.ic_timout in STRSET() now
16623 initialize num_interfaces to 0 (just to be anal)
16625 1995-06-18 18:06 millert
16627 * sudo.h: increaed MAXLOGLEN by MAXPATHLEN to account for ttyname
16629 1995-06-18 18:05 millert
16631 * logging.c: added tty logging
16633 1995-06-18 16:04 millert
16635 * interfaces.c: reworked the ISC code
16637 1995-06-18 15:27 millert
16639 * Makefile.in, version.h: updated version
16641 1995-06-18 15:24 millert
16643 * check.c: now expect old-style utime(3) if utime() can't take NULL
16646 1995-06-18 15:08 millert
16648 * configure.in: added check for utime.h
16650 1995-06-18 15:08 millert
16652 * config.h.in: added HAVE_UTIME_H
16654 1995-06-18 14:48 millert
16656 * Makefile.in: added CPPFLAGS STATIC_FLAGS -> LDFLAGS
16658 1995-06-18 13:58 millert
16660 * configure.in: now search for kerb libs and includes
16662 1995-06-18 13:03 millert
16664 * check.c: added support for utime(2)'s that can't take a NULL
16667 1995-06-18 13:03 millert
16669 * utime.c: moved HAVE_UTIME_NULL stuff to update_timestamp() where
16672 1995-06-17 20:46 millert
16674 * configure.in: added utime(s) stuff
16676 1995-06-17 20:46 millert
16678 * check.c: now use utime()
16680 1995-06-17 20:46 millert
16682 * config.h.in: added HAVE_UTIME and HAVE_UTIME_NULL
16684 1995-06-17 19:12 millert
16686 * utime.c: now use HAVE_UTIME_NULL
16688 1995-06-17 19:02 millert
16690 * utime.c, emul/utime.h: Initial revision
16692 1995-06-17 18:24 millert
16694 * check.c: need to setuid(0) to make kerb4 stuff work.
16696 1995-06-17 18:14 millert
16698 * tgetpass.c: no more special case for kerberos
16700 1995-06-17 18:13 millert
16702 * config.h.in: took out setreuid and setresuid stuff added kerb5
16703 stuff (use kerb4 emulation)
16705 1995-06-17 18:13 millert
16707 * compat.h: no longer need setreuid() emulation now set _PASSWD_LEN
16710 1995-06-17 18:12 millert
16712 * check.c: now use private ticket file for kerberos support to
16713 avoid trouncing on system one
16715 1995-06-15 00:48 millert
16717 * sudo.h: added SPOOF_ATTEMPT & cmnd_st
16719 1995-06-15 00:47 millert
16721 * sudo.c: added anti-spoofing support
16723 1995-06-15 00:47 millert
16725 * parse.c: now use global cmnd_st
16727 1995-06-15 00:47 millert
16729 * logging.c: added SPOOF_ATTEMPT suypport
16731 1995-06-14 23:41 millert
16733 * testsudoers.c, visudo.c: added void casts where appropriate
16735 1995-06-14 23:40 millert
16737 * parse.yacc: fixed up spacing and added void casts where
16740 1995-06-14 23:27 millert
16742 * sudo.c: fixed problem with "-p prompt" but no args
16744 1995-06-14 04:43 millert
16746 * sudo.man: added BUGS and annotated -l description
16748 1995-06-14 04:43 millert
16750 * sudo.h: validate() now takes a flag
16752 1995-06-14 04:43 millert
16754 * sudo.c: validate() now takes a flag added -l
16756 1995-06-14 04:42 millert
16758 * parse.yacc: added support for -l
16760 1995-06-14 04:41 millert
16762 * parse.c: validate() now takes a flag that says whether or not to
16765 1995-06-07 21:36 millert
16767 * logging.c: now deals with Argv == 1
16769 1995-06-07 21:34 millert
16771 * sudo.man: added -p option
16773 1995-06-07 21:27 millert
16775 * sudo.c: added prompt support reworked parse_args()
16777 1995-06-07 20:49 millert
16779 * sudo.h: added prompt
16781 1995-06-07 20:49 millert
16783 * options.h: added PASSPROMPT
16785 1995-06-07 20:48 millert
16787 * check.c: now use BUFSIZ as length of kerb password added kpass so
16788 pass is always a char * now use prompt global when asking for a
16791 1995-06-07 20:47 millert
16793 * tgetpass.c: now use BUFSIZ as _PASSWD_LEN if using kerberos
16795 1995-06-07 20:43 millert
16797 * OPTIONS: added PASSPROMPT
16799 1995-06-07 01:44 millert
16801 * configure.in: only look for -lufc or -lcrypt if crypt() not in
16804 1995-06-07 01:43 millert
16806 * check.c: don't exit on kerb error, just warn if k_errno ==
16807 KDC_PR_UNKNOWN (unknown user) silently fail
16809 1995-06-06 22:44 millert
16811 * INSTALL: added kerb4 note
16813 1995-06-06 22:43 millert
16815 * tgetpass.c: HAVE_KERBEROS -> HAVE_KERB4
16817 1995-06-06 22:41 millert
16819 * check.c: removed debugging printf
16821 1995-06-06 22:33 millert
16823 * configure.in: KERBEROS -> KERB4 added checks for setreuid &
16826 1995-06-06 22:32 millert
16828 * config.h.in: HAVE_KERBEROS -> HAVE_KERB4 added HAVE_SETREUID and
16831 1995-06-06 22:32 millert
16833 * compat.h: added deif of UID_NO_CHANGE & GID_NO_CHANGE added
16834 setreuid emulation with setresuid if applic
16836 1995-06-06 22:31 millert
16838 * check.c: HAVE_KERBEROS -> HAVE_KERB4 now only do the stupid
16839 chown() hack if no setreuid() or a broken one
16841 1995-06-05 23:44 millert
16843 * config.h.in: added HAVE_KERBEROS
16845 1995-06-05 23:43 millert
16847 * tgetpass.c: added KERBEROS support (long passwords)
16849 1995-06-05 23:42 millert
16851 * check.c, configure.in: added kerberos support
16853 1995-06-03 19:36 millert
16855 * sudo.h: added MODE_BACKGROUND
16857 1995-06-03 19:36 millert
16859 * sudo.man: escaped dashes added -b option
16861 1995-06-03 19:34 millert
16863 * sudo.c: added -b option
16865 1995-06-03 18:52 millert
16867 * check.c: added crypt() for osf/1 3.x enhanced secuiry
16869 1995-06-03 18:18 millert
16871 * configure.in: now check for -lcrypt
16873 1995-06-03 18:00 millert
16875 * interfaces.c: added ENXIO like EADDRNOTAVAIL
16877 1995-05-07 23:14 millert
16879 * configure.in: now emulate getwd(), not getcwd()
16881 1995-05-07 23:13 millert
16883 * sudo.c: getcwd() -> getwd()
16885 1995-05-07 23:12 millert
16887 * getwd.c: getcwd -> getwd
16889 1995-05-02 01:34 millert
16891 * ins_2001.h, ins_classic.h, ins_goons.h: Initial revision
16893 1995-05-02 01:34 millert
16895 * insults.h: broke out insults into separate include files
16897 1995-05-02 01:32 millert
16899 * options.h, OPTIONS: added GOONS
16901 1995-05-02 01:32 millert
16903 * Makefile.in: added ins_2001.h ins_classic.h ins_goons.h
16905 1995-05-01 23:34 millert
16907 * Makefile.in, version.h: ++version
16909 1995-05-01 23:34 millert
16911 * visudo.c: moved signal handler setup to setup_signals()
16913 1995-05-01 23:33 millert
16915 * sudo.h: added load_interfaces()
16917 1995-05-01 23:33 millert
16919 * sudo.c: moved load_interfaces to interfaces.c
16921 1995-05-01 23:33 millert
16923 * parse.yacc: added clearaliases
16925 1995-05-01 23:33 millert
16927 * OPTIONS, options.h: added FAST_MATCH
16929 1995-05-01 23:32 millert
16931 * parse.lex: now uses clearaliases variable
16933 1995-05-01 23:31 millert
16935 * interfaces.c: Initial revision
16937 1995-05-01 23:31 millert
16939 * Makefile.in: added interfaces.[co]
16941 1995-05-01 23:30 millert
16943 * testsudoers.c: now uses ip addrs and netmasks via
16946 1995-05-01 22:47 millert
16948 * sudo.c: now remove IFS instead of setting to "sane" value
16950 1995-05-01 16:30 millert
16952 * parse.c: added FAST_MATCH
16954 1995-04-29 20:19 millert
16956 * Makefile.in: sudo_goodpath.c-> goodpath.c
16958 1995-04-29 20:15 millert
16960 * sudo.c: added Andy's new ISC changes
16962 1995-04-14 14:06 millert
16964 * OPTIONS: added a sentence to SECURE_PATH info
16966 1995-04-14 13:57 millert
16970 1995-04-14 13:54 millert
16972 * RUNSON, CHANGES: updated
16974 1995-04-13 17:04 millert
16976 * RUNSON: updated for beta3
16978 1995-04-13 14:32 millert
16980 * Makefile.in, version.h: ++version
16982 1995-04-13 13:56 millert
16984 * aclocal.m4: sendmail is now looked for in
\17/usr/ucblib
16986 1995-04-13 13:54 millert
16988 * sudo.c: fixed indentation
16990 1995-04-13 13:35 millert
16992 * aclocal.m4: fixed a typo
16994 1995-04-13 13:19 millert
16996 * sudo.c: updated ISC mods
16998 1995-04-13 13:19 millert
17000 * configure.in: added unixware case
17002 1995-04-13 13:19 millert
17004 * check.c: user_is_exempt is no longer hidden
17006 1995-04-13 13:19 millert
17010 1995-04-13 13:19 millert
17012 * aclocal.m4: isc and riscos changes
17014 1995-04-13 13:18 millert
17016 * OPTIONS: added NOTE about new interaction of EXEMPTGROUP and
17019 1995-04-13 13:18 millert
17021 * Makefile.in: fixed a typo and added testsudoers stuff
17023 1995-04-13 12:34 millert
17025 * testsudoers.c: Initial revision
17027 1995-04-12 19:31 millert
17029 * parse.yacc: applied fixed patch from Chris
17031 1995-04-11 14:30 millert
17033 * Makefile.in: fixed a typo
17035 1995-04-11 14:14 millert
17037 * parse.yacc: added a set of braces for bison
17039 1995-04-11 14:01 millert
17041 * parse.yacc: merged in Chris' changes to dekludge the parser.
17043 1995-04-11 00:38 millert
17045 * logging.c: send_mail() was calling find_path() which is wrong
17046 since find_path() stores cmnd in a static var. Anyhow, it
17047 doesn't make much sense since MAILER should always be fully
17050 1995-04-10 19:51 millert
17052 * sample.sudoers: added User_Alias stuff
17054 1995-04-10 19:50 millert
17056 * aclocal.m4: SUDO_NEXT now looks for
17057 /usr/lib/NextStep/software_version
17059 1995-04-10 19:50 millert
17061 * RUNSON: added DEC UNIX 3.0 w/ gcc
17063 1995-04-10 19:49 millert
17065 * visudo.c: Exit was being used in places where exit should be used
17067 1995-04-10 19:44 millert
17069 * sudoers: added "User alias specification"
17071 1995-04-10 18:04 millert
17073 * parse.yacc: fixed probs caused by making nslots and naliases a
17076 1995-04-10 15:09 millert
17078 * RUNSON: added KSR, upped rev to 1.3.1b2
17080 1995-04-10 15:07 millert
17082 * logging.c, parse.yacc: 1024 -> BUFSIZ
17084 1995-04-10 15:05 millert
17086 * parse.yacc: void * -> VOID * naliases and nslots are now size_t
17087 to appease lsearch on 64-bit machines
17089 1995-04-09 19:30 millert
17091 * TODO: did a bunch of things and added a bunch :-)
17093 1995-04-09 19:30 millert
17097 1995-04-09 19:24 millert
17099 * visudo.man: closer to BSD manpage style
17101 1995-04-09 19:15 millert
17103 * sudo.man: closer to standard BSD man format
17105 1995-04-09 18:58 millert
17107 * compat.h, config.h.in, insults.h, options.h, pathnames.h.in,
17108 sudo.h, version.h, emul/search.h: added RCS id
17110 1995-04-09 17:35 millert
17112 * sudo.h: removed crufty #defines that are no longer used
17114 1995-04-09 17:13 millert
17116 * BUGS: fixed a bug
17118 1995-04-09 17:12 millert
17120 * sudo.man: updated based on sudo changes
17122 1995-04-09 17:11 millert
17124 * parse.yacc: now allow ALL keyword in User_Aliases now allow ALL
17125 keyword as well as a NAME or ALIAS
17127 1995-04-09 17:11 millert
17131 1995-04-09 17:04 millert
17133 * sudo.c: now sets SUDO_COMMAND and SUDO_GID envariables.
17135 1995-04-09 15:24 millert
17137 * aclocal.m4: fixed bug with full void impl check
17139 1995-04-08 23:11 millert
17141 * parse.yacc: fixed User_Alias supoprt
17143 1995-04-08 22:27 millert
17145 * parse.yacc: added stubs for User_Alias support
17147 1995-04-08 22:27 millert
17149 * sudo.c: now sets removes # bogus interfaces from num_interfaces
17151 1995-04-08 22:26 millert
17153 * parse.lex: added User_Alias support
17155 1995-04-07 21:10 millert
17157 * Makefile.in: removed extraneous TODO
17159 1995-04-07 19:48 millert
17161 * visudo.c: ntwk_matches -> addr_matches
17163 1995-04-07 15:38 millert
17165 * parse.yacc: ntwk_matches -> addr_matches
17167 1995-04-07 15:37 millert
17169 * parse.c: ntwk_matches -> addr_matches now use inet_addr() not
17170 inet_network() (which expects octet boundaries) fixes for OSF
17171 (sizeof(int) != sizeof(long))
17173 1995-04-07 15:08 millert
17175 * sudo.c: took out debugging info
17177 1995-04-06 23:45 millert
17179 * aclocal.m4: OS was being set to unknown before non-uname based
17180 host checks. This caused no checks to happen since $OS was not
17183 1995-04-06 23:30 millert
17185 * sudo.c: fixed loading of interfaces struct still has debugging
17188 1995-04-06 22:23 millert
17190 * parse.c: fixed typo
17192 1995-04-06 16:17 millert
17194 * Makefile.in: ++version
17196 1995-04-06 16:16 millert
17200 1995-04-06 16:16 millert
17202 * visudo.c: removed extraneous extern decl of "top
17204 1995-04-06 16:14 millert
17206 * visudo.c: now zeros "top"
17208 1995-04-06 16:13 millert
17210 * parse.yacc: removed parser_cleanup (no need for it now)
17212 1995-04-06 16:13 millert
17214 * parse.lex: now calls reset_aliases() directly
17216 1995-04-04 18:21 millert
17218 * OPTIONS: added a sentence to SECURE_PATH description
17220 1995-04-04 18:17 millert
17222 * parse.c: fixed my stupid bug where I used NAMLEN on something I
17223 wanted to just get the name from. argh.
17225 1995-04-03 16:58 millert
17227 * lsearch.c: fixed argument order of memmove() that i hosed when
17228 converting from bcopy(). arghh.
17230 1995-04-03 15:33 millert
17232 * Makefile.in: finally fixed DISTFILES line
17234 1995-04-03 15:21 millert
17236 * Makefile.in: tabs -> spaces
17238 1995-04-03 15:15 millert
17240 * Makefile.in: added missing files to DISTFILES
17242 1995-04-03 14:50 millert
17244 * Makefile.in: SUPPORTED -> RUNSON
17246 1995-04-01 03:12 millert
17250 1995-04-01 01:54 millert
17252 * RUNSON: updated for pl5b1 release
17254 1995-04-01 01:53 millert
17256 * BUGS, TODO: updated
17258 1995-04-01 01:52 millert
17260 * check.c: fixed bug where if you hit return at first sudo prompt
17261 it would still log as a failure
17263 1995-04-01 01:29 millert
17267 1995-04-01 01:25 millert
17269 * aclocal.m4: better test for bogus void * implementation
17271 1995-03-31 20:33 millert
17273 * logging.c: added PASSWORDS_NOT_CORRECT
17275 1995-03-31 20:32 millert
17277 * check.c: added PASSWORDS_NOT_CORRECT stuff]
17279 1995-03-31 20:30 millert
17281 * sudo.h: added PASSWORDS_NOT_CORRECT
17283 1995-03-31 19:16 millert
17285 * tgetpass.c: moved pathnames.h
17287 1995-03-31 19:16 millert
17289 * sudo.c: removed some unused vars and fixed up uid2str
17291 1995-03-31 19:15 millert
17293 * putenv.c: moved compat.h
17295 1995-03-31 19:14 millert
17297 * getcwd.c, getwd.c: added pathnames.h
17299 1995-03-31 18:18 millert
17301 * parse.yacc: fixed a typo I introduced in the last checkin :-(
17303 1995-03-31 18:11 millert
17305 * parse.lex: can't have #ifdef's where N is defined so just do this
17306 the broken way for AIX
17308 1995-03-31 18:08 millert
17310 * parse.yacc: better hack from Chris (but still a hack)
17312 1995-03-31 18:05 millert
17314 * parse.lex: stupid hack for broken aix lex
17316 1995-03-31 17:47 millert
17318 * tgetpass.c: now includes compat.h
\ 6
17320 1995-03-31 17:27 millert
17322 * visudo.c: now includes fcntl.h
17324 1995-03-31 17:27 millert
17326 * compat.h: added FD_SET and FD_ZERO for 4.2BSD
17328 1995-03-31 16:12 millert
17330 * parse.yacc: dirty hack to fix parser bug. i don't really like
17331 this but it works for now...
17333 1995-03-31 16:12 millert
17335 * sudo.c: uid2str is now static like the prototype says
17337 1995-03-29 23:48 millert
17339 * RUNSON: Initial revision
17341 1995-03-29 23:47 millert
17343 * TODO, CHANGES, SUPPORTED, TROUBLESHOOTING: updated
17345 1995-03-29 23:46 millert
17347 * sudo.c: check_sudoers now returns an error code and sudo calls
17348 inform_user and log_error based on the return value.
17350 1995-03-29 23:45 millert
17352 * logging.c, sudo.h: added entries for new errors
17354 1995-03-29 23:03 millert
17356 * parse.c: now set uid to that of SUDOERS_OWNER while parsing
17359 1995-03-29 22:52 millert
17361 * Makefile.in: took out testsudoers
\ 6
17363 1995-03-29 22:36 millert
17365 * sudo.c: now explicately checks that it is setuid root
17367 1995-03-29 22:28 millert
17369 * sudo.c: If a user has no passwd entry sudo would segv (writing to
17370 a garbage pointer). Now allocate space before writing :-)
17372 1995-03-29 22:06 millert
17374 * configure.in: reordered AC_CHECK_FUNCS
17376 1995-03-29 22:06 millert
17378 * config.h.in: fixed memset macro
17380 1995-03-29 21:47 millert
17382 * logging.c: bzero -> memset when a parse error is logged the line
17383 number of the error is now logged too
17385 1995-03-29 21:46 millert
17387 * tgetpass.c, visudo.c: bzero -> memset
17389 1995-03-29 21:46 millert
17391 * INSTALL: added Sunos to blurb about c2 security
17393 1995-03-29 21:45 millert
17395 * configure.in: added a SUN4 define for C2 security
17397 1995-03-29 21:44 millert
17399 * config.h.in: bcopy -> memmove bzero -> memset
17401 1995-03-29 21:43 millert
17403 * lsearch.c: bcopy -> memmove char * -> VOID *
17405 1995-03-29 21:30 millert
17407 * check.c: added support for sunos with C2 security
17409 1995-03-29 21:12 millert
17411 * OPTIONS, options.h: reordered
17413 1995-03-29 21:12 millert
17415 * pathnames.h.in: _PATH_SUDO_LOGFILE now set based on configure
17417 1995-03-29 21:12 millert
17419 * configure.in: added SUDO_LOGFILE and SUDO_TYPE_SIZE_T
17421 1995-03-29 21:12 millert
17423 * config.h.in: added _SUDO_PATH_LOGFILE
17425 1995-03-29 21:11 millert
17427 * aclocal.m4: added SUDO_LOGFILE to find where to put sudo.log
17428 added SUDO_CHECK_TYPE (just AC_CHECK_TYPE but checks unistd.h
17429 too) added SUDO_TYPE_SIZE_T (calls SUDO_CHECK_TYPE)
17431 1995-03-29 18:17 millert
17433 * TROUBLESHOOTING: Initial revision
17435 1995-03-29 17:59 millert
17437 * sudo.c: now do set_perms(PERM_ROOT) before the getpwuid() in
17438 load_global() to work around a problem is trusted hpux shadow
17441 1995-03-29 17:41 millert
17443 * parse.yacc: backed out a change in malloc/realloc
17445 1995-03-29 17:38 millert
17447 * parse.yacc: now include stdlib.h
17449 1995-03-29 17:22 millert
17451 * visudo.c: now do an freopen() of the stmp file so that yyin will
17452 always point to the same thing. This is important for flex since
17453 we are doing a YY_NEWFILE
17455 1995-03-29 17:20 millert
17457 * parse.yacc: replaced yywrap() with parser_cleanup() since
17458 yywrap() needs to be in parse.lex to be able to use YY_NEW_FILE.
17461 1995-03-29 17:18 millert
17463 * parse.lex: now have a rule that matches anything that doesn't
17464 match an explicite rule. well, you know what i mean (. matches
17465 anything not yet matched). However, this means that there is
17466 input still queued up so we need to do a YY_NEW_FILE; in yywrap.
17467 So, yywrap has moved into parse.lex and it calls parser_cleanup()
17468 which is most of the old yywrap() sigh.
17470 1995-03-29 17:17 millert
17472 * SUPPORTED: no longer used
17474 1995-03-29 16:13 millert
17476 * getcwd.c, getwd.c: moved compat.h to be the last include file
17478 1995-03-29 16:11 millert
17480 * parse.yacc: fixed type of aliascmp() args
17482 1995-03-29 15:58 millert
17484 * find_path.c: NULL -> '\0'
17486 1995-03-29 15:42 millert
17488 * parse.yacc: added casts to lfind and lsearch args for irix
17490 1995-03-29 08:20 millert
17492 * Makefile.in: bsdinstall -> install-sh
17494 1995-03-29 08:20 millert
17496 * INSTALL: added info about make realclean
17498 1995-03-29 08:17 millert
17500 * Makefile.in: updated VERSION added dependencies for visudo.cat
17502 1995-03-29 08:17 millert
17504 * version.h: -> pl5b1
17506 1995-03-29 08:16 millert
17508 * sudo.c: took out -l
17510 1995-03-29 00:03 millert
17512 * Makefile.in: now there is a real visudo.man and visudo.cat
17514 1995-03-28 23:54 millert
17516 * sudo.man: took out visudo stuff
17518 1995-03-28 23:54 millert
17520 * visudo.man: Initial revision
17522 1995-03-28 23:12 millert
17524 * parse.c, parse.lex, parse.yacc: updated copyright
17526 1995-03-28 23:05 millert
17528 * README: updated for pl5
17530 1995-03-28 20:02 millert
17532 * sudo.man: updated Nieusma & Hieb email addresses
17534 1995-03-28 19:57 millert
17536 * INSTALL: updated to include options.h and OPTIONS
17538 1995-03-28 19:35 millert
17540 * CHANGES, TODO: updated
17542 1995-03-28 19:35 millert
17544 * BUGS: eliminated bug #1 (yay)
17546 1995-03-28 19:31 millert
17548 * configure.in: sunos no longer gets linked statically
17550 1995-03-28 18:58 millert
17552 * parse.lex: prototype now uses __P()
17554 1995-03-28 18:49 millert
17556 * parse.lex: make fill() non-ansi
17558 1995-03-28 15:26 millert
17560 * parse.c: made -v (validate) work
17562 1995-03-28 15:26 millert
17564 * logging.c: now gives host
17566 1995-03-28 10:34 millert
17568 * find_path.c: don't check for execute/statable if fq or relative
17571 1995-03-28 01:07 millert
17573 * parse.c: added a cast
17575 1995-03-28 00:49 millert
17577 * visudo.c: now include ctype.h for islower and tolower macros
17579 1995-03-28 00:48 millert
17581 * goodpath.c: moved _S_IFMT & _S_ISREG to compat.h
17583 1995-03-28 00:48 millert
17585 * sudo.c: moved a set of parens
17587 1995-03-28 00:48 millert
17589 * strdup.c: now include compat.h
17591 1995-03-28 00:47 millert
17593 * parse.yacc: now cast malloc & realloc return vals added search
17594 for HAVE_LSEARCH now use strcmp if no strcasecmp available
17596 1995-03-28 00:46 millert
17598 * lsearch.c, emul/search.h: void * -> VOID *
17600 1995-03-28 00:45 millert
17602 * config.h.in: removed HAVE_FLEX added VOID added HAVE_DIRENT_H,
17603 HAVE_SYS_NDIR_H, HAVE_SYS_DIR_H, HAVE_NDIR_H added HAVE_LSEARCH
17605 1995-03-28 00:44 millert
17607 * compat.h: added _S_IFMT, _S_IFREG, and S_ISREG
17609 1995-03-28 00:44 millert
17611 * aclocal.m4: took out SUDO_PROG_INSTALL 1.x to 2.x changes added
17612 echo and results to most SUDO_* macros
17614 1995-03-28 00:43 millert
17616 * Makefile.in: no more -I.
17618 1995-03-28 00:22 millert
17620 * configure.in: various 1.x ro 2.x autoconf changes now check for
17621 strcasecmp now use AC_INSTALL_PROG instead of custom one added
17622 check for fully woorking void implementation
17624 1995-03-28 00:02 millert
17626 * Makefile.in: added lsearch & search.h visudo links into
17629 1995-03-27 23:43 millert
17631 * aclocal.m4: partial 1.x to 2.x changes added SUDO_FULL_VOID
17633 1995-03-27 23:40 millert
17635 * visudo.c: whatnow_help was prototyped to be static be was not
17638 1995-03-27 21:15 millert
17640 * configure.in: autoconf 2.x changes took out HAVE_FLEX (no longer
17641 used) added check for dirent/dir/ndir.h
17643 1995-03-27 21:09 millert
17645 * parse.c: now use groovy gnu autoconf macro AC_HEADER_DIRENT
17647 1995-03-27 20:38 millert
17649 * getcwd.c, getwd.c: MAXPATHLEN -> MAXPATHLEN+1
17651 1995-03-27 20:23 millert
17653 * emul/search.h, lsearch.c: Initial revision
17655 1995-03-27 18:26 millert
17657 * parse.yacc: eliminated bison warnings
17659 1995-03-27 17:10 millert
17661 * parse.lex: added missing case
17663 1995-03-27 17:04 millert
17665 * visudo.c: now iincludes signal.h
17667 1995-03-27 15:16 millert
17669 * parse.yacc: only clear data structures on a parse error
17671 1995-03-27 15:01 millert
17673 * visudo.c: whatnow() now gives help on invalid input
17675 1995-03-27 14:54 millert
17677 * visudo.c: added a whatnow() function (sort of like mh)
17679 1995-03-27 14:53 millert
17681 * parse.yacc: kill_aliases -> reset_aliases yywrap() now cleans up
17682 by calling reset_aliases() and clearing top took reset stuff out
17683 of yyerror() since it doesn't beling there (and doesn't work
17684 anyway). errorlineno is now initially set to -1 so we can set it
17685 to the first error that occurrs (it was getting set to the last)
17687 1995-03-27 14:53 millert
17689 * parse.lex: added a void cast
17691 1995-03-27 13:26 millert
17693 * visudo.c: rewrote from scratch based on 4.3BSD vipw.c
17695 1995-03-26 01:33 millert
17697 * sudo.c, sudo.h: removed ocmnd
17699 1995-03-26 01:19 millert
17701 * sudo.h: no more sudo_realpath() and find_path() changed params
17703 1995-03-26 01:19 millert
17705 * sudo.c: find_path() changed since no more realpath()
17707 1995-03-26 01:18 millert
17709 * parse.yacc: on error, errorlineno is set to the line where the
17710 error occurred added kill_aliases() to free the aliases struct
17711 now clean up in yyerror() so we can reparse cleanly
17713 1995-03-26 01:17 millert
17715 * logging.c: changed to use new find_path()
17717 1995-03-26 01:17 millert
17719 * options.h, parse.c: no more USE_REALPATH
17721 1995-03-26 01:16 millert
17723 * find_path.c: removed all the realpath() stuff
17725 1995-03-26 01:16 millert
17727 * Makefile.in: sudo_realpath.c -> sudo_goodpath.c
17729 1995-03-26 01:12 millert
17731 * visudo.c: now works correctly with utk parser
17733 1995-03-26 00:04 millert
17735 * goodpath.c: Initial revision
17737 1995-03-25 23:23 millert
17739 * sudo_realpath.c: eliminated a compiler warning
17741 1995-03-25 21:56 millert
17743 * sudo.c: elinated compiler warning
17745 1995-03-25 20:40 millert
17747 * sudo_realpath.c: added sudo_goodpath()
17749 1995-03-25 20:40 millert
17751 * sudo.h: added prototype for sudo_goodpath
17753 1995-03-25 20:39 millert
17755 * parse.c: added support for /sys/dir.h
17757 1995-03-25 20:39 millert
17759 * options.h: USE_REALPATH turned off
17761 1995-03-25 20:39 millert
17763 * find_path.c: added calls to sudo_goodpath()
17765 1995-03-25 20:39 millert
17767 * configure.in: added check for dirent.h
17769 1995-03-25 20:38 millert
17771 * config.h.in: added HAVE_DIRENT_H
17773 1995-03-25 19:27 millert
17775 * configure.in: added in linux shadow pass stuff
\ 6
17777 1995-03-24 14:43 millert
17779 * visudo.c: added back host, user, cmnd, parse_error
17781 1995-03-24 14:19 millert
17783 * visudo.c: added in utk changes plus some minor cosmetic changes
17785 1995-03-24 14:17 millert
17787 * sudo.c, sudo_realpath.c: added void casts for printf's
17789 1995-03-24 14:17 millert
17791 * options.h: added a define of USE_REALPATH
17793 1995-03-24 14:17 millert
17795 * configure.in: there is no more visudoers/Makefile
17797 1995-03-24 14:16 millert
17799 * Makefile.in: added in utk changes (visudo is now built from the
17802 1995-03-24 14:15 millert
17804 * find_path.c: added (void) casts to printf's
17806 1995-03-23 22:32 millert
17808 * parse.c, parse.lex, parse.yacc, sudo.h, sudo_realpath.c: merged
17811 1995-03-22 23:13 millert
17813 * find_path.c: now check to see that what we are trying to run is a
17814 file (or a link to a file, we do a stat(2) so there is no diff)
17816 1995-03-13 15:56 millert
17820 1995-03-13 15:56 millert
17822 * Makefile.in: aclocal.m4 -> acsite.m4 make realclean updated for
17825 1995-03-13 15:11 millert
17827 * sudo.man: added myself as maintainer
17829 1995-02-16 23:31 millert
17831 * sudo.c: changed setegid -> setgid
17833 1995-02-06 17:43 millert
17835 * configure.in: fixed the test for irix 5.x to skip bad libs
17837 1995-02-06 17:43 millert
17839 * aclocal.m4: now initialize OS and OSREV
17841 1995-01-26 20:52 millert
17843 * configure.in: irix5 changes
17845 1995-01-26 20:28 millert
17847 * configure.in: AC_WITH -> AC_ARG_WITH changes other misc changes
17848 for autoconf 2.1 compatibility
17850 1995-01-18 19:49 millert
17852 * visudo.c: use YY_NEW_FILE, not yyrestart since OSF flex doesn't
17853 do the righ thing wrt yyrestart (grrrr)
17855 1995-01-16 18:44 millert
17857 * Makefile.in: added visudoers/compat.h to DISTFILES
17859 1995-01-16 17:01 millert
17861 * configure.in: fixed an echo
17863 1995-01-16 16:36 millert
17865 * sudo.c: added ocmnd declaration adjusted for find_path()'s new
17868 1995-01-16 16:35 millert
17870 * sudo.h: added ocmnd extern adjusted find_path() prototype
17872 1995-01-16 16:34 millert
17874 * parse.c: cmndcmp() now takes 3 arguments and checks against the
17875 qualified as well as the unqualified pathname. more code that
17876 should use cmndcmp() but did not, now does
17878 1995-01-16 16:34 millert
17880 * options.h: added to a comment
17882 1995-01-16 16:33 millert
17884 * logging.c: changed to use new find_path() parameter passing
17886 1995-01-16 16:32 millert
17888 * find_path.c: find_path() now takes 2 copyout parameters (one for
17889 the qualified pathname and one for the unqualified pathname).
17890 The third parameter may be NULL.
17892 1995-01-16 16:31 millert
17894 * configure.in: no longer munge pathnames.h
17896 1995-01-16 16:30 millert
17898 * pathnames.h.in: changed _PATH_* to use _SUDO_PATH_* (which are
17899 defined in config.h) as a result, pathnames.h does not need to be
17900 run through configure and the user can override the configured
17903 1995-01-16 16:30 millert
17905 * config.h.in: added _SUDO_PATH_* entries
17907 1995-01-16 16:30 millert
17909 * aclocal.m4: _PATH* -> _SUDO_PATH_*
17911 1995-01-16 16:28 millert
17913 * Makefile.in: updated DISTFILES and HDRS .o's now depend on
17916 1995-01-13 12:52 millert
17918 * compat.h: removed extraneous #endif
17920 1995-01-13 12:48 millert
17922 * aclocal.m4: added SUDO_PROG_MV
17924 1995-01-13 12:47 millert
17926 * configure.in: added SUDO_PROG_MV added riscos and isc os types
17927 took out -DSHORT_MESSAGE from --with-csops since it is now the
17930 1995-01-13 12:46 millert
17932 * sudo.c: move the include of id.h to compat.h now includes
17935 1995-01-13 12:45 millert
17937 * sudo.h: moved compatibility #defines to compat.h
17939 1995-01-13 12:45 millert
17941 * pathnames.h.in: added _PATH_MV
17943 1995-01-13 12:43 millert
17945 * config.h.in: move __P to compat.h
17947 1995-01-13 12:39 millert
17949 * getcwd.c, getwd.c, putenv.c: now includes compat.h
17951 1995-01-13 12:39 millert
17953 * compat.h: Initial revision
17955 1995-01-11 19:11 millert
17957 * sudo.h: pull user-configurable stuff out and put in options.h
17959 1995-01-11 18:43 millert
17961 * check.c, find_path.c, logging.c, parse.c, sudo_realpath.c,
17962 sudo_setenv.c, parse.lex, parse.yacc, visudo.c: now includes
17965 1995-01-11 18:41 millert
17967 * Makefile.in: added visudoers/options.h
17969 1995-01-11 18:40 millert
17971 * options.h, OPTIONS: Initial revision
17973 1995-01-11 18:39 millert
17975 * Makefile.in: added OPTIONS and options.h
17977 1995-01-11 18:36 millert
17979 * logging.c: changed #ifdef's to use LOGGING and
17980 SLOG_SYSLOG/SLOG_FILE
17982 1995-01-11 11:02 millert
17984 * check.c, sudo.h: changed PASSWORD_TIMEOUT to minutes
17986 1994-12-17 18:18 millert
17988 * visudo.c: now only do Editor +line_num if line_num != 0
17990 1994-12-15 21:06 millert
17992 * visudo.c: now use mv if rename(2) fails
17994 1994-12-15 20:32 millert
17996 * BUGS: added a visudo bug
17998 1994-12-15 19:46 millert
18000 * check.c: expanded comment
18002 1994-11-12 18:33 millert
18004 * check.c: fixed user_is_exempt to return 0 if EXEMPTGROUP is not
18007 1994-11-09 19:49 millert
18009 * sudo.c: added mips & isc support
18011 1994-11-09 19:49 millert
18013 * parse.c: added support for non-root owned sudoers file
18015 1994-11-09 19:48 millert
18017 * check.c: added exempt group support
18019 1994-11-09 19:47 millert
18021 * sudo.h: added set_perms() support added SUDOERS_OWNER so can have
18022 non-root own sudoers file added exempt group support added isc
18025 1994-11-09 19:46 millert
18027 * visudo.c: now copy sudoers to temp file via read/write (not
18028 stdio) now chown new sudoers file to SUDOERS_OWNER
18030 1994-11-07 20:40 millert
18032 * configure.in: added skey support
18034 1994-11-07 20:39 millert
18036 * sudo.h: fixed typo added set_perms support added skey support
18037 added seteuid()/setegid() emulation for AIX
18039 1994-11-07 20:38 millert
18041 * sudo.c: be_* -> setperms() now check to make sure sudoers file is
18042 owned by root nread/write by only root
18044 1994-11-07 20:38 millert
18046 * logging.c, parse.c, sudo_realpath.c: be_* -> setperms()
18048 1994-11-07 20:38 millert
18050 * check.c: be_* -> set_perms() added skey support
18052 1994-11-06 18:59 millert
18054 * Makefile.in: ++version
18056 1994-11-06 18:59 millert
18060 1994-10-21 13:16 millert
18062 * sudo.c: now sets IFS
18064 1994-10-21 12:02 millert
18066 * insults.h: fixed typo
18068 1994-10-15 15:48 millert
18070 * config.h.in: added HAVE_SKEY
18072 1994-10-04 13:00 millert
18076 1994-10-04 12:57 millert
18078 * Makefile.in: ++version
18080 1994-10-04 12:57 millert
18084 1994-10-04 12:56 millert
18086 * sudo.c: now bail if ARgv[1] > MAXPATHLEN
18088 1994-10-04 12:56 millert
18090 * configure.in: added function check for tcgetattr(3)
18092 1994-10-04 12:55 millert
18094 * config.h.in: only define HAVE_TERMIOS_H if you have tcgetattr(3)
18096 1994-10-04 12:53 millert
18098 * config.h.in: added check for tcgetattr
18100 1994-09-26 17:38 millert
18104 1994-09-22 13:30 millert
18106 * parse.lex: now only include unistd.h for linux
18108 1994-09-21 14:29 millert
18110 * Makefile.in: added visudo.8 generation
18112 1994-09-21 14:07 millert
18114 * configure.in: added -Wl,-bI:./aixcrypt.exp to aix flags
18116 1994-09-20 19:39 millert
18120 1994-09-20 19:39 millert
18124 1994-09-20 19:38 millert
18126 * README: added mailing list info
18128 1994-09-20 19:37 millert
18130 * parse.yacc: now use sudolineno instead of yylineno fixed bison
18133 1994-09-20 19:37 millert
18135 * configure.in: now use -no_library_replacement for osf don't make
18136 a static binary for hpux >= 9.0
18138 1994-09-20 19:21 millert
18140 * tgetpass.c: added string.h/strings.h inclusion
18142 1994-09-20 19:21 millert
18144 * config.h.in: added ssize_t def
18146 1994-09-20 19:18 millert
18148 * parse.lex: added inclusion of string.h/strings.h
18150 1994-09-20 18:48 millert
18152 * aclocal.m4: fixed uname | sed (needed to quote the '[')
18154 1994-09-20 18:42 millert
18156 * parse.lex: replaced yylineno with sudolineno fixed bison syntax
18159 1994-09-20 18:13 millert
18161 * visudo.c: changed yylineno to sudolineno since yylineno cannot be
18164 1994-09-20 18:10 millert
18168 1994-09-20 17:52 millert
18170 * parse.c: added code to support command listings
18172 1994-09-20 17:36 millert
18174 * sudo.c: added code for -l flag
18176 1994-09-20 17:35 millert
18178 * sudo.man: fixed typo added info for -l flag
18180 1994-09-20 14:45 millert
18182 * configure.in: AC_SSIZE_T -> SUDO_SSIZE_T
18184 1994-09-20 14:45 millert
18186 * aclocal.m4: added SUDO_SSIZE_T
18188 1994-09-20 14:44 millert
18190 * sudo.h: added MODE_LIST
18192 1994-09-20 14:43 millert
18194 * configure.in: added AC_SSIZE_T
18196 1994-09-19 20:53 millert
18198 * find_path.c, sudo_realpath.c: readlink() is now declared as
18201 1994-09-19 20:44 millert
18203 * configure.in: added -laud for OSF c2
18205 1994-09-02 15:55 millert
18207 * config.h.in, parse.lex, parse.yacc, pathnames.h.in, visudo.c,
18208 Makefile.in: changed sudo-bugs.cs.colorado.edu ->
18209 sudo-bugs@cs.colorado.edu
18211 1994-09-02 15:54 millert
18213 * check.c, find_path.c, getcwd.c, getwd.c, insults.h, logging.c,
18214 parse.c, putenv.c, strdup.c, sudo.c, sudo.h, sudo_realpath.c,
18215 sudo_setenv.c, tgetpass.c, version.h: changed
18216 sudo-bugs.cs.colorado.edu -> sudo-bugs@cs.colorado.ed
18218 1994-09-01 15:56 millert
18220 * Makefile.in: ++version
18222 1994-09-01 15:55 millert
18226 1994-09-01 15:55 millert
18228 * logging.c: added host to alertmail messages
18230 1994-09-01 15:55 millert
18232 * CHANGES, TODO: udpated
18234 1994-09-01 15:26 millert
18236 * logging.c: fixed logging problem where mail would not say which
18239 1994-09-01 13:45 millert
18241 * configure.in: added -laud for gcc if osf & c2
18243 1994-09-01 13:39 millert
18245 * check.c: moved set_auth_parameters to sudo.c
18247 1994-09-01 13:38 millert
18249 * sudo.c: added set_auth_parameters for osf
18251 1994-09-01 13:22 millert
18253 * configure.in: cleaned up -static stuff
18255 1994-09-01 13:15 millert
18257 * Makefile.in: ++version
18259 1994-09-01 13:15 millert
18263 1994-09-01 13:15 millert
18265 * sudo.c: changed setenv() to sudo_setenv()
18267 1994-09-01 13:12 millert
18269 * check.c: fixed osf problem
18271 1994-08-31 22:17 millert
18273 * configure.in: added OSF C2 stuff
18275 1994-08-31 22:00 millert
18279 1994-08-31 21:56 millert
18281 * check.c: added osf auth support & removed some extra spaces
18283 1994-08-31 21:52 millert
18285 * INSTALL, SUPPORTED: added osf C2 stuff
18287 1994-08-31 19:52 millert
18289 * TODO: added 2 suggestions
18291 1994-08-31 19:33 millert
18293 * Makefile.in: removed README.v1.3.1 and added VERSION stuff
18295 1994-08-31 18:48 millert
18299 1994-08-30 18:31 millert
18301 * version.h: 1.3.1final
18303 1994-08-30 18:30 millert
18305 * Makefile.in: added HISTORY
18307 1994-08-30 18:30 millert
18309 * sudo.man: mention HISTPRY file
18311 1994-08-30 18:30 millert
18313 * sudo.c: use sizeof instead of a constant in 1 place
18315 1994-08-30 18:30 millert
18317 * parse.yacc: added unistd.h
18319 1994-08-30 18:29 millert
18321 * parse.lex: added unistd.h
18323 1994-08-30 18:27 millert
18327 1994-08-30 18:15 millert
18329 * HISTORY: Initial revision
18331 1994-08-17 12:45 millert
18335 1994-08-17 12:39 millert
18339 1994-08-17 12:36 millert
18341 * sudo_setenv.c: added unistd.h include
18343 1994-08-16 15:46 millert
18345 * sudo.c: added sys/time.h for AIX
18347 1994-08-14 21:22 millert
18349 * configure.in: added check for -lsocket and sys/sockio.h
18351 1994-08-14 21:21 millert
18353 * config.h.in: took out libshadow check and added in sys/sockio.h
18356 1994-08-14 21:21 millert
18358 * sudo.c: now include sockio.h instead of ioctl.h if it exists
18359 "sudo -" now gets a better error message
18361 1994-08-14 20:47 millert
18363 * sample.sudoers: now has a dir and subnet entry
18365 1994-08-13 18:15 millert
18367 * sudo.c: removed if_ether.h
18369 1994-08-13 17:16 millert
18371 * TODO: added an item
18373 1994-08-13 17:15 millert
18375 * sudo.man: added network and ip addresses to man page
18377 1994-08-13 17:09 millert
18379 * sudo.c: no error if can't get interfaces or netmask since
18380 networking may not be in the kernel.
18382 1994-08-13 17:08 millert
18384 * parse.c: nwo check for interfaces == NULL
18386 1994-08-12 21:22 millert
18388 * parse.c: fixed a bug that caused directory specs in a Cmnd_Alias
18389 to fail if the last entry in the spec failed (ie: it was only
18390 looking at the last entry). CLeaned things up by adding the
18391 cmndcmp() function--all neat & tidy
18393 1994-08-12 21:21 millert
18395 * CHANGES: added one
18397 1994-08-11 23:42 millert
18399 * sudo.c: now do two passes to skip bogus interfaces (lo0, etc)
18401 1994-08-11 21:58 millert
18403 * logging.c, sudo_realpath.c, sudo_setenv.c: added ninclude of
18406 1994-08-11 21:58 millert
18408 * check.c, find_path.c, getcwd.c, getwd.c, parse.lex, parse.yacc,
18409 visudo.c: added include of netinet/in.h
18411 1994-08-11 21:57 millert
18415 1994-08-11 21:57 millert
18417 * sudo.h: added interfaces global
18419 1994-08-11 21:56 millert
18421 * parse.c: now uses new interfaces global
18423 1994-08-11 21:56 millert
18425 * sudo.c: now ip addresses are gleaned fw/o dns
18427 1994-08-10 19:21 millert
18429 * sudo.c: added load_ip_addrs() to load the ip_addrs global var
18431 1994-08-10 19:21 millert
18433 * parse.c: added hostcmp() to compare hostnames, ip addrs, and
18436 1994-08-10 19:20 millert
18438 * sudo.h: added ip_addrs def added load_ip_addrs prototype
18440 1994-08-08 16:03 millert
18444 1994-08-08 15:57 millert
18446 * Makefile.in: removed multiple entries in DISTFILES
18448 1994-08-08 13:05 millert
18450 * visudo.c: ansified the !STDC_HEADERS decls
18452 1994-08-08 13:05 millert
18454 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c: don't do
18455 malloc decl if gnuc
18457 1994-08-08 13:04 millert
18459 * sudo.c: can't use getopt(3) since it munges args to the command
18460 to be run as root don't do malloc decl if gnuc
18462 1994-08-08 00:41 millert
18464 * find_path.c, getcwd.c, getwd.c, putenv.c, strdup.c, sudo.c,
18465 sudo_realpath.c, sudo_setenv.c: ansi-fied !STDC_HEADER function
18468 1994-08-08 00:27 millert
18470 * getcwd.c, getwd.c: added missing paren
18472 1994-08-08 00:23 millert
18474 * Makefile.in: added putenv.c to DISTFILES
18476 1994-08-08 00:08 millert
18478 * sudo_setenv.c: added params to func decls when STDC_HEADERS is
18479 not defined now can count on putenv() being there
18481 1994-08-08 00:08 millert
18483 * sudo_realpath.c: took out errno decl since sudo.h does it for us
18484 fixed up a next cc warning added params to func decls when
18485 STDC_HEADERS is not defined
18487 1994-08-08 00:07 millert
18489 * sudo.h: took out environ extern added local declaratio of
18490 putenv() if local version is needed
18492 1994-08-08 00:05 millert
18494 * find_path.c, getcwd.c, getwd.c, strdup.c, sudo.c: added params to
18495 func decls when STDC_HEADERS is not defined
18497 1994-08-08 00:04 millert
18499 * config.h.in: added memcpy check check to see that ansi vs bsd
18500 macros are ntot already defiend before defining (ie: avoid
18503 1994-08-08 00:03 millert
18505 * configure.in: removed fluff setenv check plus check w/ replace
18506 for putenv if also no setenv
18508 1994-08-08 00:01 millert
18510 * putenv.c: Initial revision
18512 1994-08-06 19:19 millert
18514 * sudo_setenv.c: Initial revision
18516 1994-08-06 19:19 millert
18518 * sudo.h: rm'd s realp[ath added sudo_realpath and sudo_setenv
18520 1994-08-06 19:19 millert
18522 * sudo.c: now use sudo_setenvc
18524 1994-08-06 19:18 millert
18526 * configure.in: added puteenv and setenv, removed realpath
18528 1994-08-06 19:18 millert
18530 * config.h.in: added putenv & setenv
18532 1994-08-06 19:18 millert
18534 * Makefile.in: added sudo_setenv
18536 1994-08-06 19:16 millert
18540 1994-08-05 19:43 millert
18542 * configure.in: added MAN_POSTINSTALL and /usr/share/catman for
18545 1994-08-05 19:43 millert
18547 * Makefile.in: added MAN_POSTINSTALL
18549 1994-08-05 19:43 millert
18553 1994-08-05 19:10 millert
18555 * sudo.man: added SUDO_* plus new options
18557 1994-08-05 19:10 millert
18559 * CHANGES: added one
18561 1994-08-05 19:07 millert
18563 * configure.in: took out shadow lib
18565 1994-08-05 18:35 millert
18569 1994-08-05 17:52 millert
18571 * visudo.c: now use yyrestart() if flex now reset yylineno to 0
18573 1994-08-05 17:49 millert
18575 * Makefile.in: support for installing a cat page instead of a man
18578 1994-08-05 17:48 millert
18580 * configure.in: now defines HAVE_FLEX fixed up man stuff so that it
18581 looks for nroff to determine whether or not to install a cat or
18584 1994-08-05 17:48 millert
18586 * config.h.in: added HAVE_FLEX
18588 1994-08-05 16:14 millert
18590 * sudo.c: not set ret to MODE_RUN initially
18592 1994-08-05 16:12 millert
18594 * find_path.c: made command (and therefor cmnd dynamically
18597 1994-08-04 20:25 millert
18601 1994-08-04 20:24 millert
18605 1994-08-04 20:24 millert
18607 * sudo_realpath.c: changed bufs from MAXPATHLEN to MAXPATHLEN+1
18609 1994-08-04 20:24 millert
18611 * sudo.h: added MODE_ removed validate_only and added
18614 1994-08-04 20:22 millert
18616 * sudo.c: usage() now takes an int (exit value) added parse_args()
18617 to parse command line arguments moved call to find_path() from
18618 load_globals to new function load_cmnd() removed validate_only
18619 global -- now use the concept of "modes" added -h and -k options
18621 1994-08-04 20:21 millert
18623 * parse.c: no longer use global validate_only now checks for
18624 command called "validate" removed check for non-fully qualified
18625 commands since that is done by find_path
18627 1994-08-04 20:20 millert
18629 * find_path.c: changed MAXPATHLEN r to MAXPATHLEN+1
18631 1994-08-04 20:17 millert
18633 * find_path.c: fixed off by one error with MAXPATHLEN and fixed a
18636 1994-08-04 20:17 millert
18638 * check.c: check_timestamp no longer runs reminder(), it is implied
18639 in the return val added remove_timestamp()
18641 1994-08-04 20:16 millert
18645 1994-08-04 16:38 millert
18649 1994-08-04 16:38 millert
18651 * sudo_realpath.c: took out old_errno
18653 1994-08-04 16:37 millert
18657 1994-08-03 12:08 millert
18659 * logging.c: moved send_mail to after syslog
18661 1994-08-02 22:41 millert
18663 * sudo.c: now set SUDO_ envariables
18665 1994-08-01 13:40 millert
18669 1994-08-01 13:39 millert
18671 * sudo_realpath.c: now print error if chdir fails
18673 1994-08-01 13:39 millert
18675 * find_path.c: removed an XXX
18677 1994-07-25 20:40 millert
18681 1994-07-25 20:36 millert
18683 * configure.in: no more static binaries for aix
18685 1994-07-25 18:37 millert
18687 * INSTALL: fixed typo
18689 1994-07-25 18:33 millert
18691 * sudo_realpath.c: took out stuff not needed for sudo now does
18692 be_root/be_user itself now uses cwd global
18694 1994-07-25 18:32 millert
18698 1994-07-25 18:31 millert
18700 * logging.c, sudo.c: be_root/be_user is now down in sudo_realpath()
18702 1994-07-25 18:26 millert
18704 * logging.c, sudo.h: now works with 4.2BSD syslog (blech)
18706 1994-07-25 18:25 millert
18708 * find_path.c: now use sudo_realpath()
18710 1994-07-25 18:25 millert
18712 * config.h.in: took out realpth() stuff since we now use
18715 1994-07-25 18:25 millert
18717 * configure.in: ultrix enhanced sec
18719 1994-07-25 18:25 millert
18721 * SUPPORTED: added ultrix enhanced sec.
18723 1994-07-25 18:24 millert
18727 1994-07-25 18:21 millert
18729 * check.c: ultrix enhanced security suport
18731 1994-07-25 18:20 millert
18733 * Makefile.in: added sudo_realpath.c
18735 1994-07-25 18:18 millert
18739 1994-07-25 14:28 millert
18741 * tgetpass.c: increased passwd len to 24 for c2 security
18743 1994-07-25 13:17 millert
18745 * BUGS: updated BUGS
18747 1994-07-15 11:49 millert
18749 * check.c: now use user global var
18751 1994-07-15 11:48 millert
18753 * configure.in: took out -ls
18755 1994-07-14 19:11 millert
18757 * configure.in: added AFS libs
18759 1994-07-14 17:45 millert
18761 * sudo.h: user is now a char * added epasswd
18763 1994-07-14 17:43 millert
18765 * sudo.c: added tzset() to load_globals added epasswd (encrypted
18766 password) global made user dynamically allocated
18768 1994-07-14 17:43 millert
18770 * configure.in: added tzset test
18772 1994-07-14 17:43 millert
18774 * config.h.in: added HAVE_TZSET
18776 1994-07-14 17:42 millert
18778 * check.c: cleaned up encrypted passwd grab somewhat
18780 1994-07-14 12:34 millert
18782 * configure.in: fixed AFS typo
18784 1994-07-14 12:34 millert
18786 * INSTALL: added AFS not
18788 1994-07-14 12:34 millert
18792 1994-07-14 12:33 millert
18794 * logging.c: can now log to both syslog & a file
18796 1994-07-14 12:12 millert
18798 * sudo.h: added BOTH_LOGS
18800 1994-07-14 11:34 millert
18804 1994-07-14 11:32 millert
18806 * configure.in: --with-AFS
18808 1994-07-14 11:32 millert
18810 * config.h.in: added HAVE_AFS
18812 1994-07-14 11:31 millert
18814 * check.c: added afs changes
18816 1994-07-14 11:21 millert
18818 * sudo.h: removed AFS stuff :-)
18820 1994-07-14 11:19 millert
18822 * tgetpass.c: include sys/select for AIX
18824 1994-07-14 11:17 millert
18826 * sudo.h: added AFS
18828 1994-07-14 11:16 millert
18832 1994-07-07 14:45 millert
18834 * SUPPORTED, CHANGES: updated
18836 1994-07-07 14:44 millert
18838 * logging.c: can now have MAILER undefined
18840 1994-07-07 14:37 millert
18842 * INSTALL: new sub-note about MAILER
18844 1994-07-06 23:11 millert
18846 * sudo.man: added blurb about password timeout
18848 1994-07-06 20:52 millert
18850 * configure.in: convex c2 changes
18852 1994-07-06 20:52 millert
18854 * aclocal.m4: took out duplicate define of _CONVEX_SOURCE
18856 1994-07-06 20:51 millert
18858 * Makefile.in: added OSDEFS
18860 1994-07-06 20:46 millert
18862 * config.h.in: added spaces
18864 1994-07-06 20:08 millert
18866 * tgetpass.c: added a goto if fgets fails
18868 1994-07-06 20:08 millert
18870 * sudo.h: use __hpux not hpux convex c2 stuff
18872 1994-07-06 20:08 millert
18874 * sudo.c: use __hpux not hpux
18876 1994-07-06 20:08 millert
18878 * logging.c: convex c2 stuff
18880 1994-07-06 20:07 millert
18882 * config.h.in: define ansi-ish cpp os defines if non-ansi are
18883 defined for hpux & convex
18885 1994-07-06 20:07 millert
18887 * INSTALL: updated to say we support sonvex C2
18889 1994-07-06 20:05 millert
18891 * check.c: added convex c2 support
18893 1994-07-01 12:06 millert
18895 * tgetpass.c: no more ioctl never returns NULL uses fgets() and
18896 select() to timeout
18898 1994-06-29 17:04 millert
18900 * configure.in: things were testing -n "$GCC" instead of -z "$GCC"
18902 1994-06-29 16:39 millert
18904 * tgetpass.c: now works + uses fgets()
18906 1994-06-28 18:25 millert
18908 * tgetpass.c: select doesn't seem to recognize a single '\n' as
18909 input waiting so we can;t use it, sigh.
18911 1994-06-26 16:38 millert
18913 * PORTING: updated tgetpass() blurb
18915 1994-06-26 16:35 millert
18917 * configure.in: added --with-getpass
18919 1994-06-26 16:35 millert
18921 * Makefile.in: added tgetpass stuff
18923 1994-06-26 15:25 millert
18925 * tgetpass.c: now uses stdio
18927 1994-06-26 15:17 millert
18931 1994-06-24 19:48 millert
18933 * PORTING: updated ,.
18935 1994-06-24 19:46 millert
18937 * config.h.in: added USE_GETPASS && HAVE_C2_SECURITY
18939 1994-06-24 19:45 millert
18941 * configure.in: fixed a test aded --with-C2 and --with-tgetpass
18943 1994-06-24 19:45 millert
18945 * check.c: added hpux C2 shit
18947 1994-06-24 19:45 millert
18949 * Makefile.in: took out tgetpass.*
18951 1994-06-24 19:45 millert
18953 * INSTALL: added C2 blurb
18955 1994-06-13 15:54 millert
18957 * configure.in: no termio(s) for ultrix since it is broken
18959 1994-06-13 15:41 millert
18961 * check.c: added a space (yeah, anal)
18963 1994-06-13 15:17 millert
18965 * realpath.c, sudo_realpath.c: fixed it (duh, rtfm)
18967 1994-06-08 14:34 millert
18969 * config.h.in: took out bsd signal stuff for irix
18971 1994-06-08 14:26 millert
18973 * visudo.c: comments in #endif
18975 1994-06-08 14:09 millert
18977 * configure.in: don't define BSD signals for irix
18979 1994-06-08 12:57 millert
18981 * TODO: did some...
18983 1994-06-08 12:57 millert
18987 1994-06-08 12:56 millert
18989 * realpath.c, sudo_realpath.c: took out unneeded code by changing
18990 where a strings was terminated
18992 1994-06-07 19:21 millert
18994 * realpath.c, sudo_realpath.c: fix bug where /dirname would return
18997 1994-06-07 17:40 millert
18999 * sudo.h: move __P to config.h
19001 1994-06-07 17:40 millert
19003 * getcwd.c, getwd.c, realpath.c, sudo_realpath.c: added errno
19006 1994-06-07 17:40 millert
19008 * config.h.in: added __P
19010 1994-06-07 17:21 millert
19012 * config.h.in: added HAVE_FCHDIR
19014 1994-06-07 17:18 millert
19016 * strdup.c: now include stdio
19018 1994-06-07 14:55 millert
19020 * realpath.c, sudo_realpath.c: now works if no fchdir
19022 1994-06-07 14:55 millert
19024 * visudo.c: define SA_RESETHAND to null if not defined
19026 1994-06-07 14:54 millert
19028 * configure.in: added check & replace
19030 1994-06-06 20:05 millert
19032 * configure.in: took out -static for nextstep -- it doesn't work
19034 1994-06-06 19:59 millert
19036 * logging.c: moved #endif to where it belongs
19038 1994-06-06 19:54 millert
19040 * SUPPORTED: correction
19042 1994-06-06 19:42 millert
19044 * configure.in: now checks for strdup realpath getcwd bzero
19046 1994-06-06 19:31 millert
19048 * config.h.in: emulate bzero
19050 1994-06-06 16:57 millert
19052 * visudo.c: added posic signals
19054 1994-06-06 16:57 millert
19056 * tgetpass.c: bzero cast
19058 1994-06-06 16:57 millert
19060 * logging.c: added posix signals
19062 1994-06-06 16:56 millert
19064 * configure.in: removed BROKEN_GETPASS added new srcs toreplace
19067 1994-06-06 16:56 millert
19069 * config.h.in: added posix signal stuff
19071 1994-06-06 16:56 millert
19073 * Makefile.in: added new srcs
19075 1994-06-06 12:53 millert
19077 * visudo.c: updated useag
19079 1994-06-06 12:39 millert
19081 * tgetpass.c: now uses posix signals
19083 1994-06-05 20:17 millert
19085 * PORTING: updated sto reflect major changes
19087 1994-06-05 20:05 millert
19089 * TODO, CHANGES: updated
19091 1994-06-05 20:04 millert
19093 * tgetpass.c: uses sysconf() if available
19095 1994-06-05 20:04 millert
19097 * sudo.h: added PASSWORD_TIMEOUT + prototypes for new functions
19099 1994-06-05 20:04 millert
19101 * realpath.c, sudo_realpath.c: for those w/o this in libc
19103 1994-06-05 20:03 millert
19105 * getcwd.c, getwd.c: Initial revision
19107 1994-06-05 20:03 millert
19109 * find_path.c: rewrote to use realpath(3) - nis now all my code
19111 1994-06-05 20:02 millert
19113 * config.h.in: added HAVE_REALPATH
19115 1994-06-05 20:02 millert
19117 * check.c: now use tgetpass
19119 1994-06-05 20:02 millert
19121 * Makefile.in: added LIBOBJS use tgetpass.c
19123 1994-06-05 18:55 millert
19125 * tgetpass.c: works now :-)
19127 1994-06-05 18:27 millert
19129 * tgetpass.c: Initial revision
19131 1994-06-05 17:17 millert
19133 * pathnames.h.in: added /dev/tty
19135 1994-06-04 17:12 millert
19137 * version.h: incremented
19139 1994-06-04 15:29 millert
19141 * sudo.c: always use getcwd
19143 1994-06-04 14:49 millert
19145 * config.h.in: added check for getwd
19147 1994-06-04 14:48 millert
19149 * configure.in: replace strdup & realpath & getcwd if missing
19151 1994-06-04 14:47 millert
19153 * pathnames.h.in: added _PATH_PWD
19155 1994-06-04 14:46 millert
19157 * aclocal.m4: added SUDO_PROG_PWD
19159 1994-06-04 14:37 millert
19161 * realpath.c, sudo_realpath.c, strdup.c: Initial revision
19163 1994-06-03 11:31 millert
19165 * configure.in: quoted quare brackets
19167 1994-06-02 17:49 millert
19169 * sudo.c: no need to strdup() a constant
19171 1994-06-02 15:45 millert
19175 1994-06-02 15:44 millert
19177 * sudo.man: added validate
19179 1994-06-02 15:42 millert
19181 * sudo.c: added -v to usage
19183 1994-06-02 15:41 millert
19185 * parse.c, sudo.c, sudo.h: added validate_only stuff
19187 1994-05-29 21:29 millert
19189 * configure.in: now finds sed
19191 1994-05-29 21:28 millert
19193 * aclocal.m4: $OSREV is now an int
19195 1994-05-29 19:13 millert
19197 * configure.in: added mtxinu to caser
19199 1994-05-29 18:37 millert
19201 * sudo.h: added EXEC macro
19203 1994-05-29 18:36 millert
19205 * sudo.c: now use the EXEC nmacro now only do a gethostbyname() if
19208 1994-05-29 18:36 millert
19210 * logging.c: changed mail_argv[] def now use EXEC() macro
19212 1994-05-29 18:35 millert
19214 * check.c: took out crypt() definition
19216 1994-05-29 17:23 millert
19218 * version.h: upped the version
19220 1994-05-29 15:52 millert
19222 * configure.in: always look for -lnsl
19224 1994-05-29 15:29 millert
19226 * aclocal.m4: added an echo
19228 1994-05-29 15:25 millert
19230 * sudo.h: SHORT_MESSAGE is now the default
19232 1994-05-29 15:18 millert
19234 * config.h.in: fixed typo
19236 1994-05-29 01:29 millert
19238 * configure.in: added missing AC_DEFINE(SVR4) for solaris
19240 1994-05-28 20:42 millert
19242 * sudo.man: documented the -v flag
19244 1994-05-28 20:34 millert
19246 * SUPPORTED: updated
19248 1994-05-28 20:31 millert
19250 * check.c: proto-ized crypt()
19252 1994-05-28 20:28 millert
19254 * config.h.in: added LIBSHADOW undef
19256 1994-05-28 20:18 millert
19258 * configure.in: nwo set OS to be lowercase
19260 1994-05-28 19:36 millert
19262 * configure.in: now use SUDO_OSTYPE to set $OS
19264 1994-05-28 19:36 millert
19266 * aclocal.m4: now use uname to determine os
19268 1994-05-28 16:23 millert
19270 * visudo.c: added prototypes & moved sig handler around
19272 1994-05-28 15:13 millert
19274 * sudo.h: added prototyppes
19276 1994-05-28 15:13 millert
19278 * parse.c: added comment
19280 1994-05-28 15:12 millert
19282 * config.h.in: nwo use _BSD_SIGNALS not _BSD_COMPAT
19284 1994-05-28 15:11 millert
19286 * check.c, logging.c, sudo.c: added prototypes
19288 1994-05-28 15:11 millert
19290 * aixcrypt.exp: Initial revision
19292 1994-05-28 15:11 millert
19294 * Makefile.in: added aixcrypt.exp
19296 1994-05-28 13:21 millert
19298 * parse.lex, parse.yacc: moved config.h to top of includes
19300 1994-05-25 15:48 millert
19302 * find_path.c: now don't bitch if get EACCESS (treat like EPERM)
19304 1994-05-24 23:08 millert
19306 * visudo.c: added -v flag and usage()
19308 1994-05-24 23:08 millert
19310 * version.h: fixed a typo
19312 1994-05-24 23:08 millert
19314 * sudo.c: cast Argv to a const for exec added -v flag
19316 1994-05-24 23:07 millert
19318 * logging.c: mail_argv is now a const
19320 1994-05-24 23:07 millert
19322 * configure.in: only set RETSIGTYPE if it is not set already
19324 1994-05-24 23:07 millert
19326 * aclocal.m4: now defines & STDC_HEADERS for Irix
19328 1994-05-24 23:07 millert
19330 * Makefile.in: added version.h
19332 1994-05-24 21:25 millert
19334 * insults.h, sudo.h: prevent multiple inclusion
19336 1994-05-24 21:20 millert
19338 * version.h: Initial revision
19340 1994-05-24 21:09 millert
19342 * parse.lex, parse.yacc: now includes config.h
19344 1994-05-24 20:54 millert
19346 * aclocal.m4: now talks about sunos 4.x
19348 1994-05-24 20:23 millert
19350 * visudo.c: calls to Exit now pass an arg
19352 1994-05-24 18:00 millert
19354 * visudo.c: signal handler now takes an int argument
19356 1994-05-24 18:00 millert
19360 1994-05-24 17:44 millert
19362 * sudo.c: ok, the getcwd() is now *really* done as the user
19364 1994-05-24 17:44 millert
19366 * configure.in: changed AIX STATIC_FLAGS
19368 1994-05-24 16:27 millert
19370 * aclocal.m4: solaris now defines SVR4
19372 1994-05-24 16:18 millert
19374 * sudo.h: added cwd and fixed stupid core dump that makes no sense.
19377 1994-05-24 16:18 millert
19379 * sudo.c: moved getcwd stuff into load_globals
19381 1994-05-24 16:18 millert
19383 * parse.c: took out externs that are in suod.h
19385 1994-05-24 16:18 millert
19387 * logging.c: moved cwd into load_globals
19389 1994-05-24 16:17 millert
19391 * find_path.c: moved cwd stuff
19393 1994-05-24 15:55 millert
19395 * Makefile.in: fixed make distclean & realclean
19397 1994-05-24 12:51 millert
19401 1994-05-24 12:51 millert
19403 * CHANGES: added solaris changes
19405 1994-05-24 12:51 millert
19407 * aclocal.m4: added solaris changes, need to rework
19409 1994-05-24 12:50 millert
19411 * configure.in: cleaned up for solaris
19413 1994-05-24 12:13 millert
19415 * logging.c: reinstall reapchild signal handler for non-bsd signals
19417 1994-05-24 12:03 millert
19419 * sudo.h: took out getdtablesize() emulation for HP-UX (no longer
19422 1994-05-24 12:03 millert
19424 * sudo.c: support for HAVE_SYSCONF
19426 1994-05-24 12:02 millert
19428 * visudo.c: added <fcntl.h> for solaris & reorg'd the includes +
19429 minor prettying up /
19431 1994-05-23 20:26 millert
19433 * config.h.in: added HAVE_SYSCONF
19435 1994-05-16 18:57 millert
19437 * configure.in: now tells you what os you are running /.
19439 1994-05-16 18:56 millert
19441 * aclocal.m4: took out extra ','
19443 1994-05-14 17:56 millert
19445 * config.h.in: added _BSD_COMPAT
19447 1994-05-14 17:56 millert
19449 * aclocal.m4: fixed for irix5
19451 1994-05-14 17:55 millert
19455 1994-05-14 17:27 millert
19457 * sudo.c: uid seinitialized to -2
19459 1994-04-28 12:36 millert
19461 * sudo.c: now removes LIBPATH for AIX
19463 1994-03-12 20:41 millert
19465 * configure.in: now uses ufc if it finds it
19467 1994-03-12 17:42 millert
19469 * sudo.h: no longer define yyval & yylval since yacc does it
19471 1994-03-12 17:42 millert
19473 * parse.lex: now defines yylval as extenr
19475 1994-03-12 17:41 millert
19477 * configure.in: BROKEN_GETPASS is now an OPTION
19479 1994-03-12 17:41 millert
19481 * config.h.in: took out BROKEN_GETPASS
19483 1994-03-12 17:20 millert
19485 * Makefile.in: took out big comment
19487 1994-03-12 16:24 millert
19491 1994-03-12 16:20 millert
19493 * Makefile.in: took out README.beta
19495 1994-03-12 16:19 millert
19497 * SUPPORTED: Initial revision
19499 1994-03-12 16:19 millert
19501 * INSTALL: now reference SUPPORTED .,
19503 1994-03-12 16:17 millert
19505 * config.h.in: now check for convex OR __convex__
19507 1994-03-12 16:16 millert
19509 * aclocal.m4: now check for convex or __convex__
19511 1994-03-12 16:15 millert
19513 * Makefile.in: added dist target
19515 1994-03-12 15:19 millert
19517 * aclocal.m4: use __convex__
19519 1994-03-12 14:33 millert
19521 * find_path.c: now use _S_* stat stuff to be ansi-like
19523 1994-03-12 14:11 millert
19525 * INSTALL: updated for configure directions
19527 1994-03-12 14:05 millert
19529 * Makefile.in: distclean now removes config.h and pathnames.h
19531 1994-03-12 14:03 millert
19535 1994-03-12 14:00 millert
19537 * TODO: fixed typoe
19539 1994-03-12 13:57 millert
19541 * Makefile.in, visudo.c: updated version
19543 1994-03-12 13:57 millert
19545 * config.h.in, pathnames.h.in: added copyright header
19547 1994-03-12 13:55 millert
19549 * check.c, find_path.c, insults.h, logging.c, parse.c, parse.lex,
19550 parse.yacc, sudo.c, sudo.h: udpated version
19552 1994-03-12 13:39 millert
19554 * visudo.c: udpated to use configure + pathnames.h
19556 1994-03-12 13:37 millert
19558 * Makefile.in, config.h.in, configure.in, aclocal.m4: updated
19560 1994-03-12 13:37 millert
19562 * sudo.h: now works with configure
19564 1994-03-12 13:36 millert
19566 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c:
19567 updated to work with configure + pathnames.h
19569 1994-03-12 10:40 millert
19571 * Makefile.in: added LEXLIB
19573 1994-03-10 03:18 millert
19575 * COPYING: updated gnu general licence to versio 2
19577 1994-03-10 02:44 millert
19579 * pathnames.h.in, config.h.in: Initial revision
19581 1994-03-10 01:43 millert
19583 * sudo.h: changed to work with configure
19585 1994-03-09 18:51 millert
19587 * Makefile.in, aclocal.m4, configure.in: Initial revision
19589 1994-03-09 17:36 millert
19591 * visudo.c: now uses defines used by configure
19593 1994-03-01 16:31 millert
19595 * find_path.c: sudo won't bitch about EPERM now, for real
19597 1994-02-28 00:36 millert
19599 * logging.c: renamed exec_argv to eliminate a libc name clash with
19602 1994-02-28 00:28 millert
19604 * CHANGES: corrected
19606 1994-02-28 00:27 millert
19608 * logging.c, sudo.c, sudo.h: execve -> execv
19610 1994-02-27 23:27 millert
19614 1994-02-27 23:19 millert
19616 * PORTING: added 2 mroe items
19618 1994-02-27 23:12 millert
19622 1994-02-27 23:11 millert
19624 * sudo.h: added UMASK and mode_t declaration
19626 1994-02-27 23:11 millert
19628 * sudo.c: added UMASK
19630 1994-02-27 20:55 millert
19632 * logging.c: now opens log file with mode 077
19634 1994-02-27 20:55 millert
19636 * check.c: saved current umask ans restores it
19638 1994-02-27 20:36 millert
19640 * sudo.h: added MAXLOGFILELEN
19642 1994-02-27 20:35 millert
19644 * logging.c: split long log lines. FOr syslog, split into multiple
19645 entries, for a log file, indent the extra for readability
19647 1994-02-27 17:22 millert
19649 * CHANGES: added changes
19651 1994-02-27 17:18 millert
19653 * sudo.h: MAXLOGLEN & MAXSYSLOGLEN are now different (as they
19656 1994-02-25 16:04 millert
19658 * TODO: added input from Brett M Hogden <hogden@rge.com>
19660 1994-02-16 13:35 millert
19662 * sudo.c: added rmenv() to remove stuff from environ. can now uses
19663 execvp() OR execve() becuase of this.
19665 1994-02-16 13:35 millert
19667 * logging.c: now uses execvp() OR execve()
19669 1994-02-16 13:31 millert
19671 * sudo.h: added USE_EXECVE
19673 1994-02-16 13:27 millert
19675 * sudo.h: added environ
19677 1994-02-16 12:53 millert
19679 * find_path.c: now ignore EPERM
19681 1994-02-15 23:52 millert
19683 * sudo.h: moved some func decls out of sudo.h and into sudo.c as
19686 1994-02-15 23:52 millert
19690 1994-02-15 23:40 millert
19692 * sudo.h: took out Envp
19694 1994-02-14 12:28 millert
19696 * BUGS: Initial revision
19698 1994-02-10 14:29 millert
19700 * sudo.c, sudo.h, CHANGES: added SECURE_PATH
19702 1994-02-10 14:05 millert
19704 * sudo.h: added SECURE_PATH
19706 1994-02-10 13:50 millert
19708 * INSTALL: added sample.sudoers note
19710 1994-02-10 13:47 millert
19712 * sudoers: Initial revision
19714 1994-02-09 14:54 millert
19716 * find_path.c: fixed typo
19718 1994-02-08 23:06 millert
19720 * PORTING: took out SAVED_UID garbage
19722 1994-02-08 22:55 millert
19724 * INSTALL: mentioned HAL
19726 1994-02-08 22:50 millert
19728 * sudo.h: added HAL line
19730 1994-02-08 22:48 millert
19732 * insults.h: added HAL insults
19734 1994-02-08 22:48 millert
19738 1994-02-08 22:02 millert
19740 * logging.c: more verbose error if mailer not found
19742 1994-02-08 22:02 millert
19744 * check.c: now do getpwent as root for soem shadow password systems
19747 1994-02-08 13:22 millert
19749 * sudo.h: took out SAVED_UID garbade
19751 1994-02-08 13:21 millert
19753 * sudo.c: took out SAVED_UID garbage since it don't work
19755 1994-02-06 17:43 millert
19759 1994-02-06 17:40 millert
19761 * insults.h: added a missing space :-)
19763 1994-02-05 19:48 millert
19765 * sudo.c, sudo.h: took out multimax cruft
19767 1994-02-05 19:30 millert
19769 * INSTALL: minor update
19771 1994-02-05 19:30 millert
19773 * PORTING: finished
19775 1994-02-05 19:19 millert
19777 * sudo.c: fixed a typo + indentation
19779 1994-02-05 18:43 millert
19781 * sudo.h: took outumoved some defines to the config file ,. ,.
19783 1994-02-05 15:17 millert
19785 * PORTING: Initial revision
19787 1994-02-05 15:17 millert
19791 1994-02-05 15:16 millert
19793 * sudo.h: added HAS_SAVED_UID
19795 1994-02-05 15:16 millert
19797 * sudo.c: put back AIX cruft
19799 1994-02-03 00:44 millert
19801 * sudo.c: aix changes
19803 1994-02-02 01:31 millert
19807 1994-02-02 01:30 millert
19809 * check.c, logging.c, parse.c, sudo.c, sudo.h: now is only root
19812 1994-02-01 22:21 millert
19814 * check.c: added missing %s\n
19816 1994-01-31 02:06 millert
19818 * install-sh: Initial revision
19820 1994-01-31 01:58 millert
19822 * CHANGES, TODO: updated
19824 1994-01-31 01:56 millert
19826 * sudo.c: now removed _RLD_* for alphas
19828 1994-01-31 01:50 millert
19830 * INSTALL: updated for new config scheme
19832 1994-01-30 19:42 millert
19834 * find_path.c: more verbose eror messages
19836 1994-01-27 14:08 millert
19838 * TODO: now have solaris
19840 1994-01-27 14:07 millert
19842 * sudo.h: define __svr4__ for SOLARIS
19844 1994-01-27 14:07 millert
19846 * check.c: added svr4 junk for shadow pws for solaris 2.x
19848 1994-01-27 13:19 millert
19850 * check.c, sudo.c: took out setuid(0) and setreuid(udi) garbage.
19851 Its not needed since we start out setuid with the correct perms.
19853 1994-01-26 19:51 millert
19855 * check.c, sudo.c, sudo.h: now use setreuid()
19857 1994-01-26 18:58 millert
19859 * sudo.man: revised AUTHORS secrtion & added ENV_EDITOR stuff to
19862 1994-01-26 18:52 millert
19864 * visudo.c: now uses ENV_EDITOR if you want to use the EDITOR envar
19866 1994-01-26 18:52 millert
19868 * sudo.h: now uses ENV_EDITOR if you want to use the EDITOR envar
19871 1993-12-07 01:33 millert
19873 * README: minor update + spell fix
19875 1993-12-07 01:33 millert
19877 * INSTALL: rewrote most of this
19879 1993-12-07 01:13 millert
19881 * sudo.h: added all options that are in the Makefile
19883 1993-12-07 00:23 millert
19885 * getpass.c: now use USE_TERMIO #define for sgi & hpux
19887 1993-12-06 23:19 millert
19889 * TODO: todo: posix sigs
19891 1993-12-06 01:12 millert
19893 * check.c, find_path.c: always include strings.h
19895 1993-12-05 20:34 millert
19897 * visudo.c: added STATICEDITOR
19899 1993-12-05 20:30 millert
19901 * sudo.h: sgi has vi in /usr/bin too
19903 1993-12-05 20:23 millert
19905 * sudo.man: added VISUAL
19907 1993-12-02 22:20 millert
19909 * sudo.h: sue /usr/bin/vi on some systems
19911 1993-12-02 22:19 millert
19913 * sudo.c: fixed warning (include strings.h)
19915 1993-12-02 22:06 millert
19917 * sudo.man: added John_Rouillard@dl5000.bc.edu's changes (new
19920 1993-12-02 21:38 millert
19922 * CHANGES: changes from John_Rouillard@dl5000.bc.edu
19924 1993-12-02 21:35 millert
19926 * visudo.c: added EDITOR envar
19928 1993-12-02 21:34 millert
19930 * check.c, find_path.c, parse.c, sudo.c: added patches from
19931 John_Rouillard directory spec uses EDITOR
19933 1993-12-01 19:32 millert
19935 * getpass.c: added flush for hpux
19937 1993-11-30 13:37 millert
19939 * sudo.c: no longer assume malloc returns a char *
19941 1993-11-29 20:35 millert
19943 * sudo.c: alpha change to remove LD_-like thing fixed SHLIB_PATH
19944 stuff -- now gets removed correctly
19946 1993-11-29 19:31 millert
19948 * sudo.h: added STD_HEADERS macro
19950 1993-11-29 19:14 millert
19952 * sudo.c: now uses STD_HEADERS macor for ansi
19954 1993-11-29 19:14 millert
19956 * find_path.c: now uses STD_HEADERS macro
19958 1993-11-29 19:13 millert
19960 * check.c: niceties for C compiler bitches -- no real change
19962 1993-11-29 13:04 millert
19964 * visudo.c: now doesn't fclose a file never opened.
19966 1993-11-28 16:35 millert
19968 * sudo.man: added visudo line
19970 1993-11-28 16:31 millert
19972 * sudo.man: added error stuff added me in there...
19974 1993-11-28 03:12 millert
19976 * CHANGES: noted insults
19978 1993-11-28 03:01 millert
19980 * INSTALL: added blurb about reading stuff
19982 1993-11-28 03:00 millert
19984 * sudo.h: added insults
19986 1993-11-28 03:00 millert
19988 * insults.h: corrected somments and removed newlines
19990 1993-11-28 03:00 millert
19992 * check.c: now uses insults
19994 1993-11-28 02:45 millert
19996 * insults.h: Initial revision
19998 1993-11-27 19:46 millert
20000 * INSTALL: added dec syslog note
20002 1993-11-27 19:25 millert
20004 * sample.sudoers: added real stuff in there
20006 1993-11-27 19:24 millert
20008 * TODO: added a todo
20010 1993-11-27 19:10 millert
20014 1993-11-27 18:59 millert
20016 * sample.sudoers: Initial revision
20018 1993-11-27 18:59 millert
20020 * sudo.man: updated with changes
20022 1993-11-27 18:52 millert
20024 * sudo.man: Initial revision
20026 1993-11-27 18:48 millert
20028 * CHANGES, COPYING, INSTALL, README, TODO, indent.pro: Initial
20031 1993-11-27 18:46 millert
20033 * visudo.c: updated version number and took out jeff's old addr
20034 since it is no good
20036 1993-11-27 18:42 millert
20038 * sudo.h, check.c, find_path.c, logging.c, parse.c, parse.lex,
20039 parse.yacc, sudo.c: updated version number and took out jeff's
20040 email (since it is invalid)
20042 1993-10-28 09:36 millert
20044 * check.c: added fflush()
20046 1993-10-22 20:46 millert
20048 * find_path.c: now return NULL instead pf
\b\bof exiting for
20049 nopn
\b\bn-fatal errors
20051 1993-10-21 16:57 millert
20053 * check.c: new banner
20055 1993-10-21 16:42 millert
20057 * parse.lex: now sudo.h gets included first
20059 1993-10-17 20:31 millert
20061 * parse.lex: now can use flex
20063 1993-10-17 20:31 millert
20065 * sudo.h: linux patch
20067 1993-10-17 20:30 millert
20069 * sudo.c: hpux 9 fix, removes SHLIB_PATH linux patch
20071 1993-10-17 20:30 millert
20073 * check.c: linux diff
20075 1993-10-15 16:03 millert
20077 * find_path.c: stat now ignores EINVAL
20079 1993-10-05 21:48 millert
20081 * find_path.c, sudo.c: now declare strdup as extern
20083 1993-10-04 15:23 millert
20085 * visudo.c: reformatted with indent + by hand
20087 1993-10-04 15:10 millert
20089 * check.c, find_path.c, getpass.c, logging.c, parse.c, sudo.c,
20090 sudo.h: used indent to "fix" coding style
20092 1993-10-03 20:12 millert
20094 * find_path.c: now checks '.' or '.' or '' in PATH -- but does it
20095 LAST should maybe move the code that does this into the loop
20096 body. makes it messier tho. hmmm.
20098 1993-09-08 11:53 millert
20100 * find_path.c: redid the fix for non-executable files in an easier
20101 to read way plus some minor aethetic changes
20103 1993-09-08 11:39 millert
20105 * find_path.c: fixed bug with non-executable tings of same name in
20106 path introduced by checkig errno after stat(2).
20108 1993-09-05 10:02 millert
20110 * sudo.c: fixed off by one error
20112 1993-09-05 09:55 millert
20114 * find_path.c: now handles decending below '/' correctly
20116 1993-09-05 08:35 millert
20118 * sudo.c: now actually builds Envp instead of munging envp
20120 1993-09-04 15:42 millert
20122 * parse.yacc: now includes sys/param.h
20124 1993-09-04 15:41 millert
20126 * visudo.c: now includes sys/param.h
20128 1993-09-04 15:30 millert
20130 * sudo.h: fixed ifndef -> ifdef
20132 1993-09-04 15:19 millert
20134 * qualify.c: make more like find_path.c
20136 1993-09-04 15:18 millert
20138 * find_path.c: rewritten by millert
20140 1993-09-04 15:17 millert
20142 * sudo.h: fixed MAXCOMMANDLENGTH now uses USE_CWD and NEED_STRDUP
20143 added info about new defines in the comment
20145 1993-09-04 15:15 millert
20147 * logging.c: now uses USE_CWD
20149 1993-09-04 14:10 millert
20151 * sudo.h: added delc for clean_envp() and Envp
20153 1993-09-04 14:09 millert
20155 * sudo.c: now rips LD_* env vars out of envp and passed sanitized
20158 1993-09-04 14:09 millert
20160 * logging.c: now uses execve()
20162 1993-09-04 14:08 millert
20164 * find_path.c: ENOTDIR is ok now too (in case part of the path is
20167 1993-09-04 08:17 millert
20169 * qualify.c: now works correctly (ttaltotal rewrite)
20171 1993-09-04 07:59 millert
20173 * parse.lex: now includes sys/param.h didn't match trailing / --
20174 fix from rouilj@cs.umb.edu
20176 1993-06-11 18:04 millert
20178 * sudo.c: moved around the #ifndef _AIX
20180 1993-06-11 18:03 millert
20182 * check.c, logging.c, parse.c: Initial revision
20184 1993-03-20 07:57 millert
20186 * qualify.c: Initial revision
20188 1993-03-13 15:09 millert
20190 * find_path.c: now works if you do sudo bin/test
20192 1993-03-13 14:20 millert
20194 * find_path.c: works
20196 1993-03-02 18:28 millert
20198 * sudo.h: Initial revision
20200 1993-03-02 11:35 millert
20202 * visudo.c: Initial revision
20204 1993-03-02 11:32 millert
20206 * parse.lex, parse.yacc: Initial revision
20208 1993-02-16 13:24 millert
20210 * sudo.c: took out errno.h
20212 1993-02-16 13:22 millert
20214 * sudo.c: now spews error if exec fails and exits with -1
20216 1993-02-16 12:07 millert
20218 * sudo.c: Initial revision
20220 1993-02-15 22:27 millert
20222 * find_path.c: now only execs files with (an) executable bit set.
20224 1993-02-15 22:01 millert
20226 * find_path.c: Initial revision
20228 1993-02-15 14:32 millert
20230 * getpass.c: added nice comment
20232 1993-02-15 14:19 millert
20234 * getpass.c: now works on sgi's
20236 1993-02-15 13:57 millert
20238 * getpass.c: Initial revision